@phren/cli 0.0.54 → 0.0.56

package/{mcp/dist → dist}/ui/scripts.js

@@ -28,6 +28,62 @@ export function renderSharedWebUiHelpers(authToken) {
   };
 })();`;
 }
+export function renderProfileSwitcherScript(_authToken) {
+    return `(function() {
+  var esc = window._phrenEsc;
+  var authUrl = window._phrenAuthUrl;
+
+  function loadProfiles() {
+    fetch(authUrl('/api/profiles')).then(function(r) { return r.json(); }).then(function(data) {
+      var select = document.getElementById('profile-select');
+      if (!select) return;
+      if (!data.ok || !data.profiles) {
+        select.innerHTML = '<option>Error loading profiles</option>';
+        return;
+      }
+      var html = '';
+      data.profiles.forEach(function(p) {
+        var selected = p.name === data.activeProfile ? ' selected' : '';
+        html += '<option value="' + esc(p.name) + '"' + selected + '>' + esc(p.name) + '</option>';
+      });
+      select.innerHTML = html;
+      select.onchange = function() { switchProfile(this.value); };
+    }).catch(function(err) {
+      var select = document.getElementById('profile-select');
+      if (select) select.innerHTML = '<option>Error loading</option>';
+    });
+  }
+
+  function switchProfile(profileName) {
+    if (!profileName) return;
+    var status = document.getElementById('profile-status');
+    if (status) status.textContent = 'Switching...';
+    fetch(authUrl('/api/profile'), {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+      body: window._phrenAuthBody('profile=' + encodeURIComponent(profileName))
+    }).then(function(r) { return r.json(); }).then(function(data) {
+      if (data.ok) {
+        if (status) status.textContent = 'Reloading...';
+        setTimeout(function() { location.reload(); }, 500);
+      } else {
+        if (status) status.textContent = 'Error: ' + (data.error || 'Unknown');
+      }
+    }).catch(function(err) {
+      if (status) status.textContent = 'Error loading';
+    });
+  }
+
+  window.phrenLoadProfiles = loadProfiles;
+  window.phrenSwitchProfile = switchProfile;
+
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', loadProfiles);
+  } else {
+    loadProfiles();
+  }
+})();`;
+}
 export function renderSkillUiEnhancementScript(_authToken) {
     return `(function() {
     var _skillCurrent = null;
@@ -879,6 +935,48 @@ export function renderTasksAndSettingsScript(authToken) {
       });
     }
 
+    function postGlobalRetention(field, value, clearField) {
+      var csrfUrl = _tsAuthToken ? tsAuthUrl('/api/csrf-token') : '/api/csrf-token';
+      fetch(csrfUrl).then(function(r) { return r.json(); }).then(function(csrfData) {
+        var payload = { field: field, value: value || '', clear: clearField ? 'true' : 'false', globalUpdate: 'true' };
+        var body = new URLSearchParams(payload);
+        if (csrfData.token) body.set('_csrf', csrfData.token);
+        var url = _tsAuthToken ? tsAuthUrl('/api/settings/project-overrides') : '/api/settings/project-overrides';
+        return fetch(url, { method: 'POST', body: body, headers: { 'content-type': 'application/x-www-form-urlencoded' } });
+      }).then(function(r) { return r.json(); }).then(function(data) {
+        if (!data.ok) {
+          setSettingsStatus(data.error || 'Failed to update retention policy', 'err');
+          return;
+        }
+        _settingsLoaded = false;
+        loadSettings();
+        setSettingsStatus('Retention policy updated', 'ok');
+      }).catch(function(err) {
+        setSettingsStatus('Failed: ' + String(err), 'err');
+      });
+    }
+
+    function postGlobalWorkflow(field, value, clearField) {
+      var csrfUrl = _tsAuthToken ? tsAuthUrl('/api/csrf-token') : '/api/csrf-token';
+      fetch(csrfUrl).then(function(r) { return r.json(); }).then(function(csrfData) {
+        var payload = { field: field, value: value || '', clear: clearField ? 'true' : 'false', globalUpdate: 'true' };
+        var body = new URLSearchParams(payload);
