@surething/cockpit 1.0.234 → 1.0.236

package/.next-prod/trace-build

@@ -1 +1 @@
-[{"name":"run-webpack","duration":20216814,"timestamp":210001581,"id":14,"parentId":1,"tags":{},"startTime":1782998700158,"traceId":"01c8448817b155b6"},{"name":"run-typescript","duration":18380914,"timestamp":230222194,"id":1604,"parentId":1,"tags":{},"startTime":1782998720378,"traceId":"01c8448817b155b6"},{"name":"static-check","duration":1181334,"timestamp":248649550,"id":1607,"parentId":1,"tags":{},"startTime":1782998738806,"traceId":"01c8448817b155b6"},{"name":"static-generation","duration":6411700,"timestamp":249973703,"id":1879,"parentId":1,"tags":{},"startTime":1782998740130,"traceId":"01c8448817b155b6"},{"name":"collect-build-traces","duration":20480963,"timestamp":249831652,"id":1876,"parentId":1,"tags":{},"startTime":1782998739988,"traceId":"01c8448817b155b6"},{"name":"telemetry-flush","duration":72,"timestamp":270317441,"id":1888,"parentId":1,"tags":{},"startTime":1782998760474,"traceId":"01c8448817b155b6"},{"name":"next-build","duration":60489593,"timestamp":209827934,"id":1,"tags":{"buildMode":"default","version":"16.2.6","bundler":"webpack","has-custom-webpack-config":"true","use-build-worker":"false"},"startTime":1782998699984,"traceId":"01c8448817b155b6"}]
+[{"name":"run-webpack","duration":13094140,"timestamp":92586508,"id":14,"parentId":1,"tags":{},"startTime":1783345301168,"traceId":"32a6e89d3c090b4d"},{"name":"run-typescript","duration":10343512,"timestamp":105683410,"id":1606,"parentId":1,"tags":{},"startTime":1783345314265,"traceId":"32a6e89d3c090b4d"},{"name":"static-check","duration":664290,"timestamp":116060179,"id":1609,"parentId":1,"tags":{},"startTime":1783345324641,"traceId":"32a6e89d3c090b4d"},{"name":"static-generation","duration":3406583,"timestamp":116960668,"id":1881,"parentId":1,"tags":{},"startTime":1783345325542,"traceId":"32a6e89d3c090b4d"},{"name":"collect-build-traces","duration":10918258,"timestamp":116724991,"id":1878,"parentId":1,"tags":{},"startTime":1783345325306,"traceId":"32a6e89d3c090b4d"},{"name":"telemetry-flush","duration":33,"timestamp":127645744,"id":1890,"parentId":1,"tags":{},"startTime":1783345336227,"traceId":"32a6e89d3c090b4d"},{"name":"next-build","duration":35156409,"timestamp":92489376,"id":1,"tags":{"buildMode":"default","version":"16.2.6","bundler":"webpack","has-custom-webpack-config":"true","use-build-worker":"false"},"startTime":1783345301071,"traceId":"32a6e89d3c090b4d"}]

package/README.md

@@ -26,7 +26,7 @@
 
 ---
 
-> **OpenCockpit is the open-source Claude Code GUI** — and a single canvas for whatever agent you bring next. Run multi-project Claude sessions out of the box; pop open a tab for **Codex, DeepSeek, Kimi, or local Ollama** whenever you need. Built-in terminal, Chrome control, PostgreSQL / MySQL / Redis bubbles, code review, and slash modes — all local.
+> **OpenCockpit is the open-source Claude Code GUI** — an IDE-like workbench for the whole dev loop, and a single canvas for whatever agent you bring next. Run multi-project Claude sessions out of the box; pop open a tab for **Codex, DeepSeek, Kimi, or local Ollama** whenever you need. Built-in terminal, Chrome control, PostgreSQL / MySQL / Redis bubbles, code review, and slash modes — all local. And it's web client–server: **self-host it on a shared dev box and every teammate gets a seat.**
 
 https://github.com/user-attachments/assets/18f1a5dc-64f3-4ff6-b9fc-9cd08181fbb8
 
@@ -53,6 +53,31 @@ Cockpit is the instrument panel. It does **not** replace Claude Code; it stands
 | No automation hooks | One-time / interval / cron-based **scheduled tasks** |
 | "Cloud relay" trust concerns | **Fully local**. No telemetry. Keys (Codex / DeepSeek / Kimi) stay in `~/.cockpit/settings.json` on your laptop. |
 
