mulmoclaude 0.9.2 → 0.9.4

package/src/lang/ko.ts

@@ -141,6 +141,9 @@ const koMessages = {
     disconnectFailed: "연결 해제 실패",
     signInFailed: "Google 로그인 실패",
     statusFailed: "상태를 불러오지 못했습니다",
+    description: "원격 액세스를 사용하면 모바일 기기에서 이 MulmoClaude의 컬렉션과 피드에 연결할 수 있습니다.",
+    howTo: "휴대폰에서 {url} 을(를) 열고 같은 Google 계정으로 로그인하세요.",
+    customViewHint: "모바일에 최적화된 뷰가 필요하다면, 일반 custom view가 아닌 {keyword} 를(을) 만들어 달라고 Claude에게 요청하세요.",
   },
   sidebarHeader: {
     home: "최신 채팅으로 이동",
@@ -184,6 +187,8 @@ const koMessages = {
     reference: "참조",
     // "RO" = Read-Only. 간결한 배지로 표시하기 위해 영문 약어 유지.
     readOnlyBadge: "RO",
+    showSystemFiles: "시스템 파일 표시",
+    showSystemFilesTitle: "사용자 콘텐츠(data/, artifacts/, config/)에 더해 에이전트 내부 최상위 디렉터리(conversations/, feeds/ 등)까지 표시합니다.",
   },
   fileTree: {
     workspace: "(워크스페이스)",
@@ -235,6 +240,8 @@ const koMessages = {
       photos: "사진",
       model: "모델",
       voice: "음성",
+      chatIndex: "채팅 인덱스",
+      journal: "저널",
       skills: "스킬",
       roles: "역할",
     },
@@ -292,6 +299,42 @@ const koMessages = {
       loadError: "설정을 불러오지 못했습니다",
       saveError: "저장에 실패했습니다",
     },
+    chatIndexTab: {
+      description:
+        "채팅 기록의 AI 제목/요약 자동 생성을 설정합니다. 기본값은 off 이며, 자동화 계열 세션(scheduler / 시스템 워커)은 on 상태여도 항상 제외됩니다. 사람 세션만 턴 종료 시 요약이 한 번 실행됩니다.",
+      modeLabel: "채팅 인덱스 모델",
+      helperText: "Haiku 가 더 저렴하고, Sonnet 은 길고 주제가 바뀌는 세션에서 더 정확한 제목을 만듭니다.",
+      mode: {
+        off: "꺼짐",
+        haiku: "Haiku",
+        sonnet: "Sonnet",
+      },
+      status: {
+        off: "인덱싱: 꺼짐",
+        haiku: "Haiku 로 인덱싱 중",
+        sonnet: "Sonnet 으로 인덱싱 중",
+      },
+      loadError: "설정을 불러오지 못했습니다",
+      saveError: "저장에 실패했습니다",
+    },
+    journalTab: {
+      description:
+        "일일 저널 자동 생성 설정입니다. 최근 채팅 세션을 journal/*.md 로 요약하고 지속 메모(memory.md)를 추출합니다. 기본값은 off. 자동화 세션(scheduler / 시스템 워커)은 이 설정과 무관하게 항상 제외됩니다.",
+      modeLabel: "저널 모델",
+      helperText: "Haiku 가 더 저렴하고, Sonnet 은 일일/주제 요약 품질이 더 좋습니다. 매시 실행은 이 설정이 켜져 있을 때만 동작합니다.",
+      mode: {
+        off: "꺼짐",
+        haiku: "Haiku",
+        sonnet: "Sonnet",
+      },
+      status: {
+        off: "저널: 꺼짐",
+        haiku: "Haiku 로 저널 실행 중",
+        sonnet: "Sonnet 으로 저널 실행 중",
+      },
+      loadError: "설정을 불러오지 못했습니다",
+      saveError: "저장에 실패했습니다",
+    },
     // `<i18n-t>` 슬롯 — `envKey` / `envFile` 은 SettingsModal.vue 에서
     // 인라인 `<code>` 로 렌더링되므로 변수명·파일명은 번역하지 않고
     // 남깁니다.
@@ -935,6 +978,8 @@ const koMessages = {
     cancel: "취소",
     seededByPlugin: "{pkg}에서",
     seededByPluginTooltip: "이 메시지는 사용자가 보낸 것이 아니라 {pkg} 플러그인에서 작성한 것입니다.",
+    truncatedForRender:
+      "이 메시지는 매우 깁니다(총 {total}자). 탭이 멈추지 않도록 앞부분만 표시됩니다 — {omitted}자 숨김. 전체 원문은 복사 버튼으로 가져올 수 있습니다.",
   },
   pluginSkill: {
     noDescription: "(설명 없음)",

