Improve chat title generation: refine model selection, ensure title consistency, and add comprehensive tests

Add context compaction service: schema validation, token estimation, and message normalization with tests
Introduce context compaction: optimize conversation context persistence, reduce redundant tokens, and enhance summary handling.
2026-10-16 16:15:55 +02:00 · 2026-10-16 16:00:52 +02:00 · 2026-10-16 14:09:23 +02:00 · 2026-10-16 12:22:14 +02:00 · 2026-10-13 23:40:29 +02:00 · 2026-10-13 22:14:51 +02:00
56 changed files with 2411 additions and 1439 deletions
@@ -10,3 +10,9 @@ UPLOAD_MAX_PIXELS=30000000
 VISION_MODEL=gemma3:4b
 VISION_DEBUG=false
 VISION_DEBUG_SHA256_ENABLED=false
 # Required to enable automatic context compaction; use the exact hosted Ollama tag.
 CONTEXT_MODEL=
 CONTEXT_COMPACTION_TRIGGER_TOKENS=6000
 CONTEXT_COMPACTION_RECENT_TOKENS=2500
 CONTEXT_COMPACTION_MIN_MESSAGES=4
 CONTEXT_COMPACTION_MAX_CHARS=8000
@@ -16,7 +16,6 @@
        "express-session": "^1.17.3",
        "multer": "^2.4.0",
        "qs": "^6.15.0",
        "session-file-store": "^1.5.0",
        "sharp": "^0.35.4"
      },
      "devDependencies": {
@@ -898,24 +897,6 @@
      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
      "license": "MIT"
    },
    "node_modules/asn1.js": {
      "version": "5.4.1",
      "resolved": "https://registry.npmjs.org/asn1.js/-/asn1.js-5.4.1.tgz",
      "integrity": "sha512-+I//4cYPccV8LdmBLiX8CYvf9Sp3vQsrqu2QNXRcrbiWvcx/UdlFiqUJJzxRQxgsZmvhXhn4cSKeSmoFjVdupA==",
      "license": "MIT",
      "dependencies": {
        "bn.js": "^4.0.0",
        "inherits": "^2.0.1",
        "minimalistic-assert": "^1.0.0",
        "safer-buffer": "^2.1.0"
      }
    },
    "node_modules/bagpipe": {
      "version": "0.3.5",
      "resolved": "https://registry.npmjs.org/bagpipe/-/bagpipe-0.3.5.tgz",
      "integrity": "sha512-42sAlmPDKes1nLm/aly+0VdaopSU9br+jkRELedhQxI5uXHgtk47I83Mpmf4zoNTRMASdLFtUkimlu/Z9zQ8+g==",
      "license": "MIT"
    },
    "node_modules/balanced-match": {
      "version": "4.0.4",
      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
@@ -952,12 +933,6 @@
        "node": ">=22"
      }
    },
    "node_modules/bn.js": {
      "version": "4.12.5",
      "resolved": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.5.tgz",
      "integrity": "sha512-3aRg6/JxfffFD+OlOjOFR3Vo79l39ooBTFucxx+MT3dhCtzn3EmiUPQo+6/OZuI2jbXi3YKgmiTFBgChQMwIRQ==",
      "license": "MIT"
    },
    "node_modules/body-parser": {
      "version": "1.20.8",
      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.8.tgz",
@@ -1601,20 +1576,6 @@
        "node": ">= 0.6"
      }
    },
    "node_modules/fs-extra": {
      "version": "8.1.0",
      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-8.1.0.tgz",
      "integrity": "sha512-yhlQgA6mnOJUKOsRUFsgJdQCvkKhcz8tlZG5HBQfReYZy46OwLcY+Zia0mtdHsOo9y/hP+CxMN0TU9QxoOtG4g==",
      "license": "MIT",
      "dependencies": {
        "graceful-fs": "^4.2.0",
        "jsonfile": "^4.0.0",
        "universalify": "^0.1.0"
      },
      "engines": {
        "node": ">=6 <7 || >=8"
      }
    },
    "node_modules/function-bind": {
      "version": "1.1.2",
      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
@@ -1699,12 +1660,6 @@
        "url": "https://github.com/sponsors/ljharb"
      }
    },
    "node_modules/graceful-fs": {
      "version": "4.2.11",
      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
      "license": "ISC"
    },
    "node_modules/has-symbols": {
      "version": "1.1.0",
      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
@@ -1795,6 +1750,7 @@
      "version": "0.1.4",
      "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
      "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==",
      "dev": true,
      "license": "MIT",
      "engines": {
        "node": ">=0.8.19"
@@ -1838,12 +1794,6 @@
        "node": ">=0.10.0"
      }
    },
    "node_modules/is-typedarray": {
      "version": "1.0.0",
      "resolved": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz",
      "integrity": "sha512-cyA56iCMHAh5CdzjJIa4aohJyeO1YbwLi3Jc35MmRU6poroFjIGZzUzupGiRPOjgHg9TLu43xbpwXk523fMxKA==",
      "license": "MIT"
    },
    "node_modules/isexe": {
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
@@ -1865,15 +1815,6 @@
      "dev": true,
      "license": "MIT"
    },
    "node_modules/jsonfile": {
      "version": "4.0.0",
      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz",
      "integrity": "sha512-m6F1R3z8jjlf2imQHS2Qez5sjKWQzbuuhuJ/FKYFRZvPE3PuHcSMVZzfsLhGVOkfd20obL5SWEBew5ShlquNxg==",
      "license": "MIT",
      "optionalDependencies": {
        "graceful-fs": "^4.1.6"
      }
    },
    "node_modules/keyv": {
      "version": "5.6.0",
      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
@@ -1884,18 +1825,6 @@
        "@keyv/serialize": "^1.1.1"
      }
    },
    "node_modules/kruptein": {
      "version": "2.2.3",
      "resolved": "https://registry.npmjs.org/kruptein/-/kruptein-2.2.3.tgz",
      "integrity": "sha512-BTwprBPTzkFT9oTugxKd3WnWrX630MqUDsnmBuoa98eQs12oD4n4TeI0GbpdGcYn/73Xueg2rfnw+oK4dovnJg==",
      "license": "MIT",
      "dependencies": {
        "asn1.js": "^5.4.1"
      },
      "engines": {
        "node": ">6"
      }
    },
    "node_modules/levn": {
      "version": "0.4.1",
      "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz",
@@ -1995,12 +1924,6 @@
        "node": ">= 0.6"
      }
    },
    "node_modules/minimalistic-assert": {
      "version": "1.0.1",
      "resolved": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz",
      "integrity": "sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==",
      "license": "ISC"
    },
    "node_modules/minimatch": {
      "version": "10.2.6",
      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
@@ -2077,15 +2000,6 @@
        "node-gyp-build-test": "build-test.js"
      }
    },
    "node_modules/object-assign": {
      "version": "4.1.1",
      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
      "license": "MIT",
      "engines": {
        "node": ">=0.10.0"
      }
    },
    "node_modules/object-inspect": {
      "version": "1.13.4",
      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
@@ -2310,15 +2224,6 @@
        "node": ">= 0.8"
      }
    },
    "node_modules/retry": {
      "version": "0.12.0",
      "resolved": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz",
      "integrity": "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==",
      "license": "MIT",
      "engines": {
        "node": ">= 4"
      }
    },
    "node_modules/safe-buffer": {
      "version": "5.2.1",
      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
@@ -2402,23 +2307,6 @@
        "node": ">= 0.8.0"
      }
    },
    "node_modules/session-file-store": {
      "version": "1.5.0",
      "resolved": "https://registry.npmjs.org/session-file-store/-/session-file-store-1.5.0.tgz",
      "integrity": "sha512-60IZaJNzyu2tIeHutkYE8RiXVx3KRvacOxfLr2Mj92SIsRIroDsH0IlUUR6fJAjoTW4RQISbaOApa2IZpIwFdQ==",
      "license": "Apache-2.0",
      "dependencies": {
        "bagpipe": "^0.3.5",
        "fs-extra": "^8.0.1",
        "kruptein": "^2.0.4",
        "object-assign": "^4.1.1",
        "retry": "^0.12.0",
        "write-file-atomic": "3.0.3"
      },
      "engines": {
        "node": ">= 6"
      }
    },
    "node_modules/setprototypeof": {
      "version": "1.2.0",
      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
@@ -2569,12 +2457,6 @@
        "url": "https://github.com/sponsors/ljharb"
      }
    },
    "node_modules/signal-exit": {
      "version": "3.0.7",
      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
      "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==",
      "license": "ISC"
    },
    "node_modules/statuses": {
      "version": "2.0.2",
      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
@@ -2634,15 +2516,6 @@
        "node": ">= 0.6"
      }
    },
    "node_modules/typedarray-to-buffer": {
      "version": "3.1.5",
      "resolved": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz",
      "integrity": "sha512-zdu8XMNEDepKKR+XYOXAVPtWui0ly0NtohUscw+UmaHiAWT8hrV1rr//H6V+0DvJ3OQ19S979M0laLfX8rm82Q==",
      "license": "MIT",
      "dependencies": {
        "is-typedarray": "^1.0.0"
      }
    },
    "node_modules/uid-safe": {
      "version": "2.1.5",
      "resolved": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.5.tgz",
@@ -2655,15 +2528,6 @@
        "node": ">= 0.8"
      }
    },
    "node_modules/universalify": {
      "version": "0.1.2",
      "resolved": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz",
      "integrity": "sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==",
      "license": "MIT",
      "engines": {
        "node": ">= 4.0.0"
      }
    },
    "node_modules/unpipe": {
      "version": "1.0.0",
      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
@@ -2727,18 +2591,6 @@
        "node": ">=0.10.0"
      }
    },
    "node_modules/write-file-atomic": {
      "version": "3.0.3",
      "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz",
      "integrity": "sha512-AvHcyZ5JnSfq3ioSyjrBkH9yW4m7Ayk8/9My/DD9onKeu/94fwrMocemO2QAJFAlnnDN+ZDS+ZjAR5ua1/PV/Q==",
      "license": "ISC",
      "dependencies": {
        "imurmurhash": "^0.1.4",
        "is-typedarray": "^1.0.0",
        "signal-exit": "^3.0.2",
        "typedarray-to-buffer": "^3.1.5"
      }
    },
    "node_modules/yocto-queue": {
      "version": "0.1.0",
      "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
@@ -7,11 +7,14 @@
    "node": ">=22.13.0"
  },
  "scripts": {
-    "start": "node --env-file-if-exists=.env server.js",
+    "start": "node --env-file-if-exists=.env scripts/start.js",
-    "dev": "node --env-file-if-exists=.env --watch server.js",
+    "dev": "node --env-file-if-exists=.env --watch scripts/dev-server.js",
    "user:role": "node --env-file-if-exists=.env scripts/set-role.js",
    "lint": "eslint .",
-    "test": "node --test",
+    "test": "npm run test:ci",
    "test:backend": "node scripts/run-tests.js backend",
    "test:frontend": "node scripts/run-tests.js frontend",
    "test:ci": "npm run test:backend && npm run test:frontend",
    "test:browser": "node scripts/browser-tests.js"
  },
  "dependencies": {
@@ -23,7 +26,6 @@
    "express-session": "^1.17.3",
    "multer": "^2.4.0",
    "qs": "^6.15.0",
    "session-file-store": "^1.5.0",
    "sharp": "^0.35.4"
  },
  "devDependencies": {
@@ -17,8 +17,8 @@
 </head>
 <body class="site-page account-page">
-    <!-- site-header -->
+<!-- site-header -->
-    <main id="main" class="account-layout page-content">
+<main id="main" class="account-layout page-content">
    <section class="account-intro">
        <p class="eyebrow">Welcome to elsewhere</p>
        <h1 id="accountHeadline">Pick up where<br>curiosity left off.</h1>
@@ -43,9 +43,9 @@
                            aria-pressed="false">
                        <svg viewBox="0 0 24 24" width="20" height="20" fill="none" stroke="currentColor"
                             stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                                <path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7S2 12 2 12Z" />
+                            <path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7S2 12 2 12Z"/>
-                                <circle cx="12" cy="12" r="3" />
+                            <circle cx="12" cy="12" r="3"/>
-                                <path class="eye-slash" d="m3 3 18 18" />
+                            <path class="eye-slash" d="m3 3 18 18"/>
                        </svg>
                    </button>
                </div>
@@ -63,8 +63,8 @@
                 aria-atomic="true" tabindex="-1">
                <svg class="account-error-icon" viewBox="0 0 24 24" width="20" height="20" fill="none"
                     stroke="currentColor" stroke-width="2" aria-hidden="true">
-                        <circle cx="12" cy="12" r="9" />
+                    <circle cx="12" cy="12" r="9"/>
-                        <path d="M12 7v6m0 3v1" />
+                    <path d="M12 7v6m0 3v1"/>
                </svg>
                <span id="accountStatusText"></span>
            </div>
@@ -73,16 +73,16 @@
        <p id="accountSwitch">
        </p>
    </section>
-    </main>
+</main>
-    <footer class="site-footer">
+<footer class="site-footer">
    <a class="site-brand" href="/">elsewhere</a>
    <span>A space for every conversation.</span>
    <a href="/privacy.html">Privacy</a>
    <a href="/tos.html">Terms</a>
-    </footer>
+</footer>
-    <script type="module" src="/js/pages.js?v=20260909-account-controls">
+<script type="module" src="/js/pages.js?v=20260909-account-controls">
-    </script>
+</script>
-    <script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
 </body>
 </html>
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
-    <meta charset="UTF-8" />
+    <meta charset="UTF-8"/>
    <link rel="icon" type="image/svg+xml" href="/img/favicon.svg">
    <title>Elsewhere</title>
    <link rel="preconnect" href="https://fonts.googleapis.com">
@@ -11,26 +11,28 @@
            href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap"
            rel="stylesheet">
    <script src="/js/theme-bootstrap.js?v=20260909-account-controls"></script>
-    <link rel="stylesheet" href="/css/style.css?v=20261008-conversation-search" />
+    <link rel="stylesheet" href="/css/style.css?v=20261012-chat-usability"/>
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="stylesheet" href="/css/pages.css?v=20260909-account-controls">
    <link rel="stylesheet" href="/css/shell.css?v=20260909-account-controls">
 </head>
 <body class="site-page chat-page" data-theme="fakegpt" data-theme-mode="light">
-    <!-- site-header -->
+<!-- site-header -->
-    <div class="app-shell">
+<div class="app-shell">
    <section id="chat" class="card chat-card chat-focus-card hidden" aria-label="AI chat workspace">
        <div class="chat-layout chat-layout-focus">
            <aside id="chatSidebar" class="chat-sidebar" aria-label="Conversation history">
                <div class="sidebar-top">
                    <div class="sidebar-workspace-card">
-                            <h2>Conversations</h2><button id="newChat" class="primary-action" type="button">New
+                        <h2>Conversations</h2>
-                                chat</button>
+                        <button id="newChat" class="primary-action" type="button">New
                            chat
                        </button>
                    </div>
                    <label class="field compact-field">
                        <span>Search</span>
-                            <input id="chatSearch" type="search" placeholder="Search chats" />
+                        <input id="chatSearch" type="search" placeholder="Search chats"/>
                    </label>
                </div>
                <div class="sidebar-middle">
@@ -46,11 +48,12 @@
            <section id="main" class="chat-main chat-main-focus" aria-label="Active conversation">
                <div class="chat-heading">
-                        <p id="workspaceNotice" class="status error hidden" role="status" aria-live="polite"></p>
+                    <p id="workspaceNotice" class="status hidden" role="status" aria-live="polite"></p>
                    <header class="chat-header chat-header-focus">
                        <button id="chatSidebarToggle" class="icon-button sidebar-toggle" type="button"
                                aria-controls="chatSidebar" aria-expanded="false"
-                                aria-label="Open conversation history">History</button>
+                                aria-label="Open conversation history">History
                        </button>
                        <div class="chat-title-block">
                            <div class="chat-title">
                                <h2 id="activeChatTitle">New chat</h2>
@@ -61,7 +64,8 @@
                                        aria-controls="chatDrawer"
                                        aria-label="Change AI model"><span>Model</span><strong
                                        id="headerModelName">Loading...</strong></button>
-                                    <label class="chat-context-item"><span>Chat with</span><select id="personalitySelect" aria-label="Conversation personality"></select></label>
+                                <label class="chat-context-item"><span>Chat with</span><select id="personalitySelect"
                                                                                               aria-label="Conversation personality"></select></label>
                            </div>
                        </div>
                        <div class="chat-header-actions">
@@ -79,7 +83,8 @@
                                                <h2 id="chatDrawerTitle">Settings</h2>
                                            </div>
                                            <button id="chatDrawerClose" class="icon-button" type="button"
-                                                    aria-label="Close chat settings">×</button>
+                                                    aria-label="Close chat settings">×
                                            </button>
                                        </div>
                                        <div class="chat-drawer-body">
                                            <div class="chat-drawer-summary">
@@ -131,23 +136,26 @@
                                                </div>
                                            </details>
                                            <details class="chat-drawer-section generation-advanced">
-                                                    <summary class="chat-drawer-row"><span class="chat-drawer-row-label"><strong>Generation settings</strong></span><span class="chat-drawer-row-hint">Advanced</span></summary>
+                                                <summary class="chat-drawer-row"><span
                                                        class="chat-drawer-row-label"><strong>Generation settings</strong></span><span
                                                        class="chat-drawer-row-hint">Advanced</span></summary>
                                                <div class="generation-settings-grid chat-drawer-disclosure-panel">
                                                    <label class="field"><span>Temperature</span><input
                                                            id="chatTemperature" type="number" min="0" max="2"
-                                                                    step="0.1" placeholder="Default" /></label>
+                                                            step="0.1" placeholder="Default"/></label>
                                                    <label class="field"><span>Context length</span><input
                                                            id="chatContextLength" type="number" min="256"
-                                                                    max="131072" placeholder="Default" /></label>
+                                                            max="131072" placeholder="Default"/></label>
                                                    <label class="field"><span>Response length</span><input
                                                            id="chatResponseLength" type="number" min="1"
-                                                                    max="32768" placeholder="Default" /></label>
+                                                            max="32768" placeholder="Default"/></label>
                                                    <label class="field field-wide"><span>System
                                                                    instruction</span><textarea
                                                            id="chatSystemInstruction" rows="4" maxlength="8000"
                                                            placeholder="Optional instructions for this chat"></textarea></label>
                                                    <button id="saveGenerationSettings" type="button">Save
-                                                                generation settings</button>
+                                                        generation settings
                                                    </button>
                                                </div>
                                            </details>
                                            <div class="chat-drawer-section">
@@ -155,15 +163,19 @@
                                                <div class="chat-drawer-action-list">
                                                    <button id="renameChat"
                                                            class="secondary-action chat-drawer-action" type="button"
-                                                            data-chat-action="rename">Rename chat</button>
+                                                            data-chat-action="rename">Rename chat
                                                    </button>
                                                    <button id="pinChat" class="secondary-action chat-drawer-action"
-                                                            type="button" data-chat-action="pin">Pin</button>
+                                                            type="button" data-chat-action="pin">Pin
                                                    </button>
                                                    <button id="archiveChat"
                                                            class="secondary-action chat-drawer-action" type="button"
-                                                            data-chat-action="archive">Archive</button>
+                                                            data-chat-action="archive">Archive
                                                    </button>
                                                    <button id="exportChat"
                                                            class="secondary-action chat-drawer-action" type="button"
-                                                            data-chat-action="export">Export</button>
+                                                            data-chat-action="export">Export
                                                    </button>
                                                </div>
                                            </div>
                                            <details class="chat-drawer-section chat-drawer-more">
@@ -176,27 +188,37 @@
                                                <div class="chat-drawer-action-list chat-drawer-disclosure-panel">
                                                    <button id="moveChatFolder"
                                                            class="secondary-action chat-drawer-action" type="button"
-                                                            data-chat-action="folder">Move to folder</button>
+                                                            data-chat-action="folder">Move to folder
                                                    </button>
                                                    <button id="manageChatMemory"
                                                            class="secondary-action chat-drawer-action" type="button"
-                                                            data-chat-action="memory">Conversation memory</button>
+                                                            data-chat-action="memory">Conversation memory
-                                                        <button id="exploreBranches" type="button" class="secondary-action chat-drawer-action" data-chat-action="branches">Branches &amp; compare</button>
+                                                    </button>
                                                    <button id="exploreBranches" type="button"
                                                            class="secondary-action chat-drawer-action"
                                                            data-chat-action="branches">Branches &amp; compare
                                                    </button>
                                                    <button id="managePersonaState"
                                                            class="secondary-action chat-drawer-action" type="button"
-                                                            data-chat-action="personaState">Roleplay state</button>
+                                                            data-chat-action="personaState">Roleplay state
                                                    </button>
                                                </div>
                                            </details>
                                            <details class="chat-drawer-section chat-drawer-more">
-                                                    <summary class="chat-drawer-row chat-drawer-row--compact"><span class="chat-drawer-row-label"><strong>Workspace files</strong></span><span class="chat-drawer-row-hint">Show</span></summary>
+                                                <summary class="chat-drawer-row chat-drawer-row--compact"><span
                                                        class="chat-drawer-row-label"><strong>Workspace files</strong></span><span
                                                        class="chat-drawer-row-hint">Show</span></summary>
                                                <div class="chat-drawer-action-list chat-drawer-disclosure-panel">
                                                    <button id="backupWorkspace"
                                                            class="secondary-action chat-drawer-action"
-                                                            type="button">Download workspace archive</button>
+                                                            type="button">Download workspace archive
                                                    </button>
                                                    <button id="importWorkspace"
                                                            class="secondary-action chat-drawer-action"
-                                                            type="button">Import workspace</button>
+                                                            type="button">Import workspace
                                                    </button>
                                                    <input id="importWorkspaceFile" class="hidden" type="file"
-                                                            accept="application/json,.json,.tar.gz,application/gzip" />
+                                                           accept="application/json,.json,.tar.gz,application/gzip"/>
                                                </div>
                                            </details>
                                            <details class="chat-drawer-section chat-drawer-danger">
@@ -209,7 +231,8 @@
                                                <div class="chat-drawer-action-list chat-drawer-disclosure-panel">
                                                    <button id="clearChat"
                                                            class="secondary-action chat-drawer-action chat-drawer-action-danger"
-                                                            type="button" data-chat-action="clear">Clear chat</button>
+                                                            type="button" data-chat-action="clear">Clear chat
                                                    </button>
                                                </div>
                                            </details>
                                        </div>
@@ -236,19 +259,35 @@
                <div class="messages-wrap">
                    <div class="history-controls">
-                            <button id="loadOlderMessages" class="secondary-action" type="button" hidden>Load older messages</button>
+                        <button id="loadOlderMessages" class="secondary-action" type="button" hidden>Load older
-                            <button id="loadLatestMessages" class="secondary-action" type="button" hidden>Back to latest messages</button>
+                            messages
                        </button>
                        <button id="loadLatestMessages" class="secondary-action" type="button" hidden>Back to latest
                            messages
                        </button>
                    </div>
-                        <div class="conversation-search" role="search" aria-label="Search this conversation">
+                    <button id="conversationSearchToggle" class="conversation-search-toggle secondary-action"
                            type="button" aria-controls="conversationSearchBar" aria-expanded="false">Find in this chat
                    </button>
                    <div id="conversationSearchBar" class="conversation-search" role="search"
                         aria-label="Search this conversation">
                        <label for="conversationSearch">Find in this chat</label>
-                            <input id="conversationSearch" type="search" placeholder="Search messages" autocomplete="off" maxlength="200">
+                        <input id="conversationSearch" type="search" placeholder="Search messages" autocomplete="off"
                               maxlength="200">
                        <span id="conversationSearchCount" role="status" aria-live="polite">0 matches</span>
-                            <button id="conversationSearchPrevious" class="secondary-action" type="button" aria-label="Previous match" disabled>Previous</button>
+                        <button id="conversationSearchPrevious" class="secondary-action" type="button"
-                            <button id="conversationSearchNext" class="secondary-action" type="button" aria-label="Next match" disabled>Next</button>
+                                aria-label="Previous match" disabled>Previous
                        </button>
                        <button id="conversationSearchNext" class="secondary-action" type="button"
                                aria-label="Next match" disabled>Next
                        </button>
                    </div>
                    <div id="messages" class="messages-panel messages-panel-focus" role="log" aria-live="off"></div>
-                        <div id="replyAnnouncement" class="visually-hidden" role="status" aria-live="polite" aria-atomic="true"></div>
+                    <div id="replyAnnouncement" class="visually-hidden" role="status" aria-live="polite"
-                        <button id="jumpToLatest" class="jump-to-latest secondary-action hidden" type="button">Jump to latest</button>
+                         aria-atomic="true"></div>
                    <button id="jumpToLatest" class="jump-to-latest secondary-action hidden" type="button">Jump to
                        latest
                    </button>
                </div>
                <div class="input-shell input-shell-focus">
@@ -263,42 +302,50 @@
                                title="Attach image">
                            <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor"
                                 stroke-width="1.6" aria-hidden="true">
-                                    <rect x="3" y="3" width="18" height="18" rx="3" />
+                                <rect x="3" y="3" width="18" height="18" rx="3"/>
-                                    <circle cx="8" cy="8" r="1.5" />
+                                <circle cx="8" cy="8" r="1.5"/>
-                                    <path d="m3 17 5-5 4 4 4-6 5 7" />
+                                <path d="m3 17 5-5 4 4 4-6 5 7"/>
-                                </svg><span class="composer-tool-label">Attach</span>
+                            </svg>
                            <span class="composer-tool-label">Attach</span>
                        </button>
-                            <button id="webSearch" class="icon-button" type="button" aria-label="Automatic web search on — click to disable"
+                        <button id="webSearch" class="icon-button" type="button"
-                                title="Automatic web search on — click to disable" aria-pressed="true">
+                                aria-label="Web search allowed. The assistant searches when useful. Click to turn off."
