@tenyokjs/devdevian-cli 0.4.0-alpha.1 → 0.5.0-alpha.1

package/README.md

@@ -10,6 +10,8 @@ devdevian open     # a separate terminal window
 
 Login opens a browser. Compare the code shown in the terminal, sign in to Devdevian, then authorize the terminal. Google, GitHub and email login happen on the website; no provider credentials are collected by this package. Use `--no-open` to open the printed address yourself, including when connecting over SSH.
 
+Version-by-version changes and the customization roadmap: [CLI version history](VERSIONS.md).
+
 ## Live workspace
 
 The default `devdevian` command and `devdevian tui` open an alternate terminal screen. Navigation, conversations, inline forms, previews and search update in that screen; exiting restores your normal terminal. The blue and purple layout adapts to the terminal size, with compact navigation below 90 columns. Minimum size: 60 columns × 18 rows.
@@ -19,6 +21,7 @@ The default `devdevian` command and `devdevian tui` open an alternate terminal s
 - **←/→** switch conversation tabs; **Space** reads the selected reply/remark in full. **[ / ]** paginate; **Page Up/Down** scroll.
 - **N** creates a conversation (a community on the Communities screen); **A** asks a question; **R** replies inside a conversation; **Shift+R** refreshes.
 - **C** comments on snippet lines; **E/D** edit/delete your own ordinary replies or code feedback; **S** resolves/reopens a code remark or accepts/removes a reply as the solution (question/review author only); **!** reports selected code feedback.
+- **Ctrl+E** opens the current multiline field in `$VISUAL` / `$EDITOR` (use `code --wait` for VS Code). Closing the editor restores the form; publishing still requires preview and confirmation. **Ctrl+L** saves an active draft and returns to sign-in.
 - In forms, **Tab/Shift+Tab** change fields, arrows choose options or move the text cursor, **Enter** adds a line, **Ctrl+S** opens the preview. Publication requires a separate confirmation; Escape asks before discarding a draft. Drafts auto-save locally after a short pause and can be restored from **Local drafts** or `/drafts`.
 - **Ctrl+C** exits. With an unsent draft, confirm saving and leaving or press Ctrl+C again to force exit.
 
@@ -28,6 +31,29 @@ Pages have a bounded 30-second in-memory cache. Refresh explicitly with Shift+R.
 
 Ordinary reply deletion replaces your text with a placeholder and preserves nested replies. Its attachments become unavailable. Deleting an accepted answer reopens the question. D/d works on a selected reply or while reading it in full; confirmation is required.
 
+## Themes and layout
+
+Open **Appearance** in navigation, type `/appearance`, or press **,** from a reading/list screen. Use arrows to choose options and Tab to move between them. The entire interface previews each change, including code colors, the file picker and navigation. Wide terminals include a sample card next to the controls.
+
+- **Midnight** preserves the original blue/purple design; **Nebula** uses a deeper violet surface; **Daylight** is light; **Contrast** emphasizes readable foregrounds.
+- Choose a **blue, violet, cyan or rose accent**, comfortable/compact lists, automatic/hidden sidebar, automatic/stacked review panels, rounded/straight frames and subtle/reduced loading indicators.
+- **Ctrl+S** saves locally. **Esc** cancels the preview. **0** restores the default preview; save to keep it, or cancel to retain existing settings.
+- Hidden navigation stays available with **Tab**. Stacked review panes switch with **W**. Narrow terminals automatically avoid a permanent sidebar and split review layout.
+
+Appearance settings belong to this local CLI installation and apply across its accounts/projects; credentials and server profiles are separate. Settings live in `appearance.json` alongside the credentials file, or under `DEVDEVIAN_CONFIG_DIR`. Saving replaces the settings file atomically with private file permissions. Invalid settings fall back to defaults with a warning and remain untouched until you save a new configuration.
+
+Appearance can also be configured **offline, without logging in**:
+
+```sh
+devdevian appearance                            # print settings as JSON
+devdevian appearance --theme daylight --accent violet
+devdevian appearance --density compact --sidebar hidden
+devdevian appearance --review-layout stacked --motion reduced
+devdevian appearance --reset                    # save defaults
+```
+
+These options can be passed to `tui` or `open` for a **session-only override**, for example `devdevian tui --theme contrast`. Overrides become persistent only if you save in Appearance. Preference changes do not write to the Devdevian API or modify credentials. Current presets use fixed, tested color combinations; the settings file is validated rather than interpreted as terminal code.
+
 ## Code and discussion, together
 
