collavre 0.21.0 → 0.23.0

data/app/services/collavre/tools/cron_list_service.rb

@@ -5,6 +5,7 @@ module Tools
   class CronListService
     extend T::Sig
     extend ToolMeta
+    include Collavre::Crons::RecurringTaskArguments
 
     tool_name "cron_list"
     tool_description "List recurring scheduled jobs. Returns all cron jobs for creatives the current user has access to. Filter by creative_id to see jobs for a specific creative."
@@ -46,20 +47,6 @@ module Tools
 
       { success: true, cron_jobs: results, count: results.size }
     end
-
-    private
-
-    def parse_arguments(task)
-      args = task.arguments
-      return {} unless args.is_a?(Array) && args.first.is_a?(Hash)
-
-      args.first.stringify_keys
-    end
-
-    def parse_creative_id_from_key(key)
-      match = key.match(/\Acron_(\d+)_/)
-      match[1].to_i if match
-    end
   end
 end
 end

data/app/services/collavre/topics/orphaned_cron_notifier.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Topics
+    # When a Topic is deleted, find every non-static recurring cron task that
+    # targets that topic (topic_id stored inside the task's arguments JSON) and
+    # post a system message into the affected creative's Main topic so the user
+    # knows the cron is now orphaned.
+    #
+    # Decision: notify only. The recurring task is intentionally left in place
+    # so the user can decide whether to re-point or cancel it.
+    class OrphanedCronNotifier
+      include Collavre::Crons::RecurringTaskArguments
+
+      def initialize(topic_id:, topic_name:)
+        @topic_id = topic_id
+        @topic_name = topic_name
+      end
+
+      def call
+        return if @topic_id.blank?
+
+        matching_tasks.each do |task, args|
+          notify_for(task, args)
+        end
+      end
+
+      private
+
+      def matching_tasks
+        SolidQueue::RecurringTask.where(static: false).filter_map do |task|
+          args = parse_arguments(task)
+          target = args["topic_id"]
+          next if target.blank?
+          next unless target.to_i == @topic_id.to_i
+
+          [ task, args ]
+        end
+      end
+
+      def notify_for(task, args)
+        creative_id = args["creative_id"] || parse_creative_id_from_key(task.key)
+        creative = Creative.find_by(id: creative_id)
+        return unless creative
+
+        # The recurring task stores the original (possibly linked/child) creative
+        # id, but Comment#use_origin_creative rewrites the comment to the origin.
+        # Post to the origin's Main topic so the notice stays on the origin and
+        # is reachable from normal topic navigation (matches CronCreateService).
+        main_topic = creative.effective_origin.main_topic
+        return unless main_topic
+
+        Comment.create!(
+          creative: creative,
+          topic_id: main_topic.id,
+          user: nil, # System message
+          skip_default_user: true, # keep user nil even when a deleter is Current.user; don't trigger AI orchestration
+          content: I18n.t(
+            "collavre.topics.orphaned_cron_notice",
+            topic_name: @topic_name,
+            cron_key: task.key,
+            message: args["message"]
+          )
+        )
+      end
+    end
+  end
+end

