npm - mulmoclaude - Versions diffs - 0.9.6 → 0.9.7 - Mend

mulmoclaude 0.9.6 → 0.9.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (27) hide show

package/client/assets/{PluginScopedRoot-BBS0j7lL.js → PluginScopedRoot-BhiOgLTT.js} +1 -1
package/client/assets/{index-BLM4Fy-7.js → index-C29dYZy5.js} +26 -25
package/client/assets/index-Ctc1Sbhu.css +2 -0
package/client/assets/{marp-DsqHCCYu.js → marp-Dx1eipfE.js} +1 -1
package/client/index.html +3 -3
package/package.json +5 -5
package/server/api/routes/remoteHost.ts +46 -13
package/server/remoteHost/handlers/ingestAttachments.ts +3 -4
package/server/remoteHost/index.ts +14 -11
package/server/remoteHost/onExpire.ts +2 -2
package/server/remoteHost/session.ts +83 -0
package/src/App.vue +38 -2
package/src/components/ChatInput.vue +69 -4
package/src/components/RemoteHostControl.vue +53 -1
package/src/config/apiRoutes.ts +1 -0
package/src/lang/de.ts +2 -0
package/src/lang/en.ts +2 -0
package/src/lang/es.ts +2 -0
package/src/lang/fr.ts +2 -0
package/src/lang/ja.ts +2 -0
package/src/lang/ko.ts +2 -0
package/src/lang/pt-BR.ts +2 -0
package/src/lang/zh.ts +2 -0
package/src/utils/chat/buffer.ts +11 -0
package/client/assets/index-fGG7U2mb.css +0 -2
package/server/remoteHost/auth.ts +0 -12
package/server/remoteHost/firebase.ts +0 -12

package/client/index.html CHANGED Viewed

@@ -43,12 +43,12 @@
         }
       }
     </script>
-    <script type="module" crossorigin src="/assets/index-BLM4Fy-7.js"></script>
+    <script type="module" crossorigin src="/assets/index-C29dYZy5.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-CNC7AqOf.js">
     <link rel="modulepreload" crossorigin href="/assets/vue.runtime.esm-bundler-D9nG8JAr.js">
     <link rel="modulepreload" crossorigin href="/assets/vue-i18n-DMHgtTtA.js">
     <link rel="modulepreload" crossorigin href="/assets/vue-CU5-3-x4.js">
-    <link rel="modulepreload" crossorigin href="/assets/PluginScopedRoot-BBS0j7lL.js">
+    <link rel="modulepreload" crossorigin href="/assets/PluginScopedRoot-BhiOgLTT.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-DGvl73AE.js">
     <link rel="modulepreload" crossorigin href="/assets/v4-DDdyfk2q.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-Czpn1I53.js">
@@ -57,7 +57,7 @@
     <link rel="modulepreload" crossorigin href="/assets/_plugin-vue_export-helper-BDNMzG2s.js">
     <link rel="modulepreload" crossorigin href="/assets/chunk-D8eiyYIV-D55tgtzm.js">
     <link rel="modulepreload" crossorigin href="/assets/typeof-DBp4T-Ny-B5XbjTb1.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-fGG7U2mb.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-Ctc1Sbhu.css">
   </head>
   <body>
     <div id="app"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "mulmoclaude",
-  "version": "0.9.6",
+  "version": "0.9.7",
   "description": "MulmoClaude — GUI-chat with Claude Code + long-term memory. One command to start.",
   "type": "module",
   "bin": {
@@ -36,7 +36,7 @@
     "@mulmoclaude/accounting-plugin": "^0.3.2",
     "@mulmoclaude/chart-plugin": "^0.1.3",
     "@mulmoclaude/collection-plugin": "^0.7.5",
-    "@mulmoclaude/core": "^0.12.2",
+    "@mulmoclaude/core": "^0.13.0",
     "@mulmoclaude/form-plugin": "^0.1.4",
     "@mulmoclaude/html-plugin": "^0.2.5",
     "@mulmoclaude/markdown-plugin": "^0.1.10",
@@ -48,7 +48,7 @@
     "exifr": "^7.1.3",
     "express": "^5.2.1",
     "fast-xml-parser": "^5.10.0",
-    "firebase": "12.15.0",
+    "firebase": "12.16.0",
     "gui-chat-protocol": "0.4.0",
     "heic-convert": "^2.1.0",
     "ignore": "^7.0.6",
@@ -56,13 +56,13 @@
     "jszip": "^3.10.1",
     "mammoth": "^1.12.0",
     "marked": "^18.0.6",
-    "mulmocast": "^2.7.1",
+    "mulmocast": "^2.7.2",
     "node-html-parser": "^9",
     "puppeteer": "^25.3.0",
     "sharp": "^0.35.3",
     "socket.io": "^4.8.3",
     "socket.io-client": "^4.8.3",
-    "tsx": "^4.23.0",
+    "tsx": "^4.23.1",
     "uuid": "^14.0.1",
     "which": "^6",
     "ws": "^8.21.0",

