@yuneta/gobj-ui 7.25.14 → 7.25.15

package/README.md

@@ -1790,6 +1790,25 @@ size. A card on its tier's default now saves its position and nothing else;
 a closed node saves no size at all (a square is not the card's size), its
 entry keeps what it had.
 
+**A Save that does not land is written again** (since `7.25.15`). `Save`
+writes one `__graphs__` record per topic that changed, and nothing answers such
+a write when it lands, so the engine takes it for granted when it leaves. A
+refused one was recorded as saved all the same: the next Save found nothing to
+write, and the arrangement was never stored. Now the host (`C_YUI_TREEDB_GRAPH`)
+tells the engine every way the write can fail -- the backend answers an error
+(shown as before), the transport refuses the command, or there is no session
+(the write is not sent) -- with `EV_GRAPHS_WRITE_REFUSED {topic}`. The engine
+forgets what it believed the backend holds for that topic
+(`forget_refused_graphs_write()` in `graph_save_plan.js`), logs a warning and
+lights Save again, so the next Save writes the topic. A host of its own that
+hosts `C_G6_NODES_TREE` sends the same event when its write of `__graphs__`
+fails:
+
+```js
+// in the host, when the answer to its update-node of __graphs__ is an error
+gobj_send_event(engine, "EV_GRAPHS_WRITE_REFUSED", {topic: record.topic}, gobj);
+```
+
 **Every saved look has a way back, in the context menu** (since `7.23.134`,
 replacing `reset sizes` / `reset topic sizes`). In edition, the node, the port
 and the edge menus each offer three resets — this one, its kind (`reset topic
@@ -2245,6 +2264,28 @@ else.
   gobj_send_event(editor, "EV_REFRESH", {}, host);                 // Save -> "wait for them"
   // ... the load lands (model_gen N+1): the form closes, the operator reopens it
   ```
+- **A move sent by the host closes the dialog of the screen it left**
+  (7.25.15). `C_YUI_SHELL` keeps the overlays open on a move that changes only
+  the subpath (a url typed in, a link), so a dialog outlived its screen: its
+  Save, its import Preview or an orphan delete sent an event only that screen
+  declares, answered *"Event NOT DEFINED"*, and the edit was lost with no word.
+  Now an `EV_SHOW` that moves the view to another position -- at once, or when
+  a load or a write in flight ends -- closes the column form, the topic form,
+  the import (its plan goes with it) and the orphans, and tells the operator
+  `the view moved: open the dialog again` (an i18n key the consumer's locales
+  carry). The export and the check stay up: they show the texts they were
+  opened with and send nothing a screen declares. The same position sent again
+  closes nothing. A **confirmation** is a shell modal, which the move does not
+  close; it carries the position it was asked on (`seg`), and a Yes answered
+  on another position is refused with the same words. Before, a Yes to "delete
+  this column?" asked on `db/users` and answered after a move to `db2/users`
+  deleted `db2`'s column of the same name.
+
+  ```js
+  gobj_send_event(editor, "EV_EDIT_COLUMN", {col: "id"}, host);   // on db/users
+  gobj_send_event(editor, "EV_SHOW", {subpath: "db"}, host);      // form closed, said
+  gobj_send_event(editor, "EV_SHOW", {subpath: "db"}, host);      // same position: nothing
+  ```
 - **A load refused IN session keeps the model it was replacing** (7.25.9): a
   routing adapter's deadline on a slow `nodes` answers -1 while the session
   is up. The records are put back, the screen and any open dialog stay, and

package/dist/gobj-ui.cjs.js

@@ -3038,9 +3038,8 @@ function maybe_apply_translator($node, opts) {
 *      it -- until every handle is closed or has timed out. Handed the
 *      first caller's handle and timer, a repeat asking `timeout: 0`
 *      was dismissed on the first one's timer, and closing one
-*      caller's handle closed a toast another was still showing
-*      (third independent review). The operator's ✕ closes it for
-*      everybody.
+*      caller's handle closed a toast another was still showing.
+*      The operator's ✕ closes it for everybody.
