build: guard desktop release prerequisites

This reverts commit 9d06b164d3.

.gitignore

@@ -1,4 +1,9 @@
+# .gitignore
 frontend/node_modules/
 frontend/dist/
 build/bin/verstak-desktop
+smoke-platform
 plugins/
+vendor/
+frontend/e2e-results/
+release/

AGENTS.md

@@ -91,3 +91,89 @@ verstak-desktop/
     wails.json
   ...
 ```
+
+## Verification language policy
+
+**Do not say "checked", "verified", "works", or "all good" unless a concrete
+verification command or user scenario was executed.**
+
+Use exact labels:
+- Build checked
+- Unit tests checked
+- Backend behavior checked
+- Frontend E2E checked
+- Real desktop GUI checked
+- Not checked / requires manual verification
+
+If GUI behavior was not clicked and asserted, report:
+"GUI behavior was not verified."
+
+### GUI testing
+
+Frontend E2E tests are in `frontend/e2e/`. Run with `npm run test:e2e`.
+These tests use Playwright + mocked Wails bindings. They test Svelte component
+logic and user interactions in a real Chromium browser.
+
+**Limitations:** Playwright tests do NOT test the real WebKitGTK/Wails native
+shell. For real desktop GUI verification, a separate AT-SPI/xdotool layer is
+needed (not yet implemented).
+
+See `docs/GUI_TESTING.md` for details.
+
+## Debug logging
+
+**Always use debug logging when investigating issues. Never rely on "it should work" — look at the logs.**
+
+### Backend debug
+
+Enable with `--debug` flag:
+```bash
+./verstak-desktop --debug
+```
+
+Logs go to: `~/.local/share/verstak/debug/verstak-YYYY-MM-DD-HHMMSS.log`
+
+View in real-time:
+```bash
+tail -f ~/.local/share/verstak/debug/verstak-*.log
+```
+
+What's logged (when `--debug` is active):
+- Plugin discovery: dirs scanned, each plugin found (id, name, version, source, root)
+- Plugin lifecycle: capability registration, contribution registration, status transitions
+- API calls: GetPlugins, GetContributions, GetCapabilities, ReloadPlugins, EnablePlugin, DisablePlugin
+- Vault operations: open/close/status
+
+### Frontend debug
+
+Enable via **either**:
+1. URL query param: `?debug` (not practical in Wails, use #2)
+2. In browser console: `localStorage.setItem('verstak-debug', 'true')` then reload
+
+Logs go to:
+- Browser console (with `[debug]` prefix)
+- localStorage buffer: `localStorage.getItem('verstak-debug-log')` (last 1000 entries)
+
+Export frontend log from console:
+```javascript
+copy(JSON.parse(localStorage.getItem('verstak-debug-log')))
+// or
+window.__verstakDebug.exportLog()
+```
+
+What's logged:
+- App startup: checkVault, GetAppSettings, GetVaultStatus
+- Navigation: onNav, onOpenView, onOpenSettings, onCloseSettings
+- PluginManager: loadAll (start/end, plugin count, each plugin status), reload, enable/disable
+- Sidebar: onMount (plugins loaded, sidebar items count), handleNav, handleSidebarItem
+
+### Debug workflow
+
+1. User reports issue
+2. Restart app with `--debug` and reproduce
+3. Run `tail -f ~/.local/share/verstak/debug/verstak-*.log` and share output
+4. For frontend issues: enable frontend debug view `exportLog()` output
+5. Analyze logs, identify root cause, fix
+6. Verify fix by asking user to reproduce again with debug on
+
+**Never skip step 2-4. Always look at real logs before proposing fixes.**

LICENSE

@@ -0,0 +1,17 @@
+Verstak Desktop
+Copyright (C) 2026 Verstak contributors
+
+This program is free software: you can redistribute it and/or modify it under
+the terms of the GNU Affero General Public License as published by the Free
+Software Foundation, either version 3 of the License, or (at your option) any
+later version.
+
+This program is distributed in the hope that it will be useful, but WITHOUT
+ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
+details.
+
+The complete license text is available at:
+https://www.gnu.org/licenses/agpl-3.0.html
+
+SPDX-License-Identifier: AGPL-3.0-or-later

README.md

@@ -1,3 +1,81 @@
-# verstak-desktop
+# Verstak Desktop
 
-Verstak Core Platform + UI Shell — plugin runtime, capability registry, vault API, event bus, sync client
+Verstak is a local-first desktop workspace for files, notes, browser captures,
+activity and work journal entries. This repository contains the Go/Wails desktop
+host and UI shell; user-facing functions are delivered by official plugins.
+
+> **Alpha software.** Use a disposable vault while evaluating it. APIs, storage
+> formats and packaging can change before the first stable release.
+
+## What the alpha does
+
+- keeps each workspace's identity independent of its current directory name;
+- keeps browser captures in a reviewable Inbox, with archive and restore rather
+  than a destructive “remove from inbox” action;
+- records local file/note activity and, after review, turns it into journal
+  entries without creating a workspace automatically;
+- accepts optional browser domain-time batches. The browser extension is
+  opt-in: it sends only normalized domain names and bounded durations, never
+  URLs, page titles, page contents, keystrokes or navigation history;
+- runs official plugins from a `plugins/` directory next to the executable.
+
+## Components
+
+Clone these repositories as siblings when building a complete local setup:
+
+| Repository | Purpose |
+| --- | --- |
+| `verstak-desktop` | desktop host and UI shell |
+| `verstak-official-plugins` | Files, Notes, Browser Inbox, Activity, Journal and other official plugins |
+| `verstak-browser-extension` | Chromium/Firefox capture and optional domain-activity extension |
+| `verstak-sdk` | plugin manifest schema and TypeScript API |
+
+## Build from source (Linux)
+
+Requirements: Go, Node.js with npm, Python 3, the [Wails v2 build
+prerequisites](https://wails.io/docs/gettingstarted/installation/), and the
+WebKitGTK development package for your distribution.
+
+```bash
+git clone https://git.mirv.top/verstak/verstak-sdk.git
+git clone https://git.mirv.top/verstak/verstak-official-plugins.git
+git clone https://git.mirv.top/verstak/verstak-desktop.git
+git clone https://git.mirv.top/verstak/verstak-browser-extension.git
+
+cd verstak-sdk && ./scripts/build.sh
+cd ../verstak-official-plugins && ./scripts/build.sh
+cd ../verstak-desktop
+./scripts/install-dev-plugins.sh
+./scripts/build.sh
+```
+
+The Linux executable is placed in `build/bin/`. Start it with `--debug` to
+display internal plugin-provider IDs and write diagnostic logs.
+
+## Release artifacts
+
+Maintainers can create a Linux desktop tarball after the sibling repositories
+above have been built:
+
+```bash
+cd verstak-desktop
+./scripts/release.sh v0.1.0-alpha.1
+```
+
+It writes `release/verstak-desktop-linux-amd64-<version>.tar.gz` and a matching
+`SHA256SUMS` file. The archive is self-contained: unpack it and run the
+included executable. Browser and SDK packages have their own release scripts
+in their repositories.
+
+## Privacy and activity tracking
+
+The extension's passive domain tracker is disabled by default. Enabling it
+requires an explicit choice in the extension and lets the user maintain a
+domain exclusion list. Manual page, selection and link captures are separate
+actions; they enter Browser Inbox and never create a workspace or journal
+entry by themselves.
+
+## License
+
+Copyright © 2026 Verstak contributors. Licensed under
+[GNU AGPLv3 or later](LICENSE).

cmd/smoke-platform/main.go

@@ -1,17 +1,26 @@
-// Smoke-platform validates that the platform-test plugin is discovered correctly
-// by the Verstak desktop runtime. This runs headless — no Wails GUI needed.
+// Package api provides Wails-bound methods for the frontend.
 package main
 
 import (
+	"flag"
 	"fmt"
 	"os"
 	"path/filepath"
+	"strings"
 
 	"github.com/verstak/verstak-desktop/internal/core/capability"
+	"github.com/verstak/verstak-desktop/internal/core/contribution"
 	"github.com/verstak/verstak-desktop/internal/core/plugin"
+	"github.com/verstak/verstak-desktop/internal/core/pluginstate"
+	"github.com/verstak/verstak-desktop/internal/core/vault"
+	"github.com/verstak/verstak-desktop/internal/core/workspace"
 )
 
 func main() {
+	testEnableDisable := flag.Bool("test-enable-disable", false, "Test enable/disable lifecycle")
+	testWorkspace := flag.Bool("test-workspace", false, "Test workspace/cases lifecycle")
+	testContributions := flag.Bool("test-contributions", false, "Test contribution registry lifecycle")
+	flag.Parse()
 	exitCode := 0
 	defer func() {
 		os.Exit(exitCode)
@@ -20,6 +29,21 @@ func main() {
 	root, _ := os.Getwd()
 	pluginDir := filepath.Join(root, "plugins")
 
+	if *testContributions {
+		runContributionsTest(root)
+		return
+	}
+
+	if *testWorkspace {
+		runWorkspaceTest(root)
+		return
+	}
+
+	if *testEnableDisable {
+		runEnableDisableTest(root)
+		return
+	}
+
 	fmt.Printf("=== smoke-platform: headless plugin verification ===\n\n")
 	fmt.Printf("  plugin dir: %s\n", pluginDir)
 
@@ -152,7 +176,6 @@ func main() {
 	fmt.Printf("\n[capability registration]\n")
 	reg := capability.NewRegistry()
 
-	// Register core capabilities (same list as main.go)
 	coreCaps := []string{
 		"verstak/core/plugin-manager/v1",
 		"verstak/core/capability-registry/v1",
@@ -167,7 +190,6 @@ func main() {
 		fmt.Printf("  ✅ registered %d core capabilities\n", len(coreCaps))
 	}
 
-	// Register vault capability (core service)
 	if err := reg.Register("verstak-desktop", []string{"verstak/core/vault/v1"}); err != nil {
 		fmt.Printf("  ❌ register vault capability: %v\n", err)
 		allGood = false
@@ -175,7 +197,13 @@ func main() {
 		fmt.Printf("  ✅ registered vault capability\n")
 	}
 
-	// Register plugin capabilities
+	if err := reg.Register("verstak-desktop", []string{"verstak/core/workspace/v1"}); err != nil {
+		fmt.Printf("  ❌ register workspace capability: %v\n", err)
+		allGood = false
+	} else {
+		fmt.Printf("  ✅ registered workspace capability\n")
+	}
+
 	for _, p := range m.Provides {
 		if err := reg.Register(m.ID, []string{p}); err != nil {
 			fmt.Printf("  ❌ register capability %s: %v\n", p, err)
@@ -196,7 +224,16 @@ func main() {
 		}
 	}
 
-	// ── 9. Verify required capabilities resolved ──
+	// ── 9. Verify workspace capability by name ──
+	fmt.Printf("\n[workspace capability verification]\n")
+	if reg.Has("verstak/core/workspace/v1") {
+		fmt.Printf("  ✅ workspace capability present: verstak/core/workspace/v1\n")
+	} else {
+		fmt.Printf("  ❌ workspace capability MISSING: verstak/core/workspace/v1\n")
+		allGood = false
+	}
+
+	// ── 10. Verify required capabilities resolved ──
 	fmt.Printf("\n[required capability resolution]\n")
 	missingRequired := reg.CheckRequired(m.Requires)
 	if len(missingRequired) > 0 {
@@ -208,7 +245,7 @@ func main() {
 		fmt.Printf("  ✅ all required capabilities resolved\n")
 	}
 
-	// ── 10. Check optional capabilities ──
+	// ── 11. Check optional capabilities ──
 	fmt.Printf("\n[optional capability resolution]\n")
 	missingOptional := reg.CheckRequired(m.OptionalRequires)
 	if len(missingOptional) > 0 {
@@ -217,7 +254,7 @@ func main() {
 		}
 	}
 
-	// ── 11. Determine expected status ──
+	// ── 12. Determine expected status ──
 	fmt.Printf("\n[plugin status]\n")
 	expectedStatus := "loaded"
 	if len(missingOptional) > 0 {
@@ -236,18 +273,18 @@ func main() {
 		allGood = false
 	}
 
-	// ── 12. Total capability count ──
+	// ── 13. Total capability count ──
 	fmt.Printf("\n[capability count]\n")
 	totalCaps := len(reg.List())
 	fmt.Printf("  total capabilities: %d\n", totalCaps)
-	if totalCaps >= 8 {
-		fmt.Printf("  ✅ total capabilities >= 8 (%d)\n", totalCaps)
+	if totalCaps >= 9 {
+		fmt.Printf("  ✅ total capabilities >= 9 (%d)\n", totalCaps)
 	} else {
-		fmt.Printf("  ❌ total capabilities < 8 (got %d, expected >= 8)\n", totalCaps)
+		fmt.Printf("  ❌ total capabilities < 9 (got %d, expected >= 9)\n", totalCaps)
 		allGood = false
 	}
 
-	// ── 13. Summary ──
+	// ── 14. Summary ──
 	fmt.Printf("\n=== summary ===\n")
 	if allGood {
 		fmt.Printf("✅ smoke-platform passed\n")
@@ -256,3 +293,748 @@ func main() {
 		exitCode = 1
 	}
 }
+
+// runEnableDisableTest tests the enable/disable lifecycle with vault plugin state.
+func runEnableDisableTest(root string) {
+	exitCode := 0
+	defer func() {
+		os.Exit(exitCode)
+	}()
+
+	fmt.Printf("=== smoke-platform: enable/disable test ===\n\n")
+
+	// Create a temp vault
+	tmpDir, err := os.MkdirTemp("", "verstak-smoke-*")
+	if err != nil {
+		fmt.Printf("  ❌ failed to create temp dir: %v\n", err)
+		exitCode = 1
+		return
+	}
+	defer os.RemoveAll(tmpDir)
+
+	vaultPath := filepath.Join(tmpDir, "testvault")
+	fmt.Printf("  vault path: %s\n", vaultPath)
+
+	v := vault.NewVault(nil)
+	if err := v.CreateVault(vaultPath); err != nil {
+		fmt.Printf("  ❌ create vault: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ vault created\n")
+
+	openedPath := v.GetVaultPath()
+	if err := v.OpenVault(openedPath); err != nil {
+		fmt.Printf("  ❌ open vault: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ vault opened at %s\n", openedPath)
+
+	psm := pluginstate.NewManager(v)
+	if err := psm.Load(); err != nil {
+		fmt.Printf("  ❌ load plugin state: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ plugin state loaded\n")
+
+	// Discover plugins
+	pluginDir := filepath.Join(root, "plugins")
+	plugins, _ := plugin.DiscoverPlugins([]string{pluginDir})
+	if len(plugins) == 0 {
+		fmt.Printf("  ❌ no plugins discovered\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ discovered %d plugin(s)\n", len(plugins))
+
+	var target *plugin.Plugin
+	for i, p := range plugins {
+		if p.Manifest.ID == "verstak.platform-test" {
+			target = &plugins[i]
+			break
+		}
+	}
+	if target == nil {
+		fmt.Printf("  ❌ platform-test not found\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ platform-test found\n")
+
+	// Register capabilities
+	reg := capability.NewRegistry()
+	coreCaps := []string{
+		"verstak/core/plugin-manager/v1",
+		"verstak/core/capability-registry/v1",
+		"verstak/core/contribution-registry/v1",
+		"verstak/core/permissions/v1",
+		"verstak/core/events/v1",
+	}
+	reg.Register("verstak-desktop", coreCaps)
+	reg.Register("verstak-desktop", []string{"verstak/core/vault/v1"})
+	for _, cap := range target.Manifest.Provides {
+		reg.Register(target.Manifest.ID, []string{cap})
+	}
+	totalCaps := len(reg.List())
+	fmt.Printf("  ✅ registered %d capabilities (core + plugin)\n", totalCaps)
+
+	// ── Test 1: Disable platform-test ──
+	fmt.Printf("\n[disable]\n")
+	if err := psm.DisablePlugin("verstak.platform-test"); err != nil {
+		fmt.Printf("  ❌ disable: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ disabled platform-test\n")
+
+	if !psm.IsDisabled("verstak.platform-test") {
+		fmt.Printf("  ❌ IsDisabled returned false after disable\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ IsDisabled: true\n")
+
+	if psm.IsEnabled("verstak.platform-test") {
+		fmt.Printf("  ❌ IsEnabled returned true after disable\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ IsEnabled: false\n")
+
+	state := psm.Get()
+	found := false
+	for _, dp := range state.DesiredPlugins {
+		if dp.ID == "verstak.platform-test" {
+			found = true
+			break
+		}
+	}
+	if found {
+		fmt.Printf("  ✅ platform-test in desiredPlugins\n")
+	} else {
+		fmt.Printf("  ℹ️  platform-test not in desiredPlugins (ok if not recorded)\n")
+	}
+
+	// ── Test 2: Enable platform-test ──
+	fmt.Printf("\n[enable]\n")
+	if err := psm.EnablePlugin("verstak.platform-test"); err != nil {
+		fmt.Printf("  ❌ enable: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ enabled platform-test\n")
+
+	if !psm.IsEnabled("verstak.platform-test") {
+		fmt.Printf("  ❌ IsEnabled returned false after enable\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ IsEnabled: true\n")
+
+	if psm.IsDisabled("verstak.platform-test") {
+		fmt.Printf("  ❌ IsDisabled returned true after enable\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ IsDisabled: false\n")
+
+	// ── Test 3: Verify plugins.json on disk ──
+	fmt.Printf("\n[plugins.json verification]\n")
+	statePath := filepath.Join(v.GetVaultPath(), ".verstak", "plugins.json")
+	data, err := os.ReadFile(statePath)
+	if err != nil {
+		fmt.Printf("  ❌ read plugins.json: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ plugins.json exists on disk\n")
+	fmt.Printf("  content:\n%s\n", string(data))
+
+	fmt.Printf("\n=== summary ===\n")
+	fmt.Printf("✅ enable/disable test passed\n")
+}
+
+// runContributionsTest verifies the full manifest → discovery → registry pipeline,
+// mirroring the real ReloadPlugins() flow in internal/api/app.go.
+//
+// Flow:
+//  1. plugin.json on disk → DiscoverPlugins() → parsed manifest
+//  2. Manifest contributions fragment displayed (proof it comes from real plugin.json)
+//  3. Capability registration + resolution → determine plugin status
+//  4. Contribution registration (gated by status: only loaded/degraded get contributions)
+//  5. Verify all 4 contribution types present by name, data matches manifest
+//  6. Disable plugin → Unregister → contributions gone
+//  7. Re-enable → Unregister+Register (ReloadPlugins) → contributions return
+//  8. Reload → Unregister+Register → no duplicates
+func runContributionsTest(root string) {
+	exitCode := 0
+	defer func() {
+		os.Exit(exitCode)
+	}()
+
+	fmt.Printf("=== smoke-platform: contribution registry test ===\n\n")
+
+	// Create temp vault
+	tmpDir, err := os.MkdirTemp("", "verstak-smoke-*")
+	if err != nil {
+		fmt.Printf("  ❌ failed to create temp dir: %v\n", err)
+		exitCode = 1
+		return
+	}
+	defer os.RemoveAll(tmpDir)
+
+	vaultPath := filepath.Join(tmpDir, "testvault")
+	fmt.Printf("  vault path: %s\n", vaultPath)
+
+	v := vault.NewVault(nil)
+	if err := v.CreateVault(vaultPath); err != nil {
+		fmt.Printf("  ❌ create vault: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ vault created\n")
+
+	openedPath := v.GetVaultPath()
+	if err := v.OpenVault(openedPath); err != nil {
+		fmt.Printf("  ❌ open vault: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ vault opened at %s\n", openedPath)
+
+	psm := pluginstate.NewManager(v)
+	if err := psm.Load(); err != nil {
+		fmt.Printf("  ❌ load plugin state: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ plugin state loaded\n")
+
+	// ── Step 1: Discover plugins from disk (reads real plugin.json) ──
+	pluginDir := filepath.Join(root, "plugins")
+	plugins, _ := plugin.DiscoverPlugins([]string{pluginDir})
+	if len(plugins) == 0 {
+		fmt.Printf("  ❌ no plugins discovered\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ discovered %d plugin(s)\n", len(plugins))
+
+	// Find platform-test
+	var target *plugin.Plugin
+	for i, p := range plugins {
+		if p.Manifest.ID == "verstak.platform-test" {
+			target = &plugins[i]
+			break
+		}
+	}
+	if target == nil {
+		fmt.Printf("  ❌ platform-test not found\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ platform-test found: %s@%s\n", target.Manifest.ID, target.Manifest.Version)
+
+	// ── Step 2: Show manifest contributions fragment (proof it comes from plugin.json) ──
+	fmt.Printf("\n[manifest contributions from plugin.json]\n")
+	fmt.Printf("  plugin: %s\n", target.Manifest.ID)
+	if c := target.Manifest.Contributes; c != nil {
+		fmt.Printf("  sidebarItems: %d\n", len(c.SidebarItems))
+		for _, s := range c.SidebarItems {
+			fmt.Printf("    - id=%q title=%q view=%q\n", s.ID, s.Title, s.View)
+		}
+		fmt.Printf("  views: %d\n", len(c.Views))
+		for _, vw := range c.Views {
+			fmt.Printf("    - id=%q title=%q component=%q\n", vw.ID, vw.Title, vw.Component)
+		}
+		fmt.Printf("  settingsPanels: %d\n", len(c.SettingsPanels))
+		for _, s := range c.SettingsPanels {
+			fmt.Printf("    - id=%q title=%q component=%q\n", s.ID, s.Title, s.Component)
+		}
+		fmt.Printf("  commands: %d\n", len(c.Commands))
+		for _, cmd := range c.Commands {
+			fmt.Printf("    - id=%q title=%q\n", cmd.ID, cmd.Title)
+		}
+	}
+
+	// ── Step 2b: Frontend bundle verification ──
+	fmt.Printf("\n[frontend bundle verification]\n")
+	frontendOk := true
+
+	// 2b.1 — Check manifest declares frontend.entry
+	if target.Manifest.Frontend == nil {
+		fmt.Printf("  ❌ manifest.frontend is nil — plugin has no frontend config\n")
+		frontendOk = false
+	} else {
+		expectedEntry := "frontend/dist/index.js"
+		if target.Manifest.Frontend.Entry != expectedEntry {
+			fmt.Printf("  ❌ frontend.entry: expected %q, got %q\n", expectedEntry, target.Manifest.Frontend.Entry)
+			frontendOk = false
+		} else {
+			fmt.Printf("  ✅ frontend.entry: %s\n", target.Manifest.Frontend.Entry)
+		}
+
+		// 2b.2 — Resolve entry path and check file exists on disk
+		resolvedEntry := filepath.Join(target.RootPath, target.Manifest.Frontend.Entry)
+		if _, err := os.Stat(resolvedEntry); os.IsNotExist(err) {
+			fmt.Printf("  ❌ frontend bundle NOT FOUND at resolved path: %s\n", resolvedEntry)
+			frontendOk = false
+		} else if err != nil {
+			fmt.Printf("  ❌ frontend bundle stat error: %v\n", err)
+			frontendOk = false
+		} else {
+			fmt.Printf("  ✅ frontend bundle exists: %s\n", resolvedEntry)
+
+			// 2b.3 — Read file and check for "VerstakPluginRegister"
+			data, err := os.ReadFile(resolvedEntry)
+			if err != nil {
+				fmt.Printf("  ❌ failed to read frontend bundle: %v\n", err)
+				frontendOk = false
+			} else {
+				content := string(data)
+
+				if strings.Contains(content, "VerstakPluginRegister") {
+					fmt.Printf("  ✅ bundle contains VerstakPluginRegister contract\n")
+				} else {
+					fmt.Printf("  ❌ bundle MISSING VerstakPluginRegister contract\n")
+					frontendOk = false
+				}
+
+				// 2b.4 — Check for expected component names
+				expectedComponents := []string{"DiagnosticsPanel", "PlatformTestSettings"}
+				for _, comp := range expectedComponents {
+					if strings.Contains(content, comp) {
+						fmt.Printf("  ✅ component registered: %s\n", comp)
+					} else {
+						fmt.Printf("  ❌ component MISSING from bundle: %s\n", comp)
+						frontendOk = false
+					}
+				}
+			}
+		}
+	}
+
+	if frontendOk {
+		fmt.Printf("  ✅ frontend bundle checks passed\n")
+	} else {
+		fmt.Printf("  ❌ frontend bundle checks FAILED\n")
+		exitCode = 1
+		return
+	}
+
+	// ── Step 3: Register capabilities (simulates main.go + ReloadPlugins) ──
+	reg := capability.NewRegistry()
+	coreCaps := []string{
+		"verstak/core/plugin-manager/v1",
+		"verstak/core/capability-registry/v1",
+		"verstak/core/contribution-registry/v1",
+		"verstak/core/permissions/v1",
+		"verstak/core/events/v1",
+	}
+	_ = reg.Register("verstak-desktop", coreCaps)
+	_ = reg.Register("verstak-desktop", []string{"verstak/core/vault/v1"})
+	for _, capID := range target.Manifest.Provides {
+		_ = reg.Register(target.Manifest.ID, []string{capID})
+	}
+	fmt.Printf("\n[capability registration]\n")
+	fmt.Printf("  registered %d capabilities\n", len(reg.List()))
+
+	// ── Step 4: ReloadPlugins flow with capability gating ──
+	fmt.Printf("\n[register contributions (ReloadPlugins flow)]\n")
+	contribReg := contribution.NewRegistry()
+
+	// (a) Check disabled → skip
+	if target.Status == plugin.StatusDisabled {
+		fmt.Printf("  ❌ plugin is disabled — contributions should NOT be registered\n")
+		exitCode = 1
+		return
+	}
+
+	// (b) Capability resolution (same as ReloadPlugins)
+	missingRequired := reg.CheckRequired(target.Manifest.Requires)
+	missingOptional := reg.CheckRequired(target.Manifest.OptionalRequires)
+	status := plugin.StatusLoaded
+	if len(missingRequired) > 0 {
+		status = plugin.StatusMissingRequiredCapability
+	} else if len(missingOptional) > 0 {
+		status = plugin.StatusDegraded
+	}
+
+	// (c) Only loaded/degraded get contributions
+	if status == plugin.StatusLoaded || status == plugin.StatusDegraded {
+		fmt.Printf("  plugin status=%s → contributions WILL be registered\n", status)
+		contribReg.Register(target.Manifest.ID, target.Manifest.Contributes)
+		fmt.Printf("  contributions registered for %s\n", target.Manifest.ID)
+	} else {
+		fmt.Printf("  ❌ plugin status=%s — contributions should NOT be registered\n", status)
+		exitCode = 1
+		return
+	}
+
+	// ── Step 5: Verify contributions by name, data matches manifest ──
+	fmt.Printf("\n[verify contributions by name]\n")
+	allGood := true
+
+	sidebarItems := contribReg.SidebarItems()
+	if len(sidebarItems) != 1 || sidebarItems[0].Item.Title != "Platform Test" {
+		fmt.Printf("  ❌ sidebarItems mismatch: got %v\n", sidebarItems)
+		allGood = false
+	} else {
+		fmt.Printf("  ✅ sidebarItem: plugin=%s id=%s title=%s\n",
+			sidebarItems[0].PluginID, sidebarItems[0].Item.ID, sidebarItems[0].Item.Title)
+	}
+
+	views := contribReg.Views()
+	if len(views) != 1 || views[0].Item.Title != "Platform Diagnostics" {
+		fmt.Printf("  ❌ views mismatch: got %v\n", views)
+		allGood = false
+	} else {
+		fmt.Printf("  ✅ view: plugin=%s id=%s title=%s component=%s\n",
+			views[0].PluginID, views[0].Item.ID, views[0].Item.Title, views[0].Item.Component)
+	}
+
+	settingsPanels := contribReg.SettingsPanels()
+	if len(settingsPanels) != 1 || settingsPanels[0].Item.Title != "Platform Test Settings" {
+		fmt.Printf("  ❌ settingsPanels mismatch: got %v\n", settingsPanels)
+		allGood = false
+	} else {
+		fmt.Printf("  ✅ settingsPanel: plugin=%s id=%s title=%s\n",
+			settingsPanels[0].PluginID, settingsPanels[0].Item.ID, settingsPanels[0].Item.Title)
+	}
+
+	commands := contribReg.Commands()
+	if len(commands) != 2 {
+		fmt.Printf("  ❌ expected 2 commands, got %d\n", len(commands))
+		allGood = false
+	} else {
+		for _, c := range commands {
+			fmt.Printf("  command: plugin=%s id=%s title=%s\n", c.PluginID, c.Item.ID, c.Item.Title)
+		}
+	}
+
+	if !allGood {
+		fmt.Printf("  ❌ some contribution types missing or data mismatch\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ all 4 contribution types present, data matches manifest\n")
+
+	// ── Step 6: Disable → Unregister → contributions removed ──
+	fmt.Printf("\n[disable plugin → Unregister → contributions removed]\n")
+	if err := psm.DisablePlugin("verstak.platform-test"); err != nil {
+		fmt.Printf("  ❌ disable: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  disabled platform-test\n")
+
+	// ReloadPlugins: Unregister before next scan, disabled plugins don't get re-registered
+	contribReg.Unregister("verstak.platform-test")
+	remaining := len(contribReg.Views()) + len(contribReg.SidebarItems()) +
+		len(contribReg.Commands()) + len(contribReg.SettingsPanels())
+	fmt.Printf("  remaining contributions: %d\n", remaining)
+	if remaining != 0 {
+		fmt.Printf("  ❌ contributions not removed after disable\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ all contributions removed\n")
+
+	// ── Step 7: Re-enable → contributions return via Unregister+Register ──
+	fmt.Printf("\n[re-enable → Unregister+Register → contributions return]\n")
+	if err := psm.EnablePlugin("verstak.platform-test"); err != nil {
+		fmt.Printf("  ❌ enable: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  enabled platform-test\n")
+
+	// ReloadPlugins: Unregister before Register (prevents duplicates)
+	contribReg.Unregister(target.Manifest.ID)
+	contribReg.Register(target.Manifest.ID, target.Manifest.Contributes)
+	count := len(contribReg.Views()) + len(contribReg.SidebarItems()) +
+		len(contribReg.Commands()) + len(contribReg.SettingsPanels())
+	fmt.Printf("  contributions after re-enable: %d\n", count)
+	if count < 4 {
+		fmt.Printf("  ❌ expected >= 4 contributions, got %d\n", count)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ contributions returned (count=%d)\n", count)
+
+	// ── Step 8: Reload → Unregister+Register → no duplicates ──
+	fmt.Printf("\n[reload → Unregister+Register → no duplicates]\n")
+	beforeCount := count
+	contribReg.Unregister(target.Manifest.ID)
+	contribReg.Register(target.Manifest.ID, target.Manifest.Contributes)
+	afterCount := len(contribReg.Views()) + len(contribReg.SidebarItems()) +
+		len(contribReg.Commands()) + len(contribReg.SettingsPanels())
+	fmt.Printf("  before reload: %d, after reload: %d\n", beforeCount, afterCount)
+	if afterCount != beforeCount {
+		fmt.Printf("  ❌ duplicate after reload: before=%d after=%d\n", beforeCount, afterCount)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ no duplicate contributions after reload (count=%d)\n", afterCount)
+
+	fmt.Printf("\n=== summary ===\n")
+	if exitCode == 0 {
+		fmt.Printf("✅ contribution registry test passed\n")
+	} else {
+		fmt.Printf("❌ contribution registry test failed\n")
+	}
+}
+
+func runWorkspaceTest(root string) {
+	exitCode := 0
+	defer func() {
+		os.Exit(exitCode)
+	}()
+
+	fmt.Printf("=== smoke-platform: workspace test ===\n\n")
+
+	tmpDir, err := os.MkdirTemp("", "verstak-ws-smoke-*")
+	if err != nil {
+		fmt.Printf("  ❌ failed to create temp dir: %v\n", err)
+		exitCode = 1
+		return
+	}
+	defer os.RemoveAll(tmpDir)
+
+	vaultPath := filepath.Join(tmpDir, "testvault")
+	fmt.Printf("  vault path: %s\n", vaultPath)
+
+	v := vault.NewVault(nil)
+	if err := v.CreateVault(vaultPath); err != nil {
+		fmt.Printf("  ❌ create vault: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ vault created\n")
+
+	openedPath := v.GetVaultPath()
+	if err := v.OpenVault(openedPath); err != nil {
+		fmt.Printf("  ❌ open vault: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ vault opened at %s\n", openedPath)
+
+	fmt.Printf("\n[workspace init]\n")
+	ws := workspace.NewManager(openedPath)
+	if err := ws.Load(); err != nil {
+		fmt.Printf("  ❌ load workspace: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ workspace loaded\n")
+
+	tree := ws.GetTree()
+	if len(tree.Nodes) != 1 {
+		fmt.Printf("  ❌ expected 1 root node, got %d\n", len(tree.Nodes))
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ root node exists (id=%s)\n", tree.Nodes[0].ID)
+	rootID := tree.Nodes[0].ID
+
+	fmt.Printf("\n[workspace capability]\n")
+	reg := capability.NewRegistry()
+	reg.Register("verstak-desktop", []string{
+		"verstak/core/plugin-manager/v1",
+		"verstak/core/capability-registry/v1",
+		"verstak/core/contribution-registry/v1",
+		"verstak/core/permissions/v1",
+		"verstak/core/events/v1",
+	})
+	reg.Register("verstak-desktop", []string{"verstak/core/vault/v1"})
+	reg.Register("verstak-desktop", []string{"verstak/core/workspace/v1"})
+	if !reg.Has("verstak/core/workspace/v1") {
+		fmt.Printf("  ❌ workspace capability not registered\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ workspace capability registered\n")
+	totalCaps := len(reg.List())
+	if totalCaps < 7 {
+		fmt.Printf("  ❌ expected >= 7 capabilities, got %d\n", totalCaps)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ total capabilities >= 7 (%d)\n", totalCaps)
+
+	fmt.Printf("\n[create case]\n")
+	caseNode, err := ws.CreateNode(rootID, workspace.TypeCase, "Test Case")
+	if err != nil {
+		fmt.Printf("  ❌ create case: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ case created: %s\n", caseNode.Title)
+
+	fmt.Printf("\n[create folder]\n")
+	folderNode, err := ws.CreateNode(rootID, workspace.TypeFolder, "Test Folder")
+	if err != nil {
+		fmt.Printf("  ❌ create folder: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ folder created: %s\n", folderNode.Title)
+
+	fmt.Printf("\n[create nested case]\n")
+	nestedCase, err := ws.CreateNode(folderNode.ID, workspace.TypeCase, "Nested Case")
+	if err != nil {
+		fmt.Printf("  ❌ create nested case: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ nested case created: %s\n", nestedCase.Title)
+
+	fmt.Printf("\n[tree structure]\n")
+	tree = ws.GetTree()
+	if len(tree.Nodes) != 4 {
+		fmt.Printf("  ❌ expected 4 nodes, got %d\n", len(tree.Nodes))
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ tree has 4 nodes\n")
+	children := ws.ListChildren(rootID)
+	if len(children) != 2 {
+		fmt.Printf("  ❌ expected 2 root children, got %d\n", len(children))
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ root has 2 children\n")
+
+	fmt.Printf("\n[rename]\n")
+	if err := ws.RenameNode(caseNode.ID, "Renamed Case"); err != nil {
+		fmt.Printf("  ❌ rename: %v\n", err)
+		exitCode = 1
+		return
+	}
+	renamed, _ := ws.GetNode(caseNode.ID)
+	if renamed.Title != "Renamed Case" {
+		fmt.Printf("  ❌ rename failed: got %q\n", renamed.Title)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ renamed to %q\n", renamed.Title)
+
+	fmt.Printf("\n[set current node]\n")
+	if err := ws.SetCurrentNode(caseNode.ID); err != nil {
+		fmt.Printf("  ❌ set current: %v\n", err)
+		exitCode = 1
+		return
+	}
+	current, err := ws.GetCurrentNode()
+	if err != nil {
+		fmt.Printf("  ❌ get current: %v\n", err)
+		exitCode = 1
+		return
+	}
+	if current.ID != caseNode.ID {
+		fmt.Printf("  ❌ current node mismatch\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ current node: %s\n", current.Title)
+
+	fmt.Printf("\n[archive]\n")
+	if err := ws.ArchiveNode(folderNode.ID); err != nil {
+		fmt.Printf("  ❌ archive: %v\n", err)
+		exitCode = 1
+		return
+	}
+	archived, _ := ws.GetNode(folderNode.ID)
+	if archived.Status != workspace.StatusArchived {
+		fmt.Printf("  ❌ archive failed: status=%s\n", archived.Status)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ archived %s\n", archived.Title)
+
+	fmt.Printf("\n[reopen persistence]\n")
+	ws2 := workspace.NewManager(openedPath)
+	if err := ws2.Load(); err != nil {
+		fmt.Printf("  ❌ reopen: %v\n", err)
+		exitCode = 1
+		return
+	}
+	tree2 := ws2.GetTree()
+	if len(tree2.Nodes) != 4 {
+		fmt.Printf("  ❌ expected 4 nodes after reopen, got %d\n", len(tree2.Nodes))
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ tree persisted: %d nodes\n", len(tree2.Nodes))
+	current2, err := ws2.GetCurrentNode()
+	if err != nil {
+		fmt.Printf("  ❌ get current after reopen: %v\n", err)
+		exitCode = 1
+		return
+	}
+	if current2.ID != caseNode.ID {
+		fmt.Printf("  ❌ current node not persisted\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ current node persisted\n")
+
+	fmt.Printf("\n[workspace.json verification]\n")
+	wsPath := filepath.Join(openedPath, ".verstak", "workspace.json")
+	wsData, err := os.ReadFile(wsPath)
+	if err != nil {
+		fmt.Printf("  ❌ read workspace.json: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ workspace.json exists on disk\n")
+	fmt.Printf("  content:\n%s\n", string(wsData))
+
+	// ── Test 4-level deep tree ──
+	fmt.Printf("\n[4-level deep tree]\n")
+	folder1, err := ws.CreateNode(rootID, workspace.TypeFolder, "Level 1 Folder")
+	if err != nil {
+		fmt.Printf("  ❌ create folder1: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ created: %s\n", folder1.Title)
+
+	folder2, err := ws.CreateNode(folder1.ID, workspace.TypeFolder, "Level 2 Folder")
+	if err != nil {
+		fmt.Printf("  ❌ create folder2: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ created: %s\n", folder2.Title)
+
+	deepCase, err := ws.CreateNode(folder2.ID, workspace.TypeCase, "Deep Case")
+	if err != nil {
+		fmt.Printf("  ❌ create deep case: %v\n", err)
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ created: %s (depth 4)\n", deepCase.Title)
+
+	tree = ws.GetTree()
+	if len(tree.Nodes) != 7 {
+		fmt.Printf("  ❌ expected 7 nodes, got %d\n", len(tree.Nodes))
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ tree has 7 nodes (4 levels deep)\n")
+
+	deepNode, _ := ws.GetNode(deepCase.ID)
+	if deepNode.ParentID != folder2.ID {
+		fmt.Printf("  ❌ deep case parent mismatch\n")
+		exitCode = 1
+		return
+	}
+	fmt.Printf("  ✅ deep case parent chain correct\n")
+
+	fmt.Printf("\n=== summary ===\n")
+	fmt.Printf("✅ workspace test passed\n")
+}

docs/DEV_PLUGINS.md

@@ -59,12 +59,59 @@ This validates:
 
 ## Desktop Runtime Scanning Paths
 
-The desktop scans two directories for plugins:
+The desktop resolves plugin directories in one shared backend resolver. Priority:
 
 | Path | Purpose |
 |------|---------|
+| `VERSTAK_PLUGIN_DIR` | Dev/test override. Multiple paths can be separated with the OS path separator |
+| `./plugins/` | Bundled/dev plugins relative to the current working directory |
+| `<binary-dir>/plugins/` | Packaged plugins shipped next to the desktop executable |
 | `~/.config/verstak/plugins/` | User-installed plugins |
-| `./plugins/` | Bundled/dev plugins (project-local) |
+
+The resolver normalizes paths and removes duplicates before scanning. Missing
+directories are ignored by discovery.
+
+Discovery scans all resolved directories in order. If two plugin packages declare
+the same `id`, the first package wins and later duplicates are skipped. The
+warning includes both package paths, so during development check the log if an
+updated plugin appears to be ignored.
+
+## Bundled Plugin API During Development
+
+Frontend bundles are mounted with a plugin-scoped API created by
+`createPluginAPI(pluginId)`. The current API supports:
+
+- `settings.read/write/writeAll`
+- `capabilities.list/get/has`
+- `commands.register/execute` for handlers declared in `contributes.commands`
+- `events.publish/subscribe` using the bundled frontend event bus
+- `files.list/metadata/readText/readBytes/writeText/createFolder/move/trash/listTrash/restoreTrash/deleteTrash/openExternal/showInFolder`
+  for canonical vault-relative slash paths guarded by `files.read`,
+  `files.write`, `files.delete`, and `files.openExternal`. Backslashes,
+  Windows absolute paths, UNC paths, traversal, `.verstak` variants, and
+  symlink read/write/move/trash/external-open operations are rejected. Text
+  read/write is UTF-8 only and limited to 2 MB for text reads; `readBytes`
+  returns base64 for regular files up to 8 MB.
+- `workbench.openResource/editResource` for routing vault resources to
+  contributed `openProviders`. Plugins must declare `workbench.open`; this is a
+  policy/contract check. Files and Notes plugins call this API and do not import
+  a concrete editor plugin.
+
+Editor/viewer plugins contribute providers with `contributes.openProviders`.
+Workbench selects by resource kind, request mode, extension/mime, context
+(`generic-text`, `generic-markdown`, `notes-markdown`), user preference, priority, then
+deterministic `pluginId/providerId` tie-break. If nothing matches, Workbench
+shows `no-provider` fallback instead of a core editor.
+
+The official `verstak.default-editor` plugin provides three openProviders:
+`verstak.default-editor.text` (generic-text), `verstak.default-editor.markdown`
+(generic-markdown), and `verstak.default-editor.notes-markdown` (notes-context).
+It uses a single unified `DefaultEditor` component with textarea-based editing,
+simple markdown preview, dirty state tracking, and Ctrl+S save.
+
+This is a cooperative contract, not a sandbox. Bundled plugins run in the same JS
+context as the desktop frontend; real isolation is deferred to the sidecar/sandbox
+milestone.
 
 ## Important Rules
 

docs/GUI_TESTING.md

@@ -0,0 +1,134 @@
+# GUI Testing
+
+## Overview
+
+Verstak Desktop uses **Playwright** for frontend E2E tests that run in a real
+Chromium browser with mocked Wails bindings. This tests the Svelte component
+logic, user interactions, and UI state transitions — without needing the actual
+Wails desktop shell.
+
+## What is tested
+
+### Frontend E2E (Playwright)
+
+Located in `frontend/e2e/`, run via `npm run test:e2e`.
+
+These tests:
+
+- Launch a Vite dev server with mock Wails bindings
+- Open the app in a real Chromium browser via Playwright
+- Simulate user clicks, wait for UI transitions, assert DOM state
+- Collect console errors and page errors on failure
+- Capture screenshots on failure
+
+### Test suites
+
+| File | Suite | Tests | Status |
+|------|-------|-------|--------|
+| `plugin-manager-disable-enable.spec.js` | A: Disable/Enable refresh | 4 | pass |
+| `sidebar-opens-view.spec.js` | B: Sidebar → view routing | 3 | 3 pass |
+| `reload-updates-state.spec.js` | C: Reload updates UI | 4 | pass |
+
+## Resolved bugs covered by tests
+
+### Bug M5-1: Sidebar updates when plugin state changes
+
+**Previous symptom:** After disabling a plugin in Plugin Manager, the sidebar
+item for that plugin remained visible. Reloading after external mock state
+changes also left stale sidebar items.
+
+**Current behavior:** `PluginManager.svelte` dispatches
+`verstak:plugins-changed` after reload/enable/disable flows. `Sidebar.svelte`
+listens for that event and re-fetches plugins, vault status, and contributions.
+
+**Regression coverage:**
+
+- `A: Disable plugin: button changes to Enable, sidebar item disappears`
+- `A: Disable → Enable full flow in sequence`
+- `C: Reload after mock state change reflects new plugin status`
+
+## What is NOT tested
+
+### Real desktop GUI (WebKitGTK + Wails native shell)
+
+The Playwright tests run the frontend in a **standard Chromium browser** with
+mocked Wails bindings. They do **not** test:
+
+- Actual WebKitGTK rendering (Wails uses WebKitGTK, not Chromium)
+- Native window management (minimize, maximize, resize)
+- Native file dialogs (SelectDirectory, SelectVaultForOpen)
+- Clipboard integration
+- System tray / menu bar
+- Plugin frontend bundle loading from real filesystem
+- Wails event system (window.runtime.EventsOn/Emit)
+
+For real Wails smoke tests, a separate layer is needed using:
+- **AT-SPI2** (Linux accessibility tree inspection)
+- **xdotool** / **ydotool** (input simulation)
+- **scrot** / **import** (screenshot capture)
+
+## Running tests
+
+```bash
+cd frontend
+
+# Run all E2E tests (headless)
+npm run test:e2e
+
+# Run with Playwright UI (interactive)
+npm run test:e2e:ui
+
+# Run in headed browser (visible)
+npm run test:e2e:headed
+```
+
+## Test infrastructure
+
+### Mock bridge (`src/lib/test/wails-mock.js`)
+
+Replaces `window['go']['api']['App']` with in-memory mock implementations of
+all Wails backend methods. Provides:
+
+- Mutable plugin state (enable/disable/status)
+- Mutable vault state
+- Mutable contributions (views, commands, sidebar items, settings panels)
+- Test helpers via `window.__wailsMock`:
+  - `reset()` — reset all state to defaults
+  - `setPluginStatus(id, status, enabled)` — change plugin state
+  - `getPluginState(id)` — read current state
+  - `setVaultStatus(status)` — change vault state
+
+### Test harness (`index.html`)
+
+The same `index.html` is used for both production and test. It detects whether
+the Wails runtime (`window['go']`) is present. If not (i.e. running in a plain
+browser), it loads the mock bridge before the Svelte app.
+
+### Playwright config (`playwright.config.js`)
+
+- Dev server: `vite --mode test --port 5174`
+- Browser: Chromium headless
+- Timeouts: 30s test, 10s expect
+- Workers: 1 (sequential)
+- Screenshots: on failure
+- Traces: on first retry
+- Results: `e2e-results/test-results.json`
+
+## Adding new tests
+
+1. Create `e2e/your-test.spec.js`
+2. Import helpers from `./helpers.js`
+3. Use `test.beforeEach` to reset mock state and navigate to `/`
+4. Use `test.afterEach` to assert no console errors
+5. Write scenarios as user actions + assertions
+6. Run with `npm run test:e2e`
+
+### Selector conventions
+
+- Plugin cards: `.plugin-card` filtered by text
+- Buttons: `.btn-disable`, `.btn-enable`, `.btn-settings`, `.reload-btn`
+- Sidebar items: `.sidebar .plugin-item`
+- View container: `.view-container`
+- View header: `.view-header h2`
+- Status badges: `.status-badge`
+- Toast: `.toast`

docs/MILESTONE_6A_FILES_CORE_PLAN.md

@@ -0,0 +1,403 @@
+# Milestone 6a Files Core Service Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use
+> `superpowers:subagent-driven-development` or `superpowers:executing-plans` to
+> implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for
+> tracking.
+
+**Goal:** Add a safe backend Files core service and plugin bridge for
+vault-relative text file operations.
+
+**Architecture:** Files Core is a backend service under `internal/core/files`
+that accepts vault-relative paths, enforces reserved path policy, and performs
+atomic text writes. The Wails API exposes plugin-scoped methods guarded by plugin
+state and `files.*` permissions; SDK types describe the bridge shape.
+
+**Tech Stack:** Go backend services/tests, Wails-bound API methods, TypeScript
+SDK type definitions, existing Playwright/Vitest checks.
+
+---
+
+## Implementation Status
+
+Milestone 6a is implemented.
+
+Actual backend package:
+
+- `internal/core/files/types.go`
+- `internal/core/files/path_policy.go`
+- `internal/core/files/service.go`
+- `internal/core/files/*_test.go`
+
+Actual plugin-scoped Wails methods:
+
+```go
+func (a *App) ListVaultFiles(pluginID string, relativeDir string) ([]files.FileEntry, string)
+func (a *App) GetVaultFileMetadata(pluginID string, relativePath string) (files.FileMetadata, string)
+func (a *App) ReadVaultTextFile(pluginID string, relativePath string) (string, string)
+func (a *App) WriteVaultTextFile(pluginID string, relativePath string, content string, options files.WriteOptions) string
+func (a *App) CreateVaultFolder(pluginID string, relativePath string) string
+func (a *App) MoveVaultPath(pluginID string, fromRelativePath string, toRelativePath string, options files.MoveOptions) string
+func (a *App) TrashVaultPath(pluginID string, relativePath string) (files.TrashResult, string)
+```
+
+Actual bundled frontend API:
+
+- `api.files.list(relativeDir)`
+- `api.files.metadata(relativePath)`
+- `api.files.readText(relativePath)`
+- `api.files.writeText(relativePath, content, options)`
+- `api.files.createFolder(relativePath)`
+- `api.files.move(fromRelativePath, toRelativePath, options)`
+- `api.files.trash(relativePath)`
+
+Implemented limits:
+
+- canonical vault-relative slash paths only;
+- backslashes, POSIX absolute paths, Windows drive paths, UNC paths, traversal,
+  null bytes, and empty file paths are rejected;
+- `.verstak/` is reserved case-insensitively and hidden from public Files API;
+- metadata may report symlinks, but list-through-symlink and
+  read/write/move/trash through symlink are forbidden;
+- text read/write only, with `readText` limited to UTF-8 files up to 2 MB;
+- trash uses `.verstak/trash/files/<trashId>/...` with restore metadata, but
+  restore itself is deferred;
+- binary streaming, watcher, external editor, Files UI, Notes service, sidecar,
+  sandbox/security isolation deferred.
+
+---
+
+## Scope
+
+Implement:
+
+- Backend Files service.
+- Safe vault-relative path handling.
+- Reserved `.verstak/` policy.
+- List files.
+- Read/write text files.
+- Create folder.
+- Move path.
+- Trash path.
+- Atomic writes.
+- Backend tests.
+- SDK bridge shape draft.
+
+Do not implement:
+
+- Full Notes plugin.
+- Notes UI.
+- Sync.
+- Watcher.
+- Binary streaming.
+- External editor integration.
+- Sidecar/security isolation.
+
+## Canonical Policy
+
+All public Files API methods use canonical vault-relative slash paths.
+
+Rejected inputs:
+
+- absolute paths;
+- backslashes;
+- Windows drive paths and UNC/network paths;
+- paths containing `..` after normalization;
+- null bytes;
+- empty paths where a file path is required;
+- access to `.verstak/` through the public plugin Files API, including
+  `.Verstak` case variants.
+
+Delete behavior:
+
+- `TrashVaultPath` moves files/folders into `.verstak/trash`.
+- Trash metadata includes `originalPath`, `deletedAt`, `originalType`,
+  `trashId`, and `basename`.
+- Permanent delete is out of scope.
+- Restore is out of scope.
+
+Write behavior:
+
+- Text writes use a temporary file in the target directory and rename into place.
+- Existing files are overwritten only when the method explicitly allows overwrite.
+- Parent directory must exist unless the method explicitly creates it.
+
+Binary behavior:
+
+- Binary files can appear in list/metadata results.
+- Binary read/write streaming is out of scope.
+
+## Public Backend Shape
+
+Implemented plugin-scoped Wails methods:
+
+```go
+func (a *App) ListVaultFiles(pluginID string, relativeDir string) ([]files.FileEntry, string)
+func (a *App) GetVaultFileMetadata(pluginID string, relativePath string) (files.FileMetadata, string)
+func (a *App) ReadVaultTextFile(pluginID string, relativePath string) (string, string)
+func (a *App) WriteVaultTextFile(pluginID string, relativePath string, content string, options files.WriteOptions) string
+func (a *App) CreateVaultFolder(pluginID string, relativePath string) string
+func (a *App) MoveVaultPath(pluginID string, fromRelativePath string, toRelativePath string, options files.MoveOptions) string
+func (a *App) TrashVaultPath(pluginID string, relativePath string) (files.TrashResult, string)
+```
+
+Permission mapping:
+
+- `ListVaultFiles`, `GetVaultFileMetadata`, `ReadVaultTextFile`: `files.read`.
+- `WriteVaultTextFile`, `CreateVaultFolder`, `MoveVaultPath`: `files.write`.
+- `TrashVaultPath`: `files.delete`.
+
+## Data Types
+
+Create `internal/core/files/types.go`:
+
+```go
+package files
+
+type EntryKind string
+
+const (
+	KindFile      EntryKind = "file"
+	KindDirectory EntryKind = "directory"
+)
+
+type Entry struct {
+	Name         string    `json:"name"`
+	Path         string    `json:"path"`
+	Kind         EntryKind `json:"kind"`
+	Size         int64     `json:"size"`
+	ModifiedAt   string    `json:"modifiedAt"`
+	IsText       bool      `json:"isText"`
+	IsBinary     bool      `json:"isBinary"`
+	IsHidden     bool      `json:"isHidden"`
+	IsReserved   bool      `json:"isReserved"`
+}
+```
+
+## Task 1: Path Policy
+
+**Files:**
+
+- Create: `internal/core/files/path.go`
+- Create: `internal/core/files/path_test.go`
+
+- [x] Add `NormalizeVaultRelativePath(relative string) (string, error)`.
+- [x] Reject absolute paths, null bytes, `..`, and empty file paths.
+- [x] Preserve path case, including canonical `Notes`.
+- [x] Add `IsReservedPath(relative string) bool` returning true for `.verstak`
+      and `.verstak/...`.
+- [x] Add tests:
+      `TestNormalizeRejectsAbsolutePath`,
+      `TestNormalizeRejectsTraversal`,
+      `TestNormalizeRejectsNullByte`,
+      `TestNormalizePreservesCase`,
+      `TestReservedPathPolicy`.
+- [x] Run:
+
+```bash
+go test ./internal/core/files
+```
+
+Expected: all `internal/core/files` tests pass.
+
+## Task 2: Files Service
+
+**Files:**
+
+- Create: `internal/core/files/service.go`
+- Create/modify: `internal/core/files/service_test.go`
+
+- [x] Define `Service` with a vault dependency that can return the current vault
+      root and status.
+- [x] Implement `List(relativeDir string) ([]Entry, error)`.
+- [x] Implement `Metadata(relativePath string) (Entry, error)`.
+- [x] Implement `ReadText(relativePath string) (string, error)`.
+- [x] Implement `WriteText(relativePath, content string, overwrite bool) (Entry, error)`.
+- [x] Implement `Mkdir(relativePath string) (Entry, error)`.
+- [x] Implement `Move(fromRelativePath, toRelativePath string, overwrite bool) (Entry, error)`.
+- [x] Implement `Trash(relativePath string) (Entry, error)`.
+- [x] Use the shared path policy for every public method.
+- [x] Block `.verstak` paths in every public method.
+- [x] Add tests for closed vault, list, metadata, text read/write, mkdir, move,
+      trash, overwrite false conflict, overwrite true replace, and reserved path
+      rejection.
+- [x] Run:
+
+```bash
+go test ./internal/core/files
+```
+
+Expected: all `internal/core/files` tests pass.
+
+## Task 3: Atomic Writes
+
+**Files:**
+
+- Modify: `internal/core/files/service.go`
+- Modify: `internal/core/files/service_test.go`
+
+- [x] Write text content to a temp file in the target directory.
+- [x] Rename the temp file into the final path only after successful write.
+- [x] Remove temp file on write failure.
+- [x] Add test `TestWriteTextIsAtomicOnFailure` using a controlled failing path
+      or permission-denied directory.
+- [x] Add test `TestWriteTextDoesNotLeaveTempFile`.
+- [x] Run:
+
+```bash
+go test ./internal/core/files
+```
+
+Expected: all `internal/core/files` tests pass.
+
+## Task 4: Permissions And Capabilities
+
+**Files:**
+
+- Modify: `internal/core/permissions/registry.go`
+- Modify: `main.go`
+- Modify: `internal/api/app_test.go`
+
+- [x] Register permissions: `files.read`, `files.write`, `files.delete`.
+- [x] Register core capability `verstak/core/files/v1` when vault services are
+      initialized.
+- [x] Add API guard tests proving each Files bridge method rejects plugins that
+      are missing the required permission.
+- [x] Run:
+
+```bash
+go test ./internal/core/permissions ./internal/api
+```
+
+Expected: permission registry and API tests pass.
+
+## Task 5: Wails API Bridge
+
+**Files:**
+
+- Modify: `internal/api/app.go`
+- Modify: `internal/api/app_test.go`
+- Modify after Wails generation or by hand if generation is unavailable:
+  `frontend/wailsjs/go/api/App.d.ts`
+- Modify after Wails generation or by hand if generation is unavailable:
+  `frontend/wailsjs/go/api/App.js`
+
+- [x] Add `files.Service` to `api.App`.
+- [x] Add plugin-scoped methods listed in "Public Backend Shape".
+- [x] Use `requirePluginAccess(pluginID, permission)` for every method.
+- [x] Return readable errors for closed vault, missing file, reserved path,
+      conflict, and missing permission.
+- [x] Add tests for successful read/write/list/mkdir/move/trash through `App`.
+- [x] Run:
+
+```bash
+go test ./internal/api
+```
+
+Expected: API tests pass.
+
+## Task 6: Frontend Plugin API Draft
+
+**Files:**
+
+- Modify: `frontend/src/lib/plugin-host/VerstakPluginAPI.js`
+- Modify: `frontend/src/lib/test/wails-mock.js`
+- Add/modify focused frontend tests under `frontend/e2e/` only if existing test
+  coverage cannot validate the shape outside Playwright.
+
+- [x] Add `api.files.list(relativeDir)`.
+- [x] Add `api.files.metadata(relativePath)`.
+- [x] Add `api.files.readText(relativePath)`.
+- [x] Add `api.files.writeText(relativePath, content, options)`.
+- [x] Add `api.files.mkdir(relativePath)`.
+- [x] Add `api.files.move(fromRelativePath, toRelativePath, options)`.
+- [x] Add `api.files.trash(relativePath)`.
+- [x] Keep all calls plugin-scoped; plugin code must not pass `pluginId`.
+- [x] Mock readable errors for reserved path and missing permission.
+- [x] Run:
+
+```bash
+cd frontend
+npm run build
+```
+
+Expected: frontend build passes.
+
+## Task 7: SDK Bridge Shape Draft
+
+**Files:**
+
+- Modify: `../verstak-sdk/src/plugin-api.ts`
+- Modify: `../verstak-sdk/src/test-utils.ts`
+- Modify: `../verstak-sdk/src/plugin-api.test.ts`
+
+- [x] Add `files` API TypeScript interfaces matching the frontend API names.
+- [x] Add mock Files API methods in `createMockPluginAPI`.
+- [x] Add contract tests for API shape, text write/read, reserved path error, and
+      trash result shape.
+- [x] Run:
+
+```bash
+cd ../verstak-sdk
+./scripts/check.sh
+./scripts/build.sh
+./scripts/test.sh
+```
+
+Expected: SDK check, build, and tests pass.
+
+## Task 8: Documentation
+
+**Files:**
+
+- Modify: `docs/PLUGIN_RUNTIME.md`
+- Modify: `docs/NOTES_FILES_PLUGIN_PLAN.md`
+
+- [x] Document Files Core API as functional for Milestone 6a.
+- [x] Keep Notes API documented as planned until Milestone 6b or later.
+- [x] Document `.verstak` reserved path policy.
+- [x] Document slash-only path policy, Windows/UNC rejection, and symlink policy.
+- [x] Document text-only write support and deferred binary streaming.
+
+## Task 9: Final Verification
+
+- [x] Run desktop backend tests:
+
+```bash
+cd verstak-desktop
+go test ./...
+```
+
+- [x] Run desktop frontend build:
+
+```bash
+cd verstak-desktop/frontend
+npm run build
+```
+
+- [x] Run desktop e2e:
+
+```bash
+cd verstak-desktop/frontend
+npm run test:e2e -- --reporter=list
+```
+
+- [x] Run official plugins checks:
+
+```bash
+cd verstak-official-plugins
+./scripts/check.sh
+./scripts/build.sh
+```
+
+- [x] Run SDK checks:
+
+```bash
+cd verstak-sdk
+./scripts/check.sh
+./scripts/build.sh
+./scripts/test.sh
+```
+
+Expected: all commands exit 0. Existing Svelte unused CSS warnings are acceptable
+only if they remain warnings and do not fail the build.

docs/MILESTONE_6B_PLAN.md

@@ -0,0 +1,148 @@
+# Milestone 6b - Open/Edit Provider Registry + Workbench Routing Skeleton
+
+This milestone adds the minimal infrastructure layer for open/edit routing before
+Files UI, Notes UI, or editor implementation starts. It does not implement those
+plugins and does not add a concrete core-owned Markdown editor.
+
+## Existing Architecture Found
+
+| Path | Section/title | Summary |
+|---|---|---|
+| `../verstak-docs/00_README.md` | Main architecture invariant | Core does not know concrete notes, file manager, or markdown editor features. It owns vault, plugin runtime, capability registry, contribution points, permissions, settings, events, storage, and UI shell. |
+| `../verstak-docs/01_Product_Vision.md` | What is not in core / platform goal | Markdown editor, file manager, preview, and notes workflow are plugins. Users should be able to replace the markdown editor or install multiple editors. |
+| `../verstak-docs/02_Platform_Architecture.md` | UI Shell / Capability Registry | UI Shell knows contribution points, not concrete note editor or file preview implementations. Files plugin checks editor/viewer capabilities instead of depending on `official.markdown-editor`. |
+| `../verstak-docs/03_Repositories.md` | Repository split | `verstak-desktop` is Core Platform + UI Shell and does not contain mandatory notes, file manager, or markdown editor modules. Official plugins live separately. |
+| `../verstak-docs/04_Plugin_System.md` | Goal / capabilities instead of plugin names / contribution points | Notes, file manager, editor, and viewer are plugin functions. The docs explicitly reject `requires: ["official.markdown-editor"]` and prefer `optionalRequires: ["editor.text.markdown"]`. |
+| `../verstak-docs/05_Official_Plugins.md` | official.files / official.notes / official.markdown-editor | Files optionally depends on editor/viewer capabilities. Markdown editor provides `editor.text`, `editor.text.markdown`, and `editor.note.markdown`, and must not own note storage or depend directly on `official.notes`. |
+| `../verstak-docs/06_Migration_Strategy.md` | Do not / Definition of Done | Do not make notes/files/editor mandatory core parts. The platform transition is done only when notes/files/editor/preview/activity work as plugins. |
+| `docs/NOTES_FILES_PLUGIN_PLAN.md` | Canonical Notes Model | Notes are ordinary Markdown files in canonical `Notes/` folders. No lowercase `notes`, no `.verstak/notes`, no plugin-data note content, no UUID-only filenames. |
+| `docs/NOTES_FILES_PLUGIN_PLAN.md` | Files Service Model | Files Core is raw vault file access and does not understand note semantics. Milestone 6a exposes safe text file methods and defers UI, watcher, binary streaming, external editor, and restore. |
+| `docs/PLUGIN_RUNTIME.md` | Contribution Points / Bundled Frontend Plugin API | Current runtime hosts views/sidebar/settings/commands and exposes plugin-scoped Files API. `fileActions`, `noteActions`, `contextMenuEntries`, search/activity/status bar entries are registered but not hosted. |
+| `internal/core/contribution/registry.go` | Contribution registry | Registry has the established contribution points and now extends that model with `openProviders`. |
+| `internal/core/plugin/plugin.go` | Manifest contributions | Plugin manifest types now include `openProviders` alongside existing contribution points. |
+| `frontend/src/lib/shell/WorkbenchHost.svelte` and `frontend/src/lib/plugin-host/PluginBundleHost.svelte` | Frontend plugin host | Workbench mounts the selected provider component by plugin id and component id. It remains generic and does not know a concrete editor. |
+| `frontend/src/lib/plugin-host/VerstakPluginAPI.js` | Plugin API | Bundled plugins can call `api.workbench.openResource()` and `api.workbench.editResource()` in addition to settings, capabilities, events, commands, and Files API. |
+| `../verstak-sdk/src/types.ts` and `../verstak-sdk/schemas/manifest.json` | SDK contribution contracts | SDK types/schema define `openProviders`, `OpenResourceRequest`, provider supports, and `files.*` permissions. |
+
+## What Matches The Desired Model
+
+- Files/Notes/Editor are already documented as plugins, not core modules.
+- Official plugins are expected to use the same runtime as community plugins.
+- Files plugin is already documented as capability-driven, not hard-wired to a markdown editor.
+- Markdown editor is already documented as replaceable via capabilities.
+- Notes are already documented as Markdown files under canonical `Notes/` folders, without `.verstak/notes`, UUID note entities, or a second storage truth.
+- Desktop code has no hardcoded Markdown editor component.
+- Existing plugin host can mount arbitrary plugin components, which is enough foundation for an editor provider host.
+
+## Contradictions Found
+
+- `docs/NOTES_FILES_PLUGIN_PLAN.md` still said Files Core API/capability/permissions were unavailable, while later sections and code show Milestone 6a implemented them.
+- `../verstak-docs/05_Official_Plugins.md` calls notes "first-class Verstak entities". That is acceptable only as UI semantics; implementation must not create a separate note storage entity.
+- `../verstak-docs/05_Official_Plugins.md` lists "Open externally" as a Files fallback. External open remains deferred and must not enter Milestone 6b.
+- `../verstak-sdk/schemas/manifest.json` previously did not include `files.read`, `files.write`, or `files.delete` in the permissions enum, while SDK TS types, desktop permissions, and official `platform-test` manifest already used them. Milestone 6b resolves this 6a contract cleanup item.
+
+## Missing Before 6b
+
+- `openProviders` contribution point.
+- `OpenResourceRequest` contract.
+- Workbench open/edit routing API for Files/Notes plugins.
+- Provider selection model using resource kind, extension/mime, notes context, user preference, provider priority, deterministic fallback, and disabled provider fallback.
+- User preferences for default text editor provider, default markdown editor provider, and default notes-context markdown editor provider.
+- Host slot/tab that mounts the selected provider component with an open resource request.
+- Tests for provider registration, selection, preferences, disabled provider fallback, and notes-context routing.
+
+## Added In 6b
+
+- `contributes.openProviders` in SDK schema/types and desktop manifest structs.
+- Desktop contribution registry support for registering, replacing, listing, and
+  unregistering open providers.
+- `OpenResourceRequest`, `OpenResourceContext`, `OpenResourceResult`, and
+  opened-resource state in the Workbench routing skeleton.
+- Provider selection by resource kind, extension/mime, `generic-text`,
+  `generic-markdown`, or `notes-markdown` context, user preference, priority,
+  deterministic `pluginId/providerId` fallback, and active plugin filtering.
+- `workbench.open` policy permission for plugins that request Workbench routing.
+- Draft app settings preferences for default text, markdown, and notes-context
+  markdown providers.
+- `api.workbench.openResource()` and `api.workbench.editResource()` exposed to
+  frontend plugin bundles.
+- Minimal Workbench host that mounts the selected provider component from the
+  selected provider plugin.
+- `no-provider` fallback state when no matching provider exists.
+- `platform-test` diagnostic open provider used only to prove routing.
+
+## Decision
+
+Open/edit provider should be an extension of the existing contribution registry,
+not a parallel system. It should add `openProviders` beside `views`, `commands`,
+`fileActions`, and `noteActions`.
+
+Capabilities remain useful for broad availability and degraded mode, but they are
+too coarse for choosing between multiple providers. Provider selection needs a
+declarative provider contribution with `supports`, priority, and component id.
+
+## Correct Notes Model
+
+- Notes are a contextual view over ordinary Markdown files under canonical
+  `Notes/` folders.
+- `.md` inside `Notes/` opens through the selected markdown editor with
+  notes-context.
+- `.md` outside `Notes/` opens through the selected markdown editor in generic
+  markdown mode.
+- Plain text opens through the selected text editor provider in `generic-text`
+  context.
+- Files and Notes call open/edit resource; neither embeds a concrete editor.
+- Editor provider selection belongs to Workbench/provider registry.
+- No `.verstak/notes`, no UUID note entities, no second truth separate from the
+  `.md` file.
+
+## Minimal Infrastructure Changes
+
+1. Add `openProviders` to SDK manifest/schema/types.
+2. Add `openProviders` to desktop plugin manifest structs and contribution
+   registry.
+3. Add `OpenResourceRequest` and provider support match types.
+4. Add Workbench/provider selection service with deterministic rules.
+5. Add user preferences for `defaultTextEditorProvider`,
+   `defaultMarkdownEditorProvider`, and `defaultNotesMarkdownEditorProvider`.
+6. Add frontend host plumbing so Workbench can mount the selected plugin
+   component.
+7. Fix `verstak-sdk/schemas/manifest.json` permissions enum for `files.*`.
+
+## Proposed Milestone 6b Scope
+
+In scope:
+
+- Contribution/types/schema support for `openProviders`.
+- Workbench `openResource`/`editResource` routing API.
+- Provider selection with notes context and user preferences.
+- Minimal host tab/slot for provider component mounting.
+- Diagnostic provider plugin contribution sufficient to prove routing.
+- Tests for routing, provider selection, disabled fallback, and notes-context
+  markdown.
+
+Out of scope:
+
+- Full Files UI feature set.
+- Full Notes UI feature set.
+- Full editor implementation.
+- Real default editor plugin (Milestone 6c).
+- Files plugin open/edit integration.
+- Notes plugin open/edit integration.
+- Hardcoded core Markdown editor.
+- Watcher/sync/binary streaming/external editor.
+- Sidecar/security boundary.
+- Large rewrite.
+
+## 6b-fix: Infrastructure Gaps Closed
+
+Post-review fixes before Milestone 6c:
+
+- Added `openProviders` to `verstak-sdk/schemas/contributions.json` contribution points.
+- Added provider matching tests: text/markdown preference, MIME matching, extension
+  case-insensitivity, multiple supports entries, kind mismatch.
+- Added disabled provider exclusion test in `api/app_test.go`.
+- Fixed SDK `build.sh`/`test.sh` to detect incomplete `node_modules`.
+- Documented disabled provider lifecycle: contributions remain in registry until
+  ReloadPlugins; `activeOpenProviders()` filters disabled/unloaded at request time.
+- Installed Playwright browsers for E2E tests.

docs/MILESTONE_6C_DEFAULT_EDITOR_PLAN.md

@@ -0,0 +1,65 @@
+# Milestone 6c — Default Editor Plugin
+
+## Goal
+
+Create the official Default Editor Plugin as an openProvider for text, generic
+markdown, and notes-context markdown files. Core desktop does not own or import
+the editor component.
+
+## What was built
+
+### Plugin: `verstak.default-editor`
+
+Location: `verstak-official-plugins/plugins/default-editor/`
+
+**Manifest declares 3 openProviders:**
+
+| Provider ID | Context | Extensions |
+|-------------|---------|------------|
+| `verstak.default-editor.text` | `generic-text` | `.txt`, `.log`, `.conf`, `.ini`, `.toml`, `.yaml`, `.yml`, `.json`, `.csv` |
+| `verstak.default-editor.markdown` | `generic-markdown` | `.md`, `.markdown` |
+| `verstak.default-editor.notes-markdown` | `notes-markdown` | `.md`, `.markdown` |
+
+All providers use the same `DefaultEditor` component (unified, not 3 separate editors).
+
+**Permissions:** `files.read`, `files.write`, `workbench.open`
+
+**Capabilities required:** `verstak/core/files/v1`, `verstak/core/workbench/v1`
+
+### Frontend component: `DefaultEditor`
+
+- **Modes:** text (textarea), generic-markdown (editor + preview), notes-markdown (editor + preview + notes badge)
+- **File loading:** `api.files.readText(path)` with loading/error states
+- **Saving:** `api.files.writeText(path, content, { overwrite: true })` with dirty/saved/error states
+- **Keyboard:** Ctrl+S / Cmd+S save, Tab indentation
+- **Markdown preview:** Simple renderer (no raw HTML, no script injection)
+- **Notes context:** Badge + info bar, no separate note entity, no `.verstak/notes`
+
+## Verification
+
+- `go test ./...` — PASS
+- `go vet ./...` — PASS
+- `npm run build` (frontend) — PASS
+- `npm run test:e2e` — 28/28 PASS (20 existing + 8 new)
+- `scripts/check.sh` (official-plugins) — PASS
+- `scripts/build.sh` (official-plugins) — PASS
+- SDK checks — PASS
+
+## Manual testing
+
+Until Files UI plugin exists, use platform-test diagnostics panel to manually
+open files via workbench: click "Open Text Diagnostic", "Open Markdown Diagnostic",
+or "Open Notes Diagnostic" buttons. These call `api.workbench.editResource` and
+route through the default-editor provider.
+
+## Deferred
+
+- CodeMirror/Monaco editor
+- Backlinks, internal link navigation
+- Secret widgets
+- Image asset pipeline
+- Files UI plugin
+- Notes UI plugin
+- Watcher/sync
+- External open
+- Sidecar/security isolation

docs/MILESTONE_6D_FILES_PLUGIN_PLAN.md

@@ -0,0 +1,64 @@
+# Milestone 6d — Minimal Files Plugin
+
+## Goal
+
+Create a minimal Files plugin that shows vault files/folders and opens files
+through Workbench openResource. No editor embedded.
+
+## What was built
+
+### Plugin: `verstak.files`
+
+Location: `verstak-official-plugins/plugins/files/`
+
+**Contributions:**
+- views: `verstak.files.view` → `FilesView` component
+- No sidebarItems — Files is not a global sidebar item
+
+**Permissions:** `files.read`, `files.write`, `workbench.open`, `ui.register`
+
+### Files View
+
+- Root listing on mount
+- Folder navigation (double-click)
+- File open via `api.workbench.openResource()`
+- Breadcrumb navigation
+- Create folder/file buttons
+- Refresh button
+- Loading/error/empty states
+- `.verstak` filtered out
+
+### Provider priority
+
+- default-editor: priority 50
+- platform-test diagnostic: priority 10
+- default-editor wins for normal file opens
+
+### Bundle fix
+
+Fixed missing opening quote in STYLES string (`.files-empty` → `'.files-empty'`).
+Added automated bundle execution check to `scripts/check.sh`.
+
+## 6d-hotfix
+
+- Removed sidebarItems from Files plugin (Files is not a global sidebar item)
+- Added `[frontend bundle execution]` check to `check.sh` — verifies all plugin
+  bundles parse via `new Function()` and register via `VerstakPluginRegister`
+- Updated E2E tests: Files no longer expected in global sidebar
+- Documented: sidebarItems are global shell navigation, not workspace template tabs
+
+## Verification
+
+- `go test ./...` — PASS
+- `go vet ./...` — PASS
+- `npm run build` — PASS
+- `npm run test:e2e` — 34/34 PASS
+- Official plugins — 3 plugins built, bundle execution check passes
+- SDK — 11/11 tests pass
+
+## Deferred
+
+- Notes plugin, rename/move/trash UI, drag-and-drop, context menu,
+  watcher/inotify, sync, external open, binary streaming, sidecar/security,
+  workspace template host (Milestone 6d2)
+

docs/NOTES_FILES_PLUGIN_PLAN.md

@@ -0,0 +1,428 @@
+# Notes/Files Plugin Architecture Plan
+
+This document locks the Notes/Files/Open architecture for the next milestones.
+Files Core Service was implemented in Milestone 6a; this document still does not
+start Notes UI, Notes plugin, Files UI plugin, editor plugin, watcher, sync, or
+binary streaming.
+
+## Current Readiness
+
+The platform is ready for bundled plugin UI experiments. Files Core is available
+as a safe vault-scoped text file API. Notes, Files UI, and editor/viewer UI still
+need plugin-level implementations and host surfaces before real product use.
+
+Already available:
+
+- Plugin discovery, lifecycle, settings, capabilities, bundled commands, and
+  bundled frontend events.
+- Workspace lifecycle APIs for top-level physical folders under the vault root.
+- Plugin-owned internal storage directories:
+  `.verstak/plugin-data/<pluginId>`, `.verstak/plugin-settings/<pluginId>`, and
+  `.verstak/plugin-cache/<pluginId>`.
+- Contribution registry entries for `fileActions`, `noteActions`,
+  `contextMenuEntries`, `searchProviders`, `activityProviders`, and
+  `statusBarItems`.
+
+Not available yet:
+
+- Notes plugin/API as a semantic view over Markdown files.
+- Files UI plugin.
+- Editor/viewer plugin.
+- Open/edit resource routing and provider selection.
+- UI hosts for file actions, note actions, context menus, search providers,
+  activity providers, or status bar items.
+- Watcher/indexer for external filesystem changes.
+- Real plugin isolation. Current permission checks are contract/policy checks,
+  not a security boundary for bundled frontend JavaScript.
+
+## Canonical Notes Model
+
+Notes are ordinary human-readable Markdown files inside the vault. They must be
+visible and editable outside Verstak.
+
+Canonical rules:
+
+- Notes are `.md` files, not opaque records.
+- Canonical folder name is exactly `Notes`.
+- Do not create lowercase `notes`.
+- Do not store user notes in `.verstak/notes/`.
+- Do not store user notes in `.verstak/plugin-data/verstak.notes/`.
+- Do not use UUID-only filenames for notes.
+- The note title is the source of truth.
+- The filename is a normalized projection from the title.
+- `RenameNote` must update both the title and the `.md` filename.
+
+Canonical scoped paths:
+
+- Notes live under `<workspace>/Notes/`.
+- `Overview.md` is allowed as an ordinary Markdown filename, but the platform
+  must not create it automatically or treat it as a dedicated UI entity.
+- `<workspace>` is the top-level physical folder name under the vault root.
+- Files plugin workspace views are scoped with `workspaceRootPath`, which is the
+  selected top-level workspace folder name.
+
+Visibility requirements:
+
+- Notes UI must show notes as semantic notes.
+- Files UI must show the same `.md` files as ordinary files.
+- External file managers must show the same `.md` files.
+- Outside Verstak, the files must remain useful as normal Markdown.
+
+There is no canonical metadata workspace tree. Adding `note` as a workspace node
+type is not part of the next milestone. The official Notes plugin can index and
+manage Markdown files inside canonical `Notes/` folders under each top-level
+workspace.
+
+## Title To Filename Contract
+
+The title is the source of truth. The filename is derived from the title when a
+note is created or renamed.
+
+Normalization rules:
+
+- Replace spaces with `_`.
+- Replace typographic dashes with `-`.
+- Allow only letters, digits, `.`, `_`, and `-`.
+- Append `.md` if the normalized name does not already end with `.md`.
+- Reject empty normalized names.
+- Preserve canonical `Notes` folder casing.
+
+Examples:
+
+| Title | Filename |
+|---|---|
+| `Overview` | `Overview.md` |
+| `Meeting Notes` | `Meeting_Notes.md` |
+| `Plan — Phase 1` | `Plan_-_Phase_1.md` |
+| `A/B Test: Result` | `AB_Test_Result.md` |
+
+## Collision Policy
+
+Same-folder collisions must not be solved silently with `_2`, `_3`, or timestamp
+suffixes.
+
+Creating or renaming a note must return a conflict error if the normalized target
+filename already exists in the target `Notes/` folder. The UI should show a clear
+dialog or notification and ask the user to change the title.
+
+Required conflict metadata:
+
+- requested title;
+- normalized filename;
+- target vault-relative path;
+- existing vault-relative path.
+
+## Files Service Model
+
+Files service is the raw vault file layer. It works with vault-relative paths and
+does not understand note semantics.
+
+Rules:
+
+- All public Files API paths are canonical vault-relative slash paths.
+- Backslashes are rejected instead of normalized.
+- Absolute POSIX paths, Windows drive paths, and UNC/network paths are rejected.
+- `..` traversal is rejected.
+- Null bytes are rejected.
+- `.verstak/` is reserved case-insensitively and hidden/forbidden by default.
+- Access to `.verstak/` is allowed only through internal APIs, not through the
+  normal plugin Files API.
+- Symlink read/write/move/trash operations are forbidden in Milestone 6a.
+  Metadata may report a final symlink as `type: "symlink"`.
+- Writes must be atomic: write a temp file in the same directory, close it, then
+  rename.
+- Delete must follow the trash policy until permanent delete is explicitly
+  designed.
+- Trash metadata records `originalPath`, `deletedAt`, `originalType`, `trashId`,
+  and `basename` for future restore work. Restore is deferred.
+- Binary files are deferred for write/streaming APIs. Milestone 6a lists binary
+  metadata but read/write is UTF-8 text only with a 2 MB read limit.
+
+Minimum Files methods:
+
+- `ListVaultFiles(relativeDir)`.
+- `GetVaultFileMetadata(relativePath)`.
+- `ReadVaultTextFile(relativePath)`.
+- `WriteVaultTextFile(relativePath, content, options)`.
+- `CreateVaultFolder(relativePath)`.
+- `MoveVaultPath(fromRelativePath, toRelativePath)`.
+- `TrashVaultPath(relativePath)`.
+
+Milestone 6a status: implemented in `internal/core/files` and exposed to bundled
+plugins as `api.files.list`, `api.files.metadata`, `api.files.readText`,
+`api.files.writeText`, `api.files.createFolder`, `api.files.move`, and
+`api.files.trash`. It is still text-only for reads/writes and has no watcher,
+binary streaming, external editor integration, or Files UI plugin.
+
+Later Files methods:
+
+- `WatchVaultFiles(scope)` once watcher/event delivery is ready.
+- `ReadVaultFileBytes` / `WriteVaultFileBytes` for binary files.
+- `OpenExternal(relativePath)` with explicit permission and UX confirmation.
+- `RevealInFileManager(relativePath)`.
+
+## Official Notes Plugin Model
+
+The official Notes plugin is a semantic layer over Markdown files managed through
+the public Files plugin API. There is no core desktop Notes service or
+`verstak/core/notes/v1` capability in v2.
+
+Rules:
+
+- A note physically is a `.md` file.
+- Notes plugin and Files API must not create two sources of truth.
+- Notes plugin reads/writes the same files that Files API lists.
+- The note title is the semantic source of truth and is projected to the filename.
+  If frontmatter or a first-heading convention is introduced later, `RenameNote`
+  must keep that visible title metadata and the filename synchronized.
+- Other note metadata should be derived from the file path and filesystem
+  metadata, or from Markdown frontmatter if a future milestone introduces it.
+- If a note is changed through Files API or an external editor, the future
+  watcher/indexer must observe it.
+- Until watcher/indexer exists, external changes require reload/rescan.
+
+Minimum Notes plugin behavior:
+
+- list Markdown files in a scoped canonical `Notes/` folder;
+- create a Markdown note by writing the normalized filename atomically with
+  `overwrite: false`;
+- rename a note by moving the file to the normalized filename;
+- open and edit notes through Workbench providers;
+- never special-case `Overview.md` in the UI.
+
+Later Notes plugin behavior:
+
+- search notes;
+- list backlinks;
+- resolve note links;
+- export notes.
+
+## Notes Vs Files Relationship
+
+Files owns safe raw vault file access. Notes owns note semantics.
+
+The same physical note must be visible through both surfaces:
+
+- Files sees `Project/Notes/Overview.md` as a file.
+- Notes sees `Project/Notes/Overview.md` as a note with title `Overview`.
+
+There must be no duplicate note content stored in plugin settings, plugin data,
+or a separate `.verstak` note database. Indexes and caches may exist later, but
+they must be rebuildable from the canonical Markdown files.
+
+## Capabilities And Permissions
+
+Existing permissions that remain useful:
+
+- `vault.read` for existing vault-level read policy.
+- `vault.write` for existing vault-level write policy.
+- `vault.watch` for future watcher support.
+- `ui.register` for sidebar/views/settings contributions.
+- `commands.register` for bundled command handlers.
+- `events.publish` and `events.subscribe` for frontend/backend event flows.
+
+New permissions required before real Notes/Files plugins ship:
+
+- `files.read`
+- `files.write`
+- `files.delete`
+- `workbench.open`
+
+Future Notes semantic permissions are deferred until a real Notes plugin/API
+ships:
+
+- `notes.read`
+- `notes.write`
+- `notes.delete`
+
+Those permissions are still policy checks until sidecar/sandbox work provides a
+real isolation boundary.
+
+Recommended capabilities:
+
+- `verstak/core/files/v1`
+- `verstak/files/v1` provided by the official Files plugin.
+- `verstak/notes/v1` provided by the official Notes plugin.
+
+## Frontend Components And Extension Points
+
+Contribution points already registered but not fully hosted:
+
+- `fileActions`
+- `noteActions`
+- `contextMenuEntries`
+- `searchProviders`
+- `activityProviders`
+- `statusBarItems`
+
+UI work needed:
+
+- Files view host with tree/list modes and selection state.
+- Notes view host with note list, open/edit entry points, and preview/details
+  region.
+- Context menu host that merges core actions with plugin contributions.
+- Command palette host for contributed commands.
+- Search provider host with cancellation/debounce and result ownership.
+- Status bar host for lightweight plugin state.
+- Selection/event model for active file, active note, and active workspace node.
+
+The first implementation should host only the contribution points needed by the
+official Notes and Files plugins.
+
+## Open/Edit Resource Model
+
+Files and Notes must not embed a concrete editor or viewer. They request that the
+Workbench open or edit a resource. The Workbench/provider registry selects the
+plugin component.
+
+Required model:
+
+- Files plugin lists files and calls open/edit for a vault file.
+- Notes plugin presents Markdown files under canonical `Notes/` folders and calls
+  open/edit for the same vault file with notes context.
+- `.md` or `.markdown` inside a canonical `Notes/` folder opens in markdown mode
+  with notes context.
+- `.md` or `.markdown` outside `Notes/` opens in generic markdown mode.
+- Plain text opens in `generic-text` mode.
+- The same editor provider may support text, generic markdown, and notes-context
+  markdown.
+- User preferences can select another provider for text, markdown, and
+  notes-context markdown.
+- Community editor plugins can replace the default editor through the same
+  provider registry.
+- Core desktop owns registry, routing, Workbench host slot/tab, and preferences.
+- Core desktop does not own concrete Files UI, Notes UI, Markdown editor, or file
+  preview UI.
+
+Minimal contribution extension:
+
+```json
+{
+  "contributes": {
+    "openProviders": [
+      {
+        "id": "verstak.platform-test.markdown-diagnostic",
+        "title": "Platform Test Markdown Diagnostic",
+        "priority": 100,
+        "component": "MarkdownDiagnosticProvider",
+        "supports": [
+          {
+            "kind": "vault-file",
+            "extensions": [".md", ".markdown"],
+            "contexts": ["generic-markdown", "notes-markdown"]
+          },
+          {
+            "kind": "vault-file",
+            "mime": ["text/plain"],
+            "extensions": [".txt", ".log", ".json", ".yaml", ".yml", ".toml", ".ini", ".conf"],
+            "contexts": ["generic-text"]
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+Open request shape:
+
+```ts
+type OpenResourceRequest = {
+  kind: "vault-file";
+  path: string;
+  mode?: "view" | "edit";
+  mime?: string;
+  extension?: string;
+  context?: {
+    sourcePluginId?: string;
+    sourceView?: "files" | "notes" | string;
+    isInsideNotesFolder?: boolean;
+    notesScopePath?: string;
+    notesMode?: boolean;
+  };
+};
+```
+
+Provider selection rules:
+
+1. Match resource kind.
+2. Match extension and/or mime.
+3. Prefer providers that explicitly support the request context.
+4. Apply user preference for text, markdown, or notes-context markdown when the
+   preferred provider is enabled and still supports the resource.
+5. Otherwise choose highest priority.
+6. Break ties deterministically by plugin id, then provider id.
+7. If no provider matches, return a Workbench `no-provider` state rather than
+   hardcoding a core editor.
+8. If a preferred provider plugin is disabled or unavailable, fall back to the
+   deterministic default and surface a non-blocking preference warning later.
+
+Initial preferences:
+
+- `defaultTextEditorProvider`;
+- `defaultMarkdownEditorProvider`;
+- `defaultNotesMarkdownEditorProvider`.
+
+Per-extension overrides are deferred.
+
+## Migration Risks
+
+- Adding `note` as a workspace node type is a workspace schema migration and is
+  explicitly out of scope for the next milestone.
+- The canonical path rules must be locked before writing real files into user
+  vaults.
+- Rename behavior can break external links if link rewriting is not designed.
+- Case/folder path ownership must be clear before scoped `Notes/` folders are
+  created.
+- Raw Files API can expose `.verstak` internals unless reserved paths are blocked.
+- File writes need atomic behavior and conflict handling before sync.
+- Large/binary files require streaming or byte APIs; text APIs are not enough.
+- External editor changes require reload/rescan until watcher/indexer exists.
+- Bundled frontend plugins are trusted/cooperative and not isolated from the
+  shared JS context.
+
+## Test Plan
+
+Backend Go tests:
+
+- Vault-relative path normalization and traversal rejection.
+- Reserved `.verstak` path behavior.
+- Files list/read/write/mkdir/move/trash with vault closed/open states.
+- Atomic text writes and temp-file cleanup on failure.
+- Notes `Notes/` folder casing and no lowercase `notes`.
+- Title to filename normalization.
+- note create/rename conflict errors without silent suffixes.
+- Notes and Files read the same physical `.md` file.
+- Permission checks for `files.*`, `notes.*`, `vault.read`, and `vault.write`.
+
+Frontend/unit tests:
+
+- SDK and plugin API shape for Files and Notes draft methods.
+- Readable errors for missing permissions, closed vault, missing file, missing
+  note, reserved path, and collision.
+- Contribution host rendering for note/file actions and context menus.
+
+Playwright e2e tests:
+
+- Create a text file, reload, and verify it is visible in Files.
+- Create a note, reload, and verify it is visible in both Notes and Files.
+- Rename a note and verify title plus filename change together.
+- Attempt same-folder collision and verify user-facing conflict handling.
+- External file change requires reload/rescan until watcher exists.
