@oar-sh/oar 0.9.8 → 0.9.9

package/server/public/app/back-guard.mjs

@@ -0,0 +1,58 @@
+// In the installed app, the system back button with nothing left to go back
+// to closes the app. There is no way for a page to send itself to the
+// background instead, but it can make sure that moment never comes: one
+// entry marked as the floor is kept beneath the app's own entry, and when
+// back lands on the floor the app's entry is pushed again at once. Back
+// still closes the file viewer (which pushes its own entry above); only the
+// last step out is swallowed. A browser tab keeps its back button: this is
+// for the installed app alone.
+
+export const BACK_GUARD_FLOOR = 'oarBackGuardFloor';
+export const BACK_GUARD_APP = 'oarApp';
+const FIRST_INTERACTION_EVENTS = ['pointerdown', 'keydown', 'touchstart'];
+
+/**
+ * Lay the floor at the first touch or key, not at start-up: an entry a page
+ * leaves through pushState before the user has done anything is one the
+ * browser skips on back (its guard against pages that hijack the button),
+ * so a floor laid at start-up would be stepped over. Before the first
+ * interaction nothing a page does keeps back from leaving; from then on
+ * the floor holds.
+ */
+export function armBackGuardOnFirstInteraction({ history, enabled = true, target, onFloor = null } = {}) {
+  if (!enabled || !history || !target) return null;
+  const state = { guard: null };
+  const arm = () => {
+    for (const eventName of FIRST_INTERACTION_EVENTS) target.removeEventListener(eventName, arm, true);
+    if (state.guard) return;
+    state.guard = installBackGuard({ history, enabled: true, onFloor });
+    target.addEventListener('popstate', () => state.guard.onPopState());
+  };
+  for (const eventName of FIRST_INTERACTION_EVENTS) target.addEventListener(eventName, arm, true);
+  return { get armed() { return Boolean(state.guard); } };
+}
+
+/**
+ * `onFloor` is told each time back lands on the floor and is swallowed.
+ * The entry pushed again then is pushed without a touch, so the browser
+ * lets the next back leave unless the user touches the app in between:
+ * one swallowed press, then the app closes — the pattern phones use, and
+ * the moment to say "press back again to close".
+ */
+export function installBackGuard({ history, enabled = true, onFloor = null } = {}) {
+  if (!enabled || !history) return null;
+  const current = history.state && typeof history.state === 'object' ? history.state : {};
+  // After a reload on the app's entry the floor already lies beneath it.
+  if (!current[BACK_GUARD_FLOOR] && !current[BACK_GUARD_APP]) {
+    history.replaceState({ ...current, [BACK_GUARD_FLOOR]: true }, '');
+    history.pushState({ [BACK_GUARD_APP]: true }, '');
+  }
+  return {
+    /** Feed every popstate here. */
+    onPopState() {
+      if (!history.state?.[BACK_GUARD_FLOOR]) return;
+      history.pushState({ [BACK_GUARD_APP]: true }, '');
+      onFloor?.();
+    },
+  };
+}

package/server/public/app/bootstrap.js

@@ -122,7 +122,12 @@ import {
   jumpToImageParent,
   flushDeferredMessageRender,
   conversationHasActiveTurn,
+  focusConversationMessageById,
+  syncRenderedPinState,
+  isConversationWindowAtTail,
+  getTranscriptJumpEpoch,
 } from './conversation-view.js';
+import { initPinnedMessagesView, setPinsConversation } from './pinned-messages-view.mjs';
 import { bindChatSelectionGuard, chatSelectionGuard, isChatInteractionHeld } from './selection-guard.mjs';
 import { loadRepoBrowserTree, openRepoBrowser, closeRepoBrowser, setRepoBrowserSessionInfo, resetWorkspaceRepoBrowserForRootChange } from './attachments-view.js';
 import { handleAttachmentInput, retryAttachmentUpload, openAnnotateEditorForPending, openAnnotateEditorForPreview, handleComposerPaste, handleComposerDrop, refreshComposerAttachmentWarning, removeAttachment, clearAttachments, openUploadedAttachmentViewer, setFilePreviewMode, toggleFilePreviewHtml, copyFilePreviewImage, closeFilePreview, goBackFilePreview, openWorkspaceFilePreview, openWorkspaceFilePreviewFromRepo, setRepoBrowserRoot, setRepoBrowserViewMode, toggleRepoBrowserHidden, toggleRepoBrowserHeavy, refreshRepoBrowser, focusRepoTree, setRepoCurrentPath, confirmRepoBrowserCwdPick } from './attachments-view.js';
@@ -198,7 +203,9 @@ import {
   adoptLegacyPwaAppName,
   registerPwaShell,
   updatePwaAppName,
+  isInstalledAppMode,
 } from './pwa-install.js';
+import { armBackGuardOnFirstInteraction } from './back-guard.mjs';
 import { initScrollbarHover } from './scrollbar-hover.mjs';
 import {
   autoCompactWindowNotes,
@@ -3592,6 +3599,15 @@ function startSessionWorkerStatusPolling() {
   }, 4000);
 }
 
