claude-simple 0.2.25 → 0.2.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-simple",
-  "version": "0.2.25",
+  "version": "0.2.27",
   "type": "module",
   "bin": {
     "claude-simple": "server.js",

package/public/api.js

@@ -26,20 +26,26 @@ function isHubOnlyPath(path) {
     || p === '/api/notifications/read'
     || p === '/api/ai/notes'
     || p.startsWith('/api/ai/notes/')
-    || p.startsWith('/api/auth/');
+    || p.startsWith('/api/auth/')
+    || p.startsWith('/api/collab/');
 }
 
 export async function api(method, path, body, signal, opts = {}) {
-  const machineId = currentMachineId(opts);
+  const machineId = opts.hub ? null : currentMachineId(opts);
   const headers = {
     'Content-Type': 'application/json',
     ...(ctx.token ? { Authorization: `Bearer ${ctx.token}` } : {}),
   };
 
   // Hub mode: route data APIs to the selected edge (sessions/files/git/…)
-  if (hubMode.peek() && machineId && !isHubOnlyPath(path)) {
+  if (!opts.hub && hubMode.peek() && machineId && !isHubOnlyPath(path)) {
     headers['X-Machine-Id'] = machineId;
   }
+  const mutating = method.toUpperCase() !== 'GET' && method.toUpperCase() !== 'HEAD';
+  if (mutating && ctx.lock?.token && ctx.lock?.key && !String(path).startsWith('/api/collab/')) {
+    headers['X-Lock-Token'] = ctx.lock.token;
+    headers['X-Lock-Key'] = ctx.lock.key;
+  }
 
   const etagKey = opts.etag === true
     ? `${ctx.token || ''}:${machineId || ''}:${path}`

package/public/app.js

@@ -3,7 +3,7 @@ import { ctx } from './state.js';
 import { probeHub } from './api.js';
 import { initShell, showApp, initAuth, resumeSession, switchTab, shouldRestoreSessionOnBoot } from './shell.js';
 import { initChat } from './chat.js';
-import { initFilesTab } from './files.js';
+import { initFilesTab } from './files.js?v=ui-22';
 import { initGitTab } from './git.js';
 import { initSettings } from './settings.js';
 import { initTerminal } from './terminal.js';

package/public/chat.js

@@ -4,6 +4,7 @@ import { ctx, isProcessing, currentProject, currentTab, currentModel, currentEff
          currentAgent, setAgent, AGENT_LABELS, getDefaultModel, getModelsForAgent, getEffortsForModel,
          getDefaultEffort, addCustomModel, setCurrentModel, chatDensity, wsStatus, sessionMetaMap, metaKey } from './state.js';
 import { sendWs, api, authHeaders, flushWsQueue, clearWsQueue } from './api.js';
+import { acquireSessionLock, canWriteNow } from './locks.js';
 import { initWakeLock, setWakeLockDesired } from './wake-lock.js';
 import { pushNotification } from './notifications.js';
 import { renderMermaid } from './mermaid.js';
@@ -252,20 +253,48 @@ function syncWakeLock() {
   setWakeLockDesired(need);
 }
 
-/** External CLI transcripts are observable, but this UI must not race their
- * terminal owner by submitting another turn into the same native session. */
-export function setExternalSessionReadOnly(readOnly) {
-  ctx.externalSessionReadOnly = !!readOnly;
+function composerBlockReason() {
+  if ((ctx.role || 'editor') === 'viewer') return '只读账号，无法输入';
+  if (ctx.lock?.foreign) {
+    const who = ctx.lock.holder && ctx.lock.holder !== 'viewer' ? ctx.lock.holder : '其他用户';
+    return `会话由 ${who} 占用（锁）`;
+  }
+  return '当前无法输入';
+}
+
+/** Enable typing whenever this user is allowed to write (role + lease). */
+export function applyComposerAccess() {
+  const writable = canWriteNow();
+  ctx.externalSessionReadOnly = !writable;
   const input = $('chat-input');
   const send = $('send-btn');
   const attach = $('btn-attach');
+  const banner = $('session-lock-banner');
   if (input) {
-    input.disabled = !!readOnly;
-    if (readOnly) input.placeholder = '外部终端会话 · 实时同步中（只读）';
-    else if (!isProcessing.peek()) updateInputMode(input.value || '');
+    input.disabled = !writable;
+    input.readOnly = !writable;
+    if (!writable) input.placeholder = composerBlockReason();
+    else if (isProcessing.peek()) input.placeholder = '回复中… 可先写好下一条，结束后自动发送 · 或点 ■ 停止';
+    else updateInputMode(input.value || '');
   }
-  if (send) send.disabled = !!readOnly;
-  if (attach) attach.disabled = !!readOnly;
+  if (send) send.disabled = !writable;
+  if (attach) attach.disabled = !writable;
+  if (banner) {
+    if (!writable) {
+      banner.classList.remove('hidden');
+      banner.textContent = composerBlockReason();
+    } else {
+      banner.classList.add('hidden');
+      banner.textContent = '';
+    }
+  }
+}
+
+/** Kept for session-nav resets. Never use this to lock the composer on
+ * native JSONL sync — UI-owned sessions write the same files, which left
+ * holders unable to type after a turn. */
+export function setExternalSessionReadOnly(_readOnly) {
+  applyComposerAccess();
 }
 
