@webship.co/workspace 1.0.0-alpha1 → 1.0.0-beta1

package/PLUGINS.md

@@ -239,7 +239,7 @@ plugin itself (no manifest) and the dashboard never sees it.
 | Forges (`github`, `gitlab`, `bitbucket`) | `@webship.co/workspace-forge` — `registerForge(api, forge)` | the credential the dashboard uses for the host (`api.addForge`, which `github-auth.js` asks before the legacy `git.github` block), the row menu on every project whose git remote is at the host (repository, open issues and pull or merge requests, open one from the branch in a terminal, clone URL), the repository chip, the New-folder clone option | a `ForgeProvider`: the host, the CLI, how a remote URL reads, the pages, the issue and request lists, the clone URL |
 | Container runtimes (`docker`, `lando`, `docksal`, `podman`, `kubernetes`) | `@webship.co/workspace-container` — `registerContainer(api, runtime)` | the row menu on every project the runtime recognises (its verbs as terminal sessions in the project, grouped, with the site link), the up/down caption answered after the row is drawn, the New-folder init option | a `ContainerRuntime`: how a folder is detected as a project, the CLI, how to tell whether it is up, the verbs and their commands |
 
-`@webship.co/workspace-upsun` 2.0.0 is the reference provider: `register(api)` is one line, the facts are
+`@webship.co/workspace-upsun` is the reference provider: `register(api)` is one line, the facts are
 in `src/lib/provider.ts`, and the bash tool, compose file, host install, settings template and theme
 are what the installer places.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webship.co/workspace",
-  "version": "1.0.0-alpha1",
+  "version": "1.0.0-beta1",
   "description": "The Webship Workspace dashboard: a lean core (workspaces, builders, settings, the assistant shell, the plugin system) that every feature joins as a @webship.co/workspace-<name> plugin \u2014 required with npm, then activated, installed and configured.",
   "license": "ISC",
   "repository": {

package/plugin-loader.js

@@ -68,6 +68,11 @@ const lib = {
   LINGER_MARK: require('./linger').LINGER_MARK,
   tildePath: (p) => require('./format').tildePath(p),
   hostRunnerRequest: (...a) => require('./jobs').hostRunnerRequest(...a),
+  // The list helpers a plugin's own list page draws with (paging, sorting, the controls), the
+  // stylesheet version a standalone page links, and the script finder (cmd-tools-<x>.sh in a folder).
+  lists: require('./lists'),
+  cssVersionNow: () => require('./themes').cssVersion(require('./workspaces').styleSettings().theme),
+  findScript: (dir, patterns) => require('./workspaces').findScript(dir, patterns),
   workspaceType: (key) => (loadWorkspaces()[key] || {}).type || null,
   typeAllows: (key, action) => {
     const meta = loadWorkspaces()[key];
@@ -94,6 +99,7 @@ const sessionLogFns = [];    // (session, dirs) -> file | ''
 const assistantContextFns = []; // () -> a paragraph for the assistant's system context, or ''
 const forges = {};           // '<host>' -> { name, label, env(), auth() }: who answers for a git forge host
 const openWithFns = [];      // (abs, { label, caption, git }) -> html | null: the Open-with menu for a folder (the IDE plugin)
+const workspaceViews = {};   // '<key>' -> { name, listHtml(state), count(), noFilesActions, noNewForm }: a plugin that owns a workspace folder's page
 const folderLinkFns = [];    // (abs) -> { href, label, icon?, title? } | null: a link to open a folder elsewhere (the Web IDE)
 
 let _screens = { at: 0, rows: [], running: false };
@@ -232,6 +238,13 @@ function makeApi(name, config) {
     addFolderLink(fn) {
       folderLinkFns.push(fn);
     },
+    // A plugin that owns a workspace folder's page (the graphs workspace): its list section
+    // (`listHtml(state)`), the count on the home card (`count()`), and whether the files-page
+    // actions and the New-folder form stay away from it.
+    addWorkspaceView(key, view) {
+      if (!/^[a-z0-9_-]+$/.test(String(key))) throw new Error(`${name}: invalid workspace key '${key}'`);
+      workspaceViews[key] = { name, ...view };
+    },
   };
 }
 
@@ -404,6 +417,11 @@ function pluginWorkPrompt(ctx) {
   for (const fn of workPromptFns) { try { const p = fn(ctx); if (p) return p; } catch (_) { /* next */ } }
   return null;
 }
+/** The plugin view of a workspace folder's page, or null. */
+function pluginWorkspaceView(key) {
+  return workspaceViews[String(key || '')] || null;
+}
+
 /** The Open-with menu for a folder, from the first plugin that draws one; '' without an IDE plugin. */
 function pluginOpenWith(abs, opts = {}) {
   for (const fn of openWithFns) {
@@ -443,6 +461,6 @@ loadPlugins();
 module.exports = {
   pluginActions: actions, pluginFragment, pluginPage, pluginPageActionGroups, pluginProjectActionsHtml,
   pluginRowMenus, pluginProjectChipsHtml, pluginFolderSetups, pluginCssFiles, pluginLabels,
-  pluginProjectBadgesHtml, pluginSettingsOptions, pluginScreenStarted, pluginWorkKeyLink, pluginWorkPrompt, pluginSessionLog, pluginAssistantContext, pluginForge, pluginForges, pluginOpenWith, pluginFolderLinks,
+  pluginProjectBadgesHtml, pluginSettingsOptions, pluginScreenStarted, pluginWorkKeyLink, pluginWorkPrompt, pluginSessionLog, pluginAssistantContext, pluginForge, pluginForges, pluginOpenWith, pluginFolderLinks, pluginWorkspaceView,
   loadedPlugins: loaded, pluginConfigs,
 };

package/row-layout.js

@@ -58,7 +58,6 @@ const BUILTIN_BUTTONS = [
   // Single buttons, with no menu inside to arrange or to add actions to.
   { id: 'backup', label: 'Backup', row: 1, menu: false },
   { id: 'clone', label: 'Clone', row: 1, menu: false },
-  { id: 'graph', label: 'Graph', row: 1 },
   { id: 'rag', label: 'RAG', row: 1 },
   { id: 'more', label: 'More', row: 1 },
 ];

package/server.js

@@ -26,7 +26,6 @@ const {
   workspaceDir,
   findBackupScript,
   findRemoveScript,
-  findGraphifyScript,
   findRagifyScript,
   findBuilderScripts,
   listBackups,
@@ -85,7 +84,7 @@ const {
 // Optional features workspaces turn on from settings.yml `plugins:` — see PLUGINS.md.
 const {
   pluginActions, pluginFragment, pluginPage, pluginPageActionGroups, pluginProjectActionsHtml,
-  pluginRowMenus, pluginOpenWith, pluginFolderLinks, pluginProjectChipsHtml, pluginLabels,
+  pluginRowMenus, pluginWorkspaceView, pluginOpenWith, pluginFolderLinks, pluginProjectChipsHtml, pluginLabels,
   pluginProjectBadgesHtml, pluginSettingsOptions, pluginWorkKeyLink, pluginWorkPrompt,
 } = require('./plugin-loader');
 // How a project row is arranged — the order of its buttons and of what is inside their menus (Commands → Buttons).
@@ -133,7 +132,6 @@ const {
 const { commandAuthorPrompt, commandEditPrompt } = require('./command-author');
 const { checksCaption, checksDeclaredOf, checksRowsOf } = require('./checks');
 const { testReportPdfHtml } = require('./report-pdf');
-const { graphStoreDir, hasGraph, graphCounts, listGraphs } = require('./graphs');
 const {
   milvusProjectName, milvusRestBase, ragInstances, ragBindings, ragInstanceFor, ragWriteBinding,
   ragCollectionName, milvusPost, ragCollections, ragInvalidate,
@@ -143,7 +141,6 @@ const {
   ddevProjectName, listProjects, listProjectsDetailed,
   startInScreen, screenStartedHtml, screenAction, screenSessionName,
 } = require('./jobs');
-const { vaultDir, indexNote, vaultView, vaultCanvas, vaultFrame, obsidianMenuItems } = require('./obsidian');
 const { assembleCss, cssVersion, listThemes, themeLabel, createTheme, themePreview, isYamlOnlyTheme } = require('./themes');
 const NAME_RE = /^[a-zA-Z0-9_\-]+$/;
 