+// The live poll and refreshCurrentView both reload the END of the
+// conversation. After a jump into the history (a search result, a pinned
+// message) that would put the end back over the window the user asked for,
+// until they have scrolled down to the newest message again. A message sent
+// from that window brings the present back at once: its bubble needs the poll.
+function transcriptIsInHistory(conversationId) {
+  return !isConversationWindowAtTail() && !hasPendingUserMessageForConversation(conversationId);
+}
+
 async function pollAuthenticatedCurrentConversationLive() {
   if (liveConversationPollInFlight) return;
   if (isSharedReaderMode()) return;
@@ -3609,6 +3625,7 @@ async function pollAuthenticatedCurrentConversationLive() {
   // Refreshing while the user selects or drags in the chat would rebuild the
   // DOM under the selection; the guard's release callback re-polls right away.
   if (isChatInteractionHeld()) return;
+  if (transcriptIsInHistory(currentId)) return;
 
   liveConversationPollInFlight = true;
   try {
@@ -3617,9 +3634,14 @@ async function pollAuthenticatedCurrentConversationLive() {
     const savedScrollTop = messagesEl?.scrollTop || 0;
     const savedLoadedCount = loadConversationLoadedMessageCount(currentId);
     const requestLimit = Math.max(20, getConversationLoadedMessageCount() || 0, savedLoadedCount || 0);
+    const jumpEpoch = getTranscriptJumpEpoch();
     const response = await loadConversation(currentId, { limit: requestLimit });
     if (!response) return;
     if (String(currentConvId || '').trim() !== currentId) return;
+    // The user jumped into the history while this request was on its way: the
+    // answer is the end of the conversation as it was asked for before that,
+    // and would overwrite the window they jumped to. The next round asks again.
+    if (getTranscriptJumpEpoch() !== jumpEpoch) return;
     const stableSavedScrollTop = resolveStableScrollTopForLiveRefresh(messagesEl, savedScrollTop);
     applyLoadedConversationState(currentId, response, {
       restoreScroll: !preserveBottom,
@@ -3827,6 +3849,7 @@ let refreshViewVersion = 0;
 
