@launchsecure/launch-kit 0.0.39 → 0.0.41

package/dist/server/deck-serve.js

@@ -31,6 +31,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var deck_serve_exports = {};
 __export(deck_serve_exports, {
   broadcastToClients: () => broadcastToClients,
+  buildSharePayload: () => buildSharePayload,
   consumeRenderError: () => consumeRenderError,
   createFeedbackWaiter: () => createFeedbackWaiter,
   resolveFeedback: () => resolveFeedback,
@@ -1227,7 +1228,7 @@ function readCredFile(repoRoot) {
 var _config = null;
 var _requestId = 0;
 var _sessionId = null;
-function mcpConfigFromCourse(projectRoot) {
+function mcpConfigForProfile(projectRoot, name) {
   let cred;
   try {
     cred = readCredFile(projectRoot);
@@ -1237,7 +1238,7 @@ function mcpConfigFromCourse(projectRoot) {
   if (!cred) return null;
   const nested = toNested(cred);
   if (!nested) return null;
-  const profile = nested.profiles[nested.active];
+  const profile = nested.profiles[name];
   if (!profile?.pat || !profile.serverUrl || !profile.orgSlug || !profile.projectSlug) {
     return null;
   }
@@ -1250,6 +1251,37 @@ function mcpConfigFromCourse(projectRoot) {
     }
   };
 }
+function mcpConfigFromCourse(projectRoot) {
+  let cred;
+  try {
+    cred = readCredFile(projectRoot);
+  } catch {
+    return null;
+  }
+  if (!cred) return null;
+  const nested = toNested(cred);
+  if (!nested) return null;
+  return mcpConfigForProfile(projectRoot, nested.active);
+}
+function listCourses(projectRoot) {
+  let cred;
+  try {
+    cred = readCredFile(projectRoot);
+  } catch {
+    return [];
+  }
+  if (!cred) return [];
+  const nested = toNested(cred);
+  if (!nested) return [];
+  return Object.entries(nested.profiles).map(([name, p]) => ({
+    name,
+    org: p.orgSlug ?? "",
+    project: p.projectSlug ?? "",
+    serverUrl: p.serverUrl ?? "",
+    active: name === nested.active,
+    usable: Boolean(p.pat && p.serverUrl && p.orgSlug && p.projectSlug)
+  }));
+}
 function loadMcpConfig(projectRoot) {
   if (_config) return _config;
   const fromCourse = mcpConfigFromCourse(projectRoot);
@@ -1276,6 +1308,24 @@ function loadMcpConfig(projectRoot) {
   };
   return _config;
 }
+var _overrideLock = Promise.resolve();
+function withMcpConfig(override, fn) {
+  const run = async () => {
+    const prevConfig = _config;
+    const prevSession = _sessionId;
+    _config = override;
+    _sessionId = null;
+    try {
+      return await fn();
+    } finally {
+      _config = prevConfig;
+      _sessionId = prevSession;
+    }
+  };
+  const result = _overrideLock.then(run, run);
+  _overrideLock = result.then(() => void 0, () => void 0);
+  return result;
+}
 function parseSSE(text) {
   const lines = text.split("\n");
   for (const line of lines) {
@@ -1350,7 +1400,13 @@ async function callTool(toolName, args) {
   }
   const textContent = result.result?.content?.[0]?.text;
   if (!textContent) return null;
-  return JSON.parse(textContent);
+  try {
+    return JSON.parse(textContent);
+  } catch {
+    const match = textContent.match(/──+\s*Error\s*──+\s*\n([\s\S]*?)(?:\n\n──|$)/i);
+    const message = (match?.[1] ?? textContent).trim();
+    throw new Error(message || "MCP tool returned an unparseable response");
+  }
 }
 async function writeDeck(input) {
   const result = await callTool("communication_write", {
@@ -1359,6 +1415,7 @@ async function writeDeck(input) {
     resource_type: "deck",
     fields: {
       deckHtml: input.html,
+      deckBlocks: input.blocks,
       sessionId: input.sessionId,
       blockCount: input.blockCount,
       sharedFrom: "launch-deck"
@@ -1373,6 +1430,7 @@ async function updateDeck(commentId, input) {
     body: input.body,
     fields: {
       deckHtml: input.html,
+      deckBlocks: input.blocks,
       sessionId: input.sessionId,
       blockCount: input.blockCount,
       sharedFrom: "launch-deck"
@@ -1383,6 +1441,31 @@ async function updateDeck(commentId, input) {
 async function deleteDeck(commentId) {
   await callTool("communication_delete", { comment_id: commentId });
 }
+function currentMcpOrigin() {
+  const config = _config;
+  if (!config) throw new Error("MCP config not loaded \u2014 call loadMcpConfig first");
