diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..6c1a0bc5
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,7 @@
+# Default owners for everything
+* @redhat-data-and-ai/template-ui-maintainers
+
+# CI and infrastructure
+.github/ @redhat-data-and-ai/template-ui-maintainers
+Containerfile @redhat-data-and-ai/template-ui-maintainers
+deployment/ @redhat-data-and-ai/template-ui-maintainers
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
new file mode 100644
index 00000000..afeb4b32
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -0,0 +1,67 @@
+name: Bug Report
+description: Report a bug or unexpected behavior
+labels: ["bug", "triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a bug. Please fill in the details below so we can reproduce and fix it.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A clear description of the bug.
+      placeholder: What happened?
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: Minimal steps to trigger the issue.
+      placeholder: |
+        1. Run `npm run dev`
+        2. Navigate to ...
+        3. Observe ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What should have happened instead?
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: Output of `git describe --tags` or the container image tag.
+      placeholder: v1.2.3 or deep-agent-abc1234
+    validations:
+      required: false
+
+  - type: dropdown
+    id: environment
+    attributes:
+      label: Environment
+      options:
+        - Local (npm run dev)
+        - Container (podman/docker)
+        - OpenShift
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs or error output
+      description: Paste relevant logs or browser console output (redact any secrets).
+      render: shell
+    validations:
+      required: false
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 00000000..d7ab4f60
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/redhat-data-and-ai/template-ui/security/advisories/new
+    about: Report security issues privately via GitHub Security Advisories.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
new file mode 100644
index 00000000..c03049f7
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -0,0 +1,41 @@
+name: Feature Request
+description: Suggest a new feature or improvement
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Describe the feature you'd like and the problem it solves.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What problem does this solve? What's the current pain point?
+      placeholder: I'm always frustrated when ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+      description: How should this work?
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Other approaches you've thought about.
+    validations:
+      required: false
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Links, screenshots, or related issues.
+    validations:
+      required: false
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 00000000..ba8fb8af
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,28 @@
+## What
+
+<!-- One or two sentences: what changed and why. Link the issue. -->
+
+Fixes #
+
+## How
+
+<!-- Describe your approach. Call out non-obvious design decisions, trade-offs, or alternatives you considered. -->
+
+## Testing
+
+<!-- How did you verify this works? -->
+
+- [ ] Unit tests added/updated
+- [ ] Ran locally (`npm run dev`)
+- [ ] Manual verification (describe below if applicable)
+
+## Rollback
+
+<!-- How would you revert this if it breaks production? "Revert the commit" is fine for most changes. -->
+
+## Checklist
+
+- [ ] PR title follows [Conventional Commits](https://www.conventionalcommits.org/) (`feat:`, `fix:`, `ci:`, etc.)
+- [ ] No secrets, credentials, or PII in the diff
+- [ ] No breaking changes (or documented above with a migration path)
+- [ ] Lint and tests pass (`npm run lint && npm run test`)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..aa4a82cd
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,26 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: docker
+    directory: "/"
+    schedule:
+      interval: weekly
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    groups:
+      actions-minor-patch:
+        update-types:
+          - minor
+          - patch
diff --git a/.github/workflows/build-base-image.yml b/.github/workflows/build-base-image.yml
new file mode 100644
index 00000000..0a66c564
--- /dev/null
+++ b/.github/workflows/build-base-image.yml
@@ -0,0 +1,355 @@
+name: Build and Push Base Image
+
+on:
+  push:
+    tags:
+      - '*'
+    branches:
+      - main
+      - deep-agent
+  pull_request:
+    branches: [ main, deep-agent ]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+      - 'tests/**'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  packages: write
+  security-events: write
+  id-token: write
+  attestations: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+
+      - name: Log in to GitHub Container Registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels)
+        if: github.event_name != 'pull_request'
+        id: meta
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=ref,event=tag
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=sha,prefix={{branch}}-,enable=${{ !startsWith(github.ref, 'refs/tags/') }}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+
+      - name: Extract version for deployment package
+        id: version
+        run: |
+          if [[ "${{ github.ref }}" == refs/tags/* ]]; then
+            VERSION="${GITHUB_REF#refs/tags/}"
+          elif [[ "${{ github.ref }}" == refs/pull/* ]]; then
+            VERSION="pr-${{ github.event.pull_request.number }}-${GITHUB_SHA::7}"
+          else
+            VERSION="${GITHUB_REF#refs/heads/}-${GITHUB_SHA::7}"
+          fi
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+          echo "package_name=ui-deployment.zip" >> $GITHUB_OUTPUT
+
+      - name: Build image locally for scanning
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
+        with:
+          context: .
+          file: ./Containerfile
+          push: false
+          load: true
+          tags: scan-target:${{ steps.version.outputs.version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64
+
+      - name: Scan image for vulnerabilities
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
+        with:
+          image-ref: scan-target:${{ steps.version.outputs.version }}
+          format: table
+          severity: CRITICAL,HIGH
+          scanners: vuln
+          trivyignores: .trivyignore
+          exit-code: '0'
+
+      - name: Fail on critical vulnerabilities
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
+        with:
+          image-ref: scan-target:${{ steps.version.outputs.version }}
+          format: table
+          severity: CRITICAL
+          scanners: vuln
+          trivyignores: .trivyignore
+          exit-code: '1'
+
+      - name: Generate Trivy JSON report
+        if: always()
+        continue-on-error: true
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
+        with:
+          image-ref: scan-target:${{ steps.version.outputs.version }}
+          format: json
+          output: trivy-report.json
+          scanners: vuln
+          exit-code: '0'
+
+      - name: Generate SBOM
+        continue-on-error: true
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
+        with:
+          image-ref: scan-target:${{ steps.version.outputs.version }}
+          format: cyclonedx
+          output: sbom.cdx.json
+          scanners: vuln
+          exit-code: '0'
+
+      - name: Upload SBOM
+        if: always() && hashFiles('sbom.cdx.json') != ''
+        continue-on-error: true
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: sbom-${{ steps.version.outputs.version }}
+          path: sbom.cdx.json
+          retention-days: 90
+
+      - name: Generate SARIF report
+        if: always()
+        continue-on-error: true
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
+        with:
+          image-ref: scan-target:${{ steps.version.outputs.version }}
+          format: sarif
+          output: trivy-results.sarif
+          scanners: vuln
+          exit-code: '0'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        if: always() && hashFiles('trivy-results.sarif') != ''
+        continue-on-error: true
+        uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4
+        with:
+          sarif_file: trivy-results.sarif
+
+      - name: Upload Trivy report as artifact
+        if: always() && hashFiles('trivy-results.sarif') != ''
+        continue-on-error: true
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: trivy-report-${{ steps.version.outputs.version }}
+          path: trivy-results.sarif
+          retention-days: 30
+
+      - name: Push multi-platform image
+        if: github.event_name != 'pull_request'
+        id: push
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
+        with:
+          context: .
+          file: ./Containerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64,linux/arm64
+
+      - name: Verify pushed image is pullable
+        if: github.event_name != 'pull_request'
+        run: |
+          docker pull ghcr.io/${{ github.repository }}@${{ steps.push.outputs.digest }}
+          echo "Image pull verified successfully"
+
+      - name: Sign image with cosign
+        if: github.event_name != 'pull_request'
+        id: sign
+        continue-on-error: true
+        run: |
+          for attempt in 1 2 3; do
+            if cosign sign --yes --recursive \
+              ghcr.io/${{ github.repository }}@${{ steps.push.outputs.digest }}; then
+              echo "signed=true" >> $GITHUB_OUTPUT
+              exit 0
+            fi
+            echo "Signing attempt $attempt failed, retrying in 10s..."
+            sleep 10
+          done
+          echo "signed=false" >> $GITHUB_OUTPUT
+          echo "::warning::Image signing failed after 3 attempts. Image was pushed but is unsigned."
+          exit 1
+
+      - name: Verify cosign signature
+        if: github.event_name != 'pull_request' && steps.sign.outputs.signed == 'true'
+        run: |
+          cosign verify \
+            --certificate-identity-regexp="https://github.com/${{ github.repository }}/" \
+            --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
+            ghcr.io/${{ github.repository }}@${{ steps.push.outputs.digest }}
+          echo "Signature verification passed"
+
+      - name: Attest build provenance
+        if: github.event_name != 'pull_request'
+        continue-on-error: true
+        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+        with:
+          subject-name: ghcr.io/${{ github.repository }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
+
+      - name: Create deployment package metadata
+        if: github.event_name != 'pull_request'
+        run: |
+          cat > deployment/release-info.json <<EOF
+          {
+            "version": "${{ steps.version.outputs.version }}",
+            "git_ref": "${{ github.ref }}",
+            "git_sha": "${{ github.sha }}",
+            "build_date": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
+            "container_image": "ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}",
+            "container_digest": "${{ steps.push.outputs.digest }}",
+            "signed": ${{ steps.sign.outputs.signed || false }},
+            "repository": "${{ github.repository }}"
+          }
+          EOF
+          cat deployment/release-info.json
+
+      - name: Create deployment package
+        if: github.event_name != 'pull_request'
+        run: |
+          cd deployment
+          zip -r ../${{ steps.version.outputs.package_name }} . -x "*.git*"
+          cd ..
+          echo "Created package: ${{ steps.version.outputs.package_name }}"
+          ls -lh ${{ steps.version.outputs.package_name }}
+
+      - name: Generate checksums
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name != 'pull_request'
+        run: |
+          FILES="${{ steps.version.outputs.package_name }}"
+          [ -f sbom.cdx.json ] && FILES="$FILES sbom.cdx.json"
+          [ -f trivy-report.json ] && FILES="$FILES trivy-report.json"
+          sha256sum $FILES > SHA256SUMS.txt
+          cat SHA256SUMS.txt
+
+      - name: Collect release artifacts
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name != 'pull_request'
+        id: release-files
+        run: |
+          FILES="${{ steps.version.outputs.package_name }}"
+          FILES="$FILES
+          SHA256SUMS.txt"
+          [ -f sbom.cdx.json ] && FILES="$FILES
+          sbom.cdx.json"
+          [ -f trivy-report.json ] && FILES="$FILES
+          trivy-report.json"
+          echo "files<<RELEASE_EOF" >> $GITHUB_OUTPUT
+          echo "$FILES" >> $GITHUB_OUTPUT
+          echo "RELEASE_EOF" >> $GITHUB_OUTPUT
+
+      - name: Create GitHub Release (for tags only)
+        if: startsWith(github.ref, 'refs/tags/') && github.event_name != 'pull_request'
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
+        with:
+          files: ${{ steps.release-files.outputs.files }}
+          body: |
+            ## Container Image
+
+            ```bash
+            docker pull ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}
+            ```
+
+            **Digest:** `${{ steps.push.outputs.digest }}`
+            **Signed:** ${{ steps.sign.outputs.signed == 'true' && 'Yes' || 'No (signing failed, see workflow logs)' }}
+
+            ## Verify
+
+            ```bash
+            # Verify image signature
+            cosign verify \
+              --certificate-identity-regexp="https://github.com/${{ github.repository }}/" \
+              --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
+              ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}
+
+            # Verify build provenance
+            gh attestation verify \
+              oci://ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }} \
+              --owner ${{ github.repository_owner }}
+
+            # Verify artifact checksums
+            sha256sum -c SHA256SUMS.txt
+            ```
+
+            ## Artifacts
+
+            | File | Description |
+            |------|-------------|
+            | `ui-deployment.zip` | Deployment manifests with release metadata |
+            | `sbom.cdx.json` | CycloneDX software bill of materials |
+            | `trivy-report.json` | Vulnerability scan results |
+            | `SHA256SUMS.txt` | SHA-256 checksums for all release artifacts |
+          draft: false
+          prerelease: ${{ contains(github.ref, 'alpha') || contains(github.ref, 'beta') || contains(github.ref, 'rc') }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload deployment package as artifact (for branch builds)
+        if: "!startsWith(github.ref, 'refs/tags/') && github.event_name != 'pull_request'"
+        continue-on-error: true
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: ${{ steps.version.outputs.package_name }}
+          path: ${{ steps.version.outputs.package_name }}
+          retention-days: 30
+
+      - name: Build summary
+        if: github.event_name != 'pull_request'
+        continue-on-error: true
+        run: |
+          echo "### Base Image Built Successfully!" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version:** \`${{ steps.version.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "**Digest:** \`${{ steps.push.outputs.digest }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "**Signed:** ${{ steps.sign.outputs.signed == 'true' && 'Yes' || 'No' }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Container Image Tags:**" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
+          echo "${{ steps.meta.outputs.tags }}" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Pull command:**" >> $GITHUB_STEP_SUMMARY
+          echo '```bash' >> $GITHUB_STEP_SUMMARY
+          echo "docker pull ghcr.io/${{ github.repository }}@${{ steps.push.outputs.digest }}" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Verify signature:**" >> $GITHUB_STEP_SUMMARY
+          echo '```bash' >> $GITHUB_STEP_SUMMARY
+          echo 'cosign verify \' >> $GITHUB_STEP_SUMMARY
+          echo '  --certificate-identity-regexp="https://github.com/${{ github.repository }}/" \' >> $GITHUB_STEP_SUMMARY
+          echo '  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \' >> $GITHUB_STEP_SUMMARY
+          echo '  ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}' >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 00000000..116cb020
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,76 @@
+name: CI
+
+on:
+  push:
+    branches: [main, deep-agent]
+  pull_request:
+    branches: [main, deep-agent]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
+        with:
+          node-version: "22"
+          cache: "npm"
+      - run: npm ci
+      - run: npm run lint
+
+  unit-test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
+        with:
+          node-version: "22"
+          cache: "npm"
+      - run: npm ci
+      - run: npm run test:coverage
+
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
+        with:
+          node-version: "22"
+          cache: "npm"
+      - run: npm ci
+      - run: npm run build
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: dist
+          path: dist/
+          retention-days: 1
+
+  e2e:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    needs: build
+    container:
+      image: mcr.microsoft.com/playwright:v1.61.1-noble
+    env:
+      CI: "true"
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
+        with:
+          node-version: "22"
+          cache: "npm"
+      - run: npm ci
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: dist
+          path: dist/
+      - run: npx playwright test
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        if: always()
+        with:
+          name: playwright-report
+          path: playwright-report/
+          retention-days: 7
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 00000000..e647ce07
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,25 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [ main, deep-agent ]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    name: Dependency Review
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: Dependency review
+        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4
+        with:
+          fail-on-severity: high
+          comment-summary-in-pr: always
diff --git a/.github/workflows/draft-check.yml b/.github/workflows/draft-check.yml
new file mode 100644
index 00000000..6551acad
--- /dev/null
+++ b/.github/workflows/draft-check.yml
@@ -0,0 +1,18 @@
+name: Draft Check
+
+on:
+  pull_request:
+    branches: [main, deep-agent]
+    types: [opened, synchronize, reopened, ready_for_review, converted_to_draft]
+
+jobs:
+  draft-check:
+    name: Not Draft
+    runs-on: ubuntu-latest
+    timeout-minutes: 1
+    steps:
+      - name: Fail if draft
+        if: github.event.pull_request.draft == true
+        run: |
+          echo "::error::This PR is still in draft. Mark it as ready for review before merging."
+          exit 1
diff --git a/.github/workflows/license-scan.yml b/.github/workflows/license-scan.yml
new file mode 100644
index 00000000..d5a2cf62
--- /dev/null
+++ b/.github/workflows/license-scan.yml
@@ -0,0 +1,37 @@
+name: License Compliance
+
+on:
+  push:
+    branches: [main, deep-agent]
+    paths:
+      - 'package.json'
+      - 'package-lock.json'
+      - 'Containerfile'
+  pull_request:
+    branches: [main, deep-agent]
+    paths:
+      - 'package.json'
+      - 'package-lock.json'
+      - 'Containerfile'
+
+permissions:
+  contents: read
+
+jobs:
+  license-scan:
+    name: License Scan
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: Scan for license violations
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          scanners: license
+          severity: HIGH,CRITICAL
+          exit-code: '1'
+          trivy-config: trivy-license.yaml
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
new file mode 100644
index 00000000..4600c4d6
--- /dev/null
+++ b/.github/workflows/pr-title.yml
@@ -0,0 +1,36 @@
+name: PR Title Lint
+
+on:
+  pull_request:
+    branches: [main, deep-agent]
+    types: [opened, edited, synchronize]
+
+permissions:
+  pull-requests: read
+
+jobs:
+  lint-title:
+    name: Conventional Commit Title
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Validate PR title
+        run: |
+          TITLE="${{ github.event.pull_request.title }}"
+          PATTERN='^(feat|fix|docs|chore|refactor|test|ci|perf|build|style|revert)(\(.+\))?\!?: .+'
+          if echo "$TITLE" | grep -qE "$PATTERN"; then
+            echo "PR title is valid: $TITLE"
+          else
+            echo "::error::PR title does not follow Conventional Commits format."
+            echo ""
+            echo "Expected: <type>(<optional scope>): <description>"
+            echo "Got:      $TITLE"
+            echo ""
+            echo "Valid types: feat, fix, docs, chore, refactor, test, ci, perf, build, style, revert"
+            echo "Examples:"
+            echo "  feat: add streaming response component"
+            echo "  fix(auth): correct token refresh logic"
+            echo "  docs: update configuration section"
+            echo "  feat!: redesign chat interface (breaking change)"
+            exit 1
+          fi
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
new file mode 100644
index 00000000..32c54db8
--- /dev/null
+++ b/.github/workflows/release-please.yml
@@ -0,0 +1,17 @@
+name: Release Please
+
+on:
+  push:
+    branches: [ main ]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
+        with:
+          release-type: node
diff --git a/.github/workflows/require-issue.yml b/.github/workflows/require-issue.yml
new file mode 100644
index 00000000..545307b9
--- /dev/null
+++ b/.github/workflows/require-issue.yml
@@ -0,0 +1,63 @@
+name: Require Linked Issue
+
+on:
+  pull_request:
+    branches: [main, deep-agent]
+    types: [opened, edited, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+
+jobs:
+  check-issue:
+    name: Check Issue Link
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Require linked issue
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        with:
+          script: |
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+            const prNumber = context.payload.pull_request.number;
+            const prAuthor = context.payload.pull_request.user.login;
+
+            const result = await github.graphql(`
+              query($owner: String!, $repo: String!, $pr: Int!) {
+                repository(owner: $owner, name: $repo) {
+                  pullRequest(number: $pr) {
+                    closingIssuesReferences(first: 10) {
+                      nodes {
+                        number
+                        assignees(first: 10) {
+                          nodes { login }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            `, { owner, repo, pr: prNumber });
+
+            const issues = result.repository.pullRequest.closingIssuesReferences.nodes;
+
+            if (issues.length === 0) {
+              core.setFailed(
+                'No linked issue found. Use the Development sidebar to link an issue to this PR.'
+              );
+              return;
+            }
+
+            core.info(`Linked issues: ${issues.map(i => '#' + i.number).join(', ')}`);
+
+            const authorAssigned = issues.some(issue =>
+              issue.assignees.nodes.some(a => a.login === prAuthor)
+            );
+
+            if (!authorAssigned) {
+              const issueList = issues.map(i => '#' + i.number).join(', ');
+              core.setFailed(
+                `PR author @${prAuthor} is not assigned to any linked issue (${issueList}). Assign yourself to the issue first.`
+              );
+            }
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
new file mode 100644
index 00000000..2345260a
--- /dev/null
+++ b/.github/workflows/scorecard.yml
@@ -0,0 +1,37 @@
+name: OpenSSF Scorecard
+
+on:
+  push:
+    branches: [ main ]
+  schedule:
+    - cron: '0 6 * * 1'
+
+permissions: read-all
+
+jobs:
+  analysis:
+    name: Scorecard Analysis
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    permissions:
+      security-events: write
+      id-token: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+
+      - name: Run Scorecard
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          publish_results: true
+
+      - name: Upload Scorecard results to Security tab
+        uses: github/codeql-action/upload-sarif@08d09a53f0f5d694f253bd25732e4429c9e9337f # v3
+        with:
+          sarif_file: results.sarif
diff --git a/.gitignore b/.gitignore
index 7ceb59f8..6de47f90 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,11 @@ dist-ssr
 *.sln
 *.sw?
 .env
+ROADMAP.md
+
+# Playwright
+playwright-report/
+test-results/
+
+# Coverage
+coverage/
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 00000000..d73d1fa5
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,67 @@
+stages:
+  - lint
+  - test
+  - build
+  - e2e
+
+variables:
+  NODE_VERSION: "22"
+
+default:
+  image: node:22-slim
+  cache:
+    key:
+      files:
+        - package-lock.json
+    paths:
+      - node_modules/
+
+.install: &install
+  before_script:
+    - npm ci
+
+lint:
+  stage: lint
+  <<: *install
+  script:
+    - npm run lint
+
+unit-test:
+  stage: test
+  <<: *install
+  script:
+    - npm run test:coverage
+  coverage: '/All files[^|]*\|[^|]*\s+([\d.]+)/'
+  artifacts:
+    when: always
+    reports:
+      coverage_report:
+        coverage_format: cobertura
+        path: coverage/cobertura-coverage.xml
+
+build:
+  stage: build
+  <<: *install
+  script:
+    - npm run build
+  artifacts:
+    paths:
+      - dist/
+    expire_in: 1 hour
+
+e2e:
+  stage: e2e
+  image: mcr.microsoft.com/playwright:v1.61.1-noble
+  needs:
+    - build
+  variables:
+    CI: "true"
+  before_script:
+    - npm ci
+  script:
+    - npx playwright test
+  artifacts:
+    when: always
+    paths:
+      - playwright-report/
+    expire_in: 7 days
diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 00000000..36b40187
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,6 @@
+# tar 7.5.15 ships in the base image's system npm, not our app dependencies.
+# Fix depends on base image update (registry.access.redhat.com/hi/nodejs).
+CVE-2026-59873
+
+# Go stdlib in OPA static binary — fix depends on OPA upstream rebuilding with Go 1.24.13+.
+CVE-2025-68121
diff --git a/Containerfile b/Containerfile
index deb0def0..e3632a7d 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,9 +1,25 @@
-FROM registry.access.redhat.com/ubi10/nodejs-24:10.1
+# Base image for  UI - config loaded from volume mount
+#
+# Expected volume mount:
+#   - /app/config/ui/ (PVC)
+#   - Must contain: settings.yaml
+#
+# Build: podman build -f Containerfile.base -t ai-template-ui:v1.0.0 .
+# Run:   podman run -v /path/to/config:/app/config/ui:ro -e UI_CONFIG_PATH=/app/config/ui/settings.yaml ai-template-ui:v1.0.0
+
+FROM registry.access.redhat.com/hi/nodejs:24.18.0-builder
 
 USER root
 
+ARG OPA_VERSION=1.18.2
+RUN curl -fsSL "https://github.com/open-policy-agent/opa/releases/download/v${OPA_VERSION}/opa_linux_amd64_static" \
+    -o /usr/local/bin/opa && chmod 755 /usr/local/bin/opa
+
 WORKDIR /opt/app-root/src
 
+# UI config is NOT baked in — mount config/ui at /opt/app-root/src/config
+# (compose: ./config:/opt/app-root/src/config:ro; K8s: ConfigMap/PVC).
+
 COPY --chown=1001:0 package*.json ./
 COPY --chown=1001:0 src ./src
 COPY --chown=1001:0 public ./public
@@ -14,10 +30,14 @@ COPY --chown=1001:0 vite-env.d.ts ./
 COPY --chown=1001:0 tsconfig.json ./
 COPY --chown=1001:0 tsconfig.node.json ./
 
+RUN mkdir -p config/ui && chown -R 1001:0 config && chown -R 1001:0 /opt/app-root/src
+
 USER 1001
 
 RUN npm ci && npm run build
 
-EXPOSE 8080
+# Config will be mounted here at runtime from PVC
+# Override UI_CONFIG_PATH in deployment.yaml if using a custom mount location
+ENV UI_CONFIG_PATH=/app/config/ui/settings.yaml
 
 CMD ["node", "dist/server/index.js"]
diff --git a/Makefile b/Makefile
index c3af4e7c..23424a31 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,9 @@
-.PHONY: dev clean local deploy undeploy
+.PHONY: dev clean local local-down container container-down deploy undeploy e2e opa-build
+
+# Detect npm/node path (supports nvm, system install, etc)
+NPM := $(shell command -v npm 2>/dev/null || echo /Users/sodutta/.nvm/versions/node/v24.18.0/bin/npm)
+NODE_DIR := $(dir $(NPM))
+export PATH := $(NODE_DIR):$(PATH)
 
 # OpenShift namespace (can be overridden: make deploy openshift NAMESPACE=my-project)
 NAMESPACE ?= $(shell oc project -q 2>/dev/null)
@@ -19,21 +24,47 @@ install:
 	else \
 		echo ".env file already exists, skipping copy"; \
 	fi
-	@npm ci
+	@$(NPM) ci
+
+opa-check:
+	@which opa > /dev/null || (echo "Error: opa CLI not found. Install from https://www.openpolicyagent.org/docs/latest/#running-opa" && exit 1)
+	opa check config/compliance/
+	@echo "OPA policy syntax OK"
 
 clean:
+	@echo "Stopping containers and removing volumes..."
+	@export PODMAN_COMPOSE_SILENT=true && podman-compose down -v 2>/dev/null || true
+	@pkill -f "node.*dist/server" 2>/dev/null || true
+	@pkill -f "npm.*start" 2>/dev/null || true
 	rm -rf node_modules dist
 
+## Run Playwright e2e tests
+e2e:
+	npm run build
+	npx playwright install chromium --with-deps 2>/dev/null || npx playwright install chromium
+	npx playwright test
+
 dev:
-	npm run dev
+	$(NPM) run dev
 
 local:
-	npm run build
-	npm start
+	@which podman-compose > /dev/null || (echo "Error: podman-compose not found. Please install podman-compose." && exit 1)
+	@echo "Starting Redis..."
+	@export PODMAN_COMPOSE_SILENT=true && podman-compose up -d redis
+	@echo "Waiting for Redis..."
+	@COUNTER=0; until podman exec template-ui-redis redis-cli ping 2>/dev/null | grep -q PONG || [ $$COUNTER -gt 30 ]; do sleep 1; COUNTER=$$((COUNTER + 1)); done; \
+	if [ $$COUNTER -gt 30 ]; then echo "Error: Redis did not become ready on localhost:6380"; exit 1; fi
+	$(NPM) run build
+	PORT=8080 $(NPM) start
+
+local-down:
+	@export PODMAN_COMPOSE_SILENT=true && podman-compose stop redis
 	
 container:
-	export PODMAN_COMPOSE_SILENT=true
-	podman-compose --no-ansi up --build --force-recreate --remove-orphans  --timeout=60
+	@export PODMAN_COMPOSE_SILENT=true && podman-compose --no-ansi up --build --force-recreate --remove-orphans --timeout=60
+
+container-down:
+	@export PODMAN_COMPOSE_SILENT=true && podman-compose down
 
 # Deployment targets
 deploy:
diff --git a/README.md b/README.md
index 2c1ee7f1..5aae4224 100644
--- a/README.md
+++ b/README.md
@@ -36,6 +36,73 @@ A modern React-based frontend application with Fastify backend for interacting w
 
 The application will be available at `http://localhost:5173`
 
+## 🎨 Customizing Branding & Features
+
+Template UI supports runtime configuration for branding (logo, colors, title) and feature flags without code changes. This enables multi-tenancy and per-agent customization.
+
+### Configuration File
+
+Create a `config/ui/settings.yaml` file (optional - defaults are used if not present):
+
+```yaml
+branding:
+  logo_url: "/custom-logo.svg"        # Path to logo image
+  title: "My Custom Agent"            # App title (browser tab + masthead)
+  favicon_url: "/custom-favicon.ico"  # Optional favicon
+  colors:
+    light:                            # Light theme colors
+      primary: "#0066cc"
+      accent: "#a60000"
+      background: "#ffffff"
+      foreground: "#1a1a1a"
+    dark:                             # Dark theme colors
+      primary: "#4dabf7"
+      accent: "#f56e6e"
+      background: "#0a1628"
+      foreground: "#f0f4f8"
+
+features:
+  debug_mode_default: false           # Default for debug mode (users can toggle)
+  memory_enabled_default: true        # Default for memory feature (users can toggle)
+  auth_enabled: true                  # Enable/disable authentication
+
+agent:
+  endpoint: ""                        # Agent API URL (empty = use AGENT_HOST env var)
+  timeout_ms: 30000                   # Request timeout
+  streaming: true                     # Enable SSE streaming
+```
+
+**Example configs** are available in `config/ui/examples/`:
+- `blue-theme.yaml` - Blue color scheme
+- `minimal.yaml` - Minimal configuration with auth disabled
+
+### Environment Variable Overrides
+
+Config values can be overridden via environment variables (takes precedence over YAML):
+
+```bash
+BRANDING_TITLE="Production Agent"
+BRANDING_LOGO_URL="/prod-logo.svg"
+FEATURE_AUTH_ENABLED=true
+AGENT_ENDPOINT=https://prod-agent.example.com
+```
+
+See `env.template` for all available overrides.
+
+### Applying Changes
+
+1. Edit `config/ui/settings.yaml` or set environment variables
+2. Restart the server: `npm start`
+3. Changes are applied immediately (no rebuild needed)
+
+### Validation
+
+The config is validated at startup. Invalid values (e.g., malformed hex colors, missing required fields) will cause the server to fail with a clear error message:
+
+```
+Config validation error: branding.colors.light.primary must be a valid hex color (got 'not-a-color')
+```
+
 ## 📦 Available Scripts
 
 | Command | Description |
diff --git a/compose.yml b/compose.yml
index 7cd52d29..d9667924 100644
--- a/compose.yml
+++ b/compose.yml
@@ -1,6 +1,23 @@
 version: '3.8'
 
 services:
+  redis:
+    image: redis:7-alpine
+    container_name: template-ui-redis
+    command: redis-server --appendonly yes
+    ports:
+      - "6380:6379"
+    volumes:
+      - redis_data:/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+    networks:
+      - template-ui-network
+
   template-ui:
     build:
       context: .
@@ -8,13 +25,33 @@ services:
     container_name: template-ui-app
     ports:
       - "8080:8080"
-    environment:
-      - NODE_ENV=production
     env_file:
       - .env
+    environment:
+      - NODE_ENV=production
+      - PORT=8080
+      - UI_CONFIG_PATH=/opt/app-root/src/config/ui/settings.yaml
+      - REDIS_HOST=redis
+      - REDIS_PORT=6379
+      - AGENT_HOST=http://host.containers.internal:5002
+      - CORS_ORIGIN=http://localhost:8080
+      - SSO_CALLBACK_URL=http://localhost:8080/auth/callback/oidc
+    volumes:
+      - ./config:/opt/app-root/src/config:ro
     restart: unless-stopped
+    depends_on:
+      redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://127.0.0.1:8080/_health"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
     networks:
       - template-ui-network
+    extra_hosts:
+      - "host.containers.internal:host-gateway"
 
 
 networks:
@@ -22,4 +59,5 @@ networks:
     driver: bridge
 
 volumes:
+  redis_data:
   node_modules:
diff --git a/config/compliance/data.json b/config/compliance/data.json
new file mode 100644
index 00000000..842a22d1
--- /dev/null
+++ b/config/compliance/data.json
@@ -0,0 +1,8 @@
+{
+  "approved_auth_providers": [],
+  "internal_endpoint_suffixes": [],
+  "max_session_ttl_days": 0,
+  "restrict_debug_mode": false,
+  "restricted_features": [],
+  "max_rate_limit": 0
+}
diff --git a/config/compliance/policy.rego b/config/compliance/policy.rego
new file mode 100644
index 00000000..d8d2972a
--- /dev/null
+++ b/config/compliance/policy.rego
@@ -0,0 +1,59 @@
+package compliance.ui
+
+import rego.v1
+
+default allow := true
+
+deny contains msg if {
+	input.features.auth_enabled
+	input.platform.opa.approved_auth_providers
+	count(input.platform.opa.approved_auth_providers) > 0
+	not input.auth_provider in input.platform.opa.approved_auth_providers
+	msg := sprintf("auth provider '%s' is not in the approved list %v", [input.auth_provider, input.platform.opa.approved_auth_providers])
+}
+
+deny contains msg if {
+	input.agent.endpoint != ""
+	suffixes := input.platform.opa.internal_endpoint_suffixes
+	count(suffixes) > 0
+	not endpoint_allowed(input.agent.endpoint, suffixes)
+	msg := sprintf("agent endpoint '%s' does not match any approved internal suffix %v", [input.agent.endpoint, suffixes])
+}
+
+deny contains msg if {
+	max_days := input.platform.opa.max_session_ttl_days
+	max_days > 0
+	input.security.session.max_age_days > max_days
+	msg := sprintf("session TTL %d days exceeds maximum allowed %d days", [input.security.session.max_age_days, max_days])
+}
+
+deny contains msg if {
+	input.platform.opa.restrict_debug_mode
+	input.features.debug_mode_default
+	msg := "debug_mode_default cannot be enabled in this environment"
+}
+
+deny contains msg if {
+	restricted := input.platform.opa.restricted_features
+	some feature in restricted
+	input.features[feature]
+	msg := sprintf("feature '%s' is restricted by policy", [feature])
+}
+
+deny contains msg if {
+	max_rate := input.platform.opa.max_rate_limit
+	max_rate > 0
+	input.security.rate_limit.max > max_rate
+	msg := sprintf("rate limit %d exceeds policy maximum %d", [input.security.rate_limit.max, max_rate])
+}
+
+endpoint_allowed(endpoint, suffixes) if {
+	some suffix in suffixes
+	endswith(endpoint, suffix)
+}
+
+allow := false if {
+	count(deny) > 0
+}
+
+violations := deny
diff --git a/config/ui/README.md b/config/ui/README.md
new file mode 100644
index 00000000..4825a223
--- /dev/null
+++ b/config/ui/README.md
@@ -0,0 +1,38 @@
+# Template UI Configuration
+
+Drop a `settings.yaml` file in this directory to configure branding, features, and agent settings without code changes.
+
+The file is optional — if absent, the server uses built-in defaults.
+
+## Schema
+
+```yaml
+branding:
+  logo_url: "/custom-logo.svg"     # Path or URL to logo image
+  title: "My Agent"                # App title (browser tab + masthead)
+  favicon_url: "/favicon.ico"      # Optional favicon (defaults to logo_url if not set)
+  colors:
+    light:
+      primary: "#0066cc"
+      accent: "#a60000"
+      background: "#ffffff"
+      foreground: "#1a1a1a"
+    dark:
+      primary: "#4dabf7"
+      accent: "#f56e6e"
+      background: "#0a1628"
+      foreground: "#f0f4f8"
+
+features:
+  debug_mode_default: false        # Default for debug mode toggle (users can override)
+  auth_enabled: true               # Enable/disable authentication
+
+agent:
+  endpoint: ""                     # Agent API URL (empty = use AGENT_HOST env var)
+  timeout_ms: 30000
+  streaming: true
+```
+
+## Alternative: environment variables
+
+All values can be set via env vars instead, which take precedence over this file. See `env.template` for the full list.
diff --git a/config/ui/settings.yaml b/config/ui/settings.yaml
new file mode 100644
index 00000000..182a5f79
--- /dev/null
+++ b/config/ui/settings.yaml
@@ -0,0 +1,62 @@
+branding:
+  title: "Deep Agent"
+  logo_url: "/dist/frontend/redhat-logo.svg"
+  favicon_url: "/dist/frontend/redhat-logo.svg"
+  colors:
+    light:
+      primary: "#0066cc"
+      accent: "#a60000"
+      background: "#ffffff"
+      foreground: "#1a1a1a"
+    dark:
+      primary: "#4dabf7"
+      accent: "#f56e6e"
+      background: "#0a1628"
+      foreground: "#f0f4f8"
+
+features:
+  debug_mode_default: false
+  # auth_enabled: Controlled via AUTH_ENABLED environment variable (set by agent-engine during deployment)
+
+agent:
+  endpoint: ""
+  timeout_ms: 30000
+  streaming: true
+
+platform:
+  opa:
+    enabled: false
+    policy_path: ""                        # Path to .rego policy directory (default: config/compliance/)
+    fail_on_violation: false               # Block startup if policy violations are found
+    approved_auth_providers: []            # e.g. ["oidc", "saml"] — empty = allow all
+    internal_endpoint_suffixes: []         # e.g. [".internal.example.com", ".svc.cluster.local"]
+    max_session_ttl_days: 0               # 0 = no limit
+    restrict_debug_mode: false             # Deny debug_mode_default = true
+    restricted_features: []                # Feature flag keys that must be false
+    max_rate_limit: 0                      # 0 = no cap on rate_limit.max
+
+security:
+  rate_limit:
+    enabled: true
+    max: 100
+    window: "1 minute"
+    exclude_paths:
+      - "/api/health"
+      - "/_health"
+  session:
+    secure_cookie: false
+    max_age_days: 30
+  helmet:
+    enabled: true
+    cross_origin_embedder_policy: false
+
+server:
+  host: "0.0.0.0"
+  port: 8080
+  body_limit: 1048576
+
+logging:
+  level: "info"
+
+cors:
+  origin: "http://localhost:5173"
diff --git a/deployment/base/configmap.yaml b/deployment/base/configmap.yaml
new file mode 100644
index 00000000..6d2a8d58
--- /dev/null
+++ b/deployment/base/configmap.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: template-ui-config
+  labels:
+    app: template-ui
+    component: ui
+data:
+  ENVIRONMENT: "production"
+  AUTH_ENABLED: "false"
+  SSO_ISSUER_HOST: ""
+  SSO_CALLBACK_URL: ""
+  AGENT_HOST: "http://template-agent:8081"
+
diff --git a/deployment/base/deployment.yaml b/deployment/base/deployment.yaml
new file mode 100644
index 00000000..4410f770
--- /dev/null
+++ b/deployment/base/deployment.yaml
@@ -0,0 +1,103 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: template-ui
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: template-ui
+      component: ui
+  template:
+    metadata:
+      labels:
+        app: template-ui
+        component: ui
+    spec:
+      containers:
+        - name: template-ui
+          image: template-ui:latest
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8080
+              name: http
+              protocol: TCP
+          env:
+            - name: PORT
+              value: "8080"
+            - name: ENVIRONMENT
+              valueFrom:
+                configMapKeyRef:
+                  name: template-ui-config
+                  key: ENVIRONMENT
+            - name: AUTH_ENABLED
+              valueFrom:
+                configMapKeyRef:
+                  name: template-ui-config
+                  key: AUTH_ENABLED
+            - name: SSO_ISSUER_HOST
+              valueFrom:
+                configMapKeyRef:
+                  name: template-ui-config
+                  key: SSO_ISSUER_HOST
+                  optional: true
+            - name: SSO_CALLBACK_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: template-ui-config
+                  key: SSO_CALLBACK_URL
+                  optional: true
+            - name: AGENT_HOST
+              valueFrom:
+                configMapKeyRef:
+                  name: template-ui-config
+                  key: AGENT_HOST
+            - name: COOKIE_SIGN
+              valueFrom:
+                secretKeyRef:
+                  name: template-ui-secrets
+                  key: COOKIE_SIGN
+            - name: SSO_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: template-ui-secrets
+                  key: SSO_CLIENT_ID
+                  optional: true
+            - name: SSO_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: template-ui-secrets
+                  key: SSO_CLIENT_SECRET
+                  optional: true
+          envFrom:
+            - secretRef:
+                name: template-ui-secrets
+                optional: true
+          livenessProbe:
+            httpGet:
+              path: /api/health
+              port: 8080
+            initialDelaySeconds: 30
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /api/health
+              port: 8080
+            initialDelaySeconds: 10
+            periodSeconds: 5
+            timeoutSeconds: 3
+            failureThreshold: 3
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+      restartPolicy: Always
+
diff --git a/deployment/base/kustomization.yaml b/deployment/base/kustomization.yaml
new file mode 100644
index 00000000..6ecb7964
--- /dev/null
+++ b/deployment/base/kustomization.yaml
@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - deployment.yaml
+  - service.yaml
+  - configmap.yaml
+  - secret.yaml
+
+labels:
+  - pairs:
+      app: template-ui
+      component: ui
diff --git a/deployment/base/secret.yaml b/deployment/base/secret.yaml
new file mode 100644
index 00000000..d883ed11
--- /dev/null
+++ b/deployment/base/secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: template-ui-secrets
+  labels:
+    app: template-ui
+    component: ui
+type: Opaque
+stringData:
+  COOKIE_SIGN: ""
+  SSO_CLIENT_ID: ""
+  SSO_CLIENT_SECRET: ""
+
diff --git a/deployment/base/service.yaml b/deployment/base/service.yaml
new file mode 100644
index 00000000..50820af4
--- /dev/null
+++ b/deployment/base/service.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: template-ui
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  type: ClusterIP
+  ports:
+    - port: 8080
+      targetPort: 8080
+      protocol: TCP
+      name: http
+  selector:
+    app: template-ui
+    component: ui
+
diff --git a/deployment/openshift/deployment.yaml b/deployment/openshift/deployment.yaml
index 920ab9b5..4410f770 100644
--- a/deployment/openshift/deployment.yaml
+++ b/deployment/openshift/deployment.yaml
@@ -78,7 +78,7 @@ spec:
                 optional: true
           livenessProbe:
             httpGet:
-              path: /health
+              path: /api/health
               port: 8080
             initialDelaySeconds: 30
             periodSeconds: 10
@@ -86,7 +86,7 @@ spec:
             failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /health
+              path: /api/health
               port: 8080
             initialDelaySeconds: 10
             periodSeconds: 5
diff --git a/deployment/overlays/kind/ingress.yaml b/deployment/overlays/kind/ingress.yaml
new file mode 100644
index 00000000..d9b45834
--- /dev/null
+++ b/deployment/overlays/kind/ingress.yaml
@@ -0,0 +1,51 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: template-ui
+  annotations:
+    nginx.ingress.kubernetes.io/auth-url: http://ai-gateway.agentforge.svc.cluster.local:8080/auth/check
+    nginx.ingress.kubernetes.io/auth-signin: http://localhost:8080/auth/login?redirect=
+    nginx.ingress.kubernetes.io/auth-response-headers: X-Auth-User-Email,X-Auth-User-Name,X-Auth-User-Sub,X-Auth-Access-Token
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: "{name}-{org}.localhost"  # Runtime substitution
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: template-ui
+                port:
+                  number: 8080
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: template-ui-path
+  annotations:
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+    nginx.ingress.kubernetes.io/auth-url: http://ai-gateway.agentforge.svc.cluster.local:8080/auth/check
+    nginx.ingress.kubernetes.io/auth-signin: http://localhost:8080/auth/login?redirect=
+    nginx.ingress.kubernetes.io/auth-response-headers: X-Auth-User-Email,X-Auth-User-Name,X-Auth-User-Sub,X-Auth-Access-Token
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: localhost
+      http:
+        paths:
+          - path: /{org}/{name}(/|$)(.*)  # Runtime substitution
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: template-ui
+                port:
+                  number: 8080
diff --git a/deployment/overlays/kind/kustomization.yaml b/deployment/overlays/kind/kustomization.yaml
new file mode 100644
index 00000000..d35c2c7b
--- /dev/null
+++ b/deployment/overlays/kind/kustomization.yaml
@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: template-ui
+
+resources:
+  - ../../base
+  - ingress.yaml
+
+labels:
+  - pairs:
+      app: template-ui
+      component: ui
+
+images:
+  - name: template-ui
+    newName: localhost/template-ui
+    newTag: local
diff --git a/deployment/overlays/openshift/buildconfig.yaml b/deployment/overlays/openshift/buildconfig.yaml
new file mode 100644
index 00000000..93edb6bc
--- /dev/null
+++ b/deployment/overlays/openshift/buildconfig.yaml
@@ -0,0 +1,30 @@
+apiVersion: build.openshift.io/v1
+kind: BuildConfig
+metadata:
+  name: template-ui
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  successfulBuildsHistoryLimit: 1
+  failedBuildsHistoryLimit: 1
+  output:
+    to:
+      kind: ImageStreamTag
+      name: template-ui:latest
+  source:
+    type: Binary
+    binary: {}
+  strategy:
+    type: Docker
+    dockerStrategy:
+      dockerfilePath: Containerfile
+  resources:
+    requests:
+      memory: "4Gi"
+      cpu: "2000m"
+    limits:
+      memory: "8Gi"
+      cpu: "8"
+  triggers: []
+
diff --git a/deployment/overlays/openshift/imagestream.yaml b/deployment/overlays/openshift/imagestream.yaml
new file mode 100644
index 00000000..5f7d6a7a
--- /dev/null
+++ b/deployment/overlays/openshift/imagestream.yaml
@@ -0,0 +1,11 @@
+apiVersion: image.openshift.io/v1
+kind: ImageStream
+metadata:
+  name: template-ui
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  lookupPolicy:
+    local: true
+
diff --git a/deployment/overlays/openshift/kustomization.yaml b/deployment/overlays/openshift/kustomization.yaml
new file mode 100644
index 00000000..ce2a0002
--- /dev/null
+++ b/deployment/overlays/openshift/kustomization.yaml
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+  - buildconfig.yaml
+  - imagestream.yaml
+  - route.yaml
+
+labels:
+  - pairs:
+      app: template-ui
+      component: ui
+    includeSelectors: true
diff --git a/deployment/overlays/openshift/route.yaml b/deployment/overlays/openshift/route.yaml
new file mode 100644
index 00000000..cb10f3b5
--- /dev/null
+++ b/deployment/overlays/openshift/route.yaml
@@ -0,0 +1,17 @@
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+  name: template-ui
+  labels:
+    app: template-ui
+    component: ui
+spec:
+  to:
+    kind: Service
+    name: template-ui
+  port:
+    targetPort: http
+  tls:
+    termination: edge
+    insecureEdgeTerminationPolicy: Redirect
+
diff --git a/e2e/auth/rate-limit.spec.ts b/e2e/auth/rate-limit.spec.ts
new file mode 100644
index 00000000..c8c3f90c
--- /dev/null
+++ b/e2e/auth/rate-limit.spec.ts
@@ -0,0 +1,94 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { mockRateLimitResponse } from '../helpers/sse-mock';
+import { HomePage } from '../page-objects/HomePage';
+import { ChatPage } from '../page-objects/ChatPage';
+
+/**
+ * Rate-limit (429) tests:
+ *
+ *  1. When the stream endpoint returns 429, the input form shows a
+ *     "Rate limited. Try again in Xs" alert and the submit button is disabled.
+ *  2. The countdown text updates while the rate limit is active.
+ */
+
+test.describe('Rate limit — 429 handling', () => {
+  test.beforeEach(async ({ page }) => {
+    await mountConfig(page, { title: 'Rate Limit Test' });
+  });
+
+  // ── Banner appears ─────────────────────────────────────────────────────────
+
+  test('shows a rate-limit alert when the stream returns 429', async ({ page }) => {
+    await mockRateLimitResponse(page, 30);
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Send a message');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // The InputForm renders <Alert title="Rate limited. Try again in Xs" />
+    // Use the alert heading role to avoid matching user-message text bubbles
+    await expect(page.getByRole('heading', { name: /rate limited/i })).toBeVisible({ timeout: 15_000 });
+  });
+
+  // ── Submit button is disabled ──────────────────────────────────────────────
+
+  test('the cancel button is shown (submit blocked) while rate-limited', async ({ page }) => {
+    await mockRateLimitResponse(page, 30);
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Rate limited test');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+    await expect(page.getByRole('heading', { name: /rate limited/i })).toBeVisible({ timeout: 15_000 });
+
+    // During the retry backoff the stream is still active (cancel button visible),
+    // which means the submit button is NOT rendered and new messages cannot be sent.
+    await expect(page.getByRole('button', { name: /cancel streaming/i })).toBeVisible();
+  });
+
+  // ── Retry-After respected ──────────────────────────────────────────────────
+
+  test('shows the Retry-After seconds in the alert text', async ({ page }) => {
+    await mockRateLimitResponse(page, 10);
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Rate limited request');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // The alert heading "Rate limited. Try again in Xs" should mention the countdown
+    await expect(page.getByRole('heading', { name: /try again in \d+s/i })).toBeVisible({ timeout: 15_000 });
+  });
+
+  // ── Normal flow unaffected ─────────────────────────────────────────────────
+
+  test('does NOT show a rate-limit alert on a normal 200 response', async ({ page }) => {
+    // Override the rate-limit mock with a normal response
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      const body = `data: ${JSON.stringify({ type: 'token', content: 'OK', chunk_id: 0 })}\n\ndata: [DONE]\n\n`;
+      return route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body,
+      });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Normal request');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+    await chat.waitForAIResponse(15_000);
+
+    await expect(page.getByRole('heading', { name: /rate limited/i })).not.toBeVisible();
+  });
+});
diff --git a/e2e/chaos/resilience.spec.ts b/e2e/chaos/resilience.spec.ts
new file mode 100644
index 00000000..4e58ddae
--- /dev/null
+++ b/e2e/chaos/resilience.spec.ts
@@ -0,0 +1,399 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { mockAgentStream, mockStreamError, tokenChunk } from '../helpers/sse-mock';
+import { waitForAnnouncement } from '../helpers/wait';
+import { HomePage } from '../page-objects/HomePage';
+import { ChatPage } from '../page-objects/ChatPage';
+
+/**
+ * Chaos / resilience E2E tests — 9 distinct scenarios.
+ *
+ * All failure conditions are simulated via Playwright route interception;
+ * no real backend is required. Each test follows the same pattern:
+ *   1. Set up failure condition via page.route().
+ *   2. Trigger a chat interaction from the home page.
+ *   3. Assert the error UI is visible (never blank / frozen).
+ *   4. Assert the user has a recovery path (retry button or interactive input).
+ *
+ * Coverage relative to `e2e/errors/error-states.spec.ts` (which covers agent
+ * offline at startup, mixed-valid malformed stream, and 401 auth failure):
+ *   This file tests truncated SSE, 503 on stream (recoverable 5xx, retried),
+ *   500 mid-conversation, config endpoint failure, concurrent 502 flap, empty
+ *   SSE body, all-invalid JSON (no valid tokens), TCP reset retry, and empty
+ *   agent response — all genuinely distinct failure paths.
+ */
+
+test.describe('Chaos: resilience', () => {
+  // ── 1. SSE drops mid-response ──────────────────────────────────────────────
+  //
+  // Two token chunks are delivered then the connection closes without [DONE].
+  // Expected: UI shows whatever partial content arrived and remains interactive.
+  test('SSE drops mid-response: partial content delivered, UI stays interactive', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Chaos Test' });
+
+    // Two valid token chunks, no [DONE] — stream terminates abruptly.
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      const body = tokenChunk('Hello', 0) + tokenChunk(' world', 1);
+      return route.fulfill({
+        status: 200,
+        headers: {
+          'Content-Type': 'text/event-stream',
+          'Cache-Control': 'no-cache',
+          'Connection': 'keep-alive',
+        },
+        body,
+      });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Say hello');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // The StreamingManager processes the truncated stream and resolves the turn.
+    await waitForAnnouncement(page, ['Response complete', 'Stream error']);
+
+    // UI must remain interactive — no blank screen, no crash boundary.
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 2. Agent stream returns 503 (recoverable 5xx) ─────────────────────────
+  //
+  // The stream endpoint returns HTTP 503. Unlike the 401 in error-states.spec.ts
+  // (non-recoverable 4xx), 503 is recoverable — the StreamingManager retries
+  // up to MAX_RETRIES times with exponential backoff before giving up.
+  // Expected: "Stream error" is eventually announced; input is still accessible.
+  //
+  // Distinct from `error-states.spec.ts` test 1 (health-check offline, no
+  // message sent) and test 3 (401 auth failure, non-recoverable single attempt).
+  test('agent stream returns 503: retried then error announced, input stays accessible', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: '503 Recoverable Test' });
+    // Every stream request returns 503 — all retry attempts will fail.
+    await mockStreamError(page, 503);
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Hello, are you there?');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // Allow extra time for the full retry cycle (MAX_RETRIES=3, exponential backoff).
+    await waitForAnnouncement(page, ['Stream error'], 30_000);
+
+    // Input must still be accessible after the retries are exhausted.
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 3. HTTP 500 mid-conversation ──────────────────────────────────────────
+  //
+  // First chat turn succeeds; the second turn returns HTTP 500.
+  // Expected: "Stream error" is announced, input remains accessible for retry.
+  test('500 mid-conversation: first turn succeeds, second turn shows error, input stays accessible', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: '500 Mid-Conversation Test' });
+
+    let callCount = 0;
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      callCount += 1;
+      if (callCount === 1) {
+        // First turn: healthy response.
+        const body = tokenChunk('Turn 1 reply.', 0) + 'data: [DONE]\n\n';
+        return route.fulfill({
+          status: 200,
+          headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+          body,
+        });
+      }
+      // Second turn: hard 500.
+      return route.fulfill({ status: 500, body: 'Internal Server Error' });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('First message');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+    await chat.waitForAIResponse();
+
+    // Use the page object's sendMessage for consistency with the page-object pattern.
+    await chat.sendMessage('Second message');
+
+    // 500 is recoverable — retries will also fail → eventual "Stream error".
+    await waitForAnnouncement(page, ['Stream error'], 30_000);
+
+    // Input must still be accessible — user can attempt another message.
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 4. Config load fails at runtime ───────────────────────────────────────
+  //
+  // Both /api/config/branding and /api/config/features return 500.
+  // Expected: app renders a non-empty page with no unhandled crash.
+  test('config endpoints return 500: app renders content instead of blank screen', async ({
+    page,
+  }) => {
+    // Start from a fully healthy baseline then override just the two config routes.
+    // Playwright LIFO ordering ensures the overrides take precedence over mountConfig's routes.
+    await mountConfig(page, { title: 'Config Failure Test' });
+    await mockAgentStream(page, 'Hello');
+
+    await page.route('**/api/config/branding', (route) =>
+      route.fulfill({ status: 500, body: 'Config service unavailable' }),
+    );
+    await page.route('**/api/config/features', (route) =>
+      route.fulfill({ status: 500, body: 'Config service unavailable' }),
+    );
+
+    await page.goto('/');
+
+    // Body must not be empty — user sees something meaningful.
+    const bodyText = await page.locator('body').innerText();
+    expect(bodyText.trim()).not.toBe('');
+
+    // No unhandled error boundary message should surface.
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 5. Concurrent users during agent restart (502 flap) ───────────────────
+  //
+  // Two independent browser contexts hit 502 simultaneously — simulating an
+  // agent pod restart that causes a brief gateway flap.
+  // Expected: both users see graceful error state, no blank screens.
+  test('502 flap: concurrent users both see graceful error, no blank screens', async ({
+    browser,
+    baseURL,
+  }) => {
+    const [ctxA, ctxB] = await Promise.all([
+      browser.newContext({ baseURL }),
+      browser.newContext({ baseURL }),
+    ]);
+    const [pageA, pageB] = await Promise.all([
+      ctxA.newPage(),
+      ctxB.newPage(),
+    ]);
+
+    try {
+      // Configure both "users": healthy config, 502 on the stream endpoint.
+      for (const p of [pageA, pageB]) {
+        await mountConfig(p, { title: '502 Flap Test' });
+        await p.route('**/api/proxy/agent/v1/stream', (route) =>
+          route.fulfill({ status: 502, body: 'Bad Gateway' }),
+        );
+      }
+
+      // Both users navigate and submit simultaneously.
+      await Promise.all([
+        (async () => {
+          await new HomePage(pageA).goto();
+          await new HomePage(pageA).submitPrompt('User A message');
+        })(),
+        (async () => {
+          await new HomePage(pageB).goto();
+          await new HomePage(pageB).submitPrompt('User B message');
+        })(),
+      ]);
+
+      // Both contexts must reach an error state — not freeze or go blank.
+      // 502 is recoverable — allow time for retries to exhaust.
+      await Promise.all(
+        [pageA, pageB].map((p) => waitForAnnouncement(p, ['Stream error'], 30_000)),
+      );
+
+      // Input must still be interactive for all users.
+      for (const p of [pageA, pageB]) {
+        await expect(p.locator('textarea')).toBeVisible();
+      }
+    } finally {
+      await Promise.all([ctxA.close(), ctxB.close()]);
+    }
+  });
+
+  // ── 6. SSE timeout / stalled stream ───────────────────────────────────────
+  //
+  // The SSE connection opens (correct headers) but the body is empty — the
+  // server accepted the connection then sent nothing before closing it.
+  // Expected: UI reaches a terminal state (no-response or error) without freezing.
+  test('stalled SSE stream: empty body; UI reaches terminal state, not blank', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Stalled Stream Test' });
+
+    // SSE headers present but body is completely empty — server closes immediately.
+    await page.route('**/api/proxy/agent/v1/stream', (route) =>
+      route.fulfill({
+        status: 200,
+        headers: {
+          'Content-Type': 'text/event-stream',
+          'Cache-Control': 'no-cache',
+          'Connection': 'keep-alive',
+        },
+        body: '',
+      }),
+    );
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Will you respond?');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // Primary check: wait for an announcement from the aria-live region.
+    // If the stream ended without [DONE] the StreamingManager may or may not fire
+    // "Response complete"; also accept the no-response / retry panel as evidence
+    // the UI has recovered rather than freezing.
+    await page.waitForFunction(
+      () => {
+        const region = document.querySelector('.sr-only[aria-live="polite"]');
+        const t = region?.textContent ?? '';
+        return (
+          t.includes('Response complete') ||
+          t.includes('Stream error') ||
+          document.querySelector('[aria-label="Retry operation"]') !== null ||
+          Boolean(document.body.textContent?.includes("didn't respond"))
+        );
+      },
+      { timeout: 15_000 },
+    );
+
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 7. Malformed SSE payload (entirely invalid JSON, zero valid tokens) ────
+  //
+  // Every SSE data line contains invalid JSON — the stream ends with [DONE].
+  // Distinct from `error-states.spec.ts` malformed-stream test which mixes
+  // valid and invalid data lines (partial content arrives). Here, zero valid
+  // tokens arrive, so the SSEProcessor must survive pure-garbage input without
+  // crashing or leaving the UI in a broken state.
+  test('all-malformed SSE payload: parse errors are swallowed, UI does not crash', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Malformed Payload Test' });
+
+    await page.route('**/api/proxy/agent/v1/stream', (route) =>
+      route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body:
+          'data: {this is not valid json}\n\n' +
+          'data: !!TOTALLY_INVALID!!\n\n' +
+          'data: <xml>surprise</xml>\n\n' +
+          'data: [DONE]\n\n',
+      }),
+    );
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Send me corrupted SSE data');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    await waitForAnnouncement(page, ['Response complete', 'Stream error']);
+
+    // App must be fully interactive — no unhandled error boundary.
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 8. Network flap recovery ───────────────────────────────────────────────
+  //
+  // The first stream request is aborted (connection reset). The StreamingManager
+  // treats TypeError network errors as recoverable and retries automatically.
+  // The second attempt succeeds with a normal response.
+  // Expected: UI ultimately resolves with "Response complete"; no crash.
+  test('network flap: connection reset on first attempt; retry resolves gracefully', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Network Flap Test' });
+
+    let attempts = 0;
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      attempts += 1;
+      if (attempts === 1) {
+        // Simulate a TCP connection reset — browser sees a network TypeError,
+        // which isRecoverableStreamError() treats as recoverable.
+        return route.abort('connectionreset');
+      }
+      // Subsequent attempts succeed.
+      const body = tokenChunk('Recovered successfully!', 0) + 'data: [DONE]\n\n';
+      return route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body,
+      });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('First attempt — will flap then recover');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // Allow extra time for the exponential-backoff retry cycle.
+    await waitForAnnouncement(page, ['Response complete', 'Stream error'], 25_000);
+
+    // Regardless of the recovery outcome: no blank screen, no crash.
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── 9. Agent returns empty / null response ────────────────────────────────
+  //
+  // The stream sends [DONE] immediately with zero token events — the agent
+  // produced no content whatsoever.
+  // Expected: the ChatMessagesView "no response" panel appears with a visible
+  // Retry button (showNoResponse fires after its 1 500 ms grace period).
+  test('empty agent response: stream ends with no tokens; retry panel is shown', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Empty Response Test' });
+
+    // [DONE] fires with no preceding token events — zero content delivered.
+    await page.route('**/api/proxy/agent/v1/stream', (route) =>
+      route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body: 'data: [DONE]\n\n',
+      }),
+    );
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Give me an empty response');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // StreamingManager calls onDone() → announcement becomes "Response complete".
+    await waitForAnnouncement(page, ['Response complete']);
+
+    // No AI message was appended → last message is still human → ChatMessagesView
+    // shows the "didn't respond" panel after a 1 500 ms grace period.
+    await page.waitForFunction(
+      () =>
+        document.querySelector('[aria-label="Retry operation"]') !== null ||
+        Boolean(document.body.textContent?.includes("didn't respond")),
+      { timeout: 10_000 },
+    );
+
+    // The Retry button must be visible and the input must remain accessible.
+    await expect(page.locator('[aria-label="Retry operation"]')).toBeVisible();
+    await expect(page.locator('textarea')).toBeVisible();
+  });
+});
diff --git a/e2e/config/branding.spec.ts b/e2e/config/branding.spec.ts
new file mode 100644
index 00000000..50782323
--- /dev/null
+++ b/e2e/config/branding.spec.ts
@@ -0,0 +1,85 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig, mountMinimalConfig, mountFullConfig } from '../helpers/config-mount';
+import { mockAgentStream } from '../helpers/sse-mock';
+import { HomePage } from '../page-objects/HomePage';
+
+/**
+ * Branding config tests.
+ *
+ * Two config scenarios are exercised:
+ *   - Minimal config: only required fields (title, default colours, no logo).
+ *   - Full config: all optional fields populated (logo_url, favicon_url, custom colours).
+ *
+ * Tests assert that the Fastify server's /api/config/branding response is
+ * correctly consumed by the React app to update document title, logo element,
+ * and CSS custom properties.
+ */
+test.describe('Config: branding', () => {
+  // ── Minimal config scenario ───────────────────────────────────────────────
+
+  test('minimal config: document title reflects branding title', async ({ page }) => {
+    await mountMinimalConfig(page);
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+    expect(await home.getDocumentTitle()).toBe('Minimal Agent');
+  });
+
+  test('minimal config: no logo image is rendered when logo_url is empty', async ({ page }) => {
+    await mountMinimalConfig(page);
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+    // logo_url is '' so no <img> with a branding src should appear in the header
+    const logoImg = page.locator('img[alt="Logo"], img[alt="Minimal Agent"]');
+    await expect(logoImg).toHaveCount(0);
+  });
+
+  // ── Full config scenario ──────────────────────────────────────────────────
+
+  test('full config: document title reflects full branding title', async ({ page }) => {
+    await mountFullConfig(page);
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+    expect(await home.getDocumentTitle()).toBe('Full Config Agent');
+  });
+
+  test('full config: logo image element is visible with correct src', async ({ page }) => {
+    await mountFullConfig(page);
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+    // AppLayout renders <img src={branding.logo_url} alt={branding.title || 'Logo'} />
+    const logo = page.locator('img[alt="Full Config Agent"], img[alt="Logo"]').first();
+    await expect(logo).toBeVisible();
+    const src = await logo.getAttribute('src');
+    expect(src).toContain('redhat-logo');
+  });
+
+  test('full config: CSS custom property --primary is applied from branding colours', async ({
+    page,
+  }) => {
+    const customPrimary = '#abcdef';
+    // Apply the custom colour to both themes so the assertion holds regardless
+    // of whether the app initialises in light or dark mode.
+    await mountConfig(
+      page,
+      { title: 'Color Test', colors: { light: { primary: customPrimary }, dark: { primary: customPrimary } } },
+    );
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+
+    // Wait for App.tsx's branding useEffect to set the CSS variable
+    await page.waitForFunction(() => {
+      const val = document.documentElement.style.getPropertyValue('--primary');
+      return val !== '';
+    });
+
+    const primaryVar = await page.evaluate(() =>
+      document.documentElement.style.getPropertyValue('--primary'),
+    );
+    expect(primaryVar.toLowerCase().replace(/\s+/g, '')).toBe(customPrimary);
+  });
+});
diff --git a/e2e/config/feature-flags.spec.ts b/e2e/config/feature-flags.spec.ts
new file mode 100644
index 00000000..10ca3f46
--- /dev/null
+++ b/e2e/config/feature-flags.spec.ts
@@ -0,0 +1,43 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { mockAgentStream } from '../helpers/sse-mock';
+import { HomePage } from '../page-objects/HomePage';
+
+/**
+ * Feature-flag config tests.
+ *
+ * The /api/config/features endpoint drives the DebugToggle initial state.
+ * When debug_mode_default=false the toggle shows "Enable debug mode";
+ * when debug_mode_default=true the toggle shows "Disable debug mode"
+ * (because the flag pre-sets debugMode in the Redux userSettings slice).
+ *
+ * The DebugToggle is rendered in the AppLayout header and is therefore
+ * visible on every page once the app mounts.
+ */
+test.describe('Config: feature flags', () => {
+  test('debug_mode_default=false: debug toggle shows "Enable debug mode" aria-label', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Debug Off Test' }, { debug_mode_default: false });
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+
+    await expect(
+      page.getByRole('button', { name: /enable debug mode/i }),
+    ).toBeVisible();
+  });
+
+  test('debug_mode_default=true: debug toggle shows "Disable debug mode" aria-label', async ({
+    page,
+  }) => {
+    await mountConfig(page, { title: 'Debug On Test' }, { debug_mode_default: true });
+    await mockAgentStream(page, 'Hello');
+    const home = new HomePage(page);
+    await home.goto();
+
+    await expect(
+      page.getByRole('button', { name: /disable debug mode/i }),
+    ).toBeVisible();
+  });
+});
diff --git a/e2e/errors/error-states.spec.ts b/e2e/errors/error-states.spec.ts
new file mode 100644
index 00000000..94a43b5d
--- /dev/null
+++ b/e2e/errors/error-states.spec.ts
@@ -0,0 +1,87 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { mockAgentStream, mockMalformedStream, mockStreamError } from '../helpers/sse-mock';
+import { HomePage } from '../page-objects/HomePage';
+import { ChatPage } from '../page-objects/ChatPage';
+
+/**
+ * Error-path tests covering:
+ *   1. Agent unreachable   – /api/health/agent returns non-200; sidebar shows "Agent: offline".
+ *   2. Malformed stream    – SSE body contains invalid JSON; UI must not crash.
+ *   3. Auth failure        – streaming endpoint returns 401; StreamingManager marks the stream
+ *                            as failed (non-recoverable 4xx) and the sr-only aria-live region
+ *                            announces "Stream error".
+ */
+test.describe('Error states', () => {
+  // ── Agent unreachable ─────────────────────────────────────────────────────
+
+  test('agent unreachable: sidebar shows "Agent: offline" indicator', async ({ page }) => {
+    // Mount base config with agentHealth='unhealthy' so the health endpoint
+    // returns 503 / { status: 'unhealthy' } from the first poll onwards.
+    await mountConfig(page, { title: 'Offline Agent Test' }, {}, 'unhealthy');
+    await mockAgentStream(page, 'Hello');
+
+    const home = new HomePage(page);
+    await home.goto();
+
+    // useAgentHealth polls immediately on mount; the sidebar indicator updates
+    // as soon as the first health check completes.
+    await expect(page.getByText('Agent: offline')).toBeVisible({ timeout: 15_000 });
+  });
+
+  // ── Malformed stream ──────────────────────────────────────────────────────
+
+  test('malformed stream: UI does not crash when receiving invalid SSE data', async ({ page }) => {
+    await mountConfig(page);
+    await mockMalformedStream(page);
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Test malformed stream handling');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // The mock SSE body ends with `data: [DONE]\n\n` so the StreamingManager calls
+    // onDone(), which triggers the "Response complete" / "Stream error" announcement.
+    // Wait for that live-region update rather than using an arbitrary sleep.
+    await page.waitForFunction(
+      () => {
+        const liveRegion = document.querySelector('.sr-only[aria-live="polite"]');
+        const text = liveRegion?.textContent ?? '';
+        return text.includes('Response complete') || text.includes('Stream error');
+      },
+      { timeout: 15_000 },
+    );
+
+    // The app must still be interactive — no top-level error boundary message
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('body')).not.toContainText('Something went wrong');
+  });
+
+  // ── Auth failure ──────────────────────────────────────────────────────────
+
+  test('auth failure on stream: aria-live region announces "Stream error"', async ({ page }) => {
+    await mountConfig(page);
+    // 401 from the streaming endpoint is a non-recoverable 4xx; the
+    // StreamingManager throws and the ChatPage announces "Stream error"
+    // through its sr-only aria-live polite region.
+    await mockStreamError(page, 401);
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('This request will be rejected with 401');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    // Wait for the live region to announce the failure
+    await page.waitForFunction(
+      () => {
+        const liveRegion = document.querySelector('.sr-only[aria-live="polite"]');
+        return liveRegion?.textContent?.includes('Stream error');
+      },
+      { timeout: 15_000 },
+    );
+  });
+});
diff --git a/e2e/helpers/config-mount.ts b/e2e/helpers/config-mount.ts
new file mode 100644
index 00000000..7d7eb790
--- /dev/null
+++ b/e2e/helpers/config-mount.ts
@@ -0,0 +1,131 @@
+import type { Page } from '@playwright/test';
+
+export interface BrandingColors {
+  primary: string;
+  accent: string;
+  background: string;
+  foreground: string;
+}
+
+export interface BrandingOverride {
+  title?: string;
+  logo_url?: string;
+  favicon_url?: string;
+  colors?: {
+    light?: Partial<BrandingColors>;
+    dark?: Partial<BrandingColors>;
+  };
+}
+
+export interface FeaturesOverride {
+  debug_mode_default?: boolean;
+  auth_enabled?: boolean;
+}
+
+const DEFAULT_LIGHT: BrandingColors = {
+  primary: '#0066cc',
+  accent: '#a60000',
+  background: '#ffffff',
+  foreground: '#1a1a1a',
+};
+
+const DEFAULT_DARK: BrandingColors = {
+  primary: '#4dabf7',
+  accent: '#f56e6e',
+  background: '#0a1628',
+  foreground: '#f0f4f8',
+};
+
+/**
+ * Mock config and agent-proxy endpoints so tests do not depend on a real
+ * agent backend. Config endpoints could be served by the real Fastify process
+ * but overriding them keeps tests hermetic.
+ *
+ * @param branding  Branding values to use (merged with defaults).
+ * @param features  Feature flags to use (merged with defaults).
+ * @param agentHealth  Agent health status — one of 'healthy', 'unhealthy', or 'unknown'.
+ */
+export async function mountConfig(
+  page: Page,
+  branding: BrandingOverride = {},
+  features: FeaturesOverride = {},
+  agentHealth: 'healthy' | 'unhealthy' | 'unknown' = 'healthy',
+): Promise<void> {
+  await page.route('**/api/config/branding', (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: 'application/json',
+      body: JSON.stringify({
+        logo_url: branding.logo_url ?? '',
+        title: branding.title ?? 'Test Agent',
+        ...(branding.favicon_url ? { favicon_url: branding.favicon_url } : {}),
+        colors: {
+          light: { ...DEFAULT_LIGHT, ...branding.colors?.light },
+          dark: { ...DEFAULT_DARK, ...branding.colors?.dark },
+        },
+      }),
+    }),
+  );
+
+  await page.route('**/api/config/features', (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: 'application/json',
+      body: JSON.stringify({
+        debug_mode_default: features.debug_mode_default ?? false,
+        auth_enabled: features.auth_enabled ?? false,
+      }),
+    }),
+  );
+
+  await page.route('**/api/proxy/agent/threads/*/feedback**', (route) =>
+    route.fulfill({ status: 200, contentType: 'application/json', body: '{}' }),
+  );
+
+  await page.route('**/api/announcement', (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: 'application/json',
+      body: JSON.stringify({ enabled: false }),
+    }),
+  );
+
+  const healthHttpStatus = agentHealth === 'healthy' ? 200 : 503;
+  await page.route('**/api/health/agent', (route) =>
+    route.fulfill({
+      status: healthHttpStatus,
+      contentType: 'application/json',
+      body: JSON.stringify({ status: agentHealth }),
+    }),
+  );
+
+  await page.route('**/api/proxy/agent/threads/search', (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: 'application/json',
+      body: '[]',
+    }),
+  );
+}
+
+/** Minimal config: only required fields populated, no logo, default colors. */
+export async function mountMinimalConfig(page: Page): Promise<void> {
+  return mountConfig(page, { title: 'Minimal Agent' });
+}
+
+/** Full config: all optional fields populated, custom primary colour. */
+export async function mountFullConfig(page: Page): Promise<void> {
+  return mountConfig(
+    page,
+    {
+      title: 'Full Config Agent',
+      logo_url: '/dist/frontend/redhat-logo.svg',
+      favicon_url: '/dist/frontend/redhat-logo.svg',
+      colors: {
+        light: { primary: '#cc0000', accent: '#006600', background: '#f5f5f5', foreground: '#111111' },
+        dark: { primary: '#ff6666', accent: '#66cc66', background: '#1a1a2e', foreground: '#e0e0e0' },
+      },
+    },
+    { debug_mode_default: false, auth_enabled: false },
+  );
+}
diff --git a/e2e/helpers/local-storage.ts b/e2e/helpers/local-storage.ts
new file mode 100644
index 00000000..b5415078
--- /dev/null
+++ b/e2e/helpers/local-storage.ts
@@ -0,0 +1,52 @@
+import type { Page } from '@playwright/test';
+
+const SETTINGS_KEY = 'template-ui-settings';
+
+/**
+ * Inject localStorage settings before the page loads.
+ * Must be called before `page.goto()`.
+ *
+ * Merges the provided settings into the template-ui-settings key so
+ * individual fields (e.g. alwaysAllowedTools) can be set independently.
+ */
+export async function setLocalStorageSettings(
+  page: Page,
+  settings: Partial<{
+    theme: 'light' | 'dark';
+    debugMode: boolean;
+    alwaysAllowedTools: string[];
+    autoApproveAllTools: boolean;
+  }>,
+): Promise<void> {
+  await page.addInitScript(
+    ({ key, value }) => {
+      let existing: Record<string, unknown> = {};
+      try {
+        const raw = localStorage.getItem(key);
+        if (raw) existing = JSON.parse(raw);
+      } catch {
+        // start fresh
+      }
+      localStorage.setItem(key, JSON.stringify({ ...existing, ...value }));
+    },
+    { key: SETTINGS_KEY, value: settings },
+  );
+}
+
+/**
+ * Read the stored template-ui-settings from localStorage after the page has
+ * loaded. Returns null when the key is not set.
+ */
+export async function getLocalStorageSettings(
+  page: Page,
+): Promise<Record<string, unknown> | null> {
+  return page.evaluate((key) => {
+    const raw = localStorage.getItem(key);
+    if (!raw) return null;
+    try {
+      return JSON.parse(raw) as Record<string, unknown>;
+    } catch {
+      return null;
+    }
+  }, SETTINGS_KEY);
+}
diff --git a/e2e/helpers/sse-mock.ts b/e2e/helpers/sse-mock.ts
new file mode 100644
index 00000000..1ce11e51
--- /dev/null
+++ b/e2e/helpers/sse-mock.ts
@@ -0,0 +1,148 @@
+import type { Page, Route } from '@playwright/test';
+
+/** Serialise one `data:` line for a token chunk the SSEProcessor accepts. */
+export function tokenChunk(text: string, chunkId: number): string {
+  return `data: ${JSON.stringify({ type: 'token', content: text, chunk_id: chunkId })}\n\n`;
+}
+
+/** Serialise one `data:` line for an interrupt chunk the SSEProcessor accepts. */
+export function interruptChunk(value: object | string, chunkId: number): string {
+  return `data: ${JSON.stringify({
+    type: 'interrupt',
+    content: { value, resumable: true },
+    chunk_id: chunkId,
+  })}\n\n`;
+}
+
+/**
+ * Install a browser-level route that intercepts the streaming endpoint and
+ * returns a minimal SSE response containing the provided text.
+ *
+ * Because Playwright intercepts at the CDP network layer the request never
+ * reaches the Fastify server, so no upstream AGENT_HOST calls are made.
+ */
+export async function mockAgentStream(page: Page, responseText: string): Promise<void> {
+  await page.route('**/api/proxy/agent/v1/stream', (route) => {
+    const body = tokenChunk(responseText, 0) + 'data: [DONE]\n\n';
+    return route.fulfill({
+      status: 200,
+      headers: {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        'Connection': 'keep-alive',
+      },
+      body,
+    });
+  });
+}
+
+/** Intercept thread state requests (used when navigating to an existing chat). */
+export async function mockThreadState(page: Page): Promise<void> {
+  await page.route('**/api/proxy/agent/threads/*/state', (route) =>
+    route.fulfill({
+      status: 200,
+      contentType: 'application/json',
+      body: JSON.stringify({ messages: [], tasks: [] }),
+    }),
+  );
+}
+
+/**
+ * Intercept with a stream containing syntactically invalid SSE token data.
+ * The SSEProcessor should skip unrecognised chunks without crashing the UI.
+ */
+export async function mockMalformedStream(page: Page): Promise<void> {
+  await page.route('**/api/proxy/agent/v1/stream', (route) => {
+    // Mix valid and invalid JSON; the SSEProcessor must tolerate both gracefully.
+    const body =
+      'data: {this is not valid json}\n\n' +
+      tokenChunk('partial ok', 0) +
+      'data: !!INVALID!!\n\n' +
+      'data: [DONE]\n\n';
+    return route.fulfill({
+      status: 200,
+      headers: {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        'Connection': 'keep-alive',
+      },
+      body,
+    });
+  });
+}
+
+/**
+ * Intercept the streaming endpoint and return the given HTTP error status.
+ * Useful for testing auth-failure (401) and server-error (500+) paths.
+ */
+export async function mockStreamError(page: Page, status: number): Promise<void> {
+  await page.route('**/api/proxy/agent/v1/stream', (route) =>
+    route.fulfill({
+      status,
+      body: `HTTP ${status}`,
+    }),
+  );
+}
+
+/**
+ * Intercept the streaming endpoint and return a single interrupt chunk.
+ * The interrupt value can be a plain string (generic) or an HITLInterruptValue object.
+ */
+export async function mockInterruptStream(
+  page: Page,
+  value: object | string,
+): Promise<void> {
+  await page.route('**/api/proxy/agent/v1/stream', (route) => {
+    const body = interruptChunk(value, 0) + 'data: [DONE]\n\n';
+    return route.fulfill({
+      status: 200,
+      headers: {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        'Connection': 'keep-alive',
+      },
+      body,
+    });
+  });
+}
+
+/**
+ * Override the streaming endpoint for a resume request to return a simple
+ * token response. Intercepts only the NEXT call — the route is unregistered
+ * after it fires once, so subsequent stream requests fall through to any
+ * previously registered handlers.
+ */
+export async function mockResumeStream(page: Page, responseText: string): Promise<void> {
+  const handler = async (route: Route) => {
+    // Unregister before fulfilling so only the first matching request is intercepted
+    await page.unroute('**/api/proxy/agent/v1/stream', handler);
+    const body = tokenChunk(responseText, 0) + 'data: [DONE]\n\n';
+    await route.fulfill({
+      status: 200,
+      headers: {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        'Connection': 'keep-alive',
+      },
+      body,
+    });
+  };
+  await page.route('**/api/proxy/agent/v1/stream', handler);
+}
+
+/**
+ * Intercept the streaming endpoint and return HTTP 429 with a Retry-After header.
+ * Used for testing the rate-limit UI.
+ */
+export async function mockRateLimitResponse(page: Page, retryAfterSeconds = 5): Promise<void> {
+  await page.route('**/api/proxy/agent/v1/stream', (route) =>
+    route.fulfill({
+      status: 429,
+      headers: {
+        'Retry-After': String(retryAfterSeconds),
+        'Content-Type': 'text/plain',
+      },
+      body: 'Rate limited',
+    }),
+  );
+}
diff --git a/e2e/helpers/wait.ts b/e2e/helpers/wait.ts
new file mode 100644
index 00000000..d049a78f
--- /dev/null
+++ b/e2e/helpers/wait.ts
@@ -0,0 +1,22 @@
+import type { Page } from '@playwright/test';
+
+/**
+ * Wait for the sr-only aria-live polite region (ChatPage.tsx) to contain at
+ * least one of the provided strings. The region announces "Agent is thinking",
+ * "Response complete", or "Stream error" as stream state changes.
+ */
+export async function waitForAnnouncement(
+  page: Page,
+  texts: string[],
+  timeout = 15_000,
+): Promise<void> {
+  await page.waitForFunction(
+    (expected: string[]) => {
+      const region = document.querySelector('.sr-only[aria-live="polite"]');
+      const t = region?.textContent ?? '';
+      return expected.some((s) => t.includes(s));
+    },
+    texts,
+    { timeout },
+  );
+}
diff --git a/e2e/hitl/auto-approve.spec.ts b/e2e/hitl/auto-approve.spec.ts
new file mode 100644
index 00000000..3670080d
--- /dev/null
+++ b/e2e/hitl/auto-approve.spec.ts
@@ -0,0 +1,137 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { setLocalStorageSettings } from '../helpers/local-storage';
+import { HomePage } from '../page-objects/HomePage';
+import { ChatPage } from '../page-objects/ChatPage';
+
+/**
+ * Auto-approve tests:
+ *
+ *  1. When `alwaysAllowedTools` contains the tool from an action_requests interrupt,
+ *     the resume is sent automatically without showing any approval UI.
+ *  2. When the tool is NOT in `alwaysAllowedTools` AND the interrupt is a non-actionable
+ *     string value, the InterruptBanner appears for the user.
+ *  3. When `autoApproveAllTools` is true, every action_requests interrupt is auto-approved.
+ */
+
+const TOOL_APPROVAL_INTERRUPT = {
+  action_requests: [{ name: 'github_search', args: { query: 'bugs' } }],
+  review_configs: [{ action_name: 'github_search', allowed_decisions: ['approve', 'reject'] }],
+};
+
+// A string interrupt (not action_requests) that triggers the InterruptBanner's
+// "Action Required" branch (contains "approve").  Since it's a string, the
+// ChatPage auto-approve useEffect skips it — the banner always appears.
+const APPROVAL_STRING_INTERRUPT =
+  'Do you approve running the dangerous_tool with the provided arguments?';
+
+const UNKNOWN_TOOL_INTERRUPT = {
+  action_requests: [{ name: 'dangerous_tool', args: {} }],
+  review_configs: [{ action_name: 'dangerous_tool', allowed_decisions: ['approve', 'reject'] }],
+};
+
+async function makeInterruptStream(
+  value: object | string,
+  callCount: { n: number },
+  page: import('@playwright/test').Page,
+): Promise<void> {
+  await page.route('**/api/proxy/agent/v1/stream', (route) => {
+    callCount.n++;
+    if (callCount.n === 1) {
+      const body =
+        `data: ${JSON.stringify({
+          type: 'interrupt',
+          content: { value, resumable: true },
+          chunk_id: 0,
+        })}\n\n` + 'data: [DONE]\n\n';
+      return route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body,
+      });
+    }
+    const body = `data: ${JSON.stringify({ type: 'token', content: 'Done automatically.', chunk_id: 0 })}\n\ndata: [DONE]\n\n`;
+    return route.fulfill({
+      status: 200,
+      headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+      body,
+    });
+  });
+}
+
+test.describe('HITL — auto-approve', () => {
+  // ── auto-approve via alwaysAllowedTools ──────────────────────────────────
+
+  test(
+    'banner is skipped when the interrupted tool is in alwaysAllowedTools',
+    async ({ page }) => {
+      await setLocalStorageSettings(page, { alwaysAllowedTools: ['github_search'] });
+      await mountConfig(page, { title: 'Auto Approve Test' });
+
+      const callCount = { n: 0 };
+      await makeInterruptStream(TOOL_APPROVAL_INTERRUPT, callCount, page);
+
+      const home = new HomePage(page);
+      await home.goto();
+      await home.submitPrompt('Search GitHub issues');
+
+      const chat = new ChatPage(page);
+      await chat.expectChatRoute();
+
+      // The response should complete without the interrupt banner ever appearing
+      await chat.waitForAIResponse(15_000);
+      await expect(page.getByText('Action Required')).not.toBeVisible();
+      await expect(page.getByText('Input Required')).not.toBeVisible();
+      expect(callCount.n).toBeGreaterThanOrEqual(2);
+    },
+  );
+
+  // ── banner still shown when interrupt is not auto-approvable ─────────────
+  // String interrupts bypass the auto-approve useEffect (which only handles
+  // action_requests objects), so the InterruptBanner always renders.
+
+  test(
+    'banner is shown when the interrupt is a string value (not auto-approved)',
+    async ({ page }) => {
+      await setLocalStorageSettings(page, { alwaysAllowedTools: ['github_search'] });
+      await mountConfig(page, { title: 'Auto Approve Test' });
+
+      const callCount = { n: 0 };
+      await makeInterruptStream(APPROVAL_STRING_INTERRUPT, callCount, page);
+
+      const home = new HomePage(page);
+      await home.goto();
+      await home.submitPrompt('Run the dangerous tool');
+
+      const chat = new ChatPage(page);
+      await chat.expectChatRoute();
+
+      // Banner MUST appear because string interrupts are never auto-approved
+      await expect(page.getByText('Action Required')).toBeVisible({ timeout: 15_000 });
+    },
+  );
+
+  // ── auto-approve all via autoApproveAllTools flag ─────────────────────────
+
+  test(
+    'banner is skipped when autoApproveAllTools is true, regardless of tool name',
+    async ({ page }) => {
+      await setLocalStorageSettings(page, { autoApproveAllTools: true });
+      await mountConfig(page, { title: 'Auto Approve All Test' });
+
+      const callCount = { n: 0 };
+      await makeInterruptStream(UNKNOWN_TOOL_INTERRUPT, callCount, page);
+
+      const home = new HomePage(page);
+      await home.goto();
+      await home.submitPrompt('Run all tools');
+
+      const chat = new ChatPage(page);
+      await chat.expectChatRoute();
+
+      await chat.waitForAIResponse(15_000);
+      await expect(page.getByText('Action Required')).not.toBeVisible();
+      expect(callCount.n).toBeGreaterThanOrEqual(2);
+    },
+  );
+});
diff --git a/e2e/hitl/interrupt-flow.spec.ts b/e2e/hitl/interrupt-flow.spec.ts
new file mode 100644
index 00000000..322940d6
--- /dev/null
+++ b/e2e/hitl/interrupt-flow.spec.ts
@@ -0,0 +1,187 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { HomePage } from '../page-objects/HomePage';
+import { ChatPage } from '../page-objects/ChatPage';
+
+/**
+ * Human-In-The-Loop (HITL) interrupt flow tests.
+ *
+ * The InterruptBanner component is rendered via `interruptContent` in ChatPage
+ * for NON-action_requests interrupts (strings and MCP auth).
+ * For string interrupt values, isToolApproval() decides which branch:
+ *  - Contains "approve" / "confirm" / "allow" etc → "Action Required" (Approve/Reject buttons)
+ *  - Otherwise → "Input Required" (text input + Send button)
+ */
+
+// String interrupt that triggers the "Action Required" branch (contains "approve")
+const TOOL_APPROVAL_STR = 'Do you approve running github_create_pr with title "Test PR"?';
+
+// String interrupt that triggers the "Input Required" branch (no approval keywords)
+const GENERIC_INTERRUPT_VALUE = 'What format should the output be in?';
+
+function makeInterruptBody(value: string | object, chunkId = 0): string {
+  return (
+    `data: ${JSON.stringify({
+      type: 'interrupt',
+      content: { value, resumable: true },
+      chunk_id: chunkId,
+    })}\n\n` + 'data: [DONE]\n\n'
+  );
+}
+
+test.describe('HITL — interrupt banner rendering', () => {
+  test.beforeEach(async ({ page }) => {
+    await mountConfig(page, { title: 'HITL Test Agent' });
+  });
+
+  // ── Tool approval ─────────────────────────────────────────────────────────
+
+  test('renders the interrupt banner for a tool-approval interrupt', async ({ page }) => {
+    await page.route('**/api/proxy/agent/v1/stream', (route) =>
+      route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body: makeInterruptBody(TOOL_APPROVAL_STR),
+      }),
+    );
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Create a pull request');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    await expect(page.getByText('Action Required')).toBeVisible({ timeout: 15_000 });
+    await expect(page.getByRole('button', { name: /approve/i })).toBeVisible();
+    await expect(page.getByRole('button', { name: /reject/i })).toBeVisible();
+  });
+
+  test('clicking Approve sends a resume stream request and removes the banner', async ({
+    page,
+  }) => {
+    let callCount = 0;
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      callCount++;
+      if (callCount === 1) {
+        return route.fulfill({
+          status: 200,
+          headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+          body: makeInterruptBody(TOOL_APPROVAL_STR),
+        });
+      }
+      const body = `data: ${JSON.stringify({ type: 'token', content: 'PR created!', chunk_id: 0 })}\n\ndata: [DONE]\n\n`;
+      return route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body,
+      });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Create a pull request');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+    await expect(page.getByText('Action Required')).toBeVisible({ timeout: 15_000 });
+
+    await page.getByRole('button', { name: /approve/i }).click();
+
+    // Banner should disappear once resume is sent
+    await expect(page.getByText('Action Required')).not.toBeVisible({ timeout: 10_000 });
+    expect(callCount).toBeGreaterThanOrEqual(2);
+  });
+
+  test('clicking Reject sends a reject resume and removes the banner', async ({ page }) => {
+    let callCount = 0;
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      callCount++;
+      if (callCount === 1) {
+        return route.fulfill({
+          status: 200,
+          headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+          body: makeInterruptBody(TOOL_APPROVAL_STR),
+        });
+      }
+      const body = `data: ${JSON.stringify({ type: 'token', content: 'Skipped.', chunk_id: 0 })}\n\ndata: [DONE]\n\n`;
+      return route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body,
+      });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Create a pull request');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+    await expect(page.getByText('Action Required')).toBeVisible({ timeout: 15_000 });
+
+    await page.getByRole('button', { name: /reject/i }).click();
+    await expect(page.getByText('Action Required')).not.toBeVisible({ timeout: 10_000 });
+    expect(callCount).toBeGreaterThanOrEqual(2);
+  });
+
+  // ── Generic text interrupt ──────────────────────────────────────────────
+
+  test('renders "Input Required" for a generic text interrupt', async ({ page }) => {
+    await page.route('**/api/proxy/agent/v1/stream', (route) =>
+      route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body: makeInterruptBody(GENERIC_INTERRUPT_VALUE),
+      }),
+    );
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Run the analysis');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+
+    await expect(page.getByText('Input Required')).toBeVisible({ timeout: 15_000 });
+    await expect(page.getByRole('textbox', { name: /interrupt response/i })).toBeVisible();
+    // Use exact name to avoid matching the chat's "Send message" submit button
+    await expect(page.getByRole('button', { name: 'Send', exact: true })).toBeVisible();
+  });
+
+  test('Send button submits the typed text as the resume response', async ({ page }) => {
+    let callCount = 0;
+    await page.route('**/api/proxy/agent/v1/stream', (route) => {
+      callCount++;
+      if (callCount === 1) {
+        return route.fulfill({
+          status: 200,
+          headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+          body: makeInterruptBody(GENERIC_INTERRUPT_VALUE),
+        });
+      }
+      const body = `data: ${JSON.stringify({ type: 'token', content: 'Got it.', chunk_id: 0 })}\n\ndata: [DONE]\n\n`;
+      return route.fulfill({
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' },
+        body,
+      });
+    });
+
+    const home = new HomePage(page);
+    await home.goto();
+    await home.submitPrompt('Run the analysis');
+
+    const chat = new ChatPage(page);
+    await chat.expectChatRoute();
+    await expect(page.getByText('Input Required')).toBeVisible({ timeout: 15_000 });
+
+    const input = page.getByRole('textbox', { name: /interrupt response/i });
+    await input.fill('JSON format please');
+    await page.getByRole('button', { name: 'Send', exact: true }).click();
+
+    // Banner gone, second stream call made
+    await expect(page.getByText('Input Required')).not.toBeVisible({ timeout: 10_000 });
+    expect(callCount).toBeGreaterThanOrEqual(2);
+  });
+});
diff --git a/e2e/page-objects/ChatPage.ts b/e2e/page-objects/ChatPage.ts
new file mode 100644
index 00000000..9748b1e6
--- /dev/null
+++ b/e2e/page-objects/ChatPage.ts
@@ -0,0 +1,49 @@
+import type { Page } from '@playwright/test';
+import { expect } from '@playwright/test';
+
+/** Page object for the chat view (`/chat/:threadId`). */
+export class ChatPage {
+  constructor(private readonly page: Page) {}
+
+  async waitForLoad(): Promise<void> {
+    // The chat input becomes visible once the page has mounted
+    await this.page.waitForSelector('textarea', { state: 'visible', timeout: 10_000 });
+  }
+
+  /**
+   * Wait for the streaming loading indicator to disappear and for at least
+   * one AI message bubble to appear in the DOM.
+   */
+  async waitForAIResponse(timeout = 15_000): Promise<void> {
+    // The sr-only aria-live region in ChatPage.tsx announces "Response complete".
+    // Use the .sr-only qualifier to avoid matching the chat messages live-log element.
+    await this.page.waitForFunction(
+      () => {
+        const liveRegion = document.querySelector('.sr-only[aria-live="polite"]');
+        return liveRegion?.textContent?.includes('Response complete');
+      },
+      { timeout },
+    );
+  }
+
+  /** Returns true when the current URL matches a chat route. */
+  async isOnChatRoute(): Promise<boolean> {
+    return /\/chat\//.test(this.page.url());
+  }
+
+  /** Asserts the current URL contains a chat thread segment. */
+  async expectChatRoute(): Promise<void> {
+    await expect(this.page).toHaveURL(/\/chat\//);
+  }
+
+  /** Fills the chat input on the chat page and clicks submit — mirrors HomePage.submitPrompt. */
+  async sendMessage(text: string): Promise<void> {
+    await this.page.locator('textarea').fill(text);
+    await this.page.locator('button[type="submit"]').click();
+  }
+
+  /** Returns the full visible text content of the page — useful for asserting response text. */
+  async getBodyText(): Promise<string> {
+    return this.page.locator('body').innerText();
+  }
+}
diff --git a/e2e/page-objects/HomePage.ts b/e2e/page-objects/HomePage.ts
new file mode 100644
index 00000000..2a268812
--- /dev/null
+++ b/e2e/page-objects/HomePage.ts
@@ -0,0 +1,27 @@
+import type { Page } from '@playwright/test';
+
+/** Page object for the homepage (`/`). */
+export class HomePage {
+  constructor(private readonly page: Page) {}
+
+  async goto(): Promise<void> {
+    await this.page.goto('/');
+    await this.page.waitForSelector('textarea', { state: 'visible' });
+  }
+
+  /** Returns the browser document title set from the branding config. */
+  async getDocumentTitle(): Promise<string> {
+    return this.page.title();
+  }
+
+  /** Fills the chat input and clicks the submit button. */
+  async submitPrompt(text: string): Promise<void> {
+    await this.page.locator('textarea').fill(text);
+    await this.page.locator('button[type="submit"]').click();
+  }
+
+  /** Clicks a quick-prompt chip button that contains the given text. */
+  async clickQuickPrompt(text: string): Promise<void> {
+    await this.page.getByText(text, { exact: false }).first().click();
+  }
+}
diff --git a/e2e/page-objects/SettingsPage.ts b/e2e/page-objects/SettingsPage.ts
new file mode 100644
index 00000000..eaacc11e
--- /dev/null
+++ b/e2e/page-objects/SettingsPage.ts
@@ -0,0 +1,32 @@
+import type { Page } from '@playwright/test';
+import { expect } from '@playwright/test';
+
+type SettingsTab = 'Profile' | 'Memories' | 'Custom Rules' | 'Appearance' | 'Tool Approvals';
+
+/** Page object for the settings view (`/settings`). */
+export class SettingsPage {
+  constructor(private readonly page: Page) {}
+
+  async goto(): Promise<void> {
+    await this.page.goto('/settings');
+    await this.page.waitForSelector('h1', { state: 'visible' });
+  }
+
+  async getHeading(): Promise<string> {
+    return this.page.locator('h1').innerText();
+  }
+
+  async clickTab(tab: SettingsTab): Promise<void> {
+    await this.page.getByRole('tab', { name: tab, exact: false }).click();
+  }
+
+  async expectTabContentVisible(heading: SettingsTab): Promise<void> {
+    await expect(this.page.getByRole('heading', { name: heading, exact: false }).first()).toBeVisible();
+  }
+
+  /** Navigate back to the home page via the back arrow button. */
+  async navigateBack(): Promise<void> {
+    await this.page.getByRole('button', { name: 'Back' }).click();
+    await expect(this.page).toHaveURL('/');
+  }
+}
diff --git a/e2e/settings/settings-page.spec.ts b/e2e/settings/settings-page.spec.ts
new file mode 100644
index 00000000..08584bbf
--- /dev/null
+++ b/e2e/settings/settings-page.spec.ts
@@ -0,0 +1,112 @@
+import { test, expect } from '@playwright/test';
+import { mountConfig } from '../helpers/config-mount';
+import { SettingsPage } from '../page-objects/SettingsPage';
+import { setLocalStorageSettings, getLocalStorageSettings } from '../helpers/local-storage';
+
+/**
+ * Settings page tests:
+ *
+ *  1. Settings page loads with the expected heading.
+ *  2. All tabs are navigable.
+ *  3. Theme toggle persists to localStorage.
+ *  4. "Tool Approvals" tab shows always-allowed tools list.
+ *  5. Adding a tool to always-allowed saves to localStorage.
+ */
+
+test.describe('Settings page', () => {
+  test.beforeEach(async ({ page }) => {
+    await mountConfig(page, { title: 'Settings Test' });
+  });
+
+  // ── Basic load ─────────────────────────────────────────────────────────────
+
+  test('settings page loads with the Settings heading', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    const heading = await settings.getHeading();
+    expect(heading.toLowerCase()).toContain('settings');
+  });
+
+  test('settings page can be reached via the /settings route', async ({ page }) => {
+    await mountConfig(page);
+    await page.goto('/settings');
+    await expect(page).toHaveURL(/\/settings/);
+    await expect(page.locator('h1')).toBeVisible();
+  });
+
+  // ── Tab navigation ─────────────────────────────────────────────────────────
+
+  test('Profile tab is visible and active by default', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.expectTabContentVisible('Profile');
+  });
+
+  test('clicking Appearance tab shows the Appearance section', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.clickTab('Appearance');
+    await settings.expectTabContentVisible('Appearance');
+  });
+
+  test('clicking Tool Approvals tab shows the tool list', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.clickTab('Tool Approvals');
+    await settings.expectTabContentVisible('Tool Approvals');
+  });
+
+  test('clicking Memories tab shows the Memories section', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.clickTab('Memories');
+    await settings.expectTabContentVisible('Memories');
+  });
+
+  // ── Theme toggle + localStorage persistence ────────────────────────────────
+
+  test('toggling the theme persists the selection to localStorage', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.clickTab('Appearance');
+
+    // Toggle to "Dark" theme
+    const darkOption = page.getByRole('radio', { name: /dark/i });
+    await darkOption.click();
+
+    const stored = await getLocalStorageSettings(page);
+    expect(stored?.theme).toBe('dark');
+
+    // Toggle back to "Light"
+    const lightOption = page.getByRole('radio', { name: /light/i });
+    await lightOption.click();
+
+    const stored2 = await getLocalStorageSettings(page);
+    expect(stored2?.theme).toBe('light');
+  });
+
+  // ── Pre-populated settings from localStorage ───────────────────────────────
+
+  test('pre-populated alwaysAllowedTools from localStorage are shown in Tool Approvals', async ({
+    page,
+  }) => {
+    await setLocalStorageSettings(page, { alwaysAllowedTools: ['web_search', 'github_search'] });
+    await mountConfig(page, { title: 'Tool Approvals Test' });
+
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.clickTab('Tool Approvals');
+
+    await expect(page.getByText('web_search')).toBeVisible();
+    await expect(page.getByText('github_search')).toBeVisible();
+  });
+
+  // ── Back navigation ────────────────────────────────────────────────────────
+
+  test('back button navigates to the home page', async ({ page }) => {
+    const settings = new SettingsPage(page);
+    await settings.goto();
+    await settings.navigateBack();
+    await expect(page).toHaveURL('/');
+  });
+});
diff --git a/e2e/smoke/chat-flow.spec.ts b/e2e/smoke/chat-flow.spec.ts
new file mode 100644
index 00000000..da69d8b2
--- /dev/null
+++ b/e2e/smoke/chat-flow.spec.ts
@@ -0,0 +1,46 @@
+import { test, expect } from '@playwright/test';
+import { HomePage } from '../page-objects/HomePage';
+import { ChatPage } from '../page-objects/ChatPage';
+import { mountConfig } from '../helpers/config-mount';
+import { mockAgentStream } from '../helpers/sse-mock';
+
+const MOCK_RESPONSE = 'Hello from the test agent!';
+
+test.describe('Chat flow smoke test', () => {
+  test.beforeEach(async ({ page }) => {
+    await mountConfig(page, { title: 'Test Agent' });
+    await mockAgentStream(page, MOCK_RESPONSE);
+  });
+
+  test('home page loads with textarea and submit button', async ({ page }) => {
+    const home = new HomePage(page);
+    await home.goto();
+
+    await expect(page.locator('textarea')).toBeVisible();
+    await expect(page.locator('button[type="submit"]')).toBeVisible();
+  });
+
+  test('submitting a prompt navigates to the chat route', async ({ page }) => {
+    const home = new HomePage(page);
+    const chat = new ChatPage(page);
+
+    await home.goto();
+    await home.submitPrompt('What can you do?');
+
+    await chat.expectChatRoute();
+  });
+
+  test('chat page shows AI response after streaming completes', async ({ page }) => {
+    const home = new HomePage(page);
+    const chat = new ChatPage(page);
+
+    await home.goto();
+    await home.submitPrompt('Tell me something interesting.');
+
+    await chat.expectChatRoute();
+    await chat.waitForAIResponse();
+
+    const bodyText = await chat.getBodyText();
+    expect(bodyText).toContain(MOCK_RESPONSE);
+  });
+});
diff --git a/env.template b/env.template
index c97b7f19..bc7935d5 100644
--- a/env.template
+++ b/env.template
@@ -1,4 +1,4 @@
-PORT=5003
+PORT=8080
 ENVIRONMENT=development
 
 COOKIE_SIGN=your-secret-with-minimum-length-of-32-characters
@@ -6,6 +6,26 @@ AUTH_ENABLED=false
 SSO_CLIENT_ID=your-sso-client-id
 SSO_CLIENT_SECRET=your-sso-client-secret
 SSO_ISSUER_HOST=https://your-sso-provider.com
-SSO_CALLBACK_URL=http://localhost:5003/auth/callback/oidc
+SSO_CALLBACK_URL=http://localhost:8080/auth/callback/oidc
 
