diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
new file mode 100644
index 00000000..b05ab502
--- /dev/null
+++ b/.github/workflows/docs.yml
@@ -0,0 +1,30 @@
+name: Documentation
+
+on:
+  push:
+    branches: [main, master]
+    paths:
+      - '*.md'
+      - 'docs/**'
+      - 'tests/backend/test_docs_*.py'
+      - '.github/workflows/docs.yml'
+  pull_request:
+    branches: [main, master]
+    paths:
+      - '*.md'
+      - 'docs/**'
+      - 'tests/backend/test_docs_*.py'
+      - '.github/workflows/docs.yml'
+
+jobs:
+  docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+          cache: pip
+          cache-dependency-path: requirements.txt
+      - run: pip install -r requirements.txt
+      - run: python -m unittest tests.backend.test_docs_links tests.backend.test_docs_sync -v
diff --git a/backend/app.py b/backend/app.py
index 4543027d..a8d646bc 100644
--- a/backend/app.py
+++ b/backend/app.py
@@ -830,11 +830,6 @@ def dispatch_api_request(self, method, parsed, body=None):
             else:
                 self.send_error(404)
             return
-        if isinstance(match.handler, str):
-            handler = getattr(self, match.handler)
-            handler(parsed, body, dict(match.params))
-            return
-
         request = Request(
             method=method,
             path=path,
diff --git a/backend/routing.py b/backend/routing.py
index 1ba7e074..4cae08e1 100644
--- a/backend/routing.py
+++ b/backend/routing.py
@@ -1,26 +1,20 @@
 """Small route registry used by the stdlib HTTP entrypoint."""
 
 from dataclasses import dataclass
-from typing import Any, Dict, Mapping, Optional, Tuple
+from typing import Callable, Dict, Mapping, Optional, Tuple
 
 
 @dataclass(frozen=True)
 class RouteMatch:
-    handler: Any
+    handler: Callable
     params: Mapping[str, str]
 
-    @property
-    def handler_name(self) -> str:
-        if isinstance(self.handler, str):
-            return self.handler
-        return getattr(self.handler, "__name__", str(self.handler))
-
 
 @dataclass(frozen=True)
 class _Route:
     method: str
     path: str
-    handler: Any
+    handler: Callable
     param_name: Optional[str] = None
     is_prefix: bool = False
 
@@ -37,7 +31,7 @@ def __init__(self) -> None:
         self._exact: Dict[Tuple[str, str], RouteMatch] = {}
         self._prefixes: list[_Route] = []
 
-    def add(self, method: str, path: str, handler: Any) -> "Router":
+    def add(self, method: str, path: str, handler: Callable) -> "Router":
         self._exact[(method.upper(), path)] = RouteMatch(handler, {})
         return self
 
@@ -45,7 +39,7 @@ def add_prefix(
         self,
         method: str,
         prefix: str,
-        handler: Any,
+        handler: Callable,
         param_name: Optional[str] = None,
     ) -> "Router":
         self._prefixes.append(
diff --git a/docs/chat-popout-capabilities.md b/docs/chat-popout-capabilities.md
index 48ac5a0c..1564ed8d 100644
--- a/docs/chat-popout-capabilities.md
+++ b/docs/chat-popout-capabilities.md
@@ -1,15 +1,15 @@
 # Chat pop-out Phase 1 capability findings
 
 Date: 2026-09-11  
-Status: Phase 1 fixture evidence (2026-09-11). The production pop-out in `ui/js/chat-window/` is covered in [Chat in a separate window](chat-popout.md) and [Tests](tests.md); this fixture itself implements no production behavior.
+Status: Historical Phase 1 evidence. The synthetic fixture was retired on 2026-09-23;
+its recorded browser and native findings remain below. Current production behavior
+and automated checks are documented in [Chat in a separate window](chat-popout.md)
+and [Tests](tests.md).
 
-The disposable check is run with:
-
-```powershell
-node tests/frontend/chat_popout_capabilities.cjs
-```
-
-The runner launches Playwright Chromium with fresh browser contexts and an ephemeral HTTP server. The server serves only the synthetic fixture page. It does not serve `ui/`, read or write `llama_gui_conversations`, accept chat requests, or expose any `/api/*` route. Each scenario uses a unique nonce and the only storage key it may create is `chat-popout-capability:<nonce>`. Closing the context removes that disposable state.
+The retired probe used fresh Chromium contexts and an ephemeral server serving a
+synthetic page, without application code, real chat history, or backend routes.
+The following fixture findings describe that 2026-09-11 experiment, not a current
+production regression suite.
 
 ## Evidence from the loopback fixture
 
@@ -36,29 +36,6 @@ Every fallback case uses a fresh browser context and keeps the source page recov
 
 The blocked-popup, blocked-storage, missing-Web-Locks, and missing-opener conditions are controlled browser-context simulations. The normal popup, opener reference, same-context storage sharing, Web Locks contention, secure-context result, and close checks run against Chromium itself. Native window activation is not asserted by the headless fixture. A real embedded host that strips or changes these capabilities still needs a native check.
 
-## Bootstrap and request-setting audit
-
-The current frontend is a strict ordered global-script page. `app.js` is not a safe popup entry point to run wholesale:
-
-- Before `DOMContentLoaded`, it selects `llama-server`, replaces `flagCore` values with defaults, creates the shared inference-stat engine, and configures API, sampler-preset, preset, tunnel, external-server, Hugging Face, Quick Launch, benchmark, Monitor, process-lifecycle, and Model Switcher modules. It also subscribes to lifecycle snapshots.
-- Its `DOMContentLoaded` handler initializes the theme, tabs, tool and Configure controls, installation/API/preset/Quick Launch/Chat/benchmark/Monitor flows, model-directory controls, release fetching, command preview, endpoint rendering, launch/stop actions, polling visibility handlers, and the remaining page wiring.
-- `chatUi.configure()` is a top-level dependency injection call near the end of `app.js`; `initChatTab()` only calls `chatUi.init()`. Loading the full application in a popup would therefore risk a second configuration authority, lifecycle controller, release fetch, and polling cycle.
-
-The smallest popup bootstrap must retain the ordered dependencies required by the Chat package (`ui/js/chat/`) (`flagCore`, `chatTools`, `app-data`, `chat-rendering`, `chat-compaction`, and `character-cards`) and provide the existing Chat DOM/dependency boundary. It should inject a verified host adapter for settings, runtime identity/status, authorization behavior, and the existing baseline helper. The popup must not initialize its own lifecycle controller or external-server restore. This is an audit result for the next phase; it does not add a popup module or alter the application bootstrap.
-
-`buildChatBody(history, draft, includeUsage)` currently consumes these request inputs:
-
-- `#chat-system-prompt` and `chatTools.getInstructions()` for the system message.
-- The complete history after `chatCompaction.workingMessages(...)`, passed through `chatTools.requestMessages(...)`, plus the trimmed draft as a final user message.
-- The active model from the lifecycle snapshot first, then running status, then shared `flagCore` alias/selected model, with `local-model` as the last fallback.
-- `stream: true` and, when requested, `stream_options.include_usage: true`.
-- Shared `flagCore` sampler values: `temperature`, `top_p`, `top_k`, `min_p`, `repeat_penalty`, and `n_predict` mapped to `max_tokens` (with numeric normalization and the `-1` server-default sentinel omitted from `max_tokens`).
-- `#chat-thinking-effort` (`auto`, `off`, `low`, `medium`, `high`, or `xhigh`). Non-auto values produce the top-level `reasoning_effort` and the compatibility `chat_template_kwargs`; `off` uses `none` and disables thinking.
-- `#chat-web-search-toggle` and the clamped `#chat-web-search-max-results` value (1–10, default 5) when search is enabled.
-- `chatTools.getDefinitions()` when the configured browser tools list is non-empty.
-
-Context-preview and compaction keys also include the active runtime, external target, template capabilities, and the same request body. A popup host adapter therefore needs notifications that invalidate stale previews when the main window changes runtime or shared sampler state.
-
 ## Launch-environment limits
 
 The Phase 1 fixture evidence is limited to a normal Chromium browser using loopback HTTP and isolated synthetic contexts. The following capabilities are not established by that fixture; later native observations are recorded separately below:
diff --git a/docs/chat-popout.md b/docs/chat-popout.md
index 30808080..612c8e1d 100644
--- a/docs/chat-popout.md
+++ b/docs/chat-popout.md
@@ -40,4 +40,4 @@ Only pages running this implementation in the same browser storage partition par
 
 For a native launcher or browser check, use disposable test conversations and verify popup/opener retention, shared storage, focus, close/reload recovery, and Return/Send access with both panels and Context open. Check the launcher's embedded view separately from its external-browser link. Keep CI on Linux and Windows; native checks do not require adding macOS runners.
 
-See [capability evidence](chat-popout-capabilities.md) and [test commands](tests.md).
+See [historical capability evidence](chat-popout-capabilities.md) and [test commands](tests.md).
diff --git a/docs/directory.md b/docs/directory.md
index a83851c0..c60a1b58 100644
--- a/docs/directory.md
+++ b/docs/directory.md
@@ -1364,7 +1364,7 @@ Prefer `rg` for local search. On Windows/PowerShell, use patterns like `rg -n "p
 | `docs/security.md` | Security model, trust boundaries, and reporting guidance |
 | `docs/troubleshooting.md` | Common installation, launch, model, GPU, and connectivity problems |
 | `docs/chat-popout.md` | Chat pop-out user guide: transfer, recovery, and browser/launcher support |
-| `docs/chat-popout-capabilities.md` | Phase 1 pop-out capability fixture evidence |
+| `docs/chat-popout-capabilities.md` | Historical pop-out capability and native-browser evidence |
 | `docs/upstream-changes.md` | llama.cpp upstream changes needing coordinated GUI updates |
 | `docs/software-versioning-policy.md` | CalVer versioning and stable-release policy |
 | `docs/images/` | Screenshots used by README.md |
diff --git a/docs/tests.md b/docs/tests.md
index 4f37e2f1..10e7a070 100644
--- a/docs/tests.md
+++ b/docs/tests.md
@@ -7,6 +7,10 @@ This repo has two main test groups:
 
 The goal is not exhaustive coverage. Tests should make common regressions easier to diagnose, especially around shared launch state, command generation, route/service behavior, and UI helper logic.
 
+The Documentation workflow runs the link and route-registry documentation checks on
+Markdown and `docs/` changes, including docs-only pull requests. The full Tests
+workflow retains its documentation exclusions and Linux/Windows matrix.
+
 ## Common Commands
 
 `python -m unittest tests.backend.test_official_backends -v` (using the project
@@ -19,19 +23,13 @@ installation. These fixtures never download or launch real GPU binaries.
 npm test
 ```
 
-Runs the full frontend suite in three stages: `test:unit` (JavaScript syntax checks, fast Node unit tests, structural flag-definition validation, and module loading/contract checks), `test:flags` (flag compatibility against real binaries), and `test:frontend` (the Playwright browser suite).
+Runs the full frontend suite in three stages: `test:unit` (fast Node unit tests, structural flag-definition validation, and module loading/contract checks), `test:flags` (flag compatibility against real binaries), and `test:frontend` (the Playwright browser suite).
 
 ```powershell
 npm run test:unit
 ```
 
-Runs the aggregate fast stage only — every Node unit suite plus `test:syntax`, `test:frontend:modules`, and `test:flag-definitions` — with no browser launch and no llama.cpp binary required. Use this as the inner loop; `test:flags` and `test:frontend` remain separate explicit stages, and `npm test` is the full gate.
-
-```powershell
-npm run test:syntax
-```
-
-Checks every frontend JavaScript file with `node --check`.
+Runs the aggregate fast stage only — every Node unit suite plus `test:frontend:modules` and `test:flag-definitions` — with no browser launch and no llama.cpp binary required. Use this as the inner loop; `test:flags` and `test:frontend` remain separate explicit stages, and `npm test` is the full gate.
 
 ```powershell
 npm run test:frontend:modules
@@ -68,7 +66,7 @@ npm run test:frontend
 
 Runs the Playwright smoke test for browser-level shared-state sync. This is also the only suite that can cover the Configure sampler preset panel, because `renderFlags()` destroys and rebuilds it — the `<select>` an assertion reads is a different element than the one that was clicked, which a `node:vm` harness cannot reproduce.
 
