aimeat 1.25.0 → 1.26.0

package/dist/public/views/admin/agents-tab.js

@@ -8,11 +8,12 @@ import { num, dt, Empty, EconRow } from './shared.js';
 import { getAgentDetail } from '/js/services/admin.js';
 
 export default function AgentsTab({ data }) {
+  // Hooks must run unconditionally before any early return (Rules of Hooks).
+  const [expanded, setExpanded] = useState({});
+
   const ag = data.agents;
   if (!ag?.agents?.length) return html`<${Empty} text=${t('dashboard.noAgentsRegistered')} />`;
 
-  const [expanded, setExpanded] = useState({});
-
   async function toggleDetail(gaii, idx) {
     if (expanded[idx]) {
       setExpanded(prev => { const n = { ...prev }; delete n[idx]; return n; });

package/dist/public/views/admin/config-tab.js

@@ -33,12 +33,13 @@ const SOURCE_BADGE = {
 };
 
 export default function ConfigTab({ data, reload }) {
-  const s = data.configSchema;
-  if (!s || !s.schema) return html`<${Empty} text=${t('dashboard.configNotAvailable')} />`;
-
+  // Hooks must run unconditionally before any early return (Rules of Hooks).
   const [pending, setPending] = useState({});
   const [result, setResult] = useState(null);
 
+  const s = data.configSchema;
+  if (!s || !s.schema) return html`<${Empty} text=${t('dashboard.configNotAvailable')} />`;
+
   const schema = s.schema;
   const editable = s.editable !== false;
 

package/dist/public/views/admin/economy-tab.js

@@ -8,13 +8,14 @@ import { num, EconRow, StatsGrid } from './shared.js';
 import { mintMorsels } from '/js/services/admin.js';
 
 export default function EconomyTab({ data, reload }) {
-  const e = data.dash?.economy;
-  if (!e) return html`<div class="empty">${t('dashboard.loading')}</div>`;
-
+  // Hooks must run unconditionally before any early return (Rules of Hooks).
   const [mintGaii, setMintGaii] = useState('');
   const [mintAmount, setMintAmount] = useState('');
   const [mintResult, setMintResult] = useState(null);
 
+  const e = data.dash?.economy;
+  if (!e) return html`<div class="empty">${t('dashboard.loading')}</div>`;
+
   async function doMint() {
     const amount = parseInt(mintAmount, 10);
     if (!mintGaii || !amount || amount < 1 || amount > 1_000_000) {

package/dist/public/views/admin/federation-tab.js

@@ -5,6 +5,13 @@
  * @structure FederationTab (default)
  * @usage Mounted by the admin dashboard tab router.
  * @version-history
+ *   v1.4.0 — 2026-06-19 — Federation book: a Version column + "behind" badge in the live-peers
+ *     table, and a Federation Book section (operators + resources + version + settings per node,
+ *     with Rebuild on the primary / Mirror-from-genesis on leaves).
+ *   v1.3.0 — 2026-06-19 — Phase B: Promote button is eligibility-aware (uses promotion_eligible /
+ *     promotion_failing from the API; forced override prompts when not yet eligible).
+ *   v1.2.0 — 2026-06-19 — Visiting-node tier: Tier + Availability badges in the live-peers
+ *     table, an "open join" toggle, and a Promote (vouch) button for visiting peers.
  *   v1.1.0 — 2026-06-02 — Admin design unification: inline button color style
  *     on the approve action → adm-btn-success.
  */
@@ -18,7 +25,8 @@ import { dt, num, Badge, EconRow, StatsGrid, Empty, ExpandableHelp, ErrorBox } f
 import {
   getFederationPeers, getFederationDirectory, approvePeeringRequest, rejectPeeringRequest,
   deletePeeringRequest, activatePeer, addPeerDirect, removePeer, removePeerEmergency,
-  testFederationNode, joinGenesisNetwork, updatePeerPolicy, getNetworkDirectory,
+  testFederationNode, joinGenesisNetwork, updatePeerPolicy, promotePeer, getNetworkDirectory,
+  getFederationBook, rebuildFederationBook, pullFederationBook,
   getConfig, saveConfig,
 } from '/js/services/admin.js';
 import { useConfirm } from '/components/Modal.js';
@@ -45,6 +53,7 @@ export default function FederationTab({ data, reload }) {
   const [authPolicy, setAuthPolicy] = useState('disabled');
   const [defaultScopes, setDefaultScopes] = useState([]);
   const [authPolicyLoading, setAuthPolicyLoading] = useState(true);
+  const [openJoin, setOpenJoin] = useState(false);
 
