@monster-orange/den 0.4.20 → 0.4.22

package/src/ui/server/public/agents-page.js

@@ -347,6 +347,25 @@ function wsLinkHtml(ws) {
   return `<a class="wslink" href="${esc(wsHref(ws))}" title="${esc(t("ag.goWs", { ws }))}">${esc(ws)}</a>`;
 }
 
+/**
+ * D20: where its session runs, as a tag: "Stops at logout" (the desktop
+ * session) or "No GUI" (outside it: kept across logout). `button`: a
+ * button that says why when tapped (the pane bar); else a span (a row,
+ * itself a button). "" when the host didn't say (off macOS, older host).
+ */
+function whereTag(r, button = false) {
+  const s = r?.launchd;
+  const logout = s === "Aqua" || s === "LoginWindow";
+  if (!logout && s !== "Background" && s !== "System") return "";
+  const key = logout ? "ag.where.logout" : "ag.where.bg";
+  const tip = t(`${key}Tip`, { cli: CLI });
+  const cls = `tagx${logout ? " warn" : ""}`;
+  const where = logout ? "logout" : "bg";
+  return button
+    ? `<button type="button" class="${cls}" data-act="where" data-where="${where}" title="${esc(tip)}" aria-label="${esc(`${t(key)}: ${tip}`)}">${logout ? "⚠ " : ""}${esc(t(key))}</button>`
+    : `<span class="${cls}" data-where="${where}" title="${esc(tip)}">${logout ? "⚠ " : ""}${esc(t(key))}</span>`;
+}
+
 /** Its rotation, when one is due: "ready" or "due" (den#4). */
 function rotationOf(r) {
   if (!r.rotation?.due) return "";
@@ -370,6 +389,8 @@ function stoppedHtml(r) {
     : "";
   const fresh = `<button type="button" class="den-btn sm" data-act="fresh" aria-label="${esc(t("ag.freshName", { id: r.agent }))}">${esc(t("ag.fresh"))}</button>`;
   const remove = `<button type="button" class="den-btn sm" data-act="remove" aria-label="${esc(t("ag.removeName", { id: r.agent }))}">${esc(t("ag.remove"))}</button>`;
+  // D25: an agent with no pane open can be renamed too.
+  const rename = `<button type="button" class="den-btn sm" data-act="rename" aria-label="${esc(t("ag.renameName", { id: r.agent }))}">${esc(t("ag.rn.act"))}</button>`;
   // A rotation due without a handoff that passes: say so (den#4).
   const handoff =
     rot === "due"
@@ -400,7 +421,7 @@ function stoppedHtml(r) {
     (meta ? `<span class="meta">${esc(meta)}</span>` : "") +
     `<span class="why">${esc(stopReason(r))}</span>` +
     `</button>` +
-    `<div class="agacts">${handoff}${cant}${relaunch}${resume}${fresh}${remove}</div>` +
+    `<div class="agacts">${handoff}${cant}${relaunch}${resume}${fresh}${rename}${remove}</div>` +
     `</div>`
   );
 }
@@ -428,9 +449,10 @@ function rowHtml(r) {
     ? `<span class="tagx warn" title="${esc(t("ag.revokedTip"))}">${esc(t("ag.revoked"))}</span>`
     : "";
   const ovTags = r.kind === "agent" ? overrideTagsHtml(r) : "";
+  const wTag = whereTag(r);
   const tags =
-    rotTag || revokedTag || ovTags
-      ? `<span class="agtags">${revokedTag}${rotTag}${ovTags}</span>`
+    rotTag || revokedTag || ovTags || wTag
+      ? `<span class="agtags">${revokedTag}${rotTag}${wTag}${ovTags}</span>`
       : "";
   return (
     `<button type="button" class="agr" data-id="${esc(r.id)}" data-kind="${esc(r.kind)}" data-state="${esc(r.state)}"` +
@@ -976,9 +998,10 @@ function paintBar(p) {
   const reconnect = p.lost
     ? `<button type="button" class="den-btn sm" data-act="reconnect">${esc(t("ag.reconnect"))}</button>`
     : "";
-  // AG-18: ⋯, its menu: Change persona… (a runtime that can resume).
+  // AG-18: ⋯, its menu: Rename… (D25, every agent), Change persona… (a
+  // runtime that can resume).
   const more =
-    r?.kind === "agent" && r.personaChange
+    r?.kind === "agent"
       ? `<button type="button" class="den-btn sm" data-act="more" aria-haspopup="menu" aria-expanded="false" aria-label="${esc(t("ag.more", { id: r.agent }))}" title="${esc(t("ag.more", { id: r.agent }))}">⋯</button>`
       : "";
   bar.innerHTML =
@@ -987,6 +1010,7 @@ function paintBar(p) {
     (r?.tokenRevoked
       ? `<span class="tagx warn" title="${esc(t("ag.revokedTip"))}">${esc(t("ag.revoked"))}</span>`
       : "") +
+    whereTag(r, true) +
     `<span class="x">${reconnect}${stop}${resume}${more}<button type="button" class="den-btn sm" data-act="close" aria-label="${esc(t("ag.detachName", { id: name }))}" title="${esc(t("ag.detach"))}">×</button></span>`;
   // Tabs: the tab's × closes it; the pane's bar has none.
   const x = bar.querySelector('[data-act="close"]');
@@ -2126,6 +2150,63 @@ function goLabel() {
   return t(sd.change ? "ag.pc.go" : sd.bring ? "ag.bring.go" : "ag.go");
 }
 