+  return new URL(config.url).origin;
+}
+async function createDeckShareLink(commentId) {
+  const result = await callTool("deck_share_link", {
+    comment_id: commentId,
+    action: "create"
+  });
+  const token = result.link.token;
+  return {
+    linkId: result.link.id,
+    token,
+    shareUrl: `${currentMcpOrigin()}/s/deck/${token}`,
+    reused: Boolean(result.reused)
+  };
+}
+async function revokeDeckShareLink(commentId, linkId) {
+  await callTool("deck_share_link", {
+    comment_id: commentId,
+    action: "revoke",
+    link_id: linkId
+  });
+}
 
 // src/server/deck-serve.ts
 var DEFAULT_PORT = 52829;
@@ -1447,7 +1530,9 @@ function listPersistedSessions(cwd) {
       createdAt: persisted.createdAt,
       updatedAt: persisted.updatedAt,
       shared: Boolean(sync),
-      stale: Boolean(sync) && persisted.version > (sync?.version ?? 0)
+      stale: Boolean(sync) && persisted.version > (sync?.version ?? 0),
+      shareUrl: sync?.publicShareUrl,
+      course: sync?.course
     });
   }
   sessions.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
@@ -1475,6 +1560,24 @@ function readSyncRecord(cwd, session) {
 function writeSyncRecord(cwd, session, rec) {
   import_node_fs4.default.writeFileSync(syncJsonPath(cwd, session), JSON.stringify(rec, null, 2));
 }
+function resolveShareConfig(cwd, course) {
+  if (course) {
+    const override = mcpConfigForProfile(cwd, course);
+    if (!override) {
+      return { error: `Course "${course}" is not a usable profile in .launch-secure.cred.config (missing pat/serverUrl/orgSlug/projectSlug?).` };
+    }
+    return { override };
+  }
+  try {
+    loadMcpConfig(cwd);
+  } catch (err) {
+    return { error: `Cloud sharing needs an active LaunchSecure course (.launch-secure.cred.config) or a "launch-secure" entry in .mcp.json: ${String(err)}` };
+  }
+  return { override: null };
+}
+function runWithShareConfig(override, fn) {
+  return override ? withMcpConfig(override, fn) : fn();
+}
 function escHtml2(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
@@ -1491,31 +1594,49 @@ function readIframeArtifact(cwd, src) {
     return null;
   }
 }
-function renderShareSection(cwd, block) {
-  const label = block?.label ? `<h2 class="db-title">${escHtml2(String(block.label))}</h2>` : "";
+function renderShareSection(cwd, block, showLabel = true) {
+  const label = showLabel && block?.label ? `<h2 class="db-title">${escHtml2(String(block.label))}</h2>` : "";
   switch (block?.type) {
     case "iframe": {
       const doc = readIframeArtifact(cwd, block.src) ?? "<p>(missing artifact)</p>";
-      return `<section class="db">${label}<iframe class="db-frame" sandbox="allow-scripts allow-popups" srcdoc="${escAttr(doc)}"></iframe></section>`;
+      return `${label}<iframe class="db-frame" sandbox="allow-scripts allow-popups" srcdoc="${escAttr(doc)}"></iframe>`;
     }
     case "rich-html":
     case "html":
-      return `<section class="db">${label}<div class="db-html">${typeof block.content === "string" ? block.content : ""}</div></section>`;
+      return `${label}<div class="db-html">${typeof block.content === "string" ? block.content : ""}</div>`;
     case "markdown":
-      return `<section class="db">${label}<div class="db-md" data-md="${escAttr(typeof block.content === "string" ? block.content : "")}"></div></section>`;
+      return `${label}<div class="db-md" data-md="${escAttr(typeof block.content === "string" ? block.content : "")}"></div>`;
     case "mermaid":
-      return `<section class="db">${label}<pre class="mermaid">${escHtml2(typeof block.content === "string" ? block.content : "")}</pre></section>`;
+      if (typeof block.renderedSvg === "string" && block.renderedSvg.trim()) {
+        return `${label}<div class="mermaid-svg">${block.renderedSvg}</div>`;
+      }
+      return `${label}<pre class="mermaid">${escHtml2(typeof block.content === "string" ? block.content : "")}</pre>`;
     case "options": {
       const opts = Array.isArray(block.options) ? block.options : [];
-      const lis = opts.map(
