samagotchi 0.111.1 → 0.113.0

data/lib/samagotchi/push_command.rb

@@ -0,0 +1,188 @@
+# frozen_string_literal: true
+
+require "json"
+require "time"
+require_relative "cli/command"
+require_relative "cli/exit"
+require_relative "cli/flags"
+require_relative "config"
+require_relative "web/push"
+require_relative "web/running"
+
+module Samagotchi
+  # `chi web push`: this machine's Web Push devices (Web::Push::Store),
+  # without chi web running: list them, remove one, send a test push.
+  # Never prints an endpoint or keys: a device is its short id and chi's
+  # label. bin/chi branches here on `web push` before RunOptions (which
+  # would refuse the word); `chi --remote X web push` is refused before
+  # that (chi web runs on this machine only). See docs/cli.md.
+  class PushCommand
+    include CLI::Command
+
+    USAGE = <<~TEXT
+      Usage: chi web push <ls|rm|test> [options]
+        ls [--format json]   the devices chi web pushes to: id, label, origin, added, last delivery,
+                             last error, done turns; "stale" for another origin's (never sent to)
+        rm ID                remove a device (it turns the bell on again to come back)
+        test [ID]            a test push to ID, or to every device not stale (chi web need not run)
+      A device is added by the bell in the phone's Home Screen app (docs/configuration.md, Phone notifications).
+    TEXT
+
+    SUBCOMMANDS = %w[ls rm test].freeze
+
+    FLAGS = {
+      "ls" => CLI::Flags.new(help: HELP_WORDS) { |f| f.value "--format" },
+      "rm" => CLI::Flags.new(help: HELP_WORDS),
+      "test" => CLI::Flags.new(help: HELP_WORDS)
+    }.freeze
+
+    # @param store [Web::Push::Store, nil] this machine's by default
+    # @param origin [#call] → the public origin chi web runs on now (the
+    #   running one's, else web.public_url's), nil when neither
+    # @param client [#call, nil] (sub) → a Client for its origin; one
+    #   signed with the store's key by default
+    def initialize(argv, stdout: $stdout, stderr: $stderr, store: nil, origin: nil, client: nil)
+      @argv = argv.dup
+      @stdout = stdout
+      @stderr = stderr
+      @store = store || Web::Push::Store.new
+      @origin = origin || -> { PushCommand.current_origin }
+      @client = client
+    end
+
+    # The running chi web's https origin (a --tunnel's too), else
+    # web.public_url's; nil when neither.
+    def self.current_origin
+      Web::Running.live_public_url&.origin || Web::PublicUrl.from_config(url: Config.get("web.public_url"))&.origin
+    rescue Web::PublicUrl::Invalid
+      nil
+    end
+
+    # @return [Integer] 0 done, 1 refused (a store others can read, a
+    #   corrupt one, an unknown device, a failed test), 2 usage
+    def run
+      @sub = @argv[0]
+      if @sub.nil? || HELP_WORDS.include?(@sub)
+        @stdout.puts(USAGE)
+        return 0
+      end
+      return usage_error("unknown subcommand #{@sub}") unless SUBCOMMANDS.include?(@sub)
+
+      parsed = parse_flags(FLAGS.fetch(@sub), @argv[1..])
+      return parsed if parsed.is_a?(Integer)
+
+      send(:"run_#{@sub}", parsed.options, parsed.args)
+    rescue Web::Push::Store::Insecure, Web::Push::Store::Corrupt, Web::Push::Refused => e
+      error_line("#{command_name}: #{e.message}")
+      CLI::Exit::FAILED
+    end
+
+    private
+
+    def command_name = @sub && SUBCOMMANDS.include?(@sub) ? "chi web push #{@sub}" : "chi web push"
+    def usage_on_error = nil
+
+    def run_ls(options, args)
+      return usage_error("ls takes no arguments") unless args.empty?
+
+      format = options[:format]
+      return usage_error("unknown format #{format.inspect}: use --format text|json") unless [nil, "text", "json"].include?(format)
+
+      subs = devices
+      origin = @origin.call
+      if format == "json"
+        @stdout.puts(JSON.generate(subs.map { |sub| sub.public_h.merge(stale: stale?(sub, origin)) }))
+      elsif subs.empty?
+        @stdout.puts("no devices (turn the bell on in the phone's Home Screen app)")
+      else
+        print_table(subs, origin)
+      end
+      0
+    end
+
+    def run_rm(_options, args)
+      return usage_error("give one device ID (chi web push ls)") unless args.size == 1
+
+      devices
+      id = args.first
+      gone = Web::Push::Store.short_id?(id) && @store.remove_device(id)
+      return no_device(id) unless gone
+
+      @stdout.puts("#{gone.id}  #{gone.label}  removed")
+      0
+    end
+
+    def run_test(_options, args)
+      return usage_error("give at most one device ID (chi web push ls)") if args.size > 1
+
+      subs = devices
+      if args.empty?
+        origin = @origin.call
+        subs = subs.reject { |sub| stale?(sub, origin) }
+        if subs.empty?
+          error_line("#{command_name}: no device to push to (chi web push ls)")
+          return CLI::Exit::FAILED
+        end
+      else
+        subs = subs.select { |sub| sub.id == args.first }
+        return no_device(args.first) if subs.empty?
+      end
+      results = subs.map { |sub| test(sub) }
+      results.all? ? 0 : CLI::Exit::FAILED
+    end
+
+    # One test push, its line printed; a :gone device is removed (as the
+    # route does). @return [Boolean] delivered
+    def test(sub)
+      result = client_for(sub).deliver(sub, Web::Push::TEST_PAYLOAD, ttl: Web::Push::TEST_TTL, urgency: "high")
+      words = "#{result.status} #{result.code}#{" (#{result.ms} ms)" if result.ms}"
+      words += ": #{result.error}" if result.error && !result.ok?
+      if result.status == :gone
+        @store.remove(sub.id)
+        words += ": removed (the push service no longer knows it)"
+      else
+        @store.mark(sub.id, ok: result.ok?, error: result.ok? ? nil : (result.error || result.code))
+      end
+      @stdout.puts("#{sub.id}  #{sub.label}  #{words}")
+      result.ok?
+    end
+
+    def client_for(sub)
+      return @client.call(sub) if @client
+
+      Web::Push::Client.new(key: Web::Push.load_key(@store), contact: Web::Push.contact(sub.origin))
+    end
+
+    # The store's devices, after its permission check.
+    def devices
+      @store.check_permissions!
+      @store.subscriptions!
+    end
+
+    def no_device(id)
+      error_line("#{command_name}: no device #{id[0, 16]} (chi web push ls)")
+      CLI::Exit::FAILED
+    end
+
+    # Stale: made on another origin than chi web's now; none is when that
+    # isn't known.
+    def stale?(sub, origin) = !origin.nil? && sub.origin != origin
+
+    def print_table(subs, origin)
+      rows = subs.map do |sub|
+        [sub.id, sub.label.to_s, sub.origin.to_s, when_text(sub.created_at), when_text(sub.last_ok_at) || "never",
+         sub.done? ? "on" : "off", [stale?(sub, origin) ? "stale" : nil, sub.last_error].compact.join(", ")]
+      end
+      rows.unshift(["ID", "LABEL", "ORIGIN", "ADDED", "LAST OK", "DONE", "NOTE"])
+      widths = rows.transpose.map { |column| column.map(&:length).max }
+      rows.each { |row| @stdout.puts(row.zip(widths).map { |cell, width| cell.ljust(width) }.join("  ").rstrip) }
+    end
+
+    # An iso time as local "YYYY-MM-DD HH:MM"; nil for none.
+    def when_text(iso)
+      iso && Time.iso8601(iso).localtime.strftime("%Y-%m-%d %H:%M")
+    rescue ArgumentError
+      iso
+    end
+  end
+end