+/**
+ * D25: the Rename dialog for agent row `r`: its name (empty: back to its
+ * id), and the name other sessions will see it by (D24).
+ */
+function openRename(r, opener) {
+  const dlg = $d("#ag-rn");
+  if (!dlg || dlg.open) return;
+  const input = $d("#ag-rn-name");
+  const help = $d("#ag-rn-help");
+  const err = $d("#ag-rn-err");
+  $d("#ag-rn-h").textContent = t("ag.rn.title", { id: r.agent });
+  $d("#ag-rn-t").textContent = t("ag.rn.name");
+  $d("#ag-rn-go").textContent = t("ag.rn.go");
+  $d("#ag-rn-cancel").textContent = t("ag.rn.cancel");
+  input.value = r.displayName || "";
+  input.placeholder = r.agent;
+  const paintHelp = () => {
+    const name = input.value.trim() || r.agent;
+    help.textContent = t("ag.rn.help", {
+      id: r.agent,
+      peer: `${CLI}-${r.workspace}:${name}`,
+    });
+  };
+  paintHelp();
+  err.hidden = true;
+  input.oninput = paintHelp;
+  const close = () => {
+    dlg.close?.();
+    dlg.removeAttribute("open");
+    opener?.focus?.();
+  };
+  $d("#ag-rn-cancel").onclick = close;
+  $d("#ag-rn-form").onsubmit = async (e) => {
+    e.preventDefault();
+    const name = input.value.trim();
+    const go = $d("#ag-rn-go");
+    go.disabled = true;
+    try {
+      await api("POST", agentPath(r, "name"), {
+        name: name && name !== r.agent ? name : null,
+      });
+      close();
+      await refresh();
+      paintLayout();
+    } catch (x) {
+      err.textContent = x?.message || String(x);
+      err.hidden = false;
+    } finally {
+      go.disabled = false;
+    }
+  };
+  if (typeof dlg.showModal === "function") dlg.showModal();
+  else dlg.setAttribute("open", "");
+  input.focus();
+  input.select();
+}
+
 /** AG-18: Change persona… for agent row `r` (its persona, model, name). */
 function openPersonaChange(r) {
   return openStart(false, {
@@ -2708,6 +2789,7 @@ export async function mountAgentsPage(root) {
       if (which === "resume" || which === "fresh" || which === "relaunch")
         void restartRow(r, which, act);
       else if (which === "remove") void removeRow(r, act);
+      else if (which === "rename") openRename(r, act);
       return;
     }
     const b = e.target.closest(".agr");
@@ -2738,6 +2820,11 @@ export async function mountAgentsPage(root) {
     const id = b.closest(".pane")?.dataset.id ?? b.dataset.id;
     const p = id && st.panes.get(id);
     if (!p) return;
+    if (b.dataset.act === "where") {
+      // D20: why it stops at logout (or what it lacks), for touch too.
+      window.denShell?.toast?.(b.title);
+      return;
+    }
     if (b.dataset.act === "close") closePane(id);
     else if (b.dataset.act === "stop") void stopAgent(p, b);
     else if (b.dataset.act === "resume") {
@@ -2750,7 +2837,17 @@ export async function mountAgentsPage(root) {
       window.denShell?.openMenu?.(b, {
         label: t("ag.more", { id: r.agent }),
         items: [
-          { label: t("ag.pc.item"), onSelect: () => void openPersonaChange(r) },
+          // D25: a visible Rename, for touch and keyboard (not only a
+          // double-click on a tab).
+          { label: t("ag.rn.item"), onSelect: () => openRename(r, b) },
+          ...(r.personaChange
+            ? [
+                {
+                  label: t("ag.pc.item"),
+                  onSelect: () => void openPersonaChange(r),
+                },
+              ]
+            : []),
         ],
       });
     }