-        (o) => `<li><strong>${escHtml2(String(o?.label ?? o?.id ?? ""))}</strong>${o?.description ? ` \u2014 ${escHtml2(String(o.description))}` : ""}</li>`
+      const cards = opts.map(
+        (o) => `<div class="db-option"><div class="db-option-label">${escHtml2(String(o?.label ?? o?.id ?? ""))}</div>${o?.description ? `<div class="db-option-desc">${escHtml2(String(o.description))}</div>` : ""}${o?.preview ? `<pre class="db-option-pre">${escHtml2(String(o.preview))}</pre>` : ""}</div>`
       ).join("");
-      return `<section class="db">${label}<ul>${lis}</ul></section>`;
+      return `${label}<div class="db-options">${cards}</div>`;
     }
     default:
-      return `<section class="db">${label}</section>`;
+      return label;
   }
 }
+function buildSharePayload(cwd, session, blocks, svgByIndex = {}) {
+  const enriched = blocks.map((b, i) => {
+    const svg = svgByIndex[String(i)];
+    return b?.type === "mermaid" && typeof svg === "string" && svg.trim() ? { ...b, renderedSvg: svg } : b;
+  });
+  const html = buildShareHtml(cwd, session, enriched);
+  const cloudBlocks = enriched.map((b) => {
+    if (b?.type === "iframe" && typeof b.src === "string") {
+      const content = readIframeArtifact(cwd, b.src);
+      return content ? { ...b, content } : b;
+    }
+    return b;
+  });
+  return { html, cloudBlocks };
+}
 function buildShareHtml(cwd, session, blocks) {
   if (blocks.length === 1) {
     const only = blocks[0];
@@ -1525,30 +1646,61 @@ function buildShareHtml(cwd, session, blocks) {
     }
   }
   const list = blocks;
-  const sections = list.map((b) => renderShareSection(cwd, b)).join("\n");
+  const multi = list.length > 1;
+  const tabBar = multi ? `<nav class="deck-tabs">${list.map(
+    (b, i) => `<button class="deck-tab${i === 0 ? " active" : ""}" data-tab-btn="${i}">${escHtml2(String(b?.label ?? `Tab ${i + 1}`))}</button>`
+  ).join("")}</nav>` : "";
+  const sections = list.map(
+    (b, i) => `<section class="db" data-tab="${i}"${multi && i > 0 ? " hidden" : ""}>${renderShareSection(cwd, b, !multi)}</section>`
+  ).join("\n");
   const hasMd = list.some((b) => b?.type === "markdown");
-  const hasMermaid = list.some((b) => b?.type === "mermaid");
+  const hasUnrenderedMermaid = list.some(
+    (b) => b?.type === "mermaid" && !(typeof b?.renderedSvg === "string" && b.renderedSvg.trim())
+  );
   return `<!DOCTYPE html>
 <html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
 <title>${escHtml2(session)}</title>
+<link href="https://fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,100..1000&display=swap" rel="stylesheet">
 <style>
-  body { margin:0; font-family: ui-sans-serif, system-ui, sans-serif; background:#0b0e14; color:#e6e9ef; }
+  body { margin:0; font-family: 'DM Sans', system-ui, sans-serif; background:#0b0e14; color:#e6e9ef; }
   .db { padding:20px 24px; border-bottom:1px solid #1e2433; }
   .db-title { font-size:13px; font-weight:600; margin:0 0 12px; color:#9aa4b2; text-transform:uppercase; letter-spacing:.05em; }
   .db-frame { width:100%; height:70vh; border:0; border-radius:8px; background:#fff; }
   .db-html { background:#fff; color:#111; border-radius:8px; padding:16px; overflow:auto; }
   ul { line-height:1.7; }
-  .mermaid { background:#fff; border-radius:8px; padding:16px; }
+  /* The embedded SVG is dark-themed (captured from the deck client); keep its
+     backdrop transparent so it sits on the dark page, matching the in-app
+     DeckView \u2014 not a white card. The CDN-source fallback also renders dark. */
+  .mermaid { background:transparent; border-radius:8px; padding:16px; }
+  .mermaid-svg { background:transparent; border-radius:8px; padding:16px; overflow:auto; }
+  .mermaid-svg svg { max-width:100%; height:auto; }
+  .db-options { display:grid; gap:12px; grid-template-columns:repeat(auto-fill, minmax(220px, 1fr)); }
+  .db-option { border:2px solid #1e2433; border-radius:8px; padding:16px; }
+  .db-option-label { font-size:14px; font-weight:600; color:#e6e9ef; }
+  .db-option-desc { margin-top:4px; font-size:12px; color:#9aa4b2; }
+  .db-option-pre { margin-top:8px; padding:8px; border-radius:6px; background:#11151f; font-size:12px; overflow:auto; }