-The browser suite has named `node:test` scenarios with fresh browser contexts and API fixtures. A scenario failure does not prevent the remaining scenarios from running. To run one scenario:
+The browser suite has named `node:test` scenarios with fresh browser contexts and API fixtures. Shared controls, authentication, inference, Chat streaming/recovery/compaction, samplers, external servers, custom launch arguments, backend activation, model switching, preset focus, model folders, and Monitor behavior run independently. A scenario failure does not prevent the remaining scenarios from running. To run one scenario:
 
 ```powershell
 node --test --test-name-pattern="benchmark actions" tests/frontend/flag_sync_smoke.cjs
@@ -76,15 +74,9 @@ node --test --test-name-pattern="benchmark actions" tests/frontend/flag_sync_smo
 
 The smoke test also covers grouped sidebar navigation, current-page semantics, active-versus-pending runtime identity, external server details, duplicate Stop protection during transitions, mobile focus and dismissal, and maintenance access in short windows.
 
-The Phase 1 chat pop-out capability check is intentionally separate from the application smoke test:
-
-```powershell
-node --test tests/frontend/chat_popout_capabilities.cjs
-```
-
-It uses a disposable ephemeral fixture server and fresh Playwright contexts to verify loopback secure-context support, same-origin popup/tab references, exact origin/source/version messaging, nonce-scoped storage partitioning, exclusive Web Locks, focus-message acknowledgments, close detection, and fallback handling for blocked popups, unavailable openers/Web Locks, and blocked storage. It never loads the real UI, writes real chat history, or calls backend lifecycle routes. Native window activation is not asserted by this fixture. Windows/Chrome and Pinokio manual results are recorded under [Native smoke checks](#native-smoke-checks); Public HTTPS tunnel/trusted-certificate, second-device LAN and native macOS checks remain pending; local transport results are recorded under [Local HTTPS and LAN-address follow-up](tests.md#local-https-and-lan-address-follow-up). See `docs/chat-popout-capabilities.md` for the fixture's evidence limits.
+The retired synthetic pop-out capability probe is preserved as [historical evidence](chat-popout-capabilities.md). Current coverage loads the production Chat-window package and the real application.
 
-`node tests/frontend/chat_window_unit.cjs` covers the host adapter's allowed settings and runtime projections, verified peer handshakes, exclusive ownership, repeated forward/reverse transfers, storage failures, durable deletion invalidations, third-page contention, and revocation during pending abort/restore. `chat_ui_unit.cjs` covers snapshot fidelity, transfer save hooks, mutation epochs, and interrupted response recovery; `chat_tools_unit.cjs` covers date/time preference ownership. These tests use synthetic storage and VM contexts. Both Chat-window and Chat UI
+`node --test tests/frontend/chat_window_unit.cjs` covers the host adapter's allowed settings and runtime projections, verified peer handshakes, exclusive ownership, repeated forward/reverse transfers, storage failures, durable deletion invalidations, third-page contention, and revocation during pending abort/restore. `chat_ui_unit.cjs` covers snapshot fidelity, transfer save hooks, mutation epochs, and interrupted response recovery; `chat_tools_unit.cjs` covers date/time preference ownership. The Chat-window cases are named tests with synthetic storage and a fresh VM per scenario; coordinator/adapter cleanup runs after failures as well as successful assertions. Both Chat-window and Chat UI
 VM harnesses discover the complete Chat-window package from `index.html` through
 `getPackageScripts("js/chat-window")` in `script_order.cjs`; the pop-out integration fixture serves
 that same real entrypoint.
@@ -199,7 +191,6 @@ Fast Node tests:
 - `flag_definitions_unit.cjs`: structural validation of flag/category definitions and representative invalid cases, plus reference-identity checks for the shared chat-template, reasoning-format, and main/draft KV-cache option arrays.
 - `llama_flags_runner_unit.cjs`: deterministic binary-selection fixtures, required-build failures, no fallback from explicit paths, custom-backend discovery, failed/timed-out help, negated flags, and fork-only exclusions.
 - `llama_flags_supported_unit.cjs`: compares GUI flags against real `llama-server` / `llama-cli` help output. Flags marked `fork_only: true` are always exempt; flags marked `removed_in: "bNNNNN"` (upstream removals retained for older builds) are exempt when the probed binary reports a build at or above that tag, parsed from `--version`. CI requires the pinned CPU binaries; optional local discovery can skip with a message.
-- `js_syntax_check.cjs`: syntax-only check for frontend JavaScript.
 
 Browser smoke test:
 
diff --git a/package.json b/package.json
index a88650d4..7dc3aadc 100644
--- a/package.json
+++ b/package.json
@@ -3,8 +3,7 @@
   "private": true,
   "scripts": {
     "test": "npm run test:unit && npm run test:flags && npm run test:frontend",
-    "test:unit": "npm run test:syntax && node tests/frontend/custom_launch_args_unit.cjs && node tests/frontend/launch_args_unit.cjs && node tests/frontend/chat_template_selection_unit.cjs && node tests/frontend/output_cursor_unit.cjs && node tests/frontend/inference_stats_unit.cjs && node --test tests/frontend/memory_estimate_ui_unit.cjs tests/frontend/inference_polling_unit.cjs tests/frontend/process_output_unit.cjs && node --test tests/frontend/monitor_package_unit.cjs tests/frontend/monitor_system_cards_unit.cjs tests/frontend/monitor_gpu_cards_unit.cjs tests/frontend/monitor_inference_rendering_unit.cjs tests/frontend/monitor_terminal_runtime_unit.cjs tests/frontend/monitor_polling_unit.cjs tests/frontend/monitor_card_preferences_unit.cjs && node tests/frontend/process_lifecycle_unit.cjs && node tests/frontend/benchmark_args_unit.cjs && node tests/frontend/chat_rendering_unit.cjs && node tests/frontend/chat_ui_unit.cjs && node tests/frontend/chat_window_unit.cjs && node tests/frontend/chat_tools_unit.cjs && node tests/frontend/chat_compaction_unit.cjs && node tests/frontend/character_cards_unit.cjs && node tests/frontend/sampler_presets_unit.cjs && node tests/frontend/presets_unit.cjs && node tests/frontend/preset_roving_focus_unit.cjs && node tests/frontend/model_switch_ui_unit.cjs && node tests/frontend/hf_download_ui_unit.cjs && node tests/frontend/remote_tunnel_ui_unit.cjs && node tests/frontend/api_tab_unit.cjs && node tests/frontend/external_server_ui_unit.cjs && node tests/frontend/shared_services_unit.cjs && node tests/frontend/manager_releases_unit.cjs && node tests/frontend/manager_lifecycle_unit.cjs && node tests/frontend/manager_model_cache_unit.cjs && node tests/frontend/manager_model_dir_unit.cjs && node tests/frontend/theme_ui_unit.cjs && npm run test:frontend:modules && npm run test:flag-definitions",
-    "test:syntax": "node tests/frontend/js_syntax_check.cjs",
+    "test:unit": "node tests/frontend/custom_launch_args_unit.cjs && node tests/frontend/launch_args_unit.cjs && node tests/frontend/chat_template_selection_unit.cjs && node tests/frontend/output_cursor_unit.cjs && node tests/frontend/inference_stats_unit.cjs && node --test tests/frontend/memory_estimate_ui_unit.cjs tests/frontend/inference_polling_unit.cjs tests/frontend/process_output_unit.cjs && node --test tests/frontend/monitor_package_unit.cjs tests/frontend/monitor_system_cards_unit.cjs tests/frontend/monitor_gpu_cards_unit.cjs tests/frontend/monitor_inference_rendering_unit.cjs tests/frontend/monitor_terminal_runtime_unit.cjs tests/frontend/monitor_polling_unit.cjs tests/frontend/monitor_card_preferences_unit.cjs && node tests/frontend/process_lifecycle_unit.cjs && node tests/frontend/benchmark_args_unit.cjs && node tests/frontend/chat_rendering_unit.cjs && node tests/frontend/chat_ui_unit.cjs && node --test tests/frontend/chat_window_unit.cjs && node tests/frontend/chat_tools_unit.cjs && node tests/frontend/chat_compaction_unit.cjs && node tests/frontend/character_cards_unit.cjs && node tests/frontend/sampler_presets_unit.cjs && node tests/frontend/presets_unit.cjs && node tests/frontend/preset_roving_focus_unit.cjs && node tests/frontend/model_switch_ui_unit.cjs && node tests/frontend/hf_download_ui_unit.cjs && node tests/frontend/remote_tunnel_ui_unit.cjs && node tests/frontend/api_tab_unit.cjs && node tests/frontend/external_server_ui_unit.cjs && node tests/frontend/shared_services_unit.cjs && node tests/frontend/manager_releases_unit.cjs && node tests/frontend/manager_lifecycle_unit.cjs && node tests/frontend/manager_model_cache_unit.cjs && node tests/frontend/manager_model_dir_unit.cjs && node tests/frontend/theme_ui_unit.cjs && npm run test:frontend:modules && npm run test:flag-definitions",
     "test:frontend:modules": "node tests/frontend/module_namespace_unit.cjs",
     "test:flag-definitions": "node tests/frontend/flag_definitions_unit.cjs",
     "test:flags": "node tests/frontend/llama_flags_runner_unit.cjs && node tests/frontend/llama_flags_supported_unit.cjs",
diff --git a/tests/backend/test_routing.py b/tests/backend/test_routing.py
index 6b66cd8c..b2f2c6e5 100644
--- a/tests/backend/test_routing.py
+++ b/tests/backend/test_routing.py
@@ -3,32 +3,40 @@
 from backend.routing import Router
 
 
+def handle_status(*args):
+    pass
+
+
+def delete_preset(*args):
+    pass
+
+
 class RouterTests(unittest.TestCase):
     def test_exact_route_match(self):
-        router = Router().add("GET", "/api/status", "handle_status")
+        router = Router().add("GET", "/api/status", handle_status)
 
         match = router.match("GET", "/api/status")
 
         self.assertIsNotNone(match)
-        self.assertEqual(match.handler_name, "handle_status")
+        self.assertIs(match.handler, handle_status)
         self.assertEqual(match.params, {})
 
     def test_method_must_match(self):
-        router = Router().add("GET", "/api/status", "handle_status")
+        router = Router().add("GET", "/api/status", handle_status)
 
         self.assertIsNone(router.match("POST", "/api/status"))
 
     def test_prefix_route_params(self):
-        router = Router().add_prefix("DELETE", "/api/presets/", "delete_preset", "name")
+        router = Router().add_prefix("DELETE", "/api/presets/", delete_preset, "name")
 
         match = router.match("DELETE", "/api/presets/My%20Preset")
 
         self.assertIsNotNone(match)
-        self.assertEqual(match.handler_name, "delete_preset")
+        self.assertIs(match.handler, delete_preset)
         self.assertEqual(match.params, {"name": "My%20Preset"})
 
     def test_prefix_route_param_keeps_raw_encoded_suffix(self):
-        router = Router().add_prefix("DELETE", "/api/presets/", "delete_preset", "name")
+        router = Router().add_prefix("DELETE", "/api/presets/", delete_preset, "name")
 
         match = router.match("DELETE", "/api/presets/My%20Preset%2FBackup")
 
@@ -36,7 +44,7 @@ def test_prefix_route_param_keeps_raw_encoded_suffix(self):
         self.assertEqual(match.params, {"name": "My%20Preset%2FBackup"})
 
     def test_prefix_route_param_captures_full_suffix(self):
-        router = Router().add_prefix("DELETE", "/api/presets/", "delete_preset", "name")
+        router = Router().add_prefix("DELETE", "/api/presets/", delete_preset, "name")
 
         match = router.match("DELETE", "/api/presets/folder/preset")
 
@@ -46,18 +54,18 @@ def test_prefix_route_param_captures_full_suffix(self):
     def test_first_registered_overlapping_prefix_wins(self):
         router = (
             Router()
-            .add_prefix("GET", "/api/", "handle_api", "path")
-            .add_prefix("GET", "/api/presets/", "handle_preset", "name")
+            .add_prefix("GET", "/api/", handle_status, "path")
+            .add_prefix("GET", "/api/presets/", delete_preset, "name")
         )
 
         match = router.match("GET", "/api/presets/example")
 
         self.assertIsNotNone(match)
-        self.assertEqual(match.handler_name, "handle_api")
+        self.assertIs(match.handler, handle_status)
         self.assertEqual(match.params, {"path": "presets/example"})
 
     def test_unknown_route(self):
-        router = Router().add("GET", "/api/status", "handle_status")
+        router = Router().add("GET", "/api/status", handle_status)
 
         self.assertIsNone(router.match("GET", "/api/missing"))
 
diff --git a/tests/backend/test_server_baseline.py b/tests/backend/test_server_baseline.py
index 7251e9b6..0dd816ea 100644
--- a/tests/backend/test_server_baseline.py
+++ b/tests/backend/test_server_baseline.py
@@ -58,11 +58,6 @@ def make_handler(self, origin="", referer="", host=""):
         handler.headers = headers
         return handler
 
-    def test_allows_localhost_origins(self):
-        for origin in ("http://127.0.0.1:5240", "http://localhost:5240"):
-            with self.subTest(origin=origin):
-                self.assertTrue(self.make_handler(origin=origin).is_safe_request_origin())
-
     def test_allows_active_tunnel_origin(self):
         server.set_remote_tunnel_state(
             status="running",
@@ -97,22 +92,7 @@ def test_wildcard_bind_allows_same_port_ip_request_host_origin(self):
         finally:
             server.GUI_HOST = original_host
 
-    def test_rejects_unknown_origin(self):
-        handler = self.make_handler(origin="https://evil.example")
-
-        self.assertFalse(handler.is_safe_request_origin())
-
-    def test_allows_requests_without_origin_or_referer(self):
-        self.assertTrue(self.make_handler().is_safe_request_origin())
 
-    def test_referer_must_start_with_allowed_origin(self):
-        allowed = self.make_handler(referer="http://127.0.0.1:5240/index.html")
-        denied = self.make_handler(referer="http://127.0.0.1.evil.example:5240/")
-        prefix_bypass = self.make_handler(referer="http://localhost:5240@evil.example/")
-
-        self.assertTrue(allowed.is_safe_request_origin())
-        self.assertFalse(denied.is_safe_request_origin())
-        self.assertFalse(prefix_bypass.is_safe_request_origin())
 
 
 class HandlerResponseTests(ServerStateIsolationMixin, unittest.TestCase):
@@ -567,19 +547,19 @@ def test_api_router_knows_existing_endpoint(self):
         match = server.API_ROUTER.match("GET", "/api/status")
 
         self.assertIsNotNone(match)
-        self.assertEqual(match.handler_name, "get_status")
+        self.assertIs(match.handler, backend_app.status_routes.get_status)
 
         preflight_match = server.API_ROUTER.match("POST", "/api/launch/preflight")
         self.assertIsNotNone(preflight_match)
-        self.assertEqual(preflight_match.handler_name, "preflight_launch")
+        self.assertIs(preflight_match.handler, backend_app.process_routes.preflight_launch)
 
         fingerprint_match = server.API_ROUTER.match("POST", "/api/presets/fingerprint")
         self.assertIsNotNone(fingerprint_match)
-        self.assertEqual(fingerprint_match.handler_name, "fingerprint_preset")
+        self.assertIs(fingerprint_match.handler, backend_app.process_routes.fingerprint_preset)
 
         health_match = server.API_ROUTER.match("GET", "/api/llama/health")
         self.assertIsNotNone(health_match)
-        self.assertEqual(health_match.handler_name, "get_health")
+        self.assertIs(health_match.handler, backend_app.process_routes.get_health)
 
     def test_unknown_api_route_returns_json_404(self):
         handler = self.make_handler(origin="http://localhost:5240")
@@ -624,62 +604,6 @@ def route(request, response, ctx):
         self.assertEqual(handler.sent_response, 202)
         self.assertEqual(json.loads(handler.wfile.getvalue().decode("utf-8")), {"handled": True})
 
-    def test_dispatch_calls_legacy_string_handler_route(self):
-        handler = self.make_handler(origin="http://localhost:5240")
-        parsed = server.urllib.parse.urlparse("/api/test-legacy/abc?value=1")
-        body = {"ok": True}
-        calls = {}
-
-        def handle_test_legacy(self, parsed_arg, body_arg=None, params_arg=None):
-            calls["path"] = parsed_arg.path
-            calls["query"] = parsed_arg.query
-            calls["body"] = body_arg
-            calls["params"] = params_arg
-            self.send_json({"legacy": True}, status=203)
-
-        original_router = server.API_ROUTER
-        server.API_ROUTER = server.Router().add_prefix(
-            "POST",
-            "/api/test-legacy/",
-            "handle_test_legacy",
-            "name",
-        )
-        server.Handler.handle_test_legacy = handle_test_legacy
-        try:
-            handler.dispatch_api_request("POST", parsed, body)
-        finally:
-            server.API_ROUTER = original_router
-            del server.Handler.handle_test_legacy
-
-        self.assertEqual(
-            calls,
-            {
-                "path": "/api/test-legacy/abc",
-                "query": "value=1",
-                "body": {"ok": True},
-                "params": {"name": "abc"},
-            },
-        )
-        self.assertEqual(handler.sent_response, 203)
-        self.assertEqual(json.loads(handler.wfile.getvalue().decode("utf-8")), {"legacy": True})
-
-    def test_dispatch_unknown_api_route_returns_json_404(self):
-        handler = self.make_handler(origin="http://localhost:5240")
-        parsed = server.urllib.parse.urlparse("/api/test-missing")
-
-        original_router = server.API_ROUTER
-        server.API_ROUTER = server.Router()
-        try:
-            handler.dispatch_api_request("GET", parsed)
-        finally:
-            server.API_ROUTER = original_router
-
-        self.assertEqual(handler.sent_response, 404)
-        self.assertEqual(
-            json.loads(handler.wfile.getvalue().decode("utf-8")),
-            {"error": "Not found", "status": 404},
-        )
-
     def test_dispatch_unknown_non_api_route_uses_plain_404(self):
         handler = self.make_handler(origin="http://localhost:5240")
         parsed = server.urllib.parse.urlparse("/missing")
@@ -730,32 +654,6 @@ def test_remote_tunnel_log_is_truncated_in_state(self):
 
 
 class ValidationTests(ServerStateIsolationMixin, unittest.TestCase):
-    def test_hf_repo_id_validation(self):
-        self.assertEqual(server.validate_hf_repo_id("owner/model"), "owner/model")
-
-        for value in ("", "owner", "../model", "owner/model.", "owner//model"):
-            with self.subTest(value=value):
-                with self.assertRaises(ValueError):
-                    server.validate_hf_repo_id(value)
-
-    def test_hf_revision_validation_defaults_and_rejects_traversal(self):
-        self.assertEqual(server.validate_hf_revision(""), "main")
-        self.assertEqual(server.validate_hf_revision("refs/pr/1"), "refs/pr/1")
-
-        for value in ("/main", r"main\bad", "refs/../main", "bad\x00name"):
-            with self.subTest(value=value):
-                with self.assertRaises(ValueError):
-                    server.validate_hf_revision(value)
-
-    def test_hf_filename_validation_accepts_safe_gguf_paths(self):
-        self.assertEqual(server.validate_hf_filename("Q4/model.gguf"), "Q4/model.gguf")
-
-    def test_hf_filename_validation_rejects_unsafe_names(self):
-        for value in ("", "/model.gguf", "../model.gguf", "model.bin", "bad:name.gguf", "bad\x00name.gguf"):
-            with self.subTest(value=value):
-                with self.assertRaises(ValueError):
-                    server.validate_hf_filename(value)
-
     def test_parse_port_defaults_for_invalid_values(self):
         self.assertEqual(server.parse_port("1234"), 1234)
         self.assertEqual(server.parse_port("0"), 8080)
diff --git a/tests/backend/test_services.py b/tests/backend/test_services.py
index c03d5523..bfcdd15c 100644
--- a/tests/backend/test_services.py
+++ b/tests/backend/test_services.py
@@ -58,16 +58,6 @@ def read(self, size=-1):
         return chunk
 
 
-class FakeDownloadResponseTests(unittest.TestCase):
-    def test_read_respects_requested_size(self):
-        resp = FakeDownloadResponse([b"abc", b"def"])
-
-        self.assertEqual(resp.read(2), b"ab")
-        self.assertEqual(resp.read(3), b"cde")
-        self.assertEqual(resp.read(10), b"f")
-        self.assertEqual(resp.read(10), b"")
-
-
 class LocalLlamaHttpTests(unittest.TestCase):
     @staticmethod
     def make_response(body, content_type="", status=200):
@@ -4000,8 +3990,10 @@ def test_rejects_no_slash(self):
             hf_service.validate_hf_repo_id("ownermodel")
 
     def test_rejects_double_dots(self):
-        with self.assertRaises(ValueError):
-            hf_service.validate_hf_repo_id("owner/..model")
+        for value in ("owner/..model", "../model"):
+            with self.subTest(value=value):
+                with self.assertRaises(ValueError):
+                    hf_service.validate_hf_repo_id(value)
 
     def test_rejects_trailing_dot(self):
         with self.assertRaises(ValueError):
@@ -4036,6 +4028,10 @@ def test_rejects_null_byte(self):
         with self.assertRaises(ValueError):
             hf_service.validate_hf_filename("mod\x00el.gguf")
 
+    def test_rejects_colon(self):
+        with self.assertRaises(ValueError):
+            hf_service.validate_hf_filename("bad:name.gguf")
+
     def test_rejects_windows_reserved_device_names(self):
         for name in (
             "con.gguf",
@@ -4078,6 +4074,10 @@ def test_rejects_traversal(self):
         with self.assertRaises(ValueError):
             hf_service.validate_hf_revision("refs/../main")
 
+    def test_rejects_null_byte(self):
+        with self.assertRaises(ValueError):
+            hf_service.validate_hf_revision("bad\x00name")
+
 
 class WebSearchDirectTests(unittest.TestCase):
     def test_web_search_rejects_empty_query_without_importing_ddgs(self):
diff --git a/tests/backend/test_system_stats.py b/tests/backend/test_system_stats.py
index 64d82b92..578e8ae6 100644
--- a/tests/backend/test_system_stats.py
+++ b/tests/backend/test_system_stats.py
@@ -1624,7 +1624,7 @@ def test_route_is_registered(self):
         import backend.app as backend_app
         match = backend_app.API_ROUTER.match("GET", "/api/system-stats")
         self.assertIsNotNone(match)
-        self.assertEqual(match.handler_name, "get_system_stats")
+        self.assertIs(match.handler, system_stats_route.get_system_stats)
 
 
 if __name__ == "__main__":
diff --git a/tests/frontend/chat_popout_capabilities.cjs b/tests/frontend/chat_popout_capabilities.cjs
deleted file mode 100644
index 69584e90..00000000
--- a/tests/frontend/chat_popout_capabilities.cjs
+++ /dev/null
@@ -1,246 +0,0 @@
-const assert = require("node:assert/strict");
-const { randomUUID } = require("node:crypto");
-const { test } = require("node:test");
-
-const { chromium } = (() => {
-    try {
-        return require("playwright");
-    } catch (error) {
-        throw new Error(
-            "Chat pop-out capability checks require the dev-only playwright package. Run npm ci first."
-        );
-    }
-})();
-const {
-    PROTOCOL_VERSION,
-    STORAGE_PREFIX,
-    startCapabilityFixture,
-} = require("./chat_popout_capability_fixture.cjs");
-
-const WAIT_MS = 5000;
-
-function nonce() {
-    return `run-${randomUUID()}`;
-}
-
-// Browser timing is observed through the fixture state; capability checks
-// should wait for a real transition instead of sleeping for a guessed delay.
-async function waitFor(page, predicate, arg) {
-    await page.waitForFunction(predicate, arg, { timeout: WAIT_MS, polling: 25 });
-}
-
-async function readState(page) {
-    return page.evaluate(() => window.__fixture.getState());
-}
-
-async function openMain(context, baseUrl, runNonce, mode = "normal") {
-    const page = await context.newPage();
-    const url = new URL(baseUrl);
-    url.searchParams.set("nonce", runNonce);
-    url.searchParams.set("mode", mode);
-    await page.goto(url.href);
-    await page.evaluate(() => window.__fixture.writeStorage());
-    return { page, url };
-}
-
-async function openPopup(page) {
-    const popupPromise = page.waitForEvent("popup", { timeout: 2000 }).catch(() => null);
-    await page.click("#btn-popout");
-    return popupPromise;
-}
-
-function noBackendRequests(fixture) {
-    const apiRequests = fixture.requests.filter((request) => request.url.startsWith("/api/"));
-    assert.deepEqual(apiRequests, [], "the disposable fixture must never call a backend route");
-}
-
-test("loopback popup, storage partition, messaging, Web Locks and close", async (t) => {
-    const fixture = await startCapabilityFixture();
-    const browser = await chromium.launch({ headless: true });
-    const runNonce = nonce();
-    const context = await browser.newContext();
-    t.after(async () => {
-        await context.close();
-        await browser.close();
-        await fixture.close();
-    });
-
-    const { page: main, url } = await openMain(context, fixture.baseUrl, runNonce);
-    assert.equal(await main.evaluate(() => window.isSecureContext), true,
-        "127.0.0.1 loopback HTTP must be a secure context in Chromium");
-    assert.equal(await main.locator("#secure-context").textContent(), "true");
-    assert.equal(await main.evaluate(() => window.__fixture.readStorage()), runNonce);
-    assert.deepEqual(await main.evaluate(() => window.__fixture.storageKeys()),
-        [`${STORAGE_PREFIX}${runNonce}`], "only the unique fixture key may be written");
-
-    const popup = await openPopup(main);
-    assert.ok(popup, "a direct click must produce a popup page in the supported loopback context");
-    await popup.waitForLoadState("domcontentloaded");
-    await waitFor(main, () => window.__fixture.getState().popupState === "verified");
-
-    const mainState = await readState(main);
-    const popupState = await readState(popup);
-    const expectedOrigin = url.origin;
-    assert.equal(mainState.origin, expectedOrigin);
-    assert.equal(popupState.origin, expectedOrigin);
-    assert.equal(mainState.popupOpened, true);
-    assert.equal(mainState.hello.origin, expectedOrigin, "hello must carry the exact origin");
-    assert.equal(mainState.hello.sourceMatches, true, "hello must come from the opened popup reference");
-    assert.equal(mainState.hello.version, PROTOCOL_VERSION);
-    assert.equal(mainState.hello.nonce, runNonce);
-    assert.equal(mainState.hello.storageValue, runNonce);
-    assert.equal(mainState.focusAck.origin, expectedOrigin, "focus acknowledgement must be same-origin");
-    assert.equal(mainState.focusAck.sourceMatches, true, "focus acknowledgement must come from the popup");
-    assert.equal(mainState.focusAck.version, PROTOCOL_VERSION);
-    assert.equal(popupState.ready.origin, expectedOrigin);
-    assert.equal(popupState.ready.sourceMatches, true);
-    assert.equal(popupState.ready.version, PROTOCOL_VERSION);
-    assert.equal(await popup.evaluate(() => window.__fixture.readStorage()), runNonce,
-        "same-context popup must see the unique storage nonce");
-    assert.deepEqual(await popup.evaluate(() => window.__fixture.storageKeys()),
-        [`${STORAGE_PREFIX}${runNonce}`], "popup must use only the unique fixture key");
-
-    const isolated = await browser.newContext();
-    try {
-        const isolatedPage = await isolated.newPage();
-        await isolatedPage.goto(url.href);
-        assert.equal(await isolatedPage.evaluate(() => window.__fixture.readStorage()), null,
-            "a separate browser context must not share the storage partition");
-        await isolated.close();
-    } catch (error) {
-        await isolated.close();
-        throw error;
-    }
-
-    await popup.evaluate(() => window.__fixture.sendInvalidVersion());
-    await waitFor(main, () => window.__fixture.getState().rejected.some(item => item.reason === "version"));
-    const versionReject = (await readState(main)).rejected.find(item => item.reason === "version");
-    assert.equal(versionReject.origin, expectedOrigin);
-    assert.equal(versionReject.sourceMatches, true);
-    assert.equal(versionReject.version, PROTOCOL_VERSION + 1);
-
-    const attackerPromise = main.waitForEvent("popup", { timeout: 2000 }).catch(() => null);
-    await main.click("#btn-open-attacker");
-    const attacker = await attackerPromise;
-    if (attacker) await attacker.waitForLoadState("domcontentloaded");
-    await waitFor(main, () => window.__fixture.getState().rejected.some(item => item.reason === "origin"));
-    const originReject = (await readState(main)).rejected.find(item => item.reason === "origin");
-    assert.notEqual(originReject.origin, expectedOrigin);
-    assert.equal(originReject.sourceMatches, false);
-    if (attacker) await attacker.close();
-
-    await main.evaluate((name) => window.__fixture.acquireLock(name), `chat-popout:${runNonce}`);
-    await waitFor(main, () => window.__fixture.getState().lock.status === "held");
-    const held = await main.evaluate(async () => {
-        const result = await window.__fixture.lockQuery();
-        return result && result.held;
-    });
-    assert.deepEqual(held.map(lock => ({ name: lock.name, mode: lock.mode })),
-        [{ name: `chat-popout:${runNonce}`, mode: "exclusive" }]);
-    await popup.evaluate((name) => window.__fixture.acquireLock(name), `chat-popout:${runNonce}`);
-    await waitFor(popup, async (name) => {
-        if (window.__fixture.getState().lock.status !== "waiting") return false;
-        const snapshot = await window.__fixture.lockQuery();
-        return Boolean(snapshot?.pending?.some(lock => lock.name === name));
-    }, `chat-popout:${runNonce}`);
-    assert.equal((await readState(popup)).lock.status, "waiting",
-        "a second same-origin page must wait for the exclusive lock");
-    await main.evaluate(() => window.__fixture.releaseLock());
-    await waitFor(popup, () => window.__fixture.getState().lock.status === "held");
-    assert.deepEqual((await readState(popup)).lock.events, ["acquired"]);
-    await popup.evaluate(() => window.__fixture.releaseLock());
-    await waitFor(popup, () => window.__fixture.getState().lock.status === "released");
-
-    await popup.close();
-    await waitFor(main, () => window.__fixture.getState().popupClosedObserved);
-    assert.equal((await readState(main)).popupState, "closed");
-    noBackendRequests(fixture);
-});
-
-async function runFallback({ fixture, browser, mode, expected, initScript, expectedStorageValue }) {
-    const context = await browser.newContext();
-    if (initScript) await context.addInitScript(initScript);
-    const runNonce = nonce();
-    try {
-        const { page } = await openMain(context, fixture.baseUrl, runNonce, mode);
-        const popup = await openPopup(page);
-        if (popup) {
-            await popup.waitForLoadState("domcontentloaded");
-            await waitFor(page, () => Boolean(window.__fixture.getState().fallback));
-            await popup.close();
-        } else {
-            await waitFor(page, () => Boolean(window.__fixture.getState().fallback));
-        }
-        assert.match(await page.locator("#status").textContent(), expected);
-        const state = await readState(page);
-        assert.notEqual(state.popupState, "verified");
-        assert.equal(state.hello, null, "a failed capability must not transfer a handshake");
-        assert.equal(await page.evaluate(() => window.__fixture.readStorage()),
-            expectedStorageValue === undefined ? runNonce : expectedStorageValue,
-            "fallback must preserve only the synthetic source key");
-    } finally {
-        await context.close();
-    }
-}
-
-test("Web Locks unavailable keeps the source in single-window mode", async (t) => {
-    const fixture = await startCapabilityFixture();
-    const browser = await chromium.launch({ headless: true });
-    t.after(async () => { await browser.close(); await fixture.close(); });
-    await runFallback({
-        fixture,
-        browser,
-        expected: /exclusive Web Locks/,
-        initScript: () => {
-            try {
-                Object.defineProperty(Navigator.prototype, "locks", {
-                    configurable: true,
-                    get: () => undefined,
-                });
-            } catch (error) {
-                Object.defineProperty(navigator, "locks", { configurable: true, value: undefined });
-            }
-        },
-    });
-    noBackendRequests(fixture);
-});
-
-test("opener unavailable keeps the source recoverable", async (t) => {
-    const fixture = await startCapabilityFixture();
-    const browser = await chromium.launch({ headless: true });
-    t.after(async () => { await browser.close(); await fixture.close(); });
-    await runFallback({ fixture, browser, mode: "no-opener", expected: /did not complete the verified handshake/ });
-    noBackendRequests(fixture);
-});
-
-test("blocked popup keeps the source recoverable", async (t) => {
-    const fixture = await startCapabilityFixture();
-    const browser = await chromium.launch({ headless: true });
-    t.after(async () => { await browser.close(); await fixture.close(); });
-    await runFallback({
-        fixture,
-        browser,
-        expected: /popup was blocked or no window reference/,
-        initScript: () => { window.open = () => null; },
-    });
-    noBackendRequests(fixture);
-});
-
-test("blocked storage keeps the source in single-window mode", async (t) => {
-    const fixture = await startCapabilityFixture();
-    const browser = await chromium.launch({ headless: true });
-    t.after(async () => { await browser.close(); await fixture.close(); });
-    await runFallback({
-        fixture,
-        browser,
-        expected: /storage partition is unavailable/,
-        expectedStorageValue: null,
-        initScript: () => {
-            const blocked = () => { throw new DOMException("Storage disabled", "SecurityError"); };
-            Storage.prototype.setItem = blocked;
-            Storage.prototype.getItem = blocked;
-            Storage.prototype.removeItem = blocked;
-        },
-    });
-    noBackendRequests(fixture);
-});
diff --git a/tests/frontend/chat_popout_capability_fixture.cjs b/tests/frontend/chat_popout_capability_fixture.cjs
deleted file mode 100644
index ff46e061..00000000
--- a/tests/frontend/chat_popout_capability_fixture.cjs
+++ /dev/null
@@ -1,378 +0,0 @@
-const http = require("node:http");
-
-const PROTOCOL_VERSION = 1;
-const STORAGE_PREFIX = "chat-popout-capability:";
-
-function pageHtml() {
-    return `<!doctype html>
-<meta charset="utf-8">
-<title>Chat pop-out capability fixture</title>
-<main>
-  <h1>Disposable chat pop-out fixture</h1>
-  <p id="role"></p>
-  <button id="btn-popout" type="button">Pop out</button>
-  <button id="btn-open-attacker" type="button">Open attacker</button>
-  <p id="status" role="status"></p>
-  <dl>
-    <dt>Secure context</dt><dd id="secure-context"></dd>
-    <dt>Storage</dt><dd id="storage-capability"></dd>
-    <dt>Web Locks</dt><dd id="locks-capability"></dd>
-    <dt>Opener</dt><dd id="opener-capability"></dd>
-  </dl>
-</main>
-<script>
-(() => {
-    const params = new URLSearchParams(location.search);
-    const role = params.get("role") || "main";
-    const mode = params.get("mode") || "normal";
-    const nonce = params.get("nonce") || "missing";
-    const protocolVersion = ${PROTOCOL_VERSION};
-    const storageKey = ${JSON.stringify(STORAGE_PREFIX)} + nonce;
-    const state = {
-        role,
-        mode,
-        nonce,
-        origin: location.origin,
-        storageKey,
-        popup: null,
-        popupState: "idle",
-        popupClosedObserved: false,
-        popupOpened: false,
-        openerPresent: false,
-        hello: null,
-        ready: null,
-        focusAck: null,
-        rejected: [],
-        fallback: "",
-        attackerOpened: false,
-        lock: { status: "idle", name: "", events: [] },
-        releaseLock: null,
-    };
-
-    const status = document.getElementById("status");
-    const setStatus = (message) => {
-        state.fallback = String(message || "");
-        status.textContent = state.fallback;
-    };
-    const hasWebLocks = () => Boolean(
-        navigator.locks && typeof navigator.locks.request === "function"
-    );
-    const probeStorage = () => {
-        try {
-            const storage = window.localStorage;
-            const probeKey = storageKey + ":probe";
-            storage.setItem(probeKey, nonce);
-            const value = storage.getItem(probeKey);
-            storage.removeItem(probeKey);
-            return { available: value === nonce, value: storage.getItem(storageKey) };
-        } catch (error) {
-            return { available: false, value: null };
-        }
-    };
-    const capabilities = () => ({
-        secureContext: window.isSecureContext === true,
-        storage: probeStorage().available,
-        webLocks: hasWebLocks(),
-        popup: typeof window.open === "function",
-        opener: role !== "popup" || Boolean(window.opener),
-    });
-    const setCapabilityText = () => {
-        const caps = capabilities();
-        document.getElementById("secure-context").textContent = String(caps.secureContext);
-        document.getElementById("storage-capability").textContent = String(caps.storage);
-        document.getElementById("locks-capability").textContent = String(caps.webLocks);
-        document.getElementById("opener-capability").textContent = String(caps.opener);
-        return caps;
-    };
-    const getState = () => ({
-        role: state.role,
-        mode: state.mode,
-        nonce: state.nonce,
-        origin: state.origin,
-        storageKey: state.storageKey,
-        popupOpened: state.popupOpened,
-        popupState: state.popupState,
-        popupClosedObserved: state.popupClosedObserved,
-        openerPresent: state.openerPresent,
-        hello: state.hello,
-        ready: state.ready,
-        focusAck: state.focusAck,
-        rejected: state.rejected.slice(),
-        fallback: state.fallback,
-        attackerOpened: state.attackerOpened,
-        lock: { ...state.lock, events: state.lock.events.slice() },
-    });
-    const sourceMatches = (event) => Boolean(state.popup && event.source === state.popup);
-    const recordRejected = (reason, event, data) => {
-        state.rejected.push({
-            reason,
-            origin: event.origin,
-            sourceMatches: sourceMatches(event),
-            version: data && data.version,
-        });
-    };
-    const validMessage = (event, data, requirePopup = true) => {
-        if (event.origin !== state.origin) {
-            recordRejected("origin", event, data);
-            return false;
-        }
-        if (requirePopup && !sourceMatches(event)) {
-            recordRejected("source", event, data);
-            return false;
-        }
-        if (!data || data.version !== protocolVersion) {
-            recordRejected("version", event, data);
-            return false;
-        }
-        if (data.nonce !== nonce) {
-            recordRejected("nonce", event, data);
-            return false;
-        }
-        return true;
-    };
-    const postTo = (target, message) => {
-        if (target && typeof target.postMessage === "function") {
-            target.postMessage(message, state.origin);
-        }
-    };
-
-    window.__fixture = {
-        getState,
-        getCapabilities: setCapabilityText,
-        storageKey,
-        writeStorage() {
-            try {
-                window.localStorage.setItem(storageKey, nonce);
-                return true;
-            } catch (error) {
-                return false;
-            }
-        },
-        readStorage() {
-            try { return window.localStorage.getItem(storageKey); } catch (error) { return null; }
-        },
-        storageKeys() {
-            try { return Object.keys(window.localStorage); } catch (error) { return []; }
-        },
-        sendInvalidVersion() {
-            postTo(window.opener, {
-                type: "chat-popout:hello",
-                version: protocolVersion + 1,
-                nonce,
-            });
-        },
-        async lockQuery() {
-            if (!navigator.locks || typeof navigator.locks.query !== "function") return null;
-            return navigator.locks.query();
-        },
-        acquireLock(name) {
-            if (!hasWebLocks()) return false;
-            state.lock = { status: "waiting", name: String(name), events: [] };
-            navigator.locks.request(String(name), { mode: "exclusive" }, async () => {
-                state.lock.status = "held";
-                state.lock.events.push("acquired");
-                await new Promise((resolve) => { state.releaseLock = resolve; });
-                state.lock.events.push("released");
-                state.lock.status = "released";
-                state.releaseLock = null;
-            }).catch((error) => {
-                state.lock.status = "error";
-                state.lock.events.push(String(error && error.name || "lock-error"));
-            });
-            return true;
-        },
-        releaseLock() {
-            if (state.releaseLock) {
-                state.releaseLock();
-                return true;
-            }
-            return false;
-        },
-    };
-
-    document.getElementById("role").textContent = "Role: " + role;
-    setCapabilityText();
-
-    if (role === "attacker") {
-        const targetOrigin = params.get("targetOrigin") || "";
-        window.addEventListener("load", () => {
-            if (window.opener) {
-                window.opener.postMessage({
-                    type: "chat-popout:hello",
-                    version: protocolVersion,
-                    nonce,
-                }, targetOrigin);
-            }
-        }, { once: true });
-        return;
-    }
-
-    if (role === "popup") {
-        if (mode === "no-opener") {
-            try { window.opener = null; } catch (error) {
-                console.debug("Fixture could not simulate a missing opener", error);
-            }
-        }
-        const openerRef = window.opener;
-        state.openerPresent = Boolean(openerRef);
-        document.getElementById("btn-popout").hidden = true;
-        document.getElementById("btn-open-attacker").hidden = true;
-        if (!openerRef) {
-            setStatus("Pop out unavailable: the receiver could not verify its opener and origin.");
-            state.popupState = "fallback";
-            return;
-        }
-        window.addEventListener("message", (event) => {
-            const data = event.data;
-            if (!validMessage(event, data, false) || event.source !== openerRef) {
-                if (event.origin === state.origin && event.source !== openerRef) {
-                    recordRejected("source", event, data);
-                }
-                return;
-            }
-            if (data.type !== "chat-popout:ready") return;
-            state.ready = { origin: event.origin, sourceMatches: event.source === openerRef, version: data.version };
-            window.focus();
-            postTo(openerRef, {
-                type: "chat-popout:focused",
-                version: protocolVersion,
-                nonce,
-                focused: document.hasFocus(),
-            });
-        });
-        const storage = probeStorage();
-        if (!storage.available) {
-            setStatus("Pop out unavailable: the receiver has no usable storage partition.");
-            state.popupState = "fallback";
-            return;
-        }
-        postTo(openerRef, {
-            type: "chat-popout:hello",
-            version: protocolVersion,
-            nonce,
-            storageValue: storage.value,
-        });
-        return;
-    }
-
-    window.addEventListener("message", (event) => {
-        const data = event.data;
-        if (!validMessage(event, data)) return;
-        if (data.type === "chat-popout:hello") {
-            state.hello = {
-                origin: event.origin,
-                sourceMatches: sourceMatches(event),
-                version: data.version,
-                nonce: data.nonce,
-                storageValue: data.storageValue,
-            };
-            state.popupState = "verified-pending-focus";
-            postTo(event.source, {
-                type: "chat-popout:ready",
-                version: protocolVersion,
-                nonce,
-            });
-        } else if (data.type === "chat-popout:focused") {
-            state.focusAck = {
-                origin: event.origin,
-                sourceMatches: sourceMatches(event),
-                version: data.version,
-                focused: data.focused === true,
-            };
-            state.popupState = "verified";
-        }
-    });
-
-    document.getElementById("btn-popout").addEventListener("click", () => {
-        const caps = setCapabilityText();
-        if (!caps.secureContext) {
-            setStatus("Pop out unavailable: this page is not a secure context.");
-            state.popupState = "fallback";
-            return;
-        }
-        if (!caps.storage) {
-            setStatus("Pop out unavailable: storage partition is unavailable.");
-            state.popupState = "fallback";
-            return;
-        }
-        if (!caps.webLocks) {
-            setStatus("Pop out unavailable: this browser does not provide exclusive Web Locks.");
-            state.popupState = "fallback";
-            return;
-        }
-        if (typeof window.open !== "function") {
-            setStatus("Pop out unavailable: this browser cannot open a named window.");
-            state.popupState = "fallback";
-            return;
-        }
-        const childUrl = new URL(location.href);
-        childUrl.searchParams.set("role", "popup");
-        state.popupState = "opening";
-        state.popup = window.open(childUrl.href, "llama-gui-chat-capability", "popup,width=720,height=640,resizable=yes");
-        state.popupOpened = Boolean(state.popup);
-        if (!state.popup) {
-            setStatus("Pop out unavailable: the popup was blocked or no window reference was returned.");
-            state.popupState = "fallback";
-            return;
-        }
-        const closeTimer = window.setInterval(() => {
-            if (state.popup && state.popup.closed) {
-                state.popupClosedObserved = true;
-                state.popupState = "closed";
-                window.clearInterval(closeTimer);
-            }
-        }, 25);
-        window.setTimeout(() => {
-            if (state.popupState === "opening" || state.popupState === "verified-pending-focus") {
-                setStatus("Pop out unavailable: the receiver did not complete the verified handshake.");
-                state.popupState = "fallback";
-            }
-        }, 1500);
-    });
-
-    document.getElementById("btn-open-attacker").addEventListener("click", () => {
-        const attackerUrl = new URL(location.href);
-        attackerUrl.hostname = "localhost";
-        attackerUrl.searchParams.set("role", "attacker");
-        attackerUrl.searchParams.set("targetOrigin", location.origin);
-        state.attackerOpened = Boolean(window.open(attackerUrl.href, "chat-popout-attacker", "popup,width=480,height=320"));
-    });
-})();
-</script>`;
-}
-
-function startCapabilityFixture() {
-    const requests = [];
-    const server = http.createServer((request, response) => {
-        requests.push({ method: request.method, url: request.url, headers: { ...request.headers } });
-        if (request.method === "GET" && new URL(request.url, "http://127.0.0.1").pathname === "/") {
-            response.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
-            response.end(pageHtml());
-            return;
-        }
-        response.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
-        response.end("Not found");
-    });
-    return new Promise((resolve, reject) => {
-        const onError = (error) => reject(error);
-        server.once("error", onError);
-        server.listen(0, "127.0.0.1", () => {
-            server.removeListener("error", onError);
-            const address = server.address();
-            resolve({
-                baseUrl: `http://127.0.0.1:${address.port}/`,
-                requests,
-                async close() {
-                    if (typeof server.closeAllConnections === "function") server.closeAllConnections();
-                    await new Promise((done, fail) => server.close((error) => error ? fail(error) : done()));
-                },
-            });
-        });
-    });
-}
-
-module.exports = {
-    PROTOCOL_VERSION,
-    STORAGE_PREFIX,
-    startCapabilityFixture,
-};
diff --git a/tests/frontend/chat_window_unit.cjs b/tests/frontend/chat_window_unit.cjs
index de4bff09..3e6c0f1b 100644
--- a/tests/frontend/chat_window_unit.cjs
+++ b/tests/frontend/chat_window_unit.cjs
@@ -1,3 +1,4 @@
+const test = require("node:test");
 const assert = require("node:assert/strict");
 const vm = require("node:vm");
 const { FakeLocks } = require("./fake_locks.cjs");
@@ -22,7 +23,20 @@ function loadPackage() {
     return context.window.LlamaGui;
 }
 
-function loadApi() { return loadPackage().chatWindow; }
+function loadApi(t) {
+    const api = loadPackage().chatWindow;
+    // Each test owns a fresh VM and disposes every coordinator/adapter even
+    // when an assertion fails before the scenario's explicit cleanup.
+    for (const name of ["createCoordinator", "createHostAdapter"]) {
+        const create = api[name];
+        api[name] = (...args) => {
+            const instance = create(...args);
+            t.after(() => instance.dispose());
+            return instance;
+        };
+    }
+    return api;
+}
 
 class FakeStorage {
     constructor() { this.values = new Map(); this.failRead = false; this.failWrite = false; this.failRemove = false; }
@@ -176,736 +190,774 @@ function waitForCondition(predicate, description, timeoutMs = 1000) {
     });
 }
 
-(async () => {
-    const api = loadApi();
-
-    // Evaluating the whole package must not bootstrap either view or touch
-    // browser facilities. Test JSON helpers without creating a coordinator.
-    {
-        const forbidden = () => assert.fail("Chat-window evaluation must be inert");
-        const window = { addEventListener: forbidden, console: { debug() {}, warn() {} } };
-        for (const name of ["document", "localStorage", "navigator", "opener", "location", "crypto"]) {
-            Object.defineProperty(window, name, { get: forbidden });
-        }
-        const context = vm.createContext({ window, setTimeout: forbidden, setInterval: forbidden, fetch: forbidden });
-        for (const script of chatWindowScripts) {
-            vm.runInContext(script.source, context, { filename: script.path });
-        }
-        assert.equal(window.LlamaGui.chatWindow.coordinator, null);
-        assert.equal(window.LlamaGui.chatWindow.hasDetachedView(), false);
-        const { protocol, hostAdapter } = window.LlamaGui._chatWindowInternal;
-        assert.equal(window.LlamaGui.chatWindow.createHostAdapter, hostAdapter.createHostAdapter);
-        assert.equal(window.LlamaGui.chatWindow.createCoordinator,
-            window.LlamaGui._chatWindowInternal.coordinator.createCoordinator);
-        const accounting = { usage: { prompt_tokens: 7, completion_tokens: 3, total_tokens: 10 }, values: [null, false, 0, ""] };
-        const copied = protocol.cloneJson(accounting);
-        assert.deepEqual(clone(copied), accounting);
-        copied.usage.prompt_tokens = 999;
-        assert.equal(accounting.usage.prompt_tokens, 7);
-        for (const key of ["api_key", "API-KEY", "hf_token", "accessToken", "Authorization", "password", "passwd", "secret", "credential", "cookie", "bearer"]) {
-            assert.equal(protocol.cloneJson({ nested: [{ [key]: "fixture-secret" }] }), null, key);
-        }
-        const cycle = {};
-        cycle.self = cycle;
-        for (const unsafe of [cycle, undefined, NaN, Infinity, 1n, () => {}, Symbol("unsafe")]) {
-            assert.equal(protocol.cloneJson(unsafe), null);
-        }
+// Evaluating the whole package must not bootstrap either view or touch
+// browser facilities. Test JSON helpers without creating a coordinator.
+test("package evaluation is inert and JSON projection rejects unsafe values", () => {
+    const forbidden = () => assert.fail("Chat-window evaluation must be inert");
+    const window = { addEventListener: forbidden, console: { debug() {}, warn() {} } };
+    for (const name of ["document", "localStorage", "navigator", "opener", "location", "crypto"]) {
+        Object.defineProperty(window, name, { get: forbidden });
     }
-
-    // The bridge reads current host values and writes through its setter.
-    // Cached fallback values and subscriptions belong to each instance.
-    {
-        const { createFlagCoreBridge } = loadPackage()._chatWindowInternal.flagCoreBridge;
-        let settings = { temperature: 0.8, selected_model: "first.gguf" };
-        let valid = true;
-        let failRead = false;
-        let failWrite = false;
-        const writes = [];
-        const unavailable = [];
-        const host = {
-            getSettings() {
-                if (failRead) throw new Error("host read failed");
-                return settings;
-            },
-            setSettings(patch) {
-                if (failWrite) throw new Error("host write failed");
-                writes.push(clone(patch));
-                settings = Object.assign({}, settings, patch);
-                return settings;
-            },
-            isSessionValid: () => valid,
-        };
-        const bridge = createFlagCoreBridge(host, {
-            window: { console: { debug() {}, warn() {} } },
-            onUnavailable: error => unavailable.push(error.message),
-        });
-        const other = createFlagCoreBridge({ getSettings: () => ({ temperature: 0.3 }) });
-        const notifications = [];
-        const otherNotifications = [];
-        const unsubscribe = bridge.subscribe(values => notifications.push(clone(values)));
-        other.subscribe(values => otherNotifications.push(clone(values)));
-        const copy = bridge.getFlagValues();
-        copy.temperature = 99;
-        assert.equal(settings.temperature, 0.8);
-        settings = { temperature: 0.6, selected_model: "new.gguf" };
-        assert.equal(bridge.getSelectedModel(), "new.gguf", "model reads use current host state");
-        bridge.setFlagValue("temperature", 0);
-        bridge.setMultipleFlagValues({ temperature: null });
-        assert.deepEqual(writes, [{ temperature: 0 }, { temperature: null }]);
-        assert.equal(notifications.at(-1).temperature, null);
-        assert.deepEqual(otherNotifications, [], "bridge notifications are instance-local");
-        unsubscribe();
-        const notificationCount = notifications.length;
-        bridge.refresh({ temperature: 0.1 });
-        assert.equal(notifications.length, notificationCount);
-        failRead = true;
-        assert.equal(bridge.getFlagValues().temperature, 0.1, "unavailable reads retain the last snapshot");
-        valid = false;
-        bridge.setFlagValue("temperature", 0.9);
-        assert.equal(writes.length, 2, "invalid sessions cannot reach the host writer");
-        valid = true;
-        failWrite = true;
-        bridge.setFlagValue("temperature", 0.9);
-        assert.deepEqual(unavailable, ["Chat host is not connected.", "host write failed"]);
-        assert.equal(other.getFlagValues().temperature, 0.3);
-        assert.equal(bridge.getCurrentTool(), "llama-server");
+    const context = vm.createContext({ window, setTimeout: forbidden, setInterval: forbidden, fetch: forbidden });
+    for (const script of chatWindowScripts) {
+        vm.runInContext(script.source, context, { filename: script.path });
     }
-
-    // The facade passes its live holder into host bootstrap. Repeated starts
-    // share one readiness promise and revoke legacy ownership before Chat init.
-    {
-        const facade = loadApi();
-        const locks = new FakeLocks();
-        const ui = makeUi("bootstrap");
-        const listeners = [];
-        const window = {
-            location: { origin: "http://127.0.0.1:5240" },
-            navigator: { locks }, localStorage: new FakeStorage(),
-            console: { debug() {}, warn() {} },
-            document: { getElementById: () => null },
-            addEventListener: name => listeners.push(name), removeEventListener() {},
-        };
-        let workspace;
-        ui.configureWorkspace = options => { workspace = options; };
-        ui.getChatSamplerFlagIds = () => ["temperature"];
-        let finishInit;
-        let initCount = 0;
-        const options = {
-            window, chatUi: ui, flagCore: { getFlagValues: () => ({ temperature: 0.8 }) },
-            initializeChat() {
-                initCount += 1;
-                assert.equal(ui.owner, false, "revoke ownership before initialization can persist");
-                assert.equal(workspace.detachedView, false);
-                return new Promise(resolve => { finishInit = resolve; });
-            },
-        };
-        const ready = facade.startHostView(options);
-        assert.equal(facade.startHostView(options), ready);
-        assert.equal(initCount, 1);
-        assert.equal(locks.calls.length, 0, "coordinator initialization waits for Chat initialization");
-        const changes = [];
-        facade._hostView.hostAdapter.subscribe(change => changes.push(clone(change)));
-        facade.notifyHostChange({ type: "settings" });
-        assert.equal(changes.at(-1).type, "settings");
-        assert.equal(facade.getBootstrapInfo({}), null);
-        assert.equal(facade.getSessionInfo({}), null);
-        finishInit();
-        assert.equal((await ready).ok, true);
-        assert.equal(ui.owner, true);
-        assert.equal(facade.startHostView(options), ready);
-        assert.equal(locks.calls.length, 1);
-        assert.equal(listeners.filter(name => name === "pagehide").length, 1);
-        assert.equal(listeners.filter(name => name === "pageshow").length, 1);
-        assert.equal(facade.hasDetachedView(), false);
-        facade._hostView.coordinator.dispose();
-        facade._hostView.hostAdapter.dispose();
+    assert.equal(window.LlamaGui.chatWindow.coordinator, null);
+    assert.equal(window.LlamaGui.chatWindow.hasDetachedView(), false);
+    const { protocol, hostAdapter } = window.LlamaGui._chatWindowInternal;
+    assert.equal(window.LlamaGui.chatWindow.createHostAdapter, hostAdapter.createHostAdapter);
+    assert.equal(window.LlamaGui.chatWindow.createCoordinator,
+        window.LlamaGui._chatWindowInternal.coordinator.createCoordinator);
+    const accounting = { usage: { prompt_tokens: 7, completion_tokens: 3, total_tokens: 10 }, values: [null, false, 0, ""] };
+    const copied = protocol.cloneJson(accounting);
+    assert.deepEqual(clone(copied), accounting);
+    copied.usage.prompt_tokens = 999;
+    assert.equal(accounting.usage.prompt_tokens, 7);
+    for (const key of ["api_key", "API-KEY", "hf_token", "accessToken", "Authorization", "password", "passwd", "secret", "credential", "cookie", "bearer"]) {
