@bakapiano/ccsm 0.17.10 → 0.18.0

package/public/css/terminals.css

@@ -226,55 +226,146 @@
   min-height: 0;
   height: 100%;
   margin: 0 calc(-1 * var(--s-4));
-  /* Cancel the tab-panel gap above so the terminal sits flush under the
-     title bar with no white band. */
-  margin-top: calc(-1 * var(--s-4));
   background: var(--bg-elev);
   overflow: hidden;
 }
-.session-actions {
+
+/* Session tabs · sits between the page-title-bar and the session-pane.
+   One row of small tab buttons; the active one has a darker bg + accent
+   underline. Last child is a "+" button that bounces to /launch. The
+   strip is full-bleed (matches .session-pane horizontal extents). */
+.session-tabs {
   display: flex;
   align-items: stretch;
-  justify-content: flex-start;
   gap: 0;
-  height: calc(24px * var(--anti-zoom, 1));
-  min-height: calc(24px * var(--anti-zoom, 1));
-  max-height: calc(24px * var(--anti-zoom, 1));
+  height: 30px;
   flex-shrink: 0;
-  box-sizing: border-box;
-  padding: 0;
-  background: var(--accent);
-  border-top: 0;
+  padding: 0 2px 0 0;
+  /* Negative bottom margin cancels the tab-panel's gap to the
+     session-pane underneath, so the strip sits flush against the
+     terminal. Negative horizontal margin cancels .main's padding so
+     the strip is full-bleed like the terminal underneath. */
+  margin: 0 calc(-1 * var(--s-4)) calc(-1 * var(--s-4));
+  background: #2d2a26;
+  border-bottom: 0;
+}
+.session-tabs-list {
+  display: flex;
+  align-items: stretch;
+  gap: 0;
+  flex: 1;
+  min-width: 0;
+  overflow: hidden;
 }
-.session-actions .action {
-  display: inline-flex;
+.session-tabs-right {
+  display: flex;
   align-items: center;
-  gap: 5px;
-  height: 100%;
-  padding: 0 10px;
-  font-size: 11px;
-  font-weight: 500;
-  line-height: 1;
-  color: rgba(255, 255, 255, 0.85);
-  background: transparent;
+  flex-shrink: 0;
+  padding-right: 2px;
+}
+/* Close the gap to the page-title-bar above — only when there IS one.
+   In standalone PWA the title-bar is display:none and .session-tabs is
+   the first tab-panel child; a negative margin-top there would push
+   the strip up over the OS title-bar border. */
+.page-title-bar + .session-tabs {
+  margin-top: calc(-1 * var(--s-4));
+}
+.session-tab {
+  appearance: none;
+  background: #423d37;
   border: 0;
-  border-radius: 0;
+  border-bottom: 2px solid transparent;
+  margin-bottom: -1px;          /* overlap container border-bottom */
+  padding: 0 10px;
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  font: inherit;
+  font-size: 12px;
+  color: rgba(255, 255, 255, 0.65);
   cursor: pointer;
+  max-width: 200px;
+  min-width: 0;
   transition: background-color .12s, color .12s;
 }
-.session-actions .action:hover {
+.session-tab:hover { background: #4f4942; color: #fff; }
+.session-tab.is-active {
+  background: var(--ink);
   color: #fff;
-  background: rgba(255, 255, 255, 0.14);
+  border-bottom-color: var(--ink);
