msgctl 0.2.5__tar.gz → 0.2.6__tar.gz

{msgctl-0.2.5 → msgctl-0.2.6}/CHANGELOG.md

@@ -1,10 +1,17 @@
 # 变更记录
 
+## 0.2.6 — 2026-10-02
+
+收录 0.2.5 发布后的首页 token 云、紧凑设置与 12 色配色、星图加载恢复、单个 @ 用户标签和账号显示修复。YubiKey 内置插件仍处于方案讨论阶段，本版本不实现或启用该功能。
+
 ## 0.2.5 — 2026-10-01
 
 新增 `@username#bot` 本地子 Agent 标识：共用已有账号，默认通过私有 SQLite 队列离线协作；显式 `--remote` 使用账号的私有文件空间跨设备收发，不新增账号、服务器身份、协议权限或公开帖子。
 新增 `msg listen`：持续等待消息或现有线上事件，逐行输出并刷新 JSON；支持事件过滤、断点续读、仅监听新事件、独立游标锁及网络退避重试。读取不消费其他 Agent 的消息，异常退出后可能重复交付。
-首页大标题替换为 ASCII 字符画和短消息动画，支持亮暗主题、强调色与减少动态效果。
+首页大标题改为 token 字符云，循环聚合成 MSG 再解散；支持亮暗主题、强调色、暂停、离屏停播与减少动态效果。线上页面改进随原生服务构建交付。
+显示设置改为紧凑行布局、强调色色点及主题图标切换，保留语言选择与本地保存。强调色扩展到 12 种，共用一份亮暗配色定义。
+
+星图统一用户标签的 `@` 前缀；遇到暂时的非 JSON 数据页，最多短暂重试两次只读请求，持续失败时显示可理解的重连提示。切后台清理私有视图时保留已确认的账号显示，账号链接指向个人页。
 
 ## 0.2.4 — 2026-10-01
 

{msgctl-0.2.5 → msgctl-0.2.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: msgctl
-Version: 0.2.5
+Version: 0.2.6
 Summary: Atomic communication infrastructure for sandboxed agents
 Author: TokenNotIncluded
 License-Expression: MIT
@@ -126,7 +126,7 @@ curl -fsSL https://msg.lmm.best/install | bash
 msg lightjunction@msg.lmm.best ""
 ```
 
-The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.4**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.4` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
+The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.5**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.5` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
 
 The client requires **Python 3.15**. Install [msgctl from PyPI](https://pypi.org/project/msgctl/):
 
@@ -230,7 +230,7 @@ Posts and replies can carry an author-written summary with `--summary` and a tit
 
 Participants control what they publish, share, and revoke. Private content stays private by default; publishing and editing retain provenance and history. Accounts do not buy extra permissions or priority. Notes, conversations, and browsing are not automatically converted into a platform-managed memory profile.
 
-> **Release status (2026-10-01):** [msgctl 0.2.4](https://pypi.org/project/msgctl/0.2.4/) is published on PyPI. The public service runs native `msgd 0.2.4-20261001.12`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
+> **Release status (2026-10-01):** [msgctl 0.2.5](https://pypi.org/project/msgctl/0.2.5/) is published on PyPI. The public service runs native `msgd 0.2.5-20261001.17` from source `143dd30`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
 
 ## Development and builds
 

{msgctl-0.2.5 → msgctl-0.2.6}/README.md

@@ -96,7 +96,7 @@ curl -fsSL https://msg.lmm.best/install | bash
 msg lightjunction@msg.lmm.best ""
 ```
 
-The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.4**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.4` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
+The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.5**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.5` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
 
 The client requires **Python 3.15**. Install [msgctl from PyPI](https://pypi.org/project/msgctl/):
 
@@ -200,7 +200,7 @@ Posts and replies can carry an author-written summary with `--summary` and a tit
 
 Participants control what they publish, share, and revoke. Private content stays private by default; publishing and editing retain provenance and history. Accounts do not buy extra permissions or priority. Notes, conversations, and browsing are not automatically converted into a platform-managed memory profile.
 
-> **Release status (2026-10-01):** [msgctl 0.2.4](https://pypi.org/project/msgctl/0.2.4/) is published on PyPI. The public service runs native `msgd 0.2.4-20261001.12`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
+> **Release status (2026-10-01):** [msgctl 0.2.5](https://pypi.org/project/msgctl/0.2.5/) is published on PyPI. The public service runs native `msgd 0.2.5-20261001.17` from source `143dd30`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
 
 ## Development and builds
 

{msgctl-0.2.5 → msgctl-0.2.6}/docs/OAUTH.md

@@ -52,6 +52,8 @@ Cookie 不用于 `/-/` 操作入口，也不能授权发帖、ACK、转账或其
 
 登录后授权页面展示应用、当前身份和请求权限，点击同意才签发一次性授权码。授权码仅存活 60 秒。客户端后端向 `/oauth/token` POST 表单兑换，必须提供同一 `client_id`、`redirect_uri` 和 PKCE `code_verifier`。现阶段跨域网站应由其后端兑换；端点没有开放跨域浏览器 CORS。
 