 ***************************************************************/
 function show_notification(shell, kind, message, opts) {
 	let $layer = notification_layer(shell);
@@ -7425,7 +7424,7 @@ function json_diff_rows(doc_a, doc_b) {
 *  A Date -> the value of a `datetime-local` input, in local time,
 *  WITH seconds: the input is built with `step: 1`, which is what
 *  lets it hold them. Written as "YYYY-MM-DDTHH:mm" it lost them on
-*  every save of any field (M26 of the 2026-09-21 review).
+*  every save of any field.
 ************************************************************/
 function date_to_datetime_local(value) {
 	if (!(value instanceof Date) || isNaN(value.getTime())) return "";
@@ -23130,8 +23129,7 @@ function yui_shell_show_route_map(shell, opts) {
 *          answers, so the host has to answer EVERY way a write ends --
 *          and the transport closing under a write in flight, or a
 *          command that never left because there was no session, are two
-*          of them that nobody answered: the form stayed busy for ever
-*          (N8 of the 2026-09-22 review).
+*          of them that nobody answered: the form stayed busy for ever.
 *
 *          A write is known by its TOPIC and its `form_write` serial,
 *          never by the serial alone: each topic has its own form, and
@@ -25682,8 +25680,8 @@ function ac_update_record(gobj, event, kw, src) {
 /************************************************************
 *  A write sent with no session never leaves: C_IEVENT_CLI logs
 *  "Not in session" and answers null, as it does when the command
-*  went -- so a form waiting for the answer waited for ever (N8 of
-*  the 2026-09-22 review). Refused before it is sent, aloud.
+*  went -- so a form waiting for the answer waited for ever. Refused
+*  before it is sent, aloud.
 ************************************************************/
 function refuse_without_session(gobj, topic_name) {
 	if (is_connected$1(gobj)) return false;
@@ -26795,9 +26793,8 @@ function delete_impact(desc, records) {
 *          that back. So a second busy(true) while already busy must not
 *          run at all -- it read the buttons it had just disabled as
 *          "disabled on their own", and the busy(false) of a refused write
-*          left Save and Cancel dead (N9 of the 2026-09-22 review: a record
-*          with a picked file went busy for the read, then busy again for
-*          the write). The caller owns `state` ({busy}) for the form's life.
+*          left Save and Cancel dead (a record with a picked file went
+*          busy for the read, then busy again for the write). The caller owns `state` ({busy}) for the form's life.
 *
 *          Copyright (c) 2026, ArtGins.
 *          All Rights Reserved.
@@ -26835,7 +26832,7 @@ function set_toolbar_busy($container, state, busy) {
 *          (only its own `plaintext` formatter escapes), so a record's text
 *          returned as a string is parsed as markup: `a<b and c>d` showed
 *          as `ad`, and a field holding `<img src=x onerror=...>` ran it in
-*          the operator's browser (M31 of the 2026-09-21 review). Record
+*          the operator's browser. Record
 *          data goes in as a TEXT NODE, and a cell built around it as DOM,
 *          never as an HTML string with the data interpolated.
 *
@@ -29597,7 +29594,7 @@ function ac_new_row(gobj, event, kw, src) {
 *  What crosses the confirmation is the rows' IDENTITY, never their
 *  position: the view applies EV_TREEDB_NODE_* of every writer while the
 *  dialog is open, and a position names whatever row sits there when the
-*  person answers -- with force:true (A6 of the 2026-09-21 review).
+*  person answers -- with force:true.
 ************************************************************/
 function ac_delete_rows(gobj, event, kw, src) {
 	if (refuse_if_readonly$2(gobj, event)) return -1;
@@ -29808,8 +29805,8 @@ function ac_files_read(gobj, event, kw, src) {
 *  open and BUSY, and the serial it waits for is taken here.
 *
 *  A refused write used to close the form all the same and throw
-*  away what was typed, although the README said it stayed open
-*  (M25 of the 2026-09-21 review): the close was posted with the
+*  away what was typed, although the README said it stayed open:
+*  the close was posted with the
 *  publish, before the backend had answered anything.
 ************************************************************/
 function wait_for_write_answer(gobj) {
@@ -30981,6 +30978,28 @@ function apply_graphs_echo(live, saved, records, rec) {
 		delete saved[rec.topic];
 	}
 }
+/***************************************************************
+*  A write of one topic's arrangement did NOT land: the backend
+*  refused it, the transport refused it on the way out, or there
+*  was no session to send it on.