+        if (csrfData.token) body.set('_csrf', csrfData.token);
+        var url = _tsAuthToken ? tsAuthUrl('/api/settings/project-overrides') : '/api/settings/project-overrides';
+        return fetch(url, { method: 'POST', body: body, headers: { 'content-type': 'application/x-www-form-urlencoded' } });
+      }).then(function(r) { return r.json(); }).then(function(data) {
+        if (!data.ok) {
+          setSettingsStatus(data.error || 'Failed to update workflow policy', 'err');
+          return;
+        }
+        _settingsLoaded = false;
+        loadSettings();
+        setSettingsStatus('Workflow policy updated', 'ok');
+      }).catch(function(err) {
+        setSettingsStatus('Failed: ' + String(err), 'err');
+      });
+    }
+
     function loadSettings() {
       var selectedProject = getSettingsProject();
       var baseUrl = '/api/settings';
@@ -1058,12 +1156,11 @@ export function renderTasksAndSettingsScript(authToken) {
             }
             retHtml += '</div>';
             if (note) retHtml += '<div class="settings-control-note">' + esc(note) + '</div>';
-            if (isProject) {
-              retHtml += '<div style="display:flex;gap:8px;align-items:center;margin-top:8px">' +
-                '<input type="number" id="ret-input-' + esc(field) + '" value="' + esc(String(value != null ? value : '')) + '" style="width:100px;border:1px solid var(--border);border-radius:var(--radius-sm);padding:4px 8px;font-size:var(--text-sm);background:var(--surface);color:var(--ink)">' +
-                '<button data-ts-action="setProjectRetention" data-field="' + esc(field) + '" class="settings-chip active" style="font-size:11px">Set</button>' +
-                '</div>';
-            }
+            // Show editable inputs for both global and per-project
+            retHtml += '<div style="display:flex;gap:8px;align-items:center;margin-top:8px">' +
+              '<input type="number" id="ret-input-' + esc(field) + '" value="' + esc(String(value != null ? value : '')) + '" style="width:100px;border:1px solid var(--border);border-radius:var(--radius-sm);padding:4px 8px;font-size:var(--text-sm);background:var(--surface);color:var(--ink)">' +
+              '<button data-ts-action="' + (isProject ? 'setProjectRetention' : 'setGlobalRetention') + '" data-field="' + esc(field) + '" class="settings-chip active" style="font-size:11px">Set</button>' +
+              '</div>';
             retHtml += '</div>';
           }
           retRow('TTL days', 'ttlDays', ret.ttlDays, 'Memories older than this are eligible for pruning.');
@@ -1085,14 +1182,11 @@ export function renderTasksAndSettingsScript(authToken) {
           if (isProject && lctOverride) {
             wfHtml += '<button data-ts-action="clearProjectOverride" data-field="lowConfidenceThreshold" class="settings-chip" style="font-size:11px">Clear</button>';
           }
-          if (isProject) {
-            wfHtml += '</div><div style="display:flex;gap:8px;align-items:center;margin-top:8px">' +
-              '<input type="number" id="wf-input-lowConfidenceThreshold" min="0" max="1" step="0.05" value="' + esc(String(wf.lowConfidenceThreshold != null ? wf.lowConfidenceThreshold : '')) + '" style="width:100px;border:1px solid var(--border);border-radius:var(--radius-sm);padding:4px 8px;font-size:var(--text-sm);background:var(--surface);color:var(--ink)">' +
-              '<button data-ts-action="setProjectWorkflow" data-field="lowConfidenceThreshold" class="settings-chip active" style="font-size:11px">Set</button>' +
-              '</div>';
-          } else {
-            wfHtml += '</div>';
-          }
+          // Show editable inputs for both global and per-project
+          wfHtml += '</div><div style="display:flex;gap:8px;align-items:center;margin-top:8px">' +
+            '<input type="number" id="wf-input-lowConfidenceThreshold" min="0" max="1" step="0.05" value="' + esc(String(wf.lowConfidenceThreshold != null ? wf.lowConfidenceThreshold : '')) + '" style="width:100px;border:1px solid var(--border);border-radius:var(--radius-sm);padding:4px 8px;font-size:var(--text-sm);background:var(--surface);color:var(--ink)">' +