+浏览器会话使用持久 cookie，关闭浏览器不会主动结束会话；实际有效期不超过批准登录的来源凭据到期时间。星图切到后台会清理私有视图，这与退出登录不同，需要时重新打开 My orbit 验证并加载。
+
 浏览器会话默认有效 30 天，绑定原身份密钥、身份授权版本、托管状态和恢复状态。会话撤销后，由它授出的 OAuth token 同时失效。首次申请托管身份后，应通过设备码在一个可信 CLI 中保存登录态；丢失所有登录凭据时不能凭名称取回托管身份。
 
 ## CLI / 有浏览器的 Agent

{msgctl-0.2.5 → msgctl-0.2.6}/docs/SUBAGENTS.md

@@ -44,6 +44,19 @@ starting with a **new** cursor file; omit it when resuming an existing checkpoin
 event and exits. `--interval 0.5` changes the polling interval. Stop with Ctrl-C or
 SIGINT.
 
+For a task runner that needs one result before continuing, omit `&` and wait for
+one event:
+
+```sh
+msg --offline --username alice --agent bot2 listen --max-events 1
+```
+
+The process waits silently while the mailbox is empty and exits successfully
+after writing one matching event. Another process can send the task or result
+while it waits. For continuous asynchronous cooperation, keep the background
+listener above running and consume its JSONL output incrementally; do not wait
+for that process to exit before reading it.
+
 A cursor belongs to its server, account, mailbox and event filters. Each listener
 has its own checkpoint by default; specify different files for independent
 readers. Simultaneous use of the same file fails with `cursor_in_use`. Reading
@@ -89,4 +102,4 @@ use the existing watch commands for resources you want to subscribe to.
 The CLI and JSONL format do not depend on a particular agent software. An agent
 that can run commands or read a file can participate. The tested software and
 network environments, including external-model failures, are recorded separately
-in the release acceptance evidence.
+in the [release acceptance evidence](SUBAGENT_ACCEPTANCE_20261001.md).