package/src/lang/pt-BR.ts

@@ -134,6 +134,9 @@ const ptBRMessages = {
     disconnectFailed: "Falha ao desconectar",
     signInFailed: "Falha ao entrar com o Google",
     statusFailed: "Falha ao carregar o status",
+    description: "O acesso remoto permite que um dispositivo móvel se conecte às coleções e feeds deste MulmoClaude.",
+    howTo: "No seu telefone, abra {url} e entre com a mesma conta do Google.",
+    customViewHint: "Para uma visualização adaptada ao celular, peça ao Claude para criar uma {keyword} (não uma custom view comum).",
   },
   sidebarHeader: {
     home: "Ir para o chat mais recente",
@@ -178,6 +181,9 @@ const ptBRMessages = {
     // "RO" = Read-Only. Abreviação em inglês mantida para caber como
     // badge compacto ao lado do rótulo Referência.
     readOnlyBadge: "RO",
+    showSystemFiles: "Exibir arquivos do sistema",
+    showSystemFilesTitle:
+      "Mostra os diretórios raiz internos do agente (conversations/, feeds/ etc.) além do conteúdo do usuário (data/, artifacts/, config/).",
   },
   fileTree: {
     workspace: "(workspace)",
@@ -229,6 +235,8 @@ const ptBRMessages = {
       photos: "Fotos",
       model: "Modelo",
       voice: "Voz",
+      chatIndex: "Índice de chat",
+      journal: "Diário",
       skills: "Skills",
       roles: "Papéis",
     },
@@ -288,6 +296,42 @@ const ptBRMessages = {
       loadError: "Falha ao carregar as configurações",
       saveError: "Falha ao salvar",
     },
+    chatIndexTab: {
+      description:
+        "Títulos e resumos gerados por IA para o histórico do chat. Sai desativado por padrão — sessões de automação (scheduler / workers do sistema) sempre são ignoradas mesmo quando ativado; sessões humanas pagam apenas uma chamada ao sumarizador ao terminar cada turno.",
+      modeLabel: "Modelo do índice de chat",
+      helperText: "Haiku é mais barato; Sonnet dá títulos mais precisos em sessões longas que mudam de assunto.",
+      mode: {
+        off: "Desativado",
+        haiku: "Haiku",
+        sonnet: "Sonnet",
+      },
+      status: {
+        off: "Indexação DESATIVADA",
+        haiku: "Indexando com Haiku",
+        sonnet: "Indexando com Sonnet",
+      },
+      loadError: "Falha ao carregar as configurações",
+      saveError: "Falha ao salvar",
+    },
+    journalTab: {
+      description:
+        "Diário diário automatizado — resume sessões recentes de chat em journal/*.md e extrai notas de memória duradoura. Sai desativado por padrão. Sessões de automação (scheduler / workers do sistema) são sempre excluídas, independentemente desta configuração.",
+      modeLabel: "Modelo do diário",
+      helperText: "Haiku é mais barato; Sonnet produz resumos diários / por tópico mais ricos. A passagem horária só é executada quando isto está ativado.",
+      mode: {
+        off: "Desativado",
+        haiku: "Haiku",
+        sonnet: "Sonnet",
+      },
+      status: {
+        off: "Diário DESATIVADO",
+        haiku: "Diário em execução com Haiku",
+        sonnet: "Diário em execução com Sonnet",
+      },
+      loadError: "Falha ao carregar as configurações",
+      saveError: "Falha ao salvar",
+    },
     // Slots `<i18n-t>` — os nomes `envKey` / `envFile` renderizam como
     // `<code>` inline no SettingsModal.vue, então os literais de
     // variável e nome de arquivo permanecem não traduzidos.
@@ -936,6 +980,8 @@ const ptBRMessages = {
     cancel: "Cancelar",
     seededByPlugin: "de {pkg}",
     seededByPluginTooltip: "Esta mensagem foi gerada pelo plugin {pkg}, não foi enviada por você.",
+    truncatedForRender:
+      "Esta mensagem é excepcionalmente longa ({total} caracteres no total). Apenas a primeira parte é renderizada — {omitted} caracteres ocultos para manter a aba responsiva. Use Copiar para obter o texto completo.",
   },
   pluginSkill: {
     noDescription: "(sem descrição)",

