agentgui 1.0.1063 → 1.0.1065

package/.gm/prd.yml

@@ -3106,15 +3106,3 @@
 - id: docstudio-cue-session-group-eyebrow
   subject: Verify ConversationList's session-group headers (Today/Yesterday/etc) use the --tr-label token + --fg-3 tone consistently, matching docstudio's uppercase letter-spaced low-opacity eyebrow label idiom
   status: pending
-- id: gc-delete-undo-trash
-  subject: No undo-after-delete (soft-delete/trash) anywhere in the confined delete surface
-  status: pending
-- id: gc-expanded-body-highlight
-  subject: Search-result highlighting inside expanded event bodies never highlights the matched query term
-  status: pending
-- id: gc-search-results-export
-  subject: No per-session or global export of History search results themselves
-  status: pending
-- id: gc-settings-storage-estimate
-  subject: Settings has no cache/data breakdown beyond agentgui's own localStorage keys - no navigator.storage.estimate()
-  status: pending

package/lib/http-handler.js

@@ -146,6 +146,73 @@ function isAllowRoot(realPath, allowRoots) {
   return allowRoots.some(r => (IS_WINDOWS ? r.toLowerCase() : r) === p);
 }
 
+// --- Soft-delete (trash) -----------------------------------------------
+// /api/delete moves entries into <root>/.agentgui-trash/<trashId>__<name>
+// instead of unlinking, giving a short undo window. In-memory index only
+// (server restart forfeits the undo window - acceptable since the retention
+// window itself is short and this is a convenience net on top of, not a
+// replacement for, the pre-delete ConfirmDialog). Purged after
+// TRASH_RETENTION_MS or when trashIndex grows past TRASH_MAX_ENTRIES
+// (oldest-first), so a long-running server's trash dir can't grow unbounded.
+const TRASH_DIR_NAME = '.agentgui-trash';
+const TRASH_RETENTION_MS = parseInt(process.env.AGENTGUI_TRASH_RETENTION_MS || '', 10) || 10 * 60 * 1000;
+const TRASH_MAX_ENTRIES = 200;
+const trashIndex = new Map(); // trashId -> { trashPath, originalPath, root, deletedAt }
+
+function purgeExpiredTrash() {
+  const now = Date.now();
+  for (const [id, info] of trashIndex) {
+    if (now - info.deletedAt > TRASH_RETENTION_MS) {
+      try { fs.rmSync(info.trashPath, { recursive: true, force: true }); } catch { /* already gone */ }
+      trashIndex.delete(id);
+    }
+  }
+  if (trashIndex.size > TRASH_MAX_ENTRIES) {
+    const sorted = [...trashIndex.entries()].sort((a, b) => a[1].deletedAt - b[1].deletedAt);
+    for (const [id, info] of sorted.slice(0, trashIndex.size - TRASH_MAX_ENTRIES)) {
+      try { fs.rmSync(info.trashPath, { recursive: true, force: true }); } catch {}
+      trashIndex.delete(id);
+    }
+  }
+}
+
+// Which allowed root a confined realPath lives under - the trash dir sits
+// alongside it (still inside the SAME root, so confineToRoots covers the
+// trash path too - no new unconfined surface).
+function rootFor(realPath, allowRoots) {
+  const p = IS_WINDOWS ? realPath.toLowerCase() : realPath;
+  return allowRoots.find(r => { const rr = IS_WINDOWS ? r.toLowerCase() : r; return p === rr || p.startsWith(rr + path.sep); });
+}
+
+function moveToTrash(realPath, allowRoots) {
+  purgeExpiredTrash();
+  const root = rootFor(realPath, allowRoots);
+  if (!root) { const e = new Error('not confined to an allowed root'); e.code = 'EACCES'; throw e; }
+  const trashDir = path.join(root, TRASH_DIR_NAME);
+  fs.mkdirSync(trashDir, { recursive: true });
+  const trashId = crypto.randomBytes(8).toString('hex');
+  const base = path.basename(realPath);