+  .deck-tabs { position:sticky; top:0; z-index:5; display:flex; flex-wrap:wrap; gap:2px; background:#0b0e14; border-bottom:1px solid #1e2433; padding:0 16px; }
+  .deck-tab { appearance:none; border:0; background:transparent; color:#9aa4b2; font:inherit; font-size:13px; font-weight:500; padding:12px 16px; cursor:pointer; border-bottom:2px solid transparent; }
+  .deck-tab:hover { color:#e6e9ef; }
+  .deck-tab.active { color:#c084fc; border-bottom-color:#c084fc; }
+  .db[hidden] { display:none; }
 </style></head>
 <body>
+${tabBar}
 ${sections}
+${multi ? `<script>(function(){var b=[].slice.call(document.querySelectorAll('[data-tab-btn]')),s=[].slice.call(document.querySelectorAll('[data-tab]'));b.forEach(function(x){x.addEventListener('click',function(){var i=x.getAttribute('data-tab-btn');s.forEach(function(y){y.hidden=y.getAttribute('data-tab')!==i;});b.forEach(function(z){z.classList.toggle('active',z===x);});});});})();</script>` : ""}
 ${hasMd ? `<script src="https://cdn.jsdelivr.net/npm/marked/marked.min.js"></script>
 <script>document.querySelectorAll('.db-md').forEach(function(el){try{el.innerHTML=marked.parse(el.dataset.md||'')}catch(e){el.textContent=el.dataset.md||''}});</script>` : ""}
-${hasMermaid ? `<script type="module">import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid/dist/mermaid.esm.min.mjs';mermaid.initialize({startOnLoad:true,theme:'dark'});</script>` : ""}
+${hasUnrenderedMermaid ? `<script type="module">import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';mermaid.initialize({startOnLoad:true,theme:document.documentElement.classList.contains('light')?'default':'dark',securityLevel:'loose',fontFamily:"'DM Sans', system-ui, sans-serif"});</script>` : ""}
 </body></html>`;
 }
 var pendingFeedback = /* @__PURE__ */ new Map();
 var lastRenderError = null;
+var activeSession = null;
+var discussSessions = [];
+function broadcastDiscuss() {
+  broadcastToClients({ type: "discuss_session", sessions: discussSessions.map((d) => d.id) });
+}
 function consumeRenderError() {
   const err = lastRenderError;
   lastRenderError = null;
@@ -1685,6 +1837,10 @@ async function startDeckServer(opts = {}) {
         jsonResponse(res, 200, { config: cfg });
         return;
       }
+      if (req.method === "GET" && url2.pathname === "/api/deck/courses") {
+        jsonResponse(res, 200, { courses: listCourses(cwd) });
+        return;
+      }
       if (req.method === "POST" && url2.pathname === "/api/deck/config") {
         try {
           const body = JSON.parse(await readBody(req));
@@ -1783,40 +1939,128 @@ async function startDeckServer(opts = {}) {
           jsonResponse(res, 404, { ok: false, error: "session not found" });
           return;
         }
+        let course;
+        let svgByIndex = {};
+        let publicLink = false;
         try {
-          loadMcpConfig(cwd);
-        } catch (err) {
-          jsonResponse(res, 400, {
-            ok: false,
-            error: `Cloud sharing needs an active LaunchSecure course (.launch-secure.cred.config) or a "launch-secure" entry in .mcp.json: ${String(err)}`
-          });
+          const raw = await readBody(req);
+          if (raw.trim()) {
+            const parsed = JSON.parse(raw);
+            course = parsed.course?.trim() || void 0;
+            if (parsed.svgByIndex && typeof parsed.svgByIndex === "object") svgByIndex = parsed.svgByIndex;
+            publicLink = parsed.publicLink === true;
+          }
+        } catch {
+        }
+        const cfg = resolveShareConfig(cwd, course);
+        if ("error" in cfg) {
+          jsonResponse(res, 400, { ok: false, error: cfg.error });
           return;
         }
+        const { override } = cfg;
         try {
           const blocks = Array.isArray(persisted.blocks) ? persisted.blocks : [];
-          const html = buildShareHtml(cwd, id, blocks);
+          const { html, cloudBlocks } = buildSharePayload(cwd, id, blocks, svgByIndex);
           const types = blocks.map((b) => b?.type).filter(Boolean);
           const body = `Shared deck "${id}" \u2014 ${blocks.length} block${blocks.length === 1 ? "" : "s"}${types.length ? ` (${types.join(", ")})` : ""}. Open the Decks tab in the Communication Center to view.`;
