← All changes | includes/render/assets.php +669 -323 0.9.6 → 1.1.12 View file →

		@@ -1,11 +1,11 @@
1	1	<?php
2	2	/**
3		- * Desktop Mode — Asset enqueue.
	3	+ * OpenStation — Asset enqueue.
4	4	*
5		- * Loads the desktop shell CSS + JS bundles when desktop mode is
	5	+ * Loads the desktop shell CSS + JS bundles when OpenStation is
6	6	* active and the request isn't chromeless / classic-overridden.
7		- * Owns the entire `desktop_mode_enqueue_assets()` body — the
	7	+ * Owns the entire `openstation_enqueue_assets()` body — the
8	8	* largest hook in the original render.php and the natural seam
9	9	* for "what does the shell ship to the browser today?".
10	10	*
11	11	* Extracted from `render.php` during the architecture-0.8.1 PHP
		@@ -10,42 +10,39 @@
10	10	*
11	11	* Extracted from `render.php` during the architecture-0.8.1 PHP
12	12	* slicing (phase 6).
13	13	*
14		- * @package Desktop_Mode
15		- * @since 0.8.1
	14	+ * @package OpenStation
16	15	*/
17	16
18	17	defined( 'ABSPATH' ) || exit;
19	18
20	19	/**
21		- * Enqueues the desktop mode shell assets (CSS + JS) when desktop mode is active.
	20	+ * Enqueues the OpenStation shell assets (CSS + JS) when OpenStation is active.
22	21	*
23	22	* Only loads the full desktop shell scripts and styles when the user has
24		- * desktop mode enabled and the request is not a chromeless iframe load.
25		- *
26		- * @since 0.1.0
	23	+ * OpenStation enabled and the request is not a chromeless iframe load.
27	24	*/
28		-function desktop_mode_enqueue_assets() {
	25	+function openstation_enqueue_assets() {
29	26	if ( ! is_admin() ) {
30	27	return;
31	28	}
32	29
33		- // Auto-enqueue the iframe bridge anywhere a desktop-mode user
	30	+ // Auto-enqueue the iframe bridge anywhere a openstation user
34	31	// might land. The bundle self-bails when not inside an iframe
35	32	// (`window.parent === window`), so it's a no-op on the parent
36	33	// shell — but cheap insurance against the failure mode the
37	34	// developer hit: an internal admin navigation drops the
38		- // `?desktop_mode_chromeless=1` flag, the chromeless inline bridge doesn't
39		- // run, and `wp.desktop.iframe` silently disappears. With this
	35	+ // `?openstation_chromeless=1` flag, the chromeless inline bridge doesn't
	36	+ // run, and `wp.os.iframe` silently disappears. With this
40	37	// auto-enqueue, the API is universally present for any same-
41		- // origin admin page a desktop-mode user opens — chromeless or
	38	+ // origin admin page a openstation user opens — chromeless or
42	39	// accidentally classic.
43		- if ( desktop_mode_is_enabled() ) {
44		- wp_enqueue_script( 'desktop-mode-iframe-bridge' );
	40	+ if ( openstation_is_enabled() ) {
	41	+ wp_enqueue_script( 'os-iframe-bridge' );
45	42
46	43	// Block Editor cross-window drop receiver. Listens for
47		- // `desktop-mode-drop` postMessages from the parent shell and
	44	+ // `os-drop` postMessages from the parent shell and
48	45	// inserts the matching block. Only enqueue inside the
49	46	// post-edit Block Editor screens — every other admin page
50	47	// would be paying for a bundle it never uses.
51	48	//
		@@ -56,46 +53,106 @@
56	53	// after the receiver's 5 s `waitForEditor()` poll. Re-enable
57	54	// once we have a reliable readiness signal in that context.
58	55	global $hook_suffix;
59	56	if ( 'post.php' === $hook_suffix || 'post-new.php' === $hook_suffix ) {
60		- wp_enqueue_script( 'desktop-mode-gutenberg-drop-receiver' );
	57	+ wp_enqueue_script( 'os-gutenberg-drop-receiver' );
61	58	}
62	59	}
63	60
64	61	// Chromeless requests (iframes) need chromeless styles and overrides.
65		- if ( desktop_mode_is_chromeless_request() ) {
66		- wp_enqueue_style( 'desktop-mode' );
67		- wp_enqueue_style( 'desktop-mode-chromeless' );
	62	+ if ( openstation_is_chromeless_request() ) {
	63	+ wp_enqueue_style( 'openstation' );
	64	+ wp_enqueue_style( 'os-chromeless' );
68	65
69	66	/**
70		- * Fires when chromeless styles are enqueued inside a desktop mode iframe.
	67	+ * Fires when chromeless styles are enqueued inside a OpenStation iframe.
71	68	*
72	69	* Plugin and theme authors can hook here to enqueue their own CSS
73	70	* overrides for legacy pages rendered in chromeless mode. Use the
74		- * `.desktop-mode-chromeless` body class to scope your rules.
75		- *
76		- * @since 0.1.0
	71	+ * `.os-chromeless` body class to scope your rules.
77	72	*/
78		- do_action( 'desktop_mode_chromeless_styles' );
	73	+ do_action( 'openstation_chromeless_styles' );
79	74	return;
80	75	}
81	76
82		- if ( ! desktop_mode_is_enabled() || desktop_mode_is_classic_request() ) {
	77	+ if ( ! openstation_is_shell_request() ) {
83	78	return;
84	79	}
85	80
86		- // CSS.
87		- wp_enqueue_style( 'desktop-mode' );
88		- wp_enqueue_style( 'desktop-mode-windows' );
89		- wp_enqueue_style( 'desktop-mode-dock' );
90		- wp_enqueue_style( 'desktop-mode-dock-peek' );
91		- wp_enqueue_style( 'desktop-mode-ai-assistant' );
92		- wp_enqueue_style( 'desktop-mode-bug-report' );
93		- wp_enqueue_style( 'desktop-mode-files' );
94		- wp_enqueue_style( 'desktop-mode-notes' );
	81	+ // CSS. Only the sheets that paint surfaces present at boot — the
	82	+ // shell chrome, the dock, desktop tiles and pinned notes. Sheets
	83	+ // for on-demand surfaces (Preferences panel, AI assistant, bug
	84	+ // report) ship as `deferredStyles` in the config blob below and
	85	+ // inject on first open; a native window's sheet rides its
	86	+ // registration's `styles` companion list the same way.
	87	+ wp_enqueue_style( 'openstation' );
	88	+ wp_enqueue_style( 'os-windows' );
	89	+ wp_enqueue_style( 'os-window-overview' );
	90	+ wp_enqueue_style( 'os-dock' );
	91	+ wp_enqueue_style( 'os-dock-peek' );
	92	+ wp_enqueue_style( 'os-workspaces' );
	93	+ wp_enqueue_style( 'os-shortcuts' );
	94	+ wp_enqueue_style( 'os-openstation-layout' );
	95	+ wp_enqueue_style( 'os-files' );
	96	+ wp_enqueue_style( 'os-notes' );
	97	+ // Unconditional like the layout sheet: a live crossing into the
	98	+ // phone band must not find the phone layer unstyled.
	99	+ wp_enqueue_style( 'os-mobile' );
95	100
	101	+ // Solo mode — a single window freed into a native OS window by the
	102	+ // desktop host. Same shell, everything but that one window hidden.
	103	+ $solo_window = openstation_solo_window_id();
	104	+ if ( '' !== $solo_window ) {
	105	+ wp_enqueue_style( 'os-solo' );
	106	+
	107	+ /*
	108	+ * Hide every window that is not the one this surface was booted
	109	+ * to paint — from the first frame, before any of them exist.
	110	+ *
	111	+ * Solo mode promises one window. Anything that opens a second
	112	+ * (a game launched from a freed Games hub, a plugin calling
	113	+ * `openWindow`) would otherwise land on top of the first, and
	114	+ * solo's CSS stretches every window to fill the viewport, so it
	115	+ * covers what the user was using.
	116	+ *
	117	+ * This has to be CSS rather than JavaScript, and it has to be
	118	+ * inline. A JS rule can only run once the window exists, which
	119	+ * is a frame too late — the user sees the newcomer flash before
	120	+ * it is dealt with. A static stylesheet cannot express it
	121	+ * either, because the selector depends on which window this is.
	122	+ * So the rule is emitted with the id baked in, and no window but
	123	+ * that one is ever painted.
	124	+ *
	125	+ * `visibility` rather than `display`: a hidden-but-laid-out
	126	+ * window still has a size, which canvas-based windows need in
	127	+ * order to initialise without dividing by zero on the way to
	128	+ * being closed.
	129	+ *
	130	+ * The id is `sanitize_key()`-clean (see `openstation_solo_window_id()`),
	131	+ * so it is safe in a selector; it is escaped again here because
	132	+ * the distance between those two facts is exactly where this
	133	+ * kind of bug lives.
	134	+ */
	135	+ wp_add_inline_style(
	136	+ 'os-solo',
	137	+ sprintf(
	138	+ 'body.os-solo .os-window:not(#wp-window-%1$s){visibility:hidden !important;pointer-events:none !important;}',
	139	+ esc_attr( $solo_window )
	140	+ )
	141	+ );
	142	+ }
	143	+
	144	+ // The rebrand announcement paints on one visit per user and never
	145	+ // again, so its stylesheet is only worth sending to the users who
	146	+ // are actually going to see it. Computed once here and reused for
	147	+ // the `rebrandNotice` config key below, which reads the same answer.
	148	+ $show_rebrand_notice = openstation_should_show_rebrand_notice();
	149	+ if ( $show_rebrand_notice ) {
	150	+ wp_enqueue_style( 'os-announce' );
	151	+ }
	152	+
96	153	// JS.
97		- wp_enqueue_script( 'desktop-mode' );
	154	+ wp_enqueue_script( 'openstation' );
98	155
99	156	// `wp_enqueue_command_palette_assets()` (WP 6.9+) enqueues the
100	157	// `wp-commands` store package, the `wp-core-commands` script that
101	158	// registers the WordPress-wide baseline (Add new post, Manage
		@@ -109,43 +166,45 @@
109	166	// WP normally only calls this on screens that opt in to the native
110	167	// palette; the shell needs it on every admin URL it might wrap.
111	168	// `function_exists` guard for pre-6.9 sites — the harvester gracefully
112	169	// no-ops when the store is missing.
	170	+ // See `openstation_defer_core_command_palette()` below for why
	171	+ // Core's own boot-time enqueue is unhooked on shell pages.
	172	+ //
	173	+ // The Core command-palette runtime is NOT enqueued here any more.
	174	+ // Its dependency chain is the whole Gutenberg runtime (~800 KB
	175	+ // gzipped across forty-odd bundles), paid on every boot for a ⌘K
	176	+ // palette most sessions never open. It now ships as an ordered
	177	+ // manifest in the config blob (`commandPalette`, built by
	178	+ // `openstation_build_command_palette_assets_payload()`), and
	179	+ // `src/commands/palette-assets.ts` replays it the first time the
	180	+ // palette is invoked. The shell harvester keeps its idle-time
	181	+ // `install()` — a graceful no-op until the store exists — and
	182	+ // re-installs on `os-command-palette-ready`.