+*
+*      saved       {topic_name: properties}  what the backend has
+*      topic_name  the topic of the refused record
+*
+*  The view records a write as saved BEFORE it leaves, because
+*  nothing answers it when it lands. So a refused one left the view
+*  believing the backend held an arrangement it does not, and the
+*  next Save found nothing to write. What the backend holds for the
+*  topic is not known any more, so it is forgotten: the next Save
+*  writes the topic again (plan_graph_saves()).
+*
+*  Returns TRUE if there was something to forget.
+***************************************************************/
+function forget_refused_graphs_write(saved, topic_name) {
+	if (!(0, _yuneta_gobj_js.is_object)(saved) || !topic_name || !Object.prototype.hasOwnProperty.call(saved, topic_name)) return false;
+	delete saved[topic_name];
+	return true;
+}
 //#endregion
 //#region src/treedb_node_label.js
 /***********************************************************************
@@ -65788,6 +65807,28 @@ function ac_save_graph(gobj, event, kw, src) {
 	return 0;
 }
 /************************************************************
+*  The host says a write of `__graphs__` did not land: the
+*  backend refused it, the transport refused it on the way out,
+*  or there was no session to send it on. kw: {topic}
+*
+*  save_topic_graph_properties() recorded it as saved before it
+*  left. Forgotten now, and the Save is lit again: the next Save
+*  writes the topic again. Before, the view believed the backend
+*  held the arrangement, and the next Save had nothing to write.
+************************************************************/
+function ac_graphs_write_refused(gobj, event, kw, src) {
+	let priv = gobj.priv;
+	let topic_name = kw && kw.topic;
+	if (!topic_name) {
+		(0, _yuneta_gobj_js.log_error)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: ${event} names no topic`);
+		return -1;
+	}
+	(0, _yuneta_gobj_js.log_warning)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: the arrangement of '${topic_name}' was not saved: the next Save writes it again`);
+	forget_refused_graphs_write(priv._saved_graph_properties, topic_name);
+	if (priv.edit_mode) mark_graph_dirty(gobj);
+	return 0;
+}
+/************************************************************
 *  Node created, from subscription
 ************************************************************/
 function ac_node_created(gobj, event, kw, src) {
@@ -66855,6 +66896,11 @@ function create_gclass$4(gclass_name) {
 			ac_node_deleted,
 			null
 		],
+		[
+			"EV_GRAPHS_WRITE_REFUSED",
+			ac_graphs_write_refused,
+			null
+		],
 		[
 			"EV_NODE_CLICK",
 			ac_node_click$2,
@@ -67108,6 +67154,7 @@ function create_gclass$4(gclass_name) {
 		["EV_NODE_CREATED", 0],
 		["EV_NODE_UPDATED", 0],
 		["EV_NODE_DELETED", 0],
+		["EV_GRAPHS_WRITE_REFUSED", 0],
 		["EV_NODE_CLICK", 0],
 		["EV_EDGE_CLICK", 0],
 		["EV_NODE_CONTEXT_MENU", 0],
@@ -68284,7 +68331,7 @@ function treedb_update_node(gobj, treedb_name, topic_name, record, options) {
 	let priv = gobj.priv;
 	if (!priv.gobj_remote_yuno) {
 		(0, _yuneta_gobj_js.log_error)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: No gobj_remote_yuno defined`);
-		return;
+		return -1;
 	}
 	let command = "update-node";
 	let kw = {
@@ -68296,7 +68343,11 @@ function treedb_update_node(gobj, treedb_name, topic_name, record, options) {
 	};
 	kw.__md_command__ = { topic_name };
 	let ret = (0, _yuneta_gobj_js.gobj_command)(priv.gobj_remote_yuno, command, kw, gobj);
-	if (ret) (0, _yuneta_gobj_js.log_error)(ret);
+	if (ret) {
+		(0, _yuneta_gobj_js.log_error)(ret);
+		return -1;
+	}
+	return 0;
 }
 /************************************************************
 *  Command to remote service
@@ -68569,6 +68620,7 @@ function ac_mt_command_answer$1(gobj, event, kw, src) {
 		case "delete-node":
 		case "link-nodes":
 		case "unlink-nodes":
+			if (result < 0 && command === "update-node") graphs_write_refused(gobj, (0, _yuneta_gobj_js.kw_get_str)(gobj, kw_command, "topic_name", "", 0), (0, _yuneta_gobj_js.kw_get_dict)(gobj, kw_command, "record", {}, 0));
 			if (result >= 0 && (0, _yuneta_gobj_js.kw_get_str)(gobj, kw_command, "topic_name", "", 0) !== "__graphs__") (0, _yuneta_gobj_js.gobj_publish_event)(gobj, "EV_RECORD_WRITTEN", {
