samagotchi 0.124.0 → 0.125.0

data/lib/samagotchi/web/public/app.js

@@ -61,6 +61,7 @@ import { applyComposerText, applyRowTemplate, fetchApply } from "./review_apply.
 import { authorBadge, nameUnnamedBadges } from "./participant_names.js";
 import { parsePresets } from "./annotate_presets.js";
 import { createAnnotateBar } from "./annotate_bar.js";
+import { withVerify } from "./verify_preset.js";
 import { actionLine, annotationActions, composerWithAction } from "./annotate_actions.js";
 import { copyText, installCopy } from "./copy.js";
 import { createQuestionCards } from "./question_cards.js";
@@ -70,6 +71,9 @@ import { mountComposer } from "./composer_mount.js";
 import { readStored, writeStored } from "./storage.js";
 import { createCommandList } from "./command_list.js";
 import { ALL_SESSIONS_HASH, sessionHash, sessionIdFromHash } from "./route.js";
+import {
+  claimFromHash, ownerClaimHash, participantClaimLink, selectionClaim, showClaim, turnIdOf,
+} from "./claim_link.js";
 import { scopeDir, scopeTemplate } from "./scope.js";
 import { html, render } from "./vendor/lit-html.js";
 import { shouldFollowScroll } from "./scroll.js";
@@ -719,9 +723,61 @@ function setSessionHash(id) {
   history.replaceState(null, "", location.pathname + location.search + hash);
 }
 // A #/s/<id> typed or pasted into the address bar, or reached by back.
+// A claim link (claim_link.js; #/s/<id>?t=…&q=…, or the participant's
+// #s=<id>&t=… opened in this browser) opens its session and, once drawn,
+// shows the claim.
 function selectFromHash() {
-  const id = sessionIdFromHash(location.hash);
+  const claim = claimFromHash(location.hash);
+  const id = sessionIdFromHash(location.hash) || claim?.sessionId || null;
+  if (claim) pendingClaim = claim;
   if (id && id !== selected) select(id);
+  else if (claim) showPendingClaim();
+}
+let pendingClaim = null;
+// Where a claim's text can be on this page: answers, own messages, steps.
+const CLAIM_ROOTS = ".bubble.output, .bubble.user .user-message, .gen-text";
+// The claim link's quote scrolled to and marked, its text read as the
+// participant page shows it (the session's folder relative, home ~); a
+// quote not found marks its turn; neither found: the top, and a toast.
+// The hash is the session's again (select() already set it when it
+// switched), so the same link opened again is a hashchange.
+function showPendingClaim() {
+  const claim = pendingClaim;
+  if (!claim || claim.sessionId !== selected) return;
+  pendingClaim = null;
+  if (!allViewOpen() && location.hash !== sessionHash(selected)) {
+    history.replaceState(null, "", location.pathname + location.search + sessionHash(selected));
+  }
+  if (showClaim(historyEl, claim, { roots: CLAIM_ROOTS, opts: claimOpts() })) return;
+  historyEl.scrollTop = 0;
+  showToast("The linked turn isn't in this session.");
+}
+// How the participant page shows this page's text (claim_link.js).
+function claimOpts() {
+  return { home: document.body.dataset.home || "", cwd: current.dir || "" };
+}
+// Annotate's "Copy link" for a selection in a turn's answer, step or own
+// message: the participant page's link when the session has a person
+// active (it opens in the browser their review link was opened in: one
+// link per browser, the cookie), else this page's own.
+function claimLinkFor(source, range) {
+  if (!selected || !["answer", "step", "user"].includes(source.kind) || !historyEl.contains(source.root)) return null;
+  const turnId = turnIdOf(historyEl, source.root);
+  if (!turnId) return null;
+  const claim = { turnId, ...selectionClaim(source.root, range, claimOpts()) };
+  if (!claim.q) return null;
+  const target = participantsControl.claimTarget();
+  if (!target) {
+    return { url: `${location.origin}${location.pathname}${location.search}${ownerClaimHash(selected, claim)}`,
+             title: "A link to this on your page (no person is invited to this session)" };
+  }
+  const whose = target.names.map((name) => `${name}'s`).join(" or ");
+  return { url: participantClaimLink(target.base, selected, claim),
+           title: `A link to this for ${whose} browser: it opens where their review link was opened (one link per browser). Opened here, it shows your page.` };
+}
+async function copyClaimLink({ url }) {
+  if (await copyText(url)) showToast("Link copied");
+  else showToast(`Couldn't copy: ${url}`, null, { sticky: true });
 }
 function applyView() {
   const open = allViewOpen();
@@ -1002,6 +1058,7 @@ async function resync({ endText = null } = {}) {
     const kept = keptCommandBubbles(historyEl, id);
     resetTurnView();
     renderSessionView(data, { kept });
+    showPendingClaim();
     // Preview is read-only: a worker is woken only by POST /turn, so attach
     // only when a live bridge exists.
     current.streamSeq = typeof data.last_event_seq === "number" ? (data.last_event_id || data.last_event_seq) : null;
@@ -1821,9 +1878,11 @@ const updateSheet = createUpdateSheet({
 function showToast(text, action = null, options = {}) { toasts.show(text, action, options); }
 