+  const trashPath = path.join(trashDir, trashId + '__' + base);
+  fs.renameSync(realPath, trashPath);
+  trashIndex.set(trashId, { trashPath, originalPath: realPath, root, deletedAt: Date.now() });
+  return { trashId };
+}
+
+function restoreFromTrash(trashId, allowRoots) {
+  const info = trashIndex.get(trashId);
+  if (!info) { const e = new Error('nothing to restore - the undo window has expired or this was already restored'); e.code = 'NOT_FOUND'; throw e; }
+  // Re-confine the ORIGINAL path at restore time (not trust the cached one
+  // blindly) - the allowlist itself doesn't change at runtime, but this keeps
+  // restore honoring the exact same confinement contract every other route does.
+  const conf = confineToRoots(info.originalPath, allowRoots);
+  if (!conf.ok && conf.reason !== 'not found') { const e = new Error('restore target is no longer inside an accessible folder'); e.code = 'CONFLICT'; throw e; }
+  if (fs.existsSync(info.originalPath)) { const e = new Error('a file already exists at the original location'); e.code = 'CONFLICT'; throw e; }
+  fs.mkdirSync(path.dirname(info.originalPath), { recursive: true });
+  fs.renameSync(info.trashPath, info.originalPath);
+  trashIndex.delete(trashId);
+  return { path: info.originalPath };
+}
+
 export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, serveFile, staticDir, messageQueues, getWss, activeExecutions, getACPStatus, discoveredAgents, PKG_VERSION, RATE_LIMIT_MAX, rateLimitMap, routes, PORT }) {
   // Warn operators when CORS_ORIGIN=* is combined with no PASSWORD: any
   // cross-origin page can make credentialless fetch() calls to all /api/*
@@ -690,13 +757,18 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
         if (isAllowRoot(conf.realPath, allowRoots)) { sendJSON(req, res, 403, { error: 'forbidden: cannot delete an allowed root' }); return; }
         try {
           const st = fs.lstatSync(conf.realPath);
-          if (st.isDirectory()) {
-            if (body.recursive === true) fs.rmSync(conf.realPath, { recursive: true });
-            else fs.rmdirSync(conf.realPath); // throws ENOTEMPTY unless empty
-          } else {
-            fs.unlinkSync(conf.realPath);
+          // Soft-delete: move into a confined per-root .agentgui-trash/ instead
+          // of unlinking, so the only safety net isn't confirm-before (the
+          // pre-existing ConfirmDialog) but also undo-after, matching an
+          // fsbrowse-grade file manager. A non-empty directory without
+          // recursive=true still throws ENOTEMPTY BEFORE any move happens
+          // (checked via a dry probe) to keep that existing guard's semantics.
+          if (st.isDirectory() && body.recursive !== true) {
+            const dryEntries = fs.readdirSync(conf.realPath);
+            if (dryEntries.length) { sendJSON(req, res, 409, { error: 'directory is not empty' }); return; }
           }
-          sendJSON(req, res, 200, { ok: true });
+          const trashInfo = moveToTrash(conf.realPath, allowRoots);
+          sendJSON(req, res, 200, { ok: true, trashId: trashInfo.trashId });
         } catch (err) {
           const code = err.code === 'ENOTEMPTY' ? 409 : (err.code === 'EACCES' || err.code === 'EPERM' ? 403 : (err.code === 'ENOENT' ? 404 : 400));
           sendJSON(req, res, code, { error: err.code === 'ENOTEMPTY' ? 'directory is not empty' : err.message });
@@ -704,6 +776,22 @@ export function createHttpHandler({ BASE_URL, expressApp, queries, sendJSON, ser
         return;
       }
 
