@starlove/orbit 1.0.6 → 1.1.0

package/public/js/format.js

@@ -10,6 +10,333 @@ export function escapeHtml(value) {
     .replaceAll("'", "'");
 }
 
+// UTF-8 bytes mis-decoded as CP-437 (the typical Windows-tmux artifact).
+// Ported from aeva-dashboard's fix-newlines tool — every entry is
+// [mojibake sequence, what it should have been]. Long sequences first so
+// shorter prefixes do not eat them.
+const MOJIBAKE_REPLACEMENTS = [
+  // General Punctuation (UTF-8 E2 80 XX → CP-437 "ΓÇ" + glyph)
+  ["ΓÇô", "–"],
+  ["ΓÇö", "—"],
+  ["ΓÇ£", '"'],
+  ["ΓÇ¥", '"'],
+  ["ΓÇÿ", "'"],
+  ["ΓÇÖ", "'"],
+  ["ΓǪ", "…"],
+  ["ΓÇó", "•"],
+  ["ΓÇ░", "‰"],
+  ["ΓÇ╣", "‹"],
+  ["ΓÇ║", "›"],
+
+  // Box drawing — light (UTF-8 E2 94 XX → CP-437 "Γö" + glyph)
+  ["ΓöÇ", "─"],
+  ["Γöé", "│"],
+  ["Γöî", "┌"],
+  ["ΓöÉ", "┐"],
+  ["Γöö", "└"],
+  ["Γöÿ", "┘"],
+  ["Γö£", "├"],
+  ["Γöñ", "┤"],
+  ["Γö¼", "┬"],
+  ["Γö┤", "┴"],
+  ["Γö╝", "┼"],
+
+  // Box drawing — heavy/double + rounded corners (UTF-8 E2 95 XX → "Γò" + glyph)
+  ["ΓòÉ", "═"],
+  ["Γòæ", "║"],
+  ["ΓòÆ", "╒"],
+  ["Γòö", "╔"],
+  ["Γò¡", "╭"],
+  ["Γò«", "╮"],
+  ["Γò»", "╯"],
+  ["Γò░", "╰"],
+
+  // Geometric shapes (UTF-8 E2 96 XX / E2 97 XX → "Γû" / "Γù" + glyph)
+  ["Γûæ", "░"],
+  ["ΓûÆ", "▒"],
+  ["Γûô", "▓"],
+  ["ΓûÉ", "▐"],
+  ["Γûî", "▌"],
+  ["ΓûÄ", ">"],
+  ["Γûá", "■"],
+  ["Γû╝", "▼"],
+  ["ΓùÅ", "●"],
+  ["Γùï", "○"],
+
+  // Misc symbols (UTF-8 E2 9A XX → "ΓÜ" + glyph)
+  ["ΓÜò", "⚕"],
+  ["ΓÜá", "⚠"],
+  ["ΓÜí", "⚡"],
+  ["ΓÜô", "⚓"],
+
+  // Arrows (UTF-8 E2 86 XX → "Γå" + glyph)
+  ["ΓåÉ", "←"],
+  ["Γåæ", "↑"],
+  ["ΓåÆ", "→"],
+  ["Γåô", "↓"],
+  ["Γåö", "↔"],
+
+  // Latin-1 Supplement (UTF-8 C2 XX → CP-437 "┬" + glyph)
+  [" ", " "],
+  ["┬⌐", "©"],
+  ["┬«", "®"],
+  ["┬░", "°"],
+  ["┬º", "§"],
+  ["┬╖", "·"],
+
+  // Stray curly quotes that survived as proper Unicode — Bruce writes with
+  // ASCII straight quotes, so normalize for consistency.
+  ["“", '"'],
+  ["”", '"'],
+  ["‘", "'"],
+  ["’", "'"],
+];
+
+function fixMojibake(text) {
+  if (!text) return text;
+  let out = text;
+  for (const [from, to] of MOJIBAKE_REPLACEMENTS) {
+    out = out.split(from).join(to);
+  }
+  return out;
+}
+
+/**
+ * Repair common mojibake and normalize line endings without disturbing the
+ * author's indentation or soft line breaks. Use this on inbound text before
+ * saving (so the DB stays clean going forward) and again before rendering (so
+ * existing dirty rows display fixed without a migration).
+ */
+export function cleanText(value) {
+  if (!value) return "";
+  return fixMojibake(String(value)).replace(/\r\n?/g, "\n");
+}
+
+export function renderPreservedText(value) {
+  return escapeHtml(cleanText(value));
+}
+
+const SAFE_LINK_PROTOCOLS = new Set(["http:", "https:", "mailto:", "tel:"]);
+
+function sanitizeMarkdownUrl(value) {
+  const href = String(value || "").trim();
+  if (!href) return "";
+
+  // Collapse control characters/whitespace before checking the scheme so inputs
+  // like `java\nscript:` or `jav\tascript:` cannot bypass the blocklist.
+  const compact = href.replace(/[\u0000-\u001f\u007f\s]+/g, "").toLowerCase();
+  if (/^(?:javascript|data|vbscript):/.test(compact)) return "";
