botmux 2.95.0 → 2.96.0

package/dist/dashboard/web/sessions.js

@@ -98,6 +98,8 @@ const ICON = {
     details: '<svg viewBox="0 0 16 16" aria-hidden="true"><rect x="2.2" y="2.9" width="11.6" height="10.2" rx="1.8"/><path d="M9.9 2.9v10.2"/></svg>',
     terminal: '<svg viewBox="0 0 16 16" aria-hidden="true"><rect x="1.7" y="2.7" width="12.6" height="10.6" rx="2"/><path d="M4.4 6.3 6.4 8.1 4.4 9.9"/><path d="M8.2 10.2h3.4"/></svg>',
     key: '<svg viewBox="0 0 16 16" aria-hidden="true"><circle cx="6" cy="6.1" r="3"/><path d="M8.1 8.2 13 13.1"/><path d="M11.3 11.4 12.6 10.1"/><path d="M12.7 12.8 13.7 11.8"/></svg>',
+    lock: '<svg viewBox="0 0 16 16" aria-hidden="true"><rect x="3.2" y="7" width="9.6" height="6.2" rx="1.4"/><path d="M5.2 7V5.2a2.8 2.8 0 0 1 5.6 0V7"/></svg>',
+    unlock: '<svg viewBox="0 0 16 16" aria-hidden="true"><rect x="3.2" y="7" width="9.6" height="6.2" rx="1.4"/><path d="M5.2 7V5.2a2.8 2.8 0 0 1 5.2-1.4"/></svg>',
     close: '<svg viewBox="0 0 16 16" aria-hidden="true"><path d="M4.2 4.2 11.8 11.8"/><path d="M11.8 4.2 4.2 11.8"/></svg>',
     edit: '<svg viewBox="0 0 16 16" aria-hidden="true"><path d="M10.7 3.3 12.7 5.3 6.3 11.7 3.7 12.3 4.3 9.7 10.7 3.3z"/></svg>',
     history: '<svg viewBox="0 0 16 16" aria-hidden="true"><path d="M2.2 4.8a2 2 0 0 1 2-2h7.6a2 2 0 0 1 2 2v4.6a2 2 0 0 1-2 2H6.6l-2.9 2.4v-2.4h-.5a2 2 0 0 1-2-2z"/><path d="M5.2 6.2h5.6M5.2 8.4h3.6"/></svg>',
@@ -110,6 +112,14 @@ const ICON = {
 function cardActBtn(action, icon, label, kind = '') {
     return `<button type="button" class="card-act${kind ? ' ' + kind : ''}" data-action="${action}" title="${escapeHtml(label)}" aria-label="${escapeHtml(label)}">${icon}</button>`;
 }
+function lockActionLabel(s) {
+    return s.locked ? t('sessions.unlock') : t('sessions.lock');
+}
+function lockChipHtml(s) {
+    return s.locked
+        ? `<span class="session-lock-badge" title="${escapeHtml(t('sessions.locked'))}">${escapeHtml(t('sessions.locked'))}</span>`
+        : '';
+}
 // Terminal access pill for a live session: a read-only "open" segment (always
 // shown) plus — for authenticated users — a "key" segment that mints the
 // writable (token-bearing) link on demand. Icon-only + tooltip keeps it compact;
@@ -254,6 +264,8 @@ function pageHtml() {
     </div>
     <div id="bulk-bar" class="bulk-bar" hidden>
       <span id="bulk-count"></span>
+      <button type="button" id="bulk-lock">${t('sessions.lockSelected')}</button>
+      <button type="button" id="bulk-unlock">${t('sessions.unlockSelected')}</button>
       <button type="button" id="bulk-close" class="contrast">${t('sessions.closeSelected')}</button>
       <button type="button" id="bulk-clear">${t('sessions.clearSelection')}</button>
     </div>
@@ -489,6 +501,8 @@ export function renderSessionsPage(root) {
     const selectAllBox = root.querySelector('#select-all');
     const bulkBar = root.querySelector('#bulk-bar');
     const bulkCountSpan = root.querySelector('#bulk-count');
+    const bulkLockBtn = root.querySelector('#bulk-lock');
+    const bulkUnlockBtn = root.querySelector('#bulk-unlock');
     const bulkCloseBtn = root.querySelector('#bulk-close');
     const bulkClearBtn = root.querySelector('#bulk-clear');
     const idleCleanupBar = root.querySelector('#idle-cleanup-bar');
@@ -828,7 +842,7 @@ export function renderSessionsPage(root) {
       <td><input type="checkbox" class="row-select" ${checked} ${closed ? 'disabled' : ''}></td>
       <td>${escapeHtml(botDisplayName(s))}</td>
       <td><span class="badge cli-${cssToken(s.cliId)}">${escapeHtml(s.cliId ?? 'unknown')}</span></td>
-      <td><span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span></td>
+      <td><span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span>${lockChipHtml(s)}</td>
       <td class="token-cell">${formatTokenCount(s.tokenUsage?.in)}</td>
       <td class="token-cell">${formatTokenCount(s.tokenUsage?.out)}</td>
       <td title="${escapeHtml(String(s.title ?? ''))}">${escapeHtml(stripMentionPrefix(s.title ?? '').slice(0, 48))}</td>
@@ -872,14 +886,17 @@ export function renderSessionsPage(root) {
         const terminal = terminalHref(s);