+        assert.equal(protocol.cloneJson({ nested: [{ [key]: "fixture-secret" }] }), null, key);
     }
-
-    // Disposing one coordinator cancels only its queued acquisition. Its late
-    // calls cannot reacquire or persist, and the other owner's state is intact.
-    {
-        const pair = makePeerPair(api);
-        await preparePair(pair);
-        const ownerState = clone(pair.a.getState());
-        const changes = [];
-        pair.a.subscribe(state => changes.push(clone(state)));
-        const acquiring = pair.b.acquireOwnership({ ifAvailable: false, timeoutMs: 1000 });
-        await waitForCondition(() => pair.locks.queue.length === 1, "queued receiver acquisition");
-        pair.b.dispose();
-        assert.equal(await acquiring, false);
-        assert.equal(pair.locks.queue.length, 0);
-        assert.deepEqual(clone(pair.a.getState()), ownerState);
-        assert.deepEqual(changes, [], "other instances do not receive disposal notifications");
-        const calls = pair.locks.calls.length;
-        const record = pair.storage.getItem(api.DEFAULT_RECOVERY_KEY);
-        assert.equal(await pair.b.acquireOwnership(), false);
-        assert.equal(pair.b.checkpoint(pair.uiB.captureSnapshot({})), false);
-        assert.equal(pair.storage.getItem(api.DEFAULT_RECOVERY_KEY), record);
-        assert.equal(pair.locks.calls.length, calls);
-        assert.equal(pair.a.isOwner(), true);
-        pair.a.dispose();
+    const cycle = {};
+    cycle.self = cycle;
+    for (const unsafe of [cycle, undefined, NaN, Infinity, 1n, () => {}, Symbol("unsafe")]) {
+        assert.equal(protocol.cloneJson(unsafe), null);
     }
+});
 
-    // Projection strips unknown and sensitive fields at every supported nested
-    // boundary, and callers cannot mutate the authoritative host through reads.
-    {
-        const runtime = { generation: 4, active_runtime: { model: "model.gguf", target: { host: "localhost", port: 8080, password: "secret", extra: 1 }, extra: 2 }, extra: 3 };
-        const inference = {
-            targetKey: "runtime-4", seq: 9, baselinePending: false, contextLevel: "normal",
-            sources: { metrics: true, slots: false, extra: 1 },
-            session: { prompt: 4, generated: 3, total: 7, api_key: "secret" },
-            speed: { prompt: 1, generated: 2, promptIsLive: false, generatedIsLive: true, extra: 1 },
-            context: { percent: 20, used: 7, size: 100, capacity: 100, level: "normal", extra: 1 },
-            requests: { processing: 1, queued: 0, processingBest: 1, extra: 1 },
-            slots: { busy: 1, total: 2, extra: 1 }, extra: 1,
-        };
-        const values = { temperature: 0.5, top_p: null, alias: "model", reasoning_format: "auto", ctx_size: 100 };
-        const calls = [];
-        const adapter = api.createHostAdapter({
-            fields: ["temperature", "top_p"],
-            flagCore: { getFlagValues: () => values, setMultipleFlagValues: patch => calls.push(clone(patch)) },
-            getActiveRuntime: () => runtime, getInference: () => inference,
-        });
-        const safeRuntime = adapter.getRuntime();
-        assert.deepEqual(clone(safeRuntime), { generation: 4, active_runtime: { model: "model.gguf", target: { host: "localhost", port: 8080 } } });
-        const safeInference = adapter.getInference();
-        assert.deepEqual(clone(safeInference), {
-            targetKey: "runtime-4", seq: 9, baselinePending: false, contextLevel: "normal",
-            sources: { metrics: true, slots: false }, session: { prompt: 4, generated: 3, total: 7 },
-            speed: { prompt: 1, generated: 2, promptIsLive: false, generatedIsLive: true },
-            context: { percent: 20, used: 7, size: 100, capacity: 100, level: "normal" },
-            requests: { processing: 1, queued: 0, processingBest: 1 }, slots: { busy: 1, total: 2 },
-        });
-        safeRuntime.active_runtime.target.host = "changed";
-        safeInference.session.prompt = 999;
-        adapter.getSettings().temperature = 999;
-        assert.equal(runtime.active_runtime.target.host, "localhost");
-        assert.equal(inference.session.prompt, 4);
-        assert.equal(values.temperature, 0.5);
-        for (const field of ["ctx_size", "alias", "reasoning_format", "unknown", "api_key"]) {
-            assert.throws(() => adapter.setSettings({ temperature: 0.8, [field]: 1 }), /not writable/);
-        }
-        assert.throws(() => adapter.setSettings({ temperature: { nested: { authorization: "secret" } } }), /not JSON-safe/);
-        assert.deepEqual(calls, [], "invalid patches are rejected before any shared-state write");
-        adapter.setSettings({ temperature: 0, top_p: null });
-        assert.deepEqual(calls, [{ temperature: 0, top_p: null }]);
-        assert.equal(values.temperature, 0.5, "writes use flagCore's setter, not its returned object");
-        adapter.dispose();
-    }
+// The bridge reads current host values and writes through its setter.
+// Cached fallback values and subscriptions belong to each instance.
+test("flag bridge reads live settings and isolates subscriptions and failures", () => {
+    const { createFlagCoreBridge } = loadPackage()._chatWindowInternal.flagCoreBridge;
+    let settings = { temperature: 0.8, selected_model: "first.gguf" };
+    let valid = true;
+    let failRead = false;
+    let failWrite = false;
+    const writes = [];
+    const unavailable = [];
+    const host = {
+        getSettings() {
+            if (failRead) throw new Error("host read failed");
+            return settings;
+        },
+        setSettings(patch) {
+            if (failWrite) throw new Error("host write failed");
+            writes.push(clone(patch));
+            settings = Object.assign({}, settings, patch);
+            return settings;
+        },
+        isSessionValid: () => valid,
+    };
+    const bridge = createFlagCoreBridge(host, {
+        window: { console: { debug() {}, warn() {} } },
+        onUnavailable: error => unavailable.push(error.message),
+    });
+    const other = createFlagCoreBridge({ getSettings: () => ({ temperature: 0.3 }) });
+    const notifications = [];
+    const otherNotifications = [];
+    const unsubscribe = bridge.subscribe(values => notifications.push(clone(values)));
+    other.subscribe(values => otherNotifications.push(clone(values)));
+    const copy = bridge.getFlagValues();
+    copy.temperature = 99;
+    assert.equal(settings.temperature, 0.8);
+    settings = { temperature: 0.6, selected_model: "new.gguf" };
+    assert.equal(bridge.getSelectedModel(), "new.gguf", "model reads use current host state");
+    bridge.setFlagValue("temperature", 0);
+    bridge.setMultipleFlagValues({ temperature: null });
+    assert.deepEqual(writes, [{ temperature: 0 }, { temperature: null }]);
+    assert.equal(notifications.at(-1).temperature, null);
+    assert.deepEqual(otherNotifications, [], "bridge notifications are instance-local");
+    unsubscribe();
+    const notificationCount = notifications.length;
+    bridge.refresh({ temperature: 0.1 });
+    assert.equal(notifications.length, notificationCount);
+    failRead = true;
+    assert.equal(bridge.getFlagValues().temperature, 0.1, "unavailable reads retain the last snapshot");
+    valid = false;
+    bridge.setFlagValue("temperature", 0.9);
+    assert.equal(writes.length, 2, "invalid sessions cannot reach the host writer");
+    valid = true;
+    failWrite = true;
+    bridge.setFlagValue("temperature", 0.9);
+    assert.deepEqual(unavailable, ["Chat host is not connected.", "host write failed"]);
+    assert.equal(other.getFlagValues().temperature, 0.3);
+    assert.equal(bridge.getCurrentTool(), "llama-server");
+});
 
-    // Subscription and validity state belong to each adapter. Authentication is
-    // a direct verified-peer capability, never a field in projected changes.
-    {
-        let observe;
-        let cleanups = 0;
-        let authCalls = 0;
-        const changes = [];
-        const otherChanges = [];
-        const adapter = api.createHostAdapter({
-            fields: ["temperature"],
-            observeHostChanges: listener => { observe = listener; return () => { cleanups += 1; }; },
-            getAuthorizationHeaders: () => { authCalls += 1; return { Authorization: "Bearer fixture-secret" }; },
-        });
-        const other = api.createHostAdapter({ fields: ["top_p"] });
-        const unsubscribe = adapter.subscribe(change => changes.push(clone(change)));
-        other.subscribe(change => otherChanges.push(change));
-        observe({ type: "settings", fields: ["temperature", "top_p", "api_key"], runtime: { model: "safe", api_key: "secret" }, Authorization: "secret" });
-        assert.deepEqual(changes, [{ type: "settings", fields: ["temperature"], runtime: { model: "safe" } }]);
-        assert.deepEqual(otherChanges, []);
-        assert.deepEqual(clone(adapter.getAuthorizationHeaders()), { Authorization: "Bearer fixture-secret" });
-        assert.equal(authCalls, 1);
-        unsubscribe();
-        observe({ type: "settings" });
-        assert.equal(changes.length, 1);
-        adapter.subscribe(change => changes.push(clone(change)));
-        assert.equal(adapter.invalidateSession(), true);
-        assert.equal(adapter.invalidateSession(), false);
-        assert.deepEqual(changes.at(-1), { type: "session-invalidated" });
-        assert.throws(() => adapter.getAuthorizationHeaders(), /no longer available/);
-        assert.throws(() => adapter.setSettings({ temperature: 1 }), /no longer available/);
-        assert.equal(authCalls, 1);
-        assert.equal(other.isSessionValid(), true);
-        const beforeDispose = changes.length;
-        adapter.dispose();
-        adapter.dispose();
-        observe({ type: "settings" });
-        assert.equal(changes.length, beforeDispose);
-        assert.equal(cleanups, 1);
-        other.notify({ type: "settings", fields: ["top_p"] });
-        assert.equal(otherChanges.length, 1);
-        other.dispose();
-    }
+// The facade passes its live holder into host bootstrap. Repeated starts
+// share one readiness promise and revoke legacy ownership before Chat init.
+test("host bootstrap initializes once and revokes ownership before Chat init", async t => {
+    const facade = loadApi(t);
+    const locks = new FakeLocks();
+    const ui = makeUi("bootstrap");
+    const listeners = [];
+    const window = {
+        location: { origin: "http://127.0.0.1:5240" },
+        navigator: { locks }, localStorage: new FakeStorage(),
+        console: { debug() {}, warn() {} },
+        document: { getElementById: () => null },
+        addEventListener: name => listeners.push(name), removeEventListener() {},
+    };
+    let workspace;
+    ui.configureWorkspace = options => { workspace = options; };
+    ui.getChatSamplerFlagIds = () => ["temperature"];
+    let finishInit;
+    let initCount = 0;
+    const options = {
+        window, chatUi: ui, flagCore: { getFlagValues: () => ({ temperature: 0.8 }) },
+        initializeChat() {
+            initCount += 1;
+            assert.equal(ui.owner, false, "revoke ownership before initialization can persist");
+            assert.equal(workspace.detachedView, false);
+            return new Promise(resolve => { finishInit = resolve; });
+        },
+    };
+    t.after(() => {
+        facade._hostView?.coordinator?.dispose();
+        facade._hostView?.hostAdapter?.dispose();
+    });
+    const ready = facade.startHostView(options);
+    assert.equal(facade.startHostView(options), ready);
+    assert.equal(initCount, 1);
+    assert.equal(locks.calls.length, 0, "coordinator initialization waits for Chat initialization");
+    const changes = [];
+    facade._hostView.hostAdapter.subscribe(change => changes.push(clone(change)));
+    facade.notifyHostChange({ type: "settings" });
+    assert.equal(changes.at(-1).type, "settings");
+    assert.equal(facade.getBootstrapInfo({}), null);
+    assert.equal(facade.getSessionInfo({}), null);
+    finishInit();
+    assert.equal((await ready).ok, true);
+    assert.equal(ui.owner, true);
+    assert.equal(facade.startHostView(options), ready);
+    assert.equal(locks.calls.length, 1);
+    assert.equal(listeners.filter(name => name === "pagehide").length, 1);
+    assert.equal(listeners.filter(name => name === "pageshow").length, 1);
+    assert.equal(facade.hasDetachedView(), false);
+    facade._hostView.coordinator.dispose();
+    facade._hostView.hostAdapter.dispose();
+});
 
-    // The adapter preserves explicit null/unset values, exposes only the Chat
-    // request settings, and never hands a peer the host's control methods.
-    {
-        const calls = [];
-        const core = {
-            getFlagValues: () => ({ temperature: null, top_p: 0.9, ctx_size: 4096, api_key: "secret" }),
-            setMultipleFlagValues: patch => calls.push(patch),
-        };
-        const adapter = api.createHostAdapter({
-            flagCore: core,
-            getChatSamplerFlagIds: () => ["temperature", "top_p", "top_k", "min_p", "repeat_penalty", "n_predict"],
-            getChatModelName: () => "model.gguf",
-            getStatus: () => ({ status: "running", phase: "ready", busy: false, api_key_configured: true, activeRuntime: { model: "model.gguf", alias: "safe" }, runtime_generation: 2 }),
-            getInference: () => ({ targetKey: "runtime-1", seq: 3, session: { prompt: 4, generated: 3, total: 7 }, speed: { prompt: 1.2, generated: 4.5, promptIsLive: true, generatedIsLive: false }, context: { percent: 20 }, api_key: "secret" }),
-        });
-        assert.deepEqual(clone(adapter.getSettings()), { temperature: null, top_p: 0.9, ctx_size: 4096, selected_model: "model.gguf" });
-        assert.deepEqual(clone(adapter.getStatus()), { status: "running", phase: "ready", busy: false, activeRuntime: { model: "model.gguf", alias: "safe" }, runtime_generation: 2 });
-        assert.deepEqual(clone(adapter.getInference()), { targetKey: "runtime-1", seq: 3, session: { prompt: 4, generated: 3, total: 7 }, speed: { prompt: 1.2, generated: 4.5, promptIsLive: true, generatedIsLive: false }, context: { percent: 20 } });
-        adapter.setSettings({ temperature: 0.2, n_predict: 32 });
-        assert.deepEqual(clone(calls), [{ temperature: 0.2, n_predict: 32 }]);
-        assert.throws(() => adapter.setSettings({ ctx_size: 8192 }), /not writable/);
-        assert.throws(() => adapter.setSettings({ api_key: "bad" }), /not writable/);
-        adapter.invalidateSession();
-        assert.equal(adapter.isSessionValid(), false);
-        assert.throws(() => adapter.getSettings(), /no longer available/);
-        assert.equal(Object.prototype.hasOwnProperty.call(adapter, "reviveSession"), false);
-    }
+// Disposing one coordinator cancels only its queued acquisition. Its late
+// calls cannot reacquire or persist, and the other owner's state is intact.
+test("disposing a queued coordinator preserves the other owner", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api);
+    await preparePair(pair);
+    const ownerState = clone(pair.a.getState());
+    const changes = [];
+    pair.a.subscribe(state => changes.push(clone(state)));
+    const acquiring = pair.b.acquireOwnership({ ifAvailable: false, timeoutMs: 1000 });
+    await waitForCondition(() => pair.locks.queue.length === 1, "queued receiver acquisition");
+    pair.b.dispose();
+    assert.equal(await acquiring, false);
+    assert.equal(pair.locks.queue.length, 0);
+    assert.deepEqual(clone(pair.a.getState()), ownerState);
+    assert.deepEqual(changes, [], "other instances do not receive disposal notifications");
+    const calls = pair.locks.calls.length;
+    const record = pair.storage.getItem(api.DEFAULT_RECOVERY_KEY);
+    assert.equal(await pair.b.acquireOwnership(), false);
+    assert.equal(pair.b.checkpoint(pair.uiB.captureSnapshot({})), false);
+    assert.equal(pair.storage.getItem(api.DEFAULT_RECOVERY_KEY), record);
+    assert.equal(pair.locks.calls.length, calls);
+    assert.equal(pair.a.isOwner(), true);
+    pair.a.dispose();
+});
 
-    // Unavailable locks keep a usable single-window owner while explaining why
-    // detach is unavailable.
-    {
-        const ui = makeUi("single");
-        const c = api.createCoordinator({ instanceId: "single", origin: "http://127.0.0.1:5240", locks: null, storage: new FakeStorage(), chatUi: ui });
-        const initialized = await c.initialize();
-        assert.equal(initialized.reason, "single-window");
-        assert.equal(c.getState().popoutAvailable, false);
-        assert.equal(c.isOwner(), true);
-        assert.match(c.getState().reason, /Web Locks/);
-        assert.equal(c.beginHandshake(), false);
+// Projection strips unknown and sensitive fields at every supported nested
+// boundary, and callers cannot mutate the authoritative host through reads.
+test("host projections filter nested fields and return independent copies", async t => {
+    const api = loadApi(t);
+    const runtime = { generation: 4, active_runtime: { model: "model.gguf", target: { host: "localhost", port: 8080, password: "secret", extra: 1 }, extra: 2 }, extra: 3 };
+    const inference = {
+        targetKey: "runtime-4", seq: 9, baselinePending: false, contextLevel: "normal",
+        sources: { metrics: true, slots: false, extra: 1 },
+        session: { prompt: 4, generated: 3, total: 7, api_key: "secret" },
+        speed: { prompt: 1, generated: 2, promptIsLive: false, generatedIsLive: true, extra: 1 },
+        context: { percent: 20, used: 7, size: 100, capacity: 100, level: "normal", extra: 1 },
+        requests: { processing: 1, queued: 0, processingBest: 1, extra: 1 },
+        slots: { busy: 1, total: 2, extra: 1 }, extra: 1,
+    };
+    const values = { temperature: 0.5, top_p: null, alias: "model", reasoning_format: "auto", ctx_size: 100 };
+    const calls = [];
+    const adapter = api.createHostAdapter({
+        fields: ["temperature", "top_p"],
+        flagCore: { getFlagValues: () => values, setMultipleFlagValues: patch => calls.push(clone(patch)) },
+        getActiveRuntime: () => runtime, getInference: () => inference,
+    });
+    const safeRuntime = adapter.getRuntime();
+    assert.deepEqual(clone(safeRuntime), { generation: 4, active_runtime: { model: "model.gguf", target: { host: "localhost", port: 8080 } } });
+    const safeInference = adapter.getInference();
+    assert.deepEqual(clone(safeInference), {
+        targetKey: "runtime-4", seq: 9, baselinePending: false, contextLevel: "normal",
+        sources: { metrics: true, slots: false }, session: { prompt: 4, generated: 3, total: 7 },
+        speed: { prompt: 1, generated: 2, promptIsLive: false, generatedIsLive: true },
+        context: { percent: 20, used: 7, size: 100, capacity: 100, level: "normal" },
+        requests: { processing: 1, queued: 0, processingBest: 1 }, slots: { busy: 1, total: 2 },
+    });
+    safeRuntime.active_runtime.target.host = "changed";
+    safeInference.session.prompt = 999;
+    adapter.getSettings().temperature = 999;
+    assert.equal(runtime.active_runtime.target.host, "localhost");
+    assert.equal(inference.session.prompt, 4);
+    assert.equal(values.temperature, 0.5);
+    for (const field of ["ctx_size", "alias", "reasoning_format", "unknown", "api_key"]) {
+        assert.throws(() => adapter.setSettings({ temperature: 0.8, [field]: 1 }), /not writable/);
     }
+    assert.throws(() => adapter.setSettings({ temperature: { nested: { authorization: "secret" } } }), /not JSON-safe/);
+    assert.deepEqual(calls, [], "invalid patches are rejected before any shared-state write");
+    adapter.setSettings({ temperature: 0, top_p: null });
+    assert.deepEqual(calls, [{ temperature: 0, top_p: null }]);
+    assert.equal(values.temperature, 0.5, "writes use flagCore's setter, not its returned object");
+    adapter.dispose();
+});
 
-    // A registered but unverified peer is allowed to receive only the cold
-    // hello. Wrong source/origin/version/epoch messages are ignored.
-    {
-        const messages = [];
-        const c = api.createCoordinator({ instanceId: "source", sessionId: "s", origin: "https://gui.test", locks: new FakeLocks(), storage: new FakeStorage(), chatUi: makeUi("source"), transport: { send: m => messages.push(m) } });
-        const peer = {};
-        c.attachPeer(peer, { peerId: "receiver", sessionId: "s", origin: "https://gui.test" });
-        assert.equal(c.beginHandshake(), true);
-        assert.equal(messages.length, 1);
-        assert.equal(messages[0].type, "hello");
-        assert.equal(c.receiveMessage({ data: messages[0], origin: "https://evil.test", source: peer }), false);
-        assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { version: 99 }), origin: "https://gui.test", source: peer }), false);
-        assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { sessionId: "other-session" }), origin: "https://gui.test", source: peer }), false);
-        assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { sourceId: "attacker" }), origin: "https://gui.test", source: peer }), false);
-        assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { epoch: -1 }), origin: "https://gui.test", source: {} }), false);
-    }
+// Subscription and validity state belong to each adapter. Authentication is
+// a direct verified-peer capability, never a field in projected changes.
+test("adapter subscriptions and authentication respect session validity", async t => {
+    const api = loadApi(t);
+    let observe;
+    let cleanups = 0;
+    let authCalls = 0;
+    const changes = [];
+    const otherChanges = [];
+    const adapter = api.createHostAdapter({
+        fields: ["temperature"],
+        observeHostChanges: listener => { observe = listener; return () => { cleanups += 1; }; },
+        getAuthorizationHeaders: () => { authCalls += 1; return { Authorization: "Bearer fixture-secret" }; },
+    });
+    const other = api.createHostAdapter({ fields: ["top_p"] });
+    const unsubscribe = adapter.subscribe(change => changes.push(clone(change)));
+    other.subscribe(change => otherChanges.push(change));
+    observe({ type: "settings", fields: ["temperature", "top_p", "api_key"], runtime: { model: "safe", api_key: "secret" }, Authorization: "secret" });
+    assert.deepEqual(changes, [{ type: "settings", fields: ["temperature"], runtime: { model: "safe" } }]);
+    assert.deepEqual(otherChanges, []);
+    assert.deepEqual(clone(adapter.getAuthorizationHeaders()), { Authorization: "Bearer fixture-secret" });
+    assert.equal(authCalls, 1);
+    unsubscribe();
+    observe({ type: "settings" });
+    assert.equal(changes.length, 1);
+    adapter.subscribe(change => changes.push(clone(change)));
+    assert.equal(adapter.invalidateSession(), true);
+    assert.equal(adapter.invalidateSession(), false);
+    assert.deepEqual(changes.at(-1), { type: "session-invalidated" });
+    assert.throws(() => adapter.getAuthorizationHeaders(), /no longer available/);
+    assert.throws(() => adapter.setSettings({ temperature: 1 }), /no longer available/);
+    assert.equal(authCalls, 1);
+    assert.equal(other.isSessionValid(), true);
+    const beforeDispose = changes.length;
+    adapter.dispose();
+    adapter.dispose();
+    observe({ type: "settings" });
+    assert.equal(changes.length, beforeDispose);
+    assert.equal(cleanups, 1);
+    other.notify({ type: "settings", fields: ["top_p"] });
+    assert.equal(otherChanges.length, 1);
+    other.dispose();
+});
 
-    // A coordinator without a trustworthy origin must reject every hello,
-    // including an event whose origin is itself empty.
-    {
-        const messages = [];
-        const c = api.createCoordinator({ instanceId: "no-origin", sessionId: "s", origin: "", locks: new FakeLocks(),
-            storage: new FakeStorage(), chatUi: makeUi("no-origin"), transport: { send: message => messages.push(message) } });
-        const peer = {};
-        c.attachPeer(peer, { peerId: "receiver", sessionId: "s", origin: "" });
-        const hello = {
-            channel: "llama-gui-chat-window", version: 1, type: "hello", sessionId: "s",
-            sourceId: "receiver", destinationId: "no-origin", epoch: 0,
-        };
-        assert.equal(c.receiveMessage({ data: hello, origin: "", source: peer }), false);
-        assert.equal(c.receiveMessage({ data: hello, origin: "https://evil.test", source: peer }), false);
-        assert.equal(c.isPeerVerified(), false);
-        assert.deepEqual(messages, []);
-    }
+// The adapter preserves explicit null/unset values, exposes only the Chat
+// request settings, and never hands a peer the host's control methods.
+test("adapter settings preserve unset values and reject forbidden writes", async t => {
+    const api = loadApi(t);
+    const calls = [];
+    const core = {
+        getFlagValues: () => ({ temperature: null, top_p: 0.9, ctx_size: 4096, api_key: "secret" }),
+        setMultipleFlagValues: patch => calls.push(patch),
+    };
+    const adapter = api.createHostAdapter({
+        flagCore: core,
+        getChatSamplerFlagIds: () => ["temperature", "top_p", "top_k", "min_p", "repeat_penalty", "n_predict"],
+        getChatModelName: () => "model.gguf",
+        getStatus: () => ({ status: "running", phase: "ready", busy: false, api_key_configured: true, activeRuntime: { model: "model.gguf", alias: "safe" }, runtime_generation: 2 }),
+        getInference: () => ({ targetKey: "runtime-1", seq: 3, session: { prompt: 4, generated: 3, total: 7 }, speed: { prompt: 1.2, generated: 4.5, promptIsLive: true, generatedIsLive: false }, context: { percent: 20 }, api_key: "secret" }),
+    });
+    assert.deepEqual(clone(adapter.getSettings()), { temperature: null, top_p: 0.9, ctx_size: 4096, selected_model: "model.gguf" });
+    assert.deepEqual(clone(adapter.getStatus()), { status: "running", phase: "ready", busy: false, activeRuntime: { model: "model.gguf", alias: "safe" }, runtime_generation: 2 });
+    assert.deepEqual(clone(adapter.getInference()), { targetKey: "runtime-1", seq: 3, session: { prompt: 4, generated: 3, total: 7 }, speed: { prompt: 1.2, generated: 4.5, promptIsLive: true, generatedIsLive: false }, context: { percent: 20 } });
+    adapter.setSettings({ temperature: 0.2, n_predict: 32 });
+    assert.deepEqual(clone(calls), [{ temperature: 0.2, n_predict: 32 }]);
+    assert.throws(() => adapter.setSettings({ ctx_size: 8192 }), /not writable/);
+    assert.throws(() => adapter.setSettings({ api_key: "bad" }), /not writable/);
+    adapter.invalidateSession();
+    assert.equal(adapter.isSessionValid(), false);
+    assert.throws(() => adapter.getSettings(), /no longer available/);
+    assert.equal(Object.prototype.hasOwnProperty.call(adapter, "reviveSession"), false);
+});
 
-    // Full A -> B -> A -> B sequence. saveForTransfer runs before capture,
-    // proving an unsaved conversation ID is not lost or duplicated.
-    {
-        const pair = makePeerPair(api);
-        await preparePair(pair);
-        const first = await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 100 });
-        assert.equal(first, true);
-        assert.equal(pair.uiA.owner, false);
-        assert.equal(pair.uiB.owner, true);
-        assert.equal(pair.uiA.saves, 1);
-        assert.equal(pair.uiA.snapshotState().conversationId, "A-saved-1");
-        assert.equal(pair.uiB.snapshotState().conversationId, "A-saved-1");
-        assert.equal(pair.uiB.restores, 2, "receiver restores inertly then after lock revalidation");
-        const reverse = await pair.b.beginTransfer({ destinationId: "A", timeoutMs: 100 });
-        assert.equal(reverse, true, `reverse failed A=${JSON.stringify(pair.a.getState())} B=${JSON.stringify(pair.b.getState())}`);
-        assert.equal(pair.uiA.owner, true);
-        assert.equal(pair.uiB.owner, false);
-        const third = await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 100 });
-        assert.equal(third, true);
-        assert.equal(pair.uiB.owner, true);
-        assert.equal(pair.uiA.owner, false);
-        assert.equal(pair.uiB.snapshotState().conversationId, "A-saved-1");
-        assert.equal(pair.uiA.saves, 2);
-    }
+// Unavailable locks keep a usable single-window owner while explaining why
+// detach is unavailable.
+test("unavailable Web Locks retain a usable single-window owner", async t => {
+    const api = loadApi(t);
+    const ui = makeUi("single");
+    const c = api.createCoordinator({ instanceId: "single", origin: "http://127.0.0.1:5240", locks: null, storage: new FakeStorage(), chatUi: ui });
+    const initialized = await c.initialize();
+    assert.equal(initialized.reason, "single-window");
+    assert.equal(c.getState().popoutAvailable, false);
+    assert.equal(c.isOwner(), true);
+    assert.match(c.getState().reason, /Web Locks/);
+    assert.equal(c.beginHandshake(), false);
+});
 
-    // A receiver queued behind a still-held lock must time out its commit
-    // acquisition. Releasing the competing owner afterward must not grant the
-    // canceled request or activate the receiver late.
-    {
-        const pair = makePeerPair(api);
-        await preparePair(pair);
-        const snapshot = pair.uiA.captureSnapshot({ sourceId: "A", destinationId: "B", transferId: "held", revision: 1 });
-        assert.equal(pair.a.checkpoint(snapshot, {
-            sourceId: "A", destinationId: "B", transferId: "held", revision: 1,
-        }), true, "the queued commit must have a valid durable record to revalidate");
-        const epoch = pair.a.getState().epoch;
-        const baseMessage = {
-            channel: "llama-gui-chat-window", version: 1, sessionId: pair.sessionId,
-            sourceId: "A", destinationId: "B", epoch, transferId: "held", revision: 1,
-        };
-        assert.equal(pair.b.receiveMessage({
-            data: Object.assign({}, baseMessage, { type: "prepare", payload: { snapshot } }),
-            origin: pair.origin, source: pair.peerA,
-        }), true);
-        await waitForCoordinatorState(pair.b, state => state.transfer?.phase === "prepared", "receiver prepare");
-        assert.equal(pair.b.receiveMessage({
-            data: Object.assign({}, baseMessage, { type: "commit" }),
-            origin: pair.origin, source: pair.peerA,
-        }), true);
-        await waitForCoordinatorState(pair.b, state => state.status === "acquiring", "receiver lock acquisition");
-        const failed = await waitForCoordinatorState(pair.b, state => state.status === "recovery-required", "receiver lock timeout");
-        assert.equal(failed.transfer?.phase, "failed");
-        assert.equal(pair.sent.some(item => item.from === "B"
-            && item.message.type === "reject" && item.message.reason === "ownership-failed"), true,
-        "timed-out receiver must reject the transfer");
-        assert.equal(pair.locks.queue.length, 0);
-        pair.a.releaseOwnership();
-        await flush();
-        assert.equal(pair.b.isOwner(), false, "a timed-out commit cannot acquire after the competing lock is released");
-    }
+// A registered but unverified peer is allowed to receive only the cold
+// hello. Wrong source/origin/version/epoch messages are ignored.
+test("peer handshake rejects wrong source origin version and epoch", async t => {
+    const api = loadApi(t);
+    const messages = [];
+    const c = api.createCoordinator({ instanceId: "source", sessionId: "s", origin: "https://gui.test", locks: new FakeLocks(), storage: new FakeStorage(), chatUi: makeUi("source"), transport: { send: m => messages.push(m) } });
+    const peer = {};
+    c.attachPeer(peer, { peerId: "receiver", sessionId: "s", origin: "https://gui.test" });
+    assert.equal(c.beginHandshake(), true);
+    assert.equal(messages.length, 1);
+    assert.equal(messages[0].type, "hello");
+    assert.equal(c.receiveMessage({ data: messages[0], origin: "https://evil.test", source: peer }), false);
+    assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { version: 99 }), origin: "https://gui.test", source: peer }), false);
+    assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { sessionId: "other-session" }), origin: "https://gui.test", source: peer }), false);
+    assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { sourceId: "attacker" }), origin: "https://gui.test", source: peer }), false);
+    assert.equal(c.receiveMessage({ data: Object.assign({}, messages[0], { epoch: -1 }), origin: "https://gui.test", source: {} }), false);
+});
 
-    // Storage quota/read failures abort before source release and preserve the
-    // usable owner/history. A receiver that disappears also times out before
-    // commit, leaving no queued stale lock callback.
-    {
-        const storage = new FakeStorage();
+// A coordinator without a trustworthy origin must reject every hello,
+// including an event whose origin is itself empty.
+test("an untrustworthy origin rejects every handshake", async t => {
+    const api = loadApi(t);
+    const messages = [];
+    const c = api.createCoordinator({ instanceId: "no-origin", sessionId: "s", origin: "", locks: new FakeLocks(),
+        storage: new FakeStorage(), chatUi: makeUi("no-origin"), transport: { send: message => messages.push(message) } });
+    const peer = {};
+    c.attachPeer(peer, { peerId: "receiver", sessionId: "s", origin: "" });
+    const hello = {
+        channel: "llama-gui-chat-window", version: 1, type: "hello", sessionId: "s",
+        sourceId: "receiver", destinationId: "no-origin", epoch: 0,
+    };
+    assert.equal(c.receiveMessage({ data: hello, origin: "", source: peer }), false);
+    assert.equal(c.receiveMessage({ data: hello, origin: "https://evil.test", source: peer }), false);
+    assert.equal(c.isPeerVerified(), false);
+    assert.deepEqual(messages, []);
+});
+
+// Full A -> B -> A -> B sequence. saveForTransfer runs before capture,
+// proving an unsaved conversation ID is not lost or duplicated.
+test("repeated forward and reverse transfers preserve the saved conversation", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api);
+    await preparePair(pair);
+    const first = await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 100 });
+    assert.equal(first, true);
+    assert.equal(pair.uiA.owner, false);
+    assert.equal(pair.uiB.owner, true);
+    assert.equal(pair.uiA.saves, 1);
+    assert.equal(pair.uiA.snapshotState().conversationId, "A-saved-1");
+    assert.equal(pair.uiB.snapshotState().conversationId, "A-saved-1");
+    assert.equal(pair.uiB.restores, 2, "receiver restores inertly then after lock revalidation");
+    const reverse = await pair.b.beginTransfer({ destinationId: "A", timeoutMs: 100 });
+    assert.equal(reverse, true, `reverse failed A=${JSON.stringify(pair.a.getState())} B=${JSON.stringify(pair.b.getState())}`);
+    assert.equal(pair.uiA.owner, true);
+    assert.equal(pair.uiB.owner, false);
+    const third = await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 100 });
+    assert.equal(third, true);
+    assert.equal(pair.uiB.owner, true);
+    assert.equal(pair.uiA.owner, false);
+    assert.equal(pair.uiB.snapshotState().conversationId, "A-saved-1");
+    assert.equal(pair.uiA.saves, 2);
+});
+
+// A receiver queued behind a still-held lock must time out its commit
+// acquisition. Releasing the competing owner afterward must not grant the
+// canceled request or activate the receiver late.
+test("queued receiver commit times out without acquiring ownership later", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api);
+    await preparePair(pair);
+    const snapshot = pair.uiA.captureSnapshot({ sourceId: "A", destinationId: "B", transferId: "held", revision: 1 });
+    assert.equal(pair.a.checkpoint(snapshot, {
+        sourceId: "A", destinationId: "B", transferId: "held", revision: 1,
+    }), true, "the queued commit must have a valid durable record to revalidate");
+    const epoch = pair.a.getState().epoch;
+    const baseMessage = {
+        channel: "llama-gui-chat-window", version: 1, sessionId: pair.sessionId,
+        sourceId: "A", destinationId: "B", epoch, transferId: "held", revision: 1,
+    };
+    assert.equal(pair.b.receiveMessage({
+        data: Object.assign({}, baseMessage, { type: "prepare", payload: { snapshot } }),
+        origin: pair.origin, source: pair.peerA,
+    }), true);
+    await waitForCoordinatorState(pair.b, state => state.transfer?.phase === "prepared", "receiver prepare");
+    assert.equal(pair.b.receiveMessage({
+        data: Object.assign({}, baseMessage, { type: "commit" }),
+        origin: pair.origin, source: pair.peerA,
+    }), true);
+    await waitForCoordinatorState(pair.b, state => state.status === "acquiring", "receiver lock acquisition");
+    const failed = await waitForCoordinatorState(pair.b, state => state.status === "recovery-required", "receiver lock timeout");
+    assert.equal(failed.transfer?.phase, "failed");
+    assert.equal(pair.sent.some(item => item.from === "B"
+        && item.message.type === "reject" && item.message.reason === "ownership-failed"), true,
+    "timed-out receiver must reject the transfer");
+    assert.equal(pair.locks.queue.length, 0);
+    pair.a.releaseOwnership();
+    await flush();
+    assert.equal(pair.b.isOwner(), false, "a timed-out commit cannot acquire after the competing lock is released");
+});
+
+// Storage quota failures abort before source release and preserve the
+// usable owner/history. A receiver that disappears also times out before
+// commit, leaving no queued stale lock callback.
+test("storage write failure and a missing receiver preserve source ownership", async t => {
+    const api = loadApi(t);
+    const storage = new FakeStorage();
+    const pair = makePeerPair(api, { storage });
+    await preparePair(pair);
+    storage.failWrite = true;
+    assert.equal(await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 20 }), false);
+    assert.equal(pair.a.isOwner(), true);
+    assert.equal(pair.uiA.suspended, false);
+    storage.failWrite = false;
+    pair.b.dispose();
+    assert.equal(await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 10 }), false);
+    assert.equal(pair.a.isOwner(), true);
+    assert.equal(pair.locks.queue.length, 0);
+});
+
+for (const failure of ["missing recovery storage methods", "blocked recovery storage reads"]) {
+    test(`${failure} refuse transfer without losing the usable owner`, async t => {
+        const api = loadApi(t);
+        const storage = failure.startsWith("missing") ? {} : new FakeStorage();
+        storage.failRead = true;
         const pair = makePeerPair(api, { storage });
         await preparePair(pair);
-        storage.failWrite = true;
-        assert.equal(await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 20 }), false);
+        const before = pair.uiA.snapshotState();
+
+        assert.equal(pair.a.readRecovery().reason, "storage-unavailable");
+        assert.equal(await pair.a.beginTransfer({ destinationId: "B" }), false);
         assert.equal(pair.a.isOwner(), true);
+        assert.equal(pair.b.isOwner(), false);
         assert.equal(pair.uiA.suspended, false);
-        storage.failWrite = false;
-        pair.b.dispose();
-        assert.equal(await pair.a.beginTransfer({ destinationId: "B", timeoutMs: 10 }), false);
-        assert.equal(pair.a.isOwner(), true);
+        assert.deepEqual(pair.uiA.snapshotState().messages, before.messages);
+        assert.equal(pair.uiA.snapshotState().draft, before.draft);
+        assert.equal(pair.uiB.restores, 0);
+        assert.equal(pair.sent.some(item => item.message.type === "commit"), false);
         assert.equal(pair.locks.queue.length, 0);
-    }
-
-    // A receiver close/reject before readiness resumes the source. A receiver
-    // disappearing after release leaves exactly one owner and requires explicit
-    // recovery; a timeout must never reactivate the source.
-    {
-        const beforeReady = makePeerPair(api, { drop: (from, message) => from === "B" && message.type === "ready" });
-        await preparePair(beforeReady);
-        assert.equal(await beforeReady.a.beginTransfer({ destinationId: "B", timeoutMs: 20 }), false);
-        assert.equal(beforeReady.a.isOwner(), true);
-        assert.equal(beforeReady.uiA.owner, true);
-        assert.equal(beforeReady.b.isOwner(), false);
-        beforeReady.b.dispose();
-
-        const afterRelease = makePeerPair(api, { drop: (from, message) => from === "B" && message.type === "owner-ack" });
-        await preparePair(afterRelease);
-        assert.equal(await afterRelease.a.beginTransfer({ destinationId: "B", timeoutMs: 20 }), false);
-        assert.equal(afterRelease.a.isOwner(), false);
-        assert.equal(afterRelease.b.isOwner(), true);
-        assert.equal(afterRelease.a.getState().status, "recovery-required");
-        assert.equal(afterRelease.uiA.owner, false);
-        assert.equal(afterRelease.uiB.owner, true);
-    }
+    });
+}
 
-    // Invalidation while a receiver is awaiting restore must retire the
-    // stale continuation. It cannot publish ready or leave a lockless owner
-    // after the restore promise settles.
-    {
-        const pair = makePeerPair(api);
-        await preparePair(pair);
-        let finishRestore;
-        let restoreStarted = false;
-        pair.uiB.restoreSnapshot = () => new Promise(resolve => {
-            restoreStarted = true;
-            finishRestore = resolve;
-        });
-        const snapshot = pair.uiA.captureSnapshot({ sourceId: "A", destinationId: "B", transferId: "prepare-invalidation", revision: 1 });
-        const message = {
-            channel: "llama-gui-chat-window", version: 1, type: "prepare", sessionId: pair.sessionId,
-            sourceId: "A", destinationId: "B", epoch: pair.a.getState().epoch,
-            transferId: "prepare-invalidation", revision: 1, payload: { snapshot },
-        };
-        assert.equal(pair.b.receiveMessage({ data: message, origin: pair.origin, source: pair.peerA }), true);
-        await waitForCondition(() => restoreStarted, "receiver restore to start");
-        assert.equal(pair.b.getState().transfer?.phase, "restoring");
-        assert.equal(await pair.b.invalidateSession(), true);
-        finishRestore(true);
-        await flush();
-        assert.equal(pair.b.isOwner(), false);
-        assert.notEqual(pair.b.getState().transfer?.phase, "prepared");
-        assert.equal(pair.sent.some(item => item.from === "B" && item.message.type === "ready"), false,
-            "an invalidated restore must not publish ready");
-    }
+// A receiver close/reject before readiness resumes the source. A receiver
+// disappearing after release leaves exactly one owner and requires explicit
+// recovery; a timeout must never reactivate the source.
+test("receiver disappearance before and after release requires the right recovery", async t => {
+    const api = loadApi(t);
+    const beforeReady = makePeerPair(api, { drop: (from, message) => from === "B" && message.type === "ready" });
+    await preparePair(beforeReady);
+    assert.equal(await beforeReady.a.beginTransfer({ destinationId: "B", timeoutMs: 20 }), false);
+    assert.equal(beforeReady.a.isOwner(), true);
+    assert.equal(beforeReady.uiA.owner, true);
+    assert.equal(beforeReady.b.isOwner(), false);
+    beforeReady.b.dispose();
+
+    const afterRelease = makePeerPair(api, { drop: (from, message) => from === "B" && message.type === "owner-ack" });
+    await preparePair(afterRelease);
+    assert.equal(await afterRelease.a.beginTransfer({ destinationId: "B", timeoutMs: 20 }), false);
+    assert.equal(afterRelease.a.isOwner(), false);
+    assert.equal(afterRelease.b.isOwner(), true);
+    assert.equal(afterRelease.a.getState().status, "recovery-required");
+    assert.equal(afterRelease.uiA.owner, false);
+    assert.equal(afterRelease.uiB.owner, true);
+});
 
-    // The commit path awaits a second restore while holding the destination
-    // lock. Invalidation during that await must release the lock and prevent
-    // a late restore completion from publishing ownership or owner-ack.
-    {
-        const pair = makePeerPair(api, { transferTimeoutMs: 1000 });
-        await preparePair(pair);
-        let restoreCalls = 0;
-        let finishPrepare;
-        let finishCommit;
-        pair.uiB.restoreSnapshot = () => {
-            restoreCalls += 1;
-            return new Promise(resolve => {
-                if (restoreCalls === 1) finishPrepare = resolve;
-                else finishCommit = resolve;
-            });
-        };
-        const transfer = pair.a.beginTransfer({ destinationId: "B", transferId: "commit-invalidation", timeoutMs: 100 });
-        await waitForCondition(() => restoreCalls === 1, "prepare restore to start");
-        finishPrepare(true);
-        await waitForCoordinatorState(pair.b, state => state.status === "prepared", "receiver prepared state");
-        await waitForCondition(() => restoreCalls === 2, "commit restore to start");
-        assert.equal(pair.b.getState().status, "acquiring");
-        assert.equal(await pair.b.invalidateSession(), true);
-        finishCommit(true);
-        assert.equal(await transfer, false);
-        await flush();
-        assert.equal(pair.b.isOwner(), false, "an invalidated commit cannot become owner after restore settles");
-        assert.equal(pair.a.isOwner(), false);
-        assert.equal(pair.sent.some(item => item.from === "B" && item.message.type === "owner-ack"), false,
-            "an invalidated commit must not publish owner-ack");
-    }
+// Invalidation while a receiver is awaiting restore must retire the
+// stale continuation. It cannot publish ready or leave a lockless owner
+// after the restore promise settles.
+test("invalidation during prepare restore prevents stale readiness", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api);
+    await preparePair(pair);
+    let finishRestore;
+    let restoreStarted = false;
+    pair.uiB.restoreSnapshot = () => new Promise(resolve => {
+        restoreStarted = true;
+        finishRestore = resolve;
+    });
+    const snapshot = pair.uiA.captureSnapshot({ sourceId: "A", destinationId: "B", transferId: "prepare-invalidation", revision: 1 });
+    const message = {
+        channel: "llama-gui-chat-window", version: 1, type: "prepare", sessionId: pair.sessionId,
+        sourceId: "A", destinationId: "B", epoch: pair.a.getState().epoch,
+        transferId: "prepare-invalidation", revision: 1, payload: { snapshot },
+    };
+    assert.equal(pair.b.receiveMessage({ data: message, origin: pair.origin, source: pair.peerA }), true);
+    await waitForCondition(() => restoreStarted, "receiver restore to start");
+    assert.equal(pair.b.getState().transfer?.phase, "restoring");
+    assert.equal(await pair.b.invalidateSession(), true);
+    finishRestore(true);
+    await flush();
+    assert.equal(pair.b.isOwner(), false);
+    assert.notEqual(pair.b.getState().transfer?.phase, "prepared");
+    assert.equal(pair.sent.some(item => item.from === "B" && item.message.type === "ready"), false,
+        "an invalidated restore must not publish ready");
+});
 
-    // A source that times out waiting for owner-ack remains recoverable.
-    // A delayed ack and a later competing-lock release cannot reactivate it;
-    // explicit recovery must make a fresh peer transfer valid again.
-    {
-        let droppedAck = null;
-        let dropNextAck = true;
-        const hookedPair = makePeerPair(api, {
-            transferTimeoutMs: 100,
-            drop: (from, message) => {
-                if (from === "B" && message.type === "owner-ack" && dropNextAck) {
-                    dropNextAck = false;
-                    droppedAck = clone(message);
-                    return true;
-                }
-                return false;
-            },
+// The commit path awaits a second restore while holding the destination
+// lock. Invalidation during that await must release the lock and prevent
+// a late restore completion from publishing ownership or owner-ack.
+test("invalidation during commit restore releases the destination lock", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api, { transferTimeoutMs: 1000 });
+    await preparePair(pair);
+    let restoreCalls = 0;
+    let finishPrepare;
+    let finishCommit;
+    pair.uiB.restoreSnapshot = () => {
+        restoreCalls += 1;
+        return new Promise(resolve => {
+            if (restoreCalls === 1) finishPrepare = resolve;
+            else finishCommit = resolve;
         });
-        await preparePair(hookedPair);
-        const first = hookedPair.a.beginTransfer({ destinationId: "B", transferId: "owner-ack-timeout", timeoutMs: 100 });
-        await waitForCoordinatorState(hookedPair.b, state => state.ownership === true && state.status === "active", "receiver ownership");
-        assert.equal(await first, false);
-        const sourceState = hookedPair.a.getState();
-        assert.equal(sourceState.status, "recovery-required");
-        assert.equal(sourceState.ownership, false);
-        assert.ok(droppedAck, "the receiver must have attempted the owner acknowledgment");
-        assert.equal(hookedPair.a.receiveMessage({ data: droppedAck, origin: hookedPair.origin, source: hookedPair.peerB }), true);
-        await flush();
-        assert.equal(hookedPair.a.isOwner(), false);
-        hookedPair.b.releaseOwnership();
-        await flush();
-        assert.equal(hookedPair.a.isOwner(), false, "releasing the receiver lock cannot reactivate the timed-out source");
-
-        assert.equal(await hookedPair.a.recover(), true, "source can explicitly recover after the receiver releases ownership");
-        assert.equal(hookedPair.a.isOwner(), true);
-        assert.equal(await hookedPair.a.beginTransfer({ destinationId: "B", transferId: "fresh-transfer", timeoutMs: 100 }), true,
-            "a fresh peer transfer remains possible after recovery");
-        assert.equal(hookedPair.b.isOwner(), true);
-        hookedPair.b.releaseOwnership();
-    }
+    };
+    const transfer = pair.a.beginTransfer({ destinationId: "B", transferId: "commit-invalidation", timeoutMs: 100 });
+    await waitForCondition(() => restoreCalls === 1, "prepare restore to start");
+    finishPrepare(true);
+    await waitForCoordinatorState(pair.b, state => state.status === "prepared", "receiver prepared state");
+    await waitForCondition(() => restoreCalls === 2, "commit restore to start");
+    assert.equal(pair.b.getState().status, "acquiring");
+    assert.equal(await pair.b.invalidateSession(), true);
+    finishCommit(true);
+    assert.equal(await transfer, false);
+    await flush();
+    assert.equal(pair.b.isOwner(), false, "an invalidated commit cannot become owner after restore settles");
+    assert.equal(pair.a.isOwner(), false);
+    assert.equal(pair.sent.some(item => item.from === "B" && item.message.type === "owner-ack"), false,
+        "an invalidated commit must not publish owner-ack");
+});
 
-    // Invalidating while owner-ack is pending retires the operation.  A late
-    // acknowledgment must not resurrect ownership or transfer state.
-    {
-        let droppedAck = null;
-        const invalidatedPair = makePeerPair(api, {
-            transferTimeoutMs: 100,
-            drop: (from, message) => {
-                if (from === "B" && message.type === "owner-ack" && droppedAck === null) {
-                    droppedAck = clone(message);
-                    return true;
-                }
-                return false;
-            },
-        });
-        await preparePair(invalidatedPair);
-        const pending = invalidatedPair.a.beginTransfer({ destinationId: "B", transferId: "owner-ack-invalidation", timeoutMs: 1000 });
-        await waitForCoordinatorState(invalidatedPair.b, state => state.ownership === true && state.status === "active", "receiver ownership before invalidation");
-        await waitForCoordinatorState(invalidatedPair.a, state => state.transfer?.phase === "awaiting-ack", "source owner-ack wait");
-        assert.equal(await invalidatedPair.a.invalidateSession(), true);
-        assert.equal(await pending, false, "invalidating the source cancels the pending owner acknowledgment");
-        assert.ok(droppedAck, "the invalidated transfer must have produced a delayed owner acknowledgment");
-        assert.equal(invalidatedPair.a.receiveMessage({ data: droppedAck, origin: invalidatedPair.origin, source: invalidatedPair.peerB }), false,
-            "a late owner acknowledgment is rejected after invalidation");
-        await flush();
-        assert.equal(invalidatedPair.a.isOwner(), false);
-        assert.equal(invalidatedPair.a.getState().transfer, null, "invalidation retires the pending transfer");
-    }
+// A source that times out waiting for owner-ack remains recoverable.
+// A delayed ack and a later competing-lock release cannot reactivate it;
+// explicit recovery must make a fresh peer transfer valid again.
+test("delayed ownership acknowledgment requires explicit recovery", async t => {
+    const api = loadApi(t);
+    let droppedAck = null;
+    let dropNextAck = true;
+    const hookedPair = makePeerPair(api, {
+        transferTimeoutMs: 100,
+        drop: (from, message) => {
+            if (from === "B" && message.type === "owner-ack" && dropNextAck) {
+                dropNextAck = false;
+                droppedAck = clone(message);
+                return true;
+            }
+            return false;
+        },
+    });
+    await preparePair(hookedPair);
+    const first = hookedPair.a.beginTransfer({ destinationId: "B", transferId: "owner-ack-timeout", timeoutMs: 100 });
+    await waitForCoordinatorState(hookedPair.b, state => state.ownership === true && state.status === "active", "receiver ownership");
+    assert.equal(await first, false);
+    const sourceState = hookedPair.a.getState();
+    assert.equal(sourceState.status, "recovery-required");
+    assert.equal(sourceState.ownership, false);
+    assert.ok(droppedAck, "the receiver must have attempted the owner acknowledgment");
+    assert.equal(hookedPair.a.receiveMessage({ data: droppedAck, origin: hookedPair.origin, source: hookedPair.peerB }), true);
+    await flush();
+    assert.equal(hookedPair.a.isOwner(), false);
+    hookedPair.b.releaseOwnership();
+    await flush();
+    assert.equal(hookedPair.a.isOwner(), false, "releasing the receiver lock cannot reactivate the timed-out source");
+
+    assert.equal(await hookedPair.a.recover(), true, "source can explicitly recover after the receiver releases ownership");
+    assert.equal(hookedPair.a.isOwner(), true);
+    assert.equal(await hookedPair.a.beginTransfer({ destinationId: "B", transferId: "fresh-transfer", timeoutMs: 100 }), true,
+        "a fresh peer transfer remains possible after recovery");
+    assert.equal(hookedPair.b.isOwner(), true);
+    hookedPair.b.releaseOwnership();
+});
 
-    // Durable tombstones win over an interrupted destructive history write;
-    // stale checkpoints and nonowners cannot overwrite them.
-    {
-        const locks = new FakeLocks();
-        const storage = new FakeStorage();
-        const ui = makeUi("delete");
-        const c = api.createCoordinator({ instanceId: "delete", sessionId: "d", origin: "http://127.0.0.1:5240", locks, storage, chatUi: ui });
-        await c.initialize({ recover: false });
-        assert.equal(c.checkpoint(c.captureSnapshot({ sourceId: "delete", destinationId: "delete", transferId: "initial", revision: 1 }), { sourceId: "delete", destinationId: "delete", transferId: "initial", revision: 1 }), true);
-        assert.equal(c.invalidateRecovery({ sourceId: "delete", destinationId: "delete", transferId: "delete", revision: 2 }, "clear" ).ok, true);
-        assert.equal(c.readRecovery().reason, "invalidated");
-        assert.equal(c.checkpoint(c.captureSnapshot({ sourceId: "delete", destinationId: "delete", transferId: "stale", revision: 2 }), { sourceId: "delete", destinationId: "delete", transferId: "stale", revision: 2 }), false);
-        c.releaseOwnership();
-        await flush();
-        const recoveredUi = makeUi("recovered");
-        recoveredUi.setSnapshotState({ conversationId: "stale-deleted", title: "Stale chat", draft: "stale draft", messages: [{ role: "user", content: "stale" }], compactions: [{ end: 1, summary: "stale" }] });
-        const recovered = api.createCoordinator({ instanceId: "recovered", sessionId: "d", origin: "http://127.0.0.1:5240", locks, storage, chatUi: recoveredUi });
-        assert.equal((await recovered.initialize()).ok, true);
-        assert.equal(recoveredUi.restores, 0);
-        assert.equal(recoveredUi.resets, 1, "tombstone recovery resets the existing UI while holding the lock");
-        assert.deepEqual(recoveredUi.snapshotState(), { conversationId: "", title: "", draft: "", messages: [], compactions: [] });
-        const freshSnapshot = recovered.captureSnapshot({ sourceId: "recovered", destinationId: "recovered", transferId: "fresh", revision: 3 });
-        assert.equal(recovered.validateSnapshot(freshSnapshot), true, JSON.stringify({ state: recovered.getState(), recovery: recovered.readRecovery(), owner: recovered.isOwner() }));
-        assert.equal(recovered.checkpoint(freshSnapshot, { sourceId: "recovered", destinationId: "recovered", transferId: "fresh", revision: 3 }), true,
-            "a fresh owner can checkpoint above the durable tombstone revision");
-        assert.equal(recovered.invalidateRecovery({ sourceId: "recovered", destinationId: "recovered", transferId: "reset-again", revision: 4 }, "clear").ok, true);
-        recovered.releaseOwnership();
-        await flush();
-
-        const missingResetUi = makeUi("missing-reset");
-        delete missingResetUi.resetWorkspace;
-        const missingReset = api.createCoordinator({ instanceId: "missing-reset", sessionId: "d", origin: "http://127.0.0.1:5240", locks, storage, chatUi: missingResetUi });
-        const missingResetResult = await missingReset.initialize();
-        assert.equal(missingResetResult.ok, false, "tombstone recovery fails closed when the reset hook is unavailable");
-        assert.equal(missingResetResult.reason, "recovery-reset-failed");
-        assert.equal(missingReset.isOwner(), false);
-    }
+// Invalidating while owner-ack is pending retires the operation.  A late
+// acknowledgment must not resurrect ownership or transfer state.
+test("invalidation while acknowledgment is pending retires the transfer", async t => {
+    const api = loadApi(t);
+    let droppedAck = null;
+    const invalidatedPair = makePeerPair(api, {
+        transferTimeoutMs: 100,
+        drop: (from, message) => {
+            if (from === "B" && message.type === "owner-ack" && droppedAck === null) {
+                droppedAck = clone(message);
+                return true;
+            }
+            return false;
+        },
+    });
+    await preparePair(invalidatedPair);
+    const pending = invalidatedPair.a.beginTransfer({ destinationId: "B", transferId: "owner-ack-invalidation", timeoutMs: 1000 });
+    await waitForCoordinatorState(invalidatedPair.b, state => state.ownership === true && state.status === "active", "receiver ownership before invalidation");
+    await waitForCoordinatorState(invalidatedPair.a, state => state.transfer?.phase === "awaiting-ack", "source owner-ack wait");