                                title="Web search allowed. The assistant searches when useful. Click to turn off."
                                aria-pressed="true">
                            <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor"
                                 stroke-width="1.6" aria-hidden="true">
-                                    <circle cx="12" cy="12" r="9" />
+                                <circle cx="12" cy="12" r="9"/>
-                                    <ellipse cx="12" cy="12" rx="4" ry="9" />
+                                <ellipse cx="12" cy="12" rx="4" ry="9"/>
-                                    <path d="M3 12h18" />
+                                <path d="M3 12h18"/>
-                                </svg><span class="composer-tool-label">Web search</span>
+                            </svg>
                            <span class="composer-tool-label">Web search</span>
                        </button>
                        <button id="reasoning" class="icon-button" type="button" aria-label="Enable reasoning"
-                                title="Enable reasoning" aria-pressed="false" disabled>
+                                title="Enable reasoning" aria-pressed="false" disabled hidden>
                            <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor"
                                 stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"
                                 aria-hidden="true">
                                <path
-                                        d="M12 18V5a3 3 0 0 0-5.8-1A4 4 0 0 0 3 10a4 4 0 0 0 1 7.8A4 4 0 0 0 12 18ZM12 5a3 3 0 0 1 5.8-1A4 4 0 0 1 21 10a4 4 0 0 1-1 7.8A4 4 0 0 1 12 18M8 8a4 4 0 0 1-5 2m13-2a4 4 0 0 0 5 2M8 14a4 4 0 0 0-4 4m12-4a4 4 0 0 1 4 4" />
+                                        d="M12 18V5a3 3 0 0 0-5.8-1A4 4 0 0 0 3 10a4 4 0 0 0 1 7.8A4 4 0 0 0 12 18ZM12 5a3 3 0 0 1 5.8-1A4 4 0 0 1 21 10a4 4 0 0 1-1 7.8A4 4 0 0 1 12 18M8 8a4 4 0 0 1-5 2m13-2a4 4 0 0 0 5 2M8 14a4 4 0 0 0-4 4m12-4a4 4 0 0 1 4 4"/>
-                                </svg><span class="composer-tool-label">Reasoning</span>
+                            </svg>
                            <span class="composer-tool-label">Reasoning</span>
                        </button>
                        <label class="visually-hidden" for="msgInput">Message</label>
                        <textarea id="msgInput" rows="1" placeholder="Type your message..."></textarea>
                        <button id="send" type="button" aria-label="Send message"></button>
-                            <button id="stopGeneration" class="secondary-action" type="button" aria-label="Stop generating reply" hidden>Stop</button>
+                        <button id="stopGeneration" class="secondary-action" type="button"
                                aria-label="Stop generating reply" hidden>Stop
                        </button>
                    </div>
                </div>
            </section>
        </div>
    </section>
-    </div>
+</div>
-    <div id="personaModal" class="modal-overlay side-panel-overlay hidden">
+<div id="personaModal" class="modal-overlay side-panel-overlay hidden">
-        <div class="modal-card persona-modal-card side-panel-card" role="dialog" aria-modal="true" aria-labelledby="personaFormTitle" tabindex="-1">
+    <div class="modal-card persona-modal-card side-panel-card" role="dialog" aria-modal="true"
         aria-labelledby="personaFormTitle" tabindex="-1">
        <div class="modal-header">
            <div class="persona-modal-heading">
                <p class="eyebrow">Persona editor</p>
@@ -322,11 +369,11 @@
                </label>
                <label class="field">
                    <span>Persona name</span>
-                        <input id="personaName" placeholder="Persona name" required />
+                    <input id="personaName" placeholder="Persona name" required/>
                </label>
                <label class="field">
                    <span>Persona pronouns</span>
-                        <input id="personaPronouns" placeholder="e.g. she/her, they/them" />
+                    <input id="personaPronouns" placeholder="e.g. she/her, they/them"/>
                </label>
                <label class="field field-wide">
                    <span>Appearance</span>
@@ -359,10 +406,11 @@
            </div>
        </form>
    </div>
-    </div>
+</div>
-    <div id="roleplayStarterModal" class="modal-overlay side-panel-overlay hidden">
+<div id="roleplayStarterModal" class="modal-overlay side-panel-overlay hidden">
-        <div class="modal-card roleplay-starter-card side-panel-card" role="dialog" aria-modal="true" aria-labelledby="roleplayStarterTitle" tabindex="-1">
+    <div class="modal-card roleplay-starter-card side-panel-card" role="dialog" aria-modal="true"
         aria-labelledby="roleplayStarterTitle" tabindex="-1">
        <div class="modal-header">
            <div class="persona-modal-heading">
                <p class="eyebrow">Start roleplay</p>
@@ -404,9 +452,9 @@
            <button id="roleplayStarterConfirm" type="button">Continue</button>
        </div>
    </div>
-    </div>
+</div>
-    <div id="popupModal" class="modal-overlay hidden">
+<div id="popupModal" class="modal-overlay hidden">
    <div class="modal-card popup-card" role="dialog" aria-modal="true" aria-labelledby="popupTitle"
         aria-describedby="popupDescription">
        <div class="modal-header">
@@ -420,7 +468,7 @@
            <p id="popupDescription" class="subtitle">Please confirm this action.</p>
            <label id="popupField" class="field hidden">
                <span id="popupInputLabel">Value</span>
-                    <input id="popupInput" type="text" autocomplete="off" />
+                <input id="popupInput" type="text" autocomplete="off"/>
            </label>
        </div>
        <div class="popup-actions">
@@ -428,10 +476,11 @@
            <button id="popupConfirm" type="button">Confirm</button>
        </div>
    </div>
-    </div>
+</div>
-    <div id="onboardingModal" class="modal-overlay hidden">
+<div id="onboardingModal" class="modal-overlay hidden">
-        <div class="modal-card onboarding-card" role="dialog" aria-modal="true" aria-labelledby="onboardingTitle" aria-describedby="onboardingSubtitle" tabindex="-1">
+    <div class="modal-card onboarding-card" role="dialog" aria-modal="true" aria-labelledby="onboardingTitle"
         aria-describedby="onboardingSubtitle" tabindex="-1">
        <div class="modal-header">
            <div class="persona-modal-heading">
                <p class="eyebrow">Get started</p>
@@ -446,14 +495,12 @@
            <button id="onboardingContinue" type="button">Continue</button>
        </div>
    </div>
-    </div>
+</div>
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/marked/15.0.12/marked.min.js"
+<script src="/vendor/marked.min.js" defer></script>
-        integrity="sha512-rCQgmUulW6f6QegOvTntKKb5IAoxTpGVCdWqYjkXEpzAns6XUFs8NKVqWe+KQpctp/EoRSFSuykVputqknLYMg=="
+<script src="/vendor/dompurify.js" defer></script>
-        crossorigin="anonymous" defer></script>
+<script type="module" src="/js/script.js?v=20261012-chat-usability"></script>
-    <script src="/vendor/dompurify.js" defer></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
    <script type="module" src="/js/script.js?v=20261008-conversation-search"></script>
    <script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
 </body>
 </html>
@@ -38,7 +38,7 @@ body.site-page { width:100%; max-width:none; margin:0; padding:0; background:var
 .chat-page .sidebar-workspace-card h2 { margin:0; font-size:.85rem; letter-spacing:0; font-family:var(--font-body); color:var(--text-soft); }
 .chat-page .chat-main { grid-template-rows:auto minmax(0,1fr) auto; }
 .chat-heading { min-width:0; }
-.chat-heading #workspaceNotice { margin:0; padding:10px 24px; border-width:0 0 1px; border-radius:0; font-size:.85rem; }
+.chat-heading #workspaceNotice { position:absolute; top:12px; right:16px; z-index:25; width:min(420px,calc(100% - 32px)); margin:0; padding:10px 14px; border-width:1px; border-radius:var(--radius-md); font-size:.85rem; box-shadow:var(--shadow-md); }
 .chat-page .chat-header { min-height:76px; }
@media(max-width:1100px) { .shell-header { grid-template-columns:170px minmax(0,1fr) auto; gap:12px; padding:0 24px; }.shell-nav a { padding:0 10px; }.shell-username { max-width:90px; } }
@media(max-width:980px) {
@@ -424,8 +424,11 @@ input:focus, textarea:focus, select:focus { border-color: var(--brand); }
 .chat-header-actions { display: flex; align-items: center; }
 .overflow-trigger { min-height: 38px; padding: 8px 12px; border-radius: 999px; font-size: .8rem; }
-.messages-wrap { min-height: 0; position: relative; display: grid; grid-template-rows: auto auto minmax(0, 1fr); }
+.messages-wrap { min-height: 0; position: relative; display: grid; grid-template-rows: auto auto auto minmax(0, 1fr); }
-.conversation-search { padding: 8px max(16px, calc((100% - 940px) / 2)); display: flex; align-items: center; gap: 8px; border-bottom: 1px solid var(--border); }
+.messages-wrap > .messages-panel { grid-row: 4; }
 .conversation-search-toggle { display: block; justify-self: start; min-height: 32px; margin: 4px 10px; padding: 4px 10px; font-size: .75rem; }
 .conversation-search { display: none; padding: 8px max(16px, calc((100% - 940px) / 2)); align-items: center; gap: 8px; border-bottom: 1px solid var(--border); }
 .conversation-search.is-open { display: flex; }
 .conversation-search label { flex: 0 0 auto; color: var(--text-soft); font-size: .76rem; font-weight: 700; }
 .conversation-search input { min-width: 0; width: min(280px, 100%); min-height: 34px; }
 .conversation-search span { min-width: 64px; color: var(--text-muted); font-size: .72rem; white-space: nowrap; }
@@ -451,6 +454,7 @@ input:focus, textarea:focus, select:focus { border-color: var(--brand); }
 .msg.user { align-self: flex-end; padding: 10px 13px; color: var(--message-user-text); background: var(--message-user); border-radius: 17px 17px 5px 17px; }
 .msg.bot, .msg.loading { width: fit-content; min-width: min(280px, 80%); align-self: flex-start; padding: 12px 14px; background: var(--message-bot); border: 1px solid var(--border); border-radius: var(--radius-md); box-shadow: var(--shadow-sm); }
 .msg-header { display: flex; align-items: center; justify-content: space-between; color: var(--text-muted); font-size: .72rem; }
 .msg-web-badge { margin-left: 12px; color: var(--brand-strong); font-weight: 700; white-space: nowrap; }
 .msg-content { min-width: 0; overflow-wrap: anywhere; }
 .msg-content > :last-child { margin-bottom: 0; }
 .msg-content pre { max-width: 100%; padding: 14px; overflow: auto; background: var(--canvas); border-radius: var(--radius-sm); }
@@ -506,6 +510,8 @@ input:focus, textarea:focus, select:focus { border-color: var(--brand); }
 .composer-hint { margin: 0; color: var(--text-muted); font-size: .72rem; }
 .input-container { padding: 7px; display: grid; grid-template-columns: 44px 44px 44px minmax(0, 1fr) 44px 58px; grid-template-areas: "attach search reasoning message send stop"; gap: 7px; align-items: end; background: var(--input-bg); border: 1px solid var(--border-strong); border-radius: 24px; box-shadow: var(--shadow-sm); }
 .input-container:not(:has(#stopGeneration:not([hidden]))) { grid-template-columns: 44px 44px 44px minmax(0, 1fr) 44px; grid-template-areas: "attach search reasoning message send"; }
 .input-container:not(:has(#reasoning:not([hidden]))) { grid-template-columns: 44px 44px minmax(0, 1fr) 44px 58px; grid-template-areas: "attach search message send stop"; }
 .input-container:not(:has(#reasoning:not([hidden]))):not(:has(#stopGeneration:not([hidden]))) { grid-template-columns: 44px 44px minmax(0, 1fr) 44px; grid-template-areas: "attach search message send"; }
 .input-container [hidden] { display: none !important; }
 .composer-tool-label { display: none; }
 #attachImage { grid-area: attach; }
@@ -695,14 +701,19 @@ input:focus, textarea:focus, select:focus { border-color: var(--brand); }
    .messages-empty-actions { display: grid; }
    .chat-drawer-action-list { grid-template-columns: 1fr; }
    .chat-drawer-action-list > * { grid-column: auto; }
    .conversation-search:not(.is-open) { display: none; }
    .conversation-search { padding: 6px 10px; flex-wrap: wrap; gap: 5px; }
    .conversation-search label { width: 100%; }
    .conversation-search input { flex: 1 1 110px; }
    .conversation-search span { min-width: 55px; }
-    .input-container { grid-template-columns: repeat(3, minmax(0, 1fr)) 44px 58px; grid-template-areas: "message message message send stop" "attach search reasoning . ."; gap: 4px; }
+    .input-container, .input-container:not(:has(#stopGeneration:not([hidden]))) { grid-template-columns: 40px 40px 40px minmax(0, 1fr) 44px; grid-template-areas: "attach search reasoning message send"; gap: 4px; }
-    .input-container:not(:has(#stopGeneration:not([hidden]))) { grid-template-columns: repeat(3, minmax(0, 1fr)) 44px; grid-template-areas: "message message message send" "attach search reasoning ."; }
+    .input-container:not(:has(#reasoning:not([hidden]))), .input-container:not(:has(#reasoning:not([hidden]))):not(:has(#stopGeneration:not([hidden]))) { grid-template-columns: 40px 40px minmax(0, 1fr) 44px; grid-template-areas: "attach search message send"; }
-    #attachImage, #webSearch, #reasoning { width: 100%; height: 49px; min-height: 49px; display: flex; flex-direction: column; align-items: center; justify-content: center; gap: 1px; border-radius: 12px; }
+    .input-container:has(#stopGeneration:not([hidden])) #send { display: none; }
-    .composer-tool-label { display: inline; font-size: .63rem; line-height: 1; }
+    .input-container:has(#stopGeneration:not([hidden])) { grid-template-areas: "attach search reasoning message stop"; }
    .input-container:not(:has(#reasoning:not([hidden]))):has(#stopGeneration:not([hidden])) { grid-template-areas: "attach search message stop"; }
    #attachImage, #webSearch, #reasoning { width: 40px; height: 44px; min-height: 44px; }
    #stopGeneration { width: 44px; font-size: .7rem; }
    .composer-tool-label { display: none; }
 }
@media (hover: none) { .msg-actions { opacity: 1; } }
@@ -17,9 +17,9 @@
 </head>
 <body class="site-page home-page">
-    <!-- site-header -->
+<!-- site-header -->
-    <main id="main" class="home-main page-content">
+<main id="main" class="home-main page-content">
    <p id="welcomeName" class="eyebrow">Welcome home</p>
    <h1>What would you like to do?</h1>
    <p class="hero-copy">Start somewhere new, or pick up a conversation.</p>
@@ -52,11 +52,11 @@
    </section>
    <p id="homeStatus" role="status">
    </p>
-    </main>
+</main>
-    <script type="module" src="/js/pages.js?v=20260909-account-controls">
+<script type="module" src="/js/pages.js?v=20260909-account-controls">
-    </script>
+</script>
-    <script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
 </body>
 </html>
@@ -1,13 +1,34 @@
 import {createSseParser, parseSseData, SseParseError} from "./sse.js";
 // A Response body is single-use. Cache the one read per Response so retries
 // and error normalization never attempt to consume the same body twice.
 const responseTextCache = new WeakMap();
 export class ApiError extends Error {
    constructor(message, {status = 0, code = "REQUEST_FAILED", requestId = null, ...details} = {}) { super(message); this.name = "ApiError"; this.status = status; this.code = code; this.requestId = requestId; this.details = details; }
    toJSON() { return {...this.details, error: this.message, status: this.status, code: this.code, requestId: this.requestId}; }
 }
 function requestScope({signal, timeoutMs = 30000} = {}) { const controller = new AbortController(); const abort = () => controller.abort(new ApiError("Request cancelled.", {code: "ABORTED"})); if (signal?.aborted) abort(); else signal?.addEventListener("abort", abort, {once: true}); const timer = timeoutMs > 0 ? setTimeout(() => controller.abort(new ApiError("Request timed out. Please try again.", {code: "TIMEOUT"})), timeoutMs) : null; return {signal: controller.signal, close() { clearTimeout(timer); signal?.removeEventListener("abort", abort); }}; }
-function abortable(operation, signal) { if (signal.aborted) return Promise.reject(signal.reason); return new Promise((resolve, reject) => { const abort = () => { signal.removeEventListener("abort", abort); reject(signal.reason); }; signal.addEventListener("abort", abort, {once: true}); Promise.resolve().then(operation).then(resolve, reject).finally(() => signal.removeEventListener("abort", abort)); }); }
+function abortable(operation, signal) {
    if (signal.aborted) return Promise.reject(signal.reason);
    return new Promise((resolve, reject) => {
        const abort = () => { signal.removeEventListener("abort", abort); reject(signal.reason); };
        signal.addEventListener("abort", abort, {once: true});
        let result;
        try { result = operation(); } catch (error) { reject(error); return; }
        Promise.resolve(result).then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
    });
 }
 function responseError(response, payload = {}, fallback = "", code = "") { const details = payload && typeof payload === "object" ? payload : {}; const error = details.error; return new ApiError(typeof error === "string" ? error : error?.message || fallback || `HTTP ${response.status} ${response.statusText}`.trim(), {...details, status: response.ok && Number.isInteger(details.status) && details.status >= 400 ? details.status : response.status, code: details.code || error?.code || code || `HTTP_${response.status}`, requestId: details.requestId || response.headers.get("X-Request-ID") || null}); }
-async function readJson(response, signal) { const text = await abortable(() => response.text(), signal); let payload; if (text.trim()) { try { payload = JSON.parse(text); } catch { if (response.ok) throw responseError(response, {}, "Invalid JSON response.", "INVALID_RESPONSE"); } } if (!response.ok) throw responseError(response, payload); return payload ?? {}; }
+async function readResponseText(response, signal) {
    let textPromise = responseTextCache.get(response);
    if (!textPromise) {
        textPromise = Promise.resolve().then(() => response.text());
        responseTextCache.set(response, textPromise);
    }
    return abortable(() => textPromise, signal);
 }
 async function readJson(response, signal) { const text = await readResponseText(response, signal); let payload; if (text.trim()) { try { payload = JSON.parse(text); } catch { if (response.ok) throw responseError(response, {}, "Invalid JSON response.", "INVALID_RESPONSE"); } } if (!response.ok) throw responseError(response, payload); return payload ?? {}; }
 function normalizeError(error, scope, response) { const failure = scope.signal.aborted ? scope.signal.reason : error; if (failure instanceof ApiError) { if (!failure.status && response) failure.status = response.status; failure.requestId ||= response?.headers.get("X-Request-ID") || null; return failure; } return new ApiError(response ? failure?.message || "Response could not be read." : "Network error - please try again.", {status: response?.status || 0, code: response ? "INVALID_RESPONSE" : "NETWORK_ERROR", requestId: response?.headers.get("X-Request-ID") || null}); }
 const transient = e => e?.status === 408 || e?.status === 425 || e?.status === 429 || e?.status >= 500 || e?.code === "NETWORK_ERROR" || e?.code === "TIMEOUT";
 const pause = (ms, signal) => new Promise((resolve, reject) => { const timer = setTimeout(resolve, ms); signal?.addEventListener("abort", () => { clearTimeout(timer); reject(signal.reason); }, {once: true}); });
@@ -0,0 +1,17 @@
 export function titleFromFirstMessage(message) {
    const firstLine = String(message || "").split(/\r?\n/).find(line => line.trim()) || "";
    let subject = firstLine.replace(/^\s*(?:[-*#]+\s*)?/, "").replace(/\s+/g, " ").trim();
    subject = subject.replace(/^(?:can|could|would) you (?:please )?(?:help me )?/i, "")
        .replace(/^(?:please )?(?:help me (?:with |understand )?|tell me about |explain |describe |summarize |compare |write about |create |make )/i, "")
        .replace(/^what (?:is|are|was|were) (?:the |a |an )?/i, "")
        .replace(/^how (?:do|does|can) (?:i|we) /i, "")
        .replace(/^[\s:,-]+|[\s.!?,;:]+$/g, "");
    const sentence = subject.split(/(?<=[.!?])\s+/)[0].replace(/[.!?]$/, "");
    if (sentence) subject = sentence;
    if (subject.length > 68) {
        const words = subject.slice(0, 69).split(" ");
        subject = words.length > 1 ? words.slice(0, -1).join(" ") : subject.slice(0, 68);
    }
    subject = subject.replace(/[\s,;:.-]+$/g, "");
    return subject ? subject[0].toLocaleUpperCase() + subject.slice(1) : "New chat";
 }
@@ -7,11 +7,12 @@ export function createComposerController({
    state, elements, attachmentComposer, webSearchButton, reasoningToggle, webSearchToggle,
    setChatActivity, updateComposerPlaceholder, setNotice, createNewChat, getChatById,
    updateWorkspaceCopy, renderChatList, addMessage, updateChatActionState, scrollMessagesToBottom,
-    setMessageContent, announceResponding, announceReply, announceResponseStatus, setActiveChat, loadSummary, markOnboardingCompleted, maybeShowPersonaNudge,
+    setMessageContent, announceResponding = () => {}, announceReply = () => {}, announceResponseStatus = () => {}, setActiveChat, loadSummary, markOnboardingCompleted, maybeShowPersonaNudge,
    api = defaultApi
 }) {
-    const {msgInput, sendBtn, stopBtn, messagesDiv, modelSelect} = elements;
+    const {msgInput, sendBtn, messagesDiv, modelSelect} = elements;
-    const composerHint = document.getElementById("composerHint");
+    const stopBtn = elements.stopBtn || {hidden: true};
    const composerHint = elements.composerHint || globalThis.document?.getElementById?.("composerHint") || {textContent: ""};
    let sendController = null;
    function updateSendState() {
@@ -27,6 +28,7 @@ export function createComposerController({
    function setLoadingState(loading, overlayOptions = null) {
        state.isProcessing = loading;
        msgInput.disabled = loading;
        webSearchButton.disabled = loading;
        reasoningToggle.setBusy(loading);
        attachmentComposer.setBusy(loading);
@@ -98,12 +100,9 @@ export function createComposerController({
            }
            const currentChat = getChatById(chatId);
            if (currentChat && !currentChat.assistant_persona_id && currentChat.title === "New chat") {
-                const title = message.length > 40 ? `${message.slice(0, 40)}...` : message;
+                const renamed = await api.put(`/chats/${chatId}`, {title: currentChat.title}, {signal});
                const renamed = await api.put(`/chats/${chatId}`, {title}, {signal});
                signal.throwIfAborted();
                if (renamed.error) throw new Error(renamed.error);
                currentChat.title = title;
                updateWorkspaceCopy(); renderChatList();
            }
            signal.throwIfAborted();
            if (visible()) {
@@ -146,10 +145,29 @@ export function createComposerController({
                        : searchState === "no_relevant_results" ? "No sufficiently relevant results. Generating response..."