data/app/services/collavre/typo_corrector.rb

@@ -0,0 +1,188 @@
+module Collavre
+  # Server-side typo correction. Sends the text the user is typing to an LLM and
+  # returns a validated *structured edit list* — never a rewritten string. Each
+  # edit is {original, suggestion, reason, confidence}. Validation rejects anything
+  # that is not a small, in-place spelling fix (style rewrites, hallucinated spans,
+  # edits inside code/URLs/mentions), so the UI can trust every returned edit.
+  class TypoCorrector
+    AGENT_EMAIL = "typo-corrector@collavre.local"
+
+    # Reject "corrections" that are really rewrites: an edit is kept only when the
+    # original is short and the suggestion is within this edit distance of it.
+    MAX_ORIGINAL_LENGTH = 40
+    MIN_EDIT_DISTANCE_CAP = 2
+    EDIT_DISTANCE_RATIO = 0.4
+
+    FALLBACK_SYSTEM_PROMPT = <<~PROMPT.freeze
+      You are a typo correction engine. Fix only spelling mistakes and obvious typos,
+      never style, grammar or meaning, in any language. `original` must be an exact
+      substring of the input. Return ONLY JSON:
+      {"edits":[{"original":"x","suggestion":"y","reason":"spelling","confidence":0.0}]}
+    PROMPT
+
+    def initialize(client: nil)
+      @client = client
+    end
+
+    # Returns an Array of Hashes with string keys: "original", "suggestion",
+    # "reason", "confidence". Empty array on blank input or LLM/parse failure.
+    def correct(text)
+      text = text.to_s
+      return [] if text.strip.blank?
+
+      response = client.chat([
+        { role: :user, parts: [ { text: "Text:\n#{text}" } ] }
+      ])
+
+      edits = parse_response(response)
+      validate(edits, text)
+    end
+
+    private
+
+    def client
+      @client ||= build_client
+    end
+
+    def build_client
+      agent = Collavre.user_class.find_by(email: AGENT_EMAIL)
+      AiClient.new(
+        vendor: agent&.llm_vendor.presence || ENV.fetch("COLLAVRE_DEFAULT_LLM_VENDOR", "gemini"),
+        model: agent&.llm_model.presence || ENV.fetch("COLLAVRE_DEFAULT_LLM_MODEL", "gemini-3.1-flash-lite"),
+        system_prompt: agent&.system_prompt.presence || FALLBACK_SYSTEM_PROMPT,
+        llm_api_key: agent&.llm_api_key,
+        gateway_url: agent&.gateway_url,
+        # Vendor adapters (e.g. OpenClaw) resolve the gateway/key from the context
+        # user, not the llm_api_key/gateway_url kwargs. Pass the agent so an
+        # OpenClaw-backed typo agent isn't built with user: nil (which makes the
+        # adapter bail with "Gateway URL not configured" and silently return no edits).
+        context: { user: agent },
+        # Runs on debounced typing of *unsubmitted* text — never persist the draft
+        # to ActivityLog (RubyLlmInteractionLogger writes `messages` there).
+        log_interactions: false
+      )
+    end
+
+    def parse_response(content)
+      return [] if content.blank?
+
+      cleaned = content.gsub(/^```json\s*/, "").gsub(/\s*```$/, "").strip
+      parsed = JSON.parse(cleaned)
+      edits = parsed.is_a?(Hash) ? parsed["edits"] : parsed
+      edits.is_a?(Array) ? edits : []
+    rescue JSON::ParserError => e
+      # Never log the raw response: it can echo the user's unsubmitted draft,
+      # which would leak private text to application logs despite log_interactions: false.
+      Rails.logger.warn("[TypoCorrector] JSON parse error: #{e.message} (#{content.to_s.length} chars)")
+      []
+    end
+
+    def validate(edits, text)
+      skip_ranges = skip_ranges(text)
+      seen = {}
+
+      edits.filter_map do |edit|
+        next unless edit.is_a?(Hash)
+
+        original = edit["original"].to_s
+        suggestion = edit["suggestion"].to_s
+        next if original.empty? || suggestion.empty? || original == suggestion