-          const input = { title: id, body, html, sessionId: id, blockCount: blocks.length };
-          const existing2 = readSyncRecord(cwd, id);
-          let resourceId;
-          let updated = false;
-          if (existing2?.resourceId) {
+          const input = { title: id, body, html, blocks: cloudBlocks, sessionId: id, blockCount: blocks.length };
+          const existingSync = readSyncRecord(cwd, id);
+          const doShare = async () => {
+            if (existingSync?.resourceId) {
+              try {
+                const { id: rid2 } = await updateDeck(existingSync.resourceId, input);
+                return { resourceId: rid2, updated: true };
+              } catch {
+                const { id: rid2 } = await writeDeck(input);
+                return { resourceId: rid2, updated: false };
+              }
+            }
+            const { id: rid } = await writeDeck(input);
+            return { resourceId: rid, updated: false };
+          };
+          const result = await runWithShareConfig(override, async () => {
+            const shared = await doShare();
+            let link = null;
+            let linkError;
+            if (publicLink) {
+              try {
+                const minted = await createDeckShareLink(shared.resourceId);
+                link = { shareUrl: minted.shareUrl, linkId: minted.linkId };
+              } catch (err) {
+                linkError = err instanceof Error ? err.message : String(err);
+              }
+            }
+            return { shared, link, linkError };
+          });
+          if (publicLink && result.linkError && !result.shared.updated) {
             try {
-              ({ id: resourceId } = await updateDeck(existing2.resourceId, input));
-              updated = true;
+              await runWithShareConfig(override, () => deleteDeck(result.shared.resourceId));
             } catch {
-              ({ id: resourceId } = await writeDeck(input));
             }
-          } else {
-            ({ id: resourceId } = await writeDeck(input));
+            jsonResponse(res, 200, {
+              ok: false,
+              error: `Couldn't create the public link, so the deck wasn't shared: ${result.linkError}`
+            });
+            return;
           }
+          const publicShareUrl = result.link?.shareUrl ?? existingSync?.publicShareUrl;
+          const publicLinkId = result.link?.linkId ?? existingSync?.publicLinkId;
           writeSyncRecord(cwd, id, {
-            resourceId,
+            resourceId: result.shared.resourceId,
             sharedAt: (/* @__PURE__ */ new Date()).toISOString(),
-            version: persisted.version
+            version: persisted.version,
+            course,
+            ...publicShareUrl ? { publicShareUrl } : {},
+            ...publicLinkId ? { publicLinkId } : {}
+          });
+          jsonResponse(res, 200, {
+            ok: true,
+            resourceId: result.shared.resourceId,
+            updated: result.shared.updated,
+            course,
+            shareUrl: publicShareUrl ?? null,
+            ...result.linkError ? { linkWarning: result.linkError } : {}
           });
-          jsonResponse(res, 200, { ok: true, resourceId, updated });
+        } catch (err) {
+          jsonResponse(res, 500, { ok: false, error: String(err) });
+        }
+        return;
+      }
+      const publicLinkMatch = url2.pathname.match(/^\/api\/sessions\/([^/]+)\/public-link$/);
+      if (publicLinkMatch && (req.method === "POST" || req.method === "DELETE")) {
+        const id = decodeURIComponent(publicLinkMatch[1]);
+        const sync = readSyncRecord(cwd, id);
+        if (!sync?.resourceId) {
+          jsonResponse(res, 409, { ok: false, error: "Share this deck to the cloud first, then create a public link." });
+          return;
+        }
+        const cfg = resolveShareConfig(cwd, sync.course);
+        if ("error" in cfg) {
+          jsonResponse(res, 400, { ok: false, error: cfg.error });
+          return;
+        }
+        const { override } = cfg;
+        if (req.method === "DELETE") {
+          if (!sync.publicLinkId) {