 }
-.session-actions .action.danger:hover {
+.session-tab-icon { display: inline-flex; flex-shrink: 0; }
+.session-tab-icon svg { width: 14px; height: 14px; }
+.session-tab-icon img { width: 14px; height: 14px; }
+.session-tab-label {
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  min-width: 0;
+}
+.session-tab-meta { color: rgba(255, 255, 255, 0.5); font-size: 11px; }
+.session-tab.is-active .session-tab-meta { color: rgba(255, 255, 255, 0.6); }
+.session-tab-add {
+  background: transparent;
+  max-width: none;
+  padding: 0 8px;
   color: #fff;
-  background: rgba(0, 0, 0, 0.22);
 }
-.session-actions .action svg {
-  width: 13px;
-  height: 13px;
-  stroke-width: 1.75;
+.session-tab-add:hover { background: rgba(255, 255, 255, 0.1); color: #fff; }
+.session-tab-add svg { width: 14px; height: 14px; }
+
+/* Kebab in the page-title-bar (top-right). Compact 24px square so it
+   doesn't dominate the masthead. In WCO mode the title-bar already
+   reserves padding-right for OS controls, so this slides cleanly to
+   the left of them. */
+.session-menu-btn {
+  appearance: none;
+  background: transparent;
+  border: 0;
+  width: 26px;
+  height: 26px;
+  border-radius: 5px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  color: #fff;
+  cursor: pointer;
+  flex-shrink: 0;
+  transition: background-color .12s, color .12s;
 }
+.session-menu-btn:hover { background: rgba(255, 255, 255, 0.1); color: #fff; }
+.session-menu-btn svg { width: 16px; height: 16px; }
+
+.session-menu {
+  background: var(--bg-elev);
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  padding: 4px;
+  box-shadow: var(--shadow-md, 0 4px 16px rgba(0,0,0,0.08));
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+.session-menu-item {
+  appearance: none;
+  background: transparent;
+  border: 0;
+  padding: 7px 10px;
+  border-radius: 4px;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font: inherit;
+  font-size: 13px;
+  color: var(--ink);
+  cursor: pointer;
+  text-align: left;
+}
+.session-menu-item:hover { background: var(--bg); }
+.session-menu-item.danger { color: var(--danger, #b73f3f); }
+.session-menu-item.danger:hover { background: rgba(183, 63, 63, 0.08); }
+.session-menu-item svg { width: 14px; height: 14px; }
+
 .session-pane-head {
   display: flex;
   align-items: center;
@@ -327,11 +418,25 @@
   height: 100%;
 }
 .session-pane-body .terminal-empty {
-  background: var(--bg);
+  background: #1a1815;
+  color: #e8e3d5;
   display: flex;
   flex-direction: column;
   align-items: center;
   justify-content: center;
   gap: var(--s-3);
   height: 100%;
+  font-size: 13px;
+}
+.session-pane-body .terminal-empty .mono {
+  color: #e07b6e;
+}
+.session-pane-body .terminal-empty .action.primary {
+  background: #e8e3d5;
+  color: #1a1815;
+  border-color: #e8e3d5;
+}
+.session-pane-body .terminal-empty .action.primary:hover {
+  background: #faf9f5;
+  border-color: #faf9f5;
 }