 Press **V** in a review to open the code workspace. Wide terminals show the snippet alongside its discussion; narrow terminals show one pane at a time. **W** switches focus. In the code pane, arrows move between lines (left/right scroll horizontally), **Space** anchors a range and **C** opens a prefilled comment form. Remarks may cover at most 50 lines. **Enter** selects a remark covering the current line, if it is on the current page. Markers describe the current page only; **F** cycles all/open/resolved remarks and **[ / ]** page through them.

package/VERSIONS.md

@@ -0,0 +1,71 @@
+# Devdevian CLI version history
+
+The CLI is a separately versioned Devdevian client. Its npm version does not have to match the web app or API version. All versions below use the same hosted account and permission model.
+
+Every published npm artifact has a unique immutable version. We record each version here, even when several ship in one working session. A GitHub release can summarize a day's work and link to the individual entries; it does not need to be created for every npm publication. An unfinished change stays under **Unreleased** until its package version is assigned. Alpha packages use the `alpha` npm tag.
+
+## Current milestone
+
+**0.5.0 focuses on themes, interface customization and local appearance preferences.** Projects and Events parity remains a separate future milestone.
+
+## 0.5.0-alpha.1 — Make the terminal yours
+
+**Changes**
+
+- Appearance workspace with immediate whole-interface previews, a sample panel on wide terminals and explicit save/cancel/default controls. Open it with `/appearance`, navigation or **,**.
+- Midnight, Nebula, Daylight and Contrast themes, with blue/violet/cyan/rose accents shared by navigation, Markdown, code review, forms and the local file/Git picker.
+- Comfortable/compact list density, automatic/hidden navigation, automatic/stacked review panels, rounded/straight frames and reduced loading motion. Compact layouts remain keyboard-accessible.
+- Atomic, validated local preference storage, independent of account credentials and production data. Invalid configuration falls back visibly without overwriting the file.
+- Offline `devdevian appearance` commands and temporary `tui`/`open` appearance flags. Theme text and selection contrast are checked across all preset/accent combinations.
+- Rapid option-arrow changes no longer overwrite each other when input events are batched. Small terminal forms retain the active option in the viewport.
+
+**Compatibility and checks**
+
+No API/schema changes. Existing credentials and local drafts remain compatible; missing preferences use Midnight defaults. Regression checks cover save/restart, preview cancellation, reset, corrupt files, credential isolation, palette contrast, compact lists, hidden navigation, stacked reviews and 60×18 resizing in a real pseudo-terminal. Preferences apply to the local CLI installation, across its accounts and projects.
+
+## 0.4.1-alpha.1 — Everyday writing and navigation
+
+**Changes**
+
+- `Ctrl+E` edits a multiline form field using `VISUAL`, then `EDITOR`, then the platform default. Ink temporarily hands over the terminal and restores it afterward. Original and returned text are saved locally before publication; failed, oversized or invalid editor output preserves the original form.
+- Notifications link to the exact ordinary reply, including nested replies on later pages. Back navigation restores the selected item by ID and retains reading/review position where content still exists.
+- Conversation bodies and full-text replies render headings, lists, quotes, bold text, inline code, visible link destinations and fenced code with basic lexical highlighting. HTML is displayed as text; terminal control sequences are removed. This is a lightweight renderer, not full CommonMark.
+- HTTP status is preserved for non-JSON failures. Connection, timeout, permission, missing-content, rate-limit and server failures suggest a concrete next action. Session expiry during writing keeps the form; `Ctrl+L` saves the draft and returns to connection setup.
+
+**Compatibility and checks**
+
+No API/schema migration. Existing browser and CLI credentials remain compatible. Regression coverage includes real pseudo-terminal editor handoff/restoration, reply deep links, permission/error states and text rendering. Desktop editor behavior still depends on the configured editor; GUI editors such as VS Code need a wait flag (`code --wait`).
+
+## 0.4.0-alpha.1 — Review workspace and live Inbox
+
+- Side-by-side code and remarks on wide terminals; `W` focus switching on compact layouts. Select a line range and press `C` to comment; `F` filters all/open/resolved remarks. Markers describe the current page. Old remarks display their saved quote.
+- `X` context menu for available edits, deletion, reports, resolving remarks and accepted solutions. Destructive/solution actions require confirmation and server permission checks.
+- Unread counter and serial live polling: 45 seconds active, three minutes idle, failure backoff and pause controls. Active forms and selected items are preserved.
+- Shared blue/purple styling, rounded frames, clearer tabs, cards and project identity. No API/schema migration.
+
+## 0.3.1-alpha.1 — Reply deletion
+
+- `D/d` deletes the author's ordinary reply, including full-text and parent-reply views, with confirmation and revision checks.
+- API tombstones remove text and attachments from access, preserve descendant replies and clear the deleted reply's solution mark. Deleted replies cannot be edited or accepted again. Existing metadata storage is used; no schema migration.
+
+## 0.3.0-alpha.1 — Project files, Git diffs and drafts
+
+- Root-relative file explorer, filename filtering, code preview and line-range selection. Sensitive paths, ignored files, nested symlinks and outside-root traversal are excluded.
+- Read-only staged/unstaged Git diff selection, including individual hunks. No staging, commits or project helper execution. Changed source requires reselection before publication.
+- Scoped local autosaved drafts, restore/delete controls and bounded retention. Snippet source is reread at preview time; selected source files are not copied into draft storage.
+
+## 0.2.0-alpha.1 — Live terminal workspace
+
+- Replaced the numbered scrolling menu with an alternate-screen interface, responsive navigation, forms, previews and search.
+- Paginated conversations, replies, code-feedback threads, edit/delete/report actions and connected-terminal controls.
+- `devdevian tui` runs in the current terminal; `devdevian open` launches a supported desktop terminal. Unicode editing, cancellable reads, bounded caching and terminal restoration checks.
+
+## 0.1.0-alpha.1 — First terminal client
+
+- Browser-approved terminal authentication with scoped, expiring, revocable CLI credentials.
+- Command-based feed, Inbox, search, questions, replies, file-based reviews, line remarks and community discovery using the existing Devdevian API.
+- Explicit publication confirmation, JSON output for scripts, local private credential storage and terminal-output sanitization.
+
+## Preparing a combined GitHub release
+
+Choose a product release title and list the exact npm versions it includes. Summarize user-visible changes, installation, compatibility and known limitations; link to the relevant headings in this file. Do not rename or republish existing npm artifacts, and do not imply that a planned milestone has shipped. GitHub releases are created when the maintainer decides to close the session or milestone.