	183	+ $command_palette = openstation_build_command_palette_assets_payload();
	184	+
113	185	if ( function_exists( 'wp_enqueue_command_palette_assets' ) ) {
114		- // `wp_enqueue_command_palette_assets()` calls
115		- // `array_key_exists( $menu_slug, $submenu )` without guarding
116		- // the global, so an unset `$submenu` (test contexts, edge-case
117		- // admin requests where the menu wasn't built yet) blows up
118		- // with a TypeError. Initialize defensively before calling.
119		- global $menu, $submenu;
120		- if ( ! isset( $submenu ) || ! is_array( $submenu ) ) {
121		- $submenu = array();
122		- }
123		- if ( ! isset( $menu ) || ! is_array( $menu ) ) {
124		- $menu = array();
125		- }
126		- wp_enqueue_command_palette_assets();
127		-
128	186	// Expose the same menu-commands array WP serializes into
129	187	// `wp.coreCommands.initializeCommandPalette(...)` on a window
130	188	// slot the shell harvester can read. Built in PHP from `$menu`
131		- // / `$submenu` here (we already guarded that they're arrays
132		- // above), then injected as a `before` inline on our own bundle
133		- // — that runs synchronously before `desktop.min.js` boots the
134		- // shell harvester, so the lookup is guaranteed populated by
135		- // the time `src/commands/shell-harvester.ts` classifies any
136		- // command. Decoupled from WP's command-palette mount timing
137		- // (which fires from a core-registered hook we can't reorder).
138		- $menu_map = desktop_mode_build_command_menu_map();
	189	+ // / `$submenu`, then injected as a `before` inline on our own
	190	+ // bundle — that runs synchronously before `desktop.min.js`
	191	+ // boots the shell harvester, so the lookup is guaranteed
	192	+ // populated by the time `src/commands/shell-harvester.ts`
	193	+ // classifies any command. Decoupled from WP's command-palette
	194	+ // mount timing (which fires from a core-registered hook we
	195	+ // can't reorder) — and, since the palette bundles went lazy,
	196	+ // from whether they have loaded at all.
	197	+ $menu_map = openstation_build_command_menu_map();
139	198	wp_add_inline_script(
140		- 'desktop-mode',
141		- 'window.__desktopModeMenuCommands = ' . wp_json_encode( $menu_map ) . ';',
	199	+ 'openstation',
	200	+ 'window.__openStationMenuCommands = ' . wp_json_encode( $menu_map ) . ';',
142	201	'before'
143	202	);
144	203	}
145	204
146	205	// Pass configuration to JavaScript.
147		- global $title, $pagenow, $parent_file, $menu;
	206	+ global $title, $parent_file, $menu;
148	207
149	208	$menu_icon = 'dashicons-admin-generic';
150	209	if ( ! empty( $parent_file ) && ! empty( $menu ) ) {
151	210	foreach ( $menu as $item ) {
		@@ -157,72 +216,125 @@
157	216	}
158	217
159	218	// Build dock items from the admin menu. Core pages are ordered
160	219	// first (Dashboard, Posts, Plugins, Users, Settings, …), then
161		- // plugin-contributed top-level routes. `desktop_mode_dock_placement`
	220	+ // plugin-contributed top-level routes. `openstation_dock_placement`
162	221	// is the per-item filter escape hatch for hiding. Shared with the
163	222	// REST menu endpoint so live refreshes (post plugin-activation)
164	223	// produce the same ordering as the boot payload.
165		- $menu_payload = desktop_mode_build_menu_payload();
166		- $dock_items = $menu_payload['dockItems'];
167		- $native_windows = isset( $menu_payload['nativeWindows'] )
	224	+ $menu_payload = openstation_build_menu_payload();
	225	+ $dock_items = $menu_payload['dockItems'];
	226	+ $native_windows = isset( $menu_payload['nativeWindows'] )
168	227	? $menu_payload['nativeWindows']
169	228	: array();
170		- $server_widgets = isset( $menu_payload['serverWidgets'] )
	229	+
	230	+ // The BOOT page prints every registry window's template as a real
	231	+ // `<template>` tag (`openstation_render_native_window_templates()`,
	232	+ // admin_footer @ 20 — before footer scripts, so the tags are in
	233	+ // the DOM before the shell boots and `ensureTemplate()` adopts
	234	+ // them by id). The payload's `templateHtml` copy exists for the
	235	+ // MID-SESSION path — a bridge or probe payload delivering a
	236	+ // window whose plugin activated after the page rendered — so on
	237	+ // the boot config it is ~27 KB of the same markup twice. Strip it
	238	+ // here, and only here: the bridge and probe payloads keep theirs.
	239	+ foreach ( $native_windows as &$native_window_row ) {
	240	+ if ( is_array( $native_window_row ) ) {
	241	+ $native_window_row['templateHtml'] = '';
	242	+ }
	243	+ }
	244	+ unset( $native_window_row );
	245	+ $native_window_script_data = isset( $menu_payload['nativeWindowScriptData'] )
	246	+ ? $menu_payload['nativeWindowScriptData']
	247	+ : array();
	248	+ $server_widgets = isset( $menu_payload['serverWidgets'] )
171	249	? $menu_payload['serverWidgets']
172	250	: array();
173		- $server_wallpapers = isset( $menu_payload['serverWallpapers'] )
	251	+ $server_wallpapers = isset( $menu_payload['serverWallpapers'] )
174	252	? $menu_payload['serverWallpapers']
175	253	: array();
176		- $server_command_scripts = isset( $menu_payload['serverCommandScripts'] )
	254	+ $server_command_scripts = isset( $menu_payload['serverCommandScripts'] )
177	255	? $menu_payload['serverCommandScripts']
178	256	: array();
179		- $server_commands = isset( $menu_payload['serverCommands'] )
	257	+ $server_commands = isset( $menu_payload['serverCommands'] )
180	258	? $menu_payload['serverCommands']
181	259	: array();
182		- $server_settings_tab_scripts = isset( $menu_payload['serverSettingsTabScripts'] )
	260	+ $server_settings_tab_scripts = isset( $menu_payload['serverSettingsTabScripts'] )
183	261	? $menu_payload['serverSettingsTabScripts']
184	262	: array();
185		- $server_settings_tabs = isset( $menu_payload['serverSettingsTabs'] )
	263	+ $server_settings_tabs = isset( $menu_payload['serverSettingsTabs'] )
186	264	? $menu_payload['serverSettingsTabs']
187	265	: array();
188	266	$server_dock_rail_renderer_scripts = isset( $menu_payload['serverDockRailRendererScripts'] )
189	267	? $menu_payload['serverDockRailRendererScripts']
190	268	: array();
191		- $server_titlebar_button_scripts = isset( $menu_payload['serverTitleBarButtonScripts'] )
	269	+ $server_titlebar_button_scripts = isset( $menu_payload['serverTitleBarButtonScripts'] )
192	270	? $menu_payload['serverTitleBarButtonScripts']
193	271	: array();
194		- $server_window_theme_scripts = isset( $menu_payload['serverWindowThemeScripts'] )
	272	+ $server_window_action_scripts = isset( $menu_payload['serverWindowActionScripts'] )
	273	+ ? $menu_payload['serverWindowActionScripts']
	274	+ : array();
	275	+ $server_window_theme_scripts = isset( $menu_payload['serverWindowThemeScripts'] )
195	276	? $menu_payload['serverWindowThemeScripts']
196	277	: array();
197		- $server_window_themes = isset( $menu_payload['serverWindowThemes'] )
	278	+ $server_window_themes = isset( $menu_payload['serverWindowThemes'] )
198	279	? $menu_payload['serverWindowThemes']
199	280	: array();
200		- $server_window_control_scripts = isset( $menu_payload['serverWindowControlScripts'] )
	281	+ $server_window_control_scripts = isset( $menu_payload['serverWindowControlScripts'] )
201	282	? $menu_payload['serverWindowControlScripts']
202	283	: array();
203		- $server_window_controls = isset( $menu_payload['serverWindowControls'] )
	284	+ $server_window_controls = isset( $menu_payload['serverWindowControls'] )
204	285	? $menu_payload['serverWindowControls']
205	286	: array();
206		- $server_window_slot_scripts = isset( $menu_payload['serverWindowSlotScripts'] )
	287	+ $server_window_slot_scripts = isset( $menu_payload['serverWindowSlotScripts'] )
207	288	? $menu_payload['serverWindowSlotScripts']
208	289	: array();
209		- $server_window_slots = isset( $menu_payload['serverWindowSlots'] )
	290	+ $server_window_slots = isset( $menu_payload['serverWindowSlots'] )
210	291	? $menu_payload['serverWindowSlots']
211	292	: array();
212		- $server_window_chrome_scripts = isset( $menu_payload['serverWindowChromeScripts'] )
	293	+ $server_window_chrome_scripts = isset( $menu_payload['serverWindowChromeScripts'] )
213	294	? $menu_payload['serverWindowChromeScripts']
214	295	: array();
215		- $server_window_chromes = isset( $menu_payload['serverWindowChromes'] )
	296	+ $server_window_chromes = isset( $menu_payload['serverWindowChromes'] )
216	297	? $menu_payload['serverWindowChromes']
217	298	: array();
218		- $server_window_notices = isset( $menu_payload['serverWindowNotices'] )
	299	+ $server_window_notices = isset( $menu_payload['serverWindowNotices'] )
219	300	? $menu_payload['serverWindowNotices']
220	301	: array();
221		- $server_games = isset( $menu_payload['serverGames'] )
	302	+ $server_games = isset( $menu_payload['serverGames'] )
222	303	? $menu_payload['serverGames']
223	304	: array();
224		- $desktop_icons = isset( $menu_payload['desktopIcons'] )
	305	+ // Boot-time copy of the desktop-theme library. Without it the
	306	+ // shell's registry seeds EMPTY, and the consequences are subtle
	307	+ // rather than obvious: PHP has already applied the user's theme
	308	+ // server-side (stylesheet + shell attribute), but the client
	309	+ // can't resolve the slug to an entry, so it believes nothing is
	310	+ // active. Themed ICONS never paint, and switching back to the
	311	+ // system default no-ops the first time — `applyDesktopTheme()`
	312	+ // dedupes on an `activeId` that was never set.
	313	+ $server_desktop_themes = isset( $menu_payload['serverDesktopThemes'] )
	314	+ ? $menu_payload['serverDesktopThemes']
	315	+ : array();
	316	+
	317	+ // Slim the theme library for BOOT: `cssText` and `tokens` are
	318	+ // each ~20 KB per theme, and neither is read at boot — the ACTIVE
	319	+ // theme's stylesheet is server-delivered (see
	320	+ // `openstation_enqueue_desktop_theme_style()`, whose stamp
	321	+ // `bootAlreadyApplied()` detects), and an inactive theme's CSS
	322	+ // only matters at the moment the user picks it in the Preferences
	323	+ // picker — which fetches the full entries from
	324	+ // `GET desktop-mode/v1/desktop-themes` (`ensureFullDesktopThemes()`
	325	+ // client-side). `cssDeferred` marks the gap so the shell can tell
	326	+ // a slimmed entry from a theme that genuinely ships no CSS.
	327	+ // Bridge and probe payloads keep full entries.