+            '<button data-ts-action="' + (isProject ? 'setProjectWorkflow' : 'setGlobalWorkflow') + '" data-field="lowConfidenceThreshold" class="settings-chip active" style="font-size:11px">Set</button>' +
+            '</div>';
           wfHtml += '<div class="settings-control-note">Memories below this confidence score are flagged for review.</div></div>';
           wfHtml += '<div class="settings-control">';
           wfHtml += '<div class="settings-control-header"><span class="settings-control-label">Risky sections</span>' + sourceBadge(riskySectionsOverride);
@@ -1123,11 +1217,62 @@ export function renderTasksAndSettingsScript(authToken) {
         } else if (integrationsEl && isProject) {
           integrationsEl.innerHTML = '<div style="color:var(--muted);font-size:var(--text-sm)">Integration settings are global — switch to Global scope to edit them.</div>';
         }
+
+        // Load stores if on global scope
+        if (!isProject) {
+          loadStores();
+        }
       }).catch(function(err) {
         setSettingsStatus('Failed to load settings: ' + String(err), 'err');
       });
     }
 
+    function loadStores() {
+      var storesEl = document.getElementById('settings-stores');
+      if (!storesEl) return;
+      var url = _tsAuthToken ? tsAuthUrl('/api/stores') : '/api/stores';
+      fetch(url).then(function(r) { return r.json(); }).then(function(data) {
+        if (!data.ok || !Array.isArray(data.stores)) {
+          storesEl.innerHTML = '<div style="color:var(--muted);font-size:var(--text-sm)">No team stores configured.</div>';
+          return;
+        }
+        if (data.stores.length === 0) {
+          storesEl.innerHTML = '<div style="color:var(--muted);font-size:var(--text-sm)">No team stores configured.</div>';
+          return;
+        }
+        var html = '';
+        data.stores.forEach(function(store) {
+          html += '<div class="settings-control" style="border:1px solid var(--border);border-radius:var(--radius-sm);padding:12px;margin-bottom:12px">';
+          html += '<div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:8px">';
+          html += '<div>';
+          html += '<div style="font-weight:600;color:var(--ink)">' + esc(store.name) + '</div>';
+          html += '<div style="font-size:var(--text-sm);color:var(--muted)">Role: ' + esc(store.role) + '</div>';
+          html += '</div>';
+          html += '</div>';
+          html += '<div style="font-size:var(--text-xs);color:var(--muted);margin-bottom:10px;font-family:var(--mono);word-break:break-all">' + esc(store.path) + '</div>';
+          html += '<div style="font-size:var(--text-sm);color:var(--ink);margin-bottom:6px;font-weight:500">Projects</div>';
+          if (Array.isArray(store.availableProjects) && store.availableProjects.length > 0) {
+            var subscribed = Array.isArray(store.subscribedProjects) ? store.subscribedProjects : [];
+            html += '<div style="display:flex;flex-direction:column;gap:6px">';
+            store.availableProjects.forEach(function(proj) {
+              var isSubscribed = subscribed.indexOf(proj) !== -1;
+              html += '<label style="display:flex;align-items:center;gap:8px;cursor:pointer;font-size:var(--text-sm)">';
+              html += '<input type="checkbox" class="store-project-checkbox" data-store="' + esc(store.name) + '" data-project="' + esc(proj) + '" ' + (isSubscribed ? 'checked' : '') + ' style="cursor:pointer;width:16px;height:16px">';
+              html += '<span>' + esc(proj) + '</span>';
+              html += '</label>';
+            });
+            html += '</div>';
+          } else {
+            html += '<div style="color:var(--muted);font-size:var(--text-sm)">No projects available</div>';
+          }
+          html += '</div>';
+        });