   useEffect(() => {
     getConfig().then(res => {
@@ -53,11 +62,34 @@ export default function FederationTab({ data, reload }) {
         setAuthPolicy(s['federation.auth_policy']?.value ?? 'disabled');
         const scopes = s['federation.default_scopes']?.value ?? 'memory:read,catalogue:read';
         setDefaultScopes(typeof scopes === 'string' ? scopes.split(',').filter(Boolean) : (scopes || []));
+        const oj = s['federation.open_join']?.value;
+        setOpenJoin(oj === true || oj === 'true');
       }
       setAuthPolicyLoading(false);
     });
   }, []);
 
+  const doSaveOpenJoin = async (v) => {
+    setOpenJoin(v);
+    const res = await saveConfig([{ path: 'federation.open_join', value: v }]);
+    if (res.ok) { setActionSuccess(t('dashboard.fedOpenJoinUpdated')); setTimeout(() => setActionSuccess(null), 3000); }
+    else setActionError(res.error?.message || 'Failed to save');
+  };
+
+  // ── Federation Book state ──
+  const [book, setBook] = useState(null);
+  const [bookPrimary, setBookPrimary] = useState(false);
+  const loadBook = useCallback(async () => {
+    try { const r = await getFederationBook(); setBook(r.data?.book || null); setBookPrimary(!!r.data?.is_primary); }
+    catch { setBook(null); }
+  }, []);
+  useEffect(() => { loadBook(); }, [loadBook]);
+  useEffect(() => {
+    const h = () => loadBook();
+    window.addEventListener('aimeat-live-update', h);
+    return () => window.removeEventListener('aimeat-live-update', h);
+  }, [loadBook]);
+
   const doSaveAuthPolicy = async (policy, scopes) => {
     const changes = [
       { path: 'federation.auth_policy', value: policy },
@@ -176,6 +208,29 @@ export default function FederationTab({ data, reload }) {
     finally { setTesting(false); }
   }, [testUrl]);
 
+  const doPromote = useCallback((p) => {
+    // Eligible → vouch directly. Not eligible → confirm a forced (audited) override.
+    const run = async (force) => {
+      try { await promotePeer(p.node_id, force ? { force: true } : {}); flash(t('dashboard.fedPromoted')); reload(); }
+      catch (e) {
+        if (e.code === 'NOT_ELIGIBLE') {
+          confirm((t('dashboard.fedPromoteForceConfirm') || 'Not eligible yet. Promote anyway (vouch)?') + (p.promotion_failing?.length ? '\n' + p.promotion_failing.join(', ') : ''), () => run(true));
+        } else { flashErr(e.message); }
+      }
+    };
+    if (p.promotion_eligible) confirm(t('dashboard.fedPromoteConfirm'), () => run(false));
+    else run(false); // will 409 → prompts for forced override
+  }, [reload]);
+
+  const doRebuildBook = useCallback(async () => {
+    try { await rebuildFederationBook(); flash(t('dashboard.fedBookRebuilt') || 'Book rebuilt'); loadBook(); }
+    catch (e) { flashErr(e.message); }
+  }, [loadBook]);
+  const doPullBook = useCallback(async () => {
+    try { const r = await pullFederationBook(); flash(r.data?.applied ? (t('dashboard.fedBookPulled') || 'Book mirrored') : (t('dashboard.fedBookUpToDate') || 'Already up to date')); loadBook(); }
+    catch (e) { flashErr(e.message); }
+  }, [loadBook]);
+
   const doAddPeer = useCallback(async () => {
     if (!addNodeId || !addUrl) { flashErr(t('dashboard.fedAddPeerMissing')); return; }
     try { new URL(addUrl); } catch { flashErr(t('dashboard.fedInvalidUrl') || 'Invalid URL format'); return; }
@@ -203,6 +258,37 @@ export default function FederationTab({ data, reload }) {
     return html`<${Badge} type=${map[status] || 'watch'} label=${status || 'unknown'} />`;
   }
 