@@ -2887,7 +2884,8 @@ function homeCardsHtml(message) {
   const workspaces = loadWorkspaces();
   const keys = Object.keys(workspaces);
   const cards = Object.values(workspaces).map((w) => {
-    const projectCount = w.key === 'graphs' ? listGraphs().length
+    const view = pluginWorkspaceView(w.key);
+    const projectCount = view && view.count ? view.count()
       : w.kind === 'files' ? listItems(w.key).length : listProjects(w.dir).length;
     const hasBuilders = w.kind === 'files' || !w.typeActions.has('build') ? false : findBuilderScripts(w.dir).length > 0;
     const backupCount = listBackups(w.key).length;
@@ -3144,7 +3142,6 @@ async function projectRowsHtml(key, dir, state) {
   const canBackup = allowed.has('backup') && !!findBackupScript(dir);
   const canClone = allowed.has('clone') && fs.existsSync(path.join(dir, 'cmd-tools-clone.sh'));
   const canRemove = allowed.has('remove') && !!findRemoveScript(dir);
-  const canGraphify = allowed.has('graphify') && !!findGraphifyScript(dir);
   const canRagify = allowed.has('ragify') && !!findRagifyScript(dir);
   const canTest = allowed.has('tests') && fs.existsSync(path.join(dir, 'cmd-tools-testing.sh'));
   const canChecks = allowed.has('checks') && fs.existsSync(path.join(dir, 'cmd-tools-checks.sh'));
@@ -3459,25 +3456,6 @@ async function projectRowsHtml(key, dir, state) {
             hx-get="/fragments/projects/clone-form/${encodeURIComponent(key)}/${encodeURIComponent(p)}" hx-target="#editor-modal-body" hx-swap="innerHTML"
             hx-on::after:request="UIkit.modal('#editor-modal').show()"
             title="Clone this ${esc(meta.noun)} — a copy, or a git worktree sharing its history"><span uk-icon="icon: copy; ratio: .7"></span> Clone</button>` : '';
-    const graphMenu = canGraphify ? (() => {
-            const built = hasGraph(key, p, 'graph.json') || hasGraph(key, p, 'graph.html');
-            const busy = !!runningJobKey(`graphify:${key}/${p}`);
-            return `<span class="act-with-status"><div class="uk-inline act-menu act-menu-graph">
-              <button class="uk-button uk-button-default uk-button-small" type="button" title="Knowledge graph"><span uk-icon="icon: git-fork; ratio: .7"></span> Graph <span uk-icon="icon: chevron-down; ratio: .6"></span></button>
-              
-              <div uk-dropdown="mode: click; pos: bottom-right"><ul class="uk-nav uk-dropdown-nav">
-                <li data-entry="build the graph"><a href hx-post="/actions/graphify" ${vals()} class="${busy ? 'uk-disabled' : ''}"><span uk-icon="icon: play; ratio: .7"></span> ${built ? 'Rebuild the graph' : 'Build the graph'}${busy ? ' (running…)' : ''}</a></li>
-                ${built ? `<li class="uk-nav-divider"></li>
-                ${hasGraph(key, p, 'graph.html') ? `<li><a href="/graph/${esc(key)}/${esc(p)}" target="_blank" title="Loads vis-network from unpkg.com, so it needs internet"><span uk-icon="icon: image; ratio: .7"></span> Open the graph</a></li>` : ''}
-                ${hasGraph(key, p, 'GRAPH_REPORT.md') ? `<li><a href="/graph/${esc(key)}/${esc(p)}/report" target="_blank"><span uk-icon="icon: file-text; ratio: .7"></span> Read the report</a></li>` : ''}
-                <li><a href="/graph/${esc(key)}/${esc(p)}/download" title="The graph as a .tar.gz, to hand to another workspace"><span uk-icon="icon: download; ratio: .7"></span> Download to share</a></li>
-                <li><a href hx-post="/actions/graph-mcp-command" ${vals()}><span uk-icon="icon: link; ratio: .7"></span> Connect over MCP…</a></li>
-                ${obsidianMenuItems(key, p, vals, busy)}
-                <li class="uk-nav-divider"></li>
-                <li><a href class="uk-text-danger arm-step" hx-post="/actions/graph-remove" ${vals(',"confirm":"yes"')} hx-trigger="confirmed-remove"><span uk-icon="icon: trash; ratio: .7"></span> Delete the graph</a></li>` : ''}
-              </ul></div>
-            </div><span class="act-status uk-text-meta">${built ? 'built' : 'none'}</span></span>`;
-          })() : '';
     const ragMenu = canRagify ? (() => {
             // The RAG index: the same shape as the Graph menu next to it, because it answers the
             // half of the tree the graph does not — prose, templates and configuration.
@@ -3559,7 +3537,7 @@ async function projectRowsHtml(key, dir, state) {
       // The menus activated plugins bring, in the slots they registered (UPSUN, …).
       ...pluginRowMenus({ key, project: p, dir, meta, allowed, vals }),
       screens: screensOnTools, composer: composerMenu, node: nodeMenu, backup: backupButton, clone: cloneButton,
-      graph: graphMenu, rag: ragMenu, more: moreMenu,
+      rag: ragMenu, more: moreMenu,
     }, rowCtx, { preArranged: new Set(['ddev', 'more']) });
     // What is written down about this folder, read once: the name it is called by is the heading, the
     // paragraph is the row's tooltip, and the pen that edits both sits in the card's own corner.
@@ -3840,7 +3818,7 @@ function pageActionGroups(context) {
     groups.push({ id: 'go-to', label: 'Go to', items: [
       link('default', 'arrow-left', `Back to ${meta.label}`, wsUrl(key)),
     ] });
-  } else if (meta && meta.kind === 'files' && key !== 'graphs') {
+  } else if (meta && meta.kind === 'files' && !(pluginWorkspaceView(key) || {}).noFilesActions) {
     // Audio makes things rather than writes them, so each kind of thing is its own action and its own modal.
     // Each is a modal, not an inline form: the result of generating stays in the window that asked for it.
     const modal = 'hx-target="#editor-modal-body" hx-swap="innerHTML"';
@@ -4324,57 +4302,6 @@ function commandsShell(title, subtitle, active, body, context = 'commands') {
 </main>`, context);
 }
 
-function graphRowsHtml(state) {
-  const all = listGraphs();
-  const st = state;
-  const filtered = st.q
-    ? all.filter((g) => g.name.toLowerCase().includes(st.q.toLowerCase()))
-    : all;
-  const sorted = filtered.slice().sort((SORTS[st.sort] || SORTS[defaultSort()] || SORTS.newest).cmp);
-  const p = paginate(sorted, st);
-
-  const rows = p.slice.map((g) => `
-    <div class="uk-card uk-card-default uk-card-small uk-card-body uk-margin-small project-row">
-      <div class="item-row-body">
-        <span class="uk-text-bold">${iconHtml('tabler:hierarchy-2', 0.8)} ${esc(g.project)}
-          <span class="uk-text-meta item-machine" title="The workspace the project lives in">${esc(g.workspace)}</span></span>
-        <div class="item-meta-line">
-          <span class="uk-text-meta item-time">${esc(humanTime(g.mtime))}</span>
-          <span class="uk-text-meta">· ${esc(humanSize(g.size))}</span>
-          ${g.nodes != null ? `<span class="uk-label" title="Nodes and edges, from graphify's own build file">${g.nodes} nodes${g.links != null ? ` · ${g.links} edges` : ''}</span>` : ''}
-          ${g.projectExists ? '' : '<span class="uk-label" title="The project is gone — the graph outlived it, and is safe to delete">project removed</span>'}
-        </div>
-        <div class="project-actions">
-          ${g.hasHtml ? `<a class="uk-button uk-button-default uk-button-small" href="/graph/${esc(g.workspace)}/${esc(g.project)}" target="_blank" title="Loads vis-network from unpkg.com, so it needs internet"><span uk-icon="icon: image; ratio: .7"></span> Open</a>` : ''}
-          ${g.hasReport ? `<a class="uk-button uk-button-default uk-button-small" href="/graph/${esc(g.workspace)}/${esc(g.project)}/report" target="_blank"><span uk-icon="icon: file-text; ratio: .7"></span> Report</a>` : ''}
-          <a class="uk-button uk-button-default uk-button-small" href="/graph/${esc(g.workspace)}/${esc(g.project)}/download"><span uk-icon="icon: download; ratio: .7"></span> Download</a>
-          ${g.projectExists ? `<button class="uk-button uk-button-secondary uk-button-small" hx-post="/actions/graphify" hx-vals='{"workspace":"${esc(g.workspace)}","projectName":"${esc(g.project)}"}' hx-target="#webship-workspace-output" hx-swap="innerHTML" title="Re-extract and re-cluster from the project"><span uk-icon="icon: refresh; ratio: .7"></span> Rebuild</button>` : ''}
-          <button class="uk-button uk-button-danger uk-button-small arm-step" hx-post="/actions/graph-remove" hx-vals='{"workspace":"${esc(g.workspace)}","projectName":"${esc(g.project)}","confirm":"yes"}' hx-target="#webship-workspace-output" hx-swap="innerHTML" hx-trigger="confirmed-remove"><span uk-icon="icon: trash; ratio: .7"></span> Delete</button>
-        </div>
-      </div>
-    </div>`).join('');
-
-  // The controls get the BARE URL: htmx appends the included inputs without deduping, and
-  // readPageState reads the FIRST q/sort — a URL already carrying ?q= made the search box a no-op.
-  // The pager keeps the qs form so page links preserve the current search.
-  const bareUrl = '/fragments/graphs/list';
-  const qs = new URLSearchParams();
-  if (st.q) qs.set('q', st.q);
-  if (st.sort !== defaultSort()) qs.set('sort', st.sort);
-  const url = `${bareUrl}${qs.toString() ? `?${qs}` : ''}`;
-  const pager = listPagerHtml(url, '#webship-workspace-projects', p, st, 'graphs');
-
-  return `
-    <h3 class="uk-margin-small-bottom">Graphs <span class="uk-badge">${all.length}</span></h3>
-    <p class="uk-text-meta uk-margin-small-bottom">One directory per project in <code>${esc(path.join(ROOT, 'graphs'))}/&lt;workspace&gt;/&lt;project&gt;/</code>,
-      built by <code>cmd-tools-graphify.sh</code> from the project's workspace folder. Query one with
-      <code>graphify query "…" --graph ${esc(path.join(ROOT, 'graphs'))}/&lt;workspace&gt;/&lt;project&gt;/graph.json</code>.</p>
-    ${listControlsHtml(bareUrl, '#webship-workspace-projects', st, 'graphs')}
-    ${pager}
-    ${rows || '<p class="uk-text-meta">No graphs yet — build one from the Graph menu on any project row.</p>'}
-    ${pager}`;
-}
-
 async function workspacePage(key, state) {
   await refreshLiveSessions();
   const workspaces = loadWorkspaces();
@@ -4384,12 +4311,8 @@ async function workspacePage(key, state) {
   const builders = isFiles || !meta.typeActions.has('build') ? [] : findBuilderScripts(dir);
   const builderOptions = builders.map((s) => `<option value="${esc(s)}">${esc(builderLabel(dir, s))}</option>`).join('');
 
