malice

public

Star0

Fork 0

Watch0

109 commits 2 branches 0 tags 0 releases4.4 MiB

Commit `20fe182f3204`

tarball

atagen <boss@atagen.co>2026-10-26 05:50 UTC

28 files changed+672-96

web: set up recovery, trace the device worker, and fix timeline edge cases

Recovery setup shows the generated key once and refuses every close path until it's saved, and KeyBackupExists travels as an explicit error kind instead of a 409 guess. The device worker gets a tracing layer enabled by a filter in localStorage, passed through the SharedWorker name because workers can't read localStorage. Rooms whose stored events don't fill the screen now keep paginating, own sends stay pinned when a growing pending row shifts the scroll, and refreshRooms parses summaries like the event path does.

Modified file: .mcp.json+5 additions@@ -13,6 +13,11 @@
       "type": "stdio",
       "command": "npx",
       "args": ["-y", "chrome-devtools-mcp@latest", "--executablePath", "${CHROMIUM_PATH}"]
+    },
+    "chromium-nested": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "chrome-devtools-mcp@latest", "--browserUrl", "http://127.0.0.1:9333"]
     }
   }
 }

Modified file: crates/malice-core/src/error.rs+2 additions@@ -7,6 +7,7 @@ pub enum Failure {
     Forbidden,
     NotFound,
     Conflict,
+    KeyBackupExists,
     Busy,
     TooLarge,
     Unsupported,
@@ -66,6 +67,7 @@ impl From<macltok::Error> for CoreError {
             | ErrorKind::VerificationInactive
             | ErrorKind::VerificationUnsupported
             | ErrorKind::NoCrossSigningIdentity => Failure::Conflict,
+            ErrorKind::KeyBackupExists => Failure::KeyBackupExists,
             ErrorKind::RecoveryRejected => Failure::BadRequest,
             ErrorKind::InteractiveAuthRequired => Failure::Forbidden,
             ErrorKind::Unauthenticated

Modified file: crates/malice-core/src/request.rs+55 additions−1 deletions@@ -2,7 +2,7 @@ use macltok::ruma::{OwnedTransactionId, events::GlobalAccountDataEventType, serd
 use macltok::{
     AttachmentUpload, ClientHandle, CreateRoomOptions, ImagePackSource, MediaId, MediaSize,
     MemberFilter, MentionKey, MentionsBoundary, MessageContent, MessageEditContent, MirrorHandle,
-    PackImageInfo, PackUsage, Patch, RichText, SearchScope, TimelineId, VerificationAction,
+    PackImageInfo, PackUsage, Patch, RichText, RoomNotificationMode, SearchScope, TimelineId, VerificationAction,
     VerificationTarget,
 };
 use serde::Deserialize;
@@ -253,6 +253,18 @@ pub enum Request {
     RecoverKeyBackup {
         recovery_key: String,
     },
+    EnableRecovery {
+        #[serde(default)]
+        passphrase: Option<String>,
+    },
+    ResetRecoveryKey {
+        #[serde(default)]
+        passphrase: Option<String>,
+    },
+    DisableRecovery,
+    VerifyRecoveryKey {
+        recovery_key: String,
+    },
     StartVerification,
     Verify {
         action: String,
@@ -370,6 +382,11 @@ pub enum Request {
         user_id: String,
         muted: bool,
     },
+    SetRoomNotificationMode {
+        room_id: String,
+        #[serde(default)]
+        mode: Option<RoomNotificationMode>,
+    },
     NotificationKeywords,
     AddNotificationKeyword {
         keyword: String,
@@ -565,6 +582,10 @@ pub enum Reply {
     },
 }
 
+fn non_empty(passphrase: Option<String>) -> Option<String> {
+    passphrase.filter(|value| !value.trim().is_empty())
+}
+
 pub async fn dispatch(
     handle: &ClientHandle,
     mirror: &MirrorHandle,
@@ -953,6 +974,25 @@ pub async fn dispatch(
             handle.recover_key_backup(recovery_key).await?;
             Ok(Reply::Done)
         }
+        Request::EnableRecovery { passphrase } => {
+            let key = handle.enable_recovery(non_empty(passphrase)).await?;
+            Ok(Reply::Json(json!({ "recovery_key": key.as_str() })))
+        }
+        Request::ResetRecoveryKey { passphrase } => {
+            let key = handle.reset_recovery_key(non_empty(passphrase)).await?;
+            Ok(Reply::Json(json!({ "recovery_key": key.as_str() })))
+        }
+        Request::DisableRecovery => {
+            handle.disable_recovery().await?;
+            Ok(Reply::Done)
+        }
+        Request::VerifyRecoveryKey { recovery_key } => {
+            if recovery_key.trim().is_empty() {
+                return Err(CoreError::bad_request("recovery_key is required"));
+            }
+            let valid = handle.verify_recovery_key(recovery_key.trim()).await?;
+            Ok(Reply::Json(json!({ "valid": valid })))
+        }
         Request::StartVerification => {
             handle
                 .start_verification(VerificationTarget::OwnIdentity)
@@ -1222,6 +1262,14 @@ pub async fn dispatch(
                 .await?;
             Ok(Reply::Done)
         }
+        Request::SetRoomNotificationMode { room_id, mode } => {
+            let room_id = parse_room_id(&room_id)?;
+            match mode {
+                Some(mode) => handle.set_room_notification_mode(room_id, mode).await?,
+                None => handle.reset_room_notification_mode(room_id).await?,
+            }
+            Ok(Reply::Done)
+        }
         Request::NotificationKeywords => Ok(Reply::Json(
             json!({ "keywords": handle.notification_keywords().await }),
         )),
@@ -1521,6 +1569,12 @@ mod tests {
         let recover: Request =
             serde_json::from_str(r#"{"op":"recover_key_backup","recovery_key":"k"}"#).unwrap();
         assert!(matches!(recover, Request::RecoverKeyBackup { .. }));
+        let enable: Request = serde_json::from_str(r#"{"op":"enable_recovery"}"#).unwrap();
+        assert!(matches!(
+            enable,
+            Request::EnableRecovery { passphrase: None }
+        ));
+        assert_eq!(non_empty(Some("  ".into())), None);
     }
 
     #[test]

Modified file: crates/malice-server/src/error.rs+10 additions−3 deletions@@ -12,6 +12,7 @@ use crate::csrf::clear_cookie_value;
 pub struct ApiError {
     status: StatusCode,
     message: String,
+    kind: Option<&'static str>,
     /// When set, the response clears the session cookie (stale credential).
     clear_session: Option<bool>,
 }
@@ -21,6 +22,7 @@ impl ApiError {
         Self {
             status,
             message: message.into(),
+            kind: None,
             clear_session: None,
         }
     }
@@ -38,6 +40,7 @@ impl ApiError {
         Self {
             status: StatusCode::UNAUTHORIZED,
             message: message.into(),
+            kind: None,
             clear_session: Some(cookie_secure),
         }
     }
@@ -61,14 +64,18 @@ impl From<CoreError> for ApiError {
             Failure::Unauthorized => StatusCode::UNAUTHORIZED,
             Failure::Forbidden => StatusCode::FORBIDDEN,
             Failure::NotFound => StatusCode::NOT_FOUND,
-            Failure::Conflict => StatusCode::CONFLICT,
+            Failure::Conflict | Failure::KeyBackupExists => StatusCode::CONFLICT,
             Failure::Busy => StatusCode::TOO_MANY_REQUESTS,
             Failure::TooLarge => StatusCode::PAYLOAD_TOO_LARGE,
             Failure::Unsupported => StatusCode::UNSUPPORTED_MEDIA_TYPE,
             Failure::EngineStopped => return Self::engine_stopped(),
             Failure::Upstream => StatusCode::BAD_GATEWAY,
         };
-        Self::new(status, error.message)
+        let mut api = Self::new(status, error.message);
+        if error.kind == Failure::KeyBackupExists {
+            api.kind = Some("key_backup_exists");
+        }
+        api
     }
 }
 
@@ -83,7 +90,7 @@ impl IntoResponse for ApiError {
         (
             self.status,
             headers,
-            axum::Json(json!({ "message": self.message })),
+            axum::Json(json!({ "message": self.message, "kind": self.kind })),
         )
             .into_response()
     }

Modified file: crates/malice-server/src/routes.rs+5 additions@@ -570,6 +570,10 @@ async fn post_command(
             | Request::EnableKeyBackup
             | Request::DisableKeyBackup { .. }
             | Request::RecoverKeyBackup { .. }
+            | Request::EnableRecovery { .. }
+            | Request::ResetRecoveryKey { .. }
+            | Request::DisableRecovery
+            | Request::VerifyRecoveryKey { .. }
             | Request::RetryRecentHistory { .. }
             | Request::EventContext { .. }
             | Request::EventContextBefore { .. }
@@ -599,6 +603,7 @@ async fn post_command(
             | Request::SetRoomDisplayName { .. }
             | Request::SetRoomAvatar { .. }
             | Request::Mute { .. }
+            | Request::SetRoomNotificationMode { .. }
             | Request::NotificationKeywords
             | Request::AddNotificationKeyword { .. }
             | Request::RemoveNotificationKeyword { .. }