	328	+ foreach ( $server_desktop_themes as &$desktop_theme_row ) {
	329	+ if ( is_array( $desktop_theme_row ) ) {
	330	+ $desktop_theme_row['cssText'] = '';
	331	+ $desktop_theme_row['tokens'] = new stdClass();
	332	+ $desktop_theme_row['cssDeferred'] = true;
	333	+ }
	334	+ }
	335	+ unset( $desktop_theme_row );
	336	+ $desktop_icons = isset( $menu_payload['desktopIcons'] )
225	337	? $menu_payload['desktopIcons']
226	338	: array();
227	339
228	340	// Files-on-the-Desktop payload (Phase 0+1). Plugin-registered
		@@ -227,25 +339,33 @@
227	339
228	340	// Files-on-the-Desktop payload (Phase 0+1). Plugin-registered
229	341	// file types and openers ship as metadata only; the JS side
230	342	// holds the executable handlers and resolves on double-click.
231		- $server_file_types = function_exists( 'desktop_mode_build_file_types_payload' )
232		- ? desktop_mode_build_file_types_payload()
	343	+ $server_file_types = function_exists( 'openstation_build_file_types_payload' )
	344	+ ? openstation_build_file_types_payload()
233	345	: array();
234		- $server_file_openers = function_exists( 'desktop_mode_build_file_openers_payload' )
235		- ? desktop_mode_build_file_openers_payload()
	346	+ $server_file_openers = function_exists( 'openstation_build_file_openers_payload' )
	347	+ ? openstation_build_file_openers_payload()
236	348	: array();
237		- $user_file_associations = function_exists( 'desktop_mode_get_user_file_associations' )
238		- ? desktop_mode_get_user_file_associations( get_current_user_id() )
	349	+ // Entries in the menu payload carry dependency handles; their
	350	+ // payloads ride once in `scriptDepPayloads` (GH#892). The file
	351	+ // lists stay whole: no sync module reads them on the client, and
	352	+ // compacting them here was the only write to the map after the
	353	+ // menu payload froze its own, so a refresh could not match it.
	354	+ $script_dep_payloads = isset( $menu_payload['scriptDepPayloads'] )
	355	+ ? (array) $menu_payload['scriptDepPayloads']
239	356	: array();
240		- $server_wallpaper_menu_items = function_exists( 'desktop_mode_build_wallpaper_menu_items' )
241		- ? desktop_mode_build_wallpaper_menu_items()
	357	+ $user_file_associations = function_exists( 'openstation_get_user_file_associations' )
	358	+ ? openstation_get_user_file_associations( get_current_user_id() )
242	359	: array();
	360	+ $server_wallpaper_menu_items = function_exists( 'openstation_build_wallpaper_menu_items' )
	361	+ ? openstation_build_wallpaper_menu_items()
	362	+ : array();
243	363
244	364	/*
245	365	* OS-file drop config — what the browser drop manager will
246	366	* accept when the user drags a file from their native desktop
247		- * onto any surface inside Desktop Mode (wallpaper, a folder,
	367	+ * onto any surface inside OpenStation (wallpaper, a folder,
248	368	* a window, or a chromeless iframe). The allowed-mimes list is
249	369	* the user-scoped `get_allowed_mime_types()` (already capability
250	370	* gated by WordPress); the size cap is `wp_max_upload_size()`.
251	371	*
		@@ -258,14 +378,12 @@
258	378	: array();
259	379	/**
260	380	* Filter the allowed-mime map used by the OS-file drop manager.
261	381	*
262		- * @since 0.30.0
263		- *
264	382	* @param array<string,string> $mimes_map `ext => mime-type` map (same shape `get_allowed_mime_types()` returns).
265	383	* @param int $user_id The current user id.
266	384	*/
267		- $drop_allowed_mimes_map = apply_filters( 'desktop_mode_drop_allowed_mimes', $drop_allowed_mimes_map, get_current_user_id() );
	385	+ $drop_allowed_mimes_map = apply_filters( 'openstation_drop_allowed_mimes', $drop_allowed_mimes_map, get_current_user_id() );
268	386	$drop_allowed_mimes_map = is_array( $drop_allowed_mimes_map ) ? $drop_allowed_mimes_map : array();
269	387	$drop_allowed_mimes = array_values( array_unique( array_values( $drop_allowed_mimes_map ) ) );
270	388
271	389	$drop_max_size = (int) wp_max_upload_size();
		@@ -273,14 +391,12 @@
273	391	* Filter the per-file size cap (in bytes) used by the OS-file
274	392	* drop manager. Returning `0` disables the client-side cap —
275	393	* the server still enforces its own.
276	394	*
277		- * @since 0.30.0
278		- *
279	395	* @param int $max_size Default `wp_max_upload_size()`.
280	396	* @param int $user_id The current user id.
281	397	*/
282		- $drop_max_size = (int) apply_filters( 'desktop_mode_drop_max_size', $drop_max_size, get_current_user_id() );
	398	+ $drop_max_size = (int) apply_filters( 'openstation_drop_max_size', $drop_max_size, get_current_user_id() );
283	399
284	400	/**
285	401	* Filter the master OS-file drop enable gate. Lets plugins
286	402	* disable the drop manager by role / capability beyond the
		@@ -286,15 +402,13 @@
286	402	* disable the drop manager by role / capability beyond the
287	403	* default `upload_files` check (e.g. only for admins, or
288	404	* only on specific multisite blogs).
289	405	*
290		- * @since 0.30.0
291		- *
292	406	* @param bool $enabled Default — `current_user_can( 'upload_files' )`.
293	407	* @param int $user_id The current user id.
294	408	*/
295	409	$drop_enabled = (bool) apply_filters(
296		- 'desktop_mode_drop_enabled',
	410	+ 'openstation_drop_enabled',
297	411	current_user_can( 'upload_files' ),
298	412	get_current_user_id()
299	413	);
300	414
		@@ -305,48 +419,61 @@
305	419	'maxSize' => $drop_max_size,
306	420	);
307	421
308	422	// Lazy-bundle URL builder. Each lazy-loaded bundle (AI Assistant,
309		- // About-scene, OS Settings panel, shell-overlays, window-system)
	423	+ // OS Settings panel, shell-overlays, window-system)
310	424	// is `<script>`-injected by the main bundle on demand — they don't
311	425	// go through `wp_register_script`, so they don't pick up WordPress's
312	426	// usual `?ver=<filemtime>` cache-buster. Without one, the browser
313	427	// happily serves a stale cached copy across plugin updates that
314		- // don't bump `DESKTOP_MODE_VERSION`, and the main bundle's loader
	428	+ // don't bump `OPENSTATION_VERSION`, and the main bundle's loader
315	429	// fires a `<script>`-loaded event for a file that's missing the
316		- // fresh `window.desktopMode*` factory the new code expects.
	430	+ // fresh `window.openStation*` factory the new code expects.
317	431	//
318	432	// Mirror the `$built_version( … )` helper in `includes/assets.php`:
319	433	// prefer the on-disk mtime of the actual file, fall back to the
320	434	// plugin version when the file is missing (dev environments where
321	435	// the bundle hasn't been built yet).
322		- $suffix = ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) ? '' : '.min';
	436	+ $suffix = openstation_asset_suffix();
323	437	$lazy_bundle_url = static function ( $base ) use ( $suffix ) {
324		- $path = DESKTOP_MODE_DIR . 'assets/js/' . $base . $suffix . '.js';
	438	+ $path = OPENSTATION_DIR . 'assets/js/' . $base . $suffix . '.js';
325	439	$ver = file_exists( $path )
326	440	? (string) filemtime( $path )
327		- : DESKTOP_MODE_VERSION;
	441	+ : OPENSTATION_VERSION;
328	442	return esc_url_raw(
329		- DESKTOP_MODE_URL . 'assets/js/' . $base . $suffix . '.js?ver=' . $ver
	443	+ OPENSTATION_URL . 'assets/js/' . $base . $suffix . '.js?ver=' . $ver
330	444	);
331	445	};
332	446
333		- // Build the current page URL from $pagenow + $_GET. Strip the portal
334		- // markers so the derived window ID matches what the dock would produce
335		- // for the same page — otherwise auto-opening the entry window and
336		- // clicking the same dock icon would create a duplicate.
337		- $current_query = $_GET; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
338		- unset( $current_query[ DESKTOP_MODE_PORTAL_FLAG ], $current_query[ DESKTOP_MODE_PORTAL_INTENT_FLAG ] );
339		- $current_page = admin_url( $pagenow ) . ( ! empty( $current_query ) ? '?' . http_build_query( $current_query ) : '' );
	447	+ // The page the shell opens first. On the shell screen it is the
	448	+ // validated `target` query arg (else the session's focused window,
	449	+ // the default window, the Dashboard); on a solo boot it is the
	450	+ // request's own URL. Either way the frozen portal flags are gone
	451	+ // from it, so the derived window id matches what the dock would
	452	+ // produce for the same page — otherwise auto-opening the entry
	453	+ // window and clicking the same dock icon would create a duplicate.
	454	+ $boot_target = openstation_shell_boot_target();
	455	+ $current_page = $boot_target['url'];
	456	+ $from_portal = $boot_target['fromPortal'];
	457	+ $from_portal_intent = $boot_target['fromPortalIntent'];
340	458
341		- $from_portal = ! empty( $_GET[ DESKTOP_MODE_PORTAL_FLAG ] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
342		- $from_portal_intent = ! empty( $_GET[ DESKTOP_MODE_PORTAL_INTENT_FLAG ] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	459	+ // On the shell screen `$title` and `$parent_file` describe the
	460	+ // screen ("OpenStation", no menu), not the page about to open. The
	461	+ // dock entry for that page is the identity the entry window folds
	462	+ // into, so its title and icon are the right first paint; the iframe
	463	+ // reports its own title once it lands either way.
	464	+ $current_title = wp_strip_all_tags( (string) $title );
	465	+ if ( openstation_is_shell_screen_request() ) {
	466	+ $boot_meta = openstation_shell_boot_target_meta( $current_page, $dock_items );
	467	+ $current_title = wp_strip_all_tags( $boot_meta['title'] );
	468	+ if ( '' !== $boot_meta['icon'] ) {
	469	+ $menu_icon = $boot_meta['icon'];
	470	+ }
	471	+ }
343	472
344	473	/**
345	474	* Filters the desktop shell configuration passed to JavaScript.
346	475	*
347		- * @since 0.1.0
348		- *
349	476	* @param array $config {
350	477	* Desktop shell configuration.
351	478	*
352	479	* @type string $currentPage The current admin page URL.
		@@ -353,20 +480,20 @@
353	480	* @type string $currentTitle The current page title.
354	481	* @type string $currentIcon Dashicon class for the current page.
355	482	* @type string $adminUrl The base admin URL.
356	483	* @type string $colorScheme The active admin color scheme.
357		- * @type array $dockItems Dock items derived from the admin menu. Core WordPress pages (Dashboard, Posts, Plugins, Users, Settings, CPTs…) are ordered first; plugin-contributed top-level routes (admin.php?page=*) follow. Items hidden via `desktop_mode_dock_placement` are omitted.
358		- * @type array $nativeWindows Server-declared native windows (via `desktop_mode_register_window`). Shell registers + syncs tiles based on this list — activation/deactivation is a diff without shell reload.
359		- * @type array $serverWidgets Server-declared right-column widgets (via `desktop_mode_register_widget`). Shell syncs the widget registry + dynamically loads plugin scripts so widgets appear in the picker without a shell reload.