 /** Manual reconnect (toolbar / banner). Resets backoff and forces a new socket. */
@@ -433,10 +462,8 @@ function handleWsMessage(msg) {
     return;
   }
   if (msg.type === 'external-session-updated') {
-    // The external CLI owns this conversation. Reloading the normalized native
-    // transcript is safer than trying to synthesize its varied JSONL events in
-    // the browser, and keeps reconnects/idempotency straightforward.
-    setExternalSessionReadOnly(true);
+    // Native JSONL changed (our agent or a terminal CLI). Refresh history but
+    // do not disable the composer: that flag stuck after every UI turn.
     document.dispatchEvent(new CustomEvent('sessions-changed'));
     document.dispatchEvent(new CustomEvent('external-session-updated', { detail: msg }));
     return;
@@ -488,6 +515,10 @@ function handleWsMessage(msg) {
   if (msg.type === 'error') {
     finalizeThoughtStream();
     finalizeAssistantStream();
+    if (msg.code === 423 || /locked/i.test(String(msg.message || ''))) {
+      ctx.lock = { ...(ctx.lock || {}), held: false, foreign: true, holder: msg.lock?.holder || ctx.lock?.holder || 'another user' };
+      applyComposerAccess();
+    }
     appendMsg('error', 'Error', msg.message);
     markTurnDone();
     return;
@@ -878,8 +909,20 @@ export function sendMessage() {
   const input = $('chat-input');
   const text  = input?.value.trim();
   if (!text || !currentProject.peek()) return;
-  if (ctx.externalSessionReadOnly) {
-    appendSystemMsg('此会话由外部终端运行，agentui 仅实时同步，不会发送输入。');
+  if (!canWriteNow()) {
+    appendSystemMsg(composerBlockReason());
+    acquireSessionLock().then(() => applyComposerAccess()).catch(() => {});
+    return;
+  }
+  if (ctx.sessionId && !ctx.lock?.held && !ctx.lock?.unmanaged) {
+    acquireSessionLock().then(r => {
+      if (!r?.ok && !r?.skipped) {
+        applyComposerAccess();
+        appendSystemMsg(composerBlockReason());
+        return;
+      }
+      sendMessage();
+    }).catch(() => sendMessage());
     return;
   }
 