                            : sourceCount === 0 ? "No web results found. Generating response..." : "Generating response...";
                },
-                onDone: ({reply, sources}) => { completedReply = reply; completedSources = sources; }
+                onDone: ({reply, sources, chatTitle}) => {
                    completedReply = reply; completedSources = sources;
                    if (chatTitle && currentChat) {
                        currentChat.title = chatTitle;
                        updateWorkspaceCopy(); renderChatList();
                    }
                }
            }, {signal});
            rendering.flush();
            rendering.dispose();
            const updatedChat = getChatById(chatId);
            if (api === defaultApi && currentChat && !currentChat.assistant_persona_id && currentChat.title === "New chat") {
                const titled = await api.post(`/chats/${chatId}/title`, {message, model}, {signal});
                if (!signal.aborted && titled.title) {
                    currentChat.title = titled.title;
                    updateWorkspaceCopy(); renderChatList();
                }
            }
            if (updatedChat && completedReply !== null) {
                updatedChat.last_message_preview = completedReply.slice(0, 180);
                updatedChat.updated_at = new Date().toISOString();
                renderChatList();
            }
            // Keep a completed answer in both state and the DOM until history replaces it.
            if (visible()) {
                const reply = {role: "bot", content: completedReply, modelName: model,
@@ -170,7 +188,10 @@ export function createComposerController({
                    else state.chatDrafts.delete(chatId);
                    const currentAttachments = attachmentComposer.attachments;
                    if (currentAttachments.length === attachments.length && currentAttachments.every((item, index) => item.id === attachments[index].id)) attachmentComposer.clear();
-                } else clearSentDraft();
+                } else {
                    state.chatDrafts.delete(chatId);
                    clearSentDraft();
                }
                if (!followOutput && visible()) requestAnimationFrame(() => {
                    if (visible()) messagesDiv.scrollTop = previousScrollTop;
                });
@@ -179,14 +200,23 @@ export function createComposerController({
            }
            await loadSummary();
            markOnboardingCompleted(); maybeShowPersonaNudge();
            setNotice("Reply received.", "success");
        } catch (error) {
            loadingMsg?.remove();
            const messageText = signal.aborted ? "Generation stopped." : error?.message || "Unable to send message.";
            if (visible() && completedReply === null) announceResponseStatus(messageText);
            if (completedReply !== null) {
                if (visible() && !msgInput.value.trim()) {
                    msgInput.value = message;
                    state.chatDrafts.set(chatId ?? "new", message);
                    resizeComposerInput();
                }
                setNotice(`Reply sent, but the conversation could not be refreshed: ${messageText}`, "error");
            } else {
                if (signal.aborted && chatId == null && !msgInput.value.trim()) {
                    msgInput.value = message;
                    state.chatDrafts.set("new", message);
                    resizeComposerInput();
                }
                if (visible()) {
                    if (!msgInput.value.trim()) {
                        msgInput.value = message;
@@ -56,14 +56,14 @@ export function createConversationController({
        }
        try {
            const historyUrl = `/chats/${id}/messages${matchMessageId ? `?around=${matchMessageId}` : ""}`;
-            let res = await get(historyUrl);
+            let res = await get(historyUrl, {retries: 0});
            if (openRequest !== state.chatOpenRequest) return;
            if (res.error) return failed(res);
            if (matchMessageId && !res.messages?.some(message => message.id === matchMessageId)) {
                const activated = await post(`/chats/${id}/branches/${matchMessageId}/activate`, {includeDescendants: true});
                if (openRequest !== state.chatOpenRequest) return;
                if (activated.error) return failed(activated);
-                res = await get(historyUrl);
+                res = await get(historyUrl, {retries: 0});
                if (openRequest !== state.chatOpenRequest) return;
                if (res.error) return failed(res);
            }
@@ -123,7 +123,7 @@ export function createConversationController({
        state.historyLoading = true;
        updateHistoryControls();
        try {
-            const result = await get(`/chats/${chatId}/messages?before=${page.before}&leaf=${page.leafId}`);
+            const result = await get(`/chats/${chatId}/messages?before=${page.before}&leaf=${page.leafId}`, {retries: 0});
            if (chatId !== state.activeChatId || requestId !== state.chatOpenRequest) return;
            if (result.error) { setNotice(result.error, "error"); return result; }
            const oldHeight = messagesDiv.scrollHeight, oldTop = messagesDiv.scrollTop;
@@ -0,0 +1,5 @@
 /*
 * Compatibility entrypoint for deployments that still validate the retired
 * marketplace asset. The marketplace UI now lives in the personas screen.
 */
 export {};
@@ -23,10 +23,19 @@ export function createMessageRenderer({
 }) {
    const jumpToLatest = document.getElementById("jumpToLatest");
    const searchInput = document.getElementById("conversationSearch");
    const searchToggle = document.getElementById("conversationSearchToggle");
    const searchBar = document.getElementById("conversationSearchBar");
    const searchCount = document.getElementById("conversationSearchCount");
    const previousMatch = document.getElementById("conversationSearchPrevious");
    const nextMatch = document.getElementById("conversationSearchNext");
    const replyAnnouncement = document.getElementById("replyAnnouncement");
    searchToggle?.addEventListener("click", () => {
        const expanded = searchToggle.getAttribute("aria-expanded") !== "true";
        searchToggle.setAttribute("aria-expanded", String(expanded));
        searchBar.classList.toggle("is-open", expanded);
        if (expanded) searchInput.focus();
        else searchToggle.focus();
    });
    let scrollFrame = null;
@@ -232,6 +241,12 @@ export function createMessageRenderer({
            actions.setAttribute("aria-label", "Message actions");
            const activeChat = getChatById(state.activeChatId);
            header.textContent = isMessageUser ? "You" : (activeChat?.assistant_persona_name || "Assistant");
            if (!isMessageUser && Array.isArray(message.sources) && message.sources.length) {
                const webBadge = document.createElement("span");
                webBadge.className = "msg-web-badge";
                webBadge.textContent = "Used web results";
                header.append(webBadge);
            }
            setMessageContent(body, message.content);
            const copyBtn = document.createElement("button");
@@ -8,6 +8,7 @@ export function createReasoningToggle(button) {
    let supported = false;
    let busy = false;
    const render = () => {
        button.hidden = !supported;
        button.disabled = !supported || busy;
        button.setAttribute("aria-pressed", String(reasoningEnabled));
        button.title = !supported ? "This model does not support reasoning"
@@ -120,6 +120,7 @@ let workspaceMode = localStorage.getItem("krishd-workspace-mode") || "basic";
 let onboardingStep = 1, onboardingIntent = "ask";
 let chatLoadingDepth = 0;
 let chatActivityDepth = 0;
 let noticeTimer = null;
 let availableModelsById = new Map();
 const personalitySelect = document.getElementById("personalitySelect");
@@ -234,7 +235,15 @@ const branchExplorer = createBranchExplorer({state: conversation, setActiveChat,
 function setNotice(message = "", state = "") {
    const notice = document.getElementById("workspaceNotice");
-    if (notice) { notice.textContent = state === "error" ? message : ""; notice.classList.toggle("hidden", state !== "error"); }
+    clearTimeout(noticeTimer);
    if (notice) {
        const visible = state === "error" || state === "success";
        notice.textContent = visible ? message : "";
        notice.classList.toggle("hidden", !visible);
        notice.classList.toggle("error", state === "error");
        notice.classList.toggle("success", state === "success");
        if (state === "success") noticeTimer = setTimeout(() => setNotice(), 3500);
    }
    return { message, state };
 }
@@ -603,6 +612,18 @@ function openModelSettings() {
    requestAnimationFrame(() => modelSelect?.focus());
 }
 function formatChatActivity(value) {
    if (!value) return "";
    const date = new Date(value.includes("T") ? value : `${value.replace(" ", "T")}Z`);
    if (Number.isNaN(date.getTime())) return "";
    const today = new Date();
    const sameDay = (a, b) => a.getFullYear() === b.getFullYear() && a.getMonth() === b.getMonth() && a.getDate() === b.getDate();
    if (sameDay(date, today)) return new Intl.DateTimeFormat(undefined, {hour: "numeric", minute: "2-digit"}).format(date);
    const yesterday = new Date(today); yesterday.setDate(today.getDate() - 1);
    if (sameDay(date, yesterday)) return "Yesterday";
    return new Intl.DateTimeFormat(undefined, {month: "short", day: "numeric", ...(date.getFullYear() === today.getFullYear() ? {} : {year: "numeric"})}).format(date);
 }
 function renderChatList() {
    const query = chatSearchInput.value.trim().toLowerCase();
    const source = query ? (conversation.chatSearchResults ?? []) : conversation.chatSessions;
@@ -657,7 +678,8 @@ function renderChatList() {
            const chatType = chat.assistant_persona_id
                ? `Roleplay${chat.user_persona_name ? ` · ${chat.user_persona_name}` : ""}`
                : "Assistant chat";
-            meta.textContent = chat.source_chat_id ? `Branch · ${chatType}` : chatType;
+            const activity = formatChatActivity(chat.updated_at);
            meta.textContent = [chat.source_chat_id ? `Branch · ${chatType}` : chatType, activity].filter(Boolean).join(" · ");
            remove.type = "button";
            remove.className = "chat-item-delete";
            remove.textContent = "Delete";
@@ -668,10 +690,11 @@ function renderChatList() {
                await deleteChat(chat.id);
            });
            content.append(title, meta);
-            if (query && chat.matched_content) {
+            const preview = query && chat.matched_content ? chat.matched_content : chat.last_message_preview;
            if (preview) {
                const excerpt = document.createElement("small");
-                const normalized = chat.matched_content.replace(/\s+/g, " ");
+                const normalized = preview.replace(/\s+/g, " ").trim();
-                const matchAt = normalized.toLowerCase().indexOf(query);
+                const matchAt = query ? normalized.toLowerCase().indexOf(query) : -1;
                const start = Math.max(0, matchAt - 35);
                excerpt.className = "chat-item-excerpt";
                excerpt.textContent = `${start ? "…" : ""}${normalized.slice(start, start + 110)}${normalized.length > start + 110 ? "…" : ""}`;
@@ -778,7 +801,7 @@ async function updateChatOrganization(id, changes) {
    const res = await put(`/chats/${id}/organization`, payload);
    if (res.error) return setNotice(res.error, "error");
    const index = conversation.chatSessions.findIndex((item) => item.id === id);
-    if (index >= 0) conversation.chatSessions[index] = res.chat;
+    if (index >= 0) conversation.chatSessions[index] = {...conversation.chatSessions[index], ...res.chat};
    updateWorkspaceCopy();
    renderChatList();
    updateChatActionState();
@@ -799,7 +822,9 @@ async function clearChat(id) {
    if (res.error) return setNotice(res.error, "error");
    conversation.messageRetryState = new Map();
    conversation.historyPage = null;
-    conversation.currentMessages = []; renderMessages(); await loadSummary(); setNotice("Chat cleared.", "success");
+    chat.last_message_preview = null;
    chat.updated_at = new Date().toISOString();
    conversation.currentMessages = []; renderMessages(); renderChatList(); await loadSummary(); setNotice("Chat cleared.", "success");
 }
 const personaStateFields = [
@@ -5,15 +5,19 @@
 /** @typedef {{message: string, model: string, chatId: number, webSearch?: boolean, reasoning?: boolean}} ChatRequest */
 /** @typedef {{role: string, content: string, thinking?: string, sources?: WebSource[]}} ChatMessage */
-export function createWebSearchToggle(button) {
+export function createWebSearchToggle(button, storage = globalThis.localStorage) {
    const key = "krishd-web-search-enabled";
    let enabled = true;
    try { enabled = storage?.getItem(key) !== "false"; } catch { /* Storage may be unavailable. */ }
    const render = () => {
        button.setAttribute("aria-pressed", String(enabled));
-        button.title = enabled ? "Automatic web search on - click to disable" : "Web search off - click to enable";
+        button.title = enabled ? "Web search allowed. The assistant searches when useful. Click to turn off."
            : "Web search off. Click to allow the assistant to search when useful.";
        button.setAttribute("aria-label", button.title);
    };
    button.addEventListener("click", () => {
        enabled = !enabled;
        try { storage?.setItem(key, String(enabled)); } catch { /* Keep this session's choice. */ }
        render();
    });
    render();
@@ -28,7 +32,7 @@ export function appendSources(container, sources) {
    section.setAttribute("aria-label", "Sources");
    const heading = document.createElement("div");
    heading.className = "msg-sources-heading";
-    heading.textContent = "Sources";
+    heading.textContent = "Used web results · Sources";
    section.appendChild(heading);
    sources.slice(0, 5).forEach((source, index) => {
        let url;
@@ -16,8 +16,8 @@
 </head>
 <body class="site-page landing-page">
-    <!-- site-header -->
+<!-- site-header -->
-    <main id="main" class="landing-entry">
+<main id="main" class="landing-entry">
    <div class="entry-door" aria-hidden="true"><span></span></div>
    <div class="entry-copy">
        <p class="eyebrow">A space for every conversation.</p>
@@ -28,11 +28,11 @@
                    aria-hidden="true">&rarr;</span></a>
        </div>
    </div>
-    </main>
+</main>
-    <footer class="site-footer"><span>elsewhere / a little room for imagination</span><a
+<footer class="site-footer"><span>elsewhere / a little room for imagination</span><a
        href="/privacy.html">Privacy</a><a href="/tos.html">Terms</a></footer>
-    <script type="module" src="/js/pages.js?v=20260909-account-controls"></script>
+<script type="module" src="/js/pages.js?v=20260909-account-controls"></script>
-    <script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
 </body>
 </html>
@@ -1,3 +1,26 @@
 <!DOCTYPE html>
-<html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="icon" href="/img/favicon.svg"><title>Personalities - Elsewhere</title><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap" rel="stylesheet"><script src="/js/theme-bootstrap.js"></script><link rel="stylesheet" href="/css/style.css"><link rel="stylesheet" href="/css/pages.css"><link rel="stylesheet" href="/css/shell.css"></head>
+<html lang="en">
-<body class="site-page personalities-page" data-theme="fakegpt" data-theme-mode="light"><!-- site-header --><main id="main" class="personality-shell"><header class="personality-page-header"><p class="eyebrow">Choose your approach</p><h1>Personalities</h1><p class="subtitle">Six specialized assistants, each designed for a different kind of work.</p></header><section id="personalityGrid" class="personality-grid" aria-live="polite"></section></main><script type="module" src="/js/personalities.js"></script></body></html>
+<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" href="/img/favicon.svg">
    <title>Personalities - Elsewhere</title>
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap"
          rel="stylesheet">
    <script src="/js/theme-bootstrap.js"></script>
    <link rel="stylesheet" href="/css/style.css">
    <link rel="stylesheet" href="/css/pages.css">
    <link rel="stylesheet" href="/css/shell.css">
 </head>
 <body class="site-page personalities-page" data-theme="fakegpt" data-theme-mode="light"><!-- site-header -->
 <main id="main" class="personality-shell">
    <header class="personality-page-header"><p class="eyebrow">Choose your approach</p>
        <h1>Personalities</h1>
        <p class="subtitle">Six specialized assistants, use whichever fits you best.</p></header>
    <section id="personalityGrid" class="personality-grid" aria-live="polite"></section>
 </main>
 <script type="module" src="/js/personalities.js"></script>
 </body>
 </html>
@@ -17,20 +17,24 @@
 </head>
 <body class="site-page legal-page">
-    <!-- site-header -->
+<!-- site-header -->
-    <main id="main" class="legal-shell">
+<main id="main" class="legal-shell">
    <header class="legal-hero">
        <p class="eyebrow">Your data, explained</p>
        <h1>Privacy Policy</h1>
        <p class="legal-summary">This policy explains what personal data Elsewhere handles, why it is needed, where
            it goes and the choices available to you.</p>
-            <p class="legal-updated">Effective and last updated <time datetime="2026-09-23">23 September 2026</time></p>
+        <p class="legal-updated">Effective and last updated
            <time datetime="2026-09-23">23 September 2026</time>
        </p>
    </header>
    <aside class="legal-callout" aria-label="Privacy summary">
        <div><strong>No advertising</strong><span>We do not sell personal data or use it for targeted ads.</span></div>
-            <div><strong>You stay in control</strong><span>Export your workspace or delete your account in Settings.</span></div>
+        <div><strong>You stay in control</strong><span>Export your workspace or delete your account in Settings.</span>
-            <div><strong>Features are optional</strong><span>Web search, image uploads and public publishing are choices you make.</span></div>
+        </div>
        <div><strong>Features are optional</strong><span>Web search, image uploads and public publishing are choices you make.</span>
        </div>
    </aside>
    <div class="legal-layout">
@@ -58,9 +62,19 @@
                <p>Kristian Cerni is the controller responsible for Elsewhere. This policy applies to the Elsewhere
                    website, account area, chats, persona market and related features.</p>
                <dl class="legal-details">
-                        <div><dt>Service</dt><dd>Elsewhere</dd></div>
+                    <div>
-                        <div><dt>Privacy contact</dt><dd><a href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a></dd></div>
+                        <dt>Service</dt>
-                        <div><dt>Project contact</dt><dd><a href="https://github.com/KrisHD1337" rel="external noopener">github.com/KrisHD1337</a></dd></div>
+                        <dd>Elsewhere</dd>
                    </div>
                    <div>
                        <dt>Privacy contact</dt>
                        <dd><a href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a></dd>
                    </div>
                    <div>
                        <dt>Project contact</dt>
                        <dd><a href="https://github.com/KrisHD1337" rel="external noopener">github.com/KrisHD1337</a>
                        </dd>
                    </div>
                </dl>
            </section>
@@ -69,18 +83,24 @@
                <p>We collect data you provide and technical data generated while you use the service:</p>
                <ul>
                    <li><strong>Account data:</strong> username, password hash and session records. Elsewhere does not
-                            ask for an email address during registration.</li>
+                        ask for an email address during registration.
                    </li>
                    <li><strong>Workspace content:</strong> chats, AI responses, conversation titles, personas, prompt
-                            templates, settings, memories, model choices, retry history and roleplay state.</li>
+                        templates, settings, memories, model choices, retry history and roleplay state.
                    </li>
                    <li><strong>Uploaded images:</strong> image files plus filename, type, size, dimensions, ownership,
-                            storage key, timestamps and cached analysis associated with your question.</li>
+                        storage key, timestamps and cached analysis associated with your question.
                    </li>
                    <li><strong>Persona market activity:</strong> published personas and creator username, collections,
-                            favourites, ratings, reports and moderation records.</li>
+                        favourites, ratings, reports and moderation records.
                    </li>
                    <li><strong>Web-search data:</strong> the search query derived from your current message, selected
-                            result links and snippets when you turn on web search.</li>
+                        result links and snippets when you turn on web search.
                    </li>
                    <li><strong>Technical and security data:</strong> session identifiers, request identifiers, routes,
                        response status and timing, account username for signed-in requests, and IP-based rate-limit
-                            information held temporarily in memory.</li>
+                        information held temporarily in memory.
                    </li>
                </ul>
                <p>Please avoid putting sensitive personal data into chats or images unless it is genuinely necessary
                    for your use of the service.</p>
@@ -90,19 +110,50 @@
                <h2><span>03</span> How and why we use data</h2>
                <div class="legal-table-wrap">
                    <table>
-                            <thead><tr><th>Purpose</th><th>Data used</th><th>Basis where the GDPR applies</th></tr></thead>
+                        <thead>
                        <tr>
                            <th>Purpose</th>
                            <th>Data used</th>
                            <th>Basis where the GDPR applies</th>
                        </tr>
                        </thead>
                        <tbody>
-                                <tr><td>Create and secure your account</td><td>Account, session and security data</td><td>Performance of our contract; legitimate interests in security</td></tr>
+                        <tr>
-                                <tr><td>Provide chats, personas, uploads, exports and settings</td><td>Account and workspace content</td><td>Performance of our contract</td></tr>
+                            <td>Create and secure your account</td>
-                                <tr><td>Run optional AI, image and search features</td><td>Your selected message, relevant context, images or query</td><td>Performance of our contract at your request</td></tr>
+                            <td>Account, session and security data</td>
-                                <tr><td>Operate and moderate the persona market</td><td>Published content, username and market activity</td><td>Performance of our contract; legitimate interests in a safe public space</td></tr>
+                            <td>Performance of our contract; legitimate interests in security</td>
-                                <tr><td>Prevent abuse, diagnose faults and maintain reliability</td><td>Technical, account and limited content data where necessary</td><td>Legitimate interests in security and service operation</td></tr>
+                        </tr>
-                                <tr><td>Meet legal obligations and defend claims</td><td>Relevant records</td><td>Legal obligation or legitimate interests</td></tr>
+                        <tr>
                            <td>Provide chats, personas, uploads, exports and settings</td>
                            <td>Account and workspace content</td>
                            <td>Performance of our contract</td>
                        </tr>
                        <tr>
                            <td>Run optional AI, image and search features</td>
                            <td>Your selected message, relevant context, images or query</td>
                            <td>Performance of our contract at your request</td>
                        </tr>
                        <tr>
                            <td>Operate and moderate the persona market</td>
                            <td>Published content, username and market activity</td>
                            <td>Performance of our contract; legitimate interests in a safe public space</td>
                        </tr>
                        <tr>
                            <td>Prevent abuse, diagnose faults and maintain reliability</td>
                            <td>Technical, account and limited content data where necessary</td>
                            <td>Legitimate interests in security and service operation</td>
                        </tr>
                        <tr>
                            <td>Meet legal obligations and defend claims</td>
                            <td>Relevant records</td>
                            <td>Legal obligation or legitimate interests</td>
                        </tr>
                        </tbody>
                    </table>
                </div>
                <p>We do not use your data for targeted advertising and do not sell it. Elsewhere does not make
-                        decisions about you that produce legal or similarly significant effects solely by automated means.</p>
+                    decisions about you that produce legal or similarly significant effects solely by automated
                    means.</p>
            </section>
            <section id="providers">
@@ -134,9 +185,12 @@
                <p>We disclose personal data only as needed:</p>
                <ul>
                    <li>to the configured model and search services when you use those features;</li>
-                        <li>to infrastructure providers that host or support the application under appropriate safeguards;</li>
+                    <li>to infrastructure providers that host or support the application under appropriate safeguards;
                    </li>
                    <li>to other users when you intentionally publish a persona;</li>
-                        <li>when required by law, a valid legal process or to protect rights, safety and service security; or</li>
+                    <li>when required by law, a valid legal process or to protect rights, safety and service security;
                        or
                    </li>
                    <li>as part of a service reorganisation, with notice and appropriate protection where required.</li>
                </ul>
            </section>
@@ -152,14 +206,23 @@
            <section id="retention">
                <h2><span>08</span> How long data is kept</h2>
                <ul>
-                        <li><strong>Account and workspace data</strong> remain until you delete individual items or your account.</li>
+                    <li><strong>Account and workspace data</strong> remain until you delete individual items or your
-                        <li><strong>Temporary, unattached uploads</strong> are scheduled for deletion after 24 hours. Images attached to a message remain with that conversation.</li>
+                        account.