+      // POST /api/restore {trashId} -> {ok, path}. Undoes a /api/delete within
+      // its retention window (trashRetentionMs, default 10 minutes) by moving
+      // the entry back from .agentgui-trash/ to its original confined path.
+      if (routePath.split('?')[0] === '/api/restore' && req.method === 'POST') {
+        let body;
+        try { body = JSON.parse((await readBody(req, 64 * 1024)).toString('utf8') || '{}'); }
+        catch (e) { sendJSON(req, res, e.code === 'TOO_LARGE' ? 413 : 400, { error: 'bad request body' }); return; }
+        try {
+          const restored = restoreFromTrash(String(body.trashId || ''), fsAllowRoots());
+          sendJSON(req, res, 200, { ok: true, path: restored.path });
+        } catch (err) {
+          sendJSON(req, res, err.code === 'NOT_FOUND' ? 404 : (err.code === 'CONFLICT' ? 409 : 400), { error: err.message });
+        }
+        return;
+      }
+
       // POST /api/mkdir {dir, name} -> {ok, path}. dir must exist inside roots.
       if (routePath.split('?')[0] === '/api/mkdir' && req.method === 'POST') {
         let body;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentgui",
-  "version": "1.0.1063",
+  "version": "1.0.1065",
   "description": "Multi-agent ACP client with real-time communication",
   "type": "module",
   "main": "electron/main.js",

package/site/app/js/app.js

@@ -810,7 +810,7 @@ function sessionsColumn() {
       rail: r.isError ? 'flame' : (r.isSubagent ? 'purple' : 'green'),
       _focusEventI: r.i, _focusEventTs: r.ts,
     }));
-    return ConversationList({
+    const list = ConversationList({
       sessions: items,
       selected: state.selectedSid,
       // Search runs across every project (runSearch() clears projectFilter so
@@ -842,6 +842,18 @@ function sessionsColumn() {
       hasMore: (state.searchHits.results || []).length > state.sessionsLimit,
       onLoadMore: () => { state.sessionsLimit += 60; render(); },
     });
+    // Only per-session event JSON / full transcript export existed - the
+    // search RESULTS themselves (title, project, snippet, timestamp) had no
+    // export path. Rendered as a plain sibling OUTSIDE ConversationList
+    // (not threaded through any of its props) - a prior attempt passing a
+    // VElement/extra prop through the caption slot triggered a real,
+    // intermittent webjsx crash inside that shared component; a fully
+    // separate wrapper keeps this feature from touching that risk surface.
+    if (!hits.length) return list;
+    return h('div', { key: 'searchwrap', class: 'agentgui-search-rail-wrap' },
+      h('div', { key: 'searchexportrow', class: 'agentgui-search-export-row' },
+        Btn({ key: 'searchexport', onClick: () => downloadBlob(JSON.stringify(hits, null, 2), 'agentgui-search-' + (state.searchQ || 'results').replace(/[^a-z0-9-]+/gi, '-') + '-' + dateStamp() + '.json', 'application/json'), children: 'export ' + hits.length + ' result' + (hits.length === 1 ? '' : 's') })),
+      list);
   }
   const sessionsView = visibleSessions();
   const sliced = sessionsView.slice(0, state.sessionsLimit);
@@ -1180,10 +1192,13 @@ async function runFileMutation(fn, doneMsg, patch) {
   if (!d || d.busy) return;
   d.busy = true; d.error = null; render();
   try {
-    await fn();
+    const result = await fn();
     state.files.dialog = null;
     restoreFileDialogFocus(d._trigger);
     announce(doneMsg);
+    // A soft-delete's trashId (if this mutation was a delete) rides the
+    // return value straight to the undo-toast caller.
+    if (result && result.trashId) offerUndoDelete(result.trashId, doneMsg);
     if (patch) {
       // Patch the visible list immediately, matching the bulk-delete/move
       // pattern, instead of stalling the dialog on a second full round-trip.
@@ -1200,6 +1215,36 @@ async function runFileMutation(fn, doneMsg, patch) {
     d.busy = false; d.error = fileMutationCopy(e); render();
   }
 }
+// Delete is a soft-delete server-side (moved to a confined .agentgui-trash/,
+// see lib/http-handler.js) - offer a real undo action within the retention
+// window instead of the ConfirmDialog's pre-delete confirm being the ONLY
+// safety net. One active undo toast at a time (the most recent delete wins;
+// an in-flight bulk-delete calls this per-entry, each replacing the last -
+// acceptable since restoring the single most recent one is still strictly
+// better than no undo at all, and stacking N toasts for a bulk op would be
+// its own UX problem).
+const UNDO_DELETE_WINDOW_MS = 10000;
+let _undoDeleteTimer = null;
+function offerUndoDelete(trashId, doneMsg) {
+  clearTimeout(_undoDeleteTimer);
+  state.files.undoDelete = { trashId, doneMsg };
+  render();
+  _undoDeleteTimer = setTimeout(() => { state.files.undoDelete = null; render(); }, UNDO_DELETE_WINDOW_MS);
+}
+async function undoDelete() {
+  const u = state.files.undoDelete;
+  if (!u) return;
+  clearTimeout(_undoDeleteTimer);
+  state.files.undoDelete = null;
+  try {
+    await B.restoreEntry(state.backend, u.trashId);
+    announce('restored');
+    await loadDir(state.files.path, { fromHash: true });
+  } catch (e) {
+    announce('could not restore: ' + fileMutationCopy(e));
+    render();
+  }
+}
 // Upload a FileList into the current directory; per-file rows feed the kit
 // UploadProgress (done/error per file - fetch has no chunk progress).
 async function uploadFiles(fileList) {
@@ -1334,9 +1379,12 @@ function fileDialog() {
     const isDir = d.file.type === 'dir';
     return ConfirmDialog({
       title: 'Delete ' + d.file.name,
+      // Delete is soft (moved to trash, undoable for a short window right
+      // after) - the copy no longer overclaims permanence the way an actual
+      // unlink would warrant.
       message: isDir
-        ? 'Delete this folder and everything inside it? This cannot be undone.'
-        : 'Delete this file? This cannot be undone.',
+        ? 'Delete this folder and everything inside it? You can undo this for a few seconds after.'
+        : 'Delete this file? You can undo this for a few seconds after.',
       error: d.error || null, busy: !!d.busy,
       confirmLabel: d.busy ? 'deleting…' : 'delete', cancelLabel: 'cancel', destructive: true,
       onCancel: closeFileDialog,
@@ -1659,6 +1707,10 @@ function filesMain() {
     : body;
   return [
     offlineBanner(),
+    f.undoDelete ? Alert({ key: 'undodel', kind: 'info', title: 'Deleted',
+      children: [
+        h('span', { key: 'udtxt' }, (f.undoDelete.doneMsg || 'Deleted') + ' - undo within a few seconds. '),
+        Btn({ key: 'udbtn', onClick: () => undoDelete(), children: 'undo' })] }) : null,
     PageHeader({ compact: true, dense: true, title: 'Files', lede: 'Browse and manage files in the allowed folders.' }),
     // One vertical beat (.ds-files-stack gap) for the whole command stack -
     // the bands used to butt edge-to-edge while the header gap was 24px.
@@ -3722,6 +3774,26 @@ function clearLocalData() {
   location.reload();
 }
 
