@monster-orange/den 0.4.12 → 0.4.14

package/src/ui/server/public/settings-page.js

@@ -148,15 +148,10 @@ export async function mountSettings(deps) {
     });
     if (!r.ok) return false;
     const reply = await r.json().catch(() => ({}));
-    for (const k of [
-      "editor",
-      "terminal",
-      "editor_overrides",
-      "graph",
-      "appearance",
-      "shell",
-    ])
-      if (reply[k] !== undefined) ctx.data[k] = reply[k];
+    // Every setting the reply returns (0.4.13): a fixed list here left a
+    // new row's pressed button on its old value until a reload.
+    for (const [k, v] of Object.entries(reply))
+      if (k !== "ok" && v !== undefined) ctx.data[k] = v;
     return true;
   }
   async function saveWorkspace(patch) {

package/src/ui/server/public/settings-registry.js

@@ -29,6 +29,7 @@
  */
 import { themeNotice, themeOptions } from "./appearance.js";
 import { qrSvg } from "./qr.js";
+import { renderPersonasSettings } from "./persona-ui.js";
 
 export const DEN_SETTING_CATEGORIES = [
   {
@@ -879,6 +880,27 @@ export const DEN_SETTINGS = [
     read: () => null,
   },
 
+  {
+    id: "agents.personas",
+    category: "agents",
+    label: "Personas",
+    description:
+      "Agent setups you can start from. Built-in ones ship with Den, distribution ones with your distribution, and yours live on this machine. View or Edit, Duplicate, + New persona; only your own can be edited or deleted.",
+    keywords: [
+      "persona",
+      "role",
+      "agent",
+      "model",
+      "version",
+      "permission",
+      "allowed commands",
+      "instructions",
+    ],
+    scope: "user",
+    control: { type: "custom", render: renderPersonasSettings },
+    read: () => null,
+  },
+
   // ── Command line ───────────────────────────────────────────────────────
   {
     id: "cli.local_dev",

package/src/ui/server/public/settings.html

@@ -26,6 +26,7 @@
       })();
     </script>
     <link rel="stylesheet" href="/theme.css" id="theme-css" />
+    <link rel="stylesheet" href="/persona-ui.css" />
     <title>__DEN_TITLE__ · Settings</title>
     <style>
       /* The Settings page (R21): the prototype's (den-shell.html) page

