feat: add threads, toolbar customization, and SSO/auth flow improvements

Author: ancsemi

CHANGELOG.md

@@ -11,6 +11,26 @@ Format follows [Keep a Changelog](https://keepachangelog.com/). Haven uses [Sema
 
 ---
 
+## [3.5.0] — 2026-04-20
+
+### Added
+- **Threaded replies panel** — message threads now open in a dedicated right-side panel with parent context, inline reply flow, and live updates.
+- **Thread previews in channel chat** — parent messages now show thread activity summaries with reply count, recent participants, and last activity timestamp.
+- **Thread panel PiP mode and resize handle** — thread conversations can be popped out into a floating panel and resized for multitasking.
+- **Toolbar icon and layout customization** — settings now include monochrome vs emoji toolbar styles, visible action slot count, and per-action order controls.
+
+### Fixed
+- **SSO approval reliability and feedback** — improved SSO consent/auth flow with clearer status messages, timeout handling, profile return via `postMessage`, and stronger fallback behavior.
+- **Vanity invite continuity through auth redirects** — `invite` query params now persist through login/register flows and redirect correctly into `/app`.
+- **Thread-aware message queries** — primary channel history now excludes thread replies to prevent duplicate rendering and keep main timelines clean.
+- **Cache-busting version query injection** — static asset version query strings are now auto-injected more reliably to reduce stale client bundles after updates.
+
+### Changed
+- **SSO response metadata** — SSO auth responses now include display name data and stricter CORS/origin handling for cross-origin auth handoff.
+- **Database schema for threads** — added `messages.thread_id` migration and index to support efficient threaded message fetches.
+
+---
+
 ## [3.4.0] — 2026-04-19
 
 ### Added

docs/index.html

@@ -1415,12 +1415,12 @@ <h2>Download Haven</h2>
       </div>
 
       <div class="download-card fade-in">
-        <h2>&#x2B21; Haven Server &mdash; v3.4.0</h2>
+        <h2>&#x2B21; Haven Server &mdash; v3.5.0</h2>
         <p class="download-version">Latest stable release &middot; Windows, macOS &amp; Linux &middot; ~5 MB</p>
 
         <div class="download-btn-group">
-          <a href="https://github.com/ancsemi/Haven/archive/refs/tags/v3.4.0.zip" class="btn btn-primary download-main">
-            <span class="icon">&#x2B07;</span> Download v3.4.0 (.zip)
+          <a href="https://github.com/ancsemi/Haven/archive/refs/tags/v3.5.0.zip" class="btn btn-primary download-main">
+            <span class="icon">&#x2B07;</span> Download v3.5.0 (.zip)
           </a>
           <div class="download-alt-links">
             <a href="https://github.com/ancsemi/Haven" target="_blank">&#9965; View on GitHub</a>
@@ -1437,7 +1437,11 @@ <h2>&#x2B21; Haven Server &mdash; v3.4.0</h2>
           <div class="version-list">
             <div class="version-list-inner">
               <div class="version-item">
-                <div><span class="v-name">v3.4.0</span><span class="v-tag latest">Latest</span></div>
+                <div><span class="v-name">v3.5.0</span><span class="v-tag latest">Latest</span></div>
+                <a href="https://github.com/ancsemi/Haven/archive/refs/tags/v3.5.0.zip">Download &rarr;</a>
+              </div>
+              <div class="version-item">
+                <div><span class="v-name">v3.4.0</span> &mdash; Quote/edit UX, bot API upgrades, SSO quality fixes</div>
                 <a href="https://github.com/ancsemi/Haven/archive/refs/tags/v3.4.0.zip">Download &rarr;</a>
               </div>
               <div class="version-item">

donor-order.json

@@ -9,24 +9,24 @@
   ],
   "donors": [
     "Andrew Schott",
-    "Taylan",
     "birdycrazy",
+    "Taylan",
     "(,,•ᴗ•,,)",
     "Morgan",
     "deNully",
-    "wreckedcarzz",
-    "khyrna",
     "HoppyGamers",
+    "khyrna",
+    "wreckedcarzz",
     "c0urier",
-    "JollyOrc",
     "Ezmana",
     "john doe",
+    "JollyOrc",
+    "lataxd9",
     "ohmygdala",
     "Orange Lantern",
-    "lataxd9",
     "MutantRabbbit767",
-    "haruna",
     "CloneBtw",
+    "haruna",
     "ArtyDaSmarty",
     "6yBbBc"
   ]

package.json

@@ -1,6 +1,6 @@
 {
   "name": "haven",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "Haven — self-hosted private chat for your server, your rules",
   "license": "AGPL-3.0",
   "main": "server.js",

public/app.html

@@ -711,6 +711,37 @@ <h3 data-i18n="modals.move_messages.title">Move Messages</h3>
     </div>
   </div>
 