+  function tierBadge(tier) {
+    const tt = tier || 'member';
+    const map = { genesis: 'info', member: 'healthy', visiting: 'watch' };
+    const label = t(`dashboard.fedTier_${tt}`) || tt;
+    return html`<${Badge} type=${map[tt] || 'neutral'} label=${label} />`;
+  }
+
+  // Compare semver-ish version strings; returns 1/0/-1. Non-numeric/"unknown" sort lowest.
+  function cmpVersion(a, b) {
+    const pa = String(a || '').split('.').map(n => parseInt(n, 10));
+    const pb = String(b || '').split('.').map(n => parseInt(n, 10));
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+      const x = Number.isFinite(pa[i]) ? pa[i] : -1;
+      const y = Number.isFinite(pb[i]) ? pb[i] : -1;
+      if (x !== y) return x < y ? -1 : 1;
+    }
+    return 0;
+  }
+  // Highest version seen across peers — peers below it are flagged "behind" (a feature-gap hint).
+  const maxPeerVersion = livePeers.reduce((m, p) => (p.software_version && cmpVersion(p.software_version, m) > 0 ? p.software_version : m), '');
+  function versionCell(v) {
+    if (!v) return html`<span class="adm-text-dim">—</span>`;
+    const behind = maxPeerVersion && cmpVersion(v, maxPeerVersion) < 0;
+    return html`<span>${v}</span>${behind ? html` <${Badge} type="watch" label=${t('dashboard.fedBehind') || 'behind'} />` : null}`;
+  }
+
+  function availabilityBadge(av) {
+    if (!av || av === 'unknown') return null;
+    return html`<${Badge} type=${av === 'permanent' ? 'healthy' : 'watch'} label=${t(`dashboard.fedAvail_${av}`) || av} />`;
+  }
+
   return html`
     <p class="adm-text-dim adm-mb-md" style="margin:0">${t('dashboard.federationExplain')}</p>
 
@@ -283,9 +369,53 @@ export default function FederationTab({ data, reload }) {
             </div>
           </div>
         `}
+        <div class="adm-mt-md" style="border-top:1px solid var(--border);padding-top:12px">
+          <label class="adm-text-sm" style="display:flex;gap:8px;align-items:center">
+            <input type="checkbox" checked=${openJoin} onChange=${(e) => doSaveOpenJoin(e.target.checked)} />
+            <span><b>${t('dashboard.fedOpenJoinLabel')}</b> — ${t('dashboard.fedOpenJoinDesc')}</span>
+          </label>
+        </div>
       `}
     </div>
 