 AGENT_HOST=http://localhost:5002
+
+CORS_ORIGIN=http://localhost:8080
+
+# Config file path (optional, defaults to config/ui/settings.yaml)
+UI_CONFIG_PATH=config/ui/settings.yaml
+
+# Environment variable overrides for config (optional)
+# BRANDING_TITLE="My Custom Agent"
+# BRANDING_LOGO_URL="/custom-logo.svg"
+# BRANDING_FAVICON_URL="/custom-favicon.ico"
+# FEATURE_AUTH_ENABLED=true
+# FEATURE_DEBUG_MODE_DEFAULT=false
+# AGENT_ENDPOINT=https://custom-agent.example.com
+# AGENT_TIMEOUT_MS=30000
+
+# Redis (started by `make local` via compose.yml)
+REDIS_HOST=localhost
+REDIS_PORT=6380
+REDIS_PASSWORD=
+REDIS_TLS=false
diff --git a/eslint.config.js b/eslint.config.js
index caf6a4b7..c7a28161 100644
--- a/eslint.config.js
+++ b/eslint.config.js
@@ -24,6 +24,13 @@ export default tseslint.config(
         { allowConstantExport: true },
       ],
       '@typescript-eslint/no-explicit-any': 'off',
+      '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_', varsIgnorePattern: '^_' }],
+    },
+  },
+  {
+    files: ['src/frontend/test-utils/**/*.{ts,tsx}', '**/*.test.{ts,tsx}'],
+    rules: {
+      'react-refresh/only-export-components': 'off',
     },
   },
 )
diff --git a/index.html b/index.html
index 304d7d6f..9ba11c98 100644
--- a/index.html
+++ b/index.html
@@ -1,13 +1,28 @@
 <!doctype html>
 <html lang="en">
-
 <head>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <script>
+    // FOUC prevention: apply theme classes before first paint
+    (function() {
+      try {
+        var stored = localStorage.getItem('template-ui-settings');
+        var theme = stored ? JSON.parse(stored).theme : 'dark';
+      } catch(e) {
+        var theme = 'dark';
+      }
+      var html = document.documentElement;
+      if (theme === 'dark') {
+        html.classList.add('dark', 'pf-v6-theme-dark');
+      } else {
+        html.classList.remove('dark', 'pf-v6-theme-dark');
+      }
+    })();
+  </script>
   <script src="https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4"></script>
   <title>Template UI</title>
 </head>
-
 <body>
   <div id="root"></div>
   <script>
@@ -35,5 +50,4 @@
   </script>
   <script type="module" src="/src/frontend/main.tsx"></script>
 </body>
-
-</html>
\ No newline at end of file
+</html>
diff --git a/package-lock.json b/package-lock.json
index a03d841c..073821c0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,50 +10,232 @@
       "dependencies": {
         "@fastify/cookie": "^11.0.2",
         "@fastify/cors": "^11.1.0",
+        "@fastify/helmet": "^13.0.2",
         "@fastify/oauth2": "^8.1.2",
+        "@fastify/rate-limit": "^10.3.0",
         "@fastify/session": "^11.1.0",
         "@fastify/static": "^8.2.0",
         "@fastify/url-data": "^6.0.3",
         "@langchain/core": "^0.3.55",
-        "@langchain/langgraph-sdk": "^0.0.74",
-        "@radix-ui/react-scroll-area": "^1.2.8",
-        "@radix-ui/react-select": "^2.2.4",
-        "@radix-ui/react-slot": "^1.2.2",
-        "@radix-ui/react-tabs": "^1.1.11",
-        "@radix-ui/react-tooltip": "^1.2.6",
+        "@langchain/langgraph-sdk": "^1.9.2",
+        "@open-policy-agent/opa-wasm": "^1.10.0",
+        "@opentelemetry/auto-instrumentations-node": "^0.76.0",
+        "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",
+        "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
+        "@opentelemetry/resources": "^2.7.1",
+        "@opentelemetry/sdk-node": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.41.1",
+        "@patternfly/chatbot": "^6.5.0",
+        "@patternfly/patternfly": "^6.4.0",
+        "@patternfly/react-core": "^6.4.3",
+        "@patternfly/react-icons": "^6.4.0",
+        "@patternfly/react-styles": "^6.4.0",
+        "@patternfly/react-table": "^6.4.3",
+        "@reduxjs/toolkit": "^2.11.2",
         "@tailwindcss/vite": "^4.1.5",
         "@types/uuid": "^10.0.0",
-        "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "fastify": "^5.5.0",
         "fastify-plugin": "^5.0.1",
+        "ioredis": "^5.10.1",
+        "js-yaml": "^4.1.1",
         "lucide-react": "^0.508.0",
         "react": "^19.0.0",
         "react-dom": "^19.0.0",
         "react-markdown": "^9.0.3",
+        "react-redux": "^9.2.0",
         "react-router-dom": "^7.5.3",
+        "rehype-highlight": "^7.0.2",
+        "rehype-sanitize": "^6.0.0",
         "tailwind-merge": "^3.2.0",
         "tailwindcss": "^4.1.5",
         "uuid": "^11.1.0"
       },
       "devDependencies": {
         "@eslint/js": "^9.22.0",
+        "@playwright/test": "^1.61.1",
+        "@testing-library/jest-dom": "^6.9.1",
+        "@testing-library/react": "^16.3.2",
+        "@testing-library/user-event": "^14.6.1",
+        "@types/jest-axe": "^3.5.9",
+        "@types/js-yaml": "^4.0.9",
         "@types/node": "^22.17.2",
         "@types/react": "^19.1.2",
         "@types/react-dom": "^19.1.3",
+        "@types/react-redux": "^7.1.34",
         "@vitejs/plugin-react-swc": "^3.9.0",
+        "@vitest/coverage-v8": "^4.1.10",
         "concurrently": "^9.2.0",
         "eslint": "^9.22.0",
         "eslint-plugin-react-hooks": "^5.2.0",
         "eslint-plugin-react-refresh": "^0.4.19",
         "globals": "^16.0.0",
+        "jest-axe": "^10.0.0",
+        "jsdom": "^29.1.1",
         "nodemon": "^3.1.10",
         "pino-pretty": "^13.1.1",
         "tsx": "^4.20.4",
         "tw-animate-css": "^1.2.9",
         "typescript": "~5.7.2",
         "typescript-eslint": "^8.26.1",
-        "vite": "^6.3.4"
+        "vite": "^6.3.4",
+        "vitest": "^4.1.6"
+      }
+    },
+    "node_modules/@adobe/css-tools": {
+      "version": "4.4.4",
+      "resolved": "https://registry.npmjs.org/@adobe/css-tools/-/css-tools-4.4.4.tgz",
+      "integrity": "sha512-Elp+iwUx5rN5+Y8xLt5/GRoG20WGoDCQ/1Fb+1LiGtvwbDavuSk0jhD/eZdckHAuzcDzccnkv+rEjyWfRx18gg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@asamuzakjp/css-color": {
+      "version": "5.1.11",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-5.1.11.tgz",
+      "integrity": "sha512-KVw6qIiCTUQhByfTd78h2yD1/00waTmm9uy/R7Ck/ctUyAPj+AEDLkQIdJW0T8+qGgj3j5bpNKK7Q3G+LedJWg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/generational-cache": "^1.0.1",
+        "@csstools/css-calc": "^3.2.0",
+        "@csstools/css-color-parser": "^4.1.0",
+        "@csstools/css-parser-algorithms": "^4.0.0",
+        "@csstools/css-tokenizer": "^4.0.0"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@asamuzakjp/dom-selector": {
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-7.1.1.tgz",
+      "integrity": "sha512-67RZDnYRc8H/8MLDgQCDE//zoqVFwajkepHZgmXrbwybzXOEwOWGPYGmALYl9J2DOLfFPPs6kKCqmbzV895hTQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/generational-cache": "^1.0.1",
+        "@asamuzakjp/nwsapi": "^2.3.9",
+        "bidi-js": "^1.0.3",
+        "css-tree": "^3.2.1",
+        "is-potential-custom-element-name": "^1.0.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@asamuzakjp/generational-cache": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/generational-cache/-/generational-cache-1.0.1.tgz",
+      "integrity": "sha512-wajfB8KqzMCN2KGNFdLkReeHncd0AslUSrvHVvvYWuU8ghncRJoA50kT3zP9MVL0+9g4/67H+cdvBskj9THPzg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@asamuzakjp/nwsapi": {
+      "version": "2.3.9",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/nwsapi/-/nwsapi-2.3.9.tgz",
+      "integrity": "sha512-n8GuYSrI9bF7FFZ/SjhwevlHc8xaVlb/7HmHelnc/PZXBD2ZR49NnN9sMMuDdEGPeeRQ5d0hqlSlEpgCX3Wl0Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@babel/code-frame": {
+      "version": "7.29.0",
+      "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz",
+      "integrity": "sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-validator-identifier": "^7.28.5",
+        "js-tokens": "^4.0.0",
+        "picocolors": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-string-parser": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
+      "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
+      "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/parser": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.7.tgz",
+      "integrity": "sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.7"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/runtime": {
+      "version": "7.29.2",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.2.tgz",
+      "integrity": "sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/types": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.7.tgz",
+      "integrity": "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-string-parser": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@bcoe/v8-coverage": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz",
+      "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@bramus/specificity": {
+      "version": "2.4.2",
+      "resolved": "https://registry.npmjs.org/@bramus/specificity/-/specificity-2.4.2.tgz",
+      "integrity": "sha512-ctxtJ/eA+t+6q2++vj5j7FYX3nRu311q1wfYH3xjlLOsczhlhxAg2FWNUXhpGvAw3BWo1xBcvOV6/YLc2r5FJw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "css-tree": "^3.0.0"
+      },
+      "bin": {
+        "specificity": "bin/cli.js"
       }
     },
     "node_modules/@cfworker/json-schema": {
@@ -62,6 +244,146 @@
       "integrity": "sha512-gAmrUZSGtKc3AiBL71iNWxDsyUC5uMaKKGdvzYsBoTW/xi42JQHl7eKV2OYzCUqvc+D2RCcf7EXY2iCyFIk6og==",
       "license": "MIT"
     },
+    "node_modules/@csstools/color-helpers": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-6.0.2.tgz",
+      "integrity": "sha512-LMGQLS9EuADloEFkcTBR3BwV/CGHV7zyDxVRtVDTwdI2Ca4it0CCVTT9wCkxSgokjE5Ho41hEPgb8OEUwoXr6Q==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
+    "node_modules/@csstools/css-calc": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.2.0.tgz",
+      "integrity": "sha512-bR9e6o2BDB12jzN/gIbjHa5wLJ4UjD1CB9pM7ehlc0ddk6EBz+yYS1EV2MF55/HUxrHcB/hehAyt5vhsA3hx7w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^4.0.0",
+        "@csstools/css-tokenizer": "^4.0.0"
+      }
+    },
+    "node_modules/@csstools/css-color-parser": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-4.1.0.tgz",
+      "integrity": "sha512-U0KhLYmy2GVj6q4T3WaAe6NPuFYCPQoE3b0dRGxejWDgcPp8TP7S5rVdM5ZrFaqu4N67X8YaPBw14dQSYx3IyQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/color-helpers": "^6.0.2",
+        "@csstools/css-calc": "^3.2.0"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^4.0.0",
+        "@csstools/css-tokenizer": "^4.0.0"
+      }
+    },
+    "node_modules/@csstools/css-parser-algorithms": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.0.tgz",
+      "integrity": "sha512-+B87qS7fIG3L5h3qwJ/IFbjoVoOe/bpOdh9hAjXbvx0o8ImEmUsGXN0inFOnk2ChCFgqkkGFQ+TpM5rbhkKe4w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-tokenizer": "^4.0.0"
+      }
+    },
+    "node_modules/@csstools/css-syntax-patches-for-csstree": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.3.tgz",
+      "integrity": "sha512-SH60bMfrRCJF3morcdk57WklujF4Jr/EsQUzqkarfHXEFcAR1gg7fS/chAE922Sehgzc1/+Tz5H3Ypa1HiEKrg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "peerDependencies": {
+        "css-tree": "^3.2.1"
+      },
+      "peerDependenciesMeta": {
+        "css-tree": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@csstools/css-tokenizer": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.0.tgz",
+      "integrity": "sha512-QxULHAm7cNu72w97JUNCBFODFaXpbDg+dP8b/oWFAZ2MTRppA3U00Y2L1HqaS4J6yBqxwa/Y3nMBaxVKbB/NsA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
     "node_modules/@esbuild/aix-ppc64": {
       "version": "0.27.4",
       "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.4.tgz",
@@ -635,6 +957,24 @@
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       }
     },
+    "node_modules/@exodus/bytes": {
+      "version": "1.15.0",
+      "resolved": "https://registry.npmjs.org/@exodus/bytes/-/bytes-1.15.0.tgz",
+      "integrity": "sha512-UY0nlA+feH81UGSHv92sLEPLCeZFjXOuHhrIo0HQydScuQc8s0A7kL/UdgwgDq8g8ilksmuoF35YVTNphV2aBQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      },
+      "peerDependencies": {
+        "@noble/hashes": "^1.8.0 || ^2.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@noble/hashes": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@fastify/accept-negotiator": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/@fastify/accept-negotiator/-/accept-negotiator-2.0.1.tgz",
@@ -785,6 +1125,26 @@
       ],
       "license": "MIT"
     },
+    "node_modules/@fastify/helmet": {
+      "version": "13.0.2",
+      "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-13.0.2.tgz",
+      "integrity": "sha512-tO1QMkOfNeCt9l4sG/FiWErH4QMm+RjHzbMTrgew1DYOQ2vb/6M1G2iNABBrD7Xq6dUk+HLzWW8u+rmmhQHifA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "fastify-plugin": "^5.0.0",
+        "helmet": "^8.0.0"
+      }
+    },
     "node_modules/@fastify/merge-json-schemas": {
       "version": "0.2.1",
       "resolved": "https://registry.npmjs.org/@fastify/merge-json-schemas/-/merge-json-schemas-0.2.1.tgz",
@@ -845,6 +1205,27 @@
         "ipaddr.js": "^2.1.0"
       }
     },
+    "node_modules/@fastify/rate-limit": {
+      "version": "10.3.0",
+      "resolved": "https://registry.npmjs.org/@fastify/rate-limit/-/rate-limit-10.3.0.tgz",
+      "integrity": "sha512-eIGkG9XKQs0nyynatApA3EVrojHOuq4l6fhB4eeCk4PIOeadvOJz9/4w3vGI44Go17uaXOWEcPkaD8kuKm7g6Q==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "@lukeed/ms": "^2.0.2",
+        "fastify-plugin": "^5.0.0",
+        "toad-cache": "^3.7.0"
+      }
+    },
     "node_modules/@fastify/send": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/@fastify/send/-/send-4.1.0.tgz",
@@ -932,44 +1313,37 @@
         "fastify-plugin": "^5.0.0"
       }
     },
-    "node_modules/@floating-ui/core": {
-      "version": "1.7.5",
-      "resolved": "https://registry.npmjs.org/@floating-ui/core/-/core-1.7.5.tgz",
-      "integrity": "sha512-1Ih4WTWyw0+lKyFMcBHGbb5U5FtuHJuujoyyr5zTaWS5EYMeT6Jb2AuDeftsCsEuchO+mM2ij5+q9crhydzLhQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@floating-ui/utils": "^0.2.11"
-      }
-    },
-    "node_modules/@floating-ui/dom": {
-      "version": "1.7.6",
-      "resolved": "https://registry.npmjs.org/@floating-ui/dom/-/dom-1.7.6.tgz",
-      "integrity": "sha512-9gZSAI5XM36880PPMm//9dfiEngYoC6Am2izES1FF406YFsjvyBMmeJ2g4SAju3xWwtuynNRFL2s9hgxpLI5SQ==",
-      "license": "MIT",
+    "node_modules/@grpc/grpc-js": {
+      "version": "1.14.3",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.3.tgz",
+      "integrity": "sha512-Iq8QQQ/7X3Sac15oB6p0FmUg/klxQvXLeileoqrTRGJYLV+/9tubbr9ipz0GKHjmXVsgFPo/+W+2cA8eNcR+XA==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@floating-ui/core": "^1.7.5",
-        "@floating-ui/utils": "^0.2.11"
+        "@grpc/proto-loader": "^0.8.0",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      },
+      "engines": {
+        "node": ">=12.10.0"
       }
     },
-    "node_modules/@floating-ui/react-dom": {
-      "version": "2.1.8",
-      "resolved": "https://registry.npmjs.org/@floating-ui/react-dom/-/react-dom-2.1.8.tgz",
-      "integrity": "sha512-cC52bHwM/n/CxS87FH0yWdngEZrjdtLW/qVruo68qg+prK7ZQ4YGdut2GyDVpoGeAYe/h899rVeOVm6Oi40k2A==",
-      "license": "MIT",
+    "node_modules/@grpc/proto-loader": {
+      "version": "0.8.1",
+      "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.8.1.tgz",
+      "integrity": "sha512-wtF6h+DY6M3YaDBPAmvuuA6jV8Sif9MjtOI5euKFWRgCDl5PeDpPsHR9u2l6St5ceY8AZgoNDww5+HvEsXFsGg==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@floating-ui/dom": "^1.7.6"
+        "lodash.camelcase": "^4.3.0",
+        "long": "^5.0.0",
+        "protobufjs": "^7.5.5",
+        "yargs": "^17.7.2"
       },
-      "peerDependencies": {
-        "react": ">=16.8.0",
-        "react-dom": ">=16.8.0"
+      "bin": {
+        "proto-loader-gen-types": "build/bin/proto-loader-gen-types.js"
+      },
+      "engines": {
+        "node": ">=6"
       }
     },
-    "node_modules/@floating-ui/utils": {
-      "version": "0.2.11",
-      "resolved": "https://registry.npmjs.org/@floating-ui/utils/-/utils-0.2.11.tgz",
-      "integrity": "sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==",
-      "license": "MIT"
-    },
     "node_modules/@hapi/boom": {
       "version": "10.0.1",
       "resolved": "https://registry.npmjs.org/@hapi/boom/-/boom-10.0.1.tgz",
@@ -1069,6 +1443,12 @@
         "url": "https://github.com/sponsors/nzakas"
       }
     },
+    "node_modules/@ioredis/commands": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/@ioredis/commands/-/commands-1.5.1.tgz",
+      "integrity": "sha512-JH8ZL/ywcJyR9MmJ5BNqZllXNZQqQbnVZOqpPQqE1vHiFgAw4NHbvE0FOduNU8IX9babitBT46571OnPTT0Zcw==",
+      "license": "MIT"
+    },
     "node_modules/@isaacs/cliui": {
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-9.0.0.tgz",
@@ -1078,24 +1458,103 @@
         "node": ">=18"
       }
     },
-    "node_modules/@jridgewell/gen-mapping": {
-      "version": "0.3.13",
-      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
-      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+    "node_modules/@jest/diff-sequences": {
+      "version": "30.4.0",
+      "resolved": "https://registry.npmjs.org/@jest/diff-sequences/-/diff-sequences-30.4.0.tgz",
+      "integrity": "sha512-zOpzlfUs45l6u7jm39qr87JCHUDsaeCtvL+kQe/Vn9jSnRB4/5IPXISm0h9I1vZW/o00Kn4UTJ2MOlhnUGwv3g==",
+      "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.0",
-        "@jridgewell/trace-mapping": "^0.3.24"
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@jridgewell/remapping": {
-      "version": "2.3.5",
-      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
-      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+    "node_modules/@jest/expect-utils": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/@jest/expect-utils/-/expect-utils-30.4.1.tgz",
+      "integrity": "sha512-ZBn5CglH8fBsQsvs4VWNzD4aWfUYks+IdOOQU3MEK71ol/BcVm+P+rtb1KpiFBpSWSCE27uOahyyf1vfqOVbcQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
+        "@jest/get-type": "30.1.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@jest/get-type": {
+      "version": "30.1.0",
+      "resolved": "https://registry.npmjs.org/@jest/get-type/-/get-type-30.1.0.tgz",
+      "integrity": "sha512-eMbZE2hUnx1WV0pmURZY9XoXPkUYjpc55mb0CrhtdWLtzMQPFvu/rZkTLZFTsdaVQa+Tr4eWAteqcUzoawq/uA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@jest/pattern": {
+      "version": "30.4.0",
+      "resolved": "https://registry.npmjs.org/@jest/pattern/-/pattern-30.4.0.tgz",
+      "integrity": "sha512-RAWn3+f9u8BsHijKJ71uHcFp6vmyEt6VvoWXkl6hKF3qVIuWNmudVjg12DlBPGup/frIl5UcUlH5HfEuvHpEXg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "jest-regex-util": "30.4.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@jest/schemas": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-30.4.1.tgz",
+      "integrity": "sha512-i6b4qw5qnP8c5FEeBJg/uZQ4ddrkN6Ca8qISJh0pr7a5hfn3h3v5x60BEbOC7OYAGZNMs1LfFLwnW2CuK8F57Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@sinclair/typebox": "^0.34.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@jest/types": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/@jest/types/-/types-30.4.1.tgz",
+      "integrity": "sha512-f1x/vJXIfjOlEmejYpbkbgw1gOqpPECwMvMEtBqe47j7H2Hg8h8w3o3ikhSXq3MI15kg+oQ0exWO0uCtTNJLoQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/pattern": "30.4.0",
+        "@jest/schemas": "30.4.1",
+        "@types/istanbul-lib-coverage": "^2.0.6",
+        "@types/istanbul-reports": "^3.0.4",
+        "@types/node": "*",
+        "@types/yargs": "^17.0.33",
+        "chalk": "^4.1.2"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
       }
     },
     "node_modules/@jridgewell/resolve-uri": {
@@ -1123,6 +1582,16 @@
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
+    "node_modules/@js-sdsl/ordered-map": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
+      "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==",
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/js-sdsl"
+      }
+    },
     "node_modules/@langchain/core": {
       "version": "0.3.80",
       "resolved": "https://registry.npmjs.org/@langchain/core/-/core-0.3.80.tgz",
@@ -1160,775 +1629,3336 @@
       }
     },
     "node_modules/@langchain/langgraph-sdk": {
-      "version": "0.0.74",
-      "resolved": "https://registry.npmjs.org/@langchain/langgraph-sdk/-/langgraph-sdk-0.0.74.tgz",
-      "integrity": "sha512-IUN0m4BYkGWdviFd4EaWDcQgxNq8z+1LIwXajCSt9B+Cb/pz0ZNpIPdu5hAIsf6a0RWu5yRUhzL1L40t7vu3Zg==",
+      "version": "1.9.2",
+      "resolved": "https://registry.npmjs.org/@langchain/langgraph-sdk/-/langgraph-sdk-1.9.2.tgz",
+      "integrity": "sha512-1kDPjR0VH/39q2h8k0Sxi35KxOvEQPModVCepxGLlRkbZmuWUH+zfICuJd3rmD1ByeOKQBZEaB7Y+VCYmSMt1w==",
       "license": "MIT",
       "dependencies": {
+        "@langchain/core": "^1.1.44",
+        "@langchain/protocol": "^0.0.15",
         "@types/json-schema": "^7.0.15",
-        "p-queue": "^6.6.2",
-        "p-retry": "4",
-        "uuid": "^9.0.0"
+        "p-queue": "^9.0.1",
+        "p-retry": "^7.1.1",
+        "uuid": "^13.0.0"
       },
       "peerDependencies": {
-        "@langchain/core": ">=0.2.31 <0.4.0",
-        "react": "^18 || ^19"
+        "react": "^18 || ^19",
+        "react-dom": "^18 || ^19",
+        "svelte": "^4.0.0 || ^5.0.0",
+        "vue": "^3.0.0"
       },
       "peerDependenciesMeta": {
-        "@langchain/core": {
+        "react": {
           "optional": true
         },
-        "react": {
+        "react-dom": {
+          "optional": true
+        },
+        "svelte": {
+          "optional": true
+        },
+        "vue": {
           "optional": true
         }
       }
     },
-    "node_modules/@langchain/langgraph-sdk/node_modules/uuid": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
-      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==",
-      "funding": [
-        "https://github.com/sponsors/broofa",
-        "https://github.com/sponsors/ctavan"
-      ],
+    "node_modules/@langchain/langgraph-sdk/node_modules/@langchain/core": {
+      "version": "1.1.46",
+      "resolved": "https://registry.npmjs.org/@langchain/core/-/core-1.1.46.tgz",
+      "integrity": "sha512-i8rDC83BpItxChCw4Lf+6tAr+k+OUcbirc5ZkrhI9ywYWmvxegUljLGOGYvtJNTbEAIFkhYIODPE5QRqyjF6sA==",
       "license": "MIT",
-      "bin": {
-        "uuid": "dist/bin/uuid"
+      "dependencies": {
+        "@cfworker/json-schema": "^4.0.2",
+        "@standard-schema/spec": "^1.1.0",
+        "js-tiktoken": "^1.0.12",
+        "langsmith": ">=0.5.0 <1.0.0",
+        "mustache": "^4.2.0",
+        "p-queue": "^6.6.2",
+        "zod": "^3.25.76 || ^4"
+      },
+      "engines": {
+        "node": ">=20"
       }
     },
-    "node_modules/@lukeed/ms": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/@lukeed/ms/-/ms-2.0.2.tgz",
-      "integrity": "sha512-9I2Zn6+NJLfaGoz9jN3lpwDgAYvfGeNYdbAIjJOqzs4Tpc+VU3Jqq4IofSUBKajiDS8k9fZIg18/z13mpk1bsA==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/@langchain/core/node_modules/p-queue": {
+      "version": "6.6.2",
+      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-6.6.2.tgz",
+      "integrity": "sha512-RwFpb72c/BhQLEXIZ5K2e+AhgNVmIejGlTgiB9MzZ0e93GRvqZ7uSi0dvRF7/XIXDeNkra2fNHBxTyPDGySpjQ==",
       "license": "MIT",
+      "dependencies": {
+        "eventemitter3": "^4.0.4",
+        "p-timeout": "^3.2.0"
+      },
       "engines": {
         "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@pinojs/redact": {
-      "version": "0.4.0",
-      "resolved": "https://registry.npmjs.org/@pinojs/redact/-/redact-0.4.0.tgz",
-      "integrity": "sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==",
-      "license": "MIT"
-    },
-    "node_modules/@radix-ui/number": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/number/-/number-1.1.1.tgz",
-      "integrity": "sha512-MkKCwxlXTgz6CFoJx3pCwn07GKp36+aZyu/u2Ln2VrA5DcdyCZkASEDBTd8x5whTQQL5CiYf4prXKLcgQdv29g==",
-      "license": "MIT"
-    },
-    "node_modules/@radix-ui/primitive": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.3.tgz",
-      "integrity": "sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg==",
-      "license": "MIT"
-    },
-    "node_modules/@radix-ui/react-arrow": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-arrow/-/react-arrow-1.1.7.tgz",
-      "integrity": "sha512-F+M1tLhO+mlQaOWspE8Wstg+z6PwxwRd8oQ8IXceWz92kfAmalTRf0EjrouQeo7QssEPfCn05B4Ihs1K9WQ/7w==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/langsmith": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/langsmith/-/langsmith-0.6.3.tgz",
+      "integrity": "sha512-pXrQ4/4myQvjFFOAUmt5pWRrLEZR20gzIJD7MNdUH+5/S5nLI4ZRBo/SYKC6coaYj9pYTfQdBIzcs+3kfJ5uDA==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3"
+        "p-queue": "6.6.2"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": "*",
+        "@opentelemetry/exporter-trace-otlp-proto": "*",
+        "@opentelemetry/sdk-trace-base": "*",
+        "openai": "*",
+        "ws": ">=7"
       },
       "peerDependenciesMeta": {
-        "@types/react": {
+        "@opentelemetry/api": {
           "optional": true
         },
-        "@types/react-dom": {
+        "@opentelemetry/exporter-trace-otlp-proto": {
+          "optional": true
+        },
+        "@opentelemetry/sdk-trace-base": {
+          "optional": true
+        },
+        "openai": {
+          "optional": true
+        },
+        "ws": {
           "optional": true
         }
       }
     },
-    "node_modules/@radix-ui/react-collection": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-collection/-/react-collection-1.1.7.tgz",
-      "integrity": "sha512-Fh9rGN0MoI4ZFUNyfFVNU4y9LUz93u9/0K+yLgA2bwRojxM8JU1DyvvMBabnZPBgMWREAJvU2jjVzq+LrFUglw==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/langsmith/node_modules/p-queue": {
+      "version": "6.6.2",
+      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-6.6.2.tgz",
+      "integrity": "sha512-RwFpb72c/BhQLEXIZ5K2e+AhgNVmIejGlTgiB9MzZ0e93GRvqZ7uSi0dvRF7/XIXDeNkra2fNHBxTyPDGySpjQ==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3"
+        "eventemitter3": "^4.0.4",
+        "p-timeout": "^3.2.0"
       },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "engines": {
+        "node": ">=8"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@radix-ui/react-collection/node_modules/@radix-ui/react-slot": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.2.3.tgz",
-      "integrity": "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/p-queue": {
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-9.2.0.tgz",
+      "integrity": "sha512-dWgLE8AH0HjQ9fe74pUkKkvzzYT18Inp4zra3lKHnnwqGvcfcUBrvF2EAVX+envufDNBOzpPq/IBUONDbI7+3g==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2"
+        "eventemitter3": "^5.0.4",
+        "p-timeout": "^7.0.0"
       },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "engines": {
+        "node": ">=20"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@radix-ui/react-compose-refs": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-compose-refs/-/react-compose-refs-1.1.2.tgz",
-      "integrity": "sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/p-queue/node_modules/eventemitter3": {
+      "version": "5.0.4",
+      "resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-5.0.4.tgz",
+      "integrity": "sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==",
+      "license": "MIT"
+    },
+    "node_modules/@langchain/langgraph-sdk/node_modules/p-queue/node_modules/p-timeout": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/p-timeout/-/p-timeout-7.0.1.tgz",
+      "integrity": "sha512-AxTM2wDGORHGEkPCt8yqxOTMgpfbEHqF51f/5fJCmwFC3C/zNcGT63SymH2ttOAaiIws2zVg4+izQCjrakcwHg==",
       "license": "MIT",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "engines": {
+        "node": ">=20"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@radix-ui/react-context": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-context/-/react-context-1.1.2.tgz",
-      "integrity": "sha512-jCi/QKUM2r1Ju5a3J64TH2A5SpKAgh0LpknyqdQ4m6DCV0xJ2HG1xARRwNGPQfi1SLdLWZ1OJz6F4OMBBNiGJA==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/p-retry": {
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/p-retry/-/p-retry-7.1.1.tgz",
+      "integrity": "sha512-J5ApzjyRkkf601HpEeykoiCvzHQjWxPAHhyjFcEUP2SWq0+35NKh8TLhpLw+Dkq5TZBFvUM6UigdE9hIVYTl5w==",
       "license": "MIT",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "dependencies": {
+        "is-network-error": "^1.1.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@radix-ui/react-direction": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-direction/-/react-direction-1.1.1.tgz",
-      "integrity": "sha512-1UEWRX6jnOA2y4H5WczZ44gOOjTEmlqv1uNW4GAJEO5+bauCBhv8snY65Iw5/VOS/ghKN9gr2KjnLKxrsvoMVw==",
+    "node_modules/@langchain/langgraph-sdk/node_modules/uuid": {
+      "version": "13.0.2",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.2.tgz",
+      "integrity": "sha512-vzi9uRZ926x4XV73S/4qQaTwPXM2JBj6/6lI/byHH1jOpCzb0zDbfytgA9LcN/hzb2l7WQSQnxITOVx5un/wGw==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
       "license": "MIT",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "bin": {
+        "uuid": "dist-node/bin/uuid"
       }
     },
-    "node_modules/@radix-ui/react-dismissable-layer": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.1.11.tgz",
-      "integrity": "sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==",
+    "node_modules/@langchain/protocol": {
+      "version": "0.0.15",
+      "resolved": "https://registry.npmjs.org/@langchain/protocol/-/protocol-0.0.15.tgz",
+      "integrity": "sha512-MllvbpMjqHevUm+v94M422mH7XKN+wGCvJRBVROTWBotEDOATYB4Ktk2UheYP859y9o2LlhtPek5t1T9eyfAbQ==",
+      "license": "MIT"
+    },
+    "node_modules/@lukeed/csprng": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@lukeed/csprng/-/csprng-1.1.0.tgz",
+      "integrity": "sha512-Z7C/xXCiGWsg0KuKsHTKJxbWhpI3Vs5GwLfOean7MGyVFGqdRgBbAjOCh6u4bbjPc/8MJ2pZmK/0DLdCbivLDA==",
       "license": "MIT",
-      "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-escape-keydown": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/@radix-ui/react-focus-guards": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.1.3.tgz",
-      "integrity": "sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==",
+    "node_modules/@lukeed/ms": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/@lukeed/ms/-/ms-2.0.2.tgz",
+      "integrity": "sha512-9I2Zn6+NJLfaGoz9jN3lpwDgAYvfGeNYdbAIjJOqzs4Tpc+VU3Jqq4IofSUBKajiDS8k9fZIg18/z13mpk1bsA==",
       "license": "MIT",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/@radix-ui/react-focus-scope": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-scope/-/react-focus-scope-1.1.7.tgz",
-      "integrity": "sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==",
+    "node_modules/@lukeed/uuid": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/@lukeed/uuid/-/uuid-2.0.1.tgz",
+      "integrity": "sha512-qC72D4+CDdjGqJvkFMMEAtancHUQ7/d/tAiHf64z8MopFDmcrtbcJuerDtFceuAfQJ2pDSfCKCtbqoGBNnwg0w==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1"
+        "@lukeed/csprng": "^1.1.0"
       },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/@radix-ui/react-id": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-id/-/react-id-1.1.1.tgz",
-      "integrity": "sha512-kGkGegYIdQsOb4XjsfM97rXsiHaBwco+hFI66oO4s9LU+PLAC5oJ7khdOVFxkhsmlbpUqDAvXw11CluXP+jkHg==",
+    "node_modules/@monaco-editor/loader": {
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/@monaco-editor/loader/-/loader-1.7.0.tgz",
+      "integrity": "sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-layout-effect": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+        "state-local": "^1.0.6"
       }
     },
-    "node_modules/@radix-ui/react-popper": {
-      "version": "1.2.8",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-popper/-/react-popper-1.2.8.tgz",
-      "integrity": "sha512-0NJQ4LFFUuWkE7Oxf0htBKS6zLkkjBH+hM1uk7Ng705ReR8m/uelduy1DBo0PyBXPKVnBA6YBlU94MBGXrSBCw==",
+    "node_modules/@monaco-editor/react": {
+      "version": "4.7.0",
+      "resolved": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.7.0.tgz",
+      "integrity": "sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA==",
       "license": "MIT",
       "dependencies": {
-        "@floating-ui/react-dom": "^2.0.0",
-        "@radix-ui/react-arrow": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-layout-effect": "1.1.1",
-        "@radix-ui/react-use-rect": "1.1.1",
-        "@radix-ui/react-use-size": "1.1.1",
-        "@radix-ui/rect": "1.1.1"
+        "@monaco-editor/loader": "^1.5.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+        "monaco-editor": ">= 0.25.0 < 1",
+        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
+        "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
       }
     },
-    "node_modules/@radix-ui/react-portal": {
-      "version": "1.1.9",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-portal/-/react-portal-1.1.9.tgz",
-      "integrity": "sha512-bpIxvq03if6UNwXZ+HTK71JLh4APvnXntDc6XOX8UVq4XQOVl7lwok0AvIl+b8zgCw3fSaVTZMpAPPagXbKmHQ==",
-      "license": "MIT",
+    "node_modules/@open-policy-agent/opa-wasm": {
+      "version": "1.10.0",
+      "resolved": "https://registry.npmjs.org/@open-policy-agent/opa-wasm/-/opa-wasm-1.10.0.tgz",
+      "integrity": "sha512-ymR/nFS3nO9o24j9xowGGQaf+Gmb813QcxUpVZkfRlJkawKWqSIllnEH15agyWjijmOIyhA+OBErenx6N3jphw==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "sprintf-js": "^1.1.2",
+        "yaml": "^1.10.2"
+      }
+    },
+    "node_modules/@open-policy-agent/opa-wasm/node_modules/yaml": {
+      "version": "1.10.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.3.tgz",
+      "integrity": "sha512-vIYeF1u3CjlhAFekPPAk2h/Kv4T3mAkMox5OymRiJQB0spDP10LHvt+K7G9Ny6NuuMAb25/6n1qyUjAcGNf/AA==",
+      "license": "ISC",
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/@opentelemetry/api": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.1.tgz",
+      "integrity": "sha512-gLyJlPHPZYdAk1JENA9LeHejZe1Ti77/pTeFm/nMXmQH/HFZlcS/O2XJB+L8fkbrNSqhdtlvjBVjxwUYanNH5Q==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/api-logs": {
+      "version": "0.208.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.208.0.tgz",
+      "integrity": "sha512-CjruKY9V6NMssL/T1kAFgzosF1v9o6oeN+aX5JB/C/xPNtmgIJqcXHG7fA82Ou1zCpWGl4lROQUKwUNE1pMCyg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/auto-instrumentations-node": {
+      "version": "0.76.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/auto-instrumentations-node/-/auto-instrumentations-node-0.76.0.tgz",
+      "integrity": "sha512-44KWgqsMuqfV4UhOcwwnDeK8CpB5LT1MmpZj6sKXFXu2q6rjKo622pWgOgn5Ntp5Qal9q1uBX2VS8mvTpsMeyw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/instrumentation-amqplib": "^0.65.0",
+        "@opentelemetry/instrumentation-aws-lambda": "^0.70.0",
+        "@opentelemetry/instrumentation-aws-sdk": "^0.73.0",
+        "@opentelemetry/instrumentation-bunyan": "^0.63.0",
+        "@opentelemetry/instrumentation-cassandra-driver": "^0.63.0",
+        "@opentelemetry/instrumentation-connect": "^0.61.0",
+        "@opentelemetry/instrumentation-cucumber": "^0.34.0",
+        "@opentelemetry/instrumentation-dataloader": "^0.35.0",
+        "@opentelemetry/instrumentation-dns": "^0.61.0",
+        "@opentelemetry/instrumentation-express": "^0.66.0",
+        "@opentelemetry/instrumentation-fs": "^0.37.0",
+        "@opentelemetry/instrumentation-generic-pool": "^0.61.0",
+        "@opentelemetry/instrumentation-graphql": "^0.66.0",
+        "@opentelemetry/instrumentation-grpc": "^0.218.0",
+        "@opentelemetry/instrumentation-hapi": "^0.64.0",
+        "@opentelemetry/instrumentation-http": "^0.218.0",
+        "@opentelemetry/instrumentation-ioredis": "^0.66.0",
+        "@opentelemetry/instrumentation-kafkajs": "^0.27.0",
+        "@opentelemetry/instrumentation-knex": "^0.62.0",
+        "@opentelemetry/instrumentation-koa": "^0.66.0",
+        "@opentelemetry/instrumentation-lru-memoizer": "^0.62.0",
+        "@opentelemetry/instrumentation-memcached": "^0.61.0",
+        "@opentelemetry/instrumentation-mongodb": "^0.71.0",
+        "@opentelemetry/instrumentation-mongoose": "^0.64.0",
+        "@opentelemetry/instrumentation-mysql": "^0.64.0",
+        "@opentelemetry/instrumentation-mysql2": "^0.64.0",
+        "@opentelemetry/instrumentation-nestjs-core": "^0.64.0",
+        "@opentelemetry/instrumentation-net": "^0.62.0",
+        "@opentelemetry/instrumentation-openai": "^0.16.0",
+        "@opentelemetry/instrumentation-oracledb": "^0.43.0",
+        "@opentelemetry/instrumentation-pg": "^0.70.0",
+        "@opentelemetry/instrumentation-pino": "^0.64.0",
+        "@opentelemetry/instrumentation-redis": "^0.66.0",
+        "@opentelemetry/instrumentation-restify": "^0.63.0",
+        "@opentelemetry/instrumentation-router": "^0.62.0",
+        "@opentelemetry/instrumentation-runtime-node": "^0.31.0",
+        "@opentelemetry/instrumentation-socket.io": "^0.65.0",
+        "@opentelemetry/instrumentation-tedious": "^0.37.0",
+        "@opentelemetry/instrumentation-undici": "^0.28.0",
+        "@opentelemetry/instrumentation-winston": "^0.62.0",
+        "@opentelemetry/resource-detector-alibaba-cloud": "^0.33.8",
+        "@opentelemetry/resource-detector-aws": "^2.18.0",
+        "@opentelemetry/resource-detector-azure": "^0.26.0",
+        "@opentelemetry/resource-detector-container": "^0.8.9",
+        "@opentelemetry/resource-detector-gcp": "^0.53.0",
+        "@opentelemetry/resources": "^2.0.0",
+        "@opentelemetry/sdk-node": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.4.1",
+        "@opentelemetry/core": "^2.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/configuration": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/configuration/-/configuration-0.218.0.tgz",
+      "integrity": "sha512-W8wIz7H2R1pufR5jfjb3gU2XkMpm2x/7b1RJcsuzvd70Il/rWWE+g5/Od7hQKrxRTSrTrOWlru101PWXz5I1EQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "yaml": "^2.0.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.9.0"
+      }
+    },
+    "node_modules/@opentelemetry/configuration/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/context-async-hooks": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/context-async-hooks/-/context-async-hooks-2.7.1.tgz",
+      "integrity": "sha512-OPFBYuXEn1E4ja3Y6eeA7O+ZnLBNcXTV5Cgsn1VaqBZ6hC5FnpZPLBNme1LJY8ZtF4aOujPKFoeWN4ik487KuQ==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/core": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.2.0.tgz",
+      "integrity": "sha512-FuabnnUm8LflnieVxs6eP7Z383hgQU4W1e3KJS6aOG3RxWxcHyBxH8fDMHNgu/gFx/M2jvTOW/4/PHhLz6bjWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-logs-otlp-grpc/-/exporter-logs-otlp-grpc-0.218.0.tgz",
+      "integrity": "sha512-hoxrNH1l/Xy6F9WTJ5IK+6j1r9nQFlPOmrnTlhYHTySdunfXLmUCPv3bQtKYntxag9h3wLYBZQ2HI6FOx+BT2g==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/grpc-js": "^1.14.3",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-grpc-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/sdk-logs": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-http": {
+      "version": "0.208.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-logs-otlp-http/-/exporter-logs-otlp-http-0.208.0.tgz",
+      "integrity": "sha512-jOv40Bs9jy9bZVLo/i8FwUiuCvbjWDI+ZW13wimJm4LjnlwJxGgB+N/VWOZUTpM+ah/awXeQqKdNlpLf2EjvYg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.208.0",
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/otlp-exporter-base": "0.208.0",
+        "@opentelemetry/otlp-transformer": "0.208.0",
+        "@opentelemetry/sdk-logs": "0.208.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-logs-otlp-proto/-/exporter-logs-otlp-proto-0.218.0.tgz",
+      "integrity": "sha512-1/noQNsp9gXD75HPzgjBrcF1+XTtry7pFAUfxVEJgg7mPv2AawKQuYkhMmJ8qjxz4Ubc3Y8bwvfxevXsKTq4cg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-logs-otlp-proto/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-metrics-otlp-grpc/-/exporter-metrics-otlp-grpc-0.218.0.tgz",
+      "integrity": "sha512-YapQ9vNMX0NSZF6LK5pWAFfjpJleV2O9uYWfYGeb/5F1Kb9rPGK8tZDMJFa/sOksgdFuflDvYuA0B4qjDB4fjQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/grpc-js": "^1.14.3",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/exporter-metrics-otlp-http": "0.218.0",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-grpc-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-metrics": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-grpc/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-metrics-otlp-http/-/exporter-metrics-otlp-http-0.218.0.tgz",
+      "integrity": "sha512-bV7d2OuMpZu2+gAaxUAhzfZ0h3WVZk8ETQUEE3DNSntbTaMpuITjtm8I0rNyHFdm7Ax57K6ty7SgFXlBmOLIvQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-metrics": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-http/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-metrics-otlp-proto/-/exporter-metrics-otlp-proto-0.218.0.tgz",
+      "integrity": "sha512-ubLddKjWULhla9YZRCj/rTBeppjJYE4e9w0icx5mTu3eFhWjQzbV75NYjXuIlEG+NJsBl6d+sTFw5Qu+oej4oQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/exporter-metrics-otlp-http": "0.218.0",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-metrics": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-metrics-otlp-proto/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-prometheus": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-prometheus/-/exporter-prometheus-0.218.0.tgz",
+      "integrity": "sha512-RT5oEyu1kddZJ1vt7/BUo5wV+P7hpNAESsR3dUd3+8deHuX7gWNoCOZn+SfDT+hJHlIJ5h/AxiCLXIrutswDJg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-prometheus/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-prometheus/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-trace-otlp-grpc/-/exporter-trace-otlp-grpc-0.218.0.tgz",
+      "integrity": "sha512-3fXxVQEj9TNAFaCi79JeFKfeLd0sDtInaR3gaZDVlzNSPHtz8PZuCV34JKWjD4XXzT20IdMe8IpX6mRVNDA4Tw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/grpc-js": "^1.14.3",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-grpc-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-trace-otlp-http/-/exporter-trace-otlp-http-0.218.0.tgz",
+      "integrity": "sha512-8dqezsmPhtKitIK/eTipZhYl9EX2/gNQ5zUMhaz3uxEURwfkNf8IPvo6yNfrzbxdtpAOybS/+h7wmIWYqFSpiw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-http/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-trace-otlp-proto/-/exporter-trace-otlp-proto-0.218.0.tgz",
+      "integrity": "sha512-r1Msf8SNLRmwh9J6XQ5uh82D7CdDWMNHnPB7LAVHjzut0TkSeKc5KcIvr4SvHvfk/xwN5gxC+VLKQ1k0o8PSPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-trace-otlp-proto/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-zipkin": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-zipkin/-/exporter-zipkin-2.7.1.tgz",
+      "integrity": "sha512-mfsD9bKAxcKrh5+y08TPodvClBO0CznBE3p79YAGnO81WI4LrdsGA65T53e4iTSbCalW4WaUpkbeJcbpyIUHfg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-zipkin/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/exporter-zipkin/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.218.0.tgz",
+      "integrity": "sha512-mIZil8Es+sYDK5m+DQiwAwF57F14TF2YlEqvIjZ/RQWcxDBwRGsKfdK2Tv65OU9meQKCMzSIFS9mxAcnAb6Bkg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "import-in-the-middle": "^3.0.0",
+        "require-in-the-middle": "^8.0.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-amqplib": {
+      "version": "0.65.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-amqplib/-/instrumentation-amqplib-0.65.0.tgz",
+      "integrity": "sha512-fF7fNHA59n3y23ROfst2EbSxmP+L3E+snZO6aMU4w4xD84mfejAivspIAsqa9arX5HZlBK6dslHz5dWGNp5D0A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-aws-lambda": {
+      "version": "0.70.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-aws-lambda/-/instrumentation-aws-lambda-0.70.0.tgz",
+      "integrity": "sha512-HT74cQxi/iiVEz5dRdNdfGCFzPFbkxSiwHfFPHDwkRcr1JKQqI6hm8qeXEvEiJ+36xIU1KkQMDfeThJ1ifnUiA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0",
+        "@types/aws-lambda": "^8.10.155"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-aws-sdk": {
+      "version": "0.73.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-aws-sdk/-/instrumentation-aws-sdk-0.73.0.tgz",
+      "integrity": "sha512-0INPkHbR6o4J3psE+ncwWaE7qtDpb2p+i+qfV82cfwYLCXavYCGosBZ/S4pOErDVJYIyQVIsNAHhaUgaL313SQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.34.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-bunyan": {
+      "version": "0.63.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-bunyan/-/instrumentation-bunyan-0.63.0.tgz",
+      "integrity": "sha512-z0xPSZ62d3I7sG2sUTyQ5/ES1RdESP2eOETiMLY9gPSp+HZwbsAyj7T/2sdZKYD+O2ajRHZEil+DBoUolf1ocQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "^0.218.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@types/bunyan": "1.8.11"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-bunyan/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-cassandra-driver": {
+      "version": "0.63.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-cassandra-driver/-/instrumentation-cassandra-driver-0.63.0.tgz",
+      "integrity": "sha512-jnVTOr3h/46UDalEwJ4ITux8UWwHmnsOik5WFs3JB/UrUj8Wad5eI+KpOEBuOUeOfPB9sce11qgVw3WXU2r+hg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.37.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-connect": {
+      "version": "0.61.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-connect/-/instrumentation-connect-0.61.0.tgz",
+      "integrity": "sha512-ZTQ0W3Lb7GJsOd+72cG8FJQKA5DqYfELJGLmChrJIezRSLfJIfofwKEGLX5rMtFJmwckpichQkBZWjid5dvnVQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0",
+        "@types/connect": "3.4.38"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-cucumber": {
+      "version": "0.34.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-cucumber/-/instrumentation-cucumber-0.34.0.tgz",
+      "integrity": "sha512-VK63Cm8osAdsSZpULPk+qnNktQUJzmnIOv2wuh79fV41WuTM38uOFC3s978/24pDkSljhN4EYCbPRLrAhXfKSA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-dataloader": {
+      "version": "0.35.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-dataloader/-/instrumentation-dataloader-0.35.0.tgz",
+      "integrity": "sha512-6x6UPP0tLzrdj15PIEN3qgp/WCcESCavHJfkIKoyLmy4UjGLF1KgEUMyD74xhbKGo426uvMbhvCgZC0ye8nO/A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-dns": {
+      "version": "0.61.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-dns/-/instrumentation-dns-0.61.0.tgz",
+      "integrity": "sha512-5D8xFaw9GXq9ZIOAvG7NPDivFfZWFAekLGFn1B7ppyhuAYBVHGybFpx4Q9BV1Uup3yzCdiD78KhyH7c3dKOYSw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-express": {
+      "version": "0.66.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-express/-/instrumentation-express-0.66.0.tgz",
+      "integrity": "sha512-G1xTh5M5shklMgIyUXWDjU2BakulKtcISaM4U5TyanvO7R4xbB3iC7YQ8QKegLXaOs81Ku8RlcIcbYRrz/82wQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-fs": {
+      "version": "0.37.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-fs/-/instrumentation-fs-0.37.0.tgz",
+      "integrity": "sha512-5mxhFuwAK0FFvisUdvuywaZ9ySMZ15HfbN6IpLn0gwRh9s1/QBcpLznQ/A15cZs1QFtBJ+JXIHdwY7WOD0c4Eg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-generic-pool": {
+      "version": "0.61.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-generic-pool/-/instrumentation-generic-pool-0.61.0.tgz",
+      "integrity": "sha512-tvp5PWnGRPHY/kz9Kg1IRLBL0qUAxMSNG623f+ZGEsvnCVEjr3tFyw1JGQzM+B3eZKkO+Dp/LYrtOSfb69D5lA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-graphql": {
+      "version": "0.66.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-graphql/-/instrumentation-graphql-0.66.0.tgz",
+      "integrity": "sha512-D4PN1tStj6rnOdofnt2xINJjtT1k2ockzaODrn76VEBZeqJ3QsEvKFfunB0EFAohO4xswVp14VAVmKNnGzA1Dw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-grpc": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-grpc/-/instrumentation-grpc-0.218.0.tgz",
+      "integrity": "sha512-kcDCNrC7IWNXEKQriGrwuh5jjbMFU5exOQzU9ufEY9UkACNcgYIdOd7XpX3IqZ3UPSnZyZtlwgfsbC5SNlEDbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-hapi": {
+      "version": "0.64.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-hapi/-/instrumentation-hapi-0.64.0.tgz",
+      "integrity": "sha512-PCHgCICCDz7p9BgCU9gQz2smbqu4V4P8QtWJ7DLjL3bmzSdrgy6EGvecDg1YuhjBsoN08SR+y36hgdHkqCgrzQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-http": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-http/-/instrumentation-http-0.218.0.tgz",
+      "integrity": "sha512-x9djaqdzpT8WAboep1H9nCAQ1E+MMsm08TNfA02TqM3bNNddZeiim+E3KMWVQFaX6JpUy7V0nm/wfN/K2Em+Zw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/instrumentation": "0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0",
+        "forwarded-parse": "2.1.2"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-http/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-ioredis": {
+      "version": "0.66.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-ioredis/-/instrumentation-ioredis-0.66.0.tgz",
+      "integrity": "sha512-UfTAcaBKCzLUZ9opvfOLV4bH46XiNFqUsKykfPCIefDIxJ1iUYtMOucNaiZ+/kjQdPy5i6Ef5tk2IAjxol4X1w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/redis-common": "^0.38.3",
+        "@opentelemetry/semantic-conventions": "^1.33.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-kafkajs": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-kafkajs/-/instrumentation-kafkajs-0.27.0.tgz",
+      "integrity": "sha512-kl/C2AU4KZGHlMZD12nMFXcMjxSHvu5Q0UPSQ6IJeBfCadYuWgW+sWIa2JZVK/A0qRYm2cncekJyeBHQDyfUUg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.30.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-knex": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-knex/-/instrumentation-knex-0.62.0.tgz",
+      "integrity": "sha512-XgfhCAWwSqA0YnwaEKdpvQMavc90D3R65frhLCO9JNl867EulNps9tm6pjGIg+GiYuewn00gEzW4HQ5btgYxGQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-koa": {
+      "version": "0.66.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-koa/-/instrumentation-koa-0.66.0.tgz",
+      "integrity": "sha512-04x/z21WTMEfy3lUSr4aTj8WsTN3OZF901hJ+ciOwdwf7AK8UJTpZCXw6KQ3G4Vag56q1HoMihCONeWZLeld1g==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.36.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.9.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-lru-memoizer": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-lru-memoizer/-/instrumentation-lru-memoizer-0.62.0.tgz",
+      "integrity": "sha512-AlGKIdk6ZT7WmIozfUb2LjOcI3AhQrvAXKX0zi1cVcnw2QlRbVYyV5GTa2Th9ebuczVfWPaoPrmZw61zCp/czw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-memcached": {
+      "version": "0.61.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-memcached/-/instrumentation-memcached-0.61.0.tgz",
+      "integrity": "sha512-qiCR9Wovf5AHzn6g+LXhvwMmv2I6zhHz2I2tEHZMmBuD8c18bkJzGFxHoSBlxdApRT+SW13r9472dDMm4BRjgQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0",
+        "@types/memcached": "^2.2.6"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-mongodb": {
+      "version": "0.71.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-mongodb/-/instrumentation-mongodb-0.71.0.tgz",
+      "integrity": "sha512-6rwfVjAUY69CKkyGqzL+F5X7Nzw0+Ke9pOxk9xUPJpy8vracZxuQYF7rWu02sV1xOgi4u52449SuVhD+zaSiIA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-mongoose": {
+      "version": "0.64.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-mongoose/-/instrumentation-mongoose-0.64.0.tgz",
+      "integrity": "sha512-iCIqeUaERN8Uc5Rrtg4zvQ6d7z5JQ5iUmbnr/JHYPxAidDowmRc8/wDMJeMKRfLPTj336Zu0ec7rH/ak/4N9vw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-mysql": {
+      "version": "0.64.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-mysql/-/instrumentation-mysql-0.64.0.tgz",
+      "integrity": "sha512-W1w76AJkP7i0uzzAe7nsCMWq4+EMSA550f1lAmxDPdQC5FnreNbRIm/tod2OS9gVrYvRrQXNkFmZJKGo4kzCnw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0",
+        "@types/mysql": "2.15.27"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-mysql2": {
+      "version": "0.64.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-mysql2/-/instrumentation-mysql2-0.64.0.tgz",
+      "integrity": "sha512-yTu0mYh/qJPSE86VmNLQww5uugDyvCS2KJIPfPtIk2ufoEUoHPsV6Iynnvmz588Moq04aBLxfTa/EtE4A2ykWA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0",
+        "@opentelemetry/sql-common": "^0.41.2"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-nestjs-core": {
+      "version": "0.64.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-nestjs-core/-/instrumentation-nestjs-core-0.64.0.tgz",
+      "integrity": "sha512-PW1ArxryMwF8/IXq1nzlQs7tmr/fWd1tf71AHevZT3Fm0hW7jRX9JEfYgIAcKDvmbqcJEr5K1224NEimrRPbuQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.30.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-net": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-net/-/instrumentation-net-0.62.0.tgz",
+      "integrity": "sha512-Gt2kzpACpmIad+q3LQqe8UNHuoVvdLuFpB6SN/A6xLPKNllb+ksPUYQhj1kXdZOpcFZNGKDXHyN+TUCVCk1TRw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-openai": {
+      "version": "0.16.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-openai/-/instrumentation-openai-0.16.0.tgz",
+      "integrity": "sha512-I0KKybyqqFOxSBgYKQNdR/EF3LvzSaAUT7Y75xkjbgscY+V8UWDpUbY68POLhUC3SKMlGvZmrTSxcQ+Y0vRhNw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "^0.218.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.36.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-openai/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-oracledb": {
+      "version": "0.43.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-oracledb/-/instrumentation-oracledb-0.43.0.tgz",
+      "integrity": "sha512-7Z4kOOdnrHX4S5gCeWhnnpWQwEd7weRjDhJA1nSrwTYtAcVWNjk5wsMKHBCTDCN0uJtA9T6PouZ+AKRYiS1Rrg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.34.0",
+        "@types/oracledb": "6.5.2"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-pg": {
+      "version": "0.70.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-pg/-/instrumentation-pg-0.70.0.tgz",
+      "integrity": "sha512-g8WXwwOUXfjiEmATwjB/33QKE2AkIpNe4KIuJJh4djtXgCL0Wne+AzAfjuDIAspGvO1txQp8ibKsLd3SBmcvJA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.34.0",
+        "@opentelemetry/sql-common": "^0.41.2",
+        "@types/pg": "8.15.6",
+        "@types/pg-pool": "2.0.7"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-pino": {
+      "version": "0.64.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-pino/-/instrumentation-pino-0.64.0.tgz",
+      "integrity": "sha512-+vDL7tZMZjkp8BpYMx/cL2/HWGsNUqKcRmAIIEaQu/6F44oM6xGDMCSqMKHdKCsH1+WW52EYdHbWkVGTF0KVsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "^0.218.0",
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-pino/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-redis": {
+      "version": "0.66.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-redis/-/instrumentation-redis-0.66.0.tgz",
+      "integrity": "sha512-bVShkag6vP2VQO0cpA8CHjOohWbKNYLyjiwGkOnSAwou1TPc6pf9DssFUxwqN2XF1J4oqP0LVSvN9kZUzMecfA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/redis-common": "^0.38.3",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-restify": {
+      "version": "0.63.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-restify/-/instrumentation-restify-0.63.0.tgz",
+      "integrity": "sha512-Z73YxZpt0Y56uRu2pRWOjO5wXHvZqF46K4czoKRTGlUifzzFmUZxyOeAAECACuMRSLZmZ394WJin0MDgU9iW9w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-router": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-router/-/instrumentation-router-0.62.0.tgz",
+      "integrity": "sha512-0w8ok7GbXtYvX7TtLp72qQJKNyI7lD72Fy2NsNKIcQAv6TqGox5javFyXrIrCAtZHCONePxeAwAYj1Qd9si9OQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-runtime-node": {
+      "version": "0.31.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-runtime-node/-/instrumentation-runtime-node-0.31.0.tgz",
+      "integrity": "sha512-HkLsuEfUDahFiL/xFtEqJDMp7sp8ynOtA045bJi9nAH8CrPvljPW5SgJQb2mQqEYJQopbWYZ2lPqQEfj7bYgJg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "^0.218.0",
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-runtime-node/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-socket.io": {
+      "version": "0.65.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-socket.io/-/instrumentation-socket.io-0.65.0.tgz",
+      "integrity": "sha512-dNvIbD40h0z69stQ9cIeAWRyy5WyQM1a1XnFthekc/oi/ipX4E6oYJBM4X2xKBxjZMTjdV5VshLoNeYMSBsnjw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-tedious": {
+      "version": "0.37.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-tedious/-/instrumentation-tedious-0.37.0.tgz",
+      "integrity": "sha512-cGLF46UsgeI1334atJxLO36yQlV7WXKg35Mp+e2NXo2vOTfIZTVqoKOzExVOTOwT4AQjfGVEDxyq5wXybUYXIA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.33.0",
+        "@types/tedious": "^4.0.14"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-undici": {
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-undici/-/instrumentation-undici-0.28.0.tgz",
+      "integrity": "sha512-7nh4Gw7PhYtQm82FIJtWUhx6iZQJj0bdkKe2RQb3XNIyxu0o9rM1J5Xt083SsG2tCbQZpX9/mlDxhTrK1Z/lVQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/instrumentation": "^0.218.0",
+        "@opentelemetry/semantic-conventions": "^1.24.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.7.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-winston": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation-winston/-/instrumentation-winston-0.62.0.tgz",
+      "integrity": "sha512-pr1U9ZV4RRy23qMVrRzebfxwDWjp44xA7sC0PAdeW9v4HDcfOr0ejdTJmIsBGvhkNHPBajfieaIF9b6/9wjErA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "^0.218.0",
+        "@opentelemetry/instrumentation": "^0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation-winston/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.208.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.208.0.tgz",
+      "integrity": "sha512-gMd39gIfVb2OgxldxUtOwGJYSH8P1kVFFlJLuut32L6KgUC4gl1dMhn+YC2mGn0bDOiQYSk/uHOdSjuKp58vvA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/otlp-transformer": "0.208.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-grpc-exporter-base/-/otlp-grpc-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-H/lCGJ536N98VpYJOaWTQOkv4Dx6TnmStK6Rqfu1W7KkFbPAx04hjdYEMZF/YbnHzPUSIK4kM6OE2GKGBTpV9A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/grpc-js": "^1.14.3",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-grpc-exporter-base/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.208.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.208.0.tgz",
+      "integrity": "sha512-DCFPY8C6lAQHUNkzcNT9R+qYExvsk6C5Bto2pbNxgicpcSWbe2WHShLxkOxIdNcBiYPdVHv/e7vH7K6TI+C+fQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.208.0",
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/resources": "2.2.0",
+        "@opentelemetry/sdk-logs": "0.208.0",
+        "@opentelemetry/sdk-metrics": "2.2.0",
+        "@opentelemetry/sdk-trace-base": "2.2.0",
+        "protobufjs": "^7.3.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.2.0.tgz",
+      "integrity": "sha512-1pNQf/JazQTMA0BiO5NINUzH0cbLbbl7mntLa4aJNmCCXSj0q03T5ZXXL0zw4G55TjdL9Tz32cznGClf+8zr5A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/propagator-b3": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/propagator-b3/-/propagator-b3-2.7.1.tgz",
+      "integrity": "sha512-RJid6E2CKyeGfKBzXKF21ejabGMHypFkPAh3qZ+NvI+SGjuIye79t3PmiqcDgtRzdKH6ynXzbfslQ8DfpRUg2A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/propagator-b3/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
       }
     },
-    "node_modules/@radix-ui/react-presence": {
-      "version": "1.1.5",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.5.tgz",
-      "integrity": "sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/propagator-jaeger": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/propagator-jaeger/-/propagator-jaeger-2.7.1.tgz",
+      "integrity": "sha512-KMjVBHzP4N60bOzxja76M1F1hZZ43lGPga5ix+mkv9+kk1nx9SbkxSvJsMbuVUxdPQmsPTqGShmhN8ulrMOg6Q==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@opentelemetry/core": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/propagator-jaeger/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
       }
     },
-    "node_modules/@radix-ui/react-primitive": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-primitive/-/react-primitive-2.1.3.tgz",
-      "integrity": "sha512-m9gTwRkhy2lvCPe6QJp4d3G1TYEUHn/FzJUtq9MjH46an1wJU+GdoGC5VLof8RX8Ft/DlpshApkhswDLZzHIcQ==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/redis-common": {
+      "version": "0.38.3",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/redis-common/-/redis-common-0.38.3.tgz",
+      "integrity": "sha512-VCghU1JYs/4gP6Gqf/xro9MEsZ7LrMv2uONVsaESKL38ZOB9BqnI98FfS23wjMnHlpuE+TTaWSoAVNpTwYXzjw==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      }
+    },
+    "node_modules/@opentelemetry/resource-detector-alibaba-cloud": {
+      "version": "0.33.8",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resource-detector-alibaba-cloud/-/resource-detector-alibaba-cloud-0.33.8.tgz",
+      "integrity": "sha512-RnSB/uxkElny0/WBFEtIG2HRG0cpSNTRdE+YSB7Poa+uljK+ddCacEZYz/PMgZh+cs586XstJQxdyjz0jtcAug==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/react-slot": "1.2.3"
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/resources": "^2.0.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": "^1.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/resource-detector-aws": {
+      "version": "2.18.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resource-detector-aws/-/resource-detector-aws-2.18.0.tgz",
+      "integrity": "sha512-wyMM4UoRuHvI2KjqnTzvyW8Yv7MKRGA+I78Xti6gTEw7hBhqXU1SRo+f9KrsQfeeiOn+TkDuvxavuaAQbD3i6g==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/resources": "^2.0.0",
+        "@opentelemetry/semantic-conventions": "^1.27.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.0.0"
       }
     },
-    "node_modules/@radix-ui/react-primitive/node_modules/@radix-ui/react-slot": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.2.3.tgz",
-      "integrity": "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/resource-detector-azure": {
+      "version": "0.26.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resource-detector-azure/-/resource-detector-azure-0.26.0.tgz",
+      "integrity": "sha512-7KxF7mlwI2nKja/iEdwPqOaS0QAJbhT9ye4DeYZnXdOS/4phfonk5nSmyGDBYhBL7J30MPL91oZNuGYRKXZAXA==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2"
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/resources": "^2.0.0",
+        "@opentelemetry/semantic-conventions": "^1.37.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": "^1.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/resource-detector-container": {
+      "version": "0.8.9",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resource-detector-container/-/resource-detector-container-0.8.9.tgz",
+      "integrity": "sha512-Xd2C4HjW9hl75iqZT7tQNy2yRBUqNucq2O9+e0FJRNkbiItInYVMzc0S0KDXcx/vZBwNmlrKS3R0uLCU9ULsGA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/resources": "^2.0.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.0.0"
       }
     },
-    "node_modules/@radix-ui/react-roving-focus": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-roving-focus/-/react-roving-focus-1.1.11.tgz",
-      "integrity": "sha512-7A6S9jSgm/S+7MdtNDSb+IU859vQqJ/QAtcYQcfFC6W8RS4IxIZDldLR0xqCFZ6DCyrQLjLPsxtTNch5jVA4lA==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/resource-detector-gcp": {
+      "version": "0.53.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resource-detector-gcp/-/resource-detector-gcp-0.53.0.tgz",
+      "integrity": "sha512-RCV31v23ZwZfYR3LPkuORHTHIOvfm3hZBT7hAzSO0+oAIrG/Dm0ld5tV4lYNO05GjI7sHQdRcbSqzEYAvQcQuw==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@opentelemetry/core": "^2.0.0",
+        "@opentelemetry/resources": "^2.0.0",
+        "gcp-metadata": "^8.0.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": "^1.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/resources": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.7.1.tgz",
+      "integrity": "sha512-DeT6KKolmC4e/dRQvMQ/RwlnzhaqeiFOXY5ngoOPJ07GgVVKxZOg9EcrNZb5aTzUn+iCrJldAgOfQm1O/QfPAQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
       }
     },
-    "node_modules/@radix-ui/react-scroll-area": {
-      "version": "1.2.10",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-scroll-area/-/react-scroll-area-1.2.10.tgz",
-      "integrity": "sha512-tAXIa1g3sM5CGpVT0uIbUx/U3Gs5N8T52IICuCtObaos1S8fzsrPXG5WObkQN3S6NVl6wKgPhAIiBGbWnvc97A==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/resources/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/number": "1.1.1",
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.208.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.208.0.tgz",
+      "integrity": "sha512-QlAyL1jRpOeaqx7/leG1vJMp84g0xKP6gJmfELBpnI4O/9xPX+Hu5m1POk9Kl+veNkyth5t19hRlN6tNY1sjbA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.208.0",
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/resources": "2.2.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
       }
     },
-    "node_modules/@radix-ui/react-select": {
-      "version": "2.2.6",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-select/-/react-select-2.2.6.tgz",
-      "integrity": "sha512-I30RydO+bnn2PQztvo25tswPH+wFBjehVGtmagkU78yMdwTwVf12wnAOF+AeP8S2N8xD+5UPbGhkUfPyvT+mwQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@radix-ui/number": "1.1.1",
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-dismissable-layer": "1.1.11",
-        "@radix-ui/react-focus-guards": "1.1.3",
-        "@radix-ui/react-focus-scope": "1.1.7",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-popper": "1.2.8",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1",
-        "@radix-ui/react-use-previous": "1.1.1",
-        "@radix-ui/react-visually-hidden": "1.2.3",
-        "aria-hidden": "^1.2.4",
-        "react-remove-scroll": "^2.6.3"
+    "node_modules/@opentelemetry/sdk-logs/node_modules/@opentelemetry/resources": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.2.0.tgz",
+      "integrity": "sha512-1pNQf/JazQTMA0BiO5NINUzH0cbLbbl7mntLa4aJNmCCXSj0q03T5ZXXL0zw4G55TjdL9Tz32cznGClf+8zr5A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.2.0.tgz",
+      "integrity": "sha512-G5KYP6+VJMZzpGipQw7Giif48h6SGQ2PFKEYCybeXJsOCB4fp8azqMAAzE5lnnHK3ZVwYQrgmFbsUJO/zOnwGw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/resources": "2.2.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
       }
     },
-    "node_modules/@radix-ui/react-select/node_modules/@radix-ui/react-slot": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.2.3.tgz",
-      "integrity": "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/sdk-metrics/node_modules/@opentelemetry/resources": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.2.0.tgz",
+      "integrity": "sha512-1pNQf/JazQTMA0BiO5NINUzH0cbLbbl7mntLa4aJNmCCXSj0q03T5ZXXL0zw4G55TjdL9Tz32cznGClf+8zr5A==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2"
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-node/-/sdk-node-0.218.0.tgz",
+      "integrity": "sha512-tPMjHrLV5gsfNdYqoRHjeGbCAZBXXD9c1Qo/2ut7VwnUABDNh76xNxrT0SEhkIIJuCN45bbN1vZnYL1gY0IkOg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/configuration": "0.218.0",
+        "@opentelemetry/context-async-hooks": "2.7.1",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/exporter-logs-otlp-grpc": "0.218.0",
+        "@opentelemetry/exporter-logs-otlp-http": "0.218.0",
+        "@opentelemetry/exporter-logs-otlp-proto": "0.218.0",
+        "@opentelemetry/exporter-metrics-otlp-grpc": "0.218.0",
+        "@opentelemetry/exporter-metrics-otlp-http": "0.218.0",
+        "@opentelemetry/exporter-metrics-otlp-proto": "0.218.0",
+        "@opentelemetry/exporter-prometheus": "0.218.0",
+        "@opentelemetry/exporter-trace-otlp-grpc": "0.218.0",
+        "@opentelemetry/exporter-trace-otlp-http": "0.218.0",
+        "@opentelemetry/exporter-trace-otlp-proto": "0.218.0",
+        "@opentelemetry/exporter-zipkin": "2.7.1",
+        "@opentelemetry/instrumentation": "0.218.0",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/propagator-b3": "2.7.1",
+        "@opentelemetry/propagator-jaeger": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1",
+        "@opentelemetry/sdk-trace-node": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
       }
     },
-    "node_modules/@radix-ui/react-slot": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.2.4.tgz",
-      "integrity": "sha512-Jl+bCv8HxKnlTLVrcDE8zTMJ09R9/ukw4qBs/oZClOfoQk/cOTbDn+NceXfV7j09YPVQUryJPHurafcSg6EVKA==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/api-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.218.0.tgz",
+      "integrity": "sha512-fmEWp5kXlGEc3i/lR698Hz41DfGyN4Tbe4g7L1AxSc7fF8Xeh/FQ9Quqpa9dVA413Q1Ad43QOLzU4JoXgbFPWw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2"
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/exporter-logs-otlp-http": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-logs-otlp-http/-/exporter-logs-otlp-http-0.218.0.tgz",
+      "integrity": "sha512-Qx+4rpVHzgg89dawcWRHyt+XRXeLnhFz/qBtvggmjkcgPUdr+NAB0/u/eIPA8yAeJV0J80Vz43JZCh/XFvZFGw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-exporter-base": "0.218.0",
+        "@opentelemetry/otlp-transformer": "0.218.0",
+        "@opentelemetry/sdk-logs": "0.218.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
       }
     },
-    "node_modules/@radix-ui/react-tabs": {
-      "version": "1.1.13",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-tabs/-/react-tabs-1.1.13.tgz",
-      "integrity": "sha512-7xdcatg7/U+7+Udyoj2zodtI9H/IIopqo+YOIcZOq1nJwXWBZ9p8xiu5llXlekDbZkca79a/fozEYQXIA4sW6A==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/otlp-exporter-base": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz",
+      "integrity": "sha512-ZwqpkNL5W7RyGJPDZ9g06DvKp8KFTWPJPN12anpMQYSKpTSU0z3EIZuPq9vPGpS8siFyOqDYDAuCwlNO9FqgbA==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-roving-focus": "1.1.11",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/otlp-transformer": "0.218.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/otlp-transformer": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/otlp-transformer/-/otlp-transformer-0.218.0.tgz",
+      "integrity": "sha512-CFaKH87WAzjuJ4awowTTLzUvMfaRfiOFG5+qm5S5ncyalRtN4ecQ+YmuANJSCrVPuvZFEkUgKhBPBndxi3rHsQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/sdk-logs": "0.218.0",
+        "@opentelemetry/sdk-metrics": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/sdk-logs": {
+      "version": "0.218.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-logs/-/sdk-logs-0.218.0.tgz",
+      "integrity": "sha512-QvnNdugatFTVCJXH0Mcu7GOOJSylA9j127kIezOE4YwTI4YbowRons2K4WZTv5FMS8T4q9P0NdaRHdkSmeAIag==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.218.0",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.4.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/sdk-metrics": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-metrics/-/sdk-metrics-2.7.1.tgz",
+      "integrity": "sha512-MpDJdkiFDs3Pm1RHO3KByuZbuBdJEXEAkiC0+yJdsZGVCdf1RpHR6n+LHDcS7ffmfrt5kVCzJSCfm4z2C7v0uQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.9.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-node/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.2.0.tgz",
+      "integrity": "sha512-xWQgL0Bmctsalg6PaXExmzdedSp3gyKV8mQBwK/j9VGdCDu2fmXIb2gAehBKbkXCpJ4HPkgv3QfoJWRT4dHWbw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/resources": "2.2.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-trace-base/node_modules/@opentelemetry/resources": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.2.0.tgz",
+      "integrity": "sha512-1pNQf/JazQTMA0BiO5NINUzH0cbLbbl7mntLa4aJNmCCXSj0q03T5ZXXL0zw4G55TjdL9Tz32cznGClf+8zr5A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.2.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-trace-node": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-node/-/sdk-trace-node-2.7.1.tgz",
+      "integrity": "sha512-pCpQxU68lV+I9s9svqMyVu5iHdDDUnqUpSxqwyCU8A9ejEsSnMPCbearwsUO4yk08ZJzAIUCFuReMdVQvHrdvg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/context-async-hooks": "2.7.1",
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/sdk-trace-base": "2.7.1"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-trace-node/node_modules/@opentelemetry/core": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.7.1.tgz",
+      "integrity": "sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-trace-node/node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.7.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.7.1.tgz",
+      "integrity": "sha512-NAYIlsF8MPUsKqJMiDQJTMPOmlbawC1Iz/omMLygZ1C9am8fTKYjTaI+OZM+WTY3t3Glo0wnOg/6/pac6RGPPw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.7.1",
+        "@opentelemetry/resources": "2.7.1",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/semantic-conventions": {
+      "version": "1.41.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/semantic-conventions/-/semantic-conventions-1.41.1.tgz",
+      "integrity": "sha512-/UhIkaZgPutTFmQ7RnIJGgDXZmtEJ7Dvi86xNTFWcnRxVRNk/aotsqDJYeEvDP+FSMB2SdW+pQzNMcWP0rwuNA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=14"
       }
     },
-    "node_modules/@radix-ui/react-tooltip": {
-      "version": "1.2.8",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-tooltip/-/react-tooltip-1.2.8.tgz",
-      "integrity": "sha512-tY7sVt1yL9ozIxvmbtN5qtmH2krXcBCfjEiCgKGLqunJHvgvZG2Pcl2oQ3kbcZARb1BGEHdkLzcYGO8ynVlieg==",
-      "license": "MIT",
+    "node_modules/@opentelemetry/sql-common": {
+      "version": "0.41.2",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sql-common/-/sql-common-0.41.2.tgz",
+      "integrity": "sha512-4mhWm3Z8z+i508zQJ7r6Xi7y4mmoJpdvH0fZPFRkWrdp5fq7hhZ2HhYokEOLkfqSMgPR4Z9EyB3DBkbKGOqZiQ==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-dismissable-layer": "1.1.11",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-popper": "1.2.8",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-visually-hidden": "1.2.3"
+        "@opentelemetry/core": "^2.0.0"
       },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.1.0"
       }
     },
-    "node_modules/@radix-ui/react-tooltip/node_modules/@radix-ui/react-slot": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.2.3.tgz",
-      "integrity": "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==",
-      "license": "MIT",
-      "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2"
+    "node_modules/@patternfly/chatbot": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/@patternfly/chatbot/-/chatbot-6.5.0.tgz",
+      "integrity": "sha512-+n6v7/dbAlp5wpdlcQrx4u3sQT6FlMgiy8KRtNgzfYXc9ZZUP6RqeGvQ7qTSlp4xbfiS4U+uRS99Mv9wMahr/g==",
+      "license": "MIT",
+      "dependencies": {
+        "@patternfly/react-code-editor": "^6.1.0",
+        "@patternfly/react-core": "^6.1.0",
+        "@patternfly/react-icons": "^6.1.0",
+        "@patternfly/react-styles": "^6.1.0",
+        "@patternfly/react-table": "^6.1.0",
+        "@segment/analytics-next": "^1.76.0",
+        "clsx": "^2.1.0",
+        "path-browserify": "^1.0.1",
+        "posthog-js": "^1.194.4",
+        "react-markdown": "^9.0.1",
+        "rehype-external-links": "^3.0.0",
+        "rehype-highlight": "^7.0.0",
+        "rehype-sanitize": "^6.0.0",
+        "rehype-unwrap-images": "^1.0.0",
+        "remark-gfm": "^4.0.0",
+        "unist-util-visit": "^5.0.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "@monaco-editor/react": "^4.7.0",
+        "monaco-editor": "^0.54.0",
+        "react": "^18 || ^19",
+        "react-dom": "^18 || ^19"
       },
       "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
+        "@monaco-editor/react": {
+          "optional": false
+        },
+        "monaco-editor": {
+          "optional": false
         }
       }
     },
-    "node_modules/@radix-ui/react-use-callback-ref": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-callback-ref/-/react-use-callback-ref-1.1.1.tgz",
-      "integrity": "sha512-FkBMwD+qbGQeMu1cOHnuGB6x4yzPjho8ap5WtbEJ26umhgqVXbhekKUQO+hZEL1vU92a3wHwdp0HAcqAUF5iDg==",
-      "license": "MIT",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
+    "node_modules/@patternfly/patternfly": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/@patternfly/patternfly/-/patternfly-6.4.0.tgz",
+      "integrity": "sha512-4drFhg74sEc/fftark5wZevODIog17qR4pwLCdB3j5iK3Uu5oMA2SdLhsEeEQggalfnFzve/Km87MdVR0ghhvQ==",
+      "license": "MIT"
     },
-    "node_modules/@radix-ui/react-use-controllable-state": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-controllable-state/-/react-use-controllable-state-1.2.2.tgz",
-      "integrity": "sha512-BjasUjixPFdS+NKkypcyyN5Pmg83Olst0+c6vGov0diwTEo6mgdqVR6hxcEgFuh4QrAs7Rc+9KuGJ9TVCj0Zzg==",
+    "node_modules/@patternfly/react-code-editor": {
+      "version": "6.4.3",
+      "resolved": "https://registry.npmjs.org/@patternfly/react-code-editor/-/react-code-editor-6.4.3.tgz",
+      "integrity": "sha512-1HKlm73jNu8rP8DJfJZxTEjJAM2YP2Q4EsOH3oXAF4OQia6a4wo6IzzpGlrrvmlDTXPsFa+zz08xu8ESa+rSOA==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-effect-event": "0.0.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@monaco-editor/react": "^4.6.0",
+        "@patternfly/react-core": "^6.4.3",
+        "@patternfly/react-icons": "^6.4.0",
+        "@patternfly/react-styles": "^6.4.0",
+        "react-dropzone": "14.3.5",
+        "tslib": "^2.8.1"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+        "react": "^17 || ^18 || ^19",
+        "react-dom": "^17 || ^18 || ^19"
       }
     },
-    "node_modules/@radix-ui/react-use-effect-event": {
-      "version": "0.0.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-effect-event/-/react-use-effect-event-0.0.2.tgz",
-      "integrity": "sha512-Qp8WbZOBe+blgpuUT+lw2xheLP8q0oatc9UpmiemEICxGvFLYmHm9QowVZGHtJlGbS6A6yJ3iViad/2cVjnOiA==",
+    "node_modules/@patternfly/react-code-editor/node_modules/react-dropzone": {
+      "version": "14.3.5",
+      "resolved": "https://registry.npmjs.org/react-dropzone/-/react-dropzone-14.3.5.tgz",
+      "integrity": "sha512-9nDUaEEpqZLOz5v5SUcFA0CjM4vq8YbqO0WRls+EYT7+DvxUdzDPKNCPLqGfj3YL9MsniCLCD4RFA6M95V6KMQ==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "attr-accept": "^2.2.4",
+        "file-selector": "^2.1.0",
+        "prop-types": "^15.8.1"
       },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "engines": {
+        "node": ">= 10.13"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "peerDependencies": {
+        "react": ">= 16.8 || 18.0.0"
       }
     },
-    "node_modules/@radix-ui/react-use-escape-keydown": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-escape-keydown/-/react-use-escape-keydown-1.1.1.tgz",
-      "integrity": "sha512-Il0+boE7w/XebUHyBjroE+DbByORGR9KKmITzbR7MyQ4akpORYP/ZmbhAr0DG7RmmBqoOnZdy2QlvajJ2QA59g==",
+    "node_modules/@patternfly/react-core": {
+      "version": "6.4.3",
+      "resolved": "https://registry.npmjs.org/@patternfly/react-core/-/react-core-6.4.3.tgz",
+      "integrity": "sha512-CYf+DFmcV5LCTQh7ZNBhHgqaEbDKwKOxBB/3Si6xFn8fIH8h/Wj3ZHSm6rYslQS7dJUusqyv5gJ2dR9LixT3TA==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-callback-ref": "1.1.1"
+        "@patternfly/react-icons": "^6.4.0",
+        "@patternfly/react-styles": "^6.4.0",
+        "@patternfly/react-tokens": "^6.4.0",
+        "focus-trap": "7.6.4",
+        "react-dropzone": "^14.3.5",
+        "tslib": "^2.8.1"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+        "react": "^17 || ^18 || ^19",
+        "react-dom": "^17 || ^18 || ^19"
       }
     },
-    "node_modules/@radix-ui/react-use-layout-effect": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-layout-effect/-/react-use-layout-effect-1.1.1.tgz",
-      "integrity": "sha512-RbJRS4UWQFkzHTTwVymMTUv8EqYhOp8dOOviLj2ugtTiXRaRQS7GLGxZTLL1jWhMeoSCf5zmcZkqTl9IiYfXcQ==",
+    "node_modules/@patternfly/react-icons": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/@patternfly/react-icons/-/react-icons-6.4.0.tgz",
+      "integrity": "sha512-SPjzatm73NUYv/BL6A/cjRA5sFQ15NkiyPAcT8gmklI7HY+ptd6/eg49uBDFmxTQcSwbb5ISW/R6wwCQBY2M+Q==",
       "license": "MIT",
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+        "react": "^17 || ^18 || ^19",
+        "react-dom": "^17 || ^18 || ^19"
       }
     },
-    "node_modules/@radix-ui/react-use-previous": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-previous/-/react-use-previous-1.1.1.tgz",
-      "integrity": "sha512-2dHfToCj/pzca2Ck724OZ5L0EVrr3eHRNsG/b3xQJLA2hZpVCS99bLAX+hm1IHXDEnzU6by5z/5MIY794/a8NQ==",
+    "node_modules/@patternfly/react-styles": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/@patternfly/react-styles/-/react-styles-6.4.0.tgz",
+      "integrity": "sha512-EXmHA67s5sy+Wy/0uxWoUQ52jr9lsH2wV3QcgtvVc5zxpyBX89gShpqv4jfVqaowznHGDoL6fVBBrSe9BYOliQ==",
+      "license": "MIT"
+    },
+    "node_modules/@patternfly/react-table": {
+      "version": "6.4.3",
+      "resolved": "https://registry.npmjs.org/@patternfly/react-table/-/react-table-6.4.3.tgz",
+      "integrity": "sha512-lPHjVOEkJpCtXMtE48pLGwMmLsCgYJvoiZpuW2/Vlg0y0pmg0nfYUVDBBTXfQ3dgskn/zb5SAgZr158VQQoBtw==",
       "license": "MIT",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "dependencies": {
+        "@patternfly/react-core": "^6.4.3",
+        "@patternfly/react-icons": "^6.4.0",
+        "@patternfly/react-styles": "^6.4.0",
+        "@patternfly/react-tokens": "^6.4.0",
+        "lodash": "^4.17.23",
+        "tslib": "^2.8.1"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "peerDependencies": {
+        "react": "^17 || ^18 || ^19",
+        "react-dom": "^17 || ^18 || ^19"
       }
     },
-    "node_modules/@radix-ui/react-use-rect": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-rect/-/react-use-rect-1.1.1.tgz",
-      "integrity": "sha512-QTYuDesS0VtuHNNvMh+CjlKJ4LJickCMUAqjlE3+j8w+RlRpwyX3apEQKGFzbZGdo7XNG1tXa+bQqIE7HIXT2w==",
-      "license": "MIT",
+    "node_modules/@patternfly/react-tokens": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/@patternfly/react-tokens/-/react-tokens-6.4.0.tgz",
+      "integrity": "sha512-iZthBoXSGQ/+PfGTdPFJVulaJZI3rwE+7A/whOXPGp3Jyq3k6X52pr1+5nlO6WHasbZ9FyeZGqXf4fazUZNjbw==",
+      "license": "MIT"
+    },
+    "node_modules/@pinojs/redact": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/@pinojs/redact/-/redact-0.4.0.tgz",
+      "integrity": "sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==",
+      "license": "MIT"
+    },
+    "node_modules/@playwright/test": {
+      "version": "1.61.1",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.61.1.tgz",
+      "integrity": "sha512-8nKv6+0RJSL9FE4jYOEGXnPeM/Hg12qZpmqzZjRh3qM0Y7c3z1mrOTfFLids72RDQYVh9WpLEfR5WdpNX4fkig==",
+      "dev": true,
+      "license": "Apache-2.0",
       "dependencies": {
-        "@radix-ui/rect": "1.1.1"
+        "playwright": "1.61.1"
       },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+      "bin": {
+        "playwright": "cli.js"
       },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+      "engines": {
+        "node": ">=18"
       }
     },
-    "node_modules/@radix-ui/react-use-size": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-size/-/react-use-size-1.1.1.tgz",
-      "integrity": "sha512-ewrXRDTAqAXlkl6t/fkXWNAhFX9I+CkKlw6zjEwk86RSPKwZr3xpBRso655aqYafwtnbpHLj6toFzmd6xdVptQ==",
+    "node_modules/@posthog/core": {
+      "version": "1.29.1",
+      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.29.1.tgz",
+      "integrity": "sha512-q+/t/DZALr50YTE0dFgfGSS9EgwcyAlqsn+JS61wLkwdcDM5yu/YTDM8oMKmJupsyjSZlVkDuHZAMd4ab7AxzQ==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-layout-effect": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+        "@posthog/types": "1.373.4"
+      }
+    },
+    "node_modules/@posthog/types": {
+      "version": "1.373.4",
+      "resolved": "https://registry.npmjs.org/@posthog/types/-/types-1.373.4.tgz",
+      "integrity": "sha512-n+0AbGRYYsbi+CQXQi2rF1lwTSyASlaogcw4YSkzB5KeMa4Y6nhNb7+TTnu9aVor+BycsQYCa2OsBrMMbaTekw==",
+      "license": "MIT"
+    },
+    "node_modules/@protobufjs/aspromise": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/base64": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/codegen": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.5.tgz",
+      "integrity": "sha512-zgXFLzW3Ap33e6d0Wlj4MGIm6Ce8O89n/apUaGNB/jx+hw+ruWEp7EwGUshdLKVRCxZW12fp9r40E1mQrf/34g==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/eventemitter": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz",
+      "integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/fetch": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.0.tgz",
+      "integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.1",
+        "@protobufjs/inquire": "^1.1.0"
       }
     },
-    "node_modules/@radix-ui/react-visually-hidden": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-visually-hidden/-/react-visually-hidden-1.2.3.tgz",
-      "integrity": "sha512-pzJq12tEaaIhqjbzpCuv/OypJY/BPavOofm+dbab+MHLajy277+1lLm6JFcGgF5eskJ6mquGirhXY2GD/8u8Ug==",
+    "node_modules/@protobufjs/float": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/inquire": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.1.tgz",
+      "integrity": "sha512-mnzgDV26ueAvk7rsbt9L7bE0SuAoqyuys/sMMrmVcN5x9VsxpcG3rqAUSgDyLp0UZlmNfIbQ4fHfCtreVBk8Ew==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/path": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/pool": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/utf8": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.1.tgz",
+      "integrity": "sha512-oOAWABowe8EAbMyWKM0tYDKi8Yaox52D+HWZhAIJqQXbqe0xI/GV7FhLWqlEKreMkfDjshR5FKgi3mnle0h6Eg==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@reduxjs/toolkit": {
+      "version": "2.11.2",
+      "resolved": "https://registry.npmjs.org/@reduxjs/toolkit/-/toolkit-2.11.2.tgz",
+      "integrity": "sha512-Kd6kAHTA6/nUpp8mySPqj3en3dm0tdMIgbttnQ1xFMVpufoj+ADi8pXLBsd4xzTRHQa7t/Jv8W5UnCuW4kuWMQ==",
       "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3"
+        "@standard-schema/spec": "^1.0.0",
+        "@standard-schema/utils": "^0.3.0",
+        "immer": "^11.0.0",
+        "redux": "^5.0.1",
+        "redux-thunk": "^3.1.0",
+        "reselect": "^5.1.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
+        "react": "^16.9.0 || ^17.0.0 || ^18 || ^19",
+        "react-redux": "^7.2.1 || ^8.1.3 || ^9.0.0"
       },
       "peerDependenciesMeta": {
-        "@types/react": {
+        "react": {
           "optional": true
         },
-        "@types/react-dom": {
+        "react-redux": {
           "optional": true
         }
       }
     },
-    "node_modules/@radix-ui/rect": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/rect/-/rect-1.1.1.tgz",
-      "integrity": "sha512-HPwpGIzkl28mWyZqG52jiqDJ12waP11Pa1lGoiyUkIEuMLBP0oeK/C89esbXrxsky5we7dfd8U58nm0SgAWpVw==",
-      "license": "MIT"
-    },
     "node_modules/@rolldown/pluginutils": {
       "version": "1.0.0-beta.27",
       "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-beta.27.tgz",
@@ -2261,6 +5291,97 @@
         "win32"
       ]
     },
+    "node_modules/@segment/analytics-core": {
+      "version": "1.8.3",
+      "resolved": "https://registry.npmjs.org/@segment/analytics-core/-/analytics-core-1.8.3.tgz",
+      "integrity": "sha512-63X8e2DWb2ZnJ9S3H8iSOFnbeDXMkTGhA8kZG4eFAO07QBwBVyWo5BCpv6vmuOMEkv2le6t2FMg1p6ZeJQA/4A==",
+      "license": "MIT",
+      "dependencies": {
+        "@lukeed/uuid": "^2.0.0",
+        "@segment/analytics-generic-utils": "1.2.0",
+        "dset": "^3.1.4",
+        "tslib": "^2.4.1"
+      }
+    },
+    "node_modules/@segment/analytics-generic-utils": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/@segment/analytics-generic-utils/-/analytics-generic-utils-1.2.0.tgz",
+      "integrity": "sha512-DfnW6mW3YQOLlDQQdR89k4EqfHb0g/3XvBXkovH1FstUN93eL1kfW9CsDcVQyH3bAC5ZsFyjA/o/1Q2j0QeoWw==",
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.4.1"
+      }
+    },
+    "node_modules/@segment/analytics-next": {
+      "version": "1.84.0",
+      "resolved": "https://registry.npmjs.org/@segment/analytics-next/-/analytics-next-1.84.0.tgz",
+      "integrity": "sha512-V5scoCrhiTpRPOuBwNVpvE4KvHwrjgQ5fs282R72KiAZ0HoxmjLgReZYjZogBf7qq/c6VmQG3nidwh8PQGcY1A==",
+      "license": "MIT",
+      "dependencies": {
+        "@lukeed/uuid": "^2.0.0",
+        "@segment/analytics-core": "1.8.3",
+        "@segment/analytics-generic-utils": "1.2.0",
+        "@segment/analytics-page-tools": "1.0.0",
+        "@segment/analytics.js-video-plugins": "^0.2.1",
+        "@segment/facade": "^3.4.9",
+        "dset": "^3.1.4",
+        "js-cookie": "3.0.1",
+        "node-fetch": "^2.6.7",
+        "tslib": "^2.4.1",
+        "unfetch": "^4.1.0"
+      }
+    },
+    "node_modules/@segment/analytics-page-tools": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/@segment/analytics-page-tools/-/analytics-page-tools-1.0.0.tgz",
+      "integrity": "sha512-o9OVB91qLB9qb0Bw1HfjmWm5AnrMNULRjx++4lBqLt8InKRX1urrRBparVlpj+yJA0sckN5ZcsfazRLuPgBYDQ==",
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.4.1"
+      }
+    },
+    "node_modules/@segment/analytics.js-video-plugins": {
+      "version": "0.2.1",
+      "resolved": "https://registry.npmjs.org/@segment/analytics.js-video-plugins/-/analytics.js-video-plugins-0.2.1.tgz",
+      "integrity": "sha512-lZwCyEXT4aaHBLNK433okEKdxGAuyrVmop4BpQqQSJuRz0DglPZgd9B/XjiiWs1UyOankg2aNYMN3VcS8t4eSQ==",
+      "license": "ISC",
+      "dependencies": {
+        "unfetch": "^3.1.1"
+      }
+    },
+    "node_modules/@segment/analytics.js-video-plugins/node_modules/unfetch": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/unfetch/-/unfetch-3.1.2.tgz",
+      "integrity": "sha512-L0qrK7ZeAudGiKYw6nzFjnJ2D5WHblUBwmHIqtPS6oKUd+Hcpk7/hKsSmcHsTlpd1TbTNsiRBUKRq3bHLNIqIw==",
+      "license": "MIT"
+    },
+    "node_modules/@segment/facade": {
+      "version": "3.4.10",
+      "resolved": "https://registry.npmjs.org/@segment/facade/-/facade-3.4.10.tgz",
+      "integrity": "sha512-xVQBbB/lNvk/u8+ey0kC/+g8pT3l0gCT8O2y9Z+StMMn3KAFAQ9w8xfgef67tJybktOKKU7pQGRPolRM1i1pdA==",
+      "license": "SEE LICENSE IN LICENSE",
+      "dependencies": {
+        "@segment/isodate-traverse": "^1.1.1",
+        "inherits": "^2.0.4",
+        "new-date": "^1.0.3",
+        "obj-case": "0.2.1"
+      }
+    },
+    "node_modules/@segment/isodate": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@segment/isodate/-/isodate-1.0.3.tgz",
+      "integrity": "sha512-BtanDuvJqnACFkeeYje7pWULVv8RgZaqKHWwGFnL/g/TH/CcZjkIVTfGDp/MAxmilYHUkrX70SqwnYSTNEaN7A==",
+      "license": "SEE LICENSE IN LICENSE"
+    },
+    "node_modules/@segment/isodate-traverse": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@segment/isodate-traverse/-/isodate-traverse-1.1.1.tgz",
+      "integrity": "sha512-+G6e1SgAUkcq0EDMi+SRLfT48TNlLPF3QnSgFGVs0V9F3o3fq/woQ2rHFlW20W0yy5NnCUH0QGU3Am2rZy/E3w==",
+      "license": "SEE LICENSE IN LICENSE",
+      "dependencies": {
+        "@segment/isodate": "^1.0.3"
+      }
+    },
     "node_modules/@sideway/address": {
       "version": "4.1.5",
       "resolved": "https://registry.npmjs.org/@sideway/address/-/address-4.1.5.tgz",
@@ -2288,6 +5409,25 @@
       "integrity": "sha512-RNiOoTPkptFtSVzQevY/yWtZwf/RxyVnPy/OcA9HBM3MlGDnBEYL5B41H0MTn0Uec8Hi+2qUtTfG2WWZBmMejQ==",
       "license": "BSD-3-Clause"
     },
+    "node_modules/@sinclair/typebox": {
+      "version": "0.34.50",
+      "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.34.50.tgz",
+      "integrity": "sha512-ydBWw0G6WFwWHzh9RK4B5c690UkreOG0llq0r+DaI7LgKgxigf8mhHzIPI3S0850g1BPkq/zpuCfrq4QFgUlTQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@standard-schema/spec": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
+      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
+      "license": "MIT"
+    },
+    "node_modules/@standard-schema/utils": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/@standard-schema/utils/-/utils-0.3.0.tgz",
+      "integrity": "sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==",
+      "license": "MIT"
+    },
     "node_modules/@swc/core": {
       "version": "1.15.18",
       "resolved": "https://registry.npmjs.org/@swc/core/-/core-1.15.18.tgz",
@@ -2771,6 +5911,139 @@
         "vite": "^5.2.0 || ^6 || ^7"
       }
     },
+    "node_modules/@testing-library/dom": {
+      "version": "10.4.1",
+      "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.1.tgz",
+      "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "@babel/code-frame": "^7.10.4",
+        "@babel/runtime": "^7.12.5",
+        "@types/aria-query": "^5.0.1",
+        "aria-query": "5.3.0",
+        "dom-accessibility-api": "^0.5.9",
+        "lz-string": "^1.5.0",
+        "picocolors": "1.1.1",
+        "pretty-format": "^27.0.2"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@testing-library/jest-dom": {
+      "version": "6.9.1",
+      "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-6.9.1.tgz",
+      "integrity": "sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@adobe/css-tools": "^4.4.0",
+        "aria-query": "^5.0.0",
+        "css.escape": "^1.5.1",
+        "dom-accessibility-api": "^0.6.3",
+        "picocolors": "^1.1.1",
+        "redent": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=14",
+        "npm": ">=6",
+        "yarn": ">=1"
+      }
+    },
+    "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz",
+      "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@testing-library/react": {
+      "version": "16.3.2",
+      "resolved": "https://registry.npmjs.org/@testing-library/react/-/react-16.3.2.tgz",
+      "integrity": "sha512-XU5/SytQM+ykqMnAnvB2umaJNIOsLF3PVv//1Ew4CTcpz0/BRyy/af40qqrt7SjKpDdT1saBMc42CUok5gaw+g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.12.5"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@testing-library/dom": "^10.0.0",
+        "@types/react": "^18.0.0 || ^19.0.0",
+        "@types/react-dom": "^18.0.0 || ^19.0.0",
+        "react": "^18.0.0 || ^19.0.0",
+        "react-dom": "^18.0.0 || ^19.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@types/react": {
+          "optional": true
+        },
+        "@types/react-dom": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@testing-library/user-event": {
+      "version": "14.6.1",
+      "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.1.tgz",
+      "integrity": "sha512-vq7fv0rnt+QTXgPxr5Hjc210p6YKq2kmdziLgnsZGgLJ9e6VAShx1pACLuRjd/AS/sr7phAR58OIIpf0LlmQNw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      },
+      "peerDependencies": {
+        "@testing-library/dom": ">=7.21.4"
+      }
+    },
+    "node_modules/@types/aria-query": {
+      "version": "5.0.4",
+      "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz",
+      "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true
+    },
+    "node_modules/@types/aws-lambda": {
+      "version": "8.10.161",
+      "resolved": "https://registry.npmjs.org/@types/aws-lambda/-/aws-lambda-8.10.161.tgz",
+      "integrity": "sha512-rUYdp+MQwSFocxIOcSsYSF3YYYC/uUpMbCY/mbO21vGqfrEYvNSoPyKYDj6RhXXpPfS0KstW9RwG3qXh9sL7FQ==",
+      "license": "MIT"
+    },
+    "node_modules/@types/bunyan": {
+      "version": "1.8.11",
+      "resolved": "https://registry.npmjs.org/@types/bunyan/-/bunyan-1.8.11.tgz",
+      "integrity": "sha512-758fRH7umIMk5qt5ELmRMff4mLDlN+xyYzC+dkPTdKwbSkJFvz6xwyScrytPU0QIBbRRwbiE8/BIg8bpajerNQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/chai": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz",
+      "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/deep-eql": "*",
+        "assertion-error": "^2.0.1"
+      }
+    },
+    "node_modules/@types/connect": {
+      "version": "3.4.38",
+      "resolved": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz",
+      "integrity": "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/debug": {
       "version": "4.1.12",
       "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.12.tgz",
@@ -2780,6 +6053,13 @@
         "@types/ms": "*"
       }
     },
+    "node_modules/@types/deep-eql": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+      "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/estree": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz",
@@ -2804,6 +6084,91 @@
         "@types/unist": "*"
       }
     },
+    "node_modules/@types/hoist-non-react-statics": {
+      "version": "3.3.7",
+      "resolved": "https://registry.npmjs.org/@types/hoist-non-react-statics/-/hoist-non-react-statics-3.3.7.tgz",
+      "integrity": "sha512-PQTyIulDkIDro8P+IHbKCsw7U2xxBYflVzW/FgWdCAePD9xGSidgA76/GeJ6lBKoblyhf9pBY763gbrN+1dI8g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hoist-non-react-statics": "^3.3.0"
+      },
+      "peerDependencies": {
+        "@types/react": "*"
+      }
+    },
+    "node_modules/@types/istanbul-lib-coverage": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz",
+      "integrity": "sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/istanbul-lib-report": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz",
+      "integrity": "sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/istanbul-lib-coverage": "*"
+      }
+    },
+    "node_modules/@types/istanbul-reports": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz",
+      "integrity": "sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/istanbul-lib-report": "*"
+      }
+    },
+    "node_modules/@types/jest": {
+      "version": "30.0.0",
+      "resolved": "https://registry.npmjs.org/@types/jest/-/jest-30.0.0.tgz",
+      "integrity": "sha512-XTYugzhuwqWjws0CVz8QpM36+T+Dz5mTEBKhNs/esGLnCIlGdRy+Dq78NRjd7ls7r8BC8ZRMOrKlkO1hU0JOwA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "expect": "^30.0.0",
+        "pretty-format": "^30.0.0"
+      }
+    },
+    "node_modules/@types/jest-axe": {
+      "version": "3.5.9",
+      "resolved": "https://registry.npmjs.org/@types/jest-axe/-/jest-axe-3.5.9.tgz",
+      "integrity": "sha512-z98CzR0yVDalCEuhGXXO4/zN4HHuSebAukXDjTLJyjEAgoUf1H1i+sr7SUB/mz8CRS/03/XChsx0dcLjHkndoQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/jest": "*",
+        "axe-core": "^3.5.5"
+      }
+    },
+    "node_modules/@types/jest/node_modules/pretty-format": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz",
+      "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/schemas": "30.4.1",
+        "ansi-styles": "^5.2.0",
+        "react-is-18": "npm:react-is@^18.3.1",
+        "react-is-19": "npm:react-is@^19.2.5"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@types/js-yaml": {
+      "version": "4.0.9",
+      "resolved": "https://registry.npmjs.org/@types/js-yaml/-/js-yaml-4.0.9.tgz",
+      "integrity": "sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/json-schema": {
       "version": "7.0.15",
       "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
@@ -2819,22 +6184,68 @@
         "@types/unist": "*"
       }
     },
+    "node_modules/@types/memcached": {
+      "version": "2.2.10",
+      "resolved": "https://registry.npmjs.org/@types/memcached/-/memcached-2.2.10.tgz",
+      "integrity": "sha512-AM9smvZN55Gzs2wRrqeMHVP7KE8KWgCJO/XL5yCly2xF6EKa4YlbpK+cLSAH4NG/Ah64HrlegmGqW8kYws7Vxg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/ms": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz",
       "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==",
       "license": "MIT"
     },
+    "node_modules/@types/mysql": {
+      "version": "2.15.27",
+      "resolved": "https://registry.npmjs.org/@types/mysql/-/mysql-2.15.27.tgz",
+      "integrity": "sha512-YfWiV16IY0OeBfBCk8+hXKmdTKrKlwKN1MNKAPBu5JYxLwBEZl7QzeEpGnlZb3VMGJrrGmB84gXiH+ofs/TezA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/node": {
       "version": "22.19.15",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.15.tgz",
       "integrity": "sha512-F0R/h2+dsy5wJAUe3tAU6oqa2qbWY5TpNfL/RGmo1y38hiyO1w3x2jPtt76wmuaJI4DQnOBu21cNXQ2STIUUWg==",
-      "devOptional": true,
       "license": "MIT",
       "dependencies": {
         "undici-types": "~6.21.0"
       }
     },
+    "node_modules/@types/oracledb": {
+      "version": "6.5.2",
+      "resolved": "https://registry.npmjs.org/@types/oracledb/-/oracledb-6.5.2.tgz",
+      "integrity": "sha512-kK1eBS/Adeyis+3OlBDMeQQuasIDLUYXsi2T15ccNJ0iyUpQ4xDF7svFu3+bGVrI0CMBUclPciz+lsQR3JX3TQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/pg": {
+      "version": "8.15.6",
+      "resolved": "https://registry.npmjs.org/@types/pg/-/pg-8.15.6.tgz",
+      "integrity": "sha512-NoaMtzhxOrubeL/7UZuNTrejB4MPAJ0RpxZqXQf2qXuVlTPuG6Y8p4u9dKRaue4yjmC7ZhzVO2/Yyyn25znrPQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "pg-protocol": "*",
+        "pg-types": "^2.2.0"
+      }
+    },
+    "node_modules/@types/pg-pool": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/@types/pg-pool/-/pg-pool-2.0.7.tgz",
+      "integrity": "sha512-U4CwmGVQcbEuqpyju8/ptOKg6gEC+Tqsvj2xS9o1g71bUh8twxnC6ZL5rZKCsGN0iyH0CwgUyc9VR5owNQF9Ng==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/pg": "*"
+      }
+    },
     "node_modules/@types/react": {
       "version": "19.2.14",
       "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.14.tgz",
@@ -2848,30 +6259,99 @@
       "version": "19.2.3",
       "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.3.tgz",
       "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
-      "devOptional": true,
+      "dev": true,
       "license": "MIT",
       "peerDependencies": {
         "@types/react": "^19.2.0"
       }
     },
+    "node_modules/@types/react-redux": {
+      "version": "7.1.34",
+      "resolved": "https://registry.npmjs.org/@types/react-redux/-/react-redux-7.1.34.tgz",
+      "integrity": "sha512-GdFaVjEbYv4Fthm2ZLvj1VSCedV7TqE5y1kNwnjSdBOTXuRSgowux6J8TAct15T3CKBr63UMk+2CO7ilRhyrAQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/hoist-non-react-statics": "^3.3.0",
+        "@types/react": "*",
+        "hoist-non-react-statics": "^3.3.0",
+        "redux": "^4.0.0"
+      }
+    },
+    "node_modules/@types/react-redux/node_modules/redux": {
+      "version": "4.2.1",
+      "resolved": "https://registry.npmjs.org/redux/-/redux-4.2.1.tgz",
+      "integrity": "sha512-LAUYz4lc+Do8/g7aeRa8JkyDErK6ekstQaqWQrNRW//MY1TvCEpMtpTWvlQ+FPbWCx+Xixu/6SHt5N0HR+SB4w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.9.2"
+      }
+    },
     "node_modules/@types/retry": {
       "version": "0.12.0",
       "resolved": "https://registry.npmjs.org/@types/retry/-/retry-0.12.0.tgz",
       "integrity": "sha512-wWKOClTTiizcZhXnPY4wikVAwmdYHp8q6DmC+EJUzAMsycb7HB32Kh9RN4+0gExjmPmZSAQjgURXIGATPegAvA==",
       "license": "MIT"
     },
+    "node_modules/@types/stack-utils": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz",
+      "integrity": "sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/tedious": {
+      "version": "4.0.14",
+      "resolved": "https://registry.npmjs.org/@types/tedious/-/tedious-4.0.14.tgz",
+      "integrity": "sha512-KHPsfX/FoVbUGbyYvk1q9MMQHLPeRZhRJZdO45Q4YjvFkv4hMNghCWTvy7rdKessBsmtz4euWCWAB6/tVpI1Iw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/trusted-types": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
+      "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/@types/unist": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz",
       "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
       "license": "MIT"
     },
+    "node_modules/@types/use-sync-external-store": {
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/@types/use-sync-external-store/-/use-sync-external-store-0.0.6.tgz",
+      "integrity": "sha512-zFDAD+tlpf2r4asuHEj0XH6pY6i0g5NeAHPn+15wk3BV6JA69eERFXC1gyGThDkVa1zCyKr5jox1+2LbV/AMLg==",
+      "license": "MIT"
+    },
     "node_modules/@types/uuid": {
       "version": "10.0.0",
       "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-10.0.0.tgz",
       "integrity": "sha512-7gqG38EyHgyP1S+7+xomFtL+ZNHcKv6DwNaCZmJmo1vgMugyF3TCnXVg4t1uk89mLNwnLtnY3TpOpCOyp1/xHQ==",
       "license": "MIT"
     },
+    "node_modules/@types/yargs": {
+      "version": "17.0.35",
+      "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.35.tgz",
+      "integrity": "sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/yargs-parser": "*"
+      }
+    },
+    "node_modules/@types/yargs-parser": {
+      "version": "21.0.3",
+      "resolved": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz",
+      "integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@typescript-eslint/eslint-plugin": {
       "version": "8.57.1",
       "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.57.1.tgz",
@@ -3174,6 +6654,150 @@
         "vite": "^4 || ^5 || ^6 || ^7"
       }
     },
+    "node_modules/@vitest/coverage-v8": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.10.tgz",
+      "integrity": "sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@bcoe/v8-coverage": "^1.0.2",
+        "@vitest/utils": "4.1.10",
+        "ast-v8-to-istanbul": "^1.0.0",
+        "istanbul-lib-coverage": "^3.2.2",
+        "istanbul-lib-report": "^3.0.1",
+        "istanbul-reports": "^3.2.0",
+        "magicast": "^0.5.2",
+        "obug": "^2.1.1",
+        "std-env": "^4.0.0-rc.1",
+        "tinyrainbow": "^3.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@vitest/browser": "4.1.10",
+        "vitest": "4.1.10"
+      },
+      "peerDependenciesMeta": {
+        "@vitest/browser": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vitest/expect": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.10.tgz",
+      "integrity": "sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@standard-schema/spec": "^1.1.0",
+        "@types/chai": "^5.2.2",
+        "@vitest/spy": "4.1.10",
+        "@vitest/utils": "4.1.10",
+        "chai": "^6.2.2",
+        "tinyrainbow": "^3.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/mocker": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.10.tgz",
+      "integrity": "sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/spy": "4.1.10",
+        "estree-walker": "^3.0.3",
+        "magic-string": "^0.30.21"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "msw": "^2.4.9",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "msw": {
+          "optional": true
+        },
+        "vite": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vitest/pretty-format": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.10.tgz",
+      "integrity": "sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tinyrainbow": "^3.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/runner": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.10.tgz",
+      "integrity": "sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/utils": "4.1.10",
+        "pathe": "^2.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/snapshot": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.10.tgz",
+      "integrity": "sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/pretty-format": "4.1.10",
+        "@vitest/utils": "4.1.10",
+        "magic-string": "^0.30.21",
+        "pathe": "^2.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/spy": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.10.tgz",
+      "integrity": "sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/utils": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.10.tgz",
+      "integrity": "sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/pretty-format": "4.1.10",
+        "convert-source-map": "^2.0.0",
+        "tinyrainbow": "^3.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
     "node_modules/abstract-logging": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/abstract-logging/-/abstract-logging-2.0.1.tgz",
@@ -3184,7 +6808,6 @@
       "version": "8.16.0",
       "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz",
       "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
-      "dev": true,
       "license": "MIT",
       "bin": {
         "acorn": "bin/acorn"
@@ -3193,6 +6816,15 @@
         "node": ">=0.4.0"
       }
     },
+    "node_modules/acorn-import-attributes": {
+      "version": "1.9.5",
+      "resolved": "https://registry.npmjs.org/acorn-import-attributes/-/acorn-import-attributes-1.9.5.tgz",
+      "integrity": "sha512-n02Vykv5uA3eHGM/Z2dQrcD56kL8TyDb2p1+0P83PClMnC/nc+anbQRhIOWnSq4Ke/KvDPrY3C9hDtC/A3eHnQ==",
+      "license": "MIT",
+      "peerDependencies": {
+        "acorn": "^8"
+      }
+    },
     "node_modules/acorn-jsx": {
       "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
@@ -3203,6 +6835,15 @@
         "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
       }
     },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
     "node_modules/ajv": {
       "version": "6.14.0",
       "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
@@ -3263,7 +6904,6 @@
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
       "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -3299,21 +6939,47 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
       "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "dev": true,
       "license": "Python-2.0"
     },
-    "node_modules/aria-hidden": {
-      "version": "1.2.6",
-      "resolved": "https://registry.npmjs.org/aria-hidden/-/aria-hidden-1.2.6.tgz",
-      "integrity": "sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==",
-      "license": "MIT",
+    "node_modules/aria-query": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz",
+      "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==",
+      "dev": true,
+      "license": "Apache-2.0",
       "dependencies": {
-        "tslib": "^2.0.0"
-      },
+        "dequal": "^2.0.3"
+      }
+    },
+    "node_modules/assertion-error": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
+      "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
+      "dev": true,
+      "license": "MIT",
       "engines": {
-        "node": ">=10"
+        "node": ">=12"
+      }
+    },
+    "node_modules/ast-v8-to-istanbul": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.4.tgz",
+      "integrity": "sha512-0bC0/4bTSrnwdhU3IsZDwEdojvuPrSg59OYZfKsLRtJZ0u8VBx9DebfqqG8bRdCC0I7vjgxmPi41P0lpkhJHtA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "^0.3.31",
+        "estree-walker": "^3.0.3",
+        "js-tokens": "^10.0.0"
       }
     },
+    "node_modules/ast-v8-to-istanbul/node_modules/js-tokens": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz",
+      "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/atomic-sleep": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/atomic-sleep/-/atomic-sleep-1.0.0.tgz",
@@ -3323,6 +6989,15 @@
         "node": ">=8.0.0"
       }
     },
+    "node_modules/attr-accept": {
+      "version": "2.2.5",
+      "resolved": "https://registry.npmjs.org/attr-accept/-/attr-accept-2.2.5.tgz",
+      "integrity": "sha512-0bDNnY/u6pPwHDMoF0FieU354oBi0a8rD9FcsLwzcGWbc8KS8KPIi7y+s13OlVY+gMWc/9xEMUgNE6Qm8ZllYQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/avvio": {
       "version": "9.2.0",
       "resolved": "https://registry.npmjs.org/avvio/-/avvio-9.2.0.tgz",
@@ -3343,6 +7018,16 @@
         "fastq": "^1.17.1"
       }
     },
+    "node_modules/axe-core": {
+      "version": "3.5.6",
+      "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-3.5.6.tgz",
+      "integrity": "sha512-LEUDjgmdJoA3LqklSTwKYqkjcZ4HKc4ddIYGSAiSkr46NTjzg2L9RNB+lekO9P7Dlpa87+hBtzc2Fzn/+GUWMQ==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/bail": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz",
@@ -3380,6 +7065,25 @@
       ],
       "license": "MIT"
     },
+    "node_modules/bidi-js": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.0.3.tgz",
+      "integrity": "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "require-from-string": "^2.0.2"
+      }
+    },
+    "node_modules/bignumber.js": {
+      "version": "9.3.1",
+      "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.3.1.tgz",
+      "integrity": "sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==",
+      "license": "MIT",
+      "engines": {
+        "node": "*"
+      }
+    },
     "node_modules/binary-extensions": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz",
@@ -3449,6 +7153,16 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/chai": {
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
+      "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/chalk": {
       "version": "4.1.2",
       "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
@@ -3570,23 +7284,32 @@
         "node": ">= 6"
       }
     },
-    "node_modules/class-variance-authority": {
-      "version": "0.7.1",
-      "resolved": "https://registry.npmjs.org/class-variance-authority/-/class-variance-authority-0.7.1.tgz",
-      "integrity": "sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "clsx": "^2.1.1"
-      },
-      "funding": {
-        "url": "https://polar.sh/cva"
+    "node_modules/ci-info": {
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/ci-info/-/ci-info-4.4.0.tgz",
+      "integrity": "sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/sibiraj-s"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
       }
     },
+    "node_modules/cjs-module-lexer": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.2.0.tgz",
+      "integrity": "sha512-4bHTS2YuzUvtoLjdy+98ykbNB5jS0+07EvFNXerqZQJ89F7DI6ET7OQo/HJuW6K0aVsKA9hj9/RVb2kQVOrPDQ==",
+      "license": "MIT"
+    },
     "node_modules/cliui": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
       "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
-      "dev": true,
       "license": "ISC",
       "dependencies": {
         "string-width": "^4.2.0",
@@ -3606,6 +7329,15 @@
         "node": ">=6"
       }
     },
+    "node_modules/cluster-key-slot": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/cluster-key-slot/-/cluster-key-slot-1.1.2.tgz",
+      "integrity": "sha512-RMr0FhtfXemyinomL4hrWcYJxmX6deFdCxpJzhDttxgO1+bcCnkk+9drydLVDmAMG7NE6aN/fl4F7ucU/90gAA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
@@ -3649,15 +7381,15 @@
       "license": "MIT"
     },
     "node_modules/concurrently": {
-      "version": "9.2.1",
-      "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-9.2.1.tgz",
-      "integrity": "sha512-fsfrO0MxV64Znoy8/l1vVIjjHa29SZyyqPgQBwhiDcaW8wJc2W3XWVOGx4M3oJBnv/zdUZIIp1gDeS98GzP8Ng==",
+      "version": "9.2.4",
+      "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-9.2.4.tgz",
+      "integrity": "sha512-TZ0CEhyzvFjgtAvHTusDMgj7wNdihCh7LLLrzdUOXIhdlnL2JBBGA9eJxR24rtqgmdjh3OA3hrN1rCHj6HM8qA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "chalk": "4.1.2",
         "rxjs": "7.8.2",
-        "shell-quote": "1.8.3",
+        "shell-quote": "1.9.0",
         "supports-color": "8.1.1",
         "tree-kill": "1.2.2",
         "yargs": "17.7.2"
@@ -3694,6 +7426,13 @@
         "node": ">= 0.6"
       }
     },
+    "node_modules/convert-source-map": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
+      "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/cookie": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz",
@@ -3707,6 +7446,17 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/core-js": {
+      "version": "3.49.0",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.49.0.tgz",
+      "integrity": "sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/core-js"
+      }
+    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -3721,12 +7471,56 @@
         "node": ">= 8"
       }
     },
+    "node_modules/css-tree": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
+      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "mdn-data": "2.27.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+      }
+    },
+    "node_modules/css.escape": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz",
+      "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/csstype": {
       "version": "3.2.3",
       "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
       "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
       "license": "MIT"
     },
+    "node_modules/data-uri-to-buffer": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.1.tgz",
+      "integrity": "sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
+    "node_modules/data-urls": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-7.0.0.tgz",
+      "integrity": "sha512-23XHcCF+coGYevirZceTVD7NdJOqVn+49IHyxgszm+JIiHLoB2TkmPtsYkNWT1pvRSGkc35L6NHs0yHkN2SumA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-mimetype": "^5.0.0",
+        "whatwg-url": "^16.0.0"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
     "node_modules/dateformat": {
       "version": "4.6.3",
       "resolved": "https://registry.npmjs.org/dateformat/-/dateformat-4.6.3.tgz",
@@ -3763,6 +7557,13 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/decimal.js": {
+      "version": "10.6.0",
+      "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
+      "integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/decode-named-character-reference": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/decode-named-character-reference/-/decode-named-character-reference-1.3.0.tgz",
@@ -3783,6 +7584,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/denque": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/denque/-/denque-2.1.0.tgz",
+      "integrity": "sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=0.10"
+      }
+    },
     "node_modules/depd": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
@@ -3810,12 +7620,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/detect-node-es": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/detect-node-es/-/detect-node-es-1.1.0.tgz",
-      "integrity": "sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==",
-      "license": "MIT"
-    },
     "node_modules/devlop": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz",
@@ -3829,11 +7633,44 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/diff-sequences": {
+      "version": "29.6.3",
+      "resolved": "https://registry.npmjs.org/diff-sequences/-/diff-sequences-29.6.3.tgz",
+      "integrity": "sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/dom-accessibility-api": {
+      "version": "0.5.16",
+      "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz",
+      "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true
+    },
+    "node_modules/dompurify": {
+      "version": "3.1.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.1.7.tgz",
+      "integrity": "sha512-VaTstWtsneJY8xzy7DekmYWEOZcmzIe3Qb3zPd4STve1OBTa+e+WmS1ITQec1fZYXI3HCsOZZiSMpG6oxoWMWQ==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "peer": true
+    },
+    "node_modules/dset": {
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/dset/-/dset-3.1.4.tgz",
+      "integrity": "sha512-2QF/g9/zTaPDc3BjNcVTGoBbXBgYfMTTceLaYcFJ/W9kggFUkhxD/hMEeuLKbugyef9SqAx8cpgwlIP/jinUTA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/emoji-regex": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
       "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/end-of-stream": {
@@ -3859,6 +7696,26 @@
         "node": ">=10.13.0"
       }
     },
+    "node_modules/entities": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
+      "integrity": "sha512-zwfzJecQ/Uej6tusMqwAqU/6KL2XaB2VZ2Jg54Je6ahNBGNH6Ek6g3jjNCF0fG9EWQKGZNddNjU5F1ZQn/sBnA==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/es-module-lexer": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.1.0.tgz",
+      "integrity": "sha512-n27zTYMjYu1aj4MjCWzSP7G9r75utsaoc8m61weK+W8JMBGGQybd43GstCXZ3WNmSFtGT9wi59qQTW6mhTR5LQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/esbuild": {
       "version": "0.27.4",
       "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.4.tgz",
@@ -3905,7 +7762,6 @@
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
       "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6"
@@ -4107,6 +7963,16 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/estree-walker": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
+      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "^1.0.0"
+      }
+    },
     "node_modules/esutils": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz",
@@ -4123,6 +7989,34 @@
       "integrity": "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==",
       "license": "MIT"
     },
+    "node_modules/expect": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/expect/-/expect-30.4.1.tgz",
+      "integrity": "sha512-PMARsyh/JtqC20HoGqlFcIlQAyqUtW4PlI1rup1uhYJtKuwAjbvWi3GQMAn+STdHum/dk8xrKfUM1+5SAwpolA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/expect-utils": "30.4.1",
+        "@jest/get-type": "30.1.0",
+        "jest-matcher-utils": "30.4.1",
+        "jest-message-util": "30.4.1",
+        "jest-mock": "30.4.1",
+        "jest-util": "30.4.1"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/expect-type": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
+      "integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/extend": {
       "version": "3.0.2",
       "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz",
@@ -4298,6 +8192,35 @@
         "reusify": "^1.0.4"
       }
     },
+    "node_modules/fetch-blob": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/fetch-blob/-/fetch-blob-3.2.0.tgz",
+      "integrity": "sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/jimmywarting"
+        },
+        {
+          "type": "paypal",
+          "url": "https://paypal.me/jimmywarting"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "node-domexception": "^1.0.0",
+        "web-streams-polyfill": "^3.0.3"
+      },
+      "engines": {
+        "node": "^12.20 || >= 14.13"
+      }
+    },
+    "node_modules/fflate": {
+      "version": "0.4.8",
+      "resolved": "https://registry.npmjs.org/fflate/-/fflate-0.4.8.tgz",
+      "integrity": "sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==",
+      "license": "MIT"
+    },
     "node_modules/file-entry-cache": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-8.0.0.tgz",
@@ -4311,6 +8234,18 @@
         "node": ">=16.0.0"
       }
     },
+    "node_modules/file-selector": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/file-selector/-/file-selector-2.1.2.tgz",
+      "integrity": "sha512-QgXo+mXTe8ljeqUFaX3QVHc5osSItJ/Km+xpocx0aSqWGMSCf6qYs/VnzZgS864Pjn5iceMRFigeAV7AfTlaig==",
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.7.0"
+      },
+      "engines": {
+        "node": ">= 12"
+      }
+    },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -4376,6 +8311,15 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/focus-trap": {
+      "version": "7.6.4",
+      "resolved": "https://registry.npmjs.org/focus-trap/-/focus-trap-7.6.4.tgz",
+      "integrity": "sha512-xx560wGBk7seZ6y933idtjJQc1l+ck+pI3sKvhKozdBV1dRZoKhkW5xoCaFv9tQiX5RH1xfSxjuNu6g+lmN/gw==",
+      "license": "MIT",
+      "dependencies": {
+        "tabbable": "^6.2.0"
+      }
+    },
     "node_modules/foreground-child": {
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz",
@@ -4392,6 +8336,24 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/formdata-polyfill": {
+      "version": "4.0.10",
+      "resolved": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz",
+      "integrity": "sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==",
+      "license": "MIT",
+      "dependencies": {
+        "fetch-blob": "^3.1.2"
+      },
+      "engines": {
+        "node": ">=12.20.0"
+      }
+    },
+    "node_modules/forwarded-parse": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/forwarded-parse/-/forwarded-parse-2.1.2.tgz",
+      "integrity": "sha512-alTFZZQDKMporBH77856pXgzhEzaUVmLCDk+egLgIgHst3Tpndzz8MnKe+GzRJRfvVdn69HhpW7cmXzvtLvJAw==",
+      "license": "MIT"
+    },
     "node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
@@ -4406,25 +8368,61 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/gaxios": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.1.4.tgz",
+      "integrity": "sha512-bTIgTsM2bWn3XklZISBTQX7ZSddGW+IO3bMdGaemHZ3tbqExMENHLx6kKZ/KlejgrMtj8q7wBItt51yegqalrA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "extend": "^3.0.2",
+        "https-proxy-agent": "^7.0.1",
+        "node-fetch": "^3.3.2"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/gaxios/node_modules/node-fetch": {
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.3.2.tgz",
+      "integrity": "sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==",
+      "license": "MIT",
+      "dependencies": {
+        "data-uri-to-buffer": "^4.0.0",
+        "fetch-blob": "^3.1.4",
+        "formdata-polyfill": "^4.0.10"
+      },
+      "engines": {
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/node-fetch"
+      }
+    },
+    "node_modules/gcp-metadata": {
+      "version": "8.1.2",
+      "resolved": "https://registry.npmjs.org/gcp-metadata/-/gcp-metadata-8.1.2.tgz",
+      "integrity": "sha512-zV/5HKTfCeKWnxG0Dmrw51hEWFGfcF2xiXqcA3+J90WDuP0SvoiSO5ORvcBsifmx/FoIjgQN3oNOGaQ5PhLFkg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "gaxios": "^7.0.0",
+        "google-logging-utils": "^1.0.0",
+        "json-bigint": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/get-caller-file": {
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
       "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
-      "dev": true,
       "license": "ISC",
       "engines": {
         "node": "6.* || 8.* || >= 10.*"
       }
     },
-    "node_modules/get-nonce": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/get-nonce/-/get-nonce-1.0.1.tgz",
-      "integrity": "sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/get-tsconfig": {
       "version": "4.13.6",
       "resolved": "https://registry.npmjs.org/get-tsconfig/-/get-tsconfig-4.13.6.tgz",
@@ -4524,6 +8522,15 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/google-logging-utils": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/google-logging-utils/-/google-logging-utils-1.1.3.tgz",
+      "integrity": "sha512-eAmLkjDjAFCVXg7A1unxHsLf961m6y17QFqXqAXGj/gVkKFrEICfStRfwUlGNfeCEjNRa32JEWOUTlYXPyyKvA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=14"
+      }
+    },
     "node_modules/graceful-fs": {
       "version": "4.2.11",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
@@ -4539,6 +8546,61 @@
         "node": ">=8"
       }
     },
+    "node_modules/hast-util-has-property": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-has-property/-/hast-util-has-property-3.0.0.tgz",
+      "integrity": "sha512-MNilsvEKLFpV604hwfhVStK0usFY/QmM5zX16bo7EjnAEGofr5YyI37kzopBlZJkHD4t887i+q/C8/tr5Q94cA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-interactive": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-interactive/-/hast-util-interactive-3.0.0.tgz",
+      "integrity": "sha512-9VFa3kP6AT40BNYcPmn3jpsG+1KPDF0rUFCrFVQDUsuUXZ3YLODm8UGV0tmYzFpcOIQXTAOi2ccS3ywlj2dQTA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hast-util-has-property": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-is-element": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-is-element/-/hast-util-is-element-3.0.0.tgz",
+      "integrity": "sha512-Val9mnv2IWpLbNPqc/pUem+a7Ipj2aHacCwgNfTiK0vJKl0LF+4Ba4+v1oPHFpf3bLYmreq0/l3Gud9S5OH42g==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-sanitize": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/hast-util-sanitize/-/hast-util-sanitize-5.0.2.tgz",
+      "integrity": "sha512-3yTWghByc50aGS7JlGhk61SPenfE/p1oaFeNwkOOyrscaOkMGrcW9+Cy/QAIOBpZxP1yqDIzFMR0+Np0i0+usg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@ungap/structured-clone": "^1.0.0",
+        "unist-util-position": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/hast-util-to-jsx-runtime": {
       "version": "2.3.6",
       "resolved": "https://registry.npmjs.org/hast-util-to-jsx-runtime/-/hast-util-to-jsx-runtime-2.3.6.tgz",
@@ -4566,6 +8628,22 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/hast-util-to-text": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/hast-util-to-text/-/hast-util-to-text-4.0.2.tgz",
+      "integrity": "sha512-KK6y/BN8lbaq654j7JgBydev7wuNMcID54lkRav1P0CaE1e47P72AWWPiGKXTJU271ooYzcvTAn/Zt0REnvc7A==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/unist": "^3.0.0",
+        "hast-util-is-element": "^3.0.0",
+        "unist-util-find-after": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/hast-util-whitespace": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-3.0.0.tgz",
@@ -4579,6 +8657,15 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/helmet": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
+      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/help-me": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/help-me/-/help-me-5.0.0.tgz",
@@ -4586,6 +8673,45 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/highlight.js": {
+      "version": "11.11.1",
+      "resolved": "https://registry.npmjs.org/highlight.js/-/highlight.js-11.11.1.tgz",
+      "integrity": "sha512-Xwwo44whKBVCYoliBQwaPvtd/2tYFkRQtXDWj1nackaV2JPXx3L0+Jvd8/qCJ2p+ML0/XVkJ2q+Mr+UVdpJK5w==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/hoist-non-react-statics": {
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz",
+      "integrity": "sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "react-is": "^16.7.0"
+      }
+    },
+    "node_modules/html-encoding-sniffer": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-6.0.0.tgz",
+      "integrity": "sha512-CV9TW3Y3f8/wT0BRFc1/KAVQ3TUHiXmaAb6VW9vtiMFf7SLoMd1PdAc4W3KFOFETBJUb90KatHqlsZMWV+R9Gg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@exodus/bytes": "^1.6.0"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
+    "node_modules/html-escaper": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz",
+      "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/html-url-attributes": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/html-url-attributes/-/html-url-attributes-3.0.1.tgz",
@@ -4616,6 +8742,19 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
     "node_modules/ignore": {
       "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
@@ -4633,6 +8772,16 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/immer": {
+      "version": "11.1.8",
+      "resolved": "https://registry.npmjs.org/immer/-/immer-11.1.8.tgz",
+      "integrity": "sha512-/tbkHMW7y10Lx6i1crLjD4/OhNkRG+Fo7byZHtah0547nIeXYcpIXaUh0IAQY6gO5459qpGGYapcEOHtFXkIuA==",
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/immer"
+      }
+    },
     "node_modules/import-fresh": {
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz",
@@ -4650,6 +8799,21 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/import-in-the-middle": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/import-in-the-middle/-/import-in-the-middle-3.0.1.tgz",
+      "integrity": "sha512-pYkiyXVL2Mf3pozdlDGV6NAObxQx13Ae8knZk1UJRJ6uRW/ZRmTGHlQYtrsSl7ubuE5F8CD1z+s1n4RHNuTtuA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "acorn": "^8.15.0",
+        "acorn-import-attributes": "^1.9.5",
+        "cjs-module-lexer": "^2.2.0",
+        "module-details-from-path": "^1.0.4"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/imurmurhash": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
@@ -4660,6 +8824,16 @@
         "node": ">=0.8.19"
       }
     },
+    "node_modules/indent-string": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz",
+      "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/inherits": {
       "version": "2.0.4",
       "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
@@ -4672,6 +8846,30 @@
       "integrity": "sha512-Nb2ctOyNR8DqQoR0OwRG95uNWIC0C1lCgf5Naz5H6Ji72KZ8OcFZLz2P5sNgwlyoJ8Yif11oMuYs5pBQa86csA==",
       "license": "MIT"
     },
+    "node_modules/ioredis": {
+      "version": "5.10.1",
+      "resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.10.1.tgz",
+      "integrity": "sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==",
+      "license": "MIT",
+      "dependencies": {
+        "@ioredis/commands": "1.5.1",
+        "cluster-key-slot": "^1.1.0",
+        "debug": "^4.3.4",
+        "denque": "^2.1.0",
+        "lodash.defaults": "^4.2.0",
+        "lodash.isarguments": "^3.1.0",
+        "redis-errors": "^1.2.0",
+        "redis-parser": "^3.0.0",
+        "standard-as-callback": "^2.1.0"
+      },
+      "engines": {
+        "node": ">=12.22.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/ioredis"
+      }
+    },
     "node_modules/ipaddr.js": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.3.0.tgz",
@@ -4681,6 +8879,18 @@
         "node": ">= 10"
       }
     },
+    "node_modules/is-absolute-url": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-4.0.1.tgz",
+      "integrity": "sha512-/51/TKE88Lmm7Gc4/8btclNXWS+g50wXhYJq8HWIBAGUBnoAdRu1aXeh364t/O7wXDAcTJDP8PNuNKWUDWie+A==",
+      "license": "MIT",
+      "engines": {
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-alphabetical": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/is-alphabetical/-/is-alphabetical-2.0.1.tgz",
@@ -4742,76 +8952,427 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
       "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/is-glob": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
+      "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "is-extglob": "^2.1.1"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-hexadecimal": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-2.0.1.tgz",
+      "integrity": "sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/is-network-error": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/is-network-error/-/is-network-error-1.3.2.tgz",
+      "integrity": "sha512-PhBY86zaxNZUuWP6h13Vu5oFe0XY6/UlKzQnYFELzGVHygP3MxmvTfYSG7GN3aIab/iWudSMgjSnG9Dq+nHrgA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/is-number": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
+      "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.12.0"
+      }
+    },
+    "node_modules/is-plain-obj": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz",
+      "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/is-potential-custom-element-name": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz",
+      "integrity": "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/isexe": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
+      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
+      "license": "ISC"
+    },
+    "node_modules/istanbul-lib-coverage": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz",
+      "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/istanbul-lib-report": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz",
+      "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "istanbul-lib-coverage": "^3.0.0",
+        "make-dir": "^4.0.0",
+        "supports-color": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/istanbul-lib-report/node_modules/supports-color": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/istanbul-reports": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz",
+      "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "html-escaper": "^2.0.0",
+        "istanbul-lib-report": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/jackspeak": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-4.2.3.tgz",
+      "integrity": "sha512-ykkVRwrYvFm1nb2AJfKKYPr0emF6IiXDYUaFx4Zn9ZuIH7MrzEZ3sD5RlqGXNRpHtvUHJyOnCEFxOlNDtGo7wg==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "@isaacs/cliui": "^9.0.0"
+      },
+      "engines": {
+        "node": "20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/jest-axe": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/jest-axe/-/jest-axe-10.0.0.tgz",
+      "integrity": "sha512-9QR0M7//o5UVRnEUUm68IsGapHrcKGakYy9dKWWMX79LmeUKguDI6DREyljC5I13j78OUmtKLF5My6ccffLFBg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "axe-core": "4.10.2",
+        "chalk": "4.1.2",
+        "jest-matcher-utils": "29.2.2",
+        "lodash.merge": "4.6.2"
+      },
+      "engines": {
+        "node": ">= 16.0.0"
+      }
+    },
+    "node_modules/jest-axe/node_modules/@jest/schemas": {
+      "version": "29.6.3",
+      "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-29.6.3.tgz",
+      "integrity": "sha512-mo5j5X+jIZmJQveBKeS/clAueipV7KgiX1vMgCxam1RNYiqE1w62n0/tJJnHtjW8ZHcQco5gY85jA3mi0L+nSA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@sinclair/typebox": "^0.27.8"
+      },
+      "engines": {
+        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/jest-axe/node_modules/@sinclair/typebox": {
+      "version": "0.27.10",
+      "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.27.10.tgz",
+      "integrity": "sha512-MTBk/3jGLNB2tVxv6uLlFh1iu64iYOQ2PbdOSK3NW8JZsmlaOh2q6sdtKowBhfw8QFLmYNzTW4/oK4uATIi6ZA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/jest-axe/node_modules/axe-core": {
+      "version": "4.10.2",
+      "resolved": "https://registry.npmjs.org/axe-core/-/axe-core-4.10.2.tgz",
+      "integrity": "sha512-RE3mdQ7P3FRSe7eqCWoeQ/Z9QXrtniSjp1wUjt5nRC3WIpz5rSCve6o3fsZ2aCpJtrZjSZgjwXAoTO5k4tEI0w==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/jest-axe/node_modules/jest-diff": {
+      "version": "29.7.0",
+      "resolved": "https://registry.npmjs.org/jest-diff/-/jest-diff-29.7.0.tgz",
+      "integrity": "sha512-LMIgiIrhigmPrs03JHpxUh2yISK3vLFPkAodPeo0+BuF7wA2FoQbkEg1u8gBYBThncu7e1oEDUfIXVuTqLRUjw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "chalk": "^4.0.0",
+        "diff-sequences": "^29.6.3",
+        "jest-get-type": "^29.6.3",
+        "pretty-format": "^29.7.0"
+      },
+      "engines": {
+        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/jest-axe/node_modules/jest-matcher-utils": {
+      "version": "29.2.2",
+      "resolved": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-29.2.2.tgz",
+      "integrity": "sha512-4DkJ1sDPT+UX2MR7Y3od6KtvRi9Im1ZGLGgdLFLm4lPexbTaCgJW5NN3IOXlQHF7NSHY/VHhflQ+WoKtD/vyCw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "chalk": "^4.0.0",
+        "jest-diff": "^29.2.1",
+        "jest-get-type": "^29.2.0",
+        "pretty-format": "^29.2.1"
+      },
+      "engines": {
+        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/jest-axe/node_modules/pretty-format": {
+      "version": "29.7.0",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-29.7.0.tgz",
+      "integrity": "sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/schemas": "^29.6.3",
+        "ansi-styles": "^5.0.0",
+        "react-is": "^18.0.0"
+      },
+      "engines": {
+        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/jest-axe/node_modules/react-is": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz",
+      "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/jest-diff": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/jest-diff/-/jest-diff-30.4.1.tgz",
+      "integrity": "sha512-CRpFK0RtLriVDGcPPAnR6HMVI8bSR2jnUIgralhauzYQZIb4RH9AtEInTuQr65LmmGggGcRT6HIASxwqsVsmlA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/diff-sequences": "30.4.0",
+        "@jest/get-type": "30.1.0",
+        "chalk": "^4.1.2",
+        "pretty-format": "30.4.1"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/jest-diff/node_modules/pretty-format": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz",
+      "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/schemas": "30.4.1",
+        "ansi-styles": "^5.2.0",
+        "react-is-18": "npm:react-is@^18.3.1",
+        "react-is-19": "npm:react-is@^19.2.5"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/jest-get-type": {
+      "version": "29.6.3",
+      "resolved": "https://registry.npmjs.org/jest-get-type/-/jest-get-type-29.6.3.tgz",
+      "integrity": "sha512-zrteXnqYxfQh7l5FHyL38jL39di8H8rHoecLH3JNxH3BwOrBsNeabdap5e0I23lD4HHI8W5VFBZqG4Eaq5LNcw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+      }
+    },
+    "node_modules/jest-matcher-utils": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-30.4.1.tgz",
+      "integrity": "sha512-zvYfX5CaeEkFrrLS9suWe9rvJrm9J1Iv3ua8kIBv9GEPzcnsfBf0bob37la7s67fs0nlBC3EuvkOLnXQKxtx4A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/get-type": "30.1.0",
+        "chalk": "^4.1.2",
+        "jest-diff": "30.4.1",
+        "pretty-format": "30.4.1"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/jest-matcher-utils/node_modules/pretty-format": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz",
+      "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/schemas": "30.4.1",
+        "ansi-styles": "^5.2.0",
+        "react-is-18": "npm:react-is@^18.3.1",
+        "react-is-19": "npm:react-is@^19.2.5"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/jest-message-util": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-30.4.1.tgz",
+      "integrity": "sha512-kwCKIvq0MCW1HzLoGola9Te6JUdzgV0loyKJ3Qghrkz9i5/RRIHsL95BMQc2HBBhlBKC4j22K9p11TGHH8RBpQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.27.1",
+        "@jest/types": "30.4.1",
+        "@types/stack-utils": "^2.0.3",
+        "chalk": "^4.1.2",
+        "graceful-fs": "^4.2.11",
+        "jest-util": "30.4.1",
+        "picomatch": "^4.0.3",
+        "pretty-format": "30.4.1",
+        "slash": "^3.0.0",
+        "stack-utils": "^2.0.6"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/jest-message-util/node_modules/picomatch": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/jest-message-util/node_modules/pretty-format": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-30.4.1.tgz",
+      "integrity": "sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "@jest/schemas": "30.4.1",
+        "ansi-styles": "^5.2.0",
+        "react-is-18": "npm:react-is@^18.3.1",
+        "react-is-19": "npm:react-is@^19.2.5"
+      },
       "engines": {
-        "node": ">=8"
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/is-glob": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
-      "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==",
+    "node_modules/jest-mock": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/jest-mock/-/jest-mock-30.4.1.tgz",
+      "integrity": "sha512-/i8SVb8/NSB7RfNi8gfqu8gxLV23KaL5EpAttyb9iz8qWRIqXRLflycz/32wXsYkOnaUlx8NAKnJYtpsmXUmfw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "is-extglob": "^2.1.1"
+        "@jest/types": "30.4.1",
+        "@types/node": "*",
+        "jest-util": "30.4.1"
       },
       "engines": {
-        "node": ">=0.10.0"
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/is-hexadecimal": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-2.0.1.tgz",
-      "integrity": "sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==",
+    "node_modules/jest-regex-util": {
+      "version": "30.4.0",
+      "resolved": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-30.4.0.tgz",
+      "integrity": "sha512-mWlvLviKIgIQ8VCuM1xRdD0TWp3zlzionlmDBjuXVBs+VkmXq6FgW9T4Emr7oGz/Rk6feDCGyiugolcQEyp3mg==",
+      "dev": true,
       "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/is-number": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
-      "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==",
+    "node_modules/jest-util": {
+      "version": "30.4.1",
+      "resolved": "https://registry.npmjs.org/jest-util/-/jest-util-30.4.1.tgz",
+      "integrity": "sha512-vjQb1sACEiv13DKJMDToJpzVW0joCsIQrmbg0fi7CyOOt+g9jTuQl2A216pWRBYhOVt53XbL/2LbMKg1BECWOw==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "@jest/types": "30.4.1",
+        "@types/node": "*",
+        "chalk": "^4.1.2",
+        "ci-info": "^4.2.0",
+        "graceful-fs": "^4.2.11",
+        "picomatch": "^4.0.3"
+      },
       "engines": {
-        "node": ">=0.12.0"
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/is-plain-obj": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz",
-      "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==",
+    "node_modules/jest-util/node_modules/picomatch": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=12"
       },
       "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/isexe": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
-      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
-      "license": "ISC"
-    },
-    "node_modules/jackspeak": {
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-4.2.3.tgz",
-      "integrity": "sha512-ykkVRwrYvFm1nb2AJfKKYPr0emF6IiXDYUaFx4Zn9ZuIH7MrzEZ3sD5RlqGXNRpHtvUHJyOnCEFxOlNDtGo7wg==",
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "@isaacs/cliui": "^9.0.0"
-      },
-      "engines": {
-        "node": "20 || >=22"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
+        "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
     "node_modules/jiti": {
@@ -4852,6 +9413,15 @@
         "node": ">=10"
       }
     },
+    "node_modules/js-cookie": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.1.tgz",
+      "integrity": "sha512-+0rgsUXZu4ncpPxRL+lNEptWMOWl9etvPHc/koSRp6MPwpRYAhmk0dUG00J4bxVV3r9uUzfo24wW0knS07SKSw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/js-tiktoken": {
       "version": "1.0.21",
       "resolved": "https://registry.npmjs.org/js-tiktoken/-/js-tiktoken-1.0.21.tgz",
@@ -4861,11 +9431,16 @@
         "base64-js": "^1.5.1"
       }
     },
+    "node_modules/js-tokens": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
+      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "license": "MIT"
+    },
     "node_modules/js-yaml": {
       "version": "4.1.1",
       "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
       "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
@@ -4874,6 +9449,56 @@
         "js-yaml": "bin/js-yaml.js"
       }
     },
+    "node_modules/jsdom": {
+      "version": "29.1.1",
+      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-29.1.1.tgz",
+      "integrity": "sha512-ECi4Fi2f7BdJtUKTflYRTiaMxIB0O6zfR1fX0GXpUrf6flp8QIYn1UT20YQqdSOfk2dfkCwS8LAFoJDEppNK5Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/css-color": "^5.1.11",
+        "@asamuzakjp/dom-selector": "^7.1.1",
+        "@bramus/specificity": "^2.4.2",
+        "@csstools/css-syntax-patches-for-csstree": "^1.1.3",
+        "@exodus/bytes": "^1.15.0",
+        "css-tree": "^3.2.1",
+        "data-urls": "^7.0.0",
+        "decimal.js": "^10.6.0",
+        "html-encoding-sniffer": "^6.0.0",
+        "is-potential-custom-element-name": "^1.0.1",
+        "lru-cache": "^11.3.5",
+        "parse5": "^8.0.1",
+        "saxes": "^6.0.0",
+        "symbol-tree": "^3.2.4",
+        "tough-cookie": "^6.0.1",
+        "undici": "^7.25.0",
+        "w3c-xmlserializer": "^5.0.0",
+        "webidl-conversions": "^8.0.1",
+        "whatwg-mimetype": "^5.0.0",
+        "whatwg-url": "^16.0.1",
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.13.0 || >=24.0.0"
+      },
+      "peerDependencies": {
+        "canvas": "^3.0.0"
+      },
+      "peerDependenciesMeta": {
+        "canvas": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/json-bigint": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-bigint/-/json-bigint-1.0.0.tgz",
+      "integrity": "sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "bignumber.js": "^9.0.0"
+      }
+    },
     "node_modules/json-buffer": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz",
@@ -5287,6 +9912,30 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/lodash": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.camelcase": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.defaults": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz",
+      "integrity": "sha512-qjxPLHd3r5DnsdGacqOMU6pb/avJzdh9tFX2ymgoZE27BmjXrNy/y4LoaiTeAb+O3gL8AfpJGtqfX/ae2leYYQ==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isarguments": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz",
+      "integrity": "sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg==",
+      "license": "MIT"
+    },
     "node_modules/lodash.merge": {
       "version": "4.6.2",
       "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz",
@@ -5294,6 +9943,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/long": {
+      "version": "5.3.2",
+      "resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz",
+      "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==",
+      "license": "Apache-2.0"
+    },
     "node_modules/longest-streak": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz",
@@ -5304,10 +9959,37 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/loose-envify": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
+      "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",
+      "license": "MIT",
+      "dependencies": {
+        "js-tokens": "^3.0.0 || ^4.0.0"
+      },
+      "bin": {
+        "loose-envify": "cli.js"
+      }
+    },
+    "node_modules/lowlight": {
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/lowlight/-/lowlight-3.3.0.tgz",
+      "integrity": "sha512-0JNhgFoPvP6U6lE/UdVsSq99tn6DhjjpAj5MxG49ewd2mOBVtwWYIT8ClyABhq198aXXODMU6Ox8DrGy/CpTZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "devlop": "^1.0.0",
+        "highlight.js": "~11.11.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/lru-cache": {
-      "version": "11.2.7",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.2.7.tgz",
-      "integrity": "sha512-aY/R+aEsRelme17KGQa/1ZSIpLpNYYrhcrepKTZgE+W3WM16YMCaPwOHLHsmopZHELU0Ojin1lPVxKR0MihncA==",
+      "version": "11.3.6",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.3.6.tgz",
+      "integrity": "sha512-Gf/KoL3C/MlI7Bt0PGI9I+TeTC/I6r/csU58N4BSNc4lppLBeKsOdFYkK+dX0ABDUMJNfCHTyPpzwwO21Awd3A==",
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": "20 || >=22"
@@ -5322,6 +10004,17 @@
         "react": "^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0"
       }
     },
+    "node_modules/lz-string": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz",
+      "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "bin": {
+        "lz-string": "bin/bin.js"
+      }
+    },
     "node_modules/magic-string": {
       "version": "0.30.21",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
@@ -5331,24 +10024,204 @@
         "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
-    "node_modules/mdast-util-from-markdown": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/mdast-util-from-markdown/-/mdast-util-from-markdown-2.0.3.tgz",
-      "integrity": "sha512-W4mAWTvSlKvf8L6J+VN9yLSqQ9AOAAvHuoDAmPkz4dHf553m5gVj2ejadHJhoJmcmxEnOv6Pa8XJhpxE93kb8Q==",
+    "node_modules/magicast": {
+      "version": "0.5.3",
+      "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.3.tgz",
+      "integrity": "sha512-pVKE4UdSQ7DvHzivsCIFx2BJn1mHG6KsyrFcaxFx6tONdneEuThrDx0Cj3AMg58KyN4pzYT+LHOotxDQDjNvkw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.29.3",
+        "@babel/types": "^7.29.0",
+        "source-map-js": "^1.2.1"
+      }
+    },
+    "node_modules/make-dir": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz",
+      "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^7.5.3"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/markdown-table": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/markdown-table/-/markdown-table-3.0.4.tgz",
+      "integrity": "sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/marked": {
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/marked/-/marked-14.0.0.tgz",
+      "integrity": "sha512-uIj4+faQ+MgHgwUW1l2PsPglZLOLOT1uErt06dAPtx2kjteLAkbsd/0FiYg/MGS+i7ZKLb7w2WClxHkzOOuryQ==",
+      "license": "MIT",
+      "peer": true,
+      "bin": {
+        "marked": "bin/marked.js"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/mdast-util-find-and-replace": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/mdast-util-find-and-replace/-/mdast-util-find-and-replace-3.0.2.tgz",
+      "integrity": "sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "escape-string-regexp": "^5.0.0",
+        "unist-util-is": "^6.0.0",
+        "unist-util-visit-parents": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-find-and-replace/node_modules/escape-string-regexp": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz",
+      "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/mdast-util-from-markdown": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/mdast-util-from-markdown/-/mdast-util-from-markdown-2.0.3.tgz",
+      "integrity": "sha512-W4mAWTvSlKvf8L6J+VN9yLSqQ9AOAAvHuoDAmPkz4dHf553m5gVj2ejadHJhoJmcmxEnOv6Pa8XJhpxE93kb8Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "@types/unist": "^3.0.0",
+        "decode-named-character-reference": "^1.0.0",
+        "devlop": "^1.0.0",
+        "mdast-util-to-string": "^4.0.0",
+        "micromark": "^4.0.0",
+        "micromark-util-decode-numeric-character-reference": "^2.0.0",
+        "micromark-util-decode-string": "^2.0.0",
+        "micromark-util-normalize-identifier": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0",
+        "unist-util-stringify-position": "^4.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-gfm": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/mdast-util-gfm/-/mdast-util-gfm-3.1.0.tgz",
+      "integrity": "sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ==",
+      "license": "MIT",
+      "dependencies": {
+        "mdast-util-from-markdown": "^2.0.0",
+        "mdast-util-gfm-autolink-literal": "^2.0.0",
+        "mdast-util-gfm-footnote": "^2.0.0",
+        "mdast-util-gfm-strikethrough": "^2.0.0",
+        "mdast-util-gfm-table": "^2.0.0",
+        "mdast-util-gfm-task-list-item": "^2.0.0",
+        "mdast-util-to-markdown": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-gfm-autolink-literal": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
+      "integrity": "sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "ccount": "^2.0.0",
+        "devlop": "^1.0.0",
+        "mdast-util-find-and-replace": "^3.0.0",
+        "micromark-util-character": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-gfm-footnote": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/mdast-util-gfm-footnote/-/mdast-util-gfm-footnote-2.1.0.tgz",
+      "integrity": "sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "devlop": "^1.1.0",
+        "mdast-util-from-markdown": "^2.0.0",
+        "mdast-util-to-markdown": "^2.0.0",
+        "micromark-util-normalize-identifier": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-gfm-strikethrough": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/mdast-util-gfm-strikethrough/-/mdast-util-gfm-strikethrough-2.0.0.tgz",
+      "integrity": "sha512-mKKb915TF+OC5ptj5bJ7WFRPdYtuHv0yTRxK2tJvi+BDqbkiG7h7u/9SI89nRAYcmap2xHQL9D+QG/6wSrTtXg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "mdast-util-from-markdown": "^2.0.0",
+        "mdast-util-to-markdown": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-gfm-table": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/mdast-util-gfm-table/-/mdast-util-gfm-table-2.0.0.tgz",
+      "integrity": "sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "devlop": "^1.0.0",
+        "markdown-table": "^3.0.0",
+        "mdast-util-from-markdown": "^2.0.0",
+        "mdast-util-to-markdown": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/mdast-util-gfm-task-list-item": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/mdast-util-gfm-task-list-item/-/mdast-util-gfm-task-list-item-2.0.0.tgz",
+      "integrity": "sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ==",
       "license": "MIT",
       "dependencies": {
         "@types/mdast": "^4.0.0",
-        "@types/unist": "^3.0.0",
-        "decode-named-character-reference": "^1.0.0",
         "devlop": "^1.0.0",
-        "mdast-util-to-string": "^4.0.0",
-        "micromark": "^4.0.0",
-        "micromark-util-decode-numeric-character-reference": "^2.0.0",
-        "micromark-util-decode-string": "^2.0.0",
-        "micromark-util-normalize-identifier": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0",
-        "unist-util-stringify-position": "^4.0.0"
+        "mdast-util-from-markdown": "^2.0.0",
+        "mdast-util-to-markdown": "^2.0.0"
       },
       "funding": {
         "type": "opencollective",
@@ -5484,6 +10357,13 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/mdn-data": {
+      "version": "2.27.1",
+      "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
+      "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
+      "dev": true,
+      "license": "CC0-1.0"
+    },
     "node_modules/micromark": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/micromark/-/micromark-4.0.2.tgz",
@@ -5553,6 +10433,127 @@
         "micromark-util-types": "^2.0.0"
       }
     },
+    "node_modules/micromark-extension-gfm": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm/-/micromark-extension-gfm-3.0.0.tgz",
+      "integrity": "sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==",
+      "license": "MIT",
+      "dependencies": {
+        "micromark-extension-gfm-autolink-literal": "^2.0.0",
+        "micromark-extension-gfm-footnote": "^2.0.0",
+        "micromark-extension-gfm-strikethrough": "^2.0.0",
+        "micromark-extension-gfm-table": "^2.0.0",
+        "micromark-extension-gfm-tagfilter": "^2.0.0",
+        "micromark-extension-gfm-task-list-item": "^2.0.0",
+        "micromark-util-combine-extensions": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-extension-gfm-autolink-literal": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-autolink-literal/-/micromark-extension-gfm-autolink-literal-2.1.0.tgz",
+      "integrity": "sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw==",
+      "license": "MIT",
+      "dependencies": {
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-sanitize-uri": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-extension-gfm-footnote": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-footnote/-/micromark-extension-gfm-footnote-2.1.0.tgz",
+      "integrity": "sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw==",
+      "license": "MIT",
+      "dependencies": {
+        "devlop": "^1.0.0",
+        "micromark-core-commonmark": "^2.0.0",
+        "micromark-factory-space": "^2.0.0",
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-normalize-identifier": "^2.0.0",
+        "micromark-util-sanitize-uri": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-extension-gfm-strikethrough": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-strikethrough/-/micromark-extension-gfm-strikethrough-2.1.0.tgz",
+      "integrity": "sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw==",
+      "license": "MIT",
+      "dependencies": {
+        "devlop": "^1.0.0",
+        "micromark-util-chunked": "^2.0.0",
+        "micromark-util-classify-character": "^2.0.0",
+        "micromark-util-resolve-all": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-extension-gfm-table": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-table/-/micromark-extension-gfm-table-2.1.1.tgz",
+      "integrity": "sha512-t2OU/dXXioARrC6yWfJ4hqB7rct14e8f7m0cbI5hUmDyyIlwv5vEtooptH8INkbLzOatzKuVbQmAYcbWoyz6Dg==",
+      "license": "MIT",
+      "dependencies": {
+        "devlop": "^1.0.0",
+        "micromark-factory-space": "^2.0.0",
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-extension-gfm-tagfilter": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-tagfilter/-/micromark-extension-gfm-tagfilter-2.0.0.tgz",
+      "integrity": "sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg==",
+      "license": "MIT",
+      "dependencies": {
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-extension-gfm-task-list-item": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-task-list-item/-/micromark-extension-gfm-task-list-item-2.1.0.tgz",
+      "integrity": "sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw==",
+      "license": "MIT",
+      "dependencies": {
+        "devlop": "^1.0.0",
+        "micromark-factory-space": "^2.0.0",
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/micromark-factory-destination": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/micromark-factory-destination/-/micromark-factory-destination-2.0.1.tgz",
@@ -5938,6 +10939,16 @@
         "node": ">=10.0.0"
       }
     },
+    "node_modules/min-indent": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz",
+      "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/minimatch": {
       "version": "3.1.5",
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
@@ -5970,6 +10981,23 @@
         "node": ">=16 || 14 >=14.17"
       }
     },
+    "node_modules/module-details-from-path": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/module-details-from-path/-/module-details-from-path-1.0.4.tgz",
+      "integrity": "sha512-EGWKgxALGMgzvxYF1UyGTy0HXX/2vHLkw6+NvDKW2jypWbHpjQuj4UMcqQWXHERJhVGKikolT06G3bcKe4fi7w==",
+      "license": "MIT"
+    },
+    "node_modules/monaco-editor": {
+      "version": "0.54.0",
+      "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.54.0.tgz",
+      "integrity": "sha512-hx45SEUoLatgWxHKCmlLJH81xBo0uXP4sRkESUpmDQevfi+e7K1VuiSprK6UpQ8u4zOcKNiH0pMvHvlMWA/4cw==",
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "dompurify": "3.1.7",
+        "marked": "14.0.0"
+      }
+    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -6010,6 +11038,77 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/new-date": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/new-date/-/new-date-1.0.3.tgz",
+      "integrity": "sha512-0fsVvQPbo2I18DT2zVHpezmeeNYV2JaJSrseiHLc17GNOxJzUdx5mvSigPu8LtIfZSij5i1wXnXFspEs2CD6hA==",
+      "license": "SEE LICENSE IN LICENSE",
+      "dependencies": {
+        "@segment/isodate": "1.0.3"
+      }
+    },
+    "node_modules/node-domexception": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/node-domexception/-/node-domexception-1.0.0.tgz",
+      "integrity": "sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==",
+      "deprecated": "Use your platform's native DOMException instead",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/jimmywarting"
+        },
+        {
+          "type": "github",
+          "url": "https://paypal.me/jimmywarting"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.5.0"
+      }
+    },
+    "node_modules/node-fetch": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
+      "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==",
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-url": "^5.0.0"
+      },
+      "engines": {
+        "node": "4.x || >=6.0.0"
+      },
+      "peerDependencies": {
+        "encoding": "^0.1.0"
+      },
+      "peerDependenciesMeta": {
+        "encoding": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/node-fetch/node_modules/tr46": {
+      "version": "0.0.3",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
+      "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==",
+      "license": "MIT"
+    },
+    "node_modules/node-fetch/node_modules/webidl-conversions": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
+      "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==",
+      "license": "BSD-2-Clause"
+    },
+    "node_modules/node-fetch/node_modules/whatwg-url": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
+      "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==",
+      "license": "MIT",
+      "dependencies": {
+        "tr46": "~0.0.3",
+        "webidl-conversions": "^3.0.0"
+      }
+    },
     "node_modules/nodemon": {
       "version": "3.1.14",
       "resolved": "https://registry.npmjs.org/nodemon/-/nodemon-3.1.14.tgz",
@@ -6111,6 +11210,32 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/obj-case": {
+      "version": "0.2.1",
+      "resolved": "https://registry.npmjs.org/obj-case/-/obj-case-0.2.1.tgz",
+      "integrity": "sha512-PquYBBTy+Y6Ob/O2574XHhDtHJlV1cJHMCgW+rDRc9J5hhmRelJB3k5dTK/3cVmFVtzvAKuENeuLpoyTzMzkOg==",
+      "license": "MIT"
+    },
+    "node_modules/object-assign": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/obug": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
+      "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==",
+      "dev": true,
+      "funding": [
+        "https://github.com/sponsors/sxzz",
+        "https://opencollective.com/debug"
+      ],
+      "license": "MIT"
+    },
     "node_modules/on-exit-leak-free": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/on-exit-leak-free/-/on-exit-leak-free-2.1.2.tgz",
@@ -6274,6 +11399,25 @@
       "integrity": "sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==",
       "license": "MIT"
     },
+    "node_modules/parse5": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
+      "integrity": "sha512-z1e/HMG90obSGeidlli3hj7cbocou0/wa5HacvI3ASx34PecNjNQeaHNo5WIZpWofN9kgkqV1q5YvXe3F0FoPw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^8.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/path-browserify": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz",
+      "integrity": "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==",
+      "license": "MIT"
+    },
     "node_modules/path-exists": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
@@ -6309,6 +11453,44 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/pg-int8": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/pg-int8/-/pg-int8-1.0.1.tgz",
+      "integrity": "sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw==",
+      "license": "ISC",
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
+    "node_modules/pg-protocol": {
+      "version": "1.13.0",
+      "resolved": "https://registry.npmjs.org/pg-protocol/-/pg-protocol-1.13.0.tgz",
+      "integrity": "sha512-zzdvXfS6v89r6v7OcFCHfHlyG/wvry1ALxZo4LqgUoy7W9xhBDMaqOuMiF3qEV45VqsN6rdlcehHrfDtlCPc8w==",
+      "license": "MIT"
+    },
+    "node_modules/pg-types": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/pg-types/-/pg-types-2.2.0.tgz",
+      "integrity": "sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==",
+      "license": "MIT",
+      "dependencies": {
+        "pg-int8": "1.0.1",
+        "postgres-array": "~2.0.0",
+        "postgres-bytea": "~1.0.0",
+        "postgres-date": "~1.0.4",
+        "postgres-interval": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -6403,6 +11585,53 @@
       "integrity": "sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==",
       "license": "MIT"
     },
+    "node_modules/playwright": {
+      "version": "1.61.1",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.61.1.tgz",
+      "integrity": "sha512-DWnY5o3YbLWK4GovuAVwpqL+1VwGNdUGrRr++8j8PtQQzvAVZUIMjKQ90fY689sEJZJBbZVw1rXaOKSTitkzPQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.61.1"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "fsevents": "2.3.2"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.61.1",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.61.1.tgz",
+      "integrity": "sha512-h7Qlt6m4REp25qvIdvbDtVmD4LqVXfpRxhORv9L0jzETM05p4fuPJ3dKyuSXQxDSbXnmS79HAgi9589lGSpLkg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/playwright/node_modules/fsevents": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+      "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
     "node_modules/postcss": {
       "version": "8.5.8",
       "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.8.tgz",
@@ -6423,12 +11652,91 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.11",
-        "picocolors": "^1.1.1",
-        "source-map-js": "^1.2.1"
+        "nanoid": "^3.3.11",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/postgres-array": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/postgres-array/-/postgres-array-2.0.0.tgz",
+      "integrity": "sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/postgres-bytea": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/postgres-bytea/-/postgres-bytea-1.0.1.tgz",
+      "integrity": "sha512-5+5HqXnsZPE65IJZSMkZtURARZelel2oXUEO8rH83VS/hxH5vv1uHquPg5wZs8yMAfdv971IU+kcPUczi7NVBQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/postgres-date": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/postgres-date/-/postgres-date-1.0.7.tgz",
+      "integrity": "sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/postgres-interval": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/postgres-interval/-/postgres-interval-1.2.0.tgz",
+      "integrity": "sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "xtend": "^4.0.0"
       },
       "engines": {
-        "node": "^10 || ^12 || >=14"
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/posthog-js": {
+      "version": "1.373.4",
+      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.373.4.tgz",
+      "integrity": "sha512-6DueUS5KOGZlKsQlelLURmtp9PA52rdCxt/IvuoYKAErlkh2LczogMopUIpeqbwfOnGDQEf8gmDh4z/IFeU4CQ==",
+      "license": "SEE LICENSE IN LICENSE",
+      "dependencies": {
+        "@opentelemetry/api": "^1.9.0",
+        "@opentelemetry/api-logs": "^0.208.0",
+        "@opentelemetry/exporter-logs-otlp-http": "^0.208.0",
+        "@opentelemetry/resources": "^2.2.0",
+        "@opentelemetry/sdk-logs": "^0.208.0",
+        "@posthog/core": "1.29.1",
+        "@posthog/types": "1.373.4",
+        "core-js": "^3.38.1",
+        "dompurify": "^3.3.2",
+        "fflate": "^0.4.8",
+        "preact": "^10.28.2",
+        "query-selector-shadow-dom": "^1.0.1",
+        "web-vitals": "^5.1.0"
+      }
+    },
+    "node_modules/posthog-js/node_modules/dompurify": {
+      "version": "3.4.2",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.2.tgz",
+      "integrity": "sha512-lHeS9SA/IKeIFFyYciHBr2n0v1VMPlSj843HdLOwjb2OxNwdq9Xykxqhk+FE42MzAdHvInbAolSE4mhahPpjXA==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
+    },
+    "node_modules/preact": {
+      "version": "10.29.1",
+      "resolved": "https://registry.npmjs.org/preact/-/preact-10.29.1.tgz",
+      "integrity": "sha512-gQCLc/vWroE8lIpleXtdJhTFDogTdZG9AjMUpVkDf2iTCNwYNWA+u16dL41TqUDJO4gm2IgrcMv3uTpjd4Pwmg==",
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/preact"
       }
     },
     "node_modules/prelude-ls": {
@@ -6441,6 +11749,30 @@
         "node": ">= 0.8.0"
       }
     },
+    "node_modules/pretty-format": {
+      "version": "27.5.1",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-27.5.1.tgz",
+      "integrity": "sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "ansi-regex": "^5.0.1",
+        "ansi-styles": "^5.0.0",
+        "react-is": "^17.0.1"
+      },
+      "engines": {
+        "node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0"
+      }
+    },
+    "node_modules/pretty-format/node_modules/react-is": {
+      "version": "17.0.2",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
+      "integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true
+    },
     "node_modules/process-warning": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/process-warning/-/process-warning-5.0.0.tgz",
@@ -6457,6 +11789,17 @@
       ],
       "license": "MIT"
     },
+    "node_modules/prop-types": {
+      "version": "15.8.1",
+      "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz",
+      "integrity": "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.4.0",
+        "object-assign": "^4.1.1",
+        "react-is": "^16.13.1"
+      }
+    },
     "node_modules/property-information": {
       "version": "7.1.0",
       "resolved": "https://registry.npmjs.org/property-information/-/property-information-7.1.0.tgz",
@@ -6467,6 +11810,30 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/protobufjs": {
+      "version": "7.5.8",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.5.8.tgz",
+      "integrity": "sha512-dvpCIeLPbXZS/Ete7yLaO7RenOdken2NHKykBXbsaGxZT0UTltcarBciw+A78SRQs9iMAAVpsYA+l8b1hTePIA==",
+      "hasInstallScript": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.2",
+        "@protobufjs/base64": "^1.1.2",
+        "@protobufjs/codegen": "^2.0.5",
+        "@protobufjs/eventemitter": "^1.1.0",
+        "@protobufjs/fetch": "^1.1.0",
+        "@protobufjs/float": "^1.0.2",
+        "@protobufjs/inquire": "^1.1.1",
+        "@protobufjs/path": "^1.1.2",
+        "@protobufjs/pool": "^1.1.0",
+        "@protobufjs/utf8": "^1.1.1",
+        "@types/node": ">=13.7.0",
+        "long": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/pstree.remy": {
       "version": "1.1.8",
       "resolved": "https://registry.npmjs.org/pstree.remy/-/pstree.remy-1.1.8.tgz",
@@ -6495,6 +11862,12 @@
         "node": ">=6"
       }
     },
+    "node_modules/query-selector-shadow-dom": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/query-selector-shadow-dom/-/query-selector-shadow-dom-1.0.1.tgz",
+      "integrity": "sha512-lT5yCqEBgfoMYpf3F2xQRK7zEr1rhIIZuceDK6+xRkJQ4NMbHTwXqk4NkwDwQMNqXgG9r9fyHnzwNVs6zV5KRw==",
+      "license": "MIT"
+    },
     "node_modules/quick-format-unescaped": {
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/quick-format-unescaped/-/quick-format-unescaped-4.0.4.tgz",
@@ -6522,6 +11895,45 @@
         "react": "^19.2.4"
       }
     },
+    "node_modules/react-dropzone": {
+      "version": "14.4.1",
+      "resolved": "https://registry.npmjs.org/react-dropzone/-/react-dropzone-14.4.1.tgz",
+      "integrity": "sha512-QDuV76v3uKbHiH34SpwifZ+gOLi1+RdsCO1kl5vxMT4wW8R82+sthjvBw4th3NHF/XX6FBsqDYZVNN+pnhaw0g==",
+      "license": "MIT",
+      "dependencies": {
+        "attr-accept": "^2.2.4",
+        "file-selector": "^2.1.0",
+        "prop-types": "^15.8.1"
+      },
+      "engines": {
+        "node": ">= 10.13"
+      },
+      "peerDependencies": {
+        "react": ">= 16.8 || 18.0.0"
+      }
+    },
+    "node_modules/react-is": {
+      "version": "16.13.1",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz",
+      "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==",
+      "license": "MIT"
+    },
+    "node_modules/react-is-18": {
+      "name": "react-is",
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz",
+      "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/react-is-19": {
+      "name": "react-is",
+      "version": "19.2.7",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-19.2.7.tgz",
+      "integrity": "sha512-kZFnouyVv7eP/Phmrlo9FK+zcAdriZJvzxXHF1Sl1P377WSGe2G/JxVolhTrB/jeV47lKImhNUsijjHAAbcl/A==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/react-markdown": {
       "version": "9.1.0",
       "resolved": "https://registry.npmjs.org/react-markdown/-/react-markdown-9.1.0.tgz",
@@ -6549,49 +11961,25 @@
         "react": ">=18"
       }
     },
-    "node_modules/react-remove-scroll": {
-      "version": "2.7.2",
-      "resolved": "https://registry.npmjs.org/react-remove-scroll/-/react-remove-scroll-2.7.2.tgz",
-      "integrity": "sha512-Iqb9NjCCTt6Hf+vOdNIZGdTiH1QSqr27H/Ek9sv/a97gfueI/5h1s3yRi1nngzMUaOOToin5dI1dXKdXiF+u0Q==",
+    "node_modules/react-redux": {
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/react-redux/-/react-redux-9.2.0.tgz",
+      "integrity": "sha512-ROY9fvHhwOD9ySfrF0wmvu//bKCQ6AeZZq1nJNtbDC+kk5DuSuNX/n6YWYF/SYy7bSba4D4FSz8DJeKY/S/r+g==",
       "license": "MIT",
       "dependencies": {
-        "react-remove-scroll-bar": "^2.3.7",
-        "react-style-singleton": "^2.2.3",
-        "tslib": "^2.1.0",
-        "use-callback-ref": "^1.3.3",
-        "use-sidecar": "^1.1.3"
-      },
-      "engines": {
-        "node": ">=10"
+        "@types/use-sync-external-store": "^0.0.6",
+        "use-sync-external-store": "^1.4.0"
       },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc"
+        "@types/react": "^18.2.25 || ^19",
+        "react": "^18.0 || ^19",
+        "redux": "^5.0.0"
       },
       "peerDependenciesMeta": {
         "@types/react": {
           "optional": true
-        }
-      }
-    },
-    "node_modules/react-remove-scroll-bar": {
-      "version": "2.3.8",
-      "resolved": "https://registry.npmjs.org/react-remove-scroll-bar/-/react-remove-scroll-bar-2.3.8.tgz",
-      "integrity": "sha512-9r+yi9+mgU33AKcj6IbT9oRCO78WriSj6t/cF8DWBZJ9aOGPOTEDvdUDz1FwKim7QXWwmHqtdHnRJfhAxEG46Q==",
-      "license": "MIT",
-      "dependencies": {
-        "react-style-singleton": "^2.2.2",
-        "tslib": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
+        },
+        "redux": {
           "optional": true
         }
       }
@@ -6634,28 +12022,6 @@
         "react-dom": ">=18"
       }
     },
-    "node_modules/react-style-singleton": {
-      "version": "2.2.3",
-      "resolved": "https://registry.npmjs.org/react-style-singleton/-/react-style-singleton-2.2.3.tgz",
-      "integrity": "sha512-b6jSvxvVnyptAiLjbkWLE/lOnR4lfTtDAl+eUC7RZy+QQWc6wRzIV2CE6xBuMmDxc2qIihtDCZD5NPOFl7fRBQ==",
-      "license": "MIT",
-      "dependencies": {
-        "get-nonce": "^1.0.0",
-        "tslib": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/readdirp": {
       "version": "3.6.0",
       "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
@@ -6678,6 +12044,139 @@
         "node": ">= 12.13.0"
       }
     },
+    "node_modules/redent": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz",
+      "integrity": "sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "indent-string": "^4.0.0",
+        "strip-indent": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/redis-errors": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/redis-errors/-/redis-errors-1.2.0.tgz",
+      "integrity": "sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/redis-parser": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/redis-parser/-/redis-parser-3.0.0.tgz",
+      "integrity": "sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A==",
+      "license": "MIT",
+      "dependencies": {
+        "redis-errors": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/redux": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/redux/-/redux-5.0.1.tgz",
+      "integrity": "sha512-M9/ELqF6fy8FwmkpnF0S3YKOqMyoWJ4+CS5Efg2ct3oY9daQvd/Pc71FpGZsVsbl3Cpb+IIcjBDUnnyBdQbq4w==",
+      "license": "MIT"
+    },
+    "node_modules/redux-thunk": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/redux-thunk/-/redux-thunk-3.1.0.tgz",
+      "integrity": "sha512-NW2r5T6ksUKXCabzhL9z+h206HQw/NJkcLm1GPImRQ8IzfXwRGqjVhKJGauHirT0DAuyy6hjdnMZaRoAcy0Klw==",
+      "license": "MIT",
+      "peerDependencies": {
+        "redux": "^5.0.0"
+      }
+    },
+    "node_modules/rehype-external-links": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/rehype-external-links/-/rehype-external-links-3.0.0.tgz",
+      "integrity": "sha512-yp+e5N9V3C6bwBeAC4n796kc86M4gJCdlVhiMTxIrJG5UHDMh+PJANf9heqORJbt1nrCbDwIlAZKjANIaVBbvw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@ungap/structured-clone": "^1.0.0",
+        "hast-util-is-element": "^3.0.0",
+        "is-absolute-url": "^4.0.0",
+        "space-separated-tokens": "^2.0.0",
+        "unist-util-visit": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/rehype-highlight": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/rehype-highlight/-/rehype-highlight-7.0.2.tgz",
+      "integrity": "sha512-k158pK7wdC2qL3M5NcZROZ2tR/l7zOzjxXd5VGdcfIyoijjQqpHd3JKtYSBDpDZ38UI2WJWuFAtkMDxmx5kstA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hast-util-to-text": "^4.0.0",
+        "lowlight": "^3.0.0",
+        "unist-util-visit": "^5.0.0",
+        "vfile": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/rehype-sanitize": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/rehype-sanitize/-/rehype-sanitize-6.0.0.tgz",
+      "integrity": "sha512-CsnhKNsyI8Tub6L4sm5ZFsme4puGfc6pYylvXo1AeqaGbjOYyzNv3qZPwvs0oMJ39eryyeOdmxwUIo94IpEhqg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hast-util-sanitize": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/rehype-unwrap-images": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/rehype-unwrap-images/-/rehype-unwrap-images-1.0.0.tgz",
+      "integrity": "sha512-wzW5Mk9IlVF2UwXC5NtIZsx1aHYbV8+bLWjJnlZaaamz5QU52RppWtq1uEZJqGo8d9Y4RuDqidB6r9RFpKugIg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hast-util-interactive": "^3.0.0",
+        "hast-util-whitespace": "^3.0.0",
+        "unist-util-visit": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/remark-gfm": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/remark-gfm/-/remark-gfm-4.0.1.tgz",
+      "integrity": "sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "mdast-util-gfm": "^3.0.0",
+        "micromark-extension-gfm": "^3.0.0",
+        "remark-parse": "^11.0.0",
+        "remark-stringify": "^11.0.0",
+        "unified": "^11.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/remark-parse": {
       "version": "11.0.0",
       "resolved": "https://registry.npmjs.org/remark-parse/-/remark-parse-11.0.0.tgz",
@@ -6711,11 +12210,25 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/remark-stringify": {
+      "version": "11.0.0",
+      "resolved": "https://registry.npmjs.org/remark-stringify/-/remark-stringify-11.0.0.tgz",
+      "integrity": "sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "mdast-util-to-markdown": "^2.0.0",
+        "unified": "^11.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/require-directory": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
       "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
@@ -6730,6 +12243,25 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/require-in-the-middle": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/require-in-the-middle/-/require-in-the-middle-8.0.1.tgz",
+      "integrity": "sha512-QT7FVMXfWOYFbeRBF6nu+I6tr2Tf3u0q8RIEjNob/heKY/nh7drD/k7eeMFmSQgnTtCzLDcCu/XEnpW2wk4xCQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.3.5",
+        "module-details-from-path": "^1.0.3"
+      },
+      "engines": {
+        "node": ">=9.3.0 || >=8.10.0 <9.0.0"
+      }
+    },
+    "node_modules/reselect": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/reselect/-/reselect-5.1.1.tgz",
+      "integrity": "sha512-K/BG6eIky/SBpzfHZv/dd+9JBFiS4SWV7FIujVyJRux6e45+73RaUHXLmIR1f7WOMaQ0U1km6qwklRQxpJJY0w==",
+      "license": "MIT"
+    },
     "node_modules/resolve-from": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz",
@@ -6889,6 +12421,19 @@
         "node": ">=10"
       }
     },
+    "node_modules/saxes": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
+      "integrity": "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "xmlchars": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=v12.22.7"
+      }
+    },
     "node_modules/scheduler": {
       "version": "0.27.0",
       "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.27.0.tgz",
@@ -6957,9 +12502,9 @@
       }
     },
     "node_modules/shell-quote": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.3.tgz",
-      "integrity": "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==",
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz",
+      "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -6969,6 +12514,13 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/siginfo": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
+      "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/signal-exit": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
@@ -7012,6 +12564,16 @@
       "integrity": "sha512-j7piyCjAeTDSjzTSQ7DokZtMNwNlEAyxqSZeCS+CXH7fJ4jx3FuJ/mTW3mE+6JLs4VJBbcll0Kjn+KXI5t21Iw==",
       "license": "MIT"
     },
+    "node_modules/slash": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz",
+      "integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/sonic-boom": {
       "version": "4.2.1",
       "resolved": "https://registry.npmjs.org/sonic-boom/-/sonic-boom-4.2.1.tgz",
@@ -7046,9 +12608,57 @@
       "integrity": "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==",
       "license": "ISC",
       "engines": {
-        "node": ">= 10.x"
+        "node": ">= 10.x"
+      }
+    },
+    "node_modules/sprintf-js": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.1.3.tgz",
+      "integrity": "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/stack-utils": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/stack-utils/-/stack-utils-2.0.6.tgz",
+      "integrity": "sha512-XlkWvfIm6RmsWtNJx+uqtKLS8eqFbxUg0ZzLXqY0caEy9l7hruX8IpiDnjsLavoBgqCCR71TqWO8MaXYheJ3RQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "escape-string-regexp": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/stack-utils/node_modules/escape-string-regexp": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz",
+      "integrity": "sha512-UpzcLCXolUWcNu5HtVMHYdXJjArjsF9C0aNnquZYY4uW/Vu0miy5YoWvbV345HauVvcAUnpRuhMMcqTcGOY2+w==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
       }
     },
+    "node_modules/stackback": {
+      "version": "0.0.2",
+      "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
+      "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/standard-as-callback": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/standard-as-callback/-/standard-as-callback-2.1.0.tgz",
+      "integrity": "sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A==",
+      "license": "MIT"
+    },
+    "node_modules/state-local": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/state-local/-/state-local-1.0.7.tgz",
+      "integrity": "sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w==",
+      "license": "MIT"
+    },
     "node_modules/statuses": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
@@ -7058,11 +12668,17 @@
         "node": ">= 0.8"
       }
     },
+    "node_modules/std-env": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.1.0.tgz",
+      "integrity": "sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/string-width": {
       "version": "4.2.3",
       "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
       "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "emoji-regex": "^8.0.0",
@@ -7091,7 +12707,6 @@
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
       "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "ansi-regex": "^5.0.1"
@@ -7100,6 +12715,19 @@
         "node": ">=8"
       }
     },
+    "node_modules/strip-indent": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz",
+      "integrity": "sha512-laJTa3Jb+VQpaC6DseHhF7dXVqHTfJPCRDaEbid/drOhgitgYku/letMUqOXFoWV0zIIUbjpdH2t+tYj4bQMRQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "min-indent": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/strip-json-comments": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz",
@@ -7147,6 +12775,19 @@
         "url": "https://github.com/chalk/supports-color?sponsor=1"
       }
     },
+    "node_modules/symbol-tree": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
+      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tabbable": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/tabbable/-/tabbable-6.4.0.tgz",
+      "integrity": "sha512-05PUHKSNE8ou2dwIxTngl4EzcnsCDZGJ/iCLtDflR/SHB/ny14rXc+qU5P4mG9JkusiV7EivzY9Mhm55AzAvCg==",
+      "license": "MIT"
+    },
     "node_modules/tailwind-merge": {
       "version": "3.5.0",
       "resolved": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-3.5.0.tgz",
@@ -7188,6 +12829,23 @@
         "node": ">=20"
       }
     },
+    "node_modules/tinybench": {
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
+      "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tinyexec": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.1.2.tgz",
+      "integrity": "sha512-dAqSqE/RabpBKI8+h26GfLq6Vb3JVXs30XYQjdMjaj/c2tS8IYYMbIzP599KtRj7c57/wYApb3QjgRgXmrCukA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/tinyglobby": {
       "version": "0.2.15",
       "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
@@ -7233,6 +12891,36 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
+    "node_modules/tinyrainbow": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz",
+      "integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/tldts": {
+      "version": "7.0.30",
+      "resolved": "https://registry.npmjs.org/tldts/-/tldts-7.0.30.tgz",
+      "integrity": "sha512-ELrFxuqsDdHUwoh0XxDbxuLD3Wnz49Z57IFvTtvWy1hJdcMZjXLIuonjilCiWHlT2GbE4Wlv1wKVTzDFnXH1aw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tldts-core": "^7.0.30"
+      },
+      "bin": {
+        "tldts": "bin/cli.js"
+      }
+    },
+    "node_modules/tldts-core": {
+      "version": "7.0.30",
+      "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-7.0.30.tgz",
+      "integrity": "sha512-uiHN8PIB1VmWyS98eZYja4xzlYqeFZVjb4OuYlJQnZAuJhMw4PbKQOKgHKhBdJR3FE/t5mUQ1Kd80++B+qhD1Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/to-regex-range": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
@@ -7274,6 +12962,32 @@
         "nodetouch": "bin/nodetouch.js"
       }
     },
+    "node_modules/tough-cookie": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-6.0.1.tgz",
+      "integrity": "sha512-LktZQb3IeoUWB9lqR5EWTHgW/VTITCXg4D21M+lvybRVdylLrRMnqaIONLVb5mav8vM19m44HIcGq4qASeu2Qw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "tldts": "^7.0.5"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/tr46": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-6.0.0.tgz",
+      "integrity": "sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "punycode": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
     "node_modules/tree-kill": {
       "version": "1.2.2",
       "resolved": "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz",
@@ -7411,11 +13125,26 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/undici": {
+      "version": "7.25.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.25.0.tgz",
+      "integrity": "sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.18.1"
+      }
+    },
     "node_modules/undici-types": {
       "version": "6.21.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
       "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
-      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/unfetch": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/unfetch/-/unfetch-4.2.0.tgz",
+      "integrity": "sha512-F9p7yYCn6cIW9El1zi0HI6vqpeIvBsr3dSuRO6Xuppb1u5rXpCPmMvLSyECLhybr9isec8Ohl0hPekMVrEinDA==",
       "license": "MIT"
     },
     "node_modules/unified": {
@@ -7437,6 +13166,20 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/unist-util-find-after": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-find-after/-/unist-util-find-after-5.0.0.tgz",
+      "integrity": "sha512-amQa0Ep2m6hE2g72AugUItjbuM8X8cGQnFoHk0pGfrFeT9GZhzN5SW8nRsiGKK7Aif4CrACPENkA6P/Lw6fHGQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-is": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/unist-util-is": {
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.1.tgz",
@@ -7515,47 +13258,13 @@
         "punycode": "^2.1.0"
       }
     },
-    "node_modules/use-callback-ref": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/use-callback-ref/-/use-callback-ref-1.3.3.tgz",
-      "integrity": "sha512-jQL3lRnocaFtu3V00JToYz/4QkNWswxijDaCVNZRiRTO3HQDLsdu1ZtmIUvV4yPp+rvWm5j0y0TG/S61cuijTg==",
-      "license": "MIT",
-      "dependencies": {
-        "tslib": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/use-sidecar": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/use-sidecar/-/use-sidecar-1.1.3.tgz",
-      "integrity": "sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ==",
+    "node_modules/use-sync-external-store": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.6.0.tgz",
+      "integrity": "sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==",
       "license": "MIT",
-      "dependencies": {
-        "detect-node-es": "^1.1.0",
-        "tslib": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
       "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
+        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
       }
     },
     "node_modules/uuid": {
@@ -8159,6 +13868,172 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
+    "node_modules/vitest": {
+      "version": "4.1.10",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.10.tgz",
+      "integrity": "sha512-R9jUTe5S4Qb0HCd4TNqpC7oGcrMssMRGXLW80ubjWsW9VH5GF8y1Y0SFLY9AbqSk6nt0PnOx4H4WNJYZ13GUPw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/expect": "4.1.10",
+        "@vitest/mocker": "4.1.10",
+        "@vitest/pretty-format": "4.1.10",
+        "@vitest/runner": "4.1.10",
+        "@vitest/snapshot": "4.1.10",
+        "@vitest/spy": "4.1.10",
+        "@vitest/utils": "4.1.10",
+        "es-module-lexer": "^2.0.0",
+        "expect-type": "^1.3.0",
+        "magic-string": "^0.30.21",
+        "obug": "^2.1.1",
+        "pathe": "^2.0.3",
+        "picomatch": "^4.0.3",
+        "std-env": "^4.0.0-rc.1",
+        "tinybench": "^2.9.0",
+        "tinyexec": "^1.0.2",
+        "tinyglobby": "^0.2.15",
+        "tinyrainbow": "^3.1.0",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0",
+        "why-is-node-running": "^2.3.0"
+      },
+      "bin": {
+        "vitest": "vitest.mjs"
+      },
+      "engines": {
+        "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@edge-runtime/vm": "*",
+        "@opentelemetry/api": "^1.9.0",
+        "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "4.1.10",
+        "@vitest/browser-preview": "4.1.10",
+        "@vitest/browser-webdriverio": "4.1.10",
+        "@vitest/coverage-istanbul": "4.1.10",
+        "@vitest/coverage-v8": "4.1.10",
+        "@vitest/ui": "4.1.10",
+        "happy-dom": "*",
+        "jsdom": "*",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@edge-runtime/vm": {
+          "optional": true
+        },
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "@types/node": {
+          "optional": true
+        },
+        "@vitest/browser-playwright": {
+          "optional": true
+        },
+        "@vitest/browser-preview": {
+          "optional": true
+        },
+        "@vitest/browser-webdriverio": {
+          "optional": true
+        },
+        "@vitest/coverage-istanbul": {
+          "optional": true
+        },
+        "@vitest/coverage-v8": {
+          "optional": true
+        },
+        "@vitest/ui": {
+          "optional": true
+        },
+        "happy-dom": {
+          "optional": true
+        },
+        "jsdom": {
+          "optional": true
+        },
+        "vite": {
+          "optional": false
+        }
+      }
+    },
+    "node_modules/vitest/node_modules/picomatch": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/w3c-xmlserializer": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz",
+      "integrity": "sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/web-streams-polyfill": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-3.3.3.tgz",
+      "integrity": "sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/web-vitals": {
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/web-vitals/-/web-vitals-5.2.0.tgz",
+      "integrity": "sha512-i2z98bEmaCqSDiHEDu+gHl/dmR4Q+TxFmG3/13KkMO+o8UxQzCqWaDRCiLgEa41nlO4VpXSI0ASa1xWmO9sBlA==",
+      "license": "Apache-2.0"
+    },
+    "node_modules/webidl-conversions": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-8.0.1.tgz",
+      "integrity": "sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/whatwg-mimetype": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-5.0.0.tgz",
+      "integrity": "sha512-sXcNcHOC51uPGF0P/D4NVtrkjSU2fNsm9iog4ZvZJsL3rjoDAzXZhkm2MWt1y+PUdggKAYVoMAIYcs78wJ51Cw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/whatwg-url": {
+      "version": "16.0.1",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-16.0.1.tgz",
+      "integrity": "sha512-1to4zXBxmXHV3IiSSEInrreIlu02vUOvrhxJJH5vcxYTBDAx51cqZiKdyTxlecdKNSjj8EcxGBxNf6Vg+945gw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@exodus/bytes": "^1.11.0",
+        "tr46": "^6.0.0",
+        "webidl-conversions": "^8.0.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
@@ -8174,6 +14049,23 @@
         "node": ">= 8"
       }
     },
+    "node_modules/why-is-node-running": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
+      "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "siginfo": "^2.0.0",
+        "stackback": "0.0.2"
+      },
+      "bin": {
+        "why-is-node-running": "cli.js"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/word-wrap": {
       "version": "1.2.5",
       "resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
@@ -8188,7 +14080,6 @@
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
       "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "ansi-styles": "^4.0.0",
@@ -8206,7 +14097,6 @@
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
       "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "color-convert": "^2.0.1"
@@ -8225,21 +14115,60 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/xml-name-validator": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
+      "integrity": "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/xmlchars": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
+      "integrity": "sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/xtend": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
+      "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.4"
+      }
+    },
     "node_modules/y18n": {
       "version": "5.0.8",
       "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
       "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==",
-      "dev": true,
       "license": "ISC",
       "engines": {
         "node": ">=10"
       }
     },
+    "node_modules/yaml": {
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
+      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
+      "license": "ISC",
+      "bin": {
+        "yaml": "bin.mjs"
+      },
+      "engines": {
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
+      }
+    },
     "node_modules/yargs": {
       "version": "17.7.2",
       "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz",
       "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "cliui": "^8.0.1",
@@ -8258,7 +14187,6 @@
       "version": "21.1.1",
       "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz",
       "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==",
-      "dev": true,
       "license": "ISC",
       "engines": {
         "node": ">=12"
diff --git a/package.json b/package.json
index 14840bff..b7e02c65 100644
--- a/package.json
+++ b/package.json
@@ -12,54 +12,85 @@
     "build:server": "tsc --project src/server/tsconfig.json",
     "start": "node --env-file=.env --inspect dist/server/index.js",
     "lint": "eslint .",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "test:e2e": "playwright test"
   },
   "dependencies": {
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.1.0",
+    "@fastify/helmet": "^13.0.2",
     "@fastify/oauth2": "^8.1.2",
+    "@fastify/rate-limit": "^10.3.0",
     "@fastify/session": "^11.1.0",
     "@fastify/static": "^8.2.0",
     "@fastify/url-data": "^6.0.3",
     "@langchain/core": "^0.3.55",
-    "@langchain/langgraph-sdk": "^0.0.74",
-    "@radix-ui/react-scroll-area": "^1.2.8",
-    "@radix-ui/react-select": "^2.2.4",
-    "@radix-ui/react-slot": "^1.2.2",
-    "@radix-ui/react-tabs": "^1.1.11",
-    "@radix-ui/react-tooltip": "^1.2.6",
+    "@langchain/langgraph-sdk": "^1.9.2",
+    "@open-policy-agent/opa-wasm": "^1.10.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.76.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
+    "@opentelemetry/resources": "^2.7.1",
+    "@opentelemetry/sdk-node": "^0.218.0",
+    "@opentelemetry/semantic-conventions": "^1.41.1",
+    "@patternfly/chatbot": "^6.5.0",
+    "@patternfly/patternfly": "^6.4.0",
+    "@patternfly/react-core": "^6.4.3",
+    "@patternfly/react-icons": "^6.4.0",
+    "@patternfly/react-styles": "^6.4.0",
+    "@patternfly/react-table": "^6.4.3",
+    "@reduxjs/toolkit": "^2.11.2",
     "@tailwindcss/vite": "^4.1.5",
     "@types/uuid": "^10.0.0",
-    "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "fastify": "^5.5.0",
     "fastify-plugin": "^5.0.1",
+    "ioredis": "^5.10.1",
+    "js-yaml": "^4.1.1",
     "lucide-react": "^0.508.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "react-markdown": "^9.0.3",
+    "react-redux": "^9.2.0",
+    "remark-gfm": "^4.0.1",
     "react-router-dom": "^7.5.3",
+    "rehype-highlight": "^7.0.2",
+    "rehype-sanitize": "^6.0.0",
     "tailwind-merge": "^3.2.0",
     "tailwindcss": "^4.1.5",
     "uuid": "^11.1.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.22.0",
+    "@playwright/test": "^1.61.1",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.2",
+    "@testing-library/user-event": "^14.6.1",
+    "@types/jest-axe": "^3.5.9",
+    "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.17.2",
     "@types/react": "^19.1.2",
     "@types/react-dom": "^19.1.3",
+    "@types/react-redux": "^7.1.34",
     "@vitejs/plugin-react-swc": "^3.9.0",
+    "@vitest/coverage-v8": "^4.1.10",
     "concurrently": "^9.2.0",
     "eslint": "^9.22.0",
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.19",
     "globals": "^16.0.0",
+    "jest-axe": "^10.0.0",
+    "jsdom": "^29.1.1",
     "nodemon": "^3.1.10",
     "pino-pretty": "^13.1.1",
     "tsx": "^4.20.4",
     "tw-animate-css": "^1.2.9",
     "typescript": "~5.7.2",
     "typescript-eslint": "^8.26.1",
-    "vite": "^6.3.4"
+    "vite": "^6.3.4",
+    "vitest": "^4.1.6"
   }
 }
diff --git a/playwright.config.ts b/playwright.config.ts
new file mode 100644
index 00000000..1c54758c
--- /dev/null
+++ b/playwright.config.ts
@@ -0,0 +1,34 @@
+import { defineConfig, devices } from '@playwright/test';
+
+export default defineConfig({
+  testDir: './e2e',
+  timeout: 60_000,
+  expect: { timeout: 10_000 },
+  fullyParallel: false,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 1 : 0,
+  reporter: [['list'], ['html', { open: 'never' }]],
+  use: {
+    baseURL: 'http://localhost:18080',
+    trace: 'on-first-retry',
+  },
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+  webServer: {
+    // Bypasses --env-file=.env (not needed in CI) by invoking the compiled server directly.
+    command: 'node dist/server/index.js',
+    url: 'http://localhost:18080',
+    reuseExistingServer: !process.env.CI,
+    timeout: 30_000,
+    env: {
+      PORT: '18080',
+      AUTH_ENABLED: 'false',
+      ENVIRONMENT: 'test',
+      AGENT_HOST: 'http://localhost:19999',
+    },
+  },
+});
diff --git a/public/redhat-logo.svg b/public/redhat-logo.svg
new file mode 100644
index 00000000..f8b0f994
--- /dev/null
+++ b/public/redhat-logo.svg
@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 195 145" fill="#ee0000">
+  <path d="M127.47 83.49c12.51 0 30.61-2.58 30.61-17.46a14 14 0 0 0-.31-3.42l-7.45-32.36c-1.72-7.12-3.23-10.35-15.73-16.6C124.89 8.69 103.76.5 97.51.5 91.69.5 90 8 83.06 8c-6.68 0-11.64-5.6-17.89-5.6-6 0-9.91 4.09-12.93 12.5 0 0-8.41 23.72-9.49 27.16a6.43 6.43 0 0 0-.22 1.94c0 9.22 36.3 39.45 84.94 39.45M160 72.07c1.73 8.19 1.73 9.05 1.73 10.13 0 14-15.74 21.77-36.43 21.77C78.54 104 37.58 76.6 37.58 58.49a18.45 18.45 0 0 1 1.51-7.33C22.27 52 .5 55 .5 74.22c0 31.48 74.59 70.28 133.65 70.28 45.28 0 56.7-20.48 56.7-36.65 0-12.72-11-27.16-30.83-35.78" />
+</svg>
diff --git a/src/components/AnnouncementBanner.tsx b/src/components/AnnouncementBanner.tsx
new file mode 100644
index 00000000..63deeff9
--- /dev/null
+++ b/src/components/AnnouncementBanner.tsx
@@ -0,0 +1,84 @@
+import { useState, useEffect, useCallback } from 'react';
+import { Alert, AlertActionCloseButton } from '@patternfly/react-core';
+
+type AnnouncementType = 'info' | 'warning' | 'danger' | 'success';
+
+interface AnnouncementResponse {
+  enabled: boolean;
+  message?: string;
+  type?: string;
+}
+
+function messageHash(message: string): string {
+  let h = 0;
+  for (let i = 0; i < message.length; ) {
+    const cp = message.codePointAt(i);
+    if (cp === undefined) break;
+    h = Math.trunc(Math.imul(31, h) + cp);
+    i += cp > 0xffff ? 2 : 1;
+  }
+  return String(h);
+}
+
+function toVariant(type: string | undefined): AnnouncementType {
+  if (type === 'warning' || type === 'danger' || type === 'success' || type === 'info') {
+    return type;
+  }
+  return 'info';
+}
+
+const STORAGE_PREFIX = 'announcement_dismissed_';
+
+export function AnnouncementBanner() {
+  const [payload, setPayload] = useState<AnnouncementResponse | null>(null);
+  const [dismissed, setDismissed] = useState(false);
+
+  useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      try {
+        const res = await fetch('/api/announcement');
+        if (!res.ok || cancelled) return;
+        const data = (await res.json()) as AnnouncementResponse;
+        if (cancelled) return;
+        setPayload(data);
+        if (data.enabled && data.message) {
+          const key = STORAGE_PREFIX + messageHash(data.message);
+          if (sessionStorage.getItem(key) === '1') {
+            setDismissed(true);
+          }
+        }
+      } catch {
+        // ignore fetch errors
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  const handleClose = useCallback(() => {
+    if (payload?.message) {
+      sessionStorage.setItem(STORAGE_PREFIX + messageHash(payload.message), '1');
+    }
+    setDismissed(true);
+  }, [payload?.message]);
+
+  if (!payload?.enabled || !payload.message || dismissed) {
+    return null;
+  }
+
+  const variant = toVariant(payload.type);
+
+  return (
+    <div className="w-full shrink-0 border-b border-[var(--pf-v5-global--BorderColor--200)]">
+      <Alert
+        variant={variant}
+        isInline
+        isExpandable={false}
+        title={payload.message}
+        actionClose={<AlertActionCloseButton onClose={handleClose} />}
+      />
+    </div>
+  );
+}
diff --git a/src/frontend/App.tsx b/src/frontend/App.tsx
index d2bf7f0d..c8acda60 100644
--- a/src/frontend/App.tsx
+++ b/src/frontend/App.tsx
@@ -1,28 +1,101 @@
-
-import { Routes, Route } from 'react-router-dom';
-import { ChatProvider } from './contexts/ChatContext';
+import { useEffect } from 'react';
+import { Routes, Route, Navigate } from 'react-router-dom';
+import { useDispatch, useSelector } from 'react-redux';
+import { AnnouncementBanner } from '../components/AnnouncementBanner';
 import { AppLayout } from './components/layout/AppLayout';
 import { HomePage } from './pages/HomePage';
 import { ChatRoutePage } from './pages/ChatPage';
+import { SettingsPage } from './pages/SettingsPage';
 import { ErrorBoundary } from './components/ErrorBoundary';
+import { ToastNotifications } from './components/ToastNotifications';
+import { useThemeSync } from './hooks/useThemeSync';
+import { loadConfig } from './redux/slices/config';
+import { setConfigDefaults } from './redux/slices/userSettings';
+import type { RootState, AppDispatch } from './redux/store';
 