data/lib/samagotchi/run_options.rb

@@ -154,6 +154,7 @@ module Samagotchi
                  chi bootstrap [HOST[:PORT]|URL]  first setup: find the model server, write config.yml
                  chi scratch [options]            a one-time session in this terminal: nothing is kept
                  chi web [--port PORT] [--open] [--scope=all]   the web UI
+                 chi web push <ls|rm|test>        the phones chi web pushes notifications to
                  chi sessions <list|stop|restart|archive|unarchive|delete|prune|clean|stats>
                  chi note [--source NAME] [-m TEXT] ID...|--all   background context for sessions
                  chi broadcast [-m TEXT] [--all] [--dry-run] | log | deliver   a note for every session it may concern

data/lib/samagotchi/session.rb

@@ -378,7 +378,8 @@ module Samagotchi
 
     # The question this session waits on, as the lists show it: {id:, kind:}
     # with kind "question" (the model's), "approval", "hook" or "continue"
-    # (the step-limit question, asked between turns); nil with
+    # (the step-limit question, asked between turns), +relayed_to+ and
+    # +created_at+ (iso8601: chi web's push catch-up) when set; nil with
     # none. Only while a worker runs it (+live+): a question saved by a
     # worker that died waits for no one (the next worker drops it). The
     # web's summaries and `chi sessions list` both ask this.
@@ -391,7 +392,8 @@ module Samagotchi
       kind = pending.kind.to_s
       relayed = pending.relayed_to
       relayed_to = relayed.is_a?(Hash) ? (relayed[:parent_short] || relayed["parent_short"]) : nil
-      { id: pending.id, kind: %w[approval hook continue].include?(kind) ? kind : "question", relayed_to: relayed_to }.compact
+      { id: pending.id, kind: %w[approval hook continue].include?(kind) ? kind : "question", relayed_to: relayed_to,
+        created_at: pending.created_at }.compact
     end
 
     # A question saved by a process that no longer runs this session (the

data/lib/samagotchi/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Samagotchi
-  VERSION = "0.111.1"
+  VERSION = "0.113.0"
   # Sent as the User-Agent of every HTTP request chi makes.
   USER_AGENT = "chi/#{VERSION}"
 end

data/lib/samagotchi/web/app.rb

@@ -271,7 +271,11 @@ module Samagotchi
         ["GET", %r{\A/api/push\z}, :handle_push_info, :owner],
         ["POST", %r{\A/api/push/subscriptions\z}, :handle_push_subscribe, :owner],
         ["DELETE", %r{\A/api/push/subscriptions\z}, :handle_push_unsubscribe, :owner],
+        # The id checked in the handler (participant_gate_spec fills ([^/]+) captures only).
+        ["PATCH", %r{\A/api/push/subscriptions/([^/]+)\z}, :handle_push_prefs, :owner],
+        ["DELETE", %r{\A/api/push/subscriptions/([^/]+)\z}, :handle_push_remove, :owner],
         ["POST", %r{\A/api/push/test\z}, :handle_push_test, :owner],
+        ["POST", %r{\A/api/push/presence\z}, :handle_push_presence, :owner],
         ["GET", %r{\A/api/sessions/([^/]+)\z}, :handle_show, :participant, :session],
         ["DELETE", %r{\A/api/sessions/([^/]+)\z}, :handle_delete, :owner, :session]
       ].freeze
@@ -614,16 +618,58 @@ module Samagotchi
         log_refused(refused_peer(req), req.path_info, reason)
         return error_response(401, "unauthorized", unauthorized_detail(req, reason)) if req.path_info.start_with?("/api/")
 
-        body = @public_url ? PUBLIC_UNAUTHORIZED_PAGE : UNAUTHORIZED_PAGE
+        body = unauthorized_page(req)
         [401, { "Content-Type" => "text/html; charset=utf-8", "Content-Length" => body.bytesize.to_s, "Cache-Control" => "no-store" },
          [body]]
       end
 