package/server/api/routes/remoteHost.ts CHANGED Viewed

@@ -1,20 +1,24 @@
-// HTTP routes for the remote-host runner (phase 1).
+// HTTP routes for the remote-host runner.
 //
-//   POST /api/remote-host/connect     { idToken }  → { status }
-//   POST /api/remote-host/disconnect               → { status }
-//   GET  /api/remote-host/status                   → { status }
+//   POST /api/remote-host/connect     { idToken }  → { status, session }
+//   POST /api/remote-host/reconnect   { session }  → { status, session }
+//   POST /api/remote-host/disconnect               → { status, session: null }
+//   GET  /api/remote-host/status                   → { status, session }
 //
 // connect signs in to Firebase as the user with the browser-minted Google ID
-// token and starts the host runner (command loop + presence heartbeat);
-// disconnect stops it and signs out. Bearer-guarded like every other /api route
-// (the browser's apiPost attaches the token); the idToken is a secret carried
-// in the POST body over the loopback listener only — never logged.
+// token and starts the host runner (command loop + presence heartbeat); reconnect
+// restores a browser-parked session blob (case A', mulmoserver#50) without a
+// popup; disconnect stops the runner and signs out. Every response carries the
+// current session blob so the browser can keep its localStorage copy fresh (null
+// when disconnected). Bearer-guarded like every /api route (the browser's apiPost
+// attaches the token); the idToken and session blob are secrets carried in the
+// POST body over the loopback listener only — never logged.
 import { Router, Request, Response } from "express";
 import { API_ROUTES } from "../../../src/config/apiRoutes.js";
-import { connect, disconnect, status, type RemoteHostStatus } from "../../remoteHost/index.js";
+import { connect, disconnect, exportSession, reconnect, RemoteHostSessionExpiredError, status, type RemoteHostStatus } from "../../remoteHost/index.js";
 import { errorMessage } from "../../utils/errors.js";
-import { badRequest, serverError } from "../../utils/httpError.js";
+import { badRequest, serverError, unauthorized } from "../../utils/httpError.js";
 import { log } from "../../system/logger/index.js";
 const PREFIX = "remote-host";
@@ -22,8 +26,14 @@ const router = Router();
 interface StatusResponse {
   status: RemoteHostStatus;
+  // The session blob the browser parks in localStorage; null when disconnected.
+  session: string | null;
 }
+const respond = (res: Response<StatusResponse>, hostStatus: RemoteHostStatus): void => {
+  res.json({ status: hostStatus, session: exportSession() });
+};
 router.post(API_ROUTES.remoteHost.connect, async (req: Request, res: Response<StatusResponse>) => {
   const idToken = typeof req.body?.idToken === "string" ? req.body.idToken.trim() : "";
   if (!idToken) {
@@ -31,7 +41,7 @@ router.post(API_ROUTES.remoteHost.connect, async (req: Request, res: Response<St
     return;
   }
   try {
-    res.json({ status: await connect(idToken) });
+    respond(res, await connect(idToken));
   } catch (err) {
     // Never include idToken in the message.
     log.warn(PREFIX, "connect failed", { error: errorMessage(err) });
@@ -39,9 +49,32 @@ router.post(API_ROUTES.remoteHost.connect, async (req: Request, res: Response<St
   }
 });
+router.post(API_ROUTES.remoteHost.reconnect, async (req: Request, res: Response<StatusResponse>) => {
+  const session = typeof req.body?.session === "string" ? req.body.session : "";
+  if (!session) {
+    badRequest(res, "Request body must be { session: string }");
+    return;
+  }
+  try {
+    respond(res, await reconnect(session));
+  } catch (err) {
+    // Only a genuinely expired/invalid blob is 401 (client drops it and falls
+    // back to a normal connect). Transient failures (network, backend, Firebase
+    // init) are 5xx so the client KEEPS the blob and can retry later — a blip
+    // must not force a re-login. Never log the blob.
+    if (err instanceof RemoteHostSessionExpiredError) {
+      log.info(PREFIX, "reconnect rejected (blob expired)");
+      unauthorized(res, "remote-host session could not be restored");
+      return;
+    }
+    log.warn(PREFIX, "reconnect failed", { error: errorMessage(err) });
+    serverError(res, errorMessage(err, "remote-host reconnect failed"));
+  }
+});
 router.post(API_ROUTES.remoteHost.disconnect, async (_req: Request, res: Response<StatusResponse>) => {
   try {
-    res.json({ status: await disconnect() });
+    respond(res, await disconnect());
   } catch (err) {
     log.warn(PREFIX, "disconnect failed", { error: errorMessage(err) });
     serverError(res, errorMessage(err, "remote-host disconnect failed"));
@@ -49,7 +82,7 @@ router.post(API_ROUTES.remoteHost.disconnect, async (_req: Request, res: Respons
 });
 router.get(API_ROUTES.remoteHost.status, (_req: Request, res: Response<StatusResponse>) => {
-  res.json({ status: status() });
+  respond(res, status());
 });
 export default router;

