create-pmos 0.521.0 → 0.523.0

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.521.0",
+  "version": "0.523.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/bd-publish.css

@@ -47,3 +47,6 @@
 .bppop :focus-visible{outline:2px solid var(--ember);outline-offset:2px}
 #bdPublish{position:relative}#bdPublish .bpn{position:absolute;top:2px;right:0;min-width:16px;padding:0 5px;border-radius:99px;background:var(--solid);color:var(--on-solid);font:var(--fw-strong) var(--fs-badge)/var(--lh-badge) var(--mono);text-align:center;line-height:16px}
 @media (max-width:640px){.bppop{left:0 !important;right:0;bottom:0;top:auto !important;width:auto;max-width:none;border-radius:16px 16px 0 0;border-width:1px 0 0;box-shadow:0 -8px 30px rgb(0 0 0 / .18)}.bppop .bpbody{max-height:85vh;padding:12px 12px calc(18px + env(safe-area-inset-bottom,0px))}.bppop .bpcaret{display:none}}
+/* several picks (batch 27 item 1, ShA): Products and Programs as chip groups, and the link's name made from the picks */
+.bppop .bpcap{font:var(--fw-strong) var(--fs-meta)/var(--lh-meta) var(--sans,inherit);color:var(--ink-3);padding:6px 8px 0}
+.bppop .bpname{font-weight:var(--fw-strong);color:var(--ink);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}

package/workspace/public/pm/bd-publish.js

@@ -4,7 +4,8 @@
  * POST /api/board-publish, which is a page press: only a press here publishes, never an agent session.
  *
  *   No host        "Add the board host": one field and a save icon. Nothing is sent before that.
- *   Ready          What to share (chips) · Team (optional) · Password (on by default, generated; a new one, or off) · Ends in 1, 7 or 30 days
+ *   Ready          What to share: Products (the board on screen first) and Programs (each says which products it reaches) as chips, in pick
+ *                  order; several picks are one link with a tab per pick and a name made from the picks, the pencil renames it (batch 27 item 1) · Team (optional) · Password (on by default, generated; a new one, or off) · Ends in 1, 7 or 30 days
  *                  · the host with a pencil to change it · the send-up icon publishes
  *   Link ready     the link and the password, one copy icon, shown once (the workspace does not keep the password)
  *   Open links     not listed here any more: one row "N open links" opens the Shared tab, where they are managed. Zero is silence.
@@ -27,13 +28,32 @@ const OK = svg('<path d="M5 12l5 5 9-10"/>');
 const UP = svg('<path d="M12 15V4M7.5 8.5L12 4l4.5 4.5M5 14v5h14v-5"/>');
 const COPY = svg('<rect x="9" y="9" width="11" height="11" rx="2"/><path d="M5 15V6a2 2 0 0 1 2-2h9"/>');
 const MORE = svg('<path d="M9 6l6 6-6 6"/>');
+const TAG = svg('<path d="M3 12V4h8l10 10-8 8zM7.5 8.5h.01"/>');
 /** An icon-only button: the word is its tooltip and its label. */
 const ib = (icon, label, attrs, cls = '') => `<button type="button" class="bpib${cls ? ' ' + cls : ''}" aria-label="${esc(label)}" title="${esc(label)}" ${attrs}>${icon}</button>`;
 const SOON_MS = 36 * 3600 * 1000;
 
 export const COUNT = (links) => (Array.isArray(links) ? links.length : 0);
 const keyOf = (k, id) => k + ':' + id;
-const chip = (S, kind, c, extra = '') => `<button type="button" class="bpchip" data-bp-sel="${esc(keyOf(kind, c.id))}" aria-pressed="${S.sel.has(keyOf(kind, c.id))}">${esc(c.label)} <small>${extra || kind}</small></button>`;
+/** A product's key holds its ws and board (batch 27 item 1): a pick of another product publishes that product's board. */
+const prodKey = (p) => (p.ws ? p.ws + '|' + p.id : p.id);
+const chipKey = (kind, c) => keyOf(kind, kind === 'product' ? prodKey(c) : c.id);
+const chip = (S, kind, c, extra = '') => `<button type="button" class="bpchip" data-bp-sel="${esc(chipKey(kind, c))}" aria-pressed="${S.sel.has(chipKey(kind, c))}">${esc(c.label)}${extra ? ` <small>${esc(extra)}</small>` : ''}</button>`;
+/** The link's name made from the picks, in pick order: three names, then "+ N more" (lib/board-pack.js nameOf). */
+export function autoName(S) {
+  const c = S.choices || { products: [], programs: [], initiatives: [] };
+  const labels = [...S.sel].map((k) => { const i = k.indexOf(':'); const kind = k.slice(0, i), id = k.slice(i + 1);
+    const list = kind === 'product' ? c.products : kind === 'program' ? c.programs : c.initiatives;
+    const x = (list || []).find((y) => (kind === 'product' ? prodKey(y) : y.id) === id); return x ? x.label : id; });
+  return labels.length > 3 ? labels.slice(0, 3).join(' + ') + ' + ' + (labels.length - 3) + ' more' : labels.join(' + ');
+}
+/** The picks as the publish route takes them, in pick order (lib/board-publish-parts.js). */
+export function partsOf(S, ctx) {
+  return [...S.sel].map((k) => { const i = k.indexOf(':'); const kind = k.slice(0, i), id = k.slice(i + 1);
+    if (kind === 'product') { const j = id.indexOf('|'); return j < 0 ? { kind, ws: ctx.ws, board: id } : { kind, ws: id.slice(0, j), board: id.slice(j + 1) }; }
+    if (kind === 'program') return { kind, id };
+    return { kind, id, ws: ctx.ws, board: ctx.board || ctx.ws }; });
+}
 