+### How it compares
+
+An honest snapshot as of July 2026 — each tool wins somewhere. Spotted an error? PRs welcome.
+
+|  | **OpenCockpit** | Claude Code Desktop (official) | Opcode |
+|---|---|---|---|
+| Positioning | **IDE-like workbench for the whole dev loop** | agent session companion | session manager for Claude Code |
+| Architecture | ✅ **web client–server** — deploy on a shared dev box; the whole team codes with AI in parallel, each on their own project / worktree | single-user desktop app | single-user desktop app |
+| Open source | ✅ MIT | ❌ closed source | ✅ AGPL-3.0 |
+| Engines | ✅ **Claude + Codex / DeepSeek / Kimi / Ollama** (BYOK) | Claude only | Claude only |
+| Parallel multi-project sessions | ✅ | ✅ | ✅ |
+| Agent-drivable browser & DB (Chrome / Postgres / MySQL / Redis) | ✅ Smart Bubbles | ❌ preview pane only | ❌ |
+| LAN-shared code review pages | ✅ | ❌ | ❌ |
+| Fully offline / air-gapped | ✅ via Ollama | ❌ | ❌ |
+| Phone / tablet access | ✅ any LAN browser — code runs on **your** machine | ✅ via Claude Code on the web (cloud sandbox) | ❌ desktop only |
+| Native desktop app | ❌ local web app (needs Node ≥ 20) | ✅ | ✅ Tauri |
+| Newest Claude Code features on day one | ⏳ tracks Agent SDK releases with a lag | ✅ first party | ❌ |
+| Automation triggers | one-time / interval / cron | ✅ Routines: cron + API + GitHub events | background agents |
+| Session checkpoints / rewind | pinning & forking only | ✅ | ✅ checkpoint timeline |
+| Usage / cost analytics | basic token counts | n/a (plan-based) | ✅ full dashboard |
+| Cost | GUI free (MIT); AI billed by whichever engine you bring — can be $0 with local Ollama | app free; needs a paid Claude plan or API billing | GUI free (AGPL); needs a paid Claude plan or API billing |
+| Actively maintained | ✅ | ✅ | ⚠️ last release Aug 2025 |
+
+**Pick Claude Code Desktop** if you live inside the Anthropic ecosystem and want first-party polish. **Pick Opcode** if you want a native desktop feel with checkpoints and cost analytics. **Pick OpenCockpit** if you want more than a chat window — an open-source, IDE-like cockpit that covers the whole dev loop (read code, drive your browser and databases, review, automate) with any engine you bring, even from your phone.
+
 ## Features
 
 ### Engines — Claude by default, bring any agent you want
@@ -126,6 +151,7 @@ Cockpit is the instrument panel. It does **not** replace Claude Code; it stands
 - **Solo dev, multi-repo:** "I have a refactor running in API, tests writing in Web, and a bug investigation in Pipeline — all at once, all visible."
 - **Day one in an unfamiliar repo:** Open it in Code Map, click through caller/callee pins, walk the auth flow in five clicks instead of a 90-minute file-tree scavenger hunt.
 - **Two-person team:** Senior reviews via LAN-shared review page, no GitHub PR round-trip needed for in-progress work.
+- **Team on a shared dev box:** self-host one Cockpit where the code lives — every teammate opens a browser, takes a seat, and runs their own AI sessions in their own project / worktree.
 - **Reviewing AI-generated PRs:** Switch the changed files into Code Map — changed functions are highlighted with their callers / callees still drawn around them, so blast-radius is one click away.
 - **Full-stack chore mode:** `/fx` in one tab on a backend bug, `/ex` in another to plan the frontend refactor, `/go` to land it — three slash modes, three different agent postures.
 - **Cheap second opinion:** Same prompt in two tabs — Claude in one, **DeepSeek v4-pro** in the other — compare answers before you trust either.