 // Annotate (annotate_bar.js): a selection in the conversation offers
-// "Annotate" and the presets, which append a quote to the composer, and the
-// session's plugins' pills (chi.annotation, annotate_actions.js), which fill
-// the composer with their command line and the quote, or send it at once.
+// "Annotate" and the presets (then the built-in Verify: verify_preset.js),
+// which append a quote to the composer, the session's plugins' pills
+// (chi.annotation, annotate_actions.js), which fill the composer with their
+// command line and the quote, or send it at once, and Copy link in a turn
+// (claimLinkFor).
 function fillComposer(text) {
   openForVisit();
   promptEl.value = text;
@@ -1835,7 +1894,7 @@ function fillComposer(text) {
 }
 
 const annotateBar = createAnnotateBar({
-  presets: parsePresets(document.body.dataset.annotatePresets),
+  presets: withVerify(parsePresets(document.body.dataset.annotatePresets)),
   canAnnotate: () => !!selected && current.owner !== "tui",
   roots: turnRoots,
   isLive: (root) => liveTurn.running && turnDom.containsLive(root),
@@ -1847,6 +1906,8 @@ const annotateBar = createAnnotateBar({
     if (action.send) runSessionCommand(line);
     else fillComposer(composerWithAction(promptEl.value, action, line));
   },
+  link: claimLinkFor,
+  onLink: copyClaimLink,
   dock: () => $("#dock"),
 });
 historyEl.addEventListener("scroll", annotateBar.schedule);