+
+## Implementation Order
+
+1. Define canonical vault-relative path rules and reserved path policy.
+2. Implement Files core service with safe list/read/write/mkdir/move/trash.
+3. Define open/edit resource request, provider contribution shape, and provider
+   selection rules.
+4. Extend contribution registry/types with `openProviders`.
+5. Add Workbench open/edit routing and a provider-hosted tab/slot.
+6. Add preferences for text, markdown, and notes-context markdown provider ids.
+7. Use `platform-test` diagnostic provider to verify routing; real default
+   editor plugin is deferred to Milestone 6c.
+8. Build official Files plugin that calls open/edit resource.
+9. Build official Notes plugin as a contextual view over Markdown files in
+   canonical `Notes/` folders.
+10. Implement future Notes semantic helpers only as a facade over Markdown files,
+    never as a second source of truth.

docs/PLUGIN_RUNTIME.md

@@ -6,19 +6,34 @@
 
 ### Discovery Directories
 
-Plugins ищутся в двух директориях (порядок приоритета):
+Plugins ищутся через единый resolver `internal/core/plugin.ResolveDiscoveryDirs`.
+Порядок приоритета:
 
 | Путь | Назначение | Коммитится |
 |---|---|---|
+| `VERSTAK_PLUGIN_DIR` | Override для тестов/dev; можно передать несколько путей через OS path separator | Нет |
+| `./plugins/` | Dev plugins относительно текущей рабочей директории/repo | Нет (`.gitignore`) |
+| `<binary-dir>/plugins/` | Packaged plugins рядом с desktop binary | Зависит от дистрибутива |
 | `~/.config/verstak/plugins/` | User-installed plugins | Нет (user home) |
-| `./plugins/` | Bundled / dev plugins | Нет (`.gitignore`) |
+
+Resolver нормализует пути, удаляет дубликаты и передает discovery только канонический
+список директорий. Отсутствующие директории просто пропускаются на этапе scanning.
+
+Discovery сканирует **все** resolved директории в указанном порядке. Если один и тот
+же `plugin.id` найден несколько раз, применяется правило **first plugin wins**:
+первый найденный plugin загружается, последующие plugins с тем же id пропускаются.
+Конфликт логируется и возвращается как discovery warning с двумя путями: путь
+пропущенного duplicate и путь уже загруженного winner.
 
 ### ./plugins/ как Dev/Install Target
 
-Директория `./plugins/` в корне `verstak-desktop` используется как:
+Директория `./plugins/` от текущей рабочей директории используется как:
 
 - **Dev target** — `install-dev-plugins.sh` коприрует сюда собранные пакеты из `verstak-official-plugins/dist/`.
-- **Bundled plugins** — при дистрибутиве core может поставлять плагины здесь.
+- **Local override** — при запуске desktop из repo позволяет быстро проверять packaged bundles.
+
+В packaged-сборке bundled plugins должны лежать в `plugins/` рядом с executable.
+Для тестов и локальных сценариев можно задать `VERSTAK_PLUGIN_DIR=/path/to/plugins`.
 
 Директория **не коммитится**. Каждый разработчик устанавливает плагины через `install-dev-plugins.sh`.
 
@@ -83,6 +98,8 @@ coreCaps := []string{
     "verstak/core/contribution-registry/v1",
     "verstak/core/permissions/v1",
     "verstak/core/events/v1",
+    "verstak/core/files/v1",
+    "verstak/core/workbench/v1",
 }
 capRegistry.Register("verstak-desktop", coreCaps)
 
@@ -95,17 +112,25 @@ capRegistry.Register("verstak-desktop", []string{"verstak/core/vault/v1"})
 ### Plugin capability resolution
 
 ```
-foreach plugin:
-    1. зарегистрировать plugin.provides в capability registry
-    2. проверить plugin.requires — если есть missing → missing-required-capability
-    3. проверить plugin.optionalRequires — если есть missing → degraded
-    4. иначе → loaded
-    5. зарегистрировать plugin.contributes в contribution registry
+1. Исключить disabled plugins.
+2. Пока есть неразрешённые plugins:
+   - plugin с уже доступными `requires` атомарно регистрирует `provides`;
+   - при конфликте `provides` plugin получает `failed`;
+   - если за проход ничего не разрешилось, остальные получают
+     `missing-required-capability`.
+3. После разрешения всех обязательных зависимостей проверить
+   `optionalRequires`: отсутствующие переводят plugin в `degraded`.
+4. Зарегистрировать `contributes` только для `loaded` и `degraded` plugins.
 ```
 
+Таким образом, порядок discovery не влияет на обычные зависимости между
+plugins. При конкурирующих providers одного capability порядок discovery служит
+tie-breaker. `provides` плагина с неразрешённым `requires` или ошибкой
+регистрации не попадают в registry.
+
 ### Capability конфликт
 
-Два plugin не могут предоставлять один и тот же capability. При попытке повторной регистрации — ошибка и статус `failed` для второго плагина.
+Два plugin не могут предоставлять один и тот же capability. При попытке повторной регистрации второй plugin получает `failed`; регистрация атомарна, поэтому ни один capability такого plugin не остаётся в registry.
 
 ## Plugin Manifest Format
 
@@ -129,7 +154,7 @@ foreach plugin:
 |---|---|---|
 | `description` | string | Описание плагина |
 | `source` | string | `"official"`, `"local"`, `"third-party"` |
-| `icon` | string | Иконка (emoji или имя) |
+| `icon` | string | Имя иконки из встроенного Lucide-набора shell |
 | `requires` | string[] | Жёзкие capability-зависимости |
 | `optionalRequires` | string[] | Мягкие capability-зависимости |
 | `frontend` | object | `{ "entry": "path/to/index.js", "style": "path/to/style.css" }` |
@@ -150,7 +175,7 @@ foreach plugin:
   "provides": ["verstak/platform-test/v1"],
   "requires": ["verstak/core/plugin-manager/v1"],
   "optionalRequires": ["verstak/core/vault/v1", "verstak/core/sync/v1"],
-  "permissions": ["vault.read", "events.publish", "ui.register"],
+  "permissions": ["vault.read", "events.publish", "ui.register", "workbench.open"],
   "frontend": { "entry": "frontend/dist/index.js" },
   "contributes": {
     "views": [{ "id": "my.view", "title": "My View", "component": "MyPanel" }],
@@ -161,30 +186,459 @@ foreach plugin:
 
 ## Contribution Points
 
-Плагины могут регистрировать UI contributions через поле `contributes`:
+Плагины могут регистрировать UI contributions через поле `contributes` в `plugin.json`.
 
-| Тип | Описание |
+Icon fields use shell icon names rendered through the bundled Lucide SVG wrapper. Plugins must not rely on emoji, Unicode pictographs, or system icon fonts; if a plugin needs its own icon font, it must bundle the font and reference it from its own frontend bundle.
+
+### Реализованные contribution points (Milestone 5a)
+
+| Тип | Поле manifest | Описание | Frontend host |
+|---|---|---|---|
+| Боковая панель | `sidebarItems` | Элементы в sidebar слева | ✅ Sidebar.svelte (из ContributionRegistry) |
+| Основные панели | `views` | Полноценные страницы/панели | ✅ ViewContainer.svelte (PluginBundleHost — real frontend bundle) |
+| Панели настроек | `settingsPanels` | Панели в Plugin Manager | ✅ PluginManager.svelte (кнопка Settings, открывает modal) |
+| Команды | `commands` | Команды для command palette | ✅ ContributionRegistry + CommandPalette UI |
+| Open/edit providers | `openProviders` | Провайдеры viewer/editor для Workbench routing | ✅ ContributionRegistry + минимальный Workbench host |
+| Действия над файлами | `fileActions` | Provider actions for Files surface | ✅ Files plugin context menu |
+| Действия над заметками | `noteActions` | Provider actions for Notes surface | ✅ Notes plugin row actions |
+| Контекстное меню | `contextMenuEntries` | Provider context menu entries | ✅ Files plugin context menu |
+| Провайдеры поиска | `searchProviders` | Search provider discovery | ✅ Contribution summary + Search plugin |
+| Провайдеры активности | `activityProviders` | Activity event subscriptions | ✅ Backend activity recorder |
+| Элементы status bar | `statusBarItems` | Status bar labels/actions | ✅ StatusBar.svelte host |
+
+### Планируемые contribution points
+
+| Тип | Поле manifest | Статус |
+|---|---|---|
+| Sidecar-backed command handlers | `commands` | Planned; bundled frontend handlers are current runtime |
+| Import/export providers | `importers` / `exporters` | Planned |
+| Protocol receivers | `protocol.receivers` | Planned |
+
+### Структура contribution points в manifest
+
+```json
+{
+  "contributes": {
+    "sidebarItems": [
+      {
+        "id": "mypanel.sidebar",
+        "title": "My Panel",
+        "icon": "puzzle",
+        "view": "mypanel.view",
+        "position": 100
+      }
+    ],
+    "views": [
+      {
+        "id": "mypanel.view",
+        "title": "My Panel View",
+        "icon": "puzzle",
+        "component": "MyPanelComponent"
+      }
+    ],
+    "settingsPanels": [
+      {
+        "id": "mypanel.settings",
+        "title": "My Settings",
+        "component": "MySettingsPanel"
+      }
+    ],
+    "commands": [
+      {
+        "id": "mypanel.cmd",
+        "title": "Do Something",
+        "icon": "gear",
+        "handler": "doSomething"
+      }
+    ]
+  }
+}
+```
+
+### Contribution lifecycle
+
+1. Plugin `Register(pluginID, contributions)` — все contributions регистрируются
+2. `Unregister(pluginID)` — удаляет все contributions указанного plugin
+3. Reload сначала удаляет contributions всех plugins предыдущего discovery, затем регистрирует только `loaded`/`degraded` plugins
+4. Disable plugin → `Unregister` (contributions исчезают из UI)
+5. Enable plugin → `Register` при следующем Reload
+6. Registry idempotent: Register удаляет старые записи перед добавлением новых
+
+## Bundled Frontend Plugin API
+
+Bundled frontend plugins получают API от host через `createPluginAPI(pluginId)`.
+Обычный plugin code не передает `pluginId` в методы API: scope закрепляется в
+host при mount компонента. Это защищает нормальный cooperative path от случайного
+доступа к чужому namespace.
+
+Текущая модель безопасности честно ограничена:
+
+- bundled frontend plugins исполняются в общем JS-контексте приложения;
+- проверки permissions/capabilities сейчас являются contract/policy checks, а не
+  полноценной security boundary;
+- malicious JS в общем контексте теоретически может обойти frontend wrapper;
+- настоящая изоляция будет только после отдельного sidecar/sandbox milestone.
+
+## Workbench Open/Edit Routing
+
+Files and Notes plugins do not import or embed a concrete editor plugin. They
+call `api.workbench.openResource(request)` or `api.workbench.editResource(request)`.
+The backend requires the source plugin to be enabled, loaded/degraded, and to
+declare `workbench.open`. This is a policy/contract check, not a security
+boundary.
+
+`OpenResourceRequest`:
+
+```ts
+type OpenResourceRequest = {
+  kind: "vault-file";
+  path: string;
+  mode?: "view" | "edit";
+  mime?: string;
+  extension?: string;
+  context?: {
+    sourcePluginId?: string;
+    sourceView?: "files" | "notes" | string;
+    isInsideNotesFolder?: boolean;
+    notesScopePath?: string;
+    notesMode?: boolean;
+  };
+};
+```
+
+Routing contexts are fixed as `generic-text`, `generic-markdown`, and
+`notes-markdown`. `.md`/`.markdown` inside canonical `Notes/` folders uses
+`notes-markdown`; markdown outside Notes uses `generic-markdown`; ordinary text
+uses `generic-text`. Milestone 6b derives context from request fields; future
+Files/Notes integrations can centralize canonical Notes folder auto-detection in
+the Workbench helper.
+
+`contributes.openProviders` extends the existing contribution registry:
+
+```json
+{
+  "contributes": {
+    "openProviders": [
+      {
+        "id": "verstak.platform-test.markdown-diagnostic",
+        "title": "Platform Test Markdown Diagnostic",
+        "priority": 100,
+        "component": "MarkdownDiagnosticProvider",
+        "supports": [
+          {
+            "kind": "vault-file",
+            "extensions": [".md", ".markdown"],
+            "contexts": ["generic-markdown", "notes-markdown"],
+            "modes": ["view"]
+          },
+          {
+            "kind": "vault-file",
+            "mime": ["text/plain"],
+            "extensions": [".txt", ".log"],
+            "contexts": ["generic-text"]
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+Selection uses enabled loaded/degraded provider plugins, resource kind,
+request mode, extension/mime, context, user preference, priority, then deterministic
+`pluginId/providerId` fallback. If nothing matches, Workbench returns
+`status: "no-provider"` and shows the fallback view instead of a core editor.
+
+Disabled/failed/missing-required-capability plugins are excluded from provider
+selection at request time by `activeOpenProviders()`. Their contributions may
+remain in the registry until the next `ReloadPlugins()` cycle, but they never
+match during routing.
+
+Draft app-global preferences are `defaultTextEditorProvider`,
+`defaultMarkdownEditorProvider`, and `defaultNotesMarkdownEditorProvider`.
+Vault-scoped and per-extension overrides are deferred.
+
+### Default Editor Plugin
+
+The official `verstak.default-editor` plugin (`verstak-official-plugins/plugins/default-editor/`)
+provides openProviders for text, generic markdown, and notes-context markdown files.
+It uses `api.files.readText` / `api.files.writeText` for file I/O and mounts through
+the standard `PluginBundleHost` / provider host mechanism. Core does not import or
+reference this plugin directly.
+
+Provider plugins may have no sidebar item — openProviders are contribution points
+for workbench routing, not navigation. Plugin Manager displays openProviders in the
+contributions summary.
+
+### API methods
+
+`settings`
+
+- `settings.read()` — читает весь settings namespace текущего plugin.
+- `settings.read(key)` — читает один ключ.
+- `settings.write(key, value)` — обновляет один ключ и пишет namespace обратно.
+- `settings.writeAll(settings)` — заменяет settings namespace.
+- Backend требует plugin exists, enabled, status `loaded`/`degraded` и permission
+  `storage.namespace`.
+
+`capabilities`
+
+- `capabilities.list()` — возвращает текущий capability registry.
+- `capabilities.get(name)` — возвращает `{ available, name, pluginId, status }`.
+- `capabilities.has(name)` — boolean wrapper над `get`.
+- Backend требует, чтобы plugin был enabled/loaded и декларировал dependency на
+  `verstak/core/capability-registry/v1` в `requires` или `optionalRequires`.
+
+`commands`
+
+- `commands.register(commandId, handler)` — регистрирует bundled frontend handler.
+  Возвращает `Promise<unsubscribe>`.
+- `commands.execute(commandId, args)` — backend сначала проверяет plugin status,
+  permission `commands.register` и что command объявлен в `contributes.commands`
+  именно этим plugin. Затем frontend registry вызывает зарегистрированный handler.
+- `commands.executeFor(pluginId, commandId, args)` — то же выполнение, но для
+  command другого plugin-provider. Используется host surfaces вроде Files/Notes,
+  которые читают contribution action и вызывают объявленный provider handler.
+- Если command объявлен в manifest, но handler не зарегистрирован, API возвращает
+  понятную ошибку `declared-but-unhandled`.
+- Handler registry очищается при component unmount, reload/disable flow и
+  `api.dispose()`.
+- Shell command palette открывается через `Ctrl+K` / `Cmd+K` или
+  `Ctrl+Shift+P` / `Cmd+Shift+P`, показывает commands enabled plugins,
+  фильтрует по title/id/plugin и вызывает зарегистрированные bundled frontend
+  handlers.
+
+`statusBarItems`
+
+- Shell status bar renders enabled plugin `statusBarItems` contributions.
+- Items support `left`, `center`, and `right` positions. Missing position
+  defaults to `left`.
+- The host refreshes on plugin reload/enable/disable through
+  `verstak:plugins-changed`.
+- `handler` is preserved in the contribution summary for future action routing;
+  current host only renders status labels.
+
+`contributions`
+
+- `contributions.list()` — возвращает весь flattened contribution summary.
+- `contributions.list(point)` — возвращает массив contribution records для
+  конкретного поля (`fileActions`, `noteActions`, `contextMenuEntries`, etc).
+- Runtime records include `pluginId`, so consumer surfaces can call
+  `commands.executeFor(record.pluginId, record.handler, args)`.
+
+`events`
+
+- `events.subscribe(eventName, handler)` — frontend-local subscription с backend
+  validation permission `events.subscribe`. Возвращает `Promise<unsubscribe>`.
+- `events.publish(eventName, payload)` — backend проверяет `events.publish`, затем
+  событие dispatch'ится в bundled frontend event bus.
+- Handler получает envelope `{ name, pluginId, payload, timestamp }`.
+- Subscriptions очищаются при component unmount, reload/disable flow и
+  `api.dispose()`.
+- Core publishes `file.changed` for Files API mutations and live vault watcher
+  changes. Watcher payloads use `operation: "external.create"`,
+  `"external.update"`, or `"external.delete"`, include vault-relative `path`,
+  `type`, `workspaceRootPath`, and `external: true`.
+
+`files`
+
+- `files.list(relativeDir)` — list directory using a vault-relative path.
+- `files.metadata(relativePath)` — returns file/folder/symlink metadata.
+- `files.readText(relativePath)` — reads a UTF-8 regular file, with a size limit.
+- `files.readBytes(relativePath)` — reads a regular file up to 8 MB and returns
+  `{ relativePath, size, mimeHint, dataBase64 }` for bounded binary preview use.
+- `files.writeText(relativePath, content, options)` — atomically writes text via
+  temp-file-and-rename. `options.createIfMissing` and `options.overwrite`
+  control conflicts.
+- `files.writeBytes(relativePath, dataBase64, options)` — decodes a base64
+  payload up to 8 MB and atomically writes bytes via temp-file-and-rename.
+  `options.createIfMissing` and `options.overwrite` control conflicts.
+- `files.createFolder(relativePath)` — creates one folder when the parent exists.
+- `files.move(from, to, options)` — moves a file or folder; rejects moving a
+  folder into itself and conflicts unless `options.overwrite` is true.
+- `files.trash(relativePath)` — moves a file/folder into internal
+  `.verstak/trash/files/<trashId>/...` and returns trash metadata.
+- `files.listTrash()` — returns internal file trash metadata, newest first.
+- `files.restoreTrash(trashId, options)` — restores a file/folder from internal
+  trash to its original vault-relative path, or to `options.targetPath`.
+  Conflicts are rejected unless `options.overwrite` is true.
+- `files.deleteTrash(trashId)` — permanently removes a file/folder already in
+  internal trash. This operation cannot be undone.
+- UI policy: the workspace `Files` plugin displays only live files and folders.
+  The global official `verstak.trash` plugin owns listing, restoring, filtering,
+  and permanently deleting deleted items across the vault.
+- `files.openExternal(relativePath)` — opens a vault-relative file/folder in
+  the OS default application.
+- `files.showInFolder(relativePath)` — reveals a vault-relative file/folder in
+  the OS file manager where the platform supports it.
+- Backend requires plugin exists, enabled, status `loaded`/`degraded`, open
+  vault, and `files.read`, `files.write`, `files.delete`, or
+  `files.openExternal`.
+- All paths are canonical vault-relative slash paths. Backslashes, POSIX
+  absolute paths, Windows drive paths, UNC/network paths, `..`, null bytes,
+  symlink traversal, and public access to `.verstak/` are rejected.
+- `.verstak` is reserved case-insensitively: `.verstak`, `.Verstak`, and any
+  first path segment with that spelling are internal-only.
+- `files.metadata` may report a final symlink as `type: "symlink"`, but
+  `files.list` through a symlink directory and all read/write/move/trash
+  operations through symlinks are forbidden in Milestone 6a.
+- `readText` is limited to UTF-8 regular files up to 2 MB. `readBytes` and
+  `writeBytes` are bounded byte contracts up to 8 MB; chunked streaming is
+  deferred.
+- Live watcher refresh is active while Verstak is running and a vault is open.
+  It performs an initial no-event snapshot, then publishes `file.changed` for
+  external creates, updates, and deletes outside `.verstak/`. It does not keep a
+  persistent snapshot or report what changed while Verstak was closed.
+
+`sync`
+
+- `sync.now()` pushes local operations, pulls remote operations, and returns
+  `{ pushed, pulled, serverSequence, conflicts?, applyErrors? }`.
+- `conflicts` is an array of server-reported sync conflicts. Conflict objects
+  may include `op_id`, `entity_type`, `entity_id`, `reason`, and additional
+  server fields. The Sync plugin must show conflict details instead of only a
+  count, and it must not silently resolve or overwrite local data.
+- `applyErrors` lists local apply failures for pulled operations. These are
+  user-visible warnings and do not imply that sync was fully successful.
+- Transport push/pull uses bounded retry/backoff for transient HTTP/network
+  failures. Client/auth errors are not retried.
+
+`dispose`
+
+- `dispose()` вызывается host'ом при cleanup. Plugin code обычно не вызывает его
+  напрямую. Он удаляет зарегистрированные command handlers и event subscriptions.
+
+### Runtime boundaries
+
+| Layer | Current status |
 |---|---|
-| `views` | Панели/страницы (component — Svelte) |
-| `commands` | Команды command palette |
-| `settingsPanels` | Панели в Settings |
-| `sidebarItems` | Элементы боковой панели |
-| `fileActions` | Действия над файлами |
-| `noteActions` | Действия над заметками |
-| `contextMenuEntries` | Пункты контекстного меню |
-| `searchProviders` | Провайдеры поиска |
-| `activityProviders` | Провайдеры активности |
-| `statusBarItems` | Элементы status bar |
+| Bundled frontend runtime | Functional for settings, capabilities, commands, events and text Files API |
+| Backend validation | Checks plugin exists, enabled/loaded state, permissions and declarations |
+| Security boundary | Not implemented; bundled plugins share the desktop frontend JS context |
+| Sidecar/RPC/sandbox | Not implemented |
+
+### Error boundary
+
+- Ошибка в plugin view/settings placeholder не роняет shell
+- ViewContainer показывает "⚠️ Plugin UI failed" fallback
+- Error канал: `console.error` + видимый fallback в UI
+
+## Frontend Bundle Contract
+
+### Регистрация компонентов
+
+Плагин регистрирует frontend компоненты через глобальную функцию `window.VerstakPluginRegister`:
+
+```javascript
+window.VerstakPluginRegister('plugin.id', {
+  components: {
+    'ComponentName': {
+      mount: function(containerEl, props, api) {
+        // containerEl — div, созданный PluginBundleHost
+        // api — ограниченный VerstakPluginAPI
+        containerEl.innerHTML = '<h1>Hello from plugin!</h1>';
+      },
+      unmount: function(containerEl) {
+        // Очистка при смене view
+        containerEl.innerHTML = '';
+      }
+    }
+  }
+});
+```
+
+### VerstakPluginAPI
+
+API объект передаётся в `mount()` и содержит plugin-scoped методы текущего
+bundled runtime. Это реальный runtime contract для cooperative bundled plugins,
+но не sandbox/security boundary.
+
+| Свойство | Статус | Описание |
+|---|---|---|
+| `api.pluginId` | ✅ Работает | ID плагина |
+| `api.settings.read(key?)` | ✅ Работает | Читает plugin-scoped settings через backend bridge |
+| `api.settings.write(key, value)` | ✅ Работает | Пишет один settings key через backend bridge |
+| `api.settings.writeAll(settings)` | ✅ Работает | Заменяет settings namespace плагина |
+| `api.capabilities.list()` | ✅ Работает | Возвращает capability registry |
+| `api.capabilities.get(id)` | ✅ Работает | Возвращает capability entry/status |
+| `api.capabilities.has(id)` | ✅ Работает | Boolean wrapper над `get` |
+| `api.commands.register(id, handler)` | ✅ Работает | Регистрирует bundled frontend handler для объявленной command |
+| `api.commands.execute(id, args)` | ✅ Работает | Валидирует declaration/permission/backend state и вызывает bundled handler |
+| `api.commands.executeFor(pluginId, id, args)` | ✅ Работает | Выполняет handler другого plugin-provider после backend validation |
+| `api.contributions.list(point?)` | ✅ Работает | Возвращает flattened contribution summary или массив по point |
+| Command Palette UI | ✅ Работает | `Ctrl/Cmd+K`, фильтр enabled plugin commands, вызов registered frontend handlers |
+| `api.events.publish(type, payload)` | ✅ Работает | Валидирует permission и публикует во frontend event bus |
+| `api.events.subscribe(type, handler)` | ✅ Работает | Валидирует permission и подписывает handler на frontend event bus |
+| `api.files.list(relativeDir)` | ✅ Работает | Список vault-relative директории, `.verstak` скрыта |
+| `api.files.metadata(relativePath)` | ✅ Работает | Metadata для файла/папки/symlink без чтения содержимого |
+| `api.files.readText(relativePath)` | ✅ Работает | Читает UTF-8 regular file до 2 MB |
+| `api.files.readBytes(relativePath)` | ✅ Работает | Читает regular file до 8 MB как base64 payload |
+| `api.files.writeText(relativePath, content, options)` | ✅ Работает | Atomic text write с явным create/overwrite policy |
+| `api.files.writeBytes(relativePath, dataBase64, options)` | ✅ Работает | Atomic bounded byte write до 8 MB с явным create/overwrite policy |
+| `api.files.createFolder(relativePath)` | ✅ Работает | Создаёт vault-relative folder |
+| `api.files.move(from, to, options)` | ✅ Работает | Move file/folder с conflict и path-policy checks |
+| `api.files.trash(relativePath)` | ✅ Работает | Перемещает в internal trash и сохраняет metadata исходного объекта |
+| `api.files.listTrash()` | ✅ Работает | Возвращает metadata internal file trash |
+| `api.files.restoreTrash(trashId, options)` | ✅ Работает | Восстанавливает из internal trash, conflict-safe по умолчанию |
+| `api.files.deleteTrash(trashId)` | ✅ Работает | Необратимо удаляет запись и payload из internal trash |
+| `api.files.openExternal(relativePath)` | ✅ Работает | Открывает vault file/folder во внешнем приложении, требует `files.openExternal` |
+| `api.files.showInFolder(relativePath)` | ✅ Работает | Показывает vault file/folder в системном файловом менеджере, требует `files.openExternal` |
+| `api.workbench.openResource(request)` | ✅ Работает | Routes vault resources to `openProviders` |
+| `api.workbench.editResource(request)` | ✅ Работает | Same routing, forcing `mode: "edit"` |
+| `api.sync.now()` | ✅ Работает | Push/pull с bounded retry/backoff для transient HTTP/network failures |
+| `api.sync.status()` | ✅ Работает | Возвращает configured/connected/error/revoked state, lastError, unpushed count |
+| `api.dispose()` | ✅ Работает | Очищает command handlers и event subscriptions текущего API instance |
+
+Ограничения:
+
+- permissions/capabilities checks являются contract/policy checks;
+- bundled frontend plugins исполняются в общем JS-контексте;
+- malicious JS не изолирован;
+- sidecar process lifecycle, RPC transport и sandbox enforcement ещё не
+  реализованы.
+- Files paths are slash-only vault-relative contract paths; backslashes,
+  Windows absolute paths, UNC paths, `.verstak` variants, traversal and symlink
+  operations are rejected by backend policy checks.
+
+### Загрузка бандла
+
+1. `PluginBundleHost` получает pluginId и componentId
+2. Вызывает `App.GetPluginFrontendInfo(pluginId)` — получает entry/style/rootPath
+3. Вызывает `App.GetPluginAssetContent(pluginId, entry)` — получает JS контент
+4. Выполняет контент через `new Function(content)` — bundle вызывает `VerstakPluginRegister`
+5. Находит компонент по componentId и вызывает `mount(container, props, api)`
+6. При смене view — вызывает `unmount(container)` для старого компонента
+
+### Безопасность asset path
+
+| Правило | Проверка |
+|---|---|
+| Нет абсолютных путей | Пути, начинающиеся с `/` или `\`, отклоняются |
+| Нет path traversal | Пути, содержащие `..`, отклоняются |
+| Нет выхода за root | После `filepath.Join` проверяется, что путь внутри plugin root |
+| Только существующие файлы | `os.ReadFile` возвращает ошибку если файл не существует |
+
+### manifest frontend config
+
+```json
+{
+  "frontend": {
+    "entry": "frontend/dist/index.js",
+    "style": "frontend/style.css"
+  }
+}
+```
 
 ## Reload
 
 `ReloadPlugins()` в `internal/api/app.go` позволяет перезагрузить plugins без перезапуска приложения:
 
-1. Unregister all capabilities (кроме core).
-2. Re-register core capabilities.
-3. Re-scan discovery directories.
-4. Re-run capability resolution.
-5. Re-register contributions.
+1. Unregister contributions всех plugins предыдущего discovery.
+2. Unregister all non-core capabilities.
+3. Re-register core capabilities + vault + workspace (если открыт).
+4. Re-scan discovery directories и повторить capability resolution.
+5. Register contributions для loaded/degraded plugins (disabled/failed — не регистрируются).
+6. Update plugins list.
 
 Frontend вызывает это при нажатии "Reload" в Plugin Manager.
 
@@ -341,3 +795,227 @@ Vault plugin state хранится **внутри vault** в `.verstak/plugins.
 - Plugin Manager показывает "Missing installed plugin"
 - Auto-install пока НЕ делается
 - Показывается подсказка: "Install official plugin package"
+
+
+## UI Layout
+
+```
+┌─────────────────────────────────────────────────────┐
+│ App.svelte                                          │
+│ ┌──────────┬──────────────────────────────────────┐ │
+│ │ Sidebar  │ Content area                         │ │
+│ │          │                                       │ │
+│ │ Verstak  │ PluginManager | ViewContainer         │ │
+│ │          │                                       │ │
+│ │ [icon]   │ (padding: 1.5rem)                    │ │
+│ │ Plugin   │                                      │ │
+│ │   Manager│                                       │ │
+│ │          │                                       │ │
+│ │ Plugins  │                                       │ │
+│ │ [icon] item1                                    │ │
+│ │ [icon] item2                                    │ │
+│ │          │                                       │ │
+│ │ ● Vault  │                                       │ │
+│ └──────────┴──────────────────────────────────────┘ │
+└─────────────────────────────────────────────────────┘
+```
+
+- **Sidebar** (220px): навигация (Plugin Manager), plugin sidebar items, vault status
+- **Content**: Plugin Manager или ViewContainer в зависимости от выбранного view
+- **Vault Selection**: полноэкранный экран, показывается когда vault не открыт
+
+## Milestone 4b — UI Completion (2026-06-17)
+
+Сделано:
+- VaultSelection.svelte: исправлен flow (CreateVault → OpenVault → SetCurrentVault)
+- Sidebar.svelte: полная навигация с отступами, plugin sidebar items, vault status
+- App.svelte: обработка `verstak:nav` событий, global reset стилей
+- PluginManager.svelte: исправлены отступы header
+
+Проверки:
+- `go test ./...` — 52 PASS
+- `./scripts/check.sh` — ✅
+- `./scripts/smoke-platform.sh` — ✅ (enable/disable/plugins.json)
+- `./scripts/build.sh` — ✅
+
+## Workspace Core Capability
+
+Workspace — это физическая папка верхнего уровня внутри vault root. Filesystem
+является source of truth для списка workspaces.
+
+Пример:
+
+```
+<vault>/
+  Workspace/
+    Notes/
+  Project/
+  ClientA/
+  .verstak/
+```
+
+Нет единого `<vault>/Workspace/` контейнера для всех workspaces. Папка
+`Workspace/` может быть обычным workspace, но `Project/` и `ClientA/` являются
+такими же workspace на том же уровне.
+
+### Хранение
+
+Workspace existence/list хранится только в filesystem:
+
+- `ListWorkspaces()` читает top-level directories из vault root.
+- `.verstak`, reserved/internal directories, top-level files и symlinks не
+  считаются workspaces.
+- `.verstak/workspace*.json` не является source of truth для списка workspaces.
+- Нет persisted workspace path mapping и нет virtual workspace tree, которое
+  мапится на произвольные папки.
+
+`.verstak` может хранить только metadata, которая не заменяет filesystem:
+
+- UI state: selected workspace, expanded folders, sort/pin state, preferences.
+- Semantic snapshot: applied template snapshot, enabled feature areas, exact
+  `workspaceTools`, and folder conventions.
+
+Template snapshot копируется в metadata при создании workspace. Workspace
+identity при этом остаётся именем top-level folder; `metadata.workspaceName`
+является presentation/snapshot field, not canonical identity. Если сохранённое
+значение расходится с именем папки, runtime возвращает canonical `workspaceName`
+равным имени папки без filesystem side effects.
+
+```json
+{
+  "workspaceName": "Project",
+  "createdFromTemplate": {
+    "templateId": "project",
+    "templateName": "Project",
+    "templateVersion": 1,
+    "appliedAt": "2026-06-19T12:00:00Z",
+    "workspaceTools": [
+      "verstak.notes",
+      "verstak.files",
+      "verstak.todo",
+      "verstak.journal",
+      "verstak.activity",
+      "verstak.browser-inbox"
+    ]
+  },
+  "features": {
+    "notes": true,
+    "files": true,
+    "todo": true,
+    "journal": true,
+    "activity": true,
+    "browser-inbox": true
+  },
+  "folders": {
+    "notes": "Notes",
+    "files": "Files"
+  },
+  "workspaceTools": [
+    "verstak.notes",
+    "verstak.files",
+    "verstak.todo",
+    "verstak.journal",
+    "verstak.activity",
+    "verstak.browser-inbox"
+  ]
+}
+```
+
+Если original template удалён или изменён позже, существующий workspace
+открывается по сохранённому snapshot и не мутирует автоматически. Template
+update/migration может быть только явной future feature. Если metadata
+отсутствует, workspace открывается как generic workspace минимум с `files: true`.
+
+### API
+
+- `ListWorkspaces()` — список top-level physical folders.
+- `ListWorkspaceTemplates()` — selectable built-in templates с presentation
+  metadata и `workspaceTools`.
+- `CreateWorkspace(name, templateId?)` — создать `<vault>/<name>/`, применить
+  template один раз, сохранить snapshot metadata.
+- `RenameWorkspace(oldName, newName)` — физически переименовать top-level folder
+  и обновить metadata key/name.
+- `TrashWorkspace(name)` — перенести весь top-level workspace folder в internal
+  trash policy.
+- `GetWorkspaceMetadata(name)` — прочитать metadata или вернуть generic fallback.
+- `UpdateWorkspaceMetadata(name, patch)` — обновить metadata без влияния на
+  существование workspace.
+
+Deprecated compatibility APIs:
+
+- `GetWorkspaceTree()` — flat view, derived from top-level folders. Не дерево.
+- `CreateWorkspaceNode(...)` — wrapper over `CreateWorkspace`.
+- `RenameWorkspaceNode(...)` — wrapper over `RenameWorkspace`.
+- `ArchiveWorkspaceNode(...)` — wrapper over `TrashWorkspace`.
+- `MoveWorkspaceNode(...)` — unsupported; old nested/mapped moves are rejected.
+- `GetCurrentWorkspaceNode()` / `SetCurrentWorkspaceNode(...)` — wrappers over
+  selected top-level workspace UI state.
+
+Эти методы существуют только для постепенного frontend/Wails cleanup. Они не
+должны создавать или сохранять nested workspace tree и не должны восстанавливать
+`WorkspaceNode.path` mapping.
+
+### Capability
+
+`verstak/core/workspace/v1` — регистрируется только когда vault открыт и workspace инициализирован.
+
+### Правила
+
+- Workspace name — один safe folder name, не path.
+- Reject: empty, slash, backslash, absolute-looking paths, `..`, null byte,
+  `.verstak`, reserved/internal names, symlink workspaces, conflicts.
+- WorkspaceItems получают `workspaceRootPath`, равный имени top-level папки
+  (`Project`, `ClientA`, etc). Files plugin показывает именно эту папку.
+- Files API остаётся raw vault-relative API: `Project/Notes/example.md`,
+  `Project/docs/file.md`, `Test/readme.md`.
+- Notes are ordinary Markdown files under `<workspace>/Notes/`; нет
+  `.verstak/notes`, UUID note storage или второго source of truth для note
+  content.
+
+### Lifecycle Events
+
+Runtime publishes workspace lifecycle events after successful operations:
+
+- `workspace.created` — payload includes `operation: "create"`,
+  `workspaceRootPath`, `workspaceName`, and optional `templateId`.
+- `workspace.renamed` — payload includes `operation: "rename"`, new
+  `workspaceRootPath` / `workspaceName`, and previous workspace fields.
+- `workspace.trashed` — payload includes `operation: "trash"`,
+  `workspaceRootPath`, `workspaceName`, `trashId`, `trashPath`, and `deletedAt`.
+- `workspace.selected` — payload includes `operation: "select"`,
+  `workspaceRootPath`, and `workspaceName`.
+
+Official Activity subscribes to these events and stores them through the normal
+activity provider path.
+
+### UI
+
+Workspace list в sidebar:
+- Flat list of top-level workspace folders.
+- Create workspace, rename workspace, trash workspace.
+- Selection is stored as selected workspace name.
+- No expand/collapse workspace tree and no case/folder node creation in core.
+
+---
+
+## Build Scripts
+
+В `verstak-desktop/scripts/` есть два скрипта:
+
+### `build.sh` — локальная детерминированная сборка
+
+- Собирает **только** `verstak-desktop` (core platform).
+- Не трогает другие репозитории.
+- **Fail-fast**: любая ошибка (go vet, go test, frontend build, wails build) прерывает сборку.
+- Проверяет: deps → frontend build → go mod download → go vet → go build → go test → wails build + plugin copy.
+- Используется в CI и для повседневной работы над core.
+
+### `update-and-build-all.sh` — dev helper для полной пересборки связки
+
+- **Не для CI.** Только для разработки, когда нужно быстро собрать всё вместе.
+- Шаги:
+  1. `git pull --ff-only` во всех 6 репозиториях
+  2. Сборка official plugins (frontend npm build + backend go build для каждого плагина)
+  3. Копирование собранных плагинов в `verstak-desktop/plugins/`
+  4. Запуск `build.sh` для сборки desktop
+- Ошибки pull и сборки плагинов не прерывают скрипт (best-effort), но ошибка build.sh прерывает (fail-fast).

docs/UX_UI_REFACTOR_PLAN.md

@@ -0,0 +1,87 @@
+# UX/UI Refactor Plan
+
+## Assumptions
+
+- `verstak-desktop` is the core platform and UI shell. Notes, files, editor, activity, journal, browser inbox, and search behavior stay plugin-owned.
+- The old `~/git/verstak` UI is a visual and interaction reference, not an architecture source.
+- The v2 shell should improve orientation, density, keyboard/mouse ergonomics, and responsive behavior without reintroducing the v1 monolith.
+
+## Reference Rules
+
+Keep from v1:
+
+- compact dark workbench rhythm;
+- clear title/header zones;
+- dense rows and tabs for repeated work;
+- action controls that appear where the user is working;
+- custom, in-app interaction surfaces instead of browser-default dialogs where the flow is important.
+
+Avoid from v1:
+
+- putting user business workflows into `App.svelte`;
+- direct coupling between shell and notes/files/editor internals;
+- global mutable UI state that plugins must know about;
+- moving plugin behavior into core for visual convenience.
+
+## Mimo Delegation Model
+
+Use `~/bin/mimo.sh run --dir <repo> "<task>"` only for bounded junior tasks.
+
+Good tasks:
+
+- compare two small components and write a short report to `/tmp`;
+- draft CSS for a named component within existing tokens;
+- inspect one test file and suggest missing assertions;
+- make a one-component mechanical change after the target behavior is already specified.
+
+Do not delegate:
+
+- architecture decisions;
+- plugin/core boundary decisions;
+- final diff review;
+- verification claims;
+- commits or pushes.
+
+Every mimo result must be reviewed with `git diff` and verified independently.
+
+## Work Plan
+
+1. Shell orientation
+   - Move persistent search and workspace context into the workspace header.
+   - Keep exactly one global search entry visible at a time.
+   - Preserve search availability in global plugin views.
+
+2. Responsive shell
+   - Make narrow viewports usable by stacking sidebar above workspace content.
+   - Ensure tabs and workspace cards do not force horizontal page overflow.
+   - Add Playwright coverage for mobile geometry.
+
+3. Today surface
+   - Make Today feel like a work-resume surface, not a static card grid.
+   - Keep data loading from plugin settings/contributions; do not add business logic to core.
+   - Improve empty states and quick actions based on available workspace tools.
+
+4. Plugin manager polish
+   - Improve scanning, status density, and permission readability.
+   - Keep enable/disable/status behavior unchanged.
+   - Verify degraded/failed/disabled plugin paths.
+
+5. Files/workbench ergonomics
+   - Use the existing files plugin comparison report as input.
+   - Prefer plugin-local improvements: context menu, keyboard navigation, selection, and custom confirmation.
+   - Do not add file-manager logic to the shell.
+
+## Verification Gates
+
+Before commit:
+
+- `npm run build`
+- focused Playwright suite for the touched flow
+- full `npm run test:e2e` when App, Sidebar, WorkspaceHost, PluginManager, or shared shell layout changes
+- desktop and mobile screenshots inspected manually
+
+Before push:
+
+- re-run the relevant verification from a clean current worktree state;
+- inspect `git status` and `git diff --stat`;
+- push only after tests and visual smoke have current evidence.

docs/WORKSPACE_TEMPLATES.md

@@ -0,0 +1,40 @@
+# Workspace Templates
+
+Workspace templates choose which dynamic plugin workspace tabs are visible when a
+new top-level workspace is created. They do not enable or disable plugins for the
+whole vault and do not affect global sidebar tools.
+
+## Built-in templates
+
+| Template | Workspace tabs |
+| --- | --- |
+| General | Notes, Files, Journal, Activity, Browser Inbox |
+| Project | Notes, Files, Todos, Journal, Activity, Browser Inbox |
+| Writing | Notes, Files, Journal |
+| Admin | Notes, Files, Secrets, Todos, Journal |
+| Minimal | Notes, Files |
+
+The create-workspace modal displays the selected template description and its
+included plugin tabs before the folder is created.
+
+## Metadata and compatibility
+
+Creation stores a template snapshot in `.verstak/workspaces/` metadata. The
+snapshot contains the template id, name, version, applied time, and an ordered
+`workspaceTools` list of plugin IDs. Existing workspace metadata without
+`workspaceTools` remains compatible: its workspace continues to show all globally
+enabled workspace plugins rather than unexpectedly hiding tabs.
+
+Templates are applied once. Editing the built-in catalog or creating another
+workspace with a different template never changes an existing workspace snapshot.
+There is no template editor or post-creation template switcher yet.
+
+## Global tools and unavailable plugins
+
+Template visibility applies only to `workspaceItems` in the selected workspace.
+Global views and sidebar items, such as global Todos, Browser Inbox, and Trash,
+remain available according to the normal plugin enablement state.
+
+The workspace host intersects the snapshot with dynamically discovered, globally
+enabled plugin contributions. If a template references a plugin that is missing or
+disabled, that tab is simply absent; the other template tabs remain usable.

docs/ui-polish-milestone.md

@@ -0,0 +1,96 @@
+# UI Polish Milestone
+
+## Assumptions
+
+- This milestone is visual polish only: no backend API changes, no plugin contract changes, and no feature removal.
+- English remains the baseline UI language for this pass. Hardcoded Russian strings that are visible in core UI should be converted to English where touched.
+- Official plugins are plain JS bundles with injected CSS. Introducing a new shared UI package would be larger than this milestone, so shared primitives will be expressed as global design tokens/classes plus consistent local CSS in each bundle.
+- Desktop workbench density should stay compact. The goal is consistency, not a marketing-style redesign.
+
+## Audit Findings
+
+### Existing Tokens
+
+- `frontend/src/App.svelte` already defines partial global button classes: `btn-primary`, `btn-secondary`, `btn-danger`, `btn-ghost`, `btn-icon`, plus global button focus/disabled behavior.
+- Most shell and plugin surfaces hardcode the same dark palette directly: `#1a1a2e`, `#16213e`, `#0f3460`, `#4ecca3`, `#e94560`, `#8b8ba8`.
+- There are no named CSS variables for semantic surface, selected row, border, muted text, warning, or focus ring.
+- Plugin bundles repeat their own toolbar/button/list/empty/error styles instead of reusing shell-level primitives.
+
+### Repeated Patterns
+
+- Page/workspace headers: `WorkspaceHost.svelte`, `WorkbenchHost.svelte`, `ViewContainer.svelte`, plugin toolbars.
+- Tab bars: workspace tabs use a custom active style separate from selected rows and sidebar active states.
+- Toolbars: Files, Notes, Search, Activity, Journal, Browser Inbox, and default editor use similar but inconsistent dark toolbar rules.
+- List rows: Files rows, Notes rows, Activity rows, Journal rows, Secrets list items, Browser Inbox rows, Global Search results, WorkspaceTree rows.
+- Cards/panels: Today panels, worklog suggestions, Secrets detail/form, Browser Inbox detail text, plugin manager cards.
+- Empty/error states: many are plain centered text or show technical details as primary text.
+
+### Candidate Primitives
+
+Implement as global classes/tokens first, then apply locally:
+
+- PageHeader / WorkspaceHeader: compact title, metadata, right actions/search.
+- TabBar / TabButton: consistent active tab, hover, focus.
+- Toolbar / ToolbarGroup: grouped controls with separators and predictable height.
+- Button variants: primary, secondary, ghost, danger, icon.
+- ListRow: hover, selected, disabled, metadata line, actions zone.
+- Card: flat desktop panel with 6px radius and subtle border.
+- SplitPane: list/detail grid with shared border and selected item states.
+- EmptyState: centered title, hint, optional action.
+- InlineAlert: readable message plus optional details/debug text.
+- StatusBadge: compact semantic label for type, status, warning/error.
+- Menu: context menu with same surface, hover, danger item, separator.
+
+## Implementation Plan
+
+1. Add semantic CSS variables and global primitive classes in `frontend/src/App.svelte`.
+   - Colors: background, surface, surface-muted, surface-hover, surface-selected, border, border-strong, text-primary, text-secondary, text-muted, accent, accent-muted, danger, warning, success.
+   - Spacing: 4/8/12/16/24/32 via variables.
+   - Radius, font sizes, focus ring, and modest elevation tokens.
+
+2. Normalize shell surfaces.
+   - Update `WorkspaceHost.svelte`, `WorkbenchHost.svelte`, `ViewContainer.svelte`, `Sidebar.svelte`, `WorkspaceTree.svelte`, `GlobalSearch.svelte`, and `TodaySurface.svelte` to use tokens and shared state rules.
+   - Convert visible Russian shell search/empty strings to English.
+   - Keep plugin manager architecture untouched; only global tokens should make it less visually divergent.
+
+3. Normalize Files.
+   - Group toolbar into Navigation, Create, Selection, Clipboard/More, and filter/sort areas.
+   - Keep existing context menu and operations, restyle menu with shared surface/hover/danger states.
+   - Make single row click open when no modifier is used; keep ctrl/meta/shift selection behavior and keyboard selection.
+   - Reduce actions column visual noise by showing secondary row actions on hover/selection and using a compact More/action group.
+
+4. Normalize Notes.
+   - Make New Note the primary page action.
+   - Keep filter/sort inside the toolbar group.
+   - Make entire note row readable and clickable; row actions remain visible enough and use icon-button states.
+   - Use shared empty/status/error styling.
+
+5. Normalize Search.
+   - Render results as compact rows/cards with type badge/icon, title/path, secondary match reason, and compact Open button.
+   - Show provider errors as inline alert-style secondary information, not as raw main status text.
+
+6. Normalize Activity and Journal.
+   - Add human-readable event labels such as "Workspace selected", "File opened", "Note edited", and "Work session detected".
+   - Move raw event names/source IDs into a details block or secondary metadata.
+   - Style plugin errors through inline alert patterns.
+   - Present worklog suggestions as cards with consistent title/summary/minutes actions.
+
+7. Normalize Secrets and Browser Inbox.
+   - Keep split-pane list/detail layout.
+   - Use shared list rows, detail card/form surfaces, and empty states.
+   - Render "Value hidden" as password-like hidden field state.
+   - Use button variants: primary for save/create, secondary for copy/edit/remove where appropriate, danger for delete/clear/remove destructive actions.
+
+8. Verify.
+   - Run desktop frontend build and relevant Playwright checks if available.
+   - Run official plugin smoke/check script.
+   - Capture before/after screenshots or save available after screenshots under `docs/ui-polish-assets/`.
+
+## Out of Scope
+
+- Backend API or Wails method changes.
+- Plugin manifest/contribution contract changes.
+- New heavy UI dependencies.
+- Full i18n extraction.
+- Redesigning the product information architecture.
+- Rebuilding official plugins into Svelte packages.

frontend/e2e/activity.spec.js

@@ -0,0 +1,141 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('Activity workflow', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('workspace activity explains empty event flow', async ({ page }) => {
+    await page.getByRole('tab', { name: 'Activity' }).click();
+
+    const activity = page.locator('.activity-root');
+    await expect(activity).toBeVisible({ timeout: 10000 });
+    await expect(activity.locator('.activity-title')).toContainText('Activity');
+    await expect(activity.locator('.activity-count')).toHaveText('0 events');
+    await expect(activity.locator('.activity-empty')).toContainText('No activity events yet');
+    await expect(activity.locator('.activity-empty')).toContainText('File changes, browser captures, and conversions will appear here');
+    await expect(activity.locator('[data-activity-action="clear"]')).toBeDisabled();
+  });
+
+  test('workspace activity keeps raw events and renders factual work session candidates', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.activity', {
+        'events:workspace:Project': [
+          {
+            activityId: 'activity-e2e-capture',
+            occurredAt: '2026-06-30T08:00:00.000Z',
+            type: 'browser.capture.selection',
+            title: 'Research Capture',
+            summary: 'Selected text from the article',
+            sourcePluginId: 'verstak.browser-inbox',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'activity-e2e-note',
+            occurredAt: '2026-06-30T08:20:00.000Z',
+            type: 'note.saved',
+            title: 'Saved note',
+            summary: 'Project/Notes/Research Capture.md',
+            sourcePluginId: 'verstak.files',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'activity-e2e-open',
+            occurredAt: '2026-06-30T08:30:00.000Z',
+            type: 'file.opened',
+            title: 'Selected file',
+            summary: 'Project/Notes/Research Capture.md',
+            sourcePluginId: 'verstak.files',
+            workspaceRootPath: 'Project',
+          },
+        ],
+      });
+    });
+
+    await page.getByRole('tab', { name: 'Activity' }).click();
+
+    const activity = page.locator('.activity-root');
+    await expect(activity.locator('.activity-count')).toHaveText('3 events');
+    await expect(activity.locator('[data-activity-id="activity-e2e-capture"]')).toContainText('Research Capture');
+    await expect(activity.locator('[data-activity-id="activity-e2e-note"]')).toContainText('Saved note');
+    await expect(activity.locator('[data-activity-id="activity-e2e-open"]')).toContainText('Selected file');
+
+    const candidateSection = activity.locator('[data-activity-section="work-session-candidates"]');
+    await expect(candidateSection).toContainText('Possible journal entries');
+    const candidate = candidateSection.locator('[data-work-session-candidate]');
+    await expect(candidate).toHaveCount(1);
+    await expect(candidate).toContainText('Workspace: Project');
+    await expect(candidate).toContainText('Estimated duration: 20 min');
+    await expect(candidate).toContainText('Activities: 2');
+    await expect(candidate).not.toContainText('Project work on');
+    await expect(candidate.locator('[data-work-session-action="review"]')).toBeVisible();
+    await expect(candidate.locator('[data-work-session-action="dismiss"]')).toBeVisible();
+  });
+
+  test('Review opens an empty Journal form with selectable candidate activities', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.activity', {
+        'events:workspace:Project': [
+          {
+            activityId: 'review-capture',
+            occurredAt: '2026-06-30T08:00:00.000Z',
+            type: 'browser.capture.selection',
+            title: 'Research Capture',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'review-note',
+            occurredAt: '2026-06-30T08:20:00.000Z',
+            type: 'note.saved',
+            title: 'Saved note',
+            workspaceRootPath: 'Project',
+          },
+        ],
+      });
+    });
+
+    await page.getByRole('tab', { name: 'Activity' }).click();
+    await page.locator('[data-work-session-candidate] [data-work-session-action="review"]').click();
+
+    await expect(page.getByRole('tab', { name: 'Journal' })).toHaveAttribute('aria-selected', 'true');
+    const journal = page.locator('.journal-root');
+    await expect(journal).toBeVisible({ timeout: 10000 });
+    await expect(journal.locator('[data-journal-candidate]')).toContainText('Workspace: Project');
+    await expect(journal.locator('[data-journal-candidate]')).toContainText('Estimated duration: 20 min');
+    await expect(journal.locator('[data-journal-input="title"]')).toHaveValue('');
+    await expect(journal.locator('[data-journal-input="summary"]')).toHaveValue('');
+    await expect(journal.locator('[data-journal-input="minutes"]')).toHaveValue('20');
+
+    const activityInputs = journal.locator('[data-journal-candidate-activity]');
+    await expect(activityInputs).toHaveCount(2);
+    await expect(activityInputs.nth(0)).toBeChecked();
+    await expect(activityInputs.nth(1)).toBeChecked();
+    await journal.locator('[data-journal-input="title"]').fill('Review research capture');
+    await journal.locator('[data-journal-input="summary"]').fill('Read the capture and updated the project note.');
+    await activityInputs.nth(1).uncheck();
+    await journal.locator('[data-journal-action="save-entry"]').click();
+
+    await expect(journal).toContainText('Review research capture');
+    await expect(journal).toContainText('20 min');
+    const stored = await page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.journal');
+      return Array.isArray(result) ? result[0]['worklog:workspace:Project'] : result['worklog:workspace:Project'];
+    });
+    await expect(stored).toEqual([expect.objectContaining({
+      title: 'Review research capture',
+      summary: 'Read the capture and updated the project note.',
+      sourceCandidateId: expect.any(String),
+      activityIds: ['review-capture'],
+    })]);
+  });
+});

frontend/e2e/browser-inbox.spec.js

@@ -0,0 +1,157 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('Browser Inbox workflow', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('global inbox explains empty capture flow and exposes assignment filters', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Browser Inbox' }).click();
+
+    const inbox = page.locator('.browser-inbox-root');
+    await expect(inbox).toBeVisible({ timeout: 10000 });
+    await expect(inbox.locator('.browser-inbox-title')).toContainText('Browser Inbox');
+    await expect(inbox.locator('.browser-inbox-count')).toHaveText('0 items');
+    await expect(inbox.locator('.browser-inbox-empty')).toContainText('No browser captures yet');
+    await expect(inbox.locator('.browser-inbox-empty')).toContainText('send a page, selection, link, or file from the browser extension');
+    await expect(inbox.locator('[data-browser-inbox-filter="status"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-inbox-filter="workspace"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-inbox-action="clear"]')).toBeDisabled();
+  });
+
+  test('workspace inbox renders stored captures with conversion actions', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.browser-inbox', {
+        'captures:global': [{
+          captureId: 'capture-e2e-1',
+          capturedAt: '2026-06-30T08:00:00.000Z',
+          kind: 'file',
+          url: 'https://example.com/report',
+          title: 'Research Report',
+          domain: 'example.com',
+          text: 'Selected page text',
+          fileName: 'report.txt',
+          fileText: 'Report file contents',
+          workspaceRootPath: 'Project',
+          browserName: 'Firefox',
+        }],
+      });
+    });
+    await page.getByRole('tab', { name: 'Browser Inbox' }).click();
+
+    const inbox = page.locator('.browser-inbox-root');
+    await expect(inbox.locator('.browser-inbox-count')).toHaveText('1 item');
+    await expect(inbox.locator('[data-browser-capture-id="capture-e2e-1"]')).toContainText('Research Report');
+    await expect(inbox.locator('.browser-inbox-detail-title')).toHaveText('Research Report');
+    await expect(inbox.locator('.browser-inbox-meta')).toContainText('example.com');
+    await expect(inbox.locator('.browser-inbox-text').first()).toContainText('Selected page text');
+    await expect(inbox.locator('[data-browser-inbox-action="create-note"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-inbox-action="create-link"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-inbox-action="create-file"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-inbox-action="remove"]')).toBeVisible();
+  });
+
+  test('global inbox assigns, reassigns, filters, marks, and deletes captures', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.browser-inbox', {
+        'captures:global': [
+          {
+            captureId: 'inbox-unassigned',
+            capturedAt: '2026-06-30T08:20:00.000Z',
+            kind: 'page',
+            url: 'https://example.com/unassigned',
+            title: 'Unassigned research',
+            domain: 'example.com',
+          },
+          {
+            captureId: 'inbox-client-processed',
+            capturedAt: '2026-06-30T08:10:00.000Z',
+            kind: 'link',
+            url: 'https://client.example.com/processed',
+            title: 'Processed client link',
+            domain: 'client.example.com',
+            workspaceRootPath: 'ClientA',
+            processed: true,
+          },
+          {
+            captureId: 'inbox-project-open',
+            capturedAt: '2026-06-30T08:00:00.000Z',
+            kind: 'selection',
+            title: 'Project quote',
+            text: 'A project quote',
+            workspaceRootPath: 'Project',
+          },
+        ],
+      });
+    });
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Browser Inbox' }).click();
+
+    const inbox = page.locator('.browser-inbox-root');
+    await expect(inbox.locator('.browser-inbox-count')).toHaveText('3 items');
+    const statusFilter = inbox.locator('[data-browser-inbox-filter="status"]');
+    const workspaceFilter = inbox.locator('[data-browser-inbox-filter="workspace"]');
+
+    await statusFilter.selectOption('unassigned');
+    await expect(inbox.locator('[data-browser-capture-id="inbox-unassigned"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-capture-id="inbox-client-processed"]')).toHaveCount(0);
+
+    await statusFilter.selectOption('all');
+    await workspaceFilter.selectOption('ClientA');
+    await expect(inbox.locator('[data-browser-capture-id="inbox-client-processed"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-capture-id="inbox-project-open"]')).toHaveCount(0);
+
+    await workspaceFilter.selectOption('');
+    await statusFilter.selectOption('unprocessed');
+    await expect(inbox.locator('[data-browser-capture-id="inbox-unassigned"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-capture-id="inbox-project-open"]')).toBeVisible();
+    await expect(inbox.locator('[data-browser-capture-id="inbox-client-processed"]')).toHaveCount(0);
+
+    await statusFilter.selectOption('all');
+    const assignment = inbox.locator('[data-browser-inbox-assignment="inbox-unassigned"]');
+    await assignment.selectOption('ClientA');
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.browser-inbox');
+      const settings = Array.isArray(result) ? result[0] : result;
+      return settings['captures:global'].find((capture) => capture.captureId === 'inbox-unassigned').workspaceRootPath;
+    })).toBe('ClientA');
+
+    await inbox.locator('[data-browser-inbox-assignment="inbox-unassigned"]').selectOption('Project');
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.browser-inbox');
+      const settings = Array.isArray(result) ? result[0] : result;
+      return settings['captures:global'].find((capture) => capture.captureId === 'inbox-unassigned').workspaceRootPath;
+    })).toBe('Project');
+
+    await inbox.locator('[data-browser-inbox-action="clear-assignment"]').click();
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.browser-inbox');
+      const settings = Array.isArray(result) ? result[0] : result;
+      return settings['captures:global'].find((capture) => capture.captureId === 'inbox-unassigned').workspaceRootPath || '';
+    })).toBe('');
+
+    await inbox.locator('[data-browser-inbox-action="toggle-processed"]').click();
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.browser-inbox');
+      const settings = Array.isArray(result) ? result[0] : result;
+      return settings['captures:global'].find((capture) => capture.captureId === 'inbox-unassigned').processed;
+    })).toBe(true);
+
+    await inbox.locator('[data-browser-inbox-action="toggle-processed"]').click();
+    await inbox.locator('[data-browser-inbox-action="remove"]').click();
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.browser-inbox');
+      const settings = Array.isArray(result) ? result[0] : result;
+      return settings['captures:global'].some((capture) => capture.captureId === 'inbox-unassigned');
+    })).toBe(false);
+  });
+});

frontend/e2e/command-palette.spec.js

@@ -0,0 +1,127 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('Command Palette', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('opens with keyboard, filters commands, and executes registered frontend handler', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+    await expect(page.locator('.pt-root')).toBeVisible({ timeout: 10000 });
+
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+
+    const palette = page.locator('.command-palette');
+    await expect(palette).toBeVisible();
+    await expect(palette.locator('[data-command-id="verstak.platform-test.show-version"]')).toBeVisible();
+
+    await palette.locator('[data-command-palette-input]').fill('version');
+    await expect(palette.locator('[data-command-id="verstak.platform-test.show-version"]')).toBeVisible();
+    await expect(palette.locator('[data-command-id="verstak.platform-test.run-tests"]')).not.toBeVisible();
+
+    await page.keyboard.press('Enter');
+
+    await expect(palette).not.toBeVisible();
+    await expect(page.locator('[data-command-palette-status="success"]')).toContainText('Show Version Info');
+    await expect(page.locator('[data-command-palette-status="success"]')).toContainText('handled');
+  });
+
+  test('Escape closes the palette without changing current view', async ({ page }) => {
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+    await expect(page.locator('.command-palette')).toBeVisible();
+
+    await page.keyboard.press('Escape');
+
+    await expect(page.locator('.command-palette')).not.toBeVisible();
+    await expect(page.locator('.workspace-host')).toBeVisible();
+  });
+
+  test('shows user workflow commands before diagnostics and opens workspace tools', async ({ page }) => {
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+
+    const palette = page.locator('.command-palette');
+    await expect(palette).toBeVisible();
+    const items = palette.locator('.command-palette-item');
+    await expect(items.nth(0)).toHaveAttribute('data-command-id', 'verstak.shell.open-overview');
+    await expect(items.nth(1)).toHaveAttribute('data-command-id', 'verstak.shell.open-files');
+    await expect(items.nth(2)).toHaveAttribute('data-command-id', 'verstak.shell.open-activity');
+    await expect(items.nth(3)).toHaveAttribute('data-command-id', 'verstak.shell.open-browser-inbox');
+
+    await palette.locator('[data-command-palette-input]').fill('activity');
+    await expect(palette.locator('[data-command-id="verstak.shell.open-activity"]')).toBeVisible();
+    await expect(palette.locator('[data-command-id="verstak.platform-test.run-tests"]')).not.toBeVisible();
+
+    await page.keyboard.press('Enter');
+
+    await expect(palette).not.toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Activity' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.activity-root')).toBeVisible({ timeout: 10000 });
+  });
+
+  test('starts file creation workflows from user commands', async ({ page }) => {
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+
+    let palette = page.locator('.command-palette');
+    await palette.locator('[data-command-palette-input]').fill('markdown');
+    await expect(palette.locator('[data-command-id="verstak.shell.create-markdown"]')).toBeVisible();
+    await page.keyboard.press('Enter');
+
+    await expect(palette).not.toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Files' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.files-root')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('[data-files-create-input]')).toBeVisible();
+
+    await page.locator('[data-files-create-input]').fill('Palette Note.md');
+    await page.locator('[data-files-create-confirm]').click();
+    await expect(page.locator('[data-file-name="Palette Note.md"]')).toBeVisible();
+
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+    palette = page.locator('.command-palette');
+    await palette.locator('[data-command-palette-input]').fill('text file');
+    await expect(palette.locator('[data-command-id="verstak.shell.create-text"]')).toBeVisible();
+    await page.keyboard.press('Enter');
+
+    await expect(page.locator('[data-files-create-input]')).toBeVisible();
+    await page.locator('[data-files-create-input]').fill('Palette Text.txt');
+    await page.locator('[data-files-create-confirm]').click();
+    await expect(page.locator('[data-file-name="Palette Text.txt"]')).toBeVisible();
+  });
+
+  test('runs sync workflow commands', async ({ page }) => {
+    await page.evaluate(async () => {
+      const err = await window.go.api.App.PluginSyncConfigure('verstak.sync', 'https://sync.example.test', 'alice', 'secret');
+      if (err) throw new Error(err);
+    });
+
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+
+    let palette = page.locator('.command-palette');
+    await palette.locator('[data-command-palette-input]').fill('sync now');
+    await expect(palette.locator('[data-command-id="verstak.shell.sync-now"]')).toBeVisible();
+    await page.keyboard.press('Enter');
+
+    await expect(palette).not.toBeVisible();
+    await expect(page.locator('[data-command-palette-status="success"]')).toContainText('Sync Now');
+    await expect(page.locator('[data-command-palette-status="success"]')).toContainText('handled');
+
+    await page.keyboard.press(process.platform === 'darwin' ? 'Meta+K' : 'Control+K');
+    palette = page.locator('.command-palette');
+    await palette.locator('[data-command-palette-input]').fill('sync settings');
+    await expect(palette.locator('[data-command-id="verstak.shell.open-sync-settings"]')).toBeVisible();
+    await page.keyboard.press('Enter');
+
+    await expect(page.locator('.plugin-manager')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.modal[aria-label="Plugin Settings"]')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.modal-header h3')).toContainText('Sync');
+  });
+});

frontend/e2e/default-editor.spec.js

@@ -0,0 +1,196 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('F: Default Editor Plugin', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('open .txt file shows plain text editor mode', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Docs/todo.txt',
+        extension: '.txt',
+        context: { sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const editor = page.locator('[data-editor-mode="text"]');
+    await expect(editor).toBeVisible({ timeout: 10000 });
+    await expect(editor).toHaveAttribute('data-resource-path', 'Docs/todo.txt');
+    await expect(editor).toHaveAttribute('data-request-mode', 'view');
+    const textarea = editor.locator('[data-editor-textarea]');
+    await expect(textarea).toBeVisible();
+    await expect(textarea).toHaveValue('Buy groceries\nWrite tests');
+  });
+
+  test('editor supports markdown toolbar split save reopen and revert', async ({ page }) => {
+    await page.evaluate(async () => {
+      const err = await window.go.api.App.WriteVaultTextFile(
+        'verstak.platform-test',
+        'Project/Notes/editing.md',
+        '# Editing\n\nplain text',
+        { createIfMissing: true, overwrite: true }
+      );
+      if (err) throw new Error(err);
+      const [result, openErr] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Project/Notes/editing.md',
+        extension: '.md',
+        context: { sourceView: 'files', isInsideNotesFolder: true, notesMode: true },
+      });
+      if (openErr) throw new Error(openErr);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const editor = page.locator('[data-editor-mode="notes-markdown"]');
+    await expect(editor).toBeVisible({ timeout: 10000 });
+    await expect(editor.locator('[data-notes-badge]')).toBeVisible();
+
+    await editor.locator('[data-editor-mode-button="edit"]').click();
+    const textarea = editor.locator('[data-editor-textarea]');
+    await expect(textarea).toBeVisible();
+    await textarea.fill('plain text');
+    await textarea.selectText();
+    await editor.locator('[data-md-action="bold"]').click();
+    await expect(textarea).toHaveValue('**plain text**');
+
+    await editor.locator('[data-md-action="heading"]').click();
+    await expect(textarea).toHaveValue('# **plain text**');
+    await expect(editor.locator('[data-save-state]')).toContainText('Modified');
+
+    await editor.locator('[data-editor-mode-button="split"]').click();
+    await expect(editor.locator('[data-editor-textarea]')).toBeVisible();
+    await expect(editor.locator('[data-preview]')).toBeVisible();
+    await expect(editor.locator('[data-preview]')).toContainText('plain text');
+
+    await textarea.press(process.platform === 'darwin' ? 'Meta+S' : 'Control+S');
+    await expect(editor.locator('[data-save-state]')).toContainText('Saved');
+
+    await textarea.fill('discard me');
+    page.once('dialog', (dialog) => dialog.accept());
+    await editor.locator('[data-editor-action="reload"]').click();
+    await expect(textarea).toHaveValue('# **plain text**');
+
+    await page.evaluate(async () => {
+      const [result, openErr] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Project/Notes/editing.md',
+        extension: '.md',
+        context: { sourceView: 'files', isInsideNotesFolder: true, notesMode: true },
+      });
+      if (openErr) throw new Error(openErr);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+    await expect(page.locator('[data-editor-mode="notes-markdown"] [data-preview]')).toContainText('plain text', { timeout: 10000 });
+  });
+
+  test('open .md file outside Notes routes to highest-priority provider', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Docs/readme.md',
+        extension: '.md',
+        context: { sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const workbench = page.locator('.workbench-host');
+    await expect(workbench).toBeVisible({ timeout: 10000 });
+    const title = workbench.locator('.workbench-title');
+    await expect(title).toHaveText('Docs/readme.md');
+  });
+
+  test('open .md with notes context routes to highest-priority provider', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Notes/Overview.md',
+        extension: '.md',
+        context: { sourceView: 'notes', isInsideNotesFolder: true, notesMode: true },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const workbench = page.locator('.workbench-host');
+    await expect(workbench).toBeVisible({ timeout: 10000 });
+    const title = workbench.locator('.workbench-title');
+    await expect(title).toHaveText('Notes/Overview.md');
+  });
+
+  test('default-editor plugin is listed as loaded in plugin manager', async ({ page }) => {
+    await openPluginManager(page);
+    const card = page.locator('.plugin-card').filter({ hasText: 'verstak.default-editor' });
+    await expect(card).toBeVisible({ timeout: 10000 });
+    await expect(card.locator('.status-badge')).toHaveText('loaded');
+  });
+
+  test('disable default-editor plugin removes its providers', async ({ page }) => {
+    await openPluginManager(page);
+    const card = page.locator('.plugin-card').filter({ hasText: 'verstak.default-editor' });
+    await card.locator('button.btn-disable').click();
+    await expect(card.locator('button.btn-enable')).toBeVisible({ timeout: 10000 });
+
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Docs/todo.txt',
+        extension: '.txt',
+        context: { sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    await expect(page.locator('[data-workbench-status="no-provider"]')).toBeVisible({ timeout: 10000 });
+  });
+
+  test('default-editor plugin card shows openProviders contribution count', async ({ page }) => {
+    await openPluginManager(page);
+    const card = page.locator('.plugin-card').filter({ hasText: 'verstak.default-editor' });
+    await expect(card).toBeVisible({ timeout: 10000 });
+    await expect(card.locator('.meta-row').filter({ hasText: 'Contributions:' })).toContainText('3 openProviders');
+  });
+
+  test('default-editor does not add sidebar item', async ({ page }) => {
+    const sidebarItems = page.locator('.sidebar .plugin-item');
+    const count = await sidebarItems.count();
+    const hasDefaultEditor = await page.locator('.sidebar .plugin-item').filter({ hasText: /default.editor/i }).count();
+    expect(hasDefaultEditor).toBe(0);
+  });
+
+  test('platform-test workbench buttons open files via default-editor', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+    await expect(page.locator('.pt-command-result')).toContainText('Command: handled', { timeout: 10000 });
+
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Docs/todo.txt',
+        extension: '.txt',
+        context: { sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const editor = page.locator('[data-editor-mode="text"]');
+    await expect(editor).toBeVisible({ timeout: 10000 });
+    await expect(editor).toHaveAttribute('data-resource-path', 'Docs/todo.txt');
+  });
+});

frontend/e2e/files-plugin.spec.js

@@ -0,0 +1,553 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+async function openFilesTool(page) {
+  await page.getByRole('tab', { name: 'Files' }).click();
+  await expect(page.locator('.files-root')).toBeVisible({ timeout: 10000 });
+}
+
+test.describe('G: Files Plugin', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('files plugin appears in Plugin Manager as loaded', async ({ page }) => {
+    await openPluginManager(page);
+    const card = page.locator('.plugin-card').filter({ hasText: 'verstak.files' });
+    await expect(card).toBeVisible({ timeout: 10000 });
+    await expect(card.locator('.status-badge')).toHaveText('loaded');
+  });
+
+  test('files plugin does not add global sidebar item', async ({ page }) => {
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Files' });
+    await expect(sidebarItem).toHaveCount(0);
+  });
+
+  test('workspace Files view is scoped to selected workspace folder', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.files-item-name').filter({ hasText: 'project-only.txt' })).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.files-item-name').filter({ hasText: 'test-only.txt' })).toHaveCount(0);
+
+    await page.locator('.wt-label').filter({ hasText: 'Test' }).click();
+
+    await expect(page.locator('.files-item-name').filter({ hasText: 'test-only.txt' })).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.files-item-name').filter({ hasText: 'project-only.txt' })).toHaveCount(0);
+  });
+
+  test('files explorer supports create navigate rename filter sort open and trash', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('Daily');
+    await page.locator('[data-files-create-confirm]').click();
+    await expect(page.locator('[data-file-name="Daily"]')).toBeVisible();
+
+    await page.locator('[data-file-name="Daily"]').dblclick();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Daily');
+
+    await page.locator('[data-files-action="new-markdown"]').click();
+    await page.locator('[data-files-create-input]').fill('Log.md');
+    await page.locator('[data-files-create-confirm]').click();
+    await expect(page.locator('[data-file-name="Log.md"]')).toBeVisible();
+
+    await page.locator('[data-file-name="Log.md"]').click();
+    await page.locator('[data-files-action="rename"]').click();
+    await page.locator('[data-files-rename-input]').fill('Journal.md');
+    await page.locator('[data-files-rename-confirm]').click();
+    await expect(page.locator('[data-file-name="Journal.md"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="Log.md"]')).toHaveCount(0);
+
+    await page.locator('[data-files-filter]').fill('journ');
+    await expect(page.locator('[data-file-name="Journal.md"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="project-only.txt"]')).toHaveCount(0);
+    await page.locator('[data-files-filter]').fill('');
+
+    await page.locator('[data-files-sort]').selectOption('modified-desc');
+    await expect(page.locator('[data-file-name="Journal.md"]')).toBeVisible();
+
+    await page.locator('[data-file-name="Journal.md"]').dblclick();
+    await expect(page.locator('[data-editor-mode="generic-markdown"]')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('[data-resource-path="Project/Daily/Journal.md"]')).toBeVisible();
+
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Daily', { timeout: 10000 });
+    await expect(page.locator('[data-file-name="Journal.md"]')).toBeVisible({ timeout: 10000 });
+    await page.locator('[data-file-name="Journal.md"]').click();
+    await page.locator('[data-files-action="trash"]').click();
+    await expect(page.locator('.files-modal-overlay')).toBeVisible();
+    await expect(page.locator('.files-modal-title')).toContainText('Journal.md');
+    await page.locator('.files-modal-btn.confirm').click();
+    await expect(page.locator('[data-file-name="Journal.md"]')).toHaveCount(0);
+
+    await page.locator('[data-files-action="up"]').click();
+    await expect(page.locator('.files-breadcrumb')).not.toContainText('Daily');
+  });
+
+  test('files explorer shows inline rename validation errors', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-file-name="project-only.txt"]').click();
+    await page.locator('[data-files-action="rename"]').click();
+    await page.locator('[data-files-rename-input]').fill('bad/name.txt');
+    await page.locator('[data-files-rename-confirm]').click();
+
+    await expect(page.locator('[data-files-rename-error]')).toBeVisible();
+    await expect(page.locator('[data-files-rename-error]')).toContainText('Invalid characters');
+    await expect(page.locator('[data-files-rename-input]')).toBeVisible();
+    await expect(page.locator('[data-file-name="project-only.txt"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="bad"]')).toHaveCount(0);
+  });
+
+  test('files explorer shows inline rename conflict errors', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-file-name="project-only.txt"]').click();
+    await page.locator('[data-files-action="rename"]').click();
+    await page.locator('[data-files-rename-input]').fill('Notes');
+    await page.locator('[data-files-rename-confirm]').click();
+
+    await expect(page.locator('[data-files-rename-error]')).toBeVisible();
+    await expect(page.locator('[data-files-rename-error]')).toContainText('already exists');
+    await expect(page.locator('[data-files-rename-input]')).toBeVisible();
+    await expect(page.locator('[data-files-rename-input]')).toHaveValue('Notes');
+    await expect(page.locator('[data-file-name="project-only.txt"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="Notes"]')).toBeVisible();
+  });
+
+  test('files explorer shows inline create validation errors', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('bad/name');
+    await page.locator('[data-files-create-confirm]').click();
+
+    await expect(page.locator('[data-files-create-error]')).toBeVisible();
+    await expect(page.locator('[data-files-create-error]')).toContainText('Invalid characters');
+    await expect(page.locator('[data-files-create-input]')).toBeVisible();
+    await expect(page.locator('[data-file-name="bad"]')).toHaveCount(0);
+  });
+
+  test('files explorer uses rich file icons by file type', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    async function createFile(action, name) {
+      await page.locator(`[data-files-action="${action}"]`).click();
+      await page.locator('[data-files-create-input]').fill(name);
+      await page.locator('[data-files-create-confirm]').click();
+      await expect(page.locator(`[data-file-name="${name}"]`)).toBeVisible();
+    }
+
+    await createFile('new-markdown', 'IconNote.md');
+    await createFile('new-text', 'Photo.png');
+    await createFile('new-text', 'Manual.pdf');
+    await createFile('new-text', 'Script.js');
+
+    const iconFor = (name) => page.locator(`[data-file-name="${name}"] .files-item-icon`);
+    await expect(iconFor('Notes')).toHaveAttribute('data-file-icon', 'folder');
+    await expect(iconFor('project-only.txt')).toHaveAttribute('data-file-icon', 'text');
+    await expect(iconFor('IconNote.md')).toHaveAttribute('data-file-icon', 'markdown');
+    await expect(iconFor('Photo.png')).toHaveAttribute('data-file-icon', 'image');
+    await expect(iconFor('Manual.pdf')).toHaveAttribute('data-file-icon', 'pdf');
+    await expect(iconFor('Script.js')).toHaveAttribute('data-file-icon', 'code');
+    await expect(iconFor('Manual.pdf')).toHaveAttribute('aria-label', 'PDF file');
+    await expect(iconFor('Photo.png')).toHaveAttribute('title', 'Image file');
+  });
+
+  test('files explorer offers create actions in empty folders', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('EmptyQuickActions');
+    await page.locator('[data-files-create-confirm]').click();
+    await page.locator('[data-file-name="EmptyQuickActions"]').dblclick();
+
+    const emptyState = page.locator('.files-empty');
+    await expect(emptyState).toContainText('Empty folder');
+    await expect(emptyState.locator('[data-files-empty-action="new-folder"]')).toBeVisible();
+    await expect(emptyState.locator('[data-files-empty-action="new-markdown"]')).toBeVisible();
+    await expect(emptyState.locator('[data-files-empty-action="new-text"]')).toBeVisible();
+
+    await emptyState.locator('[data-files-empty-action="new-markdown"]').click();
+    await page.locator('[data-files-create-input]').fill('FromEmpty.md');
+    await page.locator('[data-files-create-confirm]').click();
+
+    await expect(page.locator('[data-file-name="FromEmpty.md"]')).toBeVisible();
+    await expect(page.locator('.files-empty')).toHaveCount(0);
+  });
+
+  test('files explorer shows no-match feedback while filtering', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-filter]').fill('zzzz-no-matches');
+
+    const emptyState = page.locator('.files-empty');
+    await expect(emptyState).toBeVisible();
+    await expect(emptyState).toContainText('No matches');
+    await expect(emptyState.locator('[data-files-empty-action="clear-filter"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="project-only.txt"]')).toHaveCount(0);
+
+    await emptyState.locator('[data-files-empty-action="clear-filter"]').click();
+    await expect(page.locator('[data-files-filter]')).toHaveValue('');
+    await expect(page.locator('.files-empty')).toHaveCount(0);
+    await expect(page.locator('[data-file-name="project-only.txt"]')).toBeVisible();
+  });
+
+  test('files explorer keeps removed items out of live files without Trash metadata', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-text"]').click();
+    await page.locator('[data-files-create-input]').fill('RestoreMe.txt');
+    await page.locator('[data-files-create-confirm]').click();
+    await expect(page.locator('[data-file-name="RestoreMe.txt"]')).toBeVisible();
+
+    await page.locator('[data-file-name="RestoreMe.txt"]').click();
+    await page.locator('[data-files-action="trash"]').click();
+    await page.locator('.files-modal-btn.confirm').click();
+    await expect(page.locator('[data-file-name="RestoreMe.txt"]')).toHaveCount(0);
+    await expect(page.locator('[data-files-action="trash-view"]')).toHaveCount(0);
+    await expect(page.locator('[data-files-restore-trash]')).toHaveCount(0);
+  });
+
+  test('files explorer uses labeled controls and no row New Here action', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    const actionIcons = {
+      back: 'back',
+      forward: 'forward',
+      up: 'up',
+      refresh: 'refresh',
+      'new-folder': 'folderAdd',
+      'new-markdown': 'markdownAdd',
+      'new-text': 'textAdd',
+      open: 'open',
+      rename: 'rename',
+      trash: 'trash',
+      cut: 'cut',
+      copy: 'copy',
+      paste: 'paste',
+    };
+
+    const pathData = [];
+    for (const [action, icon] of Object.entries(actionIcons)) {
+      const button = page.locator(`[data-files-action="${action}"]`);
+      await expect(button).toHaveAttribute('title', /.+/);
+      await expect(button).toHaveAttribute('aria-label', /.+/);
+      await expect(button).toHaveAttribute('data-files-icon', icon);
+      await expect(button.locator('svg')).toBeVisible();
+      await expect(button).toHaveText('');
+      pathData.push(await button.locator('svg path').getAttribute('d'));
+    }
+    expect(new Set(pathData).size).toBe(pathData.length);
+
+    await expect(page.locator('.files-row-btn').filter({ hasText: 'New here' })).toHaveCount(0);
+    const rowIcons = {
+      'row-open': 'open',
+      'row-rename': 'rename',
+      'row-trash': 'trash',
+    };
+    const rowPathData = [];
+    for (const [action, icon] of Object.entries(rowIcons)) {
+      const rowButton = page.locator(`[data-file-name="Notes"] [data-files-action="${action}"]`);
+      await expect(rowButton).toBeVisible();
+      await expect(rowButton).toHaveAttribute('title', /.+/);
+      await expect(rowButton).toHaveAttribute('aria-label', /.+/);
+      await expect(rowButton).toHaveAttribute('data-files-icon', icon);
+      await expect(rowButton).toHaveText('');
+      expect(await rowButton.evaluate((node) => node.innerHTML)).toContain('<svg');
+      rowPathData.push(await rowButton.locator('svg path').getAttribute('d'));
+    }
+    expect(new Set(rowPathData).size).toBe(rowPathData.length);
+  });
+
+  test('files explorer supports empty-space context paste after cutting a folder', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('CutMe');
+    await page.locator('[data-files-create-confirm]').click();
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('Target');
+    await page.locator('[data-files-create-confirm]').click();
+
+    await page.locator('[data-file-name="CutMe"]').click({ button: 'right' });
+    await page.locator('[data-files-menu-action="cut"]').click();
+
+    await page.locator('[data-file-name="Target"]').dblclick();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Target');
+    await page.locator('[data-files-list]').click({ button: 'right', position: { x: 24, y: 110 } });
+    await page.locator('[data-files-menu-action="paste"]').click();
+
+    await expect(page.locator('[data-file-name="CutMe"]')).toBeVisible();
+    await page.locator('[data-files-action="up"]').click();
+    await expect(page.locator('[data-file-name="CutMe"]')).toHaveCount(0);
+  });
+
+  test('files explorer navigates by clicking breadcrumb segments', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('BreadcrumbParent');
+    await page.locator('[data-files-create-confirm]').click();
+    await page.locator('[data-file-name="BreadcrumbParent"]').dblclick();
+    await expect(page.locator('.files-breadcrumb')).toContainText('BreadcrumbParent');
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('BreadcrumbChild');
+    await page.locator('[data-files-create-confirm]').click();
+    await page.locator('[data-file-name="BreadcrumbChild"]').dblclick();
+    await expect(page.locator('.files-breadcrumb')).toContainText('BreadcrumbChild');
+
+    await page.locator('.files-breadcrumb-item').filter({ hasText: 'BreadcrumbParent' }).click();
+    await expect(page.locator('.files-breadcrumb')).toContainText('BreadcrumbParent');
+    await expect(page.locator('.files-breadcrumb')).not.toContainText('BreadcrumbChild');
+    await expect(page.locator('[data-file-name="BreadcrumbChild"]')).toBeVisible();
+  });
+
+  test('files explorer duplicates a file from the context menu', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-file-name="project-only.txt"]').click({ button: 'right' });
+    await page.locator('[data-files-menu-action="duplicate"]').click();
+
+    await expect(page.locator('[data-file-name="project-only.txt"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="project-only (copy).txt"]')).toBeVisible();
+
+    await page.locator('[data-file-name="project-only.txt"]').click({ button: 'right' });
+    await page.locator('[data-files-menu-action="duplicate"]').click();
+    await expect(page.locator('[data-file-name="project-only (copy 2).txt"]')).toBeVisible();
+  });
+
+  test('files explorer supports multiselect and internal drag/drop move', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-files-action="new-folder"]').click();
+    await page.locator('[data-files-create-input]').fill('DropTarget');
+    await page.locator('[data-files-create-confirm]').click();
+    await page.locator('[data-files-action="new-markdown"]').click();
+    await page.locator('[data-files-create-input]').fill('DragOne.md');
+    await page.locator('[data-files-create-confirm]').click();
+    await page.locator('[data-files-action="new-text"]').click();
+    await page.locator('[data-files-create-input]').fill('DragTwo.txt');
+    await page.locator('[data-files-create-confirm]').click();
+
+    await page.locator('[data-file-name="DragOne.md"]').click();
+    await page.locator('[data-file-name="DragTwo.txt"]').click({ modifiers: [process.platform === 'darwin' ? 'Meta' : 'Control'] });
+    await expect(page.locator('.files-item.selected')).toHaveCount(2);
+
+    await page.evaluate(() => {
+      const source = document.querySelector('[data-file-name="DragOne.md"]');
+      const target = document.querySelector('[data-file-name="DropTarget"]');
+      const dt = new DataTransfer();
+      source.dispatchEvent(new DragEvent('dragstart', { bubbles: true, dataTransfer: dt }));
+      target.dispatchEvent(new DragEvent('dragover', { bubbles: true, dataTransfer: dt }));
+      target.dispatchEvent(new DragEvent('drop', { bubbles: true, dataTransfer: dt }));
+    });
+
+    await expect(page.locator('[data-file-name="DragOne.md"]')).toHaveCount(0);
+    await expect(page.locator('[data-file-name="DragTwo.txt"]')).toHaveCount(0);
+    await page.locator('[data-file-name="DropTarget"]').dblclick();
+    await expect(page.locator('[data-file-name="DragOne.md"]')).toBeVisible();
+    await expect(page.locator('[data-file-name="DragTwo.txt"]')).toBeVisible();
+  });
+
+  test('files explorer supports keyboard row selection and clearing selection', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    const rows = page.locator('.files-item');
+    await expect(rows.nth(1)).toBeVisible();
+
+    await rows.nth(0).click();
+    await expect(rows.nth(0)).toHaveClass(/selected/);
+
+    await page.locator('.files-root').focus();
+    await page.keyboard.press('ArrowDown');
+    await expect(rows.nth(1)).toHaveClass(/selected/);
+    await expect(rows.nth(0)).not.toHaveClass(/selected/);
+
+    await page.keyboard.press('ArrowUp');
+    await expect(rows.nth(0)).toHaveClass(/selected/);
+
+    await page.keyboard.press('Escape');
+    await expect(page.locator('.files-item.selected')).toHaveCount(0);
+  });
+
+  test('files history persists in workspace context and handles mouse back forward buttons', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-file-name="Notes"]').dblclick();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+
+    await page.locator('.files-root').focus();
+    await page.keyboard.press('Alt+ArrowLeft');
+    await expect(page.locator('.files-breadcrumb')).not.toContainText('Notes');
+
+    await page.keyboard.press('Alt+ArrowRight');
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+
+    await page.dispatchEvent('.files-root', 'mouseup', { button: 8, buttons: 128, bubbles: true, cancelable: true });
+    await expect(page.locator('.files-breadcrumb')).not.toContainText('Notes');
+
+    await page.dispatchEvent('.files-root', 'mouseup', { button: 9, buttons: 256, bubbles: true, cancelable: true });
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+
+    await page.locator('.wt-label').filter({ hasText: 'Test' }).click();
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+  });
+
+  test('workbench close and mouse back return from editor to the previous Files folder', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await openFilesTool(page);
+    await expect(page.locator('.files-breadcrumb')).toContainText('Project', { timeout: 10000 });
+
+    await page.locator('[data-file-name="Notes"]').dblclick();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+
+    await page.locator('[data-file-name="Overview.md"]').dblclick();
+    await expect(page.locator('[data-editor-mode="notes-markdown"]')).toBeVisible({ timeout: 10000 });
+
+    await page.dispatchEvent('body', 'mousedown', { button: 3, bubbles: true, cancelable: true });
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+    await expect(page.locator('[data-file-name="Overview.md"]')).toBeVisible();
+
+    await page.locator('[data-file-name="Overview.md"]').dblclick();
+    await expect(page.locator('[data-editor-mode="notes-markdown"]')).toBeVisible({ timeout: 10000 });
+
+    await page.waitForTimeout(150);
+    await page.evaluate(() => {
+      document.body.dispatchEvent(new PointerEvent('pointerdown', {
+        button: 3,
+        buttons: 8,
+        bubbles: true,
+        cancelable: true,
+        pointerType: 'mouse'
+      }));
+    });
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+
+    await page.locator('[data-file-name="Overview.md"]').dblclick();
+    await expect(page.locator('[data-editor-mode="notes-markdown"]')).toBeVisible({ timeout: 10000 });
+
+    await page.locator('.workbench-header .close-btn[aria-label="Close"]').click();
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+  });
+
+  test('open .txt via workbench from files context shows default-editor', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.files', {
+        kind: 'vault-file',
+        path: 'Docs/todo.txt',
+        extension: '.txt',
+        context: { sourcePluginId: 'verstak.files', sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const editor = page.locator('[data-editor-mode="text"]');
+    await expect(editor).toBeVisible({ timeout: 10000 });
+    await expect(editor).toHaveAttribute('data-resource-path', 'Docs/todo.txt');
+
+    const textarea = page.locator('.de-textarea');
+    await expect(textarea).toBeVisible({ timeout: 10000 });
+    const textareaBox = await textarea.boundingBox();
+    expect(textareaBox.height).toBeGreaterThan(300);
+  });
+
+  test('open .md via workbench from files context shows generic-markdown', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.files', {
+        kind: 'vault-file',
+        path: 'Docs/readme.md',
+        extension: '.md',
+        context: { sourcePluginId: 'verstak.files', sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const workbench = page.locator('.workbench-host');
+    await expect(workbench).toBeVisible({ timeout: 10000 });
+    await expect(workbench.locator('.workbench-title')).toHaveText('Docs/readme.md');
+
+    const preview = page.locator('.de-preview');
+    await expect(preview).toBeVisible({ timeout: 10000 });
+    const previewBox = await preview.boundingBox();
+    expect(previewBox.height).toBeGreaterThan(300);
+  });
+
+  test('open notes markdown via workbench from files context shows notes-markdown', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.files', {
+        kind: 'vault-file',
+        path: 'Notes/Overview.md',
+        extension: '.md',
+        context: { sourcePluginId: 'verstak.files', sourceView: 'files', isInsideNotesFolder: true, notesMode: true },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const workbench = page.locator('.workbench-host');
+    await expect(workbench).toBeVisible({ timeout: 10000 });
+    await expect(workbench.locator('.workbench-title')).toHaveText('Notes/Overview.md');
+  });
+
+  test('files plugin card shows openProviders in contributions', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.files', {
+        kind: 'vault-file', path: 'Docs/todo.txt', extension: '.txt',
+        context: { sourcePluginId: 'verstak.files', sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+    const editor = page.locator('[data-editor-mode="text"]');
+    await expect(editor).toBeVisible({ timeout: 5000 });
+  });
+});

frontend/e2e/helpers.js

@@ -0,0 +1,61 @@
+/**
+ * Shared helpers for Verstak E2E tests.