package/README.zh.md

@@ -26,7 +26,7 @@
 
 ---
 
-> **OpenCockpit 是开源的 Claude Code GUI** —— 也是你想接入的任何 Agent 的统一画布。多项目 Claude 会话开箱即用；想用 **Codex、DeepSeek、Kimi 或本地 Ollama**？直接新开一个 tab。内置终端、Chrome 自动化、PostgreSQL / MySQL / Redis 气泡、代码评审与斜杠模式 —— 全部本地。
+> **OpenCockpit 是开源的 Claude Code GUI** —— 贴合研发全流程的 IDE 式工作台，也是你想接入的任何 Agent 的统一画布。多项目 Claude 会话开箱即用；想用 **Codex、DeepSeek、Kimi 或本地 Ollama**？直接新开一个 tab。内置终端、Chrome 自动化、PostgreSQL / MySQL / Redis 气泡、代码评审与斜杠模式 —— 全部本地。Web client-server 架构：**自托管到共享开发机，全队一起飞。**
 
 https://github.com/user-attachments/assets/18f1a5dc-64f3-4ff6-b9fc-9cd08181fbb8
 
@@ -53,6 +53,31 @@ Cockpit 就是那个仪表盘。它**不替代** Claude Code，而是站在官
 | 没有自动化触发器 | 一次性 / 间隔 / **Cron** **定时任务** |
 | 担心"云端中转" | **完全本地**。无遥测，Codex / DeepSeek / Kimi 的 Key 仅存在本机 `~/.cockpit/settings.json` |
 
+### 横向对比
+
+截至 2026 年 7 月的实事求是快照 —— 每个工具都有赢的地方。发现错误？欢迎 PR 指正。
+
+|  | **OpenCockpit** | Claude Code Desktop（官方） | Opcode |
+|---|---|---|---|
+| 定位 | **贴合研发全流程的 IDE 式工作台** | Agent 会话伴侣 | Claude Code 会话管理器 |
+| 架构 | ✅ **Web client-server** —— 部署到共享开发机，全队一起飞，各占各的项目 / worktree | 单机桌面应用 | 单机桌面应用 |
+| 开源 | ✅ MIT | ❌ 闭源 | ✅ AGPL-3.0 |
+| 引擎 | ✅ **Claude + Codex / DeepSeek / Kimi / Ollama**（BYOK） | 仅 Claude | 仅 Claude |
+| 多项目并行会话 | ✅ | ✅ | ✅ |
+| Agent 可驱动浏览器 & 数据库（Chrome / Postgres / MySQL / Redis） | ✅ 智能气泡 | ❌ 仅只读预览面板 | ❌ |
+| 局域网共享评审页 | ✅ | ❌ | ❌ |
+| 全离线 / 内网隔离 | ✅ 走 Ollama | ❌ | ❌ |
+| 手机 / 平板可用 | ✅ 局域网任意浏览器 —— 代码跑在**你自己的**机器上 | ✅ 走 Claude Code on the web（云端沙箱） | ❌ 仅桌面 |
+| 原生桌面应用 | ❌ 本地 Web 应用（需 Node ≥ 20） | ✅ | ✅ Tauri |
+| 第一时间跟进 Claude Code 新特性 | ⏳ 跟随 Agent SDK 发版，有滞后 | ✅ 官方第一方 | ❌ |
+| 自动化触发 | 一次性 / 间隔 / cron | ✅ Routines：cron + API + GitHub 事件 | 后台 Agent |
+| 会话检查点 / 回滚 | 仅固定 & 分叉 | ✅ | ✅ 检查点时间线 |
+| 用量 / 成本分析 | 仅基础 token 计数 | 不适用（订阅制） | ✅ 完整仪表盘 |
+| 费用 | GUI 免费（MIT）；AI 按所带引擎计费 —— 本地 Ollama 可 ¥0 | 应用免费；需付费 Claude 订阅或 API 计费 | GUI 免费（AGPL）；需付费 Claude 订阅或 API 计费 |
+| 持续维护 | ✅ | ✅ | ⚠️ 最后发版 2025-08 |
+
+**选官方 Desktop**：深度绑定 Anthropic 生态、要第一方打磨体验。**选 Opcode**：要原生桌面手感 + 检查点 + 成本分析。**选 OpenCockpit**：你要的不只是一个聊天窗 —— 而是开源、IDE 式、贴合研发全流程的驾驶舱（读码、驱动浏览器和数据库、评审、自动化），引擎随你带，手机也能开。
+
 ## 功能特性
 