 /** The popover's inside. S = { phase, host, days, choices, sel:Set, team, pw, pass, err, busy, made, links, iniOpen, copied, now } */
 export function publishHtml(S) {
@@ -55,10 +75,17 @@ export function publishHtml(S) {
   }
   const c = S.choices || { products: [], programs: [], initiatives: [] };
   const picked = c.initiatives.filter((i) => S.sel.has(keyOf('initiative', i.id)));
-  const chips = c.products.map((p) => chip(S, 'product', p)).join('') + c.programs.map((p) => chip(S, 'program', p)).join('') + picked.map((i) => chip(S, 'initiative', i)).join('')
+  const prods = c.products.map((p) => chip(S, 'product', p, p.n ? String(p.n) : '')).join('');
+  const progs = c.programs.map((p) => chip(S, 'program', p, p.reach || '')).join('');
+  const inis = picked.map((i) => chip(S, 'initiative', i, 'initiative')).join('')
     + (c.initiatives.length ? `<button type="button" class="bpchip add" data-bp="ini" aria-expanded="${!!S.iniOpen}">${PLUS}Initiative</button>` : '');
   const menu = S.iniOpen ? `<div class="bpmenu" role="menu">${c.initiatives.filter((i) => !S.sel.has(keyOf('initiative', i.id))).map((i) => `<button type="button" role="menuitem" data-bp-add="${esc(i.id)}">${esc(i.label)}</button>`).join('') || '<p class="bpnote">Every initiative is picked.</p>'}</div>` : '';
-  return `<div class="bpeye">What to share</div><div class="bpchips">${chips}</div>${menu}`
+  // several picks: one link, one tab per pick; its name is made from the picks, and the pencil renames it (batch 27 item 1, ShA)
+  const name = S.sel.size > 1 ? (S.naming
+    ? `<div class="bpfield"><div class="bpinp2">${TAG}<input id="bpName" type="text" maxlength="120" autocomplete="off" aria-label="The link's name" value="${esc(S.name || autoName(S))}">${ib(OK, 'Keep this name', 'data-bp="named"', 'gh sm')}</div></div>`
+    : `<div class="bpfield"><div class="bpinp2" title="The link's name. Made from your picks; the pencil changes it.">${TAG}<span class="bpg bpname">${esc(S.name || autoName(S))}</span>${ib(PEN, 'Rename the link', 'data-bp="rename"', 'gh sm')}</div></div>`) : '';
+  return `<div class="bpeye">What to share</div>${c.products.length > 1 || c.programs.length ? '<div class="bpcap">Products</div>' : ''}<div class="bpchips">${prods}</div>`
+    + (progs ? `<div class="bpcap">Programs</div><div class="bpchips">${progs}</div>` : '') + `<div class="bpchips">${inis}</div>${menu}` + name
     + `<div class="bpfield"><div class="bpinp2">${TEAM}<input id="bpTeam" type="text" maxlength="40" autocomplete="off" aria-label="Team" placeholder="Team (optional)" value="${esc(S.team)}"></div></div>`
     + `<div class="bpfield"><div class="bpinp2">${LOCK}${S.pw ? `<input id="bpPass" type="text" spellcheck="false" autocomplete="off" aria-label="Password" value="${esc(S.pass)}">${ib(DICE, 'New password', 'data-bp="newpw"', 'gh sm')}` : '<span class="bpg bpoff">No password</span>'}<button type="button" class="bpsw" role="switch" aria-checked="${S.pw}" aria-label="Password" title="Password" data-bp="pw"></button></div></div>`
     + `<div class="bpline2"><span class="bpnote">Ends in</span><div class="bpseg" role="group" aria-label="Link ends after (days)">${[1, 7, 30].map((d) => `<button type="button" data-bp-days="${d}" aria-pressed="${S.days === d}" aria-label="${d === 1 ? '1 day' : d + ' days'}">${d}</button>`).join('')}</div><span class="bpnote">days</span></div>`
@@ -110,7 +137,8 @@ export function open(btn, ctx) {
   const onKey = (e) => { if (e.key === 'Escape' && m.isConnected) { e.stopPropagation(); close(true); } };
   const onOut = (e) => { if (m.isConnected && !m.contains(e.target) && !btn.contains(e.target)) close(false); };
   const draw = (focus) => {
-    const keep = { team: m.querySelector('#bpTeam'), pass: m.querySelector('#bpPass'), host: m.querySelector('#bpHost') };
+    const keep = { team: m.querySelector('#bpTeam'), pass: m.querySelector('#bpPass'), host: m.querySelector('#bpHost'), name: m.querySelector('#bpName') };
+    if (keep.name) S.name = keep.name.value.trim() === autoName(S) ? '' : keep.name.value.trim();
     if (keep.team) S.team = keep.team.value; if (keep.pass) S.pass = keep.pass.value; if (keep.host) S.hostIn = keep.host.value;
     body.innerHTML = publishHtml(S); place();
     const f = focus && m.querySelector(focus); if (f) f.focus();
@@ -120,7 +148,7 @@ export function open(btn, ctx) {
     const r = await pmGet(q).catch(() => null);
     if (!r || !r.ok) { S.phase = 'form'; S.err = (r && r.error) || 'The workspace did not answer. Try again.'; return draw(); }
     S.phase = 'form'; S.host = r.host; S.links = r.links || []; S.choices = r.choices; if (!S.pass) S.pass = r.password || ''; S.now = Date.now();
-    if (!S.sel.size && S.choices && S.choices.products[0]) S.sel.add(keyOf('product', S.choices.products[0].id));
+    if (!S.sel.size && S.choices && S.choices.products[0]) S.sel.add(chipKey('product', S.choices.products[0]));
     draw(); refreshCount(btn);
   };
   m.onclick = async (e) => {
@@ -138,6 +166,8 @@ export function open(btn, ctx) {
       if (!r || !r.ok) { S.err = (r && r.error) || 'The address was not saved.'; return draw('#bpHost'); }
       S.phase = 'loading'; draw(); return load();
     }
+    if (act === 'rename') { S.naming = true; return draw('#bpName'); }
+    if (act === 'named') { S.naming = false; return draw('[data-bp="rename"]'); }
     if (act === 'ini') { S.iniOpen = !S.iniOpen; return draw('[data-bp="ini"]'); }
     if (act === 'pw') { S.pw = !S.pw; return draw('[data-bp="pw"]'); }
     if (act === 'newpw') { const r = await pmGet('/api/board-publish').catch(() => null); if (r && r.ok) S.pass = r.password; return draw('#bpPass'); }
@@ -148,10 +178,10 @@ export function open(btn, ctx) {
     }
     if (act === 'make') {
       draw(); if (S.busy) return; S.busy = true; S.err = ''; draw();
-      const select = [...S.sel].map((k) => { const i = k.indexOf(':'); return { kind: k.slice(0, i), id: k.slice(i + 1) }; });
-      const r = await pmPost('/api/board-publish', { ws: ctx.ws, board: ctx.board || ctx.ws, select, team: S.team.trim(), password: S.pw ? S.pass : '', days: S.days, view: ctx.view }).catch(() => null);
+      const parts = partsOf(S, ctx); const several = S.sel.size > 1;
+      const r = await pmPost('/api/board-publish', { ws: ctx.ws, board: ctx.board || ctx.ws, parts, name: several ? S.name || '' : '', team: S.team.trim(), password: S.pw ? S.pass : '', days: S.days, view: ctx.view }).catch(() => null);
       S.busy = false;
-      if (r && r.ok) { const l = (await pmGet('/api/board-publish').catch(() => null)) || {}; S.links = l.links || S.links; S.made = { url: r.url, pass: S.pw ? S.pass : '', ends: r.ends, team: S.team.trim(), name: (S.links.find((x) => x.id === r.id) || {}).name || 'Board' }; S.pass = ''; S.err = ''; draw('[data-bp="copy"]'); return refreshCount(btn); }
+      if (r && r.ok) { const l = (await pmGet('/api/board-publish').catch(() => null)) || {}; S.links = l.links || S.links; S.made = { url: r.url, pass: S.pw ? S.pass : '', ends: r.ends, team: S.team.trim(), name: r.name || (S.links.find((x) => x.id === r.id) || {}).name || 'Board' }; S.pass = ''; S.err = ''; draw('[data-bp="copy"]'); return refreshCount(btn); }
       S.err = (r && r.error) || 'The workspace did not answer. Try again.'; return draw();
     }
   };