+    <!-- ═══ Federation Book ═══ -->
+    <div class="adm-card adm-mt-lg">
+      <div style="display:flex;justify-content:space-between;align-items:center;gap:12px;flex-wrap:wrap">
+        <div>
+          <h4 class="adm-mb-sm" style="margin:0">${t('dashboard.fedBookTitle')}</h4>
+          <p class="adm-text-dim adm-text-base" style="margin:0">${t('dashboard.fedBookDesc')}</p>
+        </div>
+        ${bookPrimary
+          ? html`<button class="adm-btn-sm" onClick=${doRebuildBook}>↻ ${t('dashboard.fedBookRebuild')}</button>`
+          : html`<button class="adm-btn-sm" onClick=${doPullBook}>⬇ ${t('dashboard.fedBookPull')}</button>`}
+      </div>
+      ${!book || !book.nodes?.length
+        ? html`<${Empty} text=${t('dashboard.fedBookEmpty')} />`
+        : html`<div class="scrollable adm-mt-md"><table>
+            <thead><tr>
+              <th>${t('dashboard.nodeId')}</th>
+              <th>${t('dashboard.fedBookOperators')}</th>
+              <th>${t('dashboard.fedVersionLabel')}</th>
+              <th>${t('dashboard.fedBookResources')}</th>
+              <th>${t('dashboard.fedBookSettings')}</th>
+            </tr></thead>
+            <tbody>
+              ${book.nodes.map(n => html`<tr key=${n.node_id}>
+                <td class="mono adm-text-sm">${escHtml(n.node_id)}<div class="adm-text-dim" style="font-size:.7rem">${escHtml(n.node_type || '')}</div></td>
+                <td class="adm-text-sm">${(n.operators || []).map(o => html`<div title=${escHtml(o.ghii)}>${o.avatar ? o.avatar + ' ' : ''}${escHtml(o.display_name || o.ghii)}</div>`)}${!(n.operators || []).length ? html`<span class="adm-text-dim">—</span>` : null}</td>
+                <td class="adm-text-sm">${versionCell(n.software_version)}</td>
+                <td class="adm-text-sm">${n.resources ? html`<span title=${(n.resources.highlights || []).join(', ')}>${n.resources.actions}a · ${n.resources.agents}g · ${n.resources.boards}b · ${n.resources.csms}c</span>` : '—'}</td>
+                <td style="display:flex;gap:4px;flex-wrap:wrap">
+                  ${n.settings?.open_join ? html`<${Badge} type="watch" label=${t('dashboard.fedBookOpenJoin')} />` : null}
+                  ${n.settings?.auth_policy && n.settings.auth_policy !== 'disabled' ? html`<${Badge} type="info" label=${'auth:' + n.settings.auth_policy} />` : null}
+                  ${n.settings?.cross_federation ? html`<${Badge} type="neutral" label=${t('dashboard.fedBookCrossFed')} />` : null}
+                </td>
+              </tr>`)}
+            </tbody>
+          </table></div>
+          <p class="adm-text-dim" style="font-size:.7rem;margin-top:6px">${t('dashboard.fedBookVersion')}: ${book.book_version} · ${escHtml(book.issued_by || '')}</p>`}
+    </div>
+
     <!-- ═══ Network Directory ═══ -->
     <div class="adm-card adm-mt-lg">
       <h4 class="adm-mb-sm" style="margin:0">${t('dashboard.fedNetworkDirectoryTitle')}</h4>
@@ -364,6 +494,8 @@ export default function FederationTab({ data, reload }) {
             <th>${t('dashboard.nodeId')}</th>
             <th>URL</th>
             <th>${t('dashboard.statusLabel')}</th>
+            <th>${t('dashboard.fedTierLabel')}</th>
+            <th>${t('dashboard.fedVersionLabel')}</th>
             <th>${t('dashboard.fedAddedAt')}</th>
             <th>${t('dashboard.lastSeen')}</th>
             <th>${t('dashboard.fedPublicKey')}</th>
@@ -375,6 +507,8 @@ export default function FederationTab({ data, reload }) {
               <td class="mono adm-text-sm">${escHtml(p.node_id)}</td>
               <td class="mono adm-text-sm">${escHtml(p.url || '\u2014')}</td>
               <td>${statusBadge(p.status)}</td>
+              <td style="display:flex;gap:4px;flex-wrap:wrap;align-items:center">${tierBadge(p.tier)}${availabilityBadge(p.availability)}</td>
+              <td class="adm-text-sm">${versionCell(p.software_version)}</td>
               <td class="adm-text-dim">${dt(p.added_at)}</td>
               <td class="adm-text-dim">${dt(p.last_seen)}</td>
               <td class="mono" style="font-size:.7rem;max-width:100px;overflow:hidden;text-overflow:ellipsis" title=${p.public_key || ''}>${p.public_key ? p.public_key.substring(0, 16) + '...' : '\u2014'}</td>
@@ -392,6 +526,9 @@ export default function FederationTab({ data, reload }) {
                 ${p.status === 'approved' && html`
                   <button class="adm-btn-sm" onClick=${() => doActivate(p.node_id)}>\u25B6 ${t('dashboard.fedActivate')}</button>
                 `}
+                ${p.tier === 'visiting' && html`
+                  <button class="adm-btn-sm" title=${p.promotion_eligible ? t('dashboard.fedPromoteHint') : ((t('dashboard.fedPromoteNotEligible') || 'Not yet eligible') + (p.promotion_failing?.length ? ': ' + p.promotion_failing.join(', ') : ''))} onClick=${() => doPromote(p)}>${p.promotion_eligible ? '\u2B06' : '\u26A0'} ${t('dashboard.fedPromote')}</button>
+                `}
                 ${(p.status === 'active' || p.status === 'degraded') && html`
                   <button class="adm-btn-sm" onClick=${() => doRemove(p.node_id)}>${t('dashboard.fedDepeer')}</button>
                 `}

package/dist/public/views/admin/maintenance-tab.js

@@ -45,7 +45,7 @@ export default function MaintenanceTab({ data, reload }) {
         const reader = new FileReader();
         reader.onload = async () => {
           try {
-            const parsed = JSON.parse(reader.result);
+            const parsed = JSON.parse(/** @type {string} */ (reader.result));
             await apiRestore(parsed);
             setBackupResult({ ok: true, msg: t('dashboard.dataRestored') });
             reload();

