@can('operate')
{{-- Terminal island (self-contained; Livewire never touches it after the first render) --}}
{{-- Toolbar --}}
{{-- Server name via a data-attr, NEVER interpolated into the Alpine expression: Blade
escaping does not protect an x-text JS sink (the browser entity-decodes before
Alpine evals), so a name like x'+alert(1)+' would execute. dataset = plain string. --}}