package/bin/devdevian.mjs

@@ -2,10 +2,9 @@
 import { fileURLToPath } from "node:url";
 import packageInfo from "../package.json" with { type: "json" };
 import { parseArgs } from "node:util";
-import { readFile, writeFile, mkdtemp, rm } from "node:fs/promises";
-import { hostname, tmpdir } from "node:os";
-import { join } from "node:path";
-import { spawn, spawnSync } from "node:child_process";
+import { readFile } from "node:fs/promises";
+import { hostname } from "node:os";
+import { spawn } from "node:child_process";
 import { createInterface } from "node:readline/promises";
 import { setTimeout as delay } from "node:timers/promises";
 import {
@@ -16,6 +15,14 @@ import {
   removeConfig,
   clean,
 } from "../lib/client.mjs";
+import { editExternal } from "../lib/external-editor.mjs";
+import {
+  appearanceFields,
+  appearanceFlags,
+  defaultAppearance,
+  loadAppearance,
+  saveAppearance,
+} from "../lib/appearance.mjs";
 const version = packageInfo.version;
 const options = {
   host: { type: "string" },
@@ -40,6 +47,13 @@ const options = {
   editor: { type: "boolean" },
   "no-open": { type: "boolean" },
   "no-live": { type: "boolean" },
+  ...Object.fromEntries(
+    appearanceFields.map((field) => [
+      field.key === "reviewLayout" ? "review-layout" : field.key,
+      { type: "string" },
+    ]),
+  ),
+  reset: { type: "boolean" },
   help: { type: "boolean", short: "h" },
   version: { type: "boolean", short: "v" },
 };
@@ -80,6 +94,9 @@ const help = `Devdevian CLI ${version} · alpha
   devdevian open                  Open the workspace in a new terminal window
   devdevian login                 Authorize in your browser
   devdevian logout                Revoke this terminal
+  devdevian appearance             Show local theme and layout preferences
+  devdevian appearance --theme daylight --accent violet
+  devdevian appearance --reset     Restore the default appearance
   devdevian whoami
   devdevian inbox [--page 2]
   devdevian feed [--topic web] [--page 2]
@@ -96,6 +113,13 @@ const help = `Devdevian CLI ${version} · alpha
   devdevian review reopen POST_ID REVIEW_ID
   devdevian communities [--page 2]
 