data/lib/samagotchi/web/public/claim_link.js

@@ -0,0 +1,347 @@
+// A link to a claim (docs/internals/participants.md, Deep links): one turn
+// of a session and a quote in it, on either page.
+//
+//   participant page:  <chi web>/#s=<id>&t=<turn8>&q=<quote>&p=<prefix>
+//   owner's page:      #/s/<id>?t=<turn8>&q=<quote>&p=<prefix>
+//
+// t is the turn's id, its first 8 characters (a turn-opening message's
+// turn_id, data-turn-id in the DOM); q the selection's rendered text,
+// normalized and at most QUOTE_MAX characters; p the PREFIX_MAX characters
+// before it in the same bubble, to tell two equal quotes apart (left out
+// when there are none). URLSearchParams encodes both, so a link is
+// URL-safe and a space is one "+".
+//
+// Normalized: whitespace collapsed, and what the participant page shows
+// instead (ParticipantView::Redact): secret shapes "[redacted]" (so a link
+// never carries one, and matches the participant's redacted text), and on
+// the owner's page the session's folder relative ("<cwd>/x" → "x",
+// "<cwd>" → "."), the home folder "~". Not the owner's token (Redact's
+// viewer secrets): the page doesn't hold it.
+//
+// Opening one: the quote's bubble scrolled to and marked (the quote itself
+// by the CSS Highlight API, where the browser has it); a quote not found
+// marks the turn; a turn not found (one the page doesn't stamp) is looked
+// for in the whole page, and then is the caller's (top + a toast).
+//
+// The text work is pure; the DOM part reads only Element/Range/TreeWalker,
+// so it runs under `node --test` with happy-dom. A module of its own:
+// static JS is cached at unversioned URLs, and a new export on an old
+// module would blank the page.
+
+export const QUOTE_MAX = 200;
+export const PREFIX_MAX = 32;
+export const TURN_CHARS = 8;
+// The CSS highlight's name (::highlight(chi-claim)) and the marked
+// element's class.
+export const HIGHLIGHT = "chi-claim";
+export const HIT_CLASS = "claim-hit";
+
+const escapeRegExp = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+
+export const MARK = "[redacted]";
+// ParticipantView::Redact's PATTERNS and VALUES
+// (lib/samagotchi/web/participant_view.rb), as JS: keep them in step.
+// spec/fixtures/redact_cases.json holds cases both sides read the same
+// (participant_view_spec.rb, claim_link.test.js).
+const SECRET_PATTERNS = [
+  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY-----|$)/g,
+  /\bsk-(?:ant-|proj-)?[A-Za-z0-9_-]{16,}/g,
+  /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+  /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
+  /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,
+  /\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
+  /\bchp_[A-Za-z0-9_-]{20,}/g,
+  /\bchc_[A-Za-z0-9_-]{43}/g,
+  /\bAIza[0-9A-Za-z_-]{30,}/g,
+  /\b[rs]k_(?:live|test)_[A-Za-z0-9]{16,}/g,
+  /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g,
+  /https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/_-]+/g,
+];
+// The value after group 1 is the secret.
+const SECRET_VALUES = [
+  /(\b(?:Authorization|X-Chi-Bridge):\s*(?:Bearer\s+|Basic\s+|Token\s+)?)[^\s"'`]+/gi,
+  /((?<![A-Za-z0-9])[A-Za-z0-9_-]*?(?:token|api[_-]?key|access[_-]?key|secret|password|passwd)["']?\s*[=:]\s*["']?)[^\s"'&`,;}]+/gi,
+  /(\b[a-z][a-z0-9+.-]*:\/\/[^/\s:@]+:)[^@\s/]+(?=@)/gi,
+];
+
+// The secrets in +raw+ as [{start, end, text: MARK}]; overlapping ones
+// (a token= value holding a key shape) one span, as Redact's passes in a
+// row leave one mark.
+function secretSpans(raw) {
+  const found = [];
+  for (const re of SECRET_PATTERNS) for (const m of raw.matchAll(re)) found.push([m.index, m.index + m[0].length]);
+  for (const re of SECRET_VALUES) {
+    for (const m of raw.matchAll(re)) found.push([m.index + m[1].length, m.index + m[0].length]);
+  }
+  found.sort((a, b) => a[0] - b[0]);
+  const spans = [];
+  for (const [start, end] of found) {
+    const last = spans[spans.length - 1];
+    if (last && start < last.end) last.end = Math.max(last.end, end);
+    else spans.push({ start, end, text: MARK });
+  }
+  return spans;
+}
+
+// The spans of +raw+ that read differently on the participant page:
+// [{start, end, text}], in order, not overlapping. Secrets first, then
+// the session's folder (it is usually under home), as Redact.text.
+function replacements(raw, { home = "", cwd = "" } = {}) {
+  const spans = secretSpans(raw);
+  const taken = (s, e) => spans.some((r) => s < r.end && e > r.start);
+  if (cwd.length > 1) {
+    for (const m of raw.matchAll(new RegExp(`${escapeRegExp(cwd)}(/|(?=\\b|$))`, "g"))) {
+      const end = m.index + m[0].length;
+      if (!taken(m.index, end)) spans.push({ start: m.index, end, text: m[1] === "/" ? "" : "." });
+    }
+  }
+  if (home.length > 1) {
+    for (const m of raw.matchAll(new RegExp(`${escapeRegExp(home)}(?=/|\\b|$)`, "g"))) {
+      const end = m.index + m[0].length;
+      if (!taken(m.index, end)) spans.push({ start: m.index, end, text: "~" });