Modified file: crates/malice-worker/Cargo.lock+11 additions−9 deletions@@ -1999,7 +1999,7 @@ checksum = "7ef0d4ed8669f8f8826eb00dc878084aa8f253506c4fd5e8f58f5bce72ddb97e"
 [[package]]
 name = "macltok"
 version = "0.1.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/macltok?rev=417da9e719bcfbb8b60e4ff4f1a09f3d6b0d0160#417da9e719bcfbb8b60e4ff4f1a09f3d6b0d0160"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/macltok?rev=419c65426a62191a26b47d07a0e0661e047317da#419c65426a62191a26b47d07a0e0661e047317da"
 dependencies = [
  "futures-util",
  "getrandom 0.2.17",
@@ -2153,6 +2153,8 @@ dependencies = [
  "matrix-sdk",
  "ruma",
  "serde_json",
+ "tracing",
+ "tracing-subscriber",
  "wasm-bindgen",
  "wasm-bindgen-futures",
  "wasm-bindgen-test",
@@ -2210,7 +2212,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "anymap2",
  "aquamarine",
@@ -2270,7 +2272,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-base"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "as_variant",
  "async-trait",
@@ -2296,7 +2298,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-common"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "eyeball-im",
  "futures-core",
@@ -2319,7 +2321,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-crypto"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "aes",
  "aquamarine",
@@ -2359,7 +2361,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-indexeddb"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "async-trait",
  "base64 0.22.1",
@@ -2391,7 +2393,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-sqlite"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "as_variant",
  "async-trait",
@@ -2418,7 +2420,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-store-encryption"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "base64 0.22.1",
  "blake3",
@@ -2439,7 +2441,7 @@ dependencies = [
 [[package]]
 name = "matrix-sdk-ui"
 version = "0.18.0"
-source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=ec026bc9ea2393fd0cce6212b950d91ab6d36097#ec026bc9ea2393fd0cce6212b950d91ab6d36097"
+source = "git+ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk?rev=0f2f982989765b79c39efdc30e86eaafccf69e4a#0f2f982989765b79c39efdc30e86eaafccf69e4a"
 dependencies = [
  "as_variant",
  "async-rx",

Modified file: crates/malice-worker/Cargo.toml+4 additions−2 deletions@@ -14,7 +14,7 @@ publish = false
 crate-type = ["cdylib", "rlib"]
 
 [target.'cfg(target_family = "wasm")'.dependencies]
-macltok = { git = "ssh://brewery@pls.lobotomise.me:33/atagen/macltok", rev = "417da9e719bcfbb8b60e4ff4f1a09f3d6b0d0160", features = ["indexeddb", "serde", "mirror"] }
+macltok = { git = "ssh://brewery@pls.lobotomise.me:33/atagen/macltok", rev = "419c65426a62191a26b47d07a0e0661e047317da", features = ["indexeddb", "serde", "mirror"] }
 malice-core = { path = "../malice-core" }
 ruma = { version = "0.16", default-features = false }
 futures-util = { version = "0.3", default-features = false, features = ["std"] }
@@ -25,9 +25,11 @@ serde_json = "1"
 wasm-bindgen = "=0.2.128"
 wasm-bindgen-futures = "=0.4.78"
 js-sys = "=0.3.105"
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", default-features = false, features = ["std", "registry"] }
 
 [dev-dependencies]
-matrix-sdk = { git = "ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk", rev = "ec026bc9ea2393fd0cce6212b950d91ab6d36097", default-features = false }
+matrix-sdk = { git = "ssh://brewery@pls.lobotomise.me:33/atagen/matrix-rust-sdk", rev = "0f2f982989765b79c39efdc30e86eaafccf69e4a", default-features = false }
 wasm-bindgen-test = "0.3"
 web-sys = { version = "0.3", features = ["SharedWorkerGlobalScope"] }
 gloo-timers = { version = "0.3", features = ["futures"] }

Modified file: crates/malice-worker/src/lib.rs+2 additions−1 deletions@@ -1,6 +1,7 @@
 #![cfg(target_family = "wasm")]
 
 mod account;
+mod trace;
 mod wire;
 
 use std::cell::RefCell;
@@ -151,7 +152,7 @@ impl Host {
             .get(&account)
             .map(|entry| entry.handle.clone());
         if let Some(handle) = handle {
-            let _ = handle.logout().await;
+            let _ = handle.logout(Vec::new()).await;
         }
         self.0.remove_account(&account, Retain::Nothing).await;
         Ok(())

Added file: crates/malice-worker/src/trace.rs+67 additions@@ -0,0 +1,67 @@
+use std::fmt::{self, Write};
+
+use tracing::field::{Field, Visit};
+use tracing::{Event, Level, Subscriber};
+use tracing_subscriber::filter::Targets;
+use tracing_subscriber::layer::{Context, SubscriberExt};
+use tracing_subscriber::util::SubscriberInitExt;
+use tracing_subscriber::{Layer, Registry};
+use wasm_bindgen::prelude::*;
+
+#[wasm_bindgen]
+extern "C" {
+    #[wasm_bindgen(js_namespace = console, js_name = log)]
+    fn console_log(line: &str);
+    #[wasm_bindgen(js_namespace = console, js_name = warn)]
+    fn console_warn(line: &str);
+    #[wasm_bindgen(js_namespace = console, js_name = error)]
+    fn console_error(line: &str);
+}
+
+#[derive(Default)]
+struct Line(String);
+
+impl Visit for Line {
+    fn record_debug(&mut self, field: &Field, value: &dyn fmt::Debug) {
+        if !self.0.is_empty() {
+            self.0.push(' ');
+        }
+        if field.name() == "message" {
+            let _ = write!(self.0, "{value:?}");
+        } else {
+            let _ = write!(self.0, "{}={value:?}", field.name());
+        }
+    }
+}
+
+struct ConsoleLayer;
+
+impl<S: Subscriber> Layer<S> for ConsoleLayer {
+    fn on_event(&self, event: &Event<'_>, _: Context<'_, S>) {
+        let mut line = Line::default();
+        event.record(&mut line);
+        let meta = event.metadata();
+        let text = format!("{} {}: {}", meta.level(), meta.target(), line.0);
+        match *meta.level() {
+            Level::ERROR => console_error(&text),
+            Level::WARN => console_warn(&text),
+            _ => console_log(&text),
+        }
+    }
+}
+
+/// Installs a console subscriber for the given `target=level,...` directives. Blank filters leave tracing off.
+#[wasm_bindgen]
+pub fn init_tracing(filter: &str) {
+    let filter = filter.trim();
+    if filter.is_empty() {
+        return;
+    }
+    let Ok(targets) = filter.parse::<Targets>() else {
+        console_warn(&format!("malice.trace ignored, cannot parse {filter:?}"));
+        return;
+    };
+    let _ = Registry::default()
+        .with(ConsoleLayer.with_filter(targets))
+        .try_init();
+}

Modified file: crates/malice-worker/src/wire.rs+1

@@ -18,6 +18,7 @@ pub fn failure_kind(failure: Failure) -> &'static str {

1818 Failure::Forbidden => "forbidden",

1919 Failure::NotFound => "not_found",

2020 Failure::Conflict => "conflict",

21+ Failure::KeyBackupExists => "key_backup_exists",

2122 Failure::Busy => "busy",

2223 Failure::TooLarge => "too_large",

2324 Failure::Unsupported => "unsupported",

Modified file: web/src/App.svelte+158 additions−29 deletions@@ -3,6 +3,7 @@
   import { fade, fly } from 'svelte/transition';
   import LoginPanel from './lib/LoginPanel.svelte';
   import MentionsInbox from './lib/MentionsInbox.svelte';
+  import MutedIcon from './lib/MutedIcon.svelte';
   import MxcAvatar from './lib/MxcAvatar.svelte';
   import PinButton from './lib/PinButton.svelte';
   import ThreadPane from './lib/ThreadPane.svelte';
@@ -27,6 +28,7 @@
   import { moveBefore, pinnedFirst, sortSpaces } from './lib/rail-order';
   import ImageLightbox from './lib/ImageLightbox.svelte';
   import { lightbox } from './lib/lightbox';
+  import { backStack } from './lib/back-stack';
   import SecurityPanel from './lib/SecurityPanel.svelte';
   import StorageBanner from './lib/StorageBanner.svelte';
   import { canDismissRecovery, recoveryPrompt } from './lib/protection-model';
@@ -86,7 +88,8 @@
     timelines,
     pinnedTimelines,
     pinnedTimelineVersions,
-    verification
+    verification,
+    setRooms
   } from './lib/store';
   import { discardPending, pendingByRoom, queueSend, resetPending, retryPending } from './lib/pending';
   import type { PendingMessage } from './lib/pending';
@@ -97,6 +100,9 @@
   import { loadQuickReactions, quickReactions, saveQuickReactions } from './lib/quick-reactions';
   import { loadKeywords } from './lib/keywords';
   import { startNotifications } from './lib/notifications';
+  import { setRoomMode, setSpaceMuted, spaceMutedRooms, startMuteSync } from './lib/mute';
+  import { isRoomMuted, mutingSpace, type MutedSpaces } from './lib/mute-model';
+  import { loadMutedSpaces, mutedSpaces } from './lib/muted-spaces';
   import {
     linkPreviews,
     loadUrlPreviewSettings,
@@ -119,6 +125,7 @@
     threadWidth
   } from './lib/appearance';
   import SettingsPanel from './lib/SettingsPanel.svelte';
+  import { finePointer, longpress, type PressEvent } from './lib/longpress';
   import { packsForRoom, parseEncryptionState, parseOwnProfile, parseVerificationState, contentPreview, senderLabel } from './lib/types';
   import type { ImagePack, MemberSummary, OwnProfile, PackImage, Person, QuickReaction, ReplyReference, RoomSummary, TimelineEvent, TimelineItem } from './lib/types';
 