+        storesEl.innerHTML = html;
+      }).catch(function(err) {
+        storesEl.innerHTML = '<div style="color:var(--error);font-size:var(--text-sm)">Failed to load stores: ' + esc(String(err)) + '</div>';
+      });
+    }
+
     // Hook into switchTab to lazy-load
     var _origSwitchTab = window.switchTab;
     var _tasksLoaded = false;
@@ -1138,6 +1283,43 @@ export function renderTasksAndSettingsScript(authToken) {
       if (tab === 'settings' && !_settingsLoaded) { _settingsLoaded = true; loadSettings(); }
     };
 
+    // Handle store project checkbox changes
+    document.addEventListener('change', function(e) {
+      var target = e.target;
+      if (target && target.classList && target.classList.contains('store-project-checkbox')) {
+        var storeName = target.getAttribute('data-store');
+        var projectName = target.getAttribute('data-project');
+        var isChecked = target.checked;
+        if (storeName && projectName) {
+          handleStoreProjectToggle(storeName, projectName, isChecked);
+        }
+      }
+    });
+
+    function handleStoreProjectToggle(storeName, projectName, isSubscribing) {
+      var endpoint = isSubscribing ? '/api/stores/subscribe' : '/api/stores/unsubscribe';
+      var csrfUrl = _tsAuthToken ? tsAuthUrl('/api/csrf-token') : '/api/csrf-token';
+      fetch(csrfUrl).then(function(r) { return r.json(); }).then(function(csrfData) {
+        var payload = { store: storeName, projects: [projectName] };
+        var body = new URLSearchParams();
+        body.set('store', storeName);
+        body.set('projects', JSON.stringify([projectName]));
+        if (csrfData.token) body.set('_csrf', csrfData.token);
+        var url = _tsAuthToken ? tsAuthUrl(endpoint) : endpoint;
+        return fetch(url, { method: 'POST', body: body, headers: { 'content-type': 'application/x-www-form-urlencoded' } });
+      }).then(function(r) { return r.json(); }).then(function(data) {
+        if (!data.ok) {
+          setSettingsStatus((isSubscribing ? 'Subscribe' : 'Unsubscribe') + ' failed: ' + (data.error || ''), 'err');
+          loadStores();
+          return;
+        }
+        setSettingsStatus((isSubscribing ? 'Subscribed to' : 'Unsubscribed from') + ' ' + projectName, 'ok');
+        loadStores();
+      }).catch(function(err) {
+        setSettingsStatus('Request failed: ' + String(err), 'err');
+      });
+    }
+
     // Event delegation for dynamically generated tasks/settings UI
     document.addEventListener('click', function(e) {
       var target = e.target;
@@ -1175,6 +1357,25 @@ export function renderTasksAndSettingsScript(authToken) {
         var val = inputEl ? inputEl.value : '';
         postProjectOverride(proj, field, val, false);
       }
+      else if (action === 'setGlobalRetention') {
+        var field = actionEl.getAttribute('data-field') || '';
+        var inputEl = document.getElementById('ret-input-' + field);
+        var val = inputEl ? inputEl.value : '';
+        postGlobalRetention(field, val);
+      }
+      else if (action === 'setProjectRetention') {
+        var proj = getSettingsProject();
+        var field = actionEl.getAttribute('data-field') || '';
+        var inputEl = document.getElementById('ret-input-' + field);
+        var val = inputEl ? inputEl.value : '';
+        postProjectOverride(proj, field, val, false);
+      }
+      else if (action === 'setGlobalWorkflow') {
+        var field = actionEl.getAttribute('data-field') || '';
+        var inputEl = document.getElementById('wf-input-' + field);
+        var val = inputEl ? inputEl.value : '';
+        postGlobalWorkflow(field, val);
+      }
       else if (action === 'setProjectWorkflow') {
         var proj = getSettingsProject();
         var field = actionEl.getAttribute('data-field') || '';
@@ -1832,7 +2033,7 @@ export function renderGraphHostScript() {
     if (priorityEl) updates.priority = priorityEl.value;
     graphRequest('/api/tasks/update', 'POST', {