+
+  const scheme = compact.match(/^([a-z][a-z0-9+.-]*):/);
+  if (scheme && !SAFE_LINK_PROTOCOLS.has(`${scheme[1]}:`)) return "";
+
+  return href;
+}
+
+function renderEmphasis(text) {
+  let html = escapeHtml(text);
+  html = html.replace(/(\*\*|__)(?=\S)([\s\S]*?\S)\1/g, "<strong>$2</strong>");
+  html = html.replace(/(\*|_)(?=\S)([^*_]*?\S)\1/g, "<em>$2</em>");
+  return html;
+}
+
+function renderLinksAndEmphasis(text) {
+  const linkPattern = /\[([^\]\n]+)\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
+  let html = "";
+  let lastIndex = 0;
+  let match;
+
+  while ((match = linkPattern.exec(text))) {
+    html += renderEmphasis(text.slice(lastIndex, match.index));
+
+    const labelHtml = renderEmphasis(match[1]);
+    const href = sanitizeMarkdownUrl(match[2]);
+    html += href
+      ? `<a href="${escapeHtml(href)}" target="_blank" rel="noopener noreferrer">${labelHtml}</a>`
+      : labelHtml;
+
+    lastIndex = match.index + match[0].length;
+  }
+
+  html += renderEmphasis(text.slice(lastIndex));
+  return html;
+}
+
+function renderInlineMarkdown(text) {
+  const source = String(text ?? "");
+  let html = "";
+  let cursor = 0;
+
+  while (cursor < source.length) {
+    const codeStart = source.indexOf("`", cursor);
+    if (codeStart === -1) {
+      html += renderLinksAndEmphasis(source.slice(cursor));
+      break;
+    }
+
+    const codeEnd = source.indexOf("`", codeStart + 1);
+    if (codeEnd === -1) {
+      html += renderLinksAndEmphasis(source.slice(cursor));
+      break;
+    }
+
+    html += renderLinksAndEmphasis(source.slice(cursor, codeStart));
+    html += `<code>${escapeHtml(source.slice(codeStart + 1, codeEnd))}</code>`;
+    cursor = codeEnd + 1;
+  }
+
+  return html;
+}
+
+function renderParagraph(lines) {
+  return `<p>${renderInlineMarkdown(lines.join("\n")).replaceAll("\n", "<br>")}</p>`;
+}
+
+function renderTaskItem(rawContent) {
+  // GFM-style `- [ ] text` or `- [x] text`. We render as a disabled checkbox
+  // followed by the inline-rendered remainder. The list itself gets a
+  // `task-list` class so CSS can drop the default bullet.
+  const match = rawContent.match(/^\[( |x|X)\]\s+(.*)$/);
+  if (!match) return null;
+  const checked = match[1].toLowerCase() === "x";
+  const body = renderInlineMarkdown(match[2].trim()).replaceAll("\n", "<br>");
+  return {
+    checked,
+    html: `<input type="checkbox" disabled${checked ? " checked" : ""}> ${body}`,
+  };
+}
+
+export function renderMarkdown(value) {
+  // Mojibake repair runs at render time too so existing dirty rows display
+  // cleanly without a backfill. cleanText also normalizes line endings.
+  const source = cleanText(value);
+  if (!source.trim()) return "";
+
+  const blocks = [];
+  const lines = source.split("\n");
+  let paragraph = [];
+  let list = null;
+  let blockquote = null;
+
+  const flushParagraph = () => {
+    if (!paragraph.length) return;
+    blocks.push(renderParagraph(paragraph));
+    paragraph = [];
+  };
+
+  const flushList = () => {
+    if (!list) return;
+    const classAttr = list.taskList ? ' class="task-list"' : "";
+    blocks.push(
+      `<${list.type}${classAttr}>${list.items
