@nordbyte/nordrelay 0.8.0 → 0.8.2

package/dist/webui-assets/dashboard.js

@@ -25,8 +25,16 @@
     { path: "/api/peers/invite", methods: ["POST"] },
     { path: "/api/peers/pair", methods: ["POST"] },
     { path: "/api/peers/probe", methods: ["POST"] },
+    { path: "/api/peers/discover", methods: ["GET"] },
+    { path: "/api/peers/discovery-jobs", methods: ["GET", "POST"] },
+    { re: /^\/api\/peers\/discovery-jobs\/[^\/]+$/, methods: ["GET"] },
+    { re: /^\/api\/peers\/discovery-jobs\/[^\/]+\/cancel$/, methods: ["POST"] },
+    { re: /^\/api\/peers\/discovery-jobs\/[^\/]+\/log$/, methods: ["GET"] },
+    { path: "/api/peers/identity/backup", methods: ["GET"] },
+    { path: "/api/peers/identity/restore", methods: ["POST"] },
     { path: "/api/peers/global-sessions", methods: ["GET"] },
     { re: /^\/api\/peers\/invitations\/[^\/]+$/, methods: ["DELETE"] },
+    { re: /^\/api\/peers\/[^\/]+\/repin$/, methods: ["POST"] },
     { re: /^\/api\/peers\/[^\/]+\/health$/, methods: ["GET"] },
     { re: /^\/api\/peers\/[^\/]+$/, methods: ["PATCH", "DELETE"] },
     { re: /^\/api\/peers\/[^\/]+\/proxy$/, methods: ["POST"] },
@@ -79,6 +87,7 @@
     { path: "/api/sync", methods: ["POST"] },
     { path: "/api/queue", methods: ["GET", "POST"] },
     { path: "/api/chat/history", methods: ["GET", "DELETE"] },
+    { path: "/api/chat/mirror", methods: ["GET", "POST"] },
     { path: "/api/activity", methods: ["GET"] },
     { path: "/api/artifacts", methods: ["GET", "DELETE"] },
     { path: "/api/artifacts/bulk", methods: ["POST"] },
@@ -102,6 +111,10 @@
     assertApiRoute(url.pathname, method);
     if (!options.local && shouldProxyApi(url.pathname)) {
       const peerId = selectedPeerTarget();
+      const csrfToken2 = (
+        /** @type {{ NORDRELAY_WEBUI_RUNTIME_STATE?: { csrfToken?: string | null } }} */
+        globalThis.NORDRELAY_WEBUI_RUNTIME_STATE?.csrfToken
+      );
       const proxyBody = JSON.stringify({
         method,
         path: url.pathname,
@@ -111,7 +124,7 @@
       });
       const res2 = await fetch("/api/peers/" + encodeURIComponent(peerId) + "/proxy", {
         method: "POST",
-        headers: { "content-type": "application/json" },
+        headers: { "content-type": "application/json", ...csrfToken2 ? { "x-nordrelay-csrf": csrfToken2 } : {} },
         body: proxyBody
       });
       if (res2.status === 401) {
@@ -127,8 +140,13 @@
       return data2;
     }
     const body = normalizeBody(options.body);
+    const csrfToken = (
+      /** @type {{ NORDRELAY_WEBUI_RUNTIME_STATE?: { csrfToken?: string | null } }} */
+      globalThis.NORDRELAY_WEBUI_RUNTIME_STATE?.csrfToken
+    );
     const headers = {
       ...body !== void 0 && shouldSendJsonHeader(options.body) ? { "content-type": "application/json" } : {},
+      ...method !== "GET" && csrfToken ? { "x-nordrelay-csrf": csrfToken } : {},
       ...options.headers || {}
     };
     const res = await fetch(url.pathname + url.search, { method, headers, body });
@@ -148,7 +166,7 @@
     const peerId = selectedPeerTarget();
     if (!peerId || peerId === "local") return false;
     if (!path.startsWith("/api/")) return false;
-    return !(path === "/api/auth/me" || path === "/api/dashboard/logout" || path === "/api/peers" || path === "/api/peers/invite" || path === "/api/peers/pair" || path === "/api/peers/probe" || /^\/api\/peers\/[^/]+(?:\/events|\/proxy)?$/.test(path) || isLocalAdminApi(path));