+    assert.equal(await invalidatedPair.a.invalidateSession(), true);
+    assert.equal(await pending, false, "invalidating the source cancels the pending owner acknowledgment");
+    assert.ok(droppedAck, "the invalidated transfer must have produced a delayed owner acknowledgment");
+    assert.equal(invalidatedPair.a.receiveMessage({ data: droppedAck, origin: invalidatedPair.origin, source: invalidatedPair.peerB }), false,
+        "a late owner acknowledgment is rejected after invalidation");
+    await flush();
+    assert.equal(invalidatedPair.a.isOwner(), false);
+    assert.equal(invalidatedPair.a.getState().transfer, null, "invalidation retires the pending transfer");
+});
 
-    // Malformed recovery is discarded only by the explicit recovery action.
-    {
-        const storage = new FakeStorage();
-        const locks = new FakeLocks();
-        const ui = makeUi("malformed");
-        const coordinator = api.createCoordinator({ instanceId: "malformed", sessionId: "m", origin: "http://127.0.0.1:5240", locks, storage, chatUi: ui });
-        storage.setItem(coordinator.storageKey, "{broken");
-        assert.equal((await coordinator.initialize()).reason, "invalid-recovery");
-        assert.equal(coordinator.isOwner(), false);
-        assert.equal(storage.getItem(coordinator.storageKey), "{broken");
-        storage.failRemove = true;
-        assert.equal(await coordinator.recover({ clearInvalid: true }), false);
-        assert.equal(coordinator.isOwner(), false);
-        storage.failRemove = false;
-        assert.equal(await coordinator.recover({ clearInvalid: true }), true);
-        assert.equal(ui.resets, 1);
-        assert.deepEqual(ui.snapshotState().messages, []);
-        assert.equal(coordinator.isOwner(), true);
-        coordinator.dispose();
-    }
+// Durable tombstones win over an interrupted destructive history write;
+// stale checkpoints and nonowners cannot overwrite them.
+test("durable deletion tombstones prevent stale history resurrection", async t => {
+    const api = loadApi(t);
+    const locks = new FakeLocks();
+    const storage = new FakeStorage();
+    const ui = makeUi("delete");
+    const c = api.createCoordinator({ instanceId: "delete", sessionId: "d", origin: "http://127.0.0.1:5240", locks, storage, chatUi: ui });
+    await c.initialize({ recover: false });
+    assert.equal(c.checkpoint(c.captureSnapshot({ sourceId: "delete", destinationId: "delete", transferId: "initial", revision: 1 }), { sourceId: "delete", destinationId: "delete", transferId: "initial", revision: 1 }), true);
+    assert.equal(c.invalidateRecovery({ sourceId: "delete", destinationId: "delete", transferId: "delete", revision: 2 }, "clear" ).ok, true);
+    assert.equal(c.readRecovery().reason, "invalidated");
+    assert.equal(c.checkpoint(c.captureSnapshot({ sourceId: "delete", destinationId: "delete", transferId: "stale", revision: 2 }), { sourceId: "delete", destinationId: "delete", transferId: "stale", revision: 2 }), false);
+    c.releaseOwnership();
+    await flush();
+    const recoveredUi = makeUi("recovered");
+    recoveredUi.setSnapshotState({ conversationId: "stale-deleted", title: "Stale chat", draft: "stale draft", messages: [{ role: "user", content: "stale" }], compactions: [{ end: 1, summary: "stale" }] });
+    const recovered = api.createCoordinator({ instanceId: "recovered", sessionId: "d", origin: "http://127.0.0.1:5240", locks, storage, chatUi: recoveredUi });
+    assert.equal((await recovered.initialize()).ok, true);
+    assert.equal(recoveredUi.restores, 0);
+    assert.equal(recoveredUi.resets, 1, "tombstone recovery resets the existing UI while holding the lock");
+    assert.deepEqual(recoveredUi.snapshotState(), { conversationId: "", title: "", draft: "", messages: [], compactions: [] });
+    const freshSnapshot = recovered.captureSnapshot({ sourceId: "recovered", destinationId: "recovered", transferId: "fresh", revision: 3 });
+    assert.equal(recovered.validateSnapshot(freshSnapshot), true, JSON.stringify({ state: recovered.getState(), recovery: recovered.readRecovery(), owner: recovered.isOwner() }));
+    assert.equal(recovered.checkpoint(freshSnapshot, { sourceId: "recovered", destinationId: "recovered", transferId: "fresh", revision: 3 }), true,
+        "a fresh owner can checkpoint above the durable tombstone revision");
+    assert.equal(recovered.invalidateRecovery({ sourceId: "recovered", destinationId: "recovered", transferId: "reset-again", revision: 4 }, "clear").ok, true);
+    recovered.releaseOwnership();
+    await flush();
 
-    // Reinitializing an owner is idempotent and a remote abort rejection is
-    // propagated as a negative acknowledgment to the requesting coordinator.
-    {
-        const locks = new FakeLocks();
-        const storage = new FakeStorage();
-        const owner = api.createCoordinator({ instanceId: "owner", sessionId: "owner-session", origin: "http://127.0.0.1:5240", locks, storage, chatUi: makeUi("owner") });
-        assert.equal((await owner.initialize({ recover: false })).ok, true);
-        const lockCalls = locks.calls.length;
-        const repeated = await owner.initialize({ recover: false });
-        assert.equal(repeated.ok, true);
-        assert.equal(repeated.reason, "already-owner");
-        assert.equal(owner.isOwner(), true);
-        assert.equal(locks.calls.length, lockCalls, "repeated initialize does not reacquire the owner lock");
-
-        const pair = makePeerPair(api);
-        await preparePair(pair);
-        pair.a.releaseOwnership();
-        await flush();
-        assert.equal((await pair.b.acquireOwnership({ activate: true })), true);
-        pair.uiB.abortActiveStream = () => Promise.reject(new Error("synthetic abort failure"));
-        await assert.rejects(pair.a.abortActiveStream(), /active Chat stream could not be stopped/);
-        const negativeAck = pair.sent.find(item => item.from === "B" && item.message.type === "abort-ack");
-        assert.equal(negativeAck?.message.payload?.ok, false, "remote abort failure is sent as a negative acknowledgment");
-    }
+    const missingResetUi = makeUi("missing-reset");
+    delete missingResetUi.resetWorkspace;
+    const missingReset = api.createCoordinator({ instanceId: "missing-reset", sessionId: "d", origin: "http://127.0.0.1:5240", locks, storage, chatUi: missingResetUi });
+    const missingResetResult = await missingReset.initialize();
+    assert.equal(missingResetResult.ok, false, "tombstone recovery fails closed when the reset hook is unavailable");
+    assert.equal(missingResetResult.reason, "recovery-reset-failed");
+    assert.equal(missingReset.isOwner(), false);
+});
 
-    // Third page contention and host-session revocation fail closed.
-    {
-        const pair = makePeerPair(api);
-        await pair.a.initialize({ recover: false });
-        const thirdUi = makeUi("third");
-        const third = api.createCoordinator({ instanceId: "third", sessionId: pair.sessionId, origin: pair.origin, locks: pair.locks, storage: pair.storage, chatUi: thirdUi });
-        assert.equal((await third.initialize({ recover: false })).reason, "lock-busy");
-        assert.equal(thirdUi.owner, false);
-        const host = api.createHostAdapter({ flagCore: { getFlagValues: () => ({ temperature: 0.8 }), setFlagValue() {} } });
-        const hostLocks = new FakeLocks();
-        const hostStorage = new FakeStorage();
-        const hostUi = makeUi("host");
-        let finishAbort;
-        hostUi.abortActiveStream = () => new Promise(resolve => { finishAbort = resolve; });
-        const hostCoordinator = api.createCoordinator({ instanceId: "host", sessionId: "host-session", origin: pair.origin, locks: hostLocks, storage: hostStorage, chatUi: hostUi, hostAdapter: host });
-        await hostCoordinator.initialize({ recover: false });
-        assert.equal(hostCoordinator.getPeerHostAdapter({}), null);
-        host.invalidateSession();
-        await flush();
-        assert.equal(typeof finishAbort, "function");
-        assert.equal(hostUi.hostAvailable, false, "new mutations pause before abort settles");
-        const contender = api.createCoordinator({ instanceId: "host-contender", sessionId: "host-session", origin: pair.origin, locks: hostLocks, storage: hostStorage, chatUi: makeUi("contender") });
-        assert.equal((await contender.initialize({ recover: false })).reason, "lock-busy");
-        finishAbort();
-        await flush();
-        assert.equal(hostCoordinator.isOwner(), false);
-        assert.equal(hostCoordinator.getState().hostAvailable, false);
-        assert.equal(hostCoordinator.getPeerHostAdapter(), null);
-    }
+// Malformed recovery is discarded only by the explicit recovery action.
+test("malformed recovery records require explicit recovery", async t => {
+    const api = loadApi(t);
+    const storage = new FakeStorage();
+    const locks = new FakeLocks();
+    const ui = makeUi("malformed");
+    const coordinator = api.createCoordinator({ instanceId: "malformed", sessionId: "m", origin: "http://127.0.0.1:5240", locks, storage, chatUi: ui });
+    storage.setItem(coordinator.storageKey, "{broken");
+    assert.equal((await coordinator.initialize()).reason, "invalid-recovery");
+    assert.equal(coordinator.isOwner(), false);
+    assert.equal(storage.getItem(coordinator.storageKey), "{broken");
+    storage.failRemove = true;
+    assert.equal(await coordinator.recover({ clearInvalid: true }), false);
+    assert.equal(coordinator.isOwner(), false);
+    storage.failRemove = false;
+    assert.equal(await coordinator.recover({ clearInvalid: true }), true);
+    assert.equal(ui.resets, 1);
+    assert.deepEqual(ui.snapshotState().messages, []);
+    assert.equal(coordinator.isOwner(), true);
+    coordinator.dispose();
+});
 
-    // Disposing a receiver while asynchronous restore is pending must never
-    // allow the continuation to reactivate a Chat without its lock.
-    {
-        const pair = makePeerPair(api);
-        await preparePair(pair);
-        let finishRestore;
-        const snapshot = pair.uiA.captureSnapshot({});
-        pair.a.releaseOwnership();
-        await flush();
-        pair.uiB.restoreSnapshot = () => new Promise(resolve => { finishRestore = resolve; });
-        const activating = pair.b.acquireOwnership({ snapshot });
-        await flush();
-        assert.equal(typeof finishRestore, "function");
-        pair.b.dispose();
-        finishRestore(true);
-        assert.equal(await activating, false);
-        assert.equal(pair.uiB.owner, false);
-        assert.equal(pair.b.isOwner(), false);
-    }
+// Reinitializing an owner is idempotent and a remote abort rejection is
+// propagated as a negative acknowledgment to the requesting coordinator.
+test("owner initialization is idempotent and abort rejection is acknowledged", async t => {
+    const api = loadApi(t);
+    const locks = new FakeLocks();
+    const storage = new FakeStorage();
+    const owner = api.createCoordinator({ instanceId: "owner", sessionId: "owner-session", origin: "http://127.0.0.1:5240", locks, storage, chatUi: makeUi("owner") });
+    assert.equal((await owner.initialize({ recover: false })).ok, true);
+    const lockCalls = locks.calls.length;
+    const repeated = await owner.initialize({ recover: false });
+    assert.equal(repeated.ok, true);
+    assert.equal(repeated.reason, "already-owner");
+    assert.equal(owner.isOwner(), true);
+    assert.equal(locks.calls.length, lockCalls, "repeated initialize does not reacquire the owner lock");
+
+    const pair = makePeerPair(api);
+    await preparePair(pair);
+    pair.a.releaseOwnership();
+    await flush();
+    assert.equal((await pair.b.acquireOwnership({ activate: true })), true);
+    pair.uiB.abortActiveStream = () => Promise.reject(new Error("synthetic abort failure"));
+    await assert.rejects(pair.a.abortActiveStream(), /active Chat stream could not be stopped/);
+    const negativeAck = pair.sent.find(item => item.from === "B" && item.message.type === "abort-ack");
+    assert.equal(negativeAck?.message.payload?.ok, false, "remote abort failure is sent as a negative acknowledgment");
+});
 
-    // A host-loss quarantine retains the Web Lock while paused: a fresh
-    // document observes lock-busy (explicit recovery) however it races the
-    // failed popup's revocation write, and recovers after the popup releases.
-    {
-        const locks = new FakeLocks();
-        const storage = new FakeStorage();
-        const popupUi = makeUi("revoked-popup");
-        const popup = api.createCoordinator({ instanceId: "revoked-popup", sessionId: "revoke-session", origin: "http://127.0.0.1:5240", locks, storage, chatUi: popupUi });
-        assert.equal((await popup.initialize({ recover: false })).ok, true);
-        assert.equal(await popup.invalidateSession(), true, "host loss quarantines a host-revocation checkpoint");
-        assert.equal(popup.isOwner(), false, "quarantined popup is paused");
-        assert.equal(popup.readRecovery().record.phase, "host-revocation");
-
-        const mainUi = makeUi("revoked-main");
-        const main = api.createCoordinator({ instanceId: "revoked-main", sessionId: "revoke-session", origin: "http://127.0.0.1:5240", locks, storage, chatUi: mainUi });
-        const initialized = await main.initialize();
-        assert.equal(initialized.ok, false);
-        assert.equal(initialized.reason, "lock-busy", "fresh document stays an observer while the paused popup holds the lock");
-        assert.equal(main.isOwner(), false);
-        assert.equal(mainUi.restores, 0, "quarantined snapshot is not silently restored");
-
-        popup.dispose();
-        await flush();
-        assert.equal(await main.recover(), true, "explicit recovery restores the quarantined checkpoint after release");
-        assert.equal(mainUi.snapshotState().title, "revoked-popup title");
-    }
+// Third page contention and host-session revocation fail closed.
+test("third-page contention and host revocation fail closed", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api);
+    await pair.a.initialize({ recover: false });
+    const thirdUi = makeUi("third");
+    const third = api.createCoordinator({ instanceId: "third", sessionId: pair.sessionId, origin: pair.origin, locks: pair.locks, storage: pair.storage, chatUi: thirdUi });
+    assert.equal((await third.initialize({ recover: false })).reason, "lock-busy");
+    assert.equal(thirdUi.owner, false);
+    const host = api.createHostAdapter({ flagCore: { getFlagValues: () => ({ temperature: 0.8 }), setFlagValue() {} } });
+    const hostLocks = new FakeLocks();
+    const hostStorage = new FakeStorage();
+    const hostUi = makeUi("host");
+    let finishAbort;
+    hostUi.abortActiveStream = () => new Promise(resolve => { finishAbort = resolve; });
+    const hostCoordinator = api.createCoordinator({ instanceId: "host", sessionId: "host-session", origin: pair.origin, locks: hostLocks, storage: hostStorage, chatUi: hostUi, hostAdapter: host });
+    await hostCoordinator.initialize({ recover: false });
+    assert.equal(hostCoordinator.getPeerHostAdapter({}), null);
+    host.invalidateSession();
+    await flush();
+    assert.equal(typeof finishAbort, "function");
+    assert.equal(hostUi.hostAvailable, false, "new mutations pause before abort settles");
+    const contender = api.createCoordinator({ instanceId: "host-contender", sessionId: "host-session", origin: pair.origin, locks: hostLocks, storage: hostStorage, chatUi: makeUi("contender") });
+    assert.equal((await contender.initialize({ recover: false })).reason, "lock-busy");
+    finishAbort();
+    await flush();
+    assert.equal(hostCoordinator.isOwner(), false);
+    assert.equal(hostCoordinator.getState().hostAvailable, false);
+    assert.equal(hostCoordinator.getPeerHostAdapter(), null);
+});
+
+// Disposing a receiver while asynchronous restore is pending must never
+// allow the continuation to reactivate a Chat without its lock.
+test("disposing a receiver during restore prevents late activation", async t => {
+    const api = loadApi(t);
+    const pair = makePeerPair(api);
+    await preparePair(pair);
+    let finishRestore;
+    const snapshot = pair.uiA.captureSnapshot({});
+    pair.a.releaseOwnership();
+    await flush();
+    pair.uiB.restoreSnapshot = () => new Promise(resolve => { finishRestore = resolve; });
+    const activating = pair.b.acquireOwnership({ snapshot });
+    await flush();
+    assert.equal(typeof finishRestore, "function");
+    pair.b.dispose();
+    finishRestore(true);
+    assert.equal(await activating, false);
+    assert.equal(pair.uiB.owner, false);
+    assert.equal(pair.b.isOwner(), false);
+});
 
-    console.log("chat window coordinator tests passed");
-})().catch(error => {
-    console.error(error);
-    process.exitCode = 1;
+// A host-loss quarantine retains the Web Lock while paused: a fresh
+// document observes lock-busy (explicit recovery) however it races the
+// failed popup's revocation write, and recovers after the popup releases.
+test("host-loss quarantine retains its lock until explicit recovery", async t => {
+    const api = loadApi(t);
+    const locks = new FakeLocks();
+    const storage = new FakeStorage();
+    const popupUi = makeUi("revoked-popup");
+    const popup = api.createCoordinator({ instanceId: "revoked-popup", sessionId: "revoke-session", origin: "http://127.0.0.1:5240", locks, storage, chatUi: popupUi });
+    assert.equal((await popup.initialize({ recover: false })).ok, true);
+    assert.equal(await popup.invalidateSession(), true, "host loss quarantines a host-revocation checkpoint");
+    assert.equal(popup.isOwner(), false, "quarantined popup is paused");
+    assert.equal(popup.readRecovery().record.phase, "host-revocation");
+
+    const mainUi = makeUi("revoked-main");
+    const main = api.createCoordinator({ instanceId: "revoked-main", sessionId: "revoke-session", origin: "http://127.0.0.1:5240", locks, storage, chatUi: mainUi });
+    const initialized = await main.initialize();
+    assert.equal(initialized.ok, false);
+    assert.equal(initialized.reason, "lock-busy", "fresh document stays an observer while the paused popup holds the lock");
+    assert.equal(main.isOwner(), false);
+    assert.equal(mainUi.restores, 0, "quarantined snapshot is not silently restored");
+
+    popup.dispose();
+    await flush();
+    assert.equal(await main.recover(), true, "explicit recovery restores the quarantined checkpoint after release");
+    assert.equal(mainUi.snapshotState().title, "revoked-popup title");
 });
diff --git a/tests/frontend/flag_sync_smoke.cjs b/tests/frontend/flag_sync_smoke.cjs
index c067f189..8820399c 100644
--- a/tests/frontend/flag_sync_smoke.cjs
+++ b/tests/frontend/flag_sync_smoke.cjs
@@ -2126,2166 +2126,2219 @@ async function runScenario(browser, port, verify) {
         await page.waitForSelector("#flag-ctx_size", { state: "attached" });
         assert.deepEqual(lifecycleWarnings, [], "initial lifecycle rendering must have configured dependencies");
 
-        if (verify) {
+        if (typeof verify === "function") {
             await verify(page);
             assert.equal(pageErrors.length, 0, pageErrors.join("\n"));
             return;
         }
 
-        await page.setInputFiles("#preset-import", {
-            name: "smoke-alpha.json",
-            mimeType: "application/json",
-            buffer: Buffer.from(JSON.stringify({ flags: { temperature: 0.45 } })),
-        });
-        await page.waitForFunction(() => document.querySelector("#preset-status")?.textContent.includes("already exists"));
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => /already exists/i.test(toast.textContent)));
-        assert.equal(presetSaveBodies.length, 0, "a colliding launch preset import must not write");
-
-        await page.setInputFiles("#preset-import", {
-            name: "new-import.json",
-            mimeType: "application/json",
-            buffer: Buffer.from(JSON.stringify({ flags: { temperature: 0.45 } })),
-        });
-        await page.waitForFunction(() => document.querySelector("#preset-status")?.textContent.includes('Imported preset "new-import"'));
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => toast.textContent.includes('Imported preset "new-import"')));
-        assert.equal(presetSaveBodies.length, 1);
-        assert.equal(presetSaveBodies[0].name, "new-import");
-        assert.equal(presetSaveBodies[0].overwrite, false, "launch preset imports must ask the backend to reject races");
-
-        await selectSection(page, "quick-launch");
-
-        assert.equal(await page.locator("#chat-slider-temp").getAttribute("step"), "0.01");
-
-        const toastSecurity = await page.evaluate(() => {
-            showToast('<img src=x onerror="window.__toastXss = true">', "info");
-            const toast = document.querySelector("#toast-container .toast:last-child");
-            return {
-                text: toast?.textContent || "",
-                parsedImageCount: toast?.querySelectorAll("img").length || 0,
-                xssFlag: Boolean(window.__toastXss),
-            };
-        });
-        assert.match(toastSecurity.text, /<img src=x/);
-        assert.equal(toastSecurity.parsedImageCount, 0);
-        assert.equal(toastSecurity.xssFlag, false);
-        const toastUx = await page.evaluate(async () => {
-            const wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-            const container = document.querySelector("#toast-container");
-            container.querySelectorAll(".toast").forEach((toast) => toast.remove());
-            showToast("dismiss me", "warning", { duration: 0 });
-            const clickToast = container.querySelector(".toast");
-            clickToast.click();
-            await wait(260);
-            const dismissedOnClick = container.querySelectorAll(".toast").length === 0;
-            for (let i = 0; i < 7; i += 1) {
-                showToast(`toast ${i}`, "info", { duration: 0 });
-            }
-            await wait(260);
-            const cappedCount = container.querySelectorAll(".toast").length;
-            const lastToast = container.querySelector(".toast:last-child");
-            const closeButton = lastToast.querySelector(".toast-close");
-            closeButton.click();
-            await wait(260);
-            return {
-                role: container.getAttribute("role"),
-                live: container.getAttribute("aria-live"),
-                dismissedOnClick,
-                cappedCount,
-                dismissedOnClose: !Array.from(container.querySelectorAll(".toast")).some((toast) =>
-                    toast.textContent.includes("toast 6")
-                ),
-                closeLabel: closeButton.getAttribute("aria-label"),
-            };
-        });
-        assert.equal(toastUx.role, "status");
-        assert.equal(toastUx.live, "polite");
-        assert.equal(toastUx.dismissedOnClick, true);
-        assert.equal(toastUx.cappedCount, 5);
-        assert.equal(toastUx.dismissedOnClose, true);
-        assert.equal(toastUx.closeLabel, "Dismiss notification");
-        await page.evaluate(() => {
-            document.querySelectorAll("#toast-container .toast").forEach((toast) => toast.remove());
-        });
-
-        await page.waitForFunction(() => document.querySelector("#quick-launch-status")?.textContent.includes("Select a model"));
-        assert.equal(await page.locator("#btn-quick-launch").isDisabled(), true);
-        assert.equal(await page.locator("#btn-sidebar-launch").isDisabled(), true);
-
-        const sourceSecurity = await page.evaluate(() => {
-            const wrap = document.createElement("div");
-            wrap.className = "chat-message-content";
-            const bubble = document.createElement("div");
-            bubble.className = "chat-bubble";
-            wrap.appendChild(bubble);
-            document.body.appendChild(wrap);
-            window.LlamaGui.chatRendering.renderChatSources(bubble, [
-                { index: 1, title: "Unsafe", url: "javascript:alert(1)" },
-                { index: 2, title: "Safe", url: "https://example.com/path" },
-            ]);
-            const chips = Array.from(wrap.querySelectorAll(".chat-source-chip"));
-            return chips.map((chip) => ({
-                tag: chip.tagName,
-                href: chip.getAttribute("href"),
-                text: chip.textContent,
-            }));
-        });
-        assert.equal(sourceSecurity[0].tag, "SPAN");
-        assert.equal(sourceSecurity[0].href, null);
-        assert.equal(sourceSecurity[1].tag, "A");
-        assert.equal(sourceSecurity[1].href, "https://example.com/path");
-
-        await page.waitForFunction(() => (
-            document.querySelector("#server-url")?.textContent === "http://127.0.0.1:8080" &&
-            document.querySelector("#quick-server-url")?.textContent === "http://127.0.0.1:8080"
-        ));
-        const serverAddresses = await page.evaluate(() => ({
-            configure: {
-                url: document.querySelector("#server-url").getAttribute("href"),
-                webUi: document.querySelector("#server-webui").getAttribute("href"),
-            },
-            quickLaunch: {
-                url: document.querySelector("#quick-server-url").getAttribute("href"),
-                webUi: document.querySelector("#quick-server-webui").getAttribute("href"),
-            },
-        }));
-        assert.deepEqual(serverAddresses, {
-            configure: { url: "http://127.0.0.1:8080", webUi: "http://127.0.0.1:8080/" },
-            quickLaunch: { url: "http://127.0.0.1:8080", webUi: "http://127.0.0.1:8080/" },
-        });
-
-        const quickProfileOptions = await page.$$eval("#quick-profile-select option", (options) =>
-            options.map((option) => option.value)
-        );
-        assert.ok(!quickProfileOptions.includes("low-memory"));
-
-        await page.locator("#quick-starter-profiles > summary").click();
-        await page.selectOption("#quick-profile-select", "128k-mtp-auto");
-        await page.dispatchEvent("#quick-profile-select", "change");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().ctx_size === 128000);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().fit_ctx === "");
-        await page.waitForFunction(() => document.querySelector("#command-preview-text")?.textContent.includes("-c 128000"));
-        assert.match(await page.textContent("#quick-profile-summary"), /128K context/i);
-
-        await page.selectOption("#quick-context-preset", "custom");
-        await page.fill("#quick-context-custom", "12345");
-        await page.dispatchEvent("#quick-context-custom", "input");
-        await page.waitForFunction(() => document.querySelector("#flag-ctx_size")?.value === "12345");
-        await page.waitForFunction(() => document.querySelector("#command-preview-text")?.textContent.includes("-c 12345"));
-        assert.equal(await page.inputValue("#flag-ctx_size"), "12345");
-
-        await page.fill("#quick-context-custom", "1e5");
-        await page.dispatchEvent("#quick-context-custom", "input");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().ctx_size === 100000);
-        assert.equal(await page.inputValue("#flag-ctx_size"), "100000");
+        async function startChat() {
+            statusRunning = true;
+            activeProcessTool = "llama-server";
+            statusActiveRuntime = { tool: "llama-server", generation: 44 };
+            await page.evaluate(() => refreshRuntimeStatusPanels());
+            await selectSection(page, "chat");
+            await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("n_predict", -1));
+        }
 
-        await page.evaluate(() => {
-            const fitCtx = document.getElementById("quick-fit-ctx");
-            fitCtx.value = "1e5";
-            fitCtx.dispatchEvent(new Event("input", { bubbles: true }));
-        });
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().fit_ctx === 100000);
+        // Each selected callback runs with this invocation's fresh page and API
+        // fixtures. Related steps share state only within their named scenario.
+        const scenarios = {
+            async "preset imports and safe notifications"() {
+                await page.setInputFiles("#preset-import", {
+                    name: "smoke-alpha.json",
+                    mimeType: "application/json",
+                    buffer: Buffer.from(JSON.stringify({ flags: { temperature: 0.45 } })),
+                });
+                await page.waitForFunction(() => document.querySelector("#preset-status")?.textContent.includes("already exists"));
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => /already exists/i.test(toast.textContent)));
+                assert.equal(presetSaveBodies.length, 0, "a colliding launch preset import must not write");
+
+                await page.setInputFiles("#preset-import", {
+                    name: "new-import.json",
+                    mimeType: "application/json",
+                    buffer: Buffer.from(JSON.stringify({ flags: { temperature: 0.45 } })),
+                });
+                await page.waitForFunction(() => document.querySelector("#preset-status")?.textContent.includes('Imported preset "new-import"'));
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => toast.textContent.includes('Imported preset "new-import"')));
+                assert.equal(presetSaveBodies.length, 1);
+                assert.equal(presetSaveBodies[0].name, "new-import");
+                assert.equal(presetSaveBodies[0].overwrite, false, "launch preset imports must ask the backend to reject races");
 
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setMultipleFlagValues({
-                chat_template: "phi4",
-                chat_template_custom: undefined,
-            });
-            window.LlamaGui.quickLaunchUi.refresh();
-        });
-        await page.waitForFunction(() => document.querySelector("#quick-template-pack")?.value === "phi4");
-        assert.match(
-            await page.locator("#quick-template-pack option:checked").textContent(),
-            /phi4.*llama\.cpp built-in/i
-        );
+                await selectSection(page, "quick-launch");
 
-        await selectSection(page, "configure");
-        await verifyConfigurePresentation(page);
-        await verifyNgramSimple(page);
-        await verifyReasoningPreserve(page);
-
-        // Typed one key at a time on purpose. Every keystroke writes flag state,
-        // which loops back into restoreFlagInputs(); when that rewrote el.value
-        // unconditionally, type="number" reported the partial "0." as "" and the
-        // decimal point was wiped as fast as it was typed. page.fill() sets the
-        // value in one shot and would not have caught it.
-        await page.fill("#config-search", "temperature");
-        await page.waitForSelector("#flag-temperature", { state: "visible" });
-        await page.click("#flag-temperature");
-        await page.evaluate(() => { document.getElementById("flag-temperature").value = ""; });
-        await page.type("#flag-temperature", "0.85");
-        assert.equal(
-            await page.inputValue("#flag-temperature"),
-            "0.85",
-            "typing a decimal into a float flag must survive the state round-trip"
-        );
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.85);
-
-        // An unrelated flag edit must update mirrored values without replacing
-        // the structural option nodes in Quick Launch or Model Switcher.
-        const structuralOptionsStayedMounted = await page.evaluate(async () => {
-            const quickModelOption = document.querySelector("#quick-model-select option");
-            const quickSamplerOption = document.querySelector("#quick-sampler-select option");
-            const modelSwitcherOption = document.querySelector("#model-switch-select-a option");
-            window.LlamaGui.flagCore.setFlagValue("temperature", 0.84);
-            await new Promise(resolve => setTimeout(resolve, 0));
-            return {
-                quickModel: quickModelOption === document.querySelector("#quick-model-select option"),
-                quickSampler: quickSamplerOption === document.querySelector("#quick-sampler-select option"),
-                modelSwitcher: modelSwitcherOption === document.querySelector("#model-switch-select-a option"),
-            };
-        });
-        assert.deepEqual(structuralOptionsStayedMounted, {
-            quickModel: true,
-            quickSampler: true,
-            modelSwitcher: true,
-        });
+                assert.equal(await page.locator("#chat-slider-temp").getAttribute("step"), "0.01");
 
-        // Trailing zeros are the sharper case: "0.0" parses to 0, so a plain
-        // value-equality guard would still rewrite the field to "0" mid-typing.
-        await page.evaluate(() => { document.getElementById("flag-temperature").value = ""; });
-        await page.type("#flag-temperature", "0.05");
-        assert.equal(await page.inputValue("#flag-temperature"), "0.05");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.05);
+                const toastSecurity = await page.evaluate(() => {
+                    showToast('<img src=x onerror="window.__toastXss = true">', "info");
+                    const toast = document.querySelector("#toast-container .toast:last-child");
+                    return {
+                        text: toast?.textContent || "",
+                        parsedImageCount: toast?.querySelectorAll("img").length || 0,
+                        xssFlag: Boolean(window.__toastXss),
+                    };
+                });
+                assert.match(toastSecurity.text, /<img src=x/);
+                assert.equal(toastSecurity.parsedImageCount, 0);
+                assert.equal(toastSecurity.xssFlag, false);
+                const toastUx = await page.evaluate(async () => {
+                    const wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+                    const container = document.querySelector("#toast-container");
+                    container.querySelectorAll(".toast").forEach((toast) => toast.remove());
+                    showToast("dismiss me", "warning", { duration: 0 });
+                    const clickToast = container.querySelector(".toast");
+                    clickToast.click();
+                    await wait(260);
+                    const dismissedOnClick = container.querySelectorAll(".toast").length === 0;
+                    for (let i = 0; i < 7; i += 1) {
+                        showToast(`toast ${i}`, "info", { duration: 0 });
+                    }
+                    await wait(260);
+                    const cappedCount = container.querySelectorAll(".toast").length;
+                    const lastToast = container.querySelector(".toast:last-child");
+                    const closeButton = lastToast.querySelector(".toast-close");
+                    closeButton.click();
+                    await wait(260);
+                    return {
+                        role: container.getAttribute("role"),
+                        live: container.getAttribute("aria-live"),
+                        dismissedOnClick,
+                        cappedCount,
+                        dismissedOnClose: !Array.from(container.querySelectorAll(".toast")).some((toast) =>
+                            toast.textContent.includes("toast 6")
+                        ),
+                        closeLabel: closeButton.getAttribute("aria-label"),
+                    };
+                });
+                assert.equal(toastUx.role, "status");
+                assert.equal(toastUx.live, "polite");
+                assert.equal(toastUx.dismissedOnClick, true);
+                assert.equal(toastUx.cappedCount, 5);
+                assert.equal(toastUx.dismissedOnClose, true);
+                assert.equal(toastUx.closeLabel, "Dismiss notification");
+                await page.evaluate(() => {
+                    document.querySelectorAll("#toast-container .toast").forEach((toast) => toast.remove());
+                });
 
-        // A cleared field must stay cleared rather than snapping back to state.
-        await page.fill("#flag-temperature", "");
-        assert.equal(await page.inputValue("#flag-temperature"), "");
-        await page.fill("#config-search", "");
-        await page.waitForSelector("#flag-ctx_size", { state: "visible" });
+                await page.waitForFunction(() => document.querySelector("#quick-launch-status")?.textContent.includes("Select a model"));
+                assert.equal(await page.locator("#btn-quick-launch").isDisabled(), true);
+                assert.equal(await page.locator("#btn-sidebar-launch").isDisabled(), true);
+
+                const sourceSecurity = await page.evaluate(() => {
+                    const wrap = document.createElement("div");
+                    wrap.className = "chat-message-content";
+                    const bubble = document.createElement("div");
+                    bubble.className = "chat-bubble";
+                    wrap.appendChild(bubble);
+                    document.body.appendChild(wrap);
+                    window.LlamaGui.chatRendering.renderChatSources(bubble, [
+                        { index: 1, title: "Unsafe", url: "javascript:alert(1)" },
+                        { index: 2, title: "Safe", url: "https://example.com/path" },
+                    ]);
+                    const chips = Array.from(wrap.querySelectorAll(".chat-source-chip"));
+                    return chips.map((chip) => ({
+                        tag: chip.tagName,
+                        href: chip.getAttribute("href"),
+                        text: chip.textContent,
+                    }));
+                });
+                assert.equal(sourceSecurity[0].tag, "SPAN");
+                assert.equal(sourceSecurity[0].href, null);
+                assert.equal(sourceSecurity[1].tag, "A");
+                assert.equal(sourceSecurity[1].href, "https://example.com/path");
+
+                await page.waitForFunction(() => (
+                    document.querySelector("#server-url")?.textContent === "http://127.0.0.1:8080" &&
+                    document.querySelector("#quick-server-url")?.textContent === "http://127.0.0.1:8080"
+                ));
+                const serverAddresses = await page.evaluate(() => ({
+                    configure: {
+                        url: document.querySelector("#server-url").getAttribute("href"),
+                        webUi: document.querySelector("#server-webui").getAttribute("href"),
+                    },
+                    quickLaunch: {
+                        url: document.querySelector("#quick-server-url").getAttribute("href"),
+                        webUi: document.querySelector("#quick-server-webui").getAttribute("href"),
+                    },
+                }));
+                assert.deepEqual(serverAddresses, {
+                    configure: { url: "http://127.0.0.1:8080", webUi: "http://127.0.0.1:8080/" },
+                    quickLaunch: { url: "http://127.0.0.1:8080", webUi: "http://127.0.0.1:8080/" },
+                });
+            },
+            async "mirrored launch controls and Configure search"() {
+                await selectSection(page, "quick-launch");
+                const quickProfileOptions = await page.$$eval("#quick-profile-select option", (options) =>
+                    options.map((option) => option.value)
+                );
+                assert.ok(!quickProfileOptions.includes("low-memory"));
+
+                await page.locator("#quick-starter-profiles > summary").click();
+                await page.selectOption("#quick-profile-select", "128k-mtp-auto");
+                await page.dispatchEvent("#quick-profile-select", "change");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().ctx_size === 128000);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().fit_ctx === "");
+                await page.waitForFunction(() => document.querySelector("#command-preview-text")?.textContent.includes("-c 128000"));
+                assert.match(await page.textContent("#quick-profile-summary"), /128K context/i);
+
+                await page.selectOption("#quick-context-preset", "custom");
+                await page.fill("#quick-context-custom", "12345");
+                await page.dispatchEvent("#quick-context-custom", "input");
+                await page.waitForFunction(() => document.querySelector("#flag-ctx_size")?.value === "12345");
+                await page.waitForFunction(() => document.querySelector("#command-preview-text")?.textContent.includes("-c 12345"));
+                assert.equal(await page.inputValue("#flag-ctx_size"), "12345");
+
+                await page.fill("#quick-context-custom", "1e5");
+                await page.dispatchEvent("#quick-context-custom", "input");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().ctx_size === 100000);
+                assert.equal(await page.inputValue("#flag-ctx_size"), "100000");
+
+                await page.evaluate(() => {
+                    const fitCtx = document.getElementById("quick-fit-ctx");
+                    fitCtx.value = "1e5";
+                    fitCtx.dispatchEvent(new Event("input", { bubbles: true }));
+                });
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().fit_ctx === 100000);
 
-        await page.evaluate(() => {
-            const ctxSize = document.getElementById("flag-ctx_size");
-            ctxSize.value = "1e5";
-            ctxSize.dispatchEvent(new Event("input", { bubbles: true }));
-        });
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().ctx_size === 100000);
-        assert.match(await page.textContent("#command-preview-text"), /-c 100000/);
-
-        await page.fill("#config-search", "per-slot context");
-        await page.waitForSelector("#flag-kv_unified_per_slot", { state: "visible" });
-        assert.equal(await page.locator("#flag-kv_unified_per_slot").getAttribute("min"), "1");
-        await page.fill("#flag-kv_unified_per_slot", "16000");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().kv_unified_per_slot === 16000);
-        assert.match(await page.textContent("#command-preview-text"), /--kv-unified-per-slot 16000/);
-        assert.match(await page.textContent("#command-preview-text"), /-c 100000/);
-
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("kv_unified", "disabled"));
-        await page.waitForFunction(() => document.querySelector("#flag-kv_unified_per_slot")?.disabled === true);
-        assert.doesNotMatch(await page.textContent("#command-preview-text"), /--kv-unified-per-slot/);
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("kv_unified", "enabled"));
-        await page.waitForFunction(() => document.querySelector("#flag-kv_unified_per_slot")?.disabled === false);
-        assert.match(await page.textContent("#command-preview-text"), /--kv-unified-per-slot 16000/);
-
-        await page.fill("#flag-kv_unified_per_slot", "");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().kv_unified_per_slot === undefined);
-        await page.fill("#config-search", "");
-        assert.equal(await page.inputValue("#flag-chat_template"), "phi4");
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setMultipleFlagValues({
-                ctx_size: 12345,
-                fit_ctx: 12345,
-                chat_template: undefined,
-            });
-            window.LlamaGui.quickLaunchUi.afterApply(window.LlamaGui.flagCore.getFlagValues());
-        });
-        await page.fill("#config-search", "sampling");
-        await page.waitForFunction(() => {
-            const headers = Array.from(document.querySelectorAll(
-                '.accordion[data-category-id="sampling"] .flag-submenu-header'
-            ));
-            return headers.length > 0 && headers.every((header) => header.classList.contains("open"));
-        });
-        await page.selectOption("#tool-select", "llama-cli");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getCurrentTool() === "llama-cli");
-        await page.waitForFunction(() => {
-            const headers = Array.from(document.querySelectorAll(
-                '.accordion[data-category-id="sampling"] .flag-submenu-header'
-            ));
-            return headers.length > 0 && headers.every((header) => header.classList.contains("open"));
-        });
-        await page.click("#btn-clear-search");
-        await page.waitForFunction(() => document.querySelector("#config-search")?.value === "");
-        assert.equal(
-            await page.locator(".flag-submenu-header.open").count(),
-            0,
-            "clearing search after a tool change must not restore submenu state from the previous tool"
-        );
-        await page.selectOption("#tool-select", "llama-server");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getCurrentTool() === "llama-server");
-
-        await page.fill("#config-search", "default reasoning effort");
-        await page.waitForSelector("#flag-chat_template_reasoning_effort", { state: "visible" });
-        assert.deepEqual(
-            await page.locator("#flag-chat_template_reasoning_effort option").evaluateAll((options) => (
-                options.map((option) => option.value)
-            )),
-            ["auto", "low", "medium", "high", "xhigh"]
-        );
-        assert.match(
-            await page.textContent('.flag-row[data-flag-id="chat_template_reasoning_effort"] .flag-desc'),
-            /server-wide/i
-        );
-        await page.selectOption("#flag-chat_template_reasoning_effort", "xhigh");
-        await page.waitForFunction(() => (
-            window.LlamaGui.flagCore.getFlagValues().chat_template_reasoning_effort === "xhigh"
-        ));
-        // Deterministic native path regardless of when /api/status landed.
-        await page.evaluate(() => window.LlamaGui.flagCore.setBinaryTag("b10502"));
-        let reasoningArgs = await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().args.flat());
-        assert.ok(reasoningArgs.includes("--reasoning-effort"));
-        assert.ok(reasoningArgs.includes("xhigh"));
-        await page.selectOption("#flag-chat_template_reasoning_effort", "auto");
-        reasoningArgs = await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().args.flat());
-        assert.ok(!reasoningArgs.includes("--reasoning-effort"));
-        assert.ok(!reasoningArgs.includes("--chat-template-kwargs"));
-
-        await page.fill("#config-search", "gpu layers");
-        await page.waitForSelector("#flag-gpu_layers", { state: "visible" });
-        await page.fill("#flag-gpu_layers", "7");
-        await page.dispatchEvent("#flag-gpu_layers", "input");
-        await page.waitForFunction(() => document.querySelector("#quick-gpu-mode")?.value === "custom");
-        await page.waitForFunction(() => document.querySelector("#quick-gpu-custom")?.value === "7");
-        assert.match(await page.textContent("#command-preview-text"), /(?:-ngl|--gpu-layers) 7/);
-
-        await page.fill("#flag-gpu_layers", "abc");
-        await page.dispatchEvent("#flag-gpu_layers", "input");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().gpu_layers === undefined);
-        await page.waitForFunction(() => !document.querySelector("#command-preview-text")?.textContent.includes("-ngl 7"));
-        assert.ok(!(await page.textContent("#command-preview-text")).includes("-ngl abc"));
-
-        await page.fill("#flag-gpu_layers", " 9 ");
-        await page.dispatchEvent("#flag-gpu_layers", "input");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().gpu_layers === "9");
-        assert.match(await page.textContent("#command-preview-text"), /(?:-ngl|--gpu-layers) 9/);
-
-        await page.fill("#config-search", "expert");
-        await page.waitForSelector("#flag-override_tensor", { state: "visible" });
-        await page.waitForFunction(() => document.querySelector(".override-tensor-buffer-select")?.value === "CUDA0");
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setMultipleFlagValues({ cpu_moe: true, n_cpu_moe: 2 });
-        });
-        await page.click(".override-tensor-helper .btn");
-        await page.waitForFunction(() => (
-            window.LlamaGui.flagCore.getFlagValues().override_tensor === "blk.*.ffn_.*_exps.weight=CUDA0"
-        ));
-        await page.waitForFunction(() => {
-            const values = window.LlamaGui.flagCore.getFlagValues();
-            return values.cpu_moe === undefined && values.n_cpu_moe === undefined;
-        });
-        assert.match(
-            await page.textContent("#command-preview-text"),
-            /-ot blk\.\*\.ffn_\.\*_exps\.weight=CUDA0/
-        );
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setMultipleFlagValues({
+                        chat_template: "phi4",
+                        chat_template_custom: undefined,
+                    });
+                    window.LlamaGui.quickLaunchUi.refresh();
+                });
+                await page.waitForFunction(() => document.querySelector("#quick-template-pack")?.value === "phi4");
+                assert.match(
+                    await page.locator("#quick-template-pack option:checked").textContent(),
+                    /phi4.*llama\.cpp built-in/i
+                );
+
+                await selectSection(page, "configure");
+                await verifyConfigurePresentation(page);
+                await verifyNgramSimple(page);
+                await verifyReasoningPreserve(page);
+
+                // Typed one key at a time on purpose. Every keystroke writes flag state,
+                // which loops back into restoreFlagInputs(); when that rewrote el.value
+                // unconditionally, type="number" reported the partial "0." as "" and the
+                // decimal point was wiped as fast as it was typed. page.fill() sets the
+                // value in one shot and would not have caught it.
+                await page.fill("#config-search", "temperature");
+                await page.waitForSelector("#flag-temperature", { state: "visible" });
+                await page.click("#flag-temperature");
+                await page.evaluate(() => { document.getElementById("flag-temperature").value = ""; });
+                await page.type("#flag-temperature", "0.85");
+                assert.equal(
+                    await page.inputValue("#flag-temperature"),
+                    "0.85",
+                    "typing a decimal into a float flag must survive the state round-trip"
+                );
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.85);
+
+                // An unrelated flag edit must update mirrored values without replacing
+                // the structural option nodes in Quick Launch or Model Switcher.
+                const structuralOptionsStayedMounted = await page.evaluate(async () => {
+                    const quickModelOption = document.querySelector("#quick-model-select option");
+                    const quickSamplerOption = document.querySelector("#quick-sampler-select option");
+                    const modelSwitcherOption = document.querySelector("#model-switch-select-a option");
+                    window.LlamaGui.flagCore.setFlagValue("temperature", 0.84);
+                    await new Promise(resolve => setTimeout(resolve, 0));
+                    return {
+                        quickModel: quickModelOption === document.querySelector("#quick-model-select option"),
+                        quickSampler: quickSamplerOption === document.querySelector("#quick-sampler-select option"),
+                        modelSwitcher: modelSwitcherOption === document.querySelector("#model-switch-select-a option"),
+                    };
+                });
+                assert.deepEqual(structuralOptionsStayedMounted, {
+                    quickModel: true,
+                    quickSampler: true,
+                    modelSwitcher: true,
+                });
 
-        await page.fill("#config-search", "metrics");
-        await page.waitForSelector("#flag-metrics", { state: "visible" });
-        await page.click("#flag-metrics");
-        await page.waitForFunction(() => document.querySelector("#quick-metrics-toggle")?.checked === false);
-        await page.click("#flag-metrics");
-        await page.waitForFunction(() => document.querySelector("#quick-metrics-toggle")?.checked === true);
-
-        await page.fill("#config-search", "api key");
-        await page.waitForSelector("#flag-api_key", { state: "visible" });
-        const passwordManagerHints = await page.evaluate(() => {
-            const fieldState = (id) => {
-                const input = document.getElementById(id);
-                return {
-                    type: input?.type || "",
-                    autocomplete: input?.autocomplete || "",
-                    maskMode: input?.dataset.sensitiveMaskMode || "",
-                    masked: Boolean(input?.classList.contains("sensitive-input-masked")),
-                    textSecurity: input ? getComputedStyle(input).webkitTextSecurity : "",
-                };
-            };
-            return {
-                cssMasking: Boolean(window.CSS?.supports?.("-webkit-text-security", "disc")),
-                searchAutocompletes: Array.from(document.querySelectorAll(".ss-search"))
-                    .map((input) => input.autocomplete),
-                fields: ["flag-api_key", "quick-api-key", "hf-token-input"].map(fieldState),
-            };
-        });
-        assert.ok(passwordManagerHints.searchAutocompletes.length > 0);
-        assert.ok(passwordManagerHints.searchAutocompletes.every((value) => value === "off"));
-        for (const field of passwordManagerHints.fields) {
-            assert.equal(field.autocomplete, "off");
-            assert.equal(field.maskMode, passwordManagerHints.cssMasking ? "css" : "password");
-            assert.equal(field.type, passwordManagerHints.cssMasking ? "text" : "password");
-            assert.equal(field.masked, passwordManagerHints.cssMasking);
-            if (passwordManagerHints.cssMasking) assert.equal(field.textSecurity, "disc");
-        }
-        await page.locator("#flag-api_key + .sensitive-input-actions button", { hasText: "Generate" }).click();
-        assert.match(await page.inputValue("#flag-api_key"), /^[A-Za-z0-9_-]{43}$/);
-        const showApiKey = page.locator("#flag-api_key + .sensitive-input-actions button", { hasText: "Show" });
-        await showApiKey.click();
-        assert.equal(await page.locator("#flag-api_key").getAttribute("type"), "text");
-        assert.equal(await page.locator("#flag-api_key").evaluate((input) => input.classList.contains("sensitive-input-masked")), false);
-        await page.locator("#flag-api_key + .sensitive-input-actions button", { hasText: "Hide" }).click();
-        assert.equal(
-            await page.locator("#flag-api_key").getAttribute("type"),
-            passwordManagerHints.cssMasking ? "text" : "password"
-        );
-        assert.equal(
-            await page.locator("#flag-api_key").evaluate((input) => input.classList.contains("sensitive-input-masked")),
-            passwordManagerHints.cssMasking
-        );
-        await page.fill("#flag-api_key", "first-secret, second-secret");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().api_key === "first-secret, second-secret");
-        const protectedPreview = await page.textContent("#command-preview-text");
-        assert.match(protectedPreview, /--api-key <redacted>/);
-        assert.ok(!protectedPreview.includes("first-secret"));
-        await selectSection(page, "quick-launch");
-        assert.equal(await page.inputValue("#quick-api-key"), "first-secret, second-secret");
-
-        statsMetrics = {
-            promptTokens: 40,
-            promptSpeed: 4,
-            genTokens: 20,
-            genSpeed: 2,
-            processing: 1,
-        };
-        statsSlots = [{
-            id: 1,
-            id_task: 1,
-            n_ctx: 1000,
-            is_processing: true,
-            n_prompt_tokens: 60,
-            n_prompt_tokens_processed: 40,
-            next_token: { n_decoded: 20 },
-        }];
-        await page.evaluate(async () => {
-            // Settle Quick Launch's status refresh before manual sampling: the
-            // stopped-server fixture would otherwise clear the stats target.
-            await refreshRuntimeStatusPanels();
-            inferencePolling.start({ generation: 1 }, { operation: "manual-launch" });
-            await inferencePolling._test.poll();
-        });
-        assert.equal(await page.textContent("#stats-prompt-tokens"), "40",
-            "fresh launches must retain tokens processed before the first stats poll");
-        assert.equal(await page.textContent("#stats-gen-tokens"), "20");
-        assert.equal(await page.textContent("#stats-context"), "60",
-            "Session tokens must sum prompt plus generated since the baseline");
-        assert.ok((await page.textContent("#stats-bar")).includes("Session tokens"),
-            "the fixed bar labels cumulative tokens as Session tokens, not Context");
-
-        statsMetrics = {
-            promptTokens: 1000,
-            promptSeconds: 2,
-            promptSpeed: 11,
-            genTokens: 500,
-            genSeconds: 10,
-            genSpeed: 7,
-            processing: 0,
-        };
-        statsSlots = idleStatsSlots;
-        await page.evaluate(async () => {
-            inferencePolling.start({ generation: 2 }, { operation: "restore" });
-            await inferencePolling._test.poll();
-        });
-        assert.equal(await page.textContent("#stats-prompt-tokens"), "0",
-            "pre-poll chat resets must not expose lifetime prompt counters after reconnect");
-        assert.equal(await page.textContent("#stats-gen-tokens"), "0");
-        assert.equal(await page.textContent("#stats-context"), "0",
-            "a restored target baselines on its first sample, so session tokens start at zero");
-        assert.equal(await page.textContent("#stats-kv-usage"), "13%",
-            "Context (most-filled slot) must use n_prompt_tokens / n_ctx");
-
-        statsMetrics.processing = 1;
-        statsSlots = [{
-            id: 1, id_task: 76, n_ctx: 1000, is_processing: true,
-            n_prompt_tokens: 700, n_prompt_tokens_cache: 600,
-            n_prompt_tokens_processed: 100, next_token: [{ n_decoded: 0 }],
-        }];
-        await page.evaluate(() => inferencePolling._test.poll());
-        await wait(1100);
-        statsSlots[0].n_prompt_tokens_processed = 400;
-        statsSlots[0].n_prompt_tokens = 1000;
-        await page.evaluate(() => inferencePolling._test.poll());
-        const livePromptSpeed = await page.textContent("#stats-prompt-speed");
-        assert.ok(Number(livePromptSpeed) > 0, "prompt speed updates before completed counters advance");
-        assert.equal(await page.textContent("#monitor-inference-prompt-speed"), `${livePromptSpeed} tok/s`);
-        assert.equal(await page.textContent("#monitor-inference-prompt-speed-label"), "Live prompt speed");
