v68: add reliable mobile navigation between remote dashboard and chat

Author: Mantiee

README.md

@@ -221,3 +221,7 @@ install `.[providers]` when using the original remote backends.
 ## V100 campaign v28
 
 Persistent goals, A/B lineages, bounded research drones, concurrent chat, private Linux desktop and pinned public benchmark gates: see [CAMPAIGN.md](CAMPAIGN.md). Optional setup stages report deferred features explicitly.
+
+For private phone access, see [SYNTA_REMOTE_ACCESS.md](SYNTA_REMOTE_ACCESS.md).
+The remote dashboard and master chat share mobile navigation; an existing v67
+gateway can receive the [v68 update](SYNTA_V68.md) without restarting the mission.

SYNTA_V68.md

@@ -0,0 +1,25 @@
+# Synta v68
+
+The private remote dashboard and master chat share a mobile navigation bar.
+Dashboard link injection now handles body attributes, uppercase tags and quoted
+attribute values containing `>`. It preserves the host renderer, script bytes
+and Content Security Policy. Authentication and command routing stay unchanged.
+
+For an existing v67 installation, run `tools/update-synta-navigation.sh` with
+the published v68 commit. It replaces the package and restarts only
+`synta-remote.service`. Production changes since v67 are limited to the remote
+gateway. The mission, Windows workers, dashboard and Tailscale Serve settings
+are retained. Older installations require the full retention upgrader.
+
+HTTPS opens the dashboard or `/chat`. To open a shell on an iPhone, configure
+an SSH client with host `debian1.tail68f677.ts.net`, port `22`, username `marek`
+and the existing Debian SSH credentials. Keep Tailscale connected. Do not put
+`https://` or `/chat` in the SSH host field. Existing OpenSSH access is separate
+from the HTTPS gateway; no public port forwarding is required.
+
+Regression coverage includes authenticated proxy navigation, unchanged script
+bytes and security policy, body tag variants and idempotent insertion. This
+environment cannot verify the operator's phone or Debian services directly.
+
+Validation: 1210 tests passed, 65 skipped, one existing PEFT warning. Ruff and
+the targeted updater's Bash syntax check passed.

pyproject.toml

@@ -3,7 +3,7 @@ name = "rlms"
 authors = [
     {name = "Alex Zhang", email = "altzhang@mit.edu"},
 ]
-version = "0.1.3+v100.67"
+version = "0.1.3+v100.68"
 description = "Recursive Language Models."
 readme = "README.md"
 license = "MIT"

rlm/v100/remote_access.py

@@ -16,6 +16,19 @@
 from urllib.parse import urlsplit
 from urllib.request import Request, urlopen
 
+NAVIGATION = b"""<nav id="synta-remote-navigation" aria-label="Synta navigation" style="display:flex;flex-wrap:wrap;gap:12px;margin:0 0 20px;padding:8px;border:1px solid #536b88;border-radius:10px;background:#101725;font:16px system-ui"><a href="/" style="display:flex;align-items:center;min-height:44px;padding:0 16px;color:#9bcaff">Dashboard</a><a href="/chat" style="display:flex;align-items:center;min-height:44px;padding:0 16px;color:#9bcaff">Master chat</a></nav>"""
+
+
+def dashboard_navigation(body: bytes) -> bytes:
+    """Add gateway-owned navigation without modifying the renderer or its script."""
+    if b'id="synta-remote-navigation"' in body:
+        return body
+    opening = re.search(rb"""<body\b(?:[^>"']|"[^"]*"|'[^']*')*>""", body, re.IGNORECASE)
+    if opening is None:
+        raise ValueError("Dashboard HTML has no body element for remote navigation")
+    return body[: opening.end()] + NAVIGATION + body[opening.end() :]
+
+
 CHAT_SCRIPT = r"""
 const rows=new Map();let busy=false,csrf='';
 async function api(path,options={}){const abort=new AbortController(),timer=setTimeout(()=>abort.abort(),8000);try{const r=await fetch(path,{cache:'no-store',signal:abort.signal,...options});if(!r.ok)throw Error('HTTP '+r.status);return await r.json()}finally{clearTimeout(timer)}}
@@ -28,7 +41,9 @@
 CHAT_PAGE = (
     """<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Synta remote chat</title><style>
 body{background:#101725;color:#e1e9f6;font:16px system-ui;margin:0;padding:20px;max-width:960px;margin:auto}a{color:#9bcaff}nav{display:flex;gap:22px}article{background:#1a2538;border:1px solid #33475f;border-radius:12px;margin:16px 0;padding:16px}h3{font-size:12px;overflow-wrap:anywhere;color:#9cb0c9}pre{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit;line-height:1.6}textarea{box-sizing:border-box;width:100%;min-height:120px;background:#1a2538;color:#fff;padding:14px;font:inherit;border:1px solid #536b88;border-radius:8px}button{padding:12px 26px;background:#78b4ff;border:0;border-radius:8px;font:inherit;cursor:pointer}summary{cursor:pointer;color:#a6cfff}#composer{position:sticky;bottom:0;background:#101725;padding:12px 0}#status{color:#afc7e5}
-</style><nav><a href="/">Dashboard</a><a href="/chat">Master chat</a></nav><h1>Synta master chat</h1><p>Authenticated owner commands use the same mission queue. Replies and execution receipts stay available after you leave.</p><p id="status">Connecting</p><main id="history"></main><section id="composer"><textarea id="message" maxlength="8000" placeholder="Message to Synta, /status, /goal ..."></textarea><button id="send">Send</button></section><script>"""
+</style>"""
+    + NAVIGATION.decode()
+    + """<h1>Synta master chat</h1><p>Authenticated owner commands use the same mission queue. Replies and execution receipts stay available after you leave.</p><p id="status">Connecting</p><main id="history"></main><section id="composer"><textarea id="message" maxlength="8000" placeholder="Message to Synta, /status, /goal ..."></textarea><button id="send">Send</button></section><script>"""
     + CHAT_SCRIPT
     + "</script></html>"
 )
@@ -181,11 +196,7 @@ def do_GET(self):  # noqa: N802
                     if len(body) > 8 * 2**20:
                         raise ValueError("Dashboard response exceeds 8 MiB")
                     if route == "/":
-                        body = body.replace(
-                            b"<body>",
-                            b'<body><nav><a href="/chat">Open Synta master chat</a></nav>',
-                            1,
-                        )
+                        body = dashboard_navigation(body)
                     self.reply(
                         body,
                         response.headers.get("Content-Type", "application/octet-stream"),