+        .map((item) => `<li${item.taskClass ? ` class="${item.taskClass}"` : ""}>${item.html}</li>`)
+        .join("")}</${list.type}>`
+    );
+    list = null;
+  };
+
+  const flushBlockquote = () => {
+    if (!blockquote) return;
+    blocks.push(`<blockquote>${renderMarkdown(blockquote.join("\n"))}</blockquote>`);
+    blockquote = null;
+  };
+
+  const flushAll = () => {
+    flushParagraph();
+    flushList();
+    flushBlockquote();
+  };
+
+  for (let i = 0; i < lines.length; i += 1) {
+    const line = lines[i];
+
+    if (/^\s*```/.test(line)) {
+      flushAll();
+      const codeLines = [];
+      i += 1;
+      while (i < lines.length && !/^\s*```\s*$/.test(lines[i])) {
+        codeLines.push(lines[i]);
+        i += 1;
+      }
+      blocks.push(`<pre><code>${escapeHtml(codeLines.join("\n"))}</code></pre>`);
+      continue;
+    }
+
+    // Horizontal rule: a line of three+ dashes / asterisks / underscores.
+    if (/^\s*(?:-\s*){3,}\s*$/.test(line) || /^\s*(?:\*\s*){3,}\s*$/.test(line) || /^\s*(?:_\s*){3,}\s*$/.test(line)) {
+      flushAll();
+      blocks.push("<hr>");
+      continue;
+    }
+
+    // ATX header: 1-6 # followed by a space and content.
+    const header = line.match(/^\s{0,3}(#{1,6})\s+(.+?)\s*#*\s*$/);
+    if (header) {
+      flushAll();
+      const level = header[1].length;
+      blocks.push(`<h${level}>${renderInlineMarkdown(header[2])}</h${level}>`);
+      continue;
+    }
+
+    // Blockquote: `> ...`. We collect consecutive `>` lines, strip the leading
+    // marker, and recurse so quoted content can itself contain lists/headers.
+    const quoteMatch = line.match(/^\s{0,3}>\s?(.*)$/);
+    if (quoteMatch) {
+      flushParagraph();
+      flushList();
+      if (!blockquote) blockquote = [];
+      blockquote.push(quoteMatch[1]);
+      continue;
+    }
+    if (blockquote && !line.trim()) {
+      flushBlockquote();
+      continue;
+    }
+    flushBlockquote();
+
+    if (!line.trim()) {
+      flushParagraph();
+      flushList();
+      continue;
+    }
+
+    const ordered = line.match(/^\s*\d+[.)]\s+(.+)$/);
+    const unordered = line.match(/^\s*[-*+]\s+(.+)$/);
+    if (ordered || unordered) {
+      flushParagraph();
+      const type = ordered ? "ol" : "ul";
+      const content = (ordered || unordered)[1].trim();
+
+      let task = null;
+      if (unordered) task = renderTaskItem(content);
+
+      if (!list || list.type !== type || Boolean(list.taskList) !== Boolean(task)) {
+        flushList();
+        list = { type, items: [], taskList: Boolean(task) };
+      }
+
+      if (task) {
+        list.items.push({
+          html: task.html,
+          taskClass: task.checked ? "task-item task-item-done" : "task-item",
+        });
+      } else {
+        list.items.push({
+          html: renderInlineMarkdown(content).replaceAll("\n", "<br>"),
+        });
+      }
+      continue;
+    }
+
+    flushList();
+    paragraph.push(line);
+  }
+
+  flushAll();
+
+  return blocks.join("");
+}
+
 export function formatDate(value) {
   if (!value) return "";
   return new Intl.DateTimeFormat(undefined, {
@@ -37,6 +364,15 @@ export function ticketLabel(ticket) {
   return `#${ticket.number}`;
 }
 
