Merge remote-tracking branch 'origin/master' into pr251-review-fixes

# Conflicts:
#	CLAUDE.md

src/web/public/index.html

@@ -131,6 +131,10 @@
         <button class="btn-icon-header btn-response-viewer-header btn-response-viewer-header--hidden" onclick="app.toggleResponseViewer()" title="View last response" aria-label="View last response"><svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg></button>
         <button class="btn-icon-header btn-away-digest btn-away-digest--hidden" onclick="app.openAwayDigest()" title="Away Digest" aria-label="Open away digest"><svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M8 6h13"/><path d="M8 12h13"/><path d="M8 18h13"/><path d="M3 6h.01"/><path d="M3 12h.01"/><path d="M3 18h.01"/></svg></button>
         <button class="btn-icon-header btn-session-manager btn-session-manager--hidden" onclick="app.openSessionManager()" title="Session Manager" aria-label="Open session manager"><svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="12 2 2 7 12 12 22 7 12 2"/><polyline points="2 17 12 22 22 17"/><polyline points="2 12 12 17 22 12"/></svg></button>
+        <button class="btn-icon-header btn-approvals btn-approvals--hidden" id="approvalsBtn" onclick="app.toggleApprovalsInbox()" title="Approvals waiting on you" aria-label="Open approvals inbox" aria-expanded="false">
+          <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9"/><path d="M13.73 21a2 2 0 0 1-3.46 0"/></svg>
+          <span class="approvals-badge" id="approvalsBadge">0</span>
+        </button>
         <button class="btn-icon-header btn-attachments-history btn-attachments-history--hidden" id="attachmentsHistoryBtn" onclick="app.toggleAttachmentHistory()" title="Attachments" aria-label="Open attachment history" aria-expanded="false">
           <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m21.44 11.05-9.19 9.19a6 6 0 0 1-8.49-8.49l9.19-9.19a4 4 0 0 1 5.66 5.66l-9.2 9.19a2 2 0 0 1-2.83-2.83l8.49-8.48"/></svg>
           <span class="attachment-history-badge" id="attachmentHistoryBadge" style="display:none;">0</span>
@@ -149,6 +153,16 @@
       </div>
     </header>
 
+    <!-- Connection-loss banner: shown once session state HAS loaded and the
+         link then drops, so the terminal stays readable behind it.
+         The blocking variant is #offlineOverlay at the end of <body>. -->
+    <div class="offline-banner" id="offlineBanner" role="status" hidden>
+      <span class="offline-banner-dot" aria-hidden="true"></span>
+      <span class="offline-banner-text" id="offlineBannerText">No connection to the Codeman server</span>
+      <span class="offline-banner-detail" id="offlineBannerDetail"></span>
+      <button class="offline-banner-retry" id="offlineBannerRetry" onclick="app.retryConnection()">Retry now</button>
+    </div>
+
     <!-- Timer Banner (shown when timed run is active) -->
     <div class="timer-banner" id="timerBanner" style="display: none;">
       <div class="timer-content">
@@ -308,6 +322,11 @@
 
       <!-- Welcome Overlay (shown when no session active) -->
       <div class="welcome-overlay" id="welcomeOverlay">
+        <!-- Open tabs as a vertical column in the left gutter (home-sessions.js).
+             Absolutely positioned so the centered content below never moves, and
+             therefore only rendered where the gutter is wider than the column;
+             ships `hidden` and only that module reveals it. -->
+        <aside class="home-sessions" id="homeSessions" hidden></aside>
         <div class="welcome-content">
           <h1 class="welcome-title">Codeman</h1>
           <p class="welcome-desc">Manage AI Coding tools in persistent tmux sessions.</p>
@@ -407,6 +426,7 @@
       <div class="file-browser-header">
         <span class="file-browser-title">Files</span>
         <div class="file-browser-actions">
+          <button class="btn-icon-sm btn-file-browser-hidden" onclick="app.toggleFileBrowserHidden()" title="Show hidden files and folders" aria-label="Show hidden files and folders" aria-pressed="false" id="fileBrowserHiddenBtn">.*</button>
           <button class="btn-icon-sm" onclick="app.refreshFileBrowser()" title="Refresh">&#x21BB;</button>
           <button class="btn-icon-sm" onclick="app.toggleFileBrowserExpand()" title="Expand/Collapse All" id="fileBrowserExpandBtn">&#x229E;</button>
           <button class="btn-icon-sm" onclick="app.closeFileBrowserPanel()" title="Close">&times;</button>
@@ -1522,6 +1542,13 @@
                   <span class="slider"></span>
                 </label>
               </div>
+              <div class="settings-item" title="Cross-session inbox of prompts waiting on you (permission dialogs, questions, idle prompts) with answer-in-place buttons; the header bell appears only while something is pending">
+                <span class="settings-item-label">Approvals Inbox</span>
+                <label class="switch switch-sm">
+                  <input type="checkbox" id="appSettingsApprovalsInbox">
+                  <span class="slider"></span>
+                </label>
+              </div>
               <div class="settings-item" title="Show ultracode / Workflow runs as a master-detail tab (tasks on the left, agents with tokens + tool calls on the right)">
                 <span class="settings-item-label">Ultracode Agents</span>
                 <label class="switch switch-sm">
@@ -2725,6 +2752,51 @@
     <!-- Lines drawn dynamically -->
   </svg>
 