package/server/remoteHost/handlers/ingestAttachments.ts CHANGED Viewed

@@ -18,8 +18,7 @@ import type { Attachment } from "@mulmobridge/protocol";
 import { saveAttachment } from "../../utils/files/attachment-store.js";
 import { errorMessage } from "../../utils/errors.js";
 import { log } from "../../system/logger/index.js";
-import { currentUid } from "../auth.js";
-import { storage } from "../firebase.js";
+import { currentStorage, currentUid } from "../session.js";
 const PREFIX = "remote-host";
@@ -75,7 +74,7 @@ export const createIngestAttachments =
 // Pull an object's bytes + content type from Storage. `getBytes` (not the
 // browser-only `getBlob`) returns an ArrayBuffer that works on the Node host.
 const fetchObject = async (storagePath: string): Promise<{ base64: string; contentType: string }> => {
-  const objectRef = ref(storage, storagePath);
+  const objectRef = ref(currentStorage(), storagePath);
   const [bytes, metadata] = await Promise.all([getBytes(objectRef, MAX_DOWNLOAD_BYTES), getMetadata(objectRef)]);
   return { base64: Buffer.from(bytes).toString("base64"), contentType: metadata.contentType ?? "application/octet-stream" };
 };
@@ -84,5 +83,5 @@ export const ingestAttachments = createIngestAttachments({
   uid: currentUid,
   fetchObject,
   saveAttachment,
-  deleteObject: (storagePath) => deleteObject(ref(storage, storagePath)),
+  deleteObject: (storagePath) => deleteObject(ref(currentStorage(), storagePath)),
 });