+export function stateClassFor(ticketOrState) {
+  const source =
+    ticketOrState?.state_role || ticketOrState?.role || ticketOrState?.state_name || ticketOrState?.name || "state";
+  return String(source)
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-|-$/g, "") || "state";
+}
+
 export function canonicalTicketType(type) {
   if (type === "epic" || type === "feature" || type === "bug" || type === "task") return type;
   return "task";

package/public/js/kanban.js

@@ -12,12 +12,14 @@ import {
   typeLabel,
   priorityLabel,
   priorityKeyFor,
-  renderLabels
+  renderLabels,
+  renderMarkdown
 } from "./format.js";
 import { api, withBoardQuery } from "./api.js";
 import { navigate } from "./router.js";
 import { closeCreateFlyout, openCreateFlyout } from "./create-card.js";
 import { load } from "./app.js";
+import { bindCardContextMenu, closeCardActionMenu, createCardActionHandlers, setCardActionDragInFlight } from "./card-actions.js";
 import { unreadCount } from "./unread.js";
 
 export function renderBoard() {
@@ -65,11 +67,19 @@ export function renderBoard() {
     });
   });
 
+  const cardActionHandlers = createCardActionHandlers({ navigator: navigate });
   kanban.querySelectorAll(".card").forEach((card) => {
+    const ticket = tickets.find((item) => item.id === card.dataset.ticketId);
+    if (ticket) bindCardContextMenu(card, ticket, { handlers: cardActionHandlers, onBeforeOpen: closeCreateFlyout });
     // HTML5 DnD ends with a synthetic click on the source element; ignore that
     // follow-up click so dropping a card does not also open the detail drawer.
     let suppressClickAfterDrag = false;
     card.addEventListener("click", async (event) => {
+      const clickTarget = event.target instanceof Element ? event.target : event.target?.parentElement;
+      if (clickTarget?.closest("a")) {
+        event.stopPropagation();
+        return;
+      }
       if (suppressClickAfterDrag) {
         suppressClickAfterDrag = false;
         event.preventDefault();
@@ -96,10 +106,13 @@ export function renderBoard() {
       });
     }
     card.addEventListener("dragstart", (event) => {
+      closeCardActionMenu();
+      setCardActionDragInFlight(true);
       event.dataTransfer.setData("text/plain", card.dataset.ticketId);
       event.dataTransfer.effectAllowed = "move";
     });
     card.addEventListener("dragend", () => {
+      setCardActionDragInFlight(false);
       suppressClickAfterDrag = true;
       // If no click follows (e.g. drag cancelled oddly), do not eat the next real click.
       setTimeout(() => {
@@ -109,6 +122,14 @@ export function renderBoard() {
   });
 }
 
+export function renderBoardSelection() {
+  kanban.querySelectorAll(".card.selected").forEach((card) => card.classList.remove("selected"));
+  if (!state.selectedTicketId) return;
+  kanban
+    .querySelectorAll(`.card[data-ticket-id="${CSS.escape(state.selectedTicketId)}"]`)
+    .forEach((card) => card.classList.add("selected"));
+}
+
 function renderEmptyState(columnName) {
   const name = columnName.toLowerCase();
   let flair = {
@@ -336,7 +357,8 @@ function renderCard(ticket, { asEpicChild = false } = {}) {
   const priorityKey = priorityKeyFor(ticket.priority);
   const typeText = typeLabel(ticket.type).toUpperCase();
   const isExpanded = state.expandedCardIds.has(ticket.id);
-  const hasExpandable = (ticket.labels && ticket.labels.length) || ticket.parent_ticket || ticket.child_count;
+  const hasDescription = Boolean(String(ticket.description || "").trim());
+  const hasExpandable = hasDescription || (ticket.labels && ticket.labels.length) || ticket.parent_ticket || ticket.child_count;
 
   const triggerInner = `
     <span class="ticket-number">${escapeHtml(ticketLabel(ticket))}</span>
@@ -368,6 +390,7 @@ function renderCard(ticket, { asEpicChild = false } = {}) {
 