package/src/lang/zh.ts

@@ -136,6 +136,9 @@ const zhMessages = {
     disconnectFailed: "断开连接失败",
     signInFailed: "Google 登录失败",
     statusFailed: "加载状态失败",
+    description: "远程访问允许移动设备连接到此 MulmoClaude 的收藏与消息流。",
+    howTo: "在手机上打开 {url}，用同一个 Google 账号登录。",
+    customViewHint: "如需移动端优化的视图，请让 Claude 创建 {keyword}（而不是普通的 custom view）。",
   },
   sidebarHeader: {
     home: "前往最新对话",
@@ -179,6 +182,8 @@ const zhMessages = {
     reference: "引用",
     // "RO" = Read-Only. 保留英文缩写作为紧凑徽章。
     readOnlyBadge: "RO",
+    showSystemFiles: "显示系统文件",
+    showSystemFilesTitle: "在用户内容(data/、artifacts/、config/)之外同时显示代理内部的顶层目录(conversations/、feeds/ 等)。",
   },
   fileTree: {
     workspace: "(工作区)",
@@ -230,6 +235,8 @@ const zhMessages = {
       photos: "照片",
       model: "模型",
       voice: "语音",
+      chatIndex: "聊天索引",
+      journal: "日志",
       skills: "技能",
       roles: "角色",
     },
@@ -286,6 +293,42 @@ const zhMessages = {
       loadError: "加载设置失败",
       saveError: "保存失败",
     },
+    chatIndexTab: {
+      description:
+        "为聊天历史自动生成 AI 标题/摘要。默认关闭。开启后自动化会话（scheduler / 系统 worker）仍会始终跳过；只有人类会话在每次轮次结束时才会调用一次摘要。",
+      modeLabel: "聊天索引模型",
+      helperText: "Haiku 更便宜；Sonnet 在长且话题多变的会话中标题更精准。",
+      mode: {
+        off: "关闭",
+        haiku: "Haiku",
+        sonnet: "Sonnet",
+      },
+      status: {
+        off: "索引已关闭",
+        haiku: "使用 Haiku 建立索引中",
+        sonnet: "使用 Sonnet 建立索引中",
+      },
+      loadError: "加载设置失败",
+      saveError: "保存失败",
+    },
+    journalTab: {
+      description:
+        "自动化每日日志 — 将近期聊天会话摘要为 journal/*.md，并抽取持久化记忆笔记。默认关闭。自动化会话（scheduler / 系统 worker）无论此设置如何都会始终排除。",
+      modeLabel: "日志模型",
+      helperText: "Haiku 更便宜；Sonnet 生成的每日/主题摘要更丰富。仅在此设置开启时每小时的轮次才会运行。",
+      mode: {
+        off: "关闭",
+        haiku: "Haiku",
+        sonnet: "Sonnet",
+      },
+      status: {
+        off: "日志已关闭",
+        haiku: "使用 Haiku 运行日志中",
+        sonnet: "使用 Sonnet 运行日志中",
+      },
+      loadError: "加载设置失败",
+      saveError: "保存失败",
+    },
     // `<i18n-t>` 插槽 — 命名为 `envKey` / `envFile`,在 SettingsModal.vue
     // 中作为行内 `<code>` 渲染,因此字面的变量名和文件名保持不翻译。
     geminiRequired: "图像生成需要 {envKey}。请将它加入 {envFile} 并重启应用。",
@@ -925,6 +968,7 @@ const zhMessages = {
     cancel: "取消",
     seededByPlugin: "来自 {pkg}",
     seededByPluginTooltip: "此消息由 {pkg} 插件生成，并非您发送。",
+    truncatedForRender: "该消息异常长（共 {total} 个字符）。为保持标签页响应，仅渲染开头部分 — 隐藏了 {omitted} 个字符。使用复制按钮获取完整原文。",
   },
   pluginSkill: {
     noDescription: "(无描述)",