+    }
+  }
+  return spans.sort((a, b) => a.start - b.start);
+}
+
+// +raw+ normalized, with where each of its characters came from: text,
+// and starts[i]/ends[i] the raw offsets character i covers.
+export function normalizeWithMap(raw, opts = {}) {
+  const source = String(raw ?? "");
+  const spans = replacements(source, opts);
+  let text = "";
+  const starts = [];
+  const ends = [];
+  let space = null;
+  const put = (ch, start, end) => {
+    if (/\s/.test(ch)) {
+      if (space) space.end = end;
+      else if (text) space = { start, end };
+      return;
+    }
+    if (space) {
+      text += " ";
+      starts.push(space.start);
+      ends.push(space.end);
+      space = null;
+    }
+    text += ch;
+    starts.push(start);
+    ends.push(end);
+  };
+  let i = 0;
+  let next = 0;
+  while (i < source.length) {
+    const span = spans[next];
+    if (span && span.start === i) {
+      // A folder shown "." or "" (its "/" gone) maps to the whole span.
+      for (const ch of span.text) put(ch, span.start, span.end);
+      i = span.end;
+      next += 1;
+      continue;
+    }
+    put(source[i], i, i + 1);
+    i += 1;
+  }
+  return { text, starts, ends };
+}
+
+export function normalizeClaim(raw, opts = {}) {
+  return normalizeWithMap(raw, opts).text;
+}
+
+// The first +max+ characters of +text+ (or the last, +fromEnd+), never
+// half a surrogate pair.
+function clip(text, max, fromEnd = false) {
+  const chars = Array.from(text);
+  if (chars.length <= max) return text;
+  return (fromEnd ? chars.slice(-max) : chars.slice(0, max)).join("");
+}
+
+// The claim's q and p for a selection: +selected+ its text, +before+ and
+// +after+ the bubble's text around it. Normalized together, so a secret
+// the selection cuts into is read whole and marked whole (never a piece
+// of it in the link), and the prefix ends as the page reads it (one space
+// between it and the quote, or none). q is "" when the selection holds no
+// text.
+export function claimQuote(selected, before = "", opts = {}, after = "") {
+  const pre = String(before ?? "");
+  const from = pre.length;
+  const to = from + String(selected ?? "").length;
+  const { text, starts, ends } = normalizeWithMap(`${pre}${selected ?? ""}${after ?? ""}`, opts);
+  let a = 0;
+  while (a < text.length && ends[a] <= from) a += 1;
+  let b = text.length;
+  while (b > a && starts[b - 1] >= to) b -= 1;
+  while (a < b && text[a] === " ") a += 1;
+  while (b > a && text[b - 1] === " ") b -= 1;
+  const q = text.slice(a, b);
+  if (!q) return { q: "", p: "" };
+  return { q: clip(q, QUOTE_MAX), p: clip(text.slice(0, a), PREFIX_MAX, true) };
+}
+
+// "t=…&q=…&p=…" for a claim {turnId, q, p}; empty parts left out.
+export function claimParams({ turnId = "", q = "", p = "" } = {}) {
+  const params = new URLSearchParams();
+  if (turnId) params.set("t", String(turnId).slice(0, TURN_CHARS));
+  if (q) params.set("q", q);
+  if (q && p) params.set("p", p);
+  return params.toString();
+}
+
+// The participant page's link: +base+ the participant link's origin
+// ("https://chi.example/", "http://192.168.1.5:4567/"), no token.
+export function participantClaimLink(base, sessionId, claim) {
+  const params = claimParams(claim);
+  const root = String(base || "").replace(/#.*$/, "").replace(/\/?$/, "/");
+  return `${root}#s=${encodeURIComponent(sessionId)}${params ? `&${params}` : ""}`;
+}
+
+// The owner's page's hash for the claim.
+export function ownerClaimHash(sessionId, claim) {
+  const params = claimParams(claim);
+  return `#/s/${encodeURIComponent(sessionId)}${params ? `?${params}` : ""}`;
+}
+
+// {sessionId, turn, q, p} from either page's hash, or null when it names
+// no turn (a bare session link). The owner's page reads both forms: the
+// participant link opened in the owner's browser shows the owner's page.
+export function claimFromHash(hash) {
+  const raw = String(hash || "");
+  let id = null;
+  let query = "";
+  const owner = /^#\/s\/([^/?#]+)\?(.*)$/.exec(raw);
+  if (owner) {
+    try { id = decodeURIComponent(owner[1]); } catch { return null; }
+    query = owner[2];
+  } else if (raw.startsWith("#") && !raw.startsWith("#/")) {
+    query = raw.slice(1);
+  } else {
+    return null;
+  }
+  let params;
+  try { params = new URLSearchParams(query); } catch { return null; }
+  id ||= params.get("s");
+  const turn = params.get("t") || "";
+  if (!id || !/^[0-9a-f-]{1,36}$/i.test(turn)) return null;
+  return { sessionId: id, turn: turn.toLowerCase(), q: params.get("q") || "", p: params.get("p") || "" };
+}
+
+// Where the claim's text is in +texts+ (each root's raw text): {at, start,
+// end} raw offsets in texts[at], or null. The prefix and the quote
+// together first, then the quote alone (the bubble's text before it may
+// read differently on the other page).
+export function findClaim(texts, { q = "", p = "" } = {}, opts = {}) {
+  if (!q) return null;