@@ -892,9 +935,11 @@ export function sendMessage() {
       const effort = currentEffort.peek() || getDefaultEffort(agent, currentModel.peek()) || 'low';
       const ok = sendWs({
         type: 'command', cmd: 'turn.start', agent, command: text, sessionId: ctx.sessionId,
+        lockToken: ctx.lock?.token || undefined,
         options: {
           agent, cwd: currentProject.peek().path, sessionId: ctx.sessionId,
           configDir: ctx.configDir, model: currentModel.peek(),
+          lockToken: ctx.lock?.token || undefined,
           effort,
           ...(currentPermission.peek() && { permissionMode: currentPermission.peek() }),
           ...(currentPermission.peek() === 'bypassPermissions' && { allowDangerouslySkipPermissions: true }),
@@ -960,12 +1005,14 @@ export function sendMessage() {
       agent,
       command: text,
       sessionId: ctx.sessionId,
+      lockToken: ctx.lock?.token || undefined,
       options: {
         agent,
         cwd:       currentProject.peek().path,
         sessionId: ctx.sessionId,
         configDir: ctx.configDir,
         model:     currentModel.peek(),
+        lockToken: ctx.lock?.token || undefined,
         ...(effort     && { effort }),
         ...(permission && { permissionMode: permission }),
         ...(permission === 'bypassPermissions' && { allowDangerouslySkipPermissions: true }),
@@ -1812,14 +1859,8 @@ export function initChat() {
   watch(isProcessing, val => {
     $('send-btn')?.classList.toggle('hidden', val);
     $('stop-btn')?.classList.toggle('hidden', !val);
-    const input = $('chat-input');
-    if (input) {
-      input.disabled = !!ctx.externalSessionReadOnly;
-      if (ctx.externalSessionReadOnly) input.placeholder = '外部终端会话 · 实时同步中（只读）';
-      else if (val) input.placeholder = '回复中… 可先写好下一条，结束后自动发送 · 或点 ■ 停止';
-      else updateInputMode(input.value || '');
-    }
-    if (!val) $('send-btn')?.toggleAttribute('disabled', !!ctx.externalSessionReadOnly);
+    applyComposerAccess();
+    if (!val) $('send-btn')?.toggleAttribute('disabled', !canWriteNow());
     const msgs = $('messages');
     if (!msgs) return;
     const existing = $('typing-indicator');
@@ -1835,6 +1876,8 @@ export function initChat() {
   });
 
   watch(chatDensity, () => applyChatDensity());
+  document.addEventListener('session-lock-changed', () => applyComposerAccess());
+  applyComposerAccess();
 
   // Chat input: ⌘/Ctrl+Enter = send. On phones, Enter sends (Shift+Enter newline).
   delegate.on('keydown', '#chat-input', e => {

package/public/files.js

@@ -2,6 +2,8 @@
 import { effect, asyncEffect, delegate, esc, $ } from './lib.js';
 import { currentProject, currentTab, filesRoot, filesPath, viewingFile, ctx } from './state.js';
 import { api, authHeaders, authQuery } from './api.js';
+import { renderMermaid } from './mermaid.js';
+import { renderMath } from './math.js';
 
 // ── Helpers ───────────────────────────────────────────────────────────────────
 function fileIcon(name) {
@@ -24,6 +26,11 @@ function officeKind(path) {
   return e === 'docx' || e === 'pptx' || e === 'xlsx' || e === 'pdf' ? e : null;
 }
 
+function isMarkdownFile(path) {
+  const ext = extOf(path);
+  return ext === 'md' || ext === 'markdown' || ext === 'mdx';
+}
+
 function sizeLabel(size) {
   if (size == null) return '';
   if (size > 1024 * 1024) return `${(size / (1024 * 1024)).toFixed(1)} MB`;
@@ -136,6 +143,7 @@ function renderDir(files) {
 
 function renderTextFile(path, content, size) {
   const isBinary = /[\x00-\x08\x0e-\x1f]/.test(content.slice(0, 512));
+  if (!isBinary && isMarkdownFile(path)) return renderMarkdownFile(path, content, size);
   const lang = langFromPath(path);
   const langClass = lang ? `language-${esc(lang)}` : '';
   const body = isBinary
@@ -144,6 +152,37 @@ function renderTextFile(path, content, size) {
   return fileChrome(path, size, isBinary ? 'binary' : (lang || 'text')) + body;
 }
 