         const signal = boardSignalLabel(s);
         const repo = repoBasename(s.workingDir);
-        return `<article class="session-card${isSelected ? ' selected' : ''}" data-id="${escapeHtml(s.sessionId)}" aria-pressed="${isSelected}">
+        return `<article class="session-card${isSelected ? ' selected' : ''}${s.locked ? ' locked' : ''}" data-id="${escapeHtml(s.sessionId)}" aria-pressed="${isSelected}">
       <div class="session-card-top">
         ${botAvatarHtml({ name: botName, larkAppId: s.larkAppId, size: 'sm' })}
         <div class="session-card-title">
           <strong title="${escapeHtml(String(s.title ?? title))}">${escapeHtml(String(title).slice(0, 72))}</strong>
           <span>${escapeHtml(botName)} · ${escapeHtml(chatTitle ?? s.cliId ?? 'unknown')}</span>
         </div>
-        <span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span>
+        <span class="session-card-status-group">
+          <span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span>
+          ${lockChipHtml(s)}
+        </span>
       </div>
       ${repo !== '-' || s.adopt ? `<div class="session-card-meta">
         ${repo !== '-' ? `<span title="${escapeHtml(s.workingDir ?? '')}">${escapeHtml(repo)}</span>` : ''}
@@ -896,6 +913,7 @@ export function renderSessionsPage(root) {
         ${cardActBtn('details', ICON.details, t('sessions.details'))}
         ${canRestartSession(s) ? cardActBtn('restart', ICON.restart, t('sessions.restart')) : ''}
         ${terminalControlsHtml(terminal)}
+        ${cardActBtn('lock', s.locked ? ICON.unlock : ICON.lock, lockActionLabel(s), s.locked ? 'locked' : '')}
         ${cardActBtn('close', ICON.close, t('sessions.close'), 'danger')}
       </div>
     </article>`;
@@ -963,15 +981,17 @@ export function renderSessionsPage(root) {
         // 对方部署的会话：数据是 host 快照，终端/历史/改名都在对方机器上做不了——
         // 只保留状态点与部署来源徽章，卡片仍可拖（团队共享编排）。
         const remote = typeof s.remoteDeployment === 'string' ? s.remoteDeployment : '';
-        return `<article class="kanban-card${remote ? ' kanban-card-remote' : ''}" data-id="${escapeHtml(s.sessionId)}" tabindex="0" role="button" draggable="true">
+        return `<article class="kanban-card${remote ? ' kanban-card-remote' : ''}${s.locked ? ' locked' : ''}" data-id="${escapeHtml(s.sessionId)}" tabindex="0" role="button" draggable="true">
       <div class="kanban-card-top">
         <span class="badge cli-${cssToken(s.cliId)}">${escapeHtml(s.cliId ?? 'unknown')}</span>
         ${s.adopt ? '<span class="badge">adopt</span>' : ''}
+        ${lockChipHtml(s)}
         ${remote ? `<span class="badge kanban-remote-badge" title="${escapeHtml(t('sessions.kanban.remoteHint', { name: remote }))}">${escapeHtml(remote)}</span>` : ''}
         <span class="kanban-card-top-right">
           <span class="kanban-card-dot" data-status="${escapeHtml(status)}" title="${escapeHtml(status)}"></span>
           ${remote ? '' : `<button type="button" class="card-act kanban-card-act" data-action="history" title="${escapeHtml(t('sessions.history.title'))}" aria-label="${escapeHtml(t('sessions.history.title'))}">${ICON.history}</button>
           ${s.feishuChatLink ? `<a class="card-act kanban-card-act" href="${escapeHtml(s.feishuChatLink)}" target="_blank" rel="noopener" title="${escapeHtml(t('sessions.kanban.openFeishu'))}" aria-label="${escapeHtml(t('sessions.kanban.openFeishu'))}">${ICON.feishu}</a>` : ''}
+          <button type="button" class="card-act kanban-card-act${s.locked ? ' locked' : ''}" data-action="lock" title="${escapeHtml(lockActionLabel(s))}" aria-label="${escapeHtml(lockActionLabel(s))}">${s.locked ? ICON.unlock : ICON.lock}</button>
           <button type="button" class="card-act kanban-card-act" data-action="details" title="${escapeHtml(t('sessions.details'))}" aria-label="${escapeHtml(t('sessions.details'))}">${ICON.details}</button>
           ${canRestartSession(s) ? `<button type="button" class="card-act kanban-card-act" data-action="restart" title="${escapeHtml(t('sessions.restart'))}" aria-label="${escapeHtml(t('sessions.restart'))}">${ICON.restart}</button>` : ''}`}
         </span>
@@ -1516,6 +1536,11 @@ export function renderSessionsPage(root) {