package/workspace/public/pm/bd-shared.css

@@ -92,3 +92,8 @@
   #cShared .bdsh-pwpop::before { display: none; }
   #cShared .bdsh-first { margin: 8px auto; }
 }
+/* Shared with you (batch 27 item 3, ShX X2 and X3): the paste field on top, then one quiet row per board someone shared with you */
+#cShared .bdsh-paste { display: grid; gap: 8px; margin-bottom: 12px; }
+#cShared .bdsh-col > .bdsh-cap { display: block; margin: 12px 0 4px; }
+#cShared .bdsh-pill { display: inline-flex; align-items: center; height: 22px; padding: 0 9px; border-radius: 999px; background: var(--cz-well); font-size: var(--fs-badge); font-weight: var(--fw-strong); color: var(--cz-ink2); flex: none; }
+#cShared .bdsh-pill.w { background: var(--cz-riskbg); color: var(--cz-risk); }

package/workspace/public/pm/bd-shared.js

@@ -53,7 +53,7 @@ export function css() {
 }
 
 /** The number of open copies: yours, plus each readable team's, without counting your own twice. */
-export function totalOf(S) { return rowsOf(S).filter((r) => !r.ended).length; }
+export function totalOf(S) { return rowsOf(S).filter((r) => !r.ended).length + (S.withYou || []).filter((r) => r.state === 'open').length; }
 
 function rowsOf(S, now = S.now || Date.now()) {
   const mine = new Set((S.yours || []).map((l) => l.id));
@@ -113,34 +113,70 @@ function firstRun(S) {
     + `<div class="bdsh-form">${joinForm(J)}</div><p class="bdsh-meta bdsh-fine">${svg(I.lock, 14)} Kept on this computer only.</p></div>`;
 }
 
