@tensorix/metahub 0.5.1 → 0.5.3

package/dist/index.js

@@ -12,19 +12,43 @@ var __esm = (fn, res, err) => () => {
 };
 
 // src/core/errors.ts
+function interpolateMsg(s, params) {
+  return params ? s.replace(/\{(\w+)\}/g, (m, k) => (k in params) ? String(params[k]) : m) : s;
+}
+function mhError(code, key, params) {
+  return new MhError(code, interpolateMsg(key, params), { key, params });
+}
+function isSqliteBusy(e) {
+  if (!(e instanceof Error))
+    return false;
+  const code = e.code;
+  if (typeof code === "string" && SQLITE_BUSY_RE.test(code))
+    return true;
+  return e.message === "database is locked";
+}
+function asMhError(e) {
+  if (e instanceof MhError)
+    return e;
+  if (isSqliteBusy(e))
+    return mhError("busy", "\u6570\u636E\u5E93\u6B63\u88AB\u53E6\u4E00\u4E2A\u8FDB\u7A0B\u5199\u5165\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5");
+  return null;
+}
 function errorCode(e) {
-  return e instanceof MhError ? e.code : undefined;
+  return asMhError(e)?.code;
 }
-var MhError;
+var MhError, SQLITE_BUSY_RE;
 var init_errors = __esm(() => {
   MhError = class MhError extends Error {
     code;
-    constructor(code, message) {
+    i18n;
+    constructor(code, message, i18n) {
       super(message);
       this.code = code;
+      this.i18n = i18n;
       this.name = "MhError";
     }
   };
+  SQLITE_BUSY_RE = /^SQLITE_(BUSY|LOCKED)/;
 });
 
 // src/core/paths.ts
@@ -41,6 +65,12 @@ function cacheDir() {
 }
 var init_paths = () => {};
 
+// src/core/driver.ts
+function writeTx(db, fn) {
+  const tx = db.transaction(fn);
+  return (tx.immediate ?? tx)();
+}
+
 // src/core/schema.ts
 var CORE_SCHEMA = `
 CREATE TABLE IF NOT EXISTS meta (
@@ -352,6 +382,22 @@ CREATE TABLE IF NOT EXISTS blob_policy (
   redundancy  TEXT,              -- 'all' | 'any'
   __deleted   INTEGER NOT NULL DEFAULT 0
 );
+
+-- Synced device roster (system tier, see tables.ts): one row per node id, written
+-- by the device itself on open (describeSelf) and by anyone who renames it.
+-- Replicates so every device shows the same name and icon for a peer \u2014 the only
+-- record a purely bucket-joined device leaves besides its oplog stream. Each
+-- column is its own LWW register, so a rename and a platform refresh never
+-- clobber each other. meta.node_label survives as a node-local read fallback.
+CREATE TABLE IF NOT EXISTS nodes (
+  id          TEXT PRIMARY KEY,  -- node_id
+  label       TEXT,              -- shared display name; any device may set it
+  platform    TEXT,              -- macos | windows | linux | ios | android | web
+  form        TEXT,              -- laptop | desktop | phone | server | browser
+  app         TEXT,              -- cli | server | desktop | web
+  first_seen  INTEGER,           -- epoch ms of the device's first self-description
+  __deleted   INTEGER NOT NULL DEFAULT 0
+);
 `, FTS_SCHEMA = `
 CREATE VIRTUAL TABLE IF NOT EXISTS search_fts USING fts5(
   kind UNINDEXED,
@@ -410,30 +456,142 @@ function getNodeId(db) {
   db.query("INSERT INTO meta (key, value) VALUES ('node_id', ?)").run(id);
   return id;
 }
-function getNodeLabel(db) {
+function readNodeMeta(db, nodeId) {
+  const r = db.query(`SELECT ${NODE_COLS} FROM nodes WHERE id = ? AND __deleted = 0`).get(nodeId);
+  return r ? rowToMeta(r) : null;
+}
+function listNodeMeta(db) {
+  return db.query(`SELECT ${NODE_COLS} FROM nodes WHERE __deleted = 0`).all().map(rowToMeta);
+}
+function legacySelfLabel(db) {
   const row = db.query("SELECT value FROM meta WHERE key = 'node_label'").get();
   return row?.value ?? null;
 }
-function setNodeLabel(db, label) {
-  if (label == null || label.trim() === "") {
+function mirrorLegacySelfLabel(db, label) {
+  if (label == null) {
     db.query("DELETE FROM meta WHERE key = 'node_label'").run();
     return;
   }
-  db.query("INSERT INTO meta (key, value) VALUES ('node_label', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(label.trim());
+  db.query("INSERT INTO meta (key, value) VALUES ('node_label', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(label);
+}
+function nodeLabelOf(db, nodeId) {
+  const synced = readNodeMeta(db, nodeId)?.label;
+  if (synced)
+    return synced;
+  const peer = db.query("SELECT label FROM peers WHERE node_id = ? AND label IS NOT NULL AND label <> '' LIMIT 1").get(nodeId);
+  if (peer?.label)
+    return peer.label;
+  return nodeId === getNodeId(db) ? legacySelfLabel(db) : null;
+}
+function getNodeLabel(db) {
+  return nodeLabelOf(db, getNodeId(db));
+}
+function setNodeLabel(db, label, nodeId) {
+  const id = nodeId ?? getNodeId(db);
+  const next = label == null || label.trim() === "" ? null : label.trim();
+  const cur = readNodeMeta(db, id);
+  if (id === getNodeId(db))
+    mirrorLegacySelfLabel(db, next);
+  if (cur && cur.label === next)
+    return;
+  if (!cur && next == null)
+    return;
+  withChangeGroup(db, "node", () => {
+    emit(db, "nodes", id, "label", next);
+  });
+}
+function describeSelf(db, info = {}) {
+  const id = getNodeId(db);
+  const cur = readNodeMeta(db, id);
+  const fields = {};
+  if (info.platform !== undefined && (cur?.platform ?? null) !== info.platform)
+    fields.platform = info.platform;
+  if (info.form !== undefined && (cur?.form ?? null) !== info.form)
+    fields.form = info.form;
+  if (info.app !== undefined && (cur?.app ?? null) !== info.app)
+    fields.app = info.app;
+  if (cur?.first_seen == null)
+    fields.first_seen = info.now ?? Date.now();
+  if (!cur?.label) {
+    const seed = legacySelfLabel(db) ?? info.defaultLabel ?? null;
+    if (seed)
+      fields.label = seed;
+  }
+  if (Object.keys(fields).length > 0) {
+    withChangeGroup(db, "node", () => {
+      for (const [col, v] of Object.entries(fields))
+        emit(db, "nodes", id, col, v);
+    });
+  }
+  return readNodeMeta(db, id);
+}
+function platformFromProcess(p) {
+  switch (p) {
+    case "darwin":
+      return "macos";
+    case "win32":
+      return "windows";
+    case "linux":
+      return "linux";
+    case "android":
+      return "android";
+    default:
+      return null;
+  }
+}
+function defaultForm(platform, app) {
+  if (app === "web")
+    return "browser";
+  if (platform === "ios" || platform === "android")
+    return "phone";
+  if (platform === "linux")
+    return "server";
+  if (platform === "macos" || platform === "windows")
+    return "laptop";
+  return null;
 }
 function displayNodes(db) {
   const self = getNodeId(db);
-  const peers = db.query("SELECT node_id, label FROM peers WHERE node_id IS NOT NULL AND node_id <> '' GROUP BY node_id").all();
-  return [
-    { node_id: self, label: getNodeLabel(db), self: true },
-    ...peers.filter((p) => p.node_id !== self).map((p) => ({ ...p, self: false }))
-  ];
+  const ids = new Set([self]);
+  for (const r of listNodeMeta(db))
+    ids.add(r.node_id);
+  const peers = db.query("SELECT node_id FROM peers WHERE node_id IS NOT NULL AND node_id <> '' GROUP BY node_id").all();
+  for (const p of peers)
+    ids.add(p.node_id);
+  const out = [...ids].map((node_id) => {
+    const m = readNodeMeta(db, node_id);
+    return {
+      node_id,
+      label: nodeLabelOf(db, node_id),
+      self: node_id === self,
+      platform: m?.platform ?? null,
+      form: m?.form ?? null,
+      app: m?.app ?? null
+    };
+  });
+  out.sort((a, b) => Number(b.self) - Number(a.self));
+  return out;
 }
+var NODE_COLS = "id, label, platform, form, app, first_seen", rowToMeta = (r) => ({
+  node_id: r.id,
+  label: r.label,
+  platform: r.platform ?? null,
+  form: r.form ?? null,
+  app: r.app ?? null,
+  first_seen: r.first_seen
+});
 var init_node = __esm(() => {
   init_ids();
+  init_crdt();
 });
 
 // src/core/hlc.ts
+function hlcSkewBound(now) {
+  return formatHlc({ millis: now + HLC_MAX_SKEW_MS, counter: MAX_HLC_COUNTER, node: "~~~~~~~~" });
+}
+function isSkewedHlc(hlc, now) {
+  return hlc > hlcSkewBound(now);
+}
 function carryCounter(millis, counter) {
   if (counter <= MAX_HLC_COUNTER)
     return { millis, counter };
@@ -464,6 +622,8 @@ function writeLast(db, h) {
 }
 function nextHlc(db, node, now = Date.now()) {
   const last = readLast(db, node);
+  if (last.millis > now + HLC_MAX_SKEW_MS)
+    throw mhError("clock_skew", "\u672C\u673A\u903B\u8F91\u65F6\u949F\u6BD4\u7CFB\u7EDF\u65F6\u95F4\u8D85\u524D {min} \u5206\u949F\uFF08\u7CFB\u7EDF\u65F6\u949F\u66FE\u88AB\u8C03\u9519\uFF0C\u6216\u6536\u5230\u8FC7\u65F6\u949F\u9519\u8BEF\u8BBE\u5907\u7684\u6570\u636E\uFF09\uFF0C\u8FD0\u884C mh repair --clock \u4FEE\u590D", { min: Math.ceil((last.millis - now) / 60000) });
   const millis = Math.max(last.millis, now);
   const counter = millis === last.millis ? last.counter + 1 : 0;
   const h = { ...carryCounter(millis, counter), node };
@@ -475,6 +635,8 @@ function observeHlc(db, node, remote, now = Date.now()) {
   const r = parseHlc(remote);
   if (!Number.isFinite(r.millis) || !Number.isFinite(r.counter))
     return;
+  if (r.millis > now + HLC_MAX_SKEW_MS)
+    return;
   const millis = Math.max(last.millis, r.millis, now);
   let counter;
   if (millis === last.millis && millis === r.millis)
@@ -487,7 +649,18 @@ function observeHlc(db, node, remote, now = Date.now()) {
     counter = 0;
   writeLast(db, { ...carryCounter(millis, counter), node });
 }
-var MAX_HLC_COUNTER = 65535;
+function persistedHlc(db) {
+  const row = db.query("SELECT value FROM meta WHERE key = 'hlc'").get();
+  return row ? parseHlc(row.value) : null;
+}
+function resetHlc(db, node, now = Date.now()) {
+  writeLast(db, { millis: now, counter: 0, node });
+}
+var MAX_HLC_COUNTER = 65535, HLC_MAX_SKEW_MS;
+var init_hlc = __esm(() => {
+  init_errors();
+  HLC_MAX_SKEW_MS = 5 * 60000;
+});
 
 // src/core/blocks.ts
 function parseDocBlocks(md) {
@@ -590,6 +763,78 @@ function lcs(a, b) {
   return pairs;
 }
 
+// src/core/history-cache.ts
+function cacheFor(db) {
+  let c = caches.get(db);
+  if (!c) {
+    c = { docs: new Map, blockToDoc: new Map };
+    caches.set(db, c);
+  }
+  return c;
+}
+function dropDoc(c, docId) {
+  const e = c.docs.get(docId);
+  if (!e)
+    return;
+  c.docs.delete(docId);
+  for (const b of e.blockIds)
+    if (c.blockToDoc.get(b) === docId)
+      c.blockToDoc.delete(b);
+}
+function getDocHistory(db, docId) {
+  const c = caches.get(db);
+  const e = c?.docs.get(docId);
+  if (!c || !e)
+    return;
+  c.docs.delete(docId);
+  c.docs.set(docId, e);
+  return e;
+}
+function setDocHistory(db, docId, changes, blockIds) {
+  const c = cacheFor(db);
+  dropDoc(c, docId);
+  const entry = { changes, blockIds: new Set(blockIds), revisions: null, states: new Map };
+  c.docs.set(docId, entry);
+  for (const b of entry.blockIds)
+    c.blockToDoc.set(b, docId);
+  while (c.docs.size > MAX_DOCS)
+    dropDoc(c, c.docs.keys().next().value);
+  return entry;
+}
+function rememberDocState(entry, at, state) {
+  if (entry.states.size >= MAX_STATES)
+    entry.states.delete(entry.states.keys().next().value);
+  entry.states.set(at, state);
+}
+function noteChange(db, dataset, rowId, col, value) {
+  const c = caches.get(db);
+  if (!c)
+    return;
+  if (dataset === "documents") {
+    dropDoc(c, rowId);
+    return;
+  }
+  if (dataset !== "doc_blocks")
+    return;
+  const owner = c.blockToDoc.get(rowId);
+  if (owner)
+    dropDoc(c, owner);
+  if (col === "doc_id" && value) {
+    try {
+      const target = JSON.parse(value);
+      if (typeof target === "string")
+        dropDoc(c, target);
+    } catch {}
+  }
+}
+function invalidateHistory(db) {
+  caches.delete(db);
+}
+var caches, MAX_DOCS = 16, MAX_STATES = 64;
+var init_history_cache = __esm(() => {
+  caches = new WeakMap;
+});
+
 // src/core/intent-retention.ts
 function safeNow(now) {
   return Math.max(0, Math.trunc(Number.isFinite(now) ? now : Date.now()));
@@ -638,27 +883,27 @@ function withNodeId(node, fn) {
     currentNodeOverride = prev;
   }
 }
-function withChangeGroup(label, fn) {
+function withChangeGroup(db, label, fn) {
   if (currentTxn !== null)
     return fn();
   currentTxn = (currentActor ? currentActor + "/" : "") + (label ? label + ":" : "") + randomSuffix(8);
   try {
-    return fn();
+    return writeTx(db, fn);
   } finally {
     currentTxn = null;
   }
 }
-function withTxnId(txn, fn) {
+function withTxnId(db, txn, fn) {
   const prev = currentTxn;
   currentTxn = txn;
   try {
-    return fn();
+    return writeTx(db, fn);
   } finally {
     currentTxn = prev;
   }
 }
 function grouped(fn, label = null) {
-  return (...args) => withChangeGroup(label, () => fn(...args));
+  return (db, ...args) => withChangeGroup(db, label, () => fn(db, ...args));
 }
 function decodeMaterializeValue(dataset, col, valueJson) {
   if (valueJson !== null)
@@ -705,6 +950,16 @@ function materialize(db, dataset, rowId, col, valueJson) {
     }
     return;
   }
+  if (dataset === "databases" && col.startsWith("meta.")) {
+    ensureRow(db, "databases", rowId);
+    const key = col.slice(5);
+    if (valueJson === null) {
+      db.query(`UPDATE databases SET meta = json_remove(coalesce(meta, '{}'), '$."' || ? || '"') WHERE id = ?`).run(key, rowId);
+    } else {
+      db.query(`UPDATE databases SET meta = json_set(coalesce(meta, '{}'), '$."' || ? || '"', json(?)) WHERE id = ?`).run(key, valueJson, rowId);
+    }
+    return;
+  }
   const d = DOMAIN[dataset];
   if (!d || !d.cols.has(col))
     return;
@@ -722,6 +977,8 @@ function materialize(db, dataset, rowId, col, valueJson) {
 function applyChange(db, c) {
   const inserted = db.query("INSERT OR IGNORE INTO crdt_changes (hlc, node_id, dataset, row_id, col, value, txn) VALUES (?, ?, ?, ?, ?, ?, ?)").run(c.hlc, c.node_id, c.dataset, c.row_id, c.col, c.value, c.txn ?? null).changes > 0;
   const cur = db.query("SELECT MAX(hlc) AS h FROM crdt_changes WHERE dataset = ? AND row_id = ? AND col = ?").get(c.dataset, c.row_id, c.col);
+  if (inserted)
+    noteChange(db, c.dataset, c.row_id, c.col, c.value);
   if (cur.h !== c.hlc)
     return { inserted, winner: false };
   try {
@@ -735,18 +992,21 @@ function applyChange(db, c) {
   return { inserted, winner: true };
 }
 function emit(db, dataset, rowId, col, value) {
-  const node = currentNodeOverride ?? getNodeId(db);
-  const change = {
-    hlc: nextHlc(db, node),
-    node_id: node,
-    dataset,
-    row_id: rowId,
-    col,
-    value: value === undefined ? null : JSON.stringify(value),
-    txn: currentTxn
+  const mint = () => {
+    const node = currentNodeOverride ?? getNodeId(db);
+    const change = {
+      hlc: nextHlc(db, node),
+      node_id: node,
+      dataset,
+      row_id: rowId,
+      col,
+      value: value === undefined ? null : JSON.stringify(value),
+      txn: currentTxn
+    };
+    applyChange(db, change);
+    return change;
   };
-  applyChange(db, change);
-  return change;
+  return currentTxn !== null ? mint() : writeTx(db, mint);
 }
 function emitFields(db, dataset, rowId, fields) {
   const out = [];
@@ -756,16 +1016,24 @@ function emitFields(db, dataset, rowId, fields) {
   return out;
 }
 function ingest(db, changes, opts = {}) {
+  return ingestDetailed(db, changes, opts).received;
+}
+function ingestDetailed(db, changes, opts = {}) {
   const now = opts.now ?? Date.now();
   pruneExpiredIntentReceipts(db, now);
   const node = getNodeId(db);
   let received = 0;
   let poisoned = 0;
-  const tx = db.transaction((cs) => {
-    for (const c of cs) {
+  const skewed = {};
+  const tx = () => {
+    for (const c of changes) {
       if (isExpiredIntentReceipt(c, now))
         continue;
-      observeHlc(db, node, c.hlc);
+      if (isSkewedHlc(c.hlc, now)) {
+        skewed[c.node_id] = (skewed[c.node_id] ?? 0) + 1;
+        continue;
+      }
+      observeHlc(db, node, c.hlc, now);
       try {
         if (applyChange(db, c).inserted)
           received++;
@@ -774,11 +1042,13 @@ function ingest(db, changes, opts = {}) {
         console.error(`[ingest] skipped a change that failed to apply (dataset=${c.dataset} col=${c.col} row=${c.row_id}): ${e.message}`);
       }
     }
-  });
-  tx(changes);
+  };
+  writeTx(db, tx);
   if (poisoned)
     console.error(`[ingest] ${poisoned} change(s) skipped this batch (see above)`);
-  return received;
+  for (const [n, k] of Object.entries(skewed))
+    console.error(`[ingest] refused ${k} change(s) from node ${n}: stamped more than 5 min in the future (that device should run mh repair --clock)`);
+  return { received, skewed };
 }
 function changesSince(db, since, opts = {}) {
   const rows = db.query(`SELECT ${CHANGE_SELECT} FROM crdt_changes WHERE hlc > ? ORDER BY hlc`).all(since);
@@ -814,7 +1084,9 @@ function changesAfterSeq(db, seq, opts = {}) {
 var CHANGE_COLS, CHANGE_SELECT, currentTxn = null, currentActor = null, ACTOR_TAG_RE, currentNodeOverride = null, DOMAIN, RECORD_META, OPLOG_ONLY_DATASETS, NOT_NULL_ZERO_COLS;
 var init_crdt = __esm(() => {
   init_node();
+  init_hlc();
   init_ids();
+  init_history_cache();
   init_intent_retention();
   CHANGE_COLS = ["hlc", "node_id", "dataset", "row_id", "col", "value", "txn"];
   CHANGE_SELECT = CHANGE_COLS.join(", ");
@@ -870,6 +1142,10 @@ var init_crdt = __esm(() => {
     blob_policy: {
       table: "blob_policy",
       cols: new Set(["full_nodes", "redundancy", "__deleted"])
+    },
+    nodes: {
+      table: "nodes",
+      cols: new Set(["label", "platform", "form", "app", "first_seen", "__deleted"])
     }
   };
   RECORD_META = new Set(["database_id", "created_hlc", "order_key", "__deleted"]);
@@ -887,7 +1163,8 @@ var init_crdt = __esm(() => {
     "sites:spa",
     "site_channels:__deleted",
     "site_files:__deleted",
-    "blob_policy:__deleted"
+    "blob_policy:__deleted",
+    "nodes:__deleted"
   ]);
 });
 
@@ -1116,7 +1393,19 @@ var init_properties = __esm(() => {
 function rowOut(r) {
   if (!r)
     return null;
-  return { ...r, meta: r.meta === null ? null : JSON.parse(r.meta) };
+  const meta = r.meta === null ? null : JSON.parse(r.meta);
+  return { ...r, meta: meta && Object.keys(meta).length ? meta : null };
+}
+function emitMetaPatch(db, id, cur, patch) {
+  for (const [k, v] of Object.entries(patch)) {
+    if (k.includes("."))
+      throw new MhError("invalid_input", `meta key must not contain ".": ${k}`);
+    const next = v === undefined ? null : v;
+    const prev = cur && k in cur ? cur[k] : null;
+    if (JSON.stringify(prev ?? null) === JSON.stringify(next ?? null))
+      continue;
+    emit(db, "databases", id, `meta.${k}`, next === null ? undefined : next);
+  }
 }
 function getDatabase(db, id) {
   return rowOut(db.query(`SELECT ${DATABASE_SELECT} FROM databases WHERE id = ? AND __deleted = 0`).get(id));
@@ -1155,7 +1444,9 @@ var init_databases = __esm(() => {
     if (fields.meta !== undefined) {
       if (fields.meta !== null && (typeof fields.meta !== "object" || Array.isArray(fields.meta)))
         throw new MhError("invalid_input", "meta must be a JSON object or null");
-      emit(db, "databases", id, "meta", fields.meta);
+      const cur = getDatabase(db, id).meta;
+      const patch = fields.meta ?? Object.fromEntries(Object.keys(cur ?? {}).map((k) => [k, null]));
+      emitMetaPatch(db, id, cur, patch);
     }
     return getDatabase(db, id);
   });
@@ -1169,8 +1460,7 @@ var init_databases = __esm(() => {
     });
     if (src.meta !== null) {
       const { collapsed: _hidden, ...meta } = src.meta;
-      if (Object.keys(meta).length)
-        emit(db, "databases", dup.id, "meta", meta);
+      emitMetaPatch(db, dup.id, null, meta);
     }
     const propIdMap = new Map;
     const selfRelNew = new Set;
@@ -1298,7 +1588,37 @@ ${fmt(shown)}
 function resolveRef(db, ref, opts = {}) {
   return resolveEntity(db, ref, opts).id;
 }
-var SPECS, PUBLIC_KINDS, HI = "{";
+function lookupCandidates(db, ref, opts = {}) {
+  const trimmed = ref.trim();
+  if (!trimmed)
+    return [];
+  const limit = Math.max(1, Math.min(opts.limit ?? LOOKUP_LIMIT, 100));
+  const cands = resolveCandidates(db, trimmed).filter((c) => c.kind !== "prop");
+  cands.sort((a, b) => Number(b.id === trimmed) - Number(a.id === trimmed));
+  const titleCache = new Map;
+  const out = [];
+  for (const c of cands.slice(0, limit)) {
+    if (c.kind === "db") {
+      out.push({ ...c, database_id: null });
+      continue;
+    }
+    const row = db.query(`SELECT database_id FROM ${SPECS[c.kind].table} WHERE id = ?`).get(c.id);
+    const databaseId = row?.database_id ?? null;
+    let label = c.label;
+    if (c.kind === "rec" && !label && databaseId) {
+      if (!titleCache.has(databaseId))
+        titleCache.set(databaseId, titlePropId(db, databaseId));
+      const tp = titleCache.get(databaseId);
+      if (tp) {
+        const t = db.query(`SELECT data ->> '${tp.replace(/'/g, "''")}' AS title FROM records WHERE id = ?`).get(c.id);
+        label = t?.title ? String(t.title) : "";
+      }
+    }
+    out.push({ kind: c.kind, id: c.id, label, database_id: databaseId });
+  }
+  return out;
+}
+var SPECS, PUBLIC_KINDS, HI = "{", LOOKUP_LIMIT = 20;
 var init_resolve = __esm(() => {
   init_ids();
   init_errors();
@@ -1999,25 +2319,6 @@ var init_documents = __esm(() => {
       throw new MhError("invalid_input", `anchor not found: no match for --old`);
     if (count > 1 && !opts.replaceAll)
       throw new MhError("ambiguous", `${count} matches for --old; add surrounding context or use --replace-all`);
-    if (!opts.old.includes(`
-
-`)) {
-      const affected = blocks.filter((b) => b.text.includes(opts.old));
-      const next = affected.map((b) => opts.replaceAll ? b.text.replaceAll(opts.old, () => opts.new) : b.text.replace(opts.old, () => opts.new));
-      if (next.every((t) => t.length > 0 && !t.includes(`
-
-`))) {
-        const targets = opts.replaceAll ? affected : affected.slice(0, 1);
-        let wrote = false;
-        targets.forEach((b, i) => {
-          if (next[i] !== b.text) {
-            emit(db, "doc_blocks", b.id, "text", next[i]);
-            wrote = true;
-          }
-        });
-        return { id, changed: wrote, replaced: opts.replaceAll ? count : 1, version: documentVersion(db, id) };
-      }
-    }
     const newBody = opts.replaceAll ? body.replaceAll(opts.old, () => opts.new) : body.replace(opts.old, () => opts.new);
     reconcileBody(db, id, newBody);
     return { id, changed: newBody !== body, replaced: opts.replaceAll ? count : 1, version: documentVersion(db, id) };
@@ -2205,20 +2506,17 @@ function cacheStats(db) {
 }
 function knownNodes(db) {
   const self = getNodeId(db);
-  const byId = new Map;
-  byId.set(self, getNodeLabel(db));
-  const peers = db.query("SELECT node_id, label FROM peers WHERE node_id IS NOT NULL").all();
-  for (const p of peers)
-    if (!byId.get(p.node_id))
-      byId.set(p.node_id, p.label ?? byId.get(p.node_id) ?? null);
-  const grants = db.query("SELECT DISTINCT node_id FROM peer_grants WHERE node_id IS NOT NULL").all();
-  for (const g of grants)
-    if (!byId.has(g.node_id))
-      byId.set(g.node_id, null);
-  return [...byId.entries()].map(([nodeId, label]) => ({ nodeId, label, self: nodeId === self }));
+  const ids = new Set([self]);
+  for (const r of db.query("SELECT id FROM nodes WHERE __deleted = 0").all())
+    ids.add(r.id);
+  for (const p of db.query("SELECT DISTINCT node_id FROM peers WHERE node_id IS NOT NULL").all())
+    ids.add(p.node_id);
+  for (const g of db.query("SELECT DISTINCT node_id FROM peer_grants WHERE node_id IS NOT NULL").all())
+    ids.add(g.node_id);
+  return [...ids].map((nodeId) => ({ nodeId, label: nodeLabelOf(db, nodeId), self: nodeId === self }));
 }
 var POLICY_ID = "default", blobBytesResolver = null, setFullNodes = (db, nodeIds) => {
-  withChangeGroup(null, () => {
+  withChangeGroup(db, null, () => {
     const seen = new Set;
     const list = nodeIds.filter((n) => n && !seen.has(n) && seen.add(n) != null);
     emit(db, "blob_policy", POLICY_ID, "full_nodes", list);
@@ -2281,7 +2579,7 @@ function migrateRecords(db) {
     db.exec("ALTER TABLE records ADD COLUMN order_key TEXT");
   if (!tableExists3(db, "record_values"))
     return;
-  const tx = db.transaction(() => {
+  writeTx(db, () => {
     db.exec(`
       UPDATE records SET data = coalesce((
         SELECT json_group_object(rv.property_id, json(rv.value))
@@ -2292,7 +2590,6 @@ function migrateRecords(db) {
     db.exec("DROP TABLE record_values");
     backfillRecordOrderKeys(db);
   });
-  tx();
   backfillRecordOrderKeys(db);
 }
 function migrateShares(db) {
@@ -2350,7 +2647,7 @@ function migrateOplog(db) {
 function migrateCrdtChangesSeq(db) {
   if (hasColumn(db, "crdt_changes", "seq"))
     return;
-  const tx = db.transaction(() => {
+  writeTx(db, () => {
     db.exec(`
       DROP TABLE IF EXISTS crdt_changes_new;
       CREATE TABLE crdt_changes_new (
@@ -2380,7 +2677,6 @@ function migrateCrdtChangesSeq(db) {
     if (tableExists3(db, "peers"))
       db.exec("UPDATE peers SET push_cursor = 0, pull_cursor = 0");
   });
-  tx();
 }
 function migrateStoragePeerUrls(db) {
   if (!tableExists3(db, "peers"))
@@ -2413,7 +2709,7 @@ function migrateStoragePeerUrls(db) {
   if (renames.length === 0)
     return;
   const map = new Map(renames.map(({ oldUrl, newUrl }) => [oldUrl, newUrl]));
-  const tx = db.transaction(() => {
+  writeTx(db, () => {
     for (const { oldUrl, newUrl } of renames) {
       if (tableExists3(db, "storage_cursors"))
         db.query("UPDATE storage_cursors SET peer_url = ? WHERE peer_url = ?").run(newUrl, oldUrl);
@@ -2425,7 +2721,6 @@ function migrateStoragePeerUrls(db) {
         setFullNodes(db, fullNodes.map((n) => map.get(n) ?? n));
     }
   });
-  tx();
 }
 function migrateDatabases(db) {
   if (hasColumn(db, "databases", "meta"))
@@ -2468,20 +2763,27 @@ function migrateSitesAccess(db) {
     backfill("public_grants", "NULL");
   }
 }
-function migrateSiteChannels(db) {
-  if (!tableExists3(db, "site_channels"))
+function replayDataset(db, dataset) {
+  if (!tableExists3(db, dataset))
     return;
-  const wm = db.query("SELECT value FROM meta WHERE key = ?").get(SITE_CHANNELS_REPLAY_KEY);
+  const key = `${dataset}_replay_seq`;
+  const wm = db.query("SELECT value FROM meta WHERE key = ?").get(key);
   const since = wm ? Number(wm.value) : 0;
   const changes = db.query(`SELECT seq, ${CHANGE_SELECT} FROM crdt_changes
-       WHERE dataset = 'site_channels' AND seq > ? ORDER BY seq`).all(since);
+       WHERE dataset = ? AND seq > ? ORDER BY seq`).all(dataset, since);
   if (changes.length === 0)
     return;
-  db.transaction((rows) => {
-    for (const change of rows)
+  writeTx(db, () => {
+    for (const change of changes)
       applyChange(db, change);
-    db.query("INSERT INTO meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(SITE_CHANNELS_REPLAY_KEY, String(rows[rows.length - 1].seq));
-  })(changes);
+    db.query("INSERT INTO meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(key, String(changes[changes.length - 1].seq));
+  });
+}
+function migrateSiteChannels(db) {
+  replayDataset(db, "site_channels");
+}
+function migrateNodes(db) {
+  replayDataset(db, "nodes");
 }
 function initSchema(db) {
   runSchema(db);
@@ -2497,8 +2799,8 @@ function initSchema(db) {
   migrateShares(db);
   migrateSitesAccess(db);
   migrateSiteChannels(db);
+  migrateNodes(db);
 }
-var SITE_CHANNELS_REPLAY_KEY = "site_channels_replay_seq";
 var init_schema_init = __esm(() => {
   init_records();
   init_documents();
@@ -2949,7 +3251,7 @@ function writeFileRow(db, siteId, cleanPath, contentType, encoding, content) {
     return { ...same, changed: false };
   const existing = fileIdFor(db, siteId, cleanPath);
   const id = existing ?? newId("sf", cleanPath);
-  withChangeGroup(null, () => {
+  withChangeGroup(db, null, () => {
     if (!existing) {
       const first = emit(db, "site_files", id, "site_id", siteId);
       emit(db, "site_files", id, "path", cleanPath);
@@ -8156,7 +8458,8 @@ var init_protocol = __esm(() => {
   SyncResponseSchema = object({
     node_id: string2().describe("Server's node id"),
     changes: array(ChangeSchema).describe("Server changes after `since`"),
-    cursor: number2().describe("New server cursor for the client to store")
+    cursor: number2().describe("New server cursor for the client to store"),
+    skewed_rejected: number2().optional().describe("Pushed changes the server refused for being stamped >5 min in the future")
   });
   HealthResponseSchema = object({
     ok: boolean2(),
@@ -8184,6 +8487,9 @@ function getPeer(db, url) {
 function setPeer(db, url, c) {
   db.query("INSERT INTO peers (url, pull_cursor, push_cursor) VALUES (?, ?, ?) ON CONFLICT(url) DO UPDATE SET pull_cursor = excluded.pull_cursor, push_cursor = excluded.push_cursor").run(url, c.pull_cursor, c.push_cursor);
 }
+function skewWarnings(source, skewed) {
+  return Object.entries(skewed).map(([node, n]) => `${source}: refused ${n} change(s) from device ${node} stamped more than 5 min in the future \u2014 run \`mh repair --clock\` on that device`);
+}
 function advanceAckedPrefix(db, fromSeq, received) {
   if (received.length === 0)
     return fromSeq;
@@ -8222,12 +8528,21 @@ async function syncWithPeer(db, url, opts = {}) {
     throw new MhError(res.status === 401 || res.status === 403 ? "auth" : "network", `sync failed: ${res.status} ${await res.text()}`);
   const data = await res.json();
   const changes = data.changes ?? [];
-  const pulled = ingest(db, changes);
+  const r = ingestDetailed(db, changes);
+  const pulled = r.received;
   setPeer(db, url, {
     pull_cursor: data.cursor,
     push_cursor: advanceAckedPrefix(db, toPush.cursor, changes)
   });
-  return { pushed: toPush.changes.length, pulled, received: changes.length };
+  const warnings = skewWarnings(url, r.skewed);
+  if (data.skewed_rejected)
+    warnings.push(`${url} refused ${data.skewed_rejected} of this device's change(s) as stamped more than 5 min in the future \u2014 run \`mh repair --clock\` here`);
+  return {
+    pushed: toPush.changes.length,
+    pulled,
+    received: changes.length,
+    ...warnings.length ? { warnings } : {}
+  };
 }
 var changeKey = (c) => `${c.hlc}\x00${c.node_id}\x00${c.dataset}\x00${c.row_id}\x00${c.col}`;
 var init_client = __esm(() => {
@@ -8726,9 +9041,10 @@ async function syncWithStorage(db, peerUrl, client, config, opts = {}) {
   }
   let snapKeys = [];
   let pulled = 0;
+  const skewed = {};
   if (opts.pull ?? true) {
     snapKeys = (await client.list(snapshotRoot(base))).map((o) => o.key).filter((k) => k.endsWith(".snap"));
-    pulled += await pullSnapshots(db, peerUrl, snapKeys, client, key);
+    pulled += await pullSnapshots(db, peerUrl, snapKeys, client, key, skewed);
     for (const remote of await listRemoteNodes(client, base)) {
       if (remote === node)
         continue;
@@ -8745,7 +9061,7 @@ async function syncWithStorage(db, peerUrl, client, config, opts = {}) {
         if (!bytes)
           continue;
         const changes = await decodeSegment(bytes, key);
-        pulled += ingest(db, changes);
+        pulled += collectSkew(skewed, ingestDetailed(db, changes));
         setStorageCursor(db, peerUrl, remote, seg.key);
       }
     }
@@ -8772,9 +9088,15 @@ async function syncWithStorage(db, peerUrl, client, config, opts = {}) {
     if (ownCount >= threshold)
       await publishSnapshot(db, client, config, opts.snapshotRetainSegments);
   }
-  return { pushed, pulled, pendingPush };
+  const warnings = skewWarnings(peerUrl, skewed);
+  return { pushed, pulled, pendingPush, ...warnings.length ? { warnings } : {} };
 }
-async function pullSnapshots(db, peerUrl, present, client, key) {
+function collectSkew(into, r) {
+  for (const [n, k] of Object.entries(r.skewed))
+    into[n] = (into[n] ?? 0) + k;
+  return r.received;
+}
+async function pullSnapshots(db, peerUrl, present, client, key, skewed = {}) {
   if (present.length === 0)
     return 0;
   const consumed = getSnapshotConsumed(db, peerUrl);
@@ -8793,7 +9115,7 @@ async function pullSnapshots(db, peerUrl, present, client, key) {
     if (!bytes)
       continue;
     const changes = await decodeSegment(bytes, key);
-    pulled += ingest(db, changes);
+    pulled += collectSkew(skewed, ingestDetailed(db, changes));
     consumed.add(k);
     for (const c of changes)
       if (!local[c.node_id] || c.hlc > local[c.node_id])
@@ -8814,6 +9136,7 @@ var init_storage = __esm(() => {
   init_crdt();
   init_publisher_lease();
   init_errors();
+  init_client();
   init_e2ee();
   init_intent_retention();
   DEFAULT_SNAPSHOT_MAX_INTERVAL_MS = 30 * 60000;
@@ -9025,7 +9348,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@tensorix/metahub",
-    version: "0.5.1",
+    version: "0.5.3",
     description: "Metahub core library and CLI",
     license: "AGPL-3.0-only",
     type: "module",
@@ -9397,7 +9720,7 @@ function applyGuestIntent(db, policy, session, intent, opts) {
     kind: policy.audience,
     guestNode: session.guestNode
   };
-  const tx = db.transaction(() => {
+  return writeTx(db, () => {
     const prepared = prepareIntent(db, policy, principal, intent, opts.clock);
     const txn = intentTxnPrefix(session.guestNode, intent.intentId) + prepared.fingerprint;
     const receipt = readReceipt(db, session.guestNode, intent.intentId, acceptedNow);
@@ -9417,7 +9740,6 @@ function applyGuestIntent(db, policy, session, intent, opts) {
       return applySubmitted(db, policy, principal, intent, prepared, txn, acceptedNow);
     return applyAuthority(db, policy, principal, intent, prepared, txn, acceptedNow);
   });
-  return tx();
 }
 function prepareIntent(db, policy, principal, intent, clock) {
   if (typeof intent.payload !== "object" || intent.payload === null || Array.isArray(intent.payload))
@@ -9455,7 +9777,7 @@ function prepareIntent(db, policy, principal, intent, clock) {
   };
 }
 function applyAuthority(db, policy, principal, intent, prepared, txn, acceptedNow) {
-  return withTxnId(txn, () => withNodeId(principal.guestNode, () => {
+  return withTxnId(db, txn, () => withNodeId(principal.guestNode, () => {
     if (intent.action === "createRecord")
       assertGuestCreateCapacity(db, prepared.database, policy.limits);
     const current = intent.action === "createRecord" ? createRecordPrepared(db, prepared.database, prepared.cells) : updateRecordPrepared(db, intent.recordId, prepared.cells);
@@ -9579,7 +9901,7 @@ function isRecordRow(value) {
 }
 function clampMillis(submittedAt, now) {
   const safeNow = Math.max(0, Math.trunc(Number.isFinite(now) ? now : Date.now()));
-  const ceil = safeNow + HLC_SKEW_MS;
+  const ceil = safeNow + HLC_MAX_SKEW_MS;
   if (!Number.isFinite(submittedAt))
     return safeNow;
   return Math.max(0, Math.min(Math.trunc(submittedAt), ceil));
@@ -9618,16 +9940,16 @@ function stableStringify(value) {
   }
   return JSON.stringify(value) ?? "null";
 }
-var HLC_SKEW_MS, INTENT_ID_RE, RECEIPT_COL = "result";
+var INTENT_ID_RE, RECEIPT_COL = "result";
 var init_guest_intent = __esm(() => {
   init_errors();
   init_records();
+  init_hlc();
   init_crdt();
   init_ids();
   init_intent_retention();
   init_grants_core();
   init_intent_retention();
-  HLC_SKEW_MS = 5 * 60000;
   INTENT_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;
 });
 