+ */
+import { expect } from '@playwright/test';
+
+/** Wait for the app to finish loading (loading screen disappears) */
+export async function waitForAppReady(page) {
+  // App shows "Loading Verstak..." initially, then renders the main layout
+  await page.waitForSelector('main', { state: 'visible', timeout: 15000 });
+  // Wait a bit for all async data to load
+  await page.waitForTimeout(1000);
+}
+
+/** Open the secondary Plugin Manager route from the status-bar settings menu. */
+export async function openPluginManager(page) {
+  await page.locator('[data-settings-menu-button]').click();
+  await page.locator('[data-settings-action="plugin-manager"]').click();
+  await page.waitForSelector('.plugin-manager', { state: 'visible', timeout: 10000 });
+}
+
+/** Collect all console errors since last reset */
+export function setupConsoleCollector(page) {
+  const errors = [];
+  page.on('console', (msg) => {
+    if (msg.type() === 'error') {
+      errors.push(msg.text());
+    }
+  });
+  page.on('pageerror', (err) => {
+    errors.push(err.message);
+  });
+  return {
+    getErrors: () => errors,
+    assertNoErrors: () => {
+      if (errors.length > 0) {
+        throw new Error(`Console errors detected:\n${errors.join('\n')}`);
+      }
+    },
+  };
+}
+
+/** Reset mock state before each test */
+export async function resetMockState(page) {
+  await page.evaluate(() => {
+    if (window.__wailsMock) {
+      window.__wailsMock.reset();
+    }
+  });
+}
+
+/** Set plugin status in mock */
+export async function setPluginStatus(page, pluginId, status, enabled) {
+  await page.evaluate(
+    ({ id, st, en }) => {
+      if (window.__wailsMock) {
+        window.__wailsMock.setPluginStatus(id, st, en);
+      }
+    },
+    { id: pluginId, st: status, en: enabled }
+  );
+}

frontend/e2e/localization.spec.js

@@ -0,0 +1,48 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('Desktop localization', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('switches shell language live and persists the choice', async ({ page }) => {
+    await page.locator('[data-settings-menu-button]').click();
+    await expect(page.locator('[data-settings-language="system"]')).toHaveAttribute('aria-checked', 'true');
+    await page.locator('[data-settings-language="ru"]').click();
+
+    await expect(page.locator('[data-settings-menu-button]')).toHaveAttribute('title', 'Настройки');
+    await expect(page.locator('.vault-status')).toContainText('Хранилище: открыто');
+    await expect(page.locator('.sidebar .plugin-item').filter({ hasText: 'Тест платформы' })).toBeVisible();
+    await expect(page.locator('[data-status-item-id="verstak.platform-test.status"]')).toContainText('Все тесты пройдены');
+
+    await page.locator('[data-settings-menu-button]').click();
+    await expect(page.locator('[data-settings-action="plugin-manager"]')).toContainText('Менеджер плагинов');
+    await expect(page.locator('[data-settings-language="ru"]')).toHaveAttribute('aria-checked', 'true');
+
+    await page.reload();
+    await waitForAppReady(page);
+    await expect(page.locator('[data-settings-menu-button]')).toHaveAttribute('title', 'Настройки');
+    await page.locator('[data-settings-menu-button]').click();
+    await expect(page.locator('[data-settings-language="ru"]')).toHaveAttribute('aria-checked', 'true');
+  });
+
+  test('switches back to English without reloading', async ({ page }) => {
+    await page.locator('[data-settings-menu-button]').click();
+    await page.locator('[data-settings-language="ru"]').click();
+    await page.locator('[data-settings-menu-button]').click();
+    await page.locator('[data-settings-language="en"]').click();
+
+    await expect(page.locator('[data-settings-menu-button]')).toHaveAttribute('title', 'Settings');
+    await expect(page.locator('.vault-status')).toContainText('Vault: open');
+  });
+});

frontend/e2e/plugin-api-bridge.spec.js

@@ -0,0 +1,211 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('D: Plugin API bridge', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('platform-test reads and writes settings through scoped API after reload', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+
+    const saved = page.locator('.pt-saved-setting');
+    await expect(saved).toHaveText('Saved setting: initial value', { timeout: 10000 });
+
+    const input = page.locator('.pt-setting-input');
+    await input.fill('persisted through bridge');
+    await page.locator('.pt-save-setting').click();
+    await expect(saved).toHaveText('Saved setting: persisted through bridge', { timeout: 10000 });
+
+    await openPluginManager(page);
+    await expect.poll(() => page.evaluate(() => Object.keys(window.__VERSTAK_COMMAND_HANDLERS__ || {}).length)).toBe(0);
+    await expect.poll(() => page.evaluate(() => (window.__VERSTAK_EVENT_HANDLERS__?.['verstak.platform-test.echo'] || []).length)).toBe(0);
+    await page.locator('button.reload-btn').click();
+    await expect(page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' }).locator('.status-badge')).toHaveText('loaded', { timeout: 10000 });
+
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+
+    await expect(page.locator('.pt-saved-setting')).toHaveText('Saved setting: persisted through bridge', { timeout: 10000 });
+    await expect(page.locator('.pt-badge')).toHaveAttribute('data-command-status', 'handled');
+    await expect(page.locator('.pt-badge')).toContainText('capability available');
+    await expect(page.locator('.pt-command-result')).toContainText('Command: handled 0.1.0 from bundled-frontend');
+    await expect(page.locator('.pt-event-result')).toHaveAttribute('data-event-status', 'received');
+    await expect(page.locator('.pt-event-result')).toContainText('Event: received hello-event');
+    await expect(page.locator('.pt-files-result')).toHaveAttribute('data-files-status', 'ok');
+    await expect(page.locator('.pt-files-result')).toContainText('Files: wrote/read/listed/moved/trashed');
+    await expect(page.locator('.pt-files-error-result')).toHaveAttribute('data-files-error-status', 'expected');
+    await expect(page.locator('.pt-files-error-result')).toContainText('Files error path: rejected reserved-path');
+
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Notes/Overview.md',
+        extension: '.md',
+        context: { sourceView: 'notes', isInsideNotesFolder: true, notesMode: true },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const workbench = page.locator('.workbench-host');
+    await expect(workbench).toBeVisible({ timeout: 10000 });
+    await expect(workbench.locator('.workbench-title')).toHaveText('Notes/Overview.md');
+  });
+
+  test('workbench routes markdown files to default-editor provider', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Docs/readme.md',
+        extension: '.md',
+        context: { sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    const workbench = page.locator('.workbench-host');
+    await expect(workbench).toBeVisible({ timeout: 10000 });
+    const title = workbench.locator('.workbench-title');
+    await expect(title).toHaveText('Docs/readme.md');
+  });
+
+  test('workbench shows no-provider fallback when no provider matches', async ({ page }) => {
+    await page.evaluate(async () => {
+      const [result, err] = await window.go.api.App.OpenWorkbenchResource('verstak.platform-test', {
+        kind: 'vault-file',
+        path: 'Images/logo.png',
+        extension: '.png',
+        context: { sourceView: 'files' },
+      });
+      if (err) throw new Error(err);
+      window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+    });
+
+    await expect(page.locator('[data-workbench-status="no-provider"]')).toBeVisible();
+    await expect(page.locator('[data-workbench-status="no-provider"]')).toContainText('No viewer/editor available');
+  });
+
+  test('sync plugin API routes through mocked Wails bridge', async ({ page }) => {
+    const result = await page.evaluate(async () => {
+      const api = window.createPluginAPI('verstak.sync');
+      const initial = await api.sync.status();
+      await api.sync.testConnection('https://sync.example.test', 'alice', 'secret');
+      await api.sync.configure('https://sync.example.test', 'alice', 'secret');
+      await api.sync.setInterval(15);
+      const configured = await api.sync.status();
+      const syncNow = await api.sync.now();
+      await api.sync.resetKey();
+      const reset = await api.sync.status();
+      await api.sync.disconnect();
+      const disconnected = await api.sync.status();
+      api.dispose();
+      return { initial, configured, syncNow, reset, disconnected };
+    });
+
+    expect(result.initial.statusLabel).toBe('disabled');
+    expect(result.configured.configured).toBe(true);
+    expect(result.configured.serverUrl).toBe('https://sync.example.test');
+    expect(result.configured.syncInterval).toBe(15);
+    expect(result.syncNow).toEqual({ pushed: 0, pulled: 0, serverSequence: 0 });
+    expect(result.reset.configured).toBe(false);
+    expect(result.reset.serverUrl).toBe('https://sync.example.test');
+    expect(result.reset.tokenStored).toBe(false);
+    expect(result.reset.statusLabel).toBe('disconnected');
+    expect(result.disconnected.configured).toBe(false);
+    expect(result.disconnected.statusLabel).toBe('disabled');
+  });
+
+  test('files API permanently deletes an existing trash entry through the bridge', async ({ page }) => {
+    const result = await page.evaluate(async () => {
+      const api = window.createPluginAPI('verstak.files');
+      await api.files.writeText('Project/bridge-trash.txt', 'remove me', { createIfMissing: true });
+      const trash = await api.files.trash('Project/bridge-trash.txt');
+      const before = await api.files.listTrash();
+      await api.files.deleteTrash(trash.trashId);
+      const after = await api.files.listTrash();
+      let readError = '';
+      try {
+        await api.files.readText('Project/bridge-trash.txt');
+      } catch (error) {
+        readError = String(error && error.message || error);
+      }
+      api.dispose();
+      return { before, after, readError };
+    });
+
+    expect(result.before).toHaveLength(1);
+    expect(result.after).toEqual([]);
+    expect(result.readError).toContain('not-found: Project/bridge-trash.txt');
+  });
+
+  test('backend plugin events are dispatched to subscribed frontend handlers', async ({ page }) => {
+    const result = await page.evaluate(async () => {
+      const api = window.createPluginAPI('verstak.platform-test');
+      let received = null;
+      const unsubscribe = await api.events.subscribe('browser.capture.page', (event) => {
+        received = event;
+      });
+      window.__VERSTAK_DISPATCH_BACKEND_EVENT__({
+        name: 'browser.capture.page',
+        timestamp: '2026-06-27T00:00:00.000Z',
+        payload: { url: 'https://example.com/article' }
+      });
+      unsubscribe();
+      api.dispose();
+      return received;
+    });
+
+    expect(result.name).toBe('browser.capture.page');
+    expect(result.payload.url).toBe('https://example.com/article');
+    expect(result.timestamp).toBe('2026-06-27T00:00:00.000Z');
+  });
+
+  test('platform-test command and event handlers are cleaned up after leaving plugin view', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+
+    await expect(page.locator('.pt-command-result')).toContainText('Command: handled', { timeout: 10000 });
+    await expect(page.locator('.pt-event-result')).toHaveAttribute('data-event-status', 'received', { timeout: 10000 });
+    await expect.poll(() => page.evaluate(() => Object.keys(window.__VERSTAK_COMMAND_HANDLERS__ || {}).length)).toBe(1);
+    await expect.poll(() => page.evaluate(() => (window.__VERSTAK_EVENT_HANDLERS__?.['verstak.platform-test.echo'] || []).length)).toBe(1);
+
+    await openPluginManager(page);
+
+    await expect.poll(() => page.evaluate(() => Object.keys(window.__VERSTAK_COMMAND_HANDLERS__ || {}).length)).toBe(0);
+    await expect.poll(() => page.evaluate(() => (window.__VERSTAK_EVENT_HANDLERS__?.['verstak.platform-test.echo'] || []).length)).toBe(0);
+  });
+
+  test('platform-test cleanup remains empty after disable reload flow', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+    await expect(page.locator('.pt-command-result')).toContainText('Command: handled', { timeout: 10000 });
+
+    await openPluginManager(page);
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+    await pluginCard.locator('button.btn-disable').click();
+    await expect(pluginCard.locator('button.btn-enable')).toBeVisible({ timeout: 10000 });
+
+    await expect.poll(() => page.evaluate(() => Object.keys(window.__VERSTAK_COMMAND_HANDLERS__ || {}).length)).toBe(0);
+    await expect.poll(() => page.evaluate(() => (window.__VERSTAK_EVENT_HANDLERS__?.['verstak.platform-test.echo'] || []).length)).toBe(0);
+  });
+
+  test('platform-test settings panel loads bundle content returned as raw string', async ({ page }) => {
+    await openPluginManager(page);
+
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+    await pluginCard.locator('button.btn-settings').click();
+
+    const modal = page.locator('.modal[aria-label="Plugin Settings"]');
+    await expect(modal).toBeVisible();
+    await expect(modal).toContainText('Platform Test Settings');
+    await expect(modal.locator('.host-state.error')).toHaveCount(0);
+  });
+});

frontend/e2e/plugin-manager-disable-enable.spec.js

@@ -0,0 +1,122 @@
+/**
+ * Acceptance Test A: Plugin Manager Disable/Enable refresh
+ *
+ * Scenario:
+ * 1. Open Plugin Manager
+ * 2. See Platform Test as loaded/enabled
+ * 3. Click Disable
+ * 4. Verify Enable button appears
+ * 5. Verify plugin sidebar item disappears
+ * 6. Click Enable
+ * 7. Verify Disable button appears
+ * 8. Verify plugin sidebar item returns
+ */
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('A: Plugin Manager Disable/Enable refresh', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+    await openPluginManager(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('Platform Test plugin is initially visible and enabled', async ({ page }) => {
+    // Plugin Manager should show Platform Test plugin card
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+    await expect(pluginCard).toBeVisible();
+
+    // Status should show "loaded"
+    const statusBadge = pluginCard.locator('.status-badge');
+    await expect(statusBadge).toHaveText('loaded');
+
+    // Disable button should be visible (not Enable)
+    const disableBtn = pluginCard.locator('button.btn-disable');
+    await expect(disableBtn).toBeVisible();
+
+    // Sidebar should have Platform Test item
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).toBeVisible();
+  });
+
+  test('Disable plugin: button changes to Enable, sidebar item disappears', async ({ page }) => {
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+
+    // Click Disable
+    const disableBtn = pluginCard.locator('button.btn-disable');
+    await expect(disableBtn).toBeVisible();
+    await disableBtn.click();
+
+    // Wait for UI to update after disable
+    await page.waitForTimeout(500);
+
+    // After disable: Enable button should appear
+    const enableBtn = pluginCard.locator('button.btn-enable');
+    await expect(enableBtn).toBeVisible({ timeout: 10000 });
+
+    // After disable: sidebar item for this plugin should disappear
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).not.toBeVisible();
+
+    // Status should show "disabled"
+    const statusBadge = pluginCard.locator('.status-badge');
+    await expect(statusBadge).toHaveText('disabled');
+  });
+
+  test('Re-enable plugin: button changes to Disable, sidebar item returns', async ({ page }) => {
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+
+    // First disable
+    await pluginCard.locator('button.btn-disable').click();
+    await page.waitForTimeout(500);
+
+    // Wait for Enable button
+    const enableBtn = pluginCard.locator('button.btn-enable');
+    await expect(enableBtn).toBeVisible({ timeout: 10000 });
+
+    // Click Enable
+    await enableBtn.click();
+    await page.waitForTimeout(500);
+
+    // After re-enable: Disable button should appear
+    const disableBtn = pluginCard.locator('button.btn-disable');
+    await expect(disableBtn).toBeVisible({ timeout: 10000 });
+
+    // Sidebar item should return
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).toBeVisible();
+
+    // Status should show "loaded"
+    const statusBadge = pluginCard.locator('.status-badge');
+    await expect(statusBadge).toHaveText('loaded');
+  });
+
+  test('Disable → Enable full flow in sequence', async ({ page }) => {
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+    const sidebar = page.locator('.sidebar');
+
+    // Initial state: enabled
+    await expect(pluginCard.locator('button.btn-disable')).toBeVisible();
+    await expect(sidebar.locator('.plugin-item').filter({ hasText: 'Platform Test' })).toBeVisible();
+
+    // Disable
+    await pluginCard.locator('button.btn-disable').click();
+    await page.waitForTimeout(500);
+    await expect(pluginCard.locator('button.btn-enable')).toBeVisible({ timeout: 10000 });
+    await expect(sidebar.locator('.plugin-item').filter({ hasText: 'Platform Test' })).not.toBeVisible();
+
+    // Enable
+    await pluginCard.locator('button.btn-enable').click();
+    await page.waitForTimeout(500);
+    await expect(pluginCard.locator('button.btn-disable')).toBeVisible({ timeout: 10000 });
+    await expect(sidebar.locator('.plugin-item').filter({ hasText: 'Platform Test' })).toBeVisible();
+  });
+});

frontend/e2e/plugin-manager-layout.spec.js

@@ -0,0 +1,152 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('E: Plugin Manager layout', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('plugin list scrolls through the global main scroll surface and stays responsive', async ({ page }) => {
+    await openPluginManager(page);
+    const basePluginCount = await page.locator('.plugin-card').count();
+    await page.evaluate(() => window.__wailsMock.addSyntheticPlugins(18));
+    await page.locator('button.reload-btn').click();
+    await expect(page.locator('.plugin-card')).toHaveCount(basePluginCount + 18, { timeout: 10000 });
+
+    const manager = page.locator('.plugin-manager');
+    const scrollSurface = page.locator('.content.scroll-surface');
+    await expect(manager).toBeVisible();
+    await expect(scrollSurface).toBeVisible();
+
+    const desktopMetrics = await scrollSurface.evaluate((node) => ({
+      clientHeight: node.clientHeight,
+      scrollHeight: node.scrollHeight,
+      overflowY: getComputedStyle(node).overflowY,
+    }));
+    expect(desktopMetrics.overflowY).toBe('auto');
+    expect(desktopMetrics.scrollHeight).toBeGreaterThan(desktopMetrics.clientHeight);
+
+    const scrolledTop = await scrollSurface.evaluate((node) => {
+      node.scrollTop = node.scrollHeight;
+      return node.scrollTop;
+    });
+    expect(scrolledTop).toBeGreaterThan(0);
+
+    await page.setViewportSize({ width: 720, height: 640 });
+    await expect(manager).toBeVisible();
+
+    const narrowMetrics = await scrollSurface.evaluate((node) => ({
+      clientWidth: node.clientWidth,
+      scrollWidth: node.scrollWidth,
+      scrollTop: node.scrollTop,
+    }));
+    expect(narrowMetrics.scrollWidth).toBeLessThanOrEqual(narrowMetrics.clientWidth + 1);
+    expect(narrowMetrics.scrollTop).toBeGreaterThan(0);
+  });
+
+  test('platform-test buttons use the global button contract', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+
+    const saveButton = page.locator('.pt-save-setting');
+    await expect(saveButton).toBeVisible({ timeout: 10000 });
+    await expect(saveButton).toHaveClass(/btn-primary/);
+
+    const buttonStyle = await saveButton.evaluate((node) => {
+      const style = getComputedStyle(node);
+      return {
+        display: style.display,
+        backgroundColor: style.backgroundColor,
+        borderRadius: style.borderRadius,
+      };
+    });
+    expect(buttonStyle.display).toBe('inline-flex');
+    expect(buttonStyle.backgroundColor).not.toBe('rgba(0, 0, 0, 0)');
+    expect(buttonStyle.borderRadius).toBe('6px');
+  });
+
+  test('plugin manager summarizes plugin health and elevated permissions before the list', async ({ page }) => {
+    await openPluginManager(page);
+
+    const health = page.locator('[data-plugin-manager-summary="health"]');
+    await expect(health).toBeVisible();
+    await expect(health.locator('[data-plugin-status-summary="loaded"]')).toContainText('12');
+    await expect(health.locator('[data-plugin-status-summary="failed"]')).toContainText('0');
+    await expect(health.locator('[data-plugin-status-summary="disabled"]')).toContainText('0');
+
+    const risk = page.locator('[data-plugin-manager-summary="risk"]');
+    await expect(risk).toBeVisible();
+    await expect(risk.locator('[data-plugin-risk-summary="elevated-permissions"]')).toContainText('6');
+    await expect(risk).toContainText('elevated permissions');
+  });
+
+  test('workspace selection keeps exactly one active node', async ({ page }) => {
+    const selected = page.locator('.wt-node.selected .wt-label');
+    await expect(selected).toHaveCount(1);
+    await expect(selected).toHaveText('Project');
+
+    await page.locator('.wt-label').filter({ hasText: 'Test' }).click();
+
+    await expect(selected).toHaveCount(1);
+    await expect(selected).toHaveText('Test');
+  });
+
+  test('workspace tools render Overview first with Files as one tab', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+
+    const tabs = page.locator('.workspace-tabs');
+    await expect(tabs).toBeVisible({ timeout: 10000 });
+    const overviewTab = tabs.locator('[role="tab"]').filter({ hasText: 'Overview' });
+    const filesTab = tabs.locator('[role="tab"]').filter({ hasText: 'Files' });
+    await expect(overviewTab).toBeVisible();
+    await expect(overviewTab).toHaveAttribute('aria-selected', 'true');
+    await expect(filesTab).toBeVisible();
+    await expect(filesTab).toHaveAttribute('aria-selected', 'false');
+    await expect(page.locator('.workspace-tool')).toHaveCount(0);
+    await expect(page.locator('[data-overview-root]')).toBeVisible();
+
+    await filesTab.click();
+    await expect(page.locator('.files-root')).toBeVisible();
+  });
+
+  test('workspace sidebar creates renames and trashes top-level workspaces', async ({ page }) => {
+    await page.locator('button[title="New workspace"]').click();
+    const modal = page.locator('[data-workspace-create-modal]');
+    await modal.locator('[data-workspace-name]').fill('ClientA');
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+
+    await expect(page.locator('.wt-label').filter({ hasText: 'ClientA' })).toBeVisible();
+
+    const client = page.locator('.wt-node').filter({ hasText: 'ClientA' });
+    await client.locator('button[title="Rename workspace"]').click();
+    await page.locator('.wt-rename').fill('ClientB');
+    await page.locator('button[title="Save rename"]').click();
+
+    await expect(page.locator('.wt-label').filter({ hasText: 'ClientB' })).toBeVisible();
+    await expect(page.locator('.wt-label').filter({ hasText: 'ClientA' })).toHaveCount(0);
+
+    const renamed = page.locator('.wt-node').filter({ hasText: 'ClientB' });
+    await renamed.locator('button[title="Trash workspace"]').click();
+
+    await expect(page.locator('.wt-label').filter({ hasText: 'ClientB' })).toHaveCount(0);
+  });
+
+  test('shell icons render through bundled Lucide SVG components', async ({ page }) => {
+    const logo = page.locator('.sidebar-logo');
+    await expect(logo).toBeVisible();
+    await expect(logo).toHaveClass(/lucide/);
+
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    const workspaceIcon = page.locator('.wt-node-icon').first();
+    await expect(workspaceIcon).toBeVisible();
+    await expect(workspaceIcon).toHaveClass(/lucide/);
+  });
+});

frontend/e2e/reload-updates-state.spec.js

@@ -0,0 +1,102 @@
+/**
+ * Acceptance Test C: Reload updates UI state
+ *
+ * Scenario:
+ * 1. Change mocked plugin state (e.g. disable a plugin in mock)
+ * 2. Click Reload button
+ * 3. Verify UI reflects the updated state
+ */
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, setPluginStatus, openPluginManager } from './helpers.js';
+
+test.describe('C: Reload updates UI state', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+    await openPluginManager(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('Reload after mock state change reflects new plugin status', async ({ page }) => {
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+
+    // Initial state: loaded/enabled
+    await expect(pluginCard.locator('.status-badge')).toHaveText('loaded');
+    await expect(pluginCard.locator('button.btn-disable')).toBeVisible();
+
+    // Change mock state to disabled (simulating external state change)
+    await setPluginStatus(page, 'verstak.platform-test', 'disabled', false);
+    await page.waitForTimeout(200);
+
+    // Click Reload button in Plugin Manager header
+    const reloadBtn = page.locator('button.reload-btn');
+    await expect(reloadBtn).toBeVisible();
+    await reloadBtn.click();
+
+    // Wait for reload to complete and UI to update
+    await page.waitForTimeout(1000);
+
+    // After reload: status should reflect the disabled state
+    await expect(pluginCard.locator('.status-badge')).toHaveText('disabled', { timeout: 10000 });
+
+    // Enable button should appear (since plugin is now disabled)
+    await expect(pluginCard.locator('button.btn-enable')).toBeVisible({ timeout: 10000 });
+
+    // Sidebar item should be gone (disabled plugins are filtered from sidebar)
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).not.toBeVisible();
+  });
+
+  test('Reload restores plugin after re-enabling in mock', async ({ page }) => {
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+
+    // Disable in mock, reload
+    await setPluginStatus(page, 'verstak.platform-test', 'disabled', false);
+    await page.waitForTimeout(200);
+    await page.locator('button.reload-btn').click();
+    await page.waitForTimeout(1000);
+
+    // Verify disabled
+    await expect(pluginCard.locator('.status-badge')).toHaveText('disabled', { timeout: 10000 });
+    await expect(pluginCard.locator('button.btn-enable')).toBeVisible();
+
+    // Re-enable in mock
+    await setPluginStatus(page, 'verstak.platform-test', 'loaded', true);
+    await page.waitForTimeout(200);
+
+    // Reload again
+    await page.locator('button.reload-btn').click();
+    await page.waitForTimeout(1000);
+
+    // After reload: should be loaded again
+    await expect(pluginCard.locator('.status-badge')).toHaveText('loaded', { timeout: 10000 });
+    await expect(pluginCard.locator('button.btn-disable')).toBeVisible();
+
+    // Sidebar item should return
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).toBeVisible();
+  });
+
+  test('Reload button is not disabled during normal operation', async ({ page }) => {
+    const reloadBtn = page.locator('button.reload-btn');
+    await expect(reloadBtn).toBeVisible();
+    await expect(reloadBtn).not.toBeDisabled();
+  });
+
+  test('Reload handles raw Wails count result without falling into error state', async ({ page }) => {
+    await page.evaluate(() => window.__wailsMock.setReloadResponseMode('raw-count'));
+
+    const reloadBtn = page.locator('button.reload-btn');
+    await reloadBtn.click();
+
+    await expect(page.locator('.error-state')).toHaveCount(0);
+    await expect(page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' })).toBeVisible({ timeout: 10000 });
+  });
+});

frontend/e2e/sidebar-opens-view.spec.js

@@ -0,0 +1,87 @@
+/**
+ * Acceptance Test B: Sidebar opens plugin view by item.view, not item.id
+ *
+ * Data:
+ * - sidebar item id = verstak.platform-test.sidebar
+ * - sidebar item view = verstak.platform-test.diagnostics
+ *
+ * Scenario:
+ * 1. Click sidebar item "Platform Test"
+ * 2. Verify diagnostics view is opened (verstak.platform-test.diagnostics)
+ * 3. Verify NOT opened empty container by sidebar id
+ */
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('B: Sidebar opens plugin view by item.view', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('Sidebar item exists with correct label', async ({ page }) => {
+    await expect(page.locator('.sidebar .nav-item').filter({ hasText: 'Plugin Manager' })).not.toBeVisible();
+    await expect(page.locator('.sidebar .plugin-item').filter({ hasText: 'Activity' })).toBeVisible();
+    await expect(page.locator('.sidebar .plugin-item').filter({ hasText: 'Browser Inbox' })).toBeVisible();
+
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).toBeVisible();
+  });
+
+  test('Global Activity and Browser Inbox sidebar items open plugin views', async ({ page }) => {
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Activity' }).click();
+    await expect(page.locator('.view-container .view-header h2')).toHaveText('Activity', { timeout: 10000 });
+
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Browser Inbox' }).click();
+    await expect(page.locator('.view-container .view-header h2')).toHaveText('Browser Inbox', { timeout: 10000 });
+  });
+
+  test('Click sidebar item opens diagnostics view by view ID, not sidebar ID', async ({ page }) => {
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await expect(sidebarItem).toBeVisible();
+
+    // Click the sidebar item
+    await sidebarItem.click();
+    await page.waitForTimeout(500);
+
+    // View container should be visible
+    const viewContainer = page.locator('.view-container');
+    await expect(viewContainer).toBeVisible();
+
+    // The view header should show "Platform Diagnostics" (from view contribution title)
+    // This proves the view was opened by item.view = "verstak.platform-test.diagnostics"
+    // NOT by item.id = "verstak.platform-test.sidebar"
+    const viewHeader = viewContainer.locator('.view-header h2');
+    await expect(viewHeader).toHaveText('Platform Diagnostics', { timeout: 10000 });
+
+    // The view should NOT show "View ... not found" error
+    // (which would happen if it tried to open by sidebar item id)
+    await expect(viewContainer).not.toHaveText(/not found/);
+
+    // The view should NOT show an empty container message
+    const emptyView = viewContainer.locator('.empty');
+    await expect(emptyView).not.toBeVisible();
+  });
+
+  test('View header shows correct title from view contribution', async ({ page }) => {
+    const sidebarItem = page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' });
+    await sidebarItem.click();
+    await page.waitForTimeout(500);
+
+    // Verify the view title comes from the view contribution (item.view)
+    // NOT from the sidebar item (item.id)
+    const viewHeader = page.locator('.view-container .view-header h2');
+    await expect(viewHeader).toHaveText('Platform Diagnostics', { timeout: 10000 });
+
+    // Should NOT show sidebar item id as view title
+    await expect(viewHeader).not.toHaveText('verstak.platform-test.sidebar');
+  });
+});

frontend/e2e/status-bar.spec.js

@@ -0,0 +1,49 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('Status Bar host', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('renders enabled plugin statusBarItems', async ({ page }) => {
+    const statusBar = page.locator('.status-bar');
+    await expect(statusBar).toBeVisible();
+    await expect(statusBar.locator('.vault-status')).toContainText('Vault: open');
+    await expect(statusBar.locator('[data-status-item-id="verstak.platform-test.status"]')).toContainText('All Tests Pass');
+  });
+
+  test('opens settings menu with plugin manager and plugin settings', async ({ page }) => {
+    await page.locator('[data-settings-menu-button]').click();
+
+    await expect(page.locator('[data-settings-action="plugin-manager"]')).toBeVisible();
+    await expect(page.locator('[data-settings-panel-id="verstak.sync.settings"]')).toBeVisible();
+
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Platform Test' }).click();
+    await expect(page.locator('.view-container .view-header h2')).toHaveText('Platform Diagnostics');
+
+    await page.locator('[data-settings-menu-button]').click();
+    await page.locator('[data-settings-action="plugin-manager"]').click();
+    await expect(page.locator('.plugin-manager')).toBeVisible();
+  });
+
+  test('refreshes statusBarItems after disabling plugin', async ({ page }) => {
+    const pluginCard = page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' });
+    await expect(page.locator('[data-status-item-id="verstak.platform-test.status"]')).toBeVisible();
+    await openPluginManager(page);
+
+    await pluginCard.locator('button.btn-disable').click();
+
+    await expect(pluginCard.locator('button.btn-enable')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('[data-status-item-id="verstak.platform-test.status"]')).not.toBeVisible();
+  });
+});

frontend/e2e/todo.spec.js

@@ -0,0 +1,148 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('Todo plugin workflow', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('workspace Todo supports CRUD, reminders, and manual Journal conversion', async ({ page }) => {
+    await page.getByRole('tab', { name: 'Todos' }).click();
+
+    const todos = page.locator('.todo-root');
+    await expect(todos).toBeVisible({ timeout: 10000 });
+    await expect(todos).toContainText('Todos · Project');
+
+    await todos.locator('[data-todo-action="add"]').click();
+    await todos.locator('[data-todo-input="title"]').fill('Prepare project review');
+    await todos.locator('[data-todo-input="description"]').fill('Collect factual review notes.');
+    await todos.locator('[data-todo-input="priority"]').selectOption('high');
+    await todos.locator('[data-todo-input="dueAt"]').fill('2000-01-01');
+    await todos.locator('[data-todo-input="reminderAt"]').fill('2000-01-01T09:00');
+    await todos.locator('[data-todo-action="save"]').click();
+
+    await expect(todos).toContainText('Overdue');
+    await expect(todos).toContainText('Reminder due');
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.todo');
+      const settings = Array.isArray(result) ? result[0] : result;
+      const todo = settings['todos:global'].find((item) => item.title === 'Prepare project review');
+      return todo && [todo.workspaceRootPath, todo.priority, todo.dueAt, todo.reminderAt].join('|');
+    })).toBe('Project|high|2000-01-01|2000-01-01T09:00');
+
+    await todos.locator('[data-todo-action="edit"]').click();
+    await todos.locator('[data-todo-input="title"]').fill('Prepare project review updated');
+    await todos.locator('[data-todo-action="save"]').click();
+    await expect(todos).toContainText('Prepare project review updated');
+
+    await todos.locator('[data-todo-action="mark-done"]').click();
+    await expect(todos.locator('[data-todo-action="create-journal-entry"]')).toBeVisible();
+    await todos.locator('[data-todo-action="create-journal-entry"]').click();
+
+    const journal = page.locator('.journal-root');
+    await expect(page.getByRole('tab', { name: 'Journal' })).toHaveAttribute('aria-selected', 'true');
+    await expect(journal).toBeVisible({ timeout: 10000 });
+    await expect(journal).toContainText('Create journal entry from completed todo');
+    await expect(journal.locator('[data-journal-input="title"]')).toHaveValue('Prepare project review updated');
+    await expect(journal.locator('[data-journal-input="summary"]')).toHaveValue('Collect factual review notes.');
+    await expect(journal.locator('[data-journal-input="minutes"]')).toHaveValue('0');
+
+    await journal.locator('[data-journal-input="title"]').fill('Prepare project review handoff');
+    await journal.locator('[data-journal-input="summary"]').fill('Reviewed factual project notes before handoff.');
+    await journal.locator('[data-journal-action="save-entry"]').click();
+    await expect.poll(async () => page.evaluate(async () => {
+      const todoResult = await window.go.api.App.ReadPluginSettings('verstak.todo');
+      const todoSettings = Array.isArray(todoResult) ? todoResult[0] : todoResult;
+      const todo = todoSettings['todos:global'].find((item) => item.title === 'Prepare project review updated');
+      const journalResult = await window.go.api.App.ReadPluginSettings('verstak.journal');
+      const journalSettings = Array.isArray(journalResult) ? journalResult[0] : journalResult;
+      const entry = journalSettings['worklog:workspace:Project'].find((item) => item.sourceTodoId === todo.id);
+      return entry && [entry.title, entry.summary, entry.minutes].join('|');
+    })).toBe('Prepare project review handoff|Reviewed factual project notes before handoff.|0');
+
+    await page.getByRole('tab', { name: 'Todos' }).click();
+    await page.locator('.todo-root [data-todo-action="delete"]').click();
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.ReadPluginSettings('verstak.todo');
+      const settings = Array.isArray(result) ? result[0] : result;
+      return settings['todos:global'].some((item) => item.title === 'Prepare project review updated');
+    })).toBe(false);
+  });
+
+  test('global Todos filter by workspace and Overview only exposes current workspace attention', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.todo', {
+        'todos:global': [
+          {
+            id: 'todo-project-open',
+            title: 'Project deadline',
+            workspaceRootPath: 'Project',
+            status: 'open',
+            priority: 'high',
+            dueAt: '2000-01-01',
+            reminderAt: '2000-01-01T09:00',
+            createdAt: '2026-06-30T08:00:00.000Z',
+            updatedAt: '2026-06-30T08:00:00.000Z',
+          },
+          {
+            id: 'todo-project-done',
+            title: 'Project completed item',
+            workspaceRootPath: 'Project',
+            status: 'done',
+            priority: 'normal',
+            createdAt: '2026-06-30T08:01:00.000Z',
+            updatedAt: '2026-06-30T08:01:00.000Z',
+            completedAt: '2026-06-30T08:02:00.000Z',
+          },
+          {
+            id: 'todo-test-open',
+            title: 'Test workspace item',
+            workspaceRootPath: 'Test',
+            status: 'open',
+            priority: 'normal',
+            dueAt: '2000-01-01',
+            createdAt: '2026-06-30T08:03:00.000Z',
+            updatedAt: '2026-06-30T08:03:00.000Z',
+          },
+        ],
+      });
+    });
+
+    const overview = page.locator('[data-overview-root]');
+    await overview.locator('[data-overview-action="refresh"]').click();
+    const attention = overview.locator('[data-overview-section="attention"]');
+    await expect(attention).toContainText('Project deadline');
+    await expect(attention).not.toContainText('Test workspace item');
+    await attention.locator('.overview-attention-row', { hasText: 'Project deadline' }).getByRole('button', { name: 'Open Todos' }).click();
+    await expect(page.getByRole('tab', { name: 'Todos' })).toHaveAttribute('aria-selected', 'true');
+
+    await page.locator('.sidebar .plugin-item').filter({ hasText: 'Todos' }).click();
+    const globalTodos = page.locator('.todo-root');
+    await expect(globalTodos).toContainText('Project deadline');
+    await expect(globalTodos).toContainText('Test workspace item');
+
+    await globalTodos.locator('[data-todo-filter="workspace"]').selectOption('Project');
+    await expect(globalTodos).toContainText('Project deadline');
+    await expect(globalTodos).toContainText('Project completed item');
+    await expect(globalTodos).not.toContainText('Test workspace item');
+
+    await globalTodos.locator('[data-todo-filter="status"]').selectOption('done');
+    await expect(globalTodos).toContainText('Project completed item');
+    await expect(globalTodos).not.toContainText('Project deadline');
+
+    await page.locator('.wt-label').filter({ hasText: 'Test' }).click();
+    await page.getByRole('tab', { name: 'Todos' }).click();
+    const workspaceTodos = page.locator('.todo-root');
+    await expect(workspaceTodos).toContainText('Test workspace item');
+    await expect(workspaceTodos).not.toContainText('Project deadline');
+  });
+});

frontend/e2e/trash-plugin.spec.js

@@ -0,0 +1,121 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+async function openTrash(page) {
+  await page.locator('.sidebar .plugin-item').filter({ hasText: 'Trash' }).click();
+  await expect(page.locator('.trash-root')).toBeVisible({ timeout: 10000 });
+}
+
+async function createTrashEntry(page, path, content, deletedAt) {
+  return page.evaluate(async ({ path, content, deletedAt }) => {
+    const api = window.createPluginAPI('verstak.files');
+    await api.files.writeText(path, content, { createIfMissing: true });
+    const entry = await api.files.trash(path);
+    window.__wailsMock.setTrashDeletedAt(entry.trashId, deletedAt);
+    api.dispose();
+    return entry;
+  }, { path, content, deletedAt });
+}
+
+test.describe('L: Global Trash Plugin', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('moves a Files item into global Trash without exposing Trash metadata in Files', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await page.getByRole('tab', { name: 'Files' }).click();
+    await expect(page.locator('.files-root')).toBeVisible({ timeout: 10000 });
+
+    await page.locator('[data-files-action="new-text"]').click();
+    await page.locator('[data-files-create-input]').fill('GlobalTrash.txt');
+    await page.locator('[data-files-create-confirm]').click();
+    await expect(page.locator('[data-file-name="GlobalTrash.txt"]')).toBeVisible();
+    await page.locator('[data-file-name="GlobalTrash.txt"]').click();
+    await page.locator('[data-files-action="trash"]').click();
+    await page.locator('.files-modal-btn.confirm').click();
+    await expect(page.locator('[data-file-name="GlobalTrash.txt"]')).toHaveCount(0);
+    await expect(page.locator('[data-files-action="trash-view"]')).toHaveCount(0);
+
+    await openTrash(page);
+    const row = page.locator('[data-trash-row]').filter({ hasText: 'GlobalTrash.txt' });
+    await expect(row).toBeVisible();
+    await expect(row).toContainText('Project');
+    await expect(row).toContainText('Project/GlobalTrash.txt');
+  });
+
+  test('filters and sorts global Trash and restores without overwriting a conflict', async ({ page }) => {
+    const older = await createTrashEntry(page, 'Project/Older.txt', 'older original', '2026-06-20T08:00:00.000Z');
+    const newest = await createTrashEntry(page, 'Test/Newest.txt', 'newest original', '2026-06-29T08:00:00.000Z');
+    const restore = await createTrashEntry(page, 'Project/Restore.txt', 'restore original', '2026-06-25T08:00:00.000Z');
+    const conflict = await page.evaluate(async () => {
+      const api = window.createPluginAPI('verstak.files');
+      await api.files.writeText('Project/Conflict.txt', 'trashed content', { createIfMissing: true });
+      const entry = await api.files.trash('Project/Conflict.txt');
+      await api.files.writeText('Project/Conflict.txt', 'existing content', { createIfMissing: true });
+      window.__wailsMock.setTrashDeletedAt(entry.trashId, '2026-06-24T08:00:00.000Z');
+      api.dispose();
+      return entry;
+    });
+
+    await openTrash(page);
+    await page.locator('[data-trash-filter-workspace]').selectOption('Project');
+    await expect(page.locator(`[data-trash-row="${older.trashId}"]`)).toBeVisible();
+    await expect(page.locator(`[data-trash-row="${newest.trashId}"]`)).toHaveCount(0);
+
+    await page.locator('[data-trash-filter-workspace]').selectOption('');
+    await page.locator('[data-trash-filter-search]').fill('Newest');
+    await expect(page.locator(`[data-trash-row="${newest.trashId}"]`)).toBeVisible();
+    await expect(page.locator(`[data-trash-row="${older.trashId}"]`)).toHaveCount(0);
+
+    await page.locator('[data-trash-filter-search]').fill('');
+    await page.locator('[data-trash-sort]').selectOption('date-asc');
+    await expect(page.locator('[data-trash-row]').first()).toHaveAttribute('data-trash-row', older.trashId);
+
+    await page.locator(`[data-trash-restore="${restore.trashId}"]`).click();
+    await expect(page.locator(`[data-trash-row="${restore.trashId}"]`)).toHaveCount(0);
+    await expect.poll(() => page.evaluate(async () => {
+      const api = window.createPluginAPI('verstak.files');
+      const content = await api.files.readText('Project/Restore.txt');
+      api.dispose();
+      return content;
+    })).toBe('restore original');
+
+    await page.locator(`[data-trash-restore="${conflict.trashId}"]`).click();
+    await expect(page.locator('[data-trash-status]')).toContainText('Restore blocked');
+    await expect(page.locator(`[data-trash-row="${conflict.trashId}"]`)).toBeVisible();
+    await expect.poll(() => page.evaluate(async () => {
+      const api = window.createPluginAPI('verstak.files');
+      const content = await api.files.readText('Project/Conflict.txt');
+      api.dispose();
+      return content;
+    })).toBe('existing content');
+  });
+
+  test('requires confirmation before permanently deleting a Trash item', async ({ page }) => {
+    const entry = await createTrashEntry(page, 'Test/Permanent.txt', 'remove forever', '2026-06-26T08:00:00.000Z');
+    await openTrash(page);
+
+    await page.locator(`[data-trash-delete="${entry.trashId}"]`).click();
+    await expect(page.locator(`[data-trash-confirm="${entry.trashId}"]`)).toBeVisible();
+    await expect(page.locator(`[data-trash-row="${entry.trashId}"]`)).toBeVisible();
+
+    await page.locator(`[data-trash-confirm-delete="${entry.trashId}"]`).click();
+    await expect(page.locator(`[data-trash-row="${entry.trashId}"]`)).toHaveCount(0);
+    await expect.poll(() => page.evaluate(async (trashId) => {
+      const api = window.createPluginAPI('verstak.files');
+      const entries = await api.files.listTrash();
+      api.dispose();
+      return entries.some((item) => item.trashId === trashId);
+    }, entry.trashId)).toBe(false);
+  });
+});

frontend/e2e/ux-followup.spec.js

@@ -0,0 +1,118 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('UX follow-up fixes', () => {
+  test.beforeEach(async ({ page }) => {
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test('global search stays available after opening tool sidebar views', async ({ page }) => {
+    const search = page.locator('[data-global-search-input]');
+    await expect(search).toBeVisible();
+    await expect(page.locator('.workspace-header [data-global-search-input]')).toBeVisible();
+
+    await page.locator('.sidebar .nav-item').filter({ hasText: 'Activity' }).click();
+    await expect(page.locator('.activity-root')).toBeVisible({ timeout: 10000 });
+    await expect(search).toBeVisible();
+    await expect(page.locator('.sidebar [data-global-search-input]')).toBeVisible();
+
+    await page.locator('.sidebar .nav-item').filter({ hasText: 'Browser Inbox' }).click();
+    await expect(page.locator('.browser-inbox-root')).toBeVisible({ timeout: 10000 });
+    await expect(search).toBeVisible();
+  });
+
+  test('global search types ahead across workspaces and file contents with keyboard layout fallback', async ({ page }) => {
+    const search = page.locator('[data-global-search-input]');
+
+    await search.fill('Зкщоусе');
+    await expect(page.locator('[data-global-search-results]')).toContainText('Project', { timeout: 10000 });
+
+    await search.fill('project file');
+    await expect(page.locator('[data-global-search-results]')).toContainText('project-only.txt', { timeout: 10000 });
+  });
+
+  test('global search folder results open the workspace Files context', async ({ page }) => {
+    const search = page.locator('[data-global-search-input]');
+    await search.fill('Project/Notes');
+
+    const folderResult = page.locator('[data-global-search-result-type="Folder"][data-global-search-result-path="Project/Notes"]');
+    await expect(folderResult).toBeVisible({ timeout: 10000 });
+    await folderResult.click();
+
+    await expect(page.locator('.workspace-title')).toHaveText('Project', { timeout: 10000 });
+    await expect(page.getByRole('tab', { name: 'Files' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.files-root')).toBeVisible();
+    await expect(page.locator('.files-breadcrumb')).toContainText('Notes');
+    await expect(page.locator('.files-item')).toContainText('Overview.md');
+  });
+
+  test('global search opens indexed browser inbox results', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.browser-inbox', {
+        'captures:workspace:Project': [{
+          captureId: 'capture-search-1',
+          capturedAt: '2026-06-30T08:00:00.000Z',
+          kind: 'page',
+          url: 'https://example.com/research',
+          title: 'Research Search Result',
+          domain: 'example.com',
+          text: 'Searchable captured browser text',
+          workspaceRootPath: 'Project',
+          browserName: 'Firefox',
+        }],
+      });
+    });
+
+    const search = page.locator('[data-global-search-input]');
+    await search.fill('Research Search Result');
+    const result = page.locator('[data-global-search-result-type="Browser Inbox"]').filter({ hasText: 'Research Search Result' });
+    await expect(result).toBeVisible({ timeout: 10000 });
+    await result.click();
+
+    await expect(page.locator('.browser-inbox-root')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.browser-inbox-detail-title')).toHaveText('Research Search Result');
+  });
+
+  test('workspace Search input keeps focus while typing', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await page.getByRole('tab', { name: 'Search' }).click();
+    const searchInput = page.locator('[data-search-input="query"]');
+    await expect(searchInput).toBeVisible({ timeout: 10000 });
+
+    await searchInput.click();
+    await page.keyboard.press('p');
+    await expect(searchInput).toBeFocused();
+    await page.keyboard.press('r');
+    await expect(searchInput).toBeFocused();
+    await expect(searchInput).toHaveValue('pr');
+  });
+
+  test('mobile workspace layout gives content full width below the sidebar', async ({ page }) => {
+    await page.setViewportSize({ width: 390, height: 844 });
+    await page.reload();
+    await waitForAppReady(page);
+
+    const workspaceBox = await page.locator('.workspace-host').boundingBox();
+    const sidebarBox = await page.locator('.sidebar').boundingBox();
+    expect(workspaceBox.width).toBeGreaterThan(340);
+    expect(workspaceBox.y).toBeGreaterThan(sidebarBox.y + sidebarBox.height - 1);
+    await expect(page.locator('.workspace-header [data-global-search-input]')).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Overview' })).toBeVisible();
+
+    const hasHorizontalOverflow = await page.evaluate(() => document.documentElement.scrollWidth > window.innerWidth);
+    expect(hasHorizontalOverflow).toBe(false);
+  });
+
+  test('plugin settings modal gives complex panels enough space', async ({ page }) => {
+    await openPluginManager(page);
+    await page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' }).getByRole('button', { name: 'Settings' }).click();
+
+    const modal = page.locator('.modal[aria-label="Plugin Settings"]');
+    await expect(modal).toBeVisible({ timeout: 10000 });
+    const box = await modal.boundingBox();
+    expect(box.width).toBeGreaterThanOrEqual(760);
+    expect(box.height).toBeGreaterThanOrEqual(560);
+  });
+});

frontend/e2e/ux-p0.spec.js

@@ -0,0 +1,105 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState, openPluginManager } from './helpers.js';
+
+test.describe('UX P0 shell flow', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('starts in the first workspace instead of Plugin Manager', async ({ page }) => {
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+    await expect(page.locator('.plugin-manager')).toHaveCount(0);
+    await expect(page.locator('.wt-node.selected .wt-label')).toHaveText('Project');
+    await expect(page.locator('.workspace-title')).toHaveText('Project');
+  });
+
+  test('workspace selection and main content stay in sync across plugin manager round trip', async ({ page }) => {
+    await page.locator('.wt-label').filter({ hasText: 'Test' }).click();
+
+    await expect(page.locator('.workspace-title')).toHaveText('Test', { timeout: 10000 });
+    await expect(page.locator('.wt-node.selected .wt-label')).toHaveText('Test');
+    await expect(page.locator('.plugin-manager')).toHaveCount(0);
+
+    await openPluginManager(page);
+    await expect(page.locator('.plugin-manager')).toBeVisible();
+    await expect(page.locator('.wt-node.selected .wt-label')).toHaveCount(0);
+
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await expect(page.locator('.workspace-title')).toHaveText('Project', { timeout: 10000 });
+    await expect(page.locator('.plugin-manager')).toHaveCount(0);
+  });
+
+  test('status bar plugin contribution failures do not render large error panels', async ({ page }) => {
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+    await expect(page.getByText('Plugin View Error')).toHaveCount(0);
+    await expect(page.locator('.status-bar [data-status-item-id]')).toHaveCount(2);
+  });
+
+  test('Plugin Manager remains reachable from the settings menu', async ({ page }) => {
+    await openPluginManager(page);
+
+    await expect(page.locator('.plugin-manager')).toBeVisible();
+    await expect(page.locator('.plugin-card').filter({ hasText: 'verstak.platform-test' })).toBeVisible();
+  });
+});
+
+test.describe('UX quick wins', () => {
+  test('Files screen uses readable dates and understandable action controls', async ({ page }) => {
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+    await page.locator('.wt-label').filter({ hasText: 'Project' }).click();
+    await page.getByRole('tab', { name: 'Files' }).click();
+
+    const files = page.locator('.files-root');
+    await expect(files).toBeVisible({ timeout: 10000 });
+    await expect(files.getByText(/T\d{2}:\d{2}:\d{2}/)).toHaveCount(0);
+
+    const actions = [
+      ['new-folder', 'New folder'],
+      ['new-markdown', 'New markdown file'],
+      ['new-text', 'New text file'],
+    ];
+    for (const [action, label] of actions) {
+      const button = page.locator(`[data-files-action="${action}"]`).first();
+      await expect(button).toBeVisible();
+      await expect(button).toHaveAttribute('title', label);
+      await expect(button).toHaveAttribute('aria-label', label);
+      await expect(button).toHaveAttribute('data-files-icon', /.+/);
+      await expect(button.locator('svg')).toBeVisible();
+    }
+  });
+
+  test('Vault Selection is localized and has a clear primary action', async ({ browser }) => {
+    const page = await browser.newPage();
+    await page.addInitScript(() => {
+      window.go = { api: { App: {
+        GetAppSettings: async () => ({ currentVaultPath: '', recentVaults: ['/tmp/verstak-recent-vault'] }),
+        GetVaultStatus: async () => ({ status: 'closed', path: '', vaultId: '' }),
+        SelectDirectory: async () => '',
+        SelectVaultForOpen: async () => '',
+        CreateVault: async () => null,
+        OpenVault: async () => null,
+        SetCurrentVault: async () => '',
+        WriteFrontendLog: async () => {},
+      } } };
+    });
+
+    await page.goto('/');
+    await page.waitForSelector('.vault-selection', { timeout: 10000 });
+
+    await expect(page.getByText('Choose a vault to start working')).toBeVisible();
+    await expect(page.getByRole('button', { name: 'Create vault' })).toBeVisible();
+    await expect(page.getByRole('button', { name: 'Open existing' })).toBeVisible();
+    await page.close();
+  });
+});

frontend/e2e/ux-today.spec.js

@@ -0,0 +1,250 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('UX Overview workspace flow', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  test('workspace opens with Overview before plugin tools', async ({ page }) => {
+    await expect(page.locator('.workspace-host')).toBeVisible({ timeout: 10000 });
+
+    const tabs = page.getByRole('tab');
+    await expect(tabs.nth(0)).toHaveText('Overview');
+    await expect(tabs.nth(1)).toHaveText('Notes');
+    await expect(page.getByRole('tab', { name: 'Overview' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.getByRole('tab', { name: 'Today' })).toHaveCount(0);
+
+    const overview = page.locator('[data-overview-root]');
+    await expect(overview).toBeVisible();
+    await expect(overview.locator('[data-overview-section="continue"]')).toContainText('Continue working');
+    await expect(overview.locator('[data-overview-section="recent"]')).toContainText('Recent changes');
+    await expect(overview.locator('[data-overview-section="attention"]')).toContainText('Needs attention');
+    await expect(overview.locator('[data-overview-section="quick-actions"]')).toHaveCount(0);
+
+    const summaryCards = overview.locator('button[data-overview-summary]');
+    await expect(summaryCards).toHaveCount(6);
+    await expect(overview.locator('[data-overview-summary="notes"]')).toContainText('1 total');
+    await expect(overview.locator('[data-overview-summary="notes"]')).toContainText('0 recent changes');
+    await expect(overview.locator('[data-overview-summary="captures"]')).toContainText('0 captures to review');
+    await expect(overview.locator('[data-overview-summary="activity"]')).toContainText('0 recorded events');
+    await expect(overview.locator('[data-overview-summary="journal"]')).toContainText('0 journal entries');
+    await expect(overview).toContainText('No clear resume point yet');
+    await expect(overview).toContainText('No meaningful changes for this filter yet');
+  });
+
+  test('Overview summary cards navigate to their corresponding workspace tools', async ({ page }) => {
+    const overview = page.locator('[data-overview-root]');
+    await overview.locator('[data-overview-summary="notes"]').click();
+    await expect(page.getByRole('tab', { name: 'Notes' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.notes-root')).toBeVisible({ timeout: 10000 });
+
+    await page.getByRole('tab', { name: 'Overview' }).click();
+    await overview.locator('[data-overview-summary="files"]').click();
+    await expect(page.getByRole('tab', { name: 'Files' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.files-root')).toBeVisible({ timeout: 10000 });
+
+    await page.getByRole('tab', { name: 'Overview' }).click();
+    await overview.locator('[data-overview-summary="captures"]').click();
+
+    await expect(page.getByRole('tab', { name: 'Browser Inbox' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.browser-inbox-root')).toBeVisible({ timeout: 10000 });
+
+    await page.getByRole('tab', { name: 'Overview' }).click();
+    await overview.locator('[data-overview-summary="activity"]').click();
+    await expect(page.getByRole('tab', { name: 'Activity' })).toHaveAttribute('aria-selected', 'true');
+
+    await page.getByRole('tab', { name: 'Overview' }).click();
+    await overview.locator('[data-overview-summary="journal"]').click();
+    await expect(page.getByRole('tab', { name: 'Journal' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.journal-root')).toBeVisible({ timeout: 10000 });
+
+    await page.getByRole('tab', { name: 'Overview' }).click();
+    await overview.locator('[data-overview-summary="attention"]').click();
+    await expect(page.getByRole('tab', { name: 'Browser Inbox' })).toHaveAttribute('aria-selected', 'true');
+  });
+
+  test('Overview keeps the Notes total factual when the Files plugin is unavailable', async ({ page }) => {
+    await page.evaluate(() => window.__wailsMock.setPluginStatus('verstak.files', 'disabled', false));
+    await page.locator('[data-overview-action="refresh"]').click();
+
+    await expect(page.locator('[data-overview-summary="notes"]')).toContainText('1 total');
+  });
+
+  test('Overview prioritizes resume work and filters meaningful recent changes', async ({ page }) => {
+    await page.evaluate(async () => {
+      await window.go.api.App.WritePluginSettings('verstak.browser-inbox', {
+        'captures:global': [
+          {
+            captureId: 'overview-capture-1',
+            capturedAt: '2026-06-30T08:00:00.000Z',
+            kind: 'page',
+            url: 'https://example.com/research',
+            title: 'Research Report',
+            domain: 'example.com',
+            workspaceRootPath: 'Project',
+          },
+          {
+            captureId: 'overview-capture-2',
+            capturedAt: '2026-06-30T08:15:00.000Z',
+            kind: 'selection',
+            title: 'Quote to process',
+            domain: 'example.com',
+            workspaceRootPath: 'Project',
+          },
+          {
+            captureId: 'overview-client-capture',
+            capturedAt: '2026-06-30T08:30:00.000Z',
+            kind: 'page',
+            title: 'Client capture must stay global',
+            workspaceRootPath: 'ClientA',
+          },
+          {
+            captureId: 'overview-unassigned-capture',
+            capturedAt: '2026-06-30T08:35:00.000Z',
+            kind: 'page',
+            title: 'Unassigned capture must stay global',
+          },
+        ],
+      });
+      await window.go.api.App.WritePluginSettings('verstak.activity', {
+        'events:workspace:Project': [
+          {
+            activityId: 'overview-selected-file',
+            occurredAt: '2026-06-30T08:50:00.000Z',
+            type: 'file.selected',
+            title: 'Selected file',
+            summary: 'Project/draft.md',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'overview-opened-file',
+            occurredAt: '2026-06-30T08:40:00.000Z',
+            type: 'file.opened',
+            title: 'draft.md',
+            summary: 'Project/draft.md',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'overview-note',
+            occurredAt: '2026-06-30T08:25:00.000Z',
+            type: 'note.saved',
+            title: 'Overview',
+            summary: 'Project/Notes/Overview.md',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'overview-file',
+            occurredAt: '2026-06-30T08:20:00.000Z',
+            type: 'file.changed',
+            title: 'draft.md',
+            summary: 'Project/draft.md',
+            workspaceRootPath: 'Project',
+          },
+          {
+            activityId: 'overview-workspace-selected',
+            occurredAt: '2026-06-30T08:10:00.000Z',
+            type: 'case.selected',
+            title: 'Workspace selected',
+            workspaceRootPath: 'Project',
+          },
+        ],
+        'work-session-candidates:workspace:Project': [
+          {
+            candidateId: 'work-session:Project:overview-note:overview-file',
+            workspaceRootPath: 'Project',
+            startedAt: '2026-06-30T08:15:00.000Z',
+            endedAt: '2026-06-30T08:25:00.000Z',
+            estimatedMinutes: 10,
+            activityCount: 2,
+            activityIds: ['overview-file', 'overview-note'],
+            activities: [
+              { activityId: 'overview-file', type: 'file.changed', occurredAt: '2026-06-30T08:20:00.000Z' },
+              { activityId: 'overview-note', type: 'note.saved', occurredAt: '2026-06-30T08:25:00.000Z' },
+            ],
+          },
+        ],
+      });
+      await window.go.api.App.WritePluginSettings('verstak.journal', {
+        'worklog:workspace:Project': [
+          {
+            entryId: 'overview-journal-1',
+            date: '2026-06-30',
+            title: 'Write project summary',
+            summary: 'Turn recent captures into a worklog entry',
+            minutes: 35,
+            workspaceRootPath: 'Project',
+          },
+        ],
+      });
+    });
+
+    await page.locator('[data-overview-action="refresh"]').click();
+
+    const overview = page.locator('[data-overview-root]');
+    await expect(overview.locator('[data-overview-summary="notes"]')).toContainText('1 total');
+    await expect(overview.locator('[data-overview-summary="notes"]')).toContainText('1 recent change');
+    await expect(overview.locator('[data-overview-summary="files"]')).toContainText('1 recent change');
+    await expect(overview.locator('[data-overview-summary="captures"]')).toContainText('2');
+    await expect(overview.locator('[data-overview-summary="activity"]')).toContainText('5 recorded events');
+    await expect(overview.locator('[data-overview-summary="journal"]')).toContainText('1');
+    await expect(overview.locator('[data-overview-summary="attention"]')).toContainText('3');
+    const attention = overview.locator('[data-overview-section="attention"]');
+    await expect(attention).toContainText('Possible journal entry');
+    await expect(attention).toContainText('Workspace: Project · 10 min · 2 activities');
+    await attention.locator('.overview-attention-row', { hasText: 'Possible journal entry' }).getByRole('button', { name: 'Review candidate' }).click();
+    await expect(page.getByRole('tab', { name: 'Journal' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.journal-root [data-journal-candidate]')).toContainText('Workspace: Project');
+    await page.locator('.journal-modal-actions').getByRole('button', { name: 'Cancel' }).click();
+    await page.getByRole('tab', { name: 'Overview' }).click();
+
+    const resume = overview.locator('[data-overview-section="continue"]');
+    const candidates = resume.locator('[data-overview-continue-item]');
+    await expect(candidates).toHaveCount(4);
+    await expect(candidates.nth(0)).toContainText('Quote to process');
+    await expect(candidates.nth(1)).toContainText('Research Report');
+    await expect(candidates.nth(2)).toContainText('Edited note "Overview"');
+    await expect(candidates.nth(3)).toContainText('Changed file "draft.md"');
+    await candidates.nth(0).click();
+
+    await expect(page.getByRole('tab', { name: 'Browser Inbox' })).toHaveAttribute('aria-selected', 'true');
+    await expect(page.locator('.browser-inbox-root')).toBeVisible({ timeout: 10000 });
+
+    await page.getByRole('tab', { name: 'Overview' }).click();
+    const recent = overview.locator('[data-overview-section="recent"]');
+    await expect(recent).toContainText('Edited note "Overview"');
+    await expect(recent).toContainText('Changed file "draft.md"');
+    await expect(recent).toContainText('Captured page "Research Report"');
+    await expect(recent).toContainText('Added journal entry "Write project summary"');
+    await expect(recent).not.toContainText('Selected file');
+    await expect(recent).not.toContainText('Workspace selected');
+    await expect(recent).not.toContainText('file.opened');
+    await expect(recent).not.toContainText('Client capture must stay global');
+    await expect(recent).not.toContainText('Unassigned capture must stay global');
+    await expect(recent.locator('[data-overview-recent-item]')).toHaveCount(5);
+    await expect(recent.locator('[data-overview-recent-item] button')).toHaveCount(0);
+
+    await overview.locator('[data-overview-filter="notes"]').click();
+    await expect(recent).toContainText('Edited note "Overview"');
+    await expect(recent).not.toContainText('Changed file "draft.md"');
+    await expect(recent).not.toContainText('Research Report');
+
+    await overview.locator('[data-overview-filter="captures"]').click();
+    await expect(recent).toContainText('Captured page "Research Report"');
+    await expect(recent).toContainText('Captured selection "Quote to process"');
+    await expect(recent).not.toContainText('Edited note "Overview"');
+
+    await overview.locator('[data-overview-filter="journal"]').click();
+    await expect(recent).toContainText('Added journal entry "Write project summary"');
+    await expect(recent).not.toContainText('Changed file "draft.md"');
+  });
+});

frontend/e2e/workspace-templates.spec.js

@@ -0,0 +1,98 @@
+import { test, expect } from '@playwright/test';
+import { waitForAppReady, setupConsoleCollector, resetMockState } from './helpers.js';
+
+test.describe('Workspace templates', () => {
+  let consoleCollector;
+
+  test.beforeEach(async ({ page }) => {
+    consoleCollector = setupConsoleCollector(page);
+    await resetMockState(page);
+    await page.goto('/');
+    await waitForAppReady(page);
+  });
+
+  test.afterEach(async () => {
+    consoleCollector.assertNoErrors();
+  });
+
+  async function openCreateModal(page) {
+    await page.locator('button[title="New workspace"]').click();
+    const modal = page.locator('[data-workspace-create-modal]');
+    await expect(modal).toBeVisible();
+    return modal;
+  }
+
+  test('creation modal validates names, shows template tools, and persists the selected snapshot', async ({ page }) => {
+    const modal = await openCreateModal(page);
+    await expect(modal.locator('[data-workspace-template]')).toHaveValue('default');
+    await expect(modal.locator('[data-workspace-template-tools]')).toContainText('Notes');
+    await expect(modal.locator('[data-workspace-template-tools]')).toContainText('Browser Inbox');
+
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+    await expect(modal.locator('[data-workspace-create-error]')).toContainText('Name is required');
+
+    await modal.locator('[data-workspace-name]').fill('bad/name');
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+    await expect(modal.locator('[data-workspace-create-error]')).toContainText('invalid-workspace-name');
+
+    await modal.locator('[data-workspace-name]').fill('ProjectPlan');
+    await modal.locator('[data-workspace-template]').selectOption('project');
+    await expect(modal.locator('[data-workspace-template-description]')).toContainText('Project planning');
+    await expect(modal.locator('[data-workspace-template-tools]')).toContainText('Todos');
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+
+    await expect(page.locator('.wt-label').filter({ hasText: 'ProjectPlan' })).toBeVisible();
+    await expect.poll(async () => page.evaluate(async () => {
+      const result = await window.go.api.App.GetWorkspaceMetadata('ProjectPlan');
+      const metadata = Array.isArray(result) ? result[0] : result;
+      return {
+        templateId: metadata.createdFromTemplate?.templateId,
+        tools: metadata.workspaceTools,
+      };
+    })).toEqual({
+      templateId: 'project',
+      tools: ['verstak.notes', 'verstak.files', 'verstak.todo', 'verstak.journal', 'verstak.activity', 'verstak.browser-inbox'],
+    });
+
+    await expect(page.getByRole('tab', { name: 'Todos' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Journal' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Secrets' })).toHaveCount(0);
+  });
+
+  test('Minimal keeps global tools available while limiting workspace tabs', async ({ page }) => {
+    const modal = await openCreateModal(page);
+    await modal.locator('[data-workspace-name]').fill('MinimalSpace');
+    await modal.locator('[data-workspace-template]').selectOption('minimal');
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+
+    await expect(page.getByRole('tab', { name: 'Overview' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Notes' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Files' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Todos' })).toHaveCount(0);
+    await expect(page.getByRole('tab', { name: 'Journal' })).toHaveCount(0);
+    await expect(page.getByRole('tab', { name: 'Secrets' })).toHaveCount(0);
+    await expect(page.locator('.sidebar .plugin-item').filter({ hasText: 'Todos' })).toBeVisible();
+    await expect(page.locator('.sidebar .plugin-item').filter({ hasText: 'Browser Inbox' })).toBeVisible();
+  });
+
+  test('Admin shows Secrets when available and missing workspace plugins degrade without breaking tabs', async ({ page }) => {
+    let modal = await openCreateModal(page);
+    await modal.locator('[data-workspace-name]').fill('AdminSpace');
+    await modal.locator('[data-workspace-template]').selectOption('admin');
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+    await expect(page.getByRole('tab', { name: 'Secrets' })).toBeVisible();
+
+    await page.evaluate(() => window.__wailsMock.setPluginStatus('verstak.todo', 'disabled', false));
+    modal = await openCreateModal(page);
+    await modal.locator('[data-workspace-name]').fill('ProjectWithoutTodo');
+    await modal.locator('[data-workspace-template]').selectOption('project');
+    await modal.getByRole('button', { name: 'Create workspace' }).click();
+
+    await expect(page.getByRole('tab', { name: 'Notes' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Files' })).toBeVisible();
+    await expect(page.getByRole('tab', { name: 'Todos' })).toHaveCount(0);
+
+    await page.locator('.wt-label').filter({ hasText: 'AdminSpace' }).click();
+    await expect(page.getByRole('tab', { name: 'Secrets' })).toBeVisible();
+  });
+});

frontend/index.html

@@ -16,6 +16,15 @@
 </head>
 <body>
   <div id="app"></div>
-  <script type="module" src="/src/main.js"></script>
+  <script type="module">
+    // In test mode (no Wails runtime), load mock bridge first
+    if (!window['go'] || !window['go']['api']) {
+      import('/src/lib/test/wails-mock.js').then(function() {
+        import('/src/main.js');
+      });
+    } else {
+      import('/src/main.js');
+    }
+  </script>
 </body>
 </html>

frontend/package-lock.json

@@ -8,7 +8,9 @@
       "name": "verstak-desktop-frontend",
       "version": "0.1.0",
       "devDependencies": {
+        "@playwright/test": "^1.61.0",
         "@sveltejs/vite-plugin-svelte": "^3.1.0",
+        "lucide-svelte": "^0.577.0",
         "svelte": "^4.2.0",
         "vite": "^5.4.0"
       }
@@ -429,6 +431,21 @@
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
+    "node_modules/@playwright/test": {
+      "version": "1.61.0",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.61.0.tgz",
+      "integrity": "sha512-cKA5B6lpFEMyMGjxF54QihfYpB4FkEGH+qZhtArDEG+wezQAJY8Pq6C7T1SjWz+FFzt3TbyoXBQYk/0292TdJA==",
+      "dev": true,
+      "dependencies": {
+        "playwright": "1.61.0"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@rollup/rollup-android-arm-eabi": {
       "version": "4.62.0",
       "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.62.0.tgz",
@@ -966,6 +983,16 @@
       "integrity": "sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==",
       "dev": true
     },
+    "node_modules/lucide-svelte": {
+      "version": "0.577.0",
+      "resolved": "https://registry.npmjs.org/lucide-svelte/-/lucide-svelte-0.577.0.tgz",
+      "integrity": "sha512-0i88o57KsaHWnc80J57fY99CWzlZsSdtH5kKjLUJa7z8dum/9/AbINNLzJ7NiRFUdOgMnfAmJt8jFbW2zeC5qQ==",
+      "deprecated": "Package deprecated. Please use @lucide/svelte instead.",
+      "dev": true,
+      "peerDependencies": {
+        "svelte": "^3 || ^4 || ^5.0.0-next.42"
+      }
+    },
     "node_modules/magic-string": {
       "version": "0.30.21",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
@@ -1022,6 +1049,50 @@
       "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
       "dev": true
     },
+    "node_modules/playwright": {
+      "version": "1.61.0",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.61.0.tgz",
+      "integrity": "sha512-Z+7BeeqQPRRzklHsVFP4KTGIyMxKUmfeRA4WisM6G3/XW6nwGeX6fX9qYaDa+CiUqpOkb2f6X3nar05R3kSuJQ==",
+      "dev": true,
+      "dependencies": {
+        "playwright-core": "1.61.0"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "fsevents": "2.3.2"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.61.0",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.61.0.tgz",
+      "integrity": "sha512-caX7TrY3Ml6egyDX0WUcTHDxodl/b51y5wJOdCEA36QviK/s2g081hvmGs8eaE3DWb6NYZQ6BjO/QkNRPenoPA==",
+      "dev": true,
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/playwright/node_modules/fsevents": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+      "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
     "node_modules/postcss": {
       "version": "8.5.15",
       "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.15.tgz",

frontend/package.json

@@ -6,10 +6,15 @@
   "scripts": {
     "dev": "vite",
     "build": "vite build",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "test:e2e": "npx playwright test --config playwright.config.js",
+    "test:e2e:ui": "npx playwright test --config playwright.config.js --ui",
+    "test:e2e:headed": "npx playwright test --config playwright.config.js --headed"
   },
   "devDependencies": {
+    "@playwright/test": "^1.61.0",
     "@sveltejs/vite-plugin-svelte": "^3.1.0",
+    "lucide-svelte": "^0.577.0",
     "svelte": "^4.2.0",
     "vite": "^5.4.0"
   }

frontend/package.json.md5

@@ -1 +1 @@
-ef6849d398e9d32c4ae5afdea904eb49
+c02aa6458981565332c3b0bc49516b42

frontend/playwright.config.js

@@ -0,0 +1,59 @@
+import { defineConfig, devices } from '@playwright/test';
+import { fileURLToPath } from 'url';
+import { dirname, resolve } from 'path';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+const FRONTEND_PORT = 5174;
+const FRONTEND_URL = `http://localhost:${FRONTEND_PORT}`;
+const LOOPBACK_NO_PROXY = 'localhost,127.0.0.1,::1';
+
+process.env.NO_PROXY = process.env.NO_PROXY
+  ? `${process.env.NO_PROXY},${LOOPBACK_NO_PROXY}`
+  : LOOPBACK_NO_PROXY;
+process.env.no_proxy = process.env.no_proxy
+  ? `${process.env.no_proxy},${LOOPBACK_NO_PROXY}`
+  : LOOPBACK_NO_PROXY;
+
+export default defineConfig({
+  testDir: resolve(__dirname, 'e2e'),
+  testMatch: '**/*.spec.js',
+  timeout: 30000,
+  expect: { timeout: 10000 },
+  fullyParallel: false,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: 1,
+  reporter: [
+    ['list'],
+    ['json', { outputFile: resolve(__dirname, 'e2e-results/test-results.json') }],
+  ],
+  outputDir: resolve(__dirname, 'e2e-results'),
+  use: {
+    baseURL: FRONTEND_URL,
+    trace: 'on-first-retry',
+    screenshot: 'only-on-failure',
+    video: 'on-first-retry',
+    headless: true,
+    viewport: { width: 1280, height: 720 },
+  },
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+  webServer: {
+    command: `npx vite --mode test --port ${FRONTEND_PORT}`,
+    url: FRONTEND_URL,
+    reuseExistingServer: !process.env.CI,
+    timeout: 60000,
+    env: {
+      NO_PROXY: process.env.NO_PROXY,
+      no_proxy: process.env.no_proxy,
+    },
+    stdout: 'pipe',
+    stderr: 'pipe',
+  },
+});

frontend/src/App.svelte

@@ -1,33 +1,864 @@
 <script>
   import PluginManager from './lib/plugin-manager/PluginManager.svelte';
   import Sidebar from './lib/shell/Sidebar.svelte';
+  import CommandPalette from './lib/shell/CommandPalette.svelte';
+  import StatusBar from './lib/shell/StatusBar.svelte';
   import ViewContainer from './lib/shell/ViewContainer.svelte';
+  import VaultSelection from './lib/shell/VaultSelection.svelte';
+  import WorkbenchHost from './lib/shell/WorkbenchHost.svelte';
+  import WorkspaceHost from './lib/shell/WorkspaceHost.svelte';
+  import * as App from '../wailsjs/go/api/App';
+  import { debug } from './lib/log/debug.js';
+  import { onDestroy, onMount, tick } from 'svelte';
+  import { i18n } from './lib/i18n/index.js';
 
-  let currentView = 'plugin-manager';
+  let currentView = 'workspace';
+  let vaultStatus = { status: 'unknown', path: '', vaultId: '' };
+  let needsVaultSelection = false;
+  let loading = true;
+  let locale = i18n.getLocale();
+  const unsubscribeLocale = i18n.subscribe((nextLocale) => { locale = nextLocale; });
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  let activeView = null;
+  let activeViewPluginId = '';
+  let activeSettingsPluginId = '';
+  let activeSettingsPanelId = '';
+  let openedResource = null;
+
+  let workspaceNodes = [];
+  let selectedWorkspaceName = '';
+  let activeWorkspaceToolKey = '';
+  let navigationStack = [];
+  let navigationIndex = -1;
+  let applyingNavigation = false;
+  let lastMouseHistoryDirection = '';
+  let lastMouseHistoryAt = 0;
+
+  function flog(msg) {
+    App.WriteFrontendLog('App', msg);
+  }
+
+  function resultOrError(response, fallbackValue) {
+    return typeof response === 'string' ? [fallbackValue, response] : [response, ''];
+  }
+
+  function workspaceName(workspace) {
+    return String(workspace?.name || workspace?.rootPath || workspace?.id || '');
+  }
+
+  function workspaceAsNode(workspace, order) {
+    const name = workspaceName(workspace);
+    return {
+      id: name,
+      workspaceId: workspace?.id || workspace?.workspaceId || '',
+      type: workspace?.type || 'space',
+      title: workspace?.title || name,
+      name,
+      rootPath: workspace?.rootPath || name,
+      status: workspace?.status || 'active',
+      order,
+    };
+  }
+
+  function emitWorkspaceActive(name) {
+    window.dispatchEvent(new CustomEvent('verstak:workspace-active-changed', {
+      detail: { workspaceName: name || '' }
+    }));
+  }
+
+  function clearWorkspaceSelection() {
+    selectedWorkspaceName = '';
+    emitWorkspaceActive('');
+  }
+
+  async function openDefaultWorkspaceRoute() {
+    try {
+      const [workspaces, err] = resultOrError(await App.ListWorkspaces(), []);
+      if (err || !workspaces || workspaces.length === 0) {
+        workspaceNodes = [];
+        selectedWorkspaceName = '';
+        currentView = 'workspace-empty';
+        emitWorkspaceActive('');