+/** The paste field (batch 27 item 3, ShX X2): a board someone shared with you is kept here. Its password is asked once, when the board needs one. */
+function pasteHtml(S) {
+  const A = S.add || {};
+  const go = ib('plus', A.busy ? 'Adding…' : 'Add this board', `data-sh="add"${A.busy ? ' disabled' : ''}`, 's pri');
+  return `<div class="bdsh-paste"><div class="bdsh-fld${A.err ? ' bad' : ''}">${svg(I.link, 18)}${field('shLink', 'Paste a shared board link', A.link)}${A.needPw ? '' : go}</div>`
+    + (A.needPw ? `<div class="bdsh-fld">${svg(I.lock, 18)}${field('shLinkPw', 'The board\'s password', '', 'password')}${go}</div>` : '')
+    + (A.err ? `<p class="bdsh-err" role="alert"><i class="cz-dot red"></i>${esc(A.err)}</p>` : '') + '</div>';
+}
+
+const RSTATE = { ended: ['Ended', ''], off: ['Off', ''], password: ['Password', 'w'], locked: ['Locked', 'w'], unreachable: ['Not read', ''] };
+/** One board shared with you (ShX X2, X3). Healthy: its name opens it, the meta says who and when it ends, nothing more (zero is silence).
+ *  Ended, turned off or a new password: one quiet line with the reason and an ✕ that forgets it. */
+function recvCard(S, r) {
+  const now = S.now || Date.now(); const left = r.ends ? Date.parse(r.ends) - now : NaN;
+  const soon = r.state === 'open' && left > 0 && left < 7 * 86400000;
+  const days = Math.max(1, Math.ceil(left / 86400000));
+  const st = RSTATE[r.state];
+  const nm = r.state === 'open' ? `<button type="button" class="bdsh-nm bd-dlink" data-sh-visit="${esc(r.id)}">${esc(r.name || 'Shared board')}</button>`
+    : r.state === 'password' ? `<button type="button" class="bdsh-nm bd-dlink" data-sh-repw="${esc(r.id)}" title="Type the new password">${esc(r.name || 'Shared board')}</button>`
+    : `<span class="bdsh-nm bdsh-plain">${esc(r.name || 'Shared board')}</span>`;
+  const why = r.state === 'ended' ? 'ended ' + day(r.ends) : r.state === 'off' ? 'turned off' + (r.by ? ' by ' + r.by : '') : r.state === 'password' ? 'Needs a new password' : r.error || '';
+  const meta = `<span class="bdsh-meta">${[r.state === 'open' || r.state === 'ended' || r.state === 'off' ? r.by : '', r.state === 'open' && r.ends ? 'ends ' + day(r.ends) : why].filter(Boolean).map(esc).join(' · ')}</span>`;
+  const pill = st ? `<span class="bdsh-pill${st[1] ? ' ' + st[1] : ''}">${esc(st[0])}</span>` : soon ? `<span class="bdsh-pill w">Ends in ${days} ${days === 1 ? 'day' : 'days'}</span>` : '';
+  const act = r.state === 'open' ? ib('open', 'Open in a new tab', `data-sh-visit="${esc(r.id)}"`, 'gh') : ib('x', 'Forget this board', `data-sh-forget="${esc(r.id)}"`, 's gh');
+  return `<div class="bdsh-card${r.state === 'open' ? '' : ' bdsh-gone'}" data-sh-recv="${esc(r.id)}"><span class="bdsh-tile" aria-hidden="true">${svg(I.board)}</span>`
+    + `<div class="bdsh-txt">${nm}${meta}</div>${pill}<span class="bdsh-act${r.state === 'open' ? ' open' : ''}">${act}</span></div>`;
+}
+function withYouHtml(S) {
+  const W = S.withYou || []; if (!W.length) return '';
+  const order = { open: 0, password: 1, locked: 1, unreachable: 2, off: 3, ended: 3 };
+  return `<span class="bdsh-cap">Shared with you</span><div class="bdsh-list" role="list" aria-label="Shared with you">${W.slice().sort((a, b) => (order[a.state] || 0) - (order[b.state] || 0)).map((r) => recvCard(S, r)).join('')}</div>`;
+}
+
 /** The tab's inside. S = { phase, yours, teams:[{team,host,ok,links|kind,error}], names, readAt, now, sel, join, off, leave, pw, endedOpen } */
 export function viewHtml(S) {
   if (S.phase === 'loading') return '<p class="bdsh-meta bdsh-pad">Reading the teams…</p>';
   const teams = S.teams || []; const rows = rowsOf(S);
-  if (!teams.length && !(S.yours || []).length) return `<div class="bdsh-col">${firstRun(S)}</div>`;
+  const W = S.withYou || [];
+  if (!teams.length && !(S.yours || []).length && !W.length) return `<div class="bdsh-col">${pasteHtml(S)}${firstRun(S)}</div>`;
   const count = (f) => rows.filter((r) => !r.ended && f(r)).length;
-  const sel = S.sel === 'mine' && (S.yours || []).length ? 'mine' : teams.some((t) => t.team === S.sel) ? S.sel : 'all';
+  const sel = S.sel === 'mine' && (S.yours || []).length ? 'mine' : S.sel === 'with' && W.length ? 'with' : teams.some((t) => t.team === S.sel) ? S.sel : 'all';
   const chip = (k, label, n) => `<button type="button" class="bd-chip bdsh-chip${sel === k ? ' on' : ''}" data-sh-sel="${esc(k)}" aria-pressed="${sel === k}">${esc(label)}${n ? ' ' + n : ''}</button>`;
   const J = S.join || {};
   const plus = `<span class="bdsh-plusw">${ib('plus', 'Join a team', `data-sh="${J.open ? 'closejoin' : 'openjoin'}" aria-haspopup="dialog" aria-expanded="${!!J.open}"`, 's plus')}`
     + (J.open ? `<div class="bdsh-pop bdsh-joinpop" role="dialog" aria-label="Join a team"><div class="bdsh-ph"><b>Join a team</b>${ib('x', 'Close', 'data-sh="closejoin"', 's gh')}</div>${joinForm(J)}<p class="bdsh-meta bdsh-fine">${svg(I.lock, 14)} Kept on this computer only.</p></div>` : '') + '</span>';
-  const chipsHtml = chip('all', 'All', count(() => true)) + ((S.yours || []).length ? chip('mine', 'Yours', count((r) => r.mine)) : '') + teams.map((t) => chip(t.team, t.team, t.ok ? count((r) => r.team === t.team) : 0)).join('') + plus;
+  const openW = W.filter((r) => r.state === 'open').length;
+  const chipsHtml = chip('all', 'All', count(() => true) + openW) + (W.length ? chip('with', 'With you', openW) : '') + ((S.yours || []).length ? chip('mine', 'Yours', count((r) => r.mine)) : '') + teams.map((t) => chip(t.team, t.team, t.ok ? count((r) => r.team === t.team) : 0)).join('') + plus;
   const failing = teams.filter((t) => !t.ok && (sel === 'all' || sel === t.team));
   const banners = failing.map((t) => `<div class="bdsh-ban" role="alert"><i class="cz-dot red"></i><span class="bdsh-bt"><b>${esc(t.team)}</b> cannot be read. ${esc(t.error)}</span>`
     + (t.kind === 'password' ? ib('key', 'Paste a new invite link', `data-sh="repaste" data-sh-team="${esc(t.team)}"`, 's') : ib('refresh', 'Refresh', `data-sh="refresh" data-sh-team="${esc(t.team)}"`, 's')) + '</div>').join('');
-  const shown = rows.filter((r) => (sel === 'all' ? true : sel === 'mine' ? r.mine : r.team === sel)).sort((a, b) => (b.mine ? 1 : 0) - (a.mine ? 1 : 0) || String(b.made).localeCompare(String(a.made)));
+  const shown = rows.filter((r) => (sel === 'all' ? true : sel === 'with' ? false : sel === 'mine' ? r.mine : r.team === sel)).sort((a, b) => (b.mine ? 1 : 0) - (a.mine ? 1 : 0) || String(b.made).localeCompare(String(a.made)));
   const live = shown.filter((r) => !r.ended); const ended = shown.filter((r) => r.ended);
   const teamSel = teams.find((t) => t.team === sel);
   const leaving = teamSel && S.leave === teamSel.team;
   const teamLine = teamSel ? `<div class="bdsh-tl"><span class="bdsh-meta">${leaving ? 'Leave ' + esc(teamSel.team) + '? It only forgets the team\'s password on this computer. Copies you published stay.' : esc(teamSel.team)}</span>`
     + (leaving ? ib('x', 'Stay in the team', 'data-sh="stay"', 's gh') + ib('leave', 'Sure, leave ' + teamSel.team, `data-sh-leave="${esc(teamSel.team)}"`, 's danger')
       : ib('key', 'Paste a new invite link', `data-sh="repaste" data-sh-team="${esc(teamSel.team)}"`, 's gh') + ib('leave', 'Leave team', `data-sh-leave="${esc(teamSel.team)}"`, 's gh')) + '</div>' : '';
-  const empty = !live.length && !ended.length && !failing.length ? `<p class="bdsh-meta bdsh-pad">${sel === 'all' ? 'Nothing is shared yet.' : sel === 'mine' ? 'You have no open links.' : 'Nobody has shared a board with ' + esc(sel) + ' yet. Press the share button on the Board to publish one.'}</p>` : '';
+  const withYou = sel === 'all' || sel === 'with' ? withYouHtml(S) : '';
+  const empty = !live.length && !ended.length && !failing.length && !withYou ? `<p class="bdsh-meta bdsh-pad">${sel === 'all' ? 'Nothing is shared yet.' : sel === 'mine' ? 'You have no open links.' : 'Nobody has shared a board with ' + esc(sel) + ' yet. Press the share button on the Board to publish one.'}</p>` : '';
   const fold = ended.length ? `<button type="button" class="bdsh-fold" data-sh="ended" aria-expanded="${!!S.endedOpen}">${svg(I.more, 16)}<span>${ended.length} ended</span></button>` + (S.endedOpen ? ended.map((r) => card(S, r)).join('') : '') : '';
   const hosts = [...new Set(teams.filter((t) => t.ok).map((t) => t.host))];
   const readLine = S.readAt ? `<p class="bdsh-meta bdsh-read"><i class="cz-dot ok"></i><span>Read${hosts.length ? ' from ' + hosts.map(esc).join(', ') : ''} ${agoText(S)}. Press a board to open its copy in a new tab.</span>${ib('refresh', 'Refresh', 'data-sh="refresh"', 's gh')}</p>` : '';
-  return `<div class="bdsh-col"><div class="bdsh-top" role="group" aria-label="Shared">${chipsHtml}</div>` + banners + teamLine
-    + (live.length ? `<div class="bdsh-list" role="list" aria-label="Shared boards">${live.map((r) => card(S, r)).join('')}</div>` : '') + fold + empty + readLine + '</div>';
+  return `<div class="bdsh-col">${pasteHtml(S)}<div class="bdsh-top" role="group" aria-label="Shared">${chipsHtml}</div>` + banners + teamLine + withYou
+    + (live.length && withYou ? '<span class="bdsh-cap">Boards</span>' : '') + (live.length ? `<div class="bdsh-list" role="list" aria-label="Shared boards">${live.map((r) => card(S, r)).join('')}</div>` : '') + fold + empty + readLine + '</div>';
 }
 
 export async function loadCount(cb) {
@@ -157,18 +193,21 @@ function toast(msg) {
 