package/server/remoteHost/index.ts CHANGED Viewed

@@ -7,30 +7,33 @@
 // supplies host specifics — hostId, the handler table, the firestore-bound
 // runner, and a logger adapter — and exposes the default singleton the route uses.
 //
-// Single-account, single-host (HOST_ID = "mulmoclaude"), in-memory session: a
-// server restart drops the session and needs a re-connect.
+// Single-account, single-host (HOST_ID = "mulmoclaude"). The Firebase session is
+// parked in the browser (case A', mulmoserver#50), so a server restart doesn't
+// force a re-login: the client reconnects from its stored blob.
 import { createRemoteHost, startHostRunner } from "@mulmoclaude/core/remote-host/server";
 import { log } from "../system/logger/index.js";
 import { HOST_ID } from "./commandChannel.js";
-import { currentUid, signInHost, signOutHost } from "./auth.js";
-import { firestore } from "./firebase.js";
+import { currentFirestore, currentUid, restore, signIn, signOut } from "./session.js";
 import { handlers } from "./handlers/index.js";
 import { onExpire } from "./onExpire.js";
 export type { RemoteHostStatus } from "@mulmoclaude/core/remote-host/server";
+export { exportSession, RemoteHostSessionExpiredError } from "./session.js";
 const PREFIX = "remote-host";
-// Default singleton wired to the real Firebase deps — imported by the route. The
-// runner is pre-bound with this host's firestore instance; the logger adapts the
-// factory's plain-string calls to the host logger's (prefix, msg) shape.
+// Default singleton wired to the session-backed Firebase deps — imported by the
+// route. The runner reads the CURRENT session's firestore (it changes each
+// (re)connect); the logger adapts the factory's plain-string calls to the host
+// logger's (prefix, msg) shape.
 const instance = createRemoteHost({
   hostId: HOST_ID,
-  signIn: signInHost,
-  signOut: signOutHost,
+  signIn,
+  restore,
+  signOut,
   currentUid,
-  startRunner: (channel, hostHandlers, options) => startHostRunner(firestore, channel, hostHandlers, options),
+  startRunner: (channel, hostHandlers, options) => startHostRunner(currentFirestore(), channel, hostHandlers, options),
   handlers,
   onExpire,
   log: {
@@ -40,4 +43,4 @@ const instance = createRemoteHost({
   },
 });
-export const { connect, disconnect, status } = instance;
+export const { connect, reconnect, disconnect, status } = instance;

package/server/remoteHost/onExpire.ts CHANGED Viewed

@@ -20,7 +20,7 @@ import type { Command, JsonObject } from "@mulmoclaude/core/remote-host";
 import { errorMessage } from "../utils/errors.js";
 import { log } from "../system/logger/index.js";
-import { storage } from "./firebase.js";
+import { currentStorage } from "./session.js";
 const PREFIX = "remote-host";
@@ -42,7 +42,7 @@ const stagedStorageIds = (params: JsonObject): string[] => {
 export const onExpire = async (command: Command, uid: string): Promise<void> => {
   for (const storageId of stagedStorageIds(command.params)) {
     try {
-      await deleteObject(ref(storage, `users/${uid}/uploads/${storageId}`));
+      await deleteObject(ref(currentStorage(), `users/${uid}/uploads/${storageId}`));
     } catch (error) {
       log.warn(PREFIX, "failed to delete staged upload for expired command; leaving orphan for TTL sweep", { storageId, error: errorMessage(error) });
     }

