feat(dev-tools): rotate sessions tool and experiment feature flags

.changeset/async-callback-rejections.md

@@ -0,0 +1,5 @@
+---
+default: patch
+---
+
+Suppress "Uncaught (in promise)" console noise for fire-and-forget `useAsyncCallback` call sites; errors are still surfaced to callers that await the returned promise and captured in `AsyncState`

.changeset/devtool-rotate-sessions.md

@@ -0,0 +1,5 @@
+---
+default: patch
+---
+
+Add developer tool to force-rotate outbound Megolm encryption sessions per room, useful for testing key rotation and bridge session recovery

.changeset/feat-dm-message-preview.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+feat(dm-list): show last-message preview below DM room name

.changeset/feat-polls.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+Add MSC3381 polls: create, vote on, and end polls directly in rooms (opt-in via `features.polls` in config.json).

.changeset/feature-flag-env-vars.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+Add build-time client config overrides via environment variables, with typed deterministic experiment bucketing helpers for progressive feature rollout and A/B testing.

.changeset/message-bookmarks.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+Add message bookmarks (MSC4438). Users can bookmark messages for easy retrieval via a new Bookmarks section in the home sidebar. Gated by an operator `config.json` experiment flag (`experiments.messageBookmarks`) and a per-user experimental settings toggle.

.changeset/presence-auto-idle.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+feat(presence): add auto-idle presence after configurable inactivity timeout with Discord-style status picker

.changeset/presence-sidebar-badges.md

@@ -0,0 +1,5 @@
+---
+default: patch
+---
+
+Add presence status badges to sidebar DM list and account switcher

.changeset/reaction-notification-context.md

@@ -0,0 +1,5 @@
+---
+default: patch
+---
+
+Fix reaction notifications not being delivered by passing room and user context to the notification event filter

.changeset/room-message-preview.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+feat(room-nav): show topic and last-message preview for rooms in the sidebar, fetching enough timeline events to handle reactions and edits correctly