 export function show(el, opts = {}) {
   css();
-  const S = el.__sh || (el.__sh = { phase: 'loading', yours: [], teams: [], names: [], readAt: '', now: Date.now(), sel: 'all', join: { open: false, typed: false }, off: null, leave: null, pw: null, endedOpen: false });
+  if (opts.paste && el.__sh) el.__sh.add = { link: opts.paste };
+  const S = el.__sh || (el.__sh = { phase: 'loading', withYou: [], add: {}, yours: [], teams: [], names: [], readAt: '', now: Date.now(), sel: 'all', join: { open: false, typed: false }, off: null, leave: null, pw: null, endedOpen: false });
   const draw = (focus) => {
     const keep = { invite: el.querySelector('#shInvite'), host: el.querySelector('#shHost'), team: el.querySelector('#shTeam'), pass: el.querySelector('#shPass') };
+    const lk = el.querySelector('#shLink'); if (lk) S.add.link = lk.value;
     if (keep.invite) S.join.invite = keep.invite.value; if (keep.host) S.join.host = keep.host.value; if (keep.team) S.join.team = keep.team.value; if (keep.pass) S.join.password = keep.pass.value;
     el.innerHTML = '<h2 class="vh">Shared</h2><div id="shBody">' + viewHtml(S) + '</div>';
     const f = focus && el.querySelector(focus); if (f) f.focus();
   };
+  if (opts.paste && !S.add.link) S.add = { link: opts.paste };
   const read = async (keepPhase) => {
     if (!keepPhase) { S.phase = 'loading'; draw(); }
     const r = await pmGet('/api/board-publish/shared').catch(() => null);
     S.phase = 'ready'; S.now = Date.now();
-    if (r && r.ok) { S.yours = r.yours || []; S.teams = r.teams || []; S.names = S.teams.map((t) => t.team); S.readAt = r.readAt; } else toast((r && r.error) || 'The workspace did not answer. Try again.');
+    if (r && r.ok) { S.yours = r.yours || []; S.withYou = r.withYou || []; S.teams = r.teams || []; S.names = S.teams.map((t) => t.team); S.readAt = r.readAt; } else toast((r && r.error) || 'The workspace did not answer. Try again.');
     if (opts.onCount) opts.onCount(totalOf(S)); draw();
   };
   if (!el.__shBound) {
@@ -183,6 +222,14 @@ export function show(el, opts = {}) {
       const b = e.target.closest('button'); if (!b) return;
       if (b.dataset.shSel) { S.sel = b.dataset.shSel; S.leave = null; S.off = null; S.pw = null; return draw(`[data-sh-sel="${CSS.escape(S.sel)}"]`); }
       const a = b.dataset.sh;
+      if (a === 'add') {
+        const link = ((el.querySelector('#shLink') || {}).value || '').trim(); const pwEl = el.querySelector('#shLinkPw');
+        S.add = Object.assign({}, S.add, { link, busy: true, err: '' }); draw();
+        const r = await pmPost('/api/board-publish/receive', { link, password: pwEl ? pwEl.value : undefined }).catch(() => null); S.add.busy = false;
+        if (r && r.ok) { S.add = {}; S.sel = 'all'; toast('Added ' + ((r.board && r.board.name) || 'the board') + '. Its password stays on this computer.'); return read(true); }
+        if (r && r.kind === 'password') { S.add.needPw = true; S.add.err = r.error; return draw('#shLinkPw'); }
+        S.add.err = (r && r.error) || 'The workspace did not answer. Try again.'; return draw('#shLink');
+      }
       if (a === 'refresh') { S.leave = null; S.pw = null; return read(false); }
       if (a === 'openjoin') { S.join = { open: true, typed: false }; return draw('#shInvite'); }
       if (a === 'closejoin') { S.join = { open: false, typed: false }; return draw('.bdsh-ib.plus'); }
@@ -229,6 +276,21 @@ export function show(el, opts = {}) {
         const r = await pmPost('/api/board-publish/off', { id: S.off }).catch(() => null); S.off = null;
         toast(r && r.ok ? 'Turned off. The copy is deleted from the host.' : (r && r.error) || 'The link could not be turned off.'); return read(true);
       }
+      if (b.dataset.shForget) {
+        const r = await pmPost('/api/board-publish/forget', { id: b.dataset.shForget }).catch(() => null);
+        toast(r && r.ok ? 'Forgotten on this computer.' : (r && r.error) || 'Not saved.'); return read(true);
+      }
+      if (b.dataset.shRepw) {
+        const row = (S.withYou || []).find((x) => x.id === b.dataset.shRepw);
+        S.add = { link: row ? row.url : '', needPw: true, err: '' }; return draw('#shLinkPw');
+      }
+      if (b.dataset.shVisit) {
+        const w = window.open('about:blank', '_blank'); if (w) { try { w.opener = null; } catch { /* none */ } }
+        const row = (S.withYou || []).find((x) => x.id === b.dataset.shVisit);
+        const r = await pmPost('/api/board-publish/visit', { id: b.dataset.shVisit }).catch(() => null);
+        if (r && r.ok && w) { w.location.href = r.url; toast('Opened ' + ((row && row.name) || 'the board') + ' in a new tab.'); } else { if (w) w.close(); toast((r && r.error) || 'The workspace did not answer. Try again.'); if (r && r.kind) read(true); }
+        return;
+      }
       if (b.dataset.shOpen) {
         // the tab is opened by the press itself (a popup blocker allows that), then pointed at the one-time address
         const w = window.open('about:blank', '_blank'); if (w) { try { w.opener = null; } catch { /* none */ } }

package/workspace/public/pm/chat-term.js

@@ -10,3 +10,25 @@ export function termTarget({ live = null, command = null, ws = null } = {}) {
   if (command && typeof command === 'string') return { copy: command, label: 'Copy the terminal command' };
   return null;
 }
+
+/* What the terminal answers by itself (batch 27 item 5, Wawan 2026-11-04: "When open terminal, the response starts in terminal and never comes
+ * back to the chat"). Attaching replays the session's screen into xterm.js, and xterm.js answers every query in it: device attributes, mode
+ * reports, the cursor position, colours, focus in and out. Sent on as input, those answers reached Claude Code as a burst of keys, which it
+ * reads as a paste in its input box ("paste again to expand"), under whatever the chat typed next. The session's terminal is tmux, which has
+ * answered those queries already, so they are not the PM's keys and none of them goes to the session. */
+const AUTO = [
+  /\x1b\[[?>=]?[\d;]*c/g,             // device attributes (DA1, DA2, DA3)
+  /\x1b\[\??[\d;]*\$y/g,              // a mode report (DECRQM)
+  /\x1b\[\d+;\d+R/g,                  // the cursor position (DSR 6)
+  /\x1b\[[0-3]n/g,                    // the terminal status (DSR 5)
+  /\x1b\[\?\d*u/g,                    // the keyboard protocol flags
+  /\x1b\[[IO]/g,                      // focus in and out
+  /\x1b\][\s\S]*?(?:\x07|\x1b\\)/g,   // an OSC answer (a colour, the title)
+  /\x1bP[\s\S]*?\x1b\\/g,             // a DCS answer (DECRQSS, XTGETTCAP)
+];
+/** The part of xterm.js data the PM typed: d with the terminal's own answers taken out ('' when nothing is left). */
+export function typedOnly(d) {
+  let s = String(d == null ? '' : d);
+  for (const re of AUTO) s = s.replace(re, '');
+  return s;
+}

