meta-sovereign 0.53.1 → 0.53.2

package/README.md

@@ -61,7 +61,7 @@ The hosted app is the default UI: `serve` prints its address, <https://link-foun
 
 On macOS, interactive `serve` now handles the full setup: it protects this installation’s TLS key with Secure Enclave, detects existing certificate trust, requests trust only when needed, and opens the GitHub Pages app. For a headless launch use `node js/bin/meta-sovereign.js serve --trust=true --open=true`. `--trust=false` and `--open=false` opt out. The Swift helper needs the macOS Command Line Tools; `--hardware-key=false` explicitly opts into a file key on unsupported Macs. Hardware protection applies to the key on disk; Node uses it in memory. See [local server setup and security](docs/LOCAL-SERVER-SECURITY.md) for the exact access rules and limits.
 
-Open conversations load first and show loading or retry status until their history is ready. Earlier history loads automatically on scroll in Chat and Operator. Message selection and menus work across the full row; unread cards use refreshed Telegram counters and retain cached data during connection failures. All / Private / Groups / Channels filters remain available inside every Telegram folder. Drag the vertical dividers to resize columns; widths are remembered. Calls is in the main menu after Chat, and Telegram account editing is under Profile. The default dark controls use white line icons. The JS server keeps its store under your OS user: `~/Library/Application Support/Meta Sovereign/store` on macOS, `%APPDATA%/Meta Sovereign/store` on Windows, and `${XDG_CONFIG_HOME:-~/.config}/Meta Sovereign/store` on Linux. Starting `serve` from an older checkout migrates its `.meta-sovereign` store once, preserving messages, contacts, sessions, media and certificate; a compatibility link preserves old paths. Restarts and a different working directory reuse the same store. `--store` or `META_SOVEREIGN_STORE_DIR` override it. See [chat readiness and data storage](docs/CHAT-READINESS.md).
+Open conversations load first. History loads automatically on scroll, with a compact indicator inside the message list while requesting or retrying; no history status panel or manual loading button is shown. Earlier history loads automatically on scroll in Chat and Operator. Message selection and menus work across the full row; unread cards use refreshed Telegram counters and retain cached data during connection failures. All / Private / Groups / Channels filters remain available inside every Telegram folder. Drag the vertical dividers to resize columns; widths are remembered. Calls is in the main menu after Chat, and Telegram account editing is under Profile. The default dark controls use white line icons. Buttons and action links have nonzero spacing and aligned control padding. Stories is off by default; Settings → Stories enables its display and requests. The JS server keeps its store under your OS user: `~/Library/Application Support/Meta Sovereign/store` on macOS, `%APPDATA%/Meta Sovereign/store` on Windows, and `${XDG_CONFIG_HOME:-~/.config}/Meta Sovereign/store` on Linux. Starting `serve` from an older checkout migrates its `.meta-sovereign` store once, preserving messages, contacts, sessions, media and certificate; a compatibility link preserves old paths. Restarts and a different working directory reuse the same store. `--store` or `META_SOVEREIGN_STORE_DIR` override it. See [chat readiness and data storage](docs/CHAT-READINESS.md).
 
 ## Connect the SPA to your server
 

package/js/src/crm/reengage.js

@@ -22,6 +22,10 @@ import {
   definedOnly,
   defaultAddressRules,
 } from './address-form.js';
+import {
+  telegramChatUrl,
+  isTelegramWebUrl,
+} from '../sources/telegram-chat-url.js';
 import { addressFormOf } from './person-learn.js';
 import {
   batchStopReason,
@@ -300,12 +304,18 @@ export const templateFor = (templates, form) =>
  * where the platform documents one; `null` elsewhere (copy the text).
  *
  * - e-mail: RFC 6068 `mailto:<addr>?body=` (line breaks as %0D%0A).
- * - Telegram: `tg://user?id=<id>` opens the chat with that user (Bot
- *   API docs); the text still has to be pasted, because Telegram has no
- *   pre-fill parameter for a user chat.
+ * - Telegram: documented username/phone links can prefill text; numeric-only
+ *   peers open the specific chat in Telegram Web (sign-in may be required).
  * - VK: `https://vk.com/im?sel=<peer>` opens the dialog with a user.
  */
-export const prefillLinkFor = ({ source, contact, chat, text }) => {
+export const prefillLinkFor = ({
+  source,
+  contact,
+  chat,
+  text,
+  username,
+  phone,
+}) => {
   const id = String(contact ?? '');
   const peer = String(chat ?? id);
   if (source === 'email' && /^[^\s@]+@[^\s@]+$/.test(id)) {
@@ -319,7 +329,10 @@ export const prefillLinkFor = ({ source, contact, chat, text }) => {
   }
   const tg = source === 'telegram' ? id.match(/^(?:user)?(\d+)$/) : null;
   if (tg) {
-    return { url: `tg://user?id=${tg[1]}`, prefillsText: false };
+    const url = telegramChatUrl({ source, chat: tg[1], username, phone, text });
+    return url
+      ? { url, prefillsText: Boolean(text) && !isTelegramWebUrl(url) }
+      : null;
   }
   return null;
 };