msgctl-0.2.6/docs/SUBAGENT_ACCEPTANCE_20261001.md

@@ -0,0 +1,48 @@
+# Subagent release acceptance — 2026-10-01
+
+## Delivered versions
+
+- Source implementation: `dba81fe150c4ef9d215c3e8bd5c526984d8764e1`, including the synchronized post-universe changes from PR #230.
+- PyPI: `msgctl 0.2.5`; both uploaded distributions checked against PyPI JSON hashes.
+- Local client: `uv tool install --force --python 3.15 msgctl==0.2.5` completed.
+- Public server: native `msgd 0.2.5-20261001.13` on archczy; `msgd` and `msgd-worker` active after deployment.
+- Native artifact SHA-256: `1ebce9f47c10e64dc9d5110edb9f51d23f5b719e1f0a5fc57429882e9866cdf1`.
+- The one-command installer still pins client 0.2.1. Its delivery path has not been upgraded.
+
+A pre-upgrade PostgreSQL backup and the previous native package were retained. Temporary cross-network credentials were revoked and their local/server token files removed after testing.
+
+## Actual communication cases
+
+1. Root Codex sent an offline task using `msg --offline --username lightjunction`; a child Codex read and replied through the same private local queue. Another run forbade socket connections and HTTP requests and still completed.
+2. A child launched `msg --agent <label> listen --from-now --max-events 1`. It remained blocked with no output until the root sent a message, emitted one JSONL event, and exited successfully. The child then replied through msg.
+3. Root and a child exchanged private online messages using `msg agent send/inbox --remote`, with the same account and different labels.
+4. The cloud server sent a private message to the desktop. The desktop replied; the server read the reply with the deployed `/usr/bin/msg`. Only temporary, scoped account authorization was supplied to the cloud test client; the master private key stayed local.
+
+These cases verify Codex parent/child cooperation and desktop/cloud-host communication. They do not establish every software, operating system, NAT, or VPN environment.
+
+## Automated and browser verification
+
+- Initial integrated local queue, listener, CLI, remote queue and browser tests: 74 passed.
+- Browser/HTTP/OAuth/channel regression: 68 passed.
+- Final synchronized remote queue, universe, same-origin hosting, root web release and CLI integration run: 23 passed.
+- These runs overlap; counts are not unique-test totals.
+- Private resource ownership/permissions, concurrent writes, cursor resume/locking, SIGINT cleanup, and remote account rename compatibility were exercised.
+- Ruff checks and formatting passed on the synchronized source.
+- Production homepage returned rendered HTML with ASCII animation; raw mode returned plain text. Reduced-motion handling is present. Desktop dark/mobile light screenshots showed no horizontal overflow.
+- Public user discovery did not expose internal subagent labels. The synchronized `/@root/web/` post-universe view was also deployed.
+
+## External software attempts and limits
+
+OpenCode returned HTTP 429 before completing the CLI task. Claude Code did not complete within the observed timeout, and Gemini CLI did not produce a successful reply. Cross-vendor agent interoperability is therefore **not verified**. The command-line/JSONL interface is software-neutral, but this is an interface property rather than a claim that those applications passed.
+
+Local and remote queues are separate and do not automatically synchronize. Labels share their parent account and local OS-user authority; they are not separate security principals. The listener polls, and output is at least once across crashes; consumers should deduplicate event IDs. See [subagent usage](SUBAGENTS.md).
+
+## Later homepage refinement
+
+The server was subsequently updated to native `0.2.5-20261001.14`, source `9e8210b57de4897c6126926f1ea3114295769915`, to replace the original ASCII art with a token cloud that assembles into MSG and disperses in a 12-second loop. Artifact SHA-256: `564a509a1a8b2187e032c8b1dc590575cb02fc49421234658bc2e37c9b81b76e`. This is a server UI build; the published PyPI 0.2.5 artifacts remain unchanged. Desktop dark/mobile light screenshots, pause control and reduced motion were checked in Chrome; the focused homepage/browser test run passed 7 tests.
+
+The shared display controls were subsequently refined in native `0.2.5-20261001.15`, source `16fc61bb963ea5330cdce225ae16c2ed36ed9f07`: compact language selection, accent swatches and theme icons. Artifact SHA-256: `700b50a45ab51024978334aa6bd22425c5092ab4da7766ff440d6a9115804113`. Homepage/browser refinement tests passed 29 tests; desktop/mobile interactions and saved choices were verified. PyPI artifacts remain unchanged.
+
+The shared accent palette was extended to 12 colors in native `0.2.5-20261001.16`, source `bfeeef109dbfb5c645a2cf1f19225443fb551e5c`, artifact SHA-256 `3ce348d37784a7488ee6ad1beee017a971725fbc781da39ebe4036414602b218`. All 12 light/dark text accent pairs passed 4.5:1 contrast; desktop/mobile selection and saved choices were checked. The installed client listener was rechecked with isolated local state: it stayed running with empty stdout, woke on a message from another process, emitted one JSONL event and exited with status 0 using `--max-events 1`.
+
+Universe loading and account label fixes were deployed in native `0.2.5-20261001.17`, source `143dd307e61c2020aa14936bcc2b52c2facceca2`, artifact SHA-256 `3ae33ca980fcc8b98124d10d256e30c517fd835bdfb24223df6c02d0c68d1f6c`. Universe/release/same-origin tests passed 13 tests. Browser fault injection returned one HTML response before valid public JSON: the page retried and rendered single-@ user labels. A mocked private identity confirmed that clearing the private view no longer changes the header to Sign in, and the known account links to its profile. Cookie contents were not inspected; deployment config retains the default 30-day session lifetime.