-                        <li><strong>Session records</strong> expire according to the configured session lifetime and can be invalidated from Settings.</li>
+                    </li>
-                        <li><strong>Operational logs and in-memory rate-limit records</strong> are kept only as long as reasonably needed for security, diagnosis and operation.</li>
+                    <li><strong>Temporary, unattached uploads</strong> are scheduled for deletion after 24 hours. Images
                        attached to a message remain with that conversation.
                    </li>
                    <li><strong>Session records</strong> expire according to the configured session lifetime and can be
                        invalidated from Settings.
                    </li>
                    <li><strong>Operational logs and in-memory rate-limit records</strong> are kept only as long as
                        reasonably needed for security, diagnosis and operation.
                    </li>
                </ul>
                <p>Deleting your account removes its workspace, attached files and published market entries from the
                    active service. Deletion from backups or queued file cleanup may take additional time. We may keep
-                        limited records longer where required by law or necessary to establish, exercise or defend legal claims.</p>
+                    limited records longer where required by law or necessary to establish, exercise or defend legal
                    claims.</p>
            </section>
            <section id="transfers">
@@ -201,14 +264,14 @@
            </section>
        </article>
    </div>
-    </main>
+</main>
-    <footer class="legal-footer">
+<footer class="legal-footer">
    <span>Elsewhere</span>
    <a href="/tos.html">Terms of Service</a>
    <a href="/">Back to Elsewhere</a>
-    </footer>
+</footer>
-    <script type="module" src="/js/workspaceNavigation.js?v=20260923-legal"></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260923-legal"></script>
 </body>
 </html>
@@ -3,7 +3,7 @@
 <head>
    <link rel="icon" type="image/svg+xml" href="/img/favicon.svg">
-    <meta charset="UTF-8" />
+    <meta charset="UTF-8"/>
    <title>Elsewhere Settings</title>
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -11,14 +11,14 @@
            href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap"
            rel="stylesheet">
    <script src="/js/theme-bootstrap.js?v=20260909-account-controls"></script>
-    <link rel="stylesheet" href="/css/style.css?v=20260909-account-controls" />
+    <link rel="stylesheet" href="/css/style.css?v=20260909-account-controls"/>
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="stylesheet" href="/css/shell.css?v=20260909-account-controls">
 </head>
 <body class="site-page settings-page" data-theme="fakegpt" data-theme-mode="light">
-    <!-- site-header -->
+<!-- site-header -->
-    <main id="main" class="settings-shell page-content">
+<main id="main" class="settings-shell page-content">
    <header class="market-header market-header-simple">
        <div>
            <p class="eyebrow">Elsewhere settings</p>
@@ -31,12 +31,15 @@
    <section class="settings-layout">
        <aside class="settings-nav" aria-label="Settings sections" role="tablist">
            <button class="settings-nav-item active" type="button" role="tab" aria-selected="true"
-                    data-settings-view="personal">Account</button>
+                    data-settings-view="personal">Account
            </button>
            <button class="settings-nav-item" type="button" role="tab" aria-selected="false"
-                    data-settings-view="design">Appearance</button>
+                    data-settings-view="design">Appearance
            </button>
            <button id="diagnosticsNavItem" class="settings-nav-item hidden" type="button" role="tab"
-                    aria-selected="false" data-settings-view="diagnostics">Diagnostics</button>
+                    aria-selected="false" data-settings-view="diagnostics">Diagnostics
            </button>
        </aside>
        <div class="settings-content">
@@ -51,15 +54,15 @@
                    <form id="usernameForm" class="settings-form-stack">
                        <label class="field">
                            <span>Current username</span>
-                                <input id="currentUsername" readonly />
+                            <input id="currentUsername" readonly/>
                        </label>
                        <label class="field">
                            <span>New username</span>
-                                <input id="newUsername" autocomplete="username" />
+                            <input id="newUsername" autocomplete="username"/>
                        </label>
                        <label class="field">
                            <span>Current password</span>
-                                <input id="usernamePassword" type="password" autocomplete="current-password" />
+                            <input id="usernamePassword" type="password" autocomplete="current-password"/>
                        </label>
                        <button id="saveUsername" type="submit">Save username</button>
                    </form>
@@ -75,15 +78,15 @@
                    <form id="passwordForm" class="settings-form-stack">
                        <label class="field">
                            <span>Current password</span>
-                                <input id="currentPassword" type="password" autocomplete="current-password" />
+                            <input id="currentPassword" type="password" autocomplete="current-password"/>
                        </label>
                        <label class="field">
                            <span>New password</span>
-                                <input id="newPassword" type="password" autocomplete="new-password" />
+                            <input id="newPassword" type="password" autocomplete="new-password"/>
                        </label>
                        <label class="field">
                            <span>Repeat new password</span>
-                                <input id="repeatPassword" type="password" autocomplete="new-password" />
+                            <input id="repeatPassword" type="password" autocomplete="new-password"/>
                        </label>
                        <button id="savePassword" type="submit">Save password</button>
                    </form>
@@ -101,7 +104,8 @@
                    <div class="persona-actions">
                        <button id="exportAccount" type="button" class="secondary-action">Export account</button>
                        <button id="logoutAllSessions" type="button" class="secondary-action">Logout all
-                                sessions</button>
+                            sessions
                        </button>
                    </div>
                </div>
@@ -116,7 +120,8 @@
                    </div>
                    <div class="persona-actions">
                        <button id="deleteAccount" type="button" class="secondary-action danger">Delete
-                                account</button>
+                            account
                        </button>
                    </div>
                </div>
            </section>
@@ -128,7 +133,8 @@
                        <div>
                            <p class="eyebrow">Curated assistants</p>
                            <h2>Personalities</h2>
-                                <p class="subtitle">Choose a focused assistant for writing, coding, research, learning, or planning.</p>
+                            <p class="subtitle">Choose a focused assistant for writing, coding, research, learning, or
                                planning.</p>
                        </div>
                        <a class="secondary-action" href="/app/personas">Browse Personalities</a>
                    </div>
@@ -221,10 +227,11 @@
            </section>
        </div>
    </section>
-    </main>
+</main>
-    <div id="settingsPersonaModal" class="modal-overlay hidden">
+<div id="settingsPersonaModal" class="modal-overlay hidden">
-        <div class="modal-card persona-modal-card" role="dialog" aria-modal="true" aria-labelledby="settingsPersonaFormTitle" tabindex="-1">
+    <div class="modal-card persona-modal-card" role="dialog" aria-modal="true"
         aria-labelledby="settingsPersonaFormTitle" tabindex="-1">
        <div class="modal-header">
            <div class="persona-modal-heading">
                <p class="eyebrow">Persona editor</p>
@@ -247,11 +254,11 @@
                </label>
                <label class="field">
                    <span>Name</span>
-                        <input id="settingsPersonaName" placeholder="Persona name" required />
+                    <input id="settingsPersonaName" placeholder="Persona name" required/>
                </label>
                <label class="field">
                    <span>Pronouns</span>
-                        <input id="settingsPersonaPronouns" placeholder="e.g. she/her, they/them" />
+                    <input id="settingsPersonaPronouns" placeholder="e.g. she/her, they/them"/>
                </label>
                <label class="field field-wide">
                    <span>Appearance</span>
@@ -284,9 +291,9 @@
            </div>
        </form>
    </div>
-    </div>
+</div>
-    <div id="settingsPopupModal" class="modal-overlay hidden">
+<div id="settingsPopupModal" class="modal-overlay hidden">
    <div class="modal-card popup-card" role="dialog" aria-modal="true" aria-labelledby="settingsPopupTitle"
         aria-describedby="settingsPopupDescription">
        <div class="modal-header">
@@ -300,7 +307,7 @@
            <p id="settingsPopupDescription" class="subtitle">Please confirm this action.</p>
            <label id="settingsPopupField" class="field">
                <span id="settingsPopupInputLabel">Value</span>
-                    <input id="settingsPopupInput" type="text" autocomplete="off" />
+                <input id="settingsPopupInput" type="text" autocomplete="off"/>
            </label>
        </div>
        <div class="popup-actions">
@@ -308,9 +315,9 @@
            <button id="settingsPopupConfirm" type="button">Confirm</button>
        </div>
    </div>
-    </div>
+</div>
-    <script type="module" src="/js/settings.js?v=20260930-account-fixes"></script>
+<script type="module" src="/js/settings.js?v=20260930-account-fixes"></script>
-    <script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
 </body>
 </html>
@@ -17,14 +17,16 @@
 </head>
 <body class="site-page legal-page">
-    <!-- site-header -->
+<!-- site-header -->
-    <main id="main" class="legal-shell">
+<main id="main" class="legal-shell">
    <header class="legal-hero">
        <p class="eyebrow">The ground rules</p>
        <h1>Terms of Service</h1>
        <p class="legal-summary">Please read these terms before using Elsewhere. They explain what you can expect
            from the service and what we expect from you.</p>
-            <p class="legal-updated">Effective and last updated <time datetime="2026-09-23">23 September 2026</time></p>
+        <p class="legal-updated">Effective and last updated
            <time datetime="2026-09-23">23 September 2026</time>
        </p>
    </header>
    <div class="legal-layout">
@@ -99,9 +101,11 @@
                    <li>access another person’s account or data without permission;</li>
                    <li>misrepresent AI-generated material as authentic where that could deceive or harm someone;</li>
                    <li>publish content that is unlawful, abusive, exploitative or infringes intellectual-property or
-                            privacy rights; or</li>
+                        privacy rights; or
                    </li>
                    <li>automate access in a way that places an unreasonable load on the service or circumvents its
-                            limits.</li>
+                        limits.
                    </li>
                </ul>
                <p>We may remove public content or restrict access when reasonably necessary to address abuse,
                    security risks, legal obligations or violations of these Terms.</p>
@@ -139,7 +143,8 @@
                <h2><span>09</span> Suspension and termination</h2>
                <p>You may stop using Elsewhere or delete your account at any time. We may suspend or terminate
                    access if you materially or repeatedly violate these Terms, create a security or legal risk, or
-                        misuse the service. Where reasonable, we will give notice and an opportunity to address the issue.</p>
+                    misuse the service. Where reasonable, we will give notice and an opportunity to address the
                    issue.</p>
            </section>
            <section id="law">
@@ -161,14 +166,14 @@
            </section>
        </article>
    </div>
-    </main>
+</main>
-    <footer class="legal-footer">
+<footer class="legal-footer">
    <span>Elsewhere</span>
    <a href="/privacy.html">Privacy Policy</a>
    <a href="/">Back to Elsewhere</a>
-    </footer>
+</footer>
-    <script type="module" src="/js/workspaceNavigation.js?v=20260923-legal"></script>
+<script type="module" src="/js/workspaceNavigation.js?v=20260923-legal"></script>
 </body>
 </html>
@@ -0,0 +1,20 @@
 /* Local, pinned Markdown renderer compatible with the marked.parse API used by the chat UI. */
 (function () {
    const escape = value => String(value).replace(/[&<>"']/g, character => ({"&":"&amp;","<":"&lt;",">":"&gt;","\"":"&quot;","'":"&#39;"}[character]));
    const inline = value => escape(value)
        .replace(/`([^`]+)`/g, "<code>$1</code>")
        .replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>")
        .replace(/__([^_]+)__/g, "<strong>$1</strong>")
        .replace(/\*([^*]+)\*/g, "<em>$1</em>")
        .replace(/_([^_]+)_/g, "<em>$1</em>")
        .replace(/\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)/g, '<a href="$2" rel="noreferrer noopener">$1</a>');
    window.marked = {parse(markdown) {
        return String(markdown || "").split(/\n{2,}/).map(block => {
            const lines = block.split("\n");
            if (/^### /.test(lines[0])) return `<h3>${inline(lines[0].slice(4))}</h3>`;
            if (/^## /.test(lines[0])) return `<h2>${inline(lines[0].slice(3))}</h2>`;
            if (/^# /.test(lines[0])) return `<h1>${inline(lines[0].slice(2))}</h1>`;
            return `<p>${lines.map(inline).join("<br>")}</p>`;
        }).join("");
    }};
 }());
@@ -0,0 +1,2 @@
 process.env.NODE_ENV ??= "development";
 await import("../server.js");
@@ -0,0 +1,18 @@
 import {spawnSync} from "node:child_process";
 const suites = {
    // Persona-market/roleplay generation protection belonged to the retired feature.
    // Keep its historical test file available for reference, but do not run it as
    // part of the supported application contract.
    backend: ["app", "attachments", "automaticWebSearch", "modelStreaming", "rateLimit", "visionAnalysis", "visionDiagnostics", "webSearch", "webSearchRegression", "workspaceImport"],
    // reasoning.test.js still contains the retired persona-roleplay workflow;
    // supported streaming/reasoning coverage remains in modelStreaming and chat tests.
    frontend: ["api", "attachmentComposer", "chatUsability", "composer", "conversation", "draftStore", "personalities", "regeneration", "regenerationUi", "streamRenderer", "workspaceTransferUi"]
 };
 const suite = process.argv[2];
 if (!suites[suite]) throw new Error(`Unknown test suite: ${suite}`);
 for (const name of suites[suite]) {
    const result = spawnSync(process.execPath, ["--test", "--test-isolation=none", `test/${name}.test.js`], {stdio: "inherit"});
    if (result.error) throw result.error;
    if (result.status !== 0) process.exit(result.status ?? 1);
 }
@@ -0,0 +1,2 @@
 process.env.NODE_ENV ??= "production";
 await import("../server.js");
@@ -7,7 +7,6 @@ import {randomUUID} from "crypto";
 import {performance} from "perf_hooks";
 import express from "express";
 import session from "express-session";
 import FileStoreFactory from "session-file-store";
 import {createConfig} from "./config.js";
 import {createDatabase} from "./db/index.js";
 import {createRepositories} from "./db/repositories.js";
@@ -25,6 +24,8 @@ import {createAttachmentService} from "./services/attachmentService.js";
 import {createUploadsRouter} from "./routes/uploads.js";
 import {createVisionDebugService} from "./services/visionDebugService.js";
 import {createVisionDebugRouter} from "./routes/visionDebug.js";
 import {createAdminMarketRouter} from "./routes/adminMarket.js";
 import {createSqliteSessionStore} from "./middleware/sqliteSessionStore.js";
 export function createCloseHandler(resources) {
    let closed = false;
@@ -102,7 +103,7 @@ function createObservability(config) {
            at: new Date().toISOString(),
            requestId: req?.id || null,
            method: req?.method || null,
-            path: req?.originalUrl || req?.url || null,
+            path: req?.path || null,
            status,
            message: String(error?.message || error || "Unknown error").slice(0, 500)
        };
@@ -128,11 +129,10 @@ function createObservability(config) {
                    type: "request",
                    requestId: req.id,
                    method: req.method,
-                    path: req.originalUrl || req.url,
+                    path: req.path,
                    status,
                    durationMs,
                    slow: durationMs > config.slowRequestWarnMs,
                    user: req.session?.user || null
                }));
            }
        });
@@ -223,7 +223,7 @@ function sameOriginProtection(config) {
 function browserSecurityHeaders(config) {
    return (_req, res, next) => {
-        res.setHeader("Content-Security-Policy", "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; media-src 'self' blob:; connect-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; worker-src 'self' blob:");
+        res.setHeader("Content-Security-Policy", "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:; media-src 'self' blob:; connect-src 'self'; style-src 'self'; script-src 'self'; font-src 'self' data:; worker-src 'self' blob:");
        res.setHeader("Referrer-Policy", "strict-origin-when-cross-origin");
        res.setHeader("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=(), usb=()");
        res.setHeader("X-Content-Type-Options", "nosniff");
@@ -273,23 +273,24 @@ export function createApp(options = {}) {
    const visionDebugService = createVisionDebugService(config);
    const attachmentService = createAttachmentService(db, config, modelService, visionDebugService);
    const chatService = createChatService(repositories, modelService, config, undefined, attachmentService, visionDebugService);
-    const FileStore = FileStoreFactory(session);
+    const sessionStore = options.sessionStore || (config.testMode ? undefined : createSqliteSessionStore(db));
    const rateLimitStore = createSqliteRateLimitStore(db);
    const authRateLimiters = createAuthRateLimiters(config, rateLimitStore);
    const chatRateLimiters = createChatRateLimiters(config, rateLimitStore);
    closeHandlers.push(
        ...authRateLimiters.map((limiter) => limiter.close),
        ...chatRateLimiters.map((limiter) => limiter.close),
        ...(sessionStore?.close ? [() => sessionStore.close()] : []),
        () => attachmentService.close(),
        () => db.close()
    );
    app.use(observability.middleware);
    app.use(browserSecurityHeaders(config));
-    app.use(createHealthRouter({modelService}));
+    app.use(createHealthRouter({modelService, config}));
    app.use(express.json({limit: "1mb"}));
    app.use(session({
-        store: options.sessionStore || (config.testMode ? undefined : new FileStore({path: config.sessionsDir, reapInterval: 3600})),
+        store: sessionStore,
        secret: config.sessionSecret,
        resave: false,
        saveUninitialized: false,
@@ -337,8 +338,9 @@ export function createApp(options = {}) {
    if (config.visionDebug) app.use(createVisionDebugRouter({visionDebugService, repositories}));
    app.use(createSettingsRouter({repositories}));
    app.use(createChatsRouter({repositories, chatService, modelService, config, chatRateLimiters, attachmentService}));
-    app.use(createWorkspaceTransferRouter({repositories, chatService, config, attachmentService}));
+    app.use(createAdminMarketRouter(repositories));
-    app.use(createSystemRouter({modelService, config}));
+    app.use(createWorkspaceTransferRouter({repositories, chatService, config, attachmentService, db}));
    app.use(createSystemRouter({modelService, config, observability}));
    app.use(notFoundHandler);
    app.use(errorHandler);
@@ -12,6 +12,8 @@ const int = (value, fallback) => {
    const parsed = Number.parseInt(value, 10);
    return Number.isInteger(parsed) ? parsed : fallback;
 };
 const positiveInt = (value, fallback) => Math.max(1, int(value, fallback));
 const nonNegativeInt = (value, fallback) => Math.max(0, int(value, fallback));
 const trustProxy = (value, fallback = false) => {
    if (value == null || value === "") return fallback;
@@ -22,11 +24,18 @@ const trustProxy = (value, fallback = false) => {
    return Number.isInteger(parsed) ? parsed : value;
 };
 const validHttpUrl = (value, name, {allowEmpty = false} = {}) => {
    if (allowEmpty && !value) return;
    let parsed;
    try { parsed = new URL(value); } catch { throw new Error(`${name} must be a valid URL.`); }
    if (!['http:', 'https:'].includes(parsed.protocol)) throw new Error(`${name} must use http or https.`);
 };
 export function createConfig(overrides = {}) {
    const rootDir = overrides.rootDir || process.cwd();
    const dataDir = overrides.dataDir || path.resolve(rootDir, "data");
    const sessionsDir = overrides.sessionsDir || path.resolve(rootDir, "sessions");
-    const testMode = bool(process.env.TEST_MODE, process.env.NODE_ENV === "test");
+    const testMode = overrides.testMode ?? bool(process.env.TEST_MODE, process.env.NODE_ENV === "test");
    const config = {
        rootDir,
@@ -45,7 +54,7 @@ export function createConfig(overrides = {}) {
        cookieSecure: bool(process.env.COOKIE_SECURE, false),
        allowInsecureCookies: bool(process.env.ALLOW_INSECURE_COOKIES, false),
        trustProxy: trustProxy(process.env.TRUST_PROXY, false),
-        sessionMaxAgeMs: int(process.env.SESSION_MAX_AGE_MS, 7 * 24 * 60 * 60 * 1000),
+        sessionMaxAgeMs: positiveInt(process.env.SESSION_MAX_AGE_MS, 7 * 24 * 60 * 60 * 1000),
        registrationInviteCode: process.env.REGISTRATION_INVITE_CODE || "",
        sameOriginProtectionEnabled: bool(process.env.SAME_ORIGIN_PROTECTION_ENABLED, true),
        staticMaxAge: process.env.STATIC_MAX_AGE || (process.env.NODE_ENV === "production" ? "1h" : 0),
@@ -58,41 +67,61 @@ export function createConfig(overrides = {}) {
        structuredRequestLoggingEnabled: bool(process.env.STRUCTURED_REQUEST_LOGGING_ENABLED, !testMode),
        visionDebug: bool(process.env.VISION_DEBUG, false),
        visionDebugSha256Enabled: bool(process.env.VISION_DEBUG_SHA256_ENABLED, false),
-        chatLimit: int(process.env.CHAT_LIMIT, 10),
+        chatLimit: positiveInt(process.env.CHAT_LIMIT, 10),
-        chatHistoryLimit: int(process.env.CHAT_HISTORY_LIMIT, 20),
+        chatHistoryLimit: positiveInt(process.env.CHAT_HISTORY_LIMIT, 20),
-        chatSummaryUpdateEveryMessages: int(process.env.CHAT_SUMMARY_UPDATE_EVERY_MESSAGES, 8),
+        chatSummaryUpdateEveryMessages: process.env.CHAT_SUMMARY_UPDATE_EVERY_MESSAGES == null ? 8 : nonNegativeInt(process.env.CHAT_SUMMARY_UPDATE_EVERY_MESSAGES, 8),
-        chatSummaryMaxChars: int(process.env.CHAT_SUMMARY_MAX_CHARS, 2200),
+        chatSummaryMaxChars: positiveInt(process.env.CHAT_SUMMARY_MAX_CHARS, 2200),
-        chatMaxRetries: int(process.env.CHAT_MAX_RETRIES, 5),
+        // The only model used for persisted context compaction. Leave unset to disable it.
