@k2b/cloud 0.40.0 → 0.42.0

package/src/browser/navigation-search.ts

@@ -3,49 +3,102 @@ import type { SearchItem } from "../api/search/schemas";
 import type { AppMeta } from "../contracts/app";
 
 /** UI-only rows. The synthetic ref is a row key, never a readable resource. */
-export type NavigationSearchItem = SearchItem & { keywords?: readonly string[] };
+export type NavigationSearchItem = SearchItem & { keywords?: readonly string[]; kind?: "app" };
 
 export const navigationSearchItems = (
-  apps: readonly Pick<AppMeta, "id" | "name" | "icon" | "searchLinks">[],
+  apps: readonly (Pick<AppMeta, "id" | "name" | "icon" | "searchLinks"> & { nav?: Pick<NonNullable<AppMeta["nav"]>, "href"> })[],
   visibleAppIds: readonly string[],
 ): NavigationSearchItem[] => {
   const visible = new Set(visibleAppIds);
   return apps
     .filter((app) => visible.has(app.id))
-    .flatMap((app) =>
-      (app.searchLinks ?? []).map((link) => ({
-        appId: app.id,
-        appName: app.name,
-        appIcon: app.icon,
-        ref: { type: "cloud.navigation", id: `${app.id}:${link.href}` },
-        readable: false,
-        title: link.label,
-        preview: link.description,
-        href: link.href,
-        icon: link.icon ?? app.icon,
-        priority: 0,
-        keywords: link.keywords,
-      })),
-    );
+    .flatMap((app) => {
+      const entryLinks = app.searchLinks?.filter((link) => link.href === app.nav?.href) ?? [];
+      const links = [
+        ...(app.nav
+          ? [
+              {
+                label: app.name,
+                href: app.nav.href,
+                icon: app.icon,
+                kind: "app" as const,
+                keywords: entryLinks.flatMap((link) => [link.label, ...(link.keywords ?? [])]),
+              },
+            ]
+          : []),
+        ...(app.searchLinks ?? []),
+      ];
+      return links.map(
+        (link): NavigationSearchItem => ({
+          appId: app.id,
+          appName: app.name,
+          appIcon: app.icon,
+          ref: { type: "cloud.navigation", id: `${app.id}:${link.href}` },
+          readable: false,
+          title: link.label,
+          preview: "description" in link ? link.description : undefined,
+          href: link.href,
+          icon: link.icon ?? app.icon,
+          priority: 0,
+          keywords: link.keywords,
+          kind: "kind" in link ? link.kind : undefined,
+        }),
+      );
+    });
+};
+
+const normalize = (text: string) => text.trim().toLowerCase().replace(/\s+/g, " ");
+
+/** Compare individual names/aliases, never their combined length or number. */
+const appMatchRank = (item: NavigationSearchItem, query: string): number => {
+  const names = [item.title, ...(item.keywords ?? [])].map(normalize);
+  if (names.includes(query)) return 0;
+  const words = query.split(" ");
+  if (names.some((name) => words.every((word) => name.split(/[^\p{L}\p{N}]+/u).some((part) => part.startsWith(word))))) return 1;
+  if (names.some((name) => words.every((word) => name.includes(word)))) return 2;
+  // Whole-name typos only, at least 80% similarity. No short abbreviations or description fuzzing globally.
+  if (query.length < 4) return Infinity;
+  const closest = fuzzy.closest(query, names, { maxDistance: query.length >= 8 ? 2 : 1 });
+  return closest && closest.similarity >= 0.8 ? 3 + closest.distance / 10 : Infinity;
 };
 