package/src/ui/server/public/shell.js

@@ -554,6 +554,146 @@
     "ag.review": "Review",
     "ag.resumedAll": "Resumed {n} agents",
     "ag.resumedAll.one": "Resumed {n} agent",
+    "pe.configFirst": "Fix the config first: the personas are read from it.",
+    "ag.new.title": "Start an agent",
+    "rt.missingLine": "Not found on this machine:",
+    "rt.install": "Install…",
+    // The Start dialog and personas (AG-10 to AG-13).
+    "ag.new.what": "What's a persona?",
+    "ag.new.details": "Details: {n}",
+    "ag.new.hide": "Hide details",
+    "ag.new.newP": "+ New persona",
+    "ag.new.plain": "Plain session",
+    "ag.new.plainP": "A terminal in the workspace folder. No agent.",
+    "ag.new.task": "First instruction (optional)",
+    "ag.new.name": "Name (optional)",
+    "ag.new.as": "Starts as {id}",
+    "ag.new.openRunning": "Open the running one",
+    "ag.new.taskPh":
+      "e.g. Take the empty-state story. Match the design and add a test.",
+    "ag.new.adv": "Advanced: model and permissions",
+    "ag.new.advNote":
+      "Defaults come from the persona. Changes here apply to this session only, and the session is marked in the list.",
+    "ag.new.model": "Model",
+    "ag.new.modelDef": "Persona default ({m})",
+    "ag.new.ver": "Version",
+    "ag.new.verDef": "Persona default ({v})",
+    // AG-17.1, Bring in.
+    "ag.bring": "Bring in",
+    "ag.bring.title": "Bring in a conversation",
+    "ag.bring.conv": "Conversation",
+    "ag.bring.help":
+      "Conversations started outside Den in this workspace's folder or its repos' folders, newest first.",
+    "ag.bring.none":
+      "No conversations started outside Den in this workspace's folder or its repos' folders.",
+    "ag.bring.untitled": "Untitled conversation",
+    "ag.bring.open": "Open elsewhere",
+    "ag.bring.openTip": "Still open in another terminal. Close it there first",
+    "ag.bring.agent": "Agent {id}",
+    "ag.bring.note":
+      "Continues it in the folder it ran in, with Den's tools and guards from now on. It keeps running if you close the pane. Close it in any other terminal first: Den only sees a conversation as open if it was written in the last minute.",
+    "ag.bring.go": "Bring in",
+    "ag.bring.going": "Bringing in…",
+    "ag.bring.done": "Brought in as {id}",
+    "ag.bring.now": "just now",
+    "ag.bring.min": "{n} min ago",
+    "ag.bring.h": "{n} h ago",
+    "ag.new.note":
+      "Starts in the workspace folder. It keeps running if you close the pane.",
+    "ag.new.started": "Started {p} in {w}",
+    "pm.ask": "Ask for everything",
+    "pm.edits": "Auto-approve edits in the worktree",
+    "pm.all": "Auto-approve all",
+    "pm.tag.ask": "asks for all",
+    "pm.tag.edits": "auto-approve edits",
+    "pm.tag.all": "auto-approve all",
+    "ov.runtime": "runtime: {r}",
+    "ov.model": "model: {m}",
+    "ov.latest": "latest",
+    "ov.tools": "custom tools",
+    "pe.what":
+      "A persona is a saved agent setup: a role, its instructions, a default runtime and model, and what it may do without asking. You can have several with the same role, each with its own name.",
+    "pe.preset": "Role preset",
+    "pe.extra": "Extra allowed commands",
+    "pe.extraS": "extra",
+    "pe.extraP":