+// navigator.storage.estimate() is async - fetch once (per settings visit,
+// not per render) and cache the result in state; a fresh fetch every render
+// would be wasteful and the number doesn't need to be live-updating.
+let _storageEstimateFetched = false;
+function fetchStorageEstimateOnce() {
+  if (_storageEstimateFetched) return;
+  _storageEstimateFetched = true;
+  if (!(navigator.storage && navigator.storage.estimate)) { state._storageEstimate = { unsupported: true }; return; }
+  navigator.storage.estimate().then((est) => { state._storageEstimate = est; render(); }).catch(() => { state._storageEstimate = { unsupported: true }; });
+}
+function storageEstimateRow() {
+  fetchStorageEstimateOnce();
+  const est = state._storageEstimate;
+  if (!est) return h('div', { key: 'storageest', class: 't-meta agentgui-field-my' }, 'browser storage: checking…');
+  if (est.unsupported) return null;   // Safari/older browsers - no estimate API, no row rather than a broken one
+  const used = fmtBytes(est.usage || 0);
+  const quota = est.quota ? fmtBytes(est.quota) : null;
+  return h('div', { key: 'storageest', class: 't-meta agentgui-field-my' },
+    'browser storage (this origin, all sources): ' + used + (quota ? ' of ' + quota + ' available' : ''));
+}
 function preferencesPanel() {
   const hh = state.health || {};
   const savedChat = lsGet(CHAT_KEY);
@@ -3745,6 +3817,13 @@ function preferencesPanel() {
         : null,
       h('div', { key: 'lsize', class: 't-meta agentgui-field-my' },
         'local data: ' + fmtBytes(lsBytes) + ' across ' + lsKeys + ' key' + (lsKeys === 1 ? '' : 's')),
+      // agentgui's own localStorage keys are only PART of what this origin
+      // accumulates - the markdown-highlighting CDN scripts (marked/dompurify/
+      // prismjs) and any browser HTTP cache add to real storage usage with no
+      // visibility at all previously. navigator.storage.estimate() surfaces
+      // the origin's actual total-vs-quota figure alongside the known-keys
+      // breakdown, so "why is my browser storage full" has an actual answer.
+      storageEstimateRow(),
       h('div', { key: 'expchatrow', class: 'agentgui-field-my' },
         Btn({ key: 'expchat', disabled: !savedChat,
           title: savedChat ? 'Download the saved chat transcript as JSON' : 'no saved conversation yet',