+        next if original.length > MAX_ORIGINAL_LENGTH
+
+        # `original` must appear verbatim in the text, outside any skip region
+        # (code/URL/mention/markup). We return the offset of that first *valid*
+        # occurrence so the client anchors there — otherwise the client's own
+        # left-to-right search would bind to an earlier occurrence sitting inside
+        # a protected span and edit it (a markdown-canonical/code-safety hole).
+        offset = first_offset_outside_skip_ranges(text, original, skip_ranges)
+        next if offset.nil?
+
+        # Reject big rewrites — keep only minimal in-place fixes.
+        cap = [ MIN_EDIT_DISTANCE_CAP, (original.length * EDIT_DISTANCE_RATIO).ceil ].max
+        next if levenshtein(original, suggestion) > cap
+
+        key = [ original, suggestion ]
+        next if seen[key]
+        seen[key] = true
+
+        {
+          "original" => original,
+          "suggestion" => suggestion,
+          "reason" => edit["reason"].presence || "spelling",
+          "confidence" => clamp_confidence(edit["confidence"]),
+          # Emit the offset in UTF-16 code units, the coordinate space JS string
+          # indexing uses. A Ruby character index would be off by one per astral
+          # character (emoji, etc.) before the typo, so the client's substring
+          # check at `offset` would fail and fall back to indexOf — which can bind
+          # to a protected occurrence the server already excluded.
+          "offset" => utf16_offset(text, offset)
+        }
+      end
+    end
+
+    def clamp_confidence(value)
+      return 0.5 if value.nil?
+
+      Float(value).clamp(0.0, 1.0)
+    rescue ArgumentError, TypeError
+      0.5
+    end
+
+    # Character ranges that must never be edited: fenced code, inline code, URLs,
+    # @mentions, HTML tags, and markdown-canonical <span style> color fragments.
+    def skip_ranges(text)
+      ranges = []
+      patterns = [
+        /```.*?```/m,             # fenced code blocks
+        /`[^`]*`/,                # inline code
+        %r{https?://\S+},         # URLs
+        /@[^\s@]+/,               # @mentions
+        # `[^<>]` (not just `[^>]`) keeps this linear: a stray run of "<<<<" can't
+        # make scan re-walk the tail from every "<" (CodeQL polynomial-ReDoS).
+        /<[^<>]+>/                # HTML / span-style markup
+      ]
+      patterns.each do |pattern|
+        text.scan(pattern) { ranges << Regexp.last_match.offset(0) }
+      end
+      ranges
+    end
+
+    # First character offset where `needle` occurs entirely outside every skip
+    # range, or nil if every occurrence overlaps a protected span.
+    def first_offset_outside_skip_ranges(text, needle, skip_ranges)
+      pos = 0
+      while (idx = text.index(needle, pos))
+        finish = idx + needle.length
+        inside = skip_ranges.any? { |(s, e)| idx < e && finish > s }
+        return idx unless inside
+
+        pos = idx + 1
+      end
+      nil
+    end
+
+    # Convert a Ruby character index into a UTF-16 code-unit offset (JS string
+    # coordinates). Characters outside the BMP count as two code units in JS.
+    def utf16_offset(text, char_index)
+      text[0, char_index].to_s.encode("UTF-16LE").bytesize / 2
+    rescue Encoding::UndefinedConversionError, Encoding::InvalidByteSequenceError
+      char_index
+    end
+
+    # Iterative Levenshtein distance.
+    def levenshtein(a, b)
+      a = a.chars
+      b = b.chars
+      prev = (0..b.length).to_a
+      a.each_with_index do |ac, i|
+        curr = [ i + 1 ]
+        b.each_with_index do |bc, j|
+          cost = ac == bc ? 0 : 1
+          curr << [ curr[j] + 1, prev[j + 1] + 1, prev[j] + cost ].min
+        end
+        prev = curr
+      end
+      prev.last
+    end
+  end
+end