package/workspace/public/pm/cozy-board.css

@@ -1475,6 +1475,16 @@ span.tg-ng { cursor: default; }
 .ro [hidden] { display: none !important; }
 .ro-by { margin: 14px 18px 0; font-size: var(--fs-meta); color: var(--cz-ink3); line-height: var(--lh-meta); }
 .ro-by b { color: var(--cz-ink); font-weight: var(--fw-strong); }
+/* the shared-by line ends with two quiet icons, Open in my PMOS and Get PMOS; the tabs of a link of several picks sit under it (batch 27 items 1 to 3) */
+.ro-by { display: flex; align-items: center; gap: 8px; }
+.ro-by .ro-txt { flex: 1; min-width: 0; }
+.ro-ways { display: inline-flex; gap: 4px; flex: none; }
+.ro-way { width: 36px; height: 36px; border-radius: 50%; display: inline-flex; align-items: center; justify-content: center; color: var(--cz-ink2); background: var(--cz-well); }
+.ro-way:hover { color: var(--cz-ink); }
+.ro-way:focus-visible, .ro-tab:focus-visible { outline: 2px solid var(--cz-blue); outline-offset: 2px; }
+.ro-tabs { display: flex; flex-wrap: wrap; gap: 6px; margin: 10px 18px 0; }
+.ro-tab { height: 34px; padding: 0 14px; border-radius: 999px; display: inline-flex; align-items: center; font-size: var(--fs-label); font-weight: var(--fw-strong); color: var(--cz-ink3); text-decoration: none; }
+.ro-tab.on { background: var(--cz-well); color: var(--cz-ink); }
 .ro-back { color: inherit; font-weight: var(--fw-strong); text-decoration: none; }
 .ro-back:hover { text-decoration: underline; }
 /* with a viewer open the Timeline keeps the initiative's name: no Stage, Status, Start or Next milestone */

package/workspace/public/pm/cozy-home.css

@@ -486,6 +486,9 @@ form.hm-box textarea { min-height: 48px; border: 0; background: none; resize: no
 .hv-xt { height: 100%; box-sizing: border-box; padding: 12px 16px; overflow: auto; background: var(--cz-well); }   /* term-view.js: the session's terminal drawn by xterm.js, read only */
 .hv-xt .xterm { display: inline-block; zoom: .8; }   /* xterm's 15px default drawn at 12px */
 .hv-xt .xterm-viewport { background: transparent !important; }
+/* the live terminal fills the whole card and fits its grid to it (term-view.js, batch 27 item 6): xterm's own type size and no zoom, so the fit measures true (as the sign-in terminal) */
+.hv-xt.hv-xt-live { overflow: hidden; padding: 10px 12px; }
+.hv-xt.hv-xt-live .xterm { display: block; zoom: 1; width: 100%; height: 100%; }
 
 /* ── the parts other chat modules draw inside a message: context and report chips (premium-vw-ctx, report-chat), the /goal card (goal-chat),
  *    Claude's question card (chat-ask), attachments (premium-attach) ── */

package/workspace/public/pm/home-chat.js

@@ -103,6 +103,9 @@ export function mountChat(el, host) {
       else if (th && th.ok && th.history && (th.history.messages || []).length) conv = { ok: true, state: 'ended', messages: th.history.messages };
     } else if (t.sid) conv = await host.pmGet('/api/sessions/conversation?id=' + encodeURIComponent(t.sid)).catch(() => null);
     if (my !== C.seq || C.t !== t) return;
+    // the next read is set before anything is drawn, so a drawing error never stops the chat reading (batch 27 item 5: answers stopped
+    // reaching the chat for good after the terminal opened); a later read() clears it and sets its own
+    clearTimeout(C.timer); C.timer = setTimeout(read, POLL);
     C.th = th && th.ok ? th : null; C.conv = conv && conv.ok ? conv : null;
     if (host.touch && sid() && C.touched !== sid()) { C.touched = sid(); host.touch(C.touched); }   // the Live pill: the PM opened it now
     C.sess = host.session ? host.session(t.sid || (C.th && C.th.session)) : null;

package/workspace/public/pm/premium-board.js

@@ -899,12 +899,13 @@ $('#bdBell').addEventListener('click', (e) => { if (M) Acts.open.bell(e.currentT
 $('#bdPublish').addEventListener('click', (e) => { const btn = e.currentTarget; if (M && !ALL && M.board.ws) import('./bd-publish.js').then((P) => P.open(btn, { ws: M.board.ws, board: M.board.id || M.board.ws, view })); });
 
 /* ── tabs: Initiatives and Documents (Documents has no frame yet: a plain list) ──────────────────────────────────────────────────────── */
+let SH_PASTE = '';                // ?shared=<link>: Open in my PMOS on a shared board (batch 27 item 3) lands on Shared with the link in the paste field
 function setTab(t) {
   tab = t;
   $('#tabIni').setAttribute('aria-selected', String(t === 'ini')); $('#tabShared').setAttribute('aria-selected', String(t === 'shared'));
   $('#cIni').hidden = t !== 'ini'; $('#cShared').hidden = t !== 'shared';
   // Shared (initiative board-publish, slice 4): reads each joined team's host now, on opening the tab and on Refresh, and never in between
-  if (t === 'shared') { closePanel(); import('./bd-shared.js').then((S) => { SH_FULL = true; S.show($('#cShared'), { onCount: setSharedCount }); }); }
+  if (t === 'shared') { closePanel(); import('./bd-shared.js').then((S) => { SH_FULL = true; const paste = SH_PASTE; SH_PASTE = ''; S.show($('#cShared'), { onCount: setSharedCount, paste }); }); }
 }
 $('#tabIni').onclick = () => setTab('ini');
 $('#tabShared').onclick = () => setTab('shared');
@@ -1219,6 +1220,11 @@ PO.mount({ programs: () => PGS, stateOf: (p) => progState(p), say,
 SO.mount({ redraw: () => { if (M) drawInit(); }, say });
 SO.load().then(() => { if (M) drawInit(); });   // the PM's sort and own order (look.order), shared with Home
 PP.mount({ M: () => M, programs: () => PGS, openIni: (id, from) => openIni((M.rows || []).find((x) => x.id === id && x.track), from), close: closePanel, reload: loadPrograms, say });   // the program panel (PgProgram)
-setTab('ini');
+// Open in my PMOS (batch 27 item 3): the link fills the paste field and nothing is added before the PM presses +; the address forgets it at once
+if (Q0.get('shared') && !window.PMOS_READONLY) {
+  SH_PASTE = String(Q0.get('shared')).slice(0, 400);
+  try { const q = new URLSearchParams(location.search); q.delete('shared'); const s2 = q.toString(); history.replaceState(null, '', location.pathname + (s2 ? '?' + s2 : '')); } catch { /* none */ }
+  setTab('shared');
+} else setTab('ini');
 load();
 loadPrograms();

package/workspace/public/pm/premium-shell.js

@@ -596,7 +596,8 @@ export async function loadThread(key) {
   const ws = new URLSearchParams(location.search).get('ws');
   let th = null;
   try { const r = await fetch('/api/briefing-premium/thread?key=' + encodeURIComponent(key) + (ws ? '&ws=' + encodeURIComponent(ws) : ''), { credentials: 'same-origin' }); if (r.ok) th = await r.json(); } catch { th = null; }
-  if (!th || !th.ok) return;
+  // one read that failed (the server busy, a dropped connection) tries again, so the open chat never stops taking answers (batch 27 item 5)
+  if (!th || !th.ok) { if (S.key === key && $('#dlg').classList.contains('on')) threadTimer = setTimeout(() => loadThread(key), 4000); return; }
   let conv = null;
   if (th.session) conv = await pmGet('/api/sessions/conversation?id=' + encodeURIComponent(th.session)).catch(() => null);
   else if (th.history && (th.history.messages || []).length) conv = { ok: true, state: 'ended', messages: th.history.messages };   // item-chat-history