 async function refreshCurrentView() {
   const capturedVersion = ++refreshViewVersion;
+  const jumpEpoch = getTranscriptJumpEpoch();
   const messagesEl = document.getElementById('messages');
   const preserveBottom = isMessagesAtBottom();
   const scrollTop = messagesEl?.scrollTop || 0;
@@ -3849,11 +3872,16 @@ async function refreshCurrentView() {
   const r = await loadConversation(currentId, { limit: requestLimit });
   if (capturedVersion < refreshViewVersion) return;
   if (String(currentConvId || '').trim() !== currentId) return;
+  // The user jumped into the history, before this refresh or while it was on
+  // its way: title, tasks, pins and the rest are refreshed, the transcript
+  // and its scroll position are left as they are.
+  const keepTranscript = getTranscriptJumpEpoch() !== jumpEpoch || transcriptIsInHistory(currentId);
   if (r) {
     applyLoadedConversationState(currentId, r, {
       restoreScroll: !preserveBottom,
       savedScrollTop: preserveBottom ? null : stableSavedScrollTop,
-      followLiveUpdates: preserveBottom,
+      followLiveUpdates: preserveBottom && !keepTranscript,
+      keepTranscript,
     });
   } else {
     setRepoBrowserSessionInfo('', '');
@@ -3862,7 +3890,7 @@ async function refreshCurrentView() {
   await loadRelayQuestions(currentId);
   await loadRelayBoards();
   scheduleContextUsageRefresh(currentId, 0);
-  if (messagesEl && String(currentConvId || '').trim() === currentId) {
+  if (messagesEl && !keepTranscript && String(currentConvId || '').trim() === currentId) {
     if (!preserveBottom && Number.isFinite(stableSavedScrollTop) && stableSavedScrollTop >= 0) {
       messagesEl.scrollTop = stableSavedScrollTop;
     }
@@ -4024,6 +4052,8 @@ function lockChatActionsMenuShield(ms = 300) {
 function syncChatTitleControls() {
   const { title, editBtn, editor, input } = getChatTitleElements();
   const convId = String(currentConvId || '').trim();
+  // No conversation open (deleted, new chat): its 📍 button goes with it.
+  if (!convId) setPinsConversation(null);
   const killBtn = document.getElementById('chat-menu-kill-session');
   const sharedMode = isSharedReaderMode();
   const conversation = convId ? (conversations[convId] || null) : null;
@@ -4571,6 +4601,11 @@ async function initApp() {
   initMessageScrollPersistence();
   initComposerAttachmentInput();
   initMessageSearchView({ openConversation });
+  initPinnedMessagesView({
+    openConversation,
+    focusMessage: focusConversationMessageById,
+    syncRenderedPinState,
+  });
   initGitChangesView();
   syncChatTitleControls();
   connectSocket();
@@ -4627,6 +4662,15 @@ async function bootstrap() {
   }
   const urlToken = getTokenFromUrl();
   if (urlToken) stripTokenFromUrl();
+  // In the installed app the system back button must never close the app;
+  // a tab keeps its own back button. After the token is gone from the
+  // address, so the entries the guard lays down carry the clean one.
+  armBackGuardOnFirstInteraction({
+    history: window.history,
+    enabled: isInstalledAppMode(),
+    target: window,
+    onFloor: () => showTransientRelayNotice('Press back again to close the app', 2500),
+  });
   const persistedToken = consumeLegacyPersistedAuthToken();
   const bootstrapToken = String(urlToken || persistedToken || '').trim();
   const existingSession = await verifyExistingSession(bootstrapToken);

package/server/public/app/conversation-view.js

@@ -52,8 +52,10 @@ import { getPendingQuestionCountsByConversation } from './ask-user-view.js';
 import { sendMessage as sendMessageApi, cancelConversationTurn, cancelQueuedConversationTurn, cancelSubagentRun, compactConversation as compactConversationApi, scheduleContextUsageRefresh, loadConversation as loadConversationApi, loadSharedConversation, updateConversationDraft as updateConversationDraftApi, updateMessageShareVisibility, launchSessionWorker } from './api-client.js';
 import { enqueueOutboxRequest, registerOutboxSync } from './sync-outbox.mjs';
 import { linkifyWorkspaceMentionsInNode, parseAppFileHref, renderMarkdownPreview, rewriteLocalAssetUrlsInNode } from './router.js';
-import { renderAttachmentMarkup, removeComposerAttachments, uploadAttachments, setComposerAttachments, setRepoBrowserSessionInfo, openDriveFilePreview, openWorkspaceFilePreview, openUploadedAttachmentViewer } from './attachments-view.js';
+import { renderAttachmentMarkup, removeComposerAttachments, uploadAttachments, setComposerAttachments, setRepoBrowserSessionInfo, openGalleryItem } from './attachments-view.js';
+import { chatMediaGallery, chatMediaItemFromNode } from './viewer-chat-gallery.mjs';
 import { buildWorkflowRunCard } from './background-tasks-view.mjs';
+import { isMessagePinned, toggleMessagePin } from './pinned-messages-view.mjs';
 import { parsePreviewCommand, runPreviewCommand } from './preview-command.mjs';
 import { buildTranscriptPreviewCard } from './preview-cards.mjs';
 import { closeSlashAutocomplete, handleSlashAutocompleteKey, updateSlashAutocomplete } from './slash-autocomplete.mjs';
@@ -1393,8 +1395,13 @@ function createMessageNode(msg, msgId = null, force = false) {
   const belongsToActiveTurn = !!activeTurnMessageId
     && (activeTurnMessageId === msgId || activeTurnMessageId === sourceMessageId);
   const canToggleShareVisibility = !IS_SHARED_VIEW && !!msgId && !isQueuedUserMessage && !belongsToActiveTurn;
+  // From the conversation's pin list, not from the message: the list is
+  // ordered by revision, and a bubble built from a live event has no pin
+  // state of its own.
+  const pinned = isMessagePinned(currentConvId, msgId);
   const shareVisibilityActionHtml = canToggleShareVisibility
     ? `<div class="msg-share-visibility">
+        ${buildMessagePinControlsHtml(msgId, pinned)}
         ${hiddenFromShares ? '<span class="msg-hidden-label">Hidden from shared viewers</span>' : ''}
         <button type="button" class="msg-share-visibility-btn" data-action="toggle-share-visibility" data-message-id="${escHtml(msgId)}" data-hidden-from-shares="${hiddenFromShares ? 'true' : 'false'}" title="${hiddenFromShares ? 'Shows this message in shared conversations' : 'Hides this message from shared conversations'}">${hiddenFromShares ? 'Unhide' : 'Hide'}</button>
       </div>`
@@ -3134,6 +3141,38 @@ async function cancelSubagentByRunId(conversationId, subagentRunId) {
   updateSubagentStopButton(targetSubagentRunId, false);
 }
 