+function markdownHtml(content) {
+  if (typeof marked !== 'undefined') {
+    try {
+      return marked.parse(content, { breaks: true, gfm: true });
+    } catch { /* Show the source below if parsing fails. */ }
+  }
+  return esc(content).replace(/\n/g, '<br>');
+}
+
+function renderMarkdownFile(path, content, size) {
+  return fileChrome(path, size, 'Markdown') + `
+    <div class="file-markdown-toolbar" role="group" aria-label="Markdown view">
+      <button type="button" class="file-markdown-mode active" data-file-render-mode="preview">Preview</button>
+      <button type="button" class="file-markdown-mode" data-file-render-mode="code">Code</button>
+    </div>
+    <div class="file-markdown-preview md p-4 overflow-auto flex-1">${markdownHtml(content)}</div>
+    <pre class="file-markdown-code file-preview p-4 font-mono text-xs leading-relaxed overflow-auto flex-1 m-0 hidden"><code class="file-preview-code language-markdown">${esc(content)}</code></pre>`;
+}
+
+function enhanceMarkdownPreview(root) {
+  const preview = root?.querySelector('.file-markdown-preview');
+  if (!preview) return;
+  if (typeof hljs !== 'undefined') {
+    preview.querySelectorAll('pre code:not(.hljs)').forEach(el => {
+      try { hljs.highlightElement(el); } catch { /* retain readable source */ }
+    });
+  }
+  renderMath(preview);
+  renderMermaid(preview);
+}
+
 // ── Office previews ───────────────────────────────────────────────────────────
 async function renderDocx(arrayBuffer) {
   await loadScript('/vendor/mammoth.browser.min.js');
@@ -426,6 +465,7 @@ async function showFile(area, file, data, signal) {
   }
   area.innerHTML = renderTextFile(file, data.content || '', size);
   highlightFilePreview(area);
+  if (isMarkdownFile(file)) enhanceMarkdownPreview(area);
 }
 
 // ── Init ──────────────────────────────────────────────────────────────────────
@@ -494,6 +534,16 @@ export function initFilesTab() {
     if (!path) return;
     deleteFile(currentProject.peek(), path);
   });
+  delegate.on('click', '[data-file-render-mode]', (_, el) => {
+    const root = el.closest('#files-area');
+    if (!root) return;
+    const showCode = el.dataset.fileRenderMode === 'code';
+    root.querySelector('.file-markdown-preview')?.classList.toggle('hidden', showCode);
+    root.querySelector('.file-markdown-code')?.classList.toggle('hidden', !showCode);
+    root.querySelectorAll('[data-file-render-mode]').forEach(button => {
+      button.classList.toggle('active', button === el);
+    });
+  });
   // Excel sheet tabs
   delegate.on('click', '.office-sheet-tab', (_, el) => {
     const root = el.closest('.office-xlsx');

package/public/index.html

@@ -85,7 +85,7 @@
   <script src="/vendor/mermaid.min.js"></script>
   <link rel="stylesheet" href="/vendor/katex.min.css">
   <script src="/vendor/katex.min.js"></script>
-  <link rel="stylesheet" href="style.css?v=ui-20">
+  <link rel="stylesheet" href="style.css?v=ui-22">
 </head>
 <body class="h-dvh overflow-hidden flex flex-col bg-base-100 text-base-content">
   <div id="root" class="flex flex-col flex-1 overflow-hidden"></div>
@@ -101,6 +101,6 @@
       }
     }, 10000);
   </script>
-  <script type="module" src="app.js?v=ui-20"></script>
+  <script type="module" src="app.js?v=ui-22"></script>
 </body>
 </html>

