Add yaw2 invite interoperability

Protocol: - invite.go: include full 64-char `net` hash in waste: invite blob (matches yaw2's `net` field — any client parsing the base64 JSON can join without knowing the plaintext name). Expose NetHash() helper. - netmgr: add JoinByHash() — join via full 64-char hex hash alone, storing the short ID as display name. Enables joining yaw2 networks from a URL that only carries the hash. - anchor: expose RunByHash() so netmgr can pass a pre-computed hash directly without a name→hash roundtrip. - ipc/proto: add network_hash field to join_network — routes to JoinByHash when present and network_name is absent. Web UI: - Parse ?net=<64hex> (yaw2 URL param) and ?a=<anchor> in addition to existing ?n= / ?invite= params. Hash-only joins send network_hash. - Sidebar shows yaw: contact card (yaw:<masterID>?n=<alias>) using the master identity — compatible with yaw2 contact card format. Click to copy to clipboard. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Fix web UI messaging, alias resolution, and onboarding
2026-06-22 23:29:45 +02:00 · 2026-06-22 23:22:32 +02:00 · 2026-06-22 22:11:20 +02:00 · 2026-06-22 22:08:44 +02:00 · 2026-06-22 21:57:32 +02:00 · 2026-06-22 21:57:10 +02:00
36 changed files with 4224 additions and 19 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,4 @@ launch-tui.sh
 .DS_Store
 *.swp
 /tui
+launch-web.sh
--- a/cmd/daemon/main.go
+++ b/cmd/daemon/main.go
@@ -18,6 +18,7 @@ func main() {
 	dataDir        := flag.String("data-dir", "~/.waste", "path to identity/config directory")
 	alias          := flag.String("alias", "anon", "display name shown to peers (advisory only)")
 	ipcPort        := flag.Int("ipc-port", 17337, "port for local IPC (UI connects here)")
+	wsPort         := flag.Int("ws-port", 0, "port for WebSocket IPC (web UI); 0 = disabled")
 	anchorURL      := flag.String("anchor", "", "anchor WebSocket URL, e.g. ws://your-vps:17339/ws")
 	shareDir       := flag.String("share-dir", "", "directory to share with peers on the network")
 	joinInvite     := flag.String("join", "", "waste: invite string — sets anchor URL and auto-joins the network on startup")
@@ -81,7 +82,15 @@ func main() {
 		}
 	}

-	if err := ipc.Run(mgr, *ipcPort); err != nil {
+	errCh := make(chan error, 2)
+
+	go func() { errCh <- ipc.Run(mgr, *ipcPort) }()
+
+	if *wsPort != 0 {
+		go func() { errCh <- ipc.RunWS(mgr, *wsPort) }()
+	}
+
+	if err := <-errCh; err != nil {
 		log.Fatalf("ipc: %v", err)
 	}
 }
--- a/internal/anchor/client.go
+++ b/internal/anchor/client.go
@@ -60,7 +60,12 @@ func (s *peerSession) close() {
 // Run connects to anchorURL, joins networkName, and blocks handling signaling.
 // Reconnects automatically on disconnect. Cancel ctx to stop.
 func Run(ctx context.Context, anchorURL, networkName string, id *crypto.Identity, m *mesh.Mesh) {
-	netHash := hashNetName(networkName)
+	RunByHash(ctx, anchorURL, hashNetName(networkName), id, m)
+}
+
+// RunByHash is like Run but accepts the pre-computed full 64-char hex network hash
+// directly. Use this when joining by hash rather than by name.
+func RunByHash(ctx context.Context, anchorURL, netHash string, id *crypto.Identity, m *mesh.Mesh) {
 	for {
 		if err := runOnce(ctx, anchorURL, netHash, id, m); err != nil {
 			if ctx.Err() != nil {
--- a/internal/invite/invite.go
+++ b/internal/invite/invite.go
@@ -1,10 +1,17 @@
 // Package invite encodes and decodes waste invite strings.
-// An invite carries the anchor URL and network name needed to join a network.
+//
 // Format: "waste:<url-safe-base64(json)>"
+//
+// The JSON payload is compatible with yaw2: the `net` field carries the full
+// 64-char hex SHA-256("yaw2-net:"+name) hash that yaw2 clients pass directly
+// to the signaling server. A yaw2 client that can parse the base64 JSON can join
+// the same network without knowing the plaintext name.
 package invite

 import (
+	"crypto/sha256"
 	"encoding/base64"
+	"encoding/hex"
 	"encoding/json"
 	"fmt"
 	"strings"
@@ -14,8 +21,9 @@ const prefix = "waste:"

 // Invite holds the information needed to join a network.
 type Invite struct {
-	Anchor  string `json:"anchor"`  // WebSocket anchor URL
-	Network string `json:"network"` // plaintext network name
+	Anchor  string `json:"anchor"`           // WebSocket anchor URL
+	Network string `json:"network"`          // plaintext network name
+	Net     string `json:"net,omitempty"`    // 64-char hex SHA-256("yaw2-net:"+name) — yaw2 `net` field
 }

 // Encode returns a waste: invite string for the given anchor URL and network name.
@@ -26,7 +34,12 @@ func Encode(anchor, network string) (string, error) {
 	if network == "" {
 		return "", fmt.Errorf("network name is required")
 	}
-	b, err := json.Marshal(Invite{Anchor: anchor, Network: network})
+	h := sha256.Sum256([]byte("yaw2-net:" + network))
+	b, err := json.Marshal(Invite{
+		Anchor:  anchor,
+		Network: network,
+		Net:     hex.EncodeToString(h[:]),
+	})
 	if err != nil {
 		return "", err
 	}
@@ -52,3 +65,10 @@ func Decode(s string) (Invite, error) {
 	}
 	return inv, nil
 }
+
+// NetHash returns the full 64-char hex network hash for the given name
+// (SHA-256("yaw2-net:" + name)). This is the `net` field sent to the anchor.
+func NetHash(name string) string {
+	h := sha256.Sum256([]byte("yaw2-net:" + name))
+	return hex.EncodeToString(h[:])
+}
--- a/internal/ipc/ipc.go
+++ b/internal/ipc/ipc.go
@@ -14,14 +14,37 @@ import (
 	"fmt"
 	"log"
 	"net"
+	"net/http"
 	"time"

+	"nhooyr.io/websocket"
+
 	"github.com/waste-go/internal/crypto"
 	"github.com/waste-go/internal/invite"
 	"github.com/waste-go/internal/netmgr"
 	"github.com/waste-go/internal/proto"
 )