@@ -9635,6 +9957,7 @@ var init_guest_intent = __esm(() => {
 var ROOM_PROTOCOL_VERSION = 1, ROOM_BLOB_CHUNK_LIMIT, STATE_TABLE;
 var init_room_protocol = __esm(() => {
   init_errors();
+  init_history_cache();
   init_crdt();
   init_schema_init();
   init_ids();
@@ -9736,13 +10059,13 @@ async function syncWithRoom(db, cfg, transport, opts = {}) {
   }
   assertGuestAuthored(resp.changes, cfg.guestBase);
   const pulled = ingest(db, resp.changes);
-  db.transaction(() => {
+  writeTx(db, () => {
     applyPartitionDiff(db, cfg.peerKey, {
       entered: [...prep.shipped, ...pulledMemberRows(db, cfg, resp.changes)],
       left: prep.diff.left
     });
     writeCursors(db, cfg.peerKey, { pull: resp.cursor, push: prep.pushCursor });
-  })();
+  });
   if (resp.need_baseline.length > 0)
     await healBaselines(db, cfg, transport, resp.need_baseline);
   let healed = false;
@@ -9778,14 +10101,14 @@ async function healBaselines(db, cfg, transport, keys) {
   const resp = await roundTrip(db, cfg, transport, changes, evict);
   if (resp.share_state === "expired")
     return;
-  db.transaction(() => {
+  writeTx(db, () => {
     applyPartitionDiff(db, cfg.peerKey, {
       entered: [...entered, ...pulledMemberRows(db, cfg, resp.changes)],
       left: evict
     });
     const cur = readCursors(db, cfg.peerKey);
     writeCursors(db, cfg.peerKey, { pull: resp.cursor, push: cur.push });
-  })();
+  });
 }
 async function fullReconcile(db, cfg, transport) {
   const members = computePartitionMembers(db, cfg.scope);
@@ -9793,11 +10116,11 @@ async function fullReconcile(db, cfg, transport) {
   const resp = await roundTrip(db, cfg, transport, winners, [], members);
   if (resp.share_state === "expired")
     return;
-  db.transaction(() => {
+  writeTx(db, () => {
     resetPartitionShadow(db, cfg.peerKey, members);
     const cur = readCursors(db, cfg.peerKey);
     writeCursors(db, cfg.peerKey, { pull: resp.cursor, push: cur.push });
-  })();
+  });
 }
 async function roundTrip(db, cfg, transport, changes, evict, members) {
   const resp = await transport({
@@ -10199,7 +10522,7 @@ function updatePublicSiteChannelUrls(db, siteId, siteName) {
   return changed;
 }
 function applySiteUpdate(db, siteId, opts, hooks) {
-  return db.transaction(() => withChangeGroup("site.update", () => {
+  return withChangeGroup(db, "site.update", () => {
     const updated = updateSite(db, siteId, {
       ...opts,
       visibility: opts.visibility === "public" ? "private" : opts.visibility
@@ -10211,15 +10534,15 @@ function applySiteUpdate(db, siteId, opts, hooks) {
     if (opts.name !== undefined)
       updatePublicSiteChannelUrls(db, siteId, updated.name);
     return getSite(db, siteId);
-  }))();
+  });
 }
 function applySiteDelete(db, siteId) {
-  return db.transaction(() => withChangeGroup("site.delete", () => {
+  return withChangeGroup(db, "site.delete", () => {
     if (!deleteSite(db, siteId))
       return false;
     revokeAllSiteChannels(db, siteId);
     return true;
-  }))();
+  });
 }
 function revokeAllSiteChannels(db, siteId) {
   const active = listSiteChannelRows(db, siteId).filter((channel) => channel.desired_state === "active");
@@ -10344,7 +10667,7 @@ var init_site_channel_store = __esm(() => {
       policy_json: input.policy == null ? null : JSON.stringify(input.policy),
       desired_state: input.desiredState ?? "active"
     };
-    db.transaction(() => {
+    writeTx(db, () => {
       if (!existing) {
         const first = emit(db, "site_channels", id, "site_id", input.siteId);
         emit(db, "site_channels", id, "created_hlc", first.hlc);
@@ -10354,7 +10677,7 @@ var init_site_channel_store = __esm(() => {
           continue;
         emit(db, "site_channels", id, col, value);
       }
-    })();
+    });
     return getSiteChannelRow(db, id);
   });
   setSiteChannelDesiredState = grouped(function setSiteChannelDesiredState(db, id, desired) {
@@ -10527,6 +10850,8 @@ async function addAndSyncStoragePeer(db, spec) {
     publish: spec.publish,
     priority: spec.priority
   };
+  if (spec.provider)
+    config.provider = spec.provider;
   if (encrypt) {
     if (spec.recoveryCode) {
       const rawKey = await decodeRecoveryCode(spec.recoveryCode);
@@ -10630,14 +10955,13 @@ async function rotateStoragePeer(db, url, input) {
   };
 }
 function removePeer(db, url) {
-  const tx = db.transaction(() => {
+  return writeTx(db, () => {
     const changed = db.query("DELETE FROM peers WHERE url = ?").run(url).changes > 0;
     db.query("DELETE FROM peer_grants WHERE peer_url = ?").run(url);
     db.query("DELETE FROM storage_cursors WHERE peer_url = ?").run(url);
     db.query("DELETE FROM room_rows WHERE peer_key = ?").run(url);
     return changed;
   });
-  return tx();
 }
 function setPeerEnabled(db, url, enabled) {
   return db.query("UPDATE peers SET enabled = ? WHERE url = ?").run(enabled ? 1 : 0, url).changes > 0;
@@ -10712,7 +11036,7 @@ async function syncPeerOnce(db, url, opts) {
       result = await syncWithPeer(db, url, { timeoutMs: opts?.timeoutMs });
     }
     updatePeerStatus(db, url, "ok", null);
-    const warnings = [];
+    const warnings = [...result.warnings ?? []];
     try {
       if (peer?.kind !== "s3" && peer?.kind !== "room")
         clearCoveredSiteRollbacks(db, url);
@@ -10881,20 +11205,20 @@ function normalizePublicBaseUrl(input) {
   try {
     parsed = new URL(input.trim());
   } catch {
-    throw new Error("\u8BF7\u8F93\u5165\u5B8C\u6574\u7684 http(s) \u5730\u5740");
+    throw new MhError("invalid_input", "\u8BF7\u8F93\u5165\u5B8C\u6574\u7684 http(s) \u5730\u5740");
   }
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:")
-    throw new Error("\u7AD9\u70B9\u5165\u53E3\u53EA\u652F\u6301 HTTP \u6216 HTTPS");
+    throw new MhError("invalid_input", "\u7AD9\u70B9\u5165\u53E3\u53EA\u652F\u6301 HTTP \u6216 HTTPS");
   if (parsed.username || parsed.password || parsed.search || parsed.hash)
-    throw new Error("\u7AD9\u70B9\u5165\u53E3\u4E0D\u80FD\u5305\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5");
+    throw new MhError("invalid_input", "\u7AD9\u70B9\u5165\u53E3\u4E0D\u80FD\u5305\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5");
   if (parsed.pathname !== "/" && parsed.pathname !== "")
-    throw new Error("\u7AD9\u70B9\u5165\u53E3\u5FC5\u987B\u662F\u57DF\u540D\u6839\u5730\u5740\uFF0C\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84");
+    throw new MhError("invalid_input", "\u7AD9\u70B9\u5165\u53E3\u5FC5\u987B\u662F\u57DF\u540D\u6839\u5730\u5740\uFF0C\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84");
   const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
   const scope = hostScope(host);
   if (scope === "invalid")
-    throw new Error("\u7AD9\u70B9\u5165\u53E3\u5FC5\u987B\u662F\u53EF\u8BBF\u95EE\u7684\u4E3B\u673A\u5730\u5740");
+    throw new MhError("invalid_input", "\u7AD9\u70B9\u5165\u53E3\u5FC5\u987B\u662F\u53EF\u8BBF\u95EE\u7684\u4E3B\u673A\u5730\u5740");
   if (parsed.protocol === "http:" && scope === "public")
-    throw new Error("\u516C\u7F51\u5165\u53E3\u5FC5\u987B\u4F7F\u7528 HTTPS\uFF1BHTTP \u4EC5\u5141\u8BB8\u672C\u673A\u6216\u5C40\u57DF\u7F51\u5730\u5740");
+    throw new MhError("invalid_input", "\u516C\u7F51\u5165\u53E3\u5FC5\u987B\u4F7F\u7528 HTTPS\uFF1BHTTP \u4EC5\u5141\u8BB8\u672C\u673A\u6216\u5C40\u57DF\u7F51\u5730\u5740");
   parsed.pathname = "";
   const url = parsed.toString().replace(/\/+$/, "");
   return { url, scope };
@@ -10942,6 +11266,7 @@ function setServerConfig(db, partial) {
 var MAX_BLOB_UPLOAD_BYTES, K_HOST = "cfg_host", K_PORT = "cfg_port", K_SYNC_INTERVAL = "cfg_sync_interval", K_AUTO_SYNC = "cfg_auto_sync", K_BLOB_QUOTA = "cfg_blob_quota", K_PUBLIC_BASE_URL = "cfg_public_base_url", DEFAULT_CONFIG;
 var init_config = __esm(() => {
   init_token();
+  init_errors();
   MAX_BLOB_UPLOAD_BYTES = Number(process.env.METAHUB_MAX_BLOB_UPLOAD) || 100 * 1024 * 1024;
   DEFAULT_CONFIG = {
     host: "127.0.0.1",
@@ -11966,6 +12291,8 @@ function redeemPairingCode(db, code) {
 }
 function mintGrant(db, peerUrl, nodeId) {
   const token = randomSuffix(32);
+  if (nodeId)
+    db.query("DELETE FROM peer_grants WHERE node_id = ?").run(nodeId);
   db.query("INSERT INTO peer_grants (token, peer_url, node_id, created_at) VALUES (?, ?, ?, ?)").run(token, peerUrl, nodeId, Date.now());
   return token;
 }
@@ -12163,10 +12490,14 @@ function listDevices(db) {
   const ensure = (nodeId) => {
     let v = byNode.get(nodeId);
     if (!v) {
+      const meta = readNodeMeta(db, nodeId);
       v = {
         nodeId,
-        label: null,
+        label: nodeLabelOf(db, nodeId),
         self: nodeId === self,
+        platform: meta?.platform ?? null,
+        form: meta?.form ?? null,
+        app: meta?.app ?? null,
         channels: [],
         lastActivityAt: null,
         revocable: "none",
@@ -12177,7 +12508,9 @@ function listDevices(db) {
     }
     return v;
   };
-  ensure(self).label = getNodeLabel(db);
+  ensure(self);
+  for (const r of db.query("SELECT id FROM nodes WHERE __deleted = 0").all())
+    ensure(r.id);
   const oplog = db.query("SELECT node_id, MAX(hlc) AS h FROM crdt_changes GROUP BY node_id").all();
   for (const r of oplog)
     ensure(r.node_id).channels.push({ kind: "oplog", ref: "", lastSeenAt: parseHlc(r.h).millis });
@@ -12186,8 +12519,6 @@ function listDevices(db) {
     if (!p.node_id)
       continue;
     const v = ensure(p.node_id);
-    if (!v.label)
-      v.label = p.label;
     v.channels.push({
       kind: "paired_out",
       ref: p.url,
@@ -12205,6 +12536,9 @@ function listDevices(db) {
         nodeId: null,
         label: null,
         self: false,
+        platform: null,
+        form: null,
+        app: null,
         channels: [ch],
         lastActivityAt: g.created_at,
         revocable: "yes",
@@ -12293,6 +12627,7 @@ async function refreshBucketPresence(db, url) {
 }
 var init_devices = __esm(() => {
   init_errors();
+  init_hlc();
   init_node();
   init_peers();
   init_pairing();
@@ -12324,7 +12659,8 @@ function s3PeerViews(db) {
       prefix: c.prefix ?? null,
       accessKeyId: c.accessKeyId ?? null,
       encrypt: c.encrypt !== false,
-      virtualHostedStyle: c.virtualHostedStyle ?? null
+      virtualHostedStyle: c.virtualHostedStyle ?? null,
+      provider: c.provider ?? null
     };
   });
 }
@@ -12401,7 +12737,8 @@ var init_peers_routes = __esm(() => {
     prefix: string2().optional(),
     encrypt: boolean2().optional(),
     passphrase: string2().optional(),
-    corsOrigins: array(string2()).optional()
+    corsOrigins: array(string2()).optional(),
+    provider: string2().optional()
   });
   S3PeerSchema = object({
     url: string2(),
@@ -12418,7 +12755,8 @@ var init_peers_routes = __esm(() => {
     prefix: string2().nullable(),
     accessKeyId: string2().nullable(),
     encrypt: boolean2(),
-    virtualHostedStyle: boolean2().nullable()
+    virtualHostedStyle: boolean2().nullable(),
+    provider: string2().nullable()
   });
   DataPlaceSchema = object({
     kind: _enum(["self", "device", "bucket"]),
@@ -12836,12 +13174,171 @@ var init_blob_routes = __esm(() => {
   ];
 });
 