package/src/plugins/textResponse/View.vue

@@ -18,6 +18,18 @@
             <span class="material-icons text-gray-400 text-base shrink-0 group-open:rotate-180 transition-transform">expand_more</span>
           </summary>
           <div class="border-t border-purple-200 p-4 bg-white rounded-b-lg">
+            <div
+              v-if="truncationInfo.wasTruncated"
+              class="mb-3 p-3 rounded border border-amber-300 bg-amber-50 text-amber-900 text-sm"
+              data-testid="text-response-seeded-truncation-banner"
+            >
+              {{
+                t("pluginTextResponse.truncatedForRender", {
+                  omitted: truncationInfo.omittedChars.toLocaleString(locale),
+                  total: truncationInfo.originalChars.toLocaleString(locale),
+                })
+              }}
+            </div>
             <!-- eslint-disable vue/no-v-html -- marked.parse output of the plugin-seeded prompt; trusted in-process render matching the standard textResponse path. Multi-line element so disable/enable pair (CLAUDE.md UI rule). -->
             <div ref="markdownContainerRef" class="markdown-content prose prose-slate max-w-none" @click="openLinksInNewTab" v-html="renderedHtml"></div>
             <!-- eslint-enable vue/no-v-html -->
@@ -62,6 +74,18 @@
                   <span class="font-medium text-gray-700">{{ speakerLabel }}</span>
                   <span v-if="transportKind" class="italic">{{ transportKind }}</span>
                 </div>
+                <div
+                  v-if="truncationInfo.wasTruncated"
+                  class="mb-3 p-3 rounded border border-amber-300 bg-amber-50 text-amber-900 text-sm"
+                  data-testid="text-response-truncation-banner"
+                >
+                  {{
+                    t("pluginTextResponse.truncatedForRender", {
+                      omitted: truncationInfo.omittedChars.toLocaleString(locale),
+                      total: truncationInfo.originalChars.toLocaleString(locale),
+                    })
+                  }}
+                </div>
                 <!-- eslint-disable vue/no-v-html -- marked.parse output of app-owned assistant response text; trusted in-process render. Multi-line element so disable/enable pair (CLAUDE.md UI rule) instead of -next-line. -->
                 <div
                   ref="markdownContainerRef"
@@ -110,9 +134,9 @@ import { usePdfDownload } from "../../composables/usePdfDownload";
 import { useMarkdownZip } from "../../composables/useMarkdownZip";
 import { useClipboardCopy } from "../../composables/useClipboardCopy";
 import { buildPdfFilename } from "../../utils/files/filename";
-import { extractTextResponseTitle } from "./utils";
+import { extractTextResponseTitle, truncateForRender } from "./utils";
 
-const { t } = useI18n();
+const { t, locale } = useI18n();
 const appApi = useAppApi();
 
 const props = withDefaults(
@@ -162,19 +186,30 @@ const seededByPlugin = computed<string>(() => props.selectedResult.data?.seededB
 // inherently scoped to the opening message.
 const isSeededUserTurn = computed(() => Boolean(seededByPlugin.value) && messageRole.value === "user");
 