package/dist/public/views/admin/messages-tab.js

@@ -0,0 +1,115 @@
+/**
+ * @file messages-tab.js
+ * @description Admin dashboard "Messages" tab — operator visibility into direct-message (user↔user)
+ *   delivery: total + 24h counts by status (delivered / queued / failed / undeliverable), the busiest
+ *   target nodes, and a recent-attempts table. Privacy by design: shows NO message content and NO
+ *   participant identities — only routing/outcome metadata from the delivery-telemetry log.
+ * @structure MessagesTab (default) — fetches GET /v1/admin/messages/stats, re-fetches on live updates.
+ * @usage Registered in admin.js NAV_GROUPS (Data group).
+ * @version-history
+ *   v1.0.0 -- 2026-06-16 -- Initial: delivery stats + target nodes + recent attempts.
+ */
+import { h } from 'preact';
+import { useState, useEffect, useCallback } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { escHtml } from '/js/utils.js';
+import { StatsGrid } from './shared.js';
+import * as api from '/js/services/admin.js';
+
+const STATUSES = ['delivered', 'queued', 'failed', 'undeliverable'];
+const TONE = { delivered: 'good', queued: 'warn', failed: 'bad', undeliverable: 'bad' };
+
+function relTime(iso) {
+  try {
+    const s = Math.round((Date.now() - new Date(iso).getTime()) / 1000);
+    if (s < 60) return `${s}s`;
+    if (s < 3600) return `${Math.floor(s / 60)}m`;
+    if (s < 86400) return `${Math.floor(s / 3600)}h`;
+    return new Date(iso).toLocaleDateString();
+  } catch { return ''; }
+}
+
+export default function MessagesTab() {
+  const [data, setData] = useState(null);
+  const [err, setErr] = useState(null);
+
+  const load = useCallback(async () => {
+    try {
+      const r = await api.getMessageStats();
+      setData(r?.data || null); setErr(null);
+    } catch (e) { setErr(e?.message || 'Failed to load'); }
+  }, []);
+
+  useEffect(() => { load(); }, [load]);
+  useEffect(() => {
+    const hh = () => load();
+    window.addEventListener('aimeat-live-update', hh);
+    return () => window.removeEventListener('aimeat-live-update', hh);
+  }, [load]);
+
+  if (err) return html`<div class="adm-section"><div class="adm-error">${escHtml(err)}</div></div>`;
+  if (!data) return html`<div class="adm-section">${t('common.loading') || 'Loading…'}</div>`;
+
+  const s = data.stats || { total: 0, total24h: 0, byStatus: {}, byStatus24h: {}, topTargetNodes: [] };
+  const recent = data.recent || [];
+
+  const cards = [
+    { label: t('admin.messages.total') || 'Total sent', value: s.total ?? 0, sub: `${s.total24h ?? 0} ${t('admin.messages.last24h') || 'in 24h'}` },
+    ...STATUSES.map(st => ({
+      label: t(`inbox.status.${st}`) || st,
+      value: s.byStatus?.[st] ?? 0,
+      sub: `${s.byStatus24h?.[st] ?? 0} ${t('admin.messages.last24h') || 'in 24h'}`,
+      tone: TONE[st],
+    })),
+  ];
+
+  return html`
+    <div class="adm-section">
+      <div class="section-title">${t('admin.messages.title') || 'Direct messages'}</div>
+      <div class="section-desc">${t('admin.messages.desc') || 'Delivery telemetry for user-to-user messages. No message content or participant identities are shown.'}</div>
+
+      <${StatsGrid} items=${cards} />
+
+      <div class="adm-subhead">${t('admin.messages.targetNodes') || 'Top target nodes'}</div>
+      ${(s.topTargetNodes || []).length === 0
+        ? html`<div class="adm-muted">${t('admin.messages.none') || 'No deliveries yet.'}</div>`
+        : html`<table class="data-table">
+            <thead><tr>
+              <th>${t('admin.messages.node') || 'Node'}</th>
+              <th>${t('admin.messages.totalCol') || 'Total'}</th>
+              <th>${t('admin.messages.failedCol') || 'Failed'}</th>
+            </tr></thead>
+            <tbody>
+              ${s.topTargetNodes.map(n => html`<tr key=${n.nodeId}>
+                <td class="mono">${escHtml(n.nodeId)}</td>
+                <td>${n.total}</td>
+                <td class=${n.failed > 0 ? 'adm-bad' : ''}>${n.failed}</td>
+              </tr>`)}
+            </tbody>
+          </table>`}
+
+      <div class="adm-subhead">${t('admin.messages.recent') || 'Recent attempts'}</div>
+      ${recent.length === 0
+        ? html`<div class="adm-muted">${t('admin.messages.none') || 'No deliveries yet.'}</div>`
+        : html`<table class="data-table">
+            <thead><tr>
+              <th>${t('admin.messages.when') || 'When'}</th>
+              <th>${t('admin.messages.origin') || 'Origin'}</th>
+              <th>${t('admin.messages.node') || 'Node'}</th>
+              <th>${t('admin.messages.statusCol') || 'Status'}</th>
+              <th>${t('admin.messages.detail') || 'Detail'}</th>
+            </tr></thead>
+            <tbody>
+              ${recent.map(r => html`<tr key=${r.id}>
+                <td>${relTime(r.createdAt)}</td>
+                <td>${escHtml(r.origin)}</td>
+                <td class="mono">${escHtml(r.targetNodeId)}</td>
+                <td class=${(r.status === 'failed' || r.status === 'undeliverable') ? 'adm-bad' : (r.status === 'queued' ? 'adm-warn' : 'adm-good')}>${escHtml(r.status)}</td>
+                <td class="mono">${escHtml([r.httpStatus ? `http ${r.httpStatus}` : '', r.errorMessage || '', `${r.latencyMs}ms`].filter(Boolean).join(' · '))}</td>
+              </tr>`)}
+            </tbody>
+          </table>`}
+    </div>`;
+}