360		- * @type array $serverWallpapers Server-declared wallpapers (via `desktop_mode_register_wallpaper`). Same lifecycle — shell loads the plugin's JS, reads the full `WallpaperDef` from `window.desktopModeWallpapers[id]`, and registers / unregisters as plugins activate / deactivate.
361		- * @type array $serverCommandScripts Script handles opted-in via `desktop_mode_register_command_script`. Shell injects each URL on activation so commands registered by `wp.desktop.registerCommand` appear in the palette live. Deactivation unregisters any commands whose `owner` matches the departing handle.
362		- * @type array $serverCommands Server-declared command metadata (via `desktop_mode_register_command`). Advisory today — reserved for future pre-registration shims.
363		- * @type array $serverSettingsTabScripts Script handles opted-in via `desktop_mode_register_settings_tab_script`. Shell injects each URL on activation so tabs registered by `wp.desktop.registerSettingsTab` appear in the OS Settings window live. Deactivation unregisters tabs attributable to the departing handle.
364		- * @type array $serverSettingsTabs Server-declared settings-tab metadata (via `desktop_mode_register_settings_tab`). Enables live unregistration on plugin deactivation without requiring JS to set `owner`.
365		- * @type array $desktopIcons Server-declared desktop icons (via `desktop_mode_register_icon`). Rendered on the wallpaper as clickable shortcut tiles.
366		- * @type array $accentColors Swatch list for the OS Settings accent picker. Filterable via `desktop_mode_accent_colors`.
367		- * @type array $toastTypes Toast-notification type map. Filterable via `desktop_mode_toast_types`.
368		- * @type string $defaultWallpaper Wallpaper slug applied on first boot. Filterable via `desktop_mode_default_wallpaper`.
	484	+ * @type array $dockItems Dock items derived from the admin menu. Core WordPress pages (Dashboard, Posts, Plugins, Users, Settings, CPTs…) are ordered first; plugin-contributed top-level routes (admin.php?page=*) follow. Items hidden via `openstation_dock_placement` are omitted.
	485	+ * @type array $nativeWindows Server-declared native windows (via `openstation_register_window`). Shell registers + syncs tiles based on this list — activation/deactivation is a diff without shell reload.
	486	+ * @type array $serverWidgets Server-declared right-column widgets (via `openstation_register_widget`). Shell syncs the widget registry + dynamically loads plugin scripts so widgets appear in the picker without a shell reload.
	487	+ * @type array $serverWallpapers Server-declared wallpapers (via `openstation_register_wallpaper`). Same lifecycle — shell loads the plugin's JS, reads the full `WallpaperDef` from `window.openStationWallpapers[id]`, and registers / unregisters as plugins activate / deactivate.
	488	+ * @type array $serverCommandScripts Script handles opted-in via `openstation_register_command_script`. Shell injects each URL on activation so commands registered by `wp.os.registerCommand` appear in the palette live. Deactivation unregisters any commands whose `owner` matches the departing handle.
	489	+ * @type array $serverCommands Server-declared command metadata (via `openstation_register_command`). Advisory today — reserved for future pre-registration shims.
	490	+ * @type array $serverSettingsTabScripts Script handles opted-in via `openstation_register_settings_tab_script`. Shell injects each URL on activation so tabs registered by `wp.os.registerSettingsTab` appear in the OS Settings window live. Deactivation unregisters tabs attributable to the departing handle.
	491	+ * @type array $serverSettingsTabs Server-declared settings-tab metadata (via `openstation_register_settings_tab`). Enables live unregistration on plugin deactivation without requiring JS to set `owner`.
	492	+ * @type array $desktopIcons Server-declared desktop icons (via `openstation_register_icon`). Rendered on the wallpaper as clickable shortcut tiles.
	493	+ * @type array $accentColors Swatch list for the OS Settings accent picker. Filterable via `openstation_accent_colors`.
	494	+ * @type array $toastTypes Toast-notification type map. Filterable via `openstation_toast_types`.
	495	+ * @type string $defaultWallpaper Wallpaper slug applied on first boot. Filterable via `openstation_default_wallpaper`.
369	496	* @type array $session Saved session (windows, focused, updated).
370	497	* @type string $sessionUrl REST endpoint for saving the session.
371	498	* @type string $mediaUrl REST endpoint for media uploads (wp/v2/media).
372	499	* @type string $restUrl REST API root from rest_url(), safe for pretty and plain permalink installs.
		@@ -374,174 +501,312 @@
374	501	* @type array $defaultWindow { enabled: bool, url: string } — current default-window preference.
375	502	* @type bool $canUpload Whether the user holds the `upload_files` capability.
376	503	* @type string $pluginUrl Plugin base URL (no trailing slash). Used by the shell to locate vendor assets and by plugins to build asset URLs.
377	504	* @type string $pluginVersion Plugin semver string. Surfaced in the OS Settings → About tab; plugins can read it to gate features by version.
	505	+ * @type string $aboutFeedUrl Authenticated admin-AJAX URL that returns the cached OpenStation journal feed for the About tab.
378	506	* @type string $restNonce Nonce for the session REST endpoint.
379		- * @type string $portalUrl Canonical `/desktop-mode/` URL.
	507	+ * @type string $soloWindow Window id when the shell was asked to paint exactly one window (`?openstation_solo=<id>`); '' otherwise. No dock, taskbar, wallpaper or desk, and no session restore.
	508	+ * @type string $portalUrl Canonical `/openstation/` URL.
380	509	* @type bool $fromPortal Whether the shell was reached via the portal.
381		- * @type bool $fromPortalIntent Whether the portal redirect resolved from an explicit `?target=…` (user navigation intent) rather than the session's focused window or the default-window fallback. Distinguishes a bare `/desktop-mode/` visit from a portal-redirected admin-bar click so the shell can honour the URL the user actually asked for.
382		- * @type array $seenIntros Slugs of one-time intro dialogs the user has dismissed (e.g. `['posts']`). Native windows gate their first-open intro on this list.
	510	+ * @type bool $fromPortalIntent Whether the portal redirect resolved from an explicit `?target=…` (user navigation intent) rather than the session's focused window or the default-window fallback. Distinguishes a bare `/openstation/` visit from a portal-redirected admin-bar click so the shell can honour the URL the user actually asked for.
	511	+ * @type array $seenIntros Slugs of one-time announcements the user has dismissed (e.g. `['openstation-rebrand']`).
383	512	* @type string $seenIntrosUrl REST endpoint for the seen-intros surface — POST `/seen` to mark, DELETE the base to reset.
384		- * @type array $stickyNotes { available: bool } — whether the Gutenberg Guidelines experiment (the `wp_guideline` CPT + `wp_guideline_type` taxonomy) is registered. The shell skips booting the sticky-notes layer when false, avoiding the REST probes that 404 without the experiment. See `desktop_mode_sticky_notes_is_available()`.
	513	+ * @type bool $shellTour Whether this site offers the first-boot shell tour (`openstation_show_shell_tour`). Whether this user already had it is `seenIntros` containing `shell-tour`.
	514	+ * @type string $shellTourBundleUrl URL of the lazy shell-tour bundle, injected on first use.
	515	+ * @type array $firstRun `{ installedAt, firstEnabledAt, enabledAt }`, epoch seconds, 0 when unknown — the first-run stamps, read-only.
	516	+ * @type bool $rebrandNotice Whether to offer this user the one-off announcement explaining the rename from Desktop Mode to OpenStation. True only when migration 5 flagged this user as a Desktop Mode user from before the rename AND they haven't dismissed the `openstation-rebrand` intro. Only ever present in the shell config, so the announcement never reaches the classic admin.
	517	+ * @type array|null $usageFeedback What the one-time usage feedback prompt needs (`restUrl`), or `null` when this user is not owed it: the feature is off, they have had OpenStation on for fewer than seven days by the `openstation_enabled_at` stamp, or they already answered or dismissed the `usage-feedback` intro. Carries no user data.
	518	+ * @type string $usageFeedbackBundleUrl URL of the lazy `usage-feedback` bundle, the form the prompt opens.
385	519	* }
386	520	*/
387	521	$config = apply_filters(
388		- 'desktop_mode_shell_config',
	522	+ 'openstation_shell_config',
389	523	array(
390		- 'currentPage' => esc_url( $current_page ),
391		- 'currentTitle' => wp_strip_all_tags( $title ),
392		- 'currentIcon' => sanitize_html_class( $menu_icon ),
393		- 'adminUrl' => esc_url( admin_url() ),
394		- 'colorScheme' => sanitize_html_class( get_user_option( 'admin_color' ), 'fresh' ),
395		- 'dockItems' => $dock_items,
	524	+ 'currentPage' => esc_url( $current_page ),
	525	+ 'currentTitle' => $current_title,
	526	+ 'currentIcon' => sanitize_html_class( $menu_icon ),
	527	+ // `self_admin_url()`: the base a window id is derived from,
	528	+ // and the URL the shell leaves for on exit. Both want the
	529	+ // admin the screen is in, which is the network one when the
	530	+ // network shell screen is what rendered.
	531	+ 'adminUrl' => esc_url( self_admin_url() ),
	532	+ 'homeUrl' => esc_url( home_url( '/' ) ),
	533	+ // Decoded: the shell assigns this to `window.location`,
	534	+ // where `&amp;` would make `_wpnonce` arrive as
	535	+ // `amp;_wpnonce` and fail the nonce check.
	536	+ 'logoutUrl' => esc_url_raw(
	537	+ html_entity_decode( wp_logout_url(), ENT_QUOTES, 'UTF-8' )
	538	+ ),
	539	+ 'colorScheme' => sanitize_html_class( get_user_option( 'admin_color' ), 'fresh' ),
	540	+ 'dockItems' => $dock_items,
396	541	// Baseline menu fingerprint. The shell seeds its last-known
397	542	// signature from this so the first off-allowlist menu change
398	543	// (vs. this boot state) is caught without a wasted probe. GH#325.
399		- 'menuSig' => isset( $menu_payload['menuSig'] ) ? (string) $menu_payload['menuSig'] : '',
400		- 'nativeWindows' => $native_windows,
401		- 'serverWidgets' => $server_widgets,
402		- 'serverWallpapers' => $server_wallpapers,
403		- 'serverCommandScripts' => $server_command_scripts,
404		- 'serverCommands' => $server_commands,
405		- 'serverSettingsTabScripts' => $server_settings_tab_scripts,
406		- 'serverSettingsTabs' => $server_settings_tabs,
	544	+ 'menuSig' => isset( $menu_payload['menuSig'] ) ? (string) $menu_payload['menuSig'] : '',
	545	+ 'nativeWindows' => $native_windows,
	546	+ // Handle-keyed script data the entries above reference —
	547	+ // one copy per bundle, not one per window. See
	548	+ // `openstation_collect_native_windows_payload()`.