+    return !(path === "/api/auth/me" || path === "/api/dashboard/logout" || path === "/api/peers" || path === "/api/peers/invite" || path === "/api/peers/pair" || path === "/api/peers/probe" || path === "/api/peers/discover" || path === "/api/peers/discovery-jobs" || path === "/api/peers/global-sessions" || path === "/api/peers/identity/backup" || path === "/api/peers/identity/restore" || path === "/api/settings/wizard/test" || /^\/api\/peers\/discovery-jobs\//.test(path) || /^\/api\/peers\/[^/]+(?:\/events|\/proxy)?$/.test(path) || /^\/api\/peers\/[^/]+\/repin$/.test(path) || isLocalAdminApi(path));
   }
   function isLocalAdminApi(path) {
     return path === "/api/permissions" || path === "/api/settings" || path === "/api/audit" || path === "/api/locks" || path === "/api/users" || path === "/api/groups" || path === "/api/telegram-chats" || path === "/api/discord-channels" || path === "/api/slack-channels" || /^\/api\/users\//.test(path) || /^\/api\/groups\//.test(path) || /^\/api\/telegram-chats\//.test(path) || /^\/api\/discord-channels\//.test(path) || /^\/api\/slack-channels\//.test(path);
@@ -230,20 +248,37 @@
       throw new Error("Unsupported WebUI API method: " + method + " " + path);
     }
   }
-  const state = { snapshot: null, controls: null, newSessionControls: null, enabledAgents: [], auth: null, permissions: [], settings: [], currentPage: "overview", settingsGroup: null, settingsWizard: null, accessTab: "users", logsPlain: "", logTimer: null, toastTimer: null, cliStatusActive: false, selectedArtifactTurns: /* @__PURE__ */ new Set(), mediaRecorder: null, recordedChunks: [], events: null, reconnectTimer: null, notifications: false, toolTooltipTimer: null, toolTooltipTarget: null, agentUpdateJobs: [], sessionsRequestId: 0, activeSessions: null, peers: null, peerInviteSecrets: {}, peerProbeResult: null, selectedPeer: localStorage.getItem("nordrelayPeerTarget") || "local" };
+  const state = { snapshot: null, controls: null, newSessionControls: null, enabledAgents: [], auth: null, csrfToken: null, permissions: [], settings: [], currentPage: "overview", settingsGroup: null, settingsWizard: null, accessTab: "users", logsPlain: "", logTimer: null, toastTimer: null, stickyToastActive: false, stickyToastText: "", cliStatusActive: false, webMirror: null, selectedArtifactTurns: /* @__PURE__ */ new Set(), mediaRecorder: null, recordedChunks: [], events: null, reconnectTimer: null, notifications: false, toolTooltipTimer: null, toolTooltipTarget: null, toolsVisible: false, agentUpdateJobs: [], sessionsRequestId: 0, chatHistoryRequestId: 0, chatRenderVersion: 0, activeSessions: null, peers: null, peerInviteSecrets: {}, peerProbeResult: null, peerDiscoveryJobs: [], selectedPeer: localStorage.getItem("nordrelayPeerTarget") || "local" };
   globalThis.NORDRELAY_WEBUI_RUNTIME_STATE = state;
   function toast(msg, options = {}) {
     const el = document.getElementById("toast");
-    el.textContent = msg;
-    el.style.display = "block";
+    const text = String(msg ?? "");
     if (state.toastTimer) clearTimeout(state.toastTimer);
     state.toastTimer = null;
-    if (!options.sticky) {
-      state.toastTimer = setTimeout(() => {
-        el.style.display = "none";
-        state.toastTimer = null;
-      }, options.duration || 3500);
+    if (options.sticky) {
+      state.stickyToastActive = true;
+      state.stickyToastText = text;
+      if (el.textContent !== text) el.textContent = text;
+      if (el.style.display !== "block") el.style.display = "block";
+      return;
     }
+    el.textContent = text;
+    el.style.display = "block";
+    state.toastTimer = setTimeout(() => {
+      state.toastTimer = null;
+      if (state.stickyToastActive) {