 export const matchNavigationSearchItems = (
   items: readonly NavigationSearchItem[],
   input: { query: string; tags: readonly string[]; appId?: string | null; requireReader?: boolean },
 ): NavigationSearchItem[] => {
-  const query = input.query.trim().toLowerCase();
+  const query = normalize(input.query);
   if (input.requireReader || input.tags.length > 0 || (!input.appId && query.length < 2)) return [];
+  const seen = new Set<string>();
+  const uniqueTarget = (item: NavigationSearchItem) => {
+    if (seen.has(item.href)) return false;
+    seen.add(item.href);
+    return true;
+  };
   if (input.appId) {
-    const scoped = items.filter((item) => item.appId === input.appId);
+    // App contexts keep browsing their static pages; app launchers belong to global navigation only.
+    const scoped = items.filter((item) => item.appId === input.appId && item.kind !== "app");
     return query
       ? fuzzy
           .filter(query, scoped, { key: (item) => [item.title, item.preview ?? "", ...(item.keywords ?? [])].join(" ") })
           .map((hit) => hit.item)
-      : scoped;
+          .filter(uniqueTarget)
+      : scoped.filter(uniqueTarget);
   }
-  const words = query.split(/\s+/);
-  return items.filter((item) => {
-    const text = [item.title, item.preview ?? "", ...(item.keywords ?? [])].join(" ").toLowerCase();
-    return words.every((word) => text.includes(word));
-  });
+  const words = query.split(" ");
+  // Deduplicate only this global view. A cross-app page still belongs to its declaring app's own scope.
+  const appTargets = new Set(items.filter((item) => item.kind === "app").map((item) => item.href));
+  return items
+    .filter((item) => item.kind === "app" || !appTargets.has(item.href))
+    .flatMap((item) => {
+      const rank =
+        item.kind === "app"
+          ? appMatchRank(item, query)
+          : words.every((word) => [item.title, item.preview ?? "", ...(item.keywords ?? [])].join(" ").toLowerCase().includes(word))
+            ? 2
+            : Infinity;
+      return Number.isFinite(rank) ? [{ item, rank }] : [];
+    })
+    .sort((a, b) => a.rank - b.rank)
+    .map(({ item }) => item)
+    .filter(uniqueTarget);
 };

package/src/browser/panel-leave.ts

@@ -0,0 +1,69 @@
+/** Internal same-origin collection; no composer content crosses the provider boundary. */
+const LEAVE = "cloud.panel.before-leave";
+const CHECK = "cloud.panel.has-leave-guard";
+type LeaveDecision = { allowed: boolean };
+
+/** Ordinary same-origin links handled by the panel host; explicit browser actions stay native. */
+export function panelLinkDestination(event: MouseEvent): URL | undefined {
+  if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.altKey || event.shiftKey) return;
+  const anchor = event.target instanceof Element ? event.target.closest<HTMLAnchorElement>("a[href]") : null;
+  if (!anchor || (anchor.target && anchor.target !== "_self") || anchor.hasAttribute("download")) return;
+  const url = new URL(anchor.getAttribute("href")!, document.baseURI);
+  if (url.origin !== location.origin) return;
+  if (url.pathname === location.pathname && url.search === location.search && url.hash) return;
+  return url;
+}
+
+/**
+ * Register before enabling editing. Return true only when all provider work is recoverable.
+ * A veto keeps the current frame. Saving and retry belong to the provider; no transition is queued.
+ */
+export function onPanelBeforeLeave(guard: () => boolean): () => void {
+  const collect = (event: Event) => {
+    const decision = (event as CustomEvent<LeaveDecision>).detail;
+    try {
+      // Only explicit synchronous true permits leaving; throws and accidental Promises fail closed.
+      if (guard() !== true) decision.allowed = false;
+    } catch {
+      decision.allowed = false;
+    }
+  };
+  const registered = (event: Event) => event.preventDefault();
+  // Islands start independently: editing and its links must be protected before PanelRuntime loads too.
+  const click = (event: MouseEvent) => {
+    if (window.parent === window || !document.querySelector("[data-cloud-panel-page]")) return;
+    const url = panelLinkDestination(event);
+    if (!url) return;
+    event.preventDefault();
+    window.parent.postMessage({ type: "cloud.panel.navigate", v: 1, href: url.href }, location.origin);
+  };
+  window.addEventListener(LEAVE, collect);
+  window.addEventListener(CHECK, registered);
+  document.addEventListener("click", click);
+  return () => {
+    window.removeEventListener(LEAVE, collect);
+    window.removeEventListener(CHECK, registered);
+    document.removeEventListener("click", click);
+  };
+}
+
+export function hasPanelLeaveGuard(): boolean {
+  return !window.dispatchEvent(new Event(CHECK, { cancelable: true }));
+}
+
+export function panelCanLeave(target: Window): boolean {
+  // A cross-origin navigation already destroyed the provider document and its guards.
+  // It cannot participate in this same-origin contract or keep the host's slot trapped.
+  try {
+    void target.document;
+  } catch {
+    return true;
+  }
+  const decision: LeaveDecision = { allowed: true };
+  try {
+    target.dispatchEvent(new CustomEvent<LeaveDecision>(LEAVE, { detail: decision }));
+    return decision.allowed;
+  } catch {
+    return false;
+  }
+}

package/src/browser/panel-messages.ts

@@ -1,5 +1,17 @@
 const isRecord = (value: unknown): value is Record<string, unknown> => typeof value === "object" && value !== null && !Array.isArray(value);
 
