feat(webui): route the archive operations over the wire

The port members and the transport methods existed, and `host.ts` implemented
them, but no operation was registered for either name — so a panel call came
back `unknown_operation`. The seam was half-built in a way that typechecking
cannot see, which is why it survived the earlier rounds.

Both operations validate the same way their siblings do: a non-empty
`workspaceDir` and `path`, and `prefix` as a non-empty string when present.
The extraction's `destination` is checked here as the first gate rather than
only inside the runtime, because a browser cannot name an absolute path, so a
destination the client supplied verbatim is the one unvalidated link in the
chain. The runtime re-validates regardless; this is the earlier gate, not a
replacement.

56 files / 1077 tests pass; typecheck:server, typecheck:client and
typecheck:test clean.

Author: probe

packages/webui/src/server/operation/names.ts

@@ -29,6 +29,8 @@ export const GET_WORKSPACE_REVIEW_FILE_CONTENT_OPERATION_NAME = "getWorkspaceRev
 export const SEARCH_WORKSPACE_REVIEW_DIFFS_OPERATION_NAME = "searchWorkspaceReviewDiffs" as const;
 export const READ_CANVAS_OPERATION_NAME = "readCanvas" as const;
 export const APPLY_CANVAS_OPERATION_NAME = "applyCanvas" as const;
+export const READ_WORKSPACE_ARCHIVE_OPERATION_NAME = "readWorkspaceArchive" as const;
+export const EXTRACT_WORKSPACE_ARCHIVE_OPERATION_NAME = "extractWorkspaceArchive" as const;
 export const CREATE_TERMINAL_OPERATION_NAME = "createTerminal" as const;
 export const LIST_TERMINALS_OPERATION_NAME = "listTerminals" as const;
 export const WRITE_TERMINAL_OPERATION_NAME = "writeTerminal" as const;

packages/webui/src/server/operation/operation-handlers.ts

@@ -61,6 +61,8 @@ export type WebuiOperationPort = Pick<
   | "searchWorkspaceReviewDiffs"
   | "readCanvas"
   | "applyCanvas"
+  | "readWorkspaceArchive"
+  | "extractWorkspaceArchive"
   | "sendMessage"
   | "enqueueMessage"
   | "resumeSession"
@@ -140,6 +142,12 @@ export function createOperationHandlers(
     applyCanvas: async (_context, body) => ({
       body: await port.applyCanvas(body),
     }),
+    readWorkspaceArchive: async (_context, body) => ({
+      body: await port.readWorkspaceArchive(body),
+    }),
+    extractWorkspaceArchive: async (_context, body) => ({
+      body: await port.extractWorkspaceArchive(body),
+    }),
     getWorkspaceEnvironment: async (_context, body) => ({
       body: await port.getWorkspaceEnvironment(body),
     }),