+// RunWS starts a WebSocket IPC server on 127.0.0.1:wsPort.
+// Each WebSocket connection gets the same handleClient treatment as TCP.
+// The OriginPatterns option allows connections from local dev servers.
+func RunWS(mgr *netmgr.Manager, wsPort int) error {
+	addr := fmt.Sprintf("127.0.0.1:%d", wsPort)
+	log.Printf("ipc: WS listening on %s", addr)
+	return http.ListenAndServe(addr, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		conn, err := websocket.Accept(w, r, &websocket.AcceptOptions{
+			OriginPatterns: []string{"*"},
+		})
+		if err != nil {
+			log.Printf("ipc: ws accept: %v", err)
+			return
+		}
+		log.Printf("ipc: WS client connected")
+		nc := websocket.NetConn(r.Context(), conn, websocket.MessageText)
+		handleClient(nc, mgr)
+	}))
+}
+
 // Run starts the IPC listener. Blocks until the listener fails.
 func Run(mgr *netmgr.Manager, port int) error {
 	addr := fmt.Sprintf("127.0.0.1:%d", port)
@@ -114,16 +137,25 @@ func handleClient(conn net.Conn, mgr *netmgr.Manager) {
 		switch cmd.Type {

 		case proto.CmdJoinNetwork:
-			if cmd.NetworkName == "" {
-				send(errMsg("join_network: network_name is required"))
+			var (
+				netID string
+				err   error
+			)
+			switch {
+			case cmd.NetworkName != "":
+				netID, err = mgr.Join(cmd.NetworkName, cmd.ShareDir)
+			case len(cmd.NetworkHash) == 64:
+				// yaw2-compatible: join by full 64-char hex hash (net field)
+				netID, err = mgr.JoinByHash(cmd.NetworkHash, cmd.ShareDir)
+			default:
+				send(errMsg("join_network: network_name or network_hash (64 hex chars) required"))
 				continue
 			}
-			netID, err := mgr.Join(cmd.NetworkName, cmd.ShareDir)
 			if err != nil {
 				send(errMsg(fmt.Sprintf("join_network: %v", err)))
 				continue
 			}
-			// network_joined event (with share_dir) is emitted by Manager.Join.
+			// network_joined event (with share_dir) is emitted by Manager.Join/JoinByHash.
 			_ = netID

 		case proto.CmdLeaveNetwork:
@@ -322,9 +354,12 @@ func handleClient(conn net.Conn, mgr *netmgr.Manager) {
 func stateSnapshot(mgr *netmgr.Manager) proto.IpcMessage {
 	all := mgr.All()

+	master := mgr.MasterIdentity()
 	msg := proto.IpcMessage{
-		Type:  proto.EvtStateSnapshot,
-		Rooms: []string{"general"},
+		Type:        proto.EvtStateSnapshot,
+		Rooms:       []string{"general"},
+		MasterAlias: master.Alias,
+		MasterID:    string(master.PeerID()),
 	}

 	var netInfos []proto.NetworkInfo
--- a/internal/mesh/mesh.go
+++ b/internal/mesh/mesh.go
@@ -89,16 +89,17 @@ func (m *Mesh) ScanShareDir() []proto.FileEntry {

 // AddPeer registers a connected peer and notifies subscribers.
 func (m *Mesh) AddPeer(conn *PeerConn) {
+	// Seed alias from cache so returning peers resolve immediately (before hello).
+	if m.Store != nil {
+		if cached := m.Store.PeerAlias(conn.Info.ID); cached != "" {
+			conn.Info.Alias = cached
+		}
+	}
+
 	m.mu.Lock()
 	m.peers[conn.Info.ID] = conn
 	m.mu.Unlock()

-	if m.Store != nil && conn.Info.Alias != "" {
-		if err := m.Store.SavePeer(conn.Info.ID, conn.Info.Alias); err != nil {
-			log.Printf("mesh: store peer %s: %v", conn.Info.ID.Short(), err)
-		}
-	}
-
 	m.emit(proto.IpcMessage{
 		Type: proto.EvtPeerConnected,
 		Peer: &conn.Info,
--- a/internal/netmgr/manager.go
+++ b/internal/netmgr/manager.go
@@ -147,6 +147,88 @@ func (mgr *Manager) Join(name, shareDir string) (string, error) {
 	return netID, nil
 }

+// JoinByHash joins a network using its pre-computed full 64-char hex hash
+// (yaw2 `net` field) instead of the plaintext name. The network is stored
+// with an empty name; the network_id (first 8 bytes) is used for display.
+// This enables joining networks whose names are unknown — e.g. from a yaw2
+// invite URL that only contains the hash.
+func (mgr *Manager) JoinByHash(netHash64, shareDir string) (string, error) {
+	if len(netHash64) != 64 {
+		return "", fmt.Errorf("netHash must be 64 hex chars, got %d", len(netHash64))
+	}
+	netID := netHash64[:16] // first 8 bytes = 16 hex chars
+
+	mgr.mu.Lock()
+	if _, exists := mgr.networks[netID]; exists {
+		mgr.mu.Unlock()
+		return netID, nil
+	}
+	mgr.mu.Unlock()
+
+	derived, err := crypto.DeriveForNetwork(mgr.cfg.MasterIdentity, netHash64)
+	if err != nil {
+		return "", fmt.Errorf("derive identity for net %s: %w", netID, err)
+	}
+
+	dbPath := filepath.Join(mgr.cfg.StoreDir, "messages-"+netID+".db")
+	st, err := store.Open(dbPath)
+	if err != nil {
+		return "", fmt.Errorf("open store for net %s: %w", netID, err)
+	}
+
+	m := mesh.New(derived, st)
+	if shareDir != "" {
+		m.ShareDir = shareDir
+	} else if mgr.cfg.ShareDir != "" {
+		m.ShareDir = mgr.cfg.ShareDir
+	}
+	m.DownloadDir = filepath.Join(mgr.cfg.StoreDir, "downloads-"+netID)
+
+	meshEvents := m.Subscribe()
+	go func() {
+		for evt := range meshEvents {
+			evt.NetworkID = netID
+			mgr.emit(evt)
+		}
+	}()
+
+	ctx, cancel := context.WithCancel(context.Background())
+
+	net := &Network{
+		ID:       netID,
+		Name:     netID, // display as short hash when name is unknown
+		Hash:     netHash64,
+		Identity: derived,
+		Mesh:     m,
+		Store:    st,
+		cancel:   cancel,
+	}
+
+	mgr.mu.Lock()
+	mgr.networks[netID] = net
+	mgr.order = append(mgr.order, netID)
+	mgr.mu.Unlock()
+
+	log.Printf("netmgr: joining network by hash id=%s peer=%s", netID, derived.PeerID().Short())
+
+	if mgr.cfg.AnchorURL != "" {
+		go func() {
+			anchor.RunByHash(ctx, mgr.cfg.AnchorURL, netHash64, derived, m)
+			log.Printf("netmgr: left network %s", netID)
+		}()
+	}
+
+	mgr.emit(proto.IpcMessage{
+		Type:        proto.EvtNetworkJoined,
+		NetworkID:   netID,
+		NetworkName: netID,
+		LocalPeer:   peerPtr(derived.PeerInfo()),
+		ShareDir:    m.ShareDir,
+	})
+
+	return netID, nil
+}
+
 // Leave cancels a network context by ID. Closes its store.
 func (mgr *Manager) Leave(netID string) {
 	mgr.mu.Lock()
--- a/internal/proto/proto.go
+++ b/internal/proto/proto.go
@@ -265,7 +265,8 @@ type IpcMessage struct {

 	// join_network / leave_network
 	NetworkName string `json:"network_name,omitempty"`
-	ShareDir    string `json:"share_dir,omitempty"` // optional per-network share directory
+	NetworkHash string `json:"network_hash,omitempty"` // 64-char hex (yaw2 `net` field); alternative to network_name
+	ShareDir    string `json:"share_dir,omitempty"`    // optional per-network share directory