+export function isPanelNavigateMessage(value: unknown): value is { type: "cloud.panel.navigate"; v: 1; href: string } {
+  return (
+    isRecord(value) &&
+    Reflect.ownKeys(value).length === 3 &&
+    value.type === "cloud.panel.navigate" &&
+    value.v === 1 &&
+    typeof value.href === "string" &&
+    value.href.length <= 8192 &&
+    /^https?:\/\//.test(value.href)
+  );
+}
+
 export function isPanelReadyMessage(value: unknown, provider: string): value is { type: "cloud.panel.ready"; v: 1; provider: string } {
   return (
     isRecord(value) &&

package/src/browser/panel-slot.ts

@@ -1,14 +1,21 @@
 import { attachResizeSeparator, LocaleProvider, parkWorkspaceDetailDrawers } from "@k2b/ui";
-import { createComponent } from "solid-js";
+import { createComponent, createSignal } from "solid-js";
 import { render } from "solid-js/web";
 import { PANEL_MAX_WIDTH_REM, PANEL_MIN_WIDTH_REM, readPanelCookie, serializePanelCookie } from "../_internal/panel-cookie";
 import { CloudResourceRefSchema } from "../contracts/capabilities";
 import type { PanelPageContext } from "../contracts/panel-context";
-import { isPanelShortcut, PANEL_CONTEXT_PARAM, panelProviderNeedsConsent, withPanelContext } from "../contracts/panel-context-plain";
+import {
+  isPanelPageContext,
+  isPanelShortcut,
+  PANEL_CONTEXT_PARAM,
+  panelProviderNeedsConsent,
+  withPanelContext,
+} from "../contracts/panel-context-plain";
 import { helpShortcutGroups } from "../ssr/layout-help-start";
 import { platformMessages } from "../ssr/platform-messages";
 import { readShellData } from "../ssr/shell-data";
 import { COMMANDS_CHANGED, contextCommandsWithShortcuts } from "./command-shortcuts";
+import PanelLeaveNotice from "./PanelLeaveNotice";
 import type { PanelRequest } from "./panel";
 import {
   PAGE_CONTEXT_CHANGED,
@@ -17,8 +24,9 @@ import {
   type PanelConsentRequest,
   type PanelState,
 } from "./panel-context-bridge";
+import { panelCanLeave } from "./panel-leave";
 import PanelMenu from "./panel-menu";
-import { isPanelCloseMessage, isPanelReadyMessage, isPanelSearchMessage } from "./panel-messages";
+import { isPanelCloseMessage, isPanelNavigateMessage, isPanelReadyMessage, isPanelSearchMessage } from "./panel-messages";
 import { importOnDemand } from "./reload";
 