       project: currentNode.projectName,
-      item: currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || '',
+      item: currentNode.stableId || currentNode.id || currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || '',
       text: updates.text,
       section: updates.section || '',
       priority: updates.priority || ''
@@ -1869,7 +2070,7 @@ export function renderGraphHostScript() {
     if (currentNode.kind === 'task') {
       graphRequest('/api/tasks/remove', 'POST', {
         project: currentNode.projectName,
-        item: currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || ''
+        item: currentNode.stableId || currentNode.id || currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || ''
       }).then(function(result) {
         if (!result || !result.ok) throw new Error(result && result.error ? result.error : 'Delete failed');
         graphToast('Task removed', 'ok');
@@ -1884,7 +2085,7 @@ export function renderGraphHostScript() {
     if (!currentNode) return;
     graphRequest('/api/tasks/complete', 'POST', {
       project: currentNode.projectName,
-      item: currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || ''
+      item: currentNode.stableId || currentNode.id || currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || ''
     }).then(function(result) {
       if (!result || !result.ok) throw new Error(result && result.error ? result.error : 'Update failed');
       graphToast('Task completed', 'ok');
@@ -1898,7 +2099,7 @@ export function renderGraphHostScript() {
     if (!currentNode) return;
     graphRequest('/api/tasks/update', 'POST', {
       project: currentNode.projectName,
-      item: currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || '',
+      item: currentNode.stableId || currentNode.id || currentNode.tooltipLabel || currentNode.fullLabel || currentNode.displayLabel || '',
       section: section
     }).then(function(result) {
       if (!result || !result.ok) throw new Error(result && result.error ? result.error : 'Update failed');
@@ -2009,3 +2210,87 @@ export function renderGraphHostScript() {
   }
 })();`;
 }
+export function renderReviewQueueKeyboardScript(_authToken) {
+    return `(function() {
+    var _reviewHighlightIndex = -1;
+    var _currentTab = '';
+    var esc = window._phrenEsc;
+    var authUrl = window._phrenAuthUrl;
+    var authBody = window._phrenAuthBody;
+    var fetchCsrfToken = window._phrenFetchCsrfToken;
+
+    function updateReviewHighlight() {
+      var cards = document.querySelectorAll('#review-cards-list [data-review-card]');
+      cards.forEach(function(card, i) {
+        if (i === _reviewHighlightIndex) {
+          card.classList.add('review-card-highlight');
+          card.scrollIntoView({ behavior: 'smooth', block: 'nearest' });
+        } else {
+          card.classList.remove('review-card-highlight');
+        }
+      });
+    }
+
+    function getApproveButton(card) {
+      return card ? card.querySelector('[data-review-type="approve"]') : null;
+    }
+
+    function getRejectButton(card) {
+      return card ? card.querySelector('[data-review-type="reject"]') : null;
+    }
+
+    function triggerCardAction(card, action) {
+      if (!card) return;
+      if (action === 'approve') {
+        var approveBtn = getApproveButton(card);
+        if (approveBtn) approveBtn.click();
+      } else if (action === 'reject') {
+        var rejectBtn = getRejectButton(card);
+        if (rejectBtn) rejectBtn.click();
+      }
+    }
+
+    var baseWindowSwitchTab = window.switchTab;
+    if (typeof baseWindowSwitchTab === 'function') {
+      window.switchTab = function(tab) {
+        baseWindowSwitchTab(tab);
+        _currentTab = tab;
+        if (tab === 'review') {
+          _reviewHighlightIndex = -1;
+          setTimeout(function() { updateReviewHighlight(); }, 100);
+        }
+      };
+    }
+
+    document.addEventListener('keydown', function(e) {
+      if (_currentTab !== 'review') return;