package/server/remoteHost/session.ts ADDED Viewed

@@ -0,0 +1,83 @@
+// Firebase session for this host's remote-host runner, backed by the export/
+// seed-able session controller in `@mulmoclaude/core/remote-host/server` so a
+// server restart doesn't drop the session — the browser parks it in
+// localStorage and hands it back on reconnect (case A', mulmoserver#50).
+//
+// The controller opens a FRESH Firebase app per (re)connect (initializeAuth
+// reads persistence once), so `auth`/`firestore`/`storage` change each time.
+// This module holds the current handles and exposes them as getters, so the
+// runner, onExpire, and attachment ingest always target the live session's
+// Firestore/Storage/uid rather than a stale module-level instance.
+import { createRemoteHostAuth, createRemoteHostSession, isSeedableBlob, type RemoteHostSessionHandles } from "@mulmoclaude/core/remote-host/server";
+import type { Firestore } from "firebase/firestore";
+import type { FirebaseStorage } from "firebase/storage";
+import { firebaseConfig } from "../../src/config/firebaseConfig.js";
+const session = createRemoteHostSession(firebaseConfig);
+let handles: RemoteHostSessionHandles | null = null;
+// A parked blob that Firebase restored to no valid user (expired refresh token,
+// revoked session). Distinct from transient/init failures so the route can
+// answer 401 (client drops the blob) instead of 5xx (client keeps it).
+export class RemoteHostSessionExpiredError extends Error {
+  constructor() {
+    super("remote-host session could not be restored");
+    this.name = "RemoteHostSessionExpiredError";
+  }
+}
+const uidOf = (opened: RemoteHostSessionHandles): string => {
+  const uid = opened.auth.currentUser?.uid;
+  if (!uid) throw new Error("remote-host session opened without an authenticated user");
+  return uid;
+};
+// Fresh connect: open a clean session and sign in with the browser-minted Google
+// OAuth ID token. The sign-in runs as the session's `validate` step, so a bad
+// token rolls the fresh app back and leaves any live session untouched. Resolves
+// to the authenticated uid.
+export const signIn = async (idToken: string): Promise<string> => {
+  const next = await session.open(undefined, async (opened) => {
+    await createRemoteHostAuth(opened.auth).signInHost(idToken);
+  });
+  handles = next;
+  return uidOf(next);
+};
+// Popup-free reconnect: open the session seeded from the browser-parked blob,
+// validating (before any teardown) that it restored a real user. Both a
+// malformed blob and one that yields no user reject with
+// RemoteHostSessionExpiredError — neither can ever restore a session, so the
+// client is told (401) to drop it; genuine transient failures propagate as-is
+// (5xx, blob kept). Reconnect stays non-destructive either way.
+export const restore = async (blob: string): Promise<string> => {
+  if (!isSeedableBlob(blob)) throw new RemoteHostSessionExpiredError();
+  const next = await session.open(blob, (opened) => (opened.uid ? Promise.resolve() : Promise.reject(new RemoteHostSessionExpiredError())));
+  handles = next;
+  return uidOf(next);
+};
+// Tear the local session down even if the Firebase sign-out throws: otherwise
+// `handles`/`currentUid` would stay stale and the app would leak while the route
+// answered 500. The sign-out error still propagates after cleanup.
+export const signOut = async (): Promise<void> => {
+  try {
+    if (handles) await createRemoteHostAuth(handles.auth).signOutHost();
+  } finally {
+    handles = null;
+    await session.close();
+  }
+};
+const requireHandles = (): RemoteHostSessionHandles => {
+  if (!handles) throw new Error("remote-host session is not open");
+  return handles;
+};
+export const currentUid = (): string | null => handles?.auth.currentUser?.uid ?? null;
+export const currentFirestore = (): Firestore => requireHandles().firestore;
+export const currentStorage = (): FirebaseStorage => requireHandles().storage;
+// The blob the browser parks (refresh token included). Null when disconnected.
+export const exportSession = (): string | null => session.exportSession();

