@1agh/maude 0.54.0 → 0.56.0

package/apps/studio/canvas-build-worker.ts

@@ -79,7 +79,13 @@ main().catch((err) => {
   // the one who has to act on it. Bun collapses plugin throws into the build
   // log, so the allowlist's own wording survives in `err.message`.
   process.stdout.write(
-    JSON.stringify({ ok: false, error: String(err?.message ?? err).slice(0, 4000) })
+    JSON.stringify({
+      ok: false,
+      error: String(err?.message ?? err).slice(0, 4000),
+      // A NUMBER, never the specifiers. The host counts these; the strings
+      // stay between the canvas and the person who wrote it.
+      rejectedImports: Number(err?.rejectedImports ?? 0) || 0,
+    })
   );
   process.exit(1);
 });

package/apps/studio/canvas-build.ts

@@ -187,7 +187,15 @@ export async function buildCanvasModule(
     // "Bundle failed" log, so the allowlist records its own reasons and they
     // win here — the person who wrote the canvas has to be able to act on it,
     // and "Bundle failed" tells them nothing.
-    if (denials.length > 0) throw new Error(denials.map((d) => d.reason).join('\n'));
+    if (denials.length > 0) {
+      // The COUNT of denials travels with the error, so the cost lane can
+      // record that imports were refused without ever seeing the specifier —
+      // that string is tenant-authored content (Cloud Phase 26 Stage 4). The
+      // reasons still go to the person who wrote the canvas, unchanged.
+      const err = new Error(denials.map((d) => d.reason).join('\n'));
+      (err as Error & { rejectedImports?: number }).rejectedImports = denials.length;
+      throw err;
+    }
     const msg = built.logs.map((l) => l.message).join('\n');
     throw new Error(`Bun.build failed on ${canvasAbsPath}:\n${msg}`);
   }