	549	+ 'nativeWindowScriptData' => $native_window_script_data,
	550	+ 'serverWidgets' => $server_widgets,
	551	+ 'serverWallpapers' => $server_wallpapers,
	552	+ 'serverCommandScripts' => $server_command_scripts,
	553	+ 'serverCommands' => $server_commands,
	554	+ 'serverSettingsTabScripts' => $server_settings_tab_scripts,
	555	+ 'serverSettingsTabs' => $server_settings_tabs,
407	556	'serverDockRailRendererScripts' => $server_dock_rail_renderer_scripts,
408		- 'serverTitleBarButtonScripts' => $server_titlebar_button_scripts,
409		- 'serverWindowThemeScripts' => $server_window_theme_scripts,
410		- 'serverWindowThemes' => $server_window_themes,
411		- 'serverWindowControlScripts' => $server_window_control_scripts,
412		- 'serverWindowControls' => $server_window_controls,
413		- 'serverWindowSlotScripts' => $server_window_slot_scripts,
414		- 'serverWindowSlots' => $server_window_slots,
415		- 'serverWindowChromeScripts' => $server_window_chrome_scripts,
416		- 'serverWindowChromes' => $server_window_chromes,
417		- 'serverWindowNotices' => $server_window_notices,
	557	+ 'serverTitleBarButtonScripts' => $server_titlebar_button_scripts,
	558	+ 'serverWindowActionScripts' => $server_window_action_scripts,
	559	+ 'serverWindowThemeScripts' => $server_window_theme_scripts,
	560	+ 'serverWindowThemes' => $server_window_themes,
	561	+ 'serverWindowControlScripts' => $server_window_control_scripts,
	562	+ 'serverWindowControls' => $server_window_controls,
	563	+ 'serverWindowSlotScripts' => $server_window_slot_scripts,
	564	+ 'serverWindowSlots' => $server_window_slots,
	565	+ 'serverWindowChromeScripts' => $server_window_chrome_scripts,
	566	+ 'serverWindowChromes' => $server_window_chromes,
	567	+ 'serverWindowNotices' => $server_window_notices,
418	568	// Boot-time copy of the payload's `serverGames` — the same
419	569	// list the live-refresh path applies. Without it the games
420	570	// registry only fills after the first chromeless
421	571	// full-payload refresh and the Games hub boots empty.
422		- 'serverGames' => $server_games,
423		- 'desktopIcons' => $desktop_icons,
424		- 'serverFileTypes' => $server_file_types,
425		- 'serverFileOpeners' => $server_file_openers,
426		- 'userFileAssociations' => $user_file_associations,
427		- 'filesUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/files' ) ),
	572	+ 'serverGames' => $server_games,
	573	+ 'serverDesktopThemes' => $server_desktop_themes,
	574	+ 'desktopIcons' => $desktop_icons,
	575	+ 'serverFileTypes' => $server_file_types,
	576	+ 'serverFileOpeners' => $server_file_openers,
	577	+ // Handle => dependency payload for every `scriptDeps` list in
	578	+ // this config; see `openstation_compact_script_deps()`.
	579	+ 'scriptDepPayloads' => (object) $script_dep_payloads,
	580	+ 'userFileAssociations' => $user_file_associations,
	581	+ 'filesUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/files' ) ),
428	582	// Pinned-notes REST base (`includes/notes/rest.php`). The
429	583	// notes layer boots only when this is present.
430		- 'notesUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/notes' ) ),
	584	+ 'notesUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/notes' ) ),
431	585	// Gates the "Convert to post" note affordance — the convert
432	586	// route (and its dock drop target) only make sense for users
433	587	// who can author posts.
434		- 'canCreatePosts' => current_user_can( 'edit_posts' ),
435		- 'serverWallpaperMenuItems' => $server_wallpaper_menu_items,
436		- 'accentColors' => desktop_mode_get_accent_colors(),
437		- 'toastTypes' => desktop_mode_get_toast_types(),
438		- 'coreUpdate' => desktop_mode_get_core_update(),
439		- 'coreNotices' => desktop_mode_get_core_notices(),
440		- 'pluginNotices' => desktop_mode_get_plugin_notices(),
441		- 'defaultWallpaper' => desktop_mode_get_default_wallpaper(),
442		- 'session' => desktop_mode_get_session( get_current_user_id() ),
443		- 'sessionUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/session' ) ),
444		- 'restUrl' => esc_url_raw( rest_url() ),
445		- 'mediaUrl' => esc_url_raw( rest_url( 'wp/v2/media' ) ),
446		- 'dropConfig' => $drop_config,
447		- 'defaultWindowUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/default-window' ) ),
448		- 'defaultWindow' => desktop_mode_get_default_window( get_current_user_id() ),
449		- 'canUpload' => current_user_can( 'upload_files' ),
450		- 'pluginUrl' => esc_url_raw( untrailingslashit( DESKTOP_MODE_URL ) ),
451		- 'pluginVersion' => DESKTOP_MODE_VERSION,
452		- 'iframeBridgeUrl' => $lazy_bundle_url( 'iframe-bridge' ),
	588	+ 'canCreatePosts' => current_user_can( 'edit_posts' ),
	589	+ 'serverWallpaperMenuItems' => $server_wallpaper_menu_items,
	590	+ 'accentColors' => openstation_get_accent_colors(),
	591	+ 'toastTypes' => openstation_get_toast_types(),
	592	+ 'coreUpdate' => openstation_get_core_update(),
	593	+ 'coreNotices' => openstation_get_core_notices(),
	594	+ 'pluginNotices' => openstation_get_plugin_notices(),
	595	+ 'defaultWallpaper' => openstation_get_default_wallpaper(),
	596	+ 'session' => openstation_get_session( get_current_user_id() ),
	597	+ // The session route runs in the main site's blog context
	598	+ // whichever desktop posts to it, so the network screen's
	599	+ // URL says which session it is addressing — see
	600	+ // `openstation_rest_session_network()`.
	601	+ 'sessionUrl' => esc_url_raw(
	602	+ is_network_admin()
	603	+ ? add_query_arg( 'network', '1', rest_url( 'desktop-mode/v1/session' ) )
	604	+ : rest_url( 'desktop-mode/v1/session' )
	605	+ ),
	606	+ 'restUrl' => esc_url_raw( rest_url() ),
	607	+ 'mediaUrl' => esc_url_raw( rest_url( 'wp/v2/media' ) ),
	608	+ 'dropConfig' => $drop_config,
	609	+ 'defaultWindowUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/default-window' ) ),
	610	+ 'defaultWindow' => openstation_get_default_window( get_current_user_id() ),
	611	+ 'canUpload' => current_user_can( 'upload_files' ),
	612	+ 'pluginUrl' => esc_url_raw( untrailingslashit( OPENSTATION_URL ) ),
	613	+ 'pluginVersion' => OPENSTATION_VERSION,
	614	+ 'aboutFeedUrl' => esc_url_raw(
	615	+ add_query_arg(
	616	+ array(
	617	+ 'action' => 'openstation_about_feed',
	618	+ 'nonce' => wp_create_nonce( 'openstation_about_feed' ),
	619	+ ),
	620	+ admin_url( 'admin-ajax.php' )
	621	+ )
	622	+ ),
	623	+ 'iframeBridgeUrl' => $lazy_bundle_url( 'iframe-bridge' ),
453	624	// URL of the AI Assistant lazy bundle. The main bundle
454		- // ships a stub matching the public `wp.desktop.ai` API; the
	625	+ // ships a stub matching the public `wp.os.ai` API; the
455	626	// stub `<script>`-injects this URL the first time the user
456	627	// opens the assistant. Picking `.js` vs `.min.js` here keeps
457	628	// the SCRIPT_DEBUG gate server-side, matching iframeBridgeUrl.
458		- 'aiAssistantBundleUrl' => $lazy_bundle_url( 'ai-assistant' ),
459		- // URL of the About-scene lazy bundle. The OS Settings →
460		- // About tab loads this on first mount; ~25 kB PixiJS
461		- // particle scene that would otherwise ship in the main
462		- // bundle for every shell load.
463		- 'aboutSceneBundleUrl' => $lazy_bundle_url( 'about-scene' ),
464		- // URL of the OS Settings panel lazy bundle. Injected by
465		- // the main bundle's `OsSettings.renderPanel()` stub on
466		- // the user's first Settings open. Holds every section
467		- // renderer + the `<wpd-*>` components only the panel
468		- // uses, so nothing about Settings ships in
469		- // `desktop.min.js` for users who never open it.
470		- 'osSettingsPanelBundleUrl' => $lazy_bundle_url( 'os-settings-panel' ),
	629	+ 'aiAssistantBundleUrl' => $lazy_bundle_url( 'ai-assistant' ),
471	630	// URL of the shell-overlays lazy bundle. Pre-loaded by
472	631	// the main bundle after first paint so action-triggered
473	632	// overlays (toast, confirm dialog, context menus) feel
474	633	// instant the first time they fire.
475		- 'shellOverlaysBundleUrl' => $lazy_bundle_url( 'shell-overlays' ),
	634	+ 'shellOverlaysBundleUrl' => $lazy_bundle_url( 'shell-overlays' ),
	635	+ // The shell-bundle diet: features whose right moment is a
	636	+ // user gesture (or a presence signal) ride their own
	637	+ // bundles instead of the boot-critical `desktop[.min].js`.
	638	+ // Each sentinel in the shell loads its bundle at that
	639	+ // moment — see the entry file each bundle names.
	640	+ 'fileDropBundleUrl' => $lazy_bundle_url( 'file-drop' ),
	641	+ 'filesOverlaysBundleUrl' => $lazy_bundle_url( 'files-overlays' ),
	642	+ 'notesBundleUrl' => $lazy_bundle_url( 'notes' ),
	643	+ 'dockConstellationBundleUrl' => $lazy_bundle_url( 'dock-constellation' ),
	644	+ 'windowLinkVisualsBundleUrl' => $lazy_bundle_url( 'window-link-visuals' ),
	645	+ // Presence hint for the notes sentinel: a desktop with no
	646	+ // notes skips the notes bundle AND the boot-time list
	647	+ // request. Two id-only existence probes at most.
	648	+ 'hasNotes' => function_exists( 'openstation_notes_user_has_any' )
	649	+ ? openstation_notes_user_has_any()
	650	+ : false,
	651	+ // URL of the full `<os-*>` component kit. The shell
	652	+ // never loads this — its own bundles import the
	653	+ // components they render. It exists for
	654	+ // `wp.os.loadComponents()`, i.e. for plugin code that
	655	+ // CANNOT import: a plugin shipped as a zip has no path
	656	+ // to this repo at build time, so before this URL its
	657	+ // only routes to a `<os-switch>` were to bundle a second
	658	+ // copy or hand-roll one. Shipping the URL costs one
	659	+ // string and keeps the SCRIPT_DEBUG choice server-side.
	660	+ 'componentsBundleUrl' => $lazy_bundle_url( 'os-components' ),
	661	+ // Mio — the desk companion. `mio` carries the
	662	+ // appearance + physics (see `openstation_mio_config()`);
	663	+ // `mioBundleUrl` is the lazy PixiJS bundle the shell
	664	+ // controller injects the first time a user switches the
	665	+ // Mio on from its dock tile. Shipping the URL
	666	+ // unconditionally costs one short string and keeps the
	667	+ // SCRIPT_DEBUG choice server-side, matching every other
	668	+ // lazy bundle here.
	669	+ //
	670	+ // Both keys ship whether or not the user has Mio on,
	671	+ // and that is the whole of its cost to a shell that doesn't:
	672	+ // ~470 bytes gzipped of config, plus a URL. No script, no
	673	+ // style, no PixiJS. The config has to be here rather than
	674	+ // fetched on first toggle, or the `openstation_mio_config`
	675	+ // filter would silently not apply until the next reload.