data/app/views/collavre/admin/integrations/_category.html.erb

@@ -4,7 +4,7 @@
   </h3>
 
   <div class="table-scroll">
-    <table class="settings-table" style="width: 100%; min-width: 640px; border-collapse: collapse;">
+    <table class="settings-table" style="width: 100%; min-width: 640px; border-collapse: collapse; table-layout: fixed;">
       <thead>
         <tr>
           <th style="text-align: left; padding: 0.5em; width: 30%;"><%= t("collavre.admin.integrations.headers.key") %></th>

data/app/views/collavre/admin/integrations/_setting_row.html.erb

@@ -8,29 +8,45 @@
   end
   current_display = row[:present] ? row[:display_value].to_s : "—"
 %>
+<% description = t("collavre.admin.integrations.descriptions.#{key_str}", default: "") %>
 <tr style="border-top: 1px solid var(--color-border);">
-  <td style="padding: 0.5em; vertical-align: top;">
-    <code><%= key_str %></code>
+  <td style="padding: 0.5em; vertical-align: top; word-break: break-word; overflow-wrap: anywhere;">
+    <code style="word-break: break-all; overflow-wrap: anywhere;"><%= key_str %></code>
     <% if definition.requires_restart %>
       <span class="badge badge-warning" style="display: inline-block; margin-left: 0.5em; padding: 0.1em 0.5em; font-size: 0.75em; background: var(--color-warning); color: var(--text-on-badge); border-radius: 3px;">
         <%= t("collavre.admin.integrations.restart_required") %>
       </span>
     <% end %>
+    <% if description.present? %>
+      <div style="font-size: 0.85em; color: var(--color-text); margin-top: 0.4em; line-height: 1.4;">
+        <%= simple_format(description) %>
+      </div>
+    <% end %>
     <div style="font-size: 0.8em; color: var(--color-muted); margin-top: 0.25em;">
-      <%= t("collavre.admin.integrations.env_var_label") %>: <code><%= definition.env_var %></code>
+      <%= t("collavre.admin.integrations.env_var_label") %>: <code style="word-break: break-all; overflow-wrap: anywhere;"><%= definition.env_var %></code>
     </div>
   </td>
   <td style="padding: 0.5em; vertical-align: top;">
     <%# Input references the bulk form via HTML5 `form` attribute so the table is not nested inside <form>. %>
     <%# Placeholder displays the current value (masked for sensitive); empty input keeps the existing value. %>
-    <% input_tag = definition.sensitive ? :password_field_tag : :text_field_tag %>
-    <%= send(input_tag,
-          "integration_setting[#{key_str}]",
-          nil,
-          form: bulk_form_id,
-          placeholder: current_display,
-          autocomplete: "off",
-          style: "width: 100%;") %>
+    <% if definition.input_type == :textarea %>
+      <%= text_area_tag "integration_setting[#{key_str}]",
+            nil,
+            form: bulk_form_id,
+            placeholder: current_display,
+            autocomplete: "off",
+            rows: 8,
+            style: "width: 100%; font-family: var(--font-mono, monospace); font-size: 0.85em; min-height: 8em;" %>
+    <% else %>
+      <% input_tag = definition.sensitive ? :password_field_tag : :text_field_tag %>
+      <%= send(input_tag,
+            "integration_setting[#{key_str}]",
+            nil,
+            form: bulk_form_id,
+            placeholder: current_display,
+            autocomplete: "off",
+            style: "width: 100%;") %>
+    <% end %>
     <div style="font-size: 0.8em; margin-top: 0.25em;">
       <span class="badge badge-source-<%= row[:source] %>" style="display: inline-block; padding: 0.1em 0.5em; font-size: 0.85em; border-radius: 3px; background: <%= source_bg %>; color: <%= source_fg %>;">
         <%= t("collavre.admin.integrations.source.#{row[:source]}", default: row[:source].to_s.upcase) %>

data/app/views/collavre/comments/_comment.html.erb

@@ -36,7 +36,11 @@
       <span class="comment-status-label private-label">🔒 <%= t('collavre.comments.private') %></span>
     <% end %>
     <% if comment.action_executed_at.present? %>
-      <span class="comment-status-label approved-label">✅ <%= t('collavre.comments.approved_label') %></span>
+      <% if comment.claude_channel_permission_denied? %>
+        <span class="comment-status-label denied-label">🚫 <%= t('collavre.comments.denied_label') %></span>
+      <% else %>
+        <span class="comment-status-label approved-label">✅ <%= t('collavre.comments.approved_label') %></span>
+      <% end %>
     <% end %>
     <% can_convert_comment = comment.user == Current.user || comment.creative.has_permission?(Current.user, :admin) %>
   </div>
@@ -45,6 +49,11 @@
         <button class="comment-stop-btn" type="button" data-action="click->comment#cancelTask" data-task-id="<%= comment.task_id %>" title="<%= t('collavre.comments.stop_agent') %>">
           <span class="agent-stop-icon">&#x25A0;</span> <%= t('collavre.comments.stop_agent') %>
         </button>
+      <% elsif comment.waiting_notice? && (blocking_task = comment.topic_blocking_task) %>
+        <%# Stop the in-progress blocker so the deferred waiter can proceed (stuck recovery). %>
+        <button class="comment-stop-btn" type="button" data-action="click->comment#cancelTask" data-task-id="<%= blocking_task.id %>" title="<%= t('collavre.comments.stop_blocking_agent') %>">
+          <span class="agent-stop-icon">&#x25A0;</span> <%= t('collavre.comments.stop_blocking_agent') %>
+        </button>
       <% end %>
       <button class="add-reaction-btn" type="button" data-action="click->comment#triggerReactionPicker" title="<%= t('collavre.comments.add_reaction') %>">
         <span class="grayscale-emoji">☺</span>
@@ -57,6 +66,11 @@
         <button class="approve-comment-btn comment-approve-hidden" data-comment-target="approveButton" data-comment-id="<%= comment.id %>" title="<%= t('collavre.comments.approve_button') %>">
           <%= t('collavre.comments.approve_button') %>
         </button>
+        <% if comment.claude_channel_permission? %>
+          <button class="deny-comment-btn comment-approve-hidden" data-comment-target="denyButton" data-comment-id="<%= comment.id %>" title="<%= t('collavre.comments.deny_button') %>">
+            <%= t('collavre.comments.deny_button') %>
+          </button>
+        <% end %>
       <% end %>
       <button class="edit-comment-btn comment-owner-only" data-comment-target="ownerButton" data-comment-id="<%= comment.id %>" data-comment-content="<%= comment.content %>" data-comment-private="<%= comment.private? %>" title="<%= t('collavre.comments.update_comment') %>">
         <%= t('collavre.comments.edit_button') %>