+        el.textContent = state.stickyToastText;
+        el.style.display = "block";
+        return;
+      }
+      el.style.display = "none";
+    }, options.duration || 3500);
+  }
+  function clearStickyToast() {
+    state.stickyToastActive = false;
+    state.stickyToastText = "";
+    if (state.toastTimer) clearTimeout(state.toastTimer);
+    state.toastTimer = null;
   }
   function esc(s) {
     return String(s ?? "").replace(/[&<>]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;" })[c]);
@@ -325,6 +360,7 @@
       ["#newSessionBtn,#attachBtn,#createSessionBtn", "sessions.write"],
       ["#retryBtn", "prompt.send"],
       ["#syncBtn,#handbackBtn", "sessions.write"],
+      ["#mirrorModeSelect", "settings.write"],
       ["#abortBtn", "prompt.abort"],
       ["#clearChatBtn", "sessions.write"],
       ["#saveSettingsBtn", "settings.write"],
@@ -334,7 +370,8 @@
       ["#clearLogsBtn", "logs.clear"],
       ["#createUserBtn,#createGroupBtn,#createChatBtn,#createDiscordChannelBtn,#createSlackChannelBtn", "users.write"],
       ["#createPeerInviteBtn,#addPeerBtn,[data-peer-edit],[data-peer-toggle],[data-peer-revoke],[data-peer-invite-delete]", "peers.write"],
-      ["#checkPeerReachabilityBtn,[data-peer-probe]", "peers.connect"],
+      ["#checkPeerReachabilityBtn,#discoverPeersBtn,#cancelPeerDiscoveryBtn,[data-peer-probe]", "peers.connect"],
+      ["#exportPeerIdentityBtn,#restorePeerIdentityBtn,[data-peer-repin]", "peers.write"],
       ["#lockSessionBtn,#unlockSessionBtn", "sessions.write"],
       ["[data-switch]", "sessions.write"],
       ["[data-queue],[data-q]", "queue.write"],
@@ -360,10 +397,10 @@
     return Math.floor(min / 60) + "h ago";
   }
   function isCliRunningStatus(msg) {
-    return / CLI running\\b/.test(String(msg || ""));
+    return / CLI running\b/.test(String(msg || ""));
   }
   function isCliDoneStatus(msg) {
-    return / CLI task\\b/.test(String(msg || ""));
+    return / CLI task (?:finished|completed|failed|aborted)\b/i.test(String(msg || ""));
   }
   function applyTheme(theme) {
     document.documentElement.dataset.theme = theme;
@@ -373,6 +410,21 @@
   function toggleTheme() {
     applyTheme(document.documentElement.dataset.theme === "dark" ? "light" : "dark");
   }
+  function setToolsVisible(visible) {
+    state.toolsVisible = Boolean(visible);
+    const layout = document.getElementById("chatLayout");
+    const panel = document.getElementById("toolPanel");
+    const button = document.getElementById("toggleToolsBtn");
+    layout?.classList.toggle("tools-hidden", !state.toolsVisible);
+    if (panel) panel.hidden = !state.toolsVisible;
+    if (button) {
+      button.textContent = state.toolsVisible ? "Hide Tools" : "Show Tools";
+      button.setAttribute("aria-expanded", state.toolsVisible ? "true" : "false");
+    }
+  }
+  function toggleTools() {
+    setToolsVisible(!state.toolsVisible);
+  }
   function page(name) {
     state.currentPage = name;
     document.querySelectorAll("nav button").forEach((b) => b.classList.toggle("active", b.dataset.page === name));
@@ -385,8 +437,8 @@
     const name = state.currentPage;
     if (name === "overview") await loadActiveSessions();
     if (name === "chat") {
-      await loadChatHistory();
-      scrollChatToBottom();
+      const [historyRendered] = await Promise.all([loadChatHistory({ forceScroll: true }), loadMirrorPreference()]);
+      if (historyRendered) scrollChatToBottom({ force: true });
     }
     if (name === "sessions") await loadSessions(true, options.agentId);
     if (name === "settings") await loadSettings();
@@ -405,11 +457,36 @@