@@ -130,6 +137,8 @@
   let membersOpen = false;
   let replyingTo: ReplyReference | null = null;
   let dialog: 'join' | 'create' | 'security' | 'settings' | 'packs' | null = null;
+  let recoveryKeyShown = false;
+  $: if (dialog !== 'security') recoveryKeyShown = false;
   let cloneSource: CloneSource | null = null;
   let joinTarget = '';
   let joinBusy = false;
@@ -190,6 +199,7 @@
       void loadKeywords();
       void loadPinnedThreads();
       void loadPackPreferences();
+      void loadMutedSpaces();
       void loadUrlPreviewSettings();
     }
     wasOnline = online;
@@ -209,13 +219,14 @@
   $: orderedRail = sortSpaces(railSpaces, railOverride);
   $: pinnedRail = orderedRail.filter((s) => s.favourite);
   $: otherRail = orderedRail.filter((s) => !s.favourite);
-  $: unreadSpaces = spacesWithUnread($rooms, spaceParents);
+  $: unreadSpaces = spacesWithUnread($rooms, spaceParents, $spaceMutedRooms);
   $: homeUnread =
     ($mentionsSnapshot?.unread_count ?? 0) > 0 ||
-    $rooms.some((r) => r.direct && !r.space && r.membership === 'Joined' && roomUnread(r) > 0);
+    $rooms.some((r) => r.direct && !r.space && r.membership === 'Joined' && roomUnread(r, $spaceMutedRooms) > 0);
   $: railSelected = selectedSpaceId ? topSpaceOf(selectedSpaceId, spaceParents) : null;
   $: invites = $rooms.filter((r) => r.membership === 'Invited');
   $: query = search.trim().toLowerCase();
+  $: selectedRoomMute = selectedRoom ? muteItem(selectedRoom, $mutedSpaces, $rooms) : null;
   $: selectedSpace = selectedSpaceId ? ($rooms.find((r) => r.room_id === selectedSpaceId) ?? null) : null;
   // While a space's children load (or fail), show no channels rather than the
   // full list — listing everything would falsely imply it belongs to the space.
@@ -246,8 +257,9 @@
   $: hasStart = items.some((i) => i.kind === 'start');
   $: pendingItems = $selectedRoomId ? ($pendingByRoom[$selectedRoomId] ?? []) : [];
 
-  function roomUnread(r: RoomSummary): number {
-    return r.unread_messages + r.unread_mentions;
+  function roomUnread(r: RoomSummary, spaceMuted: Set<string>): number {
+    if (isRoomMuted(r, spaceMuted)) return 0;
+    return r.notification_mode === 'MentionsAndKeywordsOnly' ? r.unread_mentions : r.unread_messages + r.unread_mentions;
   }
 
   function recordRoute(spaceId: string | null, roomId: string | null, view?: string): void {
@@ -261,7 +273,7 @@
     if (roomId) url.searchParams.set('room', roomId);
     const next = `${url.pathname}${url.search}${url.hash}`;
     const current = `${window.location.pathname}${window.location.search}${window.location.hash}`;
-    if (next !== current) window.history.pushState({ spaceId, roomId }, '', next);
+    if (next !== current) backStack.route({ spaceId, roomId }, next);
   }
 
   async function restoreRoute(): Promise<void> {
@@ -297,7 +309,9 @@
   }
 
   onMount(() => {
-    const onPopState = () => void restoreRoute();
+    const onPopState = (ev: PopStateEvent) => {
+      if (!backStack.pop(ev.state)) void restoreRoute();
+    };
     const onAttention = () => queueReadReceipt();
     const hidePointer = (e: KeyboardEvent) => {
       if (e.ctrlKey || e.metaKey || e.altKey || !isEditable(e.target)) return;
@@ -309,12 +323,14 @@
     const movePointer = (e: PointerEvent) => {
       if (e.movementX !== 0 || e.movementY !== 0) showPointer();
     };
+    backStack.init();
     window.addEventListener('popstate', onPopState);
     window.addEventListener('focus', onAttention);
     document.addEventListener('visibilitychange', onAttention);
     window.addEventListener('keydown', hidePointer, true);
     window.addEventListener('pointermove', movePointer);
     window.addEventListener('pointerdown', showPointer);
+    const stopMuteSync = startMuteSync();
     const stopNotifications = startNotifications((roomId) => {
       selectedSpaceId = null;
       spaceChildIds = null;
@@ -323,6 +339,7 @@
     void boot();
     return () => {
       stopNotifications();
+      stopMuteSync();
       window.removeEventListener('popstate', onPopState);
       window.removeEventListener('focus', onAttention);
       document.removeEventListener('visibilitychange', onAttention);
@@ -352,6 +369,7 @@
         void loadKeywords();
         void loadPinnedThreads();
         void loadPackPreferences();
+      void loadMutedSpaces();
         void loadUrlPreviewSettings();
       } else {
         softLogout.set(session.soft_logout ?? null);
@@ -368,7 +386,7 @@
     roomsLoading = true;
     try {
       const res = await getRooms();
-      rooms.set(res.rooms);
+      setRooms(res.rooms);
       pruneSpaceFilter();
     } catch (e) {
       pushBanner(e instanceof Error ? e.message : 'Could not load rooms');
@@ -411,6 +429,7 @@
     void loadKeywords();
     void loadPinnedThreads();
     void loadPackPreferences();
+      void loadMutedSpaces();
     void loadUrlPreviewSettings();
   }
 
@@ -476,12 +495,12 @@
     return parents;
   }
 
-  function spacesWithUnread(all: RoomSummary[], parents: Map<string, string>): Set<string> {
+  function spacesWithUnread(all: RoomSummary[], parents: Map<string, string>, spaceMuted: Set<string>): Set<string> {
     const spaces = all.filter((r) => r.space);
     const ids = new Set(spaces.map((s) => s.room_id));
     const out = new Set<string>();
     for (const room of all) {
-      if (room.space || room.membership !== 'Joined' || roomUnread(room) === 0) continue;
+      if (room.space || room.membership !== 'Joined' || roomUnread(room, spaceMuted) === 0) continue;
       const owners = [...room.parent_spaces, ...spaces.filter((s) => s.children.includes(room.room_id)).map((s) => s.room_id)];
       for (const id of owners) if (ids.has(id)) out.add(topSpaceOf(id, parents));
     }
@@ -730,13 +749,18 @@
   }
 
   const WINDOW_EDGE = 600;
+  let lastScrollTop = 0;
 
   function onTimelineScroll(): void {
     if (!timelineEl) return;
+    const top = timelineEl.scrollTop;
+    const scrolledUp = top < lastScrollTop - 1;
+    lastScrollTop = top;
     if (timelineViewport?.consumeScroll()) return;
-    const gap = timelineEl.scrollHeight - timelineEl.scrollTop - timelineEl.clientHeight;
+    const gap = timelineEl.scrollHeight - top - timelineEl.clientHeight;
     const wasAtBottom = stickToBottom;
-    stickToBottom = gap < 2 && (timelineRows?.atTail() ?? true);
+    stickToBottom = (gap < 2 || (wasAtBottom && !scrolledUp)) && (timelineRows?.atTail() ?? true);
+    if (stickToBottom && gap >= 2) timelineViewport?.scrollToBottom(false);
     farFromLatest = gap > 240 || !(timelineRows?.atTail() ?? true);
     if (stickToBottom && !wasAtBottom) queueReadReceipt();
     timelineViewport?.capture();
@@ -764,13 +788,41 @@
 
   $: void trackTimeline($selectedRoomId, items);
   async function trackTimeline(roomId: string | null, list: TimelineItem[]): Promise<void> {
-    if (!roomId || list.length === 0) return;
-    if (roomId !== $selectedRoomId) return;
+    if (!roomId || roomId !== $selectedRoomId) return;
     await tick();
-    if (roomId !== $selectedRoomId || timelineViewport?.roomId !== roomId) return;
-    if (stickToBottom) timelineViewport.scrollToBottom(!motionActive());
-    else timelineViewport.restore();
-    queueReadReceipt();
+    if (roomId !== $selectedRoomId) return;
+    if (list.length > 0 && timelineViewport?.roomId === roomId) {
+      if (stickToBottom) timelineViewport.scrollToBottom(!motionActive());
+      else timelineViewport.restore();
+      queueReadReceipt();
+    }
+    fillTimeline(roomId);
+  }
+
+  const FILL_PAGES = 20;
+  let fillRoom: string | null = null;
+  let fillPages = 0;
+
+  function fillTimeline(roomId: string): void {
+    if (!timelineEl || roomId !== $selectedRoomId || hasStart || paginateBusy) return;
+    if (timelineEl.scrollHeight - timelineEl.clientHeight > WINDOW_EDGE) return;
+    if (timelineRows?.grow('up')) {
+      anchorGrowth();
+      void tick().then(() => fillTimeline(roomId));
+      return;
+    }
+    if (fillRoom !== roomId) {
+      fillRoom = roomId;
+      fillPages = 0;
+    }
+    if (fillPages >= FILL_PAGES) return;
+    fillPages += 1;
+    const before = ($timelines[roomId] ?? []).length;
+    void paginate()
+      .then(() => tick())
+      .then(() => {
+        if (($timelines[roomId] ?? []).length > before) fillTimeline(roomId);
+      });
   }
 
   function queueReadReceipt(): void {
@@ -1606,13 +1658,43 @@
           { label: 'Peek', action: () => void selectRoom(room.room_id, true) }
         ];
     items.push({ label: room.favourite ? 'Unpin' : room.space ? 'Pin to top' : 'Pin', action: () => void togglePin(room) });
+    const mute = muteItem(room, $mutedSpaces, $rooms);
+    if (mute) items.push(mute);
     items.push({ label: 'Copy link', action: () => copyText(`https://matrix.to/#/${room.canonical_alias ?? room.room_id}`) });
     items.push({ label: 'Copy room ID', action: () => copyText(room.room_id) });
     if (room.membership === 'Joined') items.push({ label: 'Leave', danger: true, divider: true, action: () => void leave(room.room_id) });
     return items;
   }
 