 	// send_file / set_share_dir / file_complete path
 	Path string `json:"path,omitempty"`
@@ -280,6 +281,8 @@ type IpcMessage struct {
 	BytesReceived  int64        `json:"bytes_received,omitempty"`
 	TotalBytes     int64        `json:"total_bytes,omitempty"`
 	// state_snapshot fields (existing shape preserved for backward compat)
+	MasterAlias    string        `json:"master_alias,omitempty"` // daemon's alias (available before any network join)
+	MasterID       string        `json:"master_id,omitempty"`    // daemon's master public key hex
 	LocalPeer      *PeerInfo     `json:"local_peer,omitempty"`
 	ConnectedPeers []PeerInfo    `json:"connected_peers,omitempty"`
 	Rooms          []string      `json:"rooms,omitempty"`
--- a/internal/store/store.go
+++ b/internal/store/store.go
@@ -77,6 +77,13 @@ func (s *Store) SavePeer(peerID proto.PeerID, alias string) error {
 	return err
 }

+// PeerAlias returns the cached alias for a peer, or "" if unknown.
+func (s *Store) PeerAlias(peerID proto.PeerID) string {
+	var alias string
+	s.db.QueryRow(`SELECT alias FROM peers WHERE peer_id = ?`, string(peerID)).Scan(&alias) //nolint:errcheck
+	return alias
+}
+
 // RecentMessages returns up to limit messages for a room, oldest first.
 func (s *Store) RecentMessages(room string, limit int) ([]proto.ChatMessage, error) {
 	rows, err := s.db.Query(
--- a/web/.gitignore
+++ b/web/.gitignore
@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
--- a/web/README.md
+++ b/web/README.md
@@ -0,0 +1,73 @@
+# React + TypeScript + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend updating the configuration to enable type-aware lint rules:
+
+```js
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      // Other configs...
+
+      // Remove tseslint.configs.recommended and replace with this
+      tseslint.configs.recommendedTypeChecked,
+      // Alternatively, use this for stricter rules
+      tseslint.configs.strictTypeChecked,
+      // Optionally, add this for stylistic rules
+      tseslint.configs.stylisticTypeChecked,
+
+      // Other configs...
+    ],
+    languageOptions: {
+      parserOptions: {
+        project: ['./tsconfig.node.json', './tsconfig.app.json'],
+        tsconfigRootDir: import.meta.dirname,
+      },
+      // other options...
+    },
+  },
+])
+```
+
+You can also install [eslint-plugin-react-x](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-x) and [eslint-plugin-react-dom](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-dom) for React-specific lint rules:
+
+```js
+// eslint.config.js
+import reactX from 'eslint-plugin-react-x'
+import reactDom from 'eslint-plugin-react-dom'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      // Other configs...
+      // Enable lint rules for React
+      reactX.configs['recommended-typescript'],
+      // Enable lint rules for React DOM
+      reactDom.configs.recommended,
+    ],
+    languageOptions: {
+      parserOptions: {
+        project: ['./tsconfig.node.json', './tsconfig.app.json'],
+        tsconfigRootDir: import.meta.dirname,
+      },
+      // other options...
+    },
+  },
+])
+```
--- a/web/eslint.config.js
+++ b/web/eslint.config.js
@@ -0,0 +1,22 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import tseslint from 'typescript-eslint'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      js.configs.recommended,
+      tseslint.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      globals: globals.browser,
+    },
+  },
+])
--- a/web/index.html
+++ b/web/index.html
@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>web</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
--- a/web/package-lock.json
+++ b/web/package-lock.json
--- a/web/package.json
+++ b/web/package.json
@@ -0,0 +1,31 @@
+{
+  "name": "web",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "eslint .",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
+    "zustand": "^5.0.14"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^24.12.3",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^10.3.0",
+    "eslint-plugin-react-hooks": "^7.1.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.6.0",
+    "typescript": "~6.0.2",
+    "typescript-eslint": "^8.59.2",
+    "vite": "^8.0.12"
+  }
+}
--- a/web/public/favicon.svg
+++ b/web/public/favicon.svg
--- a/web/public/icons.svg
+++ b/web/public/icons.svg
@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>
--- a/web/src/App.css
+++ b/web/src/App.css
@@ -0,0 +1,84 @@
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --bg: #0f0f13;
+  --surface: #1a1a22;
+  --border: #2a2a36;
+  --accent: #7c6af7;
+  --text: #e0e0e8;
+  --muted: #6b6b80;
+  --sidebar-w: 200px;
+  --peerlist-w: 180px;
+}
+
+html, body, #root { height: 100%; }
+body { background: var(--bg); color: var(--text); font-family: system-ui, sans-serif; font-size: 14px; }
+
+button { cursor: pointer; background: var(--accent); color: #fff; border: none; border-radius: 4px; padding: 4px 10px; font-size: 13px; }
+button:disabled { opacity: 0.4; cursor: default; }
+input { background: var(--surface); color: var(--text); border: 1px solid var(--border); border-radius: 4px; padding: 6px 10px; font-size: 13px; outline: none; }
+input:focus { border-color: var(--accent); }
+
+/* ── onboarding ── */
+.onboarding { display: flex; flex-direction: column; align-items: center; justify-content: center; height: 100%; gap: 12px; max-width: 380px; margin: 0 auto; padding: 2rem; }
+.onboarding h1 { font-size: 2rem; letter-spacing: 0.1em; color: var(--accent); margin-bottom: 4px; }
+.onboarding .status { color: var(--muted); font-size: 13px; }
+.onboarding .status.connecting { color: var(--accent); }
+.onboarding .status.disconnected { color: #e06060; }
+.onboarding-identity { text-align: center; }
+.onboarding-identity .alias { display: block; font-size: 1.1rem; font-weight: 600; }
+.onboarding-identity .peer-id { display: block; color: var(--muted); font-size: 11px; margin-top: 2px; }
+.onboarding-hint { color: var(--muted); font-size: 12px; text-align: center; }
+.onboarding-hint.muted { color: var(--muted); }
+.onboarding-code { background: var(--surface); border: 1px solid var(--border); border-radius: 4px; padding: 8px 12px; font-size: 12px; font-family: monospace; color: var(--text); width: 100%; text-align: left; }
+.onboarding-section { width: 100%; border-top: 1px solid var(--border); padding-top: 12px; }
+.join-form { display: flex; flex-direction: column; gap: 8px; width: 100%; }
+.join-form input { width: 100%; }
+.join-label { font-size: 11px; text-transform: uppercase; letter-spacing: 0.08em; color: var(--muted); }
+button.primary { background: var(--accent); width: 100%; padding: 8px; font-size: 14px; }
+.toggle-link { background: none; color: var(--muted); font-size: 12px; padding: 4px 0; text-align: left; }
+.toggle-link:hover { color: var(--text); }
+.backup-panel { display: flex; flex-direction: column; gap: 8px; margin-top: 8px; }
+.backup-form { display: flex; flex-direction: column; gap: 6px; }