       ${hasExpandable ? `
         <div class="card-expandable">
+          ${hasDescription ? `<div class="card-description markdown-body">${renderMarkdown(ticket.description)}</div>` : ""}
           ${renderLabels(ticket.labels)}
           ${ticket.parent_ticket ? `<div class="parent-line">-> ${escapeHtml(ticketLabel(ticket.parent_ticket))}</div>` : ""}
           ${ticket.child_count ? `<div class="child-count">${ticket.child_count} feature${ticket.child_count === 1 ? "" : "s"} inside</div>` : ""}

package/public/js/local-backend.js

@@ -464,7 +464,6 @@ async function handleBoardPatch(boardId, body) {
     const board = await reqPromise(stores.boards.get(BOARD_ID));
     const ALLOWED = [
       "name",
-      "slug",
       "repo_url",
       "system_path",
       "default_branch",
@@ -472,7 +471,16 @@ async function handleBoardPatch(boardId, body) {
       "agent_instructions",
       "ai_enabled"
     ];
-    for (const k of ALLOWED) if (k in body) board[k] = body[k];
+    for (const k of ALLOWED) {
+      if (!(k in body)) continue;
+      if (k === "name") {
+        const name = String(body[k] || "").trim();
+        if (!name) throw err(400, "missing_name");
+        board[k] = name;
+      } else {
+        board[k] = body[k];
+      }
+    }
     board.updated_at = nowIso();
     stores.boards.put(board);
     recordEvent(stores, "board_updated", null, { fields: Object.keys(body) });
@@ -728,9 +736,6 @@ async function handleTicketContext(ticketId) {
     .map((tl) => snap.labels.find((l) => l.id === tl.label_id))
     .filter(Boolean)
     .map((l) => ({ ticket_id: ticketId, id: l.id, name: l.name, color: l.color }));
-  const comments = snap.comments
-    .filter((c) => c.ticket_id === ticketId)
-    .sort((a, b) => String(a.created_at).localeCompare(String(b.created_at)));
   const stateById = Object.fromEntries(snap.states.map((s) => [s.id, s]));
   const compact = (t) => {
     if (!t) return null;
@@ -775,13 +780,23 @@ async function handleTicketContext(ticketId) {
     ticket: { ...ticket, labels },
     board: snap.board,
     board_manual: { entries: snap.boardEntries.filter((e) => !e.struck_at) },
-    comments,
     parent_ticket: compact(parent),
     child_tickets: childTickets,
     relations,
     blockers: [],
-    related_tickets: [...childTickets, ...(parent ? [parent] : [])],
-    related_comments: []
+    related_tickets: [...childTickets, ...(parent ? [parent] : [])]
+  };
+}
+
+async function handleTicketComments(ticketId) {
+  const snap = await snapshotAll();
+  const ticket = snap.tickets.find((t) => t.id === ticketId && !t.archived_at);
+  if (!ticket) throw err(404, "ticket_not_found");
+  return {
+    ticket_id: ticketId,
+    comments: snap.comments
+      .filter((c) => c.ticket_id === ticketId)
+      .sort((a, b) => String(a.created_at).localeCompare(String(b.created_at)))
   };
 }
 