package/js/src/server/local-tls.js

@@ -20,7 +20,7 @@ import crypto from 'node:crypto';
 import { promises as fs } from 'node:fs';
 import net from 'node:net';
 import path from 'node:path';
-import tls from 'node:tls';
+import http2 from 'node:http2';
 import { DIR_MODE, tighten, writeFileDurable } from '../storage/durable.js';
 import {
   certificateFingerprint,
@@ -265,8 +265,19 @@ export const listenHttpAndHttps = (
   host = '127.0.0.1'
 ) =>
   new Promise((resolve, reject) => {
-    const secure = tls.createServer({ key, cert }, (socket) =>
-      httpServer.emit('connection', socket)
+    // Multiplex API calls, media and event streams over HTTPS. HTTP/1's six
+    // browser connections can otherwise all wait behind long media downloads.
+    const secure = http2.createSecureServer(
+      { key, cert, allowHTTP1: true },
+      (req, res) => {
+        // Keep the existing strict Host and Origin checks for HTTP/2 too.
+        req.headers.host ??= req.headers[':authority'];
+        httpServer.emit('request', req, res);
+      }
+    );
+    secure.requestTimeout = httpServer.requestTimeout;
+    secure.on('upgrade', (req, socket, head) =>
+      httpServer.emit('upgrade', req, socket, head)
     );
     // A browser that does not trust the certificate yet hangs up.
     secure.on('tlsClientError', () => {});

package/js/src/server/routes-events.js

@@ -69,7 +69,7 @@ export const handleEventRoutes = (store, req, res, p, ctx) => {
   res.writeHead(200, {
     'content-type': 'text/event-stream; charset=utf-8',
     'cache-control': 'no-cache, no-transform',
-    connection: 'keep-alive',
+    ...(req.httpVersionMajor === 2 ? {} : { connection: 'keep-alive' }),
     'x-accel-buffering': 'no',
   });
   // Reconnect quickly after the server restarts.

package/js/src/sources/telegram-chat-info.js

@@ -377,6 +377,11 @@ const extrasOf = (user, full) => ({
 const botRevenueOf = (user, full) =>
   user.bot && full.canViewRevenue ? { canViewStarsRevenue: true } : {};
 
+const contactReach = (user) => ({
+  username: user.username ?? null,
+  phone: user.phone ?? null,
+});
+
 const fetchUser = async (client, Api, helpers, inputPeer, peers, chat) => {
   const storedPeer = inputPeer ?? (await peers.input(chat));
   const id = inputUserOf(Api, helpers, storedPeer, chat);
@@ -389,7 +394,7 @@ const fetchUser = async (client, Api, helpers, inputPeer, peers, chat) => {
     title: nameOf(user),
     members: 1,
     online,
-    username: user.username ?? null,
+    ...contactReach(user),
     about: full.about ?? null,
     photo: hasPhoto(user.photo),
     pinned: full.pinnedMsgId ?? null,

package/js/src/sources/telegram-chat-url.js

@@ -0,0 +1,34 @@
+// Normal Telegram clients ignore tg://user?id (a Bot API abstraction).
+// Use documented username/phone/message links; numeric-only peers use Web A's
+// signed-in chat route instead of launching a native app without a destination.
+// References: core.telegram.org/api/links; Ajaxy/telegram-tt src/util/routing.ts.
+export const telegramChatUrl = ({
+  source,
+  chat,
+  username,
+  phone,
+  lastId,
+  text,
+} = {}) => {
+  if (source !== 'telegram' || !/^-?[1-9]\d*$/.test(String(chat))) {
+    return null;
+  }
+  const handle = String(username ?? '').replace(/^@/, '');
+  const number = String(phone ?? '').replace(/[\s()+-]/g, '');
+  const native = /^[a-zA-Z][a-zA-Z0-9_]{3,31}$/.test(handle)
+    ? `https://t.me/${handle}`
+    : /^[1-9]\d{6,14}$/.test(number)
+      ? `https://t.me/+${number}`
+      : null;
+  if (native) {
+    return text ? `${native}?text=${encodeURIComponent(text)}` : native;
+  }
+  const id = String(chat);
+  if (/^-100\d+$/.test(id) && /^[1-9]\d*$/.test(String(lastId))) {
+    return `https://t.me/c/${id.slice(4)}/${lastId}`;
+  }
+  return `https://web.telegram.org/a/#${id}`;
+};
+
+export const isTelegramWebUrl = (url) =>
+  String(url ?? '').startsWith('https://web.telegram.org/a/#');