package/public/locks.js

@@ -0,0 +1,139 @@
+// locks.js — lease locks for the current session (hub or standalone)
+import { ctx, currentAgent, selectedMachineId } from './state.js';
+import { api } from './api.js';
+
+const TTL_SEC = 60;
+const HEARTBEAT_MS = 20_000; // design: ≤25s
+
+let heartbeatTimer = null;
+let acquireInFlight = null;
+
+export function sessionLockKey({
+  sessionId = ctx.sessionId,
+  agent = ctx.agent || currentAgent.peek() || 'claude',
+  machineId = ctx.machineId || selectedMachineId.peek() || 'local',
+} = {}) {
+  if (!sessionId) return null;
+  return `session:${machineId || 'local'}:${agent || 'claude'}:${sessionId}`;
+}
+
+export function canWriteNow() {
+  const role = ctx.role || 'editor';
+  if (role === 'viewer') return false;
+  if (ctx.lock?.foreign) return false;
+  return true;
+}
+
+function emitLockChange() {
+  document.dispatchEvent(new CustomEvent('session-lock-changed', { detail: ctx.lock }));
+}
+
+function setLockState(next) {
+  ctx.lock = { key: null, token: null, holder: null, held: false, foreign: false, ...(next || {}) };
+  emitLockChange();
+}
+
+export async function acquireSessionLock(identity = {}) {
+  const key = sessionLockKey(identity);
+  if (!key) {
+    setLockState({ foreign: false, held: true, unmanaged: true });
+    return { ok: true, skipped: true };
+  }
+  const role = ctx.role || 'editor';
+  if (role === 'viewer') {
+    setLockState({ key, held: false, foreign: true, holder: 'viewer' });
+    return { ok: false, error: 'viewers cannot take exclusive locks', code: 403 };
+  }
+  if (ctx.lock?.key && ctx.lock.key !== key) {
+    await releaseSessionLock();
+  }
+  if (acquireInFlight) return acquireInFlight;
+  acquireInFlight = (async () => {
+    try {
+      const body = {
+        key,
+        kind: 'session',
+        ttlSec: TTL_SEC,
+        exclusive: true,
+        ...(ctx.lock?.token && ctx.lock?.key === key ? { token: ctx.lock.token } : {}),
+      };
+      const lock = await api('POST', '/api/collab/locks', body, undefined, { hub: true });
+      setLockState({
+        key,
+        token: lock.token,
+        holder: lock.holder,
+        held: true,
+        foreign: false,
+        expiresAt: lock.expiresAt,
+        version: lock.version,
+      });
+      startLockHeartbeat();
+      return { ok: true, lock };
+    } catch (err) {
+      const msg = String(err.message || err);
+      const locked = /locked|HTTP 423|423/.test(msg);
+      if (locked) {
+        setLockState({ key, held: false, foreign: true, holder: 'another user' });
+        return { ok: false, code: 423, error: msg };
+      }
+      // Collab API missing (older standalone): do not block typing.
+      setLockState({ key, held: true, foreign: false, unmanaged: true });
+      return { ok: true, skipped: true, error: msg };
+    } finally {
+      acquireInFlight = null;
+    }
+  })();
+  return acquireInFlight;
+}
+
+async function heartbeatLock() {
+  const { key, token, held } = ctx.lock || {};
+  if (!key || !token || !held) return;
+  try {
+    const lock = await api('POST', '/api/collab/lock-action', {
+      key, action: 'heartbeat', token, ttlSec: TTL_SEC,
+    }, undefined, { hub: true });
+    if (lock?.token) ctx.lock.token = lock.token;
+    if (lock?.expiresAt) ctx.lock.expiresAt = lock.expiresAt;
+  } catch (err) {
+    const msg = String(err.message || err);
+    if (/token mismatch|HTTP 409|409|no lock|HTTP 404|404/.test(msg)) {
+      // Lost the lease — try to reclaim if we are still the holder.
+      const result = await acquireSessionLock();
+      if (!result.ok) stopLockHeartbeat();
+    }
+  }
+}
+
+export function startLockHeartbeat() {
+  stopLockHeartbeat();
+  heartbeatTimer = setInterval(() => { heartbeatLock().catch(() => {}); }, HEARTBEAT_MS);
+}
+
+export function stopLockHeartbeat() {
+  if (heartbeatTimer) { clearInterval(heartbeatTimer); heartbeatTimer = null; }
+}
+
+export async function releaseSessionLock() {
+  stopLockHeartbeat();
+  const { key, token } = ctx.lock || {};
+  setLockState({ held: false, foreign: false });
+  if (!key) return;
+  try {
+    await api('POST', '/api/collab/lock-action', {
+      key, action: 'release', token, ttlSec: TTL_SEC,
+    }, undefined, { hub: true });
+  } catch { /* TTL will expire */ }
+}
+
+export async function loadCollabMe() {
+  try {
+    const me = await api('GET', '/api/collab/me', undefined, undefined, { hub: true });
+    ctx.role = me?.role || ctx.role || 'editor';
+    ctx.username = me?.username || ctx.username || null;
+    return me;
+  } catch {
+    if (!ctx.role) ctx.role = 'editor';
+    return null;
+  }
+}