 				treedb_name: (0, _yuneta_gobj_js.kw_get_str)(gobj, kw_command, "treedb_name", "", 0),
 				topic_name: (0, _yuneta_gobj_js.kw_get_str)(gobj, kw_command, "topic_name", "", 0),
@@ -68812,12 +68864,40 @@ function ac_create_node(gobj, event, kw, src) {
 *  Send to backend
 ********************************************/
 function ac_update_node(gobj, event, kw, src) {
-	let priv = gobj.priv;
-	if (refuse_if_readonly$1(gobj, event)) return -1;
-	let treedb_name = priv.treedb_name;
+	let treedb_name = gobj.priv.treedb_name;
 	let topic_name = kw.topic_name;
 	let record = kw.record;
-	return treedb_update_node(gobj, treedb_name, topic_name, record, kw.options || {});
+	let options = kw.options || {};
+	if (refuse_if_readonly$1(gobj, event)) {
+		graphs_write_refused(gobj, topic_name, record);
+		return -1;
+	}
+	if (topic_name === "__graphs__" && !is_connected(gobj)) {
+		(0, _yuneta_gobj_js.log_warning)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: no session, the arrangement was not sent`);
+		graphs_write_refused(gobj, topic_name, record);
+		return -1;
+	}
+	let ret = treedb_update_node(gobj, treedb_name, topic_name, record, options);
+	if (ret < 0) graphs_write_refused(gobj, topic_name, record);
+	return ret;
+}
+/************************************************************
+*  A write of `__graphs__` did not land. The engine
+*  (C_G6_NODES_TREE) took it for granted when it left -- nothing
+*  answers it when it lands -- so it is told, and its next Save
+*  writes the topic again. Other topics are the operator's data:
+*  the answer's error says what happened to them.
+************************************************************/
+function graphs_write_refused(gobj, topic_name, record) {
+	let priv = gobj.priv;
+	if (topic_name !== "__graphs__") return;
+	let topic = record && typeof record === "object" ? record.topic || record.id : "";
+	if (!topic) {
+		(0, _yuneta_gobj_js.log_error)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: a refused __graphs__ write names no topic`);
+		return;
+	}
+	if (!priv.gobj_nodes_tree) return;
+	(0, _yuneta_gobj_js.gobj_send_event)(priv.gobj_nodes_tree, "EV_GRAPHS_WRITE_REFUSED", { topic }, gobj);
 }
 /********************************************
 *  Message from G6_nodes_tree
@@ -70473,9 +70553,8 @@ function register_c_yui_treedb_schema() {
 *          it, and that mark lived in the memory of the session only:
 *          a reload of the page, a reconnect or a refresh of the model
 *          lost the chip, the banner and the export warning while
-*          __system__ still differed from the file in use (N13 of the
-*          2026-09-22 review). The host reads that difference from
-*          C_TREEDB's `saved-schema` (`draft_changed`, by treedb) and
+*          __system__ still differed from the file in use. The host
+*          reads that difference from C_TREEDB's `saved-schema` (`draft_changed`, by treedb) and
 *          hands it here; the editor applies it to its model, in place
 *          of what the host said before.
 *
@@ -72143,11 +72222,10 @@ function write_options(op) {
 *      AN EDIT IS A DRAFT. A write here moves no version and reaches no
 *      treedb: the host SAVES it (C_TREEDB's save-schema raises the
 *      topic_version of what changed and the schema_version, once) and
-*      APPLIES it (apply-schema + a restart of the owning yuno). Until
-*      the owner's design of M36 (2026-09-21 review) every write here
-*      raised both versions, so an edit half made was already the
-*      schema of the next start. The topic list marks what this session
-*      wrote and has not saved (EV_REFRESH forgets it: the view's own
+*      APPLIES it (apply-schema + a restart of the owning yuno). If a
+*      write here raised both versions, an edit half made would already
+*      be the schema of the next start. The topic list marks what this
+*      session wrote and has not saved (EV_REFRESH forgets it: the view's own
 *      Refresh button sends it, and a host may after a save -- the
 *      agent console's does not) and what the host says is not saved
 *      (EV_DRAFTS, replaced whole each time it is sent).