tests/test_v100_remote_access.py

@@ -1,6 +1,7 @@
 import json
 import threading
 from contextlib import contextmanager
+from io import BytesIO
 from urllib.error import HTTPError
 from urllib.request import Request, urlopen
 
@@ -52,6 +53,7 @@ def test_owner_chat_csrf_exact_origin_queue_and_persistent_reply(tmp_path):
     with gateway(tmp_path) as (server, base):
         code, headers, body = request(base, "/chat")
         assert code == 200 and b"Awaiting saved result" in body
+        assert remote_access.NAVIGATION in body
         assert "script-src 'sha256-" in headers["Content-Security-Policy"]
         assert server.server_address[0] == "127.0.0.1"
         _, _, body = request(base, "/api/chat")
@@ -90,6 +92,52 @@ def test_owner_chat_csrf_exact_origin_queue_and_persistent_reply(tmp_path):
         assert json.loads(body)["requests"][0]["response"] == reply
 
 
+@pytest.mark.parametrize(
+    "opening",
+    [
+        b"<body>",
+        b'<body class="dashboard">',
+        b"<BODY class='dashboard'>",
+        b'<body data-label="a > b">',
+    ],
+)
+def test_dashboard_navigation_preserves_renderer_and_body_attributes(opening):
+    source = b"<!doctype html><html>" + opening + b"<script>render()</script></body></html>"
+    result = remote_access.dashboard_navigation(source)
+    assert opening + remote_access.NAVIGATION in result
+    assert result.replace(remote_access.NAVIGATION, b"", 1) == source
+    assert remote_access.dashboard_navigation(result) == result
+
+
+def test_dashboard_without_body_cannot_silently_omit_navigation():
+    with pytest.raises(ValueError, match="no body element"):
+        remote_access.dashboard_navigation(b"<html><p>Missing body</p></html>")
+
+
+def test_gateway_dashboard_injects_mobile_links_and_preserves_upstream_policy(
+    tmp_path, monkeypatch
+):
+    source = b'<html><body class="dashboard"><script>render()</script></body></html>'
+    policy = "default-src 'none'; script-src 'sha256-existing'; style-src 'unsafe-inline'"
+    calls = []
+
+    def upstream(req, timeout):
+        calls.append((req.full_url, timeout))
+        response = BytesIO(source)
+        response.headers = {"Content-Type": "text/html", "Content-Security-Policy": policy}
+        return response
+
+    monkeypatch.setattr(remote_access, "urlopen", upstream)
+    with gateway(tmp_path) as (_, base):
+        code, headers, body = request(base, "/")
+    assert code == 200
+    assert headers["Content-Security-Policy"] == policy
+    assert body.replace(remote_access.NAVIGATION, b"", 1) == source
+    assert b'href="/chat"' in body and b'href="/"' in body
+    assert b"min-height:44px" in body
+    assert calls == [(CONFIG["dashboard"] + "/", 5)]
+
+
 @pytest.mark.parametrize(
     "route",
     [

tools/update-synta-navigation.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# v67 -> v68: production changes are limited to the remote gateway.
+set -euo pipefail
+REV="${1:?Pass the pinned 40-character v68 commit}"
+[[ "$REV" =~ ^[0-9a-f]{40}$ ]] || { echo 'Invalid revision' >&2; exit 1; }
+source "$HOME/ai-v100/env.sh"
+PY="$AI_V100_ROOT/venvs/v100-continual/bin/python"
+"$PY" <<'PY'
+from importlib.metadata import version
+
+installed = version('rlms')
+if installed not in ('0.1.3+v100.67', '0.1.3+v100.68'):
+    raise SystemExit(f'Targeted navigation update requires v67 or v68; installed: {installed}. Use the full retention upgrader for older versions.')
+PY
+systemctl --user is-active --quiet synta-remote.service
+export UV_HTTP_TIMEOUT=600 UV_HTTP_RETRIES=5
+uv --no-config pip install --python "$PY" --no-deps --reinstall-package rlms \
+  "rlms @ git+https://github.com/Mantiee/rlm.git@$REV"
+uv --no-config pip check --python "$PY"
+systemctl --user restart synta-remote.service
+systemctl --user is-active --quiet synta-remote.service
+echo 'Remote gateway updated. Mission, dashboard, Tailscale routing and Windows tasks were not restarted.'
+echo 'Reload the Tailscale HTTPS dashboard to see Dashboard / Master chat navigation.'