+  --theme NAME       midnight | nebula | daylight | contrast
+  --accent NAME      blue | violet | cyan | rose
+  --density NAME     comfortable | compact
+  --sidebar MODE     auto | hidden (Tab opens navigation)
+  --review-layout MODE  auto | stacked
+  --frame STYLE      round | single
+  --motion MODE      subtle | reduced
   --no-live          Disable background reads in the live workspace
   --project PATH     Root directory for the live file/diff picker (default: current directory)
   --community ID     Publish to an approved private community
@@ -111,30 +135,10 @@ async function editor(initial = "") {
   if (!process.stdin.isTTY || !process.stdout.isTTY)
     throw Error("--editor needs an interactive terminal.");
   terminal?.pause();
-  const directory = await mkdtemp(join(tmpdir(), "devdevian-editor-")),
-    file = join(directory, "message.md");
   try {
-    await writeFile(file, initial, { mode: 0o600 });
-    const command =
-      process.env.VISUAL ||
-      process.env.EDITOR ||
-      (process.platform === "win32" ? "notepad" : "vi");
-    // No shell: metacharacters in content or filenames cannot become commands.
-    const parts =
-      command
-        .match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g)
-        ?.map((p) => p.replace(/^(['"])(.*)\1$/, "$2")) || [];
-    if (!parts.length) throw Error("Set EDITOR to your text editor.");
-    const result = spawnSync(parts[0], [...parts.slice(1), file], {
-      stdio: "inherit",
-      shell: false,
-    });
-    if (result.error || result.status !== 0)
-      throw Error("The editor did not finish successfully.");
-    return await readFile(file, "utf8");
+    return await editExternal(initial);
   } finally {
     terminal?.resume();
-    await rm(directory, { recursive: true, force: true });
   }
 }
 async function boundedFile(file, max) {
@@ -260,6 +264,20 @@ async function execute(args, flags) {
     return;
   }
   const command = args[0];
+  if (command === "appearance") {
+    const loaded = await loadAppearance(),
+      updates = appearanceFlags(flags);
+    if (flags.reset && Object.keys(updates).length)
+      throw Error("Use --reset on its own, or choose appearance options.");
+    if (loaded.warning) process.stderr.write(loaded.warning + "\n");
+    const settings = flags.reset
+      ? await saveAppearance(defaultAppearance)
+      : Object.keys(updates).length
+        ? await saveAppearance({ ...loaded.settings, ...updates })
+        : loaded.settings;
+    out(JSON.stringify(settings, null, 2));
+    return;
+  }
   if (command === "login") return login(flags);
   const config = await loadConfig();
   if (!config) throw Error("Sign in first: devdevian login");
@@ -476,7 +494,14 @@ try {
     await (await import("../lib/tui.mjs")).startTui(values);
   else if (positionals[0] === "open") {
     const args = [];
-    for (const key of ["host", "name", "project"])
+    for (const key of [
+      "host",
+      "name",
+      "project",
+      ...appearanceFields.map((field) =>
+        field.key === "reviewLayout" ? "review-layout" : field.key,
+      ),
+    ])
       if (values[key]) args.push("--" + key, values[key]);
     if (values["no-open"]) args.push("--no-open");
     if (values["no-live"]) args.push("--no-live");