	676	+ 'mio' => openstation_mio_config(),
	677	+ 'mioBundleUrl' => $lazy_bundle_url( 'mio' ),
476	678	// URL of the lazy window-system bundle (Stage 11).
477	679	// Holds the `Window` class and its DOM / pointer / tab /
478		- // chrome helpers — the single largest module in the pre-
479		- // 0.8.4 main bundle. Loaded on first `windowManager.open()`
480		- // / `openNew()` call (both async since 0.8.4); pre-loaded
	680	+ // chrome helpers — the single largest module split out of
	681	+ // the main bundle. Loaded on first `windowManager.open()`
	682	+ // / `openNew()` call (both async); pre-loaded
481	683	// by the shell after first paint when no session is being
482	684	// restored and no `openCurrentPage` will fire.
483		- 'windowSystemBundleUrl' => $lazy_bundle_url( 'window-system' ),
484		- 'restNonce' => wp_create_nonce( 'wp_rest' ),
485		- 'osSettings' => desktop_mode_get_os_settings( get_current_user_id() ),
486		- 'osSettingsUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/os-settings' ) ),
487		- 'seenIntros' => desktop_mode_get_seen_intros( get_current_user_id() ),
488		- 'seenIntrosUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/intros' ) ),
489		- // Sticky notes ride on Gutenberg's Guidelines experiment
490		- // (the `wp_guideline` CPT + `wp_guideline_type` taxonomy).
491		- // When that experiment isn't active the `wp/v2/guidelines`
492		- // + `wp/v2/wp_guideline_type` probes 404 — harmless but
493		- // noisy — so the shell skips booting the layer entirely.
494		- 'stickyNotes' => array(
495		- 'available' => desktop_mode_sticky_notes_is_available(),
496		- ),
497		- 'aiSearchUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/ai/search' ) ),
498		- 'aiSearchStreamUrl' => esc_url_raw( add_query_arg( 'action', 'desktop_mode_ai_search_stream', admin_url( 'admin-ajax.php' ) ) ),
	685	+ 'windowSystemBundleUrl' => $lazy_bundle_url( 'window-system' ),
	686	+ // URL of the lazy phone-layer bundle. Injected by the main
	687	+ // bundle only when the mode resolves to `mobile`, so a
	688	+ // desktop never fetches it. `mode` carries the preference
	689	+ // and breakpoints the first-paint head stamp already used,
	690	+ // plus the server's default tab-bar pins — see
	691	+ // `includes/mobile.php`.
	692	+ 'mobileBundleUrl' => $lazy_bundle_url( 'mobile' ),
	693	+ 'mode' => openstation_mode_config( get_current_user_id() ),
	694	+ // URL of the item-visibility-menu lazy bundle — the
	695	+ // right-click "hide from dock / desktop" menu. Injected by
	696	+ // the main bundle's loader shim on the first right-click.
	697	+ 'itemVisibilityMenuBundleUrl' => $lazy_bundle_url( 'item-visibility-menu' ),
	698	+ // URL of the workspace-wizard lazy bundle — the modal
	699	+ // behind "Edit this workspace…". Injected by the main
	700	+ // bundle's loader shim on first open.
	701	+ 'workspaceWizardBundleUrl' => $lazy_bundle_url( 'workspace-wizard' ),
	702	+ // Server-side view of the workspace templates, so a plugin
	703	+ // can add or drop one from PHP. The client merges these
	704	+ // with its own built-ins by id — see
	705	+ // `src/workspaces/server-sync.ts`.
	706	+ 'workspacePresets' => openstation_workspace_presets(),
	707	+ // URL of the release-card lazy bundle — the vinyl core-
	708	+ // update announcement. Injected by `maybeShowUpdate()` only
	709	+ // when a core update is actually pending.
	710	+ 'releaseCardBundleUrl' => $lazy_bundle_url( 'release-card' ),
	711	+ 'restNonce' => wp_create_nonce( 'wp_rest' ),
	712	+ // Non-empty when the shell was asked to paint exactly one
	713	+ // window and nothing else. See `OPENSTATION_SOLO_FLAG`.
	714	+ 'soloWindow' => openstation_solo_window_id(),
	715	+ 'osSettings' => openstation_get_os_settings( get_current_user_id() ),
	716	+ 'osSettingsUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/os-settings' ) ),
	717	+ 'seenIntros' => openstation_get_seen_intros( get_current_user_id() ),
	718	+ 'seenIntrosUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/intros' ) ),
	719	+ // True only for a user migration 5 flagged as a Desktop Mode
	720	+ // user from before the rename, who hasn't dismissed the
	721	+ // announcement yet. Same value that gated `os-announce`
	722	+ // above; the dialog cannot paint without that stylesheet, so
	723	+ // the two must not diverge.
	724	+ 'rebrandNotice' => $show_rebrand_notice,
	725	+ // The first-boot shell tour: whether this site offers it
	726	+ // (the `openstation_show_shell_tour` filter), and the lazy
	727	+ // bundle that runs it. Whether THIS user already had it is
	728	+ // `seenIntros` containing `shell-tour`; the shell reads that
	729	+ // itself so a reset can replay the tour without a new boot.
	730	+ 'shellTour' => openstation_should_offer_shell_tour( get_current_user_id() ),
	731	+ 'shellTourBundleUrl' => $lazy_bundle_url( 'shell-tour' ),
	732	+ // The first-run stamps, read-only, epoch seconds (0 when
	733	+ // unknown): when the plugin was installed, when anyone first
	734	+ // enabled it, and when this user did. See
	735	+ // `includes/first-run/stamps.php`.
	736	+ 'firstRun' => openstation_first_run_config( get_current_user_id() ),
	737	+ // Null for everyone but a user who has had OpenStation on
	738	+ // long enough and has not answered yet; the gate lives in
	739	+ // `includes/feedback/usage.php`. The form is a lazy bundle
	740	+ // fetched only when the user says yes to the prompt.
	741	+ 'usageFeedback' => function_exists( 'openstation_usage_feedback_config' ) ? openstation_usage_feedback_config() : null,
	742	+ 'usageFeedbackBundleUrl' => $lazy_bundle_url( 'usage-feedback' ),
	743	+ 'aiSearchUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/ai/search' ) ),
499	744	// AI assistant availability + per-user toggle. Drives whether the
500	745	// Cmd+K palette and admin-bar icon appear, and the setup placeholder.
501		- 'aiAssistant' => function_exists( 'desktop_mode_ai_assistant_config' )
502		- ? desktop_mode_ai_assistant_config()
	746	+ 'aiAssistant' => function_exists( 'openstation_ai_assistant_config' )
	747	+ ? openstation_ai_assistant_config()
503	748	: null,
504	749	// Lets the Features tab re-check provider availability without a
505	750	// reload after a connector is configured in Settings → Connectors.
506		- 'aiStatusUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/ai/status' ) ),
507		- 'extendedOptions' => current_user_can( 'manage_options' ) ? desktop_mode_get_extended_options() : null,
508		- 'extendedOptionsUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/extended-options' ) ),
509		- // Comments-window AI moderation toggle — surfaced at the
510		- // shell level so the OS Settings → Features tab can render
511		- // the toggle without depending on the Comments window
512		- // being registered for this user. URL is the same
513		- // endpoint the comments-window config exposes; state is
514		- // `null` for non-admins (the UI hides the row entirely).
515		- 'commentsAiUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/comments/ai-settings' ) ),
516		- // Non-null only for admins on a site where the Core AI stack is
517		- // present. Comment scoring routes through the AI Client (WP 7.0+),
518		- // so on older WordPress the whole row is hidden — same as the
519		- // assistant toggle — rather than shown disabled pointing at a
520		- // Settings → Connectors screen that doesn't exist there.
521		- 'commentsAi' => (
522		- current_user_can( 'manage_options' )
523		- && function_exists( 'desktop_mode_ai_is_available' )
524		- && desktop_mode_ai_is_available()
525		- )
526		- ? array(
527		- 'enabled' => function_exists( 'desktop_mode_comments_ai_is_enabled' )
528		- ? desktop_mode_comments_ai_is_enabled()
529		- : false,
530		- 'providerConfigured' => function_exists( 'desktop_mode_comments_ai_provider_configured' )
531		- ? desktop_mode_comments_ai_provider_configured()
532		- : false,
533		- )
534		- : null,
535		- 'currentUserIsAdmin' => current_user_can( 'manage_options' ),
536		- 'portalUrl' => esc_url( desktop_mode_portal_url() ),
537		- 'fromPortal' => $from_portal,
538		- 'fromPortalIntent' => $from_portal_intent,
539		- 'pwa' => array(
540		- 'manifestUrl' => esc_url_raw( desktop_mode_pwa_manifest_url() ),
541		- 'swUrl' => esc_url_raw( desktop_mode_pwa_sw_url() ),
	751	+ 'aiStatusUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/ai/status' ) ),
	752	+ 'extendedOptions' => current_user_can( 'manage_options' ) ? openstation_get_extended_options() : null,
	753	+ 'extendedOptionsUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/extended-options' ) ),
	754	+ // Site-wide games kill switch (Extended options). Exposed to
	755	+ // every user — the shell skips the challenges Heartbeat
	756	+ // channel when the framework is off.
	757	+ 'gamesEnabled' => openstation_games_enabled(),
	758	+ 'currentUserIsAdmin' => current_user_can( 'manage_options' ),
	759	+ // Null on single-site installs; its `networkAdmin` null
	760	+ // without `manage_network`, which is what keeps the dock
	761	+ // tile from registering.
	762	+ 'multisite' => openstation_multisite_payload(),
	763	+ 'portalUrl' => esc_url( openstation_portal_url() ),
	764	+ 'fromPortal' => $from_portal,
	765	+ 'fromPortalIntent' => $from_portal_intent,
	766	+ // One-shot like the boot target: a switch from another
	767	+ // site's overview lands in this one's.
	768	+ 'landInOverview' => openstation_shell_lands_in_overview(),
	769	+ 'arrivalDirection' => openstation_shell_arrival_direction(),
	770	+ 'hopLinkOffer' => function_exists( 'openstation_network_link_offer' ) ? openstation_network_link_offer() : null,
	771	+ 'pwa' => array(
	772	+ 'manifestUrl' => esc_url_raw( openstation_pwa_manifest_url() ),
	773	+ 'swUrl' => esc_url_raw( openstation_pwa_sw_url() ),
	774	+ // Extensionless retry target for hosts whose nginx 404s
	775	+ // virtual .js paths before WordPress runs (WordPress.com).
	776	+ 'swFallbackUrl' => esc_url_raw( openstation_pwa_sw_fallback_url() ),
	777	+ // The site's home path — the scope the registration
	778	+ // asks for, so a subdirectory network's sites each get
	779	+ // their own worker instead of fighting over the root.
	780	+ 'swScope' => openstation_pwa_sw_scope(),
	781	+ // The worker's per-user flags, computed HERE rather than
	782	+ // baked into the served `sw.js`.
	783	+ //
	784	+ // A service worker is origin-wide but these are per-user
	785	+ // preferences, so putting them in the script bytes made
	786	+ // the body differ between an anonymous and a logged-in
	787	+ // request — and any in-scope logged-out navigation then
	788	+ // installed a "new" worker, which at the time reloaded
	789	+ // the shell. The bytes are identical for everyone now;
	790	+ // the shell posts these to the worker at boot.