+        return;
+      }
+
+      workspaceNodes = workspaces.map(workspaceAsNode);
+      let currentWorkspace = null;
+      try {
+        currentWorkspace = await App.GetCurrentWorkspace();
+      } catch {
+        currentWorkspace = null;
+      }
+      const currentName = workspaceName(currentWorkspace);
+      const selected = workspaces.find((workspace) => workspaceName(workspace) === currentName) || workspaces[0];
+      selectedWorkspaceName = workspaceName(selected);
+      if (selectedWorkspaceName) {
+        try { await App.SetCurrentWorkspace(selectedWorkspaceName); } catch {}
+        currentView = 'workspace';
+      } else {
+        currentView = 'workspace-empty';
+      }
+      emitWorkspaceActive(selectedWorkspaceName);
+    } catch (e) {
+      debug.log('[App] openDefaultWorkspaceRoute ERROR', String(e));
+      workspaceNodes = [];
+      selectedWorkspaceName = '';
+      currentView = 'workspace-empty';
+      emitWorkspaceActive('');
+    }
+  }
+
+  function currentSnapshot() {
+    return {
+      currentView,
+      activeView,
+      activeViewPluginId,
+      activeSettingsPluginId,
+      activeSettingsPanelId,
+      openedResource,
+      selectedWorkspaceName,
+      activeWorkspaceToolKey,
+    };
+  }
+
+  function sameSnapshot(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+  }
+
+  function pushNavigation(snapshot = currentSnapshot()) {
+    if (applyingNavigation) return;
+    if (navigationIndex >= 0 && sameSnapshot(navigationStack[navigationIndex], snapshot)) return;
+    if (navigationIndex < navigationStack.length - 1) {
+      navigationStack = navigationStack.slice(0, navigationIndex + 1);
+    }
+    navigationStack = [...navigationStack, snapshot];
+    navigationIndex = navigationStack.length - 1;
+  }
+
+  function applySnapshot(snapshot) {
+    applyingNavigation = true;
+    currentView = snapshot.currentView;
+    activeView = snapshot.activeView;
+    activeViewPluginId = snapshot.activeViewPluginId;
+    activeSettingsPluginId = snapshot.activeSettingsPluginId;
+    activeSettingsPanelId = snapshot.activeSettingsPanelId;
+    openedResource = snapshot.openedResource;
+    selectedWorkspaceName = snapshot.selectedWorkspaceName;
+    activeWorkspaceToolKey = snapshot.activeWorkspaceToolKey || '';
+    emitWorkspaceActive(currentView === 'workspace' ? selectedWorkspaceName : '');
+    applyingNavigation = false;
+  }
+
+  function navigateBack() {
+    if (navigationIndex <= 0) return false;
+    navigationIndex -= 1;
+    applySnapshot(navigationStack[navigationIndex]);
+    return true;
+  }
+
+  function navigateForward() {
+    if (navigationIndex >= navigationStack.length - 1) return false;
+    navigationIndex += 1;
+    applySnapshot(navigationStack[navigationIndex]);
+    return true;
+  }
+
+  function mouseHistoryDirection(event) {
+    if (currentView === 'workspace') return '';
+    if (event.button === 3 || event.button === 8 || event.buttons === 8 || event.buttons === 128 || event.which === 8) return 'back';
+    if (event.button === 4 || event.button === 9 || event.buttons === 16 || event.buttons === 256 || event.which === 9) return 'forward';
+    return '';
+  }
+
+  function keyHistoryDirection(event) {
+    if (currentView === 'workspace' || currentView === 'workbench') return '';
+    const key = event.key || '';
+    if (event.altKey && key === 'ArrowLeft') return 'back';
+    if (event.altKey && key === 'ArrowRight') return 'forward';
+    if (key === 'BrowserBack' || key === 'XF86Back') return 'back';
+    if (key === 'BrowserForward' || key === 'XF86Forward') return 'forward';
+    if (event.keyCode === 166) return 'back';
+    if (event.keyCode === 167) return 'forward';
+    return '';
+  }
+
+  function handleHistoryRequest(direction, event) {
+    if (!direction || event?.defaultPrevented) return;
+    if (event?.type === 'mousedown' || event?.type === 'mouseup' || event?.type === 'auxclick' || event?.type === 'pointerdown') {
+      const now = Date.now();
+      if (direction === lastMouseHistoryDirection && now - lastMouseHistoryAt < 120) return;
+      lastMouseHistoryDirection = direction;
+      lastMouseHistoryAt = now;
+      debug.log('[App] mouse history event', {
+        type: event.type,
+        direction,
+        button: event.button,
+        buttons: event.buttons,
+        which: event.which,
+        pointerType: event.pointerType || '',
+        currentView,
+      });
+    }
+    const moved = direction === 'back' ? navigateBack() : navigateForward();
+    if (moved && event) {
+      event.preventDefault();
+      event.stopPropagation();
+    }
+  }
+
+  async function checkVault() {
+    debug.log('[App] checkVault: START');
+    flog('checkVault: START');
+    loading = true;
+    try {
+      debug.log('[App] checkVault: calling GetAppSettings...');
+      const settings = await App.GetAppSettings();
+      debug.log('[App] checkVault: GetAppSettings returned', settings);
+      flog('checkVault: GetAppSettings returned');
+      if (settings?.debug) debug.enable();
+
+      debug.log('[App] checkVault: calling GetVaultStatus...');
+      vaultStatus = await App.GetVaultStatus() || { status: 'unknown', path: '', vaultId: '' };
+      debug.log('[App] checkVault: GetVaultStatus returned', vaultStatus);
+      flog('checkVault: vaultStatus=' + vaultStatus.status);
+
+      if (!settings.currentVaultPath || vaultStatus.status !== 'open') {
+        debug.log('[App] checkVault: vault not open, needsVaultSelection=true');
+        flog('checkVault: needsVaultSelection=true');
+        needsVaultSelection = true;
+      } else {
+        debug.log('[App] checkVault: vault open, needsVaultSelection=false');
+        flog('checkVault: needsVaultSelection=false');
+        needsVaultSelection = false;
+        await openDefaultWorkspaceRoute();
+      }
+    } catch (e) {
+      debug.log('[App] checkVault: ERROR', String(e));
+      flog('checkVault: ERROR: ' + String(e));
+      console.error('[App] startup check failed:', e);
+      needsVaultSelection = true;
+    }
+    loading = false;
+    await tick();
+    debug.log('[App] checkVault: END, loading=false');
+    flog('checkVault: END, loading=false');
+  }
+
+  async function onVaultOpened() {
+    debug.log('[App] onVaultOpened');
+    needsVaultSelection = false;
+    vaultStatus = { status: 'open', path: '', vaultId: '' };
+    await openDefaultWorkspaceRoute();
+    pushNavigation();
+  }
+
+  function onNav(e) {
+    debug.log('[App] onNav:', e.detail.viewId);
+    currentView = e.detail.viewId;
+    if (currentView !== 'workspace') clearWorkspaceSelection();
+    pushNavigation();
+  }
+
+  function onOpenView(e) {
+    debug.log('[App] onOpenView:', e.detail.viewId, 'plugin:', e.detail.pluginId);
+    activeView = e.detail.viewId;
+    activeViewPluginId = e.detail.pluginId || '';
+    currentView = 'plugin-view';
+    clearWorkspaceSelection();
+    pushNavigation();
+  }
+
+  function onOpenSettings(e) {
+    debug.log('[App] onOpenSettings:', e.detail.pluginId, e.detail.panelId);
+    activeSettingsPluginId = e.detail.pluginId;
+    activeSettingsPanelId = e.detail.panelId || '';
+    currentView = 'plugin-manager';
+    clearWorkspaceSelection();
+    pushNavigation();
+  }
+
+  function onWorkbenchOpened(e) {
+    debug.log('[App] onWorkbenchOpened:', e.detail?.request?.path, e.detail?.providerId);
+    if (currentView === 'workspace') pushNavigation();
+    openedResource = e.detail;
+    currentView = 'workbench';
+    pushNavigation();
+  }
+
+  function onWorkspaceToolSelected(e) {
+    activeWorkspaceToolKey = e.detail?.toolKey || '';
+    if (currentView === 'workspace') pushNavigation();
+  }
+
+  function onWorkspaceSelected(e) {
+    debug.log('[App] onWorkspaceSelected:', e.detail?.workspaceName);
+    selectedWorkspaceName = e.detail?.workspaceName || '';
+    workspaceNodes = e.detail?.nodes || workspaceNodes;
+    if (selectedWorkspaceName) {
+      activeView = null;
+      activeViewPluginId = '';
+      activeSettingsPluginId = '';
+      activeSettingsPanelId = '';
+      openedResource = null;
+      currentView = 'workspace';
+      emitWorkspaceActive(selectedWorkspaceName);
+      pushNavigation();
+    }
+  }
+
+  function onCloseSettings() {
+    debug.log('[App] onCloseSettings');
+    activeSettingsPluginId = '';
+    activeSettingsPanelId = '';
+  }
+
+  function onNavigateBack(e) {
+    if (currentView === 'workbench') return;
+    if (currentView === 'workspace') {
+      const upBtn = document.querySelector('[data-files-action="up"]');
+      if (upBtn && !upBtn.disabled) {
+        upBtn.click();
+        e?.preventDefault?.();
+        return;
+      }
+    }
+    if (navigateBack()) e?.preventDefault?.();
+  }
+
+  function onNavigateForward(e) {
+    if (currentView === 'workbench') return;
+    if (currentView === 'workspace') {
+      const fwdBtn = document.querySelector('[data-files-action="forward"]');
+      if (fwdBtn && !fwdBtn.disabled) {
+        fwdBtn.click();
+        e?.preventDefault?.();
+        return;
+      }
+    }
+    if (navigateForward()) e?.preventDefault?.();
+  }
+
+  function onCloseWorkbench(e) {
+    if (currentView !== 'workbench') return;
+    if (!navigateBack() && selectedWorkspaceName) {
+      currentView = 'workspace';
+      pushNavigation();
+    }
+    e?.preventDefault?.();
+  }
+
+  function onGlobalKeydown(e) {
+    handleHistoryRequest(keyHistoryDirection(e), e);
+  }
+
+  function onGlobalMouse(e) {
+    handleHistoryRequest(mouseHistoryDirection(e), e);
+  }
+
+  // Listen for events
+  if (typeof window !== 'undefined') {
+    window.addEventListener('verstak:vault-opened', onVaultOpened);
+    window.addEventListener('verstak:nav', onNav);
+    window.addEventListener('verstak:open-view', onOpenView);
+    window.addEventListener('verstak:open-settings', onOpenSettings);
+    window.addEventListener('verstak:close-settings', onCloseSettings);
+    window.addEventListener('verstak:workbench-opened', onWorkbenchOpened);
+    window.addEventListener('verstak:workspace-selected', onWorkspaceSelected);
+    window.addEventListener('verstak:workspace-tool-selected', onWorkspaceToolSelected);
+    window.addEventListener('verstak:navigate-back', onNavigateBack);
+    window.addEventListener('verstak:navigate-forward', onNavigateForward);
+    window.addEventListener('verstak:close-workbench', onCloseWorkbench);
+    window.addEventListener('keydown', onGlobalKeydown);
+    window.addEventListener('pointerdown', onGlobalMouse, true);
+    window.addEventListener('mousedown', onGlobalMouse, true);
+    window.addEventListener('mouseup', onGlobalMouse, true);
+    window.addEventListener('auxclick', onGlobalMouse, true);
+  }
+
+  onMount(async () => {
+    await checkVault();
+    pushNavigation();
+  });
+
+  onDestroy(unsubscribeLocale);
 </script>
 
-<main>
-  <Sidebar />
+{#if loading}
+  <div class="app-loading">
+    <p>{tr('app.loading')}</p>
+  </div>
+{:else if needsVaultSelection}
+  <VaultSelection />
+{:else}
+  <main>
+    <Sidebar showGlobalSearch={currentView !== 'workspace' && currentView !== 'workspace-empty'} />
+    <CommandPalette />
 
-  <section class="content">
-    {#if currentView === 'plugin-manager'}
-      <PluginManager />
-    {:else}
-      <ViewContainer />
-    {/if}
-  </section>
-</main>
+    <section class="content-shell">
+      <section class="content scroll-surface">
+        {#if currentView === 'plugin-manager'}
+          <PluginManager {activeSettingsPluginId} {activeSettingsPanelId} />
+        {:else if currentView === 'workbench'}
+          <WorkbenchHost {openedResource} />
+        {:else if currentView === 'workspace' || currentView === 'workspace-empty'}
+          <WorkspaceHost
+            selectedWorkspaceName={selectedWorkspaceName}
+            nodes={workspaceNodes}
+            bind:activeToolKey={activeWorkspaceToolKey}
+          />
+        {:else}
+          <ViewContainer {activeView} {activeViewPluginId} />
+        {/if}
+      </section>
+      <StatusBar />
+    </section>
+  </main>
+{/if}
 
 <style>
+  :global(*) {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+  }
+
+  :global(:root) {
+    --vt-color-background: #101020;
+    --vt-color-surface: #15152c;
+    --vt-color-surface-muted: #111629;
+    --vt-color-surface-hover: #1b2440;
+    --vt-color-surface-selected: rgba(78, 204, 163, 0.14);
+    --vt-color-border: #202b46;
+    --vt-color-border-strong: #2c456a;
+    --vt-color-text-primary: #f4f7fb;
+    --vt-color-text-secondary: #b7c0d4;
+    --vt-color-text-muted: #7f8aa3;
+    --vt-color-accent: #4ecca3;
+    --vt-color-accent-muted: rgba(78, 204, 163, 0.14);
+    --vt-color-danger: #e94560;
+    --vt-color-danger-muted: rgba(233, 69, 96, 0.14);
+    --vt-color-warning: #ffc857;
+    --vt-color-warning-muted: rgba(255, 200, 87, 0.14);
+    --vt-color-success: #4ecca3;
+    --vt-space-1: 0.25rem;
+    --vt-space-2: 0.5rem;
+    --vt-space-3: 0.75rem;
+    --vt-space-4: 1rem;
+    --vt-space-6: 1.5rem;
+    --vt-space-8: 2rem;
+    --vt-radius-sm: 4px;
+    --vt-radius-md: 6px;
+    --vt-radius-lg: 8px;
+    --vt-font-xs: 0.72rem;
+    --vt-font-sm: 0.8rem;
+    --vt-font-md: 0.88rem;
+    --vt-font-lg: 1rem;
+    --vt-focus-ring: 0 0 0 2px rgba(78, 204, 163, 0.34);
+    --vt-elevation-menu: 0 14px 32px rgba(0, 0, 0, 0.42);
+  }
+
+  :global(html),
+  :global(body),
+  :global(#app) {
+    width: 100%;
+    height: 100%;
+  }
+
+  :global(body) {
+    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+    background: var(--vt-color-background);
+    color: var(--vt-color-text-primary);
+    overflow: hidden;
+  }
+
+  :global(button) {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 0.35rem;
+    min-height: 2rem;
+    padding: 0.4rem 0.85rem;
+    border: 1px solid var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-md);
+    background: var(--vt-color-surface-hover);
+    color: var(--vt-color-text-primary);
+    font: inherit;
+    font-size: var(--vt-font-sm);
+    font-weight: 600;
+    line-height: 1.2;
+    cursor: pointer;
+    transition: background 0.15s ease, border-color 0.15s ease, color 0.15s ease, opacity 0.15s ease;
+  }
+
+  :global(button:hover:not(:disabled)) {
+    background: #203050;
+    border-color: var(--vt-color-accent);
+    color: #ffffff;
+  }
+
+  :global(button:focus-visible) {
+    outline: 0;
+    box-shadow: var(--vt-focus-ring);
+  }
+
+  :global(button:disabled) {
+    opacity: 0.55;
+    cursor: not-allowed;
+  }
+
+  :global(.btn-primary) {
+    background: var(--vt-color-accent);
+    border-color: var(--vt-color-accent);
+    color: #101827;
+  }
+
+  :global(.btn-primary:hover:not(:disabled)) {
+    background: #63d9b3;
+    border-color: #63d9b3;
+    color: #101827;
+  }
+
+  :global(.btn-secondary) {
+    background: var(--vt-color-surface-hover);
+    border-color: var(--vt-color-border-strong);
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.btn-danger) {
+    background: var(--vt-color-danger);
+    border-color: var(--vt-color-danger);
+    color: #ffffff;
+  }
+
+  :global(.btn-danger:hover:not(:disabled)) {
+    background: #ff5b73;
+    border-color: #ff5b73;
+  }
+
+  :global(.btn-ghost) {
+    background: transparent;
+    border-color: transparent;
+    color: var(--vt-color-text-secondary);
+  }
+
+  :global(.btn-ghost:hover:not(:disabled)) {
+    background: var(--vt-color-surface-hover);
+    border-color: var(--vt-color-border);
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.btn-icon) {
+    width: 2rem;
+    min-width: 2rem;
+    padding: 0;
+  }
+
+  :global(.vt-page) {
+    min-width: 0;
+    min-height: 0;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+    background: var(--vt-color-background);
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.vt-page-header),
+  :global(.vt-toolbar) {
+    min-height: 2.75rem;
+    display: flex;
+    align-items: center;
+    gap: var(--vt-space-2);
+    padding: var(--vt-space-2) var(--vt-space-3);
+    border-bottom: 1px solid var(--vt-color-border);
+    background: var(--vt-color-surface-muted);
+    flex-shrink: 0;
+  }
+
+  :global(.vt-page-title) {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    color: var(--vt-color-text-primary);
+    font-size: var(--vt-font-lg);
+    font-weight: 650;
+  }
+
+  :global(.vt-page-subtitle) {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    color: var(--vt-color-text-muted);
+    font-size: var(--vt-font-sm);
+  }
+
+  :global(.vt-toolbar-group) {
+    display: inline-flex;
+    align-items: center;
+    gap: var(--vt-space-1);
+    padding: 0 var(--vt-space-2) 0 0;
+    border-right: 1px solid var(--vt-color-border);
+  }
+
+  :global(.vt-toolbar-group:last-child) {
+    border-right: 0;
+    padding-right: 0;
+  }
+
+  :global(.vt-button) {
+    min-height: 2rem;
+    border-radius: var(--vt-radius-md);
+  }
+
+  :global(.vt-icon-button) {
+    width: 2rem;
+    min-width: 2rem;
+    height: 2rem;
+    min-height: 2rem;
+    padding: 0;
+  }
+
+  :global(.vt-tabbar) {
+    display: flex;
+    align-items: center;
+    gap: var(--vt-space-1);
+    padding: var(--vt-space-1) var(--vt-space-3) 0;
+    border-bottom: 1px solid var(--vt-color-border);
+    background: #12162a;
+    overflow-x: auto;
+    flex-shrink: 0;
+  }
+
+  :global(.vt-tab) {
+    flex-shrink: 0;
+    min-height: 2.1rem;
+    padding: 0.38rem 0.78rem;
+    border: 1px solid transparent;
+    border-bottom: 0;
+    border-radius: var(--vt-radius-md) var(--vt-radius-md) 0 0;
+    background: transparent;
+    color: var(--vt-color-text-muted);
+    font-size: var(--vt-font-sm);
+  }
+
+  :global(.vt-tab:hover:not(:disabled)) {
+    background: var(--vt-color-surface-hover);
+    border-color: transparent;
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.vt-tab.is-active),
+  :global(.vt-tab.active) {
+    background: var(--vt-color-background);
+    border-color: var(--vt-color-border);
+    color: var(--vt-color-accent);
+  }
+
+  :global(.vt-list-row) {
+    border-bottom: 1px solid rgba(32, 43, 70, 0.72);
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.vt-list-row:hover) {
+    background: var(--vt-color-surface-hover);
+  }
+
+  :global(.vt-list-row.selected),
+  :global(.vt-list-row.active),
+  :global(.vt-list-row.is-selected) {
+    background: var(--vt-color-surface-selected);
+    box-shadow: inset 2px 0 0 var(--vt-color-accent);
+  }
+
+  :global(.vt-card) {
+    border: 1px solid var(--vt-color-border);
+    border-radius: var(--vt-radius-lg);
+    background: var(--vt-color-surface);
+  }
+
+  :global(.vt-split-pane) {
+    display: grid;
+    grid-template-columns: minmax(16rem, 22rem) minmax(0, 1fr);
+    min-height: 0;
+    height: 100%;
+    background: var(--vt-color-background);
+  }
+
+  :global(.vt-split-list) {
+    min-height: 0;
+    overflow: auto;
+    border-right: 1px solid var(--vt-color-border);
+    background: var(--vt-color-surface-muted);
+  }
+
+  :global(.vt-split-detail) {
+    min-width: 0;
+    min-height: 0;
+    overflow: auto;
+    padding: var(--vt-space-4);
+  }
+
+  :global(.vt-empty-state) {
+    min-height: 9rem;
+    display: flex;
+    flex: 1;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    gap: var(--vt-space-2);
+    padding: var(--vt-space-8);
+    color: var(--vt-color-text-muted);
+    font-size: var(--vt-font-sm);
+    line-height: 1.45;
+    text-align: center;
+  }
+
+  :global(.vt-empty-title) {
+    color: var(--vt-color-text-secondary);
+    font-size: var(--vt-font-md);
+    font-weight: 650;
+  }
+
+  :global(.vt-inline-alert) {
+    border: 1px solid var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-md);
+    background: var(--vt-color-surface-muted);
+    color: var(--vt-color-text-secondary);
+    padding: var(--vt-space-3);
+    font-size: var(--vt-font-sm);
+    line-height: 1.45;
+  }
+
+  :global(.vt-inline-alert.error) {
+    border-color: rgba(233, 69, 96, 0.55);
+    background: var(--vt-color-danger-muted);
+    color: #ffc6ce;
+  }
+
+  :global(.vt-badge) {
+    display: inline-flex;
+    align-items: center;
+    min-height: 1.25rem;
+    padding: 0.1rem 0.4rem;
+    border: 1px solid var(--vt-color-border);
+    border-radius: var(--vt-radius-sm);
+    background: var(--vt-color-surface-muted);
+    color: var(--vt-color-text-muted);
+    font-size: var(--vt-font-xs);
+    font-weight: 650;
+    line-height: 1;
+  }
+
+  :global(.vt-badge.accent) {
+    border-color: rgba(78, 204, 163, 0.4);
+    background: var(--vt-color-accent-muted);
+    color: var(--vt-color-accent);
+  }
+
+  :global(.vt-menu) {
+    border: 1px solid var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-md);
+    background: var(--vt-color-surface);
+    color: var(--vt-color-text-primary);
+    box-shadow: var(--vt-elevation-menu);
+  }
+
+  :global(.vt-menu-item) {
+    display: flex;
+    align-items: center;
+    gap: var(--vt-space-2);
+    padding: 0.42rem 0.7rem;
+    color: var(--vt-color-text-secondary);
+    cursor: pointer;
+  }
+
+  :global(.vt-menu-item:hover) {
+    background: var(--vt-color-surface-hover);
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.vt-menu-item.danger) {
+    color: #ff9aaa;
+  }
+
+  :global(.scroll-surface) {
+    min-width: 0;
+    min-height: 0;
+    overflow: auto;
+    scrollbar-gutter: stable;
+  }
+
+  :global(*) {
+    scrollbar-width: thin;
+    scrollbar-color: var(--vt-color-border-strong) var(--vt-color-background);
+  }
+
+  :global(*::-webkit-scrollbar) {
+    width: 8px;
+    height: 8px;
+  }
+
+  :global(*::-webkit-scrollbar-track) {
+    background: var(--vt-color-background);
+  }
+
+  :global(*::-webkit-scrollbar-thumb) {
+    background: var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-sm);
+  }
+
+  :global(*::-webkit-scrollbar-thumb:hover) {
+    background: #1a4a7a;
+  }
+
+  .app-loading {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    height: 100vh;
+    background: var(--vt-color-background);
+    color: var(--vt-color-text-muted);
+    font-size: 1rem;
+  }
+
   main {
     display: flex;
     height: 100vh;
-    background: #1a1a2e;
-  }
-  .content {
-    flex: 1;
-    display: flex;
-    flex-direction: column;
+    width: 100%;
+    background: var(--vt-color-background);
     overflow: hidden;
   }
+
+  .content-shell {
+    flex: 1;
+    min-width: 0;
+    min-height: 0;
+    display: flex;
+    flex-direction: column;
+  }
+
+  .content {
+    flex: 1;
+    min-width: 0;
+    min-height: 0;
+    display: flex;
+    flex-direction: column;
+    padding: 0;
+  }
+
+  @media (max-width: 720px) {
+    main {
+      flex-direction: column;
+    }
+
+    .content {
+      padding: 0.75rem;
+    }
+  }
 </style>

frontend/src/lib/i18n/catalogs/en.js

@@ -0,0 +1,225 @@
+export default {
+  'app.loading': 'Loading Verstak...',
+  'settings.title': 'Settings',
+  'settings.language': 'Language',
+  'settings.language.system': 'System / Системный',
+  'settings.language.en': 'English',
+  'settings.language.ru': 'Русский',
+  'settings.pluginManager': 'Plugin Manager',
+  'statusBar.label': 'Status bar',
+  'vault.label': 'Vault: {status}',
+  'vault.status.open': 'open',
+  'vault.status.closed': 'closed',
+  'vault.status.unknown': 'unknown',
+  'sidebar.tools': 'Tools',
+  'sidebar.error.contributions': 'Failed to load plugin contributions',
+  'sidebar.error.load': 'Failed to load sidebar',
+  'sidebar.error.ui': 'Plugin UI error',
+  'workspace.overview': 'Overview',
+  'workspace.search': 'Workspace search',
+  'workspace.tools': 'Workspace tools',
+  'workspace.tool': 'Workspace tool',
+  'workspace.emptyTools': 'No workspace tools available',
+  'workspace.emptyToolsHint': 'Enable plugins with workspace tools or open Plugin Manager from settings.',
+  'workspace.select': 'Select a workspace',
+  'workspace.selectHint': 'Use the + button in Workspaces to add your first project.',
+  'common.details': 'Details',
+  'common.plugin': 'Plugin',
+  'common.component': 'Component',
+  'pluginView.error': 'Plugin view error',
+  'pluginView.failed': 'Plugin UI failed',
+  'pluginView.noVisual': 'This plugin does not provide a visual view yet.',
+  'pluginView.viewId': 'View ID',
+  'pluginView.bundleUnavailable': 'Frontend bundle unavailable',
+  'pluginView.unavailable': 'View is unavailable.',
+  'pluginView.select': 'Select a plugin view from the sidebar',
+  'pluginView.selectHint': 'Plugin views will appear here',
+  'common.retry': '⟳ Retry',
+  'common.source': 'Source',
+  'common.status': 'Status',
+  'common.capability': 'Capability',
+  'common.provider': 'Provider',
+  'status.loaded': 'loaded',
+  'status.degraded': 'degraded',
+  'status.failed': 'failed',
+  'status.disabled': 'disabled',
+  'status.missing': 'missing',
+  'pluginManager.reloading': '⟳ Reloading...',
+  'pluginManager.reload': '⟳ Reload',
+  'pluginManager.scanning': 'Scanning plugin directories...',
+  'pluginManager.summary.plugins': '{count} plugin(s) discovered',
+  'pluginManager.summary.capabilities': '{count} capabilities registered',
+  'pluginManager.summary.permissions': '{count} permissions known',
+  'pluginManager.scanSummary': 'Plugin scan summary',
+  'pluginManager.health': 'Plugin Health',
+  'pluginManager.permissionRisk': 'Permission Risk',
+  'pluginManager.elevatedPermissions': '{count} plugins request elevated permissions',
+  'pluginManager.none': 'No plugins found',
+  'pluginManager.scannedDirs': 'Plugin directories scanned:',
+  'pluginManager.userPlugins': 'user plugins',
+  'pluginManager.bundledPlugins': 'bundled plugins (app directory)',
+  'pluginManager.installHint': 'Place a plugin folder with plugin.json in one of these directories and click Reload.',
+  'pluginManager.missingTitle': 'Missing Installed Plugins',
+  'pluginManager.missingHint': 'These plugins are required by this vault but their packages are not installed locally.',
+  'pluginManager.missingPackage': "This plugin is listed in the vault's desired plugins but the package is not installed.",
+  'pluginManager.capabilityRegistry': 'Capability Registry ({count})',
+  'pluginManager.settingsError': 'Settings Error',
+  'pluginManager.pluginSettings': 'Plugin Settings',
+  'pluginManager.settingsBundleUnavailable': 'Settings panel frontend bundle not available',
+  'common.none': 'none',
+  'common.unknown': 'unknown',
+  'pluginCard.count.views': '{count} view(s)',
+  'pluginCard.count.commands': '{count} command(s)',
+  'pluginCard.count.searchProviders': '{count} search provider(s)',
+  'pluginCard.count.sidebar': '{count} sidebar item(s)',
+  'pluginCard.count.statusbar': '{count} status bar item(s)',
+  'pluginCard.count.openProviders': '{count} openProviders',
+  'pluginCard.count.workspace': '{count} workspace item(s)',
+  'pluginCard.degraded': 'Plugin is usable, but some optional capabilities are unavailable.',
+  'pluginCard.name': 'Name',
+  'pluginCard.contributions': 'Contributions',
+  'pluginCard.technicalDetails': 'Technical details',
+  'pluginCard.apiVersion': 'API Version',
+  'pluginCard.root': 'Root',
+  'pluginCard.provides': 'Provides',
+  'pluginCard.requires': 'Requires',
+  'pluginCard.missingRequired': 'Missing required capabilities',
+  'pluginCard.optionalRequires': 'Optional Requires',
+  'pluginCard.optionalUnavailable': 'Optional capabilities not available — plugin running in degraded mode',
+  'pluginCard.permissions': 'Permissions',
+  'pluginCard.enabling': '⟳ Enabling...',
+  'pluginCard.enable': '▶ Enable',
+  'pluginCard.disabling': '⟳ Disabling...',
+  'pluginCard.disable': '⏸ Disable',
+  'pluginCard.openVault': 'Open a vault to manage plugin state',
+  'pluginCard.missingUiPermission': 'Plugin has UI contributions but lacks ui.register permission',
+  'common.loading': 'Loading...',
+  'common.browse': 'Browse...',
+  'vaultSelection.chooseNew': 'Choose or enter a folder for the new vault.',
+  'vaultSelection.createError': 'Could not create vault: {error}',
+  'vaultSelection.openError': 'Could not open vault: {error}',
+  'vaultSelection.chooseExisting': 'Choose or enter an existing vault.',
+  'vaultSelection.subtitle': 'Choose a vault to start working',
+  'vaultSelection.createTitle': 'Create a new vault',
+  'vaultSelection.createHint': 'Create a local vault folder for workspaces and projects.',
+  'vaultSelection.pathPlaceholder': 'Choose or enter a path...',
+  'vaultSelection.creating': 'Creating...',
+  'vaultSelection.create': 'Create vault',
+  'vaultSelection.openTitle': 'Open an existing vault',
+  'vaultSelection.openHint': 'Use a vault that is already on this computer.',
+  'vaultSelection.opening': 'Opening...',
+  'vaultSelection.open': 'Open existing',
+  'vaultSelection.recent': 'Recent vaults',
+  'common.cancel': 'Cancel',
+  'common.close': 'Close',
+  'workspaceTree.title': 'Workspaces',
+  'workspaceTree.new': 'New workspace',
+  'workspaceTree.nameRequired': 'Name is required',
+  'workspaceTree.chooseTemplate': 'Choose a workspace template',
+  'workspaceTree.saveRename': 'Save rename',
+  'workspaceTree.rename': 'Rename workspace',
+  'workspaceTree.trash': 'Trash workspace',
+  'workspaceTree.create': 'Create workspace',
+  'workspaceTree.namePlaceholder': 'Workspace name',
+  'workspaceTree.template': 'Template',
+  'workspaceTree.creating': 'Creating...',
+  'command.openOverview': 'Open Overview',
+  'command.openFiles': 'Open Files',
+  'command.openActivity': 'Open Activity',
+  'command.openBrowserInbox': 'Open Browser Inbox',
+  'command.createMarkdown': 'Create Markdown File',
+  'command.createText': 'Create Text File',
+  'command.syncNow': 'Sync Now',
+  'command.openSyncSettings': 'Open Sync Settings',
+  'command.openPluginManager': 'Open Plugin Manager',
+  'command.handled': '{title} handled',
+  'command.result': '{title} {status}',
+  'command.statusHandled': 'handled',
+  'command.palette': 'Command Palette',
+  'command.run': 'Run command',
+  'command.none': 'No commands',
+  'search.indexing': 'Indexing...',
+  'search.placeholder': 'Search',
+  'search.global': 'Global search',
+  'search.noResults': 'No results',
+  'search.type.workspace': 'Workspace',
+  'search.type.tool': 'Tool',
+  'search.type.folder': 'Folder',
+  'search.type.file': 'File',
+  'search.type.journal': 'Journal',
+  'search.type.browserInbox': 'Browser Inbox',
+  'search.type.activity': 'Activity',
+  'workbench.noProvider': 'No provider',
+  'workbench.noViewer': 'No viewer/editor available',
+  'workbench.noResource': 'No resource opened',
+  'bundle.noFrontend': 'Plugin has no frontend bundle',
+  'bundle.notFound': 'Plugin not found',
+  'bundle.loadFailed': 'Failed to load bundle: {error}',
+  'bundle.emptyContent': 'empty content',
+  'bundle.executionError': 'Bundle execution error: {error}',
+  'bundle.registrationMissing': 'Bundle loaded but no VerstakPluginRegister call detected',
+  'bundle.componentMissing': 'Component "{component}" not found in bundle. Available: {available}',
+  'bundle.mountError': 'Component mount error: {error}',
+  'bundle.mountUnavailable': 'Mount container not available',
+  'bundle.unexpectedError': 'Unexpected error: {error}',
+  'bundle.unknownError': 'Unknown error',
+  'bundle.frontendEntry': 'Frontend entry',
+  'bundle.availableComponents': 'Available components',
+  'bundle.loading': 'Loading plugin bundle...',
+  'overview.filter.all': 'All',
+  'overview.filter.notes': 'Notes',
+  'overview.filter.files': 'Files',
+  'overview.filter.captures': 'Captures',
+  'overview.filter.journal': 'Journal',
+  'overview.notes': 'Notes',
+  'overview.files': 'Files',
+  'overview.captures': 'Captures',
+  'overview.activity': 'Activity',
+  'overview.journal': 'Journal',
+  'overview.attention': 'Needs attention',
+  'overview.openNotes': 'Open Notes',
+  'overview.openFiles': 'Open Files',
+  'overview.reviewInbox': 'Review Inbox',
+  'overview.viewActivity': 'View Activity',
+  'overview.openJournal': 'Open Journal',
+  'overview.openTodos': 'Open Todos',
+  'overview.reviewCandidate': 'Review candidate',
+  'overview.reviewPending': 'Review pending items',
+  'overview.count.totalRecent.one': '{total} total · {recent} recent change',
+  'overview.count.totalRecent.many': '{total} total · {recent} recent changes',
+  'overview.count.recentChanges.one': '{count} recent change',
+  'overview.count.recentChanges.many': '{count} recent changes',
+  'overview.count.captures.one': '{count} capture to review',
+  'overview.count.captures.many': '{count} captures to review',
+  'overview.count.events.one': '{count} recorded event',
+  'overview.count.events.many': '{count} recorded events',
+  'overview.count.journal.one': '{count} journal entry',
+  'overview.count.journal.many': '{count} journal entries',
+  'overview.count.pending.one': '{count} pending item',
+  'overview.count.pending.many': '{count} pending items',
+  'overview.loadingContext': 'Loading workspace context...',
+  'overview.lastActive': 'Last active {time}',
+  'overview.noRecentActivity': 'No recent workspace activity',
+  'overview.refresh': 'Refresh',
+  'overview.summary': 'Workspace overview summary',
+  'overview.continue': 'Continue working',
+  'overview.continueHint': 'Pick up the next useful item in this workspace.',
+  'overview.loadingSignals': 'Loading workspace signals...',
+  'overview.noResume': 'No clear resume point yet',
+  'overview.noResumeHint': 'Recent notes, files, captures, and journal entries will appear here.',
+  'overview.recentChanges': 'Recent changes',
+  'overview.recentChangesHint': 'Latest meaningful activity in this workspace.',
+  'overview.recentFilter': 'Recent changes filter',
+  'overview.loadingRecent': 'Loading recent changes...',
+  'overview.noChanges': 'No meaningful changes for this filter yet.',
+  'overview.attentionHint': 'Pending captures, urgent todos, and possible journal entries.',
+  'overview.loadingPending': 'Loading pending items...',
+  'overview.noPending': 'No pending captures, urgent todos, or possible journal entries.',
+  'overview.keyResources': 'Key resources',
+  'overview.time.none': 'No timestamp',
+  'overview.time.now': 'Just now',
+  'overview.time.minutes': '{count} min ago',
+  'overview.time.hours': '{count}h ago',
+  'overview.time.yesterday': 'Yesterday',
+  'overview.time.days': '{count} days ago',
+};

frontend/src/lib/i18n/catalogs/ru.js

@@ -0,0 +1,225 @@
+export default {
+  'app.loading': 'Загрузка Верстака...',
+  'settings.title': 'Настройки',
+  'settings.language': 'Язык',
+  'settings.language.system': 'System / Системный',
+  'settings.language.en': 'English',
+  'settings.language.ru': 'Русский',
+  'settings.pluginManager': 'Менеджер плагинов',
+  'statusBar.label': 'Строка состояния',
+  'vault.label': 'Хранилище: {status}',
+  'vault.status.open': 'открыто',
+  'vault.status.closed': 'закрыто',
+  'vault.status.unknown': 'неизвестно',
+  'sidebar.tools': 'Инструменты',
+  'sidebar.error.contributions': 'Не удалось загрузить элементы плагинов',
+  'sidebar.error.load': 'Не удалось загрузить боковую панель',
+  'sidebar.error.ui': 'Ошибка интерфейса плагина',
+  'workspace.overview': 'Обзор',
+  'workspace.search': 'Поиск в рабочем пространстве',
+  'workspace.tools': 'Инструменты рабочего пространства',
+  'workspace.tool': 'Инструмент рабочего пространства',
+  'workspace.emptyTools': 'Нет доступных инструментов',
+  'workspace.emptyToolsHint': 'Включите плагины с инструментами рабочего пространства или откройте Менеджер плагинов в настройках.',
+  'workspace.select': 'Выберите рабочее пространство',
+  'workspace.selectHint': 'Используйте кнопку + в разделе рабочих пространств, чтобы добавить первый проект.',
+  'common.details': 'Подробнее',
+  'common.plugin': 'Плагин',
+  'common.component': 'Компонент',
+  'pluginView.error': 'Ошибка представления плагина',
+  'pluginView.failed': 'Ошибка интерфейса плагина',
+  'pluginView.noVisual': 'Этот плагин пока не предоставляет визуальное представление.',
+  'pluginView.viewId': 'ID представления',
+  'pluginView.bundleUnavailable': 'Frontend bundle недоступен',
+  'pluginView.unavailable': 'Представление недоступно.',
+  'pluginView.select': 'Выберите представление плагина на боковой панели',
+  'pluginView.selectHint': 'Представления плагинов появятся здесь',
+  'common.retry': '⟳ Повторить',
+  'common.source': 'Источник',
+  'common.status': 'Состояние',
+  'common.capability': 'Capability',
+  'common.provider': 'Поставщик',
+  'status.loaded': 'загружено',
+  'status.degraded': 'ограничено',
+  'status.failed': 'ошибка',
+  'status.disabled': 'выключено',
+  'status.missing': 'отсутствует',
+  'pluginManager.reloading': '⟳ Обновление...',
+  'pluginManager.reload': '⟳ Обновить',
+  'pluginManager.scanning': 'Сканирование каталогов плагинов...',
+  'pluginManager.summary.plugins': 'Обнаружено плагинов: {count}',
+  'pluginManager.summary.capabilities': 'Зарегистрировано capabilities: {count}',
+  'pluginManager.summary.permissions': 'Известно разрешений: {count}',
+  'pluginManager.scanSummary': 'Сводка проверки плагинов',
+  'pluginManager.health': 'Состояние плагинов',
+  'pluginManager.permissionRisk': 'Риск разрешений',
+  'pluginManager.elevatedPermissions': 'Плагинов с повышенными разрешениями: {count}',
+  'pluginManager.none': 'Плагины не найдены',
+  'pluginManager.scannedDirs': 'Проверенные каталоги плагинов:',
+  'pluginManager.userPlugins': 'пользовательские плагины',
+  'pluginManager.bundledPlugins': 'встроенные плагины (каталог приложения)',
+  'pluginManager.installHint': 'Поместите папку плагина с plugin.json в один из этих каталогов и нажмите «Обновить».',
+  'pluginManager.missingTitle': 'Отсутствующие установленные плагины',
+  'pluginManager.missingHint': 'Эти плагины требуются хранилищу, но их пакеты не установлены на этом устройстве.',
+  'pluginManager.missingPackage': 'Плагин указан среди желаемых плагинов хранилища, но его пакет не установлен.',
+  'pluginManager.capabilityRegistry': 'Реестр capabilities ({count})',
+  'pluginManager.settingsError': 'Ошибка настроек',
+  'pluginManager.pluginSettings': 'Настройки плагина',
+  'pluginManager.settingsBundleUnavailable': 'Frontend bundle панели настроек недоступен',
+  'common.none': 'нет',
+  'common.unknown': 'неизвестно',
+  'pluginCard.count.views': 'представлений: {count}',
+  'pluginCard.count.commands': 'команд: {count}',
+  'pluginCard.count.searchProviders': 'поставщиков поиска: {count}',
+  'pluginCard.count.sidebar': 'элементов боковой панели: {count}',
+  'pluginCard.count.statusbar': 'элементов строки состояния: {count}',
+  'pluginCard.count.openProviders': 'обработчиков открытия: {count}',
+  'pluginCard.count.workspace': 'инструментов рабочего пространства: {count}',
+  'pluginCard.degraded': 'Плагин работает, но некоторые необязательные capabilities недоступны.',
+  'pluginCard.name': 'Название',
+  'pluginCard.contributions': 'Элементы интерфейса',
+  'pluginCard.technicalDetails': 'Технические сведения',
+  'pluginCard.apiVersion': 'Версия API',
+  'pluginCard.root': 'Корневой каталог',
+  'pluginCard.provides': 'Предоставляет',
+  'pluginCard.requires': 'Требует',
+  'pluginCard.missingRequired': 'Отсутствуют обязательные capabilities',
+  'pluginCard.optionalRequires': 'Необязательные зависимости',
+  'pluginCard.optionalUnavailable': 'Необязательные capabilities недоступны — плагин работает в ограниченном режиме',
+  'pluginCard.permissions': 'Разрешения',
+  'pluginCard.enabling': '⟳ Включение...',
+  'pluginCard.enable': '▶ Включить',
+  'pluginCard.disabling': '⟳ Выключение...',
+  'pluginCard.disable': '⏸ Выключить',
+  'pluginCard.openVault': 'Откройте хранилище для управления состоянием плагина',
+  'pluginCard.missingUiPermission': 'Плагин добавляет элементы интерфейса, но не имеет разрешения ui.register',
+  'common.loading': 'Загрузка...',
+  'common.browse': 'Обзор...',
+  'vaultSelection.chooseNew': 'Выберите или введите папку для нового хранилища.',
+  'vaultSelection.createError': 'Не удалось создать хранилище: {error}',
+  'vaultSelection.openError': 'Не удалось открыть хранилище: {error}',
+  'vaultSelection.chooseExisting': 'Выберите или введите существующее хранилище.',
+  'vaultSelection.subtitle': 'Выберите хранилище, чтобы начать работу',
+  'vaultSelection.createTitle': 'Создать новое хранилище',
+  'vaultSelection.createHint': 'Создайте локальную папку хранилища для рабочих пространств и проектов.',
+  'vaultSelection.pathPlaceholder': 'Выберите или введите путь...',
+  'vaultSelection.creating': 'Создание...',
+  'vaultSelection.create': 'Создать хранилище',
+  'vaultSelection.openTitle': 'Открыть существующее хранилище',
+  'vaultSelection.openHint': 'Используйте хранилище, которое уже находится на этом компьютере.',
+  'vaultSelection.opening': 'Открытие...',
+  'vaultSelection.open': 'Открыть',
+  'vaultSelection.recent': 'Недавние хранилища',
+  'common.cancel': 'Отмена',
+  'common.close': 'Закрыть',
+  'workspaceTree.title': 'Рабочие пространства',
+  'workspaceTree.new': 'Новое рабочее пространство',
+  'workspaceTree.nameRequired': 'Введите название',
+  'workspaceTree.chooseTemplate': 'Выберите шаблон рабочего пространства',
+  'workspaceTree.saveRename': 'Сохранить новое название',
+  'workspaceTree.rename': 'Переименовать рабочее пространство',
+  'workspaceTree.trash': 'Переместить рабочее пространство в корзину',
+  'workspaceTree.create': 'Создать рабочее пространство',
+  'workspaceTree.namePlaceholder': 'Название рабочего пространства',
+  'workspaceTree.template': 'Шаблон',
+  'workspaceTree.creating': 'Создание...',
+  'command.openOverview': 'Открыть обзор',
+  'command.openFiles': 'Открыть файлы',
+  'command.openActivity': 'Открыть активность',
+  'command.openBrowserInbox': 'Открыть входящие из браузера',
+  'command.createMarkdown': 'Создать файл Markdown',
+  'command.createText': 'Создать текстовый файл',
+  'command.syncNow': 'Синхронизировать сейчас',
+  'command.openSyncSettings': 'Открыть настройки синхронизации',
+  'command.openPluginManager': 'Открыть менеджер плагинов',
+  'command.handled': 'Выполнено: {title}',
+  'command.result': '{title}: {status}',
+  'command.statusHandled': 'выполнено',
+  'command.palette': 'Палитра команд',
+  'command.run': 'Выполнить команду',
+  'command.none': 'Команды не найдены',
+  'search.indexing': 'Индексирование...',
+  'search.placeholder': 'Поиск',
+  'search.global': 'Глобальный поиск',
+  'search.noResults': 'Ничего не найдено',
+  'search.type.workspace': 'Рабочее пространство',
+  'search.type.tool': 'Инструмент',
+  'search.type.folder': 'Папка',
+  'search.type.file': 'Файл',
+  'search.type.journal': 'Журнал',
+  'search.type.browserInbox': 'Входящие из браузера',
+  'search.type.activity': 'Активность',
+  'workbench.noProvider': 'Нет обработчика',
+  'workbench.noViewer': 'Нет доступного средства просмотра или редактора',
+  'workbench.noResource': 'Ресурс не открыт',
+  'bundle.noFrontend': 'У плагина нет frontend bundle',
+  'bundle.notFound': 'Плагин не найден',
+  'bundle.loadFailed': 'Не удалось загрузить bundle: {error}',
+  'bundle.emptyContent': 'пустое содержимое',
+  'bundle.executionError': 'Ошибка выполнения bundle: {error}',
+  'bundle.registrationMissing': 'Bundle загружен, но вызов VerstakPluginRegister не обнаружен',
+  'bundle.componentMissing': 'Компонент «{component}» не найден в bundle. Доступны: {available}',
+  'bundle.mountError': 'Ошибка подключения компонента: {error}',
+  'bundle.mountUnavailable': 'Контейнер для подключения недоступен',
+  'bundle.unexpectedError': 'Непредвиденная ошибка: {error}',
+  'bundle.unknownError': 'Неизвестная ошибка',
+  'bundle.frontendEntry': 'Точка входа frontend',
+  'bundle.availableComponents': 'Доступные компоненты',
+  'bundle.loading': 'Загрузка bundle плагина...',
+  'overview.filter.all': 'Все',
+  'overview.filter.notes': 'Заметки',
+  'overview.filter.files': 'Файлы',
+  'overview.filter.captures': 'Сохранённое',
+  'overview.filter.journal': 'Журнал',
+  'overview.notes': 'Заметки',
+  'overview.files': 'Файлы',
+  'overview.captures': 'Сохранённое',
+  'overview.activity': 'Активность',
+  'overview.journal': 'Журнал',
+  'overview.attention': 'Требует внимания',
+  'overview.openNotes': 'Открыть заметки',
+  'overview.openFiles': 'Открыть файлы',
+  'overview.reviewInbox': 'Разобрать входящие',
+  'overview.viewActivity': 'Открыть активность',
+  'overview.openJournal': 'Открыть журнал',
+  'overview.openTodos': 'Открыть задачи',
+  'overview.reviewCandidate': 'Просмотреть запись',
+  'overview.reviewPending': 'Разобрать ожидающее',
+  'overview.count.totalRecent.one': 'Всего: {total} · недавних изменений: {recent}',
+  'overview.count.totalRecent.many': 'Всего: {total} · недавних изменений: {recent}',
+  'overview.count.recentChanges.one': 'Недавних изменений: {count}',
+  'overview.count.recentChanges.many': 'Недавних изменений: {count}',
+  'overview.count.captures.one': 'На разбор: {count}',
+  'overview.count.captures.many': 'На разбор: {count}',
+  'overview.count.events.one': 'Событий: {count}',
+  'overview.count.events.many': 'Событий: {count}',
+  'overview.count.journal.one': 'Записей журнала: {count}',
+  'overview.count.journal.many': 'Записей журнала: {count}',
+  'overview.count.pending.one': 'Ожидают: {count}',
+  'overview.count.pending.many': 'Ожидают: {count}',
+  'overview.loadingContext': 'Загрузка данных рабочего пространства...',
+  'overview.lastActive': 'Последняя активность: {time}',
+  'overview.noRecentActivity': 'В рабочем пространстве пока нет недавней активности',
+  'overview.refresh': 'Обновить',
+  'overview.summary': 'Сводка рабочего пространства',
+  'overview.continue': 'Продолжить работу',
+  'overview.continueHint': 'Вернитесь к следующему полезному делу в этом рабочем пространстве.',
+  'overview.loadingSignals': 'Загрузка рабочих данных...',
+  'overview.noResume': 'Пока неясно, с чего продолжить',
+  'overview.noResumeHint': 'Здесь появятся недавние заметки, файлы, сохранённое и записи журнала.',
+  'overview.recentChanges': 'Недавние изменения',
+  'overview.recentChangesHint': 'Последняя важная активность в этом рабочем пространстве.',
+  'overview.recentFilter': 'Фильтр недавних изменений',
+  'overview.loadingRecent': 'Загрузка недавних изменений...',
+  'overview.noChanges': 'Для этого фильтра пока нет важных изменений.',
+  'overview.attentionHint': 'Неразобранное сохранённое, срочные задачи и возможные записи журнала.',
+  'overview.loadingPending': 'Загрузка ожидающих элементов...',
+  'overview.noPending': 'Нет неразобранного сохранённого, срочных задач или возможных записей журнала.',
+  'overview.keyResources': 'Ключевые ресурсы',
+  'overview.time.none': 'Время не указано',
+  'overview.time.now': 'Только что',
+  'overview.time.minutes': '{count} мин. назад',
+  'overview.time.hours': '{count} ч. назад',
+  'overview.time.yesterday': 'Вчера',
+  'overview.time.days': '{count} дн. назад',
+};

frontend/src/lib/i18n/index.js

@@ -0,0 +1,200 @@
+import englishShellCatalog from './catalogs/en.js';
+import russianShellCatalog from './catalogs/ru.js';
+
+const LANGUAGE_PREFERENCES = new Set(['system', 'en', 'ru']);
+const CONTRIBUTION_TEXT_FIELDS = {
+  views: 'title',
+  commands: 'title',
+  settingsPanels: 'title',
+  sidebarItems: 'title',
+  fileActions: 'label',
+  noteActions: 'label',
+  contextMenuEntries: 'label',
+  searchProviders: 'label',
+  statusBarItems: 'label',
+  openProviders: 'title',
+  workspaceItems: 'title',
+};
+
+function normalizeSystemLanguages(languages) {
+  const values = Array.isArray(languages) ? languages : [languages];
+  return values.map((value) => String(value || '').trim().toLowerCase()).filter(Boolean);
+}
+
+export function resolveLocale(preference, systemLanguages = []) {
+  if (!LANGUAGE_PREFERENCES.has(preference)) {
+    throw new Error(`unsupported language preference: ${preference}`);
+  }
+  if (preference === 'en' || preference === 'ru') return preference;
+  return normalizeSystemLanguages(systemLanguages).some((locale) => locale === 'ru' || locale.startsWith('ru-'))
+    ? 'ru'
+    : 'en';
+}
+
+function interpolate(message, params) {
+  if (!params) return message;
+  return message.replace(/\{([A-Za-z0-9_.-]+)\}/g, (placeholder, name) => (
+    Object.prototype.hasOwnProperty.call(params, name) ? String(params[name]) : placeholder
+  ));
+}
+
+function browserLanguages() {
+  if (typeof navigator === 'undefined') return ['en'];
+  if (Array.isArray(navigator.languages) && navigator.languages.length > 0) return navigator.languages;
+  return [navigator.language || 'en'];
+}
+
+export function createI18n(options = {}) {
+  const shellCatalogs = options.shellCatalogs || { en: {}, ru: {} };
+  let systemLanguages = options.systemLanguages || browserLanguages;
+  let catalogLoader = options.loadPluginCatalog || (async () => ({}));
+  let preference = 'system';
+  let locale = 'en';
+  const listeners = new Set();
+  const pluginConfigs = new Map();
+  const pluginCatalogs = new Map();
+
+  function configure(next = {}) {
+    if (next.systemLanguages) systemLanguages = next.systemLanguages;
+    if (next.loadPluginCatalog) catalogLoader = next.loadPluginCatalog;
+  }
+
+  function notify() {
+    listeners.forEach((listener) => listener(locale));
+  }
+
+  async function initialize(initialPreference = 'system') {
+    preference = LANGUAGE_PREFERENCES.has(initialPreference) ? initialPreference : 'system';
+    locale = resolveLocale(preference, systemLanguages());
+  }
+
+  async function loadCatalog(pluginId, catalogLocale) {
+    if (!catalogLocale) return;
+    let catalogs = pluginCatalogs.get(pluginId);
+    if (!catalogs) {
+      catalogs = new Map();
+      pluginCatalogs.set(pluginId, catalogs);
+    }
+    if (catalogs.has(catalogLocale)) return;
+    const messages = await catalogLoader(pluginId, catalogLocale);
+    catalogs.set(catalogLocale, { ...(messages || {}) });
+  }
+
+  async function loadPlugin(pluginId, localization) {
+    if (!pluginId || !localization || !localization.defaultLocale || !localization.locales) return;
+    pluginConfigs.set(pluginId, localization);
+    const requested = localization.locales[locale] ? locale : '';
+    const defaultLocale = localization.defaultLocale;
+    await Promise.all(Array.from(new Set([requested, defaultLocale].filter(Boolean))).map((item) => loadCatalog(pluginId, item)));
+  }
+
+  async function setLanguagePreference(nextPreference) {
+    const nextLocale = resolveLocale(nextPreference, systemLanguages());
+    preference = nextPreference;
+    locale = nextLocale;
+    await Promise.all(Array.from(pluginConfigs.entries()).map(([pluginId, config]) => (
+      loadPlugin(pluginId, config).catch((error) => {
+        console.warn(`[i18n] failed to load ${pluginId} catalog for ${nextLocale}:`, error);
+      })
+    )));
+    notify();
+  }
+
+  function t(key, params, fallback) {
+    const message = shellCatalogs[locale]?.[key]
+      ?? shellCatalogs.en?.[key]
+      ?? fallback
+      ?? key;
+    return interpolate(message, params);
+  }
+
+  function translatePlugin(pluginId, key, params, fallback) {
+    const config = pluginConfigs.get(pluginId);
+    const catalogs = pluginCatalogs.get(pluginId);
+    const message = catalogs?.get(locale)?.[key]
+      ?? catalogs?.get(config?.defaultLocale)?.[key]
+      ?? fallback
+      ?? key;
+    return interpolate(message, params);
+  }
+
+  function localizeContributions(pluginId, contributions) {
+    if (!contributions) return contributions;
+    const localized = { ...contributions };
+    Object.entries(CONTRIBUTION_TEXT_FIELDS).forEach(([point, field]) => {
+      if (!Array.isArray(contributions[point])) return;
+      localized[point] = contributions[point].map((item) => ({
+        ...item,
+        [field]: translatePlugin(
+          pluginId,
+          `contributions.${point}.${item.id}.${field}`,
+          undefined,
+          item[field],
+        ),
+      }));
+    });
+    return localized;
+  }
+
+  function localizePlugin(plugin) {
+    if (!plugin) return plugin;
+    const hasStateWrapper = !!plugin.manifest;
+    const manifest = hasStateWrapper ? plugin.manifest : plugin;
+    const pluginId = manifest.id;
+    const localizedManifest = {
+      ...manifest,
+      name: translatePlugin(pluginId, 'manifest.name', undefined, manifest.name),
+      description: translatePlugin(pluginId, 'manifest.description', undefined, manifest.description),
+      contributes: localizeContributions(pluginId, manifest.contributes),
+    };
+    return hasStateWrapper ? { ...plugin, manifest: localizedManifest } : localizedManifest;
+  }
+
+  function localizeContributionSummary(summary) {
+    if (!summary) return summary;
+    const localized = { ...summary };
+    Object.entries(CONTRIBUTION_TEXT_FIELDS).forEach(([point, field]) => {
+      if (!Array.isArray(summary[point])) return;
+      localized[point] = summary[point].map((item) => ({
+        ...item,
+        [field]: translatePlugin(
+          item.pluginId,
+          `contributions.${point}.${item.id}.${field}`,
+          undefined,
+          item[field],
+        ),
+      }));
+    });
+    return localized;
+  }
+
+  function subscribe(listener) {
+    listeners.add(listener);
+    listener(locale);
+    return () => listeners.delete(listener);
+  }
+
+  return {
+    configure,
+    initialize,
+    getLanguagePreference: () => preference,
+    getLocale: () => locale,
+    setLanguagePreference,
+    t,
+    subscribe,
+    loadPlugin,
+    translatePlugin,
+    localizeContributions,
+    localizePlugin,
+    localizeContributionSummary,
+  };
+}
+
+export const i18n = createI18n({
+  shellCatalogs: {
+    en: englishShellCatalog,
+    ru: russianShellCatalog,
+  },
+});
+
+export const t = (...args) => i18n.t(...args);

frontend/src/lib/log/debug.js

@@ -0,0 +1,150 @@
+/**
+ * Frontend debug logger.
+ *
+ * Enabled when:
+ * 1. URL has ?debug query param, OR
+ * 2. localStorage has verstak-debug = "true"
+ *
+ * Writes to:
+ * - console (always, with [debug] prefix)
+ * - localStorage buffer (last 1000 entries, key: verstak-debug-log)
+ *
+ * Usage:
+ *   import { debug } from '../log/debug.js';
+ *   debug.log('[ComponentName]', 'message', data);
+ *   debug.logf('[ComponentName]', 'format %s', arg);
+ *
+ * To enable: open app with ?debug or run in console:
+ *   localStorage.setItem('verstak-debug', 'true')
+ *
+ * To export log: run in console:
+ *   copy(JSON.parse(localStorage.getItem('verstak-debug-log')))
+ */
+
+var ENABLED = false;
+var BUFFER_KEY = 'verstak-debug-log';
+var MAX_ENTRIES = 1000;
+
+// Check enable conditions
+function checkEnabled() {
+  try {
+    if (window.location && window.location.search && window.location.search.indexOf('debug') !== -1) {
+      return true;
+    }
+    if (typeof localStorage !== 'undefined' && localStorage.getItem('verstak-debug') === 'true') {
+      return true;
+    }
+  } catch (e) {
+    // localStorage not available
+  }
+  return false;
+}
+
+ENABLED = checkEnabled();
+
+function getTimestamp() {
+  return new Date().toISOString();
+}
+
+function formatMessage(args) {
+  var parts = [];
+  for (var i = 0; i < args.length; i++) {
+    var a = args[i];
+    if (typeof a === 'object') {
+      try {
+        parts.push(JSON.stringify(a));
+      } catch (e) {
+        parts.push(String(a));
+      }
+    } else {
+      parts.push(String(a));
+    }
+  }
+  return parts.join(' ');
+}
+
+function writeToBuffer(entry) {
+  try {
+    if (typeof localStorage === 'undefined') return;
+    var raw = localStorage.getItem(BUFFER_KEY);
+    var log = raw ? JSON.parse(raw) : [];
+    log.push(entry);
+    if (log.length > MAX_ENTRIES) {
+      log = log.slice(log.length - MAX_ENTRIES);
+    }
+    localStorage.setItem(BUFFER_KEY, JSON.stringify(log));
+  } catch (e) {
+    // Ignore quota errors
+  }
+}
+
+function log() {
+  if (!ENABLED) return;
+  var msg = formatMessage(Array.prototype.slice.call(arguments));
+  var entry = { ts: getTimestamp(), msg: msg };
+  writeToBuffer(entry);
+  console.log('[debug]', msg);
+}
+
+function logf() {
+  if (!ENABLED) return;
+  var args = Array.prototype.slice.call(arguments);
+  var format = args.shift();
+  var i = 0;
+  var msg = format.replace(/%[sdfo]/g, function () {
+    return i < args.length ? String(args[i++]) : '';
+  });
+  var entry = { ts: getTimestamp(), msg: msg };
+  writeToBuffer(entry);
+  console.log('[debug]', msg);
+}
+
+function getLog() {
+  try {
+    if (typeof localStorage === 'undefined') return [];
+    var raw = localStorage.getItem(BUFFER_KEY);
+    return raw ? JSON.parse(raw) : [];
+  } catch (e) {
+    return [];
+  }
+}
+
+function clearLog() {
+  try {
+    if (typeof localStorage !== 'undefined') {
+      localStorage.removeItem(BUFFER_KEY);
+    }
+  } catch (e) {}
+}
+
+function exportLog() {
+  var entries = getLog();
+  return entries.map(function (e) { return e.ts + ' ' + e.msg; }).join('\n');
+}
+
+// Named export for Svelte/Vite
+export var debug = {
+  log: log,
+  logf: logf,
+  isEnabled: function () { return ENABLED; },
+  enable: function () {
+    ENABLED = true;
+    try { localStorage.setItem('verstak-debug', 'true'); } catch (e) {}
+  },
+  disable: function () {
+    ENABLED = false;
+    try { localStorage.removeItem('verstak-debug'); } catch (e) {}
+  },
+  getLog: getLog,
+  clearLog: clearLog,
+  exportLog: exportLog
+};
+
+// Also expose globally for console access
+if (typeof window !== 'undefined') {
+  window.__verstakDebug = debug;
+}
+
+if (ENABLED) {
+  console.log('[debug] frontend debug logger enabled');
+}

frontend/src/lib/plugin-host/PluginBundleHost.svelte

@@ -0,0 +1,351 @@
+<script>
+  import { onMount, onDestroy } from 'svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+
+  import { createPluginAPI } from './VerstakPluginAPI.js';
+
+  export let pluginId = null;
+  export let componentId = null;
+  export let viewPluginId = null;
+  export let componentProps = {};
+
+  let loadState = 'idle'; // idle | loading | loaded | error
+  let pluginInfo = null;
+  let errorText = '';
+  let mountContainer = null;
+  let currentPluginId = null;
+  let currentComponent = null;
+  let currentAPI = null;
+  let currentPropsKey = '';
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
+
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  $: activePluginId = pluginId || viewPluginId;
+  $: activeComponent = componentId;
+  $: propsKey = JSON.stringify(componentProps || {});
+
+  // React to changes — reload on view change
+  $: if (activePluginId && activeComponent) {
+    loadAndMount(activePluginId, activeComponent, propsKey);
+  } else if (!activePluginId) {
+    cleanup();
+    loadState = 'idle';
+  }
+
+  onDestroy(() => {
+    unsubscribeLocale?.();
+    cleanup();
+  });
+
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => locale = nextLocale);
+  });
+
+  function cleanup() {
+    if (currentAPI && typeof currentAPI.dispose === 'function') {
+      try {
+        currentAPI.dispose();
+      } catch (e) {
+        console.error('[PluginBundleHost] API dispose error:', e);
+      }
+    }
+    const reg = window.__VERSTAK_PLUGIN_REGISTRY__;
+    if (currentPluginId && currentComponent && reg && reg[currentPluginId]) {
+      const comp = reg[currentPluginId][currentComponent];
+      if (comp && comp.unmount && mountContainer) {
+        try {
+          comp.unmount(mountContainer);
+        } catch (e) {
+          console.error('[PluginBundleHost] unmount error:', e);
+        }
+      }
+    }
+    if (mountContainer) {
+      mountContainer.innerHTML = '';
+    }
+    currentPluginId = null;
+    currentComponent = null;
+    currentAPI = null;
+    currentPropsKey = '';
+  }
+
+  function unpackBackendResult(result) {
+    if (Array.isArray(result) && result.length === 2 && (typeof result[1] === 'string' || result[1] == null)) {
+      return { value: result[0], error: result[1] || '' };
+    }
+    return { value: result, error: '' };
+  }
+
+  async function loadAndMount(pId, compId, nextPropsKey) {
+    // If same plugin+component and already mounted, skip
+    if (currentPluginId === pId && currentComponent === compId && currentPropsKey === nextPropsKey && loadState === 'loaded') {
+      return;
+    }
+
+    // Cleanup previous
+    cleanup();
+
+    loadState = 'loading';
+    errorText = '';
+    currentPluginId = pId;
+    currentComponent = compId;
+    currentPropsKey = nextPropsKey;
+
+    try {
+      // Get plugin frontend info
+      const info = await App.GetPluginFrontendInfo(pId);
+      pluginInfo = info;
+
+      if (!info || info.status === 'no-frontend' || info.status === 'not-found') {
+        loadState = 'error';
+        errorText = info.status === 'no-frontend'
+          ? tr('bundle.noFrontend')
+          : tr('bundle.notFound');
+        return;
+      }
+
+      try {
+        await i18n.loadPlugin(pId, info.localization);
+      } catch (catalogError) {
+        console.warn(`[PluginBundleHost] localization unavailable for ${pId}:`, catalogError);
+      }
+
+      // Check if bundle already loaded for this plugin
+      const reg = window.__VERSTAK_PLUGIN_REGISTRY__ || {};
+      if (!reg[pId]) {
+        // Load the bundle JS content via backend API
+        const assetResult = unpackBackendResult(await App.GetPluginAssetContent(pId, info.entry));
+        const content = assetResult.value;
+        if (assetResult.error || !content) {
+          loadState = 'error';
+          errorText = tr('bundle.loadFailed', { error: assetResult.error || tr('bundle.emptyContent') });
+          return;
+        }
+
+        // Execute bundle via Function constructor (safe: no access to outer scope)
+        // This is equivalent to eval but more explicit
+        try {
+          const fn = new Function(content);
+          fn();
+        } catch (e) {
+          loadState = 'error';
+          errorText = tr('bundle.executionError', { error: e.message });
+          console.error('[PluginBundleHost] bundle exec error:', e);
+          return;
+        }
+
+        // Verify registration happened
+        if (!window.__VERSTAK_PLUGIN_REGISTRY__[pId]) {
+          loadState = 'error';
+          errorText = tr('bundle.registrationMissing');
+          return;
+        }
+      }
+
+      // Find the component
+      const components = window.__VERSTAK_PLUGIN_REGISTRY__[pId];
+      const comp = components[compId];
+      if (!comp || !comp.mount) {
+        loadState = 'error';
+        errorText = tr('bundle.componentMissing', {
+          component: compId,
+          available: Object.keys(components).join(', ') || tr('common.none'),
+        });
+        return;
+      }
+
+      // Create API
+      const api = createPluginAPI(pId);
+      currentAPI = api;
+
+      // Mount component
+      if (!mountContainer) {
+        // Container must exist in DOM — wait for next tick
+        await new Promise(r => requestAnimationFrame(r));
+      }
+      if (mountContainer) {
+        try {
+          comp.mount(mountContainer, Object.assign({ componentId: compId }, componentProps || {}), api);
+          loadState = 'loaded';
+          errorText = '';
+        } catch (e) {
+          loadState = 'error';
+          errorText = tr('bundle.mountError', { error: e.message });
+          console.error('[PluginBundleHost] mount error:', e);
+        }
+      } else {
+        loadState = 'error';
+        errorText = tr('bundle.mountUnavailable');
+      }
+    } catch (e) {
+      loadState = 'error';
+      errorText = tr('bundle.unexpectedError', { error: e.message || e });
+      console.error('[PluginBundleHost] error:', e);
+    }
+  }
+
+  function getComponentList() {
+    const reg = window.__VERSTAK_PLUGIN_REGISTRY__;
+    if (!reg || !currentPluginId || !reg[currentPluginId]) return [];
+    return Object.keys(reg[currentPluginId]);
+  }
+</script>
+
+<div class="plugin-bundle-host">
+  {#if loadState === 'idle'}
+    <div class="host-state idle">
+      <p>{tr('pluginView.select')}</p>
+    </div>
+
+  {:else if loadState === 'error'}
+    <div class="host-state error">
+      <Icon name="warning" size={24} class="error-icon" />
+      <p class="error-title">{tr('pluginView.error')}</p>
+      <div class="error-details">
+        <p><strong>{tr('common.plugin')}:</strong> {currentPluginId || tr('common.unknown')}</p>
+        <p><strong>{tr('common.component')}:</strong> {currentComponent || tr('common.unknown')}</p>
+        <p class="error-message">{errorText || tr('bundle.unknownError')}</p>
+        {#if pluginInfo}
+          <p class="error-meta">{tr('bundle.frontendEntry')}: {pluginInfo.entry || tr('common.none')}</p>
+        {/if}
+        {#if getComponentList().length > 0}
+          <p class="error-meta">{tr('bundle.availableComponents')}: {getComponentList().join(', ')}</p>
+        {/if}
+      </div>
+    </div>
+
+  {:else}
+    {#if loadState === 'loading'}
+      <div class="host-state loading">
+        <div class="spinner"></div>
+        <p>{tr('bundle.loading')}</p>
+      </div>
+    {/if}
+    <div
+      class="plugin-mount-container"
+      class:mount-hidden={loadState !== 'loaded'}
+      bind:this={mountContainer}
+      data-plugin-id={currentPluginId}
+      data-component={currentComponent}
+      style="flex:1;min-width:0;min-height:0;height:100%;display:flex;flex-direction:column;position:relative;"
+    ></div>
+  {/if}
+</div>
+
+<style>
+  .plugin-bundle-host {
+    flex: 1;
+    width: 100%;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+    min-width: 0;
+    min-height: 0;
+  }
+
+  .host-state {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    padding: 2rem;
+    text-align: center;
+  }
+
+  .host-state.idle {
+    color: #555;
+  }
+
+  .host-state.loading {
+    color: #a0a0b8;
+  }
+
+  .spinner {
+    width: 24px;
+    height: 24px;
+    border: 2px solid #333;
+    border-top-color: #4ecca3;
+    border-radius: 50%;
+    animation: spin 0.8s linear infinite;
+    margin-bottom: 1rem;
+  }
+
+  @keyframes spin {
+    to { transform: rotate(360deg); }
+  }
+
+  .host-state.error {
+    color: #e94560;
+  }
+
+  .host-state.error :global(.error-icon) {
+    font-size: 2rem;
+    margin-bottom: 0.5rem;
+  }
+
+  .error-title {
+    font-weight: 600;
+    font-size: 1.1rem;
+    margin-bottom: 1rem;
+  }
+
+  .error-details {
+    font-size: 0.85rem;
+    color: #a0a0b8;
+    max-width: 400px;
+    text-align: left;
+    background: #16213e;
+    padding: 1rem;
+    border-radius: 6px;
+    border: 1px solid #0f3460;
+  }
+
+  .error-details p {
+    margin: 0.3rem 0;
+  }
+
+  .error-details strong {
+    color: #e0e0f0;
+  }
+
+  .error-message {
+    color: #e94560;
+    font-family: monospace;
+    font-size: 0.8rem;
+    margin-top: 0.5rem !important;
+    padding: 0.5rem;
+    background: rgba(233, 69, 96, 0.1);
+    border-radius: 4px;
+  }
+
+  .error-meta {
+    font-size: 0.75rem;
+    color: #666;
+    margin-top: 0.3rem !important;
+  }
+
+  .plugin-mount-container {
+    flex: 1;
+    min-width: 0;
+    min-height: 0;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+    position: relative;
+  }
+
+  .plugin-mount-container.mount-hidden {
+    height: 0;
+    min-height: 0;
+    overflow: hidden;
+    visibility: hidden;
+  }
+</style>

frontend/src/lib/plugin-host/VerstakPluginAPI.js

@@ -0,0 +1,585 @@
+import * as App from '../../../wailsjs/go/api/App';
+import { i18n } from '../i18n/index.js';
+
+window.__VERSTAK_PLUGIN_REGISTRY__ = window.__VERSTAK_PLUGIN_REGISTRY__ || {};
+window.__VERSTAK_EVENT_HANDLERS__ = window.__VERSTAK_EVENT_HANDLERS__ || {};
+window.__VERSTAK_COMMAND_HANDLERS__ = window.__VERSTAK_COMMAND_HANDLERS__ || {};
+
+if (!window.VerstakPluginRegister) {
+  window.VerstakPluginRegister = function(pluginId, bundle) {
+    if (!pluginId || !bundle || !bundle.components) {
+      console.error('[VerstakPluginRegister] invalid registration:', pluginId);
+      return;
+    }
+    console.log('[VerstakPluginRegister] registered:', pluginId, Object.keys(bundle.components));
+    window.__VERSTAK_PLUGIN_REGISTRY__[pluginId] = bundle.components;
+  };
+}
+
+function unpack(result) {
+  if (Array.isArray(result) && result.length === 2 && (typeof result[1] === 'string' || result[1] == null)) {
+    return [result[0], result[1] || ''];
+  }
+  return [result, ''];
+}
+
+async function callBackend(pluginId, label, fn) {
+  try {
+    const [value, err] = unpack(await fn());
+    if (err) {
+      throw new Error(err);
+    }
+    return value;
+  } catch (e) {
+    const message = e && e.message ? e.message : String(e);
+    throw new Error('[plugin:' + pluginId + '] ' + label + ' failed: ' + message);
+  }
+}
+
+async function callBackendErrorString(pluginId, label, fn) {
+  try {
+    const err = await fn();
+    if (err) {
+      throw new Error(err);
+    }
+  } catch (e) {
+    const message = e && e.message ? e.message : String(e);
+    throw new Error('[plugin:' + pluginId + '] ' + label + ' failed: ' + message);
+  }
+}
+
+function getEventHandlers(eventName) {
+  if (!window.__VERSTAK_EVENT_HANDLERS__[eventName]) {
+    window.__VERSTAK_EVENT_HANDLERS__[eventName] = [];
+  }
+  return window.__VERSTAK_EVENT_HANDLERS__[eventName];
+}
+
+function dispatchLocalEvent(pluginId, eventName, payload) {
+  const event = {
+    name: eventName,
+    pluginId: pluginId,
+    payload: payload || {},
+    timestamp: new Date().toISOString()
+  };
+  const handlers = getEventHandlers(eventName).slice();
+  handlers.forEach(function(handler) {
+    try {
+      handler(event);
+    } catch (e) {
+      console.error('[VerstakPluginAPI] event handler error:', e);
+    }
+  });
+}
+
+function dispatchBackendEvent(event) {
+  if (!event || !event.name) return;
+  const handlers = getEventHandlers(event.name).slice();
+  handlers.forEach(function(handler) {
+    try {
+      handler(event);
+    } catch (e) {
+      console.error('[VerstakPluginAPI] backend event handler error:', e);
+    }
+  });
+}
+
+window.__VERSTAK_DISPATCH_BACKEND_EVENT__ = dispatchBackendEvent;
+
+if (!window.__VERSTAK_BACKEND_EVENT_BRIDGE__ && window.runtime && typeof window.runtime.EventsOnMultiple === 'function') {
+  window.__VERSTAK_BACKEND_EVENT_BRIDGE__ = window.runtime.EventsOnMultiple('verstak:plugin-event', dispatchBackendEvent, -1);
+}
+
+function commandKey(pluginId, commandId) {
+  return pluginId + ':' + commandId;
+}
+
+export async function executePluginCommand(pluginId, cmdId, args) {
+  if (!pluginId) {
+    throw new Error('executePluginCommand requires pluginId');
+  }
+  if (!cmdId) {
+    throw new Error('executePluginCommand requires command id');
+  }
+  const declared = await callBackend(pluginId, 'commands.execute(' + cmdId + ')', function() {
+    return App.ExecutePluginCommand(pluginId, cmdId, args || {});
+  });
+  const handler = window.__VERSTAK_COMMAND_HANDLERS__[commandKey(pluginId, cmdId)];
+  if (!handler) {
+    throw new Error('[plugin:' + pluginId + '] commands.execute(' + cmdId + ') failed: declared-but-unhandled');
+  }
+  const result = await handler(args || {}, declared);
+  return {
+    status: 'handled',
+    pluginId: pluginId,
+    commandId: cmdId,
+    result: result
+  };
+}
+
+export function createPluginAPI(pluginId) {
+  if (!pluginId) {
+    throw new Error('createPluginAPI requires pluginId');
+  }
+
+  const cleanups = [];
+  let disposed = false;
+
+  function assertActive(label) {
+    if (disposed) {
+      throw new Error('[plugin:' + pluginId + '] ' + label + ' failed: API disposed');
+    }
+  }
+
+  function trackCleanup(fn) {
+    cleanups.push(fn);
+    return function untrackAndRun() {
+      const idx = cleanups.indexOf(fn);
+      if (idx !== -1) {
+        cleanups.splice(idx, 1);
+      }
+      fn();
+    };
+  }
+
+  return {
+    pluginId: pluginId,
+
+    i18n: {
+      getLocale: function() {
+        assertActive('i18n.getLocale');
+        return i18n.getLocale();
+      },
+      t: function(key, params, fallback) {
+        assertActive('i18n.t(' + key + ')');
+        return i18n.translatePlugin(pluginId, key, params, fallback);
+      },
+      onDidChangeLocale: function(listener) {
+        assertActive('i18n.onDidChangeLocale');
+        if (typeof listener !== 'function') {
+          throw new Error('i18n.onDidChangeLocale requires a listener function');
+        }
+        return trackCleanup(i18n.subscribe(listener));
+      }
+    },
+
+    ui: {
+      openSettings: function(panelId) {
+        assertActive('ui.openSettings');
+        window.dispatchEvent(new CustomEvent('verstak:open-settings', {
+          detail: { pluginId: pluginId, panelId: panelId || '' }
+        }));
+      }
+    },
+
+    capabilities: {
+      has: async function(capId) {
+        const info = await callBackend(pluginId, 'capabilities.has(' + capId + ')', function() {
+          return App.GetPluginCapability(pluginId, capId);
+        });
+        return !!(info && info.available);
+      },
+      get: function(capId) {
+        return callBackend(pluginId, 'capabilities.get(' + capId + ')', function() {
+          return App.GetPluginCapability(pluginId, capId);
+        });
+      },
+      list: function() {
+        return callBackend(pluginId, 'capabilities.list', function() {
+          return App.ListPluginCapabilities(pluginId);
+        });
+      }
+    },
+
+    events: {
+      publish: async function(type, payload) {
+        await callBackendErrorString(pluginId, 'events.publish(' + type + ')', function() {
+          return App.PublishPluginEvent(pluginId, type, payload || {});
+        });
+        if (!window.__VERSTAK_BACKEND_EVENT_BRIDGE__) {
+          dispatchLocalEvent(pluginId, type, payload || {});
+        }
+      },
+      subscribe: function(type, handler) {
+        assertActive('events.subscribe(' + type + ')');
+        if (typeof handler !== 'function') {
+          throw new Error('events.subscribe requires a handler function');
+        }
+        return callBackendErrorString(pluginId, 'events.subscribe(' + type + ')', function() {
+          return App.SubscribePluginEvent(pluginId, type);
+        }).then(function() {
+          const handlers = getEventHandlers(type);
+          handlers.push(handler);
+          return trackCleanup(function unsubscribe() {
+            const current = getEventHandlers(type);
+            window.__VERSTAK_EVENT_HANDLERS__[type] = current.filter(function(item) {
+              return item !== handler;
+            });
+          });
+        });
+      }
+    },
+
+    settings: {
+      read: async function(key) {
+        assertActive('settings.read');
+        const settings = await callBackend(pluginId, 'settings.read', function() {
+          return App.ReadPluginSettings(pluginId);
+        });
+        if (!key) {
+          return settings || {};
+        }
+        return settings ? settings[key] : undefined;
+      },
+      write: async function(key, value) {
+        assertActive('settings.write(' + key + ')');
+        if (!key) {
+          throw new Error('settings.write requires a key');
+        }
+        await callBackendErrorString(pluginId, 'settings.write(' + key + ')', function() {
+          return App.WritePluginSetting(pluginId, key, value);
+        });
+        return this.read();
+      },
+      writeAll: function(settings) {
+        assertActive('settings.writeAll');
+        return callBackendErrorString(pluginId, 'settings.writeAll', function() {
+          return App.WritePluginSettings(pluginId, settings || {});
+        });
+      }
+    },
+
+    storage: {
+      data: {
+        read: function(name) {
+          assertActive('storage.data.read(' + name + ')');
+          if (!name) {
+            throw new Error('storage.data.read requires a name');
+          }
+          return callBackend(pluginId, 'storage.data.read(' + name + ')', function() {
+            return App.ReadPluginDataJSON(pluginId, name);
+          }).then(function(data) {
+            return data || {};
+          });
+        },
+        readNDJSON: function(name) {
+          assertActive('storage.data.readNDJSON(' + name + ')');
+          if (!name) {
+            throw new Error('storage.data.readNDJSON requires a name');
+          }
+          return callBackend(pluginId, 'storage.data.readNDJSON(' + name + ')', function() {
+            return App.ReadPluginDataNDJSON(pluginId, name);
+          }).then(function(records) {
+            return Array.isArray(records) ? records : [];
+          });
+        },
+        writeNDJSON: function(name, records) {
+          assertActive('storage.data.writeNDJSON(' + name + ')');
+          if (!name) {
+            throw new Error('storage.data.writeNDJSON requires a name');
+          }
+          return callBackendErrorString(pluginId, 'storage.data.writeNDJSON(' + name + ')', function() {
+            return App.WritePluginDataNDJSON(pluginId, name, Array.isArray(records) ? records : []);
+          });
+        },
+        write: function(name, data) {
+          assertActive('storage.data.write(' + name + ')');
+          if (!name) {
+            throw new Error('storage.data.write requires a name');
+          }
+          return callBackendErrorString(pluginId, 'storage.data.write(' + name + ')', function() {
+            return App.WritePluginDataJSON(pluginId, name, data || {});
+          });
+        }
+      }
+    },
+
+    secrets: {
+      status: function() {
+        assertActive('secrets.status');
+        return callBackend(pluginId, 'secrets.status', function() {
+          return App.PluginSecretsStatus(pluginId);
+        });
+      },
+      unlock: function(masterPassword) {
+        assertActive('secrets.unlock');
+        return callBackendErrorString(pluginId, 'secrets.unlock', function() {
+          return App.PluginSecretsUnlock(pluginId, String(masterPassword == null ? '' : masterPassword));
+        });
+      },
+      list: function() {
+        assertActive('secrets.list');
+        return callBackend(pluginId, 'secrets.list', function() {
+          return App.PluginSecretsList(pluginId);
+        }).then(function(records) {
+          return Array.isArray(records) ? records : [];
+        });
+      },
+      read: function(secretId) {
+        assertActive('secrets.read(' + secretId + ')');
+        if (!secretId) {
+          throw new Error('secrets.read requires a secret id');
+        }
+        return callBackend(pluginId, 'secrets.read(' + secretId + ')', function() {
+          return App.PluginSecretsRead(pluginId, secretId);
+        });
+      },
+      write: function(record) {
+        assertActive('secrets.write');
+        return callBackend(pluginId, 'secrets.write', function() {
+          return App.PluginSecretsWrite(pluginId, record || {});
+        });
+      },
+      delete: function(secretId) {
+        assertActive('secrets.delete(' + secretId + ')');
+        if (!secretId) {
+          throw new Error('secrets.delete requires a secret id');
+        }
+        return callBackendErrorString(pluginId, 'secrets.delete(' + secretId + ')', function() {
+          return App.PluginSecretsDelete(pluginId, secretId);
+        });
+      },
+      copyLink: function(secretId) {
+        assertActive('secrets.copyLink(' + secretId + ')');
+        if (!secretId) {
+          throw new Error('secrets.copyLink requires a secret id');
+        }
+        return callBackend(pluginId, 'secrets.copyLink(' + secretId + ')', function() {
+          return App.PluginSecretsCopyLink(pluginId, secretId);
+        });
+      }
+    },
+
+    files: {
+      list: function(relativeDir) {
+        assertActive('files.list');
+        return callBackend(pluginId, 'files.list(' + (relativeDir || '') + ')', function() {
+          return App.ListVaultFiles(pluginId, relativeDir || '');
+        });
+      },
+      metadata: function(relativePath) {
+        assertActive('files.metadata(' + relativePath + ')');
+        return callBackend(pluginId, 'files.metadata(' + relativePath + ')', function() {
+          return App.GetVaultFileMetadata(pluginId, relativePath);
+        });
+      },
+      readText: function(relativePath) {
+        assertActive('files.readText(' + relativePath + ')');
+        return callBackend(pluginId, 'files.readText(' + relativePath + ')', function() {
+          return App.ReadVaultTextFile(pluginId, relativePath);
+        });
+      },
+      readBytes: function(relativePath) {
+        assertActive('files.readBytes(' + relativePath + ')');
+        return callBackend(pluginId, 'files.readBytes(' + relativePath + ')', function() {
+          return App.ReadVaultFileBytes(pluginId, relativePath);
+        });
+      },
+      writeText: function(relativePath, content, options) {
+        assertActive('files.writeText(' + relativePath + ')');
+        return callBackendErrorString(pluginId, 'files.writeText(' + relativePath + ')', function() {
+          return App.WriteVaultTextFile(pluginId, relativePath, String(content == null ? '' : content), options || {});
+        });
+      },
+      writeBytes: function(relativePath, dataBase64, options) {
+        assertActive('files.writeBytes(' + relativePath + ')');
+        return callBackendErrorString(pluginId, 'files.writeBytes(' + relativePath + ')', function() {
+          return App.WriteVaultFileBytes(pluginId, relativePath, String(dataBase64 == null ? '' : dataBase64), options || {});
+        });
+      },