 export const PANEL_READY_TIMEOUT_MS = 10_000;
@@ -53,13 +61,100 @@ export function installPanelSlot(): () => void {
   let provider = panel.providers.find((item) => item.id === slot.dataset.provider) ?? panel.providers[0]!;
   let frame = slot.querySelector<HTMLIFrameElement>("[data-cloud-panel-frame]");
   let disposed = false;
-  let context = panel.context ?? null;
+  const [leaveBlocked, setLeaveBlocked] = createSignal(false);
+  const transitionTo = (action: () => void) => {
+    const target = frame?.contentWindow;
+    if (target && !panelCanLeave(target)) {
+      setLeaveBlocked(true);
+      return;
+    }
+    setLeaveBlocked(false);
+    action();
+  };
+  const leaveHost = document.createElement("div");
+  body.before(leaveHost);
+  const disposeLeave = render(
+    () =>
+      createComponent(LocaleProvider, {
+        locale: lang,
+        get children() {
+          return createComponent(PanelLeaveNotice, {
+            get blocked() {
+              return leaveBlocked();
+            },
+            locale: lang,
+            resume: () => {
+              setLeaveBlocked(false);
+              frame?.focus();
+            },
+          });
+        },
+      }),
+    leaveHost,
+  );
+  let base = panel.context ?? null;
+  let context = base;
+  let pageRoot = document.querySelector("[data-nav-root]");
+  let documentPageId = context?.pageId;
+  let lastSeq = context?.seq ?? 0;
+  // The retained provider may have locked onto this document before a swap and this lazy installer.
+  try {
+    const raw = frame && new URL(frame.src, location.href).searchParams.get(PANEL_CONTEXT_PARAM);
+    const initial: unknown = raw ? JSON.parse(raw) : null;
+    if (isPanelPageContext(initial)) {
+      documentPageId = initial.pageId;
+      lastSeq = context?.pageId === documentPageId ? Math.max(lastSeq, initial.seq) : initial.seq;
+      if (context && context.pageId !== documentPageId) context = { ...context, pageId: documentPageId, seq: ++lastSeq };
+    }
+  } catch {
+    // A malformed or absent URL context leaves the shown page's context in charge.
+  }
+  // Set when a swapped page's context has not been delivered yet; cleared by the next delivery.
+  let pageUnsent = false;
+  const followPage = () => {
+    const nextRoot = document.querySelector("[data-nav-root]");
+    if (nextRoot === pageRoot) return;
+    pageRoot = nextRoot;
+    pageUnsent = true;
+    const arriving = readShellData()?.panel;
+    // The arriving page carries the server's current consent answer, as a reload would; a newer revision wins.
+    const consent = arriving?.consent;
+    if (consent) {
+      // Page observations fence pending choices even when a read already learned this revision or the provider changed.
+      if (consent.revision > (observedRevisions.get(consent.provider) ?? 0)) observedRevisions.set(consent.provider, consent.revision);
+      if (consent.revision > (revisions.get(consent.provider) ?? 0)) {
+        answers.set(consent.provider, consent.allowed);
+        revisions.set(consent.provider, consent.revision);
+      }
+    }
+    if (consent && consent.provider === provider.id) {
+      if (consent.allowed !== answers.get(consent.provider) || consent.revision !== revisions.get(consent.provider)) {
+        // An older or unreadable answer (`allowed: null`) is what a reload would show: stop and read again.
+        void revalidate();
+      }
+    } else if (provider.consent && isOpen()) {
+      // The server sends an answer only while the shared cookie shows this provider open; without it, read again.
+      void revalidate();
+    } else if (consentPending === 0) {
+      // A reload would read these answers again when a consent provider opens; so does the next open here.
+      for (const item of panel.providers) if (item.consent) answers.delete(item.id);
+      answersRead = undefined;
+    }
+    base = arriving?.context ?? null;
+    if (base) {
+      documentPageId ??= base.pageId;
+      context = { ...base, pageId: documentPageId, seq: ++lastSeq };
+    } else context = null;
+  };
   let loadVersion = 0;
   const answers = new Map<string, boolean | null>();
   const revisions = new Map<string, number>();
+  // A newer server page supersedes choices made before it, including queued saves and conflict retries.
+  const observedRevisions = new Map<string, number>();
   if (panel.consent) {
     answers.set(panel.consent.provider, panel.consent.allowed);
     revisions.set(panel.consent.provider, panel.consent.revision);
+    observedRevisions.set(panel.consent.provider, panel.consent.revision);