@@ -72213,6 +72291,7 @@ var HOOK_TOPICS = "topics";
 var HOOK_COLS = "cols";
 var DIAGRAM_SEG = "diagram";
 var PURPOSE = "schema_editor";
+var DIALOGS_THAT_READ_NOTHING = ["SCHEMA_EXPORT_DIALOG", "SCHEMA_REPORT_DIALOG"];
 /***************************************************************
 *              Attrs
 ***************************************************************/
@@ -72245,6 +72324,7 @@ var PRIVATE_DATA$1 = {
 	diagram_gobj: null,
 	dialog: null,
 	dialog_gen: 0,
+	dialog_kind: "",
 	save_queue: null,
 	save_return: "",
 	save_wrote: false,
@@ -72413,9 +72493,9 @@ function refuse_if_readonly(gobj, event) {
 *  dumped by the machine trace).
 *
 *  Refused, and said. A column form sends every field it shows, so
-*  its Save after a reload wrote the OLD record over the newer one
-*  (fourth independent review, probe A3); a form whose column the
-*  reload removed answered "names no column" for ever. end_load()
+*  its Save after a reload wrote the OLD record over the newer one;
+*  a form whose column the reload removed answered "names no column"
+*  for ever. end_load()
 *  closes such a dialog when the load lands; this is the same rule
 *  for whatever arrives anyway -- a stale screen, a confirmation
 *  that was up, a keyboard.
@@ -72435,8 +72515,7 @@ function built_on_a_replaced_model(gobj, event, kw) {
 *  the model shown is kept, and it may be older than the store.
 *  The session is up, so no reconnect will ask for it again -- it
 *  was owed for as long as the session lasted, and a form opened
-*  on that model wrote every field of it over the newer record
-*  (fifth independent review; A3 of the fourth, by another path).
+*  on that model wrote every field of it over the newer record.
 *
 *  So the operator's NEXT action asks it. An edit -- a form, a
 *  write, a confirmation, what reads the model whole (check,
@@ -72486,7 +72565,7 @@ function reload_after_move(gobj) {
 *  none of the actions of a screen, so the screen it replaces goes
 *  and the toolbar stops answering: left up, a click on a card, on
 *  Back or on the drawing answered "Event NOT DEFINED in state
-*  ST_LOADING" and was lost (third independent review). A dialog
+*  ST_LOADING" and was lost. A dialog
 *  left open is answered in ST_LOADING instead (ac_wait_for_the_load),
 *  and a load that LANDS closes it (end_load()): it was built on the
 *  model the load replaced, and its Save sends every field it shows.
@@ -73706,6 +73785,7 @@ function close_dialog(gobj) {
 	if (!priv.dialog) return;
 	let dialog = priv.dialog;
 	priv.dialog = null;
+	priv.dialog_kind = "";
 	priv.export_view = null;
 	try {
 		dialog.close();
@@ -73717,6 +73797,7 @@ function open_dialog(gobj, $content, title, logical, title_prefix) {
 	let priv = gobj.priv;
 	close_dialog(gobj);
 	priv.dialog_gen = priv.model_gen;
+	priv.dialog_kind = logical;
 	priv.dialog = yui_shell_show_modal(yui_shell_of(gobj), $content, {
 		dialog: true,
 		title,
@@ -73725,6 +73806,7 @@ function open_dialog(gobj, $content, title, logical, title_prefix) {
 		t: i18next.t,
 		on_close: () => {
 			priv.dialog = null;
+			priv.dialog_kind = "";
 			priv.export_view = null;
 		}
 	});
@@ -74919,11 +75001,11 @@ function transport_in_session(gobj) {
 *  The state is part of the question, and that is only true
 *  because NOTHING moves the editor out of ST_LOADING or ST_SAVING
 *  but the end of what is in flight: a position the host sends
-*  meanwhile waits in `pending_seg` (ac_show()). 7.25.6 let EV_SHOW
-*  move a RELOAD out of ST_LOADING, and every answer of it was then
-*  "for a load that is over": the records it had emptied stayed
-*  empty, and the next write patched them into a model with no
-*  treedb at all.