package/js/src/web/app.css

@@ -15,6 +15,8 @@
   /* One height for every button, input and select; one header height
      the sticky drawer, rail and full-height chat measure against. */
   --control-h: 2.25rem;
+  --control-gap: 0.5rem;
+  --control-pad: 0.4rem 0.9rem;
   --radius: 8px;
   --topbar-h: 3.5rem;
   --bottom-nav-h: 4rem;
@@ -174,7 +176,7 @@ body {
   }
   .header-btn {
     width: var(--control-h);
-    padding: 0;
+    padding: 0.25rem;
   }
   .btn-label {
     display: none;
@@ -193,7 +195,16 @@ body {
   flex-wrap: wrap;
   gap: 0.25rem;
 }
-.topbar nav button {
+.topbar nav /* Action containers inherit a nonzero gap even when a new toolbar omits it.
+   Named layouts can choose a denser spacing; no margins fight their alignment. */
+:where(*:has(> :is(button, a.button, [role='button']) ~ :is(button, a.button, [role='button']))) {
+  gap: var(--control-gap);
+}
+/* Inline actions in prose/table cells do not participate in flex/grid gaps. */
+:where(p, td, dd, .meta) > :is(button, a.button) + :is(button, a.button) {
+  margin-inline-start: var(--control-gap);
+}
+button {
   background: transparent;
   color: var(--text-muted);
   border: 1px solid transparent;
@@ -426,6 +437,9 @@ main[data-view='chat'] > .web-mode-banner {
   min-height: 1px;
 }
 
+.chat-list > .chat-item + .chat-item {
+  margin-block-start: 0.25rem;
+}
 .chat-item {
   /* Rows out of sight are not laid out or painted (R-Y71). */
   content-visibility: auto;
@@ -1197,8 +1211,10 @@ main[data-view='chat'] > .web-mode-banner {
 a.button {
   display: inline-flex;
   align-items: center;
+  justify-content: center;
+  gap: var(--control-gap);
   min-height: var(--control-h);
-  padding: 0.4rem 0.9rem;
+  padding: var(--control-pad);
   border: 1px solid var(--border);
   border-radius: var(--radius);
   background: var(--bg-active);
@@ -1409,7 +1425,7 @@ a.button {
 }
 .icon-btn {
   width: var(--control-h);
-  padding: 0;
+  padding: 0.25rem;
   border-color: transparent;
   background: transparent;
 }
@@ -1522,7 +1538,7 @@ button {
   color: inherit;
   border: 1px solid var(--border);
   border-radius: var(--radius);
-  padding: 0.4rem 0.9rem;
+  padding: var(--control-pad);
   font: inherit;
   font-size: 0.9rem;
   line-height: 1.2;
@@ -1551,7 +1567,7 @@ button.primary:hover:not(:disabled) {
 }
 .row {
   display: flex;
-  gap: 0.5rem;
+  gap: var(--control-gap);
   align-items: center;
   flex-wrap: wrap;
 }
@@ -2833,6 +2849,10 @@ button.primary .recommended-tag {
   flex-direction: column;
   gap: 0.3rem;
 }
+.automation-list li {
+  display: grid;
+  gap: var(--control-gap);
+}
 .automation-list button {
   width: 100%;
   text-align: left;
@@ -3608,6 +3628,9 @@ button.primary .recommended-tag {
    rounded, frosted, an icon before each item; it grows from the corner
    it opened at. */
 .msg-context-menu {
+  display: flex;
+  flex-direction: column;
+  gap: 0.25rem;
   position: fixed;
   /* Above a dialog: the files' Send button has a menu too (R-Y102). */
   z-index: 2100;
@@ -6791,7 +6814,7 @@ button[aria-busy='true']::before {
   scrollbar-width: thin;
 }
 .stories-strip.is-compact .stories-list {
-  gap: 0;
+  gap: 0.25rem;
 }
 .story-peer {
   display: flex;
@@ -9184,7 +9207,7 @@ span.bubble-effect {
   left: 50%;
   top: 50%;
   transform: translate(-50%, -50%);
-  padding: 0.4rem 0.9rem;
+  padding: var(--control-pad);
   border: 0;
   border-radius: 999px;
   background: rgba(0, 0, 0, 0.6);
@@ -12908,23 +12931,6 @@ audio.remote-player {
   flex-shrink: 0;
   scrollbar-width: thin;
 }
-.chat-history-status {
-  display: flex;
-  flex: 0 0 auto;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 0.5rem 0.75rem;
-  border-bottom: 1px solid var(--border);
-  color: var(--text);
-  background: var(--chat-sidebar);
-  font-size: 0.85rem;
-}
-.chat-history-status span {
-  flex: 1;
-}
-.chat-history-status button {
-  flex-shrink: 0;
-}
 .calls-content {
   min-height: 12rem;
 }