-// src/core/sync/routes.ts
-function errorResponse(e) {
+// src/core/sync/locale.ts
+function localeFromTags(tags) {
+  if (!tags || tags.length === 0)
+    return "zh-CN";
+  for (const tag of tags) {
+    if (!tag)
+      continue;
+    if (/^zh\b/i.test(tag))
+      return "zh-CN";
+    if (/^en\b/i.test(tag))
+      return "en";
+  }
+  return "en";
+}
+function localeFromAcceptLanguage(header) {
+  if (!header)
+    return "zh-CN";
+  return localeFromTags(header.split(",").map((s) => s.split(";")[0].trim()));
+}
+function localeFromCookie(header) {
+  if (!header)
+    return null;
+  for (const part of header.split(";")) {
+    const eq = part.indexOf("=");
+    if (eq < 0)
+      continue;
+    if (part.slice(0, eq).trim() !== LANG_COOKIE)
+      continue;
+    const v = decodeURIComponent(part.slice(eq + 1).trim());
+    return isLocale(v) ? v : null;
+  }
+  return null;
+}
+function pickLocale(req) {
+  return localeFromCookie(req.headers.get("cookie")) ?? localeFromAcceptLanguage(req.headers.get("accept-language"));
+}
+var LANG_COOKIE = "mh-lang", isLocale = (v) => v === "zh-CN" || v === "en";
+
+// src/core/sync/page-messages.ts
+function pm(locale, key, params) {
+  const s = locale === "en" ? EN[key] : key;
+  return params ? s.replace(/\{(\w+)\}/g, (m, k) => (k in params) ? String(params[k]) : m) : s;
+}
+function pmIfKnown(locale, text, params) {
+  if (locale === "en" && text in EN)
+    return pm(locale, text, params);
+  return params ? pm(locale, text, params) : text;
+}
+function localizeError(locale, e) {
+  if (e instanceof MhError && e.i18n)
+    return pmIfKnown(locale, e.i18n.key, e.i18n.params);
   const message = e instanceof Error ? e.message : String(e);
+  return pmIfKnown(locale, message);
+}
+var EN;
+var init_page_messages = __esm(() => {
+  init_errors();
+  EN = {
+    "\u672C\u673A\u903B\u8F91\u65F6\u949F\u6BD4\u7CFB\u7EDF\u65F6\u95F4\u8D85\u524D {min} \u5206\u949F\uFF08\u7CFB\u7EDF\u65F6\u949F\u66FE\u88AB\u8C03\u9519\uFF0C\u6216\u6536\u5230\u8FC7\u65F6\u949F\u9519\u8BEF\u8BBE\u5907\u7684\u6570\u636E\uFF09\uFF0C\u8FD0\u884C mh repair --clock \u4FEE\u590D": "This device's logical clock is {min} min ahead of wall time (the system clock was wrong, or data arrived from a device with a wrong clock); run mh repair --clock",
+    "\u6570\u636E\u5E93\u6B63\u88AB\u53E6\u4E00\u4E2A\u8FDB\u7A0B\u5199\u5165\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5": "The database is being written by another process; retry shortly",
+    "\u901A\u8FC7 metahub \u5206\u4EAB": "Shared via metahub",
+    "\u7531 metahub \u6258\u7BA1": "Hosted by metahub",
+    "\uFF08\u7A7A\u6587\u6863\uFF09": "(empty document)",
+    \u{6587}\u{6863}: "Document",
+    \u{8868}\u{683c}: "Table",
+    \u{7f16}\u{8f91}: "Edit",
+    \u{7f16}\u{8f91}\u{6587}\u{6863}: "Edit document",
+    \u{4fdd}\u{5b58}: "Save",
+    "\u4FDD\u5B58\u4E2D\u2026": "Saving\u2026",
+    \u{4fdd}\u{5b58}\u{5931}\u{8d25}: "Save failed",
+    "\u5DF2\u4FDD\u5B58 \u2713": "Saved \u2713",
+    "\u53EF\u7F16\u8F91\u6587\u672C/\u6570\u5B57/URL/\u65E5\u671F\u5355\u5143\u683C\uFF0C\u5931\u7126\u81EA\u52A8\u4FDD\u5B58": "Text, number, URL and date cells are editable; changes save on blur",
+    "\u7F16\u8F91\u7AD9\u70B9\u6587\u4EF6\uFF08\u6587\u672C\u6587\u4EF6\u53EF\u5728\u7EBF\u7F16\u8F91\uFF1B\u4FDD\u5B58\u5373\u5BF9\u6240\u6709\u8BBF\u95EE\u8005\u751F\u6548\uFF09\u3002": "Edit site files (text files can be edited here; saving applies to every visitor).",
+    "\uFF08\u6682\u65E0\u6587\u4EF6\uFF09": "(no files yet)",
+    "\u9884\u89C8 \u2197": "Preview \u2197",
+    "\uFF08\u4E8C\u8FDB\u5236\u6587\u4EF6\uFF0C\u4E0D\u53EF\u5728\u7EBF\u7F16\u8F91\uFF09": "(binary file, cannot be edited here)",
+    "{name} \xB7 \u6587\u4EF6": "{name} \xB7 Files",
+    "\uD83D\uDD12 \u6B64\u5206\u4EAB\u53D7\u53E3\u4EE4\u4FDD\u62A4": "\uD83D\uDD12 This share is protected by a passcode",
+    "\u53E3\u4EE4\u9519\u8BEF\uFF0C\u8BF7\u91CD\u8BD5\u3002": "Wrong passcode, try again.",
+    \u{53e3}\u{4ee4}: "Passcode",
+    \u{89e3}\u{9501}: "Unlock",
+    \u{53d7}\u{4fdd}\u{62a4}\u{7684}\u{5206}\u{4eab}: "Protected share",
+    \u{590d}\u{5236}\u{5168}\u{6587}: "Copy all",
+    \u{5df2}\u{590d}\u{5236}: "Copied",
+    \u{590d}\u{5236}\u{5931}\u{8d25}: "Copy failed",
+    \u{7ad9}\u{70b9}\u{5c1a}\u{672a}\u{540c}\u{6b65}: "Site not synced yet",
+    "\u5206\u4EAB\u65B9\u8BBE\u5907\u4E0A\u7EBF\u540C\u6B65\u540E\u5373\u53EF\u8BBF\u95EE\u3002": "Available once the sharing device comes online and syncs.",
+    \u{9875}\u{9762}\u{4e0d}\u{5b58}\u{5728}: "Page not found",
+    "\u8FD9\u4E2A\u7AD9\u70B9\u91CC\u6CA1\u6709\u8FD9\u4E2A\u9875\u9762\u6216\u6587\u4EF6\u3002": "This site has no such page or file.",
+    \u{8d44}\u{6e90}\u{6682}\u{4e0d}\u{53ef}\u{7528}: "Resource temporarily unavailable",
+    "\u6587\u4EF6\u5185\u5BB9\u5C1A\u672A\u540C\u6B65\u5230\u623F\u95F4\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002": "The file content has not synced to the room yet. Try again later.",
+    "\u6587\u4EF6\u7684\u5185\u5BB9\u6682\u65F6\u65E0\u6CD5\u53D6\u5F97\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002": "The file content cannot be retrieved right now. Try again later.",
+    \u{7ad9}\u{70b9}\u{4e0d}\u{5b58}\u{5728}: "Site not found",
+    "\u6CA1\u6709\u540D\u4E3A \u201C{name}\u201D \u7684\u7AD9\u70B9\u3002": "There is no site named \u201C{name}\u201D.",
+    \u{8fd4}\u{56de}\u{7ad9}\u{70b9}\u{9996}\u{9875}: "Back to site home",
+    "\u9A8C\u8BC1\u8BBF\u95EE\u4EE4\u724C \xB7 metahub": "Verify access token \xB7 metahub",
+    \u{8f93}\u{5165}\u{8bbf}\u{95ee}\u{4ee4}\u{724c}: "Enter the access token",
+    "\u6B64\u670D\u52A1\u5668\u5DF2\u5F00\u542F\u8BBF\u95EE\u4FDD\u62A4\u3002\u5728\u5DF2\u767B\u5F55\u8BBE\u5907\u7684\u300C\u8BBE\u7F6E \u2192 \u8BBE\u5907\u4E0E\u6388\u6743\u300D\u83B7\u53D6\u767B\u5F55\u94FE\u63A5\u6216\u4E8C\u7EF4\u7801,\u6216\u5728\u670D\u52A1\u5668\u4E0A\u8FD0\u884C {cmd}\u3002": "This server requires an access token. Get a login link or QR code from Settings \u2192 Devices on a signed-in device, or run {cmd} on the server.",
+    \u{7c98}\u{8d34}\u{8bbf}\u{95ee}\u{4ee4}\u{724c}\u{6216}\u{767b}\u{5f55}\u{94fe}\u{63a5}: "Paste the access token or login link",
+    \u{663e}\u{793a}\u{4ee4}\u{724c}: "Show token",
+    \u{9690}\u{85cf}\u{4ee4}\u{724c}: "Hide token",
+    \u{89e3}\u{9501}\u{5e76}\u{8fdb}\u{5165}: "Unlock and enter",
+    "\u8BF7\u8F93\u5165\u8BBF\u95EE\u4EE4\u724C\u3002": "Enter the access token.",
+    "\u9A8C\u8BC1\u4E2D\u2026": "Verifying\u2026",
+    "\u4EE4\u724C\u65E0\u6548,\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5\u3002": "Invalid token. Check it and try again.",
+    "\u767B\u5F55\u5DF2\u8FC7\u671F,\u8BF7\u91CD\u65B0\u8F93\u5165\u4EE4\u724C\u3002": "Session expired. Enter the token again.",
+    \u{9644}\u{4ef6}\u{5df2}\u{5931}\u{6548}: "Attachment unavailable",
+    \u{94fe}\u{63a5}\u{7f3a}\u{5c11}\u{5206}\u{4eab}\u{6570}\u{636e}: "The link is missing share data",
+    \u{8bf7}\u{8f93}\u{5165}\u{5206}\u{4eab}\u{53e3}\u{4ee4}: "Enter the share passcode",
+    \u{94fe}\u{63a5}\u{7f3a}\u{5c11}\u{5bc6}\u{94a5}: "The link is missing its key",
+    \u{53e3}\u{4ee4}\u{9519}\u{8bef}\u{6216}\u{94fe}\u{63a5}\u{5df2}\u{5931}\u{6548}: "Wrong passcode or the link has expired",
+    \u{94fe}\u{63a5}\u{5df2}\u{5931}\u{6548}\u{6216}\u{5bc6}\u{94a5}\u{4e0d}\u{6b63}\u{786e}: "The link has expired or the key is wrong",
+    \u{5206}\u{4eab}: "Share",
+    \u{6b63}\u{5728}\u{52a0}\u{8f7d}: "Loading",
+    "\u2705 \u5DF2\u6388\u6743": "\u2705 Authorized",
+    "\u53EF\u4EE5\u5173\u95ED\u6B64\u6807\u7B7E\u9875\uFF0C\u56DE\u5230 MetaHub \u7EE7\u7EED\u90E8\u7F72\u3002": "You can close this tab and return to MetaHub to continue deploying.",
+    \u{7ad9}\u{70b9}\u{5165}\u{53e3}\u{5065}\u{5eb7}\u{54cd}\u{5e94}\u{8fc7}\u{5927}: "Site entry health response is too large",
+    \u{7ad9}\u{70b9}\u{5165}\u{53e3}\u{4e0d}\u{80fd}\u{6307}\u{5411}\u{4e91}\u{5e73}\u{53f0}\u{5143}\u{6570}\u{636e}\u{670d}\u{52a1}: "Site entry must not point at a cloud metadata service",
+    "Desktop sidecar \u4EC5\u7528\u4E8E\u672C\u673A\u9884\u89C8\uFF1B\u8BF7\u542F\u52A8\u5E26\u9274\u6743\u7684 mh --server\uFF0C\u6216\u4F7F\u7528 Edge": "The desktop sidecar is for local preview only; start an authenticated mh --server, or use Edge",
+    "\u7AD9\u70B9\u5165\u53E3\u5065\u5EB7\u68C0\u67E5\u5931\u8D25\uFF08HTTP {status}\uFF09": "Site entry health check failed (HTTP {status})",
+    \u{7ad9}\u{70b9}\u{5165}\u{53e3}\u{5065}\u{5eb7}\u{54cd}\u{5e94}\u{65e0}\u{6548}: "Site entry health response is invalid",
+    "\u7AD9\u70B9\u5165\u53E3\u8282\u70B9\u4E0D\u5339\u914D\uFF08\u671F\u671B {expected}\uFF0C\u5B9E\u9645 {actual}\uFF09\uFF1B\u8FD9\u662F\u9632\u8BEF\u914D\u68C0\u67E5\uFF0C\u4E0D\u662F\u8EAB\u4EFD\u8BA4\u8BC1": "Site entry node mismatch (expected {expected}, got {actual}); this is a misconfiguration guard, not authentication",
+    "\u76EE\u6807\u8BBE\u5907\u7248\u672C\u4E0D\u652F\u6301\u5B9A\u5411\u53D1\u5E03\u6E20\u9053\uFF1B\u8BF7\u5148\u5347\u7EA7\u8BE5\u8BBE\u5907\uFF0C\u518D\u91CD\u65B0\u9A8C\u8BC1\u5165\u53E3": "The target device does not support targeted publishing channels; upgrade it, then verify the entry again",
+    "\u65E0\u6CD5\u9A8C\u8BC1\u7AD9\u70B9\u5165\u53E3\uFF1A\u8FDE\u63A5\u8D85\u65F6": "Could not verify the site entry: connection timed out",
+    "\u65E0\u6CD5\u9A8C\u8BC1\u7AD9\u70B9\u5165\u53E3\uFF1A{msg}": "Could not verify the site entry: {msg}",
+    "\u8BF7\u5148\u5728\u201C\u8BBE\u7F6E \u2192 \u7AD9\u70B9\u6258\u7BA1\u201D\u914D\u7F6E\u5E76\u9A8C\u8BC1\u5F53\u524D\u8BBE\u5907\u7684\u516C\u7F51\u6216\u5C40\u57DF\u7F51\u5165\u53E3": "Configure and verify this device's public or LAN entry under Settings \u2192 Site hosting first",
+    "\u914D\u5BF9\u8BBE\u5907\u7F3A\u5C11\u8282\u70B9\u8EAB\u4EFD\uFF0C\u91CD\u65B0\u914D\u5BF9\u540E\u518D\u8BD5": "The paired device has no node identity; pair again and retry",
+    "\u8BE5\u7AD9\u70B9\u4ECD\u5728\u7B49\u5F85\u76EE\u6807\u8BBE\u5907\u786E\u8BA4\u56DE\u6EDA\uFF0C\u8BF7\u5148\u91CD\u8BD5\u56DE\u6EDA": "This site is still waiting for the target device to confirm the rollback; retry the rollback first",
+    \u{914d}\u{5bf9}\u{8bbe}\u{5907}\u{540c}\u{6b65}\u{5931}\u{8d25}: "Sync with the paired device failed",
+    \u{6ca1}\u{6709}\u{5f85}\u{786e}\u{8ba4}\u{7684}\u{7ad9}\u{70b9}\u{56de}\u{6eda}: "No site rollback is awaiting confirmation",
+    "\u76EE\u6807\u914D\u5BF9\u8BBE\u5907\u4E0D\u5B58\u5728\uFF0C\u8BF7\u91CD\u65B0\u914D\u5BF9\u540E\u91CD\u8BD5": "The target paired device does not exist; pair again and retry",
+    \u{7ad9}\u{70b9}\u{6e20}\u{9053}\u{5df2}\u{4e0d}\u{5b58}\u{5728}: "The site channel no longer exists",
+    "OAuth \u6D41\u7A0B\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55": "The OAuth flow does not exist or has expired; sign in again",
+    "OAuth \u6D41\u7A0B\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u8BD5": "The OAuth flow does not exist or has expired; try again",
+    "Cloudflare \u6388\u6743\u5931\u8D25": "Cloudflare authorization failed",
+    "Cloudflare \u6388\u6743\u5C1A\u672A\u5B8C\u6210\uFF0C\u8BF7\u7A0D\u5019": "Cloudflare authorization is not finished yet; please wait",
+    "\u7F3A\u5C11 Cloudflare \u8D26\u53F7 id": "Missing Cloudflare account id",
+    "\u7F3A\u5C11 Cloudflare \u51ED\u636E\uFF08\u8BF7\u5148\u767B\u5F55\u6216\u63D0\u4F9B API Token\uFF09": "Missing Cloudflare credentials (sign in first or provide an API token)",
+    "Cloudflare \u6388\u6743\u5931\u8D25\uFF1A{detail}": "Cloudflare authorization failed: {detail}",
+    "\u672A\u8FD4\u56DE access token": "no access token returned",
+    "\u65E0\u6CD5\u8FDE\u63A5 Cloudflare \u6388\u6743\u670D\u52A1\uFF1A{msg}": "Could not reach the Cloudflare authorization service: {msg}",
+    "Cloudflare \u4EE4\u724C\u4EA4\u6362\u5931\u8D25\uFF08HTTP {status}\uFF09": "Cloudflare token exchange failed (HTTP {status})",
+    "\u65E0\u6CD5\u8BFB\u53D6 Cloudflare \u8D26\u53F7\u5217\u8868\uFF1A{msg}": "Could not read the Cloudflare account list: {msg}",
+    "\u8BFB\u53D6 Cloudflare \u8D26\u53F7\u5931\u8D25\uFF08HTTP {status}\uFF09": "Reading Cloudflare accounts failed (HTTP {status})",
+    "\u672A\u914D\u7F6E Cloudflare OAuth \u5BA2\u6237\u7AEF\uFF0C\u8BF7\u6539\u7528 API Token \u90E8\u7F72": "No Cloudflare OAuth client is configured; deploy with an API token instead",
+    "Cloudflare \u6388\u6743\u8D85\u65F6\uFF0C\u8BF7\u91CD\u8BD5": "Cloudflare authorization timed out; try again",
+    "Cloudflare \u6388\u6743\u88AB\u62D2\u7EDD\uFF1A{detail}": "Cloudflare authorization was denied: {detail}",
+    "OAuth state \u4E0D\u5339\u914D\uFF0C\u7591\u4F3C\u4F2A\u9020\u56DE\u8C03\uFF0C\u5DF2\u4E2D\u6B62": "OAuth state mismatch; the callback looks forged, aborted",
+    "Cloudflare \u672A\u8FD4\u56DE\u6388\u6743\u7801": "Cloudflare did not return an authorization code",
+    "\u8BF7\u8F93\u5165\u5B8C\u6574\u7684 http(s) \u5730\u5740": "Enter a complete http(s) address",
+    "\u7AD9\u70B9\u5165\u53E3\u53EA\u652F\u6301 HTTP \u6216 HTTPS": "Site entry supports HTTP or HTTPS only",
+    "\u7AD9\u70B9\u5165\u53E3\u4E0D\u80FD\u5305\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5": "Site entry must not contain credentials, query parameters or fragments",
+    "\u7AD9\u70B9\u5165\u53E3\u5FC5\u987B\u662F\u57DF\u540D\u6839\u5730\u5740\uFF0C\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84": "Site entry must be a domain root without a path",
+    \u{7ad9}\u{70b9}\u{5165}\u{53e3}\u{5fc5}\u{987b}\u{662f}\u{53ef}\u{8bbf}\u{95ee}\u{7684}\u{4e3b}\u{673a}\u{5730}\u{5740}: "Site entry must be a reachable host address",
+    "\u516C\u7F51\u5165\u53E3\u5FC5\u987B\u4F7F\u7528 HTTPS\uFF1BHTTP \u4EC5\u5141\u8BB8\u672C\u673A\u6216\u5C40\u57DF\u7F51\u5730\u5740": "A public entry must use HTTPS; HTTP is only allowed for local or LAN addresses"
+  };
+});
+
+// src/core/sync/routes.ts
+function errorResponse(e, req) {
+  const message = req ? localizeError(pickLocale(req), e) : e instanceof Error ? e.message : String(e);
   const code = errorCode(e);
   return Response.json(code ? { error: message, code } : { error: message }, {
-    status: code ? HTTP_STATUS[code] : 400
+    status: code ? HTTP_STATUS[code] : 400,
+    ...code === "busy" ? { headers: { "retry-after": "1" } } : {}
   });
 }
 var HTTP_STATUS, syncRoutes, routes;
@@ -12852,6 +13349,7 @@ var init_routes = __esm(() => {
   init_peers_routes();
   init_blob_routes();
   init_errors();
+  init_page_messages();
   init_package();
   HTTP_STATUS = {
     invalid_input: 400,
@@ -12862,6 +13360,8 @@ var init_routes = __esm(() => {
     auth: 401,
     network: 502,
     rate_limited: 429,
+    busy: 503,
+    clock_skew: 409,
     port_in_use: 500
   };
   syncRoutes = [
@@ -12873,12 +13373,18 @@ var init_routes = __esm(() => {
       response: SyncResponseSchema,
       async handler(req, { db, node }) {
         const body = await req.json();
-        ingest(db, body.changes ?? []);
+        const r = ingestDetailed(db, body.changes ?? []);
+        const skewed = Object.values(r.skewed).reduce((a, b) => a + b, 0);
         const batch = changesAfterSeq(db, body.since ?? 0, {
           limit: body.limit,
           excludeDatasets: body.exclude_datasets
         });
-        return Response.json({ node_id: node, changes: batch.changes, cursor: batch.cursor });
+        return Response.json({
+          node_id: node,
+          changes: batch.changes,
+          cursor: batch.cursor,
+          ...skewed ? { skewed_rejected: skewed } : {}
+        });
       }
     },
     {
@@ -13086,12 +13592,22 @@ function renewToken(req, url, cfg) {
 function wantsHtml(req) {
   return req.method === "GET" && (req.headers.get("accept") ?? "").includes("text/html");
 }
-function unlockPage() {
-  return `<!doctype html><html lang="zh-CN"><head>
+function unlockPage(locale = "zh-CN") {
+  const m = (key) => escapeAttr(pm(locale, key));
+  const L = JSON.stringify({
+    go: pm(locale, "\u89E3\u9501\u5E76\u8FDB\u5165"),
+    show: pm(locale, "\u663E\u793A\u4EE4\u724C"),
+    hide: pm(locale, "\u9690\u85CF\u4EE4\u724C"),
+    empty: pm(locale, "\u8BF7\u8F93\u5165\u8BBF\u95EE\u4EE4\u724C\u3002"),
+    verifying: pm(locale, "\u9A8C\u8BC1\u4E2D\u2026"),
+    invalid: pm(locale, "\u4EE4\u724C\u65E0\u6548,\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5\u3002"),
+    expired: pm(locale, "\u767B\u5F55\u5DF2\u8FC7\u671F,\u8BF7\u91CD\u65B0\u8F93\u5165\u4EE4\u724C\u3002")
+  });
+  return `<!doctype html><html lang="${locale}"><head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
 <meta name="theme-color" content="#ffffff">
-<title>\u9A8C\u8BC1\u8BBF\u95EE\u4EE4\u724C \xB7 metahub</title>
+<title>${m("\u9A8C\u8BC1\u8BBF\u95EE\u4EE4\u724C \xB7 metahub")}</title>
 <script>
   // FOUC-guard theme resolution, same key/logic as src/webui/theme.ts.
   try {
@@ -13105,18 +13621,18 @@ function unlockPage() {
 <div class="boot" id="boot"><svg viewBox="0 0 24 24">${CUBE_SVG}</svg></div>
 <form class="card" id="f" style="display:none" autocomplete="on">
   <div class="brand"><svg viewBox="0 0 24 24">${CUBE_SVG}</svg></div>
-  <h1>\u8F93\u5165\u8BBF\u95EE\u4EE4\u724C</h1>
-  <p class="sub">\u6B64\u670D\u52A1\u5668\u5DF2\u5F00\u542F\u8BBF\u95EE\u4FDD\u62A4\u3002\u5728\u5DF2\u767B\u5F55\u8BBE\u5907\u7684\u300C\u8BBE\u7F6E \u2192 \u8BBE\u5907\u4E0E\u6388\u6743\u300D\u83B7\u53D6\u767B\u5F55\u94FE\u63A5\u6216\u4E8C\u7EF4\u7801,\u6216\u5728\u670D\u52A1\u5668\u4E0A\u8FD0\u884C <code>mh token show</code>\u3002</p>
+  <h1>${m("\u8F93\u5165\u8BBF\u95EE\u4EE4\u724C")}</h1>
+  <p class="sub">${pm(locale, "\u6B64\u670D\u52A1\u5668\u5DF2\u5F00\u542F\u8BBF\u95EE\u4FDD\u62A4\u3002\u5728\u5DF2\u767B\u5F55\u8BBE\u5907\u7684\u300C\u8BBE\u7F6E \u2192 \u8BBE\u5907\u4E0E\u6388\u6743\u300D\u83B7\u53D6\u767B\u5F55\u94FE\u63A5\u6216\u4E8C\u7EF4\u7801,\u6216\u5728\u670D\u52A1\u5668\u4E0A\u8FD0\u884C {cmd}\u3002", { cmd: "<code>mh token show</code>" })}</p>
   <div class="field">
-    <input id="t" type="password" placeholder="\u7C98\u8D34\u8BBF\u95EE\u4EE4\u724C\u6216\u767B\u5F55\u94FE\u63A5"
+    <input id="t" type="password" placeholder="${m("\u7C98\u8D34\u8BBF\u95EE\u4EE4\u724C\u6216\u767B\u5F55\u94FE\u63A5")}"
       autocomplete="current-password" autocapitalize="off" autocorrect="off" spellcheck="false" enterkeyhint="go">
-    <button type="button" class="peek" id="peek" aria-label="\u663E\u793A\u4EE4\u724C"><svg viewBox="0 0 24 24">${EYE_SVG}</svg></button>
+    <button type="button" class="peek" id="peek" aria-label="${m("\u663E\u793A\u4EE4\u724C")}"><svg viewBox="0 0 24 24">${EYE_SVG}</svg></button>
   </div>
   <p class="err" id="e" style="display:none"></p>
-  <button type="submit" class="go" id="go">\u89E3\u9501\u5E76\u8FDB\u5165</button>
+  <button type="submit" class="go" id="go">${m("\u89E3\u9501\u5E76\u8FDB\u5165")}</button>
 </form>
 <script>
-  var KEY = "mh_token";
+  var KEY = "mh_token", L = ${L};
   var form = document.getElementById("f"), boot = document.getElementById("boot");
   var input = document.getElementById("t"), errEl = document.getElementById("e");
   var goBtn = document.getElementById("go"), peek = document.getElementById("peek");
@@ -13141,7 +13657,7 @@ function unlockPage() {
   }
   function fail(msg) {
     goBtn.disabled = false;
-    goBtn.innerHTML = "\u89E3\u9501\u5E76\u8FDB\u5165";
+    goBtn.textContent = L.go;
     errEl.textContent = msg;
     errEl.style.display = "flex";
     form.classList.remove("bad");
@@ -13154,7 +13670,7 @@ function unlockPage() {
     var pw = input.type === "password";
     input.type = pw ? "text" : "password";
     peek.innerHTML = '<svg viewBox="0 0 24 24">' + (pw ? ${JSON.stringify(EYE_OFF_SVG)} : ${JSON.stringify(EYE_SVG)}) + "</svg>";
-    peek.setAttribute("aria-label", pw ? "\u9690\u85CF\u4EE4\u724C" : "\u663E\u793A\u4EE4\u724C");
+    peek.setAttribute("aria-label", pw ? L.hide : L.show);
     input.focus();
   });
   input.addEventListener("input", function () {
@@ -13164,9 +13680,9 @@ function unlockPage() {
   form.addEventListener("submit", function (ev) {
     ev.preventDefault();
     var token = normalize(input.value);
-    if (!token) { fail("\u8BF7\u8F93\u5165\u8BBF\u95EE\u4EE4\u724C\u3002"); return; }
+    if (!token) { fail(L.empty); return; }
     goBtn.disabled = true;
-    goBtn.innerHTML = '<span class="spin"></span>\u9A8C\u8BC1\u4E2D\u2026';
+    goBtn.innerHTML = '<span class="spin"></span>' + L.verifying;
     var hdr = { headers: { authorization: "Bearer " + token } };
     // Prefer the renewal endpoint (managed mode returns the canonical token,
     // also upgrading a pasted in-grace token). Fall back to a cheap
@@ -13177,7 +13693,7 @@ function unlockPage() {
       .then(function (d) {
         if (d && d.token) { save(d.token); location.reload(); return; }
         return fetch("/api/version", hdr).then(function (r) {
-          if (r.status === 401) { fail("\u4EE4\u724C\u65E0\u6548,\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5\u3002"); return; }
+          if (r.status === 401) { fail(L.invalid); return; }
           // 200 (static-token mode) or no UI (404) \u2192 trust it and reload.
           save(token); location.reload();
         });
@@ -13194,7 +13710,7 @@ function unlockPage() {
       .then(function (r) { return r.ok ? r.json() : null; })
       .then(function (d) {
         if (d && d.token) { save(d.token); location.reload(); }
-        else showForm("\u767B\u5F55\u5DF2\u8FC7\u671F,\u8BF7\u91CD\u65B0\u8F93\u5165\u4EE4\u724C\u3002");
+        else showForm(L.expired);
       })
       .catch(function () { showForm(""); });
   } else {
@@ -13322,8 +13838,9 @@ var COOKIE = "mh_token", COOKIE_ATTRS = "path=/; SameSite=Strict; Max-Age=315360
   @keyframes spin{to{transform:rotate(360deg)}}
   @media (prefers-reduced-motion:reduce){*{animation-duration:.01ms!important}
     .brand path{stroke-dashoffset:0}}
-`;
+`, escapeAttr = (v) => v.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 var init_auth = __esm(() => {
+  init_page_messages();
   init_inject_runtime();
   init_token();
   init_pairing();
@@ -13353,7 +13870,9 @@ var init_http_status = __esm(() => {
     stale: 409,
     conflict: 409,
     auth: 401,
-    rate_limited: 429
+    rate_limited: 429,
+    busy: 503,
+    clock_skew: 409
   };
 });
 
@@ -14132,7 +14651,7 @@ async function serveSite(req, ctx, auth, opts = {}) {
     const ambientOnly = mutating && authActive(auth) && explicitToken(req, url) == null;
     if (!ambientOnly && hasValidToken(req, url, auth)) {
       if (!site)
-        return notFoundResponse("\u7AD9\u70B9\u4E0D\u5B58\u5728", `\u6CA1\u6709\u540D\u4E3A \u201C${escapeHtml(name)}\u201D \u7684\u7AD9\u70B9\u3002`);
+        return siteNotFound(req, name);
       if (!opts.forwardApi)
         return new Response("not found", { status: 404 });
       const fwd = new Request(`${url.origin}/${filePath}${url.search}`, req);
@@ -14159,17 +14678,18 @@ async function serveSite(req, ctx, auth, opts = {}) {
     return serveSiteFile(req, ctx.db, site.id, filePath, { spa: site.spa === 1, isPublic: true });
   }
   if (!hasValidToken(req, url, auth)) {
-    return wantsHtml(req) ? new Response(unlockPage(), { headers: { ...HTML_HEADERS, "x-mh-unlock": "1" } }) : unauthorized();
+    return wantsHtml(req) ? new Response(unlockPage(pickLocale(req)), { headers: { ...HTML_HEADERS, "x-mh-unlock": "1" } }) : unauthorized();
   }
   if (!site)
-    return notFoundResponse("\u7AD9\u70B9\u4E0D\u5B58\u5728", `\u6CA1\u6709\u540D\u4E3A \u201C${escapeHtml(name)}\u201D \u7684\u7AD9\u70B9\u3002`);
+    return siteNotFound(req, name);
   const res = await serveSiteFile(req, ctx.db, site.id, filePath, { spa: site.spa === 1 });
   return withShim(res, auth, req, url);
 }
 async function serveSiteFile(req, db, siteId, path, opts = {}) {
+  const locale = pickLocale(req);
   const meta = getFileMetaForServe(db, siteId, path, { spa: opts.spa });
   if (!meta)
-    return notFoundResponse("\u9875\u9762\u4E0D\u5B58\u5728", "\u8FD9\u4E2A\u7AD9\u70B9\u91CC\u6CA1\u6709\u8FD9\u4E2A\u9875\u9762\u6216\u6587\u4EF6\u3002");
+    return notFoundResponse(locale, pm(locale, "\u9875\u9762\u4E0D\u5B58\u5728"), pm(locale, "\u8FD9\u4E2A\u7AD9\u70B9\u91CC\u6CA1\u6709\u8FD9\u4E2A\u9875\u9762\u6216\u6587\u4EF6\u3002"));
   const cacheControl = siteCacheControl(meta.row.content_type, meta.row.encoding, opts.isPublic ?? false);
   const headers = { etag: meta.etag, "cache-control": cacheControl };
   if (etagMatches(req.headers.get("if-none-match"), meta.etag)) {
@@ -14177,7 +14697,7 @@ async function serveSiteFile(req, db, siteId, path, opts = {}) {
   }
   const bytes = await decodeFileRow(db, meta.row);
   if (!bytes) {
-    return notFoundResponse("\u8D44\u6E90\u6682\u4E0D\u53EF\u7528", "\u6587\u4EF6\u7684\u5185\u5BB9\u6682\u65F6\u65E0\u6CD5\u53D6\u5F97\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002");
+    return notFoundResponse(locale, pm(locale, "\u8D44\u6E90\u6682\u4E0D\u53EF\u7528"), pm(locale, "\u6587\u4EF6\u7684\u5185\u5BB9\u6682\u65F6\u65E0\u6CD5\u53D6\u5F97\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002"));
   }
   const body = new Uint8Array(bytes.byteLength);
   body.set(bytes);
@@ -14202,8 +14722,12 @@ function etagMatches(header, etag) {
   }
   return false;
 }
-function notFoundResponse(title, detail) {
-  const html = `<!doctype html><html lang="zh"><head>
+function siteNotFound(req, name) {
+  const locale = pickLocale(req);
+  return notFoundResponse(locale, pm(locale, "\u7AD9\u70B9\u4E0D\u5B58\u5728"), pm(locale, "\u6CA1\u6709\u540D\u4E3A \u201C{name}\u201D \u7684\u7AD9\u70B9\u3002", { name: escapeHtml(name) }));
+}
+function notFoundResponse(locale, title, detail) {
+  const html = `<!doctype html><html lang="${locale}"><head>
 <meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
 <meta name="robots" content="noindex">
 <title>${escapeHtml(title)}</title>
@@ -14224,8 +14748,8 @@ function notFoundResponse(title, detail) {
 <p class="code">404</p>
 <h1>${escapeHtml(title)}</h1>
 <p>${detail}</p>
-<a class="home" href="./">\u8FD4\u56DE\u7AD9\u70B9\u9996\u9875</a>
-<footer>\u7531 metahub \u6258\u7BA1</footer>
+<a class="home" href="./">${escapeHtml(pm(locale, "\u8FD4\u56DE\u7AD9\u70B9\u9996\u9875"))}</a>
+<footer>${escapeHtml(pm(locale, "\u7531 metahub \u6258\u7BA1"))}</footer>
 </main></body></html>`;
   return new Response(html, {
     status: 404,
@@ -14240,6 +14764,7 @@ var init_sites_serve = __esm(() => {
   init_grants_routes();
   init_rate_limit();
   init_share_render();
+  init_page_messages();
   init_auth();
 });
 
@@ -14294,6 +14819,51 @@ async function mintGuestSession(scope, opts) {
   return { sub: opts.sub, exp, cookie };
 }
 