+            if (sync.publicShareUrl) {
+              writeSyncRecord(cwd, id, { ...sync, publicShareUrl: void 0, publicLinkId: void 0 });
+            }
+            jsonResponse(res, 200, { ok: true, revoked: false });
+            return;
+          }
+          try {
+            await runWithShareConfig(override, () => revokeDeckShareLink(sync.resourceId, sync.publicLinkId));
+            writeSyncRecord(cwd, id, { ...sync, publicShareUrl: void 0, publicLinkId: void 0 });
+            jsonResponse(res, 200, { ok: true, revoked: true });
+          } catch (err) {
+            jsonResponse(res, 500, { ok: false, error: String(err) });
+          }
+          return;
+        }
+        try {
+          const minted = await runWithShareConfig(override, () => createDeckShareLink(sync.resourceId));
+          writeSyncRecord(cwd, id, { ...sync, publicShareUrl: minted.shareUrl, publicLinkId: minted.linkId });
+          jsonResponse(res, 200, { ok: true, shareUrl: minted.shareUrl });
         } catch (err) {
           jsonResponse(res, 500, { ok: false, error: String(err) });
         }
@@ -1844,7 +2088,16 @@ async function startDeckServer(opts = {}) {
           }
           jsonResponse(res, 200, { ok: true, deleted: true });
         } catch (err) {
-          jsonResponse(res, 500, { ok: false, error: String(err) });
+          const msg = err instanceof Error ? err.message : String(err);
+          if (/not\s*found/i.test(msg)) {
+            try {
+              import_node_fs4.default.rmSync(syncJsonPath(cwd, id), { force: true });
+            } catch {
+            }
+            jsonResponse(res, 200, { ok: true, deleted: false, reason: "already removed" });
+            return;
+          }
+          jsonResponse(res, 500, { ok: false, error: msg });
         }
         return;
       }
@@ -1935,6 +2188,10 @@ async function startDeckServer(opts = {}) {
           deletePersistedSession(cwd, session);
         } catch {
         }
+        const beforePins = discussSessions.length;
+        discussSessions = session === "all" ? [] : discussSessions.filter((d) => d.id !== session);
+        if (discussSessions.length !== beforePins) broadcastDiscuss();
+        if (session === "all" || activeSession?.id === session) activeSession = null;
         jsonResponse(res, 200, { ok: true });
         return;
       }
@@ -1943,6 +2200,16 @@ async function startDeckServer(opts = {}) {
         jsonResponse(res, 200, err ?? null);
         return;
       }
+      if (req.method === "GET" && url2.pathname === "/api/active-session") {
+        jsonResponse(res, 200, {
+          discuss: discussSessions.map((d) => d.id),
+          // ordered = pin number
+          active: activeSession?.id ?? null,
+          focused: activeSession?.focused ?? false,
+          activeAt: activeSession?.at ?? null
+        });
+        return;
+      }
       if (req.method === "GET" && url2.pathname.startsWith("/deck-files/")) {
         const relative = decodeURIComponent(url2.pathname.slice("/deck-files/".length));
         if (relative.includes("..") || relative.startsWith("/")) {
@@ -2015,6 +2282,24 @@ async function startDeckServer(opts = {}) {
             source: msg.source ?? ""
           };
         }
+        if (msg.type === "active_session" && msg.session) {
+          activeSession = {
+            id: msg.session,
+            focused: msg.focused ?? false,
+            at: Date.now()
+          };
+        }
+        if (msg.type === "discuss_session" && msg.session) {
+          const id = msg.session;
+          const idx = discussSessions.findIndex((d) => d.id === id);
+          if (idx >= 0) discussSessions.splice(idx, 1);
+          else discussSessions.push({ id, at: Date.now() });
+          broadcastDiscuss();
+        }
+        if (msg.type === "discuss_clear_all") {
+          discussSessions = [];
+          broadcastDiscuss();
+        }
       } catch {
       }
     });
@@ -2083,6 +2368,7 @@ function runServeCli(argv) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   broadcastToClients,
+  buildSharePayload,
   consumeRenderError,
   createFeedbackWaiter,
   resolveFeedback,