+      # Which page a refused page request gets: the LAN page with no
+      # web.public_url, the proxy page for a request that came through it,
+      # and for a browser on this machine the one pointing at the public
+      # address (#direct_public?): there the paste box can't help.
+      def unauthorized_page(req)
+        return direct_public_page if direct_public?(req)
+        return PUBLIC_UNAUTHORIZED_PAGE if @public_url
+
+        UNAUTHORIZED_PAGE
+      end
+
+      # A browser on this machine, with web.public_url set: the gate refuses
+      # it like every other request, and no trade can fix it here — loopback
+      # takes the token as Bearer only, so there is no cookie for it to keep
+      # (a cookie for 127.0.0.1 reaches every server on any local port). The
+      # page says where to open chi web instead. The origin is this machine's
+      # config, not a secret; it is escaped all the same, and no token or
+      # link code is in it.
+      def direct_public_page
+        origin = CGI.escapeHTML(@public_url.origin)
+        <<~HTML
+          <!doctype html>
+          <html lang="en"><head><meta charset="utf-8">
+          <meta name="viewport" content="width=device-width, initial-scale=1">
+          <title>chi web: open it at its public address</title>
+          <style>
+            :root { color-scheme: light dark; }
+            body { font: 16px/1.5 -apple-system, system-ui, sans-serif; max-width: 30rem; margin: 3rem auto; padding: 0 1rem; }
+            a { color: inherit; }
+          </style></head>
+          <body>
+          <h1>chi web</h1>
+          <p>chi web is behind an access proxy, so every request needs its access token, this machine's too.
+          A browser here can't trade a token for a cookie on 127.0.0.1, so this page can't let you in: open
+          chi web at its public address instead.</p>
+          <p><a href="#{origin}/">#{origin}/</a></p>
+          <p>chi web prints a link to it in its terminal every time it starts.</p>
+          </body></html>
+        HTML
+      end
+
       def unauthorized_detail(req, reason)
         return "chi web behind the proxy: #{reason || "needs its access token"}" if proxied?(req)
-        return "chi web with web.public_url needs its access token, on this machine too" if @public_url
+        return "chi web on the LAN needs its access token" unless @public_url
 
-        "chi web on the LAN needs its access token"
+        detail = "chi web with web.public_url needs its access token, on this machine too"
+        direct_public?(req) ? "#{detail}; open its public address #{@public_url.origin}/ instead" : detail
       end
 
       # Who a refusal is logged as: the peer, or behind a proxy (every peer

data/lib/samagotchi/web/public/chains.js

@@ -60,11 +60,12 @@ export function isOpener(text) {
 // reads its chain's first link's title instead, so the links of a chain
 // keep its name. Its own title when the first link isn't in +byId+ (id →
 // session; deleted, or a walk a missing link cut short) or is the opener too.
-// A link with a title of its own (/title; a new link inherits it) reads it,
-// and a titled first link names its chain.
+// A link with a title of its own (/title; a new link inherits it), an auto
+// title or a recap of its own reads it, and a first link with any of them
+// names its chain.
 export function chainTitle(s, byId) {
   const own = previewForCard(s);
-  if (s?.title || !s?.continues || !isOpener(s.first_preview || s.last_prompt)) return own;
+  if (s?.title || s?.auto_title || s?.recap || !s?.continues || !isOpener(s.first_preview || s.last_prompt)) return own;
   const seen = new Set([s.id]);
   let at = s;
   while (at.continues) {
@@ -73,7 +74,8 @@ export function chainTitle(s, byId) {
     seen.add(prev.id);
     at = prev;
   }
-  return !at.title && isOpener(at.first_preview || at.last_prompt) ? own : previewForCard(at);
+  const named = at.title || at.auto_title || at.recap;
+  return !named && isOpener(at.first_preview || at.last_prompt) ? own : previewForCard(at);
 }
 
 // The open session's title (app.js updateSessionTitle: the top bar and the
@@ -81,10 +83,11 @@ export function chainTitle(s, byId) {
 // (+shown+, its summary, has continues) reads +cardTitle+(shown) whatever
 // its first message: a web link inherits its chain's title, and its first
 // message is an opener (the constant or the user's own). Else +first+,
-// unless it is the opener. A titled session (/title) reads its card's too.
+// unless it is the opener. A titled session (/title), or one with an auto
+// title or a recap (its card's name then), reads its card's too.
 // +shown+ null: not listed yet, +first+.
 export function openTitle({ shown, first, cardTitle }) {
-  if (shown && (shown.title || shown.continues || isOpener(first))) return cardTitle(shown);
+  if (shown && (shown.title || shown.auto_title || shown.recap || shown.continues || isOpener(first))) return cardTitle(shown);
   return first;
 }
 

data/lib/samagotchi/web/public/format.js

@@ -57,11 +57,26 @@ export function firstPreview(text) {
   return clip(n, FIRST_PREVIEW_CHARS + 1);
 }
 