+*  meanwhile waits in `pending_seg` (ac_show()). If EV_SHOW moved a
+*  RELOAD out of ST_LOADING, every answer of it would be "for a load
+*  that is over": the records it had emptied would stay empty, and
+*  the next write would patch them into a model with no treedb at
+*  all.
 ***************************************************************/
 function is_current_load(gobj, md) {
 	return (0, _yuneta_gobj_js.gobj_current_state)(gobj) === "ST_LOADING" && (0, _yuneta_gobj_js.kw_get_int)(gobj, md, "round", 0, 0) === gobj.priv.load_round;
@@ -75129,10 +75211,59 @@ function position_seg(gobj) {
 *  ...and the same in reverse. A tail naming a treedb or a topic
 *  the store does not have lands one level up rather than on an
 *  empty screen: a shared link outlives the schema it points at.
+*
+*  Every position the HOST sends comes through here, at once
+*  (ac_show()) or when what was in flight ends (end_load(),
+*  end_writes()). A move to another position closes the dialog of
+*  the screen the editor left (close_dialog_left_behind()).
 ***************************************************************/
 function apply_seg(gobj, seg) {
+	let before = position_seg(gobj);
 	let pos = seg_position(seg);
-	return go(gobj, pos.treedb_id, pos.topic_name, pos.diagram, false);
+	let ret = go(gobj, pos.treedb_id, pos.topic_name, pos.diagram, false);
+	if (position_seg(gobj) !== before) close_dialog_left_behind(gobj);
+	return ret;
+}
+/***************************************************************
+*  The host moved the editor while a dialog was up. C_YUI_SHELL
+*  keeps the overlays open on a move that changes only the subpath
+*  (a url typed in, a link), so the dialog outlives its screen.
+*
+*  A form, the import and the orphans send events that only the
+*  screen they were opened from declares, and they name their
+*  topic under the treedb open at the time. Left up on another
+*  screen, their Save answered "Event NOT DEFINED" and the edit was
+*  lost with no word. So the dialog is closed and the operator told.
+*  The import plan goes with its dialog: it was computed for the
+*  treedb the editor left.
+*
+*  The export and the check stay: they show the texts they were
+*  opened with, and what they send is legal in every state.
+***************************************************************/
+function close_dialog_left_behind(gobj) {
+	let priv = gobj.priv;
+	if (!priv.dialog || DIALOGS_THAT_READ_NOTHING.includes(priv.dialog_kind)) return;
+	(0, _yuneta_gobj_js.log_warning)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: the host moved the view while the dialog ${priv.dialog_kind} was open: closed`);
+	close_dialog(gobj);
+	forget_import_plan(gobj);
+	yui_shell_show_error(yui_shell_of(gobj), "the view moved: open the dialog again", { t: i18next.t });
+}
+/***************************************************************
+*  A confirmation answered on another screen than the one it was
+*  asked from. A confirmation is a shell modal, so a move sent by
+*  the host does not close it. It names its topic and column, and
+*  the actions look them up under the treedb open NOW: a Yes after
+*  a move to another treedb deleted the topic or column of the same
+*  name THERE.
+*
+*  Refused, and said. A kw with no `seg` stamp is not a
+*  confirmation's and is not asked.
+***************************************************************/
+function asked_on_another_screen(gobj, event, kw) {
+	if (!kw || kw.seg === void 0 || kw.seg === position_seg(gobj)) return false;
+	(0, _yuneta_gobj_js.log_warning)(`${(0, _yuneta_gobj_js.gobj_short_name)(gobj)}: ${event} refused, it was asked on '${kw.seg}' and the view is on '${position_seg(gobj)}'`);
+	yui_shell_show_error(yui_shell_of(gobj), "the view moved: open the dialog again", { t: i18next.t });
+	return true;
 }
 function seg_position(seg) {
 	let parts = String(seg || "").split("/").filter((x) => x.length > 0);
@@ -75308,8 +75439,7 @@ function late_write_done(gobj, command, topic_name, data) {
 *  The fkey is read with parse_fkey_ref(), because the store answers
 *  in list_dict -- `[{topic_name, id, hook_name}]` -- and not in the
 *  `topics^<topic id>^cols` strings this view writes. Split as a
-*  string, every production answer marked nothing (fourth independent
-*  review, probe C).