     function syncBulkUi(rows) {
         bulkBar.hidden = selected.size === 0;
         bulkCountSpan.textContent = t('sessions.selectedCount', { count: selected.size });
+        const selectedRows = [...selected]
+            .map(id => store.sessions.get(id))
+            .filter((r) => !!r && r.status !== 'closed');
+        bulkLockBtn.disabled = !selectedRows.some(r => !r.locked);
+        bulkUnlockBtn.disabled = !selectedRows.some(r => !!r.locked);
         const selectable = rows.filter(r => r.status !== 'closed');
         if (selectable.length === 0) {
             selectAllBox.checked = false;
@@ -1664,6 +1689,52 @@ export function renderSessionsPage(root) {
                 closeBtn.disabled = false;
         }
     }
+    function invalidateSessionViews() {
+        lastBoardHtml = '';
+        lastTableHtml = '';
+        lastKanbanHtml = '';
+    }
+    async function setSessionLocked(s, locked, btn) {
+        const prev = !!s.locked;
+        if (prev === locked)
+            return true;
+        s.locked = locked;
+        invalidateSessionViews();
+        rerender();
+        if (btn)
+            btn.disabled = true;
+        try {
+            const r = await fetch(`/api/sessions/${encodeURIComponent(s.sessionId)}/lock`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ locked }),
+            });
+            const body = await r.json().catch(() => ({}));
+            if (!r.ok || body?.ok === false) {
+                s.locked = prev;
+                invalidateSessionViews();
+                rerender();
+                if (r.status !== 401)
+                    alert(`${t('sessions.lockFailed')}: ${body?.error ?? r.status}`);
+                return false;
+            }
+            s.locked = !!body.locked;
+            invalidateSessionViews();
+            rerender();
+            return true;
+        }
+        catch (e) {
+            s.locked = prev;
+            invalidateSessionViews();
+            rerender();
+            alert(`${t('sessions.lockFailed')}: ${e}`);
+            return false;
+        }
+        finally {
+            if (btn)
+                btn.disabled = false;
+        }
+    }
     // Per-session restart cooldown. The route returns 200 the instant the IPC is
     // sent — long before the worker's ~500ms+ respawn — so re-enabling the button
     // immediately let a second restart land inside the respawn window, which trips
@@ -1764,7 +1835,10 @@ export function renderSessionsPage(root) {
         drawer.innerHTML = `<article>
       <header>
         <h3>${escapeHtml(stripMentionPrefix(s.title) || s.sessionId)}</h3>
-        <span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span>
+        <span class="drawer-status-line">
+          <span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span>
+          ${lockChipHtml(s)}
+        </span>
         <p><code>${escapeHtml(s.sessionId)}</code> <button data-copy="${escapeHtml(s.sessionId)}">${t('sessions.copy')}</button></p>
       </header>
       <p><b>${t('sessions.bot')}:</b> ${escapeHtml(botDisplayName(s))} · <b>${t('sessions.cli')}:</b> ${escapeHtml(s.cliId ?? '?')}</p>
@@ -1778,6 +1852,7 @@ export function renderSessionsPage(root) {
         <button id="history-drawer-btn" type="button">${t('sessions.history.title')}</button>
         ${terminalControlsHtml(terminal)}
         ${canRestartSession(s) ? `<button id="restart-btn" type="button">${t('sessions.restart')}</button>` : ''}
+        ${!closed ? `<button id="lock-btn" type="button">${escapeHtml(lockActionLabel(s))}</button>` : ''}
         ${s.queued && !closed ? `<button id="start-btn" type="button" class="primary">${t('sessions.create.start')}</button>` : ''}
         ${closed ? `<button id="resume-btn" type="button" class="primary">${t('sessions.resume')}</button>` : ''}
         ${!closed ? `<button id="close-btn" type="button" class="contrast">${t('sessions.close')}</button>` : ''}
@@ -1843,6 +1918,19 @@ export function renderSessionsPage(root) {
                     drawer.close();
             };
         }
+        const lockBtn = drawer.querySelector('#lock-btn');
+        if (lockBtn) {