+// What names a session's card, first found: its title (/title), its auto
+// title (from the recap call), its recap's first sentence (+recap+), its
+// first message, its last prompt. Display only.
+function cardName(session) {
+  return session.title || session.auto_title || session.recap || session.first_preview || session.last_prompt || "";
+}
+
 export function previewForCard(session) {
-  // Unified card preview: its title (/title), else its first message (80),
-  // else its last prompt.
-  const raw = session.title || session.first_preview || session.last_prompt || "";
-  return firstPreview(raw) || "\u2014";
+  // Unified card preview: cardName, cut at 80.
+  return firstPreview(cardName(session)) || "\u2014";
+}
+
+// Where previewForCard's words came from: "title", "auto" (auto_title),
+// "recap" (the card then drops its recap line: the same sentence twice),
+// "preview" (the first message or last prompt, or none).
+export function cardTitleSource(session) {
+  if (session.title) return "title";
+  if (session.auto_title) return "auto";
+  if (session.recap) return "recap";
+  return "preview";
 }
 
 const DELETE_PREVIEW_CHARS = 40;
@@ -70,7 +85,7 @@ const DELETE_PREVIEW_CHARS = 40;
 // list's owner can be stale (a worker idle-exits), so a worker is only
 // "stopped if it's still running", never promised.
 export function deleteConfirmText(session) {
-  const n = normalize(session.title || session.first_preview || session.last_prompt || "");
+  const n = normalize(cardName(session));
   const preview = clip(n, DELETE_PREVIEW_CHARS + 1);
   const shortId = session.short_id || String(session.id).slice(0, 8);
   const lines = [

