feat(profile): add uploadable avatars with local/S3 storage

Users can upload and remove profile pictures on the profile page.
Admins choose local or instance S3 storage in advanced settings.
Avatars are compressed to JPEG and served via a private cached route.

tests/Feature/ProfileAvatarTest.php

@@ -0,0 +1,131 @@
+<?php
+
+use App\Livewire\Profile\Index;
+use App\Models\InstanceSettings;
+use App\Models\User;
+use App\Services\AvatarStorageService;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Facades\Storage;
+use Livewire\Livewire;
+
+uses(RefreshDatabase::class);
+
+beforeEach(function () {
+    InstanceSettings::unguarded(fn () => InstanceSettings::create([
+        'id' => 0,
+        'avatar_storage_type' => 'local',
+    ]));
+});
+
+it('compresses and stores an uploaded profile picture on the configured local storage', function () {
+    Storage::fake('local');
+    $user = User::factory()->create(['name' => 'Test User']);
+    $this->actingAs($user);
+
+    Livewire::test(Index::class)
+        ->set('avatar', UploadedFile::fake()->image('profile.png', 1200, 900))
+        ->call('uploadAvatar')
+        ->assertHasNoErrors();
+
+    $user->refresh();
+
+    expect($user->avatar_path)
+        ->toBe("avatars/{$user->id}/avatar.jpg")
+        ->and($user->avatar_storage_type)->toBe('local')
+        ->and($user->avatar_s3_storage_id)->toBeNull();
+
+    Storage::disk('local')->assertExists($user->avatar_path);
+
+    $image = getimagesizefromstring(Storage::disk('local')->get($user->avatar_path));
+
+    expect($image[0])->toBeLessThanOrEqual(256)
+        ->and($image[1])->toBeLessThanOrEqual(256)
+        ->and($image['mime'])->toBe('image/jpeg')
+        ->and(Storage::disk('local')->size($user->avatar_path))->toBeLessThan(100_000);
+});
+
+it('stores an already compressed browser JPEG without server image extensions', function () {
+    Storage::fake('local');
+    $user = User::factory()->create(['name' => 'Test User']);
+    $contents = base64_decode('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');
+    $path = tempnam(sys_get_temp_dir(), 'avatar');
+    file_put_contents($path, $contents);
+    $upload = new UploadedFile($path, 'avatar.jpg', 'image/jpeg', null, true);
+
+    app(AvatarStorageService::class)->store($user, $upload);
+
+    expect(Storage::disk('local')->get("avatars/{$user->id}/avatar.jpg"))->toBe($contents);
+});
+
+it('serves the authenticated users profile picture', function () {
+    Storage::fake('local');
+    $user = User::factory()->create([
+        'name' => 'Test User',
+        'avatar_path' => 'avatars/1/avatar.jpg',
+        'avatar_storage_type' => 'local',
+    ]);
+    Storage::disk('local')->put($user->avatar_path, 'avatar-content');
+
+    $this->withoutMiddleware()->actingAs($user)
+        ->get(route('profile.avatar'))
+        ->assertSuccessful()
+        ->assertHeader('content-type', 'image/jpeg');
+});
+
+it('removes the current profile picture', function () {
+    Storage::fake('local');
+    $user = User::factory()->create([
+        'name' => 'Test User',
+        'avatar_path' => 'avatars/1/avatar.jpg',
+        'avatar_storage_type' => 'local',
+    ]);
+    Storage::disk('local')->put($user->avatar_path, 'avatar-content');
+    $this->actingAs($user);
+
+    Livewire::test(Index::class)
+        ->call('removeAvatar')
+        ->assertHasNoErrors();
+
+    expect($user->refresh()->avatar_path)->toBeNull();
+    Storage::disk('local')->assertMissing('avatars/1/avatar.jpg');
+});
+
+it('falls back cleanly when the avatars S3 storage no longer exists', function () {
+    $user = User::factory()->create([
+        'name' => 'Test User',
+        'avatar_path' => 'avatars/1/avatar.webp',
+        'avatar_storage_type' => 's3',
+        'avatar_s3_storage_id' => null,
+    ]);
+
+    $this->withoutMiddleware()->actingAs($user)
+        ->get(route('profile.avatar'))
+        ->assertNotFound();
+});
+
+it('renders the profile upload and user menu avatar', function () {
+    $profile = file_get_contents(resource_path('views/livewire/profile/index.blade.php'));
+    $menu = file_get_contents(resource_path('views/components/top-user-menu.blade.php'));
+
+    expect($profile)
+        ->toContain("this.\$wire.upload('avatar', compressed")
+        ->toContain('canvas.toBlob')
+        ->toContain('wire:click="uploadAvatar"')
+        ->and($menu)
+        ->toContain("route('profile.avatar',");
+});
+
+it('offers runtime local or existing S3 profile picture storage', function () {
+    $component = file_get_contents(app_path('Livewire/Settings/Advanced.php'));
+    $view = file_get_contents(resource_path('views/livewire/settings/advanced.blade.php'));
+
+    expect($component)
+        ->toContain("['value' => 'local', 'label' => 'Local storage']")
+        ->toContain("'value' => 's3:'.\$storage->id")
+        ->toContain('->whereTeamId(0)')
+        ->toContain("->where('is_usable', true)")
+        ->and($view)
+        ->toContain('id="avatar_storage"')
+        ->toContain('Use S3 for multi-instance or cloud deployments');
+});