+      var cards = document.querySelectorAll('#review-cards-list [data-review-card]');
+      if (cards.length === 0) return;
+
+      if (e.key === 'j' || e.key === 'ArrowDown') {
+        e.preventDefault();
+        _reviewHighlightIndex = Math.min(_reviewHighlightIndex + 1, cards.length - 1);
+        updateReviewHighlight();
+      } else if (e.key === 'k' || e.key === 'ArrowUp') {
+        e.preventDefault();
+        _reviewHighlightIndex = Math.max(_reviewHighlightIndex - 1, -1);
+        updateReviewHighlight();
+      } else if (e.key === 'a') {
+        e.preventDefault();
+        if (_reviewHighlightIndex >= 0) {
+          triggerCardAction(cards[_reviewHighlightIndex], 'approve');
+        }
+      } else if (e.key === 'd') {
+        e.preventDefault();
+        if (_reviewHighlightIndex >= 0) {
+          triggerCardAction(cards[_reviewHighlightIndex], 'reject');
+        }
+      } else if (e.key === 'Enter') {
+        e.preventDefault();
+        if (_reviewHighlightIndex >= 0) {
+          cards[_reviewHighlightIndex].click();
+        }
+      }
+    });
+  })();`;
+}

package/{mcp/dist → dist}/ui/server.js

@@ -6,7 +6,7 @@ import * as path from "path";
 import * as querystring from "querystring";
 import { spawn, execFileSync } from "child_process";
 import { computePhrenLiveStateToken, getProjectDirs, } from "../shared.js";
-import { getNonPrimaryStores } from "../store-registry.js";
+import { getNonPrimaryStores, subscribeStoreProjects, unsubscribeStoreProjects } from "../store-registry.js";
 import { editFinding, readReviewQueue, removeFinding, readFindings, addFinding as addFindingStore, readTasksAcrossProjects, addTask as addTaskStore, completeTask as completeTaskStore, removeTask as removeTaskStore, updateTask as updateTaskStore, TASKS_FILENAME, } from "../data/access.js";
 import { isValidProjectName, errorMessage, queueFilePath, safeProjectPath } from "../utils.js";
 import { readInstallPreferences, writeInstallPreferences, writeGovernanceInstallPreferences } from "../init/preferences.js";
@@ -339,6 +339,28 @@ function handleGetProjects(res, ctx) {
 function handleGetChangeToken(res, ctx) {
     jsonOk(res, { token: computePhrenLiveStateToken(ctx.phrenPath) });
 }
+function handleGetStores(res, ctx) {
+    try {
+        const stores = getNonPrimaryStores(ctx.phrenPath);
+        const storeData = stores.map((store) => {
+            const availableProjects = getProjectDirs(store.path)
+                .map((dir) => path.basename(dir))
+                .filter((p) => p !== "global");
+            const subscribedProjects = store.projects || [];
+            return {
+                name: store.name,
+                role: store.role,
+                path: store.path,
+                availableProjects,
+                subscribedProjects,
+            };
+        });
+        jsonOk(res, { ok: true, stores: storeData });
+    }
+    catch (err) {
+        jsonErr(res, errorMessage(err), 500);
+    }
+}
 function handleGetRuntimeHealth(res, ctx) {
     jsonOk(res, readSyncSnapshot(ctx.phrenPath));
 }
@@ -816,12 +838,116 @@ function handlePostSettingsMcpEnabled(req, res, url, ctx) {
         jsonOk(res, { ok: true, mcpEnabled: enabled });
     });
 }
+function handleGetProfiles(res, ctx) {
+    try {
+        const { listProfiles } = require("../profile-store.js");
+        const profileResult = listProfiles(ctx.phrenPath);
+        if (!profileResult.ok) {
+            return jsonOk(res, { ok: false, error: profileResult.error, profiles: [] });
+        }
+        const profiles = profileResult.data || [];
+        jsonOk(res, { ok: true, profiles, activeProfile: ctx.profile || undefined });
+    }
+    catch (err) {
+        jsonOk(res, { ok: false, error: errorMessage(err), profiles: [] });
+    }
+}
+function handlePostProfile(req, res, url, ctx) {
+    withPostBody(req, res, url, ctx, (parsed) => {
+        const profileName = String(parsed.profile || "").trim();