package/workspace/public/pm/readonly-boot.js

@@ -15,8 +15,11 @@
   window.PMOS_READONLY = pack;
   var R = pack.responses;
   if (!q.get('ws')) {
+    // a pack of several picks (batch 27 item 1) opens on its first tab, a program's on its page; else on the pack's one board
+    var t0 = Array.isArray(pack.parts) && pack.parts[0];
     var bk = Object.keys(R).filter(function (k) { return /^\/api\/board-premium\?/.test(k); })[0]; var bm = bk && /ws=([^&]+)&board=([^&]+)/.exec(bk);
-    if (bm) { try { history.replaceState(null, '', location.pathname + '?ws=' + bm[1] + '&board=' + bm[2] + '&pack=' + encodeURIComponent(file)); } catch (e) { /* none */ } }
+    var first = t0 && t0.ws ? '?ws=' + encodeURIComponent(t0.ws) + '&board=' + encodeURIComponent(t0.board || t0.ws) + (t0.program ? '&program=' + encodeURIComponent(t0.program) : '') : bm ? '?ws=' + bm[1] + '&board=' + bm[2] : '';
+    if (first) { try { history.replaceState(null, '', location.pathname + first + '&pack=' + encodeURIComponent(file)); } catch (e) { /* none */ } }
   }
   var norm = function (a) { var l = []; new URLSearchParams(a.search).forEach(function (v, k) { l.push(k + '=' + v); }); l.sort(); return a.pathname + '?' + l.join('&'); };
   var byNorm = {}; Object.keys(R).forEach(function (k) { byNorm[norm(new URL(k, location.href))] = R[k]; });

package/workspace/public/pm/readonly.js

@@ -27,8 +27,8 @@ export const VIEW_CONTROLS = [
   // the one program page (batch 21 item 2, RdProgO): open the program, its tabs, its folds, the period of its goals, an initiative of it
   'button.tg-pgo', 'button.bt-pgo', 'button.bd-lho', '#czViewer .pv-tab', '#czViewer [data-czs-fold]', '#czViewer .pp-nd .tw', '#czViewer [data-pp="ms"]', '#czViewer [data-pp="itasks"]',
   '#czViewer [data-db="fold"]', '#czViewer [data-pp="period"]', '#czViewer [data-pp="per"]', '#czViewer [data-pp="early"]', '#czViewer [data-pp="ini"]',
-  // the line above the Board
-  '.ro-back',
+  // the line above the Board: the way back to the hub, a tab per pick (batch 27 item 1), Open in my PMOS and Get PMOS (batch 27 items 2 and 3)
+  '.ro-back', '.ro-tab', '.ro-way',
 ].join(',');
 
 /** The Board's static toolbar and chips: hidden, so the page's own script keeps the elements it holds. */
@@ -85,13 +85,48 @@ function refuse(e) {
 const esc = (t) => String(t == null ? '' : t).replace(/[&<>"]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' }[c]));
 const KIND = { product: 'Product', program: 'Program', initiative: 'Initiative', multi: 'Selection' };
 
-/** The one line that says what this copy is, and the way back to the team's hub (R8). */
+/** Where the workspace runs on a viewer's own computer (its default address): Open in my PMOS goes there with the link, never the password. */
+export const MY_PMOS = 'http://127.0.0.1:7433/premium-board';
+export const GET_PMOS = 'https://pm-os.app/welcome';
+const GO = '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M10 7l5 5-5 5M4 12h11M20 4v16"/></svg>';
+const GET = '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 4v11M7.5 10.5L12 15l4.5-4.5M5 19h14"/></svg>';
+
+/** The link a teammate was sent, when this page is a copy on the host (/b/<id>/pack.json). A preview in the publisher's own workspace has none. */
+export function linkOf(loc) {
+  const pk = new URLSearchParams(loc.search).get('pack') || ''; const m = /^\/b\/([A-Za-z0-9_-]+)\/pack\.json$/.exec(pk);
+  return m ? loc.origin + '/b/' + m[1] : '';
+}
+
+/** The tabs of a pack of several picks (batch 27 item 1, ShA): one per pick, in pick order; one pick draws none (zero is silence).
+ *  A tab is a link to the same copy on another board (a program's tab opens its page): the page reads the pack again, from the browser's cache. */
+export function tabsHtml(pack, loc) {
+  const parts = (pack && Array.isArray(pack.parts) ? pack.parts : []).filter((t) => t && t.ws);
+  if (parts.length < 2) return '';
+  const q = new URLSearchParams(loc.search); const ws = q.get('ws') || parts[0].ws; const prog = q.get('program') || '';
+  const exact = parts.findIndex((t) => t.ws === ws && (t.program || '') === prog);
+  const on = exact >= 0 ? exact : parts.findIndex((t) => t.ws === ws);
+  const pk = q.get('pack') || '';
+  return '<nav class="ro-tabs" aria-label="Boards in this link">' + parts.map((t, i) => {
+    const href = '?ws=' + encodeURIComponent(t.ws) + '&board=' + encodeURIComponent(t.board || t.ws) + (t.program ? '&program=' + encodeURIComponent(t.program) : '') + '&pack=' + encodeURIComponent(pk);
+    return '<a class="ro-tab' + (i === on ? ' on' : '') + '" href="' + esc(href) + '"' + (i === on ? ' aria-current="page"' : '') + '>' + esc(t.label) + '</a>';
+  }).join('') + '</nav>';
+}
+
+/** The two quiet icons at the end of the line (batch 27 items 2 and 3, ShX X1): Open in my PMOS (for a viewer who runs it) and Get PMOS. */
+export function waysHtml(link) {
+  return (link ? '<a class="ro-way" href="' + esc(MY_PMOS + '?shared=' + encodeURIComponent(link)) + '" target="_blank" rel="noopener noreferrer" aria-label="Open in my PMOS" title="Open in my PMOS (if you have it)">' + GO + '</a>' : '')
+    + '<a class="ro-way" href="' + GET_PMOS + '" target="_blank" rel="noopener" aria-label="Get PMOS" title="Get PMOS for yourself">' + GET + '</a>';
+}
+
+/** The one line that says what this copy is, the way back to the team's hub (R8), and back to PMOS; then the tabs when the link holds several. */
 function banner() {
   const main = document.getElementById('stage'); if (!main || !PACK || document.querySelector('.ro-by')) return;
   const s = PACK.scope || {}; const d = document.createElement('div'); d.className = 'ro-by';
-  d.innerHTML = (PACK.hub ? '<a class="ro-back" href="' + esc(PACK.hub) + '">← Shared boards</a> · ' : '') + '<b>' + esc(s.label) + '</b> · ' + esc(KIND[s.kind] || '') + ' · a read-only copy of ' + esc(PACK.at)
-    + ' · shared by ' + esc(PACK.by) + ' · the link ends ' + esc(PACK.ends);
+  d.innerHTML = '<span class="ro-txt">' + (PACK.hub ? '<a class="ro-back" href="' + esc(PACK.hub) + '">← Shared boards</a> · ' : '') + '<b>' + esc(s.label) + '</b> · ' + esc(KIND[s.kind] || '') + ' · a read-only copy of ' + esc(PACK.at)
+    + ' · shared by ' + esc(PACK.by) + ' · the link ends ' + esc(PACK.ends) + '</span><span class="ro-ways">' + waysHtml(linkOf(location)) + '</span>';
   main.insertBefore(d, main.firstChild);
+  const tabs = tabsHtml(PACK, location);
+  if (tabs) d.insertAdjacentHTML('afterend', tabs);
 }
 