-  function openRoomMenu(ev: MouseEvent, room: RoomSummary): void {
+  function muteItem(room: RoomSummary, spaces: MutedSpaces, all: RoomSummary[]): MenuItem | null {
+    if (room.membership !== 'Joined') return null;
+    if (room.space) {
+      const muted = spaces.spaces.includes(room.room_id);
+      return { label: muted ? 'Unmute space' : 'Mute space', action: () => void changeSpaceMute(room.room_id, !muted) };
+    }
+    const owner = mutingSpace(spaces, all, room.room_id);
+    if (owner) return { label: `Unmute ${roomName(owner)}`, action: () => void changeSpaceMute(owner, false) };
+    const muted = room.notification_mode === 'Mute';
+    return { label: muted ? 'Unmute' : 'Mute', action: () => void changeRoomMute(room.room_id, !muted) };
+  }
+
+  async function changeRoomMute(roomId: string, muted: boolean): Promise<void> {
+    try {
+      await setRoomMode(roomId, muted ? 'Mute' : null);
+    } catch (e) {
+      pushBanner(e instanceof Error ? e.message : 'Could not change notifications');
+    }
+  }
+
+  async function changeSpaceMute(spaceId: string, muted: boolean): Promise<void> {
+    try {
+      await setSpaceMuted(spaceId, muted);
+    } catch (e) {
+      pushBanner(e instanceof Error ? e.message : 'Could not change notifications');
+    }
+  }
+
+  function openRoomMenu(ev: PressEvent, room: RoomSummary): void {
     menu = { items: roomMenuItems(room), x: ev.clientX, y: ev.clientY };
   }
 
@@ -1833,11 +1915,39 @@
     if (roomMenuOpen && !roomMenuEl?.contains(ev.target as Node)) roomMenuOpen = false;
   }
 
+  function dismissLayer(layer: string): void {
+    if (layer === 'drawer') sidebarOpen = false;
+    else if (layer === 'dialog') {
+      if (recoveryKeyShown) backStack.sync('dialog', true, dismissLayer);
+      else dialog = null;
+    }
+    else if (layer === 'clone') cloneSource = null;
+    else if (layer === 'user-card') userCard = null;
+    else if (layer === 'menu') menu = null;
+    else if (layer === 'room-menu') roomMenuOpen = false;
+    else if (layer === 'lightbox') lightbox.set(null);
+    else if (layer === 'members') membersOpen = false;
+    else if (layer === 'thread') void showThread(null);
+    else if (layer === 'pins') pinsExpanded = false;
+  }
+
+  $: backStack.sync('drawer', sidebarOpen && viewportWidth <= 640, dismissLayer);
+  $: backStack.sync('dialog', dialog !== null, dismissLayer);
+  $: backStack.sync('clone', cloneSource !== null, dismissLayer);
+  $: backStack.sync('user-card', userCard !== null, dismissLayer);
+  $: backStack.sync('menu', menu !== null, dismissLayer);
+  $: backStack.sync('room-menu', roomMenuOpen, dismissLayer);
+  $: backStack.sync('lightbox', $lightbox !== null, dismissLayer);
+  $: backStack.sync('members', membersShown && viewportWidth < 1100, dismissLayer);
+  $: backStack.sync('thread', threadShown && viewportWidth < 1100, dismissLayer);
+  $: backStack.sync('pins', pinsExpanded, dismissLayer);
+
   function onKeydown(ev: KeyboardEvent): void {
     if (ev.key === 'Escape') {
       if (roomMenuOpen) roomMenuOpen = false;
-      else if (dialog) dialog = null;
-      else if (membersShown && window.innerWidth < 1100) membersOpen = false;
+      else if (dialog) {
+        if (!recoveryKeyShown) dialog = null;
+      } else if (membersShown && window.innerWidth < 1100) membersOpen = false;
       else if (threadShown && window.innerWidth < 1100) void showThread(null);
       else if (sidebarOpen) sidebarOpen = false;
     }
@@ -2005,6 +2115,9 @@
           </button>
           {#if roomMenuOpen}
             <div class="room-menu" role="menu">
+              {#if selectedRoomMute}
+                <button type="button" role="menuitem" on:click={() => roomMenuAction(() => selectedRoomMute?.action())}>{selectedRoomMute.label}</button>
+              {/if}
               {#if selectedRoom.membership === 'Joined'}
                 <button
                   type="button"
@@ -2049,12 +2162,14 @@
             class:drop-after={dropTarget?.id === space.room_id && dropTarget.after}
             class:pinned={space.favourite}
             class:unread={unreadSpaces.has(space.room_id)}
+            class:muted={$mutedSpaces.spaces.includes(space.room_id)}
             title={space.name}
             aria-label={`Show channels in space ${space.name}`}
             aria-pressed={selectedSpaceId === space.room_id}
-            draggable="true"
+            draggable={$finePointer}
             on:click={() => void selectSpace(space.room_id)}
             on:contextmenu|preventDefault={(ev) => openRoomMenu(ev, space)}
+            use:longpress={(ev) => openRoomMenu(ev, space)}
             on:dragstart={(ev) => startRailDrag(ev, space.room_id)}
             on:dragover={(ev) => overRailSpace(ev, space)}
             on:dragleave={() => dropTarget?.id === space.room_id && (dropTarget = null)}
@@ -2181,12 +2296,15 @@
                     <button
                       type="button"
                       class="room-row"
+                      class:muted={isRoomMuted(room, $spaceMutedRooms)}
                       class:active={$selectedRoomId === room.room_id}
                       on:click={() => void selectRoom(room.room_id)}
                       on:contextmenu|preventDefault={(ev) => openRoomMenu(ev, room)}
+                      use:longpress={(ev) => openRoomMenu(ev, room)}
                     >
                       <MxcAvatar mxc={room.avatar} label={room.name} size={26} shape="rounded" />
                       <span class="room-name"><EmojiText text={room.name} /></span>
+                      {#if isRoomMuted(room, $spaceMutedRooms)}<MutedIcon />{/if}
                       <span
                         class="invite-join"
                         role="button"
@@ -2216,20 +2334,23 @@
                     <button
                       type="button"
                       class="room-row"
+                      class:muted={isRoomMuted(room, $spaceMutedRooms)}
                       class:active={$selectedRoomId === room.room_id}
                       aria-current={$selectedRoomId === room.room_id ? 'true' : undefined}
                       on:click={() => void selectRoom(room.room_id)}
                       on:contextmenu|preventDefault={(ev) => openRoomMenu(ev, room)}
+                      use:longpress={(ev) => openRoomMenu(ev, room)}
                     >
                       <MxcAvatar mxc={room.avatar} label={room.name} size={26} />
                       <span class="room-name"><EmojiText text={room.name} /></span>
-                      {#if roomUnread(room) > 0}
+                      {#if isRoomMuted(room, $spaceMutedRooms)}<MutedIcon />{/if}
+                      {#if roomUnread(room, $spaceMutedRooms) > 0}
                         <span
                           class="badge"
                           class:mention={room.unread_mentions > 0}
-                          aria-label={`${roomUnread(room)} unread`}
+                          aria-label={`${roomUnread(room, $spaceMutedRooms)} unread`}
                         >
-                          {roomUnread(room) > 99 ? '99+' : roomUnread(room)}
+                          {roomUnread(room, $spaceMutedRooms) > 99 ? '99+' : roomUnread(room, $spaceMutedRooms)}
                         </span>
                       {/if}
                     </button>
@@ -2273,20 +2394,23 @@
                     <button
                       type="button"
                       class="room-row"
+                      class:muted={isRoomMuted(room, $spaceMutedRooms)}
                       class:active={$selectedRoomId === room.room_id}
                       aria-current={$selectedRoomId === room.room_id ? 'true' : undefined}
                       on:click={() => void selectRoom(room.room_id)}
                       on:contextmenu|preventDefault={(ev) => openRoomMenu(ev, room)}
+                      use:longpress={(ev) => openRoomMenu(ev, room)}
                     >
                       <MxcAvatar mxc={room.avatar} label={room.name} size={26} shape="rounded" />
                       <span class="room-name"><EmojiText text={room.name} /></span>
-                      {#if roomUnread(room) > 0}
+                      {#if isRoomMuted(room, $spaceMutedRooms)}<MutedIcon />{/if}
+                      {#if roomUnread(room, $spaceMutedRooms) > 0}
                         <span
                           class="badge"
                           class:mention={room.unread_mentions > 0}
-                          aria-label={`${roomUnread(room)} unread`}
+                          aria-label={`${roomUnread(room, $spaceMutedRooms)} unread`}
                         >
-                          {roomUnread(room) > 99 ? '99+' : roomUnread(room)}
+                          {roomUnread(room, $spaceMutedRooms) > 99 ? '99+' : roomUnread(room, $spaceMutedRooms)}
                         </span>
                       {/if}
                     </button>
@@ -2330,13 +2454,16 @@
                     <button
                       type="button"
                       class="room-row"
+                      class:muted={$mutedSpaces.spaces.includes(room.room_id)}
                       class:active={selectedSpaceId === room.room_id}
                       aria-label={`Show channels in space ${room.name}`}
                       on:click={() => void selectSpace(room.room_id)}
                       on:contextmenu|preventDefault={(ev) => openRoomMenu(ev, room)}
+                      use:longpress={(ev) => openRoomMenu(ev, room)}
                     >
                       <MxcAvatar mxc={room.avatar} label={room.name} size={26} shape="rounded" />
                       <span class="room-name"><EmojiText text={room.name} /></span>
+                      {#if $mutedSpaces.spaces.includes(room.room_id)}<MutedIcon />{/if}
                     </button>
                     <PinButton pinned={room.favourite} label={room.name} onToggle={() => void togglePin(room)} />
                   </li>
@@ -2695,6 +2822,7 @@
                           void openUser(member.user_id, rect.left - 308, rect.top, false);
                         }}
                         on:contextmenu|preventDefault={(ev) => void openUser(member.user_id, ev.clientX, ev.clientY, true)}
+                        use:longpress={(ev) => void openUser(member.user_id, ev.clientX, ev.clientY, true)}
                       >
                         <MxcAvatar mxc={member.avatar} label={member.display_name || member.name || member.user_id} seed={member.user_id} size={28} />
                         <span class="member-names">
@@ -2719,7 +2847,7 @@
     {/if}
 