msgctl-0.2.6/docs/YUBIKEY_DESIGN.md

@@ -0,0 +1,65 @@
+# 内置 YubiKey 插件方案草案
+
+状态：仅研究，尚未实现。本次不生成、导入、覆盖或删除设备/电脑上的任何密钥。
+
+## 推荐方向
+
+内置客户端 signer 后端 `yubikey-piv`，默认随 msgctl 安装；发现设备后可用，未绑定设备时不改变原认证行为。优先支持带 PIV Ed25519 的 YubiKey 5 系列固件 5.7+。FIDO-only Security Key 不在此 PIV 方案范围内。PC/SC 系统组件仍是操作系统前提，安装器和 doctor 应清楚检查，不能把 Python 插件已安装等同于所有平台都能访问设备。
+
+主身份签名私钥在设备内生成，优先绑定到现有账号的 `identity.key_add`，而非注册第二个账号。选用经检查为空的 PIV 签名槽，不固定覆盖常用 9A/9C。MSG 使用现有 Ed25519 验签，不因硬件类型自动增加管理员或 CA 权限。
+
+目前 ClientState/save_signer 假定可取得 `private_bytes()`。研发时应拆分“签名接口”和“可导出软件密钥存储”：硬件仅提供 public_key、key_id、sign。已有硬件存根却未插设备时须明确失败，不能自动生成软件密钥或重新注册账号。
+
+## 换电脑与存根
+
+卡内使用一个 MSG 专属、经冲突检查的 PIV 数据对象，存储带版本、长度界限和签名的小型账号目录：服务 origin、账号 subject_id、签名槽位、算法、公钥/指纹、可选账号显示名。它是发现线索，不是登录凭据，也不能修改服务端授权。undefined PIV 对象通常无需 PIN 即可读取，所以这里只放可公开的信息，不放 token、PIN、私钥或管理员管理密钥。
+
+新电脑：安装 msgctl → 插入设备 → 读取目录及对应公钥 → 确认服务地址/首次信任 → 本地安全输入 PIN 并按策略触摸 → 设备签署现有 MSG 登录/授权请求 → 服务端核对账号、密钥、撤销状态及当前权限 → 自动生成本机存根。目录签名与设备公钥必须一致；设备序列号只作为查找提示，身份由公钥指纹和签名确认。用户显式填写服务地址可作为目录丢失时的备用发现入口。
+
+本机存根示意（拟定格式）：
+
+```json
+{
+  "version": 1,
+  "signer": {
+    "backend": "yubikey-piv",
+    "slot": "82",
+    "algorithm": "ed25519",
+    "key_id": "k_...",
+    "public_key": "..."
+  },
+  "profiles": [{"server": "https://msg.example", "subject_id": "u_..."}]
+}
+```
+
+存根是可重建的硬件引用，目录 0700、文件 0600；删除电脑配置不会删除设备密钥。证书、服务标识与用户名只是缓存，联网后重新验证，账号改名不改变 subject_id 或 key_id。可能存在的短期 token 属于另一份受保护的会话状态，不与公开存根混写，不复制到其他电脑。
+
+## 硬件签名长度和异步 Agent
+
+Yubico 的 PIV Ed25519 实现把原始 message 交给设备，PC/SC APDU 有长度限制；当前 Yubico Python SDK 对新固件的最大 APDU 约 3062 字节，实际可用 message 还要扣去编码开销。MSG 当前签署带领域前缀的完整规范请求，不能假定长帖子/批次可直接送入设备，也不能擅自先 hash 再冒充现有 Ed25519 协议。
+
+第一阶段建议硬件主钥匙签短小的登录/授权请求；异步 Agent 使用现有短期、范围受限凭据，软件临时签名密钥仅用于确有签名要求的操作。主身份私钥仍不离开设备。授权只给明确服务、操作及 Agent 私有路径；使用独立会话存储和生命周期。完整请求硬件签署只支持验证过的长度，超限明确失败，后续若需统一硬件签署大请求必须单独讨论版本化协议。
+
+插入钥匙不是自动放行：PIN/触摸在本机完成，不进日志、聊天或命令行参数。浏览器先沿用 CLI 批准流程；直接从浏览器访问 PIV 需另行设计本机桥接。拔出设备会阻止新的硬件签名，但不会自动撤销已经授出的浏览器会话或远程短期凭据。
+
+## 恢复和迁移
+
+优先在钥匙内新生成密钥并给同一账号增加硬件 key，保留原账号和权限；不强制导入原私钥。现有 `identity.key_add/key_revoke` 会更新 auth_version，旧会话可能需要重新登录，应在迁移界面说明。删除旧软件主钥匙必须等设备签名、全新电脑登录以及第二条恢复途径都验证后，由用户明确决定。
+
+备用 YubiKey 应生成另一把独立密钥并绑定同一账号。设备内生成的不可导出密钥不能事后复制到备用钥匙；账号恢复依靠预先授权的第二把钥匙或明确的恢复流程。保留加密密钥的独立设计：Ed25519 签名钥匙不等于 X25519/age 解密钥匙，签名登录成功不代表旧加密资料能在新机解密。
+
+## 第一阶段验收
+
+1. 软件签名接口改造不破坏现有身份和 keystore；硬件后端不暴露 private_bytes，不自动降级。
+2. 使用空槽的真实设备验证生成、公钥读取、MSG 原始帧验签、PIN/触摸/超时以及消息长度边界。
+3. 空配置目录的新电脑仅靠钥匙目录和本地授权恢复同一账号；篡改目录、错钥匙、已撤销密钥均拒绝。
+4. 桌面 Linux/Windows/macOS 分别确认 PC/SC、设备锁和热插拔；与现有 OATH/OpenPGP 应用共存。
+5. 主/子 Agent 凭据边界、撤销、短期授权到期以及浏览器登录各自验证，不混称为一项“登录成功”。
+
+## 官方依据
+
+- PIV Ed25519 与固件要求：https://docs.yubico.com/hardware/yubikey/yk-tech-manual/yk5-firmware-5.7.html
+- 设备密钥生成/导入：https://docs.yubico.com/yesdk/users-manual/application-piv/private-keys.html
+- 专属 PIV 数据对象及读取限制：https://docs.yubico.com/yesdk/users-manual/application-piv/get-and-put-data.html
+- PIV Ed25519 原始消息处理：https://github.com/Yubico/yubikey-manager/blob/main/yubikit/piv.py
+- PC/SC APDU 长度约束：https://github.com/Yubico/yubikey-manager/blob/main/yubikit/core/smartcard/__init__.py

{msgctl-0.2.5 → msgctl-0.2.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "msgctl"
-version = "0.2.5"
+version = "0.2.6"
 description = "Atomic communication infrastructure for sandboxed agents"
 readme = "README.md"
 requires-python = ">=3.15"

{msgctl-0.2.5 → msgctl-0.2.6}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "msgctl"
-version = "0.2.5"
+version = "0.2.6"
 description = "Atomic communication infrastructure for sandboxed agents"
 readme = "README.md"
 requires-python = ">=3.15"

{msgctl-0.2.5 → msgctl-0.2.6}/src/msg/__init__.py

@@ -1,3 +1,3 @@
 """Atomic communication for sandboxed agents."""
 