+.backup-form textarea { background: var(--surface); color: var(--text); border: 1px solid var(--border); border-radius: 4px; padding: 6px 8px; font-size: 11px; resize: vertical; }
+.export-result { display: flex; flex-direction: column; gap: 6px; }
+.export-result textarea { font-size: 10px; }
+.mono { font-family: monospace; }
+details summary { color: var(--muted); font-size: 12px; cursor: pointer; }
+
+/* ── chat layout ── */
+.chat-layout { display: grid; grid-template-columns: var(--sidebar-w) 1fr var(--peerlist-w); height: 100%; }
+
+/* ── sidebar ── */
+.sidebar { background: var(--surface); border-right: 1px solid var(--border); display: flex; flex-direction: column; gap: 4px; padding: 12px 8px; overflow-y: auto; }
+.sidebar-identity { padding: 8px; border-bottom: 1px solid var(--border); margin-bottom: 8px; }
+.sidebar-identity .alias { display: block; font-weight: 600; }
+.sidebar-identity .peer-id { display: block; color: var(--muted); font-size: 11px; font-family: monospace; }
+.sidebar-section { display: flex; flex-direction: column; gap: 2px; margin-bottom: 16px; }
+.sidebar-label { font-size: 10px; text-transform: uppercase; letter-spacing: 0.1em; color: var(--muted); padding: 4px 8px; }
+.sidebar-item { background: none; color: var(--text); text-align: left; padding: 5px 8px; border-radius: 4px; width: 100%; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.sidebar-item:hover { background: var(--border); }
+.sidebar-item.active { background: var(--accent); color: #fff; }
+
+/* ── message pane ── */
+.message-pane { display: flex; flex-direction: column; height: 100%; }
+.message-pane-header { padding: 12px 16px; border-bottom: 1px solid var(--border); font-weight: 600; color: var(--muted); }
+.messages { flex: 1; overflow-y: auto; padding: 12px 16px; display: flex; flex-direction: column; gap: 6px; }
+.message { display: flex; gap: 8px; align-items: baseline; }
+.message.mine .message-alias { color: var(--accent); }
+.message-alias { font-weight: 600; min-width: 80px; color: var(--muted); font-size: 12px; }
+.message-text { flex: 1; word-break: break-word; }
+.message-ts { color: var(--muted); font-size: 11px; white-space: nowrap; }
+.compose { display: flex; gap: 8px; padding: 12px 16px; border-top: 1px solid var(--border); }
+.compose input { flex: 1; }
+
+/* ── peer list ── */
+.peer-list { background: var(--surface); border-left: 1px solid var(--border); padding: 12px 8px; display: flex; flex-direction: column; gap: 4px; overflow-y: auto; }
+.peer-entry { display: flex; flex-direction: column; gap: 4px; padding: 6px 8px; border-radius: 4px; }
+.peer-entry:hover { background: var(--border); }
+.peer-entry-info .alias { display: block; font-weight: 600; font-size: 13px; }
+.peer-entry-info .peer-id { display: block; color: var(--muted); font-size: 11px; font-family: monospace; }
+.peer-entry-actions { display: flex; gap: 4px; }
+.peer-entry-actions button { font-size: 11px; padding: 2px 6px; background: var(--border); color: var(--text); }
+.peer-entry-actions button:hover { background: var(--accent); color: #fff; }
+.empty { color: var(--muted); font-size: 12px; padding: 8px; }
--- a/web/src/App.tsx
+++ b/web/src/App.tsx
@@ -0,0 +1,22 @@
+import { useEffect } from 'react'
+import { useWaste } from './store'
+import { Onboarding } from './pages/Onboarding'
+import { Chat } from './pages/Chat'
+import './App.css'
+
+// Default to local daemon WS IPC. Override with VITE_DAEMON_WS env var.
+const DAEMON_WS = import.meta.env.VITE_DAEMON_WS ?? 'ws://127.0.0.1:17338'
+
+export default function App() {
+  const { connect, daemonStatus, localPeer } = useWaste()
+
+  useEffect(() => {
+    connect(DAEMON_WS)
+  }, [connect])
+
+  if (daemonStatus !== 'connected' || !localPeer) {
+    return <Onboarding status={daemonStatus} />
+  }
+
+  return <Chat />
+}
--- a/web/src/adapter/daemon.ts
+++ b/web/src/adapter/daemon.ts
@@ -0,0 +1,76 @@
+import type { IpcMessage } from '../types'
+
+type Listener = (msg: IpcMessage) => void
+
+// DaemonAdapter connects to a locally-running waste daemon over WebSocket IPC.
+// The daemon must have WS IPC enabled (--ws-port flag).
+export class DaemonAdapter {
+  private ws: WebSocket | null = null
+  private listeners: Listener[] = []
+  private url: string
+  private reconnectTimer: ReturnType<typeof setTimeout> | null = null
+
+  status: 'disconnected' | 'connecting' | 'connected' = 'disconnected'
+  onStatusChange?: (s: DaemonAdapter['status']) => void
+
+  constructor(url: string) {
+    this.url = url
+  }
+
+  connect() {
+    if (this.ws) return
+    this.setStatus('connecting')
+
+    const ws = new WebSocket(this.url)
+    this.ws = ws
+
+    ws.onopen = () => {
+      this.setStatus('connected')
+    }
+
+    ws.onmessage = (ev) => {
+      try {
+        const msg: IpcMessage = JSON.parse(ev.data)
+        this.listeners.forEach(l => l(msg))
+      } catch {
+        // ignore malformed frames
+      }
+    }
+
+    ws.onclose = () => {
+      this.ws = null
+      this.setStatus('disconnected')
+      // Reconnect after 2s
+      this.reconnectTimer = setTimeout(() => this.connect(), 2000)
+    }
+
+    ws.onerror = () => {
+      ws.close()
+    }
+  }
+
+  disconnect() {
+    if (this.reconnectTimer) clearTimeout(this.reconnectTimer)
+    this.ws?.close()
+    this.ws = null
+    this.setStatus('disconnected')
+  }
+
+  send(msg: IpcMessage) {
+    if (this.ws?.readyState === WebSocket.OPEN) {
+      this.ws.send(JSON.stringify(msg) + '\n')
+    }
+  }
+
+  on(listener: Listener) {
+    this.listeners.push(listener)
+    return () => {
+      this.listeners = this.listeners.filter(l => l !== listener)
+    }
+  }
+
+  private setStatus(s: DaemonAdapter['status']) {
+    this.status = s
+    this.onStatusChange?.(s)
+  }
+}
--- a/web/src/assets/hero.png
+++ b/web/src/assets/hero.png
--- a/web/src/assets/react.svg
+++ b/web/src/assets/react.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>
--- a/web/src/assets/vite.svg
+++ b/web/src/assets/vite.svg
--- a/web/src/components/MessagePane.tsx
+++ b/web/src/components/MessagePane.tsx
@@ -0,0 +1,68 @@
+import { useEffect, useRef, useState } from 'react'
+import { useWaste } from '../store'
+
+export function MessagePane() {
+  const { messages, activeRoom, activeNetworkId, localPeer, connectedPeers, send } = useWaste()
+  const [draft, setDraft] = useState('')
+  const bottomRef = useRef<HTMLDivElement>(null)
+  const roomMessages = messages[activeRoom] ?? []
+
+  useEffect(() => {
+    bottomRef.current?.scrollIntoView({ behavior: 'smooth' })
+  }, [roomMessages.length])
+
+  function submit(e: React.FormEvent) {
+    e.preventDefault()
+    const text = draft.trim()
+    if (!text || !activeNetworkId) return
+
+    if (activeRoom.startsWith('dm:')) {
+      // Find peer ID from room name — stored as full ID in room key after "dm:"
+      const toPeerID = activeRoom.slice(3)
+      const peer = connectedPeers.find(p => p.id.startsWith(toPeerID) || p.id === toPeerID)
+      if (peer) {
+        send({ type: 'send_message', network_id: activeNetworkId, room: activeRoom, body: text, to: peer.id })
+      }
+    } else {