data/lib/samagotchi/web/public/index.html

@@ -15,6 +15,8 @@
 :root{--icon-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='none' stroke='black' stroke-width='1.5' stroke-linecap='round' stroke-linejoin='round'%3E%3Crect x='2' y='2.75' width='12' height='10.5' rx='1.5'/%3E%3Ccircle cx='5.75' cy='6.25' r='1.1'/%3E%3Cpath d='m2.5 12.5 3.75-3.75 2.5 2.5 1.75-1.75 3 3'/%3E%3C/svg%3E")}
 :root{--icon-archive:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='none' stroke='black' stroke-width='1.5' stroke-linecap='round' stroke-linejoin='round'%3E%3Crect x='2' y='2.75' width='12' height='3.5' rx='1'/%3E%3Cpath d='M3.25 6.25v6a1 1 0 0 0 1 1h7.5a1 1 0 0 0 1-1v-6M6.5 9h3'/%3E%3C/svg%3E");--icon-unarchive:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='none' stroke='black' stroke-width='1.5' stroke-linecap='round' stroke-linejoin='round'%3E%3Crect x='2' y='2.75' width='12' height='3.5' rx='1'/%3E%3Cpath d='M3.25 6.25v6a1 1 0 0 0 1 1h7.5a1 1 0 0 0 1-1v-6M8 11.5V8.25M6.5 9.75 8 8.25l1.5 1.5'/%3E%3C/svg%3E")}
 *{box-sizing:border-box;margin:0;padding:0}
+/* No iOS text autosizing: it grows text in a box sized for the text as written (it clipped the session cards). */
+html{-webkit-text-size-adjust:100%;text-size-adjust:100%}
 body{font-family: ui-sans-serif,system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;background:radial-gradient(1100px 700px at 8% 0%,color-mix(in srgb,var(--accent) 13%,transparent),transparent 70%),radial-gradient(900px 700px at 100% 100%,color-mix(in srgb,var(--think) 9%,transparent),transparent 70%),var(--bg);background-attachment:fixed;color:var(--text);height:100vh;display:flex;flex-direction:column}
 /* Glass: the composer card, the strip cards, the all-sessions cards and the question cards (by selector, so app.js is untouched). */
 #dock,.turn-stage,.dock-card,#topStrip .card,#allList .card,.bubble.question,.bubble.plugin-card{background:var(--glass-bg);-webkit-backdrop-filter:blur(18px) saturate(1.35);backdrop-filter:blur(18px) saturate(1.35);border:1px solid var(--glass-border);box-shadow:inset 0 1px 0 var(--glass-highlight),var(--glass-shadow)}
@@ -710,7 +712,7 @@ body.has-session.fresh-link #composer .actions-col .model-pick:not([hidden]){dis
 #modelList .model-option.unavailable:not(.chosen) .model-id,#modelList .model-option.unavailable .model-host{color:var(--text-faint)}
 #modelList .model-option.unavailable .model-note{color:var(--warn-text)}
 #modelList .model-empty{padding:10px;font-size:13px;color:var(--text-faint)}
-@media(max-width:600px){#modelPanel{left:6px;width:calc(100% - 12px)}#modelSearch{font-size:16px}#modelList .model-option{padding-top:8px;padding-bottom:8px}}
+@media(max-width:600px){#modelPanel{left:6px;width:calc(100% - 12px)}#modelList .model-option{padding-top:8px;padding-bottom:8px}}
 /* The / autocomplete: a list over the composer card's top edge. It wears the glass edge and shadow, but opaque:
    inside the dock's own backdrop-filter a second blur sees nothing, and the history would show through its text. */
 #commandList{position:absolute;left:10px;width:min(640px,calc(100% - 20px));bottom:calc(100% + 8px);max-height:min(260px,40vh);overflow-y:auto;border-radius:12px;padding:4px;z-index:20;display:flex;flex-direction:column;gap:1px;background:var(--bg-panel);border:1px solid var(--glass-border);box-shadow:inset 0 1px 0 var(--glass-highlight),var(--glass-shadow)}
@@ -1105,7 +1107,7 @@ body.has-session.composer-folded #infoBar{border-top-color:transparent}
 .llmctx-form .ctx-pop-head strong{font-family:inherit}
 .llmctx-field{display:flex;align-items:center;gap:8px}
 .llmctx-field>span{flex:0 0 58px;font-size:12px;color:var(--text-muted)}