     {#if dialog}
-      <div class="modal-wrap" role="presentation" on:click|self={() => (dialog = null)}>
+      <div class="modal-wrap" role="presentation" on:click|self={() => (dialog = recoveryKeyShown ? dialog : null)}>
         {#if dialog === 'security'}
           <SecurityPanel
             encryptionState={$encryption}
@@ -2727,6 +2855,7 @@
             onAction={() => void loadEncryption()}
             encryptedPreviews={$urlPreviewSettings.encrypted_rooms}
             onEncryptedPreviews={(enabled) => void changeEncryptedPreviews(enabled)}
+            bind:keyShown={recoveryKeyShown}
             on:close={() => (dialog = null)}
           />
         {:else if dialog === 'settings'}

Modified file: web/src/app.css+17 additions−4 deletions@@ -139,6 +139,7 @@
 html, body, #app {
   margin: 0;
   min-height: 100dvh;
+  overscroll-behavior: none;
 }
 
 @keyframes pop-in {
@@ -202,7 +203,7 @@ input, textarea { font: inherit; }
   display: grid;
   grid-template-columns: var(--rail-w) var(--side-w) minmax(0, 1fr) var(--thread-w) var(--members-w);
   grid-template-rows: auto minmax(0, 1fr) auto;
-  height: 100dvh;
+  height: calc(100dvh - var(--kb-inset, 0px));
   overflow: clip;
   transition: grid-template-columns var(--pane-ease);
 }
@@ -353,7 +354,7 @@ input, textarea { font: inherit; }
   padding: 0 10px;
 }
 .side-search input:focus { outline: none; border-color: var(--accent); }
-.side-scroll { order: 1; flex: 1; overflow-y: auto; padding: 6px; min-height: 0; }
+.side-scroll { order: 1; flex: 1; overflow-y: auto; overscroll-behavior: contain; padding: 6px; min-height: 0; }
 .side-h {
   font-size: 10.5px;
   font-weight: 650;
@@ -391,6 +392,10 @@ input, textarea { font: inherit; }
 .rail-space.drop-after { box-shadow: 0 6px 0 -3px var(--accent); }
 .room-row.active { background: color-mix(in srgb, var(--accent) 22%, transparent); color: var(--text); box-shadow: inset 2px 0 0 var(--accent); }
 .room-row:has(.badge) { color: var(--text); font-weight: 600; }
+.room-row.muted .room-name { opacity: 0.55; }
+.room-row.muted:hover .room-name, .room-row.muted.active .room-name { opacity: 0.85; }
+.muted-icon { flex: none; color: var(--muted); opacity: 0.8; }
+.rail-btn.muted:not(.active):not(:hover) { opacity: 0.5; }
 .room-row:focus-visible { outline: 2px solid var(--accent); outline-offset: -2px; }
 .up-row { margin-bottom: 4px; }
 .room-name {
@@ -686,6 +691,7 @@ input, textarea { font: inherit; }
 .timeline {
   flex: 1;
   overflow-y: auto;
+  overscroll-behavior: contain;
   overflow-anchor: none;
   padding: 8px 14px 10px;
   min-height: 0;
@@ -862,7 +868,7 @@ input, textarea { font: inherit; }
   white-space: pre-wrap;
   overflow-wrap: anywhere;
   min-height: calc(var(--ctl-h) - 2px);
-  max-height: min(40vh, 280px);
+  max-height: min(calc((100dvh - var(--kb-inset, 0px)) * 0.4), 280px);
 }
 .composer-field > textarea {
   resize: none;
@@ -930,7 +936,7 @@ input, textarea { font: inherit; }
   border-bottom: 1px solid var(--border);
 }
 .members-head h2 { font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; color: var(--muted); margin: 0; }
-.member-list { list-style: none; margin: 0; padding: 8px 8px 12px; overflow-y: auto; display: flex; flex-direction: column; gap: 2px; }
+.member-list { list-style: none; margin: 0; padding: 8px 8px 12px; overflow-y: auto; overscroll-behavior: contain; display: flex; flex-direction: column; gap: 2px; }
 .member-group { list-style: none; }
 .member-group + .member-group { margin-top: 10px; }
 .member-group-label { display: flex; align-items: center; justify-content: space-between; margin: 4px 8px 3px; color: var(--muted); font-size: 10px; font-weight: 700; letter-spacing: 0.08em; text-transform: uppercase; }
@@ -1167,3 +1173,10 @@ input, textarea { font: inherit; }
   .chat-head { padding-top: calc(8px + env(safe-area-inset-top)); }
   .composer { padding-bottom: calc(12px + env(safe-area-inset-bottom)); }
 }
+.kb-open .composer, .kb-open .account { padding-bottom: 8px; }
+@media (pointer: coarse) {
+  input:not([type='checkbox']):not([type='radio']):not([type='range']):not([type='file']), textarea, select { font-size: 16px; }
+  .composer-field > textarea, .composer-field > .composer-marks { font-size: 16px; line-height: 20px; }
+  :root { --ctl-h: 40px; }
+  .room-row { min-height: 40px; }
+}

Modified file: web/src/lib/MentionsInbox.svelte+1−1

@@ -484,7 +484,7 @@

484484 article { border:1px solid var(--border); border-radius:.6rem; padding:.5rem; margin-bottom:.6rem; }

485485 article.unread { border-color:var(--accent); }

486486 .entry-head,.entry-actions,.labels { display:flex; align-items:center; gap:.5rem; flex-wrap:wrap; }

487- .entry-head .room { font-weight:600; }

487+ .entry-head .room { font-weight:600; text-align:left; }

488488 .entry-head time,.entry-head span { color:var(--muted); font-size:.8rem; }

489489 .entry-head time { margin-left:auto; }

490490 .labels { margin:.35rem 0; color:var(--muted); font-size:.78rem; }

Modified file: web/src/lib/MessageRow.svelte+49 additions−8 deletions@@ -6,7 +6,9 @@
   import Emoji from './Emoji.svelte';
   import EmojiText from './EmojiText.svelte';
   import MessageText from './MessageText.svelte';
+  import { longpress } from './longpress';
   import ReactionPicker from './ReactionPicker.svelte';
+  import { backStack, instanceLayerId } from './back-stack';
   import LinkCard from './LinkCard.svelte';
   import { afterUpdate, onDestroy } from 'svelte';
   import { dissolve, expand, rowIn, rowOut, settleHeight } from './motion';
@@ -55,7 +57,7 @@
     return `${Math.floor(lag / 86400000)}d`;
   }
 
-  function openUser(ev: MouseEvent, menu: boolean): void {
+  function openUser(ev: Pick<MouseEvent, 'clientX' | 'clientY' | 'currentTarget'>, menu: boolean): void {
     if (!onUser) return;
     const rect = (ev.currentTarget as HTMLElement).getBoundingClientRect();
     onUser(event.sender.user_id, menu ? ev.clientX : rect.left, menu ? ev.clientY : rect.bottom + 4, menu);
@@ -84,6 +86,7 @@
   let hovered = false;
   let focused = false;
   let reactorKey: string | null = null;
+  let reactorPinned = false;
   let pickerOpen = false;
   let pickerStyle = '';
 
@@ -161,6 +164,11 @@
   $: syncSelectionListeners(selected);
   $: syncPickerListeners(pickerOpen);
 
+  const pickerLayer = instanceLayerId('reaction-picker');
+  const dismissPicker = () => (pickerOpen = false);
+  $: backStack.sync(pickerLayer, pickerOpen, dismissPicker);
+  onDestroy(() => backStack.sync(pickerLayer, false, dismissPicker));
+
   function onEscape(e: KeyboardEvent) {
     if (e.key === 'Escape') select(false);
   }
@@ -194,6 +202,23 @@
     selectedRow.update((o) => (o === owner ? null : o));
   });
 
+  function pinReactors(key: string) {
+    reactorPinned = true;
+    reactorKey = key;
+  }
+
+  function unpinReactors() {
+    if (!reactorPinned) return;
+    reactorPinned = false;
+    reactorKey = null;
+  }
+
+  function holdMore(p: { clientX: number; clientY: number }) {
+    if (readOnly || !interactive || !event.event_id) return;
+    select(true);
+    onMore?.(event, p.clientX, p.clientY);
+  }
+
   function select(on: boolean) {
     selectedRow.update((o) => (on ? owner : o === owner ? null : o));
   }
@@ -360,8 +385,9 @@
   out:rowOut|global
   bind:this={row}
   on:click={toggleSelected}
+  use:longpress={{ on: holdMore, allowSelection: true, ignore: 'a, button, input, img, video, audio, .text, .picker-pop' }}
   on:keydown={onRowKeydown}
-  on:pointerenter={() => (hovered = true)}
+  on:pointerenter={(e) => (hovered = e.pointerType === 'mouse')}
   on:pointerleave={() => (hovered = false)}
   on:focusin={() => (focused = true)}
   on:focusout={onFocusOut}
@@ -483,6 +509,7 @@
       aria-hidden="true"
       on:click|stopPropagation={(ev) => openUser(ev, false)}
       on:contextmenu|preventDefault|stopPropagation={(ev) => openUser(ev, true)}
+      use:longpress={(ev) => openUser(ev, true)}
     >
       {#if senderAvatar}
         <MxcAvatar mxc={senderAvatar} label={name} size={34} eager />
@@ -507,6 +534,7 @@
           style={`color:hsl(${senderHue(event.sender.user_id)} 70% var(--name-lightness))`}
           on:click|stopPropagation={(ev) => openUser(ev, false)}
           on:contextmenu|preventDefault|stopPropagation={(ev) => openUser(ev, true)}
+          use:longpress={(ev) => openUser(ev, true)}
         >
           <EmojiText text={displayName} />
         </button>
@@ -560,10 +588,11 @@
             aria-label={`${r.shortcode ? `:${r.shortcode}:` : r.key.startsWith('mxc://') ? 'custom emote' : r.key}, ${r.count} reaction${r.count === 1 ? '' : 's'}`}
             disabled={readOnly || !event.event_id || reacting}
             aria-describedby={reactorKey === r.key ? `${itemId}-reactors-${r.key}` : undefined}
-            on:pointerenter={() => (reactorKey = r.key)}
-            on:pointerleave={() => (reactorKey = null)}
+            on:pointerenter={(e) => e.pointerType === 'mouse' && (reactorKey = r.key)}
+            on:pointerleave={() => !reactorPinned && (reactorKey = null)}
+            use:longpress={() => pinReactors(r.key)}
             on:focus={() => (reactorKey = r.key)}
-            on:blur={() => (reactorKey = null)}
+            on:blur={() => !reactorPinned && (reactorKey = null)}
             on:click={() => event.event_id && onReact(event.event_id, r.key)}
           >
             {#if r.image}
@@ -610,12 +639,18 @@
   </div>
 </div>
 