-  const listSection = key === 'graphs' ? `
-    <div id="webship-workspace-projects" hx-get="/fragments/graphs/list" hx-trigger="refresh-projects from:body">
-      ${graphRowsHtml(state)}
-    </div>
-
-` : meta.kind === 'commands' ? `
+  const view = pluginWorkspaceView(key);
+  const listSection = view && view.listHtml ? view.listHtml(state) : meta.kind === 'commands' ? `
     <div id="webship-workspace-projects" hx-get="/fragments/cc/list" hx-trigger="refresh-projects from:body">
       ${await commandCatalogHtml(state)}
     </div>
@@ -4517,8 +4440,6 @@ const ACTIONS = {
   ...require('./actions/ddev'),
   ...require('./actions/ddev-mail').make({ mailpitFor: ddevMail.mailpitFor(ddevStatusMap) }),
   ...require('./actions/ddev-addons'),
-  ...require('./actions/graphs'),
-  ...require('./actions/obsidian'),
   ...require('./actions/rag'),
   ...require('./actions/testing'),
   ...require('./actions/checks'),
@@ -5660,80 +5581,6 @@ const server = http.createServer(async (req, res) => {
         const out = path.join(tmp, 'report.pdf');
         const cleanup = () => { try { fs.rmSync(tmp, { recursive: true, force: true }); } catch (_) { /* gone */ } };
 
-      // The vault: its index note, and the whole thing as an archive. Same symlink discipline
-      // as the graph routes below — a project directory that is a link would otherwise read
-      // outside the workspace, and this container bind-mounts ~/.claude as well as ~/workspace.
-      const vaultMatch = pathname.match(/^\/obsidian\/([a-z0-9_-]+)\/([a-zA-Z0-9_.-]+)\/(index|download|view|canvas|frame)$/);
-      if (vaultMatch && isValidWorkspace(vaultMatch[1])) {
-        const [, wsKey, project, what] = vaultMatch;
-        if (project.includes('..')) { res.writeHead(400); return res.end('bad name'); }
-        let real;
-        try {
-          real = fs.realpathSync(vaultDir(wsKey, project));
-          const base = fs.realpathSync(path.join(ROOT, 'graphs'));
-          if (!real.startsWith(base + path.sep) || !fs.statSync(real).isDirectory()) throw new Error('outside');
-        } catch (_) {
-          res.writeHead(404, { 'Content-Type': 'text/plain; charset=utf-8' });
-          return res.end('No vault yet — build one from the Graph menu on the project row.');
-        }
-
-        if (what === 'frame') {
-          const wanted = String(new URL(req.url, 'http://localhost').searchParams.get('what') || 'view');
-          res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-          return res.end(vaultFrame(wsKey, project, wanted));
-        }
-
-        if (what === 'view' || what === 'canvas') {
-          // Built before the head is written: a throw after writeHead becomes a 200 with an
-          // empty body, which reads as "the vault is empty" rather than "this broke".
-          let page;
-          try {
-            const themed = cssVersion(styleSettings().theme);
-            page = what === 'view'
-              ? vaultView(wsKey, project, String(new URL(req.url, 'http://localhost').searchParams.get('note') || ''), themed)
-              : vaultCanvas(wsKey, project, themed);
-          } catch (e) {
-            res.writeHead(500, { 'Content-Type': 'text/plain; charset=utf-8' });
-            return res.end(`Could not read the vault: ${e.message}`);
-          }
-          res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-          return res.end(page);
-        }
-
-        if (what === 'index') {
-          // Read before the head is written: computing after writeHead turns a throw into a
-          // 200 with an empty body, which reads as "it worked and there is nothing there".
-          let md;
-          try {
-            md = fs.readFileSync(path.join(real, indexNote(project)), 'utf8');
-          } catch (_) {
-            res.writeHead(404, { 'Content-Type': 'text/html; charset=utf-8' });
-            return res.end('<div class="msg error">The vault has no index note. Rebuild it.</div>');
-          }
-          const vaultUri = `obsidian://open?path=${encodeURIComponent(real)}`;
-          res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-          return res.end(`<h3>${esc(project)} <span class="uk-text-meta">Obsidian vault</span></h3>
-            <p class="uk-text-meta">${esc(real)}</p>
-            <p><a class="uk-button uk-button-primary uk-button-small" href="${esc(vaultUri)}">Open in Obsidian</a>
-               <a class="uk-button uk-button-default uk-button-small" href="/obsidian/${esc(wsKey)}/${esc(project)}/download">Download</a></p>
-            <pre class="uk-background-muted uk-padding-small" style="white-space:pre-wrap">${esc(md)}</pre>`);
-        }
-
-        const vaultArchive = `${wsKey}--${project}--obsidian.tar.gz`;
-        res.writeHead(200, {
-          'Content-Type': 'application/gzip',
-          'Content-Disposition': `attachment; filename="${vaultArchive.replace(/[^A-Za-z0-9._-]/g, '_')}"`,
-          'X-Content-Type-Options': 'nosniff',
-        });
-        const vtar = spawn('tar', ['-czf', '-', '-C', path.dirname(real), path.basename(real)],
-          { stdio: ['ignore', 'pipe', 'pipe'] });
-        vtar.stdout.pipe(res);
-        vtar.stderr.resume();
-        vtar.on('error', () => { try { res.destroy(); } catch (_) { /* client gone */ } });
-        res.on('close', () => { try { vtar.kill(); } catch (_) { /* already exited */ } });
-        return;
-      }
-
         // Rendered from the run's JSON through our own print stylesheet, not from
         // cucumber-html-reporter's page: that page's feature and scenario bodies are Bootstrap
         // collapsibles which print CLOSED — a PDF of nothing but headers — and its CSS comes from
@@ -5779,66 +5626,6 @@ const server = http.createServer(async (req, res) => {
         });
         return;
       }
-      const graphDlMatch = pathname.match(/^\/graph\/([a-z0-9_-]+)\/([a-zA-Z0-9_.\-]+)\/download$/);
-      if (graphDlMatch && isValidWorkspace(graphDlMatch[1])) {
-        const [, wsKey, project] = graphDlMatch;
-        if (project.includes('..')) { res.writeHead(400); return res.end('bad name'); }
-        const out = graphStoreDir(wsKey, project);
-        let real;
-        try {
-          real = fs.realpathSync(out);
-          const base = fs.realpathSync(path.join(ROOT, 'graphs'));
-          if (!real.startsWith(base + path.sep) || !fs.statSync(real).isDirectory()) throw new Error('nope');
-        } catch (_) {
-          res.writeHead(404, { 'Content-Type': 'text/plain; charset=utf-8' });
-          return res.end('No graph yet — build one from the Graph menu on the project row.');
-        }
-        // Streamed straight from tar: a graph runs to tens of MB and buffering it would hold
-        // the whole thing in the app's memory.
-        const name = `${wsKey}--${project}--graph.tar.gz`;
-        res.writeHead(200, {
-          'Content-Type': 'application/gzip',
-          'Content-Disposition': `attachment; filename="${name.replace(/[^A-Za-z0-9._-]/g, '_')}"`,
-          'X-Content-Type-Options': 'nosniff',
-        });
-        const tar = spawn('tar', ['-czf', '-', '-C', path.dirname(real), path.basename(real)],
-          { stdio: ['ignore', 'pipe', 'pipe'] });
-        tar.stdout.pipe(res);
-        tar.stderr.resume();
-        tar.on('error', () => { try { res.destroy(); } catch (_) { /* client gone */ } });
-        res.on('close', () => { try { tar.kill(); } catch (_) { /* already exited */ } });
-        return;
-      }
-      const graphMatch = pathname.match(/^\/graph\/([a-z0-9_-]+)\/([a-zA-Z0-9_\-]+)(\/report)?$/);
-      if (graphMatch && isValidWorkspace(graphMatch[1])) {
-        const wantsReport = !!graphMatch[3];
-        const dir = path.join(ROOT, 'graphs');
-        const file = path.join(graphStoreDir(graphMatch[1], graphMatch[2]),
-          wantsReport ? 'GRAPH_REPORT.md' : 'graph.html');
-        // Resolve symlinks before trusting the path: a project directory that
-        // is a symlink would otherwise read outside the workspace, and this
-        // container bind-mounts ~/.claude as well as ~/workspace.
-        let real = null;
-        try {
-          const base = fs.realpathSync(dir);
-          real = fs.realpathSync(file);
-          if (real !== base && !real.startsWith(base + path.sep)) real = null;
-          if (real && !fs.statSync(real).isFile()) real = null;
-        } catch (_) { real = null; }
-        if (!real) {
-          res.writeHead(404, { 'Content-Type': 'text/plain; charset=utf-8' });
-          return res.end('No graph yet — press Graph on the project row to build one.');
-        }
-        // graph.html is generated from the project's own code: serve it with
-        // scripts sandboxed away from this origin, and stream it (it runs to
-        // tens of MB on a large codebase).
-        res.writeHead(200, {
-          'Content-Type': wantsReport ? 'text/plain; charset=utf-8' : 'text/html; charset=utf-8',
-          'X-Content-Type-Options': 'nosniff',
-          'Content-Security-Policy': 'sandbox allow-scripts allow-popups;',
-        });
-        return fs.createReadStream(real).pipe(res);
-      }
       const jobMatch = pathname.match(/^\/fragments\/job\/([a-z0-9-]+)$/);
       if (jobMatch) {
         const frag = jobFragment(jobMatch[1]);
@@ -6092,7 +5879,7 @@ const server = http.createServer(async (req, res) => {
         return res.end(made.html);
       }
       const newMatch = pathname.match(/^\/fragments\/([a-z0-9_-]+)\/new$/);
-      if (newMatch && newMatch[1] !== 'graphs' && isValidWorkspace(newMatch[1]) && loadWorkspaces()[newMatch[1]].kind === 'files') {
+      if (newMatch && !(pluginWorkspaceView(newMatch[1]) || {}).noNewForm && isValidWorkspace(newMatch[1]) && loadWorkspaces()[newMatch[1]].kind === 'files') {
         const key = newMatch[1];
         res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
         return res.end(editorFormHtml(key, '', (ITEM_TEMPLATES[key] || ITEM_TEMPLATES.docs)('my-' + loadWorkspaces()[key].noun), true));
@@ -6534,10 +6321,6 @@ const server = http.createServer(async (req, res) => {
       }
       // The images public/ actually holds, as tiles. A settings value has to match a file
       // exactly, so this shows what is there rather than asking you to remember a filename.
-      if (pathname === '/fragments/graphs/list') {
-        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-        return res.end(graphRowsHtml(readPageState(req)));
-      }
       if (pathname === '/fragments/jobs/inline') {
         const rows = [...jobs.entries()].filter(([, j]) => !j.done && j.inline).map(([id, j]) => `
           <div class="uk-flex uk-flex-middle uk-flex-between uk-margin-small-bottom">