package/src/App.vue CHANGED Viewed

@@ -150,6 +150,7 @@
           ref="chatInputRef"
           v-model="userInput"
           v-model:pasted-files="pastedFiles"
+          v-model:buffered-messages="currentBufferedMessages"
           :is-running="activeSessionRunning"
           :queries="sessionRoleQueries"
           :session-id="currentSessionId"
@@ -286,6 +287,7 @@
             ref="chatInputRef"
             v-model="userInput"
             v-model:pasted-files="pastedFiles"
+            v-model:buffered-messages="currentBufferedMessages"
             :is-running="activeSessionRunning"
             :queries="sessionRoleQueries"
             :session-id="currentSessionId"
@@ -367,6 +369,7 @@ import { resolvePastedAttachment } from "./utils/agent/pastedAttachment";
 import { applyAgentEvent, type AgentEventContext } from "./utils/agent/eventDispatch";
 import { pushErrorMessage, beginUserTurn, updateResult, applyToolResultToSession } from "./utils/session/sessionHelpers";
 import { parseCollectionSlashSeed, makeSyntheticCollectionResult, hasRealCollectionResult } from "./utils/collections/presentSeed";
+import { mergeBufferedIntoDraft } from "./utils/chat/buffer";
 import { roleName, roleIcon } from "./utils/role/icon";
 import { createEmptySession } from "./utils/session/sessionFactory";
 import { buildLoadedSession, parseSessionEntries } from "./utils/session/sessionEntries";
@@ -493,6 +496,18 @@ const { shortcuts } = useShortcuts();
 const userInput = ref("");
 const pastedFiles = ref<PastedFile[]>([]);
+// Messages the user sends while a run is in flight queue here instead of
+// dispatching, keyed by the session they belong to so concurrent runs in
+// different sessions never mix. `currentBufferedMessages` is the displayed
+// session's queue; it merges back into `userInput` when that session's run
+// finishes (see watch below).
+const bufferedMessagesBySession = ref<Record<string, string[]>>({});
+const currentBufferedMessages = computed<string[]>({
+  get: () => bufferedMessagesBySession.value[currentSessionId.value] ?? [],
+  set: (messages) => {
+    bufferedMessagesBySession.value = { ...bufferedMessagesBySession.value, [currentSessionId.value]: messages };
+  },
+});
 const activePane = ref<"sidebar" | "main">("sidebar");
 const { sessions, historyError, fetchSessions, setBookmark, deleteSession: deleteSessionFromHistory } = useSessionHistory();
@@ -1113,8 +1128,16 @@ async function resolveAttachmentPaths(files: PastedFile[]): Promise<AttachmentRe
 }
 async function sendMessage(text?: string) {
-  const message = typeof text === "string" ? text : userInput.value.trim();
-  if (!message || activeSessionRunning.value) return;
+  const fromInput = typeof text !== "string";
+  const message = fromInput ? userInput.value.trim() : text.trim();
+  if (!message) return;
+  // Run in flight: queue instead of dispatching. The input isn't locked,
+  // so the user keeps composing; queued lines come back on completion.
+  if (activeSessionRunning.value) {
+    currentBufferedMessages.value = [...currentBufferedMessages.value, message];
+    if (fromInput) userInput.value = "";
+    return;
+  }
   userInput.value = "";
   const filesSnapshot = [...pastedFiles.value];
   pastedFiles.value = [];
@@ -1149,6 +1172,19 @@ async function sendMessage(text?: string) {
   }
 }
+// Drain the displayed session's queued messages back into the input once
+// its run finishes. Keyed by `currentSessionId`, so switching to another
+// session shows (and later drains) that session's own queue — a background
+// run in a different session never dumps its queue into the wrong input.
+watch([activeSessionRunning, currentSessionId], () => {
+  if (activeSessionRunning.value) return;
+  const queued = currentBufferedMessages.value;
+  if (queued.length === 0) return;
+  userInput.value = mergeBufferedIntoDraft(queued, userInput.value);
+  currentBufferedMessages.value = [];
+  focusChatInput();
+});
 // Stop the in-flight agent run for the displayed session. The server's
 // /api/agent/cancel aborts the AbortController, kills the Claude
 // subprocess, and publishes `session_finished` — which flips