data/app/views/collavre/comments/_comments_popup.html.erb

@@ -61,7 +61,20 @@
      data-remove-from-history-label="<%= t('collavre.comments.remove_from_history') %>"
      data-inbox-reply-button="<%= t('collavre.comments.inbox_reply_button') %>"
      data-table-download-csv-text="<%= t('collavre.comments.table_download.csv') %>"
-     data-table-download-excel-text="<%= t('collavre.comments.table_download.excel') %>">
+     data-table-download-excel-text="<%= t('collavre.comments.table_download.excel') %>"
+     <% if Current.user %>
+     data-typo-enabled="<%= Current.user.typo_correction_enabled %>"
+     data-typo-threshold="<%= Current.user.typo_correction_threshold %>"
+     data-typo-on-voice="<%= Current.user.typo_correction_on_voice %>"
+     data-typo-on-soft-keyboard="<%= Current.user.typo_correction_on_soft_keyboard %>"
+     data-typo-on-physical-keyboard="<%= Current.user.typo_correction_on_physical_keyboard %>"
+     data-typo-in-chat="<%= Current.user.typo_correction_in_chat %>"
+     data-typo-in-editor="<%= Current.user.typo_correction_in_editor %>"
+     data-typo-endpoint="<%= collavre.typo_corrections_path %>"
+     data-typo-keep-label="<%= t('collavre.comments.typo_keep_label') %>"
+     data-typo-custom-label="<%= t('collavre.comments.typo_custom_label') %>"
+     data-typo-input-label="<%= t('collavre.comments.typo_input_label') %>"
+     <% end %>>
   <div class="resize-handle resize-handle-left" data-comments--popup-target="leftHandle"></div>
   <div class="resize-handle resize-handle-right" data-comments--popup-target="rightHandle"></div>
   <div class="comments-popup-header" data-comments--popup-target="header">
@@ -120,8 +133,10 @@
   <div id="comments-list" data-comments--popup-target="list" data-comments--list-target="list"><%= t('app.loading') %></div>
   <div id="typing-indicator-row">
     <button type="button" id="scroll-prev-msg-btn" class="scroll-prev-msg-btn" data-action="click->comments--list#scrollToPreviousMessage" title="<%= t('collavre.comments.scroll_to_prev', default: 'Previous message') %>" aria-label="<%= t('collavre.comments.scroll_to_prev', default: 'Previous message') %>">&#8963;</button>
-    <div id="channel-chips-container" data-comments--presence-target="channelChips"></div>
-    <div id="typing-indicator" data-comments--presence-target="typingIndicator" data-comments--popup-target="typingIndicator" data-stop-agent-text="<%= t('collavre.comments.stop_agent') %>"></div>
+    <div id="typing-scroll-viewport" data-comments--presence-target="scrollRow">
+      <div id="channel-chips-container" data-comments--presence-target="channelChips"></div>
+      <div id="typing-indicator" data-comments--presence-target="typingIndicator" data-comments--popup-target="typingIndicator" data-stop-agent-text="<%= t('collavre.comments.stop_agent') %>"></div>
+    </div>
   </div>
   <form id="new-comment-form" data-comments--popup-target="form" data-comments--form-target="form" style="display:none;">
     <input type="hidden" name="comment[quoted_comment_id]" data-comments--form-target="quotedCommentId" value="" />