-// Main App component - clean and simple!
 export default function App() {
+  const dispatch = useDispatch<AppDispatch>();
+  const { branding, loading, error } = useSelector((state: RootState) => state.config);
+  const theme = useSelector((state: RootState) => state.userSettings.theme);
+
+  useThemeSync();
+
+  // Load config at app init
+  useEffect(() => {
+    dispatch(loadConfig()).then((result: any) => {
+      if (result.meta.requestStatus === 'fulfilled' && result.payload?.features) {
+        // Apply feature flag defaults to user settings
+        dispatch(setConfigDefaults({
+          debug_mode_default: result.payload.features.debug_mode_default,
+        }));
+      }
+    });
+  }, [dispatch]);
+
+  // Apply branding to DOM when config loads
+  useEffect(() => {
+    if (!branding) return;
+
+    // Apply colors based on current theme
+    const colors = theme === 'dark' ? branding.colors?.dark : branding.colors?.light;
+    if (!colors) return;
+
+    document.documentElement.style.setProperty('--primary', colors.primary);
+    document.documentElement.style.setProperty('--accent', colors.accent);
+    document.documentElement.style.setProperty('--background', colors.background);
+    document.documentElement.style.setProperty('--foreground', colors.foreground);
+
+    // Update document title
+    if (branding.title) {
+      document.title = branding.title;
+    }
+
+    // Update favicon - use favicon_url if provided, otherwise fall back to logo_url
+    const faviconUrl = branding.favicon_url || branding.logo_url;
+    if (faviconUrl) {
+      const link = document.querySelector("link[rel='icon']") as HTMLLinkElement;
+      if (link) {
+        link.href = faviconUrl;
+      }
+    }
+  }, [branding, theme]);
+
+  // Don't block render on config failure - fall back to defaults
+  // Only show loading on initial mount, not on errors
+  if (loading && !error && !branding) {
+    return (
+      <div
+        role="status"
+        aria-live="polite"
+        aria-label="Loading application"
+        style={{ display: 'flex', justifyContent: 'center', alignItems: 'center', height: '100vh' }}
+      >
+        Loading configuration...
+      </div>
+    );
+  }
+
+  // Log error but don't block render - config will fall back to defaults
+  if (error) {
+    console.warn('Config load failed, using defaults:', error);
+  }
+
   return (
     <ErrorBoundary
       onError={(error, errorInfo) => {
         console.error('Top-level application error:', error, errorInfo);
-        // Here you could report to error tracking service
       }}
     >
-      <ChatProvider>
-        <AppLayout>
-          <Routes>
-            <Route path="/" element={<HomePage />} />
-            <Route path="/chat/:threadId" element={<ChatRoutePage />} />
-          </Routes>
-        </AppLayout>
-      </ChatProvider>
+      <AnnouncementBanner />
+      <AppLayout>
+        <Routes>
+          <Route path="/" element={<HomePage />} />
+          <Route path="/chat" element={<Navigate to="/" replace />} />
+          <Route path="/chat/:threadId" element={<ChatRoutePage />} />
+          <Route path="/settings" element={<SettingsPage />} />
+        </Routes>
+      </AppLayout>
+      <ToastNotifications />
     </ErrorBoundary>
   );
-}
\ No newline at end of file
+}
diff --git a/src/frontend/components/AIMessageRenderer.test.tsx b/src/frontend/components/AIMessageRenderer.test.tsx
new file mode 100644
index 00000000..02a8896a
--- /dev/null
+++ b/src/frontend/components/AIMessageRenderer.test.tsx
@@ -0,0 +1,145 @@
+import React from 'react';
+import { describe, it, expect, vi } from 'vitest';
+import { render, screen, waitFor } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import type { Message } from '@langchain/langgraph-sdk';
+import { AIMessageRenderer } from './ChatMessagesView';
+import type { InterruptInfo } from '../types/deep-agent';
+
+// ── Fixtures ──────────────────────────────────────────────────────────────────
+
+/** Cast a plain object to the LangGraph Message type — only the fields used by
+ *  AIMessageRenderer are needed at runtime. */
+function makeMsg(overrides: Record<string, unknown>): Message {
+  return { type: 'ai', content: '', id: 'msg-1', tool_calls: [], ...overrides } as unknown as Message;
+}
+
+const CREATE_PR_TOOL_CALL = {
+  id: 'tc-1',
+  name: 'github_create_pr',
+  args: { title: 'My PR', base: 'main' },
+};
+
+const hitlInterrupt: InterruptInfo = {
+  value: {
+    action_requests: [{ name: 'github_create_pr', args: { title: 'My PR' } }],
+    review_configs: [{ action_name: 'github_create_pr', allowed_decisions: ['approve', 'reject'] }],
+  },
+  resumable: true,
+};
+
+// ── Tests ─────────────────────────────────────────────────────────────────────
+
+describe('AIMessageRenderer — HITL approval (production path for HITLInterruptValue)', () => {
+  it('renders Approve and Reject buttons for a pending tool-call interrupt', () => {
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer
+        message={msg}
+        pendingInterrupt={hitlInterrupt}
+        onInterruptResume={vi.fn()}
+      />,
+    );
+
+    expect(screen.getByRole('button', { name: /approve tool call: github_create_pr/i })).toBeInTheDocument();
+    expect(screen.getByRole('button', { name: /reject tool call: github_create_pr/i })).toBeInTheDocument();
+  });
+
+  it('calls onInterruptResume with approve decisions when Approve is clicked', async () => {
+    const onInterruptResume = vi.fn();
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer
+        message={msg}
+        pendingInterrupt={hitlInterrupt}
+        onInterruptResume={onInterruptResume}
+      />,
+    );
+
+    await userEvent.click(screen.getByRole('button', { name: /approve tool call: github_create_pr/i }));
+    expect(onInterruptResume).toHaveBeenCalledOnce();
+    const [decisions] = onInterruptResume.mock.calls[0];
+    expect(decisions).toEqual(expect.arrayContaining([{ type: 'approve' }]));
+    expect(decisions.every((d: { type: string }) => d.type === 'approve')).toBe(true);
+  });
+
+  it('calls onInterruptResume with reject decisions when Reject is clicked', async () => {
+    const onInterruptResume = vi.fn();
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer
+        message={msg}
+        pendingInterrupt={hitlInterrupt}
+        onInterruptResume={onInterruptResume}
+      />,
+    );
+
+    await userEvent.click(screen.getByRole('button', { name: /reject tool call: github_create_pr/i }));
+    expect(onInterruptResume).toHaveBeenCalledOnce();
+    const [decisions] = onInterruptResume.mock.calls[0];
+    expect(decisions.every((d: { type: string }) => d.type === 'reject')).toBe(true);
+  });
+
+  it('calls onAlwaysAllow and approves when Always allow is clicked', async () => {
+    const onInterruptResume = vi.fn();
+    const onAlwaysAllow = vi.fn();
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer
+        message={msg}
+        pendingInterrupt={hitlInterrupt}
+        onInterruptResume={onInterruptResume}
+        onAlwaysAllow={onAlwaysAllow}
+      />,
+    );
+
+    await userEvent.click(screen.getByRole('button', { name: /always allow tool: github_create_pr/i }));
+    expect(onAlwaysAllow).toHaveBeenCalledWith(['github_create_pr']);
+    expect(onInterruptResume).toHaveBeenCalledOnce();
+    const [decisions] = onInterruptResume.mock.calls[0];
+    expect(decisions.every((d: { type: string }) => d.type === 'approve')).toBe(true);
+  });
+
+  it('hides approval buttons after one of them is clicked (approvalSubmitted)', async () => {
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer
+        message={msg}
+        pendingInterrupt={hitlInterrupt}
+        onInterruptResume={vi.fn()}
+      />,
+    );
+
+    await userEvent.click(screen.getByRole('button', { name: /approve tool call: github_create_pr/i }));
+    await waitFor(() => {
+      expect(screen.queryByRole('button', { name: /approve tool call: github_create_pr/i })).not.toBeInTheDocument();
+      expect(screen.queryByRole('button', { name: /reject tool call: github_create_pr/i })).not.toBeInTheDocument();
+    });
+  });
+
+  it('does NOT render approval buttons when pendingInterrupt is null', () => {
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer message={msg} pendingInterrupt={null} onInterruptResume={vi.fn()} />,
+    );
+
+    expect(screen.queryByRole('button', { name: /approve tool call/i })).not.toBeInTheDocument();
+    expect(screen.queryByRole('button', { name: /reject tool call/i })).not.toBeInTheDocument();
+  });
+
+  it('does NOT render approval buttons when onInterruptResume is not provided', () => {
+    const msg = makeMsg({ tool_calls: [CREATE_PR_TOOL_CALL] });
+
+    render(
+      <AIMessageRenderer message={msg} pendingInterrupt={hitlInterrupt} />,
+    );
+
+    expect(screen.queryByRole('button', { name: /approve tool call/i })).not.toBeInTheDocument();
+  });
+});
diff --git a/src/frontend/components/ActivityTimeline.tsx b/src/frontend/components/ActivityTimeline.tsx
index d59df59b..92ec0772 100644
--- a/src/frontend/components/ActivityTimeline.tsx
+++ b/src/frontend/components/ActivityTimeline.tsx
@@ -1,10 +1,9 @@
 import {
   Card,
-  CardContent,
-  CardDescription,
+  CardBody,
   CardHeader,
-} from "@/components/ui/card";
-import { ScrollArea } from "@/components/ui/scroll-area";
+  CardTitle,
+} from "@patternfly/react-core";
 import {
   Loader2,
   Activity,
@@ -59,25 +58,22 @@ export function ActivityTimeline({
   }, [isLoading, processedEvents]);
 
   return (
-    <Card className="border-none rounded-lg bg-neutral-700 max-h-96">
-      <CardHeader>
-        <CardDescription className="flex items-center justify-between">
-          <div
-            className="flex items-center justify-start text-sm w-full cursor-pointer gap-2 text-neutral-100"
-            onClick={() => setIsTimelineCollapsed(!isTimelineCollapsed)}
-          >
-            Research
-            {isTimelineCollapsed ? (
-              <ChevronDown className="h-4 w-4 mr-2" />
-            ) : (
-              <ChevronUp className="h-4 w-4 mr-2" />
-            )}
-          </div>
-        </CardDescription>
+    <Card isCompact isPlain className="!border-none rounded-lg !bg-neutral-700 max-h-96">
+      <CardHeader
+        className="cursor-pointer"
+        onClick={() => setIsTimelineCollapsed(!isTimelineCollapsed)}
+      >
+        <CardTitle className="flex items-center gap-2 text-sm text-neutral-100 font-normal">
+          Research
+          {isTimelineCollapsed ? (
+            <ChevronDown className="h-4 w-4 mr-2" />
+          ) : (
+            <ChevronUp className="h-4 w-4 mr-2" />
+          )}
+        </CardTitle>
       </CardHeader>
       {!isTimelineCollapsed && (
-        <ScrollArea className="max-h-96 overflow-y-auto">
-          <CardContent>
+        <CardBody className="max-h-96 overflow-y-auto">
             {isLoading && processedEvents.length === 0 && (
               <div className="relative pl-8 pb-4">
                 <div className="absolute left-3 top-3.5 h-full w-0.5 bg-neutral-800" />
@@ -138,8 +134,7 @@ export function ActivityTimeline({
                 </p>
               </div>
             ) : null}
-          </CardContent>
-        </ScrollArea>
+        </CardBody>
       )}
     </Card>
   );
diff --git a/src/frontend/components/ArtifactViewer.tsx b/src/frontend/components/ArtifactViewer.tsx
new file mode 100644
index 00000000..7b9f5cbe
--- /dev/null
+++ b/src/frontend/components/ArtifactViewer.tsx
@@ -0,0 +1,66 @@
+import { useState } from 'react';
+import { Button, Label } from '@patternfly/react-core';
+import { Copy, Check, FileText, Code, FileJson } from 'lucide-react';
+import ReactMarkdown from 'react-markdown';
+import remarkGfm from 'remark-gfm';
+import { detectArtifactKind, type ArtifactKind } from '../types/deep-agent';
+
+interface ArtifactViewerProps {
+  readonly content: string;
+  readonly title?: string;
+}
+
+const KIND_META: Record<ArtifactKind, { label: string; color: 'blue' | 'purple' | 'orange' | 'grey'; icon: typeof FileText }> = {
+  code: { label: 'Code', color: 'purple', icon: Code },
+  json: { label: 'JSON', color: 'orange', icon: FileJson },
+  markdown: { label: 'Markdown', color: 'blue', icon: FileText },
+  text: { label: 'Text', color: 'grey', icon: FileText },
+};
+
+export function ArtifactViewer({ content, title }: ArtifactViewerProps) {
+  const [copied, setCopied] = useState(false);
+  const kind = detectArtifactKind(content);
+  const meta = KIND_META[kind];
+  const KindIcon = meta.icon;
+
+  const handleCopy = async () => {
+    await navigator.clipboard.writeText(content);
+    setCopied(true);
+    setTimeout(() => setCopied(false), 2000);
+  };
+
+  return (
+    <div className="border border-border rounded-lg overflow-hidden bg-card">
+      <div className="flex items-center justify-between px-3 py-2 border-b border-border bg-muted/30">
+        <div className="flex items-center gap-2">
+          <KindIcon className="w-3.5 h-3.5 text-muted-foreground" />
+          {title && <span className="text-xs font-medium text-foreground">{title}</span>}
+          <Label isCompact color={meta.color}>{meta.label}</Label>
+        </div>
+        <Button
+          variant="plain"
+          size="sm"
+          className="!p-1"
+          onClick={handleCopy}
+          aria-label="Copy content"
+        >
+          {copied ? <Check className="w-3.5 h-3.5 text-green-500" /> : <Copy className="w-3.5 h-3.5" />}
+        </Button>
+      </div>
+
+      <div className="max-h-80 overflow-auto p-3">
+        {kind === 'markdown' ? (
+          <div className="prose prose-sm dark:prose-invert max-w-none text-sm">
+            <ReactMarkdown remarkPlugins={[remarkGfm]}>{content}</ReactMarkdown>
+          </div>
+        ) : kind === 'json' ? (
+          <pre className="text-xs font-mono text-foreground whitespace-pre-wrap">
+            {(() => { try { return JSON.stringify(JSON.parse(content), null, 2); } catch { return content; } })()}
+          </pre>
+        ) : (
+          <pre className="text-xs font-mono text-foreground whitespace-pre-wrap">{content}</pre>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/src/frontend/components/ChatErrorBoundary.tsx b/src/frontend/components/ChatErrorBoundary.tsx
index 3ee50ecf..5ce99687 100644
--- a/src/frontend/components/ChatErrorBoundary.tsx
+++ b/src/frontend/components/ChatErrorBoundary.tsx
@@ -1,5 +1,6 @@
 import { Component, ErrorInfo, ReactNode } from 'react';
-import { Button } from './ui/button';
+import { ErrorRecovery } from './ErrorRecovery';
+import { buildAppPath } from '../lib/app-paths';
 
 interface Props {
   children: ReactNode;
@@ -24,60 +25,36 @@ export class ChatErrorBoundary extends Component<Props, State> {
 
   componentDidCatch(error: Error, errorInfo: ErrorInfo) {
     console.error('ChatErrorBoundary caught an error:', error, errorInfo);
-    
-    // Report to error tracking service (Sentry, LogRocket, etc.)
-    // Example: reportError(error, { context: 'chat', chatId: this.props.chatId });
   }
 
   private handleRetry = () => {
     this.setState({ hasError: false, error: undefined });
-    if (this.props.onRetry) {
-      this.props.onRetry();
-    }
+    this.props.onRetry?.();
   };
 
   private handleGoHome = () => {
-    window.location.href = '/';
+    globalThis.location.href = buildAppPath('/');
+  };
+
+  private handleRefreshChat = () => {
+    window.location.reload();
   };
 
   render() {
     if (this.state.hasError) {
       return (
         <div className="flex flex-col items-center justify-center h-full p-8">
-          <div className="text-center space-y-4 max-w-lg">
-            <div className="text-orange-400 text-3xl mb-4">🔧</div>
-            <h2 className="text-lg font-bold text-orange-100">Chat Error</h2>
-            <p className="text-neutral-400 text-sm">
-              There was a problem with this chat session. This might be due to a network issue 
-              or a problem with the message processing.
-            </p>
-            
-            {this.state.error && (
-              <div className="mt-4 p-3 bg-orange-950/30 rounded border border-orange-800/30 text-left">
-                <p className="text-orange-300 text-sm font-medium mb-2">Error:</p>
-                <p className="text-orange-200 text-xs">
-                  {this.state.error.message}
-                </p>
-              </div>
-            )}
-            
-            <div className="flex flex-col sm:flex-row gap-3 mt-6 justify-center">
-              <Button
-                onClick={this.handleRetry}
-                size="sm"
-                className="bg-orange-600 hover:bg-orange-700 text-white"
-              >
-                Try Again
-              </Button>
-              <Button
-                onClick={this.handleGoHome}
-                variant="outline"
-                size="sm"
-                className="border-neutral-600 text-neutral-300 hover:bg-neutral-800"
-              >
-                Go to Home
-              </Button>
-            </div>
+          <div className="max-w-lg w-full">
+            <ErrorRecovery
+              title="Chat Error"
+              status="warning"
+              errorMessage="There was a problem with this chat session. This might be due to a network issue or a problem with the message processing."
+              errorDetails={this.state.error?.message}
+              onRetry={this.handleRetry}
+              onGoHome={this.handleGoHome}
+              onRefresh={this.handleRefreshChat}
+              refreshButtonLabel="Refresh Chat"
+            />
           </div>
         </div>
       );
diff --git a/src/frontend/components/ChatMessagesView.tsx b/src/frontend/components/ChatMessagesView.tsx
index 24994437..083eb034 100644
--- a/src/frontend/components/ChatMessagesView.tsx
+++ b/src/frontend/components/ChatMessagesView.tsx
@@ -1,50 +1,221 @@
 import type React from "react";
 import type { Message } from "@langchain/langgraph-sdk";
-import { ScrollArea } from "./ui/scroll-area";
-import { CheckCircle, ChevronDown, ChevronRight, Copy, CopyCheck, Loader2, Settings } from "lucide-react";
+import { AlertCircle, Check, CheckCircle, ChevronDown, ChevronRight, Copy, Download, Loader2, Pencil, RotateCcw, Settings, Bot, User, ShieldCheck } from "lucide-react";
+import type { InterruptInfo } from "../types/deep-agent";
 import { InputForm } from "./InputForm";
-import { useState, ReactNode, useMemo } from "react";
+import { McpStatusPanel } from "./McpStatusPanel";
+import { useState, ReactNode, useMemo, useEffect, useRef, Fragment } from "react";
 import { cn } from "../lib/utils";
-import { Badge } from "./ui/badge";
+import {
+  Dropdown,
+  DropdownItem,
+  DropdownList,
+  ExpandableSection,
+  Label,
+  MenuToggle,
+  type MenuToggleElement,
+} from "@patternfly/react-core";
 import {
   ProcessedEvent,
 } from "./ActivityTimeline";
 import { StreamEvent } from "../hooks/useDataStream";
 import ReactMarkdown from "react-markdown";
+import remarkGfm from "remark-gfm";
+import { isSubAgentToolCall, detectArtifactKind } from "../types/deep-agent";
+import { SubAgentIndicator } from "./SubAgentIndicator";
+import { ArtifactViewer } from "./ArtifactViewer";
+import { TodoStrip } from "./TodoStrip";
+import { FeedbackButtons } from "./FeedbackButtons";
+import { CustomDataRenderer } from "./CustomDataRenderer";
+
+function extractMessageText(content: unknown): string {
+  if (typeof content === 'string') return content;
+  if (Array.isArray(content)) {
+    return content
+      .map((b: unknown) => {
+        if (typeof b === 'string') return b;
+        if (b && typeof b === 'object' && 'type' in b && 'text' in b) {
+          const block = b as { type: string; text: string };
+          if (block.type === 'text' && typeof block.text === 'string') return block.text;
+        }
+        return '';
+      })
+      .join('');
+  }
+  return '';
+}
+
+function stripThinkingFromPlainText(text: string): { thinking: string; display: string } {
+  const thinkingParts: string[] = [];
+  let display = text;
+  const patterns: RegExp[] = [
+    /<think>([\s\S]*?)<\/redacted_thinking>/gi,
+    /<thinking>([\s\S]*?)<\/thinking>/gi,
+  ];
+  for (const re of patterns) {
+    display = display.replace(re, (_full, inner: string) => {
+      thinkingParts.push(String(inner).trim());
+      return '';
+    });
+  }
+  return {
+    thinking: thinkingParts.filter(Boolean).join('\n\n'),
+    display: display.replace(/\n{3,}/g, '\n\n').trim(),
+  };
+}
+
+function partitionMessageContent(content: unknown): { thinkingText: string; markdownForDisplay: string } {
+  if (typeof content === 'string') {
+    const { thinking, display } = stripThinkingFromPlainText(content);
+    return { thinkingText: thinking, markdownForDisplay: display };
+  }
+  if (Array.isArray(content)) {
+    const thinkingFromBlocks: string[] = [];
+    const restBlocks: unknown[] = [];
+    for (const b of content) {
+      if (
+        b &&
+        typeof b === 'object' &&
+        'type' in b &&
+        (b as { type: string }).type === 'thinking'
+      ) {
+        const block = b as { type: string; text?: string; reasoning?: string };
+        const piece =
+          typeof block.text === 'string'
+            ? block.text
+            : typeof block.reasoning === 'string'
+              ? block.reasoning
+              : JSON.stringify(block);
+        thinkingFromBlocks.push(piece);
+        continue;
+      }
+      restBlocks.push(b);
+    }
+    const restJoined = restBlocks
+      .map((b: unknown) => {
+        if (typeof b === 'string') return b;
+        if (b && typeof b === 'object' && 'type' in b && 'text' in b) {
+          const block = b as { type: string; text: string };
+          if (block.type === 'text' && typeof block.text === 'string') return block.text;
+        }
+        return '';
+      })
+      .join('');
+    const { thinking: thinkingInText, display: afterTags } = stripThinkingFromPlainText(restJoined);
+    const thinkingText = [thinkingFromBlocks.join('\n\n'), thinkingInText].filter(Boolean).join('\n\n');
+    return { thinkingText, markdownForDisplay: afterTags };
+  }
+  return { thinkingText: '', markdownForDisplay: '' };
+}
+
+function getCopyableAiMessageText(content: unknown): string {
+  const { thinkingText, markdownForDisplay } = partitionMessageContent(content);
+  const main =
+    markdownForDisplay.length > 0 ? markdownForDisplay : extractMessageText(content);
+  if (!thinkingText) return main;
+  return [thinkingText, main].filter((s) => s.length > 0).join('\n\n');
+}
 
-// Markdown component props type from former ReportView
 type MdComponentProps = {
   className?: string;
   children?: ReactNode;
   [key: string]: unknown;
 };
 
-// Markdown components (from former ReportView.tsx)
+function getPlainTextFromReactNode(node: React.ReactNode): string {
+  if (node == null || typeof node === 'boolean') return '';
+  if (typeof node === 'string' || typeof node === 'number') return String(node);
+  if (Array.isArray(node)) return node.map(getPlainTextFromReactNode).join('');
+  if (typeof node === 'object' && 'props' in node) {
+    const el = node as { props?: { children?: React.ReactNode } };
+    return getPlainTextFromReactNode(el.props?.children);
+  }
+  return '';
+}
+
+function MarkdownPre({ className, children, ...props }: MdComponentProps) {
+  const [copied, setCopied] = useState(false);
+  const codeText = useMemo(() => getPlainTextFromReactNode(children), [children]);
+
+  const handleCopy = () => {
+    void navigator.clipboard.writeText(codeText).then(() => {
+      setCopied(true);
+      window.setTimeout(() => setCopied(false), 2000);
+    });
+  };
+
+  return (
+    <div className="relative group/codeblock my-3">
+      <button
+        type="button"
+        onClick={() => handleCopy()}
+        className="absolute top-2 right-2 z-10 inline-flex h-7 w-7 items-center justify-center rounded-md border border-border bg-card/90 text-muted-foreground shadow-sm transition-colors hover:bg-muted hover:text-foreground"
+        aria-label={copied ? 'Copied' : 'Copy code'}
+      >
+        {copied ? <Check className="h-3.5 w-3.5" /> : <Copy className="h-3.5 w-3.5" />}
+      </button>
+      <pre
+        className={cn(
+          "bg-muted border border-border pt-10 pr-3 pb-4 pl-4 rounded-xl overflow-x-auto font-mono text-[13px]",
+          className
+        )}
+        {...props}
+      >
+        {children}
+      </pre>
+    </div>
+  );
+}
+
+function MessageCopyButton({ text }: { text: string }) {
+  const [copied, setCopied] = useState(false);
+  const disabled = text.length === 0;
+
+  return (
+    <button
+      type="button"
+      disabled={disabled}
+      className={cn(
+        'inline-flex h-7 w-7 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-muted/80 hover:text-foreground disabled:pointer-events-none disabled:opacity-40',
+      )}
+      aria-label={copied ? 'Copied' : 'Copy message'}
+      onClick={() => {
+        void navigator.clipboard.writeText(text).then(() => {
+          setCopied(true);
+          window.setTimeout(() => setCopied(false), 2000);
+        });
+      }}
+    >
+      {copied ? <Check className="h-3.5 w-3.5" /> : <Copy className="h-3.5 w-3.5" />}
+    </button>
+  );
+}
+
 const mdComponents = {
   h1: ({ className, children, ...props }: MdComponentProps) => (
-    <h1 className={cn("text-2xl font-bold mt-4 mb-2", className)} {...props}>
+    <h1 className={cn("text-2xl font-bold mt-4 mb-2 text-foreground", className)} {...props}>
       {children}
     </h1>
   ),
   h2: ({ className, children, ...props }: MdComponentProps) => (
-    <h2 className={cn("text-xl font-bold mt-3 mb-2", className)} {...props}>
+    <h2 className={cn("text-xl font-semibold mt-3 mb-2 text-foreground", className)} {...props}>
       {children}
     </h2>
   ),
   h3: ({ className, children, ...props }: MdComponentProps) => (
-    <h3 className={cn("text-lg font-bold mt-3 mb-1", className)} {...props}>
+    <h3 className={cn("text-lg font-semibold mt-3 mb-1 text-foreground", className)} {...props}>
       {children}
     </h3>
   ),
   p: ({ className, children, ...props }: MdComponentProps) => (
-    <p className={cn("mb-3 leading-7", className)} {...props}>
+    <p className={cn("mb-3 leading-7 text-foreground/90", className)} {...props}>
       {children}
     </p>
   ),
   a: ({ className, children, href, ...props }: MdComponentProps) => (
-    <Badge className="text-xs mx-0.5">
+    <Label isCompact className="mx-0.5">
       <a
-        className={cn("text-blue-400 hover:text-blue-300 text-xs", className)}
+        className={cn("text-primary hover:text-primary/80 text-xs", className)}
         href={href as string}
         target="_blank"
         rel="noopener noreferrer"
@@ -52,27 +223,27 @@ const mdComponents = {
       >
         {children}
       </a>
-    </Badge>
+    </Label>
   ),
   ul: ({ className, children, ...props }: MdComponentProps) => (
-    <ul className={cn("list-disc pl-6 mb-3", className)} {...props}>
+    <ul className={cn("list-disc pl-6 mb-3 space-y-1", className)} {...props}>
       {children}
     </ul>
   ),
   ol: ({ className, children, ...props }: MdComponentProps) => (
-    <ol className={cn("list-decimal pl-6 mb-3", className)} {...props}>
+    <ol className={cn("list-decimal pl-6 mb-3 space-y-1", className)} {...props}>
       {children}
     </ol>
   ),
   li: ({ className, children, ...props }: MdComponentProps) => (
-    <li className={cn("mb-1", className)} {...props}>
+    <li className={cn("mb-1 text-foreground/90", className)} {...props}>
       {children}
     </li>
   ),
   blockquote: ({ className, children, ...props }: MdComponentProps) => (
     <blockquote
       className={cn(
-        "border-l-4 border-neutral-600 pl-4 italic my-3 text-sm",
+        "border-l-3 border-primary/40 pl-4 italic my-3 text-sm text-muted-foreground",
         className
       )}
       {...props}
@@ -83,7 +254,7 @@ const mdComponents = {
   code: ({ className, children, ...props }: MdComponentProps) => (
     <code
       className={cn(
-        "bg-neutral-900 rounded px-1 py-0.5 font-mono text-xs",
+        "bg-muted rounded-md px-1.5 py-0.5 font-mono text-[13px] text-foreground",
         className
       )}
       {...props}
@@ -91,29 +262,19 @@ const mdComponents = {
       {children}
     </code>
   ),
-  pre: ({ className, children, ...props }: MdComponentProps) => (
-    <pre
-      className={cn(
-        "bg-neutral-900 p-3 rounded-lg overflow-x-auto font-mono text-xs my-3",
-        className
-      )}
-      {...props}
-    >
-      {children}
-    </pre>
-  ),
+  pre: MarkdownPre,
   hr: ({ className, ...props }: MdComponentProps) => (
-    <hr className={cn("border-neutral-600 my-4", className)} {...props} />
+    <hr className={cn("border-border my-4", className)} {...props} />
   ),
   table: ({ className, children, ...props }: MdComponentProps) => (
-    <div className="my-3 overflow-x-auto">
+    <div className="my-3 overflow-x-auto rounded-lg border border-border">
       <table className={cn("border-collapse w-full", className)} {...props}>
         {children}
       </table>
     </div>
   ),
   thead: ({ className, children, ...props }: MdComponentProps) => (
-    <thead className={cn("bg-neutral-800", className)} {...props}>
+    <thead className={cn("bg-muted/70", className)} {...props}>
       {children}
     </thead>
   ),
@@ -123,20 +284,14 @@ const mdComponents = {
     </tbody>
   ),
   tr: ({ className, children, ...props }: MdComponentProps) => (
-    <tr
-      className={cn(
-        "border-b border-neutral-700 even:bg-neutral-800 odd:bg-neutral-900",
-        className
-      )}
-      {...props}
-    >
+    <tr className={cn("border-b border-border", className)} {...props}>
       {children}
     </tr>
   ),
   th: ({ className, children, ...props }: MdComponentProps) => (
     <th
       className={cn(
-        "border border-neutral-700 px-3 py-2 text-left font-bold bg-neutral-800",
+        "px-4 py-2.5 text-left text-xs font-semibold uppercase tracking-wider text-muted-foreground",
         className
       )}
       {...props}
@@ -145,84 +300,214 @@ const mdComponents = {
     </th>
   ),
   td: ({ className, children, ...props }: MdComponentProps) => (
-    <td
-      className={cn("border border-neutral-600 px-3 py-2", className)}
-      {...props}
-    >
+    <td className={cn("px-4 py-2.5 text-sm", className)} {...props}>
       {children}
     </td>
   ),
-  img: ({ className, ...props }: MdComponentProps) => (
-    <img className={cn("w-full h-auto", className)} {...props} />
+  img: ({ className, alt, ...props }: MdComponentProps) => (
+    <img className={cn("w-full h-auto rounded-lg", className)} alt={(alt as string) ?? ''} {...props} />
   ),
 };
 
-// Props for HumanMessageBubble
 interface HumanMessageBubbleProps {
   message: Message;
-  mdComponents: typeof mdComponents;
+  messageIndex: number;
+  isLastHuman: boolean;
+  isLoading?: boolean;
+  onEditMessage?: (messageIndex: number, newContent: string) => void;
 }
 
-// HumanMessageBubble Component
 const HumanMessageBubble: React.FC<HumanMessageBubbleProps> = ({
   message,
+  messageIndex,
+  isLastHuman,
+  isLoading = false,
+  onEditMessage,
 }) => {
+  const [isEditing, setIsEditing] = useState(false);
+  const [draft, setDraft] = useState('');
+  const plain = extractMessageText(message.content);
+  const canEdit = Boolean(onEditMessage) && isLastHuman && !isLoading;
+
+  const startEdit = () => {
+    setDraft(plain);
+    setIsEditing(true);
+  };
+
+  const cancelEdit = () => {
+    setIsEditing(false);
+    setDraft('');
+  };
+
+  const saveEdit = () => {
+    const trimmed = draft.trim();
+    if (trimmed === '' || !onEditMessage) return;
+    onEditMessage(messageIndex, trimmed);
+    setIsEditing(false);
+  };
+
   return (
-    <div
-      className={`text-white rounded-3xl break-words min-h-7 bg-neutral-700 max-w-[100%] sm:max-w-[90%] p-3 rounded-br-xs`}
-    >
-      <ReactMarkdown components={mdComponents}>
-        {typeof message.content === "string"
-          ? message.content
-          : JSON.stringify(message.content)}
-      </ReactMarkdown>
+    <div className="flex items-end gap-3 justify-end group/msg">
+      <div
+        className={cn(
+          "relative rounded-2xl rounded-br-sm break-words max-w-[85%] sm:max-w-[75%] px-4 py-3 bg-primary text-primary-foreground shadow-card",
+          isEditing && "w-full sm:w-[75%]",
+        )}
+      >
+        {isEditing ? (
+          <div className="space-y-2">
+            <textarea
+              value={draft}
+              onChange={(e) => setDraft(e.target.value)}
+              className="w-full min-h-[88px] rounded-lg border border-primary-foreground/35 bg-primary-foreground/10 p-2.5 text-sm text-primary-foreground placeholder:text-primary-foreground/50 focus:outline-none focus:ring-2 focus:ring-primary-foreground/40"
+              aria-label="Edit message"
+            />
+            <div className="flex flex-wrap gap-2">
+              <button
+                type="button"
+                onClick={() => saveEdit()}
+                aria-label="Save edited message"
+                className="rounded-md bg-primary-foreground px-3 py-1.5 text-xs font-medium text-primary hover:bg-primary-foreground/90"
+              >
+                Save
+              </button>
+              <button
+                type="button"
+                onClick={() => cancelEdit()}
+                aria-label="Cancel editing message"
+                className="rounded-md border border-primary-foreground/40 px-3 py-1.5 text-xs font-medium text-primary-foreground hover:bg-primary-foreground/10"
+              >
+                Cancel
+              </button>
+            </div>
+          </div>
+        ) : (
+          <>
+            {canEdit && (
+              <button
+                type="button"
+                onClick={() => startEdit()}
+                className="absolute right-3 top-3 z-10 inline-flex h-7 w-7 items-center justify-center rounded-md text-primary-foreground/80 opacity-0 transition-opacity hover:bg-primary-foreground/15 hover:text-primary-foreground group-hover/msg:opacity-100"
+                aria-label="Edit message"
+              >
+                <Pencil className="h-3.5 w-3.5" />
+              </button>
+            )}
+            <div className="text-sm leading-relaxed [&_p]:!text-primary-foreground [&_p]:!mb-1.5 [&_p:last-child]:!mb-0">
+              <ReactMarkdown remarkPlugins={[remarkGfm]} components={mdComponents}>
+                {plain}
+              </ReactMarkdown>
+            </div>
+          </>
+        )}
+      </div>
+      <div className="flex-shrink-0 w-8 h-8 rounded-full bg-primary/10 border border-primary/20 flex items-center justify-center">
+        <User className="w-4 h-4 text-primary" />
+      </div>
     </div>
   );
 };
 
-// Props for AiMessageBubble
 interface AiMessageBubbleProps {
   message: Message;
-  mdComponents?: typeof mdComponents;
-  handleCopy?: (text: string, messageId: string) => void;
-  copiedMessageId?: string | null;
 }
 
-// AiMessageBubble Component
-const AiMessageBubble: React.FC<AiMessageBubbleProps> = ({
-  message,
-  handleCopy = () => { },
-  copiedMessageId = '',
-}) => {
+const AiMessageBubble: React.FC<AiMessageBubbleProps> = ({ message }) => {
+  const { thinkingText, markdownForDisplay } = partitionMessageContent(message.content);
+  const [thinkingExpanded, setThinkingExpanded] = useState(false);
+  const customRaw = (message as Record<string, unknown>).custom_data;
+  const customData =
+    customRaw != null && typeof customRaw === 'object' && !Array.isArray(customRaw)
+      ? (customRaw as Record<string, unknown>)
+      : null;
+  const bodyMd =
+    markdownForDisplay.length > 0
+      ? markdownForDisplay
+      : thinkingText.length > 0
+        ? ''
+        : extractMessageText(message.content);
+
   return (
-    <div className={`relative break-words flex flex-col w-full`}>
-      <div className="w-full prose prose-invert max-w-none">
-        <ReactMarkdown components={mdComponents}>
-          {typeof message.content === "string"
-            ? message.content
-            : JSON.stringify(message.content)}
-        </ReactMarkdown>
+    <div className="flex items-start gap-3">
+      <div className="flex-shrink-0 w-8 h-8 rounded-full gradient-brand flex items-center justify-center shadow-sm">
+        <Bot className="w-4 h-4 text-white" />
+      </div>
+      <div className="flex-1 min-w-0 max-w-[85%] sm:max-w-[80%]">
+        <div className="bg-card border border-border rounded-2xl rounded-tl-sm px-4 py-3 shadow-card">
+          {thinkingText.length > 0 && (
+            <div className="mb-3">
+              <ExpandableSection
+                toggleText="Thinking..."
+                isExpanded={thinkingExpanded}
+                onToggle={(_e, expanded) => setThinkingExpanded(expanded)}
+                isIndented
+                className="pf-v6-u-mb-0"
+              >
+                <div className="mt-2 rounded-lg bg-muted/70 p-3 font-mono text-xs leading-relaxed text-foreground/85 whitespace-pre-wrap border border-border/60">
+                  {thinkingText}
+                </div>
+              </ExpandableSection>
+            </div>
+          )}
+          {bodyMd.length > 0 && (
+            <div className="prose prose-sm dark:prose-invert max-w-none text-sm leading-relaxed">
+              <ReactMarkdown remarkPlugins={[remarkGfm]} components={mdComponents}>{bodyMd}</ReactMarkdown>
+            </div>
+          )}
+          {customData && <CustomDataRenderer data={customData} />}
+        </div>
       </div>
     </div>
   );
 };
 
-interface ChatMessagesViewProps {
-  messages: Message[];
-  streamEvents?: StreamEvent[];
-  isLoading: boolean;
-  scrollAreaRef: React.RefObject<HTMLDivElement | null>;
-  onSubmit: (inputValue: string) => void;
-  onCancel: () => void;
-  liveActivityEvents: ProcessedEvent[];
-  historicalActivities: Record<string, ProcessedEvent[]>;
+interface AIMessageRendererProps {
+  message: Message;
+  pendingInterrupt?: InterruptInfo | null;
+  onInterruptResume?: (decisions: Array<{ type: 'approve' | 'reject'; message?: string }>) => void;
+  onAlwaysAllow?: (toolNames: string[]) => void;
 }
 