package/lib/appearance.mjs

@@ -0,0 +1,179 @@
+import { dirname, join } from "node:path";
+import {
+  mkdir,
+  lstat,
+  open,
+  writeFile,
+  rename,
+  unlink,
+} from "node:fs/promises";
+import { constants } from "node:fs";
+import { randomBytes } from "node:crypto";
+import { configFile } from "./client.mjs";
+
+export const appearanceFields = [
+  {
+    key: "theme",
+    label: "Theme",
+    options: [
+      ["midnight", "Midnight · original"],
+      ["nebula", "Nebula · deep violet"],
+      ["daylight", "Daylight · light"],
+      ["contrast", "Contrast · high contrast"],
+    ],
+  },
+  {
+    key: "accent",
+    label: "Accent",
+    options: [
+      ["blue", "Blue"],
+      ["violet", "Violet"],
+      ["cyan", "Cyan"],
+      ["rose", "Rose"],
+    ],
+  },
+  {
+    key: "density",
+    label: "List density",
+    options: [
+      ["comfortable", "Comfortable"],
+      ["compact", "Compact"],
+    ],
+  },
+  {
+    key: "sidebar",
+    label: "Navigation",
+    options: [
+      ["auto", "Sidebar on wide terminals"],
+      ["hidden", "Hidden · Tab opens navigation"],
+    ],
+  },
+  {
+    key: "reviewLayout",
+    label: "Review panels",
+    options: [
+      ["auto", "Side by side when space allows"],
+      ["stacked", "One panel · W switches"],
+    ],
+  },
+  {
+    key: "frame",
+    label: "Frames",
+    options: [
+      ["round", "Rounded"],
+      ["single", "Straight"],
+    ],
+  },
+  {
+    key: "motion",
+    label: "Motion",
+    options: [
+      ["subtle", "Subtle loading indicators"],
+      ["reduced", "Reduced · static indicators"],
+    ],
+  },
+];
+export const defaultAppearance = Object.freeze(
+  Object.fromEntries(
+    appearanceFields.map((field) => [field.key, field.options[0][0]]),
+  ),
+);
+export function normalizeAppearance(value = {}) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw Error("Appearance settings must be an object.");
+  for (const key of Object.keys(value))
+    if (!appearanceFields.some((field) => field.key === key))
+      throw Error("Unknown appearance option: " + key);
+  const settings = { ...defaultAppearance, ...value };
+  for (const field of appearanceFields)
+    if (!field.options.some(([id]) => id === settings[field.key]))
+      throw Error(
+        `Invalid ${field.key}. Choose: ${field.options.map(([id]) => id).join(", ")}.`,
+      );
+  return settings;
+}
+export function appearanceFlags(flags) {
+  const updates = {};
+  for (const field of appearanceFields) {
+    const flag = field.key === "reviewLayout" ? "review-layout" : field.key;
+    if (flags[flag] !== undefined) updates[field.key] = flags[flag];
+  }
+  normalizeAppearance(updates);
+  return updates;
+}
+export const appearanceFile = (env = process.env) =>
+  join(dirname(configFile(env)), "appearance.json");
+async function safeDirectory(path) {
+  const info = await lstat(path);
+  if (!info.isDirectory() || info.isSymbolicLink())
+    throw Error("The appearance directory must be a real directory.");
+}
+export async function loadAppearance(env = process.env) {
+  const file = appearanceFile(env);
+  try {
+    await safeDirectory(dirname(file));
+    const info = await lstat(file);
+    if (!info.isFile() || info.isSymbolicLink() || info.size > 4096)
+      throw Error("Invalid appearance file.");
+    const handle = await open(
+      file,
+      constants.O_RDONLY |
+        (constants.O_NOFOLLOW || 0) |
+        (constants.O_NONBLOCK || 0),
+    );
+    let record;
+    try {
+      if (!(await handle.stat()).isFile())
+        throw Error("Invalid appearance file.");
+      const bytes = Buffer.alloc(4097),
+        { bytesRead } = await handle.read(bytes, 0, bytes.length, 0);
+      if (bytesRead > 4096) throw Error("Appearance file is too large.");
+      record = JSON.parse(
+        new TextDecoder("utf-8", { fatal: true }).decode(
+          bytes.subarray(0, bytesRead),
+        ),
+      );
+    } finally {
+      await handle.close();
+    }
+    if (
+      record.version !== 1 ||
+      !record.settings ||
+      typeof record.settings !== "object"
+    )
+      throw Error("Unsupported appearance file version.");
+    return { settings: normalizeAppearance(record.settings), warning: "" };
+  } catch (error) {
+    return {
+      settings: { ...defaultAppearance },
+      warning:
+        error.code === "ENOENT"
+          ? ""
+          : "Could not load appearance settings. Using defaults; /appearance can save a fresh configuration.",
+    };
+  }
+}
+export async function saveAppearance(value, env = process.env) {
+  const settings = normalizeAppearance(value),
+    file = appearanceFile(env),
+    directory = dirname(file);
+  await mkdir(directory, { recursive: true, mode: 0o700 });
+  await safeDirectory(directory);
+  const temporary = join(
+    directory,
+    ".appearance-" + randomBytes(12).toString("hex"),
+  );
+  try {
+    await writeFile(
+      temporary,
+      JSON.stringify({ version: 1, settings }, null, 2) + "\n",
+      { flag: "wx", mode: 0o600 },
+    );
+    await rename(temporary, file);
+  } finally {
+    await unlink(temporary).catch((error) => {
+      if (error.code !== "ENOENT") throw error;
+    });
+  }
+  return settings;
+}