package/workspace-types.js

@@ -23,12 +23,12 @@ const TYPES = {
   sites: {
     label: 'Sites — DDEV projects',
     description: 'Built Drupal sites: DDEV controls, tests, users, the full toolbelt.',
-    actions: ['build', 'folder', 'ddev', 'backup', 'clone', 'remove', 'graphify', 'ragify', 'tests', 'checks', 'users'],
+    actions: ['build', 'folder', 'ddev', 'backup', 'clone', 'remove', 'ragify', 'tests', 'checks', 'users'],
   },
   code: {
     label: 'Code — packages and repositories',
     description: 'Modules, themes, libraries, recipes: quality checks and knowledge tools, no site controls.',
-    actions: ['build', 'folder', 'backup', 'remove', 'graphify', 'ragify', 'checks'],
+    actions: ['build', 'folder', 'backup', 'remove', 'ragify', 'checks'],
   },
   files: {
     label: 'Files — documents and drafts',

package/workspaces.js

@@ -256,10 +256,6 @@ function findRemoveScript(dir) {
   return findScript(dir, [/^cmd-tools-remove\.sh$/]);
 }
 
-function findGraphifyScript(dir) {
-  return findScript(dir, [/^cmd-tools?-graphify\.sh$/]);
-}
-
 function findRagifyScript(dir) {
   return findScript(dir, [/^cmd-tools?-ragify\.sh$/]);
 }
@@ -549,7 +545,7 @@ module.exports = {
   workspaceDir,
   findBackupScript,
   findRemoveScript,
-  findGraphifyScript,
+  findScript,
   findRagifyScript,
   findBuilderScripts,
   builderLabel,