-export function AIMessageRenderer({ message }: { message: Message }) {
+export function AIMessageRenderer({ message, pendingInterrupt, onInterruptResume, onAlwaysAllow }: AIMessageRendererProps) {
   const [expandedItems, setExpandedItems] = useState<Set<string>>(new Set());
+  const [approvalSubmitted, setApprovalSubmitted] = useState(false);
+  const messageKey = JSON.stringify(message);
+
+  useEffect(() => {
+    if (pendingInterrupt) {
+      setApprovalSubmitted(false);
+    }
+  }, [pendingInterrupt]);
+
+  const pendingToolNames = useMemo(
+    () => {
+      const v = pendingInterrupt?.value;
+      const requests = (typeof v === 'object' && v !== null) ? (v.action_requests ?? []) : [];
+      return new Set(requests.map((r) => r.name));
+    },
+    [pendingInterrupt],
+  );
+
+  useEffect(() => {
+    if (!pendingToolNames.size) return;
+    const allToolCalls = (message as any).tool_calls;
+    if (!Array.isArray(allToolCalls)) return;
+    const visibleCalls = allToolCalls.filter(
+      (tc: any) => !isSubAgentToolCall(tc) && tc.name !== 'write_todos',
+    );
+    setExpandedItems((prev) => {
+      const next = new Set(prev);
+      visibleCalls.forEach((tc: any, idx: number) => {
+        if (pendingToolNames.has(tc.name) || pendingToolNames.has('task')) {
+          next.add(`${message.id}-${idx}`);
+        }
+      });
+      return next;
+    });
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [pendingToolNames, message.id]);
 
   const toggleExpand = (itemId: string) => {
-    console.log('toggleExpand : ', itemId);
     setExpandedItems(prev => {
       const newSet = new Set(prev);
       if (newSet.has(itemId)) {
@@ -235,229 +520,460 @@ export function AIMessageRenderer({ message }: { message: Message }) {
   };
 
   const renderMessage = useMemo(() => {
-
     const isToolCallStart = message.type === 'ai' && Array.isArray(message?.tool_calls) && message?.tool_calls?.length > 0;
-    const isToolCallResult = message.type === 'tool';
     const isNormalMessage = message.type === 'ai' && (!Array.isArray(message?.tool_calls) || message?.tool_calls?.length === 0);
 
+    const customRaw = (message as Record<string, unknown>).custom_data;
+    const customData =
+      customRaw != null && typeof customRaw === 'object' && !Array.isArray(customRaw)
+        ? (customRaw as Record<string, unknown>)
+        : null;
+
     if (isToolCallStart) {
-      // const color = (toolCall as any).content ? 'green' : 'blue';
-      return (
-        <>
-          {
-            message.tool_calls?.map((toolCall, idx) => (
-              <div key={`${message.id}-${idx}`} className="bg-blue-900/20 border border-blue-700/30 rounded-lg overflow-hidden w-full">
-                <button
-                  onClick={() => toggleExpand(`${message.id}-${idx}`)}
-                  className="w-full flex items-center justify-between p-4 hover:bg-blue-800/20 transition-colors"
-                >
-                  <div className="flex items-center gap-3">
-                    <Settings className="w-5 h-5 text-blue-400" />
-                    <div className="text-left">
-                      <div className="text-sm font-medium text-blue-100 flex items-center gap-2">
-                        {toolCall.name}
-                        {
-                          (toolCall as any).content ? (
-                            <CheckCircle className="w-4 h-4 text-green-400" />
-                          ) : (
-                            <Loader2 className="w-4 h-4 text-blue-400 animate-spin" />
-                          )
-                        }
-                      </div>
+      const subAgentCalls = message.tool_calls?.filter((tc) => isSubAgentToolCall(tc)) ?? [];
+      const regularCalls = message.tool_calls?.filter((tc) => !isSubAgentToolCall(tc) && tc.name !== 'write_todos') ?? [];
 
-                      <div className="text-xs text-blue-200/60">
-                        Tool execution
-                      </div>
-                    </div>
-                  </div>
-                  {expandedItems.has(`${message.id}-${idx}`) ? (
-                    <ChevronDown className="w-4 h-4 text-blue-400" />
-                  ) : (
-                    <ChevronRight className="w-4 h-4 text-blue-400" />
-                  )}
-                </button>
+      return (
+        <div className="space-y-2 w-full">
+          {subAgentCalls.map((toolCall, idx) => (
+            <SubAgentIndicator
+              key={`${message.id}-sa-${idx}`}
+              toolCall={toolCall as any}
+              messageId={message.id ?? ''}
+              index={idx}
+              pendingInterrupt={pendingInterrupt}
+              onInterruptResume={onInterruptResume}
+              onAlwaysAllow={onAlwaysAllow}
+            />
+          ))}
 
-                {expandedItems.has(`${message.id}-${idx}`) && (
-                  <div className="px-4 pb-4 border-t border-blue-700/20">
-                    <div className="text-xs text-blue-200/60 mb-2">Arguments:</div>
-                    <pre className="text-xs text-blue-100 bg-blue-950/30 p-2 rounded overflow-auto">
-                      {JSON.stringify(toolCall.args, null, 2)}
-                    </pre>
-                    <div className="text-xs text-blue-200/60 mb-2">
-                      {
-                        (toolCall as any).content ? 'Result:' : 'Running...:'
-                      }
-                    </div>
-                    <pre className="text-xs text-green-100 bg-green-950/30 p-2 rounded overflow-auto">
-                      {JSON.stringify((toolCall as any).content, null, 2)}
-                    </pre>
-                  </div>
-                )}
+          {regularCalls.length > 0 && (
+            <div className="flex items-start gap-3">
+              <div className="flex-shrink-0 w-8 h-8 rounded-full bg-secondary border border-border flex items-center justify-center">
+                <Settings className="w-4 h-4 text-muted-foreground" />
               </div>
-            ))
-          }
-        </>
-      );
-    }
+              <div className="flex-1 min-w-0 space-y-2">
+                {regularCalls.map((toolCall, idx) => {
+                  const itemId = `${message.id}-${idx}`;
+                  const isExpanded = expandedItems.has(itemId);
+                  const needsApproval = (pendingToolNames.has(toolCall.name) || pendingToolNames.has('task')) && !(toolCall as Record<string, unknown>).content;
 
+                  return (
+                    <div
+                      key={itemId}
+                      className={cn(
+                        "bg-card border rounded-xl overflow-hidden shadow-card transition-colors",
+                        needsApproval ? "border-yellow-500/60" : "border-border",
+                      )}
+                    >
+                      <button
+                        onClick={() => toggleExpand(itemId)}
+                        aria-expanded={isExpanded}
+                        aria-controls={`tool-body-${itemId}`}
+                        aria-label={`${isExpanded ? 'Collapse' : 'Expand'} tool call: ${toolCall.name}`}
+                        className="w-full flex items-center justify-between p-3.5 hover:bg-muted/50 transition-colors"
+                      >
+                        <div className="flex items-center gap-2.5">
+                          <div className="text-left">
+                            <div className="text-sm font-medium text-foreground flex items-center gap-2">
+                              <code className="text-xs font-mono bg-muted px-1.5 py-0.5 rounded">{toolCall.name}</code>
+                              {(toolCall as Record<string, unknown>).content != null ? (
+                                <CheckCircle className="w-4 h-4 text-green-500 dark:text-green-400" aria-hidden="true" />
+                              ) : (
+                                <Loader2 className="w-4 h-4 text-primary animate-spin" aria-hidden="true" />
+                              )}
+                            </div>
+                            <div className="text-xs text-muted-foreground mt-0.5">Tool execution</div>
+                          </div>
+                        </div>
+                        {isExpanded ? (
+                          <ChevronDown className="w-4 h-4 text-muted-foreground" aria-hidden="true" />
+                        ) : (
+                          <ChevronRight className="w-4 h-4 text-muted-foreground" aria-hidden="true" />
+                        )}
+                      </button>
 
-    if (isToolCallResult) {
-      return (
-        <>
-          <div key={message.id} className="bg-green-900/20 border border-green-700/30 rounded-lg overflow-hidden ml-6 w-full">
-            <button
-              onClick={() => toggleExpand(message.id || '')}
-              className="w-full flex items-center justify-between p-3 hover:bg-green-800/20 transition-colors"
-            >
-              <div className="flex items-center gap-3">
-                <CheckCircle className="w-4 h-4 text-green-400" />
-                <div className="text-left">
-                  <div className="text-sm font-medium text-green-100">
-                    {message.name} result
-                  </div>
-                  <div className="text-xs text-green-200/60">
-                    Execution completed
-                  </div>
-                </div>
-              </div>
-              {expandedItems.has(message.id || '') ? (
-                <ChevronDown className="w-4 h-4 text-green-400" />
-              ) : (
-                <ChevronRight className="w-4 h-4 text-green-400" />
-              )}
-            </button>
-
-            {expandedItems.has(message.id || '') && (
-              <div className="px-3 pb-3 border-t border-green-700/20">
-                <div className="text-xs text-green-200/60 mb-2">Result:</div>
-                <pre className="text-xs text-green-100 bg-green-950/30 p-2 rounded overflow-auto max-h-40">
-                  {typeof message.content === 'string' ? message.content : JSON.stringify(message.content, null, 2)}
-                </pre>
+                      {isExpanded && (
+                        <div id={`tool-body-${itemId}`} className="border-t border-border">
+                          <div className="px-4 pb-3">
+                            <div className="text-xs font-medium text-muted-foreground mb-2 mt-3 uppercase tracking-wider">Arguments</div>
+                            <pre className="text-xs text-foreground bg-muted border border-border p-3 rounded-lg overflow-auto font-mono">
+                              {JSON.stringify(toolCall.args, null, 2)}
+                            </pre>
+                            {!needsApproval && (
+                              <>
+                                <div className="text-xs font-medium text-muted-foreground mb-2 mt-3 uppercase tracking-wider">
+                                  {(toolCall as Record<string, unknown>).content ? 'Result' : 'Running...'}
+                                </div>
+                                {(() => {
+                                  const raw = (toolCall as Record<string, unknown>).content;
+                                  if (raw == null) return <p className="text-xs text-muted-foreground italic">Waiting...</p>;
+                                  const text = typeof raw === 'string' ? raw : JSON.stringify(raw, null, 2);
+                                  const kind = detectArtifactKind(text);
+                                  if (kind !== 'text' && text.length > 100) {
+                                    return <ArtifactViewer content={text} title={`${toolCall.name} result`} />;
+                                  }
+                                  return (
+                                    <pre className="text-xs text-foreground bg-muted border border-border p-3 rounded-lg overflow-auto font-mono">
+                                      {text}
+                                    </pre>
+                                  );
+                                })()}
+                              </>
+                            )}
+                          </div>
+
+                          {needsApproval && !approvalSubmitted && onInterruptResume && (
+                            <div role="alert" aria-live="assertive" aria-label={`Tool call ${toolCall.name} requires approval`} className="flex items-center gap-2 px-4 py-3 border-t border-yellow-500/30 bg-yellow-500/5 flex-wrap">
+                              <button
+                                type="button"
+                                autoFocus
+                                onClick={() => {
+                                  setApprovalSubmitted(true);
+                                  const count = ((pendingInterrupt?.value as any)?.action_requests ?? []).length || 1;
+                                  onInterruptResume(Array.from({ length: count }, () => ({ type: 'approve' as const })));
+                                }}
+                                aria-label={`Approve tool call: ${toolCall.name}`}
+                                className="inline-flex items-center gap-1.5 px-3 py-1.5 rounded-lg text-xs font-medium transition-colors"
+                                style={{ backgroundColor: 'var(--chart-3)', color: 'var(--background)' }}
+                              >
+                                <Check className="w-3 h-3" aria-hidden="true" />
+                                Approve
+                              </button>
+                              <button
+                                type="button"
+                                onClick={() => {
+                                  setApprovalSubmitted(true);
+                                  const count = ((pendingInterrupt?.value as any)?.action_requests ?? []).length || 1;
+                                  onInterruptResume(Array.from({ length: count }, () => ({ type: 'reject' as const, message: 'User rejected this action.' })));
+                                }}
+                                aria-label={`Reject tool call: ${toolCall.name}`}
+                                className="inline-flex items-center gap-1.5 px-3 py-1.5 rounded-lg text-xs font-medium hover:opacity-90 transition-colors"
+                                style={{ backgroundColor: 'var(--destructive)', color: 'var(--background)' }}
+                              >
+                                Reject
+                              </button>
+                              <button
+                                type="button"
+                                onClick={() => {
+                                  setApprovalSubmitted(true);
+                                  const count = ((pendingInterrupt?.value as any)?.action_requests ?? []).length || 1;
+                                  onAlwaysAllow?.([toolCall.name]);
+                                  onInterruptResume(Array.from({ length: count }, () => ({ type: 'approve' as const })));
+                                }}
+                                aria-label={`Always allow tool: ${toolCall.name}`}
+                                className="inline-flex items-center gap-1.5 px-3 py-1.5 rounded-lg text-xs font-medium border border-border bg-muted text-foreground hover:bg-muted/70 transition-colors"
+                              >
+                                <ShieldCheck className="w-3 h-3" aria-hidden="true" />
+                                Always allow
+                              </button>
+                            </div>
+                          )}
+                        </div>
+                      )}
+                    </div>
+                  );
+                })}
               </div>
-            )}
-          </div>
-        </>
+            </div>
+          )}
+          {customData && (
+            <div className="w-full mt-2">
+              <CustomDataRenderer data={customData} />
+            </div>
+          )}
+        </div>
       );
     }
 
     if (isNormalMessage) {
-      return (
-        <AiMessageBubble message={message} />
-      );
+      return <AiMessageBubble message={message} />;
     }
 
-  }, [JSON.stringify(message), expandedItems]);
-
+    return null;
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [messageKey, expandedItems, approvalSubmitted, pendingInterrupt, onInterruptResume, onAlwaysAllow]);
 
   return (
-    <div className="space-y-2 mb-4 w-full">
+    <div className="space-y-2 w-full">
       {renderMessage}
-
-      {/* {isLoading && (
-        <div className="flex items-center gap-2 text-xs text-neutral-500 justify-center py-2">
-          <Loader2 className="w-3 h-3 animate-spin" />
-          Processing...
-        </div>
-      )} */}
     </div>
   );
 }
 
+interface ChatMessagesViewProps {
+  messages: Message[];
+  streamEvents?: StreamEvent[];
+  isLoading: boolean;
+  pendingInterrupt?: InterruptInfo | null;
+  onInterruptResume?: (decisions: Array<{ type: 'approve' | 'reject'; message?: string }>) => void;
+  onAlwaysAllow?: (toolNames: string[]) => void;
+  interruptContent?: React.ReactNode;
+  scrollAreaRef: React.RefObject<HTMLDivElement | null>;
+  onSubmit: (inputValue: string) => void;
+  onRetry?: () => void;
+  onCancel: () => void;
+  onNewChat?: () => void;
+  liveActivityEvents: ProcessedEvent[];
+  historicalActivities: Record<string, ProcessedEvent[]>;
+  isRateLimited?: boolean;
+  rateLimitRemainingSeconds?: number;
+  mcpEvents?: Array<{ tool: string; status: string; timestamp: number }>;
+  chatId: string;
+  traceId: string | null;
+  userId?: string;
+  messageFeedback?: Record<string, 'up' | 'down'>;
+  onEditMessage?: (messageIndex: number, newContent: string) => void;
+  lastResponseTiming?: {
+    timeToFirstTokenMs: number | null;
+    totalDurationMs: number;
+  } | null;
+  chatInputRef?: React.RefObject<HTMLTextAreaElement | null>;
+  onExportMarkdown?: () => void;
+  onExportJson?: () => void;
+}
 
 export function ChatMessagesView({
   messages,
-  streamEvents = [],
   isLoading,
+  pendingInterrupt,
+  onInterruptResume,
+  onAlwaysAllow,
+  interruptContent,
   scrollAreaRef,
   onSubmit,
+  onRetry,
   onCancel,
+  onNewChat,
+  isRateLimited = false,
+  rateLimitRemainingSeconds = 0,
+  mcpEvents = [],
+  chatId,
+  traceId,
+  userId,
+  messageFeedback = {},
+  onEditMessage,
+  lastResponseTiming = null,
+  chatInputRef,
+  onExportMarkdown,
+  onExportJson,
 }: ChatMessagesViewProps) {
-  const [copiedMessageId, setCopiedMessageId] = useState<string | null>(null);
-
-  const handleCopy = async (text: string, messageId: string) => {
-    try {
-      await navigator.clipboard.writeText(text);
-      setCopiedMessageId(messageId);
-      setTimeout(() => setCopiedMessageId(null), 2000); // Reset after 2 seconds
-    } catch (err) {
-      console.error("Failed to copy text: ", err);
+  const bottomRef = useRef<HTMLDivElement>(null);
+  const [exportMenuOpen, setExportMenuOpen] = useState(false);
+  const prevPendingInterrupt = useRef(pendingInterrupt);
+
+  useEffect(() => {
+    if (prevPendingInterrupt.current && !pendingInterrupt) {
+      chatInputRef?.current?.focus();
     }
-  };
+    prevPendingInterrupt.current = pendingInterrupt;
+  }, [pendingInterrupt, chatInputRef]);
+
+  const { lastHumanMessageIndex, lastAiMessageIndex } = useMemo(() => {
+    let lastHuman = -1;
+    let lastAi = -1;
+    messages.forEach((m, i) => {
+      if (m.type === 'human') lastHuman = i;
+      if (m.type === 'ai') lastAi = i;
+    });
+    return { lastHumanMessageIndex: lastHuman, lastAiMessageIndex: lastAi };
+  }, [messages]);
+
+  const lastMessage = messages[messages.length - 1];
+  const rawNoResponse = !isLoading && !pendingInterrupt && !interruptContent && messages.length > 0 && lastMessage?.type === 'human';
+  const [showNoResponse, setShowNoResponse] = useState(false);
+
+  useEffect(() => {
+    if (!rawNoResponse) {
+      setShowNoResponse(false);
+      return;
+    }
+    const timer = setTimeout(() => setShowNoResponse(true), 1500);
+    return () => clearTimeout(timer);
+  }, [rawNoResponse]);
+
+  useEffect(() => {
+    bottomRef.current?.scrollIntoView({ behavior: 'smooth' });
+  }, [messages]);
+
+  const showExport = Boolean(onExportMarkdown && onExportJson && messages.length > 0);
+
   return (
-    <div className="flex flex-col h-full">
-      <ScrollArea className="flex-1 overflow-y-auto" ref={scrollAreaRef}>
-        <div className="p-4 md:p-6 space-y-2 max-w-4xl mx-auto pt-16">
-          {messages.map((message, index) => {
+    <div className="flex flex-col h-full min-h-0 overflow-hidden">
+      {showExport && (
+        <div className="shrink-0 flex justify-end items-center px-4 md:px-6 py-2 border-b border-border bg-background/90">
+          <Dropdown
+            isOpen={exportMenuOpen}
+            onOpenChange={(open) => setExportMenuOpen(open)}
+            onSelect={(_event, value) => {
+              if (value === 'md') onExportMarkdown?.();
+              if (value === 'json') onExportJson?.();
+              setExportMenuOpen(false);
+            }}
+            shouldFocusToggleOnSelect
+            toggle={(toggleRef: React.Ref<MenuToggleElement>) => (
+              <MenuToggle
+                ref={toggleRef}
+                variant="plain"
+                onClick={() => setExportMenuOpen((o) => !o)}
+                isExpanded={exportMenuOpen}
+                aria-label="Export conversation"
+                icon={<Download className="w-4 h-4" />}
+              />
+            )}
+          >
+            <DropdownList>
+              <DropdownItem value="md" key="md">
+                Export as Markdown
+              </DropdownItem>
+              <DropdownItem value="json" key="json">
+                Export as JSON
+              </DropdownItem>
+            </DropdownList>
+          </Dropdown>
+        </div>
+      )}
+      <div className="flex-1 min-h-0 overflow-y-auto chat-scroll" ref={scrollAreaRef}>
+        <div role="log" aria-label="Chat messages" aria-live="polite" aria-busy={isLoading} className="p-4 md:p-6 space-y-5 max-w-3xl mx-auto pt-8">
+          {messages.map((message, messageIndex) => {
+            if (message.type === 'tool') {
+              return <Fragment key={message.id ?? `m-${messageIndex}`} />;
+            }
+            const copyText = getCopyableAiMessageText(message.content);
+            const showResponseTiming =
+              message.type === 'ai' &&
+              messageIndex === lastAiMessageIndex &&
+              lastResponseTiming != null &&
+              !isLoading;
+
+            const isLastAiInTurn =
+              message.type === 'ai' &&
+              (() => {
+                for (let i = messageIndex + 1; i < messages.length; i++) {
+                  if (messages[i].type === 'human') return true;
+                  if (messages[i].type === 'ai') return false;
+                }
+                return true;
+              })();
+
             return (
-              <div key={message.id || `msg-${index}`} className="space-y-3">
-                <div
-                  className={`flex items-start gap-3 ${message.type === "human" ? "justify-end" : ""
-                    }`}
-                >
-                  {message.type === "human" ? (
-                    <HumanMessageBubble
-                      message={message}
-                      mdComponents={mdComponents}
-                    />
-                  ) : (
-                    <div className="w-full max-w-[85%] md:max-w-[80%]">
-                      <AIMessageRenderer
-                        message={message}
+            <div
+              key={message.id || `msg-${messageIndex}`}
+              role="article"
+              aria-label={`Message from ${message.type === 'human' ? 'human' : 'assistant'}`}
+              className="animate-fadeInUpSmooth group"
+              style={{ animationDelay: `${Math.min(messageIndex * 30, 150)}ms`, opacity: 0 }}
+            >
+              {message.type === "human" ? (
+                <HumanMessageBubble
+                  message={message}
+                  messageIndex={messageIndex}
+                  isLastHuman={messageIndex === lastHumanMessageIndex}
+                  isLoading={isLoading}
+                  onEditMessage={onEditMessage}
+                />
+              ) : (
+                <div className="w-full space-y-0">
+                  <AIMessageRenderer
+                    message={message}
+                    pendingInterrupt={pendingInterrupt}
+                    onInterruptResume={onInterruptResume}
+                    onAlwaysAllow={onAlwaysAllow}
+                  />
+                  {isLastAiInTurn && (
+                    <div className="pl-11 flex items-center gap-0.5 mt-1">
+                      <MessageCopyButton text={copyText} />
+                      <FeedbackButtons
+                        messageId={message.id ?? `msg-${messageIndex}`}
+                        chatId={chatId}
+                        traceId={traceId}
+                        userId={userId}
+                        existingFeedback={messageFeedback[message.id ?? `msg-${messageIndex}`] ?? null}
                       />
                     </div>
                   )}
+                  {showResponseTiming && (
+                    <div aria-hidden="true" className="pl-11 mt-1 space-y-0.5 text-muted-foreground">
+                      <div className="text-[11px] text-muted-foreground/80">
+                        Response time: {(lastResponseTiming.totalDurationMs / 1000).toFixed(1)}s
+                      </div>
+                      {lastResponseTiming.timeToFirstTokenMs != null && (
+                        <div className="text-[10px] text-muted-foreground/65">
+                          First token: {Math.round(lastResponseTiming.timeToFirstTokenMs)}ms
+                        </div>
+                      )}
+                    </div>
+                  )}
                 </div>
-              </div>
-            );
+              )}
+            </div>
+          );
           })}
 
-          {/* {streamEvents && streamEvents.length > 0 && (
-            <div className="mb-3">
-              <StreamEventRenderer
-                events={streamEvents}
-                isLoading={isLoading}
-              />
+          {isLoading && (
+            <div
+              className="flex items-start gap-3 animate-fadeIn"
+              role="status"
+              aria-live="assertive"
+              aria-label="Agent is thinking"
+            >
+              <div className="flex-shrink-0 w-8 h-8 rounded-full gradient-brand flex items-center justify-center shadow-sm">
+                <Bot className="w-4 h-4 text-white" />
+              </div>
+              <div className="bg-card border border-border rounded-2xl rounded-tl-sm px-4 py-3 shadow-card">
+                <div className="flex items-center gap-2 text-sm text-muted-foreground">
+                  <span className="flex gap-1">
+                    <span className="w-1.5 h-1.5 rounded-full bg-primary animate-bounce" />
+                    <span className="w-1.5 h-1.5 rounded-full bg-primary animate-bounce animation-delay-200" />
+                    <span className="w-1.5 h-1.5 rounded-full bg-primary animate-bounce animation-delay-400" />
+                  </span>
+                  Thinking...
+                </div>
+              </div>
+            </div>
+          )}
+
+          {showNoResponse && (
+            <div className="flex items-start gap-3 animate-fadeIn">
+              <div className="flex-shrink-0 w-8 h-8 rounded-full bg-destructive/10 border border-destructive/20 flex items-center justify-center">
+                <AlertCircle className="w-4 h-4 text-destructive" />
+              </div>
+              <div className="bg-card border border-border rounded-2xl rounded-tl-sm px-4 py-3 shadow-card">
+                <p className="text-sm text-muted-foreground mb-2">
+                  The agent didn&apos;t respond. This could be a temporary issue.
+                </p>
+                <button
+                  type="button"
+                  onClick={() => onRetry?.()}
+                  className="inline-flex items-center gap-1.5 px-3 py-1.5 text-xs font-medium bg-primary text-primary-foreground rounded-lg hover:bg-primary/90 transition-colors"
+                  aria-label="Retry operation"
+                >
+                  <RotateCcw className="w-3 h-3" />
+                  Retry
+                </button>
+              </div>
             </div>
-          )} */}
-          {
-            // isLoading &&
-            //   (messages.length === 0 ||
-            //     messages[messages.length - 1].type === "human") && (
-            //     <div className="flex items-start gap-3 mt-3">
-            //       {" "}
-            //       {/* AI message row structure */}
-            //       <div className="relative group max-w-[85%] md:max-w-[80%] rounded-xl p-3 shadow-sm break-words bg-neutral-800 text-neutral-100 rounded-bl-none w-full min-h-[56px]">
-            //         {liveActivityEvents.length > 0 ? (
-            //           <div className="text-xs">
-            //             <ActivityTimeline
-            //               processedEvents={liveActivityEvents}
-            //               isLoading={true}
-            //             />
-            //           </div>
-            //         ) : (
-            //           <div className="flex items-center justify-start h-full">
-            //             <Loader2 className="h-5 w-5 animate-spin text-neutral-400 mr-2" />
-            //             <span>Processing...</span>
-            //           </div>
-            //         )}
-            //       </div>
-            //     </div>
-            //   )
-          }
+          )}
+          {interruptContent}
+          <div ref={bottomRef} />
         </div>
-        {isLoading && (
-          <div className="flex items-center gap-2 text-xs text-neutral-500 justify-center py-2">
-            <Loader2 className="w-3 h-3 animate-spin" />
-            Processing...
-          </div>
-        )}
-      </ScrollArea>
-      <InputForm
-        onSubmit={onSubmit}
-        isLoading={isLoading}
-        onCancel={onCancel}
-        hasHistory={messages.length > 0}
-      />
+      </div>
+      <TodoStrip messages={messages} isLoading={isLoading} />
+      <McpStatusPanel mcpEvents={mcpEvents} />
+      <div className="border-t border-border bg-background/80 glass">
+        <div className="max-w-3xl mx-auto">
+          <InputForm
+            ref={chatInputRef}
+            onSubmit={onSubmit}
+            isLoading={isLoading}
+            onCancel={onCancel}
+            onNewChat={onNewChat}
+            hasHistory={messages.length > 0}
+            isRateLimited={isRateLimited}
+            rateLimitRemainingSeconds={rateLimitRemainingSeconds}
+          />
+        </div>
+      </div>
     </div>
   );
 }
diff --git a/src/frontend/components/CustomDataRenderer.tsx b/src/frontend/components/CustomDataRenderer.tsx
new file mode 100644
index 00000000..8f81ea27
--- /dev/null
+++ b/src/frontend/components/CustomDataRenderer.tsx
@@ -0,0 +1,86 @@
+import { Table, Thead, Tbody, Tr, Th, Td } from '@patternfly/react-table';
+
+export interface CustomDataRendererProps {
+  data: Record<string, unknown>;
+}
+
+function isNonEmptyString(v: unknown): v is string {
+  return typeof v === 'string' && v.length > 0;
+}
+
+function PrettyJsonBlock({ value }: { value: unknown }) {
+  let text: string;
+  try {
+    text = JSON.stringify(value, null, 2);
+  } catch {
+    text = String(value);
+  }
+  return (
+    <pre className="bg-muted border border-border rounded-lg p-3 text-xs font-mono overflow-x-auto my-2">
+      {text}
+    </pre>
+  );
+}
+
+export function CustomDataRenderer({ data }: CustomDataRendererProps) {
+  const type = data.type;
+
+  if (type === 'table' && Array.isArray(data.headers) && Array.isArray(data.rows)) {
+    const headers = data.headers.filter(isNonEmptyString) as string[];
+    const rows = data.rows as unknown[];
+    if (headers.length === 0) {
+      return <PrettyJsonBlock value={data} />;
+    }
+    return (
+      <div className="my-3 overflow-x-auto rounded-lg border border-border">
+        <Table aria-label="Structured data table" borders>
+          <Thead>
+            <Tr>
+              {headers.map((h) => (
+                <Th key={h} modifier="wrap">
+                  {h}
+                </Th>
+              ))}
+            </Tr>
+          </Thead>
+          <Tbody>
+            {rows.map((row, ri) => {
+              const cells = Array.isArray(row) ? row : [row];
+              return (
+                <Tr key={`row-${ri}`}>
+                  {headers.map((_, ci) => (
+                    <Td key={`cell-${ri}-${ci}`} dataLabel={headers[ci]}>
+                      {cells[ci] != null && typeof cells[ci] === 'object' ? (
+                        <code className="text-xs font-mono">{JSON.stringify(cells[ci])}</code>
+                      ) : (
+                        String(cells[ci] ?? '')
+                      )}
+                    </Td>
+                  ))}
+                </Tr>
+              );
+            })}
+          </Tbody>
+        </Table>
+      </div>
+    );
+  }
+
+  if (type === 'json') {
+    const payload = 'value' in data ? data.value : data;
+    return <PrettyJsonBlock value={payload} />;
+  }
+
+  if (type === 'list' && Array.isArray(data.items)) {
+    const items = data.items;
+    return (
+      <ul className="list-disc pl-6 my-2 space-y-1 text-sm text-foreground/90">
+        {items.map((item, i) => (
+          <li key={`item-${i}`}>{typeof item === 'object' ? JSON.stringify(item) : String(item)}</li>
+        ))}
+      </ul>
+    );
+  }
+
+  return <PrettyJsonBlock value={data} />;
+}
diff --git a/src/frontend/components/DebugPanel.tsx b/src/frontend/components/DebugPanel.tsx
new file mode 100644
index 00000000..3e66221c
--- /dev/null
+++ b/src/frontend/components/DebugPanel.tsx
@@ -0,0 +1,66 @@
+import type { Message } from '@langchain/langgraph-sdk';
+import {
+  Card,
+  CardBody,
+  CardHeader,
+  CardTitle,
+} from '@patternfly/react-core';
+import type { StreamingState } from '../redux/slices/chats';
+
+interface DebugPanelProps {
+  readonly messages: Message[];
+  readonly streamingState: StreamingState;
+}
+
+export function DebugPanel({ messages, streamingState }: DebugPanelProps) {
+  const aiMessages = messages.filter((m) => m.type === 'ai');
+  const toolMessages = messages.filter((m) => m.type === 'tool');
+  const humanMessages = messages.filter((m) => m.type === 'human');
+
+  const totalToolCalls = aiMessages.reduce((acc, m) => {
+    const tcs = (m as any).tool_calls;
+    return acc + (Array.isArray(tcs) ? tcs.length : 0);
+  }, 0);
+
+  return (
+    <Card isCompact className="border-yellow-500/30 bg-yellow-500/5">
+      <CardHeader>
+        <CardTitle className="text-xs font-mono text-yellow-600 dark:text-yellow-400">
+          Debug
+        </CardTitle>
+      </CardHeader>
+      <CardBody className="!pt-0 space-y-2">
+        <div className="grid grid-cols-2 gap-x-4 gap-y-1 text-[10px] font-mono">
+          <span className="text-muted-foreground">Messages</span>
+          <span>{messages.length}</span>
+          <span className="text-muted-foreground">Human</span>
+          <span>{humanMessages.length}</span>
+          <span className="text-muted-foreground">AI</span>
+          <span>{aiMessages.length}</span>
+          <span className="text-muted-foreground">Tool</span>
+          <span>{toolMessages.length}</span>
+          <span className="text-muted-foreground">Tool Calls</span>
+          <span>{totalToolCalls}</span>
+        </div>
+
+        <div className="border-t border-border pt-2">
+          <p className="text-[10px] font-mono text-muted-foreground mb-1">Streaming State</p>
+          <pre className="text-[9px] font-mono text-foreground bg-muted p-2 rounded overflow-auto max-h-32">
+            {JSON.stringify(
+              {
+                isLoading: streamingState.isLoading,
+                isConnected: streamingState.isConnected,
+                runId: streamingState.currentRunId,
+                activeSubAgent: streamingState.activeSubAgent?.name ?? null,
+                pendingInterrupt: streamingState.pendingInterrupt != null,
+                taskSteps: streamingState.taskSteps.length,
+              },
+              null,
+              2,
+            )}
+          </pre>
+        </div>
+      </CardBody>
+    </Card>
+  );
+}
diff --git a/src/frontend/components/DebugToggle.tsx b/src/frontend/components/DebugToggle.tsx
new file mode 100644
index 00000000..279e6486
--- /dev/null
+++ b/src/frontend/components/DebugToggle.tsx
@@ -0,0 +1,21 @@
+import { Button } from '@patternfly/react-core';
+import { Bug } from 'lucide-react';
+import { useAppDispatch, useAppSelector } from '../redux/hooks';
+import { selectDebugMode, setDebugMode } from '../redux/slices/userSettings';
+
+export function DebugToggle() {
+  const dispatch = useAppDispatch();
+  const debugMode = useAppSelector(selectDebugMode);
+
+  return (
+    <Button
+      variant="plain"
+      size="sm"
+      className={`!p-1.5 ${debugMode ? 'text-yellow-500' : 'text-muted-foreground'}`}
+      onClick={() => dispatch(setDebugMode(!debugMode))}
+      aria-label={debugMode ? 'Disable debug mode' : 'Enable debug mode'}
+    >
+      <Bug className="w-4 h-4" />
+    </Button>
+  );
+}
diff --git a/src/frontend/components/ErrorBoundary.tsx b/src/frontend/components/ErrorBoundary.tsx
index 7d8281dc..fbd00adb 100644
--- a/src/frontend/components/ErrorBoundary.tsx
+++ b/src/frontend/components/ErrorBoundary.tsx
@@ -1,5 +1,6 @@
 import { Component, ErrorInfo, ReactNode } from 'react';
-import { Button } from './ui/button';
+import { ErrorRecovery } from './ErrorRecovery';
+import { buildAppPath } from '../lib/app-paths';
 
 interface Props {
   children: ReactNode;
@@ -10,6 +11,7 @@ interface Props {
 interface State {
   hasError: boolean;
   error?: Error;
+  errorId?: string;
 }
 
 export class ErrorBoundary extends Component<Props, State> {
@@ -19,72 +21,53 @@ export class ErrorBoundary extends Component<Props, State> {
   }
 
   static getDerivedStateFromError(error: Error): State {
-    return { hasError: true, error };
+    return {
+      hasError: true,
+      error,
+      errorId: crypto.randomUUID().slice(0, 8),
+    };
   }
 
   componentDidCatch(error: Error, errorInfo: ErrorInfo) {
     console.error('ErrorBoundary caught an error:', error, errorInfo);
-    
-    // Call optional error handler
-    if (this.props.onError) {
-      this.props.onError(error, errorInfo);
-    }
+    this.props.onError?.(error, errorInfo);
   }
 
   private handleRetry = () => {
-    this.setState({ hasError: false, error: undefined });
+    this.setState({ hasError: false, error: undefined, errorId: undefined });
   };
 
   private handleReload = () => {
     window.location.reload();
   };
 
+  private handleGoHome = () => {
+    globalThis.location.href = buildAppPath('/');
+  };
+
   render() {
     if (this.state.hasError) {
-      // Custom fallback UI
       if (this.props.fallback) {
         return this.props.fallback;
       }
 
-      // Default error UI
+      const stackTrace =
+        this.state.error?.stack ?? this.state.error?.message;
+
       return (
-        <div className="flex flex-col items-center justify-center h-full min-h-[400px] p-8 bg-neutral-900 rounded-lg border border-red-500/20">
-          <div className="text-center space-y-4 max-w-md">
-            <div className="text-red-400 text-4xl mb-4">⚠️</div>
-            <h2 className="text-xl font-bold text-red-100">Something went wrong</h2>
-            <p className="text-neutral-400 text-sm">
-              An unexpected error occurred. You can try reloading the page or going back.
-            </p>
-            
-            {this.state.error && (
-              <details className="mt-4 p-3 bg-red-950/50 rounded border border-red-800/50 text-left">
-                <summary className="text-red-300 text-sm cursor-pointer hover:text-red-200">
-                  Error Details
-                </summary>
-                <pre className="mt-2 text-xs text-red-200 whitespace-pre-wrap overflow-auto max-h-32">
-                  {this.state.error.message}
-                  {this.state.error.stack && `\n\n${this.state.error.stack}`}
-                </pre>
-              </details>
-            )}
-            
-            <div className="flex gap-3 mt-6">
-              <Button
-                onClick={this.handleRetry}
-                variant="outline"
-                size="sm"
-                className="border-red-600 text-red-100 hover:bg-red-900/50"
-              >
-                Try Again
-              </Button>
-              <Button
-                onClick={this.handleReload}
-                size="sm"
-                className="bg-red-600 hover:bg-red-700 text-white"
-              >
-                Reload Page
-              </Button>
-            </div>
+        <div className="flex flex-col items-center justify-center h-full min-h-[400px] p-8">
+          <div className="max-w-md w-full">
+            <ErrorRecovery
+              title="Something went wrong"
+              errorMessage="An unexpected error occurred. You can try reloading the page or going back."
+              errorDetails={stackTrace}
+              errorId={this.state.errorId}
+              onRetry={this.handleRetry}
+              onGoHome={this.handleGoHome}
+              onRefresh={this.handleReload}
+              refreshButtonLabel="Reload Application"
+              isRefreshPrimary
+            />
           </div>
         </div>
       );
diff --git a/src/frontend/components/ErrorRecovery.tsx b/src/frontend/components/ErrorRecovery.tsx
new file mode 100644
index 00000000..729ce381
--- /dev/null
+++ b/src/frontend/components/ErrorRecovery.tsx
@@ -0,0 +1,155 @@
+import { useState } from 'react';
+import {
+  Alert,
+  Button,
+  EmptyState,
+  EmptyStateActions,
+  EmptyStateBody,
+  ExpandableSection,
+} from '@patternfly/react-core';
+import { ExclamationCircleIcon, ExclamationTriangleIcon } from '@patternfly/react-icons';
+
+export interface ErrorRecoveryProps {
+  title?: string;
+  errorMessage: string;
+  errorDetails?: string;
+  errorId?: string;
+  onRetry?: () => void;
+  onGoHome?: () => void;
+  onRefresh?: () => void;
+  retryCount?: number;
+  maxRetries?: number;
+  isRetrying?: boolean;
+  /** Shown on the reload/refresh action. Defaults to "Refresh Page". */
+  refreshButtonLabel?: string;
+  /** When true, the refresh/reload button uses the primary variant. */
+  isRefreshPrimary?: boolean;
+  /** Visual status for the empty state and alerts. Defaults to "danger". */
+  status?: 'danger' | 'warning' | 'success' | 'info';
+}
+
+export function ErrorRecovery({
+  title = 'Something went wrong',
+  errorMessage,
+  errorDetails,
+  errorId,
+  onRetry,
+  onGoHome,
+  onRefresh,
+  retryCount,
+  maxRetries,
+  isRetrying = false,
+  refreshButtonLabel = 'Refresh Page',
+  isRefreshPrimary = false,
+  status = 'danger',
+}: ErrorRecoveryProps) {
+  const [detailsExpanded, setDetailsExpanded] = useState(false);
+
+  const maxRetriesReached =
+    maxRetries != null &&
+    retryCount != null &&
+    retryCount >= maxRetries;
+
+  const showRetryCounter =
+    maxRetries != null && retryCount != null && maxRetries > 0;
+
+  const retryLabel = showRetryCounter
+    ? `Retry (attempt ${retryCount}/${maxRetries})`
+    : 'Retry';
+
+  const handleRefresh = () => {
+    if (onRefresh) {
+      onRefresh();
+    } else {
+      window.location.reload();
+    }
+  };
+
+  const retryVariant = isRefreshPrimary ? 'secondary' : 'primary';
+  const refreshVariant = isRefreshPrimary ? 'primary' : 'secondary';
+
+  const showTechnicalDetails = Boolean(errorMessage || errorId || errorDetails);
+
+  const stateIcon =
+    status === 'warning' ? ExclamationTriangleIcon : ExclamationCircleIcon;
+
+  return (
+    <EmptyState
+      status={status}
+      icon={stateIcon}
+      titleText={title}
+      headingLevel="h2"
+    >
+      <EmptyStateBody>
+        <Alert
+          variant={status === 'warning' ? 'warning' : 'danger'}
+          title="Error"
+          isInline
+          role="alert"
+          className="pf-v6-u-mb-md"
+        >
+          {errorMessage}
+        </Alert>
+
+        {maxRetriesReached && (
+          <Alert variant="info" isInline title="Maximum retries reached" role="alert" className="pf-v6-u-mb-md" />
+        )}
+
+        {showTechnicalDetails && (
+          <ExpandableSection
+            toggleText="Technical details"
+            isExpanded={detailsExpanded}
+            onToggle={(_e, expanded) => setDetailsExpanded(expanded)}
+            className="pf-v6-u-mb-md"
+            isIndented
+          >
+            <div className="text-left font-mono text-sm py-2">
+              {errorId != null && errorId !== '' && (
+                <p className="mb-2">
+                  <strong>Error ID:</strong> {errorId}
+                </p>
+              )}
+              {errorMessage !== '' && (
+                <p className="mb-2">
+                  <strong>Message:</strong> {errorMessage}
+                </p>
+              )}
+              {errorDetails != null && errorDetails !== '' && (
+                <pre className="m-0 text-xs whitespace-pre-wrap overflow-auto max-h-32 p-2 rounded bg-black/10">
+                  {errorDetails}
+                </pre>
+              )}
+            </div>
+          </ExpandableSection>
+        )}
+      </EmptyStateBody>
+
+      <EmptyStateActions>
+        {onGoHome !== undefined && (
+          <Button variant="secondary" onClick={onGoHome} isDisabled={isRetrying}>
+            Start Over
+          </Button>
+        )}
+        {onRetry !== undefined && (
+          <Button
+            variant={retryVariant}
+            onClick={onRetry}
+            isDisabled={maxRetriesReached || isRetrying}
+            isLoading={isRetrying}
+            spinnerAriaValueText="Retrying"
+            aria-label="Retry operation"
+          >
+            {retryLabel}
+          </Button>
+        )}
+        <Button
+          variant={refreshVariant}
+          onClick={handleRefresh}
+          isDisabled={isRetrying}
+        >
+          {refreshButtonLabel}
+        </Button>
+      </EmptyStateActions>
+    </EmptyState>
+  );
+}
diff --git a/src/frontend/components/FeatureGate.tsx b/src/frontend/components/FeatureGate.tsx
new file mode 100644
index 00000000..b1099dca
--- /dev/null
+++ b/src/frontend/components/FeatureGate.tsx
@@ -0,0 +1,41 @@
+import { ReactNode } from 'react';
+import { useSelector } from 'react-redux';
+import type { RootState } from '../redux/store';
+
+interface FeatureGateProps {
+  feature: 'auth' | 'debug' | 'memory';
+  children: ReactNode;
+  fallback?: ReactNode;
+}
+
+/**
+ * FeatureGate - Conditionally renders children based on feature flags.
+ * This is a HARD gate - components are hidden entirely if feature is disabled.
+ *
+ * Currently only 'auth' is a hard gate. debug_mode_default is a default for a user
+ * toggle, not a hard gate (users can still change it).
+ *
+ * Usage: <FeatureGate feature="auth">{authOnlyComponent}</FeatureGate>
+ */
+export function FeatureGate({ feature, children, fallback = null }: FeatureGateProps) {
+  const features = useSelector((state: RootState) => state.config.features);
+
+  if (!features) {
+    return <>{children}</>;
+  }
+
+  const isEnabled = (() => {
+    switch (feature) {
+      case 'auth':
+        return features.auth_enabled ?? true;
+      case 'debug':
+        return true;
+      case 'memory':
+        return true;
+      default:
+        return true;
+    }
+  })();
+
+  return isEnabled ? <>{children}</> : <>{fallback}</>;
+}
diff --git a/src/frontend/components/FeedbackButtons.tsx b/src/frontend/components/FeedbackButtons.tsx
new file mode 100644
index 00000000..05427dce
--- /dev/null
+++ b/src/frontend/components/FeedbackButtons.tsx
@@ -0,0 +1,103 @@
+import { useCallback, useState } from 'react';
+import { ThumbsDown, ThumbsUp } from 'lucide-react';
+
+import { cn } from '../lib/utils';
+import { useAppDispatch } from '../redux/hooks';
+import { setMessageFeedback } from '../redux/slices/chats';
+import { addToast } from '../redux/slices/toasts';
+import { submitFeedback } from '../services/feedback-api';
+
+export interface FeedbackButtonsProps {
+  messageId: string;
+  traceId: string | null;
+  chatId: string;
+  userId?: string;
+  existingFeedback?: 'up' | 'down' | null;
+}
+
+export function FeedbackButtons({
+  messageId,
+  traceId,
+  chatId,
+  userId,
+  existingFeedback = null,
+}: FeedbackButtonsProps) {
+  const dispatch = useAppDispatch();
+  const [isSubmitting, setIsSubmitting] = useState(false);
+
+  const effectiveTraceId = traceId || chatId;
+  const disabled = !effectiveTraceId || isSubmitting;
+
+  const handleVote = useCallback(
+    async (direction: 'up' | 'down') => {
+      if (!effectiveTraceId || isSubmitting) {
+        return;
+      }
+      if (existingFeedback === direction) {
+        dispatch(setMessageFeedback({ chatId, messageId, feedback: null }));
+        return;
+      }
+      setIsSubmitting(true);
+      try {
+        await submitFeedback({
+          traceId: effectiveTraceId,
+          name: direction === 'up' ? 'thumbs-up' : 'thumbs-down',
+          value: direction === 'up' ? 1.0 : 0.0,
+          threadId: chatId,
+          messageId,
+          userId: userId || 'anonymous',
+        });
+        dispatch(setMessageFeedback({ chatId, messageId, feedback: direction }));
+      } catch (e) {
+        dispatch(
+          addToast({
+            title: 'Feedback failed',
+            message: e instanceof Error ? e.message : 'Please try again.',
+            variant: 'danger',
+          }),
+        );
+      } finally {
+        setIsSubmitting(false);
+      }
+    },
+    [effectiveTraceId, isSubmitting, existingFeedback, dispatch, chatId, messageId, userId],
+  );
+
+  const baseBtn =
+    'inline-flex h-7 w-7 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-muted/80 hover:text-foreground disabled:pointer-events-none disabled:opacity-40';
+
+  return (
+    <div
+      className="mt-1 flex items-center gap-0.5 opacity-80 transition-opacity group-hover:opacity-100"
+      role="group"
+      aria-label="Message feedback"
+    >
+      <button
+        type="button"
+        className={cn(
+          baseBtn,
+          existingFeedback === 'up' && 'text-primary bg-primary/10 hover:bg-primary/15 hover:text-primary',
+        )}
+        disabled={disabled}
+        aria-pressed={existingFeedback === 'up' ? true : false}
+        aria-label="Rate response as helpful"
+        onClick={() => void handleVote('up')}
+      >
+        <ThumbsUp className={cn('h-3.5 w-3.5', existingFeedback === 'up' && 'fill-current')} strokeWidth={2} />
+      </button>
+      <button
+        type="button"
+        className={cn(
+          baseBtn,
+          existingFeedback === 'down' && 'text-primary bg-primary/10 hover:bg-primary/15 hover:text-primary',
+        )}
+        disabled={disabled}
+        aria-pressed={existingFeedback === 'down' ? true : false}
+        aria-label="Rate response as not helpful"
+        onClick={() => void handleVote('down')}
+      >
+        <ThumbsDown className={cn('h-3.5 w-3.5', existingFeedback === 'down' && 'fill-current')} strokeWidth={2} />
+      </button>
+    </div>
+  );
+}
diff --git a/src/frontend/components/InputForm.tsx b/src/frontend/components/InputForm.tsx
index f8130dc0..79b1c609 100644
--- a/src/frontend/components/InputForm.tsx
+++ b/src/frontend/components/InputForm.tsx
@@ -1,173 +1,124 @@
-import { useState } from "react";
-import { Button } from "./ui/button";
-import { SquarePen, Send, StopCircle } from "lucide-react";
-import { Textarea } from "./ui/textarea";
+import { forwardRef, useState, type FormEvent, type KeyboardEvent } from "react";
+import { SquarePen, ArrowUp, StopCircle } from "lucide-react";
+import { Alert } from "@patternfly/react-core";
+import { buildAppPath } from '../lib/app-paths';
 
-
-// Updated InputFormProps
 interface InputFormProps {
   onSubmit: (inputValue: string) => void;
   onCancel: () => void;
+  onNewChat?: () => void;
   isLoading: boolean;
   hasHistory: boolean;
+  isRateLimited?: boolean;
+  rateLimitRemainingSeconds?: number;
 }
 
-export const InputForm: React.FC<InputFormProps> = ({
+export const InputForm = forwardRef<HTMLTextAreaElement, InputFormProps>(function InputForm(
+  {
   onSubmit,
   onCancel,
+  onNewChat,
   isLoading,
   hasHistory,
-}) => {
+  isRateLimited = false,
+  rateLimitRemainingSeconds = 0,
+  },
+  ref,
+) {
   const [internalInputValue, setInternalInputValue] = useState("");
-  // const [effort, setEffort] = useState("medium");
-  // const [model, setModel] = useState("gemini-2.5-flash-preview-04-17");
 
-  const handleInternalSubmit = (e?: React.FormEvent) => {
+  const handleInternalSubmit = (e?: FormEvent) => {
     if (e) e.preventDefault();
     if (!internalInputValue.trim()) return;
     onSubmit(internalInputValue);
     setInternalInputValue("");
   };
 
-  const handleKeyDown = (e: React.KeyboardEvent<HTMLTextAreaElement>) => {
-    // Submit with Enter and create new line with Shift+Enter
+  const handleKeyDown = (e: KeyboardEvent<HTMLTextAreaElement>) => {
     if (e.key === "Enter" && !e.shiftKey) {
       e.preventDefault();
       handleInternalSubmit();
     }
   };
 
-  const isSubmitDisabled = !internalInputValue.trim() || isLoading;
+  const isSubmitDisabled = !internalInputValue.trim() || isLoading || isRateLimited;
 
   return (
     <form
       onSubmit={handleInternalSubmit}
-      className={`flex flex-col gap-2 p-3 pb-4`}
+      className="flex flex-col gap-2 p-3 pb-4"
     >
-      <div
-        className={`flex flex-row items-center justify-between text-white rounded-3xl rounded-bl-sm ${
-          hasHistory ? "rounded-br-sm" : ""
-        } break-words min-h-7 bg-neutral-700 px-4 pt-3 `}
-      >
-        <Textarea
+      {isRateLimited && rateLimitRemainingSeconds > 0 && (
+        <Alert
+          variant="warning"
+          isInline
+          title={`Rate limited. Try again in ${rateLimitRemainingSeconds}s`}
+          className="mb-1"
+        />
+      )}
+      <div className="relative rounded-2xl border border-border bg-card shadow-card focus-within:border-primary/40 focus-within:shadow-elevated transition-all duration-200">
+        <textarea
+          ref={ref}
+          autoFocus
           value={internalInputValue}
           onChange={(e) => setInternalInputValue(e.target.value)}
           onKeyDown={handleKeyDown}
-          placeholder="Ask me anything about the data"
-          className={`w-full text-neutral-100 placeholder-neutral-500 resize-none border-0 focus:outline-none focus:ring-0 outline-none focus-visible:ring-0 shadow-none
-                        md:text-base  min-h-[56px] max-h-[200px]`}
+          placeholder="Ask me anything about the data..."
+          aria-label="Type a message"
+          className="w-full resize-none border-0 bg-transparent px-4 pt-3.5 pb-12 text-sm leading-relaxed min-h-[56px] max-h-[200px] rounded-2xl placeholder:opacity-60 focus:outline-none focus:ring-0 focus:border-transparent focus:shadow-none"
+          style={{ boxShadow: 'none' }}
           rows={1}
         />
-        <div className="-mt-3">
+        <div className="absolute bottom-2.5 right-2.5 flex items-center gap-1.5">
           {isLoading ? (
-            <Button
+            <button
               type="button"
-              variant="ghost"
-              size="icon"
-              className="text-red-500 hover:text-red-400 hover:bg-red-500/10 p-2 cursor-pointer rounded-full transition-all duration-200"
+              className="flex items-center justify-center w-8 h-8 rounded-full bg-destructive/10 text-destructive hover:bg-destructive/20 transition-colors"
               onClick={onCancel}
+              aria-label="Cancel streaming"
             >
-              <StopCircle className="h-5 w-5" />
-            </Button>
+              <StopCircle className="h-4 w-4" />
+            </button>
           ) : (
-            <Button
+            <button
               type="submit"
-              variant="ghost"
-              className={`${
-                isSubmitDisabled
-                  ? "text-neutral-500"
-                  : "text-blue-500 hover:text-blue-400 hover:bg-blue-500/10"
-              } p-2 cursor-pointer rounded-full transition-all duration-200 text-base`}
               disabled={isSubmitDisabled}
+              aria-label={
+                isRateLimited
+                  ? `Wait ${rateLimitRemainingSeconds} seconds`
+                  : "Send message"
+              }
+              className={`flex items-center justify-center rounded-full transition-all duration-200 ${
+                isRateLimited ? "min-w-[88px] h-8 px-2" : "w-8 h-8"
+              } ${
+                isSubmitDisabled
+                  ? "bg-muted text-muted-foreground cursor-not-allowed"
+                  : "bg-primary text-primary-foreground hover:bg-primary/90 shadow-sm hover:shadow-md"
+              }`}
             >
-              Ask
-              <Send className="h-5 w-5" />
-            </Button>
+              {isRateLimited ? (
+                <span className="text-xs font-medium tabular-nums">
+                  Wait ({rateLimitRemainingSeconds}s)
+                </span>
+              ) : (
+                <ArrowUp className="h-4 w-4" />
+              )}
+            </button>
           )}
         </div>
       </div>
-      <div className="flex items-center justify-between">
-        <div className="flex flex-row gap-2">
-          {/* <div className="flex flex-row gap-2 bg-neutral-700 border-neutral-600 text-neutral-300 focus:ring-neutral-500 rounded-xl rounded-t-sm pl-2  max-w-[100%] sm:max-w-[90%]">
-            <div className="flex flex-row items-center text-sm">
-              <Brain className="h-4 w-4 mr-2" />
-              Effort
-            </div>
-            <Select value={effort} onValueChange={setEffort}>
-              <SelectTrigger className="w-[120px] bg-transparent border-none cursor-pointer">
-                <SelectValue placeholder="Effort" />
-              </SelectTrigger>
-              <SelectContent className="bg-neutral-700 border-neutral-600 text-neutral-300 cursor-pointer">
-                <SelectItem
-                  value="low"
-                  className="hover:bg-neutral-600 focus:bg-neutral-600 cursor-pointer"
-                >
-                  Low
-                </SelectItem>
-                <SelectItem
-                  value="medium"
-                  className="hover:bg-neutral-600 focus:bg-neutral-600 cursor-pointer"
-                >
-                  Medium
-                </SelectItem>
-                <SelectItem
-                  value="high"
-                  className="hover:bg-neutral-600 focus:bg-neutral-600 cursor-pointer"
-                >
-                  High
-                </SelectItem>
-              </SelectContent>
-            </Select>
-          </div> */}
-          {/* <div className="flex flex-row gap-2 bg-neutral-700 border-neutral-600 text-neutral-300 focus:ring-neutral-500 rounded-xl rounded-t-sm pl-2  max-w-[100%] sm:max-w-[90%]">
-            <div className="flex flex-row items-center text-sm ml-2">
-              <Cpu className="h-4 w-4 mr-2" />
-              Model
-            </div>
-            <Select value={model} onValueChange={setModel}>
-              <SelectTrigger className="w-[150px] bg-transparent border-none cursor-pointer">
-                <SelectValue placeholder="Model" />
-              </SelectTrigger>
-              <SelectContent className="bg-neutral-700 border-neutral-600 text-neutral-300 cursor-pointer">
-                <SelectItem
-                  value="gemini-2.0-flash"
-                  className="hover:bg-neutral-600 focus:bg-neutral-600 cursor-pointer"
-                >
-                  <div className="flex items-center">
-                    <Zap className="h-4 w-4 mr-2 text-yellow-400" /> 2.0 Flash
-                  </div>
-                </SelectItem>
-                <SelectItem
-                  value="gemini-2.5-flash-preview-04-17"
-                  className="hover:bg-neutral-600 focus:bg-neutral-600 cursor-pointer"
-                >
-                  <div className="flex items-center">
-                    <Zap className="h-4 w-4 mr-2 text-orange-400" /> 2.5 Flash
-                  </div>
-                </SelectItem>
-                <SelectItem
-                  value="gemini-2.5-pro-preview-05-06"
-                  className="hover:bg-neutral-600 focus:bg-neutral-600 cursor-pointer"
-                >
-                  <div className="flex items-center">
-                    <Cpu className="h-4 w-4 mr-2 text-purple-400" /> 2.5 Pro
-                  </div>
-                </SelectItem>
-              </SelectContent>
-            </Select>
-          </div> */}
-        </div>
-        {hasHistory && (
-          <Button
-            className="bg-neutral-700 border-neutral-600 text-neutral-300 cursor-pointer rounded-xl rounded-t-sm pl-2 "
-            variant="default"
-            onClick={() => window.location.reload()}
+      {hasHistory && (
+        <div className="flex items-center justify-end">
+          <button
+            type="button"
+            onClick={() => onNewChat ? onNewChat() : (globalThis.location.href = buildAppPath('/'))}
+            className="flex items-center gap-1.5 text-xs text-muted-foreground hover:text-foreground transition-colors px-2 py-1 rounded-md hover:bg-muted"
           >
-            <SquarePen size={16} />
-             New Chat
-          </Button>
-        )}
-      </div>
+            <SquarePen size={12} />
+            New Chat
+          </button>
+        </div>
+      )}
     </form>
   );
-};
+});
diff --git a/src/frontend/components/InterruptBanner.test.tsx b/src/frontend/components/InterruptBanner.test.tsx
new file mode 100644
index 00000000..d72ab150
--- /dev/null
+++ b/src/frontend/components/InterruptBanner.test.tsx
@@ -0,0 +1,251 @@
+import React from 'react';
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { render, screen, fireEvent, waitFor } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { InterruptBanner } from './InterruptBanner';
+import type { InterruptInfo } from '../types/deep-agent';
+
+// ── Fixtures ─────────────────────────────────────────────────────────────────
+
+const toolApprovalInterrupt: InterruptInfo = {
+  value: 'Do you approve this action? Please confirm or reject.',
+  resumable: true,
+};
+
+const genericInterrupt: InterruptInfo = {
+  value: 'What format would you prefer for the output?',
+  resumable: true,
+};
+
+const mcpAuthInterrupt: InterruptInfo = {
+  value: '',
+  resumable: true,
+  payload: {
+    type: 'mcp_auth_required',
+    mcp_name: 'github',
+    connect_url: '/api/proxy/agent/mcp/github/connect',
+    message: 'Connect your GitHub account.',
+  },
+};
+
+// ── Tests ─────────────────────────────────────────────────────────────────────
+
+describe('InterruptBanner — tool approval branch', () => {
+  it('renders "Action Required" for an approval interrupt', () => {
+    render(
+      <InterruptBanner interrupt={toolApprovalInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByText('Action Required')).toBeInTheDocument();
+  });
+
+  it('renders Approve and Reject buttons', () => {
+    render(
+      <InterruptBanner interrupt={toolApprovalInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByRole('button', { name: /approve/i })).toBeInTheDocument();
+    expect(screen.getByRole('button', { name: /reject/i })).toBeInTheDocument();
+  });
+
+  it('calls onResume("approved") when Approve is clicked', async () => {
+    const onResume = vi.fn();
+    render(<InterruptBanner interrupt={toolApprovalInterrupt} onResume={onResume} onDismiss={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: /approve/i }));
+    expect(onResume).toHaveBeenCalledWith('approved');
+  });
+
+  it('calls onResume("rejected") when Reject is clicked', async () => {
+    const onResume = vi.fn();
+    render(<InterruptBanner interrupt={toolApprovalInterrupt} onResume={onResume} onDismiss={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: /reject/i }));
+    expect(onResume).toHaveBeenCalledWith('rejected');
+  });
+
+  it('calls onDismiss when the close button is clicked', async () => {
+    const onDismiss = vi.fn();
+    render(<InterruptBanner interrupt={toolApprovalInterrupt} onResume={vi.fn()} onDismiss={onDismiss} />);
+    const closeBtn = screen.getByRole('button', { name: /close/i });
+    await userEvent.click(closeBtn);
+    expect(onDismiss).toHaveBeenCalledOnce();
+  });
+
+  it('renders the interrupt value text in the body', () => {
+    render(
+      <InterruptBanner interrupt={toolApprovalInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByText(/do you approve/i)).toBeInTheDocument();
+  });
+
+  // NOTE: in production, structured HITLInterruptValue interrupts (with action_requests)
+  // are routed through ChatPage → ChatMessagesView → AIMessageRenderer, NOT through
+  // InterruptBanner.  Those flows are covered by AIMessageRenderer.test.tsx.
+});
+
+describe('InterruptBanner — generic input branch', () => {
+  it('renders "Input Required" for a non-approval interrupt', () => {
+    render(
+      <InterruptBanner interrupt={genericInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByText('Input Required')).toBeInTheDocument();
+  });
+
+  it('renders a text input and Send button', () => {
+    render(
+      <InterruptBanner interrupt={genericInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByRole('textbox', { name: /interrupt response/i })).toBeInTheDocument();
+    expect(screen.getByRole('button', { name: /send/i })).toBeInTheDocument();
+  });
+
+  it('Send button is disabled when input is empty', () => {
+    render(
+      <InterruptBanner interrupt={genericInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByRole('button', { name: /send/i })).toBeDisabled();
+  });
+
+  it('calls onResume with the typed text when Send is clicked', async () => {
+    const onResume = vi.fn();
+    render(<InterruptBanner interrupt={genericInterrupt} onResume={onResume} onDismiss={vi.fn()} />);
+    const input = screen.getByRole('textbox', { name: /interrupt response/i });
+    await userEvent.type(input, 'JSON format please');
+    await userEvent.click(screen.getByRole('button', { name: /send/i }));
+    expect(onResume).toHaveBeenCalledWith('JSON format please');
+  });
+
+  it('calls onResume when Enter is pressed in the input', async () => {
+    const onResume = vi.fn();
+    render(<InterruptBanner interrupt={genericInterrupt} onResume={onResume} onDismiss={vi.fn()} />);
+    const input = screen.getByRole('textbox', { name: /interrupt response/i });
+    await userEvent.type(input, 'My response');
+    fireEvent.keyDown(input, { key: 'Enter' });
+    expect(onResume).toHaveBeenCalledWith('My response');
+  });
+
+  it('does NOT call onResume on Enter when input is empty', () => {
+    const onResume = vi.fn();
+    render(<InterruptBanner interrupt={genericInterrupt} onResume={onResume} onDismiss={vi.fn()} />);
+    const input = screen.getByRole('textbox', { name: /interrupt response/i });
+    fireEvent.keyDown(input, { key: 'Enter' });
+    expect(onResume).not.toHaveBeenCalled();
+  });
+});
+
+describe('InterruptBanner — MCP auth branch', () => {
+  beforeEach(() => {
+    vi.stubGlobal('fetch', vi.fn());
+    vi.stubGlobal('open', vi.fn());
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it('renders the Authenticate button for mcp_auth_required', () => {
+    render(
+      <InterruptBanner interrupt={mcpAuthInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.getByRole('button', { name: /authenticate/i })).toBeInTheDocument();
+  });
+
+  it('does NOT render Approve / Reject buttons for MCP auth', () => {
+    render(
+      <InterruptBanner interrupt={mcpAuthInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />,
+    );
+    expect(screen.queryByRole('button', { name: /approve/i })).not.toBeInTheDocument();
+    expect(screen.queryByRole('button', { name: /reject/i })).not.toBeInTheDocument();
+  });
+
+  it('opens the OAuth popup when Authenticate is clicked', async () => {
+    vi.mocked(fetch).mockResolvedValueOnce(
+      new Response(JSON.stringify({ authorize_url: 'https://oauth.example.com/auth' }), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+      }),
+    );
+    render(<InterruptBanner interrupt={mcpAuthInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: /authenticate/i }));
+    await waitFor(() => {
+      expect(vi.mocked(open)).toHaveBeenCalledWith(
+        'https://oauth.example.com/auth',
+        'mcp-oauth',
+        expect.stringContaining('width='),
+      );
+    });
+  });
+
+  it('shows an error when the connect request fails', async () => {
+    // Empty body → InterruptBanner renders "Connect failed (401)" as the error
+    vi.mocked(fetch).mockResolvedValueOnce(
+      new Response('', { status: 401 }),
+    );
+    render(<InterruptBanner interrupt={mcpAuthInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: /authenticate/i }));
+    await waitFor(() => {
+      expect(screen.getByText(/connect failed/i)).toBeInTheDocument();
+    });
+  });
+
+  it('shows Continue button after mcp_oauth_done postMessage + connected status', async () => {
+    vi.mocked(fetch).mockResolvedValue(
+      new Response(JSON.stringify({ connected: true }), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+      }),
+    );
+
+    render(<InterruptBanner interrupt={mcpAuthInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />);
+
+    fireEvent(
+      window,
+      new MessageEvent('message', {
+        data: { type: 'mcp_oauth_done', mcp_name: 'github' },
+        origin: window.location.origin,
+      }),
+    );
+
+    await waitFor(() => {
+      expect(screen.getByRole('button', { name: /continue/i })).toBeInTheDocument();
+    });
+  });
+
+  it('ignores mcp_oauth_done postMessage from a different origin', async () => {
+    render(<InterruptBanner interrupt={mcpAuthInterrupt} onResume={vi.fn()} onDismiss={vi.fn()} />);
+
+    // Fire the same message type but from an untrusted origin
+    fireEvent(
+      window,
+      new MessageEvent('message', {
+        data: { type: 'mcp_oauth_done', mcp_name: 'github' },
+        origin: 'https://evil.example.com',
+      }),
+    );
+
+    // Continue button must NOT appear — cross-origin message must be ignored
+    await new Promise((r) => setTimeout(r, 100));
+    expect(screen.queryByRole('button', { name: /continue/i })).not.toBeInTheDocument();
+  });
+
+  it('calls onResume("continue") when Continue is clicked', async () => {
+    const onResume = vi.fn();
+    vi.mocked(fetch).mockResolvedValue(
+      new Response(JSON.stringify({ connected: true }), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+      }),
+    );
+
+    render(<InterruptBanner interrupt={mcpAuthInterrupt} onResume={onResume} onDismiss={vi.fn()} />);
+
+    fireEvent(
+      window,
+      new MessageEvent('message', {
+        data: { type: 'mcp_oauth_done', mcp_name: 'github' },
+        origin: window.location.origin,
+      }),
+    );
+
+    await waitFor(() => screen.getByRole('button', { name: /continue/i }));
+    await userEvent.click(screen.getByRole('button', { name: /continue/i }));
+    expect(onResume).toHaveBeenCalledWith('continue');
+  });
+});
diff --git a/src/frontend/components/InterruptBanner.tsx b/src/frontend/components/InterruptBanner.tsx
new file mode 100644
index 00000000..7c7903d7
--- /dev/null
+++ b/src/frontend/components/InterruptBanner.tsx
@@ -0,0 +1,256 @@
+import { useCallback, useEffect, useState } from 'react';
+import {
+  Alert,
+  AlertActionCloseButton,
+  Button,
+  TextInput,
+} from '@patternfly/react-core';
+import { Bot, CheckCircle, Link2, XCircle } from 'lucide-react';
+import { buildAgentApiUrl } from '../lib/app-paths';
+import type { InterruptInfo } from '../types/deep-agent';
+
+interface InterruptBannerProps {
+  readonly interrupt: InterruptInfo;
+  readonly onResume: (response: string) => void;
+  readonly onDismiss: () => void;
+}
+
+function isToolApproval(value: string): boolean {
+  const lower = value.toLowerCase();
+  return lower.includes('approve') || lower.includes('confirm') || lower.includes('permission')
+    || lower.includes('allow') || lower.includes('proceed');
+}
+
+function interruptValueAsString(value: string | object): string {
+  if (typeof value === 'string') return value;
+  return JSON.stringify(value, null, 2);
+}
+
+function parseMcpAuthPayload(interrupt: InterruptInfo): InterruptInfo['payload'] | null {
+  if (interrupt.payload?.type === 'mcp_auth_required') {
+    return interrupt.payload;
+  }
+  const raw = interrupt.value;
+  if (typeof raw === 'object' && raw !== null && (raw as { type?: string }).type === 'mcp_auth_required') {
+    return raw as unknown as NonNullable<InterruptInfo['payload']>;
+  }
+  if (typeof raw !== 'string') return null;
+  try {
+    const parsed = JSON.parse(raw) as unknown;
+    if (
+      parsed
+      && typeof parsed === 'object'
+      && (parsed as { type?: string }).type === 'mcp_auth_required'
+    ) {
+      return parsed as InterruptInfo['payload'];
+    }
+  } catch {
+    // not JSON — fall through
+  }
+  return null;
+}
+
+const STATUS_RETRY_MS = 400;
+const STATUS_MAX_RETRIES = 6;
+
+async function verifyMcpConnected(mcpName: string): Promise<boolean> {
+  for (let attempt = 0; attempt < STATUS_MAX_RETRIES; attempt++) {
+    try {
+      const resp = await fetch(
+        buildAgentApiUrl(`/mcp/${encodeURIComponent(mcpName)}/status`),
+        { credentials: 'include' },
+      );
+      if (resp.ok) {
+        const body = (await resp.json()) as { connected?: boolean };
+        if (body.connected) return true;
+      }
+    } catch {
+      // retry
+    }
+    if (attempt < STATUS_MAX_RETRIES - 1) {
+      await new Promise((resolve) => setTimeout(resolve, STATUS_RETRY_MS));
+    }
+  }
+  return false;
+}
+
+export function InterruptBanner({ interrupt, onResume, onDismiss }: InterruptBannerProps) {
+  const [response, setResponse] = useState('');
+  const [oauthReady, setOauthReady] = useState(false);
+  const [connecting, setConnecting] = useState(false);
+  const [connectError, setConnectError] = useState<string | null>(null);
+
+  const mcpAuth = parseMcpAuthPayload(interrupt);
+
+  const verifyAndSetReady = useCallback(async (mcpName: string) => {
+    const connected = await verifyMcpConnected(mcpName);
+    if (connected) {
+      setOauthReady(true);
+      setConnectError(null);
+    }
+  }, []);
+
+  useEffect(() => {
+    if (!mcpAuth) return undefined;
+
+    const handler = (event: MessageEvent) => {
+      if (event.origin !== window.location.origin) return;
+      const data = event.data as { type?: string; mcp_name?: string } | null;
+      if (data?.type === 'mcp_oauth_done' && data.mcp_name === mcpAuth.mcp_name) {
+        void verifyAndSetReady(mcpAuth.mcp_name);
+      }
+    };
+
+    const onFocus = () => {
+      if (!oauthReady) {
+        void verifyAndSetReady(mcpAuth.mcp_name);
+      }
+    };
+
+    window.addEventListener('message', handler);
+    window.addEventListener('focus', onFocus);
+    return () => {
+      window.removeEventListener('message', handler);
+      window.removeEventListener('focus', onFocus);
+    };
+  }, [mcpAuth, oauthReady, verifyAndSetReady]);
+
+  const handleConnect = useCallback(async () => {
+    if (!mcpAuth) return;
+    setConnecting(true);
+    setConnectError(null);
+    try {
+      const connectUrl = buildAgentApiUrl(`/mcp/${encodeURIComponent(mcpAuth.mcp_name)}/connect`);
+      const resp = await fetch(connectUrl, {
+        method: 'POST',
+        credentials: 'include',
+      });
+      if (!resp.ok) {
+        const text = await resp.text();
+        throw new Error(text || `Connect failed (${resp.status})`);
+      }
+      const body = (await resp.json()) as { authorize_url?: string };
+      if (!body.authorize_url) {
+        throw new Error('No authorize_url returned');
+      }
+      window.open(body.authorize_url, 'mcp-oauth', 'width=600,height=700');
+    } catch (err) {
+      setConnectError(err instanceof Error ? err.message : 'Connect failed');
+    } finally {
+      setConnecting(false);
+    }
+  }, [mcpAuth]);
+
+  if (mcpAuth) {
+    return (
+      <div className="w-full space-y-0 animate-fadeInUpSmooth">
+        <div className="flex items-start gap-3">
+          <div className="w-8 h-8 rounded-full bg-muted flex items-center justify-center shrink-0 mt-0.5">
+            <Bot className="w-4 h-4 text-muted-foreground" />
+          </div>
+          <div className="flex-1 min-w-0">
+            <div className="prose prose-sm max-w-none text-foreground">
+              <p>
+                To access external tools, you need to authenticate first.
+                Click the button below to securely connect your account.
+              </p>
+            </div>
+            {connectError && (
+              <p className="text-sm text-red-600 mt-2">{connectError}</p>
+            )}
+            <div className="mt-3">
+              {!oauthReady ? (
+                <Button
+                  variant="primary"
+                  size="sm"
+                  icon={<Link2 className="w-3.5 h-3.5" />}
+                  isLoading={connecting}
+                  onClick={() => void handleConnect()}
+                >
+                  Authenticate
+                </Button>
+              ) : (
+                <Button
+                  variant="primary"
+                  size="sm"
+                  icon={<CheckCircle className="w-3.5 h-3.5" />}
+                  onClick={() => onResume('continue')}
+                >
+                  Continue
+                </Button>
+              )}
+            </div>
+          </div>
+        </div>
+      </div>
+    );
+  }
+
+  const valueStr = interruptValueAsString(interrupt.value);
+  const approval = isToolApproval(valueStr);
+
+  if (approval) {
+    return (
+      <div className="mx-4 mb-3" role="alert">
+        <Alert
+          variant="warning"
+          title="Action Required"
+          isInline
+          actionClose={<AlertActionCloseButton onClose={onDismiss} />}
+        >
+          <p className="text-sm mb-3 whitespace-pre-wrap">{valueStr}</p>
+          <div className="flex items-center gap-2">
+            <Button
+              variant="primary"
+              size="sm"
+              icon={<CheckCircle className="w-3.5 h-3.5" />}
+              onClick={() => onResume('approved')}
+            >
+              Approve
+            </Button>
+            <Button
+              variant="danger"
+              size="sm"
+              icon={<XCircle className="w-3.5 h-3.5" />}
+              onClick={() => onResume('rejected')}
+            >
+              Reject
+            </Button>
+          </div>
+        </Alert>
+      </div>
+    );
+  }
+
+  return (
+    <div className="mx-4 mb-3" role="alert">
+      <Alert
+        title="Input Required"
+        isInline
+        actionClose={<AlertActionCloseButton onClose={onDismiss} />}
+      >
+        <p className="text-sm mb-3 whitespace-pre-wrap">{valueStr}</p>
+        <div className="flex items-center gap-2">
+          <TextInput
+            value={response}
+            onChange={(_e, val) => setResponse(val)}
+            onKeyDown={(e) => {
+              if (e.key === 'Enter' && response.trim()) onResume(response.trim());
+            }}
+            placeholder="Type your response..."
+            aria-label="Interrupt response"
+            className="flex-1"
+          />
+          <Button
+            variant="primary"
+            size="sm"
+            isDisabled={!response.trim()}
+            onClick={() => onResume(response.trim())}
+          >
+            Send
+          </Button>
+        </div>
+      </Alert>
+    </div>
+  );
+}
diff --git a/src/frontend/components/KeyboardShortcutsDialog.tsx b/src/frontend/components/KeyboardShortcutsDialog.tsx
new file mode 100644
index 00000000..aeb7aa48
--- /dev/null
+++ b/src/frontend/components/KeyboardShortcutsDialog.tsx
@@ -0,0 +1,115 @@
+import type { ReactNode } from 'react';
+import {
+  Button,
+  Content,
+  Modal,
+  ModalBody,
+  ModalFooter,
+  ModalHeader,
+  ModalVariant,
+} from '@patternfly/react-core';
+
+export interface KeyboardShortcutsDialogProps {
+  isOpen: boolean;
+  onClose: () => void;
+}
+
+function Kbd({ children }: { children: ReactNode }) {
+  return (
+    <kbd className="inline-flex items-center rounded border border-border bg-muted px-1.5 py-0.5 font-mono text-xs text-foreground shadow-sm">
+      {children}
+    </kbd>
+  );
+}
+
+const rows: { combo: ReactNode; action: string }[] = [
+  {
+    combo: <Kbd>/</Kbd>,
+    action: 'Focus chat input',
+  },
+  {
+    combo: <Kbd>Esc</Kbd>,
+    action: 'Cancel stream / blur input',
+  },
+  {
+    combo: (
+      <span className="inline-flex flex-wrap items-center gap-1">
+        <Kbd>Ctrl</Kbd>
+        <span className="text-muted-foreground">+</span>
+        <Kbd>N</Kbd>
+        <span className="text-xs text-muted-foreground">(Mac: ⌘N)</span>
+      </span>
+    ),
+    action: 'New chat',
+  },
+  {
+    combo: (
+      <span className="inline-flex flex-wrap items-center gap-1">
+        <Kbd>Ctrl</Kbd>
+        <span className="text-muted-foreground">+</span>
+        <Kbd>Shift</Kbd>
+        <span className="text-muted-foreground">+</span>
+        <Kbd>S</Kbd>
+        <span className="text-xs text-muted-foreground">(Mac: ⌘⇧S)</span>
+      </span>
+    ),
+    action: 'Open settings',
+  },
+  {
+    combo: <Kbd>?</Kbd>,
+    action: 'Show this dialog',
+  },
+  {
+    combo: (
+      <span className="inline-flex flex-wrap items-center gap-1">
+        <Kbd>Ctrl</Kbd>
+        <span className="text-muted-foreground">+</span>
+        <Kbd>Shift</Kbd>
+        <span className="text-muted-foreground">+</span>
+        <Kbd>E</Kbd>
+        <span className="text-xs text-muted-foreground">(Mac: ⌘⇧E)</span>
+      </span>
+    ),
+    action: 'Export chat',
+  },
+];
+
+export function KeyboardShortcutsDialog({ isOpen, onClose }: KeyboardShortcutsDialogProps) {
+  return (
+    <Modal
+      variant={ModalVariant.small}
+      isOpen={isOpen}
+      onClose={onClose}
+      aria-label="Keyboard shortcuts"
+    >
+      <ModalHeader title="Keyboard Shortcuts" />
+      <ModalBody>
+        <Content>
+          <div className="rounded-lg border border-border overflow-hidden">
+            <table className="w-full text-sm border-collapse">
+              <thead>
+                <tr className="border-b border-border bg-muted/60">
+                  <th className="text-left font-semibold px-3 py-2 w-[45%]">Shortcut</th>
+                  <th className="text-left font-semibold px-3 py-2">Action</th>
+                </tr>
+              </thead>
+              <tbody>
+                {rows.map((row) => (
+                  <tr key={row.action} className="border-b border-border last:border-b-0">
+                    <td className="px-3 py-2 align-top">{row.combo}</td>
+                    <td className="px-3 py-2 text-foreground/90">{row.action}</td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        </Content>
+      </ModalBody>
+      <ModalFooter>
+        <Button variant="primary" onClick={onClose}>
+          Close
+        </Button>
+      </ModalFooter>
+    </Modal>
+  );
+}
diff --git a/src/frontend/components/McpStatusPanel.tsx b/src/frontend/components/McpStatusPanel.tsx
new file mode 100644
index 00000000..6185c060
--- /dev/null
+++ b/src/frontend/components/McpStatusPanel.tsx
@@ -0,0 +1,60 @@
+import { useState } from 'react';
+import { ExpandableSection, Label } from '@patternfly/react-core';
+
+export interface McpStatusPanelProps {
+  readonly mcpEvents: ReadonlyArray<{ readonly tool: string; readonly status: string; readonly timestamp: number }>;
+}
+
+function labelColorForStatus(status: string): 'blue' | 'green' | 'red' {
+  const s = status.toLowerCase();
+  if (s === 'success' || s === 'completed' || s === 'ok') {
+    return 'green';
+  }
+  if (s === 'error' || s === 'failed') {
+    return 'red';
+  }
+  if (
+    s === 'calling' ||
+    s === 'pending' ||
+    s === 'running' ||
+    s === 'in_progress' ||
+    s === 'in progress'
+  ) {
+    return 'blue';
+  }
+  return 'blue';
+}
+
+export function McpStatusPanel({ mcpEvents }: McpStatusPanelProps) {
+  const [expanded, setExpanded] = useState(true);
+
+  if (mcpEvents.length === 0) {
+    return null;
+  }
+
+  return (
+    <div className="max-w-3xl mx-auto px-3 pt-2" aria-label="MCP tool status">
+      <ExpandableSection
+        toggleText="MCP tool activity"
+        isExpanded={expanded}
+        onToggle={(_e, isExpanded) => setExpanded(isExpanded)}
+        isIndented
+        className="pf-v6-u-mb-sm"
+      >
+        <ul className="list-none m-0 p-0 space-y-2">
+          {mcpEvents.map((evt, idx) => (
+            <li
+              key={`${evt.tool}-${evt.timestamp}-${idx}`}
+              className="flex flex-wrap items-center gap-2 text-sm"
+            >
+              <span className="font-mono text-xs text-foreground">{evt.tool}</span>
+              <Label color={labelColorForStatus(evt.status)} isCompact>
+                {evt.status}
+              </Label>
+            </li>
+          ))}
+        </ul>
+      </ExpandableSection>
+    </div>
+  );
+}
diff --git a/src/frontend/components/ReconnectingBanner.tsx b/src/frontend/components/ReconnectingBanner.tsx
new file mode 100644
index 00000000..68ac472a
--- /dev/null
+++ b/src/frontend/components/ReconnectingBanner.tsx
@@ -0,0 +1,24 @@
+import { Alert } from '@patternfly/react-core';
+import type { StreamingState } from '@/redux/slices/chats';
+
+interface ReconnectingBannerProps {
+  streamingState: StreamingState;
+  maxRetries: number;
+}
+
+export function ReconnectingBanner({ streamingState, maxRetries }: ReconnectingBannerProps) {
+  if (!streamingState.isReconnecting) {
+    return null;
+  }
+
+  const attemptText = `Attempt ${streamingState.reconnectAttempt}/${maxRetries}`;
+  const midResponseWarning = streamingState.streamDroppedMidResponse
+    ? ' Stream dropped mid-response. Resuming from last received event.'
+    : '';
+
+  return (
+    <Alert variant="warning" isInline title="Reconnecting...">
+      {attemptText}{midResponseWarning ? '.' : ''}{midResponseWarning}
+    </Alert>
+  );
+}
diff --git a/src/frontend/components/RedHatLogo.tsx b/src/frontend/components/RedHatLogo.tsx
new file mode 100644
index 00000000..f99f1f1a
--- /dev/null
+++ b/src/frontend/components/RedHatLogo.tsx
@@ -0,0 +1,16 @@
+import type { SVGProps } from 'react';
+
+export function RedHatLogo(props: SVGProps<SVGSVGElement>) {
+  return (
+    <svg
+      xmlns="http://www.w3.org/2000/svg"
+      viewBox="0 0 195 145"
+      fill="currentColor"
+      aria-hidden="true"
+      focusable="false"
+      {...props}
+    >
+      <path d="M127.47 83.49c12.51 0 30.61-2.58 30.61-17.46a14 14 0 0 0-.31-3.42l-7.45-32.36c-1.72-7.12-3.23-10.35-15.73-16.6C124.89 8.69 103.76.5 97.51.5 91.69.5 90 8 83.06 8c-6.68 0-11.64-5.6-17.89-5.6-6 0-9.91 4.09-12.93 12.5 0 0-8.41 23.72-9.49 27.16a6.43 6.43 0 0 0-.22 1.94c0 9.22 36.3 39.45 84.94 39.45M160 72.07c1.73 8.19 1.73 9.05 1.73 10.13 0 14-15.74 21.77-36.43 21.77C78.54 104 37.58 76.6 37.58 58.49a18.45 18.45 0 0 1 1.51-7.33C22.27 52 .5 55 .5 74.22c0 31.48 74.59 70.28 133.65 70.28 45.28 0 56.7-20.48 56.7-36.65 0-12.72-11-27.16-30.83-35.78" />
+    </svg>
+  );
+}
diff --git a/src/frontend/components/SessionExpiredModal.tsx b/src/frontend/components/SessionExpiredModal.tsx
new file mode 100644
index 00000000..ed4d3761
--- /dev/null
+++ b/src/frontend/components/SessionExpiredModal.tsx
@@ -0,0 +1,45 @@
+import {
+  Button,
+  Modal,
+  ModalBody,
+  ModalFooter,
+  ModalHeader,
+  ModalVariant,
+} from '@patternfly/react-core';
+
+export interface SessionExpiredModalProps {
+  isOpen: boolean;
+}
+
+function buildGatewayLoginUrl(): string {
+  const redirectPath = `${globalThis.location.pathname}${globalThis.location.search}${globalThis.location.hash}` || '/';
+  return `/auth/login?redirect=${encodeURIComponent(redirectPath)}`;
+}
+
+export function SessionExpiredModal({ isOpen }: Readonly<SessionExpiredModalProps>) {
+  const goToLogin = () => {
+    globalThis.location.assign(buildGatewayLoginUrl());
+  };
+
+  return (
+    <Modal
+      variant={ModalVariant.small}
+      isOpen={isOpen}
+      onClose={goToLogin}
+      aria-label="Session expired"
+    >
+      <ModalHeader title="Session Expired" />
+      <ModalBody>
+        <p className="mb-3">
+          Your session has expired. Please log in again to continue.
+        </p>
+        <p className="text-muted-foreground text-sm">Your work has been saved.</p>
+      </ModalBody>
+      <ModalFooter>
+        <Button variant="primary" onClick={goToLogin}>
+          Log In
+        </Button>
+      </ModalFooter>
+    </Modal>
+  );
+}
diff --git a/src/frontend/components/Sidebar.tsx b/src/frontend/components/Sidebar.tsx
index 82d97b54..922717d0 100644
--- a/src/frontend/components/Sidebar.tsx
+++ b/src/frontend/components/Sidebar.tsx
@@ -1,56 +1,66 @@
-import React from "react";
-import { Button } from "./ui/button";
-import { ScrollArea } from "./ui/scroll-area";
-import { 
-  MessageSquarePlus, 
-  User, 
-  MessageSquare, 
-  Trash2,
-  Edit3,
-  PanelLeftClose,
-  PanelLeftOpen
-} from "lucide-react";
-import { cn } from "@/lib/utils";
-import { useRefreshableToken } from "@/hooks/useRefreshableToken";
-
-interface ChatItem {
-  id: string;
-  title: string;
-  timestamp: Date;
-  preview: string;
-}
+import React, { useMemo, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import {
+  Button,
+  Label,
+  Modal,
+  ModalBody,
+  ModalFooter,
+  ModalHeader,
+  ModalVariant,
+  SearchInput,
+  Tooltip,
+} from '@patternfly/react-core';
+import { Loader2, MessageSquare, Trash2, Edit3, Plus, Settings, LogOut } from 'lucide-react';
+import { logout } from '../services/logout';
+import { cn } from '@/lib/utils';
+import type { SidebarChatItem } from '../types/chat';
+import type { SubAgentInfo } from '../types/deep-agent';
+import { useAgentHealth } from '../hooks/useAgentHealth';
 
 interface SidebarProps {
   userName?: string;
   currentChatId?: string;
-  chatHistory: ChatItem[];
-  isCollapsed?: boolean;
+  chatHistory: SidebarChatItem[];
   tokenExpiry?: Date;
-  onToggleCollapse: () => void;
+  activeSubAgent?: SubAgentInfo | null;
   onNewChat: () => void;
   onSelectChat: (chatId: string) => void;
   onDeleteChat: (chatId: string) => void;
+  onDeleteAllChats: () => void;
   onRenameChat: (chatId: string, newTitle: string) => void;
 }
 
-function SidebarComponent({ 
-  userName = "User",
+function SidebarComponent({
+  userName = 'User',
   currentChatId,
   chatHistory,
-  isCollapsed = false,
-  onToggleCollapse,
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  tokenExpiry,
+  activeSubAgent,
   onNewChat,
   onSelectChat,
   onDeleteChat,
-  onRenameChat
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  onDeleteAllChats,
+  onRenameChat,
 }: SidebarProps) {
+  const navigate = useNavigate();
+  const agentHealth = useAgentHealth();
+  const [searchQuery, setSearchQuery] = useState('');
+  const [editingChat, setEditingChat] = useState<string | null>(null);
+  const [editTitle, setEditTitle] = useState('');
+  const [deletingChatId, setDeletingChatId] = useState<string | null>(null);
 
-  
-  const [hoveredChat, setHoveredChat] = React.useState<string | null>(null);
-  const [editingChat, setEditingChat] = React.useState<string | null>(null);
-  const [editTitle, setEditTitle] = React.useState("");
 
-  const { tokenStatus } = useRefreshableToken();
+  const filteredChats = useMemo(() => {
+    const q = searchQuery.trim().toLowerCase();
+    if (!q) return chatHistory;
+    return chatHistory.filter(
+      (chat) =>
+        chat.title.toLowerCase().includes(q) || chat.preview.toLowerCase().includes(q)
+    );
+  }, [chatHistory, searchQuery]);
 
   const handleRename = (chatId: string, title: string) => {
     setEditingChat(chatId);
@@ -60,223 +70,150 @@ function SidebarComponent({
   const handleSaveRename = (chatId: string) => {
     onRenameChat(chatId, editTitle);
     setEditingChat(null);
-    setEditTitle("");
+    setEditTitle('');
   };
 
-  // const formatRelativeTime = (date: Date) => {
-  //   const now = new Date();
-  //   const diffInMinutes = Math.floor((now.getTime() - date.getTime()) / (1000 * 60));
-    
-  //   if (diffInMinutes < 60) {
-  //     return diffInMinutes <= 1 ? "Just now" : `${diffInMinutes}m ago`;
-  //   }
-    
-  //   const diffInHours = Math.floor(diffInMinutes / 60);
-  //   if (diffInHours < 24) {
-  //     return `${diffInHours}h ago`;
-  //   }
-    
-  //   const diffInDays = Math.floor(diffInHours / 24);
-  //   if (diffInDays < 7) {
-  //     return `${diffInDays}d ago`;
-  //   }
-    
-  //   return date.toLocaleDateString();
-  // };
+  return (
+    <div className="flex flex-col h-full min-h-0 bg-sidebar border-r border-sidebar-border text-sidebar-foreground">
+      {/* New Chat button */}
+      <div className="shrink-0 p-3 pb-2">
+        <Button variant="primary" isBlock onClick={onNewChat} aria-label="Start new chat" icon={<Plus className="w-4 h-4" />}>
+          New Chat
+        </Button>
+      </div>
 
-  if (isCollapsed) {
-    return (
-      <div className="flex flex-col h-full w-12 bg-neutral-900 border-r border-neutral-700 text-neutral-100">
-        {/* Toggle Button */}
-        <div className="flex items-center justify-center p-2 border-b border-neutral-700">
-          <button
-            onClick={onToggleCollapse}
-            className="flex items-center justify-center w-8 h-8 rounded-lg hover:bg-neutral-800 hover:shadow-md transform hover:scale-110 active:scale-95 transition-all duration-200"
-            title="Expand Sidebar"
-          >
-            <PanelLeftOpen className="w-4 h-4 text-neutral-400 hover:text-neutral-200" />
-          </button>
-        </div>
-        
-        {/* New Chat Button - Collapsed */}
-        <div className="p-2">
-          <button
-            onClick={onNewChat}
-            className="flex items-center justify-center w-8 h-8 rounded-lg bg-primary hover:bg-primary/90 shadow-md hover:shadow-lg transform hover:scale-110 active:scale-95 transition-all duration-200"
-            title="New Chat"
-          >
-            <MessageSquarePlus className="w-4 h-4 text-primary-foreground" />
-          </button>
+      {/* Search */}
+      {chatHistory.length > 3 && (
+        <div className="shrink-0 px-3 py-1.5">
+          <SearchInput
+            placeholder="Search threads"
+            aria-label="Search chat threads"
+            value={searchQuery}
+            onChange={(_e, value) => setSearchQuery(value)}
+          />
         </div>
+      )}
 
-        {/* Chat History Dots */}
-        <div className="flex-1 overflow-hidden px-2">
-          <ScrollArea className="h-full">
-            <div className="space-y-2 py-2">
-              {chatHistory.slice(0, 10).map((chat) => (
-                <button
-                  key={chat.id}
-                  onClick={() => onSelectChat(chat.id)}
-                  className={cn(
-                    "flex items-center justify-center w-8 h-8 rounded-lg transition-all duration-200 transform hover:scale-110 active:scale-95",
-                    "bg-neutral-850 hover:bg-neutral-800 hover:shadow-sm"
-                  )}
-                  title={chat.title}
-                >
-                  <MessageSquare className={cn(
-                    "w-3 h-3 transition-colors duration-200",
-                    "text-neutral-400"
-                  )} />
-                </button>
-              ))}
-            </div>
-          </ScrollArea>
-        </div>
+      {/* Separator + label */}
+      <div className="shrink-0 px-3 pt-3 pb-1.5">
+        <p className="text-xs font-medium text-muted-foreground uppercase tracking-wider">Recent chats</p>
       </div>
-    );
-  }
 
-  return (
-    <div className={cn(
-      "flex flex-col h-full bg-neutral-900 border-r border-neutral-700 text-neutral-100 transition-all duration-300",
-      "w-64"
-    )}>
-      {/* Header with user info and toggle */}
-      <div className="flex items-center gap-3 p-4 border-b border-neutral-700">
-        <div className="flex items-center justify-center w-8 h-8 rounded-full bg-primary">
-          <User className="w-4 h-4 text-primary-foreground" />
-        </div>
-        <div className="flex-1 min-w-0">
-          <p className="text-sm font-medium text-neutral-100 truncate">
-            {userName}
-          </p>
-          <p className={`text-xs ${tokenStatus.color}`}>
-            {tokenStatus.text}
-          </p>
-        </div>
-        <button
-          onClick={onToggleCollapse}
-          className="flex items-center justify-center w-8 h-8 rounded-lg hover:bg-neutral-800 hover:shadow-md transform hover:scale-110 active:scale-95 transition-all duration-200"
-          title="Collapse Sidebar"
-        >
-          <PanelLeftClose className="w-4 h-4 text-neutral-400 hover:text-neutral-200 transition-colors duration-200" />
-        </button>
-      </div>
+      {/* Chat list */}
+      <div
+        className="flex-1 min-h-0 overflow-y-auto chat-scroll px-1.5"
+        role="listbox"
+        aria-label="Chat history"
+      >
+        {filteredChats.length === 0 ? (
+          <div className="flex flex-col items-center justify-center py-10 px-4 text-center">
+            <MessageSquare className="w-6 h-6 text-muted-foreground/40 mb-2" />
+            <p className="text-sm text-muted-foreground/60">
+              {chatHistory.length === 0 ? 'No chats yet' : 'No matching threads'}
+            </p>
+          </div>
+        ) : (
+          <div className="space-y-0.5">
+            {filteredChats.map((chat) => {
+              const isActive = currentChatId === chat.id;
 
-              {/* New Chat Button */}
-        <div className="p-4 border-b border-neutral-700">
-          <Button
-            onClick={onNewChat}
-            className="w-full justify-start gap-2 bg-primary hover:bg-primary/90 shadow-md hover:shadow-lg transform hover:scale-[1.02] active:scale-[0.98] transition-all duration-200 font-medium"
-            size="sm"
-          >
-            <MessageSquarePlus className="w-4 h-4" />
-            New Chat
-          </Button>
-        </div>
+              const focusNeighbor = (delta: number) => {
+                const idx = filteredChats.findIndex((c) => c.id === chat.id);
+                const next = filteredChats[idx + delta];
+                if (!next) return;
+                document.getElementById(`sidebar-chat-option-${next.id}`)?.focus();
+              };
 
-      {/* Chat History */}
-      <div className="flex-1 flex flex-col overflow-hidden">
-        <div className="px-4 py-2 border-b border-neutral-700 flex-shrink-0">
-          <h3 className="text-xs font-medium text-neutral-400 uppercase tracking-wider">
-            Recent Chats
-          </h3>
-        </div>
-        
-        <div className="flex-1 overflow-y-auto px-2">
-          {chatHistory.length === 0 ? (
-            <div className="flex flex-col items-center justify-center py-8 text-center">
-              <MessageSquare className="w-8 h-8 text-neutral-600 mb-2" />
-              <p className="text-sm text-neutral-500">No chats yet</p>
-              <p className="text-xs text-neutral-600 mt-1">Start a conversation!</p>
-            </div>
-          ) : (
-            <div className="space-y-1 py-2">
-              {chatHistory.map((chat) => {
-                const isActive = currentChatId === chat.id;
+              const onOptionKeyDown = (e: React.KeyboardEvent<HTMLDivElement>) => {
+                if (e.key === 'Enter' || e.key === ' ') {
+                  e.preventDefault();
+                  onSelectChat(chat.id);
+                  return;
+                }
+                if (e.key === 'ArrowDown') {
+                  e.preventDefault();
+                  focusNeighbor(1);
+                  return;
+                }
+                if (e.key === 'ArrowUp') {
+                  e.preventDefault();
+                  focusNeighbor(-1);
+                }
+              };
 
-                
-                return (
+              return (
                 <div
                   key={chat.id}
+                  id={`sidebar-chat-option-${chat.id}`}
+                  role="option"
+                  tabIndex={editingChat === chat.id ? -1 : 0}
+                  aria-selected={isActive}
                   className={cn(
-                    "group relative flex items-center gap-2 p-2 rounded-lg cursor-pointer transition-all duration-200",
+                    'group flex items-center gap-2 px-2.5 py-2 rounded-lg cursor-pointer transition-colors outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2',
                     isActive
-                      ? "bg-blue-600/30 border border-blue-500/60 shadow-lg ring-2 ring-blue-400/40"
-                      : "hover:bg-neutral-800 hover:shadow-sm hover:scale-[1.01]"
+                      ? 'bg-secondary text-foreground'
+                      : 'text-foreground/70 hover:bg-secondary/50 hover:text-foreground'
                   )}
-                  onMouseEnter={() => setHoveredChat(chat.id)}
-                  onMouseLeave={() => setHoveredChat(null)}
                   onClick={() => onSelectChat(chat.id)}
+                  onKeyDown={onOptionKeyDown}
                 >
-                  <MessageSquare className={cn(
-                    "w-4 h-4 flex-shrink-0 transition-colors duration-200",
-                    isActive 
-                      ? "text-blue-400" 
-                      : "text-neutral-400 group-hover:text-neutral-300"
-                  )} />
-                  
-                  <div className="flex-1 min-w-0">
-                    {editingChat === chat.id ? (
-                      <input
-                        value={editTitle}
-                        onChange={(e) => setEditTitle(e.target.value)}
-                        onBlur={() => handleSaveRename(chat.id)}
-                        onKeyPress={(e) => {
-                          if (e.key === "Enter") {
-                            handleSaveRename(chat.id);
-                          }
-                          if (e.key === "Escape") {
-                            setEditingChat(null);
-                            setEditTitle("");
-                          }
-                        }}
-                        className="w-full bg-transparent text-sm font-medium text-neutral-100 border border-neutral-600 rounded px-1 py-0.5 outline-none focus:border-primary"
-                        autoFocus
-                      />
-                    ) : (
-                      <>
-                        <p className={cn(
-                          "text-sm font-medium truncate transition-colors duration-200",
-                          isActive 
-                            ? "text-blue-100 font-bold" 
-                            : "text-neutral-100 group-hover:text-white"
-                        )}>
-                          {chat.title}
-                        </p>
-                        <p className="text-xs text-neutral-400 truncate mt-0.5">
-                          {chat.preview}
-                        </p>
-                        {/* <p className="text-xs text-neutral-500 mt-1">
-                          {formatRelativeTime(chat.timestamp)}
-                        </p> */}
-                      </>
-                    )}
-                  </div>
+                  {editingChat === chat.id ? (
+                    <input
+                      value={editTitle}
+                      onChange={(e) => setEditTitle(e.target.value)}
+                      onBlur={() => handleSaveRename(chat.id)}
+                      onKeyDown={(e) => {
+                        if (e.key === 'Enter') handleSaveRename(chat.id);
+                        if (e.key === 'Escape') {
+                          setEditingChat(null);
+                          setEditTitle('');
+                        }
+                      }}
+                      aria-label={`Rename chat: ${chat.title}`}
+                      className="flex-1 bg-transparent text-sm text-foreground border border-border rounded px-1.5 py-0.5 outline-none focus:border-primary"
+                      autoFocus
+                      onClick={(e) => e.stopPropagation()}
+                    />
+                  ) : (
+                    <div className="flex-1 min-w-0">
+                      <p className="text-sm truncate">{chat.title}</p>
+                      {isActive && activeSubAgent && (
+                        <div className="flex items-center gap-1.5 mt-0.5">
+                          <Label
+                            isCompact
+                            color="blue"
+                            icon={<Loader2 className="w-2.5 h-2.5 animate-spin" />}
+                          >
+                            <span className="capitalize">{activeSubAgent.name}</span>
+                          </Label>
+                        </div>
+                      )}
+                    </div>
+                  )}
 
-                  {(hoveredChat === chat.id || isActive) && editingChat !== chat.id && (
-                    <div className="flex items-center gap-1 opacity-0 group-hover:opacity-100 transition-opacity">
+                  {editingChat !== chat.id && (
+                    <div className="flex shrink-0 gap-0.5 opacity-0 group-hover:opacity-100 transition-opacity">
                       <Button
-                        size="icon"
-                        variant="ghost"
-                        className="w-6 h-6 text-neutral-400 hover:text-neutral-100 hover:bg-neutral-700 hover:shadow-sm transform hover:scale-110 active:scale-95 transition-all duration-200 rounded-md"
-                        onClick={(e) => {
+                        variant="plain"
+                        size="sm"
+                        className="h-6 w-6 !p-0 text-muted-foreground hover:text-foreground"
+                        onClick={(e: React.MouseEvent) => {
                           e.stopPropagation();
                           handleRename(chat.id, chat.title);
                         }}
-                        title="Rename chat"
+                        aria-label="Rename chat"
                       >
                         <Edit3 className="w-3 h-3" />
                       </Button>
                       <Button
-                        size="icon"
-                        variant="ghost"
-                        className="w-6 h-6 text-neutral-400 hover:text-red-400 hover:bg-red-950/30 hover:shadow-sm transform hover:scale-110 active:scale-95 transition-all duration-200 rounded-md"
-                        onClick={(e) => {
+                        variant="plain"
+                        size="sm"
+                        className="h-6 w-6 !p-0 text-muted-foreground hover:text-destructive"
+                        onClick={(e: React.MouseEvent) => {
                           e.stopPropagation();
-                          onDeleteChat(chat.id);
+                          setDeletingChatId(chat.id);
                         }}
-                        title="Delete chat"
+                        aria-label={`Delete chat: ${chat.title}`}
                       >
                         <Trash2 className="w-3 h-3" />
                       </Button>
@@ -284,20 +221,102 @@ function SidebarComponent({
                   )}
                 </div>
               );
-              })}
-            </div>
-          )}
-        </div>
+            })}
+          </div>
+        )}
+      </div>
+
+      <div className="shrink-0 px-3 py-2 border-t border-sidebar-border">
+        <Tooltip
+          content={
+            agentHealth.status === 'healthy'
+              ? 'Agent: healthy'
+              : agentHealth.status === 'unhealthy'
+                ? 'Agent: offline'
+                : 'Agent: status unknown'
+          }
+        >
+          <div className="flex items-center gap-2 text-xs text-muted-foreground cursor-default">
+            <span
+              className={cn(
+                'h-2 w-2 rounded-full shrink-0',
+                agentHealth.status === 'healthy' && 'bg-green-500',
+                agentHealth.status === 'unhealthy' && 'bg-red-500',
+                agentHealth.status === 'unknown' && 'bg-gray-400',
+              )}
+              aria-hidden
+            />
+            <span className="truncate">
+              {agentHealth.status === 'healthy'
+                ? 'Agent: healthy'
+                : agentHealth.status === 'unhealthy'
+                  ? 'Agent: offline'
+                  : 'Agent: unknown'}
+            </span>
+          </div>
+        </Tooltip>
       </div>
 
-      {/* Footer/Settings could go here */}
-      <div className="p-4 border-t border-neutral-700">
-        <p className="text-xs text-neutral-500 text-center">
-          Dataverse AI Chat
-        </p>
+      {/* Footer */}
+      <div className="shrink-0 p-3 border-t border-sidebar-border">
+        <div className="flex items-center gap-2.5">
+          <div className="w-8 h-8 rounded-full bg-primary/15 flex items-center justify-center text-sm font-semibold text-primary">
+            {userName.charAt(0).toUpperCase()}
+          </div>
+          <div className="flex-1 min-w-0">
+            <p className="text-sm font-medium truncate">{userName}</p>
+          </div>
+          <button
+            type="button"
+            onClick={() => navigate('/settings')}
+            className="shrink-0 p-1.5 rounded-lg text-muted-foreground hover:bg-secondary/50 hover:text-foreground transition-colors cursor-pointer"
+            aria-label="Open settings"
+          >
+            <Settings className="w-4 h-4" />
+          </button>
+          <button
+            type="button"
+            onClick={() => {
+              void logout();
+            }}
+            className="shrink-0 p-1.5 rounded-lg text-muted-foreground hover:bg-secondary/50 hover:text-foreground transition-colors cursor-pointer"
+            aria-label="Log out"
+          >
+            <LogOut className="w-4 h-4" />
+          </button>
+        </div>
       </div>
+
+      <Modal
+        variant={ModalVariant.small}
+        isOpen={deletingChatId !== null}
+        onClose={() => setDeletingChatId(null)}
+        aria-label="Delete chat confirmation"
+      >
+        <ModalHeader title="Delete chat" />
+        <ModalBody>
+          Are you sure you want to delete this chat? This action cannot be undone.
+        </ModalBody>
+        <ModalFooter>
+          <Button
+            variant="danger"
+            onClick={() => {
+              if (deletingChatId) {
+                onDeleteChat(deletingChatId);
+                setDeletingChatId(null);
+              }
+            }}
+          >
+            Delete
+          </Button>
+          <Button variant="link" onClick={() => setDeletingChatId(null)}>
+            Cancel
+          </Button>
+        </ModalFooter>
+      </Modal>
+
     </div>
   );
 }
 
-export const Sidebar = React.memo(SidebarComponent);
\ No newline at end of file
+export const Sidebar = React.memo(SidebarComponent);
diff --git a/src/frontend/components/StreamEventRenderer.tsx b/src/frontend/components/StreamEventRenderer.tsx
index 37d09a39..d6733c84 100644
--- a/src/frontend/components/StreamEventRenderer.tsx
+++ b/src/frontend/components/StreamEventRenderer.tsx
@@ -2,7 +2,6 @@ import { useState } from "react";
 import { StreamEvent, ToolCall } from "../hooks/useDataStream";
 import {
   Brain,
-  Settings,
   CheckCircle,
   ChevronDown,
   ChevronRight,
@@ -10,7 +9,9 @@ import {
   Play,
   Zap,
 } from "lucide-react";
+import { getToolIcon } from "../lib/toolIcons";
 import ReactMarkdown from "react-markdown";
+import remarkGfm from "remark-gfm";
 
 interface StreamEventRendererProps {
   events: StreamEvent[];
@@ -100,7 +101,7 @@ export function StreamEventRenderer({ events, isLoading }: StreamEventRendererPr
                   {isLoading && <Loader2 className="w-3 h-3 text-purple-400 animate-spin" />}
                 </div>
                 <div className="text-sm text-purple-200/80 italic">
-                  <ReactMarkdown>
+                  <ReactMarkdown remarkPlugins={[remarkGfm]}>
                     {typeof event.content === "string"
                       ? event.content
                       : JSON.stringify(event.content)}
@@ -111,24 +112,23 @@ export function StreamEventRenderer({ events, isLoading }: StreamEventRendererPr
           </div>
         );
 
-      case 'tool_call':
-        const isExpanded = expandedItems.has(event.id);
+      case 'tool_call': {
+        if (!event.tool_calls || event.tool_calls.length === 0) return null;
         return (
-          event.tool_calls?.map((toolCall: ToolCall) => (
-            <div key={event.id} className="bg-blue-900/20 border border-blue-700/30 rounded-lg overflow-hidden">
+          event.tool_calls.map((toolCall: ToolCall, index: number) => {
+            const toolCallId = `${event.id}-${index}`;
+            const isExpanded = expandedItems.has(toolCallId);
+            const ToolIcon = getToolIcon(toolCall.name);
+            return (
+            <div key={toolCallId} className="bg-blue-900/20 border border-blue-700/30 rounded-lg overflow-hidden">
             <button
-              onClick={() => toggleExpand(event.id)}
+              onClick={() => toggleExpand(toolCallId)}
               className="w-full flex items-center justify-between p-4 hover:bg-blue-800/20 transition-colors"
             >
               <div className="flex items-center gap-3">
-                <Settings className="w-5 h-5 text-blue-400" />
-                <div className="text-left">
-                  <div className="text-sm font-medium text-blue-100">
-                    {toolCall.name}
-                  </div>
-                  <div className="text-xs text-blue-200/60">
-                    Tool execution
-                  </div>
+                <ToolIcon className="w-5 h-5 text-blue-400" />
+                <div className="flex items-center gap-2">
+                  <span className="text-sm font-medium text-blue-100">{toolCall.name}</span>
                 </div>
               </div>
               {isExpanded ? (
@@ -141,16 +141,18 @@ export function StreamEventRenderer({ events, isLoading }: StreamEventRendererPr
             {isExpanded && (
               <div className="px-4 pb-4 border-t border-blue-700/20">
                 <div className="text-xs text-blue-200/60 mb-2">Arguments:</div>
-                <pre className="text-xs text-blue-100 bg-blue-950/30 p-2 rounded overflow-auto">
+                <pre className="text-xs text-blue-100 bg-blue-950/30 p-2 rounded overflow-y-auto max-h-60 whitespace-pre-wrap break-words">
                   {JSON.stringify(toolCall.args, null, 2)}
                 </pre>
               </div>
             )}
           </div>
-          ))
+          );
+          })
         );
+      }
 
-      case 'tool_result':
+      case 'tool_result': {
         const resultExpanded = expandedItems.has(event.id);
         return (
           <div key={event.id} className="bg-green-900/20 border border-green-700/30 rounded-lg overflow-hidden ml-6">
@@ -179,13 +181,14 @@ export function StreamEventRenderer({ events, isLoading }: StreamEventRendererPr
             {resultExpanded && (
               <div className="px-3 pb-3 border-t border-green-700/20">
                 <div className="text-xs text-green-200/60 mb-2">Result:</div>
-                <pre className="text-xs text-green-100 bg-green-950/30 p-2 rounded overflow-auto max-h-40">
+                <pre className="text-xs text-green-100 bg-green-950/30 p-2 rounded overflow-y-auto max-h-60 whitespace-pre-wrap break-words">
                   {typeof event.content === 'string' ? event.content : JSON.stringify(event.content, null, 2)}
                 </pre>
               </div>
             )}
           </div>
         );
+      }
 
       case 'token_group':
         return (
@@ -197,7 +200,7 @@ export function StreamEventRenderer({ events, isLoading }: StreamEventRendererPr
                   AI Response
                 </div>
                 <div className="text-sm text-neutral-200 prose prose-sm prose-invert max-w-none">
-                  <ReactMarkdown>
+                  <ReactMarkdown remarkPlugins={[remarkGfm]}>
                     {typeof event.content === "string"
                       ? event.content
                       : JSON.stringify(event.content)}
@@ -268,9 +271,13 @@ export function StreamEventRenderer({ events, isLoading }: StreamEventRendererPr
 
   if (events.length === 0 && !isLoading) return null;
 
+  const renderedEvents = processedEvents.map(renderEvent).filter(Boolean);
+
+  if (renderedEvents.length === 0 && !isLoading) return null;
+
   return (
     <div className="space-y-2 mb-4">
-      {processedEvents.map(renderEvent)}
+      {renderedEvents}
 