+  <!-- Thread Panel (slides in from right) -->
+  <div id="thread-panel" class="thread-panel" style="display:none">
+    <div class="thread-panel-resizer" id="thread-panel-resizer" aria-hidden="true"></div>
+    <div class="thread-panel-header">
+      <div class="thread-panel-header-top">
+        <span class="thread-panel-icon">🧵</span>
+        <span id="thread-panel-title" class="thread-panel-title">Thread</span>
+        <button id="thread-panel-pip" class="icon-btn small" title="Pop out thread (PiP)" aria-pressed="false">⧉</button>
+        <button id="thread-panel-close" class="icon-btn small">&times;</button>
+      </div>
+      <div class="thread-parent-meta" id="thread-parent-meta">
+        <div class="thread-parent-avatar-wrap" id="thread-parent-avatar-wrap"></div>
+        <span class="thread-parent-name" id="thread-parent-name">Thread starter</span>
+      </div>
+      <div class="thread-parent-preview" id="thread-parent-preview"></div>
+    </div>
+    <div class="thread-messages" id="thread-messages"></div>
+    <div class="thread-reply-bar" id="thread-reply-bar" style="display:none">
+      <span id="thread-reply-preview-text"></span>
+      <button id="thread-reply-close-btn" class="icon-btn small" aria-label="Cancel thread reply">&times;</button>
+    </div>
+    <div class="thread-input-area">
+      <textarea id="thread-input" class="thread-input" placeholder="Reply in thread..." rows="1"></textarea>
+      <button id="thread-send-btn" class="thread-send-btn">
+        <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5">
+          <path d="M22 2L11 13"/><path d="M22 2L15 22L11 13L2 9L22 2Z"/>
+        </svg>
+      </button>
+    </div>
+  </div>
+
   <!-- First-Time Setup Wizard (Admin only) -->
   <div class="modal-overlay" id="setup-wizard-modal" style="display:none">
     <div class="modal modal-wizard">
@@ -1106,6 +1137,41 @@ <h5 class="settings-section-title">🎨 Role Display</h5>
         <small class="settings-hint" style="margin-top:4px;display:block">How role colors are shown next to usernames in chat and the member list.</small>
       </div>
 
+      <!-- Toolbar Icon Style -->
+      <div class="settings-section" id="section-toolbar-icons" style="border-top: 1px solid var(--border-light); padding-top: 16px; margin-top: 8px;">
+        <h5 class="settings-section-title">🎛️ Toolbar Icons</h5>
+        <div class="density-picker" id="toolbar-icon-picker">
+          <button type="button" class="density-btn active" data-toolbaricons="mono" title="Use sleek monochrome icons in message toolbars">
+            <span class="density-icon" aria-hidden="true">
+              <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8">
+                <circle cx="12" cy="12" r="9"></circle>
+                <path d="M8.5 14.5c1 1.2 2.2 1.8 3.5 1.8s2.5-.6 3.5-1.8" stroke-linecap="round"></path>
+                <circle cx="9.2" cy="10.2" r="1" fill="currentColor" stroke="none"></circle>
+                <circle cx="14.8" cy="10.2" r="1" fill="currentColor" stroke="none"></circle>
+              </svg>
+            </span>
+            <span class="density-label">Monochrome</span>
+          </button>
+          <button type="button" class="density-btn" data-toolbaricons="emoji" title="Use colorful emoji icons in message toolbars">
+            <span class="density-icon">😀</span>
+            <span class="density-label">Colorful Emoji</span>
+          </button>
+        </div>
+        <label class="toolbar-slots-row" for="toolbar-visible-slots">
+          <span>Visible toolbar slots before overflow</span>
+          <input type="range" id="toolbar-visible-slots" min="1" max="7" step="1" value="3">
+          <span id="toolbar-visible-slots-value" class="toolbar-slots-value">3</span>
+        </label>
+        <div class="toolbar-order-wrap">
+          <div class="toolbar-order-head">
+            <span>Toolbar slot order</span>
+            <button type="button" class="btn-sm" id="toolbar-order-reset-btn">Reset</button>
+          </div>
+          <div id="toolbar-order-list" class="toolbar-order-list"></div>
+        </div>
+        <small class="settings-hint" style="margin-top:4px;display:block">Applies to message and thread hover action bars.</small>
+      </div>
+
       <!-- Image Display Mode -->
       <div class="settings-section" id="section-density" style="border-top: 1px solid var(--border-light); padding-top: 16px; margin-top: 8px;">
         <h5 class="settings-section-title">🖼️ <span data-i18n="settings.image_display.title">Image Display</span></h5>