   }
   const saving = new Set<string>();
   const errors = new Set<string>();
@@ -78,13 +173,13 @@ export function installPanelSlot(): () => void {
   // Whether the current frame has seen a context, in its URL or by message; only such a frame needs a clearing null.
   let disclosed = !!frame && new URL(frame.src, location.origin).searchParams.has(PANEL_CONTEXT_PARAM);
   // The frame may have navigated on its own; only the selected provider's page below its panel path may receive context.
-  const showsProvider = () => {
+  const showsProvider = (requireReady = true) => {
     try {
       const shown = frame?.contentWindow?.location;
       const scope = new URL(provider.href, location.origin).pathname.replace(/\/$/, "");
       return (
         !!shown &&
-        frame?.contentDocument?.documentElement.dataset.cloudPanelReady === provider.id &&
+        (!requireReady || frame?.contentDocument?.documentElement.dataset.cloudPanelReady === provider.id) &&
         (shown.pathname === scope || shown.pathname.startsWith(`${scope}/`))
       );
     } catch {
@@ -106,6 +201,7 @@ export function installPanelSlot(): () => void {
   let lastShortcutsJson: string | undefined;
   const canSend = () => isOpen() && allowed() && !!context && slot.dataset.state === "ready" && !!frame?.contentWindow && showsProvider();
   const sendContext = () => {
+    pageUnsent = false;
     if (!canSend()) return;
     const list = !panelProviderNeedsConsent(provider.id) ? shortcuts() : undefined;
     frame?.contentWindow?.postMessage(
@@ -158,15 +254,16 @@ export function installPanelSlot(): () => void {
     if (forgetUrlContext()) disclosed = false;
   };
   const collectContext = () => {
+    followPage();
     if (!context) return;
     const collection: PageContextCollection = { sources: [] };
     window.dispatchEvent(new CustomEvent(PAGE_CONTEXT_COLLECT, { detail: collection }));
     const source = collection.sources.findLast((source) => source.scope !== undefined);
     const parsed = source ? CloudResourceRefSchema.safeParse(source.scope) : undefined;
-    const scope = source ? (parsed?.success ? parsed.data : undefined) : panel.context?.scope;
+    const scope = source ? (parsed?.success ? parsed.data : undefined) : base?.scope;
     if (scope?.type === context.scope?.type && scope?.id === context.scope?.id) return;
-    const { scope: _previous, ...base } = context;
-    context = { ...base, seq: context.seq + 1, ...(scope ? { scope } : {}) };
+    const { scope: _previous, ...previous } = context;
+    context = { ...previous, seq: ++lastSeq, ...(scope ? { scope } : {}) };
     sendContext();
   };
   // Share or stop sharing after every consent step; an open question or its absence follows in update().
@@ -220,8 +317,13 @@ export function installPanelSlot(): () => void {
     }
     for (const item of panel.providers) {
       if (!item.consent) continue;
+      const knownRevision = revisions.get(item.id) ?? 0;
+      const readRevision = nextRevisions.get(item.id);
+      // A page swap can observe a newer answer while this request is in flight. Never rewind that answer.
+      if (readRevision !== undefined && readRevision < knownRevision) continue;
       answers.set(item.id, next.get(item.id) ?? null);
-      revisions.set(item.id, nextRevisions.get(item.id) ?? 0);
+      // An unreadable answer still stops sharing, but must not forget the newest observed revision.
+      revisions.set(item.id, readRevision ?? knownRevision);
     }
     answersStale = false;
   };
@@ -330,7 +432,7 @@ export function installPanelSlot(): () => void {
     clearTimer();
     slot.dataset.state = "ready";
     if (status) status.textContent = "";
-    if (allowed()) {
+    if (allowed() && context) {
       sendContext();
       return;
     }
@@ -427,6 +529,8 @@ export function installPanelSlot(): () => void {
     if (!item || typeof request.allowed !== "boolean" || saving.has(item.id)) return;
     saving.add(item.id);
     errors.delete(item.id);
+    const observedRevision = observedRevisions.get(item.id);
+    const current = () => observedRevisions.get(item.id) === observedRevision;
     const questionHadFocus = slot.querySelector("[data-cloud-panel-consent]")?.contains(document.activeElement);
     // Enqueueing blocks sharing at once, so a withdrawal stops disclosure before its save even starts.
     // keepalive: leaving the page does not cancel the save. A save the browser gives up on (timeout) is rolled back
@@ -441,11 +545,14 @@ export function installPanelSlot(): () => void {
       });