+      createFolder: function(relativePath) {
+        assertActive('files.createFolder(' + relativePath + ')');
+        return callBackendErrorString(pluginId, 'files.createFolder(' + relativePath + ')', function() {
+          return App.CreateVaultFolder(pluginId, relativePath);
+        });
+      },
+      move: function(fromRelativePath, toRelativePath, options) {
+        assertActive('files.move(' + fromRelativePath + ')');
+        return callBackendErrorString(pluginId, 'files.move(' + fromRelativePath + ')', function() {
+          return App.MoveVaultPath(pluginId, fromRelativePath, toRelativePath, options || {});
+        });
+      },
+      trash: function(relativePath) {
+        assertActive('files.trash(' + relativePath + ')');
+        return callBackend(pluginId, 'files.trash(' + relativePath + ')', function() {
+          return App.TrashVaultPath(pluginId, relativePath);
+        });
+      },
+      listTrash: function() {
+        assertActive('files.listTrash');
+        return callBackend(pluginId, 'files.listTrash', function() {
+          return App.ListVaultTrash(pluginId);
+        });
+      },
+      restoreTrash: function(trashId, options) {
+        assertActive('files.restoreTrash(' + trashId + ')');
+        return callBackend(pluginId, 'files.restoreTrash(' + trashId + ')', function() {
+          return App.RestoreVaultTrash(pluginId, trashId, options || {});
+        });
+      },
+      deleteTrash: function(trashId) {
+        assertActive('files.deleteTrash(' + trashId + ')');
+        return callBackendErrorString(pluginId, 'files.deleteTrash(' + trashId + ')', function() {
+          return App.DeleteVaultTrash(pluginId, trashId);
+        });
+      },
+      openExternal: function(relativePath) {
+        assertActive('files.openExternal(' + relativePath + ')');
+        return callBackendErrorString(pluginId, 'files.openExternal(' + relativePath + ')', function() {
+          return App.OpenVaultPathExternal(pluginId, relativePath);
+        });
+      },
+      openURL: function(url) {
+        assertActive('files.openURL');
+        return callBackendErrorString(pluginId, 'files.openURL', function() {
+          return App.OpenExternalURL(pluginId, String(url == null ? '' : url));
+        });
+      },
+      showInFolder: function(relativePath) {
+        assertActive('files.showInFolder(' + relativePath + ')');
+        return callBackendErrorString(pluginId, 'files.showInFolder(' + relativePath + ')', function() {
+          return App.ShowVaultPathInFolder(pluginId, relativePath);
+        });
+      }
+    },
+
+    sync: {
+      status: function() {
+        assertActive('sync.status');
+        return callBackend(pluginId, 'sync.status', function() {
+          return App.PluginSyncStatus(pluginId);
+        });
+      },
+      configure: function(serverURL, username, password) {
+        assertActive('sync.configure');
+        return callBackendErrorString(pluginId, 'sync.configure', function() {
+          return App.PluginSyncConfigure(pluginId, serverURL || '', username || '', password || '');
+        });
+      },
+      disconnect: function() {
+        assertActive('sync.disconnect');
+        return callBackendErrorString(pluginId, 'sync.disconnect', function() {
+          return App.PluginSyncDisconnect(pluginId);
+        });
+      },
+      testConnection: function(serverURL, username, password) {
+        assertActive('sync.testConnection');
+        return callBackendErrorString(pluginId, 'sync.testConnection', function() {
+          return App.PluginSyncTestConnection(pluginId, serverURL || '', username || '', password || '');
+        });
+      },
+      setInterval: function(minutes) {
+        assertActive('sync.setInterval');
+        return callBackendErrorString(pluginId, 'sync.setInterval', function() {
+          return App.PluginSyncSetInterval(pluginId, Number(minutes) || 0);
+        });
+      },
+      resetKey: function() {
+        assertActive('sync.resetKey');
+        return callBackendErrorString(pluginId, 'sync.resetKey', function() {
+          return App.PluginSyncResetKey(pluginId);
+        });
+      },
+      now: function() {
+        assertActive('sync.now');
+        return callBackend(pluginId, 'sync.now', function() {
+          return App.PluginSyncNow(pluginId);
+        });
+      }
+    },
+
+    browserReceiver: {
+      pairing: function() {
+        assertActive('browserReceiver.pairing');
+        return callBackend(pluginId, 'browserReceiver.pairing', function() {
+          return App.PluginBrowserReceiverPairing(pluginId);
+        });
+      },
+      rotateToken: function() {
+        assertActive('browserReceiver.rotateToken');
+        return callBackend(pluginId, 'browserReceiver.rotateToken', function() {
+          return App.PluginRotateBrowserReceiverToken(pluginId);
+        });
+      }
+    },
+
+    workbench: {
+      openResource: async function(request) {
+        assertActive('workbench.openResource');
+        const result = await callBackend(pluginId, 'workbench.openResource', function() {
+          return App.OpenWorkbenchResource(pluginId, request || {});
+        });
+        window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+        return result;
+      },
+      editResource: async function(request) {
+        assertActive('workbench.editResource');
+        const result = await callBackend(pluginId, 'workbench.editResource', function() {
+          return App.EditWorkbenchResource(pluginId, request || {});
+        });
+        window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+        return result;
+      }
+    },
+
+    contributions: {
+      list: async function(point) {
+        assertActive('contributions.list');
+        const summary = await callBackend(pluginId, 'contributions.list', function() {
+          return App.GetContributions();
+        });
+        if (!point) {
+          return summary || {};
+        }
+        return Array.isArray((summary || {})[point]) ? summary[point] : [];
+      }
+    },
+
+    commands: {
+      register: function(cmdId, handler) {
+        assertActive('commands.register(' + cmdId + ')');
+        if (!cmdId) {
+          throw new Error('commands.register requires a command id');
+        }
+        if (typeof handler !== 'function') {
+          throw new Error('commands.register requires a handler function');
+        }
+        return callBackend(pluginId, 'commands.register(' + cmdId + ')', function() {
+          return App.ExecutePluginCommand(pluginId, cmdId, { validateOnly: true });
+        }).then(function() {
+          const key = commandKey(pluginId, cmdId);
+          window.__VERSTAK_COMMAND_HANDLERS__[key] = handler;
+          return trackCleanup(function unregisterCommand() {
+            if (window.__VERSTAK_COMMAND_HANDLERS__[key] === handler) {
+              delete window.__VERSTAK_COMMAND_HANDLERS__[key];
+            }
+          });
+        });
+      },
+      execute: async function(cmdId, args) {
+        assertActive('commands.execute(' + cmdId + ')');
+        return executePluginCommand(pluginId, cmdId, args || {});
+      },
+      executeFor: async function(targetPluginId, cmdId, args) {
+        assertActive('commands.executeFor(' + targetPluginId + ':' + cmdId + ')');
+        return executePluginCommand(targetPluginId, cmdId, args || {});
+      }
+    },
+
+    dispose: function() {
+      if (disposed) return;
+      disposed = true;
+      while (cleanups.length > 0) {
+        const cleanup = cleanups.pop();
+        try {
+          cleanup();
+        } catch (e) {
+          console.error('[VerstakPluginAPI] cleanup error:', e);
+        }
+      }
+    }
+  };
+}
+
+window.createPluginAPI = createPluginAPI;
+window.VerstakPluginAPI = createPluginAPI;

frontend/src/lib/plugin-manager/PluginCard.svelte

@@ -1,10 +1,26 @@
 <script>
+  import Icon from '../ui/Icon.svelte';
+  import { onDestroy } from 'svelte';
+  import { i18n } from '../i18n/index.js';
   export let p = {};
   export let capabilities = [];
   export let permissions = [];
-  export let onSettings = () => {};
+  export let contributions = {};
+  export let vaultOpen = false;
+  export let settingsPanels = [];
+  export let onEnable = () => {};
+  export let onDisable = () => {};
+  let locale = i18n.getLocale();
+  const unsubscribeLocale = i18n.subscribe((nextLocale) => { locale = nextLocale; });
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+  onDestroy(unsubscribeLocale);
 
-  $: hasSettingsPanel = (contributions.settingsPanels || []).some(sp => sp.pluginId === pluginId);
+  $: m = p.manifest || {};
+  $: pluginId = m.id || 'unknown';
+  $: hasSettingsPanel = settingsPanels.length > 0;
   $: hasUIPermission = (m.permissions || []).includes('ui.register');
   $: hasStoragePermission = (m.permissions || []).includes('storage.namespace');
   $: hasCommandsPermission = (m.permissions || []).includes('commands.register');
@@ -20,22 +36,26 @@
     discovered: '#a0a0b8',
   }[p.status] || '#a0a0b8');
 
-  $: pluginId = m.id || 'unknown';
-
   $: contribCounts = {
     views: (contributions.views || []).filter(v => v.pluginId === pluginId).length,
     commands: (contributions.commands || []).filter(c => c.pluginId === pluginId).length,
+    searchProviders: (contributions.searchProviders || []).filter(s => s.pluginId === pluginId).length,
     sidebar: (contributions.sidebarItems || []).filter(s => s.pluginId === pluginId).length,
     statusbar: (contributions.statusBarItems || []).filter(s => s.pluginId === pluginId).length,
+    openProviders: (contributions.openProviders || []).filter(o => o.pluginId === pluginId).length,
+    workspaceItems: (contributions.workspaceItems || []).filter(w => w.pluginId === pluginId).length,
   };
 
   $: contribSummary = (() => {
     const parts = [];
-    if (contribCounts.views > 0) parts.push(contribCounts.views + ' view' + (contribCounts.views !== 1 ? 's' : ''));
-    if (contribCounts.commands > 0) parts.push(contribCounts.commands + ' command' + (contribCounts.commands !== 1 ? 's' : ''));
-    if (contribCounts.sidebar > 0) parts.push(contribCounts.sidebar + ' sidebar' + (contribCounts.sidebar !== 1 ? 's' : ''));
-    if (contribCounts.statusbar > 0) parts.push(contribCounts.statusbar + ' statusbar' + (contribCounts.statusbar !== 1 ? 's' : ''));
-    return parts.length > 0 ? parts.join(', ') : 'none';
+    if (contribCounts.views > 0) parts.push(tr('pluginCard.count.views', { count: contribCounts.views }));
+    if (contribCounts.commands > 0) parts.push(tr('pluginCard.count.commands', { count: contribCounts.commands }));
+    if (contribCounts.searchProviders > 0) parts.push(tr('pluginCard.count.searchProviders', { count: contribCounts.searchProviders }));
+    if (contribCounts.sidebar > 0) parts.push(tr('pluginCard.count.sidebar', { count: contribCounts.sidebar }));
+    if (contribCounts.statusbar > 0) parts.push(tr('pluginCard.count.statusbar', { count: contribCounts.statusbar }));
+    if (contribCounts.openProviders > 0) parts.push(tr('pluginCard.count.openProviders', { count: contribCounts.openProviders }));
+    if (contribCounts.workspaceItems > 0) parts.push(tr('pluginCard.count.workspace', { count: contribCounts.workspaceItems }));
+    return parts.length > 0 ? parts.join(', ') : tr('common.none');
   })();
 
   $: dangerousPermissions = (m.permissions || []).filter(name => {
@@ -54,20 +74,27 @@
   $: missingOptional = (m.optionalRequires || []).filter(opt =>
     !capabilities.some(c => c.name === opt)
   );
+
+  export let actionFeedback = {}; // { [pluginId]: 'enabling' | 'disabling' | null }
+
+  $: isDisabled = p.status === 'disabled' || !p.enabled;
+  $: canToggle = p.status !== 'failed' && p.status !== 'incompatible' && p.status !== 'missing-required-capability' && p.status !== 'discovered';
+  $: isBusy = actionFeedback[pluginId] != null;
+  $: busyAction = actionFeedback[pluginId] || null;
 </script>
 
-<div class="plugin-card" class:disabled={!p.enabled} class:failed={p.status === 'failed'}>
+<div class="plugin-card" class:disabled={isDisabled} class:failed={p.status === 'failed'}>
   <div class="card-header">
     <div class="plugin-id">
       <span class="status-dot" style="background: {statusColor}"></span>
-      <strong>{m.id || 'unknown'}</strong>
+      <strong>{pluginId}</strong>
       <span class="version">v{m.version || '?'}</span>
     </div>
-    <span class="status-badge" style="color: {statusColor}">{p.status}</span>
+    <span class="status-badge" style="color: {statusColor}">{tr(`status.${p.status}`, undefined, p.status)}</span>
   </div>
 
   {#if p.status === 'degraded'}
-    <p class="degraded-text">Plugin is usable, but some optional capabilities are unavailable.</p>
+    <p class="degraded-text">{tr('pluginCard.degraded')}</p>
   {/if}
 
   {#if m.description}
@@ -76,40 +103,44 @@
 
   <div class="card-meta">
     <div class="meta-row">
-      <span class="label">Name:</span>
+      <span class="label">{tr('pluginCard.name')}:</span>
       <span>{m.name || '-'}</span>
     </div>
     <div class="meta-row">
-      <span class="label">API Version:</span>
-      <span>{m.apiVersion || '-'}</span>
+      <span class="label">{tr('common.source')}:</span>
+      <span>{m.source || tr('common.unknown')}</span>
     </div>
     <div class="meta-row">
-      <span class="label">Source:</span>
-      <span>{m.source || 'unknown'}</span>
-    </div>
-    <div class="meta-row">
-      <span class="label">Root:</span>
-      <span class="path">{p.rootPath || '-'}</span>
-    </div>
-    <div class="meta-row">
-      <span class="label">Contributions:</span>
+      <span class="label">{tr('pluginCard.contributions')}:</span>
       <span>{contribSummary}</span>
     </div>
   </div>
 
-  <!-- Capabilities -->
-  <div class="section">
-    <span class="section-title">Provides</span>
-    <div class="tags">
-      {#each m.provides || [] as cap}
-        <span class="tag provides">{cap}</span>
-      {/each}
+  <details class="plugin-details">
+    <summary>{tr('pluginCard.technicalDetails')}</summary>
+    <div class="card-meta technical-meta">
+      <div class="meta-row">
+        <span class="label">{tr('pluginCard.apiVersion')}:</span>
+        <span>{m.apiVersion || '-'}</span>
+      </div>
+      <div class="meta-row">
+        <span class="label">{tr('pluginCard.root')}:</span>
+        <span class="path">{p.rootPath || '-'}</span>
+      </div>
     </div>
-  </div>
 
-  {#if m.requires && m.requires.length > 0}
     <div class="section">
-      <span class="section-title">Requires</span>
+      <span class="section-title">{tr('pluginCard.provides')}</span>
+      <div class="tags">
+        {#each m.provides || [] as cap}
+          <span class="tag provides">{cap}</span>
+        {/each}
+      </div>
+    </div>
+
+    {#if m.requires && m.requires.length > 0}
+    <div class="section">
+      <span class="section-title">{tr('pluginCard.requires')}</span>
       <div class="tags">
         {#each m.requires as req}
           {@const found = capabilities.some(c => c.name === req)}
@@ -120,14 +151,14 @@
         {/each}
       </div>
       {#if missingRequired.length > 0}
-        <p class="warning">⚠ Missing required capabilities: {missingRequired.join(', ')}</p>
+        <p class="warning"><Icon name="warning" size={12} /> {tr('pluginCard.missingRequired')}: {missingRequired.join(', ')}</p>
       {/if}
     </div>
-  {/if}
+    {/if}
 
-  {#if m.optionalRequires && m.optionalRequires.length > 0}
+    {#if m.optionalRequires && m.optionalRequires.length > 0}
     <div class="section">
-      <span class="section-title">Optional Requires</span>
+      <span class="section-title">{tr('pluginCard.optionalRequires')}</span>
       <div class="tags">
         {#each m.optionalRequires as opt}
           {@const found = capabilities.some(c => c.name === opt)}
@@ -138,26 +169,26 @@
         {/each}
       </div>
       {#if missingOptional.length > 0}
-        <p class="info">ℹ Optional capabilities not available — plugin running in degraded mode</p>
+        <p class="info"><Icon name="warning" size={12} /> {tr('pluginCard.optionalUnavailable')}</p>
       {/if}
     </div>
-  {/if}
+    {/if}
 
-  <!-- Permissions -->
-  {#if m.permissions && m.permissions.length > 0}
+    {#if m.permissions && m.permissions.length > 0}
     <div class="section">
-      <span class="section-title">Permissions</span>
+      <span class="section-title">{tr('pluginCard.permissions')}</span>
       <div class="tags">
         {#each m.permissions as perm}
           {@const isDangerous = dangerousPermissions.includes(perm)}
           <span class="tag" class:dangerous={isDangerous}>
             {perm}
-            {#if isDangerous}<span class="danger-icon">⚠</span>{/if}
+            {#if isDangerous}<Icon name="warning" size={12} class="danger-icon" />{/if}
           </span>
         {/each}
       </div>
     </div>
-  {/if}
+    {/if}
+  </details>
 
   <!-- Error -->
   {#if p.error}
@@ -167,15 +198,29 @@
   <!-- Actions -->
   <div class="card-actions">
     {#if hasSettingsPanel}
-      <button class="btn-settings" on:click={() => onSettings(m.id)} type="button">
-        ⚙ Settings
+      <button class="btn-settings" on:click={() => window.dispatchEvent(new CustomEvent('verstak:open-settings', { detail: { pluginId: m.id, panelId: settingsPanels[0]?.id } }))} type="button" disabled={isDisabled || p.status === 'failed'}>
+        <Icon name="gear" size={14} /> {tr('settings.title')}
       </button>
     {/if}
+    {#if vaultOpen && canToggle}
+      {#if isDisabled}
+        <button class="btn-enable" on:click={() => onEnable(m.id)} type="button" disabled={isBusy}>
+          {#if busyAction === 'enabling'}{tr('pluginCard.enabling')}{:else}{tr('pluginCard.enable')}{/if}
+        </button>
+      {:else}
+        <button class="btn-disable" on:click={() => onDisable(m.id)} type="button" disabled={isBusy}>
+          {#if busyAction === 'disabling'}{tr('pluginCard.disabling')}{:else}{tr('pluginCard.disable')}{/if}
+        </button>
+      {/if}
+    {/if}
+    {#if !vaultOpen && canToggle}
+      <span class="vault-hint">{tr('pluginCard.openVault')}</span>
+    {/if}
   </div>
 
   <!-- Permission warnings -->
-  {#if !hasUIPermission && (m.contributes && (m.contributes.views || m.contributes.sidebarItems || m.contributes.settingsPanels).length > 0)}
-    <p class="warning">⚠ Plugin has UI contributions but lacks ui.register permission</p>
+  {#if !hasUIPermission && m.contributes && ((m.contributes.views || []).length > 0 || (m.contributes.sidebarItems || []).length > 0 || (m.contributes.settingsPanels || []).length > 0)}
+    <p class="warning"><Icon name="warning" size={12} /> {tr('pluginCard.missingUiPermission')}</p>
   {/if}
 </div>
 
@@ -185,6 +230,7 @@
     border: 1px solid #0f3460;
     border-radius: 8px;
     padding: 1rem;
+    min-width: 0;
   }
 
   .plugin-card.disabled {
@@ -199,6 +245,8 @@
     display: flex;
     align-items: center;
     justify-content: space-between;
+    gap: 0.75rem;
+    flex-wrap: wrap;
     margin-bottom: 0.5rem;
   }
 
@@ -206,6 +254,12 @@
     display: flex;
     align-items: center;
     gap: 0.5rem;
+    min-width: 0;
+    flex-wrap: wrap;
+  }
+
+  .plugin-id strong {
+    overflow-wrap: anywhere;
   }
 
   .status-dot {
@@ -242,15 +296,34 @@
 
   .card-meta {
     display: grid;
-    grid-template-columns: 1fr 1fr;
+    grid-template-columns: repeat(2, minmax(0, 1fr));
     gap: 0.3rem;
     margin-bottom: 0.75rem;
     font-size: 0.8rem;
   }
 
+  .technical-meta {
+    margin-top: 0.55rem;
+  }
+
+  .plugin-details {
+    margin: 0.6rem 0;
+    padding: 0.45rem 0;
+    border-top: 1px solid rgba(15, 52, 96, 0.75);
+    border-bottom: 1px solid rgba(15, 52, 96, 0.75);
+  }
+
+  .plugin-details summary {
+    cursor: pointer;
+    color: #8b8ba8;
+    font-size: 0.78rem;
+    font-weight: 600;
+  }
+
   .meta-row {
     display: flex;
     gap: 0.5rem;
+    min-width: 0;
   }
 
   .label {
@@ -262,6 +335,8 @@
     font-family: monospace;
     font-size: 0.75rem;
     color: #a0a0b8;
+    min-width: 0;
+    overflow-wrap: anywhere;
   }
 
   .section {
@@ -290,6 +365,8 @@
     font-size: 0.75rem;
     font-family: monospace;
     color: #e0e0e0;
+    max-width: 100%;
+    overflow-wrap: anywhere;
   }
 
   .tag.provides {
@@ -320,7 +397,7 @@
   }
 
   .check { color: #4ecca3; margin-left: 2px; }
-  .danger-icon { color: #e94560; margin-left: 2px; }
+  :global(.danger-icon) { color: #e94560; margin-left: 2px; vertical-align: middle; }
 
   .info {
     color: #ffc857;
@@ -347,13 +424,18 @@
 
   .card-actions {
     display: flex;
+    align-items: center;
     gap: 0.5rem;
+    flex-wrap: wrap;
     margin-top: 0.75rem;
     padding-top: 0.5rem;
     border-top: 1px solid #0f3460;
   }
 
   .btn-settings {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.3rem;
     background: #0f3460;
     border: 1px solid #1a3a5c;
     color: #e0e0f0;
@@ -366,4 +448,55 @@
   .btn-settings:hover {
     background: #1a3a5c;
   }
+
+  .btn-enable {
+    background: #4ecca3;
+    color: #1a1a2e;
+    border: none;
+    padding: 0.3rem 0.75rem;
+    border-radius: 4px;
+    cursor: pointer;
+    font-size: 0.8rem;
+    font-weight: 600;
+  }
+
+  .btn-enable:hover {
+    background: #3dbb92;
+  }
+
+  .btn-disable {
+    background: #533483;
+    color: #e0e0f0;
+    border: none;
+    padding: 0.3rem 0.75rem;
+    border-radius: 4px;
+    cursor: pointer;
+    font-size: 0.8rem;
+    font-weight: 600;
+  }
+
+  .btn-disable:hover {
+    background: #6b44a0;
+  }
+
+  .vault-hint {
+    color: #666;
+    font-size: 0.75rem;
+    font-style: italic;
+  }
+
+  @media (max-width: 760px) {
+    .card-meta {
+      grid-template-columns: 1fr;
+    }
+
+    .meta-row {
+      flex-direction: column;
+      gap: 0.15rem;
+    }
+
+    .label {
+      min-width: 0;
+    }
+  }
 </style>

frontend/src/lib/plugin-manager/PluginManager.svelte

@@ -1,7 +1,11 @@
 <script>
+  import Icon from '../ui/Icon.svelte';
   import PluginCard from './PluginCard.svelte';
-  import { onMount } from 'svelte';
-  import { GetPlugins, GetCapabilities, GetPermissions, GetContributions, ReloadPlugins, GetVaultStatus } from '../../../wailsjs/go/api/App';
+  import PluginBundleHost from '../plugin-host/PluginBundleHost.svelte';
+  import { onDestroy, onMount, tick } from 'svelte';
+  import { GetPlugins, GetCapabilities, GetPermissions, GetContributions, ReloadPlugins, GetVaultStatus, GetVaultPluginState, EnablePlugin, DisablePlugin, ReadPluginSettings, WritePluginSettings, GetPluginFrontendInfo, WriteFrontendLog } from '../../../wailsjs/go/api/App';
+  import { debug } from '../log/debug.js';
+  import { i18n } from '../i18n/index.js';
 
   let plugins = [];
   let capabilities = [];
@@ -10,136 +14,387 @@
   let loading = true;
   let error = '';
   let vaultStatus = { status: 'unknown', path: '', vaultId: '' };
+  let vaultPluginState = { enabledPlugins: [], disabledPlugins: [], desiredPlugins: [] };
   let settingsPanel = null;
   let settingsData = {};
   let settingsPluginId = '';
+  let settingsError = null;
+  let settingsPluginInfo = null;
+  let lastOpenedKey = '';
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  // Per-action loading state — shows feedback on specific buttons without hiding the whole list
+  let actionFeedback = {}; // { [pluginId]: 'enabling' | 'disabling' | null }
+  let reloading = false;
+  let toastMessage = '';
+  let toastType = 'success'; // 'success' | 'error' | 'info'
+
+  export let activeSettingsPluginId = '';
+  export let activeSettingsPanelId = '';
+
+  $: if (activeSettingsPluginId) {
+    const settingsPanelCount = (contributions.settingsPanels || []).length;
+    const key = `${activeSettingsPluginId}:${activeSettingsPanelId || '*'}`;
+    if (key !== lastOpenedKey || settingsPanelCount === 0) {
+      openSettingsFromProps(activeSettingsPluginId, activeSettingsPanelId);
+    }
+  }
+
+  function showToast(msg, type = 'success') {
+    toastMessage = msg;
+    toastType = type;
+    setTimeout(() => {
+      toastMessage = '';
+    }, 4000);
+  }
+
+  function notifyPluginsChanged() {
+    window.dispatchEvent(new CustomEvent('verstak:plugins-changed'));
+  }
+
+  function unpackBackendResult(result) {
+    if (Array.isArray(result) && result.length === 2 && (typeof result[1] === 'string' || result[1] == null)) {
+      return { value: result[0], error: result[1] || '' };
+    }
+    return { value: result, error: '' };
+  }
+
+  function unpackReloadResult(result) {
+    if (Array.isArray(result)) {
+      return {
+        count: Number(result[0] || 0),
+        summary: result[1] || `Reloaded ${Number(result[0] || 0)} plugin(s).`,
+      };
+    }
+    const count = Number(result || 0);
+    return { count, summary: `Reloaded ${count} plugin(s).` };
+  }
+
+  async function openSettingsFromProps(pluginId, panelId) {
+    const panel = (contributions.settingsPanels || []).find(sp => sp.pluginId === pluginId && (!panelId || sp.id === panelId));
+    if (panel) {
+      lastOpenedKey = `${pluginId}:${panelId || '*'}`;
+      settingsPanel = panel;
+      settingsPluginId = pluginId;
+      settingsError = null;
+      try {
+        const info = await GetPluginFrontendInfo(pluginId);
+        settingsPluginInfo = info;
+      } catch { settingsPluginInfo = null; }
+      ReadPluginSettings(pluginId).then(result => {
+        const unpacked = unpackBackendResult(result);
+        if (unpacked.error) {
+          settingsError = unpacked.error;
+          settingsData = {};
+          return;
+        }
+        settingsData = unpacked.value || {};
+      }).catch(() => { settingsData = {}; });
+    } else {
+      settingsError = `Settings panel not found for plugin "${pluginId}". Check that the plugin is enabled and has settingsPanels in its manifest.`;
+    }
+  }
+
+  $: vaultOpen = vaultStatus.status === 'open';
+  $: missingInstalled = computeMissingInstalled();
+
+  function computeMissingInstalled() {
+    if (!vaultPluginState.desiredPlugins) return [];
+    const installedIDs = new Set(plugins.map(p => p.manifest?.id).filter(Boolean));
+    return (vaultPluginState.desiredPlugins || []).filter(dp => !installedIDs.has(dp.id));
+  }
 
   async function loadAll() {
+    debug.log('[PluginManager] loadAll: START');
     error = '';
     loading = true;
     try {
+      debug.log('[PluginManager] loadAll: calling GetPlugins...');
       const p = await GetPlugins();
-      plugins = p || [];
+      await Promise.all((p || []).map((plugin) => (
+        i18n.loadPlugin(plugin.manifest?.id, plugin.manifest?.localization).catch(() => {})
+      )));
+      plugins = (p || []).map((plugin) => i18n.localizePlugin(plugin));
+      debug.log('[PluginManager] loadAll: GetPlugins returned', plugins.length, 'plugins');
+      for (var i = 0; i < plugins.length; i++) {
+        debug.log('[PluginManager] loadAll: plugin[' + i + ']:', plugins[i].manifest?.id, 'status:', plugins[i].status, 'enabled:', plugins[i].enabled);
+      }
     } catch (e) {
+      debug.log('[PluginManager] loadAll: GetPlugins ERROR:', String(e));
+      WriteFrontendLog('PluginManager', 'loadAll: GetPlugins ERROR: ' + String(e));
       error = 'GetPlugins: ' + String(e);
       loading = false;
       return;
     }
-    // Vault status — non-critical
-    GetVaultStatus().then(v => { vaultStatus = v || { status: 'unknown', path: '', vaultId: '' }; }).catch(() => {});
-    // Capabilities and permissions are non-critical — load async
-    GetCapabilities().then(c => { capabilities = c || []; }).catch(() => {});
-    GetPermissions().then(p => { permissions = p || []; }).catch(() => {});
-    GetContributions().then(c => { contributions = c || {}; }).catch(() => {});
+    // Collect all async loads but await them so loading stays true until all are done
+    try {
+      debug.log('[PluginManager] loadAll: loading vault/capabilities/permissions/contributions...');
+      const [v, caps, perms, contribs] = await Promise.all([
+        GetVaultStatus().catch(() => ({ status: 'unknown', path: '', vaultId: '' })),
+        GetCapabilities().catch(() => []),
+        GetPermissions().catch(() => []),
+        GetContributions().catch(() => ({})),
+      ]);
+      vaultStatus = v || { status: 'unknown', path: '', vaultId: '' };
+      capabilities = caps || [];
+      permissions = perms || [];
+      contributions = i18n.localizeContributionSummary(contribs || {});
+      debug.log('[PluginManager] loadAll: vault=' + vaultStatus.status + ' caps=' + capabilities.length + ' perms=' + permissions.length);
+      WriteFrontendLog('PluginManager', 'loadAll: vault=' + vaultStatus.status + ' caps=' + capabilities.length + ' perms=' + permissions.length);
+    } catch (e) {
+      debug.log('[PluginManager] loadAll: non-critical load ERROR:', String(e));
+      WriteFrontendLog('PluginManager', 'loadAll: non-critical ERROR: ' + String(e));
+      console.error('[PluginManager] non-critical load error:', e);
+    }
+    if (vaultStatus.status === 'open') {
+      try {
+        debug.log('[PluginManager] loadAll: calling GetVaultPluginState...');
+        vaultPluginState = await GetVaultPluginState() || { enabledPlugins: [], disabledPlugins: [], desiredPlugins: [] };
+        WriteFrontendLog('PluginManager', 'loadAll: GetVaultPluginState returned');
+      } catch (e) {
+        WriteFrontendLog('PluginManager', 'loadAll: GetVaultPluginState ERROR: ' + String(e));
+      }
+    }
     loading = false;
+    await tick();
+    debug.log('[PluginManager] loadAll: END, loading=false');
+    WriteFrontendLog('PluginManager', 'loadAll: END, loading=false');
   }
 
-  onMount(() => { loadAll(); });
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed) loadAll();
+    });
+    loadAll();
+  });
+
+  onDestroy(() => {
+    if (unsubscribeLocale) unsubscribeLocale();
+  });
 
   async function reload() {
-    loading = true;
+    debug.log('[PluginManager] reload: START');
+    reloading = true;
     error = '';
+    let resultMsg = '';
     try {
-      await ReloadPlugins();
+      debug.log('[PluginManager] reload: calling ReloadPlugins...');
+      const { count, summary } = unpackReloadResult(await ReloadPlugins());
+      debug.log('[PluginManager] reload: ReloadPlugins returned count=' + count + ' summary=' + summary);
+      resultMsg = `Reloaded ${count} plugin(s). ${summary}`;
     } catch (e) {
+      debug.log('[PluginManager] reload: ReloadPlugins ERROR:', String(e));
       error = 'Reload: ' + String(e);
-      loading = false;
+      reloading = false;
       return;
     }
+    debug.log('[PluginManager] reload: calling loadAll after reload...');
     await loadAll();
+    notifyPluginsChanged();
+    reloading = false;
+    debug.log('[PluginManager] reload: END');
+    showToast(resultMsg, 'success');
+  }
+
+  async function enablePlugin(pluginId) {
+    debug.log('[PluginManager] enablePlugin:', pluginId);
+    actionFeedback = { ...actionFeedback, [pluginId]: 'enabling' };
+    error = '';
+    const err = await EnablePlugin(pluginId);
+    if (err) {
+      debug.log('[PluginManager] enablePlugin: ERROR:', err);
+      actionFeedback = { ...actionFeedback, [pluginId]: null };
+      error = 'Enable: ' + err;
+      return;
+    }
+    debug.log('[PluginManager] enablePlugin: success, reloading...');
+    // Reload to get updated state
+    try { await ReloadPlugins(); } catch (e) { /* ignore */ }
+    await loadAll();
+    notifyPluginsChanged();
+    actionFeedback = { ...actionFeedback, [pluginId]: null };
+    debug.log('[PluginManager] enablePlugin: done');
+    showToast(`Plugin "${pluginId}" enabled`, 'success');
+  }
+
+  async function disablePlugin(pluginId) {
+    debug.log('[PluginManager] disablePlugin:', pluginId);
+    actionFeedback = { ...actionFeedback, [pluginId]: 'disabling' };
+    error = '';
+    const err = await DisablePlugin(pluginId);
+    if (err) {
+      debug.log('[PluginManager] disablePlugin: ERROR:', err);
+      actionFeedback = { ...actionFeedback, [pluginId]: null };
+      error = 'Disable: ' + err;
+      return;
+    }
+    debug.log('[PluginManager] disablePlugin: success, reloading...');
+    // Reload to get updated state
+    try { await ReloadPlugins(); } catch (e) { /* ignore */ }
+    await loadAll();
+    notifyPluginsChanged();
+    actionFeedback = { ...actionFeedback, [pluginId]: null };
+    debug.log('[PluginManager] disablePlugin: done');
+    showToast(`Plugin "${pluginId}" disabled`, 'info');
   }
 
   $: totalPlugins = plugins.length;
   $: totalCaps = capabilities.length;
   $: totalPerms = permissions.length;
+  $: statusSummary = computeStatusSummary(plugins);
+  $: elevatedPermissionPluginCount = computeElevatedPermissionPluginCount(plugins, permissions);
 
-  function openSettings(pluginId) {
-    const panel = (contributions.settingsPanels || []).find(sp => sp.pluginId === pluginId);
-    if (panel) {
-      settingsPanel = panel;
-      settingsPluginId = pluginId;
-      // Load existing settings
-      try {
-        const data = JSON.parse(localStorage.getItem('verstak-settings-' + pluginId) || '{}');
-        settingsData = data;
-      } catch (e) {
-        settingsData = {};
-      }
-    }
+  function computeStatusSummary(pluginRows) {
+    return pluginRows.reduce((summary, plugin) => {
+      const status = plugin?.status || 'unknown';
+      if (status === 'loaded') summary.loaded += 1;
+      else if (status === 'degraded') summary.degraded += 1;
+      else if (status === 'failed' || status === 'incompatible' || status === 'missing-required-capability') summary.failed += 1;
+      else if (status === 'disabled' || plugin?.enabled === false) summary.disabled += 1;
+      else summary.other += 1;
+      return summary;
+    }, { loaded: 0, degraded: 0, failed: 0, disabled: 0, other: 0 });
+  }
+
+  function computeElevatedPermissionPluginCount(pluginRows, permissionRows) {
+    const dangerous = new Set((permissionRows || []).filter(permission => permission.dangerous).map(permission => permission.name));
+    return (pluginRows || []).filter(plugin => (plugin?.manifest?.permissions || []).some(permission => dangerous.has(permission))).length;
+  }
+
+  function closeSettings() {
+    settingsPanel = null;
+    settingsPluginId = '';
+    settingsError = null;
+    lastOpenedKey = '';
+    window.dispatchEvent(new CustomEvent('verstak:close-settings'));
   }
 
   function saveSettings() {
-    try {
-      localStorage.setItem('verstak-settings-' + settingsPluginId, JSON.stringify(settingsData));
-      // Also try Wails backend
-      const { WritePluginSettings } = require('../../../wailsjs/go/api/App');
-      WritePluginSettings(settingsPluginId, settingsData).then(err => {
-        if (err) console.error('WritePluginSettings:', err);
-      }).catch(() => {});
-    } catch (e) {
-      console.error('saveSettings:', e);
-    }
+    WritePluginSettings(settingsPluginId, settingsData).then(err => {
+      if (err) console.error('WritePluginSettings:', err);
+    }).catch(e => console.error('WritePluginSettings:', e));
   }
 </script>
 
 <div class="plugin-manager">
+  <!-- Toast notification -->
+  {#if toastMessage}
+    <div class="toast" class:toast-success={toastType === 'success'} class:toast-error={toastType === 'error'} class:toast-info={toastType === 'info'}>
+      {toastMessage}
+    </div>
+  {/if}
+
   <header>
     <div class="header-left">
-      <h2>Plugin Manager</h2>
+      <h2>{tr('settings.pluginManager')}</h2>
       {#if vaultStatus.status !== 'unknown'}
         <span class="vault-badge" class:vault-open={vaultStatus.status === 'open'} class:vault-not-created={vaultStatus.status === 'not-created'} class:vault-closed={vaultStatus.status === 'closed'} class:vault-error={vaultStatus.status === 'error'}>
-          Vault: {vaultStatus.status}{#if vaultStatus.path} ({vaultStatus.path}){/if}
+          {tr('vault.label', { status: tr(`vault.status.${vaultStatus.status}`, undefined, vaultStatus.status) })}{#if vaultStatus.path} ({vaultStatus.path}){/if}
         </span>
       {/if}
     </div>
-    <button class="reload-btn" on:click={reload} type="button" disabled={loading}>
-      {loading ? '⟳ Loading...' : '⟳ Reload'}
+    <button class="reload-btn" on:click={reload} type="button" disabled={loading || reloading}>
+      {reloading ? tr('pluginManager.reloading') : tr('pluginManager.reload')}
     </button>
   </header>
 
   {#if loading}
-    <div class="loading">Scanning plugin directories...</div>
+    <div class="loading">{tr('pluginManager.scanning')}</div>
   {:else if error}
     <div class="error">
-      <div class="error-icon">⚠</div>
+      <Icon name="warning" size={24} class="error-icon" />
       <div class="error-message">{error}</div>
-      <button class="retry-btn" on:click={loadAll} type="button">⟳ Retry</button>
+      <button class="retry-btn" on:click={loadAll} type="button">{tr('common.retry')}</button>
     </div>
   {:else}
     <div class="summary">
-      <span class="badge">{totalPlugins} plugin(s) discovered</span>
-      <span class="badge">{totalCaps} capabilities registered</span>
-      <span class="badge">{totalPerms} permissions known</span>
+      <span class="badge">{tr('pluginManager.summary.plugins', { count: totalPlugins })}</span>
+      <span class="badge">{tr('pluginManager.summary.capabilities', { count: totalCaps })}</span>
+      <span class="badge">{tr('pluginManager.summary.permissions', { count: totalPerms })}</span>
     </div>
 
-    {#if plugins.length === 0}
+    <div class="scan-summary" aria-label={tr('pluginManager.scanSummary')}>
+      <section class="scan-card" data-plugin-manager-summary="health">
+        <div class="scan-card-title">{tr('pluginManager.health')}</div>
+        <div class="scan-metrics">
+          <span data-plugin-status-summary="loaded"><strong>{statusSummary.loaded}</strong> {tr('status.loaded')}</span>
+          <span data-plugin-status-summary="degraded"><strong>{statusSummary.degraded}</strong> {tr('status.degraded')}</span>
+          <span data-plugin-status-summary="failed"><strong>{statusSummary.failed}</strong> {tr('status.failed')}</span>
+          <span data-plugin-status-summary="disabled"><strong>{statusSummary.disabled}</strong> {tr('status.disabled')}</span>
+        </div>
+      </section>
+
+      <section class="scan-card" data-plugin-manager-summary="risk">
+        <div class="scan-card-title">{tr('pluginManager.permissionRisk')}</div>
+        <div class="scan-metrics">
+          <span data-plugin-risk-summary="elevated-permissions">{tr('pluginManager.elevatedPermissions', { count: elevatedPermissionPluginCount })}</span>
+        </div>
+      </section>
+    </div>
+
+    {#if plugins.length === 0 && missingInstalled.length === 0}
       <div class="empty">
         <div class="empty-icon">
           <svg width="48" height="48" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">
             <path d="M22 19a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5l2 3h9a2 2 0 0 1 2 2z"/>
           </svg>
-        </div>        <p>No plugins found</p>
-        <p class="hint">Plugin directories scanned:</p>
+        </div>
+        <p>{tr('pluginManager.none')}</p>
+        <p class="hint">{tr('pluginManager.scannedDirs')}</p>
         <ul class="hint-list">
-          <li><code>~/.config/verstak/plugins/</code> — user plugins</li>
-          <li><code>./plugins/</code> — bundled plugins (app directory)</li>
+          <li><code>~/.config/verstak/plugins/</code> — {tr('pluginManager.userPlugins')}</li>
+          <li><code>./plugins/</code> — {tr('pluginManager.bundledPlugins')}</li>
         </ul>
-        <p class="hint">Place a plugin folder with <code>plugin.json</code> in one of these directories and click Reload.</p>
+        <p class="hint">{tr('pluginManager.installHint')}</p>
       </div>
     {:else}
       <div class="plugin-list">
         {#each plugins as p}
-          <PluginCard {p} {capabilities} {permissions} {contributions} onSettings={openSettings} />
+          <PluginCard {p} {capabilities} {permissions} {contributions} {vaultOpen} {actionFeedback} settingsPanels={(contributions.settingsPanels || []).filter(sp => sp.pluginId === p.manifest?.id)} onEnable={enablePlugin} onDisable={disablePlugin} />
         {/each}
       </div>
     {/if}
 
+    {#if missingInstalled.length > 0}
+      <div class="missing-section">
+        <h3>{tr('pluginManager.missingTitle')}</h3>
+        <p class="missing-hint">{tr('pluginManager.missingHint')}</p>
+        <div class="plugin-list">
+          {#each missingInstalled as mp}
+            <div class="plugin-card missing-card">
+              <div class="card-header">
+                <div class="plugin-id">
+                  <span class="status-dot" style="background: #e94560"></span>
+                  <strong>{mp.id}</strong>
+                  {#if mp.version}<span class="version">v{mp.version}</span>{/if}
+                </div>
+                <span class="status-badge" style="color: #e94560">{tr('status.missing')}</span>
+              </div>
+              <p class="missing-text">
+                {tr('pluginManager.missingPackage')}
+                {#if mp.source && mp.source !== 'unknown'}
+                  <span class="source-hint">{tr('common.source')}: {mp.source}</span>
+                {/if}
+              </p>
+            </div>
+          {/each}
+        </div>
+      </div>
+    {/if}
+
     {#if capabilities.length > 0}
       <details class="registry-section">
-        <summary>Capability Registry ({totalCaps})</summary>
+        <summary>{tr('pluginManager.capabilityRegistry', { count: totalCaps })}</summary>
         <table>
           <thead>
-            <tr><th>Capability</th><th>Provider</th><th>Source</th><th>Status</th></tr>
+            <tr><th>{tr('common.capability')}</th><th>{tr('common.provider')}</th><th>{tr('common.source')}</th><th>{tr('common.status')}</th></tr>
           </thead>
           <tbody>
             {#each capabilities as cap}
@@ -154,97 +409,112 @@
         </table>
       </details>
     {/if}
-    {/if}
+  {/if}
 
-    <!-- Settings Panel Modal -->
-    {#if settingsPanel}
-    <div class="modal-overlay" on:click|self={() => settingsPanel = null}>
-    <div class="modal" role="dialog" aria-modal="true" aria-label="Plugin Settings">
-      <div class="modal-header">
-        <h3>{settingsPanel.item.title}</h3>
-        <button class="modal-close" on:click={() => settingsPanel = null} type="button">✕</button>
-      </div>
-      <div class="modal-body">
-        <p class="settings-hint">Plugin: <code>{settingsPluginId}</code></p>
-        <p class="settings-hint">Component: <code>{settingsPanel.item.component}</code></p>
+  <!-- Settings Panel Modal -->
+  {#key `settings-${settingsPluginId}`}
+  {#if settingsError}
+  <div class="modal-overlay" on:click|self={closeSettings} on:keydown|self={(e) => e.key === 'Escape' && closeSettings()} role="presentation">
+  <div class="modal" role="dialog" aria-modal="true" aria-label={tr('pluginManager.settingsError')}>
+    <div class="modal-header">
+      <h3>{tr('pluginManager.settingsError')}</h3>
+      <button class="modal-close" on:click={closeSettings} type="button">✕</button>
+    </div>
+    <div class="modal-body">
+      <p class="error" style="color: #e94560;">{settingsError}</p>
+    </div>
+  </div>
+  </div>
+  {:else if settingsPanel}
+  <div class="modal-overlay" on:click|self={closeSettings} on:keydown|self={(e) => e.key === 'Escape' && closeSettings()} role="presentation">
+  <div class="modal" role="dialog" aria-modal="true" aria-label={tr('pluginManager.pluginSettings')}>
+    <div class="modal-header">
+      <h3>{settingsPanel.title}</h3>
+      <button class="modal-close" on:click={closeSettings} type="button">✕</button>
+    </div>
+    <div class="modal-body">
+      <p class="settings-hint">{tr('common.plugin')}: <code>{settingsPluginId}</code></p>
+      {#if settingsPluginInfo && settingsPluginInfo.entry}
+        <PluginBundleHost
+          pluginId={settingsPluginId}
+          componentId={settingsPanel.component || settingsPanel.id}
+        />
+      {:else}
+        <p class="settings-hint">{tr('common.component')}: <code>{settingsPanel.component}</code></p>
+        <p class="placeholder">{tr('pluginManager.settingsBundleUnavailable')}</p>
+      {/if}
+    </div>
+  </div>
+  </div>
+  {/if}
+  {/key}
+</div>
 
-        {#if settingsPanel.item.id === 'verstak.platform-test.settings'}
-          <div class="settings-form">
-            <h4>Test Settings</h4>
-            <div class="form-row">
-              <label for="test-name">Test Name</label>
-              <input id="test-name" type="text" bind:value={settingsData.testName} placeholder="Enter test name" />
-            </div>
-            <div class="form-row">
-              <label for="test-interval">Test Interval (seconds)</label>
-              <input id="test-interval" type="number" bind:value={settingsData.testInterval} min="1" max="300" />
-            </div>
-            <div class="form-row">
-              <label><input type="checkbox" bind:checked={settingsData.autoRun} /> Auto-run on startup</label>
-            </div>
-            <button class="btn-save" on:click={() => saveSettings()} type="button">Save Settings</button>
-          </div>
-        {:else}
-          <p class="placeholder">Settings component: {settingsPanel.item.component}</p>
-        {/if}
-      </div>
-    </div>
-    </div>
-    {/if}
-    </div>
-
-    <style>
-    .plugin-manager { max-width: 900px; }
+<style>
+  .plugin-manager {
+    flex: 1;
+    width: min(100%, 1100px);
+    min-height: 0;
+    padding: 0.5rem 0.5rem 1.5rem 0;
+    position: relative;
+  }
   header {
     display: flex;
     align-items: center;
     justify-content: space-between;
-    margin-bottom: 1rem;
+    gap: 0.75rem;
+    flex-wrap: wrap;
+    margin-bottom: 1.25rem;
+    padding-bottom: 0.75rem;
+    border-bottom: 1px solid #0f3460;
   }
   .header-left {
     display: flex;
     align-items: center;
     gap: 0.75rem;
+    min-width: 0;
+    flex-wrap: wrap;
   }
   h2 { color: #e0e0e0; font-size: 1.3rem; margin: 0; }
   .vault-badge {
+    max-width: 100%;
     font-size: 0.75rem;
     padding: 0.2rem 0.6rem;
     border-radius: 12px;
     font-weight: 600;
     border: 1px solid;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
   }
-  .vault-open {
-    background: rgba(78, 204, 163, 0.15);
-    color: #4ecca3;
-    border-color: #4ecca3;
-  }
-  .vault-not-created {
-    background: rgba(255, 200, 87, 0.15);
-    color: #ffc857;
-    border-color: #ffc857;
-  }
-  .vault-closed {
-    background: rgba(160, 160, 184, 0.15);
-    color: #a0a0b8;
-    border-color: #a0a0b8;
-  }
-  .vault-error {
-    background: rgba(233, 69, 96, 0.15);
-    color: #e94560;
-    border-color: #e94560;
-  }
+  .vault-open { background: rgba(78, 204, 163, 0.15); color: #4ecca3; border-color: #4ecca3; }
+  .vault-not-created { background: rgba(255, 200, 87, 0.15); color: #ffc857; border-color: #ffc857; }
+  .vault-closed { background: rgba(160, 160, 184, 0.15); color: #a0a0b8; border-color: #a0a0b8; }
+  .vault-error { background: rgba(233, 69, 96, 0.15); color: #e94560; border-color: #e94560; }
   .reload-btn {
     background: #0f3460; color: #e0e0e0; border: 1px solid #533483;
     padding: 0.4rem 1rem; border-radius: 6px; cursor: pointer; font-size: 0.85rem;
   }
   .reload-btn:hover:not(:disabled) { background: #533483; }
   .reload-btn:disabled { opacity: 0.5; cursor: not-allowed; }
+
+  /* Toast */
+  .toast {
+    position: fixed; top: 1rem; right: 1rem; z-index: 2000;
+    padding: 0.6rem 1.2rem; border-radius: 6px; font-size: 0.85rem;
+    max-width: 400px; word-break: break-word;
+    animation: toastIn 0.25s ease-out;
+  }
+  .toast-success { background: #1a3a2e; color: #4ecca3; border: 1px solid #4ecca3; }
+  .toast-error { background: #3a1a1a; color: #e94560; border: 1px solid #e94560; }
+  .toast-info { background: #1a1a3a; color: #a78bfa; border: 1px solid #a78bfa; }
+  @keyframes toastIn { from { opacity: 0; transform: translateY(-10px); } to { opacity: 1; transform: translateY(0); } }
+
   .loading, .error {
     padding: 2rem; text-align: center; color: #a0a0b8;
   }
   .error { color: #e94560; }
-  .error-icon { font-size: 2rem; margin-bottom: 0.5rem; }
+  :global(.error-icon) { color: #e94560; margin-bottom: 0.5rem; }
   .error-message {
     font-family: monospace; font-size: 0.85rem; margin-bottom: 1rem; word-break: break-word;
   }
@@ -260,6 +530,47 @@
     background: #16213e; padding: 0.25rem 0.75rem; border-radius: 12px;
     font-size: 0.8rem; color: #a0a0b8; border: 1px solid #0f3460;
   }
+  .scan-summary {
+    display: grid;
+    grid-template-columns: minmax(0, 1.35fr) minmax(0, 1fr);
+    gap: 0.75rem;
+    margin-bottom: 1rem;
+  }
+  .scan-card {
+    min-width: 0;
+    padding: 0.75rem;
+    border: 1px solid #0f3460;
+    border-radius: 8px;
+    background: #121a2c;
+  }
+  .scan-card-title {
+    color: #e0e0f0;
+    font-size: 0.82rem;
+    font-weight: 700;
+    margin-bottom: 0.5rem;
+  }
+  .scan-metrics {
+    display: flex;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 0.45rem;
+  }
+  .scan-metrics span {
+    min-height: 1.55rem;
+    display: inline-flex;
+    align-items: center;
+    gap: 0.3rem;
+    padding: 0.18rem 0.5rem;
+    border: 1px solid rgba(78, 204, 163, 0.16);
+    border-radius: 5px;
+    color: #a0a0b8;
+    background: #101626;
+    font-size: 0.76rem;
+  }
+  .scan-metrics strong {
+    color: #f4f7fb;
+    font-size: 0.88rem;
+  }
   .empty {
     padding: 2rem; text-align: center; color: #a0a0b8;
     background: #16213e; border-radius: 8px; border: 1px dashed #0f3460;
@@ -269,41 +580,32 @@
   .hint-list { list-style: none; padding: 0; margin: 0.5rem 0; font-size: 0.8rem; opacity: 0.7; }
   .hint-list li { margin: 0.25rem 0; }
   .hint code { background: #0f3460; padding: 0.1rem 0.3rem; border-radius: 3px; }
-  .plugin-list { display: flex; flex-direction: column; gap: 0.75rem; margin-bottom: 1.5rem; }
+  .plugin-list { display: flex; flex-direction: column; gap: 0.75rem; margin-bottom: 1.5rem; min-width: 0; }
+
+  .missing-section { margin-bottom: 1.5rem; }
+  .missing-section h3 { color: #e94560; font-size: 1rem; margin: 0 0 0.25rem; }
+  .missing-hint { color: #a0a0b8; font-size: 0.8rem; margin: 0 0 0.75rem; }
+  .missing-card { border-color: #e94560; opacity: 0.8; }
+  .missing-text { color: #a0a0b8; font-size: 0.85rem; margin: 0.5rem 0 0; }
+  .source-hint { display: block; margin-top: 0.25rem; font-size: 0.75rem; color: #666; }
+
   .registry-section {
     background: #16213e; border: 1px solid #0f3460;
     border-radius: 8px; padding: 0.75rem; margin-top: 1rem;
   }
-  .registry-section summary {
-    cursor: pointer; color: #a0a0b8; font-size: 0.9rem; font-weight: 600;
-  }
+  .registry-section summary { cursor: pointer; color: #a0a0b8; font-size: 0.9rem; font-weight: 600; }
   table { width: 100%; margin-top: 0.5rem; border-collapse: collapse; font-size: 0.85rem; }
-  th {
-    text-align: left; padding: 0.4rem 0.5rem; color: #a0a0b8; border-bottom: 1px solid #0f3460;
-  }
+  th { text-align: left; padding: 0.4rem 0.5rem; color: #a0a0b8; border-bottom: 1px solid #0f3460; }
   td { padding: 0.3rem 0.5rem; border-bottom: 1px solid #0f3460; }
   td code { color: #e0e0e0; }
   :global(.status-stable) { color: #4ecca3; }
   :global(.status-draft) { color: #ffc857; }
   :global(.status-deprecated) { color: #e94560; }
-  .source-badge {
-    font-size: 0.75rem;
-    padding: 0.1rem 0.4rem;
-    border-radius: 4px;
-    font-weight: 600;
-  }
-  .source-core {
-    background: #1a3a5c;
-    color: #4ecca3;
-    border: 1px solid #4ecca3;
-  }
-  .source-plugin {
-    background: #0f3460;
-    color: #a0a0b8;
-    border: 1px solid #533483;
-  }
+  .source-badge { font-size: 0.75rem; padding: 0.1rem 0.4rem; border-radius: 4px; font-weight: 600; }
+  .source-core { background: #1a3a5c; color: #4ecca3; border: 1px solid #4ecca3; }
+  .source-plugin { background: #0f3460; color: #a0a0b8; border: 1px solid #533483; }
 
-  /* ── Modal ── */
+  /* Modal */
   .modal-overlay {
     position: fixed; inset: 0;
     background: rgba(0, 0, 0, 0.6);
@@ -311,77 +613,43 @@
     z-index: 1000;
   }
   .modal {
-    background: #16213e;
-    border: 1px solid #0f3460;
-    border-radius: 8px;
-    width: 480px;
-    max-width: 90vw;
-    max-height: 80vh;
-    display: flex;
-    flex-direction: column;
+    background: #16213e; border: 1px solid #0f3460; border-radius: 8px;
+    width: min(880px, calc(100vw - 4rem)); max-width: calc(100vw - 4rem); height: min(680px, calc(100vh - 4rem)); max-height: calc(100vh - 4rem); display: flex; flex-direction: column;
   }
   .modal-header {
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-    padding: 1rem;
-    border-bottom: 1px solid #0f3460;
+    display: flex; align-items: center; justify-content: space-between;
+    padding: 1rem; border-bottom: 1px solid #0f3460;
   }
   .modal-header h3 { margin: 0; color: #e0e0f0; font-size: 1.1rem; }
-  .modal-close {
-    background: none; border: none; color: #a0a0b8;
-    font-size: 1.2rem; cursor: pointer; padding: 0.2rem 0.5rem;
-  }
+  .modal-close { background: none; border: none; color: #a0a0b8; font-size: 1.2rem; cursor: pointer; padding: 0.2rem 0.5rem; }
   .modal-close:hover { color: #e94560; }
-  .modal-body { padding: 1rem; overflow-y: auto; }
+  .modal-body { padding: 1rem; overflow: auto; min-height: 0; flex: 1; display: flex; flex-direction: column; }
+  .modal-body :global(.plugin-bundle-host) { flex: 1; min-height: 0; display: flex; flex-direction: column; }
   .settings-hint { color: #666; font-size: 0.8rem; margin: 0.25rem 0; }
   .settings-hint code { color: #4ecca3; }
 
-  /* ── Settings Form ── */
-  .settings-form {
-    display: flex;
-    flex-direction: column;
-    gap: 0.75rem;
-  }
-  .settings-form h4 {
-    margin: 0 0 0.5rem 0;
-    color: #e0e0f0;
-    font-size: 1rem;
-  }
-  .form-row {
-    display: flex;
-    flex-direction: column;
-    gap: 0.25rem;
-  }
-  .form-row label {
-    color: #a0a0b8;
-    font-size: 0.85rem;
-  }
-  .form-row input[type="text"],
-  .form-row input[type="number"] {
-    background: #0f3460;
-    border: 1px solid #1a3a5c;
-    color: #e0e0f0;
-    padding: 0.4rem 0.6rem;
-    border-radius: 4px;
-    font-size: 0.9rem;
-  }
-  .form-row input:focus {
-    outline: none;
-    border-color: #4ecca3;
-  }
-  .btn-save {
-    background: #4ecca3;
-    color: #1a1a2e;
-    border: none;
-    padding: 0.5rem 1rem;
-    border-radius: 4px;
-    cursor: pointer;
-    font-size: 0.9rem;
-    font-weight: 600;
-    margin-top: 0.5rem;
-  }
-  .btn-save:hover {
-    background: #3dbb92;
+  @media (max-width: 760px) {
+    .plugin-manager {
+      width: 100%;
+      padding-right: 0;
+    }
+
+    header {
+      align-items: flex-start;
+    }
+
+    .reload-btn {
+      width: 100%;
+    }
+
+    .scan-summary {
+      grid-template-columns: 1fr;
+    }
+
+    .modal {
+      width: min(880px, calc(100vw - 2rem));
+      height: min(680px, calc(100vh - 2rem));
+      max-height: calc(100vh - 2rem);
+    }
   }
 </style>

frontend/src/lib/shell/CommandPalette.svelte

@@ -0,0 +1,409 @@
+<script>
+  import { onDestroy, onMount, tick } from 'svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import { executePluginCommand } from '../plugin-host/VerstakPluginAPI.js';
+  import { i18n } from '../i18n/index.js';
+
+  let open = false;
+  let query = '';
+  let commands = [];
+  let selectedIndex = 0;
+  let inputEl = null;
+  let statusMessage = '';
+  let statusType = '';
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
+
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  const inactiveStatuses = new Set(['disabled', 'failed', 'incompatible', 'missing-required-capability']);
+  $: shellCommands = [
+    { id: 'verstak.shell.open-overview', title: tr('command.openOverview'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 10, shellAction: 'overview' },
+    { id: 'verstak.shell.open-files', title: tr('command.openFiles'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 20, shellAction: 'files' },
+    { id: 'verstak.shell.open-activity', title: tr('command.openActivity'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 30, shellAction: 'activity' },
+    { id: 'verstak.shell.open-browser-inbox', title: tr('command.openBrowserInbox'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 40, shellAction: 'browser-inbox' },
+    { id: 'verstak.shell.create-markdown', title: tr('command.createMarkdown'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 50, shellAction: 'create-markdown' },
+    { id: 'verstak.shell.create-text', title: tr('command.createText'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 60, shellAction: 'create-text' },
+    { id: 'verstak.shell.sync-now', title: tr('command.syncNow'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 70, shellAction: 'sync-now' },
+    { id: 'verstak.shell.open-sync-settings', title: tr('command.openSyncSettings'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 80, shellAction: 'sync-settings' },
+    { id: 'verstak.shell.open-plugin-manager', title: tr('command.openPluginManager'), pluginId: 'verstak.shell', pluginName: 'Verstak', priority: 90, shellAction: 'plugin-manager' },
+  ];
+
+  $: normalizedQuery = query.trim().toLowerCase();
+  $: filteredCommands = commands.filter((command) => {
+    if (!normalizedQuery) return true;
+    return [
+      command.title,
+      command.id,
+      command.pluginId,
+      command.pluginName,
+    ].filter(Boolean).join(' ').toLowerCase().includes(normalizedQuery);
+  });
+  $: if (selectedIndex >= filteredCommands.length) {
+    selectedIndex = Math.max(0, filteredCommands.length - 1);
+  }
+
+  async function loadCommands() {
+    const [plugins, contributions] = await Promise.all([
+      App.GetPlugins().catch(() => []),
+      App.GetContributions().catch(() => ({})),
+    ]);
+    const pluginById = new Map((plugins || []).map((plugin) => [plugin.manifest?.id, plugin]));
+    await Promise.all((plugins || []).map((plugin) => i18n.loadPlugin(
+      plugin.manifest?.id,
+      plugin.manifest?.localization,
+    ).catch(() => {})));
+    const localizedPlugins = (plugins || []).map((plugin) => i18n.localizePlugin(plugin));
+    const localizedPluginById = new Map(localizedPlugins.map((plugin) => [plugin.manifest?.id, plugin]));
+    const localizedContributions = i18n.localizeContributionSummary(contributions || {});
+    const pluginCommands = (localizedContributions.commands || [])
+      .filter((command) => {
+        const plugin = pluginById.get(command.pluginId);
+        if (!plugin) return false;
+        return !inactiveStatuses.has(plugin.status);
+      })
+      .map((command) => {
+        const plugin = localizedPluginById.get(command.pluginId);
+        return {
+          ...command,
+          pluginName: plugin?.manifest?.name || command.pluginId,
+          priority: 1000,
+        };
+      });
+    commands = [...shellCommands, ...pluginCommands].sort((a, b) => {
+      const priority = (a.priority || 1000) - (b.priority || 1000);
+      if (priority) return priority;
+      const title = String(a.title || a.id).localeCompare(String(b.title || b.id));
+      if (title) return title;
+      return String(a.pluginId).localeCompare(String(b.pluginId));
+    });
+  }
+
+  async function openPalette() {
+    await loadCommands();
+    query = '';
+    selectedIndex = 0;
+    open = true;
+    await tick();
+    inputEl?.focus();
+  }
+
+  function closePalette() {
+    open = false;
+    query = '';
+    selectedIndex = 0;
+  }
+
+  function setStatus(type, message) {
+    statusType = type;
+    statusMessage = message;
+    window.clearTimeout(setStatus.timer);
+    setStatus.timer = window.setTimeout(() => {
+      statusType = '';
+      statusMessage = '';
+    }, 4000);
+  }
+
+  function clickWorkspaceTool(label) {
+    const tabs = Array.from(document.querySelectorAll('.workspace-tabs [role="tab"]'));
+    const tab = tabs.find((node) => String(node.textContent || '').trim().toLowerCase() === label);
+    if (tab) {
+      tab.click();
+      return true;
+    }
+    return false;
+  }
+
+  async function openWorkspaceTool(label) {
+    if (clickWorkspaceTool(label)) return;
+    const selectedWorkspace = document.querySelector('.wt-node.selected .wt-label');
+    const firstWorkspace = document.querySelector('.wt-label');
+    const workspaceButton = selectedWorkspace || firstWorkspace;
+    if (workspaceButton) {
+      workspaceButton.click();
+      await tick();
+      await new Promise((resolve) => requestAnimationFrame(resolve));
+    }
+    clickWorkspaceTool(label);
+  }
+
+  async function startFilesCreate(action) {
+    await openWorkspaceTool('files');
+    await tick();
+    await new Promise((resolve) => requestAnimationFrame(resolve));
+    const button = document.querySelector(`[data-files-action="${action}"]`);
+    if (!button) {
+      throw new Error(`Files action not available: ${action}`);
+    }
+    button.click();
+  }
+
+  async function runShellCommand(command) {
+    if (command.shellAction === 'plugin-manager') {
+      window.dispatchEvent(new CustomEvent('verstak:open-settings', { detail: {} }));
+      return;
+    }
+    if (command.shellAction === 'sync-settings') {
+      window.dispatchEvent(new CustomEvent('verstak:open-settings', {
+        detail: { pluginId: 'verstak.sync', panelId: 'verstak.sync.settings' }
+      }));
+      return;
+    }
+    if (command.shellAction === 'sync-now') {
+      const result = await App.PluginSyncNow('verstak.sync');
+      if (typeof result === 'string' && result) {
+        throw new Error(result);
+      }
+      if (Array.isArray(result) && result[1]) {
+        throw new Error(result[1]);
+      }
+      return;
+    }
+    if (command.shellAction === 'create-markdown') {
+      await startFilesCreate('new-markdown');
+      return;
+    }
+    if (command.shellAction === 'create-text') {
+      await startFilesCreate('new-text');
+      return;
+    }
+    const actionToTab = {
+      overview: 'overview',
+      files: 'files',
+      activity: 'activity',
+      'browser-inbox': 'browser inbox',
+    };
+    await openWorkspaceTool(actionToTab[command.shellAction] || command.shellAction);
+  }
+
+  async function runCommand(command) {
+    if (!command) return;
+    try {
+      if (command.shellAction) {
+        await runShellCommand(command);
+        closePalette();
+        setStatus('success', tr('command.handled', { title: command.title || command.id }));
+        return;
+      }
+      const result = await executePluginCommand(command.pluginId, command.id, {
+        source: 'command-palette',
+      });
+      closePalette();
+      setStatus('success', tr('command.result', { title: command.title || command.id, status: result.status || tr('command.statusHandled') }));
+    } catch (err) {
+      setStatus('error', `${command.title || command.id}: ${err?.message || String(err)}`);
+    }
+  }
+
+  function moveSelection(delta) {
+    if (filteredCommands.length === 0) return;
+    selectedIndex = (selectedIndex + delta + filteredCommands.length) % filteredCommands.length;
+  }
+
+  function onWindowKeydown(event) {
+    const key = event.key || '';
+    const comboOpen = (event.ctrlKey || event.metaKey) && (key.toLowerCase() === 'k' || (event.shiftKey && key.toLowerCase() === 'p'));
+    if (!open && comboOpen) {
+      event.preventDefault();
+      openPalette();
+      return;
+    }
+    if (!open) return;
+
+    if (key === 'Escape') {
+      event.preventDefault();
+      closePalette();
+    } else if (key === 'ArrowDown') {
+      event.preventDefault();
+      moveSelection(1);
+    } else if (key === 'ArrowUp') {
+      event.preventDefault();
+      moveSelection(-1);
+    } else if (key === 'Enter') {
+      event.preventDefault();
+      runCommand(filteredCommands[selectedIndex]);
+    }
+  }
+
+  function onOverlayMouseDown(event) {
+    if (event.target === event.currentTarget) closePalette();
+  }
+
+  if (typeof window !== 'undefined') {
+    window.addEventListener('keydown', onWindowKeydown);
+  }
+
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed && open) loadCommands();
+    });
+  });
+
+  onDestroy(() => {
+    unsubscribeLocale?.();
+    if (typeof window !== 'undefined') {
+      window.removeEventListener('keydown', onWindowKeydown);
+      window.clearTimeout(setStatus.timer);
+    }
+  });
+</script>
+
+{#if statusMessage}
+  <div
+    class="command-palette-toast"
+    data-command-palette-status={statusType}
+  >
+    {statusMessage}
+  </div>
+{/if}
+
+{#if open}
+  <div class="command-palette-overlay" role="presentation" on:mousedown={onOverlayMouseDown}>
+    <section class="command-palette" role="dialog" aria-modal="true" aria-label={tr('command.palette')}>
+      <input
+        bind:this={inputEl}
+        bind:value={query}
+        class="command-palette-input"
+        data-command-palette-input
+        placeholder={tr('command.run')}
+        aria-label={tr('command.run')}
+      />
+
+      <div class="command-palette-list" role="listbox">
+        {#if filteredCommands.length === 0}
+          <div class="command-palette-empty">{tr('command.none')}</div>
+        {:else}
+          {#each filteredCommands as command, index}
+            <button
+              type="button"
+              class:selected={index === selectedIndex}
+              class="command-palette-item"
+              data-command-id={command.id}
+              on:mouseenter={() => selectedIndex = index}
+              on:click={() => runCommand(command)}
+            >
+              <span class="command-palette-title">{command.title || command.id}</span>
+              <span class="command-palette-meta">{command.pluginName} · {command.id}</span>
+            </button>
+          {/each}
+        {/if}
+      </div>
+    </section>
+  </div>
+{/if}
+
+<style>
+  .command-palette-overlay {
+    position: fixed;
+    inset: 0;
+    z-index: 10000;
+    display: flex;
+    align-items: flex-start;
+    justify-content: center;
+    padding: 10vh 1rem 1rem;
+    background: rgba(0, 0, 0, 0.48);
+  }
+
+  .command-palette {
+    width: min(640px, 100%);
+    max-height: min(560px, 80vh);
+    display: flex;
+    flex-direction: column;
+    overflow: hidden;
+    border: 1px solid #254466;
+    border-radius: 8px;
+    background: #101526;
+    box-shadow: 0 18px 48px rgba(0, 0, 0, 0.45);
+  }
+
+  .command-palette-input {
+    width: 100%;
+    min-height: 3rem;
+    padding: 0.75rem 1rem;
+    border: 0;
+    border-bottom: 1px solid #213650;
+    background: #0b1020;
+    color: #f4f7fb;
+    font: inherit;
+    font-size: 1rem;
+    outline: none;
+  }
+
+  .command-palette-list {
+    min-height: 0;
+    overflow: auto;
+    padding: 0.35rem;
+  }
+
+  .command-palette-item {
+    width: 100%;
+    min-height: 3rem;
+    display: flex;
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 0.18rem;
+    padding: 0.55rem 0.75rem;
+    border: 1px solid transparent;
+    border-radius: 6px;
+    background: transparent;
+    color: #e0e0f0;
+    text-align: left;
+  }
+
+  .command-palette-item:hover,
+  .command-palette-item.selected {
+    border-color: #4ecca3;
+    background: #17243a;
+  }
+
+  .command-palette-title {
+    font-size: 0.9rem;
+    font-weight: 650;
+  }
+
+  .command-palette-meta {
+    max-width: 100%;
+    overflow: hidden;
+    color: #8da2bd;
+    font-size: 0.74rem;
+    font-weight: 500;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+
+  .command-palette-empty {
+    padding: 1.25rem;
+    color: #8da2bd;
+    font-size: 0.9rem;
+    text-align: center;
+  }
+
+  .command-palette-toast {
+    position: fixed;
+    right: 1rem;
+    bottom: 1rem;
+    z-index: 10001;
+    max-width: min(420px, calc(100vw - 2rem));
+    padding: 0.7rem 0.9rem;
+    border: 1px solid #254466;
+    border-radius: 8px;
+    background: #101526;
+    color: #e0e0f0;
+    font-size: 0.85rem;
+    box-shadow: 0 12px 32px rgba(0, 0, 0, 0.35);
+  }
+
+  .command-palette-toast[data-command-palette-status="success"] {
+    border-color: #4ecca3;
+  }
+
+  .command-palette-toast[data-command-palette-status="error"] {
+    border-color: #e74c3c;
+    color: #ffd6d1;
+  }
+</style>

frontend/src/lib/shell/GlobalSearch.svelte

@@ -0,0 +1,443 @@
+<script>
+  import { onMount } from 'svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+
+  const TEXT_EXTENSIONS = new Set(['txt', 'md', 'markdown', 'log', 'json', 'csv', 'yaml', 'yml', 'toml']);
+  const FILE_INDEX_LIMIT = 220;
+  const RESULT_LIMIT = 8;
+  const RU = 'ёйцукенгшщзхъфывапролджэячсмитьбю';
+  const EN = '`qwertyuiop[]asdfghjkl;\\zxcvbnm,.';
+
+  let query = '';
+  let index = [];
+  let results = [];
+  let focused = false;
+  let loading = true;
+  let searchTimer = null;
+  let buildSeq = 0;
+  let locale = i18n.getLocale();
+
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  $: scheduleSearch(query);
+
+  onMount(() => {
+    const unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed) buildIndex();
+    });
+    buildIndex();
+    return () => {
+      unsubscribeLocale();
+      clearTimeout(searchTimer);
+    };
+  });
+
+  function normalize(value) {
+    return String(value == null ? '' : value).trim().toLowerCase();
+  }
+
+  function swapLayout(value, from, to) {
+    return String(value || '').split('').map(ch => {
+      const lower = ch.toLowerCase();
+      const idx = from.indexOf(lower);
+      if (idx === -1) return ch;
+      const mapped = to[idx] || ch;
+      return ch === lower ? mapped : mapped.toUpperCase();
+    }).join('');
+  }
+
+  function queryVariants(value) {
+    const base = normalize(value);
+    return [...new Set([
+      base,
+      normalize(swapLayout(base, RU, EN)),
+      normalize(swapLayout(base, EN, RU)),
+    ].filter(Boolean))];
+  }
+
+  function matchScore(item, variants) {
+    const haystack = normalize(`${item.title} ${item.subtitle || ''} ${item.keywords || ''}`);
+    for (const variant of variants) {
+      if (!variant) continue;
+      if (normalize(item.title) === variant) return 100;
+      if (normalize(item.title).startsWith(variant)) return 80;
+      if (haystack.includes(variant)) return 50;
+    }
+    return 0;
+  }
+
+  function scheduleSearch(value) {
+    clearTimeout(searchTimer);
+    searchTimer = setTimeout(() => runSearch(value), 80);
+  }
+
+  function runSearch(value) {
+    const variants = queryVariants(value);
+    if (!variants.length) {
+      results = [];
+      return;
+    }
+    results = index
+      .map(item => ({ item, score: matchScore(item, variants) }))
+      .filter(row => row.score > 0)
+      .sort((a, b) => b.score - a.score || a.item.rank - b.item.rank || a.item.title.localeCompare(b.item.title))
+      .slice(0, RESULT_LIMIT)
+      .map(row => row.item);
+  }
+
+  function workspaceTitle(node) {
+    return node?.title || node?.name || node?.id || node?.rootPath || '';
+  }
+
+  function workspaceName(node) {
+    return node?.name || node?.id || node?.rootPath || '';
+  }
+
+  async function resultOrEmpty(promise, fallback) {
+    try {
+      const response = await promise;
+      if (Array.isArray(response) && response.length === 2) return response[1] ? fallback : response[0];
+      return response || fallback;
+    } catch (_) {
+      return fallback;
+    }
+  }
+
+  async function listFilesRecursive(dir = '', depth = 0, acc = []) {
+    if (acc.length >= FILE_INDEX_LIMIT || depth > 5) return acc;
+    const entries = await resultOrEmpty(App.ListVaultFiles('verstak.search', dir), []);
+    for (const entry of entries || []) {
+      if (acc.length >= FILE_INDEX_LIMIT) break;
+      const path = entry.relativePath || entry.path || entry.name || '';
+      if (!path) continue;
+      acc.push(entry);
+      if (entry.type === 'folder') await listFilesRecursive(path, depth + 1, acc);
+    }
+    return acc;
+  }
+
+  async function readFileSnippet(path) {
+    const ext = String(path).split('.').pop().toLowerCase();
+    if (!TEXT_EXTENSIONS.has(ext)) return '';
+    const text = await resultOrEmpty(App.ReadVaultTextFile('verstak.search', path), '');
+    return String(text || '').slice(0, 900);
+  }
+
+  function pluginToolKind(pluginId, label) {
+    if (pluginId === 'verstak.browser-inbox') return 'browser-inbox';
+    if (pluginId === 'verstak.activity') return 'activity';
+    if (pluginId === 'verstak.journal') return 'journal';
+    return String(label || pluginId || '').toLowerCase();
+  }
+
+  async function indexPluginSettings(pluginId, label, rank, view, nodes) {
+    const settings = await resultOrEmpty(App.ReadPluginSettings(pluginId), {});
+    const items = [];
+    Object.keys(settings || {}).forEach(key => {
+      const value = settings[key];
+      const rows = Array.isArray(value) ? value : [];
+      rows.forEach(row => {
+        if (!row || typeof row !== 'object') return;
+        const title = row.title || row.summary || row.url || row.captureId || row.activityId || row.entryId || label;
+        const workspaceName = row.workspaceRootPath || row.workspaceName || '';
+        items.push({
+          type: label,
+          title,
+          subtitle: row.url || row.summary || row.workspaceRootPath || key,
+          keywords: JSON.stringify(row),
+          rank,
+          action: workspaceName ? 'workspace-tool' : (view ? 'view' : ''),
+          viewId: view?.id || '',
+          pluginId,
+          workspaceName,
+          toolKind: pluginToolKind(pluginId, label),
+          nodes,
+        });
+      });
+    });
+    return items;
+  }
+
+  async function buildIndex() {
+    const seq = ++buildSeq;
+    loading = true;
+    const next = [];
+
+    const tree = await resultOrEmpty(App.GetWorkspaceTree(), { nodes: [] });
+    const nodes = Array.isArray(tree.nodes) ? tree.nodes : [];
+    nodes.forEach(node => {
+      next.push({
+        type: 'Workspace',
+        typeLabel: tr('search.type.workspace'),
+        title: workspaceTitle(node),
+        subtitle: tr('search.type.workspace'),
+        keywords: `${node.id || ''} ${node.rootPath || ''}`,
+        rank: 10,
+        action: 'workspace',
+        workspaceName: workspaceName(node),
+        nodes,
+      });
+    });
+
+    const [rawPlugins, rawContributions] = await Promise.all([
+      resultOrEmpty(App.GetPlugins(), []),
+      resultOrEmpty(App.GetContributions(), {}),
+    ]);
+    await Promise.all((rawPlugins || []).map((plugin) => i18n.loadPlugin(
+      plugin.manifest?.id,
+      plugin.manifest?.localization,
+    ).catch(() => {})));
+    const contributions = i18n.localizeContributionSummary(rawContributions || {});
+    const viewByPluginId = new Map();
+    (contributions.views || []).forEach(view => {
+      if (view.pluginId && !viewByPluginId.has(view.pluginId)) viewByPluginId.set(view.pluginId, view);
+    });
+    (contributions.sidebarItems || []).forEach(item => {
+      next.push({
+        type: 'Tool',
+        typeLabel: tr('search.type.tool'),
+        title: item.title || item.id,
+        subtitle: item.pluginId || '',
+        keywords: `${item.id || ''} ${item.view || ''}`,
+        rank: 20,
+        action: 'view',
+        viewId: item.view || item.id,
+        pluginId: item.pluginId,
+      });
+    });
+
+    const files = await listFilesRecursive();
+    for (const entry of files) {
+      const path = entry.relativePath || entry.path || entry.name || '';
+      const snippet = await readFileSnippet(path);
+      next.push({
+        type: entry.type === 'folder' ? 'Folder' : 'File',
+        typeLabel: tr(entry.type === 'folder' ? 'search.type.folder' : 'search.type.file'),
+        title: path.split('/').pop() || path,
+        subtitle: path,
+        keywords: snippet,
+        rank: entry.type === 'folder' ? 30 : 40,
+        action: entry.type === 'folder' ? 'file-folder' : 'file',
+        path,
+        nodes,
+      });
+    }
+
+    const pluginItems = await Promise.all([
+      indexPluginSettings('verstak.journal', tr('search.type.journal'), 50, viewByPluginId.get('verstak.journal'), nodes),
+      indexPluginSettings('verstak.browser-inbox', tr('search.type.browserInbox'), 55, viewByPluginId.get('verstak.browser-inbox'), nodes),
+      indexPluginSettings('verstak.activity', tr('search.type.activity'), 60, viewByPluginId.get('verstak.activity'), nodes),
+    ]);
+
+    if (seq !== buildSeq) return;
+    index = next.concat(pluginItems.flat());
+    loading = false;
+    runSearch(query);
+  }
+
+  function handleFocus() {
+    focused = true;
+    buildIndex();
+  }
+
+  async function openResult(item) {
+    query = '';
+    results = [];
+    if (item.action === 'workspace') {
+      window.dispatchEvent(new CustomEvent('verstak:workspace-selected', {
+        detail: { workspaceName: item.workspaceName, nodes: item.nodes || [] }
+      }));
+      return;
+    }
+    if (item.action === 'view') {
+      window.dispatchEvent(new CustomEvent('verstak:open-view', {
+        detail: { viewId: item.viewId, pluginId: item.pluginId }
+      }));
+      return;
+    }
+    if (item.action === 'workspace-tool') {
+      const workspaceName = item.workspaceName || '';
+      if (workspaceName) {
+        window.dispatchEvent(new CustomEvent('verstak:workspace-selected', {
+          detail: { workspaceName, nodes: item.nodes || [] }
+        }));
+        window.dispatchEvent(new CustomEvent('verstak:workspace-open-tool', {
+          detail: { kind: item.toolKind || item.type || '' }
+        }));
+      }
+      return;
+    }
+    if (item.action === 'file-folder') {
+      const parts = String(item.path || '').split('/').filter(Boolean);
+      const workspaceName = parts[0] || '';
+      const localPath = parts.slice(1).join('/');
+      if (workspaceName) {
+        window.__filesHistoryByWorkspace = window.__filesHistoryByWorkspace || {};
+        window.__filesHistoryByWorkspace[workspaceName] = {
+          stack: [localPath],
+          index: 0,
+          currentPath: localPath,
+        };
+        const detail = { workspaceName };
+        if (Array.isArray(item.nodes) && item.nodes.length > 0) detail.nodes = item.nodes;
+        window.dispatchEvent(new CustomEvent('verstak:workspace-selected', {
+          detail
+        }));
+        window.dispatchEvent(new CustomEvent('verstak:workspace-open-tool', {
+          detail: { kind: 'files' }
+        }));
+      }
+      return;
+    }
+    if (item.action === 'file') {
+      const response = await App.OpenWorkbenchResource('verstak.search', {
+        kind: 'vault-file',
+        path: item.path,
+        mode: 'view',
+        context: { sourceView: 'global-search' }
+      });
+      const [result, err] = Array.isArray(response) ? response : [response, ''];
+      if (!err && result) {
+        window.dispatchEvent(new CustomEvent('verstak:workbench-opened', { detail: result }));
+      }
+    }
+  }
+</script>
+
+<div class="global-search" class:open={focused && (query || results.length)}>
+  <div class="global-search-box">
+    <Icon name="search" size={14} class="global-search-icon" />
+    <input
+      bind:value={query}
+      on:focus={handleFocus}
+      on:blur={() => setTimeout(() => focused = false, 120)}
+      type="search"
+      placeholder={loading ? tr('search.indexing') : tr('search.placeholder')}
+      aria-label={tr('search.global')}
+      data-global-search-input
+    />
+  </div>
+  {#if focused && query}
+    <div class="global-search-results" data-global-search-results>
+      {#if results.length}
+        {#each results as item}
+          <button
+            type="button"
+            class="global-search-result"
+            data-global-search-result-type={item.type}
+            data-global-search-result-path={item.path || ''}
+            on:mousedown|preventDefault={() => openResult(item)}
+          >
+            <span class="global-search-result-title">{item.title}</span>
+            <span class="global-search-result-meta">{item.typeLabel || item.type} · {item.subtitle}</span>
+          </button>
+        {/each}
+      {:else}
+        <div class="global-search-empty vt-empty-title">{tr('search.noResults')}</div>
+      {/if}
+    </div>
+  {/if}
+</div>
+
+<style>
+  .global-search {
+    position: relative;
+    padding: 0.55rem 0.75rem;
+    border-bottom: 1px solid var(--vt-color-border);
+    flex-shrink: 0;
+  }
+
+  .global-search-box {
+    display: flex;
+    align-items: center;
+    gap: 0.35rem;
+    height: 2rem;
+    padding: 0 0.55rem;
+    border: 1px solid var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-md);
+    background: #0f1424;
+    color: var(--vt-color-text-muted);
+  }
+
+  :global(.global-search-icon) {
+    color: var(--vt-color-text-muted);
+    flex-shrink: 0;
+  }
+
+  .global-search input {
+    width: 100%;
+    min-width: 0;
+    border: 0;
+    outline: 0;
+    background: transparent;
+    color: var(--vt-color-text-primary);
+    font: inherit;
+    font-size: 0.78rem;
+  }
+
+  .global-search input::placeholder {
+    color: var(--vt-color-text-muted);
+  }
+
+  .global-search-box:focus-within {
+    border-color: var(--vt-color-accent);