+// src/core/sync/share-copy.ts
+function markdownTable(header, rows) {
+  const cell = (s) => s.replace(/\r?\n/g, " ").replace(/\|/g, "\\|").trim();
+  const line = (cells) => `| ${cells.map(cell).join(" | ")} |`;
+  return [line(header), `| ${header.map(() => "---").join(" | ")} |`, ...rows.map(line)].join(`
+`);
+}
+function copyButtonHtml(locale = "zh-CN") {
+  const label = escapeHtml(pm(locale, "\u590D\u5236\u5168\u6587"));
+  return `<button id="mh-copy" class="copy-btn" type="button" aria-label="${label}">${ICON_COPY}${ICON_CHECK}<span>${label}</span></button>`;
+}
+function copySourceHtml(text) {
+  return `<template id="mh-src">${escapeHtml(text)}</template>`;
+}
+function copyScript(locale = "zh-CN") {
+  const L = JSON.stringify({ idle: pm(locale, "\u590D\u5236\u5168\u6587"), done: pm(locale, "\u5DF2\u590D\u5236"), fail: pm(locale, "\u590D\u5236\u5931\u8D25") });
+  return `(function(){
+var btn=document.getElementById('mh-copy');if(!btn)return;var L=${L};
+var label=btn.querySelector('span');var timer=0;
+function absolutize(root){root.querySelectorAll('img[src],a[href],video[src],audio[src]').forEach(function(el){var a=el.tagName==='A'?'href':'src';var v=el.getAttribute(a);if(v&&!/^(blob|data):/.test(v))el.setAttribute(a,new URL(v,location.href).href);});}
+function payload(){var src=document.getElementById('mh-src');var text=src?src.content.textContent:'';var body=document.querySelector('article.doc')||document.querySelector('.table-wrap');var html='';if(body){var c=body.cloneNode(true);absolutize(c);html=c.innerHTML;}return{text:text,html:html};}
+function legacy(text){var ta=document.createElement('textarea');ta.value=text;ta.setAttribute('readonly','');ta.style.cssText='position:fixed;top:0;left:0;opacity:0';document.body.appendChild(ta);ta.select();var ok=false;try{ok=document.execCommand('copy');}catch(e){}ta.remove();return ok?Promise.resolve():Promise.reject(new Error('copy'));}
+function write(p){var nc=navigator.clipboard;if(nc&&nc.write&&window.ClipboardItem){try{return nc.write([new ClipboardItem({'text/plain':new Blob([p.text],{type:'text/plain'}),'text/html':new Blob([p.html],{type:'text/html'})})]);}catch(e){}}if(nc&&nc.writeText)return nc.writeText(p.text);return legacy(p.text);}
+function settle(cls,txt){clearTimeout(timer);btn.classList.remove('done','fail');void btn.offsetWidth;btn.classList.add(cls);if(label)label.textContent=txt;timer=setTimeout(function(){btn.classList.remove(cls);if(label)label.textContent=L.idle;},1600);}
+btn.addEventListener('click',function(){var p=payload();write(p).then(function(){settle('done',L.done);},function(){legacy(p.text).then(function(){settle('done',L.done);},function(){settle('fail',L.fail);});});});
+})();`;
+}
+var ICON_COPY = '<svg class="ic-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M5 15V5a2 2 0 0 1 2-2h10"/></svg>', ICON_CHECK = '<svg class="ic-check" viewBox="0 0 24 24" aria-hidden="true"><path d="M5 12.5 10 17l9-10"/></svg>', COPY_CSS = `.mh-tools{display:flex;align-items:center;gap:8px;flex:none}
+.copy-btn{display:inline-flex;align-items:center;gap:6px;height:32px;padding:0 12px;border:1px solid var(--line);border-radius:7px;background:var(--bg);color:var(--fg);font:500 13px/1 inherit;font-family:inherit;cursor:pointer;transition:background .12s,border-color .12s,color .12s}
+.copy-btn:hover{background:var(--card)}.copy-btn:active{transform:translateY(.5px)}
+.copy-btn:focus-visible{outline:2px solid var(--accent);outline-offset:2px}
+.copy-btn svg{width:15px;height:15px;stroke:currentColor;fill:none;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round;flex:none}
+.copy-btn .ic-check{display:none}
+.copy-btn.done{color:var(--ok,#1a7f37);border-color:var(--ok,#1a7f37)}
+.copy-btn.done .ic-copy{display:none}.copy-btn.done .ic-check{display:block}
+.copy-btn.done .ic-check path{stroke-dasharray:24;stroke-dashoffset:24;animation:mh-draw .22s ease-out forwards}
+.copy-btn.fail{color:#cf222e;border-color:#cf222e}
+@keyframes mh-draw{to{stroke-dashoffset:0}}
+@media (prefers-color-scheme:dark){:root{--ok:#3fb950}}
+@media (max-width:480px){.copy-btn span{display:none}.copy-btn{padding:0 9px}}
+@media (prefers-reduced-motion:reduce){.copy-btn .ic-check path{animation:none;stroke-dashoffset:0}}`;
+var init_share_copy = __esm(() => {
+  init_page_messages();
+});
+
 // src/core/sync/share-serve.ts
 function notFound() {
   return new Response("not found", { status: 404 });
@@ -14324,25 +14894,26 @@ async function serveShare(req, ctx, opts = {}) {
     return notFound();
   if (share.transport !== "server")
     return notFound();
+  const locale = pickLocale(req);
   if (shareExpired(share))
     return gone();
   if (sub === "unlock" && req.method === "POST")
     return handleUnlock(ctx, req, share, url);
   const locked = !!share.pw_hash && !await readShareSession(ctx, req, share);
   if (locked) {
-    return wantsHtml2(req) ? new Response(passwordPage(share, false), { headers: HTML }) : unauthorizedJson();
+    return wantsHtml2(req) ? new Response(passwordPage(locale, share, false), { headers: HTML }) : unauthorizedJson();
   }
   if (sub.startsWith("blob/"))
     return serveScopedBlob(ctx, share, sub.slice("blob/".length));
   if (share.kind === "doc")
-    return serveDoc(ctx, req, share, sub);
+    return serveDoc(ctx, req, share, sub, locale);
   if (share.kind === "database")
-    return serveTable(ctx, req, share, sub);
+    return serveTable(ctx, req, share, sub, locale);
   if (share.kind === "site")
-    return serveSiteShare(ctx, req, share, sub, opts);
+    return serveSiteShare(ctx, req, share, sub, opts, locale);
   return notFound();
 }
-async function serveDoc(ctx, req, share, sub) {
+async function serveDoc(ctx, req, share, sub, locale) {
   const doc = getDocument(ctx.db, share.target_id);
   if (!doc)
     return notFound();
@@ -14371,26 +14942,27 @@ async function serveDoc(ctx, req, share, sub) {
   });
   const version = documentVersion(ctx.db, share.target_id);
   const editable = share.permission === "edit";
-  const inner = `<article class="doc">${rendered || '<p class="muted">\uFF08\u7A7A\u6587\u6863\uFF09</p>'}</article>`;
-  const script = editable ? docEditScript(share.slug, version, doc.body ?? "") : "";
-  return new Response(pageShell(doc.title || "\u6587\u6863", inner, { editable, editLabel: "\u7F16\u8F91\u6587\u6863", script }), { headers: HTML });
+  const inner = `<article class="doc">${rendered || `<p class="muted">${escapeHtml(pm(locale, "\uFF08\u7A7A\u6587\u6863\uFF09"))}</p>`}</article>`;
+  const script = editable ? docEditScript(locale, share.slug, version, doc.body ?? "") : "";
+  return new Response(pageShell(doc.title || pm(locale, "\u6587\u6863"), inner, { lang: locale, editable, editLabel: pm(locale, "\u7F16\u8F91\u6587\u6863"), script, copySource: doc.body ?? "" }), { headers: HTML });
 }
-function docEditScript(slug, version, body) {
+function docEditScript(locale, slug, version, body) {
+  const L = JSON.stringify({ save: pm(locale, "\u4FDD\u5B58"), saving: pm(locale, "\u4FDD\u5B58\u4E2D\u2026"), failed: pm(locale, "\u4FDD\u5B58\u5931\u8D25") });
   return `
-  let editing=false; const ver=${JSON.stringify(version)}; const body0=${JSON.stringify(body)};
+  let editing=false; const ver=${JSON.stringify(version)}; const body0=${JSON.stringify(body)}; const L=${L};
   const art=document.querySelector('article.doc');
   const btn=document.getElementById('mh-edit');
   let ta;
   btn.addEventListener('click', async ()=>{
     if(!editing){
-      editing=true; btn.textContent='\u4FDD\u5B58';
+      editing=true; btn.textContent=L.save;
       ta=document.createElement('textarea'); ta.className='mh-raw'; ta.value=body0;
       art.replaceWith(ta); ta.focus();
     } else {
-      btn.disabled=true; btn.textContent='\u4FDD\u5B58\u4E2D\u2026';
+      btn.disabled=true; btn.textContent=L.saving;
       const res=await fetch('/share/${slug}/doc',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({body:ta.value,ifMatch:ver})});
       if(res.ok){ location.reload(); }
-      else { const j=await res.json().catch(()=>({})); alert(j.error||'\u4FDD\u5B58\u5931\u8D25'); btn.disabled=false; btn.textContent='\u4FDD\u5B58'; }
+      else { const j=await res.json().catch(()=>({})); alert(j.error||L.failed); btn.disabled=false; btn.textContent=L.save; }
     }
   });`;
 }
@@ -14419,7 +14991,7 @@ function cellHtml(prop, value, titles) {
 function editableType(t) {
   return t === "text" || t === "number" || t === "url" || t === "date";
 }
-async function serveTable(ctx, req, share, sub) {
+async function serveTable(ctx, req, share, sub, locale) {
   const dbRow = getDatabase(ctx.db, share.target_id);
   if (!dbRow)
     return notFound();
@@ -14470,13 +15042,18 @@ async function serveTable(ctx, req, share, sub) {
     return `<tr>${tds}</tr>`;
   }).join("");
   const inner = `<div class="table-wrap"><table class="db"><thead><tr>${head}</tr></thead><tbody>${rows}</tbody></table></div>`;
-  const script = editable ? tableEditScript(share.slug) : "";
-  return new Response(pageShell(dbRow.name || "\u8868\u683C", inner, { script, hint: editable ? "\u53EF\u7F16\u8F91\u6587\u672C/\u6570\u5B57/URL/\u65E5\u671F\u5355\u5143\u683C\uFF0C\u5931\u7126\u81EA\u52A8\u4FDD\u5B58" : "" }), {
-    headers: HTML
-  });
-}
-function tableEditScript(slug) {
+  const script = editable ? tableEditScript(locale, share.slug) : "";
+  const copySource = markdownTable(props.map((p) => p.name), records.map((r) => props.map((p) => cellText(p, r.cells[p.id], titlesFor(p)))));
+  return new Response(pageShell(dbRow.name || pm(locale, "\u8868\u683C"), inner, {
+    lang: locale,
+    script,
+    copySource,
+    hint: editable ? pm(locale, "\u53EF\u7F16\u8F91\u6587\u672C/\u6570\u5B57/URL/\u65E5\u671F\u5355\u5143\u683C\uFF0C\u5931\u7126\u81EA\u52A8\u4FDD\u5B58") : ""
+  }), { headers: HTML });
+}
+function tableEditScript(locale, slug) {
   return `
+  const L=${JSON.stringify({ failed: pm(locale, "\u4FDD\u5B58\u5931\u8D25") })};
   document.querySelectorAll('td[contenteditable]').forEach(td=>{
     let orig=td.textContent;
     td.addEventListener('blur', async ()=>{
@@ -14488,11 +15065,11 @@ function tableEditScript(slug) {
       const res=await fetch('/share/${slug}/record',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({id:td.dataset.rec,propId:td.dataset.prop,value:v})});
       td.classList.remove('saving');
       if(res.ok){ orig=val; td.classList.add('saved'); setTimeout(()=>td.classList.remove('saved'),600); }
-      else { td.textContent=orig; const j=await res.json().catch(()=>({})); alert(j.error||'\u4FDD\u5B58\u5931\u8D25'); }
+      else { td.textContent=orig; const j=await res.json().catch(()=>({})); alert(j.error||L.failed); }
     });
   });`;
 }
-async function serveSiteShare(ctx, req, share, sub, opts = {}) {
+async function serveSiteShare(ctx, req, share, sub, opts = {}, locale = "zh-CN") {
   let site;
   try {
     site = resolveSite(ctx.db, share.target_id);
@@ -14515,7 +15092,7 @@ async function serveSiteShare(ctx, req, share, sub, opts = {}) {
   }
   if (share.permission === "edit") {
     if (sub === "_files")
-      return new Response(siteFilesPage(ctx, share, siteId), { headers: HTML });
+      return new Response(siteFilesPage(ctx, share, siteId, locale), { headers: HTML });
     if (sub === "_file" && req.method === "POST") {
       const body = await req.json().catch(() => ({}));
       if (!body.path || typeof body.content !== "string")
@@ -14547,34 +15124,35 @@ async function serveSiteShare(ctx, req, share, sub, opts = {}) {
   }
   return serveSiteFile(req, ctx.db, siteId, sub, { spa: site.spa === 1 });
 }
-function siteFilesPage(ctx, share, siteId) {
+function siteFilesPage(ctx, share, siteId, locale) {
   const files = listFiles(ctx.db, siteId);
+  const L = JSON.stringify({ binary: pm(locale, "\uFF08\u4E8C\u8FDB\u5236\u6587\u4EF6\uFF0C\u4E0D\u53EF\u5728\u7EBF\u7F16\u8F91\uFF09"), saved: pm(locale, "\u5DF2\u4FDD\u5B58 \u2713"), save: pm(locale, "\u4FDD\u5B58"), failed: pm(locale, "\u4FDD\u5B58\u5931\u8D25") });
   const list = files.map((f) => `<li><button class="file" data-path="${escapeHtml(f.path)}" data-text="${f.encoding === "utf8" ? "1" : "0"}">${escapeHtml(f.path)}</button> <span class="muted">${escapeHtml(f.content_type)}</span></li>`).join("");
   const inner = `
-    <p class="hint">\u7F16\u8F91\u7AD9\u70B9\u6587\u4EF6\uFF08\u6587\u672C\u6587\u4EF6\u53EF\u5728\u7EBF\u7F16\u8F91\uFF1B\u4FDD\u5B58\u5373\u5BF9\u6240\u6709\u8BBF\u95EE\u8005\u751F\u6548\uFF09\u3002</p>
-    <ul class="files">${list || '<li class="muted">\uFF08\u6682\u65E0\u6587\u4EF6\uFF09</li>'}</ul>
+    <p class="hint">${escapeHtml(pm(locale, "\u7F16\u8F91\u7AD9\u70B9\u6587\u4EF6\uFF08\u6587\u672C\u6587\u4EF6\u53EF\u5728\u7EBF\u7F16\u8F91\uFF1B\u4FDD\u5B58\u5373\u5BF9\u6240\u6709\u8BBF\u95EE\u8005\u751F\u6548\uFF09\u3002"))}</p>
+    <ul class="files">${list || `<li class="muted">${escapeHtml(pm(locale, "\uFF08\u6682\u65E0\u6587\u4EF6\uFF09"))}</li>`}</ul>
     <div id="editor" hidden>
-      <div class="row"><strong id="fpath"></strong> <a id="open" target="_blank" rel="noreferrer">\u9884\u89C8 \u2197</a></div>
+      <div class="row"><strong id="fpath"></strong> <a id="open" target="_blank" rel="noreferrer">${escapeHtml(pm(locale, "\u9884\u89C8 \u2197"))}</a></div>
       <textarea class="mh-raw" id="fbody"></textarea>
-      <div class="row"><button id="save">\u4FDD\u5B58</button></div>
+      <div class="row"><button id="save">${escapeHtml(pm(locale, "\u4FDD\u5B58"))}</button></div>
     </div>`;
   const script = `
-    const slug=${JSON.stringify(share.slug)};
+    const slug=${JSON.stringify(share.slug)}; const L=${L};
     const ed=document.getElementById('editor'), fpath=document.getElementById('fpath'), fbody=document.getElementById('fbody'), open=document.getElementById('open');
     let cur=null;
     document.querySelectorAll('button.file').forEach(b=>b.addEventListener('click', async ()=>{
       cur=b.dataset.path; fpath.textContent=cur; open.href='/share/'+slug+'/'+cur;
       if(b.dataset.text==='1'){ const r=await fetch('/share/'+slug+'/_raw?path='+encodeURIComponent(cur)); const j=await r.json(); fbody.value=j.content||''; fbody.disabled=false; }
-      else { fbody.value='\uFF08\u4E8C\u8FDB\u5236\u6587\u4EF6\uFF0C\u4E0D\u53EF\u5728\u7EBF\u7F16\u8F91\uFF09'; fbody.disabled=true; }
+      else { fbody.value=L.binary; fbody.disabled=true; }
       ed.hidden=false;
     }));
     document.getElementById('save').addEventListener('click', async ()=>{
       if(!cur||fbody.disabled) return;
       const res=await fetch('/share/'+slug+'/_file',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({path:cur,content:fbody.value})});
-      if(res.ok){ const s=document.getElementById('save'); s.textContent='\u5DF2\u4FDD\u5B58 \u2713'; setTimeout(()=>s.textContent='\u4FDD\u5B58',900); }
-      else { const j=await res.json().catch(()=>({})); alert(j.error||'\u4FDD\u5B58\u5931\u8D25'); }
+      if(res.ok){ const s=document.getElementById('save'); s.textContent=L.saved; setTimeout(()=>s.textContent=L.save,900); }
+      else { const j=await res.json().catch(()=>({})); alert(j.error||L.failed); }
     });`;
-  return pageShell(`${resolveSite(ctx.db, share.target_id).name} \xB7 \u6587\u4EF6`, inner, { script });
+  return pageShell(pm(locale, "{name} \xB7 \u6587\u4EF6", { name: resolveSite(ctx.db, share.target_id).name }), inner, { lang: locale, script });
 }
 function referencedHashes2(ctx, share) {
   const out = new Set;
@@ -14662,7 +15240,7 @@ async function handleUnlock(ctx, req, share, url) {
     pw = form ? String(form.get("password") ?? "") : "";
   }
   if (!await verifySharePassword(share, pw)) {
-    return new Response(passwordPage(share, true), { headers: HTML, status: 401 });
+    return new Response(passwordPage(pickLocale(req), share, true), { headers: HTML, status: 401 });
   }
   const { cookie } = await mintShareSession(ctx, share, url);
   return new Response(null, {
@@ -14673,21 +15251,23 @@ async function handleUnlock(ctx, req, share, url) {
 function ttlRemaining(share) {
   return share.expires_at == null ? SHARE_SESSION_TTL_MS : Math.max(0, share.expires_at - Date.now());
 }
-function passwordPage(share, error) {
+function passwordPage(locale, share, error) {
   const inner = `
     <form method="post" action="/share/${share.slug}/unlock" class="pw">
-      <h1>\uD83D\uDD12 \u6B64\u5206\u4EAB\u53D7\u53E3\u4EE4\u4FDD\u62A4</h1>
-      ${error ? '<p class="err">\u53E3\u4EE4\u9519\u8BEF\uFF0C\u8BF7\u91CD\u8BD5\u3002</p>' : ""}
-      <input type="password" name="password" placeholder="\u53E3\u4EE4" autofocus autocomplete="current-password">
-      <button type="submit">\u89E3\u9501</button>
+      <h1>${escapeHtml(pm(locale, "\uD83D\uDD12 \u6B64\u5206\u4EAB\u53D7\u53E3\u4EE4\u4FDD\u62A4"))}</h1>
+      ${error ? `<p class="err">${escapeHtml(pm(locale, "\u53E3\u4EE4\u9519\u8BEF\uFF0C\u8BF7\u91CD\u8BD5\u3002"))}</p>` : ""}
+      <input type="password" name="password" placeholder="${escapeHtml(pm(locale, "\u53E3\u4EE4"))}" autofocus autocomplete="current-password">
+      <button type="submit">${escapeHtml(pm(locale, "\u89E3\u9501"))}</button>
     </form>`;
-  return pageShell("\u53D7\u4FDD\u62A4\u7684\u5206\u4EAB", inner, { bare: true });
+  return pageShell(pm(locale, "\u53D7\u4FDD\u62A4\u7684\u5206\u4EAB"), inner, { lang: locale, bare: true });
 }
-function pageShell(title, inner, opts = {}) {
-  const editBtn = opts.editable ? `<button id="mh-edit" class="edit-btn">${opts.editLabel ?? "\u7F16\u8F91"}</button>` : "";
+function pageShell(title, inner, opts) {
+  const editBtn = opts.editable ? `<button id="mh-edit" class="edit-btn">${escapeHtml(opts.editLabel ?? pm(opts.lang, "\u7F16\u8F91"))}</button>` : "";
+  const copyBtn = opts.copySource !== undefined ? copyButtonHtml(opts.lang) : "";
+  const tools = copyBtn || editBtn ? `<div class="mh-tools">${copyBtn}${editBtn}</div>` : "";
   const hint = opts.hint ? `<p class="hint">${escapeHtml(opts.hint)}</p>` : "";
-  const script = opts.script ? `<script>(function(){${opts.script}})();</script>` : "";
-  return `<!doctype html><html lang="zh"><head>
+  const script = (opts.script ? `<script>(function(){${opts.script}})();</script>` : "") + (opts.copySource !== undefined ? `${copySourceHtml(opts.copySource)}<script>${copyScript(opts.lang)}</script>` : "");
+  return `<!doctype html><html lang="${opts.lang}"><head>
 <meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
 <meta name="robots" content="noindex">
 <title>${escapeHtml(title)}</title>
@@ -14699,7 +15279,8 @@ function pageShell(title, inner, opts = {}) {
   .wrap{max-width:820px;margin:0 auto;padding:32px 20px 80px}
   header.mh{display:flex;align-items:center;gap:12px;justify-content:space-between;margin-bottom:20px;border-bottom:1px solid var(--line);padding-bottom:14px}
   header.mh h1.title{font-size:22px;margin:0}
-  .edit-btn{background:var(--accent);color:#fff;border:0;border-radius:7px;padding:7px 14px;cursor:pointer;font-size:14px}
+  .edit-btn{background:var(--accent);color:#fff;border:0;border-radius:7px;height:32px;padding:0 14px;cursor:pointer;font-size:13px;font-weight:500;font-family:inherit}
+  ${COPY_CSS}
   .hint{color:var(--muted);font-size:13px;margin:0 0 14px}
   article.doc h1,article.doc h2,article.doc h3{line-height:1.3;margin:1.4em 0 .5em}
   article.doc h1{font-size:1.7em} article.doc h2{font-size:1.4em} article.doc h3{font-size:1.2em}
@@ -14730,10 +15311,10 @@ function pageShell(title, inner, opts = {}) {
   footer.mh{margin-top:48px;border-top:1px solid var(--line);padding-top:14px;color:var(--muted);font-size:12px;text-align:center}
 </style></head><body>
 ${opts.bare ? `<div class="wrap">${inner}</div>` : `<div class="wrap">
-<header class="mh"><h1 class="title">${escapeHtml(title)}</h1>${editBtn}</header>
+<header class="mh"><h1 class="title">${escapeHtml(title)}</h1>${tools}</header>
 ${hint}
 ${inner}
-<footer class="mh">\u901A\u8FC7 metahub \u5206\u4EAB</footer>
+<footer class="mh">${escapeHtml(pm(opts.lang, "\u901A\u8FC7 metahub \u5206\u4EAB"))}</footer>
 </div>`}
 ${script}
 </body></html>`;
@@ -14756,6 +15337,8 @@ var init_share_serve = __esm(() => {
   init_grants_routes();
   init_rate_limit();
   init_share_render();
+  init_share_copy();
+  init_page_messages();
   HTML = { "content-type": "text/html; charset=utf-8" };
   HASH_RE2 = /^[0-9a-f]{16,64}$/;
   SHARE_SESSION_TTL_MS = 12 * 60 * 60 * 1000;
@@ -15132,11 +15715,12 @@ var DROP_ENVELOPE_MAX_BYTES, DROP_HLC_SKEW_MS, GUEST_NODE_RE;
 var init_drop_protocol = __esm(() => {
   init_errors();
   init_ids();
+  init_hlc();
   init_grants_core();
   init_e2ee();
   init_seal();
   DROP_ENVELOPE_MAX_BYTES = 64 * 1024;
-  DROP_HLC_SKEW_MS = 5 * 60000;
+  DROP_HLC_SKEW_MS = HLC_MAX_SKEW_MS;
   GUEST_NODE_RE = /^g[0-9a-z]{8}$/;
 });
 
@@ -15190,12 +15774,12 @@ function applyDropV2(db, set, payload, now) {
   };
   const before = db.query("SELECT MAX(seq) AS s FROM crdt_changes").get().s ?? 0;
   const ids = [];
-  db.transaction(() => {
+  writeTx(db, () => {
     for (const intent of payload.intents) {
       applyGuestIntent(db, policy, { guestNode: payload.guest_node }, intent, { clock: "submitted", now });
       ids.push(intent.intentId);
     }
-  })();
+  });
   const ingested = db.query("SELECT COUNT(*) AS n FROM crdt_changes WHERE seq > ?").get(before).n;
   return { ackSeq: intentsMaxSeq(db, payload.guest_node, ids), ingested };
 }
@@ -15373,24 +15957,48 @@ init_paths();
 // src/core/db.ts
 init_paths();
 init_schema_init();
+init_node();
 init_schema_init();
 import { Database } from "bun:sqlite";
 import { mkdirSync } from "fs";
+import { hostname } from "os";
 function ensureDirs() {
   mkdirSync(metahubHome(), { recursive: true });
   mkdirSync(cacheDir(), { recursive: true });
 }
+function appKind() {
+  const v = process.env.METAHUB_APP;
+  return v === "server" || v === "desktop" || v === "web" ? v : "cli";
+}
 function openMetahub() {
   ensureDirs();
   const db = new Database(dbPath(), { create: true });
+  db.exec("PRAGMA busy_timeout = 5000;");
   db.exec("PRAGMA journal_mode = WAL;");
   initSchema(db);
+  const app = appKind();
+  const platform = platformFromProcess(process.platform);
+  describeSelf(db, {
+    app,
+    platform,
+    form: defaultForm(platform, app),
+    defaultLabel: safeHostname()
+  });
   return db;
 }
+function safeHostname() {
+  try {
+    const h = hostname();
+    return h ? h.replace(/\.local$/i, "") : null;
+  } catch {
+    return null;
+  }
+}
 
 // src/core/index.ts
 init_ids();
 init_resolve();
+init_hlc();
 init_crdt();
 init_node();
 init_databases();
@@ -15517,18 +16125,18 @@ function ensureIndex(db) {
     return false;
   const version = readMeta(db, "search_index_version");
   const seq = readMeta(db, "search_seq");
-  db.transaction(() => {
+  writeTx(db, () => {
     if (version !== SEARCH_INDEX_VERSION || seq === null)
       fullRebuild(db);
     else
       incrementalUpdate(db);
-  })();
+  });
   return true;
 }
 function rebuildSearchIndex(db) {
   if (!ftsAvailable(db))
     return false;
-  db.transaction(() => fullRebuild(db))();
+  writeTx(db, () => fullRebuild(db));
   return true;
 }
 function ftsSearch(db, query, limit) {
@@ -15677,6 +16285,7 @@ function scalarHtml(specUrl) {
 }
 function startServer(opts = {}) {
   registerRoomBlobResolver(resolveBlob);
+  process.env.METAHUB_APP ??= "server";
   const tDb = Date.now();
   const db = openMetahub();
   const dbMs = Date.now() - tDb;
@@ -15687,6 +16296,7 @@ function startServer(opts = {}) {
     allowRemoteSiteHosting: opts.allowRemoteSiteHosting ?? true
   };
   const allRoutes = opts.ui ? [...routes, ...opts.ui.routes] : routes;
+  opts.ui?.onStart?.(db);
   const forwardApi = async (req) => {
     const path = new URL(req.url).pathname;
     const route = allRoutes.find((r) => r.method === req.method && r.path === path);
@@ -15732,7 +16342,7 @@ function startServer(opts = {}) {
         } else {
           const exempt = url.pathname === HEALTH_PATH || url.pathname === RENEW_PATH || url.pathname === PAIR_PATH || url.pathname === "/manifest.webmanifest" || url.pathname === "/sw.js" || url.pathname === "/metahub-sdk.js" || url.pathname.startsWith("/icons/") || url.pathname.startsWith("/share/") || url.pathname.startsWith("/sites/");
           if (!exempt && !hasValidToken(req, url, auth)) {
-            return wantsHtml(req) ? new Response(unlockPage(), { headers: { ...HTML_HEADERS, "x-mh-unlock": "1" } }) : unauthorized();
+            return wantsHtml(req) ? new Response(unlockPage(pickLocale(req)), { headers: { ...HTML_HEADERS, "x-mh-unlock": "1" } }) : unauthorized();
           }
         }
         if (url.pathname === RENEW_PATH) {
@@ -15899,6 +16509,8 @@ var styles_default = `  :root {
     --fs-body:14px; --fs-ui:13.5px; --fs-sm:12.5px; --fs-xs:11.5px; --fs-micro:11px;
     --ui:"Hanken Grotesk",-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Microsoft YaHei",sans-serif;
     --mono:"JetBrains Mono",ui-monospace,SFMono-Regular,monospace;
+    --kbd-font:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;
+    --tip-bg:#1f1f23; --tip-fg:#ffffff; --tip-kbd-bg:rgba(255,255,255,.14); --tip-kbd-fg:rgba(255,255,255,.92);
     --note-lh:1.6;
     --code-bg:#f8f8f6;
     --hl-cmt:#9a9aa2; --hl-key:#a626a4; --hl-str:#28823f; --hl-num:#b76a00;
@@ -15917,6 +16529,7 @@ var styles_default = `  :root {
     --hover:rgba(255,255,255,.05); --hover-2:rgba(255,255,255,.09);
     --shadow-sm:0 1px 2px rgba(0,0,0,.4); --shadow-md:0 4px 14px rgba(0,0,0,.45); --shadow-lg:0 20px 56px rgba(0,0,0,.6);
     --code-bg:#1d1d20;
+    --tip-bg:#2e2e32; --tip-fg:var(--fg); --tip-kbd-bg:rgba(255,255,255,.08); --tip-kbd-fg:var(--fg-soft);
     --hl-cmt:#7d7d86; --hl-key:#d291e4; --hl-str:#7ed492; --hl-num:#e0a566;
     --hl-fn:#86a8ff; --hl-type:#5fc6e0; --hl-var:#f0936b;
   }
@@ -15995,12 +16608,11 @@ var styles_default = `  :root {
     background:linear-gradient(135deg,var(--accent),color-mix(in srgb,var(--accent) 60%,#fff));
     display:grid; place-items:center; color:#fff; box-shadow:var(--shadow-sm); }
   .brand .mark svg { width:15px; height:15px; stroke:#fff; }
-  .sb-search { margin:0 12px 8px; display:flex; align-items:center; gap:7px; cursor:text;
+  .sb-search { margin:0 12px 8px; width:calc(100% - 24px); display:flex; align-items:center; gap:7px; cursor:pointer; text-align:left;
     background:var(--bg); border:1px solid var(--line); border-radius:var(--radius-sm); padding:6px 9px; color:var(--muted);
-    box-shadow:var(--shadow-sm); transition:border-color .15s; }
-  .sb-search:focus-within { border-color:var(--accent); }
-  .sb-search input { border:0; background:none; outline:none; color:var(--fg); width:100%; }
-  .sb-search kbd { font-family:var(--mono); font-size:10px; color:var(--muted); border:1px solid var(--line-strong); border-radius:4px; padding:1px 4px; }
+    box-shadow:var(--shadow-sm); transition:border-color .15s; font:inherit; }
+  .sb-search:hover, .sb-search:focus-visible { border-color:var(--line-strong); outline:none; }
+  .sb-search-ph { flex:1; min-width:0; color:var(--muted); font-size:var(--fs-ui); }
   .sb-scroll { flex:1; overflow-y:auto; padding:4px 8px 24px; }
   /* Notion-style list switcher: the active tab is an icon+label pill, inactive
      tabs are icon-only. One absolutely-positioned indicator slides & stretches
@@ -16171,9 +16783,34 @@ var styles_default = `  :root {
   .set-row-line { display:flex; align-items:center; gap:14px; min-height:44px; padding:5px 0; }
   .set-row.clickable > .set-row-line { cursor:pointer; }
   .set-row-text { flex:1 1 auto; min-width:0; }
-  .set-row-title { font-size:14px; font-weight:550; color:var(--fg); }
-  .set-row-caption { font-size:12px; color:var(--muted); margin-top:1px;
+  .set-row-title { font-size:14px; font-weight:550; color:var(--fg); display:flex; align-items:center; gap:8px; min-width:0; }
+  .set-row-title > .set-row-name { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .set-row-caption { font-size:12px; color:var(--muted); margin-top:1px; display:flex; align-items:center; gap:6px;
     white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
+  /* leading glyph (device form / bucket) \u2014 a soft tile so rows scan by shape */
+  .set-row-lead { flex:none; width:28px; height:28px; display:grid; place-items:center; color:var(--muted);
+    border-radius:7px; background:var(--surface-2); }
+  .set-row-lead .ico { width:15px; height:15px; }
+  .set-row.dim > .set-row-line { opacity:.62; }
+  /* status dot in a caption: the only colour a row carries */
+  .cap-dot { display:inline-block; flex:none; width:7px; height:7px; border-radius:50%; background:var(--muted); }
+  .cap-dot.ok { background:var(--success); } .cap-dot.warn { background:var(--warning,#9a6700); } .cap-dot.err { background:var(--danger); }
+  .cap-err { color:var(--danger); }
+  /* tag variants next to a title: neutral outline (default), accent (roles), self (soft fill) */
+  .set-row-title .set-row-tag { margin-left:0; vertical-align:0; flex:none; }
+  .set-row-tag.accent { color:var(--accent); background:var(--accent-soft); border-color:transparent; }
+  .set-row-tag.self { color:var(--fg-soft); background:var(--surface-2); border-color:transparent; }
+  .set-row-tag.mono { font-family:var(--mono); letter-spacing:-.01em; }
+  /* quiet "+ add" row closing a list, and a "N more\u2026" fold */
+  .add-row { display:flex; align-items:center; gap:8px; width:100%; min-height:40px; margin-top:2px; padding:0 2px;
+    color:var(--muted); font-size:var(--fs-ui); border-radius:var(--radius-sm); text-align:left; }
+  .add-row:hover { color:var(--fg); background:var(--hover); }
+  .add-row .ico { width:15px; height:15px; }
+  .more-row { display:inline-flex; align-items:center; gap:6px; padding:8px 2px; font-size:var(--fs-sm); color:var(--muted); }
+  .more-row:hover { color:var(--fg); }
+  .set-section-head { display:flex; align-items:baseline; gap:10px; margin:0 0 4px 2px; }
+  .set-section-head .set-section-label { margin:0; }
+  .set-section-count { font-size:12px; color:var(--muted); font-variant-numeric:tabular-nums; }
   .set-row-control { flex:none; display:flex; align-items:center; gap:8px; }
   .set-row-detail { padding:2px 0 12px; }
   .set-row.disabled > .set-row-line { opacity:.55; pointer-events:none; }
@@ -16189,6 +16826,9 @@ var styles_default = `  :root {
   .set-row-tag { display:inline-block; margin-left:8px; font-size:11px; font-weight:500;
     color:var(--muted); border:1px solid var(--line); border-radius:999px; padding:1px 7px; vertical-align:1px; }
   .set-row-input { width:15em; min-width:0; }
+  /* row dropdown (primitives.tsx RowSelect): current value + chevron */
+  .row-select { gap:4px; padding:4px 6px 4px 10px; }
+  .row-select .ico { width:13px; height:13px; color:var(--muted); }
 
   /* Page chrome (primitives.tsx PageHeader / DangerZone) \u2014 every page opens
      with its own PageHeader (the shell renders no title). */
@@ -16197,7 +16837,7 @@ var styles_default = `  :root {
   .page-header-text { flex:1 1 auto; min-width:0; }
   .page-header-title { font-size:26px; font-weight:700; letter-spacing:-.02em; color:var(--fg); margin:0; }
   .page-header-sub { color:var(--muted); font-size:var(--fs-sm); margin-top:3px; }
-  .page-header-action { flex:none; padding-top:4px; }
+  .page-header-action { flex:none; display:flex; align-items:center; gap:8px; padding-top:4px; }
   .page-header-banner { margin-top:8px; }
   .danger-zone { margin-top:34px; }
   .danger-zone-label { font-size:12px; font-weight:600; text-transform:uppercase; letter-spacing:.07em;
@@ -16238,15 +16878,14 @@ var styles_default = `  :root {
   .audit-detail { padding:0 4px 10px 86px; }
   .audit-detail-ent-name { font-size:var(--fs-sm); font-weight:600; margin-top:6px; }
   .audit-blocks { font-size:var(--fs-sm); margin-top:2px; }
-  .audit-more { display:block; margin:14px auto 0; }
-  .audit-foot { font-size:var(--fs-xs); margin-top:18px; line-height:1.6; }
+  /* quiet tail: left-aligned text button while more exists; a rule once exhausted */
+  .audit-more { display:inline-flex; align-items:center; gap:6px; margin:14px 0 0 2px; font-size:var(--fs-sm); color:var(--muted); }
+  .audit-more:hover { color:var(--fg); }
+  .audit-more.loading { opacity:.6; pointer-events:none; }
+  .audit-end { display:flex; align-items:center; gap:12px; margin:18px 0 0; color:var(--muted); font-size:var(--fs-xs); }
+  .audit-end::before, .audit-end::after { content:""; flex:1; height:1px; background:var(--line); }
   @media (hover:none) { .audit-revert { opacity:1; } }
   .set-callout.warn { border-color:color-mix(in srgb,var(--warning,#9a6700) 32%,var(--line)); }
-  /* two-fact meta line under a block title (who publishes \xB7 where creds live) \u2014
-     answers the questions hiding under "is this bucket for server or browser?" */
-  .set-meta { display:flex; flex-wrap:wrap; gap:8px 16px; margin:0 0 12px; }
-  .set-meta-item { display:inline-flex; align-items:center; gap:6px; font-size:var(--fs-sm); color:var(--fg-soft); }
-  .set-meta-item svg { width:14px; height:14px; color:var(--accent); }
   /* a quiet helper line under a field / chip group */
   .set-hint { font-size:var(--fs-xs); color:var(--muted); line-height:1.5; margin:3px 0 4px; }
   /* progressive disclosure ("\u5DE5\u4F5C\u539F\u7406" / "\u8FDB\u9636") \u2014 native details, themed */
@@ -16331,58 +16970,39 @@ var styles_default = `  :root {
   .peer-sub { font-size:12px; color:var(--muted); margin-top:2px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
   .peer-menu { flex:none; padding:6px; }
 
-  /* workspace data-map summary heading \u6570\u636E\u4E0E\u5907\u4EFD (SyncHealthLine): a quiet
-     page sub-line, not a callout \u2014 no border, no fill; the dot carries tone. */
-  .sync-health { margin:0; }
-  .sync-health-line { display:inline-flex; align-items:center; gap:8px; max-width:100%; padding:2px 0;
-    background:none; border:0; cursor:pointer; text-align:left; font:inherit; color:var(--fg-soft); }
-  .sync-health-line:hover { color:var(--fg); }
-  .sync-health-line:hover .sync-health-more { color:var(--fg); }
+  /* \u6570\u636E\u4E0E\u5907\u4EFD health sentence (PageHeader sub): the dot alone carries tone */
+  .sync-health-sub { display:inline-flex; align-items:center; gap:8px; max-width:100%; min-width:0; }
   .sync-health-dot { flex:none; width:8px; height:8px; border-radius:50%; }
   .sync-health-dot.dot-ok { background:var(--success); }
   .sync-health-dot.dot-warn { background:var(--warning,#9a6700); }
   .sync-health-dot.dot-error { background:var(--danger); }
-  .sync-health-text { min-width:0; font-size:var(--fs-sm); font-weight:500;
-    overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-  .sync-health-more { flex:none; font-size:var(--fs-xs); color:var(--muted); }
-  /* shared expander chevron (SyncHealthLine \u8BE6\u60C5, device roster rows) */
+  /* shared expander chevron (bucket + device roster rows) */
   .row-chev { flex:none; color:var(--muted); display:flex; transition:transform .15s; }
   .row-chev .ico { width:14px; height:14px; }
   .row-chev.open { transform:rotate(180deg); }
   /* confirm dialogs: keep \\n line breaks (consequence lists) */
   .cfm-msg { white-space: pre-line; }
-  /* concurrent problems under the headline (only when >1, else redundant) */
-  .sync-health-issues { padding:2px 0 4px; }
-  .sync-health-issue { font-size:12px; color:var(--muted); padding:2px 0 2px 18px; }
-  .sync-health-places { padding:4px 0 2px; }
-  .sync-health-place { display:flex; align-items:baseline; gap:8px; padding:8px 0; min-width:0; }
-  .sync-health-place + .sync-health-place { border-top:1px solid var(--line); }
-  .sync-health-place-kind { flex:none; font-size:11px; color:var(--muted); border:1px solid var(--line);
-    border-radius:999px; padding:1px 7px; }
-  .sync-health-place-label { font-size:var(--fs-body); font-weight:550; overflow:hidden;
-    text-overflow:ellipsis; white-space:nowrap; }
-  .sync-health-place-cap { flex:1; min-width:0; font-size:12px; color:var(--muted);
-    overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-  .sync-health-role { flex:none; font-size:11px; color:var(--accent); background:var(--accent-soft);
-    border-radius:999px; padding:2px 7px; }
-
-  /* unified device roster (DevicesPanel) */
-  .device-detail { padding:2px 12px 10px 28px; display:flex; flex-direction:column; gap:4px; }
-  .device-detail-line { display:flex; align-items:center; gap:8px; font-size:12px; min-width:0; }
-  .device-ch-label { flex:none; color:var(--muted); border:1px solid var(--line); border-radius:999px; padding:1px 7px; font-size:11px; }
-  .device-ch-ref { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; color:var(--fg); }
-  .device-ch-actions { margin-left:auto; display:inline-flex; gap:2px; flex:none; }
-  .device-ch-actions .btn { padding:2px 8px; font-size:12px; }
-  .device-danger { color:var(--danger); }
-  .device-detail-note { font-size:12px; color:var(--muted); background:var(--surface-2);
-    border-radius:8px; padding:8px 10px; margin-top:4px; line-height:1.6; }
+
+  /* device roster (settings/devices-page.tsx): expanded detail = key/value
+     table + one action row + one plain sentence \u2014 no gray callout box. */
+  .device-kv { display:grid; grid-template-columns:max-content 1fr; gap:6px 18px; padding:4px 0 10px 42px; font-size:var(--fs-sm); margin:0; }
+  .device-kv dt { color:var(--muted); margin:0; }
+  .device-kv dd { margin:0; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .device-kv .mono { font-family:var(--mono); font-size:var(--fs-xs); letter-spacing:-.01em; }
+  .device-actions { display:flex; align-items:center; gap:4px; padding-left:42px; flex-wrap:wrap; }
+  .device-actions .btn { padding:3px 8px; font-size:12px; }
+  .device-actions .btn.danger { color:var(--danger); }
+  .device-actions .btn.danger:hover { background:var(--danger-soft); color:var(--danger); }
+  .device-note { font-size:12px; color:var(--muted); line-height:1.6; padding:4px 0 6px 42px; max-width:60ch; }
+  .device-note b { color:var(--fg-soft); font-weight:600; }
+  .device-note a { color:var(--accent); text-decoration:none; }
+  .device-note a:hover { text-decoration:underline; }
 