+        if (!profileName)
+            return jsonErr(res, "Profile name required", 400);
+        try {
+            const { setMachineProfile, getDefaultMachineAlias } = require("../profile-store.js");
+            const machineAlias = getDefaultMachineAlias();
+            const result = setMachineProfile(ctx.phrenPath, machineAlias, profileName);
+            if (!result.ok)
+                return jsonErr(res, result.error || "Failed to switch profile", 500);
+            jsonOk(res, { ok: true, message: `Switched to profile: ${profileName}`, profile: profileName });
+        }
+        catch (err) {
+            jsonErr(res, errorMessage(err), 500);
+        }
+    });
+}
+function handlePostStoreSubscribe(req, res, url, ctx) {
+    withPostBody(req, res, url, ctx, (parsed) => {
+        const storeName = String(parsed.store || "");
+        const projects = Array.isArray(parsed.projects) ? parsed.projects : [];
+        if (!storeName)
+            return jsonErr(res, "Missing store name", 400);
+        try {
+            subscribeStoreProjects(ctx.phrenPath, storeName, projects);
+            jsonOk(res, { ok: true });
+        }
+        catch (err) {
+            jsonErr(res, errorMessage(err), 500);
+        }
+    });
+}
+function handlePostStoreUnsubscribe(req, res, url, ctx) {
+    withPostBody(req, res, url, ctx, (parsed) => {
+        const storeName = String(parsed.store || "");
+        const projects = Array.isArray(parsed.projects) ? parsed.projects : [];
+        if (!storeName)
+            return jsonErr(res, "Missing store name", 400);
+        try {
+            unsubscribeStoreProjects(ctx.phrenPath, storeName, projects);
+            jsonOk(res, { ok: true });
+        }
+        catch (err) {
+            jsonErr(res, errorMessage(err), 500);
+        }
+    });
+}
 function handlePostSettingsProjectOverrides(req, res, url, ctx) {
     withPostBody(req, res, url, ctx, (parsed) => {
+        const globalUpdate = String(parsed.globalUpdate || "") === "true";
         const project = String(parsed.project || "");
         const field = String(parsed.field || "");
         const value = String(parsed.value || "");
         const clearField = String(parsed.clear || "") === "true";
+        const NUMERIC_RETENTION_FIELDS = ["ttlDays", "retentionDays", "autoAcceptThreshold", "minInjectConfidence"];
+        const NUMERIC_WORKFLOW_FIELDS = ["lowConfidenceThreshold"];
+        // Handle global retention/workflow policy updates
+        if (globalUpdate) {
+            try {
+                if (NUMERIC_RETENTION_FIELDS.includes(field)) {
+                    const { updateRetentionPolicy } = require("../governance/policy.js");
+                    let updateData = {};
+                    if (!clearField) {
+                        const num = parseFloat(value);
+                        if (!Number.isFinite(num) || num < 0)
+                            throw new Error("Invalid numeric value for " + field);
+                        updateData[field] = num;
+                    }
+                    const result = updateRetentionPolicy(ctx.phrenPath, updateData);
+                    if (!result.ok)
+                        return jsonErr(res, result.error || "Failed to update retention policy", 500);
+                    return jsonOk(res, { ok: true, retentionPolicy: result.data });
+                }
+                else if (NUMERIC_WORKFLOW_FIELDS.includes(field)) {
+                    const { updateWorkflowPolicy } = require("../governance/policy.js");
+                    let updateData = {};
+                    if (!clearField) {
+                        const num = parseFloat(value);
+                        if (!Number.isFinite(num) || num < 0 || num > 1)
+                            throw new Error("Invalid value for " + field + " (must be 0-1)");
+                        updateData[field] = num;
+                    }
+                    const result = updateWorkflowPolicy(ctx.phrenPath, updateData);