package/apps/studio/client/app.jsx

@@ -156,7 +156,7 @@ const LAYERS_MODE_STORE = 'mdcc-layers-mode';
 // resizable width + a tab strip over the panels assigned to the slot; renders
 // the active panel (passed as children). Collapses to 0 width when nothing is
 // visibly open (it may still host an always-mounted hidden ChatPanel).
-function DockSlot({ side, width, open, ids, activeId, onPick, children }) {
+function DockSlot({ side, width, open, ids, activeId, onPick, children, labels = null }) {
   return (
     <div
       className={'st-dockslot st-dockslot--' + side + (open ? '' : ' is-collapsed')}
@@ -173,7 +173,7 @@ function DockSlot({ side, width, open, ids, activeId, onPick, children }) {
               className={'st-docktab' + (activeId === id ? ' is-active' : '')}
               onClick={() => onPick(id)}
             >
-              {(DOCK_PANELS.find((p) => p.id === id) || {}).label || id}
+              {labels?.[id] || (DOCK_PANELS.find((p) => p.id === id) || {}).label || id}
             </button>
           ))}
         </div>
@@ -628,6 +628,14 @@ const STICONS = {
       <path d="M4.3 9.5v2.3a1.2 1.2 0 0 0 2.4 0v-1.7" />
     </>
   ),
+  bug: (
+    <>
+      <circle cx="8" cy="9" r="3.6" />
+      <circle cx="8" cy="4.4" r="1.3" />
+      <path d="M6.2 3.4 5.2 2M9.8 3.4l1-1.4" />
+      <path d="M4.6 7.6H2.2M4.6 9H2.2M4.6 10.6H2.5M11.4 7.6h2.4M11.4 9h2.4M11.4 10.6h2.3" />
+    </>
+  ),
   'panel-left': (
     <>
       <rect x="2.5" y="3" width="11" height="10" rx="1.5" />
@@ -3725,7 +3733,14 @@ function Menubar({
     { id: 'tree', label: 'Project Tree', shortcut: 'T', checked: sidebarOpen, disabled: false },
     {
       id: 'changes',
-      label: changesCount > 0 ? `Changes · ${changesCount} unsaved` : 'Changes',
+      // In a cell this panel is History (the hub already committed the work),
+      // so the menu names what it opens rather than an unsaved count there is
+      // no way — and no reason — to act on.
+      label: cloud
+        ? 'History'
+        : changesCount > 0
+          ? `Changes · ${changesCount} unsaved`
+          : 'Changes',
       shortcut: '⌘ ⇧ G',
       checked: changesOpen,
       disabled: false,
@@ -4115,6 +4130,16 @@ function Menubar({
           </button>
         )}
         {exportCenter && <ExportBadge center={exportCenter} />}
+        <button
+          type="button"
+          className="st-reportbug"
+          data-testid="report-bug-toggle"
+          aria-label="Report a bug"
+          data-tip="Report a bug"
+          onClick={onReportBug}
+        >
+          <StIcon name="bug" size={15} />
+        </button>
         <button
           type="button"
           className="st-whatsnew"
@@ -14001,6 +14026,11 @@ function App() {
     changes: changesOpen,
     assistant: assistantOpen,
   };
+  // Per-shell overrides for the dock tab strip. In a cell the `changes` panel
+  // IS the history (the hub commits server-side), so its tab must say so —
+  // otherwise the one visible word still promises a working-tree surface that
+  // panel no longer has.
+  const dockLabels = cfg.cloud ? { changes: 'History' } : null;
   const leftIds = idsForSide('left');
   const rightIds = idsForSide('right');
   const leftActive = leftIds.find((id) => panelIsOpen[id]) || null;
@@ -14065,6 +14095,20 @@ function App() {
           status={gitStatus && remoteSync ? { ...gitStatus, ...remoteSync } : gitStatus}
           project={project}
           readOnly={!isNativeApp() || viewerMode}
+          // A cloud cell commits every edit server-side as it lands, so the
+          // working-tree half of this panel describes work that is already
+          // saved. `cfg.cloud` is present exactly when the hub runs the
+          // workspace agent that owns this project's history, which is the
+          // same condition.
+          //
+          // PRESENTATION, NOT A CONTROL — nothing may come to depend on this.
+          // `/_api/git/commit` and `/_api/git/discard` are classified `edit` in
+          // the cell's route manifest and stay reachable by any member with a
+          // session; withdrawing the buttons removes an offer that would
+          // mislead, it does not remove a capability. The real gates are
+          // server-side (`projectReadOnly`, the manifest's role matrix), and
+          // they are unchanged by this flag.
+          historyOnly={!!cfg.cloud}
           resizing={resizingFor('changes')}
           onClose={() => setChangesOpen(false)}
           onCommit={gitCommit}
@@ -14312,6 +14356,7 @@ function App() {
               ids={leftIds}
               activeId={leftActive}
               onPick={togglePanel}
+              labels={dockLabels}
             >
               {leftHostsAssistant && (
                 <ChatPanel
@@ -14384,6 +14429,7 @@ function App() {
               ids={rightIds}
               activeId={rightActive}
               onPick={togglePanel}
+              labels={dockLabels}
             >
               {rightHostsAssistant && (
                 <ChatPanel

package/apps/studio/client/github.js

@@ -39,6 +39,13 @@ export const openVerification = () =>
  *  Rust side host-locks it to github.com. Throws on an older desktop build without
  *  the command — callers fall back to copy-to-clipboard. */
 export const openGitHubUrl = (url) => invoke('open_github_url', { url });
+/** Open a Maude Cloud URL (device activation, share view, dashboard) in the OS
+ *  browser. Native only — `window.open` is a silent no-op in WKWebView, which is
+ *  what stranded people mid-sign-in. The Rust side zone-locks it against the
+ *  address it resolves per call, so this argument can't widen where it goes.
+ *  Throws on an older desktop build without the command — every caller must keep
+ *  a visible link the person can use by hand. */
+export const openCloudUrl = (url) => invoke('open_cloud_url', { url });
 /** Show the device code as soon as the shell has it. Returns an unlisten promise. */
 export const onDeviceCode = (cb) => listen('github://device-code', cb);
 /** Fire when sign-in completes (any surface) so other surfaces can flip live. cb(login). */