.devcontainer/devcontainer.json

@@ -0,0 +1,152 @@
+// Codespace configuration — lives on personal/config (not ephemeral dev/feat branches).
+// This file intentionally targets browser-based use on iPad.
+{
+  "name": "Sable",
+  // Using base + node feature instead of javascript-node:<tag> to avoid
+  // tag availability issues on newer Node versions.
+  "image": "mcr.microsoft.com/devcontainers/base:bookworm",
+
+  "features": {
+    "ghcr.io/devcontainers/features/node:1": { "version": "24" },
+    // Keep git up-to-date for SSH signing support (git ≥ 2.34).
+    "ghcr.io/devcontainers/features/git:1": {},
+    "ghcr.io/devcontainers/features/github-cli:1": {}
+  },
+
+  // ── Codespace user secrets ──────────────────────────────────────────────────
+  // Configure these at: github.com/settings/codespaces > Secrets
+  //
+  //   GIT_SIGNING_KEY  — passphrase-free SSH private key (ed25519 recommended).
+  //                      Add the matching public key to your GitHub account as a
+  //                      "signing key": github.com/settings/keys
+  //                      postCreate.sh will wire up git automatically if set.
+  //
+  //   SSH_AUTH_KEY     — passphrase-free SSH private key (ed25519 recommended).
+  //                      Add the matching public key to ~/.ssh/authorized_keys on
+  //                      any server you want to SSH into from the Codespace.
+  //
+  //   GIT_USER_NAME    — e.g. "Evie"
+  //   GIT_USER_EMAIL   — e.g. "evie@gauthier.id"
+  // ───────────────────────────────────────────────────────────────────────────
+
+  "remoteEnv": {
+    // Pin the pnpm store to a known path so the volume mount works across rebuilds.
+    "PNPM_STORE_DIR": "/home/vscode/.pnpm-store"
+  },
+
+  "customizations": {
+    "vscode": {
+      "settings": {
+        // ── Layout — tuned for iPad browser (vscode.dev / Codespaces web) ─────
+        // Move the activity bar to the top so it isn't hidden by the iOS Safari
+        // toolbar or the browser's combined title/status bar.
+        "workbench.activityBar.location": "top",
+        // Use a menu for the layout control — fewer tiny hit targets on touch.
+        "workbench.layoutControl.type": "menu",
+        // Place the panel (Terminal, Problems, Copilot Chat history) on the
+        // right so it doesn't fight with the keyboard on small screens.
+        "workbench.panel.defaultLocation": "right",
+        // Keep editor tabs visible and wrap them so none are hidden off-screen.
+        "workbench.editor.showTabs": "multiple",
+        "workbench.editor.wrapTabs": true,
+        // Disable minimap — saves horizontal space, improves touch accuracy.
+        "editor.minimap.enabled": false,
+        "editor.scrollBeyondLastLine": false,
+        // Larger default fonts for retina/HiDPI iPad displays.
+        // Fira Code is loaded as a web font by the tonsky.font-fira-code extension.
+        // This works for the Monaco *editor* (HTML/CSS rendered), but xterm.js uses
+        // canvas drawing — it does NOT reliably inherit CSS @font-face on iOS Safari.
+        // MesloLGS NF / Monaco / Meslo are not iOS system fonts either.
+        // → Editor: Fira Code via extension is fine.
+        // → Terminal: use Menlo only (ships with iOS since iOS 7, always available).
+        "editor.fontSize": 14,
+        "editor.fontFamily": "'MesloLGS NF', 'Fira Code', Menlo, 'Courier New', monospace",
+        "editor.fontLigatures": true,
+        "terminal.integrated.fontSize": 14,
+        "terminal.integrated.fontFamily": "Menlo, 'Courier New', monospace",
+        "terminal.integrated.fontLigatures.enabled": false,
+        "terminal.integrated.gpuAcceleration": "off",
+
+        // Use zsh (installed in onCreate) as the default terminal shell.
+        // Explicit profile with -l (login shell) ensures nvm / PATH additions
+        // from the devcontainer node feature are loaded inside the terminal.
+        "terminal.integrated.defaultProfile.linux": "zsh",
+        "terminal.integrated.profiles.linux": {
+          "zsh": { "path": "/bin/zsh", "args": ["-l"] }
+        },
+
+        // Shell integration MUST be enabled for Copilot Chat to run terminal
+        // commands.  We set it explicitly because Powerlevel10k instant prompt
+        // can fire before VS Code injects its integration script and suppress
+        // the markers — postCreate.sh patches .zshrc to guard against this.
+        "terminal.integrated.shellIntegration.enabled": true,
+
+        // ── Git signing ───────────────────────────────────────────────────────
+        // postCreate.sh configures gpg.format and user.signingkey if
+        // GIT_SIGNING_KEY secret is present.  This just keeps VS Code's git
+        // UI in sync.
+        "git.enableCommitSigning": true,
+        "git.confirmSync": false,
+
+        // ── Copilot Chat ──────────────────────────────────────────────────────
+        // Always show follow-ups and keep chat history accessible.
+        "github.copilot.chat.followUps": "always",
+        // Disable auto-discovery of extension-provided MCP servers (e.g. the
+        // io.github.github/github-mcp-server registered by vscode-pull-request-github).
+        // Our explicit HTTP server in .vscode/mcp.json is unaffected and handles all
+        // GitHub MCP calls without requiring a token prompt.
+        "chat.mcp.discovery.enabled": false
+      },
+      "extensions": [
+        // ── Copilot ───────────────────────────────────────────────────────────
+        "GitHub.copilot",
+        "GitHub.copilot-chat",
+        "GitHub.vscode-pull-request-github",
+        // ── Font (web font — required for terminal in browser/iPad) ───────────
+        "tonsky.font-fira-code",
+        // ── Theme ─────────────────────────────────────────────────────────────
+        "GitHub.github-vscode-theme",
+        // ── Formatting & linting ──────────────────────────────────────────────
+        "esbenp.prettier-vscode",
+        "dbaeumer.vscode-eslint",
+        "streetsidesoftware.code-spell-checker",
+        "davidanson.vscode-markdownlint",
+        // ── Testing ───────────────────────────────────────────────────────────
+        "vitest.explorer",
+        // ── TypeScript / React ────────────────────────────────────────────────
+        "bradlc.vscode-tailwindcss",
+        "styled-components.vscode-styled-components",
+        "dsznajder.es7-react-js-snippets",
+        "formulahendry.auto-rename-tag",
+        "wix.vscode-import-cost",
+        // ── Utilities ─────────────────────────────────────────────────────────
+        "christian-kohler.path-intellisense",
+        "usernamehw.errorlens",
+        "gruntfuggly.todo-tree",
+        "wayou.vscode-todo-highlight",
+        "webpro.vscode-knip",
+        "lokalise.i18n-ally",
+        // ── Infrastructure ────────────────────────────────────────────────────
+        "hashicorp.terraform",
+        "zamerick.vscode-caddyfile-syntax"
+      ]
+    }
+  },
+
+  // ── Port forwarding ─────────────────────────────────────────────────────────
+  "forwardPorts": [5173, 4173],
+  "portsAttributes": {
+    "5173": { "label": "Vite dev", "onAutoForward": "notify" },
+    "4173": { "label": "Vite preview", "onAutoForward": "notify" }
+  },
+
+  // ── Persistence ─────────────────────────────────────────────────────────────
+  // Named volume keeps the pnpm content-addressable store across rebuilds.
+  // Combined with the PNPM_STORE_DIR env var above so postCreate can also
+  // point pnpm at the same path.
+  "mounts": ["source=sable-pnpm-store,target=/home/vscode/.pnpm-store,type=volume"],
+
+  "postCreateCommand": "bash .devcontainer/postCreate.sh",
+  "onCreateCommand": "bash .devcontainer/onCreate.sh",
+  "remoteUser": "vscode"
+}