packages/webui/src/server/operation/operations.ts

@@ -1,5 +1,5 @@
 import { versionOperation, listSessionsOperation, listVisibleProjectsOperation, getSessionTreeOperation, createSessionOperation, getSessionOperation, getActiveTurnOperation } from "./session.js";
-import { listWorkspaceFileTreeOperation, browseWorkspaceDirsOperation, readWorkspaceFileOperation, getWorkspaceEnvironmentOperation, mutateWorkspaceGitOperation, getWorkspaceReviewSummaryOperation, listWorkspaceReviewFileDiffsOperation, getWorkspaceReviewFileContentOperation, searchWorkspaceReviewDiffsOperation, readCanvasOperation, applyCanvasOperation, createTerminalOperation, listTerminalsOperation, writeTerminalOperation, resizeTerminalOperation, disposeTerminalOperation, watchTerminalOperation } from "./workspace.js";
+import { listWorkspaceFileTreeOperation, browseWorkspaceDirsOperation, readWorkspaceFileOperation, getWorkspaceEnvironmentOperation, mutateWorkspaceGitOperation, getWorkspaceReviewSummaryOperation, listWorkspaceReviewFileDiffsOperation, getWorkspaceReviewFileContentOperation, searchWorkspaceReviewDiffsOperation, readCanvasOperation, applyCanvasOperation, readWorkspaceArchiveOperation, extractWorkspaceArchiveOperation, createTerminalOperation, listTerminalsOperation, writeTerminalOperation, resizeTerminalOperation, disposeTerminalOperation, watchTerminalOperation } from "./workspace.js";
 import { getMessagesOperation, getSessionDiffOperation, getTurnDiffOperation, revertTurnDiffOperation, reapplyTurnDiffOperation, getSessionRewindPreviewOperation, rewindSessionOperation, editSessionMessageOperation } from "./messages.js";
 import { isGoalEnabledOperation, getGoalOperation, createGoalOperation, patchGoalOperation, clearGoalOperation } from "./goal.js";
 import { sendMessageOperation, enqueueMessageOperation, resumeSessionOperation } from "./interaction.js";
@@ -9,7 +9,7 @@ import { pluginManagementOperation } from "./plugin-management.js";
 import { getPermissionModeOperation, setPermissionModeOperation } from "./permission-mode.js";
 import { archiveSessionOperation, deleteSessionOperation, updateSessionOperation, getSessionForkOptionsOperation, forkSessionOperation, listUserModelProvidersOperation, createUserModelProviderOperation, updateUserModelProviderOperation, deleteUserModelProviderOperation, testUserModelProviderOperation, testUserModelOperation, discoverUserModelsCandidateOperation, saveUserModelProviderCandidateOperation, listProviderPresetsOperation, getMiniMaxApiKeyStatusOperation, upsertMiniMaxApiKeyOperation, getCodexOAuthStatusOperation, getMiniMaxModelSourceOperation, setMiniMaxModelSourceOperation, testUserModelCandidateOperation, revealModelProviderApiKeyOperation, startCodexOAuthLoginOperation, cancelCodexOAuthLoginOperation, refreshModelsOperation, runCommandOperation, getSigninPanelOperation, claimSigninOperation, signOutOperation } from "./provider.js";
 export { versionOperation, listSessionsOperation, listVisibleProjectsOperation, getSessionTreeOperation, createSessionOperation, getSessionOperation, getActiveTurnOperation } from "./session.js";
-export { listWorkspaceFileTreeOperation, browseWorkspaceDirsOperation, readWorkspaceFileOperation, getWorkspaceEnvironmentOperation, mutateWorkspaceGitOperation, getWorkspaceReviewSummaryOperation, listWorkspaceReviewFileDiffsOperation, getWorkspaceReviewFileContentOperation, searchWorkspaceReviewDiffsOperation, readCanvasOperation, applyCanvasOperation, createTerminalOperation, listTerminalsOperation, writeTerminalOperation, resizeTerminalOperation, disposeTerminalOperation, watchTerminalOperation } from "./workspace.js";
+export { listWorkspaceFileTreeOperation, browseWorkspaceDirsOperation, readWorkspaceFileOperation, getWorkspaceEnvironmentOperation, mutateWorkspaceGitOperation, getWorkspaceReviewSummaryOperation, listWorkspaceReviewFileDiffsOperation, getWorkspaceReviewFileContentOperation, searchWorkspaceReviewDiffsOperation, readCanvasOperation, applyCanvasOperation, readWorkspaceArchiveOperation, extractWorkspaceArchiveOperation, createTerminalOperation, listTerminalsOperation, writeTerminalOperation, resizeTerminalOperation, disposeTerminalOperation, watchTerminalOperation } from "./workspace.js";
 export { getMessagesOperation, getSessionDiffOperation, getTurnDiffOperation, revertTurnDiffOperation, reapplyTurnDiffOperation, getSessionRewindPreviewOperation, rewindSessionOperation, editSessionMessageOperation } from "./messages.js";
 export { isGoalEnabledOperation, getGoalOperation, createGoalOperation, patchGoalOperation, clearGoalOperation } from "./goal.js";
 export { sendMessageOperation, enqueueMessageOperation, resumeSessionOperation } from "./interaction.js";
@@ -48,6 +48,8 @@ export function createOperationRegistry(
   registerOperation(registry, { operation: readWorkspaceFileOperation, handle: handlers.readWorkspaceFile });
   registerOperation(registry, { operation: readCanvasOperation, handle: handlers.readCanvas });
   registerOperation(registry, { operation: applyCanvasOperation, handle: handlers.applyCanvas });
+  registerOperation(registry, { operation: readWorkspaceArchiveOperation, handle: handlers.readWorkspaceArchive });
+  registerOperation(registry, { operation: extractWorkspaceArchiveOperation, handle: handlers.extractWorkspaceArchive });
   registerOperation(registry, { operation: getWorkspaceEnvironmentOperation, handle: handlers.getWorkspaceEnvironment });
   registerOperation(registry, { operation: mutateWorkspaceGitOperation, handle: handlers.mutateWorkspaceGit });
   registerOperation(registry, { operation: getWorkspaceReviewSummaryOperation, handle: handlers.getWorkspaceReviewSummary });