data/app/views/collavre/creatives/_inline_edit_form.html.erb

@@ -4,6 +4,7 @@
     <input type="hidden" name="authenticity_token" value="<%= form_authenticity_token %>" />
     <input type="hidden" id="inline-creative-description" name="creative[description]" />
     <input type="hidden" id="inline-content-type" name="creative[content_type_input]" value="html" />
+    <input type="hidden" id="inline-markdown-editor" name="creative[markdown_editor]" />
     <input type="hidden" id="inline-markdown-source" name="creative[markdown_source]" />
     <input type="hidden" id="inline-parent-id" name="creative[parent_id]" />
     <input type="hidden" id="inline-before-id" name="before_id" />

data/app/views/collavre/creatives/_topic_move_members_modal.html.erb

@@ -0,0 +1,42 @@
+<%#
+  Popup shown after a topic is moved to another creative, offering to re-add
+  members who had access on the source creative but not on the target.
+  Rendered hidden; populated and shown by topic_move_members_popup.js using the
+  `missing_members` payload returned from TopicsController#move.
+%>
+<div id="topic-move-members-modal"
+     style="display: none; position: fixed; inset: 0; z-index: 10001; align-items: center; justify-content: center; background: rgba(0, 0, 0, 0.3);"
+     data-shares-url-template="<%= collavre.creative_creative_shares_path('__CREATIVE_ID__') %>"
+     data-adding-text="<%= t('collavre.topics.move.add_members.adding') %>"
+     data-added-one="<%= t('collavre.topics.move.add_members.added.one') %>"
+     data-added-other="<%= t('collavre.topics.move.add_members.added.other', count: '__COUNT__') %>"
+     data-partial-text="<%= t('collavre.topics.move.add_members.partial', added: '__ADDED__', failed: '__FAILED__') %>"
+     data-failed-text="<%= t('collavre.topics.move.add_members.failed') %>"
+     data-description-template="<%= t('collavre.topics.move.add_members.description', creative: '__CREATIVE_NAME__') %>">
+  <div class="popup-box" style="max-width: 460px; width: 90%;">
+    <button type="button" id="topic-move-members-close" class="popup-close" aria-label="Close" style="position: absolute; top: 12px; right: 12px;">&times;</button>
+    <h2><%= t('collavre.topics.move.add_members.title') %></h2>
+    <p id="topic-move-members-description" style="opacity: 0.75; margin: 0.5em 0 1em;"></p>
+    <div id="topic-move-members-message" aria-live="polite"></div>
+    <ul id="topic-move-members-list" class="share-grid"></ul>
+    <div style="display: flex; gap: 0.5em; justify-content: flex-end; margin-top: 1em;">
+      <button type="button" id="topic-move-members-skip" class="btn btn-secondary"><%= t('collavre.topics.move.add_members.skip') %></button>
+      <button type="button" id="topic-move-members-add" class="btn btn-primary"><%= t('collavre.topics.move.add_members.add') %></button>
+    </div>
+  </div>
+
+  <template id="topic-move-member-row">
+    <li class="topic-move-member-row" style="display: flex; align-items: center; gap: 0.5em;">
+      <input type="checkbox" class="tmm-checkbox" checked>
+      <span class="avatar share-avatar tmm-avatar" style="display: inline-block; width: 20px; height: 20px; border-radius: 50%; background: var(--surface-3, #ddd); text-align: center; line-height: 20px; font-size: 10px; overflow: hidden;"></span>
+      <span class="tmm-name"></span>
+      <span class="tmm-email" style="opacity: 0.5; flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;"></span>
+      <select class="org-chart-permission-select share-modal-permission-select tmm-permission">
+        <% %w[admin write feedback read].each do |perm| %>
+          <option value="<%= perm %>"><%= t("collavre.creatives.index.permission_#{perm}") %></option>
+        <% end %>
+      </select>
+      <span class="tmm-status" style="width: 16px; text-align: center;"></span>
+    </li>
+  </template>
+</div>

data/app/views/collavre/creatives/index.html.erb

@@ -104,6 +104,17 @@
     <div data-share-modal-target="container"></div>
   <% end %>
 