+    box-shadow: var(--vt-focus-ring);
+  }
+
+  .global-search-results {
+    position: absolute;
+    left: 0.75rem;
+    right: 0.75rem;
+    top: calc(100% - 0.25rem);
+    z-index: 400;
+    max-height: 20rem;
+    overflow: auto;
+    border: 1px solid var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-md);
+    background: var(--vt-color-surface);
+    box-shadow: var(--vt-elevation-menu);
+  }
+
+  .global-search-result {
+    display: flex;
+    flex-direction: column;
+    gap: 0.12rem;
+    width: 100%;
+    padding: 0.55rem 0.65rem;
+    border: 0;
+    border-bottom: 1px solid rgba(40, 70, 111, 0.55);
+    background: transparent;
+    color: var(--vt-color-text-primary);
+    text-align: left;
+    cursor: pointer;
+  }
+
+  .global-search-result:hover {
+    background: var(--vt-color-surface-hover);
+  }
+
+  .global-search-result-title {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    font-size: 0.8rem;
+  }
+
+  .global-search-result-meta,
+  .global-search-empty {
+    color: var(--vt-color-text-muted);
+    font-size: 0.7rem;
+  }
+
+  .global-search-empty {
+    padding: 0.7rem;
+  }
+</style>

frontend/src/lib/shell/Sidebar.svelte

@@ -1,75 +1,270 @@
 <script>
-  import { onMount } from 'svelte';
+  import { onDestroy, onMount } from 'svelte';
   import * as App from '../../../wailsjs/go/api/App';
+  import WorkspaceTree from './WorkspaceTree.svelte';
+  import GlobalSearch from './GlobalSearch.svelte';
+  import Icon from '../ui/Icon.svelte';
+  import { debug } from '../log/debug.js';
+  import { i18n } from '../i18n/index.js';
+
+  export let showGlobalSearch = true;
+
+  function flog(msg) {
+    App.WriteFrontendLog('Sidebar', msg);
+  }
 
-  let sidebarItems = [];
-  let activeView = '';
   let plugins = [];
-  let contributions = { sidebarItems: [], views: [], commands: [], settingsPanels: [] };
+  let vaultStatus = { status: 'unknown', path: '', vaultId: '' };
+  let sidebarItems = [];
+  let errorMessage = '';
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
 
-  onMount(async () => {
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  $: vaultOpen = vaultStatus.status === 'open';
+
+  async function loadSidebar() {
+    debug.log('[Sidebar] onMount: START');
+    flog('onMount: START');
+    let contribErr = false;
     try {
-      const [contribs, pluginList] = await Promise.all([
-        App.GetContributions(),
-        App.GetPlugins(),
+      debug.log('[Sidebar] onMount: loading plugins/vault/contributions...');
+      flog('onMount: loading plugins/vault/contributions...');
+      const [p, v, contribs] = await Promise.all([
+        App.GetPlugins().catch(() => []),
+        App.GetVaultStatus().catch(() => ({ status: 'unknown', path: '', vaultId: '' })),
+        App.GetContributions().catch(() => { contribErr = true; return {}; }),
       ]);
-      contributions = contribs;
-      plugins = pluginList;
-      const pluginMap = new Map(pluginList.map(p => [p.manifest.id, p]));
-      sidebarItems = (contribs.sidebarItems || []).filter(item => {
-        const plugin = pluginMap.get(item.pluginId);
-        return plugin && plugin.manifest.permissions.includes('ui.register');
+      await Promise.all((p || []).map((plugin) => (
+        i18n.loadPlugin(plugin.manifest?.id, plugin.manifest?.localization).catch(() => {})
+      )));
+      plugins = (p || []).map((plugin) => i18n.localizePlugin(plugin));
+      const localizedContributions = i18n.localizeContributionSummary(contribs || {});
+      vaultStatus = v;
+      debug.log('[Sidebar] onMount: plugins=' + plugins.length + ' vault=' + vaultStatus.status);
+      flog('onMount: plugins=' + plugins.length + ' vault=' + vaultStatus.status);
+      if (contribErr) {
+        errorMessage = tr('sidebar.error.contributions');
+      }
+      sidebarItems = (localizedContributions.sidebarItems || []).filter(item => {
+        const plugin = plugins.find(p => p.manifest?.id === item.pluginId);
+        if (!plugin) return false;
+        return plugin.status !== 'disabled' && plugin.status !== 'failed' && plugin.status !== 'incompatible' && plugin.status !== 'missing-required-capability';
       });
+      sidebarItems.sort((a, b) => (a.position || 100) - (b.position || 100));
+      debug.log('[Sidebar] onMount: sidebarItems=' + sidebarItems.length);
+      flog('onMount: sidebarItems=' + sidebarItems.length);
     } catch (e) {
+      debug.log('[Sidebar] onMount: ERROR:', String(e));
+      flog('onMount: ERROR: ' + String(e));
       console.error('[Sidebar] load error:', e);
+      errorMessage = tr('sidebar.error.load');
     }
+    debug.log('[Sidebar] onMount: END');
+    flog('onMount: END');
+  }
+
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed) loadSidebar();
+    });
+    loadSidebar();
+    window.addEventListener('verstak:plugins-changed', loadSidebar);
   });
 
-  function openView(viewId) {
-    activeView = viewId;
-    window.dispatchEvent(new CustomEvent('verstak:open-view', { detail: { viewId } }));
+  onDestroy(() => {
+    if (unsubscribeLocale) unsubscribeLocale();
+    window.removeEventListener('verstak:plugins-changed', loadSidebar);
+  });
+
+  function handleSidebarItem(item) {
+    debug.log('[Sidebar] handleSidebarItem:', item.id, '-> view:', item.view);
+    // Use item.view (the view contribution ID) if available, fall back to item.id
+    const viewId = item.view || item.id;
+    window.dispatchEvent(new CustomEvent('verstak:open-view', { detail: { viewId, pluginId: item.pluginId } }));
   }
 </script>
 
-<nav class="sidebar">
-  {#each sidebarItems as item}
-    <button
-      class="sidebar-item"
-      class:active={activeView === item.item.view}
-      on:click={() => openView(item.item.view)}
-      type="button"
-    >
-      {#if item.item.icon}<span class="icon">{item.item.icon}</span>{/if}
-      <span class="label">{item.item.title}</span>
-    </button>
-  {/each}
-</nav>
+<aside class="sidebar">
+  <div class="sidebar-header">
+    <Icon name="logo" size={20} class="sidebar-logo" />
+    <span class="sidebar-title">Verstak</span>
+  </div>
+
+  {#if vaultOpen && showGlobalSearch}
+    <GlobalSearch />
+  {/if}
+
+  {#if sidebarItems.length > 0}
+    <div class="sidebar-section">
+      <span class="section-label">{tr('sidebar.tools')}</span>
+      {#each sidebarItems as item}
+        <button
+          class="nav-item plugin-item vt-list-row"
+          on:click={() => handleSidebarItem(item)}
+          type="button"
+        >
+          <Icon name={item.icon || 'plugin'} size={16} class="nav-icon icon-plugin" />
+          <span class="nav-label">{item.title || item.id}</span>
+        </button>
+      {/each}
+    </div>
+  {/if}
+
+  {#if vaultOpen}
+    <WorkspaceTree />
+  {/if}
+
+  <div class="sidebar-footer">
+    {#if errorMessage}
+      <span class="sidebar-error">
+        <Icon name="warning" size={10} class="sidebar-error-icon" />
+        {tr('sidebar.error.ui')}
+      </span>
+    {/if}
+  </div>
+</aside>
 
 <style>
   .sidebar {
-    width: 200px;
-    background: #16213e;
-    border-right: 1px solid #0f3460;
+    width: 220px;
+    min-width: 220px;
+    background: var(--vt-color-surface-muted);
     display: flex;
     flex-direction: column;
-    padding: 0.5rem 0;
-    overflow-y: auto;
+    border-right: 1px solid var(--vt-color-border);
+    overflow: hidden;
   }
-  .sidebar-item {
+
+  .sidebar-header {
     display: flex;
     align-items: center;
     gap: 0.5rem;
-    padding: 0.5rem 1rem;
+    padding: 1rem 1.25rem;
+    border-bottom: 1px solid var(--vt-color-border);
+  }
+
+  :global(.sidebar-logo) {
+    width: 1.2rem;
+    height: 1.2rem;
+    color: var(--vt-color-accent);
+    flex-shrink: 0;
+  }
+
+  .sidebar-title {
+    color: var(--vt-color-text-primary);
+    font-size: 1rem;
+    font-weight: 600;
+  }
+
+  .sidebar-section {
+    display: flex;
+    flex-direction: column;
+    padding: 0.45rem 0.6rem 0.55rem;
+    gap: 0.15rem;
+    border-bottom: 1px solid var(--vt-color-border);
+  }
+
+  :global(workspace-tree) {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    overflow: hidden;
+  }
+
+  .section-label {
+    color: var(--vt-color-text-muted);
+    font-size: 0.7rem;
+    text-transform: uppercase;
+    letter-spacing: 0.05em;
+    padding: 0.25rem 0.45rem 0.35rem;
+    font-weight: 600;
+  }
+
+  .nav-item {
+    display: flex;
+    align-items: center;
+    justify-content: flex-start;
+    gap: 0.45rem;
+    min-height: 1.85rem;
+    padding: 0.15rem 0.45rem;
     background: none;
     border: none;
-    color: #a0a0b0;
+    color: var(--vt-color-text-secondary);
+    font-size: 0.78rem;
     cursor: pointer;
+    border-radius: var(--vt-radius-sm);
     text-align: left;
-    font-size: 0.9rem;
     width: 100%;
+    transition: background 0.15s, color 0.15s;
+  }
+
+  .nav-item:hover {
+    background: var(--vt-color-surface-hover);
+    color: var(--vt-color-text-primary);
+  }
+
+  :global(.nav-icon) {
+    width: 0.9rem;
+    height: 0.9rem;
+    flex-shrink: 0;
+    color: currentColor;
+  }
+  :global(.nav-icon.icon-plugin) {
+    color: var(--vt-color-text-muted);
+    opacity: 0.9;
+  }
+
+  .nav-label {
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+
+  .sidebar-footer {
+    margin-top: auto;
+    padding: 0.75rem 1.25rem;
+    border-top: 1px solid var(--vt-color-border);
+  }
+
+  .sidebar-error {
+    display: flex;
+    align-items: center;
+    gap: 0.25rem;
+    font-size: 0.7rem;
+    color: var(--vt-color-danger);
+    margin-bottom: 0.25rem;
+  }
+  :global(.sidebar-error-icon) {
+    color: var(--vt-color-danger);
+  }
+
+  @media (max-width: 720px) {
+    .sidebar {
+      width: 100%;
+      min-width: 0;
+      max-height: 14rem;
+      border-right: 0;
+      border-bottom: 1px solid var(--vt-color-border);
+    }
+
+    .sidebar-header {
+      padding: 0.75rem 1rem;
+    }
+
+    .sidebar-section {
+      max-height: 5.5rem;
+      overflow: auto;
+    }
+
+    .sidebar-footer {
+      display: none;
+    }
   }
-  .sidebar-item:hover { background: #0f3460; color: #e0e0f0; }
-  .sidebar-item.active { background: #0f3460; color: #4ecca3; }
-  .icon { font-size: 1.1rem; }
-  .label { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 </style>

frontend/src/lib/shell/StatusBar.svelte

@@ -0,0 +1,395 @@
+<script>
+  import { onDestroy, onMount } from 'svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+
+  let items = [];
+  let settingsPanels = [];
+  let vaultStatus = { status: 'unknown', path: '', vaultId: '' };
+  let settingsOpen = false;
+  let locale = i18n.getLocale();
+  let selectedLanguage = i18n.getLanguagePreference();
+  let unsubscribeLocale = null;
+
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  $: leftItems = items.filter((item) => item.position === 'left');
+  $: centerItems = items.filter((item) => item.position === 'center');
+  $: rightItems = items.filter((item) => item.position === 'right');
+  $: vaultOpen = vaultStatus.status === 'open';
+  $: vaultStatusLabel = tr(`vault.status.${vaultStatus.status || 'unknown'}`, undefined, vaultStatus.status || 'unknown');
+  $: vaultLabel = tr('vault.label', { status: vaultStatusLabel });
+
+  const inactiveStatuses = new Set(['disabled', 'failed', 'incompatible', 'missing-required-capability']);
+
+  async function loadStatusBar() {
+    const [rawPlugins, rawContributions, vault] = await Promise.all([
+      App.GetPlugins().catch(() => []),
+      App.GetContributions().catch(() => ({})),
+      App.GetVaultStatus().catch(() => ({ status: 'unknown', path: '', vaultId: '' })),
+    ]);
+    await Promise.all((rawPlugins || []).map((plugin) => (
+      i18n.loadPlugin(plugin.manifest?.id, plugin.manifest?.localization).catch(() => {})
+    )));
+    const plugins = (rawPlugins || []).map((plugin) => i18n.localizePlugin(plugin));
+    const contributions = i18n.localizeContributionSummary(rawContributions || {});
+    const pluginById = new Map((plugins || []).map((plugin) => [plugin.manifest?.id, plugin]));
+    vaultStatus = vault || { status: 'unknown', path: '', vaultId: '' };
+    items = (contributions.statusBarItems || [])
+      .filter((item) => {
+        const plugin = pluginById.get(item.pluginId);
+        if (!plugin) return false;
+        return !inactiveStatuses.has(plugin.status);
+      })
+      .map((item) => ({
+        ...item,
+        position: item.position || 'left',
+      }));
+    settingsPanels = (contributions.settingsPanels || [])
+      .filter((panel) => {
+        const plugin = pluginById.get(panel.pluginId);
+        if (!plugin) return false;
+        return !inactiveStatuses.has(plugin.status);
+      })
+      .sort((a, b) => String(a.title || a.id).localeCompare(String(b.title || b.id)));
+  }
+
+  function openPluginManager() {
+    settingsOpen = false;
+    window.dispatchEvent(new CustomEvent('verstak:close-settings'));
+    window.dispatchEvent(new CustomEvent('verstak:nav', { detail: { viewId: 'plugin-manager' } }));
+  }
+
+  function openSettingsPanel(panel) {
+    settingsOpen = false;
+    window.dispatchEvent(new CustomEvent('verstak:open-settings', {
+      detail: { pluginId: panel.pluginId, panelId: panel.id }
+    }));
+  }
+
+  async function selectLanguage(language) {
+    const err = await App.UpdateAppSettings({ language });
+    if (err) {
+      throw new Error(err);
+    }
+    await i18n.setLanguagePreference(language);
+    selectedLanguage = language;
+    settingsOpen = false;
+  }
+
+  function toggleSettings(event) {
+    event.stopPropagation();
+    settingsOpen = !settingsOpen;
+  }
+
+  function closeSettings() {
+    settingsOpen = false;
+  }
+
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      selectedLanguage = i18n.getLanguagePreference();
+      if (changed) loadStatusBar();
+    });
+    loadStatusBar();
+    window.addEventListener('verstak:plugins-changed', loadStatusBar);
+    window.addEventListener('verstak:vault-opened', loadStatusBar);
+    window.addEventListener('click', closeSettings);
+  });
+
+  onDestroy(() => {
+    if (unsubscribeLocale) unsubscribeLocale();
+    window.removeEventListener('verstak:plugins-changed', loadStatusBar);
+    window.removeEventListener('verstak:vault-opened', loadStatusBar);
+    window.removeEventListener('click', closeSettings);
+  });
+</script>
+
+<footer class="status-bar" aria-label={tr('statusBar.label')}>
+  <div class="status-bar-group status-left">
+    <span
+      class="vault-status"
+      class:vault-open={vaultOpen}
+      class:vault-closed={!vaultOpen}
+      title={vaultStatus.path || vaultStatus.vaultId || vaultLabel}
+    >
+      <Icon name="vault" size={13} class="status-icon" />
+      {vaultLabel}
+    </span>
+    {#each leftItems as item}
+      <span
+        class:status-bar-warning={item.handler}
+        class="status-bar-item"
+        data-status-item-id={item.id}
+        title={item.handler ? `${item.pluginId}: compact status only` : item.pluginId}
+      >
+        {#if item.handler}<Icon name="warning" size={11} class="status-warning-icon" />{/if}
+        {item.label || item.id}
+      </span>
+    {/each}
+  </div>
+  <div class="status-bar-group status-center">
+    {#each centerItems as item}
+      <span
+        class:status-bar-warning={item.handler}
+        class="status-bar-item"
+        data-status-item-id={item.id}
+        title={item.handler ? `${item.pluginId}: compact status only` : item.pluginId}
+      >
+        {#if item.handler}<Icon name="warning" size={11} class="status-warning-icon" />{/if}
+        {item.label || item.id}
+      </span>
+    {/each}
+  </div>
+  <div class="status-bar-group status-right">
+    {#each rightItems as item}
+      <span
+        class:status-bar-warning={item.handler}
+        class="status-bar-item"
+        data-status-item-id={item.id}
+        title={item.handler ? `${item.pluginId}: compact status only` : item.pluginId}
+      >
+        {#if item.handler}<Icon name="warning" size={11} class="status-warning-icon" />{/if}
+        {item.label || item.id}
+      </span>
+    {/each}
+    <div class="settings-menu-wrap">
+      <button
+        class="settings-button"
+        class:active={settingsOpen}
+        type="button"
+        title={tr('settings.title')}
+        aria-haspopup="menu"
+        aria-expanded={settingsOpen}
+        data-settings-menu-button
+        on:click={toggleSettings}
+      >
+        <Icon name="settings" size={14} class="settings-icon" />
+        <Icon name="chevronDown" size={12} class="settings-chevron" />
+      </button>
+      {#if settingsOpen}
+        <div class="settings-menu" role="menu">
+          <div class="settings-menu-heading">{tr('settings.language')}</div>
+          {#each ['system', 'en', 'ru'] as language}
+            <button
+              class="settings-menu-item language-item"
+              class:active-language={selectedLanguage === language}
+              type="button"
+              role="menuitemradio"
+              aria-checked={selectedLanguage === language}
+              data-settings-language={language}
+              on:click={() => selectLanguage(language)}
+            >
+              <span class="language-check" aria-hidden="true">{selectedLanguage === language ? '✓' : ''}</span>
+              <span>{tr(`settings.language.${language}`)}</span>
+            </button>
+          {/each}
+          <div class="settings-menu-separator"></div>
+          <button
+            class="settings-menu-item"
+            type="button"
+            role="menuitem"
+            data-settings-action="plugin-manager"
+            on:click={openPluginManager}
+          >
+            <Icon name="puzzle" size={14} class="settings-menu-icon" />
+            <span>{tr('settings.pluginManager')}</span>
+          </button>
+          {#if settingsPanels.length > 0}
+            <div class="settings-menu-separator"></div>
+            {#each settingsPanels as panel}
+              <button
+                class="settings-menu-item"
+                type="button"
+                role="menuitem"
+                data-settings-panel-id={panel.id}
+                title={panel.pluginId}
+                on:click={() => openSettingsPanel(panel)}
+              >
+                <Icon name={panel.icon || 'settings'} size={14} class="settings-menu-icon" />
+                <span>{panel.title || panel.id}</span>
+              </button>
+            {/each}
+          {/if}
+        </div>
+      {/if}
+    </div>
+  </div>
+</footer>
+
+<style>
+  .status-bar {
+    position: relative;
+    z-index: 100;
+    min-height: 1.7rem;
+    display: grid;
+    grid-template-columns: minmax(0, 1fr) auto minmax(0, 1fr);
+    align-items: center;
+    gap: 0.5rem;
+    padding: 0.2rem 0.65rem;
+    border-top: 1px solid #16213e;
+    background: #111629;
+    color: #9fb2ca;
+    font-size: 0.74rem;
+  }
+
+  .status-bar-group {
+    min-width: 0;
+    display: flex;
+    align-items: center;
+    gap: 0.4rem;
+    overflow: hidden;
+  }
+
+  .status-center {
+    justify-content: center;
+  }
+
+  .status-right {
+    justify-content: flex-end;
+  }
+
+  .status-bar-item {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.25rem;
+    max-width: 18rem;
+    overflow: hidden;
+    padding: 0.12rem 0.35rem;
+    border-radius: 4px;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+
+  .status-bar-warning {
+    color: #ffc857;
+  }
+
+  :global(.status-warning-icon) {
+    flex-shrink: 0;
+    color: currentColor;
+  }
+
+  .vault-status {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.3rem;
+    max-width: 24rem;
+    min-width: 0;
+    overflow: hidden;
+    padding: 0.12rem 0.35rem;
+    border-radius: 4px;
+    color: #a0a0b8;
+    white-space: nowrap;
+    text-overflow: ellipsis;
+  }
+
+  .vault-status.vault-open {
+    color: #4ecca3;
+  }
+
+  .vault-status.vault-closed {
+    color: #9fb2ca;
+  }
+
+  :global(.status-icon) {
+    flex-shrink: 0;
+    color: currentColor;
+  }
+
+  .settings-menu-wrap {
+    position: relative;
+    display: inline-flex;
+    align-items: center;
+    flex-shrink: 0;
+  }
+
+  .settings-button {
+    min-height: 1.35rem;
+    height: 1.35rem;
+    padding: 0 0.35rem;
+    gap: 0.15rem;
+    border: 1px solid transparent;
+    border-radius: 4px;
+    background: transparent;
+    color: #9fb2ca;
+  }
+
+  .settings-button:hover,
+  .settings-button.active {
+    border-color: #1a3a5c;
+    background: #16213e;
+    color: #e0e0f0;
+  }
+
+  :global(.settings-icon),
+  :global(.settings-chevron),
+  :global(.settings-menu-icon) {
+    flex-shrink: 0;
+    color: currentColor;
+  }
+
+  .settings-menu {
+    position: fixed;
+    right: 0.65rem;
+    bottom: 2rem;
+    z-index: 10000;
+    min-width: 13rem;
+    padding: 0.3rem;
+    border: 1px solid #1a3a5c;
+    border-radius: 6px;
+    background: #12122a;
+    box-shadow: 0 10px 30px rgba(0, 0, 0, 0.35);
+  }
+
+  .settings-menu-item {
+    width: 100%;
+    min-height: 1.8rem;
+    justify-content: flex-start;
+    gap: 0.45rem;
+    padding: 0.3rem 0.45rem;
+    border: none;
+    border-radius: 4px;
+    background: transparent;
+    color: #cfd8e3;
+    font-size: 0.78rem;
+    font-weight: 500;
+    text-align: left;
+  }
+
+  .settings-menu-item:hover {
+    background: #0f3460;
+    color: #ffffff;
+  }
+
+  .settings-menu-heading {
+    padding: 0.25rem 0.45rem 0.2rem;
+    color: #7f8aa3;
+    font-size: 0.68rem;
+    font-weight: 700;
+    letter-spacing: 0.04em;
+    text-transform: uppercase;
+  }
+
+  .language-check {
+    width: 0.9rem;
+    color: #4ecca3;
+    text-align: center;
+  }
+
+  .active-language {
+    background: rgba(78, 204, 163, 0.1);
+  }
+
+  .settings-menu-separator {
+    height: 1px;
+    margin: 0.25rem 0.2rem;
+    background: #1a3a5c;
+  }
+</style>

frontend/src/lib/shell/VaultSelection.svelte

@@ -0,0 +1,387 @@
+<script>
+  import { onDestroy, onMount } from 'svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+
+  let appSettings = {};
+  let recentVaults = [];
+  let error = '';
+  let loading = true;
+  let creating = false;
+  let opening = false;
+  let newVaultPath = '';
+  let openVaultPath = '';
+  let locale = i18n.getLocale();
+  const unsubscribeLocale = i18n.subscribe((nextLocale) => { locale = nextLocale; });
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+  onDestroy(unsubscribeLocale);
+
+  onMount(async () => {
+    try {
+      appSettings = await App.GetAppSettings() || {};
+      recentVaults = appSettings.recentVaults || [];
+    } catch (e) {
+      console.error('[VaultSelection] load settings:', e);
+    }
+    loading = false;
+  });
+
+  async function browseNewVault() {
+    const path = await App.SelectDirectory();
+    if (path) {
+      newVaultPath = path;
+    }
+  }
+
+  async function browseOpenVault() {
+    const path = await App.SelectVaultForOpen();
+    if (path) {
+      openVaultPath = path;
+    }
+  }
+
+  async function createVault() {
+    error = '';
+    if (!newVaultPath.trim()) {
+      error = tr('vaultSelection.chooseNew');
+      return;
+    }
+    creating = true;
+    try {
+      const createErr = await App.CreateVault(newVaultPath.trim());
+      if (createErr) {
+        error = tr('vaultSelection.createError', { error: createErr });
+        creating = false;
+        return;
+      }
+      const openErr = await App.OpenVault(newVaultPath.trim());
+      if (openErr) {
+        error = tr('vaultSelection.openError', { error: openErr });
+        creating = false;
+        return;
+      }
+      const setErr = await App.SetCurrentVault(newVaultPath.trim());
+      if (setErr) {
+        console.warn('[VaultSelection] SetCurrentVault:', setErr);
+      }
+      window.dispatchEvent(new CustomEvent('verstak:vault-opened'));
+    } catch (e) {
+      error = String(e);
+      creating = false;
+    }
+  }
+
+  async function openExistingVault() {
+    error = '';
+    if (!openVaultPath.trim()) {
+      error = tr('vaultSelection.chooseExisting');
+      return;
+    }
+    opening = true;
+    try {
+      const openErr = await App.OpenVault(openVaultPath.trim());
+      if (openErr) {
+        error = tr('vaultSelection.openError', { error: openErr });
+        opening = false;
+        return;
+      }
+      const setErr = await App.SetCurrentVault(openVaultPath.trim());
+      if (setErr) {
+        console.warn('[VaultSelection] SetCurrentVault:', setErr);
+      }
+      window.dispatchEvent(new CustomEvent('verstak:vault-opened'));
+    } catch (e) {
+      error = String(e);
+      opening = false;
+    }
+  }
+
+  async function openRecent(path) {
+    error = '';
+    opening = true;
+    try {
+      const openErr = await App.OpenVault(path);
+      if (openErr) {
+        error = tr('vaultSelection.openError', { error: openErr });
+        opening = false;
+        return;
+      }
+      const setErr = await App.SetCurrentVault(path);
+      if (setErr) {
+        console.warn('[VaultSelection] SetCurrentVault:', setErr);
+      }
+      window.dispatchEvent(new CustomEvent('verstak:vault-opened'));
+    } catch (e) {
+      error = String(e);
+      opening = false;
+    }
+  }
+</script>
+
+{#if loading}
+  <div class="vault-selection">
+    <div class="vault-selection-inner">
+      <p class="loading-text">{tr('common.loading')}</p>
+    </div>
+  </div>
+{:else}
+<div class="vault-selection">
+  <div class="vault-selection-inner">
+    <div class="logo">
+      <svg width="48" height="48" viewBox="0 0 24 24" fill="none" stroke="#4ecca3" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">
+        <path d="M22 19a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5l2 3h9a2 2 0 0 1 2 2z"/>
+        <line x1="12" y1="11" x2="12" y2="17"/>
+        <line x1="9" y1="14" x2="15" y2="14"/>
+      </svg>
+      <h1>Verstak</h1>
+      <p class="subtitle">{tr('vaultSelection.subtitle')}</p>
+    </div>
+
+    {#if error}
+      <div class="error-box">
+        <Icon name="warning" size={14} class="error-icon" />
+        <span class="error-text">{error}</span>
+      </div>
+    {/if}
+
+    <div class="actions">
+      <div class="action-card">
+        <h3>{tr('vaultSelection.createTitle')}</h3>
+        <p class="hint">{tr('vaultSelection.createHint')}</p>
+        <div class="input-row">
+          <input
+            type="text"
+            bind:value={newVaultPath}
+            placeholder={tr('vaultSelection.pathPlaceholder')}
+            disabled={creating}
+          />
+          <button class="btn-secondary" on:click={browseNewVault} type="button" disabled={creating}>
+            {tr('common.browse')}
+          </button>
+        </div>
+        <div class="button-row">
+          <button class="btn-primary" on:click={createVault} type="button" disabled={creating}>
+            {creating ? tr('vaultSelection.creating') : tr('vaultSelection.create')}
+          </button>
+        </div>
+      </div>
+
+      <div class="action-card">
+        <h3>{tr('vaultSelection.openTitle')}</h3>
+        <p class="hint">{tr('vaultSelection.openHint')}</p>
+        <div class="input-row">
+          <input
+            type="text"
+            bind:value={openVaultPath}
+            placeholder={tr('vaultSelection.pathPlaceholder')}
+            disabled={opening}
+          />
+          <button class="btn-secondary" on:click={browseOpenVault} type="button" disabled={opening}>
+            {tr('common.browse')}
+          </button>
+        </div>
+        <div class="button-row">
+          <button class="btn-secondary open-existing-btn" on:click={openExistingVault} type="button" disabled={opening}>
+            {opening ? tr('vaultSelection.opening') : tr('vaultSelection.open')}
+          </button>
+        </div>
+      </div>
+    </div>
+
+    {#if recentVaults.length > 0}
+      <div class="recent-section">
+        <h3>{tr('vaultSelection.recent')}</h3>
+        <ul class="recent-list">
+          {#each recentVaults as path}
+            <li>
+              <button class="recent-item" on:click={() => openRecent(path)} type="button" disabled={opening}>
+                <Icon name="vault" size={16} class="recent-icon" />
+                <span class="recent-path">{path}</span>
+              </button>
+            </li>
+          {/each}
+        </ul>
+      </div>
+    {/if}
+  </div>
+</div>
+{/if}
+
+<style>
+  .vault-selection {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    height: 100vh;
+    background: var(--vt-color-background);
+    padding: 2rem;
+  }
+  .vault-selection-inner {
+    max-width: 560px;
+    width: 100%;
+  }
+  .loading-text {
+    color: var(--vt-color-text-muted);
+    text-align: center;
+    font-size: 1rem;
+  }
+  .logo {
+    text-align: center;
+    margin-bottom: 2rem;
+  }
+  .logo h1 {
+    color: var(--vt-color-text-primary);
+    font-size: 1.8rem;
+    margin: 0.5rem 0 0.25rem;
+  }
+  .subtitle {
+    color: var(--vt-color-text-muted);
+    font-size: 0.95rem;
+    margin: 0;
+  }
+  .error-box {
+    background: var(--vt-color-danger-muted);
+    border: 1px solid rgba(233, 69, 96, 0.5);
+    border-radius: var(--vt-radius-lg);
+    padding: 0.75rem 1rem;
+    margin-bottom: 1.5rem;
+    display: flex;
+    align-items: flex-start;
+    gap: 0.5rem;
+    font-size: 0.85rem;
+    color: #ffc6ce;
+  }
+  :global(.error-icon) { flex-shrink: 0; }
+  .error-text { word-break: break-word; }
+  .actions {
+    display: flex;
+    flex-direction: column;
+    gap: 1rem;
+    margin-bottom: 1.5rem;
+  }
+  .action-card {
+    background: var(--vt-color-surface);
+    border: 1px solid var(--vt-color-border);
+    border-radius: var(--vt-radius-lg);
+    padding: 1.25rem;
+  }
+  .action-card h3 {
+    color: var(--vt-color-text-primary);
+    font-size: 1rem;
+    margin: 0 0 0.25rem;
+  }
+  .hint {
+    color: var(--vt-color-text-muted);
+    font-size: 0.8rem;
+    margin: 0 0 0.75rem;
+  }
+  .input-row {
+    display: flex;
+    gap: 0.5rem;
+    margin-bottom: 0.5rem;
+  }
+  .input-row input {
+    flex: 1;
+    background: #0f1424;
+    border: 1px solid var(--vt-color-border-strong);
+    color: var(--vt-color-text-primary);
+    padding: 0.5rem 0.75rem;
+    border-radius: 6px;
+    font-size: 0.9rem;
+  }
+  .input-row input:focus {
+    outline: none;
+    border-color: var(--vt-color-accent);
+    box-shadow: var(--vt-focus-ring);
+  }
+  .input-row input::placeholder {
+    color: var(--vt-color-text-muted);
+  }
+  .button-row {
+    display: flex;
+    justify-content: flex-end;
+  }
+  .btn-primary {
+    background: var(--vt-color-accent);
+    color: #101827;
+    border: none;
+    padding: 0.5rem 1.25rem;
+    border-radius: 6px;
+    cursor: pointer;
+    font-size: 0.85rem;
+    font-weight: 600;
+  }
+  .btn-primary:hover:not(:disabled) {
+    background: #3dbb92;
+  }
+  .btn-primary:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+  .btn-secondary {
+    background: var(--vt-color-surface-hover);
+    color: var(--vt-color-text-secondary);
+    border: 1px solid var(--vt-color-border-strong);
+    padding: 0.5rem 0.75rem;
+    border-radius: 6px;
+    cursor: pointer;
+    font-size: 0.85rem;
+    white-space: nowrap;
+  }
+  .btn-secondary:hover:not(:disabled) {
+    background: var(--vt-color-surface-hover);
+    color: var(--vt-color-text-primary);
+  }
+  .btn-secondary:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+  .recent-section {
+    background: var(--vt-color-surface);
+    border: 1px solid var(--vt-color-border);
+    border-radius: var(--vt-radius-lg);
+    padding: 1rem 1.25rem;
+  }
+  .recent-section h3 {
+    color: var(--vt-color-text-muted);
+    font-size: 0.8rem;
+    text-transform: uppercase;
+    letter-spacing: 0.05em;
+    margin: 0 0 0.5rem;
+  }
+  .recent-list {
+    list-style: none;
+    padding: 0;
+    margin: 0;
+  }
+  .recent-item {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    width: 100%;
+    background: none;
+    border: none;
+    color: var(--vt-color-text-primary);
+    padding: 0.4rem 0;
+    cursor: pointer;
+    text-align: left;
+    font-size: 0.85rem;
+  }
+  .recent-item:hover {
+    color: var(--vt-color-accent);
+  }
+  .recent-item:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+  :global(.recent-icon) { flex-shrink: 0; }
+  .recent-path {
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+</style>

frontend/src/lib/shell/ViewContainer.svelte

@@ -1,88 +1,142 @@
 <script>
-  import { onMount } from 'svelte';
+  import PluginBundleHost from '../plugin-host/PluginBundleHost.svelte';
+  import { onDestroy, onMount } from 'svelte';
   import * as App from '../../../wailsjs/go/api/App';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+
+  export let activeView = null;
+  export let activeViewPluginId = null;
 
   let views = [];
-  let activeView = '';
-  let pluginStates = {};
   let plugins = [];
+  let renderError = null;
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
 
-  onMount(async () => {
+  async function loadViews() {
     try {
       const [contribs, pluginList] = await Promise.all([
-        App.GetContributions(),
-        App.GetPlugins(),
+        App.GetContributions().catch(() => ({ views: [] })),
+        App.GetPlugins().catch(() => []),
       ]);
-      views = contribs.views || [];
-      plugins = pluginList;
-      for (const p of pluginList) {
-        pluginStates[p.manifest.id] = p.status;
-      }
+      await Promise.all((pluginList || []).map((plugin) => (
+        i18n.loadPlugin(plugin.manifest?.id, plugin.manifest?.localization).catch(() => {})
+      )));
+      views = i18n.localizeContributionSummary(contribs || {}).views || [];
+      plugins = (pluginList || []).map((plugin) => i18n.localizePlugin(plugin));
     } catch (e) {
       console.error('[ViewContainer] load error:', e);
     }
+  }
 
-    window.addEventListener('verstak:open-view', (e) => {
-      activeView = e.detail.viewId;
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed) loadViews();
     });
+    loadViews();
   });
 
-  function getViewStatus(view) {
-    const status = pluginStates[view.pluginId];
-    if (status === 'failed' || status === 'incompatible') return 'error';
-    if (status === 'degraded') return 'degraded';
-    return 'ok';
+  onDestroy(() => {
+    if (unsubscribeLocale) unsubscribeLocale();
+  });
+
+  $: currentView = views.find(v => v.id === activeView && v.pluginId === activeViewPluginId);
+  $: currentPlugin = currentView
+    ? plugins.find(p => p.manifest?.id === currentView.pluginId)
+    : null;
+  $: pluginStatus = currentPlugin ? currentPlugin.status : 'unknown';
+  $: hasFrontend = currentPlugin?.manifest?.frontend?.entry != null;
+  $: hostPluginId = currentView?.pluginId || activeViewPluginId;
+  $: hostComponentId = currentView?.component || null;
+
+  // Reset render error when view changes
+  $: if (activeView) {
+    renderError = null;
+  }
+
+  function onHostError(e) {
+    renderError = e.detail?.message || tr('pluginView.error');
   }
 </script>
 
-<div class="view-container">
-  {#if activeView}
-    {#each views.filter(v => v.item.id === activeView) as view}
-      <div class="view" class:degraded={getViewStatus(view) === 'degraded'}>
-        <div class="view-header">
-          <span class="view-icon">{view.item.icon || '📦'}</span>
-          <h2>{view.item.title}</h2>
-          {#if getViewStatus(view) === 'degraded'}
-            <span class="badge degraded">degraded</span>
-          {/if}
-        </div>
-        <div class="view-content">
-          <div class="plugin-view-host" data-view-id={view.item.id} data-component={view.item.component}>
-            <p class="placeholder">
-              Plugin view: <strong>{view.item.component}</strong>
-              <br />
-              <span class="sub">from {view.pluginId}</span>
-            </p>
-          </div>
+{#key `${activeViewPluginId}:${activeView}`}
+  {#if renderError}
+    <div class="view-container">
+      <div class="error-boundary">
+        <div class="error-fallback vt-inline-alert error">
+          <Icon name="warning" size={24} class="error-icon" />
+          <p class="error-title">{tr('pluginView.failed')}</p>
+          <details class="error-details">
+            <summary>{tr('common.details')}</summary>
+            <p class="error-text">{renderError}</p>
+          </details>
         </div>
       </div>
-    {:else}
-      <div class="empty">View "{activeView}" not found in contributions</div>
-    {/each}
+    </div>
+  {:else if currentView}
+    <div class="view-container">
+      <div class="view" class:degraded={pluginStatus === 'degraded'}>
+        <div class="view-header">
+          <Icon name={currentView.icon || 'logo'} size={20} class="view-icon" />
+          <h2>{currentView.title}</h2>
+        </div>
+        <div class="view-content">
+          {#if hasFrontend}
+            <PluginBundleHost
+              pluginId={hostPluginId}
+              componentId={hostComponentId}
+            />
+          {:else}
+            <div class="placeholder">
+              <p class="placeholder-label">{tr('pluginView.noVisual')}</p>
+              <details class="placeholder-details">
+                <summary>{tr('common.details')}</summary>
+                <p class="placeholder-info"><span class="placeholder-key">{tr('common.plugin')}:</span> <strong>{currentView.pluginId}</strong></p>
+                <p class="placeholder-info"><span class="placeholder-key">{tr('pluginView.viewId')}:</span> <code>{currentView.id}</code></p>
+                <p class="placeholder-info"><span class="placeholder-key">{tr('common.component')}:</span> <code>{currentView.component}</code></p>
+              </details>
+              <p class="placeholder-badge vt-badge">{tr('pluginView.bundleUnavailable')}</p>
+            </div>
+          {/if}
+        </div>
+      </div>
+    </div>
+  {:else if activeView}
+    <div class="view-container empty">
+      <p>{tr('pluginView.unavailable')}</p>
+    </div>
   {:else}
-    <div class="empty">
-      <p>Select an item from the sidebar</p>
-      <p class="sub">Plugin views will appear here</p>
+    <div class="view-container empty">
+      <p>{tr('pluginView.select')}</p>
+      <p class="sub">{tr('pluginView.selectHint')}</p>
     </div>
   {/if}
-</div>
+{/key}
 
 <style>
   .view-container {
     flex: 1;
     display: flex;
     flex-direction: column;
-    overflow: hidden;
-    background: #1a1a2e;
+    min-width: 0;
+    background: var(--vt-color-background);
   }
   .view {
     flex: 1;
     display: flex;
     flex-direction: column;
+    min-width: 0;
     padding: 1.5rem;
   }
   .view.degraded {
-    border-left: 3px solid #ffc857;
+    border-left: 3px solid var(--vt-color-warning);
   }
   .view-header {
     display: flex;
@@ -90,48 +144,106 @@
     gap: 0.5rem;
     margin-bottom: 1rem;
     padding-bottom: 0.75rem;
-    border-bottom: 1px solid #16213e;
+    border-bottom: 1px solid var(--vt-color-border);
   }
   .view-header h2 {
     margin: 0;
     font-size: 1.2rem;
-    color: #e0e0f0;
+    color: var(--vt-color-text-primary);
     flex: 1;
   }
-  .view-icon { font-size: 1.3rem; }
+  :global(.view-icon) {
+    width: 1.3rem;
+    height: 1.3rem;
+    color: var(--vt-color-text-muted);
+    flex-shrink: 0;
+  }
   .view-content {
     flex: 1;
-    overflow: auto;
-  }
-  .plugin-view-host {
-    width: 100%;
-    min-height: 200px;
+    min-width: 0;
   }
   .placeholder {
-    color: #666;
+    color: var(--vt-color-text-muted);
     font-style: italic;
     padding: 2rem;
     text-align: center;
-    border: 1px dashed #333;
-    border-radius: 8px;
+    border: 1px dashed var(--vt-color-border-strong);
+    border-radius: var(--vt-radius-lg);
+  }
+  .placeholder-label {
+    font-size: 1rem;
+    color: var(--vt-color-text-secondary);
+    font-weight: 600;
+    margin-bottom: 1rem;
+    font-style: normal;
+  }
+  .placeholder-info {
+    font-size: 0.85rem;
+    color: var(--vt-color-text-muted);
+    margin: 0.3rem 0;
+    font-style: normal;
+  }
+  .placeholder-key {
+    color: var(--vt-color-text-muted);
+  }
+  .placeholder-info strong { color: var(--vt-color-accent); }
+  .placeholder-info code {
+    color: var(--vt-color-text-primary);
+    background: var(--vt-color-surface-muted);
+    padding: 0.1rem 0.3rem;
+    border-radius: 3px;
+    font-size: 0.8rem;
+  }
+  .placeholder-badge {
+    display: inline-block;
+    margin-top: 1rem;
+    padding: 0.25rem 0.75rem;
+    background: var(--vt-color-surface-muted);
+    color: var(--vt-color-text-secondary);
+    border-radius: 12px;
+    font-size: 0.75rem;
+    font-weight: 600;
+    letter-spacing: 0.02em;
+    font-style: normal;
+  }
+  .error-boundary {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    height: 100%;
+  }
+  .error-fallback {
+    text-align: center;
+    padding: 2rem;
+  }
+  :global(.error-icon) {
+    color: var(--vt-color-danger);
+  }
+  .error-title {
+    color: var(--vt-color-danger);
+    font-size: 1.1rem;
+    font-weight: 600;
+    margin: 0.5rem 0;
+  }
+  .error-text {
+    color: var(--vt-color-text-secondary);
+    font-size: 0.85rem;
+    font-family: monospace;
+    margin-top: 0.5rem;
   }
-  .placeholder strong { color: #4ecca3; }
-  .placeholder .sub { font-size: 0.85rem; color: #555; }
   .empty {
     display: flex;
     flex-direction: column;
     align-items: center;
     justify-content: center;
     height: 100%;
-    color: #555;
+    color: var(--vt-color-text-muted);
     font-size: 1rem;
+    text-align: center;
   }
-  .empty .sub { font-size: 0.85rem; color: #444; margin-top: 0.5rem; }
-  .badge {
-    padding: 0.15rem 0.5rem;
-    border-radius: 3px;
-    font-size: 0.75rem;
-    font-weight: 600;
-  }
-  .badge.degraded { background: #ffc857; color: #1a1a2e; }
+  .empty .sub { font-size: 0.85rem; color: var(--vt-color-text-muted); margin-top: 0.5rem; }
+  .placeholder-details,
+  .error-details { margin-top: 0.75rem; color: var(--vt-color-text-muted); }
+  .placeholder-details summary,
+  .error-details summary { cursor: pointer; color: var(--vt-color-text-secondary); }
 </style>

frontend/src/lib/shell/WorkbenchHost.svelte

@@ -0,0 +1,160 @@
+<script>
+  import { onDestroy } from 'svelte';
+  import PluginBundleHost from '../plugin-host/PluginBundleHost.svelte';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+  import { debug } from '../log/debug.js';
+
+  export let openedResource = null;
+  let locale = i18n.getLocale();
+  const unsubscribeLocale = i18n.subscribe((nextLocale) => locale = nextLocale);
+
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  $: providerPluginId = openedResource?.providerPluginId || '';
+  $: providerComponent = openedResource?.providerComponent || '';
+  $: resourcePath = openedResource?.request?.path || '';
+  $: providerId = openedResource?.providerId || '';
+  $: requestMode = openedResource?.request?.mode || 'view';
+  $: requestContext = openedResource?.request?.context?.notesMode || openedResource?.request?.context?.isInsideNotesFolder
+    ? 'notes-markdown'
+    : ((openedResource?.request?.extension === '.md' || openedResource?.request?.extension === '.markdown') ? 'generic-markdown' : 'generic-text');
+  $: componentProps = openedResource || {};
+  $: mountKey = [
+    providerPluginId,
+    providerComponent,
+    resourcePath,
+    requestMode,
+    requestContext,
+  ].join(':');
+
+  function closeWorkbench() {
+    window.dispatchEvent(new CustomEvent('verstak:close-workbench', { cancelable: true }));
+  }
+
+  onDestroy(unsubscribeLocale);
+</script>
+
+<div class="workbench-host vt-page">
+  {#if openedResource?.status === 'no-provider'}
+    <div class="workbench-header vt-page-header">
+      <span class="workbench-title vt-page-title">{resourcePath}</span>
+      <span class="workbench-provider vt-badge">{tr('workbench.noProvider')}</span>
+      <button class="close-btn btn-ghost btn-icon" type="button" title={tr('common.close')} aria-label={tr('common.close')} on:click={closeWorkbench}>
+        <Icon name="x" size={18} />
+      </button>
+    </div>
+    <div class="workbench-empty no-provider vt-empty-state" data-workbench-status="no-provider">
+      <p class="vt-empty-title">{tr('workbench.noViewer')}</p>
+      <p class="workbench-meta">{requestMode} · {requestContext}</p>
+    </div>
+  {:else if openedResource}
+    <div class="workbench-header vt-page-header">
+      <span class="workbench-title vt-page-title">{resourcePath}</span>
+      {#if debug.isEnabled() && providerId}
+        <span class="workbench-provider vt-badge accent" data-debug-provider>{providerId}</span>
+      {/if}
+      <button class="close-btn btn-ghost btn-icon" type="button" title={tr('common.close')} aria-label={tr('common.close')} on:click={closeWorkbench}>
+        <Icon name="x" size={18} />
+      </button>
+    </div>
+    <div class="workbench-content">
+      {#key mountKey}
+        <PluginBundleHost
+          pluginId={providerPluginId}
+          componentId={providerComponent}
+          {componentProps}
+        />
+      {/key}
+    </div>
+  {:else}
+    <div class="workbench-empty vt-empty-state">
+      <p class="vt-empty-title">{tr('workbench.noResource')}</p>
+    </div>
+  {/if}
+</div>
+
+<style>
+  .workbench-host {
+    flex: 1;
+    min-width: 0;
+    min-height: 0;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+    background: var(--vt-color-background);
+  }
+
+  .workbench-header {
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+    padding: var(--vt-space-2) var(--vt-space-4);
+    border-bottom: 1px solid var(--vt-color-border);
+    flex-shrink: 0;
+  }
+
+  .workbench-title {
+    color: var(--vt-color-text-primary);
+    font-size: 0.95rem;
+    font-weight: 600;
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+
+  .close-btn {
+    width: 2rem;
+    height: 2rem;
+    min-height: 0;
+    padding: 0;
+    border-radius: var(--vt-radius-md);
+    color: var(--vt-color-text-secondary);
+    flex-shrink: 0;
+    cursor: pointer;
+  }
+
+  .close-btn:hover {
+    color: var(--vt-color-text-primary);
+    background: var(--vt-color-surface-hover);
+  }
+
+  .workbench-provider {
+    color: var(--vt-color-accent);
+    font-size: 0.75rem;
+    margin-left: auto;
+  }
+
+  .workbench-content {
+    min-width: 0;
+    min-height: 0;
+    height: 100%;
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    padding: 0;
+  }
+
+  .workbench-empty {
+    flex: 1;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    color: var(--vt-color-text-muted);
+  }
+
+  .workbench-empty.no-provider {
+    flex-direction: column;
+    gap: 0.35rem;
+  }
+
+  .workbench-meta {
+    margin: 0;
+    color: var(--vt-color-text-muted);
+    font-size: 0.8rem;
+  }
+</style>

frontend/src/lib/shell/WorkspaceHost.svelte

@@ -0,0 +1,394 @@
+<script>
+  import PluginBundleHost from '../plugin-host/PluginBundleHost.svelte';
+  import GlobalSearch from './GlobalSearch.svelte';
+  import TodaySurface from './TodaySurface.svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import { onDestroy, onMount } from 'svelte';
+  import { i18n } from '../i18n/index.js';
+
+  export let selectedWorkspaceName = '';
+  export let nodes = [];
+  export let activeToolKey = '';
+
+  let contributions = {};
+  let plugins = [];
+  let discoveredWorkspaceTools = [];
+  let workspaceTools = [];
+  let workspaceMetadata = null;
+  let metadataWorkspaceRoot = '';
+  let toolsLoaded = false;
+  let requestedToolKind = '';
+  let requestedToolRequest = null;
+  let activeToolRequest = null;
+  let requestedWorkspaceRoot = '';
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+  // TODO: Rename TodaySurface.svelte to OverviewSurface.svelte in a refactor-only follow-up.
+  $: overviewTool = { id: '__overview', title: tr('workspace.overview'), pluginId: 'verstak.shell', component: 'TodaySurface', shell: true };
+
+  const toolOrder = new Map([
+    ['notes', 10],
+    ['files', 20],
+    ['todo', 30],
+    ['activity', 40],
+    ['browser', 50],
+    ['inbox', 50],
+    ['secrets', 60],
+    ['search', 90],
+  ]);
+
+  $: selectedWorkspace = nodes.find(n => n.id === selectedWorkspaceName || n.name === selectedWorkspaceName || n.rootPath === selectedWorkspaceName) || null;
+  $: workspaceRootPath = selectedWorkspace?.rootPath || selectedWorkspace?.name || selectedWorkspace?.id || '';
+  $: workspaceId = selectedWorkspace?.workspaceId || '';
+  $: workspaceTitle = selectedWorkspace?.title || selectedWorkspace?.name || selectedWorkspace?.id || selectedWorkspaceName;
+  $: workspaceType = selectedWorkspace?.type || 'workspace';
+  $: if (workspaceRootPath !== metadataWorkspaceRoot) {
+    metadataWorkspaceRoot = workspaceRootPath;
+    workspaceMetadata = null;
+    if (workspaceRootPath) loadWorkspaceMetadata(workspaceRootPath);
+  }
+  $: workspaceTools = sortWorkspaceTools(filterWorkspaceTools(discoveredWorkspaceTools, workspaceMetadata));
+  $: if (workspaceRootPath !== requestedWorkspaceRoot) {
+    requestedWorkspaceRoot = workspaceRootPath;
+    requestedToolRequest = null;
+    activeToolRequest = null;
+  }
+  $: displayedTools = selectedWorkspace ? [overviewTool, ...workspaceTools] : [];
+  $: activeTool = displayedTools.find(tool => toolKey(tool) === activeToolKey) || displayedTools[0] || null;
+  $: if (displayedTools.length > 0 && (!activeToolKey || (toolsLoaded && !displayedTools.some(tool => toolKey(tool) === activeToolKey)))) {
+    activeToolKey = toolKey(overviewTool);
+  }
+  $: if (requestedToolKind && workspaceTools.length > 0) {
+    const match = findWorkspaceTool(requestedToolKind);
+    if (match) {
+      const toolRequest = requestedToolRequest;
+      requestedToolKind = '';
+      requestedToolRequest = null;
+      selectTool(match, toolRequest);
+    }
+  }
+  $: if (selectedWorkspaceName) loadTools();
+
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed && selectedWorkspaceName) loadTools();
+    });
+    window.addEventListener('verstak:workspace-open-tool', handleWorkspaceOpenTool);
+  });
+
+  onDestroy(() => {
+    if (unsubscribeLocale) unsubscribeLocale();
+    window.removeEventListener('verstak:workspace-open-tool', handleWorkspaceOpenTool);
+  });
+
+  function toolKey(tool) {
+    return `${tool?.pluginId || ''}:${tool?.id || ''}`;
+  }
+
+  function toolRank(tool) {
+    const text = `${tool?.title || ''} ${tool?.id || ''} ${tool?.pluginId || ''}`.toLowerCase();
+    for (const [needle, rank] of toolOrder.entries()) {
+      if (text.includes(needle)) return rank;
+    }
+    return 1000;
+  }
+
+  function sortWorkspaceTools(tools) {
+    return [...tools].sort((a, b) => {
+      const rankDiff = toolRank(a) - toolRank(b);
+      if (rankDiff !== 0) return rankDiff;
+      return String(a.title || a.id).localeCompare(String(b.title || b.id));
+    });
+  }
+
+  function filterWorkspaceTools(tools, metadata) {
+    if (!Array.isArray(metadata?.workspaceTools)) return tools;
+    const allowedPluginIds = new Set(metadata.workspaceTools);
+    return tools.filter(tool => allowedPluginIds.has(tool.pluginId));
+  }
+
+  function resultOrError(response, fallbackValue) {
+    if (Array.isArray(response) && typeof response[1] === 'string') {
+      return [response[0] || fallbackValue, response[1] || ''];
+    }
+    return typeof response === 'string' ? [fallbackValue, response] : [response || fallbackValue, ''];
+  }
+
+  async function loadWorkspaceMetadata(rootPath) {
+    try {
+      const [metadata, err] = resultOrError(await App.GetWorkspaceMetadata(rootPath), null);
+      if (rootPath !== workspaceRootPath) return;
+      workspaceMetadata = err ? null : metadata;
+    } catch (_) {
+      if (rootPath === workspaceRootPath) workspaceMetadata = null;
+    }
+  }
+
+  function selectTool(tool, toolRequest = null) {
+    activeToolKey = toolKey(tool);
+    activeToolRequest = toolRequest;
+    window.dispatchEvent(new CustomEvent('verstak:workspace-tool-selected', {
+      detail: {
+        toolKey: activeToolKey,
+        toolId: tool?.id || '',
+        pluginId: tool?.pluginId || '',
+      },
+    }));
+  }
+
+  function findWorkspaceTool(kind) {
+    kind = String(kind || '').toLowerCase();
+    return workspaceTools.find(tool => {
+      const text = `${tool?.title || ''} ${tool?.id || ''} ${tool?.pluginId || ''}`.toLowerCase();
+      if (kind === 'browser-inbox') return text.includes('browser') || text.includes('inbox');
+      return text.includes(kind);
+    });
+  }
+
+  function requestWorkspaceTool(kind, toolRequest = null) {
+    requestedToolKind = String(kind || '').toLowerCase();
+    requestedToolRequest = toolRequest;
+    const match = findWorkspaceTool(requestedToolKind);
+    if (match) {
+      requestedToolKind = '';
+      requestedToolRequest = null;
+      selectTool(match, toolRequest);
+    }
+  }
+
+  function openWorkspaceTool(event) {
+    requestWorkspaceTool(event?.detail?.kind, event?.detail?.toolRequest || null);
+  }
+
+  function handleWorkspaceOpenTool(event) {
+    requestWorkspaceTool(event?.detail?.kind, event?.detail?.toolRequest || null);
+  }
+
+  async function loadTools() {
+    try {
+      toolsLoaded = false;
+      const [c, p] = await Promise.all([
+        App.GetContributions().catch(() => ({})),
+        App.GetPlugins().catch(() => []),
+      ]);
+      await Promise.all((p || []).map((plugin) => (
+        i18n.loadPlugin(plugin.manifest?.id, plugin.manifest?.localization).catch(() => {})
+      )));
+      contributions = i18n.localizeContributionSummary(c || {});
+      plugins = (p || []).map((plugin) => i18n.localizePlugin(plugin));
+
+      const enabledIds = new Set(
+        plugins.filter(pl => pl.enabled && (pl.status === 'loaded' || pl.status === 'degraded')).map(pl => pl.manifest?.id)
+      );
+
+      discoveredWorkspaceTools = (contributions.workspaceItems || []).filter(tool => enabledIds.has(tool.pluginId));
+    } catch (e) {
+      console.error('[WorkspaceHost] loadTools error:', e);
+    } finally {
+      toolsLoaded = true;
+    }
+  }
+</script>
+
+<div class="workspace-host vt-page">
+  {#if selectedWorkspace}
+    <div class="workspace-header vt-page-header">
+      <div class="workspace-title-group">
+        <span class="workspace-title vt-page-title">{workspaceTitle}</span>
+        <span class="workspace-type vt-badge accent">{workspaceType}</span>
+      </div>
+      <div class="workspace-search" aria-label={tr('workspace.search')}>
+        <GlobalSearch />
+      </div>
+    </div>
+
+    {#if displayedTools.length > 0}
+      <div class="workspace-tabs vt-tabbar" role="tablist" aria-label={tr('workspace.tools')}>
+        {#each displayedTools as tool (tool.id + tool.pluginId)}
+          <button
+            class="vt-tab"
+            class:is-active={toolKey(tool) === toolKey(activeTool)}
+            role="tab"
+            aria-selected={toolKey(tool) === toolKey(activeTool)}
+            type="button"
+            title={tool.pluginId}
+            on:click={() => selectTool(tool)}
+          >
+            {tool.title || tool.id}
+          </button>
+        {/each}
+      </div>
+      <div class="workspace-tool-content" role="tabpanel" aria-label={activeTool?.title || activeTool?.id || tr('workspace.tool')}>
+        {#if activeTool}
+          {#if activeTool.shell}
+            <TodaySurface
+              {workspaceRootPath}
+              availableTools={displayedTools}
+              on:openTool={openWorkspaceTool}
+            />
+          {:else}
+            <PluginBundleHost
+              pluginId={activeTool.pluginId}
+              componentId={activeTool.component}
+              componentProps={{ workspaceName: selectedWorkspaceName, workspaceNodeId: selectedWorkspaceName, workspaceNode: selectedWorkspace, workspaceRootPath, workspaceId, toolRequest: activeToolRequest }}
+            />
+          {/if}
+        {/if}
+      </div>
+    {:else}
+      <div class="workspace-empty vt-empty-state">
+        <p class="vt-empty-title">{tr('workspace.emptyTools')}</p>
+        <p class="workspace-hint">{tr('workspace.emptyToolsHint')}</p>
+      </div>
+    {/if}
+  {:else}
+    <div class="workspace-empty vt-empty-state">
+      <p class="vt-empty-title">{tr('workspace.select')}</p>
+      <p class="workspace-hint">{tr('workspace.selectHint')}</p>
+    </div>
+  {/if}
+</div>
+
+<style>
+  .workspace-host {
+    min-width: 0;
+    min-height: 0;
+    display: flex;
+    flex-direction: column;
+    height: 100%;
+    background: var(--vt-color-background);
+  }
+
+  .workspace-header {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 1rem;
+    padding: var(--vt-space-2) var(--vt-space-4);
+    border-bottom: 1px solid var(--vt-color-border);
+    flex-shrink: 0;
+  }
+
+  .workspace-title-group {
+    min-width: 0;
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+  }
+
+  .workspace-title {
+    color: var(--vt-color-text-primary);
+    font-size: 0.95rem;
+    font-weight: 600;
+  }
+
+  .workspace-type {
+    color: var(--vt-color-accent);
+    font-size: 0.75rem;
+    padding: 0.1rem 0.4rem;
+    border-radius: var(--vt-radius-sm);
+    background: var(--vt-color-accent-muted);
+  }
+
+  .workspace-search {
+    width: min(27rem, 46vw);
+    min-width: 16rem;
+    flex-shrink: 1;
+  }
+
+  .workspace-search :global(.global-search) {
+    padding: 0;
+    border-bottom: 0;
+  }
+
+  .workspace-search :global(.global-search-box) {
+    background: #0f1424;
+    border-color: var(--vt-color-border-strong);
+  }
+
+  .workspace-search :global(.global-search-results) {
+    left: 0;
+    right: 0;
+    top: calc(100% + 0.35rem);
+  }
+
+  @media (max-width: 720px) {
+    .workspace-header {
+      align-items: stretch;
+      flex-direction: column;
+    }
+
+    .workspace-search {
+      width: 100%;
+      min-width: 0;
+    }
+  }
+
+  .workspace-tabs {
+    display: flex;
+    align-items: center;
+    gap: 0.25rem;
+    padding: var(--vt-space-1) var(--vt-space-3) 0;
+    background: #12162a;
+    border-bottom: 1px solid var(--vt-color-border);
+    flex-shrink: 0;
+    overflow-x: auto;
+    scrollbar-gutter: auto;
+  }
+
+  .workspace-tabs button {
+    flex-shrink: 0;
+    min-height: 2rem;
+    padding: 0.35rem 0.8rem;
+    border: 1px solid transparent;
+    border-bottom: none;
+    border-radius: var(--vt-radius-md) var(--vt-radius-md) 0 0;
+    background: transparent;
+    color: var(--vt-color-text-muted);
+    cursor: pointer;
+    font: inherit;
+    font-size: 0.8rem;
+  }
+
+  .workspace-tabs button:hover {
+    color: var(--vt-color-text-primary);
+    background: var(--vt-color-surface-hover);
+  }
+
+  .workspace-tabs button.is-active {
+    color: var(--vt-color-accent);
+    background: var(--vt-color-background);
+    border-color: var(--vt-color-border);
+  }
+
+  .workspace-tool-content {
+    flex: 1;
+    min-height: 0;
+    overflow: hidden;
+  }
+
+  .workspace-empty {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    color: var(--vt-color-text-muted);
+    gap: 0.5rem;
+    padding: 2rem;
+    text-align: center;
+  }
+
+  .workspace-hint {
+    font-size: 0.8rem;
+    color: var(--vt-color-text-muted);
+    max-width: 300px;
+    text-align: center;
+  }
+</style>

frontend/src/lib/shell/WorkspaceTree.svelte

@@ -0,0 +1,391 @@
+<script context="module">
+  import { writable } from 'svelte/store';
+
+  const activeWorkspaceId = writable('');
+</script>
+
+<script>
+  import { onDestroy, onMount } from 'svelte';
+  import * as App from '../../../wailsjs/go/api/App';
+  import Icon from '../ui/Icon.svelte';
+  import { i18n } from '../i18n/index.js';
+
+  let loading = true;
+  let localError = '';
+  let workspaces = [];
+  let currentWorkspaceId = '';
+  let showCreate = false;
+  let newWorkspaceName = '';
+  let workspaceTemplates = [];
+  let templatePluginNames = {};
+  let selectedTemplateId = 'default';
+  let createError = '';
+  let templatesLoading = false;
+  let creating = false;
+  let renamingId = '';
+  let renameValue = '';
+  let busyId = '';
+  let locale = i18n.getLocale();
+  let unsubscribeLocale = null;
+  $: tr = ((activeLocale) => (key, params, fallback) => {
+    void activeLocale;
+    return i18n.t(key, params, fallback);
+  })(locale);
+
+  onMount(() => {
+    unsubscribeLocale = i18n.subscribe((nextLocale) => {
+      const changed = locale !== nextLocale;
+      locale = nextLocale;
+      if (changed) loadWorkspaceTemplates();
+    });
+    loadWorkspaces();
+    loadWorkspaceTemplates();
+    window.addEventListener('verstak:workspace-active-changed', onActiveWorkspaceChanged);
+  });
+
+  onDestroy(() => {
+    if (unsubscribeLocale) unsubscribeLocale();
+    window.removeEventListener('verstak:workspace-active-changed', onActiveWorkspaceChanged);
+  });
+
+  function onActiveWorkspaceChanged(event) {
+    currentWorkspaceId = event.detail?.workspaceName || '';
+    activeWorkspaceId.set(currentWorkspaceId);
+  }
+
+  function resultOrError(response, fallbackValue) {
+    if (Array.isArray(response) && typeof response[1] === 'string') {
+      return [response[0] || fallbackValue, response[1] || ''];
+    }
+    return typeof response === 'string' ? [fallbackValue, response] : [response, ''];
+  }
+
+  $: selectedTemplate = workspaceTemplates.find(template => template.id === selectedTemplateId) || workspaceTemplates[0] || null;
+
+  function toolLabel(pluginId) {
+    return templatePluginNames[pluginId] || String(pluginId || '').replace(/^verstak\./, '');
+  }
+
+  async function loadWorkspaceTemplates() {
+    templatesLoading = true;
+    try {
+      const [templates, plugins] = await Promise.all([
+        App.ListWorkspaceTemplates ? App.ListWorkspaceTemplates() : [],
+        App.GetPlugins ? App.GetPlugins() : [],
+      ]);
+      const [list, err] = resultOrError(templates, []);
+      if (err) {
+        createError = err;
+        workspaceTemplates = [];
+        return;
+      }
+      workspaceTemplates = Array.isArray(list) ? list : [];
+      await Promise.all((Array.isArray(plugins) ? plugins : []).map((plugin) => (
+        i18n.loadPlugin(plugin.manifest?.id, plugin.manifest?.localization).catch(() => {})
+      )));
+      templatePluginNames = (Array.isArray(plugins) ? plugins : []).map((plugin) => i18n.localizePlugin(plugin)).reduce((names, plugin) => {
+        const id = plugin?.manifest?.id;
+        const name = plugin?.manifest?.name;
+        if (id && name) names[id] = name;
+        return names;
+      }, {});
+      if (!workspaceTemplates.some(template => template.id === selectedTemplateId)) {
+        selectedTemplateId = workspaceTemplates[0]?.id || '';
+      }
+    } catch (error) {
+      createError = String(error);
+      workspaceTemplates = [];
+    } finally {
+      templatesLoading = false;
+    }
+  }
+
+  function wsName(workspace) {
+    return String(workspace?.name || workspace?.rootPath || '');
+  }
+
+  function asNode(workspace, order) {
+    const name = wsName(workspace);
+    return {
+      id: name,
+      type: 'space',
+      title: name,
+      name,
+      rootPath: workspace.rootPath || name,
+      status: 'active',
+      order,
+    };
+  }
+
+  function nodesForEvent() {
+    return workspaces.map(asNode);
+  }
+
+  async function loadWorkspaces() {
+    loading = true;
+    localError = '';
+    try {
+      const [list, err] = resultOrError(await App.ListWorkspaces(), []);
+      if (err) {
+        localError = err;
+        workspaces = [];
+      } else {
+        workspaces = list || [];
+        if (!currentWorkspaceId) {
+          let currentWorkspace = null;
+          try {
+            currentWorkspace = await App.GetCurrentWorkspace();
+          } catch {
+            currentWorkspace = null;
+          }
+          const currentName = wsName(currentWorkspace);
+          if (workspaces.some((ws) => wsName(ws) === currentName)) {
+            currentWorkspaceId = currentName;
+          }
+        } else if (!workspaces.some((ws) => wsName(ws) === currentWorkspaceId)) {
+          currentWorkspaceId = '';
+        }
+        activeWorkspaceId.set(currentWorkspaceId);
+      }
+    } catch (e) {
+      localError = String(e);
+    }
+    loading = false;
+  }
+
+  async function selectWorkspace(workspace) {
+    const id = wsName(workspace);
+    const err = await App.SetCurrentWorkspace(id);
+    if (err) {
+      localError = err;
+      return;
+    }
+    currentWorkspaceId = id;
+    activeWorkspaceId.set(id);
+    window.dispatchEvent(new CustomEvent('verstak:workspace-selected', {
+      detail: { workspaceName: id, nodes: nodesForEvent() }
+    }));
+  }
+
+  async function doCreate() {
+    const name = newWorkspaceName.trim();
+    if (!name) {
+      createError = tr('workspaceTree.nameRequired');
+      return;
+    }
+    if (!selectedTemplate) {
+      createError = tr('workspaceTree.chooseTemplate');
+      return;
+    }
+    creating = true;
+    createError = '';
+    const [, err] = resultOrError(await App.CreateWorkspace(name, selectedTemplate.id), null);
+    if (err) {
+      createError = err;
+      creating = false;
+      return;
+    }
+    showCreate = false;
+    newWorkspaceName = '';
+    creating = false;
+    await loadWorkspaces();
+    const created = workspaces.find((ws) => wsName(ws) === name);
+    if (created) await selectWorkspace(created);
+  }
+
+  function openCreateDialog() {
+    showCreate = true;
+    newWorkspaceName = '';
+    createError = '';
+    if (!workspaceTemplates.length && !templatesLoading) loadWorkspaceTemplates();
+  }
+
+  function closeCreateDialog() {
+    if (creating) return;
+    showCreate = false;
+    newWorkspaceName = '';
+    createError = '';
+  }
+
+  function startRename(workspace) {
+    renamingId = wsName(workspace);
+    renameValue = renamingId;
+    localError = '';
+  }
+
+  function cancelRename() {
+    renamingId = '';
+    renameValue = '';
+  }
+
+  async function commitRename(workspace) {
+    const oldName = wsName(workspace);
+    const newName = renameValue.trim();
+    if (!newName || newName === oldName) {
+      cancelRename();
+      return;
+    }
+    busyId = oldName;
+    const err = await App.RenameWorkspace(oldName, newName);
+    if (err) {
+      localError = err;
+      busyId = '';
+      return;
+    }
+    renamingId = '';
+    renameValue = '';
+    busyId = '';
+    currentWorkspaceId = newName;
+    await loadWorkspaces();
+    const renamed = workspaces.find((ws) => wsName(ws) === newName);
+    if (renamed) await selectWorkspace(renamed);
+  }
+
+  async function trashWorkspace(workspace) {
+    const name = wsName(workspace);
+    busyId = name;
+    const [, err] = resultOrError(await App.TrashWorkspace(name), null);
+    if (err) {
+      localError = err;
+      busyId = '';
+      return;
+    }
+    if (currentWorkspaceId === name) currentWorkspaceId = '';
+    busyId = '';
+    await loadWorkspaces();
+    if (currentWorkspaceId) {
+      const selected = workspaces.find((ws) => wsName(ws) === currentWorkspaceId);
+      if (selected) await selectWorkspace(selected);
+    }
+  }
+</script>
+
+<div class="wt">
+  <div class="wt-header">
+    <span class="wt-title">{tr('workspaceTree.title')}</span>
+    <button class="wt-btn" on:click={openCreateDialog} title={tr('workspaceTree.new')} type="button">+</button>
+  </div>
+
+  {#if loading}
+    <div class="wt-loading">{tr('common.loading')}</div>
+  {:else if localError}
+    <div class="wt-error">{localError}</div>
+  {/if}
+
+  <div class="wt-list">
+    {#each workspaces as workspace (wsName(workspace))}
+      {@const id = wsName(workspace)}
+      <div class="wt-node vt-list-row" class:selected={id === $activeWorkspaceId}>
+        <div class="wt-row">
+          <span class="wt-icon"><Icon name="space" size={13} class="wt-node-icon" /></span>
+          {#if renamingId === id}
+            <input
+              class="wt-rename"
+              bind:value={renameValue}
+              disabled={busyId === id}
+              on:keydown={(e) => {
+                if (e.key === 'Enter') commitRename(workspace);
+                if (e.key === 'Escape') cancelRename();
+              }}
+            />
+            <button class="wt-btn wt-btn-small wt-always" on:click={() => commitRename(workspace)} title={tr('workspaceTree.saveRename')} type="button" disabled={busyId === id}>OK</button>
+            <button class="wt-btn wt-btn-small wt-always" on:click={cancelRename} title={tr('common.cancel')} type="button" disabled={busyId === id}>{tr('common.cancel')}</button>
+          {:else}
+            <button class="wt-label" on:click={() => selectWorkspace(workspace)} type="button">{id}</button>
+            <button class="wt-icon-btn" on:click={() => startRename(workspace)} title={tr('workspaceTree.rename')} type="button" disabled={busyId === id}>
+              <Icon name="edit" size={12} />
+            </button>
+            <button class="wt-icon-btn danger" on:click={() => trashWorkspace(workspace)} title={tr('workspaceTree.trash')} type="button" disabled={busyId === id}>
+              <Icon name="trash" size={12} />
+            </button>
+          {/if}
+        </div>
+      </div>
+    {/each}
+  </div>
+
+  {#if showCreate}
+    <div class="workspace-create-overlay" data-workspace-create-modal role="dialog" aria-modal="true" aria-label={tr('workspaceTree.create')}>
+      <div class="workspace-create-modal">
+        <div class="workspace-create-header">
+          <div>
+            <h2>{tr('workspaceTree.new')}</h2>
+          </div>
+          <button class="wt-btn" on:click={closeCreateDialog} type="button" disabled={creating}>{tr('common.close')}</button>
+        </div>
+        <label class="workspace-create-field">
+          <span>{tr('pluginCard.name')}</span>
+          <input data-workspace-name type="text" bind:value={newWorkspaceName} placeholder={tr('workspaceTree.namePlaceholder')} disabled={creating} on:keydown={(event) => event.key === 'Enter' && doCreate()} />
+        </label>
+        <label class="workspace-create-field">
+          <span>{tr('workspaceTree.template')}</span>
+          <select data-workspace-template bind:value={selectedTemplateId} disabled={creating || templatesLoading || !workspaceTemplates.length}>
+            {#each workspaceTemplates as template (template.id)}
+              <option value={template.id}>{template.name}</option>
+            {/each}
+          </select>
+        </label>
+        {#if selectedTemplate}
+          <div class="workspace-template-summary">
+            <p data-workspace-template-description>{selectedTemplate.description}</p>
+            <div class="workspace-template-tools" data-workspace-template-tools>
+              {#each selectedTemplate.workspaceTools || [] as pluginId (pluginId)}
+                <span>{toolLabel(pluginId)}</span>
+              {/each}
+            </div>
+          </div>
+        {/if}
+        {#if createError}
+          <p class="workspace-create-error" data-workspace-create-error role="alert">{createError}</p>
+        {/if}
+        <div class="workspace-create-actions">
+          <button class="wt-btn-primary" on:click={doCreate} type="button" disabled={creating || templatesLoading || !selectedTemplate}>{creating ? tr('workspaceTree.creating') : tr('workspaceTree.create')}</button>
+          <button class="wt-btn" on:click={closeCreateDialog} type="button" disabled={creating}>{tr('common.cancel')}</button>
+        </div>
+      </div>
+    </div>
+  {/if}
+</div>
+
+<style>
+  .wt { display: flex; flex-direction: column; flex: 1; overflow: hidden; position: relative; }
+  .wt-header { display: flex; align-items: center; justify-content: space-between; padding: 0.7rem 0.6rem 0.35rem; border-bottom: 1px solid var(--vt-color-border); flex-shrink: 0; }
+  .wt-title { color: var(--vt-color-text-muted); font-size: 0.7rem; text-transform: uppercase; letter-spacing: 0.05em; font-weight: 600; }
+  .wt-list { min-height: 0; overflow-y: auto; padding: 0.2rem 0.6rem; }
+  .wt-btn { min-height: 1.55rem; background: transparent; border: 1px solid transparent; color: var(--vt-color-text-muted); cursor: pointer; font-size: 0.78rem; padding: 0.12rem 0.38rem; border-radius: var(--vt-radius-sm); }
+  .wt-btn:hover:not(:disabled) { color: var(--vt-color-accent); background: var(--vt-color-accent-muted); border-color: rgba(78,204,163,0.25); }
+  .wt-btn-small { font-size: 0.7rem; opacity: 0; }
+  .wt-always { opacity: 1; }
+  .wt-row:hover .wt-btn-small { opacity: 1; }
+  .wt-loading, .wt-error { padding: 0.5rem; font-size: 0.75rem; color: var(--vt-color-text-muted); }
+  .wt-error { color: var(--vt-color-danger); }
+  .wt-row { display: flex; align-items: center; gap: 0.45rem; padding: 0.18rem 0.45rem; min-height: 1.85rem; border-radius: var(--vt-radius-sm); }
+  .wt-row:hover { background: var(--vt-color-surface-hover); }
+  .wt-node.selected > .wt-row { background: var(--vt-color-surface-selected); box-shadow: inset 2px 0 0 var(--vt-color-accent); }
+  .wt-icon { width: 0.95rem; height: 0.95rem; display: inline-flex; align-items: center; justify-content: center; flex-shrink: 0; color: var(--vt-color-text-muted); }
+  :global(.wt-node-icon) { display: block; }
+  .wt-label { flex: 1; min-width: 0; min-height: 0; justify-content: flex-start; background: none; border: none; color: var(--vt-color-text-secondary); font-size: 0.78rem; text-align: left; cursor: pointer; padding: 0.1rem 0; border-radius: var(--vt-radius-sm); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+  .wt-label:hover { color: var(--vt-color-accent); }
+  .wt-icon-btn { width: 1.45rem; height: 1.45rem; min-height: 0; padding: 0; border: 1px solid transparent; background: transparent; color: var(--vt-color-text-muted); opacity: 0.75; flex-shrink: 0; cursor: pointer; border-radius: var(--vt-radius-sm); }
+  .wt-row:hover .wt-icon-btn { opacity: 1; }
+  .wt-icon-btn:hover:not(:disabled) { color: var(--vt-color-accent); background: var(--vt-color-accent-muted); border-color: rgba(78,204,163,0.25); }
+  .wt-icon-btn.danger:hover:not(:disabled) { color: var(--vt-color-danger); background: var(--vt-color-danger-muted); border-color: rgba(233,69,96,0.35); }
+  .wt-rename { flex: 1; min-width: 0; background: #0f1424; border: 1px solid var(--vt-color-border-strong); color: var(--vt-color-text-primary); padding: 0.2rem 0.35rem; border-radius: var(--vt-radius-sm); font-size: 0.78rem; }
+  .wt-rename:focus { outline: none; border-color: var(--vt-color-accent); box-shadow: var(--vt-focus-ring); }
+  .workspace-create-overlay { position: fixed; inset: 0; z-index: 10000; display: flex; align-items: center; justify-content: center; padding: 1rem; background: rgba(4, 8, 18, 0.7); }
+  .workspace-create-modal { width: min(34rem, 100%); display: grid; gap: 0.85rem; padding: 1rem; border: 1px solid var(--vt-color-border-strong); border-radius: var(--vt-radius-lg); background: var(--vt-color-surface); box-shadow: 0 18px 44px rgba(0, 0, 0, 0.38); }
+  .workspace-create-header { display: flex; align-items: flex-start; justify-content: space-between; gap: 1rem; }
+  .workspace-create-header h2 { margin: 0; font-size: 1rem; }
+  .workspace-create-field { display: grid; gap: 0.35rem; color: var(--vt-color-text-muted); font-size: 0.75rem; }
+  .workspace-create-field input, .workspace-create-field select { width: 100%; min-height: 2rem; box-sizing: border-box; border: 1px solid var(--vt-color-border-strong); border-radius: var(--vt-radius-sm); background: #0f1424; color: var(--vt-color-text-primary); padding: 0.35rem 0.5rem; font: inherit; font-size: 0.84rem; }
+  .workspace-create-field input:focus, .workspace-create-field select:focus { outline: none; border-color: var(--vt-color-accent); box-shadow: var(--vt-focus-ring); }
+  .workspace-template-summary { display: grid; gap: 0.55rem; padding: 0.75rem; border: 1px solid var(--vt-color-border); border-radius: var(--vt-radius-md); background: var(--vt-color-surface-muted); }
+  .workspace-template-summary p { margin: 0; color: var(--vt-color-text-secondary); font-size: 0.8rem; line-height: 1.45; }
+  .workspace-template-tools { display: flex; flex-wrap: wrap; gap: 0.35rem; }
+  .workspace-template-tools span { min-height: 1.35rem; display: inline-flex; align-items: center; padding: 0 0.35rem; border: 1px solid var(--vt-color-border-strong); border-radius: var(--vt-radius-sm); color: var(--vt-color-text-secondary); font-size: 0.72rem; }
+  .workspace-create-error { margin: 0; color: var(--vt-color-danger); font-size: 0.78rem; line-height: 1.4; }
+  .workspace-create-actions { display: flex; gap: 0.4rem; justify-content: flex-end; }
+  .wt-btn-primary { background: var(--vt-color-accent); color: #101827; border: none; padding: 0.3rem 0.6rem; border-radius: var(--vt-radius-sm); cursor: pointer; font-size: 0.75rem; font-weight: 600; }
+  .wt-btn-primary:hover:not(:disabled) { background: #3dbb92; }
+  .wt-btn-primary:disabled, .wt-btn:disabled, .wt-icon-btn:disabled { opacity: 0.5; cursor: not-allowed; }
+</style>

frontend/src/lib/ui/Icon.svelte

@@ -0,0 +1,80 @@
+<script>
+  /**
+   * Icon.svelte — Renders bundled Lucide SVG icons.
+   *
+   * Usage:
+   *   <Icon name="puzzle" size={18} />
+   *   <Icon name="flask" class="my-icon" />
+   *
+   * Rules:
+   *   - NO emoji, NO unicode pictographic symbols
+   *   - NO dependency on system icon fonts
+   *   - If name is not found, renders a default circle icon
+   */
+  import Activity from 'lucide-svelte/icons/activity';
+  import Briefcase from 'lucide-svelte/icons/briefcase';
+  import ChevronDown from 'lucide-svelte/icons/chevron-down';
+  import ChevronLeft from 'lucide-svelte/icons/chevron-left';
+  import ChevronRight from 'lucide-svelte/icons/chevron-right';
+  import Circle from 'lucide-svelte/icons/circle';
+  import FlaskConical from 'lucide-svelte/icons/flask-conical';
+  import Folder from 'lucide-svelte/icons/folder';
+  import Inbox from 'lucide-svelte/icons/inbox';
+  import LayoutGrid from 'lucide-svelte/icons/layout-grid';
+  import ListTodo from 'lucide-svelte/icons/list-todo';
+  import PanelsTopLeft from 'lucide-svelte/icons/panels-top-left';
+  import Pencil from 'lucide-svelte/icons/pencil';
+  import Plug from 'lucide-svelte/icons/plug';
+  import Puzzle from 'lucide-svelte/icons/puzzle';
+  import Settings from 'lucide-svelte/icons/settings';
+  import Shield from 'lucide-svelte/icons/shield';
+  import TriangleAlert from 'lucide-svelte/icons/triangle-alert';
+  import Trash2 from 'lucide-svelte/icons/trash-2';
+  import X from 'lucide-svelte/icons/x';
+
+  export let name = 'dot';
+  export let size = 16;
+  export let className = '';
+
+  const icons = {
+    activity: Activity,
+    case: Briefcase,
+    chevronDown: ChevronDown,
+    chevronLeft: ChevronLeft,
+    chevronRight: ChevronRight,
+    dot: Circle,
+    edit: Pencil,
+    flask: FlaskConical,
+    folder: Folder,
+    gear: Settings,
+    inbox: Inbox,
+    'list-todo': ListTodo,
+    logo: PanelsTopLeft,
+    plugin: Plug,
+    puzzle: Puzzle,
+    space: LayoutGrid,
+    trash: Trash2,
+    vault: Shield,
+    warning: TriangleAlert,
+    x: X,
+  };
+
+  const aliases = {
+    '🧪': 'flask',
+    danger: 'warning',
+    settings: 'gear',
+    todo: 'list-todo',
+  };
+
+  $: iconKey = aliases[name] || name || 'dot';
+  $: IconComponent = icons[iconKey] || icons.dot;
+  $: iconClass = [className, $$restProps.class].filter(Boolean).join(' ');
+</script>
+
+<svelte:component
+  this={IconComponent}
+  size={size}
+  {...$$restProps}
+  class={iconClass}
+  aria-hidden="true"
+/>

frontend/src/main.js

@@ -1,7 +1,33 @@
 import App from './App.svelte';
+import * as Backend from '../wailsjs/go/api/App';
+import { i18n } from './lib/i18n/index.js';
 
-const app = new App({
-  target: document.getElementById('app'),
+function unpack(result) {
+  if (Array.isArray(result) && result.length === 2 && (typeof result[1] === 'string' || result[1] == null)) {
+    if (result[1]) throw new Error(result[1]);
+    return result[0];
+  }
+  return result;
+}
+
+i18n.configure({
+  loadPluginCatalog: async (pluginId, locale) => unpack(await Backend.GetPluginLocalization(pluginId, locale)),
 });
 
+async function start() {
+  try {
+    const settings = await Backend.GetAppSettings();
+    await i18n.initialize(settings?.language || 'system');
+  } catch (error) {
+    console.error('[i18n] initialization failed:', error);
+    await i18n.initialize('system');
+  }
+
+  return new App({
+    target: document.getElementById('app'),
+  });
+}
+
+const app = start();
+
 export default app;

frontend/tests/bundle-host-test.cjs

@@ -0,0 +1,303 @@
+#!/usr/bin/env node
+/**
+ * bundle-host-test.cjs — Headless smoke-test for PluginBundleHost contract.
+ *
+ * Tests:
+ *   1. Error boundary: missing frontend entry (no bundle)
+ *   2. Error boundary: bundle JS throws during execution
+ *   3. Error boundary: component id not found in bundle
+ *   4. Error boundary: component mount throws at runtime
+ *   5. Real mount: bundle executes and registers components
+ *   6. Real mount: DiagnosticsPanel writes expected text to container
+ *   7. Real mount: PlatformTestSettings writes expected text to container
+ *   8. Real mount: cleanup (unmount) empties the container
+ *   9. Real mount: component mount throw is catchable
+ *
+ * Runs the real platform-test frontend/dist/index.js in a vm.Sandbox
+ * with a minimal window/document mock.