package/actions/graphs.js

@@ -1,107 +0,0 @@
-/**
- * Building a project's knowledge graph, and what you do with it afterwards.
- *
- * One module per area of the dashboard, each exporting the handlers it owns keyed by the path that
- * reaches them. server.js merges the maps and dispatches; nothing here knows about routing, and
- * adding an action is adding an entry rather than another branch in a 1,250-line function.
- *
- * Every handler takes the same context: the parsed form, the response, a `send` that writes an HTML
- * fragment, and the workspace the request named.
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const { esc } = require('../html');
-const { humanSize, humanTime } = require('../format');
-const { ROOT, loadWorkspaces, workspaceDir } = require('../workspaces');
-const {
-  run, jobFragment, runningJobKey, startJob, ddevProjectName, listProjects,
-  startInScreen, screenStartedHtml,
-} = require('../jobs');
-const { graphStoreDir } = require('../graphs');
-const {
-  milvusProjectName, ragInstances, ragBindings, ragInstanceFor, ragWriteBinding,
-  ragCollectionName, milvusPost, ragCollections, ragInvalidate,
-} = require('../rag');
-const {
-  findTestReports, testReportFor, invalidateTestReports, testMediaHtml, testingStackOf,
-} = require('../test-reports');
-const { NAME_RE, SCRIPT_RE } = require('../validate');
-const { commandBlock } = require('../command-block');
-const { wsUrl } = require('../urls');
-const { findGraphifyScript, findRagifyScript } = require('../workspaces');
-const { DDEV_ACTIONS } = require('../ddev');
-
-async function graphify({ form, res, send, workspace, pathname }) {
-    const dir = workspaceDir(workspace);
-    const script = findGraphifyScript(dir);
-    const projectName = String(form.projectName || '');
-    if (!script) return send('<div class="msg error">No graphify script in this workspace.</div>', 400);
-    if (!NAME_RE.test(projectName) || !listProjects(dir).includes(projectName)) {
-      return send('<div class="msg error">Unknown project.</div>', 400);
-    }
-    // graphify has no cross-process lock: two runs against one graphify-out/
-    // race on manifest.json, graph.json and cache/ast, and the loser's atomic
-    // replace silently wins, corrupting the incremental gate.
-    const jobKey = `graphify:${workspace}/${projectName}`;
-    if (runningJobKey(jobKey)) {
-      return send('<div class="msg error">A graph is already being built for this project.</div>', 409);
-    }
-    // Local AST extraction only: no API key, nothing leaves the machine. Big
-    // codebases take a while, so it gets the long build timeout.
-    const started = await startInScreen({ workspace, project: projectName, projectDir: dir, ownerDir: path.join(dir, projectName), verb: 'graphify',
-      cmdLine: `bash ${JSON.stringify(script)} ${JSON.stringify(projectName)}`, label: 'graphify' });
-    return send(screenStartedHtml(started, 'graphify', projectName), started.ok ? 200 : (started.already ? 409 : 500));
-}
-
-  // Commands the dashboard SHOWS rather than runs, with a copy button each.
-  //
-  // Two kinds end up here. `claude mcp add` writes ~/.claude.json — the CLI configuration of the
-  // person at the keyboard, not of this web request. The Upsun pulls need cloud credentials this
-  // container does not have and replace local data. Both are worth reading before they happen.
-async function graph_mcp_command({ form, res, send, workspace, pathname }) {
-    const projectName = String(form.projectName || '');
-    if (!NAME_RE.test(projectName)) return send('<div class="msg error">Unknown project.</div>', 400);
-    const graph = path.join(graphStoreDir(workspace, projectName), 'graph.json');
-    if (!fs.existsSync(graph)) return send('<div class="msg error">No graph yet — build it first.</div>', 409);
-    return send(commandBlock(
-      `Serve the ${workspace}/${projectName} graph to the Claude Code CLI`,
-      [`cd ${ROOT}/graphs && bash cmd-tools-graphs.sh ${workspace}/${projectName} -a mcp-register`,
-        `claude mcp add --scope user graph-${workspace}-${projectName} -- graphify-mcp ${graph.replace(ROOT, '~/workspace')}`],
-      'Run either one <strong>on the host</strong>, in a terminal. The first is the workspace command; '
-      + 'the second is what it runs. stdio, so there is no port and no daemon — the CLI starts the server '
-      + 'when a session needs it. Open a NEW session to see the tools; rebuilding the graph needs no '
-      + 're-registration.'));
-}
-
-  // Delete a project's graph. Bounded to graphs/<workspace>/<project> — the whole point is that a
-  // graph is regenerable, so this is the one cheap thing to throw away. The project itself is
-  // never touched: nothing of the graph lives in it.
-async function graph_remove({ form, res, send, workspace, pathname }) {
-    if (form.confirm !== 'yes') return send('<div class="msg error">Deleting requires confirmation.</div>', 400);
-    const projectName = String(form.projectName || '');
-    // The project may be gone — a graph outlives it, and that is exactly a graph worth deleting.
-    if (!NAME_RE.test(projectName)) {
-      return send('<div class="msg error">Unknown project.</div>', 400);
-    }
-    if (runningJobKey(`graphify:${workspace}/${projectName}`)) {
-      return send('<div class="msg error">A graph run is in progress for this project — wait for it to finish.</div>', 409);
-    }
-    const out = graphStoreDir(workspace, projectName);
-    let real;
-    try {
-      real = fs.realpathSync(out);
-      const base = fs.realpathSync(path.join(ROOT, 'graphs'));
-      if (!real.startsWith(base + path.sep)) throw new Error('outside');
-    } catch (_) { return send('<div class="msg assistant">No graph to delete.</div>'); }
-    fs.rmSync(real, { recursive: true, force: true });
-    res.setHeader('HX-Trigger', 'refresh-projects');
-    return send(`<div class="msg assistant">🗑️ Deleted the graph for <strong>${esc(projectName)}</strong>. Rebuild it any time from the Graph menu.</div>`);
-}
-
-module.exports = {
-  '/actions/graphify': graphify,
-  '/actions/graph-mcp-command': graph_mcp_command,
-  '/actions/graph-remove': graph_remove,
-};

package/actions/obsidian.js

@@ -1,59 +0,0 @@
-/**
- * Building and removing a project's Obsidian vault.
- *
- * Both shell out to `cmd-tools-obsidian.sh` in the project's own workspace rather than
- * reimplementing the conversion, for the same reason every other action here does: the button and
- * the command line cannot then drift apart.
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const { listProjects, workspaceDir } = require('../workspaces');
-const { esc } = require('../html');
-const { jobFragment, runningJobKey, startJob } = require('../jobs');
-const { NAME_RE } = require('../validate');
-const { graphStoreDir } = require('../graphs');
-const { vaultDir } = require('../obsidian');
-
-module.exports = {
-  '/actions/obsidian': async ({ form, res, send, workspace, req }) => {
-    const dir = workspaceDir(workspace);
-    const script = 'cmd-tools-obsidian.sh';
-    const projectName = String(form.projectName || '');
-    if (!fs.existsSync(path.join(dir, script))) return send('<div class="msg error">This workspace has no Obsidian script.</div>', 400);
-    if (!NAME_RE.test(projectName) || !listProjects(dir).includes(projectName)) {
-      return send('<div class="msg error">Unknown project.</div>', 400);
-    }
-    // Said here rather than left to the script, because the menu is reached from a row that may
-    // have had its graph deleted since the page was drawn.
-    if (!fs.existsSync(path.join(graphStoreDir(workspace, projectName), 'graph.json'))) {
-      return send('<div class="msg error">No graph to convert yet — build the graph first, from the same menu.</div>', 409);
-    }
-    // One writer per vault: the build writes to a sibling directory and swaps it in, so two runs
-    // would race on that swap and the loser's vault would vanish under it.
-    const jobKey = `obsidian:${workspace}/${projectName}`;
-    if (runningJobKey(jobKey)) {
-      return send('<div class="msg error">A vault is already being built for this project.</div>', 409);
-    }
-    const id = startJob(`🗂️ Obsidian <strong>${esc(projectName)}</strong>`, 'bash', [script, projectName], dir,
-      { timeoutMs: 10 * 60 * 1000, echoLine: `bash ${script} ${projectName}`, key: jobKey });
-    return send(jobFragment(id).html);
-  },
-
-  '/actions/obsidian-remove': async ({ form, res, send, workspace }) => {
-    if (form.confirm !== 'yes') return send('<div class="msg error">Deleting requires confirmation.</div>', 400);
-    const projectName = String(form.projectName || '');
-    // The project may be long gone — a vault outlives it, and that is exactly a vault worth
-    // throwing away. So the name is validated but not looked up.
-    if (!NAME_RE.test(projectName)) return send('<div class="msg error">Unknown project.</div>', 400);
-    const dir = vaultDir(workspace, projectName);
-    if (!fs.existsSync(dir)) return send('<div class="msg">There was no vault to delete.</div>');
-    try {
-      fs.rmSync(dir, { recursive: true, force: true });
-    } catch (e) {
-      return send(`<div class="msg error">Could not delete the vault: ${esc(e.message)}</div>`, 500);
-    }
-    return send('<div class="msg">Vault deleted. The graph it was made from is untouched.</div>');
-  },
-};