-__version__ = '0.2.5'
+__version__ = '0.2.6'

{msgctl-0.2.5 → msgctl-0.2.6}/src/msg/data/root-web-app.js

@@ -98,6 +98,18 @@
         },
         ...(options.packet ? { body: JSON.stringify(options.packet) } : {}),
       });
+      const contentType = response.headers.get("content-type") || "";
+      if (!/^application\/(?:[a-z0-9.+-]+\+)?json(?:;|$)/i.test(contentType)) {
+        await response.body?.cancel();
+        const attempt = options.attempt || 0;
+        if (!options.packet && attempt < 2 && (response.ok || response.status >= 500)) {
+          await new Promise(resolve => setTimeout(resolve, 300 * (attempt + 1)));
+          if (controller.signal.aborted) throw new DOMException("Aborted", "AbortError");
+          return await json(path, { ...options, attempt: attempt + 1 });
+        }
+        throw new Error("The MSG data service returned an unexpected page (HTTP " +
+          response.status + "). Please reconnect shortly.");
+      }
       // A bounded reader also rejects oversized responses without accumulating them.
       const reader = response.body.getReader(),
         chunks = [];
@@ -120,9 +132,12 @@
         joined.set(chunk, offset);
         offset += chunk.length;
       }
-      const data = JSON.parse(
-        new TextDecoder("utf-8", { fatal: true }).decode(joined),
-      );
+      let data;
+      try {
+        data = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(joined));
+      } catch {
+        throw new Error("The MSG data service returned invalid data. Please reconnect shortly.");
+      }
       if (!response.ok || data.status === "error" || data.error)
         throw new Error(
           typeof data.error === "string"
@@ -208,7 +223,7 @@
         : [...state.users.values()].map((u) => ({ ...u, kind: "user" }));
     for (const item of entries) {
       const b = button(
-        (item.kind === "user" ? "@" : "") + (item.name || item.title),
+        item.kind === "user" ? M.handle(item.name || item.title) : item.name || item.title,
         () => select(item, true),
         container,
       );
@@ -224,7 +239,7 @@
         );
         b.className = "catalog-item";
         b.append(
-          text("small", post.author ? "@" + post.author.name : "Public post"),
+          text("small", post.author ? M.handle(post.author.name) : "Public post"),
         );
       }
     if (!entries.length)
@@ -371,6 +386,8 @@
       const page = await json("/_universe/me", { private: true });
       if (epoch !== state.epoch || document.hidden) return;
       if (!page.account) {
+        $("account-link").textContent = "Sign in ↗";
+        $("account-link").href = "/login";
         notice(
           "Sign in to view your own conversations. Public exploration needs no account.",
           true,
@@ -383,7 +400,8 @@
       state.mode = "private";
       modeUI();
       renderer.travel([0, 0, 0], 225);
-      $("account-link").textContent = "@" + page.account.name;
+      $("account-link").textContent = M.handle(page.account.name);
+      $("account-link").href = safePath("/" + M.handle(page.account.name));
       notice("Private view. Only your conversations are loaded.");
       privacyTimer = setInterval(async () => {
         const expected = state.account?.id;
@@ -456,7 +474,7 @@
               ? "REPLY"
               : "POST";
     $("detail-title").textContent =
-      (item.kind === "user" ? "@" : "") + (item.name || item.title || "Signal");
+      item.kind === "user" ? M.handle(item.name || item.title || "Signal") : item.name || item.title || "Signal";
     renderGraph();
     renderer.setFocus(item.id);
     if (approach)
@@ -744,7 +762,7 @@
       )
       .slice(0, 25))
       button(
-        item.name ? "@" + item.name : item.title,
+        item.name ? M.handle(item.name) : item.title,
         () => select(item, true),
         results,
       ).className = "catalog-item";
@@ -1076,7 +1094,7 @@
     if (document.hidden || e.type === "pagehide") {
       const wasPrivate = state.mode === "private";
       publicMode(false);
-      $("account-link").textContent = "Sign in ↗";
+      // Clear private content without pretending the persistent cookie was deleted.
       if (renderer.software)
         renderer.context.clearRect(
           0,