package/site/app/js/backend.js

@@ -167,7 +167,10 @@ export async function statPath(base, p) {
 }
 
 export function renameEntry(base, filePath, newName) { return mutateJSON(base, '/api/rename', { path: filePath, newName }); }
+// deleteEntry's server response now includes trashId - the delete is a soft
+// move-to-trash, not a permanent unlink, so the caller can offer an undo.
 export function deleteEntry(base, filePath, recursive) { return mutateJSON(base, '/api/delete', { path: filePath, recursive: !!recursive }); }
+export function restoreEntry(base, trashId) { return mutateJSON(base, '/api/restore', { trashId }); }
 export function makeDir(base, dirPath, name) { return mutateJSON(base, '/api/mkdir', { dir: dirPath, name }); }
 export function moveEntry(base, filePath, destDir, overwrite) { return mutateJSON(base, '/api/move', { path: filePath, destDir, overwrite: !!overwrite }); }
 

package/site/app/vendor/anentrypoint-design/247420.css

@@ -32,7 +32,7 @@
      forward of the heritage green; green/purple/mascot demote to print-ink
      category roles. */
   --acid:        #B6FF1B;
-  --acid-deep:   #4E7A00; /* AA text tone of the lead on paper */
+  --acid-deep:   #4E4200; /* AA text tone of the lead on paper (WCAG-verified: #4E7A00 measured 4.21:1 against --accent-tint's own color-mix() output, which derives FROM --acid-deep -- so a small darkening shifts both foreground and background together and converges too slowly; #4E4200 is the minimal shade that actually clears 4.5:1 against its own self-referential tint background) */
   --green:       #247420;
   --green-2:     #3A9A34;
   --green-deep:  #133F10;
@@ -537,6 +537,49 @@
   }
 }
 