package/graphs.js

@@ -1,104 +0,0 @@
-/**
- * Where a project's knowledge graph lives, and what is in it.
- *
- * The graph is kept in the graphs workspace rather than inside the project — it is tens of MB, it
- * re-diffs entirely on every rebuild, and half the projects worth mapping are repositories we ship.
- * Everything here reads that store; building one is `cmd-tools-graphify.sh`.
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const { ROOT } = require('./workspaces');
-
-// Where a project's graph lives: the graphs workspace, never inside the project. graphify only
-// writes <project>/graphify-out, so cmd-tools-graphify.sh moves the result here — a graph is tens
-// of MB, it re-diffs entirely on every rebuild, and half the projects worth mapping are
-// repositories we ship.
-function graphStoreDir(wsKey, project) {
-  return path.join(ROOT, 'graphs', wsKey, project);
-}
-
-// Graph lookups per project row, memoised for 2s: projectRowsHtml is
-// re-rendered on every job poll.
-let _graphCache = new Map();
-let _graphCacheAt = 0;
-function hasGraph(wsKey, project, file) {
-  const now = Date.now();
-  if (now - _graphCacheAt > 2000) { _graphCache = new Map(); _graphCacheAt = now; }
-  const k = `${wsKey}/${project}/${file}`;
-  if (!_graphCache.has(k)) _graphCache.set(k, fs.existsSync(path.join(graphStoreDir(wsKey, project), file)));
-  return _graphCache.get(k);
-}
-
-// Node and edge counts, memoised on the graph file's identity so paging a long list re-reads
-// nothing. Keyed on mtime+size: a rebuild changes both.
-const _graphCounts = new Map();
-function graphCounts(file, stat) {
-  if (!stat) return { nodes: null, links: null };
-  const key = `${file}:${stat.mtimeMs}:${stat.size}`;
-  if (_graphCounts.has(key)) return _graphCounts.get(key);
-  let counts = { nodes: null, links: null };
-  try {
-    const d = JSON.parse(fs.readFileSync(file, 'utf8'));
-    counts = { nodes: (d.nodes || []).length, links: (d.links || d.edges || []).length };
-  } catch (_) { /* unreadable or half-written */ }
-  _graphCounts.set(key, counts);
-  return counts;
-}
-
-// Every graph in the store, as <workspace>/<project> rows. Reads the two levels the build writes
-// and nothing else, so a stray file in graphs/ cannot become a row.
-function listGraphs() {
-  const base = path.join(ROOT, 'graphs');
-  const rows = [];
-  let workspaces = [];
-  try {
-    workspaces = fs.readdirSync(base, { withFileTypes: true }).filter((e) => e.isDirectory());
-  } catch (_) {
-    return rows;
-  }
-  for (const ws of workspaces) {
-    let projects = [];
-    try {
-      projects = fs.readdirSync(path.join(base, ws.name), { withFileTypes: true }).filter((e) => e.isDirectory());
-    } catch (_) { continue; }
-    for (const pr of projects) {
-      const dir = path.join(base, ws.name, pr.name);
-      const stat = (f) => { try { return fs.statSync(path.join(dir, f)); } catch (_) { return null; } };
-      const json = stat('graph.json');
-      // The counts come from graph.json itself — .graphify_build.json carries only the excludes,
-      // so the numbers were rendering empty. Parsing is cheap enough (20ms for a 2,430-node graph)
-      // and the result is memoised on the file's mtime and size, so a re-render costs nothing.
-      const nodes_links = graphCounts(path.join(dir, 'graph.json'), json);
-      const nodes = nodes_links.nodes;
-      const links = nodes_links.links;
-      let size = 0;
-      const walk = (d) => {
-        let entries = [];
-        try { entries = fs.readdirSync(d, { withFileTypes: true }); } catch (_) { return; }
-        for (const e of entries) {
-          const full = path.join(d, e.name);
-          if (e.isDirectory()) walk(full);
-          else { try { size += fs.statSync(full).size; } catch (_) { /* gone */ } }
-        }
-      };
-      walk(dir);
-      rows.push({
-        workspace: ws.name,
-        project: pr.name,
-        name: `${ws.name}/${pr.name}`,
-        mtime: json ? json.mtime : new Date(0),
-        size,
-        nodes,
-        links,
-        hasHtml: !!stat('graph.html'),
-        hasReport: !!stat('GRAPH_REPORT.md'),
-        projectExists: fs.existsSync(path.join(ROOT, ws.name, pr.name)),
-      });
-    }
-  }
-  return rows;
-}
-
-module.exports = { graphStoreDir, hasGraph, graphCounts, listGraphs };