package/public/css/wco.css

@@ -80,16 +80,34 @@ body.is-app:not(.is-wco) .sidebar-top {
 body.is-app:not(.is-wco) .page-title-bar {
   display: none;
 }
+/* terminals.css uses `.page-title-bar + .session-tabs { margin-top: -s-4 }`
+   to flush the tab strip against the in-page title-bar. Adjacent-sibling
+   selectors match by DOM order regardless of display, so the rule still
+   pulls session-tabs up by 16px even when the title-bar is hidden — the
+   top half of the tabs ends up clipped above the viewport / under the OS
+   title bar. Reset to 0 in standalone PWA. */
+body.is-app:not(.is-wco) .page-title-bar + .session-tabs {
+  margin-top: 0;
+}
 body.is-app:not(.is-wco) .app {
-  /* Hairline separator under the OS title bar. Painted as an inset
-     box-shadow rather than a border so it doesn't change .app's box
-     model — a real border-top added 1px to .app's height, and the
-     grid's implicit row auto-sized off content (.main reporting 720)
-     rather than the (now 719px) container, so .main overflowed the
-     viewport by exactly 1px and put a permanent vertical scrollbar
-     down the right of the terminal page. Inset shadow draws the same
-     line with zero layout cost. */
-  box-shadow: inset 0 1px 0 var(--border);
+  /* Hairline separator under the OS title bar. Has to sit ABOVE the
+     sidebar's own background — an inset box-shadow on .app gets covered
+     by .sidebar (which paints var(--ui-bg) across its full area inside
+     .app), so the line was invisible. An absolutely-positioned ::before
+     paints over both columns; it's outside the grid track so it doesn't
+     reintroduce the 1px overflow that a real `border-top: 1px` did. */
+  position: relative;
+}
+body.is-app:not(.is-wco) .app::before {
+  content: "";
+  position: absolute;
+  top: 0;
+  left: 0;
+  right: 0;
+  height: 1px;
+  background: var(--border);
+  z-index: 10;
+  pointer-events: none;
 }
 /* With page-title-bar hidden, session-pane's `margin-top: calc(-1 *
    var(--s-4))` — designed to flush it against the (now invisible)
@@ -101,13 +119,21 @@ body.is-app:not(.is-wco) .session-pane {
   margin-top: 0;
   height: auto;
 }
-/* Settings page · with the title-bar hidden in standalone its content
-   would otherwise butt straight against the OS title-bar border. Give
-   it back a little breathing room (Sessions / Launch / About don't
-   need this — they have their own top chrome or flush-to-edge intent). */
-body.is-app:not(.is-wco) [data-panel="configure"] {
+/* Settings + Launch · with the in-page title-bar hidden in standalone
+   mode, their content would otherwise butt straight against the OS
+   title-bar border. Give a little breathing room. Sessions has its
+   own full-bleed terminal pane; About has its own hero header. */
+body.is-app:not(.is-wco) [data-panel="configure"],
+body.is-app:not(.is-wco) [data-panel="launch"],
+body.is-app:not(.is-wco) [data-panel="remote"] {
   padding-top: var(--s-4);
 }
+/* Sidebar nav rows (New Session / Settings) also need a top gap in
+   standalone — body.is-app zeros .sidebar's padding-top so the in-page
+   title-bar can sit flush, but with that title-bar gone in standalone
+   mode the nav buttons end up jammed against the OS title-bar border.
+   Restore a small inset so they read as a real nav, not as overflow. */
+body.is-app:not(.is-wco) .sidebar { padding-top: var(--s-3); }
 
 /* WCO mode only: the browser has hidden its own title bar and floats OS
    controls (min/max/close) over our content top-right. Our 34px top band
@@ -124,16 +150,39 @@ body.is-wco .page-title-bar {
 }
 body.is-wco .page-title-bar,
 body.is-wco .sidebar-top {
-  height: calc(34px * var(--anti-zoom, 1));
-  min-height: calc(34px * var(--anti-zoom, 1));
-  max-height: calc(34px * var(--anti-zoom, 1));
+  /* --titlebar-h is set from JS reading
+     navigator.windowControlsOverlay.getTitlebarAreaRect().height — the
+     OS-reported strip the overlay reserves for us. CSS env() and a 32px
+     baseline are layered fallbacks when the JS API is unavailable. No
+     min-floor on the JS path: the OS knows its own caption height best,
+     and over-padding (the previous max(40px, …)) made the chrome look
+     visibly chunkier than the rest of the window. */
+  height: calc(var(--titlebar-h, env(titlebar-area-height, 32px)) * var(--anti-zoom, 1));
+  min-height: calc(var(--titlebar-h, env(titlebar-area-height, 32px)) * var(--anti-zoom, 1));
+  max-height: calc(var(--titlebar-h, env(titlebar-area-height, 32px)) * var(--anti-zoom, 1));
 }
 body.is-wco .sidebar-brand,
 body.is-wco .sidebar-brand-button,
 body.is-wco .collapse-toggle {
-  height: 34px;
-  min-height: 34px;
+  height: var(--titlebar-h, env(titlebar-area-height, 32px));
+  min-height: var(--titlebar-h, env(titlebar-area-height, 32px));
 }
+/* terminals.css uses the .tab-panel's gap (s-4) plus a -s-4 margin-top on
+   .session-tabs to close that gap, so the tab strip visually flushes
+   against the page-title-bar above. In WCO the negative margin pulls the
+   tabs row UP by 16px — i.e. its top edge lands ABOVE the OS overlay's
+   bottom edge, and the kebab inside gets clipped by the floating window
+   controls. Cancel both the gap and the negative margin here so the tabs
+   row sits at exactly y=titlebar-area-height (flush below the overlay)
+   without losing flushness against the title-bar. */
+body.is-wco .tab-panel { gap: 0; }
+body.is-wco .page-title-bar + .session-tabs { margin-top: 0; }
+/* terminals.css also gives .session-tabs `margin-bottom: -s-4` to close
+   the gap to session-pane below — but with tab-panel gap now 0 in WCO
+   that negative margin pulls session-pane UP 16px instead, overlapping
+   the bottom of the tab labels (kebab + tab text get clipped from
+   below). Zero it out too. */
+body.is-wco .session-tabs { margin-bottom: 0; }
 