+/* ============================================================
+   Semantic alias tier — primitive -> semantic -> component
+   ------------------------------------------------------------
+   Three layers, in order:
+     1. PRIMITIVE  (above)  raw palette values: --acid, --green, --sky, --warn,
+        --panel-1/2/3, --paper/--ink, etc. These are the only tokens that ever
+        carry a literal color/length. A re-brand edits primitives.
+     2. SEMANTIC   (here)   named-by-INTENT aliases that resolve to a primitive
+        (e.g. --accent: var(--panel-accent)). A component or a future re-brand
+        can retune ONE semantic variable (say, --rail-danger) without hunting
+        through every primitive it happens to reuse elsewhere.
+     3. COMPONENT  (app-shell.css, community.css, etc.) component sheets keep
+        consuming primitives directly today (--accent, --panel-*, --green,
+        --warn, ...) exactly as before — this tier does not repoint any
+        existing component rule. It exists so a FUTURE swap has a semantic
+        layer ready to migrate onto, one component sheet at a time, without
+        a flag-day rewrite. Purely additive: no primitive token's name or
+        value changes here, and no component references these new names yet.
+
+   Naming matches vocabulary already established elsewhere in this system:
+   --surface-1/2 mirror the --panel-1/--panel-2 tonal-surface steps already
+   used across app-shell.css/community.css; --rail-info/-success/-warning/-error
+   mirror the canonical .tone-info/.tone-success/.tone-warning/.tone-error
+   banner/badge/chip severity names (app-shell.css L592, community.css
+   .cm-banner.tone-*) rather than inventing a new severity vocabulary.
+   ============================================================ */
+.ds-247420 {
+  /* --accent already exists as a primitive-facing alias (var(--acid)) above;
+     restated here under the semantic tier for discoverability alongside its
+     siblings. Same value, same token — not a second definition. */
+  --surface-1: var(--panel-1);
+  --surface-2: var(--panel-2);
+
+  /* Rail/status severity aliases — map onto the same color choices the
+     existing .cm-banner.tone-* rules in community.css already use, so a
+     future rail/indicator component can consume one semantic name instead
+     of picking the right primitive per severity by hand. */
+  --rail-info:    var(--sky);
+  --rail-success: var(--green-2);
+  --rail-warning: var(--amber);
+  --rail-error:   var(--warn);
+}
+
 /* Elevation tokens consumed by overlays (Tooltip, Popover, Dropdown, Dialog). */
 .ds-247420 {
   --shadow-1: 0 1px 2px color-mix(in oklab, var(--fg) 8%, transparent);
@@ -1799,12 +1842,10 @@
 .ds-247420 .row-form input:focus-visible,
 .ds-247420 .row-form textarea:focus-visible { box-shadow: var(--focus-ring-inset); }
 
-/* Field char counter (TextField maxLength) */
-.ds-247420 .ds-field-count {
-  font-size: var(--fs-tiny, 13px);
-  color: var(--fg-3, var(--fg-2));
-  text-align: right;
-}
+/* Field char counter (TextField maxLength) — canonical definition is with
+   the rest of the .ds-field family below (states-interactions.css); this
+   duplicate was removed to stop the two bodies fighting on stylesheet load
+   order. */
 
 /* Multi-column form layout (Form columns prop) */
 .ds-247420 .row-form[data-columns="2"] { grid-template-columns: repeat(2, 1fr); }
@@ -2903,14 +2944,10 @@
 .ds-247420 .ds-shortcuts-hint .ds-kbd { white-space: normal; max-width: 100%; }
 .ds-247420 .ds-kbd-caps { display: inline-flex; flex-wrap: wrap; align-items: center; gap: 4px; }
 .ds-247420 .ds-kbd-sep { color: var(--fg-3); font-size: var(--fs-micro); padding: 0 2px; }
-.ds-247420 .ds-kbd {
-  display: inline-block; min-width: 0;
-  padding: 2px 7px; border-radius: var(--r-0);
-  background: var(--bg); border: var(--bw-hair) solid var(--rule);
-  border-bottom-width: 2px;
-  font-family: var(--ff-mono); font-size: var(--fs-micro); color: var(--fg-2);
-  white-space: nowrap;
-}
+/* .ds-kbd base definition lives in editor-primitives.css (canonical home —
+   it owns the fuller ds-kbd-group/ds-kbd-row family this key chip belongs
+   to); this file only carries the .ds-shortcuts-hint contextual overrides
+   above. */
 
 /* ============================================================
    Theme toggle (segmented + compact) — bound to src/theme.js
@@ -3487,6 +3524,20 @@
    Comprehensive improvements for perfect UX across all surfaces
    ============================================================ */
 