+            lockBtn.onclick = async () => {
+                const next = !s.locked;
+                if (await setSessionLocked(s, next, lockBtn)) {
+                    lockBtn.textContent = lockActionLabel(s);
+                    const line = drawer.querySelector('.drawer-status-line');
+                    if (line) {
+                        line.innerHTML = `<span class="status status-${escapeHtml(s.status ?? 'unknown')}">${escapeHtml(s.status ?? 'unknown')}</span>${lockChipHtml(s)}`;
+                    }
+                }
+            };
+        }
         // 待办池会话「开始」：激活 parked 会话（发首轮、起 CLI）。
         const startBtn = drawer.querySelector('#start-btn');
         if (startBtn) {
@@ -1991,6 +2079,8 @@ export function renderSessionsPage(root) {
                 void locateSession(s, actionButton);
             else if (action === 'restart')
                 void restartSession(s, actionButton);
+            else if (action === 'lock')
+                void setSessionLocked(s, !s.locked, actionButton);
             else if (action === 'close')
                 void closeSession(s, actionButton).then(ok => {
                     if (ok) {
@@ -2107,6 +2197,8 @@ export function renderSessionsPage(root) {
                 void openHistoryModal(s);
             else if (actionButton.dataset.action === 'restart')
                 void restartSession(s, actionButton);
+            else if (actionButton.dataset.action === 'lock')
+                void setSessionLocked(s, !s.locked, actionButton);
             return;
         }
         if (target.closest('a, button, input, label'))
@@ -2340,6 +2432,58 @@ export function renderSessionsPage(root) {
         if (failed > 0)
             alert(`Failed: ${failed}/${ids.length}`);
     });
+    async function setSelectedLocked(locked) {
+        const rows = [...selected]
+            .map(id => store.sessions.get(id))
+            .filter((s) => !!s && s.status !== 'closed' && !!s.locked !== locked);
+        if (rows.length === 0)
+            return;
+        bulkLockBtn.disabled = true;
+        bulkUnlockBtn.disabled = true;
+        const original = locked ? bulkLockBtn.textContent : bulkUnlockBtn.textContent;
+        const activeBtn = locked ? bulkLockBtn : bulkUnlockBtn;
+        let done = 0;
+        let failed = 0;
+        const queue = [...rows];
+        activeBtn.textContent = `0/${rows.length}`;
+        async function worker() {
+            while (queue.length) {
+                const s = queue.shift();
+                const prev = !!s.locked;
+                try {
+                    const r = await fetch(`/api/sessions/${encodeURIComponent(s.sessionId)}/lock`, {
+                        method: 'POST',
+                        headers: { 'content-type': 'application/json' },
+                        body: JSON.stringify({ locked }),
+                    });
+                    const body = await r.json().catch(() => ({}));
+                    if (!r.ok || body?.ok === false) {
+                        failed += 1;
+                        s.locked = prev;
+                    }
+                    else {
+                        s.locked = !!body.locked;
+                    }
+                }
+                catch {
+                    failed += 1;
+                    s.locked = prev;
+                }
+                finally {
+                    done += 1;
+                    activeBtn.textContent = `${done}/${rows.length}`;
+                }
+            }
+        }
+        await Promise.all(Array.from({ length: Math.min(6, rows.length) }, () => worker()));
+        activeBtn.textContent = original;
+        invalidateSessionViews();
+        rerender();
+        if (failed > 0)
+            alert(`${t('sessions.lockFailed')}: ${failed}/${rows.length}`);
+    }
+    bulkLockBtn.addEventListener('click', () => void setSelectedLocked(true));
+    bulkUnlockBtn.addEventListener('click', () => void setSelectedLocked(false));
     idleCleanupThreshold.addEventListener('click', e => {
         // Don't let a threshold switch mid-cleanup repaint the count/pill against a
         // different threshold than the request that's already running.