	791	+ //
	792	+ // Computed server-side, not read from the settings
	793	+ // snapshot client-side, because
	794	+ // `openstation_pwa_admin_asset_cache_enabled()` applies
	795	+ // the `openstation_pwa_admin_asset_cache` filter — an
	796	+ // operator's site-wide veto has to keep working.
	797	+ 'swConfig' => array(
	798	+ 'adminAssetCache' => (bool) openstation_pwa_admin_asset_cache_enabled(),
	799	+ 'windowPrewarm' => ! empty( openstation_get_os_settings( get_current_user_id() )['windowPrewarmEnabled'] ),
	800	+ ),
	801	+ // The build this shell document belongs to. When a new
	802	+ // worker takes over mid-session the shell asks it for
	803	+ // the stamp it was served with and compares; only a
	804	+ // difference — the shell's own files changed on the
	805	+ // server — offers the user a reload. Never automatic.
	806	+ 'shellBuild' => openstation_shell_build_stamp(),
542	807	'stateUrl' => esc_url_raw( rest_url( 'desktop-mode/v1/pwa-state' ) ),
543		- 'state' => desktop_mode_pwa_get_user_state( get_current_user_id() ),
	808	+ 'state' => openstation_pwa_get_user_state( get_current_user_id() ),
544	809	// Mirrors the manifest's `name` field — used by the
545	810	// install pill so the button reads "Install <site>"
546	811	// rather than "Install <current page>" (which would
547	812	// be misleading: we install the whole site as an
		@@ -547,31 +812,113 @@
547	812	// be misleading: we install the whole site as an
548	813	// app, not the dashboard window the user happens to
549	814	// be viewing).
550	815	'appName' => get_bloginfo( 'name' ),
551		- // Operators set the `desktop_mode_pwa_force_replace_sw`
	816	+ // Operators set the `openstation_pwa_force_replace_sw`
552	817	// filter to `true` when another root-scope service
553		- // worker on the origin is blocking desktop-mode
	818	+ // worker on the origin is blocking openstation
554	819	// installability (foreign-SW guard in
555	820	// `src/pwa/sw-register.ts`). Default `false` preserves
556	821	// the polite behaviour where we yield to existing PWAs.
557		- 'forceReplaceSw' => desktop_mode_pwa_force_replace_sw(),
	822	+ 'forceReplaceSw' => openstation_pwa_force_replace_sw(),
558	823	),
	824	+ // Ordered Core command-palette asset manifest, replayed on
	825	+ // first palette invocation. `null` on pre-6.9 sites.
	826	+ 'commandPalette' => $command_palette,
	827	+ // Stylesheets for shell surfaces that render on demand —
	828	+ // the Preferences panel, the AI assistant, the bug-report
	829	+ // window. None of them is a server-registered native
	830	+ // window (they are built client-side by the shell
	831	+ // bundle), so the `styles` companion mechanism can't
	832	+ // carry their CSS; instead the shell injects each sheet
	833	+ // the first time its surface opens, via
	834	+ // `ensureDeferredStyle()` in `src/deferred-styles.ts`.
	835	+ // Same resolved shape a native window's `styleUrl` /
	836	+ // `styleInline` travels in.
	837	+ // Which of the `deferredStyles` entries a game needs.
	838	+ // `launchGame()` injects these before the window paints.
	839	+ 'gameStyleHandles' => function_exists( 'openstation_games_style_handles' )
	840	+ ? openstation_games_style_handles()
	841	+ : array(),
	842	+ 'deferredStyles' => openstation_build_deferred_styles(
	843	+ array_merge(
	844	+ array(
	845	+ 'desktop-mode-ai-assistant',
	846	+ 'desktop-mode-bug-report',
	847	+ // The explorer's shared sheet. It rides the WP
	848	+ // Explorer APP as a companion style, but the
	849	+ // desktop FOLDER window paints its preview pane
	850	+ // with the same `os-my-wordpress__*` classes and
	851	+ // — being a native window opened straight from
	852	+ // JS — carries no companion styles of its own.
	853	+ // Without this, the pane rendered unstyled until
	854	+ // the explorer had been opened once in the
	855	+ // session.
	856	+ 'desktop-mode-my-wordpress',
	857	+ ),
	858	+ // The Games sheets. They also ride the hub window as
	859	+ // companion styles, but a game is reachable without
	860	+ // the hub — the challenge toast, solo mode, and
	861	+ // `wp.os.games.launch()` all land in `launchGame()`
	862	+ // with no hub window in the tab. Listing them here
	863	+ // costs a URL each in the boot config and no CSS
	864	+ // until `launchGame()` asks.
	865	+ function_exists( 'openstation_games_style_handles' )
	866	+ ? openstation_games_style_handles()
	867	+ : array()
	868	+ )
	869	+ ),
559	870	)
560	871	);
561	872
562		- wp_localize_script( 'desktop-mode', 'desktopModeConfig', $config );
	873	+ wp_localize_script( 'openstation', 'openStationConfig', $config );
563	874
564	875	/**
565		- * Fires when desktop mode assets are enqueued.
566		- *
567		- * @since 0.1.0
	876	+ * Fires when OpenStation assets are enqueued.
568	877	*/
569		- do_action( 'desktop_mode_mode_init' );
	878	+ do_action( 'openstation_mode_init' );
570	879	}
571		-add_action( 'admin_enqueue_scripts', 'desktop_mode_enqueue_assets' );
	880	+add_action( 'admin_enqueue_scripts', 'openstation_enqueue_assets' );
572	881
573	882	/**
	883	+ * Keep Core's boot-time command-palette enqueue off shell pages.
	884	+ *
	885	+ * WordPress 7.0 hooks `wp_enqueue_command_palette_assets()` on
	886	+ * `admin_enqueue_scripts` by default, which puts the palette's whole
	887	+ * dependency chain — the Gutenberg runtime, ~800 KB gzipped — on
	888	+ * every admin page. On a SHELL page that is pure dead weight: the
	889	+ * shell suppresses Core's palette unconditionally (the ⌘K keystroke
	890	+ * and the admin-bar icon both route to the shell's own palette), so
	891	+ * the runtime it powers can never be shown. Unhooking here lets the
	892	+ * deferred manifest (`openstation_build_command_palette_assets_payload()`)
	893	+ * capture the chain instead, and the shell loads it on the first
	894	+ * palette invocation.
	895	+ *
	896	+ * Deliberately scoped: classic-mode requests keep Core's default,
	897	+ * because a classic page is Core's own UI where Core's palette is the
	898	+ * right one.
	899	+ *
	900	+ * Windows are handled separately by
	901	+ * {@see openstation_chromeless_should_trim_command_palette()} in
	902	+ * `includes/render/chromeless-trim.php` — same idea, but it has to
	903	+ * drop the whole palette *family* rather than just unhook Core's
	904	+ * callback, and it exempts block-editor screens. Unhooking alone is
	905	+ * not enough there: a third-party palette extension that declares
	906	+ * `wp-commands` keeps the entire chain queued as its dependency.
	907	+ *
	908	+ * Priority 0, ahead of Core's default 10, so the removal lands
	909	+ * before the callback fires. On WP 6.9 (function exists, no default
	910	+ * hook) the `remove_action()` is a harmless no-op.
	911	+ */
	912	+function openstation_defer_core_command_palette() {
	913	+ if ( ! openstation_is_shell_request() ) {
	914	+ return;
	915	+ }
	916	+ remove_action( 'admin_enqueue_scripts', 'wp_enqueue_command_palette_assets' );
	917	+}
	918	+add_action( 'admin_enqueue_scripts', 'openstation_defer_core_command_palette', 0 );
	919	+
	920	+/**
574	921	* Emits `<link rel="preload">` hints for the shell's critical-path
575	922	* assets so the browser starts fetching them as soon as it parses
576	923	* the document `<head>`.
577	924	*
		@@ -604,9 +951,9 @@
604	951	* later (often beyond the ~3s window Chrome allows a `preload` before it
605	952	* warns "preloaded but not used in time"), so `prefetch` keeps the early
606	953	* low-priority cache fill without the must-use-now contract.
607	954	*
608		- * Plugins can extend the hint list via the `desktop_mode_preload_hints`
	955	+ * Plugins can extend the hint list via the `openstation_preload_hints`
609	956	* filter — e.g. a settings tab whose bundle the user opens on every
610	957	* visit can opt its own URL into the preload phase.
611	958	*
612	959	* Same-origin resources only — no `crossorigin` attribute. CDN hosts
		@@ -612,27 +959,20 @@
612	959	* Same-origin resources only — no `crossorigin` attribute. CDN hosts
613	960	* that serve `wp-content/plugins/` from a different origin should
614	961	* supply absolute URLs through the filter; in that case the consumer
615	962	* is responsible for the `crossorigin` semantics.
616		- *
617		- * @since 0.8.9
618	963	*/
619		-function desktop_mode_print_preload_hints() {
620		- if (
621		- ! is_admin()
622		- || ! desktop_mode_is_enabled()
623		- || desktop_mode_is_chromeless_request()
624		- || desktop_mode_is_classic_request()
625		- ) {
	964	+function openstation_print_preload_hints() {
	965	+ if ( ! openstation_is_shell_request() ) {
626	966	return;
627	967	}
628	968
629		- $suffix = ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) ? '' : '.min';
	969	+ $suffix = openstation_asset_suffix();
630	970
631	971	$build_url = static function ( $relative ) {
632		- $path = DESKTOP_MODE_DIR . $relative;
633		- $ver = file_exists( $path ) ? (string) filemtime( $path ) : DESKTOP_MODE_VERSION;
634		- return DESKTOP_MODE_URL . $relative . '?ver=' . $ver;
	972	+ $path = OPENSTATION_DIR . $relative;
	973	+ $ver = file_exists( $path ) ? (string) filemtime( $path ) : OPENSTATION_VERSION;
	974	+ return OPENSTATION_URL . $relative . '?ver=' . $ver;
635	975	};
636	976
637	977	$hints = array(
638	978	// Critical path — consumed on this very page load (the footer
		@@ -666,8 +1006,21 @@
666	1006	'rel' => 'prefetch',
667	1007	),
668	1008	);
669	1009
	1010	+ // The phone layer is needed at boot on a phone and never on a
	1011	+ // desktop; the server cannot see the viewport, so the user agent
	1012	+ // decides whether the hint is worth its bytes. A wrong guess costs
	1013	+ // one low-priority fetch, never a wrong layout — the stamp and the
	1014	+ // bundle loader read the real viewport.
	1015	+ if ( openstation_mode_hint_is_mobile( get_current_user_id() ) ) {
	1016	+ $hints[] = array(
	1017	+ 'href' => $build_url( 'assets/js/mobile' . $suffix . '.js' ),
	1018	+ 'as' => 'script',
	1019	+ 'rel' => 'prefetch',
	1020	+ );
	1021	+ }
	1022	+
670	1023	/**
671	1024	* Filters the list of resource preload hints emitted in `<head>`.
672	1025	*
673	1026	* Each entry is a `{ 'href' => string, 'as' => string,
		@@ -677,16 +1030,13 @@
677	1030	* back to `preload`. Unrecognized entries are silently skipped — keep
678	1031	* the contract permissive so a misconfigured plugin can't tank first
679	1032	* paint.