+      send({ type: 'send_message', network_id: activeNetworkId, room: activeRoom, body: text })
+    }
+    setDraft('')
+  }
+
+  function aliasFor(fromId: string) {
+    if (fromId === localPeer?.id) return localPeer.alias
+    return connectedPeers.find(p => p.id === fromId)?.alias ?? fromId.slice(0, 8)
+  }
+
+  return (
+    <main className="message-pane">
+      <div className="message-pane-header">
+        {activeRoom.startsWith('dm:') ? `@ ${activeRoom.slice(3, 11)}…` : `# ${activeRoom}`}
+      </div>
+
+      <div className="messages">
+        {roomMessages.map((msg, i) => {
+          const mine = msg.from === localPeer?.id
+          return (
+            <div key={msg.mid ?? i} className={`message ${mine ? 'mine' : ''}`}>
+              <span className="message-alias">{aliasFor(msg.from)}</span>
+              <span className="message-text">{msg.text}</span>
+              <span className="message-ts">{new Date(msg.ts).toLocaleTimeString()}</span>
+            </div>
+          )
+        })}
+        <div ref={bottomRef} />
+      </div>
+
+      <form className="compose" onSubmit={submit}>
+        <input
+          value={draft}
+          onChange={e => setDraft(e.target.value)}
+          placeholder={`Message ${activeRoom}`}
+          autoComplete="off"
+        />
+        <button type="submit" disabled={!draft.trim()}>Send</button>
+      </form>
+    </main>
+  )
+}
--- a/web/src/components/PeerList.tsx
+++ b/web/src/components/PeerList.tsx
@@ -0,0 +1,35 @@
+import { useWaste } from '../store'
+
+export function PeerList() {
+  const { connectedPeers, activeNetworkId, setActiveRoom, send } = useWaste()
+
+  function openDM(peerId: string) {
+    const room = `dm:${peerId}`
+    setActiveRoom(room)
+  }
+
+  function requestFiles(peerId: string) {
+    send({ type: 'get_file_list', network_id: activeNetworkId ?? undefined, peer_id: peerId })
+  }
+
+  return (
+    <aside className="peer-list">
+      <span className="sidebar-label">Peers ({connectedPeers.length})</span>
+      {connectedPeers.map(p => (
+        <div key={p.id} className="peer-entry">
+          <div className="peer-entry-info">
+            <span className="alias">{p.alias}</span>
+            <span className="peer-id">{p.id.slice(0, 8)}…</span>
+          </div>
+          <div className="peer-entry-actions">
+            <button onClick={() => openDM(p.id)} title="Direct message">DM</button>
+            <button onClick={() => requestFiles(p.id)} title="Browse files">Files</button>
+          </div>
+        </div>
+      ))}
+      {connectedPeers.length === 0 && (
+        <p className="empty">No peers connected yet</p>
+      )}
+    </aside>
+  )
+}
--- a/web/src/components/Sidebar.tsx
+++ b/web/src/components/Sidebar.tsx
@@ -0,0 +1,61 @@
+import { useWaste } from '../store'
+
+function makeYawCard(id: string, alias: string): string {
+  const nick = encodeURIComponent(alias.trim().slice(0, 40))
+  return nick ? `yaw:${id}?n=${nick}` : `yaw:${id}`
+}
+
+export function Sidebar() {
+  const { localPeer, masterId, masterAlias, networks, activeNetworkId, activeRoom, setActiveRoom, setActiveNetwork, messages } = useWaste()
+
+  // Rooms = general + any DM threads that have messages
+  const rooms = ['general']
+  Object.keys(messages).forEach(r => {
+    if (r.startsWith('dm:') && !rooms.includes(r)) rooms.push(r)
+  })
+
+  const displayAlias = localPeer?.alias ?? masterAlias ?? ''
+  const displayId = localPeer?.id ?? masterId ?? ''
+  const card = displayId ? makeYawCard(displayId, displayAlias) : null
+
+  return (
+    <nav className="sidebar">
+      <div
+        className="sidebar-identity"
+        title={card ?? undefined}
+        onClick={() => card && navigator.clipboard?.writeText(card)}
+        style={{ cursor: card ? 'pointer' : undefined }}
+      >
+        <span className="alias">{displayAlias || '…'}</span>
+        <span className="peer-id">{displayId.slice(0, 16).replace(/(.{4})/g, '$1 ').trim()}</span>
+        {card && <span className="peer-id" style={{ fontSize: '9px', opacity: 0.5 }}>click to copy card</span>}
+      </div>
+
+      <div className="sidebar-section">
+        <span className="sidebar-label">Networks</span>
+        {networks.map(n => (
+          <button
+            key={n.network_id}
+            className={`sidebar-item ${n.network_id === activeNetworkId ? 'active' : ''}`}
+            onClick={() => setActiveNetwork(n.network_id)}
+          >
+            {n.network_name}
+          </button>
+        ))}
+      </div>
+
+      <div className="sidebar-section">
+        <span className="sidebar-label">Rooms</span>
+        {rooms.map(r => (
+          <button
+            key={r}
+            className={`sidebar-item ${r === activeRoom ? 'active' : ''}`}
+            onClick={() => setActiveRoom(r)}
+          >
+            {r.startsWith('dm:') ? `@ ${r.slice(3, 11)}…` : `# ${r}`}
+          </button>
+        ))}
+      </div>
+    </nav>
+  )
+}
--- a/web/src/index.css
+++ b/web/src/index.css
@@ -0,0 +1,111 @@
+:root {
+  --text: #6b6375;
+  --text-h: #08060d;
+  --bg: #fff;
+  --border: #e5e4e7;
+  --code-bg: #f4f3ec;
+  --accent: #aa3bff;
+  --accent-bg: rgba(170, 59, 255, 0.1);
+  --accent-border: rgba(170, 59, 255, 0.5);
+  --social-bg: rgba(244, 243, 236, 0.5);
+  --shadow:
+    rgba(0, 0, 0, 0.1) 0 10px 15px -3px, rgba(0, 0, 0, 0.05) 0 4px 6px -2px;
+
+  --sans: system-ui, 'Segoe UI', Roboto, sans-serif;
+  --heading: system-ui, 'Segoe UI', Roboto, sans-serif;
+  --mono: ui-monospace, Consolas, monospace;
+
+  font: 18px/145% var(--sans);
+  letter-spacing: 0.18px;
+  color-scheme: light dark;
+  color: var(--text);
+  background: var(--bg);
+  font-synthesis: none;
+  text-rendering: optimizeLegibility;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+
+  @media (max-width: 1024px) {
+    font-size: 16px;
+  }
+}
+
+@media (prefers-color-scheme: dark) {
+  :root {
+    --text: #9ca3af;
+    --text-h: #f3f4f6;
+    --bg: #16171d;
+    --border: #2e303a;
+    --code-bg: #1f2028;
+    --accent: #c084fc;
+    --accent-bg: rgba(192, 132, 252, 0.15);
+    --accent-border: rgba(192, 132, 252, 0.5);
+    --social-bg: rgba(47, 48, 58, 0.5);
+    --shadow:
+      rgba(0, 0, 0, 0.4) 0 10px 15px -3px, rgba(0, 0, 0, 0.25) 0 4px 6px -2px;
+  }
+
+  #social .button-icon {
+    filter: invert(1) brightness(2);
+  }
+}
+
+#root {
+  width: 1126px;
+  max-width: 100%;
+  margin: 0 auto;
+  text-align: center;
+  border-inline: 1px solid var(--border);
+  min-height: 100svh;
+  display: flex;
+  flex-direction: column;
+  box-sizing: border-box;
+}
+
+body {
+  margin: 0;
+}
+
+h1,
+h2 {
+  font-family: var(--heading);
+  font-weight: 500;
+  color: var(--text-h);
+}
+
+h1 {
+  font-size: 56px;
+  letter-spacing: -1.68px;
+  margin: 32px 0;
+  @media (max-width: 1024px) {
+    font-size: 36px;
+    margin: 20px 0;
+  }
+}
+h2 {
+  font-size: 24px;
+  line-height: 118%;
+  letter-spacing: -0.24px;
+  margin: 0 0 8px;
+  @media (max-width: 1024px) {
+    font-size: 20px;
+  }
+}
+p {
+  margin: 0;
+}
+
+code,
+.counter {
+  font-family: var(--mono);
+  display: inline-flex;