+<svelte:window on:pointerdown={unpinReactors} />
+
 <style>
   .msg { position: relative; display: flex; flex-wrap: wrap; gap: 0 10px; padding: var(--msg-gap, 3px) 0; }
   .reply-line { position: relative; flex: 0 0 100%; min-width: 0; padding-left: 44px; }
   .reply-line.linked::before { content: ''; position: absolute; left: 16px; top: 50%; bottom: -3px; width: 24px; border-left: 2px solid var(--border); border-top: 2px solid var(--border); border-top-left-radius: 8px; pointer-events: none; }
-  .msg:hover, .msg.selected { background: var(--hover-faint); }
-  .msg:hover .hover-time, .msg.selected .hover-time { opacity: 1; }
+  .msg.selected { background: var(--hover-faint); }
+  .msg.selected .hover-time { opacity: 1; }
+  @media (hover: hover) {
+    .msg:hover { background: var(--hover-faint); }
+    .msg:hover .hover-time { opacity: 1; }
+  }
   .msg-foot { display: flex; align-items: center; gap: 8px; }
   .thread-chip { display: inline-flex; align-items: baseline; gap: 8px; margin-top: 4px; padding: 3px 8px; border: 1px solid var(--border); border-radius: var(--r-sm); background: var(--bg-soft); color: var(--text); font: inherit; font-size: 12px; cursor: pointer; transition: border-color var(--pop), background var(--pop); }
   .thread-chip:hover { border-color: var(--accent); background: var(--hover-faint); }
@@ -638,7 +673,7 @@
   .msg-head { display: flex; align-items: baseline; gap: 8px; }
   .federation-lag { display: inline-flex; align-items: center; gap: 3px; color: var(--danger); font-size: 11px; font-weight: 650; }
   .federation-lag > span:last-child { display: inline-grid; place-items: center; min-width: 24px; height: 18px; padding: 0 4px; border: 1px solid currentColor; border-radius: 999px; }
-  .sender { font-weight: 650; font-size: 13.5px; padding: 0; border: none; background: none; font-family: inherit; cursor: pointer; }
+  .sender { font-weight: 650; font-size: 13.5px; padding: 0; border: none; background: none; font-family: inherit; text-align: left; cursor: pointer; }
   .sender:hover { text-decoration: underline; }
   .user-hit { flex: none; align-self: flex-start; padding: 0; border: none; background: none; border-radius: 50%; cursor: pointer; }
   .time, .edited { color: var(--muted); font-size: 11.5px; }
@@ -739,5 +774,11 @@
   .actions button:hover:not(:disabled) { border-color: var(--border); background: var(--hover); }
   .actions button:disabled { opacity: 0.4; cursor: default; }
   .emote { width: 1.3em; height: 1.3em; object-fit: contain; vertical-align: middle; }
+  @media (pointer: coarse) {
+    .actions button { min-width: 36px; min-height: 40px; font-size: 16px; }
+    .actions { top: auto; bottom: calc(100% - 18px); right: 6px; flex-wrap: wrap; justify-content: flex-end; max-width: calc(100% - 12px); }
+    .reaction::after, .sender::after, .thread-chip::after { content: ''; position: absolute; inset: -9px -2px; }
+    .sender, .thread-chip { position: relative; }
+  }
   .picker-pop { position: fixed; z-index: 60; width: 320px; max-width: calc(100vw - 16px); animation: pop-in var(--pop); }
 </style>

Modified file: web/src/lib/SearchView.svelte+1−1

@@ -126,7 +126,7 @@

126126

   .search-bar input { flex: 1; min-width: 0; background: var(--bg-soft); border: 1px solid var(--border); border-radius: var(--r-md); color: var(--text); padding: 8px 10px; font: inherit; }

127127 .search-bar input:focus { outline: none; border-color: var(--accent); }

128128 .scopes { display: flex; gap: 6px; padding: 0 16px 10px; border-bottom: 1px solid var(--border); }

129

-  .scopes button { border: 1px solid var(--border); background: transparent; color: var(--muted); border-radius: var(--r-sm); padding: 3px 10px; font: inherit; font-size: 12.5px; cursor: pointer; transition: color var(--pop), border-color var(--pop), background var(--pop); }

129

+  .scopes button { text-align: left; border: 1px solid var(--border); background: transparent; color: var(--muted); border-radius: var(--r-sm); padding: 3px 10px; font: inherit; font-size: 12.5px; cursor: pointer; transition: color var(--pop), border-color var(--pop), background var(--pop); }

130130 .scopes button:hover { color: var(--text); }

131131

   .scopes button.active { color: var(--text); border-color: var(--accent); background: color-mix(in srgb, var(--accent) 16%, transparent); }

132132 .search-error { margin: 10px 16px 0; color: var(--danger); font-size: 13px; }

Modified file: web/src/lib/SecurityPanel.svelte+197 additions−21 deletions@@ -1,11 +1,15 @@
 <script lang="ts">
-  import { createEventDispatcher, onMount } from 'svelte';
+  import { createEventDispatcher, onDestroy, onMount } from 'svelte';
   import {
+    disableRecovery,
+    isBackupExists,
     recoverEncryption,
     runKeyBackup,
+    setupRecovery,
     startVerification,
     type KeyBackupAction,
     verifyEncryption,
+    verifyRecoveryKey,
     type VerifyAction
   } from './api';
   import { pushBanner } from './store';
@@ -19,15 +23,103 @@
   export let verificationState: VerificationState | null;
   export let onAction: () => void = () => undefined;
   export let encryptedPreviews = false;
+  export let keyShown = false;
   export let onEncryptedPreviews: (enabled: boolean) => void = () => undefined;
 
   let recoveryKey = '';
   let recoveryInput: HTMLInputElement | undefined;
 
   onMount(() => {
-    if (encryptionState && encryptionState.recovery !== 'Enabled') recoveryInput?.focus();
+    if (encryptionState?.recovery === 'Incomplete') recoveryInput?.focus();
   });
-  let busy: VerifyAction | KeyBackupAction | 'recover' | 'start' | null = null;
+  onDestroy(() => {
+    revealedKey = null;
+  });
+  let busy: VerifyAction | KeyBackupAction | 'recover' | 'start' | 'setup' | 'verify-key' | null = null;
+
+  let passphrase = '';
+  let showPassphrase = false;
+  let revealedKey: string | null = null;
+  let backupExists = false;
+  let confirming: 'reset' | 'off' | 'restart' | null = null;
+  let verifyInput = '';
+  let verifyResult: boolean | null = null;
+  let copied = false;
+
+  $: keyShown = revealedKey !== null;
+  $: settingUp = encryptionState?.recovery === 'Enabling' || encryptionState?.key_backup === 'Creating';
+
+  async function createKey(op: 'enable_recovery' | 'reset_recovery_key', startOver = false): Promise<void> {
+    if (busy) return;
+    busy = 'setup';
+    try {
+      if (startOver) await runKeyBackup('disable_key_backup', true);
+      revealedKey = await setupRecovery(op, passphrase.trim() || null);
+      passphrase = '';
+      showPassphrase = false;
+      backupExists = false;
+      confirming = null;
+      copied = false;
+      onAction();
+    } catch (e) {
+      if (op === 'enable_recovery' && isBackupExists(e)) {
+        backupExists = true;
+        confirming = null;
+      } else {
+        pushBanner(e instanceof Error ? e.message : 'Recovery setup failed');
+      }
+    } finally {
+      busy = null;
+    }
+  }
+
+  async function turnOffRecovery(): Promise<void> {
+    if (busy) return;
+    busy = 'setup';
+    try {
+      await disableRecovery();
+      confirming = null;
+      onAction();
+    } catch (e) {
+      pushBanner(e instanceof Error ? e.message : 'Could not turn off recovery');
+    } finally {
+      busy = null;
+    }
+  }
+
+  async function checkKey(): Promise<void> {
+    const key = verifyInput.trim();
+    if (!key || busy) return;
+    busy = 'verify-key';
+    try {
+      verifyResult = await verifyRecoveryKey(key);
+      verifyInput = '';
+    } catch (e) {
+      pushBanner(e instanceof Error ? e.message : 'Could not check the key');
+    } finally {
+      busy = null;
+    }
+  }
+
+  async function copyKey(): Promise<void> {
+    if (!revealedKey) return;
+    try {
+      await navigator.clipboard.writeText(revealedKey);
+      copied = true;
+    } catch {
+      pushBanner('Could not copy the key');
+    }
+  }
+
+  function downloadKey(): void {
+    if (!revealedKey) return;
+    const url = URL.createObjectURL(new Blob([revealedKey + '\n'], { type: 'text/plain' }));
+    const link = document.createElement('a');
+    link.href = url;
+    link.download = 'malice-recovery-key.txt';
+    link.click();
+    URL.revokeObjectURL(url);
+  }
 
   let confirmOff = false;
 
@@ -103,7 +195,7 @@
 <div class="modal" role="dialog" aria-modal="true" aria-label="Encryption and verification">
   <div class="modal-tabs" role="tablist" aria-label="Security">
     <button type="button" role="tab" aria-selected="true" class="active">Security</button>
-    <button type="button" class="icon-btn modal-x" aria-label="Close security dialog" on:click={() => dispatch('close')}>
+    <button type="button" class="icon-btn modal-x" aria-label="Close security dialog" disabled={revealedKey !== null} on:click={() => dispatch('close')}>
       <span aria-hidden="true">✕</span>
     </button>
   </div>
@@ -156,23 +248,98 @@
 