package/lib/client.mjs

@@ -110,8 +110,13 @@ export function client(origin, token = null) {
       });
     } catch (error) {
       if (signal?.aborted) throw error;
-      throw Error(
-        "Could not reach Devdevian. Check your connection and server address.",
+      throw Object.assign(
+        Error(
+          error.name === "TimeoutError"
+            ? "Connection timed out. Check your connection and server address."
+            : "Could not reach Devdevian. Check your connection and server address.",
+        ),
+        { code: error.name === "TimeoutError" ? "TIMEOUT" : "NETWORK" },
       );
     }
     const chunks = [];
@@ -127,8 +132,11 @@ export function client(origin, token = null) {
     try {
       data = JSON.parse(text);
     } catch {
-      throw Error(
-        `Devdevian returned an unexpected response (HTTP ${response.status}). Try again later.`,
+      throw Object.assign(
+        Error(
+          `Devdevian returned an unexpected response (HTTP ${response.status}). Try again later.`,
+        ),
+        { status: response.status },
       );
     }
     if (!response.ok) {

package/lib/external-editor.mjs

@@ -0,0 +1,111 @@
+import { spawn } from "node:child_process";
+import { mkdtemp, writeFile, open, rm, lstat } from "node:fs/promises";
+import { constants } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+// Parse argv, never shell code. Quoting supports editor paths and --wait flags.
+export function editorArgs(command) {
+  const args = [];
+  let value = "",
+    quote = null,
+    started = false;
+  for (const char of command.trim()) {
+    if (quote) {
+      if (char === quote) quote = null;
+      else value += char;
+    } else if (char === '"' || char === "'") {
+      quote = char;
+      started = true;
+    } else if (/\s/.test(char)) {
+      if (started) {
+        args.push(value);
+        value = "";
+        started = false;
+      }
+    } else {
+      value += char;
+      started = true;
+    }
+  }
+  if (quote) throw Error("Close the quote in VISUAL / EDITOR.");
+  if (started) args.push(value);
+  if (!args[0])
+    throw Error(
+      "Set VISUAL or EDITOR to an editor command (for example: code --wait).",
+    );
+  return args;
+}
+export async function editExternal(
+  initial,
+  {
+    max = 15000,
+    command = process.env.VISUAL ||
+      process.env.EDITOR ||
+      (process.platform === "win32" ? "notepad" : "vi"),
+  } = {},
+) {
+  const [executable, ...args] = editorArgs(command);
+  const directory = await mkdtemp(join(tmpdir(), "devdevian-editor-")),
+    file = join(directory, "message.md");
+  try {
+    await writeFile(file, initial, { mode: 0o600, flag: "wx" });
+    await new Promise((resolve, reject) => {
+      const child = spawn(executable, [...args, file], {
+        stdio: "inherit",
+        shell: false,
+      });
+      child.once("error", () =>
+        reject(
+          Error(
+            "Could not start the editor. Check VISUAL / EDITOR; your original text is unchanged.",
+          ),
+        ),
+      );
+      child.once("exit", (code) =>
+        code === 0
+          ? resolve()
+          : reject(
+              Error(
+                "Editor cancelled or failed; your original text is unchanged.",
+              ),
+            ),
+      );
+    });
+    const infoBeforeOpen = await lstat(file);
+    if (infoBeforeOpen.isSymbolicLink() || !infoBeforeOpen.isFile())