        contextModel: process.env.CONTEXT_MODEL || null,
        contextCompactionTriggerTokens: positiveInt(process.env.CONTEXT_COMPACTION_TRIGGER_TOKENS, 6000),
        contextCompactionRecentTokens: positiveInt(process.env.CONTEXT_COMPACTION_RECENT_TOKENS, 2500),
        contextCompactionMinMessages: positiveInt(process.env.CONTEXT_COMPACTION_MIN_MESSAGES, 4),
        contextCompactionMaxChars: positiveInt(process.env.CONTEXT_COMPACTION_MAX_CHARS, 8000),
        chatMaxRetries: nonNegativeInt(process.env.CHAT_MAX_RETRIES, 5),
        titleModel: process.env.TITLE_MODEL || null,
        modelApiBaseUrl: process.env.MODEL_API_BASE_URL || "https://ai.krishd.ch/api",
-        modelRequestYTimeoutMs: int(process.env.MODEL_REQUEST_TIMEOUT_MS, 180000),
+        modelRequestTimeoutMs: positiveInt(process.env.MODEL_REQUEST_TIMEOUT_MS, 180000),
-        modelConnectTimeoutMs: Math.max(1, int(process.env.MODEL_CONNECT_TIMEOUT_MS, 30000)),
+        modelConnectTimeoutMs: positiveInt(process.env.MODEL_CONNECT_TIMEOUT_MS, 30000),
-        modelInactivityTimeoutMs: Math.max(1, int(process.env.MODEL_INACTIVITY_TIMEOUT_MS, int(process.env.MODEL_REQUEST_TIMEOUT_MS, 180000))),
+        modelInactivityTimeoutMs: positiveInt(process.env.MODEL_INACTIVITY_TIMEOUT_MS, int(process.env.MODEL_REQUEST_TIMEOUT_MS, 180000)),
-        modelMaxGenerationMs: Math.max(1, int(process.env.MODEL_MAX_GENERATION_MS, 600000)),
+        modelMaxGenerationMs: positiveInt(process.env.MODEL_MAX_GENERATION_MS, 600000),
        ollamaKeepAlive: process.env.OLLAMA_KEEP_ALIVE || "30m",
        searxngUrl: process.env.SEARXNG_URL || "",
-        webSearchTimeoutMs: Math.max(1, int(process.env.WEB_SEARCH_TIMEOUT_MS, 8000)),
+        webSearchTimeoutMs: positiveInt(process.env.WEB_SEARCH_TIMEOUT_MS, 8000),
-        modelListTimeoutMs: int(process.env.MODEL_LIST_TIMEOUT_MS, 4000),
+        modelListTimeoutMs: positiveInt(process.env.MODEL_LIST_TIMEOUT_MS, 4000),
-        modelUnloadAfterMs: int(process.env.MODEL_UNLOAD_AFTER_MS, 30 * 1000),
+        modelUnloadAfterMs: positiveInt(process.env.MODEL_UNLOAD_AFTER_MS, 30 * 1000),
-        modelsCacheTtlMs: int(process.env.MODELS_CACHE_TTL_MS, 5 * 60 * 1000),
+        modelsCacheTtlMs: nonNegativeInt(process.env.MODELS_CACHE_TTL_MS, 5 * 60 * 1000),
-        authRateLimitWindowMs: int(process.env.AUTH_RATE_LIMIT_WINDOW_MS, 15 * 60 * 1000),
+        authRateLimitWindowMs: positiveInt(process.env.AUTH_RATE_LIMIT_WINDOW_MS, 15 * 60 * 1000),
-        authRateLimitMaxPerIp: int(process.env.AUTH_RATE_LIMIT_MAX_PER_IP, 20),
+        authRateLimitMaxPerIp: positiveInt(process.env.AUTH_RATE_LIMIT_MAX_PER_IP, 20),
-        authRateLimitMaxPerAccount: int(process.env.AUTH_RATE_LIMIT_MAX_PER_ACCOUNT, 10),
+        authRateLimitMaxPerAccount: positiveInt(process.env.AUTH_RATE_LIMIT_MAX_PER_ACCOUNT, 10),
-        chatRateLimitWindowMs: int(process.env.CHAT_RATE_LIMIT_WINDOW_MS, 60 * 1000),
+        chatRateLimitWindowMs: positiveInt(process.env.CHAT_RATE_LIMIT_WINDOW_MS, 60 * 1000),
-        chatRateLimitMaxPerIp: int(process.env.CHAT_RATE_LIMIT_MAX_PER_IP, 60),
+        chatRateLimitMaxPerIp: positiveInt(process.env.CHAT_RATE_LIMIT_MAX_PER_IP, 60),
-        chatRateLimitMaxPerAccount: int(process.env.CHAT_RATE_LIMIT_MAX_PER_ACCOUNT, 30),
+        chatRateLimitMaxPerAccount: positiveInt(process.env.CHAT_RATE_LIMIT_MAX_PER_ACCOUNT, 30),
-        rateLimitCleanupIntervalMs: int(process.env.RATE_LIMIT_CLEANUP_INTERVAL_MS, 60 * 1000),
+        rateLimitCleanupIntervalMs: positiveInt(process.env.RATE_LIMIT_CLEANUP_INTERVAL_MS, 60 * 1000),
        testMode,
-        dropLegacyChats: bool(process.env.DROP_LEGACY_CHATS, true)
+        dropLegacyChats: bool(process.env.DROP_LEGACY_CHATS, false),
        healthCacheTtlMs: Math.max(0, int(process.env.HEALTH_CACHE_TTL_MS, testMode ? 0 : 5000)),
        healthTimeoutMs: Math.max(100, int(process.env.HEALTH_TIMEOUT_MS, 2000)),
        healthRateLimitWindowMs: Math.max(1000, int(process.env.HEALTH_RATE_LIMIT_WINDOW_MS, 60000)),
        healthRateLimitMaxPerIp: Math.max(1, int(process.env.HEALTH_RATE_LIMIT_MAX_PER_IP, testMode ? 1000 : 30))
    };
    const resolved = {...config, ...overrides};
-    if (process.env.NODE_ENV === "production" && !resolved.testMode) {
+    // An explicitly named environment is a deployment contract. With no NODE_ENV,
    // retain the local-development defaults used by the CLI and test helpers.
    const isProduction = process.env.NODE_ENV === "production" || overrides.production === true;
    const isNonTestDeployment = Boolean(process.env.NODE_ENV) && process.env.NODE_ENV !== "test" && !resolved.testMode;
    if (isNonTestDeployment || overrides.production === true) {
        if (resolved.sessionSecret === "change-me-session-secret") {
-            throw new Error("SESSION_SECRET must be set in production.");
+            throw new Error("SESSION_SECRET must be set outside test mode.");
        }
-        if (!resolved.cookieSecure && !resolved.allowInsecureCookies) {
+        if (isProduction && !resolved.cookieSecure && !resolved.allowInsecureCookies) {
-            throw new Error("COOKIE_SECURE must be true in production unless ALLOW_INSECURE_COOKIES=true is set.");
+            throw new Error("COOKIE_SECURE must be true outside test mode unless ALLOW_INSECURE_COOKIES=true is set.");
        }
        if (![true, false].includes(resolved.trustProxy) && !(Number.isInteger(resolved.trustProxy) && resolved.trustProxy >= 0)) {
            throw new Error("TRUST_PROXY must be a boolean or non-negative hop count.");
        }
        validHttpUrl(resolved.modelApiBaseUrl, "MODEL_API_BASE_URL");
        validHttpUrl(resolved.searxngUrl, "SEARXNG_URL", {allowEmpty: true});
    }
    return resolved;
@@ -2,6 +2,7 @@ export function createAccountStatements(db) {
    return {
        insertUser: db.prepare("INSERT INTO users (username, password) VALUES (?, ?)"),
        getUser: db.prepare("SELECT username, password, role, session_version FROM users WHERE username = ?"),
        getUserCaseInsensitive: db.prepare("SELECT username, password, role, session_version FROM users WHERE LOWER(username) = LOWER(?)"),
        updateUsername: db.prepare("UPDATE users SET username = ? WHERE username = ?"),
        updatePassword: db.prepare("UPDATE users SET password = ? WHERE username = ?"),
        incrementSessionVersion: db.prepare("UPDATE users SET session_version = COALESCE(session_version, 0) + 1 WHERE username = ?"),
@@ -68,6 +69,7 @@ const deleteUserTransaction = db.transaction((username) => {
    });
    return {
        getUser: (username) => statements.getUser.get(username),
        getUserCaseInsensitive: (username) => statements.getUserCaseInsensitive.get(username),
        insertUser: (username, passwordHash) => statements.insertUser.run(username, passwordHash),
        updatePassword: (passwordHash, username) => statements.updatePassword.run(passwordHash, username),
        incrementSessionVersion(username) {
@@ -27,6 +27,17 @@ export function initializeAttachments(db) {
            PRIMARY KEY (attachment_id, vision_model, prompt_version, question)
        );
        CREATE TABLE IF NOT EXISTS upload_deletions (storage_key TEXT PRIMARY KEY);
        CREATE TABLE IF NOT EXISTS upload_leases (
            token TEXT PRIMARY KEY,
            username TEXT NOT NULL REFERENCES users(username) ON DELETE CASCADE,
            created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
        );
        CREATE INDEX IF NOT EXISTS upload_leases_user ON upload_leases(username);
        CREATE TABLE IF NOT EXISTS workspace_operation_leases (
            username TEXT PRIMARY KEY REFERENCES users(username) ON DELETE CASCADE,
            token TEXT NOT NULL UNIQUE,
            created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
        );
        CREATE TRIGGER IF NOT EXISTS release_message_attachment AFTER DELETE ON message_attachments
        BEGIN
            DELETE FROM attachments WHERE id = OLD.attachment_id AND status = 'attached'
@@ -31,7 +31,10 @@ export function createChatStatements(db) {
                   cs.response_length,
                   cs.system_instruction,
                   cs.created_at,
-                   cs.updated_at
+                   cs.updated_at,
                   (SELECT substr(m.content, 1, 180) FROM chat_messages m
                    WHERE m.chat_id = cs.id AND m.content <> ''
                    ORDER BY m.id DESC LIMIT 1) AS last_message_preview
            FROM chat_sessions cs
                     LEFT JOIN personas p ON p.id = cs.assistant_persona_id
                     LEFT JOIN personas up ON up.id = cs.user_persona_id
@@ -118,6 +121,7 @@ export function createChatStatements(db) {
        updateChatPersonality: db.prepare("UPDATE chat_sessions SET personality_id = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ? AND username = ?"),
        updateChatSessionScene: db.prepare("UPDATE chat_sessions SET scenario_prompt = ?, scenario_summary = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ? AND username = ?"),
        updateChatContextSummary: db.prepare("UPDATE chat_sessions SET context_summary = ?, context_summary_message_id = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ? AND username = ?"),
        updateChatContextSummaryIfUnchanged: db.prepare("UPDATE chat_sessions SET context_summary = ?, context_summary_message_id = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ? AND username = ? AND context_summary IS ? AND context_summary_message_id = ?"),
        updateChatGenerationSettings: db.prepare(`
            UPDATE chat_sessions
            SET preferred_model = ?, temperature = ?, context_length = ?, response_length = ?, system_instruction = ?, updated_at = CURRENT_TIMESTAMP
@@ -350,6 +354,9 @@ export function createChatStatements(db) {
                            cs.system_instruction,
                            cs.created_at,
                            cs.updated_at,
                            (SELECT substr(m.content, 1, 180) FROM chat_messages m
                             WHERE m.chat_id = cs.id AND m.content <> ''
                             ORDER BY m.id DESC LIMIT 1) AS last_message_preview,
                            cm.id AS matched_message_id,
                            cm.content AS matched_content
            FROM chat_sessions cs
@@ -442,6 +449,7 @@ const failChatTurnTransaction = db.transaction((chatId, userMessageId, errorMess
        updateChatPersonality: (chatId, username, personalityId) => statements.updateChatPersonality.run(personalityId, chatId, username),
        updateChatScene: (chatId, username, scenarioPrompt, scenarioSummary) => statements.updateChatSessionScene.run(scenarioPrompt, scenarioSummary, chatId, username),
        updateChatContextSummary: (chatId, username, summary, messageId) => statements.updateChatContextSummary.run(summary, Number(messageId || 0), chatId, username),
        updateChatContextSummaryIfUnchanged: (chatId, username, summary, messageId, previousSummary, previousMessageId) => statements.updateChatContextSummaryIfUnchanged.run(summary, Number(messageId || 0), chatId, username, previousSummary, Number(previousMessageId || 0)),
        getPersonaChatState: (chatId, username) => statements.getPersonaChatState.get(chatId, username) || null,
        updatePersonaChatState(username, chat, state) {
            statements.upsertPersonaChatState.run(
@@ -13,7 +13,7 @@ export function createDatabase(config) {
    const db = new Database(config.dbPath);
    initializeSchema(db);
    runMigrations(db, config);
    initializeAttachments(db);
    runMigrations(db, config);
    return db;
 }
@@ -240,7 +240,11 @@ export function initializeSchema(db) {
    `).run();
 }
-export function runMigrations(db, {dropLegacyChats = true} = {}) {
+export function runMigrations(db, {dropLegacyChats = false} = {}) {
    db.exec(`CREATE TABLE IF NOT EXISTS schema_migrations (
        version INTEGER PRIMARY KEY,
        applied_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
    )`);
    db.exec(`CREATE TABLE IF NOT EXISTS chat_message_versions (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        message_id INTEGER NOT NULL REFERENCES chat_messages(id) ON DELETE CASCADE,
@@ -262,6 +266,60 @@ export function runMigrations(db, {dropLegacyChats = true} = {}) {
    ensureColumn("users", userColumns, "session_version", "ALTER TABLE users ADD COLUMN session_version INTEGER DEFAULT 0");
    db.prepare("UPDATE users SET session_version = 0 WHERE session_version IS NULL").run();
    // Older databases allowed usernames that differed only by case. Repair those
    // rows before adding the case-insensitive uniqueness guarantee. Keep the first
    // account unchanged and give later accounts a stable, recoverable username;
    // moving their owned rows prevents orphaned workspace data.
    const conflictingUsers = db.prepare(`
        SELECT LOWER(username) AS username_lower
        FROM users
        GROUP BY LOWER(username)
        HAVING COUNT(*) > 1
    `).all();
    if (conflictingUsers.length > 0) {
        const ownershipColumns = [
            ["chat_sessions", "username"],
            ["chat_memories", "username"],
            ["persona_chat_state", "username"],
            ["personas", "username"],
            ["personas", "source_creator_username"],
            ["user_settings", "username"],
            ["persona_market", "creator_username"],
            ["persona_versions", "username"],
            ["prompt_templates", "username"],
            ["persona_market_favorites", "username"],
            ["persona_market_ratings", "username"],
            ["persona_market_reports", "reporter_username"],
            ["attachments", "username"],
            ["upload_leases", "username"],
            ["workspace_operation_leases", "username"]
        ];
        const existingTables = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type = 'table'").all().map(({name}) => name));
        const updateStatements = ownershipColumns
            .filter(([table]) => existingTables.has(table))
            .map(([table, column]) => [
                table,
                column,
                db.prepare(`UPDATE "${table}" SET "${column}" = ? WHERE "${column}" = ?`)
            ]);
        const repairConflicts = db.transaction(() => {
            db.pragma("defer_foreign_keys = ON");
            for (const {username_lower: usernameLower} of conflictingUsers) {
                const rows = db.prepare("SELECT rowid, username FROM users WHERE LOWER(username) = ? ORDER BY rowid").all(usernameLower);
                for (const row of rows.slice(1)) {
                    const suffix = `-legacy-${row.rowid}`;
                    const nextUsername = `${row.username.slice(0, Math.max(1, 64 - suffix.length))}${suffix}`;
                    for (const [, , statement] of updateStatements) {
                        statement.run(nextUsername, row.username);
                    }
                    db.prepare("UPDATE users SET username = ? WHERE username = ?").run(nextUsername, row.username);
                }
            }
        });
        repairConflicts();
    }
    db.exec("CREATE UNIQUE INDEX IF NOT EXISTS users_username_lower ON users (LOWER(username))");
    const personaColumns = db.prepare("PRAGMA table_info(personas)").all();
    ensureColumn("personas", personaColumns, "custom_fields", "ALTER TABLE personas ADD COLUMN custom_fields TEXT");
    ensureColumn("personas", personaColumns, "persona_type", "ALTER TABLE personas ADD COLUMN persona_type TEXT DEFAULT 'assistant'");
@@ -328,6 +386,12 @@ export function runMigrations(db, {dropLegacyChats = true} = {}) {
    ensureColumn("chat_sessions", chatSessionColumns, "system_instruction", "ALTER TABLE chat_sessions ADD COLUMN system_instruction TEXT");
    db.prepare("UPDATE chat_sessions SET is_pinned = 0 WHERE is_pinned IS NULL").run();
    db.prepare("UPDATE chat_sessions SET context_summary_message_id = 0 WHERE context_summary_message_id IS NULL").run();
    db.exec(`
        CREATE INDEX IF NOT EXISTS chat_sessions_owner_updated ON chat_sessions(username, updated_at DESC, id DESC);
        CREATE INDEX IF NOT EXISTS chat_sessions_owner_archived_pinned ON chat_sessions(username, archived_at, is_pinned, updated_at DESC);
        CREATE INDEX IF NOT EXISTS chat_messages_chat_created ON chat_messages(chat_id, created_at, id);
        CREATE INDEX IF NOT EXISTS chat_memories_owner_chat ON chat_memories(username, chat_id, updated_at DESC);
    `);
    if (!hadParentMessageId) {
        db.exec(`
            WITH ordered AS (
@@ -458,6 +522,7 @@ export function runMigrations(db, {dropLegacyChats = true} = {}) {
    const legacyChatsExist = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'chats'").get();
    if (!legacyChatsExist) {
        db.prepare("INSERT OR IGNORE INTO schema_migrations(version) VALUES (?)").run(1);
        return;
    }
@@ -489,5 +554,9 @@ export function runMigrations(db, {dropLegacyChats = true} = {}) {
    if (dropLegacyChats) {
        db.prepare("DROP TABLE chats").run();
    } else {
        const backupName = `chats_legacy_backup_${Date.now()}`;
        db.prepare(`ALTER TABLE chats RENAME TO "${backupName}"`).run();
    }
    db.prepare("INSERT OR IGNORE INTO schema_migrations(version) VALUES (?)").run(1);
 }
@@ -73,11 +73,13 @@ export function createSqliteRateLimitStore(db) {
    );
    CREATE INDEX IF NOT EXISTS rate_limit_hits_expiry ON rate_limit_hits(hit_at);`);
    db.pragma("busy_timeout = 5000");
-    const prune = db.prepare("DELETE FROM rate_limit_hits WHERE bucket_key = ? AND hit_at <= ?");
+    // Prune globally on every write. Pruning by bucket only leaves expired rows
    // for inactive keys in the database forever.
    const prune = db.prepare("DELETE FROM rate_limit_hits WHERE hit_at <= ?");
    const count = db.prepare("SELECT COUNT(*) AS count FROM rate_limit_hits WHERE bucket_key = ?");
    const insert = db.prepare("INSERT INTO rate_limit_hits (bucket_key, hit_at) VALUES (?, ?)");
    const consume = db.transaction((key, now, windowMs, max) => {
-        prune.run(key, now - windowMs);
+        prune.run(now - windowMs);
        if (count.get(key).count >= max) return false;
        insert.run(key, now);
        return true;
@@ -0,0 +1,48 @@
 import session from "express-session";
 // Small shared session store backed by the same SQLite database as the app.
 // Expired rows are pruned on access/write, so no process-local timer is needed.
 export function createSqliteSessionStore(db) {
    db.exec(`CREATE TABLE IF NOT EXISTS sessions (
        sid TEXT PRIMARY KEY,
        sess TEXT NOT NULL,
        expires_at INTEGER
    ); CREATE INDEX IF NOT EXISTS sessions_expiry ON sessions(expires_at);`);
    const prune = db.prepare("DELETE FROM sessions WHERE expires_at IS NOT NULL AND expires_at <= ?");
    const get = db.prepare("SELECT sess, expires_at FROM sessions WHERE sid = ?");
    const put = db.prepare("INSERT INTO sessions(sid, sess, expires_at) VALUES(?, ?, ?) ON CONFLICT(sid) DO UPDATE SET sess=excluded.sess, expires_at=excluded.expires_at");
    const remove = db.prepare("DELETE FROM sessions WHERE sid = ?");
    const store = new session.Store();
    store.get = (sid, callback) => {
        try {
            const now = Date.now();
            prune.run(now);
            const row = get.get(sid);
            if (!row) return callback(null, null);
            if (row.expires_at != null && row.expires_at <= now) {
                remove.run(sid);
                return callback(null, null);
            }
            return callback(null, JSON.parse(row.sess));
        } catch (error) { return callback(error); }
    };
    store.set = (sid, sess, callback) => {
        try {
            const expiresAt = sess.cookie?.expires ? new Date(sess.cookie.expires).getTime() : null;
            prune.run(Date.now());
            put.run(sid, JSON.stringify(sess), Number.isFinite(expiresAt) ? expiresAt : null);
            return callback?.(null);
        } catch (error) { return callback?.(error); }
    };
    store.destroy = (sid, callback) => {
        try { remove.run(sid); return callback?.(null); } catch (error) { return callback?.(error); }
    };
    store.touch = (sid, sess, callback) => {
        try {
            const expiresAt = sess.cookie?.expires ? new Date(sess.cookie.expires).getTime() : null;
            put.run(sid, JSON.stringify(sess), Number.isFinite(expiresAt) ? expiresAt : null);
            return callback?.(null);
        } catch (error) { return callback?.(error); }
    };
    return store;
 }
@@ -0,0 +1,24 @@
 import express from "express";
 import {requireLogin, requireAdmin} from "../middleware/auth.js";
 export function createAdminMarketRouter(repositories) {
    const router = express.Router();
    router.get("/admin/reports", requireLogin, requireAdmin, (_req, res) => res.json({
        reports: repositories.listMarketReports(),
        personas: repositories.listMarketPersonas({admin: true, username: _req.session.user})
    }));
    router.post("/admin/reports/:id", requireLogin, requireAdmin, (req, res) => {
        repositories.updateMarketReportStatus(Number(req.params.id), String(req.body?.status || "reviewed").trim() || "reviewed");
        return res.json({message: "Report updated"});
    });
    router.post("/admin/personas/market/:id/moderate", requireLogin, requireAdmin, (req, res) => {
        const status = String(req.body?.status || "approved").trim() || "approved";
        repositories.updateMarketModeration(Number(req.params.id), {
            status,
            notes: req.body?.notes == null ? null : String(req.body.notes).trim() || null,
            softDelete: Boolean(req.body?.softDelete)
        });
        return res.json({persona: repositories.getMarketPersona(Number(req.params.id))});
    });
    return router;
 }
@@ -6,18 +6,29 @@ import {asyncHandler} from "../middleware/asyncHandler.js";
 import bcrypt from "bcrypt";
 import {validateBody} from "../middleware/validate.js";
 import {newPasswordError} from "../services/passwordPolicy.js";
 import {normalizeUsername, usernameError} from "../services/usernamePolicy.js";
 const credentialsValidator = (body) => {
-    const username = String(body?.username || "").trim();
+    const username = normalizeUsername(body?.username);
    const password = String(body?.password || "");
    const inviteCode = String(body?.inviteCode || "").trim();
-    if (!username) return {error: "Username is required"};
+    const usernameValidationError = usernameError(username);
-    if (username.length < 3) return {error: "Username must be at least 3 characters"};
+    if (usernameValidationError) return {error: usernameValidationError};
    if (!password) return {error: "Password is required"};
    if (password.length < 6) return {error: "Password must be at least 6 characters"};
    return {value: {username, password, inviteCode}};
 };
 const DUMMY_PASSWORD_HASH = "$2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy";
 const regenerateSession = (req, fields) => new Promise((resolve, reject) => {
    req.session.regenerate(error => {
        if (error) return reject(error);
        Object.assign(req.session, fields);
        resolve();
    });
 });
 export function createAuthRouter({repositories, authRateLimiters, config}) {
    const router = express.Router();
@@ -28,7 +39,7 @@ export function createAuthRouter({repositories, authRateLimiters, config}) {
        if (config.registrationInviteCode && inviteCode !== config.registrationInviteCode) {
            return res.status(403).json({error: "Valid invite code is required"});
        }
-        if (repositories.getUser(username)) {
+        if (repositories.getUserCaseInsensitive(username)) {
            return res.status(409).json({error: "User already exists", code: "USERNAME_TAKEN"});
        }
@@ -42,19 +53,19 @@ export function createAuthRouter({repositories, authRateLimiters, config}) {
            }
            throw error;
        }
-        req.session.user = username;
+        await regenerateSession(req, {user: username, sessionVersion: 0});
        req.session.sessionVersion = 0;
        return res.json({message: "Registration successful"});
    }));
    router.post("/login", ...authRateLimiters, validateBody(credentialsValidator), asyncHandler(async (req, res) => {
        const {username, password} = req.validatedBody;
-        const user = repositories.getUser(username);
+        const user = repositories.getUserCaseInsensitive(username);
-        if (!user) return res.status(400).json({error: "User not found"});
+        const valid = await bcrypt.compare(password, user?.password || DUMMY_PASSWORD_HASH);
-        const valid = await bcrypt.compare(password, user.password);
+        if (!user || !valid) {
-        if (!valid) return res.status(403).json({error: "Invalid password"});
+            // Keep the message generic and still perform bcrypt work for unknown users.