+/* ------------------------------------------------------------
+   Table — clickable row focus ring
+   Table()'s onRowClick path (content.js) sets class="clickable"
+   role="button" tabindex="0" on the <tr>; the browser's native
+   :focus-visible outline on a <tr> renders inconsistently across
+   engines (often clipped by table border-collapse), so it needs
+   the same explicit outline treatment every other interactive
+   primitive in this file gets, via the shared --focus-* tokens.
+   -------------------------------------------------------------- */
+.ds-247420 tr.clickable:focus-visible {
+  outline: var(--focus-w) solid var(--focus-color);
+  outline-offset: calc(-1 * var(--focus-offset));
+}
+
 /* ------------------------------------------------------------
    Component States — Disabled, Loading, Error, Success
    -------------------------------------------------------------- */
@@ -3867,14 +3918,25 @@
 }
 .ds-247420 .ds-field-label {
   font-size: var(--fs-sm, 14px);
+  font-weight: 500;
   color: var(--fg-2);
   line-height: 1.3;
 }
+.ds-247420 .ds-field-required {
+  color: var(--danger);
+  font-weight: 700;
+  margin-left: 2px;
+}
 .ds-247420 .ds-field-hint {
   font-size: var(--fs-tiny, 13px);
   color: var(--fg-3);
   line-height: 1.35;
 }
+.ds-247420 .ds-field-error {
+  color: var(--danger);
+  font-size: var(--fs-tiny, 13px);
+  font-weight: 500;
+}
 .ds-247420 .ds-field-count {
   font-size: var(--fs-tiny, 13px);
   color: var(--fg-3);
@@ -4920,13 +4982,10 @@
 .ds-247420 .ds-sub-btn:hover { border-color: var(--accent); color: var(--accent-ink); }
 .ds-247420 .ds-sub-btn span { display: block; font-size: 18px; font-weight: 700; color: var(--accent-ink); }
 
-/* SessionRow */
-.ds-247420 .ds-session-row {
-  display: flex; align-items: center; gap: 8px; padding: 6px 10px;
-  flex-wrap: wrap; min-width: 0;
-  border-bottom: var(--bw-hair) solid var(--bg-3); cursor: pointer;
-}
-.ds-247420 .ds-session-row:hover { background: var(--bg-3); }
+/* SessionRow — base .ds-session-row (layout, hover/focus/active states,
+   rail-tone indicators) is canonically defined in chat.css alongside the
+   rest of the chat session-list component; this file only carries the
+   dev/admin-row sub-parts (id/counts/devcnt/span) that decorate it. */
 .ds-247420 .ds-session-row-id {
   font-family: var(--ff-mono); font-size: var(--fs-micro); color: var(--accent-ink);
   flex: 0 1 160px; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
@@ -7389,6 +7448,12 @@
    ConversationList — left-rail "Chats" column.
 ---------------------------------------------------------------------------- */
 .ds-247420 .ds-sessions { display: flex; flex-direction: column; min-height: 0; height: 100%; }
+/* agentgui's search-results export row sits as a sibling ABOVE ConversationList
+   (not threaded through any of its props) - the wrapper must replicate the
+   same flex-column layout .ds-sessions itself uses so ConversationList's own
+   internal scroll region isn't broken by an extra non-flex ancestor. */
+.ds-247420 .agentgui-search-rail-wrap { display: flex; flex-direction: column; min-height: 0; height: 100%; }
+.ds-247420 .agentgui-search-export-row { flex: 0 0 auto; padding: var(--space-2) var(--space-3) 0; }
 /* One row: quiet icon new-chat beside the search. The list's new-chat must not
    repeat the rail's primary CTA - two identical green buttons on screen at
    once read as a layout mistake, and the rail action already owns 'new'. */
@@ -9051,25 +9116,10 @@
     display: flex; flex-direction: column; gap: var(--space-1, 4px);
     margin-bottom: var(--space-2, 8px);
 }
-.ds-247420 .ds-field-label {
-    color: var(--fg-2, var(--fg));
-    font-size: var(--fs-sm, 14px);
-    font-weight: 500;
-}
-.ds-247420 .ds-field-required {
-    color: var(--danger);
-    font-weight: 700;
-    margin-left: 2px;
-}
-.ds-247420 .ds-field-hint {
-    color: var(--fg-3, var(--fg-2));
-    font-size: var(--fs-tiny, 12px);
-}
-.ds-247420 .ds-field-error {
-    color: var(--danger);
-    font-size: var(--fs-tiny, 12px);
-    font-weight: 500;
-}
+/* .ds-field-label / .ds-field-required / .ds-field-hint / .ds-field-error
+   canonical definitions now live in app-shell.css alongside the rest of the
+   .ds-field family (this file's .ds-field-wrap consumes them by class name).
+   Removed here to stop the two bodies fighting on stylesheet load order. */
 .ds-247420 .ds-field-wrap [aria-invalid="true"] {
     border-color: var(--danger) !important;
 }
@@ -9663,9 +9713,26 @@
    the app-composition wrapper, the server+channel rail pills, the voice view grid,
    and the category-color tokens the consumer avatars use. All scoped under
    .ds-247420. Additive — defines only the ca- prefix, group, rail-empty, vx-view
-   classes plus the cat color tokens. */
-
-.ds-247420.ds-247420 .ca-app {
+   classes plus the cat color tokens.
+
+   Relationship to community.css: this is NOT a fork of community.css's content
+   -- it is a small (~150-line), genuinely distinct app-shell WRAPPER around the
+   canonical, complete community surface. community.css (~1650 lines) owns every
+   .cm-*/.ds-247420 .vx-* component (server rail, channel sidebar, chat header, member list,
+   voice PTT/VAD/webcam, thread panel, forum, page view) and is the canonical, .ds-247420 actively-referenced stylesheet -- it is the one listed in package.json's
+   `exports`/`files`, the one scripts/build.mjs and scripts/lint-tokens.mjs treat
+   as a first-class component sheet on its own, and the one THEME.md/
+   COMPONENT_API.md document as the load-order anchor
+   (colors_and_type.css -> app-shell.css -> community.css -> chat.css ->
+   editor-primitives.css -> community-app.css -> app-surfaces.css). This file
+   loads strictly AFTER community.css (see ui_kits/community-app/index.html) and
+   only adds the .ca-* composition shell + category-color tokens that
+   community.css deliberately has no opinion about -- it never redefines a
+   .cm-*/.vx-* rule community.css already owns. Canonical tokens/rules live in
+   community.css; only overrides/additions specific to mountCommunityApp's own
+   composition live here. */
+
+html.ds-247420 .ca-app {
   display: flex;
   flex-direction: column;
   height: 100vh;
@@ -10140,7 +10207,15 @@
   }
 }
 