+                    if (!result.ok)
+                        return jsonErr(res, result.error || "Failed to update workflow policy", 500);
+                    return jsonOk(res, { ok: true, workflowPolicy: result.data });
+                }
+                else {
+                    return jsonErr(res, "Unknown config field: " + field, 400);
+                }
+            }
+            catch (err) {
+                return jsonErr(res, errorMessage(err));
+            }
+        }
         if (!project || !isValidProjectName(project))
             return jsonErr(res, "Invalid project name", 400);
         const registeredProjects = getProjectDirs(ctx.phrenPath, ctx.profile).map((d) => path.basename(d)).filter((p) => p !== "global");
@@ -831,8 +957,6 @@ function handlePostSettingsProjectOverrides(req, res, url, ctx) {
             proactivity: ["high", "medium", "low"], proactivityFindings: ["high", "medium", "low"],
             proactivityTask: ["high", "medium", "low"], taskMode: ["off", "manual", "suggest", "auto"],
         };
-        const NUMERIC_RETENTION_FIELDS = ["ttlDays", "retentionDays", "autoAcceptThreshold", "minInjectConfidence"];
-        const NUMERIC_WORKFLOW_FIELDS = ["lowConfidenceThreshold"];
         try {
             updateProjectConfigOverrides(ctx.phrenPath, project, (current) => {
                 const next = { ...current };
@@ -944,6 +1068,7 @@ export function createWebUiHttpServer(phrenPath, renderPage, profile, opts) {
             switch (pathname) {
                 case "/api/projects": return handleGetProjects(res, ctx);
                 case "/api/change-token": return handleGetChangeToken(res, ctx);
+                case "/api/stores": return handleGetStores(res, ctx);
                 case "/api/runtime-health": return handleGetRuntimeHealth(res, ctx);
                 case "/api/review-queue": return handleGetReviewQueue(res, ctx);
                 case "/api/review-activity": return handleGetReviewActivity(res, ctx);
@@ -957,6 +1082,7 @@ export function createWebUiHttpServer(phrenPath, renderPage, profile, opts) {
                 case "/api/settings": return handleGetSettings(res, url, ctx);
                 case "/api/config": return handleGetConfig(res, url, ctx);
                 case "/api/csrf-token": return handleGetCsrfToken(res, ctx);
+                case "/api/profiles": return handleGetProfiles(res, ctx);
                 case "/api/search": return await handleGetSearch(res, url, ctx);
             }
             // Prefix-matched GET routes
@@ -979,6 +1105,9 @@ export function createWebUiHttpServer(phrenPath, renderPage, profile, opts) {
                 case "/api/skill-save": return handlePostSkillSave(req, res, url, ctx);
                 case "/api/skill-toggle": return handlePostSkillToggle(req, res, url, ctx);
                 case "/api/hook-toggle": return handlePostHookToggle(req, res, url, ctx);
+                case "/api/profile": return handlePostProfile(req, res, url, ctx);
+                case "/api/stores/subscribe": return handlePostStoreSubscribe(req, res, url, ctx);
+                case "/api/stores/unsubscribe": return handlePostStoreUnsubscribe(req, res, url, ctx);
                 case "/api/project-topics/save": return handlePostTopicsSave(req, res, url, ctx);
                 case "/api/project-topics/reclassify": return handlePostTopicsReclassify(req, res, url, ctx);
                 case "/api/project-topics/pin": return handlePostTopicsPin(req, res, url, ctx);

package/{mcp/dist → dist}/ui/styles.js

@@ -655,4 +655,10 @@ export const REVIEW_UI_STYLES = `
   .review-sync-indicator.error {
     background: var(--danger);
   }
+  /* ── Review Card Highlight (keyboard shortcuts) ──── */
+  .review-card-highlight {
+    border: 2px solid var(--blue) !important;
+    box-shadow: 0 0 0 2px rgba(59, 130, 246, 0.08), var(--shadow) !important;
+    background: color-mix(in srgb, var(--surface) 98%, var(--blue)) !important;
+  }
 `;