package/public/privacy.html

@@ -0,0 +1,111 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta name="theme-color" content="#0f172a">
+  <meta name="robots" content="index,follow">
+  <title>AgentUI Privacy Policy</title>
+  <style>
+    :root {
+      color-scheme: dark;
+    }
+    body {
+      margin: 0;
+      min-height: 100dvh;
+      font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+      background: #0f172a;
+      color: #e2e8f0;
+      line-height: 1.6;
+    }
+    main {
+      max-width: 42rem;
+      margin: 0 auto;
+      padding: 2.5rem 1.5rem 4rem;
+    }
+    h1 {
+      font-size: 1.6rem;
+      font-weight: 700;
+      margin: 0 0 0.35rem;
+      letter-spacing: -0.02em;
+    }
+    .updated {
+      color: #94a3b8;
+      font-size: 0.9rem;
+      margin: 0 0 1.75rem;
+    }
+    h2 {
+      font-size: 1.05rem;
+      margin: 1.75rem 0 0.6rem;
+      color: #cbd5e1;
+    }
+    p, li {
+      font-size: 0.95rem;
+      color: #cbd5e1;
+    }
+    p { margin: 0 0 0.85rem; }
+    ul {
+      margin: 0 0 0.85rem;
+      padding-left: 1.2rem;
+    }
+    li { margin: 0.25rem 0; }
+    a {
+      color: #818cf8;
+      text-decoration: none;
+    }
+    a:hover { text-decoration: underline; }
+    code {
+      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+      font-size: 0.86em;
+      background: #1e293b;
+      border: 1px solid #334155;
+      border-radius: 0.3rem;
+      padding: 0.05rem 0.35rem;
+    }
+  </style>
+</head>
+<body>
+  <main>
+    <h1>AgentUI Privacy Policy</h1>
+    <p class="updated">Last updated: 31 August 2026</p>
+
+    <p>
+      AgentUI (bundle <code>online.llmlife.agentui</code>) is a mobile client for a self-hosted AI coding hub.
+      The iOS app is published by llmlife.
+    </p>
+
+    <h2>What the app does</h2>
+    <ul>
+      <li>You type a hub URL and credentials. The app talks only to the hub you configure (default <code>https://agentui.antisense.fun</code>).</li>
+      <li>Session chat, files, git, terminal, and memory stay on that hub / your machines. We (the App Store publisher) do not operate a public user database for AgentUI.</li>
+    </ul>
+
+    <h2>Data the iOS app may access on device</h2>
+    <ul>
+      <li><strong>Camera and photo library:</strong> only if you attach a photo to a session. Images are uploaded to YOUR hub.</li>
+      <li><strong>Files you pick:</strong> uploaded to YOUR hub.</li>
+      <li><strong>Local notifications:</strong> session-complete banners on this device. No Apple Push token is required for that.</li>
+      <li><strong>Account token / hub URL:</strong> stored in app preferences on device.</li>
+    </ul>
+
+    <h2>What we do not do</h2>
+    <ul>
+      <li>No third-party analytics SDK, no ads, no tracking pixels in the iOS app.</li>
+      <li>No sale of personal data.</li>
+      <li>We do not require you to create an Apple-ID-linked social account.</li>
+    </ul>
+
+    <h2>Hub operators</h2>
+    <p>
+      Whoever runs the hub you sign into is the controller for chat logs, files, and account data on that server.
+      If you use <code>https://agentui.antisense.fun</code>, contact the operator via the GitHub repo
+      <a href="https://github.com/forechoandlook/claude-simple-ui">https://github.com/forechoandlook/claude-simple-ui</a>.
+    </p>
+
+    <h2>Contact</h2>
+    <p>
+      <a href="https://github.com/forechoandlook/claude-simple-ui/issues">https://github.com/forechoandlook/claude-simple-ui/issues</a>
+    </p>
+  </main>
+</body>
+</html>

package/public/shell/boot.js

@@ -4,6 +4,7 @@ import {
   hubMode, machinesList, hubMachineReady, setSelectedMachine, sessionsData, ctx,
 } from '../state.js';
 import { probeHub } from '../api.js';
+import { loadCollabMe } from '../locks.js';
 import { getCachedSessions } from '../cache.js';
 import { getLastSessionContext } from './session-context.js';
 import { loadAllSessions, loadWorkspaces, loadAgentsMeta } from './session-list.js';
@@ -23,6 +24,8 @@ export async function showApp(opts = {}) {
   app.style.display = 'flex';
   queueMicrotask(syncFocusScope);
 