+  <%# The "re-add dropped members" modal must be present wherever a topic can be
+      dropped onto another creative — including the top-level index, where
+      @parent_creative/@creative are nil (moving a topic between root-level
+      creatives). Gating it on the write check above hid it exactly there, so
+      getModal() returned null and the popup silently never appeared. It stays
+      hidden until populated, and share creation is permission-checked
+      server-side, so rendering it for any authenticated user is safe. %>
+  <% if authenticated? %>
+    <%= render 'topic_move_members_modal' %>
+  <% end %>
+
   <%= render 'import_upload_zone' %>
 
 <% if can_manage_integrations %>
@@ -159,6 +170,7 @@
     title_effective_origin = @parent_creative.effective_origin(Set.new)
     title_content_type = title_effective_origin.data&.dig("content_type")
     title_markdown_source = title_can_write ? title_effective_origin.data&.dig("markdown_source") : nil
+    title_markdown_editor = title_effective_origin.data&.dig("editor")
   %>
   <%= content_tag(
         "creative-tree-row",
@@ -172,7 +184,8 @@
         "data-progress-value": @parent_creative.progress,
         "data-origin-id": @parent_creative.origin_id,
         "data-content-type": title_content_type,
-        "data-markdown-source": title_markdown_source
+        "data-markdown-source": title_markdown_source,
+        "data-markdown-editor": title_markdown_editor
       ) %>
 <% else %>
   <%= content_tag(

data/app/views/collavre/creatives/slide_view.html.erb

@@ -8,7 +8,7 @@
 <% initial_index = params[:slide].to_i.clamp(0, @slide_ids.length - 1) %>
 <% initial_prompt = @creative.prompt_for(Current.user) %>
 <div id="slide-view" data-slide-ids="<%= @slide_ids.join(',') %>" data-initial-index="<%= initial_index %>" data-root-id="<%= @creative.id %>">
-  <div id="slide-content"><%= content_tag(tag_name, sanitize(@creative.effective_description, tags: Rails::HTML5::SafeListSanitizer.allowed_tags.to_a + %w[table thead tbody tfoot tr th td], attributes: Rails::HTML5::SafeListSanitizer.allowed_attributes.to_a + %w[colspan rowspan data-lexical])) %></div>
+  <div id="slide-content"><%= content_tag(tag_name, embed_youtube_iframe(@creative.effective_description), class: 'creative-content') %></div>
 </div>
 <div id="slide-controls">
   <div id="slide-counter"><%= initial_index + 1 %> / <%= @slide_ids.length %></div>

data/app/views/collavre/shared/_link_creative_modal.html.erb

@@ -1,6 +1,10 @@
-<div id="link-creative-modal" class="common-popup" style="display:none;" data-controller="link-creative">
+<div id="link-creative-modal" class="common-popup" style="display:none;" data-controller="link-creative"
+     data-link-creative-loading-text="<%= t('collavre.creatives.index.link_loading', default: 'Loading…') %>"
+     data-link-creative-no-results-text="<%= t('collavre.creatives.index.no_search_results', default: 'No creatives match your search.') %>"
+     data-link-creative-empty-text="<%= t('collavre.creatives.index.no_sub_creatives', default: 'No sub-creatives found.') %>"
+     data-link-creative-expand-text="<%= t('collavre.creatives.index.link_expand', default: 'Expand') %>">
   <button type="button" id="close-link-creative-modal" class="popup-close-btn" data-link-creative-target="close">&times;</button>
   <h3><%= t('collavre.creatives.index.link', default: 'Link') %></h3>
   <input type="text" id="link-creative-search" class="shared-input-surface" style="width:100%;margin-bottom:0.5em;" placeholder="<%= t('collavre.creatives.index.search_placeholder', default: 'Search creative') %>" data-link-creative-target="input">
-  <ul id="link-creative-results" class="common-popup-list" data-popup-list data-link-creative-target="list"></ul>
+  <ul id="link-creative-results" class="common-popup-list link-creative-list" data-popup-list data-link-creative-target="list"></ul>
 </div>

data/app/views/collavre/users/show.html.erb

@@ -101,6 +101,7 @@
           <%= f.label :timezone, t('collavre.users.timezone') %>
           <%= f.select :timezone, ActiveSupport::TimeZone.all.map { |tz| [tz.to_s, tz.tzinfo.name] } %>
         </div>
+
         <%= f.submit t('collavre.users.update_profile') %>
       <% end %>
 