package/src/components/ChatInput.vue CHANGED Viewed

@@ -34,15 +34,40 @@
           @remove="removeFileAt(index)"
         />
       </div>
+      <!-- Messages sent while the agent is running queue here instead of
+           going out immediately; they merge back into the input for a
+           final edit + send once the run finishes (App.vue owns the
+           merge). Each chip is removable so a queued line can be dropped
+           before it comes back. -->
+      <div v-if="bufferedMessages.length > 0" class="flex flex-col gap-1 mb-1" data-testid="buffered-message-list">
+        <div
+          v-for="(message, index) in bufferedMessages"
+          :key="index"
+          class="flex items-center gap-1.5 bg-blue-50 border border-blue-200 rounded px-2 py-1 text-xs text-gray-700"
+          data-testid="buffered-message"
+        >
+          <span class="material-icons text-sm leading-none text-blue-400">schedule</span>
+          <span class="flex-1 truncate" :title="message">{{ message }}</span>
+          <button
+            type="button"
+            class="text-gray-400 hover:text-red-600 shrink-0 flex items-center"
+            :title="t('chatInput.removeBuffered')"
+            :aria-label="t('chatInput.removeBuffered')"
+            data-testid="buffered-message-remove"
+            @click="removeBufferedAt(index)"
+          >
+            <span class="material-icons text-sm leading-none">close</span>
+          </button>
+        </div>
+      </div>
       <div class="flex gap-2" :class="{ 'mt-2': pastedFiles.length > 0 }">
         <textarea
           ref="textarea"
           :value="modelValue"
           data-testid="user-input"
-          :placeholder="t('chatInput.placeholder')"
+          :placeholder="placeholder"
           rows="2"
-          class="flex-1 bg-white border border-gray-300 rounded px-3 py-2 text-sm text-gray-900 placeholder-gray-400 disabled:opacity-50 disabled:cursor-not-allowed resize-none"
-          :disabled="isRunning"
+          class="flex-1 bg-white border border-gray-300 rounded px-3 py-2 text-sm text-gray-900 placeholder-gray-400 resize-none"
           @input="emit('update:modelValue', ($event.target as HTMLTextAreaElement).value)"
           @compositionstart="imeEnter.onCompositionStart"
           @compositionend="imeEnter.onCompositionEnd"
@@ -143,6 +168,10 @@ const props = withDefaults(
     modelValue: string;
     pastedFiles: PastedFile[];
     isRunning: boolean;
+    /** Messages queued while the agent runs. Rendered as removable chips
+     *  above the input; App.vue merges them back into `modelValue` when
+     *  the run finishes. */
+    bufferedMessages?: string[];
     queries?: string[];
     /** Currently displayed session id. Voice "armed" state is reset
      *  whenever this changes so leaving a session and coming back
@@ -150,17 +179,27 @@ const props = withDefaults(
      *  persisted). */
     sessionId?: string;
   }>(),
-  { queries: () => [], sessionId: "" },
+  { bufferedMessages: () => [], queries: () => [], sessionId: "" },
 );
 const emit = defineEmits<{
   "update:modelValue": [value: string];
   "update:pastedFiles": [files: PastedFile[]];
+  "update:bufferedMessages": [messages: string[]];
   send: [];
   stop: [];
   "suggestion-send": [query: string];
 }>();
+const placeholder = computed(() => (props.isRunning ? t("chatInput.runningPlaceholder") : t("chatInput.placeholder")));
+function removeBufferedAt(index: number): void {
+  emit(
+    "update:bufferedMessages",
+    props.bufferedMessages.filter((_, i) => i !== index),
+  );
+}
 // Local voice input (Mac-only). The mic button is hidden unless the
 // backend reports voice input ready; transcripts are appended to the
 // input for review, never auto-sent. See plans/done/feat-voice-input.md.
@@ -422,12 +461,38 @@ watch(slashMenuOpen, (open) => {
 });
 function onKeydown(event: KeyboardEvent): void {
+  // Ctrl/Cmd+Enter inserts a newline instead of sending. Checked before the
+  // slash menu so the chord still works while a skill is highlighted (the
+  // menu's Enter handler would otherwise select it). A textarea does not
+  // insert on this chord natively, so we splice it in at the caret.
+  if (isNewlineChord(event)) {
+    event.preventDefault();
+    insertNewlineAtCursor();
+    return;
+  }
   if (slashMenuOpen.value && handleSlashMenuKeydown(slashMenu, event, { isImeConfirmation: imeEnter.isImeConfirmation, onSelect: selectSlashSkill })) {
     return;
   }
   imeEnter.onKeydown(event);
 }
+function isNewlineChord(event: KeyboardEvent): boolean {
+  return event.key === "Enter" && (event.ctrlKey || event.metaKey) && !imeEnter.isImeConfirmation(event);
+}
+function insertNewlineAtCursor(): void {
+  const field = textarea.value;
+  const value = props.modelValue;
+  const start = field?.selectionStart ?? value.length;
+  const end = field?.selectionEnd ?? start;
+  emit("update:modelValue", `${value.slice(0, start)}\n${value.slice(end)}`);
+  nextTick(() => {
+    const caret = start + 1;
+    field?.focus();
+    field?.setSelectionRange(caret, caret);
+  });
+}
 // Selection populates `/<name> ` (trailing space dismisses the menu via the
 // no-bare-token rule and lets the user type arguments) — it never sends.
 function selectSlashSkill(skill: SkillSummary): void {