package/src/ui/server/public/agents.html

@@ -412,6 +412,16 @@
         flex: none;
         white-space: nowrap;
       }
+      /* D20: the launchd tag is a button (tap: why); it looks like a tag. */
+      button.tagx {
+        background: none;
+        cursor: pointer;
+        line-height: inherit;
+      }
+      button.tagx:focus-visible {
+        outline: 2px solid var(--accent);
+        outline-offset: 1px;
+      }
       .wslink {
         color: inherit;
         text-decoration: none;
@@ -771,6 +781,26 @@
           </div>
         </form>
       </dialog>
+      <!-- D25: Rename, from a pane's ⋯ or a stopped agent's row. -->
+      <dialog class="ag-dlg" id="ag-rn" aria-labelledby="ag-rn-h">
+        <form method="dialog" id="ag-rn-form" novalidate>
+          <h2 id="ag-rn-h">Rename</h2>
+          <label class="fld"
+            ><span id="ag-rn-t">Name</span>
+            <input id="ag-rn-name" maxlength="40" autocomplete="off" />
+          </label>
+          <p class="help" id="ag-rn-help"></p>
+          <p class="err" id="ag-rn-err" role="alert" hidden></p>
+          <div class="btns">
+            <button type="button" class="den-btn" id="ag-rn-cancel">
+              Cancel
+            </button>
+            <button type="submit" class="den-btn primary" id="ag-rn-go">
+              Rename
+            </button>
+          </div>
+        </form>
+      </dialog>
 
       <script type="module">
         import {

package/src/ui/server/public/error-page.js

@@ -268,7 +268,8 @@ export function landingAfterSignIn(loc) {
  */
 function githubBlock(s, t) {
   const g = s.github;
-  if (!g || s.localhost || g.state === "no_client_id") return "";
+  if (!g || s.localhost || g.state === "no_client_id" || g.state === "claim")
+    return "";
   const host = s.machine || "";
   const ready = g.state === "ready";
   const step1 = withHost(t, "err.signin.ghStep1", {
@@ -291,6 +292,9 @@ function githubBlock(s, t) {
         `<button type="button" class="btn primary" id="den-gh-start">${esc(t("err.signin.github"))}</button>` +
         `</div><div id="den-gh-flow" aria-live="polite"></div>`
       : "") +
+    (!ready && g.message
+      ? `<p class="den-gh-note" id="den-gh-norule">${esc(g.message)}</p>`
+      : "") +
     `<p class="den-gh-note" id="den-gh-only">${esc(t("err.signin.ghOnly"))}` +
     (g.learnMore
       ? ` <a id="den-gh-learn" href="${esc(g.learnMore)}" target="_blank" rel="noopener noreferrer">${esc(t("err.signin.ghLearn"))}</a>`
@@ -299,6 +303,57 @@ function githubBlock(s, t) {
   );
 }
 