   /* cloud accessories panel (CloudPanel: bucket + edge in one glance) */
   .cloud-cta { border:1px solid var(--line); border-radius:10px; padding:14px 16px; margin:4px 0 12px;
     display:grid; grid-template-columns:1fr auto; gap:4px 12px; align-items:center; background:var(--surface-1); }
   .cloud-cta-title { font-weight:650; font-size:var(--fs-body); }
   .cloud-cta-sub { font-size:12px; color:var(--muted); margin-top:2px; line-height:1.6; }
-  .cloud-cta-alt { grid-column:1 / -1; font-size:12px; }
 
   /* printable recovery card */
   .recovery-card { border:2px solid var(--fg); border-radius:12px; padding:16px 18px; margin-top:8px; background:var(--surface); }
@@ -16429,6 +17049,8 @@ var styles_default = `  :root {
   .crumb-link { flex:none; padding:2px 5px; margin:-2px -3px; border-radius:var(--radius-sm); font-weight:500; }
   .crumb-link:hover { background:var(--hover); }
   .crumb-sep { flex:none; color:var(--muted); font-weight:400; }
+  .crumb-title { flex:0 1 auto; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .crumb-more { color:var(--muted); }
   .iconbtn { width:30px; height:30px; display:grid; place-items:center; border-radius:var(--radius-sm); color:var(--fg-soft); transition:background .12s; }
   .iconbtn:hover { background:var(--hover-2); color:var(--fg); }
   /* Dead end of the history (topbar back/forward). pointer-events:none also
@@ -16450,6 +17072,7 @@ var styles_default = `  :root {
   .btn-primary { background:var(--accent); color:var(--accent-fg); box-shadow:var(--shadow-sm); }
   .btn-primary:hover { filter:brightness(1.07); }
   .btn-danger { background:var(--danger); color:#fff; } .btn-danger:hover { filter:brightness(1.05); }
+  .btn.sm { padding:3px 8px; font-size:12px; }
   /* Notion-style ambient sync indicator: a quiet ghost control living in the
      topbar icon row. State reads through the *text/icon colour* \u2014 no filled pill
      or drop shadow \u2014 and only the error state escalates to a visible danger tone.
@@ -16479,6 +17102,26 @@ var styles_default = `  :root {
   @keyframes save-pop { 0% { transform:scale(.7); } 100% { transform:scale(1); } }
   @keyframes save-shake { 10%,90% { transform:translateX(-1px); } 20%,80% { transform:translateX(1.5px); } 30%,50%,70% { transform:translateX(-2px); } 40%,60% { transform:translateX(2px); } }
   @keyframes save-kbd-pulse { 0% { transform:scale(1); } 45% { transform:scale(1.05); } 100% { transform:scale(1); } }
+  /* Ambient replica-sync indicator (sync-indicator.tsx): same ghost-control
+     idiom as .share-save \u2014 zero footprint when idle, colour carries state,
+     only error escalates to danger. Lives in .sb-footer (desktop), .sb-head
+     (mobile home) and the topbar (sidebar collapsed). */
+  .sync-ind { display:inline-flex; align-items:center; gap:6px; height:28px; padding:0 8px; border-radius:var(--radius-sm);
+    font-size:var(--fs-xs); color:var(--fg-soft); white-space:nowrap; font-variant-numeric:tabular-nums; flex:none;
+    animation:save-rise .22s ease both; }
+  .sync-ind:hover { background:var(--hover-2); color:var(--fg); }
+  .sync-ind-ico { display:inline-flex; align-items:center; }
+  .sync-ring { width:12px; height:12px; border-radius:50%; border:1.5px solid var(--line-strong);
+    border-top-color:var(--accent); animation:mh-spin .8s linear infinite; }
+  .sync-ind-done { color:var(--success); }
+  .sync-ind-done .sync-ind-ico { animation:save-pop .24s cubic-bezier(.18,.9,.24,1.22) both; }
+  .sync-ind-error { color:var(--danger); }
+  .sync-ind-error:hover { background:var(--danger-soft); color:var(--danger); }
+  /* footer: push right, version stays flush right after it */
+  .sb-footer .sync-ind { margin-left:auto; }
+  .sb-footer .sync-ind + .sbf-ver { margin-left:8px; }
+  /* head slot is mobile-only (mirrors the .sb-head .iconbtn gating) */
+  .sb-head .sync-ind { display:none; }
 
   /* macOS desktop (hiddenInset frameless): drop the sidebar logo and reserve a
      draggable strip so the inset traffic lights never overlap our controls.
@@ -16501,7 +17144,7 @@ var styles_default = `  :root {
   /* document editor */
   .doc { max-width:740px; margin:0 auto; padding:60px 60px 36vh; }
   .doc-title { font-size:38px; font-weight:700; letter-spacing:-.02em; outline:none; line-height:1.15; margin-bottom:4px; }
-  .doc-title:empty::before { content:"\u65E0\u6807\u9898"; color:var(--muted); }
+  .doc-title:empty::before { content:attr(data-placeholder); color:var(--muted); }
   /* Backstop for the plain-text titles (see plain-edit.ts): should markup ever
      slip into one of these hosts, its inline font-size can't shrink the title. */
   .doc-title *, .db-title * { font:inherit; color:inherit; background:none; }
@@ -16991,11 +17634,16 @@ var styles_default = `  :root {
   .db-icon { width:38px; height:38px; border-radius:9px; background:var(--surface-2); display:grid; place-items:center; font-size:20px; }
   .db-title { font-size:27px; font-weight:700; letter-spacing:-.02em; outline:none; }
   .db-desc { color:var(--muted); font-size:13px; margin-top:2px; }
-  .views { display:flex; align-items:center; gap:2px; border-bottom:1px solid var(--line); margin:16px 0 0; }
-  .view-tab { display:flex; align-items:center; gap:6px; padding:8px 11px; font-size:var(--fs-ui); font-weight:500; color:var(--muted);
-    border-bottom:2px solid transparent; margin-bottom:-1px; transition:color .12s; }
+  .views { display:flex; align-items:center; gap:2px; border-bottom:1px solid var(--line); margin:16px 0 0; overflow-x:auto; scrollbar-width:none; }
+  .views::-webkit-scrollbar { display:none; }
+  .view-tab { display:flex; align-items:center; gap:6px; padding:8px 9px; font-size:var(--fs-ui); font-weight:500; color:var(--muted); cursor:pointer;
+    border-bottom:2px solid transparent; margin-bottom:-1px; transition:color .12s; white-space:nowrap; border-radius:var(--radius-sm) var(--radius-sm) 0 0; }
   .view-tab.active { color:var(--fg); border-bottom-color:var(--accent); }
-  .view-tab:hover { color:var(--fg); } .view-tab svg { width:14px; height:14px; }
+  .view-tab:hover { color:var(--fg); background:var(--hover); } .view-tab svg { width:14px; height:14px; }
+  .view-tab .caret { width:12px; height:12px; color:var(--muted); margin-left:-2px; opacity:0; transition:opacity .12s; }
+  .view-tab.active:hover .caret { opacity:1; }
+  .view-add { width:28px; height:28px; display:grid; place-items:center; color:var(--muted); border-radius:var(--radius-sm); margin-left:2px; flex:none; }
+  .view-add:hover { background:var(--hover-2); color:var(--fg); }
   /* \u6D6E\u7A97\u770B\u677F (right end of the toolbar / board bar, desktop only): a quiet
      Notion-style secondary pill \u2014 visible as a feature entry, never louder
      than \u65B0\u5EFA. Hover lifts the pill and nudges the icon's top kanban card up
@@ -17011,12 +17659,56 @@ var styles_default = `  :root {
   .popout-btn:active { transform:translateY(0); box-shadow:var(--shadow-sm); }
   .popout-btn .i-card { transition:transform .18s ease; }
   .popout-btn:hover .i-card { transform:translateY(-2px); }
-  .toolbar { display:flex; align-items:center; gap:2px; padding:10px 0; }
+  .toolbar { display:flex; align-items:center; gap:2px; padding:8px 0 6px; flex-wrap:wrap; }
   .toolbar .spacer { flex:1; }
-  .tbtn { display:flex; align-items:center; gap:6px; padding:5px 9px; border-radius:var(--radius-sm); color:var(--fg-soft); font-size:13px; font-weight:500; }
+  .tbtn { display:flex; align-items:center; gap:6px; padding:5px 9px; border-radius:var(--radius-sm); color:var(--fg-soft); font-size:13px; font-weight:500; white-space:nowrap; }
   .tbtn:hover { background:var(--hover-2); color:var(--fg); }
   .tbtn.on { color:var(--accent); }
-  .tablewrap { border:1px solid var(--line); border-radius:var(--radius); overflow:hidden; box-shadow:var(--shadow-sm); }
+  .tbtn.on:hover { background:var(--accent-soft); }
+  .tbtn.icon { padding:5px 7px; }
+  .tb-n { display:inline-grid; place-items:center; min-width:17px; height:17px; padding:0 5px; border-radius:999px; background:var(--accent-soft); color:var(--accent);
+    font-size:var(--fs-micro); font-weight:700; font-variant-numeric:tabular-nums; }
+  .tb-search { display:flex; align-items:center; gap:6px; padding:4px 8px; margin-left:2px; border:1px solid var(--line-strong); border-radius:var(--radius-sm); background:var(--bg);
+    color:var(--muted); min-width:220px; transition:border-color .12s, box-shadow .12s; animation:pal-in .13s ease; }
+  .tb-search:focus-within { border-color:var(--accent); color:var(--accent); box-shadow:0 0 0 2.5px color-mix(in srgb, var(--accent) 16%, transparent); }
+  .tb-search input { flex:1; width:0; min-width:0; border:0; outline:none; background:transparent; font:inherit; font-size:13px; color:var(--fg); }
+  .tb-search .clear { display:grid; place-items:center; width:18px; height:18px; border-radius:50%; color:var(--muted); flex:none; }
+  .tb-search .clear:hover { background:var(--hover-2); color:var(--fg); }
+  /* active filter / sort chips under the toolbar (Notion's rule row) */
+  .tb-chips { display:flex; align-items:center; flex-wrap:wrap; gap:6px; padding:0 0 10px; }
+  .chip-rule { display:inline-flex; align-items:center; gap:5px; padding:3px 6px 3px 8px; border:1px solid var(--line-strong); border-radius:999px; background:var(--bg);
+    font-size:var(--fs-sm); color:var(--fg-soft); max-width:360px; transition:border-color .12s, background .12s; }
+  .chip-rule:hover { border-color:var(--accent); background:var(--accent-soft); }
+  .chip-rule > svg { width:13px; height:13px; color:var(--muted); flex:none; }
+  .chip-rule .k { font-weight:600; color:var(--fg); white-space:nowrap; }
+  .chip-rule .v { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .chip-rule .x { display:grid; place-items:center; width:16px; height:16px; border-radius:50%; color:var(--muted); margin-left:2px; }
+  .chip-rule .x:hover { background:var(--hover-2); color:var(--fg); }
+  .chip-rule.op { color:var(--accent); border-style:dashed; padding:3px 9px; font-weight:600; }
+  .chip-rule.sort .k::before { content:""; }
+  /* filter rule editor popover */
+  .fr { min-width:272px; }
+  .fr .lbl { display:flex; align-items:center; gap:6px; text-transform:none; letter-spacing:0; font-size:var(--fs-sm); color:var(--fg); }
+  .fr-conds { display:flex; flex-wrap:wrap; gap:4px; padding:2px 4px 8px; }
+  .fr-cond { padding:3px 9px; border-radius:999px; border:1px solid var(--line); font-size:var(--fs-sm); color:var(--fg-soft); background:var(--bg); white-space:nowrap; }
+  .fr-cond:hover { background:var(--hover-2); color:var(--fg); }
+  .fr-cond.on { background:var(--accent); border-color:var(--accent); color:var(--accent-fg); }
+  .fr .dp { padding:0; }
+  .fr-refs { display:flex; flex-wrap:wrap; gap:4px; padding:4px 8px 6px; font-size:var(--fs-sm); }
+  .pop input.field { font:inherit; font-size:var(--fs-ui); color:var(--fg); }
+  /* sort rows + property visibility rows in their popovers */
+  .sortrow .sortname { flex:1; display:flex; align-items:center; gap:6px; min-width:0; font-size:var(--fs-ui); overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .sortrow .sortname svg { color:var(--muted); flex:none; }
+  .sortrow .sortdir { display:inline-flex; align-items:center; gap:4px; padding:3px 7px; border-radius:var(--radius-sm); font-size:var(--fs-sm); color:var(--fg-soft); white-space:nowrap; }
+  .sortrow .sortdir:hover { background:var(--hover-2); color:var(--fg); }
+  .flipv { transform:scaleY(-1); }
+  .proprow-v .optlabel { gap:6px; align-items:center; font-size:var(--fs-ui); color:var(--fg); }
+  .proprow-v .optlabel svg { color:var(--muted); flex:none; }
+  .proprow-v .optlabel .nm { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .proprow-v.off .optlabel { color:var(--muted); }
+  .proprow-v .x:disabled { opacity:.35; cursor:default; }
+  .proprow-v .x:disabled:hover { background:none; color:var(--muted); }
+  .tablewrap { border-top:1px solid var(--line); border-bottom:1px solid var(--line); }
   .tablescroll { overflow-x:auto; }
   /* fixed layout + max-content: each <col> width is authoritative, so the table
      is exactly the sum of its columns and resizing one column never redistributes
@@ -17025,12 +17717,26 @@ var styles_default = `  :root {
   table.grid { border-collapse:collapse; table-layout:fixed; width:max-content; min-width:100%; }
   table.grid th, table.grid td { border-right:1px solid var(--line); border-bottom:1px solid var(--line); padding:0; text-align:left; }
   table.grid th:last-child, table.grid td:last-child { border-right:0; }
-  table.grid tbody tr:last-child td { border-bottom:0; }
-  thead th { background:var(--surface); position:relative; user-select:none; font-weight:600; color:var(--fg-soft); }
-  .colhead { display:flex; align-items:center; gap:7px; padding:9px 11px; font-size:13px; cursor:pointer; }
-  .colhead:hover { background:var(--hover); }
-  .colhead .ti { color:var(--muted); } .colhead .ti svg { width:14px; height:14px; }
+  table.grid tbody tr:last-child td { border-bottom:1px solid var(--line); }
+  thead th { background:var(--bg); position:relative; user-select:none; font-weight:500; color:var(--muted); }
+  .colhead { display:flex; align-items:center; gap:7px; padding:8px 11px; font-size:13px; cursor:pointer; min-height:36px; }
+  .colhead:hover { background:var(--hover); color:var(--fg-soft); }
+  .colhead .ti { color:var(--muted); display:flex; } .colhead .ti svg { width:14px; height:14px; }
   .colhead .nm { flex:1; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .colhead .sortmark { width:12px; height:12px; color:var(--accent); flex:none; }
+  .colhead .caret { width:12px; height:12px; color:var(--muted); flex:none; opacity:0; transition:opacity .12s; }
+  .colhead:hover .caret { opacity:1; }
+  table.grid.nowrap .cell { flex-wrap:nowrap; overflow:hidden; }
+  table.grid.nowrap .cell .txt { white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
+  table.grid tfoot td { border-right:0; border-bottom:0; background:var(--bg); }
+  table.grid tfoot td.calc { height:32px; cursor:pointer; padding:0 11px; font-size:var(--fs-xs); color:var(--muted); text-align:right; white-space:nowrap; user-select:none; }
+  table.grid tfoot td.calc:hover { background:var(--hover); }
+  table.grid tfoot td.calc .k { display:inline-flex; align-items:center; gap:2px; }
+  table.grid tfoot td.calc .k.ghost { opacity:0; transition:opacity .12s; }
+  table.grid tfoot td.calc .k.ghost svg { width:11px; height:11px; }
+  table.grid tfoot:hover td.calc .k.ghost { opacity:.75; }
+  table.grid tfoot td.calc.on .k { margin-right:6px; }
+  table.grid tfoot td.calc.on .v { color:var(--fg); font-weight:600; font-variant-numeric:tabular-nums; }
   .col-resizer { position:absolute; top:0; right:-4px; width:7px; height:100%; cursor:col-resize; z-index:2; touch-action:none; }
   .addcol { min-width:46px; } .addcol .colhead { justify-content:flex-start; color:var(--muted); }
   /* trailing filler column: empty canvas to the right of the data, not a real cell */
@@ -17038,19 +17744,24 @@ var styles_default = `  :root {
   body.col-resizing { user-select:none; cursor:col-resize; }
   table.grid .selcell { width:38px; min-width:38px; max-width:38px; text-align:center; }
   /* relative: anchors the .celledit overlay editor to the cell */
-  td.cell-td { position:relative; vertical-align:top; }
+  td.cell-td { position:relative; vertical-align:top; user-select:none; }
+  td.cell-td .celledit, td.cell-td .celledit * { user-select:text; }
   .cell { padding:8px 11px; min-height:37px; cursor:text; word-break:break-word; display:flex; flex-wrap:wrap; gap:3px; align-items:center; }
   /* hover/active tint goes on the <td> (always full row height) not the inner
      .cell (only as tall as its content), so a taller sibling row never leaves a
      gap of un-tinted space at the bottom of the hovered cell. */
   td.cell-td { transition:background .1s; }
-  td.cell-td:hover { background:var(--hover); } .cell.center { justify-content:center; }
+  .cell.center { justify-content:center; }
   tbody tr { transition:background .08s; }
   tbody tr:hover { background:var(--hover); }
   tbody tr.sel { background:var(--accent-soft); }
   /* cell range selection: per-cell fill; the accent rectangle outline is drawn via inline box-shadow on edge cells. Placed after :hover so it wins on equal specificity. */
   td.cell-td.cellsel, td.cell-td.cellsel:hover { background:var(--accent-soft); }
   body.cell-selecting { user-select:none; cursor:cell; }
+  td.cell-td.fillsel { background:var(--accent-soft); box-shadow:inset 0 0 0 1px color-mix(in srgb, var(--accent) 45%, transparent); }
+  .cell-fill-handle { position:absolute; right:-4px; bottom:-4px; width:8px; height:8px; border-radius:2px; background:var(--accent);
+    border:1.5px solid var(--bg); cursor:crosshair; z-index:4; touch-action:none; }
+  .cell-fill-handle::after { content:""; position:absolute; inset:-6px; }
   body.cell-selecting .cell { cursor:cell; }
   /* column reorder still marks the target <th>; rows use the .rowdrop line below */
   table.grid th.drop-before { box-shadow:inset 2px 0 0 0 var(--accent); }
@@ -17106,23 +17817,57 @@ var styles_default = `  :root {
   /* data-resolved (not prefers-color-scheme): tracks a manual dark choice too. */
   :root[data-resolved="dark"] .chip { background:color-mix(in srgb,var(--c) 22%,transparent); color:color-mix(in srgb,var(--c) 75%,#fff); }
   /* relation chip: an <a> that jumps to the target record */
-  a.chip.rel { text-decoration:none; cursor:pointer; }
+  a.chip.rel { display:inline-block; max-width:100%; overflow:hidden; text-overflow:ellipsis; text-decoration:none; cursor:pointer; }
   a.chip.rel:hover { background:color-mix(in srgb,var(--c) 26%,transparent); text-decoration:underline; text-decoration-style:dashed; text-underline-offset:2px; }
   /* doc chip whose target is deleted/unsynced: muted + dashed, same cue as the
      editor's .cm-doclink-missing pill */
   a.chip.rel.doc-missing { background:transparent; color:var(--muted); outline:1px dashed var(--line-strong); outline-offset:-1px; }
-  .addrow { display:flex; align-items:center; gap:7px; padding:9px 12px; color:var(--muted); font-size:13px; cursor:pointer; border-top:1px solid var(--line); }
+  .addrow { display:flex; align-items:center; gap:7px; padding:8px 12px; color:var(--muted); font-size:13px; cursor:pointer; border-radius:var(--radius-sm); margin-top:2px; }
   .addrow:hover { background:var(--hover); color:var(--fg-soft); }
+  .addrow svg { width:14px; height:14px; }
   .gridfoot { display:flex; gap:18px; color:var(--muted); font-size:12px; padding:8px 2px; }
-  input.inlineedit { width:100%; border:0; outline:2px solid var(--accent); border-radius:4px; padding:7px 9px; background:var(--bg); color:var(--fg); font:inherit; }
+  .inlineedit { width:100%; border:0; outline:2px solid var(--accent); border-radius:0; padding:7px 9px; background:var(--bg); color:var(--fg); font:inherit; }
+  textarea.inlineedit { resize:none; overflow:hidden; line-height:1.45; display:block; }
+  .inlineedit.num { text-align:right; font-variant-numeric:tabular-nums; }
   /* Overlay cell editor: floats over the td; the display content underneath
      stays in flow so the row height never changes while editing. Padding on the
-     input matches .cell (8px 11px) so the text doesn't shift on entering edit. */
+     input matches .cell (8px 11px) so the text doesn't shift on entering edit;
+     a multi-line text editor grows downward over the rows below. */
   .celledit { position:absolute; top:0; left:0; width:100%; min-height:100%; z-index:10;
-    display:flex; align-items:stretch; background:var(--bg); border-radius:var(--radius-sm);
-    box-shadow:0 0 0 2px var(--accent), var(--shadow-md); }
-  .celledit input.inlineedit { width:100%; min-width:0; border:0; outline:0; border-radius:inherit;
+    display:flex; align-items:stretch; background:var(--bg); border-radius:0;
+    box-shadow:inset 0 0 0 2px var(--accent), var(--shadow-md); }
+  .celledit .inlineedit { width:100%; min-width:0; border:0; outline:0; border-radius:inherit;
     padding:8px 11px; background:transparent; }
+  .celledit textarea.inlineedit { min-height:37px; }
+  .cell.num { justify-content:flex-end; font-variant-numeric:tabular-nums; }
+  .cell .txt { white-space:pre-wrap; }
+  .cell-url { display:inline-flex; align-items:center; gap:4px; max-width:100%; min-width:0; color:var(--accent); text-decoration:none; }
+  .cell-url span { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .cell-url svg { flex:none; width:12px; height:12px; opacity:0; transition:opacity .1s; }
+  .cell-url:hover span { text-decoration:underline; text-underline-offset:2px; }
+  td.cell-td:hover .cell-url svg { opacity:.7; }
+  /* loading skeleton: the real grid's cells, sheen bars for content */
+  table.grid.skel { pointer-events:none; }
+  table.grid.skel .skel-t { display:block; height:13px; width:calc(38% + var(--i, 0) * 11%); border-radius:4px; }
+  table.grid.skel th .skel-t { height:12px; width:calc(30% + var(--i, 0) * 9%); }
+  /* date picker (date-picker.tsx) */
+  .dp { padding:2px; }
+  .dp .selsearch.invalid { border-color:var(--danger); }
+  .dp-nav { display:flex; align-items:center; gap:4px; padding:2px 2px 6px; }
+  .dp-nav .iconbtn.sm { width:26px; height:26px; }
+  .dp-title { flex:1; text-align:center; font-size:var(--fs-ui); font-weight:600; color:var(--fg); }
+  .dp-grid { display:grid; grid-template-columns:repeat(7, 32px); gap:2px; justify-content:center; }
+  .dp-head span { text-align:center; font-size:var(--fs-micro); color:var(--muted); font-weight:600; padding:2px 0 4px; }
+  .dp-day { width:32px; height:30px; border-radius:var(--radius-sm); font-size:var(--fs-sm); color:var(--fg); display:grid; place-items:center;
+    font-variant-numeric:tabular-nums; }
+  .dp-day.dim { color:var(--muted); opacity:.55; }
+  .dp-day:hover { background:var(--hover-2); }
+  .dp-day.focus { box-shadow:inset 0 0 0 1.5px var(--accent); }
+  .dp-day.today { font-weight:700; color:var(--accent); }
+  .dp-day.picked { background:var(--accent); color:var(--accent-fg); }
+  .dp-day.picked:hover { background:var(--accent); }
+  .dp-foot { display:flex; align-items:center; gap:2px; padding:8px 2px 2px; margin-top:4px; border-top:1px solid var(--line); }
+  .dp-hint { margin-left:auto; font-size:var(--fs-xs); color:var(--muted); padding-right:4px; }
 
   /* ---- sites (\u7AD9\u70B9\u7BA1\u7406) ---- */
   .sites-grid { display:grid; grid-template-columns:repeat(auto-fill, minmax(264px, 1fr)); gap:14px; margin-top:4px; }
@@ -17168,55 +17913,148 @@ var styles_default = `  :root {
   .site-empty .et { font-size:15px; color:var(--fg); margin-bottom:5px; font-weight:650; letter-spacing:-.01em; }
   .site-empty .ed { font-size:var(--fs-sm); margin-bottom:18px; max-width:42ch; line-height:1.55; }
 
-  /* \u2500\u2500 \u5206\u4EAB (global ShareView) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-  .shares-page .db-head { align-items:flex-start; gap:16px; margin-bottom:18px; }
-  .shv-tools { margin-left:auto; display:flex; align-items:center; gap:10px; flex-wrap:wrap; }
+  /* \u2500\u2500 \u5206\u4EAB (global ShareView) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+     One row = object \xB7 status \xB7 one primary action \xB7 overflow. State is the
+     organizing idea: colour lives only in the status dot and the \u53EF\u7F16\u8F91 word;
+     expiry is a share's normal ending and reads muted, never danger. */
+  .shares-page .db-head { align-items:flex-start; gap:16px; margin-bottom:6px; }
+  .shares-page .db-desc { max-width:56ch; }
+  .shv-toolbar { display:flex; align-items:center; gap:10px; flex-wrap:nowrap; padding:10px 0; margin-bottom:8px; }
+  .shv-tools-right { display:flex; align-items:center; gap:10px; flex:none; margin-left:auto; }
   .shv-seg { display:inline-flex; background:var(--surface-2); border:1px solid var(--line); border-radius:var(--radius-sm); padding:2px; }
-  .shv-seg-btn { padding:5px 11px; border-radius:calc(var(--radius-sm) - 2px); font-size:13px; color:var(--fg-soft); }
+  .shv-seg-btn { display:inline-flex; align-items:baseline; padding:5px 11px; border-radius:calc(var(--radius-sm) - 2px); font-size:13px; color:var(--fg-soft); }
   .shv-seg-btn.active { background:var(--bg); color:var(--fg); box-shadow:var(--shadow-sm); }
-  .shv-search { display:flex; align-items:center; gap:6px; background:var(--bg); border:1px solid var(--line-strong); border-radius:var(--radius-sm); padding:5px 10px; color:var(--muted); }
-  .shv-search input { border:0; background:none; outline:none; color:var(--fg); font-size:13px; width:180px; }
+  .shv-seg-btn .n { display:inline-flex; justify-content:flex-end; align-items:center; min-width:2ch; margin-left:5px; font-family:var(--mono); font-size:var(--fs-micro); color:var(--muted); font-variant-numeric:tabular-nums; }
+  .shv-seg-btn .skel-n { width:2ch; height:.85em; border-radius:3px; animation:skel-in .25s ease .12s both; }
+  .shv-seg-btn.active .n { color:var(--fg-soft); }
+  .shv-src { gap:5px; color:var(--fg-soft); }
+  .shv-src.on { color:var(--fg); }
+  .shv-src .ico { width:14px; height:14px; opacity:.7; }
+  .shv-search { display:flex; align-items:center; gap:6px; flex:1 1 220px; min-width:140px; max-width:360px; background:var(--bg); border:1px solid var(--line-strong); border-radius:var(--radius-sm); padding:5px 10px; color:var(--muted); }
+  .shv-search:focus-within { border-color:var(--accent); }
+  .shv-search input { border:0; background:none; outline:none; color:var(--fg); font-size:13px; width:100%; min-width:0; }
 