package/src/components/RemoteHostControl.vue CHANGED Viewed

@@ -97,10 +97,37 @@ interface RemoteHostStatus {
 }
 interface StatusResponse {
   status: RemoteHostStatus;
+  // The server's Firebase session blob (refresh token included). We park it in
+  // localStorage so a server restart can reconnect without a Google popup
+  // (case A', mulmoserver#50). Null when disconnected.
+  session: string | null;
 }
 const { t } = useI18n();
+// Same-machine (localhost) trust model — see mulmoserver#50. Wrapped so a
+// storage-disabled context (private mode) degrades to "no persistence" rather
+// than throwing.
+const SESSION_KEY = "remoteHost.session";
+// Reconnect status that means "this blob is expired/invalid" (vs a transient
+// failure), so only then do we drop the parked session.
+const UNAUTHORIZED = 401;
+const loadStoredSession = (): string | null => {
+  try {
+    return localStorage.getItem(SESSION_KEY);
+  } catch {
+    return null;
+  }
+};
+const persistSession = (blob: string | null): void => {
+  try {
+    if (blob) localStorage.setItem(SESSION_KEY, blob);
+    else localStorage.removeItem(SESSION_KEY);
+  } catch {
+    /* storage unavailable — reconnect just won't survive a restart */
+  }
+};
 // Mobile companion PWA. Shown in the popover as help text; not fetched from
 // this desktop app, so no runtime env override is needed.
 const MOBILE_URL = "https://mulmoserver.web.app";
@@ -117,12 +144,33 @@ const refreshStatus = async () => {
   const res = await apiGet<StatusResponse>(API_ROUTES.remoteHost.status);
   if (res.ok) {
     status.value = res.data.status;
+    // Keep the parked blob fresh (the refresh token can rotate) — but never
+    // clear it on a disconnected status, so an auto-reconnect still has it.
+    if (res.data.session) persistSession(res.data.session);
     error.value = null;
   } else {
     error.value = res.error || t("remoteHost.statusFailed");
   }
 };
+// On load, if the server is disconnected but we have a parked session, restore
+// it without a popup.
+const tryAutoReconnect = async () => {
+  if (status.value.connected) return;
+  const blob = loadStoredSession();
+  if (!blob) return;
+  const res = await apiPost<StatusResponse>(API_ROUTES.remoteHost.reconnect, { session: blob });
+  if (res.ok) {
+    status.value = res.data.status;
+    persistSession(res.data.session);
+  } else if (res.status === UNAUTHORIZED) {
+    // 401 = the blob is genuinely expired/invalid: drop it so the user just sees
+    // the normal Connect button. Transient failures (network status 0, backend
+    // 5xx) KEEP the blob so a later retry / restart can still reconnect popup-free.
+    persistSession(null);
+  }
+};
 const toggle = () => {
   open.value = !open.value;
   if (open.value) void refreshStatus();
@@ -144,6 +192,7 @@ const onConnect = async () => {
       return;
     }
     status.value = res.data.status;
+    persistSession(res.data.session); // park the session for popup-free reconnect after a restart
     open.value = false; // close the popover after a successful login
   } catch (err) {
     error.value = errorMessage(err, t("remoteHost.signInFailed"));
@@ -162,6 +211,7 @@ const onDisconnect = async () => {
       return;
     }
     status.value = res.data.status;
+    persistSession(null); // forget the parked session on an explicit disconnect
     open.value = false; // close the popover after a successful logout
   } catch (err) {
     error.value = errorMessage(err, t("remoteHost.disconnectFailed"));
@@ -177,7 +227,9 @@ const onDocumentClick = (event: MouseEvent) => {
 };
 onMounted(() => {
-  void refreshStatus();
+  refreshStatus()
+    .then(tryAutoReconnect)
+    .catch(() => undefined);
   document.addEventListener("mousedown", onDocumentClick);
 });
 onBeforeUnmount(() => document.removeEventListener("mousedown", onDocumentClick));

package/src/config/apiRoutes.ts CHANGED Viewed

@@ -168,6 +168,7 @@ const HOST_API_ROUTES = {
   // plans/feat-remote-host-firestore-list-collections.md.
   remoteHost: {
     connect: "/api/remote-host/connect",
+    reconnect: "/api/remote-host/reconnect",
     disconnect: "/api/remote-host/disconnect",
     status: "/api/remote-host/status",
   },