 @media (display-mode: window-controls-overlay) {
   body.is-wco .page-title-bar {

package/public/css/widgets.css

@@ -749,8 +749,15 @@
   display: flex;
   flex-direction: column;
   gap: var(--s-4);
-  padding: 4px var(--s-2) var(--s-4) 4px;
-  margin: -4px calc(-1 * var(--s-2)) 0 -4px;
+  /* Negative right margin = -var(--s-4) cancels .main's padding-right
+     so the scroll container — and therefore the scrollbar — reach the
+     full window edge. Padding-right = var(--s-4) preserves the same
+     visual gap between content and the right edge that was there
+     before. Top padding bumped to var(--s-3) so the first section title
+     has visible breathing room from the page-title-bar separator above
+     it (4px was almost flush). Negative margin-top stays in sync. */
+  padding: var(--s-4) var(--s-4) var(--s-4) 4px;
+  margin: -4px calc(-1 * var(--s-4)) 0 -4px;
 }
 /* In a flex column container, items default to flex-shrink:1 which
    causes the cards to compress instead of pushing the scroll container
@@ -1626,3 +1633,270 @@
   background: var(--bg);
   border: 1px solid var(--border);
 }
+
+/* ── Remote page ──────────────────────────────────────────────────
+   Uses the existing .settings-scroll + Section + .config-grid + .field
+   + .chip system from ConfigurePage. Only adds the bits that don't
+   already exist: the inline status line per provider, the token-row
+   input + action cluster, the URL row, the CLI log block, and the
+   bulleted security list. */
+
+.remote-status-line {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: var(--s-2);
+  font-size: 12.5px;
+  color: var(--ink-mid);
+}
+.remote-status-line .small-mono { font-size: 11px; }
+.remote-status-line .warn  { color: #b86a2a; font-weight: 500; }
+.remote-status-line .muted { color: var(--ink-muted); }
+.remote-status-line code {
+  font-family: var(--mono);
+  font-size: 11.5px;
+  background: var(--bg);
+  padding: 1px 5px;
+  border-radius: 3px;
+}
+
+.remote-token-row {
+  display: flex;
+  gap: var(--s-2);
+  align-items: center;
+  flex-wrap: wrap;
+}
+.remote-token-input {
+  flex: 1;
+  min-width: 240px;
+  font-family: var(--mono);
+  font-size: 12.5px;
+  padding: 7px 11px;
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  background: var(--bg-elev);
+  color: var(--ink);
+}
+.remote-token-input:focus {
+  outline: none;
+  border-color: var(--ink);
+  box-shadow: 0 0 0 1px var(--ink);
+}
+
+.remote-url-line {
+  display: flex;
+  gap: var(--s-2);
+  align-items: center;
+  flex-wrap: wrap;
+}
+.remote-url-value {
+  flex: 1;
+  min-width: 0;
+  font-family: var(--mono);
+  font-size: 12px;
+  color: var(--ink);
+  background: var(--bg);
+  padding: 6px 10px;
+  border-radius: 4px;
+  border: 1px solid var(--border);
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.remote-log {
+  font-size: 11.5px;
+  color: var(--ink-mid);
+}
+.remote-log summary { cursor: pointer; user-select: none; }
+.remote-log pre {
+  margin-top: var(--s-2);
+  padding: var(--s-3);
+  background: var(--ink);
+  color: var(--bg-elev);
+  border-radius: var(--r-sm);
+  font-family: var(--mono);
+  font-size: 11px;
+  line-height: 1.5;
+  max-height: 220px;
+  overflow: auto;
+  white-space: pre-wrap;
+  word-break: break-all;
+}
+
+.remote-empty {
+  margin: 0;
+  font-size: 12.5px;
+  color: var(--ink-muted);
+  padding: var(--s-3);
+  background: var(--bg);
+  border-radius: var(--r-sm);
+  text-align: center;
+}
+.remote-devices {
+  display: flex;
+  flex-direction: column;
+  gap: var(--s-4);
+}