+      "Plain command prefixes, one per line. No patterns or regex. Den translates them for each runtime.",
+    "pe.allows": "What this allows on {r}",
+    "pe.ns": "not supported on {r}",
+    "pe.nsMode": "{r} takes no permission mode from Den yet",
+    "pe.nsModel": "{r} takes no model from Den",
+    "pe.nsPat": "use a plain prefix, not a pattern",
+    "pe.nsBad": "not a plain prefix",
+    "pe.badCmd":
+      '"{c}" isn\'t a plain command prefix: use letters, digits, single spaces and . _ / : = @ % + , -',
+    "pe.raw": "Edit raw runtime config…",
+    "pe.rawLater": "Opening a runtime's own config file is coming later.",
+    "pe.vendor": "vendor-specific",
+    "pe.instr": "Instructions",
+    "pe.runtime": "Default runtime",
+    "pe.model": "Model",
+    "pe.ver": "Version",
+    "pe.rtDefault": "the runtime's default",
+    "pe.perms": "Permission mode",
+    "pe.noneCmd": "none",
+    "pe.loading": "Loading…",
+    "pe.loadFail": "The personas did not load.",
+    "pe.src.builtin": "built-in",
+    "pe.src.distribution": "distribution",
+    "pe.src.local": "mine",
+    "pe.src.hub": "hub",
+    "pe.src.builtin.p":
+      "Ships with Den. Read-only here; duplicate it to customize.",
+    "pe.src.distribution.p":
+      "Ships with your distribution. Read-only here; duplicate it to customize.",
+    "pe.src.local.p": "Yours, on this machine.",
+    "pe.src.hub.p": "Shared through Den Hub. Read-only here.",
+    "pe.new": "New persona",
+    "pe.dupT": "Duplicate persona",
+    "pe.edit": "Edit persona",
+    "pe.dup": "Duplicate",
+    "pe.editB": "Edit",
+    "pe.view": "View",
+    "pe.save": "Save persona",
+    "pe.del": "Delete",
+    "pe.deleted": "Deleted {n}",
+    "pe.name": "Name",
+    "pe.nameP": "e.g. Rita",
+    "pe.role": "Role",
+    "pe.roleHelp":
+      "A role sets this persona's starting template and lets Den hand work to it. It adds nothing hidden to the instructions.",
+    "pe.desc": "One-line description",
+    "pe.cat": "Category",
+    "pe.copy": "{n} (copy)",
+    "pe.saved": "Saved {n}",
+    "pe.ro": "Read-only here. Duplicate it to make a copy of your own.",
+    "pf.search": "Search personas by name, role or description",
+    "pf.cat": "Category",
+    "pf.src": "Source",
+    "pf.all": "All",
+    "pf.none": "No persona matches. Clear the filters or create one.",
+    "pf.clear": "Clear filters",
+    "cat.engineering": "Engineering",
+    "cat.design": "Design",
+    "cat.product": "Product",
+    "cat.marketing": "Marketing",
+    "cat.operations": "Operations",
+    "rt.installed": "Installed",
+    "rt.missing": "Not installed",
+    "rt.notInst": "{r} not installed",
+    "rt.later": "later",
+    "rt.fallback":
+      "{p}'s default runtime, {r}, isn't installed here, so this starts on {f}.",
+    "ver.latest": "latest",
+    "ver.latestP": "Latest (tracks the newest release)",
+    "ver.newer": "newer available",
+    "ver.newerP":
+      "A newer version of this model is out. This one stays pinned until you change it.",
+    "ver.newerOf": "Newer: {v}",
+    "ver.use": "Use latest",
+    "ver.pinned": "pinned {v}",
+    "ver.usedLatest": "{n} now tracks the latest version",
+    "set.agents.personas": "Personas",
     // The Agents tab (AG-4a-term, agents-page.js).
     "n.agents": "Agents",
     "kind.agent": "Agent",