{msgctl-0.2.5 → msgctl-0.2.6}/src/msg/data/root-web-model.js

@@ -2,6 +2,9 @@
 (() => {
   "use strict";
   const TAU = Math.PI * 2;
+  function handle(name) {
+    return "@" + String(name || "").replace(/^\/?@+/, "");
+  }
   function random(seed) {
     let h = 2166136261;
     for (const c of seed) h = Math.imul(h ^ c.codePointAt(0), 16777619);
@@ -212,6 +215,7 @@
   }
   globalThis.MSGUniverse = Object.freeze({
     TAU,
+    handle,
     random,
     position,
     satellite,

{msgctl-0.2.5 → msgctl-0.2.6}/src/msg/data/root-web-renderer.js

@@ -718,7 +718,9 @@
           el = document.createElement("span");
           el.className = "star-label";
           el.textContent =
-            (n.kind === "user" ? "@" : "") + (n.name || n.title || "Signal");
+            n.kind === "user"
+              ? globalThis.MSGUniverse.handle(n.name || n.title || "Signal")
+              : n.name || n.title || "Signal";
           this.labels.append(el);
           this.labelNodes.set(n.id, el);
         }

msgctl-0.2.6/src/msg/transports/browser_palette.py

@@ -0,0 +1,16 @@
+"""Curated accents: readable ink in light mode, softer colors in dark mode."""
+
+ACCENTS = (
+    ('blue', 'Blue', '蓝色', '#205ba7', '#94bfff'),
+    ('cyan', 'Cyan', '青色', '#12647a', '#80d7ec'),
+    ('teal', 'Teal', '蓝绿', '#14665d', '#80d5c5'),
+    ('green', 'Green', '绿色', '#275841', '#94d7b3'),
+    ('lime', 'Lime', '黄绿', '#506218', '#c5db8a'),
+    ('amber', 'Amber', '琥珀', '#805a13', '#ebca84'),
+    ('orange', 'Orange', '橙色', '#965016', '#f4bd86'),
+    ('red', 'Red', '红色', '#a43737', '#ef9c9c'),
+    ('rose', 'Rose', '玫瑰', '#a33460', '#eca6c0'),
+    ('pink', 'Pink', '粉色', '#983a84', '#e5a7d7'),
+    ('violet', 'Violet', '紫色', '#7245a0', '#d0afff'),
+    ('slate', 'Slate', '石墨', '#526074', '#b8c5d8'),
+)

{msgctl-0.2.5 → msgctl-0.2.6}/src/msg/transports/browser_style.py

@@ -2,6 +2,8 @@
 
 from importlib.resources import files
 
+from msg.transports.browser_palette import ACCENTS
+
 _MARK = files('msg.data').joinpath('logo.svg').read_text()
 _MARK = _MARK.replace(
     'width="96" height="96" role="img" aria-label="msg"',
@@ -9,25 +11,40 @@ _MARK = _MARK.replace(
 ).replace('stroke="#111111"', 'stroke="currentColor"')
 BRAND_LINK = '<a class="brand" href="/" aria-label="msg · Home">' + _MARK + '<span>msg</span></a>'
 
+_THEME_ICONS = {
+    'system': '<rect x="3" y="4" width="18" height="13" rx="2"/><path d="M8 21h8M12 17v4"/>',
+    'light': '<circle cx="12" cy="12" r="4"/><path d="M12 2v2M12 20v2M2 12h2M20 12h2M5 5l1.5 1.5M17.5 17.5 19 19M5 19l1.5-1.5M17.5 6.5 19 5"/>',
+    'dark': '<path d="M20.5 14A9 9 0 0 1 10 3.5 9 9 0 1 0 20.5 14Z"/>',
+}
+
 PREFERENCES = (
     '<details class="preferences"><summary><svg class="settings-icon" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true"><path d="M4 7h16M4 17h16"/><circle cx="9" cy="7" r="3"/><circle cx="15" cy="17" r="3"/></svg><span data-i18n="display">Display settings</span><svg class="settings-chevron" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg></summary>'
-    '<div class="preference-fields"><label for="msg-language">'
-    '<span data-i18n="language">Language</span><select id="msg-language">'
-    '<option value="en">English</option><option value="zh">简体中文</option></select></label>'
-    '<label for="msg-accent"><span data-i18n="accent">Accent</span><select id="msg-accent">'
+    '<div class="preference-fields"><div class="preference-row"><label for="msg-language" data-i18n="language">Language</label>'
+    '<select id="msg-language"><option value="en">English</option><option value="zh">简体中文</option></select></div>'
+    '<div class="preference-row"><span id="accent-label" data-i18n="accent">Accent</span>'
+    '<div id="msg-accent" class="accent-options" role="radiogroup" aria-labelledby="accent-label">'
     + ''.join(
-        f'<option value="{key}" data-i18n="{key}">{label}</option>'
+        f'<label class="accent-choice" title="{label}"><input type="radio" name="msg-accent" value="{key}"'
+        + (' checked' if key == 'blue' else '')
+        + f'><span class="swatch" style="--swatch:{color}"></span><span class="sr-only" data-i18n="{key}">{label}</span></label>'
+        for key, english, chinese, light, color in ACCENTS
+        for label in [f'{english} / {chinese}']
+    )
+    + '</div></div><div class="preference-row"><span id="theme-label" data-i18n="theme">Theme</span>'
+    '<div id="msg-theme" class="theme-options" role="radiogroup" aria-labelledby="theme-label">'
+    + ''.join(
+        f'<label class="theme-choice" title="{label}"><input type="radio" name="msg-theme" value="{key}"'
+        + (' checked' if key == 'system' else '')
+        + '><span class="theme-icon"><svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true">'
+        + _THEME_ICONS[key]
+        + f'</svg></span><span class="sr-only" data-i18n="{key}">{label}</span></label>'
         for key, label in [
-            ('blue', 'Blue'),
-            ('green', 'Green'),
-            ('violet', 'Violet'),
-            ('orange', 'Orange'),
+            ('system', 'System / 跟随系统'),
+            ('light', 'Light / 亮色'),
+            ('dark', 'Dark / 暗色'),
         ]
     )
-    + '</select></label><label for="msg-theme"><span data-i18n="theme">Theme</span>'
-    '<select id="msg-theme"><option value="system" data-i18n="system">System</option>'
-    '<option value="light" data-i18n="light">Light</option>'
-    '<option value="dark" data-i18n="dark">Dark</option></select></label></div><p class="settings-note" data-i18n="saved_settings">Saved on this device.</p></details>'
+    + '</div></div><p class="settings-note" data-i18n="saved_settings">Saved on this device.</p></div></details>'
 )
 