package/dist/public/views/admin/overview-tab.js

@@ -8,9 +8,7 @@ import { num, fmtUp, Badge, StatsGrid, EconRow, HealthRow } from './shared.js';
 import { apiGet } from '/js/api.js';
 
 export default function OverviewTab({ data }) {
-  const d = data.dash;
-  if (!d) return html`<div class="empty">${t('dashboard.loading')}</div>`;
-
+  // Hooks must run unconditionally before any early return (Rules of Hooks).
   const [activeTaskCount, setActiveTaskCount] = useState(null);
   const [sharingGroupCount, setSharingGroupCount] = useState(null);
 
@@ -32,6 +30,9 @@ export default function OverviewTab({ data }) {
       .catch(() => setSharingGroupCount(0));
   }, []);
 
+  const d = data.dash;
+  if (!d) return html`<div class="empty">${t('dashboard.loading')}</div>`;
+
   const h_ = d.health;
   const c = d.counts;
   const e = d.economy;

package/dist/public/views/admin/portal-tab.js

@@ -13,6 +13,8 @@
  *     (now /v1/site/memory → __site__ so {{memory:portal/*}} resolves); add AI
  *     bundle import (/v1/site/import) so the AI-Assisted result no longer 422s in
  *     the template box; reload the preview iframe after every change + Clear Cache.
+ *   v1.4.0 — 2026-06-19 — Add Header Navigation section: operator show/hide + reorder
+ *     of the public header links (persisted via /v1/site/header-nav).
  */
 import { h } from 'preact';
 import { useState, useEffect } from 'preact/hooks';
@@ -24,10 +26,20 @@ import { dt, Badge, ExpandableHelp, useToast, Toast } from './shared.js';
 import {
   saveSiteTemplate, deleteSiteTemplate, clearSiteCache,
   getSiteMemoryKeys, getSitePrompt, setSiteMemory, deleteSiteMemory,
-  importSiteBundle, triggerLbSync,
+  importSiteBundle, triggerLbSync, getHeaderNav, saveHeaderNav,
 } from '/js/services/admin.js';
 import { useConfirm } from '/components/Modal.js';
 
+// Public header link ids → their nav i18n label key (mirror of PUBLIC_NAV_LINKS in spa.html
+// and PUBLIC_NAV_LINK_IDS in src/services/site.ts). Gated links are not configurable.
+const HEADER_LINK_LABELS = {
+  try: 'nav.try',
+  howItWorks: 'nav.howItWorks',
+  business: 'nav.business',
+  devView: 'nav.devView',
+  help: 'nav.help',
+};
+
 export default function PortalTab({ data, reload }) {
   const [toast, showErr, showOk, clearToast] = useToast();
   const p = data.portal || {};
@@ -43,11 +55,14 @@ export default function PortalTab({ data, reload }) {
   const [newKey, setNewKey] = useState('');
   const [newVal, setNewVal] = useState('');
   const [aiBundle, setAiBundle] = useState('');
+  // Header nav: ordered list of { id, visible }. null while loading.
+  const [navLinks, setNavLinks] = useState(null);
+  const [navSaving, setNavSaving] = useState(false);
   // Bumped after any change so the preview iframe re-fetches `/` (busts browser cache).
   const [previewNonce, setPreviewNonce] = useState(0);
   const bumpPreview = () => setPreviewNonce(n => n + 1);
 