+.remote-devices-group {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.remote-devices-group-head {
+  display: flex;
+  align-items: baseline;
+  gap: var(--s-2);
+  margin-bottom: 2px;
+}
+.remote-devices-group-title {
+  font-size: 11px;
+  font-weight: 600;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--ink-mid);
+}
+.remote-devices-group-count {
+  font-family: var(--mono);
+  font-size: 11px;
+  color: var(--ink-muted);
+  background: var(--bg);
+  padding: 1px 7px;
+  border-radius: 999px;
+  border: 1px solid var(--border);
+}
+.remote-devices-group-hint {
+  font-size: 11px;
+  font-style: italic;
+  color: var(--ink-muted);
+}
+.remote-device {
+  display: flex;
+  align-items: center;
+  gap: var(--s-3);
+  padding: 10px 12px;
+  background: var(--bg-elev);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+}
+.remote-device.is-pending {
+  border-color: #b86a2a;
+  background: rgba(184, 106, 42, 0.04);
+}
+.remote-device.is-rejected {
+  background: var(--bg);
+  opacity: 0.8;
+}
+.remote-device-main {
+  flex: 1;
+  min-width: 0;
+}
+.remote-device-label {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  font-size: 13px;
+  font-weight: 500;
+  color: var(--ink);
+}
+.remote-device-label .icon-btn {
+  background: transparent;
+  border: 0;
+  padding: 2px;
+  cursor: pointer;
+  color: var(--ink-muted);
+  border-radius: 3px;
+  display: inline-flex;
+  align-items: center;
+}
+.remote-device-label .icon-btn:hover { color: var(--ink); background: var(--bg); }
+.remote-device-meta {
+  font-size: 11.5px;
+  color: var(--ink-mid);
+  margin-top: 2px;
+  display: flex;
+  align-items: baseline;
+  flex-wrap: wrap;
+  gap: 4px;
+}
+.remote-device-meta .mono { font-family: var(--mono); font-size: 11px; }
+.remote-device-ua {
+  font-family: var(--mono);
+  font-size: 11px;
+  color: var(--ink-muted);
+  overflow: hidden;
+  text-overflow: ellipsis;
+  max-width: 380px;
+  white-space: nowrap;
+}
+.remote-device-actions {
+  display: flex;
+  gap: 6px;
+  flex-shrink: 0;
+}
+.remote-device-actions .action.small { padding: 4px 10px; font-size: 11.5px; }
+
+/* Remote · "How access works" — three fact rows separated by hairlines,
+   inset on the left by a 2px ink bar so the section reads as quiet
+   reference material instead of an alert. */
+.remote-facts {
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+}
+.remote-fact {
+  position: relative;
+  padding: var(--s-3) var(--s-3) var(--s-3) var(--s-5);
+  border-bottom: 1px solid var(--border);
+}
+.remote-fact:first-child { padding-top: var(--s-2); }
+.remote-fact:last-child  { border-bottom: 0; padding-bottom: var(--s-2); }
+.remote-fact::before {
+  content: "";
+  position: absolute;
+  left: 0;
+  top: var(--s-3);
+  bottom: var(--s-3);
+  width: 2px;
+  background: var(--ink);
+  border-radius: 1px;
+  opacity: 0.35;
+}
+.remote-fact dt {
+  font-size: 12.5px;
+  font-weight: 600;
+  color: var(--ink);
+  letter-spacing: -0.005em;
+  margin-bottom: 4px;
+}
+.remote-fact dd {
+  margin: 0;
+  font-size: 12px;
+  color: var(--ink-mid);
+  line-height: 1.6;
+}
+.remote-fact dd code {
+  font-family: var(--mono);
+  font-size: 11px;
+  background: var(--bg);
+  padding: 1px 5px;
+  border-radius: 3px;
+}
+.remote-fact dd strong {
+  color: var(--ink);
+  font-weight: 600;
+}
+.remote-fact dd em {
+  font-style: italic;
+  color: var(--ink);
+}
+.remote-fact-pill {
+  display: inline-block;
+  font-size: 11px;
+  padding: 1px 7px;
+  border-radius: 999px;
+  background: rgba(184, 106, 42, 0.14);
+  color: #8b4f1f;
+  font-weight: 500;
+}