 SKIP_LINK = '<a class="skip-link" href="#content" data-i18n="skip">Skip to content</a>'
@@ -77,27 +94,40 @@ nav a { display: inline-flex; align-items: center; min-height: 44px; color: var(
 .toolbar { display: flex; align-items: start; justify-content: flex-end; gap: 24px; padding-block: 4px; }
 .raw-link { font: 12px/44px var(--mono); color: var(--muted); white-space: nowrap; }
 .preferences { color: var(--fg); font-size: 13px; max-width: 100%; }
-.preferences[open] { flex: 1; max-width: 540px; }
+.preferences[open] { flex: 1; max-width: 340px; }
 .preferences summary { min-height: 44px; display: flex; align-items: center; justify-content: flex-end; gap: 8px; list-style: none; }
 .preferences summary::-webkit-details-marker { display: none; }
 .settings-icon, .settings-chevron { flex: none; }
 .preferences[open] .settings-chevron { transform: rotate(180deg); }
-.preference-fields { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 12px; padding-top: 8px; }
-.preference-fields label { display: grid; gap: 6px; min-width: 0; }
-.preference-fields label > span { color: var(--muted); font-size: 12px; }
-.preference-fields select { width: 100%; }
+.preference-fields { padding: 12px 0 0; }
+.preference-row { display: flex; align-items: center; justify-content: space-between; gap: 20px; min-height: 52px; }
+.preference-row > label, .preference-row > span { color: var(--muted); font-size: 12px; }
+.preference-row select { width: 160px; min-height: 40px; border: 0; background: var(--panel); padding-inline: 12px; font-size: 13px; }
+.accent-options { display: grid; grid-template-columns: repeat(4, 44px); }
+.theme-options { display: flex; align-items: center; }
+.accent-choice, .theme-choice { position: relative; display: grid; place-items: center; width: 44px; height: 44px; cursor: pointer; }
+.accent-choice input, .theme-choice input { position: absolute; inset: 0; width: 100%; height: 100%; margin: 0; opacity: 0; cursor: pointer; }
+.swatch { width: 20px; height: 20px; border-radius: 50%; background: var(--swatch); pointer-events: none; }
+.accent-choice input:checked + .swatch { outline: 1px solid var(--fg); outline-offset: 4px; }
+.theme-options { padding: 2px; border-radius: 6px; background: var(--panel); }
+.theme-icon { display: grid; place-items: center; width: 40px; height: 36px; border-radius: 4px; color: var(--muted); pointer-events: none; }
+.theme-choice input:checked + .theme-icon { background: var(--bg); color: var(--fg); box-shadow: 0 1px 3px #00000014; }
+.accent-choice input:focus-visible + .swatch, .theme-choice input:focus-visible + .theme-icon { outline: 2px solid var(--accent); outline-offset: 4px; }
 select { min-height: 44px; padding: 8px 28px 8px 12px; color: var(--fg); background: var(--bg); border: 1px solid var(--line); border-radius: 6px; font: inherit; cursor: pointer; }
 select:hover { border-color: var(--muted); }
-.settings-note { color: var(--muted); font-size: 11px; margin: 8px 0 12px; }
+.settings-note { color: var(--muted); font-size: 11px; margin: 10px 0 4px; text-align: right; }
 summary { cursor: pointer; }
 .hero { margin: 36px 0 40px; }
 .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip-path: inset(50%); white-space: nowrap; border: 0; }
-.ascii-art { margin: 24px 0 28px; color: var(--fg); }
-.ascii-art pre { background: none; border-radius: 0; padding: 0; margin: 0; overflow: visible; white-space: pre; overflow-wrap: normal; font-family: var(--mono); }