+// Truncation summary surfaced to the template — the banner renders when
+// `wasTruncated` is true, telling the user the visible content is a preview
+// and the raw text is available via Copy. See #1863 for the pathological
+// input this defends against (Opus 4.8 degenerate repetition freezing Safari).
+const truncationInfo = computed(() => truncateForRender(messageText.value ?? ""));
+
 const renderedHtml = computed(() => {
-  if (!messageText.value) return "";
-
-  let processedText = messageText.value;
-
-  // Detect and wrap JSON content in code fences
-  const trimmedText = processedText.trim();
-  if ((trimmedText.startsWith("{") && trimmedText.endsWith("}")) || (trimmedText.startsWith("[") && trimmedText.endsWith("]"))) {
-    try {
-      JSON.parse(trimmedText);
-      processedText = `\`\`\`json\n${trimmedText}\n\`\`\``;
-    } catch {
-      // Not valid JSON, continue with original text
+  const { displayText } = truncationInfo.value;
+  if (!displayText) return "";
+
+  let processedText = displayText;
+
+  // Detect and wrap JSON content in code fences (skip for truncated views —
+  // JSON.parse of a truncated tail would throw anyway, and a partial JSON
+  // dump is more informative rendered as markdown).
+  if (!truncationInfo.value.wasTruncated) {
+    const trimmedText = processedText.trim();
+    if ((trimmedText.startsWith("{") && trimmedText.endsWith("}")) || (trimmedText.startsWith("[") && trimmedText.endsWith("]"))) {
+      try {
+        JSON.parse(trimmedText);
+        processedText = `\`\`\`json\n${trimmedText}\n\`\`\``;
+      } catch {
+        // Not valid JSON, continue with original text
+      }
     }
   }
 

package/src/plugins/textResponse/utils.ts

@@ -4,6 +4,43 @@
 
 const MAX_TITLE_CHARS = 50;
 
+// Cap on how much of an assistant message we feed into marked() at once.
+// The Opus 4.8 "degenerate repetition" bug can generate hundreds of
+// thousands of chars of blank-line-separated single words; marked itself
+// parses that fine (~120ms), but Safari's layout/paint on ~30k <p>
+// elements freezes the tab for minutes (#1863). 100_000 is comfortably
+// larger than any real assistant reply (Claude's ~200k token ceiling is
+// well below that in bytes) and small enough that pathological input
+// bounces off it well before the render blows up.
+export const RENDER_TRUNCATE_CHARS = 100_000;
+// The preview slice we DO render when a message trips the cap. Small
+// enough that even a fully-blank-line-separated payload stays under a
+// few thousand block elements. Users get "Copy" for the full raw text.
+export const RENDER_TRUNCATE_PREVIEW_CHARS = 20_000;
+
+export interface TruncationResult {
+  displayText: string;
+  wasTruncated: boolean;
+  originalChars: number;
+  omittedChars: number;
+}
+
+// Truncate an assistant message so pathological model output can't
+// freeze the render path. Pure so it can be unit-tested from
+// node:test without a Vue runtime.
+export function truncateForRender(text: string): TruncationResult {
+  const originalChars = text.length;
+  if (originalChars <= RENDER_TRUNCATE_CHARS) {
+    return { displayText: text, wasTruncated: false, originalChars, omittedChars: 0 };
+  }
+  return {
+    displayText: text.slice(0, RENDER_TRUNCATE_PREVIEW_CHARS),
+    wasTruncated: true,
+    originalChars,
+    omittedChars: originalChars - RENDER_TRUNCATE_PREVIEW_CHARS,
+  };
+}
+
 // Pull a short, human-meaningful title out of a chat reply for use as
 // a download filename. Priority:
 //   1. First markdown H1 ("# ...") — the model often opens a long

package/src/utils/html/previewCsp.ts

@@ -5,23 +5,14 @@
 // random `https://` origins, phone-home `fetch()` calls, etc. —
 // is rejected.
 //
-// Widen by editing `HTML_PREVIEW_CSP_ALLOWED_CDNS` below. Keep the
-// list audited — every entry is a potential supply-chain surface.
+// The list itself lives in `@mulmoclaude/core/remote-view`
+// (SANDBOXED_VIEW_CDN_ALLOWLIST) so the remote-view CSP and these
+// desktop policies can't drift — widen it THERE, and keep it
+// audited: every entry is a potential supply-chain surface.
 