packages/webui/src/server/operation/workspace.ts

@@ -6,6 +6,8 @@ import type { WebuiOperation, WebuiOperationValidation } from "./operation-contr
 import { invalidBody } from "./operation-contract.js";
 import type {
   WebuiCanvasDocument,
+  WebuiWorkspaceArchiveListing,
+  WebuiWorkspaceArchiveExtractResult,
   WebuiWorkspaceDirectoryListing,
   WebuiWorkspaceEnvironment,
   WebuiWorkspaceFile,
@@ -21,7 +23,7 @@ import {
   validateObjectBody,
   validateOptionalObjectBody,
 } from "./common.js";
-import { LIST_WORKSPACE_FILE_TREE_OPERATION_NAME, BROWSE_WORKSPACE_DIRS_OPERATION_NAME, READ_WORKSPACE_FILE_OPERATION_NAME, GET_WORKSPACE_ENVIRONMENT_OPERATION_NAME, MUTATE_WORKSPACE_GIT_OPERATION_NAME, GET_WORKSPACE_REVIEW_SUMMARY_OPERATION_NAME, LIST_WORKSPACE_REVIEW_FILE_DIFFS_OPERATION_NAME, GET_WORKSPACE_REVIEW_FILE_CONTENT_OPERATION_NAME, SEARCH_WORKSPACE_REVIEW_DIFFS_OPERATION_NAME, READ_CANVAS_OPERATION_NAME, APPLY_CANVAS_OPERATION_NAME, CREATE_TERMINAL_OPERATION_NAME, LIST_TERMINALS_OPERATION_NAME, WRITE_TERMINAL_OPERATION_NAME, RESIZE_TERMINAL_OPERATION_NAME, DISPOSE_TERMINAL_OPERATION_NAME, WATCH_TERMINAL_OPERATION_NAME } from "./names.js";
+import { LIST_WORKSPACE_FILE_TREE_OPERATION_NAME, BROWSE_WORKSPACE_DIRS_OPERATION_NAME, READ_WORKSPACE_FILE_OPERATION_NAME, GET_WORKSPACE_ENVIRONMENT_OPERATION_NAME, MUTATE_WORKSPACE_GIT_OPERATION_NAME, GET_WORKSPACE_REVIEW_SUMMARY_OPERATION_NAME, LIST_WORKSPACE_REVIEW_FILE_DIFFS_OPERATION_NAME, GET_WORKSPACE_REVIEW_FILE_CONTENT_OPERATION_NAME, SEARCH_WORKSPACE_REVIEW_DIFFS_OPERATION_NAME, READ_CANVAS_OPERATION_NAME, APPLY_CANVAS_OPERATION_NAME, READ_WORKSPACE_ARCHIVE_OPERATION_NAME, EXTRACT_WORKSPACE_ARCHIVE_OPERATION_NAME, CREATE_TERMINAL_OPERATION_NAME, LIST_TERMINALS_OPERATION_NAME, WRITE_TERMINAL_OPERATION_NAME, RESIZE_TERMINAL_OPERATION_NAME, DISPOSE_TERMINAL_OPERATION_NAME, WATCH_TERMINAL_OPERATION_NAME } from "./names.js";
 
 /** Upper bound on one directory listing. A home directory can hold
  *  thousands of folders and the picker only needs a browsable page. */
@@ -49,6 +51,17 @@ interface ApplyCanvasBody {
   readonly sessionId: string;
   readonly operation: Record<string, unknown>;
 }
+interface ReadWorkspaceArchiveBody {
+  readonly workspaceDir: string;
+  readonly path: string;
+  readonly prefix?: string;
+}
+interface ExtractWorkspaceArchiveBody {
+  readonly workspaceDir: string;
+  readonly path: string;
+  readonly destination: string;
+  readonly prefix?: string;
+}
 