     void enqueueConsent(async () => {
       try {
+        if (!current()) return;
         let response = await put();
+        if (!current()) return;
         // Changed meanwhile (another tab, or a read that failed): the person's choice now is the newest one, so read
         // the current revision and save it once more. A second conflict shows the question again.
         if (response.status === 409) {
           await readAnswersNow();
+          if (!current()) return;
           response = await put();
         }
         if (!response.ok) throw new Error("Panel consent was not saved");
@@ -463,13 +570,17 @@ export function installPanelSlot(): () => void {
           saved.revision <= 0
         )
           throw new Error("Invalid panel consent answer");
-        answers.set(item.id, request.allowed);
-        revisions.set(item.id, saved.revision);
+        if (current() && saved.revision >= (revisions.get(item.id) ?? 0)) {
+          answers.set(item.id, request.allowed);
+          revisions.set(item.id, saved.revision);
+        }
       } catch {
+        // A superseded request cannot invalidate the newer page's answer either.
+        if (!current()) return;
         // Not saved: nothing is shared until the person answers again; the read learns the current revision.
         errors.add(item.id);
         await readAnswersNow();
-        answers.set(item.id, null);
+        if (current()) answers.set(item.id, null);
       } finally {
         saving.delete(item.id);
       }
@@ -509,9 +620,10 @@ export function installPanelSlot(): () => void {
     }
     main.focus();
   };
-  const close = () => {
+  const closeNow = () => {
     if (!isOpen()) return;
     canvas.removeAttribute(attribute());
+    if (!isPhone()) canvas.removeAttribute("data-panel-sheet");
     disposeResize();
     disposeResize = attachResize();
     unload();
@@ -520,7 +632,8 @@ export function installPanelSlot(): () => void {
     update();
     returnFocus();
   };
-  const open = (id: string, nextSearch?: string) => {
+  const close = () => transitionTo(closeNow);
+  const openNow = (id: string, nextSearch?: string) => {
     const next = panel.providers.find((item) => item.id === id);
     if (!next) return;
     parkWorkspaceDetailDrawers(document);
@@ -542,6 +655,7 @@ export function installPanelSlot(): () => void {
     if (frame) focusPanel();
     else focusPending = true;
   };
+  const open = (id: string, nextSearch?: string) => transitionTo(() => openNow(id, nextSearch));
   const request = (request: PanelRequest) => {
     if (request.action === "open") open(request.provider, request.search);
     else if (request.action === "close" || isOpen()) close();
@@ -551,7 +665,17 @@ export function installPanelSlot(): () => void {
     if (!frame || event.source !== frame.contentWindow || event.origin !== location.origin) return;
     if (isPanelReadyMessage(event.data, provider.id)) markReady();
     else if (isPanelCloseMessage(event.data)) close();
-    else if (isPanelSearchMessage(event.data)) {
+    else if (isPanelNavigateMessage(event.data)) {
+      if (!URL.canParse(event.data.href)) return;
+      const url = new URL(event.data.href, location.origin);
+      if (url.origin !== location.origin || !showsProvider(false)) return;
+      const scope = new URL(provider.href, location.origin).pathname.replace(/\/$/, "");
+      const internal = url.pathname === scope || url.pathname.startsWith(`${scope}/`);
+      transitionTo(() => {
+        if (internal) frame?.contentWindow?.location.assign(url.href);
+        else window.location.assign(url.href);
+      });
+    } else if (isPanelSearchMessage(event.data)) {
       const command = contextCommandsWithShortcuts().find((command) => command.id === "cloud.search" && command.shortcut);
       if (command) void importOnDemand(() => import("./commands")).then((commands) => commands?.runContextAwareCommand(command));
     }
@@ -562,8 +686,10 @@ export function installPanelSlot(): () => void {
     if (answer && isOpen()) void saveConsent({ provider: provider.id, allowed: answer.dataset.cloudPanelConsentAnswer === "allow" });
     else if (event.target.closest("[data-cloud-panel-close]")) close();
     else if (event.target.closest("[data-cloud-panel-retry]") && isOpen()) {
-      load(true);
-      frame?.focus();
+      transitionTo(() => {
+        load(true);
+        frame?.focus();
+      });
     } else if (event.target.closest("[data-cloud-panel-grow]") && isPhone()) {
       const full = slot.dataset.panelSize !== "full";
       if (full) slot.dataset.panelSize = "full";