+/**
+ * D17: a Den with no owner yet that a rule lets someone claim. It leads the
+ * page: Connect your GitHub account. "This is my computer" (with
+ * web.allowed_github_org) goes to localhost and back, which only works in a
+ * browser on the machine Den runs on, then starts the GitHub sign-in with
+ * that proof; "Sign in as @login" (web.owner_github) works from anywhere.
+ */
+function claimBlock(s, t) {
+  const g = s.github;
+  if (!g || g.state !== "claim" || s.localhost) return "";
+  const host = s.machine || "";
+  const back = location.origin + location.pathname + location.search;
+  const here = g.attest ? `${g.attest}?return=${encodeURIComponent(back)}` : "";
+  return (
+    `<div id="den-gh" class="den-claim">` +
+    `<h2 class="den-h" id="den-claim-title">${esc(t("err.signin.claimTitle"))}</h2>` +
+    `<p class="lead" id="den-claim-lead">${esc(t("err.signin.claimLead", { name: s.name || "Den" }))}</p>` +
+    (g.org
+      ? `<p id="den-claim-org">${withHost(t, "err.signin.claimOrg", { org: g.org, host })}</p>`
+      : "") +
+    `<div class="acts" style="margin-top:0">` +
+    (here
+      ? `<a class="btn primary" id="den-claim-here" href="${esc(here)}">${esc(t("err.signin.claimHere"))}</a>`
+      : "") +
+    (g.ownerGithub
+      ? `<button type="button" class="btn${here ? "" : " primary"}" id="den-gh-start">${esc(t("err.signin.claimAs", { login: g.ownerGithub }))}</button>`
+      : "") +
+    `</div><div id="den-gh-flow" aria-live="polite"></div>` +
+    (here
+      ? `<p class="den-gh-note" id="den-claim-note">${withHost(t, "err.signin.claimHereNote", { host })}</p>`
+      : "") +
+    `</div>`
+  );
+}
+
+/** D17: the "This is my computer" code /attest put in the fragment, taken once. */
+export function takeAttestCode(loc = location, hist = history) {
+  const m = /(?:^#|&)den-attest=([^&]+)/.exec(loc.hash || "");
+  if (!m) return "";
+  try {
+    hist.replaceState(null, "", loc.pathname + loc.search);
+  } catch {
+    /* the address keeps it; it is single use anyway */
+  }
+  try {
+    return decodeURIComponent(m[1]);
+  } catch {
+    return "";
+  }
+}
+
 /** How often, and how long, the page watches for an owner (SEC-2a-UX). */
 export const OWNER_POLL_MS = 5000;
 const OWNER_WATCH_MS = 30 * 60 * 1000;
@@ -332,17 +387,23 @@ function watchOwner(root, t, s, pollMs = OWNER_POLL_MS) {
   setTimeout(tick, pollMs);
 }
 