       {isLoading && (
         <div className="flex items-center gap-2 text-xs text-neutral-500 justify-center py-2">
diff --git a/src/frontend/components/SubAgentIndicator.tsx b/src/frontend/components/SubAgentIndicator.tsx
new file mode 100644
index 00000000..068b892b
--- /dev/null
+++ b/src/frontend/components/SubAgentIndicator.tsx
@@ -0,0 +1,203 @@
+import { useState, useEffect } from 'react';
+import {
+  Card,
+  CardBody,
+  CardHeader,
+  CardTitle,
+  Label,
+} from '@patternfly/react-core';
+import { Bot, Check, CheckCircle, ChevronDown, ChevronRight, Loader2, AlertCircle, ShieldCheck } from 'lucide-react';
+import type { ToolCallWithContent, InterruptInfo } from '../types/deep-agent';
+import { extractSubAgentName, extractDelegationText } from '../types/deep-agent';
+
+interface SubAgentIndicatorProps {
+  readonly toolCall: ToolCallWithContent;
+  readonly messageId: string;
+  readonly index: number;
+  readonly pendingInterrupt?: InterruptInfo | null;
+  readonly onInterruptResume?: (decisions: Array<{ type: 'approve' | 'reject'; message?: string }>) => void;
+  readonly onAlwaysAllow?: (toolNames: string[]) => void;
+}
+
+type VisualStatus = 'delegating' | 'complete' | 'error';
+
+function hasContent(toolCall: ToolCallWithContent): boolean {
+  if (toolCall.content == null) return false;
+  if (typeof toolCall.content === 'string') return toolCall.content.trim().length > 0;
+  return true;
+}
+
+function deriveStatus(toolCall: ToolCallWithContent): VisualStatus {
+  if (!hasContent(toolCall)) return 'delegating';
+  if (typeof toolCall.content === 'string' && toolCall.content.startsWith('Error')) return 'error';
+  return 'complete';
+}
+
+const STATUS_CONFIG: Record<VisualStatus, {
+  label: string;
+  color: 'blue' | 'green' | 'red';
+  icon: typeof Loader2;
+  animate: boolean;
+}> = {
+  delegating: { label: 'Working', color: 'blue', icon: Loader2, animate: true },
+  complete:   { label: 'Complete', color: 'green', icon: CheckCircle, animate: false },
+  error:      { label: 'Error', color: 'red', icon: AlertCircle, animate: false },
+};
+
+export function SubAgentIndicator({ toolCall, messageId, index, pendingInterrupt, onInterruptResume, onAlwaysAllow }: SubAgentIndicatorProps) {
+  const [expanded, setExpanded] = useState(false);
+  const [isApproving, setIsApproving] = useState(false);
+  const name = extractSubAgentName(toolCall);
+  const delegationText = extractDelegationText(toolCall);
+  const status = deriveStatus(toolCall);
+  const config = STATUS_CONFIG[status];
+  const StatusIcon = config.icon;
+
+  const interruptValue = pendingInterrupt?.value;
+  const needsApproval = !!(
+    typeof interruptValue === 'object'
+    && interruptValue !== null
+    && 'action_requests' in interruptValue
+    && interruptValue.action_requests?.some((r) => r.name === 'task' || r.name === name)
+  ) && toolCall.content == null;
+
+  useEffect(() => {
+    if (needsApproval) {
+      setIsApproving(false);
+      setExpanded(true);
+    }
+  }, [needsApproval]);
+
+  return (
+    <div className="flex items-start gap-3">
+      <div
+        className={`flex-shrink-0 w-8 h-8 rounded-full flex items-center justify-center ${needsApproval ? 'bg-yellow-500/15 border border-yellow-500/40' : 'bg-blue-500/15 border border-blue-500/30'}`}
+        aria-hidden="true"
+      >
+        <Bot className={`w-4 h-4 ${needsApproval ? 'text-yellow-500' : 'text-blue-500'}`} />
+      </div>
+      <div className="flex-1 min-w-0">
+        <Card isCompact className={`shadow-card ${needsApproval ? 'border-yellow-500/60' : ''}`}>
+          <CardHeader
+            className="cursor-pointer"
+            onClick={() => setExpanded((v) => !v)}
+            onKeyDown={(e: React.KeyboardEvent) => {
+              if (e.key === 'Enter' || e.key === ' ') {
+                e.preventDefault();
+                setExpanded((v) => !v);
+              }
+            }}
+            {...({ tabIndex: 0, role: 'button', 'aria-expanded': expanded, 'aria-controls': `subagent-body-${messageId}-${index}` } as React.HTMLAttributes<HTMLDivElement>)}
+          >
+            <div className="flex items-center justify-between w-full">
+              <div className="flex items-center gap-2.5">
+                <CardTitle className="text-sm font-medium capitalize">
+                  {name}
+                </CardTitle>
+                <Label
+                  isCompact
+                  color={needsApproval ? 'yellow' : config.color}
+                  icon={
+                    <StatusIcon
+                      className={`w-3 h-3 ${config.animate && !needsApproval ? 'animate-spin' : ''}`}
+                      aria-hidden="true"
+                    />
+                  }
+                >
+                  {needsApproval ? 'Approval required' : config.label}
+                </Label>
+              </div>
+              <span aria-hidden="true">
+                {expanded ? (
+                  <ChevronDown className="w-4 h-4 text-muted-foreground" />
+                ) : (
+                  <ChevronRight className="w-4 h-4 text-muted-foreground" />
+                )}
+              </span>
+            </div>
+          </CardHeader>
+
+          {expanded && (
+            <CardBody
+              id={`subagent-body-${messageId}-${index}`}
+              className="border-t border-border pt-3 space-y-3 !pb-0"
+            >
+              {delegationText && (
+                <div>
+                  <p className="text-xs font-medium text-muted-foreground uppercase tracking-wider mb-1.5">
+                    Delegation
+                  </p>
+                  <p className="text-xs text-foreground bg-muted border border-border p-3 rounded-lg whitespace-pre-wrap">
+                    {delegationText}
+                  </p>
+                </div>
+              )}
+              {hasContent(toolCall) && (
+                <div>
+                  <p className="text-xs font-medium text-muted-foreground uppercase tracking-wider mb-1.5">
+                    Result
+                  </p>
+                  <pre className="text-xs text-foreground bg-muted border border-border p-3 rounded-lg overflow-auto font-mono max-h-60">
+                    {typeof toolCall.content === 'string'
+                      ? toolCall.content
+                      : JSON.stringify(toolCall.content, null, 2)}
+                  </pre>
+                </div>
+              )}
+              {status === 'delegating' && !needsApproval && (
+                <div className="flex items-center gap-2 text-xs text-muted-foreground pb-3">
+                  <div className="w-1.5 h-1.5 rounded-full bg-blue-500 animate-pulse" />
+                  Sub-agent is processing&hellip;
+                </div>
+              )}
+
+              {needsApproval && !isApproving && onInterruptResume && (
+                <div role="alert" aria-live="assertive" aria-label={`Sub-agent ${name} requires approval`} className="flex items-center gap-2 py-3 border-t border-yellow-500/30 bg-yellow-500/5 -mx-4 px-4 flex-wrap rounded-b-lg">
+                  <button
+                    type="button"
+                    autoFocus
+                    onClick={() => {
+                      setIsApproving(true);
+                      onInterruptResume([{ type: 'approve' }]);
+                    }}
+                    aria-label={`Approve sub-agent action: ${name}`}
+                    className="inline-flex items-center gap-1.5 px-3 py-1.5 rounded-lg text-xs font-medium transition-colors"
+                    style={{ backgroundColor: 'var(--chart-3)', color: 'var(--background)' }}
+                  >
+                    <Check className="w-3 h-3" aria-hidden="true" />
+                    Approve
+                  </button>
+                  <button
+                    type="button"
+                    onClick={() => {
+                      setIsApproving(true);
+                      onInterruptResume([{ type: 'reject', message: 'User rejected this action.' }]);
+                    }}
+                    aria-label={`Reject sub-agent action: ${name}`}
+                    className="inline-flex items-center gap-1.5 px-3 py-1.5 rounded-lg text-xs font-medium hover:opacity-90 transition-colors"
+                    style={{ backgroundColor: 'var(--destructive)', color: 'var(--background)' }}
+                  >
+                    Reject
+                  </button>
+                  <button
+                    type="button"
+                    onClick={() => {
+                      setIsApproving(true);
+                      onAlwaysAllow?.([name]);
+                      onInterruptResume([{ type: 'approve' }]);
+                    }}
+                    aria-label={`Always allow sub-agent: ${name}`}
+                    className="inline-flex items-center gap-1.5 px-3 py-1.5 rounded-lg text-xs font-medium border border-border bg-muted text-foreground hover:bg-muted/70 transition-colors"
+                  >
+                    <ShieldCheck className="w-3 h-3" aria-hidden="true" />
+                    Always allow
+                  </button>
+                </div>
+              )}
+            </CardBody>
+          )}
+        </Card>
+      </div>
+    </div>
+  );
+}
diff --git a/src/frontend/components/TaskProgressStepper.tsx b/src/frontend/components/TaskProgressStepper.tsx
new file mode 100644
index 00000000..19ab491c
--- /dev/null
+++ b/src/frontend/components/TaskProgressStepper.tsx
@@ -0,0 +1,90 @@
+import type { Message } from '@langchain/langgraph-sdk';
+import { Label } from '@patternfly/react-core';
+import { CheckCircle, Circle, Loader2 } from 'lucide-react';
+import { isSubAgentToolCall, extractSubAgentName } from '../types/deep-agent';
+
+interface TaskProgressStepperProps {
+  readonly messages: Message[];
+  readonly isLoading: boolean;
+}
+
+interface DerivedStep {
+  id: string;
+  name: string;
+  status: 'running' | 'complete';
+  isSubAgent: boolean;
+}
+
+function deriveSteps(messages: Message[]): DerivedStep[] {
+  const steps: DerivedStep[] = [];
+  const completedToolCallIds = new Set<string>();
+
+  for (const msg of messages) {
+    if (msg.type === 'tool' && (msg as any).tool_call_id) {
+      completedToolCallIds.add((msg as any).tool_call_id);
+    }
+  }
+
+  for (const msg of messages) {
+    if (msg.type !== 'ai') continue;
+    const toolCalls = (msg as any).tool_calls;
+    if (!Array.isArray(toolCalls) || toolCalls.length === 0) continue;
+
+    for (const tc of toolCalls) {
+      if (tc.name === 'write_todos') continue;
+      const subAgent = isSubAgentToolCall(tc);
+      steps.push({
+        id: tc.id ?? `step-${steps.length}`,
+        name: subAgent ? extractSubAgentName(tc) : tc.name,
+        status: completedToolCallIds.has(tc.id) || tc.content != null ? 'complete' : 'running',
+        isSubAgent: subAgent,
+      });
+    }
+  }
+
+  return steps;
+}
+
+export function TaskProgressStepper({ messages, isLoading }: TaskProgressStepperProps) {
+  const steps = deriveSteps(messages);
+  if (steps.length === 0) return null;
+
+  return (
+    <div className="flex items-center gap-1.5 px-4 py-2 overflow-x-auto">
+      {steps.map((step, idx) => {
+        const StatusIcon = step.status === 'complete' ? CheckCircle
+          : step.status === 'running' ? Loader2
+          : Circle;
+
+        return (
+          <div key={step.id} className="flex items-center gap-1.5 shrink-0">
+            {idx > 0 && (
+              <div className={`w-4 h-px ${step.status === 'complete' ? 'bg-green-500/50' : 'bg-border'}`} />
+            )}
+            <Label
+              isCompact
+              color={step.status === 'complete' ? 'green' : 'blue'}
+              icon={
+                <StatusIcon
+                  className={`w-2.5 h-2.5 ${step.status === 'running' ? 'animate-spin' : ''}`}
+                />
+              }
+            >
+              <span className={step.isSubAgent ? 'capitalize font-medium' : ''}>
+                {step.name}
+              </span>
+            </Label>
+          </div>
+        );
+      })}
+      {isLoading && steps.every((s) => s.status === 'complete') && (
+        <div className="flex items-center gap-1.5 shrink-0">
+          <div className="w-4 h-px bg-border" />
+          <Label isCompact color="blue" icon={<Loader2 className="w-2.5 h-2.5 animate-spin" />}>
+            Processing
+          </Label>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/src/frontend/components/TasksSidebar.tsx b/src/frontend/components/TasksSidebar.tsx
new file mode 100644
index 00000000..8d6a0573
--- /dev/null
+++ b/src/frontend/components/TasksSidebar.tsx
@@ -0,0 +1,128 @@
+import type { Message } from '@langchain/langgraph-sdk';
+import {
+  Card,
+  CardBody,
+  CardHeader,
+  CardTitle,
+  Label,
+} from '@patternfly/react-core';
+import { Bot, CheckCircle, FileText, Loader2, Wrench } from 'lucide-react';
+import { isSubAgentToolCall, extractSubAgentName, detectArtifactKind } from '../types/deep-agent';
+
+interface TasksSidebarProps {
+  readonly messages: Message[];
+  readonly isLoading: boolean;
+}
+
+interface ToolCallEntry {
+  id: string;
+  name: string;
+  isSubAgent: boolean;
+  hasResult: boolean;
+  resultPreview?: string;
+  resultKind?: string;
+}
+
+function extractEntries(messages: Message[]): ToolCallEntry[] {
+  const entries: ToolCallEntry[] = [];
+  const resultMap = new Map<string, string>();
+
+  for (const msg of messages) {
+    if (msg.type === 'tool' && (msg as any).tool_call_id) {
+      const content = typeof (msg as any).content === 'string'
+        ? (msg as any).content
+        : JSON.stringify((msg as any).content);
+      resultMap.set((msg as any).tool_call_id, content);
+    }
+  }
+
+  for (const msg of messages) {
+    if (msg.type !== 'ai') continue;
+    const toolCalls = (msg as any).tool_calls;
+    if (!Array.isArray(toolCalls)) continue;
+
+    for (const tc of toolCalls) {
+      if (tc.name === 'write_todos') continue;
+      const result = resultMap.get(tc.id) ?? (tc.content != null ? String(tc.content) : undefined);
+      const subAgent = isSubAgentToolCall(tc);
+      entries.push({
+        id: tc.id ?? `tc-${entries.length}`,
+        name: subAgent ? extractSubAgentName(tc) : tc.name,
+        isSubAgent: subAgent,
+        hasResult: result !== undefined,
+        resultPreview: result ? result.substring(0, 80) + (result.length > 80 ? '...' : '') : undefined,
+        resultKind: result ? detectArtifactKind(result) : undefined,
+      });
+    }
+  }
+
+  return entries;
+}
+
+export function TasksSidebar({ messages, isLoading }: TasksSidebarProps) {
+  const entries = extractEntries(messages);
+  if (entries.length === 0 && !isLoading) return null;
+
+  const completed = entries.filter((e) => e.hasResult).length;
+  const total = entries.length;
+
+  return (
+    <Card isCompact className="h-full">
+      <CardHeader>
+        <CardTitle className="text-sm flex items-center justify-between w-full">
+          <span>Tasks & Tools</span>
+          {total > 0 && (
+            <Label isCompact color={completed === total ? 'green' : 'blue'}>
+              {completed}/{total}
+            </Label>
+          )}
+        </CardTitle>
+      </CardHeader>
+      <CardBody className="overflow-y-auto space-y-1.5 !pt-0">
+        {entries.map((entry) => {
+          const Icon = entry.isSubAgent ? Bot : Wrench;
+          const StatusIcon = entry.hasResult ? CheckCircle : Loader2;
+
+          return (
+            <div
+              key={entry.id}
+              className="flex items-start gap-2 p-2 rounded-md hover:bg-muted/50 transition-colors"
+            >
+              <Icon className="w-3.5 h-3.5 mt-0.5 text-muted-foreground shrink-0" />
+              <div className="flex-1 min-w-0">
+                <div className="flex items-center gap-1.5">
+                  <span className={`text-xs font-medium truncate ${entry.isSubAgent ? 'capitalize' : 'font-mono'}`}>
+                    {entry.name}
+                  </span>
+                  <StatusIcon
+                    className={`w-3 h-3 shrink-0 ${
+                      entry.hasResult ? 'text-green-500' : 'text-blue-500 animate-spin'
+                    }`}
+                  />
+                </div>
+                {entry.resultPreview && (
+                  <p className="text-[10px] text-muted-foreground truncate mt-0.5">
+                    {entry.resultPreview}
+                  </p>
+                )}
+                {entry.resultKind && entry.resultKind !== 'text' && (
+                  <div className="mt-0.5">
+                    <Label isCompact color="grey">
+                      <FileText className="w-2 h-2 mr-0.5" />
+                      {entry.resultKind}
+                    </Label>
+                  </div>
+                )}
+              </div>
+            </div>
+          );
+        })}
+        {entries.length === 0 && isLoading && (
+          <p className="text-xs text-muted-foreground text-center py-4">
+            Waiting for tasks...
+          </p>
+        )}
+      </CardBody>
+    </Card>
+  );
+}
diff --git a/src/frontend/components/ToastNotifications.tsx b/src/frontend/components/ToastNotifications.tsx
new file mode 100644
index 00000000..4872cc23
--- /dev/null
+++ b/src/frontend/components/ToastNotifications.tsx
@@ -0,0 +1,45 @@
+import {
+  Alert,
+  AlertActionCloseButton,
+  AlertGroup,
+  AlertVariant,
+} from '@patternfly/react-core';
+import { useAppDispatch, useAppSelector } from '../redux/hooks';
+import { removeToast, selectToasts, type ToastVariant } from '../redux/slices/toasts';
+
+const AUTO_DISMISS_MS = 6000;
+
+const pfVariant: Record<ToastVariant, AlertVariant> = {
+  success: AlertVariant.success,
+  danger: AlertVariant.danger,
+  warning: AlertVariant.warning,
+  info: AlertVariant.info,
+};
+
+export function ToastNotifications() {
+  const dispatch = useAppDispatch();
+  const toasts = useAppSelector(selectToasts);
+
+  if (toasts.length === 0) return null;
+
+  return (
+    <AlertGroup isToast isLiveRegion>
+      {toasts.map((toast) => (
+        <Alert
+          key={toast.id}
+          variant={pfVariant[toast.variant]}
+          title={toast.title}
+          timeout={AUTO_DISMISS_MS}
+          onTimeout={() => dispatch(removeToast(toast.id))}
+          actionClose={
+            <AlertActionCloseButton
+              onClose={() => dispatch(removeToast(toast.id))}
+            />
+          }
+        >
+          {toast.message}
+        </Alert>
+      ))}
+    </AlertGroup>
+  );
+}
diff --git a/src/frontend/components/TodoListRenderer.tsx b/src/frontend/components/TodoListRenderer.tsx
new file mode 100644
index 00000000..a9986f46
--- /dev/null
+++ b/src/frontend/components/TodoListRenderer.tsx
@@ -0,0 +1,100 @@
+import { CheckCircle, Circle, Loader2, XCircle, ListTodo } from "lucide-react";
+import { cn } from "../lib/utils";
+
+export interface TodoItem {
+  content: string;
+  status: "pending" | "in_progress" | "completed" | "cancelled";
+}
+
+const TOOL_NAME = "write_todos";
+
+export function isWriteTodosCall(toolCall: { name: string }): boolean {
+  return toolCall.name === TOOL_NAME;
+}
+
+export function isWriteTodosResult(message: { type: string; name?: string }): boolean {
+  return message.type === 'tool' && message.name === TOOL_NAME;
+}
+
+function isValidTodoItem(item: unknown): item is TodoItem {
+  return (
+    typeof item === 'object' &&
+    item !== null &&
+    typeof (item as any).content === 'string' &&
+    typeof (item as any).status === 'string'
+  );
+}
+
+export function extractTodos(toolCall: { args: Record<string, unknown> }): TodoItem[] {
+  const args = toolCall.args as Record<string, unknown>;
+  if (Array.isArray(args?.todos)) {
+    return args.todos.filter(isValidTodoItem);
+  }
+  return [];
+}
+
+const statusIcon: Record<TodoItem["status"], React.ReactNode> = {
+  pending: <Circle className="w-4 h-4 text-neutral-500 shrink-0" />,
+  in_progress: <Loader2 className="w-4 h-4 text-blue-400 animate-spin shrink-0" />,
+  completed: <CheckCircle className="w-4 h-4 text-green-400 shrink-0" />,
+  cancelled: <XCircle className="w-4 h-4 text-neutral-600 shrink-0" />,
+};
+
+interface TodoListRendererProps {
+  todos: TodoItem[];
+  strikeAll?: boolean;
+}
+
+export function TodoListRenderer({ todos, strikeAll = false }: TodoListRendererProps) {
+  if (todos.length === 0) return null;
+
+  const completed = todos.filter(t => t.status === "completed").length;
+
+  return (
+    <div className="rounded-lg border border-neutral-700/40 bg-neutral-800/40 overflow-hidden w-full">
+      <div className="flex items-center gap-2 px-3 py-2 border-b border-neutral-700/30 bg-neutral-800/60">
+        <ListTodo className="w-4 h-4 text-neutral-400" />
+        <span className="text-xs font-medium text-neutral-400 uppercase tracking-wide">
+          Tasks
+        </span>
+        <span className="ml-auto text-xs text-neutral-500">
+          {completed}/{todos.length}
+        </span>
+      </div>
+      <ul className="divide-y divide-neutral-700/20">
+        {todos.map((todo, idx) => {
+          // When strikeAll is true, only show icons for completed/cancelled items
+          const showIcon = !strikeAll || todo.status === "completed" || todo.status === "cancelled";
+
+          return (
+            <li
+              key={`${idx}-${todo.content}`}
+              className={cn(
+                "flex items-start gap-2.5 px-3 py-2 text-sm transition-opacity",
+                (strikeAll || todo.status === "completed" || todo.status === "cancelled") && "opacity-60",
+              )}
+            >
+              {showIcon ? (
+                statusIcon[todo.status] ?? <Circle className="w-4 h-4 text-neutral-500 shrink-0" />
+              ) : (
+                <span className="w-4 h-4 shrink-0" />
+              )}
+              <span
+                className={cn(
+                  "leading-5",
+                  strikeAll && "line-through text-neutral-500",
+                  !strikeAll && todo.status === "completed" && "line-through text-neutral-500",
+                  !strikeAll && todo.status === "cancelled" && "line-through text-neutral-600",
+                  !strikeAll && todo.status === "in_progress" && "text-blue-100",
+                  !strikeAll && todo.status === "pending" && "text-neutral-300",
+                )}
+              >
+                {todo.content}
+              </span>
+            </li>
+          );
+        })}
+      </ul>
+    </div>
+  );
+}
diff --git a/src/frontend/components/TodoStrip.tsx b/src/frontend/components/TodoStrip.tsx
new file mode 100644
index 00000000..d7d39e37
--- /dev/null
+++ b/src/frontend/components/TodoStrip.tsx
@@ -0,0 +1,62 @@
+import { useMemo } from 'react';
+import type { Message } from '@langchain/langgraph-sdk';
+import { CheckCircle, Circle, Loader2, ListChecks } from 'lucide-react';
+import { extractTodosFromMessages, type TodoItem } from '../types/deep-agent';
+
+interface TodoStripProps {
+  readonly messages: Message[];
+  readonly isLoading?: boolean;
+}
+
+const STATUS_CONFIG: Record<TodoItem['status'], { icon: typeof CheckCircle; className: string; iconClass: string }> = {
+  completed: { icon: CheckCircle, className: 'text-green-600 dark:text-green-400', iconClass: 'text-green-500 dark:text-green-400' },
+  in_progress: { icon: Loader2, className: 'text-foreground font-medium', iconClass: 'text-primary animate-spin' },
+  pending: { icon: Circle, className: 'text-muted-foreground', iconClass: 'text-muted-foreground/50' },
+};
+
+export function TodoStrip({ messages, isLoading = false }: TodoStripProps) {
+  const rawTodos = useMemo(() => extractTodosFromMessages(messages), [messages]);
+
+  const todos = useMemo(() => {
+    if (isLoading) return rawTodos;
+    return rawTodos.map((t) =>
+      t.status === 'in_progress' || t.status === 'pending'
+        ? { ...t, status: 'completed' as const }
+        : t,
+    );
+  }, [rawTodos, isLoading]);
+
+  if (todos.length === 0) return null;
+
+  const done = todos.filter((t) => t.status === 'completed').length;
+
+  return (
+    <div className="border-t border-border bg-card/60 backdrop-blur-sm" role="status" aria-label="Current tasks">
+      <div className="max-w-3xl mx-auto px-4 py-2">
+        <div className="flex items-center gap-2 mb-1.5">
+          <ListChecks className="w-3.5 h-3.5 text-muted-foreground" />
+          <span className="text-[11px] font-medium text-muted-foreground uppercase tracking-wider">
+            Tasks
+          </span>
+          <span className="text-[11px] text-muted-foreground ml-auto">
+            {done}/{todos.length}
+          </span>
+        </div>
+        <ul className="space-y-0.5">
+          {todos.map((todo) => {
+            const cfg = STATUS_CONFIG[todo.status];
+            const Icon = cfg.icon;
+            return (
+              <li key={`${todo.status}-${todo.content}`} className="flex items-start gap-2 py-0.5">
+                <Icon className={`w-3.5 h-3.5 mt-0.5 shrink-0 ${cfg.iconClass}`} />
+                <span className={`text-xs leading-snug ${cfg.className}`}>
+                  {todo.content}
+                </span>
+              </li>
+            );
+          })}
+        </ul>
+      </div>
+    </div>
+  );
+}
diff --git a/src/frontend/components/__tests__/accessibility.test.tsx b/src/frontend/components/__tests__/accessibility.test.tsx
new file mode 100644
index 00000000..f40f661e
--- /dev/null
+++ b/src/frontend/components/__tests__/accessibility.test.tsx
@@ -0,0 +1,234 @@
+/**
+ * Accessibility test suite — WCAG 2.1 AA compliance
+ *
+ * Tests cover:
+ * - axe-core automated scans for each page/component
+ * - ARIA landmark, role, label, and keyboard navigation attributes
+ * - Live region presence for dynamic content
+ * - Semantic HTML and form labelling
+ */
+import React from 'react';
+import { render, screen } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { axe } from '../../test-utils/setup';
+import { renderWithProviders } from '../../test-utils/render';
+import { HomePage } from '../../pages/HomePage';
+import { SettingsPage } from '../../pages/SettingsPage';
+import { AppearanceSettings } from '../settings/AppearanceSettings';
+import { InputForm } from '../InputForm';
+import { RedHatLogo } from '../RedHatLogo';
+
+// ---------------------------------------------------------------------------
+// HomePage
+// ---------------------------------------------------------------------------
+describe('HomePage — accessibility', () => {
+  it('passes axe audit', async () => {
+    const { container } = renderWithProviders(<HomePage />);
+    expect(await axe(container)).toHaveNoViolations();
+  });
+
+  it('has an accessible label on the chat textarea', () => {
+    renderWithProviders(<HomePage />);
+    const textarea = screen.getByRole('textbox', { name: /enter a prompt/i });
+    expect(textarea).toBeInTheDocument();
+  });
+
+  it('has an accessible send button', () => {
+    renderWithProviders(<HomePage />);
+    const btn = screen.getByRole('button', { name: /send message/i });
+    expect(btn).toBeInTheDocument();
+  });
+
+  it('quick-prompt buttons have descriptive aria-labels', () => {
+    renderWithProviders(<HomePage />);
+    const promptBtns = screen.getAllByRole('button', { name: /start chat:/i });
+    expect(promptBtns.length).toBeGreaterThan(0);
+  });
+
+  it('emojis in headings are hidden from screen readers', () => {
+    renderWithProviders(<HomePage />);
+    const hiddenEmojis = document.querySelectorAll('[aria-hidden="true"]');
+    const emojiElements = Array.from(hiddenEmojis).filter(
+      (el) => el.textContent === '👋' || el.textContent === '🚀',
+    );
+    expect(emojiElements.length).toBeGreaterThan(0);
+  });
+
+  it('quick-prompt list has an accessible group label', () => {
+    renderWithProviders(<HomePage />);
+    const list = screen.getByRole('list', { name: /quick prompt suggestions/i });
+    expect(list).toBeInTheDocument();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// SettingsPage — ARIA tab pattern
+// ---------------------------------------------------------------------------
+describe('SettingsPage — accessibility', () => {
+  it('passes axe audit', async () => {
+    const { container } = renderWithProviders(<SettingsPage />);
+    expect(await axe(container)).toHaveNoViolations();
+  });
+
+  it('renders a tablist with correct role', () => {
+    renderWithProviders(<SettingsPage />);
+    const tablist = screen.getByRole('tablist');
+    expect(tablist).toBeInTheDocument();
+  });
+
+  it('tabs have role="tab" and aria-selected', () => {
+    renderWithProviders(<SettingsPage />);
+    const tabs = screen.getAllByRole('tab');
+    expect(tabs.length).toBe(5);
+    const selectedTabs = tabs.filter((t) => t.getAttribute('aria-selected') === 'true');
+    expect(selectedTabs.length).toBe(1);
+  });
+
+  it('each tab has aria-controls pointing to its panel', () => {
+    renderWithProviders(<SettingsPage />);
+    const tabs = screen.getAllByRole('tab');
+    tabs.forEach((tab) => {
+      const controlsId = tab.getAttribute('aria-controls');
+      expect(controlsId).toBeTruthy();
+      expect(document.getElementById(controlsId!)).toBeInTheDocument();
+    });
+  });
+
+  it('tabpanels have role="tabpanel" and aria-labelledby pointing to their tab', () => {
+    renderWithProviders(<SettingsPage />);
+    const panels = screen.getAllByRole('tabpanel');
+    expect(panels.length).toBeGreaterThan(0);
+    panels.forEach((panel) => {
+      const labelledBy = panel.getAttribute('aria-labelledby');
+      expect(labelledBy).toBeTruthy();
+      expect(document.getElementById(labelledBy!)).toBeInTheDocument();
+    });
+  });
+
+  it('inactive tab panels are hidden from assistive technology', () => {
+    renderWithProviders(<SettingsPage />);
+    const hiddenPanels = document
+      .querySelectorAll('[role="tabpanel"][hidden]');
+    expect(hiddenPanels.length).toBe(4);
+  });
+
+  it('arrow-key navigation moves focus between tabs', async () => {
+    const user = userEvent.setup();
+    renderWithProviders(<SettingsPage />);
+    const tabs = screen.getAllByRole('tab');
+    tabs[0].focus();
+    await user.keyboard('{ArrowDown}');
+    expect(document.activeElement).toBe(tabs[1]);
+    await user.keyboard('{ArrowUp}');
+    expect(document.activeElement).toBe(tabs[0]);
+  });
+
+  it('Home/End keys jump to first and last tabs', async () => {
+    const user = userEvent.setup();
+    renderWithProviders(<SettingsPage />);
+    const tabs = screen.getAllByRole('tab');
+    tabs[0].focus();
+    await user.keyboard('{End}');
+    expect(document.activeElement).toBe(tabs[tabs.length - 1]);
+    await user.keyboard('{Home}');
+    expect(document.activeElement).toBe(tabs[0]);
+  });
+
+  it('back button has a descriptive aria-label', () => {
+    renderWithProviders(<SettingsPage />);
+    const back = screen.getByRole('button', { name: /back to home/i });
+    expect(back).toBeInTheDocument();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AppearanceSettings — radiogroup
+// ---------------------------------------------------------------------------
+describe('AppearanceSettings — accessibility', () => {
+  it('passes axe audit', async () => {
+    const { container } = renderWithProviders(<AppearanceSettings />);
+    expect(await axe(container)).toHaveNoViolations();
+  });
+
+  it('has a radiogroup wrapping theme options', () => {
+    renderWithProviders(<AppearanceSettings />);
+    const group = screen.getByRole('radiogroup');
+    expect(group).toBeInTheDocument();
+  });
+
+  it('theme options have role="radio"', () => {
+    renderWithProviders(<AppearanceSettings />);
+    const radios = screen.getAllByRole('radio');
+    expect(radios.length).toBe(2);
+  });
+
+  it('exactly one radio is checked by default', () => {
+    renderWithProviders(<AppearanceSettings />);
+    const checked = screen
+      .getAllByRole('radio')
+      .filter((r) => r.getAttribute('aria-checked') === 'true');
+    expect(checked.length).toBe(1);
+  });
+
+  it('clicking a theme option marks it as checked', async () => {
+    const user = userEvent.setup();
+    renderWithProviders(<AppearanceSettings />);
+    const radios = screen.getAllByRole('radio');
+    await user.click(radios[1]);
+    expect(radios[1]).toHaveAttribute('aria-checked', 'true');
+  });
+});
+
+// ---------------------------------------------------------------------------
+// InputForm
+// ---------------------------------------------------------------------------
+describe('InputForm — accessibility', () => {
+  const noop = () => {};
+
+  it('passes axe audit', async () => {
+    const { container } = render(
+      <InputForm onSubmit={noop} onCancel={noop} isLoading={false} hasHistory={false} />,
+    );
+    expect(await axe(container)).toHaveNoViolations();
+  });
+
+  it('textarea has accessible label "Type a message"', () => {
+    render(
+      <InputForm onSubmit={noop} onCancel={noop} isLoading={false} hasHistory={false} />,
+    );
+    expect(screen.getByRole('textbox', { name: /type a message/i })).toBeInTheDocument();
+  });
+
+  it('send button has accessible label', () => {
+    render(
+      <InputForm onSubmit={noop} onCancel={noop} isLoading={false} hasHistory={false} />,
+    );
+    expect(screen.getByRole('button', { name: /send message/i })).toBeInTheDocument();
+  });
+
+  it('cancel button has accessible label during loading', () => {
+    render(
+      <InputForm onSubmit={noop} onCancel={noop} isLoading={true} hasHistory={false} />,
+    );
+    expect(screen.getByRole('button', { name: /cancel streaming/i })).toBeInTheDocument();
+  });
+
+  it('New Chat button has accessible label when history exists', () => {
+    render(
+      <InputForm onSubmit={noop} onCancel={noop} isLoading={false} hasHistory={true} />,
+    );
+    expect(screen.getByRole('button', { name: /new chat/i })).toBeInTheDocument();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// RedHatLogo
+// ---------------------------------------------------------------------------
+describe('RedHatLogo — accessibility', () => {
+  it('is hidden from assistive technology (decorative)', () => {
+    render(<RedHatLogo className="h-6 w-6" />);
+    const svg = document.querySelector('svg');
+    expect(svg).toHaveAttribute('aria-hidden', 'true');
+    expect(svg).toHaveAttribute('focusable', 'false');
+  });
+});
diff --git a/src/frontend/components/layout/AppLayout.tsx b/src/frontend/components/layout/AppLayout.tsx
index 9c752f99..a7221218 100644
--- a/src/frontend/components/layout/AppLayout.tsx
+++ b/src/frontend/components/layout/AppLayout.tsx
@@ -1,97 +1,380 @@
-import React, { useState, useMemo } from 'react';
-import { useNavigate } from 'react-router-dom';
+import React, { useState, useMemo, useCallback, useEffect, useRef } from 'react';
+import { useNavigate, useLocation } from 'react-router-dom';
+import { v4 as uuidv4 } from 'uuid';
+import {
+  Page,
+  Masthead,
+  MastheadMain,
+  MastheadBrand,
+  MastheadToggle,
+  MastheadContent,
+  PageSidebar,
+  PageSidebarBody,
+  PageToggleButton,
+  Toolbar,
+  ToolbarContent,
+  ToolbarItem,
+  ToolbarGroup,
+} from '@patternfly/react-core';
+import { BarsIcon } from '@patternfly/react-icons';
+import { RedHatLogo } from '../RedHatLogo';
 import { Sidebar } from '../Sidebar';
+import { KeyboardShortcutsDialog } from '../KeyboardShortcutsDialog';
 import { ErrorBoundary } from '../ErrorBoundary';
-import { useChat } from '../../contexts/ChatContext';
+import { SessionExpiredModal } from '../SessionExpiredModal';
+import { DebugToggle } from '../DebugToggle';
+import { useAppSelector, useAppDispatch } from '../../redux/hooks';
+import {
+  selectAllChats,
+  selectStreamingState,
+  addChat,
+  deleteChat,
+  clearAllChats,
+  updateChat,
+  setChats,
+  setLoadingThreads,
+  setThreadsListHydrated,
+  ChatItem,
+} from '../../redux/slices/chats';
+import { addToast } from '../../redux/slices/toasts';
 import { SidebarChatItem } from '../../types/chat';
+import { chatStorage } from '../../services/chatStorage';
+import { getAllThreadsByUserId, getThreadState, deleteThread } from '../../services/agent-rest';
+import { setAuthExpiredCallback } from '../../services/authenticated-fetch';
+import { markChatAsClientCreated, isClientCreatedChat } from '../../services/newChatTracker';
+import { useKeyboardShortcuts } from '../../hooks/useKeyboardShortcuts';
+import type { RootState } from '../../redux/store';
+
+function toSafeDate(value: unknown): Date {
+  if (value instanceof Date && !Number.isNaN(value.getTime())) return value;
+  if (typeof value === 'string' && value) {
+    const d = new Date(value);
+    if (!Number.isNaN(d.getTime())) return d;
+  }
+  if (typeof value === 'number') {
+    const d = new Date(value);
+    if (!Number.isNaN(d.getTime())) return d;
+  }
+  return new Date();
+}
+
+function toSafeISOString(value: unknown): string {
+  return toSafeDate(value).toISOString();
+}
 
 interface AppLayoutProps {
   children: React.ReactNode;
 }
 
 export function AppLayout({ children }: AppLayoutProps) {
-  const { chats, deleteChat, renameChat, createNewChat } = useChat();
+  const dispatch = useAppDispatch();
+  const chats = useAppSelector(selectAllChats);
+  const branding = useAppSelector((state: RootState) => state.config.branding);
   const [sidebarCollapsed, setSidebarCollapsed] = useState(false);
+  const [sessionExpired, setSessionExpired] = useState(false);
+  const [isHelpOpen, setIsHelpOpen] = useState(false);
   const navigate = useNavigate();
-  
-  // Get user data from window.USER_DATA
-  const userData = useMemo(() => {
-    return window.USER_DATA;
+  const location = useLocation();
+
+  const chatsRef = useRef(chats);
+  useEffect(() => { chatsRef.current = chats; }, [chats]);
+
+  useEffect(() => {
+    setAuthExpiredCallback(() => {
+      setSessionExpired(true);
+    });
+    return () => {
+      setAuthExpiredCallback(null);
+    };
   }, []);
-  
-  // Extract user name and token expiry from real user data
-  const userName = userData?.displayName || userData?.name || "User";
+
+  const currentChatId = useMemo(() => {
+    const match = /^\/chat\/([^/]+)/.exec(location.pathname);
+    return match?.[1];
+  }, [location.pathname]);
+
+  const streamingState = useAppSelector((state) =>
+    currentChatId ? selectStreamingState(state, currentChatId) : null,
+  );
+  const activeSubAgent = streamingState?.activeSubAgent ?? null;
+
+  useEffect(() => {
+    const loadedChats = chatStorage.loadChats();
+    if (loadedChats.length > 0) {
+      const mapped: ChatItem[] = loadedChats.map((c) => ({
+        ...c,
+        timestamp: toSafeISOString(c.timestamp),
+        historicalActivities: c.historicalActivities ?? {},
+        feedback: c.feedback ?? {},
+      }));
+      dispatch(setChats(mapped));
+    }
+    dispatch(setLoadingThreads(false));
+  }, [dispatch]);
+
+  useEffect(() => {
+    async function loadUserHistory() {
+      try {
+        dispatch(setLoadingThreads(true));
+        const history = await getAllThreadsByUserId(window.USER_DATA.preferred_username);
+
+        const backendIds = new Set(history.map((t) => t.id));
+        const local = chatsRef.current;
+
+        const surviving = local.filter(
+          (c) => backendIds.has(c.id) || isClientCreatedChat(c.id),
+        );
+
+        const backendTitleMap = new Map(
+          history.filter((t) => t.title).map((t) => [t.id, t.title]),
+        );
+        const backendTimestampMap = new Map(
+          history.reduce<[string, string][]>((acc, t) => {
+            if (t.updatedAt) acc.push([t.id, t.updatedAt]);
+            return acc;
+          }, []),
+        );
+
+        const survivingWithTitles = surviving.map((c) => {
+          const backendTitle = backendTitleMap.get(c.id);
+          const ts = backendTimestampMap.get(c.id);
+          const updated = { ...c };
+          if (backendTitle && (c.title === 'Chat' || c.title === 'New Chat')) {
+            updated.title = backendTitle;
+            updated.preview = backendTitle;
+          }
+          if (ts) {
+            updated.timestamp = ts;
+          }
+          return updated;
+        });
+
+        const survivingIds = new Set(survivingWithTitles.map((c) => c.id));
+        const added: ChatItem[] = history
+          .filter((t) => !survivingIds.has(t.id))
+          .map((t) => ({
+            id: t.id,
+            messages: [],
+            title: t.title || 'Chat',
+            preview: t.title || 'Chat',
+            timestamp: t.updatedAt || new Date().toISOString(),
+            historicalActivities: {},
+            feedback: {},
+          }));
+
+        const reconciled = [...survivingWithTitles, ...added].sort(
+          (a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime(),
+        );
+        dispatch(setChats(reconciled));
+
+        if (reconciled.length === 0) {
+          chatStorage.clearChats();
+        }
+
+        // Pre-fetch most recent thread's messages (warm the cache)
+        const topThread = reconciled.find((c) => c.messages.length === 0);
+        if (topThread) {
+          getThreadState(topThread.id).then((msgs) => {
+            if (msgs.length > 0) {
+              dispatch(updateChat({
+                id: topThread.id,
+                updates: {
+                  messages: msgs,
+                  title: (() => {
+                    const first = msgs.find(m => m.type === 'human');
+                    const content = first ? String(first.content) : '';
+                    return content.length > 40 ? content.substring(0, 40) + '...' : content || topThread.title || 'Chat';
+                  })(),
+                },
+              }));
+            }
+          }).catch(() => { /* pre-fetch is best-effort */ });
+        }
+
+        dispatch(setThreadsListHydrated(true));
+      } catch (error) {
+        console.error('Failed to load user history:', error);
+        dispatch(addToast({ title: 'Failed to load chat history', variant: 'warning' }));
+      } finally {
+        dispatch(setLoadingThreads(false));
+      }
+    }
+
+    loadUserHistory();
+  }, [dispatch]);
+
+  useEffect(() => {
+    if (chats.length > 0) {
+      chatStorage.saveChats(chats as any);
+    }
+  }, [chats]);
+
+  const userData = useMemo(() => window.USER_DATA, []);
+  const userName = userData?.displayName || userData?.name || 'User';
   const tokenExpiry = useMemo(() => {
     if (userData?.expiresAt) {
       return new Date(userData.expiresAt);
     }
-    // Fallback to mock expiry if no real data
     const fallback = new Date();
     fallback.setHours(fallback.getHours() + 2);
     return fallback;
   }, [userData?.expiresAt]);
 
-  // Convert chats to sidebar format
-  const sidebarChats: SidebarChatItem[] = useMemo(() => 
-    chats.map(chat => ({
-      id: chat.id,
-      title: chat.title,
-      timestamp: chat.timestamp,
-      preview: chat.messages.length > 0 
-        ? (chat.messages[0].content as string).substring(0, 60) + "..."
-        : chat.preview,
-    })), [chats]
+  const sidebarChats: SidebarChatItem[] = useMemo(
+    () =>
+      chats.map((chat) => ({
+        id: chat.id,
+        title: chat.title,
+        timestamp: toSafeDate(chat.timestamp),
+        preview:
+          chat.messages.length > 0
+            ? (chat.messages[0].content as string).substring(0, 60) + '...'
+            : chat.preview,
+      })),
+    [chats]
   );
 
-  const handleToggleCollapse = () => {
-    setSidebarCollapsed(prev => !prev);
-  };
-
-  const handleSelectChat = (chatId: string) => {
-    navigate(`/chat/${chatId}`);
-  };
-
-  const handleDeleteChat = (chatId: string) => {
-    deleteChat(chatId);
-    // Navigate to home if we're currently on the deleted chat
-    if (window.location.pathname === `/chat/${chatId}`) {
-      const remainingChats = chats.filter(chat => chat.id !== chatId);
-      if (remainingChats.length > 0) {
-        navigate(`/chat/${remainingChats[0].id}`);
-      } else {
-        navigate('/');
+  const handleSelectChat = (chatId: string) => navigate(`/chat/${chatId}`);
+
+  const handleNewChat = useCallback(() => {
+    const newChatId = uuidv4();
+    markChatAsClientCreated(newChatId);
+    const newChat: ChatItem = {
+      id: newChatId,
+      title: 'New Chat',
+      timestamp: new Date().toISOString(),
+      preview: 'Start a new conversation',
+      messages: [],
+      historicalActivities: {},
+      feedback: {},
+    };
+    dispatch(addChat(newChat));
+    navigate(`/chat/${newChatId}`, { state: { newChat: true } });
+  }, [dispatch, navigate]);
+
+  const handleDeleteChat = useCallback(
+    (chatId: string) => {
+      dispatch(deleteChat(chatId));
+      dispatch(addToast({ title: 'Chat deleted', variant: 'success' }));
+      if (location.pathname === `/chat/${chatId}`) {
+        const remaining = chats.filter((c) => c.id !== chatId);
+        navigate(remaining.length > 0 ? `/chat/${remaining[0].id}` : '/');
       }
-    }
-  };
+      deleteThread(chatId).catch(() => {});
+    },
+    [dispatch, chats, navigate, location.pathname]
+  );
+
+  const handleDeleteAllChats = useCallback(() => {
+    const ids = chats.map((c) => c.id);
+    dispatch(clearAllChats());
+    chatStorage.clearChats();
+    dispatch(addToast({ title: 'All chats deleted', variant: 'success' }));
+    navigate('/');
+    ids.forEach((id) => deleteThread(id).catch(() => {}));
+  }, [dispatch, chats, navigate]);
+
+  const handleRenameChat = useCallback(
+    (chatId: string, newTitle: string) => {
+      dispatch(updateChat({ id: chatId, updates: { title: newTitle.trim() || 'Untitled Chat' } }));
+    },
+    [dispatch]
+  );
+
+  useKeyboardShortcuts({
+    onNewChat: () => navigate('/'),
+    onOpenSettings: () => navigate('/settings'),
+    onToggleHelp: () => setIsHelpOpen((v) => !v),
+  });
+
+  const masthead = (
+    <Masthead display={{ default: 'inline' }} className="!bg-card !border-b !border-border">
+      <MastheadToggle>
+        <PageToggleButton
+          variant="plain"
+          aria-label="Toggle sidebar"
+          isSidebarOpen={!sidebarCollapsed}
+          onSidebarToggle={() => setSidebarCollapsed((prev) => !prev)}
+          id="nav-toggle"
+        >
+          <BarsIcon />
+        </PageToggleButton>
+      </MastheadToggle>
+      <MastheadMain>
+        <MastheadBrand>
+          <div className="flex items-center gap-2">
+            {branding?.logo_url ? (
+              <img
+                src={branding.logo_url}
+                alt={branding.title || 'Logo'}
+                className="h-5 w-auto"
+                style={{ height: '1.25rem', width: 'auto', maxHeight: '1.25rem' }}
+              />
+            ) : (
+              <RedHatLogo className="h-5 w-auto" style={{ color: '#ee0000' }} />
+            )}
+            <span className="text-base font-semibold text-foreground">
+              {branding?.title || window.APP_DATA?.agentName || 'Agent'}
+            </span>
+          </div>
+        </MastheadBrand>
+      </MastheadMain>
+      <MastheadContent>
+        <Toolbar id="masthead-toolbar" isFullHeight>
+          <ToolbarContent>
+            <ToolbarGroup align={{ default: 'alignEnd' }}>
+              <ToolbarItem>
+                <DebugToggle />
+              </ToolbarItem>
+            </ToolbarGroup>
+          </ToolbarContent>
+        </Toolbar>
+      </MastheadContent>
+    </Masthead>
+  );
+
+  const sidebar = (
+    <PageSidebar isSidebarOpen={!sidebarCollapsed} aria-label="Sidebar navigation">
+      <PageSidebarBody isFilled className="min-h-0">
+        <ErrorBoundary
+          onError={(error, errorInfo) => {
+            console.error('Sidebar error:', error, errorInfo);
+          }}
+        >
+          <Sidebar
+            userName={userName}
+            currentChatId={currentChatId}
+            chatHistory={sidebarChats}
+            tokenExpiry={tokenExpiry}
+            activeSubAgent={activeSubAgent}
+            onNewChat={handleNewChat}
+            onSelectChat={handleSelectChat}
+            onDeleteChat={handleDeleteChat}
+            onDeleteAllChats={handleDeleteAllChats}
+            onRenameChat={handleRenameChat}
+          />
+        </ErrorBoundary>
+      </PageSidebarBody>
+    </PageSidebar>
+  );
 
   return (
-    <div className="flex h-screen bg-neutral-800 text-neutral-100 font-sans antialiased">
-      <ErrorBoundary
-        onError={(error, errorInfo) => {
-          console.error('Sidebar error:', error, errorInfo);
-        }}
-      >
-        <Sidebar
-          userName={userName}
-          currentChatId={undefined} // No longer needed - sidebar will use URL
-          chatHistory={sidebarChats}
-          isCollapsed={sidebarCollapsed}
-          tokenExpiry={tokenExpiry}
-          onToggleCollapse={handleToggleCollapse}
-          onNewChat={createNewChat}
-          onSelectChat={handleSelectChat}
-          onDeleteChat={handleDeleteChat}
-          onRenameChat={renameChat}
-        />
-      </ErrorBoundary>
-      
+    <Page masthead={masthead} sidebar={sidebar} className="h-screen bg-background text-foreground">
+      <a href="#main-content" className="skip-to-main sr-only">
+        Skip to main content
+      </a>
+      <KeyboardShortcutsDialog isOpen={isHelpOpen} onClose={() => setIsHelpOpen(false)} />
+      {/* PatternFly Modal traps focus and restores focus on close. */}
+      <SessionExpiredModal isOpen={sessionExpired} />
       <ErrorBoundary
         onError={(error, errorInfo) => {
           console.error('Main content error:', error, errorInfo);
         }}
       >
-        {children}
+        <div id="main-content" aria-label="Chat content" className="flex-1 flex flex-col min-h-0 overflow-hidden">
+          {children}
+        </div>
       </ErrorBoundary>
-    </div>
+    </Page>
   );
 }
diff --git a/src/frontend/components/layout/ThemeToggle.tsx b/src/frontend/components/layout/ThemeToggle.tsx
new file mode 100644
index 00000000..d6c2b6aa
--- /dev/null
+++ b/src/frontend/components/layout/ThemeToggle.tsx
@@ -0,0 +1,26 @@
+import { Switch } from '@patternfly/react-core';
+import { MoonIcon, SunIcon } from '@patternfly/react-icons';
+import { useAppDispatch, useAppSelector } from '../../redux/hooks';
+import { selectTheme, toggleTheme } from '../../redux/slices/userSettings';
+
+export function ThemeToggle() {
+  const dispatch = useAppDispatch();
+  const theme = useAppSelector(selectTheme);
+  const isDark = theme === 'dark';
+
+  return (
+    <div className="flex items-center gap-2">
+      <SunIcon className={isDark ? 'text-muted-foreground' : 'text-yellow-500'} />
+      <Switch
+        id="theme-toggle"
+        aria-label="Toggle dark mode"
+        isChecked={isDark}
+        onChange={(_event, _checked) => {
+          dispatch(toggleTheme());
+        }}
+        isReversed
+      />
+      <MoonIcon className={isDark ? 'text-blue-400' : 'text-muted-foreground'} />
+    </div>
+  );
+}
diff --git a/src/frontend/components/settings/AlwaysAllowedTools.tsx b/src/frontend/components/settings/AlwaysAllowedTools.tsx
new file mode 100644
index 00000000..15e38388
--- /dev/null
+++ b/src/frontend/components/settings/AlwaysAllowedTools.tsx
@@ -0,0 +1,105 @@
+import { Button, Switch } from '@patternfly/react-core';
+import { ShieldCheck, Trash2 } from 'lucide-react';
+import { useAppDispatch, useAppSelector } from '@/redux/hooks';
+import {
+  selectAlwaysAllowedTools,
+  selectAutoApproveAllTools,
+  removeAlwaysAllowedTool,
+  clearAlwaysAllowedTools,
+  setAutoApproveAllTools,
+} from '@/redux/slices/userSettings';
+
+export function AlwaysAllowedTools() {
+  const dispatch = useAppDispatch();
+  const tools = useAppSelector(selectAlwaysAllowedTools);
+  const autoApproveAll = useAppSelector(selectAutoApproveAllTools);
+
+  return (
+    <div className="space-y-6">
+      {/* Auto-Approve All Tools Toggle */}
+      <div className="rounded-lg border border-border bg-muted/30 p-4">
+        <div className="flex items-center justify-between gap-4">
+          <div className="flex-1">
+            <div className="flex items-center gap-2 mb-1">
+              <h3 className="text-sm font-semibold">Auto-Approve All Tools</h3>
+              {autoApproveAll && (
+                <span className="inline-flex items-center rounded-full bg-success/10 px-2 py-0.5 text-xs font-medium text-success">
+                  Active
+                </span>
+              )}
+            </div>
+            <p className="text-xs text-muted-foreground">
+              Automatically approve all tool calls without prompting
+            </p>
+          </div>
+          <Switch
+            id="auto-approve-all-switch"
+            aria-label="Toggle auto-approve all tools"
+            isChecked={autoApproveAll}
+            onChange={(_, checked) => dispatch(setAutoApproveAllTools(checked))}
+          />
+        </div>
+        {autoApproveAll && (
+          <div className="mt-3 pt-3 border-t border-border/50">
+            <p className="text-xs text-warning">
+              ⚠️ All tools will execute automatically without approval. Individual tool permissions below are bypassed.
+            </p>
+          </div>
+        )}
+      </div>
+
+      {/* Individual Always-Allowed Tools Section */}
+      <div className={autoApproveAll ? 'opacity-50 pointer-events-none' : ''}>
+        <h3 className="text-sm font-semibold mb-3">Individual Tool Permissions</h3>
+        {tools.length === 0 ? (
+          <div className="flex flex-col items-center justify-center py-10 gap-3 text-center">
+            <ShieldCheck className="w-8 h-8 text-muted-foreground/40" />
+            <p className="text-sm text-muted-foreground">No tools are always allowed yet.</p>
+            <p className="text-xs text-muted-foreground/70 max-w-xs">
+              When the agent asks for approval to run a tool, click "Always allow" to skip
+              approval for that tool in future runs.
+            </p>
+          </div>
+        ) : (
+          <div className="space-y-4">
+            <p className="text-sm text-muted-foreground">
+              These tools are automatically approved without showing an approval prompt. You can
+              revoke access for any tool at any time.
+            </p>
+
+            <ul className="space-y-3">
+              {tools.map((tool) => (
+                <li
+                  key={tool}
+                  className="flex items-center justify-between gap-3 rounded-lg border border-border bg-muted/30 px-3 py-2"
+                >
+                  <div className="flex items-center gap-2 min-w-0">
+                    <ShieldCheck className="w-3.5 h-3.5 text-success shrink-0" />
+                    <code className="text-xs font-mono text-foreground truncate">{tool}</code>
+                  </div>
+                  <Button
+                    variant="plain"
+                    size="sm"
+                    aria-label={`Revoke always-allow for ${tool}`}
+                    onClick={() => dispatch(removeAlwaysAllowedTool(tool))}
+                    className="!p-1 text-muted-foreground hover:text-destructive shrink-0"
+                  >
+                    <Trash2 className="w-3.5 h-3.5" />
+                  </Button>
+                </li>
+              ))}
+            </ul>
+
+            <Button
+              variant="secondary"
+              size="sm"
+              onClick={() => dispatch(clearAlwaysAllowedTools())}
+            >
+              Revoke all
+            </Button>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/src/frontend/components/settings/AppearanceSettings.tsx b/src/frontend/components/settings/AppearanceSettings.tsx
new file mode 100644
index 00000000..b3be4d0e
--- /dev/null
+++ b/src/frontend/components/settings/AppearanceSettings.tsx
@@ -0,0 +1,67 @@
+import { useAppDispatch, useAppSelector } from '../../redux/hooks';
+import { selectTheme, setTheme } from '../../redux/slices/userSettings';
+import { Sun, Moon, Monitor } from 'lucide-react';
+
+type ThemeOption = 'light' | 'dark';
+
+const THEME_OPTIONS: { value: ThemeOption; label: string; icon: typeof Sun; description: string }[] = [
+  { value: 'light', label: 'Light', icon: Sun, description: 'Clean and bright' },
+  { value: 'dark', label: 'Dark', icon: Moon, description: 'Easy on the eyes' },
+];
+
+export function AppearanceSettings() {
+  const dispatch = useAppDispatch();
+  const currentTheme = useAppSelector(selectTheme);
+
+  return (
+    <div className="space-y-6">
+      <div>
+        <h3 id="theme-group-label" className="text-sm font-medium text-foreground mb-1">Theme</h3>
+        <p className="text-xs text-muted-foreground mb-4">
+          Choose how {window.APP_DATA?.agentName || 'Agent'} looks for you.
+        </p>
+        <div
+          role="radiogroup"
+          aria-labelledby="theme-group-label"
+          className="grid grid-cols-2 gap-3"
+        >
+          {THEME_OPTIONS.map((opt) => {
+            const Icon = opt.icon;
+            const isSelected = currentTheme === opt.value;
+            return (
+              <button
+                key={opt.value}
+                type="button"
+                role="radio"
+                aria-checked={isSelected}
+                onClick={() => dispatch(setTheme(opt.value))}
+                className={`flex flex-col items-center gap-2 p-4 rounded-xl border-2 transition-all cursor-pointer ${
+                  isSelected
+                    ? 'border-primary bg-primary/5'
+                    : 'border-border bg-card hover:border-primary/30 hover:bg-secondary/30'
+                }`}
+              >
+                <Icon className={`w-6 h-6 ${isSelected ? 'text-primary' : 'text-muted-foreground'}`} aria-hidden="true" />
+                <span className={`text-sm font-medium ${isSelected ? 'text-primary' : 'text-foreground'}`}>
+                  {opt.label}
+                </span>
+                <span className="text-xs text-muted-foreground">{opt.description}</span>
+              </button>
+            );
+          })}
+        </div>
+      </div>
+
+      <div>
+        <h3 className="text-sm font-medium text-foreground mb-1">Interface Density</h3>
+        <p className="text-xs text-muted-foreground mb-3">
+          Coming soon — adjust spacing and sizing to your preference.
+        </p>
+        <div className="flex items-center gap-3 p-3 rounded-lg bg-muted/30 border border-border">
+          <Monitor className="w-4 h-4 text-muted-foreground" />
+          <span className="text-sm text-muted-foreground">Default density</span>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/src/frontend/components/settings/MemoryList.tsx b/src/frontend/components/settings/MemoryList.tsx
new file mode 100644
index 00000000..88a6c067
--- /dev/null
+++ b/src/frontend/components/settings/MemoryList.tsx
@@ -0,0 +1,120 @@
+import { useEffect, useRef, useState } from 'react';
+import { Button } from '@patternfly/react-core';
+import { Plus, Trash2, Brain, AlertCircle } from 'lucide-react';
+import { useAppDispatch, useAppSelector } from '../../redux/hooks';
+import { addMemory, setMemories, removeMemory, clearMemories, selectMemories } from '../../redux/slices/personalization';
+import { createMemory, deleteMemory, deleteAllMemories, listMemories } from '../../services/agent-rest';
+
+export function MemoryList() {
+  const dispatch = useAppDispatch();
+  const memories = useAppSelector(selectMemories);
+  const [draft, setDraft] = useState('');
+  const syncedRef = useRef(false);
+
+  useEffect(() => {
+    if (syncedRef.current) return;
+    syncedRef.current = true;
+
+    listMemories().then((backendMems) => {
+      if (backendMems.length === 0) return;
+      dispatch(setMemories(backendMems));
+    });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const handleAdd = () => {
+    const text = draft.trim();
+    if (!text) return;
+    const alreadyExists = memories.some((m) => m.content === text);
+    if (!alreadyExists) {
+      dispatch(addMemory(text));
+    }
+    createMemory(text).catch(() => {});
+    setDraft('');
+  };
+
+  const handleKeyDown = (e: React.KeyboardEvent) => {
+    if (e.key === 'Enter' && !e.shiftKey) {
+      e.preventDefault();
+      handleAdd();
+    }
+  };
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-start gap-3 p-3 rounded-lg bg-blue-500/5 border border-blue-500/20">
+        <AlertCircle className="w-4 h-4 text-blue-500 mt-0.5 shrink-0" />
+        <p className="text-xs text-blue-400/80">
+          Memories are facts the agent remembers across conversations. Add things like
+          your preferences, context, or recurring instructions.
+        </p>
+      </div>
+
+      <div className="flex gap-2">
+        <textarea
+          value={draft}
+          onChange={(e) => setDraft(e.target.value)}
+          onKeyDown={handleKeyDown}
+          placeholder="e.g. I prefer metric units for all measurements"
+          aria-label="New memory"
+          className="flex-1 rounded-xl px-3.5 py-2.5 text-sm resize-none min-h-[40px] border-0 bg-secondary/50 placeholder:opacity-60 focus:bg-card focus:outline-none focus:ring-0 focus:border-transparent focus:shadow-none"
+          style={{ border: '1px solid var(--border)', boxShadow: 'none' }}
+          rows={2}
+        />
+        <Button
+          variant="primary"
+          size="sm"
+          isDisabled={!draft.trim()}
+          onClick={handleAdd}
+          className="self-end"
+          icon={<Plus className="w-4 h-4" />}
+        >
+          Add
+        </Button>
+      </div>
+
+      {memories.length === 0 ? (
+        <div className="flex flex-col items-center py-8 text-center">
+          <Brain className="w-8 h-8 text-muted-foreground/30 mb-2" />
+          <p className="text-sm text-muted-foreground/60">No memories yet</p>
+          <p className="text-xs text-muted-foreground/40 mt-1">
+            Add facts for the agent to remember
+          </p>
+        </div>
+      ) : (
+        <>
+          <ul className="space-y-2">
+            {memories.map((mem) => (
+              <li
+                key={mem.id}
+                className="group flex items-start gap-3 p-3 rounded-lg border border-border bg-card hover:bg-secondary/30 transition-colors"
+              >
+                <Brain className="w-4 h-4 text-primary/60 mt-0.5 shrink-0" />
+                <p className="flex-1 text-sm text-foreground leading-relaxed">{mem.content}</p>
+                <button
+                  onClick={() => { dispatch(removeMemory(mem.id)); deleteMemory(mem.id).catch(() => {}); }}
+                  className="opacity-0 group-hover:opacity-100 transition-opacity p-1 rounded hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
+                  aria-label="Remove memory"
+                >
+                  <Trash2 className="w-3.5 h-3.5" />
+                </button>
+              </li>
+            ))}
+          </ul>
+          {memories.length > 1 && (
+            <div className="flex justify-end">
+              <Button
+                variant="plain"
+                isDanger
+                size="sm"
+                onClick={() => { dispatch(clearMemories()); deleteAllMemories().catch(() => {}); }}
+              >
+                Clear all memories
+              </Button>
+            </div>
+          )}
+        </>
+      )}
+    </div>
+  );
+}
diff --git a/src/frontend/components/settings/ProfileSection.tsx b/src/frontend/components/settings/ProfileSection.tsx
new file mode 100644
index 00000000..07e80082
--- /dev/null
+++ b/src/frontend/components/settings/ProfileSection.tsx
@@ -0,0 +1,98 @@
+import { useMemo, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { Button, Modal, ModalBody, ModalFooter, ModalHeader, ModalVariant } from '@patternfly/react-core';
+import { User, Mail, Shield, Trash2 } from 'lucide-react';
+import { useAppDispatch, useAppSelector } from '../../redux/hooks';
+import { clearAllChats, selectAllChats } from '../../redux/slices/chats';
+import { addToast } from '../../redux/slices/toasts';
+import { chatStorage } from '../../services/chatStorage';
+
+export function ProfileSection() {
+  const dispatch = useAppDispatch();
+  const navigate = useNavigate();
+  const chats = useAppSelector(selectAllChats);
+  const [confirmDelete, setConfirmDelete] = useState(false);
+
+  const userData = useMemo(() => window.USER_DATA, []);
+  const displayName = userData?.displayName || userData?.name || 'User';
+  const email = userData?.email || '';
+  const username = userData?.preferred_username || '';
+
+  const handleDeleteAll = () => {
+    dispatch(clearAllChats());
+    chatStorage.clearChats();
+    dispatch(addToast({ title: 'All chats deleted', variant: 'success' }));
+    setConfirmDelete(false);
+    navigate('/');
+  };
+
+  return (
+    <div className="space-y-6">
+      <div className="flex items-center gap-4">
+        <div className="w-16 h-16 rounded-full bg-primary/15 flex items-center justify-center text-2xl font-bold text-primary">
+          {displayName.charAt(0).toUpperCase()}
+        </div>
+        <div>
+          <h3 className="text-lg font-semibold text-foreground">{displayName}</h3>
+          {username && (
+            <p className="text-sm text-muted-foreground">@{username}</p>
+          )}
+        </div>
+      </div>
+
+      <div className="space-y-3">
+        {email && (
+          <div className="flex items-center gap-3 text-sm">
+            <Mail className="w-4 h-4 text-muted-foreground" />
+            <span className="text-foreground">{email}</span>
+          </div>
+        )}
+        <div className="flex items-center gap-3 text-sm">
+          <User className="w-4 h-4 text-muted-foreground" />
+          <span className="text-foreground">{username || displayName}</span>
+        </div>
+        <div className="flex items-center gap-3 text-sm">
+          <Shield className="w-4 h-4 text-muted-foreground" />
+          <span className="text-muted-foreground">Authenticated via SSO</span>
+        </div>
+      </div>
+
+      {chats.length > 0 && (
+        <div className="pt-4 border-t border-border">
+          <h3 className="text-sm font-medium text-destructive mb-2">Danger Zone</h3>
+          <div className="flex items-center justify-between p-3 rounded-lg border border-destructive/20 bg-destructive/5">
+            <div>
+              <p className="text-sm font-medium text-foreground">Delete all conversations</p>
+              <p className="text-xs text-muted-foreground">
+                Permanently remove all {chats.length} chat{chats.length !== 1 ? 's' : ''}
+              </p>
+            </div>
+            <Button variant="danger" size="sm" onClick={() => setConfirmDelete(true)} icon={<Trash2 className="w-3.5 h-3.5" />}>
+              Delete all
+            </Button>
+          </div>
+        </div>
+      )}
+
+      <Modal
+        variant={ModalVariant.small}
+        isOpen={confirmDelete}
+        onClose={() => setConfirmDelete(false)}
+        aria-label="Delete all chats confirmation"
+      >
+        <ModalHeader title="Delete all chats" />
+        <ModalBody>
+          This will permanently delete all {chats.length} conversations. This action cannot be undone.
+        </ModalBody>
+        <ModalFooter>
+          <Button variant="danger" onClick={handleDeleteAll}>
+            Delete all
+          </Button>
+          <Button variant="link" onClick={() => setConfirmDelete(false)}>
+            Cancel
+          </Button>
+        </ModalFooter>
+      </Modal>
+    </div>
+  );
+}
diff --git a/src/frontend/components/settings/RulesEditor.tsx b/src/frontend/components/settings/RulesEditor.tsx
new file mode 100644
index 00000000..01cb3623
--- /dev/null
+++ b/src/frontend/components/settings/RulesEditor.tsx
@@ -0,0 +1,139 @@
+import { useEffect, useRef, useState } from 'react';
+import { Button, Switch } from '@patternfly/react-core';
+import { Plus, Trash2, ScrollText, AlertCircle } from 'lucide-react';
+import { useAppDispatch, useAppSelector } from '../../redux/hooks';
+import {
+  addRule,
+  removeRule,
+  toggleRule,
+  clearRules,
+  selectRules,
+  setRules,
+} from '../../redux/slices/personalization';
+import { createRule, deleteRule, deleteAllRules, listRules } from '../../services/agent-rest';
+
+export function RulesEditor() {
+  const dispatch = useAppDispatch();
+  const rules = useAppSelector(selectRules);
+  const [draft, setDraft] = useState('');
+  const loaded = useRef(false);
+
+  useEffect(() => {
+    if (loaded.current) return;
+    loaded.current = true;
+    listRules().then((backendRules) => {
+      if (backendRules.length === 0) return;
+      const merged = backendRules.map((br) => ({
+        id: br.id,
+        content: br.content,
+        isActive: br.is_active,
+      }));
+      dispatch(setRules(merged));
+    });
+  }, [dispatch]);
+
+  const handleAdd = () => {
+    const text = draft.trim();
+    if (!text) return;
+    dispatch(addRule(text));
+    createRule(text).catch(() => {});
+    setDraft('');
+  };
+
+  const handleKeyDown = (e: React.KeyboardEvent) => {
+    if (e.key === 'Enter' && !e.shiftKey) {
+      e.preventDefault();
+      handleAdd();
+    }
+  };
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-start gap-3 p-3 rounded-lg bg-amber-500/5 border border-amber-500/20">
+        <AlertCircle className="w-4 h-4 text-amber-500 mt-0.5 shrink-0" />
+        <p className="text-xs text-amber-400/80">
+          Custom rules shape how the agent responds. They apply to every conversation
+          unless individually disabled.
+        </p>
+      </div>
+
+      <div className="flex gap-2">
+        <textarea
+          value={draft}
+          onChange={(e) => setDraft(e.target.value)}
+          onKeyDown={handleKeyDown}
+          placeholder="e.g. Always respond in British English"
+          aria-label="New rule"
+          className="flex-1 rounded-xl px-3.5 py-2.5 text-sm resize-none min-h-[40px] border-0 bg-secondary/50 placeholder:opacity-60 focus:bg-card focus:outline-none focus:ring-0 focus:border-transparent focus:shadow-none"
+          style={{ border: '1px solid var(--border)', boxShadow: 'none' }}
+          rows={2}
+        />
+        <Button
+          variant="primary"
+          size="sm"
+          isDisabled={!draft.trim()}
+          onClick={handleAdd}
+          className="self-end"
+          icon={<Plus className="w-4 h-4" />}
+        >
+          Add
+        </Button>
+      </div>
+
+      {rules.length === 0 ? (
+        <div className="flex flex-col items-center py-8 text-center">
+          <ScrollText className="w-8 h-8 text-muted-foreground/30 mb-2" />
+          <p className="text-sm text-muted-foreground/60">No custom rules</p>
+          <p className="text-xs text-muted-foreground/40 mt-1">
+            Add instructions for the agent to follow
+          </p>
+        </div>
+      ) : (
+        <>
+          <ul className="space-y-2">
+            {rules.map((rule) => (
+              <li
+                key={rule.id}
+                className="group flex items-start gap-3 p-3 rounded-lg border border-border bg-card hover:bg-secondary/30 transition-colors"
+              >
+                <Switch
+                  id={`rule-toggle-${rule.id}`}
+                  aria-label="Toggle rule"
+                  isChecked={rule.isActive}
+                  onChange={() => dispatch(toggleRule(rule.id))}
+                  className="mt-0.5"
+                />
+                <p
+                  className={`flex-1 text-sm leading-relaxed ${
+                    rule.isActive ? 'text-foreground' : 'text-muted-foreground line-through'
+                  }`}
+                >
+                  {rule.content}
+                </p>
+                <button
+                  onClick={() => { dispatch(removeRule(rule.id)); deleteRule(rule.id).catch(() => {}); }}
+                  className="opacity-0 group-hover:opacity-100 transition-opacity p-1 rounded hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
+                  aria-label="Remove rule"
+                >
+                  <Trash2 className="w-3.5 h-3.5" />
+                </button>
+              </li>
+            ))}
+          </ul>
+          {rules.length > 1 && (
+            <div className="flex justify-end">
+              <Button
+                variant="plain"
+                isDanger
+                size="sm"
+                onClick={() => { dispatch(clearRules()); deleteAllRules().catch(() => {}); }}
+              >
+                Clear all rules
+              </Button>
+            </div>
+          )}
+        </>
+      )}
+    </div>
+  );
+}
diff --git a/src/frontend/components/ui/badge.tsx b/src/frontend/components/ui/badge.tsx
deleted file mode 100644
index 02054139..00000000
--- a/src/frontend/components/ui/badge.tsx
+++ /dev/null
@@ -1,46 +0,0 @@
-import * as React from "react"
-import { Slot } from "@radix-ui/react-slot"
-import { cva, type VariantProps } from "class-variance-authority"
-
-import { cn } from "@/lib/utils"
-
-const badgeVariants = cva(
-  "inline-flex items-center justify-center rounded-md border px-2 py-0.5 text-xs font-medium w-fit whitespace-nowrap shrink-0 [&>svg]:size-3 gap-1 [&>svg]:pointer-events-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive transition-[color,box-shadow] overflow-hidden",
-  {
-    variants: {
-      variant: {
-        default:
-          "border-transparent bg-primary text-primary-foreground [a&]:hover:bg-primary/90",
-        secondary:
-          "border-transparent bg-secondary text-secondary-foreground [a&]:hover:bg-secondary/90",
-        destructive:
-          "border-transparent bg-destructive text-white [a&]:hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
-        outline:
-          "text-foreground [a&]:hover:bg-accent [a&]:hover:text-accent-foreground",
-      },
-    },
-    defaultVariants: {
-      variant: "default",
-    },
-  }
-)
-
-function Badge({
-  className,
-  variant,
-  asChild = false,
-  ...props
-}: React.ComponentProps<"span"> &
-  VariantProps<typeof badgeVariants> & { asChild?: boolean }) {
-  const Comp = asChild ? Slot : "span"
-
-  return (
-    <Comp
-      data-slot="badge"
-      className={cn(badgeVariants({ variant }), className)}
-      {...props}
-    />
-  )
-}
-
-export { Badge, badgeVariants }
diff --git a/src/frontend/components/ui/button.tsx b/src/frontend/components/ui/button.tsx
deleted file mode 100644
index a2df8dce..00000000
--- a/src/frontend/components/ui/button.tsx
+++ /dev/null
@@ -1,59 +0,0 @@
-import * as React from "react"
-import { Slot } from "@radix-ui/react-slot"
-import { cva, type VariantProps } from "class-variance-authority"
-
-import { cn } from "@/lib/utils"
-
-const buttonVariants = cva(
-  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-all disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg:not([class*='size-'])]:size-4 shrink-0 [&_svg]:shrink-0 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
-  {
-    variants: {
-      variant: {
-        default:
-          "bg-primary text-primary-foreground shadow-xs hover:bg-primary/90",
-        destructive:
-          "bg-destructive text-white shadow-xs hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
-        outline:
-          "border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50",
-        secondary:
-          "bg-secondary text-secondary-foreground shadow-xs hover:bg-secondary/80",
-        ghost:
-          "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
-        link: "text-primary underline-offset-4 hover:underline",
-      },
-      size: {
-        default: "h-9 px-4 py-2 has-[>svg]:px-3",
-        sm: "h-8 rounded-md gap-1.5 px-3 has-[>svg]:px-2.5",
-        lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
-        icon: "size-9",
-      },
-    },
-    defaultVariants: {
-      variant: "default",
-      size: "default",
-    },
-  }
-)
-
-function Button({
-  className,
-  variant,
-  size,
-  asChild = false,
-  ...props
-}: React.ComponentProps<"button"> &
-  VariantProps<typeof buttonVariants> & {
-    asChild?: boolean
-  }) {
-  const Comp = asChild ? Slot : "button"
-
-  return (
-    <Comp
-      data-slot="button"
-      className={cn(buttonVariants({ variant, size, className }))}
-      {...props}
-    />
-  )
-}
-
-export { Button, buttonVariants }
diff --git a/src/frontend/components/ui/card.tsx b/src/frontend/components/ui/card.tsx
deleted file mode 100644
index d05bbc6c..00000000
--- a/src/frontend/components/ui/card.tsx
+++ /dev/null
@@ -1,92 +0,0 @@
-import * as React from "react"
-
-import { cn } from "@/lib/utils"
-
-function Card({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card"
-      className={cn(
-        "bg-card text-card-foreground flex flex-col gap-6 rounded-xl border py-6 shadow-sm",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card-header"
-      className={cn(
-        "@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-1.5 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function CardTitle({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card-title"
-      className={cn("leading-none font-semibold", className)}
-      {...props}
-    />
-  )
-}
-
-function CardDescription({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card-description"
-      className={cn("text-muted-foreground text-sm", className)}
-      {...props}
-    />
-  )
-}
-
-function CardAction({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card-action"
-      className={cn(
-        "col-start-2 row-span-2 row-start-1 self-start justify-self-end",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function CardContent({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card-content"
-      className={cn("px-6", className)}
-      {...props}
-    />
-  )
-}
-
-function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
-  return (
-    <div
-      data-slot="card-footer"
-      className={cn("flex items-center px-6 [.border-t]:pt-6", className)}
-      {...props}
-    />
-  )
-}
-
-export {
-  Card,
-  CardHeader,
-  CardFooter,
-  CardTitle,
-  CardAction,
-  CardDescription,
-  CardContent,
-}
diff --git a/src/frontend/components/ui/input.tsx b/src/frontend/components/ui/input.tsx
deleted file mode 100644
index 03295ca6..00000000
--- a/src/frontend/components/ui/input.tsx
+++ /dev/null
@@ -1,21 +0,0 @@
-import * as React from "react"
-
-import { cn } from "@/lib/utils"
-
-function Input({ className, type, ...props }: React.ComponentProps<"input">) {
-  return (
-    <input
-      type={type}
-      data-slot="input"
-      className={cn(
-        "file:text-foreground placeholder:text-muted-foreground selection:bg-primary selection:text-primary-foreground dark:bg-input/30 border-input flex h-9 w-full min-w-0 rounded-md border bg-transparent px-3 py-1 text-base shadow-xs transition-[color,box-shadow] outline-none file:inline-flex file:h-7 file:border-0 file:bg-transparent file:text-sm file:font-medium disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
-        "focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px]",
-        "aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-export { Input }
diff --git a/src/frontend/components/ui/scroll-area.tsx b/src/frontend/components/ui/scroll-area.tsx
deleted file mode 100644
index 3c542189..00000000
--- a/src/frontend/components/ui/scroll-area.tsx
+++ /dev/null
@@ -1,57 +0,0 @@
-import * as React from "react"
-import * as ScrollAreaPrimitive from "@radix-ui/react-scroll-area"
-
-import { cn } from "@/lib/utils"
-
-function ScrollArea({
-  className,
-  children,
-  ...props
-}: React.ComponentProps<typeof ScrollAreaPrimitive.Root>) {
-  return (
-    <ScrollAreaPrimitive.Root
-      data-slot="scroll-area"
-      className={cn("relative", className)}
-      {...props}
-    >
-      <ScrollAreaPrimitive.Viewport
-        data-slot="scroll-area-viewport"
-        className="focus-visible:ring-ring/50 size-full rounded-[inherit] transition-[color,box-shadow] outline-none focus-visible:ring-[3px] focus-visible:outline-1"
-        style={{ overscrollBehavior: 'none' }}
-      >
-        {children}
-      </ScrollAreaPrimitive.Viewport>
-      <ScrollBar />
-      <ScrollAreaPrimitive.Corner />
-    </ScrollAreaPrimitive.Root>
-  )
-}
-
-function ScrollBar({
-  className,
-  orientation = "vertical",
-  ...props
-}: React.ComponentProps<typeof ScrollAreaPrimitive.ScrollAreaScrollbar>) {
-  return (
-    <ScrollAreaPrimitive.ScrollAreaScrollbar
-      data-slot="scroll-area-scrollbar"
-      orientation={orientation}
-      className={cn(
-        "flex touch-none p-px transition-colors select-none",
-        orientation === "vertical" &&
-          "h-full w-1.5 border-l border-l-transparent",
-        orientation === "horizontal" &&
-          "h-1.5 flex-col border-t border-t-transparent",
-        className
-      )}
-      {...props}
-    >
-      <ScrollAreaPrimitive.ScrollAreaThumb
-        data-slot="scroll-area-thumb"
-        className="bg-neutral-600/30 relative flex-1 rounded-full"
-      />
-    </ScrollAreaPrimitive.ScrollAreaScrollbar>
-  )
-}
-
-export { ScrollArea, ScrollBar }
diff --git a/src/frontend/components/ui/select.tsx b/src/frontend/components/ui/select.tsx
deleted file mode 100644
index 51f466ec..00000000
--- a/src/frontend/components/ui/select.tsx
+++ /dev/null
@@ -1,183 +0,0 @@
-import * as React from "react"
-import * as SelectPrimitive from "@radix-ui/react-select"
-import { CheckIcon, ChevronDownIcon, ChevronUpIcon } from "lucide-react"
-
-import { cn } from "@/lib/utils"
-
-function Select({
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Root>) {
-  return <SelectPrimitive.Root data-slot="select" {...props} />
-}
-
-function SelectGroup({
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Group>) {
-  return <SelectPrimitive.Group data-slot="select-group" {...props} />
-}
-
-function SelectValue({
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Value>) {
-  return <SelectPrimitive.Value data-slot="select-value" {...props} />
-}
-
-function SelectTrigger({
-  className,
-  size = "default",
-  children,
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Trigger> & {
-  size?: "sm" | "default"
-}) {
-  return (
-    <SelectPrimitive.Trigger
-      data-slot="select-trigger"
-      data-size={size}
-      className={cn(
-        "border-input data-[placeholder]:text-muted-foreground [&_svg:not([class*='text-'])]:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 dark:hover:bg-input/50 flex w-fit items-center justify-between gap-2 rounded-md border bg-transparent px-3 py-2 text-sm whitespace-nowrap shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 data-[size=default]:h-9 data-[size=sm]:h-8 *:data-[slot=select-value]:line-clamp-1 *:data-[slot=select-value]:flex *:data-[slot=select-value]:items-center *:data-[slot=select-value]:gap-2 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
-        className
-      )}
-      {...props}
-    >
-      {children}
-      <SelectPrimitive.Icon asChild>
-        <ChevronDownIcon className="size-4 opacity-50" />
-      </SelectPrimitive.Icon>
-    </SelectPrimitive.Trigger>
-  )
-}
-
-function SelectContent({
-  className,
-  children,
-  position = "popper",
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Content>) {
-  return (
-    <SelectPrimitive.Portal>
-      <SelectPrimitive.Content
-        data-slot="select-content"
-        className={cn(
-          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 relative z-50 max-h-(--radix-select-content-available-height) min-w-[8rem] origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border shadow-md",
-          position === "popper" &&
-            "data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
-          className
-        )}
-        position={position}
-        {...props}
-      >
-        <SelectScrollUpButton />
-        <SelectPrimitive.Viewport
-          className={cn(
-            "p-1",
-            position === "popper" &&
-              "h-[var(--radix-select-trigger-height)] w-full min-w-[var(--radix-select-trigger-width)] scroll-my-1"
-          )}
-        >
-          {children}
-        </SelectPrimitive.Viewport>
-        <SelectScrollDownButton />
-      </SelectPrimitive.Content>
-    </SelectPrimitive.Portal>
-  )
-}
-
-function SelectLabel({
-  className,
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Label>) {
-  return (
-    <SelectPrimitive.Label
-      data-slot="select-label"
-      className={cn("text-muted-foreground px-2 py-1.5 text-xs", className)}
-      {...props}
-    />
-  )
-}
-
-function SelectItem({
-  className,
-  children,
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Item>) {
-  return (
-    <SelectPrimitive.Item
-      data-slot="select-item"
-      className={cn(
-        "focus:bg-accent focus:text-accent-foreground [&_svg:not([class*='text-'])]:text-muted-foreground relative flex w-full cursor-default items-center gap-2 rounded-sm py-1.5 pr-8 pl-2 text-sm outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2",
-        className
-      )}
-      {...props}
-    >
-      <span className="absolute right-2 flex size-3.5 items-center justify-center">
-        <SelectPrimitive.ItemIndicator>
-          <CheckIcon className="size-4" />
-        </SelectPrimitive.ItemIndicator>
-      </span>
-      <SelectPrimitive.ItemText>{children}</SelectPrimitive.ItemText>
-    </SelectPrimitive.Item>
-  )
-}
-
-function SelectSeparator({
-  className,
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.Separator>) {
-  return (
-    <SelectPrimitive.Separator
-      data-slot="select-separator"
-      className={cn("bg-border pointer-events-none -mx-1 my-1 h-px", className)}
-      {...props}
-    />
-  )
-}
-
-function SelectScrollUpButton({
-  className,
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.ScrollUpButton>) {
-  return (
-    <SelectPrimitive.ScrollUpButton
-      data-slot="select-scroll-up-button"
-      className={cn(
-        "flex cursor-default items-center justify-center py-1",
-        className
-      )}
-      {...props}
-    >
-      <ChevronUpIcon className="size-4" />
-    </SelectPrimitive.ScrollUpButton>
-  )
-}
-
-function SelectScrollDownButton({
-  className,
-  ...props
-}: React.ComponentProps<typeof SelectPrimitive.ScrollDownButton>) {
-  return (
-    <SelectPrimitive.ScrollDownButton
-      data-slot="select-scroll-down-button"
-      className={cn(
-        "flex cursor-default items-center justify-center py-1",
-        className
-      )}
-      {...props}
-    >
-      <ChevronDownIcon className="size-4" />
-    </SelectPrimitive.ScrollDownButton>
-  )
-}
-
-export {
-  Select,
-  SelectContent,
-  SelectGroup,
-  SelectItem,
-  SelectLabel,
-  SelectScrollDownButton,
-  SelectScrollUpButton,
-  SelectSeparator,
-  SelectTrigger,
-  SelectValue,
-}
diff --git a/src/frontend/components/ui/tabs.tsx b/src/frontend/components/ui/tabs.tsx
deleted file mode 100644
index 3d6f3acf..00000000
--- a/src/frontend/components/ui/tabs.tsx
+++ /dev/null
@@ -1,64 +0,0 @@
-import * as React from "react"
-import * as TabsPrimitive from "@radix-ui/react-tabs"
-
-import { cn } from "@/lib/utils"
-
-function Tabs({
-  className,
-  ...props
-}: React.ComponentProps<typeof TabsPrimitive.Root>) {
-  return (
-    <TabsPrimitive.Root
-      data-slot="tabs"
-      className={cn("flex flex-col gap-2", className)}
-      {...props}
-    />
-  )
-}
-
-function TabsList({
-  className,
-  ...props
-}: React.ComponentProps<typeof TabsPrimitive.List>) {
-  return (
-    <TabsPrimitive.List
-      data-slot="tabs-list"
-      className={cn(
-        "bg-muted text-muted-foreground inline-flex h-9 w-fit items-center justify-center rounded-lg p-[3px]",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function TabsTrigger({
-  className,
-  ...props
-}: React.ComponentProps<typeof TabsPrimitive.Trigger>) {
-  return (
-    <TabsPrimitive.Trigger
-      data-slot="tabs-trigger"
-      className={cn(
-        "data-[state=active]:bg-background dark:data-[state=active]:text-foreground focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:outline-ring dark:data-[state=active]:border-input dark:data-[state=active]:bg-input/30 text-foreground dark:text-muted-foreground inline-flex h-[calc(100%-1px)] flex-1 items-center justify-center gap-1.5 rounded-md border border-transparent px-2 py-1 text-sm font-medium whitespace-nowrap transition-[color,box-shadow] focus-visible:ring-[3px] focus-visible:outline-1 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:shadow-sm [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-function TabsContent({
-  className,
-  ...props
-}: React.ComponentProps<typeof TabsPrimitive.Content>) {
-  return (
-    <TabsPrimitive.Content
-      data-slot="tabs-content"
-      className={cn("flex-1 outline-none", className)}
-      {...props}
-    />
-  )
-}
-
-export { Tabs, TabsList, TabsTrigger, TabsContent }
diff --git a/src/frontend/components/ui/textarea.tsx b/src/frontend/components/ui/textarea.tsx
deleted file mode 100644
index 7f21b5e7..00000000
--- a/src/frontend/components/ui/textarea.tsx
+++ /dev/null
@@ -1,18 +0,0 @@
-import * as React from "react"
-
-import { cn } from "@/lib/utils"
-
-function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
-  return (
-    <textarea
-      data-slot="textarea"
-      className={cn(
-        "border-input placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 flex field-sizing-content min-h-16 w-full rounded-md border bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
-        className
-      )}
-      {...props}
-    />
-  )
-}
-
-export { Textarea }
diff --git a/src/frontend/contexts/ChatContext.tsx b/src/frontend/contexts/ChatContext.tsx
index c99bf13a..f89c3b11 100644
--- a/src/frontend/contexts/ChatContext.tsx
+++ b/src/frontend/contexts/ChatContext.tsx
@@ -100,9 +100,9 @@ export function ChatProvider({ children }: ChatProviderProps) {
       try {
         dispatch({ type: 'SET_LOADING', payload: true });
         const history = await getAllThreadsByUserId(window.USER_DATA.preferred_username);
+        if (!history.length) return;
 
         const chats: ChatItem[] = history.map((conversation) => {
-
           let title = 'New Chat';
 
           if (Array.isArray(conversation.messages) && conversation.messages.length > 0) {
@@ -118,9 +118,8 @@ export function ChatProvider({ children }: ChatProviderProps) {
         });
 
         dispatch({ type: 'SET_CHATS', payload: chats });
-        console.log(history)
       } catch (error) {
-        console.error(error)
+        console.error('Failed to load user history:', error);
       } finally {
         dispatch({ type: 'SET_LOADING', payload: false });
       }
@@ -140,6 +139,7 @@ export function ChatProvider({ children }: ChatProviderProps) {
       preview: "Start a new conversation",
       messages: [],
       historicalActivities: {},
+      feedback: {},
     };
 
     dispatch({ type: 'ADD_CHAT', payload: newChat });
diff --git a/src/frontend/global.css b/src/frontend/global.css
index 7e192429..5fc094bd 100644
--- a/src/frontend/global.css
+++ b/src/frontend/global.css
@@ -3,6 +3,25 @@
 
 @custom-variant dark (&:is(.dark *));
 
+/* ── Red Hat Brand Tokens ──────────────────────────────── */
+:root {
+  --rh-red: #ee0000;
+  --rh-red-dark: #a60000;
+  --rh-red-light: #f56e6e;
+
+  --rh-black: #151515;
+  --rh-gray-100: #f2f2f2;
+  --rh-gray-200: #d2d2d2;
+  --rh-gray-300: #b8bbbe;
+  --rh-gray-400: #6a6e73;
+  --rh-gray-500: #3c3f42;
+  --rh-gray-600: #21252b;
+
+  --rh-blue: #0066cc;
+  --rh-blue-dark: #004080;
+  --rh-blue-light: #73bcf7;
+}
+
 @theme inline {
   --radius-sm: calc(var(--radius) - 4px);
   --radius-md: calc(var(--radius) - 2px);
@@ -41,98 +60,129 @@
   --color-sidebar-ring: var(--sidebar-ring);
 }
 
+/* ── Light Theme — warm, clean, Red Hat personality ──── */
 :root {
   --radius: 0.625rem;
-  --background: oklch(1 0 0);
-  --foreground: oklch(0.145 0 0);
-  --card: oklch(1 0 0);
-  --card-foreground: oklch(0.145 0 0);
-  --popover: oklch(1 0 0);
-  --popover-foreground: oklch(0.145 0 0);
-  --primary: oklch(0.205 0 0);
-  --primary-foreground: oklch(0.985 0 0);
-  --secondary: oklch(0.97 0 0);
-  --secondary-foreground: oklch(0.205 0 0);
-  --muted: oklch(0.97 0 0);
-  --muted-foreground: oklch(0.556 0 0);
-  --accent: oklch(0.97 0 0);
-  --accent-foreground: oklch(0.205 0 0);
-  --destructive: oklch(0.577 0.245 27.325);
-  --border: oklch(0.922 0 0);
-  --input: oklch(0.922 0 0);
-  --ring: oklch(0.708 0 0);
-  --chart-1: oklch(0.646 0.222 41.116);
-  --chart-2: oklch(0.6 0.118 184.704);
-  --chart-3: oklch(0.398 0.07 227.392);
-  --chart-4: oklch(0.828 0.189 84.429);
-  --chart-5: oklch(0.769 0.188 70.08);
-  --sidebar: oklch(0.985 0 0);
-  --sidebar-foreground: oklch(0.145 0 0);
-  --sidebar-primary: oklch(0.205 0 0);
-  --sidebar-primary-foreground: oklch(0.985 0 0);
-  --sidebar-accent: oklch(0.97 0 0);
-  --sidebar-accent-foreground: oklch(0.205 0 0);
-  --sidebar-border: oklch(0.922 0 0);
-  --sidebar-ring: oklch(0.708 0 0);
+  --background: #f8f9fa;
+  --foreground: #1a1d21;
+  --card: #ffffff;
+  --card-foreground: #1a1d21;
+  --popover: #ffffff;
+  --popover-foreground: #1a1d21;
+  --primary: #0066cc;
+  --primary-foreground: #ffffff;
+  --secondary: #f0f1f3;
+  --secondary-foreground: #2a2d31;
+  --muted: #f0f1f3;
+  --muted-foreground: #6a6e73;
+  --accent: #fff3f3;
+  --accent-foreground: #a60000;
+  --destructive: #c9190b;
+  --border: #d2d3d5;
+  --input: #d2d3d5;
+  --ring: #0066cc;
+  --chart-1: #ee0000;
+  --chart-2: #0066cc;
+  --chart-3: #3e8635;
+  --chart-4: #f0ab00;
+  --chart-5: #a30000;
+  --sidebar: #ffffff;
+  --sidebar-foreground: #1a1d21;
+  --sidebar-primary: #0066cc;
+  --sidebar-primary-foreground: #ffffff;
+  --sidebar-accent: #f0f4f9;
+  --sidebar-accent-foreground: #1a1d21;
+  --sidebar-border: #e7e8ea;
+  --sidebar-ring: #0066cc;
 }
 
+/* ── Dark Theme — rich navy-slate with depth ─────────── */
 .dark {
-  --background: oklch(0.145 0 0);
-  --foreground: oklch(0.985 0 0);
-  --card: oklch(0.205 0 0);
-  --card-foreground: oklch(0.985 0 0);
-  --popover: oklch(0.205 0 0);
-  --popover-foreground: oklch(0.985 0 0);
-  --primary: oklch(0.922 0 0);
-  --primary-foreground: oklch(0.205 0 0);
-  --secondary: oklch(0.269 0 0);
-  --secondary-foreground: oklch(0.985 0 0);
-  --muted: oklch(0.269 0 0);
-  --muted-foreground: oklch(0.708 0 0);
-  --accent: oklch(0.269 0 0);
-  --accent-foreground: oklch(0.985 0 0);
-  --destructive: oklch(0.704 0.191 22.216);
-  --border: oklch(1 0 0 / 10%);
-  --input: oklch(1 0 0 / 15%);
-  --ring: oklch(0.556 0 0);
-  --chart-1: oklch(0.488 0.243 264.376);
-  --chart-2: oklch(0.696 0.17 162.48);
-  --chart-3: oklch(0.769 0.188 70.08);
-  --chart-4: oklch(0.627 0.265 303.9);
-  --chart-5: oklch(0.645 0.246 16.439);
-  --sidebar: oklch(0.205 0 0);
-  --sidebar-foreground: oklch(0.985 0 0);
-  --sidebar-primary: oklch(0.488 0.243 264.376);
-  --sidebar-primary-foreground: oklch(0.985 0 0);
-  --sidebar-accent: oklch(0.269 0 0);
-  --sidebar-accent-foreground: oklch(0.985 0 0);
-  --sidebar-border: oklch(1 0 0 / 10%);
-  --sidebar-ring: oklch(0.556 0 0);
+  --background: #0f1117;
+  --foreground: #e6e8eb;
+  --card: #181b23;
+  --card-foreground: #e6e8eb;
+  --popover: #181b23;
+  --popover-foreground: #e6e8eb;
+  --primary: #4dabf7;
+  --primary-foreground: #0f1117;
+  --secondary: #1e2230;
+  --secondary-foreground: #e6e8eb;
+  --muted: #1e2230;
+  --muted-foreground: #8b919a;
+  --accent: #2a1a1a;
+  --accent-foreground: #f56e6e;
+  --destructive: #f03e3e;
+  --border: #2a2e3a;
+  --input: #2a2e3a;
+  --ring: #4dabf7;
+  --chart-1: #f56e6e;
+  --chart-2: #4dabf7;
+  --chart-3: #51cf66;
+  --chart-4: #ffd43b;
+  --chart-5: #cc5de8;
+  --sidebar: #13151d;
+  --sidebar-foreground: #e6e8eb;
+  --sidebar-primary: #4dabf7;
+  --sidebar-primary-foreground: #0f1117;
+  --sidebar-accent: #1e2230;
+  --sidebar-accent-foreground: #e6e8eb;
+  --sidebar-border: #2a2e3a;
+  --sidebar-ring: #4dabf7;
 }
 
 @layer base {
   * {
     @apply border-border outline-ring/50;
   }
-  body {
+  html, body {
     @apply bg-background text-foreground;
-    /* Prevent scroll bounce/overscroll on mobile */
+    height: 100%;
+    max-height: 100vh;
+    max-height: 100dvh;
+    overflow: hidden;
     overscroll-behavior: none;
     -webkit-overflow-scrolling: touch;
   }
-  html {
-    /* Prevent scroll bounce on the entire page */
-    overscroll-behavior: none;
-  }
 }
 
-/* Animation Delays */
+/* Tailwind v4 reset strips native form element styles.
+   Restore sane defaults so utility classes layer on top. */
+textarea,
+input[type="text"],
+input[type="search"],
+input[type="email"],
+input[type="password"],
+input[type="url"] {
+  background-color: var(--card);
+  color: var(--foreground);
+  border: 1px solid var(--border);
+  border-radius: var(--radius-md, 0.5rem);
+  padding: 0.5rem 0.75rem;
+  font-size: 0.875rem;
+  line-height: 1.5;
+  transition: border-color 0.15s ease, box-shadow 0.15s ease;
+}
+textarea::placeholder,
+input::placeholder {
+  color: var(--muted-foreground);
+  opacity: 0.7;
+}
+textarea:focus,
+input[type="text"]:focus,
+input[type="search"]:focus {
+  border-color: var(--primary);
+  box-shadow: 0 0 0 2px color-mix(in srgb, var(--primary) 20%, transparent);
+  outline: none;
+}
+
+/* ── Animation Delays ──────────────────────────────────── */
 .animation-delay-200 { animation-delay: 0.2s; }
 .animation-delay-400 { animation-delay: 0.4s; }
 .animation-delay-600 { animation-delay: 0.6s; }
 .animation-delay-800 { animation-delay: 0.8s; }
 
-/* Keyframes */
+/* ── Keyframes ─────────────────────────────────────────── */
 @keyframes fadeIn {
   from { opacity: 0; }
   to { opacity: 1; }
@@ -145,43 +195,152 @@
   from { opacity: 0; transform: translateY(10px); }
   to { opacity: 1; transform: translateY(0); }
 }
+@keyframes slideInRight {
+  from { opacity: 0; transform: translateX(16px); }
+  to { opacity: 1; transform: translateX(0); }
+}
+@keyframes pulseGlow {
+  0%, 100% { opacity: 0.4; }
+  50% { opacity: 0.8; }
+}
+@keyframes float {
+  0%, 100% { transform: translateY(0); }
+  50% { transform: translateY(-6px); }
+}
+@keyframes shimmer {
+  0% { background-position: -200% 0; }
+  100% { background-position: 200% 0; }
+}
+
+/* ── Animation Classes ─────────────────────────────────── */
+.animate-fadeIn { animation: fadeIn 0.5s ease-out forwards; }
+.animate-fadeInUp { animation: fadeInUp 0.5s ease-out forwards; }
+.animate-fadeInUpSmooth { animation: fadeInUpSmooth 0.3s ease-out forwards; }
+.animate-slideInRight { animation: slideInRight 0.4s ease-out forwards; }
+.animate-pulseGlow { animation: pulseGlow 3s ease-in-out infinite; }
+.animate-float { animation: float 4s ease-in-out infinite; }
+.animate-shimmer {
+  background-size: 200% 100%;
+  animation: shimmer 3s linear infinite;
+}
 
-/* Animation Classes */
-.animate-fadeIn {
-  animation: fadeIn 0.5s ease-out forwards;
+/* ── Gradient Utilities ────────────────────────────────── */
+.gradient-brand {
+  background: linear-gradient(135deg, var(--primary) 0%, #7c3aed 50%, var(--rh-red) 100%);
 }
-.animate-fadeInUp {
-  animation: fadeInUp 0.5s ease-out forwards;
+.gradient-brand-text {
+  background: linear-gradient(135deg, var(--primary) 0%, #7c3aed 50%, var(--rh-red) 100%);
+  -webkit-background-clip: text;
+  -webkit-text-fill-color: transparent;
+  background-clip: text;
 }
-.animate-fadeInUpSmooth {
-  animation: fadeInUpSmooth 0.3s ease-out forwards;
+.dark .gradient-brand-text {
+  background: linear-gradient(135deg, #4dabf7 0%, #a78bfa 50%, #f56e6e 100%);
+  -webkit-background-clip: text;
+  -webkit-text-fill-color: transparent;
+  background-clip: text;
 }
 
-/* Prevent scroll bounce on scroll areas */
+/* ── Depth Utilities ───────────────────────────────────── */
+.shadow-elevated {
+  box-shadow: 0 2px 8px -2px rgb(0 0 0 / 0.08), 0 4px 16px -4px rgb(0 0 0 / 0.06);
+}
+.dark .shadow-elevated {
+  box-shadow: 0 2px 8px -2px rgb(0 0 0 / 0.4), 0 4px 16px -4px rgb(0 0 0 / 0.3);
+}
+.shadow-card {
+  box-shadow: 0 1px 3px rgb(0 0 0 / 0.06), 0 1px 2px rgb(0 0 0 / 0.04);
+}
+.dark .shadow-card {
+  box-shadow: 0 1px 3px rgb(0 0 0 / 0.3), 0 1px 2px rgb(0 0 0 / 0.2);
+}
+
+/* ── Glass Effect ──────────────────────────────────────── */
+.glass {
+  backdrop-filter: blur(12px) saturate(1.5);
+  -webkit-backdrop-filter: blur(12px) saturate(1.5);
+}
+
+/* ── Scroll Overrides ──────────────────────────────────── */
 [data-radix-scroll-area-viewport] {
   overscroll-behavior: none !important;
   -webkit-overflow-scrolling: touch;
 }
-
-/* Hide any white space that might appear during scroll bounce */
 [data-radix-scroll-area-viewport]::-webkit-scrollbar {
-  width: 0px;
+  width: 6px;
+}
+[data-radix-scroll-area-viewport]::-webkit-scrollbar-track {
   background: transparent;
 }
-
-/* Subtle scroll bar styling */
+[data-radix-scroll-area-viewport]::-webkit-scrollbar-thumb {
+  background: rgb(115 115 115 / 0.2);
+  border-radius: 3px;
+}
 [data-slot="scroll-area-scrollbar"] {
   opacity: 0.3;
   transition: opacity 0.2s ease;
 }
-
 [data-slot="scroll-area"]:hover [data-slot="scroll-area-scrollbar"] {
   opacity: 0.6;
 }
-
 [data-slot="scroll-area-thumb"] {
   background-color: rgb(115 115 115 / 0.2) !important;
 }
 
-/* Ensure your body or html has a dark background if not already set, e.g.: */
-/* body { background-color: #0c0c0d; } */ /* This is similar to neutral-950 */
+/* ── Custom scrollbar for chat area ────────────────────── */
+.chat-scroll::-webkit-scrollbar {
+  width: 6px;
+}
+.chat-scroll::-webkit-scrollbar-track {
+  background: transparent;
+}
+.chat-scroll::-webkit-scrollbar-thumb {
+  background: rgb(115 115 115 / 0.15);
+  border-radius: 3px;
+}
+.chat-scroll:hover::-webkit-scrollbar-thumb {
+  background: rgb(115 115 115 / 0.3);
+}
+/* Skip navigation: visually hidden until keyboard focus (MR-79) */
+.skip-to-main:focus,
+.skip-to-main:focus-visible {
+  position: fixed;
+  left: 1rem;
+  top: 1rem;
+  z-index: 9999;
+  width: auto;
+  height: auto;
+  padding: 1rem;
+  margin: 0;
+  overflow: visible;
+  clip: auto;
+  white-space: normal;
+  border-width: 0;
+  background: var(--background);
+  color: var(--foreground);
+  border-radius: var(--radius-md);
+  box-shadow: var(--shadow-elevated, 0 4px 12px rgb(0 0 0 / 0.12));
+  outline: 2px solid var(--ring);
+  outline-offset: 2px;
+}
+
+/* ── WCAG 2.1 AA focus visibility (MR-79) ───────────────── */
+:focus-visible {
+  outline: 2px solid var(--pf-t--global--color--brand--default, var(--primary, #0066cc));
+  outline-offset: 2px;
+}
+
+/* Screen reader only — skip link and live regions (MR-79, MR-80) */
+@layer utilities {
+  .sr-only {
+    position: absolute;
+    width: 1px;
+    height: 1px;
+    padding: 0;
+    margin: -1px;
+    overflow: hidden;
+    clip: rect(0, 0, 0, 0);
+    white-space: nowrap;
+    border-width: 0;
+  }
+}
diff --git a/src/frontend/hooks/useAgentHealth.ts b/src/frontend/hooks/useAgentHealth.ts
new file mode 100644
index 00000000..c75e09e0
--- /dev/null
+++ b/src/frontend/hooks/useAgentHealth.ts
@@ -0,0 +1,71 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { buildAppPath } from '../lib/app-paths';
+
+export type AgentHealthStatus = 'healthy' | 'unhealthy' | 'unknown';
+
+export interface AgentHealthState {
+  status: AgentHealthStatus;
+  lastChecked: Date | null;
+}
+
+const POLL_MS = 30_000;
+
+interface HealthPayload {
+  status?: string;
+}
+
+function mapStatus(raw: string | undefined): AgentHealthStatus {
+  if (raw === 'healthy') return 'healthy';
+  if (raw === 'unhealthy' || raw === 'unreachable') return 'unhealthy';
+  return 'unknown';
+}
+
+export function useAgentHealth(): AgentHealthState {
+  const [status, setStatus] = useState<AgentHealthStatus>('unknown');
+  const [lastChecked, setLastChecked] = useState<Date | null>(null);
+  const mounted = useRef(true);
+
+  const check = useCallback(async () => {
+    const controller = new AbortController();
+    const timeoutId = window.setTimeout(() => controller.abort(), 10_000);
+    try {
+      const res = await fetch(buildAppPath('/api/health/agent'), {
+        credentials: 'same-origin',
+        signal: controller.signal,
+      });
+      if (!res.ok) {
+        if (mounted.current) {
+          setStatus('unhealthy');
+          setLastChecked(new Date());
+        }
+        return;
+      }
+      const data = (await res.json()) as HealthPayload;
+      if (mounted.current) {
+        setStatus(mapStatus(data.status));
+        setLastChecked(new Date());
+      }
+    } catch {
+      if (mounted.current) {
+        setStatus('unknown');
+        setLastChecked(new Date());
+      }
+    } finally {
+      window.clearTimeout(timeoutId);
+    }
+  }, []);
+
+  useEffect(() => {
+    mounted.current = true;
+    void check();
+    const id = window.setInterval(() => {
+      void check();
+    }, POLL_MS);
+    return () => {
+      mounted.current = false;
+      window.clearInterval(id);
+    };
+  }, [check]);
+
+  return { status, lastChecked };
+}
diff --git a/src/frontend/hooks/useDataStream.tsx b/src/frontend/hooks/useDataStream.tsx
index f27916d8..389c27f9 100644
--- a/src/frontend/hooks/useDataStream.tsx
+++ b/src/frontend/hooks/useDataStream.tsx
@@ -2,6 +2,7 @@ import { useCallback, useState, useRef, useEffect } from "react";
 import type { AIMessage, Message } from "@langchain/langgraph-sdk";
 import { useRefreshableToken } from "./useRefreshableToken";
 import { chatStorage } from "@/services/chatStorage";
+import { buildAgentApiUrl } from "../lib/app-paths";
 
 export interface ToolCall {
   name: string;
@@ -75,6 +76,7 @@ export function useDataStream({
     abortControllerRef.current = new AbortController();
 
     processedChunkIdsRef.current.clear();
+    isStreamingTokensRef.current = false;
 
     setIsLoading(true);
     setMessages(messages);
@@ -90,9 +92,14 @@ export function useDataStream({
         headers["X-Token"] = refreshableToken;
       }
 
-      const response = await fetch(`${apiUrl}/v1/stream`, {
+      const streamUrl = apiUrl
+        ? `${apiUrl}/v1/stream`
+        : buildAgentApiUrl('/v1/stream');
+
+      const response = await fetch(streamUrl, {
         method: "POST",
         headers,
+        credentials: "include",
         body: JSON.stringify({
           message: messages[messages.length - 1].content,
           thread_id: threadId || "default-thread",
@@ -114,8 +121,9 @@ export function useDataStream({
 
       const decoder = new TextDecoder();
       let buffer = "";
+      let streamDone = false;
 
-      while (true) {
+      while (!streamDone) {
         const { done, value } = await reader.read();
 
         if (done) break;
@@ -137,6 +145,7 @@ export function useDataStream({
           }
 
           if (jsonData === '[DONE]' || jsonData === 'DONE') {
+            streamDone = true;
             break;
           }
 
@@ -144,12 +153,11 @@ export function useDataStream({
             const parsedResult = JSON.parse(jsonData) as AgentSteamChunk;
             const { type, content, chunk_id, } = parsedResult;
 
-            if (processedChunkIdsRef.current.has(chunk_id)) {
-              console.log(`DEBUG: Skipping duplicate chunk_id: ${chunk_id}`);
+            if (chunk_id != null && processedChunkIdsRef.current.has(chunk_id)) {
               continue;
             }
 
-            if (chunk_id) {
+            if (chunk_id != null) {
               processedChunkIdsRef.current.add(chunk_id);
             }
 