 ### 引擎 —— 默认 Claude，也接得住你想要的任何 Agent
@@ -126,6 +151,7 @@ Cockpit 就是那个仪表盘。它**不替代** Claude Code，而是站在官
 - **独立开发者多仓并行：** "API 在重构、Web 在写测试、Pipeline 在排 bug —— 同时跑、同时可见。"
 - **新仓库的第一天：** 用 Code Map 打开它，沿着 caller / callee pin 一路点过去 —— 鉴权流程 5 次点击就走完，不再是 90 分钟的"文件树找地鼠"。
 - **二人小团队：** Senior 用局域网共享评审页 review，半成品代码不用绕 GitHub PR。
+- **共享开发机团队：** 在代码所在的机器上自托管一个 Cockpit —— 队友打开浏览器就能一起飞，各自在自己的项目 / worktree 上跑 AI 会话。
 - **评审 AI 写的 PR：** 把改动文件切到 Code Map，**改动过的函数被高亮**，周围还画着它们的 caller / callee —— 一眼看清这次改动的爆炸半径。
 - **全栈杂活模式：** 后端 bug 一个 tab 跑 `/fx`，另一个 tab 跑 `/ex` 规划前端重构，最后 `/go` 落地 —— 三种姿态、三种 Agent 模式。
 - **便宜的二次意见：** 同一个 prompt 在两个 tab 跑 —— 一个 Claude、一个 **DeepSeek v4-pro**，对比答案后再决定相信谁。

package/bin/postinstall.mjs

@@ -6,6 +6,7 @@ import { fileURLToPath } from 'url';
 import { execSync } from 'child_process';
 import { homedir } from 'os';
 import { copyTreeSitterWasms } from '../scripts/copy-tree-sitter-wasms.mjs';
+import { copyPdfjsWorker } from '../scripts/copy-pdfjs-worker.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const projectRoot = join(__dirname, '..');
@@ -20,6 +21,13 @@ try {
   console.warn('[postinstall] tree-sitter WASM copy failed:', err?.message ?? err);
 }
 
+// pdf.js worker → public/pdfjs/. Same graceful contract as above.
+try {
+  copyPdfjsWorker(projectRoot);
+} catch (err) {
+  console.warn('[postinstall] pdf.js worker copy failed:', err?.message ?? err);
+}
+
 if (process.platform !== 'win32') {
   // node-pty: spawn-helper needs the executable bit
   try {

package/dist/{chunk-3M3JSZ5R.mjs → chunk-IQXDXTI7.mjs}

@@ -539,7 +539,7 @@ function fanout(state, ev) {
     }
   }
 }
-function startRun(key, cwd, promptText) {
+function startRun(key, cwd, promptText, runId) {
   const prev = registry.get(key);
   if (prev?.status === "running") return false;
   const prevSeq = prev?.seq ?? seqByKey.get(key) ?? 0;
@@ -547,18 +547,22 @@ function startRun(key, cwd, promptText) {
     if (prev.evictTimer) clearTimeout(prev.evictTimer);
     for (const k of prev.keys) registry.delete(k);
   }
+  const startedAt = Date.now();
   registry.set(key, {
     keys: /* @__PURE__ */ new Set([key]),
     cwd,
     status: "running",
     seq: prevSeq,
     events: [],
-    updatedAt: Date.now()
+    startedAt,
+    updatedAt: startedAt
   });
   if (promptText) {
     appendRun(key, {
       type: "user",
       _human: true,
+      ...runId ? { _turnId: runId } : {},
+      _ts: startedAt,
       message: { role: "user", content: promptText }
     });
   }
@@ -604,7 +608,7 @@ function markRunIdle(key, status = "idle") {
 function getRunSnapshot(key) {
   const r = registry.get(key);
   if (!r) return null;
-  return { status: r.status, seq: r.seq, events: r.events.slice() };
+  return { status: r.status, seq: r.seq, events: r.events.slice(), startedAt: r.startedAt };
 }
 function isRunActive(key) {
   return registry.get(key)?.status === "running";

package/dist/scheduledTasks.mjs

@@ -10,7 +10,7 @@ import {
   setRunAbort,
   startRun,
   updateGlobalState
-} from "./chunk-3M3JSZ5R.mjs";
+} from "./chunk-IQXDXTI7.mjs";
 import {
   AgentError,
   AppRuntime,
@@ -1697,7 +1697,7 @@ async function dispatchChat(spec, body, request) {
   let currentKey = sessionId || runId;
   let actualSessionId = sessionId;
   let isClosed = false;
-  if (!startRun(currentKey, cwd || "", promptText)) {
+  if (!startRun(currentKey, cwd || "", promptText, runId)) {
     return { ok: false, status: 409, error: "run already active" };
   }
   setRunAbort(currentKey, () => {
@@ -2593,7 +2593,7 @@ import { streamText, stepCountIs } from "ai";
 import { randomUUID as randomUUID3 } from "crypto";
 