+  const maps = texts.map((t) => normalizeWithMap(t, opts));
+  const needles = p ? [[`${p}${q}`, p.length], [q, 0]] : [[q, 0]];
+  for (const [needle, skip] of needles) {
+    for (let at = 0; at < maps.length; at += 1) {
+      const found = maps[at].text.indexOf(needle);
+      if (found < 0) continue;
+      const first = found + skip;
+      const last = found + needle.length - 1;
+      return { at, start: maps[at].starts[first], end: maps[at].ends[last] };
+    }
+  }
+  return null;
+}
+
+// ---- The DOM ----
+
+// The turn-opening element whose data-turn-id starts with +turn+ in
+// +container+, and the roots (+rootSelector+) from it to the next turn's
+// opening: {anchor, roots}, or null.
+export function turnRoots(container, turn, rootSelector) {
+  const anchors = [...container.querySelectorAll("[data-turn-id]")];
+  const at = anchors.findIndex((a) => turn && String(a.dataset.turnId || "").toLowerCase().startsWith(turn));
+  if (at < 0) return null;
+  const anchor = anchors[at];
+  const next = anchors[at + 1] || null;
+  const FOLLOWING = 4;
+  const roots = [...container.querySelectorAll(rootSelector)].filter((el) =>
+    (anchor === el || anchor.contains(el) || (anchor.compareDocumentPosition(el) & FOLLOWING))
+    && (!next || (!next.contains(el) && (el.compareDocumentPosition(next) & FOLLOWING))));
+  return { anchor, roots };
+}
+
+// The turn id of the turn +node+ is in (the last turn opening at or before
+// it in +container+), or null.
+export function turnIdOf(container, node) {
+  let found = null;
+  const PRECEDING = 2;
+  for (const anchor of container.querySelectorAll("[data-turn-id]")) {
+    if (anchor === node || anchor.contains(node) || (node.compareDocumentPosition(anchor) & PRECEDING)) found = anchor;
+    else break;
+  }
+  return found?.dataset.turnId || null;
+}
+
+// +root+'s text nodes and their text joined: {text, nodes: [{node, start}]}.
+function textOf(root, doc) {
+  const walker = doc.createTreeWalker(root, 4 /* NodeFilter.SHOW_TEXT */);
+  const nodes = [];
+  let text = "";
+  for (let n = walker.nextNode(); n; n = walker.nextNode()) {
+    nodes.push({ node: n, start: text.length });
+    text += n.data;
+  }
+  return { text, nodes };
+}
+
+// The text node and offset of raw offset +at+ in a textOf result.
+function pointAt({ nodes }, at, end = false) {
+  for (let i = nodes.length - 1; i >= 0; i -= 1) {
+    const { node, start } = nodes[i];
+    if (at > start || (at === start && !end) || i === 0) return { node, offset: Math.min(Math.max(at - start, 0), node.data.length) };
+  }
+  return null;
+}
+
+// The claim for a selection in +root+ (+range+ in it), as claimQuote's.
+export function selectionClaim(root, range, opts = {}, doc = globalThis.document) {
+  const before = doc.createRange();
+  before.setStart(root, 0);
+  before.setEnd(range.startContainer, range.startOffset);
+  const after = doc.createRange();
+  after.setStart(range.endContainer, range.endOffset);
+  after.setEnd(root, root.childNodes.length);
+  return claimQuote(range.toString(), before.toString(), opts, after.toString());
+}
+
+// Finds the claim +claim+ ({turn, q, p}) in +container+ and shows it: the
+// match's root (or the turn's opening) scrolled to the middle and marked
+// HIT_CLASS, its closed <details> opened, the quote highlighted (CSS
+// Highlight API). Without the turn (no opening carries its id: a
+// non-person turn), the quote in any root of the page. @return "quote",
+// "turn" or null (neither the turn nor the quote).
+export function showClaim(container, claim, { roots: rootSelector, opts = {}, doc = globalThis.document, win = globalThis.window } = {}) {
+  clearClaim(container, { doc, win });
+  const turn = turnRoots(container, claim.turn, rootSelector);
+  const roots = turn ? turn.roots : [...container.querySelectorAll(rootSelector)];
+  const texts = roots.map((root) => textOf(root, doc));
+  const hit = findClaim(texts.map((t) => t.text), claim, opts);
+  if (!hit && !turn) return null;
+  const el = hit ? roots[hit.at] : turn.anchor;
+  for (let d = el.parentElement?.closest("details"); d; d = d.parentElement?.closest("details")) d.open = true;
+  el.classList.add(HIT_CLASS);
+  el.scrollIntoView?.({ block: "center" });
+  if (hit) {
+    const start = pointAt(texts[hit.at], hit.start);
+    const end = pointAt(texts[hit.at], hit.end, true);
+    const highlights = win?.CSS?.highlights;
+    if (start && end && highlights && typeof win.Highlight === "function") {
+      const range = doc.createRange();
+      range.setStart(start.node, start.offset);
+      range.setEnd(end.node, end.offset);
+      highlights.set(HIGHLIGHT, new win.Highlight(range));
+    }
+  }
+  return hit ? "quote" : "turn";
+}
+
+// The mark and highlight showClaim left, gone.
+export function clearClaim(container, { win = globalThis.window } = {}) {
+  for (const el of container.querySelectorAll(`.${HIT_CLASS}`)) el.classList.remove(HIT_CLASS);
+  win?.CSS?.highlights?.delete?.(HIGHLIGHT);
+}