 export const listWorkspaceFileTreeOperation: WebuiOperation<ListWorkspaceFileTreeBody, readonly WebuiWorkspaceFile[]> = {
   name: LIST_WORKSPACE_FILE_TREE_OPERATION_NAME,
@@ -234,8 +247,56 @@ export const applyCanvasOperation: WebuiOperation<ApplyCanvasBody, { readonly op
     };
   },
 };
-export const createTerminalOperation: WebuiOperation<Record<string, unknown>> = { name: CREATE_TERMINAL_OPERATION_NAME, validate: (body) => validateObjectBody(CREATE_TERMINAL_OPERATION_NAME, body) };
-export const listTerminalsOperation: WebuiOperation<Record<string, never>> = { name: LIST_TERMINALS_OPERATION_NAME, validate: (body) => body && typeof body === "object" && !Array.isArray(body) && Object.keys(body).length === 0 ? { ok: true, body: {} } : { ok: false, code: WebuiErrorCode.invalidBody, message: "listTerminals body must be an empty object" } };
+export const readWorkspaceArchiveOperation: WebuiOperation<ReadWorkspaceArchiveBody, WebuiWorkspaceArchiveListing> = {
+  name: READ_WORKSPACE_ARCHIVE_OPERATION_NAME,
+  validate: (body): WebuiOperationValidation<ReadWorkspaceArchiveBody> => {
+    const result = validateObjectBody(READ_WORKSPACE_ARCHIVE_OPERATION_NAME, body);
+    if (!result.ok) return result;
+    if (typeof result.body.workspaceDir !== "string" || !result.body.workspaceDir.trim())
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "workspaceDir is required" };
+    if (typeof result.body.path !== "string" || !result.body.path.trim())
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "path is required" };
+    if (result.body.prefix !== undefined && (typeof result.body.prefix !== "string" || !result.body.prefix.trim()))
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "prefix must be a non-empty string when present" };
+    return {
+      ok: true,
+      body: {
+        workspaceDir: result.body.workspaceDir,
+        path: result.body.path,
+        ...(typeof result.body.prefix === "string" ? { prefix: result.body.prefix } : {}),
+      },
+    };
+  },
+};
+export const extractWorkspaceArchiveOperation: WebuiOperation<ExtractWorkspaceArchiveBody, WebuiWorkspaceArchiveExtractResult> = {
+  name: EXTRACT_WORKSPACE_ARCHIVE_OPERATION_NAME,
+  validate: (body): WebuiOperationValidation<ExtractWorkspaceArchiveBody> => {
+    const result = validateObjectBody(EXTRACT_WORKSPACE_ARCHIVE_OPERATION_NAME, body);
+    if (!result.ok) return result;
+    if (typeof result.body.workspaceDir !== "string" || !result.body.workspaceDir.trim())
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "workspaceDir is required" };
+    if (typeof result.body.path !== "string" || !result.body.path.trim())
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "path is required" };
+    // Rejected here, before the runtime sees it: a browser cannot name an
+    // absolute path, so a destination the client supplied verbatim would be
+    // the one unvalidated path in the chain. The runtime re-validates
+    // anyway — this is the first gate, not the only one.
+    if (typeof result.body.destination !== "string" || !result.body.destination.trim())
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "destination is required" };
+    if (result.body.prefix !== undefined && (typeof result.body.prefix !== "string" || !result.body.prefix.trim()))
+      return { ok: false, code: WebuiErrorCode.invalidBody, message: "prefix must be a non-empty string when present" };
+    return {
+      ok: true,
+      body: {
+        workspaceDir: result.body.workspaceDir,
+        path: result.body.path,
+        destination: result.body.destination,
+        ...(typeof result.body.prefix === "string" ? { prefix: result.body.prefix } : {}),
+      },
+    };
+  },
+};
+export const createTerminalOperation: WebuiOperation<Record<string, unknown>> = { name: CREATE_TERMINAL_OPERATION_NAME, validate: (body) => validateObjectBody(CREATE_TERMINAL_OPERATION_NAME, body) };export const listTerminalsOperation: WebuiOperation<Record<string, never>> = { name: LIST_TERMINALS_OPERATION_NAME, validate: (body) => body && typeof body === "object" && !Array.isArray(body) && Object.keys(body).length === 0 ? { ok: true, body: {} } : { ok: false, code: WebuiErrorCode.invalidBody, message: "listTerminals body must be an empty object" } };
 export const writeTerminalOperation: WebuiOperation<Record<string, unknown>> = { name: WRITE_TERMINAL_OPERATION_NAME, validate: (body) => validateObjectBody(WRITE_TERMINAL_OPERATION_NAME, body) };
 export const resizeTerminalOperation: WebuiOperation<Record<string, unknown>> = { name: RESIZE_TERMINAL_OPERATION_NAME, validate: (body) => validateObjectBody(RESIZE_TERMINAL_OPERATION_NAME, body) };
 export const disposeTerminalOperation: WebuiOperation<Record<string, unknown>> = { name: DISPOSE_TERMINAL_OPERATION_NAME, validate: (body) => validateObjectBody(DISPOSE_TERMINAL_OPERATION_NAME, body) };

packages/webui/src/server/service.ts

@@ -200,6 +200,8 @@ export class WebuiService {
       searchWorkspaceReviewDiffs: (request) => this.port.searchWorkspaceReviewDiffs(request),
       readCanvas: (request) => this.port.readCanvas(request),
       applyCanvas: (request) => this.port.applyCanvas(request),
+      readWorkspaceArchive: (request) => this.port.readWorkspaceArchive(request),
+      extractWorkspaceArchive: (request) => this.port.extractWorkspaceArchive(request),
       sendMessage: (request, signal) => this.port.sendMessage(request, signal),
       enqueueMessage: (request) => this.port.enqueueMessage(request),
       resumeSession: (request, signal) =>