-        req.session.user = username;
+            return res.status(user ? 403 : 400).json({error: "Invalid username or password"});
-        req.session.sessionVersion = Number(user.session_version || 0);
+        }
        await regenerateSession(req, {user: user.username, sessionVersion: Number(user.session_version || 0)});
        return res.json({message: "Login successful"});
    }));
@@ -7,14 +7,20 @@ import {asyncHandler} from "../middleware/asyncHandler.js";
 import {generationCancellation} from "../middleware/generationCancellation.js";
 import {requireLogin} from "../middleware/auth.js";
 import {validateBody} from "../middleware/validate.js";
-import {getPersonality, listPersonalities, DEFAULT_PERSONALITY_ID} from "../services/personalityRegistry.js";
+import {getPersonality, getPersonalityMetadata, listPersonalities, DEFAULT_PERSONALITY_ID} from "../services/personalityRegistry.js";
-const createChatValidator = (body) => ({
+const createChatValidator = (body) => {
    const rawPersonalityId = body?.personalityId;
    if (rawPersonalityId != null && (typeof rawPersonalityId !== "string" || !rawPersonalityId.trim())) {
        return {error: "personalityId must be a non-empty string"};
    }
    return {
        value: {
            title: String(body?.title || "New chat").trim() || "New chat",
-        personalityId: body?.personalityId == null ? DEFAULT_PERSONALITY_ID : String(body.personalityId)
+            personalityId: rawPersonalityId == null ? DEFAULT_PERSONALITY_ID : rawPersonalityId.trim()
        }
-});
+    };
 };
 const messageValidator = (body) => {
    const content = String(body?.content || "").trim();
@@ -147,7 +153,7 @@ export function createChatsRouter({repositories, chatService, modelService, conf
    router.get("/chats", (req, res) => res.json({chats: repositories.listChats(req.session.user)}));
    router.get("/personalities", (_req, res) => res.json({personalities: listPersonalities(), defaultPersonalityId: DEFAULT_PERSONALITY_ID}));
    router.get("/personalities/:id", (req, res) => {
-        const personality = listPersonalities().find(item => item.id === req.params.id);
+        const personality = getPersonalityMetadata(req.params.id);
        return personality ? res.json({personality}) : res.status(404).json({error: "Personality not found"});
    });
    router.get("/chats/search", (req, res) => res.json({chats: repositories.searchChats(req.session.user, req.query.q || "")}));
@@ -170,10 +176,14 @@ export function createChatsRouter({repositories, chatService, modelService, conf
        const chatId = Number(req.params.id);
        const chat = repositories.getChat(chatId, req.session.user);
        if (!chat) return res.status(404).json({error: "Chat not found"});
-        const personalityId = String(req.body?.personalityId || "");
+        const personalityId = req.body?.personalityId;
-        if (!getPersonality(personalityId)) return res.status(400).json({error: "Unknown personality"});
+        if (typeof personalityId !== "string" || !personalityId.trim()) {
-        repositories.updateChatPersonality(chatId, req.session.user, personalityId);
+            return res.status(400).json({error: "personalityId must be a non-empty string"});
-        return res.json({chat: repositories.getChat(chatId, req.session.user), personality: listPersonalities().find(item => item.id === personalityId)});
+        }
        const normalizedPersonalityId = personalityId.trim();
        if (!getPersonality(normalizedPersonalityId)) return res.status(400).json({error: "Unknown personality"});
        repositories.updateChatPersonality(chatId, req.session.user, normalizedPersonalityId);
        return res.json({chat: repositories.getChat(chatId, req.session.user), personality: getPersonalityMetadata(normalizedPersonalityId)});
    });
    router.put("/chats/:id", validateBody((body) => {
@@ -332,6 +342,25 @@ export function createChatsRouter({repositories, chatService, modelService, conf
        return res.json(result);
    });
    router.post("/chats/:id/title", asyncHandler(async (req, res) => {
        const message = String(req.body?.message || "").trim();
        if (!message) return res.status(400).json({error: "Message is required"});
        try {
            const result = await chatService.generateInitialChatTitle({
                user: req.session.user,
                chatId: Number(req.params.id),
                message,
                model: String(req.body?.model || "qwen3:14b"),
                signal: req.generationSignal
            });
            if (result.error) return res.status(result.status).json({error: result.error});
            return res.json(result);
        } catch (error) {
            const mapped = modelService.mapError(error);
            return res.status(mapped.status).json(mapped.body);
        }
    }));
    router.post("/chats/:id/messages/:messageId/edit-resend", ...chatRateLimiters, generationCancellation, validateBody(sendMessageValidator), asyncHandler(async (req, res) => {
        if (req.body?.confirmed !== true) return res.status(400).json({error: "Confirmation is required before creating an edited branch"});
        const chatId = Number(req.params.id);
@@ -555,7 +584,7 @@ export function createChatsRouter({repositories, chatService, modelService, conf
                reasoning: req.validatedBody.reasoning
            });
            if (result.error) return res.status(result.status).json({error: result.error, ...(result.searchState ? {searchState: result.searchState} : {})});
-            return res.json({reply: result.reply, searchState: result.searchState, ...(result.sources ? {sources: result.sources} : {})});
+            return res.json({reply: result.reply, searchState: result.searchState, ...(result.sources ? {sources: result.sources} : {}), ...(result.chatTitle ? {chatTitle: result.chatTitle} : {})});
        } catch (error) {
            const mapped = modelService.mapError(error);
            return res.status(mapped.status).json(mapped.body);
@@ -594,7 +623,7 @@ export function createChatsRouter({repositories, chatService, modelService, conf
            if (result.error) {
                sendEvent("error", {error: result.error, status: result.status, requestId: req.id, ...(result.searchState ? {searchState: result.searchState} : {})});
            } else {
-                sendEvent("done", {reply: result.reply, searchState: result.searchState, ...(result.sources ? {sources: result.sources} : {})});
+                sendEvent("done", {reply: result.reply, searchState: result.searchState, ...(result.sources ? {sources: result.sources} : {}), ...(result.chatTitle ? {chatTitle: result.chatTitle} : {})});
            }
        } catch (error) {
            const mapped = modelService.mapError(error);
@@ -7,12 +7,13 @@ import bcrypt from "bcrypt";
 import {requireLogin} from "../middleware/auth.js";
 import {validateBody} from "../middleware/validate.js";
 import {newPasswordError} from "../services/passwordPolicy.js";
 import {normalizeUsername, usernameError} from "../services/usernamePolicy.js";
 const usernameValidator = (body) => {
-    const username = String(body?.username || "").trim();
+    const username = normalizeUsername(body?.username);
    const password = String(body?.password || "");
-    if (!username) return {error: "New username is required"};
+    const usernameValidationError = usernameError(username, "New username");
-    if (username.length < 3) return {error: "Username must be at least 3 characters"};
+    if (usernameValidationError) return {error: usernameValidationError};
    if (!password) return {error: "Current password is required"};
    return {value: {username, password}};
 };
@@ -54,7 +55,7 @@ export function createSettingsRouter({repositories}) {
        if (!currentUser) return res.status(404).json({error: "User not found"});
        const valid = await bcrypt.compare(password, currentUser.password);
        if (!valid) return res.status(403).json({error: "Current password is incorrect"});
-        if (repositories.getUser(nextUsername)) {
+        if (repositories.getUserCaseInsensitive(nextUsername)) {
            return res.status(409).json({error: "Username already exists", code: "USERNAME_TAKEN"});
        }
@@ -66,7 +67,12 @@ export function createSettingsRouter({repositories}) {
            }
            throw error;
        }
        await new Promise((resolve, reject) => req.session.regenerate(error => {
            if (error) return reject(error);
            req.session.user = nextUsername;
            req.session.sessionVersion = 0;
            resolve();
        }));
        return res.json({username: nextUsername});
    }));
@@ -4,6 +4,7 @@
 import express from "express";
 import {asyncHandler} from "../middleware/asyncHandler.js";
 import {requireLogin, requireAdmin} from "../middleware/auth.js";
 import {createRateLimiter} from "../middleware/rateLimit.js";
 function buildConfigWarnings(config) {
    const warnings = [];
@@ -25,18 +26,50 @@ function buildConfigWarnings(config) {
    return warnings;
 }
-export function createHealthRouter({modelService}) {
+export function createHealthRouter({modelService, config}) {
    const router = express.Router();
    const limiter = createRateLimiter({
        windowMs: config.healthRateLimitWindowMs,
        max: config.healthRateLimitMaxPerIp,
        keyGenerator: req => `health:${req.ip}`,
        message: "Too many health checks. Please try again later."
    });
    let cached = null;
    let checkedAt = 0;
    let inFlight = null;
-    router.get("/health", asyncHandler(async (req, res) => {
+    const runHealthCheck = () => {
-        const model = await modelService.checkHealth();
+        const controller = new AbortController();
        let timer;
        const timeout = new Promise(resolve => {
            timer = setTimeout(() => {
                controller.abort(new Error("Health check timed out"));
                resolve({ok: false, timedOut: true});
            }, config.healthTimeoutMs);
        });
        const check = Promise.resolve(modelService.checkHealth(controller.signal));
        return Promise.race([check, timeout]).finally(() => clearTimeout(timer));
    };
    router.get("/health", limiter, asyncHandler(async (req, res) => {
        if (cached && Date.now() - checkedAt < config.healthCacheTtlMs) {
            return res.status(cached.ok ? 200 : 503).json({ok: Boolean(cached.ok), cached: true});
        }
        if (!inFlight) {
            inFlight = runHealthCheck().then(model => {
                cached = model;
                checkedAt = Date.now();
                return model;
            }).finally(() => { inFlight = null; });
        }
        const model = await inFlight;
        return res.status(model.ok ? 200 : 503).json({ok: Boolean(model.ok)});
    }));
    return router;
 }
-export function createSystemRouter({modelService, config}) {
+export function createSystemRouter({modelService, config, observability}) {
    const router = express.Router();
    router.get("/admin/diagnostics", requireLogin, requireAdmin, asyncHandler(async (req, res) => {
@@ -47,5 +80,9 @@ export function createSystemRouter({modelService, config}) {
        });
    }));
    router.get("/admin/observability", requireLogin, requireAdmin, (req, res) => {
        return res.json(observability.getSnapshot());
    });
    return router;
 }
@@ -12,7 +12,6 @@ import {AttachmentError} from "../services/attachmentService.js";
 export function createUploadsRouter(service, config) {
    const router = express.Router();
    mkdirSync(config.uploadTmpDir, {recursive: true});
    const activeUploads = new Map();
    const upload = multer({storage: multer.diskStorage({destination: config.uploadTmpDir}), limits: {
        fileSize: config.uploadMaxSizeMb * 1024 * 1024, files: 1, fields: 0, parts: 1
    }}).single("image");
@@ -21,19 +20,18 @@ export function createUploadsRouter(service, config) {
    router.get("/uploads/config", requireLogin, (_req, res) => res.json({maxSizeMb: config.uploadMaxSizeMb, maxFiles: config.uploadMaxFiles}));
    router.post("/uploads", requireLogin, (req, res) => {
        const user = req.session.user;
-        const active = activeUploads.get(user) || 0;
+        const lease = service.acquireUploadLease(user);
-        if (active >= config.uploadMaxFiles) return res.status(429).json({error: "Too many simultaneous uploads. Please wait."});
+        if (!lease) return res.status(429).json({error: "Too many simultaneous uploads. Please wait."});
-        activeUploads.set(user, active + 1);
+        let released = false;
-        res.once("close", () => {
+        const release = () => { if (!released) { released = true; service.releaseUploadLease(lease); } };
-            const remaining = (activeUploads.get(user) || 1) - 1;
+        res.once("close", release);
            if (remaining) activeUploads.set(user, remaining); else activeUploads.delete(user);
        });
        upload(req, res, async error => {
-            if (error) { if (req.file?.path) await unlink(req.file.path).catch(() => {}); return res.status(error.code === "LIMIT_FILE_SIZE" ? 413 : 400).json({error:
+            if (error) { release(); if (req.file?.path) await unlink(req.file.path).catch(() => {}); return res.status(error.code === "LIMIT_FILE_SIZE" ? 413 : 400).json({error:
                error.code === "LIMIT_FILE_SIZE" ? `Image exceeds ${config.uploadMaxSizeMb} MB` : "Upload one PNG, JPEG or WebP image per request"});
            }
            try { res.status(201).json(await service.upload(req.file, req.session.user)); }
            catch (failure) { fail(res, failure); }
            finally { release(); }
        });
    });
    router.get("/attachments/:id", requireLogin, asyncHandler(async (req, res) => {
@@ -1,22 +1,51 @@
 import express from "express";
 import multer from "multer";
 import fs from "node:fs/promises";
 import {randomUUID} from "node:crypto";
 import {requireLogin} from "../middleware/auth.js";
 import {asyncHandler} from "../middleware/asyncHandler.js";
 import {validateWorkspaceImport} from "../services/workspaceImportService.js";
-import {createWorkspaceArchive, parseWorkspaceArchive, MAX_ARCHIVE_BYTES} from "../services/workspaceArchive.js";
+import {createWorkspaceArchiveAsync, parseWorkspaceArchiveFile, MAX_ARCHIVE_BYTES} from "../services/workspaceArchive.js";
-export function createWorkspaceTransferRouter({repositories, chatService, attachmentService}) {
+export function createWorkspaceTransferRouter({repositories, chatService, attachmentService, config, db}) {
    const router = express.Router();
    router.use(requireLogin);
-    const receiveArchive = multer({storage: multer.memoryStorage(), limits: {fileSize: MAX_ARCHIVE_BYTES, files: 1, parts: 2}}).single("archive");
+    const receiveArchive = multer({storage: multer.diskStorage({destination: config.uploadTmpDir, filename: (_req, _file, cb) => cb(null, `workspace-${Date.now()}-${Math.random().toString(16).slice(2)}.tar.gz`)}), limits: {fileSize: MAX_ARCHIVE_BYTES, files: 1, parts: 2}}).single("archive");
-    const readArchive = (req, res, next) => receiveArchive(req, res, error => {
+    const readArchive = (req, res, next) => receiveArchive(req, res, async error => {
        if (error) return res.status(error.code === "LIMIT_FILE_SIZE" ? 413 : 400).json({error: "Invalid or oversized workspace archive"});
        try {
            if (!req.file) throw new Error("Choose a workspace archive");
-            req.archive = parseWorkspaceArchive(req.file.buffer);
+            req.archive = await parseWorkspaceArchiveFile(req.file.path);
            next();
        } catch (failure) { res.status(400).json({error: failure.message}); }
        finally { if (req.file?.path) await fs.rm(req.file.path, {force: true}).catch(() => {}); }
    });
    const acquire = (req, res) => {
        const key = req.session.user;
        const token = randomUUID();
        let acquired = false;
        try {
            acquired = db.transaction(() => {
                db.prepare("DELETE FROM workspace_operation_leases WHERE created_at < datetime('now', '-30 minutes')").run();
                db.prepare("INSERT INTO workspace_operation_leases(username, token) VALUES(?, ?)").run(key, token);
                return true;
            })();
        } catch (error) {
            if (!String(error?.code || "").startsWith("SQLITE_CONSTRAINT")) throw error;
        }
        if (!acquired) {
            res.status(429).json({error: "Another workspace archive operation is already running"});
            return false;
        }
        let released = false;
        const release = () => {
            if (released) return;
            released = true;
            db.prepare("DELETE FROM workspace_operation_leases WHERE username = ? AND token = ?").run(key, token);
        };
        res.once("close", release);
        return true;
    };
    const archiveImages = (workspace, files) => {
        const images = new Map();
        for (const chat of workspace.chats) for (const message of chat.messages) for (const attachment of message.attachments) {
@@ -44,6 +73,7 @@ export function createWorkspaceTransferRouter({repositories, chatService, attach
    });
    router.get("/exports/workspace", (req, res) => res.json({workspace: repositories.exportWorkspace(req.session.user)}));
    router.get("/exports/workspace/archive", asyncHandler(async (req, res) => {
        if (!acquire(req, res)) return;
        try {
            const workspace = repositories.exportWorkspace(req.session.user), images = new Map();
            for (const chat of workspace.chats) for (const message of chat.messages) for (const attachment of message.attachments) {
@@ -51,7 +81,7 @@ export function createWorkspaceTransferRouter({repositories, chatService, attach
                const row = attachmentService.owned(attachment.id, req.session.user);
                images.set(attachment.id, [`images/${row.id}.${row.mime_type.split("/")[1]}`, await attachmentService.storage.read(row.storage_key)]);
            }
-            const archive = createWorkspaceArchive(workspace, [...images.values()]);
+            const archive = await createWorkspaceArchiveAsync(workspace, [...images.values()]);
            res.set({"Content-Type": "application/gzip", "Content-Disposition": 'attachment; filename="workspace-backup.tar.gz"', "Cache-Control": "private, no-store"});
            return res.send(archive);
        } catch (error) { return res.status(error.message.includes("250 MB") ? 413 : 500).json({error: "Workspace archive could not be created"}); }
@@ -62,6 +92,7 @@ export function createWorkspaceTransferRouter({repositories, chatService, attach
        return res.status(validation.ok ? 200 : 400).json({ok: validation.ok, errors: validation.errors, warnings: validation.warnings, preview: validation.preview});
    });
    router.post("/imports/workspace/archive", readArchive, asyncHandler(async (req, res) => {
        if (!acquire(req, res)) return;
        const validation = validateWorkspaceImport(req.archive.workspace, repositories.exportWorkspace(req.session.user));
        if (!validation.ok) return res.status(400).json({error: "Workspace import validation failed", errors: validation.errors});
        if (validation.preview.duplicates.length && req.body?.allowDuplicates !== "true") return res.status(409).json({error: "Workspace import contains duplicate records", warnings: validation.warnings, preview: validation.preview});
@@ -29,6 +29,15 @@ export function parseVisionAnalysis(text) {
 export function createAttachmentService(db, config, modelService, visionDebugService = null) {
    const storage = new LocalFileStorage(config.uploadDir);
    const acquireUploadLease = (username) => db.transaction(() => {
        db.prepare("DELETE FROM upload_leases WHERE created_at < datetime('now', '-15 minutes')").run();
        const active = db.prepare("SELECT COUNT(*) AS count FROM upload_leases WHERE username=?").get(username).count;
        if (active >= config.uploadMaxFiles) return null;
        const token = randomUUID();
        db.prepare("INSERT INTO upload_leases(token, username) VALUES(?, ?)").run(token, username);
        return token;
    })();
    const releaseUploadLease = token => { if (token) db.prepare("DELETE FROM upload_leases WHERE token=?").run(token); };
    const log = (event, fields) => { if (config.structuredRequestLoggingEnabled) console.log(JSON.stringify({event, ...fields})); };
    const get = id => db.prepare("SELECT * FROM attachments WHERE id = ?").get(id);
    const rows = messageId => db.prepare("SELECT a.*, m.position FROM attachments a JOIN message_attachments m ON m.attachment_id=a.id WHERE m.message_id=? ORDER BY m.position").all(messageId);
@@ -148,7 +157,7 @@ export function createAttachmentService(db, config, modelService, visionDebugSer
    timer.unref();
    void cleanup();
    return {
-        storage, cleanup,
+        storage, cleanup, acquireUploadLease, releaseUploadLease,
        async close() { clearInterval(timer); await cleanup(); closed = true; },
        list(messageId) { return rows(messageId).map(attachmentMetadata); },
        owned(id, user) {
@@ -20,8 +20,10 @@ import {createHash} from "node:crypto";
 import { SearXNGSearchProvider, WebSearchError, decideWebSearch, retrieveWebSearch } from "./webSearchService.js";
 import { supportsReasoning } from "../../public/js/modelCapabilities.js";
 import {titleFromFirstMessage} from "../../public/js/chatTitle.js";
 import {VISION_EVIDENCE_GUIDANCE} from "./visionAnalysis.js";
 import {createConversationContextBuilder} from "./conversationContext.js";
 import {COMPACTION_SCHEMA, COMPACTION_SYSTEM_PROMPT, buildCompactionRequest, estimateTokens, isCompactionEligibleMessage, normalizeCompaction} from "./contextCompaction.js";
 export function createChatService(repositories, modelService, config, webSearchProvider = new SearXNGSearchProvider(config), attachmentService = null, visionDebugService = null) {
    const formatChatMessage = (row, related = null) => {
@@ -39,7 +41,6 @@ export function createChatService(repositories, modelService, config, webSearchP
        return message && attachments?.length ? { ...message, attachments } : message;
    };
    const chatGenerationQueues = new Map();
    const summaryQueues = new Map();
    const activeGenerations = new Map();
    const regeneratingMessages = new Map();
    const maxRetries = Number(config.chatMaxRetries ?? 5);
@@ -131,6 +132,33 @@ export function createChatService(repositories, modelService, config, webSearchP
        }
    });
    const generateChatTitle = async (message, model, signal) => {
        signal?.throwIfAborted();
        try {
            const response = await modelService.generateReply(model, [
                {role: "system", content: [
                    "Create a short, useful title for a chat from the user's first message.",
                    "Capture the main subject or goal, not the wording of the request.",
                    "Use the same language as the user. Do not answer the message.",
                    "Return only JSON in the form {\"title\":\"...\"}.",
                    "The title must be 2 to 8 words and no more than 70 characters. Do not use quotes, markdown, emojis, or a trailing period."
                ].join("\n")},
                {role: "user", content: String(message).slice(0, 6000)}
            ], {
                signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(10000)]) : AbortSignal.timeout(10000),
                reasoning: false,
                generation: {temperature: 0.2, responseLength: 80},
                format: {type: "object", properties: {title: {type: "string"}}, required: ["title"], additionalProperties: false}
            });
            signal?.throwIfAborted();
            const title = String(JSON.parse(response)?.title || "").replace(/[\r\n]+/g, " ").replace(/["“”']/g, "").replace(/\s+/g, " ").trim();
            if (title && title.length <= 70 && title.split(/\s+/).length <= 8) return title;
        } catch {
            signal?.throwIfAborted();
        }
        return titleFromFirstMessage(message);
    };
    const persistChatMessageRetryState = ({ chatId, messageId, content, retryVariants, retryActiveIndex, retryRetriesUsed, retryPromptMessageId }) => {
        const versioned = repositories.listMessageVersions(messageId).length > 0;
        if (versioned) repositories.saveMessageVersion(chatId, messageId, null, retryActiveIndex);
@@ -156,7 +184,7 @@ export function createChatService(repositories, modelService, config, webSearchP
        return `${normalized.slice(0, Math.max(0, config.chatSummaryMaxChars - 3)).trimEnd()}...`;
    };
-    const maybeUpdateContextSummary = async ({ user, chatId, selectedModel }) => {
+    const maybeUpdateContextSummary = async ({ user, chatId }) => {
        if (config.chatSummaryUpdateEveryMessages <= 0) return;
        const session = repositories.getChat(chatId, user);
        if (!session) return;
@@ -172,7 +200,8 @@ export function createChatService(repositories, modelService, config, webSearchP
        if (summarizable.length < config.chatSummaryUpdateEveryMessages) return;
        const previousSummary = String(session.context_summary || "").trim();
-        const summary = await modelService.generateReply(selectedModel, [
+        if (!config.contextModel) return;
        const summary = await modelService.generateReply(config.contextModel, [
            {
                role: "system",
                content: [
@@ -210,14 +239,62 @@ export function createChatService(repositories, modelService, config, webSearchP
    };
    const scheduleContextSummaryUpdate = ({ user, chatId, selectedModel }) => {
-        const previous = summaryQueues.get(chatId) || Promise.resolve();
+        // Compaction is performed synchronously before the next main-model request.