data/lib/samagotchi/web/public/participant.html

@@ -171,6 +171,7 @@ button.small{font-size:12px;padding:2px 8px}
     <div class="p-note" id="note"></div>
   </div>
   <div class="p-offline" id="offline" role="status" hidden>Can't reach the session — retrying…</div>
+  <div class="p-offline" id="claimNote" role="status" hidden></div>
 </header>
 <div class="p-body">
 <aside class="p-plan" id="plan" hidden aria-label="Under review">

data/lib/samagotchi/web/public/participant.js

@@ -22,8 +22,10 @@ import { createAuthLost, lostAnswer } from "./auth_lost.js";
 import { REPLACE_SESSION_TEXT, fragmentCode, tradeFragmentCode } from "./token_fragment.js";
 import { createAnnotateBar } from "./annotate_bar.js";
 import { parsePresets } from "./annotate_presets.js";
+import { withVerify } from "./verify_preset.js";
 import { appendQuote } from "./annotations.js";
 import { messageAuthorData, participantQuote, participantSource } from "./participant_annotate.js";
+import { claimFromHash, showClaim } from "./claim_link.js";
 import { mountComposer } from "./composer_mount.js";
 import { PROMPT_LINE_PX } from "./composer_size.js";
 import {
@@ -68,6 +70,10 @@ let wantedView = "thread";
 // a message's node while it is unchanged (its open tool list, a text
 // selection in it).
 let drawnMessages = [];
+// A claim link's turn and quote (claim_link.js: #s=…&t=…&q=…), shown once
+// the thread is drawn; a later hash change shows another.
+let pendingClaim = claimFromHash(globalThis.location?.hash);
+let claimNoteTimer = null;
 
 function el(tag, cls, text) {
   const node = document.createElement(tag);
@@ -141,6 +147,7 @@ async function load() {
   live = liveFrom(data.current_turn);
   liveStale = false;
   render();
+  showPendingClaim();
   // The live turn is the data's now: the events after its cursor come
   // again from there (the open stream may have delivered some of them to
   // the live turn just replaced). With no cursor (no worker) an open
@@ -220,6 +227,40 @@ function render() {
   renderDock();
 }
 
+// The claim link's quote in the thread, scrolled to and marked; a quote
+// not found marks its turn; neither found (before a continue) leaves the
+// thread at the top and says so, as does a link to another session (this
+// browser's cookie is one grant's). The hash then drops the claim, so the
+// same link opened again shows it again (a hashchange).
+function showPendingClaim() {
+  const claim = pendingClaim;
+  if (!claim || !data) return;
+  pendingClaim = null;
+  const { pathname = "", search = "" } = globalThis.location || {};
+  globalThis.history?.replaceState?.(null, "", `${pathname}${search}#s=${encodeURIComponent(sessionId)}`);
+  if (claim.sessionId !== sessionId) {
+    const title = data.session?.title ? `"${data.session.title}"` : "this session";
+    return showClaimNote(`This link is for another session; this browser holds your link for ${title}.`);
+  }
+  setView("thread");
+  if (showClaim($("thread"), claim, { roots: ".p-msg > .p-bubble" })) return;
+  $("main").scrollTop = 0;
+  showClaimNote("The linked turn isn't in this session.");
+}
+
+function showClaimNote(text) {
+  const note = $("claimNote");
+  note.textContent = text;
+  note.hidden = false;
+  clearTimeout(claimNoteTimer);
+  claimNoteTimer = setTimeout(() => { note.hidden = true; }, 6000);
+}
+
+window.addEventListener("hashchange", () => {
+  pendingClaim = claimFromHash(globalThis.location?.hash);
+  showPendingClaim();
+});
+
 // The review's subjects: beside the thread on a wide screen, behind the
 // Plan | Thread toggle on a narrow one; drawn again only when they changed.
 function renderPlan() {
@@ -549,11 +590,12 @@ for (const button of $("viewSeg").querySelectorAll("button")) {
 