-.llmctx-field select,.llmctx-field input{flex:1;min-width:0;box-sizing:border-box;padding:5px 8px;border-radius:7px;border:1px solid var(--border-strong);background:var(--bg-inset);color:var(--text);font:13px/1.4 inherit}
+.llmctx-field select,.llmctx-field input{flex:1;min-width:0;box-sizing:border-box;padding:5px 8px;border-radius:7px;border:1px solid var(--border-strong);background:var(--bg-inset);color:var(--text);font:inherit;font-size:13px;line-height:1.4}
 .llmctx-field select:focus,.llmctx-field input:focus{outline:none;border-color:var(--accent-border)}
 /* The settings selects draw their own closed box (each browser's native one differs) with the model picker's drawn caret on the label; the open list stays the OS menu. */
 .llmctx-field select{appearance:none;-webkit-appearance:none;padding-right:26px;cursor:pointer}
@@ -1122,7 +1124,7 @@ body.has-session.composer-folded #infoBar{border-top-color:transparent}
 #infoBar .ctx-chip.ctx-add{border-style:dashed;color:var(--text-muted);background:transparent}
 .ctx-add-form{display:flex;flex-direction:column;gap:6px;margin:0}
 .ctx-add-form .ctx-pop-head strong{font-family:inherit}
-.ctx-add-input{width:100%;box-sizing:border-box;padding:6px 8px;border-radius:7px;border:1px solid var(--border-strong);background:var(--bg-inset);color:var(--text);font:13px/1.4 inherit}
+.ctx-add-input{width:100%;box-sizing:border-box;padding:6px 8px;border-radius:7px;border:1px solid var(--border-strong);background:var(--bg-inset);color:var(--text);font:inherit;font-size:13px;line-height:1.4}
 .ctx-add-input:focus{outline:none;border-color:var(--accent-border)}
 #infoBar .ctx-chip{display:inline-flex;align-items:center;gap:5px;padding:2px 9px;border-radius:999px;font:600 11px/1.5 ui-monospace,monospace;background:color-mix(in srgb,var(--bg-hover) 55%,transparent);color:var(--text-3);border:1px solid var(--border-strong);white-space:nowrap}
 #infoBar .ctx-chip:hover,#infoBar .ctx-chip.open{color:var(--text);border-color:var(--accent-border);background:var(--accent-bg)}
@@ -1181,6 +1183,37 @@ body.has-session.composer-folded #infoBar{border-top-color:transparent}
 .pp-foot{display:flex;align-items:center;gap:8px;justify-content:flex-end;padding-top:4px}
 .pp-view{font-size:12px;color:var(--accent);text-decoration:none}
 .pp-view:hover{text-decoration:underline}
+/* The Home Screen app's notifications sheet (push_devices.js): the bell opens it; a bottom sheet on a phone. */
+.push-devices .ctx-pop-head strong{font-family:inherit}
+.push-devices.sheet{border-radius:14px;padding:14px 16px;font-size:14px}
+.pd-list{list-style:none;display:flex;flex-direction:column;gap:8px;margin:2px 0;padding:0}
+.pd-row{display:grid;grid-template-columns:1fr auto;align-items:center;gap:2px 10px;padding:8px 10px;border-radius:10px;background:var(--bg-inset)}
+.pd-who{display:flex;align-items:center;gap:6px;min-width:0;color:var(--text)}
+.pd-who b{font-weight:600;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.pd-tag{font-size:10.5px;padding:0 6px;border-radius:999px;background:var(--accent-bg);color:var(--accent);white-space:nowrap}
+.pd-act{grid-column:2;grid-row:1/3;display:flex;align-items:center}
+.pd-meta{grid-column:1;font-size:11.5px;color:var(--text-muted)}
+.pd-error{color:var(--danger-text)}
+.pd-done{grid-column:1/3;display:flex;align-items:center;justify-content:space-between;gap:8px;margin-top:4px;padding-top:6px;border-top:1px solid var(--border);font-size:12px;color:var(--text-3)}
+.pd-remove{padding:3px 10px;border-radius:7px;font-size:12px;background:var(--bg-raised);color:var(--danger-text);border:1px solid var(--border-strong);cursor:pointer}
+.pd-remove:hover{color:var(--text-hover)}