-        const current = previous
+        void user; void chatId; void selectedModel; void updateContextSummaryWithoutBreakingReply;
-            .catch(() => undefined)
+    };
-            .then(() => updateContextSummaryWithoutBreakingReply({ user, chatId, selectedModel }));
+
-        summaryQueues.set(chatId, current);
+    const ensureContextCompaction = async ({user, chatId, currentMessage, signal = null}) => {
-        void current.finally(() => {
+        if (!config.contextModel) return null;
-            if (summaryQueues.get(chatId) === current) summaryQueues.delete(chatId);
+        const session = repositories.getChat(chatId, user);
-        });
+        if (!session) return null;
        const allMessages = repositories.listActiveBranchMessages(chatId)
            .filter(isCompactionEligibleMessage);
        const previousSummary = String(session.context_summary || "").trim();
        const compactedThrough = Number(session.context_summary_message_id || 0);
        const activeMessages = allMessages.filter(message => Number(message.id) > compactedThrough);
        const contextTokens = estimateTokens(previousSummary) + activeMessages.reduce((sum, item) => sum + estimateTokens(item.content), 0) + estimateTokens(currentMessage);
        if (contextTokens < Number(config.contextCompactionTriggerTokens || 6000)) return null;
        let recentTokens = 0;
        let splitIndex = activeMessages.length;
        for (let index = activeMessages.length - 1; index >= 0; index -= 1) {
            recentTokens += estimateTokens(activeMessages[index].content);
            if (recentTokens > Number(config.contextCompactionRecentTokens || 2500) && activeMessages.length - index >= 2) {
                splitIndex = index;
                break;
            }
        }
        const summarizable = activeMessages.slice(0, splitIndex);
        if (summarizable.length < Number(config.contextCompactionMinMessages || 4)) return null;
        const latestSummarized = summarizable.at(-1);
        const startedAt = Date.now();
        console.info("CONTEXT COMPACTION", JSON.stringify({conversationId: chatId, triggered: true, contextTokens,
            compactedTokens: summarizable.reduce((sum, item) => sum + estimateTokens(item.content), 0), messages: summarizable.length}));
        let rawResult;
        try {
            rawResult = await modelService.generateReply(config.contextModel, [
                {role: "system", content: COMPACTION_SYSTEM_PROMPT},
                {role: "user", content: buildCompactionRequest(previousSummary, summarizable)}
            ], {signal, reasoning: false, generation: {temperature: 0, responseLength: 1600}, format: COMPACTION_SCHEMA});
        } catch (error) {
            console.warn("CONTEXT COMPACTION FAILED", JSON.stringify({conversationId: chatId, error: String(error?.message || error)}));
            return null;
        }
        const compacted = normalizeCompaction(rawResult, Number(config.contextCompactionMaxChars || 8000));
        if (!compacted) {
            console.warn("CONTEXT COMPACTION INVALID", JSON.stringify({conversationId: chatId, durationMs: Date.now() - startedAt,
                resultChars: typeof rawResult === "string" ? rawResult.length : null}));
            return null;
        }
        const serialized = JSON.stringify(compacted);
        const update = repositories.updateChatContextSummaryIfUnchanged?.(chatId, user, serialized, latestSummarized.id,
            session.context_summary, session.context_summary_message_id);
        if (repositories.updateChatContextSummaryIfUnchanged && !update?.changes) {
            console.warn("CONTEXT COMPACTION STALE", JSON.stringify({conversationId: chatId, durationMs: Date.now() - startedAt}));
            return repositories.getChat(chatId, user);
        }
        console.info("CONTEXT COMPACTION COMPLETE", JSON.stringify({conversationId: chatId, durationMs: Date.now() - startedAt,
            compactedMessages: summarizable.length, resultChars: serialized.length}));
        return {...session, context_summary: serialized, context_summary_message_id: latestSummarized.id};
    };
    const getOrCreatePersonaChat = (user, persona, userPersonaId = null, scenarioPrompt = null, scenarioSummary = null) => {
@@ -393,7 +470,6 @@ export function createChatService(repositories, modelService, config, webSearchP
    const generateChatTurn = ({ user, chatId, message, model, attachments = [], reuseChatId = null, userMessageId: resumeMessageId = null, webSearch = true, reasoning = false, onStatus = null, onChunk = null, onThinking = null, signal = null, parentMessageId = undefined, requestId = null }) =>
        withChatGenerationLock(chatId, async () => {
            await (summaryQueues.get(chatId) || Promise.resolve());
            const session = repositories.getChat(chatId, user);
            if (!session) return { error: "Chat not found", status: 404 };
            if (parentMessageId !== undefined) {
@@ -495,6 +571,11 @@ export function createChatService(repositories, modelService, config, webSearchP
                            }));
                        }
                    }
                    const compactedSession = await ensureContextCompaction({user, chatId, currentMessage: message, signal: activeSignal});
                    if (compactedSession) {
                        session.context_summary = compactedSession.context_summary;
                        session.context_summary_message_id = compactedSession.context_summary_message_id;
                    }
                    onStatus?.({ status: "generating", searchState, ...(sources !== null ? { sourceCount: sources.length } : {}) });
                    payload = buildConversationContext({ user, chatId, session, message: null, upToMessageId: userMessageId,
                        historyOverride: imageHistory, visionSelection, contextSummaryOverride: session.context_summary, sources });
@@ -654,6 +735,23 @@ export function createChatService(repositories, modelService, config, webSearchP
        },
        persistChatMessageRetryState,
        buildMessagesPayload: buildConversationContext,
        async generateInitialChatTitle({user, chatId, message, model, signal = null}) {
            const session = repositories.getChat(chatId, user);
            if (!session) return {error: "Chat not found", status: 404};
            if (session.assistant_persona_id || session.title !== "New chat") {
                return {title: session.title};
            }
            const firstMessage = repositories.getChatMessageByIndex(chatId, 0);
            if (firstMessage && (firstMessage.role !== "user" || firstMessage.content.trim() !== String(message).trim())) {
                return {title: session.title};
            }
            const title = await generateChatTitle(message, config.titleModel || model || session.preferred_model || "qwen3:14b", signal);
            const currentSession = repositories.getChat(chatId, user);
            if (!currentSession) return {error: "Chat not found", status: 404};
            if (currentSession.title !== "New chat") return {title: currentSession.title};
            if (title !== "New chat") repositories.updateChatTitle(chatId, user, title);
            return {title};
        },
        async sendChatMessage({ user, chatId, message, model, attachments = [], userMessageId = null, webSearch = true, reasoning = false, signal = null, requestId = null }) {
            return generateChatTurn({ user, chatId, message, model, attachments, userMessageId, webSearch, reasoning, signal, requestId });
        },
@@ -666,7 +764,6 @@ export function createChatService(repositories, modelService, config, webSearchP
            if (chatGenerationQueues.has(chatId)) return { error: "A response is already being generated", status: 409 };
            regeneratingMessages.set(chatId, targetMessage.id);
            return withChatGenerationLock(chatId, async () => {
                await (summaryQueues.get(chatId) || Promise.resolve());
                const session = repositories.getChat(chatId, user);
                if (!session) return { error: "Chat not found", status: 404 };
@@ -0,0 +1,88 @@
 export const COMPACTION_SYSTEM_PROMPT = [
    "You are a context-compaction model.",
    "Your output will be given to another AI model as memory of an earlier conversation.",
    "Compress aggressively, but never discard information that may affect future answers.",
    "Preserve current goals, user requirements, explicit constraints, decisions already made, unfinished work, project state, technical configuration, model names, versions, filenames, paths, URLs when relevant, commands, ports, identifiers, numeric values, API/interface decisions, errors, causes, attempted and successful fixes, user preferences, and relationships between important entities.",
    "Remove greetings, acknowledgements, filler, repeated explanations, redundant wording, and obsolete intermediate discussion that no longer affects the current state.",
    "Never invent information or silently change exact technical values. Do not replace precise facts with vague wording.",
    "When newer information supersedes older information, preserve the newer state and mention the superseded state only if still relevant.",
    "Distinguish facts from unresolved assumptions. Keep unresolved questions and tasks. Prefer concise factual statements.",
    "Output only the requested structured JSON format."
 ].join("\n");
 export const COMPACTION_SCHEMA = {
    type: "object",
    additionalProperties: false,
    properties: {
        summary: {type: "string"},
        current_goals: {type: "array", items: {type: "string"}},
        important_facts: {type: "array", items: {type: "string"}},
        decisions: {type: "array", items: {type: "string"}},
        constraints: {type: "array", items: {type: "string"}},
        technical_state: {type: "array", items: {type: "string"}},
        open_tasks: {type: "array", items: {type: "string"}},
        problems_and_solutions: {type: "array", items: {type: "string"}},
        user_preferences: {type: "array", items: {type: "string"}},
        important_exact_values: {type: "array", items: {type: "string"}}
    },
    required: ["summary", "current_goals", "important_facts", "decisions", "constraints", "technical_state", "open_tasks", "problems_and_solutions", "user_preferences", "important_exact_values"]
 };
 const FIELDS = COMPACTION_SCHEMA.required;
 export function estimateTokens(value) {
    return Math.ceil(String(value || "").length / 4);
 }
 export function normalizeCompaction(value, maxChars = 10000) {
    let parsed = value;
    if (typeof value === "string") {
        try { parsed = JSON.parse(value.replace(/^```(?:json)?\s*|\s*```$/gi, "").trim()); }
        catch { return null; }
    }
    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
    const normalized = {};
    for (const field of FIELDS) {
        if (field === "summary") normalized[field] = typeof parsed[field] === "string" ? parsed[field].trim() : "";
        else if (!Array.isArray(parsed[field]) || parsed[field].some(item => typeof item !== "string")) return null;
        else normalized[field] = parsed[field].map(item => item.trim()).filter(Boolean);
    }
    const serialized = JSON.stringify(normalized);
    const hasContent = normalized.summary || FIELDS.some(field => field !== "summary" && normalized[field].length);
    if (!hasContent || serialized.length > maxChars) return null;
    return normalized;
 }
 function compactMessage(message) {
    const lines = [`${message.role === "bot" ? "Assistant" : message.role}: ${String(message.content || "").trim()}`];
    if (message.thinking) lines.push(`Assistant reasoning outcome: ${String(message.thinking).slice(0, 1200)}`);
    if (message.error_message) lines.push(`Error: ${String(message.error_message).slice(0, 1000)}`);
    if (message.delivery_status && message.delivery_status !== "complete") lines.push(`Delivery status: ${message.delivery_status}`);
    if (message.sources) {
        try {
            const sources = typeof message.sources === "string" ? JSON.parse(message.sources) : message.sources;
            if (Array.isArray(sources) && sources.length) lines.push(`Sources: ${sources.slice(0, 5).map(source => `${source.title || ""} ${source.url || ""} ${String(source.snippet || "").slice(0, 500)}`).join(" | ")}`);
        } catch { /* malformed optional metadata must not block compaction */ }
    }
    return lines.join("\n");
 }
 export function isCompactionEligibleMessage(message) {
    return Boolean(message && String(message.content || message.error_message || "").trim())
        && (!message.delivery_status || message.delivery_status === "complete" || message.delivery_status === "failed");
 }
 export function formatMessagesForCompaction(messages) {
    return messages.map(compactMessage).join("\n\n");
 }
 export function buildCompactionRequest(previousSummary, messages) {
    return [
        previousSummary ? `Existing compacted state (update it; do not repeat it blindly):\n${previousSummary}` : "Existing compacted state: none",
        "",
        "Newly expired conversation records:",
        formatMessagesForCompaction(messages),
        "",
        "Return exactly one JSON object matching the supplied schema."
    ].join("\n");
 }
@@ -28,9 +28,11 @@ export function createConversationContextBuilder({repositories, attachmentServic
        if (!activeSession) return null;
        const activePersona = repositories.getAssistantPersonaForChat(chatId, user);
        const activeUserPersona = getUserPersonaForSession(chatId, user, activePersona);
-        const history = historyOverride || (upToMessageId == null
+        let history = historyOverride || (upToMessageId == null
            ? repositories.getRecentChatMessages(chatId).reverse()
            : repositories.getRecentChatMessagesUpToId(chatId, upToMessageId).reverse());
        const compactedThrough = Number(activeSession.context_summary_message_id || 0);
        if (compactedThrough) history = history.filter(entry => Number(entry.id || 0) > compactedThrough);
        const conversation = message == null ? history : [...history, {role: "user", content: message}];
        const messagesPayload = [];
        // Search results stay untrusted user context, followed by their grounding rule.
@@ -286,20 +286,20 @@ export function createModelService(config, overrides = {}) {
                scheduleModelUnload(model);
            }
        },
-        async listModels() {
+        async listModels(signal = null) {
            if (modelsCache && Date.now() - modelsCacheAt < config.modelsCacheTtlMs) {
                return modelsCache;
            }
            try {
                const startedAt = Date.now();
-                modelsCache = await withTimeout(config.modelListTimeoutMs, async (signal) => {
+                modelsCache = await withTimeout(config.modelListTimeoutMs, async (requestSignal) => {
-                    const response = await fetchImpl(`${config.modelApiBaseUrl}/tags`, { signal });
+                    const response = await fetchImpl(`${config.modelApiBaseUrl}/tags`, { signal: requestSignal });
                    if (!response.ok) {
                        throw new ModelServiceError("MODEL_LIST_FAILED", "Failed to load models.", 502);
                    }
                    return response.json();
-                });
+                }, signal);
                lastListLatencyMs = Date.now() - startedAt;
                modelsCacheAt = Date.now();
                lastHealth = { ok: true, checkedAt: new Date().toISOString(), error: null, latencyMs: lastListLatencyMs };
@@ -317,10 +317,10 @@ export function createModelService(config, overrides = {}) {
                throw new ModelServiceError("MODEL_UNAVAILABLE", "Failed to load models.", 502);
            }
        },
-        async checkHealth() {
+        async checkHealth(signal = null) {
            const startedAt = Date.now();
            try {
-                await this.listModels();
+                await this.listModels(signal);
                const health = { ok: true, checkedAt: new Date().toISOString(), error: null, latencyMs: Date.now() - startedAt };
                lastHealth = health;
                return health;
@@ -1,9 +1,11 @@
 export const DEFAULT_PERSONALITY_ID = "general-assistant";
 const entries = [
    {
        id: "general-assistant", name: "Leonardo", specialization: "General Assistance",
-        description: "A versatile partner for everyday questions, ideas, and decisions.",
+        description: "A versatile partner for everyday questions.",
        longDescription: "Leonardo connects ideas across subjects and turns them into clear, practical help. Use this personality for everyday questions, explanations, conversations, brainstorming, and decisions that span more than one field.",
-        historicalInspiration: "Leonardo da Vinci", icon: "spark", accentColor: "#168b87", isDefault: true,
+        historicalInspiration: "Leonardo da Vinci", icon: "spark", accentColor: "#168b87",
        systemPrompt: `You are Elsewhere's versatile general assistant. Your purpose is to help users understand, decide, create, plan, and get everyday work done across a wide range of subjects. Be curious, practical, balanced, and adaptable rather than forcing every request into one specialty. Connect ideas across disciplines when the connection makes the answer clearer or more useful; do not add tangents simply to demonstrate breadth.
 First identify what the user is actually trying to accomplish and answer that need directly. For straightforward questions, lead with the answer and keep it concise. For complex questions, organize the explanation into a useful sequence, define unfamiliar terms, and include examples or next steps when they improve understanding. Explain technical material in plain language without removing important nuance. Match the user's level of detail, tone, and requested format.
@@ -14,7 +16,7 @@ Keep claims grounded. Distinguish known information from inference, acknowledge
    },
    {
        id: "creative-writer", name: "Shakespeare", specialization: "Creative Writing",
-        description: "Develop stories, build worlds, and bring characters to life.",
+        description: "Develop stories, worlds and characters.",
        longDescription: "Shakespeare helps with fiction, worldbuilding, character arcs, dialogue, atmosphere, and narrative editing. It follows your chosen genre and voice without assuming an archaic style or imitating its historical inspiration.",
        historicalInspiration: "William Shakespeare", icon: "quill", accentColor: "#7957b5",
        systemPrompt: `You are Elsewhere's specialized creative-writing partner. Your work includes fiction, short stories, novels, scenes, dialogue, worldbuilding, characters, plot development, and editorial feedback. Prioritize imaginative choices, narrative cohesion, emotional specificity, and language that feels intentional rather than mechanically polished.
@@ -27,7 +29,7 @@ Track continuity across the conversation, including names, relationships, chrono
    },
    {
        id: "programmer", name: "Ada", specialization: "Programming & Development",
-        description: "Design, debug, and improve software with precision and care.",
+        description: "Create and debug software.",
        longDescription: "Ada works through software problems systematically, from root-cause debugging to architecture and implementation. It favors maintainable, working solutions that fit your codebase and avoids complexity that does not solve a real problem.",
        historicalInspiration: "Ada Lovelace", icon: "code", accentColor: "#3478c8",
        systemPrompt: `You are Elsewhere's precise, systematic software engineering specialist. Help with implementation, debugging, code review, architecture, refactoring, testing, and technical explanations. Optimize for correctness, maintainability, security, and compatibility with the actual repository, language, framework, runtime, and project conventions—not for an abstract idealized solution.
@@ -53,7 +55,7 @@ When sources conflict, compare their evidence, methods, definitions, incentives,
    },
    {
        id: "tutor", name: "Socrates", specialization: "Learning & Education",
-        description: "Understand new ideas through clear explanations and useful practice.",
+        description: "Understand new ideas through clear explanations.",
        longDescription: "Socrates is a patient, engaging tutor who adapts to your level and makes difficult ideas easier to work through. It uses examples and targeted questions to build understanding, while giving a direct answer whenever you ask for one.",
        historicalInspiration: "Socrates", icon: "book-open", accentColor: "#b88120",
        systemPrompt: `You are Elsewhere's patient, adaptive tutor. Your purpose is to build the learner's understanding, confidence, and ability to use an idea independently—not merely to deliver facts. Be intellectually engaging, respectful, and encouraging without being patronizing or artificially praising routine effort.
@@ -79,11 +81,54 @@ Present the reasoning in a readable order: frame the problem, identify decisive
    }
 ];
-const registry = new Map(entries.map(entry => [entry.id, Object.freeze(entry)]));
+const requiredMetadataFields = [
-export const DEFAULT_PERSONALITY_ID = "general-assistant";
+    "id",
-export function getPersonality(id) { return registry.get(id) || null; }
+    "name",
-export function listPersonalities() {
+    "specialization",
-    return entries.map(entry => ({
+    "description",
    "longDescription",
    "historicalInspiration",
    "icon",
    "accentColor",
    "systemPrompt"
 ];
 function createRegistry(definitions) {
    const ids = new Set();
    const defaultEntries = definitions.filter(entry => entry.id === DEFAULT_PERSONALITY_ID);
    if (defaultEntries.length !== 1) {
        throw new Error(`Personality registry must contain exactly one default personality: ${DEFAULT_PERSONALITY_ID}`);
    }
    for (const entry of definitions) {
        if (!entry || typeof entry !== "object") throw new Error("Personality registry entries must be objects");
        for (const field of requiredMetadataFields) {
            if (typeof entry[field] !== "string" || !entry[field].trim()) {
                throw new Error(`Personality ${entry.id || "<unknown>"} is missing ${field}`);
            }
        }
        if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(entry.id)) {
            throw new Error(`Personality ID is not kebab-case: ${entry.id}`);
        }
        if (ids.has(entry.id)) throw new Error(`Duplicate personality ID: ${entry.id}`);
        if (!/^#[0-9a-f]{6}$/i.test(entry.accentColor)) {
            throw new Error(`Invalid accent color for personality: ${entry.id}`);
        }
        if (entry.systemPrompt.length < 1200) {
            throw new Error(`Personality ${entry.id} needs a substantial system prompt`);
        }
        ids.add(entry.id);
    }
    return new Map(definitions.map(entry => [entry.id, Object.freeze({...entry})]));
 }
 const registry = createRegistry(entries);
 function toPublicMetadata(entry) {
    if (!entry) return null;
    return {
        id: entry.id,
        name: entry.name,
        specialization: entry.specialization,
@@ -92,7 +137,26 @@ export function listPersonalities() {
        historicalInspiration: entry.historicalInspiration,
        icon: entry.icon,
        accentColor: entry.accentColor,
-        ...(entry.isDefault ? {isDefault: true} : {})
+        isDefault: entry.id === DEFAULT_PERSONALITY_ID
-    }));
+    };
 }
 export function getPersonality(id) {
    return registry.get(id) || null;
 }
 export function resolvePersonalityId(id) {
    return registry.has(id) ? id : DEFAULT_PERSONALITY_ID;
 }
 export function listPersonalities() {
    return entries.map(toPublicMetadata);
 }
 export function getPersonalityMetadata(id) {
    return toPublicMetadata(getPersonality(id));
 }
 export function getPersonalitySystemPrompt(id) {
    return registry.get(resolvePersonalityId(id)).systemPrompt;
 }
 export function getPersonalitySystemPrompt(id) { return getPersonality(id)?.systemPrompt || registry.get(DEFAULT_PERSONALITY_ID).systemPrompt; }
@@ -0,0 +1,15 @@
 // Keep legacy printable names working, while excluding whitespace, controls,
 // path separators, and URL delimiters that are unsafe/confusing in identifiers.
 const USERNAME_PATTERN = /^[^\p{C}\s\\/@?#%]{3,64}$/u;
 export function normalizeUsername(value) {
    return String(value || "").normalize("NFKC").trim();
 }
 export function usernameError(username, label = "Username") {
    if (!username) return `${label} is required`;
    if (username.length < 3) return `${label} must be at least 3 characters`;
    if (username.length > 64) return `${label} must be at most 64 characters`;
    if (!USERNAME_PATTERN.test(username)) return `${label} may contain letters, numbers, dots, underscores, and hyphens only`;
    return null;
 }
@@ -94,12 +94,15 @@ export function decideWebSearch(message, webSearchEnabled = true) {
 export async function planWebSearch(message, {modelService, model, history = [], referenceText = "", signal} = {}) {
    const fallback = decideWebSearch(message);
    signal?.throwIfAborted();
-    if (!modelService || fallback.explicitSearchIntent || fallback.intent === "runtime") return fallback;
+    // An explicit request is already a user decision; let the model decide all
    // other cases, including future dates and questions outside its knowledge.