tests/Feature/RealtimeTerminalPackagingTest.php

@@ -144,6 +144,17 @@ it('shows connection progress in the terminal body instead of the header', funct
         ->toContain("this.starting = this.\$el.dataset.autoStart === 'true';");
 });
 
+it('starts the global terminal only once when a target is selected', function () {
+    $view = file_get_contents(resource_path('views/livewire/terminal/index.blade.php'));
+    $component = file_get_contents(app_path('Livewire/Terminal/Index.php'));
+
+    expect($view)
+        ->toContain("await \$wire.set('selected_uuid', target.value);")
+        ->not->toContain('await $wire.connectToContainer();')
+        ->and($component)
+        ->toMatch('/public function updatedSelectedUuid\(\).*?\$this->connectToContainer\(\);/s');
+});
+
 it('uses the redesigned terminal canvas and controls on resource terminal pages', function () {
     $view = file_get_contents(resource_path('views/livewire/project/shared/execute-container-command.blade.php'));
 

tests/Feature/SentinelUnsavedBarFlashTest.php

@@ -108,7 +108,7 @@ test('settings advanced unsaved bar scopes dirty tracking away from instantSave
 
     expect($contents)
         ->toContain('x-unsaved-bar')
-        ->toContain('targets="custom_dns_servers,allowed_ips,webhook_allowed_internal_hosts,webhook_allow_localhost"')
+        ->toContain('targets="custom_dns_servers,allowed_ips,webhook_allowed_internal_hosts,webhook_allow_localhost,domain_connect_private_key"')
         ->toContain('onChange="instantSave"')
         ->not->toMatch('/x-unsaved-bar\s+action="submit"\s*\/>/');
 });

tests/Feature/TerminalPageHeaderTest.php

@@ -23,6 +23,15 @@ it('shows a centered themed target canvas before loading xterm', function () {
         ->toContain("@else\n        <div wire:key=\"terminal-session-canvas\" data-terminal-session-canvas");
 });
 
+it('keeps the terminal target picker within the mobile canvas', function () {
+    $view = file_get_contents(resource_path('views/livewire/terminal/index.blade.php'));
+
+    expect($view)
+        ->toContain('data-terminal-target-picker="page"')
+        ->toContain('flex max-h-full w-full max-w-lg flex-col')
+        ->toContain('class="terminal-target-list min-h-0 flex-1 overflow-y-auto p-2"');
+});
+
 it('loads targets inside the themed session picker with an accent scrollbar', function () {
     $view = file_get_contents(resource_path('views/livewire/terminal/index.blade.php'));
     $styles = file_get_contents(resource_path('css/app.css'));

tests/Feature/TopUserMenuTest.php

@@ -25,8 +25,15 @@ it('changes appearance from a submenu instead of navigating to a separate page',
     expect($menu)
         ->toContain('appearanceOpen: false')
         ->toContain('@click.outside="open = false; appearanceOpen = false"')
-        ->toContain("theme: localStorage.getItem('theme') || 'dark'")
-        ->toContain('setTheme(type)')
+        ->toContain("theme: localStorage.getItem('theme') === 'purple' ? 'custom' : (localStorage.getItem('theme') || 'dark')")
+        ->toContain('setTheme(type, closeMenu = true)')
+        ->toContain("this.setTheme('custom', false)")
+        ->not->toContain('@change="appearanceOpen = false; open = false"')
+        ->toContain('this.appearanceOpen = false;')
+        ->toContain('this.open = false;')
+        ->toContain('<template x-if="open">')
+        ->not->toContain('x-show.important="open"')
+        ->not->toContain('<div x-show="open" x-cloak x-transition.opacity.duration.120ms')
         ->toContain("['value' => 'light', 'label' => 'Light'")
         ->toContain("['value' => 'system', 'label' => 'System'")
         ->toContain("['value' => 'dark', 'label' => 'Dark'")