-/** The device flow on the page: start, show the code, poll, go on. */
-function wireGithub(root, t, s) {
+/**
+ * The device flow on the page: start, show the code, poll, go on. D17: with
+ * `attest` (the code "This is my computer" brought back), it starts at once
+ * with that proof.
+ */
+function wireGithub(root, t, s, attest = "") {
   const start = root.querySelector("#den-gh-start");
   const box = root.querySelector("#den-gh-flow");
-  if (!start || !box) return;
+  if (!box || (!start && !attest)) return;
   let timer = null;
   const show = (html) => (box.innerHTML = html);
   const fail = (text) => {
     clearTimeout(timer);
-    start.hidden = false;
-    start.textContent = t("err.signin.githubAgain");
+    if (start) {
+      start.hidden = false;
+      start.textContent = t("err.signin.githubAgain");
+    }
     show(
       `<p class="den-gh-err" role="alert" style="margin-top:12px">${esc(text)}</p>`,
     );
@@ -367,29 +428,31 @@ function wireGithub(root, t, s) {
           return;
         }
         fail(
-          b.state === "refused"
-            ? t("err.signin.githubRefused", {
-                login: b.login ?? "",
-                name: s.name,
-              })
-            : b.state === "expired"
-              ? t("err.signin.githubExpired")
-              : b.state === "denied"
-                ? t("err.signin.githubDenied")
-                : t("err.signin.githubFailed"),
+          b.state === "refused" && b.error
+            ? b.error
+            : b.state === "refused"
+              ? t("err.signin.githubRefused", {
+                  login: b.login ?? "",
+                  name: s.name,
+                })
+              : b.state === "expired"
+                ? t("err.signin.githubExpired")
+                : b.state === "denied"
+                  ? t("err.signin.githubDenied")
+                  : t("err.signin.githubFailed"),
         );
       })
       .catch(() => fail(t("err.signin.githubFailed")));
   };
-  start.addEventListener("click", () => {
+  const begin = (body) => {
     clearTimeout(timer);
-    start.disabled = true;
+    if (start) start.disabled = true;
     fetch("/api/github/signin", {
       method: "POST",
       cache: "no-store",
       credentials: "same-origin",
       headers: { "Content-Type": "application/json" },
-      body: "{}",
+      body: JSON.stringify(body),
     })
       .then((r) =>
         r
@@ -398,7 +461,7 @@ function wireGithub(root, t, s) {
           .then((b) => [r.status, b]),
       )
       .then(([status, b]) => {
-        start.disabled = false;
+        if (start) start.disabled = false;
         if (!b.ok || !b.userCode) {
           fail(
             status === 429
@@ -407,7 +470,11 @@ function wireGithub(root, t, s) {
           );
           return;
         }
-        start.hidden = true;
+        if (start) start.hidden = true;
+        const here = root.querySelector("#den-claim-here");
+        if (here) here.style.display = "none";
+        const note = root.querySelector("#den-claim-note");
+        if (note) note.style.display = "none";
         const url = b.verificationUri || "https://github.com/login/device";
         const shown = url.replace(/^https:\/\//, "");
         show(
@@ -417,21 +484,30 @@ function wireGithub(root, t, s) {
               url: `<a href="${esc(url)}" target="_blank" rel="noopener noreferrer">${esc(shown)}</a>`,
             },
           )}</p>` +
-            `<pre class="code" id="den-gh-code" style="font-size:22px;letter-spacing:0.12em;text-align:center">${esc(b.userCode)}</pre>` +
+            // The code and its copy button on one line, as every command.
+            cmdLine("den-gh-code", b.userCode, t).replace(
+              'class="den-cmd"',
+              'class="den-cmd den-gh-coderow"',
+            ) +
             `<div class="acts" style="margin-top:0">` +
-            `<a class="btn primary" id="den-gh-open" href="${esc(url)}" target="_blank" rel="noopener noreferrer">${esc(t("err.signin.githubOpen"))}</a>` +
-            `<button type="button" class="btn" id="den-gh-copy">${esc(t("err.signin.githubCopy"))}</button></div>` +
+            `<a class="btn primary" id="den-gh-open" href="${esc(url)}" target="_blank" rel="noopener noreferrer">${esc(t("err.signin.githubOpen"))}</a></div>` +
             `<p class="den-gh-wait" style="margin-top:12px">${esc(t("err.signin.githubWaiting"))}</p>`,
         );
-        const cp = box.querySelector("#den-gh-copy");
-        cp?.addEventListener("click", () => copy(b.userCode, cp, t));
+        wireCopy(box, t);
         timer = setTimeout(() => poll(b.id), 1500);
       })
       .catch(() => {
-        start.disabled = false;
+        if (start) start.disabled = false;
         fail(t("err.signin.githubFailed"));
       });
-  });
+  };
+  start?.addEventListener("click", () => begin({}));
+  if (attest) {
+    show(
+      `<p class="den-gh-wait" style="margin-top:12px">${esc(t("err.signin.claimChecking", { host: s.machine || "" }))}</p>`,
+    );
+    begin({ attest });
+  }
 }
 