   <section aria-label="Recovery">
     <h3 class="sec-h">Recovery</h3>
-    <form on:submit|preventDefault={recover}>
-      <label class="field">
-        <span>Recovery key</span>
-        <input
-          type="password"
-          autocomplete="off"
-          spellcheck="false"
-          placeholder="EsT4 …"
-          bind:value={recoveryKey}
-          bind:this={recoveryInput}
-          disabled={busy !== null}
-        />
-      </label>
-      <button type="submit" class="primary-btn wide" disabled={busy !== null || !recoveryKey.trim()}>
-        {busy === 'recover' ? 'Sending…' : 'Recover with key'}
-      </button>
-    </form>
+    {#if revealedKey}
+      <code class="key" aria-label="Recovery key">{revealedKey}</code>
+      <div class="row">
+        <button type="button" class="ghost-btn" on:click={() => void copyKey()}>{copied ? 'Copied' : 'Copy'}</button>
+        <button type="button" class="ghost-btn" on:click={downloadKey}>Download</button>
+        <button type="button" class="primary-btn" on:click={() => (revealedKey = null)}>I saved it</button>
+      </div>
+    {:else if settingUp || busy === 'setup'}
+      <p class="sec-line muted">Setting up recovery…</p>
+    {:else}
+      {#if encryptionState?.recovery === 'Enabled'}
+        <form class="inline" on:submit|preventDefault={checkKey}>
+          <label class="field">
+            <span>Verify key</span>
+            <input type="password" autocomplete="off" spellcheck="false" bind:value={verifyInput} on:input={() => (verifyResult = null)} disabled={busy !== null} />
+          </label>
+          <button type="submit" class="ghost-btn" disabled={busy !== null || !verifyInput.trim()}>
+            {busy === 'verify-key' ? 'Checking…' : 'Check'}
+          </button>
+          {#if verifyResult !== null}
+            <span class="pill" class:ok={verifyResult} class:warn={!verifyResult}>{verifyResult ? 'matches' : 'wrong key'}</span>
+          {/if}
+        </form>
+      {:else if encryptionState?.recovery === 'Disabled' && !backupExists}
+        {#if showPassphrase}
+          <label class="field">
+            <span>Passphrase</span>
+            <input type="password" autocomplete="new-password" spellcheck="false" bind:value={passphrase} disabled={busy !== null} />
+          </label>
+        {/if}
+        <div class="row">
+          <button type="button" class="primary-btn" disabled={busy !== null} on:click={() => void createKey('enable_recovery')}>Set up recovery</button>
+          {#if !showPassphrase}
+            <button type="button" class="link" on:click={() => (showPassphrase = true)}>Use a passphrase</button>
+          {/if}
+        </div>
+      {/if}
+
+      {#if backupExists || encryptionState?.recovery === 'Incomplete' || encryptionState?.recovery === 'Unknown'}
+        {#if backupExists}
+          <p class="sec-line">A key backup already exists for this account.</p>
+        {/if}
+        <form on:submit|preventDefault={recover}>
+          <label class="field">
+            <span>Recovery key</span>
+            <input
+              type="password"
+              autocomplete="off"
+              spellcheck="false"
+              placeholder="EsT4 …"
+              bind:value={recoveryKey}
+              bind:this={recoveryInput}
+              disabled={busy !== null}
+            />
+          </label>
+          <button type="submit" class="primary-btn wide" disabled={busy !== null || !recoveryKey.trim()}>
+            {busy === 'recover' ? 'Sending…' : 'Recover with key'}
+          </button>
+        </form>
+      {/if}
+
+      <div class="row">
+        {#if backupExists}
+          {#if confirming === 'restart'}
+            <button type="button" class="ghost-btn danger" disabled={busy !== null} on:click={() => void createKey('enable_recovery', true)}>Delete old backup and start over</button>
+            <button type="button" class="ghost-btn" on:click={() => (confirming = null)}>Cancel</button>
+          {:else}
+            <button type="button" class="ghost-btn danger" on:click={() => (confirming = 'restart')}>Start over</button>
+          {/if}
+        {:else if encryptionState?.recovery === 'Enabled' || encryptionState?.recovery === 'Incomplete'}
+          {#if confirming === 'reset'}
+            <button type="button" class="ghost-btn danger" disabled={busy !== null} on:click={() => void createKey('reset_recovery_key')}>Reset key</button>
+            <button type="button" class="ghost-btn" on:click={() => (confirming = null)}>Cancel</button>
+          {:else if confirming === 'off'}
+            <button type="button" class="ghost-btn danger" disabled={busy !== null} on:click={() => void turnOffRecovery()}>Turn off recovery</button>
+            <button type="button" class="ghost-btn" on:click={() => (confirming = null)}>Cancel</button>
+          {:else}
+            <button type="button" class="ghost-btn" on:click={() => (confirming = 'reset')}>Reset recovery key</button>
+            {#if encryptionState.recovery === 'Enabled'}
+              <button type="button" class="ghost-btn danger" on:click={() => (confirming = 'off')}>Turn off recovery</button>
+            {/if}
+          {/if}
+        {/if}
+      </div>
+      {#if confirming === 'restart'}
+        <p class="confirm">The old backup is deleted from the server. Encrypted history that only it could unlock becomes unreadable.</p>
+      {:else if confirming === 'reset'}
+        <p class="confirm">The current recovery key stops working.</p>
+      {:else if confirming === 'off'}
+        <p class="confirm">Lost devices can no longer restore message keys.</p>
+      {/if}
+    {/if}
   </section>
 
   <section aria-label="Verification">
@@ -281,5 +448,14 @@
   }
   .emoji { font-size: 24px; }
   .emoji-name { font-size: 11px; color: var(--muted); text-align: center; }
+  .key {
+    display: block; font-family: ui-monospace, monospace; font-size: 14px; letter-spacing: 0.04em;
+    background: var(--bg-soft); border: 1px solid var(--border); border-radius: var(--r-sm);
+    padding: 10px 12px; margin: 0 0 8px; user-select: all; overflow-wrap: anywhere;
+  }
+  form.inline { display: flex; align-items: flex-end; gap: 8px; flex-wrap: wrap; }
+  form.inline .field { flex: 1; min-width: 160px; margin-bottom: 0; }
+  .confirm { font-size: 12.5px; color: var(--danger); margin: 8px 0 0; }
+  .link { background: none; border: 0; padding: 0; color: var(--muted); font-size: 12.5px; cursor: pointer; text-decoration: underline; }
   .decimals { font-size: 17px; font-weight: 700; letter-spacing: 0.06em; }
 </style>

Modified file: web/src/lib/api.ts+19 additions@@ -15,6 +15,7 @@ export type { HistoryRequest } from './transport';
 import { createDeviceTransport } from 'malice:device-transport';
 
 import { ApiError } from './transport';
+import { isRecord } from './guards';
 export { ApiError } from './transport';
 export type { SessionInfo, SoftLogout, VerifyAction } from './transport';
 
@@ -167,6 +168,24 @@ export async function runKeyBackup(op: KeyBackupAction, deleteFromServer = false
   await transport.command(op === 'disable_key_backup' ? { op, delete_from_server: deleteFromServer } : { op });
 }
 
+export async function setupRecovery(op: 'enable_recovery' | 'reset_recovery_key', passphrase: string | null): Promise<string> {
+  const reply = await transport.command({ op, passphrase });
+  const key = isRecord(reply) ? reply['recovery_key'] : null;
+  if (typeof key !== 'string' || !key) throw new Error('No recovery key returned');
+  return key;
+}
+
+export const isBackupExists = (e: unknown): boolean => e instanceof ApiError && e.kind === 'key_backup_exists';
+
+export async function disableRecovery(): Promise<void> {
+  await transport.command({ op: 'disable_recovery' });
+}
+
+export async function verifyRecoveryKey(recovery_key: string): Promise<boolean> {
+  const reply = await transport.command({ op: 'verify_recovery_key', recovery_key });
+  return isRecord(reply) && reply['valid'] === true;
+}
+
 export function startVerification(): Promise<void> {
   return transport.startVerification();
 }

Modified file: web/src/lib/motion.ts+1−1

@@ -34,7 +34,7 @@ function reveal(node: Element, ms: number, axis: 'x' | 'y' = 'y'): TransitionCon

3434 if (duration === 0) return { duration: 0 };

3535 noteBusy(duration);

3636 const base = slide(node, { duration, easing: cubicOut, axis });

37- return { duration, easing: cubicOut, css: (t, u) => `${base.css?.(t, u) ?? ''}opacity: ${t};` };

37+ return { duration, easing: cubicOut, css: (t, u) => `${base.css?.(t, u) ?? ''};opacity: ${t};` };

3838 }

3939

4040 export function rowIn(node: Element): TransitionConfig {

Modified file: web/src/lib/notifications.ts+6 additions−5 deletions@@ -12,7 +12,8 @@ import {
   sourceFromTimeline,
   type NotificationPlan
 } from './notification-model';
-import { rooms, selectedRoomId, sessionUser, timelines } from './store';
+import { effectiveRooms } from './mute';
+import { selectedRoomId, sessionUser, timelines } from './store';
 import type { RoomSummary } from './types';
 
 const SETTLE_MS = 300;
@@ -139,7 +140,7 @@ export function startNotifications(openRoom: (roomId: string) => void): () => vo
     clearTimeout(waiting.get(roomId)?.timer);
     const timer = setTimeout(() => {
       waiting.delete(roomId);
-      const room = get(rooms).find((r) => r.room_id === roomId);
+      const room = get(effectiveRooms).find((r) => r.room_id === roomId);
       if (!room || !active() || watched(roomId) || notifyingCount(room) === 0) return;
       const source = sourceFromTimeline(get(timelines)[roomId]) ?? sourceFromSummary(room);
       notified.add(roomId);
@@ -167,9 +168,9 @@ export function startNotifications(openRoom: (roomId: string) => void): () => vo
     clearRead(list);
   };
 