@@ -169,22 +177,21 @@ export function useDataStream({
               } else if (toolCallResult) {
 
                 setMessages(prev => {
-                  const newMessages = [...prev];
-
                   const toolCallId = content.tool_call_id;
-
-                  if (toolCallId) {
-                    newMessages.forEach((message) => {
-                      if (message.type === 'ai' && Array.isArray(message?.tool_calls) && message?.tool_calls?.length > 0) {
-                        const toolCall = message.tool_calls?.find((toolCall) => toolCall.id === toolCallId);
-                        if (toolCall) {
-                          (toolCall as any).content = content.content;
-                        }
-                      }
-                    })
-                  }
-
-                  return newMessages;
+                  if (!toolCallId) return [...prev];
+
+                  return prev.map((message) => {
+                    if (message.type !== 'ai' || !Array.isArray(message?.tool_calls) || message.tool_calls.length === 0) {
+                      return message;
+                    }
+                    const idx = message.tool_calls.findIndex((tc) => tc.id === toolCallId);
+                    if (idx === -1) return message;
+
+                    const updatedCalls = message.tool_calls.map((tc, j) =>
+                      j === idx ? { ...tc, content: content.content } : tc,
+                    );
+                    return { ...message, tool_calls: updatedCalls };
+                  });
                 });
               }
             } else if (isStreamingTokens) {
@@ -200,9 +207,9 @@ export function useDataStream({
                 isStreamingTokensRef.current = true;
               } else {
                 setMessages(prev => {
-                  const newMessages = [...prev];
-                  newMessages[newMessages.length - 1].content += content;
-                  return newMessages;
+                  const last = prev[prev.length - 1];
+                  const updated = { ...last, content: ((last.content as string) || '') + content };
+                  return [...prev.slice(0, -1), updated];
                 });
               }
 
diff --git a/src/frontend/hooks/useKeyboardShortcuts.ts b/src/frontend/hooks/useKeyboardShortcuts.ts
new file mode 100644
index 00000000..c4d491c9
--- /dev/null
+++ b/src/frontend/hooks/useKeyboardShortcuts.ts
@@ -0,0 +1,156 @@
+import { useEffect, useRef } from 'react';
+
+export interface KeyboardShortcutsConfig {
+  onNewChat?: () => void;
+  onOpenSettings?: () => void;
+  onFocusInput?: () => void;
+  onCancelStream?: () => void;
+  onToggleHelp?: () => void;
+  onExportChat?: () => void;
+  /** When Escape fires and streaming is active, `onCancelStream` runs instead of blurring. */
+  getIsStreaming?: () => boolean;
+  /** Blur the main chat input when Escape fires and not streaming. */
+  onBlurChatInput?: () => void;
+}
+
+type ConfigGetter = () => KeyboardShortcutsConfig;
+
+const layerGetters: ConfigGetter[] = [];
+
+let globalListener: ((e: KeyboardEvent) => void) | null = null;
+
+function isEditableTarget(target: EventTarget | null): boolean {
+  if (!target || !(target instanceof HTMLElement)) return false;
+  if (target.isContentEditable) return true;
+  const tag = target.tagName;
+  return tag === 'INPUT' || tag === 'TEXTAREA' || tag === 'SELECT';
+}
+
+function pickCallback<K extends keyof KeyboardShortcutsConfig>(
+  key: K,
+): NonNullable<KeyboardShortcutsConfig[K]> | undefined {
+  for (let i = layerGetters.length - 1; i >= 0; i--) {
+    const v = layerGetters[i]()[key];
+    if (typeof v === 'function') {
+      return v as NonNullable<KeyboardShortcutsConfig[K]>;
+    }
+  }
+  return undefined;
+}
+
+function pickStreamingGetter(): (() => boolean) | undefined {
+  for (let i = layerGetters.length - 1; i >= 0; i--) {
+    const g = layerGetters[i]().getIsStreaming;
+    if (typeof g === 'function') return g;
+  }
+  return undefined;
+}
+
+function attachGlobalListener(): void {
+  globalListener = (e: KeyboardEvent) => {
+    if (e.repeat) return;
+
+    const inEditable = isEditableTarget(e.target);
+
+    if (e.key === 'Escape') {
+      const streaming = pickStreamingGetter()?.() ?? false;
+      const cancel = pickCallback('onCancelStream');
+      const blur = pickCallback('onBlurChatInput');
+      if (streaming && cancel) {
+        cancel();
+        e.preventDefault();
+        return;
+      }
+      if (blur) {
+        blur();
+        e.preventDefault();
+      }
+      return;
+    }
+
+    if (inEditable) return;
+
+    const mod = e.ctrlKey || e.metaKey;
+
+    if (e.key === '/' && !mod && !e.altKey) {
+      const fn = pickCallback('onFocusInput');
+      if (fn) {
+        e.preventDefault();
+        fn();
+      }
+      return;
+    }
+
+    if (e.key === '?') {
+      const fn = pickCallback('onToggleHelp');
+      if (fn) {
+        e.preventDefault();
+        fn();
+      }
+      return;
+    }
+
+    if (mod && e.shiftKey && e.key.toLowerCase() === 's' && !e.altKey) {
+      const fn = pickCallback('onOpenSettings');
+      if (fn) {
+        e.preventDefault();
+        fn();
+      }
+      return;
+    }
+
+    if (mod && e.shiftKey && e.key.toLowerCase() === 'e' && !e.altKey) {
+      const fn = pickCallback('onExportChat');
+      if (fn) {
+        e.preventDefault();
+        fn();
+      }
+      return;
+    }
+
+    if (mod && !e.shiftKey && e.key.toLowerCase() === 'n' && !e.altKey) {
+      const fn = pickCallback('onNewChat');
+      if (fn) {
+        e.preventDefault();
+        fn();
+      }
+    }
+  };
+
+  document.addEventListener('keydown', globalListener);
+}
+
+function detachGlobalListener(): void {
+  if (globalListener) {
+    document.removeEventListener('keydown', globalListener);
+    globalListener = null;
+  }
+}
+
+/**
+ * Registers global keyboard shortcuts. Multiple layers may be active (e.g. AppLayout + ChatPage);
+ * the nearest layer with a matching hook call wins for each action.
+ */
+export function useKeyboardShortcuts(config: KeyboardShortcutsConfig): void {
+  const configRef = useRef(config);
+  configRef.current = config;
+
+  useEffect(() => {
+    const getter: ConfigGetter = () => configRef.current;
+    layerGetters.push(getter);
+
+    if (layerGetters.length === 1) {
+      attachGlobalListener();
+    }
+
+    return () => {
+      const idx = layerGetters.indexOf(getter);
+      if (idx >= 0) {
+        layerGetters.splice(idx, 1);
+      }
+      if (layerGetters.length === 0) {
+        detachGlobalListener();
+      }
+    };
+  }, []);
+}
diff --git a/src/frontend/hooks/useRateLimitState.ts b/src/frontend/hooks/useRateLimitState.ts
new file mode 100644
index 00000000..2e9b6bd2
--- /dev/null
+++ b/src/frontend/hooks/useRateLimitState.ts
@@ -0,0 +1,73 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+
+import { setRateLimitCallback } from '@/services/authenticated-fetch';
+
+export type RateLimitState = {
+  isRateLimited: boolean;
+  retryAfterSeconds: number;
+  resetTime: Date | null;
+};
+
+export { triggerRateLimit } from '@/services/authenticated-fetch';
+
+export function useRateLimitState(): RateLimitState {
+  const [state, setState] = useState<RateLimitState>({
+    isRateLimited: false,
+    retryAfterSeconds: 0,
+    resetTime: null,
+  });
+
+  const tickRef = useRef<ReturnType<typeof setInterval> | null>(null);
+
+  const clearTick = useCallback(() => {
+    if (tickRef.current != null) {
+      clearInterval(tickRef.current);
+      tickRef.current = null;
+    }
+  }, []);
+
+  const handleRateLimit = useCallback(
+    (retryAfterSeconds: number) => {
+      const safe = Math.max(0, Math.floor(retryAfterSeconds));
+      clearTick();
+
+      if (safe <= 0) {
+        setState({ isRateLimited: false, retryAfterSeconds: 0, resetTime: null });
+        return;
+      }
+
+      const resetTime = new Date(Date.now() + safe * 1000);
+      setState({
+        isRateLimited: true,
+        retryAfterSeconds: safe,
+        resetTime,
+      });
+
+      tickRef.current = setInterval(() => {
+        setState((prev) => {
+          const next = prev.retryAfterSeconds - 1;
+          if (next <= 0) {
+            clearTick();
+            return { isRateLimited: false, retryAfterSeconds: 0, resetTime: null };
+          }
+          return {
+            isRateLimited: true,
+            retryAfterSeconds: next,
+            resetTime: prev.resetTime,
+          };
+        });
+      }, 1000);
+    },
+    [clearTick],
+  );
+
+  useEffect(() => {
+    setRateLimitCallback(handleRateLimit);
+    return () => {
+      setRateLimitCallback(null);
+      clearTick();
+    };
+  }, [handleRateLimit, clearTick]);
+
+  return state;
+}
diff --git a/src/frontend/hooks/useRefreshableToken.tsx b/src/frontend/hooks/useRefreshableToken.tsx
index 94cdc1a5..2bcc5163 100644
--- a/src/frontend/hooks/useRefreshableToken.tsx
+++ b/src/frontend/hooks/useRefreshableToken.tsx
@@ -1,4 +1,5 @@
 import { useEffect, useRef, useState } from "react";
+import { notifySessionExpired } from "../services/authenticated-fetch";
 
 const updateTokenStatus = (tokenExpiry: Date) => {
   if (!tokenExpiry) {
@@ -52,6 +53,10 @@ export function useRefreshableToken() {
         console.log("Refreshing token");
         try {
           const response = await fetch("/auth/refresh?forceRefresh=true");
+          if (response.status === 401) {
+            notifySessionExpired();
+            return;
+          }
           const data = await response.json();
           if (data.message === "RefreshedToken") {
             setToken(data.token.access_token);
diff --git a/src/frontend/hooks/useStreamingAPI.test.ts b/src/frontend/hooks/useStreamingAPI.test.ts
new file mode 100644
index 00000000..753f6779
--- /dev/null
+++ b/src/frontend/hooks/useStreamingAPI.test.ts
@@ -0,0 +1,232 @@
+import { describe, it, expect, beforeEach, vi, afterEach } from 'vitest';
+import { act, waitFor } from '@testing-library/react';
+import type { Message } from '@langchain/langgraph-sdk';
+import { renderHook } from '@testing-library/react';
+import { Provider } from 'react-redux';
+import React from 'react';
+import { configureStore } from '@reduxjs/toolkit';
+import chatsReducer, { addChat } from '../redux/slices/chats';
+import configReducer from '../redux/slices/config';
+import personalizationReducer from '../redux/slices/personalization';
+import toastsReducer from '../redux/slices/toasts';
+import userSettingsReducer, { addAlwaysAllowedTool } from '../redux/slices/userSettings';
+import { useStreamingAPI } from './useStreamingAPI';
+
+// ── Store factory ─────────────────────────────────────────────────────────────
+
+function makeStore(preloadedState?: Record<string, unknown>) {
+  return configureStore({
+    reducer: {
+      chats: chatsReducer,
+      config: configReducer,
+      personalization: personalizationReducer,
+      toasts: toastsReducer,
+      userSettings: userSettingsReducer,
+    },
+    preloadedState,
+  });
+}
+
+function makeWrapper(store: ReturnType<typeof makeStore>) {
+  return function Wrapper({ children }: { children: React.ReactNode }) {
+    return React.createElement(Provider, { store }, children);
+  };
+}
+
+const THREAD_ID = 'test-thread';
+
+function seedChat(store: ReturnType<typeof makeStore>) {
+  store.dispatch(
+    addChat({
+      id: THREAD_ID,
+      title: 'Test',
+      timestamp: new Date().toISOString(),
+      preview: '',
+      messages: [],
+      historicalActivities: {},
+      feedback: {},
+    }),
+  );
+}
+
+// ── checkAndAutoApprove ───────────────────────────────────────────────────────
+
+describe('useStreamingAPI — checkAndAutoApprove', () => {
+  let store: ReturnType<typeof makeStore>;
+
+  beforeEach(() => {
+    localStorage.clear();
+    store = makeStore();
+    seedChat(store);
+  });
+
+  it('returns allAutoApproved=true when all action_requests are in alwaysAllowedTools', () => {
+    store.dispatch(addAlwaysAllowedTool('create_pr'));
+    store.dispatch(addAlwaysAllowedTool('web_search'));
+
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    const interruptValue = {
+      action_requests: [
+        { name: 'create_pr', args: {} },
+        { name: 'web_search', args: {} },
+      ],
+      review_configs: [],
+    };
+
+    const { allAutoApproved, decisions } = result.current.checkAndAutoApprove(interruptValue);
+    expect(allAutoApproved).toBe(true);
+    expect(decisions.every((d) => d.type === 'approve')).toBe(true);
+  });
+
+  it('returns allAutoApproved=false when any action_request is not in alwaysAllowedTools', () => {
+    store.dispatch(addAlwaysAllowedTool('web_search'));
+
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    const interruptValue = {
+      action_requests: [
+        { name: 'create_pr', args: {} }, // NOT allowed
+        { name: 'web_search', args: {} }, // allowed
+      ],
+      review_configs: [],
+    };
+
+    const { allAutoApproved } = result.current.checkAndAutoApprove(interruptValue);
+    expect(allAutoApproved).toBe(false);
+  });
+
+  it('auto-approves when the subagent_type arg matches an allowed tool', () => {
+    store.dispatch(addAlwaysAllowedTool('analyst'));
+
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    const interruptValue = {
+      action_requests: [{ name: 'task', args: { subagent_type: 'analyst' } }],
+      review_configs: [],
+    };
+
+    const { allAutoApproved } = result.current.checkAndAutoApprove(interruptValue);
+    expect(allAutoApproved).toBe(true);
+  });
+
+  it('returns allAutoApproved=true for an empty action_requests list', () => {
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    const { allAutoApproved } = result.current.checkAndAutoApprove({
+      action_requests: [],
+      review_configs: [],
+    });
+    expect(allAutoApproved).toBe(true);
+  });
+
+  it('returns allAutoApproved=false when alwaysAllowedTools is empty', () => {
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    const interruptValue = {
+      action_requests: [{ name: 'create_pr', args: {} }],
+      review_configs: [],
+    };
+
+    const { allAutoApproved } = result.current.checkAndAutoApprove(interruptValue);
+    expect(allAutoApproved).toBe(false);
+  });
+
+  // NOTE: the autoApproveAllTools flag bypass is handled at the ChatPage level
+  // (ChatPage.tsx's useEffect calls resumeWithDecisions directly when the flag is true)
+  // rather than inside checkAndAutoApprove itself.  The E2E suite (auto-approve.spec.ts)
+  // covers that path end-to-end.
+});
+
+// ── Initial state & stop() ────────────────────────────────────────────────────
+
+describe('useStreamingAPI — initial state and stop()', () => {
+  let store: ReturnType<typeof makeStore>;
+
+  beforeEach(() => {
+    localStorage.clear();
+    store = makeStore();
+    seedChat(store);
+    vi.stubGlobal('fetch', vi.fn()); // prevent real network calls
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it('starts idle with null pendingInterrupt and retryCount 0', () => {
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    expect(result.current.isLoading).toBe(false);
+    expect(result.current.pendingInterrupt).toBeNull();
+    expect(result.current.retryCount).toBe(0);
+    expect(result.current.wasInterrupted).toBe(false);
+  });
+
+  it('stop() is safe to call when idle (no error thrown)', () => {
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    // stop() on an idle hook should not throw and should leave state unchanged
+    act(() => {
+      result.current.stop();
+    });
+
+    expect(result.current.isLoading).toBe(false);
+  });
+
+  it('setMessages() updates the messages visible in the hook', () => {
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    const fakeMsg = { type: 'ai', content: 'injected', id: 'injected-1', tool_calls: [] };
+    act(() => {
+      result.current.setMessages([fakeMsg as Parameters<typeof result.current.setMessages>[0][number]]);
+    });
+
+    // The hook exposes the messages it was given
+    expect(result.current.messages).toHaveLength(1);
+    expect((result.current.messages[0] as { id: string }).id).toBe('injected-1');
+  });
+
+  it('submit() transitions isLoading to true while a stream is in flight', async () => {
+    // Return a stream that never resolves so we can observe the loading state
+    vi.mocked(fetch).mockImplementationOnce(
+      () => new Promise(() => { /* never resolves — allows us to observe isLoading: true */ }),
+    );
+
+    const { result } = renderHook(() => useStreamingAPI(THREAD_ID), {
+      wrapper: makeWrapper(store),
+    });
+
+    // submit() takes { messages: Message[] }; seed with a human message so the hook
+    // proceeds past the "empty message text" guard and actually calls fetch
+    const userMessage = {
+      type: 'human',
+      content: 'hello world',
+      id: 'user-msg-1',
+    } as unknown as Message;
+
+    act(() => void result.current.submit({ messages: [userMessage] }));
+
+    // isLoading should become true once the hook's setStreamingState fires
+    await waitFor(() => expect(result.current.isLoading).toBe(true));
+
+    // Clean up the in-flight request
+    act(() => result.current.stop());
+  });
+});
diff --git a/src/frontend/hooks/useStreamingAPI.ts b/src/frontend/hooks/useStreamingAPI.ts
new file mode 100644
index 00000000..3f9dda37
--- /dev/null
+++ b/src/frontend/hooks/useStreamingAPI.ts
@@ -0,0 +1,920 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import type { AIMessage, Message } from '@langchain/langgraph-sdk';
+
+import type { StreamEvent } from '@/hooks/useDataStream';
+import {
+  StreamingManager,
+  type InterruptPayload,
+  type StreamCallback,
+  type StreamStatus,
+} from '@/lib/streaming/StreamingManager';
+import { useAppDispatch, useAppSelector } from '@/redux/hooks';
+import {
+  appendMessageToChat,
+  removeLastMessageFromChat,
+  mergeToolResult,
+  resolveAllPendingToolCalls,
+  selectChatById,
+  selectStreamingState,
+  updateChat,
+  updateLastMessageInChat,
+  updateStreamingState,
+  type StreamingState,
+} from '@/redux/slices/chats';
+import { chatStorage } from '@/services/chatStorage';
+import { buildAgentApiUrl } from '@/lib/app-paths';
+import { selectActiveRules, selectMemories } from '@/redux/slices/personalization';
+import { selectAlwaysAllowedTools } from '@/redux/slices/userSettings';
+import { isSubAgentToolCall, extractSubAgentName } from '@/types/deep-agent';
+import type { HITLInterruptValue, InterruptInfo } from '@/types/deep-agent';
+import { getThreadState } from '@/services/agent-rest';
+
+function enrichInterrupt(interrupt: InterruptPayload): InterruptInfo {
+  const raw = interrupt.value as string | HITLInterruptValue;
+  if (typeof raw === 'object' && raw !== null && (raw as { type?: string }).type === 'mcp_auth_required') {
+    return { ...interrupt, value: raw, payload: raw as unknown as NonNullable<InterruptInfo['payload']> };
+  }
+  if (typeof raw === 'string') {
+    try {
+      const parsed = JSON.parse(raw) as unknown;
+      if (
+        parsed
+        && typeof parsed === 'object'
+        && (parsed as { type?: string }).type === 'mcp_auth_required'
+      ) {
+        return { ...interrupt, value: raw, payload: parsed as NonNullable<InterruptInfo['payload']> };
+      }
+    } catch {
+      // plain-text interrupt
+    }
+  }
+  return { ...interrupt, value: raw };
+}
+
+function cloneMessages(messages: Message[]): Message[] {
+  return messages.map((m) => JSON.parse(JSON.stringify(m)) as Message);
+}
+
+function serializeLastMessage(messages: Message[]): string {
+  const last = messages[messages.length - 1];
+  if (!last) {
+    return '';
+  }
+  return typeof last.content === 'string' ? last.content : JSON.stringify(last.content);
+}
+
+const EMPTY_MESSAGES: Message[] = [];
+
+/** MR-56: max automatic retries after the first failed stream attempt */
+export const MAX_RETRIES = 3;
+/** MR-56: base delay for exponential backoff (ms) */
+const BASE_DELAY_MS = 1000;
+/** MR-63: idle threshold before marking stream as stale (ms) */
+const STALE_THRESHOLD_MS = 30000;
+/** Time threshold for refetching history on reconnect (ms) */
+const HISTORY_REFETCH_THRESHOLD_MS = 10000;
+
+function computeRetryDelayMs(retryAttemptNumber: number): number {
+  const capped = Math.min(BASE_DELAY_MS * 2 ** retryAttemptNumber, 30000);
+  const jitter = Math.random() * Math.min(capped * 0.25, 7500);
+  return Math.floor(Math.min(capped + jitter, 30000));
+}
+
+function isRecoverableStreamError(error: Error): boolean {
+  if (error.name === 'AbortError') return false;
+  const msg = error.message;
+  const httpMatch = msg.match(/HTTP error! status:\s*(\d+)/i);
+  if (httpMatch) {
+    const code = Number.parseInt(httpMatch[1], 10);
+    if (code === 429) return true;
+    if (code >= 400 && code < 500) return false;
+    if (code >= 500) return true;
+  }
+  if (error instanceof TypeError) return true;
+  const lower = msg.toLowerCase();
+  if (
+    lower.includes('failed to fetch') ||
+    lower.includes('networkerror') ||
+    lower.includes('load failed') ||
+    lower.includes('network request failed')
+  ) {
+    return true;
+  }
+  return false;
+}
+
+function nextStreamingPartialForStatus(status: StreamStatus): Partial<StreamingState> | null {
+  switch (status) {
+    case 'connecting':
+      return {
+        isLoading: true,
+        isConnected: false,
+        error: null,
+        isThinking: false,
+      };
+    case 'streaming':
+      return {
+        isConnected: true,
+        isLoading: true,
+      };
+    case 'idle':
+      return {
+        isLoading: false,
+        isConnected: false,
+        error: null,
+        isThinking: false,
+        currentRunId: null,
+      };
+    case 'cancelled':
+      return {
+        isLoading: false,
+        isConnected: false,
+        error: null,
+      };
+    case 'error':
+      return null;
+  }
+}
+
+export function useStreamingAPI(threadId: string) {
+  const dispatch = useAppDispatch();
+  const chat = useAppSelector((state) => selectChatById(state, threadId));
+  const streamingState = useAppSelector((state) => selectStreamingState(state, threadId));
+
+  const memories = useAppSelector(selectMemories);
+  const activeRules = useAppSelector(selectActiveRules);
+  const alwaysAllowedTools = useAppSelector(selectAlwaysAllowedTools);
+
+  const messages = useMemo(() => chat?.messages ?? EMPTY_MESSAGES, [chat?.messages]);
+
+  const [streamEvents] = useState<StreamEvent[]>([]);
+  const [retryCount, setRetryCount] = useState(0);
+  const [isStreamStale, setIsStreamStale] = useState(false);
+  const [wasInterrupted, setWasInterrupted] = useState(false);
+  const [mcpEvents, setMcpEvents] = useState<Array<{ tool: string; status: string; timestamp: number }>>([]);
+  const [traceId, setTraceId] = useState<string | null>(null);
+  const [lastStreamTiming, setLastStreamTiming] = useState<{
+    streamStartTime: number;
+    firstTokenTime: number | null;
+    streamEndTime: number;
+    timeToFirstTokenMs: number | null;
+    totalDurationMs: number;
+  } | null>(null);
+
+  const managerRef = useRef<StreamingManager | null>(null);
+  const streamClockRef = useRef<{
+    streamStartTime: number | null;
+    firstTokenTime: number | null;
+    streamEndTime: number | null;
+  }>({ streamStartTime: null, firstTokenTime: null, streamEndTime: null });
+  const isStreamingTokensRef = useRef<boolean>(false);
+  const isActiveRef = useRef(true);
+  const userCancelledRef = useRef(false);
+  const streamEndedWithInterruptRef = useRef(false);
+  const pendingInterruptRef = useRef(streamingState.pendingInterrupt);
+  pendingInterruptRef.current = streamingState.pendingInterrupt;
+  const lastStreamErrorRef = useRef<Error | null>(null);
+  const lastTokenTimeRef = useRef<number>(0);
+  const staleIntervalRef = useRef<ReturnType<typeof setInterval> | null>(null);
+  const lastSuccessfulConnectionRef = useRef<number>(Date.now());
+  const threadIdRef = useRef(threadId);
+  threadIdRef.current = threadId;
+  const chatRef = useRef(chat);
+  chatRef.current = chat;
+
+  if (!managerRef.current) {
+    managerRef.current = new StreamingManager();
+  }
+
+  const handleStreamActivityStatus = useCallback((status: StreamStatus) => {
+    if (status === 'connecting' || status === 'streaming') {
+      if (staleIntervalRef.current != null) {
+        clearInterval(staleIntervalRef.current);
+        staleIntervalRef.current = null;
+      }
+      lastTokenTimeRef.current = Date.now();
+      staleIntervalRef.current = setInterval(() => {
+        const mgr = managerRef.current;
+        const st = mgr?.getStatus();
+        if (st !== 'connecting' && st !== 'streaming') {
+          return;
+        }
+        if (Date.now() - lastTokenTimeRef.current > STALE_THRESHOLD_MS) {
+          setIsStreamStale(true);
+          console.warn(
+            '[useStreamingAPI] No stream activity for over 30s while connected; the stream may be stalled.',
+          );
+        }
+      }, 1000);
+      return;
+    }
+    if (status === 'idle' || status === 'error' || status === 'cancelled') {
+      if (staleIntervalRef.current != null) {
+        clearInterval(staleIntervalRef.current);
+        staleIntervalRef.current = null;
+      }
+      setIsStreamStale(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    const onBeforeUnload = () => {
+      const mgr = managerRef.current;
+      const st = mgr?.getStatus();
+      if (st !== 'connecting' && st !== 'streaming') {
+        return;
+      }
+      const apiUrl = typeof window.APP_DATA?.apiUrl === 'string' ? window.APP_DATA.apiUrl : '';
+      const cancelUrl = apiUrl ? `${apiUrl}/v1/stream/cancel` : buildAgentApiUrl('/v1/stream/cancel');
+      if (typeof navigator.sendBeacon === 'function') {
+        const payload = JSON.stringify({
+          thread_id: threadIdRef.current,
+          event: 'client_stream_cancel',
+        });
+        navigator.sendBeacon(cancelUrl, new Blob([payload], { type: 'application/json' }));
+      }
+      mgr?.cancel();
+    };
+    window.addEventListener('beforeunload', onBeforeUnload);
+    return () => window.removeEventListener('beforeunload', onBeforeUnload);
+  }, []);
+
+  useEffect(() => {
+    isActiveRef.current = true;
+    const manager = managerRef.current;
+    return () => {
+      isActiveRef.current = false;
+      setTimeout(() => {
+        if (!isActiveRef.current) manager?.cancel();
+      }, 50);
+    };
+  }, []);
+
+  useEffect(() => {
+    const manager = managerRef.current;
+    const currentThreadId = threadIdRef.current;
+    return () => {
+      const st = manager?.getStatus();
+      if (st === 'connecting' || st === 'streaming') {
+        manager?.cancel();
+        const apiUrl = typeof window.APP_DATA?.apiUrl === 'string' ? window.APP_DATA.apiUrl : '';
+        const cancelUrl = apiUrl ? `${apiUrl}/v1/stream/cancel` : buildAgentApiUrl('/v1/stream/cancel');
+        if (typeof navigator.sendBeacon === 'function') {
+          const payload = JSON.stringify({
+            thread_id: currentThreadId,
+            event: 'client_stream_cancel',
+          });
+          navigator.sendBeacon(cancelUrl, new Blob([payload], { type: 'application/json' }));
+        }
+      }
+    };
+  }, [threadId]);
+
+  useEffect(() => {
+    if (!threadId) return;
+    chatStorage.saveChatByThreadId(threadId, messages);
+  }, [messages, threadId]);
+
+  const setMessages = useCallback(
+    (msgs: Message[]) => {
+      const next = cloneMessages(msgs);
+      dispatch(updateChat({ id: threadId, updates: { messages: next } }));
+      chatStorage.saveChatByThreadId(threadId, next);
+      isStreamingTokensRef.current = false;
+    },
+    [dispatch, threadId],
+  );
+
+  const submit = useCallback(
+    async ({ messages: submitted }: { messages: Message[] }) => {
+      const manager = managerRef.current;
+      if (!manager || !threadId) return;
+
+      userCancelledRef.current = false;
+      setRetryCount(0);
+      setWasInterrupted(false);
+      setIsStreamStale(false);
+      setMcpEvents([]);
+      setTraceId(null);
+      setLastStreamTiming(null);
+      streamClockRef.current = {
+        streamStartTime: null,
+        firstTokenTime: null,
+        streamEndTime: null,
+      };
+      if (staleIntervalRef.current != null) {
+        clearInterval(staleIntervalRef.current);
+        staleIntervalRef.current = null;
+      }
+
+      isStreamingTokensRef.current = false;
+
+      const clones = cloneMessages(submitted);
+      dispatch(updateChat({ id: threadId, updates: { messages: clones } }));
+      chatStorage.saveChatByThreadId(threadId, clones);
+
+      const messageText = serializeLastMessage(clones);
+      if (messageText === '') return;
+
+      if (messageText.startsWith('/memory ')) {
+        const memoryContent = messageText.slice('/memory '.length).trim();
+        if (memoryContent) {
+          const { createMemory } = await import('@/services/agent-rest');
+          const saved = await createMemory(memoryContent);
+          const confirmMsg: Message = {
+            id: `msg-${Date.now()}`,
+            type: 'ai' as const,
+            content: saved
+              ? `Memory saved: "${memoryContent}"`
+              : `Failed to save memory. Please try again.`,
+          };
+          const updated = [...clones, confirmMsg];
+          dispatch(updateChat({ id: threadId, updates: { messages: updated } }));
+          setMessages(updated.map((m) => JSON.parse(JSON.stringify(m))));
+          chatStorage.saveChatByThreadId(threadId, updated);
+        }
+        return;
+      }
+
+      const token = typeof window.USER_DATA.accessToken === 'string' ? window.USER_DATA.accessToken : undefined;
+      const userId =
+        typeof window.USER_DATA.preferred_username === 'string'
+          ? window.USER_DATA.preferred_username
+          : '';
+      const apiUrl = typeof window.APP_DATA?.apiUrl === 'string' ? window.APP_DATA.apiUrl : '';
+
+      dispatch(
+        updateStreamingState({
+          chatId: threadId,
+          state: {
+            currentRunId: `run-${Date.now()}`,
+            error: null,
+            pendingInterrupt: null,
+            taskSteps: [],
+          },
+        }),
+      );
+
+      const streamRequest = {
+        message: messageText,
+        threadId,
+        userId,
+        apiUrl,
+        token,
+        memories: memories.map((m) => m.content),
+        rules: activeRules.map((r) => r.content),
+      };
+
+      for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+        if (userCancelledRef.current) {
+          break;
+        }
+
+        // Update reconnection state on retry
+        if (attempt > 0) {
+          dispatch(
+            updateStreamingState({
+              chatId: threadId,
+              state: {
+                isReconnecting: true,
+                reconnectAttempt: attempt,
+                streamDroppedMidResponse: isStreamingTokensRef.current,
+              },
+            }),
+          );
+
+          // Remove incomplete AI message if stream dropped mid-response
+          if (isStreamingTokensRef.current) {
+            dispatch(updateChat({ id: threadId, updates: { messages: clones } }));
+            isStreamingTokensRef.current = false;
+          }
+        }
+
+        // Refetch conversation history on reconnect if connection was lost for > 10s
+        if (attempt > 0 && Date.now() - lastSuccessfulConnectionRef.current > HISTORY_REFETCH_THRESHOLD_MS) {
+          try {
+            const history = await getThreadState(threadId);
+            if (history.length > 0) {
+              const pendingMsg = clones[clones.length - 1];
+              const serverHasPending =
+                pendingMsg?.type === 'human' &&
+                history.some((m) => m.type === 'human' && m.content === pendingMsg.content);
+              const merged = serverHasPending ? history : [...history, pendingMsg];
+              dispatch(updateChat({ id: threadId, updates: { messages: merged } }));
+            }
+          } catch (err) {
+            console.warn('[useStreamingAPI] Failed to refetch conversation history on reconnect', err);
+          }
+        }
+
+        type StreamOutcome = 'success' | 'cancelled' | 'failed';
+        const outcome = await new Promise<StreamOutcome>((resolve) => {
+          let settled = false;
+          const finish = (r: StreamOutcome) => {
+            if (settled) return;
+            settled = true;
+            resolve(r);
+          };
+
+          lastStreamErrorRef.current = null;
+          streamEndedWithInterruptRef.current = false;
+
+          const callbacks: StreamCallback = {
+            onToken(content) {
+              lastTokenTimeRef.current = Date.now();
+              lastSuccessfulConnectionRef.current = Date.now();
+              setIsStreamStale(false);
+              if (streamClockRef.current.firstTokenTime == null) {
+                streamClockRef.current.firstTokenTime = Date.now();
+              }
+              if (!isStreamingTokensRef.current) {
+                const message: AIMessage = {
+                  type: 'ai',
+                  content,
+                  tool_calls: [],
+                  id: `${Date.now()}-${Math.random().toString(36).slice(2)}`,
+                };
+                dispatch(appendMessageToChat({ chatId: threadId, message }));
+                isStreamingTokensRef.current = true;
+                return;
+              }
+              dispatch(updateLastMessageInChat({ chatId: threadId, content }));
+            },
+            onDraftDiscard() {
+              if (isStreamingTokensRef.current) {
+                dispatch(removeLastMessageFromChat({ chatId: threadId }));
+                isStreamingTokensRef.current = false;
+              }
+            },
+            onMessage(m) {
+              isStreamingTokensRef.current = false;
+              if (m.type === 'human') {
+                return;
+              }
+
+              const isToolCallingAi =
+                m.type === 'ai' && Array.isArray(m.tool_calls) && m.tool_calls.length > 0;
+              if (isToolCallingAi) {
+                dispatch(appendMessageToChat({ chatId: threadId, message: m }));
+
+                const subAgentTc = m.tool_calls?.find((tc: { name: string; args?: Record<string, unknown> }) =>
+                  isSubAgentToolCall(tc),
+                );
+                if (subAgentTc) {
+                  dispatch(
+                    updateStreamingState({
+                      chatId: threadId,
+                      state: {
+                        activeSubAgent: {
+                          name: extractSubAgentName(subAgentTc),
+                          toolCallId: subAgentTc.id ?? '',
+                          status: 'delegating',
+                          startedAt: Date.now(),
+                        },
+                      },
+                    }),
+                  );
+                }
+                return;
+              }
+
+              if (m.type === 'tool') {
+                dispatch(
+                  mergeToolResult({
+                    chatId: threadId,
+                    toolCallId: m.tool_call_id,
+                    content: m.content,
+                  }),
+                );
+                dispatch(
+                  updateStreamingState({
+                    chatId: threadId,
+                    state: { activeSubAgent: null },
+                  }),
+                );
+              }
+            },
+            onInterrupt(interrupt) {
+              streamEndedWithInterruptRef.current = true;
+              dispatch(
+                updateStreamingState({
+                  chatId: threadId,
+                  state: { pendingInterrupt: enrichInterrupt(interrupt) },
+                }),
+              );
+            },
+            onError(error) {
+              lastStreamErrorRef.current = error;
+              const canRetry =
+                isRecoverableStreamError(error) && attempt < MAX_RETRIES && !userCancelledRef.current;
+              if (canRetry) {
+                dispatch(
+                  updateStreamingState({
+                    chatId: threadId,
+                    state: {
+                      error: null,
+                      isLoading: true,
+                      isConnected: false,
+                    },
+                  }),
+                );
+              } else {
+                dispatch(
+                  updateStreamingState({
+                    chatId: threadId,
+                    state: {
+                      error: error.message,
+                      isLoading: false,
+                      isConnected: false,
+                      isReconnecting: false,
+                      reconnectAttempt: 0,
+                      streamDroppedMidResponse: false,
+                    },
+                  }),
+                );
+                setWasInterrupted(true);
+              }
+              finish('failed');
+            },
+            onStatusChange(status) {
+              if (status === 'connecting') {
+                setLastStreamTiming(null);
+                streamClockRef.current.streamStartTime = Date.now();
+                streamClockRef.current.firstTokenTime = null;
+                streamClockRef.current.streamEndTime = null;
+              }
+              if (status === 'idle' || status === 'cancelled' || status === 'error') {
+                const end = Date.now();
+                streamClockRef.current.streamEndTime = end;
+                const { streamStartTime, firstTokenTime } = streamClockRef.current;
+                if (streamStartTime != null) {
+                  setLastStreamTiming({
+                    streamStartTime,
+                    firstTokenTime,
+                    streamEndTime: end,
+                    timeToFirstTokenMs:
+                      firstTokenTime != null ? firstTokenTime - streamStartTime : null,
+                    totalDurationMs: end - streamStartTime,
+                  });
+                }
+              }
+              if (status === 'cancelled') {
+                finish('cancelled');
+              }
+              handleStreamActivityStatus(status);
+              if (status === 'error') {
+                return;
+              }
+              const partial = nextStreamingPartialForStatus(status);
+              if (partial) {
+                dispatch(updateStreamingState({ chatId: threadId, state: partial }));
+              }
+            },
+            onDone() {
+              if (!streamEndedWithInterruptRef.current) {
+                dispatch(resolveAllPendingToolCalls({ chatId: threadId }));
+              }
+              lastSuccessfulConnectionRef.current = Date.now();
+              dispatch(
+                updateStreamingState({
+                  chatId: threadId,
+                  state: {
+                    isLoading: false,
+                    isConnected: false,
+                    isReconnecting: false,
+                    reconnectAttempt: 0,
+                    streamDroppedMidResponse: false,
+                  },
+                }),
+              );
+              finish('success');
+            },
+            onMcpStatus(evt) {
+              setMcpEvents((prev) => [...prev, evt]);
+            },
+            onMetadata(data) {
+              setTraceId(data.trace_id);
+            },
+          };
+
+          manager.stream(streamRequest, callbacks).then(() => {
+            if (!settled) {
+              if (!streamEndedWithInterruptRef.current) {
+                dispatch(resolveAllPendingToolCalls({ chatId: threadId }));
+              }
+              finish('success');
+            }
+          });
+        });
+
+        if (outcome === 'success' || outcome === 'cancelled') {
+          break;
+        }
+
+        const err = lastStreamErrorRef.current;
+        if (
+          !err ||
+          !isRecoverableStreamError(err) ||
+          attempt >= MAX_RETRIES ||
+          userCancelledRef.current
+        ) {
+          break;
+        }
+
+        setRetryCount(attempt + 1);
+        await new Promise<void>((r) => setTimeout(r, computeRetryDelayMs(attempt + 1)));
+      }
+    },
+    [dispatch, threadId, memories, activeRules, handleStreamActivityStatus],
+  );
+
+  /**
+   * Check an incoming interrupt value against the always-allowed list.
+   * Returns true if ALL action requests are auto-approved so the caller
+   * can skip showing the banner entirely.
+   */
+  const checkAndAutoApprove = useCallback(
+    (interruptValue: HITLInterruptValue): { allAutoApproved: boolean; decisions: Array<{ type: 'approve' | 'reject' }> } => {
+      const allowed = new Set(alwaysAllowedTools);
+      const decisions = interruptValue.action_requests.map((req) => {
+        const subagentType = typeof req.args?.subagent_type === 'string' ? req.args.subagent_type : null;
+        const isAllowed = allowed.has(req.name) || (subagentType !== null && allowed.has(subagentType));
+        return { type: (isAllowed ? 'approve' : null) as 'approve' | null };
+      });
+      const allAutoApproved = decisions.every((d) => d.type === 'approve');
+      return {
+        allAutoApproved,
+        decisions: decisions.map((d) => ({ type: d.type ?? 'approve' })),
+      };
+    },
+    [alwaysAllowedTools],
+  );
+
+  /**
+   * Resume a paused LangGraph run with an array of HITL decisions.
+   * Sends resume=true + decisions to the BFF which forwards as
+   * Command(resume={"decisions": [...]}) to Aegra.
+   */
+  const resumeWithDecisions = useCallback(
+    async (decisions: Array<{ type: 'approve' | 'reject'; message?: string }>) => {
+      const manager = managerRef.current;
+      if (!manager || !threadId) return;
+
+      const savedInterrupt = pendingInterruptRef.current;
+      dispatch(updateStreamingState({ chatId: threadId, state: { pendingInterrupt: null } }));
+
+      const token = typeof window.USER_DATA.accessToken === 'string' ? window.USER_DATA.accessToken : undefined;
+      const userId =
+        typeof window.USER_DATA.preferred_username === 'string'
+          ? window.USER_DATA.preferred_username
+          : '';
+      const apiUrl = typeof window.APP_DATA?.apiUrl === 'string' ? window.APP_DATA.apiUrl : '';
+
+      dispatch(
+        updateStreamingState({
+          chatId: threadId,
+          state: { currentRunId: `run-${Date.now()}`, error: null, taskSteps: [] },
+        }),
+      );
+
+      const resumeRequest = {
+        message: '',
+        threadId,
+        userId,
+        apiUrl,
+        token,
+        memories: memories.map((m) => m.content),
+        rules: activeRules.map((r) => r.content),
+        resume: true,
+        resumeDecisions: decisions,
+      };
+
+      let resumeStreamHadInterrupt = false;
+
+      const callbacks: StreamCallback = {
+        onToken(content) {
+          lastTokenTimeRef.current = Date.now();
+          if (!isStreamingTokensRef.current) {
+            const message: AIMessage = {
+              type: 'ai',
+              content,
+              tool_calls: [],
+              id: `${Date.now()}-${Math.random().toString(36).slice(2)}`,
+            };
+            dispatch(appendMessageToChat({ chatId: threadId, message }));
+            isStreamingTokensRef.current = true;
+            return;
+          }
+          dispatch(updateLastMessageInChat({ chatId: threadId, content }));
+        },
+        onDraftDiscard() {
+          if (isStreamingTokensRef.current) {
+            dispatch(removeLastMessageFromChat({ chatId: threadId }));
+            isStreamingTokensRef.current = false;
+          }
+        },
+        onMessage(m) {
+          isStreamingTokensRef.current = false;
+          if (m.type === 'human') return;
+          if (m.type === 'ai' && Array.isArray(m.tool_calls) && m.tool_calls.length > 0) {
+            dispatch(appendMessageToChat({ chatId: threadId, message: m }));
+            return;
+          }
+          if (m.type === 'tool') {
+            dispatch(mergeToolResult({ chatId: threadId, toolCallId: m.tool_call_id, content: m.content }));
+            dispatch(updateStreamingState({ chatId: threadId, state: { activeSubAgent: null } }));
+          }
+        },
+        onInterrupt(interrupt) {
+          resumeStreamHadInterrupt = true;
+          dispatch(updateStreamingState({ chatId: threadId, state: { pendingInterrupt: enrichInterrupt(interrupt) } }));
+        },
+        onError(error) {
+          dispatch(
+            updateStreamingState({
+              chatId: threadId,
+              state: {
+                error: error.message,
+                isLoading: false,
+                isConnected: false,
+                pendingInterrupt: savedInterrupt,
+              },
+            }),
+          );
+        },
+        onStatusChange(status) {
+          const partial = nextStreamingPartialForStatus(status);
+          if (partial) dispatch(updateStreamingState({ chatId: threadId, state: partial }));
+        },
+        onDone() {
+          if (!resumeStreamHadInterrupt) {
+            dispatch(resolveAllPendingToolCalls({ chatId: threadId }));
+          }
+        },
+        onMcpStatus(evt) {
+          setMcpEvents((prev) => [...prev, evt]);
+        },
+        onMetadata(data) {
+          setTraceId(data.trace_id);
+        },
+      };
+
+      await manager.stream(resumeRequest, callbacks);
+    },
+    [dispatch, threadId, memories, activeRules],
+  );
+
+  const resumeInterrupt = useCallback(
+    async (response: string) => {
+      const manager = managerRef.current;
+      if (!manager || !threadId) return;
+
+      dispatch(
+        updateStreamingState({
+          chatId: threadId,
+          state: { pendingInterrupt: null, isLoading: true, error: null },
+        }),
+      );
+
+      const token = typeof window.USER_DATA.accessToken === 'string' ? window.USER_DATA.accessToken : undefined;
+      const userId =
+        typeof window.USER_DATA.preferred_username === 'string'
+          ? window.USER_DATA.preferred_username
+          : '';
+      const apiUrl = typeof window.APP_DATA?.apiUrl === 'string' ? window.APP_DATA.apiUrl : '';
+
+      const streamRequest = {
+        message: response,
+        threadId,
+        userId,
+        apiUrl,
+        token,
+        resume: true,
+        memories: memories.map((m) => m.content),
+        rules: activeRules.map((r) => r.content),
+      };
+
+      let resumeStreamHadInterrupt = false;
+
+      await new Promise<void>((resolve) => {
+        const callbacks: StreamCallback = {
+          onToken(content) {
+            lastTokenTimeRef.current = Date.now();
+            if (!isStreamingTokensRef.current) {
+              const message: AIMessage = {
+                type: 'ai',
+                content,
+                tool_calls: [],
+                id: `${Date.now()}-${Math.random().toString(36).slice(2)}`,
+              };
+              dispatch(appendMessageToChat({ chatId: threadId, message }));
+              isStreamingTokensRef.current = true;
+              return;
+            }
+            dispatch(updateLastMessageInChat({ chatId: threadId, content }));
+          },
+          onDraftDiscard() {
+            if (isStreamingTokensRef.current) {
+              dispatch(removeLastMessageFromChat({ chatId: threadId }));
+              isStreamingTokensRef.current = false;
+            }
+          },
+          onMessage(m) {
+            isStreamingTokensRef.current = false;
+            if (m.type === 'human') return;
+
+            if (m.type === 'tool') {
+              dispatch(
+                mergeToolResult({
+                  chatId: threadId,
+                  toolCallId: m.tool_call_id,
+                  content: m.content,
+                }),
+              );
+              return;
+            }
+
+            dispatch(appendMessageToChat({ chatId: threadId, message: m }));
+          },
+          onInterrupt(interrupt) {
+            resumeStreamHadInterrupt = true;
+            dispatch(
+              updateStreamingState({
+                chatId: threadId,
+                state: { pendingInterrupt: enrichInterrupt(interrupt) },
+              }),
+            );
+          },
+          onError(error) {
+            dispatch(
+              updateStreamingState({
+                chatId: threadId,
+                state: { error: error.message, isLoading: false, isConnected: false },
+              }),
+            );
+          },
+          onStatusChange(status) {
+            const partial = nextStreamingPartialForStatus(status);
+            if (partial) {
+              dispatch(updateStreamingState({ chatId: threadId, state: partial }));
+            }
+          },
+          onDone() {
+            if (!resumeStreamHadInterrupt) {
+              dispatch(resolveAllPendingToolCalls({ chatId: threadId }));
+            }
+            resolve();
+          },
+        };
+        void manager.stream(streamRequest, callbacks);
+      });
+    },
+    [dispatch, threadId, memories, activeRules],
+  );
+
+  const stop = useCallback(() => {
+    userCancelledRef.current = true;
+    managerRef.current?.cancel();
+    dispatch(
+      updateStreamingState({
+        chatId: threadId,
+        state: {
+          isLoading: false,
+          isConnected: false,
+          isThinking: false,
+          isReconnecting: false,
+          reconnectAttempt: 0,
+          streamDroppedMidResponse: false,
+        },
+      }),
+    );
+  }, [dispatch, threadId]);
+
+  return {
+    messages,
+    streamEvents,
+    isLoading: streamingState.isLoading,
+    pendingInterrupt: streamingState.pendingInterrupt,
+    taskSteps: streamingState.taskSteps,
+    submit,
+    resumeWithDecisions,
+    checkAndAutoApprove,
+    resumeInterrupt,
+    stop,
+    setMessages,
+    retryCount,
+    isStreamStale,
+    wasInterrupted,
+    mcpEvents,
+    traceId,
+    streamStartTime: lastStreamTiming?.streamStartTime ?? null,
+    firstTokenTime: lastStreamTiming?.firstTokenTime ?? null,
+    streamEndTime: lastStreamTiming?.streamEndTime ?? null,
+    timeToFirstToken:
+      lastStreamTiming?.timeToFirstTokenMs != null
+        ? lastStreamTiming.timeToFirstTokenMs
+        : null,
+    totalDuration:
+      lastStreamTiming?.totalDurationMs != null ? lastStreamTiming.totalDurationMs : null,
+  };
+}
diff --git a/src/frontend/hooks/useThemeSync.ts b/src/frontend/hooks/useThemeSync.ts
new file mode 100644
index 00000000..c5f46279
--- /dev/null
+++ b/src/frontend/hooks/useThemeSync.ts
@@ -0,0 +1,21 @@
+import { useEffect } from 'react';
+import { useAppSelector } from '../redux/hooks';
+import { selectTheme } from '../redux/slices/userSettings';
+
+/**
+ * Syncs the Redux theme state to DOM classes on <html>.
+ * Applies both Tailwind's `.dark` and PatternFly's `.pf-v6-theme-dark`.
+ */
+export function useThemeSync(): void {
+  const theme = useAppSelector(selectTheme);
+
+  useEffect(() => {
+    const html = document.documentElement;
+
+    if (theme === 'dark') {
+      html.classList.add('dark', 'pf-v6-theme-dark');
+    } else {
+      html.classList.remove('dark', 'pf-v6-theme-dark');
+    }
+  }, [theme]);
+}
diff --git a/src/frontend/lib/app-paths.ts b/src/frontend/lib/app-paths.ts
new file mode 100644
index 00000000..b70f34e4
--- /dev/null
+++ b/src/frontend/lib/app-paths.ts
@@ -0,0 +1,36 @@
+function normalizeBasePath(value: string | undefined): string {
+  const trimmed = (value || '').trim();
+  if (!trimmed || trimmed === '/') return '/';
+  const normalized = trimmed.startsWith('/') ? trimmed : `/${trimmed}`;
+  return normalized.replace(/\/+$/, '') || '/';
+}
+
+function normalizeSuffix(path: string): string {
+  if (!path || path === '/') return '';
+  return path.startsWith('/') ? path : `/${path}`;
+}
+
+export function getAppBasePath(): string {
+  return normalizeBasePath(globalThis.window?.APP_DATA?.basePath);
+}
+
+export function buildAppPath(path: string): string {
+  const basePath = getAppBasePath();
+  const suffix = normalizeSuffix(path);
+  if (basePath === '/') {
+    return suffix || '/';
+  }
+  return `${basePath}${suffix}` || basePath;
+}
+
+export function getAgentApiBaseUrl(): string {
+  const apiUrl = globalThis.window?.APP_DATA?.apiUrl;
+  if (typeof apiUrl === 'string' && apiUrl.trim() !== '') {
+    return apiUrl.replace(/\/+$/, '');
+  }
+  return buildAppPath('/api/proxy/agent');
+}
+
+export function buildAgentApiUrl(path: string): string {
+  return `${getAgentApiBaseUrl()}${normalizeSuffix(path)}`;
+}
diff --git a/src/frontend/lib/streaming/SSEProcessor.test.ts b/src/frontend/lib/streaming/SSEProcessor.test.ts
new file mode 100644
index 00000000..c8b7fd6e
--- /dev/null
+++ b/src/frontend/lib/streaming/SSEProcessor.test.ts
@@ -0,0 +1,221 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { SSEProcessor } from './SSEProcessor';
+
+function makeData(payload: unknown): string {
+  return `data: ${JSON.stringify(payload)}\n\n`;
+}
+
+describe('SSEProcessor', () => {
+  let proc: SSEProcessor;
+
+  beforeEach(() => {
+    proc = new SSEProcessor();
+  });
+
+  // ── Token chunk ──────────────────────────────────────────────────────────
+  it('parses a token chunk', () => {
+    const events = proc.feed(makeData({ type: 'token', content: 'Hello', chunk_id: 0 }));
+    expect(events).toHaveLength(1);
+    expect(events[0]).toMatchObject({ kind: 'chunk', data: { type: 'token', content: 'Hello', chunk_id: 0 } });
+  });
+
+  // ── Interrupt chunk (HITLInterruptValue object) ──────────────────────────
+  it('parses an interrupt chunk with object value', () => {
+    const value = {
+      action_requests: [{ name: 'create_pr', args: {} }],
+      review_configs: [{ action_name: 'create_pr', allowed_decisions: ['approve', 'reject'] }],
+    };
+    const events = proc.feed(
+      makeData({ type: 'interrupt', content: { value, resumable: true }, chunk_id: 1 }),
+    );
+    expect(events).toHaveLength(1);
+    const ev = events[0];
+    // Explicit kind assertion first — guards below won't silently pass on wrong shape
+    expect(ev.kind).toBe('chunk');
+    if (ev.kind === 'chunk') {
+      expect(ev.data.type).toBe('interrupt');
+      if (ev.data.type === 'interrupt') {
+        expect(ev.data.content.resumable).toBe(true);
+        expect(ev.data.content.value).toMatchObject(value);
+      }
+    }
+  });
+
+  // ── Interrupt chunk (resumable: false) ───────────────────────────────────
+  it('preserves resumable: false on an interrupt chunk', () => {
+    const events = proc.feed(
+      makeData({ type: 'interrupt', content: { value: 'Confirm?', resumable: false }, chunk_id: 3 }),
+    );
+    expect(events).toHaveLength(1);
+    const ev = events[0];
+    expect(ev.kind).toBe('chunk');
+    if (ev.kind === 'chunk') {
+      expect(ev.data.type).toBe('interrupt');
+      if (ev.data.type === 'interrupt') {
+        expect(ev.data.content.resumable).toBe(false);
+      }
+    }
+  });
+
+  // ── Interrupt chunk (plain string value preserved) ───────────────────────
+  it('preserves a plain-text (non-JSON) interrupt value as a string', () => {
+    const events = proc.feed(
+      makeData({
+        type: 'interrupt',
+        content: { value: 'Do you approve this action?', resumable: true },
+        chunk_id: 99,
+      }),
+    );
+    expect(events).toHaveLength(1);
+    const ev = events[0];
+    // Explicit kind assertion first — guard below won't silently pass on wrong shape
+    expect(ev.kind).toBe('chunk');
+    if (ev.kind === 'chunk') {
+      expect(ev.data.type).toBe('interrupt');
+      if (ev.data.type === 'interrupt') {
+        expect(ev.data.content.value).toBe('Do you approve this action?');
+      }
+    }
+  });
+
+  // ── Interrupt chunk (JSON string value unwrapped) ─────────────────────────
+  it('unwraps a JSON string interrupt value into an object', () => {
+    const rawValue = { action_requests: [], review_configs: [] };
+    const events = proc.feed(
+      makeData({
+        type: 'interrupt',
+        content: { value: JSON.stringify(rawValue), resumable: true },
+        chunk_id: 2,
+      }),
+    );
+    expect(events).toHaveLength(1);
+    const ev = events[0];
+    // Explicit kind assertion first — guard below won't silently pass on wrong shape
+    expect(ev.kind).toBe('chunk');
+    if (ev.kind === 'chunk') {
+      expect(ev.data.type).toBe('interrupt');
+      if (ev.data.type === 'interrupt') {
+        expect(ev.data.content.value).toMatchObject(rawValue);
+      }
+    }
+  });
+
+  // ── Interrupt chunk (numeric value → fallback empty object) ───────────────
+  it('falls back to {} when the interrupt value is neither an object nor a string', () => {
+    const events = proc.feed(
+      makeData({ type: 'interrupt', content: { value: 42, resumable: true }, chunk_id: 5 }),
+    );
+    expect(events).toHaveLength(1);
+    const ev = events[0];
+    expect(ev.kind).toBe('chunk');
+    if (ev.kind === 'chunk') {
+      expect(ev.data.type).toBe('interrupt');
+      if (ev.data.type === 'interrupt') {
+        expect(ev.data.content.value).toEqual({});
+      }
+    }
+  });
+
+  // ── Message chunk ─────────────────────────────────────────────────────────
+  it('parses a message chunk', () => {
+    const msg = { type: 'ai', content: 'Done', tool_calls: [], id: 'msg-1' };
+    const events = proc.feed(makeData({ type: 'message', content: msg, chunk_id: 3 }));
+    expect(events).toHaveLength(1);
+    expect(events[0]).toMatchObject({ kind: 'chunk', data: { type: 'message' } });
+  });
+
+  // ── mcp_status via event: line ────────────────────────────────────────────
+  it('parses an mcp_status event from the event: field', () => {
+    const raw = `event: mcp_status\ndata: ${JSON.stringify({ tool: 'github', status: 'running' })}\n\n`;
+    const events = proc.feed(raw);
+    expect(events).toHaveLength(1);
+    expect(events[0]).toMatchObject({ kind: 'mcp_status', data: { tool: 'github', status: 'running' } });
+  });
+
+  // ── mcp_status via type field in data ─────────────────────────────────────
+  it('parses an mcp_status event from the type field in data', () => {
+    const events = proc.feed(makeData({ type: 'mcp_status', tool: 'github', status: 'done' }));
+    expect(events).toHaveLength(1);
+    expect(events[0]).toMatchObject({ kind: 'mcp_status', data: { tool: 'github', status: 'done' } });
+  });
+
+  // ── Metadata chunk ───────────────────────────────────────────────────────
+  it('parses a metadata chunk', () => {
+    const events = proc.feed(
+      makeData({ type: 'metadata', content: { run_id: 'r1', trace_id: 't1', thread_id: 'th1' } }),
+    );
+    expect(events).toHaveLength(1);
+    expect(events[0]).toMatchObject({
+      kind: 'metadata',
+      data: { run_id: 'r1', trace_id: 't1', thread_id: 'th1' },
+    });
+  });
+
+  // ── Metadata missing fields → not parsed as metadata ─────────────────────
+  it('does not parse metadata when required fields are missing', () => {
+    const events = proc.feed(
+      makeData({ type: 'metadata', content: { run_id: 'r1' } }),
+    );
+    // No run_id+trace_id+thread_id → falls through to error (invalid message shape)
+    expect(events).toHaveLength(1);
+    expect(events[0].kind).toBe('error');
+  });
+
+  // ── [DONE] sentinel ───────────────────────────────────────────────────────
+  it('emits a done event for [DONE]', () => {
+    const events = proc.feed('data: [DONE]\n\n');
+    expect(events).toHaveLength(1);
+    expect(events[0]).toEqual({ kind: 'done' });
+  });
+
+  // ── Invalid JSON → error event ────────────────────────────────────────────
+  it('emits an error event for invalid JSON', () => {
+    const events = proc.feed('data: {this is not json}\n\n');
+    expect(events).toHaveLength(1);
+    expect(events[0]).toMatchObject({ kind: 'error', message: expect.stringContaining('Malformed SSE chunk') });
+  });
+
+  // ── Unknown shape → error event ───────────────────────────────────────────
+  it('emits an error event for a valid JSON object with unknown shape', () => {
+    const events = proc.feed(makeData({ type: 'unknown_type', foo: 'bar' }));
+    expect(events).toHaveLength(1);
+    expect(events[0].kind).toBe('error');
+  });
+
+  // ── Multi-chunk buffer (split across two feed() calls) ──────────────────
+  it('buffers incomplete SSE data across feed() calls', () => {
+    const fullEvent = `data: ${JSON.stringify({ type: 'token', content: 'hi', chunk_id: 0 })}`;
+    // Feed first half without the trailing \n\n
+    const events1 = proc.feed(fullEvent);
+    expect(events1).toHaveLength(0);
+    // Feed the closing delimiter
+    const events2 = proc.feed('\n\n');
+    expect(events2).toHaveLength(1);
+    expect(events2[0]).toMatchObject({ kind: 'chunk', data: { type: 'token', content: 'hi' } });
+  });
+
+  // ── Multiple events in one feed() call ───────────────────────────────────
+  it('returns multiple events when multiple complete SSE blocks arrive', () => {
+    const block1 = makeData({ type: 'token', content: 'a', chunk_id: 0 });
+    const block2 = makeData({ type: 'token', content: 'b', chunk_id: 1 });
+    const events = proc.feed(block1 + block2);
+    expect(events).toHaveLength(2);
+  });
+
+  // ── reset() clears mid-buffer state ──────────────────────────────────────
+  it('reset() discards buffered incomplete data', () => {
+    const partial = `data: ${JSON.stringify({ type: 'token', content: 'hi', chunk_id: 0 })}`;
+    proc.feed(partial); // no \n\n — stays in buffer
+    proc.reset();
+    const events = proc.feed('\n\n'); // delimiter without prior data
+    expect(events).toHaveLength(0);
+  });
+
+  // ── Comment lines ignored ─────────────────────────────────────────────────
+  it('ignores SSE comment lines (: prefix)', () => {
+    const raw = `: keep-alive\ndata: ${JSON.stringify({ type: 'token', content: 'x', chunk_id: 0 })}\n\n`;
+    const events = proc.feed(raw);
+    expect(events).toHaveLength(1);
+    expect(events[0].kind).toBe('chunk');
+  });
+});
diff --git a/src/frontend/lib/streaming/SSEProcessor.ts b/src/frontend/lib/streaming/SSEProcessor.ts
new file mode 100644
index 00000000..4505a64a
--- /dev/null
+++ b/src/frontend/lib/streaming/SSEProcessor.ts
@@ -0,0 +1,204 @@
+import type { Message } from '@langchain/langgraph-sdk';
+import type { HITLInterruptValue } from '@/types/deep-agent';
+
+export type SSEChunk =
+  | { type: 'token'; content: string; chunk_id: number }
+  | { type: 'draft_discard'; chunk_id: number }
+  | { type: 'message'; content: Message; chunk_id: number }
+  | { type: 'interrupt'; content: { value: HITLInterruptValue | string; resumable: boolean }; chunk_id: number };
+
+export type McpStatusData = {
+  tool: string;
+  status: string;
+};
+
+export type SSEMetadataPayload = {
+  run_id: string;
+  trace_id: string;
+  thread_id: string;
+};
+
+export type SSEEvent =
+  | { kind: 'chunk'; data: SSEChunk }
+  | { kind: 'mcp_status'; data: McpStatusData }
+  | { kind: 'metadata'; data: SSEMetadataPayload }
+  | { kind: 'done' }
+  | { kind: 'error'; message: string };
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+/** Parse `data:` payload into an SSEChunk or null if invalid. */
+function parseSSEChunkPayload(parsed: unknown): SSEChunk | null {
+  if (!isRecord(parsed)) return null;
+  const type = parsed.type;
+  if (type === 'draft_discard') {
+    const chunkId = parsed.chunk_id;
+    if (typeof chunkId === 'number' && Number.isFinite(chunkId)) {
+      return { type: 'draft_discard', chunk_id: chunkId };
+    }
+    return null;
+  }
+  if (type !== 'token' && type !== 'message' && type !== 'interrupt') return null;
+  const chunkIdRaw = parsed.chunk_id;
+  if (typeof chunkIdRaw !== 'number' || !Number.isFinite(chunkIdRaw)) {
+    return null;
+  }
+  const contentUnknown = parsed.content;
+
+  if (type === 'token') {
+    if (typeof contentUnknown !== 'string') return null;
+    return { type: 'token', content: contentUnknown, chunk_id: chunkIdRaw };
+  }
+
+  if (type === 'interrupt') {
+    if (!isRecord(contentUnknown)) return null;
+    let rawValue: unknown = contentUnknown.value;
+    if (typeof rawValue === 'string') {
+      try {
+        rawValue = JSON.parse(rawValue);
+      } catch {
+        // non-JSON plain-text interrupt value — preserve as string
+      }
+    }
+    return {
+      type: 'interrupt',
+      content: {
+        value: (isRecord(rawValue) || typeof rawValue === 'string' ? rawValue : {}) as HITLInterruptValue | string,
+        resumable: contentUnknown.resumable === true,
+      },
+      chunk_id: chunkIdRaw,
+    };
+  }
+
+  if (typeof contentUnknown !== 'object' || contentUnknown === null) {
+    return null;
+  }
+
+  return {
+    type: 'message',
+    content: contentUnknown as Message,
+    chunk_id: chunkIdRaw,
+  };
+}
+
+/**
+ * Extract concatenated `data:` field from one SSE event block (between blank lines).
+ */
+function extractDataPayload(block: string): string | null {
+  const lines = block.split('\n');
+  const parts: string[] = [];
+  for (const line of lines) {
+    if (line.startsWith(':')) continue;
+    const trimmedEnd = line.trimEnd();
+    if (trimmedEnd === '') continue;
+    if (!trimmedEnd.startsWith('data:')) continue;
+    const payload = trimmedEnd.slice('data:'.length);
+    parts.push(payload.startsWith(' ') ? payload.slice(1) : payload);
+  }
+  if (parts.length === 0) return null;
+  return parts.join('\n');
+}
+
+/** First `event:` line in an SSE block, if any. */
+function extractEventType(block: string): string | null {
+  for (const line of block.split('\n')) {
+    if (line.startsWith(':')) continue;
+    const trimmed = line.trim();
+    if (trimmed.startsWith('event:')) {
+      return trimmed.slice('event:'.length).trim();
+    }
+  }
+  return null;
+}
+
+function parseMcpStatusPayload(parsed: unknown, eventType: string | null): McpStatusData | null {
+  if (!isRecord(parsed)) return null;
+  const isMcp = eventType === 'mcp_status' || parsed.type === 'mcp_status';
+  if (!isMcp) return null;
+  const tool = typeof parsed.tool === 'string' ? parsed.tool : 'unknown';
+  const status = typeof parsed.status === 'string' ? parsed.status : 'unknown';
+  return { tool, status };
+}
+
+function parseMetadataPayload(parsed: unknown): SSEMetadataPayload | null {
+  if (!isRecord(parsed) || parsed.type !== 'metadata') return null;
+  const content = parsed.content;
+  if (!isRecord(content)) return null;
+  const run_id = typeof content.run_id === 'string' ? content.run_id : '';
+  const trace_id = typeof content.trace_id === 'string' ? content.trace_id : '';
+  const thread_id = typeof content.thread_id === 'string' ? content.thread_id : '';
+  if (!run_id || !trace_id || !thread_id) return null;
+  return { run_id, trace_id, thread_id };
+}
+
+export class SSEProcessor {
+  private buffer = '';
+
+  /**
+   * Feed decoded text from a ReadableStream chunk; returns all complete SSE events parsed so far.
+   */
+  feed(text: string): SSEEvent[] {
+    this.buffer += text;
+    const events: SSEEvent[] = [];
+    const segments = this.buffer.split('\n\n');
+    this.buffer = segments.pop() ?? '';
+
+    for (const segment of segments) {
+      const trimmed = segment.trim();
+      if (trimmed === '') continue;
+
+      const dataPayload = extractDataPayload(trimmed);
+      if (dataPayload === null) continue;
+
+      const normalized = dataPayload.trim();
+      if (normalized === '[DONE]' || normalized === 'DONE') {
+        events.push({ kind: 'done' });
+        continue;
+      }
+
+      const sseEventName = extractEventType(trimmed);
+
+      let parsed: unknown;
+      try {
+        parsed = JSON.parse(normalized) as unknown;
+      } catch {
+        events.push({
+          kind: 'error',
+          message: 'Malformed SSE chunk: invalid JSON',
+        });
+        continue;
+      }
+
+      const mcpStatus = parseMcpStatusPayload(parsed, sseEventName);
+      if (mcpStatus) {
+        events.push({ kind: 'mcp_status', data: mcpStatus });
+        continue;
+      }
+
+      const metadata = parseMetadataPayload(parsed);
+      if (metadata) {
+        events.push({ kind: 'metadata', data: metadata });
+        continue;
+      }
+
+      const chunk = parseSSEChunkPayload(parsed);
+      if (chunk === null) {
+        events.push({
+          kind: 'error',
+          message: 'Malformed SSE chunk: invalid message shape',
+        });
+        continue;
+      }
+
+      events.push({ kind: 'chunk', data: chunk });
+    }
+
+    return events;
+  }
+
+  reset(): void {
+    this.buffer = '';
+  }
+}
diff --git a/src/frontend/lib/streaming/StreamingManager.test.ts b/src/frontend/lib/streaming/StreamingManager.test.ts
new file mode 100644
index 00000000..9459fbc7
--- /dev/null
+++ b/src/frontend/lib/streaming/StreamingManager.test.ts
@@ -0,0 +1,245 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { StreamingManager } from './StreamingManager';
+import type { StreamCallback } from './StreamingManager';
+
+// ── Helpers ──────────────────────────────────────────────────────────────────
+
+function makeTokenSSE(content: string, chunkId: number): string {
+  return `data: ${JSON.stringify({ type: 'token', content, chunk_id: chunkId })}\n\n`;
+}
+
+function makeInterruptSSE(value: object | string, chunkId: number): string {
+  return `data: ${JSON.stringify({
+    type: 'interrupt',
+    content: { value, resumable: true },
+    chunk_id: chunkId,
+  })}\n\n`;
+}
+
+function makeStreamResponse(sseBody: string): Response {
+  const encoder = new TextEncoder();
+  const stream = new ReadableStream<Uint8Array>({
+    start(controller) {
+      controller.enqueue(encoder.encode(sseBody));
+      controller.close();
+    },
+  });
+  return new Response(stream, {
+    status: 200,
+    headers: { 'Content-Type': 'text/event-stream' },
+  });
+}
+
+function makeCallbacks(overrides: Partial<StreamCallback> = {}): StreamCallback {
+  return {
+    onToken: vi.fn(),
+    onMessage: vi.fn(),
+    onInterrupt: vi.fn(),
+    onError: vi.fn(),
+    onDone: vi.fn(),
+    onStatusChange: vi.fn(),
+    onMcpStatus: vi.fn(),
+    onMetadata: vi.fn(),
+    ...overrides,
+  };
+}
+
+const BASE_REQUEST = {
+  message: 'hello',
+  threadId: 'thread-1',
+  userId: 'user-1',
+  apiUrl: 'http://localhost:8080/api/proxy/agent',
+};
+
+// ── Tests ────────────────────────────────────────────────────────────────────
+
+describe('StreamingManager', () => {
+  beforeEach(() => {
+    vi.stubGlobal('fetch', vi.fn());
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  // ── Happy path: token + done ───────────────────────────────────────────────
+  it('calls onToken then onDone for a normal stream', async () => {
+    const sseBody = makeTokenSSE('Hello', 0) + 'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const callbacks = makeCallbacks();
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onToken).toHaveBeenCalledWith('Hello');
+    expect(callbacks.onDone).toHaveBeenCalledOnce();
+    expect(callbacks.onError).not.toHaveBeenCalled();
+  });
+
+  // ── Status transitions: connecting → streaming → idle ────────────────────
+  it('emits connecting → streaming → idle status changes', async () => {
+    const sseBody = makeTokenSSE('Hi', 0) + 'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const statuses: string[] = [];
+    const callbacks = makeCallbacks({ onStatusChange: (s) => statuses.push(s) });
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(statuses).toContain('connecting');
+    expect(statuses).toContain('streaming');
+    expect(statuses).toContain('idle');
+  });
+
+  // ── Interrupt chunk → onInterrupt called ─────────────────────────────────
+  it('calls onInterrupt when an interrupt chunk arrives', async () => {
+    const interruptValue = {
+      action_requests: [{ name: 'create_pr', args: {} }],
+      review_configs: [{ action_name: 'create_pr', allowed_decisions: ['approve', 'reject'] }],
+    };
+    const sseBody = makeInterruptSSE(interruptValue, 0) + 'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const callbacks = makeCallbacks();
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onInterrupt).toHaveBeenCalledOnce();
+    const [payload] = vi.mocked(callbacks.onInterrupt).mock.calls[0];
+    expect(payload.resumable).toBe(true);
+    expect(payload.value).toMatchObject(interruptValue);
+  });
+
+  // ── Duplicate chunk_id deduplication ─────────────────────────────────────
+  it('ignores a chunk with a duplicate chunk_id', async () => {
+    const sseBody =
+      makeTokenSSE('First', 5) +
+      makeTokenSSE('Duplicate', 5) + // same chunk_id
+      'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const callbacks = makeCallbacks();
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onToken).toHaveBeenCalledTimes(1);
+    expect(callbacks.onToken).toHaveBeenCalledWith('First');
+  });
+
+  // ── HTTP error → onError + status 'error' ────────────────────────────────
+  it('calls onError and emits error status for a non-2xx response', async () => {
+    vi.mocked(fetch).mockResolvedValueOnce(
+      new Response('Internal Server Error', { status: 500 }),
+    );
+
+    const statuses: string[] = [];
+    const callbacks = makeCallbacks({ onStatusChange: (s) => statuses.push(s) });
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onError).toHaveBeenCalledOnce();
+    expect(statuses).toContain('error');
+  });
+
+  // ── cancel() → AbortError → status 'cancelled' ───────────────────────────
+  it('emits cancelled status when cancel() is called during stream', async () => {
+    vi.mocked(fetch).mockImplementationOnce(
+      (_url, opts) =>
+        new Promise<Response>((_resolve, reject) => {
+          opts?.signal?.addEventListener('abort', () => {
+            const err = new Error('Aborted');
+            err.name = 'AbortError';
+            reject(err);
+          });
+        }),
+    );
+
+    const statuses: string[] = [];
+    const callbacks = makeCallbacks({ onStatusChange: (s) => statuses.push(s) });
+    const manager = new StreamingManager();
+
+    const streamPromise = manager.stream(BASE_REQUEST, callbacks);
+    manager.cancel();
+    await streamPromise;
+
+    expect(statuses).toContain('cancelled');
+    expect(callbacks.onError).not.toHaveBeenCalled();
+  });
+
+  // ── getStatus() reflects current state ───────────────────────────────────
+  it('getStatus() returns idle before and after a completed stream', async () => {
+    const sseBody = makeTokenSSE('Hi', 0) + 'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const manager = new StreamingManager();
+    expect(manager.getStatus()).toBe('idle');
+    await manager.stream(BASE_REQUEST, makeCallbacks());
+    expect(manager.getStatus()).toBe('idle');
+  });
+
+  // ── Multiple tokens in one stream ────────────────────────────────────────
+  it('calls onToken for each token chunk in the stream', async () => {
+    const sseBody =
+      makeTokenSSE('Hello', 0) +
+      makeTokenSSE(' world', 1) +
+      'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const callbacks = makeCallbacks();
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onToken).toHaveBeenCalledTimes(2);
+    expect(vi.mocked(callbacks.onToken).mock.calls[0][0]).toBe('Hello');
+    expect(vi.mocked(callbacks.onToken).mock.calls[1][0]).toBe(' world');
+  });
+
+  // ── No reader from response body ─────────────────────────────────────────
+  it('calls onError when response body is null', async () => {
+    vi.mocked(fetch).mockResolvedValueOnce(
+      new Response(null, { status: 200 }),
+    );
+
+    const callbacks = makeCallbacks();
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onError).toHaveBeenCalledOnce();
+  });
+
+  // ── Plain-string interrupt propagated to onInterrupt ─────────────────────
+  it('propagates a plain-string interrupt value to onInterrupt', async () => {
+    const sseBody = makeInterruptSSE('Approve this action?', 0) + 'data: [DONE]\n\n';
+    vi.mocked(fetch).mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const callbacks = makeCallbacks();
+    const manager = new StreamingManager();
+    await manager.stream(BASE_REQUEST, callbacks);
+
+    expect(callbacks.onInterrupt).toHaveBeenCalledOnce();
+    const [payload] = vi.mocked(callbacks.onInterrupt).mock.calls[0];
+    expect(payload.resumable).toBe(true);
+    expect(payload.value).toBe('Approve this action?');
+  });
+
+  // ── cancel() between streams resets state ────────────────────────────────
+  // Note: tests that cancel() on an idle manager resets the chunk ID set,
+  // allowing the same IDs to be reused in a subsequent stream.
+  it('cancel() resets processedChunkIds so next stream can use the same ids', async () => {
+    const sseBody = makeTokenSSE('Re-used', 0) + 'data: [DONE]\n\n';
+    vi.mocked(fetch)
+      .mockResolvedValueOnce(makeStreamResponse(sseBody))
+      .mockResolvedValueOnce(makeStreamResponse(sseBody));
+
+    const manager = new StreamingManager();
+    const cb1 = makeCallbacks();
+    await manager.stream(BASE_REQUEST, cb1);
+    manager.cancel();
+
+    const cb2 = makeCallbacks();
+    await manager.stream(BASE_REQUEST, cb2);
+
+    // chunk_id 0 was used in first stream; after cancel+reset it should work again
+    expect(cb2.onToken).toHaveBeenCalledWith('Re-used');
+  });
+});
diff --git a/src/frontend/lib/streaming/StreamingManager.ts b/src/frontend/lib/streaming/StreamingManager.ts
new file mode 100644
index 00000000..1456bc24
--- /dev/null
+++ b/src/frontend/lib/streaming/StreamingManager.ts
@@ -0,0 +1,232 @@
+import type { Message } from '@langchain/langgraph-sdk';
+
+import { parseRetryAfterSeconds, triggerRateLimit } from '@/services/authenticated-fetch';
+import { buildAgentApiUrl } from '../app-paths';
+import type { HITLInterruptValue } from '@/types/deep-agent';
+
+import type { SSEEvent } from './SSEProcessor';
+import { SSEProcessor } from './SSEProcessor';
+
+export interface StreamRequest {
+  message: string;
+  threadId: string;
+  userId: string;
+  apiUrl: string;
+  token?: string;
+  memories?: string[];
+  rules?: string[];
+  resume?: boolean;
+  resumeDecisions?: Array<{ type: 'approve' | 'reject' | 'edit'; message?: string }>;
+}
+
+export type StreamStatus = 'idle' | 'connecting' | 'streaming' | 'error' | 'cancelled';
+
+export interface InterruptPayload {
+  value: HITLInterruptValue | string;
+  resumable: boolean;
+}
+
+export type McpStreamStatusEvent = {
+  tool: string;
+  status: string;
+  timestamp: number;
+};
+
+export type StreamMetadataPayload = {
+  run_id: string;
+  trace_id: string;
+  thread_id: string;
+};
+
+export type StreamCallback = {
+  onToken: (content: string) => void;
+  onDraftDiscard?: () => void;
+  onMessage: (message: Message) => void;
+  onInterrupt: (interrupt: InterruptPayload) => void;
+  onError: (error: Error) => void;
+  onStatusChange: (status: StreamStatus) => void;
+  onDone: () => void;
+  onMcpStatus?: (event: McpStreamStatusEvent) => void;
+  onMetadata?: (data: StreamMetadataPayload) => void;
+};
+
+export class StreamingManager {
+  private abortController: AbortController | null = null;
+
+  private processor = new SSEProcessor();
+
+  private status: StreamStatus = 'idle';
+
+  private processedChunkIds = new Set<number>();
+
+  private setStatus(next: StreamStatus): void {
+    this.status = next;
+  }
+
+  private handleEvents(events: SSEEvent[], callbacks: StreamCallback): void {
+    for (const event of events) {
+      switch (event.kind) {
+        case 'done':
+          break;
+        case 'error':
+          callbacks.onError(new Error(event.message));
+          break;
+        case 'mcp_status': {
+          callbacks.onMcpStatus?.({
+            tool: event.data.tool,
+            status: event.data.status,
+            timestamp: Date.now(),
+          });
+          break;
+        }
+        case 'metadata': {
+          callbacks.onMetadata?.(event.data);
+          break;
+        }
+        case 'chunk': {
+          const { chunk_id: chunkId } = event.data;
+          if (this.processedChunkIds.has(chunkId)) {
+            break;
+          }
+          this.processedChunkIds.add(chunkId);
+
+          if (event.data.type === 'token') {
+            callbacks.onToken(event.data.content);
+          } else if (event.data.type === 'draft_discard') {
+            callbacks.onDraftDiscard?.();
+          } else if (event.data.type === 'interrupt') {
+            callbacks.onInterrupt(event.data.content);
+          } else {
+            callbacks.onMessage(event.data.content);
+          }
+          break;
+        }
+      }
+    }
+  }
+
+  async stream(request: StreamRequest, callbacks: StreamCallback): Promise<void> {
+    this.cancel();
+    this.processor.reset();
+    this.processedChunkIds.clear();
+
+    this.abortController = new AbortController();
+    const signal = this.abortController.signal;
+
+    this.setStatus('connecting');
+    callbacks.onStatusChange('connecting');
+
+    const streamUrl = request.apiUrl
+      ? `${request.apiUrl}/v1/stream`
+      : buildAgentApiUrl('/v1/stream');
+
+    const headers: Record<string, string> = {
+      'Content-Type': 'application/json',
+    };
+    if (request.token) {
+      headers['X-Token'] = request.token;
+    }
+
+    let reader: ReadableStreamDefaultReader<Uint8Array> | undefined;
+
+    try {
+      const body: Record<string, unknown> = {
+        message: request.resume
+          ? { decisions: request.resumeDecisions ?? [] }
+          : request.message,
+        thread_id: request.threadId || 'default-thread',
+        session_id: request.threadId || 'default-session',
+        user_id: request.userId,
+        stream_tokens: true,
+      };
+      if (request.resume) body.resume = true;
+      if (request.memories?.length) body.memories = request.memories;
+      if (request.rules?.length) body.rules = request.rules;
+
+      const response = await fetch(streamUrl, {
+        method: 'POST',
+        headers,
+        credentials: 'include',
+        body: JSON.stringify(body),
+        signal,
+      });
+
+      if (!response.ok) {
+        if (response.status === 429) {
+          const retrySeconds = parseRetryAfterSeconds(response.headers.get('Retry-After'));
+          triggerRateLimit(retrySeconds);
+        }
+        throw new Error(`HTTP error! status: ${response.status}`);
+      }
+
+      reader = response.body?.getReader();
+      if (!reader) {
+        throw new Error('Failed to get reader from response body');
+      }
+
+      this.setStatus('streaming');
+      callbacks.onStatusChange('streaming');
+
+      const decoder = new TextDecoder();
+
+      while (true) {
+        const { done, value } = await reader.read();
+        if (value !== undefined) {
+          const chunkText = decoder.decode(value, { stream: true });
+          this.handleEvents(this.processor.feed(chunkText), callbacks);
+        }
+        if (done) {
+          break;
+        }
+      }
+
+      const flushText = decoder.decode();
+      if (flushText.length > 0) {
+        this.handleEvents(this.processor.feed(flushText), callbacks);
+      }
+
+      this.setStatus('idle');
+      callbacks.onStatusChange('idle');
+      callbacks.onDone();
+    } catch (error: unknown) {
+      let err: Error;
+      if (error instanceof Error) {
+        err = error;
+      } else if (typeof error === 'string') {
+        err = new Error(error);
+      } else {
+        try {
+          err = new Error(JSON.stringify(error));
+        } catch {
+          err = new Error('Unknown stream error');
+        }
+      }
+
+      if (err.name === 'AbortError') {
+        this.setStatus('cancelled');
+        callbacks.onStatusChange('cancelled');
+      } else {
+        this.setStatus('error');
+        callbacks.onStatusChange('error');
+        callbacks.onError(err);
+      }
+    } finally {
+      reader?.releaseLock?.();
+      this.abortController = null;
+    }
+  }
+
+  cancel(): void {
+    if (this.abortController) {
+      this.abortController.abort();
+      this.abortController = null;
+    }
+    this.processor.reset();
+    this.processedChunkIds.clear();
+    this.setStatus('idle');
+  }
+
+  getStatus(): StreamStatus {
+    return this.status;
+  }
+}
diff --git a/src/frontend/lib/toolIcons.ts b/src/frontend/lib/toolIcons.ts
new file mode 100644
index 00000000..b8fdea05
--- /dev/null
+++ b/src/frontend/lib/toolIcons.ts
@@ -0,0 +1,17 @@
+import {
+  FolderOpen,
+  FileText,
+  Terminal,
+  Settings,
+  type LucideIcon,
+} from "lucide-react";
+
+const toolIconMap: Record<string, LucideIcon> = {
+  ls: FolderOpen,
+  read_file: FileText,
+  execute: Terminal,
+};
+
+export function getToolIcon(toolName: string): LucideIcon {
+  return toolIconMap[toolName] ?? Settings;
+}
diff --git a/src/frontend/main.tsx b/src/frontend/main.tsx
index aad96376..eff90a74 100644
--- a/src/frontend/main.tsx
+++ b/src/frontend/main.tsx
@@ -1,10 +1,35 @@
-import { createRoot } from "react-dom/client";
-import { BrowserRouter } from "react-router-dom";
-import "./global.css";
-import App from "./App.tsx";
-
-createRoot(document.getElementById("root")!).render(
-    <BrowserRouter>
-      <App />
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { BrowserRouter } from 'react-router-dom';
+import { Provider } from 'react-redux';
+import { store } from './redux/store';
+import App from './App';
+import { getAppBasePath } from './lib/app-paths';
+
+import '@patternfly/patternfly/patternfly.css';
+import '@patternfly/patternfly/patternfly-addons.css';
+
+import './global.css';
+
+// Parse server-injected data from data attributes (CSP-safe, no inline scripts)
+const rootEl = document.getElementById('root')!;
+try {
+  const userData = rootEl.dataset.user;
+  const appData = rootEl.dataset.app;
+  (window as any).USER_DATA = userData ? JSON.parse(decodeURIComponent(userData)) : {};
+  (window as any).APP_DATA = appData ? JSON.parse(decodeURIComponent(appData)) : {};
+} catch (e) {
+  console.error('Failed to parse injected data:', e);
+  (window as any).USER_DATA = {};
+  (window as any).APP_DATA = {};
+}
+
+createRoot(rootEl).render(
+  <StrictMode>
+    <BrowserRouter basename={getAppBasePath()}>
+      <Provider store={store}>
+        <App />
+      </Provider>
     </BrowserRouter>
+  </StrictMode>
 );
diff --git a/src/frontend/pages/ChatPage.tsx b/src/frontend/pages/ChatPage.tsx
index 65553b51..daabd91a 100644
--- a/src/frontend/pages/ChatPage.tsx
+++ b/src/frontend/pages/ChatPage.tsx
@@ -1,81 +1,209 @@
 import { useState, useRef, useEffect, useCallback, useMemo } from 'react';
-import { useParams } from 'react-router-dom';
-import type { Message } from "@langchain/langgraph-sdk";
+import { useParams, useNavigate, useLocation } from 'react-router-dom';
+import type { Message } from '@langchain/langgraph-sdk';
+import { Button, Spinner } from '@patternfly/react-core';
 
-import { useChat } from '../contexts/ChatContext';
-import { useDataStream } from '../hooks/useDataStream';
+import { useAppSelector, useAppDispatch } from '../redux/hooks';
+import {
+  selectChatById,
+  selectIsLoadingThreads,
+  selectChatsError,
+  selectStreamingState,
+  setMessageFeedback,
+  updateChat,
+  updateStreamingState,
+} from '../redux/slices/chats';
+import { selectDebugMode, addAlwaysAllowedTool, selectAutoApproveAllTools } from '../redux/slices/userSettings';
+import { addToast } from '../redux/slices/toasts';
+import { useStreamingAPI, MAX_RETRIES } from '../hooks/useStreamingAPI';
+import { useRateLimitState } from '../hooks/useRateLimitState';
 import { ChatMessagesView } from '../components/ChatMessagesView';
 import { ChatErrorBoundary } from '../components/ChatErrorBoundary';
-import { Button } from '../components/ui/button';
+import { ReconnectingBanner } from '../components/ReconnectingBanner';
+import { InterruptBanner } from '../components/InterruptBanner';
+import { TaskProgressStepper } from '../components/TaskProgressStepper';
+import { TasksSidebar } from '../components/TasksSidebar';
+import { DebugPanel } from '../components/DebugPanel';
 import { ProcessedEvent } from '../components/ActivityTimeline';
+import { getThreadState } from '../services/agent-rest';
+import { isClientCreatedChat } from '../services/newChatTracker';
+import { getThreadFeedback } from '../services/feedback-api';
+import { useKeyboardShortcuts } from '../hooks/useKeyboardShortcuts';
+import {
+  downloadFile,
+  exportAsJSON,
+  exportAsMarkdown,
+  slugifyExportBase,
+} from '../services/export-chat';
 
 export function ChatPage({ threadId }: { threadId: string }) {
-  const {
-    isLoading: chatsLoading,
-    error,
-    updateChatMessages,
-    updateChatActivities,
-    setError,
-    getChatById
-  } = useChat();
-
-  // Local state
+  const dispatch = useAppDispatch();
+  const navigate = useNavigate();
+  const location = useLocation();
+  const currentChat = useAppSelector((state) => selectChatById(state, threadId));
+  const chatsLoading = useAppSelector(selectIsLoadingThreads);
+  const error = useAppSelector(selectChatsError);
+  const debugMode = useAppSelector(selectDebugMode);
+  const streamingState = useAppSelector((state) => selectStreamingState(state, threadId));
+
   const [processedEventsTimeline, setProcessedEventsTimeline] = useState<ProcessedEvent[]>([]);
   const [historicalActivities, setHistoricalActivities] = useState<Record<string, ProcessedEvent[]>>({});
+  const [hydrating, setHydrating] = useState(false);
 
   const scrollAreaRef = useRef<HTMLDivElement>(null);
+  const chatInputRef = useRef<HTMLTextAreaElement>(null);
   const hasFinalizeEventOccurredRef = useRef(false);
 
-  // Get current chat data directly by threadId
-  const currentChat = useMemo(() => threadId ? getChatById(threadId) : undefined, [threadId, getChatById]);
+  const thread = useStreamingAPI(threadId);
+  const rateLimit = useRateLimitState();
 
-  console.log({ currentChat })
+  const [streamAnnouncement, setStreamAnnouncement] = useState('');
+  const prevIsLoadingForAnnounce = useRef<boolean | null>(null);
 
-  // API integration
-  const thread = useDataStream({
-    apiUrl: window.APP_DATA?.apiUrl || "http://localhost:5002",
-    threadId: threadId || "",
-    onError: (error: Error) => {
-      setError(error.message);
-    },
-  });
+  useEffect(() => {
+    if (chatsLoading || hydrating) return;
+    const t = requestAnimationFrame(() => {
+      chatInputRef.current?.focus();
+    });
+    return () => cancelAnimationFrame(t);
+  }, [threadId, chatsLoading, hydrating]);
 
   useEffect(() => {
-    if (currentChat) {
-      thread.setMessages(currentChat.messages)
+    if (chatsLoading || hydrating) return;
+    const prev = prevIsLoadingForAnnounce.current;
+    prevIsLoadingForAnnounce.current = thread.isLoading;
+    if (prev === null) return;
+    if (thread.isLoading && !prev) {
+      setStreamAnnouncement('Agent is thinking');
+    } else if (!thread.isLoading && prev) {
+      setStreamAnnouncement(streamingState.error ? 'Stream error' : 'Response complete');
     }
-  }, [currentChat?.messages, currentChat?.messages?.length]);
+  }, [thread.isLoading, streamingState.error, chatsLoading, hydrating]);
+
+  const chatId = currentChat?.id;
+  const hasMessages = currentChat && currentChat.messages.length > 0;
 
-  // // Load chat data when threadId changes
-  // useEffect(() => {
-  //   if (currentChat) {
-  //     setHistoricalActivities(currentChat.historicalActivities);
-  //     setProcessedEventsTimeline([]);
-  //   }
-  // }, [currentChat, threadId]);
+  const feedbackUserId = useMemo(() => {
+    if (typeof window === 'undefined') return 'anonymous';
+    const u = window.USER_DATA?.preferred_username;
+    return typeof u === 'string' && u.length > 0 ? u : 'anonymous';
+  }, []);
 
-  // Auto-scroll to bottom when messages change
   useEffect(() => {
-    if (scrollAreaRef.current) {
-      const scrollViewport = scrollAreaRef.current.querySelector(
-        "[data-radix-scroll-area-viewport]"
-      );
-      if (scrollViewport) {
-        scrollViewport.scrollTop = scrollViewport.scrollHeight;
+    if (!chatId || hydrating) return;
+
+    const locState = location.state as Record<string, unknown> | null;
+    if (locState?.initialPrompt != null) return;
+    if (isClientCreatedChat(chatId)) return;
+
+    const hasOnlyHumanMessages = hasMessages && currentChat?.messages.every(m => m.type === 'human');
+    if (hasMessages && !hasOnlyHumanMessages) return;
+
+    let cancelled = false;
+    setHydrating(true);
+
+    const statePromise = getThreadState(chatId);
+    const feedbackPromise = getThreadFeedback(chatId, feedbackUserId);
+
+    Promise.all([statePromise, feedbackPromise])
+      .then(([msgs, feedbackMap]) => {
+        if (cancelled) return;
+        if (msgs.length > 0) {
+          dispatch(updateChat({
+            id: chatId,
+            updates: {
+              messages: msgs,
+              title: (() => {
+                const first = msgs.find(m => m.type === 'human');
+                const content = first ? String(first.content) : '';
+                return content.length > 40 ? content.substring(0, 40) + '...' : content || 'Chat';
+              })(),
+            },
+          }));
+          thread.setMessages(msgs.map(m => JSON.parse(JSON.stringify(m))));
+        }
+        if (Object.keys(feedbackMap).length > 0) {
+          for (const [msgId, fb] of Object.entries(feedbackMap)) {
+            dispatch(setMessageFeedback({ chatId, messageId: msgId, feedback: fb }));
+          }
+        }
+        setHydrating(false);
+      })
+      .catch(() => {
+        if (!cancelled) setHydrating(false);
+      });
+
+    return () => { cancelled = true; setHydrating(false); };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [chatId, feedbackUserId]);
+
+  useEffect(() => {
+    if (!chatId || isClientCreatedChat(chatId)) return;
+    let cancelled = false;
+    getThreadFeedback(chatId, feedbackUserId).then((feedbackMap) => {
+      if (cancelled) return;
+      for (const [msgId, fb] of Object.entries(feedbackMap)) {
+        dispatch(setMessageFeedback({ chatId, messageId: msgId, feedback: fb }));
       }
+    }).catch(() => {});
+    return () => { cancelled = true; };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [chatId, feedbackUserId]);
+
+  const initialPromptSent = useRef(false);
+  useEffect(() => {
+    const prompt = (location.state as any)?.initialPrompt;
+    if (!prompt || initialPromptSent.current || hydrating || thread.isLoading) return;
+    if (!currentChat || currentChat.messages.length > 0) return;
+
+    initialPromptSent.current = true;
+    navigate(location.pathname, { replace: true, state: {} });
+
+    const userMessage: Message = {
+      id: `msg-${Date.now()}`,
+      type: 'human',
+      content: prompt,
+    };
+    thread.submit({ messages: [userMessage] }).then(() => {
+      hasFinalizeEventOccurredRef.current = true;
+    }).catch((err) => {
+      console.error('Failed to auto-send initial prompt:', err);
+    });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [chatId, hydrating, thread.isLoading]);
+
+  useEffect(() => {
+    if (currentChat && currentChat.messages.length > 0 && !thread.isLoading && !hydrating) {
+      thread.setMessages(currentChat.messages.map(m => JSON.parse(JSON.stringify(m))));
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [chatId, hasMessages]);
+
+  useEffect(() => {
+    if (scrollAreaRef.current) {
+      const el = scrollAreaRef.current;
+      el.scrollTop = el.scrollHeight;
     }
   }, [thread.messages]);
 
-  // Update chat messages when thread messages change
   const previousMessagesLength = useRef(0);
   useEffect(() => {
     if (threadId && thread.messages.length > 0 && thread.messages.length !== previousMessagesLength.current) {
-      updateChatMessages(threadId, thread.messages);
+      if (currentChat?.title === 'New Chat' && thread.messages.length > 0) {
+        const content = thread.messages[0].content as string;
+        dispatch(updateChat({
+          id: threadId,
+          updates: {
+            title: content.length > 40 ? content.substring(0, 40) + '...' : content || 'New Chat',
+            preview: content.substring(0, 60) + '...',
+            timestamp: new Date().toISOString(),
+          },
+        }));
+      }
       previousMessagesLength.current = thread.messages.length;
     }
-  }, [threadId, thread.messages, updateChatMessages]);
+  }, [threadId, thread.messages, dispatch, currentChat]);
 
-  // Handle finalization of activities
   useEffect(() => {
     if (
       hasFinalizeEventOccurredRef.current &&
@@ -84,140 +212,315 @@ export function ChatPage({ threadId }: { threadId: string }) {
       threadId
     ) {
       const lastMessage = thread.messages[thread.messages.length - 1];
-      if (lastMessage && lastMessage.type === "ai" && lastMessage.id) {
-        updateChatActivities(threadId, lastMessage.id, processedEventsTimeline);
+      if (lastMessage?.type === 'ai' && lastMessage.id) {
+        dispatch(
+          updateChat({
+            id: threadId,
+            updates: {
+              historicalActivities: {
+                ...currentChat?.historicalActivities,
+                [lastMessage.id]: [...processedEventsTimeline],
+              },
+            },
+          })
+        );
       }
       hasFinalizeEventOccurredRef.current = false;
     }
-  }, [thread.isLoading, threadId, updateChatActivities, thread.messages, processedEventsTimeline]); // Removed thread.messages and processedEventsTimeline to prevent loops
+  }, [thread.isLoading, threadId, dispatch, thread.messages, processedEventsTimeline, currentChat]);
 
-  // Handle submit
   const handleSubmit = useCallback(
     async (inputValue: string) => {
-      if (!threadId || !currentChat) {
-        console.error('No active chat to submit to');
-        return;
-      }
+      if (!threadId || !currentChat) return;
 
-      // Create message from user input
       const userMessage: Message = {
         id: `msg-${Date.now()}`,
-        type: "human",
-        content: inputValue.trim()
+        type: 'human',
+        content: inputValue.trim(),
       };
 
-      // Add user message to existing messages
       const messages = [...thread.messages, userMessage];
 
-      // Submit to the thread
       try {
         await thread.submit({ messages });
-
-        // Mark that we're waiting for finalization
         setTimeout(() => {
           hasFinalizeEventOccurredRef.current = true;
         }, 100);
-      } catch (error) {
-        console.error('Failed to submit message:', error);
-        setError('Failed to send message. Please try again.');
+      } catch (err) {
+        console.error('Failed to submit message:', err);
+        dispatch(addToast({ title: 'Failed to send message', message: 'Please try again.', variant: 'danger' }));
       }
     },
-    [thread, threadId, currentChat, setError]
+    [thread, threadId, currentChat, dispatch]
   );
 
-  // Handle cancel
   const handleCancel = useCallback(() => {
     thread.stop();
   }, [thread]);
 
-  // Handle retry for error boundary
+  const handleEditMessage = useCallback(
+    async (messageIndex: number, newContent: string) => {
+      if (!threadId || !currentChat) return;
+      const trimmed = newContent.trim();
+      if (trimmed === '') return;
+
+      const truncated = thread.messages.slice(0, messageIndex);
+      const userMessage: Message = {
+        id: `msg-${Date.now()}`,
+        type: 'human',
+        content: trimmed,
+      };
+      const nextMessages = [...truncated, userMessage];
+
+      try {
+        await thread.submit({ messages: nextMessages });
+        setTimeout(() => {
+          hasFinalizeEventOccurredRef.current = true;
+        }, 100);
+      } catch (err) {
+        console.error('Failed to edit message:', err);
+        dispatch(addToast({ title: 'Failed to send edited message', message: 'Please try again.', variant: 'danger' }));
+      }
+    },
+    [thread, threadId, currentChat, dispatch],
+  );
+
   const handleRetry = useCallback(() => {
     setProcessedEventsTimeline([]);
     setHistoricalActivities(currentChat?.historicalActivities || {});
-    // Reset any error state
-    if (currentChat) {
-      setHistoricalActivities(currentChat.historicalActivities);
-    }
   }, [currentChat]);
 
-  // Show loading while chats are being loaded from localStorage
-  if (chatsLoading) {
+  const handleStreamRetry = useCallback(async () => {
+    if (!threadId || !currentChat || thread.messages.length === 0) return;
+    try {
+      await thread.submit({ messages: thread.messages });
+      setTimeout(() => {
+        hasFinalizeEventOccurredRef.current = true;
+      }, 100);
+    } catch (err) {
+      console.error('Failed to retry:', err);
+      dispatch(addToast({ title: 'Failed to retry', message: 'Please try again.', variant: 'danger' }));
+    }
+  }, [thread, threadId, currentChat, dispatch]);
+
+  const handleInterruptResume = useCallback(
+    async (decisions: Array<{ type: 'approve' | 'reject'; message?: string }>) => {
+      if (!threadId || !currentChat) return;
+      try {
+        await thread.resumeWithDecisions(decisions);
+        setTimeout(() => {
+          hasFinalizeEventOccurredRef.current = true;
+        }, 100);
+      } catch (err) {
+        console.error('Failed to resume:', err);
+        dispatch(addToast({ title: 'Failed to resume', variant: 'danger' }));
+      }
+    },
+    [thread, threadId, currentChat, dispatch],
+  );
+
+  const handleMCPOAuthResume = useCallback(
+    async (response: string) => {
+      if (!threadId || !currentChat) return;
+      try {
+        await thread.resumeInterrupt(response);
+        setTimeout(() => {
+          hasFinalizeEventOccurredRef.current = true;
+        }, 100);
+      } catch (err) {
+        console.error('Failed to resume:', err);
+        dispatch(addToast({ title: 'Failed to resume', variant: 'danger' }));
+      }
+    },
+    [thread, threadId, currentChat, dispatch],
+  );
+
+  const handleInterruptDismiss = useCallback(() => {
+    dispatch(
+      updateStreamingState({
+        chatId: threadId,
+        state: { pendingInterrupt: null },
+      }),
+    );
+  }, [dispatch, threadId]);
+
+  const handleAlwaysAllow = useCallback(
+    (toolNames: string[]) => {
+      for (const name of toolNames) {
+        dispatch(addAlwaysAllowedTool(name));
+      }
+    },
+    [dispatch],
+  );
+
+  const autoApproveAllTools = useAppSelector(selectAutoApproveAllTools);
+  useEffect(() => {
+    const interrupt = thread.pendingInterrupt;
+    if (typeof interrupt?.value !== 'object' || !interrupt.value.action_requests?.length) return;
+
+    if (autoApproveAllTools) {
+      const allApproved = interrupt.value.action_requests.map(() => ({ type: 'approve' as const }));
+      thread.resumeWithDecisions(allApproved).catch((err) => {
+        console.error('Auto-approve-all resume failed:', err);
+      });
+      return;
+    }
+
+    const { allAutoApproved, decisions } = thread.checkAndAutoApprove(interrupt.value);
+    if (!allAutoApproved) return;
+    thread.resumeWithDecisions(decisions).catch((err) => {
+      console.error('Auto-approve resume failed:', err);
+    });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [thread.pendingInterrupt, autoApproveAllTools]);
+
+  const handleNewChat = useCallback(() => {
+    navigate('/');
+  }, [navigate]);
+
+  const handleExportMarkdown = useCallback(() => {
+    if (!currentChat || thread.messages.length === 0) return;
+    const title = currentChat.title || 'Chat';
+    const md = exportAsMarkdown(thread.messages, title);
+    downloadFile(md, `${slugifyExportBase(title)}.md`, 'text/markdown;charset=utf-8');
+  }, [currentChat, thread.messages]);
+
+  const handleExportJson = useCallback(() => {
+    if (!currentChat || thread.messages.length === 0) return;
+    const title = currentChat.title || 'Chat';
+    const json = exportAsJSON(thread.messages, title);
+    downloadFile(json, `${slugifyExportBase(title)}.json`, 'application/json;charset=utf-8');
+  }, [currentChat, thread.messages]);
+
+  const handleExportShortcut = useCallback(() => {
+    handleExportMarkdown();
+  }, [handleExportMarkdown]);
+
+  useKeyboardShortcuts({
+    onFocusInput: () => chatInputRef.current?.focus(),
+    onCancelStream: handleCancel,
+    getIsStreaming: () => thread.isLoading,
+    onBlurChatInput: () => chatInputRef.current?.blur(),
+    onExportChat: handleExportShortcut,
+  });
+
+  if (chatsLoading || hydrating) {
     return (
-      <main className="flex-1 h-full max-w-4xl mx-auto">
-        <div className="flex flex-col items-center justify-center h-full">
-          <div className="flex flex-col items-center justify-center gap-4">
-            <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-neutral-400"></div>
-            <p className="text-neutral-500">Loading chat...</p>
-          </div>
-        </div>
-      </main>
+      <div className="flex flex-col items-center justify-center h-full gap-4">
+        <Spinner size="lg" aria-label="Loading chat" />
+        <p className="text-muted-foreground">{hydrating ? 'Loading messages...' : 'Loading chat...'}</p>
+      </div>
     );
   }
 
-  // Handle case where chat doesn't exist (after chats have loaded)
   if (threadId && !currentChat) {
     return (
-      <main className="flex-1 h-full max-w-4xl mx-auto">
-        <div className="flex flex-col items-center justify-center h-full">
-          <div className="flex flex-col items-center justify-center gap-4">
-            <h1 className="text-2xl text-neutral-400 font-bold">Chat Not Found</h1>
-            <p className="text-neutral-500">The requested chat could not be found.</p>
-            <Button onClick={() => window.location.href = '/'}>
-              Go Home
-            </Button>
-          </div>
-        </div>
-      </main>
+      <div className="flex flex-col items-center justify-center h-full gap-4">
+        <h1 className="text-2xl text-muted-foreground font-bold">Chat Not Found</h1>
+        <p className="text-muted-foreground">The requested chat could not be found.</p>
+        <Button variant="primary" onClick={() => navigate('/')}>Go Home</Button>
+      </div>
     );
   }
 
-  // Handle error state
   if (error) {
     return (
-      <main className="flex-1 h-full max-w-4xl mx-auto">
-        <div className="flex flex-col items-center justify-center h-full">
-          <div className="flex flex-col items-center justify-center gap-4">
-            <h1 className="text-2xl text-red-400 font-bold">Error</h1>
-            <p className="text-red-400">{error}</p>
-            <Button
-              variant="destructive"
-              onClick={() => window.location.reload()}
-            >
-              Retry
-            </Button>
-          </div>
-        </div>
-      </main>
+      <div className="flex flex-col items-center justify-center h-full gap-4">
+        <h1 className="text-2xl text-destructive font-bold">Error</h1>
+        <p className="text-destructive">{error}</p>
+        <Button variant="danger" onClick={() => window.location.reload()}>
+          Retry
+        </Button>
+      </div>
     );
   }
 
-  // Render chat interface
+  const hasToolCalls = thread.messages.some(
+    (m) => m.type === 'ai' && Array.isArray((m as any).tool_calls) && (m as any).tool_calls.length > 0,
+  );
+
   return (
-    <main className="flex-1 h-full max-w-4xl mx-auto">
-      <ChatErrorBoundary
-        chatId={threadId}
-        onRetry={handleRetry}
-      >
-        <ChatMessagesView
-          key={threadId}
-          messages={thread.messages}
-          streamEvents={thread.streamEvents}
-          isLoading={thread.isLoading}
-          scrollAreaRef={scrollAreaRef}
-          onSubmit={handleSubmit}
-          onCancel={handleCancel}
-          liveActivityEvents={processedEventsTimeline}
-          historicalActivities={historicalActivities}
-        />
-      </ChatErrorBoundary>
-    </main>
+    <ChatErrorBoundary chatId={threadId} onRetry={handleRetry}>
+      <div aria-live="polite" className="sr-only">
+        {streamAnnouncement}
+      </div>
+      <div className="flex flex-1 min-h-0 overflow-hidden">
+        <div className="flex-1 flex flex-col min-w-0">
+          {hasToolCalls && (
+            <TaskProgressStepper messages={thread.messages} isLoading={thread.isLoading} />
+          )}
+          <ReconnectingBanner streamingState={streamingState} maxRetries={MAX_RETRIES} />
+          <ChatMessagesView
+            key={threadId}
+            messages={thread.messages}
+            streamEvents={thread.streamEvents}
+            isLoading={thread.isLoading}
+            pendingInterrupt={
+              thread.pendingInterrupt &&
+              typeof thread.pendingInterrupt.value === 'object' &&
+              'action_requests' in thread.pendingInterrupt.value
+                ? thread.pendingInterrupt
+                : null
+            }
+            onInterruptResume={handleInterruptResume}
+            onAlwaysAllow={handleAlwaysAllow}
+
+            interruptContent={
+              thread.pendingInterrupt &&
+              !(typeof thread.pendingInterrupt.value === 'object' && 'action_requests' in thread.pendingInterrupt.value)
+                ? (
+                  <InterruptBanner
+                    interrupt={thread.pendingInterrupt}
+                    onResume={handleMCPOAuthResume}
+                    onDismiss={handleInterruptDismiss}
+                  />
+                )
+                : undefined
+            }
+            onRetry={handleStreamRetry}
+            scrollAreaRef={scrollAreaRef}
+            onSubmit={handleSubmit}
+            onEditMessage={handleEditMessage}
+            onCancel={handleCancel}
+            onNewChat={handleNewChat}
+            liveActivityEvents={processedEventsTimeline}
+            historicalActivities={historicalActivities}
+            isRateLimited={rateLimit.isRateLimited}
+            rateLimitRemainingSeconds={rateLimit.retryAfterSeconds}
+            mcpEvents={thread.mcpEvents}
+            chatId={threadId}
+            traceId={thread.traceId}
+            userId={feedbackUserId}
+            messageFeedback={currentChat?.feedback ?? {}}
+            lastResponseTiming={
+              thread.totalDuration != null
+                ? {
+                    timeToFirstTokenMs: thread.timeToFirstToken,
+                    totalDurationMs: thread.totalDuration,
+                  }
+                : null
+            }
+            chatInputRef={chatInputRef}
+            onExportMarkdown={handleExportMarkdown}
+            onExportJson={handleExportJson}
+          />
+        </div>
+        {debugMode && (
+          <div className="w-64 shrink-0 self-stretch border-l border-border hidden lg:flex lg:flex-col p-2 gap-2">
+            <div className="flex-1 min-h-0 overflow-y-auto">
+              <TasksSidebar messages={thread.messages} isLoading={thread.isLoading} />
+            </div>
+            <div className="flex-1 min-h-0 overflow-y-auto border-t border-border pt-2">
+              <DebugPanel messages={thread.messages} streamingState={streamingState} />
+            </div>
+          </div>
+        )}
+      </div>
+    </ChatErrorBoundary>
   );
 }
 
 export function ChatRoutePage() {
-  const { threadId = "" } = useParams<{ threadId: string }>();
-
-  return (
-    <ChatPage threadId={threadId} key={threadId} />
-  );
+  const { threadId = '' } = useParams<{ threadId: string }>();
+  return <ChatPage threadId={threadId} key={threadId} />;
 }
diff --git a/src/frontend/pages/HomePage.tsx b/src/frontend/pages/HomePage.tsx
index f2e6b29f..fa46c375 100644
--- a/src/frontend/pages/HomePage.tsx
+++ b/src/frontend/pages/HomePage.tsx
@@ -1,67 +1,136 @@
+import { useCallback, useMemo, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { v4 as uuidv4 } from 'uuid';
+import { Send } from 'lucide-react';
+import { useAppDispatch } from '../redux/hooks';
+import { addChat, ChatItem } from '../redux/slices/chats';
 
-import { Button } from '../components/ui/button';
-import { useChat } from '../contexts/ChatContext';
-import { useMemo } from 'react';
+const QUICK_PROMPTS = [
+  `What can ${window.APP_DATA?.agentName || 'Agent'} do for me?`,
+  'Help me analyze a dataset',
+  'Write a query to find anomalies',
+  'Summarize the key findings from this data',
+];
 
 export function HomePage() {
-  const { createNewChat } = useChat();
-  
-  // Get user data for personalization
+  const dispatch = useAppDispatch();
+  const navigate = useNavigate();
+  const [inputValue, setInputValue] = useState('');
+
   const userData = useMemo(() => window.USER_DATA, []);
   const userDisplayName = userData?.displayName || userData?.given_name;
 