   .shv-list { display:flex; flex-direction:column; gap:8px; list-style:none; padding:0; margin:0; }
-  .shv-row { display:flex; align-items:center; gap:13px; padding:13px 15px; background:var(--bg); border:1px solid var(--line);
+  .shv-row { display:grid; grid-template-columns:38px minmax(0,1fr) auto auto; gap:6px 13px; align-items:center;
+    padding:12px 15px; background:var(--bg); border:1px solid var(--line);
     border-radius:var(--radius-lg); transition:border-color .12s, box-shadow .12s; }
   .shv-row:hover { border-color:var(--line-strong); box-shadow:var(--shadow-sm); }
   .shv-ico { width:38px; height:38px; flex:none; display:grid; place-items:center; border-radius:var(--radius-md, 10px);
     background:var(--surface-2); color:var(--fg-soft); }
   .shv-ico svg { width:19px; height:19px; }
   .shv-ico.k-doc { color:var(--accent); background:var(--accent-soft); }
+  .shv-ico.k-database { color:var(--fg-soft); }
   .shv-ico.k-site { color:#1a7f5a; }
-  .shv-main { flex:1; min-width:0; }
-  .shv-titleline { display:flex; align-items:center; gap:8px; flex-wrap:wrap; }
-  .shv-title { font-weight:600; color:var(--fg); letter-spacing:-.01em; max-width:34ch; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .shv-main { min-width:0; }
+  .shv-title { display:block; max-width:100%; font-weight:600; color:var(--fg); letter-spacing:-.01em;
+    overflow:hidden; text-overflow:ellipsis; white-space:nowrap; text-align:left; }
   .shv-title:hover { color:var(--accent); }
-  .shv-pill { font-size:11px; line-height:1.6; padding:0 8px; border-radius:999px; border:1px solid var(--line-strong); color:var(--fg-soft); }
-  .shv-pill.t-s3 { background:var(--accent-soft); border-color:transparent; color:var(--accent); }
-  .shv-pill.p-edit { background:var(--danger-soft); border-color:transparent; color:var(--danger); }
-  .shv-lock { font-size:12px; }
-  .shv-meta { margin-top:3px; font-size:var(--fs-sm); color:var(--muted); overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-  .shv-exp.warn { color:var(--danger); }
-  .shv-exp.dead { text-decoration:line-through; }
+  .shv-sub { display:flex; align-items:center; gap:6px; margin-top:3px; min-width:0; font-size:var(--fs-sm); color:var(--muted);
+    white-space:nowrap; overflow:hidden; }
+  .shv-sub > * { flex:none; }
+  .shv-sub > .shv-link { flex:0 1 auto; }
+  .shv-link-text { min-width:0; overflow:hidden; text-overflow:ellipsis; }
+  .shv-sep { color:var(--line-strong); }
+  /* the link itself: mono, copy on click, copy glyph slides in on hover */
+  .shv-link { display:inline-flex; align-items:center; gap:4px; min-width:0; max-width:46ch; font-family:var(--mono); font-size:var(--fs-xs);
+    color:var(--fg-soft); overflow:hidden; text-overflow:ellipsis; white-space:nowrap; border-radius:4px; }
+  .shv-link .ico { width:12px; height:12px; opacity:0; transition:opacity .12s; flex:none; }
+  .shv-link:not(:disabled):hover { color:var(--accent); }
+  .shv-link:not(:disabled):hover .ico { opacity:1; }
+  .shv-link:disabled { cursor:default; text-decoration:line-through; text-decoration-color:var(--line-strong); }
+  .shv-snap { font-variant-numeric:tabular-nums; }
+  .shv-perm.edit { color:var(--danger); font-weight:500; }
+  .shv-lock { display:inline-flex; color:var(--fg-soft); }
+  .shv-lock .ico { width:12px; height:12px; }
+  /* status column: dot + short text, fixed floor so rows never jitter */
+  .shv-status { display:inline-flex; align-items:center; gap:7px; min-width:9ch; font-size:var(--fs-sm); color:var(--fg-soft);
+    font-variant-numeric:tabular-nums; white-space:nowrap; }
+  .shv-dot { width:8px; height:8px; border-radius:50%; background:var(--muted); flex:none; }
+  .shv-status.tone-ok .shv-dot { background:var(--success); }
+  .shv-status.tone-warn { color:var(--warning,#9a6700); }
+  .shv-status.tone-warn .shv-dot { background:var(--warning,#9a6700); }
+  .shv-status.tone-muted { color:var(--muted); }
+  .shv-status.tone-muted .shv-dot { background:transparent; border:1.5px solid var(--line-strong); }
+  .shv-status .sync-ring { width:10px; height:10px; }
   .shv-actions { display:flex; align-items:center; gap:6px; flex:none; }
-  .shv-actions .btn { padding:5px 10px; font-size:12px; }
+  .shv-actions .btn { padding:5px 10px; font-size:12px; min-width:76px; justify-content:center; }
+  .shv-actions .btn.txt-danger { color:var(--danger); }
+  .shv-row.st-expired .shv-title { color:var(--fg-soft); }
+  /* expired group sinks below the live list */
+  .shv-group-head { display:flex; align-items:center; gap:8px; margin:22px 2px 8px; font-size:var(--fs-sm); font-weight:600; color:var(--muted); }
+  .shv-group-head .n { font-family:var(--mono); font-size:var(--fs-micro); font-weight:400; }
+  .shv-group-head .btn { margin-left:auto; padding:4px 10px; font-size:12px; }
+  /* list swap: data arriving over the skeleton fades in rather than hard-cutting */
+  .shv-list { animation:skel-in .18s ease both; }
+
+  /* \u2500\u2500 skeletons (skeleton.tsx, primitives.tsx SetRowSkeleton, shares-view
+     ShareListSkeleton). Rows are the REAL row markup; only content is swapped
+     for sheen blocks. .skel-list fades in after 120ms so an instant load
+     never flashes it; --i offsets each row's sheen into one rolling wave. */
+  .skel-list { animation:skel-in .25s ease .12s both; }
+  .skel-lines { display:flex; flex-direction:column; gap:8px; }
+  .skel-lines .skel-s { width:calc(58% + var(--i, 0) * 9%); max-width:100%; }
+  .page-header-sub .skel-s { display:block; width:22ch; }
+  .set-row.skel { pointer-events:none; }
+  .set-row.skel .set-row-text { display:flex; flex-direction:column; gap:5px; padding:3px 0; }
+  .set-row.skel .skel-t { height:14px; width:calc(30% + var(--i, 0) * 8%); border-radius:5px; }
+  .set-row.skel .skel-s { height:11px; width:calc(44% + var(--i, 0) * 7%); border-radius:4px; }
+  .set-row.skel .set-row-lead.skel-b { border-radius:7px; }
+  .skel-switch { width:38px; height:22px; border-radius:999px; }
+  .skel-chevron { width:14px; height:14px; border-radius:4px; }
+  .skel-menu { width:28px; height:28px; border-radius:var(--radius-sm); }
+  .skel-button { width:76px; height:29px; border-radius:var(--radius-sm); }
+  .audit-item.skel .audit-item-line { cursor:default; pointer-events:none; }
+  .audit-item.skel .skel-when { width:56px; height:12px; border-radius:4px; flex:none; }
+  .audit-item.skel .skel-t { height:14px; width:calc(34% + var(--i, 0) * 9%); border-radius:5px; }
+  .site-card.skel { pointer-events:none; }
+  .site-card.skel:hover { transform:none; box-shadow:none; border-color:var(--line); }
+  .site-card.skel .si.skel-b { background:var(--surface-2); }
+  .site-card.skel .skel-t { height:14px; width:calc(40% + var(--i, 0) * 8%); border-radius:5px; margin-bottom:6px; }
+  .site-card.skel .skel-s { height:11px; width:calc(55% + var(--i, 0) * 6%); border-radius:4px; }
+  .site-card.skel .skel-addr { height:30px; width:80%; border-radius:var(--radius-sm); }
+  .filerow.skel { pointer-events:none; }
+  .filerow.skel .fi.skel-b { background:var(--surface-2); }
+  .filerow.skel .skel-t { height:13px; width:calc(36% + var(--i, 0) * 10%); border-radius:4px; }
+  .blob-hero.skel .blob-legend .skel-s { height:12px; width:calc(70% + var(--i, 0) * 8%); }
+  .blob-hero.skel .blob-total .skel-s { display:block; height:11px; width:14ch; }
+  .skel-b { display:block; position:relative; overflow:hidden; background:var(--surface-2); border-radius:6px; }
+  .skel-b::after { content:""; position:absolute; inset:0;
+    background:linear-gradient(90deg, transparent 20%, color-mix(in srgb, var(--fg) 5%, transparent) 50%, transparent 80%);
+    background-size:200% 100%; animation:skel-sweep 1.6s ease-in-out infinite;
+    animation-delay:calc(var(--i, 0) * 120ms); }
+  .shv-row.skel { pointer-events:none; }
+  .shv-row.skel:hover { border-color:var(--line); box-shadow:none; }
+  .skel-t { height:1.55em; height:1lh; width:calc(52% + var(--i, 0) * 9%); border-radius:5px; }
+  .skel-s { height:1.55em; height:1lh; width:min(44ch, 60%); border-radius:4px; }
+  .shv-status .skel-st { height:1.55em; height:1lh; width:7ch; border-radius:4px; }
+  .skel-btn { width:76px; height:29px; border-radius:var(--radius-sm); }
+  .skel-ib { width:30px; height:30px; border-radius:var(--radius-sm); }
+  @keyframes skel-in { from { opacity:0; } to { opacity:1; } }
+  @keyframes skel-sweep { from { background-position:100% 0; } to { background-position:-100% 0; } }
   @media (max-width:640px){
-    /* head stacks: title/desc full row, then segmented tabs, then search */
+    .shv-actions .skel-btn { flex:1; width:auto; height:36px; }
+    .shv-actions .skel-ib { width:40px; height:36px; }
+    /* head stacks: title/desc full row, then segmented tabs, then [source][search] */
     .shares-page .db-head { flex-direction:column; align-items:stretch; gap:12px; }
-    .shv-tools { margin-left:0; width:100%; }
-    .shv-seg { display:flex; width:100%; }
-    .shv-seg-btn { flex:1; text-align:center; }
-    .shv-search { flex:1; }
-    .shv-search input { width:100%; flex:1; }
-
-    /* cards: title clamps to two lines, meta wraps naturally */
-    .shv-row { flex-wrap:wrap; }
-    .shv-title { max-width:100%; white-space:normal; display:-webkit-box;
-      -webkit-line-clamp:2; -webkit-box-orient:vertical; text-align:left; }
-    .shv-meta { white-space:normal; overflow:visible; text-overflow:clip; }
-
-    /* actions: full row of evenly stretched touch targets */
-    .shv-actions { width:100%; }
-    .shv-actions .btn { flex:1; justify-content:center; padding:7px 10px; }
+    .shv-toolbar { flex-wrap:wrap; }
+    .shv-tools-right { display:contents; }
+    .shv-seg { display:flex; width:100%; order:-1; }
+    .shv-seg-btn { flex:1; justify-content:center; padding:6px 4px; }
+    .shv-src { flex:1; justify-content:center; }
+    .shv-search { flex:1; min-width:0; max-width:none; }
+
+    /* rows: ico + main on top; status, then the action row, each full width */
+    .shv-row { grid-template-columns:38px minmax(0,1fr); gap:8px 13px; align-items:start; }
+    .shv-title { white-space:normal; display:-webkit-box; -webkit-line-clamp:2; -webkit-box-orient:vertical; }
+    .shv-sub { white-space:normal; flex-wrap:wrap; row-gap:2px; }
+    .shv-link { max-width:100%; }
+    .shv-status { grid-column:1 / -1; min-width:0; }
+    .shv-actions { grid-column:1 / -1; }
+    .shv-actions .btn { flex:1; padding:8px 10px; }
+    .shv-actions .iconbtn { width:40px; height:36px; flex:none; }
+    .shv-group-head { flex-wrap:wrap; }
+    .shv-group-head .btn { margin-left:0; width:100%; justify-content:center; padding:7px 10px; }
   }
 
   /* in-context "\u5DF2\u5206\u4EAB" badge on docs / tables / site cards */
@@ -17378,6 +18216,11 @@ var styles_default = `  :root {
   .proprow .v { flex:1; padding:7px 8px; border-radius:var(--radius-sm); cursor:text; min-height:33px; display:flex; flex-wrap:wrap; gap:3px; align-items:center; }
   .proprow .v:hover { background:var(--hover); }
   .peek-divider { height:1px; background:var(--line); margin:22px 0 18px; }
+  .peek-hidden-toggle { display:flex; align-items:center; gap:6px; padding:7px 8px; margin:2px 0; border-radius:var(--radius-sm); color:var(--muted); font-size:13px; width:100%; text-align:left; }
+  .peek-hidden-toggle:hover { background:var(--hover); color:var(--fg-soft); }
+  .peek-hidden-toggle svg { transition:transform .15s; }
+  .peek-hidden-toggle svg.down { transform:rotate(90deg); }
+  .peek-head .peek-nav { display:flex; gap:2px; margin-left:4px; }
   /* linked-document tabs + embedded editor below the peek's property list */
   .peekdocs-tabs { display:flex; align-items:center; gap:4px; flex-wrap:wrap; margin-bottom:6px; }
   .peekdocs-tab { border:0; background:none; font:inherit; font-size:var(--fs-sm); font-weight:500; color:var(--muted);
@@ -17408,7 +18251,7 @@ var styles_default = `  :root {
   .hist-kind.repair { background:var(--danger-soft); color:var(--danger); }
   .hist-now { font-size:var(--fs-xs); padding:1px 6px; border-radius:99px; background:var(--accent); color:var(--accent-fg); }
   .hist-preview { flex:1; overflow:auto; padding:20px 24px; }
-  .hist-doc-title { font-size:21px; font-weight:700; letter-spacing:-.02em; margin-bottom:14px; }
+  .hist-doc-title { font-size:21px; font-weight:700; letter-spacing:-.02em; margin-bottom:14px; overflow-wrap:anywhere; }
   .hist-foot { display:flex; justify-content:flex-end; padding:12px 16px; border-top:1px solid var(--line); }
   .pad { padding:12px; }
   .hist-rec-head { display:flex; align-items:center; justify-content:space-between; margin-bottom:10px; }
@@ -17515,50 +18358,68 @@ var styles_default = `  :root {
   button.fname.link { border:0; background:none; padding:0; text-align:left; cursor:pointer; font-size:inherit; }
   button.fname.link:hover { color:var(--accent); text-decoration:underline; text-decoration-style:dashed; }
 
+  /* key caps (kbd.tsx) */
+  .kbd { display:inline-flex; align-items:center; gap:2px; vertical-align:middle; font-family:var(--kbd-font);
+    font-variant-numeric:tabular-nums; color:var(--muted); white-space:nowrap; }
+  .kbd .key { display:inline-grid; place-items:center; min-width:18px; height:18px; padding:0 4px;
+    border:1px solid var(--line-strong); border-radius:5px; background:var(--surface); font-size:10.5px; font-weight:500; line-height:1; }
+  .kbd .key.sym { font-size:12.5px; }
+
+  /* tooltip (TooltipHost in ui.tsx) */
+  .tip { position:fixed; z-index:118; pointer-events:none; display:inline-flex; align-items:center; gap:8px;
+    padding:5px 8px; border-radius:7px; background:var(--tip-bg); color:var(--tip-fg); font-size:12px; line-height:1.3;
+    white-space:nowrap; box-shadow:var(--shadow-md); animation:tip-in .12s ease-out; }
+  :root[data-resolved="dark"] .tip { border:1px solid var(--line-strong); }
+  .tip[data-side="above"] { animation-name:tip-in-above; }
+  .tip .kbd { color:var(--tip-kbd-fg); }
+  .tip .kbd .key { min-width:16px; height:16px; padding:0 3px; background:var(--tip-kbd-bg); border-color:transparent; font-size:10px; }
+  .tip .kbd .key.sym { font-size:11.5px; }
+  @keyframes tip-in { from { opacity:0; transform:translateY(2px); } }
+  @keyframes tip-in-above { from { opacity:0; transform:translateY(-2px); } }
+
   /* menu / popover */
   .menu-layer { position:fixed; inset:0; z-index:115; }
   .pop { position:fixed; background:var(--bg); border:1px solid var(--line); border-radius:var(--radius); box-shadow:var(--shadow-lg);
-    padding:6px; min-width:232px; max-height:70vh; overflow:auto; animation:pop .12s ease; }
+    padding:6px; min-width:232px; max-width:min(420px, calc(100vw - 20px)); max-height:70vh; overflow:auto; animation:pop .12s ease; }
   @keyframes pop { from { opacity:0; transform:translateY(-4px); } }
   /* Action-sheet variant: MenuHost (ui.tsx) adds .sheet on phones, where an
      anchored popover clips at the edges and sits under the finger. */
   .pop.sheet { left:8px; right:8px; top:auto; bottom:calc(8px + env(safe-area-inset-bottom));
-    min-width:0; max-height:60vh; max-height:60dvh; border-radius:var(--radius-lg);
+    min-width:0; max-width:none; max-height:60vh; max-height:60dvh; border-radius:var(--radius-lg);
     animation:sheet-in .18s ease; }
   @keyframes sheet-in { from { opacity:0; transform:translateY(12px); } }
-  .pop .lbl { font-size:var(--fs-micro); font-weight:600; color:var(--muted); text-transform:uppercase; letter-spacing:.05em; padding:6px 8px 3px; }
-  .pop .item { display:flex; align-items:center; gap:10px; padding:7px 8px; border-radius:var(--radius-sm); width:100%; text-align:left; color:var(--fg); font-size:var(--fs-ui); }
-  .pop .item:hover, .pop .item.sel { background:var(--hover-2); }
-  .pop .item .lico { width:28px; height:28px; display:grid; place-items:center; border:1px solid var(--line); border-radius:6px; color:var(--fg-soft); flex:none; }
-  .pop .item .lico.plain { border:0; width:22px; height:22px; }
-  .pop .item .meta { flex:1; min-width:0; }
-  .pop .item .t { font-size:var(--fs-ui); } .pop .item .d { font-size:var(--fs-xs); color:var(--muted); display:block; }
-  .pop .item .chk { color:var(--accent); margin-left:auto; }
-  /* shortcut badge, mirrors .sb-search kbd; margin-left:auto pins it right (and
-     a trailing .chk, whose own auto then collapses, rides the gap beside it) */
-  .pop .item kbd { margin-left:auto; font-family:var(--mono); font-size:10px; color:var(--muted); border:1px solid var(--line-strong); border-radius:4px; padding:1px 4px; }
-  .pop .item.danger { color:var(--danger); } .pop .item.danger .lico { color:var(--danger); }
-  .pop .sep { height:1px; background:var(--line); margin:5px 4px; }
+  :is(.pop,.palette) .lbl { font-size:var(--fs-micro); font-weight:600; color:var(--muted); text-transform:uppercase; letter-spacing:.05em; padding:6px 8px 3px; }
+  :is(.pop,.palette) .item { display:flex; align-items:center; gap:10px; padding:7px 8px; border-radius:var(--radius-sm); width:100%; text-align:left; color:var(--fg); font-size:var(--fs-ui); }
+  :is(.pop,.palette) .item:hover, :is(.pop,.palette) .item.sel { background:var(--hover-2); }
+  :is(.pop,.palette) .item:focus-visible { outline:none; background:var(--hover-2); box-shadow:inset 0 0 0 1.5px var(--accent); }
+  :is(.pop,.palette) .item .lico { width:28px; height:28px; display:grid; place-items:center; border:1px solid var(--line); border-radius:6px; color:var(--fg-soft); flex:none; }
+  :is(.pop,.palette) .item .lico.plain { border:0; width:22px; height:22px; }
+  :is(.pop,.palette) .item .meta { flex:1; min-width:0; }
+  :is(.pop,.palette) .item .t { font-size:var(--fs-ui); display:block; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; } :is(.pop,.palette) .item .d { font-size:var(--fs-xs); color:var(--muted); display:block; }
+  :is(.pop,.palette) .item .chk { color:var(--accent); margin-left:auto; }
+  :is(.pop,.palette) .item .kbd { margin-left:auto; }
+  :is(.pop,.palette) .item.danger { color:var(--danger); } :is(.pop,.palette) .item.danger .lico { color:var(--danger); }
+  :is(.pop,.palette) .sep { height:1px; background:var(--line); margin:5px 4px; }
   .pop .typegrid { display:grid; grid-template-columns:repeat(4,1fr); gap:4px; padding:2px 2px 4px; }
   .pop .typegrid .item { flex-direction:column; gap:5px; padding:9px 4px; text-align:center; }
   .pop .typegrid .item .lico { margin:0 auto; }
   .pop input.field { width:100%; border:1px solid var(--line-strong); border-radius:var(--radius-sm); padding:7px 9px; outline:none; background:var(--surface); margin:2px; }
   .pop input.field:focus { border-color:var(--accent); }
   /* select-cell picker: search/create input at the top of the popover */
-  .pop .selsearch { display:flex; align-items:center; gap:7px; margin:2px 2px 6px; padding:6px 9px;
+  :is(.pop,.palette) .selsearch { display:flex; align-items:center; gap:7px; margin:2px 2px 6px; padding:6px 9px;
     border:1px solid var(--line-strong); border-radius:var(--radius-sm); background:var(--surface); color:var(--muted);
     transition:border-color .12s ease, box-shadow .12s ease, color .12s ease; }
-  .pop .selsearch:focus-within { border-color:var(--accent); color:var(--accent);
+  :is(.pop,.palette) .selsearch:focus-within { border-color:var(--accent); color:var(--accent);
     box-shadow:0 0 0 2.5px color-mix(in srgb, var(--accent) 16%, transparent); }
-  .pop .selsearch input { flex:1; width:0; min-width:0; border:0; background:transparent; outline:none;
+  :is(.pop,.palette) .selsearch input { flex:1; width:0; min-width:0; border:0; background:transparent; outline:none;
     font:inherit; font-size:var(--fs-ui); color:var(--fg); }
-  .pop .selsearch input::placeholder { color:var(--muted); }
-  .pop .selsearch .clear { display:grid; place-items:center; width:18px; height:18px; margin:-2px -3px -2px 0;
+  :is(.pop,.palette) .selsearch input::placeholder { color:var(--muted); }
+  :is(.pop,.palette) .selsearch .clear { display:grid; place-items:center; width:18px; height:18px; margin:-2px -3px -2px 0;
     border-radius:50%; color:var(--muted); flex:none; }
-  .pop .selsearch .clear:hover { background:var(--hover-2); color:var(--fg); }
+  :is(.pop,.palette) .selsearch .clear:hover { background:var(--hover-2); color:var(--fg); }
   /* relation record picker: fixed-height list \u2014 the popover is positioned once
      on open, so async-loaded rows must scroll instead of growing off-screen */
-  .pop .rellist { max-height:264px; overflow-y:auto; }
+  :is(.pop,.palette) .rellist { max-height:264px; overflow-y:auto; }
   .optrow { display:flex; align-items:center; gap:6px; padding:3px 4px; }
   .optrow .chip { flex:1; }
   .optrow .grip { width:18px; height:22px; display:grid; place-items:center; color:var(--muted); cursor:grab; touch-action:none; flex:none; }
@@ -17603,12 +18464,46 @@ var styles_default = `  :root {
   /* opt-in (openModal aboveMenus): stack one dialog over the menu layer (115)
      so a confirm can appear without dismissing an open popover */
   .modal-scrim.above-menus { z-index:130; }
-  .modal { background:var(--bg); border-radius:var(--radius-xl); box-shadow:var(--shadow-lg); width:440px; max-width:100%; max-height:100%; display:flex; flex-direction:column; overflow:hidden; }
+  .modal { background:var(--bg); border-radius:var(--radius-xl); box-shadow:var(--shadow-lg); width:440px; max-width:100%; max-height:100%; display:flex; flex-direction:column; overflow:hidden;
+    animation:mo-in .13s ease-out; }
+  @keyframes mo-in { from { opacity:0; transform:translateY(6px) scale(.98); } }
+  @keyframes mo-out { to { opacity:0; transform:translateY(4px) scale(.985); } }
+  .modal-scrim.closing .modal { animation:mo-out .12s ease-in forwards; }
+  /* command palette (palette.tsx) */
+  .palette { width:600px; align-self:flex-start; margin-top:11vh; padding:0 8px 0; max-height:min(64vh, 560px);
+    animation:pal-in .13s ease-out; }
+  @keyframes pal-in { from { opacity:0; transform:translateY(-6px) scale(.985); } }
+  .pal-head { display:flex; align-items:center; gap:10px; padding:13px 8px 12px 10px; margin:0 0 6px; border-bottom:1px solid var(--line); color:var(--muted); }
+  .pal-head input { flex:1; width:0; min-width:0; border:0; background:transparent; outline:none; font:inherit; font-size:16px; color:var(--fg); }
+  .pal-head input::placeholder { color:var(--muted); }
+  .pal-head .clear { display:grid; place-items:center; width:20px; height:20px; border-radius:50%; color:var(--muted); flex:none; }
+  .pal-head .clear:hover { background:var(--hover-2); color:var(--fg); }
+  .pal-close { display:none; place-items:center; width:28px; height:28px; border-radius:50%; color:var(--muted); flex:none; }
+  .pal-close:active { background:var(--hover-2); }
+  .pal-list { flex:1; min-height:0; overflow-y:auto; padding-bottom:4px; overscroll-behavior:contain; }
+  .pal-sec + .pal-sec { margin-top:4px; }
+  .palette .item { padding:7px 10px; }
+  .palette .item .lico.plain { color:var(--muted); }
+  :is(.pop,.palette) .item .lico .emo { font-size:15px; line-height:1; }
+  :is(.pop,.palette) .item.sub-r .meta { display:flex; align-items:baseline; gap:12px; }
+  :is(.pop,.palette) .item.sub-r .t { flex:1; }
+  :is(.pop,.palette) .item.sub-r .d { flex:none; max-width:42%; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .palette .item .d.snip { flex:1 1 100%; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .palette .item:has(.snip) .meta { flex-wrap:wrap; gap:1px 12px; }
+  :is(.pop,.palette) mark { background:transparent; color:var(--accent); font-weight:600; }
+  :is(.pop,.palette) .item .ret { margin-left:auto; flex:none; opacity:0; transition:opacity .1s; }
+  :is(.pop,.palette) .item.sel .ret, :is(.pop,.palette) .item:focus-visible .ret { opacity:1; }
+  :is(.pop,.palette) .pal-empty { padding:22px 12px 20px; text-align:center; color:var(--muted); font-size:var(--fs-ui); }
+  .pal-foot { display:flex; align-items:center; gap:12px; padding:8px 10px 9px; margin:4px -8px 0; border-top:1px solid var(--line); color:var(--muted); font-size:var(--fs-xs); }
+  .pal-foot .keys { display:flex; align-items:center; gap:4px 10px; flex-wrap:wrap; }
+  .pal-foot .kbd { margin-right:2px; }
+  .pal-foot .hint { margin-left:auto; white-space:nowrap; }
   .modal-head { padding:20px 22px 0; }
   .modal-head h3 { margin:0; font-size:18px; font-weight:700; letter-spacing:-.01em; }
   .modal-head p { margin:6px 0 0; color:var(--muted); font-size:var(--fs-ui); }
   .modal-body { padding:18px 22px; overflow-y:auto; }
-  .modal-foot { display:flex; justify-content:flex-end; gap:8px; padding:14px 22px; background:var(--surface); border-top:1px solid var(--line); }
+  .modal-foot { display:flex; justify-content:flex-end; align-items:center; gap:8px; padding:14px 22px; background:var(--surface); border-top:1px solid var(--line); }
+  .modal-hint { margin-right:auto; display:flex; align-items:center; gap:4px 8px; color:var(--muted); font-size:var(--fs-xs); }
   .field-label { font-size:12px; font-weight:600; color:var(--fg-soft); margin:12px 0 5px; }
   .field-label:first-child { margin-top:0; }
   .text-input { width:100%; border:1px solid var(--line-strong); border-radius:var(--radius-sm); padding:9px 11px; outline:none; background:var(--surface); font-size:var(--fs-body); }
@@ -17631,6 +18526,12 @@ var styles_default = `  :root {
   .toast { background:var(--fg); color:var(--bg); padding:10px 14px; border-radius:9px; font-size:13px; box-shadow:var(--shadow-lg);
     display:flex; align-items:center; gap:8px; animation:slidein .2s ease; }
   @keyframes slidein { from { opacity:0; transform:translateX(-12px); } }
+  .toast.error { background:var(--danger); color:#fff; }
+  .toast.leaving { animation:toast-out .16s ease-in forwards; pointer-events:none; }
+  @keyframes toast-out { to { opacity:0; transform:translateX(-8px); } }
+  .toast-msg { min-width:0; }
+  .toast-act { margin-left:4px; padding:3px 9px; border-radius:6px; font-weight:600; color:inherit; background:color-mix(in srgb, var(--bg) 16%, transparent); white-space:nowrap; }
+  .toast-act:hover { background:color-mix(in srgb, var(--bg) 28%, transparent); }
 
   /* misc */
   .empty { display:flex; flex-direction:column; align-items:center; justify-content:center; height:100%;
@@ -17698,9 +18599,74 @@ var styles_default = `  :root {
     .kg-glow { opacity:.6 !important; }
     .kg-particle { opacity:0 !important; }
   }
-  .error-bar { margin:12px 24px; padding:10px 14px; background:var(--danger-soft); color:var(--danger); border-radius:var(--radius-sm); font-size:13px; cursor:pointer; }
+  .error-bar { margin:12px 24px; padding:8px 10px 8px 12px; background:var(--danger-soft); color:var(--danger); border-radius:var(--radius-sm); font-size:13px;
+    display:flex; align-items:center; gap:8px; animation:mo-in .13s ease-out; }
+  .error-bar .error-msg { flex:1; min-width:0; overflow-wrap:anywhere; }
+  .error-bar .error-x { display:grid; place-items:center; width:22px; height:22px; border-radius:50%; color:inherit; flex:none; }
+  .error-bar .error-x:hover { background:color-mix(in srgb, var(--danger) 14%, transparent); }
+  .sb-empty { color:var(--muted); gap:6px; width:100%; text-align:left; }
+  .sb-empty:hover { color:var(--fg); }
+  .tbl-empty { padding:36px 20px 28px; }
+  .set-empty { display:flex; align-items:center; justify-content:space-between; gap:12px; padding:6px 0; }
+  .blob-mgr-empty { display:flex; flex-direction:column; align-items:center; gap:12px; }
+  .doc-skel { max-width:720px; margin:40px auto; padding:0 24px; }
+
+  /* share / publish modal (share-modal.tsx) */
+  .mhshare-body { display:flex; flex-direction:column; gap:10px; }
+  .mhshare-section { font-size:var(--fs-micro); font-weight:600; color:var(--muted); text-transform:uppercase; letter-spacing:.05em; margin-top:6px; }
+  .mhshare-field { display:flex; align-items:center; gap:12px; }
+  .mhshare-field > span { width:64px; color:var(--muted); flex:none; font-size:var(--fs-ui); }
+  .mhshare-field select, .mhshare-field input { flex:1; padding:7px 9px; border:1px solid var(--line-strong); border-radius:var(--radius-sm); background:var(--surface); color:inherit; min-width:0; font:inherit; }
+  .mhshare-field select:focus, .mhshare-field input:focus { border-color:var(--accent); outline:none; }
+  .mhshare-field .row-select { flex:1; justify-content:space-between; border:1px solid var(--line-strong); background:var(--surface); }
+  .mhshare-foot { display:flex; justify-content:flex-end; gap:8px; margin:4px 0 2px; }
+  .mhshare-foot button, .mhshare-result button, .mhshare-result a, .mhshare-li-actions button, .mhshare-li-actions a, .mhshare-guide-actions button {
+    display:inline-flex; align-items:center; gap:6px; padding:5px 11px; border:1px solid var(--line-strong); border-radius:var(--radius-sm);
+    background:var(--surface); color:inherit; font-size:var(--fs-sm); font-weight:500; text-decoration:none; cursor:pointer; transition:all .12s; }
+  .mhshare-foot button:hover, .mhshare-result button:hover, .mhshare-result a:hover, .mhshare-li-actions button:hover, .mhshare-li-actions a:hover, .mhshare-guide-actions button:hover { background:var(--hover-2); }
+  .mhshare-primary { background:var(--accent) !important; color:var(--accent-fg) !important; border-color:var(--accent) !important; }
+  .mhshare-primary:hover { filter:brightness(1.05); }
+  .mhshare-primary:disabled { opacity:.6; cursor:default; }
+  .mhshare-note { color:var(--muted); font-size:var(--fs-sm); margin:2px 0; line-height:1.5; }
+  .mhshare-err { color:var(--danger); font-size:var(--fs-sm); margin:0; }
+  .mhshare-ok { color:var(--success); font-size:var(--fs-sm); margin:0; }
+  .mhshare-warn { color:var(--fg-soft); font-size:var(--fs-xs); }
+  .mhshare-result { display:flex; gap:6px; align-items:center; padding:8px; border:1px solid var(--line); border-radius:var(--radius-sm); background:var(--surface); }
+  .mhshare-result code { flex:1; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; font-size:var(--fs-xs); font-family:var(--mono); }
+  .mhshare-list { list-style:none; padding:0; margin:0; display:flex; flex-direction:column; gap:8px; }
+  .mhshare-list li { border:1px solid var(--line); border-radius:var(--radius); padding:9px 11px; display:flex; flex-direction:column; gap:6px; }
+  .mhshare-li-main { display:flex; align-items:center; gap:8px; flex-wrap:wrap; }
+  .mhshare-badge { font-size:var(--fs-micro); background:var(--surface-2); border:1px solid var(--line); border-radius:999px; padding:1px 8px; }
+  .mhshare-badge-pub { color:var(--accent); border-color:transparent; background:var(--accent-soft); }
+  .mhshare-src { font-weight:600; overflow-wrap:anywhere; }
+  .mhshare-meta { color:var(--muted); font-size:var(--fs-xs); }
+  .mhshare-li-actions { display:flex; gap:6px; align-items:center; flex-wrap:wrap; }
+  .mhshare-danger { color:var(--danger) !important; }
+  .mhshare-form { display:flex; flex-direction:column; gap:10px; border:1px solid var(--line); border-radius:var(--radius); padding:12px; }
+  .mhshare-addrow { display:flex; gap:8px; }
+  .mhshare-addbtn { flex:1; display:flex; flex-direction:column; align-items:flex-start; gap:2px; padding:9px 12px; border:1px solid var(--line-strong); border-radius:var(--radius); background:none; color:inherit; cursor:pointer; text-align:left; transition:border-color .12s, box-shadow .12s; }
+  .mhshare-addbtn:hover { background:var(--hover); }
+  .mhshare-addbtn.sel { border-color:var(--accent); box-shadow:0 0 0 1px var(--accent) inset; }
+  .mhshare-grants { display:flex; flex-direction:column; gap:6px; }
+  .mhshare-grantlist { list-style:none; padding:0; margin:0; display:flex; flex-direction:column; gap:4px; }
+  .mhshare-grantlist li { display:flex; align-items:center; gap:14px; padding:5px 8px; border:1px solid var(--line); border-radius:var(--radius-sm); }
+  .mhshare-grantlist label { display:flex; align-items:center; gap:4px; font-size:var(--fs-sm); color:var(--muted); cursor:pointer; }
+  .mhshare-grantdb { flex:1; font-weight:600; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .mhshare-adv { align-self:flex-start; background:none; border:0; color:var(--accent); font-size:var(--fs-xs); cursor:pointer; padding:0; }
+  .mhshare-acard-t { font-weight:600; font-size:var(--fs-ui); }
+  .mhshare-acard-d { color:var(--muted); font-size:var(--fs-xs); }
+  .mhshare-hostsum { flex:1; display:flex; align-items:center; gap:8px; padding:8px 10px; border:1px solid var(--line-strong); border-radius:var(--radius-sm); background:var(--surface); font-size:var(--fs-sm); }
+  .mhshare-hostsum span { flex:1; }
+  .mhshare-hostsum button { background:none; border:0; color:var(--accent); font-size:var(--fs-xs); cursor:pointer; padding:0; flex:none; }
+  .mhshare-guide { border:1px solid var(--line-strong); border-left:3px solid var(--accent); border-radius:var(--radius-sm); padding:8px 11px; display:flex; flex-direction:column; gap:6px; }
+  .mhshare-guide p { margin:0; font-size:var(--fs-sm); color:var(--fg); }
+  .mhshare-guide-actions { display:flex; gap:8px; align-items:center; flex-wrap:wrap; }
+  .mhshare-guide-link { border:0 !important; background:none !important; color:var(--accent) !important; padding:4px 0 !important; }
   .offline-bar { margin:12px 24px 0; padding:8px 14px; background:var(--surface-2); color:var(--fg-soft); border-radius:var(--radius-sm); font-size:12.5px; }
   .search-hit { margin:0 0 8px; padding:10px 14px; background:var(--surface); border-radius:var(--radius-sm); font-size:13px; cursor:pointer; }
+  .search-hit-head { display:flex; align-items:baseline; gap:6px; min-width:0; }
+  .search-hit-head strong { min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .search-hit-head .muted { flex:none; }
   .search-hit:hover { background:var(--surface-2); }
   .search-hit mark { background:transparent; color:var(--accent); font-weight:600; }
   .view-placeholder { padding:40px; text-align:center; border:1px dashed var(--line-strong); border-radius:var(--radius); color:var(--muted); margin-top:8px; }
@@ -17901,6 +18867,7 @@ var styles_default = `  :root {
     html:has(body.mobile), body.mobile { background:var(--sidebar); }
     html:has(body.mobile-content), body.mobile-content { background:var(--bg); }
     .sb-head .iconbtn { display:none; }          /* no collapse on mobile */
+    .sb-head .sync-ind { display:inline-flex; height:32px; } /* .brand's flex:1 already pushes it right */
     .sb-resizer { display:none; }
     .topbar .hamburger { display:grid; }         /* serves as the back button */
     /* site config topbar: icon-only publish button so the crumb keeps its last segment */
@@ -17922,17 +18889,15 @@ var styles_default = `  :root {
     .navitem { padding:9px 8px; font-size:16px; }
     .navitem .emoji { font-size:18px; }
     .navitem .tw { width:26px; height:26px; }
-    .sb-search kbd, .pop .item kbd { display:none; }  /* no hardware keyboard, no shortcut hint */
+    .sb-search .kbd, :is(.pop,.palette) .item .kbd { display:none; }  /* no hardware keyboard, no shortcut hint */
     /* Search box is hidden until the header search button reveals it; it then
        slides+fades down in. Desktop base (.sb-search{display:flex}) is untouched,
        so search stays always-on there. reduced-motion is handled globally. */
     .sb-search { display:none; }
-    .sb-search.open { display:flex; animation:search-reveal .22s cubic-bezier(.32,.72,0,1); }
-    @keyframes search-reveal { from { opacity:0; transform:translateY(-8px); } }
     .btn { font-size:15px; }
     .crumb { font-size:16px; }
-    .pop .item { font-size:16px; }
-    .pop .item .t { font-size:16px; }
+    :is(.pop,.palette) .item { font-size:16px; }
+    :is(.pop,.palette) .item .t { font-size:16px; }
 