-  useEffect(() => { loadMemKeys(); }, []);
+  useEffect(() => { loadMemKeys(); loadNav(); }, []);
 
   async function loadMemKeys() {
     try {
@@ -56,6 +71,44 @@ export default function PortalTab({ data, reload }) {
     } catch { setMemKeys([]); }
   }
 
+  async function loadNav() {
+    try {
+      const res = await getHeaderNav();
+      const order = res.data?.order || Object.keys(HEADER_LINK_LABELS);
+      const hidden = new Set(res.data?.hidden || []);
+      setNavLinks(order
+        .filter(id => HEADER_LINK_LABELS[id])
+        .map(id => ({ id, visible: !hidden.has(id) })));
+    } catch { setNavLinks([]); }
+  }
+
+  function toggleNav(id) {
+    setNavLinks(links => links.map(l => l.id === id ? { ...l, visible: !l.visible } : l));
+  }
+
+  function moveNav(idx, dir) {
+    setNavLinks(links => {
+      const next = links.slice();
+      const j = idx + dir;
+      if (j < 0 || j >= next.length) return next;
+      [next[idx], next[j]] = [next[j], next[idx]];
+      return next;
+    });
+  }
+
+  async function saveNav() {
+    if (!navLinks) return;
+    setNavSaving(true);
+    try {
+      const order = navLinks.map(l => l.id);
+      const hidden = navLinks.filter(l => !l.visible).map(l => l.id);
+      await saveHeaderNav(order, hidden);
+      showOk(t('dashboard.portalNavSaved'));
+      bumpPreview();
+    } catch (e) { showErr(e.message); }
+    finally { setNavSaving(false); }
+  }
+
   async function saveTemplate() {
     // The AI-Assisted prompt produces a JSON import bundle, not raw HTML. If the
     // user pasted that here, the template route would 422 — point them to Import.
@@ -188,6 +241,41 @@ export default function PortalTab({ data, reload }) {
       </div>
     </div>
 
+    <!-- Header navigation -->
+    <div class="adm-card">
+      <h3>${t('dashboard.portalNavTitle')}</h3>
+      <p class="adm-text-dim adm-text-base adm-mb-sm">${t('dashboard.portalNavExplain')}</p>
+      ${navLinks === null
+        ? html`<div class="adm-text-dim">${t('dashboard.loading')}...</div>`
+        : html`
+          <table>
+            <thead><tr>
+              <th>${t('dashboard.portalNavLink')}</th>
+              <th>${t('dashboard.portalNavVisible')}</th>
+              <th>${t('dashboard.portalNavOrder')}</th>
+            </tr></thead>
+            <tbody>
+              ${navLinks.map((l, idx) => html`<tr key=${l.id}>
+                <td>${t(HEADER_LINK_LABELS[l.id]) || l.id}</td>
+                <td>
+                  <label class="adm-flex-center">
+                    <input type="checkbox" checked=${l.visible} onChange=${() => toggleNav(l.id)} />
+                    <span class="adm-text-dim">${l.visible ? t('dashboard.portalNavShown') : t('dashboard.portalNavHidden')}</span>
+                  </label>
+                </td>
+                <td>
+                  <button class="adm-btn-sm" disabled=${idx === 0} onClick=${() => moveNav(idx, -1)} title=${t('dashboard.portalNavMoveUp')}>↑</button>
+                  <button class="adm-btn-sm" disabled=${idx === navLinks.length - 1} onClick=${() => moveNav(idx, 1)} title=${t('dashboard.portalNavMoveDown')}>↓</button>
+                </td>
+              </tr>`)}
+            </tbody>
+          </table>
+          <div class="adm-flex adm-mt-sm">
+            <button class="adm-btn-action" disabled=${navSaving} onClick=${saveNav}>\u{1F4BE} ${t('dashboard.portalNavSave')}</button>
+          </div>
+        `}
+    </div>
+
     <!-- Template editor -->
     <div class="adm-card">
       <h3>${t('dashboard.portalTemplate')}</h3>

package/dist/public/views/admin/push-tab.js

@@ -21,13 +21,9 @@ import { useConfirm } from '/components/Modal.js';
 
 export default function PushTab({ data, reload }) {
   const push = data.push;
-  if (!push) return html`<${Empty} text=${t('dashboard.pushNotConfigured')} />`;
-
-  const subs = push.subscriptions || [];
-  const templates = push.templates || [];
-  const locales = push.locales || ['en'];
 