+  border-radius: 4px;
+  color: var(--text-h);
+}
+
+code {
+  font-size: 15px;
+  line-height: 135%;
+  padding: 4px 8px;
+  background: var(--code-bg);
+}
--- a/web/src/main.tsx
+++ b/web/src/main.tsx
@@ -0,0 +1,10 @@
+import { StrictMode } from 'react'
+import { createRoot } from 'react-dom/client'
+import './index.css'
+import App from './App.tsx'
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+)
--- a/web/src/pages/Chat.tsx
+++ b/web/src/pages/Chat.tsx
@@ -0,0 +1,13 @@
+import { Sidebar } from '../components/Sidebar'
+import { MessagePane } from '../components/MessagePane'
+import { PeerList } from '../components/PeerList'
+
+export function Chat() {
+  return (
+    <div className="chat-layout">
+      <Sidebar />
+      <MessagePane />
+      <PeerList />
+    </div>
+  )
+}
--- a/web/src/pages/Onboarding.tsx
+++ b/web/src/pages/Onboarding.tsx
@@ -0,0 +1,233 @@
+import { useState, useEffect } from 'react'
+import { useWaste } from '../store'
+
+interface Props {
+  status: 'disconnected' | 'connecting' | 'connected'
+}
+
+// Parse URL search params for pre-filling the join form.
+// Supports:
+//   ?invite=waste:<b64>   waste: invite string (anchor + network name + net hash)
+//   ?n=<name>             network name shorthand
+//   ?network=<name>       network name
+//   ?net=<64hex>          yaw2-style full network hash (joined without plaintext name)
+//   ?a=<url>              anchor URL hint (informational — daemon controls its anchor)
+function parseInviteParams(): { network: string; netHash: string; anchor: string; inviteString: string } {
+  const p = new URLSearchParams(window.location.search)
+  const inviteString = p.get('invite') ?? ''
+  let network = p.get('n') ?? p.get('network') ?? ''
+  let netHash = p.get('net') ?? ''
+  let anchor = p.get('a') ?? p.get('anchor') ?? ''
+
+  if (inviteString.startsWith('waste:')) {
+    try {
+      // URL-safe base64 → standard base64
+      const json = JSON.parse(atob(inviteString.slice(6).replace(/-/g, '+').replace(/_/g, '/')))
+      network = network || json.network || ''
+      netHash = netHash || json.net || ''
+      anchor = anchor || json.anchor || ''
+    } catch { /* ignore bad invite */ }
+  }
+
+  // URL path: /<16hex>/ — short network ID from anchor-served URL
+  const pathMatch = window.location.pathname.match(/\/([0-9a-f]{16})\/?$/i)
+  if (pathMatch && !netHash && !network) {
+    // Only the short ID — can't join by short ID alone (need full hash for HKDF).
+    // Store it as a hint; the user must supply the network name OR a full 64-char hash.
+  }
+
+  return { network, netHash, anchor, inviteString }
+}
+
+export function Onboarding({ status }: Props) {
+  const { send, masterAlias, masterId, exportedBackup } = useWaste()
+  const [network, setNetwork] = useState('')
+  const [netHash, setNetHash] = useState('')
+  const [inviteString, setInviteString] = useState('')
+  const [anchorHint, setAnchorHint] = useState('')
+  const [exportPass, setExportPass] = useState('')
+  const [importJson, setImportJson] = useState('')
+  const [importPass, setImportPass] = useState('')
+  const [importStatus, setImportStatus] = useState('')
+  const [showBackup, setShowBackup] = useState(false)
+
+  useEffect(() => {
+    const { network: n, netHash: nh, anchor: a, inviteString: inv } = parseInviteParams()
+    if (n) setNetwork(n)
+    if (nh) setNetHash(nh)
+    if (a) setAnchorHint(a)
+    if (inv) setInviteString(inv)
+  }, [])
+
+  function joinNetwork(e: React.FormEvent) {
+    e.preventDefault()
+    const name = network.trim()
+    const hash = netHash.trim()
+    if (!name && !hash) return
+    if (hash.length === 64 && !name) {
+      // yaw2-style: join by full network hash without plaintext name
+      send({ type: 'join_network', network_hash: hash })
+    } else {
+      send({ type: 'join_network', network_name: name })
+    }
+  }
+
+  function exportIdentity(e: React.FormEvent) {
+    e.preventDefault()
+    if (!exportPass.trim()) return
+    setExportBlob('')
+    send({ type: 'export_identity', passphrase: exportPass })
+  }
+
+  function importIdentity(e: React.FormEvent) {
+    e.preventDefault()
+    if (!importJson.trim() || !importPass.trim()) return
+    setImportStatus('Verifying…')
+    send({ type: 'import_identity', backup: importJson, passphrase: importPass })
+  }
+
+  const shortId = masterId ? masterId.slice(0, 16).replace(/(.{4})/g, '$1 ').trim() : null
+
+  // ── disconnected / connecting ────────────────────────────────────────────────
+  if (status !== 'connected') {
+    return (
+      <div className="onboarding">
+        <h1>waste</h1>
+        {status === 'connecting' ? (
+          <p className="status connecting">Connecting to daemon…</p>
+        ) : (
+          <>
+            <p className="status disconnected">Daemon not running</p>
+            <p className="onboarding-hint">
+              Start the daemon to use the web UI:
+            </p>
+            <pre className="onboarding-code">./launch-web.sh</pre>
+            <p className="onboarding-hint muted">
+              Or pass a custom alias and network:
+            </p>
+            <pre className="onboarding-code">ALIAS=alice NETWORK=friends ./launch-web.sh</pre>
+          </>
+        )}
+      </div>
+    )
+  }
+
+  // ── connected — join form ────────────────────────────────────────────────────
+  return (
+    <div className="onboarding">
+      <h1>waste</h1>
+
+      {masterAlias && (
+        <div className="onboarding-identity">
+          <span className="alias">{masterAlias}</span>
+          {shortId && <span className="peer-id mono">{shortId}</span>}
+        </div>
+      )}
+
+      <form onSubmit={joinNetwork} className="join-form">
+        <label className="join-label">Join a network</label>
+        {anchorHint && (
+          <p className="onboarding-hint muted">via {anchorHint}</p>
+        )}
+        {netHash && !network ? (
+          <input
+            value={netHash}
+            onChange={e => setNetHash(e.target.value)}
+            placeholder="network hash (64 hex)"
+            autoComplete="off"
+            autoFocus
+            className="mono"
+            style={{ fontSize: '0.72rem' }}
+          />
+        ) : (
+          <input
+            value={network}
+            onChange={e => setNetwork(e.target.value)}
+            placeholder="network name"
+            autoComplete="off"
+            autoFocus
+          />
+        )}
+        {inviteString && (
+          <p className="onboarding-hint muted mono" style={{ fontSize: '0.68rem', wordBreak: 'break-all' }}>
+            {inviteString.slice(0, 48)}…
+          </p>
+        )}
+        <button type="submit" className="primary" disabled={!network.trim() && netHash.length !== 64}>
+          Join
+        </button>
+      </form>
+
+      <div className="onboarding-section">
+        <button
+          className="toggle-link"
+          onClick={() => setShowBackup(b => !b)}
+        >
+          {showBackup ? '▾' : '▸'} Identity backup
+        </button>
+
+        {showBackup && (
+          <div className="backup-panel">