package/src/ui/server/public/topbar.js

@@ -881,7 +881,7 @@ function paletteItems() {
     const base =
       x.kind === "agent" ? x.displayName || (x.persona ?? x.label) : x.label;
     // AG-4b: the session's name (a /rename, or Den's), when it says more.
-    const sn = x.kind === "agent" ? (x.sessionName ?? "").trim() : "";
+    const sn = x.kind === "agent" ? (x.sessionTitle ?? "").trim() : "";
     const extra =
       sn && sn !== base && sn !== x.persona && sn !== x.label ? sn : "";
     const name = extra ? `${base} · ${extra}` : base;
@@ -899,7 +899,7 @@ function paletteItems() {
         x.label,
         x.persona ?? "",
         x.displayName ?? "",
-        x.sessionName ?? "",
+        x.sessionTitle ?? "",
         "agents",
         "terminal",
       ],

package/src/ui/server/request-guard.ts

@@ -17,9 +17,9 @@
  *    and sign-in (/api/web/*, /auth, /api/session/logout), the lock (R8:
  *    /api/sudo-password*), or a shell-grade route other than its own
  *    session's /api/sessions/<id>/*: agent start and resume mint tokens.
- *    403 `agent_forbidden`. One exception (AG-14.4): MCP agent_resume,
- *    when mcp.actions lists it, for another agent of its own workspace
- *    or a granted one (agent-resume-grant.ts). WS-3a (0.4.2) adds the workspace check at
+ *    403 `agent_forbidden`. Two exceptions: MCP agent_resume (AG-14.4)
+ *    and agent_import (AG-17.1), each when mcp.actions lists it, inside
+ *    its own workspace or a granted one (agent-resume-grant.ts). WS-3a (0.4.2) adds the workspace check at
  *    agentRefusal's seam.
  *  - Sign-in (§4, route-classes.ts): beyond loopback (a LAN name, a peer
  *    that isn't loopback, or the edge hostname for a client on another
@@ -61,7 +61,12 @@
 import { randomBytes, timingSafeEqual, createHash } from "crypto";
 import type * as http from "http";
 import { readMcpConfig } from "../../shared/den-config.js";
-import { agentResumeRefusal, agentResumeTarget } from "./agent-resume-grant.js";
+import {
+  agentImportRefusal,
+  agentImportTarget,
+  agentResumeRefusal,
+  agentResumeTarget,
+} from "./agent-resume-grant.js";
 import * as net from "net";
 import * as os from "os";
 import {
@@ -718,6 +723,14 @@ export function agentRefusal(
       agentResumeRefusal(p, target.ws, target.id, mcpActions()) ??
       workspaceRefusal(p, pathname)
     );
+  // AG-17.1: MCP agent_import, opted in, inside the agent's scope (its
+  // list as well as its import: conversation titles are a person's).
+  const imp = agentImportTarget(pathname);
+  if (imp)
+    return (
+      agentImportRefusal(p, imp.ws, mcpActions()) ??
+      workspaceRefusal(p, pathname)
+    );
   if (cls === "shell-grade")
     return `${p.actor} can't ${method === "GET" ? "open" : "use"} ${pathname}: starting or resuming an agent, and the browser sessions, are a person's.`;
   return workspaceRefusal(p, pathname);

package/src/ui/server/route-classes.ts

@@ -148,6 +148,21 @@ export const ROUTES: readonly RouteEntry[] = [
     "/api/agents/runtimes",
     "/api/workspaces/:ws/agents",
   ].map((p) => R(p)),
+  R("/api/personas/:id", "one persona with its instructions (AG-10.6 Details)"),
+  M(
+    ["POST"],
+    "/api/personas",
+    "New persona: a person's own, in the state dir (AG-10.7); never an agent's token",
+  ),
+  M(
+    ["POST", "DELETE"],
+    "/api/personas/:id",
+    "edits or deletes a person's own persona (AG-10.7); never an agent's token",
+  ),
+  R(
+    "/api/workspaces/:ws/conversations",
+    "lists a runtime's own conversations in the workspace's folder: titles only, the ends of each file (AG-17.1)",
+  ),
   R(
     "/api/workspaces/:ws/agents/:id/paths",
     "which paths an agent printed exist in its workspace (stat only, AG-4b)",
@@ -342,6 +357,16 @@ export const ROUTES: readonly RouteEntry[] = [
     "/api/workspaces/:ws/agents",
     "starts an agent: a runtime in a PTY",
   ),
+  S(
+    ["POST"],
+    "/api/workspaces/:ws/conversations/:id/import",
+    "brings in a conversation: its runtime's resume in a PTY (AG-17.1)",
+  ),
+  S(
+    ["POST"],
+    "/api/workspaces/:ws/sessions",
+    "starts a plain session: the person's login shell in the workspace (AG-10.1)",
+  ),
   S(
     ["POST"],
     "/api/workspaces/:ws/agents/:id/resume",
@@ -420,6 +445,12 @@ export const REGEX_ROUTES: Readonly<Record<string, readonly string[]>> = {
     "/api/workspaces/:ws/agents/:id/paths",
   ],
   "agent-routes.ts:RUNTIME_PATH": ["/api/agents/runtimes/:id/path"],
+  "agent-routes.ts:PERSONA_PATH": ["/api/personas/:id"],
+  "agent-routes.ts:PLAIN_PATH": ["/api/workspaces/:ws/sessions"],
+  "agent-routes.ts:CONVERSATIONS_PATH": [
+    "/api/workspaces/:ws/conversations",
+    "/api/workspaces/:ws/conversations/:id/import",
+  ],
   "session-routes.ts:IO_PATH": ["/api/sessions/:id/io"],
   "github-routes.ts:SIGNIN_PATH": ["/api/github/signin/:id"],
   "github-routes.ts:LINK_PATH": ["/api/web/owner/link/:id"],