     /* Document: bigger body text, tighter side padding for narrow screens. */
     .doc { padding:24px 18px calc(36vh + env(safe-area-inset-bottom)); }
@@ -17983,11 +18948,24 @@ var styles_default = `  :root {
       border-radius:var(--radius-xl) var(--radius-xl) 0 0;
       padding-bottom:env(safe-area-inset-bottom);
       animation:sheet-up .22s cubic-bezier(.32,.72,0,1); }
+    .modal-scrim.closing .modal { animation:sheet-out .16s ease-in forwards; }
+    .modal-scrim.closing .modal.palette { animation:sheet-down-out .16s ease-in forwards; }
+    .modal.palette { align-self:flex-start; margin-top:0; max-height:80vh; max-height:80dvh;
+      padding:env(safe-area-inset-top) 8px 0; border-radius:0 0 var(--radius-xl) var(--radius-xl);
+      animation:sheet-down .22s cubic-bezier(.32,.72,0,1); }
+    :is(.pop,.palette) .item.sub-r .meta { display:block; }
+    :is(.pop,.palette) .item.sub-r .d { max-width:none; }
+    :is(.pop,.palette) .item .ret, .pal-foot .keys, .pal-head .kbd, .modal-hint { display:none; }
+    .pal-foot .hint { margin-left:0; }
+    .pal-close { display:grid; }
     .toasts { left:12px; right:12px; bottom:calc(12px + env(safe-area-inset-bottom)); }
     .toast { justify-content:center; }
     .selbar { bottom:calc(16px + env(safe-area-inset-bottom)); max-width:calc(100vw - 24px); }
   }
   @keyframes sheet-up { from { transform:translateY(100%); } }
+  @keyframes sheet-down { from { transform:translateY(-100%); } }
+  @keyframes sheet-out { to { transform:translateY(100%); } }
+  @keyframes sheet-down-out { to { transform:translateY(-100%); } }
   /* In-flow stand-in for the old two-pane slide: only the entering view
      animates (the other is display:none, document-scroll layout above). */
   @keyframes page-in { from { transform:translateX(28px); opacity:0; } }
@@ -18004,7 +18982,7 @@ var styles_default = `  :root {
     .sb-tabs .add { width:40px; height:40px; display:grid; place-items:center; padding:0; }
     .iconbtn { width:40px; height:40px; }
     .btn { padding:9px 14px; min-height:40px; }
-    .pop .item { padding:11px 10px; }
+    :is(.pop,.palette) .item { padding:11px 10px; }
     /* Column/sidebar resize handles: 7px is a mouse affordance, not a finger's. */
     .col-resizer, .doc-col-resizer, .sb-resizer { width:16px; right:-8px; }
     /* cell-rectangle corner handle: big enough to grab with a finger (it is the
@@ -18078,6 +19056,8 @@ var styles_default = `  :root {
   .qn-body { flex:1; overflow:auto; scrollbar-gutter:stable; scrollbar-width:thin; -webkit-app-region:no-drag; }
   .qn-body .doc { max-width:none; margin:0; padding:14px 1px 30vh 12px; }
   .qn-body .doc-title { font-size:24px; margin-bottom:2px; }
+  .qn-body .doc-title { overflow-wrap:anywhere; }
+  .qn-body .doc-title:not(:focus) { white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
   .qn-body .doc-meta { display:none; }
   /* The CM6 hover gutter never fits the compact window: quick notes offer no
      block insert/drag handles (Enter / slash commands cover insertion). */
@@ -18098,6 +19078,7 @@ var styles_default = `  :root {
      share .pop/.item/.lico with the main app; scope under the quick window
      body classes so the main app keeps its roomier density). */
   body.quicknote .pop, body.quickboard .pop { padding:5px; border-radius:9px; }
+  body.quicknote .menu-layer .pop, body.quickboard .menu-layer .pop { max-width:50vw; }
   body.quicknote .pop .lbl, body.quickboard .pop .lbl { padding:4px 8px 2px; font-size:10px; }
   body.quicknote .pop .item, body.quickboard .pop .item { padding:5px 9px; gap:8px; font-size:var(--fs-sm); }
   body.quicknote .pop .item .t, body.quickboard .pop .item .t { font-size:var(--fs-sm); }
@@ -18332,17 +19313,7 @@ var styles_default = `  :root {
   .switch.on .switch-knob { transform:translateX(16px); }
   .ico.spin { animation:save-spin .8s linear infinite; }
 
-  /* clear-policy segmented control (redundancy any/all) */
   .seg { display:flex; gap:8px; }
-  .seg-opt { flex:1 1 0; display:flex; flex-direction:column; gap:2px; align-items:flex-start;
-    text-align:left; padding:9px 12px; border:1px solid var(--line-strong); border-radius:var(--radius);
-    background:var(--surface); cursor:pointer; transition:border-color .14s, background .14s, box-shadow .14s; }
-  .seg-opt:hover { border-color:var(--muted); }
-  .seg-opt.on { border-color:var(--accent); background:var(--accent-soft); box-shadow:0 0 0 1px var(--accent) inset; }
-  .seg-opt:disabled { opacity:.6; cursor:default; }
-  .seg-opt-t { font-size:var(--fs-sm); font-weight:600; color:var(--fg); }
-  .seg-opt-s { font-size:var(--fs-xs); color:var(--muted); }
-  .seg-opt.on .seg-opt-s { color:var(--accent); }
 
   /* cache-usage ring hero (settings/cache-ring.tsx CacheRingHero): legend
      column left, 152px three-segment ring right. Arcs animate 0 \u2192 share on
@@ -18358,6 +19329,9 @@ var styles_default = `  :root {
   .blob-dot.keep { background:var(--line-strong); }
   .blob-dot.pin { background:var(--muted); opacity:.6; }
   .blob-total { margin:13px 0 14px; font-size:var(--fs-xs); color:var(--muted); }
+  /* a status sentence in the action row (never a disabled button) */
+  .blob-actions .blob-status { display:inline-flex; align-items:center; gap:6px; font-size:var(--fs-sm); color:var(--muted); }
+  .blob-actions .blob-status .ico { width:14px; height:14px; color:var(--success); }
 
   .blob-ring { position:relative; width:152px; height:152px; flex:none; }
   .blob-ring-svg { width:100%; height:100%; display:block; }
@@ -18392,7 +19366,7 @@ var styles_default = `  :root {
   }
 
   @media (prefers-reduced-motion: reduce) {
-    .switch, .switch-knob, .ico.spin, .blob-seg, .blob-ring-track { transition:none; animation:none; }
+    .switch, .switch-knob, .ico.spin, .sync-ring, .blob-seg, .blob-ring-track { transition:none; animation:none; }
   }
 
   /* Blob manager popup (Settings storage \u2192 Blob \u7BA1\u7406): a sortable/filterable list
@@ -18502,7 +19476,7 @@ var FMT_PROVIDERS = [
 init_package();
 var RUNNING_FROM_SOURCE = import.meta.url.includes("/src/webui/");
 var HTML2 = `<!doctype html>
-<html lang="zh">
+<html lang="zh-CN">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
@@ -18526,6 +19500,9 @@ var HTML2 = `<!doctype html>
      alone, so the dark palette exists exactly once \u2014 see styles.css. Dark also
      pre-tints the status bar (hex mirrors --bg) so the first frame isn't white. -->
 <script>try{var t=localStorage.getItem('mh-theme'),d=t==='dark'||(t!=='light'&&matchMedia('(prefers-color-scheme: dark)').matches);document.documentElement.dataset.resolved=d?'dark':'light';if(d)document.getElementById('theme-color-meta').content='#1a1a1c'}catch(e){}</script>
+<!-- Same for the UI language: mirror src/webui/i18n/locale.ts so <html lang>
+     is right before the bundle runs. -->
+<script>try{var l=localStorage.getItem('mh-lang');if(l!=='zh-CN'&&l!=='en'){var ls=navigator.languages&&navigator.languages.length?navigator.languages:[navigator.language];l='en';for(var i=0;i<ls.length;i++){var g=ls[i]||'';if(/^zh\\b/i.test(g)){l='zh-CN';break}if(/^en\\b/i.test(g))break}}document.documentElement.lang=l}catch(e){}</script>
 <link rel="manifest" href="/manifest.webmanifest">
 <link rel="apple-touch-icon" href="/icons/icon-180.png">
 <link rel="stylesheet" href="/webui.css">
@@ -18776,6 +19753,358 @@ async function serveWebui(req) {
 }
 // src/webui/server/routes.ts
 init_zod();
+
+// src/core/integrity.ts
+init_crdt();
+init_properties();
+init_hlc();
+init_node();
+init_history_cache();
+var REF_RULES = [
+  { srcTable: "properties", fk: "database_id", tgtTable: "databases", fix: "tombstone-src" },
+  { srcTable: "records", fk: "database_id", tgtTable: "databases", fix: "tombstone-src" },
+  { srcTable: "documents", fk: "database_id", tgtTable: "databases", fix: "null-fk" },
+  { srcTable: "documents", fk: "parent_id", tgtTable: "documents", fix: "null-fk" },
+  { srcTable: "doc_blocks", fk: "doc_id", tgtTable: "documents", fix: "tombstone-src" },
+  { srcTable: "site_files", fk: "site_id", tgtTable: "sites", fix: "tombstone-src" }
+];
+function brokenRefRows(db, r) {
+  return db.query(`SELECT s.id AS id, s.${r.fk} AS ref FROM ${r.srcTable} s
+       JOIN ${r.tgtTable} t ON t.id = s.${r.fk} AND t.__deleted = 1
+       WHERE s.__deleted = 0 AND s.${r.fk} IS NOT NULL
+       ORDER BY s.id`).all();
+}
+function detectBrokenRefs(db) {
+  const out = [];
+  for (const r of REF_RULES) {
+    for (const row of brokenRefRows(db, r)) {
+      out.push({
+        category: "broken_ref",
+        entity: r.srcTable,
+        id: row.id,
+        detail: `${r.fk} \u2192 deleted ${r.tgtTable} ${row.ref} (${r.fix === "tombstone-src" ? "tombstone" : `clear ${r.fk}`})`,
+        fixable: true
+      });
+    }
+  }
+  return out;
+}
+function repairBrokenRefs(db) {
+  let n = 0;
+  for (const r of REF_RULES) {
+    for (const row of brokenRefRows(db, r)) {
+      if (r.fix === "tombstone-src")
+        emit(db, r.srcTable, row.id, "__deleted", 1);
+      else
+        emit(db, r.srcTable, row.id, r.fk, null);
+      n++;
+    }
+  }
+  return n;
+}
+function orphanCellRows(db) {
+  return db.query(`SELECT r.id AS rec, j.key AS prop
+       FROM records r, json_each(coalesce(r.data, '{}')) j
+       JOIN properties p ON p.id = j.key AND p.__deleted = 1
+       WHERE r.__deleted = 0
+       ORDER BY r.id, j.key`).all();
+}
+function detectOrphanCells(db) {
+  return orphanCellRows(db).map((row) => ({
+    category: "orphan_cell",
+    entity: "records",
+    id: row.rec,
+    detail: `cell for deleted property ${row.prop}`,
+    fixable: true
+  }));
+}
+function repairOrphanCells(db) {
+  const rows = orphanCellRows(db);
+  for (const row of rows)
+    emit(db, "records", row.rec, row.prop, undefined);
+  return rows.length;
+}
+function deadCellRefRows(db) {
+  const props = db.query("SELECT id, type FROM properties WHERE __deleted = 0 AND type IN ('relation', 'doc') ORDER BY id").all();
+  const out = [];
+  for (const p of props) {
+    const tgtTable = p.type === "relation" ? "records" : "documents";
+    const pid = p.id.replace(/'/g, "''");
+    const rows = db.query(`SELECT r.id AS rec, j.value AS dead
+         FROM records r, json_each(r.data -> '${pid}') j
+         JOIN ${tgtTable} t ON t.id = j.value AND t.__deleted = 1
+         WHERE r.__deleted = 0 AND json_type(r.data -> '${pid}') = 'array'
+         ORDER BY r.id, j.value`).all();
+    let cur = null;
+    for (const row of rows) {
+      if (!cur || cur.rec !== row.rec) {
+        cur = { rec: row.rec, prop: p.id, tgtTable, dead: [] };
+        out.push(cur);
+      }
+      cur.dead.push(row.dead);
+    }
+  }
+  return out;
+}
+function detectDeadCellRefs(db) {
+  return deadCellRefRows(db).map((g) => ({
+    category: "dead_cell_ref",
+    entity: "records",
+    id: g.rec,
+    detail: `cell ${g.prop} references deleted ${g.tgtTable === "records" ? "record" : "document"}: ${g.dead.join(", ")}`,
+    fixable: true
+  }));
+}
+function repairDeadCellRefs(db) {
+  const groups = deadCellRefRows(db);
+  for (const g of groups) {
+    const row = db.query("SELECT data FROM records WHERE id = ?").get(g.rec);
+    if (!row)
+      continue;
+    const data = JSON.parse(row.data || "{}");
+    const arr = data[g.prop];
+    if (!Array.isArray(arr))
+      continue;
+    const deadSet = new Set(g.dead);
+    emit(db, "records", g.rec, g.prop, arr.filter((v) => !deadSet.has(String(v))));
+  }
+  return groups.length;
+}
+function dupPathLosers(db) {
+  const rows = db.query(`SELECT id, site_id, path FROM site_files
+       WHERE __deleted = 0 AND site_id IS NOT NULL AND path IS NOT NULL
+       ORDER BY site_id, path, created_hlc, id`).all();
+  const losers = [];
+  let group = null;
+  for (const r of rows) {
+    const key = `${r.site_id}\x00${r.path}`;
+    if (key === group)
+      losers.push({ id: r.id });
+    else
+      group = key;
+  }
+  return losers;
+}
+function detectDupPaths(db) {
+  return dupPathLosers(db).map((row) => ({
+    category: "dup_path",
+    entity: "site_files",
+    id: row.id,
+    detail: "redundant duplicate (site_id, path); loser tombstoned",
+    fixable: true
+  }));
+}
+function repairDupPaths(db) {
+  const losers = dupPathLosers(db);
+  for (const row of losers)
+    emit(db, "site_files", row.id, "__deleted", 1);
+  return losers.length;
+}
+function detectParentCycles(db) {
+  const rows = db.query(`SELECT d.id AS id, d.parent_id AS parent, d.created_hlc AS hlc
+       FROM documents d
+       WHERE d.__deleted = 0 AND d.parent_id IS NOT NULL
+         AND EXISTS (SELECT 1 FROM documents p WHERE p.id = d.parent_id AND p.__deleted = 0)
+       ORDER BY d.id`).all();
+  const parent = new Map(rows.map((r) => [r.id, r.parent]));
+  const hlc = new Map(rows.map((r) => [r.id, r.hlc]));
+  const seen = new Set;
+  const cycles = [];
+  for (const start of parent.keys()) {
+    if (seen.has(start))
+      continue;
+    const path = [];
+    const pos = new Map;
+    let cur = start;
+    while (cur != null && parent.has(cur) && !seen.has(cur)) {
+      if (pos.has(cur)) {
+        cycles.push(path.slice(pos.get(cur)));
+        break;
+      }
+      pos.set(cur, path.length);
+      path.push(cur);
+      cur = parent.get(cur);
+    }
+    for (const n of path)
+      seen.add(n);
+  }
+  return { cycles, hlc };
+}
+function geHlcId(hlc, a, b) {
+  const ha = hlc.get(a) ?? "";
+  const hb = hlc.get(b) ?? "";
+  if (ha !== hb)
+    return ha > hb;
+  return a >= b;
+}
+function detectCycleIssues(db) {
+  const { cycles } = detectParentCycles(db);
+  return cycles.map((cyc) => ({
+    category: "parent_cycle",
+    entity: "documents",
+    id: [...cyc].sort()[0],
+    detail: `parent cycle: ${[...cyc].sort().join(" \u2192 ")}`,
+    fixable: true
+  }));
+}
+function repairParentCycles(db) {
+  const { cycles, hlc } = detectParentCycles(db);
+  for (const cyc of cycles) {
+    const brk = cyc.reduce((a, b) => geHlcId(hlc, a, b) ? a : b);
+    emit(db, "documents", brk, "parent_id", null);
+  }
+  return cycles.length;
+}
+function detectDupNames(db) {
+  const out = [];
+  const props = db.query(`SELECT database_id AS db, lower(name) AS n, count(*) AS c, group_concat(id) AS ids
+       FROM properties
+       WHERE __deleted = 0 AND name IS NOT NULL AND database_id IS NOT NULL
+       GROUP BY database_id, lower(name) HAVING c > 1
+       ORDER BY database_id, n`).all();
+  for (const r of props)
+    out.push({
+      category: "dup_name",
+      entity: "properties",
+      id: r.ids.split(",").sort()[0],
+      detail: `${r.c} properties named "${r.n}" in database ${r.db}: ${r.ids}`,
+      fixable: false
+    });
+  const dbs = db.query(`SELECT lower(name) AS n, count(*) AS c, group_concat(id) AS ids
+       FROM databases WHERE __deleted = 0 AND name IS NOT NULL
+       GROUP BY lower(name) HAVING c > 1 ORDER BY n`).all();
+  for (const r of dbs)
+    out.push({
+      category: "dup_name",
+      entity: "databases",
+      id: r.ids.split(",").sort()[0],
+      detail: `${r.c} databases named "${r.n}": ${r.ids}`,
+      fixable: false
+    });
+  return out;
+}
+function configIssue(type, config) {
+  if (!PROP_TYPES.has(type))
+    return `unknown property type: ${type}`;
+  if (type === "select" || type === "multi_select") {
+    const opts = config?.options;
+    if (!Array.isArray(opts) || opts.length === 0 || !opts.every((o) => typeof o === "string"))
+      return `${type} missing config.options: string[]`;
+  }
+  if (type === "relation" && typeof config?.database !== "string")
+    return "relation missing config.database";
+  return null;
+}
+function detectBadConfig(db) {
+  const rows = db.query("SELECT id, type, config FROM properties WHERE __deleted = 0 ORDER BY id").all();
+  const out = [];
+  for (const r of rows) {
+    let config = null;
+    try {
+      config = r.config ? JSON.parse(r.config) : null;
+    } catch {
+      out.push({ category: "bad_config", entity: "properties", id: r.id, detail: "config is not valid JSON", fixable: false });
+      continue;
+    }
+    const problem = configIssue(r.type, config);
+    if (problem)
+      out.push({ category: "bad_config", entity: "properties", id: r.id, detail: problem, fixable: false });
+  }
+  return out;
+}
+function detectClockSkew(db, now) {
+  const rows = db.query("SELECT node_id, COUNT(*) AS n FROM crdt_changes WHERE hlc > ? GROUP BY node_id").all(hlcSkewBound(now));
+  const issues = rows.map((r) => ({
+    category: "clock_skew",
+    entity: "nodes",
+    id: r.node_id,
+    detail: `${r.n} change(s) stamped more than 5 min in the future \u2014 run \`mh repair --clock\``,
+    fixable: false
+  }));
+  const local = persistedHlc(db);
+  if (local && local.millis > now + HLC_MAX_SKEW_MS)
+    issues.push({
+      category: "clock_skew",
+      entity: "meta",
+      id: "hlc",
+      detail: `local logical clock is ${Math.ceil((local.millis - now) / 60000)} min ahead of wall time \u2014 writes refuse until \`mh repair --clock\``,
+      fixable: false
+    });
+  return issues;
+}
+function repairClock(db, now = Date.now()) {
+  return writeTx(db, () => {
+    const rows = db.query(`SELECT seq, ${CHANGE_SELECT} FROM crdt_changes WHERE hlc > ? ORDER BY hlc, seq`).all(hlcSkewBound(now));
+    const byNode = {};
+    const local = persistedHlc(db);
+    const clockReset = rows.length > 0 || local != null && local.millis > now + HLC_MAX_SKEW_MS;
+    if (clockReset)
+      resetHlc(db, getNodeId(db), now);
+    if (rows.length === 0)
+      return { restamped: 0, byNode, clockReset };
+    const touched = new Map;
+    for (const r of rows) {
+      db.query("DELETE FROM crdt_changes WHERE seq = ?").run(r.seq);
+      const { seq: _seq, ...c } = r;
+      const change = { ...c, hlc: nextHlc(db, r.node_id, now) };
+      applyChange(db, change);
+      touched.set(`${c.dataset}\x00${c.row_id}\x00${c.col}`, change);
+      byNode[r.node_id] = (byNode[r.node_id] ?? 0) + 1;
+    }
+    for (const c of touched.values()) {
+      const winner = db.query(`SELECT ${CHANGE_SELECT} FROM crdt_changes WHERE dataset = ? AND row_id = ? AND col = ? ORDER BY hlc DESC LIMIT 1`).get(c.dataset, c.row_id, c.col);
+      if (winner)
+        applyChange(db, winner);
+    }
+    invalidateHistory(db);
+    return { restamped: rows.length, byNode, clockReset };
+  });
+}
+function validateHub(db, opts = {}) {
+  const issues = [
+    ...detectBrokenRefs(db),
+    ...detectOrphanCells(db),
+    ...detectDeadCellRefs(db),
+    ...detectDupPaths(db),
+    ...detectCycleIssues(db),
+    ...detectDupNames(db),
+    ...detectBadConfig(db),
+    ...detectClockSkew(db, opts.now ?? Date.now())
+  ];
+  const counts = {};
+  for (const i of issues)
+    counts[i.category] = (counts[i.category] ?? 0) + 1;
+  return { ok: issues.length === 0, total: issues.length, counts, issues };
+}
+function repairPass(db) {
+  const fixed = {};
+  const bump = (cat, n) => {
+    if (n)
+      fixed[cat] = (fixed[cat] ?? 0) + n;
+  };
+  bump("broken_ref", repairBrokenRefs(db));
+  bump("orphan_cell", repairOrphanCells(db));
+  bump("dead_cell_ref", repairDeadCellRefs(db));
+  bump("dup_path", repairDupPaths(db));
+  bump("parent_cycle", repairParentCycles(db));
+  const applied = Object.values(fixed).reduce((a, b) => a + b, 0);
+  return { applied, fixed };
+}
+var repairHub = grouped(function repairHub(db) {
+  const fixed = {};
+  let applied = 0;
+  for (let i = 0;i < 20; i++) {
+    const pass = repairPass(db);
+    if (pass.applied === 0)
+      break;
+    applied += pass.applied;
+    for (const [cat, n] of Object.entries(pass.fixed))
+      fixed[cat] = (fixed[cat] ?? 0) + n;
+  }
+  return { applied, fixed, remaining: validateHub(db) };
+}, "repair");
+
+// src/webui/server/routes.ts
 init_errors();
 init_routes();
 init_databases();
@@ -18788,6 +20117,7 @@ init_crdt();
 init_documents();
 init_properties();
 init_errors();
+init_history_cache();
 var REVISION_GAP_MS = 1500;
 function hlcMillis(hlc) {
   return Number(hlc.slice(0, 15));
@@ -18845,16 +20175,23 @@ function rowChanges(db, dataset, rowId) {
 function everBlockIds(db, docId) {
   return db.query("SELECT DISTINCT row_id FROM crdt_changes WHERE dataset = 'doc_blocks' AND col = 'doc_id' AND value = ?").all(JSON.stringify(docId)).map((r) => r.row_id);
 }
-function docChanges(db, docId) {
+function docHistory(db, docId) {
+  const cached = getDocHistory(db, docId);
+  if (cached)
+    return cached;
   const blocks = everBlockIds(db, docId);
   const placeholders = blocks.map(() => "?").join(",");
   const blockClause = blocks.length ? ` OR (dataset = 'doc_blocks' AND row_id IN (${placeholders}))` : "";
-  return db.query(`SELECT ${CHANGE_SELECT} FROM crdt_changes
+  const changes = db.query(`SELECT ${CHANGE_SELECT} FROM crdt_changes
        WHERE (dataset = 'documents' AND row_id = ?)${blockClause}
        ORDER BY hlc`).all(docId, ...blocks);
+  return setDocHistory(db, docId, changes, blocks);
 }
 function listDocumentRevisions(db, id) {
-  const changes = docChanges(db, id);
+  const entry = docHistory(db, id);
+  if (entry.revisions)
+    return entry.revisions.slice();
+  const changes = entry.changes;
   if (!changes.length)
     throw new MhError("not_found", `no such document: ${id}`);
   const reg = new Map;
@@ -18909,12 +20246,17 @@ function listDocumentRevisions(db, id) {
       blocks_deleted: deletedBlocks.size
     });
   }
-  return out.reverse();
+  entry.revisions = out.reverse();
+  return entry.revisions.slice();
 }
 function documentAtVersion(db, id, at) {
   if (!at)
     throw new MhError("invalid_input", "missing version cutoff");
-  const changes = docChanges(db, id).filter((c) => c.hlc <= at);
+  const entry = docHistory(db, id);
+  const hit = entry.states.get(at);
+  if (hit)
+    return { ...hit };
+  const changes = entry.changes.filter((c) => c.hlc <= at);
   if (!changes.length)
     throw new MhError("not_found", `no version of document ${id} at or before ${at}`);
   const docRegs = registersAt(changes.filter((c) => c.dataset === "documents"), at);
@@ -18960,13 +20302,15 @@ function documentAtVersion(db, id, at) {
     return a.id < b.id ? -1 : 1;
   });
   const body = byBlock.size ? serializeDocBlocks(blocks) : parse("body") ?? "";
-  return {
+  const state = {
     id,
     title: parse("title") ?? "",
     body,
     deleted: docRegs.get("__deleted") ? flagSet(docRegs.get("__deleted").value) : false,
     version: changes[changes.length - 1].hlc
   };
+  rememberDocState(entry, at, state);
+  return { ...state };
 }
 var revertDocument = grouped(function revertDocument(db, id, to, opts = {}) {
   let cur = getDocument(db, id);
@@ -19270,15 +20614,49 @@ function recordFieldHistory(db, id, propId) {
 // src/core/audit.ts
 init_crdt();
 init_errors();
+
+// src/core/tables.ts
+var TABLES = {
+  databases: { tier: "content", synced: true },
+  properties: { tier: "content", synced: true },
+  records: { tier: "content", synced: true },
+  documents: { tier: "content", synced: true },
+  doc_blocks: { tier: "content", synced: true },
+  sites: { tier: "content", synced: true },
+  site_files: { tier: "content", synced: true },
+  site_channels: { tier: "system", synced: true },
+  blob_policy: { tier: "system", synced: true },
+  nodes: { tier: "system", synced: true },
+  meta: { tier: "local", synced: false },
+  crdt_changes: { tier: "local", synced: false },
+  peers: { tier: "local", synced: false },
+  storage_cursors: { tier: "local", synced: false },
+  room_rows: { tier: "local", synced: false },
+  peer_grants: { tier: "local", synced: false },
+  pairing_codes: { tier: "local", synced: false },
+  shares: { tier: "local", synced: false },
+  site_channel_observations: { tier: "local", synced: false },
+  blob_cache: { tier: "local", synced: false },
+  drop_rejects: { tier: "local", synced: false },
+  search_fts: { tier: "local", synced: false }
+};
+var names = (pred) => Object.entries(TABLES).filter(([, s]) => pred(s)).map(([n]) => n);
+var SYNCED_TABLES = names((s) => s.synced);
+var CONTENT_TABLES = names((s) => s.tier === "content");
+var SYSTEM_DATASETS = names((s) => s.tier === "system");
+var LOCAL_TABLES = names((s) => s.tier === "local");
+
+// src/core/audit.ts
 function isMetaCol(dataset, col) {
   if (dataset === "records")
     return RECORD_META.has(col);
   return col === "created_hlc" || col === "__deleted";
 }
 function oplogExclude() {
+  const excluded = [...OPLOG_ONLY_DATASETS, ...SYSTEM_DATASETS];
   return {
-    sql: [...OPLOG_ONLY_DATASETS].map(() => "dataset != ?"),
-    params: [...OPLOG_ONLY_DATASETS]
+    sql: excluded.map(() => "dataset != ?"),
+    params: excluded
   };
 }
 function changesOfTxn(db, txn, beforeHlc) {
@@ -19564,6 +20942,7 @@ var revertChangeGroup = grouped(function revertChangeGroup(db, txn) {
 }, "revert");
 
 // src/webui/server/routes.ts
+init_resolve();
 init_node();
 init_blobs();
 init_config();
@@ -19728,7 +21107,7 @@ async function createBucketShare(db, opts) {
     contentType: "application/octet-stream"
   });
   await mergeViewerCors(opts.config, opts.viewerOrigin);
-  return { manifestUrl, presignExp, keyB64: opts.password ? undefined : toB64(shareKey), saltB64, title };
+  return { manifestUrl, presignExp, keyB64: opts.password ? undefined : toB64(shareKey), saltB64, title, meta };
 }
 async function renewBucketShare(db, config, slug, expiresSec = MAX_PRESIGN_SECONDS) {
   const meta = await readMeta2(config, slug);
@@ -19795,7 +21174,7 @@ async function represignBucketShare(config, slug, expiresSec = MAX_PRESIGN_SECON
 async function listBucketShares(config) {
   const client = storageClientFor(config);
   const root = sharesRoot(config.prefix);
-  const entries = await client.list(`${root}/`, undefined, "/").catch(() => []);
+  const entries = await client.list(`${root}/`, undefined, "/");
   const slugs = entries.map((e) => e.key.slice(`${root}/`.length).replace(/\/$/, "")).filter((s) => s && !s.includes("/"));
   const out = [];
   for (const slug of slugs) {
@@ -19824,10 +21203,156 @@ function clampExpiry(sec) {
 