+  loadCollabMe().catch(() => {});
+
   // Use probe result from boot when provided (avoid second /api/hub round-trip)
   let hub = opts.hub;
   if (hub === undefined) {

package/public/shell/notes.js

@@ -118,11 +118,16 @@ export function renderSessionNotesBar() {
             title="${esc(showTitle)}">${esc(showTitle)}</span>
       <button type="button" class="session-rename-btn flex-shrink-0 opacity-70 hover:opacity-100"
               data-rename-bar="1" title="Rename session">✎</button>
+      <div class="session-title-actions flex items-center gap-0.5 flex-shrink-0">
+        <button type="button" id="btn-new-session-current" class="session-bar-icon" title="新建会话" aria-label="新建会话"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true"><circle cx="12" cy="12" r="8"/><path d="M12 8v8M8 12h8"/></svg></button>
       <button type="button" class="session-hide-btn flex-shrink-0 ${hid ? 'is-hidden' : ''}"
               data-hide-toggle="1"
               data-hide-session-id="${esc(sid)}"
               data-hide-session-agent="${esc(agent)}"
-              title="${hid ? 'Unhide session' : 'Hide session'}">${hid ? '👁' : '🙈'}</button>
+              title="${hid ? '取消隐藏会话' : '隐藏会话'}" aria-label="${hid ? '取消隐藏会话' : '隐藏会话'}"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true"><path d="M3 3l18 18"/><path d="M10.6 10.7a2 2 0 0 0 2.7 2.7"/><path d="M9.9 5.1A10.5 10.5 0 0 1 12 4.9c5.4 0 9 5.1 9 7.1a10.9 10.9 0 0 1-3 4.2M6.2 6.3C4.1 7.8 3 10.2 3 12c0 2 3.6 7.1 9 7.1 1.2 0 2.3-.2 3.3-.6"/></svg></button>
+        <button type="button" id="btn-share-session-current" class="session-bar-icon" title="复制当前会话分享链接" aria-label="分享会话"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true"><path d="M12 15V3"/><path d="m8 7 4-4 4 4"/><path d="M5 12v7a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2v-7"/></svg></button>
+        <button type="button" id="btn-collapse-chat-chrome" class="session-bar-icon" title="折叠顶部内容" aria-label="折叠顶部内容"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" aria-hidden="true"><path d="M7 10l5 5 5-5"/><path d="M5 5h14"/></svg></button>
+      </div>
       <span class="font-bold text-base-content/40 uppercase flex-shrink-0">Note:</span>
       <span class="truncate text-base-content/70 ${note ? '' : 'italic text-base-content/40'}"
             id="session-notes-text" title="${esc(note || 'Add a note for this session')}">${esc(note || 'No session note')}</span>

package/public/shell/session-nav.js

@@ -12,6 +12,7 @@ import {
   appendHistoryTokenBar, appendContextBar, flushToolBatch, coerceTs,
   stashComposerDraft, restoreComposerDraft, discardComposerAttachments, parkQueuedMessages, detachProcessingForSessionSwitch, setExternalSessionReadOnly,
 } from '../chat.js';
+import { acquireSessionLock, releaseSessionLock } from '../locks.js';
 import { setHash, syncHash } from '../router.js';
 import { refreshModelSelect } from './session-list.js';
 import { renderSessionNotesBar } from './notes.js';
@@ -54,6 +55,7 @@ function syncMachinePathHints(machineId) {
 
 export function openProject(project) {
   activeExternalHistory = null;
+  releaseSessionLock();
   setExternalSessionReadOnly(false);
   stashComposerDraft();
   parkQueuedMessages();
@@ -88,6 +90,7 @@ export function openProject(project) {
 
 export function goHome() {
   activeExternalHistory = null;
+  releaseSessionLock();
   setExternalSessionReadOnly(false);
   stashComposerDraft();
   parkQueuedMessages();
@@ -167,6 +170,7 @@ export async function resumeSession(sid, cwd, configDir, agent, machineId, opts
 
   ctx.sessionId = sid;
   setExternalSessionReadOnly(false);
+  acquireSessionLock({ sessionId: sid, agent: resolvedAgent, machineId: resolvedMachine }).catch(() => {});
   ctx.configDir = resolvedConfig;
   ctx.agent = resolvedAgent;
   setAgent(resolvedAgent);