   document.getElementById("menuBtn").onclick = () => document.getElementById("sidebar").classList.toggle("open");
   document.getElementById("refreshBtn").onclick = () => loadBootstrap();
   document.getElementById("themeBtn").onclick = toggleTheme;
+  document.getElementById("toggleToolsBtn").onclick = toggleTools;
   document.getElementById("logoutBtn").onclick = () => safe(async () => {
     await api("/api/dashboard/logout", { method: "POST" });
     location.href = "/";
   });
   applyTheme(localStorage.getItem("nordrelayTheme") || "light");
+  setToolsVisible(false);
+  function uiBadge(text, status = "enabled") {
+    return '<span class="adapter-status ' + esc(status) + '">' + esc(text) + "</span>";
+  }
+  function uiRows(rows = []) {
+    return rows.filter(Boolean).map((row) => Array.isArray(row) ? "<small>" + esc(row[0]) + ": " + esc(row[1] ?? "-") + "</small>" : "<small>" + esc(row) + "</small>").join("");
+  }
+  function uiItem(title, options = {}) {
+    const badge = options.badge ? uiBadge(options.badge.text, options.badge.status) : "";
+    const rows = uiRows(options.rows || []);
+    const body = options.body || "";
+    const actions = options.actions ? '<div class="row">' + options.actions + "</div>" : "";
+    const titleAttr = options.title ? ' title="' + attr(options.title) + '"' : "";
+    return '<div class="item ' + (options.className ? attr(options.className) : "") + '"><strong' + titleAttr + ">" + esc(title) + " " + badge + "</strong>" + rows + body + actions + "</div>";
+  }
+  function uiEmpty(text) {
+    return '<div class="item">' + esc(text) + "</div>";
+  }
+  function uiCopyButton(value, label = "Copied", className = "copy-id") {
+    return value ? '<button type="button" class="' + attr(className) + '" data-copy-value="' + attr(value) + '" data-copy-label="' + attr(label) + '">' + esc(value) + "</button>" : "-";
+  }
+  function bindUiCopyButtons(root = document) {
+    root.querySelectorAll?.("[data-copy-value]").forEach((b) => b.onclick = () => copyText(b.dataset.copyValue || "", b.dataset.copyLabel || "Copied"));
+  }
   function createPaginator(containerId, onChange, pageSize = 50) {
     const container = document.getElementById(containerId);
     return {
@@ -443,6 +520,7 @@
   async function loadBootstrap() {
     const local = await api("/api/bootstrap", { local: true });
     state.auth = local.auth || null;
+    state.csrfToken = local.auth?.csrfToken || state.csrfToken || null;
     state.permissions = local.auth?.permissions || [];
     await loadPeerSelector();
     const data = state.selectedPeer && state.selectedPeer !== "local" ? await api("/api/bootstrap") : local;
@@ -562,14 +640,14 @@
   }
   function activeSessionCard(s) {
     const thread = s.threadId || "not started";
-    const prompt = s.prompt ? "<small>" + esc(short(s.prompt, 250)) + "</small>" : "";
+    const prompt2 = s.prompt ? "<small>" + esc(short(s.prompt, 250)) + "</small>" : "";
     const tool2 = s.currentTool || s.lastTool || "-";
     const queue = s.queueLength ? " \xB7 " + s.queueLength + " queued" + (s.queuePaused ? " paused" : "") : "";
     const sourceLabel = activeSourceLabel(s.source);
     const mirrors = (s.mirrorChannels || []).map((m) => activeSourceLabel(m.source) + " " + m.mode + (m.queueLength ? " \xB7 " + m.queueLength + " queued" + (m.queuePaused ? " paused" : "") : "")).join(", ");
     const meta = ["Source " + sourceLabel, s.workspace, fmtDuration(s.durationMs), tool2 && tool2 !== "-" ? "tool " + tool2 : ""].filter(Boolean).join(" | ");