+.pd-switch{appearance:none;-webkit-appearance:none;position:relative;flex-shrink:0;width:34px;height:20px;margin:0;border-radius:999px;background:var(--bg-raised);border:1px solid var(--border-strong);cursor:pointer;transition:background .15s}
+.pd-switch::after{content:"";position:absolute;top:2px;left:2px;width:14px;height:14px;border-radius:50%;background:var(--text-muted);transition:transform .15s,background .15s}
+.pd-switch:checked{background:var(--accent-strong);border-color:var(--accent-strong)}
+.pd-switch:checked::after{transform:translateX(14px);background:var(--on-solid)}
+.pd-switch:disabled{opacity:.5;cursor:default}
+.pd-switch:focus-visible{outline:2px solid var(--accent-ring);outline-offset:2px}
+.pd-done .pd-switch{width:30px;height:18px}
+.pd-done .pd-switch::after{width:12px;height:12px}
+.pd-done .pd-switch:checked::after{transform:translateX(12px)}
+.pd-note{font-size:11.5px;color:var(--text-muted)}
+.pd-note.pd-error{color:var(--danger-text)}
+.push-devices.sheet .pd-switch{width:42px;height:26px}
+.push-devices.sheet .pd-switch::after{width:20px;height:20px}
+.push-devices.sheet .pd-switch:checked::after{transform:translateX(16px)}
+.push-devices.sheet .pd-done{font-size:13px}
+.push-devices.sheet .pd-meta,.push-devices.sheet .pd-note{font-size:12.5px}
+.push-devices.sheet .pd-remove{padding:6px 12px;font-size:13px}
 .ctx-pop-head{display:flex;align-items:baseline;gap:8px}
 .ctx-pop-head strong{font-family:ui-monospace,monospace;color:var(--text-bright)}
 .ctx-pop-kind{font-size:11px;color:var(--text-muted)}
@@ -1300,8 +1333,6 @@ body.has-session #scope .scope-where{display:none}
   #sessionTitleRow{flex-basis:100%;order:10}
   #sessionTitle{font-size:12px}
   .title-rename{font-size:12px;line-height:18px}
-  /* Under 16px iOS Safari zooms the page on focus. */
-  .rename-input{font-size:16px}
   #scope,#stripStatus{flex:1 1 0;min-width:0;max-width:max-content}
   #stripStatus{flex-grow:1000;overflow:hidden;text-overflow:ellipsis}
   #scope .scope-name{flex-shrink:1;min-width:0}
@@ -1471,6 +1502,9 @@ body.all-view #center, body.all-view #topStrip{display:none}
 .card{padding:12px;border-radius:10px;background:var(--bg-panel);border:1px solid var(--border);cursor:pointer;display:flex;flex-direction:column;gap:6px;min-height:72px}
 .card:hover{border-color:var(--border-strong);background:var(--bg-hover)}
 #allList .card{position:relative}
+/* Every row keeps its content's height: a card shorter than its rows (seen on iOS) cut the clamped preview and the
+   single-line title and recap through the middle. */
+#allList .card > *{flex-shrink:0}
 /* A card's tools in the all view: archive (or unarchive) and delete, shown on hover, always under hover:none. */
 #allList .card-tools{position:absolute;top:6px;right:6px;display:flex;gap:2px}
 .card-tools button{padding:2px 7px;border-radius:6px;border:1px solid transparent;background:transparent;color:var(--text-muted);font-size:12px;line-height:1.2;cursor:pointer;opacity:0;transition:opacity .15s}
@@ -1520,6 +1554,14 @@ body.all-view #center, body.all-view #topStrip{display:none}
   #topStrip #allTile{width:auto}
 }
 a{color:var(--accent)}
+/* Under 16px iOS Safari zooms the page on focus (and a Home Screen app never zooms back), at any width: every text
+   field gets 16px on a phone or a touch device. Last in the sheet so it wins over each field's own size; keep new text
+   fields in this list (stage.spec.js's phone step checks the visible ones). */
+@media (max-width:600px),(pointer:coarse){
+  #composer textarea,.question-freeform,.continue-reason,.participants-popover input,.participants-popover select,
+  .rs-form textarea,.pp-link input,.llmctx-field select,.llmctx-field input,.ctx-add-input,.ws-add-in,.rename-input,
+  #modelSearch{font-size:16px}
+}
 </style>
 </head>
 <body>