-        assert.equal(await page.textContent("#stats-prompt-speed-label"), "tok/s prompt live");
-        assert.equal(await page.textContent("#stats-prompt-tokens"), "0");
-        await page.evaluate(() => inferencePolling._test.poll());
-        assert.equal(await page.textContent("#stats-prompt-speed"), livePromptSpeed,
-            "an unchanged prompt batch retains the measured average");
-        assert.equal(await page.textContent("#monitor-inference-prompt-speed"), `${livePromptSpeed} tok/s`);
-        statsSlots[0].next_token[0].n_decoded = 1;
-        statsMetrics.promptTokens = 1400;
-        statsMetrics.promptSeconds = 4;
-        await page.evaluate(() => inferencePolling._test.poll());
-        assert.equal(await page.textContent("#stats-prompt-speed"), "200.0");
-        assert.equal(await page.textContent("#monitor-inference-prompt-speed"), "200.0 tok/s");
-        assert.equal(await page.textContent("#monitor-inference-prompt-speed-label"), "Avg prompt speed");
-        assert.equal(await page.textContent("#stats-prompt-speed-label"), "tok/s prompt avg");
-
-        statsMetrics.processing = 1;
-        statsSlots = [{
-            id: 1,
-            id_task: 77,
-            n_ctx: 1000,
-            is_processing: true,
-            n_prompt_tokens: 110,
-            n_prompt_tokens_processed: 100,
-            next_token: { n_decoded: 10 },
-        }];
-        await page.evaluate(() => inferencePolling._test.poll());
-        await wait(1100);
-        statsSlots[0].n_prompt_tokens = 140;
-        statsSlots[0].next_token.n_decoded = 40;
-        await page.evaluate(() => inferencePolling._test.poll());
-        const liveGenSpeed = await page.textContent("#stats-gen-speed");
-        assert.ok(Number(liveGenSpeed) > 0, "live speed updates before completion counters advance");
-        assert.equal(await page.textContent("#monitor-inference-gen-speed"), `${liveGenSpeed} tok/s`,
-            "the Monitor card shares the fixed bar's live rate");
-        assert.equal(await page.textContent("#monitor-inference-gen-speed-label"), "Live generation speed");
-        assert.equal(await page.textContent("#stats-gen-speed-label"), "tok/s gen live");
-        assert.equal(await page.textContent("#stats-context"), "400",
-            "session tokens stay baseline-relative while slot context moves independently");
-        statsMetrics.genTokens = 530;
-        statsMetrics.genSeconds = 12;
-        statsMetrics.processing = 0;
-        statsSlots = idleStatsSlots;
-        await page.evaluate(() => inferencePolling._test.poll());
-        assert.equal(await page.textContent("#stats-gen-speed"), "15.0", "idle preserves the average");
-        assert.equal(await page.textContent("#monitor-inference-gen-speed-label"), "Avg generation speed");
-        assert.equal(await page.textContent("#stats-gen-speed-label"), "tok/s gen avg");
-        delete statsMetrics.genSeconds;
-        await page.evaluate(() => inferencePolling._test.poll());
-        assert.equal(await page.textContent("#stats-gen-speed"), "--", "missing time does not use a gauge");
-        assert.equal(await page.textContent("#monitor-inference-gen-speed"), "--");
-
-        await page.evaluate(() => inferencePolling.stop());
-        assert.equal(metricsHeaders.at(-1).authorization, "Bearer first-secret");
-        assert.equal(slotsHeaders.at(-1).authorization, "Bearer first-secret");
-
-        // A failed Stop leaves the same llama-server alive. Recovery must pass
-        // its runtime through inferencePolling.start so inference polling resumes.
-        statusRunning = true;
-        activeProcessTool = "llama-server";
-        statusActiveRuntime = {
-            tool: "llama-server", generation: 42, model: "models/smoke-model.gguf", backend: "cpu", version: "b9999",
-            launch_settings: await page.evaluate(() => window.LlamaGui.flagCore.captureLaunchSettings()),
-        };
-        stopShouldFail = true;
-        await page.evaluate(async (activeRuntime) => {
-            await processLifecycle.restore({
-                running: true,
-                active_process_tool: "llama-server",
-                active_runtime: activeRuntime,
-            }, { startOutput: () => {}, postReady: () => {} });
-            await stopLlama();
-        }, statusActiveRuntime);
-        assert.equal(await page.evaluate(() => inferenceStats.getTargetKey()), "gui:42");
-        assert.equal(
-            await page.locator("#stats-bar").evaluate((el) => el.classList.contains("hidden")),
-            false,
-            "failed Stop recovery must keep the fixed stats bar active",
-        );
-        await page.evaluate(() => processOutput.stop());
-        await verifyConfigureComparison(page);
-        stopShouldFail = false;
-        statusRunning = false;
-        activeProcessTool = "";
-        statusActiveRuntime = null;
-        await page.evaluate(() => inferencePolling.stop());
-        await page.evaluate(() => refreshRuntimeStatusPanels());
-        assert.equal(await page.locator("#config-changes-only").isDisabled(), true, "stopping clears the comparison baseline");
-
-        // A rejected metrics body must not discard a successful slots response.
-        const independentSourceSnapshot = await page.evaluate(async () => {
-            const originalFetch = window.fetch;
-            window.fetch = async (url) => {
-                const textUrl = String(url);
-                if (textUrl.includes("/api/llama/metrics?")) {
-                    return { ok: true, text: async () => { throw new Error("metrics body failed"); } };
-                }
-                if (textUrl.includes("/api/llama/slots?")) {
+                // Trailing zeros are the sharper case: "0.0" parses to 0, so a plain
+                // value-equality guard would still rewrite the field to "0" mid-typing.
+                await page.evaluate(() => { document.getElementById("flag-temperature").value = ""; });
+                await page.type("#flag-temperature", "0.05");
+                assert.equal(await page.inputValue("#flag-temperature"), "0.05");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.05);
+
+                // A cleared field must stay cleared rather than snapping back to state.
+                await page.fill("#flag-temperature", "");
+                assert.equal(await page.inputValue("#flag-temperature"), "");
+                await page.fill("#config-search", "");
+                await page.waitForSelector("#flag-ctx_size", { state: "visible" });
+
+                await page.evaluate(() => {
+                    const ctxSize = document.getElementById("flag-ctx_size");
+                    ctxSize.value = "1e5";
+                    ctxSize.dispatchEvent(new Event("input", { bubbles: true }));
+                });
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().ctx_size === 100000);
+                assert.match(await page.textContent("#command-preview-text"), /-c 100000/);
+
+                await page.fill("#config-search", "per-slot context");
+                await page.waitForSelector("#flag-kv_unified_per_slot", { state: "visible" });
+                assert.equal(await page.locator("#flag-kv_unified_per_slot").getAttribute("min"), "1");
+                await page.fill("#flag-kv_unified_per_slot", "16000");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().kv_unified_per_slot === 16000);
+                assert.match(await page.textContent("#command-preview-text"), /--kv-unified-per-slot 16000/);
+                assert.match(await page.textContent("#command-preview-text"), /-c 100000/);
+
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("kv_unified", "disabled"));
+                await page.waitForFunction(() => document.querySelector("#flag-kv_unified_per_slot")?.disabled === true);
+                assert.doesNotMatch(await page.textContent("#command-preview-text"), /--kv-unified-per-slot/);
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("kv_unified", "enabled"));
+                await page.waitForFunction(() => document.querySelector("#flag-kv_unified_per_slot")?.disabled === false);
+                assert.match(await page.textContent("#command-preview-text"), /--kv-unified-per-slot 16000/);
+
+                await page.fill("#flag-kv_unified_per_slot", "");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().kv_unified_per_slot === undefined);
+                await page.fill("#config-search", "");
+                assert.equal(await page.inputValue("#flag-chat_template"), "phi4");
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setMultipleFlagValues({
+                        ctx_size: 12345,
+                        fit_ctx: 12345,
+                        chat_template: undefined,
+                    });
+                    window.LlamaGui.quickLaunchUi.afterApply(window.LlamaGui.flagCore.getFlagValues());
+                });
+                await page.fill("#config-search", "sampling");
+                await page.waitForFunction(() => {
+                    const headers = Array.from(document.querySelectorAll(
+                        '.accordion[data-category-id="sampling"] .flag-submenu-header'
+                    ));
+                    return headers.length > 0 && headers.every((header) => header.classList.contains("open"));
+                });
+                await page.selectOption("#tool-select", "llama-cli");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getCurrentTool() === "llama-cli");
+                await page.waitForFunction(() => {
+                    const headers = Array.from(document.querySelectorAll(
+                        '.accordion[data-category-id="sampling"] .flag-submenu-header'
+                    ));
+                    return headers.length > 0 && headers.every((header) => header.classList.contains("open"));
+                });
+                await page.click("#btn-clear-search");
+                await page.waitForFunction(() => document.querySelector("#config-search")?.value === "");
+                assert.equal(
+                    await page.locator(".flag-submenu-header.open").count(),
+                    0,
+                    "clearing search after a tool change must not restore submenu state from the previous tool"
+                );
+                await page.selectOption("#tool-select", "llama-server");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getCurrentTool() === "llama-server");
+
+                await page.fill("#config-search", "default reasoning effort");
+                await page.waitForSelector("#flag-chat_template_reasoning_effort", { state: "visible" });
+                assert.deepEqual(
+                    await page.locator("#flag-chat_template_reasoning_effort option").evaluateAll((options) => (
+                        options.map((option) => option.value)
+                    )),
+                    ["auto", "low", "medium", "high", "xhigh"]
+                );
+                assert.match(
+                    await page.textContent('.flag-row[data-flag-id="chat_template_reasoning_effort"] .flag-desc'),
+                    /server-wide/i
+                );
+                await page.selectOption("#flag-chat_template_reasoning_effort", "xhigh");
+                await page.waitForFunction(() => (
+                    window.LlamaGui.flagCore.getFlagValues().chat_template_reasoning_effort === "xhigh"
+                ));
+                // Deterministic native path regardless of when /api/status landed.
+                await page.evaluate(() => window.LlamaGui.flagCore.setBinaryTag("b10502"));
+                let reasoningArgs = await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().args.flat());
+                assert.ok(reasoningArgs.includes("--reasoning-effort"));
+                assert.ok(reasoningArgs.includes("xhigh"));
+                await page.selectOption("#flag-chat_template_reasoning_effort", "auto");
+                reasoningArgs = await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().args.flat());
+                assert.ok(!reasoningArgs.includes("--reasoning-effort"));
+                assert.ok(!reasoningArgs.includes("--chat-template-kwargs"));
+
+                await page.fill("#config-search", "gpu layers");
+                await page.waitForSelector("#flag-gpu_layers", { state: "visible" });
+                await page.fill("#flag-gpu_layers", "7");
+                await page.dispatchEvent("#flag-gpu_layers", "input");
+                await page.waitForFunction(() => document.querySelector("#quick-gpu-mode")?.value === "custom");
+                await page.waitForFunction(() => document.querySelector("#quick-gpu-custom")?.value === "7");
+                assert.match(await page.textContent("#command-preview-text"), /(?:-ngl|--gpu-layers) 7/);
+
+                await page.fill("#flag-gpu_layers", "abc");
+                await page.dispatchEvent("#flag-gpu_layers", "input");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().gpu_layers === undefined);
+                await page.waitForFunction(() => !document.querySelector("#command-preview-text")?.textContent.includes("-ngl 7"));
+                assert.ok(!(await page.textContent("#command-preview-text")).includes("-ngl abc"));
+
+                await page.fill("#flag-gpu_layers", " 9 ");
+                await page.dispatchEvent("#flag-gpu_layers", "input");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().gpu_layers === "9");
+                assert.match(await page.textContent("#command-preview-text"), /(?:-ngl|--gpu-layers) 9/);
+
+                await page.fill("#config-search", "expert");
+                await page.waitForSelector("#flag-override_tensor", { state: "visible" });
+                await page.waitForFunction(() => document.querySelector(".override-tensor-buffer-select")?.value === "CUDA0");
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setMultipleFlagValues({ cpu_moe: true, n_cpu_moe: 2 });
+                });
+                await page.click(".override-tensor-helper .btn");
+                await page.waitForFunction(() => (
+                    window.LlamaGui.flagCore.getFlagValues().override_tensor === "blk.*.ffn_.*_exps.weight=CUDA0"
+                ));
+                await page.waitForFunction(() => {
+                    const values = window.LlamaGui.flagCore.getFlagValues();
+                    return values.cpu_moe === undefined && values.n_cpu_moe === undefined;
+                });
+                assert.match(
+                    await page.textContent("#command-preview-text"),
+                    /-ot blk\.\*\.ffn_\.\*_exps\.weight=CUDA0/
+                );
+
+                await page.fill("#config-search", "metrics");
+                await page.waitForSelector("#flag-metrics", { state: "visible" });
+                await page.click("#flag-metrics");
+                await page.waitForFunction(() => document.querySelector("#quick-metrics-toggle")?.checked === false);
+                await page.click("#flag-metrics");
+                await page.waitForFunction(() => document.querySelector("#quick-metrics-toggle")?.checked === true);
+            },
+            async "API key controls and masked command previews"() {
+                await selectSection(page, "configure");
+                await page.fill("#config-search", "api key");
+                await page.waitForSelector("#flag-api_key", { state: "visible" });
+                const passwordManagerHints = await page.evaluate(() => {
+                    const fieldState = (id) => {
+                        const input = document.getElementById(id);
+                        return {
+                            type: input?.type || "",
+                            autocomplete: input?.autocomplete || "",
+                            maskMode: input?.dataset.sensitiveMaskMode || "",
+                            masked: Boolean(input?.classList.contains("sensitive-input-masked")),
+                            textSecurity: input ? getComputedStyle(input).webkitTextSecurity : "",
+                        };
+                    };
                     return {
-                        ok: true,
-                        json: async () => [{
-                            id: 0,
-                            id_task: 1,
-                            is_processing: false,
-                            n_ctx: 1000,
-                            n_prompt_tokens: 250,
-                        }],
+                        cssMasking: Boolean(window.CSS?.supports?.("-webkit-text-security", "disc")),
+                        searchAutocompletes: Array.from(document.querySelectorAll(".ss-search"))
+                            .map((input) => input.autocomplete),
+                        fields: ["flag-api_key", "quick-api-key", "hf-token-input"].map(fieldState),
                     };
+                });
+                assert.ok(passwordManagerHints.searchAutocompletes.length > 0);
+                assert.ok(passwordManagerHints.searchAutocompletes.every((value) => value === "off"));
+                for (const field of passwordManagerHints.fields) {
+                    assert.equal(field.autocomplete, "off");
+                    assert.equal(field.maskMode, passwordManagerHints.cssMasking ? "css" : "password");
+                    assert.equal(field.type, passwordManagerHints.cssMasking ? "text" : "password");
+                    assert.equal(field.masked, passwordManagerHints.cssMasking);
+                    if (passwordManagerHints.cssMasking) assert.equal(field.textSecurity, "disc");
                 }
-                return originalFetch(url);
-            };
-            try {
-                inferencePolling.start({ generation: 43 }, { operation: "restore" });
-                await inferencePolling._test.poll();
-                return inferenceStats.getSnapshot();
-            } finally {
-                window.fetch = originalFetch;
-                inferencePolling.stop();
-            }
-        });
-        assert.equal(independentSourceSnapshot.sources.metrics, "unavailable");
-        assert.equal(independentSourceSnapshot.sources.slots, "ok");
-        assert.equal(independentSourceSnapshot.context.used, 250);
-
-        await selectSection(page, "chat");
-        const chatViewport = page.viewportSize();
-        const settingsWereCollapsed = await page.locator("#chat-sidebar").evaluate(el => el.classList.contains("collapsed"));
-        for (const width of [1440, 1320, 1217, 1024, 901, 900, 760]) {
-            await page.setViewportSize({ width, height: 915 });
-            await page.evaluate(() => new Promise(resolve => requestAnimationFrame(() => requestAnimationFrame(resolve))));
-            // Exercise layout through the real handlers without earlier test
-            // notifications intercepting pointer clicks during resize.
-            await page.locator("#btn-collapse-sidebar").evaluate(el => el.click());
-            await page.waitForFunction(() => {
-                const rect = document.querySelector("#chat-sidebar").getBoundingClientRect();
-                return innerWidth > 900 ? rect.width < 1 : rect.height < 1;
-            });
-            if (width > 900) {
-                const gap = await page.evaluate(() => document.querySelector(".chat-layout").getBoundingClientRect().right
-                    - document.querySelector(".chat-main").getBoundingClientRect().right);
-                assert.ok(gap <= 10, `collapsed settings must not reserve panel width at ${width}px (gap ${gap})`);
-            }
-            await page.locator("#btn-open-sidebar").evaluate(el => el.click());
-            await page.waitForFunction(() => document.querySelector("#chat-sidebar").getBoundingClientRect().width > 200);
-            if (width <= 900) {
-                await page.waitForFunction(() => Math.abs(document.querySelector("#chat-sidebar").getBoundingClientRect().width
-                    - document.querySelector(".chat-layout").getBoundingClientRect().width) < 1);
-            }
-        }
-        await page.setViewportSize(chatViewport);
-        await page.locator(settingsWereCollapsed ? "#btn-collapse-sidebar" : "#btn-open-sidebar").evaluate(el => el.click());
-
-        assert.equal(await page.locator("#chat-input").isDisabled(), true);
-        assert.equal(await page.locator("#btn-chat-send").isDisabled(), true);
-        assert.match(await page.textContent("#chat-no-server-note"), /Start llama-server/i);
-        statusRunning = true;
-        activeProcessTool = "llama-cli";
-        statusActiveRuntime = { tool: "llama-cli", generation: 43 };
-        await page.evaluate(() => refreshRuntimeStatusPanels());
-        assert.equal(await page.locator("#chat-input").isDisabled(), true);
-        activeProcessTool = "llama-server";
-        statusActiveRuntime = { tool: "llama-server", generation: 44 };
-        await page.evaluate(() => refreshRuntimeStatusPanels());
-        assert.equal(await page.locator("#chat-input").isDisabled(), false);
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setFlagValue("temperature", 0.31);
-        });
-        await page.waitForFunction(() => document.querySelector("#chat-slider-temp")?.value === "0.31");
-        assert.equal(await page.textContent("#chat-val-temp"), "0.31");
-        for (const limit of [-1, 0, 17, 2049, 200000]) {
-            await page.evaluate((value) => window.LlamaGui.flagCore.setFlagValue("n_predict", value), limit);
-            assert.equal(await page.locator("#chat-slider-max-tokens").inputValue(), String(limit));
-            assert.equal(await page.textContent("#chat-val-max-tokens"), limit === -1 ? "Server default" : String(limit));
-        }
-        await page.locator("#chat-slider-max-tokens").evaluate((el) => {
-            el.value = "1025";
-            el.dispatchEvent(new Event("input", { bubbles: true }));
-        });
-        assert.equal(await page.evaluate(() => window.LlamaGui.flagCore.getFlagValues().n_predict), 1025);
-        assert.equal(await page.textContent("#chat-val-max-tokens"), "1025");
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("n_predict", -1));
-        await page.fill("#chat-input", Array(40).fill("line").join("\n"));
-        await page.dispatchEvent("#chat-input", "input");
-        const chatInputHeight = await page.locator("#chat-input").evaluate((el) => parseFloat(el.style.height));
-        assert.ok(chatInputHeight <= 220, "chat textarea auto-resize should respect the 220px cap");
-        assert.ok(chatInputHeight > 160, "chat textarea auto-resize should be able to grow beyond the old 160px cap");
-        await page.fill("#chat-input", "");
-        await page.dispatchEvent("#chat-input", "input");
-
-        assert.equal(await page.locator("#chat-web-search-max-results").getAttribute("min"), "1");
-        assert.equal(await page.locator("#chat-web-search-max-results").getAttribute("max"), "10");
-        assert.deepEqual(await page.locator("#chat-thinking-effort option").allTextContents(), [
-            "Auto (model default)", "Off", "Low", "Medium", "High", "XHigh",
-        ]);
-        if (await page.locator("#chat-sidebar").evaluate(el => el.classList.contains("collapsed"))) {
-            await page.locator("#btn-open-sidebar").click();
-            await page.waitForFunction(() => !document.querySelector("#chat-sidebar")?.classList.contains("collapsed"));
-        }
-        const advancedSamplers = page.locator(".chat-advanced-samplers");
-        if (!await advancedSamplers.evaluate(el => el.open)) await advancedSamplers.locator(":scope > summary").click();
-        const samplerBeforeExactEntry = await page.evaluate(() => {
-            const values = window.LlamaGui.flagCore.getFlagValues();
-            return { temperature: values.temperature, top_p: values.top_p };
-        });
-        await page.fill("#chat-num-temp", "2.5");
-        await page.dispatchEvent("#chat-num-temp", "change");
-        await page.fill("#chat-num-top-p", "1.5");
-        await page.dispatchEvent("#chat-num-top-p", "change");
-        await page.waitForFunction(() => {
-            const values = window.LlamaGui.flagCore.getFlagValues();
-            return values.temperature === 2.5 && values.top_p === 1.5;
-        });
-        assert.equal(await page.locator("#chat-num-temp").inputValue(), "2.5");
-        assert.equal(await page.locator("#chat-num-top-p").inputValue(), "1.5");
-        assert.equal(await page.locator("#chat-slider-temp").inputValue(), "2",
-            "the temperature slider is a clamped visual proxy for an exact numeric value");
-        assert.equal(await page.locator("#chat-slider-top-p").inputValue(), "1",
-            "the Top-P slider is a clamped visual proxy for an exact numeric value");
-        await page.click("#btn-chat-new");
-        await page.fill("#chat-input", "Numeric sampler request");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        assert.equal(chatCompletionBodies.at(-1).temperature, 2.5);
-        assert.equal(chatCompletionBodies.at(-1).top_p, 1.5);
-        await page.evaluate(({ temperature, top_p }) => {
-            window.LlamaGui.flagCore.setMultipleFlagValues({ temperature, top_p });
-        }, samplerBeforeExactEntry);
-        await page.waitForFunction(({ temperature, top_p }) => {
-            const values = window.LlamaGui.flagCore.getFlagValues();
-            return values.temperature === temperature && values.top_p === top_p;
-        }, samplerBeforeExactEntry);
-        await page.selectOption("#chat-thinking-effort", "medium");
-        await page.check("#chat-web-search-toggle");
-        await page.fill("#chat-web-search-max-results", "7");
-        await page.dispatchEvent("#chat-web-search-max-results", "input");
-        await page.fill("#chat-input", "Search configurable depth");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("ok"));
-        assert.equal(
-            await page.evaluate(() => localStorage.getItem("llama_gui_chat_web_search_max_results")),
-            "7"
-        );
-        assert.equal(chatCompletionBodies.at(-1).web_search, true);
-        assert.equal(chatCompletionBodies.at(-1).web_search_max_results, 7);
-        assert.deepEqual(chatCompletionBodies.at(-1).chat_template_kwargs, {
-            enable_thinking: true,
-            reasoning_effort: "medium",
-        });
-        assert.equal(
-            await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]")[0]?.thinkingEffort),
-            "medium"
-        );
-        assert.equal(chatCompletionHeaders.at(-1).authorization, "Bearer first-secret");
-        await page.click("#btn-chat-new");
-        assert.equal(await page.locator("#chat-thinking-effort").inputValue(), "auto");
-
-        chatResponseMode = "reasoning-only";
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("reasoning_format", "deepseek"));
-        await page.fill("#chat-input", "Reason only");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector(".chat-reasoning-body")?.textContent.includes("hidden thought"));
-        assert.equal(await page.locator(".chat-message.assistant .chat-bubble.hidden").count(), 1);
-        const reasoningOnlyMessage = await page.evaluate(() => {
-            const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
-            const lastMessage = conversations[0]?.messages?.at(-1);
-            return {
-                role: lastMessage?.role,
-                content: lastMessage?.content,
-                reasoning: lastMessage?.reasoning,
-                preview: document.querySelector(".chat-history-item-preview")?.textContent || "",
-            };
-        });
-        assert.equal(reasoningOnlyMessage.role, "assistant");
-        assert.equal(reasoningOnlyMessage.content, "");
-        assert.equal(reasoningOnlyMessage.reasoning, "hidden thought");
-        assert.equal(reasoningOnlyMessage.preview, "hidden thought");
-        chatResponseMode = "ok";
-        await page.fill("#chat-input", "Use the earlier reasoning");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("ok"));
-        const preservedAssistant = chatCompletionBodies.at(-1).messages.find(message => message.role === "assistant");
-        assert.equal(preservedAssistant.reasoning_content, "hidden thought");
-        await page.click("#btn-chat-new");
-
-        chatResponseMode = "think-content";
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("reasoning_format", "none"));
-        await page.fill("#chat-input", "Keep raw thinking tags");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("<think>raw thought</think>"));
-        assert.equal(await page.locator(".chat-reasoning").count(), 0);
-        const rawThinkMessage = await page.evaluate(() => {
-            const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
-            const lastMessage = conversations[0]?.messages?.at(-1);
-            return {
-                content: lastMessage?.content,
-                reasoning: lastMessage?.reasoning || "",
-            };
-        });
-        assert.equal(rawThinkMessage.content, "<think>raw thought</think>\nFinal visible");
-        assert.equal(rawThinkMessage.reasoning, "");
-
-        await page.click("#btn-chat-new");
-        await page.evaluate(() => {
-            const originalFetch = window.fetch;
-            window.__restoreChatFetch = () => {
-                window.fetch = originalFetch;
-                delete window.__restoreChatFetch;
-            };
-            window.fetch = (url, options) => String(url).includes("/api/chat/completions")
-                ? Promise.resolve({ ok: true, status: 200, statusText: "OK", body: null })
-                : originalFetch(url, options);
-        });
-        await page.fill("#chat-input", "Empty response");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Response body is empty"));
-        assert.equal(await page.locator(".chat-message.assistant").count(), 1);
-        assert.equal(await page.locator(".chat-message.assistant .chat-bubble").count(), 1);
-        await page.evaluate(() => window.__restoreChatFetch());
-
-        await page.click("#btn-chat-new");
-        await page.evaluate(() => {
-            const originalFetch = window.fetch;
-            window.__restoreChatFetch = () => {
-                window.fetch = originalFetch;
-                delete window.__restoreChatFetch;
-            };
-            window.fetch = (url, options = {}) => {
-                if (!String(url).includes("/api/chat/completions")) {
-                    return originalFetch(url, options);
+                await page.locator("#flag-api_key + .sensitive-input-actions button", { hasText: "Generate" }).click();
+                assert.match(await page.inputValue("#flag-api_key"), /^[A-Za-z0-9_-]{43}$/);
+                const showApiKey = page.locator("#flag-api_key + .sensitive-input-actions button", { hasText: "Show" });
+                await showApiKey.click();
+                assert.equal(await page.locator("#flag-api_key").getAttribute("type"), "text");
+                assert.equal(await page.locator("#flag-api_key").evaluate((input) => input.classList.contains("sensitive-input-masked")), false);
+                await page.locator("#flag-api_key + .sensitive-input-actions button", { hasText: "Hide" }).click();
+                assert.equal(
+                    await page.locator("#flag-api_key").getAttribute("type"),
+                    passwordManagerHints.cssMasking ? "text" : "password"
+                );
+                assert.equal(
+                    await page.locator("#flag-api_key").evaluate((input) => input.classList.contains("sensitive-input-masked")),
+                    passwordManagerHints.cssMasking
+                );
+                await page.fill("#flag-api_key", "first-secret, second-secret");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().api_key === "first-secret, second-secret");
+                const protectedPreview = await page.textContent("#command-preview-text");
+                assert.match(protectedPreview, /--api-key <redacted>/);
+                assert.ok(!protectedPreview.includes("first-secret"));
+                await selectSection(page, "quick-launch");
+                assert.equal(await page.inputValue("#quick-api-key"), "first-secret, second-secret");
+            },
+            async "inference rates and authenticated polling"() {
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("api_key", "first-secret, second-secret"));
+                await selectSection(page, "quick-launch");
+                statsMetrics = {
+                    promptTokens: 40,
+                    promptSpeed: 4,
+                    genTokens: 20,
+                    genSpeed: 2,
+                    processing: 1,
+                };
+                statsSlots = [{
+                    id: 1,
+                    id_task: 1,
+                    n_ctx: 1000,
+                    is_processing: true,
+                    n_prompt_tokens: 60,
+                    n_prompt_tokens_processed: 40,
+                    next_token: { n_decoded: 20 },
+                }];
+                await page.evaluate(async () => {
+                    // Settle Quick Launch's status refresh before manual sampling: the
+                    // stopped-server fixture would otherwise clear the stats target.
+                    await refreshRuntimeStatusPanels();
+                    inferencePolling.start({ generation: 1 }, { operation: "manual-launch" });
+                    await inferencePolling._test.poll();
+                });
+                assert.equal(await page.textContent("#stats-prompt-tokens"), "40",
+                    "fresh launches must retain tokens processed before the first stats poll");
+                assert.equal(await page.textContent("#stats-gen-tokens"), "20");
+                assert.equal(await page.textContent("#stats-context"), "60",
+                    "Session tokens must sum prompt plus generated since the baseline");
+                assert.ok((await page.textContent("#stats-bar")).includes("Session tokens"),
+                    "the fixed bar labels cumulative tokens as Session tokens, not Context");
+
+                statsMetrics = {
+                    promptTokens: 1000,
+                    promptSeconds: 2,
+                    promptSpeed: 11,
+                    genTokens: 500,
+                    genSeconds: 10,
+                    genSpeed: 7,
+                    processing: 0,
+                };
+                statsSlots = idleStatsSlots;
+                await page.evaluate(async () => {
+                    inferencePolling.start({ generation: 2 }, { operation: "restore" });
+                    await inferencePolling._test.poll();
+                });
+                assert.equal(await page.textContent("#stats-prompt-tokens"), "0",
+                    "pre-poll chat resets must not expose lifetime prompt counters after reconnect");
+                assert.equal(await page.textContent("#stats-gen-tokens"), "0");
+                assert.equal(await page.textContent("#stats-context"), "0",
+                    "a restored target baselines on its first sample, so session tokens start at zero");
+                assert.equal(await page.textContent("#stats-kv-usage"), "13%",
+                    "Context (most-filled slot) must use n_prompt_tokens / n_ctx");
+
+                statsMetrics.processing = 1;
+                statsSlots = [{
+                    id: 1, id_task: 76, n_ctx: 1000, is_processing: true,
+                    n_prompt_tokens: 700, n_prompt_tokens_cache: 600,
+                    n_prompt_tokens_processed: 100, next_token: [{ n_decoded: 0 }],
+                }];
+                await page.evaluate(() => inferencePolling._test.poll());
+                await wait(1100);
+                statsSlots[0].n_prompt_tokens_processed = 400;
+                statsSlots[0].n_prompt_tokens = 1000;
+                await page.evaluate(() => inferencePolling._test.poll());
+                const livePromptSpeed = await page.textContent("#stats-prompt-speed");
+                assert.ok(Number(livePromptSpeed) > 0, "prompt speed updates before completed counters advance");
+                assert.equal(await page.textContent("#monitor-inference-prompt-speed"), `${livePromptSpeed} tok/s`);
+                assert.equal(await page.textContent("#monitor-inference-prompt-speed-label"), "Live prompt speed");
+                assert.equal(await page.textContent("#stats-prompt-speed-label"), "tok/s prompt live");
+                assert.equal(await page.textContent("#stats-prompt-tokens"), "0");
+                await page.evaluate(() => inferencePolling._test.poll());
+                assert.equal(await page.textContent("#stats-prompt-speed"), livePromptSpeed,
+                    "an unchanged prompt batch retains the measured average");
+                assert.equal(await page.textContent("#monitor-inference-prompt-speed"), `${livePromptSpeed} tok/s`);
+                statsSlots[0].next_token[0].n_decoded = 1;
+                statsMetrics.promptTokens = 1400;
+                statsMetrics.promptSeconds = 4;
+                await page.evaluate(() => inferencePolling._test.poll());
+                assert.equal(await page.textContent("#stats-prompt-speed"), "200.0");
+                assert.equal(await page.textContent("#monitor-inference-prompt-speed"), "200.0 tok/s");
+                assert.equal(await page.textContent("#monitor-inference-prompt-speed-label"), "Avg prompt speed");
+                assert.equal(await page.textContent("#stats-prompt-speed-label"), "tok/s prompt avg");
+
+                statsMetrics.processing = 1;
+                statsSlots = [{
+                    id: 1,
+                    id_task: 77,
+                    n_ctx: 1000,
+                    is_processing: true,
+                    n_prompt_tokens: 110,
+                    n_prompt_tokens_processed: 100,
+                    next_token: { n_decoded: 10 },
+                }];
+                await page.evaluate(() => inferencePolling._test.poll());
+                await wait(1100);
+                statsSlots[0].n_prompt_tokens = 140;
+                statsSlots[0].next_token.n_decoded = 40;
+                await page.evaluate(() => inferencePolling._test.poll());
+                const liveGenSpeed = await page.textContent("#stats-gen-speed");
+                assert.ok(Number(liveGenSpeed) > 0, "live speed updates before completion counters advance");
+                assert.equal(await page.textContent("#monitor-inference-gen-speed"), `${liveGenSpeed} tok/s`,
+                    "the Monitor card shares the fixed bar's live rate");
+                assert.equal(await page.textContent("#monitor-inference-gen-speed-label"), "Live generation speed");
+                assert.equal(await page.textContent("#stats-gen-speed-label"), "tok/s gen live");
+                assert.equal(await page.textContent("#stats-context"), "400",
+                    "session tokens stay baseline-relative while slot context moves independently");
+                statsMetrics.genTokens = 530;
+                statsMetrics.genSeconds = 12;
+                statsMetrics.processing = 0;
+                statsSlots = idleStatsSlots;
+                await page.evaluate(() => inferencePolling._test.poll());
+                assert.equal(await page.textContent("#stats-gen-speed"), "15.0", "idle preserves the average");
+                assert.equal(await page.textContent("#monitor-inference-gen-speed-label"), "Avg generation speed");
+                assert.equal(await page.textContent("#stats-gen-speed-label"), "tok/s gen avg");
+                delete statsMetrics.genSeconds;
+                await page.evaluate(() => inferencePolling._test.poll());
+                assert.equal(await page.textContent("#stats-gen-speed"), "--", "missing time does not use a gauge");
+                assert.equal(await page.textContent("#monitor-inference-gen-speed"), "--");
+
+                await page.evaluate(() => inferencePolling.stop());
+                assert.equal(metricsHeaders.at(-1).authorization, "Bearer first-secret");
+                assert.equal(slotsHeaders.at(-1).authorization, "Bearer first-secret");
+            },
+            async "failed Stop recovery and independent inference sources"() {
+                // A failed Stop leaves the same llama-server alive. Recovery must pass
+                // its runtime through inferencePolling.start so inference polling resumes.
+                statusRunning = true;
+                activeProcessTool = "llama-server";
+                statusActiveRuntime = {
+                    tool: "llama-server", generation: 42, model: "models/smoke-model.gguf", backend: "cpu", version: "b9999",
+                    launch_settings: await page.evaluate(() => window.LlamaGui.flagCore.captureLaunchSettings()),
+                };
+                stopShouldFail = true;
+                await page.evaluate(async (activeRuntime) => {
+                    await processLifecycle.restore({
+                        running: true,
+                        active_process_tool: "llama-server",
+                        active_runtime: activeRuntime,
+                    }, { startOutput: () => {}, postReady: () => {} });
+                    await stopLlama();
+                }, statusActiveRuntime);
+                assert.equal(await page.evaluate(() => inferenceStats.getTargetKey()), "gui:42");
+                assert.equal(
+                    await page.locator("#stats-bar").evaluate((el) => el.classList.contains("hidden")),
+                    false,
+                    "failed Stop recovery must keep the fixed stats bar active",
+                );
+                await page.evaluate(() => processOutput.stop());
+                await verifyConfigureComparison(page);
+                stopShouldFail = false;
+                statusRunning = false;
+                activeProcessTool = "";
+                statusActiveRuntime = null;
+                await page.evaluate(() => inferencePolling.stop());
+                await page.evaluate(() => refreshRuntimeStatusPanels());
+                assert.equal(await page.locator("#config-changes-only").isDisabled(), true, "stopping clears the comparison baseline");
+
+                // A rejected metrics body must not discard a successful slots response.
+                const independentSourceSnapshot = await page.evaluate(async () => {
+                    const originalFetch = window.fetch;
+                    window.fetch = async (url) => {
+                        const textUrl = String(url);
+                        if (textUrl.includes("/api/llama/metrics?")) {
+                            return { ok: true, text: async () => { throw new Error("metrics body failed"); } };
+                        }
+                        if (textUrl.includes("/api/llama/slots?")) {
+                            return {
+                                ok: true,
+                                json: async () => [{
+                                    id: 0,
+                                    id_task: 1,
+                                    is_processing: false,
+                                    n_ctx: 1000,
+                                    n_prompt_tokens: 250,
+                                }],
+                            };
+                        }
+                        return originalFetch(url);
+                    };
+                    try {
+                        inferencePolling.start({ generation: 43 }, { operation: "restore" });
+                        await inferencePolling._test.poll();
+                        return inferenceStats.getSnapshot();
+                    } finally {
+                        window.fetch = originalFetch;
+                        inferencePolling.stop();
+                    }
+                });
+                assert.equal(independentSourceSnapshot.sources.metrics, "unavailable");
+                assert.equal(independentSourceSnapshot.sources.slots, "ok");
+                assert.equal(independentSourceSnapshot.context.used, 250);
+            },
+            async "Chat settings panel responsive collapse"() {
+                await selectSection(page, "chat");
+                const chatViewport = page.viewportSize();
+                const settingsWereCollapsed = await page.locator("#chat-sidebar").evaluate(el => el.classList.contains("collapsed"));
+                for (const width of [1440, 1320, 1217, 1024, 901, 900, 760]) {
+                    await page.setViewportSize({ width, height: 915 });
+                    await page.evaluate(() => new Promise(resolve => requestAnimationFrame(() => requestAnimationFrame(resolve))));
+                    // Exercise layout through the real handlers without earlier test
+                    // notifications intercepting pointer clicks during resize.
+                    await page.locator("#btn-collapse-sidebar").evaluate(el => el.click());
+                    await page.waitForFunction(() => {
+                        const rect = document.querySelector("#chat-sidebar").getBoundingClientRect();
+                        return innerWidth > 900 ? rect.width < 1 : rect.height < 1;
+                    });
+                    if (width > 900) {
+                        const gap = await page.evaluate(() => document.querySelector(".chat-layout").getBoundingClientRect().right
+                            - document.querySelector(".chat-main").getBoundingClientRect().right);
+                        assert.ok(gap <= 10, `collapsed settings must not reserve panel width at ${width}px (gap ${gap})`);
+                    }
+                    await page.locator("#btn-open-sidebar").evaluate(el => el.click());
+                    await page.waitForFunction(() => document.querySelector("#chat-sidebar").getBoundingClientRect().width > 200);
+                    if (width <= 900) {
+                        await page.waitForFunction(() => Math.abs(document.querySelector("#chat-sidebar").getBoundingClientRect().width
+                            - document.querySelector(".chat-layout").getBoundingClientRect().width) < 1);
+                    }
                 }
-                const stream = new ReadableStream({
-                    start(controller) {
-                        controller.enqueue(new TextEncoder().encode(
-                            'data: {"choices":[{"delta":{"content":"partial reply"}}]}\n\n'
-                        ));
-                        options.signal.addEventListener("abort", () => {
-                            controller.error(new DOMException("Aborted", "AbortError"));
-                        }, { once: true });
-                    },
+                await page.setViewportSize(chatViewport);
+                await page.locator(settingsWereCollapsed ? "#btn-collapse-sidebar" : "#btn-open-sidebar").evaluate(el => el.click());
+            },
+            async "Chat availability and shared request settings"() {
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("api_key", "first-secret, second-secret"));
+                await selectSection(page, "chat");
+                assert.equal(await page.locator("#chat-input").isDisabled(), true);
+                assert.equal(await page.locator("#btn-chat-send").isDisabled(), true);
+                assert.match(await page.textContent("#chat-no-server-note"), /Start llama-server/i);
+                statusRunning = true;
+                activeProcessTool = "llama-cli";
+                statusActiveRuntime = { tool: "llama-cli", generation: 43 };
+                await page.evaluate(() => refreshRuntimeStatusPanels());
+                assert.equal(await page.locator("#chat-input").isDisabled(), true);
+                activeProcessTool = "llama-server";
+                statusActiveRuntime = { tool: "llama-server", generation: 44 };
+                await page.evaluate(() => refreshRuntimeStatusPanels());
+                assert.equal(await page.locator("#chat-input").isDisabled(), false);
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setFlagValue("temperature", 0.31);
                 });
-                return Promise.resolve(new Response(stream, {
-                    status: 200,
-                    headers: { "Content-Type": "text/event-stream" },
+                await page.waitForFunction(() => document.querySelector("#chat-slider-temp")?.value === "0.31");
+                assert.equal(await page.textContent("#chat-val-temp"), "0.31");
+                for (const limit of [-1, 0, 17, 2049, 200000]) {
+                    await page.evaluate((value) => window.LlamaGui.flagCore.setFlagValue("n_predict", value), limit);
+                    assert.equal(await page.locator("#chat-slider-max-tokens").inputValue(), String(limit));
+                    assert.equal(await page.textContent("#chat-val-max-tokens"), limit === -1 ? "Server default" : String(limit));
+                }
+                await page.locator("#chat-slider-max-tokens").evaluate((el) => {
+                    el.value = "1025";
+                    el.dispatchEvent(new Event("input", { bubbles: true }));
+                });
+                assert.equal(await page.evaluate(() => window.LlamaGui.flagCore.getFlagValues().n_predict), 1025);
+                assert.equal(await page.textContent("#chat-val-max-tokens"), "1025");
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("n_predict", -1));
+                await page.fill("#chat-input", Array(40).fill("line").join("\n"));
+                await page.dispatchEvent("#chat-input", "input");
+                const chatInputHeight = await page.locator("#chat-input").evaluate((el) => parseFloat(el.style.height));
+                assert.ok(chatInputHeight <= 220, "chat textarea auto-resize should respect the 220px cap");
+                assert.ok(chatInputHeight > 160, "chat textarea auto-resize should be able to grow beyond the old 160px cap");
+                await page.fill("#chat-input", "");
+                await page.dispatchEvent("#chat-input", "input");
+
+                assert.equal(await page.locator("#chat-web-search-max-results").getAttribute("min"), "1");
+                assert.equal(await page.locator("#chat-web-search-max-results").getAttribute("max"), "10");
+                assert.deepEqual(await page.locator("#chat-thinking-effort option").allTextContents(), [
+                    "Auto (model default)", "Off", "Low", "Medium", "High", "XHigh",
+                ]);
+                if (await page.locator("#chat-sidebar").evaluate(el => el.classList.contains("collapsed"))) {
+                    await page.locator("#btn-open-sidebar").click();
+                    await page.waitForFunction(() => !document.querySelector("#chat-sidebar")?.classList.contains("collapsed"));
+                }
+                const advancedSamplers = page.locator(".chat-advanced-samplers");
+                if (!await advancedSamplers.evaluate(el => el.open)) await advancedSamplers.locator(":scope > summary").click();
+                const samplerBeforeExactEntry = await page.evaluate(() => {
+                    const values = window.LlamaGui.flagCore.getFlagValues();
+                    return { temperature: values.temperature, top_p: values.top_p };
+                });
+                await page.fill("#chat-num-temp", "2.5");
+                await page.dispatchEvent("#chat-num-temp", "change");
+                await page.fill("#chat-num-top-p", "1.5");
+                await page.dispatchEvent("#chat-num-top-p", "change");
+                await page.waitForFunction(() => {
+                    const values = window.LlamaGui.flagCore.getFlagValues();
+                    return values.temperature === 2.5 && values.top_p === 1.5;
+                });
+                assert.equal(await page.locator("#chat-num-temp").inputValue(), "2.5");
+                assert.equal(await page.locator("#chat-num-top-p").inputValue(), "1.5");
+                assert.equal(await page.locator("#chat-slider-temp").inputValue(), "2",
+                    "the temperature slider is a clamped visual proxy for an exact numeric value");
+                assert.equal(await page.locator("#chat-slider-top-p").inputValue(), "1",
+                    "the Top-P slider is a clamped visual proxy for an exact numeric value");
+                await page.click("#btn-chat-new");
+                await page.fill("#chat-input", "Numeric sampler request");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                assert.equal(chatCompletionBodies.at(-1).temperature, 2.5);
+                assert.equal(chatCompletionBodies.at(-1).top_p, 1.5);
+                await page.evaluate(({ temperature, top_p }) => {
+                    window.LlamaGui.flagCore.setMultipleFlagValues({ temperature, top_p });
+                }, samplerBeforeExactEntry);
+                await page.waitForFunction(({ temperature, top_p }) => {
+                    const values = window.LlamaGui.flagCore.getFlagValues();
+                    return values.temperature === temperature && values.top_p === top_p;
+                }, samplerBeforeExactEntry);
+                await page.selectOption("#chat-thinking-effort", "medium");
+                await page.check("#chat-web-search-toggle");
+                await page.fill("#chat-web-search-max-results", "7");
+                await page.dispatchEvent("#chat-web-search-max-results", "input");
+                await page.fill("#chat-input", "Search configurable depth");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("ok"));
+                assert.equal(
+                    await page.evaluate(() => localStorage.getItem("llama_gui_chat_web_search_max_results")),
+                    "7"
+                );
+                assert.equal(chatCompletionBodies.at(-1).web_search, true);
+                assert.equal(chatCompletionBodies.at(-1).web_search_max_results, 7);
+                assert.deepEqual(chatCompletionBodies.at(-1).chat_template_kwargs, {
+                    enable_thinking: true,
+                    reasoning_effort: "medium",
+                });
+                assert.equal(
+                    await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]")[0]?.thinkingEffort),
+                    "medium"
+                );
+                assert.equal(chatCompletionHeaders.at(-1).authorization, "Bearer first-secret");
+                await page.click("#btn-chat-new");
+                assert.equal(await page.locator("#chat-thinking-effort").inputValue(), "auto");
+            },
+            async "Chat reasoning persistence and raw thinking tags"() {
+                await startChat();
+                chatResponseMode = "reasoning-only";
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("reasoning_format", "deepseek"));
+                await page.fill("#chat-input", "Reason only");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector(".chat-reasoning-body")?.textContent.includes("hidden thought"));
+                assert.equal(await page.locator(".chat-message.assistant .chat-bubble.hidden").count(), 1);
+                const reasoningOnlyMessage = await page.evaluate(() => {
+                    const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
+                    const lastMessage = conversations[0]?.messages?.at(-1);
+                    return {
+                        role: lastMessage?.role,
+                        content: lastMessage?.content,
+                        reasoning: lastMessage?.reasoning,
+                        preview: document.querySelector(".chat-history-item-preview")?.textContent || "",
+                    };
+                });
+                assert.equal(reasoningOnlyMessage.role, "assistant");
+                assert.equal(reasoningOnlyMessage.content, "");
+                assert.equal(reasoningOnlyMessage.reasoning, "hidden thought");
+                assert.equal(reasoningOnlyMessage.preview, "hidden thought");
+                chatResponseMode = "ok";
+                await page.fill("#chat-input", "Use the earlier reasoning");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("ok"));
+                const preservedAssistant = chatCompletionBodies.at(-1).messages.find(message => message.role === "assistant");
+                assert.equal(preservedAssistant.reasoning_content, "hidden thought");
+                await page.click("#btn-chat-new");
+
+                chatResponseMode = "think-content";
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("reasoning_format", "none"));
+                await page.fill("#chat-input", "Keep raw thinking tags");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("<think>raw thought</think>"));
+                assert.equal(await page.locator(".chat-reasoning").count(), 0);
+                const rawThinkMessage = await page.evaluate(() => {
+                    const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
+                    const lastMessage = conversations[0]?.messages?.at(-1);
+                    return {
+                        content: lastMessage?.content,
+                        reasoning: lastMessage?.reasoning || "",
+                    };
+                });
+                assert.equal(rawThinkMessage.content, "<think>raw thought</think>\nFinal visible");
+                assert.equal(rawThinkMessage.reasoning, "");
+            },
+            async "Chat empty responses and stopped partial streams"() {
+                await startChat();
+                await page.click("#btn-chat-new");
+                await page.evaluate(() => {
+                    const originalFetch = window.fetch;
+                    window.__restoreChatFetch = () => {
+                        window.fetch = originalFetch;
+                        delete window.__restoreChatFetch;
+                    };
+                    window.fetch = (url, options) => String(url).includes("/api/chat/completions")
+                        ? Promise.resolve({ ok: true, status: 200, statusText: "OK", body: null })
+                        : originalFetch(url, options);
+                });
+                await page.fill("#chat-input", "Empty response");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Response body is empty"));
+                assert.equal(await page.locator(".chat-message.assistant").count(), 1);
+                assert.equal(await page.locator(".chat-message.assistant .chat-bubble").count(), 1);
+                await page.evaluate(() => window.__restoreChatFetch());
+
+                await page.click("#btn-chat-new");
+                await page.evaluate(() => {
+                    const originalFetch = window.fetch;
+                    window.__restoreChatFetch = () => {
+                        window.fetch = originalFetch;
+                        delete window.__restoreChatFetch;
+                    };
+                    window.fetch = (url, options = {}) => {
+                        if (!String(url).includes("/api/chat/completions")) {
+                            return originalFetch(url, options);
+                        }
+                        const stream = new ReadableStream({