 function start() {

package/workspace/public/pm/term-view.js

@@ -4,13 +4,28 @@
  *   to the session over the page's WebSocket, as the sign-in terminal does (cozy-claude-setup.js signInTerminal), so keys typed in it reach the
  *   session — a first-run prompt, a pasted sign-in code, an answer to Claude. Before, it was read only, and a new user whose Claude stopped at its
  *   theme or trust-this-folder screen could not answer it.
+ *   It fills the whole card and fits its grid to it, again whenever the card or the window changes size (batch 27 item 6), and only the keys
+ *   the PM types reach the session: xterm.js's own answers to the queries in the replayed screen do not (chat-term.js typedOnly, item 5).
  *   An ENDED session, or a page where the socket cannot attach, keeps the read-only view: GET /api/sessions/transcript?id=<sid>&raw=1 every 2 s,
  *   drawn in xterm.js the size of the session's own, after the first read only what was printed since (since + gen). When xterm.js cannot load,
  *   it falls back to the plain text (GET …&max=12000, ANSI taken out). */
 import { open, current, setKind } from './cozy-viewer.js';
 import { pmGet, pageNonce } from './http.js';
+import { typedOnly } from './chat-term.js';
 
-let xtermP = null;
+let xtermP = null, fitP = null;
+/** window.FitAddon from /vendor/addon-fit.js, loaded once. Resolves null when it cannot load: the live terminal then keeps the session's grid. */
+function loadFit() {
+  if (window.FitAddon) return Promise.resolve(window.FitAddon);
+  if (fitP) return fitP;
+  fitP = new Promise((done) => {
+    const s = document.createElement('script'); s.src = '/vendor/addon-fit.js';
+    s.onload = () => done(window.FitAddon || null);
+    s.onerror = () => { fitP = null; done(null); };
+    document.head.appendChild(s);
+  });
+  return fitP;
+}
 /** window.Terminal from /vendor/xterm.js, loaded once with its stylesheet. Resolves null when it cannot load. */
 function loadXterm() {
   if (window.Terminal) return Promise.resolve(window.Terminal);
@@ -39,14 +54,15 @@ function look(el) {
 
 /** The live terminal: attach over the WebSocket and send what the PM types. Resolves true when it attached to a running session,
  * false when the session has ended or the socket did not answer (the caller then shows the read-only view). */
-function attachLive(Terminal, body, sid, live, keep) {
+function attachLive(Terminal, Fit, body, sid, live, keep) {
   return new Promise((done) => {
+    let ro = null;
     let sock;
     try { sock = new WebSocket((location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + '/?pmos-nonce=' + encodeURIComponent(pageNonce())); } catch { done(false); return; }
     const send = (d) => { if (sock.readyState === WebSocket.OPEN) sock.send(JSON.stringify(d)); };
     let term = null, settled = false;
     const settle = (v) => { if (!settled) { settled = true; clearTimeout(t); done(v); } };
-    const close = () => { try { send({ t: 'detach', id: sid }); sock.close(); } catch { /* gone */ } if (term) { try { term.dispose(); } catch { /* gone */ } term = null; } };
+    const close = () => { if (ro) { ro.disconnect(); ro = null; } try { send({ t: 'detach', id: sid }); sock.close(); } catch { /* gone */ } if (term) { try { term.dispose(); } catch { /* gone */ } term = null; } };
     const t = setTimeout(() => { close(); settle(false); }, 1500);   // a session the server does not know never answers
     sock.addEventListener('open', () => send({ t: 'attach', id: sid }));
     sock.addEventListener('error', () => { close(); settle(false); });
@@ -60,14 +76,29 @@ function attachLive(Terminal, body, sid, live, keep) {
         term = new Terminal({ cols: m.cols || 80, rows: m.rows || 24, cursorBlink: true, scrollback: 5000, fontFamily: L.fontFamily, lineHeight: 1.25, theme: { ...L.theme, cursor: L.theme.foreground } });
         term.open(host);
         if (m.buf) term.write(m.buf, () => term && term.scrollToBottom());
-        term.onData((d) => send({ t: 'input', id: sid, data: d }));
-        // drawn at the session's own grid (as the read-only view is), so opening the card never reflows a running agent
+        // only the keys the PM types reach the session: the terminal's own answers to the queries in the replayed screen stay here (chat-term.js typedOnly)
+        term.onData((d) => { const k = typedOnly(d); if (k) send({ t: 'input', id: sid, data: k }); });
+        // the terminal fills the whole card and fits its lines to it, again on every resize (batch 27 item 6, Wawan 2026-11-04: "Terminal
+        // should occupy the whole width and height"). The session has one grid, so the agent redraws at the card's size.
+        if (Fit) {
+          const fit = new Fit.FitAddon(); term.loadAddon(fit);
+          let t0 = null, sent = { cols: term.cols, rows: term.rows };
+          const refit = () => {
+            if (!term || !host.isConnected) return;
+            try { fit.fit(); } catch { return; }
+            if (term.cols !== sent.cols || term.rows !== sent.rows) { sent = { cols: term.cols, rows: term.rows }; send({ t: 'resize', id: sid, cols: term.cols, rows: term.rows }); }
+          };
+          refit();
+          ro = new ResizeObserver(() => { clearTimeout(t0); t0 = setTimeout(refit, 80); });
+          ro.observe(host);
+        }
         keep(close);
         term.focus();
         settle(true);
       }
       if (m.t === 'data' && m.id === sid && term) { const b = term.buffer.active, atEnd = b.viewportY >= b.baseY; term.write(m.data, () => { if (atEnd && term) term.scrollToBottom(); }); }
-      if (m.t === 'size' && m.id === sid && term) { try { term.resize(m.cols, m.rows); } catch { /* keep */ } }
+      // another screen resized the session: this card takes the size back at its next fit (a resize of the card or the window)
+      if (m.t === 'size' && m.id === sid && term && !ro) { try { term.resize(m.cols, m.rows); } catch { /* keep */ } }
       if (m.t === 'error' && !term) { close(); settle(false); }
     });
   });
@@ -117,9 +148,9 @@ export function openTermView(sid, o = {}) {
   };
 
   (async () => {
-    const Terminal = await loadXterm();
+    const [Terminal, Fit] = await Promise.all([loadXterm(), loadFit()]);
     if (!Terminal) plain = true;
-    else if (await attachLive(Terminal, body, sid, live, (c) => { closeLive = c; })) return;   // a running session: the real terminal
+    else if (await attachLive(Terminal, Fit, body, sid, live, (c) => { closeLive = c; })) return;   // a running session: the real terminal
     if (!live()) return;
     // an ended session (or no socket): the read-only view, and the card says so
     setKind(id, 'Terminal · read only');