-.ds-247420 .cli {
+/* .ds-cli-block — the multi-row article/transcript container (CliBlock()'s
+   outer wrapper holding stacked .ds-cli-row / .ds-cli-comment children).
+   Distinct from the bare `.cli` single prompt+cmd row primitive owned by
+   app-shell.css (Install(), HeroFromPageData(), terminal/site quickstart
+   lines) — the two used to share the `.cli` selector with incompatible
+   display models (flex row vs block transcript), so whichever stylesheet
+   loaded last silently won for both consumers. Renamed here to remove the
+   collision; see content.js CliBlock(). */
+.ds-247420 .ds-cli-block {
   display: block;
   background: var(--panel-1);
   border-radius: var(--r-0);
@@ -10155,7 +10230,7 @@
   white-space: pre-wrap;
   word-break: break-word;
 }
-.ds-247420 .cli .ds-cli-comment {
+.ds-247420 .ds-cli-block .ds-cli-comment {
   color: var(--panel-text-3);
   white-space: pre-wrap;
   word-break: break-word;
@@ -10163,20 +10238,20 @@
   padding: 3px 0;
   line-height: 1.6;
 }
-.ds-247420 .cli .ds-cli-comment:empty::before { content: '\00a0'; }
-.ds-247420 .cli .ds-cli-row {
+.ds-247420 .ds-cli-block .ds-cli-comment:empty::before { content: '\00a0'; }
+.ds-247420 .ds-cli-block .ds-cli-row {
   display: flex;
   gap: 10px;
   padding: 3px 0;
   white-space: pre-wrap;
   word-break: break-word;
 }
-.ds-247420 .cli .ds-cli-row .prompt {
+.ds-247420 .ds-cli-block .ds-cli-row .prompt {
   color: var(--panel-accent);
   flex: 0 0 auto;
   user-select: none;
 }
-.ds-247420 .cli .ds-cli-row .cmd {
+.ds-247420 .ds-cli-block .ds-cli-row .cmd {
   color: var(--panel-text);
   flex: 1 1 auto;
   white-space: pre-wrap;