+                            start(controller) {
+                                controller.enqueue(new TextEncoder().encode(
+                                    'data: {"choices":[{"delta":{"content":"partial reply"}}]}\n\n'
+                                ));
+                                options.signal.addEventListener("abort", () => {
+                                    controller.error(new DOMException("Aborted", "AbortError"));
+                                }, { once: true });
+                            },
+                        });
+                        return Promise.resolve(new Response(stream, {
+                            status: 200,
+                            headers: { "Content-Type": "text/event-stream" },
+                        }));
+                    };
+                });
+                await page.fill("#chat-input", "Stop after a partial response");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("partial reply"));
+                await page.click("#btn-chat-stop");
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                const stoppedStreamState = await page.evaluate(() => {
+                    const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
+                    const lastMessage = conversations[0]?.messages?.at(-1);
+                    return {
+                        role: lastMessage?.role,
+                        content: lastMessage?.content,
+                        assistantBubbles: document.querySelectorAll(".chat-message.assistant").length,
+                    };
+                });
+                assert.equal(stoppedStreamState.role, "assistant");
+                assert.equal(stoppedStreamState.content, "partial reply");
+                assert.equal(stoppedStreamState.assistantBubbles, 1);
+                await page.click("#btn-chat-undo");
+                const stoppedStreamUndoState = await page.evaluate(() => {
+                    const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
+                    return {
+                        lastRole: conversations[0]?.messages?.at(-1)?.role,
+                        userBubbles: document.querySelectorAll(".chat-message.user").length,
+                        assistantBubbles: document.querySelectorAll(".chat-message.assistant").length,
+                    };
+                });
+                assert.equal(stoppedStreamUndoState.lastRole, "user");
+                assert.equal(stoppedStreamUndoState.userBubbles, 1);
+                assert.equal(stoppedStreamUndoState.assistantBubbles, 0);
+                await page.evaluate(() => window.__restoreChatFetch());
+            },
+            async "Chat streaming scroll position and response metadata"() {
+                await startChat();
+                await page.click("#btn-chat-new");
+                await page.evaluate(() => {
+                    const originalFetch = window.fetch;
+                    let controller = null;
+                    let closed = false;
+                    const encoder = new TextEncoder();
+                    const emit = (payload) => {
+                        if (!controller || closed) return;
+                        const data = typeof payload === "string" ? payload : JSON.stringify(payload);
+                        controller.enqueue(encoder.encode(`data: ${data}\n\n`));
+                    };
+                    window.__pushStagedChatChunk = emit;
+                    window.__finishStagedChatStream = () => {
+                        emit("[DONE]");
+                        if (controller && !closed) {
+                            closed = true;
+                            controller.close();
+                        }
+                    };
+                    window.__restoreStagedChatFetch = () => {
+                        window.fetch = originalFetch;
+                        delete window.__pushStagedChatChunk;
+                        delete window.__finishStagedChatStream;
+                        delete window.__restoreStagedChatFetch;
+                    };
+                    window.fetch = (url, options = {}) => {
+                        if (!String(url).includes("/api/chat/completions")) return originalFetch(url, options);
+                        const stream = new ReadableStream({
+                            start(nextController) {
+                                controller = nextController;
+                                closed = false;
+                                emit({ choices: [{ delta: {
+                                    content: "First staged response " + "staged-token ".repeat(600),
+                                } }] });
+                                options.signal?.addEventListener("abort", () => {
+                                    if (!closed) {
+                                        closed = true;
+                                        controller.error(new DOMException("Aborted", "AbortError"));
+                                    }
+                                }, { once: true });
+                            },
+                        });
+                        return Promise.resolve(new Response(stream, {
+                            status: 200,
+                            headers: { "Content-Type": "text/event-stream" },
+                        }));
+                    };
+                });
+                await page.fill("#chat-input", "Staged streaming response");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("First staged response"));
+                const scrolledAway = await page.evaluate(() => {
+                    const container = document.getElementById("chat-messages");
+                    const maxScroll = container.scrollHeight - container.clientHeight;
+                    if (maxScroll <= 80) throw new Error("staged response did not create a scrollable transcript");
+                    container.scrollTop = Math.max(0, maxScroll - 240);
+                    if (maxScroll - (container.scrollTop + container.clientHeight) <= 80) container.scrollTop = 0;
+                    container.dispatchEvent(new Event("scroll"));
+                    return {
+                        top: container.scrollTop,
+                        maxScroll,
+                        clientHeight: container.clientHeight,
+                    };
+                });
+                assert.ok(scrolledAway.maxScroll - (scrolledAway.top + scrolledAway.clientHeight) > 80,
+                    "the staged reader is scrolled away from the latest response");
+                await page.evaluate(() => window.__pushStagedChatChunk({
+                    choices: [{ delta: { reasoning_content: "Later reasoning chunk" } }],
                 }));
-            };
-        });
-        await page.fill("#chat-input", "Stop after a partial response");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("partial reply"));
-        await page.click("#btn-chat-stop");
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        const stoppedStreamState = await page.evaluate(() => {
-            const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
-            const lastMessage = conversations[0]?.messages?.at(-1);
-            return {
-                role: lastMessage?.role,
-                content: lastMessage?.content,
-                assistantBubbles: document.querySelectorAll(".chat-message.assistant").length,
-            };
-        });
-        assert.equal(stoppedStreamState.role, "assistant");
-        assert.equal(stoppedStreamState.content, "partial reply");
-        assert.equal(stoppedStreamState.assistantBubbles, 1);
-        await page.click("#btn-chat-undo");
-        const stoppedStreamUndoState = await page.evaluate(() => {
-            const conversations = JSON.parse(localStorage.getItem("llama_gui_conversations") || "[]");
-            return {
-                lastRole: conversations[0]?.messages?.at(-1)?.role,
-                userBubbles: document.querySelectorAll(".chat-message.user").length,
-                assistantBubbles: document.querySelectorAll(".chat-message.assistant").length,
-            };
-        });
-        assert.equal(stoppedStreamUndoState.lastRole, "user");
-        assert.equal(stoppedStreamUndoState.userBubbles, 1);
-        assert.equal(stoppedStreamUndoState.assistantBubbles, 0);
-        await page.evaluate(() => window.__restoreChatFetch());
-
-        await page.click("#btn-chat-new");
-        await page.evaluate(() => {
-            const originalFetch = window.fetch;
-            let controller = null;
-            let closed = false;
-            const encoder = new TextEncoder();
-            const emit = (payload) => {
-                if (!controller || closed) return;
-                const data = typeof payload === "string" ? payload : JSON.stringify(payload);
-                controller.enqueue(encoder.encode(`data: ${data}\n\n`));
-            };
-            window.__pushStagedChatChunk = emit;
-            window.__finishStagedChatStream = () => {
-                emit("[DONE]");
-                if (controller && !closed) {
-                    closed = true;
-                    controller.close();
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Later reasoning chunk"));
+                assert.equal(await page.evaluate(() => document.querySelector("#chat-messages").scrollTop), scrolledAway.top,
+                    "later reasoning preserves an away-from-bottom reader position");
+                await page.evaluate(() => window.__pushStagedChatChunk({
+                    choices: [{ delta: { content: "Later content chunk" } }],
+                }));
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Later content chunk"));
+                assert.equal(await page.evaluate(() => document.querySelector("#chat-messages").scrollTop), scrolledAway.top,
+                    "later content and reasoning preserve an away-from-bottom reader position");
+                assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), true,
+                    "Jump to latest stays available while a reader is scrolled away");
+                await page.evaluate(() => {
+                    window.__pushStagedChatChunk({ choices: [{ delta: {}, finish_reason: "stop" }] });
+                    window.__pushStagedChatChunk({
+                        choices: [],
+                        usage: { prompt_tokens: 13, completion_tokens: 7, total_tokens: 20 },
+                        timings: { predicted_per_second: 12.5 },
+                    });
+                });
+                await page.evaluate(() => window.__finishStagedChatStream());
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), true,
+                    "Jump to latest remains available after a completed away-from-bottom stream");
+                const stagedMetadata = await page.locator(".chat-response-metadata").last().innerText();
+                assert.match(stagedMetadata, /Prompt: 13/);
+                assert.match(stagedMetadata, /Completion: 7/);
+                assert.match(stagedMetadata, /Total: 20/);
+                assert.match(stagedMetadata, /Speed: 12\.5 tok\/s/);
+                assert.match(stagedMetadata, /Stop: Finished/);
+                assert.doesNotMatch(stagedMetadata, /Stop: stop/i);
+                assert.match(await page.locator(".chat-reasoning-body").last().textContent(), /Later reasoning chunk/);
+
+                await page.locator("#btn-chat-jump-latest").click();
+                assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), false,
+                    "Jump to latest resumes follow mode");
+                await page.click("#btn-chat-new");
+                await page.fill("#chat-input", "Follow after jump");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("First staged response"));
+                const followScroll = await page.evaluate(() => {
+                    const container = document.getElementById("chat-messages");
+                    const maxScroll = container.scrollHeight - container.clientHeight;
+                    if (maxScroll <= 80) throw new Error("follow response did not create a scrollable transcript");
+                    container.scrollTop = 0;
+                    container.dispatchEvent(new Event("scroll"));
+                    return { top: container.scrollTop, maxScroll, clientHeight: container.clientHeight };
+                });
+                assert.ok(followScroll.maxScroll - (followScroll.top + followScroll.clientHeight) > 80);
+                await page.locator("#btn-chat-jump-latest").click();
+                await page.evaluate(() => window.__pushStagedChatChunk({
+                    choices: [{ delta: { content: "Final followed chunk" } }],
+                }));
+                await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Final followed chunk"));
+                await page.waitForFunction(() => {
+                    const container = document.querySelector("#chat-messages");
+                    return container.scrollHeight - (container.scrollTop + container.clientHeight) <= 80;
+                });
+                await page.evaluate(() => window.__finishStagedChatStream());
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), false,
+                    "a followed stream finishes at the latest response");
+                await page.evaluate(() => window.__restoreStagedChatFetch());
+            },
+            async "Chat editing and failed regeneration recovery"() {
+                await startChat();
+                if (!await page.locator("#chat-sidebar").evaluate((element) => element.classList.contains("collapsed"))) {
+                    await page.click("#btn-collapse-sidebar");
                 }
-            };
-            window.__restoreStagedChatFetch = () => {
-                window.fetch = originalFetch;
-                delete window.__pushStagedChatChunk;
-                delete window.__finishStagedChatStream;
-                delete window.__restoreStagedChatFetch;
-            };
-            window.fetch = (url, options = {}) => {
-                if (!String(url).includes("/api/chat/completions")) return originalFetch(url, options);
-                const stream = new ReadableStream({
-                    start(nextController) {
-                        controller = nextController;
-                        closed = false;
-                        emit({ choices: [{ delta: {
-                            content: "First staged response " + "staged-token ".repeat(600),
-                        } }] });
-                        options.signal?.addEventListener("abort", () => {
-                            if (!closed) {
-                                closed = true;
-                                controller.error(new DOMException("Aborted", "AbortError"));
-                            }
-                        }, { once: true });
+                await page.click("#btn-chat-new");
+                chatResponseMode = "ok";
+                await page.fill("#chat-input", "Editable prompt");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                const editAction = page.getByRole("button", { name: "Edit and resend", exact: true });
+                assert.equal(await editAction.count(), 1, "completed user turns expose Edit and resend immediately");
+                await editAction.click();
+                await page.waitForSelector("#confirm-modal:not(.hidden)");
+                await page.click("#confirm-modal-ok");
+                await page.waitForSelector("#chat-edit-status:not([hidden])");
+                assert.match(await page.locator("#chat-edit-status").innerText(), /history copy.*before edit/i);
+                assert.equal(await page.locator("#chat-input").inputValue(), "Editable prompt");
+                await page.click("#chat-edit-status .btn");
+                await page.waitForSelector("#chat-edit-status[hidden]", { state: "attached" });
+
+                await page.click("#btn-chat-new");
+                chatResponseMode = "ok";
+                await page.fill("#chat-input", "Recovery test");
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                const recoveryRequestCount = chatCompletionBodies.length;
+                chatResponseMode = "failed-partial";
+                await page.fill("#chat-input", "Keep this draft");
+                await page.click("#btn-chat-regenerate");
+                await page.waitForFunction(() => document.querySelector(".chat-response-status")?.textContent.includes("previous answer kept"));
+                assert.equal(await page.locator(".chat-message.assistant .chat-bubble").innerText(), "ok");
+                assert.equal(await page.locator(".chat-message.user").count(), 1);
+                assert.equal(await page.locator("#chat-input").inputValue(), "Keep this draft");
+                await page.getByRole("button", { name: "Next answer", exact: true }).click();
+                assert.equal(await page.locator(".chat-message.assistant .chat-bubble").innerText(), "recoverable partial");
+                assert.match(await page.locator(".chat-response-status").innerText(), /Incomplete/);
+                await page.getByRole("button", { name: "Previous answer", exact: true }).click();
+                chatResponseMode = "ok";
+                await page.getByRole("button", { name: "Retry", exact: true }).click();
+                await page.waitForFunction(() => document.querySelector(".chat-message.assistant .chat-response-footer")?.textContent.includes("Answer 3 of 3"));
+                assert.equal(await page.locator(".chat-message.user").count(), 1);
+                assert.equal(chatCompletionBodies.length, recoveryRequestCount + 2);
+                assert.deepEqual(chatCompletionBodies.at(-1).messages, [{ role: "user", content: "Recovery test" }]);
+                const recoveredVersions = await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations"))[0].messages[1].versions);
+                assert.equal(recoveredVersions[1].content, "recoverable partial");
+                assert.equal(recoveredVersions[1].status, "failed");
+            },
+            async "Chat context preview and overflow recovery"() {
+                await startChat();
+                await page.click("#btn-chat-new");
+                await page.fill("#chat-input", "Measure my draft");
+                await page.waitForFunction(() => document.querySelector("#chat-context-label")?.textContent.includes("4,096"));
+                assert.equal(contextBodies.at(-1).messages.at(-1).content, "Measure my draft");
+                assert.equal(await page.locator("#chat-context-label").isVisible(), false, "routine context details stay hidden");
+                assert.equal(await page.locator("#chat-context-warning").isVisible(), false);
+                await page.click("#btn-chat-tools");
+                await page.locator("#chat-context-details summary").press("Enter");
+                assert.equal(await page.locator("#chat-context-label").isVisible(), true);
+                await page.keyboard.press("Escape");
+                assert.equal(await page.locator("#chat-tools").isVisible(), false);
+                assert.equal(await page.locator("#btn-chat-tools").evaluate(el => el === document.activeElement), true);
+                await page.click("#btn-chat-tools");
+                await page.keyboard.press("Shift+Tab");
+                await page.keyboard.press("Shift+Tab");
+                assert.equal(await page.locator("#chat-tools").isVisible(), false, "tabbing outside Context dismisses the panel");
+                await page.click("#btn-chat-tools");
+                await page.locator("#chat-messages").click({ position: { x: 5, y: 5 } });
+                assert.equal(await page.locator("#chat-tools").isVisible(), false, "outside clicks dismiss tools");
+
+                assert.equal(await page.locator("#chat-context-bar").getAttribute("aria-valuenow"), "15");
+                assert.ok(await page.locator("#chat-context-prompt").evaluate(el => getComputedStyle(el).backgroundColor !== "rgba(0, 0, 0, 0)"));
+                chatResponseMode = "overflow";
+                await page.click("#btn-chat-send");
+                await page.waitForFunction(() => document.querySelector(".chat-response-status")?.textContent.includes("Context limit exceeded"));
+                assert.equal(await page.locator("#chat-context-warning").isVisible(), true);
+                assert.match(await page.locator("#chat-context-warning").innerText(), /exceeds/);
+                await page.click("#btn-chat-context-details");
+                assert.equal(await page.locator("#chat-context-label").isVisible(), true);
+                assert.match(await page.locator("#chat-context-label").innerText(), /Includes web results/);
+                assert.equal(await page.locator("#chat-context-bar").getAttribute("data-status"), "overflow");
+                assert.equal(await page.locator(".chat-message.user .chat-bubble").innerText(), "Measure my draft");
+                contextResponseMode = "unavailable";
+                await page.fill("#chat-input", "Changed draft");
+                await page.waitForFunction(() => document.querySelector("#chat-context-label")?.textContent.includes("unavailable"));
+                assert.equal(await page.locator("#chat-context-bar").isVisible(), false);
+                assert.equal(await page.locator("#chat-context-warning").isVisible(), false);
+                assert.equal(await page.locator("#chat-tools").isVisible(), false, "leaving the menu returns space to chat");
+                assert.equal(await page.locator("#btn-chat-send").isEnabled(), true);
+                contextResponseMode = "warning";
+                await page.fill("#chat-input", "Nearly full draft");
+                await page.waitForFunction(() => !document.querySelector("#chat-context-warning").hidden);
+                assert.match(await page.locator("#chat-context-warning").innerText(), /nearly full/);
+                assert.equal(await page.locator("#chat-context-label").isVisible(), false);
+                chatResponseMode = "ok";
+                contextResponseMode = "ok";
+                await page.fill("#chat-input", "Changed draft");
+                await page.waitForFunction(() => document.querySelector("#chat-context-warning").hidden);
+                await page.getByRole("button", { name: "Retry", exact: true }).click();
+                await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                assert.equal(chatCompletionBodies.at(-1).messages.filter(msg => msg.role === "user").length, 1);
+                assert.equal(await page.locator("#chat-input").inputValue(), "Changed draft");
+            },
+            async "Chat compaction controls and transcript preservation"() {
+                await startChat();
+                // Context and compaction are reached through the composer's Context panel;
+                // both it and the summary stay collapsed until requested.
+                contextResponseMode = "compaction";
+                await page.click("#btn-chat-new");
+                assert.equal(await page.locator("#btn-chat-compact").isVisible(), false);
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("n_predict", 512));
+                for (const message of ["Earlier decisions ".repeat(180), "Keep this recent question", "Keep this newest question"]) {
+                    await page.fill("#chat-input", message);
+                    await page.click("#btn-chat-send");
+                    await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
+                }
+                await page.fill("#chat-input", "Draft survives compaction");
+                const transcriptBefore = await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations"))[0].messages);
+                await page.click("#btn-chat-tools");
+                await page.click("#btn-chat-compact");
+                await page.waitForSelector(".chat-compaction-marker");
+                assert.equal(await page.locator(".chat-compaction-marker").getAttribute("open"), null);
+                assert.equal(await page.locator(".chat-message").count(), transcriptBefore.length);
+                assert.equal(await page.locator("#chat-input").inputValue(), "Draft survives compaction");
+                assert.equal(await page.locator("#btn-chat-compact").isDisabled(), true, "compaction needs more turns before running again");
+                await page.click("#btn-chat-view-summary");
+                assert.equal(await page.locator("#chat-tools").isVisible(), false);
+                assert.equal(await page.locator(".chat-compaction-marker").getAttribute("open"), "");
+                assert.match(await page.locator(".chat-compaction-marker pre").innerText(), /<script>literal summary<\/script>/);
+                assert.equal(await page.locator(".chat-compaction-marker script").count(), 0);
+                await page.setViewportSize({ width: 760, height: 800 });
+                await page.click("#btn-chat-tools");
+                await page.locator("#chat-context-details summary").click();
+                const compactLayout = await page.locator("#chat-tools").evaluate(el => ({ width: el.clientWidth, scroll: el.scrollWidth, left: el.getBoundingClientRect().left, right: el.getBoundingClientRect().right }));
+                assert.ok(compactLayout.scroll <= compactLayout.width + 1, "context controls fit a narrow chat");
+                assert.ok(compactLayout.left >= 0 && compactLayout.right <= 760, "tools stay within the viewport");
+                await page.click("#btn-chat-tools-undo-compaction");
+                assert.equal(await page.locator(".chat-compaction-marker").count(), 0);
+                assert.deepEqual(await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations"))[0].messages), transcriptBefore);
+                await page.setViewportSize({ width: 1440, height: 1000 });
+                contextResponseMode = "ok";
+                await page.click("#btn-chat-new");
+            },
+            async "shared sampler controls and preset lifecycle"() {
+                await page.evaluate(() => window.LlamaGui.flagCore.setMultipleFlagValues({ ctx_size: 12345, gpu_layers: "9" }));
+                await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("reasoning_format", "auto"));
+
+                await selectSection(page, "quick-launch");
+                await setRangeValue(page, "#quick-temperature", "0.42");
+                await page.waitForTimeout(250);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.42);
+                await page.waitForFunction(() => document.querySelector("#chat-slider-temp")?.value === "0.42");
+                await setRangeValue(page, "#quick-temperature", "0.96");
+                await setRangeValue(page, "#quick-repeat-penalty", "1.02");
+                await setRangeValue(page, "#quick-presence-penalty", "0.3");
+                await page.waitForTimeout(250);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.96);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().repeat_penalty === 1.02);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().presence_penalty === 0.3);
+                assert.equal(await page.locator("#quick-temperature").evaluate((el) => el.validity.valid), true);
+                assert.equal(await page.locator("#quick-repeat-penalty").evaluate((el) => el.validity.valid), true);
+                assert.equal(await page.locator("#quick-presence-penalty").evaluate((el) => el.validity.valid), true);
+                await selectSection(page, "configure");
+                await page.fill("#config-search", "presence");
+                await page.waitForSelector("#flag-presence_penalty", { state: "visible" });
+                await page.waitForFunction(() => document.querySelector("#flag-presence_penalty")?.value === "0.3");
+                assert.equal(await page.locator("#flag-presence_penalty").evaluate((el) => el.step), "0.1");
+                assert.equal(await page.locator("#flag-presence_penalty").evaluate((el) => el.validity.valid), true);
+                await page.fill("#config-search", "temperature");
+                await page.waitForSelector("#flag-temperature", { state: "visible" });
+                await page.waitForFunction(() => document.querySelector("#flag-temperature")?.value === "0.96");
+                assert.equal(await page.locator("#flag-temperature").evaluate((el) => el.step), "0.01");
+                assert.equal(await page.locator("#flag-temperature").evaluate((el) => el.validity.valid), true);
+
+                await page.fill("#flag-temperature", "");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === undefined);
+                await selectSection(page, "quick-launch");
+                assert.equal(await page.textContent("#quick-temperature-value"), "—");
+                assert.equal(await page.locator("#quick-temperature").getAttribute("data-unset"), "true");
+                assert.ok(!(await page.textContent("#quick-command-preview")).includes("--temp"));
+                await setRangeValue(page, "#quick-temperature", "0.96");
+                await page.waitForTimeout(250);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.96);
+                assert.equal(await page.locator("#quick-temperature").getAttribute("data-unset"), "false");
+                await selectSection(page, "configure");
+
+                await page.fill("#config-search", "checkpoint min");
+                await page.waitForSelector("#flag-checkpoint_every_n_tokens", { state: "visible" });
+                assert.equal(await page.locator("#flag-checkpoint_every_n_tokens").getAttribute("min"), "0");
+                await page.fill("#flag-checkpoint_every_n_tokens", "0");
+                await page.dispatchEvent("#flag-checkpoint_every_n_tokens", "input");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().checkpoint_every_n_tokens === 0);
+                assert.equal(await page.locator("#flag-checkpoint_every_n_tokens").evaluate((el) => el.validity.valid), true);
+                assert.match(await page.textContent("#command-preview-text"), /-cms 0/);
+
+                const launchArgs = await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().args.flat());
+                assert.ok(launchArgs.includes("-c") && launchArgs.includes("12345"));
+                assert.ok(launchArgs.includes("-ngl") && launchArgs.includes("9"));
+                assert.ok(launchArgs.includes("--temp") && launchArgs.includes("0.96"));
+                assert.ok(launchArgs.includes("--repeat-penalty") && launchArgs.includes("1.02"));
+                assert.ok(launchArgs.includes("--presence-penalty") && launchArgs.includes("0.3"));
+                assert.ok(launchArgs.includes("-cms") && launchArgs.includes("0"));
+
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setMultipleFlagValues({
+                        model_draft: "models/draft-smoke.gguf",
+                        ctx_size_draft: 4096,
+                    });
+                });
+                await page.waitForFunction(() => !window.LlamaGui.flagCore.getLaunchArgs().args.flat().includes("-cd"));
+
+                await selectSection(page, "quick-launch");
+                await setRangeValue(page, "#quick-temperature", "0.64");
+                await setRangeValue(page, "#quick-repeat-penalty", "1.07");
+                await setRangeValue(page, "#quick-presence-penalty", "0.4");
+                await page.waitForTimeout(250);
+                await page.locator("#quick-sampling-details > summary").click();
+                await page.fill("#quick-sampler-name", "Smoke Sampler");
+                await page.click("#btn-quick-sampler-save");
+                await page.waitForFunction(() => {
+                    const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
+                    const preset = raw && JSON.parse(raw)["Smoke Sampler"];
+                    return preset?.temperature === 0.64 && preset?.presence_penalty === 0.4;
+                });
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => toast.textContent.includes('Saved sampler preset "Smoke Sampler"')));
+                await setRangeValue(page, "#quick-temperature", "0.11");
+                await page.fill("#quick-sampler-name", "smoke sampler");
+                await page.click("#btn-quick-sampler-save");
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => /already exists/i.test(toast.textContent)));
+                const samplerStoreAfterCollision = await page.evaluate(
+                    () => JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}")
+                );
+                assert.deepEqual(Object.keys(samplerStoreAfterCollision), ["Smoke Sampler"]);
+                assert.equal(samplerStoreAfterCollision["Smoke Sampler"].temperature, 0.64);
+                assert.equal(samplerStoreAfterCollision["Smoke Sampler"].presence_penalty, 0.4);
+                await setRangeValue(page, "#quick-temperature", "0.91");
+                await setRangeValue(page, "#quick-repeat-penalty", "1.19");
+                await setRangeValue(page, "#quick-presence-penalty", "0.9");
+                await page.waitForTimeout(250);
+                await page.selectOption("#quick-sampler-select", "custom|Smoke Sampler");
+                await page.click("#btn-quick-sampler-load");
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.64);
+                await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().presence_penalty === 0.4);
+                await page.waitForFunction(() => document.querySelector("#chat-slider-temp")?.value === "0.64");
+                await selectSection(page, "configure");
+                await page.fill("#config-search", "presence");
+                await page.waitForSelector("#flag-presence_penalty", { state: "visible" });
+                await page.waitForFunction(() => document.querySelector("#flag-presence_penalty")?.value === "0.4");
+
+                // --- Configure sampler preset: sticky selection + rename ------------
+                // Only a real browser can prove these: renderFlags() destroys and rebuilds
+                // the sampler panel, so the <select> the assertions run against is a
+                // different element than the one that was clicked.
+                const configSamplerSelect = ".sampler-presets select";
+                await page.selectOption(configSamplerSelect, "custom|Smoke Sampler");
+                await page.dispatchEvent(configSamplerSelect, "change");
+                // "Smoke Sampler" sorts last, so a reset would fall back to a built-in
+                // and this check would be meaningless if it happened to sort first.
+                assert.equal(
+                    await page.$$eval(`${configSamplerSelect} option`, (options) => options[1]?.value),
+                    "builtin|Balanced",
+                    "the sampler dropdown must not already be on the preset under test"
+                );
+
+                // Tag the current element so the wait proves a rebuild actually happened,
+                // rather than passing because the search never re-rendered.
+                await page.evaluate((selector) => {
+                    document.querySelector(selector).dataset.smokeRebuildTag = "1";
+                }, configSamplerSelect);
+                await page.fill("#config-search", "penalty");
+                await page.waitForFunction(
+                    (selector) => {
+                        const select = document.querySelector(selector);
+                        return select && select.dataset.smokeRebuildTag !== "1";
                     },
+                    configSamplerSelect
+                );
+                assert.equal(
+                    await page.inputValue(configSamplerSelect),
+                    "custom|Smoke Sampler",
+                    "the Configure sampler selection must survive a panel rebuild"
+                );
+
+                await page.locator(".sampler-presets button", { hasText: "Rename" }).click();
+                await page.waitForSelector("#prompt-modal:not(.hidden)");
+                await page.fill("#prompt-modal-input", "Renamed Smoke Sampler");
+                await page.click("#prompt-modal-ok");
+                await page.waitForFunction(() => {
+                    const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
+                    if (!raw) return false;
+                    const store = JSON.parse(raw);
+                    return Object.prototype.hasOwnProperty.call(store, "Renamed Smoke Sampler")
+                        && !Object.prototype.hasOwnProperty.call(store, "Smoke Sampler");
                 });
-                return Promise.resolve(new Response(stream, {
-                    status: 200,
-                    headers: { "Content-Type": "text/event-stream" },
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => toast.textContent.includes('Renamed sampler preset to "Renamed Smoke Sampler"')));
+                assert.equal(
+                    await page.inputValue(configSamplerSelect),
+                    "custom|Renamed Smoke Sampler",
+                    "Configure must follow the renamed preset"
+                );
+                // The mirrored Quick Launch dropdown must follow too, not fall back to
+                // the placeholder because the old value string vanished. Read it through
+                // evaluate: that section is hidden while Configure is showing.
+                assert.equal(
+                    await page.evaluate(() => document.querySelector("#quick-sampler-select")?.value),
+                    "custom|Renamed Smoke Sampler",
+                    "Quick Launch must follow a rename made from Configure"
+                );
+
+                // A built-in is not renameable, and the attempt must not disturb the store.
+                await page.selectOption(configSamplerSelect, "builtin|Balanced");
+                await page.dispatchEvent(configSamplerSelect, "change");
+                await page.locator(".sampler-presets button", { hasText: "Rename" }).click();
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => toast.textContent.includes("Built-in sampler presets cannot be renamed.")));
+                assert.equal(
+                    await page.evaluate(() => document.querySelector("#prompt-modal")?.classList.contains("hidden")),
+                    true,
+                    "renaming a built-in must be refused before the prompt opens"
+                );
+                assert.deepEqual(
+                    await page.evaluate(() => Object.keys(JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}"))),
+                    ["Renamed Smoke Sampler"],
+                    "a refused rename must leave the sampler store untouched"
+                );
+
+                await page.setInputFiles('.sampler-presets input[type="file"]', {
+                    name: "samplers.json",
+                    mimeType: "application/json",
+                    buffer: Buffer.from(JSON.stringify({
+                        presets: {
+                            "Would Be Partial": { temperature: 0.2 },
+                            balanced: { temperature: 0.1 },
+                        },
+                    })),
+                });
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => /already exists/i.test(toast.textContent)));
+                assert.deepEqual(
+                    await page.evaluate(() => Object.keys(JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}"))),
+                    ["Renamed Smoke Sampler"],
+                    "a colliding sampler import must reject the entire batch before writing"
+                );
+
+                await page.setInputFiles('.sampler-presets input[type="file"]', {
+                    name: "malformed-samplers.json",
+                    mimeType: "application/json",
+                    buffer: Buffer.from(JSON.stringify({
+                        presets: {
+                            "Would Also Be Partial": { temperature: 0.3 },
+                            Broken: "not an object",
+                        },
+                    })),
+                });
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => /must contain an object of sampler values/i.test(toast.textContent)));
+                assert.deepEqual(
+                    await page.evaluate(() => Object.keys(JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}"))),
+                    ["Renamed Smoke Sampler"],
+                    "a malformed sampler import must reject the entire batch before writing"
+                );
+
+                // A rename made from Quick Launch must carry the Configure panel's
+                // remembered selection too (the reverse direction of the check above).
+                await page.selectOption(configSamplerSelect, "custom|Renamed Smoke Sampler");
+                await page.dispatchEvent(configSamplerSelect, "change");
+                await selectSection(page, "quick-launch");
+                await page.selectOption("#quick-sampler-select", "custom|Renamed Smoke Sampler");
+                await page.click("#btn-quick-sampler-rename");
+                await page.waitForSelector("#prompt-modal:not(.hidden)");
+                await page.fill("#prompt-modal-input", "Renamed Again Sampler");
+                await page.click("#prompt-modal-ok");
+                await page.waitForFunction(() => {
+                    const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
+                    return raw && Object.prototype.hasOwnProperty.call(JSON.parse(raw), "Renamed Again Sampler");
+                });
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => toast.textContent.includes('Renamed sampler preset to "Renamed Again Sampler"')));
+                await selectSection(page, "configure");
+                assert.equal(
+                    await page.inputValue(configSamplerSelect),
+                    "custom|Renamed Again Sampler",
+                    "Configure must follow a rename made from Quick Launch"
+                );
+
+                await selectSection(page, "quick-launch");
+                await page.selectOption("#quick-sampler-select", "custom|Renamed Again Sampler");
+                const deletePromise = page.waitForFunction(() => {
+                    const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
+                    return raw && !Object.prototype.hasOwnProperty.call(JSON.parse(raw), "Renamed Again Sampler");
+                });
+                await page.click("#btn-quick-sampler-delete");
+                await page.click("#confirm-modal-ok");
+                await deletePromise;
+                await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
+                    .some((toast) => toast.textContent.includes('Deleted sampler preset "Renamed Again Sampler"')));
+            },
+            async "API endpoints and remote tunnel states"() {
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setMultipleFlagValues({
+                        host: "0.0.0.0",
+                        port: 9099,
+                        alias: "smoke-alias",
+                        api_key: "secret",
+                    });
+                    window.LlamaGui.apiTab.updateEndpoints();
+                });
+                await selectSection(page, "api");
+                await page.waitForFunction(() => document.querySelector("#api-base-url")?.textContent === "http://0.0.0.0:9099");
+                assert.match(await page.textContent("#api-endpoints-list"), /http:\/\/0\.0\.0\.0:9099\/v1\/chat\/completions/);
+                assert.match(await page.textContent("#api-snippets-list"), /smoke-alias/);
+                assert.match(await page.textContent("#api-snippets-list"), /Authorization: Bearer YOUR_API_KEY/);
+
+                const tunnelStates = await page.evaluate(() => {
+                    const readState = () => ({
+                        badge: document.querySelector("#remote-tunnel-badge")?.textContent,
+                        badgeClasses: Array.from(document.querySelector("#remote-tunnel-badge")?.classList || []),
+                        status: document.querySelector("#remote-tunnel-status")?.textContent,
+                        urlHidden: document.querySelector("#remote-tunnel-url-row")?.classList.contains("hidden"),
+                        url: document.querySelector("#remote-tunnel-url")?.textContent,
+                        openAiUrl: document.querySelector("#remote-openai-url")?.textContent,
+                        startDisabled: document.querySelector("#btn-start-remote-tunnel")?.disabled,
+                        stopHidden: document.querySelector("#btn-stop-remote-tunnel")?.classList.contains("hidden"),
+                    });
+                    const states = {};
+                    window.LlamaGui.remoteTunnelUi.renderStatus({ status: "idle", message: "Remote tunnel is not running." });
+                    states.idle = readState();
+                    window.LlamaGui.remoteTunnelUi.renderStatus({ status: "starting", message: "Starting Cloudflare tunnel..." });
+                    states.starting = readState();
+                    window.LlamaGui.remoteTunnelUi.renderStatus({
+                        status: "running",
+                        message: "Remote tunnel is running.",
+                        url: "https://smoke.trycloudflare.com/",
+                    });
+                    states.running = readState();
+                    window.LlamaGui.remoteTunnelUi.renderStatus({ status: "error", message: "Tunnel failed" });
+                    states.error = readState();
+                    return states;
+                });
+                assert.equal(tunnelStates.idle.badge, "idle");
+                assert.equal(tunnelStates.idle.urlHidden, true);
+                assert.equal(tunnelStates.starting.startDisabled, true);
+                assert.equal(tunnelStates.starting.stopHidden, false);
+                assert.ok(tunnelStates.starting.badgeClasses.includes("working"));
+                assert.equal(tunnelStates.running.urlHidden, false);
+                assert.equal(tunnelStates.running.url, "https://smoke.trycloudflare.com/");
+                assert.equal(tunnelStates.running.openAiUrl, "https://smoke.trycloudflare.com/v1");
+                assert.ok(tunnelStates.running.badgeClasses.includes("running"));
+                assert.equal(tunnelStates.error.status, "Tunnel failed");
+                assert.ok(tunnelStates.error.badgeClasses.includes("error"));
+            },
+            async "external server connection and remembered targets"() {
+                await selectSection(page, "api");
+                // Connecting to a llama-server this GUI did not launch must unlock Chat
+                // on its own, with no process running.
+                statusRunning = false;
+                activeProcessTool = "";
+                statusActiveRuntime = null;
+                await page.evaluate(() => refreshRuntimeStatusPanels());
+                assert.equal(await page.textContent("#external-server-badge"), "Not connected");
+                assert.equal(
+                    await page.locator("#external-server-summary").evaluate((el) => el.classList.contains("hidden")),
+                    true
+                );
+
+                await page.locator("#api-external-details > summary").click();
+                await page.fill("#external-server-host", "127.0.0.1");
+                await page.fill("#external-server-port", "9001");
+                await page.fill("#external-server-key", "external-secret");
+                await page.click("#btn-connect-external-server");
+                await page.waitForFunction(
+                    () => document.querySelector("#external-server-badge")?.textContent === "Connected"
+                );
+                assert.deepEqual(externalTargetRequests.at(-1), {
+                    method: "POST",
+                    body: { host: "127.0.0.1", port: "9001", api_key: "external-secret" },
+                });
+                assert.equal(await page.textContent("#external-server-target"), "127.0.0.1:9001");
+                assert.equal(
+                    await page.locator("#btn-disconnect-external-server").evaluate((el) => el.classList.contains("hidden")),
+                    false
+                );
+                assert.match(await page.textContent("#api-status-note"), /started outside this GUI/);
+
+                await selectSection(page, "chat");
+                await page.waitForFunction(() => document.querySelector("#chat-input")?.disabled === false);
+                assert.equal(await page.locator("#btn-chat-send").isDisabled(), false);
+
+                await selectSection(page, "api");
+                await page.click("#btn-disconnect-external-server");
+                await page.waitForFunction(
+                    () => document.querySelector("#external-server-badge")?.textContent === "Not connected"
+                );
+                assert.equal(externalTargetRequests.at(-1).method, "DELETE");
+                assert.equal(await page.inputValue("#external-server-key"), "");
+                assert.equal(rememberedTarget, null, "disconnecting must also forget the saved address");
+
+                await selectSection(page, "chat");
+                await page.waitForFunction(() => document.querySelector("#chat-input")?.disabled === true);
+                await selectSection(page, "api");
+
+                // A keyless address saved by an earlier session reconnects by itself.
+                rememberedTarget = { host: "127.0.0.1", port: 9002, label: "Saved", api_key_required: false };
+                await page.fill("#external-server-host", "");
+                await page.fill("#external-server-port", "");
+                await page.evaluate(() => window.LlamaGui.externalServerUi.restore());
+                await page.waitForFunction(
+                    () => document.querySelector("#external-server-badge")?.textContent === "Connected"
+                );
+                assert.deepEqual(externalTargetRequests.at(-1), { method: "POST", body: { restore: true } });
+                assert.equal(await page.inputValue("#external-server-host"), "127.0.0.1");
+                assert.equal(await page.inputValue("#external-server-port"), "9002");
+                assert.equal(
+                    await page.textContent("#external-server-note"),
+                    "Reconnected to Saved (127.0.0.1:9002)."
+                );
+
+                // Reload with an already-connected external target. The accepted
+                // initial status path must seed inference exactly once without a new
+                // external revision or a duplicate reset.
+                await page.reload({ waitUntil: "domcontentloaded" });
+                await page.waitForFunction(() => window.LlamaGui?.flagCore && window.LlamaGui?.monitorUi);
+                await page.waitForFunction(() => typeof inferenceStats !== "undefined"
+                    && inferenceStats.getTargetKey() === "ext:0:127.0.0.1:9002");
+                assert.equal(await page.evaluate(() => inferenceStats.getTargetKey()), "ext:0:127.0.0.1:9002",
+                    "an already-active target must not mint a new external revision");
+                assert.equal(
+                    await page.locator("#stats-bar").evaluate((el) => el.classList.contains("hidden")),
+                    false,
+                    "an already-connected external target must restore inference polling",
+                );
+
+                // One that needed a key is prefilled and explained, never auto-connected.
+                externalChatTarget = null;
+                rememberedTarget = { host: "127.0.0.1", port: 9003, label: "", api_key_required: true };
+                await page.evaluate(() => refreshRuntimeStatusPanels());
+                const requestsBeforeKeyedRestore = externalTargetRequests.length;
+                await page.evaluate(() => window.LlamaGui.externalServerUi.restore());
+                assert.equal(
+                    externalTargetRequests.length,
+                    requestsBeforeKeyedRestore + 1,
+                    "a key-protected address must only be read, never reconnected"
+                );
+                assert.equal(externalTargetRequests.at(-1).method, "GET");
+                assert.equal(await page.inputValue("#external-server-port"), "9003");
+                assert.equal(
+                    await page.textContent("#external-server-note"),
+                    "Re-enter the API key for 127.0.0.1:9003 to reconnect."
+                );
+                assert.equal(await page.textContent("#external-server-badge"), "Not connected");
+                rememberedTarget = null;
+            },
+            async "custom launch arguments and environment validation"() {
+                await selectSection(page, "configure");
+                await page.selectOption("#model-select", "");
+                await page.dispatchEvent("#model-select", "change");
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setCurrentTool("llama-server");
+                    window.LlamaGui.flagCore.setMultipleFlagValues({
+                        hf_repo: "smoke/remote-model",
+                        api_key: undefined,
+                        custom_args: "--api-key one-off-smoke-key",
+                    });
+                });
+                await selectSection(page, "quick-launch");
+                await page.waitForFunction(() => document.querySelector("#quick-chip-model .chip-text")?.textContent === "Model: remote source");
+                assert.ok((await page.locator("#quick-chip-model").getAttribute("class")).includes("ok"));
+                assert.equal(await page.textContent("#quick-chip-api .chip-text"), "API: protected");
+                assert.ok((await page.locator("#quick-api-protected-badge").getAttribute("class")).includes("visible"));
+
+                await page.evaluate(() => window.LlamaGui.flagCore.setCurrentTool("llama-cli"));
+                await page.waitForFunction(() => document.querySelector("#quick-chip-api .chip-text")?.textContent === "API: not applicable");
+                assert.ok(!(await page.locator("#quick-api-protected-badge").getAttribute("class")).includes("visible"));
+
+                await page.evaluate(() => {
+                    window.LlamaGui.flagCore.setCurrentTool("llama-server");
+                    window.LlamaGui.flagCore.setMultipleFlagValues({
+                        hf_repo: undefined,
+                        custom_args: undefined,
+                    });
+                });
+                await selectSection(page, "configure");
+                await page.selectOption("#model-select", "smoke-model.gguf");
+                await page.dispatchEvent("#model-select", "change");
+                await page.fill("#custom-launch-args", "--threads 8\n--chat-template-kwargs '{\"preserve_thinking\":true}'");
+                await page.dispatchEvent("#custom-launch-args", "input");
+                await page.waitForFunction(() => document.querySelector("#command-preview-text")?.textContent.includes("--threads 8"));
+                const customState = await page.evaluate(() => ({
+                    raw: window.LlamaGui.flagCore.getFlagValues().custom_args,
+                    args: window.LlamaGui.flagCore.getLaunchArgs().args.flat(),
                 }));
-            };
-        });
-        await page.fill("#chat-input", "Staged streaming response");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("First staged response"));
-        const scrolledAway = await page.evaluate(() => {
-            const container = document.getElementById("chat-messages");
-            const maxScroll = container.scrollHeight - container.clientHeight;
-            if (maxScroll <= 80) throw new Error("staged response did not create a scrollable transcript");
-            container.scrollTop = Math.max(0, maxScroll - 240);
-            if (maxScroll - (container.scrollTop + container.clientHeight) <= 80) container.scrollTop = 0;
-            container.dispatchEvent(new Event("scroll"));
-            return {
-                top: container.scrollTop,
-                maxScroll,
-                clientHeight: container.clientHeight,
-            };
-        });
-        assert.ok(scrolledAway.maxScroll - (scrolledAway.top + scrolledAway.clientHeight) > 80,
-            "the staged reader is scrolled away from the latest response");
-        await page.evaluate(() => window.__pushStagedChatChunk({
-            choices: [{ delta: { reasoning_content: "Later reasoning chunk" } }],
-        }));
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Later reasoning chunk"));
-        assert.equal(await page.evaluate(() => document.querySelector("#chat-messages").scrollTop), scrolledAway.top,
-            "later reasoning preserves an away-from-bottom reader position");
-        await page.evaluate(() => window.__pushStagedChatChunk({
-            choices: [{ delta: { content: "Later content chunk" } }],
-        }));
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Later content chunk"));
-        assert.equal(await page.evaluate(() => document.querySelector("#chat-messages").scrollTop), scrolledAway.top,
-            "later content and reasoning preserve an away-from-bottom reader position");
-        assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), true,
-            "Jump to latest stays available while a reader is scrolled away");
-        await page.evaluate(() => {
-            window.__pushStagedChatChunk({ choices: [{ delta: {}, finish_reason: "stop" }] });
-            window.__pushStagedChatChunk({
-                choices: [],
-                usage: { prompt_tokens: 13, completion_tokens: 7, total_tokens: 20 },
-                timings: { predicted_per_second: 12.5 },
-            });
-        });
-        await page.evaluate(() => window.__finishStagedChatStream());
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), true,
-            "Jump to latest remains available after a completed away-from-bottom stream");
-        const stagedMetadata = await page.locator(".chat-response-metadata").last().innerText();
-        assert.match(stagedMetadata, /Prompt: 13/);
-        assert.match(stagedMetadata, /Completion: 7/);
-        assert.match(stagedMetadata, /Total: 20/);
-        assert.match(stagedMetadata, /Speed: 12\.5 tok\/s/);
-        assert.match(stagedMetadata, /Stop: Finished/);
-        assert.doesNotMatch(stagedMetadata, /Stop: stop/i);
-        assert.match(await page.locator(".chat-reasoning-body").last().textContent(), /Later reasoning chunk/);
-
-        await page.locator("#btn-chat-jump-latest").click();
-        assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), false,
-            "Jump to latest resumes follow mode");
-        await page.click("#btn-chat-new");