data/lib/samagotchi/web/public/lists_view.js

@@ -25,7 +25,7 @@
 //   onRename()            the active card's ✎ clicked (session_rename.js open)
 //   renaming()            whether that rename input is open (the strip holds)
 
-import { ownerBadge, relativeTime, delegatedBy } from "./format.js";
+import { ownerBadge, relativeTime, delegatedBy, cardTitleSource } from "./format.js";
 import { html, nothing, render } from "./vendor/lit-html.js";
 import { cardCtxText, ctxBarTip } from "./ctx.js";
 import { allScopeHref, cardFolder } from "./scope.js";
@@ -172,7 +172,8 @@ export function cardTemplate(s, { deletable = false, archivable = false, selecta
   const preview = renamable
     ? html`<div class="preview-row"><div class="preview">${title}</div><button type="button" class="card-rename" data-rename=${s.id} title="Rename this session" aria-label="Rename this session">\u270e</button></div>`
     : html`<div class="preview">${title}</div>`;
-  const recap = s.recap ? html`<div class="recap" title=${s.recap}>${s.recap}</div>` : nothing;
+  // No recap line when the title is the recap's first sentence (D5).
+  const recap = s.recap && cardTitleSource(s) !== "recap" ? html`<div class="recap" title=${s.recap}>${s.recap}</div>` : nothing;
   return html`<div class=${cls} data-id=${s.id} data-members=${memberIds.length ? memberIds.join(" ") : nothing} style=${anim || nothing} title=${`${tip}${memTitle ? ` · ${memTitle}` : ""}`}>${preview}${recap}<div class="meta"><span class=${`status dot ${s.status}${waiting ? " waiting" : ""}`} title=${dotWord} aria-label=${dotWord}></span>${waitingT}${stoppedT}${time}${ctxT}${folderT}${parentChipTemplate(s, parent)}${chain}${kids}${ownerBadgeTemplate(s)}${archived}</div>${famRows}${skip}${pick}${selectable ? nothing : cardToolsTemplate(s, { deletable, archivable })}</div>`;
 }