     const mirrorLine = mirrors ? "<small>Mirroring: " + esc(mirrors) + "</small>" : s.source === "cli" ? "<small>Mirroring: none</small>" : "";
-    return '<div class="item active-session-item"><strong>' + esc(s.agentLabel || s.agentId || "Agent") + ' <span class="adapter-status enabled">' + esc(s.status) + '</span></strong><small><button type="button" class="copy-id" data-active-copy="' + attr(thread) + '" title="Copy thread ID">' + esc(short(thread, 64)) + "</button>" + esc(queue) + "</small><small>" + esc(meta) + "</small>" + mirrorLine + prompt + '<div class="row"><button data-active-switch="' + attr(thread) + '" data-active-agent="' + attr(s.agentId || "") + '" ' + (!s.threadId ? "disabled " : "") + disabledAttr("sessions.write") + '>Switch</button><button class="secondary" data-active-detail="' + attr(thread) + '" data-active-agent="' + attr(s.agentId || "") + '" ' + (!s.threadId ? "disabled " : "") + ">Details</button></div></div>";
+    return '<div class="item active-session-item"><strong>' + esc(s.agentLabel || s.agentId || "Agent") + ' <span class="adapter-status enabled">' + esc(s.status) + '</span></strong><small><button type="button" class="copy-id" data-active-copy="' + attr(thread) + '" title="Copy thread ID">' + esc(short(thread, 64)) + "</button>" + esc(queue) + "</small><small>" + esc(meta) + "</small>" + mirrorLine + prompt2 + '<div class="row"><button data-active-switch="' + attr(thread) + '" data-active-agent="' + attr(s.agentId || "") + '" ' + (!s.threadId ? "disabled " : "") + disabledAttr("sessions.write") + '>Switch</button><button class="secondary" data-active-detail="' + attr(thread) + '" data-active-agent="' + attr(s.agentId || "") + '" ' + (!s.threadId ? "disabled " : "") + ">Details</button></div></div>";
   }
   function activeSourceLabel(source) {
     if (source === "cli") return "CLI";
@@ -672,9 +750,19 @@
     if (status === "running") return "planned";
     return "disabled";
   }
-  function scrollChatToBottom() {
+  const CHAT_CODE_BLOCK_PREFIX = "\uE010C";
+  const CHAT_CODE_BLOCK_SUFFIX = "\uE010";
+  const CHAT_INLINE_CODE_PREFIX = "\uE011I";
+  const CHAT_INLINE_CODE_SUFFIX = "\uE011";
+  function isChatNearBottom() {
+    const box = document.getElementById("messages");
+    if (!box) return true;
+    return box.scrollHeight - box.scrollTop - box.clientHeight < 80;
+  }
+  function scrollChatToBottom(options = {}) {
     const box = document.getElementById("messages");
     if (!box) return;
+    if (!options.force && !isChatNearBottom()) return;
     requestAnimationFrame(() => {
       box.scrollTop = box.scrollHeight;
       requestAnimationFrame(() => {
@@ -682,39 +770,251 @@
       });
     });
   }
-  function appendMessage(cls, text) {
+  function markChatRendered() {
+    state.chatRenderVersion = (state.chatRenderVersion || 0) + 1;
+  }
+  function appendMessage(cls, text, options = {}) {
     const box = document.getElementById("messages");
+    const stick = options.forceScroll || isChatNearBottom();
+    const previousTop = box?.scrollTop ?? 0;
     const div = document.createElement("div");
     div.className = "message " + cls;
-    div.textContent = text;
+    const body = document.createElement("div");
+    body.className = "message-body";
+    div.appendChild(body);
+    setMessageText(div, text);
     box.appendChild(div);
-    scrollChatToBottom();
+    if (stick) scrollChatToBottom({ force: true });
+    else box.scrollTop = previousTop;
+    return div;
+  }
+  function messageBody(div) {
+    let body = div.querySelector?.(".message-body");
+    if (!body) {
+      body = document.createElement("div");