+const PINNED_LABEL_HTML = '<span class="msg-pinned-label">📍 Pinned</span>';
+
+function pinButtonTitle(pinned) {
+  return pinned ? 'Removes this message from the pinned list' : 'Adds this message to the pinned list';
+}
+
+// The pin half of a bubble's corner row. No whitespace between label and
+// button: syncRenderedPinState finds the label as the button's sibling.
+function buildMessagePinControlsHtml(msgId, pinned) {
+  return `${pinned ? PINNED_LABEL_HTML : ''}<button type="button" class="msg-pin-btn" data-action="toggle-pin" data-message-id="${escHtml(msgId)}" data-pinned="${pinned ? 'true' : 'false'}" title="${pinButtonTitle(pinned)}">${pinned ? 'Unpin' : 'Pin'}</button>`;
+}
+
+// The pin list changed (this page, another device): bring the bubbles on the
+// page in line without rebuilding them.
+export function syncRenderedPinState(pinnedIds) {
+  const el = getMessagesElement();
+  if (!el) return;
+  const ids = pinnedIds instanceof Set ? pinnedIds : new Set(pinnedIds || []);
+  for (const button of el.querySelectorAll('.msg-pin-btn')) {
+    const pinned = ids.has(String(button.dataset.messageId || '').trim());
+    if ((button.dataset.pinned === 'true') === pinned) continue;
+    button.dataset.pinned = pinned ? 'true' : 'false';
+    button.disabled = false;
+    button.textContent = pinned ? 'Unpin' : 'Pin';
+    button.title = pinButtonTitle(pinned);
+    const sibling = button.previousElementSibling;
+    const label = sibling?.classList?.contains('msg-pinned-label') ? sibling : null;
+    if (pinned && !label) button.insertAdjacentHTML('beforebegin', PINNED_LABEL_HTML);
+    if (!pinned && label) label.remove();
+  }
+}
+
 async function toggleMessageShareVisibility(conversationId, messageId, hiddenFromShares) {
   const conversationKey = String(conversationId || '').trim();
   const targetMessageId = String(messageId || '').trim();
@@ -3192,7 +3231,7 @@ function runRelayErrorCta(cta) {
 }
 
 function handleBubbleActionClick(event) {
-  const btn = event.target.closest('.bubble-action-btn, .msg-share-visibility-btn, .thinking-follow-btn, .subagent-bubble-header');
+  const btn = event.target.closest('.bubble-action-btn, .msg-share-visibility-btn, .msg-pin-btn, .thinking-follow-btn, .subagent-bubble-header');
   if (!btn) return;
   const action = btn.dataset.action;
   const messageId = btn.dataset.messageId;
@@ -3214,6 +3253,12 @@ function handleBubbleActionClick(event) {
     );
   }
 
+  if (action === 'toggle-pin' && messageId) {
+    event.preventDefault();
+    event.stopPropagation();
+    void toggleMessagePin(currentConvId, messageId, btn.dataset.pinned === 'true');
+  }
+
   if (action === 'stop-turn' && messageId) {
     event.preventDefault();
     event.stopPropagation();
@@ -3269,30 +3314,48 @@ function handleBubbleActionKeydown(event) {
   toggleSubagentFold(header.dataset.subagentRunId);
 }
 