-        await page.fill("#chat-input", "Follow after jump");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("First staged response"));
-        const followScroll = await page.evaluate(() => {
-            const container = document.getElementById("chat-messages");
-            const maxScroll = container.scrollHeight - container.clientHeight;
-            if (maxScroll <= 80) throw new Error("follow response did not create a scrollable transcript");
-            container.scrollTop = 0;
-            container.dispatchEvent(new Event("scroll"));
-            return { top: container.scrollTop, maxScroll, clientHeight: container.clientHeight };
-        });
-        assert.ok(followScroll.maxScroll - (followScroll.top + followScroll.clientHeight) > 80);
-        await page.locator("#btn-chat-jump-latest").click();
-        await page.evaluate(() => window.__pushStagedChatChunk({
-            choices: [{ delta: { content: "Final followed chunk" } }],
-        }));
-        await page.waitForFunction(() => document.querySelector("#chat-messages")?.textContent.includes("Final followed chunk"));
-        await page.waitForFunction(() => {
-            const container = document.querySelector("#chat-messages");
-            return container.scrollHeight - (container.scrollTop + container.clientHeight) <= 80;
-        });
-        await page.evaluate(() => window.__finishStagedChatStream());
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        assert.equal(await page.locator("#btn-chat-jump-latest").isVisible(), false,
-            "a followed stream finishes at the latest response");
-        await page.evaluate(() => window.__restoreStagedChatFetch());
-
-        if (!await page.locator("#chat-sidebar").evaluate((element) => element.classList.contains("collapsed"))) {
-            await page.click("#btn-collapse-sidebar");
-        }
-        await page.click("#btn-chat-new");
-        chatResponseMode = "ok";
-        await page.fill("#chat-input", "Editable prompt");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        const editAction = page.getByRole("button", { name: "Edit and resend", exact: true });
-        assert.equal(await editAction.count(), 1, "completed user turns expose Edit and resend immediately");
-        await editAction.click();
-        await page.waitForSelector("#confirm-modal:not(.hidden)");
-        await page.click("#confirm-modal-ok");
-        await page.waitForSelector("#chat-edit-status:not([hidden])");
-        assert.match(await page.locator("#chat-edit-status").innerText(), /history copy.*before edit/i);
-        assert.equal(await page.locator("#chat-input").inputValue(), "Editable prompt");
-        await page.click("#chat-edit-status .btn");
-        await page.waitForSelector("#chat-edit-status[hidden]", { state: "attached" });
-
-        await page.click("#btn-chat-new");
-        chatResponseMode = "ok";
-        await page.fill("#chat-input", "Recovery test");
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        const recoveryRequestCount = chatCompletionBodies.length;
-        chatResponseMode = "failed-partial";
-        await page.fill("#chat-input", "Keep this draft");
-        await page.click("#btn-chat-regenerate");
-        await page.waitForFunction(() => document.querySelector(".chat-response-status")?.textContent.includes("previous answer kept"));
-        assert.equal(await page.locator(".chat-message.assistant .chat-bubble").innerText(), "ok");
-        assert.equal(await page.locator(".chat-message.user").count(), 1);
-        assert.equal(await page.locator("#chat-input").inputValue(), "Keep this draft");
-        await page.getByRole("button", { name: "Next answer", exact: true }).click();
-        assert.equal(await page.locator(".chat-message.assistant .chat-bubble").innerText(), "recoverable partial");
-        assert.match(await page.locator(".chat-response-status").innerText(), /Incomplete/);
-        await page.getByRole("button", { name: "Previous answer", exact: true }).click();
-        chatResponseMode = "ok";
-        await page.getByRole("button", { name: "Retry", exact: true }).click();
-        await page.waitForFunction(() => document.querySelector(".chat-message.assistant .chat-response-footer")?.textContent.includes("Answer 3 of 3"));
-        assert.equal(await page.locator(".chat-message.user").count(), 1);
-        assert.equal(chatCompletionBodies.length, recoveryRequestCount + 2);
-        assert.deepEqual(chatCompletionBodies.at(-1).messages, [{ role: "user", content: "Recovery test" }]);
-        const recoveredVersions = await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations"))[0].messages[1].versions);
-        assert.equal(recoveredVersions[1].content, "recoverable partial");
-        assert.equal(recoveredVersions[1].status, "failed");
-
-        await page.click("#btn-chat-new");
-        await page.fill("#chat-input", "Measure my draft");
-        await page.waitForFunction(() => document.querySelector("#chat-context-label")?.textContent.includes("4,096"));
-        assert.equal(contextBodies.at(-1).messages.at(-1).content, "Measure my draft");
-        assert.equal(await page.locator("#chat-context-label").isVisible(), false, "routine context details stay hidden");
-        assert.equal(await page.locator("#chat-context-warning").isVisible(), false);
-        await page.click("#btn-chat-tools");
-        await page.locator("#chat-context-details summary").press("Enter");
-        assert.equal(await page.locator("#chat-context-label").isVisible(), true);
-        await page.keyboard.press("Escape");
-        assert.equal(await page.locator("#chat-tools").isVisible(), false);
-        assert.equal(await page.locator("#btn-chat-tools").evaluate(el => el === document.activeElement), true);
-        await page.click("#btn-chat-tools");
-        await page.keyboard.press("Shift+Tab");
-        await page.keyboard.press("Shift+Tab");
-        assert.equal(await page.locator("#chat-tools").isVisible(), false, "tabbing outside Context dismisses the panel");
-        await page.click("#btn-chat-tools");
-        await page.locator("#chat-messages").click({ position: { x: 5, y: 5 } });
-        assert.equal(await page.locator("#chat-tools").isVisible(), false, "outside clicks dismiss tools");
-
-        assert.equal(await page.locator("#chat-context-bar").getAttribute("aria-valuenow"), "15");
-        assert.ok(await page.locator("#chat-context-prompt").evaluate(el => getComputedStyle(el).backgroundColor !== "rgba(0, 0, 0, 0)"));
-        chatResponseMode = "overflow";
-        await page.click("#btn-chat-send");
-        await page.waitForFunction(() => document.querySelector(".chat-response-status")?.textContent.includes("Context limit exceeded"));
-        assert.equal(await page.locator("#chat-context-warning").isVisible(), true);
-        assert.match(await page.locator("#chat-context-warning").innerText(), /exceeds/);
-        await page.click("#btn-chat-context-details");
-        assert.equal(await page.locator("#chat-context-label").isVisible(), true);
-        assert.match(await page.locator("#chat-context-label").innerText(), /Includes web results/);
-        assert.equal(await page.locator("#chat-context-bar").getAttribute("data-status"), "overflow");
-        assert.equal(await page.locator(".chat-message.user .chat-bubble").innerText(), "Measure my draft");
-        contextResponseMode = "unavailable";
-        await page.fill("#chat-input", "Changed draft");
-        await page.waitForFunction(() => document.querySelector("#chat-context-label")?.textContent.includes("unavailable"));
-        assert.equal(await page.locator("#chat-context-bar").isVisible(), false);
-        assert.equal(await page.locator("#chat-context-warning").isVisible(), false);
-        assert.equal(await page.locator("#chat-tools").isVisible(), false, "leaving the menu returns space to chat");
-        assert.equal(await page.locator("#btn-chat-send").isEnabled(), true);
-        contextResponseMode = "warning";
-        await page.fill("#chat-input", "Nearly full draft");
-        await page.waitForFunction(() => !document.querySelector("#chat-context-warning").hidden);
-        assert.match(await page.locator("#chat-context-warning").innerText(), /nearly full/);
-        assert.equal(await page.locator("#chat-context-label").isVisible(), false);
-        chatResponseMode = "ok";
-        contextResponseMode = "ok";
-        await page.fill("#chat-input", "Changed draft");
-        await page.waitForFunction(() => document.querySelector("#chat-context-warning").hidden);
-        await page.getByRole("button", { name: "Retry", exact: true }).click();
-        await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        assert.equal(chatCompletionBodies.at(-1).messages.filter(msg => msg.role === "user").length, 1);
-        assert.equal(await page.locator("#chat-input").inputValue(), "Changed draft");
-
-        // Context and compaction are reached through the composer's Context panel;
-        // both it and the summary stay collapsed until requested.
-        contextResponseMode = "compaction";
-        await page.click("#btn-chat-new");
-        assert.equal(await page.locator("#btn-chat-compact").isVisible(), false);
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("n_predict", 512));
-        for (const message of ["Earlier decisions ".repeat(180), "Keep this recent question", "Keep this newest question"]) {
-            await page.fill("#chat-input", message);
-            await page.click("#btn-chat-send");
-            await page.waitForFunction(() => document.querySelector("#btn-chat-send")?.style.display !== "none");
-        }
-        await page.fill("#chat-input", "Draft survives compaction");
-        const transcriptBefore = await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations"))[0].messages);
-        await page.click("#btn-chat-tools");
-        await page.click("#btn-chat-compact");
-        await page.waitForSelector(".chat-compaction-marker");
-        assert.equal(await page.locator(".chat-compaction-marker").getAttribute("open"), null);
-        assert.equal(await page.locator(".chat-message").count(), transcriptBefore.length);
-        assert.equal(await page.locator("#chat-input").inputValue(), "Draft survives compaction");
-        assert.equal(await page.locator("#btn-chat-compact").isDisabled(), true, "compaction needs more turns before running again");
-        await page.click("#btn-chat-view-summary");
-        assert.equal(await page.locator("#chat-tools").isVisible(), false);
-        assert.equal(await page.locator(".chat-compaction-marker").getAttribute("open"), "");
-        assert.match(await page.locator(".chat-compaction-marker pre").innerText(), /<script>literal summary<\/script>/);
-        assert.equal(await page.locator(".chat-compaction-marker script").count(), 0);
-        await page.setViewportSize({ width: 760, height: 800 });
-        await page.click("#btn-chat-tools");
-        await page.locator("#chat-context-details summary").click();
-        const compactLayout = await page.locator("#chat-tools").evaluate(el => ({ width: el.clientWidth, scroll: el.scrollWidth, left: el.getBoundingClientRect().left, right: el.getBoundingClientRect().right }));
-        assert.ok(compactLayout.scroll <= compactLayout.width + 1, "context controls fit a narrow chat");
-        assert.ok(compactLayout.left >= 0 && compactLayout.right <= 760, "tools stay within the viewport");
-        await page.click("#btn-chat-tools-undo-compaction");
-        assert.equal(await page.locator(".chat-compaction-marker").count(), 0);
-        assert.deepEqual(await page.evaluate(() => JSON.parse(localStorage.getItem("llama_gui_conversations"))[0].messages), transcriptBefore);
-        await page.setViewportSize({ width: 1440, height: 1000 });
-        contextResponseMode = "ok";
-        await page.click("#btn-chat-new");
-
-        await page.evaluate(() => window.LlamaGui.flagCore.setFlagValue("reasoning_format", "auto"));
-
-        await selectSection(page, "quick-launch");
-        await setRangeValue(page, "#quick-temperature", "0.42");
-        await page.waitForTimeout(250);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.42);
-        await page.waitForFunction(() => document.querySelector("#chat-slider-temp")?.value === "0.42");
-        await setRangeValue(page, "#quick-temperature", "0.96");
-        await setRangeValue(page, "#quick-repeat-penalty", "1.02");
-        await setRangeValue(page, "#quick-presence-penalty", "0.3");
-        await page.waitForTimeout(250);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.96);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().repeat_penalty === 1.02);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().presence_penalty === 0.3);
-        assert.equal(await page.locator("#quick-temperature").evaluate((el) => el.validity.valid), true);
-        assert.equal(await page.locator("#quick-repeat-penalty").evaluate((el) => el.validity.valid), true);
-        assert.equal(await page.locator("#quick-presence-penalty").evaluate((el) => el.validity.valid), true);
-        await selectSection(page, "configure");
-        await page.fill("#config-search", "presence");
-        await page.waitForSelector("#flag-presence_penalty", { state: "visible" });
-        await page.waitForFunction(() => document.querySelector("#flag-presence_penalty")?.value === "0.3");
-        assert.equal(await page.locator("#flag-presence_penalty").evaluate((el) => el.step), "0.1");
-        assert.equal(await page.locator("#flag-presence_penalty").evaluate((el) => el.validity.valid), true);
-        await page.fill("#config-search", "temperature");
-        await page.waitForSelector("#flag-temperature", { state: "visible" });
-        await page.waitForFunction(() => document.querySelector("#flag-temperature")?.value === "0.96");
-        assert.equal(await page.locator("#flag-temperature").evaluate((el) => el.step), "0.01");
-        assert.equal(await page.locator("#flag-temperature").evaluate((el) => el.validity.valid), true);
-
-        await page.fill("#flag-temperature", "");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === undefined);
-        await selectSection(page, "quick-launch");
-        assert.equal(await page.textContent("#quick-temperature-value"), "—");
-        assert.equal(await page.locator("#quick-temperature").getAttribute("data-unset"), "true");
-        assert.ok(!(await page.textContent("#quick-command-preview")).includes("--temp"));
-        await setRangeValue(page, "#quick-temperature", "0.96");
-        await page.waitForTimeout(250);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.96);
-        assert.equal(await page.locator("#quick-temperature").getAttribute("data-unset"), "false");
-        await selectSection(page, "configure");
-
-        await page.fill("#config-search", "checkpoint min");
-        await page.waitForSelector("#flag-checkpoint_every_n_tokens", { state: "visible" });
-        assert.equal(await page.locator("#flag-checkpoint_every_n_tokens").getAttribute("min"), "0");
-        await page.fill("#flag-checkpoint_every_n_tokens", "0");
-        await page.dispatchEvent("#flag-checkpoint_every_n_tokens", "input");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().checkpoint_every_n_tokens === 0);
-        assert.equal(await page.locator("#flag-checkpoint_every_n_tokens").evaluate((el) => el.validity.valid), true);
-        assert.match(await page.textContent("#command-preview-text"), /-cms 0/);
-
-        const launchArgs = await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().args.flat());
-        assert.ok(launchArgs.includes("-c") && launchArgs.includes("12345"));
-        assert.ok(launchArgs.includes("-ngl") && launchArgs.includes("9"));
-        assert.ok(launchArgs.includes("--temp") && launchArgs.includes("0.96"));
-        assert.ok(launchArgs.includes("--repeat-penalty") && launchArgs.includes("1.02"));
-        assert.ok(launchArgs.includes("--presence-penalty") && launchArgs.includes("0.3"));
-        assert.ok(launchArgs.includes("-cms") && launchArgs.includes("0"));
-
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setMultipleFlagValues({
-                model_draft: "models/draft-smoke.gguf",
-                ctx_size_draft: 4096,
-            });
-        });
-        await page.waitForFunction(() => !window.LlamaGui.flagCore.getLaunchArgs().args.flat().includes("-cd"));
-
-        await selectSection(page, "quick-launch");
-        await setRangeValue(page, "#quick-temperature", "0.64");
-        await setRangeValue(page, "#quick-repeat-penalty", "1.07");
-        await setRangeValue(page, "#quick-presence-penalty", "0.4");
-        await page.waitForTimeout(250);
-        await page.locator("#quick-sampling-details > summary").click();
-        await page.fill("#quick-sampler-name", "Smoke Sampler");
-        await page.click("#btn-quick-sampler-save");
-        await page.waitForFunction(() => {
-            const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
-            const preset = raw && JSON.parse(raw)["Smoke Sampler"];
-            return preset?.temperature === 0.64 && preset?.presence_penalty === 0.4;
-        });
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => toast.textContent.includes('Saved sampler preset "Smoke Sampler"')));
-        await setRangeValue(page, "#quick-temperature", "0.11");
-        await page.fill("#quick-sampler-name", "smoke sampler");
-        await page.click("#btn-quick-sampler-save");
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => /already exists/i.test(toast.textContent)));
-        const samplerStoreAfterCollision = await page.evaluate(
-            () => JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}")
-        );
-        assert.deepEqual(Object.keys(samplerStoreAfterCollision), ["Smoke Sampler"]);
-        assert.equal(samplerStoreAfterCollision["Smoke Sampler"].temperature, 0.64);
-        assert.equal(samplerStoreAfterCollision["Smoke Sampler"].presence_penalty, 0.4);
-        await setRangeValue(page, "#quick-temperature", "0.91");
-        await setRangeValue(page, "#quick-repeat-penalty", "1.19");
-        await setRangeValue(page, "#quick-presence-penalty", "0.9");
-        await page.waitForTimeout(250);
-        await page.selectOption("#quick-sampler-select", "custom|Smoke Sampler");
-        await page.click("#btn-quick-sampler-load");
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().temperature === 0.64);
-        await page.waitForFunction(() => window.LlamaGui.flagCore.getFlagValues().presence_penalty === 0.4);
-        await page.waitForFunction(() => document.querySelector("#chat-slider-temp")?.value === "0.64");
-        await selectSection(page, "configure");
-        await page.fill("#config-search", "presence");
-        await page.waitForSelector("#flag-presence_penalty", { state: "visible" });
-        await page.waitForFunction(() => document.querySelector("#flag-presence_penalty")?.value === "0.4");
-
-        // --- Configure sampler preset: sticky selection + rename ------------
-        // Only a real browser can prove these: renderFlags() destroys and rebuilds
-        // the sampler panel, so the <select> the assertions run against is a
-        // different element than the one that was clicked.
-        const configSamplerSelect = ".sampler-presets select";
-        await page.selectOption(configSamplerSelect, "custom|Smoke Sampler");
-        await page.dispatchEvent(configSamplerSelect, "change");
-        // "Smoke Sampler" sorts last, so a reset would fall back to a built-in
-        // and this check would be meaningless if it happened to sort first.
-        assert.equal(
-            await page.$$eval(`${configSamplerSelect} option`, (options) => options[1]?.value),
-            "builtin|Balanced",
-            "the sampler dropdown must not already be on the preset under test"
-        );
-
-        // Tag the current element so the wait proves a rebuild actually happened,
-        // rather than passing because the search never re-rendered.
-        await page.evaluate((selector) => {
-            document.querySelector(selector).dataset.smokeRebuildTag = "1";
-        }, configSamplerSelect);
-        await page.fill("#config-search", "penalty");
-        await page.waitForFunction(
-            (selector) => {
-                const select = document.querySelector(selector);
-                return select && select.dataset.smokeRebuildTag !== "1";
+                assert.equal(customState.raw, "--threads 8\n--chat-template-kwargs '{\"preserve_thinking\":true}'");
+                assert.ok(customState.args.includes("--threads") && customState.args.includes("8"));
+                assert.ok(customState.args.includes("--chat-template-kwargs"));
+                assert.ok(customState.args.includes('{"preserve_thinking":true}'));
+
+                const environmentText = "LLAMA_MMAP_RANDOM=1\nGGML_OP_OFFLOAD_MIN_BATCH=512";
+                await page.fill("#environment-variables", environmentText);
+                assert.deepEqual(await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().env), {
+                    LLAMA_MMAP_RANDOM: "1", GGML_OP_OFFLOAD_MIN_BATCH: "512",
+                });
+                assert.equal(await page.evaluate(() => window.LlamaGui.flagCore.getFlagValues().custom_env), environmentText);
+                assert.equal(await page.evaluate(() => document.querySelector(".custom-launch-args-panel").nextElementSibling.className), "environment-variables-panel");
+                assert.equal(await page.evaluate(() => document.querySelector(".environment-variables-panel").nextElementSibling.id), "server-address");
+                const environmentRequest = await page.evaluate(() => buildManualLaunchRequest());
+                assert.equal(environmentRequest.env.GGML_OP_OFFLOAD_MIN_BATCH, "512");
+                assert.ok(!environmentRequest.args.flat().includes("GGML_OP_OFFLOAD_MIN_BATCH=512"));
+                await page.fill("#environment-variables", "GGML_OP_OFFLOAD_MIN_BATCH");
+                assert.match(await page.textContent("#environment-variables-status"), /line 1/);
+                assert.equal(await page.getAttribute("#environment-variables", "aria-invalid"), "true");
+                assert.match(await page.textContent("#command-preview-text"), /Cannot launch:/);
+                assert.equal(await page.locator("#btn-quick-launch").isDisabled(), true);
+                await page.evaluate(() => window.LlamaGui.flagCore.applyFlagValues({ custom_env: "GGML_OP_OFFLOAD_MIN_BATCH=256" }));
+                await page.locator("#model-select").focus();
+                await page.evaluate(() => window.LlamaGui.configFlagsUi.restoreFlagInputs());
+                assert.equal(await page.inputValue("#environment-variables"), "GGML_OP_OFFLOAD_MIN_BATCH=256");
+
+                await page.evaluate(() => window.LlamaGui.flagCore.applyFlagValues({ custom_args: "--parallel 4" }));
+                await page.waitForFunction(() => document.querySelector("#custom-launch-args")?.value === "--parallel 4");
+                assert.equal(await page.inputValue("#environment-variables"), "");
+                assert.match(await page.textContent("#command-preview-text"), /--parallel 4/);
+
+                await page.fill("#custom-launch-args", "--threads 'unterminated");
+                await page.dispatchEvent("#custom-launch-args", "input");
+                await page.waitForFunction(() => document.querySelector("#custom-launch-args-status")?.textContent.includes("unmatched single quote"));
+                assert.match(await page.textContent("#command-preview-text"), /Cannot launch:/);
+                await page.selectOption("#model-select", "smoke-model.gguf");
+                await page.dispatchEvent("#model-select", "change");
+                await selectSection(page, "quick-launch");
+                assert.ok((await page.locator("#quick-chip-model").getAttribute("class")).includes("ok"));
+                assert.equal(await page.textContent("#quick-chip-model .chip-text"), "Model: smoke-model.gguf");
+                await selectSection(page, "configure");
+                const launchCountBefore = launchBodies.length;
+                await page.click("#btn-launch");
+                await page.waitForFunction(() => document.querySelector("#toast-container")?.textContent.includes("unmatched single quote"));
+                assert.equal(launchBodies.length, launchCountBefore);
             },
-            configSamplerSelect
-        );
-        assert.equal(
-            await page.inputValue(configSamplerSelect),
-            "custom|Smoke Sampler",
-            "the Configure sampler selection must survive a panel rebuild"
-        );
-
-        await page.locator(".sampler-presets button", { hasText: "Rename" }).click();
-        await page.waitForSelector("#prompt-modal:not(.hidden)");
-        await page.fill("#prompt-modal-input", "Renamed Smoke Sampler");
-        await page.click("#prompt-modal-ok");
-        await page.waitForFunction(() => {
-            const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
-            if (!raw) return false;
-            const store = JSON.parse(raw);
-            return Object.prototype.hasOwnProperty.call(store, "Renamed Smoke Sampler")
-                && !Object.prototype.hasOwnProperty.call(store, "Smoke Sampler");
-        });
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => toast.textContent.includes('Renamed sampler preset to "Renamed Smoke Sampler"')));
-        assert.equal(
-            await page.inputValue(configSamplerSelect),
-            "custom|Renamed Smoke Sampler",
-            "Configure must follow the renamed preset"
-        );
-        // The mirrored Quick Launch dropdown must follow too, not fall back to
-        // the placeholder because the old value string vanished. Read it through
-        // evaluate: that section is hidden while Configure is showing.
-        assert.equal(
-            await page.evaluate(() => document.querySelector("#quick-sampler-select")?.value),
-            "custom|Renamed Smoke Sampler",
-            "Quick Launch must follow a rename made from Configure"
-        );
-
-        // A built-in is not renameable, and the attempt must not disturb the store.
-        await page.selectOption(configSamplerSelect, "builtin|Balanced");
-        await page.dispatchEvent(configSamplerSelect, "change");
-        await page.locator(".sampler-presets button", { hasText: "Rename" }).click();
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => toast.textContent.includes("Built-in sampler presets cannot be renamed.")));
-        assert.equal(
-            await page.evaluate(() => document.querySelector("#prompt-modal")?.classList.contains("hidden")),
-            true,
-            "renaming a built-in must be refused before the prompt opens"
-        );
-        assert.deepEqual(
-            await page.evaluate(() => Object.keys(JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}"))),
-            ["Renamed Smoke Sampler"],
-            "a refused rename must leave the sampler store untouched"
-        );
-
-        await page.setInputFiles('.sampler-presets input[type="file"]', {
-            name: "samplers.json",
-            mimeType: "application/json",
-            buffer: Buffer.from(JSON.stringify({
-                presets: {
-                    "Would Be Partial": { temperature: 0.2 },
-                    balanced: { temperature: 0.1 },
-                },
-            })),
-        });
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => /already exists/i.test(toast.textContent)));
-        assert.deepEqual(
-            await page.evaluate(() => Object.keys(JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}"))),
-            ["Renamed Smoke Sampler"],
-            "a colliding sampler import must reject the entire batch before writing"
-        );
-
-        await page.setInputFiles('.sampler-presets input[type="file"]', {
-            name: "malformed-samplers.json",
-            mimeType: "application/json",
-            buffer: Buffer.from(JSON.stringify({
-                presets: {
-                    "Would Also Be Partial": { temperature: 0.3 },
-                    Broken: "not an object",
-                },
-            })),
-        });
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => /must contain an object of sampler values/i.test(toast.textContent)));
-        assert.deepEqual(
-            await page.evaluate(() => Object.keys(JSON.parse(localStorage.getItem("llama_gui_sampler_presets_v1") || "{}"))),
-            ["Renamed Smoke Sampler"],
-            "a malformed sampler import must reject the entire batch before writing"
-        );
-
-        // A rename made from Quick Launch must carry the Configure panel's
-        // remembered selection too (the reverse direction of the check above).
-        await page.selectOption(configSamplerSelect, "custom|Renamed Smoke Sampler");
-        await page.dispatchEvent(configSamplerSelect, "change");
-        await selectSection(page, "quick-launch");
-        await page.selectOption("#quick-sampler-select", "custom|Renamed Smoke Sampler");
-        await page.click("#btn-quick-sampler-rename");
-        await page.waitForSelector("#prompt-modal:not(.hidden)");
-        await page.fill("#prompt-modal-input", "Renamed Again Sampler");
-        await page.click("#prompt-modal-ok");
-        await page.waitForFunction(() => {
-            const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
-            return raw && Object.prototype.hasOwnProperty.call(JSON.parse(raw), "Renamed Again Sampler");
-        });
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => toast.textContent.includes('Renamed sampler preset to "Renamed Again Sampler"')));
-        await selectSection(page, "configure");
-        assert.equal(
-            await page.inputValue(configSamplerSelect),
-            "custom|Renamed Again Sampler",
-            "Configure must follow a rename made from Quick Launch"
-        );
-
-        await selectSection(page, "quick-launch");
-        await page.selectOption("#quick-sampler-select", "custom|Renamed Again Sampler");
-        const deletePromise = page.waitForFunction(() => {
-            const raw = localStorage.getItem("llama_gui_sampler_presets_v1");
-            return raw && !Object.prototype.hasOwnProperty.call(JSON.parse(raw), "Renamed Again Sampler");
-        });
-        await page.click("#btn-quick-sampler-delete");
-        await page.click("#confirm-modal-ok");
-        await deletePromise;
-        await page.waitForFunction(() => Array.from(document.querySelectorAll(".toast-message"))
-            .some((toast) => toast.textContent.includes('Deleted sampler preset "Renamed Again Sampler"')));
-
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setMultipleFlagValues({
-                host: "0.0.0.0",
-                port: 9099,
-                alias: "smoke-alias",
-                api_key: "secret",
-            });
-            window.LlamaGui.apiTab.updateEndpoints();
-        });
-        await selectSection(page, "api");
-        await page.waitForFunction(() => document.querySelector("#api-base-url")?.textContent === "http://0.0.0.0:9099");
-        assert.match(await page.textContent("#api-endpoints-list"), /http:\/\/0\.0\.0\.0:9099\/v1\/chat\/completions/);
-        assert.match(await page.textContent("#api-snippets-list"), /smoke-alias/);
-        assert.match(await page.textContent("#api-snippets-list"), /Authorization: Bearer YOUR_API_KEY/);
-
-        const tunnelStates = await page.evaluate(() => {
-            const readState = () => ({
-                badge: document.querySelector("#remote-tunnel-badge")?.textContent,
-                badgeClasses: Array.from(document.querySelector("#remote-tunnel-badge")?.classList || []),
-                status: document.querySelector("#remote-tunnel-status")?.textContent,
-                urlHidden: document.querySelector("#remote-tunnel-url-row")?.classList.contains("hidden"),
-                url: document.querySelector("#remote-tunnel-url")?.textContent,
-                openAiUrl: document.querySelector("#remote-openai-url")?.textContent,
-                startDisabled: document.querySelector("#btn-start-remote-tunnel")?.disabled,
-                stopHidden: document.querySelector("#btn-stop-remote-tunnel")?.classList.contains("hidden"),
-            });
-            const states = {};
-            window.LlamaGui.remoteTunnelUi.renderStatus({ status: "idle", message: "Remote tunnel is not running." });
-            states.idle = readState();
-            window.LlamaGui.remoteTunnelUi.renderStatus({ status: "starting", message: "Starting Cloudflare tunnel..." });
-            states.starting = readState();
-            window.LlamaGui.remoteTunnelUi.renderStatus({
-                status: "running",
-                message: "Remote tunnel is running.",
-                url: "https://smoke.trycloudflare.com/",
-            });
-            states.running = readState();
-            window.LlamaGui.remoteTunnelUi.renderStatus({ status: "error", message: "Tunnel failed" });
-            states.error = readState();
-            return states;
-        });
-        assert.equal(tunnelStates.idle.badge, "idle");
-        assert.equal(tunnelStates.idle.urlHidden, true);
-        assert.equal(tunnelStates.starting.startDisabled, true);
-        assert.equal(tunnelStates.starting.stopHidden, false);
-        assert.ok(tunnelStates.starting.badgeClasses.includes("working"));
-        assert.equal(tunnelStates.running.urlHidden, false);
-        assert.equal(tunnelStates.running.url, "https://smoke.trycloudflare.com/");
-        assert.equal(tunnelStates.running.openAiUrl, "https://smoke.trycloudflare.com/v1");
-        assert.ok(tunnelStates.running.badgeClasses.includes("running"));
-        assert.equal(tunnelStates.error.status, "Tunnel failed");
-        assert.ok(tunnelStates.error.badgeClasses.includes("error"));
-
-        // Connecting to a llama-server this GUI did not launch must unlock Chat
-        // on its own, with no process running.
-        statusRunning = false;
-        activeProcessTool = "";
-        statusActiveRuntime = null;
-        await page.evaluate(() => refreshRuntimeStatusPanels());
-        assert.equal(await page.textContent("#external-server-badge"), "Not connected");
-        assert.equal(
-            await page.locator("#external-server-summary").evaluate((el) => el.classList.contains("hidden")),
-            true
-        );
-
-        await page.locator("#api-external-details > summary").click();
-        await page.fill("#external-server-host", "127.0.0.1");
-        await page.fill("#external-server-port", "9001");
-        await page.fill("#external-server-key", "external-secret");
-        await page.click("#btn-connect-external-server");
-        await page.waitForFunction(
-            () => document.querySelector("#external-server-badge")?.textContent === "Connected"
-        );
-        assert.deepEqual(externalTargetRequests.at(-1), {
-            method: "POST",
-            body: { host: "127.0.0.1", port: "9001", api_key: "external-secret" },
-        });
-        assert.equal(await page.textContent("#external-server-target"), "127.0.0.1:9001");
-        assert.equal(
-            await page.locator("#btn-disconnect-external-server").evaluate((el) => el.classList.contains("hidden")),
-            false
-        );
-        assert.match(await page.textContent("#api-status-note"), /started outside this GUI/);
-
-        await selectSection(page, "chat");
-        await page.waitForFunction(() => document.querySelector("#chat-input")?.disabled === false);
-        assert.equal(await page.locator("#btn-chat-send").isDisabled(), false);
-
-        await selectSection(page, "api");
-        await page.click("#btn-disconnect-external-server");
-        await page.waitForFunction(
-            () => document.querySelector("#external-server-badge")?.textContent === "Not connected"
-        );
-        assert.equal(externalTargetRequests.at(-1).method, "DELETE");
-        assert.equal(await page.inputValue("#external-server-key"), "");
-        assert.equal(rememberedTarget, null, "disconnecting must also forget the saved address");
-
-        await selectSection(page, "chat");
-        await page.waitForFunction(() => document.querySelector("#chat-input")?.disabled === true);
-        await selectSection(page, "api");
-
-        // A keyless address saved by an earlier session reconnects by itself.
-        rememberedTarget = { host: "127.0.0.1", port: 9002, label: "Saved", api_key_required: false };
-        await page.fill("#external-server-host", "");
-        await page.fill("#external-server-port", "");
-        await page.evaluate(() => window.LlamaGui.externalServerUi.restore());
-        await page.waitForFunction(
-            () => document.querySelector("#external-server-badge")?.textContent === "Connected"
-        );
-        assert.deepEqual(externalTargetRequests.at(-1), { method: "POST", body: { restore: true } });
-        assert.equal(await page.inputValue("#external-server-host"), "127.0.0.1");
-        assert.equal(await page.inputValue("#external-server-port"), "9002");
-        assert.equal(
-            await page.textContent("#external-server-note"),
-            "Reconnected to Saved (127.0.0.1:9002)."
-        );
-
-        // Reload with an already-connected external target. The accepted
-        // initial status path must seed inference exactly once without a new
-        // external revision or a duplicate reset.
-        await page.reload({ waitUntil: "domcontentloaded" });
-        await page.waitForFunction(() => window.LlamaGui?.flagCore && window.LlamaGui?.monitorUi);
-        await page.waitForFunction(() => typeof inferenceStats !== "undefined"
-            && inferenceStats.getTargetKey() === "ext:0:127.0.0.1:9002");
-        assert.equal(await page.evaluate(() => inferenceStats.getTargetKey()), "ext:0:127.0.0.1:9002",
-            "an already-active target must not mint a new external revision");
-        assert.equal(
-            await page.locator("#stats-bar").evaluate((el) => el.classList.contains("hidden")),
-            false,
-            "an already-connected external target must restore inference polling",
-        );
-
-        // One that needed a key is prefilled and explained, never auto-connected.
-        externalChatTarget = null;
-        rememberedTarget = { host: "127.0.0.1", port: 9003, label: "", api_key_required: true };
-        await page.evaluate(() => refreshRuntimeStatusPanels());
-        const requestsBeforeKeyedRestore = externalTargetRequests.length;
-        await page.evaluate(() => window.LlamaGui.externalServerUi.restore());
-        assert.equal(
-            externalTargetRequests.length,
-            requestsBeforeKeyedRestore + 1,
-            "a key-protected address must only be read, never reconnected"
-        );
-        assert.equal(externalTargetRequests.at(-1).method, "GET");
-        assert.equal(await page.inputValue("#external-server-port"), "9003");
-        assert.equal(
-            await page.textContent("#external-server-note"),
-            "Re-enter the API key for 127.0.0.1:9003 to reconnect."
-        );
-        assert.equal(await page.textContent("#external-server-badge"), "Not connected");
-        rememberedTarget = null;
-
-        await selectSection(page, "configure");
-        await page.selectOption("#model-select", "");
-        await page.dispatchEvent("#model-select", "change");
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setCurrentTool("llama-server");
-            window.LlamaGui.flagCore.setMultipleFlagValues({
-                hf_repo: "smoke/remote-model",
-                api_key: undefined,
-                custom_args: "--api-key one-off-smoke-key",
-            });
-        });
-        await selectSection(page, "quick-launch");
-        await page.waitForFunction(() => document.querySelector("#quick-chip-model .chip-text")?.textContent === "Model: remote source");
-        assert.ok((await page.locator("#quick-chip-model").getAttribute("class")).includes("ok"));
-        assert.equal(await page.textContent("#quick-chip-api .chip-text"), "API: protected");
-        assert.ok((await page.locator("#quick-api-protected-badge").getAttribute("class")).includes("visible"));
-
-        await page.evaluate(() => window.LlamaGui.flagCore.setCurrentTool("llama-cli"));
-        await page.waitForFunction(() => document.querySelector("#quick-chip-api .chip-text")?.textContent === "API: not applicable");
-        assert.ok(!(await page.locator("#quick-api-protected-badge").getAttribute("class")).includes("visible"));
-
-        await page.evaluate(() => {
-            window.LlamaGui.flagCore.setCurrentTool("llama-server");
-            window.LlamaGui.flagCore.setMultipleFlagValues({
-                hf_repo: undefined,
-                custom_args: undefined,
-            });
-        });
-        await selectSection(page, "configure");
-        await page.selectOption("#model-select", "smoke-model.gguf");
-        await page.dispatchEvent("#model-select", "change");
-        await page.fill("#custom-launch-args", "--threads 8\n--chat-template-kwargs '{\"preserve_thinking\":true}'");
-        await page.dispatchEvent("#custom-launch-args", "input");
-        await page.waitForFunction(() => document.querySelector("#command-preview-text")?.textContent.includes("--threads 8"));
-        const customState = await page.evaluate(() => ({
-            raw: window.LlamaGui.flagCore.getFlagValues().custom_args,
-            args: window.LlamaGui.flagCore.getLaunchArgs().args.flat(),
-        }));
-        assert.equal(customState.raw, "--threads 8\n--chat-template-kwargs '{\"preserve_thinking\":true}'");
-        assert.ok(customState.args.includes("--threads") && customState.args.includes("8"));
-        assert.ok(customState.args.includes("--chat-template-kwargs"));
-        assert.ok(customState.args.includes('{"preserve_thinking":true}'));
-
-        const environmentText = "LLAMA_MMAP_RANDOM=1\nGGML_OP_OFFLOAD_MIN_BATCH=512";
-        await page.fill("#environment-variables", environmentText);
-        assert.deepEqual(await page.evaluate(() => window.LlamaGui.flagCore.getLaunchArgs().env), {
-            LLAMA_MMAP_RANDOM: "1", GGML_OP_OFFLOAD_MIN_BATCH: "512",
-        });
-        assert.equal(await page.evaluate(() => window.LlamaGui.flagCore.getFlagValues().custom_env), environmentText);
-        assert.equal(await page.evaluate(() => document.querySelector(".custom-launch-args-panel").nextElementSibling.className), "environment-variables-panel");
-        assert.equal(await page.evaluate(() => document.querySelector(".environment-variables-panel").nextElementSibling.id), "server-address");
-        const environmentRequest = await page.evaluate(() => buildManualLaunchRequest());
-        assert.equal(environmentRequest.env.GGML_OP_OFFLOAD_MIN_BATCH, "512");
-        assert.ok(!environmentRequest.args.flat().includes("GGML_OP_OFFLOAD_MIN_BATCH=512"));
-        await page.fill("#environment-variables", "GGML_OP_OFFLOAD_MIN_BATCH");
-        assert.match(await page.textContent("#environment-variables-status"), /line 1/);
-        assert.equal(await page.getAttribute("#environment-variables", "aria-invalid"), "true");
-        assert.match(await page.textContent("#command-preview-text"), /Cannot launch:/);
-        assert.equal(await page.locator("#btn-quick-launch").isDisabled(), true);
-        await page.evaluate(() => window.LlamaGui.flagCore.applyFlagValues({ custom_env: "GGML_OP_OFFLOAD_MIN_BATCH=256" }));
-        await page.locator("#model-select").focus();
-        await page.evaluate(() => window.LlamaGui.configFlagsUi.restoreFlagInputs());
-        assert.equal(await page.inputValue("#environment-variables"), "GGML_OP_OFFLOAD_MIN_BATCH=256");
-
-        await page.evaluate(() => window.LlamaGui.flagCore.applyFlagValues({ custom_args: "--parallel 4" }));
-        await page.waitForFunction(() => document.querySelector("#custom-launch-args")?.value === "--parallel 4");
-        assert.equal(await page.inputValue("#environment-variables"), "");
-        assert.match(await page.textContent("#command-preview-text"), /--parallel 4/);
-
-        await page.fill("#custom-launch-args", "--threads 'unterminated");
-        await page.dispatchEvent("#custom-launch-args", "input");
-        await page.waitForFunction(() => document.querySelector("#custom-launch-args-status")?.textContent.includes("unmatched single quote"));
-        assert.match(await page.textContent("#command-preview-text"), /Cannot launch:/);
-        await page.selectOption("#model-select", "smoke-model.gguf");
-        await page.dispatchEvent("#model-select", "change");
-        await selectSection(page, "quick-launch");
-        assert.ok((await page.locator("#quick-chip-model").getAttribute("class")).includes("ok"));
-        assert.equal(await page.textContent("#quick-chip-model .chip-text"), "Model: smoke-model.gguf");
-        await selectSection(page, "configure");
-        const launchCountBefore = launchBodies.length;
-        await page.click("#btn-launch");
-        await page.waitForFunction(() => document.querySelector("#toast-container")?.textContent.includes("unmatched single quote"));
-        assert.equal(launchBodies.length, launchCountBefore);
-
-        await selectSection(page, "install");
-        pageErrors.length = 0;
-        const countCustomReleaseRequests = () => releaseRequests.filter((search) =>
-            ["custom", "custom-02"].includes(new URLSearchParams(search).get("backend"))).length;
-        const customReleaseCountBefore = countCustomReleaseRequests();
-        await page.selectOption("#backend-select", "custom");
-        await page.waitForFunction(() => document.querySelector("#custom-backend-info")?.offsetParent !== null);
-        await page.waitForFunction(() => document.querySelector("#btn-install")?.textContent === "Activate Custom");
-        await page.waitForTimeout(250);
-        assert.equal(countCustomReleaseRequests(), customReleaseCountBefore);
-        await page.click("#btn-install");
-        await page.waitForFunction(() => document.querySelector("#install-status")?.textContent.includes("Custom backend activated"));
-        assert.equal(activateCustomRequests.length, 1);
-        assert.equal(pageErrors.length, 0, pageErrors.join("\n"));
-
-        const flagsBeforeSwitch = await page.evaluate(() => JSON.stringify(window.LlamaGui.flagCore.getFlagValues()));
-        await page.selectOption("#backend-select", "custom-02");
-        await page.waitForFunction(() => document.querySelector("#custom-backend-folder")?.textContent === "llama/custom-02/bin/");
-        assert.equal(await page.locator("#installed-backend-summary").textContent(), "Installed backend: Custom");
-        await page.click("#btn-install");
-        await page.waitForFunction(() => document.querySelector("#install-status")?.textContent.includes("Custom 02 needs llama-cli and llama-server"));
-        assert.equal(installedBackend, "custom");
-        assert.equal(await page.locator("#btn-update").isDisabled(), true);
-        custom02Ready = true;
-        await page.click("#btn-install");
-        await page.waitForFunction(() => document.querySelector("#installed-backend-summary")?.textContent === "Installed backend: Custom 02");
-        assert.equal(await page.locator("#version-badge").textContent(), "Custom 02");
-        assert.match(await page.locator("#installed-info").textContent(), /llama\/custom-02\/bin\//);
-        assert.deepEqual(activateCustomRequests.at(-1), { backend: "custom-02" });
-        assert.equal(countCustomReleaseRequests(), customReleaseCountBefore);
-        await page.selectOption("#backend-select", "cpu");
-        await page.waitForFunction(() => document.querySelector("#btn-install")?.textContent === "Activate Existing");
-        await page.click("#btn-install");
-        await page.waitForFunction(() => document.querySelector("#installed-backend-summary")?.textContent === "Installed backend: CPU");
-        await page.selectOption("#backend-select", "custom");
-        await page.click("#btn-install");
-        await page.waitForFunction(() => document.querySelector("#installed-backend-summary")?.textContent === "Installed backend: Custom");
-        assert.equal(await page.evaluate(() => JSON.stringify(window.LlamaGui.flagCore.getFlagValues())), flagsBeforeSwitch,
-            "switching builds must not change shared model/preset flags");
-
-        await selectSection(page, "quick-launch");
-        await page.setViewportSize({ width: 1346, height: 674 });
-        await page.locator(".sidebar-meta-row").scrollIntoViewIfNeeded();
-        const initialSidebarSlider = await page.evaluate(() => {
-            const sidebar = document.querySelector("#sidebar");
-            const nav = document.querySelector(".sidebar-nav");
-            const panel = document.querySelector("#sidebar-model-switcher");
-            const theme = document.querySelector(".theme-menu");
-            const slider = document.querySelector("#sidebar-model-switcher-slider");
-            const actionsBox = document.querySelector(".sidebar-runtime-actions").getBoundingClientRect();
-            const memoryBox = document.querySelector("#sidebar-memory-estimate").getBoundingClientRect();
-            const sidebarBox = sidebar.getBoundingClientRect();
-            const panelBox = panel.getBoundingClientRect();
-            const themeBox = theme.getBoundingClientRect();
-            return {
-                disabled: slider.getAttribute("aria-disabled"),
-                value: slider.getAttribute("aria-valuenow"),
-                panelBottom: panelBox.bottom,
-                themeTop: themeBox.top,
-                footerBottom: document.querySelector(".sidebar-footer").getBoundingClientRect().bottom,
-                viewportHeight: window.innerHeight,
-                actionsContained: actionsBox.right <= sidebarBox.right,
-                memoryContained: memoryBox.right <= sidebarBox.right,
-                navFits: nav.scrollHeight <= nav.clientHeight,
-            };
-        });
-        assert.equal(initialSidebarSlider.disabled, "true");
-        assert.equal(initialSidebarSlider.value, "0");
-        assert.ok(initialSidebarSlider.panelBottom <= initialSidebarSlider.themeTop, "model and theme switchers must not overlap");
-        assert.ok(initialSidebarSlider.footerBottom <= initialSidebarSlider.viewportHeight + 12, "sidebar footer must remain reachable in a short viewport");
-        assert.equal(initialSidebarSlider.actionsContained, true, "runtime buttons must stay inside the sidebar");
-        assert.equal(initialSidebarSlider.memoryContained, true, "memory estimate must stay inside the sidebar");
-        assert.equal(initialSidebarSlider.navFits, true, "sidebar navigation should fit without scrolling at 1346x674");
-        await page.setViewportSize({ width: 1280, height: 720 });
-
-        await page.evaluate(async () => {
-            const entries = [
-                {
-                    name: "Sidebar Model A",
-                    full: true,
-                    fingerprint: "a".repeat(64),
-                    data: { tool: "llama-server", model: "alpha.gguf", flags: {} },
-                },
-                {
-                    name: "Sidebar Model B",
-                    full: true,
-                    fingerprint: "b".repeat(64),
-                    data: { tool: "llama-server", model: "beta.gguf", flags: {} },
-                },
-            ];
-            const activeRuntime = {
-                generation: 42,
-                tool: "llama-server",
-                source: "model-switcher",
-                slot: "a",
-                preset: "Sidebar Model A",
-                model: "alpha.gguf",
-                preset_fingerprint: "a".repeat(64),
-            };
-            window.__sidebarSwitchCalls = 0;
-            window.__modelSwitcherFetchCalls = 0;
-            window.__modelSwitcherEntries = entries;
-            window.LlamaGui.modelSwitchUi.configure({
-                fetchPresetEntries: async () => {
-                    window.__modelSwitcherFetchCalls += 1;
-                    return window.__modelSwitcherEntries;
-                },
-                findPresetByName: (list, name) => list.find(entry => entry.name === name) || null,
-                getPresetFingerprint: entry => entry.fingerprint || "",
-                getLatestBackendStatus: () => ({ running: true, active_runtime: activeRuntime }),
-                getLifecycleSnapshot: () => ({
-                    phase: "ready",
-                    ready: true,
-                    busy: false,
-                    activeRuntime,
-                }),
-                switchSlot: async () => {
-                    window.__sidebarSwitchCalls += 1;
-                    return { ok: false, cancelled: true };
-                },
-            });
-            window.LlamaGui.modelSwitchUi.setAssignment("a", "Sidebar Model A");
-            window.LlamaGui.modelSwitchUi.setAssignment("b", "Sidebar Model B");
-            await window.LlamaGui.modelSwitchUi.refresh({ reloadPresets: true });
-        });
-        await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-disabled") === "false");
-
-        await page.click("#model-switch-toggle");
-        const initialModelSwitcherFetchCalls = await page.evaluate(() => window.__modelSwitcherFetchCalls);
-        await page.evaluate(() => {
-            window.__modelSwitcherEntries.push({
-                name: "Refreshed from A",
-                full: true,
-                fingerprint: "c".repeat(64),
-                data: { tool: "llama-server", model: "gamma.gguf", flags: {} },
-            });
-        });
-        await page.click("#model-switch-refresh-a");
-        await page.waitForFunction(() => Array.from(document.querySelector("#model-switch-select-b")?.options || [])
-            .some(option => option.value === "Refreshed from A"));
-        assert.equal(
-            await page.evaluate(() => window.__modelSwitcherFetchCalls),
-            initialModelSwitcherFetchCalls + 1,
-            "Model A refresh should force exactly one preset reload"
-        );
-        assert.deepEqual(
-            await page.evaluate(() => [
-                document.querySelector("#model-switch-select-a")?.value,
-                document.querySelector("#model-switch-select-b")?.value,
-            ]),
-            ["Sidebar Model A", "Sidebar Model B"],
-            "refreshing presets must preserve both slot assignments"
-        );
-
-        await page.evaluate(() => {
-            window.__modelSwitcherEntries.push({
-                name: "Refreshed from B",
-                full: true,
-                fingerprint: "d".repeat(64),
-                data: { tool: "llama-server", model: "delta.gguf", flags: {} },
-            });
-        });
-        await page.click("#model-switch-refresh-b");
-        await page.waitForFunction(() => Array.from(document.querySelector("#model-switch-select-a")?.options || [])
-            .some(option => option.value === "Refreshed from B"));
-
-        const fetchesBeforeAssignment = await page.evaluate(() => window.__modelSwitcherFetchCalls);
-        await page.selectOption("#model-switch-select-a", "Refreshed from A");
-        await page.waitForFunction(previous => window.__modelSwitcherFetchCalls === previous + 1, fetchesBeforeAssignment);
-        assert.deepEqual(await page.evaluate(() => [
-            document.querySelector("#model-switch-select-a").value,
-            document.querySelector("#model-switch-select-b").value,
-        ]), ["Refreshed from A", "Sidebar Model B"], "changing one assignment must survive reload and preserve the other");
-        await page.selectOption("#model-switch-select-a", "Sidebar Model A");
-        await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-disabled") === "false");
-
-        await page.evaluate(() => {
-            const select = document.querySelector("#model-switch-select-a");
-            for (let i = 0; i < 20; i += 1) {
-                const option = document.createElement("option");
-                option.value = `layout-check-${i}`;
-                option.textContent = `Layout check preset ${i}`;
-                select.appendChild(option);
-            }
-        });
-        await page.click("#model-switch-select-a + .ss-wrap .ss-button");
-        await page.waitForSelector(".ss-popup:not(.hidden) .ss-item");
-        const searchableSelectAccessibility = await page.evaluate(() => {
-            const select = document.querySelector("#model-switch-select-a");
-            const button = select?.nextElementSibling?.querySelector(".ss-button");
-            const search = document.querySelector(".ss-popup:not(.hidden) .ss-search");
-            const activeId = search?.getAttribute("aria-activedescendant") || "";
-            const quickSelect = document.querySelector("#quick-model-select");
-            const quickButton = quickSelect?.nextElementSibling?.querySelector(".ss-button");
-            const quickLabel = quickButton ? document.querySelector(`label[for="${quickButton.id}"]`) : null;
-            return {
-                buttonLabel: button?.getAttribute("aria-label") || "",
-                activeId,
-                activeOptionExists: Boolean(activeId && document.getElementById(activeId)),
-                quickButtonLabel: quickButton?.getAttribute("aria-label") || "",
-                quickLabelText: quickLabel?.textContent?.trim() || "",
-            };
-        });
-        assert.match(searchableSelectAccessibility.buttonLabel, /^Model A preset:/);
-        assert.ok(searchableSelectAccessibility.activeOptionExists, "active searchable option must be exposed to assistive technology");
-        assert.match(searchableSelectAccessibility.quickButtonLabel, /^Model:/);
-        assert.equal(searchableSelectAccessibility.quickLabelText, "Model");
-        const searchableOptionLayout = await page.evaluate(() => {
-            const item = document.querySelector(".ss-popup:not(.hidden) .ss-item");
-            const style = getComputedStyle(item);
-            return {
-                height: item.getBoundingClientRect().height,
-                contentHeight: parseFloat(style.lineHeight)
-                    + parseFloat(style.paddingTop)
-                    + parseFloat(style.paddingBottom),
-            };
-        });
-        assert.ok(
-            searchableOptionLayout.height >= searchableOptionLayout.contentHeight - 1,
-            "searchable preset options must retain enough height to render a full text line"
-        );
-        await page.keyboard.press("Escape");
-
-        await page.click("#sidebar-model-switcher-track", { position: { x: 70, y: 5 } });
-        assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 0, "track clicks must be inert");
-        await page.click("#sidebar-model-switcher-thumb");
-        assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 0, "clicking the thumb without dragging must be inert");