 // packages/feature/agent/src/server/engines/ollama/session.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, existsSync, mkdirSync as mkdirSync2, appendFileSync } from "fs";
+import { readFileSync as readFileSync3, existsSync, mkdirSync as mkdirSync2, appendFileSync } from "fs";
 import { join as join3 } from "path";
 var SESSIONS_ROOT = join3(COCKPIT_DIR, "ollama-sessions");
 function getSessionDir(cwd) {
@@ -2606,22 +2606,16 @@ function readSessionMessages(cwd, sessionId) {
   const path2 = getSessionPath(cwd, sessionId);
   if (!existsSync(path2)) return [];
   const lines = readFileSync3(path2, "utf-8").split("\n").filter(Boolean);
-  const legacyMessages = [];
   const transcriptEntries = [];
   for (const line of lines) {
     try {
       const obj = JSON.parse(line);
-      if (typeof obj.role === "string" && "content" in obj) {
-        legacyMessages.push(obj);
-        continue;
-      }
       if (typeof obj.type === "string") {
         transcriptEntries.push(obj);
       }
     } catch {
     }
   }
-  if (transcriptEntries.length === 0) return legacyMessages;
   const toolNameById = /* @__PURE__ */ new Map();
   const toolCallIds = /* @__PURE__ */ new Set();
   const toolResultIds = /* @__PURE__ */ new Set();
@@ -16516,7 +16510,7 @@ function date4(params) {
 config(en_default());
 
 // packages/feature/agent/src/server/engines/ollama/tools.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { writeFile, mkdir, readdir, stat, unlink } from "fs/promises";
 import { isAbsolute, join as join4 } from "path";
 import { tmpdir as tmpdir2 } from "os";
@@ -16638,7 +16632,7 @@ function createTools(context) {
       execute: async ({ file_path, content }) => {
         try {
           if (!isAbsolute(file_path)) return "Error: file_path must be an absolute path.";
-          writeFileSync4(file_path, content, "utf-8");
+          writeFileSync3(file_path, content, "utf-8");
           return `File written: ${file_path}`;
         } catch (err) {
           return `Error writing file: ${err.message}`;
@@ -16669,7 +16663,7 @@ function createTools(context) {
             return `Error: old_string not found in ${file_path}. The file may have changed.`;
           }
           const updated = replace_all ? content.split(old_string).join(new_string) : content.replace(old_string, new_string);
-          writeFileSync4(file_path, updated, "utf-8");
+          writeFileSync3(file_path, updated, "utf-8");
           return `File edited: ${file_path}`;
         } catch (err) {
           return `Error editing file: ${err.message}`;
@@ -17252,7 +17246,7 @@ ${block.think}
 import { spawn as spawn3 } from "child_process";
 import { randomUUID as randomUUID5 } from "crypto";
 import { createInterface as createInterface2 } from "readline";
-import { writeFileSync as writeFileSync5, unlinkSync as unlinkSync2, mkdirSync as mkdirSync3, existsSync as existsSync2 } from "fs";
+import { writeFileSync as writeFileSync4, unlinkSync as unlinkSync2, mkdirSync as mkdirSync3, existsSync as existsSync2 } from "fs";
 import { join as join6 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 var MEDIA_EXT = {
@@ -17267,7 +17261,7 @@ function writeImagesToTemp(images) {
   return images.map((img, i) => {
     const ext = MEDIA_EXT[img.media_type] || ".png";
     const filePath = join6(dir, `img-${Date.now()}-${i}${ext}`);
-    writeFileSync5(filePath, Buffer.from(img.data, "base64"));
+    writeFileSync4(filePath, Buffer.from(img.data, "base64"));
     return filePath;
   });
 }

package/dist/wsServer.mjs

@@ -2,7 +2,7 @@ import {
   addRunListener,
   getGlobalSessionsSnapshot,
   getRunSnapshot
-} from "./chunk-3M3JSZ5R.mjs";
+} from "./chunk-IQXDXTI7.mjs";
 import {
   addExitListener,
   addOutputListener,
@@ -1186,6 +1186,9 @@ var handleSessionStream = (conn, sessionId) => Effect_exports.gen(function* () {
       type: "run-snapshot",
       status: snap.status,
       seq: snap.seq,
+      // Turn time-boundary: lets clients cut the in-flight turn's disk image by
+      // message timestamp instead of by prompt text (see useLiveStream).
+      startedAt: snap.startedAt,
       events: snap.events
     });
   } else {