 /**
@@ -604,6 +680,8 @@ function mountSignedOut(root, sh, d) {
     `<div class="sub">${esc(t("err.signin.sub"))}</div></div></div>`;
   if (s.confirm) {
     // SEC-2a: a link `web login` waits on: the code it printed, first.
+    // D17: a plain sign-in page, no shell frame and no error wording.
+    document.body.classList.add("den-plain");
     root.innerHTML =
       `<div class="ph"><div><h1>${esc(t("err.signin.title", { name }))}</h1>` +
       `<div class="sub">${esc(t("err.signin.sub"))}</div></div></div>` +
@@ -617,7 +695,6 @@ function mountSignedOut(root, sh, d) {
       `<p class="den-confirm-err" id="den-confirm-err" role="alert" style="margin-top:12px"></p>` +
       `</form>` +
       `<p class="den-signin-why">${withHost(t, "err.signin.confirmWhy", { host })}</p>` +
-      facts +
       `</div>`;
     const form = root.querySelector("#den-confirm");
     const input = root.querySelector("#den-confirm-code");
@@ -672,15 +749,20 @@ function mountSignedOut(root, sh, d) {
       `<div class="acts"><a class="btn primary" id="den-signin-local" href="${esc(s.localhost)}">${esc(t("err.421.open"))}</a></div></div>`;
     return;
   }
-  const gh = githubBlock(s, t);
+  const claim = claimBlock(s, t);
+  const gh = claim || githubBlock(s, t);
   root.innerHTML =
     head +
     `<div class="empty" id="den-signin">` +
     (s.expired
       ? `<p class="lead" role="alert">${esc(t("err.signin.expiredLead"))}</p>`
       : "") +
-    `<p class="lead" id="den-signin-where">${withHost(t, "err.signin.where", { name, host })}</p>` +
-    gh +
+    claim +
+    // D17: with the claim first, "from another computer" may not be true.
+    (claim
+      ? ""
+      : `<p class="lead" id="den-signin-where">${withHost(t, "err.signin.where", { name, host })}</p>`) +
+    (claim ? "" : gh) +
     `<h2 class="den-h" id="den-pair-title">${esc(t(gh ? "err.signin.approveOr" : "err.signin.approve"))}</h2>` +
     `<div id="den-pair" aria-live="polite"></div>` +
     `<p class="den-signin-why"><b>${esc(t("err.signin.whyTitle"))}</b> ${withHost(t, "err.signin.whyText", { name, host })}</p>` +
@@ -695,7 +777,7 @@ function mountSignedOut(root, sh, d) {
     facts +
     `</div>`;
   wireCopy(root, t);
-  wireGithub(root, t, s);
+  wireGithub(root, t, s, claim ? takeAttestCode() : "");
   watchOwner(root, t, s, window.__denOwnerPollMs || OWNER_POLL_MS);
   wirePair(root, t, s);
   if (s.expired) return;

package/src/ui/server/public/error.html

@@ -48,6 +48,16 @@
         flex-direction: column;
         overflow: hidden;
       }
+      /* D17: the /auth code page is a plain sign-in page: no shell frame
+         around it, the form in the middle. */
+      html body.den-plain > :not(#den-content):not(script):not(style) {
+        display: none !important;
+      }
+      html body.den-plain > #den-content {
+        max-width: 560px;
+        margin: 10vh auto 0;
+        width: 100%;
+      }
       /* .main */
       html body.den-has-shell > #den-content {
         overflow: auto;
@@ -234,6 +244,12 @@
         white-space: pre-wrap;
         overflow-wrap: anywhere;
       }
+      /* The GitHub code (D17): big, centred, its copy button beside it. */
+      .den-gh-coderow pre.code {
+        font-size: 22px;
+        letter-spacing: 0.12em;
+        text-align: center;
+      }
       .btn.den-copy {
         padding: 6px 8px;
         align-self: stretch;

package/src/ui/server/public/header.js

@@ -686,7 +686,7 @@ export async function initChangelog() {
 
 // ── __DEN_TITLE__ config ──────────────────────────────────────────────────────────────
 
-let ___DEN_CLI__Config = null;
+let _cliConfig = null;
 
 /**
  * 0.4.1: true once the shell knows the config fails validation (shell.js
@@ -705,18 +705,16 @@ function apiOff() {
 }
 
 async function getDenConfig() {
-  if (___DEN_CLI__Config) return ___DEN_CLI__Config;
+  if (_cliConfig) return _cliConfig;
   if (configInvalid()) return { environments: ["local"] };
   try {
-    ___DEN_CLI__Config = await fetch("/api/__DEN_CLI__/config").then((r) =>
-      r.json(),
-    );
+    _cliConfig = await fetch("/api/__DEN_CLI__/config").then((r) => r.json());
   } catch {
-    ___DEN_CLI__Config = {
+    _cliConfig = {
       environments: ["local"],
     };
   }
-  return ___DEN_CLI__Config;
+  return _cliConfig;
 }
 
