Use wide screens on settings and list pages

.github/workflows/publish.yaml

@@ -317,6 +317,8 @@ jobs:
 
       - name: Setup Android SDK
         uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1
+        with:
+          packages: platform-tools
 
       - name: Install NDK
         run: sdkmanager "ndk;27.0.11902837"
@@ -426,6 +428,8 @@ jobs:
 
       - name: Setup Android SDK
         uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1
+        with:
+          packages: platform-tools
 
       - name: Install NDK
         run: sdkmanager "ndk;27.0.11902837"
@@ -596,7 +600,7 @@ jobs:
       - name: Start Tauri iOS build with WS server
         run: |
           npm run tauri ios build -- --open &
-          ADDR_FILE="${TMPDIR%/}/com.obsidianirc.dev-server-addr"
+          ADDR_FILE="src-tauri/gen/apple/.tauri/cli-options-server.json"
           echo "Waiting for $ADDR_FILE…"
           for i in $(seq 1 120); do
             [ -f "$ADDR_FILE" ] && { echo "Addr file ready after ${i}s"; break; }

AGENTS.md

@@ -189,6 +189,23 @@ Do not call `openExternalUrl` directly from any UI element without this protecti
 
 ---
 
+## Credentials: long-lived secrets go only to the IRCd
+
+**Critical invariant:** a long-lived credential (the SASL or server password, a personal
+access token, a client certificate key) is sent only to the IRC server the user logs in to.
+Never send one to a file host, an API or any other HTTP endpoint, even one the server
+advertises, and even over https.
+
+A service that needs to know who the user is gets a short-lived, single-purpose token
+minted by the IRCd: `draft/authtoken` (`TOKEN GENERATE <service>`, one token per request).
+The vendor `obby.world/FILEHOST` uploader works this way.
+
+- `draft/FILEHOST` hosts are passwordless: POST the file with no credentials.
+- We do not support `soju.im/FILEHOST`, since it logs in to the file host with the IRC
+  credentials. See https://github.com/obbyworld/obby/issues/203#issuecomment-4512606251.
+
+---
+
 ## Zustand + React Gotchas
 
 **Store action refs are unstable.** Functions from `useStore((s) => s.someAction)` change
@@ -211,6 +228,17 @@ for WKWebView's `IntersectionObserver`.
 
 ---
 
+## Menus, panels and touch
+
+- Dropdown menus go through `Menu` (`src/components/ui/Menu.tsx`); other floating panels go through `Popover`. Style their contents with the shared classes in the `@layer components` block of `src/index.css` (`surface-floating`, `row-interactive`, `row-meta`, …) so every panel stays one look.
+- Hover hints use one look, the `tooltip-surface` class. A plain `title` attribute is enough: `TitleTooltipLayer` shows it in that style. Wrap richer content in `HoverTooltip`, and never style a tooltip by hand.
+- Touch UI (bottom sheets, long-press, drag handles) follows `useIsTouchInput()`. Window width only decides layout, so a narrow desktop window still gets mouse UI.
+- Lists that suggest completions above the chat input (members, emojis, slash commands) render through `SuggestionList` and take their arrow, Enter and Escape keys from `useSuggestionKeys`.
+- Bottom sheets build on `BottomSheet` with the `sheet-row` and `sheet-action` classes; taps and holds go through `useShortTap` and `useLongPress`, which share one delay so they never fire together.
+- Stray typing goes to the chat input. An open modal dialog takes it for its own text field, and an inline editor can claim it with `useTypingOwner`.
+
+---
+
 ## Biome — intentional dep omissions
 
 Always add suppression comment on the line **immediately before** the hook — pre-commit

compose.yaml

@@ -13,6 +13,27 @@ services:
       timeout: 10s
       retries: 3
 
+  obby-locked:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      args:
+        VITE_HIDE_SERVER_LIST: ${LOCKED_HIDE_SERVER_LIST:-true}
+        VITE_DEFAULT_IRC_SERVER: ${LOCKED_IRC_SERVER:-wss://irc.h4ks.com:443}
+        VITE_DEFAULT_IRC_SERVER_NAME: ${LOCKED_IRC_SERVER_NAME:-h4ks.com}
+        VITE_DEFAULT_IRC_CHANNELS: ${LOCKED_IRC_CHANNELS:-#bots,#lobby,#minecraft}
+    container_name: obby-locked
+    ports:
+      - "3001:80"
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    profiles:
+      - locked
+
   gen-certs:
     image: alpine:3.20
     volumes:

index.html

@@ -3,7 +3,7 @@
 
 <head>
   <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover, user-scalable=no" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover, user-scalable=no, interactive-widget=resizes-content" />
   <meta name="theme-color" content="#202225" />
   <link rel="icon" type="image/x-icon" href="/images/obby.png">
 </head>