-  const [tplLocale, setTplLocale] = useState(locales[0] || 'en');
+  // Hooks must run unconditionally before any early return (Rules of Hooks).
+  const [tplLocale, setTplLocale] = useState((push?.locales || ['en'])[0] || 'en');
   const [saving, setSaving] = useState(null);
   const [testStatus, setTestStatus] = useState(null);
   const [resetStatus, setResetStatus] = useState(null);
@@ -36,6 +32,12 @@ export default function PushTab({ data, reload }) {
   const { confirm, ConfirmUI } = useConfirm();
   const [toast, showErr, showOk, clearToast] = useToast();
 
+  if (!push) return html`<${Empty} text=${t('dashboard.pushNotConfigured')} />`;
+
+  const subs = push.subscriptions || [];
+  const templates = push.templates || [];
+  const locales = push.locales || ['en'];
+
   const localeTpls = templates.filter(tpl => tpl.locale === tplLocale);
 
   const handleSave = async (tpl) => {

package/dist/public/views/admin/security-tab.js

@@ -19,22 +19,22 @@ const html = htm.bind(h);
 
 export default function SecurityTab() {
   const [state, setState] = useState({ incidents: [], open: 0, total: 0, loading: true });
-  const { toast, showToast } = useToast();
+  const [toast, showErr, showOk, clearToast] = useToast();
   const { confirm, ConfirmUI } = useConfirm();
 
   const load = async () => {
     try { const r = await getSecurityIncidents(); setState({ incidents: r?.data?.incidents || [], open: r?.data?.open || 0, total: r?.data?.total || 0, loading: false }); }
-    catch (e) { setState({ incidents: [], open: 0, total: 0, loading: false }); showToast((e && e.message) || 'Failed to load incidents'); }
+    catch (e) { setState({ incidents: [], open: 0, total: 0, loading: false }); showErr((e && e.message) || 'Failed to load incidents'); }
   };
   useEffect(() => { load(); }, []);
 
   const resolve = async (id) => {
-    try { await resolveSecurityIncident(id); showToast(t('admin.security.resolved') || 'Incident resolved'); load(); }
-    catch (e) { showToast((e && e.message) || 'Failed'); }
+    try { await resolveSecurityIncident(id); showOk(t('admin.security.resolved') || 'Incident resolved'); load(); }
+    catch (e) { showErr((e && e.message) || 'Failed'); }
   };
   const remove = (id) => confirm(
     t('admin.security.deleteConfirm') || 'Delete this incident and its quarantined file?',
-    async () => { try { await deleteSecurityIncident(id); showToast(t('admin.security.deleted') || 'Deleted'); load(); } catch (e) { showToast((e && e.message) || 'Failed'); } },
+    async () => { try { await deleteSecurityIncident(id); showOk(t('admin.security.deleted') || 'Deleted'); load(); } catch (e) { showErr((e && e.message) || 'Failed'); } },
     { danger: true, title: t('admin.security.title') || 'Security' },
   );
   const downloadQuarantine = async (id) => {
@@ -46,12 +46,12 @@ export default function SecurityTab() {
       const url = URL.createObjectURL(blob);
       const a = document.createElement('a'); a.href = url; a.download = `quarantine-${id}.zip`;
       document.body.appendChild(a); a.click(); a.remove(); URL.revokeObjectURL(url);
-    } catch (e) { showToast((e && e.message) || 'No quarantined file'); }
+    } catch (e) { showErr((e && e.message) || 'No quarantined file'); }
   };
 
   return html`
     <div class="adm-section">
-      <${ConfirmUI} /><${Toast} toast=${toast} />
+      <${ConfirmUI} />${toast && html`<${Toast} ...${toast} onDismiss=${clearToast} />`}
       <div class="adm-card">
         <h2 class="adm-sec-title">${'🛡️ '}${t('admin.security.title') || 'Security'}</h2>
         <p class="adm-sec-desc">