-// Clicking an inline-embedded image in a message bubble opens it in the file
-// viewer modal (zoom + Download + Copy), the same viewer the repo browser
-// uses. Attachment thumbnails keep their own handler; video/audio keep their
-// native controls untouched.
-function handleEmbeddedImageClick(event) {
-  const img = event.target.closest?.('.msg-bubble img');
-  if (!img || img.closest('.msg-attachment')) return;
-  if (IS_SHARED_VIEW) return; // the file routes are cookie-authed; shared viewers would only see a failed load
-  const src = String(img.getAttribute('src') || '').trim();
-  if (!src) return;
+// A tap on a media attachment (its picture, chip or name) or on a picture
+// embedded in a bubble opens it in the file viewer, together with the other
+// media of the conversation to swipe through. Inline video/audio players in
+// bubbles keep their native controls untouched.
+function handleChatMediaClick(event) {
+  const attachment = event.target.closest?.('.msg-attachment[data-media-url]');
+  let node = null;
+  if (attachment) {
+    // The buttons under a generated image ("Edit this image") do their own work.
+    if (event.target.closest?.('button')) return;
+    if (!event.target.closest?.('img, .msg-attachment-video-chip, [data-media-open]')) return;
+    node = attachment;
+  } else {
+    const img = event.target.closest?.('.msg-bubble img');
+    if (!img || img.closest('.msg-attachment')) return;
+    if (IS_SHARED_VIEW) return; // the file routes are cookie-authed; shared viewers would only see a failed load
+    if (!String(img.getAttribute('src') || '').trim()) return;
+    node = img;
+  }
   event.preventDefault();
   event.stopPropagation();
-  const target = parseAppFileHref(src);
-  if (target?.kind === 'drive') {
-    void openDriveFilePreview(target.path);
-    return;
-  }
-  if (target?.kind === 'workspace') {
-    void openWorkspaceFilePreview(target.path);
-    return;
+  const options = { includeEmbedded: !IS_SHARED_VIEW, parseAppFileHref };
+  const gallery = chatMediaGallery(getMessagesElement(), node, options);
+  const item = gallery ? gallery.items[gallery.index] : chatMediaItemFromNode(node, options);
+  void openGalleryItem(item, gallery);
+}
+
+// On a touch screen the corner row (Pin, Hide) is revealed by a tap on the
+// bubble. The tap leaves an emulated :hover behind, which the CSS also honours,
+// but Chromium drops that hover at the next scroll or layout change on some
+// platforms (seen on Linux), and the row went back to `pointer-events: none`
+// before it could be tapped. The class keeps the reveal until a tap lands
+// outside the bubble. A pointer with hover keeps the hover reveal alone.
+const REVEALED_BUBBLE_CLASS = 'msg-actions-revealed';
+function handleBubbleTapReveal(event) {
+  const bubble = event.target?.closest?.('.msg-bubble') || null;
+  for (const revealed of document.querySelectorAll(`.msg-bubble.${REVEALED_BUBBLE_CLASS}`)) {
+    if (revealed !== bubble) revealed.classList.remove(REVEALED_BUBBLE_CLASS);
   }
-  // data: thumbnails and external http(s) images: show them directly.
-  const dataMime = /^data:(image\/[a-z0-9.+-]+)/i.exec(src)?.[1] || '';
-  openUploadedAttachmentViewer(img.getAttribute('alt') || 'image', src, dataMime || 'image/*');
+  if (!bubble || IS_SHARED_VIEW) return;
+  if (!window.matchMedia?.('(hover: none)')?.matches) return;
+  bubble.classList.add(REVEALED_BUBBLE_CLASS);
 }
 
 export function initBubbleActionHandlers() {
@@ -3300,7 +3363,9 @@ export function initBubbleActionHandlers() {
   if (!messagesEl) return;
   messagesEl.addEventListener('click', handleBubbleActionClick);
   messagesEl.addEventListener('keydown', handleBubbleActionKeydown);
-  messagesEl.addEventListener('click', handleEmbeddedImageClick);
+  messagesEl.addEventListener('click', handleChatMediaClick);
+  // On the document: a tap outside the transcript clears the reveal too.
+  document.addEventListener('click', handleBubbleTapReveal);
   initThinkingFollow({ getCurrentConversationId: () => currentConvId });
 }
 