+*  string, every production answer marked nothing.
 ***************************************************************/
 function mark_written_record(gobj, topic_name, record) {
 	let priv = gobj.priv;
@@ -75366,7 +75496,7 @@ function ac_hide(gobj, event, kw, src) {
 *
 *  Nothing else ends a load or a write the drop cut: their answers
 *  will never come, and waiting in ST_LOADING skipped the reload
-*  itself (M-1 of the independent review of 7.25.4).
+*  itself.
 ***************************************************************/
 function ac_transport_state(gobj, event, kw, src) {
 	let priv = gobj.priv;
@@ -75405,12 +75535,11 @@ function ac_refresh$1(gobj, event, kw, src) {
 *  a model the answers in the air are about to replace.
 *
 *  Refused, and SAID. Undeclared, it answered "Event NOT DEFINED
-*  in state ST_LOADING" and the edit was gone with no word (third
-*  independent review).
+*  in state ST_LOADING" and the edit was gone with no word.
 *
 *  And NOT "try again": the same Save, once the load was in, sent
 *  the form built on the old model -- every field of the old record
-*  over the newer one (fourth independent review). The load that
+*  over the newer one. The load that
 *  lands closes such a dialog (end_load()); one that fails leaves it
 *  up, on the model it was built on.
 ***************************************************************/
@@ -75424,8 +75553,7 @@ function ac_wait_for_the_load(gobj, event, kw, src) {
 *  reload landed on zero treedbs while it was up) or ST_IDLE (no
 *  model). A confirmation is a shell modal, not this view's dialog,
 *  so the load that lands does not close it, and its Yes arrives
-*  anyway. Undeclared, it answered "Event NOT DEFINED" (fifth
-*  independent review).
+*  anyway. Undeclared, it answered "Event NOT DEFINED".
 *
 *  Refused with the stamp's own words: whatever it was decided on
 *  is not on screen any more.
@@ -75441,13 +75569,12 @@ function ac_confirmed_on_nothing(gobj, event, kw, src) {
 *  topics hold a draft in __system__ that is not saved (C_TREEDB's
 *  saved-schema, `draft_changed`). The mark of a write lived in this
 *  session's memory only, so a reload of the page, a reconnect or a
-*  refresh showed no draft while __system__ still differed (N13 of
-*  the 2026-09-22 review).
+*  refresh showed no draft while __system__ still differed.
 *
 *  REPLACES what the host said before -- the host is the truth after
 *  a reload, and a Save is exactly the host saying "none any more".
 *  It only ever added, and a topic stayed a draft after the Save that
-*  published it (M1 of the 2026-09-23 review). What this session wrote
+*  published it. What this session wrote
 *  stays marked: it is kept apart (see topic_is_draft()).
 ***************************************************************/
 function ac_drafts(gobj, event, kw, src) {
@@ -75504,7 +75631,10 @@ function ac_show_orphans(gobj, event, kw, src) {
 *  to feed.
 ***************************************************************/
 function confirm_then(gobj, message, detail, kw) {
-	kw = Object.assign({ model_gen: gobj.priv.model_gen }, kw);
+	kw = Object.assign({
+		model_gen: gobj.priv.model_gen,
+		seg: position_seg(gobj)
+	}, kw);
 	yui_shell_confirm_danger(yui_shell_of(gobj), message, {
 		t: i18next.t,
 		detail,
@@ -75890,6 +76020,7 @@ function ac_confirmed(gobj, event, kw, src) {
 	if (refuse_if_readonly(gobj, event)) return -1;
 	if (reload_first(gobj, event)) return -1;
 	if (built_on_a_replaced_model(gobj, event, kw)) return -1;
+	if (asked_on_another_screen(gobj, event, kw)) return -1;
 	if (kw.what === "import") return run_import(gobj);
 	if (kw.what === "topic") {
 		let topic = find_topic(priv.model, priv.treedb_id, kw.topic);