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const vm = require('vm');
+
+// ── paths ──────────────────────────────────────────────────────────────
+const BUNDLE_PATH = path.resolve(
+  __dirname, '..', '..', 'plugins', 'platform-test', 'frontend', 'dist', 'index.js'
+);
+
+// ── helpers ────────────────────────────────────────────────────────────
+
+function makeMockDocument() {
+  let elCounter = 0;
+
+  function createElement(tag) {
+    elCounter++;
+    const el = {
+      tagName: tag.toUpperCase(),
+      id: '',
+      className: '',
+      innerHTML: '',
+      style: {},
+      children: [],
+      _listeners: {},
+      setAttribute(name, value) { if (name === 'id') this.id = value; },
+      getAttribute(name) { if (name === 'id') return this.id; return null; },
+      addEventListener(type, handler) { this._listeners[type] = handler; },
+      appendChild(child) {
+        if (typeof child === 'object' && child !== null) {
+          this.children.push(child);
+        }
+      },
+      removeChild(child) {
+        const idx = this.children.indexOf(child);
+        if (idx >= 0) this.children.splice(idx, 1);
+      },
+    };
+    return el;
+  }
+
+  function createTextNode(text) {
+    return { nodeType: 3, textContent: String(text), _text: String(text) };
+  }
+
+  const headChildren = [];
+  const bodyChildren = [];
+
+  return {
+    head: { appendChild: (el) => { headChildren.push(el); }, children: headChildren },
+    body: { appendChild: (el) => { bodyChildren.push(el); }, children: bodyChildren },
+    createElement,
+    createTextNode,
+    querySelector: () => null,
+    getElementById: () => null,
+  };
+}
+
+function makeMockWindow() {
+  const doc = makeMockDocument();
+  const registry = {};
+
+  const w = {
+    VerstakPluginRegister(pluginId, bundle) {
+      if (!pluginId || !bundle || !bundle.components) return;
+      registry[pluginId] = bundle.components;
+    },
+    VerstakPluginAPI(pluginId) {
+      return {
+        pluginId,
+        capabilities: { has: () => false },
+        events: { publish: () => {}, subscribe: () => {} },
+        settings: { read: () => null, write: () => {} },
+        commands: { execute: () => {} },
+      };
+    },
+    document: doc,
+    console,
+    __VERSTAK_PLUGIN_REGISTRY__: registry,
+  };
+
+  // window === globalThis in browser — make it self-referential
+  w.window = w;
+  w.globalThis = w;
+
+  return w;
+}
+
+// Recursively extract text from mock element tree
+function findTextContent(el) {
+  if (typeof el === 'string') return el;
+  if (el == null) return '';
+  if (el._text) return el._text;
+  if (el.textContent) return el.textContent;
+  if (Array.isArray(el.children)) {
+    return el.children.map(c => findTextContent(c)).join(' ');
+  }
+  return '';
+}
+
+// ── Runner ─────────────────────────────────────────────────────────────
+
+let passed = 0;
+let failed = 0;
+const errors = [];
+
+function test(name, fn) {
+  try {
+    fn();
+    passed++;
+    console.log(`  ✅ ${name}`);
+  } catch (e) {
+    failed++;
+    const msg = e.message || String(e);
+    errors.push(`${name}: ${msg}`);
+    console.log(`  ❌ ${name} — ${msg}`);
+  }
+}
+
+// ── Tests ──────────────────────────────────────────────────────────────
+
+console.log('=== bundle-host-test: PluginBundleHost contract smoke ===');
+console.log(`  bundle path: ${BUNDLE_PATH}`);
+console.log(`  bundle exists: ${fs.existsSync(BUNDLE_PATH)}`);
+console.log('');
+
+// ── Error Boundary Tests ──
+
+test('E1. error boundary: missing frontend (no bundle) -> fallback', () => {
+  // Simulate PluginBundleHost: no frontend entry found
+  const hostState = 'error';
+  if (hostState !== 'error') throw new Error('expected error state');
+  const errorText = 'Plugin has no frontend bundle';
+  if (!errorText.includes('no frontend')) throw new Error('error text mismatch');
+});
+
+test('E2. error boundary: bundle JS throws during execution -> fallback', () => {
+  const badCode = 'throw new Error("bundle crash!");';
+  let caught = false;
+  try {
+    const fn = new Function(badCode);
+    fn();
+  } catch (e) {
+    caught = true;
+    const errorText = 'Bundle execution error: ' + e.message;
+    if (!errorText.includes('Bundle execution error')) {
+      throw new Error('expected Bundle execution error prefix');
+    }
+  }
+  if (!caught) throw new Error('bundle throw was not caught');
+});
+
+test('E3. error boundary: component id not found -> fallback', () => {
+  const registry = { 'test.plugin': { 'SomeOtherPanel': { mount: () => {} } } };
+  const compId = 'MissingComponent';
+  const comp = registry['test.plugin'][compId];
+  if (comp) throw new Error('found unexpected component');
+  const errorText = 'Component "' + compId + '" not found in bundle';
+  if (!errorText.includes('not found')) throw new Error('error text mismatch');
+});
+
+test('E4. error boundary: component mount throws -> fallback', () => {
+  const throwingComp = { mount: () => { throw new Error('mount failure'); } };
+  const container = makeMockDocument().createElement('div');
+  let caught = false;
+  try {
+    throwingComp.mount(container, {}, {});
+  } catch (e) {
+    caught = true;
+  }
+  if (!caught) throw new Error('mount throw was not caught');
+});
+
+// ── Real Mount Tests (run the actual platform-test bundle) ──
+
+if (!fs.existsSync(BUNDLE_PATH)) {
+  console.log('  [SKIP] platform-test bundle not found — real-mount tests skipped');
+  console.log('  [SKIP] run install-dev-plugins.sh first');
+  process.exit(0);
+}
+
+const bundleSource = fs.readFileSync(BUNDLE_PATH, 'utf-8');
+
+test('R1. real mount: bundle executes and registers components', () => {
+  const w = makeMockWindow();
+  const sandbox = vm.createContext(w);
+  vm.runInContext(bundleSource, sandbox);
+
+  const reg = sandbox.__VERSTAK_PLUGIN_REGISTRY__;
+  if (!reg) throw new Error('registry not created');
+  if (!reg['verstak.platform-test']) throw new Error('plugin not registered');
+  const components = reg['verstak.platform-test'];
+  if (!components.DiagnosticsPanel) throw new Error('DiagnosticsPanel missing');
+  if (!components.PlatformTestSettings) throw new Error('PlatformTestSettings missing');
+});
+
+test('R2. real mount: DiagnosticsPanel.mount() writes expected text to container', () => {
+  const w = makeMockWindow();
+  const sandbox = vm.createContext(w);
+  vm.runInContext(bundleSource, sandbox);
+
+  const components = sandbox.__VERSTAK_PLUGIN_REGISTRY__['verstak.platform-test'];
+  const api = w.VerstakPluginAPI('verstak.platform-test');
+  const container = w.document.createElement('div');
+  container.id = 'test-diagnostics';
+
+  components.DiagnosticsPanel.mount(container, { componentId: 'verstak.platform-test.diagnostics' }, api);
+
+  const text = findTextContent(container);
+  const required = ['Platform Diagnostics', 'verstak.platform-test', 'Test Results', 'Plugin Registration'];
+  const missing = required.filter(chunk => !text.includes(chunk));
+  if (missing.length > 0) throw new Error('missing: ' + missing.join(', '));
+
+  // Verify bundle source contains Frontend Bundle Loaded (badge fix)
+  if (!bundleSource.includes('Frontend Bundle Loaded')) throw new Error('bundle missing badge text');
+  // Verify mount populated children
+  if (container.children.length < 4) throw new Error('mount did not populate container children');
+});
+
+test('R3. real mount: PlatformTestSettings.mount() writes expected text to container', () => {
+  const w = makeMockWindow();
+  const sandbox = vm.createContext(w);
+  vm.runInContext(bundleSource, sandbox);
+
+  const components = sandbox.__VERSTAK_PLUGIN_REGISTRY__['verstak.platform-test'];
+  const api = w.VerstakPluginAPI('verstak.platform-test');
+  const container = w.document.createElement('div');
+  container.id = 'test-settings';
+
+  components.PlatformTestSettings.mount(container, { componentId: 'verstak.platform-test.settings' }, api);
+
+  const text = findTextContent(container);
+  const required = ['Platform Test Settings', 'verstak.platform-test', 'Settings panel loaded from plugin frontend bundle', 'Interactive Counter'];
+  const missing = required.filter(chunk => !text.includes(chunk));
+  if (missing.length > 0) throw new Error('missing: ' + missing.join(', '));
+});
+
+test('R4. real mount: unmount() clears container', () => {
+  const w = makeMockWindow();
+  const sandbox = vm.createContext(w);
+  vm.runInContext(bundleSource, sandbox);
+
+  const components = sandbox.__VERSTAK_PLUGIN_REGISTRY__['verstak.platform-test'];
+  const api = w.VerstakPluginAPI('verstak.platform-test');
+  const container = w.document.createElement('div');
+
+  // Mount — verify container was modified
+  components.PlatformTestSettings.mount(container, {}, api);
+  if (container.innerHTML === '' && container.className === '') {
+    // mount should have set something
+    if (container.children.length === 0) {
+      throw new Error('mount should have populated container');
+    }
+  }
+
+  // Unmount — verify cleanup
+  components.PlatformTestSettings.unmount(container);
+  if (container.innerHTML !== '') throw new Error('unmount did not clear innerHTML');
+  if (container.className !== '') throw new Error('unmount did not clear className');
+});
+
+test('R5. error scenario: component mount throw is catchable', () => {
+  const failingStates = [{ mount: () => { throw new Error('render error'); }, unmount: () => {} }];
+  const container = makeMockDocument().createElement('div');
+  let caught = false;
+  try {
+    failingStates[0].mount(container, {}, {});
+  } catch (e) {
+    caught = true;
+    if (!e.message.includes('render error')) throw new Error('wrong error message');
+  }
+  if (!caught) throw new Error('mount throw was not caught');
+});
+
+// ── Summary ──
+
+console.log('');
+console.log(`=== results: ${passed} passed, ${failed} failed ===`);
+if (failed > 0) {
+  console.log('Errors:');
+  errors.forEach(e => console.log(`  - ${e}`));
+  process.exit(1);
+}

frontend/tests/i18n-test.mjs

@@ -0,0 +1,112 @@
+import assert from 'node:assert/strict';
+import {
+  createI18n,
+  resolveLocale,
+} from '../src/lib/i18n/index.js';
+import englishShellCatalog from '../src/lib/i18n/catalogs/en.js';
+import russianShellCatalog from '../src/lib/i18n/catalogs/ru.js';
+
+assert.deepEqual(
+  Object.keys(russianShellCatalog).sort(),
+  Object.keys(englishShellCatalog).sort(),
+  'English and Russian shell catalogs must have identical keys',
+);
+
+assert.equal(resolveLocale('system', ['ru-RU']), 'ru');
+assert.equal(resolveLocale('system', ['uk-UA', 'en-US']), 'en');
+assert.equal(resolveLocale('ru', ['en-US']), 'ru');
+assert.equal(resolveLocale('en', ['ru-RU']), 'en');
+assert.throws(() => resolveLocale('de', ['de-DE']), /unsupported language/);
+
+const catalogs = {
+  'localized.plugin': {
+    en: { 'manifest.name': 'Localized Plugin', greeting: 'Hello, {name}!' },
+    ru: {
+      'manifest.name': 'Локализованный плагин',
+      'contributions.views.localized.view.title': 'Локализованный экран',
+      greeting: 'Привет, {name}!',
+    },
+  },
+};
+const loads = [];
+const service = createI18n({
+  shellCatalogs: {
+    en: { loading: 'Loading {name}...', fallbackOnly: 'English fallback' },
+    ru: { loading: 'Загрузка {name}...' },
+  },
+  systemLanguages: () => ['ru-RU'],
+  loadPluginCatalog: async (pluginId, locale) => {
+    loads.push(`${pluginId}:${locale}`);
+    return catalogs[pluginId]?.[locale] || {};
+  },
+});
+
+await service.initialize('system');
+assert.equal(service.getLanguagePreference(), 'system');
+assert.equal(service.getLocale(), 'ru');
+assert.equal(service.t('loading', { name: 'Верстак' }), 'Загрузка Верстак...');
+assert.equal(service.t('fallbackOnly'), 'English fallback');
+assert.equal(service.t('missing', undefined, 'Explicit fallback'), 'Explicit fallback');
+assert.equal(service.t('unknown'), 'unknown');
+
+await service.loadPlugin('localized.plugin', {
+  defaultLocale: 'en',
+  locales: { en: 'locales/en.json', ru: 'locales/ru.json' },
+});
+assert.deepEqual(loads.sort(), ['localized.plugin:en', 'localized.plugin:ru']);
+assert.equal(service.translatePlugin('localized.plugin', 'greeting', { name: 'Мир' }), 'Привет, Мир!');
+
+const plugin = {
+  manifest: {
+    id: 'localized.plugin',
+    name: 'Localized Plugin',
+    description: 'Literal description',
+    contributes: {
+      views: [{ id: 'localized.view', title: 'Literal View', component: 'View' }],
+    },
+  },
+};
+const localized = service.localizePlugin(plugin);
+assert.notEqual(localized, plugin);
+assert.equal(localized.manifest.name, 'Локализованный плагин');
+assert.equal(localized.manifest.description, 'Literal description');
+assert.equal(localized.manifest.contributes.views[0].title, 'Локализованный экран');
+assert.equal(plugin.manifest.name, 'Localized Plugin');
+const summary = service.localizeContributionSummary({
+  views: [{ pluginId: 'localized.plugin', id: 'localized.view', title: 'Literal View', component: 'View' }],
+});
+assert.equal(summary.views[0].title, 'Локализованный экран');
+
+let notifications = 0;
+const unsubscribe = service.subscribe(() => { notifications += 1; });
+assert.equal(notifications, 1);
+await service.setLanguagePreference('en');
+assert.equal(service.getLocale(), 'en');
+assert.equal(service.translatePlugin('localized.plugin', 'greeting', { name: 'World' }), 'Hello, World!');
+assert.equal(notifications, 2);
+unsubscribe();
+await service.setLanguagePreference('ru');
+assert.equal(notifications, 2);
+
+const resilientService = createI18n({
+  shellCatalogs: { en: { title: 'Title' }, ru: { title: 'Заголовок' } },
+  systemLanguages: () => ['en-US'],
+  loadPluginCatalog: async () => { throw new Error('broken catalog'); },
+});
+await resilientService.initialize('en');
+await assert.rejects(
+  resilientService.loadPlugin('broken.plugin', {
+    defaultLocale: 'en',
+    locales: { en: 'locales/en.json', ru: 'locales/ru.json' },
+  }),
+  /broken catalog/,
+);
+let resilientNotification = '';
+resilientService.subscribe((nextLocale) => { resilientNotification = nextLocale; });
+await resilientService.setLanguagePreference('ru');
+assert.equal(resilientService.getLanguagePreference(), 'ru');
+assert.equal(resilientService.getLocale(), 'ru');
+assert.equal(resilientNotification, 'ru');
+assert.equal(resilientService.t('title'), 'Заголовок');
+
+console.log('i18n service tests passed');

frontend/tests/plugin-api-contributions-test.mjs

@@ -0,0 +1,124 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const pluginData = {};
+
+globalThis.window = {
+  __VERSTAK_PLUGIN_REGISTRY__: {},
+  __VERSTAK_EVENT_HANDLERS__: {},
+  __VERSTAK_COMMAND_HANDLERS__: {},
+  go: {
+    api: {
+      App: {
+        GetContributions: () => Promise.resolve({
+          fileActions: [
+            {
+              pluginId: 'provider.plugin',
+              id: 'provider.file.action',
+              label: 'Provider File Action',
+              handler: 'provider.command',
+            },
+          ],
+          noteActions: [],
+          contextMenuEntries: [],
+        }),
+        ExecutePluginCommand: (pluginId, commandId, args) => Promise.resolve([{
+          status: 'declared',
+          pluginId,
+          commandId,
+          args,
+        }, '']),
+        ReadPluginDataJSON: (pluginId, name) => Promise.resolve([
+          Object.assign({}, (pluginData[pluginId] && pluginData[pluginId][name]) || {}),
+          '',
+        ]),
+        WritePluginDataJSON: (pluginId, name, data) => {
+          pluginData[pluginId] = pluginData[pluginId] || {};
+          pluginData[pluginId][name] = Object.assign({}, data || {});
+          return Promise.resolve('');
+        },
+      },
+    },
+  },
+};
+globalThis.__mockApp = window.go.api.App;
+const localeListeners = new Set();
+globalThis.__mockI18n = {
+  getLocale: () => 'ru',
+  translatePlugin: (_pluginId, key, params, fallback) => {
+    const messages = { greeting: 'Привет, {name}!' };
+    const message = messages[key] || fallback || key;
+    return message.replace(/\{([^}]+)\}/g, (placeholder, name) => (
+      Object.prototype.hasOwnProperty.call(params || {}, name) ? String(params[name]) : placeholder
+    ));
+  },
+  subscribe: (listener) => {
+    localeListeners.add(listener);
+    listener('ru');
+    return () => localeListeners.delete(listener);
+  },
+};
+
+const sourcePath = path.resolve('frontend/src/lib/plugin-host/VerstakPluginAPI.js');
+const source = fs.readFileSync(sourcePath, 'utf8')
+  .replace("import * as App from '../../../wailsjs/go/api/App';", 'const App = globalThis.__mockApp;')
+  .replace("import { i18n } from '../i18n/index.js';", 'const i18n = globalThis.__mockI18n;');
+const tempPath = path.resolve('/tmp/verstak-plugin-api-contributions-test.mjs');
+fs.writeFileSync(tempPath, source);
+
+const apiModule = await import(pathToFileURL(tempPath).href + '?t=' + Date.now());
+const api = apiModule.createPluginAPI('verstak.files');
+
+if (!api.contributions || typeof api.contributions.list !== 'function') {
+  throw new Error('api.contributions.list is missing');
+}
+if (!api.commands || typeof api.commands.executeFor !== 'function') {
+  throw new Error('api.commands.executeFor is missing');
+}
+if (!api.i18n || typeof api.i18n.getLocale !== 'function' || typeof api.i18n.t !== 'function' || typeof api.i18n.onDidChangeLocale !== 'function') {
+  throw new Error('api.i18n contract is missing');
+}
+if (api.i18n.getLocale() !== 'ru' || api.i18n.t('greeting', { name: 'Мир' }) !== 'Привет, Мир!') {
+  throw new Error('api.i18n locale or translation is incorrect');
+}
+let localeNotifications = 0;
+api.i18n.onDidChangeLocale(() => { localeNotifications += 1; });
+if (localeNotifications !== 1 || localeListeners.size !== 1) {
+  throw new Error('api.i18n locale subscription was not registered');
+}
+
+const fileActions = await api.contributions.list('fileActions');
+if (fileActions.length !== 1 || fileActions[0].id !== 'provider.file.action') {
+  throw new Error(`unexpected file actions: ${JSON.stringify(fileActions)}`);
+}
+
+window.__VERSTAK_COMMAND_HANDLERS__['provider.plugin:provider.command'] = (args, declared) => ({
+  handledPath: args.path,
+  declaredPlugin: declared.pluginId,
+});
+
+const result = await api.commands.executeFor('provider.plugin', 'provider.command', {
+  source: 'files',
+  path: 'Project/Docs/readme.md',
+});
+if (result.status !== 'handled' || result.result.handledPath !== 'Project/Docs/readme.md') {
+  throw new Error(`unexpected executeFor result: ${JSON.stringify(result)}`);
+}
+
+if (!api.storage || !api.storage.data || typeof api.storage.data.read !== 'function' || typeof api.storage.data.write !== 'function') {
+  throw new Error('api.storage.data read/write is missing');
+}
+
+await api.storage.data.write('search-index', { version: 1, workspaceRootPath: 'Project' });
+const stored = await api.storage.data.read('search-index');
+if (stored.version !== 1 || stored.workspaceRootPath !== 'Project') {
+  throw new Error(`unexpected storage data: ${JSON.stringify(stored)}`);
+}
+
+api.dispose();
+if (localeListeners.size !== 0) {
+  throw new Error('api.i18n locale subscription was not disposed');
+}
+
+console.log('plugin api contributions smoke passed');

frontend/tests/plugin-api-files-test.mjs

@@ -0,0 +1,72 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const calls = [];
+
+globalThis.window = {
+  __VERSTAK_PLUGIN_REGISTRY__: {},
+  __VERSTAK_EVENT_HANDLERS__: {},
+  __VERSTAK_COMMAND_HANDLERS__: {},
+  go: {
+    api: {
+      App: {
+        ReadVaultFileBytes: (pluginId, relativePath) => {
+          calls.push({ method: 'ReadVaultFileBytes', pluginId, relativePath });
+          return Promise.resolve([{ relativePath, size: 4, mimeHint: 'image/png', dataBase64: 'iVBORw==' }, '']);
+        },
+        RestoreVaultTrash: (pluginId, trashId, options) => {
+          calls.push({ method: 'RestoreVaultTrash', pluginId, trashId, options });
+          return Promise.resolve(['Docs/restored.txt', '']);
+        },
+        WriteVaultFileBytes: (pluginId, relativePath, dataBase64, options) => {
+          calls.push({ method: 'WriteVaultFileBytes', pluginId, relativePath, dataBase64, options });
+          return Promise.resolve('');
+        },
+      },
+    },
+  },
+};
+globalThis.__mockApp = window.go.api.App;
+
+const sourcePath = path.resolve('frontend/src/lib/plugin-host/VerstakPluginAPI.js');
+const source = fs.readFileSync(sourcePath, 'utf8')
+  .replace("import * as App from '../../../wailsjs/go/api/App';", 'const App = globalThis.__mockApp;');
+const tempPath = path.resolve('/tmp/verstak-plugin-api-files-test.mjs');
+fs.writeFileSync(tempPath, source);
+
+const apiModule = await import(pathToFileURL(tempPath).href + '?t=' + Date.now());
+const api = apiModule.createPluginAPI('verstak.files');
+
+if (!api.files || typeof api.files.restoreTrash !== 'function') {
+  throw new Error('api.files.restoreTrash is missing');
+}
+if (typeof api.files.readBytes !== 'function') {
+  throw new Error('api.files.readBytes is missing');
+}
+if (typeof api.files.writeBytes !== 'function') {
+  throw new Error('api.files.writeBytes is missing');
+}
+
+const bytes = await api.files.readBytes('Docs/image.png');
+if (bytes.dataBase64 !== 'iVBORw==' || bytes.mimeHint !== 'image/png') {
+  throw new Error(`unexpected readBytes result: ${JSON.stringify(bytes)}`);
+}
+
+await api.files.writeBytes('Docs/copy.png', 'iVBORw==', { createIfMissing: true });
+
+const restored = await api.files.restoreTrash('trash-1', { overwrite: true });
+if (restored !== 'Docs/restored.txt') {
+  throw new Error(`unexpected restore result: ${JSON.stringify(restored)}`);
+}
+if (calls.length !== 3 || calls[0].method !== 'ReadVaultFileBytes' || calls[0].pluginId !== 'verstak.files' || calls[0].relativePath !== 'Docs/image.png') {
+  throw new Error(`unexpected ReadVaultFileBytes call: ${JSON.stringify(calls)}`);
+}
+if (calls[1].method !== 'WriteVaultFileBytes' || calls[1].pluginId !== 'verstak.files' || calls[1].relativePath !== 'Docs/copy.png' || calls[1].dataBase64 !== 'iVBORw==' || calls[1].options.createIfMissing !== true) {
+  throw new Error(`unexpected WriteVaultFileBytes call: ${JSON.stringify(calls)}`);
+}
+if (calls[2].method !== 'RestoreVaultTrash' || calls[2].pluginId !== 'verstak.files' || calls[2].trashId !== 'trash-1' || calls[2].options.overwrite !== true) {
+  throw new Error(`unexpected RestoreVaultTrash call: ${JSON.stringify(calls)}`);
+}
+
+console.log('plugin api files smoke passed');

frontend/tests/shell-source-contract-test.mjs

@@ -0,0 +1,57 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+const root = path.resolve('.');
+
+function read(relativePath) {
+  return fs.readFileSync(path.join(root, relativePath), 'utf8');
+}
+
+function assertIncludes(source, needle, message) {
+  if (!source.includes(needle)) {
+    throw new Error(message);
+  }
+}
+
+const workspaceHost = read('frontend/src/lib/shell/WorkspaceHost.svelte');
+const statusBar = read('frontend/src/lib/shell/StatusBar.svelte');
+const pluginManager = read('frontend/src/lib/plugin-manager/PluginManager.svelte');
+const syncManifest = JSON.parse(read('../verstak-official-plugins/plugins/sync/plugin.json'));
+
+assertIncludes(
+  workspaceHost,
+  'data-workspace-search',
+  'WorkspaceHost should expose a stable workspace header search slot'
+);
+assertIncludes(
+  workspaceHost,
+  'toolOrder',
+  'WorkspaceHost should define usage-based workspace tool ordering'
+);
+assertIncludes(
+  workspaceHost,
+  'sortWorkspaceTools',
+  'WorkspaceHost should sort workspace tools by expected usage'
+);
+
+assertIncludes(
+  statusBar,
+  "import PluginBundleHost from '../plugin-host/PluginBundleHost.svelte';",
+  'StatusBar should mount plugin-provided status bar components'
+);
+assertIncludes(
+  statusBar,
+  'componentId={item.handler}',
+  'StatusBar should use statusBarItems.handler as the component id'
+);
+
+const syncStatus = syncManifest.contributes.statusBarItems.find((item) => item.id === 'verstak.sync.status');
+if (!syncStatus || syncStatus.handler !== 'SyncStatusBar') {
+  throw new Error('Sync statusBarItem should declare handler "SyncStatusBar"');
+}
+
+if (/lastOpenedKey\s*=\s*key;\s*openSettingsFromProps\(activeSettingsPluginId,\s*activeSettingsPanelId\)/s.test(pluginManager)) {
+  throw new Error('PluginManager should not mark settings panel as opened before resolving contributions');
+}
+
+console.log('shell source contract smoke passed');

frontend/vite.config.js

@@ -1,14 +1,37 @@
 import { defineConfig } from 'vite';
 import { svelte } from '@sveltejs/vite-plugin-svelte';
 
-export default defineConfig({
-  plugins: [svelte()],
-  build: {
-    outDir: 'dist',
-    emptyOutDir: true,
-  },
-  server: {
-    port: 5173,
-    strictPort: true,
-  },
+export default defineConfig(({ mode }) => {
+  const isTest = mode === 'test';
+
+  return {
+    plugins: [svelte()],
+    build: {
+      outDir: 'dist',
+      emptyOutDir: true,
+    },
+    server: {
+      port: isTest ? 5174 : 5173,
+      strictPort: true,
+    },
+    optimizeDeps: {
+      include: [
+        'lucide-svelte/icons/briefcase',
+        'lucide-svelte/icons/chevron-down',
+        'lucide-svelte/icons/chevron-right',
+        'lucide-svelte/icons/circle',
+        'lucide-svelte/icons/flask-conical',
+        'lucide-svelte/icons/folder',
+        'lucide-svelte/icons/layout-grid',
+        'lucide-svelte/icons/panels-top-left',
+        'lucide-svelte/icons/pencil',
+        'lucide-svelte/icons/plug',
+        'lucide-svelte/icons/puzzle',
+        'lucide-svelte/icons/settings',
+        'lucide-svelte/icons/shield',
+        'lucide-svelte/icons/trash-2',
+        'lucide-svelte/icons/triangle-alert',
+      ],
+    },
+  };
 });

frontend/wailsjs/go/api/App.d.ts

@@ -1,26 +1,191 @@
 // Cynhyrchwyd y ffeil hon yn awtomatig. PEIDIWCH Â MODIWL
 // This file is automatically generated. DO NOT EDIT
+import {workspace} from '../models';
+import {workbench} from '../models';
 import {capability} from '../models';
 import {api} from '../models';
 import {permissions} from '../models';
 import {plugin} from '../models';
+import {files} from '../models';
+
+export function ArchiveWorkspaceNode(arg1:string):Promise<string>;
 
 export function CloseVault():Promise<void>;
 
 export function CreateVault(arg1:string):Promise<void>;
 
+export function CreateVaultFolder(arg1:string,arg2:string):Promise<string>;
+
+export function CreateWorkspace(arg1:string,arg2:string):Promise<workspace.Workspace|string>;
+
+export function CreateWorkspaceNode(arg1:string,arg2:string,arg3:string):Promise<Record<string, any>>;
+
+export function DeleteVaultTrash(arg1:string,arg2:string):Promise<string>;
+
+export function DisablePlugin(arg1:string):Promise<string>;
+
+export function EditWorkbenchResource(arg1:string,arg2:Record<string, any>):Promise<workbench.OpenResourceResult|string>;
+
+export function EnablePlugin(arg1:string):Promise<string>;
+
+export function ExecutePluginCommand(arg1:string,arg2:string,arg3:Record<string, any>):Promise<Record<string, any>|string>;
+
+export function GetAppSettings():Promise<Record<string, any>>;
+
 export function GetCapabilities():Promise<Array<capability.Entry>>;
 
 export function GetContributions():Promise<api.ContributionSummary>;
 
+export function GetCurrentWorkspace():Promise<Record<string, any>>;
+
+export function GetCurrentWorkspaceNode():Promise<Record<string, any>>;
+
 export function GetPermissions():Promise<Array<permissions.Entry>>;
 
+export function GetPluginAssetContent(arg1:string,arg2:string):Promise<string|string>;
+
+export function GetPluginCapability(arg1:string,arg2:string):Promise<Record<string, any>|string>;
+
+export function GetPluginFrontendInfo(arg1:string):Promise<Record<string, any>>;
+
+export function GetPluginLocalization(arg1:string,arg2:string):Promise<Record<string, string>|string>;
+
 export function GetPlugins():Promise<Array<plugin.Plugin>>;
 
+export function GetVaultFileMetadata(arg1:string,arg2:string):Promise<files.FileMetadata|string>;
+
+export function GetVaultPluginState():Promise<Record<string, any>>;
+
 export function GetVaultStatus():Promise<Record<string, string>>;
 
+export function GetWorkbenchOpenedResources():Promise<Array<workbench.OpenedResource>>;
+
+export function GetWorkbenchPreferences():Promise<workbench.Preferences>;
+
+export function GetWorkspaceMetadata(arg1:string):Promise<workspace.Metadata|string>;
+
+export function GetWorkspaceTree():Promise<Record<string, any>>;
+
+export function ListPluginCapabilities(arg1:string):Promise<Array<capability.Entry>|string>;
+
+export function ListVaultFiles(arg1:string,arg2:string):Promise<Array<files.FileEntry>|string>;
+
+export function ListVaultTrash(arg1:string):Promise<Array<files.TrashEntry>|string>;
+
+export function ListWorkspaces():Promise<Array<workspace.Workspace>|string>;
+
+export function ListWorkspaceIdentities():Promise<Array<workspace.WorkspaceIdentity>|string>;
+
+export function ListWorkspaceTemplates():Promise<Array<workspace.WorkspaceTemplate>|string>;
+
+export function MoveVaultPath(arg1:string,arg2:string,arg3:string,arg4:files.MoveOptions):Promise<string>;
+
+export function MoveWorkspaceNode(arg1:string,arg2:string):Promise<string>;
+
 export function OpenVault(arg1:string):Promise<void>;
 
+export function OpenVaultPathExternal(arg1:string,arg2:string):Promise<string>;
+
+export function OpenExternalURL(arg1:string,arg2:string):Promise<string>;
+
+export function OpenWorkbenchResource(arg1:string,arg2:Record<string, any>):Promise<workbench.OpenResourceResult|string>;
+
+export function PluginBrowserReceiverPairing(arg1:string):Promise<Record<string, string>|string>;
+
+export function PluginRotateBrowserReceiverToken(arg1:string):Promise<Record<string, string>|string>;
+
+export function PluginSecretsCopyLink(arg1:string,arg2:string):Promise<string|string>;
+
+export function PluginSecretsDelete(arg1:string,arg2:string):Promise<string>;
+
+export function PluginSecretsList(arg1:string):Promise<Array<Record<string, any>>|string>;
+
+export function PluginSecretsRead(arg1:string,arg2:string):Promise<Record<string, any>|string>;
+
+export function PluginSecretsStatus(arg1:string):Promise<Record<string, any>|string>;
+
+export function PluginSecretsUnlock(arg1:string,arg2:string):Promise<string>;
+
+export function PluginSecretsWrite(arg1:string,arg2:Record<string, any>):Promise<Record<string, any>|string>;
+
+export function PluginSyncConfigure(arg1:string,arg2:string,arg3:string,arg4:string):Promise<string>;
+
+export function PluginSyncDisconnect(arg1:string):Promise<string>;
+
+export function PluginSyncNow(arg1:string):Promise<Record<string, any>|string>;
+
+export function PluginSyncResetKey(arg1:string):Promise<string>;
+
+export function PluginSyncSetInterval(arg1:string,arg2:number):Promise<string>;
+
+export function PluginSyncStatus(arg1:string):Promise<api.SyncStatusDTO|string>;
+
+export function PluginSyncTestConnection(arg1:string,arg2:string,arg3:string,arg4:string):Promise<string>;
+
+export function PublishPluginEvent(arg1:string,arg2:string,arg3:Record<string, any>):Promise<string>;
+
+export function ReadPluginDataJSON(arg1:string,arg2:string):Promise<Record<string, any>>;
+
+export function ReadPluginDataNDJSON(arg1:string,arg2:string):Promise<Array<Record<string, any>>>;
+
+export function ReadPluginSetting(arg1:string,arg2:string):Promise<any>;
+
+export function ReadPluginSettings(arg1:string):Promise<Record<string, any>|string>;
+
+export function ReadVaultFileBytes(arg1:string,arg2:string):Promise<files.FileBytes|string>;
+
+export function ReadVaultTextFile(arg1:string,arg2:string):Promise<string|string>;
+
+export function RecordDesiredPlugin(arg1:string,arg2:string,arg3:string):Promise<string>;
+
 export function ReloadPlugins():Promise<number|string>;
 
-export function Startup():Promise<void>;
+export function RenameWorkspace(arg1:string,arg2:string):Promise<string>;
+
+export function RepairWorkspaceIdentity(arg1:string,arg2:string):Promise<string>;
+
+export function RenameWorkspaceNode(arg1:string,arg2:string):Promise<string>;
+
+export function RestoreVaultTrash(arg1:string,arg2:string,arg3:files.RestoreOptions):Promise<string|string>;
+
+export function RestoreWorkspaceTrash(arg1:string,arg2:string):Promise<workspace.Workspace|string>;
+
+export function SelectDirectory():Promise<string>;
+
+export function PurgeWorkspaceTrash(arg1:string):Promise<string>;
+
+export function SelectVaultForOpen():Promise<string>;
+
+export function SetCurrentVault(arg1:string):Promise<string>;
+
+export function SetCurrentWorkspace(arg1:string):Promise<string>;
+
+export function SetCurrentWorkspaceNode(arg1:string):Promise<string>;
+
+export function ShowVaultPathInFolder(arg1:string,arg2:string):Promise<string>;
+
+export function SubscribePluginEvent(arg1:string,arg2:string):Promise<string>;
+
+export function TrashVaultPath(arg1:string,arg2:string):Promise<files.TrashResult|string>;
+
+export function TrashWorkspace(arg1:string):Promise<workspace.TrashResult|string>;
+
+export function UpdateAppSettings(arg1:Record<string, any>):Promise<string>;
+
+export function UpdateWorkbenchPreferences(arg1:workbench.Preferences):Promise<string>;
+
+export function UpdateWorkspaceMetadata(arg1:string,arg2:workspace.MetadataPatch):Promise<workspace.Metadata|string>;
+
+export function WriteFrontendLog(arg1:string,arg2:string):Promise<void>;
+
+export function WritePluginDataJSON(arg1:string,arg2:string,arg3:Record<string, any>):Promise<string>;
+
+export function WritePluginDataNDJSON(arg1:string,arg2:string,arg3:Array<Record<string, any>>):Promise<string>;
+
+export function WritePluginSetting(arg1:string,arg2:string,arg3:any):Promise<string>;
+
+export function WritePluginSettings(arg1:string,arg2:Record<string, any>):Promise<string>;
+
+export function WriteVaultFileBytes(arg1:string,arg2:string,arg3:string,arg4:files.WriteOptions):Promise<string>;
+
+export function WriteVaultTextFile(arg1:string,arg2:string,arg3:string,arg4:files.WriteOptions):Promise<string>;

frontend/wailsjs/go/api/App.js

@@ -2,6 +2,10 @@
 // Cynhyrchwyd y ffeil hon yn awtomatig. PEIDIWCH Â MODIWL
 // This file is automatically generated. DO NOT EDIT
 
+export function ArchiveWorkspaceNode(arg1) {
+  return window['go']['api']['App']['ArchiveWorkspaceNode'](arg1);
+}
+
 export function CloseVault() {
   return window['go']['api']['App']['CloseVault']();
 }
@@ -10,6 +14,42 @@ export function CreateVault(arg1) {
   return window['go']['api']['App']['CreateVault'](arg1);
 }
 
+export function CreateVaultFolder(arg1, arg2) {
+  return window['go']['api']['App']['CreateVaultFolder'](arg1, arg2);
+}
+
+export function CreateWorkspace(arg1, arg2) {
+  return window['go']['api']['App']['CreateWorkspace'](arg1, arg2);
+}
+
+export function CreateWorkspaceNode(arg1, arg2, arg3) {
+  return window['go']['api']['App']['CreateWorkspaceNode'](arg1, arg2, arg3);
+}
+
+export function DeleteVaultTrash(arg1, arg2) {
+  return window['go']['api']['App']['DeleteVaultTrash'](arg1, arg2);
+}
+
+export function DisablePlugin(arg1) {
+  return window['go']['api']['App']['DisablePlugin'](arg1);
+}
+
+export function EditWorkbenchResource(arg1, arg2) {
+  return window['go']['api']['App']['EditWorkbenchResource'](arg1, arg2);
+}
+
+export function EnablePlugin(arg1) {
+  return window['go']['api']['App']['EnablePlugin'](arg1);
+}
+
+export function ExecutePluginCommand(arg1, arg2, arg3) {
+  return window['go']['api']['App']['ExecutePluginCommand'](arg1, arg2, arg3);
+}
+
+export function GetAppSettings() {
+  return window['go']['api']['App']['GetAppSettings']();
+}
+
 export function GetCapabilities() {
   return window['go']['api']['App']['GetCapabilities']();
 }
@@ -18,26 +58,310 @@ export function GetContributions() {
   return window['go']['api']['App']['GetContributions']();
 }
 
+export function GetCurrentWorkspace() {
+  return window['go']['api']['App']['GetCurrentWorkspace']();
+}
+
+export function GetCurrentWorkspaceNode() {
+  return window['go']['api']['App']['GetCurrentWorkspaceNode']();
+}
+
 export function GetPermissions() {
   return window['go']['api']['App']['GetPermissions']();
 }
 
+export function GetPluginAssetContent(arg1, arg2) {
+  return window['go']['api']['App']['GetPluginAssetContent'](arg1, arg2);
+}
+
+export function GetPluginCapability(arg1, arg2) {
+  return window['go']['api']['App']['GetPluginCapability'](arg1, arg2);
+}
+
+export function GetPluginFrontendInfo(arg1) {
+  return window['go']['api']['App']['GetPluginFrontendInfo'](arg1);
+}
+
+export function GetPluginLocalization(arg1, arg2) {
+  return window['go']['api']['App']['GetPluginLocalization'](arg1, arg2);
+}
+
 export function GetPlugins() {
   return window['go']['api']['App']['GetPlugins']();
 }
 
+export function GetVaultFileMetadata(arg1, arg2) {
+  return window['go']['api']['App']['GetVaultFileMetadata'](arg1, arg2);
+}
+
+export function GetVaultPluginState() {
+  return window['go']['api']['App']['GetVaultPluginState']();
+}
+
 export function GetVaultStatus() {
   return window['go']['api']['App']['GetVaultStatus']();
 }
 
+export function GetWorkbenchOpenedResources() {
+  return window['go']['api']['App']['GetWorkbenchOpenedResources']();
+}
+
+export function GetWorkbenchPreferences() {
+  return window['go']['api']['App']['GetWorkbenchPreferences']();
+}
+
+export function GetWorkspaceMetadata(arg1) {
+  return window['go']['api']['App']['GetWorkspaceMetadata'](arg1);
+}
+
+export function GetWorkspaceTree() {
+  return window['go']['api']['App']['GetWorkspaceTree']();
+}
+
+export function ListPluginCapabilities(arg1) {
+  return window['go']['api']['App']['ListPluginCapabilities'](arg1);
+}
+
+export function ListVaultFiles(arg1, arg2) {
+  return window['go']['api']['App']['ListVaultFiles'](arg1, arg2);
+}
+
+export function ListVaultTrash(arg1) {
+  return window['go']['api']['App']['ListVaultTrash'](arg1);
+}
+
+export function ListWorkspaces() {
+  return window['go']['api']['App']['ListWorkspaces']();
+}
+
+export function ListWorkspaceIdentities() {
+  return window['go']['api']['App']['ListWorkspaceIdentities']();
+}
+
+export function ListWorkspaceTemplates() {
+  return window['go']['api']['App']['ListWorkspaceTemplates']();
+}
+
+export function MoveVaultPath(arg1, arg2, arg3, arg4) {
+  return window['go']['api']['App']['MoveVaultPath'](arg1, arg2, arg3, arg4);
+}
+
+export function MoveWorkspaceNode(arg1, arg2) {
+  return window['go']['api']['App']['MoveWorkspaceNode'](arg1, arg2);
+}
+
 export function OpenVault(arg1) {
   return window['go']['api']['App']['OpenVault'](arg1);
 }
 
+export function OpenVaultPathExternal(arg1, arg2) {
+  return window['go']['api']['App']['OpenVaultPathExternal'](arg1, arg2);
+}
+
+export function OpenExternalURL(arg1, arg2) {
+  return window['go']['api']['App']['OpenExternalURL'](arg1, arg2);
+}
+
+export function OpenWorkbenchResource(arg1, arg2) {
+  return window['go']['api']['App']['OpenWorkbenchResource'](arg1, arg2);
+}
+
+export function PluginBrowserReceiverPairing(arg1) {
+  return window['go']['api']['App']['PluginBrowserReceiverPairing'](arg1);
+}
+
+export function PluginRotateBrowserReceiverToken(arg1) {
+  return window['go']['api']['App']['PluginRotateBrowserReceiverToken'](arg1);
+}
+
+export function PluginSecretsCopyLink(arg1, arg2) {
+  return window['go']['api']['App']['PluginSecretsCopyLink'](arg1, arg2);
+}
+
+export function PluginSecretsDelete(arg1, arg2) {
+  return window['go']['api']['App']['PluginSecretsDelete'](arg1, arg2);
+}
+
+export function PluginSecretsList(arg1) {
+  return window['go']['api']['App']['PluginSecretsList'](arg1);
+}
+
+export function PluginSecretsRead(arg1, arg2) {
+  return window['go']['api']['App']['PluginSecretsRead'](arg1, arg2);
+}
+
+export function PluginSecretsStatus(arg1) {
+  return window['go']['api']['App']['PluginSecretsStatus'](arg1);
+}
+
+export function PluginSecretsUnlock(arg1, arg2) {
+  return window['go']['api']['App']['PluginSecretsUnlock'](arg1, arg2);
+}
+
+export function PluginSecretsWrite(arg1, arg2) {
+  return window['go']['api']['App']['PluginSecretsWrite'](arg1, arg2);
+}
+
+export function PluginSyncConfigure(arg1, arg2, arg3, arg4) {
+  return window['go']['api']['App']['PluginSyncConfigure'](arg1, arg2, arg3, arg4);
+}
+
+export function PluginSyncDisconnect(arg1) {
+  return window['go']['api']['App']['PluginSyncDisconnect'](arg1);
+}
+
+export function PluginSyncNow(arg1) {
+  return window['go']['api']['App']['PluginSyncNow'](arg1);
+}
+
+export function PluginSyncResetKey(arg1) {
+  return window['go']['api']['App']['PluginSyncResetKey'](arg1);
+}
+
+export function PluginSyncSetInterval(arg1, arg2) {
+  return window['go']['api']['App']['PluginSyncSetInterval'](arg1, arg2);
+}
+
+export function PluginSyncStatus(arg1) {
+  return window['go']['api']['App']['PluginSyncStatus'](arg1);
+}
+
+export function PluginSyncTestConnection(arg1, arg2, arg3, arg4) {
+  return window['go']['api']['App']['PluginSyncTestConnection'](arg1, arg2, arg3, arg4);
+}
+
+export function PublishPluginEvent(arg1, arg2, arg3) {
+  return window['go']['api']['App']['PublishPluginEvent'](arg1, arg2, arg3);
+}
+
+export function ReadPluginDataJSON(arg1, arg2) {
+  return window['go']['api']['App']['ReadPluginDataJSON'](arg1, arg2);
+}
+
+export function ReadPluginDataNDJSON(arg1, arg2) {
+  return window['go']['api']['App']['ReadPluginDataNDJSON'](arg1, arg2);
+}
+
+export function ReadPluginSetting(arg1, arg2) {
+  return window['go']['api']['App']['ReadPluginSetting'](arg1, arg2);
+}
+
+export function ReadPluginSettings(arg1) {
+  return window['go']['api']['App']['ReadPluginSettings'](arg1);
+}
+
+export function ReadVaultFileBytes(arg1, arg2) {
+  return window['go']['api']['App']['ReadVaultFileBytes'](arg1, arg2);
+}
+
+export function ReadVaultTextFile(arg1, arg2) {
+  return window['go']['api']['App']['ReadVaultTextFile'](arg1, arg2);
+}
+
+export function RecordDesiredPlugin(arg1, arg2, arg3) {
+  return window['go']['api']['App']['RecordDesiredPlugin'](arg1, arg2, arg3);
+}
+
 export function ReloadPlugins() {
   return window['go']['api']['App']['ReloadPlugins']();
 }
 
-export function Startup() {
-  return window['go']['api']['App']['Startup']();
+export function RenameWorkspace(arg1, arg2) {
+  return window['go']['api']['App']['RenameWorkspace'](arg1, arg2);
+}
+
+export function RepairWorkspaceIdentity(arg1, arg2) {
+  return window['go']['api']['App']['RepairWorkspaceIdentity'](arg1, arg2);
+}
+
+export function RenameWorkspaceNode(arg1, arg2) {
+  return window['go']['api']['App']['RenameWorkspaceNode'](arg1, arg2);
+}
+
+export function RestoreVaultTrash(arg1, arg2, arg3) {
+  return window['go']['api']['App']['RestoreVaultTrash'](arg1, arg2, arg3);
+}
+
+export function RestoreWorkspaceTrash(arg1, arg2) {
+  return window['go']['api']['App']['RestoreWorkspaceTrash'](arg1, arg2);
+}
+
+export function SelectDirectory() {
+  return window['go']['api']['App']['SelectDirectory']();
+}
+
+export function PurgeWorkspaceTrash(arg1) {
+  return window['go']['api']['App']['PurgeWorkspaceTrash'](arg1);
+}
+
+export function SelectVaultForOpen() {
+  return window['go']['api']['App']['SelectVaultForOpen']();
+}
+
+export function SetCurrentVault(arg1) {
+  return window['go']['api']['App']['SetCurrentVault'](arg1);
+}
+
+export function SetCurrentWorkspace(arg1) {
+  return window['go']['api']['App']['SetCurrentWorkspace'](arg1);
+}
+
+export function SetCurrentWorkspaceNode(arg1) {
+  return window['go']['api']['App']['SetCurrentWorkspaceNode'](arg1);
+}
+
+export function ShowVaultPathInFolder(arg1, arg2) {
+  return window['go']['api']['App']['ShowVaultPathInFolder'](arg1, arg2);
+}
+
+export function SubscribePluginEvent(arg1, arg2) {
+  return window['go']['api']['App']['SubscribePluginEvent'](arg1, arg2);
+}
+
+export function TrashVaultPath(arg1, arg2) {
+  return window['go']['api']['App']['TrashVaultPath'](arg1, arg2);
+}
+
+export function TrashWorkspace(arg1) {
+  return window['go']['api']['App']['TrashWorkspace'](arg1);
+}
+
+export function UpdateAppSettings(arg1) {
+  return window['go']['api']['App']['UpdateAppSettings'](arg1);
+}
+
+export function UpdateWorkbenchPreferences(arg1) {
+  return window['go']['api']['App']['UpdateWorkbenchPreferences'](arg1);
+}
+
+export function UpdateWorkspaceMetadata(arg1, arg2) {
+  return window['go']['api']['App']['UpdateWorkspaceMetadata'](arg1, arg2);
+}
+
+export function WriteFrontendLog(arg1, arg2) {
+  return window['go']['api']['App']['WriteFrontendLog'](arg1, arg2);
+}
+
+export function WritePluginDataJSON(arg1, arg2, arg3) {
+  return window['go']['api']['App']['WritePluginDataJSON'](arg1, arg2, arg3);
+}
+
+export function WritePluginDataNDJSON(arg1, arg2, arg3) {
+  return window['go']['api']['App']['WritePluginDataNDJSON'](arg1, arg2, arg3);
+}
+
+export function WritePluginSetting(arg1, arg2, arg3) {
+  return window['go']['api']['App']['WritePluginSetting'](arg1, arg2, arg3);
+}
+
+export function WritePluginSettings(arg1, arg2) {
+  return window['go']['api']['App']['WritePluginSettings'](arg1, arg2);
+}
+
+export function WriteVaultFileBytes(arg1, arg2, arg3, arg4) {
+  return window['go']['api']['App']['WriteVaultFileBytes'](arg1, arg2, arg3, arg4);
+}
+
+export function WriteVaultTextFile(arg1, arg2, arg3, arg4) {
+  return window['go']['api']['App']['WriteVaultTextFile'](arg1, arg2, arg3, arg4);
 }

go.mod

@@ -5,6 +5,7 @@ go 1.24.4
 require (
 	github.com/google/uuid v1.6.0
 	github.com/wailsapp/wails/v2 v2.12.0
+	golang.org/x/net v0.35.0
 )
 
 require (
@@ -32,7 +33,6 @@ require (
 	github.com/wailsapp/go-webview2 v1.0.22 // indirect
 	github.com/wailsapp/mimetype v1.4.1 // indirect
 	golang.org/x/crypto v0.33.0 // indirect
-	golang.org/x/net v0.35.0 // indirect
 	golang.org/x/sys v0.30.0 // indirect
 	golang.org/x/text v0.22.0 // indirect
 )

internal/api/sync_real_server_test.go

@@ -0,0 +1,110 @@
+package api
+
+import (
+	"os"
+	"strings"
+	"testing"
+
+	corefiles "github.com/verstak/verstak-desktop/internal/core/files"
+)
+
+func TestSyncNowAgainstRealServerTwoVaults(t *testing.T) {
+	serverURL := os.Getenv("VERSTAK_SYNC_SMOKE_SERVER_URL")
+	deviceA := os.Getenv("VERSTAK_SYNC_SMOKE_DEVICE_A")
+	deviceB := os.Getenv("VERSTAK_SYNC_SMOKE_DEVICE_B")
+	apiKeyA := os.Getenv("VERSTAK_SYNC_SMOKE_KEY_A")
+	apiKeyB := os.Getenv("VERSTAK_SYNC_SMOKE_KEY_B")
+	if serverURL == "" || deviceA == "" || deviceB == "" || apiKeyA == "" || apiKeyB == "" {
+		t.Skip("set VERSTAK_SYNC_SMOKE_* env vars to run the real sync-server smoke test")
+	}
+
+	appA, _ := newSyncFilesTestApp(t, []string{"files.read", "files.write", "files.delete"}, deviceA)
+	appB, _ := newSyncFilesTestApp(t, []string{"files.read", "files.write", "files.delete"}, deviceB)
+	if err := appA.syncSvc.SetState(serverURL, apiKeyA); err != nil {
+		t.Fatalf("appA SetState: %v", err)
+	}
+	if err := appB.syncSvc.SetState(serverURL, apiKeyB); err != nil {
+		t.Fatalf("appB SetState: %v", err)
+	}
+
+	if errStr := appA.CreateVaultFolder("files.plugin", "Shared"); errStr != "" {
+		t.Fatalf("appA CreateVaultFolder: %s", errStr)
+	}
+	if errStr := appA.WriteVaultTextFile("files.plugin", "Shared/one.txt", "from A", corefiles.WriteOptions{CreateIfMissing: true}); errStr != "" {
+		t.Fatalf("appA WriteVaultTextFile: %s", errStr)
+	}
+	expectSyncCounts(t, appA, 2, 2)
+	expectSyncCounts(t, appB, 0, 2)
+	expectText(t, appB, "Shared/one.txt", "from A")
+
+	if errStr := appB.WriteVaultTextFile("files.plugin", "Shared/one.txt", "from B", corefiles.WriteOptions{Overwrite: true}); errStr != "" {
+		t.Fatalf("appB update: %s", errStr)
+	}
+	if errStr := appB.MoveVaultPath("files.plugin", "Shared/one.txt", "Shared/two.txt", corefiles.MoveOptions{}); errStr != "" {
+		t.Fatalf("appB move: %s", errStr)
+	}
+	expectSyncCounts(t, appB, 2, 2)
+	expectSyncCounts(t, appA, 0, 2)
+	expectText(t, appA, "Shared/two.txt", "from B")
+
+	if _, errStr := appA.TrashVaultPath("files.plugin", "Shared/two.txt"); errStr != "" {
+		t.Fatalf("appA trash: %s", errStr)
+	}
+	expectSyncCounts(t, appA, 1, 1)
+	expectSyncCounts(t, appB, 0, 1)
+	if _, errStr := appB.GetVaultFileMetadata("files.plugin", "Shared/two.txt"); !strings.Contains(errStr, "not-found") {
+		t.Fatalf("appB deleted file metadata err = %q, want not-found", errStr)
+	}
+
+	if errStr := appB.CreateVaultFolder("files.plugin", "Shared/Folder"); errStr != "" {
+		t.Fatalf("appB create folder: %s", errStr)
+	}
+	expectSyncCounts(t, appB, 1, 1)
+	expectSyncCounts(t, appA, 0, 1)
+	if meta, errStr := appA.GetVaultFileMetadata("files.plugin", "Shared/Folder"); errStr != "" || meta.Type != corefiles.FileTypeFolder {
+		t.Fatalf("appA folder metadata = %+v err=%q, want folder", meta, errStr)
+	}
+
+	if errStr := appA.MoveVaultPath("files.plugin", "Shared/Folder", "Shared/Archive", corefiles.MoveOptions{}); errStr != "" {
+		t.Fatalf("appA move folder: %s", errStr)
+	}
+	expectSyncCounts(t, appA, 1, 1)
+	expectSyncCounts(t, appB, 0, 1)
+	if _, errStr := appB.GetVaultFileMetadata("files.plugin", "Shared/Folder"); !strings.Contains(errStr, "not-found") {
+		t.Fatalf("appB moved folder old metadata err = %q, want not-found", errStr)
+	}
+	if meta, errStr := appB.GetVaultFileMetadata("files.plugin", "Shared/Archive"); errStr != "" || meta.Type != corefiles.FileTypeFolder {
+		t.Fatalf("appB moved folder metadata = %+v err=%q, want folder", meta, errStr)
+	}
+
+	if _, errStr := appB.TrashVaultPath("files.plugin", "Shared/Archive"); errStr != "" {
+		t.Fatalf("appB trash folder: %s", errStr)
+	}
+	expectSyncCounts(t, appB, 1, 1)
+	expectSyncCounts(t, appA, 0, 1)
+	if _, errStr := appA.GetVaultFileMetadata("files.plugin", "Shared/Archive"); !strings.Contains(errStr, "not-found") {
+		t.Fatalf("appA deleted folder metadata err = %q, want not-found", errStr)
+	}
+}
+
+func expectSyncCounts(t *testing.T, app *App, pushed, pulled int) {
+	t.Helper()
+	result, err := app.syncNow()
+	if err != nil {
+		t.Fatalf("syncNow: %v", err)
+	}
+	if result["pushed"] != pushed || result["pulled"] != pulled {
+		t.Fatalf("sync result = %#v, want pushed=%d pulled=%d", result, pushed, pulled)
+	}
+}
+
+func expectText(t *testing.T, app *App, path, want string) {
+	t.Helper()
+	text, errStr := app.ReadVaultTextFile("files.plugin", path)
+	if errStr != "" {
+		t.Fatalf("ReadVaultTextFile(%s): %s", path, errStr)
+	}
+	if text != want {
+		t.Fatalf("ReadVaultTextFile(%s) = %q, want %q", path, text, want)
+	}
+}

internal/core/appsettings/manager.go

@@ -4,25 +4,69 @@
 package appsettings
 
 import (
+	"crypto/rand"
+	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"os"
 	"path/filepath"
-	"sort"
+	"strings"
 	"sync"
 	"time"
 )
 
 // Config represents the application settings stored in ~/.config/verstak/config.json.
 type Config struct {
-	SchemaVersion    int          `json:"schemaVersion"`
-	CurrentVaultPath string       `json:"currentVaultPath"`
-	RecentVaults     []string     `json:"recentVaults"`
-	Theme            string       `json:"theme"`
-	DevMode          bool         `json:"devMode"`
-	UserPluginsDir   string       `json:"userPluginsDir"`
-	WindowState      *WindowState `json:"windowState,omitempty"`
-	LastOpenedAt     string       `json:"lastOpenedAt"`
+	SchemaVersion    int                     `json:"schemaVersion"`
+	CurrentVaultPath string                  `json:"currentVaultPath"`
+	RecentVaults     []string                `json:"recentVaults"`
+	Theme            string                  `json:"theme"`
+	Language         string                  `json:"language"`
+	DevMode          bool                    `json:"devMode"`
+	UserPluginsDir   string                  `json:"userPluginsDir"`
+	Workbench        WorkbenchPreferences    `json:"workbench,omitempty"`
+	Sync             SyncSettings            `json:"sync,omitempty"`
+	BrowserReceiver  BrowserReceiverSettings `json:"browserReceiver,omitempty"`
+	WindowState      *WindowState            `json:"windowState,omitempty"`
+	LastOpenedAt     string                  `json:"lastOpenedAt"`
+}
+
+const (
+	LanguageSystem  = "system"
+	LanguageEnglish = "en"
+	LanguageRussian = "ru"
+)
+
+func validLanguage(language string) bool {
+	switch language {
+	case LanguageSystem, LanguageEnglish, LanguageRussian:
+		return true
+	default:
+		return false
+	}
+}
+
+type WorkbenchPreferences struct {
+	DefaultTextEditorProvider          string `json:"defaultTextEditorProvider,omitempty"`
+	DefaultMarkdownEditorProvider      string `json:"defaultMarkdownEditorProvider,omitempty"`
+	DefaultNotesMarkdownEditorProvider string `json:"defaultNotesMarkdownEditorProvider,omitempty"`
+}
+
+// SyncSettings holds sync configuration for the current vault.
+type SyncSettings struct {
+	Enabled      bool   `json:"enabled"`
+	ServerURL    string `json:"serverUrl"`
+	DeviceID     string `json:"deviceId"`
+	DeviceName   string `json:"deviceName"`
+	SyncInterval int    `json:"syncInterval"`
+	LastStatus   string `json:"lastStatus"`
+	LastSyncAt   string `json:"lastSyncAt"`
+	LastError    string `json:"lastError,omitempty"`
+}
+
+// BrowserReceiverSettings holds the installation-local browser capture pairing secret.
+type BrowserReceiverSettings struct {
+	Token string `json:"token,omitempty"`
 }
 
 // WindowState stores the last window position and size.
@@ -93,6 +137,9 @@ func (m *Manager) Load() error {
 	if cfg.Theme == "" {
 		cfg.Theme = "dark"
 	}
+	if !validLanguage(cfg.Language) {
+		cfg.Language = LanguageSystem
+	}
 	if cfg.RecentVaults == nil {
 		cfg.RecentVaults = []string{}
 	}
@@ -151,18 +198,97 @@ func (m *Manager) Update(patch *Config) error {
 	if patch.Theme != "" {
 		m.config.Theme = patch.Theme
 	}
+	if patch.Language != "" && validLanguage(patch.Language) {
+		m.config.Language = patch.Language
+	}
 	if patch.UserPluginsDir != "" {
 		m.config.UserPluginsDir = patch.UserPluginsDir
 	}
 	if patch.WindowState != nil {
 		m.config.WindowState = patch.WindowState
 	}
+	if patch.Workbench.DefaultTextEditorProvider != "" {
+		m.config.Workbench.DefaultTextEditorProvider = patch.Workbench.DefaultTextEditorProvider
+	}
+	if patch.Workbench.DefaultMarkdownEditorProvider != "" {
+		m.config.Workbench.DefaultMarkdownEditorProvider = patch.Workbench.DefaultMarkdownEditorProvider
+	}
+	if patch.Workbench.DefaultNotesMarkdownEditorProvider != "" {
+		m.config.Workbench.DefaultNotesMarkdownEditorProvider = patch.Workbench.DefaultNotesMarkdownEditorProvider
+	}
 	m.config.DevMode = patch.DevMode
 
 	m.config.LastOpenedAt = time.Now().UTC().Format(time.RFC3339)
 	return m.saveLocked()
 }
 
+// UpdateLanguage validates and persists the installation-local UI language.
+func (m *Manager) UpdateLanguage(language string) error {
+	language = strings.TrimSpace(language)
+	if !validLanguage(language) {
+		return fmt.Errorf("unsupported language %q", language)
+	}
+
+	m.mu.Lock()
+	defer m.mu.Unlock()
+	if m.config == nil {
+		m.config = defaultConfig()
+	}
+	m.config.Language = language
+	m.config.LastOpenedAt = time.Now().UTC().Format(time.RFC3339)
+	return m.saveLocked()
+}
+
+// UpdateSync replaces sync settings without changing unrelated app settings.
+func (m *Manager) UpdateSync(syncSettings SyncSettings) error {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if m.config == nil {
+		m.config = defaultConfig()
+	}
+
+	m.config.Sync = syncSettings
+	m.config.LastOpenedAt = time.Now().UTC().Format(time.RFC3339)
+	return m.saveLocked()
+}
+
+// EnsureBrowserReceiverToken returns the persisted pairing token, creating it when absent.
+func (m *Manager) EnsureBrowserReceiverToken() (string, error) {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+	return m.updateBrowserReceiverTokenLocked(false)
+}
+
+// RotateBrowserReceiverToken replaces the persisted pairing token.
+func (m *Manager) RotateBrowserReceiverToken() (string, error) {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+	return m.updateBrowserReceiverTokenLocked(true)
+}
+
+func (m *Manager) updateBrowserReceiverTokenLocked(force bool) (string, error) {
+	if m.config == nil {
+		m.config = defaultConfig()
+	}
+	current := strings.TrimSpace(m.config.BrowserReceiver.Token)
+	if current != "" && !force {
+		return current, nil
+	}
+
+	bytes := make([]byte, 32)
+	if _, err := rand.Read(bytes); err != nil {
+		return "", fmt.Errorf("generate browser receiver token: %w", err)
+	}
+	token := base64.RawURLEncoding.EncodeToString(bytes)
+	m.config.BrowserReceiver.Token = token
+	if err := m.saveLocked(); err != nil {
+		m.config.BrowserReceiver.Token = current
+		return "", err
+	}
+	return token, nil
+}
+
 // SetCurrentVault updates the current vault path and adds to recents.
 func (m *Manager) SetCurrentVault(path string) error {
 	m.mu.Lock()
@@ -200,8 +326,10 @@ func defaultConfig() *Config {
 		CurrentVaultPath: "",
 		RecentVaults:     []string{},
 		Theme:            "dark",
+		Language:         LanguageSystem,
 		DevMode:          false,
 		UserPluginsDir:   filepath.Join(os.Getenv("HOME"), ".config", "verstak", "plugins"),
+		Workbench:        WorkbenchPreferences{},
 		WindowState:      &WindowState{Width: 1200, Height: 800},
 		LastOpenedAt:     time.Now().UTC().Format(time.RFC3339),
 	}
@@ -215,8 +343,12 @@ func copyConfig(c *Config) *Config {
 		CurrentVaultPath: c.CurrentVaultPath,
 		RecentVaults:     recent,
 		Theme:            c.Theme,
+		Language:         c.Language,
 		DevMode:          c.DevMode,
 		UserPluginsDir:   c.UserPluginsDir,
+		Workbench:        c.Workbench,
+		Sync:             c.Sync,
+		BrowserReceiver:  c.BrowserReceiver,
 		LastOpenedAt:     c.LastOpenedAt,
 	}
 	if c.WindowState != nil {
@@ -237,19 +369,11 @@ func addRecent(list []string, path string, max int) []string {
 			filtered = append(filtered, p)
 		}
 	}
-	// Prepend
+	// Prepend (most recent first)
 	result := append([]string{path}, filtered...)
 	// Trim
 	if len(result) > max {
 		result = result[:max]
 	}
-	sort.SliceStable(result, func(i, j int) bool {
-		return result[i] < result[j]
-	})
-	// Actually keep insertion order: prepend is correct, just trim
-	result = append([]string{path}, filtered...)
-	if len(result) > max {
-		result = result[:max]
-	}
 	return result
 }

internal/core/appsettings/manager_test.go

@@ -25,6 +25,53 @@ func TestLoad_DefaultCreation(t *testing.T) {
 	if cfg.CurrentVaultPath != "" {
 		t.Errorf("CurrentVaultPath: got %q, want empty", cfg.CurrentVaultPath)
 	}
+	if cfg.Language != "system" {
+		t.Errorf("Language: got %q, want %q", cfg.Language, "system")
+	}
+}
+
+func TestLoad_MissingLanguageDefaultsToSystem(t *testing.T) {
+	path := filepath.Join(t.TempDir(), "config.json")
+	if err := os.WriteFile(path, []byte(`{"schemaVersion":1,"theme":"dark","devMode":true}`), 0o600); err != nil {
+		t.Fatal(err)
+	}
+
+	m := NewManager(path)
+	if err := m.Load(); err != nil {
+		t.Fatalf("Load: %v", err)
+	}
+	if got := m.Get().Language; got != "system" {
+		t.Fatalf("Language = %q, want system", got)
+	}
+}
+
+func TestUpdateLanguagePersistsAndPreservesUnrelatedSettings(t *testing.T) {
+	path := filepath.Join(t.TempDir(), "config.json")
+	m := NewManager(path)
+	if err := m.Load(); err != nil {
+		t.Fatal(err)
+	}
+	if err := m.Update(&Config{Theme: "light", DevMode: true}); err != nil {
+		t.Fatal(err)
+	}
+	if err := m.UpdateLanguage("ru"); err != nil {
+		t.Fatalf("UpdateLanguage: %v", err)
+	}
+
+	reloaded := NewManager(path)
+	if err := reloaded.Load(); err != nil {
+		t.Fatal(err)
+	}
+	cfg := reloaded.Get()
+	if cfg.Language != "ru" || cfg.Theme != "light" || !cfg.DevMode {
+		t.Fatalf("settings after language update = %+v", cfg)
+	}
+	if err := reloaded.UpdateLanguage("de"); err == nil {
+		t.Fatal("UpdateLanguage(de) succeeded, want validation error")
+	}
+	if got := reloaded.Get().Language; got != "ru" {
+		t.Fatalf("Language after rejected update = %q, want ru", got)
+	}
 }
 
 func TestLoad_CorruptConfig(t *testing.T) {
@@ -52,6 +99,43 @@ func TestLoad_CorruptConfig(t *testing.T) {
 	// Just verify no panic
 }
 
+func TestBrowserReceiverTokenPersistsAndRotates(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "config.json")
+
+	manager := NewManager(path)
+	if err := manager.Load(); err != nil {
+		t.Fatalf("Load: %v", err)
+	}
+	firstToken, err := manager.EnsureBrowserReceiverToken()
+	if err != nil {
+		t.Fatalf("EnsureBrowserReceiverToken: %v", err)
+	}
+	if firstToken == "" {
+		t.Fatal("EnsureBrowserReceiverToken returned an empty token")
+	}
+
+	reloaded := NewManager(path)
+	if err := reloaded.Load(); err != nil {
+		t.Fatalf("reload settings: %v", err)
+	}
+	persistedToken, err := reloaded.EnsureBrowserReceiverToken()
+	if err != nil {
+		t.Fatalf("EnsureBrowserReceiverToken after reload: %v", err)
+	}
+	if persistedToken != firstToken {
+		t.Fatalf("persisted token = %q, want %q", persistedToken, firstToken)
+	}
+
+	rotatedToken, err := reloaded.RotateBrowserReceiverToken()
+	if err != nil {
+		t.Fatalf("RotateBrowserReceiverToken: %v", err)
+	}
+	if rotatedToken == "" || rotatedToken == firstToken {
+		t.Fatalf("rotated token = %q, want new non-empty token", rotatedToken)
+	}
+}
+
 func TestSetCurrentVault(t *testing.T) {
 	dir := t.TempDir()
 	path := filepath.Join(dir, "config.json")
@@ -124,6 +208,82 @@ func TestUpdate_Patch(t *testing.T) {
 	}
 }
 
+func TestUpdate_WorkbenchPreferences(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "config.json")
+
+	m := NewManager(path)
+	if err := m.Load(); err != nil {
+		t.Fatal(err)
+	}
+
+	if err := m.Update(&Config{
+		Workbench: WorkbenchPreferences{
+			DefaultTextEditorProvider:          "editor.text",
+			DefaultMarkdownEditorProvider:      "editor.markdown",
+			DefaultNotesMarkdownEditorProvider: "editor.notes",
+		},
+	}); err != nil {
+		t.Fatalf("Update: %v", err)
+	}
+
+	reloaded := NewManager(path)
+	if err := reloaded.Load(); err != nil {
+		t.Fatal(err)
+	}
+	cfg := reloaded.Get()
+	if cfg.Workbench.DefaultTextEditorProvider != "editor.text" ||
+		cfg.Workbench.DefaultMarkdownEditorProvider != "editor.markdown" ||
+		cfg.Workbench.DefaultNotesMarkdownEditorProvider != "editor.notes" {
+		t.Fatalf("workbench preferences = %+v", cfg.Workbench)
+	}
+}
+
+func TestUpdateSync(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "config.json")
+
+	m := NewManager(path)
+	if err := m.Load(); err != nil {
+		t.Fatal(err)
+	}
+	if err := m.Update(&Config{DevMode: true}); err != nil {
+		t.Fatalf("Update dev mode: %v", err)
+	}
+
+	if err := m.UpdateSync(SyncSettings{
+		Enabled:      true,
+		ServerURL:    "https://sync.example",
+		DeviceID:     "device-1",
+		DeviceName:   "Desktop",
+		SyncInterval: 15,
+		LastStatus:   "connected",
+		LastSyncAt:   "2026-06-27T00:00:00Z",
+		LastError:    "previous",
+	}); err != nil {
+		t.Fatalf("UpdateSync: %v", err)
+	}
+
+	reloaded := NewManager(path)
+	if err := reloaded.Load(); err != nil {
+		t.Fatal(err)
+	}
+	cfg := reloaded.Get()
+	if !cfg.Sync.Enabled ||
+		cfg.Sync.ServerURL != "https://sync.example" ||
+		cfg.Sync.DeviceID != "device-1" ||
+		cfg.Sync.DeviceName != "Desktop" ||
+		cfg.Sync.SyncInterval != 15 ||
+		cfg.Sync.LastStatus != "connected" ||
+		cfg.Sync.LastSyncAt != "2026-06-27T00:00:00Z" ||
+		cfg.Sync.LastError != "previous" {
+		t.Fatalf("sync settings = %+v", cfg.Sync)
+	}
+	if !cfg.DevMode {
+		t.Fatal("UpdateSync changed DevMode")
+	}
+}
+
 func TestAppSettings_NotInsideVault(t *testing.T) {
 	// App settings path should be under ~/.config/verstak/, not inside vault
 	path := DefaultConfigPath()

internal/core/browserreceiver/receiver.go

@@ -0,0 +1,638 @@
+// Package browserreceiver hosts the local HTTP protocol used by the browser extension.
+package browserreceiver
+
+import (
+	"context"
+	"crypto/subtle"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"log"
+	"net"
+	"net/http"
+	"strings"
+	"sync"
+	"time"
+
+	"github.com/verstak/verstak-desktop/internal/core/events"
+	"github.com/verstak/verstak-desktop/internal/core/hostname"
+)
+
+const (
+	capturePath         = "/api/browser-inbox/v1/captures"
+	activityBatchPath   = "/api/browser-activity/v1/batches"
+	DefaultAddr         = "127.0.0.1:47731"
+	DefaultCaptureURL   = "http://" + DefaultAddr + capturePath
+	DefaultActivityURL  = "http://" + DefaultAddr + activityBatchPath
+	receiverTokenHeader = "X-Verstak-Receiver-Token"
+)
+
+const (
+	maxCaptureBodyBytes    = 12 * 1024 * 1024
+	maxCaptureIDBytes      = 256
+	maxCapturedAtBytes     = 64
+	maxCaptureSourceBytes  = 128
+	maxPageURLBytes        = 4096
+	maxPageTitleBytes      = 512
+	maxPageDomainBytes     = 255
+	maxSelectionTextBytes  = 20 * 1024
+	maxLinkTextBytes       = 512
+	maxBrowserNameBytes    = 64
+	maxFileNameBytes       = 255
+	maxFileMimeBytes       = 128
+	maxFileTextBytes       = 2 * 1024 * 1024
+	maxFileBytes           = 8 * 1024 * 1024
+	maxFileDataBase64Bytes = 4 * ((maxFileBytes + 2) / 3)
+	maxActivityBodyBytes   = 256 * 1024
+	maxActivityEntries     = 100
+	maxActivityDuration    = 10 * time.Minute
+)
+
+type Receiver struct {
+	bus               *events.Bus
+	workspaceProvider WorkspaceProvider
+	optionsMu         sync.RWMutex
+	options           Options
+}
+
+type WorkspaceProvider func() string
+
+type Options struct {
+	RequireToken      bool
+	ReceiverToken     string
+	Available         func() bool
+	Persist           func(events.Event) error
+	ActivityAvailable func() bool
+	PersistActivity   func(events.Event) error
+}
+
+type Server struct {
+	listener net.Listener
+	server   *http.Server
+}
+
+type CapturePayload struct {
+	SchemaVersion int               `json:"schemaVersion"`
+	CaptureID     string            `json:"captureId"`
+	CapturedAt    string            `json:"capturedAt"`
+	Source        string            `json:"source"`
+	Kind          string            `json:"kind"`
+	Page          CapturePage       `json:"page"`
+	Selection     *CaptureSelection `json:"selection,omitempty"`
+	Link          *CaptureLink      `json:"link,omitempty"`
+	File          *CaptureFile      `json:"file,omitempty"`
+	Browser       *CaptureBrowser   `json:"browser,omitempty"`
+	Context       interface{}       `json:"context,omitempty"`
+}
+
+type CapturePage struct {
+	URL    string `json:"url"`
+	Title  string `json:"title"`
+	Domain string `json:"domain"`
+}
+
+type CaptureSelection struct {
+	Text string `json:"text"`
+}
+
+type CaptureLink struct {
+	URL  string `json:"url"`
+	Text string `json:"text"`
+}
+
+type CaptureFile struct {
+	Name       string `json:"name"`
+	Mime       string `json:"mime"`
+	Size       int64  `json:"size"`
+	Text       string `json:"text"`
+	DataBase64 string `json:"dataBase64"`
+}
+
+type CaptureBrowser struct {
+	Name string `json:"name"`
+}
+
+// ActivityBatchPayload contains only domain-level time accounting. It never
+// accepts or emits page URLs, titles, content, or navigation history.
+type ActivityBatchPayload struct {
+	SchemaVersion int             `json:"schemaVersion"`
+	BatchID       string          `json:"batchId"`
+	CreatedAt     string          `json:"createdAt"`
+	Source        string          `json:"source"`
+	Entries       []ActivityEntry `json:"entries"`
+}
+
+type ActivityEntry struct {
+	Hostname        string `json:"hostname"`
+	StartedAt       string `json:"startedAt"`
+	EndedAt         string `json:"endedAt"`
+	DurationSeconds int64  `json:"durationSeconds"`
+}
+
+func New(bus *events.Bus, providers ...WorkspaceProvider) *Receiver {
+	return NewWithOptions(bus, Options{}, providers...)
+}
+
+func NewWithOptions(bus *events.Bus, options Options, providers ...WorkspaceProvider) *Receiver {
+	var provider WorkspaceProvider
+	if len(providers) > 0 {
+		provider = providers[0]
+	}
+	return &Receiver{bus: bus, workspaceProvider: provider, options: options}
+}
+
+// SetReceiverToken updates the active token without restarting the local server.
+func (r *Receiver) SetReceiverToken(token string) {
+	if r == nil {
+		return
+	}
+	r.optionsMu.Lock()
+	defer r.optionsMu.Unlock()
+	r.options.RequireToken = true
+	r.options.ReceiverToken = strings.TrimSpace(token)
+}
+
+// SetPersistence configures durable capture storage and its availability gate.
+func (r *Receiver) SetPersistence(available func() bool, persist func(events.Event) error) {
+	if r == nil {
+		return
+	}
+	r.optionsMu.Lock()
+	defer r.optionsMu.Unlock()
+	r.options.Available = available
+	r.options.Persist = persist
+}
+
+// SetActivityPersistence configures durable passive browser activity storage.
+// An acknowledgement is sent only after persist returns successfully.
+func (r *Receiver) SetActivityPersistence(available func() bool, persist func(events.Event) error) {
+	if r == nil {
+		return
+	}
+	r.optionsMu.Lock()
+	defer r.optionsMu.Unlock()
+	r.options.ActivityAvailable = available
+	r.options.PersistActivity = persist
+}
+
+func Start(addr string, receiver *Receiver) (*Server, error) {
+	if receiver == nil {
+		return nil, fmt.Errorf("receiver is required")
+	}
+	listener, err := net.Listen("tcp", addr)
+	if err != nil {
+		return nil, err
+	}
+
+	s := &Server{
+		listener: listener,
+		server: &http.Server{
+			Handler: receiver,
+		},
+	}
+	go func() {
+		if err := s.server.Serve(listener); err != nil && err != http.ErrServerClosed {
+			log.Printf("[browserreceiver] serve: %v", err)
+		}
+	}()
+	return s, nil
+}
+
+func (s *Server) URL() string {
+	if s == nil || s.listener == nil {
+		return ""
+	}
+	return "http://" + s.listener.Addr().String()
+}
+
+func (s *Server) Close() error {
+	if s == nil || s.server == nil {
+		return nil
+	}
+	return s.server.Shutdown(context.Background())
+}
+
+func (r *Receiver) ServeHTTP(w http.ResponseWriter, req *http.Request) {
+	w.Header().Set("Content-Type", "application/json")
+
+	if req.URL.Path == activityBatchPath {
+		r.serveActivityBatch(w, req)
+		return
+	}
+	if req.URL.Path != capturePath {
+		http.NotFound(w, req)
+		return
+	}
+	if req.Method != http.MethodPost {
+		w.WriteHeader(http.StatusMethodNotAllowed)
+		_ = json.NewEncoder(w).Encode(map[string]string{"error": "method not allowed"})
+		return
+	}
+	if err := r.validateReceiverToken(req); err != nil {
+		writeError(w, http.StatusUnauthorized, err.Error())
+		return
+	}
+	options := r.currentOptions()
+	if options.Available != nil && !options.Available() {
+		writeError(w, http.StatusServiceUnavailable, "browser inbox unavailable")
+		return
+	}
+
+	defer req.Body.Close()
+	decoder := json.NewDecoder(http.MaxBytesReader(w, req.Body, maxCaptureBodyBytes))
+	var payload CapturePayload
+	if err := decoder.Decode(&payload); err != nil {
+		var maxBytesErr *http.MaxBytesError
+		if errors.As(err, &maxBytesErr) {
+			writeError(w, http.StatusRequestEntityTooLarge, "capture payload exceeds limit")
+			return
+		}
+		writeError(w, http.StatusBadRequest, "invalid JSON")
+		return
+	}
+	if err := decoder.Decode(&struct{}{}); err != io.EOF {
+		var maxBytesErr *http.MaxBytesError
+		if errors.As(err, &maxBytesErr) {
+			writeError(w, http.StatusRequestEntityTooLarge, "capture payload exceeds limit")
+			return
+		}
+		writeError(w, http.StatusBadRequest, "invalid JSON")
+		return
+	}
+	if err := payload.Validate(); err != nil {
+		writeError(w, http.StatusBadRequest, err.Error())
+		return
+	}
+
+	eventName := "browser.capture." + payload.Kind
+	if options.Persist == nil && (r.bus == nil || !r.bus.HasSubscribers(eventName)) {
+		writeError(w, http.StatusServiceUnavailable, "browser inbox unavailable")
+		return
+	}
+	eventPayload := payload.EventPayload()
+	r.annotateWorkspace(eventPayload)
+	event := events.Event{
+		Name:      eventName,
+		Timestamp: time.Now().UTC().Format(time.RFC3339Nano),
+		Payload:   eventPayload,
+	}
+	if options.Persist != nil {
+		if err := options.Persist(event); err != nil {
+			log.Printf("[browserreceiver] persist %s: %v", payload.CaptureID, err)
+			writeError(w, http.StatusServiceUnavailable, "browser inbox unavailable")
+			return
+		}
+	}
+	if r.bus != nil {
+		r.bus.Publish(event)
+	}
+
+	w.WriteHeader(http.StatusAccepted)
+	_ = json.NewEncoder(w).Encode(map[string]string{
+		"status":    "accepted",
+		"captureId": payload.CaptureID,
+	})
+}
+
+func (r *Receiver) serveActivityBatch(w http.ResponseWriter, req *http.Request) {
+	if req.Method != http.MethodPost {
+		w.WriteHeader(http.StatusMethodNotAllowed)
+		_ = json.NewEncoder(w).Encode(map[string]string{"error": "method not allowed"})
+		return
+	}
+	if err := r.validateReceiverToken(req); err != nil {
+		writeError(w, http.StatusUnauthorized, err.Error())
+		return
+	}
+	options := r.currentOptions()
+	if options.ActivityAvailable == nil || !options.ActivityAvailable() || options.PersistActivity == nil {
+		writeError(w, http.StatusServiceUnavailable, "activity storage unavailable")
+		return
+	}
+
+	defer req.Body.Close()
+	decoder := json.NewDecoder(http.MaxBytesReader(w, req.Body, maxActivityBodyBytes))
+	var batch ActivityBatchPayload
+	if err := decoder.Decode(&batch); err != nil {
+		writeActivityDecodeError(w, err)
+		return
+	}
+	if err := decoder.Decode(&struct{}{}); err != io.EOF {
+		writeActivityDecodeError(w, err)
+		return
+	}
+	if err := batch.NormalizeAndValidate(); err != nil {
+		writeError(w, http.StatusBadRequest, err.Error())
+		return
+	}
+
+	event := events.Event{
+		Name:      "browser.activity.batch",
+		Timestamp: time.Now().UTC().Format(time.RFC3339Nano),
+		Payload:   batch.EventPayload(),
+	}
+	if err := options.PersistActivity(event); err != nil {
+		log.Printf("[browserreceiver] persist activity %s: %v", batch.BatchID, err)
+		writeError(w, http.StatusServiceUnavailable, "activity storage unavailable")
+		return
+	}
+	if r.bus != nil {
+		r.bus.Publish(event)
+	}
+
+	w.WriteHeader(http.StatusAccepted)
+	_ = json.NewEncoder(w).Encode(map[string]string{
+		"status":  "accepted",
+		"batchId": batch.BatchID,
+	})
+}
+
+func (r *Receiver) currentOptions() Options {
+	if r == nil {
+		return Options{}
+	}
+	r.optionsMu.RLock()
+	defer r.optionsMu.RUnlock()
+	return r.options
+}
+
+func (r *Receiver) validateReceiverToken(req *http.Request) error {
+	if r == nil {
+		return nil
+	}
+	r.optionsMu.RLock()
+	requireToken := r.options.RequireToken
+	expected := strings.TrimSpace(r.options.ReceiverToken)
+	r.optionsMu.RUnlock()
+	if !requireToken {
+		return nil
+	}
+	if expected == "" {
+		return fmt.Errorf("receiver token required")
+	}
+	supplied := strings.TrimSpace(req.Header.Get(receiverTokenHeader))
+	if supplied == "" {
+		return fmt.Errorf("receiver token required")
+	}
+	if subtle.ConstantTimeCompare([]byte(supplied), []byte(expected)) != 1 {
+		return fmt.Errorf("receiver token invalid")
+	}
+	return nil
+}
+
+func (r *Receiver) annotateWorkspace(payload map[string]interface{}) {
+	if r == nil || r.workspaceProvider == nil || payload == nil {
+		return
+	}
+	if _, ok := payload["workspaceRootPath"]; ok {
+		return
+	}
+	workspaceRoot := strings.TrimSpace(r.workspaceProvider())
+	if workspaceRoot == "" {
+		return
+	}
+	payload["workspaceRootPath"] = workspaceRoot
+	payload["workspaceName"] = workspaceRoot
+}
+
+func (p CapturePayload) Validate() error {
+	if p.SchemaVersion != 1 {
+		return fmt.Errorf("unsupported schemaVersion")
+	}
+	if strings.TrimSpace(p.CaptureID) == "" {
+		return fmt.Errorf("captureId is required")
+	}
+	if err := validateCaptureText(p.CaptureID, "captureId", maxCaptureIDBytes); err != nil {
+		return err
+	}
+	if strings.TrimSpace(p.CapturedAt) == "" {
+		return fmt.Errorf("capturedAt is required")
+	}
+	if err := validateCaptureText(p.CapturedAt, "capturedAt", maxCapturedAtBytes); err != nil {
+		return err
+	}
+	if p.Kind != "page" && p.Kind != "selection" && p.Kind != "link" && p.Kind != "file" {
+		return fmt.Errorf("unsupported kind")
+	}
+	if strings.TrimSpace(p.Page.URL) == "" {
+		return fmt.Errorf("page.url is required")
+	}
+	if err := validateCaptureText(p.Source, "source", maxCaptureSourceBytes); err != nil {
+		return err
+	}
+	if err := validateCaptureText(p.Page.URL, "page.url", maxPageURLBytes); err != nil {
+		return err
+	}
+	if err := validateCaptureText(p.Page.Title, "page.title", maxPageTitleBytes); err != nil {
+		return err
+	}
+	if err := validateCaptureText(p.Page.Domain, "page.domain", maxPageDomainBytes); err != nil {
+		return err
+	}
+	if p.Browser != nil {
+		if err := validateCaptureText(p.Browser.Name, "browser.name", maxBrowserNameBytes); err != nil {
+			return err
+		}
+	}
+	if p.Kind == "selection" && (p.Selection == nil || strings.TrimSpace(p.Selection.Text) == "") {
+		return fmt.Errorf("selection.text is required")
+	}
+	if p.Kind == "selection" {
+		if err := validateCaptureText(p.Selection.Text, "selection.text", maxSelectionTextBytes); err != nil {
+			return err
+		}
+	}
+	if p.Kind == "link" {
+		if p.Link == nil || strings.TrimSpace(p.Link.URL) == "" {
+			return fmt.Errorf("link.url is required")
+		}
+		if err := validateCaptureText(p.Link.URL, "link.url", maxPageURLBytes); err != nil {
+			return err
+		}
+		if err := validateCaptureText(p.Link.Text, "link.text", maxLinkTextBytes); err != nil {
+			return err
+		}
+	}
+	if p.Kind == "file" {
+		if err := p.validateFile(); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// NormalizeAndValidate validates a batch before it is made durable and replaces
+// each submitted hostname with the shared canonical A-label form.
+func (p *ActivityBatchPayload) NormalizeAndValidate() error {
+	if p == nil || p.SchemaVersion != 1 {
+		return fmt.Errorf("unsupported schemaVersion")
+	}
+	if strings.TrimSpace(p.BatchID) == "" {
+		return fmt.Errorf("batchId is required")
+	}
+	if err := validateCaptureText(p.BatchID, "batchId", maxCaptureIDBytes); err != nil {
+		return err
+	}
+	if strings.TrimSpace(p.CreatedAt) == "" {
+		return fmt.Errorf("createdAt is required")
+	}
+	if _, err := time.Parse(time.RFC3339, p.CreatedAt); err != nil {
+		return fmt.Errorf("createdAt is invalid")
+	}
+	if err := validateCaptureText(p.CreatedAt, "createdAt", maxCapturedAtBytes); err != nil {
+		return err
+	}
+	if strings.TrimSpace(p.Source) == "" {
+		return fmt.Errorf("source is required")
+	}
+	if err := validateCaptureText(p.Source, "source", maxCaptureSourceBytes); err != nil {
+		return err
+	}
+	if len(p.Entries) == 0 || len(p.Entries) > maxActivityEntries {
+		return fmt.Errorf("entries must contain between 1 and %d items", maxActivityEntries)
+	}
+	for index := range p.Entries {
+		entry := &p.Entries[index]
+		canonical := hostname.NormalizeHostnameV1(entry.Hostname)
+		if canonical == "" {
+			return fmt.Errorf("entries[%d].hostname is invalid", index)
+		}
+		startedAt, err := time.Parse(time.RFC3339, entry.StartedAt)
+		if err != nil {
+			return fmt.Errorf("entries[%d].startedAt is invalid", index)
+		}
+		endedAt, err := time.Parse(time.RFC3339, entry.EndedAt)
+		if err != nil {
+			return fmt.Errorf("entries[%d].endedAt is invalid", index)
+		}
+		interval := endedAt.Sub(startedAt)
+		if interval <= 0 || interval > maxActivityDuration {
+			return fmt.Errorf("entries[%d] interval must be between 1 second and %s", index, maxActivityDuration)
+		}
+		if entry.DurationSeconds <= 0 || entry.DurationSeconds > int64(maxActivityDuration/time.Second) || time.Duration(entry.DurationSeconds)*time.Second > interval {
+			return fmt.Errorf("entries[%d].durationSeconds is invalid", index)
+		}
+		entry.Hostname = canonical
+	}
+	return nil
+}
+
+func (p ActivityBatchPayload) EventPayload() map[string]interface{} {
+	entries := make([]map[string]interface{}, 0, len(p.Entries))
+	for _, entry := range p.Entries {
+		entries = append(entries, map[string]interface{}{
+			"hostname":        entry.Hostname,
+			"startedAt":       entry.StartedAt,
+			"endedAt":         entry.EndedAt,
+			"durationSeconds": entry.DurationSeconds,
+		})
+	}
+	return map[string]interface{}{
+		"batchId":   strings.TrimSpace(p.BatchID),
+		"createdAt": strings.TrimSpace(p.CreatedAt),
+		"source":    strings.TrimSpace(p.Source),
+		"entries":   entries,
+	}
+}
+
+func (p CapturePayload) validateFile() error {
+	if p.File == nil || strings.TrimSpace(p.File.Name) == "" {
+		return fmt.Errorf("file.name is required")
+	}
+	if p.File.Text == "" && strings.TrimSpace(p.File.DataBase64) == "" {
+		return fmt.Errorf("file.text or file.dataBase64 is required")
+	}
+	if p.File.Size < 0 || p.File.Size > maxFileBytes {
+		return fmt.Errorf("file.size exceeds limit")
+	}
+	if err := validateCaptureText(p.File.Name, "file.name", maxFileNameBytes); err != nil {
+		return err
+	}
+	if err := validateCaptureText(p.File.Mime, "file.mime", maxFileMimeBytes); err != nil {
+		return err
+	}
+	if err := validateCaptureText(p.File.Text, "file.text", maxFileTextBytes); err != nil {
+		return err
+	}
+	dataBase64 := strings.TrimSpace(p.File.DataBase64)
+	if dataBase64 == "" {
+		return nil
+	}
+	if len(dataBase64) > maxFileDataBase64Bytes {
+		return fmt.Errorf("file.dataBase64 exceeds limit")
+	}
+	data, err := base64.StdEncoding.DecodeString(dataBase64)
+	if err != nil {
+		return fmt.Errorf("file.dataBase64 is invalid")
+	}
+	if len(data) > maxFileBytes {
+		return fmt.Errorf("file.dataBase64 exceeds limit")
+	}
+	return nil
+}
+
+func validateCaptureText(value, field string, maxBytes int) error {
+	if len(value) > maxBytes {
+		return fmt.Errorf("%s exceeds limit", field)
+	}
+	return nil
+}
+
+func (p CapturePayload) EventPayload() map[string]interface{} {
+	pageURL := strings.TrimSpace(p.Page.URL)
+	result := map[string]interface{}{
+		"captureId":  strings.TrimSpace(p.CaptureID),
+		"capturedAt": strings.TrimSpace(p.CapturedAt),
+		"source":     strings.TrimSpace(p.Source),
+		"kind":       p.Kind,
+		"url":        pageURL,
+		"title":      strings.TrimSpace(p.Page.Title),
+		"domain":     captureDomain(pageURL, p.Page.Domain),
+	}
+	if p.Browser != nil {
+		result["browserName"] = strings.TrimSpace(p.Browser.Name)
+	}
+	if p.Context != nil {
+		result["context"] = p.Context
+	}
+
+	switch p.Kind {
+	case "selection":
+		result["text"] = strings.TrimSpace(p.Selection.Text)
+	case "link":
+		linkURL := strings.TrimSpace(p.Link.URL)
+		result["url"] = linkURL
+		result["title"] = strings.TrimSpace(p.Link.Text)
+		result["domain"] = captureDomain(linkURL, "")
+	case "file":
+		result["fileName"] = strings.TrimSpace(p.File.Name)
+		result["fileMime"] = strings.TrimSpace(p.File.Mime)
+		result["fileSize"] = p.File.Size
+		result["fileText"] = p.File.Text
+		result["fileDataBase64"] = strings.TrimSpace(p.File.DataBase64)
+	}
+	return result
+}
+
+func captureDomain(rawURL, fallback string) string {
+	if normalized := hostname.NormalizeURLHostnameV1(rawURL); normalized != "" {
+		return normalized
+	}
+	return hostname.NormalizeHostnameV1(fallback)
+}
+
+func writeActivityDecodeError(w http.ResponseWriter, err error) {
+	var maxBytesErr *http.MaxBytesError
+	if errors.As(err, &maxBytesErr) {
+		writeError(w, http.StatusRequestEntityTooLarge, "activity payload exceeds limit")
+		return
+	}
+	writeError(w, http.StatusBadRequest, "invalid JSON")
+}
+
+func writeError(w http.ResponseWriter, status int, message string) {
+	w.WriteHeader(status)
+	_ = json.NewEncoder(w).Encode(map[string]string{"error": message})
+}

internal/core/browserreceiver/receiver_test.go

@@ -0,0 +1,684 @@
+package browserreceiver
+
+import (
+	"bytes"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/verstak/verstak-desktop/internal/core/events"
+)
+
+func TestReceiverAcceptsSelectionCaptureAndPublishesEvent(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.selection", func(event events.Event) {
+		received <- event
+	})
+
+	receiver := New(bus)
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-123",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "selection",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article",
+			"domain": "example.com"
+		},
+		"selection": {
+			"text": "selected text"
+		},
+		"browser": {
+			"name": "Chromium"
+		}
+	}`
+
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusAccepted {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusAccepted, rec.Body.String())
+	}
+	var response map[string]string
+	if err := json.Unmarshal(rec.Body.Bytes(), &response); err != nil {
+		t.Fatalf("response json: %v", err)
+	}
+	if response["status"] != "accepted" {
+		t.Fatalf("response status = %q, want accepted", response["status"])
+	}
+	if response["captureId"] != "capture-123" {
+		t.Fatalf("response captureId = %q, want capture-123", response["captureId"])
+	}
+
+	event := <-received
+	if event.Name != "browser.capture.selection" {
+		t.Fatalf("event name = %q, want browser.capture.selection", event.Name)
+	}
+	payload, ok := event.Payload.(map[string]interface{})
+	if !ok {
+		t.Fatalf("event payload type = %T, want map[string]interface{}", event.Payload)
+	}
+	if payload["captureId"] != "capture-123" {
+		t.Fatalf("payload captureId = %v, want capture-123", payload["captureId"])
+	}
+	if payload["url"] != "https://example.com/article" {
+		t.Fatalf("payload url = %v, want https://example.com/article", payload["url"])
+	}
+	if payload["title"] != "Example Article" {
+		t.Fatalf("payload title = %v, want Example Article", payload["title"])
+	}
+	if payload["text"] != "selected text" {
+		t.Fatalf("payload text = %v, want selected text", payload["text"])
+	}
+	if payload["capturedAt"] != "2026-06-27T00:00:00.000Z" {
+		t.Fatalf("payload capturedAt = %v, want documented timestamp", payload["capturedAt"])
+	}
+	if payload["domain"] != "example.com" {
+		t.Fatalf("payload domain = %v, want example.com", payload["domain"])
+	}
+}
+
+func TestReceiverAcceptsFileCaptureAndPublishesEvent(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.file", func(event events.Event) {
+		received <- event
+	})
+
+	receiver := New(bus)
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-file",
+		"capturedAt": "2026-06-29T02:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "file",
+		"page": {
+			"url": "https://example.com/files",
+			"title": "Example Files",
+			"domain": "example.com"
+		},
+		"file": {
+			"name": "notes.txt",
+			"mime": "text/plain",
+			"size": 11,
+			"text": "hello file",
+			"dataBase64": "aGVsbG8gZmlsZQ=="
+		},
+		"browser": {
+			"name": "Firefox"
+		}
+	}`
+
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusAccepted {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusAccepted, rec.Body.String())
+	}
+	event := <-received
+	if event.Name != "browser.capture.file" {
+		t.Fatalf("event name = %q, want browser.capture.file", event.Name)
+	}
+	payload, ok := event.Payload.(map[string]interface{})
+	if !ok {
+		t.Fatalf("event payload type = %T, want map[string]interface{}", event.Payload)
+	}
+	if payload["kind"] != "file" {
+		t.Fatalf("payload kind = %v, want file", payload["kind"])
+	}
+	if payload["fileName"] != "notes.txt" {
+		t.Fatalf("payload fileName = %v, want notes.txt", payload["fileName"])
+	}
+	if payload["fileMime"] != "text/plain" {
+		t.Fatalf("payload fileMime = %v, want text/plain", payload["fileMime"])
+	}
+	if payload["fileSize"] != int64(11) {
+		t.Fatalf("payload fileSize = %v, want 11", payload["fileSize"])
+	}
+	if payload["fileText"] != "hello file" {
+		t.Fatalf("payload fileText = %v, want hello file", payload["fileText"])
+	}
+	if payload["fileDataBase64"] != "aGVsbG8gZmlsZQ==" {
+		t.Fatalf("payload fileDataBase64 = %v, want aGVsbG8gZmlsZQ==", payload["fileDataBase64"])
+	}
+}
+
+func TestReceiverAnnotatesCaptureWithCurrentWorkspace(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		received <- event
+	})
+
+	receiver := New(bus, func() string { return "Project" })
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-workspace",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "page",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`
+
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusAccepted {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusAccepted, rec.Body.String())
+	}
+
+	event := <-received
+	payload, ok := event.Payload.(map[string]interface{})
+	if !ok {
+		t.Fatalf("event payload type = %T, want map[string]interface{}", event.Payload)
+	}
+	if payload["workspaceRootPath"] != "Project" {
+		t.Fatalf("payload workspaceRootPath = %v, want Project", payload["workspaceRootPath"])
+	}
+	if payload["workspaceName"] != "Project" {
+		t.Fatalf("payload workspaceName = %v, want Project", payload["workspaceName"])
+	}
+}
+
+func TestReceiverLeavesCaptureUnassignedWithoutCurrentWorkspace(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		received <- event
+	})
+
+	receiver := New(bus, func() string { return "" })
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-unassigned",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "page",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`
+
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusAccepted {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusAccepted, rec.Body.String())
+	}
+	event := <-received
+	payload, ok := event.Payload.(map[string]interface{})
+	if !ok {
+		t.Fatalf("event payload type = %T, want map[string]interface{}", event.Payload)
+	}
+	if _, ok := payload["workspaceRootPath"]; ok {
+		t.Fatalf("workspaceRootPath = %v, want absent for an unassigned capture", payload["workspaceRootPath"])
+	}
+	if _, ok := payload["workspaceName"]; ok {
+		t.Fatalf("workspaceName = %v, want absent for an unassigned capture", payload["workspaceName"])
+	}
+}
+
+func TestReceiverAcceptsDomainActivityBatchAfterDurablePersistence(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.activity.batch", func(event events.Event) {
+		received <- event
+	})
+	persisted := 0
+	receiver := NewWithOptions(bus, Options{
+		ActivityAvailable: func() bool { return true },
+		PersistActivity: func(event events.Event) error {
+			persisted++
+			return nil
+		},
+	})
+	body := `{
+		"schemaVersion": 1,
+		"batchId": "batch-123",
+		"createdAt": "2026-07-12T10:05:00.000Z",
+		"source": "verstak-browser-extension",
+		"entries": [{
+			"hostname": "пример.рф",
+			"startedAt": "2026-07-12T10:00:00.000Z",
+			"endedAt": "2026-07-12T10:05:00.000Z",
+			"durationSeconds": 300
+		}]
+	}`
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-activity/v1/batches", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusAccepted {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusAccepted, rec.Body.String())
+	}
+	if persisted != 1 {
+		t.Fatalf("persisted = %d, want 1 before acknowledgement", persisted)
+	}
+	var response map[string]string
+	if err := json.Unmarshal(rec.Body.Bytes(), &response); err != nil {
+		t.Fatalf("response json: %v", err)
+	}
+	if response["batchId"] != "batch-123" || response["status"] != "accepted" {
+		t.Fatalf("response = %+v, want accepted batch-123", response)
+	}
+	event := <-received
+	payload, ok := event.Payload.(map[string]interface{})
+	if !ok {
+		t.Fatalf("event payload type = %T, want map[string]interface{}", event.Payload)
+	}
+	if payload["batchId"] != "batch-123" {
+		t.Fatalf("event payload = %+v, want batch id", payload)
+	}
+	entries, ok := payload["entries"].([]map[string]interface{})
+	if !ok || len(entries) != 1 || entries[0]["hostname"] != "xn--e1afmkfd.xn--p1ai" {
+		t.Fatalf("event entries = %+v, want one canonical hostname", payload["entries"])
+	}
+	if _, ok := payload["url"]; ok {
+		t.Fatalf("activity payload must not contain URL: %+v", payload)
+	}
+}
+
+func TestReceiverRejectsDomainActivityWithoutConsumerOrValidInterval(t *testing.T) {
+	for _, tc := range []struct {
+		name     string
+		receiver *Receiver
+		body     string
+		wantCode int
+	}{
+		{
+			name:     "consumer unavailable",
+			receiver: New(events.NewBus()),
+			body:     `{"schemaVersion":1,"batchId":"batch-a","createdAt":"2026-07-12T10:05:00Z","source":"verstak-browser-extension","entries":[{"hostname":"example.com","startedAt":"2026-07-12T10:00:00Z","endedAt":"2026-07-12T10:05:00Z","durationSeconds":300}]}`,
+			wantCode: http.StatusServiceUnavailable,
+		},
+		{
+			name: "duration too long",
+			receiver: NewWithOptions(events.NewBus(), Options{
+				ActivityAvailable: func() bool { return true },
+				PersistActivity:   func(events.Event) error { return nil },
+			}),
+			body:     `{"schemaVersion":1,"batchId":"batch-b","createdAt":"2026-07-12T10:05:00Z","source":"verstak-browser-extension","entries":[{"hostname":"example.com","startedAt":"2026-07-12T10:00:00Z","endedAt":"2026-07-12T10:20:01Z","durationSeconds":1201}]}`,
+			wantCode: http.StatusBadRequest,
+		},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			req := httptest.NewRequest(http.MethodPost, "/api/browser-activity/v1/batches", strings.NewReader(tc.body))
+			rec := httptest.NewRecorder()
+			tc.receiver.ServeHTTP(rec, req)
+			if rec.Code != tc.wantCode {
+				t.Fatalf("status = %d, want %d; body=%s", rec.Code, tc.wantCode, rec.Body.String())
+			}
+		})
+	}
+}
+
+func TestReceiverRequiresTokenWhenPaired(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		received <- event
+	})
+	receiver := NewWithOptions(bus, Options{RequireToken: true, ReceiverToken: "pair-token"})
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-paired",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "page",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`
+
+	for _, tc := range []struct {
+		name      string
+		token     string
+		wantError string
+	}{
+		{name: "missing", token: "", wantError: "receiver token required"},
+		{name: "wrong", token: "wrong-token", wantError: "receiver token invalid"},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+			if tc.token != "" {
+				req.Header.Set("X-Verstak-Receiver-Token", tc.token)
+			}
+			rec := httptest.NewRecorder()
+
+			receiver.ServeHTTP(rec, req)
+
+			if rec.Code != http.StatusUnauthorized {
+				t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusUnauthorized, rec.Body.String())
+			}
+			if !bytes.Contains(rec.Body.Bytes(), []byte(tc.wantError)) {
+				t.Fatalf("response body = %q, want %q", rec.Body.String(), tc.wantError)
+			}
+			select {
+			case event := <-received:
+				t.Fatalf("unexpected event published for rejected capture: %#v", event)
+			default:
+			}
+		})
+	}
+}
+
+func TestReceiverAcceptsPairedToken(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		received <- event
+	})
+	receiver := NewWithOptions(bus, Options{RequireToken: true, ReceiverToken: "pair-token"})
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-paired",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "page",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	req.Header.Set("X-Verstak-Receiver-Token", "pair-token")
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusAccepted {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusAccepted, rec.Body.String())
+	}
+	event := <-received
+	if event.Name != "browser.capture.page" {
+		t.Fatalf("event name = %q, want browser.capture.page", event.Name)
+	}
+}
+
+func TestReceiverRejectsCaptureWhenInboxIsUnavailable(t *testing.T) {
+	bus := events.NewBus()
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		t.Fatalf("unexpected event while inbox is unavailable: %#v", event)
+	})
+	receiver := NewWithOptions(bus, Options{
+		Available: func() bool { return false },
+	})
+	req := httptest.NewRequest(http.MethodPost, capturePath, strings.NewReader(`{
+		"schemaVersion": 1,
+		"captureId": "capture-no-vault",
+		"capturedAt": "2026-07-11T12:00:00Z",
+		"kind": "page",
+		"page": {"url": "https://example.com"}
+	}`))
+	res := httptest.NewRecorder()
+
+	receiver.ServeHTTP(res, req)
+
+	if res.Code != http.StatusServiceUnavailable {
+		t.Fatalf("status = %d, want %d; body=%s", res.Code, http.StatusServiceUnavailable, res.Body.String())
+	}
+}
+
+func TestReceiverDoesNotAcknowledgeFailedPersistence(t *testing.T) {
+	bus := events.NewBus()
+	published := false
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		published = true
+	})
+	receiver := NewWithOptions(bus, Options{
+		Available: func() bool { return true },
+		Persist: func(event events.Event) error {
+			return errors.New("disk full")
+		},
+	})
+	req := httptest.NewRequest(http.MethodPost, capturePath, strings.NewReader(`{
+		"schemaVersion": 1,
+		"captureId": "capture-disk-full",
+		"capturedAt": "2026-07-11T12:00:00Z",
+		"kind": "page",
+		"page": {"url": "https://example.com"}
+	}`))
+	res := httptest.NewRecorder()
+
+	receiver.ServeHTTP(res, req)
+
+	if res.Code != http.StatusServiceUnavailable {
+		t.Fatalf("status = %d, want %d; body=%s", res.Code, http.StatusServiceUnavailable, res.Body.String())
+	}
+	if published {
+		t.Fatal("capture event was published after persistence failed")
+	}
+}
+
+func TestReceiverRotatesPairedToken(t *testing.T) {
+	bus := events.NewBus()
+	bus.Subscribe("browser.capture.page", func(event events.Event) {})
+	receiver := NewWithOptions(bus, Options{RequireToken: true, ReceiverToken: "old-token"})
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-rotated-token",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"kind": "page",
+		"page": {"url": "https://example.com"}
+	}`
+
+	request := func(token string) *httptest.ResponseRecorder {
+		req := httptest.NewRequest(http.MethodPost, capturePath, bytes.NewBufferString(body))
+		req.Header.Set(receiverTokenHeader, token)
+		res := httptest.NewRecorder()
+		receiver.ServeHTTP(res, req)
+		return res
+	}
+
+	if res := request("old-token"); res.Code != http.StatusAccepted {
+		t.Fatalf("old token before rotation status = %d, want %d", res.Code, http.StatusAccepted)
+	}
+	receiver.SetReceiverToken("new-token")
+	if res := request("old-token"); res.Code != http.StatusUnauthorized {
+		t.Fatalf("old token after rotation status = %d, want %d", res.Code, http.StatusUnauthorized)
+	}
+	if res := request("new-token"); res.Code != http.StatusAccepted {
+		t.Fatalf("new token after rotation status = %d, want %d", res.Code, http.StatusAccepted)
+	}
+}
+
+func TestServerStartsOnLocalAddressAndAcceptsCapture(t *testing.T) {
+	bus := events.NewBus()
+	bus.Subscribe("browser.capture.page", func(event events.Event) {})
+	receiver := New(bus)
+	server, err := Start("127.0.0.1:0", receiver)
+	if err != nil {
+		t.Fatalf("Start: %v", err)
+	}
+	defer server.Close()
+
+	response, err := http.Post(server.URL()+capturePath, "application/json", bytes.NewBufferString(`{
+		"schemaVersion": 1,
+		"captureId": "capture-server",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "page",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`))
+	if err != nil {
+		t.Fatalf("post capture: %v", err)
+	}
+	defer response.Body.Close()
+
+	if response.StatusCode != http.StatusAccepted {
+		body, _ := io.ReadAll(response.Body)
+		t.Fatalf("status = %d, want %d; body=%s", response.StatusCode, http.StatusAccepted, string(body))
+	}
+}
+
+func TestReceiverRejectsCaptureWhenNoConsumerIsRegistered(t *testing.T) {
+	receiver := New(events.NewBus())
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-queued",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "page",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`
+
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusServiceUnavailable {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusServiceUnavailable, rec.Body.String())
+	}
+	if !bytes.Contains(rec.Body.Bytes(), []byte("browser inbox unavailable")) {
+		t.Fatalf("response body = %q, want unavailable error", rec.Body.String())
+	}
+}
+
+func TestReceiverRejectsInvalidCapturePayload(t *testing.T) {
+	receiver := New(events.NewBus())
+	body := `{
+		"schemaVersion": 1,
+		"captureId": "capture-123",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"source": "verstak-browser-extension",
+		"kind": "link",
+		"page": {
+			"url": "https://example.com/article",
+			"title": "Example Article"
+		}
+	}`
+
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", bytes.NewBufferString(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusBadRequest {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusBadRequest, rec.Body.String())
+	}
+	if !bytes.Contains(rec.Body.Bytes(), []byte("link.url is required")) {
+		t.Fatalf("response body = %q, want validation error", rec.Body.String())
+	}
+}
+
+func TestReceiverRejectsOversizedCaptureBody(t *testing.T) {
+	bus := events.NewBus()
+	received := make(chan events.Event, 1)
+	bus.Subscribe("browser.capture.page", func(event events.Event) {
+		received <- event
+	})
+	receiver := New(bus)
+
+	const maxCaptureBodyBytes = 12 * 1024 * 1024
+	body := fmt.Sprintf(`{
+		"schemaVersion": 1,
+		"captureId": "capture-oversized",
+		"capturedAt": "2026-06-27T00:00:00.000Z",
+		"kind": "page",
+		"page": {"url": "https://example.com", "title": %q}
+	}`, strings.Repeat("x", maxCaptureBodyBytes))
+	req := httptest.NewRequest(http.MethodPost, "/api/browser-inbox/v1/captures", strings.NewReader(body))
+	rec := httptest.NewRecorder()
+
+	receiver.ServeHTTP(rec, req)
+
+	if rec.Code != http.StatusRequestEntityTooLarge {
+		t.Fatalf("status = %d, want %d; body=%s", rec.Code, http.StatusRequestEntityTooLarge, rec.Body.String())
+	}
+	select {
+	case event := <-received:
+		t.Fatalf("unexpected event published for oversized capture: %#v", event)
+	default:
+	}
+}
+
+func TestCapturePayloadRejectsUnsafeFileContent(t *testing.T) {
+	const maxFileBytes = 8 * 1024 * 1024
+	const maxFileTextBytes = 2 * 1024 * 1024
+
+	newFilePayload := func() CapturePayload {
+		return CapturePayload{
+			SchemaVersion: 1,
+			CaptureID:     "capture-file-validation",
+			CapturedAt:    "2026-06-27T00:00:00.000Z",
+			Kind:          "file",
+			Page:          CapturePage{URL: "https://example.com"},
+			File:          &CaptureFile{Name: "attachment.bin", Size: 1, DataBase64: "AQ=="},
+		}
+	}
+
+	tests := []struct {
+		name string
+		edit func(*CapturePayload)
+		want string
+	}{
+		{
+			name: "oversized declared size",
+			edit: func(payload *CapturePayload) {
+				payload.File.Size = maxFileBytes + 1
+			},
+			want: "file.size exceeds limit",
+		},
+		{
+			name: "invalid base64",
+			edit: func(payload *CapturePayload) {
+				payload.File.DataBase64 = "not base64"
+			},
+			want: "file.dataBase64 is invalid",
+		},
+		{
+			name: "oversized decoded data",
+			edit: func(payload *CapturePayload) {
+				payload.File.DataBase64 = base64.StdEncoding.EncodeToString(make([]byte, maxFileBytes+1))
+			},
+			want: "file.dataBase64 exceeds limit",
+		},
+		{
+			name: "oversized text",
+			edit: func(payload *CapturePayload) {
+				payload.File.DataBase64 = ""
+				payload.File.Text = strings.Repeat("x", maxFileTextBytes+1)
+			},
+			want: "file.text exceeds limit",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			payload := newFilePayload()
+			tt.edit(&payload)
+			if err := payload.Validate(); err == nil || !strings.Contains(err.Error(), tt.want) {
+				t.Fatalf("Validate() error = %v, want %q", err, tt.want)
+			}
+		})
+	}
+}

internal/core/capability/registry.go

@@ -33,10 +33,18 @@ func (r *Registry) Register(pluginID string, capabilities []string) error {
 	r.mu.Lock()
 	defer r.mu.Unlock()
 
+	pending := make(map[string]struct{}, len(capabilities))
 	for _, name := range capabilities {
 		if existing, ok := r.capabilities[name]; ok {
 			return fmt.Errorf("capability %q already registered by plugin %q", name, existing.PluginID)
 		}
+		if _, ok := pending[name]; ok {
+			return fmt.Errorf("capability %q is registered more than once by plugin %q", name, pluginID)
+		}
+		pending[name] = struct{}{}
+	}
+
+	for _, name := range capabilities {
 		r.capabilities[name] = &Entry{
 			Name:     name,
 			PluginID: pluginID,

internal/core/capability/registry_test.go

@@ -0,0 +1,21 @@
+package capability
+
+import "testing"
+
+func TestRegisterDoesNotPartiallyRegisterCapabilitiesOnConflict(t *testing.T) {
+	registry := NewRegistry()
+	if err := registry.Register("existing.plugin", []string{"shared.capability"}); err != nil {
+		t.Fatalf("register existing capability: %v", err)
+	}
+
+	if err := registry.Register("failed.plugin", []string{"new.capability", "shared.capability"}); err == nil {
+		t.Fatal("Register returned nil for a duplicate capability")
+	}
+	if registry.Has("new.capability") {
+		t.Fatal("Register leaked a capability from the failed registration")
+	}
+	entry := registry.Get("shared.capability")
+	if entry == nil || entry.PluginID != "existing.plugin" {
+		t.Fatalf("shared capability entry = %#v, want existing.plugin", entry)
+	}
+}

internal/core/contribution/registry.go

@@ -22,6 +22,85 @@ type Registry struct {
 	searchProviders   []ContributionSearchProvider
 	activityProviders []ContributionActivityProvider
 	statusBarItems    []ContributionStatusBarItem
+	openProviders     []ContributionOpenProvider
+	workspaceItems    []ContributionWorkspaceItem
+}
+
+// ContributionPointType defines the type of contribution point.