 // Annotate (annotate_bar.js, participant_annotate.js): a selection in the
 // Plan or the thread offers "Annotate" and the presets
-// (web.annotate_presets), which append a quote to the comment box; nothing
-// is sent. No plugin pills: a review turn refuses `/` lines. Not in the
-// owner's participant view, nor while this participant can't comment.
+// (web.annotate_presets, then the built-in Verify: verify_preset.js), which
+// append a quote to the comment box; nothing is sent. No plugin pills: a
+// review turn refuses `/` lines. Not in the owner's participant view, nor
+// while this participant can't comment.
 const annotateBar = createAnnotateBar({
-  presets: parsePresets(body.annotatePresets),
+  presets: withVerify(parsePresets(body.annotatePresets)),
   canAnnotate: () => !ownerView && !ended && !!data?.viewer?.can_comment,
   roots: () => [$("planDoc"), $("thread")],
   isLive: (root) => !!root.closest?.(".p-msg.live"),

data/lib/samagotchi/web/public/participants_panel.js

@@ -247,6 +247,9 @@ export function createParticipantsControl({ el, session, api, onChange = () => {
   // The header chi web's proxy names the user in (GET …/participants), null
   // without one: the Invite's email field.
   let identityHeader = null;
+  // Where a participant's link opens, no token (GET …/participants
+  // link_base): a claim link's base (claimTarget).
+  let linkBase = null;
   let loadedFor = null;
   let invite = null;
   let error = null;
@@ -289,6 +292,7 @@ export function createParticipantsControl({ el, session, api, onChange = () => {
       grants = null;
       working = null;
       inviteMode = null;
+      linkBase = null;
       loadedFor = null;
       setParticipantNames([]);
       onChange();
@@ -301,6 +305,7 @@ export function createParticipantsControl({ el, session, api, onChange = () => {
       working = typeof body.warning === "string" ? body.warning : null;
       inviteMode = typeof body.mode === "string" ? body.mode : null;
       identityHeader = typeof body.identity_header === "string" && body.identity_header ? body.identity_header : null;
+      linkBase = typeof body.link_base === "string" && body.link_base ? body.link_base : null;
       loadedFor = id;
       if (setParticipantNames(grants)) onNames();
     } catch {
@@ -310,6 +315,7 @@ export function createParticipantsControl({ el, session, api, onChange = () => {
         grants = [];
         working = null;
         inviteMode = null;
+        linkBase = null;
         setParticipantNames([]);
       }
     }
@@ -446,6 +452,15 @@ export function createParticipantsControl({ el, session, api, onChange = () => {
     // A participants_changed event, or a session's own refresh.
     reload: () => load(),
     chip: () => (session() && loadedFor === session() ? chipModel(grants, clock()) : null),
+    // A claim link's target (claim_link.js): {base, names} the open
+    // session's participant link base and its active people's names (an
+    // agent has no browser to open it in); null without either (an older
+    // chi web, no person invited).
+    claimTarget: () => {
+      if (!session() || loadedFor !== session() || !linkBase) return null;
+      const names = (grants || []).filter((g) => g.state === "active" && g.kind === "human").map((g) => g.name);
+      return names.length ? { base: linkBase, names } : null;
+    },
     close: () => shell.close(),
     isOpen: () => shell.isOpen(),
   };

data/lib/samagotchi/web/public/route.js

@@ -1,5 +1,6 @@
 // The page's place in its URL hash: #/s/<session id> for an open session,
-// #/sessions for the all-sessions view, nothing for the empty start.
+// #/sessions for the all-sessions view, nothing for the empty start. A
+// session's hash may carry a claim link's ?t=…&q=… (claim_link.js).
 export const ALL_SESSIONS_HASH = "#/sessions";
 
 export function sessionHash(id) {
@@ -7,7 +8,7 @@ export function sessionHash(id) {
 }
 
 export function sessionIdFromHash(hash) {
-  const m = /^#\/s\/([^/?#]+)$/.exec(hash || "");
+  const m = /^#\/s\/([^/?#]+)(?:\?[^#]*)?$/.exec(hash || "");
   if (!m) return null;
   try {
     return decodeURIComponent(m[1]) || null;