-  const unsubscribeRooms = rooms.subscribe(onRooms);
-  const unsubscribeEnabled = notificationsEnabled.subscribe(() => onRooms(get(rooms)));
-  const onAttention = () => clearRead(get(rooms));
+  const unsubscribeRooms = effectiveRooms.subscribe(onRooms);
+  const unsubscribeEnabled = notificationsEnabled.subscribe(() => onRooms(get(effectiveRooms)));
+  const onAttention = () => clearRead(get(effectiveRooms));
   const onMessage = (ev: MessageEvent) => {
     const data = ev.data as { type?: unknown; roomId?: unknown } | null;
     if (data?.type === OPEN_ROOM_MESSAGE && typeof data.roomId === 'string') openRoom(data.roomId);

Modified file: web/src/lib/store.ts+3 additions−1 deletions@@ -12,6 +12,7 @@ import { loadKeywords, resetKeywords } from './keywords';
 import { resetLinkPreviews } from './link-previews';
 import { resetQuickReactions } from './quick-reactions';
 import { resetPackPreferences } from './pack-preferences';
+import { resetMutedSpaces } from './muted-spaces';
 import {
   EMPTY_IMAGE_PACKS,
   parseEncryptionState,
@@ -148,6 +149,7 @@ export function resetClientState(): void {
   imagePacks.set(EMPTY_IMAGE_PACKS);
   resetQuickReactions();
   resetPackPreferences();
+  resetMutedSpaces();
   resetLinkPreviews();
   resetKeywords();
   onlineSince = 0;
@@ -201,7 +203,7 @@ function identifyRoom(raw: unknown): string | null {
   return isRecord(raw) && typeof raw['room_id'] === 'string' ? raw['room_id'] : null;
 }
 
-function setRooms(raw: unknown): void {
+export function setRooms(raw: unknown): void {
   const next = parseShared(roomsCache, raw, parseRoomSummary, identifyRoom);
   if (!sameList(get(rooms), next)) rooms.set(next);
 }

Added file: web/src/lib/trace-name.ts+19 additions@@ -0,0 +1,19 @@
+const BASE = 'malice';
+const PREFIX = `${BASE} trace=`;
+
+export function workerName(filter: string | null): string {
+  const trimmed = filter?.trim();
+  return trimmed ? PREFIX + trimmed : BASE;
+}
+
+export function traceFilter(name: string): string {
+  return name.startsWith(PREFIX) ? name.slice(PREFIX.length) : '';
+}
+
+export function pageTraceFilter(): string | null {
+  try {
+    return localStorage.getItem('malice.trace');
+  } catch {
+    return null;
+  }
+}

Modified file: web/src/lib/transport-http.ts+4 additions−1 deletions@@ -5,6 +5,7 @@ import { ApiError, type CommandRequest, type SendKind, type SessionInfo, type Tr
 
 async function parseFailure(res: Response, fallback: string): Promise<never> {
   let message = fallback;
+  let kind: string | null = null;
   try {
     const text = await res.text();
     if (text) {
@@ -12,6 +13,8 @@ async function parseFailure(res: Response, fallback: string): Promise<never> {
         const data = JSON.parse(text) as unknown;
         if (typeof data === 'object' && data !== null) {
           const m = (data as Record<string, unknown>)['message'] ?? (data as Record<string, unknown>)['error'];
+          const k = (data as Record<string, unknown>)['kind'];
+          if (typeof k === 'string') kind = k;
           if (typeof m === 'string' && m) message = m;
           else message = text.slice(0, 300);
         } else if (typeof data === 'string' && data) {
@@ -26,7 +29,7 @@ async function parseFailure(res: Response, fallback: string): Promise<never> {
   } catch {
     // keep fallback
   }
-  throw new ApiError(res.status, `${res.status}: ${message}`);
+  throw new ApiError(res.status, `${res.status}: ${message}`, kind);
 }
 
 async function json<T>(res: Response, fallback: string): Promise<T> {

Modified file: web/src/lib/transport-worker.ts+7 additions−3 deletions@@ -3,9 +3,10 @@ import type { MentionKey, MentionsBoundary, MentionsPage, SavedMentionContext } 
 import type { MemberSummary, RoomSummary } from './types';
 import { ApiError, type CommandRequest, type SendKind, type SessionInfo, type SoftLogout, type Transport, type UploadExtras, type VerifyAction } from './transport';
 import { statusForKind } from './wire-status';
+import { pageTraceFilter, workerName } from './trace-name';
 
 function toApiError(error: { kind: string; message: string }): ApiError {
-  return new ApiError(statusForKind(error.kind), error.message);
+  return new ApiError(statusForKind(error.kind), error.message, error.kind);
 }
 
 type Pending = { resolve: (value: unknown) => void; reject: (error: unknown) => void };
@@ -39,13 +40,16 @@ class WorkerClient {
     if (typeof SharedWorker !== 'undefined') {
       const worker = new SharedWorker(new URL('../worker/worker.ts', import.meta.url), {
         type: 'module',
-        name: 'malice'
+        name: workerName(pageTraceFilter())
       });
       worker.port.onmessage = (ev: MessageEvent) => this.handleMessage(ev.data);
       worker.port.start();
       this.port = worker.port;
     } else {
-      const worker = new Worker(new URL('../worker/worker.ts', import.meta.url), { type: 'module' });
+      const worker = new Worker(new URL('../worker/worker.ts', import.meta.url), {
+        type: 'module',
+        name: workerName(pageTraceFilter())
+      });
       worker.onmessage = (ev: MessageEvent) => this.handleMessage(ev.data);
       this.port = worker;
     }

Modified file: web/src/lib/transport.ts+7 additions−1 deletions@@ -3,10 +3,12 @@ import type { MentionKey, MentionsBoundary, MentionsPage, SavedMentionContext } 
 
 export class ApiError extends Error {
   status: number;
-  constructor(status: number, message: string) {
+  kind: string | null;
+  constructor(status: number, message: string, kind: string | null = null) {
     super(message);
     this.name = 'ApiError';
     this.status = status;
+    this.kind = kind;
   }
 }
 
@@ -36,10 +38,14 @@ export type CommandRequest =
   | { op: 'set_room_display_name'; room_id: string; name: string | null }
   | { op: 'set_room_avatar'; room_id: string; mxc: string | null }
   | { op: 'mute'; room_id: string; user_id: string; muted: boolean }
+  | { op: 'set_room_notification_mode'; room_id: string; mode: 'AllMessages' | 'MentionsAndKeywordsOnly' | 'Mute' | null }
   | { op: 'notification_keywords' }
   | { op: 'create_key_backup' | 'enable_key_backup' }
   | { op: 'disable_key_backup'; delete_from_server?: boolean }
   | { op: 'recover_key_backup'; recovery_key: string }
+  | { op: 'enable_recovery' | 'reset_recovery_key'; passphrase?: string | null }
+  | { op: 'disable_recovery' }
+  | { op: 'verify_recovery_key'; recovery_key: string }
   | { op: 'search'; query: string; scope: unknown; limit: number }
   | { op: 'search_more'; search_id: string; cursor: string; limit: number }
   | { op: 'close_search'; search_id: string }

Modified file: web/src/lib/types.ts+2 additions−2 deletions@@ -141,7 +141,7 @@ export function parseMediaAttachment(raw: unknown): MediaAttachment | null {
   };
 }
 
-export type RecoveryState = 'Unknown' | 'Disabled' | 'Incomplete' | 'Enabled';
+export type RecoveryState = 'Unknown' | 'Disabled' | 'Incomplete' | 'Enabled' | 'Enabling';
 
 export interface EncryptionState {
   device_id: string;
@@ -151,7 +151,7 @@ export interface EncryptionState {
 }
 
 function parseRecoveryState(raw: unknown): RecoveryState {
-  return raw === 'Enabled' || raw === 'Disabled' || raw === 'Incomplete' ? raw : 'Unknown';
+  return raw === 'Enabled' || raw === 'Disabled' || raw === 'Incomplete' || raw === 'Enabling' ? raw : 'Unknown';
 }
 
 export function parseEncryptionState(raw: unknown): EncryptionState | null {

Modified file: web/src/lib/wire-status.ts+2 additions−1 deletions@@ -9,7 +9,8 @@ export const STATUS_BY_KIND: Record<string, number> = {
   upstream: 502,
   unauthorized: 401,
   forbidden: 403,
-  store_in_use: 409
+  store_in_use: 409,
+  key_backup_exists: 409
 };
 
 export function statusForKind(kind: string): number {

Modified file: web/src/worker/worker.ts+3 additions−1 deletions@@ -1,5 +1,6 @@
-import init, { Host } from './pkg/malice_worker.js';
+import init, { Host, init_tracing } from './pkg/malice_worker.js';
 import { isRecord } from '../lib/guards';
+import { traceFilter } from '../lib/trace-name';
 import { EventCoalescer } from './coalesce';
 import {
   createAccount,
@@ -123,6 +124,7 @@ async function restoreAccount(account: AccountInfo): Promise<void> {
 
 const ready = (async () => {
   await init();
+  init_tracing(traceFilter((self as unknown as { name: string }).name));
   host = new Host(onHostEvent, onHostFatal);
   for (const account of await listAccounts()) await restoreAccount(account);
 })();

Added file: web/test/trace-name.test.ts+14 additions@@ -0,0 +1,14 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { traceFilter, workerName } from '../src/lib/trace-name.ts';
+
+test('worker name carries the trace filter', () => {
+  const filter = 'matrix_sdk::event_cache=debug,matrix_sdk::sliding_sync=debug';
+  assert.equal(traceFilter(workerName(filter)), filter);
+});
+
+test('blank filters keep the plain worker name', () => {
+  assert.equal(workerName(null), 'malice');
+  assert.equal(workerName('  '), 'malice');
+  assert.equal(traceFilter('malice'), '');
+});

malice

Commit 20fe182f3204

Commit `20fe182f3204`