+type ContributionPointType string
+
+const (
+	PointViews           ContributionPointType = "views"
+	PointCommands        ContributionPointType = "commands"
+	PointSettingsPanels  ContributionPointType = "settingsPanels"
+	PointSidebarItems    ContributionPointType = "sidebarItems"
+	PointFileActions     ContributionPointType = "fileActions"
+	PointNoteActions     ContributionPointType = "noteActions"
+	PointContextMenus    ContributionPointType = "contextMenus"
+	PointSearchProviders ContributionPointType = "searchProviders"
+	PointActivity        ContributionPointType = "activityProviders"
+	PointStatusBar       ContributionPointType = "statusBarItems"
+	PointOpenProviders   ContributionPointType = "openProviders"
+	PointWorkspaceItems  ContributionPointType = "workspaceItems"
+)
+
+// ListByPoint returns all contributions for a given point type.
+func (r *Registry) ListByPoint(point ContributionPointType) []interface{} {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+
+	var result []interface{}
+	switch point {
+	case PointViews:
+		for _, v := range r.views {
+			result = append(result, v)
+		}
+	case PointCommands:
+		for _, v := range r.commands {
+			result = append(result, v)
+		}
+	case PointSettingsPanels:
+		for _, v := range r.settingsPanels {
+			result = append(result, v)
+		}
+	case PointSidebarItems:
+		for _, v := range r.sidebarItems {
+			result = append(result, v)
+		}
+	case PointFileActions:
+		for _, v := range r.fileActions {
+			result = append(result, v)
+		}
+	case PointNoteActions:
+		for _, v := range r.noteActions {
+			result = append(result, v)
+		}
+	case PointContextMenus:
+		for _, v := range r.contextMenus {
+			result = append(result, v)
+		}
+	case PointSearchProviders:
+		for _, v := range r.searchProviders {
+			result = append(result, v)
+		}
+	case PointActivity:
+		for _, v := range r.activityProviders {
+			result = append(result, v)
+		}
+	case PointStatusBar:
+		for _, v := range r.statusBarItems {
+			result = append(result, v)
+		}
+	case PointOpenProviders:
+		for _, v := range r.openProviders {
+			result = append(result, v)
+		}
+	case PointWorkspaceItems:
+		for _, v := range r.workspaceItems {
+			result = append(result, v)
+		}
+	}
+	return result
 }
 
 type ContributionView struct {
@@ -69,16 +148,43 @@ type ContributionStatusBarItem struct {
 	Item     plugin.ContributionStatusBarItem `json:"item"`
 }
 
+type ContributionOpenProvider struct {
+	PluginID string                          `json:"pluginId"`
+	Item     plugin.ContributionOpenProvider `json:"item"`
+}
+
+// ContributionWorkspaceItem is a workspace tool contribution.
+type ContributionWorkspaceItem struct {
+	PluginID string                           `json:"pluginId"`
+	Item     plugin.ContributionWorkspaceItem `json:"item"`
+}
+
 // NewRegistry creates a new contribution registry.
 func NewRegistry() *Registry {
 	return &Registry{}
 }
 
 // Register adds all contributions from a plugin.
+// If the plugin already has registered contributions they are replaced
+// (supports reload without duplicates).
 func (r *Registry) Register(pluginID string, c *plugin.Contributions) {
 	r.mu.Lock()
 	defer r.mu.Unlock()
 
+	// Remove existing contributions for this plugin to prevent duplicates on reload
+	r.views = removeViews(r.views, pluginID)
+	r.commands = removeCommands(r.commands, pluginID)
+	r.settingsPanels = removeSettingsPanels(r.settingsPanels, pluginID)
+	r.sidebarItems = removeSidebarItems(r.sidebarItems, pluginID)
+	r.fileActions = removeActions(r.fileActions, pluginID)
+	r.noteActions = removeActions(r.noteActions, pluginID)
+	r.contextMenus = removeContextMenus(r.contextMenus, pluginID)
+	r.searchProviders = removeSearchProviders(r.searchProviders, pluginID)
+	r.activityProviders = removeActivityProviders(r.activityProviders, pluginID)
+	r.statusBarItems = removeStatusBarItems(r.statusBarItems, pluginID)
+	r.openProviders = removeOpenProviders(r.openProviders, pluginID)
+	r.workspaceItems = removeWorkspaceItems(r.workspaceItems, pluginID)
+
 	for _, item := range c.Views {
 		r.views = append(r.views, ContributionView{PluginID: pluginID, Item: item})
 	}
@@ -109,6 +215,12 @@ func (r *Registry) Register(pluginID string, c *plugin.Contributions) {
 	for _, item := range c.StatusBarItems {
 		r.statusBarItems = append(r.statusBarItems, ContributionStatusBarItem{PluginID: pluginID, Item: item})
 	}
+	for _, item := range c.OpenProviders {
+		r.openProviders = append(r.openProviders, ContributionOpenProvider{PluginID: pluginID, Item: item})
+	}
+	for _, item := range c.WorkspaceItems {
+		r.workspaceItems = append(r.workspaceItems, ContributionWorkspaceItem{PluginID: pluginID, Item: item})
+	}
 }
 
 // Unregister removes all contributions from a plugin.
@@ -126,6 +238,8 @@ func (r *Registry) Unregister(pluginID string) {
 	r.searchProviders = removeSearchProviders(r.searchProviders, pluginID)
 	r.activityProviders = removeActivityProviders(r.activityProviders, pluginID)
 	r.statusBarItems = removeStatusBarItems(r.statusBarItems, pluginID)
+	r.openProviders = removeOpenProviders(r.openProviders, pluginID)
+	r.workspaceItems = removeWorkspaceItems(r.workspaceItems, pluginID)
 }
 
 // Getters — sorted for deterministic display.
@@ -166,6 +280,15 @@ func (r *Registry) SidebarItems() []ContributionSidebarItem {
 	return result
 }
 
+func (r *Registry) StatusBarItems() []ContributionStatusBarItem {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	result := make([]ContributionStatusBarItem, len(r.statusBarItems))
+	copy(result, r.statusBarItems)
+	sort.Slice(result, func(i, j int) bool { return result[i].Item.ID < result[j].Item.ID })
+	return result
+}
+
 func (r *Registry) FileActions() []ContributionAction {
 	r.mu.RLock()
 	defer r.mu.RUnlock()
@@ -184,6 +307,15 @@ func (r *Registry) NoteActions() []ContributionAction {
 	return result
 }
 
+func (r *Registry) ContextMenus() []ContributionContextMenuEntry {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	result := make([]ContributionContextMenuEntry, len(r.contextMenus))
+	copy(result, r.contextMenus)
+	sort.Slice(result, func(i, j int) bool { return result[i].Item.ID < result[j].Item.ID })
+	return result
+}
+
 func (r *Registry) SearchProviders() []ContributionSearchProvider {
 	r.mu.RLock()
 	defer r.mu.RUnlock()
@@ -193,6 +325,48 @@ func (r *Registry) SearchProviders() []ContributionSearchProvider {
 	return result
 }
 
+func (r *Registry) ActivityProviders() []ContributionActivityProvider {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	result := make([]ContributionActivityProvider, len(r.activityProviders))
+	copy(result, r.activityProviders)
+	sort.Slice(result, func(i, j int) bool {
+		if result[i].PluginID != result[j].PluginID {
+			return result[i].PluginID < result[j].PluginID
+		}
+		return result[i].Item.ID < result[j].Item.ID
+	})
+	return result
+}
+
+func (r *Registry) OpenProviders() []ContributionOpenProvider {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	result := make([]ContributionOpenProvider, len(r.openProviders))
+	copy(result, r.openProviders)
+	sort.Slice(result, func(i, j int) bool {
+		if result[i].PluginID != result[j].PluginID {
+			return result[i].PluginID < result[j].PluginID
+		}
+		return result[i].Item.ID < result[j].Item.ID
+	})
+	return result
+}
+
+func (r *Registry) WorkspaceItems() []ContributionWorkspaceItem {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	result := make([]ContributionWorkspaceItem, len(r.workspaceItems))
+	copy(result, r.workspaceItems)
+	sort.Slice(result, func(i, j int) bool {
+		if result[i].PluginID != result[j].PluginID {
+			return result[i].PluginID < result[j].PluginID
+		}
+		return result[i].Item.ID < result[j].Item.ID
+	})
+	return result
+}
+
 // ─── Remove helpers ─────────────────────────────────────────
 
 func removeViews(items []ContributionView, pluginID string) []ContributionView {
@@ -284,3 +458,23 @@ func removeStatusBarItems(items []ContributionStatusBarItem, pluginID string) []
 	}
 	return result
 }
+
+func removeOpenProviders(items []ContributionOpenProvider, pluginID string) []ContributionOpenProvider {
+	var result []ContributionOpenProvider
+	for _, item := range items {
+		if item.PluginID != pluginID {
+			result = append(result, item)
+		}
+	}
+	return result
+}
+
+func removeWorkspaceItems(items []ContributionWorkspaceItem, pluginID string) []ContributionWorkspaceItem {
+	var result []ContributionWorkspaceItem
+	for _, item := range items {
+		if item.PluginID != pluginID {
+			result = append(result, item)
+		}
+	}
+	return result
+}

internal/core/contribution/registry_test.go

@@ -0,0 +1,362 @@
+package contribution
+
+import (
+	"testing"
+
+	"github.com/verstak/verstak-desktop/internal/core/plugin"
+)
+
+// TestRegister_AddsContributions registers sidebar, view, command, settings contributions
+// for plugin "test.plugin" and verifies they appear via Views(), Commands(),
+// SettingsPanels(), SidebarItems().
+func TestRegister_AddsContributions(t *testing.T) {
+	r := NewRegistry()
+
+	contribs := &plugin.Contributions{
+		Views: []plugin.ContributionView{
+			{ID: "test.view1", Title: "View 1", Component: "TestComponent"},
+		},
+		Commands: []plugin.ContributionCommand{
+			{ID: "test.cmd1", Title: "Command 1"},
+		},
+		SettingsPanels: []plugin.ContributionSettingsPanel{
+			{ID: "test.settings1", Title: "Settings 1", Component: "SettingsComponent"},
+		},
+		SidebarItems: []plugin.ContributionSidebarItem{
+			{ID: "test.sidebar1", Title: "Sidebar 1", Icon: "icon", View: "test.view1", Position: 1},
+		},
+	}
+
+	r.Register("test.plugin", contribs)
+
+	// Verify counts
+	if got := len(r.Views()); got != 1 {
+		t.Errorf("Views(): got %d, want 1", got)
+	}
+	if got := len(r.Commands()); got != 1 {
+		t.Errorf("Commands(): got %d, want 1", got)
+	}
+	if got := len(r.SettingsPanels()); got != 1 {
+		t.Errorf("SettingsPanels(): got %d, want 1", got)
+	}
+	if got := len(r.SidebarItems()); got != 1 {
+		t.Errorf("SidebarItems(): got %d, want 1", got)
+	}
+
+	// Verify the PluginID is set correctly
+	if r.Views()[0].PluginID != "test.plugin" {
+		t.Errorf("Views()[0].PluginID = %q, want %q", r.Views()[0].PluginID, "test.plugin")
+	}
+	if r.Commands()[0].PluginID != "test.plugin" {
+		t.Errorf("Commands()[0].PluginID = %q, want %q", r.Commands()[0].PluginID, "test.plugin")
+	}
+	if r.SettingsPanels()[0].PluginID != "test.plugin" {
+		t.Errorf("SettingsPanels()[0].PluginID = %q, want %q", r.SettingsPanels()[0].PluginID, "test.plugin")
+	}
+	if r.SidebarItems()[0].PluginID != "test.plugin" {
+		t.Errorf("SidebarItems()[0].PluginID = %q, want %q", r.SidebarItems()[0].PluginID, "test.plugin")
+	}
+
+	// Verify item data is preserved
+	if r.Views()[0].Item.Title != "View 1" {
+		t.Errorf("Views()[0].Item.Title = %q, want %q", r.Views()[0].Item.Title, "View 1")
+	}
+	if r.Commands()[0].Item.Title != "Command 1" {
+		t.Errorf("Commands()[0].Item.Title = %q, want %q", r.Commands()[0].Item.Title, "Command 1")
+	}
+	if r.SettingsPanels()[0].Item.Title != "Settings 1" {
+		t.Errorf("SettingsPanels()[0].Item.Title = %q, want %q", r.SettingsPanels()[0].Item.Title, "Settings 1")
+	}
+	if r.SidebarItems()[0].Item.Title != "Sidebar 1" {
+		t.Errorf("SidebarItems()[0].Item.Title = %q, want %q", r.SidebarItems()[0].Item.Title, "Sidebar 1")
+	}
+}
+
+// TestUnregister_RemovesOwnedContributions registers for two plugins, unregisters one,
+// and verifies only that plugin's contributions are removed.
+func TestUnregister_RemovesOwnedContributions(t *testing.T) {
+	r := NewRegistry()
+
+	contribA := &plugin.Contributions{
+		Views: []plugin.ContributionView{
+			{ID: "a.view1", Title: "A View", Component: "A"},
+		},
+		Commands: []plugin.ContributionCommand{
+			{ID: "a.cmd1", Title: "A Command"},
+		},
+		SettingsPanels: []plugin.ContributionSettingsPanel{
+			{ID: "a.settings1", Title: "A Settings", Component: "A"},
+		},
+		SidebarItems: []plugin.ContributionSidebarItem{
+			{ID: "a.sidebar1", Title: "A Sidebar", View: "a.view1"},
+		},
+	}
+
+	contribB := &plugin.Contributions{
+		Views: []plugin.ContributionView{
+			{ID: "b.view1", Title: "B View", Component: "B"},
+		},
+		Commands: []plugin.ContributionCommand{
+			{ID: "b.cmd1", Title: "B Command"},
+		},
+		SettingsPanels: []plugin.ContributionSettingsPanel{
+			{ID: "b.settings1", Title: "B Settings", Component: "B"},
+		},
+		SidebarItems: []plugin.ContributionSidebarItem{
+			{ID: "b.sidebar1", Title: "B Sidebar", View: "b.view1"},
+		},
+	}
+
+	r.Register("plugin.a", contribA)
+	r.Register("plugin.b", contribB)
+
+	// Unregister plugin.a
+	r.Unregister("plugin.a")
+
+	// Verify plugin.a contributions are removed
+	if got := r.Views(); len(got) != 1 || got[0].PluginID != "plugin.b" {
+		t.Errorf("Views: got %d items (first PluginID=%q), want 1 from plugin.b", len(got), safePluginIDView(got))
+	}
+	if got := r.Commands(); len(got) != 1 || got[0].PluginID != "plugin.b" {
+		t.Errorf("Commands: got %d items (first PluginID=%q), want 1 from plugin.b", len(got), safePluginIDCmd(got))
+	}
+	if got := r.SettingsPanels(); len(got) != 1 || got[0].PluginID != "plugin.b" {
+		t.Errorf("SettingsPanels: got %d items (first PluginID=%q), want 1 from plugin.b", len(got), safePluginIDSettings(got))
+	}
+	if got := r.SidebarItems(); len(got) != 1 || got[0].PluginID != "plugin.b" {
+		t.Errorf("SidebarItems: got %d items (first PluginID=%q), want 1 from plugin.b", len(got), safePluginIDSidebar(got))
+	}
+
+	// Verify plugin.b data is intact
+	if r.Views()[0].Item.ID != "b.view1" {
+		t.Errorf("Remaining View ID: got %q, want %q", r.Views()[0].Item.ID, "b.view1")
+	}
+	if r.Commands()[0].Item.ID != "b.cmd1" {
+		t.Errorf("Remaining Command ID: got %q, want %q", r.Commands()[0].Item.ID, "b.cmd1")
+	}
+	if r.SettingsPanels()[0].Item.ID != "b.settings1" {
+		t.Errorf("Remaining SettingsPanel ID: got %q, want %q", r.SettingsPanels()[0].Item.ID, "b.settings1")
+	}
+	if r.SidebarItems()[0].Item.ID != "b.sidebar1" {
+		t.Errorf("Remaining SidebarItem ID: got %q, want %q", r.SidebarItems()[0].Item.ID, "b.sidebar1")
+	}
+}
+
+// safe helpers for error messages when slices are empty
+func safePluginIDView(items []ContributionView) string {
+	if len(items) == 0 {
+		return "<empty>"
+	}
+	return items[0].PluginID
+}
+func safePluginIDCmd(items []ContributionCommand) string {
+	if len(items) == 0 {
+		return "<empty>"
+	}
+	return items[0].PluginID
+}
+func safePluginIDSettings(items []ContributionSettingsPanel) string {
+	if len(items) == 0 {
+		return "<empty>"
+	}
+	return items[0].PluginID
+}
+func safePluginIDSidebar(items []ContributionSidebarItem) string {
+	if len(items) == 0 {
+		return "<empty>"
+	}
+	return items[0].PluginID
+}
+
+// TestListByPoint registers various types and calls ListByPoint for each point type,
+// verifying correct counts.
+func TestListByPoint(t *testing.T) {
+	r := NewRegistry()
+
+	contrib := &plugin.Contributions{
+		Views:              []plugin.ContributionView{{ID: "v1", Title: "V1", Component: "C"}},
+		Commands:           []plugin.ContributionCommand{{ID: "c1", Title: "C1"}},
+		SettingsPanels:     []plugin.ContributionSettingsPanel{{ID: "s1", Title: "S1", Component: "C"}},
+		SidebarItems:       []plugin.ContributionSidebarItem{{ID: "si1", Title: "SI1", View: "v1"}},
+		FileActions:        []plugin.ContributionAction{{ID: "fa1", Label: "FA1"}},
+		NoteActions:        []plugin.ContributionAction{{ID: "na1", Label: "NA1"}},
+		ContextMenuEntries: []plugin.ContributionContextMenuEntry{{ID: "cm1", Label: "CM1", Context: "file"}},
+		SearchProviders:    []plugin.ContributionSearchProvider{{ID: "sp1", Label: "SP1", Handler: "h"}},
+		ActivityProviders:  []plugin.ContributionActivityProvider{{ID: "ap1", Events: []string{"test"}, Handler: "h"}},
+		StatusBarItems:     []plugin.ContributionStatusBarItem{{ID: "sb1", Label: "SB1"}},
+		OpenProviders: []plugin.ContributionOpenProvider{{
+			ID:        "op1",
+			Title:     "Open Provider 1",
+			Priority:  100,
+			Component: "OpenProvider",
+			Supports: []plugin.OpenProviderSupport{{
+				Kind:       "vault-file",
+				Extensions: []string{".md"},
+				Contexts:   []string{"generic-markdown", "notes-markdown"},
+			}},
+		}},
+	}
+
+	r.Register("test.plugin", contrib)
+
+	tests := []struct {
+		point ContributionPointType
+		want  int
+	}{
+		{PointViews, 1},
+		{PointCommands, 1},
+		{PointSettingsPanels, 1},
+		{PointSidebarItems, 1},
+		{PointFileActions, 1},
+		{PointNoteActions, 1},
+		{PointContextMenus, 1},
+		{PointSearchProviders, 1},
+		{PointActivity, 1},
+		{PointStatusBar, 1},
+		{PointOpenProviders, 1},
+	}
+
+	for _, tt := range tests {
+		got := r.ListByPoint(tt.point)
+		if len(got) != tt.want {
+			t.Errorf("ListByPoint(%q): got %d items, want %d", tt.point, len(got), tt.want)
+		}
+	}
+}
+
+func TestOpenProviders_RegisterReplaceUnregister(t *testing.T) {
+	r := NewRegistry()
+
+	r.Register("editor.plugin", &plugin.Contributions{
+		OpenProviders: []plugin.ContributionOpenProvider{{
+			ID:        "editor.markdown",
+			Title:     "Markdown",
+			Priority:  50,
+			Component: "MarkdownEditor",
+			Supports: []plugin.OpenProviderSupport{{
+				Kind:       "vault-file",
+				Extensions: []string{".md", ".markdown"},
+				Contexts:   []string{"generic-markdown", "notes-markdown"},
+			}},
+		}},
+	})
+
+	providers := r.OpenProviders()
+	if len(providers) != 1 {
+		t.Fatalf("OpenProviders count = %d, want 1", len(providers))
+	}
+	if providers[0].PluginID != "editor.plugin" || providers[0].Item.Component != "MarkdownEditor" {
+		t.Fatalf("provider = %+v", providers[0])
+	}
+
+	r.Register("editor.plugin", &plugin.Contributions{
+		OpenProviders: []plugin.ContributionOpenProvider{{
+			ID:        "editor.text",
+			Title:     "Text",
+			Priority:  10,
+			Component: "TextEditor",
+			Supports: []plugin.OpenProviderSupport{{
+				Kind:       "vault-file",
+				Extensions: []string{".txt"},
+			}},
+		}},
+	})
+
+	providers = r.OpenProviders()
+	if len(providers) != 1 || providers[0].Item.ID != "editor.text" {
+		t.Fatalf("providers after replace = %+v", providers)
+	}
+
+	r.Unregister("editor.plugin")
+	if got := len(r.OpenProviders()); got != 0 {
+		t.Fatalf("OpenProviders after unregister = %d, want 0", got)
+	}
+}
+
+// TestRegister_DuplicatePrevention calls Register twice for the same plugin
+// (simulating reload) and checks contributions appear only once (no duplicates).
+// This is the KEY TEST for idempotent re-registration.
+func TestRegister_DuplicatePrevention(t *testing.T) {
+	r := NewRegistry()
+
+	contrib := &plugin.Contributions{
+		Views: []plugin.ContributionView{
+			{ID: "test.view1", Title: "View 1", Component: "C"},
+		},
+		Commands: []plugin.ContributionCommand{
+			{ID: "test.cmd1", Title: "Cmd 1"},
+		},
+		SettingsPanels: []plugin.ContributionSettingsPanel{
+			{ID: "test.settings1", Title: "Settings 1", Component: "C"},
+		},
+		SidebarItems: []plugin.ContributionSidebarItem{
+			{ID: "test.sidebar1", Title: "Sidebar 1", View: "test.view1"},
+		},
+	}
+
+	// First registration
+	r.Register("test.plugin", contrib)
+	// Second registration — simulates plugin reload
+	r.Register("test.plugin", contrib)
+
+	// Each type should have only 1 entry (no duplicates)
+	if got := len(r.Views()); got != 1 {
+		t.Errorf("Views after double Register: got %d, want 1 (no duplicates)", got)
+	}
+	if got := len(r.Commands()); got != 1 {
+		t.Errorf("Commands after double Register: got %d, want 1 (no duplicates)", got)
+	}
+	if got := len(r.SettingsPanels()); got != 1 {
+		t.Errorf("SettingsPanels after double Register: got %d, want 1 (no duplicates)", got)
+	}
+	if got := len(r.SidebarItems()); got != 1 {
+		t.Errorf("SidebarItems after double Register: got %d, want 1 (no duplicates)", got)
+	}
+
+	// Also verify the item data is preserved correctly
+	if r.Views()[0].Item.ID != "test.view1" {
+		t.Errorf("View ID after reload: got %q, want %q", r.Views()[0].Item.ID, "test.view1")
+	}
+	if r.Commands()[0].Item.ID != "test.cmd1" {
+		t.Errorf("Command ID after reload: got %q, want %q", r.Commands()[0].Item.ID, "test.cmd1")
+	}
+	if r.SettingsPanels()[0].Item.ID != "test.settings1" {
+		t.Errorf("SettingsPanel ID after reload: got %q, want %q", r.SettingsPanels()[0].Item.ID, "test.settings1")
+	}
+	if r.SidebarItems()[0].Item.ID != "test.sidebar1" {
+		t.Errorf("SidebarItem ID after reload: got %q, want %q", r.SidebarItems()[0].Item.ID, "test.sidebar1")
+	}
+}
+
+// TestUnregister_NoSideEffects verifies that unregistering a non-existent plugin
+// doesn't crash or corrupt the registry.
+func TestUnregister_NoSideEffects(t *testing.T) {
+	r := NewRegistry()
+
+	// Register a plugin
+	contrib := &plugin.Contributions{
+		Views: []plugin.ContributionView{
+			{ID: "v1", Title: "V1", Component: "C"},
+		},
+	}
+	r.Register("existing.plugin", contrib)
+
+	// Unregister a plugin that was never registered — should not panic
+	r.Unregister("nonexistent.plugin")
+
+	// Existing plugin's contributions should still be intact
+	if got := len(r.Views()); got != 1 {
+		t.Errorf("Views after unregistering non-existent: got %d, want 1", got)
+	}
+	if r.Views()[0].PluginID != "existing.plugin" {
+		t.Errorf("PluginID after unregistering non-existent: got %q, want %q", r.Views()[0].PluginID, "existing.plugin")
+	}
+
+	// Unregister with empty string — should not panic
+	r.Unregister("")
+
+	// Still intact
+	if got := len(r.Views()); got != 1 {
+		t.Errorf("Views after unregistering empty string: got %d, want 1", got)
+	}
+}

internal/core/events/bus.go

@@ -35,6 +35,13 @@ func (b *Bus) Subscribe(event string, handler Handler) {
 	b.handlers[event] = append(b.handlers[event], handler)
 }
 
+// HasSubscribers reports whether an event has at least one registered handler.
+func (b *Bus) HasSubscribers(event string) bool {
+	b.mu.RLock()
+	defer b.mu.RUnlock()
+	return len(b.handlers[event]) > 0
+}
+
 // Unsubscribe removes all handlers for a plugin (matched by prefix or exact).
 // For now, a simple version: clear all handlers for a given event name.
 func (b *Bus) Unsubscribe(event string) {

internal/core/externalopen/service.go

@@ -0,0 +1,62 @@
+package externalopen
+
+import (
+	"os/exec"
+	"path/filepath"
+	"runtime"
+)
+
+type Runner func(name string, args ...string) error
+
+type Service struct {
+	goos   string
+	runner Runner
+}
+
+func NewService() *Service {
+	return NewServiceFor(runtime.GOOS, func(name string, args ...string) error {
+		return exec.Command(name, args...).Start()
+	})
+}
+
+func NewServiceFor(goos string, runner Runner) *Service {
+	return &Service{goos: goos, runner: runner}
+}
+
+func (s *Service) OpenPath(path string) error {
+	name, args := s.openCommand(path)
+	return s.runner(name, args...)
+}
+
+func (s *Service) ShowInFolder(path string, isDir bool) error {
+	name, args := s.showCommand(path, isDir)
+	return s.runner(name, args...)
+}
+
+func (s *Service) openCommand(path string) (string, []string) {
+	switch s.goos {
+	case "darwin":
+		return "open", []string{path}
+	case "windows":
+		return "rundll32", []string{"url.dll,FileProtocolHandler", path}
+	default:
+		return "xdg-open", []string{path}
+	}
+}
+
+func (s *Service) showCommand(path string, isDir bool) (string, []string) {
+	switch s.goos {
+	case "darwin":
+		return "open", []string{"-R", path}
+	case "windows":
+		if isDir {
+			return "explorer", []string{path}
+		}
+		return "explorer", []string{"/select," + path}
+	default:
+		if isDir {
+			return "xdg-open", []string{path}
+		}
+		return "xdg-open", []string{filepath.Dir(path)}
+	}
+}

internal/core/externalopen/service_test.go

@@ -0,0 +1,71 @@
+package externalopen
+
+import (
+	"reflect"
+	"testing"
+)
+
+func TestOpenPathCommands(t *testing.T) {
+	cases := []struct {
+		goos string
+		path string
+		want commandCall
+	}{
+		{goos: "linux", path: "/vault/file.txt", want: commandCall{name: "xdg-open", args: []string{"/vault/file.txt"}}},
+		{goos: "darwin", path: "/vault/file.txt", want: commandCall{name: "open", args: []string{"/vault/file.txt"}}},
+		{goos: "windows", path: `C:\Vault\file.txt`, want: commandCall{name: "rundll32", args: []string{"url.dll,FileProtocolHandler", `C:\Vault\file.txt`}}},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.goos, func(t *testing.T) {
+			var got commandCall
+			svc := NewServiceFor(tc.goos, func(name string, args ...string) error {
+				got = commandCall{name: name, args: args}
+				return nil
+			})
+			if err := svc.OpenPath(tc.path); err != nil {
+				t.Fatalf("OpenPath: %v", err)
+			}
+			if !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("command = %#v, want %#v", got, tc.want)
+			}
+		})
+	}
+}
+
+func TestShowInFolderCommands(t *testing.T) {
+	cases := []struct {
+		name  string
+		goos  string
+		path  string
+		isDir bool
+		want  commandCall
+	}{
+		{name: "linux file opens parent", goos: "linux", path: "/vault/Docs/file.txt", want: commandCall{name: "xdg-open", args: []string{"/vault/Docs"}}},
+		{name: "linux dir opens dir", goos: "linux", path: "/vault/Docs", isDir: true, want: commandCall{name: "xdg-open", args: []string{"/vault/Docs"}}},
+		{name: "darwin reveal", goos: "darwin", path: "/vault/file.txt", want: commandCall{name: "open", args: []string{"-R", "/vault/file.txt"}}},
+		{name: "windows select file", goos: "windows", path: `C:\Vault\file.txt`, want: commandCall{name: "explorer", args: []string{`/select,C:\Vault\file.txt`}}},
+		{name: "windows open dir", goos: "windows", path: `C:\Vault\Docs`, isDir: true, want: commandCall{name: "explorer", args: []string{`C:\Vault\Docs`}}},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			var got commandCall
+			svc := NewServiceFor(tc.goos, func(name string, args ...string) error {
+				got = commandCall{name: name, args: args}
+				return nil
+			})
+			if err := svc.ShowInFolder(tc.path, tc.isDir); err != nil {
+				t.Fatalf("ShowInFolder: %v", err)
+			}
+			if !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("command = %#v, want %#v", got, tc.want)
+			}
+		})
+	}
+}
+
+type commandCall struct {
+	name string
+	args []string
+}

internal/core/files/path_policy.go

@@ -0,0 +1,85 @@
+package files
+
+import (
+	"fmt"
+	"path"
+	"path/filepath"
+	"strings"
+	"unicode"
+)
+
+func NormalizeRelativeDir(relativeDir string) (string, error) {
+	return normalizeRelativePath(relativeDir, true)
+}
+
+func NormalizeRelativeFile(relativePath string) (string, error) {
+	return normalizeRelativePath(relativePath, false)
+}
+
+func IsReservedPath(relativePath string) bool {
+	normalized := strings.ReplaceAll(relativePath, "\\", "/")
+	cleaned := path.Clean(normalized)
+	if cleaned == "." {
+		cleaned = ""
+	}
+	if cleaned == "" {
+		return false
+	}
+	first := strings.Split(cleaned, "/")[0]
+	return strings.EqualFold(first, ".verstak")
+}
+
+func normalizeRelativePath(input string, allowRoot bool) (string, error) {
+	if strings.Contains(input, "\x00") {
+		return "", fmt.Errorf("invalid-path: null-byte")
+	}
+	if strings.Contains(input, "\\") {
+		return "", fmt.Errorf("invalid-path: backslash not allowed")
+	}
+	if looksAbsolute(input) {
+		return "", fmt.Errorf("invalid-path: absolute path rejected")
+	}
+
+	normalized := input
+	for _, part := range strings.Split(normalized, "/") {
+		if part == ".." {
+			return "", fmt.Errorf("invalid-path: path-traversal")
+		}
+	}
+
+	cleaned := path.Clean(normalized)
+	if cleaned == "." {
+		cleaned = ""
+	}
+	if cleaned == "" && !allowRoot {
+		return "", fmt.Errorf("invalid-path: empty path")
+	}
+	if cleaned == ".." || strings.HasPrefix(cleaned, "../") {
+		return "", fmt.Errorf("invalid-path: path-traversal")
+	}
+	if IsReservedPathNoNormalize(cleaned) {
+		return "", fmt.Errorf("reserved-path: .verstak is internal")
+	}
+	return cleaned, nil
+}
+
+func IsReservedPathNoNormalize(cleaned string) bool {
+	if cleaned == "" {
+		return false
+	}
+	first := strings.Split(cleaned, "/")[0]
+	return strings.EqualFold(first, ".verstak")
+}
+
+func looksAbsolute(input string) bool {
+	if input == "" {
+		return false
+	}
+	if filepath.IsAbs(input) || strings.HasPrefix(input, "/") || strings.HasPrefix(input, "\\\\") || strings.HasPrefix(input, "\\") {
+		return true
+	}
+	if len(input) >= 2 && input[1] == ':' && unicode.IsLetter(rune(input[0])) {
+		return true
+	}
+	return false
+}

internal/core/files/path_policy_test.go

@@ -0,0 +1,93 @@
+package files
+
+import (
+	"strings"
+	"testing"
+)
+
+func TestNormalizeRelativeDirAllowsRootAndPreservesCase(t *testing.T) {
+	got, err := NormalizeRelativeDir("")
+	if err != nil {
+		t.Fatalf("NormalizeRelativeDir root: %v", err)
+	}
+	if got != "" {
+		t.Fatalf("root dir = %q, want empty", got)
+	}
+
+	got, err = NormalizeRelativeDir("Notes/Overview.md")
+	if err != nil {
+		t.Fatalf("NormalizeRelativeDir preserves case: %v", err)
+	}
+	if got != "Notes/Overview.md" {
+		t.Fatalf("path = %q, want Notes/Overview.md", got)
+	}
+}
+
+func TestNormalizeRelativeFileRejectsUnsafePaths(t *testing.T) {
+	cases := []string{
+		"",
+		"/etc/passwd",
+		"C:\\Users\\file.txt",
+		"C:/Windows/system.ini",
+		`\\server\share`,
+		"//server/share",
+		`..\secret`,
+		`folder\..\secret`,
+		"../outside.txt",
+		"folder/../../outside.txt",
+		`folder\sub/../../secret`,
+		`folder\sub`,
+		"bad\x00name.txt",
+		".verstak",
+		".verstak/",
+		".verstak/vault.json",
+		"./.verstak",
+		".verstak/trash",
+		"folder/../.verstak",
+		".Verstak",
+	}
+
+	for _, input := range cases {
+		t.Run(input, func(t *testing.T) {
+			_, err := NormalizeRelativeFile(input)
+			if err == nil {
+				t.Fatalf("NormalizeRelativeFile(%q): expected error", input)
+			}
+		})
+	}
+}
+
+func TestReservedPathPolicy(t *testing.T) {
+	if !IsReservedPath(".verstak") {
+		t.Fatal(".verstak should be reserved")
+	}
+	if !IsReservedPath(".verstak/trash/file.txt") {
+		t.Fatal(".verstak/trash/file.txt should be reserved")
+	}
+	if !IsReservedPath(".Verstak/trash/file.txt") {
+		t.Fatal(".Verstak/trash/file.txt should be reserved by case-insensitive policy")
+	}
+	if IsReservedPath("Notes/.verstak.md") {
+		t.Fatal("Notes/.verstak.md should not be reserved")
+	}
+}
+
+func TestNormalizeRelativeFileAcceptsOnlySlashSeparatedRelativePaths(t *testing.T) {
+	got, err := NormalizeRelativeFile("Notes/Overview.md")
+	if err != nil {
+		t.Fatalf("NormalizeRelativeFile valid slash path: %v", err)
+	}
+	if got != "Notes/Overview.md" {
+		t.Fatalf("path = %q, want Notes/Overview.md", got)
+	}
+}
+
+func TestPathPolicyErrorsAreReadable(t *testing.T) {
+	_, err := NormalizeRelativeFile("../outside.txt")
+	if err == nil {
+		t.Fatal("expected traversal error")
+	}
+	if !strings.Contains(err.Error(), "path-traversal") {
+		t.Fatalf("error = %q, want path-traversal", err.Error())
+	}
+}

internal/core/files/service.go

@@ -0,0 +1,780 @@
+package files
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"io/fs"
+	"mime"
+	"os"
+	"path/filepath"
+	"sort"
+	"strconv"
+	"strings"
+	"time"
+	"unicode/utf8"
+
+	"github.com/google/uuid"
+
+	"github.com/verstak/verstak-desktop/internal/core/vault"
+)
+
+type Service struct {
+	vault *vault.Vault
+}
+
+func NewService(v *vault.Vault) *Service {
+	return &Service{vault: v}
+}
+
+func (s *Service) ListVaultFiles(relativeDir string) ([]FileEntry, error) {
+	root, err := s.vaultRoot()
+	if err != nil {
+		return nil, err
+	}
+	rel, err := NormalizeRelativeDir(relativeDir)
+	if err != nil {
+		return nil, err
+	}
+	full, err := s.resolve(root, rel)
+	if err != nil {
+		return nil, err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return nil, err
+	}
+	info, err := os.Stat(full)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return nil, fmt.Errorf("not-found: %s", rel)
+		}
+		return nil, err
+	}
+	if !info.IsDir() {
+		return nil, fmt.Errorf("not-directory: %s", rel)
+	}
+
+	dirEntries, err := os.ReadDir(full)
+	if err != nil {
+		return nil, err
+	}
+	entries := make([]FileEntry, 0, len(dirEntries))
+	for _, dirEntry := range dirEntries {
+		childRel := joinRel(rel, dirEntry.Name())
+		if IsReservedPathNoNormalize(childRel) {
+			continue
+		}
+		info, err := dirEntry.Info()
+		if err != nil {
+			continue
+		}
+		entries = append(entries, makeEntry(childRel, info))
+	}
+	return entries, nil
+}
+
+func (s *Service) GetVaultFileMetadata(relativePath string) (FileMetadata, error) {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return FileMetadata{}, err
+	}
+	if err := rejectSymlinkPath(root, rel, false); err != nil {
+		return FileMetadata{}, err
+	}
+	info, err := os.Lstat(full)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return FileMetadata{}, fmt.Errorf("not-found: %s", rel)
+		}
+		return FileMetadata{}, err
+	}
+	return makeMetadata(rel, info), nil
+}
+
+func (s *Service) ResolveExternalOpenTarget(relativePath string) (ExternalOpenTarget, error) {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return ExternalOpenTarget{}, err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return ExternalOpenTarget{}, err
+	}
+	info, err := os.Lstat(full)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return ExternalOpenTarget{}, fmt.Errorf("not-found: %s", rel)
+		}
+		return ExternalOpenTarget{}, err
+	}
+	if info.Mode()&os.ModeSymlink != 0 {
+		return ExternalOpenTarget{}, fmt.Errorf("symlink-not-allowed: %s", rel)
+	}
+	return ExternalOpenTarget{
+		RelativePath: rel,
+		AbsolutePath: full,
+		Metadata:     makeMetadata(rel, info),
+	}, nil
+}
+
+func (s *Service) ReadVaultTextFile(relativePath string) (string, error) {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return "", err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return "", err
+	}
+	info, err := os.Lstat(full)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return "", fmt.Errorf("not-found: %s", rel)
+		}
+		return "", err
+	}
+	if info.Mode()&os.ModeSymlink != 0 {
+		return "", fmt.Errorf("symlink-not-allowed: %s", rel)
+	}
+	if !info.Mode().IsRegular() {
+		return "", fmt.Errorf("not-regular-file: %s", rel)
+	}
+	if info.Size() > MaxTextFileBytes {
+		return "", fmt.Errorf("file-too-large: %s", rel)
+	}
+	data, err := os.ReadFile(full)
+	if err != nil {
+		return "", err
+	}
+	if !utf8.Valid(data) {
+		return "", fmt.Errorf("not-text-file: %s", rel)
+	}
+	return string(data), nil
+}
+
+func (s *Service) ReadVaultFileBytes(relativePath string) (FileBytes, error) {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return FileBytes{}, err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return FileBytes{}, err
+	}
+	info, err := os.Lstat(full)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return FileBytes{}, fmt.Errorf("not-found: %s", rel)
+		}
+		return FileBytes{}, err
+	}
+	if info.Mode()&os.ModeSymlink != 0 {
+		return FileBytes{}, fmt.Errorf("symlink-not-allowed: %s", rel)
+	}
+	if !info.Mode().IsRegular() {
+		return FileBytes{}, fmt.Errorf("not-regular-file: %s", rel)
+	}
+	if info.Size() > MaxBinaryReadBytes {
+		return FileBytes{}, fmt.Errorf("file-too-large: %s", rel)
+	}
+	data, err := os.ReadFile(full)
+	if err != nil {
+		return FileBytes{}, err
+	}
+	return FileBytes{
+		RelativePath: rel,
+		Size:         int64(len(data)),
+		MimeHint:     mime.TypeByExtension(filepath.Ext(info.Name())),
+		DataBase64:   base64.StdEncoding.EncodeToString(data),
+	}, nil
+}
+
+func (s *Service) WriteVaultTextFile(relativePath string, content string, options WriteOptions) error {
+	return s.writeVaultFileData(relativePath, []byte(content), options)
+}
+
+func (s *Service) WriteVaultFileBytes(relativePath string, dataBase64 string, options WriteOptions) error {
+	data, err := base64.StdEncoding.DecodeString(dataBase64)
+	if err != nil {
+		return fmt.Errorf("invalid-base64: %w", err)
+	}
+	if int64(len(data)) > MaxBinaryReadBytes {
+		return fmt.Errorf("file-too-large: %s", relativePath)
+	}
+	return s.writeVaultFileData(relativePath, data, options)
+}
+
+func (s *Service) writeVaultFileData(relativePath string, data []byte, options WriteOptions) error {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return err
+	}
+
+	parent := filepath.Dir(full)
+	if info, err := os.Stat(parent); err != nil {
+		if os.IsNotExist(err) {
+			return fmt.Errorf("parent-not-found: %s", pathDir(rel))
+		}
+		return err
+	} else if !info.IsDir() {
+		return fmt.Errorf("parent-not-directory: %s", pathDir(rel))
+	}
+
+	existing, err := os.Lstat(full)
+	if err == nil {
+		if existing.Mode()&os.ModeSymlink != 0 {
+			return fmt.Errorf("symlink-not-allowed: %s", rel)
+		}
+		if !existing.Mode().IsRegular() {
+			return fmt.Errorf("not-regular-file: %s", rel)
+		}
+		if !options.Overwrite {
+			return fmt.Errorf("conflict: %s", rel)
+		}
+	} else if os.IsNotExist(err) {
+		if !options.CreateIfMissing {
+			return fmt.Errorf("not-found: %s", rel)
+		}
+	} else {
+		return err
+	}
+
+	tmp, err := os.CreateTemp(parent, ".verstak-write-*")
+	if err != nil {
+		return err
+	}
+	tmpName := tmp.Name()
+	cleanup := true
+	defer func() {
+		if cleanup {
+			_ = os.Remove(tmpName)
+		}
+	}()
+	if _, err := tmp.Write(data); err != nil {
+		_ = tmp.Close()
+		return err
+	}
+	if err := tmp.Close(); err != nil {
+		return err
+	}
+	if err := os.Rename(tmpName, full); err != nil {
+		return err
+	}
+	cleanup = false
+	return nil
+}
+
+func (s *Service) CreateVaultFolder(relativePath string) error {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return err
+	}
+	if _, err := os.Lstat(full); err == nil {
+		return fmt.Errorf("conflict: %s", rel)
+	} else if !os.IsNotExist(err) {
+		return err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return err
+	}
+	parent := filepath.Dir(full)
+	if info, err := os.Stat(parent); err != nil {
+		if os.IsNotExist(err) {
+			return fmt.Errorf("parent-not-found: %s", pathDir(rel))
+		}
+		return err
+	} else if !info.IsDir() {
+		return fmt.Errorf("parent-not-directory: %s", pathDir(rel))
+	}
+	return os.Mkdir(full, 0o755)
+}
+
+func (s *Service) MoveVaultPath(fromRelativePath string, toRelativePath string, options MoveOptions) error {
+	root, fromRel, fromFull, err := s.resolveFile(fromRelativePath)
+	if err != nil {
+		return err
+	}
+	_, toRel, toFull, err := s.resolveFile(toRelativePath)
+	if err != nil {
+		return err
+	}
+	if fromRel == "" || toRel == "" {
+		return fmt.Errorf("invalid-path: cannot move root")
+	}
+	if err := rejectSymlinkPath(root, fromRel, true); err != nil {
+		return err
+	}
+	if err := rejectSymlinkPath(root, toRel, false); err != nil {
+		return err
+	}
+	fromInfo, err := os.Lstat(fromFull)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return fmt.Errorf("not-found: %s", fromRel)
+		}
+		return err
+	}
+	if fromInfo.Mode()&os.ModeSymlink != 0 {
+		return fmt.Errorf("symlink-not-allowed: %s", fromRel)
+	}
+	if fromInfo.IsDir() && (toRel == fromRel || strings.HasPrefix(toRel, fromRel+"/")) {
+		return fmt.Errorf("move-into-self: %s -> %s", fromRel, toRel)
+	}
+	parent := filepath.Dir(toFull)
+	if info, err := os.Stat(parent); err != nil {
+		if os.IsNotExist(err) {
+			return fmt.Errorf("parent-not-found: %s", pathDir(toRel))
+		}
+		return err
+	} else if !info.IsDir() {
+		return fmt.Errorf("parent-not-directory: %s", pathDir(toRel))
+	}
+	if _, err := os.Lstat(toFull); err == nil && !options.Overwrite {
+		return fmt.Errorf("conflict: %s", toRel)
+	} else if err != nil && !os.IsNotExist(err) {
+		return err
+	}
+	return os.Rename(fromFull, toFull)
+}
+
+func (s *Service) TrashVaultPath(relativePath string) (TrashResult, error) {
+	root, rel, full, err := s.resolveFile(relativePath)
+	if err != nil {
+		return TrashResult{}, err
+	}
+	if err := rejectSymlinkPath(root, rel, true); err != nil {
+		return TrashResult{}, err
+	}
+	info, err := os.Lstat(full)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return TrashResult{}, fmt.Errorf("not-found: %s", rel)
+		}
+		return TrashResult{}, err
+	}
+	if info.Mode()&os.ModeSymlink != 0 {
+		return TrashResult{}, fmt.Errorf("symlink-not-allowed: %s", rel)
+	}
+
+	deletedAt := time.Now().UTC().Format(time.RFC3339Nano)
+	trashID := time.Now().UTC().Format("20060102T150405.000000000Z") + "-" + uuid.NewString()
+	trashRel := filepath.ToSlash(filepath.Join(".verstak", "trash", "files", trashID, filepath.Base(rel)))
+	trashFull := filepath.Join(root, filepath.FromSlash(trashRel))
+	if err := os.MkdirAll(filepath.Dir(trashFull), 0o755); err != nil {
+		return TrashResult{}, err
+	}
+	if err := os.Rename(full, trashFull); err != nil {
+		return TrashResult{}, err
+	}
+	originalType := fileTypeFromInfo(info)
+	size := sizeForType(originalType, info)
+	result := TrashResult{
+		OriginalPath: rel,
+		TrashPath:    trashRel,
+		TrashID:      trashID,
+		DeletedAt:    deletedAt,
+		Size:         size,
+	}
+	meta := map[string]string{
+		"originalPath": rel,
+		"trashPath":    trashRel,
+		"trashId":      trashID,
+		"deletedAt":    deletedAt,
+		"originalType": string(originalType),
+		"basename":     filepath.Base(rel),
+		"type":         string(originalType),
+		"size":         strconv.FormatInt(size, 10),
+	}
+	data, err := json.MarshalIndent(meta, "", "  ")
+	if err != nil {
+		return TrashResult{}, err
+	}
+	if err := os.WriteFile(filepath.Join(root, ".verstak", "trash", "files", trashID, "metadata.json"), data, 0o644); err != nil {
+		return TrashResult{}, err
+	}
+	return result, nil
+}
+
+func (s *Service) ListTrashEntries() ([]TrashEntry, error) {
+	root, err := s.vaultRoot()
+	if err != nil {
+		return nil, err
+	}
+	trashRoot := filepath.Join(root, ".verstak", "trash", "files")
+	dirs, err := os.ReadDir(trashRoot)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return []TrashEntry{}, nil
+		}
+		return nil, err
+	}
+
+	entries := make([]TrashEntry, 0, len(dirs))
+	for _, dir := range dirs {
+		if !dir.IsDir() {
+			continue
+		}
+		data, err := os.ReadFile(filepath.Join(trashRoot, dir.Name(), "metadata.json"))
+		if err != nil {
+			if os.IsNotExist(err) {
+				continue
+			}
+			return nil, err
+		}
+		var raw struct {
+			OriginalPath string `json:"originalPath"`
+			TrashPath    string `json:"trashPath"`
+			TrashID      string `json:"trashId"`
+			DeletedAt    string `json:"deletedAt"`
+			OriginalType string `json:"originalType"`
+			Basename     string `json:"basename"`
+			Size         string `json:"size"`
+		}
+		if err := json.Unmarshal(data, &raw); err != nil {
+			continue
+		}
+		if raw.OriginalPath == "" || raw.TrashPath == "" || raw.TrashID == "" || raw.DeletedAt == "" {
+			continue
+		}
+		entries = append(entries, TrashEntry{
+			OriginalPath: raw.OriginalPath,
+			TrashPath:    raw.TrashPath,
+			TrashID:      raw.TrashID,
+			DeletedAt:    raw.DeletedAt,
+			OriginalType: FileType(raw.OriginalType),
+			Basename:     raw.Basename,
+			Size:         parseTrashSize(raw.Size),
+		})
+	}
+	sort.Slice(entries, func(i, j int) bool {
+		if entries[i].DeletedAt != entries[j].DeletedAt {
+			return entries[i].DeletedAt > entries[j].DeletedAt
+		}
+		return entries[i].TrashID > entries[j].TrashID
+	})
+	return entries, nil
+}
+
+func (s *Service) RestoreTrashEntry(trashID string, options RestoreOptions) (string, error) {
+	root, err := s.vaultRoot()
+	if err != nil {
+		return "", err
+	}
+	if err := validateTrashID(trashID); err != nil {
+		return "", err
+	}
+	entry, err := readTrashEntry(root, trashID)
+	if err != nil {
+		return "", err
+	}
+
+	targetRel := entry.OriginalPath
+	if options.TargetPath != "" {
+		targetRel = options.TargetPath
+	}
+	targetRel, err = NormalizeRelativeFile(targetRel)
+	if err != nil {
+		return "", err
+	}
+	targetFull, err := s.resolve(root, targetRel)
+	if err != nil {
+		return "", err
+	}
+	if err := rejectSymlinkPath(root, targetRel, false); err != nil {
+		return "", err
+	}
+
+	trashDir := filepath.Join(root, ".verstak", "trash", "files", trashID)
+	payloadFull := filepath.Join(root, filepath.FromSlash(entry.TrashPath))
+	if !isInsideDir(trashDir, payloadFull) {
+		return "", fmt.Errorf("invalid-trash-entry: payload outside trash")
+	}
+	if info, err := os.Lstat(payloadFull); err != nil {
+		if os.IsNotExist(err) {
+			return "", fmt.Errorf("not-found: trash payload %s", trashID)
+		}
+		return "", err
+	} else if info.Mode()&os.ModeSymlink != 0 {
+		return "", fmt.Errorf("symlink-not-allowed: %s", entry.TrashPath)
+	}
+
+	parent := filepath.Dir(targetFull)
+	if info, err := os.Stat(parent); err != nil {
+		if os.IsNotExist(err) {
+			return "", fmt.Errorf("parent-not-found: %s", pathDir(targetRel))
+		}
+		return "", err
+	} else if !info.IsDir() {
+		return "", fmt.Errorf("parent-not-directory: %s", pathDir(targetRel))
+	}
+
+	if existing, err := os.Lstat(targetFull); err == nil {
+		if existing.Mode()&os.ModeSymlink != 0 {
+			return "", fmt.Errorf("symlink-not-allowed: %s", targetRel)
+		}
+		if !options.Overwrite {
+			return "", fmt.Errorf("conflict: %s", targetRel)
+		}
+		if err := os.RemoveAll(targetFull); err != nil {
+			return "", err
+		}
+	} else if err != nil && !os.IsNotExist(err) {
+		return "", err
+	}
+
+	if err := os.Rename(payloadFull, targetFull); err != nil {
+		return "", err
+	}
+	if err := os.RemoveAll(trashDir); err != nil {
+		return "", err
+	}
+	return targetRel, nil
+}
+
+// DeleteTrashEntry permanently removes an internal trash entry.
+func (s *Service) DeleteTrashEntry(trashID string) error {
+	root, err := s.vaultRoot()
+	if err != nil {
+		return err
+	}
+	if err := validateTrashID(trashID); err != nil {
+		return err
+	}
+	if _, err := readTrashEntry(root, trashID); err != nil {
+		return err
+	}
+	return os.RemoveAll(filepath.Join(root, ".verstak", "trash", "files", trashID))
+}
+
+func readTrashEntry(root, trashID string) (TrashEntry, error) {
+	if err := validateTrashID(trashID); err != nil {
+		return TrashEntry{}, err
+	}
+	data, err := os.ReadFile(filepath.Join(root, ".verstak", "trash", "files", trashID, "metadata.json"))
+	if err != nil {
+		if os.IsNotExist(err) {
+			return TrashEntry{}, fmt.Errorf("not-found: trash entry %s", trashID)
+		}
+		return TrashEntry{}, err
+	}
+	var raw struct {
+		OriginalPath string `json:"originalPath"`
+		TrashPath    string `json:"trashPath"`
+		TrashID      string `json:"trashId"`
+		DeletedAt    string `json:"deletedAt"`
+		OriginalType string `json:"originalType"`
+		Basename     string `json:"basename"`
+		Size         string `json:"size"`
+	}
+	if err := json.Unmarshal(data, &raw); err != nil {
+		return TrashEntry{}, err
+	}
+	if raw.OriginalPath == "" || raw.TrashPath == "" || raw.TrashID == "" || raw.DeletedAt == "" {
+		return TrashEntry{}, fmt.Errorf("invalid-trash-entry: missing metadata")
+	}
+	if raw.TrashID != trashID {
+		return TrashEntry{}, fmt.Errorf("invalid-trash-entry: mismatched trash id")
+	}
+	return TrashEntry{
+		OriginalPath: raw.OriginalPath,
+		TrashPath:    raw.TrashPath,
+		TrashID:      raw.TrashID,
+		DeletedAt:    raw.DeletedAt,
+		OriginalType: FileType(raw.OriginalType),
+		Basename:     raw.Basename,
+		Size:         parseTrashSize(raw.Size),
+	}, nil
+}
+
+func parseTrashSize(value string) int64 {
+	if value == "" {
+		return 0
+	}
+	size, err := strconv.ParseInt(value, 10, 64)
+	if err != nil || size < 0 {
+		return 0
+	}
+	return size
+}
+
+func validateTrashID(trashID string) error {
+	if trashID == "" || trashID == "." || trashID == ".." || strings.ContainsAny(trashID, "/\\\x00") {
+		return fmt.Errorf("invalid-trash-id")
+	}
+	return nil
+}
+
+func isInsideDir(parent, child string) bool {
+	absParent, err := filepath.Abs(parent)
+	if err != nil {
+		return false
+	}
+	absChild, err := filepath.Abs(child)
+	if err != nil {
+		return false
+	}
+	rel, err := filepath.Rel(absParent, absChild)
+	if err != nil {
+		return false
+	}
+	return rel != "." && rel != ".." && !strings.HasPrefix(rel, ".."+string(os.PathSeparator)) && !filepath.IsAbs(rel)
+}
+
+func (s *Service) vaultRoot() (string, error) {
+	if s == nil || s.vault == nil {
+		return "", fmt.Errorf("vault-not-initialized")
+	}
+	if s.vault.GetVaultStatus() != vault.StatusOpen {
+		return "", fmt.Errorf("vault-not-open")
+	}
+	root := s.vault.GetVaultPath()
+	if root == "" {
+		return "", fmt.Errorf("vault-not-open")
+	}
+	return root, nil
+}
+
+func (s *Service) resolveFile(relativePath string) (string, string, string, error) {
+	root, err := s.vaultRoot()
+	if err != nil {
+		return "", "", "", err
+	}
+	rel, err := NormalizeRelativeFile(relativePath)
+	if err != nil {
+		return "", "", "", err
+	}
+	full, err := s.resolve(root, rel)
+	return root, rel, full, err
+}
+
+func (s *Service) resolve(root, rel string) (string, error) {
+	full := filepath.Join(root, filepath.FromSlash(rel))
+	absRoot, err := filepath.Abs(root)
+	if err != nil {
+		return "", err
+	}
+	absFull, err := filepath.Abs(full)
+	if err != nil {
+		return "", err
+	}
+	relToRoot, err := filepath.Rel(absRoot, absFull)
+	if err != nil {
+		return "", err
+	}
+	if relToRoot == ".." || strings.HasPrefix(relToRoot, ".."+string(os.PathSeparator)) || filepath.IsAbs(relToRoot) {
+		return "", fmt.Errorf("invalid-path: path-traversal")
+	}
+	return absFull, nil
+}
+
+func rejectSymlinkPath(root, rel string, includeFinal bool) error {
+	if rel == "" {
+		return nil
+	}
+	parts := strings.Split(rel, "/")
+	limit := len(parts)
+	if !includeFinal {
+		limit--
+	}
+	current := root
+	for i := 0; i < limit; i++ {
+		current = filepath.Join(current, filepath.FromSlash(parts[i]))
+		info, err := os.Lstat(current)
+		if err != nil {
+			if os.IsNotExist(err) {
+				return nil
+			}
+			return err
+		}
+		if info.Mode()&os.ModeSymlink != 0 {
+			return fmt.Errorf("symlink-not-allowed: %s", strings.Join(parts[:i+1], "/"))
+		}
+	}
+	return nil
+}
+
+func makeEntry(rel string, info fs.FileInfo) FileEntry {
+	t := fileTypeFromInfo(info)
+	return FileEntry{
+		Name:         info.Name(),
+		RelativePath: rel,
+		Type:         t,
+		Size:         sizeForType(t, info),
+		ModifiedAt:   info.ModTime().UTC().Format(time.RFC3339Nano),
+		Extension:    strings.TrimPrefix(filepath.Ext(info.Name()), "."),
+		IsHidden:     strings.HasPrefix(info.Name(), "."),
+		IsReserved:   IsReservedPathNoNormalize(rel),
+		CanRead:      t == FileTypeFile || t == FileTypeFolder,
+		CanWrite:     t == FileTypeFile || t == FileTypeFolder,
+	}
+}
+
+func makeMetadata(rel string, info fs.FileInfo) FileMetadata {
+	t := fileTypeFromInfo(info)
+	ext := strings.TrimPrefix(filepath.Ext(info.Name()), ".")
+	return FileMetadata{
+		RelativePath: rel,
+		Type:         t,
+		Size:         sizeForType(t, info),
+		ModifiedAt:   info.ModTime().UTC().Format(time.RFC3339Nano),
+		Extension:    ext,
+		MimeHint:     mime.TypeByExtension(filepath.Ext(info.Name())),
+		IsText:       isTextExtension(ext),
+		IsHidden:     strings.HasPrefix(info.Name(), "."),
+		IsReserved:   IsReservedPathNoNormalize(rel),
+		CanRead:      t == FileTypeFile || t == FileTypeFolder,
+		CanWrite:     t == FileTypeFile || t == FileTypeFolder,
+	}
+}
+
+func fileTypeFromInfo(info fs.FileInfo) FileType {
+	if info.Mode()&os.ModeSymlink != 0 {
+		return FileTypeSymlink
+	}
+	if info.IsDir() {
+		return FileTypeFolder
+	}
+	if info.Mode().IsRegular() {
+		return FileTypeFile
+	}
+	return FileTypeUnknown
+}
+
+func sizeForType(t FileType, info fs.FileInfo) int64 {
+	if t == FileTypeFolder {
+		return 0
+	}
+	return info.Size()
+}
+
+func isTextExtension(ext string) bool {
+	switch strings.ToLower(ext) {
+	case "txt", "md", "markdown", "json", "yaml", "yml", "toml", "csv", "log", "xml", "html", "css", "js", "ts", "svelte", "go":
+		return true
+	default:
+		return false
+	}
+}
+
+func joinRel(parent, name string) string {
+	if parent == "" {
+		return name
+	}
+	return parent + "/" + name
+}
+
+func pathDir(rel string) string {
+	dir := pathDirSlash(rel)
+	if dir == "." {
+		return ""
+	}
+	return dir
+}
+
+func pathDirSlash(rel string) string {
+	idx := strings.LastIndex(rel, "/")
+	if idx < 0 {
+		return "."
+	}
+	return rel[:idx]
+}

internal/core/files/service_test.go

@@ -0,0 +1,681 @@
+package files
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"runtime"
+	"strings"
+	"testing"
+
+	"github.com/verstak/verstak-desktop/internal/core/vault"
+)
+
+func newTestService(t *testing.T) (*Service, string) {
+	t.Helper()
+	v := vault.NewVault(nil)
+	if err := v.CreateVault(t.TempDir()); err != nil {
+		t.Fatalf("CreateVault: %v", err)
+	}
+	return NewService(v), v.GetVaultPath()
+}
+
+func TestServiceRequiresOpenVault(t *testing.T) {
+	v := vault.NewVault(nil)
+	s := NewService(v)
+
+	if _, err := s.ListVaultFiles(""); err == nil {
+		t.Fatal("ListVaultFiles with closed vault: expected error")
+	}
+}
+
+func TestListVaultFilesExcludesReservedAndReturnsEntries(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "readme.md"), []byte("hello"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "Docs"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+
+	entries, err := s.ListVaultFiles("")
+	if err != nil {
+		t.Fatalf("ListVaultFiles: %v", err)
+	}
+
+	names := map[string]FileEntry{}
+	for _, entry := range entries {
+		names[entry.Name] = entry
+		if strings.HasPrefix(entry.RelativePath, ".verstak") {
+			t.Fatalf("reserved entry leaked into list: %+v", entry)
+		}
+	}
+	if names["readme.md"].Type != FileTypeFile {
+		t.Fatalf("readme.md type = %q", names["readme.md"].Type)
+	}
+	if names["Docs"].Type != FileTypeFolder {
+		t.Fatalf("Docs type = %q", names["Docs"].Type)
+	}
+}
+
+func TestPathPolicyRejectsUnsafeOperations(t *testing.T) {
+	s, _ := newTestService(t)
+
+	cases := []string{
+		"/etc/passwd",
+		"C:\\Windows\\system.ini",
+		"C:/Windows/system.ini",
+		`\\server\share`,
+		"//server/share",
+		`..\outside`,
+		`folder\..\outside`,
+		"../outside",
+		"folder/../../outside",
+		`folder\sub/../../outside`,
+		"bad\x00path",
+		".verstak",
+		".verstak/",
+		".verstak/vault.json",
+		"./.verstak",
+		".Verstak/trash",
+	}
+	for _, input := range cases {
+		t.Run(input, func(t *testing.T) {
+			if _, err := s.GetVaultFileMetadata(input); err == nil {
+				t.Fatal("metadata: expected error")
+			}
+			if _, err := s.ReadVaultTextFile(input); err == nil {
+				t.Fatal("read: expected error")
+			}
+			if _, err := s.ReadVaultFileBytes(input); err == nil {
+				t.Fatal("read bytes: expected error")
+			}
+			if err := s.WriteVaultTextFile(input, "x", WriteOptions{CreateIfMissing: true}); err == nil {
+				t.Fatal("write: expected error")
+			}
+			if err := s.MoveVaultPath(input, "safe.txt", MoveOptions{}); err == nil {
+				t.Fatal("move: expected error")
+			}
+			if _, err := s.TrashVaultPath(input); err == nil {
+				t.Fatal("trash: expected error")
+			}
+		})
+	}
+}
+
+func TestReadVaultTextFileRules(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "note.md"), []byte("hello\n"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "Folder"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "binary.bin"), []byte{0xff, 0xfe, 0xfd}, 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "huge.txt"), []byte(strings.Repeat("a", int(MaxTextFileBytes)+1)), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	text, err := s.ReadVaultTextFile("note.md")
+	if err != nil {
+		t.Fatalf("ReadVaultTextFile note: %v", err)
+	}
+	if text != "hello\n" {
+		t.Fatalf("text = %q", text)
+	}
+
+	if _, err := s.ReadVaultTextFile("Folder"); err == nil || !strings.Contains(err.Error(), "not-regular-file") {
+		t.Fatalf("read folder error = %v, want not-regular-file", err)
+	}
+	if _, err := s.ReadVaultTextFile("missing.md"); err == nil || !strings.Contains(err.Error(), "not-found") {
+		t.Fatalf("read missing error = %v, want not-found", err)
+	}
+	if _, err := s.ReadVaultTextFile("huge.txt"); err == nil || !strings.Contains(err.Error(), "file-too-large") {
+		t.Fatalf("read huge error = %v, want file-too-large", err)
+	}
+	if _, err := s.ReadVaultTextFile("binary.bin"); err == nil || !strings.Contains(err.Error(), "not-text-file") {
+		t.Fatalf("read binary error = %v, want not-text-file", err)
+	}
+}
+
+func TestReadVaultFileBytesRules(t *testing.T) {
+	s, root := newTestService(t)
+	imageBytes := []byte{0x89, 0x50, 0x4e, 0x47}
+	if err := os.WriteFile(filepath.Join(root, "image.png"), imageBytes, 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "Folder"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "huge.bin"), []byte(strings.Repeat("a", int(MaxBinaryReadBytes)+1)), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	result, err := s.ReadVaultFileBytes("image.png")
+	if err != nil {
+		t.Fatalf("ReadVaultFileBytes image: %v", err)
+	}
+	if result.RelativePath != "image.png" {
+		t.Fatalf("relative path = %q, want image.png", result.RelativePath)
+	}
+	if result.Size != int64(len(imageBytes)) {
+		t.Fatalf("size = %d, want %d", result.Size, len(imageBytes))
+	}
+	if result.MimeHint != "image/png" {
+		t.Fatalf("mime hint = %q, want image/png", result.MimeHint)
+	}
+	if result.DataBase64 != "iVBORw==" {
+		t.Fatalf("dataBase64 = %q, want iVBORw==", result.DataBase64)
+	}
+
+	if _, err := s.ReadVaultFileBytes("Folder"); err == nil || !strings.Contains(err.Error(), "not-regular-file") {
+		t.Fatalf("read folder error = %v, want not-regular-file", err)
+	}
+	if _, err := s.ReadVaultFileBytes("missing.png"); err == nil || !strings.Contains(err.Error(), "not-found") {
+		t.Fatalf("read missing error = %v, want not-found", err)
+	}
+	if _, err := s.ReadVaultFileBytes("huge.bin"); err == nil || !strings.Contains(err.Error(), "file-too-large") {
+		t.Fatalf("read huge error = %v, want file-too-large", err)
+	}
+}
+
+func TestWriteVaultTextFileAtomicAndConflictBehavior(t *testing.T) {
+	s, root := newTestService(t)
+
+	if err := s.WriteVaultTextFile("Notes/one.md", "first", WriteOptions{CreateIfMissing: true}); err == nil {
+		t.Fatal("write should fail when parent folder is missing")
+	}
+	if err := s.CreateVaultFolder("Notes"); err != nil {
+		t.Fatalf("CreateVaultFolder: %v", err)
+	}
+	if err := s.WriteVaultTextFile("Notes/one.md", "first", WriteOptions{CreateIfMissing: true}); err != nil {
+		t.Fatalf("write create: %v", err)
+	}
+	if err := s.WriteVaultTextFile("Notes/one.md", "second", WriteOptions{CreateIfMissing: true}); err == nil || !strings.Contains(err.Error(), "conflict") {
+		t.Fatalf("write conflict error = %v, want conflict", err)
+	}
+	if err := s.WriteVaultTextFile("Notes/one.md", "second", WriteOptions{CreateIfMissing: true, Overwrite: true}); err != nil {
+		t.Fatalf("write overwrite: %v", err)
+	}
+
+	data, err := os.ReadFile(filepath.Join(root, "Notes", "one.md"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if string(data) != "second" {
+		t.Fatalf("file content = %q", string(data))
+	}
+
+	matches, err := filepath.Glob(filepath.Join(root, "Notes", ".verstak-write-*"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(matches) != 0 {
+		t.Fatalf("atomic write left temp files: %v", matches)
+	}
+
+	if err := s.WriteVaultTextFile("", "root", WriteOptions{CreateIfMissing: true}); err == nil || !strings.Contains(err.Error(), "empty path") {
+		t.Fatalf("write root error = %v, want empty path", err)
+	}
+}
+
+func TestWriteVaultFileBytesAtomicAndConflictBehavior(t *testing.T) {
+	s, root := newTestService(t)
+
+	if err := s.WriteVaultFileBytes("Images/logo.png", "iVBORw==", WriteOptions{CreateIfMissing: true}); err == nil {
+		t.Fatal("write bytes should fail when parent folder is missing")
+	}
+	if err := s.CreateVaultFolder("Images"); err != nil {
+		t.Fatalf("CreateVaultFolder: %v", err)
+	}
+	if err := s.WriteVaultFileBytes("Images/logo.png", "iVBORw==", WriteOptions{CreateIfMissing: true}); err != nil {
+		t.Fatalf("write bytes create: %v", err)
+	}
+	data, err := os.ReadFile(filepath.Join(root, "Images", "logo.png"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if string(data) != string([]byte{0x89, 0x50, 0x4e, 0x47}) {
+		t.Fatalf("file bytes = %v", data)
+	}
+	if err := s.WriteVaultFileBytes("Images/logo.png", "AQID", WriteOptions{CreateIfMissing: true}); err == nil || !strings.Contains(err.Error(), "conflict") {
+		t.Fatalf("write bytes conflict error = %v, want conflict", err)
+	}
+	if err := s.WriteVaultFileBytes("Images/logo.png", "AQID", WriteOptions{Overwrite: true}); err != nil {
+		t.Fatalf("write bytes overwrite: %v", err)
+	}
+	data, err = os.ReadFile(filepath.Join(root, "Images", "logo.png"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if string(data) != string([]byte{0x01, 0x02, 0x03}) {
+		t.Fatalf("overwritten bytes = %v", data)
+	}
+
+	matches, err := filepath.Glob(filepath.Join(root, "Images", ".verstak-write-*"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(matches) != 0 {
+		t.Fatalf("atomic byte write left temp files: %v", matches)
+	}
+	if err := s.WriteVaultFileBytes("Images/bad.bin", "not-base64!", WriteOptions{CreateIfMissing: true}); err == nil || !strings.Contains(err.Error(), "invalid-base64") {
+		t.Fatalf("invalid base64 error = %v, want invalid-base64", err)
+	}
+	tooLarge := base64.StdEncoding.EncodeToString([]byte(strings.Repeat("a", int(MaxBinaryReadBytes)+1)))
+	if err := s.WriteVaultFileBytes("Images/huge.bin", tooLarge, WriteOptions{CreateIfMissing: true}); err == nil || !strings.Contains(err.Error(), "file-too-large") {
+		t.Fatalf("oversized bytes error = %v, want file-too-large", err)
+	}
+}
+
+func TestCreateVaultFolderConflict(t *testing.T) {
+	s, _ := newTestService(t)
+	if err := s.CreateVaultFolder("Folder"); err != nil {
+		t.Fatalf("CreateVaultFolder first: %v", err)
+	}
+	if err := s.CreateVaultFolder("Folder"); err == nil || !strings.Contains(err.Error(), "conflict") {
+		t.Fatalf("CreateVaultFolder conflict error = %v, want conflict", err)
+	}
+}
+
+func TestMoveVaultPathRules(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.Mkdir(filepath.Join(root, "A"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "A", "one.txt"), []byte("one"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "target.txt"), []byte("target"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	if err := s.MoveVaultPath("A/one.txt", "moved.txt", MoveOptions{}); err != nil {
+		t.Fatalf("move file: %v", err)
+	}
+	if _, err := os.Stat(filepath.Join(root, "moved.txt")); err != nil {
+		t.Fatalf("moved file missing: %v", err)
+	}
+
+	if err := s.MoveVaultPath("A", "B", MoveOptions{}); err != nil {
+		t.Fatalf("move folder: %v", err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "C"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := s.MoveVaultPath("C", "C/Child", MoveOptions{}); err == nil || !strings.Contains(err.Error(), "move-into-self") {
+		t.Fatalf("move into self error = %v, want move-into-self", err)
+	}
+	if err := s.MoveVaultPath("moved.txt", "target.txt", MoveOptions{}); err == nil || !strings.Contains(err.Error(), "conflict") {
+		t.Fatalf("move conflict error = %v, want conflict", err)
+	}
+	if err := s.MoveVaultPath("", "root-move", MoveOptions{}); err == nil {
+		t.Fatal("move root should fail")
+	}
+}
+
+func TestTrashVaultPathMovesToReservedTrashAndHidesFromList(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "delete-me.txt"), []byte("bye"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "delete-folder"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "same.txt"), []byte("one"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "Other"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "Other", "same.txt"), []byte("two"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	fileResult, err := s.TrashVaultPath("delete-me.txt")
+	if err != nil {
+		t.Fatalf("trash file: %v", err)
+	}
+	if fileResult.OriginalPath != "delete-me.txt" || fileResult.TrashID == "" || fileResult.DeletedAt == "" {
+		t.Fatalf("unexpected trash result: %+v", fileResult)
+	}
+	if _, err := os.Stat(filepath.Join(root, fileResult.TrashPath)); err != nil {
+		t.Fatalf("trashed file missing: %v", err)
+	}
+	metaPath := filepath.Join(root, ".verstak", "trash", "files", fileResult.TrashID, "metadata.json")
+	metaData, err := os.ReadFile(metaPath)
+	if err != nil {
+		t.Fatalf("trash metadata missing: %v", err)
+	}
+	var meta map[string]string
+	if err := json.Unmarshal(metaData, &meta); err != nil {
+		t.Fatalf("trash metadata invalid JSON: %v", err)
+	}
+	for _, key := range []string{"originalPath", "deletedAt", "originalType", "trashId", "basename"} {
+		if meta[key] == "" {
+			t.Fatalf("trash metadata missing %s: %s", key, string(metaData))
+		}
+	}
+	if meta["basename"] != "delete-me.txt" || meta["originalType"] != string(FileTypeFile) {
+		t.Fatalf("trash metadata = %+v", meta)
+	}
+
+	if _, err := s.TrashVaultPath("delete-folder"); err != nil {
+		t.Fatalf("trash folder: %v", err)
+	}
+	firstSame, err := s.TrashVaultPath("same.txt")
+	if err != nil {
+		t.Fatalf("trash same root: %v", err)
+	}
+	secondSame, err := s.TrashVaultPath("Other/same.txt")
+	if err != nil {
+		t.Fatalf("trash same nested: %v", err)
+	}
+	if firstSame.TrashID == secondSame.TrashID || firstSame.TrashPath == secondSame.TrashPath {
+		t.Fatalf("repeated trash basename collided: first=%+v second=%+v", firstSame, secondSame)
+	}
+	if _, err := s.TrashVaultPath(""); err == nil {
+		t.Fatal("trash root should fail")
+	}
+	if _, err := s.TrashVaultPath("missing.txt"); err == nil || !strings.Contains(err.Error(), "not-found") {
+		t.Fatalf("trash missing error = %v, want not-found", err)
+	}
+
+	entries, err := s.ListVaultFiles("")
+	if err != nil {
+		t.Fatalf("ListVaultFiles: %v", err)
+	}
+	for _, entry := range entries {
+		if entry.Name == "delete-me.txt" || entry.Name == "delete-folder" || entry.Name == ".verstak" {
+			t.Fatalf("unexpected entry after trash: %+v", entry)
+		}
+	}
+}
+
+func TestListTrashEntriesReturnsMetadata(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "old.txt"), []byte("old"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "new.txt"), []byte("new"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	oldResult, err := s.TrashVaultPath("old.txt")
+	if err != nil {
+		t.Fatalf("trash old: %v", err)
+	}
+	newResult, err := s.TrashVaultPath("new.txt")
+	if err != nil {
+		t.Fatalf("trash new: %v", err)
+	}
+
+	entries, err := s.ListTrashEntries()
+	if err != nil {
+		t.Fatalf("ListTrashEntries: %v", err)
+	}
+	if len(entries) != 2 {
+		t.Fatalf("trash entries count = %d, want 2: %+v", len(entries), entries)
+	}
+	if entries[0].TrashID != newResult.TrashID || entries[1].TrashID != oldResult.TrashID {
+		t.Fatalf("trash entries order = %+v, want newest first", entries)
+	}
+	if entries[0].OriginalPath != "new.txt" || entries[0].TrashPath != newResult.TrashPath || entries[0].OriginalType != FileTypeFile || entries[0].Basename != "new.txt" || entries[0].Size != 3 {
+		t.Fatalf("new trash entry = %+v", entries[0])
+	}
+}
+
+func TestRestoreTrashEntryRestoresOriginalPathAndRemovesTrashMetadata(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.Mkdir(filepath.Join(root, "Docs"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "Docs", "restore.txt"), []byte("restore me"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	trash, err := s.TrashVaultPath("Docs/restore.txt")
+	if err != nil {
+		t.Fatalf("TrashVaultPath: %v", err)
+	}
+
+	restored, err := s.RestoreTrashEntry(trash.TrashID, RestoreOptions{})
+	if err != nil {
+		t.Fatalf("RestoreTrashEntry: %v", err)
+	}
+	if restored != "Docs/restore.txt" {
+		t.Fatalf("restored path = %q, want Docs/restore.txt", restored)
+	}
+	data, err := os.ReadFile(filepath.Join(root, "Docs", "restore.txt"))
+	if err != nil {
+		t.Fatalf("restored file missing: %v", err)
+	}
+	if string(data) != "restore me" {
+		t.Fatalf("restored content = %q", string(data))
+	}
+	if _, err := os.Stat(filepath.Join(root, trash.TrashPath)); !os.IsNotExist(err) {
+		t.Fatalf("trash payload should be removed, stat err = %v", err)
+	}
+	entries, err := s.ListTrashEntries()
+	if err != nil {
+		t.Fatalf("ListTrashEntries: %v", err)
+	}
+	if len(entries) != 0 {
+		t.Fatalf("trash entries after restore = %+v, want none", entries)
+	}
+}
+
+func TestDeleteTrashEntryRemovesPayloadAndMetadata(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "delete-permanently.txt"), []byte("remove me"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	trash, err := s.TrashVaultPath("delete-permanently.txt")
+	if err != nil {
+		t.Fatalf("TrashVaultPath: %v", err)
+	}
+
+	if err := s.DeleteTrashEntry(trash.TrashID); err != nil {
+		t.Fatalf("DeleteTrashEntry: %v", err)
+	}
+	if _, err := os.Stat(filepath.Join(root, ".verstak", "trash", "files", trash.TrashID)); !os.IsNotExist(err) {
+		t.Fatalf("trash directory should be removed, stat err = %v", err)
+	}
+	entries, err := s.ListTrashEntries()
+	if err != nil {
+		t.Fatalf("ListTrashEntries: %v", err)
+	}
+	if len(entries) != 0 {
+		t.Fatalf("trash entries after permanent delete = %+v, want none", entries)
+	}
+	if err := s.DeleteTrashEntry(trash.TrashID); err == nil || !strings.Contains(err.Error(), "not-found: trash entry") {
+		t.Fatalf("second DeleteTrashEntry error = %v, want not found", err)
+	}
+}
+
+func TestRestoreTrashEntryConflictAndOverwrite(t *testing.T) {
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "conflict.txt"), []byte("trashed"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	trash, err := s.TrashVaultPath("conflict.txt")
+	if err != nil {
+		t.Fatalf("TrashVaultPath: %v", err)
+	}
+	if err := os.WriteFile(filepath.Join(root, "conflict.txt"), []byte("existing"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	if _, err := s.RestoreTrashEntry(trash.TrashID, RestoreOptions{}); err == nil || !strings.Contains(err.Error(), "conflict: conflict.txt") {
+		t.Fatalf("restore conflict error = %v, want conflict", err)
+	}
+	data, err := os.ReadFile(filepath.Join(root, "conflict.txt"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if string(data) != "existing" {
+		t.Fatalf("conflicting file content = %q, want existing", string(data))
+	}
+
+	restored, err := s.RestoreTrashEntry(trash.TrashID, RestoreOptions{Overwrite: true})
+	if err != nil {
+		t.Fatalf("RestoreTrashEntry overwrite: %v", err)
+	}
+	if restored != "conflict.txt" {
+		t.Fatalf("restored path = %q, want conflict.txt", restored)
+	}
+	data, err = os.ReadFile(filepath.Join(root, "conflict.txt"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if string(data) != "trashed" {
+		t.Fatalf("overwritten content = %q, want trashed", string(data))
+	}
+}
+
+func TestRestoreTrashEntryRejectsInvalidTrashID(t *testing.T) {
+	s, _ := newTestService(t)
+	for _, trashID := range []string{"", "../escape", "bad/slash"} {
+		t.Run(trashID, func(t *testing.T) {
+			if _, err := s.RestoreTrashEntry(trashID, RestoreOptions{}); err == nil {
+				t.Fatal("expected invalid trash id error")
+			}
+		})
+	}
+}
+
+func TestSymlinkEscapeRejected(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("symlink creation requires privileges on many Windows test environments")
+	}
+
+	s, root := newTestService(t)
+	outside := t.TempDir()
+	outsideFile := filepath.Join(outside, "outside.txt")
+	if err := os.WriteFile(outsideFile, []byte("secret"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Symlink(outsideFile, filepath.Join(root, "escape.txt")); err != nil {
+		t.Skipf("symlink not supported in this environment: %v", err)
+	}
+
+	meta, err := s.GetVaultFileMetadata("escape.txt")
+	if err != nil {
+		t.Fatalf("metadata symlink: %v", err)
+	}
+	if meta.Type != FileTypeSymlink {
+		t.Fatalf("symlink type = %q", meta.Type)
+	}
+
+	if _, err := s.ReadVaultTextFile("escape.txt"); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("read symlink error = %v, want symlink-not-allowed", err)
+	}
+	if err := s.WriteVaultTextFile("escape.txt", "x", WriteOptions{Overwrite: true}); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("write symlink error = %v, want symlink-not-allowed", err)
+	}
+	if err := s.MoveVaultPath("escape.txt", "moved-link.txt", MoveOptions{}); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("move symlink error = %v, want symlink-not-allowed", err)
+	}
+	if _, err := s.TrashVaultPath("escape.txt"); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("trash symlink error = %v, want symlink-not-allowed", err)
+	}
+}
+
+func TestSymlinkInsideVaultRejectedForMutatingAndReadOperations(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("symlink creation requires privileges on many Windows test environments")
+	}
+
+	s, root := newTestService(t)
+	if err := os.WriteFile(filepath.Join(root, "target.txt"), []byte("inside"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Symlink(filepath.Join(root, "target.txt"), filepath.Join(root, "inside-link.txt")); err != nil {
+		t.Skipf("symlink not supported in this environment: %v", err)
+	}
+
+	meta, err := s.GetVaultFileMetadata("inside-link.txt")
+	if err != nil {
+		t.Fatalf("metadata inside symlink: %v", err)
+	}
+	if meta.Type != FileTypeSymlink {
+		t.Fatalf("symlink type = %q", meta.Type)
+	}
+	if _, err := s.ReadVaultTextFile("inside-link.txt"); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("read inside symlink error = %v, want symlink-not-allowed", err)
+	}
+	if err := s.WriteVaultTextFile("inside-link.txt", "x", WriteOptions{Overwrite: true}); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("write inside symlink error = %v, want symlink-not-allowed", err)
+	}
+	if err := s.MoveVaultPath("inside-link.txt", "moved-link.txt", MoveOptions{}); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("move inside symlink error = %v, want symlink-not-allowed", err)
+	}
+	if _, err := s.TrashVaultPath("inside-link.txt"); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("trash inside symlink error = %v, want symlink-not-allowed", err)
+	}
+
+	matches, err := filepath.Glob(filepath.Join(root, ".verstak-write-*"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(matches) != 0 {
+		t.Fatalf("write symlink left root temp files: %v", matches)
+	}
+}
+
+func TestListVaultFilesRejectsSymlinkDirectoryEscape(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("symlink creation requires privileges on many Windows test environments")
+	}
+
+	s, root := newTestService(t)
+	outside := t.TempDir()
+	if err := os.WriteFile(filepath.Join(outside, "outside.txt"), []byte("secret"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Symlink(outside, filepath.Join(root, "outside-dir")); err != nil {
+		t.Skipf("symlink not supported in this environment: %v", err)
+	}
+
+	if _, err := s.ListVaultFiles("outside-dir"); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("list symlink dir error = %v, want symlink-not-allowed", err)
+	}
+
+	entries, err := s.ListVaultFiles("")
+	if err != nil {
+		t.Fatalf("list root: %v", err)
+	}
+	var foundSymlink bool
+	for _, entry := range entries {
+		if entry.RelativePath == "outside-dir" {
+			foundSymlink = true
+			if entry.Type != FileTypeSymlink {
+				t.Fatalf("root symlink entry type = %q, want symlink", entry.Type)
+			}
+		}
+	}
+	if !foundSymlink {
+		t.Fatal("root list should expose the symlink as metadata without following it")
+	}
+}
+
+func TestCreateVaultFolderRejectsSymlinkParentEscape(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("symlink creation requires privileges on many Windows test environments")
+	}
+
+	s, root := newTestService(t)
+	outside := t.TempDir()
+	if err := os.Symlink(outside, filepath.Join(root, "outside-dir")); err != nil {
+		t.Skipf("symlink not supported in this environment: %v", err)
+	}
+
+	if err := s.CreateVaultFolder("outside-dir/new-folder"); err == nil || !strings.Contains(err.Error(), "symlink-not-allowed") {
+		t.Fatalf("create folder through symlink parent error = %v, want symlink-not-allowed", err)
+	}
+	if _, err := os.Stat(filepath.Join(outside, "new-folder")); !os.IsNotExist(err) {
+		t.Fatalf("folder should not be created outside vault, stat err=%v", err)
+	}
+}

internal/core/files/types.go

@@ -0,0 +1,86 @@
+package files
+
+const MaxTextFileBytes int64 = 2 * 1024 * 1024
+const MaxBinaryReadBytes int64 = 8 * 1024 * 1024
+
+type FileType string
+
+const (
+	FileTypeFile    FileType = "file"
+	FileTypeFolder  FileType = "folder"
+	FileTypeSymlink FileType = "symlink"
+	FileTypeUnknown FileType = "unknown"
+)
+
+type FileEntry struct {
+	Name         string   `json:"name"`
+	RelativePath string   `json:"relativePath"`
+	Type         FileType `json:"type"`
+	Size         int64    `json:"size"`
+	ModifiedAt   string   `json:"modifiedAt"`
+	Extension    string   `json:"extension"`
+	IsHidden     bool     `json:"isHidden"`
+	IsReserved   bool     `json:"isReserved"`
+	CanRead      bool     `json:"canRead"`
+	CanWrite     bool     `json:"canWrite"`
+}
+
+type FileMetadata struct {
+	RelativePath string   `json:"relativePath"`
+	Type         FileType `json:"type"`
+	Size         int64    `json:"size"`
+	ModifiedAt   string   `json:"modifiedAt"`
+	CreatedAt    string   `json:"createdAt,omitempty"`
+	Extension    string   `json:"extension"`
+	MimeHint     string   `json:"mimeHint"`
+	IsText       bool     `json:"isText"`
+	IsHidden     bool     `json:"isHidden"`
+	IsReserved   bool     `json:"isReserved"`
+	CanRead      bool     `json:"canRead"`
+	CanWrite     bool     `json:"canWrite"`
+}
+
+type FileBytes struct {
+	RelativePath string `json:"relativePath"`
+	Size         int64  `json:"size"`
+	MimeHint     string `json:"mimeHint"`
+	DataBase64   string `json:"dataBase64"`
+}
+
+type ExternalOpenTarget struct {
+	RelativePath string       `json:"relativePath"`
+	AbsolutePath string       `json:"absolutePath"`
+	Metadata     FileMetadata `json:"metadata"`
+}
+
+type WriteOptions struct {
+	CreateIfMissing bool `json:"createIfMissing"`
+	Overwrite       bool `json:"overwrite"`
+}
+
+type MoveOptions struct {
+	Overwrite bool `json:"overwrite"`
+}
+
+type RestoreOptions struct {
+	TargetPath string `json:"targetPath,omitempty"`
+	Overwrite  bool   `json:"overwrite"`
+}
+
+type TrashResult struct {
+	OriginalPath string `json:"originalPath"`
+	TrashPath    string `json:"trashPath"`
+	TrashID      string `json:"trashId"`
+	DeletedAt    string `json:"deletedAt"`
+	Size         int64  `json:"size"`
+}
+
+type TrashEntry struct {
+	OriginalPath string   `json:"originalPath"`
+	TrashPath    string   `json:"trashPath"`
+	TrashID      string   `json:"trashId"`
+	DeletedAt    string   `json:"deletedAt"`
+	OriginalType FileType `json:"originalType"`
+	Basename     string   `json:"basename"`
+	Size         int64    `json:"size"`
+}