+  const startChat = useCallback(
+    (initialPrompt?: string) => {
+      const newChatId = uuidv4();
+      const newChat: ChatItem = {
+        id: newChatId,
+        title: initialPrompt?.substring(0, 40) || 'New Chat',
+        timestamp: new Date().toISOString(),
+        preview: initialPrompt || 'Start a new conversation',
+        messages: [],
+        historicalActivities: {},
+        feedback: {},
+      };
+      dispatch(addChat(newChat));
+      navigate(`/chat/${newChatId}`, { state: { initialPrompt: initialPrompt } });
+    },
+    [dispatch, navigate],
+  );
+
+  const handleSubmit = (e?: React.FormEvent) => {
+    if (e) e.preventDefault();
+    if (!inputValue.trim()) return;
+    startChat(inputValue.trim());
+  };
+
+  const handleKeyDown = (e: React.KeyboardEvent<HTMLTextAreaElement>) => {
+    if (e.key === 'Enter' && !e.shiftKey) {
+      e.preventDefault();
+      handleSubmit();
+    }
+  };
+
   return (
-    <main className="flex-1 h-full max-w-4xl mx-auto">
-      <div className="flex flex-col items-center justify-center h-full text-center px-8">
-        <div className="max-w-2xl space-y-6">
-          <div className="space-y-2">
-            <h1 className="text-4xl font-bold text-neutral-100">
-              {userDisplayName ? `How can I help you today, ${userDisplayName}?` : 'How can I help you today?'}
+    <div className="flex-1 flex flex-col min-h-0 overflow-hidden">
+      {/* Center content area */}
+      <div className="flex-1 flex flex-col items-center justify-center px-6">
+        <div className="max-w-2xl w-full text-center">
+          {/* Greeting */}
+          <div className="mb-8">
+            <h1 className="text-foreground font-bold mb-3" style={{ fontSize: 'clamp(2rem, 5vw, 3rem)' }}>
+              {userDisplayName ? (
+                <>Hey {userDisplayName}! <span aria-hidden="true">👋</span></>
+              ) : (
+                <>Hey there! <span aria-hidden="true">👋</span></>
+              )}
             </h1>
-            <p className="text-lg text-neutral-400">
-              Ask me anything about your data and I'll help you analyze it with AI-powered insights.
+            <p className="text-muted-foreground text-base">
+              <span className="font-medium text-foreground">{window.APP_DATA?.agentName || 'Agent'}</span> is ready to help. What would you like to explore today?
             </p>
           </div>
-          
-          {/* <div className="grid grid-cols-1 md:grid-cols-2 gap-4 mt-8">
-            <div className="p-4 rounded-lg border border-neutral-700 hover:border-neutral-600 transition-colors">
-              <h3 className="font-semibold text-neutral-200 mb-2">📊 Data Analysis</h3>
-              <p className="text-sm text-neutral-400">
-                Query your databases and get insights from your business data
-              </p>
-            </div>
-            <div className="p-4 rounded-lg border border-neutral-700 hover:border-neutral-600 transition-colors">
-              <h3 className="font-semibold text-neutral-200 mb-2">🔍 Smart Queries</h3>
-              <p className="text-sm text-neutral-400">
-                Ask natural language questions and get SQL-powered answers
-              </p>
-            </div>
-            <div className="p-4 rounded-lg border border-neutral-700 hover:border-neutral-600 transition-colors">
-              <h3 className="font-semibold text-neutral-200 mb-2">📈 Visualizations</h3>
-              <p className="text-sm text-neutral-400">
-                Transform your data into beautiful charts and reports
-              </p>
-            </div>
-            <div className="p-4 rounded-lg border border-neutral-700 hover:border-neutral-600 transition-colors">
-              <h3 className="font-semibold text-neutral-200 mb-2">🤖 AI Assistant</h3>
-              <p className="text-sm text-neutral-400">
-                Get intelligent recommendations and data interpretations
-              </p>
+
+          {/* Quick prompts */}
+          <div className="mb-6">
+            <h2 className="text-sm font-semibold text-muted-foreground mb-3">
+              Let&apos;s try some quick prompts <span aria-hidden="true">🚀</span>
+            </h2>
+            <div className="grid grid-cols-1 sm:grid-cols-2 gap-2.5" role="list" aria-label="Quick prompt suggestions">
+              {QUICK_PROMPTS.map((prompt) => (
+                <div key={prompt} role="listitem">
+                  <button
+                    type="button"
+                    onClick={() => startChat(prompt)}
+                    aria-label={`Start chat: ${prompt}`}
+                    className="w-full text-left p-3.5 rounded-xl border border-border bg-card hover:bg-secondary/50 transition-colors cursor-pointer"
+                  >
+                    <p className="text-sm text-foreground/90">{prompt}</p>
+                  </button>
+                </div>
+              ))}
             </div>
-          </div> */}
-          
-          <div className="pt-6">
-            {/* <p className="text-neutral-500 mb-4">Ready to get started?</p> */}
-            <Button 
-              onClick={createNewChat}
-              size="lg"
-              className="bg-primary hover:bg-primary/90 text-primary-foreground shadow-lg hover:shadow-xl transform hover:scale-105 transition-all duration-200"
-            >
-              Start New Chat
-            </Button>
           </div>
         </div>
       </div>
-    </main>
+
+      {/* Bottom input bar */}
+      <div className="border-t border-border bg-background px-6 pb-4 pt-3">
+        <div className="max-w-2xl mx-auto">
+          <form onSubmit={handleSubmit} aria-label="Start a new chat">
+            <div className="relative rounded-2xl border border-border bg-card shadow-card focus-within:border-primary/40 focus-within:shadow-elevated transition-all duration-200">
+              <label htmlFor="home-chat-input" className="sr-only">
+                Enter a prompt for {window.APP_DATA?.agentName || 'Agent'}
+              </label>
+              <textarea
+                id="home-chat-input"
+                autoFocus
+                value={inputValue}
+                onChange={(e) => setInputValue(e.target.value)}
+                onKeyDown={handleKeyDown}
+                placeholder={`Enter a prompt for ${window.APP_DATA?.agentName || 'Agent'}`}
+                className="w-full resize-none border-0 bg-transparent text-sm leading-relaxed min-h-[44px] max-h-[120px] px-4 py-3 pr-12 rounded-2xl placeholder:opacity-60 focus:outline-none focus:ring-0 focus:border-transparent focus:shadow-none"
+                style={{ boxShadow: 'none' }}
+                rows={1}
+              />
+              <button
+                type="submit"
+                disabled={!inputValue.trim()}
+                aria-label="Send message"
+                className={`absolute right-2.5 bottom-2.5 flex-shrink-0 flex items-center justify-center w-8 h-8 rounded-full transition-colors ${
+                  inputValue.trim()
+                    ? 'bg-primary text-primary-foreground hover:bg-primary/90 shadow-sm'
+                    : 'bg-muted text-muted-foreground cursor-not-allowed'
+                }`}
+              >
+                <Send className="w-4 h-4" aria-hidden="true" />
+              </button>
+            </div>
+          </form>
+          <p className="text-xs text-muted-foreground/50 text-center mt-2">
+            AI can make mistakes. Please review AI-generated content prior to use.
+          </p>
+        </div>
+      </div>
+    </div>
   );
 }
diff --git a/src/frontend/pages/SettingsPage.tsx b/src/frontend/pages/SettingsPage.tsx
new file mode 100644
index 00000000..2d4997d9
--- /dev/null
+++ b/src/frontend/pages/SettingsPage.tsx
@@ -0,0 +1,142 @@
+import { useRef, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { Button } from '@patternfly/react-core';
+import { ArrowLeft, User, Brain, ScrollText, Palette, ShieldCheck } from 'lucide-react';
+import { cn } from '@/lib/utils';
+import { ProfileSection } from '../components/settings/ProfileSection';
+import { MemoryList } from '../components/settings/MemoryList';
+import { RulesEditor } from '../components/settings/RulesEditor';
+import { AppearanceSettings } from '../components/settings/AppearanceSettings';
+import { AlwaysAllowedTools } from '../components/settings/AlwaysAllowedTools';
+
+type TabId = 'profile' | 'memories' | 'rules' | 'appearance' | 'tool-approvals';
+
+const TABS: { id: TabId; label: string; icon: typeof User }[] = [
+  { id: 'profile', label: 'Profile', icon: User },
+  { id: 'memories', label: 'Memories', icon: Brain },
+  { id: 'rules', label: 'Custom Rules', icon: ScrollText },
+  { id: 'appearance', label: 'Appearance', icon: Palette },
+  { id: 'tool-approvals', label: 'Tool Approvals', icon: ShieldCheck },
+];
+
+const TAB_CONTENT: Record<TabId, React.FC> = {
+  profile: ProfileSection,
+  memories: MemoryList,
+  rules: RulesEditor,
+  appearance: AppearanceSettings,
+  'tool-approvals': AlwaysAllowedTools,
+};
+
+export function SettingsPage() {
+  const navigate = useNavigate();
+  const [activeTab, setActiveTab] = useState<TabId>('profile');
+  const tabRefs = useRef<Map<TabId, HTMLButtonElement>>(new Map());
+
+  const handleTabKeyDown = (e: React.KeyboardEvent, tabId: TabId) => {
+    const tabIds = TABS.map((t) => t.id);
+    const currentIndex = tabIds.indexOf(tabId);
+
+    let nextIndex: number | null = null;
+    if (e.key === 'ArrowDown' || e.key === 'ArrowRight') {
+      nextIndex = (currentIndex + 1) % tabIds.length;
+    } else if (e.key === 'ArrowUp' || e.key === 'ArrowLeft') {
+      nextIndex = (currentIndex - 1 + tabIds.length) % tabIds.length;
+    } else if (e.key === 'Home') {
+      nextIndex = 0;
+    } else if (e.key === 'End') {
+      nextIndex = tabIds.length - 1;
+    }
+
+    if (nextIndex !== null) {
+      e.preventDefault();
+      const nextId = tabIds[nextIndex];
+      setActiveTab(nextId);
+      tabRefs.current.get(nextId)?.focus();
+    }
+  };
+
+  return (
+    <div className="flex-1 flex flex-col min-h-0 overflow-hidden">
+      <div className="shrink-0 border-b border-border bg-card/60 backdrop-blur-sm px-6 py-3">
+        <div className="max-w-4xl mx-auto flex items-center gap-3">
+          <Button
+            variant="plain"
+            size="sm"
+            onClick={() => navigate('/')}
+            aria-label="Back to home"
+            className="!p-1.5"
+          >
+            <ArrowLeft className="w-4 h-4" aria-hidden="true" />
+          </Button>
+          <h1 className="text-lg font-semibold text-foreground">Settings</h1>
+        </div>
+      </div>
+
+      <div className="flex-1 overflow-y-auto">
+        <div className="max-w-4xl mx-auto px-6 py-6">
+          <div className="flex flex-col sm:flex-row gap-6">
+            {/* Tab navigation */}
+            <nav className="sm:w-48 shrink-0" aria-label="Settings sections">
+              <div
+                role="tablist"
+                aria-orientation="vertical"
+                aria-label="Settings"
+                className="flex sm:flex-col gap-1"
+              >
+                {TABS.map((tab) => {
+                  const Icon = tab.icon;
+                  const isActive = activeTab === tab.id;
+                  return (
+                    <button
+                      key={tab.id}
+                      id={`settings-tab-${tab.id}`}
+                      role="tab"
+                      aria-selected={isActive}
+                      aria-controls={`settings-panel-${tab.id}`}
+                      tabIndex={isActive ? 0 : -1}
+                      ref={(el) => {
+                        if (el) tabRefs.current.set(tab.id, el);
+                      }}
+                      onClick={() => setActiveTab(tab.id)}
+                      onKeyDown={(e) => handleTabKeyDown(e, tab.id)}
+                      className={cn(
+                        'w-full flex items-center gap-2.5 px-3 py-2 rounded-lg text-sm font-medium transition-colors cursor-pointer',
+                        isActive
+                          ? 'bg-primary/10 text-primary'
+                          : 'text-muted-foreground hover:bg-secondary/50 hover:text-foreground',
+                      )}
+                    >
+                      <Icon className="w-4 h-4" aria-hidden="true" />
+                      {tab.label}
+                    </button>
+                  );
+                })}
+              </div>
+            </nav>
+
+            {/* Content */}
+            <div className="flex-1 min-w-0">
+              {TABS.map((tab) => {
+                const Content = TAB_CONTENT[tab.id];
+                return (
+                  <div
+                    key={tab.id}
+                    id={`settings-panel-${tab.id}`}
+                    role="tabpanel"
+                    aria-labelledby={`settings-tab-${tab.id}`}
+                    hidden={activeTab !== tab.id}
+                    tabIndex={0}
+                    className="bg-card border border-border rounded-xl p-6 focus:outline-none"
+                  >
+                    <h2 className="text-base font-semibold text-foreground mb-4">{tab.label}</h2>
+                    {activeTab === tab.id && <Content />}
+                  </div>
+                );
+              })}
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/src/frontend/redux/hooks.ts b/src/frontend/redux/hooks.ts
new file mode 100644
index 00000000..2cdf69ca
--- /dev/null
+++ b/src/frontend/redux/hooks.ts
@@ -0,0 +1,5 @@
+import { useDispatch, useSelector } from 'react-redux';
+import type { RootState, AppDispatch } from './store';
+
+export const useAppDispatch = useDispatch.withTypes<AppDispatch>();
+export const useAppSelector = useSelector.withTypes<RootState>();
diff --git a/src/frontend/redux/slices/chats.test.ts b/src/frontend/redux/slices/chats.test.ts
new file mode 100644
index 00000000..337b657b
--- /dev/null
+++ b/src/frontend/redux/slices/chats.test.ts
@@ -0,0 +1,245 @@
+import { describe, it, expect } from 'vitest';
+import type { Message } from '@langchain/langgraph-sdk';
+import chatsReducer, {
+  addChat,
+  appendMessageToChat,
+  clearAllChats,
+  deleteChat,
+  mergeToolResult,
+  resolveAllPendingToolCalls,
+  setMessageFeedback,
+  updateChat,
+  updateLastMessageInChat,
+  updateStreamingState,
+  type ChatsState,
+  type ChatItem,
+} from './chats';
+
+/** Minimal fixture shape that matches the runtime duck-type expected by chats slice reducers. */
+type TestToolCall = { id: string; name: string; args: Record<string, unknown>; content?: string };
+type TestMessage = {
+  type: 'ai' | 'human';
+  content: string;
+  id: string;
+  tool_calls?: TestToolCall[];
+};
+/** Cast a TestMessage fixture to the LangGraph Message type used by the chats slice. */
+function asMsg(m: TestMessage): Message {
+  return m as unknown as Message;
+}
+
+// ── Factory helpers ───────────────────────────────────────────────────────────
+
+function makeChat(id: string, overrides: Partial<ChatItem> = {}): ChatItem {
+  return {
+    id,
+    title: `Chat ${id}`,
+    timestamp: new Date().toISOString(),
+    preview: '',
+    messages: [],
+    historicalActivities: {},
+    feedback: {},
+    ...overrides,
+  };
+}
+
+function initialState(): ChatsState {
+  return chatsReducer(undefined, { type: '@@INIT' });
+}
+
+// ── Tests ────────────────────────────────────────────────────────────────────
+
+describe('chats slice — addChat', () => {
+  it('adds a chat to the front of the list', () => {
+    const chat = makeChat('c1');
+    const s = chatsReducer(initialState(), addChat(chat));
+    expect(s.chats[0].id).toBe('c1');
+  });
+});
+
+describe('chats slice — updateChat', () => {
+  it('updates fields on a matching chat', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(s, updateChat({ id: 'c1', updates: { title: 'New Title' } }));
+    expect(s.chats[0].title).toBe('New Title');
+  });
+
+  it('is a no-op when the chat id is not found', () => {
+    const base = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const s = chatsReducer(base, updateChat({ id: 'nonexistent', updates: { title: 'X' } }));
+    expect(s.chats[0].title).toBe('Chat c1');
+  });
+});
+
+describe('chats slice — deleteChat', () => {
+  it('removes the chat from the list', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(s, deleteChat('c1'));
+    expect(s.chats).toHaveLength(0);
+  });
+});
+
+describe('chats slice — clearAllChats', () => {
+  it('empties the chats list and clears streamingStates', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(s, clearAllChats());
+    expect(s.chats).toHaveLength(0);
+    expect(s.streamingStates).toEqual({});
+  });
+});
+
+describe('chats slice — appendMessageToChat', () => {
+  it('appends a message to the correct chat', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = { type: 'ai', content: 'Hello', tool_calls: [], id: 'msg-1' };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    expect(s.chats[0].messages).toHaveLength(1);
+    expect((s.chats[0].messages[0] as TestMessage).id).toBe('msg-1');
+  });
+
+  it('is idempotent when the same message id is appended twice', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = { type: 'ai', content: 'Hello', tool_calls: [], id: 'msg-1' };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    expect(s.chats[0].messages).toHaveLength(1);
+  });
+
+  it('is a no-op when the chat does not exist', () => {
+    const stub: TestMessage = { type: 'ai', content: '', id: 'x' };
+    const s = chatsReducer(
+      initialState(),
+      appendMessageToChat({ chatId: 'missing', message: asMsg(stub) }),
+    );
+    expect(s.chats).toHaveLength(0);
+  });
+});
+
+describe('chats slice — updateLastMessageInChat', () => {
+  it('concatenates new content onto the last message', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = { type: 'ai', content: 'Hello', tool_calls: [], id: 'm1' };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    s = chatsReducer(s, updateLastMessageInChat({ chatId: 'c1', content: ' world' }));
+    expect((s.chats[0].messages[0] as TestMessage).content).toBe('Hello world');
+  });
+
+  it('is a no-op when the chat has no messages', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(s, updateLastMessageInChat({ chatId: 'c1', content: 'x' }));
+    expect(s.chats[0].messages).toHaveLength(0);
+  });
+});
+
+describe('chats slice — mergeToolResult', () => {
+  it('finds the matching tool_call_id and sets content', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = {
+      type: 'ai',
+      content: '',
+      tool_calls: [{ id: 'tc-1', name: 'search', args: {} }],
+      id: 'm1',
+    };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    s = chatsReducer(s, mergeToolResult({ chatId: 'c1', toolCallId: 'tc-1', content: 'result data' }));
+
+    const toolCall = (s.chats[0].messages[0] as TestMessage).tool_calls![0];
+    expect(toolCall.content).toBe('result data');
+  });
+
+  it('is a no-op when the tool_call_id is not found', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = {
+      type: 'ai',
+      content: '',
+      tool_calls: [{ id: 'tc-1', name: 'search', args: {} }],
+      id: 'm1',
+    };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    s = chatsReducer(s, mergeToolResult({ chatId: 'c1', toolCallId: 'missing', content: 'x' }));
+    // tc-1 still has no content
+    expect((s.chats[0].messages[0] as TestMessage).tool_calls![0].content).toBeUndefined();
+  });
+});
+
+describe('chats slice — resolveAllPendingToolCalls', () => {
+  it('sets content to empty string on all tool_calls with null content', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = {
+      type: 'ai',
+      content: '',
+      tool_calls: [
+        { id: 'tc-1', name: 'a', args: {} },
+        { id: 'tc-2', name: 'b', args: {} },
+      ],
+      id: 'm1',
+    };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    s = chatsReducer(s, resolveAllPendingToolCalls({ chatId: 'c1' }));
+
+    const tcs = (s.chats[0].messages[0] as TestMessage).tool_calls!;
+    expect(tcs[0].content).toBe('');
+    expect(tcs[1].content).toBe('');
+  });
+
+  it('does not overwrite a tool_call that already has content', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const msg: TestMessage = {
+      type: 'ai',
+      content: '',
+      tool_calls: [{ id: 'tc-1', name: 'a', args: {}, content: 'already set' }],
+      id: 'm1',
+    };
+    s = chatsReducer(s, appendMessageToChat({ chatId: 'c1', message: asMsg(msg) }));
+    s = chatsReducer(s, resolveAllPendingToolCalls({ chatId: 'c1' }));
+
+    const tc = (s.chats[0].messages[0] as TestMessage).tool_calls![0];
+    expect(tc.content).toBe('already set');
+  });
+});
+
+describe('chats slice — setMessageFeedback', () => {
+  it('stores up/down feedback for a message', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(s, setMessageFeedback({ chatId: 'c1', messageId: 'msg-1', feedback: 'up' }));
+    expect(s.chats[0].feedback['msg-1']).toBe('up');
+  });
+
+  it('removes feedback when null is passed', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(s, setMessageFeedback({ chatId: 'c1', messageId: 'msg-1', feedback: 'down' }));
+    s = chatsReducer(s, setMessageFeedback({ chatId: 'c1', messageId: 'msg-1', feedback: null }));
+    expect(s.chats[0].feedback['msg-1']).toBeUndefined();
+  });
+});
+
+describe('chats slice — updateStreamingState', () => {
+  it('merges partial streaming state for a chat', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    s = chatsReducer(
+      s,
+      updateStreamingState({ chatId: 'c1', state: { isLoading: true, error: null } }),
+    );
+    expect(s.streamingStates['c1'].isLoading).toBe(true);
+  });
+
+  it('stores a pendingInterrupt in streaming state', () => {
+    let s = chatsReducer(initialState(), addChat(makeChat('c1')));
+    const interrupt = { value: 'Approve this action?', resumable: true };
+    s = chatsReducer(
+      s,
+      updateStreamingState({ chatId: 'c1', state: { pendingInterrupt: interrupt } }),
+    );
+    expect(s.streamingStates['c1'].pendingInterrupt).toEqual(interrupt);
+  });
+
+  it('creates a new streaming state entry when none exists', () => {
+    const s = chatsReducer(
+      initialState(),
+      updateStreamingState({ chatId: 'new-chat', state: { isLoading: true } }),
+    );
+    expect(s.streamingStates['new-chat'].isLoading).toBe(true);
+    // defaults are preserved
+    expect(s.streamingStates['new-chat'].pendingInterrupt).toBeNull();
+  });
+});
diff --git a/src/frontend/redux/slices/chats.ts b/src/frontend/redux/slices/chats.ts
new file mode 100644
index 00000000..17df3752
--- /dev/null
+++ b/src/frontend/redux/slices/chats.ts
@@ -0,0 +1,240 @@
+import { createSlice, PayloadAction } from '@reduxjs/toolkit';
+import type { Message } from '@langchain/langgraph-sdk';
+import type { SubAgentInfo, InterruptInfo, TaskStep } from '../../types/deep-agent';
+
+export interface StreamingState {
+  isLoading: boolean;
+  isThinking: boolean;
+  isConnected: boolean;
+  error: string | null;
+  currentRunId: string | null;
+  activeSubAgent: SubAgentInfo | null;
+  pendingInterrupt: InterruptInfo | null;
+  taskSteps: TaskStep[];
+  isReconnecting: boolean;
+  reconnectAttempt: number;
+  streamDroppedMidResponse: boolean;
+}
+
+export interface ChatItem {
+  id: string;
+  title: string;
+  timestamp: string;
+  preview: string;
+  messages: Message[];
+  historicalActivities: Record<string, any[]>;
+  feedback: Record<string, 'up' | 'down'>;
+}
+
+export interface ChatsState {
+  chats: ChatItem[];
+  isLoadingThreads: boolean;
+  threadsListHydrated: boolean;
+  isLoadingMessages: Record<string, boolean>;
+  streamingStates: Record<string, StreamingState>;
+  error: string | null;
+}
+
+const DEFAULT_STREAMING_STATE: StreamingState = {
+  isLoading: false,
+  isThinking: false,
+  isConnected: false,
+  error: null,
+  currentRunId: null,
+  activeSubAgent: null,
+  pendingInterrupt: null,
+  taskSteps: [],
+  isReconnecting: false,
+  reconnectAttempt: 0,
+  streamDroppedMidResponse: false,
+};
+
+const initialState: ChatsState = {
+  chats: [],
+  isLoadingThreads: true,
+  threadsListHydrated: false,
+  isLoadingMessages: {},
+  streamingStates: {},
+  error: null,
+};
+
+type ToolCallRecord = { id?: string; content?: unknown };
+
+function deepClone<T>(obj: T): T {
+  return JSON.parse(JSON.stringify(obj));
+}
+
+const chatsSlice = createSlice({
+  name: 'chats',
+  initialState,
+  reducers: {
+    setChats(state, action: PayloadAction<ChatItem[]>) {
+      state.chats = deepClone(action.payload);
+    },
+    addChat(state, action: PayloadAction<ChatItem>) {
+      state.chats.unshift(action.payload);
+    },
+    updateChat(state, action: PayloadAction<{ id: string; updates: Partial<ChatItem> }>) {
+      const { id, updates } = action.payload;
+      const chat = state.chats.find((c) => c.id === id);
+      if (chat) {
+        Object.assign(chat, updates);
+      }
+    },
+    deleteChat(state, action: PayloadAction<string>) {
+      const id = action.payload;
+      state.chats = state.chats.filter((c) => c.id !== id);
+    },
+    clearAllChats(state) {
+      state.chats = [];
+      state.streamingStates = {};
+      state.error = null;
+    },
+    removeLastMessageFromChat(state, action: PayloadAction<{ chatId: string }>) {
+      const { chatId } = action.payload;
+      const chat = state.chats.find((c) => c.id === chatId);
+      if (chat && chat.messages.length > 0) {
+        chat.messages.pop();
+      }
+    },
+    appendMessageToChat(state, action: PayloadAction<{ chatId: string; message: Message }>) {
+      const { chatId, message } = action.payload;
+      const chat = state.chats.find((c) => c.id === chatId);
+      if (chat) {
+        const msgId = (message as Record<string, unknown>).id;
+        if (msgId && chat.messages.some((m) => (m as Record<string, unknown>).id === msgId)) {
+          return;
+        }
+        chat.messages.push(deepClone(message));
+      }
+    },
+    updateLastMessageInChat(state, action: PayloadAction<{ chatId: string; content: string }>) {
+      const { chatId, content } = action.payload;
+      const chat = state.chats.find((c) => c.id === chatId);
+      if (!chat || chat.messages.length === 0) {
+        return;
+      }
+      const last = chat.messages.at(-1) as Message & { content?: unknown };
+      let prev = '';
+      if (typeof last.content === 'string') {
+        prev = last.content;
+      }
+      (last as { content: string }).content = prev + content;
+    },
+    mergeToolResult(state, action: PayloadAction<{ chatId: string; toolCallId: string; content: any }>) {
+      const { chatId, toolCallId, content } = action.payload;
+      const chat = state.chats.find((c) => c.id === chatId);
+      if (!chat) {
+        return;
+      }
+      for (const message of chat.messages) {
+        const msg = message as Message & { tool_calls?: ToolCallRecord[] };
+        const toolCalls = msg.tool_calls;
+        if (!Array.isArray(toolCalls)) {
+          continue;
+        }
+        const match = toolCalls.find((tc) => tc?.id === toolCallId);
+        if (match) {
+          match.content = content;
+          return;
+        }
+      }
+    },
+    resolveAllPendingToolCalls(state, action: PayloadAction<{ chatId: string }>) {
+      const chat = state.chats.find((c) => c.id === action.payload.chatId);
+      if (!chat) return;
+      for (const message of chat.messages) {
+        const msg = message as Message & { tool_calls?: ToolCallRecord[] };
+        if (!Array.isArray(msg.tool_calls)) continue;
+        for (const tc of msg.tool_calls) {
+          if (tc && tc.content == null) {
+            tc.content = '';
+          }
+        }
+      }
+    },
+    setMessageFeedback(
+      state,
+      action: PayloadAction<{ chatId: string; messageId: string; feedback: 'up' | 'down' | null }>
+    ) {
+      const { chatId, messageId, feedback: nextFeedback } = action.payload;
+      const chat = state.chats.find((c) => c.id === chatId);
+      if (!chat) {
+        return;
+      }
+      if (!chat.feedback) {
+        chat.feedback = {};
+      }
+      if (nextFeedback === null) {
+        delete chat.feedback[messageId];
+      } else {
+        chat.feedback[messageId] = nextFeedback;
+      }
+    },
+    updateStreamingState(
+      state,
+      action: PayloadAction<{ chatId: string; state: Partial<StreamingState> }>
+    ) {
+      const { chatId, state: nextPartial } = action.payload;
+      const prev = state.streamingStates[chatId] ?? DEFAULT_STREAMING_STATE;
+      state.streamingStates[chatId] = { ...prev, ...nextPartial };
+    },
+    setError(state, action: PayloadAction<string | null>) {
+      state.error = action.payload;
+    },
+    setLoadingThreads(state, action: PayloadAction<boolean>) {
+      state.isLoadingThreads = action.payload;
+    },
+    setThreadsListHydrated(state, action: PayloadAction<boolean>) {
+      state.threadsListHydrated = action.payload;
+    },
+    resetChatsState() {
+      return initialState;
+    },
+  },
+});
+
+export const {
+  setChats,
+  addChat,
+  updateChat,
+  deleteChat,
+  clearAllChats,
+  appendMessageToChat,
+  removeLastMessageFromChat,
+  updateLastMessageInChat,
+  mergeToolResult,
+  resolveAllPendingToolCalls,
+  setMessageFeedback,
+  updateStreamingState,
+  setError,
+  setLoadingThreads,
+  setThreadsListHydrated,
+  resetChatsState,
+} = chatsSlice.actions;
+
+export function selectAllChats(state: { chats: ChatsState }) {
+  return state.chats.chats;
+}
+
+export function selectChatById(state: { chats: ChatsState }, chatId: string) {
+  return state.chats.chats.find((c) => c.id === chatId);
+}
+
+export function selectStreamingState(state: { chats: ChatsState }, chatId: string): StreamingState {
+  return state.chats.streamingStates[chatId] ?? DEFAULT_STREAMING_STATE;
+}
+
+export function selectIsLoadingThreads(state: { chats: ChatsState }) {
+  return state.chats.isLoadingThreads;
+}
+
+export function selectThreadsListHydrated(state: { chats: ChatsState }) {
+  return state.chats.threadsListHydrated;
+}
+
+export function selectChatsError(state: { chats: ChatsState }) {
+  return state.chats.error;
+}
+
+export default chatsSlice.reducer;
diff --git a/src/frontend/redux/slices/config.ts b/src/frontend/redux/slices/config.ts
new file mode 100644
index 00000000..91222b4b
--- /dev/null
+++ b/src/frontend/redux/slices/config.ts
@@ -0,0 +1,65 @@
+import { createSlice, createAsyncThunk, type PayloadAction } from "@reduxjs/toolkit";
+import { fetchBranding, fetchFeatures, type BrandingConfig, type FeaturesConfig } from "../../services/config.service";
+
+interface ConfigState {
+  branding: BrandingConfig | null;
+  features: FeaturesConfig | null;
+  loading: boolean;
+  error: string | null;
+}
+
+const initialState: ConfigState = {
+  branding: null,
+  features: null,
+  loading: false,
+  error: null,
+};
+
+// Async thunk to load all config
+export const loadConfig = createAsyncThunk(
+  "config/load",
+  async () => {
+    const [branding, features] = await Promise.all([
+      fetchBranding(),
+      fetchFeatures(),
+    ]);
+    return { branding, features };
+  }
+);
+
+const configSlice = createSlice({
+  name: "config",
+  initialState,
+  reducers: {
+    setBranding(state, action: PayloadAction<BrandingConfig>) {
+      state.branding = action.payload;
+    },
+    setFeatures(state, action: PayloadAction<FeaturesConfig>) {
+      state.features = action.payload;
+    },
+    setError(state, action: PayloadAction<string>) {
+      state.error = action.payload;
+      state.loading = false;
+    },
+  },
+  extraReducers: (builder) => {
+    builder
+      .addCase(loadConfig.pending, (state) => {
+        state.loading = true;
+        state.error = null;
+      })
+      .addCase(loadConfig.fulfilled, (state, action) => {
+        state.branding = action.payload.branding;
+        state.features = action.payload.features;
+        state.loading = false;
+        state.error = null;
+      })
+      .addCase(loadConfig.rejected, (state, action) => {
+        state.loading = false;
+        state.error = action.error.message || "Failed to load config";
+      });
+  },
+});
+
+export const { setBranding, setFeatures, setError } = configSlice.actions;
+export default configSlice.reducer;
diff --git a/src/frontend/redux/slices/personalization.ts b/src/frontend/redux/slices/personalization.ts
new file mode 100644
index 00000000..d4e62344
--- /dev/null
+++ b/src/frontend/redux/slices/personalization.ts
@@ -0,0 +1,133 @@
+import { createSelector, createSlice, PayloadAction } from '@reduxjs/toolkit';
+import { v4 as uuidv4 } from 'uuid';
+
+export interface MemoryItem {
+  id: string;
+  content: string;
+  createdAt: string;
+}
+
+export interface RuleItem {
+  id: string;
+  content: string;
+  isActive: boolean;
+  createdAt: string;
+}
+
+interface PersonalizationState {
+  memories: MemoryItem[];
+  rules: RuleItem[];
+}
+
+function storageKey(): string {
+  const userId = globalThis.window?.USER_DATA?.sub || globalThis.window?.USER_DATA?.preferred_username || '';
+  return userId ? `template-ui-personalization:${userId}` : 'template-ui-personalization';
+}
+
+function loadState(): PersonalizationState {
+  return { memories: [], rules: [] };
+}
+
+function persist(state: PersonalizationState) {
+  try {
+    localStorage.setItem(storageKey(), JSON.stringify(state));
+  } catch {
+    /* ignore */
+  }
+}
+
+const personalizationSlice = createSlice({
+  name: 'personalization',
+  initialState: loadState(),
+  reducers: {
+    addMemory(state, action: PayloadAction<string>) {
+      state.memories.unshift({
+        id: uuidv4(),
+        content: action.payload,
+        createdAt: new Date().toISOString(),
+      });
+      persist(state);
+    },
+    removeMemory(state, action: PayloadAction<string>) {
+      state.memories = state.memories.filter((m) => m.id !== action.payload);
+      persist(state);
+    },
+    setMemories(state, action: PayloadAction<Array<{ id: string; content: string }>>) {
+      state.memories = action.payload.map((m) => ({
+        id: m.id,
+        content: m.content,
+        createdAt: new Date().toISOString(),
+      }));
+      persist(state);
+    },
+    clearMemories(state) {
+      state.memories = [];
+      persist(state);
+    },
+
+    addRule(state, action: PayloadAction<string>) {
+      state.rules.unshift({
+        id: uuidv4(),
+        content: action.payload,
+        isActive: true,
+        createdAt: new Date().toISOString(),
+      });
+      persist(state);
+    },
+    updateRule(state, action: PayloadAction<{ id: string; content: string }>) {
+      const rule = state.rules.find((r) => r.id === action.payload.id);
+      if (rule) rule.content = action.payload.content;
+      persist(state);
+    },
+    toggleRule(state, action: PayloadAction<string>) {
+      const rule = state.rules.find((r) => r.id === action.payload);
+      if (rule) rule.isActive = !rule.isActive;
+      persist(state);
+    },
+    removeRule(state, action: PayloadAction<string>) {
+      state.rules = state.rules.filter((r) => r.id !== action.payload);
+      persist(state);
+    },
+    clearRules(state) {
+      state.rules = [];
+      persist(state);
+    },
+    setRules(state, action: PayloadAction<Array<{ id: string; content: string; isActive: boolean }>>) {
+      state.rules = action.payload.map((r) => ({
+        ...r,
+        createdAt: new Date().toISOString(),
+      }));
+      persist(state);
+    },
+    resetPersonalization(state) {
+      state.memories = [];
+      state.rules = [];
+      persist(state);
+    },
+  },
+});
+
+export const {
+  addMemory,
+  setMemories,
+  removeMemory,
+  clearMemories,
+  addRule,
+  updateRule,
+  toggleRule,
+  removeRule,
+  clearRules,
+  setRules,
+  resetPersonalization,
+} = personalizationSlice.actions;
+
+export const selectMemories = (state: { personalization: PersonalizationState }) =>
+  state.personalization.memories;
+export const selectRules = (state: { personalization: PersonalizationState }) =>
+  state.personalization.rules;
+export const selectActiveRules = createSelector(
+  selectRules,
+  (rules) => rules.filter((r) => r.isActive),
+);
+
+export default personalizationSlice.reducer;
diff --git a/src/frontend/redux/slices/toasts.ts b/src/frontend/redux/slices/toasts.ts
new file mode 100644
index 00000000..0eee8299
--- /dev/null
+++ b/src/frontend/redux/slices/toasts.ts
@@ -0,0 +1,44 @@
+import { createSlice, PayloadAction } from '@reduxjs/toolkit';
+
+export type ToastVariant = 'success' | 'danger' | 'warning' | 'info';
+
+export interface Toast {
+  id: string;
+  title: string;
+  message?: string;
+  variant: ToastVariant;
+}
+
+interface ToastsState {
+  toasts: Toast[];
+}
+
+const initialState: ToastsState = {
+  toasts: [],
+};
+
+let nextId = 0;
+
+const toastsSlice = createSlice({
+  name: 'toasts',
+  initialState,
+  reducers: {
+    addToast(state, action: PayloadAction<Omit<Toast, 'id'>>) {
+      state.toasts.push({ ...action.payload, id: `toast-${++nextId}` });
+    },
+    removeToast(state, action: PayloadAction<string>) {
+      state.toasts = state.toasts.filter((t) => t.id !== action.payload);
+    },
+    clearAllToasts(state) {
+      state.toasts = [];
+    },
+  },
+});
+
+export const { addToast, removeToast, clearAllToasts } = toastsSlice.actions;
+
+export function selectToasts(state: { toasts: ToastsState }) {
+  return state.toasts.toasts;
+}
+
+export default toastsSlice.reducer;
diff --git a/src/frontend/redux/slices/userSettings.test.ts b/src/frontend/redux/slices/userSettings.test.ts
new file mode 100644
index 00000000..555c6fb3
--- /dev/null
+++ b/src/frontend/redux/slices/userSettings.test.ts
@@ -0,0 +1,142 @@
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import userSettingsReducer, {
+  addAlwaysAllowedTool,
+  clearAlwaysAllowedTools,
+  removeAlwaysAllowedTool,
+  setAutoApproveAllTools,
+  setConfigDefaults,
+  setDebugMode,
+  setTheme,
+  toggleAutoApproveAllTools,
+  toggleTheme,
+} from './userSettings';
+
+function freshState() {
+  // localStorage may have data from other tests; clear it first
+  localStorage.removeItem('template-ui-settings');
+  return userSettingsReducer(undefined, { type: '@@INIT' });
+}
+
+describe('userSettings slice', () => {
+  beforeEach(() => {
+    localStorage.clear();
+  });
+
+  // ── Theme ──────────────────────────────────────────────────────────────────
+  it('setTheme sets the theme and persists to localStorage', () => {
+    const s = userSettingsReducer(freshState(), setTheme('light'));
+    expect(s.theme).toBe('light');
+    const stored = JSON.parse(localStorage.getItem('template-ui-settings')!);
+    expect(stored.theme).toBe('light');
+  });
+
+  it('toggleTheme flips from dark to light', () => {
+    const base = userSettingsReducer(freshState(), setTheme('dark'));
+    const s = userSettingsReducer(base, toggleTheme());
+    expect(s.theme).toBe('light');
+  });
+
+  it('toggleTheme flips from light to dark', () => {
+    const base = userSettingsReducer(freshState(), setTheme('light'));
+    const s = userSettingsReducer(base, toggleTheme());
+    expect(s.theme).toBe('dark');
+  });
+
+  // ── Always-allowed tools ───────────────────────────────────────────────────
+  it('addAlwaysAllowedTool adds a tool name', () => {
+    const s = userSettingsReducer(freshState(), addAlwaysAllowedTool('github_search'));
+    expect(s.alwaysAllowedTools).toContain('github_search');
+  });
+
+  it('addAlwaysAllowedTool is idempotent — no duplicates', () => {
+    let s = userSettingsReducer(freshState(), addAlwaysAllowedTool('github_search'));
+    s = userSettingsReducer(s, addAlwaysAllowedTool('github_search'));
+    expect(s.alwaysAllowedTools.filter((t) => t === 'github_search')).toHaveLength(1);
+  });
+
+  it('removeAlwaysAllowedTool removes the tool', () => {
+    let s = userSettingsReducer(freshState(), addAlwaysAllowedTool('github_search'));
+    s = userSettingsReducer(s, addAlwaysAllowedTool('web_search'));
+    s = userSettingsReducer(s, removeAlwaysAllowedTool('github_search'));
+    expect(s.alwaysAllowedTools).not.toContain('github_search');
+    expect(s.alwaysAllowedTools).toContain('web_search');
+  });
+
+  it('clearAlwaysAllowedTools empties the list', () => {
+    let s = userSettingsReducer(freshState(), addAlwaysAllowedTool('a'));
+    s = userSettingsReducer(s, addAlwaysAllowedTool('b'));
+    s = userSettingsReducer(s, clearAlwaysAllowedTools());
+    expect(s.alwaysAllowedTools).toHaveLength(0);
+  });
+
+  // ── Auto-approve all tools ─────────────────────────────────────────────────
+  it('setAutoApproveAllTools sets the flag', () => {
+    const s = userSettingsReducer(freshState(), setAutoApproveAllTools(true));
+    expect(s.autoApproveAllTools).toBe(true);
+  });
+
+  it('toggleAutoApproveAllTools flips the flag', () => {
+    let s = userSettingsReducer(freshState(), setAutoApproveAllTools(false));
+    s = userSettingsReducer(s, toggleAutoApproveAllTools());
+    expect(s.autoApproveAllTools).toBe(true);
+    s = userSettingsReducer(s, toggleAutoApproveAllTools());
+    expect(s.autoApproveAllTools).toBe(false);
+  });
+
+  // ── Debug mode ────────────────────────────────────────────────────────────
+  it('setDebugMode sets debugMode and records user override', () => {
+    const s = userSettingsReducer(freshState(), setDebugMode(true));
+    expect(s.debugMode).toBe(true);
+    expect(s._userOverrides.debugMode).toBe(true);
+  });
+
+  it('setConfigDefaults applies debug_mode_default when no user override', () => {
+    const s = userSettingsReducer(freshState(), setConfigDefaults({ debug_mode_default: true }));
+    expect(s.debugMode).toBe(true);
+  });
+
+  it('setConfigDefaults does NOT override when user has explicitly set debug mode', () => {
+    let s = userSettingsReducer(freshState(), setDebugMode(false));
+    s = userSettingsReducer(s, setConfigDefaults({ debug_mode_default: true }));
+    // User said false, config says true — user wins
+    expect(s.debugMode).toBe(false);
+  });
+
+  // ── localStorage persistence ───────────────────────────────────────────────
+  it('settings changes are persisted to localStorage', () => {
+    userSettingsReducer(freshState(), addAlwaysAllowedTool('my_tool'));
+    const stored = JSON.parse(localStorage.getItem('template-ui-settings')!);
+    expect(stored.alwaysAllowedTools).toContain('my_tool');
+  });
+
+  it('falls back to defaults when localStorage contains malformed JSON', async () => {
+    localStorage.setItem('template-ui-settings', '{this is not valid json}');
+    // Re-import forces loadSettings() to run fresh with the malformed data in localStorage
+    vi.resetModules();
+    const { default: freshReducer } = await import('./userSettings');
+    const s = freshReducer(undefined, { type: '@@INIT' });
+    expect(s.theme).toBe('dark'); // default
+    expect(s.alwaysAllowedTools).toEqual([]); // default
+  });
+
+  it('loads persisted settings from localStorage on init', async () => {
+    // Populate localStorage before the module is re-imported
+    localStorage.setItem(
+      'template-ui-settings',
+      JSON.stringify({
+        theme: 'light',
+        alwaysAllowedTools: ['saved_tool'],
+        autoApproveAllTools: false,
+        _userOverrides: {},
+        debugMode: false,
+      }),
+    );
+    // Reset the module cache so userSettings.ts calls loadSettings() again
+    // with the updated localStorage, re-computing initialState.
+    vi.resetModules();
+    const { default: freshReducer } = await import('./userSettings');
+    const s = freshReducer(undefined, { type: '@@INIT' });
+    expect(s.theme).toBe('light');
+    expect(s.alwaysAllowedTools).toContain('saved_tool');
+  });
+});
diff --git a/src/frontend/redux/slices/userSettings.ts b/src/frontend/redux/slices/userSettings.ts
new file mode 100644
index 00000000..3c819900
--- /dev/null
+++ b/src/frontend/redux/slices/userSettings.ts
@@ -0,0 +1,115 @@
+import { createSlice, PayloadAction } from '@reduxjs/toolkit';
+
+type Theme = 'light' | 'dark';
+
+interface UserSettingsState {
+  theme: Theme;
+  debugMode: boolean;
+  alwaysAllowedTools: string[];
+  autoApproveAllTools: boolean;
+  _userOverrides: { debugMode?: boolean };
+}
+
+const STORAGE_KEY = 'template-ui-settings';
+
+function loadSettings(): UserSettingsState {
+  try {
+    const stored = localStorage.getItem(STORAGE_KEY);
+    if (stored) {
+      const parsed = JSON.parse(stored);
+      return {
+        theme: parsed.theme ?? 'dark',
+        debugMode: parsed.debugMode ?? false,
+        alwaysAllowedTools: Array.isArray(parsed.alwaysAllowedTools) ? parsed.alwaysAllowedTools : [],
+        autoApproveAllTools: parsed.autoApproveAllTools ?? false,
+        _userOverrides: parsed._userOverrides ?? {},
+      };
+    }
+  } catch {
+    // ignore
+  }
+  return {
+    theme: 'dark',
+    debugMode: false,
+    alwaysAllowedTools: [],
+    autoApproveAllTools: false,
+    _userOverrides: {},
+  };
+}
+
+function persistSettings(settings: UserSettingsState) {
+  try {
+    localStorage.setItem(STORAGE_KEY, JSON.stringify(settings));
+  } catch {
+    // ignore
+  }
+}
+
+const userSettingsSlice = createSlice({
+  name: 'userSettings',
+  initialState: loadSettings(),
+  reducers: {
+    setTheme(state, action: PayloadAction<Theme>) {
+      state.theme = action.payload;
+      persistSettings(state);
+    },
+    toggleTheme(state) {
+      state.theme = state.theme === 'dark' ? 'light' : 'dark';
+      persistSettings(state);
+    },
+    setDebugMode(state, action: PayloadAction<boolean>) {
+      state.debugMode = action.payload;
+      state._userOverrides.debugMode = true;
+      persistSettings(state);
+    },
+    setConfigDefaults(state, action: PayloadAction<{ debug_mode_default: boolean }>) {
+      if (!state._userOverrides.debugMode) {
+        state.debugMode = action.payload.debug_mode_default;
+      }
+      persistSettings(state);
+    },
+    addAlwaysAllowedTool(state, action: PayloadAction<string>) {
+      if (!state.alwaysAllowedTools.includes(action.payload)) {
+        state.alwaysAllowedTools.push(action.payload);
+        persistSettings(state);
+      }
+    },
+    removeAlwaysAllowedTool(state, action: PayloadAction<string>) {
+      state.alwaysAllowedTools = state.alwaysAllowedTools.filter((t) => t !== action.payload);
+      persistSettings(state);
+    },
+    clearAlwaysAllowedTools(state) {
+      state.alwaysAllowedTools = [];
+      persistSettings(state);
+    },
+    setAutoApproveAllTools(state, action: PayloadAction<boolean>) {
+      state.autoApproveAllTools = action.payload;
+      persistSettings(state);
+    },
+    toggleAutoApproveAllTools(state) {
+      state.autoApproveAllTools = !state.autoApproveAllTools;
+      persistSettings(state);
+    },
+  },
+});
+
+export const {
+  setTheme,
+  toggleTheme,
+  setDebugMode,
+  setConfigDefaults,
+  addAlwaysAllowedTool,
+  removeAlwaysAllowedTool,
+  clearAlwaysAllowedTools,
+  setAutoApproveAllTools,
+  toggleAutoApproveAllTools,
+} = userSettingsSlice.actions;
+
+export const selectTheme = (state: { userSettings: UserSettingsState }) => state.userSettings.theme;
+export const selectDebugMode = (state: { userSettings: UserSettingsState }) => state.userSettings.debugMode;
+export const selectAlwaysAllowedTools = (state: { userSettings: UserSettingsState }) =>
+  state.userSettings.alwaysAllowedTools;
+export const selectAutoApproveAllTools = (state: { userSettings: UserSettingsState }) =>
+  state.userSettings.autoApproveAllTools;
+
+export default userSettingsSlice.reducer;
diff --git a/src/frontend/redux/store.ts b/src/frontend/redux/store.ts
new file mode 100644
index 00000000..c81a1f30
--- /dev/null
+++ b/src/frontend/redux/store.ts
@@ -0,0 +1,26 @@
+import { configureStore } from '@reduxjs/toolkit';
+import chatsReducer from './slices/chats';
+import configReducer from './slices/config';
+import personalizationReducer from './slices/personalization';
+import toastsReducer from './slices/toasts';
+import userSettingsReducer from './slices/userSettings';
+
+export const store = configureStore({
+  reducer: {
+    chats: chatsReducer,
+    config: configReducer,
+    personalization: personalizationReducer,
+    toasts: toastsReducer,
+    userSettings: userSettingsReducer,
+  },
+  middleware: (getDefaultMiddleware) =>
+    getDefaultMiddleware({
+      serializableCheck: {
+        ignoredPaths: ['chats.chats'],
+        ignoredActions: ['chats/addChat', 'chats/updateChat', 'chats/setChats'],
+      },
+    }),
+});
+
+export type RootState = ReturnType<typeof store.getState>;
+export type AppDispatch = typeof store.dispatch;
diff --git a/src/frontend/services/agent-rest.ts b/src/frontend/services/agent-rest.ts
index b918709e..d7c8428f 100644
--- a/src/frontend/services/agent-rest.ts
+++ b/src/frontend/services/agent-rest.ts
@@ -1,90 +1,311 @@
 import { AIMessage, Message } from "@langchain/langgraph-sdk";
+import { authenticatedFetch } from "./authenticated-fetch";
+import { buildAgentApiUrl } from "../lib/app-paths";
 
 export interface Thread {
-    id: string;
-    messages: Message[];
+  id: string;
+  title?: string;
+  messages: Message[];
+  updatedAt?: string;
 }
 
-// Note: APP_DATA type is declared in types/user.ts
+/**
+ * When a supervisor agent echoes a sub-agent's response, the stored
+ * content array contains both the original structured text block and
+ * a raw-string echo that partially repeats it.  After joining the
+ * parts into a single string, this function finds and strips the
+ * longest repeated region (≥ 80 chars, ≥ 15 % of total length).
+ */
+function deduplicateEcho(text: string): string {
+  const MIN_OVERLAP = 80;
+  if (text.length < MIN_OVERLAP * 2) return text;
 
-const apiUrl = window.APP_DATA.apiUrl;
+  for (let i = 0; i < text.length - MIN_OVERLAP; i++) {
+    const pattern = text.substring(i, i + MIN_OVERLAP);
+    const secondPos = text.indexOf(pattern, i + MIN_OVERLAP);
+    if (secondPos === -1) continue;
+
+    let matchEnd = MIN_OVERLAP;
+    while (
+      i + matchEnd < secondPos &&
+      secondPos + matchEnd < text.length &&
+      text[i + matchEnd] === text[secondPos + matchEnd]
+    ) {
+      matchEnd++;
+    }
+
+    if (matchEnd < text.length * 0.15) continue;
+
+    return text.substring(0, secondPos) + text.substring(secondPos + matchEnd);
+  }
+  return text;
+}
+
+/**
+ * Gemini-style models return content as [{type:"text", text:"..."}] arrays.
+ * Normalize to a plain string so the UI can render it directly.
+ * When mixed structured + raw-string blocks are detected (supervisor echo
+ * pattern), applies deduplication.
+ */
+function normalizeContent(content: unknown): string {
+  if (typeof content === 'string') return content;
+  if (Array.isArray(content)) {
+    const hasStructured = content.some((b: any) => b?.type === 'text');
+    const hasRaw = content.some((b: any) => typeof b === 'string');
+    const joined = content
+      .map((b: any) => {
+        if (typeof b === 'string') return b;
+        if (b?.type === 'text' && typeof b.text === 'string') return b.text;
+        return '';
+      })
+      .join('');
+    return hasStructured && hasRaw ? deduplicateEcho(joined) : joined;
+  }
+  return typeof content === 'object' ? JSON.stringify(content) : String(content ?? '');
+}
+
+function normalizeMessages(messages: any[]): Message[] {
+  return messages.map((m) => ({
+    ...m,
+    content: normalizeContent(m.content),
+  }));
+}
 
 function combineToolCallandResult(messages: Message[]) {
-    const newMessages: Message[] = [];
-    messages.forEach((message) => {
-        if (message.type !== 'tool') {
-            newMessages.push(message);
-        } else {
-
-            const toolCallId = message.tool_call_id;
-
-            for (let i = 0; i < newMessages.length; i++) {
-                if (newMessages[i].type === 'ai') {
-                    if (Array.isArray((newMessages[i] as AIMessage)?.tool_calls) && ((newMessages[i] as AIMessage)?.tool_calls?.length ?? 0) > 0 && toolCallId) {
-
-                        const toolCall = (newMessages[i] as AIMessage)?.tool_calls?.find((toolCall) => toolCall.id === toolCallId);
-                        if (toolCall) {
-                            (toolCall as any).content = message.content;
-                        }
-                    }
-                }
+  const newMessages: Message[] = [];
+  messages.forEach((message) => {
+    if (message.type !== 'tool') {
+      newMessages.push({ ...message });
+    } else {
+      const toolCallId = message.tool_call_id;
+      for (let i = 0; i < newMessages.length; i++) {
+        if (newMessages[i].type === 'ai') {
+          const aiMsg = newMessages[i] as AIMessage;
+          if (Array.isArray(aiMsg.tool_calls) && aiMsg.tool_calls.length > 0 && toolCallId) {
+            const idx = aiMsg.tool_calls.findIndex((tc) => tc.id === toolCallId);
+            if (idx !== -1) {
+              const updated = aiMsg.tool_calls.map((tc, j) =>
+                j === idx ? { ...tc, content: normalizeContent(message.content) } : { ...tc },
+              );
+              newMessages[i] = { ...aiMsg, tool_calls: updated } as any;
             }
+          }
         }
-    })
-    return newMessages;
+      }
+    }
+  });
+  return newMessages;
+}
 
+function getAuthHeaders(includeContentType = true): Record<string, string> {
+  const headers: Record<string, string> = {};
+  if (includeContentType) {
+    headers['Content-Type'] = 'application/json';
+  }
+  if (window.USER_DATA?.accessToken) {
+    headers['X-Token'] = window.USER_DATA.accessToken;
+  }
+  return headers;
 }
 
+/**
+ * Lightweight thread listing — returns thread IDs and metadata only.
+ * Does NOT fetch full state (which is extremely slow per-thread).
+ */
+export async function getAllThreadsByUserId(userId: string): Promise<Thread[]> {
+  const searchUrl = buildAgentApiUrl('/threads/search');
 
-export async function getThreadIdsByUserId(userId: string) {
-    const headers: Record<string, string> = {
-        "Content-Type": "application/json",
-    };
+  let response: Response;
+  try {
+    response = await authenticatedFetch(searchUrl, {
+      method: 'POST',
+      headers: getAuthHeaders(),
+      body: JSON.stringify({
+        metadata: { user_identity: userId },
+        limit: 50,
+      }),
+    });
+  } catch {
+    return [];
+  }
 
-    // Add SSO token if available
-    if (window.USER_DATA?.accessToken) {
-        headers["X-Token"] = window.USER_DATA.accessToken;
-    }
+  if (!response.ok) return [];
+
+  const results = await response.json();
+  if (!Array.isArray(results)) return [];
+
+  return results
+    .filter((t: any) => t.thread_id)
+    .map((t: any) => ({
+      id: t.thread_id,
+      title: t.metadata?.thread_name,
+      messages: [],
+      updatedAt: t.updated_at || t.created_at,
+    }));
+}
 
-    const threadIds = await fetch(`${apiUrl}/v1/threads/${userId}`, {
-        method: "GET",
-        headers,
+/**
+ * Delete a thread from the backend (LangGraph Platform).
+ * Returns true if the deletion succeeded (or thread was already gone).
+ */
+export async function deleteThread(threadId: string): Promise<boolean> {
+  const deleteUrl = buildAgentApiUrl(`/threads/${threadId}`);
+
+  try {
+    const resp = await authenticatedFetch(deleteUrl, {
+      method: 'DELETE',
+      headers: getAuthHeaders(false),
     });
+    return resp.ok || resp.status === 404;
+  } catch {
+    return false;
+  }
+}
 
-    return threadIds.json();
+/**
+ * List all memories from the backend for the authenticated user.
+ */
+export async function listMemories(): Promise<Array<{ id: string; content: string }>> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl('/memories'), {
+      headers: getAuthHeaders(),
+    });
+    if (!resp.ok) return [];
+    const data = await resp.json();
+    return data.memories || [];
+  } catch {
+    return [];
+  }
 }
 
-export async function gethistoryByThreadId(threadId: string) {
-    const headers: Record<string, string> = {
-        "Content-Type": "application/json",
-    };
+/**
+ * Create a persistent memory on the backend for the authenticated user.
+ */
+export async function createMemory(content: string): Promise<boolean> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl('/memories'), {
+      method: 'POST',
+      headers: getAuthHeaders(),
+      body: JSON.stringify({ content }),
+    });
+    return resp.ok;
+  } catch {
+    return false;
+  }
+}
 
-    // Add SSO token if available
-    if (window.USER_DATA?.accessToken) {
-        headers["X-Token"] = window.USER_DATA.accessToken;
-    }
+/**
+ * Delete a single memory from the backend.
+ */
+export async function deleteMemory(memoryId: string): Promise<boolean> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl(`/memories/${memoryId}`), {
+      method: 'DELETE',
+      headers: getAuthHeaders(false),
+    });
+    return resp.ok || resp.status === 404;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Delete all memories for the authenticated user.
+ */
+export async function deleteAllMemories(): Promise<boolean> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl('/memories'), {
+      method: 'DELETE',
+      headers: getAuthHeaders(false),
+    });
+    return resp.ok;
+  } catch {
+    return false;
+  }
+}
 
-    const history = await fetch(`${apiUrl}/v1/history/${threadId}`, {
-        method: "GET",
-        headers,
+/**
+ * List all rules from the backend for the authenticated user.
+ */
+export async function listRules(): Promise<Array<{ id: string; content: string; is_active: boolean }>> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl('/rules'), {
+      headers: getAuthHeaders(),
     });
-    return history.json().then(history => {
-        console.log(history);
-        history.id = threadId;
-        return history;
+    if (!resp.ok) return [];
+    const data = await resp.json();
+    return data.rules || [];
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * Create a rule on the backend for the authenticated user.
+ */
+export async function createRule(content: string): Promise<boolean> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl('/rules'), {
+      method: 'POST',
+      headers: getAuthHeaders(),
+      body: JSON.stringify({ content, is_active: true }),
     });
+    return resp.ok;
+  } catch {
+    return false;
+  }
 }
 
-export async function getAllThreadsByUserId(userId: string) {
-    const threadIds = await getThreadIdsByUserId(userId);
-    console.log('threadIds: ', threadIds);
-    const threads = await Promise.all(threadIds.map(gethistoryByThreadId)) as Thread[];
-    console.log('threads: ', threads);
-    const transformed = threads.map(thread => {
-        return {
-            ...thread,
-            messages: combineToolCallandResult(thread.messages)
-        }
-    })
-    return transformed;
-}
\ No newline at end of file
+/**
+ * Delete a single rule from the backend.
+ */
+export async function deleteRule(ruleId: string): Promise<boolean> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl(`/rules/${ruleId}`), {
+      method: 'DELETE',
+      headers: getAuthHeaders(false),
+    });
+    return resp.ok || resp.status === 404;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Delete all rules for the authenticated user.
+ */
+export async function deleteAllRules(): Promise<boolean> {
+  try {
+    const resp = await authenticatedFetch(buildAgentApiUrl('/rules'), {
+      method: 'DELETE',
+      headers: getAuthHeaders(false),
+    });
+    return resp.ok;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Fetch full state for a single thread (lazy, on-demand).
+ * Called only when a user navigates into a specific chat.
+ */
+export async function getThreadState(threadId: string): Promise<Message[]> {
+  const stateUrl = buildAgentApiUrl(`/threads/${threadId}/state`);
+
+  try {
+    const resp = await authenticatedFetch(stateUrl, {
+      headers: getAuthHeaders(),
+    });
+    if (!resp.ok) return [];
+
+    const state = await resp.json();
+    const msgs = state?.values?.messages;
+    if (Array.isArray(msgs) && msgs.length > 0) {
+      return combineToolCallandResult(normalizeMessages(msgs));
+    }
+  } catch {
+    // Fall through
+  }
+  return [];
+}
diff --git a/src/frontend/services/authenticated-fetch.ts b/src/frontend/services/authenticated-fetch.ts
new file mode 100644
index 00000000..697f8da9
--- /dev/null
+++ b/src/frontend/services/authenticated-fetch.ts
@@ -0,0 +1,77 @@
+type AuthExpiredCallback = () => void | Promise<void>;
+type RateLimitCallback = (retryAfterSeconds: number) => void | Promise<void>;
+
+let onAuthExpired: AuthExpiredCallback | null = null;
+let onRateLimited: RateLimitCallback | null = null;
+
+export function setAuthExpiredCallback(cb: AuthExpiredCallback | null) {
+  onAuthExpired = cb;
+}
+
+export function setRateLimitCallback(cb: RateLimitCallback | null) {
+  onRateLimited = cb;
+}
+
+/**
+ * Parse `Retry-After` per RFC 7231: delta-seconds or HTTP-date.
+ */
+export function parseRetryAfterSeconds(header: string | null): number {
+  if (header == null || header.trim() === '') {
+    return 5;
+  }
+  const trimmed = header.trim();
+  const asInt = Number.parseInt(trimmed, 10);
+  if (!Number.isNaN(asInt) && String(asInt) === trimmed) {
+    return Math.max(0, asInt);
+  }
+  const dateMs = Date.parse(trimmed);
+  if (!Number.isNaN(dateMs)) {
+    return Math.max(0, Math.ceil((dateMs - Date.now()) / 1000));
+  }
+  return 5;
+}
+
+/**
+ * Notify the UI of an active rate limit (e.g. manual trigger or shared with stream layer).
+ */
+export function triggerRateLimit(retryAfterSeconds: number) {
+  void Promise.resolve(onRateLimited?.(retryAfterSeconds));
+}
+
+/**
+ * Notify the app that the session is no longer valid (e.g. refresh failed).
+ * Used by timers or other non-fetch code paths to match authenticatedFetch 401 handling.
+ */
+export function notifySessionExpired() {
+  void Promise.resolve(onAuthExpired?.());
+}
+
+export async function authenticatedFetch(
+  input: RequestInfo | URL,
+  init?: RequestInit
+): Promise<Response> {
+  const headers = new Headers(init?.headers);
+
+  if (!headers.has('Content-Type')) {
+    headers.set('Content-Type', 'application/json');
+  }
+
+  const response = await fetch(input, { ...init, headers, credentials: 'include' });
+
+  if (response.status === 401 && onAuthExpired) {
+    void Promise.resolve(onAuthExpired());
+    throw new Error('Session expired. Please try again.');
+  }
+
+  if (response.status === 429) {
+    const retryAfterHeader = response.headers.get('Retry-After');
+    const retrySeconds = parseRetryAfterSeconds(retryAfterHeader);
+    void Promise.resolve(onRateLimited?.(retrySeconds));
+    const retryMs = retrySeconds * 1000;
+    const error = new Error(`Rate limited. Retry after ${retryMs}ms`);
+    (error as Error & { retryAfterMs?: number }).retryAfterMs = retryMs;
+    throw error;
+  }
+
+  return response;
+}
diff --git a/src/frontend/services/chatStorage.ts b/src/frontend/services/chatStorage.ts
index f2d0166a..d83823f8 100644
--- a/src/frontend/services/chatStorage.ts
+++ b/src/frontend/services/chatStorage.ts
@@ -1,8 +1,12 @@
 import { ChatItem } from '../types/chat';
 
 class ChatStorageService {
-  private readonly CHATS_STORAGE_KEY = 'dataverse-ai-chats';
-  private readonly MAX_CHATS = 50; // Limit to prevent localStorage bloat
+  private readonly MAX_CHATS = 50;
+
+  private get CHATS_STORAGE_KEY(): string {
+    const userId = globalThis.window?.USER_DATA?.sub || globalThis.window?.USER_DATA?.preferred_username || '';
+    return userId ? `dataverse-ai-chats:${userId}` : 'dataverse-ai-chats';
+  }
 
   /**
    * Save chats to localStorage with error handling and size limits
@@ -42,6 +46,7 @@ class ChatStorageService {
         timestamp: new Date(),
         preview: messages[messages.length - 1]?.content,
         historicalActivities: {},
+        feedback: {},
       });
     }
     return this.saveChats(chats);
@@ -64,7 +69,8 @@ class ChatStorageService {
           ...chat,
           timestamp: new Date(chat.timestamp), // Convert string back to Date
           messages: chat.messages || [],
-          historicalActivities: chat.historicalActivities || {}
+          historicalActivities: chat.historicalActivities || {},
+          feedback: chat.feedback ?? {},
         }));
     } catch (error) {
       console.error('Error loading chats from localStorage:', error);
diff --git a/src/frontend/services/config.service.ts b/src/frontend/services/config.service.ts
new file mode 100644
index 00000000..783acac4
--- /dev/null
+++ b/src/frontend/services/config.service.ts
@@ -0,0 +1,42 @@
+export interface BrandingThemeColors {
+  primary: string;
+  accent: string;
+  background: string;
+  foreground: string;
+}
+
+export interface BrandingConfig {
+  logo_url: string;
+  title: string;
+  favicon_url?: string;
+  colors: {
+    light: BrandingThemeColors;
+    dark: BrandingThemeColors;
+  };
+}
+
+export interface FeaturesConfig {
+  debug_mode_default: boolean;
+  auth_enabled: boolean;
+}
+
+function getConfigApiBase(): string {
+  const basePath = (window.APP_DATA?.basePath || '').replace(/\/$/, '');
+  return `${basePath}/api/config`;
+}
+
+export const fetchBranding = async (): Promise<BrandingConfig> => {
+  const res = await fetch(`${getConfigApiBase()}/branding`);
+  if (!res.ok) {
+    throw new Error("Failed to load branding config");
+  }
+  return res.json();
+};
+
+export const fetchFeatures = async (): Promise<FeaturesConfig> => {
+  const res = await fetch(`${getConfigApiBase()}/features`);
+  if (!res.ok) {
+    throw new Error("Failed to load features config");
+  }
+  return res.json();
+};
diff --git a/src/frontend/services/export-chat.ts b/src/frontend/services/export-chat.ts
new file mode 100644
index 00000000..90f503a2
--- /dev/null
+++ b/src/frontend/services/export-chat.ts
@@ -0,0 +1,50 @@
+import type { Message } from '@langchain/langgraph-sdk';
+
+function extractMessageText(content: unknown): string {
+  if (typeof content === 'string') return content;
+  if (Array.isArray(content)) {
+    return content
+      .map((b: unknown) => {
+        if (typeof b === 'string') return b;
+        if (b && typeof b === 'object' && 'type' in b && 'text' in b) {
+          const block = b as { type: string; text: string };
+          if (block.type === 'text' && typeof block.text === 'string') return block.text;
+        }
+        return '';
+      })
+      .join('');
+  }
+  return '';
+}
+
+export function exportAsMarkdown(messages: Message[], title: string): string {
+  const lines: string[] = [`# ${title}`, ''];
+  for (const m of messages) {
+    if (m.type === 'tool') continue;
+    const role =
+      m.type === 'human' ? 'Human' : m.type === 'ai' ? 'Assistant' : String(m.type);
+    lines.push(`## ${role}`, '', extractMessageText(m.content), '');
+  }
+  return lines.join('\n').trimEnd() + '\n';
+}
+
+export function exportAsJSON(messages: Message[], title: string): string {
+  return JSON.stringify({ title, exportedAt: new Date().toISOString(), messages }, null, 2);
+}
+
+export function downloadFile(content: string, filename: string, mimeType: string): void {
+  const blob = new Blob([content], { type: mimeType });
+  const url = URL.createObjectURL(blob);
+  const a = document.createElement('a');
+  a.href = url;
+  a.download = filename;
+  document.body.appendChild(a);
+  a.click();
+  a.remove();
+  URL.revokeObjectURL(url);
+}
+
+export function slugifyExportBase(title: string): string {
+  const s = title.trim().replace(/[^a-z0-9-_]+/gi, '-').replace(/^-+|-+$/g, '');
+  return s.length > 0 ? s.slice(0, 80) : 'chat';
+}
diff --git a/src/frontend/services/feedback-api.ts b/src/frontend/services/feedback-api.ts
new file mode 100644
index 00000000..c8b8dc81
--- /dev/null
+++ b/src/frontend/services/feedback-api.ts
@@ -0,0 +1,53 @@
+import { authenticatedFetch } from './authenticated-fetch';
+import { buildAgentApiUrl } from '../lib/app-paths';
+
+export interface FeedbackPayload {
+  traceId: string;
+  name: string;
+  value: number;
+  comment?: string;
+  threadId?: string;
+  messageId?: string;
+  userId?: string;
+}
+
+function getCurrentUserId(): string {
+  return window.USER_DATA?.sub || window.USER_DATA?.preferred_username || 'anonymous';
+}
+
+export async function submitFeedback(payload: FeedbackPayload): Promise<void> {
+  const userId = payload.userId || getCurrentUserId();
+  const response = await authenticatedFetch(buildAgentApiUrl('/feedback'), {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      trace_id: payload.traceId,
+      name: payload.name,
+      value: payload.value,
+      kwargs: payload.comment ? { comment: payload.comment } : {},
+      thread_id: payload.threadId,
+      message_id: payload.messageId,
+      user_id: userId,
+    }),
+  });
+  if (!response.ok) {
+    throw new Error(`Feedback failed: ${response.status}`);
+  }
+}
+
+export async function getThreadFeedback(
+  threadId: string,
+  userId?: string,
+): Promise<Record<string, 'up' | 'down'>> {
+  const effectiveUserId = userId || getCurrentUserId();
+  const response = await authenticatedFetch(
+    `${buildAgentApiUrl(`/feedback/${encodeURIComponent(threadId)}`)}?user_id=${encodeURIComponent(effectiveUserId)}`,
+  );
+  if (!response.ok) return {};
+  const data = (await response.json()) as { feedback?: Array<{ message_id: string; feedback: 'up' | 'down' }> };
+  const result: Record<string, 'up' | 'down'> = {};
+  for (const item of data.feedback || []) {
+    result[item.message_id] = item.feedback;
+  }
+  return result;
+}
diff --git a/src/frontend/services/logout.ts b/src/frontend/services/logout.ts
new file mode 100644
index 00000000..12823b34
--- /dev/null
+++ b/src/frontend/services/logout.ts
@@ -0,0 +1,40 @@
+import { store } from '../redux/store';
+import { resetChatsState } from '../redux/slices/chats';
+import { clearAllToasts } from '../redux/slices/toasts';
+import { resetPersonalization } from '../redux/slices/personalization';
+import { chatStorage } from './chatStorage';
+
+const AUTH_STORAGE_KEYS = ['access_token', 'refresh_token', 'id_token'] as const;
+
+function buildGatewayLoginUrl(): string {
+  const redirectPath = `${globalThis.location.pathname}${globalThis.location.search}${globalThis.location.hash}` || '/';
+  return `/auth/login?redirect=${encodeURIComponent(redirectPath)}`;
+}
+
+export async function logout() {
+  try {
+    await fetch('/auth/logout', {
+      method: 'POST',
+      credentials: 'include',
+      headers: { 'Content-Type': 'application/json' },
+    });
+  } catch {
+    // Still clear local session state if the network request fails.
+  }
+
+  chatStorage.clearChats();
+
+  for (const key of AUTH_STORAGE_KEYS) {
+    try {
+      localStorage.removeItem(key);
+    } catch {
+      /* ignore */
+    }
+  }
+
+  store.dispatch(resetChatsState());
+  store.dispatch(clearAllToasts());
+  store.dispatch(resetPersonalization());
+
+  globalThis.location.assign(buildGatewayLoginUrl());
+}
diff --git a/src/frontend/services/newChatTracker.ts b/src/frontend/services/newChatTracker.ts
new file mode 100644
index 00000000..96eec75b
--- /dev/null
+++ b/src/frontend/services/newChatTracker.ts
@@ -0,0 +1,14 @@
+/**
+ * Module-level Set tracking chat IDs created client-side (via "New Chat").
+ * These threads don't exist on the backend until the first message is sent,
+ * so attempting to fetch their state would always 404.
+ */
+const clientCreatedIds = new Set<string>();
+
+export function markChatAsClientCreated(chatId: string): void {
+  clientCreatedIds.add(chatId);
+}
+
+export function isClientCreatedChat(chatId: string): boolean {
+  return clientCreatedIds.has(chatId);
+}
diff --git a/src/frontend/test-utils/createTestStore.ts b/src/frontend/test-utils/createTestStore.ts
new file mode 100644
index 00000000..25ddbd15
--- /dev/null
+++ b/src/frontend/test-utils/createTestStore.ts
@@ -0,0 +1,18 @@
+import { configureStore } from '@reduxjs/toolkit';
+import chatsReducer from '../redux/slices/chats';
+import configReducer from '../redux/slices/config';
+import personalizationReducer from '../redux/slices/personalization';
+import toastsReducer from '../redux/slices/toasts';
+import userSettingsReducer from '../redux/slices/userSettings';
+
+export function createTestStore() {
+  return configureStore({
+    reducer: {
+      chats: chatsReducer,
+      config: configReducer,
+      personalization: personalizationReducer,
+      toasts: toastsReducer,
+      userSettings: userSettingsReducer,
+    },
+  });
+}
diff --git a/src/frontend/test-utils/render.tsx b/src/frontend/test-utils/render.tsx
new file mode 100644
index 00000000..e0ffb869
--- /dev/null
+++ b/src/frontend/test-utils/render.tsx
@@ -0,0 +1,25 @@
+import React from 'react';
+import { Provider } from 'react-redux';
+import { MemoryRouter } from 'react-router-dom';
+import type { RenderOptions } from '@testing-library/react';
+import { render } from '@testing-library/react';
+import { createTestStore } from './createTestStore';
+
+interface WrapperProps {
+  children: React.ReactNode;
+}
+
+function AllProviders({ children }: WrapperProps) {
+  const store = createTestStore();
+  return (
+    <Provider store={store}>
+      <MemoryRouter>{children}</MemoryRouter>
+    </Provider>
+  );
+}
+
+function renderWithProviders(ui: React.ReactElement, options?: Omit<RenderOptions, 'wrapper'>) {
+  return render(ui, { wrapper: AllProviders, ...options });
+}
+
+export { renderWithProviders };
diff --git a/src/frontend/test-utils/setup.ts b/src/frontend/test-utils/setup.ts
new file mode 100644
index 00000000..4fec73a4
--- /dev/null
+++ b/src/frontend/test-utils/setup.ts
@@ -0,0 +1,98 @@
+import '@testing-library/jest-dom';
+import { expect } from 'vitest';
+import { configureAxe, toHaveNoViolations } from 'jest-axe';
+
+// Node 26+ defines localStorage/sessionStorage as getter-based experimental
+// Web Storage on globalThis, but jsdom 29 does not override them.  Without
+// --localstorage-file the Node getter returns undefined, so any test code (or
+// production code running at module-load time) that calls localStorage.getItem
+// etc. would throw.  Replace both with simple in-memory implementations that
+// behave like a browser Storage object.
+class InMemoryStorage implements Storage {
+  private _store: Record<string, string> = {};
+
+  get length(): number {
+    return Object.keys(this._store).length;
+  }
+
+  key(index: number): string | null {
+    return Object.keys(this._store)[index] ?? null;
+  }
+
+  getItem(key: string): string | null {
+    return Object.prototype.hasOwnProperty.call(this._store, key)
+      ? this._store[key]
+      : null;
+  }
+
+  setItem(key: string, value: string): void {
+    this._store[String(key)] = String(value);
+  }
+
+  removeItem(key: string): void {
+    delete this._store[String(key)];
+  }
+
+  clear(): void {
+    this._store = {};
+  }
+}
+
+// Node 26+ exposes an experimental localStorage getter on globalThis, but
+// it can throw when actually accessed (e.g. no --localstorage-file flag).
+// A simple undefined/null check is insufficient — we must probe the API.
+function isStorageBroken(getter: () => Storage | null | undefined): boolean {
+  try {
+    const s = getter();
+    if (s == null) return true;
+    s.getItem('__vitest_probe__'); // throws on broken Node 26+ experimental storage
+    return false;
+  } catch {
+    return true;
+  }
+}
+
+if (isStorageBroken(() => globalThis.localStorage)) {
+  Object.defineProperty(globalThis, 'localStorage', {
+    value: new InMemoryStorage(),
+    writable: true,
+    configurable: true,
+  });
+}
+if (isStorageBroken(() => globalThis.sessionStorage)) {
+  Object.defineProperty(globalThis, 'sessionStorage', {
+    value: new InMemoryStorage(),
+    writable: true,
+    configurable: true,
+  });
+}
+// Extend vitest expect with jest-axe matchers
+expect.extend(toHaveNoViolations);
+
+// Configure axe with WCAG 2.1 AA rules
+// Disable color-contrast: jsdom cannot compute computed styles
+export const axe = configureAxe({
+  rules: {
+    'color-contrast': { enabled: false },
+  },
+});
+
+// Mock window.APP_DATA and window.USER_DATA for all tests
+Object.defineProperty(window, 'APP_DATA', {
+  value: {
+    agentName: 'TestAgent',
+    basePath: '/',
+  },
+  writable: true,
+  configurable: true,
+});
+
+Object.defineProperty(window, 'USER_DATA', {
+  value: {
+    displayName: 'Test User',
+    given_name: 'Test',
+    email: 'test@example.com',
+  },
+  writable: true,
+  configurable: true,
+});
diff --git a/src/frontend/types/chat.ts b/src/frontend/types/chat.ts
index 8444855c..a3ed4305 100644
--- a/src/frontend/types/chat.ts
+++ b/src/frontend/types/chat.ts
@@ -8,6 +8,7 @@ export interface ChatItem {
   preview: string;
   messages: Message[];
   historicalActivities?: Record<string, ProcessedEvent[]>;
+  feedback?: Record<string, 'up' | 'down'>;
 }
 
 export interface ChatState {
diff --git a/src/frontend/types/deep-agent.test.ts b/src/frontend/types/deep-agent.test.ts
new file mode 100644
index 00000000..2cbb6ac1
--- /dev/null
+++ b/src/frontend/types/deep-agent.test.ts
@@ -0,0 +1,178 @@
+import { describe, it, expect } from 'vitest';
+import {
+  isSubAgentToolCall,
+  extractSubAgentName,
+  extractDelegationText,
+  extractTodosFromMessages,
+  detectArtifactKind,
+} from './deep-agent';
+
+// ── isSubAgentToolCall ────────────────────────────────────────────────────────
+
+describe('isSubAgentToolCall', () => {
+  it('returns true when subagent_type arg is present', () => {
+    expect(isSubAgentToolCall({ name: 'task', args: { subagent_type: 'analyst' } })).toBe(true);
+  });
+
+  it('returns true for a known subagent name "analyst"', () => {
+    expect(isSubAgentToolCall({ name: 'analyst' })).toBe(true);
+  });
+
+  it('returns true for a known subagent name "publisher"', () => {
+    expect(isSubAgentToolCall({ name: 'publisher' })).toBe(true);
+  });
+
+  it('returns false for an unknown name with no subagent_type arg', () => {
+    expect(isSubAgentToolCall({ name: 'web_search', args: {} })).toBe(false);
+  });
+
+  it('returns false when name is "task" but no subagent_type arg', () => {
+    expect(isSubAgentToolCall({ name: 'task', args: {} })).toBe(false);
+  });
+});
+
+// ── extractSubAgentName ───────────────────────────────────────────────────────
+
+describe('extractSubAgentName', () => {
+  it('returns the subagent_type when name is "task"', () => {
+    expect(extractSubAgentName({ name: 'task', args: { subagent_type: 'researcher' } })).toBe('researcher');
+  });
+
+  it('returns the tool name when it is not "task"', () => {
+    expect(extractSubAgentName({ name: 'analyst', args: {} })).toBe('analyst');
+  });
+
+  it('returns "task" when name is "task" but subagent_type is missing', () => {
+    expect(extractSubAgentName({ name: 'task', args: {} })).toBe('task');
+  });
+});
+
+// ── extractDelegationText ─────────────────────────────────────────────────────
+
+describe('extractDelegationText', () => {
+  it('returns string args directly when non-empty', () => {
+    expect(extractDelegationText({ args: '  Search for data  ' })).toBe('Search for data');
+  });
+
+  it('returns null for empty string args', () => {
+    expect(extractDelegationText({ args: '   ' })).toBeNull();
+  });
+
+  it('returns description from object args', () => {
+    expect(extractDelegationText({ args: { description: 'Analyze data' } })).toBe('Analyze data');
+  });
+
+  it('returns null when description is empty', () => {
+    expect(extractDelegationText({ args: { description: '' } })).toBeNull();
+  });
+
+  it('returns null when args is null/undefined', () => {
+    expect(extractDelegationText({ args: undefined })).toBeNull();
+    expect(extractDelegationText({ args: null as any })).toBeNull();
+  });
+});
+
+// ── extractTodosFromMessages ──────────────────────────────────────────────────
+
+describe('extractTodosFromMessages', () => {
+  it('returns todos from the latest write_todos tool call', () => {
+    const messages = [
+      {
+        type: 'ai',
+        tool_calls: [
+          {
+            name: 'write_todos',
+            args: {
+              todos: [
+                { content: 'Research topic', status: 'completed' },
+                { content: 'Draft report', status: 'in_progress' },
+              ],
+            },
+          },
+        ],
+      },
+    ];
+    const todos = extractTodosFromMessages(messages);
+    expect(todos).toHaveLength(2);
+    expect(todos[0].content).toBe('Research topic');
+    expect(todos[0].status).toBe('completed');
+    expect(todos[1].status).toBe('in_progress');
+  });
+
+  it('defaults unknown status to "pending"', () => {
+    const messages = [
+      {
+        type: 'ai',
+        tool_calls: [{ name: 'write_todos', args: { todos: [{ content: 'Task', status: 'weird' }] } }],
+      },
+    ];
+    const todos = extractTodosFromMessages(messages);
+    expect(todos[0].status).toBe('pending');
+  });
+
+  it('returns [] when no messages have write_todos', () => {
+    const messages = [{ type: 'ai', tool_calls: [{ name: 'web_search', args: {} }] }];
+    expect(extractTodosFromMessages(messages)).toEqual([]);
+  });
+
+  it('returns [] for empty messages array', () => {
+    expect(extractTodosFromMessages([])).toEqual([]);
+  });
+
+  it('returns the most recent write_todos when multiple exist', () => {
+    const messages = [
+      {
+        type: 'ai',
+        tool_calls: [{ name: 'write_todos', args: { todos: [{ content: 'Old', status: 'completed' }] } }],
+      },
+      {
+        type: 'ai',
+        tool_calls: [{ name: 'write_todos', args: { todos: [{ content: 'New', status: 'pending' }] } }],
+      },
+    ];
+    // The function iterates from the end (last message first)
+    const todos = extractTodosFromMessages(messages);
+    expect(todos[0].content).toBe('New');
+  });
+});
+
+// ── detectArtifactKind ────────────────────────────────────────────────────────
+
+describe('detectArtifactKind', () => {
+  it('returns "code" for content with a code fence', () => {
+    expect(detectArtifactKind('Here is the code:\n```python\nprint("hi")\n```')).toBe('code');
+  });
+
+  it('returns "json" for valid JSON starting with {', () => {
+    expect(detectArtifactKind('{"key": "value"}')).toBe('json');
+  });
+
+  it('does NOT return "json" for an invalid string that starts with {', () => {
+    // JSON.parse throws → falls through to markdown/text classification
+    expect(detectArtifactKind('{invalid json}')).not.toBe('json');
+  });
+
+  it('returns "json" for valid JSON starting with [', () => {
+    expect(detectArtifactKind('[1,2,3]')).toBe('json');
+  });
+
+  it('returns "markdown" for content with headers', () => {
+    expect(detectArtifactKind('# Title\nSome text')).toBe('markdown');
+  });
+
+  it('returns "markdown" for content with bold text', () => {
+    expect(detectArtifactKind('This is **bold** text')).toBe('markdown');
+  });
+
+  it('returns "markdown" for content with a list', () => {
+    expect(detectArtifactKind('- item one\n- item two')).toBe('markdown');
+  });
+
+  it('returns "text" for plain prose', () => {
+    expect(detectArtifactKind('The weather is nice today.')).toBe('text');
+  });
+
+  it('returns "text" for an empty string', () => {
+    expect(detectArtifactKind('')).toBe('text');
+  });
+});
diff --git a/src/frontend/types/deep-agent.ts b/src/frontend/types/deep-agent.ts
new file mode 100644
index 00000000..76f2f8c1
--- /dev/null
+++ b/src/frontend/types/deep-agent.ts
@@ -0,0 +1,126 @@
+export type SubAgentStatus = 'delegating' | 'complete' | 'error';
+
+export interface SubAgentInfo {
+  name: string;
+  toolCallId: string;
+  status: SubAgentStatus;
+  startedAt: number;
+}
+
+export interface ToolCallWithContent {
+  name: string;
+  args: Record<string, unknown>;
+  id: string;
+  content?: unknown;
+}
+
+export interface HITLActionRequest {
+  name: string;
+  args: Record<string, unknown>;
+}
+
+export interface HITLReviewConfig {
+  action_name: string;
+  allowed_decisions: ('approve' | 'edit' | 'reject' | 'respond')[];
+}
+
+export interface HITLInterruptValue {
+  action_requests: HITLActionRequest[];
+  review_configs: HITLReviewConfig[];
+}
+
+export interface McpAuthPayload {
+  type: 'mcp_auth_required';
+  mcp_name: string;
+  connect_url: string;
+  message: string;
+}
+
+export interface InterruptInfo {
+  value: string | HITLInterruptValue;
+  resumable: boolean;
+  payload?: McpAuthPayload;
+}
+
+export interface TaskStep {
+  id: string;
+  name: string;
+  status: 'running' | 'complete' | 'error';
+  startedAt: number;
+  completedAt?: number;
+  result?: string;
+}
+
+const KNOWN_SUBAGENT_NAMES = new Set(['analyst', 'publisher']);
+
+export function isSubAgentToolCall(toolCall: { name: string; args?: Record<string, unknown> }): boolean {
+  if (toolCall.args?.subagent_type) return true;
+  return KNOWN_SUBAGENT_NAMES.has(toolCall.name);
+}
+
+export function extractSubAgentName(toolCall: { name: string; args?: Record<string, unknown> }): string {
+  if (toolCall.name === 'task' && typeof toolCall.args?.subagent_type === 'string') {
+    return toolCall.args.subagent_type;
+  }
+  return toolCall.name;
+}
+
+export function extractDelegationText(
+  toolCall: { args?: Record<string, unknown> | string },
+): string | null {
+  const { args } = toolCall;
+  if (args == null) return null;
+  if (typeof args === 'string') {
+    const trimmed = args.trim();
+    return trimmed || null;
+  }
+  if (typeof args.description === 'string') {
+    const trimmed = args.description.trim();
+    if (trimmed) return trimmed;
+  }
+  return null;
+}
+
+export interface TodoItem {
+  content: string;
+  status: 'pending' | 'in_progress' | 'completed';
+}
+
+export function extractTodosFromMessages(messages: { type: string; tool_calls?: { name: string; args?: Record<string, unknown> }[] }[]): TodoItem[] {
+  let latest: TodoItem[] = [];
+  for (let i = messages.length - 1; i >= 0; i--) {
+    const msg = messages[i];
+    if (msg.type !== 'ai') continue;
+    const toolCalls = msg.tool_calls;
+    if (!Array.isArray(toolCalls)) continue;
+    for (const tc of toolCalls) {
+      if (tc.name !== 'write_todos') continue;
+      const raw = tc.args?.todos;
+      if (!Array.isArray(raw)) continue;
+      latest = raw
+        .filter((t): t is { content: string; status: string } =>
+          t != null && typeof t === 'object' && typeof (t as Record<string, unknown>).content === 'string',
+        )
+        .map((t) => ({
+          content: t.content,
+          status: (['pending', 'in_progress', 'completed'].includes(t.status) ? t.status : 'pending') as TodoItem['status'],
+        }));
+      return latest;
+    }
+  }
+  return latest;
+}
+
+const CODE_FENCE_RE = /```[\s\S]*?```/;
+const JSON_START_RE = /^\s*[{[]/;
+
+export type ArtifactKind = 'code' | 'json' | 'markdown' | 'text';
+
+export function detectArtifactKind(content: string): ArtifactKind {
+  if (CODE_FENCE_RE.test(content)) return 'code';
+  if (JSON_START_RE.test(content)) {
+    try { JSON.parse(content); return 'json'; } catch { /* not valid json */ }
+  }
+  if (content.includes('# ') || content.includes('**') || content.includes('- ')) return 'markdown';
+  return 'text';
+}
diff --git a/src/frontend/types/errors.ts b/src/frontend/types/errors.ts
new file mode 100644
index 00000000..ebfdb5ce
--- /dev/null
+++ b/src/frontend/types/errors.ts
@@ -0,0 +1,21 @@
+export enum ErrorCode {
+  NETWORK_ERROR = 'NETWORK_ERROR',
+  CONNECTION_TIMEOUT = 'CONNECTION_TIMEOUT',
+  AUTHENTICATION_ERROR = 'AUTHENTICATION_ERROR',
+  AUTHORIZATION_ERROR = 'AUTHORIZATION_ERROR',
+  RATE_LIMITED = 'RATE_LIMITED',
+  STREAM_ERROR = 'STREAM_ERROR',
+  STREAM_INTERRUPTED = 'STREAM_INTERRUPTED',
+  VALIDATION_ERROR = 'VALIDATION_ERROR',
+  UNKNOWN_ERROR = 'UNKNOWN_ERROR',
+}
+
+export interface APIError {
+  code: ErrorCode;
+  message: string;
+  status?: number;
+  retryable: boolean;
+  retryAfterMs?: number;
+  details?: Record<string, unknown>;
+  timestamp: string;
+}
diff --git a/src/frontend/types/user.ts b/src/frontend/types/user.ts
index e3f71ca2..3b40cd64 100644
--- a/src/frontend/types/user.ts
+++ b/src/frontend/types/user.ts
@@ -19,6 +19,8 @@ export interface UserData {
 export interface AppData {
   apiUrl: string;
   refreshableToken: string;
+  agentName: string;
+  basePath?: string;
 }
 
 // Extend the Window interface to include USER_DATA and APP_DATA
diff --git a/src/frontend/utils/errorHandler.ts b/src/frontend/utils/errorHandler.ts
new file mode 100644
index 00000000..60eb429b
--- /dev/null
+++ b/src/frontend/utils/errorHandler.ts
@@ -0,0 +1,94 @@
+import { APIError, ErrorCode } from '../types/errors';
+
+const USER_MESSAGES: Record<ErrorCode, string> = {
+  [ErrorCode.NETWORK_ERROR]: 'Unable to connect. Please check your network connection.',
+  [ErrorCode.CONNECTION_TIMEOUT]: 'The request timed out. Please try again.',
+  [ErrorCode.AUTHENTICATION_ERROR]: 'Your session has expired. Please log in again.',
+  [ErrorCode.AUTHORIZATION_ERROR]: 'You do not have permission to perform this action.',
+  [ErrorCode.RATE_LIMITED]: 'Too many requests. Please wait before trying again.',
+  [ErrorCode.STREAM_ERROR]: 'The response stream was interrupted. Please retry.',
+  [ErrorCode.STREAM_INTERRUPTED]: 'The connection was lost during streaming.',
+  [ErrorCode.VALIDATION_ERROR]: 'Invalid input. Please check your message and try again.',
+  [ErrorCode.UNKNOWN_ERROR]: 'An unexpected error occurred. Please try again.',
+};
+
+export class ErrorHandler {
+  static create(code: ErrorCode, message: string, details?: Record<string, unknown>): APIError {
+    return {
+      code,
+      message,
+      retryable: ErrorHandler.isRecoverable(code),
+      timestamp: new Date().toISOString(),
+      details,
+    };
+  }
+
+  static fromResponse(status: number, body?: string): APIError {
+    let code: ErrorCode;
+    let message: string;
+
+    switch (status) {
+      case 401:
+        code = ErrorCode.AUTHENTICATION_ERROR;
+        message = 'Authentication required';
+        break;
+      case 403:
+        code = ErrorCode.AUTHORIZATION_ERROR;
+        message = 'Access denied';
+        break;
+      case 429: {
+        code = ErrorCode.RATE_LIMITED;
+        message = 'Rate limited';
+        break;
+      }
+      case 502:
+      case 503:
+      case 504:
+        code = ErrorCode.NETWORK_ERROR;
+        message = `Service unavailable (${status})`;
+        break;
+      default:
+        code = status >= 400 && status < 500
+          ? ErrorCode.VALIDATION_ERROR
+          : ErrorCode.UNKNOWN_ERROR;
+        message = body || `Request failed with status ${status}`;
+    }
+
+    return {
+      code,
+      message,
+      status,
+      retryable: ErrorHandler.isRecoverable(code),
+      timestamp: new Date().toISOString(),
+    };
+  }
+
+  static fromFetchError(error: unknown): APIError {
+    if (error instanceof TypeError && error.message.includes('fetch')) {
+      return ErrorHandler.create(ErrorCode.NETWORK_ERROR, error.message);
+    }
+    if (error instanceof DOMException && error.name === 'AbortError') {
+      return ErrorHandler.create(ErrorCode.STREAM_INTERRUPTED, 'Request was cancelled');
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    return ErrorHandler.create(ErrorCode.UNKNOWN_ERROR, message);
+  }
+
+  static isRecoverable(code: ErrorCode): boolean {
+    return [
+      ErrorCode.NETWORK_ERROR,
+      ErrorCode.CONNECTION_TIMEOUT,
+      ErrorCode.STREAM_ERROR,
+      ErrorCode.STREAM_INTERRUPTED,
+      ErrorCode.RATE_LIMITED,
+    ].includes(code);
+  }
+
+  static getUserMessage(error: APIError): string {
+    return USER_MESSAGES[error.code] || USER_MESSAGES[ErrorCode.UNKNOWN_ERROR];
+  }
+
+  static getRetryDelay(retryCount: number, baseDelay = 1000): number {
+    return Math.min(baseDelay * Math.pow(2, retryCount), 30000);
+  }
+}
diff --git a/src/server/__tests__/proxy.test.ts b/src/server/__tests__/proxy.test.ts
new file mode 100644
index 00000000..3008abe8
--- /dev/null
+++ b/src/server/__tests__/proxy.test.ts
@@ -0,0 +1,376 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { buildTestServer } from './test-utils.js';
+import { resetSettings } from '../utils/settings.js';
+
+// ── Helpers ───────────────────────────────────────────────────────────────────
+
+function okJson(body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status: 200,
+    headers: { 'Content-Type': 'application/json' },
+  });
+}
+
+function makeSSEResponse(sseBody: string): Response {
+  const encoder = new TextEncoder();
+  const stream = new ReadableStream<Uint8Array>({
+    start(controller) {
+      controller.enqueue(encoder.encode(sseBody));
+      controller.close();
+    },
+  });
+  return new Response(stream, {
+    status: 200,
+    headers: { 'Content-Type': 'text/event-stream' },
+  });
+}
+
+/** Stub fetch with sequential responses. Unstubs in afterEach. */
+function stubFetch(...responses: Response[]) {
+  const mock = vi.fn();
+  let idx = 0;
+  mock.mockImplementation(() => {
+    const resp = responses[idx] ?? okJson({});
+    idx++;
+    return Promise.resolve(resp);
+  });
+  vi.stubGlobal('fetch', mock);
+  return mock;
+}
+
+// ── Setup / teardown ──────────────────────────────────────────────────────────
+
+beforeEach(() => {
+  process.env.FEATURE_AUTH_ENABLED = 'false';
+  // auth-check.plugin.ts reads AUTH_ENABLED (legacy) to bypass session auth.
+  // Without this, the preHandler hook redirects all /api/proxy/* requests to /login.
+  process.env.AUTH_ENABLED = 'false';
+  process.env.AGENT_HOST = 'http://127.0.0.1:19999';
+  resetSettings();
+});
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  delete process.env.AGENT_HOST;
+  delete process.env.AUTH_ENABLED;
+  resetSettings();
+});
+
+// ── GET /api/health/agent ─────────────────────────────────────────────────────
+
+describe('GET /api/health/agent', () => {
+  it('returns status from the agent when the agent is healthy', async () => {
+    stubFetch(okJson({ status: 'healthy' }));
+
+    const server = await buildTestServer();
+    const res = await server.inject({ method: 'GET', url: '/api/health/agent' });
+
+    expect(res.statusCode).toBe(200);
+    const body = JSON.parse(res.body);
+    expect(body.status).toBe('healthy');
+  });
+
+  it('returns status "unreachable" when the agent fetch throws', async () => {
+    vi.stubGlobal('fetch', vi.fn().mockRejectedValueOnce(new Error('ECONNREFUSED')));
+
+    const server = await buildTestServer();
+    const res = await server.inject({ method: 'GET', url: '/api/health/agent' });
+
+    expect(res.statusCode).toBe(200);
+    expect(JSON.parse(res.body).status).toBe('unreachable');
+  });
+
+  it('returns "unhealthy" when the agent returns a non-2xx status', async () => {
+    stubFetch(new Response('Service Unavailable', { status: 503 }));
+
+    const server = await buildTestServer();
+    const res = await server.inject({ method: 'GET', url: '/api/health/agent' });
+
+    expect(res.statusCode).toBe(200);
+    expect(JSON.parse(res.body).status).toBe('unhealthy');
+  });
+});
+
+// ── GET /api/health (BFF health) ─────────────────────────────────────────────
+
+describe('GET /api/health', () => {
+  it('returns 200 ok without contacting the agent', async () => {
+    const server = await buildTestServer();
+    const res = await server.inject({ method: 'GET', url: '/api/health' });
+    expect(res.statusCode).toBe(200);
+    expect(JSON.parse(res.body).status).toBe('ok');
+  });
+});
+
+// ── GET /api/config/branding ──────────────────────────────────────────────────
+
+describe('GET /api/config/branding', () => {
+  it('returns branding config from settings', async () => {
+    const server = await buildTestServer();
+    const res = await server.inject({ method: 'GET', url: '/api/config/branding' });
+    expect(res.statusCode).toBe(200);
+    const body = JSON.parse(res.body);
+    expect(body).toHaveProperty('title');
+    expect(body).toHaveProperty('colors');
+  });
+});
+
+// ── GET /api/config/features ──────────────────────────────────────────────────
+
+describe('GET /api/config/features', () => {
+  it('returns feature flags from settings', async () => {
+    const server = await buildTestServer();
+    const res = await server.inject({ method: 'GET', url: '/api/config/features' });
+    expect(res.statusCode).toBe(200);
+    const body = JSON.parse(res.body);
+    expect(body).toHaveProperty('auth_enabled');
+  });
+});
+
+// ── ALL /api/proxy/agent/* generic pass-through ───────────────────────────────
+
+describe('ALL /api/proxy/agent/* (generic pass-through)', () => {
+  it('proxies a GET to the agent and forwards the response', async () => {
+    stubFetch(okJson({ messages: [], tasks: [] }));
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'GET',
+      url: '/api/proxy/agent/threads/my-thread/state',
+    });
+
+    expect(res.statusCode).toBe(200);
+    const body = JSON.parse(res.body);
+    expect(body).toHaveProperty('messages');
+  });
+
+  it('forwards a 404 from the agent as-is', async () => {
+    vi.stubGlobal(
+      'fetch',
+      vi.fn().mockResolvedValueOnce(new Response('Not Found', { status: 404 })),
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'GET',
+      url: '/api/proxy/agent/threads/nonexistent/state',
+    });
+
+    expect(res.statusCode).toBe(404);
+  });
+
+  it('returns 502 when the agent is unreachable', async () => {
+    vi.stubGlobal('fetch', vi.fn().mockRejectedValueOnce(new Error('ECONNREFUSED')));
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'GET',
+      url: '/api/proxy/agent/threads/t1/state',
+    });
+
+    expect(res.statusCode).toBe(502);
+  });
+});
+
+// ── Thread state LRU cache ────────────────────────────────────────────────────
+
+describe('GET /api/proxy/agent/threads/:id/state — LRU cache', () => {
+  it('returns X-Cache: MISS on the first request', async () => {
+    stubFetch(okJson({ messages: [], tasks: [] }));
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'GET',
+      url: '/api/proxy/agent/threads/cache-thread-1/state',
+    });
+
+    expect(res.statusCode).toBe(200);
+    expect(res.headers['x-cache']).toBe('MISS');
+  });
+
+  it('returns X-Cache: HIT and avoids a second fetch on a repeated request', async () => {
+    const mockFetch = stubFetch(
+      okJson({ messages: [], tasks: [] }), // only needed once
+    );
+
+    const server = await buildTestServer();
+    // First request
+    await server.inject({
+      method: 'GET',
+      url: '/api/proxy/agent/threads/cache-thread-2/state',
+    });
+    // Second request — should hit cache
+    const res2 = await server.inject({
+      method: 'GET',
+      url: '/api/proxy/agent/threads/cache-thread-2/state',
+    });
+
+    expect(res2.headers['x-cache']).toBe('HIT');
+    // fetch was only called once (not twice)
+    expect(mockFetch).toHaveBeenCalledTimes(1);
+  });
+});
+
+// ── POST /api/proxy/agent/feedback ───────────────────────────────────────────
+
+describe('POST /api/proxy/agent/feedback', () => {
+  it('proxies the feedback to the agent and returns the result', async () => {
+    stubFetch(okJson({ success: true }));
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/feedback',
+      payload: { run_id: 'run-1', score: 1, comment: 'Good' },
+    });
+
+    expect(res.statusCode).toBe(200);
+  });
+
+  it('returns 502 when the agent is unreachable', async () => {
+    vi.stubGlobal('fetch', vi.fn().mockRejectedValueOnce(new Error('ECONNREFUSED')));
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/feedback',
+      payload: { run_id: 'run-1', score: 1 },
+    });
+
+    expect(res.statusCode).toBe(502);
+  });
+});
+
+// ── POST /api/proxy/agent/v1/stream — HITL interrupt translation ──────────────
+
+describe('POST /api/proxy/agent/v1/stream', () => {
+  it('returns 200 and emits [DONE] for a simple token stream', async () => {
+    const agentSSE =
+      `event: messages/partial\ndata: [{"type":"ai","content":"Hello"}]\n\n`;
+
+    stubFetch(
+      okJson({ thread_id: 'th1' }),         // POST /threads
+      makeSSEResponse(agentSSE),            // POST /threads/th1/runs/stream
+      okJson({ messages: [], tasks: [] }),  // GET /threads/th1/state
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/v1/stream',
+      payload: { message: 'hello', thread_id: 'th1', user_id: 'u1' },
+    });
+
+    expect(res.statusCode).toBe(200);
+    expect(res.headers['content-type']).toContain('text/event-stream');
+    expect(res.body).toContain('[DONE]');
+  });
+
+  it('emits a token chunk when the agent sends messages/partial', async () => {
+    const agentSSE =
+      `event: messages/partial\ndata: [{"type":"ai","content":"Hi there"}]\n\n`;
+
+    stubFetch(
+      okJson({ thread_id: 'th2' }),
+      makeSSEResponse(agentSSE),
+      okJson({ messages: [], tasks: [] }),
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/v1/stream',
+      payload: { message: 'hello', thread_id: 'th2', user_id: 'u1' },
+    });
+
+    expect(res.body).toContain('"type":"token"');
+    expect(res.body).toContain('Hi there');
+  });
+
+  it('translates a LangGraph __interrupt__ update into an interrupt chunk', async () => {
+    const interruptValue = {
+      action_requests: [{ name: 'github_create_pr', args: { title: 'My PR' } }],
+      review_configs: [{ action_name: 'github_create_pr', allowed_decisions: ['approve', 'reject'] }],
+    };
+    const agentSSE =
+      `event: updates\ndata: ${JSON.stringify({ __interrupt__: [{ value: interruptValue, resumable: true }] })}\n\n`;
+
+    stubFetch(
+      okJson({ thread_id: 'th3' }),
+      makeSSEResponse(agentSSE),
+      okJson({ messages: [], tasks: [] }),
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/v1/stream',
+      payload: { message: 'hello', thread_id: 'th3', user_id: 'u1' },
+    });
+
+    expect(res.body).toContain('"type":"interrupt"');
+    expect(res.body).toContain('github_create_pr');
+  });
+
+  it('emits an interrupt chunk from thread state when missing from the stream', async () => {
+    const interruptValue = { action_requests: [], review_configs: [] };
+    // No __interrupt__ in the stream itself
+    const agentSSE =
+      `event: messages/partial\ndata: [{"type":"ai","content":"Processing..."}]\n\n`;
+
+    // Thread state returns an interrupt in tasks
+    const threadState = {
+      messages: [],
+      tasks: [{ interrupts: [{ value: interruptValue }] }],
+    };
+
+    stubFetch(
+      okJson({ thread_id: 'th4' }),
+      makeSSEResponse(agentSSE),
+      okJson(threadState),
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/v1/stream',
+      payload: { message: 'hello', thread_id: 'th4', user_id: 'u1' },
+    });
+
+    expect(res.body).toContain('"type":"interrupt"');
+  });
+
+  it('returns 500 when thread creation fails', async () => {
+    vi.stubGlobal(
+      'fetch',
+      vi.fn().mockResolvedValueOnce(new Response('error', { status: 500 })),
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/v1/stream',
+      payload: { message: 'hello', thread_id: 'th5', user_id: 'u1' },
+    });
+
+    expect(res.statusCode).toBe(500);
+  });
+
+  it('returns 503 when the agent SSE stream request itself fails', async () => {
+    // Step 1 (thread creation) succeeds; step 2 (SSE stream) returns 503
+    stubFetch(
+      okJson({ thread_id: 'th6' }),
+      new Response('Service Unavailable', { status: 503 }),
+    );
+
+    const server = await buildTestServer();
+    const res = await server.inject({
+      method: 'POST',
+      url: '/api/proxy/agent/v1/stream',
+      payload: { message: 'hello', thread_id: 'th6', user_id: 'u1' },
+    });
+
+    // The proxy must propagate the upstream 503 — not silently return 200
+    expect(res.statusCode).toBe(503);
+  });
+});
diff --git a/src/server/__tests__/security.test.ts b/src/server/__tests__/security.test.ts
new file mode 100644
index 00000000..ed92620f
--- /dev/null
+++ b/src/server/__tests__/security.test.ts
@@ -0,0 +1,308 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { getSettings, resetSettings } from '../utils/settings.js';
+import {
+  buildTestServer,
+  parseCookieHeader,
+  bombardEndpoint,
+  generatePathTraversalPayloads,
+} from './test-utils.js';
+
+describe('Security: Session Cookie Hardening', () => {
+  beforeEach(() => {
+    resetSettings();
+  });
+
+  afterEach(() => {
+    delete process.env.SESSION_SECURE_COOKIE;
+    delete process.env.SESSION_SAME_SITE;
+    delete process.env.ENVIRONMENT;
+    resetSettings();
+  });
+
+  it('should set HttpOnly flag on session cookies', async () => {
+    const server = await buildTestServer();
+    const response = await server.inject({
+      method: 'GET',
+      url: '/api/health',
+    });
+
+    const setCookie = response.headers['set-cookie'];
+    if (setCookie) {
+      const cookies = parseCookieHeader(setCookie);
+      expect(cookies.httpOnly).toBe(true);
+    }
+  });
+
+  it('should set Secure flag in production environment', async () => {
+    process.env.ENVIRONMENT = 'production';
+    process.env.SESSION_SECURE_COOKIE = 'true';
+    const server = await buildTestServer();
+
+    const response = await server.inject({ method: 'GET', url: '/api/health' });
+    const setCookie = response.headers['set-cookie'];
+
+    if (setCookie) {
+      const cookies = parseCookieHeader(setCookie);
+      expect(cookies.secure).toBe(true);
+    }
+  });
+
+  it('should set SameSite=Lax on session cookies by default', async () => {
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/api/health' });
+
+    const setCookie = response.headers['set-cookie'];
+    if (setCookie) {
+      const cookies = parseCookieHeader(setCookie);
+      expect(cookies.sameSite).toBe('lax');
+    }
+  });
+
+  it('should allow SameSite override via environment variable', async () => {
+    process.env.SESSION_SAME_SITE = 'strict';
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/api/health' });
+
+    const setCookie = response.headers['set-cookie'];
+    if (setCookie) {
+      const cookies = parseCookieHeader(setCookie);
+      expect(cookies.sameSite).toBe('strict');
+    }
+  });
+});
+
+describe('Security: CSP Headers', () => {
+  beforeEach(() => {
+    resetSettings();
+  });
+
+  afterEach(() => {
+    delete process.env.AGENT_ENDPOINT;
+    delete process.env.CSP_SCRIPT_SRC;
+    delete process.env.CSP_CONNECT_SRC;
+    resetSettings();
+  });
+
+  it('should NOT allow unsafe-inline in script-src', async () => {
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/' });
+
+    const csp = response.headers['content-security-policy'];
+    expect(csp).toBeDefined();
+
+    // Extract script-src directive
+    const directives = csp!.split(';');
+    const scriptSrc = directives.find(d => d.trim().startsWith('script-src'));
+
+    expect(scriptSrc).toBeDefined();
+    expect(scriptSrc).not.toContain("'unsafe-inline'");
+  });
+
+  it('should include agent endpoint in connect-src', async () => {
+    process.env.AGENT_ENDPOINT = 'https://agent.example.com';
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/' });
+
+    const csp = response.headers['content-security-policy'];
+    expect(csp).toBeDefined();
+
+    const directives = csp!.split(';');
+    const connectSrc = directives.find(d => d.trim().startsWith('connect-src'));
+
+    expect(connectSrc).toBeDefined();
+    expect(connectSrc).toContain('https://agent.example.com');
+  });
+
+  it('should allow CSP override via environment variable', async () => {
+    process.env.CSP_SCRIPT_SRC = "'self' 'unsafe-eval'";
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/' });
+
+    const csp = response.headers['content-security-policy'];
+    const directives = csp!.split(';');
+    const scriptSrc = directives.find(d => d.trim().startsWith('script-src'));
+
+    expect(scriptSrc).toContain("'unsafe-eval'");
+  });
+
+  it('should set all required CSP directives', async () => {
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/' });
+
+    const csp = response.headers['content-security-policy'];
+    expect(csp).toBeDefined();
+
+    const requiredDirectives = [
+      'default-src',
+      'script-src',
+      'style-src',
+      'img-src',
+      'connect-src',
+      'font-src',
+      'object-src',
+      'frame-ancestors',
+    ];
+
+    for (const directive of requiredDirectives) {
+      expect(csp).toContain(directive);
+    }
+  });
+});
+
+describe('Security: Rate Limiting', () => {
+  beforeEach(() => {
+    resetSettings();
+  });
+
+  afterEach(() => {
+    delete process.env.RATE_LIMIT_MAX;
+    resetSettings();
+  });
+
+  it('should apply global rate limit', async () => {
+    process.env.RATE_LIMIT_MAX = '5';
+    const server = await buildTestServer();
+
+    // Make 10 requests rapidly
+    const responses = await bombardEndpoint(server, '/api/config/branding', 10);
+
+    // Some should be rate limited
+    const rateLimited = responses.filter(r => r.statusCode === 429);
+    expect(rateLimited.length).toBeGreaterThan(0);
+  });
+
+  it('should NOT rate limit health check endpoints', async () => {
+    process.env.RATE_LIMIT_MAX = '5';
+    const server = await buildTestServer();
+
+    // Make 20 requests to health endpoint
+    const responses = await bombardEndpoint(server, '/api/health', 20);
+
+    // None should be rate limited (excluded path)
+    const rateLimited = responses.filter(r => r.statusCode === 429);
+    expect(rateLimited.length).toBe(0);
+  });
+
+  it('should include retry-after header in rate limit responses', async () => {
+    process.env.RATE_LIMIT_MAX = '2';
+    const server = await buildTestServer();
+
+    // Exceed rate limit
+    await bombardEndpoint(server, '/api/config/features', 5);
+    const response = await server.inject({ method: 'GET', url: '/api/config/features' });
+
+    if (response.statusCode === 429) {
+      expect(response.headers['retry-after']).toBeDefined();
+    }
+  });
+});
+
+describe('Security: X-Powered-By Header Removal', () => {
+  it('should NOT expose X-Powered-By header', async () => {
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/' });
+
+    expect(response.headers['x-powered-by']).toBeUndefined();
+  });
+
+  it('should NOT expose Server header with version', async () => {
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/api/health' });
+
+    // Should either be undefined or generic (not reveal "Fastify 5.5.0")
+    const serverHeader = response.headers['server'];
+    if (serverHeader) {
+      expect(serverHeader).not.toMatch(/fastify/i);
+      expect(serverHeader).not.toMatch(/\d+\.\d+\.\d+/); // No version numbers
+    }
+  });
+});
+
+describe('Security: Config Path Validation', () => {
+  beforeEach(() => {
+    resetSettings();
+  });
+
+  afterEach(() => {
+    delete process.env.UI_CONFIG_PATH;
+  });
+
+  it('should reject path traversal attempts', () => {
+    const maliciousPaths = generatePathTraversalPayloads();
+
+    for (const path of maliciousPaths) {
+      process.env.UI_CONFIG_PATH = path;
+      resetSettings();
+
+      expect(() => getSettings()).toThrow();
+    }
+  });
+
+  it('should reject absolute paths to nonexistent files', () => {
+    process.env.UI_CONFIG_PATH = '/app/config/ui/settings.yaml';
+    resetSettings();
+
+    expect(() => getSettings()).toThrow(/Config file not found/i);
+  });
+
+  it('should allow default config path', () => {
+    delete process.env.UI_CONFIG_PATH;
+    resetSettings();
+
+    const settings = getSettings();
+    expect(settings).toBeDefined();
+    expect(settings.branding.title).toBeDefined();
+  });
+});
+
+describe('Security: Integration Tests', () => {
+  beforeEach(() => {
+    resetSettings();
+  });
+
+  afterEach(() => {
+    delete process.env.ENVIRONMENT;
+    delete process.env.SESSION_SECURE_COOKIE;
+    delete process.env.SESSION_SAME_SITE;
+    resetSettings();
+  });
+
+  it('should maintain security headers across all routes', async () => {
+    const server = await buildTestServer();
+    const routes = ['/', '/api/health', '/api/config/branding'];
+
+    for (const route of routes) {
+      const response = await server.inject({ method: 'GET', url: route });
+
+      // All security headers should be present
+      expect(response.headers['x-frame-options']).toBeDefined();
+      expect(response.headers['x-content-type-options']).toBe('nosniff');
+      expect(response.headers['content-security-policy']).toBeDefined();
+      expect(response.headers['x-powered-by']).toBeUndefined();
+    }
+  });
+
+  it('should combine all security features correctly', async () => {
+    process.env.ENVIRONMENT = 'production';
+    process.env.SESSION_SECURE_COOKIE = 'true';
+    process.env.SESSION_SAME_SITE = 'strict';
+
+    const server = await buildTestServer();
+    const response = await server.inject({ method: 'GET', url: '/api/health' });
+
+    // Verify CSP
+    expect(response.headers['content-security-policy']).toBeDefined();
+
+    // Verify session cookie security
+    const setCookie = response.headers['set-cookie'];
+    if (setCookie) {
+      const cookies = parseCookieHeader(setCookie);
+      expect(cookies.httpOnly).toBe(true);
+      expect(cookies.secure).toBe(true);
+      expect(cookies.sameSite).toBe('strict');
+    }
+
+    // Verify no information disclosure
+    expect(response.headers['x-powered-by']).toBeUndefined();
+  });
+});
diff --git a/src/server/__tests__/test-utils.ts b/src/server/__tests__/test-utils.ts
new file mode 100644
index 00000000..b1870a6d
--- /dev/null
+++ b/src/server/__tests__/test-utils.ts
@@ -0,0 +1,108 @@
+import type { FastifyInstance } from 'fastify';
+import { setupServer } from '../server.js';
+import type { UISettings } from '../utils/settings.js';
+
+export async function buildTestServer(
+  overrides?: Partial<UISettings>
+): Promise<FastifyInstance> {
+  // Disable auth plugin by default — OAuth env vars are not available in CI/test
+  // and security tests don't exercise OAuth flows
+  if (!process.env.FEATURE_AUTH_ENABLED) {
+    process.env.FEATURE_AUTH_ENABLED = 'false';
+  }
+
+  // Apply test config via environment variables
+  if (overrides?.security?.session) {
+    if (overrides.security.session.http_only !== undefined) {
+      process.env.SESSION_HTTP_ONLY = String(overrides.security.session.http_only);
+    }
+    if (overrides.security.session.same_site) {
+      process.env.SESSION_SAME_SITE = overrides.security.session.same_site;
+    }
+  }
+
+  return await setupServer();
+}
+
+export interface CookieAttributes {
+  httpOnly?: boolean;
+  secure?: boolean;
+  sameSite?: 'strict' | 'lax' | 'none';
+  maxAge?: number;
+  path?: string;
+}
+
+export function parseCookieHeader(setCookieHeader: string | string[]): CookieAttributes {
+  const cookieStr = Array.isArray(setCookieHeader)
+    ? setCookieHeader[0]
+    : setCookieHeader;
+
+  const attrs: CookieAttributes = {};
+  const parts = cookieStr.split(';').map(p => p.trim());
+
+  for (const part of parts) {
+    const lower = part.toLowerCase();
+    if (lower === 'httponly') attrs.httpOnly = true;
+    if (lower === 'secure') attrs.secure = true;
+    if (lower.startsWith('samesite=')) {
+      attrs.sameSite = part.split('=')[1].toLowerCase() as any;
+    }
+    if (lower.startsWith('max-age=')) {
+      attrs.maxAge = parseInt(part.split('=')[1]);
+    }
+    if (lower.startsWith('path=')) {
+      attrs.path = part.split('=')[1];
+    }
+  }
+
+  return attrs;
+}
+
+export function assertCspDirective(
+  cspHeader: string,
+  directive: string,
+  expectedValues: string[]
+) {
+  const directives = cspHeader.split(';').map(d => d.trim());
+  const target = directives.find(d => d.startsWith(directive));
+
+  if (!target) {
+    throw new Error(`CSP directive '${directive}' not found in header: ${cspHeader}`);
+  }
+
+  for (const value of expectedValues) {
+    if (!target.includes(value)) {
+      throw new Error(`CSP directive '${directive}' missing value '${value}'. Found: ${target}`);
+    }
+  }
+}
+
+export async function bombardEndpoint(
+  server: FastifyInstance,
+  path: string,
+  count: number,
+  method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' = 'GET',
+  payload?: any
+): Promise<Array<{ statusCode: number; headers: Record<string, any> }>> {
+  const promises = Array.from({ length: count }, () =>
+    server.inject({
+      method,
+      url: path,
+      ...(payload ? { payload } : {})
+    })
+  );
+
+  return await Promise.all(promises);
+}
+
+export function generatePathTraversalPayloads(): string[] {
+  return [
+    '../../../etc/passwd',
+    '..\\..\\..\\windows\\system32\\config\\sam',
+    '/etc/shadow',
+    'config/../../secrets.yaml',
+    './config/../../../.env',
+    '....//....//....//etc/passwd',
+    'config/ui/../../.env'
+  ];
+}
diff --git a/src/server/controllers/v1/agent.ts b/src/server/controllers/v1/agent.ts
index 4e9c49a5..54cbbe6a 100644
--- a/src/server/controllers/v1/agent.ts
+++ b/src/server/controllers/v1/agent.ts
@@ -1,5 +1,10 @@
 import { FastifyInstance, FastifyReply, FastifyRequest } from "fastify";
-import { agentHost } from "../../utils/config.js";
+import { getSettings } from "../../utils/settings.js";
+
+function getAgentHost(): string {
+  const cfg = getSettings();
+  return cfg.agent.endpoint || process.env.AGENT_HOST || "http://localhost:5002";
+}
 
 interface StreamRequest {
   message: string;
@@ -8,11 +13,23 @@ interface StreamRequest {
   user_id: string;
 }
 
+function headerValue(request: FastifyRequest, name: string): string | undefined {
+  const v = request.headers[name];
+  return Array.isArray(v) ? v[0] : v;
+}
+
+function resolveAccessToken(request: FastifyRequest): string | undefined {
+  return (
+    request.session?.token?.access_token ||
+    headerValue(request, "x-auth-access-token") ||
+    headerValue(request, "x-token")
+  );
+}
+
 export async function handleStreamPost(fastify: FastifyInstance, request: FastifyRequest<{ Body: StreamRequest }>, reply: FastifyReply) {
   const { message, thread_id, session_id, user_id } = request.body;
 
-  // Extract SSO access token from session
-  const accessToken = request.session?.token?.access_token;
+  const accessToken = resolveAccessToken(request);
   
   fastify.log.info(`Stream request - Thread: ${thread_id}, User: ${user_id}, Token: ${accessToken ? 'Present' : 'Missing'}`);
 
@@ -34,13 +51,11 @@ export async function handleStreamPost(fastify: FastifyInstance, request: Fastif
       'Accept': 'text/event-stream'
     };
 
-    // Add SSO token if present
     if (accessToken) {
-      headers['X-Token'] = accessToken;
+      headers['Authorization'] = `Bearer ${accessToken}`;
     }
 
-    // Proxy request to agent backend
-    const agentUrl = `${agentHost}/v1/stream`;
+    const agentUrl = `${getAgentHost()}/v1/stream`;
     fastify.log.info(`Proxying to agent: ${agentUrl}`);
 
     const agentResponse = await fetch(agentUrl, {
@@ -102,8 +117,7 @@ export async function handleStreamPost(fastify: FastifyInstance, request: Fastif
 export async function handleHistoryGet(fastify: FastifyInstance, request: FastifyRequest<{ Params: { threadId: string } }>, reply: FastifyReply) {
   const { threadId } = request.params;
   
-  // Extract SSO access token from session
-  const accessToken = request.session?.token?.access_token;
+  const accessToken = resolveAccessToken(request);
   
   fastify.log.info(`History request for thread: ${threadId}, Token: ${accessToken ? 'Present' : 'Missing'}`);
 
@@ -113,13 +127,11 @@ export async function handleHistoryGet(fastify: FastifyInstance, request: Fastif
       'Content-Type': 'application/json'
     };
 
-    // Add SSO token if present
     if (accessToken) {
-      headers['X-Token'] = accessToken;
+      headers['Authorization'] = `Bearer ${accessToken}`;
     }
 
-    // Proxy request to agent backend
-    const agentUrl = `${agentHost}/v1/history/${threadId}`;
+    const agentUrl = `${getAgentHost()}/v1/history/${threadId}`;
     fastify.log.info(`Proxying to agent: ${agentUrl}`);
 
     const agentResponse = await fetch(agentUrl, {
diff --git a/src/server/index.ts b/src/server/index.ts
index bd2b4bf8..04759fdf 100644
--- a/src/server/index.ts
+++ b/src/server/index.ts
@@ -1,10 +1,16 @@
+import { shutdownTracing, startTracing } from "./tracing.js";
+
+startTracing();
+
 process.on("uncaughtException", (error) => {
   console.error("[Uncaught Exception]", {
     message: error.message,
     stack: error.stack,
     pid: process.pid,
   });
-  process.exit(1);
+  void shutdownTracing().finally(() => {
+    process.exit(1);
+  });
 });
 
 process.on("unhandledRejection", (reason, promise) => {
@@ -16,12 +22,34 @@ process.on("unhandledRejection", (reason, promise) => {
   process.exit(1);
 });
 
-import { setupServer } from "./server.js";
+process.on("SIGTERM", () => {
+  void shutdownTracing().finally(() => {
+    process.exit(0);
+  });
+});
 
 async function start() {
+  const { setupServer, startConfigWatcher } = await import("./server.js");
   const fastify = await setupServer();
   const port = Number(process.env.PORT) || 8080;
 