 /**

package/src/ui/server/public/i18n/es.js

@@ -305,6 +305,16 @@
     "err.signin.ghOnly":
       "Solo la cuenta de GitHub del propietario puede iniciar sesión así. Para cualquier otra persona, usa «Aprueba este ordenador».",
     "err.signin.ghLearn": "Más información",
+    "err.signin.claimTitle": "Conecta tu cuenta de GitHub",
+    "err.signin.claimLead":
+      "{name} aún no tiene propietario. Conecta tu cuenta de GitHub para que sea tuyo.",
+    "err.signin.claimOrg":
+      "Los miembros de la organización {org} de GitHub pueden reclamarlo, en un navegador en {host}.",
+    "err.signin.claimHere": "Este es mi ordenador: conectar GitHub",
+    "err.signin.claimAs": "Iniciar sesión como @{login}",
+    "err.signin.claimHereNote":
+      "«Este es mi ordenador» solo funciona en un navegador en {host}. En otro sitio no abre nada.",
+    "err.signin.claimChecking": "Comprobando que esto es {host}…",
     "err.signin.githubRefused":
       "@{login} no es el propietario de este {name}. Solo la cuenta del propietario puede usar Iniciar sesión con GitHub. Usa «Aprueba este ordenador» en su lugar.",
     "err.signin.approveOr": "O aprueba este ordenador",
@@ -354,7 +364,6 @@
     "err.signin.github": "Iniciar sesión con GitHub",
     "err.signin.githubEnter": "Introduce este código en {url}:",
     "err.signin.githubOpen": "Abrir GitHub",
-    "err.signin.githubCopy": "Copiar código",
     "err.signin.githubWaiting": "Esperando a que lo apruebes en GitHub…",
     "err.signin.githubDone": "Sesión iniciada. Cargando…",
     "err.signin.githubExpired": "El código caducó antes de aprobarse.",
@@ -781,6 +790,20 @@
     "ag.hint.tile": "Un clic añade una sesión al mosaico, hasta 4.",
     "ag.renameTip": "Doble clic para cambiar el nombre",
     "ag.renameName": "Cambiar el nombre de {id}",
+    "ag.rn.item": "Cambiar el nombre…",
+    "ag.rn.title": "Cambiar el nombre de {id}",
+    "ag.rn.name": "Nombre",
+    "ag.rn.help":
+      "Lo muestran su pestaña, su fila y la cabecera del panel; el id {id} no cambia. Las demás sesiones lo ven como {peer} desde su próximo inicio o reanudación. Vacío: vuelve a {id}.",
+    "ag.rn.go": "Cambiar el nombre",
+    "ag.rn.cancel": "Cancelar",
+    "ag.rn.act": "Renombrar",
+    "ag.where.logout": "Se detiene al cerrar sesión",
+    "ag.where.logoutTip":
+      "Se ejecuta en la sesión de escritorio, así que cerrar sesión lo termina. Para que los agentes sigan: {cli} service install --mode always (opcional, aún no probado tras cerrar sesión)",
+    "ag.where.bg": "Sin GUI",
+    "ag.where.bgTip":
+      "Sigue ejecutándose tras cerrar sesión, fuera de la sesión de escritorio: sin el llavero de inicio de sesión ni apps con GUI. 1Password usa el token de la cuenta de servicio, los navegadores van sin interfaz y las carpetas protegidas necesitan Acceso total al disco ({cli} doctor).",
     "ag.rt.ready": "Inicia {name} {version} desde",
     "ag.rt.readyNoVer": "Inicia {name} desde",
     "ag.rt.notFound": "No se encontró {name}.",