package/next.config.mjs

@@ -12,8 +12,9 @@ const nextConfig = {
   // dev 和 prod 使用不同输出目录，避免 Turbopack 热更新影响 prod
   distDir: dev ? '.next' : '.next-prod',
   // Allow loading dev resources (HMR, /_next/*) through tunnels — needed to test
-  // the mobile /m route on a real phone via ngrok. Dev-only; wildcards cover the
-  // rotating ngrok hostnames so we don't have to edit this each session.
+  // the mobile /m route on a real phone via ngrok / Cloudflare quick tunnels.
+  // Dev-only; wildcards cover the rotating tunnel hostnames so we don't have to
+  // edit this each session.
   ...(dev
     ? {
         allowedDevOrigins: [
@@ -21,6 +22,7 @@ const nextConfig = {
           '*.ngrok-free.app',
           '*.ngrok.app',
           '*.ngrok.io',
+          '*.trycloudflare.com',
         ],
       }
     : {}),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@surething/cockpit",
-  "version": "1.0.234",
-  "description": "Claude Code GUI for parallel AI coding — drive Claude (default), Codex, DeepSeek, Kimi, or local Ollama in tabs. Multi-project sessions, terminal, browser & DB bubbles, code review, slash modes. Local-first, MIT.",
+  "version": "1.0.236",
+  "description": "The open-source Claude Code GUI — an IDE-like workbench for parallel AI coding. Drive Claude (default), Codex, DeepSeek, Kimi, or local Ollama in tabs. Terminal, browser & DB bubbles, code review. Self-host on a shared dev box — a seat for every teammate. Local-first, MIT.",
   "author": "Robert",
   "license": "MIT",
   "repository": {
@@ -38,9 +38,10 @@
     "ai-code-review",
     "agent-sdk",
     "coding-agent",
-    "parallel-ai",
+    "self-hosted",
+    "web-ide",
+    "remote-development",
     "multi-project-ai",
-    "cockpit",
     "opencockpit",
     "cursor-alternative",
     "aider-alternative",
@@ -73,14 +74,15 @@
     "kernels",
     "next.config.mjs",
     "scripts/copy-tree-sitter-wasms.mjs",
+    "scripts/copy-pdfjs-worker.mjs",
     "LICENSE",
     "README.md"
   ],
   "scripts": {
-    "predev": "node scripts/copy-tree-sitter-wasms.mjs",
+    "predev": "node scripts/copy-tree-sitter-wasms.mjs && node scripts/copy-pdfjs-worker.mjs",
     "dev": "COCKPIT_ENV=dev node --import tsx server.mjs",
     "prepublishOnly": "npm run build && npm run build:server && rm -rf .next-prod/cache",
-    "prebuild": "node scripts/copy-tree-sitter-wasms.mjs",
+    "prebuild": "node scripts/copy-tree-sitter-wasms.mjs && node scripts/copy-pdfjs-worker.mjs",
     "build": "next build --webpack",
     "build:server": "tsup --config tsup.server.ts",
     "setup": "npm run build && npm run build:server && npm link",
@@ -90,6 +92,7 @@
     "test:watch": "vitest",
     "generate-icons": "node scripts/generate-icons.js",
     "copy-wasms": "node scripts/copy-tree-sitter-wasms.mjs",
+    "copy-pdfjs-worker": "node scripts/copy-pdfjs-worker.mjs",
     "postinstall": "node bin/postinstall.mjs"
   },
   "dependencies": {
@@ -128,6 +131,7 @@
     "neo4j-driver": "^6.0.1",
     "next": "^16.2.6",
     "node-pty": "^1.1.0",
+    "pdfjs-dist": "^6.1.200",
     "pg": "^8.20.0",
     "react": "19.2.3",
     "react-dom": "19.2.3",

package/public/boot.js

@@ -14,7 +14,15 @@
     var onMobileRoute = path === '/m' || path.indexOf('/m/') === 0;
     var forceDesktop = false;
     try { forceDesktop = !!localStorage.getItem('cockpit-force-desktop'); } catch (_e) {}
+    // Never redirect inside an iframe: the desktop shell embeds /project in a
+    // frame that is 42px (sidebar) narrower than the window, so a tablet-width
+    // top page (e.g. 768px iPad) would otherwise nest the mobile UI inside the
+    // desktop shell — and drop the sessionId in the process. The media query is
+    // only meaningful for the top-level viewport.
+    var isTopWindow = true;
+    try { isTopWindow = window.self === window.top; } catch (_e) {}
     if (
+      isTopWindow &&
       !onMobileRoute &&
       !forceDesktop &&
       window.matchMedia &&