package/obsidian.js

@@ -1,405 +0,0 @@
-/**
- * The Obsidian vault a graphed project can have, and the menu entries that make and read it.
- *
- * A vault is made FROM the graph — `cmd-tools-obsidian.sh` reads `graph.json` and writes notes,
- * wikilinks and a JSON Canvas — so it lives inside the graph store at
- * `graphs/<workspace>/<project>/obsidian/` and is thrown away with it. It also means the entries
- * belong in the Graph menu rather than a menu of their own: without a graph there is nothing to
- * convert, and a second button that is disabled most of the time only adds noise to the row.
- *
- * `views.js` builds the row's menu from this and `server.js` serves what the menu points at, so
- * the menu cannot offer a file the server will not find.
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const { ROOT } = require('./workspaces');
-const { esc } = require('./html');
-const { graphStoreDir } = require('./graphs');
-
-// Where a project's vault lives. Inside its graph, never inside the project.
-function vaultDir(wsKey, project) {
-  return path.join(graphStoreDir(wsKey, project), 'obsidian');
-}
-
-// The index note is named after the project, with the same sanitising the builder applies, so the
-// server and the builder agree on one filename.
-function indexNote(project) {
-  return `${String(project).replace(/[\\/:*?"<>|[\]#^]+/g, '-').replace(/^[ .-]+|[ .-]+$/g, '').slice(0, 120) || 'unnamed'}.md`;
-}
-
-// Same memo window as the graph's: a row re-renders once a second while a job runs, and asking the
-// filesystem per render turns a list of twenty projects into a stream of stat calls.
-let _cache = new Map();
-let _cacheAt = 0;
-function hasVault(wsKey, project) {
-  const now = Date.now();
-  if (now - _cacheAt > 2000) { _cache = new Map(); _cacheAt = now; }
-  const k = `${wsKey}/${project}`;
-  if (!_cache.has(k)) _cache.set(k, fs.existsSync(path.join(vaultDir(wsKey, project), '.obsidian')));
-  return _cache.get(k);
-}
-
-/**
- * The Obsidian entries of the Graph menu.
- *
- * Returned as a list of `<li>` strings rather than a menu, because they hang off the Graph button:
- * `graphMenuHtml` decides where they sit and only asks for them once a graph exists.
- */
-function obsidianMenuItems(key, project, vals, busy) {
-  const built = hasVault(key, project);
-  const items = ['<li class="uk-nav-divider"></li>', '<li class="uk-nav-header">Obsidian</li>'];
-
-  items.push(`<li><a href hx-post="/actions/obsidian" ${vals()} class="${busy ? 'uk-disabled' : ''}"><span uk-icon="icon: file-edit; ratio: .7"></span> ${built ? 'Rebuild the vault' : 'Build the vault'}${busy ? ' (running…)' : ''}</a></li>`);
-
-  if (built) {
-    // A desktop protocol link, not an HTTP one: it hands the absolute path to the Obsidian app on
-    // the machine running the browser. Every reserved character has to be encoded — an unescaped
-    // slash makes Obsidian read the path as a vault name and open the wrong thing, or nothing.
-    const uri = `obsidian://open?path=${encodeURIComponent(vaultDir(key, project))}`;
-    items.push(`<li><a href="${esc(uri)}" title="Opens the Obsidian app on this machine"><span uk-icon="icon: link-external; ratio: .7"></span> Open in Obsidian</a></li>`);
-    // The reader first: the vault lives on the machine running the dashboard, which is not
-    // necessarily the machine looking at it, and this needs nothing installed.
-    items.push(`<li><a href hx-get="/obsidian/${esc(key)}/${esc(project)}/frame?what=view" hx-target="#editor-modal-body" hx-swap="innerHTML"><span uk-icon="icon: file-text; ratio: .7"></span> Read the notes</a></li>`);
-    items.push(`<li><a href hx-get="/obsidian/${esc(key)}/${esc(project)}/frame?what=canvas" hx-target="#editor-modal-body" hx-swap="innerHTML"><span uk-icon="icon: git-fork; ratio: .7"></span> Open the map</a></li>`);
-    items.push(`<li><a href="/obsidian/${esc(key)}/${esc(project)}/download" title="The vault as a .tar.gz, to open on another machine"><span uk-icon="icon: download; ratio: .7"></span> Download the vault</a></li>`);
-    items.push(`<li><a href class="uk-text-danger arm-step" data-armed="0" hx-post="/actions/obsidian-remove" ${vals(',"confirm":"yes"')} hx-trigger="confirmed-remove"><span uk-icon="icon: trash; ratio: .7"></span> Delete the vault</a></li>`);
-  }
-
-  return items.join('');
-}
-
-module.exports = { vaultDir, hasVault, obsidianMenuItems, indexNote };
-
-/* ---------------------------------------------------------------------------
- * The web reader.
- *
- * Obsidian is a desktop app, and the vault lives on the machine running the
- * dashboard — which is not necessarily the machine looking at it. So the vault is
- * also readable in the browser: the notes with their wikilinks working, and the
- * canvas drawn as the map it describes.
- *
- * Everything is served from this app. No CDN, because the graph viewer already
- * needs the internet for vis-network and having one thing in the dashboard that
- * stops working on a train is enough.
- * ------------------------------------------------------------------------- */
-
-// The notes, by name. One pass over the vault, because every view needs the full
-// set: the list, and the link resolver that decides which [[targets]] are real.
-function vaultNotes(wsKey, project) {
-  const dir = vaultDir(wsKey, project);
-  const found = new Map();
-  const walk = (d, rel) => {
-    let entries;
-    try { entries = fs.readdirSync(d, { withFileTypes: true }); } catch (_) { return; }
-    for (const e of entries) {
-      if (e.name === '.obsidian') continue;
-      const full = path.join(d, e.name);
-      if (e.isDirectory()) walk(full, path.join(rel, e.name));
-      else if (e.name.endsWith('.md')) found.set(e.name.slice(0, -3), path.join(rel, e.name));
-    }
-  };
-  walk(dir, '');
-  return found;
-}
-
-/**
- * The note shape this workspace writes, rendered.
- *
- * Not a general markdown parser — a parser that handles every construct would be a
- * dependency and a much larger surface, and these notes are written by
- * fun-obsidian.sh, so their shape is known: frontmatter, a heading, a source line,
- * two link lists, a rule and a footer.
- *
- * Everything is escaped first and marked up second, so a note whose content happens
- * to contain markup is displayed rather than obeyed.
- */
-function renderNote(md, linkHref, exists) {
-  let meta = {};
-  let body = md;
-  const fm = md.match(/^---\n([\s\S]*?)\n---\n?/);
-  if (fm) {
-    body = md.slice(fm[0].length);
-    for (const line of fm[1].split('\n')) {
-      const m = line.match(/^([a-z_]+):\s*(.*)$/i);
-      if (m) meta[m[1]] = m[2].replace(/^["']|["']$/g, '');
-    }
-  }
-
-  const inline = (t) => esc(t)
-    .replace(/`([^`]+)`/g, '<code>$1</code>')
-    .replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
-    .replace(/\[\[([^\]|#]+)(\|[^\]]+)?\]\]/g, (_, name) => {
-      const n = name.trim();
-      return exists(n)
-        ? `<a class="wl" href="${linkHref(n)}">${esc(n)}</a>`
-        : `<span class="wl wl-missing" title="No note of that name in this vault">${esc(n)}</span>`;
-    });
-
-  const out = [];
-  let inList = false;
-  for (const raw of body.split('\n')) {
-    const line = raw.trimEnd();
-    if (/^-{3,}$/.test(line)) { if (inList) { out.push('</ul>'); inList = false; } out.push('<hr>'); continue; }
-    const li = line.match(/^-\s+(.*)$/);
-    if (li) {
-      if (!inList) { out.push('<ul class="links">'); inList = true; }
-      out.push(`<li>${inline(li[1])}</li>`);
-      continue;
-    }
-    if (inList) { out.push('</ul>'); inList = false; }
-    const h = line.match(/^(#{1,6})\s+(.*)$/);
-    if (h) { out.push(`<h${h[1].length}>${inline(h[2])}</h${h[1].length}>`); continue; }
-    if (!line) continue;
-    out.push(`<p>${inline(line)}</p>`);
-  }
-  if (inList) out.push('</ul>');
-  return { meta, html: out.join('\n') };
-}
-
-// One stylesheet for both views, using the dashboard's own theme tokens so the reader
-// follows whatever theme is set instead of picking its own colours.
-const VAULT_CSS = `
-  body { background: var(--surface); color: var(--ink); margin: 0; }
-  .vault { display: grid; grid-template-columns: 16rem 1fr; gap: 0; height: calc(100vh - 3.5rem); }
-  .vault-list { border-right: 1px solid var(--line); overflow-y: auto; padding: .5rem; }
-  .vault-list input { width: 100%; margin-bottom: .5rem; padding: .35rem .5rem;
-    border: 1px solid var(--line); border-radius: 4px; background: var(--surface);
-    color: var(--ink); }
-  .vault-list a { display: block; padding: .25rem .4rem; border-radius: 4px;
-    color: var(--ink); text-decoration: none; font-size: .82rem; overflow: hidden;
-    text-overflow: ellipsis; white-space: nowrap; }
-  .vault-list a:hover { background: var(--surface-sunken); }
-  .vault-list a.on { background: var(--link); color: var(--danger-ink); }
-  .vault-body { overflow-y: auto; padding: 1.25rem 1.75rem; }
-  .vault-body h1 { font-size: 1.5rem; margin: 0 0 .75rem; }
-  .vault-body h2 { font-size: 1rem; margin: 1.25rem 0 .4rem; color: var(--text-subtle); }
-  .vault-body ul.links { list-style: none; padding-left: 0; }
-  .vault-body ul.links li { padding: .15rem 0; }
-  .wl { color: var(--link); text-decoration: none; border-bottom: 1px solid transparent; }
-  .wl:hover { border-bottom-color: var(--link); }
-  .wl-missing { color: var(--text-subtle); border-bottom: 1px dotted var(--text-subtle); }
-  .vault-meta { font-size: .78rem; color: var(--text-subtle); margin-bottom: 1rem; }
-  .vault-meta code { background: var(--surface-sunken); padding: .05rem .3rem; border-radius: 3px; }
-  .vault-bar { display: flex; gap: .5rem; align-items: center; padding: .5rem .75rem;
-    border-bottom: 1px solid var(--line); background: var(--surface-raised); }
-  .vault-bar a, .vault-bar span { font-size: .82rem; }
-  #cv { width: 100%; height: calc(100vh - 7rem); background: var(--surface); cursor: grab; }
-  #cv:active { cursor: grabbing; }
-  #cv text { font: 15px system-ui, sans-serif; fill: var(--ink); pointer-events: none; }
-  #cv .n rect { fill: var(--surface-raised); stroke: var(--line); stroke-width: 1.5; }
-  #cv .n:hover rect { stroke: var(--link); stroke-width: 3; }
-  #cv .e { stroke: var(--text-subtle); stroke-width: 1.5; fill: none; opacity: .55; }
-  .vault-bar button { font-size: .8rem; padding: .15rem .55rem; border: 1px solid var(--line);
-    border-radius: 4px; background: var(--surface-raised); color: var(--ink); cursor: pointer; }
-  .vault-bar button:hover { border-color: var(--link); }
-`;
-