+      throw Error("Editor output must be a regular file. Original text kept.");
+    const handle = await open(
+      file,
+      constants.O_RDONLY |
+        (constants.O_NOFOLLOW || 0) |
+        (constants.O_NONBLOCK || 0),
+    );
+    try {
+      const info = await handle.stat();
+      if (!info.isFile() || info.size > max * 4)
+        throw Error(
+          `Editor output must be a UTF-8 text file with at most ${max} characters. Original text kept.`,
+        );
+      const buffer = Buffer.alloc(max * 4 + 1),
+        { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+      let text;
+      try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(
+          buffer.subarray(0, bytesRead),
+        );
+      } catch {
+        throw Error("Editor output must be UTF-8. Original text kept.");
+      }
+      if (bytesRead > max * 4 || text.length > max || text.includes("\0"))
+        throw Error(
+          `Editor output exceeds ${max} characters or contains binary data. Original text kept.`,
+        );
+      return text.replace(/\r\n/g, "\n");
+    } finally {
+      await handle.close();
+    }
+  } finally {
+    await rm(directory, { recursive: true, force: true });
+  }
+}

package/lib/picker.mjs

@@ -9,9 +9,8 @@ import {
   readDiff,
   selectLines,
 } from "./workspace.mjs";
-import { colors } from "./theme.mjs";
-const h = React.createElement,
-  c = { ...colors, bg: colors.panel };
+import { useTheme } from "./theme.mjs";
+const h = React.createElement;
 export function WorkspacePicker({
   root,
   width,
@@ -20,6 +19,8 @@ export function WorkspacePicker({
   onSelect,
   onCancel,
 }) {
+  const colors = useTheme(),
+    c = { ...colors, bg: colors.panel };
   const [mode, setMode] = useState(initial),
     [folder, setFolder] = useState("."),
     [hidden, setHidden] = useState(false),
@@ -265,7 +266,7 @@ export function WorkspacePicker({
       height: panelHeight,
       key: "browser",
       flexDirection: "column",
-      borderStyle: "round",
+      borderStyle: colors.frame,
       borderColor: c.purple,
       paddingX: 1,
       overflow: "hidden",
@@ -330,7 +331,7 @@ export function WorkspacePicker({
           height: panelHeight,
           key: "preview",
           flexDirection: "column",
-          borderStyle: "round",
+          borderStyle: colors.frame,
           borderColor: c.blue,
           paddingX: 1,
           overflow: "hidden",

package/lib/problems.mjs

@@ -0,0 +1,29 @@
+import { clean } from "./client.mjs";
+export function problemMessage(error) {
+  const detail = clean(error.message || "Unexpected error.");
+  if (error.status === 401)
+    return "Session expired or revoked. Ctrl+L reconnects; your draft is kept locally.";
+  if (error.status === 403)
+    return (
+      "Access denied. Check your community membership or account permissions. " +
+      detail
+    );
+  if (error.status === 404)
+    return (
+      "Content unavailable: it may have been removed or is private. Esc goes back. " +
+      detail
+    );
+  if (error.status === 429)
+    return (
+      "Rate limit reached. Wait before trying again; writes are not retried automatically. " +
+      detail
+    );
+  if (error.status >= 500)
+    return (
+      "Server temporarily unavailable. Shift+R retries a view; check before retrying a write. " +
+      detail
+    );
+  if (error.code === "NETWORK" || error.code === "TIMEOUT")
+    return detail + " Shift+R retries a view. Your draft remains editable.";
+  return detail;
+}