-export const HTML_PREVIEW_CSP_ALLOWED_CDNS: readonly string[] = [
-  "https://cdn.jsdelivr.net",
-  "https://unpkg.com",
-  "https://cdnjs.cloudflare.com",
-  "https://fonts.googleapis.com",
-  "https://fonts.gstatic.com",
-  // Plotly's official CDN. The LLM defaults to this URL when it
-  // includes a Sankey or other Plotly chart in presentHtml output —
-  // Plotly's docs recommend it, so unconditioned LLM output ends up
-  // pointing here. Also reachable through jsdelivr, but adding the
-  // first-party CDN keeps historical artifacts (where the URL is
-  // already baked into the file on disk) rendering correctly.
-  "https://cdn.plot.ly",
-];
+import { SANDBOXED_VIEW_CDN_ALLOWLIST } from "@mulmoclaude/core/remote-view";
+
+export const HTML_PREVIEW_CSP_ALLOWED_CDNS: readonly string[] = SANDBOXED_VIEW_CDN_ALLOWLIST;
 
 /**
  * Build the CSP string. Split from the wrapper so tests can exercise

package/src/utils/role/icon.ts

@@ -10,9 +10,16 @@ import type { Role } from "../../config/roles";
 // don't render the literal text inside a Material Icons span.
 const MATERIAL_ICON_RE = /^[a-z_]+$/;
 
+// `smart_toy` (robot glyph) is used for both fallback cases —
+// "role not found" and "role icon isn't a valid Material Icon name".
+// Reserved specifically to avoid collision with `star`, which is the
+// PinToggle glyph for collection shortcuts; using `star` here would
+// make an unknown role look identical to a pinned collection (#1684).
+const FALLBACK_ICON = "smart_toy";
+
 export function roleIcon(roles: Role[], roleId: string): string {
-  const icon = roles.find((role) => role.id === roleId)?.icon ?? "star";
-  return MATERIAL_ICON_RE.test(icon) ? icon : "smart_toy";
+  const icon = roles.find((role) => role.id === roleId)?.icon ?? FALLBACK_ICON;
+  return MATERIAL_ICON_RE.test(icon) ? icon : FALLBACK_ICON;
 }
 
 export function roleName(roles: Role[], roleId: string): string {

package/src/utils/session/sessionPreview.ts

@@ -0,0 +1,29 @@
+// Selection helpers for the session-history sidebar row.
+//
+// The AI summary (chat indexer) is preferred over the raw first user
+// message when it's meaningful. "Meaningful" excludes undefined / empty
+// / whitespace-only strings — otherwise a summarizer that returns "   "
+// would blank out the row (no visible text, no tooltip, no aria label).
+
+export interface SessionPreviewInput {
+  summary?: string;
+  preview: string;
+}
+
+export function resolveSessionSummary(summary: string | undefined): string | null {
+  const trimmed = summary?.trim();
+  return trimmed || null;
+}
+
+// `null` means "nothing to show" — the template turns that into the
+// localised `noMessages` placeholder. Not baked in here to keep this
+// pure (no i18n dependency).
+export function resolveSessionPrimaryText(session: SessionPreviewInput): string | null {
+  const summary = resolveSessionSummary(session.summary);
+  if (summary) return summary;
+  return session.preview || null;
+}
+
+export function sessionHasVisibleSummary(session: SessionPreviewInput): boolean {
+  return resolveSessionSummary(session.summary) !== null;
+}