package/src/ui/server/session-routes.ts

@@ -55,7 +55,8 @@ import { parseSessionName } from "../../shared/sessions/names.js";
 import { sessionPaths } from "../../shared/sessions/paths.js";
 import { loadPty, type PtyLoad } from "../../shared/sessions/pty.js";
 import type { SessionInfo } from "../../shared/sessions/types.js";
-import { agentRows, noteEnded } from "../cli/agent-ops.js";
+import { agentRows, newerOf, noteEnded } from "../cli/agent-ops.js";
+import type { Override } from "../../shared/agents/records.js";
 import { state as sessionState } from "../cli/sessions-command.js";
 import { recordAction } from "./audit.js";
 import { sendJson } from "./http-helpers.js";
@@ -137,10 +138,11 @@ export interface ListedSession {
   /** The name a person gave the agent (AG-4b), when one did. */
   displayName?: string;
   /**
-   * Its session's name (AG-4b): the latest of Den's rename and the
-   * runtime's (Claude Code's /rename), when there is one.
+   * The name its session shows (AG-4b): the latest of Den's rename and the
+   * runtime's (Claude Code's /rename), when there is one. Its handle is
+   * `name`.
    */
-  sessionName?: string;
+  sessionTitle?: string;
   /**
    * What Shift+Enter sends to it (AG-4b, its catalog entry's softNewline):
    * ESC CR unless the runtime says otherwise. A plain session: none (Enter).
@@ -149,6 +151,15 @@ export interface ListedSession {
   persona?: string;
   runtime?: string;
   model?: string;
+  /** A pinned model version (AG-12), and the newer one when there is. */
+  version?: string;
+  newer?: string;
+  /** Its permission intent (AG-13): ask, edits, all. */
+  permission?: string;
+  /** Extra allowed commands it was started with (AG-13.3). */
+  allow?: string[];
+  /** What it overrides of its persona (AG-10.9): its row's tags. */
+  overrides?: Override[];
   cwd?: string;
   /** running, stopping, exited (<code>), stopped, interrupted (AG-14). */
   state: string;
@@ -208,11 +219,16 @@ export function listedSessions(
       label: rec.id,
       agent: rec.id,
       ...(rec.displayName ? { displayName: rec.displayName } : {}),
-      ...(r.sessionName ? { sessionName: r.sessionName } : {}),
+      ...(r.sessionTitle ? { sessionTitle: r.sessionTitle } : {}),
       softNewline: softNewlineSeq(getRuntime(rec.runtime)?.catalog),
       persona: rec.persona,
       runtime: rec.runtime,
       ...(rec.model ? { model: rec.model } : {}),
+      ...(rec.version ? { version: rec.version } : {}),
+      ...newerOf(rec),
+      ...(rec.permission ? { permission: rec.permission } : {}),
+      ...(rec.allow?.length ? { allow: [...rec.allow] } : {}),
+      ...(rec.overrides?.length ? { overrides: [...rec.overrides] } : {}),
       cwd: rec.cwd,
       state: r.state,
       exited: !s || s.exited === true,

package/src/ui/server/ui-assets.ts

@@ -36,6 +36,9 @@ export const UI_MODULES: readonly string[] = [
   "/agents-page.js",
   // The Start agent form's choices, shared by both (AG-10.0).
   "/agent-start.js",
+  // AG-10.4-10.7: the persona picker, editor and Settings › Personas.
+  "/persona-ui.js",
+  "/persona-ui.css",
   // AG-4b: the panes' keys and links (Shift+Enter, ⌃⇧1-3, paths).
   "/term-input.js",
   // SEC-2a: Pair a device's QR code (a tiny encoder of Den's own).