@@ -941,6 +956,7 @@ const ROUTES = [
   { m: "POST", re: /^\/api\/tickets\/([^/]+)\/archive$/, fn: (m) => handleTicketArchive(decodeURIComponent(m[1]), true) },
   { m: "POST", re: /^\/api\/tickets\/([^/]+)\/restore$/, fn: (m) => handleTicketArchive(decodeURIComponent(m[1]), false) },
   { m: "GET", re: /^\/api\/tickets\/([^/]+)\/context$/, fn: (m) => handleTicketContext(decodeURIComponent(m[1])) },
+  { m: "GET", re: /^\/api\/tickets\/([^/]+)\/comments$/, fn: (m) => handleTicketComments(decodeURIComponent(m[1])) },
   { m: "GET", re: /^\/api\/tickets\/([^/]+)\/history$/, fn: (m) => handleTicketHistory(decodeURIComponent(m[1])) },
   { m: "POST", re: /^\/api\/tickets\/([^/]+)\/comments$/, fn: (m, u, body) => handleCommentCreate(decodeURIComponent(m[1]), body) },
   { m: "POST", re: /^\/api\/relations$/, fn: (m, u, body) => handleRelationCreate(body) },

package/public/js/main.js

@@ -18,7 +18,14 @@ import {
 import { state } from "./state.js";
 import { api, withBoardQuery } from "./api.js";
 import { toast, debounce } from "./toast.js";
-import { navigate, applyRoute, syncUrlFromState, setRouterReady } from "./router.js";
+import {
+  navigate,
+  applyRoute,
+  currentRoute,
+  hasRoute,
+  syncUrlFromState,
+  setRouterReady
+} from "./router.js";
 import {
   openBoardFlyout,
   closeBoardFlyout,
@@ -125,14 +132,15 @@ async function init() {
 
   enableKanbanDragScroll();
 
+  const initialRoute = currentRoute();
+  if (initialRoute.boardSlug) state.boardSlug = initialRoute.boardSlug;
   await load();
 
-  // Activate the router. If the page was loaded with a hash, restore that
-  // view; otherwise canonicalize the URL to reflect the current state so the
-  // back button has a starting point.
+  // Activate the router. If the page was loaded with a hash route, restore
+  // that view; otherwise canonicalize the URL to reflect the current
+  // state so the back button has a starting point.
   setRouterReady(true);
-  const initialHash = location.hash;
-  if (initialHash && initialHash !== "#" && initialHash !== "#/") {
+  if (hasRoute()) {
     await applyRoute();
   } else {
     syncUrlFromState({ replace: true });

package/public/js/motion-preference.js

@@ -0,0 +1,53 @@
+export const REDUCE_MOTION_STORAGE_KEY = "mab_reduce_motion";
+
+function safeStorage(storage) {
+  try {
+    return storage ?? globalThis.localStorage ?? null;
+  } catch {
+    return null;
+  }
+}
+
+function defaultMediaMatcher(query) {
+  return typeof window !== "undefined" && typeof window.matchMedia === "function"
+    ? window.matchMedia(query)
+    : { matches: false };
+}
+
+export function storedReducedMotionPreference(storage = safeStorage()) {
+  const store = safeStorage(storage);
+  const value = store?.getItem?.(REDUCE_MOTION_STORAGE_KEY);
+  if (value === "true") return true;
+  if (value === "false") return false;
+  return null;
+}
+
+export function browserPrefersReducedMotion(mediaMatcher = defaultMediaMatcher) {
+  try {
+    return !!mediaMatcher("(prefers-reduced-motion: reduce)")?.matches;
+  } catch {
+    return false;
+  }
+}
+
+export function effectiveReducedMotionPreference({ storage = safeStorage(), mediaMatcher = defaultMediaMatcher } = {}) {
+  const stored = storedReducedMotionPreference(storage);
+  return stored ?? browserPrefersReducedMotion(mediaMatcher);
+}
+
+export function setReducedMotionPreference(reduce, storage = safeStorage()) {
+  const store = safeStorage(storage);
+  const value = reduce ? "true" : "false";
+  store?.setItem?.(REDUCE_MOTION_STORAGE_KEY, value);
+  return reduce;
+}
+
+export function applyReducedMotionPreference({
+  doc = globalThis.document,
+  storage = safeStorage(),
+  mediaMatcher = defaultMediaMatcher
+} = {}) {
+  const reduce = effectiveReducedMotionPreference({ storage, mediaMatcher });
+  doc?.documentElement?.setAttribute("data-reduced-motion", reduce ? "reduce" : "allow");
+  return reduce;
+}