 // src/core/sync/share-actions.ts
 init_storage_s3_sign();
+
+// src/core/sync/remote-shares-cache.ts
+init_peers();
+var caches2 = new WeakMap;
+var listeners = new Set;
+var REMOTE_SHARES_STALE_MS = 60000;
+var PEER_LIST_TIMEOUT_MS = 4000;
+function absoluteShareUrl(url, base) {
+  try {
+    return new URL(url, `${base.replace(/\/+$/, "")}/`).toString();
+  } catch {
+    return url;
+  }
+}
+function bucketShareItem(bucket, m) {
+  return {
+    slug: m.slug,
+    kind: m.kind,
+    target_id: m.target_id,
+    title: m.title || m.target_id,
+    permission: m.permission,
+    transport: "s3",
+    source: `\u6876 ${bucket.label ?? bucket.url}`,
+    sourceKind: "bucket",
+    hosting: "s3",
+    expiresAt: m.presign_exp,
+    hasPassword: m.has_password,
+    contentUpdatedAt: m.content_updated_at ?? m.created_at
+  };
+}
+async function fetchPeerShares(url, token, targetId) {
+  const u = `${url.replace(/\/+$/, "")}/api/shares${targetId ? `?target=${encodeURIComponent(targetId)}` : ""}`;
+  const res = await Promise.race([
+    fetch(u, { headers: { authorization: `Bearer ${token}` } }),
+    new Promise((_r, rej) => setTimeout(() => rej(new Error("timeout")), PEER_LIST_TIMEOUT_MS))
+  ]);
+  if (!res.ok)
+    return [];
+  return (await res.json()).map((item) => ({
+    ...item,
+    ...item.url ? { url: absoluteShareUrl(item.url, url) } : {}
+  }));
+}
+function remoteShareSources(db) {
+  return listPeers(db).flatMap((p) => {
+    if (p.kind === "s3" && p.config)
+      return [{ url: p.url, kind: "bucket", peer: p }];
+    if (p.kind === "http" && p.token)
+      return [{ url: p.url, kind: "peer", peer: p }];
+    return [];
+  });
+}
+async function fetchSource(s) {
+  if (s.kind === "bucket") {
+    const config = JSON.parse(s.peer.config);
+    return (await listBucketShares(config)).map((m) => bucketShareItem(s.peer, m));
+  }
+  return (await fetchPeerShares(s.url, s.peer.token)).map((it) => ({
+    ...it,
+    source: s.peer.label ?? s.url,
+    sourceKind: "peer",
+    sourceUrl: s.url
+  }));
+}
+function cacheFor2(db) {
+  let m = caches2.get(db);
+  if (!m) {
+    m = new Map;
+    caches2.set(db, m);
+  }
+  return m;
+}
+function entryFor(db, url) {
+  const m = cacheFor2(db);
+  let e = m.get(url);
+  if (!e) {
+    e = { items: [], fetchedAt: 0, error: null, inflight: null };
+    m.set(url, e);
+  }
+  return e;
+}
+function notify(db) {
+  for (const fn of [...listeners])
+    fn(db);
+}
+function refreshRemoteSource(db, s) {
+  const e = entryFor(db, s.url);
+  if (e.inflight)
+    return e.inflight;
+  e.inflight = fetchSource(s).then((items) => {
+    const changed = JSON.stringify(items) !== JSON.stringify(e.items);
+    e.items = items;
+    e.error = null;
+    e.fetchedAt = Date.now();
+    if (changed)
+      notify(db);
+  }).catch((err) => {
+    e.error = err instanceof Error ? err.message : String(err);
+    e.fetchedAt = Date.now();
+  }).finally(() => {
+    e.inflight = null;
+  });
+  return e.inflight;
+}
+function cachedRemoteShares(db, targetId, opts = {}) {
+  const now = opts.now ?? Date.now();
+  const sources = remoteShareSources(db);
+  const m = cacheFor2(db);
+  const live = new Set(sources.map((s) => s.url));
+  for (const key of [...m.keys()])
+    if (!live.has(key))
+      m.delete(key);
+  const out = [];
+  for (const s of sources) {
+    const e = entryFor(db, s.url);
+    if (opts.refresh !== false && !e.inflight && now - e.fetchedAt >= REMOTE_SHARES_STALE_MS)
+      refreshRemoteSource(db, s);
+    for (const it of e.items)
+      if (!targetId || it.target_id === targetId)
+        out.push(it);
+  }
+  return out;
+}
+function primeRemoteShare(db, url, item) {
+  const e = entryFor(db, url);
+  e.items = [...e.items.filter((it) => it.slug !== item.slug), item];
+}
+function dropRemoteShare(db, url, slug) {
+  const e = caches2.get(db)?.get(url);
+  if (e)
+    e.items = e.items.filter((it) => it.slug !== slug);
+}
+function findCachedBucketShare(db, slug) {
+  const m = caches2.get(db);
+  if (!m)
+    return null;
+  for (const s of remoteShareSources(db)) {
+    if (s.kind !== "bucket")
+      continue;
+    const item = m.get(s.url)?.items.find((it) => it.slug === slug);
+    if (item)
+      return { source: s, item };
+  }
+  return null;
+}
+
+// src/core/sync/share-actions.ts
 init_site_channel_store();
 var DEFAULT_SHARE_VIEWER = "https://share.mh.tensorix.org";
 var DEFAULT_S3_EXPIRY_SEC = MAX_PRESIGN_SECONDS;
-var PEER_LIST_TIMEOUT_MS = 4000;
 var PEER_SHARE_TIMEOUT_MS = 1e4;
 var CreatedShareWireSchema = object({
   slug: string2().min(1).max(128),
@@ -19924,13 +21449,6 @@ function bucketLink(base, manifestUrl, keyB64, saltB64) {
   const frag = `m=${encodeURIComponent(manifestUrl)}&` + (keyB64 ? `k=${keyB64}` : `s=${saltB64}`);
   return `${base}/#${frag}`;
 }
-function absoluteShareUrl(url, base) {
-  try {
-    return new URL(url, `${base.replace(/\/+$/, "")}/`).toString();
-  } catch {
-    return url;
-  }
-}
 function assertShareCombo(req) {
   const fail = (msg) => {
     throw new MhError("invalid_input", msg);
@@ -19968,6 +21486,7 @@ async function createShareAction(db, req) {
       expiresSec: req.expiresMs != null ? Math.floor(req.expiresMs / 1000) : DEFAULT_S3_EXPIRY_SEC,
       viewerOrigin: viewerOriginOf(base)
     });
+    primeRemoteShare(db, bucketUrl, bucketShareItem({ url: bucketUrl, label }, out.meta));
     return {
       slug,
       kind: req.kind,
@@ -20157,28 +21676,21 @@ function listServerSharesLocal(db, targetId) {
   }
   return out;
 }
-async function listSharesLocal(db, targetId) {
+async function listSharesLocal(db, targetId, opts = {}) {
   const out = listServerSharesLocal(db, targetId);
+  if (opts.mode === "cached") {
+    for (const it of cachedRemoteShares(db, targetId))
+      if (it.sourceKind === "bucket")
+        out.push(it);
+    return out;
+  }
   for (const p of listPeers(db).filter((x) => x.kind === "s3" && x.config)) {
     const config = JSON.parse(p.config);
     const metas = await listBucketShares(config).catch(() => []);
     for (const m of metas) {
       if (targetId && m.target_id !== targetId)
         continue;
-      out.push({
-        slug: m.slug,
-        kind: m.kind,
-        target_id: m.target_id,
-        title: m.title || m.target_id,
-        permission: m.permission,
-        transport: "s3",
-        source: `\u6876 ${p.label ?? p.url}`,
-        sourceKind: "bucket",
-        hosting: "s3",
-        expiresAt: m.presign_exp,
-        hasPassword: m.has_password,
-        contentUpdatedAt: m.content_updated_at ?? m.created_at
-      });
+      out.push(bucketShareItem(p, m));
     }
   }
   return out;
@@ -20208,10 +21720,16 @@ async function revokeShareByRequestId(db, requestId) {
   const share = getShareByRequestId(db, requestId);
   return share ? revokeShareAction(db, share.slug) : { ok: false, status: "not_found" };
 }
-async function listSharesAggregated(db, targetId) {
+async function listSharesAggregated(db, targetId, opts = {}) {
   const bySlug = new Map;
-  for (const item of await listSharesLocal(db, targetId))
+  for (const item of await listSharesLocal(db, targetId, opts))
     bySlug.set(item.slug, item);
+  if (opts.mode === "cached") {
+    for (const it of cachedRemoteShares(db, targetId, { refresh: false }))
+      if (it.sourceKind === "peer" && !bySlug.has(it.slug))
+        bySlug.set(it.slug, it);
+    return [...bySlug.values()];
+  }
   await Promise.all(listShareServers(db).map(async ({ url, label }) => {
     const peer = getPeer2(db, url);
     if (!peer?.token)
@@ -20229,19 +21747,6 @@ async function listSharesAggregated(db, targetId) {
   }));
   return [...bySlug.values()];
 }
-async function fetchPeerShares(url, token, targetId) {
-  const u = `${url.replace(/\/+$/, "")}/api/shares${targetId ? `?target=${encodeURIComponent(targetId)}` : ""}`;
-  const res = await Promise.race([
-    fetch(u, { headers: { authorization: `Bearer ${token}` } }),
-    new Promise((_r, rej) => setTimeout(() => rej(new Error("timeout")), PEER_LIST_TIMEOUT_MS))
-  ]);
-  if (!res.ok)
-    return [];
-  return (await res.json()).map((item) => ({
-    ...item,
-    ...item.url ? { url: absoluteShareUrl(item.url, url) } : {}
-  }));
-}
 async function revokeShareAction(db, slug) {
   if (getShare(db, slug)) {
     const channels = listSiteChannelRows(db).filter((channel) => channel.audience === "link" && channel.target_ref === slug && channel.desired_state === "active");
@@ -20270,37 +21775,50 @@ async function revokeShareAction(db, slug) {
       status: "revoked"
     };
   }
+  const owner = await bucketOwning(db, slug);
+  if (!owner)
+    return { ok: false, status: "not_found" };
+  await deleteBucketShareObjects(JSON.parse(owner.peer.config), slug);
+  dropRemoteShare(db, owner.peer.url, slug);
+  return { ok: true, status: "revoked" };
+}
+async function bucketOwning(db, slug) {
+  const cached = findCachedBucketShare(db, slug);
+  if (cached)
+    return { peer: cached.source.peer, kind: cached.item.kind, item: cached.item };
   for (const p of listPeers(db).filter((x) => x.kind === "s3" && x.config)) {
-    const config = JSON.parse(p.config);
-    const metas = await listBucketShares(config).catch(() => []);
-    if (metas.some((m) => m.slug === slug)) {
-      await deleteBucketShareObjects(config, slug);
-      return { ok: true, status: "revoked" };
-    }
+    const metas = await listBucketShares(JSON.parse(p.config)).catch(() => []);
+    const m = metas.find((x) => x.slug === slug);
+    if (m)
+      return { peer: p, kind: m.kind, item: null };
   }
-  return { ok: false, status: "not_found" };
+  return null;
 }
 async function renewShareAction(db, slug, viewerBaseOverride, opts) {
-  for (const p of listPeers(db).filter((x) => x.kind === "s3" && x.config)) {
-    const config = JSON.parse(p.config);
-    const metas = await listBucketShares(config).catch(() => []);
-    const m = metas.find((x) => x.slug === slug);
-    if (!m)
-      continue;
-    const base = viewerBase(db, viewerBaseOverride);
-    const out = opts?.refreshContent ? await renewBucketShare(db, config, slug) : await represignBucketShare(config, slug);
-    return {
-      slug,
-      kind: m.kind,
-      permission: "view",
-      transport: "s3",
-      hosting: "s3",
-      url: bucketLink(base, out.manifestUrl, out.keyB64, out.saltB64),
+  const owner = await bucketOwning(db, slug);
+  if (!owner)
+    throw new MhError("not_found", `no such object-storage share: ${slug}`);
+  const { peer: p } = owner;
+  const config = JSON.parse(p.config);
+  const base = viewerBase(db, viewerBaseOverride);
+  const out = opts?.refreshContent ? await renewBucketShare(db, config, slug) : await represignBucketShare(config, slug);
+  if (owner.item)
+    primeRemoteShare(db, p.url, {
+      ...owner.item,
+      title: out.title || owner.item.title,
       expiresAt: out.presignExp,
-      source: `\u6876 ${p.label ?? p.url}`
-    };
-  }
-  throw new MhError("not_found", `no such object-storage share: ${slug}`);
+      ...opts?.refreshContent ? { contentUpdatedAt: Date.now() } : {}
+    });
+  return {
+    slug,
+    kind: owner.kind,
+    permission: "view",
+    transport: "s3",
+    hosting: "s3",
+    url: bucketLink(base, out.manifestUrl, out.keyB64, out.saltB64),
+    expiresAt: out.presignExp,
+    source: `\u6876 ${p.label ?? p.url}`
+  };
 }
 function freshSlug(db) {
   let slug = randomSuffix(12);
@@ -20399,7 +21917,7 @@ var shareRoutes = [
     handler: async (req, { db }) => {
       try {
         const target = new URL(req.url).searchParams.get("target") ?? undefined;
-        return Response.json(await listSharesLocal(db, target));
+        return Response.json(await listSharesLocal(db, target, { mode: "cached" }));
       } catch (e) {
         return errorResponse(e);
       }
@@ -20413,7 +21931,7 @@ var shareRoutes = [
     handler: async (req, { db }) => {
       try {
         const target = new URL(req.url).searchParams.get("target") ?? undefined;
-        return Response.json(await listSharesAggregated(db, target));
+        return Response.json(await listSharesAggregated(db, target, { mode: "cached" }));
       } catch (e) {
         return errorResponse(e);
       }
@@ -20704,7 +22222,7 @@ function jsonHandler(fn) {
     try {
       return Response.json(await fn(req, ctx) ?? null);
     } catch (e) {
-      return errorResponse(e);
+      return errorResponse(e, req);
     }
   };
 }
@@ -20874,20 +22392,24 @@ async function verifyBase(input, expectedNode, allowRemote = true) {
       headers: { accept: "application/json" }
     });
     if (res.status < 200 || res.status >= 300)
-      throw new MhError("network", `\u7AD9\u70B9\u5165\u53E3\u5065\u5EB7\u68C0\u67E5\u5931\u8D25\uFF08HTTP ${res.status}\uFF09`);
+      throw mhError("network", "\u7AD9\u70B9\u5165\u53E3\u5065\u5EB7\u68C0\u67E5\u5931\u8D25\uFF08HTTP {status}\uFF09", { status: res.status });
     const body = await limitedJson(res, HEALTH_RESPONSE_MAX);
     if (!body?.ok || !body.node)
       throw new MhError("network", "\u7AD9\u70B9\u5165\u53E3\u5065\u5EB7\u54CD\u5E94\u65E0\u6548");
     if (body.node !== expectedNode)
-      throw new MhError("conflict", `\u7AD9\u70B9\u5165\u53E3\u8282\u70B9\u4E0D\u5339\u914D\uFF08\u671F\u671B ${expectedNode}\uFF0C\u5B9E\u9645 ${body.node}\uFF09\uFF1B\u8FD9\u662F\u9632\u8BEF\u914D\u68C0\u67E5\uFF0C\u4E0D\u662F\u8EAB\u4EFD\u8BA4\u8BC1`);
+      throw mhError("conflict", "\u7AD9\u70B9\u5165\u53E3\u8282\u70B9\u4E0D\u5339\u914D\uFF08\u671F\u671B {expected}\uFF0C\u5B9E\u9645 {actual}\uFF09\uFF1B\u8FD9\u662F\u9632\u8BEF\u914D\u68C0\u67E5\uFF0C\u4E0D\u662F\u8EAB\u4EFD\u8BA4\u8BC1", {
+        expected: expectedNode,
+        actual: body.node
+      });
     if (!Array.isArray(body.capabilities) || !body.capabilities.includes("site_channels"))
       throw new MhError("conflict", "\u76EE\u6807\u8BBE\u5907\u7248\u672C\u4E0D\u652F\u6301\u5B9A\u5411\u53D1\u5E03\u6E20\u9053\uFF1B\u8BF7\u5148\u5347\u7EA7\u8BE5\u8BBE\u5907\uFF0C\u518D\u91CD\u65B0\u9A8C\u8BC1\u5165\u53E3");
     return { ...base, node: body.node };
   } catch (e) {
     if (e instanceof MhError)
       throw e;
-    const message = e.name === "AbortError" ? "\u8FDE\u63A5\u8D85\u65F6" : e.message;
-    throw new MhError("network", `\u65E0\u6CD5\u9A8C\u8BC1\u7AD9\u70B9\u5165\u53E3\uFF1A${message}`);
+    if (e.name === "AbortError")
+      throw mhError("network", "\u65E0\u6CD5\u9A8C\u8BC1\u7AD9\u70B9\u5165\u53E3\uFF1A\u8FDE\u63A5\u8D85\u65F6");
+    throw mhError("network", "\u65E0\u6CD5\u9A8C\u8BC1\u7AD9\u70B9\u5165\u53E3\uFF1A{msg}", { msg: e.message });
   } finally {
     clearTimeout(timer);
   }
@@ -21208,6 +22730,7 @@ var siteHostingRoutes = [
 // src/webui/server/edge-routes.ts
 init_zod();
 init_errors();
+init_page_messages();
 
 // src/core/sync/edge-service.ts
 init_errors();
@@ -21374,6 +22897,7 @@ init_errors();
 init_http_status();
 init_ids();
 init_access_policy();
+init_page_messages();
 init_grants_routes();
 init_rate_limit();
 init_sites_core();
@@ -21855,6 +23379,7 @@ function disconnectEdge(db) {
 
 // src/core/sync/cf-oauth.ts
 init_errors();
+init_page_messages();
 init_e2ee();
 var CF_OAUTH_CLIENT_ID = process.env.METAHUB_CF_OAUTH_CLIENT_ID || "0062224f5b80ba3a2074780e73a9d305";
 var AUTH_ENDPOINT = "https://dash.cloudflare.com/oauth2/auth";
@@ -21904,7 +23429,7 @@ function buildTokenRequestBody(p) {
 function parseTokenResponse(data) {
   const d = data ?? {};
   if (!d.access_token)
-    throw new MhError("auth", `Cloudflare \u6388\u6743\u5931\u8D25\uFF1A${d.error_description || d.error || "\u672A\u8FD4\u56DE access token"}`);
+    throw mhError("auth", "Cloudflare \u6388\u6743\u5931\u8D25\uFF1A{detail}", { detail: d.error_description || d.error || "\u672A\u8FD4\u56DE access token" });
   return {
     accessToken: d.access_token,
     refreshToken: d.refresh_token ?? null,
@@ -21924,11 +23449,11 @@ async function exchangeCode(p) {
       body: buildTokenRequestBody(p)
     });
   } catch (e) {
-    throw new MhError("network", `\u65E0\u6CD5\u8FDE\u63A5 Cloudflare \u6388\u6743\u670D\u52A1\uFF1A${e.message}`);
+    throw mhError("network", "\u65E0\u6CD5\u8FDE\u63A5 Cloudflare \u6388\u6743\u670D\u52A1\uFF1A{msg}", { msg: e.message });
   }
   const data = await res.json().catch(() => null);
   if (!res.ok && !data?.access_token)
-    throw new MhError("auth", `Cloudflare \u4EE4\u724C\u4EA4\u6362\u5931\u8D25\uFF08HTTP ${res.status}\uFF09`);
+    throw mhError("auth", "Cloudflare \u4EE4\u724C\u4EA4\u6362\u5931\u8D25\uFF08HTTP {status}\uFF09", { status: res.status });
   return parseTokenResponse(data);
 }
 async function discoverAccounts(accessToken) {
@@ -21938,11 +23463,11 @@ async function discoverAccounts(accessToken) {
       headers: { authorization: `Bearer ${accessToken}`, accept: "application/json" }
     });
   } catch (e) {
-    throw new MhError("network", `\u65E0\u6CD5\u8BFB\u53D6 Cloudflare \u8D26\u53F7\u5217\u8868\uFF1A${e.message}`);
+    throw mhError("network", "\u65E0\u6CD5\u8BFB\u53D6 Cloudflare \u8D26\u53F7\u5217\u8868\uFF1A{msg}", { msg: e.message });
   }
   const data = await res.json().catch(() => null);
   if (!res.ok)
-    throw new MhError("auth", `\u8BFB\u53D6 Cloudflare \u8D26\u53F7\u5931\u8D25\uFF08HTTP ${res.status}\uFF09`);
+    throw mhError("auth", "\u8BFB\u53D6 Cloudflare \u8D26\u53F7\u5931\u8D25\uFF08HTTP {status}\uFF09", { status: res.status });
   return parseAccounts(data);
 }
 async function startCfLogin(opts = {}) {
@@ -21961,7 +23486,9 @@ async function startCfLogin(opts = {}) {
       if (url.pathname !== CALLBACK_PATH)
         return new Response("not found", { status: 404 });
       settle(url.searchParams);
-      return new Response(CALLBACK_HTML, { headers: { "content-type": "text/html; charset=utf-8" } });
+      return new Response(callbackHtml(localeFromAcceptLanguage(req.headers.get("accept-language"))), {
+        headers: { "content-type": "text/html; charset=utf-8" }
+      });
     }
   });
   const redirectUri = `http://127.0.0.1:${server.port}${CALLBACK_PATH}`;
@@ -21992,7 +23519,7 @@ async function startCfLogin(opts = {}) {
       try {
         const q = await Promise.race([caught, timeout]);
         if (q.get("error"))
-          throw new MhError("auth", `Cloudflare \u6388\u6743\u88AB\u62D2\u7EDD\uFF1A${q.get("error_description") || q.get("error")}`);
+          throw mhError("auth", "Cloudflare \u6388\u6743\u88AB\u62D2\u7EDD\uFF1A{detail}", { detail: q.get("error_description") || q.get("error") || "" });
         if (q.get("state") !== state)
           throw new MhError("auth", "OAuth state \u4E0D\u5339\u914D\uFF0C\u7591\u4F3C\u4F2A\u9020\u56DE\u8C03\uFF0C\u5DF2\u4E2D\u6B62");
         const code = q.get("code");
@@ -22013,9 +23540,9 @@ async function startCfLogin(opts = {}) {
     }
   };
 }
-var CALLBACK_HTML = `<!doctype html><meta charset="utf-8"><title>MetaHub</title>
+var callbackHtml = (locale) => `<!doctype html><html lang="${locale}"><meta charset="utf-8"><title>MetaHub</title>
 <body style="font:15px system-ui;display:grid;place-items:center;height:100vh;margin:0">
-<div style="text-align:center"><h2>\u2705 \u5DF2\u6388\u6743</h2><p>\u53EF\u4EE5\u5173\u95ED\u6B64\u6807\u7B7E\u9875\uFF0C\u56DE\u5230 MetaHub \u7EE7\u7EED\u90E8\u7F72\u3002</p></div>`;
+<div style="text-align:center"><h2>${pm(locale, "\u2705 \u5DF2\u6388\u6743")}</h2><p>${pm(locale, "\u53EF\u4EE5\u5173\u95ED\u6B64\u6807\u7B7E\u9875\uFF0C\u56DE\u5230 MetaHub \u7EE7\u7EED\u90E8\u7F72\u3002")}</p></div>`;
 
 // src/webui/server/edge-routes.ts
 init_ids();
@@ -22086,7 +23613,7 @@ function resolveCfCreds(body) {
     if (!flow)
       throw new MhError("not_found", "OAuth \u6D41\u7A0B\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55");
     if (flow.state === "error")
-      throw new MhError("auth", flow.error || "Cloudflare \u6388\u6743\u5931\u8D25");
+      throw new MhError("auth", flow.error || "Cloudflare \u6388\u6743\u5931\u8D25", flow.errorI18n);
     if (flow.state !== "ready" || !flow.token)
       throw new MhError("conflict", "Cloudflare \u6388\u6743\u5C1A\u672A\u5B8C\u6210\uFF0C\u8BF7\u7A0D\u5019");
     apiToken = flow.token;
@@ -22130,6 +23657,7 @@ var edgeRoutes = [
       }).catch((e) => {
         flow.state = "error";
         flow.error = e.message;
+        flow.errorI18n = e instanceof MhError ? e.i18n : undefined;
       });
       return { flowId, authUrl: handle.authUrl };
     })
@@ -22148,7 +23676,8 @@ var edgeRoutes = [
       const flow = flows.get(flowId);
       if (!flow)
         throw new MhError("not_found", "OAuth \u6D41\u7A0B\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u8BD5");
-      return { state: flow.state, accounts: flow.accounts, error: flow.error };
+      const error = flow.error === undefined ? undefined : flow.errorI18n ? pmIfKnown(pickLocale(req), flow.errorI18n.key, flow.errorI18n.params) : pmIfKnown(pickLocale(req), flow.error);
+      return { state: flow.state, accounts: flow.accounts, error };
     })
   },
   {
@@ -22250,6 +23779,7 @@ var DatabaseSchema = object({
   id: string2(),
   name: string2(),
   icon: string2().nullable(),
+  meta: record(string2(), any()).nullable(),
   created_hlc: string2()
 });
 var PropertySchema = object({
@@ -22293,11 +23823,18 @@ var SearchHitSchema = object({
   title: string2().optional(),
   snippet: string2()
 });
+var LookupHitSchema = object({
+  kind: _enum(["db", "doc", "rec"]),
+  id: string2(),
+  label: string2(),
+  database_id: string2().nullable()
+});
 var OkSchema2 = object({ ok: boolean2() });
 var CreateDatabaseReq = object({ name: string2(), icon: string2().optional() });
 var UpdateDatabaseReq = object({
   name: string2().optional(),
-  icon: string2().nullable().optional()
+  icon: string2().nullable().optional(),
+  meta: record(string2(), any()).nullable().optional().describe("Merge patch over per-key metadata; null value deletes a key, null object clears all")
 });
 var DuplicateDatabaseReq = object({
   name: string2().optional().describe("Name for the copy (defaults to the source name)"),
@@ -22468,8 +24005,11 @@ var FieldHistoryEntrySchema = object({
 });
 var NodeInfoSchema = object({
   node_id: string2(),
-  label: string2().nullable().describe("Peer label from pairing; null when unnamed"),
-  self: boolean2().describe("True for the node serving this request")
+  label: string2().nullable().describe("Synced roster name \u2192 pairing label \u2192 null when unnamed"),
+  self: boolean2().describe("True for the node serving this request"),
+  platform: _enum(["macos", "windows", "linux", "ios", "android", "web"]).nullable(),
+  form: _enum(["laptop", "desktop", "phone", "server", "browser"]).nullable(),
+  app: _enum(["cli", "server", "desktop", "web"]).nullable()
 });
 var CacheStatsSchema = object({
   totalBytes: number2(),
@@ -22553,7 +24093,7 @@ function handle3(fn) {
         return out;
       return Response.json(out ?? null);
     } catch (e) {
-      return errorResponse(e);
+      return errorResponse(e, req);
     }
   };
 }
@@ -22616,7 +24156,7 @@ var webuiRoutes = [
   {
     method: "PATCH",
     path: "/api/database",
-    summary: "Rename a database or change its icon. Query: ?id=<id>",
+    summary: "Rename a database, change its icon or patch its metadata. Query: ?id=<id>",
     request: UpdateDatabaseReq,
     response: DatabaseSchema,
     handler: handle3(async (req, { db }) => {
@@ -22979,13 +24519,17 @@ var webuiRoutes = [
   {
     method: "PATCH",
     path: "/api/node",
-    summary: "Set this device's display label (empty/null clears it)",
-    request: object({ label: string2().nullable().optional() }),
+    summary: "Rename a device (default: this one). Writes the synced roster; empty/null clears",
+    request: object({
+      label: string2().nullable().optional(),
+      node_id: string2().optional().describe("Target node; omitted = this device")
+    }),
     response: NodeInfoSchema,
     handler: handle3(async (req, { db }) => {
       const body = await req.json();
-      setNodeLabel(db, body.label ?? null);
-      return { node_id: getNodeId(db), label: getNodeLabel(db), self: true };
+      const id = body.node_id ?? getNodeId(db);
+      setNodeLabel(db, body.label ?? null, id);
+      return displayNodes(db).find((n) => n.node_id === id);
     })
   },
   {
@@ -22998,6 +24542,16 @@ var webuiRoutes = [
       return search(db, need3(req, "q"), { limit: limit ? Number(limit) : undefined });
     })
   },
+  {
+    method: "GET",
+    path: "/api/resolve",
+    summary: "Navigable entities (db/doc/rec) matching a full id, id prefix, bare slug or name \u2014 the `mh get <ref>` rule. Query: ?ref=<text>&limit=<n>",
+    response: array(LookupHitSchema),
+    handler: handle3((req, { db }) => {
+      const limit = opt(req, "limit");
+      return lookupCandidates(db, need3(req, "ref"), { limit: limit ? Number(limit) : undefined });
+    })
+  },
   {
     method: "GET",
     path: "/api/blob-cache",
@@ -23022,6 +24576,13 @@ var webuiRoutes = [
     response: ClearResultSchema,
     handler: handle3((_req, { db }) => clearCache(db))
   },
+  {
+    method: "POST",
+    path: "/api/repair/clock",
+    summary: "Restamp oplog rows dated more than 5 min in the future with this clock and reset the logical clock (fixes clock_skew; local-only).",
+    response: object({ restamped: number2(), byNode: record(string2(), number2()) }),
+    handler: handle3(async (_req, { db }) => repairClock(db))
+  },
   {
     method: "POST",
     path: "/api/blob-cache/pin",
@@ -23095,6 +24656,7 @@ export {
   DOCUMENT_COLS,
   DOMAIN,
   HEALTH_PATH,
+  HLC_MAX_SKEW_MS,
   HealthResponseSchema,
   INLINE_LIMIT,
   MAX_HLC_COUNTER,
@@ -23120,6 +24682,7 @@ export {
   advanceAckedPrefix,
   appendDocument,
   applyChange,
+  asMhError,
   backfillDocumentOrderKeys,
   backfillRecordOrderKeys,
   base64ToBytes,
@@ -23139,12 +24702,14 @@ export {
   createSite,
   dbPath,
   decodeFileRow,
+  defaultForm,
   deleteBlob,
   deleteDatabase,
   deleteDocument,
   deleteFile,
   deleteRecord,
   deleteSite,
+  describeSelf,
   displayNodes,
   documentTitleMap,
   documentVersion,
@@ -23178,28 +24743,36 @@ export {
   getSiteByName,
   grouped,
   hasIndex,
+  hlcSkewBound,
   idKind,
   inferContentType,
   ingest,
+  ingestDetailed,
   initSchema,
+  interpolateMsg,
   isImageType,
   isSitePublic,
+  isSkewedHlc,
   isTextType,
   keyBetween,
   keysBetween,
   listDatabases,
   listDocuments,
   listFiles,
+  listNodeMeta,
   listProperties,
   listRecords,
   listSites,
   liveFileRowIfSame,
+  lookupCandidates,
   loopbackUiRejection,
   makeId,
   maybeAutoIndex,
   metahubHome,
+  mhError,
   migrateDocBlocks,
   migrateDocuments,
+  migrateNodes,
   migrateOplog,
   migratePeers,
   migrateRecords,
@@ -23208,12 +24781,15 @@ export {
   moveRecord,
   newId,
   nextHlc,
+  nodeLabelOf,
   normalizeSiteName,
   normalizeSitePath,
   observeHlc,
   openMetahub,
   parseDocBlocks,
   parseHlc,
+  persistedHlc,
+  platformFromProcess,
   prepareRecordCells,
   prependDocument,
   publishDirectory,
@@ -23222,12 +24798,14 @@ export {
   putFile,
   putFileInline,
   randomSuffix,
+  readNodeMeta,
   rebuildSearchIndex,
   reconcile,
   recordTitleMap,
   removeProperty,
   removeSelectOption,
   renameSelectOption,
+  resetHlc,
   resolveCandidates,
   resolveData,
   resolveEntity,
@@ -23247,6 +24825,7 @@ export {
   sha256Hex,
   siteCacheControl,
   siteLifecycle,
+  skewWarnings,
   slugify,
   startServer,
   syncWithPeer,
@@ -23264,7 +24843,8 @@ export {
   withChangeGroup,
   withNodeId,
   withTxnId,
-  writeFileRow
+  writeFileRow,
+  writeTx
 };
 
-//# debugId=CA4BC603573EC3ED64756E2164756E21
+//# debugId=23C620FE660E43F464756E2164756E21