.devcontainer/onCreate.sh

@@ -0,0 +1,60 @@
+#!/bin/bash
+# onCreate.sh — runs during prebuild AND on first Codespace creation.
+# No user secrets are available here — keep this purely about dependencies.
+# Everything here is cached in the prebuild snapshot.
+set -euo pipefail
+
+# ── Ensure the node feature's PATH additions are active ──────────────────────
+# The devcontainers node feature installs via nvm; source it so `node`/`pnpm`
+# resolve correctly even in non-login, non-interactive shells.
+export NVM_DIR="${NVM_DIR:-/usr/local/share/nvm}"
+# shellcheck source=/dev/null
+[ -s "${NVM_DIR}/nvm.sh" ] && source "${NVM_DIR}/nvm.sh" --no-use
+# Activate the version pinned in .nvmrc / package.json engines.
+nvm use 24 2>/dev/null || nvm use node
+
+# ── Fix named-volume ownership ────────────────────────────────────────────────
+# Docker mounts named volumes as root; fix ownership so the vscode user can write.
+if [ -d "${PNPM_STORE_DIR:-}" ]; then
+  sudo chown -R "$(id -u):$(id -g)" "${PNPM_STORE_DIR}"
+fi
+
+# ── pnpm ──────────────────────────────────────────────────────────────────────
+# Suppress corepack's interactive download-confirmation prompt in CI/prebuild.
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+
+# Enable corepack so the exact pnpm version from package.json#packageManager is used.
+corepack enable
+
+# Point pnpm at the persistent named-volume store so packages survive rebuilds.
+if [ -n "${PNPM_STORE_DIR:-}" ]; then
+  pnpm config set store-dir "${PNPM_STORE_DIR}"
+fi
+
+pnpm install
+
+# ── Zsh + Oh My Zsh + Powerlevel10k ──────────────────────────────────────────
+# Install these during prebuild so the first Codespace start is fast.
+# The dotfiles checkout in postCreate.sh will provide .zshrc / .p10k.zsh.
+
+# Install zsh and tmux if not already present (base:bookworm ships zsh, but be safe).
+if ! command -v zsh &>/dev/null || ! command -v tmux &>/dev/null; then
+  sudo apt-get update -qq && sudo apt-get install -y -qq zsh tmux
+fi
+
+# Install Oh My Zsh non-interactively (KEEP_ZSHRC=yes preserves any existing .zshrc).
+if [ ! -d "${HOME}/.oh-my-zsh" ]; then
+  KEEP_ZSHRC=yes CHSH=no RUNZSH=no \
+    sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
+fi
+
+# Install Powerlevel10k as an OMZ custom theme.
+P10K_DIR="${ZSH_CUSTOM:-${HOME}/.oh-my-zsh/custom}/themes/powerlevel10k"
+if [ ! -d "${P10K_DIR}" ]; then
+  git clone --depth=1 https://github.com/romkatv/powerlevel10k.git "${P10K_DIR}"
+fi
+
+# Make zsh the default shell for this user.
+sudo chsh -s "$(command -v zsh)" "$(whoami)"
+
+echo "✓ onCreate complete"