+            <p className="onboarding-hint">
+              Export your identity as an encrypted file. You can import it on
+              any machine or in the TUI with <code>--import-identity</code>.
+            </p>
+
+            <form onSubmit={exportIdentity} className="backup-form">
+              <input
+                type="password"
+                value={exportPass}
+                onChange={e => setExportPass(e.target.value)}
+                placeholder="passphrase for backup"
+                autoComplete="new-password"
+              />
+              <button type="submit" disabled={!exportPass.trim()}>Export</button>
+            </form>
+
+            {exportedBackup && (
+              <div className="export-result">
+                <textarea
+                  readOnly
+                  value={exportedBackup}
+                  rows={4}
+                  className="mono"
+                  onClick={e => (e.target as HTMLTextAreaElement).select()}
+                />
+                <button onClick={() => {
+                  const a = document.createElement('a')
+                  a.href = URL.createObjectURL(new Blob([exportedBackup], { type: 'application/json' }))
+                  a.download = `waste-identity-${masterId?.slice(0, 8) ?? 'backup'}.json`
+                  a.click()
+                }}>Download file</button>
+              </div>
+            )}
+
+            <details style={{ marginTop: '1rem' }}>
+              <summary className="onboarding-hint" style={{ cursor: 'pointer' }}>Restore from backup</summary>
+              <form onSubmit={importIdentity} className="backup-form" style={{ marginTop: '0.5rem' }}>
+                <textarea
+                  value={importJson}
+                  onChange={e => setImportJson(e.target.value)}
+                  placeholder='{"yaw":"yaw-key-backup-1", …}'
+                  rows={3}
+                  className="mono"
+                />
+                <input
+                  type="password"
+                  value={importPass}
+                  onChange={e => setImportPass(e.target.value)}
+                  placeholder="passphrase"
+                  autoComplete="current-password"
+                />
+                <button type="submit" disabled={!importJson.trim() || !importPass.trim()}>
+                  Verify & restore
+                </button>
+                {importStatus && <p className="onboarding-hint">{importStatus}</p>}
+              </form>
+            </details>
+          </div>
+        )}
+      </div>
+    </div>
+  )
+}
--- a/web/src/store/index.ts
+++ b/web/src/store/index.ts
@@ -0,0 +1,168 @@
+import { create } from 'zustand'
+import type { PeerInfo, NetworkInfo, ChatMessage, FileEntry, IpcMessage } from '../types'
+import { DaemonAdapter } from '../adapter/daemon'
+
+interface WasteState {
+  // connection
+  adapter: DaemonAdapter | null
+  daemonStatus: 'disconnected' | 'connecting' | 'connected'
+
+  // identity
+  masterAlias: string | null
+  masterId: string | null
+  localPeer: PeerInfo | null
+
+  // networks
+  networks: NetworkInfo[]
+  activeNetworkId: string | null
+
+  // peers
+  connectedPeers: PeerInfo[]
+
+  // chat — keyed by room
+  messages: Record<string, ChatMessage[]>
+  activeRoom: string
+
+  // file listings — keyed by peer id
+  fileLists: Record<string, FileEntry[]>
+
+  // identity backup export result (cleared when consumed)
+  exportedBackup: string | null
+
+  // actions
+  connect: (url: string) => void
+  disconnect: () => void
+  send: (msg: IpcMessage) => void
+  setActiveNetwork: (id: string) => void
+  setActiveRoom: (room: string) => void
+  handleEvent: (msg: IpcMessage) => void
+}
+
+export const useWaste = create<WasteState>((set, get) => ({
+  adapter: null,
+  daemonStatus: 'disconnected',
+  masterAlias: null,
+  masterId: null,
+  localPeer: null,
+  networks: [],
+  activeNetworkId: null,
+  connectedPeers: [],
+  messages: {},
+  activeRoom: 'general',
+  fileLists: {},
+  exportedBackup: null,
+
+  connect(url: string) {
+    const adapter = new DaemonAdapter(url)
+    adapter.onStatusChange = (s) => set({ daemonStatus: s })
+    adapter.on((msg) => get().handleEvent(msg))
+    adapter.connect()
+    set({ adapter })
+  },
+
+  disconnect() {
+    get().adapter?.disconnect()
+    set({ adapter: null, daemonStatus: 'disconnected' })
+  },
+
+  send(msg) {
+    get().adapter?.send(msg)
+  },
+
+  setActiveNetwork(id) {
+    set({ activeNetworkId: id })
+  },
+
+  setActiveRoom(room) {
+    set({ activeRoom: room })
+  },
+
+  handleEvent(msg) {
+    switch (msg.type) {
+      case 'state_snapshot': {
+        const networks = msg.networks ?? []
+        set({
+          masterAlias: msg.master_alias ?? null,
+          masterId: msg.master_id ?? null,
+          localPeer: msg.local_peer ?? null,
+          networks,
+          connectedPeers: msg.connected_peers ?? [],
+          activeNetworkId: networks[0]?.network_id ?? null,
+        })
+        break
+      }
+      case 'network_joined': {
+        set(s => ({
+          networks: s.networks.some(n => n.network_id === msg.network_id)
+            ? s.networks
+            : [...s.networks, {
+                network_id: msg.network_id!,
+                network_name: msg.network_name!,
+                share_dir: msg.share_dir,
+              }],
+          activeNetworkId: s.activeNetworkId ?? msg.network_id!,
+        }))
+        break
+      }
+      case 'network_left': {
+        set(s => ({
+          networks: s.networks.filter(n => n.network_id !== msg.network_id),
+          activeNetworkId: s.activeNetworkId === msg.network_id
+            ? (s.networks.find(n => n.network_id !== msg.network_id)?.network_id ?? null)
+            : s.activeNetworkId,
+        }))
+        break
+      }
+      case 'peer_connected': {
+        if (msg.peer) {
+          set(s => ({
+            connectedPeers: s.connectedPeers.some(p => p.id === msg.peer!.id)
+              ? s.connectedPeers
+              : [...s.connectedPeers, msg.peer!],
+          }))
+        }
+        break
+      }
+      case 'session_ready': {
+        if (msg.peer_id && msg.nick) {
+          set(s => ({
+            connectedPeers: s.connectedPeers.map(p =>
+              p.id === msg.peer_id ? { ...p, alias: msg.nick! } : p
+            ),
+          }))
+        }
+        break
+      }
+      case 'peer_disconnected': {
+        set(s => ({
+          connectedPeers: s.connectedPeers.filter(p => p.id !== msg.peer_id),
+        }))
+        break
+      }
+      case 'message_received': {
+        if (msg.message) {
+          const m = msg.message
+          const room = m.room
+          set(s => {
+            const existing = s.messages[room] ?? []
+            if (m.mid && existing.some(e => e.mid === m.mid)) return s
+            return { messages: { ...s.messages, [room]: [...existing, m] } }
+          })
+        }
+        break
+      }
+      case 'identity_exported': {
+        if (msg.backup) set({ exportedBackup: msg.backup })
+        break