+  <!-- Connection-loss overlay: the app shell is served from the service-worker
+       cache, so Codeman renders even with nothing reachable. Without this, that
+       looks like an empty dashboard rather than a dead connection. Only shown
+       while no server state has loaded this page load. -->
+  <div class="offline-overlay" id="offlineOverlay" hidden>
+    <div class="offline-overlay-card" role="alertdialog" aria-labelledby="offlineOverlayTitle" aria-describedby="offlineOverlayBody">
+      <div class="offline-overlay-icon" aria-hidden="true">
+        <svg width="46" height="46" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round">
+          <path d="M1 1l22 22"/>
+          <path d="M16.72 11.06A10.94 10.94 0 0 1 19 12.55"/>
+          <path d="M5 12.55a10.94 10.94 0 0 1 5.17-2.39"/>
+          <path d="M10.71 5.05A16 16 0 0 1 22.58 9"/>
+          <path d="M1.42 9a15.91 15.91 0 0 1 4.7-2.88"/>
+          <path d="M8.53 16.11a6 6 0 0 1 6.95 0"/>
+          <line x1="12" y1="20" x2="12.01" y2="20"/>
+        </svg>
+      </div>
+      <h2 class="offline-overlay-title" id="offlineOverlayTitle">Can't reach the Codeman server</h2>
+      <p class="offline-overlay-body" id="offlineOverlayBody"></p>
+      <div class="offline-overlay-host" id="offlineOverlayHost"></div>
+      <ul class="offline-overlay-hints">
+        <li>Check Wi-Fi or mobile data</li>
+        <li>Check your VPN / Tailscale is connected</li>
+        <li>Check the Codeman server is still running</li>
+      </ul>
+      <div class="offline-overlay-actions">
+        <button class="offline-overlay-btn offline-overlay-btn--primary" id="offlineOverlayRetry" onclick="app.retryConnection()">Retry now</button>
+        <button class="offline-overlay-btn" onclick="app.dismissOfflineOverlay()">Show cached view</button>
+      </div>
+      <div class="offline-overlay-status" id="offlineOverlayStatus">Retrying…</div>
+    </div>
+  </div>
+
+  <!-- Approvals Inbox drawer (populated by approvals-ui.js; opened from the header bell) -->
+  <div class="approvals-drawer" id="approvalsDrawer" role="complementary" aria-label="Approvals inbox">
+    <div class="approvals-header">
+      <div>
+        <div class="approvals-title">Approvals</div>
+        <div class="approvals-subtitle">Prompts waiting on you, across all sessions</div>
+      </div>
+      <button class="approvals-close" onclick="app.closeApprovalsInbox()" title="Close" aria-label="Close approvals inbox">✕</button>
+    </div>
+    <div class="approvals-list"></div>
+  </div>
+
   <script defer src="constants.js"></script>
   <script defer src="i18n.js"></script>
   <script defer src="mobile-handlers.js"></script>
@@ -2743,10 +2815,12 @@
   <script defer src="settings-ui.js"></script>
   <script defer src="panels-ui.js"></script>
   <script defer src="ultracode-panel.js"></script>
+  <script defer src="approvals-ui.js"></script>
   <script defer src="admin-ui.js"></script>
   <script defer src="session-ui.js"></script>
   <script defer src="webview-tabs.js"></script>
   <script defer src="mobile-overview.js"></script>
+  <script defer src="home-sessions.js"></script>
   <script defer src="entrance-animations.js"></script>
   <script defer src="ralph-wizard.js"></script>
   <script defer src="api-client.js"></script>