Quality of life: in-app dialogs, selections in the URL, editable widgets, token dialog, gallery search, status history, stream errors that say why, tab reordering and shortcuts, log out everywhere

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

internal/api/server.go

@@ -107,6 +107,7 @@ func New(cfg *config.Config, sessions *auth.Sessions, mgr *term.Manager, col *me
 	m.HandleFunc("POST /api/machines/{name}/update", s.auth(s.updateMachine))
 	m.HandleFunc("POST /api/machines-update-all", s.auth(s.updateAllMachines))
 	m.HandleFunc("POST /api/logout", s.auth(s.logout))
+	m.HandleFunc("POST /api/logout/all", s.auth(s.logoutAll))
 	m.HandleFunc("GET /api/me", s.auth(s.me))
 	m.HandleFunc("GET /api/terminals", s.auth(s.listTerminals))
 	m.HandleFunc("POST /api/terminals", s.auth(s.createTerminal))
@@ -708,6 +709,15 @@ func (s *Server) logout(w http.ResponseWriter, r *http.Request) {
 	w.WriteHeader(204)
 }
 
+// logoutAll ends every session, this one included: a lost phone, a borrowed laptop.
+// Tokens are not sessions and are untouched; revoke those by name.
+func (s *Server) logoutAll(w http.ResponseWriter, r *http.Request) {
+	n := s.sessions.DeleteAll()
+	log.Printf("all %d session(s) ended (from %s)", n, clientIP(r))
+	s.setCookie(w, r, "", -1)
+	jsonOK(w, 200, map[string]int{"ended": n})
+}
+
 // clientKey is the address the limiter buckets by: the first X-Forwarded-For hop when a
 // reverse proxy set it, else the socket peer.
 func clientKey(r *http.Request) string {