@@ -3412,6 +3477,20 @@ function buildMessageSnapshotKey(messages = [], meta = {}) {
   });
 }
 
+// Counts jumps into the history (a search result, a pinned message). A reload
+// of the END of the conversation that was asked for before a jump and is
+// answered after it would put the end back over the window just jumped to.
+// Only jumps count: an ordinary reload must still be able to correct another.
+let transcriptJumpEpoch = 0;
+
+export function getTranscriptJumpEpoch() {
+  return transcriptJumpEpoch;
+}
+
+export function noteTranscriptJump() {
+  transcriptJumpEpoch += 1;
+}
+
 export function renderMessages(msgs, scroll = true, meta = {}) {
   const el = getMessagesElement();
   if (!el) return false;
@@ -3590,12 +3669,18 @@ export async function loadNewerConversationMessages() {
   await conversationFutureLoader.loadMore();
 }
 
+// False while a window in the middle of the history is on the page (a search
+// result or a pinned message was jumped to) and newer messages are unloaded.
+export function isConversationWindowAtTail() {
+  return !conversationHistoryState.hasMoreNewer;
+}
+
 export function focusConversationMessageById(messageId, { behavior = 'smooth', block = 'center' } = {}) {
   const id = String(messageId || '').trim();
   if (!id) return false;
   const el = getMessagesElement();
   if (!el) return false;
-  const target = el.querySelector(`[data-message-id="${id}"]`);
+  const target = el.querySelector(`.msg[data-message-id="${CSS.escape(id)}"]`);
   if (!target) return false;
   target.scrollIntoView({ behavior, block, inline: 'nearest' });
   target.classList.add('msg-search-target');

package/server/public/app/external-link-policy.mjs

@@ -57,7 +57,10 @@ export function installExternalLinkPolicy({ documentRef = document, onFallback =
   documentRef.addEventListener('click', (event) => {
     const target = event.target instanceof Element ? event.target : event.target?.parentElement;
     const anchor = target?.closest?.('a[href]');
-    if (!anchor || isInAppLink(anchor)) return;
+    // A download link is left to the browser: opened in a new tab instead, it
+    // lost its `download` name, and a phone showed or saved the file under
+    // the plain name, next to (or instead of) an older copy.
+    if (!anchor || anchor.hasAttribute('download') || isInAppLink(anchor)) return;
     secureExternalLink(anchor, documentRef.baseURI, onFallback);
     if (!isExternalNavigationHref(anchor.getAttribute('href'), documentRef.baseURI)) return;
     if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) return;

package/server/public/app/file-version.mjs

@@ -0,0 +1,58 @@
+// A download link has to change when the file behind it changes. The address
+// and the name a file is saved under both carry the file's version, so nothing
+// between the relay and the Downloads folder can hand back an older copy:
+// not a download manager or a proxy keyed on the URL, and not a phone that
+// keeps `name.pdf`, `name (1).pdf`, `name (2).pdf` side by side and opens the
+// first.
+
+export function appendUrlParam(url, key, value) {
+  const base = String(url || '');
+  const text = String(value ?? '');
+  if (!base || !text) return base;
+  return `${base}${base.includes('?') ? '&' : '?'}${key}=${encodeURIComponent(text)}`;
+}
+
+/** `href` with the file's version token (`v=…`) appended; unchanged when there is none or it has one. */
+export function versionedFileHref(href, version) {
+  const base = String(href || '');
+  if (/[?&]v=/.test(base)) return base;
+  return appendUrlParam(base, 'v', version);
+}
+
+function twoDigits(value) {
+  return String(value).padStart(2, '0');
+}
+
+/**
+ * The name to save a download under: the file's own name with the time it was
+ * last changed, `report.pdf` → `report (1005-0719).pdf` (month, day, hour,
+ * minute, local time). Two versions of a file get two names, and the name
+ * says which one is open. Without a known time the name stays as it is.
+ */
+export function stampedDownloadName(name, mtimeMs) {
+  const plain = String(name || '').trim();
+  const time = Number(mtimeMs);
+  if (!plain || !Number.isFinite(time) || time <= 0) return plain;
+  const date = new Date(time);
+  if (Number.isNaN(date.getTime())) return plain;
+  const stamp = `${twoDigits(date.getMonth() + 1)}${twoDigits(date.getDate())}-${twoDigits(date.getHours())}${twoDigits(date.getMinutes())}`;
+  const dot = plain.lastIndexOf('.');
+  // A leading dot is part of the name (`.env`), not the start of an extension.
+  if (dot <= 0) return `${plain} (${stamp})`;
+  return `${plain.slice(0, dot)} (${stamp})${plain.slice(dot)}`;
+}
+
+/**
+ * The download link of a previewed file: versioned address, and the stamped
+ * name both as the link's `download` name and as `as=…`, which the relay puts
+ * into the `Content-Disposition` header (a browser prefers that header over
+ * the link's own name).
+ */
+export function buildDownloadLink({ href, name, version, mtimeMs } = {}) {
+  const downloadName = stampedDownloadName(name, mtimeMs);
+  let url = versionedFileHref(href, version);
+  if (url && downloadName && downloadName !== String(name || '').trim()) {
+    url = appendUrlParam(url, 'as', downloadName);
+  }
+  return { href: url, downloadName };
+}