@@ -599,17 +725,18 @@ export function installPanelSlot(): () => void {
     if (isOpen()) {
       seedWidth();
       load();
+    } else if (frame) {
+      // A viewport change must not hide an editor while its leave decision is blocked.
+      canvas.setAttribute(attribute(), "open");
+      transitionTo(closeNow);
     } else unload();
     disposeResize = attachResize();
     update();
   };
   const closeSheet = () => {
     const wasOpen = canvas.dataset.panelSheet === "open";
-    canvas.removeAttribute("data-panel-sheet");
-    if (wasOpen && isPhone()) {
-      unload();
-      update();
-    }
+    if (wasOpen && isPhone()) close();
+    else canvas.removeAttribute("data-panel-sheet");
   };
   const pageShow = (event: PageTransitionEvent) => {
     if (!event.persisted) return;
@@ -657,6 +784,12 @@ export function installPanelSlot(): () => void {
             committedWidth = value;
             writeCookie();
           },
+          onReset: () => {
+            committedWidth = undefined;
+            canvas.style.removeProperty("--cloud-panel-width-set");
+            writeCookie();
+            seedWidth();
+          },
           onCollapseIntent: (armed) => {
             if (armed) slot.dataset.closing = "true";
             else delete slot.dataset.closing;
@@ -680,7 +813,18 @@ export function installPanelSlot(): () => void {
         })
       : () => {};
   let disposeResize = attachResize();
+  // A column island may already have published its place while it mounted; each page's context goes out once.
+  const swapped = () => {
+    collectContext();
+    if (pageUnsent) {
+      pageUnsent = false;
+      if (context && allowed()) sendContext();
+      else stopSharing();
+    } else if (provider.consent && !allowed()) stopSharing();
+    update();
+  };
   collectContext();
+  window.addEventListener("ssr:nav-swapped", swapped);
   window.addEventListener(PAGE_CONTEXT_CHANGED, collectContext);
   window.addEventListener(COMMANDS_CHANGED, commandsChanged);
   window.addEventListener("cloud.panel.consent", consentRequest);
@@ -693,6 +837,7 @@ export function installPanelSlot(): () => void {
   // Restored from the back/forward cache before this lazy module arrived: the server's answers may be outdated.
   if (document.documentElement.hasAttribute("data-cloud-page-restored")) void revalidate();
   window.addEventListener("popstate", closeSheet);
+  window.addEventListener("ssr:nav-popstate", closeSheet);
   window.navigation?.addEventListener("currententrychange", entryChange);
   window.addEventListener("resize", seedWidth);
   // An SSR iframe can have posted its one-shot ready before this lazy module
@@ -730,6 +875,8 @@ export function installPanelSlot(): () => void {
   const dispose = () => {
     if (disposed) return;
     disposed = true;
+    disposeLeave();
+    leaveHost.remove();
     disposeMenu();
     requests.abort();
     ++loadVersion;
@@ -737,6 +884,7 @@ export function installPanelSlot(): () => void {
     clearTimer();
     disposeResize();
     removeFallbackFocus();
+    window.removeEventListener("ssr:nav-swapped", swapped);
     window.removeEventListener(PAGE_CONTEXT_CHANGED, collectContext);
     window.removeEventListener(COMMANDS_CHANGED, commandsChanged);
     window.removeEventListener("cloud.panel.consent", consentRequest);
@@ -747,6 +895,7 @@ export function installPanelSlot(): () => void {
     column.removeEventListener("change", modeChange);
     window.removeEventListener("pageshow", pageShow);
     window.removeEventListener("popstate", closeSheet);
+    window.removeEventListener("ssr:nav-popstate", closeSheet);
     window.navigation?.removeEventListener("currententrychange", entryChange);
     window.removeEventListener("resize", seedWidth);
     installed = undefined;

package/src/browser/panel.ts

@@ -1,4 +1,7 @@
 import type { PanelPageContext } from "../contracts/panel-context";
+
+export { onPanelBeforeLeave } from "./panel-leave";
+
 import {
   PAGE_CONTEXT_CHANGED,
   PAGE_CONTEXT_COLLECT,

package/src/browser/resource-search-messages.ts

@@ -4,6 +4,7 @@ export const resourceSearchMessages = i18n.define({
   baseLocale: "en",
   messages: {
     en: {
+      app: "App",
       actions: "Actions",
       contextActions: "On this page",
       commandPlaceholder: "Find an action…",
@@ -54,6 +55,7 @@ export const resourceSearchMessages = i18n.define({
       loadingTags: "Loading filters…",
     },
     de: {
+      app: "App",
       actions: "Aktionen",
       contextActions: "Auf dieser Seite",
       commandPlaceholder: "Aktion finden…",