package/public/js/api.js

@@ -1,17 +1,58 @@
 // Fetch wrapper + every loader. Loaders push into signals from ./state.js.
 // Cross-origin (hosted frontend → local backend) flows through httpBase().
 
+import { signal } from '@preact/signals';
 import * as S from './state.js';
-import { httpBase } from './backend.js';
+import { httpBase, getToken, getDeviceId, isRemoteAccess } from './backend.js';
+
+// Global pending-approval signal. Flipped to true whenever any /api
+// call returns 403 {pending:true}; PendingApprovalOverlay watches this
+// and shows the blocking screen. We also stash the server's record so
+// the overlay can display "we recorded you at HH:MM" detail.
+export const pendingDevice = signal(null);
 
 export async function api(method, url, body) {
   const opts = { method, headers: { 'Content-Type': 'application/json' } };
+  // When a remote token is configured (Remote page set it OR the page
+  // was loaded with ?token= and we stashed it in localStorage), attach
+  // it to every API call. The server middleware lets loopback Hosts
+  // through without the token; for tunnel-served pages this is the
+  // only way past the 401.
+  const tok = getToken();
+  if (tok) opts.headers['Authorization'] = `Bearer ${tok}`;
+  // Always send our device id when one exists in localStorage. The host
+  // browser at localhost doesn't strictly need it (loopback bypass),
+  // but harmless — the server simply records lastSeen for it. Required
+  // for any tunnel-served page to clear the device-approval gate.
+  const dev = getDeviceId();
+  if (dev) opts.headers['X-Device-Id'] = dev;
   if (body !== undefined) opts.body = JSON.stringify(body);
   const r = await fetch(httpBase() + url, opts);
   const text = await r.text();
   let json;
   try { json = text ? JSON.parse(text) : {}; } catch { json = { raw: text }; }
-  if (!r.ok) throw new Error(json.error || `HTTP ${r.status}`);
+  if (!r.ok) {
+    // Surface device-approval pending state. Only matters on remote
+    // tabs — host's loopback browser never gets a 401/403 from these
+    // checks.
+    if (isRemoteAccess()) {
+      if (r.status === 403 && json && (json.pending || json.rejected)) {
+        pendingDevice.value = { ...json, at: Date.now() };
+      } else if (r.status === 401) {
+        // Server doesn't recognise our device — either fresh page load
+        // (no /api/devices/me hit yet) or our record got deleted /
+        // pruned. Drop into the pending overlay; its /me poll will
+        // re-register us using the token we still have in localStorage,
+        // and the response sets pendingDevice to the correct state.
+        pendingDevice.value = { pending: true, at: Date.now() };
+      }
+    }
+    throw new Error(json.error || `HTTP ${r.status}`);
+  }
+  // PendingApprovalOverlay clears pendingDevice itself based on the
+  // /api/devices/me body (which can return 200 with status:'pending'
+  // since that endpoint is gate-exempt). Doing an auto-clear here on
+  // any 2xx would race the overlay's poll and dismiss it prematurely.
   return json;
 }