+  // Start config watcher for hot reload
+  // UI_CONFIG_PATH is set by deployer via ConfigMap mount, defaults to local path
+  const configPath = process.env.UI_CONFIG_PATH || "config/ui/settings.yaml";
+  try {
+    const stopWatcher = startConfigWatcher(configPath, fastify);
+    console.log(`[Server] Config watcher started on ${configPath}`);
+
+    // Cleanup watcher on shutdown
+    process.on("SIGTERM", () => {
+      console.log("[Server] Shutting down config watcher");
+      stopWatcher();
+    });
+  } catch (error) {
+    console.warn(`[Server] Could not start config watcher on ${configPath}:`, error);
+    console.warn(`[Server] Config hot reload disabled`);
+  }
+
   fastify.listen({ port, host: "0.0.0.0" }, function (err: Error | null) {
     if (err) {
       console.error(err);
@@ -30,4 +58,8 @@ async function start() {
   });
 }
 
-start().catch(console.error);
+try {
+  await start();
+} catch (err) {
+  console.error(err);
+}
diff --git a/src/server/plugins/auth-check.plugin.ts b/src/server/plugins/auth-check.plugin.ts
index 6db37ee4..89f29c5d 100644
--- a/src/server/plugins/auth-check.plugin.ts
+++ b/src/server/plugins/auth-check.plugin.ts
@@ -22,6 +22,28 @@ declare module "fastify" {
     redirectUri?: string;
   }
 }
+function headerValue(request: FastifyRequest, name: string): string | undefined {
+  const v = request.headers[name];
+  return Array.isArray(v) ? v[0] : v;
+}
+
+function buildGatewayLoginUrl(request: FastifyRequest): string {
+  const basePath = (process.env.BASE_PATH || "").replace(/\/+$/, "");
+  const redirectPath = `${basePath}${request.url}` || "/";
+  return `/login?redirect=${encodeURIComponent(redirectPath)}`;
+}
+
+function shouldSkipAuth(request: FastifyRequest): boolean {
+  const path = request.url.split("?")[0];
+  return (
+    path === "/_health" ||
+    path.startsWith("/auth/") ||
+    path.startsWith("/dist/") ||
+    path === "/favicon.ico" ||
+    path === "/login" ||
+    path === "/api/health/agent"
+  );
+}
 
 function authCheck(
   instance: FastifyInstance,
@@ -29,34 +51,65 @@ function authCheck(
   done: (err?: Error) => void
 ) {
   instance.addHook("preHandler", (request: FastifyRequest, reply: FastifyReply, next: () => void) => {
+    if (shouldSkipAuth(request)) {
+      next();
+      return;
+    }
+
     if (process.env.AUTH_ENABLED === "false") {
-      const dummyUser = {
-        accessToken: "access-token",
-        expiresAt: "2026-10-29T23:20:00.417Z",
-        cn: "John Wick",
-        displayName: "John",
-        email: "johnwick@redhat.com",
-        email_verified: false,
-        family_name: "Wick",
-        givenName: "John",
-        given_name: "John",
-        mail: "johnwick@redhat.com",
-        name: "John Wick",
-        preferred_username: "johnwick",
-        rhatUUID: "asdsadsad-e194-11ef-a0f1-safdsfds",
-        sn: "Wick",
-        sub: "1sdsd1ef7-7e0c-4c45-a250-dssdsd"
-      };
+      const gwEmail = headerValue(request, "x-auth-user-email");
+      const gwName = headerValue(request, "x-auth-user-name");
+      const gwSub = headerValue(request, "x-auth-user-sub");
+      const gwToken = headerValue(request, "x-auth-access-token") || headerValue(request, "x-token");
+
+      if (gwEmail) {
+        request.session.user = {
+          email: gwEmail,
+          email_verified: true,
+          family_name: gwName?.split(" ").pop() || "",
+          given_name: gwName?.split(" ")[0] || "",
+          name: gwName || gwEmail,
+          preferred_username: gwEmail.split("@")[0],
+          sub: gwSub || gwEmail,
+        };
+      } else if (!request.session.user) {
+        const dummyUser = {
+          accessToken: "access-token",
+          expiresAt: "2026-10-29T23:20:00.417Z",
+          cn: "John Wick",
+          displayName: "John",
+          email: "johnwick@redhat.com",
+          email_verified: false,
+          family_name: "Wick",
+          givenName: "John",
+          given_name: "John",
+          mail: "johnwick@redhat.com",
+          name: "John Wick",
+          preferred_username: "johnwick",
+          rhatUUID: "asdsadsad-e194-11ef-a0f1-safdsfds",
+          sn: "Wick",
+          sub: "1sdsd1ef7-7e0c-4c45-a250-dssdsd"
+        };
+        request.session.user = dummyUser;
+      }
 
-      request.session.user = dummyUser;
+      if (gwToken) {
+        request.session.token = {
+          access_token: gwToken,
+          expires_at: Date.now() + 3600_000,
+          id_token: "",
+          refresh_token: "",
+          scope: "openid",
+        };
+      }
     }
 
     if (!request.session?.user) {
       request.session.redirectUri = request.url;
-      reply.redirect("/login");
-    } else {
-      next();
+      return reply.redirect(buildGatewayLoginUrl(request));
     }
+
+    next();
   });
   done();
 }
diff --git a/src/server/plugins/auth.plugin.ts b/src/server/plugins/auth.plugin.ts
index 0700a61b..10b58276 100644
--- a/src/server/plugins/auth.plugin.ts
+++ b/src/server/plugins/auth.plugin.ts
@@ -1,10 +1,7 @@
 import oauthPlugin from "@fastify/oauth2";
 import { FastifyInstance } from "fastify";
-
-const SSO_CLIENT_ID = process.env.SSO_CLIENT_ID;
-const SSO_CLIENT_SECRET = process.env.SSO_CLIENT_SECRET;
-const SSO_ISSUER_HOST = process.env.SSO_ISSUER_HOST;
-const SSO_CALLBACK_URL = process.env.SSO_CALLBACK_URL;
+import fp from "fastify-plugin";
+import { getSettings } from "../utils/settings.js";
 
 import { OAuth2Namespace } from "@fastify/oauth2";
 
@@ -25,18 +22,20 @@ declare module "fastify" {
 }
 
 async function routes(fastify: FastifyInstance) {
+  const cfg = getSettings();
+
   fastify.register(oauthPlugin as any, {
     name: "redhatSSO",
     scope: ["profile", "email", "session:role-any"],
     credentials: {
       client: {
-        id: SSO_CLIENT_ID,
-        secret: SSO_CLIENT_SECRET,
+        id: cfg.auth.sso_client_id,
+        secret: cfg.auth.sso_client_secret,
       },
     },
-    callbackUri: SSO_CALLBACK_URL,
+    callbackUri: cfg.auth.sso_callback_url,
     discovery: {
-      issuer: SSO_ISSUER_HOST,
+      issuer: cfg.auth.sso_issuer_host,
     },
   });
 
@@ -68,6 +67,9 @@ async function routes(fastify: FastifyInstance) {
 
   fastify.get("/auth/refresh", async (request, reply) => {
     const token = (request as any).session.token;
+    if (!token) {
+      return reply.code(401).send({ message: "NoSession" });
+    }
     try {
       const { forceRefresh = "false" } = (request as any).query;
       if (forceRefresh === "true") {
@@ -77,18 +79,21 @@ async function routes(fastify: FastifyInstance) {
       await fastify.redhatSSO.userinfo(token.access_token);
 
       return reply.send({ message: "ValidToken" });
-    } catch (error: unknown) {
-      console.error(error);
-
-      const newAccessToken =
-        await fastify.redhatSSO.getNewAccessTokenUsingRefreshToken(token, {});
-
-      (request as any).session.token = newAccessToken.token;
-
-      return reply.send({
-        message: "RefreshedToken",
-        token: newAccessToken.token,
-      });
+    } catch {
+      try {
+        const newAccessToken =
+          await fastify.redhatSSO.getNewAccessTokenUsingRefreshToken(token, {});
+
+        (request as any).session.token = newAccessToken.token;
+
+        return reply.send({
+          message: "RefreshedToken",
+          token: newAccessToken.token,
+        });
+      } catch (refreshError) {
+        fastify.log.error({ err: refreshError }, 'Token refresh failed');
+        return reply.code(401).send({ message: "RefreshFailed" });
+      }
     }
   });
 
@@ -123,4 +128,4 @@ async function routes(fastify: FastifyInstance) {
   });
 }
 
-export { routes as authPlugin };
+export const authPlugin = fp(routes, { name: "auth-plugin" });
diff --git a/src/server/plugins/opa.plugin.ts b/src/server/plugins/opa.plugin.ts
new file mode 100644
index 00000000..182b8666
--- /dev/null
+++ b/src/server/plugins/opa.plugin.ts
@@ -0,0 +1,74 @@
+import fp from "fastify-plugin";
+import type { FastifyInstance } from "fastify";
+import { createOpaEngine, type OpaEngine, type PolicyViolation } from "../utils/opa.js";
+import { getSettings, type UISettings } from "../utils/settings.js";
+
+declare module "fastify" {
+  interface FastifyInstance {
+    opa: {
+      evaluate(): PolicyViolation[];
+      engine: OpaEngine;
+    };
+  }
+}
+
+function buildInput(cfg: UISettings): Record<string, unknown> {
+  const opaCfg = cfg.platform.opa;
+  return {
+    branding: cfg.branding,
+    features: cfg.features,
+    agent: cfg.agent,
+    security: cfg.security,
+    auth_provider: process.env.SSO_AUTH_PROVIDER || "oidc",
+    platform: {
+      opa: {
+        approved_auth_providers: opaCfg.approved_auth_providers,
+        internal_endpoint_suffixes: opaCfg.internal_endpoint_suffixes,
+        max_session_ttl_days: opaCfg.max_session_ttl_days,
+        restrict_debug_mode: opaCfg.restrict_debug_mode,
+        restricted_features: opaCfg.restricted_features,
+        max_rate_limit: opaCfg.max_rate_limit,
+      },
+    },
+  };
+}
+
+export default fp(
+  async function opaPlugin(fastify: FastifyInstance) {
+    const cfg = getSettings();
+    const opaCfg = cfg.platform.opa;
+
+    const engine = await createOpaEngine(opaCfg.policy_path, {
+      info: (msg) => fastify.log.info(msg),
+      warn: (msg) => fastify.log.warn(msg),
+      error: (msg) => fastify.log.error(msg),
+    });
+
+    function evaluate(): PolicyViolation[] {
+      const currentCfg = getSettings();
+      const input = buildInput(currentCfg);
+      return engine.evaluate(input);
+    }
+
+    const initialViolations = evaluate();
+    if (initialViolations.length > 0) {
+      for (const v of initialViolations) {
+        fastify.log.warn(`OPA policy violation: ${v.message}`);
+      }
+      if (opaCfg.fail_on_violation) {
+        throw new Error(
+          `OPA policy check failed with ${initialViolations.length} violation(s) — set platform.opa.fail_on_violation=false to allow startup`,
+        );
+      }
+    } else if (engine.isLoaded()) {
+      fastify.log.info("OPA policy check passed — no violations");
+    }
+
+    fastify.decorate("opa", { evaluate, engine });
+
+    fastify.addHook("onClose", () => {
+      engine.destroy();
+    });
+  },
+  { name: "opa-plugin" },
+);
diff --git a/src/server/plugins/trace.plugin.ts b/src/server/plugins/trace.plugin.ts
new file mode 100644
index 00000000..b081fd64
--- /dev/null
+++ b/src/server/plugins/trace.plugin.ts
@@ -0,0 +1,41 @@
+import { randomUUID } from "node:crypto";
+import type { FastifyPluginAsync } from "fastify";
+import fp from "fastify-plugin";
+
+const TRACEPARENT_RE =
+  /^[\da-f]{2}-([\da-f]{32})-[\da-f]{16}-[\da-f]{2}$/i;
+
+declare module "fastify" {
+  interface FastifyRequest {
+    traceId: string;
+    requestId: string;
+  }
+}
+
+const tracePlugin: FastifyPluginAsync = async function tracePlugin(fastify) {
+  fastify.addHook("onRequest", async (request) => {
+    const tp = request.headers.traceparent;
+    let traceId: string | undefined;
+    if (typeof tp === "string") {
+      const m = TRACEPARENT_RE.exec(tp.trim());
+      if (m) traceId = m[1].toLowerCase();
+    }
+    if (!traceId) {
+      const xt = request.headers["x-trace-id"];
+      traceId =
+        typeof xt === "string" && xt.length > 0 ? xt : randomUUID();
+    }
+    request.headers["x-trace-id"] = traceId;
+
+    request.traceId = traceId;
+    request.requestId = randomUUID();
+  });
+
+  fastify.addHook("onSend", async (request, reply, payload) => {
+    reply.header("X-Trace-ID", request.traceId);
+    reply.header("X-Request-ID", request.requestId);
+    return payload;
+  });
+};
+
+export default fp(tracePlugin, { name: "trace" });
diff --git a/src/server/router/api.router.ts b/src/server/router/api.router.ts
index 76ca126e..60aff1b8 100644
--- a/src/server/router/api.router.ts
+++ b/src/server/router/api.router.ts
@@ -1,5 +1,6 @@
 import { FastifyInstance, FastifyRequest, FastifyReply } from "fastify";
 import { handleHistoryGet, handleStreamPost } from "../controllers/v1/agent.js";
+import { getSettings } from "../utils/settings.js";
 
 interface StreamRequest {
   message: string;
@@ -13,6 +14,54 @@ async function apiRoutes(fastify: FastifyInstance) {
     return { status: "ok", timestamp: new Date().toISOString() };
   });
 
+  fastify.get("/version", async () => {
+    return {
+      version: process.env.APP_VERSION || "0.0.0",
+      buildHash: process.env.BUILD_HASH || "dev",
+      buildTime: process.env.BUILD_TIME || new Date().toISOString(),
+      environment: process.env.ENVIRONMENT || "production",
+    };
+  });
+
+  fastify.get("/announcement", async () => {
+    const cfg = getSettings();
+    const envMessage = process.env.ANNOUNCEMENT_MESSAGE;
+    const message = envMessage || cfg.announcement.message;
+    const enabled = envMessage ? true : cfg.announcement.enabled;
+    if (!enabled || !message) return { enabled: false };
+    return {
+      enabled: true,
+      message,
+      type: process.env.ANNOUNCEMENT_TYPE || cfg.announcement.type,
+    };
+  });
+
+  fastify.get("/config/branding", async (_request, reply) => {
+    const cfg = getSettings();
+    reply.header("Cache-Control", "public, max-age=3600");
+    return cfg.branding;
+  });
+
+  fastify.get("/config/features", async (_request, reply) => {
+    const cfg = getSettings();
+    reply.header("Cache-Control", "public, max-age=3600");
+    return cfg.features;
+  });
+
+  fastify.get("/config/compliance", async (_request, reply) => {
+    if (!fastify.hasDecorator("opa")) {
+      return { enabled: false, violations: [] };
+    }
+    const violations = fastify.opa.evaluate();
+    reply.header("Cache-Control", "no-store");
+    return {
+      enabled: true,
+      loaded: fastify.opa.engine.isLoaded(),
+      violations,
+      compliant: violations.length === 0,
+    };
+  });
+
   fastify.post("/v1/stream", async (request: FastifyRequest<{ Body: StreamRequest }>, reply: FastifyReply) => {
    handleStreamPost(fastify, request, reply);
   });
diff --git a/src/server/router/client.router.ts b/src/server/router/client.router.ts
index 67965c6c..9107a5cc 100644
--- a/src/server/router/client.router.ts
+++ b/src/server/router/client.router.ts
@@ -1,12 +1,15 @@
 import * as path from "node:path";
 import { FastifyInstance, FastifyRequest, FastifyReply } from "fastify";
 import authCheckPlugin from "../plugins/auth-check.plugin.js";
-import { agentHost } from "../utils/config.js";
+import { getAgentName, getSettings } from "../utils/settings.js";
 
-const appData = {
-  apiUrl: agentHost, // Agent backend URL - frontend calls agent directly
-  refreshableToken: "", // Unused - token comes from USER_DATA.accessToken
-};
+const BUILD_VERSION = Date.now().toString(36);
+const basePath = (process.env.BASE_PATH || "").replace(/\/+$/, "");
+
+function headerValue(request: FastifyRequest, name: string): string | undefined {
+  const v = request.headers[name];
+  return Array.isArray(v) ? v[0] : v;
+}
 
 async function routes(fastify: FastifyInstance) {
   await fastify.register(authCheckPlugin);
@@ -19,42 +22,80 @@ async function routes(fastify: FastifyInstance) {
 
   await fastify.register(import("@fastify/url-data"));
 
-  fastify.get("/_health", (request: FastifyRequest, reply: FastifyReply) => {
-    fastify.log.info("Health check request" + request.url);
+  fastify.get("/_health", (_request: FastifyRequest, reply: FastifyReply) => {
     reply.send("OK");
   });
 
-  fastify.get("/*", (request: FastifyRequest, reply: FastifyReply) => {
+  fastify.get("/auth/login", async (request: FastifyRequest, reply: FastifyReply) => {
+    const redirect =
+      typeof (request.query as { redirect?: string }).redirect === "string"
+        ? (request.query as { redirect: string }).redirect
+        : "/";
+    request.session.redirectUri = redirect;
+    return reply.redirect("/login");
+  })
+  
+  fastify.get("/mcp/oauth/callback", async (request: FastifyRequest, reply: FastifyReply) => {
+    const cfg = getSettings();
+    const agentHost = cfg.agent.endpoint || process.env.AGENT_HOST || "http://localhost:5002";
+    const qs = request.url.split("?")[1] || "";
+    const agentUrl = `${agentHost}/mcp/oauth/callback${qs ? `?${qs}` : ""}`;
+    const resp = await fetch(agentUrl, {
+      headers: { cookie: request.headers.cookie || "" },
+    });
+    reply
+      .status(resp.status)
+      .type(resp.headers.get("content-type") || "text/html");
+    return reply.send(await resp.text());
+  });
+
+  fastify.get("/*", async (request: FastifyRequest, reply: FastifyReply) => {
     const session = request.session;
     const { user, token } = session;
-    console.log(token);
+
+    const sessionToken = token?.access_token || headerValue(request, "x-auth-access-token") || headerValue(request, "x-token");
 
     const userData = {
       ...user,
-      accessToken: token?.access_token,
+      accessToken: sessionToken,
       expiresAt: token?.expires_at,
     };
 
+    const agentName = await getAgentName();
+    const appData = {
+      apiUrl: basePath ? `${basePath}/api/proxy/agent` : "",
+      basePath: basePath || "/",
+      refreshableToken: "",
+      agentName,
+    };
+
     reply.type("text/html");
-    reply.send(`<!DOCTYPE html>
-                    <html lang="en">
-                    <head>
-                        <meta charset="UTF-8">
-                        <meta name="viewport" content="width=device-width, initial-scale=1.0">
-                        <title>Template UI</title>
-                        <link rel="stylesheet" href="/dist/frontend/template-ui.css">
-                    </head>
-                    <body>
-                        <div id="root"></div>
-                        <script>
-                        window.USER_DATA = ${JSON.stringify(userData || {})}
-                        window.APP_DATA = ${JSON.stringify(appData)}
-                        </script>
-                        <script src="/dist/frontend/main.umd.js"></script>
-                        
-                    </body>
-                    </html>
-                    `);
+    return reply.send(`<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="icon" id="favicon" href="/favicon.ico" />
+    <title>${agentName}</title>
+    <link rel="stylesheet" href="${basePath || ""}/dist/frontend/template-ui.css">
+    <style>
+    /* PF6/Tailwind v4 co-existence: inline to bypass Vite CSS purging */
+    .pf-v6-c-button{--pf-v6-c-button--AlignItems:center}
+    .pf-v6-c-button__text{display:inline-flex!important;align-items:center;gap:.375rem}
+    .pf-v6-c-button.pf-m-block{--pf-v6-c-button--Display:flex;width:100%}
+    .pf-v6-c-masthead.pf-v6-c-masthead{display:flex!important;align-items:center;gap:0}
+    .pf-v6-c-masthead__toggle,.pf-v6-c-masthead__main{display:flex;align-items:center}
+    .pf-v6-c-masthead__content{flex:1 1 auto;display:flex;align-items:center;justify-content:flex-end}
+    .pf-v6-c-page{height:100vh;height:100dvh;max-height:100vh;max-height:100dvh;overflow:hidden}
+    .pf-v6-c-page__main-container{align-self:stretch!important;display:flex;flex-direction:column;overflow:hidden}
+    .pf-v6-c-page__main{flex:1 1 0%;min-height:0;display:flex;flex-direction:column;overflow:hidden}
+    </style>
+</head>
+<body>
+    <div id="root" data-user="${encodeURIComponent(JSON.stringify(userData || {}))}" data-app="${encodeURIComponent(JSON.stringify(appData))}"></div>
+    <script src="${basePath || ""}/dist/frontend/main.umd.js?v=${BUILD_VERSION}"></script>
+</body>
+</html>`);
   });
 }
 
diff --git a/src/server/router/logout.router.ts b/src/server/router/logout.router.ts
new file mode 100644
index 00000000..f68273e6
--- /dev/null
+++ b/src/server/router/logout.router.ts
@@ -0,0 +1,35 @@
+import fp from "fastify-plugin";
+import { FastifyInstance } from "fastify";
+
+const SESSION_COOKIE_NAME = "sessionId";
+
+async function logoutRoutes(fastify: FastifyInstance) {
+  fastify.post("/auth/logout", async (request, reply) => {
+    const secure = process.env.ENVIRONMENT === "production";
+    const baseClear = {
+      path: "/",
+      httpOnly: true,
+      secure,
+      sameSite: "lax" as const,
+    };
+
+    reply.clearCookie("access_token", { ...baseClear, maxAge: 0 });
+    reply.clearCookie("refresh_token", { ...baseClear, maxAge: 0 });
+    reply.clearCookie(SESSION_COOKIE_NAME, { ...baseClear, maxAge: 0 });
+
+    await new Promise<void>((resolve, reject) => {
+      request.session.destroy((err) => {
+        if (err) reject(err);
+        else resolve();
+      });
+    }).catch((err: unknown) => {
+      fastify.log.warn({ err }, "Session destroy failed during logout");
+    });
+
+    return reply.send({ success: true });
+  });
+}
+
+export default fp(logoutRoutes, {
+  name: "logout-router",
+});
diff --git a/src/server/router/proxy.router.ts b/src/server/router/proxy.router.ts
new file mode 100644
index 00000000..068dcffc
--- /dev/null
+++ b/src/server/router/proxy.router.ts
@@ -0,0 +1,840 @@
+import { FastifyInstance, FastifyReply } from 'fastify';
+import { randomUUID } from 'node:crypto';
+import { getSettings } from '../utils/settings.js';
+import authCheckPlugin from '../plugins/auth-check.plugin.js';
+
+function getAgentHost(): string {
+  const cfg = getSettings();
+  return cfg.agent.endpoint || process.env.AGENT_HOST || "http://localhost:5002";
+}
+
+/** In-memory LRU cache for thread state responses (avoids repeated LangGraph deserialization). */
+const THREAD_STATE_CACHE = new Map<string, { body: string; ts: number }>();
+const CACHE_TTL_MS = 30_000; // 30s
+const CACHE_MAX_ENTRIES = 50;
+
+function getCachedThreadState(threadId: string): string | null {
+  const entry = THREAD_STATE_CACHE.get(threadId);
+  if (!entry) return null;
+  if (Date.now() - entry.ts > CACHE_TTL_MS) {
+    THREAD_STATE_CACHE.delete(threadId);
+    return null;
+  }
+  return entry.body;
+}
+
+function setCachedThreadState(threadId: string, body: string): void {
+  if (THREAD_STATE_CACHE.size >= CACHE_MAX_ENTRIES) {
+    const oldest = THREAD_STATE_CACHE.keys().next().value;
+    if (oldest) THREAD_STATE_CACHE.delete(oldest);
+  }
+  THREAD_STATE_CACHE.set(threadId, { body, ts: Date.now() });
+}
+
+/** Invalidate cache when a new run completes on a thread. */
+export function invalidateThreadStateCache(threadId: string): void {
+  THREAD_STATE_CACHE.delete(threadId);
+}
+
+interface StreamRequestBody {
+  message: string;
+  thread_id: string;
+  user_id?: string;
+  session_id?: string;
+  stream_tokens?: boolean;
+  resume?: boolean;
+  memories?: string[];
+  rules?: string[];
+}
+
+/**
+ * Extract text from a LangGraph message content field, which may be
+ * a plain string OR an array of typed blocks [{type:"text", text:"..."}].
+ */
+function extractText(content: unknown): string {
+  if (typeof content === 'string') return content;
+  if (Array.isArray(content)) {
+    return content
+      .map((b: any) => {
+        if (typeof b === 'string') return b;
+        if (b?.type === 'text' && typeof b.text === 'string') return b.text;
+        return '';
+      })
+      .join('');
+  }
+  return '';
+}
+
+/**
+ * Translate a LangGraph messages-mode SSE event into the UI chunk format
+ * the frontend useDataStream hook expects.
+ *
+ * `messages/partial` events contain CUMULATIVE content (the full text so far),
+ * so we compute the delta against `prevPartial` and return only the new text.
+ *
+ * Returns [uiChunk | null, updatedPrevPartial].
+ */
+/**
+ * Extract a HITL interrupt payload from a LangGraph `updates` stream event.
+ * LangGraph 1.x surfaces interrupts as:
+ *   { "__interrupt__": [{ value: HITLInterruptValue, resumable: boolean, ... }] }
+ * Returns null when the updates event carries no interrupt.
+ */
+function extractInterruptFromUpdates(
+  payload: unknown,
+): { value: unknown; resumable: boolean } | null {
+  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return null;
+  const p = payload as Record<string, unknown>;
+  const interrupts = p.__interrupt__;
+  if (!Array.isArray(interrupts) || interrupts.length === 0) return null;
+  const first = interrupts[0] as Record<string, unknown>;
+  return { value: first.value, resumable: first.resumable !== false };
+}
+
+/**
+ * Extract tool_calls from a raw message. LangGraph streaming uses
+ * `additional_kwargs.function_call` (single) or `tool_calls` (array).
+ */
+function rewriteSubAgentName(tc: { name: string; args?: Record<string, any> }): string {
+  if (tc.name === 'task' && typeof tc.args?.subagent_type === 'string') {
+    return tc.args.subagent_type;
+  }
+  return tc.name;
+}
+
+function extractToolCalls(raw: Record<string, any>): { name: string; args: any; id: string }[] {
+  if (Array.isArray(raw.tool_calls) && raw.tool_calls.length > 0) {
+    return raw.tool_calls.map((tc: any) => ({
+      name: rewriteSubAgentName(tc),
+      args: tc.args ?? {},
+      id: tc.id ?? '',
+    }));
+  }
+  const fc = raw.additional_kwargs?.function_call;
+  if (fc && fc.name) {
+    let args = {};
+    try { args = typeof fc.arguments === 'string' ? JSON.parse(fc.arguments) : fc.arguments ?? {}; } catch { /* ignore */ }
+    return [{ name: fc.name, args, id: raw.id ?? '' }];
+  }
+  return [];
+}
+
+function translateMessageEvent(
+  sseType: string,
+  payload: unknown,
+  chunkId: number,
+  prevPartial: string,
+  sentMsgIds: Set<string>,
+): [Array<{ type: string; content: unknown }>, string] {
+  // ── Handle 'updates' events (complete node outputs with full args) ──
+  if (sseType === 'updates') {
+    const data = payload as Record<string, any> | null;
+    if (!data || typeof data !== 'object') return [[], prevPartial];
+
+    const chunks: Array<{ type: string; content: unknown }> = [];
+
+    const messageLists: any[][] = [];
+    for (const value of Object.values(data)) {
+      if (Array.isArray(value)) {
+        messageLists.push(value);
+      } else if (value && typeof value === 'object' && Array.isArray((value as any).messages)) {
+        messageLists.push((value as any).messages);
+      }
+    }
+
+    for (const messages of messageLists) {
+      for (const msg of messages) {
+        if (!msg || typeof msg !== 'object') continue;
+        const msgType = (msg.type ?? '').toString().toLowerCase();
+
+        if ((msgType === 'ai' || msgType === 'aimessage') && Array.isArray(msg.tool_calls) && msg.tool_calls.length > 0) {
+          const msgId = msg.id ?? `ai-upd-${chunkId}`;
+          if (sentMsgIds.has(msgId)) continue;
+          sentMsgIds.add(msgId);
+          const toolCalls = extractToolCalls(msg);
+          chunks.push({
+            type: 'message',
+            content: { type: 'ai', content: '', tool_calls: toolCalls, id: msgId },
+          });
+        }
+
+        if (msgType === 'tool' || msgType === 'toolmessage') {
+          const toolCallId = msg.tool_call_id ?? '';
+          const dedupKey = `tool-${toolCallId}`;
+          if (!sentMsgIds.has(dedupKey)) {
+            sentMsgIds.add(dedupKey);
+            chunks.push({
+              type: 'message',
+              content: {
+                type: 'tool',
+                content: extractText(msg.content) || JSON.stringify(msg.content),
+                tool_call_id: toolCallId,
+                name: msg.name ?? 'unknown',
+              },
+            });
+          }
+        }
+      }
+    }
+
+    return [chunks, prevPartial];
+  }
+
+  // ── Handle 'messages/partial' (text token streaming only) ──
+  if (sseType === 'messages/partial') {
+    if (!Array.isArray(payload) || payload.length === 0) return [[], prevPartial];
+    const [msg] = payload;
+    if (!msg || typeof msg !== 'object') return [[], prevPartial];
+
+    const raw = msg as Record<string, any>;
+    const toolCalls = extractToolCalls(raw);
+
+    if (toolCalls.length > 0) {
+      const fullText = extractText(raw.content);
+      return [[], fullText || prevPartial];
+    }
+
+    const fullText = extractText(raw.content);
+    return [[], fullText];
+  }
+
+  // ── Handle 'messages/complete' (fallback for anything not sent via updates) ──
+  if (sseType === 'messages/complete') {
+    if (!Array.isArray(payload) || payload.length === 0) return [[], prevPartial];
+    const [msg] = payload;
+    if (!msg || typeof msg !== 'object') return [[], prevPartial];
+
+    const raw = msg as Record<string, any>;
+    const msgType = (raw.type ?? '').toString().toLowerCase();
+
+    const toolCalls = extractToolCalls(raw);
+    if ((msgType === 'ai' || msgType === 'aimessage' || !msgType) && toolCalls.length > 0) {
+      const msgId = raw.id ?? `ai-${chunkId}`;
+      if (!sentMsgIds.has(msgId)) {
+        sentMsgIds.add(msgId);
+        return [[{
+          type: 'message',
+          content: { type: 'ai', content: '', tool_calls: toolCalls, id: msgId },
+        }], prevPartial];
+      }
+      return [[], prevPartial];
+    }
+
+    if (msgType === 'tool' || msgType === 'toolmessage') {
+      const toolCallId = raw.tool_call_id ?? '';
+      const dedupKey = `tool-${toolCallId}`;
+      if (sentMsgIds.has(dedupKey)) return [[], prevPartial];
+      sentMsgIds.add(dedupKey);
+      return [[{
+        type: 'message',
+        content: {
+          type: 'tool',
+          content: extractText(raw.content) || JSON.stringify(raw.content),
+          tool_call_id: toolCallId,
+          name: raw.name ?? 'unknown',
+        },
+      }], prevPartial];
+    }
+
+    if (msgType === 'ai' || msgType === 'aimessage') {
+      const fullText = extractText(raw.content);
+      if (fullText.length > 0) {
+        return [[], fullText];
+      }
+    }
+  }
+
+  return [[], prevPartial];
+}
+
+interface TokenPair {
+  accessToken: string | null;
+  refreshToken: string | null;
+  refreshFailed?: boolean;
+}
+
+/**
+ * Return a valid access + refresh token pair, refreshing via the SSO
+ * plugin if the current access token is expired or about to expire
+ * (30 s buffer).  Saves the refreshed token set back into the session.
+ *
+ * The refresh_token is forwarded so the agent can do its own refresh
+ * if the token expires while queued in the worker pipeline.
+ */
+async function ensureFreshTokens(
+  fastify: FastifyInstance,
+  request: any,
+): Promise<TokenPair> {
+  const session = request.session;
+  const token = session?.token;
+  if (!token?.access_token) return { accessToken: null, refreshToken: null };
+
+  const expiresAt = token.expires_at ? new Date(token.expires_at).getTime() : 0;
+  if (expiresAt - Date.now() > 30_000) {
+    return { accessToken: token.access_token, refreshToken: token.refresh_token ?? null };
+  }
+
+  try {
+    const sso = (fastify as any).redhatSSO;
+    if (!sso) return { accessToken: token.access_token, refreshToken: token.refresh_token ?? null };
+
+    const refreshed = await sso.getNewAccessTokenUsingRefreshToken(token, {});
+    session.token = refreshed.token;
+    fastify.log.info('Access token refreshed before agent call');
+    return {
+      accessToken: refreshed.token.access_token,
+      refreshToken: refreshed.token.refresh_token ?? null,
+    };
+  } catch (err) {
+    fastify.log.error({ err }, 'Token refresh failed');
+    return { accessToken: null, refreshToken: null, refreshFailed: true };
+  }
+}
+
+function sessionExpiredReply(reply: FastifyReply) {
+  return reply.status(401).send({
+    error: 'session_expired',
+    message: 'Token refresh failed. Please log in again.',
+  });
+}
+
+/** Forward client query string to the agent (e.g. GET /feedback/:id?user_id=...). */
+function buildForwardedQueryString(query: Record<string, unknown>): string {
+  const params = new URLSearchParams();
+  for (const [key, value] of Object.entries(query)) {
+    if (value === undefined) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) {
+        if (v !== undefined) params.append(key, String(v));
+      }
+    } else {
+      params.append(key, String(value));
+    }
+  }
+  const s = params.toString();
+  return s ? `?${s}` : '';
+}
+
+async function proxyRoutes(fastify: FastifyInstance) {
+  await fastify.register(authCheckPlugin);
+
+  fastify.addContentTypeParser('application/json', { parseAs: 'string', bodyLimit: 1048576 }, (req, body, done) => {
+    if (!body || (typeof body === 'string' && body.trim() === '')) {
+      done(null, undefined);
+    } else {
+      try { done(null, JSON.parse(body as string)); } catch (err) { done(err as Error, undefined); }
+    }
+  });
+
+  /**
+   * Streaming endpoint — translates between the UI's simple
+   * {message, thread_id, user_id} payload and Aegra's LangGraph
+   * Platform API (POST /threads/{id}/runs/stream).
+   */
+  fastify.post<{ Body: StreamRequestBody }>(
+    '/proxy/agent/v1/stream',
+    async (request, reply) => {
+      const cfg = getSettings();
+      const traceId = (request.headers['x-trace-id'] as string) || randomUUID();
+      const { accessToken, refreshToken, refreshFailed } = await ensureFreshTokens(fastify, request);
+
+      if (refreshFailed) {
+        return sessionExpiredReply(reply);
+      }
+
+      if (!accessToken && process.env.AUTH_ENABLED === 'true') {
+        return reply.status(401).send({ error: 'Not authenticated' });
+      }
+
+      const { message, thread_id, user_id, resume: isResume, memories, rules } = request.body;
+
+      const headers: Record<string, string> = {
+        'Content-Type': 'application/json',
+        'X-Trace-ID': traceId,
+      };
+      if (accessToken) {
+        headers['Authorization'] = `Bearer ${accessToken}`;
+      }
+      if (refreshToken) {
+        headers['X-Refresh-Token'] = refreshToken;
+      }
+
+      try {
+        // ── 1. Ensure the thread exists (idempotent) ──
+        fastify.log.info({ traceId, thread_id }, 'Creating thread');
+        const threadResp = await fetch(`${getAgentHost()}/threads`, {
+          method: 'POST',
+          headers,
+          body: JSON.stringify({
+            threadId: thread_id,
+            metadata: { user_identity: user_id ?? 'anonymous' },
+            ifExists: 'do_nothing',
+          }),
+          signal: AbortSignal.timeout(cfg.agent.timeout_ms),
+        });
+
+        if (!threadResp.ok) {
+          const body = await threadResp.text();
+          fastify.log.error(
+            { traceId, status: threadResp.status, body },
+            'Thread creation failed',
+          );
+          return reply.status(threadResp.status).send({ error: 'Thread creation failed' });
+        }
+        fastify.log.info({ traceId }, 'Thread ready');
+
+        // ── 2. Start a streaming run on that thread ──
+        const runUrl = `${getAgentHost()}/threads/${thread_id}/runs/stream`;
+        fastify.log.info({ traceId, runUrl }, 'Starting streaming run');
+
+        const runBody: Record<string, unknown> = {
+          assistant_id: 'agent',
+          stream_mode: ['messages', 'updates'],
+        };
+        if (isResume) {
+          runBody.command = { resume: message };
+        } else {
+          runBody.input = { messages: [{ role: 'human', content: message }] };
+        }
+
+        const configurable: Record<string, unknown> = {};
+        if (Array.isArray(memories) && memories.length > 0) configurable.user_memories = memories;
+        if (Array.isArray(rules) && rules.length > 0) configurable.user_rules = rules;
+        if (Object.keys(configurable).length > 0) {
+          runBody.config = { configurable, metadata: { trace_id: traceId } };
+        } else {
+          runBody.config = { metadata: { trace_id: traceId } };
+        }
+
+        const streamTimeoutMs = Math.max(cfg.agent.timeout_ms, 300_000);
+        const runResp = await fetch(runUrl, {
+          method: 'POST',
+          headers: { ...headers, Accept: 'text/event-stream' },
+          body: JSON.stringify(runBody),
+          signal: AbortSignal.timeout(streamTimeoutMs),
+        });
+
+        if (!runResp.ok) {
+          const body = await runResp.text();
+          fastify.log.error(
+            { traceId, status: runResp.status, body },
+            'Agent run/stream failed',
+          );
+          return reply.status(runResp.status).send({
+            error: 'Agent request failed',
+            status: runResp.status,
+          });
+        }
+
+        // ── 3. Translate Aegra SSE → UI chunk format ──
+        await reply.hijack();
+        reply.raw.writeHead(200, {
+          'Content-Type': 'text/event-stream',
+          'Cache-Control': 'no-cache',
+          'Connection': 'keep-alive',
+          'X-Trace-ID': traceId,
+          'X-Accel-Buffering': 'no',
+        });
+        reply.raw.flushHeaders();
+
+        const reader = (runResp.body as ReadableStream<Uint8Array>).getReader();
+        const decoder = new TextDecoder();
+        let buffer = '';
+        let chunkId = 0;
+        let clientGone = false;
+        let prevPartial = '';
+        const sentMsgIds = new Set<string>();
+        const completedTexts: string[] = [];
+
+        reply.raw.on('close', () => {
+          clientGone = true;
+          reader.cancel().catch(() => {});
+        });
+
+        let hasEmittedTextTokens = false;
+        let interruptEmittedFromStream = false;
+        // Per-message tracking for draft_discard (suppress text from tool-call messages)
+        let currentStreamingMsgId = '';
+        let textEmittedForCurrentMsg = false;
+        const discardedMsgIds = new Set<string>();
+
+        try {
+          while (!clientGone) {
+            const { done, value } = await reader.read();
+            if (done) break;
+
+            buffer += decoder.decode(value, { stream: true });
+
+            const segments = buffer.split('\n\n');
+            buffer = segments.pop() ?? '';
+
+            for (const segment of segments) {
+              if (clientGone) break;
+              const trimmed = segment.trim();
+              if (!trimmed) continue;
+
+              let sseType = '';
+              let sseData = '';
+              for (const line of trimmed.split('\n')) {
+                if (line.startsWith('event:')) sseType = line.slice(6).trim();
+                else if (line.startsWith('data:')) sseData += line.slice(5).trim();
+              }
+
+              if (!sseData || sseType === 'end') continue;
+
+              if (sseType === 'metadata') {
+                try {
+                  const parsed = JSON.parse(sseData) as Record<string, unknown>;
+                  fastify.log.info({ traceId, sseType, parsedKeys: Object.keys(parsed) }, 'Raw metadata SSE from agent');
+
+                  if (
+                    typeof parsed === 'object' &&
+                    parsed !== null &&
+                    !Array.isArray(parsed)
+                  ) {
+                    // LangGraph Platform metadata has { run_id } at top level
+                    // Emit in the format the frontend expects: { type: 'metadata', content: { run_id, trace_id, thread_id } }
+                    const runId = (parsed.run_id as string) || '';
+                    const metaPayload = {
+                      type: 'metadata',
+                      content: {
+                        run_id: runId,
+                        trace_id: runId,
+                        thread_id: thread_id,
+                      },
+                    };
+                    reply.raw.write(`data: ${JSON.stringify(metaPayload)}\n\n`);
+                    chunkId++;
+                  }
+                } catch {
+                  fastify.log.debug({ traceId, sseType, sseData }, 'Unparseable metadata SSE');
+                }
+                continue;
+              }
+
+              try {
+                const parsed = JSON.parse(sseData) as unknown;
+
+                if (sseType === 'updates') {
+                  const interrupt = extractInterruptFromUpdates(parsed);
+                  if (interrupt) {
+                    const interruptChunk = {
+                      type: 'interrupt',
+                      content: { value: interrupt.value, resumable: interrupt.resumable },
+                      chunk_id: chunkId,
+                    };
+                    reply.raw.write(`data: ${JSON.stringify(interruptChunk)}\n\n`);
+                    chunkId++;
+                    interruptEmittedFromStream = true;
+                    fastify.log.info({ traceId }, 'Emitted HITL interrupt from updates stream');
+                  }
+                }
+
+                const isMcpStatus =
+                  sseType === 'mcp_status' ||
+                  (typeof parsed === 'object' &&
+                    parsed !== null &&
+                    !Array.isArray(parsed) &&
+                    (parsed as Record<string, unknown>).type === 'mcp_status');
+                if (isMcpStatus) {
+                  reply.raw.write(`event: mcp_status\ndata: ${JSON.stringify(parsed)}\n\n`);
+                  chunkId++;
+                  continue;
+                }
+
+                // Reset per-message state before translation
+                if (sseType === 'messages/partial' && Array.isArray(parsed) && parsed.length > 0) {
+                  const peekId = (parsed[0] as Record<string, any>)?.id ?? '';
+                  if (peekId && peekId !== currentStreamingMsgId) {
+                    currentStreamingMsgId = peekId;
+                    textEmittedForCurrentMsg = false;
+                    prevPartial = '';
+                  }
+                }
+
+                const [uiChunks, nextPartial] = translateMessageEvent(
+                  sseType,
+                  parsed,
+                  chunkId,
+                  prevPartial,
+                  sentMsgIds,
+                );
+
+                // Detect tool_calls in partials and discard any text already streamed
+                if (sseType === 'messages/partial' && Array.isArray(parsed) && parsed.length > 0) {
+                  const partialMsg = parsed[0] as Record<string, any>;
+                  const partialMsgId = partialMsg?.id ?? '';
+                  const partialToolCalls = extractToolCalls(partialMsg ?? {});
+                  if (partialToolCalls.length > 0 && textEmittedForCurrentMsg) {
+                    reply.raw.write(`data: ${JSON.stringify({ type: 'draft_discard', chunk_id: chunkId })}\n\n`);
+                    chunkId++;
+                    textEmittedForCurrentMsg = false;
+                    hasEmittedTextTokens = false;
+                    prevPartial = nextPartial;
+                    discardedMsgIds.add(partialMsgId);
+                    completedTexts.length = 0;
+                  }
+                }
+
+                if (nextPartial.length > prevPartial.length && uiChunks.length === 0) {
+                  const isEchoOfPrior = completedTexts.some(
+                    (ct) => nextPartial.length <= ct.length && ct.startsWith(nextPartial),
+                  );
+                  if (!isEchoOfPrior) {
+                    const delta = nextPartial.slice(prevPartial.length);
+                    reply.raw.write(`data: ${JSON.stringify({ type: 'token', content: delta, chunk_id: chunkId })}\n\n`);
+                    chunkId++;
+                    hasEmittedTextTokens = true;
+                    textEmittedForCurrentMsg = true;
+                  }
+                }
+
+                if (sseType === 'messages/complete' && uiChunks.length === 0 && nextPartial.length > 0) {
+                  const completeMsgId = Array.isArray(parsed) && parsed.length > 0
+                    ? ((parsed[0] as Record<string, any>)?.id ?? '')
+                    : '';
+                  if (!discardedMsgIds.has(completeMsgId)) {
+                    completedTexts.push(nextPartial);
+                  }
+                }
+
+                prevPartial = nextPartial;
+                for (const chunk of uiChunks) {
+                  reply.raw.write(`data: ${JSON.stringify({ ...chunk, chunk_id: chunkId })}\n\n`);
+                  chunkId++;
+                }
+              } catch {
+                fastify.log.debug({ traceId, sseType, sseData }, 'Unparseable SSE data');
+              }
+            }
+          }
+        } finally {
+          reader.releaseLock();
+        }
+
+        if (!clientGone) {
+          if (prevPartial.length > 0 && !hasEmittedTextTokens) {
+            const isEcho = completedTexts.some(
+              (ct) => prevPartial.length <= ct.length && ct.startsWith(prevPartial),
+            );
+            if (!isEcho) {
+              const flush = { type: 'token', content: prevPartial, chunk_id: chunkId };
+              reply.raw.write(`data: ${JSON.stringify(flush)}\n\n`);
+              chunkId++;
+            }
+          }
+
+          try {
+            const stateResp = await fetch(
+              `${getAgentHost()}/threads/${thread_id}/state`,
+              {
+                method: 'GET',
+                headers,
+                signal: AbortSignal.timeout(cfg.agent.timeout_ms),
+              },
+            );
+            if (stateResp.ok) {
+              const threadState = await stateResp.json() as Record<string, unknown>;
+              const tasks = Array.isArray(threadState.tasks) ? threadState.tasks : [];
+              const interrupted = tasks.find(
+                (t: any) => Array.isArray(t?.interrupts) && t.interrupts.length > 0,
+              );
+              if (interrupted && !interruptEmittedFromStream) {
+                const firstInterrupt = (interrupted as any).interrupts[0];
+                const interruptChunk = {
+                  type: 'interrupt',
+                  content: {
+                    value: firstInterrupt?.value ?? null,
+                    resumable: true,
+                  },
+                  chunk_id: chunkId,
+                };
+                reply.raw.write(`data: ${JSON.stringify(interruptChunk)}\n\n`);
+                chunkId++;
+                fastify.log.info({ traceId }, 'Emitted HITL interrupt from thread state (post-stream fallback)');
+              }
+            }
+          } catch (err) {
+            fastify.log.warn({ traceId, err }, 'Failed to check thread state for interrupts');
+          }
+
+          fastify.log.info({ traceId, chunkId }, 'Stream complete');
+          invalidateThreadStateCache(thread_id);
+          reply.raw.end('data: [DONE]\n\n');
+        }
+      } catch (error: unknown) {
+        const errName = (error as Error).name;
+        if (errName === 'AbortError') {
+          fastify.log.info({ traceId }, 'Client disconnected, stream aborted');
+          return;
+        }
+        if (errName === 'TimeoutError') {
+          fastify.log.warn({ traceId }, 'Agent stream timed out');
+        } else {
+          fastify.log.error({ traceId, err: error }, 'Proxy stream error');
+        }
+        if (reply.raw.headersSent) {
+          reply.raw.end();
+        } else {
+          reply.status(502).send({ error: 'Failed to connect to agent service' });
+        }
+      }
+    },
+  );
+
+  fastify.all<{ Params: { '*': string } }>(
+    '/proxy/agent/*',
+    async (request, reply) => {
+      const cfg = getSettings();
+      const traceId = (request.headers['x-trace-id'] as string) || randomUUID();
+      const path = (request.params as any)['*'];
+      const { accessToken, refreshToken, refreshFailed } = await ensureFreshTokens(fastify, request);
+
+      if (refreshFailed) {
+        return sessionExpiredReply(reply);
+      }
+
+      if (!accessToken && process.env.AUTH_ENABLED === 'true') {
+        return reply.status(401).send({ error: 'Not authenticated' });
+      }
+
+      const headers: Record<string, string> = {
+        'X-Trace-ID': traceId,
+      };
+      if (request.method !== 'DELETE' && request.method !== 'GET') {
+        headers['Content-Type'] = 'application/json';
+      }
+
+      if (accessToken) {
+        headers['Authorization'] = `Bearer ${accessToken}`;
+      }
+      if (refreshToken) {
+        headers['X-Refresh-Token'] = refreshToken;
+      }
+
+      try {
+        const queryString = buildForwardedQueryString(request.query as Record<string, unknown>);
+        const agentUrl = `${getAgentHost()}/${path}${queryString}`;
+        fastify.log.info({ traceId, method: request.method, agentUrl }, 'Proxying request to agent');
+
+        // Check BFF cache for GET /threads/{id}/state
+        const threadStateMatch = request.method === 'GET' && path.match(/^threads\/([^/]+)\/state$/);
+        if (threadStateMatch) {
+          const cached = getCachedThreadState(threadStateMatch[1]);
+          if (cached) {
+            fastify.log.info({ traceId }, 'Thread state cache HIT');
+            reply.header('X-Trace-ID', traceId);
+            reply.header('Content-Type', 'application/json');
+            reply.header('X-Cache', 'HIT');
+            return reply.status(200).send(cached);
+          }
+        }
+
+        const fetchOptions: RequestInit = {
+          method: request.method,
+          headers,
+          signal: AbortSignal.timeout(cfg.agent.timeout_ms),
+        };
+
+        if (request.method !== 'GET' && request.method !== 'HEAD' && request.body) {
+          fetchOptions.body = JSON.stringify(request.body);
+        }
+
+        const agentResponse = await fetch(agentUrl, fetchOptions);
+
+        reply.header('X-Trace-ID', traceId);
+        reply.status(agentResponse.status);
+
+        const contentType = agentResponse.headers.get('content-type');
+        if (contentType) {
+          reply.header('Content-Type', contentType);
+        }
+
+        const responseBody = await agentResponse.text();
+
+        // Cache successful thread state responses
+        if (threadStateMatch && agentResponse.ok) {
+          setCachedThreadState(threadStateMatch[1], responseBody);
+          reply.header('X-Cache', 'MISS');
+        }
+
+        return reply.send(responseBody);
+      } catch (error) {
+        fastify.log.error({ traceId, err: error }, 'Proxy error');
+        return reply.status(502).send({ error: 'Failed to connect to agent service' });
+      }
+    }
+  );
+
+  fastify.post('/proxy/agent/feedback', async (request, reply) => {
+    const cfg = getSettings();
+    const traceId = (request.headers['x-trace-id'] as string) || randomUUID();
+    const { accessToken, refreshFailed } = await ensureFreshTokens(fastify, request);
+
+    if (refreshFailed) {
+      return sessionExpiredReply(reply);
+    }
+
+    const headers: Record<string, string> = {
+      'Content-Type': 'application/json',
+      'X-Trace-ID': traceId,
+    };
+
+    if (accessToken) {
+      headers['Authorization'] = `Bearer ${accessToken}`;
+    }
+
+    try {
+      const agentUrl = `${getAgentHost()}/feedback`;
+      const agentResponse = await fetch(agentUrl, {
+        method: 'POST',
+        headers,
+        body: JSON.stringify(request.body),
+        signal: AbortSignal.timeout(cfg.agent.timeout_ms),
+      });
+
+      reply.header('X-Trace-ID', traceId);
+      reply.status(agentResponse.status);
+      const responseBody = await agentResponse.text();
+      return reply.send(responseBody);
+    } catch (error) {
+      fastify.log.error({ traceId, err: error }, 'Feedback proxy error');
+      return reply.status(502).send({ error: 'Failed to send feedback' });
+    }
+  });
+
+  fastify.get('/health/agent', async (request, reply) => {
+    try {
+      const agentResponse = await fetch(`${getAgentHost()}/health`, {
+        signal: AbortSignal.timeout(5000),
+      });
+      const body = agentResponse.ok ? await agentResponse.json().catch(() => ({})) as Record<string, unknown> : {};
+      return reply.send({
+        status: agentResponse.ok ? ((body as Record<string, unknown>).status || 'healthy') : 'unhealthy',
+        statusCode: agentResponse.status,
+        timestamp: new Date().toISOString(),
+      });
+    } catch {
+      return reply.send({
+        status: 'unreachable',
+        timestamp: new Date().toISOString(),
+      });
+    }
+  });
+
+  fastify.post('/auth/generate-one-time-token', async (request, reply) => {
+    const { accessToken, refreshFailed } = await ensureFreshTokens(fastify, request);
+
+    if (refreshFailed) {
+      return sessionExpiredReply(reply);
+    }
+
+    if (!accessToken && process.env.AUTH_ENABLED === 'true') {
+      return reply.status(401).send({ error: 'Not authenticated' });
+    }
+
+    return reply.send({ token: accessToken || '' });
+  });
+}
+
+export { proxyRoutes };
diff --git a/src/server/server.ts b/src/server/server.ts
index 850b4009..7a128ad9 100644
--- a/src/server/server.ts
+++ b/src/server/server.ts
@@ -1,7 +1,15 @@
 import Fastify from "fastify";
+import type { FastifyInstance } from "fastify";
 import { clientRoutes } from "./router/client.router.js";
 import { apiRoutes } from "./router/api.router.js";
+import { proxyRoutes } from "./router/proxy.router.js";
+import logoutPlugin from "./router/logout.router.js";
 import { authPlugin } from "./plugins/auth.plugin.js";
+import opaPlugin from "./plugins/opa.plugin.js";
+import { buildSessionStore, connectRedis } from "./utils/redis.js";
+import tracePlugin from "./plugins/trace.plugin.js";
+import { getSettings } from "./utils/settings.js";
+import { watchConfig } from "./utils/configWatcher.js";
 
 interface LoggerConfig {
   development: {
@@ -13,38 +21,105 @@ interface LoggerConfig {
       };
     };
   };
-  production: boolean;
-  test: boolean;
+  production: { level: string };
+  test: { level: string };
 }
 
-const envToLogger: LoggerConfig = {
-  development: {
-    transport: {
-      target: "pino-pretty",
-      options: {
-        translateTime: "HH:MM:ss",
-        ignore: "pid,hostname",
+export async function setupServer(): Promise<FastifyInstance> {
+  const cfg = getSettings();
+
+  const envToLogger: LoggerConfig = {
+    development: {
+      transport: {
+        target: "pino-pretty",
+        options: {
+          translateTime: "HH:MM:ss",
+          ignore: "pid,hostname",
+        },
       },
     },
-  },
-  production: false,
-  test: false,
-};
-
-const environment =
-  (process.env.ENVIRONMENT as keyof LoggerConfig) || "production";
-
-const fastify = Fastify({
-  logger: envToLogger[environment] ?? true,
-});
-
-await fastify.register(import("@fastify/cors"), {
-  origin: 'http://localhost:5173', // Or your specific origin
-  optionsSuccessStatus: 200,
-  credentials: true
-});
-export async function setupServer() {
-  // Register CORS to allow cross-origin requests
+    production: {
+      level: cfg.logging.level,
+    },
+    test: { level: "silent" },
+  };
+
+  const environment =
+    (process.env.ENVIRONMENT as keyof LoggerConfig) || "production";
+
+  const fastify = Fastify({
+    logger: envToLogger[environment] ?? true,
+    bodyLimit: cfg.server.body_limit,
+  });
+
+  // Explicitly remove information disclosure headers
+  fastify.addHook('onSend', async (request, reply) => {
+    reply.removeHeader('X-Powered-By');
+    reply.removeHeader('Server');
+  });
+
+  await fastify.register(tracePlugin);
+
+  await fastify.register(import("@fastify/cors"), {
+    origin: process.env.CORS_ORIGIN || cfg.cors.origin,
+    optionsSuccessStatus: 200,
+    credentials: true,
+  });
+  await connectRedis();
+  const store = buildSessionStore();
+  if (store) {
+    fastify.log.info("Using Redis-backed session store");
+  } else {
+    fastify.log.info("Using in-memory session store (no REDIS_HOST)");
+  }
+
+  if (cfg.security.helmet.enabled) {
+    const csp = cfg.security.helmet.csp;
+
+    // Build connect-src with agent endpoint
+    const connectSrc = [...csp.connect_src];
+    if (cfg.agent.endpoint) {
+      try {
+        const agentUrl = new URL(cfg.agent.endpoint);
+        const agentOrigin = `${agentUrl.protocol}//${agentUrl.host}`;
+        if (!connectSrc.includes(agentOrigin)) {
+          connectSrc.push(agentOrigin);
+        }
+      } catch {
+        fastify.log.warn('Invalid agent.endpoint URL, not added to CSP connect-src');
+      }
+    }
+
+    await fastify.register(import("@fastify/helmet"), {
+      crossOriginEmbedderPolicy: cfg.security.helmet.cross_origin_embedder_policy,
+      contentSecurityPolicy: {
+        useDefaults: false,
+        directives: {
+          defaultSrc: csp.default_src,
+          scriptSrc: csp.script_src,
+          styleSrc: csp.style_src,
+          imgSrc: csp.img_src,
+          connectSrc: connectSrc,
+          fontSrc: csp.font_src,
+          objectSrc: csp.object_src,
+          frameAncestors: csp.frame_ancestors,
+        },
+      },
+    });
+  }
+
+  if (cfg.security.rate_limit.enabled) {
+    const rl = cfg.security.rate_limit;
+    const excludeSet = new Set(rl.exclude_paths);
+    await fastify.register(import("@fastify/rate-limit"), {
+      max: rl.max,
+      timeWindow: rl.window,
+      allowList: (request) => {
+        const path = request.url.split("?")[0];
+        return excludeSet.has(path);
+      },
+    });
+  }
 
   await fastify.register(import("@fastify/cookie"));
   await fastify.register(import("@fastify/session"), {
@@ -52,18 +127,96 @@ export async function setupServer() {
       process.env.COOKIE_SIGN ||
       "a secret with minimum length of 32 characters",
     cookie: {
-      secure: false,
-      maxAge: 1000 * 60 * 60 * 24 * 30,
+      secure: cfg.security.session.secure_cookie,
+      httpOnly: cfg.security.session.http_only ?? true,
+      sameSite: cfg.security.session.same_site ?? 'lax',
+      maxAge: 1000 * 60 * 60 * 24 * cfg.security.session.max_age_days,
+      path: '/',
     },
+    ...(store ? { store } : {}),
   });
 
-  if (process.env.AUTH_ENABLED === "true") {
+  if (cfg.features.auth_enabled) {
     await fastify.register(authPlugin);
   }
 
+  if (cfg.platform.opa.enabled) {
+    await fastify.register(opaPlugin);
+  }
+
+  await fastify.register(logoutPlugin);
+
+  if (process.env.ENVIRONMENT === "development" && process.env.TEST_JWT_DIR) {
+    const fs = await import("fs");
+    fastify.get("/test-login/:username", async (request, reply) => {
+      const { username } = request.params as { username: string };
+      const tokenFile = `${process.env.TEST_JWT_DIR}/${username}_token.txt`;
+      if (!fs.existsSync(tokenFile)) {
+        return reply.status(404).send({ error: `No token for '${username}'. Generate with jwt_provider.` });
+      }
+      const accessToken = fs.readFileSync(tokenFile, "utf-8").trim();
+      const session = (request as any).session;
+      session.user = {
+        sub: username,
+        preferred_username: username,
+        name: username.charAt(0).toUpperCase() + username.slice(1),
+        displayName: username.charAt(0).toUpperCase() + username.slice(1),
+        email: `${username}@test.local`,
+      };
+      session.token = {
+        access_token: accessToken,
+        expires_at: new Date(Date.now() + 3600_000).toISOString(),
+      };
+      return reply.redirect("/");
+    });
+  }
+
   await fastify.register(apiRoutes, { prefix: "/api" });
-  
+  await fastify.register(proxyRoutes, { prefix: "/api" });
+
   await fastify.register(clientRoutes);
 
   return fastify;
 }
+
+export function startConfigWatcher(configPath: string, server: FastifyInstance) {
+  const cfg = getSettings();
+  const cleanup = watchConfig(configPath, (newSettings) => {
+    server.log.info('[ConfigWatcher] Settings reloaded');
+
+    const restartRequired = [];
+    if (newSettings.security.rate_limit.enabled !== cfg.security.rate_limit.enabled ||
+        newSettings.security.rate_limit.max !== cfg.security.rate_limit.max ||
+        newSettings.security.rate_limit.window !== cfg.security.rate_limit.window) {
+      restartRequired.push('rate_limit (requires server restart)');
+    }
+    if (newSettings.security.session.max_age_days !== cfg.security.session.max_age_days ||
+        newSettings.security.session.secure_cookie !== cfg.security.session.secure_cookie) {
+      restartRequired.push('session (requires server restart)');
+    }
+    if (newSettings.security.helmet.enabled !== cfg.security.helmet.enabled) {
+      restartRequired.push('helmet (requires server restart)');
+    }
+
+    if (restartRequired.length > 0) {
+      server.log.warn({ settings: restartRequired }, '[ConfigWatcher] The following settings changed but require server restart:');
+    }
+
+    const autoApplied = [];
+    if (newSettings.agent.timeout_ms !== cfg.agent.timeout_ms) {
+      autoApplied.push(`agent.timeout_ms: ${cfg.agent.timeout_ms} → ${newSettings.agent.timeout_ms}`);
+    }
+    if (newSettings.agent.endpoint !== cfg.agent.endpoint) {
+      autoApplied.push(`agent.endpoint: ${cfg.agent.endpoint} → ${newSettings.agent.endpoint}`);
+    }
+    if (JSON.stringify(newSettings.branding) !== JSON.stringify(cfg.branding)) {
+      autoApplied.push('branding (colors, title, logo)');
+    }
+
+    if (autoApplied.length > 0) {
+      server.log.info({ settings: autoApplied }, '[ConfigWatcher] Settings applied without restart:');
+    }
+  });
+
+  return cleanup;
+}
diff --git a/src/server/tracing.ts b/src/server/tracing.ts
new file mode 100644
index 00000000..4831f880
--- /dev/null
+++ b/src/server/tracing.ts
@@ -0,0 +1,65 @@
+import { getNodeAutoInstrumentations } from "@opentelemetry/auto-instrumentations-node";
+import { OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-http";
+import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
+import { ATTR_SERVICE_NAME } from "@opentelemetry/semantic-conventions";
+import { resourceFromAttributes } from "@opentelemetry/resources";
+import { NodeSDK } from "@opentelemetry/sdk-node";
+import { PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
+import { getSettings } from "./utils/settings.js";
+
+function otlpBaseUrl(): string {
+  const raw = process.env.OTEL_EXPORTER_OTLP_ENDPOINT ?? "http://localhost:4318";
+  return raw.replace(/\/$/, "");
+}
+
+function createSdk(): NodeSDK {
+  const cfg = getSettings();
+  const traceExporter = new OTLPTraceExporter({
+    url: `${otlpBaseUrl()}/v1/traces`,
+  });
+  const metricExporter = new OTLPMetricExporter({
+    url: `${otlpBaseUrl()}/v1/metrics`,
+  });
+
+  return new NodeSDK({
+    resource: resourceFromAttributes({
+      [ATTR_SERVICE_NAME]: cfg.otel.service_name,
+    }),
+    traceExporter,
+    metricReaders: [
+      new PeriodicExportingMetricReader({
+        exporter: metricExporter,
+      }),
+    ],
+    instrumentations: [
+      getNodeAutoInstrumentations({
+        "@opentelemetry/instrumentation-fs": { enabled: false },
+      }),
+    ],
+  });
+}
+
+let sdk: NodeSDK | undefined;
+
+export function startTracing(): void {
+  const cfg = getSettings();
+  if (!cfg.otel.enabled) {
+    return;
+  }
+  if (sdk) {
+    return;
+  }
+  sdk = createSdk();
+  sdk.start();
+}
+
+export async function shutdownTracing(): Promise<void> {
+  if (!sdk) {
+    return;
+  }
+  try {
+    await sdk.shutdown();
+  } finally {
+    sdk = undefined;
+  }
+}
diff --git a/src/server/utils/config-edge-cases.test.ts b/src/server/utils/config-edge-cases.test.ts
new file mode 100644
index 00000000..914c0dce
--- /dev/null
+++ b/src/server/utils/config-edge-cases.test.ts
@@ -0,0 +1,264 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { getSettings, resetSettings } from "./settings.js";
+import { writeFileSync, unlinkSync, mkdirSync, existsSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const configDir = resolve(__dirname, "../../../config/ui");
+const testConfigPath = resolve(configDir, "edge-case-settings.yaml");
+
+// Minimal valid YAML that passes all validation
+const VALID_YAML_BASE = `
+branding:
+  title: "Test Agent"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+`;
+
+function saveEnv(...keys: string[]) {
+  const saved: Record<string, string | undefined> = {};
+  for (const k of keys) saved[k] = process.env[k];
+  return () => {
+    for (const k of keys) {
+      if (saved[k] === undefined) delete process.env[k];
+      else process.env[k] = saved[k];
+    }
+  };
+}
+
+beforeEach(() => {
+  resetSettings();
+  mkdirSync(configDir, { recursive: true });
+  delete process.env.UI_CONFIG_PATH;
+});
+
+afterEach(() => {
+  resetSettings();
+  try {
+    if (existsSync(testConfigPath)) unlinkSync(testConfigPath);
+  } catch { /* ignore */ }
+});
+
+// ── Invalid YAML → clear error ─────────────────────────────────────────────
+
+describe("Invalid YAML → clear parse error", () => {
+  it("throws a descriptive error for syntactically broken YAML", () => {
+    writeFileSync(testConfigPath, "key: value:\n  bad: [indent\n");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow(/Config parse error: invalid YAML/);
+  });
+
+  it("error message includes the config file path", () => {
+    writeFileSync(testConfigPath, ": invalid_start\n  broken\n");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow(testConfigPath);
+  });
+
+  it("throws for YAML with an unclosed flow sequence", () => {
+    writeFileSync(testConfigPath, "items: [one, two\n");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow(/Config parse error/);
+  });
+});
+
+// ── Missing YAML → graceful fallback to defaults ────────────────────────────
+
+describe("Missing YAML → throws when UI_CONFIG_PATH is explicit", () => {
+  it("throws when explicit UI_CONFIG_PATH points to nonexistent file", () => {
+    process.env.UI_CONFIG_PATH = resolve(configDir, "nonexistent-99999.yaml");
+
+    expect(() => getSettings()).toThrow(/Config file not found/);
+  });
+
+  it("returns defaults when no UI_CONFIG_PATH is set and default file is missing", () => {
+    delete process.env.UI_CONFIG_PATH;
+    const settings = getSettings();
+
+    expect(settings.branding.title).toBe("Deep Agent");
+    expect(settings.features.auth_enabled).toBe(true);
+    expect(settings.agent.timeout_ms).toBe(30000);
+    expect(settings.server.port).toBe(8080);
+    expect(settings.server.host).toBe("0.0.0.0");
+  });
+});
+
+// ── Empty / comment-only YAML → graceful fallback ──────────────────────────
+
+describe("Empty or comment-only YAML → graceful fallback", () => {
+  it("falls back to defaults when config file is empty", () => {
+    writeFileSync(testConfigPath, "");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const settings = getSettings();
+    expect(settings.branding.title).toBe("Deep Agent");
+    expect(settings.features.auth_enabled).toBe(true);
+  });
+
+  it("falls back to defaults when config file contains only comments", () => {
+    writeFileSync(testConfigPath, "# This is a placeholder\n# No actual config here\n");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const settings = getSettings();
+    expect(settings.branding.title).toBe("Deep Agent");
+    expect(settings.agent.timeout_ms).toBe(30000);
+  });
+});
+
+// ── Feature flags ───────────────────────────────────────────────────────────
+
+describe("Feature flags toggle", () => {
+  it("FEATURE_AUTH_ENABLED=true enables auth", () => {
+    const restore = saveEnv("FEATURE_AUTH_ENABLED", "AUTH_ENABLED");
+    process.env.FEATURE_AUTH_ENABLED = "true";
+    delete process.env.AUTH_ENABLED;
+
+    const settings = getSettings();
+    expect(settings.features.auth_enabled).toBe(true);
+    restore();
+  });
+
+  it("FEATURE_AUTH_ENABLED=false disables auth", () => {
+    const restore = saveEnv("FEATURE_AUTH_ENABLED", "AUTH_ENABLED");
+    process.env.FEATURE_AUTH_ENABLED = "false";
+    delete process.env.AUTH_ENABLED;
+
+    const settings = getSettings();
+    expect(settings.features.auth_enabled).toBe(false);
+    restore();
+  });
+
+  it("legacy AUTH_ENABLED=false disables auth when FEATURE_AUTH_ENABLED not set", () => {
+    const restore = saveEnv("FEATURE_AUTH_ENABLED", "AUTH_ENABLED");
+    delete process.env.FEATURE_AUTH_ENABLED;
+    process.env.AUTH_ENABLED = "false";
+
+    const settings = getSettings();
+    expect(settings.features.auth_enabled).toBe(false);
+    restore();
+  });
+
+  it("FEATURE_AUTH_ENABLED takes precedence over legacy AUTH_ENABLED", () => {
+    const restore = saveEnv("FEATURE_AUTH_ENABLED", "AUTH_ENABLED");
+    process.env.FEATURE_AUTH_ENABLED = "true";
+    process.env.AUTH_ENABLED = "false"; // should be ignored
+
+    const settings = getSettings();
+    expect(settings.features.auth_enabled).toBe(true);
+    restore();
+  });
+
+  it("FEATURE_DEBUG_MODE_DEFAULT=true enables debug mode", () => {
+    const restore = saveEnv("FEATURE_DEBUG_MODE_DEFAULT");
+    process.env.FEATURE_DEBUG_MODE_DEFAULT = "true";
+
+    const settings = getSettings();
+    expect(settings.features.debug_mode_default).toBe(true);
+    restore();
+  });
+
+  it("FEATURE_DEBUG_MODE_DEFAULT=false keeps debug mode off", () => {
+    const restore = saveEnv("FEATURE_DEBUG_MODE_DEFAULT");
+    process.env.FEATURE_DEBUG_MODE_DEFAULT = "false";
+
+    const settings = getSettings();
+    expect(settings.features.debug_mode_default).toBe(false);
+    restore();
+  });
+});
+
+// ── Env override precedence ─────────────────────────────────────────────────
+
+describe("Env override precedence over YAML", () => {
+  it("BRANDING_TITLE env overrides YAML branding title", () => {
+    writeFileSync(testConfigPath, VALID_YAML_BASE + 'agent:\n  timeout_ms: 30000\n  streaming: true\n  endpoint: ""\n');
+    const restore = saveEnv("UI_CONFIG_PATH", "BRANDING_TITLE");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+    process.env.BRANDING_TITLE = "Overridden By Env";
+
+    const settings = getSettings();
+    expect(settings.branding.title).toBe("Overridden By Env");
+    restore();
+  });
+
+  it("BRANDING_PRIMARY_LIGHT env overrides YAML primary color", () => {
+    writeFileSync(testConfigPath, VALID_YAML_BASE + 'agent:\n  timeout_ms: 30000\n  streaming: true\n  endpoint: ""\n');
+    const restore = saveEnv("UI_CONFIG_PATH", "BRANDING_PRIMARY_LIGHT");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+    process.env.BRANDING_PRIMARY_LIGHT = "#123456";
+
+    const settings = getSettings();
+    expect(settings.branding.colors.light.primary).toBe("#123456");
+    restore();
+  });
+
+  it("AGENT_TIMEOUT_MS env overrides YAML timeout", () => {
+    writeFileSync(testConfigPath, VALID_YAML_BASE + "agent:\n  timeout_ms: 5000\n  streaming: true\n  endpoint: \"\"\n");
+    const restore = saveEnv("UI_CONFIG_PATH", "AGENT_TIMEOUT_MS");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+    process.env.AGENT_TIMEOUT_MS = "99000";
+
+    const settings = getSettings();
+    expect(settings.agent.timeout_ms).toBe(99000);
+    restore();
+  });
+
+  it("AGENT_ENDPOINT env sets endpoint value", () => {
+    writeFileSync(testConfigPath, VALID_YAML_BASE + 'agent:\n  timeout_ms: 30000\n  streaming: true\n  endpoint: ""\n');
+    const restore = saveEnv("UI_CONFIG_PATH", "AGENT_ENDPOINT");
+    process.env.UI_CONFIG_PATH = testConfigPath;
+    process.env.AGENT_ENDPOINT = "http://my-agent.example.com";
+
+    const settings = getSettings();
+    expect(settings.agent.endpoint).toBe("http://my-agent.example.com");
+    restore();
+  });
+});
+
+// ── Config reload (ConfigMap reload) ────────────────────────────────────────
+
+describe("Config reload via resetSettings()", () => {
+  it("resetSettings() clears cache so next call picks up new env var", () => {
+    const restore = saveEnv("BRANDING_TITLE");
+    process.env.BRANDING_TITLE = "First Title";
+    const first = getSettings();
+    expect(first.branding.title).toBe("First Title");
+
+    resetSettings();
+    process.env.BRANDING_TITLE = "Second Title";
+    const second = getSettings();
+    expect(second.branding.title).toBe("Second Title");
+    restore();
+  });
+
+  it("resetSettings() clears cache so next call reads updated config file", () => {
+    writeFileSync(testConfigPath, VALID_YAML_BASE + 'agent:\n  timeout_ms: 30000\n  streaming: true\n  endpoint: ""\n');
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const first = getSettings();
+    expect(first.branding.title).toBe("Test Agent");
+
+    // Simulate ConfigMap update: write new content and reload
+    resetSettings();
+    writeFileSync(
+      testConfigPath,
+      VALID_YAML_BASE.replace("Test Agent", "Reloaded Agent") +
+        'agent:\n  timeout_ms: 30000\n  streaming: true\n  endpoint: ""\n',
+    );
+
+    const second = getSettings();
+    expect(second.branding.title).toBe("Reloaded Agent");
+  });
+});
diff --git a/src/server/utils/config.ts b/src/server/utils/config.ts
deleted file mode 100644
index 03675614..00000000
--- a/src/server/utils/config.ts
+++ /dev/null
@@ -1 +0,0 @@
-export const agentHost = process.env.AGENT_HOST || "http://localhost:5002";
\ No newline at end of file
diff --git a/src/server/utils/configWatcher.ts b/src/server/utils/configWatcher.ts
new file mode 100644
index 00000000..0cd4ea6f
--- /dev/null
+++ b/src/server/utils/configWatcher.ts
@@ -0,0 +1,73 @@
+import { watch, FSWatcher } from 'node:fs';
+import { resetSettings, getSettings } from './settings.js';
+
+let watcher: FSWatcher | null = null;
+let debounceTimer: NodeJS.Timeout | null = null;
+
+/**
+ * Watch a config file for changes and reload settings.
+ *
+ * @param configPath - Path to the settings.yaml file to watch
+ * @param onReload - Callback invoked after settings are reloaded
+ * @returns Cleanup function to stop watching
+ */
+export function watchConfig(
+  configPath: string,
+  onReload: (settings: any) => void,
+): () => void {
+  // Close existing watcher if any
+  if (watcher) {
+    watcher.close();
+    watcher = null;
+  }
+
+  console.log(`[ConfigWatcher] Starting watch on ${configPath}`);
+
+  watcher = watch(configPath, (eventType, _filename) => {
+    if (eventType !== 'change') {
+      return;
+    }
+
+    // Debounce rapid successive changes (e.g., editor write + flush)
+    if (debounceTimer) {
+      clearTimeout(debounceTimer);
+    }
+
+    debounceTimer = setTimeout(() => {
+      console.log(`[ConfigWatcher] Config file changed, reloading settings...`);
+
+      try {
+        // Clear cached settings
+        resetSettings();
+
+        // Load new settings
+        const newSettings = getSettings();
+
+        console.log(`[ConfigWatcher] Settings reloaded successfully`);
+
+        // Notify caller
+        onReload(newSettings);
+      } catch (error) {
+        console.error('[ConfigWatcher] Failed to reload settings:', error);
+        console.error('[ConfigWatcher] Keeping previous settings');
+      }
+    }, 100); // 100ms debounce
+  });
+
+  watcher.on('error', (error) => {
+    console.error('[ConfigWatcher] Watch error:', error);
+  });
+
+  // Return cleanup function
+  return () => {
+    console.log('[ConfigWatcher] Stopping watch');
+    if (debounceTimer) {
+      clearTimeout(debounceTimer);
+      debounceTimer = null;
+    }
+    if (watcher) {
+      watcher.close();
+      watcher = null;
+    }
+  };
+}
diff --git a/src/server/utils/opa.ts b/src/server/utils/opa.ts
new file mode 100644
index 00000000..fd42f53f
--- /dev/null
+++ b/src/server/utils/opa.ts
@@ -0,0 +1,154 @@
+import { readFileSync, readdirSync, existsSync, watch, mkdtempSync, rmSync } from "node:fs";
+import { resolve, dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { execFileSync } from "node:child_process";
+import { tmpdir } from "node:os";
+import { loadPolicy } from "@open-policy-agent/opa-wasm";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+export interface PolicyViolation {
+  message: string;
+}
+
+export interface OpaEngine {
+  evaluate(input: Record<string, unknown>): PolicyViolation[];
+  reload(): Promise<void>;
+  isLoaded(): boolean;
+  destroy(): void;
+}
+
+type LoadedPolicy = Awaited<ReturnType<typeof loadPolicy>>;
+
+interface Logger {
+  info: (msg: string) => void;
+  warn: (msg: string) => void;
+  error: (msg: string) => void;
+}
+
+function resolvePolicyDir(policyPath: string): string {
+  if (policyPath && !policyPath.startsWith("/")) {
+    return resolve(__dirname, "../../../", policyPath);
+  }
+  return policyPath || resolve(__dirname, "../../../config/compliance");
+}
+
+function hasRegoFiles(dir: string): boolean {
+  if (!existsSync(dir)) return false;
+  return readdirSync(dir).some((f) => f.endsWith(".rego"));
+}
+
+function compilePolicies(policyDir: string, log: Logger): Buffer | null {
+  if (!hasRegoFiles(policyDir)) {
+    return null;
+  }
+
+  const tmp = mkdtempSync(join(tmpdir(), "opa-bundle-"));
+  const bundlePath = join(tmp, "bundle.tar.gz");
+
+  try {
+    execFileSync("opa", [
+      "build",
+      "-t", "wasm",
+      "-e", "compliance/ui/deny",
+      "-e", "compliance/ui/violations",
+      "-o", bundlePath,
+      policyDir,
+    ], { timeout: 30_000, stdio: "pipe" });
+
+    const bundle = readFileSync(bundlePath);
+    log.info(`OPA policies compiled from ${policyDir}`);
+    return bundle;
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes("ENOENT") || msg.includes("not found")) {
+      log.error("opa CLI not found — install OPA to enable policy compilation (https://www.openpolicyagent.org/docs/latest/#running-opa)");
+    } else {
+      log.error(`OPA compilation failed: ${msg}`);
+    }
+    return null;
+  } finally {
+    try { rmSync(tmp, { recursive: true, force: true }); } catch { /* cleanup is best-effort */ }
+  }
+}
+
+export async function createOpaEngine(
+  policyPath: string,
+  logger?: Logger,
+): Promise<OpaEngine> {
+  const policyDir = resolvePolicyDir(policyPath);
+  let policy: LoadedPolicy | null = null;
+  let watcher: ReturnType<typeof watch> | null = null;
+  let reloadTimer: ReturnType<typeof setTimeout> | null = null;
+  const log = logger ?? { info: console.log, warn: console.warn, error: console.error };
+
+  async function compileAndLoad(): Promise<void> {
+    const bundle = compilePolicies(policyDir, log);
+    if (!bundle) {
+      policy = null;
+      return;
+    }
+    try {
+      policy = await loadPolicy(bundle);
+    } catch (err) {
+      log.error(`Failed to load compiled OPA bundle: ${err instanceof Error ? err.message : String(err)}`);
+      policy = null;
+    }
+  }
+
+  function evaluate(input: Record<string, unknown>): PolicyViolation[] {
+    if (!policy) return [];
+    try {
+      const resultSets = policy.evaluate(input);
+      if (!resultSets?.length) return [];
+
+      const first = resultSets[0]?.result;
+      if (!first) return [];
+
+      const denials: unknown[] = first.deny ?? first.violations ?? [];
+      if (!Array.isArray(denials)) return [];
+
+      return denials.map((d) => ({ message: String(d) }));
+    } catch (err) {
+      log.error(`OPA evaluation error: ${err instanceof Error ? err.message : String(err)}`);
+      return [];
+    }
+  }
+
+  function startWatching(): void {
+    if (!existsSync(policyDir)) return;
+    try {
+      watcher = watch(policyDir, (eventType, filename) => {
+        if (!filename?.endsWith(".rego") && !filename?.endsWith(".json")) return;
+        if (reloadTimer) clearTimeout(reloadTimer);
+        reloadTimer = setTimeout(async () => {
+          log.info(`Policy file changed (${filename}) — recompiling`);
+          await compileAndLoad();
+        }, 500);
+      });
+      watcher.on("error", () => {});
+    } catch { /* watcher setup is optional */ }
+  }
+
+  function destroy(): void {
+    if (watcher) {
+      watcher.close();
+      watcher = null;
+    }
+    if (reloadTimer) {
+      clearTimeout(reloadTimer);
+      reloadTimer = null;
+    }
+    policy = null;
+  }
+
+  await compileAndLoad();
+  startWatching();
+
+  return {
+    evaluate,
+    reload: compileAndLoad,
+    isLoaded: () => policy !== null,
+    destroy,
+  };
+}
diff --git a/src/server/utils/redis.ts b/src/server/utils/redis.ts
new file mode 100644
index 00000000..eb200e40
--- /dev/null
+++ b/src/server/utils/redis.ts
@@ -0,0 +1,111 @@
+import { Redis } from 'ioredis';
+
+let redisClient: Redis | null = null;
+let redisConnected = false;
+
+export function getRedisClient(): Redis | null {
+  if (redisClient) return redisClient;
+
+  const host = process.env.REDIS_HOST;
+  if (!host) return null;
+
+  const port = parseInt(process.env.REDIS_PORT || '6379', 10);
+  const password = process.env.REDIS_PASSWORD || undefined;
+  const tls = process.env.REDIS_TLS === 'true' ? {} : undefined;
+
+  try {
+    redisClient = new Redis({
+      host,
+      port,
+      password,
+      tls,
+      maxRetriesPerRequest: 3,
+      enableReadyCheck: true,
+      retryStrategy(times) {
+        if (times > 20) return null;
+        return Math.min(times * 500, 5000);
+      },
+      reconnectOnError(err) {
+        return err.message.includes('READONLY') || err.message.includes('Connection is closed');
+      },
+      lazyConnect: true,
+    });
+
+    redisClient.on('error', (err) => {
+      console.error('[Redis] Connection error:', err.message);
+    });
+
+    redisClient.on('connect', () => {
+      console.log('[Redis] Connected');
+    });
+
+    return redisClient;
+  } catch (err) {
+    console.warn('[Redis] Failed to create client, using in-memory sessions:', err);
+    return null;
+  }
+}
+
+export async function connectRedis(): Promise<Redis | null> {
+  const client = getRedisClient();
+  if (!client) return null;
+
+  try {
+    await client.connect();
+    redisConnected = true;
+    return client;
+  } catch (err) {
+    console.warn('[Redis] Failed to connect, falling back to in-memory sessions:', err);
+    redisConnected = false;
+    try {
+      await client.disconnect();
+    } catch {
+      /* ignore cleanup errors */
+    }
+    redisClient = null;
+    return null;
+  }
+}
+
+interface RedisSessionStore {
+  get(sessionId: string, callback: (err: any, result?: any) => void): void;
+  set(sessionId: string, session: any, callback: (err?: any) => void): void;
+  destroy(sessionId: string, callback: (err?: any) => void): void;
+}
+
+/**
+ * Build a @fastify/session-compatible store backed by Redis.
+ * Returns undefined if Redis is unavailable so the caller can
+ * fall back to the default in-memory store.
+ */
+export function buildSessionStore(prefix = 'sess:'): RedisSessionStore | undefined {
+  if (!redisConnected || !redisClient) return undefined;
+  const client = redisClient;
+
+  const ttl = 60 * 60 * 24 * 30; // 30 days (matches cookie maxAge)
+
+  const safeCb = (cb: (...args: any[]) => void, ...args: any[]) => {
+    try { cb(...args); } catch { /* reply already sent, ignore */ }
+  };
+
+  return {
+    get(sid, cb) {
+      client
+        .get(`${prefix}${sid}`)
+        .then((raw) => safeCb(cb, null, raw ? JSON.parse(raw) : null))
+        .catch(() => safeCb(cb, null, null));
+    },
+    set(sid, session, cb) {
+      client
+        .setex(`${prefix}${sid}`, ttl, JSON.stringify(session))
+        .then(() => safeCb(cb))
+        .catch(() => safeCb(cb));
+    },
+    destroy(sid, cb) {
+      client
+        .del(`${prefix}${sid}`)
+        .then(() => safeCb(cb))
+        .catch(() => safeCb(cb));
+    },
+  };
+}
diff --git a/src/server/utils/settings.test.ts b/src/server/utils/settings.test.ts
new file mode 100644
index 00000000..030dc30c
--- /dev/null
+++ b/src/server/utils/settings.test.ts
@@ -0,0 +1,339 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { getSettings, resetSettings } from "./settings.js";
+import { writeFileSync, unlinkSync, mkdirSync, existsSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+describe("Config Settings Validation", () => {
+  const testConfigPath = resolve(__dirname, "../../../config/ui/test-settings.yaml");
+  let originalEnv: NodeJS.ProcessEnv;
+
+  beforeEach(() => {
+    // Save original env
+    originalEnv = { ...process.env };
+    // Clear settings cache for fresh test
+    resetSettings();
+    // Ensure config directory exists for tests
+    const configDir = resolve(__dirname, "../../../config/ui");
+    mkdirSync(configDir, { recursive: true });
+  });
+
+  afterEach(() => {
+    // Restore env
+    process.env = originalEnv;
+    // Clean up test file
+    try {
+      if (existsSync(testConfigPath)) {
+        unlinkSync(testConfigPath);
+      }
+    } catch {
+      // Ignore
+    }
+  });
+
+  it("should load valid YAML and return typed config object", () => {
+    const validYaml = `
+branding:
+  logo_url: "/test-logo.svg"
+  title: "Test Agent"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+features:
+  debug_mode_default: true
+  auth_enabled: false
+agent:
+  endpoint: ""
+  timeout_ms: 60000
+  streaming: true
+`;
+
+    writeFileSync(testConfigPath, validYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const settings = getSettings();
+
+    expect(settings.branding.logo_url).toBe("/test-logo.svg");
+    expect(settings.branding.title).toBe("Test Agent");
+    expect(settings.branding.colors.light.primary).toBe("#ff0000");
+    expect(settings.features.debug_mode_default).toBe(true);
+    expect(settings.features.auth_enabled).toBe(false);
+    expect(settings.agent.timeout_ms).toBe(60000);
+  });
+
+  it("should throw when UI_CONFIG_PATH points to missing file", () => {
+    process.env.UI_CONFIG_PATH = "/nonexistent/path/settings.yaml";
+
+    expect(() => getSettings()).toThrow(
+      "Config file not found: /nonexistent/path/settings.yaml",
+    );
+  });
+  
+  it("should throw when UI_CONFIG_PATH points to missing file in project dir", () => {
+    process.env.UI_CONFIG_PATH = resolve(__dirname, "../../../config/ui/does-not-exist-xyz.yaml");
+
+    expect(() => getSettings()).toThrow(/Config file not found/);
+  });
+
+  it("should accept empty logo_url since it is optional", () => {
+    const yaml = `
+branding:
+  logo_url: ""
+  title: "Test"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+`;
+
+    writeFileSync(testConfigPath, yaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const settings = getSettings();
+    expect(settings.branding.logo_url).toBe("");
+    expect(settings.branding.title).toBe("Test");
+  });
+
+  it("should throw error for invalid hex color", () => {
+    const invalidYaml = `
+branding:
+  logo_url: "/test.svg"
+  title: "Test"
+  colors:
+    light:
+      primary: "not-a-color"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+`;
+
+    writeFileSync(testConfigPath, invalidYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow(
+      "Config validation error: branding.colors.light.primary must be a valid hex color (got 'not-a-color')"
+    );
+  });
+
+  it("should throw error for invalid feature flag type", () => {
+    const invalidYaml = `
+branding:
+  logo_url: "/test.svg"
+  title: "Test"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+features:
+  debug_mode_default: "yes"
+`;
+
+    writeFileSync(testConfigPath, invalidYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow("Config validation error: features.debug_mode_default must be boolean");
+  });
+
+  it("should throw error for negative timeout", () => {
+    const invalidYaml = `
+branding:
+  logo_url: "/test.svg"
+  title: "Test"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+agent:
+  timeout_ms: -1000
+`;
+
+    writeFileSync(testConfigPath, invalidYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow("Config validation error: agent.timeout_ms must be a positive number");
+  });
+
+  it("should throw error for invalid agent URL", () => {
+    const invalidYaml = `
+branding:
+  logo_url: "/test.svg"
+  title: "Test"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+agent:
+  endpoint: "not-a-url"
+  timeout_ms: 30000
+`;
+
+    writeFileSync(testConfigPath, invalidYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow(
+      "Config validation error: agent.endpoint must be a valid URL (got 'not-a-url')"
+    );
+  });
+
+  it("should allow empty agent endpoint", () => {
+    const validYaml = `
+branding:
+  logo_url: "/test.svg"
+  title: "Test"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+agent:
+  endpoint: ""
+  timeout_ms: 30000
+  streaming: true
+`;
+
+    writeFileSync(testConfigPath, validYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const settings = getSettings();
+    expect(settings.agent.endpoint).toBe("");
+  });
+
+  it("should apply environment variable overrides", () => {
+    const yamlConfig = `
+branding:
+  logo_url: "/yaml-logo.svg"
+  title: "YAML Title"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+`;
+
+    writeFileSync(testConfigPath, yamlConfig);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+    process.env.BRANDING_TITLE = "Env Title Override";
+    process.env.BRANDING_LOGO_URL = "/env-logo.svg";
+    process.env.FEATURE_AUTH_ENABLED = "false";
+
+    const settings = getSettings();
+
+    expect(settings.branding.title).toBe("Env Title Override");
+    expect(settings.branding.logo_url).toBe("/env-logo.svg");
+    expect(settings.features.auth_enabled).toBe(false);
+  });
+
+  it("should merge partial YAML with defaults", () => {
+    const partialYaml = `
+branding:
+  logo_url: "/custom-logo.svg"
+  title: "Custom Title"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "#000000"
+      foreground: "#ffffff"
+`;
+
+    writeFileSync(testConfigPath, partialYaml);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    const settings = getSettings();
+
+    // Custom values from YAML
+    expect(settings.branding.logo_url).toBe("/custom-logo.svg");
+    expect(settings.branding.title).toBe("Custom Title");
+
+    // Default values for sections not in YAML
+    expect(settings.features.debug_mode_default).toBe(false);
+    expect(settings.agent.timeout_ms).toBe(30000);
+    expect(settings.server.port).toBe(8080);
+  });
+
+  it("should validate all 8 color fields", () => {
+    const invalidDarkColor = `
+branding:
+  logo_url: "/test.svg"
+  title: "Test"
+  colors:
+    light:
+      primary: "#ff0000"
+      accent: "#00ff00"
+      background: "#ffffff"
+      foreground: "#000000"
+    dark:
+      primary: "#ff00ff"
+      accent: "#00ffff"
+      background: "invalid"
+      foreground: "#ffffff"
+`;
+
+    writeFileSync(testConfigPath, invalidDarkColor);
+    process.env.UI_CONFIG_PATH = testConfigPath;
+
+    expect(() => getSettings()).toThrow(
+      "Config validation error: branding.colors.dark.background must be a valid hex color (got 'invalid')"
+    );
+  });
+});
diff --git a/src/server/utils/settings.ts b/src/server/utils/settings.ts
new file mode 100644
index 00000000..914260f6
--- /dev/null
+++ b/src/server/utils/settings.ts
@@ -0,0 +1,557 @@
+import { readFileSync, existsSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import yaml from "js-yaml";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+interface CspConfig {
+  default_src: string[];
+  script_src: string[];
+  style_src: string[];
+  img_src: string[];
+  connect_src: string[];
+  font_src: string[];
+  object_src: string[];
+  frame_ancestors: string[];
+}
+
+interface HelmetConfig {
+  enabled: boolean;
+  csp: CspConfig;
+  cross_origin_embedder_policy: boolean;
+}
+
+interface RateLimitConfig {
+  enabled: boolean;
+  max: number;
+  window: string;
+  exclude_paths: string[];
+}
+
+interface SessionConfig {
+  secure_cookie: boolean;
+  max_age_days: number;
+  http_only: boolean;
+  same_site: 'strict' | 'lax' | 'none';
+}
+
+interface SecurityConfig {
+  helmet: HelmetConfig;
+  rate_limit: RateLimitConfig;
+  session: SessionConfig;
+}
+
+interface OtelConfig {
+  enabled: boolean;
+  service_name: string;
+}
+
+interface PlatformOpaConfig {
+  enabled: boolean;
+  policy_path: string;
+  fail_on_violation: boolean;
+  approved_auth_providers: string[];
+  internal_endpoint_suffixes: string[];
+  max_session_ttl_days: number;
+  restrict_debug_mode: boolean;
+  restricted_features: string[];
+  max_rate_limit: number;
+}
+
+interface PlatformConfig {
+  opa: PlatformOpaConfig;
+}
+
+interface AnnouncementConfig {
+  enabled: boolean;
+  message: string;
+  type: string;
+}
+
+interface ServerConfig {
+  host: string;
+  port: number;
+  body_limit: number;
+}
+
+interface LoggingConfig {
+  level: string;
+}
+
+interface CorsConfig {
+  origin: string;
+}
+
+interface BrandingThemeColors {
+  primary: string;
+  accent: string;
+  background: string;
+  foreground: string;
+}
+
+interface BrandingConfig {
+  logo_url?: string;
+  title: string;
+  favicon_url?: string;
+  colors: {
+    light: BrandingThemeColors;
+    dark: BrandingThemeColors;
+  };
+}
+
+interface FeaturesConfig {
+  debug_mode_default: boolean;
+  auth_enabled: boolean;
+}
+
+interface AgentConfig {
+  endpoint: string;
+  timeout_ms: number;
+  streaming: boolean;
+}
+
+interface AuthConfig {
+  enabled: boolean;
+  sso_client_id: string;
+  sso_client_secret: string;  // SECURITY: Never set in YAML - only via SSO_CLIENT_SECRET env var
+  sso_issuer_host: string;
+  sso_callback_url: string;
+}
+
+export interface UISettings {
+  branding: BrandingConfig;
+  features: FeaturesConfig;
+  agent: AgentConfig;
+  auth: AuthConfig;
+  server: ServerConfig;
+  logging: LoggingConfig;
+  cors: CorsConfig;
+  security: SecurityConfig;
+  otel: OtelConfig;
+  announcement: AnnouncementConfig;
+  platform: PlatformConfig;
+}
+
+const DEFAULTS: UISettings = {
+  branding: {
+    logo_url: "",
+    title: "Deep Agent",
+    favicon_url: "",
+    colors: {
+      light: {
+        primary: "#0066cc",
+        accent: "#a60000",
+        background: "#ffffff",
+        foreground: "#1a1a1a",
+      },
+      dark: {
+        primary: "#4dabf7",
+        accent: "#f56e6e",
+        background: "#0a1628",
+        foreground: "#f0f4f8",
+      },
+    },
+  },
+  features: {
+    debug_mode_default: false,
+    auth_enabled: true,
+  },
+  agent: {
+    endpoint: "",
+    timeout_ms: 30000,
+    streaming: true,
+  },
+  auth: {
+    enabled: true,
+    sso_client_id: "",  // Always from SSO_CLIENT_ID env var
+    sso_client_secret: "",  // Always from SSO_CLIENT_SECRET env var (secret)
+    sso_issuer_host: "",  // Always from SSO_ISSUER_HOST env var
+    sso_callback_url: "",  // Always from SSO_CALLBACK_URL env var
+  },
+  server: { host: "0.0.0.0", port: 8080, body_limit: 1_048_576 },
+  logging: { level: "info" },
+  cors: { origin: "http://localhost:8080" },
+  security: {
+    helmet: {
+      enabled: true,
+      csp: {
+        default_src: ["'self'"],
+        script_src: ["'self'"],
+        style_src: ["'self'", "'unsafe-inline'"],
+        img_src: ["'self'", "data:", "blob:", "https:"],
+        connect_src: ["'self'"],
+        font_src: ["'self'", "data:"],
+        object_src: ["'none'"],
+        frame_ancestors: ["'none'"],
+      },
+      cross_origin_embedder_policy: false,
+    },
+    rate_limit: {
+      enabled: true,
+      max: 100,
+      window: "1 minute",
+      exclude_paths: ["/api/health", "/_health"],
+    },
+    session: {
+      secure_cookie: false, // false for dev; set to true in production
+      max_age_days: 30,
+      http_only: true,
+      same_site: 'lax', // 'lax' allows OAuth2 callback flows; use 'strict' only if not using SSO
+    },
+  },
+  otel: { enabled: false, service_name: "template-ui" },
+  announcement: { enabled: false, message: "", type: "info" },
+  platform: {
+    opa: {
+      enabled: false,
+      policy_path: "",
+      fail_on_violation: false,
+      approved_auth_providers: [],
+      internal_endpoint_suffixes: [],
+      max_session_ttl_days: 0,
+      restrict_debug_mode: false,
+      restricted_features: [],
+      max_rate_limit: 0,
+    },
+  },
+};
+
+function deepMerge<T extends Record<string, unknown>>(
+  base: T,
+  override: Record<string, unknown>,
+): T {
+  const result = { ...base } as Record<string, unknown>;
+  for (const key of Object.keys(override)) {
+    const bVal = result[key];
+    const oVal = override[key];
+    if (
+      bVal &&
+      oVal &&
+      typeof bVal === "object" &&
+      typeof oVal === "object" &&
+      !Array.isArray(bVal) &&
+      !Array.isArray(oVal)
+    ) {
+      result[key] = deepMerge(
+        bVal as Record<string, unknown>,
+        oVal as Record<string, unknown>,
+      );
+    } else {
+      result[key] = oVal;
+    }
+  }
+  return result as T;
+}
+
+function loadYaml(filePath: string): Record<string, unknown> | null {
+  let raw: string;
+  try {
+    raw = readFileSync(filePath, "utf-8");
+  } catch (err) {
+    const code = (err as NodeJS.ErrnoException).code;
+    if (code === "ENOENT" || code === "ENOTDIR") {
+      return null;
+    }
+    throw err;
+  }
+
+  try {
+    const parsed = yaml.load(raw) as Record<string, unknown>;
+    return parsed ?? null;
+  } catch (parseError) {
+    const msg = parseError instanceof Error ? parseError.message : String(parseError);
+    throw new Error(`Config parse error: invalid YAML in "${filePath}": ${msg}`);
+  }
+}
+
+function isValidUrl(urlString: string): boolean {
+  try {
+    new URL(urlString);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function validateConfig(config: UISettings): void {
+  const hexColorRegex = /^#[0-9A-Fa-f]{6}$/;
+
+  // Branding validation
+  if (!config.branding.title || config.branding.title.trim() === "") {
+    throw new Error("Config validation error: branding.title is required");
+  }
+
+  // Color validation
+  const validateColor = (path: string, value: string) => {
+    if (!hexColorRegex.test(value)) {
+      throw new Error(
+        `Config validation error: ${path} must be a valid hex color (got '${value}')`,
+      );
+    }
+  };
+
+  validateColor("branding.colors.light.primary", config.branding.colors.light.primary);
+  validateColor("branding.colors.light.accent", config.branding.colors.light.accent);
+  validateColor("branding.colors.light.background", config.branding.colors.light.background);
+  validateColor("branding.colors.light.foreground", config.branding.colors.light.foreground);
+  validateColor("branding.colors.dark.primary", config.branding.colors.dark.primary);
+  validateColor("branding.colors.dark.accent", config.branding.colors.dark.accent);
+  validateColor("branding.colors.dark.background", config.branding.colors.dark.background);
+  validateColor("branding.colors.dark.foreground", config.branding.colors.dark.foreground);
+
+  // Feature flags type validation
+  if (typeof config.features.debug_mode_default !== "boolean") {
+    throw new Error("Config validation error: features.debug_mode_default must be boolean");
+  }
+  if (typeof config.features.auth_enabled !== "boolean") {
+    throw new Error("Config validation error: features.auth_enabled must be boolean");
+  }
+
+  // Agent config validation
+  if (config.agent.endpoint && !isValidUrl(config.agent.endpoint)) {
+    throw new Error(
+      `Config validation error: agent.endpoint must be a valid URL (got '${config.agent.endpoint}')`,
+    );
+  }
+  if (typeof config.agent.timeout_ms !== "number" || config.agent.timeout_ms <= 0) {
+    throw new Error("Config validation error: agent.timeout_ms must be a positive number");
+  }
+  if (typeof config.agent.streaming !== "boolean") {
+    throw new Error("Config validation error: agent.streaming must be boolean");
+  }
+
+  // Auth config validation
+  if (config.auth.enabled) {
+    if (config.auth.sso_issuer_host && !isValidUrl(config.auth.sso_issuer_host)) {
+      throw new Error(
+        `Config validation error: auth.sso_issuer_host must be a valid URL (got '${config.auth.sso_issuer_host}')`,
+      );
+    }
+    if (config.auth.sso_callback_url && !isValidUrl(config.auth.sso_callback_url)) {
+      throw new Error(
+        `Config validation error: auth.sso_callback_url must be a valid URL (got '${config.auth.sso_callback_url}')`,
+      );
+    }
+  }
+
+  // Security config validation
+  if (config.security.rate_limit.enabled) {
+    if (typeof config.security.rate_limit.max !== "number" || config.security.rate_limit.max <= 0) {
+      throw new Error("Config validation error: security.rate_limit.max must be a positive number");
+    }
+    if (!config.security.rate_limit.window || config.security.rate_limit.window.trim() === "") {
+      throw new Error("Config validation error: security.rate_limit.window is required");
+    }
+  }
+  if (typeof config.security.session.max_age_days !== "number" || config.security.session.max_age_days <= 0) {
+    throw new Error("Config validation error: security.session.max_age_days must be a positive number");
+  }
+
+  // Server config validation
+  if (typeof config.server.port !== "number" || config.server.port <= 0 || config.server.port > 65535) {
+    throw new Error("Config validation error: server.port must be between 1 and 65535");
+  }
+}
+
+function applyEnvOverrides(config: UISettings): void {
+  // Branding overrides
+  if (process.env.BRANDING_TITLE) {
+    config.branding.title = process.env.BRANDING_TITLE;
+  }
+  if (process.env.BRANDING_LOGO_URL) {
+    config.branding.logo_url = process.env.BRANDING_LOGO_URL;
+  }
+  if (process.env.BRANDING_FAVICON_URL) {
+    config.branding.favicon_url = process.env.BRANDING_FAVICON_URL;
+  }
+
+  // Branding color overrides (light theme)
+  if (!config.branding.colors) config.branding.colors = (DEFAULTS.branding.colors as typeof config.branding.colors);
+  if (!config.branding.colors.light) config.branding.colors.light = { ...DEFAULTS.branding.colors.light };
+  if (!config.branding.colors.dark) config.branding.colors.dark = { ...DEFAULTS.branding.colors.dark };
+  if (process.env.BRANDING_PRIMARY_LIGHT) config.branding.colors.light.primary = process.env.BRANDING_PRIMARY_LIGHT;
+  if (process.env.BRANDING_ACCENT_LIGHT) config.branding.colors.light.accent = process.env.BRANDING_ACCENT_LIGHT;
+  if (process.env.BRANDING_BG_LIGHT) config.branding.colors.light.background = process.env.BRANDING_BG_LIGHT;
+  if (process.env.BRANDING_FG_LIGHT) config.branding.colors.light.foreground = process.env.BRANDING_FG_LIGHT;
+  if (process.env.BRANDING_PRIMARY_DARK) config.branding.colors.dark.primary = process.env.BRANDING_PRIMARY_DARK;
+  if (process.env.BRANDING_ACCENT_DARK) config.branding.colors.dark.accent = process.env.BRANDING_ACCENT_DARK;
+  if (process.env.BRANDING_BG_DARK) config.branding.colors.dark.background = process.env.BRANDING_BG_DARK;
+  if (process.env.BRANDING_FG_DARK) config.branding.colors.dark.foreground = process.env.BRANDING_FG_DARK;
+
+  // Feature overrides — support both new FEATURE_AUTH_ENABLED and legacy AUTH_ENABLED
+  if (process.env.FEATURE_AUTH_ENABLED !== undefined) {
+    config.features.auth_enabled = process.env.FEATURE_AUTH_ENABLED === "true";
+  } else if (process.env.AUTH_ENABLED !== undefined) {
+    config.features.auth_enabled = process.env.AUTH_ENABLED === "true";
+  }
+  if (process.env.FEATURE_DEBUG_MODE_DEFAULT !== undefined) {
+    config.features.debug_mode_default = process.env.FEATURE_DEBUG_MODE_DEFAULT === "true";
+  }
+  // Agent overrides
+  if (process.env.AGENT_ENDPOINT) {
+    config.agent.endpoint = process.env.AGENT_ENDPOINT;
+  }
+  if (process.env.AGENT_TIMEOUT_MS) {
+    const timeout = Number.parseInt(process.env.AGENT_TIMEOUT_MS, 10);
+    if (!Number.isNaN(timeout)) {
+      config.agent.timeout_ms = timeout;
+    }
+  }
+
+  // Auth overrides - ALL SSO config comes from environment variables (never from YAML)
+  // These are injected by agent-engine during deployment
+  if (process.env.SSO_CLIENT_ID) {
+    config.auth.sso_client_id = process.env.SSO_CLIENT_ID;
+  }
+  if (process.env.SSO_CLIENT_SECRET) {
+    config.auth.sso_client_secret = process.env.SSO_CLIENT_SECRET;
+  }
+  if (process.env.SSO_ISSUER_HOST) {
+    config.auth.sso_issuer_host = process.env.SSO_ISSUER_HOST;
+  }
+  if (process.env.SSO_CALLBACK_URL) {
+    config.auth.sso_callback_url = process.env.SSO_CALLBACK_URL;
+  }
+
+  // Security overrides - Session
+  if (process.env.SESSION_SECURE_COOKIE !== undefined) {
+    config.security.session.secure_cookie = process.env.SESSION_SECURE_COOKIE === 'true';
+  }
+  if (process.env.SECURITY_SESSION_SECURE_COOKIE !== undefined) {
+    config.security.session.secure_cookie = process.env.SECURITY_SESSION_SECURE_COOKIE === "true";
+  }
+  if (process.env.SESSION_HTTP_ONLY !== undefined) {
+    config.security.session.http_only = process.env.SESSION_HTTP_ONLY === 'true';
+  }
+  if (process.env.SESSION_SAME_SITE) {
+    const sameSite = process.env.SESSION_SAME_SITE.toLowerCase();
+    if (['strict', 'lax', 'none'].includes(sameSite)) {
+      config.security.session.same_site = sameSite as 'strict' | 'lax' | 'none';
+    }
+  }
+  
+  // Platform OPA overrides
+  if (process.env.PLATFORM_OPA_ENABLED !== undefined) {
+    config.platform.opa.enabled = process.env.PLATFORM_OPA_ENABLED === "true";
+  }
+  if (process.env.PLATFORM_OPA_POLICY_PATH) {
+    config.platform.opa.policy_path = process.env.PLATFORM_OPA_POLICY_PATH;
+  }
+  if (process.env.PLATFORM_OPA_FAIL_ON_VIOLATION !== undefined) {
+    config.platform.opa.fail_on_violation = process.env.PLATFORM_OPA_FAIL_ON_VIOLATION === "true";
+  }
+  if (process.env.SECURITY_SESSION_MAX_AGE_DAYS) {
+    const days = Number.parseInt(process.env.SECURITY_SESSION_MAX_AGE_DAYS, 10);
+    if (!Number.isNaN(days)) {
+      config.security.session.max_age_days = days;
+    }
+  }
+
+  // Security overrides - CSP (for emergency rollback)
+  if (process.env.CSP_SCRIPT_SRC) {
+    config.security.helmet.csp.script_src = process.env.CSP_SCRIPT_SRC.split(' ');
+  }
+  if (process.env.CSP_CONNECT_SRC) {
+    config.security.helmet.csp.connect_src = process.env.CSP_CONNECT_SRC.split(' ');
+  }
+
+  // Security overrides - Rate limit
+  if (process.env.RATE_LIMIT_MAX) {
+    const max = Number.parseInt(process.env.RATE_LIMIT_MAX, 10);
+    if (!Number.isNaN(max)) {
+      config.security.rate_limit.max = max;
+    }
+  }
+  if (process.env.SECURITY_RATE_LIMIT_MAX) {
+    const max = Number.parseInt(process.env.SECURITY_RATE_LIMIT_MAX, 10);
+    if (!Number.isNaN(max)) {
+      config.security.rate_limit.max = max;
+    }
+  }
+  if (process.env.SECURITY_RATE_LIMIT_WINDOW) {
+    config.security.rate_limit.window = process.env.SECURITY_RATE_LIMIT_WINDOW;
+  }
+
+  // Server overrides
+  if (process.env.PORT) {
+    const port = Number.parseInt(process.env.PORT, 10);
+    if (!Number.isNaN(port)) {
+      config.server.port = port;
+    }
+  }
+
+  // Logging override
+  if (process.env.LOG_LEVEL) {
+    config.logging.level = process.env.LOG_LEVEL;
+  }
+}
+
+let _settings: UISettings | undefined;
+let _agentName: string | null = null;
+
+export function getSettings(): UISettings {
+  if (_settings) return _settings;
+
+  const explicitPath = process.env.UI_CONFIG_PATH;
+  const configPath =
+    explicitPath ||
+    resolve(__dirname, "../../../config/ui/settings.yaml");
+
+  if (explicitPath && !existsSync(configPath)) {
+    throw new Error(
+      `Config file not found: ${configPath}. Mount config/ui at /opt/app-root/src/config`,
+    );
+  }
+
+  const fromFile = loadYaml(configPath);
+
+  // Deep merge defaults with file config
+  _settings = fromFile
+    ? deepMerge(DEFAULTS as unknown as Record<string, unknown>, fromFile) as unknown as UISettings
+    : { ...DEFAULTS };
+
+  // Apply environment variable overrides
+  applyEnvOverrides(_settings);
+
+  // Validate the final config
+  validateConfig(_settings);
+
+  // Warn if production environment has insecure session cookies
+  const isProd = process.env.ENVIRONMENT === 'production';
+  if (isProd && !_settings.security.session.secure_cookie) {
+    console.warn(
+      'WARNING: Running in production with secure_cookie=false. ' +
+      'Session cookies will be transmitted over HTTP. ' +
+      'Set SESSION_SECURE_COOKIE=true or update config file.'
+    );
+  }
+
+  return _settings;
+}
+
+// For testing only - clears the cached settings and agent name
+export function resetSettings(): void {
+  _settings = undefined;
+  _agentName = null;
+}
+
+export async function getAgentName(): Promise<string> {
+  if (_agentName !== null) return _agentName;
+
+  const cfg = getSettings();
+  const agentHost = cfg.agent.endpoint || process.env.AGENT_HOST || "http://localhost:5002";
+
+  try {
+    const resp = await fetch(`${agentHost}/info`, { signal: AbortSignal.timeout(3000) });
+    if (resp.ok) {
+      const data = await resp.json() as { name?: string };
+      _agentName = data.name || "Agent";
+    } else {
+      _agentName = "Agent";
+    }
+  } catch {
+    _agentName = "Agent";
+  }
+  return _agentName;
+}
diff --git a/trivy-license.yaml b/trivy-license.yaml
new file mode 100644
index 00000000..73fea28f
--- /dev/null
+++ b/trivy-license.yaml
@@ -0,0 +1,25 @@
+license:
+  forbidden:
+    - AGPL-1.0
+    - AGPL-3.0
+    - GPL-2.0
+    - GPL-3.0
+    - LGPL-2.0
+    - LGPL-2.1
+    - LGPL-3.0
+    - SSPL-1.0
+    - BSL-1.1
+    - EUPL-1.1
+    - EUPL-1.2
+    - CC-BY-NC-1.0
+    - CC-BY-NC-2.0
+    - CC-BY-NC-3.0
+    - CC-BY-NC-4.0
+    - CC-BY-NC-SA-1.0
+    - CC-BY-NC-SA-2.0
+    - CC-BY-NC-SA-3.0
+    - CC-BY-NC-SA-4.0
+    - CC-BY-NC-ND-1.0
+    - CC-BY-NC-ND-2.0
+    - CC-BY-NC-ND-3.0
+    - CC-BY-NC-ND-4.0
diff --git a/tsconfig.json b/tsconfig.json
index ad52657b..fee34fce 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -27,5 +27,6 @@
     "noUncheckedSideEffectImports": false,
     "noImplicitAny": false
   },
-  "include": ["src","vite.config.ts","vite-env.d.ts"]
+  "include": ["src","vite.config.ts","vite-env.d.ts"],
+  "exclude": ["src/**/*.test.ts", "src/**/*.test.tsx", "src/**/*.spec.ts", "src/**/*.spec.tsx", "src/frontend/test-utils"]
 }
diff --git a/vite.config.ts b/vite.config.ts
index b5a41212..9d6d7548 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -28,19 +28,15 @@ export default defineConfig({
   },
   server: {
     proxy: {
-      // Proxy API requests to the backend server
       "/api": {
-        target: "http://127.0.0.1:8080", // Backend server port (matches env.template)
+        target: "http://127.0.0.1:8080",
         changeOrigin: true,
-        // Optionally rewrite path if needed (e.g., remove /api prefix if backend doesn't expect it)
-        // rewrite: (path) => path.replace(/^\/api/, ''),
       },
-      // Also proxy the /stream endpoint for Server-Sent Events
-      "/api/v1/stream": {
+      "/auth": {
         target: "http://127.0.0.1:8080",
         changeOrigin: true,
       },
-      "/auth/refresh": {
+      "/login": {
         target: "http://127.0.0.1:8080",
         changeOrigin: true,
       },
diff --git a/vitest.config.ts b/vitest.config.ts
new file mode 100644
index 00000000..3f26979e
--- /dev/null
+++ b/vitest.config.ts
@@ -0,0 +1,22 @@
+import { defineConfig } from 'vitest/config';
+import path from 'node:path';
+
+export default defineConfig({
+  test: {
+    globals: true,
+    environment: 'jsdom',
+    setupFiles: ['src/frontend/test-utils/setup.ts'],
+    include: ['src/**/*.{test,spec}.{ts,tsx}'],
+    coverage: {
+      provider: 'v8',
+      reporter: ['text', 'lcov'],
+      include: ['src/**/*.{ts,tsx}'],
+      exclude: ['src/**/*.{test,spec}.{ts,tsx}', 'src/frontend/main.tsx'],
+    },
+  },
+  resolve: {
+    alias: {
+      '@': path.resolve(__dirname, './src/frontend'),
+    },
+  },
+});