-// A page frame that inherits the dashboard's assembled theme sheet.
-function vaultPage(title, cssVersion, bodyHtml) {
-  return `<!doctype html><html><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${esc(title)}</title>
-<link rel="icon" href="/favicon.ico">
-<link rel="stylesheet" href="/style.css?v=${esc(String(cssVersion))}">
-<style>${VAULT_CSS}</style>
-</head><body>${bodyHtml}</body></html>`;
-}
-
-/** The note browser: the list, and one note with its links live. */
-function vaultView(wsKey, project, note, cssVersion) {
-  const notes = vaultNotes(wsKey, project);
-  const names = [...notes.keys()].sort((a, b) => a.localeCompare(b));
-  const current = notes.has(note) ? note : (names.includes(project) ? project : names[0]);
-  const base = `/obsidian/${encodeURIComponent(wsKey)}/${encodeURIComponent(project)}/view`;
-  const href = (n) => `${base}?note=${encodeURIComponent(n)}`;
-
-  let rendered = { meta: {}, html: '<p class="uk-text-meta">This vault has no notes.</p>' };
-  if (current) {
-    try {
-      rendered = renderNote(fs.readFileSync(path.join(vaultDir(wsKey, project), notes.get(current)), 'utf8'),
-        href, (n) => notes.has(n));
-    } catch (_) {
-      rendered = { meta: {}, html: '<p class="msg error">That note could not be read.</p>' };
-    }
-  }
-
-  const meta = rendered.meta;
-  const metaLine = [
-    meta.source_file ? `<code>${esc(meta.source_file)}</code>` : '',
-    meta.source_location ? esc(meta.source_location) : '',
-    meta.cluster !== undefined ? `cluster ${esc(meta.cluster)}` : '',
-    meta.tags ? esc(meta.tags) : '',
-  ].filter(Boolean).join(' · ');
-
-  return vaultPage(`${current || project} · ${project}`, cssVersion, `
-    <div class="vault-bar">
-      <strong>${esc(project)}</strong>
-      <span class="uk-text-meta">${names.length} notes</span>
-      <a href="/obsidian/${esc(wsKey)}/${esc(project)}/canvas">Map</a>
-      <a href="/obsidian/${esc(wsKey)}/${esc(project)}/download">Download</a>
-      <a href="obsidian://open?path=${encodeURIComponent(vaultDir(wsKey, project))}">Open in the Obsidian app</a>
-      <span style="margin-left:auto"><a href="/">${esc(wsKey)} workspace</a></span>
-    </div>
-    <div class="vault">
-      <nav class="vault-list">
-        <input id="q" type="search" placeholder="Filter ${names.length} notes…" autocomplete="off">
-        <div id="ls">
-          ${names.map((n) => `<a href="${href(n)}" class="${n === current ? 'on' : ''}" data-n="${esc(n.toLowerCase())}">${esc(n)}</a>`).join('')}
-        </div>
-      </nav>
-      <article class="vault-body">
-        ${metaLine ? `<div class="vault-meta">${metaLine}</div>` : ''}
-        ${rendered.html}
-      </article>
-    </div>
-    <script>
-      // Filtering is the one thing worth scripting here: every link is a real URL, so
-      // the reader works with scripting off apart from this.
-      var q = document.getElementById('q'), ls = document.getElementById('ls');
-      q.addEventListener('input', function () {
-        var v = q.value.toLowerCase();
-        for (var i = 0; i < ls.children.length; i++) {
-          var a = ls.children[i];
-          a.style.display = a.dataset.n.indexOf(v) === -1 ? 'none' : '';
-        }
-      });
-    </script>`);
-}
-
-/**
- * The canvas, drawn.
- *
- * The .canvas file already carries a position for every node — the builder laid them
- * out cluster by cluster — so this is a straight projection into SVG rather than a
- * layout algorithm. That also means the web map and the map Obsidian's Canvas shows
- * are the same picture, which is the point of storing coordinates at all.
- */
-function vaultCanvas(wsKey, project, cssVersion) {
-  const file = path.join(vaultDir(wsKey, project), `${indexNote(project).slice(0, -3)}.canvas`);
-  let canvas;
-  try {
-    canvas = JSON.parse(fs.readFileSync(file, 'utf8'));
-  } catch (_) {
-    return vaultPage(`${project} map`, cssVersion,
-      '<div class="vault-bar"><span class="msg error">This vault has no canvas. Rebuild it.</span></div>');
-  }
-
-  const nodes = canvas.nodes || [];
-  const edges = canvas.edges || [];
-  const at = new Map(nodes.map((n) => [n.id, n]));
-  const pad = 60;
-  const xs = nodes.map((n) => n.x); const ys = nodes.map((n) => n.y);
-  const minX = Math.min(...xs, 0) - pad; const minY = Math.min(...ys, 0) - pad;
-  const w = Math.max(...xs.map((x, i) => x + nodes[i].width), 100) - minX + pad;
-  const h = Math.max(...ys.map((y, i) => y + nodes[i].height), 100) - minY + pad;
-
-  // The colour a node carries is a JSON Canvas preset number, not a CSS colour.
-  const PRESET = { 1: '#e05252', 2: '#e08c52', 3: '#d9c04a', 4: '#4fa373', 5: '#4f9fa3', 6: '#8b6fc4' };
-
-  const view = `/obsidian/${encodeURIComponent(wsKey)}/${encodeURIComponent(project)}/view`;
-  const noteOf = (n) => (n.file || '').replace(/^notes\//, '').replace(/\.md$/, '');
-
-  const edgeSvg = edges.map((e) => {
-    const a = at.get(e.fromNode); const b = at.get(e.toNode);
-    if (!a || !b) return '';
-    const x1 = a.x + a.width; const y1 = a.y + a.height / 2;
-    const x2 = b.x; const y2 = b.y + b.height / 2;
-    const mid = (x1 + x2) / 2;
-    return `<path class="e" d="M${x1},${y1} C${mid},${y1} ${mid},${y2} ${x2},${y2}"/>`;
-  }).join('');
-
-  const nodeSvg = nodes.map((n) => {
-    const name = noteOf(n);
-    const label = name.length > 30 ? `${name.slice(0, 29)}…` : name;
-    const stroke = PRESET[n.color] || '';
-    return `<a class="n" href="${view}?note=${encodeURIComponent(name)}"><title>${esc(name)}</title>
-      <rect x="${n.x}" y="${n.y}" width="${n.width}" height="${n.height}" rx="6"${stroke ? ` style="stroke:${stroke}"` : ''}/>
-      <text x="${n.x + 12}" y="${n.y + n.height / 2 + 4}">${esc(label)}</text></a>`;
-  }).join('');
-
-  return vaultPage(`${project} map`, cssVersion, `
-    <div class="vault-bar">
-      <strong>${esc(project)}</strong>
-      <span class="uk-text-meta">${nodes.length} on the map · ${edges.length} links</span>
-      <a href="${view}">Notes</a>
-      <a href="obsidian://open?path=${encodeURIComponent(vaultDir(wsKey, project))}">Open in the Obsidian app</a>
-      <button id="fit" type="button">Fit</button>
-      <button id="one" type="button">100%</button>
-      <span class="uk-text-meta" style="margin-left:auto">drag to pan · scroll to zoom · click a node to read it</span>
-    </div>
-    <svg id="cv" viewBox="${minX} ${minY} ${w} ${h}">
-      <g id="vp">${edgeSvg}${nodeSvg}</g>
-    </svg>
-    <script>
-      // Pan and zoom by moving the viewBox, so the drawing stays vector-sharp and the
-      // links keep working — a CSS transform would break hit testing on the anchors.
-      (function () {
-        var svg = document.getElementById('cv');
-        var full = { x: ${minX}, y: ${minY}, w: ${w}, h: ${h} };
-        var vb = { x: full.x, y: full.y, w: full.w, h: full.h };
-        function apply() { svg.setAttribute('viewBox', vb.x + ' ' + vb.y + ' ' + vb.w + ' ' + vb.h); }
-        function set(o) { vb.x = o.x; vb.y = o.y; vb.w = o.w; vb.h = o.h;
-          svg.setAttribute('viewBox', vb.x + ' ' + vb.y + ' ' + vb.w + ' ' + vb.h); }
-        function fit() { set(full); }
-        // 100%: one user unit per CSS pixel, anchored at the top-left of the map.
-        function oneToOne() {
-          set({ x: full.x, y: full.y, w: svg.clientWidth, h: svg.clientHeight });
-        }
-        document.getElementById('fit').addEventListener('click', fit);
-        document.getElementById('one').addEventListener('click', oneToOne);
-        // Fit only when the whole map already fits comfortably; otherwise open readable.
-        if (full.w <= svg.clientWidth * 1.4 && full.h <= svg.clientHeight * 1.4) { fit(); } else { oneToOne(); }
-        var drag = null, moved = false;
-        svg.addEventListener('pointerdown', function (e) { drag = { x: e.clientX, y: e.clientY }; moved = false; });
-        window.addEventListener('pointerup', function () { drag = null; });
-        window.addEventListener('pointermove', function (e) {
-          if (!drag) return;
-          var k = vb.w / svg.clientWidth;
-          vb.x -= (e.clientX - drag.x) * k; vb.y -= (e.clientY - drag.y) * k;
-          drag = { x: e.clientX, y: e.clientY };
-          if (Math.abs(e.movementX) + Math.abs(e.movementY) > 2) moved = true;
-          apply();
-        });
-        // A drag that ends over a node must not also open it.
-        svg.addEventListener('click', function (e) { if (moved) { e.preventDefault(); moved = false; } }, true);
-        svg.addEventListener('wheel', function (e) {
-          e.preventDefault();
-          var f = e.deltaY > 0 ? 1.12 : 0.89;
-          var r = svg.getBoundingClientRect();
-          var mx = vb.x + (e.clientX - r.left) / r.width * vb.w;
-          var my = vb.y + (e.clientY - r.top) / r.height * vb.h;
-          vb.x = mx - (mx - vb.x) * f; vb.y = my - (my - vb.y) * f;
-          vb.w *= f; vb.h *= f;
-          apply();
-        }, { passive: false });
-      })();
-    </script>`);
-}
-
-/**
- * The modal wrapper: one of the two views in an iframe, filling the dialog.
- *
- * An iframe rather than the page's markup inlined, because both views are whole documents — own
- * stylesheet link, own script, own pan/zoom state — and splicing that into the dashboard would
- * put two competing sets of handlers on one document.
- */
-function vaultFrame(wsKey, project, what) {
-  const src = `/obsidian/${encodeURIComponent(wsKey)}/${encodeURIComponent(project)}/${what === 'canvas' ? 'canvas' : 'view'}`;
-  const other = what === 'canvas' ? 'view' : 'canvas';
-  return `<div class="uk-flex uk-flex-between uk-flex-middle uk-margin-small-bottom">
-      <h3 class="uk-margin-remove">${esc(project)} <span class="uk-text-meta">${what === 'canvas' ? 'map' : 'notes'}</span></h3>
-      <div>
-        <a class="uk-button uk-button-default uk-button-small" href hx-get="/obsidian/${esc(wsKey)}/${esc(project)}/frame?what=${other}" hx-target="#editor-modal-body" hx-swap="innerHTML">${other === 'canvas' ? 'Map' : 'Notes'}</a>
-        <a class="uk-button uk-button-default uk-button-small" href="${esc(src)}" target="_blank">Open full screen</a>
-      </div>
-    </div>
-    <iframe src="${esc(src)}" title="${esc(project)}" style="width:100%;height:74vh;border:1px solid var(--line);border-radius:4px;background:var(--surface)"></iframe>`;
-}
-
-module.exports.vaultFrame = vaultFrame;
-module.exports.vaultNotes = vaultNotes;
-module.exports.renderNote = renderNote;
-module.exports.vaultView = vaultView;
-module.exports.vaultCanvas = vaultCanvas;