680	1033	*
681		- * @since 0.8.9
682		- * @since 0.9.1 Entries may carry a `rel` key (`preload` | `prefetch`).
683		- *
684	1034	* @param array $hints Default hints (main bundle + base CSS as
685	1035	* `preload`; window-system + shell-overlays as
686	1036	* `prefetch`).
687	1037	*/
688		- $hints = apply_filters( 'desktop_mode_preload_hints', $hints );
	1038	+ $hints = apply_filters( 'openstation_preload_hints', $hints );
689	1039
690	1040	if ( ! is_array( $hints ) ) {
691	1041	return;
692	1042	}
		@@ -714,12 +1064,12 @@
714	1064	esc_url( $href )
715	1065	);
716	1066	}
717	1067	}
718		-add_action( 'admin_print_styles', 'desktop_mode_print_preload_hints', 1 );
	1068	+add_action( 'admin_print_styles', 'openstation_print_preload_hints', 1 );
719	1069
720	1070	/**
721		- * Defers loading of non-critical desktop-mode stylesheets so they
	1071	+ * Defers loading of non-critical openstation stylesheets so they
722	1072	* don't block first paint.
723	1073	*
724	1074	* Three stylesheets in the default enqueue list are only needed
725	1075	* after a user interaction — `dock-peek` (mouseover a dock tile),
		@@ -743,14 +1093,12 @@
743	1093	* before the user clicks anything that needs them. The
744	1094	* `<noscript>` fallback restores critical-path behavior for JS-off
745	1095	* browsers, so accessibility isn't degraded.
746	1096	*
747		- * Filterable via `desktop_mode_deferred_styles` so plugins can opt
	1097	+ * Filterable via `openstation_deferred_styles` so plugins can opt
748	1098	* their own non-critical stylesheets in (or pull a built-in out).
749	1099	* Chromeless iframes are skipped — their CSS pipeline is separate.
750	1100	*
751		- * @since 0.8.9
752		- *
753	1101	* @param string $html The original <link> tag HTML.
754	1102	* @param string $handle The stylesheet handle WP is printing.
755	1103	* @param string $href The full URL of the stylesheet.
756	1104	* @param string $media The media attribute value WP resolved.
		@@ -755,22 +1103,22 @@
755	1103	* @param string $href The full URL of the stylesheet.
756	1104	* @param string $media The media attribute value WP resolved.
757	1105	* @return string Possibly-rewritten tag.
758	1106	*/
759		-function desktop_mode_defer_non_critical_styles( $html, $handle, $href, $media ) {
	1107	+function openstation_defer_non_critical_styles( $html, $handle, $href, $media ) {
760	1108	// Cheap gates first — `style_loader_tag` fires once per enqueued
761	1109	// stylesheet on EVERY admin page (frontend doesn't go through
762		- // this filter, but admin does, including pages where desktop mode
763		- // is disabled). The deferred handles only ship when desktop mode
	1110	+ // this filter, but admin does, including pages where OpenStation
	1111	+ // is disabled). The deferred handles only ship when OpenStation
764	1112	// is active, so the in_array check below would always miss on
765	1113	// classic-only admin pages — but the `apply_filters` call still
766	1114	// builds an array and walks subscribers per stylesheet. Short-
767	1115	// circuit on the cheap helper checks (`is_admin` / enabled /
768		- // chromeless) so non-desktop-mode users pay nothing.
769		- if ( ! desktop_mode_is_enabled() ) {
	1116	+ // chromeless) so non-openstation users pay nothing.
	1117	+ if ( ! openstation_is_enabled() ) {
770	1118	return $html;
771	1119	}
772		- if ( desktop_mode_is_chromeless_request() ) {
	1120	+ if ( openstation_is_chromeless_request() ) {
773	1121	return $html;
774	1122	}
775	1123
776	1124	/**
		@@ -779,18 +1127,18 @@
779	1127	* their own non-critical stylesheets here, or pull a built-in
780	1128	* out (e.g. a plugin that surfaces the AI assistant on every
781	1129	* page might want to keep its CSS critical-path).
782	1130	*
783		- * @since 0.8.9
784		- *
785	1131	* @param string[] $handles Default deferred handles.
786	1132	*/
787	1133	$deferred = apply_filters(
788		- 'desktop_mode_deferred_styles',
	1134	+ 'openstation_deferred_styles',
789	1135	array(
790		- 'desktop-mode-dock-peek',
	1136	+ 'os-dock-peek',
	1137	+ 'os-openstation-layout',
791	1138	'desktop-mode-ai-assistant',
792	1139	'desktop-mode-bug-report',
	1140	+ 'os-window-overview',
793	1141	)
794	1142	);
795	1143
796	1144	if ( ! in_array( $handle, (array) $deferred, true ) ) {
		@@ -801,22 +1149,22 @@
801	1149	$id = $handle . '-css';
802	1150
803	1151	// Two contexts, two escapers for the same `$resolved_media` value:
804	1152	//
805		- // - `%3$s` lands inside a JS string literal inside the HTML
806		- // `onload="…"` attribute (`this.media='%3$s'`). `esc_attr`
807		- // escapes `"` and `&` but NOT single quotes, so a media
808		- // value containing `'` would break out of the JS string.
809		- // `esc_js` is the correct escaper for "string literal inside
810		- // an event-handler attribute" — escapes single quotes, double
811		- // quotes, backslashes, newlines. Today `$resolved_media`
812		- // comes from `wp_enqueue_style()`'s `$media` parameter (always
813		- // a CSS media type / query produced by WordPress core), so
814		- // this is pure defense-in-depth, but the cost is one extra
815		- // function call.
	1153	+ // - `%3$s` lands inside a JS string literal inside the HTML
	1154	+ // `onload="…"` attribute (`this.media='%3$s'`). `esc_attr`
	1155	+ // escapes `"` and `&` but NOT single quotes, so a media
	1156	+ // value containing `'` would break out of the JS string.
	1157	+ // `esc_js` is the correct escaper for "string literal inside
	1158	+ // an event-handler attribute" — escapes single quotes, double
	1159	+ // quotes, backslashes, newlines. Today `$resolved_media`
	1160	+ // comes from `wp_enqueue_style()`'s `$media` parameter (always
	1161	+ // a CSS media type / query produced by WordPress core), so
	1162	+ // this is pure defense-in-depth, but the cost is one extra
	1163	+ // function call.
816	1164	//
817		- // - `%4$s` lands inside an HTML attribute in the `<noscript>`
818		- // fallback (`media='%4$s'`). That's standard `esc_attr`.
	1165	+ // - `%4$s` lands inside an HTML attribute in the `<noscript>`
	1166	+ // fallback (`media='%4$s'`). That's standard `esc_attr`.
819	1167	//
820	1168	// phpcs:disable WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet -- This filter rewrites a tag WordPress is in the process of emitting for an already-registered+enqueued stylesheet handle; the linter doesn't trace the `style_loader_tag` filter context, so the raw <link rel="stylesheet"> output is a false-positive.
821	1169	$markup = sprintf(
822	1170	'<link rel=\'stylesheet\' id=\'%1$s\' href=\'%2$s\' media=\'print\' onload="this.media=\'%3$s\'; this.onload=null;" />' . "\n" .
		@@ -829,19 +1177,19 @@
829	1177	// phpcs:enable WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet
830	1178
831	1179	return $markup;
832	1180	}
833		-add_filter( 'style_loader_tag', 'desktop_mode_defer_non_critical_styles', 10, 4 );
	1181	+add_filter( 'style_loader_tag', 'openstation_defer_non_critical_styles', 10, 4 );
834	1182
835	1183	/**
836	1184	* Build the admin-menu command map (name → URL) and expose it on
837		- * `window.__desktopModeMenuCommands`. The shell command harvester
	1185	+ * `window.__openStationMenuCommands`. The shell command harvester
838	1186	* (`src/commands/shell-harvester.ts`) reads this slot to resolve URLs
839	1187	* for "Go to: …" commands whose JS callbacks
840	1188	* (`document.location = menuCommand.url`) close over a variable URL
841	1189	* we can't extract from source. Without this map those commands
842	1190	* either get skipped (no URL recoverable) or — if the location
843		- * shadow misses — navigate the SHELL out of desktop mode.
	1191	+ * shadow misses — navigate the SHELL out of OpenStation.
844	1192	*
845	1193	* Mirrors what WordPress core's `wp_enqueue_command_palette_assets()`
846	1194	* builds for `wp.coreCommands.initializeCommandPalette(...)`. We
847	1195	* duplicate the logic here (instead of monkey-patching the JS init
		@@ -850,15 +1198,13 @@
850	1198	* same handle) and ship the result through `wp_add_inline_script` on
851	1199	* our own bundle handle. That decouples us entirely from WP's command-
852	1200	* palette mount timing.
853	1201	*
854		- * @since 0.8.4
855		- *
856	1202	* @global array $menu
857	1203	* @global array $submenu
858	1204	* @return array<int, array{label:string, url:string, name:string}>
859	1205	*/
860		-function desktop_mode_build_command_menu_map() {
	1206	+function openstation_build_command_menu_map() {
861	1207	global $menu, $submenu, $_parent_pages;
862	1208	if ( ! is_array( $menu ) ) {
863	1209	return array();
864	1210	}
		@@ -911,9 +1257,9 @@
911	1257	// exception is URL-style slugs referencing a real admin file
912	1258	// (ACF's 'edit.php?post_type=acf-field-group' — also a
913	1259	// registered page) — those stay direct links, matching
914	1260	// classic admin's menu-header.php.
915		- if ( ( ! isset( $_parent_pages[ $menu_slug ] ) || desktop_mode_is_admin_file_slug( $menu_slug ) ) && ( preg_match( '/\.php($|\?)/', $menu_slug ) || wp_http_validate_url( $menu_slug ) ) ) {
	1261	+ if ( ( ! isset( $_parent_pages[ $menu_slug ] ) || openstation_is_admin_file_slug( $menu_slug ) ) && ( preg_match( '/\.php($|\?)/', $menu_slug ) || wp_http_validate_url( $menu_slug ) ) ) {
916	1262	$menu_url = $menu_slug;
917	1263	} elseif ( ! empty( menu_page_url( $menu_slug, false ) ) ) {
918	1264	$menu_url = menu_page_url( $menu_slug, false );
919	1265	}
		@@ -936,9 +1282,9 @@
936	1282	$submenu_slug = $submenu_item[2];
937	1283	$submenu_url = '';
938	1284	// Same registered-page vs admin-file rule as the
939	1285	// top-level loop.
940		- if ( ( ! isset( $_parent_pages[ $submenu_slug ] ) || desktop_mode_is_admin_file_slug( $submenu_slug ) ) && ( preg_match( '/\.php($|\?)/', $submenu_slug ) || wp_http_validate_url( $submenu_slug ) ) ) {
	1286	+ if ( ( ! isset( $_parent_pages[ $submenu_slug ] ) || openstation_is_admin_file_slug( $submenu_slug ) ) && ( preg_match( '/\.php($|\?)/', $submenu_slug ) || wp_http_validate_url( $submenu_slug ) ) ) {
941	1287	$submenu_url = $submenu_slug;
942	1288	} elseif ( ! empty( menu_page_url( $submenu_slug, false ) ) ) {
943	1289	$submenu_url = menu_page_url( $submenu_slug, false );
944	1290	}