-
-        const sliderBox = await page.locator("#sidebar-model-switcher-slider").boundingBox();
-        const thumbBox = await page.locator("#sidebar-model-switcher-thumb").boundingBox();
-        assert.ok(sliderBox && thumbBox, "sidebar slider geometry must be measurable");
-        const thumbCenterX = thumbBox.x + thumbBox.width / 2;
-        const thumbCenterY = thumbBox.y + thumbBox.height / 2;
-        await page.mouse.move(thumbCenterX, thumbCenterY);
-        await page.mouse.down();
-        await page.mouse.move(sliderBox.x + sliderBox.width * 0.58, thumbCenterY, { steps: 4 });
-        await page.mouse.up();
-        assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 0, "a short drag must snap back without switching");
-
-        await page.waitForTimeout(200);
-        const snappedThumbBox = await page.locator("#sidebar-model-switcher-thumb").boundingBox();
-        assert.ok(snappedThumbBox, "the slider thumb must remain visible after snap-back");
-        const snappedThumbCenterX = snappedThumbBox.x + snappedThumbBox.width / 2;
-        const snappedThumbCenterY = snappedThumbBox.y + snappedThumbBox.height / 2;
-        await page.mouse.move(snappedThumbCenterX, snappedThumbCenterY);
-        await page.mouse.down();
-        await page.mouse.move(sliderBox.x + sliderBox.width - 2, snappedThumbCenterY, { steps: 6 });
-        await page.mouse.up();
-        await page.waitForFunction(() => window.__sidebarSwitchCalls === 1);
-        await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-valuenow") === "0");
-
-        await page.focus("#sidebar-model-switcher-slider");
-        await page.keyboard.press("ArrowRight");
-        assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 1, "an arrow key should preview without switching");
-        assert.match(await page.textContent("#sidebar-model-switcher-status"), /Press Enter to switch to Model B/);
-        await page.keyboard.press("Enter");
-        await page.waitForFunction(() => window.__sidebarSwitchCalls === 2);
-        await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-valuenow") === "0");
-        // --- Presets: roving arrow-key focus -------------------------------
-        // Only a real browser can prove the tab order, which is the whole point
-        // of the change: the list must be one stop to enter, not one per row.
-        await selectSection(page, "presets");
-        await page.waitForSelector("#presets-list .preset-group-header");
-
-        const listState = () => page.evaluate(() => {
-            const list = document.getElementById("presets-list");
-            const items = Array.from(list.querySelectorAll(".preset-group-header, .preset-item"));
-            const visible = items.filter((el) => el.offsetParent !== null);
-            return {
-                tabbable: visible.filter((el) => el.tabIndex === 0).length,
-                // Anything inside the list still reachable by Tab.
-                tabbableDescendants: Array.from(list.querySelectorAll("input, button"))
-                    .filter((el) => el.tabIndex === 0 && el.offsetParent !== null).length,
-                focusKey: document.activeElement
-                    && (document.activeElement.getAttribute("data-preset-name")
-                        || document.activeElement.getAttribute("data-group-key")),
-            };
-        });
-
-        // Groups collapse by default, so only headers are focusable at first.
-        let state = await listState();
-        assert.equal(state.tabbable, 1, "the whole preset list must be a single tab stop");
-
-        // Read the rendered order rather than assuming it: groups sort by label,
-        // so the mock's models do not appear in the order they were declared.
-        const headerKeys = await page.evaluate(() => Array.from(
-            document.querySelectorAll("#presets-list .preset-group-header")
-        ).map((el) => el.getAttribute("data-group-key")));
-        assert.equal(headerKeys.length, 2, "the mock presets should render two model groups");
-
-        await page.locator("#presets-list .preset-group-header").first().focus();
-        await page.keyboard.press("ArrowDown");
-        state = await listState();
-        assert.equal(
-            state.focusKey,
-            headerKeys[1],
-            "with groups collapsed, ArrowDown must skip hidden rows and land on the next header"
-        );
-
-        // Expanding a group brings its rows into the sequence.
-        await page.locator("#presets-list .preset-group-header").first().focus();
-        await page.keyboard.press("Enter");
-        await page.waitForFunction(() => {
-            const group = document.querySelector("#presets-list .preset-group");
-            return group && !group.classList.contains("collapsed");
-        });
-        const firstRowName = await page.evaluate(() => {
-            const group = document.querySelector("#presets-list .preset-group");
-            const row = group && group.querySelector(".preset-item");
-            return row && row.getAttribute("data-preset-name");
-        });
-
-        await page.locator("#presets-list .preset-group-header").first().focus();
-        await page.keyboard.press("ArrowDown");
-        state = await listState();
-        assert.equal(
-            state.focusKey,
-            firstRowName,
-            "ArrowDown into an expanded group must land on its first row"
-        );
-        assert.equal(state.tabbable, 1, "still exactly one item in the tab order after moving");
-        assert.equal(
-            state.tabbableDescendants,
-            4,
-            "only the focused row's checkbox, favorite, archive, and Load button stay tabbable"
-        );
-
-        // Enter selects without collapsing the roving state.
-        await page.keyboard.press("Enter");
-        await page.waitForFunction(() => document.querySelector("#presets-list .preset-item.selected") !== null);
-        state = await listState();
-        assert.equal(
-            state.focusKey,
-            firstRowName,
-            "focus must survive the re-render that selecting a preset triggers"
-        );
-
-        // A mouse click must also move the roving position, or the next arrow
-        // key would jump back to wherever the keyboard last was.
-        //
-        // Only the first group was expanded above, so expand the second too:
-        // rows in a collapsed group are display:none and cannot be clicked.
-        await page.locator("#presets-list .preset-group-header").nth(1).click();
-        await page.waitForFunction(() => Array.from(
-            document.querySelectorAll("#presets-list .preset-group")
-        ).every((group) => !group.classList.contains("collapsed")));
-
-        const otherRow = await page.evaluate(() => {
-            const rows = Array.from(document.querySelectorAll("#presets-list .preset-item"))
-                .filter((el) => el.offsetParent !== null);
-            const row = rows[rows.length - 1];
-            return row && row.getAttribute("data-preset-name");
-        });
-        assert.ok(
-            otherRow && otherRow !== firstRowName,
-            `expected a second visible row to click, got ${otherRow}`
-        );
-
-        await page.click(`#presets-list .preset-item[data-preset-name="${otherRow}"]`);
-        state = await listState();
-        assert.equal(state.focusKey, otherRow, "clicking a row moves the roving position to it");
-
-        // And the next arrow key must step from the clicked row specifically.
-        // Asserting the exact predecessor matters: a looser check still passes
-        // while the roving key is stale, which is the bug this guards.
-        const expectedPrevious = await page.evaluate((current) => {
-            const items = Array.from(document.querySelectorAll(
-                "#presets-list .preset-group-header, #presets-list .preset-item"
-            )).filter((el) => el.offsetParent !== null);
-            const index = items.findIndex((el) => el.getAttribute("data-preset-name") === current);
-            const previous = index > 0 ? items[index - 1] : null;
-            return previous
-                && (previous.getAttribute("data-preset-name") || previous.getAttribute("data-group-key"));
-        }, otherRow);
-
-        await page.keyboard.press("ArrowUp");
-        state = await listState();
-        assert.equal(
-            state.focusKey,
-            expectedPrevious,
-            "ArrowUp must step back from the clicked row, not from where the keyboard last was"
-        );
-
-        // --- Models folder: picker -> setting -> status -> model refresh ---
-        await selectSection(page, "configure");
-        await page.selectOption("#model-select", "smoke-model.gguf");
-        await page.dispatchEvent("#model-select", "change");
-        await page.click("#btn-change-models-folder");
-        await page.waitForFunction(() => document.querySelector("#models-folder-path")?.textContent === "D:\\Smoke & Models");
-        await page.waitForFunction(() => Array.from(document.querySelector("#model-select")?.options || [])
-            .some(option => option.value === "custom-model.gguf"));
-        assert.equal(await page.inputValue("#model-select"), "", "folder change must clear a missing selection");
-        assert.equal(await page.inputValue("#quick-model-select"), "");
-        assert.equal(modelsDirRequests.length, 1);
-        assert.equal(modelsDirRequests[0].path, "D:\\Smoke & Models");
-        assert.doesNotMatch(
-            await page.textContent("#command-preview-text"),
-            /smoke-model\.gguf/,
-            "the command preview must drop the old model after the selection is cleared"
-        );
+            async "custom backend activation preserves shared flags"() {
+                await page.evaluate(() => window.LlamaGui.flagCore.setMultipleFlagValues({ temperature: 0.37, ctx_size: 12345 }));
+                await selectSection(page, "install");
+                const countCustomReleaseRequests = () => releaseRequests.filter((search) =>
+                    ["custom", "custom-02"].includes(new URLSearchParams(search).get("backend"))).length;
+                const customReleaseCountBefore = countCustomReleaseRequests();
+                await page.selectOption("#backend-select", "custom");
+                await page.waitForFunction(() => document.querySelector("#custom-backend-info")?.offsetParent !== null);
+                await page.waitForFunction(() => document.querySelector("#btn-install")?.textContent === "Activate Custom");
+                await page.waitForTimeout(250);
+                assert.equal(countCustomReleaseRequests(), customReleaseCountBefore);
+                await page.click("#btn-install");
+                await page.waitForFunction(() => document.querySelector("#install-status")?.textContent.includes("Custom backend activated"));
+                assert.equal(activateCustomRequests.length, 1);
+                assert.equal(pageErrors.length, 0, pageErrors.join("\n"));
+
+                const flagsBeforeSwitch = await page.evaluate(() => JSON.stringify(window.LlamaGui.flagCore.getFlagValues()));
+                await page.selectOption("#backend-select", "custom-02");
+                await page.waitForFunction(() => document.querySelector("#custom-backend-folder")?.textContent === "llama/custom-02/bin/");
+                assert.equal(await page.locator("#installed-backend-summary").textContent(), "Installed backend: Custom");
+                await page.click("#btn-install");
+                await page.waitForFunction(() => document.querySelector("#install-status")?.textContent.includes("Custom 02 needs llama-cli and llama-server"));
+                assert.equal(installedBackend, "custom");
+                assert.equal(await page.locator("#btn-update").isDisabled(), true);
+                custom02Ready = true;
+                await page.click("#btn-install");
+                await page.waitForFunction(() => document.querySelector("#installed-backend-summary")?.textContent === "Installed backend: Custom 02");
+                assert.equal(await page.locator("#version-badge").textContent(), "Custom 02");
+                assert.match(await page.locator("#installed-info").textContent(), /llama\/custom-02\/bin\//);
+                assert.deepEqual(activateCustomRequests.at(-1), { backend: "custom-02" });
+                assert.equal(countCustomReleaseRequests(), customReleaseCountBefore);
+                await page.selectOption("#backend-select", "cpu");
+                await page.waitForFunction(() => document.querySelector("#btn-install")?.textContent === "Activate Existing");
+                await page.click("#btn-install");
+                await page.waitForFunction(() => document.querySelector("#installed-backend-summary")?.textContent === "Installed backend: CPU");
+                await page.selectOption("#backend-select", "custom");
+                await page.click("#btn-install");
+                await page.waitForFunction(() => document.querySelector("#installed-backend-summary")?.textContent === "Installed backend: Custom");
+                assert.equal(await page.evaluate(() => JSON.stringify(window.LlamaGui.flagCore.getFlagValues())), flagsBeforeSwitch,
+                    "switching builds must not change shared model/preset flags");
+            },
+            async "model switcher refresh drag and keyboard controls"() {
+                await selectSection(page, "quick-launch");
+                await page.setViewportSize({ width: 1346, height: 674 });
+                await page.locator(".sidebar-meta-row").scrollIntoViewIfNeeded();
+                const initialSidebarSlider = await page.evaluate(() => {
+                    const sidebar = document.querySelector("#sidebar");
+                    const nav = document.querySelector(".sidebar-nav");
+                    const panel = document.querySelector("#sidebar-model-switcher");
+                    const theme = document.querySelector(".theme-menu");
+                    const slider = document.querySelector("#sidebar-model-switcher-slider");
+                    const actionsBox = document.querySelector(".sidebar-runtime-actions").getBoundingClientRect();
+                    const memoryBox = document.querySelector("#sidebar-memory-estimate").getBoundingClientRect();
+                    const sidebarBox = sidebar.getBoundingClientRect();
+                    const panelBox = panel.getBoundingClientRect();
+                    const themeBox = theme.getBoundingClientRect();
+                    return {
+                        disabled: slider.getAttribute("aria-disabled"),
+                        value: slider.getAttribute("aria-valuenow"),
+                        panelBottom: panelBox.bottom,
+                        themeTop: themeBox.top,
+                        footerBottom: document.querySelector(".sidebar-footer").getBoundingClientRect().bottom,
+                        viewportHeight: window.innerHeight,
+                        actionsContained: actionsBox.right <= sidebarBox.right,
+                        memoryContained: memoryBox.right <= sidebarBox.right,
+                        navFits: nav.scrollHeight <= nav.clientHeight,
+                    };
+                });
+                assert.equal(initialSidebarSlider.disabled, "true");
+                assert.equal(initialSidebarSlider.value, "0");
+                assert.ok(initialSidebarSlider.panelBottom <= initialSidebarSlider.themeTop, "model and theme switchers must not overlap");
+                assert.ok(initialSidebarSlider.footerBottom <= initialSidebarSlider.viewportHeight + 12, "sidebar footer must remain reachable in a short viewport");
+                assert.equal(initialSidebarSlider.actionsContained, true, "runtime buttons must stay inside the sidebar");
+                assert.equal(initialSidebarSlider.memoryContained, true, "memory estimate must stay inside the sidebar");
+                assert.equal(initialSidebarSlider.navFits, true, "sidebar navigation should fit without scrolling at 1346x674");
+                await page.setViewportSize({ width: 1280, height: 720 });
+
+                await page.evaluate(async () => {
+                    const entries = [
+                        {
+                            name: "Sidebar Model A",
+                            full: true,
+                            fingerprint: "a".repeat(64),
+                            data: { tool: "llama-server", model: "alpha.gguf", flags: {} },
+                        },
+                        {
+                            name: "Sidebar Model B",
+                            full: true,
+                            fingerprint: "b".repeat(64),
+                            data: { tool: "llama-server", model: "beta.gguf", flags: {} },
+                        },
+                    ];
+                    const activeRuntime = {
+                        generation: 42,
+                        tool: "llama-server",
+                        source: "model-switcher",
+                        slot: "a",
+                        preset: "Sidebar Model A",
+                        model: "alpha.gguf",
+                        preset_fingerprint: "a".repeat(64),
+                    };
+                    window.__sidebarSwitchCalls = 0;
+                    window.__modelSwitcherFetchCalls = 0;
+                    window.__modelSwitcherEntries = entries;
+                    window.LlamaGui.modelSwitchUi.configure({
+                        fetchPresetEntries: async () => {
+                            window.__modelSwitcherFetchCalls += 1;
+                            return window.__modelSwitcherEntries;
+                        },
+                        findPresetByName: (list, name) => list.find(entry => entry.name === name) || null,
+                        getPresetFingerprint: entry => entry.fingerprint || "",
+                        getLatestBackendStatus: () => ({ running: true, active_runtime: activeRuntime }),
+                        getLifecycleSnapshot: () => ({
+                            phase: "ready",
+                            ready: true,
+                            busy: false,
+                            activeRuntime,
+                        }),
+                        switchSlot: async () => {
+                            window.__sidebarSwitchCalls += 1;
+                            return { ok: false, cancelled: true };
+                        },
+                    });
+                    window.LlamaGui.modelSwitchUi.setAssignment("a", "Sidebar Model A");
+                    window.LlamaGui.modelSwitchUi.setAssignment("b", "Sidebar Model B");
+                    await window.LlamaGui.modelSwitchUi.refresh({ reloadPresets: true });
+                });
+                await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-disabled") === "false");
+
+                await page.click("#model-switch-toggle");
+                const initialModelSwitcherFetchCalls = await page.evaluate(() => window.__modelSwitcherFetchCalls);
+                await page.evaluate(() => {
+                    window.__modelSwitcherEntries.push({
+                        name: "Refreshed from A",
+                        full: true,
+                        fingerprint: "c".repeat(64),
+                        data: { tool: "llama-server", model: "gamma.gguf", flags: {} },
+                    });
+                });
+                await page.click("#model-switch-refresh-a");
+                await page.waitForFunction(() => Array.from(document.querySelector("#model-switch-select-b")?.options || [])
+                    .some(option => option.value === "Refreshed from A"));
+                assert.equal(
+                    await page.evaluate(() => window.__modelSwitcherFetchCalls),
+                    initialModelSwitcherFetchCalls + 1,
+                    "Model A refresh should force exactly one preset reload"
+                );
+                assert.deepEqual(
+                    await page.evaluate(() => [
+                        document.querySelector("#model-switch-select-a")?.value,
+                        document.querySelector("#model-switch-select-b")?.value,
+                    ]),
+                    ["Sidebar Model A", "Sidebar Model B"],
+                    "refreshing presets must preserve both slot assignments"
+                );
+
+                await page.evaluate(() => {
+                    window.__modelSwitcherEntries.push({
+                        name: "Refreshed from B",
+                        full: true,
+                        fingerprint: "d".repeat(64),
+                        data: { tool: "llama-server", model: "delta.gguf", flags: {} },
+                    });
+                });
+                await page.click("#model-switch-refresh-b");
+                await page.waitForFunction(() => Array.from(document.querySelector("#model-switch-select-a")?.options || [])
+                    .some(option => option.value === "Refreshed from B"));
+
+                const fetchesBeforeAssignment = await page.evaluate(() => window.__modelSwitcherFetchCalls);
+                await page.selectOption("#model-switch-select-a", "Refreshed from A");
+                await page.waitForFunction(previous => window.__modelSwitcherFetchCalls === previous + 1, fetchesBeforeAssignment);
+                assert.deepEqual(await page.evaluate(() => [
+                    document.querySelector("#model-switch-select-a").value,
+                    document.querySelector("#model-switch-select-b").value,
+                ]), ["Refreshed from A", "Sidebar Model B"], "changing one assignment must survive reload and preserve the other");
+                await page.selectOption("#model-switch-select-a", "Sidebar Model A");
+                await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-disabled") === "false");
+
+                await page.evaluate(() => {
+                    const select = document.querySelector("#model-switch-select-a");
+                    for (let i = 0; i < 20; i += 1) {
+                        const option = document.createElement("option");
+                        option.value = `layout-check-${i}`;
+                        option.textContent = `Layout check preset ${i}`;
+                        select.appendChild(option);
+                    }
+                });
+                await page.click("#model-switch-select-a + .ss-wrap .ss-button");
+                await page.waitForSelector(".ss-popup:not(.hidden) .ss-item");
+                const searchableSelectAccessibility = await page.evaluate(() => {
+                    const select = document.querySelector("#model-switch-select-a");
+                    const button = select?.nextElementSibling?.querySelector(".ss-button");
+                    const search = document.querySelector(".ss-popup:not(.hidden) .ss-search");
+                    const activeId = search?.getAttribute("aria-activedescendant") || "";
+                    const quickSelect = document.querySelector("#quick-model-select");
+                    const quickButton = quickSelect?.nextElementSibling?.querySelector(".ss-button");
+                    const quickLabel = quickButton ? document.querySelector(`label[for="${quickButton.id}"]`) : null;
+                    return {
+                        buttonLabel: button?.getAttribute("aria-label") || "",
+                        activeId,
+                        activeOptionExists: Boolean(activeId && document.getElementById(activeId)),
+                        quickButtonLabel: quickButton?.getAttribute("aria-label") || "",
+                        quickLabelText: quickLabel?.textContent?.trim() || "",
+                    };
+                });
+                assert.match(searchableSelectAccessibility.buttonLabel, /^Model A preset:/);
+                assert.ok(searchableSelectAccessibility.activeOptionExists, "active searchable option must be exposed to assistive technology");
+                assert.match(searchableSelectAccessibility.quickButtonLabel, /^Model:/);
+                assert.equal(searchableSelectAccessibility.quickLabelText, "Model");
+                const searchableOptionLayout = await page.evaluate(() => {
+                    const item = document.querySelector(".ss-popup:not(.hidden) .ss-item");
+                    const style = getComputedStyle(item);
+                    return {
+                        height: item.getBoundingClientRect().height,
+                        contentHeight: parseFloat(style.lineHeight)
+                            + parseFloat(style.paddingTop)
+                            + parseFloat(style.paddingBottom),
+                    };
+                });
+                assert.ok(
+                    searchableOptionLayout.height >= searchableOptionLayout.contentHeight - 1,
+                    "searchable preset options must retain enough height to render a full text line"
+                );
+                await page.keyboard.press("Escape");
+
+                await page.click("#sidebar-model-switcher-track", { position: { x: 70, y: 5 } });
+                assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 0, "track clicks must be inert");
+                await page.click("#sidebar-model-switcher-thumb");
+                assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 0, "clicking the thumb without dragging must be inert");
+
+                const sliderBox = await page.locator("#sidebar-model-switcher-slider").boundingBox();
+                const thumbBox = await page.locator("#sidebar-model-switcher-thumb").boundingBox();
+                assert.ok(sliderBox && thumbBox, "sidebar slider geometry must be measurable");
+                const thumbCenterX = thumbBox.x + thumbBox.width / 2;
+                const thumbCenterY = thumbBox.y + thumbBox.height / 2;
+                await page.mouse.move(thumbCenterX, thumbCenterY);
+                await page.mouse.down();
+                await page.mouse.move(sliderBox.x + sliderBox.width * 0.58, thumbCenterY, { steps: 4 });
+                await page.mouse.up();
+                assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 0, "a short drag must snap back without switching");
+
+                await page.waitForTimeout(200);
+                const snappedThumbBox = await page.locator("#sidebar-model-switcher-thumb").boundingBox();
+                assert.ok(snappedThumbBox, "the slider thumb must remain visible after snap-back");
+                const snappedThumbCenterX = snappedThumbBox.x + snappedThumbBox.width / 2;
+                const snappedThumbCenterY = snappedThumbBox.y + snappedThumbBox.height / 2;
+                await page.mouse.move(snappedThumbCenterX, snappedThumbCenterY);
+                await page.mouse.down();
+                await page.mouse.move(sliderBox.x + sliderBox.width - 2, snappedThumbCenterY, { steps: 6 });
+                await page.mouse.up();
+                await page.waitForFunction(() => window.__sidebarSwitchCalls === 1);
+                await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-valuenow") === "0");
+
+                await page.focus("#sidebar-model-switcher-slider");
+                await page.keyboard.press("ArrowRight");
+                assert.equal(await page.evaluate(() => window.__sidebarSwitchCalls), 1, "an arrow key should preview without switching");
+                assert.match(await page.textContent("#sidebar-model-switcher-status"), /Press Enter to switch to Model B/);
+                await page.keyboard.press("Enter");
+                await page.waitForFunction(() => window.__sidebarSwitchCalls === 2);
+                await page.waitForFunction(() => document.querySelector("#sidebar-model-switcher-slider")?.getAttribute("aria-valuenow") === "0");
+            },
+            async "preset list roving keyboard focus"() {
+                // --- Presets: roving arrow-key focus -------------------------------
+                // Only a real browser can prove the tab order, which is the whole point
+                // of the change: the list must be one stop to enter, not one per row.
+                await selectSection(page, "presets");
+                await page.waitForSelector("#presets-list .preset-group-header");
+
+                const listState = () => page.evaluate(() => {
+                    const list = document.getElementById("presets-list");
+                    const items = Array.from(list.querySelectorAll(".preset-group-header, .preset-item"));
+                    const visible = items.filter((el) => el.offsetParent !== null);
+                    return {
+                        tabbable: visible.filter((el) => el.tabIndex === 0).length,
+                        // Anything inside the list still reachable by Tab.
+                        tabbableDescendants: Array.from(list.querySelectorAll("input, button"))
+                            .filter((el) => el.tabIndex === 0 && el.offsetParent !== null).length,
+                        focusKey: document.activeElement
+                            && (document.activeElement.getAttribute("data-preset-name")
+                                || document.activeElement.getAttribute("data-group-key")),
+                    };
+                });
 
-        await page.click("#btn-reset-models-folder");
-        await page.waitForFunction(() => document.querySelector("#models-folder-path")?.textContent === "models");
-        await page.waitForFunction(() => Array.from(document.querySelector("#model-select")?.options || [])
-            .some(option => option.value === "smoke-model.gguf"));
-        assert.equal(modelsDirRequests.length, 2);
-        assert.equal(modelsDirRequests[1].path, null);
+                // Groups collapse by default, so only headers are focusable at first.
+                let state = await listState();
+                assert.equal(state.tabbable, 1, "the whole preset list must be a single tab stop");
+
+                // Read the rendered order rather than assuming it: groups sort by label,
+                // so the mock's models do not appear in the order they were declared.
+                const headerKeys = await page.evaluate(() => Array.from(
+                    document.querySelectorAll("#presets-list .preset-group-header")
+                ).map((el) => el.getAttribute("data-group-key")));
+                assert.equal(headerKeys.length, 2, "the mock presets should render two model groups");
+
+                await page.locator("#presets-list .preset-group-header").first().focus();
+                await page.keyboard.press("ArrowDown");
+                state = await listState();
+                assert.equal(
+                    state.focusKey,
+                    headerKeys[1],
+                    "with groups collapsed, ArrowDown must skip hidden rows and land on the next header"
+                );
+
+                // Expanding a group brings its rows into the sequence.
+                await page.locator("#presets-list .preset-group-header").first().focus();
+                await page.keyboard.press("Enter");
+                await page.waitForFunction(() => {
+                    const group = document.querySelector("#presets-list .preset-group");
+                    return group && !group.classList.contains("collapsed");
+                });
+                const firstRowName = await page.evaluate(() => {
+                    const group = document.querySelector("#presets-list .preset-group");
+                    const row = group && group.querySelector(".preset-item");
+                    return row && row.getAttribute("data-preset-name");
+                });
 
-        // ── Monitor tab ─────────────────────────────────────────────────
-        // Tab wiring and the moved process-output DOM (IDs preserved).
-        await selectSection(page, "monitor");
-        assert.equal(await page.locator("#section-monitor #output-terminal").count(), 1,
-            "the process terminal must live in the Monitor tab");
-        assert.equal(await page.locator("#section-configure #output-terminal").count(), 0,
-            "Configure must not keep a mirrored copy of the terminal");
-        assert.equal(await page.locator("#section-monitor #input-row").count(), 1);
-        assert.equal(await page.locator("#monitor-auto-scroll").count(), 0,
-            "the unreliable auto-scroll toggle must not be present");
-        assert.equal(await page.getAttribute("#monitor-live-badge", "aria-live"), "polite");
-
-        // System/GPU cards render from the mocked endpoint while visible.
-        await page.waitForFunction(() => document.getElementById("monitor-cpu-value")?.textContent === "18.4%");
-        assert.equal(await page.textContent("#monitor-memory-value"), "37.5%");
-        assert.equal(await page.textContent("#monitor-disk-read"), "1.2 MB/s");
-        assert.equal(await page.textContent("#monitor-disk-write"), "410 KB/s");
-        assert.equal(await page.textContent("#monitor-disk-activity"), "Reading and writing");
-        assert.match(await page.textContent("#monitor-disk-sub"), /All physical disks.*Includes other applications/);
-        assert.equal(await page.locator("#monitor-disk-value, #monitor-disk-bar").count(), 0, "capacity no longer appears in the activity card");
-        assert.match(await page.textContent("#monitor-live-badge"), /Live/);
-        await page.waitForFunction(() => document.querySelectorAll("#monitor-card-grid [data-monitor-key^='gpu:']").length === 1);
-        assert.match(await page.textContent("#monitor-card-grid"), /Smoke GPU/);
-        const wideMonitorLayout = await page.locator("#monitor-card-grid").evaluate((grid) => {
-            const gpu = grid.querySelector('[data-monitor-key^="gpu:"]');
-            const style = getComputedStyle(grid);
-            return {
-                display: style.display,
-                wrap: style.flexWrap,
-                gpuWidth: gpu.getBoundingClientRect().width,
-                regularWidths: Array.from(grid.querySelectorAll(':scope > .card:not(.monitor-inference-card)'))
-                    .map(card => card.getBoundingClientRect().width),
-            };
-        });
-        assert.equal(wideMonitorLayout.display, "flex");
-        assert.equal(wideMonitorLayout.wrap, "wrap");
-        assert.ok(wideMonitorLayout.regularWidths.every(width => Math.abs(width - wideMonitorLayout.gpuWidth) < 1),
-            "standard Monitor cards keep equal widths across incomplete rows");
-
-        await page.setViewportSize({ width: 760, height: 720 });
-        const narrowMonitorLayout = await page.locator("#monitor-card-grid").evaluate((grid) => ({
-            clientWidth: grid.clientWidth,
-            scrollWidth: grid.scrollWidth,
-            cardWidths: Array.from(grid.children)
-                .filter(card => !card.classList.contains("hidden"))
-                .map(card => card.getBoundingClientRect().width),
-        }));
-        assert.ok(narrowMonitorLayout.scrollWidth <= narrowMonitorLayout.clientWidth + 1,
-            "wrapped monitor cards must not overflow at a narrow viewport");
-        assert.ok(narrowMonitorLayout.cardWidths.every(width => width >= 220),
-            "narrow monitor cards retain their readable minimum width");
-        await page.setViewportSize({ width: 1280, height: 720 });
-        assert.ok(await page.locator("#monitor-gpu-setup").evaluate(el => el.classList.contains("hidden")),
-            "working probes produce no setup cards");
-
-        // Recheck bypasses the backend cache via the fixed refresh=1 form.
-        await page.locator("#monitor-gpu-help > summary").click();
-        await page.click("#btn-monitor-recheck");
-        await wait(200);
-        assert.ok(systemStatsRequests.some(url => url.includes("refresh=1")),
-            "Recheck must request /api/system-stats?refresh=1");
-
-        // Backlog renders, Clear empties the terminal without replaying it.
-        outputRunningFlag = true;
-        outputQueue = ["smoke line one", "smoke line two"];
-        await page.evaluate(() => processOutput.start(null));
-        await page.waitForFunction(() => document.getElementById("output-terminal").textContent.includes("smoke line two"));
-        await page.click("#btn-clear-output");
-        assert.equal(await page.locator("#output-terminal div").count(), 0, "Clear empties the terminal");
-        assert.match(await page.evaluate(() => processOutput._test.getUrl()), /since=\d+/,
-            "Clear must preserve the cursor so the backlog does not replay");
-        const outputCountAfterClear = outputRequests.length;
-        await wait(400);
-        assert.ok(outputRequests.slice(outputCountAfterClear).every(url => url.includes("since=")),
-            "polls after Clear must not request the backlog from the start");
-        assert.ok(!(await page.textContent("#output-terminal")).includes("smoke line one"),
-            "no replayed backlog after Clear");
-        await page.evaluate(() => processOutput.stop());
-        outputRunningFlag = false;
-
-        // Hide/restore: everything except Process Output can be hidden.
-        await page.click('[data-monitor-hide="system:cpu"]');
-        await page.waitForFunction(() => document.querySelector('[data-monitor-key="system:cpu"]')
-            ?.classList.contains("hidden"));
-        assert.match(await page.textContent("#monitor-hidden-count"), /1 card hidden/);
-        await page.evaluate(() => { document.getElementById("monitor-hidden-controls").open = true; });
-        await page.click("#btn-monitor-show-all");
-        await page.waitForFunction(() => !document.querySelector('[data-monitor-key="system:cpu"]')
-            ?.classList.contains("hidden"));
-        assert.ok(await page.locator("#monitor-hidden-controls").evaluate(el => el.classList.contains("hidden")),
-            "the restore control disappears when nothing is hidden");
-
-        // Inference card: empty state without a server, then one shared
-        // snapshot feeds both the fixed bar and the card with one baseline.
-        assert.ok(await page.locator("#monitor-inference-empty").isVisible(),
-            "the Inference card shows its empty state before any target");
-        statsMetrics = {
-            promptTokens: 70,
-            promptSpeed: 5,
-            genTokens: 30,
-            genSpeed: 3,
-            processing: 1,
+                await page.locator("#presets-list .preset-group-header").first().focus();
+                await page.keyboard.press("ArrowDown");
+                state = await listState();
+                assert.equal(
+                    state.focusKey,
+                    firstRowName,
+                    "ArrowDown into an expanded group must land on its first row"
+                );
+                assert.equal(state.tabbable, 1, "still exactly one item in the tab order after moving");
+                assert.equal(
+                    state.tabbableDescendants,
+                    4,
+                    "only the focused row's checkbox, favorite, archive, and Load button stay tabbable"
+                );
+
+                // Enter selects without collapsing the roving state.
+                await page.keyboard.press("Enter");
+                await page.waitForFunction(() => document.querySelector("#presets-list .preset-item.selected") !== null);
+                state = await listState();
+                assert.equal(
+                    state.focusKey,
+                    firstRowName,
+                    "focus must survive the re-render that selecting a preset triggers"
+                );
+
+                // A mouse click must also move the roving position, or the next arrow
+                // key would jump back to wherever the keyboard last was.
+                //
+                // Only the first group was expanded above, so expand the second too:
+                // rows in a collapsed group are display:none and cannot be clicked.
+                await page.locator("#presets-list .preset-group-header").nth(1).click();
+                await page.waitForFunction(() => Array.from(
+                    document.querySelectorAll("#presets-list .preset-group")
+                ).every((group) => !group.classList.contains("collapsed")));
+
+                const otherRow = await page.evaluate(() => {
+                    const rows = Array.from(document.querySelectorAll("#presets-list .preset-item"))
+                        .filter((el) => el.offsetParent !== null);
+                    const row = rows[rows.length - 1];
+                    return row && row.getAttribute("data-preset-name");
+                });
+                assert.ok(
+                    otherRow && otherRow !== firstRowName,
+                    `expected a second visible row to click, got ${otherRow}`
+                );
+
+                await page.click(`#presets-list .preset-item[data-preset-name="${otherRow}"]`);
+                state = await listState();
+                assert.equal(state.focusKey, otherRow, "clicking a row moves the roving position to it");
+
+                // And the next arrow key must step from the clicked row specifically.
+                // Asserting the exact predecessor matters: a looser check still passes
+                // while the roving key is stale, which is the bug this guards.
+                const expectedPrevious = await page.evaluate((current) => {
+                    const items = Array.from(document.querySelectorAll(
+                        "#presets-list .preset-group-header, #presets-list .preset-item"
+                    )).filter((el) => el.offsetParent !== null);
+                    const index = items.findIndex((el) => el.getAttribute("data-preset-name") === current);
+                    const previous = index > 0 ? items[index - 1] : null;
+                    return previous
+                        && (previous.getAttribute("data-preset-name") || previous.getAttribute("data-group-key"));
+                }, otherRow);
+
+                await page.keyboard.press("ArrowUp");
+                state = await listState();
+                assert.equal(
+                    state.focusKey,
+                    expectedPrevious,
+                    "ArrowUp must step back from the clicked row, not from where the keyboard last was"
+                );
+            },
+            async "models folder changes refresh shared selection"() {
+                // --- Models folder: picker -> setting -> status -> model refresh ---
+                await selectSection(page, "configure");
+                await page.selectOption("#model-select", "smoke-model.gguf");
+                await page.dispatchEvent("#model-select", "change");
+                await page.click("#btn-change-models-folder");
+                await page.waitForFunction(() => document.querySelector("#models-folder-path")?.textContent === "D:\\Smoke & Models");
+                await page.waitForFunction(() => Array.from(document.querySelector("#model-select")?.options || [])
+                    .some(option => option.value === "custom-model.gguf"));
+                assert.equal(await page.inputValue("#model-select"), "", "folder change must clear a missing selection");
+                assert.equal(await page.inputValue("#quick-model-select"), "");
+                assert.equal(modelsDirRequests.length, 1);
+                assert.equal(modelsDirRequests[0].path, "D:\\Smoke & Models");
+                assert.doesNotMatch(
+                    await page.textContent("#command-preview-text"),
+                    /smoke-model\.gguf/,
+                    "the command preview must drop the old model after the selection is cleared"
+                );
+
+                await page.click("#btn-reset-models-folder");
+                await page.waitForFunction(() => document.querySelector("#models-folder-path")?.textContent === "models");
+                await page.waitForFunction(() => Array.from(document.querySelector("#model-select")?.options || [])
+                    .some(option => option.value === "smoke-model.gguf"));
+                assert.equal(modelsDirRequests.length, 2);
+                assert.equal(modelsDirRequests[1].path, null);
+            },
+            async "Monitor cards output and shared inference baseline"() {
+                // ── Monitor tab ─────────────────────────────────────────────────
+                // Tab wiring and the moved process-output DOM (IDs preserved).
+                await selectSection(page, "monitor");
+                assert.equal(await page.locator("#section-monitor #output-terminal").count(), 1,
+                    "the process terminal must live in the Monitor tab");
+                assert.equal(await page.locator("#section-configure #output-terminal").count(), 0,
+                    "Configure must not keep a mirrored copy of the terminal");
+                assert.equal(await page.locator("#section-monitor #input-row").count(), 1);
+                assert.equal(await page.locator("#monitor-auto-scroll").count(), 0,
+                    "the unreliable auto-scroll toggle must not be present");
+                assert.equal(await page.getAttribute("#monitor-live-badge", "aria-live"), "polite");
+
+                // System/GPU cards render from the mocked endpoint while visible.
+                await page.waitForFunction(() => document.getElementById("monitor-cpu-value")?.textContent === "18.4%");
+                assert.equal(await page.textContent("#monitor-memory-value"), "37.5%");
+                assert.equal(await page.textContent("#monitor-disk-read"), "1.2 MB/s");
+                assert.equal(await page.textContent("#monitor-disk-write"), "410 KB/s");
+                assert.equal(await page.textContent("#monitor-disk-activity"), "Reading and writing");
+                assert.match(await page.textContent("#monitor-disk-sub"), /All physical disks.*Includes other applications/);
+                assert.equal(await page.locator("#monitor-disk-value, #monitor-disk-bar").count(), 0, "capacity no longer appears in the activity card");
+                assert.match(await page.textContent("#monitor-live-badge"), /Live/);
+                await page.waitForFunction(() => document.querySelectorAll("#monitor-card-grid [data-monitor-key^='gpu:']").length === 1);
+                assert.match(await page.textContent("#monitor-card-grid"), /Smoke GPU/);
+                const wideMonitorLayout = await page.locator("#monitor-card-grid").evaluate((grid) => {
+                    const gpu = grid.querySelector('[data-monitor-key^="gpu:"]');
+                    const style = getComputedStyle(grid);
+                    return {
+                        display: style.display,
+                        wrap: style.flexWrap,
+                        gpuWidth: gpu.getBoundingClientRect().width,
+                        regularWidths: Array.from(grid.querySelectorAll(':scope > .card:not(.monitor-inference-card)'))
+                            .map(card => card.getBoundingClientRect().width),
+                    };
+                });
+                assert.equal(wideMonitorLayout.display, "flex");
+                assert.equal(wideMonitorLayout.wrap, "wrap");
+                assert.ok(wideMonitorLayout.regularWidths.every(width => Math.abs(width - wideMonitorLayout.gpuWidth) < 1),
+                    "standard Monitor cards keep equal widths across incomplete rows");
+
+                await page.setViewportSize({ width: 760, height: 720 });
+                const narrowMonitorLayout = await page.locator("#monitor-card-grid").evaluate((grid) => ({
+                    clientWidth: grid.clientWidth,
+                    scrollWidth: grid.scrollWidth,
+                    cardWidths: Array.from(grid.children)
+                        .filter(card => !card.classList.contains("hidden"))
+                        .map(card => card.getBoundingClientRect().width),
+                }));
+                assert.ok(narrowMonitorLayout.scrollWidth <= narrowMonitorLayout.clientWidth + 1,
+                    "wrapped monitor cards must not overflow at a narrow viewport");
+                assert.ok(narrowMonitorLayout.cardWidths.every(width => width >= 220),
+                    "narrow monitor cards retain their readable minimum width");
+                await page.setViewportSize({ width: 1280, height: 720 });
+                assert.ok(await page.locator("#monitor-gpu-setup").evaluate(el => el.classList.contains("hidden")),
+                    "working probes produce no setup cards");
+
+                // Recheck bypasses the backend cache via the fixed refresh=1 form.
+                await page.locator("#monitor-gpu-help > summary").click();
+                await page.click("#btn-monitor-recheck");
+                await wait(200);
+                assert.ok(systemStatsRequests.some(url => url.includes("refresh=1")),
+                    "Recheck must request /api/system-stats?refresh=1");
+
+                // Backlog renders, Clear empties the terminal without replaying it.
+                outputRunningFlag = true;
+                outputQueue = ["smoke line one", "smoke line two"];
+                await page.evaluate(() => processOutput.start(null));
+                await page.waitForFunction(() => document.getElementById("output-terminal").textContent.includes("smoke line two"));
+                await page.click("#btn-clear-output");
+                assert.equal(await page.locator("#output-terminal div").count(), 0, "Clear empties the terminal");
+                assert.match(await page.evaluate(() => processOutput._test.getUrl()), /since=\d+/,
+                    "Clear must preserve the cursor so the backlog does not replay");
+                const outputCountAfterClear = outputRequests.length;
+                await wait(400);
+                assert.ok(outputRequests.slice(outputCountAfterClear).every(url => url.includes("since=")),
+                    "polls after Clear must not request the backlog from the start");
+                assert.ok(!(await page.textContent("#output-terminal")).includes("smoke line one"),
+                    "no replayed backlog after Clear");
+                await page.evaluate(() => processOutput.stop());
+                outputRunningFlag = false;
+
+                // Hide/restore: everything except Process Output can be hidden.
+                await page.click('[data-monitor-hide="system:cpu"]');
+                await page.waitForFunction(() => document.querySelector('[data-monitor-key="system:cpu"]')
+                    ?.classList.contains("hidden"));
+                assert.match(await page.textContent("#monitor-hidden-count"), /1 card hidden/);
+                await page.evaluate(() => { document.getElementById("monitor-hidden-controls").open = true; });
+                await page.click("#btn-monitor-show-all");
+                await page.waitForFunction(() => !document.querySelector('[data-monitor-key="system:cpu"]')
+                    ?.classList.contains("hidden"));
+                assert.ok(await page.locator("#monitor-hidden-controls").evaluate(el => el.classList.contains("hidden")),
+                    "the restore control disappears when nothing is hidden");
+
+                // Inference card: empty state without a server, then one shared
+                // snapshot feeds both the fixed bar and the card with one baseline.
+                assert.ok(await page.locator("#monitor-inference-empty").isVisible(),
+                    "the Inference card shows its empty state before any target");
+                statsMetrics = {
+                    promptTokens: 70,
+                    promptSpeed: 5,
+                    genTokens: 30,
+                    genSpeed: 3,
+                    processing: 1,
+                };
+                statsSlots = [{
+                    id: 0,
+                    id_task: 1,
+                    n_ctx: 1000,
+                    is_processing: true,
+                    n_prompt_tokens: 250,
+                    n_prompt_tokens_processed: 70,
+                    next_token: { n_decoded: 30 },
+                }];
+                await page.evaluate(async () => {
+                    inferencePolling.start({ generation: 99 }, { operation: "manual-launch" });
+                    await inferencePolling._test.poll();
+                });
+                assert.equal(await page.textContent("#stats-context"), "100");
+                assert.equal(await page.textContent("#monitor-inference-total"), "100 tokens",
+                    "the Inference card must agree with the fixed bar's session baseline");
+                assert.match(await page.textContent("#monitor-inference-context-reading"), /250 \/ 1,000/);
+                assert.match(await page.textContent("#monitor-inference-context-label"), /active/,
+                    "a processing slot is labeled active");
+                assert.match(await page.textContent("#monitor-inference-state-badge"), /1 active/);
+
+                // Reset updates both views immediately from the shared baseline.
+                await page.click("#btn-reset-inference");
+                assert.equal(await page.textContent("#stats-context"), "0");
+                assert.equal(await page.textContent("#monitor-inference-total"), "0 tokens");
+                await page.evaluate(() => inferencePolling.stop());
+
+                // System polling stops while the Monitor panel is hidden.
+                const systemCountWhileVisible = systemStatsRequests.length;
+                await selectSection(page, "configure");
+                await wait(2600);
+                assert.equal(systemStatsRequests.length, systemCountWhileVisible,
+                    "system stats must not poll while the Monitor tab is hidden");
+            },
         };
-        statsSlots = [{
-            id: 0,
-            id_task: 1,
-            n_ctx: 1000,
-            is_processing: true,
-            n_prompt_tokens: 250,
-            n_prompt_tokens_processed: 70,
-            next_token: { n_decoded: 30 },
-        }];
-        await page.evaluate(async () => {
-            inferencePolling.start({ generation: 99 }, { operation: "manual-launch" });
-            await inferencePolling._test.poll();
-        });
-        assert.equal(await page.textContent("#stats-context"), "100");
-        assert.equal(await page.textContent("#monitor-inference-total"), "100 tokens",
-            "the Inference card must agree with the fixed bar's session baseline");
-        assert.match(await page.textContent("#monitor-inference-context-reading"), /250 \/ 1,000/);
-        assert.match(await page.textContent("#monitor-inference-context-label"), /active/,
-            "a processing slot is labeled active");
-        assert.match(await page.textContent("#monitor-inference-state-badge"), /1 active/);
-
-        // Reset updates both views immediately from the shared baseline.
-        await page.click("#btn-reset-inference");
-        assert.equal(await page.textContent("#stats-context"), "0");
-        assert.equal(await page.textContent("#monitor-inference-total"), "0 tokens");
-        await page.evaluate(() => inferencePolling.stop());
-
-        // System polling stops while the Monitor panel is hidden.
-        const systemCountWhileVisible = systemStatsRequests.length;
-        await selectSection(page, "configure");
-        await wait(2600);
-        assert.equal(systemStatsRequests.length, systemCountWhileVisible,
-            "system stats must not poll while the Monitor tab is hidden");
+        assert.equal(typeof scenarios[verify], "function", `unknown smoke scenario: ${verify}`);
+        await scenarios[verify]();
 
         assert.equal(pageErrors.length, 0, pageErrors.join("\n"));
     } finally {
@@ -4448,8 +4501,29 @@ async function verifyOfficialBackendDiscovery(page) {
     assert.deepEqual(writes, [], "discovery never installs or switches toolkits");
 }
 
-for (const [name, verify] of [
-    ["shared controls, chat, downloads and model switcher", null],
+for (const [name, verify = name] of [
+    ["preset imports and safe notifications"],
+    ["mirrored launch controls and Configure search"],
+    ["API key controls and masked command previews"],
+    ["inference rates and authenticated polling"],
+    ["failed Stop recovery and independent inference sources"],
+    ["Chat settings panel responsive collapse"],
+    ["Chat availability and shared request settings"],
+    ["Chat reasoning persistence and raw thinking tags"],
+    ["Chat empty responses and stopped partial streams"],
+    ["Chat streaming scroll position and response metadata"],
+    ["Chat editing and failed regeneration recovery"],
+    ["Chat context preview and overflow recovery"],
+    ["Chat compaction controls and transcript preservation"],
+    ["shared sampler controls and preset lifecycle"],
+    ["API endpoints and remote tunnel states"],
+    ["external server connection and remembered targets"],
+    ["custom launch arguments and environment validation"],
+    ["custom backend activation preserves shared flags"],
+    ["model switcher refresh drag and keyboard controls"],
+    ["preset list roving keyboard focus"],
+    ["models folder changes refresh shared selection"],
+    ["Monitor cards output and shared inference baseline"],
     ["configure restart", verifyConfigureRestart],
     ["configure reset to defaults", verifyConfigureReset],
     ["quick launch presentation", verifyQuickLaunchPolish],
diff --git a/tests/frontend/js_syntax_check.cjs b/tests/frontend/js_syntax_check.cjs
deleted file mode 100644
index 792708fd..00000000
--- a/tests/frontend/js_syntax_check.cjs
+++ /dev/null
@@ -1,48 +0,0 @@
-const { spawnSync } = require("node:child_process");
-const fs = require("node:fs");
-const path = require("node:path");
-
-const ROOT = path.resolve(__dirname, "..", "..");
-const TARGET_DIRS = [
-    path.join(ROOT, "ui", "js"),
-    path.join(ROOT, "tests", "frontend"),
-];
-
-function collectJsFiles(dir) {
-    const files = [];
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-        const fullPath = path.join(dir, entry.name);
-        if (entry.isDirectory()) {
-            files.push(...collectJsFiles(fullPath));
-        } else if (entry.isFile() && /\.(?:js|cjs)$/.test(entry.name)) {
-            files.push(fullPath);
-        }
-    }
-    return files;
-}
-
-const files = TARGET_DIRS.flatMap(collectJsFiles).sort();
-const failures = [];
-
-for (const file of files) {
-    const result = spawnSync(process.execPath, ["--check", file], {
-        cwd: ROOT,
-        encoding: "utf8",
-    });
-    if (result.status !== 0) {
-        failures.push({
-            file: path.relative(ROOT, file),
-            output: (result.stderr || result.stdout || "").trim(),
-        });
-    }
-}
-
-if (failures.length) {
-    for (const failure of failures) {
-        console.error(`Syntax check failed: ${failure.file}`);
-        console.error(failure.output);
-    }
-    process.exit(1);
-}
-
-console.log(`syntax check passed for ${files.length} frontend JavaScript files`);