+      }
+      case 'file_list': {
+        if (msg.peer_id && msg.files) {
+          set(s => ({
+            fileLists: { ...s.fileLists, [msg.peer_id!]: msg.files! },
+          }))
+        }
+        break
+      }
+    }
+  },
+}))
--- a/web/src/types.ts
+++ b/web/src/types.ts
@@ -0,0 +1,107 @@
+// Types mirroring internal/proto — keep in sync with proto.go
+
+export type PeerID = string // 64-char lowercase hex
+
+export interface PeerInfo {
+  id: PeerID
+  alias: string
+  public_key: string
+  created_at: string
+}
+
+export interface NetworkInfo {
+  network_id: string
+  network_name: string
+  local_peer?: PeerInfo
+  share_dir?: string
+  download_dir?: string
+}
+
+export interface ChatMessage {
+  mid?: string
+  from: PeerID
+  to?: PeerID
+  room: string
+  text: string
+  ts: number // Unix ms
+}
+
+export interface FileEntry {
+  name: string
+  size_bytes: number
+}
+
+export interface FileOffer {
+  xid: string
+  name: string
+  size: number
+  sha256: string
+}
+
+// ── IPC message types ─────────────────────────────────────────────────────────
+
+export type IpcMsgType =
+  // commands
+  | 'send_message'
+  | 'join_network'
+  | 'leave_network'
+  | 'get_state'
+  | 'send_file'
+  | 'set_share_dir'
+  | 'generate_invite'
+  | 'get_file_list'
+  | 'export_identity'
+  | 'import_identity'
+  // events
+  | 'state_snapshot'
+  | 'message_received'
+  | 'peer_connected'
+  | 'peer_disconnected'
+  | 'session_ready'
+  | 'network_joined'
+  | 'network_left'
+  | 'file_list'
+  | 'file_progress'
+  | 'file_complete'
+  | 'incoming_file'
+  | 'invite_generated'
+  | 'identity_exported'
+  | 'identity_imported'
+  | 'error'
+
+export interface IpcMessage {
+  type: IpcMsgType
+  // routing
+  network_id?: string
+  // send_message
+  room?: string
+  to?: PeerID
+  body?: string
+  // join_network
+  network_name?: string
+  network_hash?: string  // 64-char hex (yaw2 `net` field) — alternative to network_name
+  share_dir?: string
+  // send_file / set_share_dir
+  path?: string
+  peer_id?: PeerID
+  // identity
+  passphrase?: string
+  backup?: string
+  // events
+  peer?: PeerInfo
+  nick?: string
+  message?: ChatMessage
+  offer?: FileOffer
+  transfer_id?: string
+  bytes_received?: number
+  total_bytes?: number
+  master_alias?: string
+  master_id?: string
+  local_peer?: PeerInfo
+  connected_peers?: PeerInfo[]
+  rooms?: string[]
+  networks?: NetworkInfo[]
+  error_message?: string
+  invite?: string
+  files?: FileEntry[]
+}
--- a/web/tsconfig.app.json
+++ b/web/tsconfig.app.json
@@ -0,0 +1,25 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023", "DOM"],
+    "module": "esnext",
+    "types": ["vite/client"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src"]
+}
--- a/web/tsconfig.json
+++ b/web/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}
--- a/web/tsconfig.node.json
+++ b/web/tsconfig.node.json
@@ -0,0 +1,24 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023"],
+    "module": "esnext",
+    "types": ["node"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["vite.config.ts"]
+}
--- a/web/vite.config.ts
+++ b/web/vite.config.ts
@@ -0,0 +1,14 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    port: 5274,
+    strictPort: true,
+  },
+  preview: {
+    port: 5275,
+    strictPort: true,
+  },
+})
Author	SHA1	Message	Date
Fredrik Johansson	add7c5fea8	Add yaw2 invite interoperability Protocol: - invite.go: include full 64-char `net` hash in waste: invite blob (matches yaw2's `net` field — any client parsing the base64 JSON can join without knowing the plaintext name). Expose NetHash() helper. - netmgr: add JoinByHash() — join via full 64-char hex hash alone, storing the short ID as display name. Enables joining yaw2 networks from a URL that only carries the hash. - anchor: expose RunByHash() so netmgr can pass a pre-computed hash directly without a name→hash roundtrip. - ipc/proto: add network_hash field to join_network — routes to JoinByHash when present and network_name is absent. Web UI: - Parse ?net=<64hex> (yaw2 URL param) and ?a=<anchor> in addition to existing ?n= / ?invite= params. Hash-only joins send network_hash. - Sidebar shows yaw: contact card (yaw:<masterID>?n=<alias>) using the master identity — compatible with yaw2 contact card format. Click to copy to clipboard. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 23:29:45 +02:00
Fredrik Johansson	7fe02e9463	Fix web UI messaging, alias resolution, and onboarding Messaging: - Append \n to WS IPC sends so bufio.Scanner fires (messages from web were silently dropped — the line scanner never saw a newline) - Handle session_ready in web store to update peer aliases after hello Alias resolution: - Seed AddPeer alias from SQLite cache so returning peers resolve immediately, before hello exchange completes - Remove stale SavePeer call from AddPeer (was writing placeholder IDs) - Add PeerAlias() point-lookup to store Onboarding redesign: - Three-state UI: disconnected (daemon instructions), connecting, connected-no-network (join form) - Read ?n= / ?network= / ?anchor= / ?invite=waste:... URL params to pre-fill the join form for invite links - Show daemon alias + peer ID before any network is joined (master_alias + master_id now included in state_snapshot) - Identity backup: export (passphrase-protected yaw-key-backup-1 JSON, download button) and restore (paste + passphrase verify) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 23:22:32 +02:00
Fredrik Johansson	2bc1dbbedf	fix: run TCP and WS IPC concurrently, fail only if either dies Previously --ws-port started WS in a goroutine then called Run() which blocked; if TCP IPC failed it took the whole process down even though WS was up. Now both run in goroutines and the first error from either kills the daemon. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 22:11:20 +02:00
Fredrik Johansson	06f9359da8	fix: allow any origin on WS IPC (127.0.0.1-only bind is the guard) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 22:08:44 +02:00
Fredrik Johansson	ff14e955ea	feat: standalone web UI (React + Vite) React + TypeScript UI on port 5274. Connects to local daemon via WebSocket IPC (DaemonAdapter). Full chat layout with sidebar, message pane, and peer list. Mirrors the TUI feature set. - src/types.ts — IPC types mirroring proto.go - src/adapter/daemon — WebSocket IPC adapter with auto-reconnect - src/store/index.ts — Zustand store; handles all daemon events - src/pages/ — Onboarding (connect + join) and Chat - src/components/ — Sidebar, MessagePane, PeerList Dev: cd web && npm run dev (port 5274) Build: cd web && npm run build Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 21:57:32 +02:00
Fredrik Johansson	77830a3b3f	feat: WebSocket IPC endpoint for web UI Add --ws-port flag to waste-daemon; when set, starts a WebSocket IPC server alongside the existing TCP one. The web UI connects to this from the browser. Uses nhooyr.io/websocket with localhost-only origin policy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 21:57:10 +02:00
				`@@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>