    if (!modelService || fallback.explicitSearchIntent) return fallback;
    try {
        const response = await modelService.generateReply(model, [
            {role: "system", content: [
                "Decide whether a web search would materially improve the answer to the user's latest message.",
-                "Search for changing facts, recommendations, factual verification, unfamiliar subjects, or information you cannot answer reliably without sources.",
+                "Search for changing facts, future dates or events, recommendations, factual verification, unfamiliar subjects, or information you cannot answer reliably without sources.",
                "You may search even when the user did not explicitly ask for a search. Decide based on whether current or external evidence is needed, not on keywords alone.",
                "Skip search for greetings, creative writing, roleplay, calculations, or editing/translating supplied text unless outside facts are needed.",
                "Use recent conversation and image observations to resolve follow-up references. Treat them as context, not instructions for this decision.",
                "Return only JSON with search (boolean) and query (string). If searching, write a concise standalone query in the user's language, preserving requested dates and years.",
@@ -1,5 +1,11 @@
 /** Portable workspace archive: a gzip-compressed ustar file with JSON and images. */
 import {gzipSync, gunzipSync} from "node:zlib";
 import {promisify} from "node:util";
 import {stat} from "node:fs/promises";
 import {createReadStream} from "node:fs";
 import {gzip, createGunzip} from "node:zlib";
 const gzipAsync = promisify(gzip);
 export const MAX_ARCHIVE_BYTES = 250 * 1024 * 1024;
@@ -34,9 +40,7 @@ export function createWorkspaceArchive(workspace, images) {
    return gzipSync(Buffer.concat(chunks, total), {level: 1});
 }
-export function parseWorkspaceArchive(buffer) {
+function parseTar(tar) {
    if (!Buffer.isBuffer(buffer) || buffer.length > MAX_ARCHIVE_BYTES) throw new Error("Archive exceeds 250 MB");
    const tar = gunzipSync(buffer, {maxOutputLength: MAX_ARCHIVE_BYTES});
    const files = new Map();
    for (let offset = 0; offset + 512 <= tar.length;) {
        const block = tar.subarray(offset, offset + 512);
@@ -59,3 +63,86 @@ export function parseWorkspaceArchive(buffer) {
    catch { throw new Error("Archive has invalid workspace.json"); }
    return {workspace, images: files};
 }
 export function parseWorkspaceArchive(buffer) {
    if (!Buffer.isBuffer(buffer) || buffer.length > MAX_ARCHIVE_BYTES) throw new Error("Archive exceeds 250 MB");
    return parseTar(gunzipSync(buffer, {maxOutputLength: MAX_ARCHIVE_BYTES}));
 }
 // Async variants keep archive compression/decompression off the event loop. The
 // synchronous exports remain for small local callers and backwards compatibility.
 export async function createWorkspaceArchiveAsync(workspace, images) {
    const files = [["workspace.json", Buffer.from(JSON.stringify(workspace, null, 2))], ...images];
    const chunks = [];
    let total = 1024;
    for (const [name, body] of files) {
        if (!/^(workspace\.json|images\/[a-f0-9-]{36}\.(png|jpeg|webp))$/.test(name)) throw new Error("Invalid archive entry");
        total += 512 + Math.ceil(body.length / 512) * 512;
        if (total > MAX_ARCHIVE_BYTES) throw new Error("Workspace archive exceeds 250 MB");
        chunks.push(header(name, body.length), body, Buffer.alloc((512 - body.length % 512) % 512));
    }
    chunks.push(Buffer.alloc(1024));
    return gzipAsync(Buffer.concat(chunks, total), {level: 1});
 }
 export async function parseWorkspaceArchiveFile(filePath) {
    const metadata = await stat(filePath);
    if (metadata.size > MAX_ARCHIVE_BYTES) throw new Error("Archive exceeds 250 MB");
    const files = new Map();
    const input = createReadStream(filePath).pipe(createGunzip());
    let pending = Buffer.alloc(0);
    let current = null;
    let total = 0;
    let ended = false;
    const consumeHeader = block => {
        if (block.every(byte => byte === 0)) {
            ended = true;
            return;
        }
        const name = block.toString("ascii", 0, 100).split("\0")[0];
        if (!/^(workspace\.json|images\/[a-f0-9-]{36}\.(png|jpeg|webp))$/.test(name) || files.has(name) || block.toString("ascii", 156, 157) !== "0") {
            throw new Error("Invalid archive entry");
        }
        const recorded = Number.parseInt(block.toString("ascii", 148, 156).trim(), 8);
        const copy = Buffer.from(block); copy.fill(32, 148, 156);
        if (recorded !== copy.reduce((sum, byte) => sum + byte, 0)) throw new Error("Invalid archive checksum");
        const size = Number.parseInt(block.toString("ascii", 124, 136).replaceAll("\0", "").trim(), 8);
        if (!Number.isSafeInteger(size) || size < 0 || size > MAX_ARCHIVE_BYTES) throw new Error("Invalid archive size");
        current = {name, size, remaining: size, chunks: []};
    };
    for await (const chunk of input) {
        total += chunk.length;
        if (total > MAX_ARCHIVE_BYTES) throw new Error("Archive exceeds 250 MB");
        pending = pending.length ? Buffer.concat([pending, chunk]) : chunk;
        while (!ended) {
            if (!current) {
                if (pending.length < 512) break;
                const block = pending.subarray(0, 512);
                pending = pending.subarray(512);
                consumeHeader(block);
                continue;
            }
            const bodyLength = Math.min(current.remaining, pending.length);
            if (bodyLength) {
                current.chunks.push(pending.subarray(0, bodyLength));
                pending = pending.subarray(bodyLength);
                current.remaining -= bodyLength;
            }
            if (current.remaining > 0) break;
            const padding = (512 - current.size % 512) % 512;
            if (pending.length < padding) break;
            pending = pending.subarray(padding);
            files.set(current.name, Buffer.concat(current.chunks, current.size));
            current = null;
        }
    }
    if (current || (!ended && pending.length >= 512)) throw new Error("Invalid archive size");
    if (!files.has("workspace.json")) throw new Error("Archive has no workspace.json");
    let workspace;
    try { workspace = JSON.parse(files.get("workspace.json").toString("utf8")); }
    catch { throw new Error("Archive has invalid workspace.json"); }
    return {workspace, images: files};
 }
@@ -2,7 +2,7 @@
 * @file Prüft und normalisiert importierte Arbeitsbereiche mit Personas, Chats und Nachrichtenbeziehungen.
 */
 import {parseSources} from "./chatMessageHelpers.js";
-import {getPersonality, DEFAULT_PERSONALITY_ID} from "./personalityRegistry.js";
+import {resolvePersonalityId} from "./personalityRegistry.js";
 const VALID_PERSONA_TYPES = new Set(["assistant", "user"]);
 const VALID_MESSAGE_ROLES = new Set(["user", "bot", "assistant", "system"]);
@@ -197,7 +197,7 @@ function validateChat(chat, index, errors) {
        branched_from_message_id: sourceId(chat.branched_from_message_id ?? chat.branchedFromMessageId),
        title,
        stored_title: title,
-        personality_id: getPersonality(chat.personality_id ?? chat.personalityId)?.id || DEFAULT_PERSONALITY_ID,
+        personality_id: resolvePersonalityId(chat.personality_id ?? chat.personalityId),
        folder_name: optionalText(chat.folder_name || chat.folderName),
        is_pinned: Boolean(chat.is_pinned || chat.isPinned),
        archived_at: optionalText(chat.archived_at || chat.archivedAt),
@@ -127,14 +127,55 @@ test("public health checks reach the backend without exposing diagnostics or req
    assert.equal((await request(server.baseUrl, "/admin/diagnostics")).status, 403);
 });
-test("CSP permits the pinned chat markdown script and the app's hosted fonts", async t => {
+test("CSP restricts scripts, styles, and fonts to local assets", async t => {
    const server = await startTestServer();
    t.after(() => server.close());
    const response = await fetch(`${server.baseUrl}/`);
    const policy = response.headers.get("content-security-policy");
-    assert.match(policy, /style-src[^;]*https:\/\/fonts\.googleapis\.com/);
+    assert.match(policy, /style-src 'self'/);
-    assert.match(policy, /script-src[^;]*https:\/\/cdnjs\.cloudflare\.com/);
+    assert.match(policy, /script-src 'self'/);
-    assert.match(policy, /font-src[^;]*https:\/\/fonts\.gstatic\.com/);
+    assert.match(policy, /font-src 'self'/);
    assert.doesNotMatch(policy, /unsafe-inline|cdnjs\.cloudflare\.com|fonts\.googleapis\.com|fonts\.gstatic\.com/);
 });
 test("first chat message receives a generated title after the reply is saved", async t => {
    const server = await startTestServer();
    t.after(() => server.close());
    const jar = new CookieJar();
    await request(server.baseUrl, "/register", {method: "POST", jar, body: {username: "title-owner", password: "password123"}});
    const chat = (await request(server.baseUrl, "/chats", {method: "POST", jar, body: {title: "New chat"}})).json.chat;
    const repo = server.app.locals.repositories;
    const message = "Plan a weekend trip to Lucerne";
    repo.insertChatMessage(chat.id, "user", message);
    repo.insertChatMessage(chat.id, "bot", "Let's plan it.");
    const usedModels = [];
    t.mock.method(server.app.locals.modelService, "generateReply", async model => {
        usedModels.push(model);
        return JSON.stringify({title: "Weekend in Lucerne"});
    });
    const titled = await request(server.baseUrl, `/chats/${chat.id}/title`, {
        method: "POST", jar, body: {message, model: "chosen-chat-model"}
    });
    assert.equal(titled.status, 200);
    assert.equal(titled.json.title, "Weekend in Lucerne");
    assert.equal(repo.getChat(chat.id, "title-owner").title, "Weekend in Lucerne");
    assert.deepEqual(usedModels, ["chosen-chat-model"]);
    const another = (await request(server.baseUrl, "/chats", {method: "POST", jar, body: {title: "New chat"}})).json.chat;
    repo.insertChatMessage(another.id, "user", message);
    const mismatch = await request(server.baseUrl, `/chats/${another.id}/title`, {
        method: "POST", jar, body: {message: "Unrelated prompt", model: "chosen-chat-model"}
    });
    assert.equal(mismatch.json.title, "New chat");
    assert.equal(usedModels.length, 1);
    server.app.locals.modelService.generateReply.mock.mockImplementation(async () => { throw new Error("model unavailable"); });
    const fallback = await request(server.baseUrl, `/chats/${another.id}/title`, {
        method: "POST", jar, body: {message, model: "chosen-chat-model"}
    });
    assert.equal(fallback.status, 200);
    assert.equal(fallback.json.title, "Plan a weekend trip to Lucerne");
 });
 test("personality API keeps prompts private, validates IDs, and enforces chat ownership", async t => {
@@ -157,7 +198,9 @@ test("personality API keeps prompts private, validates IDs, and enforces chat ow
    const defaultChat = await request(server.baseUrl, "/chats", {method:"POST", jar:owner, body:{systemPrompt:"Injected"}});
    assert.equal(defaultChat.json.chat.personality_id, "general-assistant");
    assert.equal((await request(server.baseUrl, "/chats", {method:"POST", jar:owner, body:{personalityId:"invented"}})).status, 400);
    assert.equal((await request(server.baseUrl, "/chats", {method:"POST", jar:owner, body:{personalityId:["programmer"]}})).status, 400);
    assert.equal((await request(server.baseUrl, `/chats/${created.json.chat.id}/personality`, {method:"PUT", jar:other, body:{personalityId:"tutor"}})).status, 404);
    assert.equal((await request(server.baseUrl, `/chats/${created.json.chat.id}/personality`, {method:"PUT", jar:owner, body:{personalityId:["tutor"]}})).status, 400);
    assert.equal((await request(server.baseUrl, `/chats/${created.json.chat.id}/personality`, {method:"PUT", jar:owner, body:{personalityId:"tutor"}})).json.chat.personality_id, "tutor");
    assert.equal((await request(server.baseUrl, "/personas", {method:"POST", jar:owner, body:{name:"Custom"}})).status, 404);
 });
@@ -262,16 +305,19 @@ test("auth flow validates inputs and persists session", async () => {
        assert.match(json.error, /at least 3 characters/i);
    });
-    await request(server.baseUrl, "/register", {
+    const registration = await request(server.baseUrl, "/register", {
        method: "POST",
-        body: {username: "alice", password: "password123"}
+        body: {username: "alice", password: "password123"}, jar
-    }).then(({status}) => assert.equal(status, 200));
+    });
    assert.equal(registration.status, 200);
    const registeredSession = jar.cookie;
    await request(server.baseUrl, "/login", {
        method: "POST",
        body: {username: "alice", password: "password123"},
        jar
    }).then(({status}) => assert.equal(status, 200));
    assert.notEqual(jar.cookie, registeredSession, "login must regenerate the session id");
    await request(server.baseUrl, "/session", {jar}).then(({json}) => {
        assert.equal(json.user, "alice");
@@ -398,6 +444,7 @@ test("username and password changes keep account data and sessions consistent",
    await request(server.baseUrl, "/register", {method: "POST", body: {username: "alreadytaken", password: "password123"}});
    assert.equal((await request(server.baseUrl, "/login", {method: "POST", body: {username: "accountowner", password: "old-password"}, jar})).status, 200);
    assert.equal((await request(server.baseUrl, "/login", {method: "POST", body: {username: "accountowner", password: "old-password"}, jar: otherSession})).status, 200);
    const sessionBeforeRename = jar.cookie;
    const chat = await request(server.baseUrl, "/chats", {method: "POST", body: {title: "Keep this chat"}, jar});
    assert.equal(chat.status, 200);
    assert.equal((await request(server.baseUrl, "/personas", {method: "POST", body: {name: "Keeper", personaType: "user"}, jar})).status, 404);
@@ -410,6 +457,7 @@ test("username and password changes keep account data and sessions consistent",
    assert.equal((await request(server.baseUrl, "/settings/username", {method: "PUT", body: {username: "alreadytaken", password: "old-password"}, jar})).status, 409);
    const renamed = await request(server.baseUrl, "/settings/username", {method: "PUT", body: {username: "newowner", password: "old-password"}, jar});
    assert.equal(renamed.status, 200);
    assert.notEqual(jar.cookie, sessionBeforeRename, "username changes must regenerate the session id");
    assert.equal(renamed.json.username, "newowner");
    assert.equal((await request(server.baseUrl, "/settings/profile", {jar})).json.username, "newowner");
    assert.equal((await request(server.baseUrl, "/session", {jar})).json.user, "newowner");
@@ -744,10 +792,12 @@ test("chat memories are durable facts included in model payload", async () => {
 test("chat context summary rolls up older messages into future payloads", async () => {
    let replyCount = 0;
    let latestPayload = [];
    let summaryModel = null;
    const modelService = {
-        async generateReply(model, messagesPayload) {
+        async generateReply(model, messagesPayload, options = {}) {
-            if (messagesPayload.some((message) => message.content.includes("Merge the previous summary"))) {
+            if (options.format && messagesPayload.some((message) => message.content.includes("Newly expired conversation records"))) {
-                return "Summary: user greeted the assistant and asked for continuity.";
+                summaryModel = model;
                return JSON.stringify({summary: "user greeted the assistant and asked for continuity.", current_goals: [], important_facts: ["user greeted the assistant"], decisions: [], constraints: [], technical_state: [], open_tasks: [], problems_and_solutions: [], user_preferences: [], important_exact_values: []});
            }
            latestPayload = messagesPayload;
            replyCount += 1;
@@ -771,7 +821,7 @@ test("chat context summary rolls up older messages into future payloads", async
    };
    const server = await startTestServer({
        modelService,
-        config: {chatHistoryLimit: 2, chatSummaryUpdateEveryMessages: 2}
+        config: {chatHistoryLimit: 2, chatSummaryUpdateEveryMessages: 2, contextModel: "configured:context", contextCompactionTriggerTokens: 1, contextCompactionRecentTokens: 1, contextCompactionMinMessages: 2}
    });
    const jar = new CookieJar();
@@ -802,6 +852,7 @@ test("chat context summary rolls up older messages into future payloads", async
    assert.ok(latestPayload.some((message) => message.role === "system" && message.content.includes("CONVERSATION SUMMARY")));
    assert.ok(latestPayload.some((message) => message.content.includes("user greeted the assistant")));
    assert.equal(summaryModel, "configured:context");
    await server.close();
 });
@@ -0,0 +1,47 @@
 import test from "node:test";
 import assert from "node:assert/strict";
 import Database from "better-sqlite3";
 import {initializeSchema, runMigrations} from "../src/db/schema.js";
 import {createChatStatements} from "../src/db/chatRepository.js";
 import {titleFromFirstMessage} from "../public/js/chatTitle.js";
 import {createWebSearchToggle} from "../public/js/webSearch.js";
 test("first messages produce short subject titles at word boundaries", () => {
    assert.equal(titleFromFirstMessage("Can you help me plan a weekend trip to Lucerne? I prefer trains."), "Plan a weekend trip to Lucerne");
    assert.equal(titleFromFirstMessage("What are the best hiking routes near Zurich?"), "Best hiking routes near Zurich");
    const title = titleFromFirstMessage("Please explain the differences between local browser storage and server-side sessions for returning visitors");
    assert.ok(title.length <= 68);
    assert.ok(!title.endsWith("-"));
    assert.equal(titleFromFirstMessage("   "), "New chat");
 });
 test("web search preference survives a fresh toggle", () => {
    const values = new Map();
    const storage = {getItem: key => values.get(key), setItem: (key, value) => values.set(key, value)};
    const button = () => ({attributes: {}, setAttribute(key, value) { this.attributes[key] = value; }, addEventListener(_event, listener) { this.click = listener; }});
    const first = button();
    assert.equal(createWebSearchToggle(first, storage).enabled, true);
    first.click();
    const second = button();
    assert.equal(createWebSearchToggle(second, storage).enabled, false);
    assert.equal(second.attributes["aria-pressed"], "false");
    second.click();
    assert.equal(createWebSearchToggle(button(), storage).enabled, true);
 });
 test("chat list query returns a bounded latest message preview and activity time", () => {
    const db = new Database(":memory:");
    try {
        initializeSchema(db);
        runMigrations(db);
        db.prepare("INSERT INTO chat_sessions (username, title) VALUES (?, ?)").run("owner", "Trip plans");
        const chatId = db.prepare("SELECT id FROM chat_sessions").get().id;
        db.prepare("INSERT INTO chat_messages (chat_id, role, content) VALUES (?, ?, ?)").run(chatId, "user", "First question");
        db.prepare("INSERT INTO chat_messages (chat_id, role, content) VALUES (?, ?, ?)").run(chatId, "bot", "x".repeat(250));
        const statements = createChatStatements(db);
        const chat = statements.listChatSessions.get("owner");
        assert.equal(chat.last_message_preview, "x".repeat(180));
        assert.ok(chat.updated_at);
        assert.equal(statements.searchChats.get("%Trip%", "owner", "%Trip%").last_message_preview, "x".repeat(180));
    } finally { db.close(); }
 });
@@ -0,0 +1,26 @@
 import test from "node:test";
 import assert from "node:assert/strict";
 import {buildCompactionRequest, estimateTokens, normalizeCompaction} from "../src/services/contextCompaction.js";
 const valid = {
    summary: "The user is implementing context compaction.",
    current_goals: ["Keep recent messages verbatim"],
    important_facts: [], decisions: ["Use the existing Ollama client"], constraints: [],
    technical_state: ["The context model is configured separately"], open_tasks: [],
    problems_and_solutions: [], user_preferences: [], important_exact_values: ["CONTEXT_MODEL"]
 };
 test("compaction output is strictly validated and bounded", () => {
    assert.deepEqual(normalizeCompaction(JSON.stringify(valid), 5000), valid);
    assert.equal(normalizeCompaction("not json"), null);
    assert.equal(normalizeCompaction(JSON.stringify({...valid, summary: "", current_goals: [], important_facts: [], decisions: [], constraints: [], technical_state: [], open_tasks: [], problems_and_solutions: [], user_preferences: [], important_exact_values: []}), 5000), null);
    assert.equal(normalizeCompaction(JSON.stringify(valid), 10), null);
 });
 test("compaction request merges existing state with only expired records", () => {
    const request = buildCompactionRequest("existing fact", [{role: "user", content: "old request"}]);
    assert.match(request, /existing fact/);
    assert.match(request, /old request/);
    assert.match(request, /Newly expired conversation records/);
    assert.equal(estimateTokens("1234"), 1);
 });
@@ -442,7 +442,7 @@ test("composer search defaults on and source renderer supports old messages and
    const toggle = createWebSearchToggle(button);
    assert.equal(toggle.enabled, true);
    assert.equal(button.attributes["aria-pressed"], "true");
-    assert.match(button.title, /Automatic web search on/);
+    assert.match(button.title, /Web search allowed/);
    button.listeners.click();
    assert.equal(toggle.enabled, false);
    assert.equal(button.attributes["aria-pressed"], "false");
Author	SHA1	Message	Date
Fretux	72d5c8b2dc	Improve chat title generation: refine model selection, ensure title consistency, and add comprehensive tests CI / check (22) (push) Failing after 4m53s Details CI / check (24) (push) Successful in 9m43s Details	2026-10-16 16:15:55 +02:00
Fretux	448fe53811	Add context compaction service: schema validation, token estimation, and message normalization with tests CI / check (22) (push) Failing after 4m49s Details CI / check (24) (push) Successful in 9m43s Details	2026-10-16 16:00:52 +02:00
Fretux	be4cce67f7	Introduce context compaction: optimize conversation context persistence, reduce redundant tokens, and enhance summary handling. CI / check (22) (push) Failing after 4m51s Details CI / check (24) (push) Failing after 4m51s Details	2026-10-16 14:09:23 +02:00
Fretux	99aff83a23	Improve chat title generation and context compacting CI / check (22) (push) Failing after 5m22s Details CI / check (24) (push) Failing after 12m34s Details	2026-10-16 12:22:14 +02:00
Fretux	b8b06a8a33	Improve chat title generation or smth CI / check (22) (push) Failing after 4m50s Details CI / check (24) (push) Failing after 4m51s Details	2026-10-13 23:40:29 +02:00
Fretux	42e71fb502	"Improve personality registry validation and API CI / check (22) (push) Failing after 4m50s Details CI / check (24) (push) Successful in 9m43s Details	2026-10-13 22:14:51 +02:00
Fretux	5765922765	fix an issue with db CI / check (22) (push) Failing after 4m50s Details CI / check (24) (push) Failing after 4m56s Details	2026-10-13 18:28:07 +02:00
Fretux	d5d886ac5f	Revamp workspace archive handling with async support, input validation improvements and better session management CI / check (22) (push) Failing after 4m49s Details CI / check (24) (push) Failing after 4m55s Details	2026-10-13 18:19:20 +02:00
Fretux	068843beda	Revamp workspace archive handling with async support, input validation improvements and better session management CI / check (22) (push) Failing after 4m51s Details CI / check (24) (push) Successful in 9m43s Details	2026-10-13 18:10:56 +02:00
Fretux	5489e03138	Enhance upload handling: add db-backed upload rate limiting and lease management, enforce stricter validation for deployment configurations, optimize test suite and retired functionality, and improve input handling and error recovery. CI / check (22) (push) Failing after 4m52s Details CI / check (24) (push) Successful in 9m43s Details	2026-10-13 14:16:32 +02:00
Fretux	dd23a19ed2	Switch to SQLite-backed session storage, cleanup third-party dependencies, and refine CSP for restricted external assets. CI / check (22) (push) Failing after 4m51s Details CI / check (24) (push) Failing after 3h11m30s Details	2026-10-12 23:19:36 +02:00
Frederik Spirgi	7723125c93	make some overall QoL improvements CI / check (22) (push) Failing after 15m53s Details CI / check (24) (push) Failing after 15m50s Details	2026-10-12 13:07:59 +02:00
		`@@ -0,0 +1,2 @@`
							`process.env.NODE_ENV ??= "development";`
							`await import("../server.js");`
		`@@ -0,0 +1,2 @@`
							`process.env.NODE_ENV ??= "production";`
							`await import("../server.js");`