package/src/ui/server/public/i18n/ja.js

@@ -293,6 +293,16 @@
     "err.signin.ghOnly":
       "この方法でサインインできるのはオーナーの GitHub アカウントだけです。それ以外の人は「このコンピューターを承認」を使ってください。",
     "err.signin.ghLearn": "詳しく見る",
+    "err.signin.claimTitle": "GitHub アカウントを接続",
+    "err.signin.claimLead":
+      "{name} にはまだオーナーがいません。GitHub アカウントを接続して、自分のものにします。",
+    "err.signin.claimOrg":
+      "GitHub の {org} 組織のメンバーは、{host} 上のブラウザーでこれを登録できます。",
+    "err.signin.claimHere": "これは自分のコンピューター: GitHub を接続",
+    "err.signin.claimAs": "@{login} としてサインイン",
+    "err.signin.claimHereNote":
+      "「これは自分のコンピューター」は {host} 上のブラウザーでだけ使えます。ほかの場所では何も開きません。",
+    "err.signin.claimChecking": "ここが {host} か確認しています…",
     "err.signin.githubRefused":
       "@{login} はこの {name} のオーナーではありません。GitHub でサインインを使えるのはオーナーのアカウントだけです。代わりに「このコンピューターを承認」を使ってください。",
     "err.signin.approveOr": "または、このコンピューターを承認",
@@ -343,7 +353,6 @@
     "err.signin.github": "GitHub でサインイン",
     "err.signin.githubEnter": "{url} でこのコードを入力してください:",
     "err.signin.githubOpen": "GitHub を開く",
-    "err.signin.githubCopy": "コードをコピー",
     "err.signin.githubWaiting": "GitHub での承認を待っています…",
     "err.signin.githubDone": "サインインしました。読み込み中…",
     "err.signin.githubExpired": "承認される前にコードの有効期限が切れました。",
@@ -766,6 +775,20 @@
     "ag.hint.tile": "クリックでセッションをタイルに追加します（最大 4）。",
     "ag.renameTip": "ダブルクリックで名前を変更",
     "ag.renameName": "{id} の名前を変更",
+    "ag.rn.item": "名前を変更…",
+    "ag.rn.title": "{id} の名前を変更",
+    "ag.rn.name": "名前",
+    "ag.rn.help":
+      "タブ、行、ペインの見出しに表示されます。ID {id} は変わりません。ほかのセッションからは、次の開始または再開から {peer} として見えます。空にすると {id} に戻ります。",
+    "ag.rn.go": "名前を変更",
+    "ag.rn.cancel": "キャンセル",
+    "ag.rn.act": "名前を変更",
+    "ag.where.logout": "ログアウトで停止",
+    "ag.where.logoutTip":
+      "デスクトップのログインセッションで動いているため、ログアウトすると終了します。エージェントを動かし続けるには: {cli} service install --mode always (任意。ログアウトをまたいだ動作はまだ未検証)",
+    "ag.where.bg": "GUI なし",
+    "ag.where.bgTip":
+      "デスクトップセッションの外で、ログアウト後も動き続けます。ログインキーチェーンと GUI アプリは使えません。1Password はサービスアカウントのトークン、ブラウザはヘッドレス、保護されたフォルダにはフルディスクアクセスが必要です ({cli} doctor)。",
     "ag.rt.ready": "{name} {version} を起動:",
     "ag.rt.readyNoVer": "{name} を起動:",
     "ag.rt.notFound": "{name} が見つかりません。",

package/src/ui/server/public/settings-registry.js

@@ -425,7 +425,7 @@ function drawPair(host, ctx) {
             out.innerHTML =
               `<div style="display:flex;gap:16px;flex-wrap:wrap;align-items:flex-start;margin-top:8px">` +
               `<div id="set-pair-qr" style="line-height:0">${qrSvg(p.url, { scale: 4, margin: 4 })}</div>` +
-              `<div style="flex:1 1 220px;min-width:0"><p class="set-note" style="margin:0 0 8px">Scan it with the other device, or open the link there. It works once, within 60 seconds, and signs that browser in for good.</p>` +
+              `<div style="flex:1 1 220px;min-width:0"><p class="set-note" style="margin:0 0 8px">Scan it with the other device, or open the link there. It works once, until it expires (below), and signs that browser in for good.</p>` +
               `<a id="set-pair-link" href="${escHtml(p.url)}" style="font:12px var(--mono);overflow-wrap:anywhere">${escHtml(p.url)}</a>` +
               `<p class="set-note" id="set-pair-left" style="margin:8px 0 0"></p></div></div>`;
             const until = Date.parse(p.expiresAt);