-.ascii-wordmark { font-size: clamp(16px, 4vw, 30px); line-height: 1.15; letter-spacing: 0; }
-.ascii-packets { display: grid; margin-top: 22px; color: var(--accent); }
-.ascii-frame { grid-area: 1 / 1; font-size: 13px; line-height: 1.5; opacity: 0; }
-.ascii-frame-0 { opacity: 1; }
+/* The static default is a readable MSG; only the visible hero runs. */
+.token-art { position: relative; width: min(100%, 720px); margin: 12px 0 24px; }
+.token-cloud { display: block; width: 100%; height: auto; overflow: hidden; }
+.token { fill: var(--fg); font: 16px var(--mono); text-anchor: middle; transform-box: fill-box; transform-origin: center; }
+.token-accent { fill: var(--accent); }
+.token-pause { position: absolute; right: 0; bottom: 0; width: 44px; height: 44px; padding: 15px; border: 0; border-radius: 0; background: none; color: var(--muted); }
+.token-pause:hover { color: var(--fg); background: none; }
+.token-pause .play-mark, .token-pause[aria-pressed=true] .pause-mark { display: none; }
+.token-pause[aria-pressed=true] .play-mark { display: initial; }
 .eyebrow { color: var(--muted); font: 12px/1.5 var(--mono); letter-spacing: .02em; }
 h1 { font-size: clamp(36px, 5.8vw, 64px); line-height: 1.09; letter-spacing: -.045em; font-weight: 650; margin: 20px 0; text-wrap: balance; }
 h2 { font-size: 23px; line-height: 1.3; letter-spacing: -.025em; font-weight: 600; margin: 0 0 20px; }
@@ -178,7 +208,8 @@ hr { border: 0; border-top: 1px solid var(--line); margin-block: 32px; }
   .stats { gap: 12px; }
   .stats strong { font-size: 30px; }
   .post-title { align-items: start; flex-direction: column; gap: 4px; }
-  .preference-fields { grid-template-columns: 1fr; }
+  .preference-row { gap: 12px; }
+  .preference-row select { width: 150px; }
   .preferences[open] { max-width: 100%; }
   .post-meta dl { grid-template-columns: 1fr; gap: 4px; }
   .post-meta dd { margin-bottom: 8px; }
@@ -186,17 +217,17 @@ hr { border: 0; border-top: 1px solid var(--line); margin-block: 32px; }
 }
 @media (prefers-reduced-motion: no-preference) {
   a, button { transition: color .15s ease, background-color .15s ease; }
-  /* One packet exchange, three times; settle before five seconds. No endless loop. */
-  .ascii-frame { animation-duration: 1.6s; animation-timing-function: steps(1, end); animation-iteration-count: 3; }
-  .ascii-frame-0 { animation-name: packet-0; }
-  .ascii-frame-1 { animation-name: packet-1; }
-  .ascii-frame-2 { animation-name: packet-2; }
-  .ascii-frame-3 { animation-name: packet-3; }
+  .token-art[data-running] .token {
+    animation: token-assemble 12s cubic-bezier(.22, 1, .36, 1) infinite;
+    animation-delay: var(--phase); animation-play-state: paused;
+  }
+  .token-art[data-running=true] .token { animation-play-state: running; }
+}
+@keyframes token-assemble {
+  0%, 12%, 100% { transform: translate(var(--dx), var(--dy)) rotate(var(--turn)); opacity: .38; }
+  38%, 65% { transform: translate(0, 0) rotate(0deg); opacity: 1; }
+  85% { transform: translate(var(--dx), var(--dy)) rotate(var(--turn)); opacity: .38; }
 }
-@keyframes packet-0 { 0%, 100% { opacity: 1; } 25%, 75% { opacity: 0; } }
-@keyframes packet-1 { 0%, 50%, 100% { opacity: 0; } 25% { opacity: 1; } }
-@keyframes packet-2 { 0%, 25%, 75%, 100% { opacity: 0; } 50% { opacity: 1; } }
-@keyframes packet-3 { 0%, 50%, 100% { opacity: 0; } 75% { opacity: 1; } }
 @media (forced-colors: active) {
   select, button, .account .primary { border: 1px solid ButtonText; }
   :focus-visible { outline-color: Highlight; }