package/server/public/app/journal-view.js

@@ -42,9 +42,10 @@ import {
   loadGrokSettings,
   loadOpenAISettings,
 } from './api-client.js';
-import { renderMessages, restoreInFlightThinking, focusConversationMessageById, flushConversationDraft, hydrateConversationDraft, beginConversationDraftSwitch, openStopTurnConfirmationForConversation, conversationHasActiveTurn } from './conversation-view.js';
+import { renderMessages, restoreInFlightThinking, focusConversationMessageById, noteTranscriptJump, flushConversationDraft, hydrateConversationDraft, beginConversationDraftSwitch, openStopTurnConfirmationForConversation, conversationHasActiveTurn } from './conversation-view.js';
 import { MENU_SEPARATOR, bindLongPress, closeContextMenu, openContextMenu } from './context-menu.mjs';
 import { setBackgroundTasksConversation, setConversationBackgroundTasks } from './background-tasks-view.mjs';
+import { setConversationPins, setPinsConversation } from './pinned-messages-view.mjs';
 import { setUsageLimitConversation } from './usage-limit-ui.js';
 import { mergeConversationPreviews } from './preview-cards.mjs';
 import { loadRelayQuestions, getPendingQuestionCountsByConversation } from './ask-user-view.js';
@@ -428,10 +429,14 @@ export function renderConvList() {
   scheduleConversationListBoundaryCheck();
 }
 
+// keepTranscript: the page shows a window this payload must not replace (the
+// user jumped into the history; the payload is the end of the conversation).
+// Everything but the messages still applies.
 export function applyLoadedConversationState(id, response, {
   restoreScroll = false,
   savedScrollTop = null,
   followLiveUpdates = !restoreScroll,
+  keepTranscript = false,
 } = {}) {
   if (!response) {
     setRepoBrowserSessionInfo('', '');
@@ -490,7 +495,13 @@ export function applyLoadedConversationState(id, response, {
   // live poll, and the bare loadRepoBrowserTree path resets loaded folders and
   // deep selections. The end-of-turn message_status handler refreshes the tree
   // through the restoring path instead.
-  const didRenderMessages = renderMessages(response.messages, !restoreScroll, response);
+  // Before the messages: their bubbles take Pin / Unpin from this list.
+  // Absent from an older relay's payload: keep what the socket said.
+  if ('pins' in response) setConversationPins(id, response.pins, response.pinsRevision);
+  setPinsConversation(id);
+  const didRenderMessages = keepTranscript
+    ? false
+    : renderMessages(response.messages, !restoreScroll, response);
   hydrateConversationDraft(id, {
     draftText: response.draftText,
     draftAttachments: response.draftAttachments,
@@ -605,6 +616,9 @@ export async function openConversation(id, options = {}) {
     return;
   }
   if (r) {
+    // Counted when the window is put on the page, not when it is asked for:
+    // a reload of the end that is still on its way must see the change.
+    if (forceFreshWindow) noteTranscriptJump();
     applyLoadedConversationState(id, r, { restoreScroll, savedScrollTop });
     if (focusMessageId) {
       requestAnimationFrame(() => {