@@ -109,6 +110,8 @@
         <br>
         <%= link_to t('collavre.users.webauthn.manage'), collavre.passkeys_user_path(@user) %>
         <br>
+        <%= link_to t('collavre.users.typo_correction.manage'), collavre.typo_correction_user_path(@user) %>
+        <br>
         <%= link_to t('doorkeeper.my_applications'), main_app.oauth_applications_path %>
         <% if @user.system_admin? %>
           <br>

data/app/views/collavre/users/typo_correction.html.erb

@@ -0,0 +1,50 @@
+<h1 class="no-top-margin"><%= t('collavre.users.typo_correction.legend') %></h1>
+
+<%= form_with model: @user, url: collavre.user_path(@user), method: :patch, local: true, html: { class: 'profile-form' } do |f| %>
+  <p class="text-muted"><%= t('collavre.users.typo_correction.description') %></p>
+
+  <div class="checkbox-field">
+    <%= f.check_box :typo_correction_enabled %>
+    <%= f.label :typo_correction_enabled, t('collavre.users.typo_correction.enabled') %>
+  </div>
+
+  <div>
+    <%= f.label :typo_correction_threshold, t('collavre.users.typo_correction.threshold') %>
+    <%= f.number_field :typo_correction_threshold, in: 0..100, step: 1, required: true %>
+    <small class="text-muted"><%= t('collavre.users.typo_correction.threshold_hint') %></small>
+  </div>
+
+  <fieldset>
+    <legend><%= t('collavre.users.typo_correction.device_legend') %></legend>
+    <div class="checkbox-field">
+      <%= f.check_box :typo_correction_on_voice %>
+      <%= f.label :typo_correction_on_voice, t('collavre.users.typo_correction.on_voice') %>
+    </div>
+    <div class="checkbox-field">
+      <%= f.check_box :typo_correction_on_soft_keyboard %>
+      <%= f.label :typo_correction_on_soft_keyboard, t('collavre.users.typo_correction.on_soft_keyboard') %>
+    </div>
+    <div class="checkbox-field">
+      <%= f.check_box :typo_correction_on_physical_keyboard %>
+      <%= f.label :typo_correction_on_physical_keyboard, t('collavre.users.typo_correction.on_physical_keyboard') %>
+    </div>
+  </fieldset>
+
+  <fieldset>
+    <legend><%= t('collavre.users.typo_correction.location_legend') %></legend>
+    <div class="checkbox-field">
+      <%= f.check_box :typo_correction_in_chat %>
+      <%= f.label :typo_correction_in_chat, t('collavre.users.typo_correction.in_chat') %>
+    </div>
+    <div class="checkbox-field">
+      <%= f.check_box :typo_correction_in_editor %>
+      <%= f.label :typo_correction_in_editor, t('collavre.users.typo_correction.in_editor') %>
+    </div>
+  </fieldset>
+
+  <%= f.submit t('collavre.users.update') %>
+<% end %>
+
+<div style="margin-top: 1rem;">
+  <%= link_to t('collavre.users.back'), collavre.user_path(@user) %>
+</div>

data/app/views/layouts/collavre/slide.html.erb

@@ -10,6 +10,7 @@
     <%= stylesheet_link_tag "collavre/design_tokens" %>
     <%= stylesheet_link_tag "collavre/dark_mode" %>
     <%= stylesheet_link_tag 'collavre/slide_view', media: 'all' %>
+    <%= stylesheet_link_tag 'collavre/tables', media: 'all' %>
     <%= javascript_include_tag 'actioncable', defer: true %>
     <%= javascript_include_tag 'slide_view', defer: true %>
     <%= render 'collavre/shared/custom_theme_style' %>

data/config/locales/channels.en.yml

@@ -9,3 +9,5 @@ en:
         badge:
           running: "Running"
           stopped: "Stopped"
+    claude_channel:
+      disconnected: "🔌 Not connected to Claude Channel — your message will be delivered once it reconnects."

data/config/locales/channels.ko.yml

@@ -9,3 +9,5 @@ ko:
         badge:
           running: "실행 중"
           stopped: "중지됨"
+    claude_channel:
+      disconnected: "🔌 Claude Channel과 연결되어 있지 않습니다 — 다시 연결되면 메시지가 전달됩니다."