data/lib/samagotchi/web/public/tokens.css

@@ -3,7 +3,8 @@
   --glass-bg:color-mix(in srgb,var(--bg-panel) 70%,transparent);--glass-border:rgba(255,255,255,.08);--glass-highlight:rgba(255,255,255,.05);--glass-shadow:0 8px 30px rgba(0,0,0,.35);
   --diff-add-bg:rgba(63,185,80,.14);--diff-add-text:#aff5b4;--diff-del-bg:rgba(248,81,73,.14);--diff-del-text:#ffc1bc;
   --code-text:#c9d1d9;--code-keyword:#ff7b72;--code-string:#a5d6ff;--code-comment:#8b949e;--code-constant:#79c0ff;--code-func:#d2a8ff;--code-type:#ffa657;
-  --card-hover-border:rgba(255,255,255,.14);--on-solid:#fff;--on-warn:#fff;--text-hover:#fff;--badge-bg:rgba(255,255,255,.08);--badge-ring:rgba(255,255,255,.18);--shadow-strong:rgba(0,0,0,.5);--backdrop:rgba(0,0,0,.85);--toast-shadow:0 6px 24px rgba(0,0,0,.25);--ws-stale-opacity:.4;--ws-rule:var(--border-strong);--ws-muted:var(--text-3);--ws-faint:var(--text-muted);--ws-act-border:#444c56;--author-1:#79c0ff;--author-2:#d2a8ff;--author-3:#7ee787;--author-4:#ffa657;--author-5:#ff7b72;--author-6:#f2cc60;--author-owner:var(--text-3);--time-gap:var(--text-faint)}
+  --card-hover-border:rgba(255,255,255,.14);--on-solid:#fff;--on-warn:#fff;--text-hover:#fff;--badge-bg:rgba(255,255,255,.08);--badge-ring:rgba(255,255,255,.18);--shadow-strong:rgba(0,0,0,.5);--backdrop:rgba(0,0,0,.85);--toast-shadow:0 6px 24px rgba(0,0,0,.25);--ws-stale-opacity:.4;--ws-rule:var(--border-strong);--ws-muted:var(--text-3);--ws-faint:var(--text-muted);--ws-act-border:#444c56;--author-1:#79c0ff;--author-2:#d2a8ff;--author-3:#7ee787;--author-4:#ffa657;--author-5:#ff7b72;--author-6:#f2cc60;--author-owner:var(--text-3);--time-gap:var(--text-faint);
+  --claim-mark:color-mix(in srgb,var(--warn-bright) 32%,transparent);--claim-ring:var(--warn)}
 /* Light palette: follows the system setting. :not([data-theme="dark"]) leaves room for a later in-page toggle (data-theme on <html>); there is none yet. Each palette sets color-scheme, so native radios, inputs and scrollbars follow it. */
 @media (prefers-color-scheme:light){:root:not([data-theme="dark"]){color-scheme:light;--bg:#f5f6f8;--bg-panel:#ffffff;--bg-inset:#f1f3f6;--bg-raised:#e8ebf0;--bg-hover:#eceff4;--border:#dde1e7;--border-strong:#c3c9d2;--text:#1f2328;--text-bright:#0d1117;--text-2:#2f363d;--text-3:#475160;--text-muted:#57606a;--text-faint:#636c76;--accent:#0066cc;--accent-strong:#0058b0;--accent-bg:#e3f0ff;--accent-ring:rgba(0,102,204,.2);--primary:#0071e3;--ok:#1a7f37;--ok-text:#116329;--ok-bg:#dafbe1;--warn:#9a6700;--warn-text:#7d4e00;--warn-bright:#875c00;--warn-bg:#fff6cc;--warn-border:#d4a72c;--danger:#cf222e;--danger-bg:#cf222e;--danger-text:#a40e26;--danger-bg-dim:#ffebe9;--think:#8250df;--think-text:#6639ba;--accent-border:#b3d4f7;--pick-border:#0969da;
   --glass-border:rgba(31,35,40,.10);--glass-highlight:rgba(255,255,255,.7);--glass-shadow:0 8px 30px rgba(31,35,40,.10);

data/lib/samagotchi/web/public/verify_preset.js

@@ -0,0 +1,18 @@
+// The built-in Verify preset, after web.annotate_presets' on both pages
+// (docs/internals/participants.md, Deep links): the quote, then the ask to
+// check it against the code and end on a verdict line a later card can
+// read. Like a preset of the config's, it fills the box and never sends.
+// A preset is a text (its label) or {label, text} (annotate_bar.js). A
+// module of its own: static JS is cached at unversioned URLs, and a new
+// export on an old module would blank the page.
+
+export const VERIFY_PRESET = Object.freeze({
+  label: "Verify",
+  text: "Verify this claim against the code. If this session's context doesn't settle it, say so. "
+    + "End with a line `Verdict: confirmed|refuted|unclear — <one-line reason>`.",
+});
+
+// +presets+ (annotate_presets.js parsePresets) with Verify after them.
+export function withVerify(presets) {
+  return [...(presets || []), VERIFY_PRESET];
+}