+      body.className = "message-body";
+      div.textContent = "";
+      div.appendChild(body);
+    }
+    return body;
+  }
+  function setMessageText(div, text) {
+    div.__rawText = String(text ?? "");
+    const body = messageBody(div);
+    body.innerHTML = renderChatMarkdown(div.__rawText);
+    bindChatCopyButtons(body);
+    markChatRendered();
     return div;
   }
   function appendQueuedMessage(id) {
     const div = appendMessage("system", "Queued prompt " + id);
+    const body = messageBody(div);
     const btn = document.createElement("button");
     btn.textContent = "Cancel queued message";
     btn.className = "danger";
     btn.onclick = () => safe(async () => {
       const r = await api("/api/queue", { method: "POST", body: JSON.stringify({ action: "cancel", id }) });
       renderQueue(r.queue, r.paused);
-      div.textContent = "Cancelled queued prompt " + id;
+      setMessageText(div, "Cancelled queued prompt " + id);
     });
-    div.appendChild(document.createElement("br"));
-    div.appendChild(btn);
+    body.appendChild(document.createElement("br"));
+    body.appendChild(btn);
   }
-  function renderChatMessages(messages) {
+  function renderChatMessages(messages, options = {}) {
     state.chatMessages = messages || [];
     const box = document.getElementById("messages");
-    box.innerHTML = (messages || []).map((m) => '<div class="message ' + esc(m.role) + '"><small>' + esc((m.source || "web") + " / " + fmtDate(m.timestamp)) + "</small>\\n" + esc(m.text) + "</div>").join("");
-    scrollChatToBottom();
-  }
-  async function loadChatHistory() {
+    const stick = options.forceScroll || isChatNearBottom();
+    const previousTop = box?.scrollTop ?? 0;
+    box.innerHTML = (messages || []).map((m) => '<div class="message ' + esc(m.role) + '"><small>' + esc((m.source || "web") + " / " + fmtDate(m.timestamp)) + '</small><br><div class="message-body">' + renderChatMarkdown(m.text) + "</div></div>").join("");
+    bindChatCopyButtons(box);
+    markChatRendered();
+    if (stick) scrollChatToBottom({ force: true });
+    else box.scrollTop = previousTop;
+  }
+  async function loadChatHistory(options = {}) {
+    const requestId = (state.chatHistoryRequestId || 0) + 1;
+    state.chatHistoryRequestId = requestId;
+    const renderVersion = state.chatRenderVersion || 0;
     const data = await api("/api/chat/history");
-    renderChatMessages(data.messages || []);
+    if (requestId !== state.chatHistoryRequestId) return false;
+    if (options.skipIfRendered !== false && (state.chatRenderVersion || 0) !== renderVersion) return false;
+    renderChatMessages(data.messages || [], options);
+    return true;
   }
   let currentAgentMessage = null;
+  function renderChatMarkdown(text) {
+    let output = esc(String(text ?? ""));
+    const codeBlocks = [];
+    const inlineCode = [];
+    output = extractChatCodeBlocks(output, codeBlocks);
+    output = extractChatInlineCode(output, inlineCode);
+    output = formatChatBold(output);
+    output = formatChatItalic(output);
+    output = formatChatLinks(output);
+    output = formatChatBlockquotes(output);
+    output = formatChatLists(output);
+    output = formatChatHeadings(output);
+    output = restoreChatMarkdown(output, CHAT_INLINE_CODE_PREFIX, CHAT_INLINE_CODE_SUFFIX, inlineCode);
+    output = restoreChatMarkdown(output, CHAT_CODE_BLOCK_PREFIX, CHAT_CODE_BLOCK_SUFFIX, codeBlocks);
+    return output;
+  }
+  function extractChatCodeBlocks(text, blocks) {
+    return text.replace(/```([^\n`]*)\n?([\s\S]*?)```/g, (_match, rawLanguage, rawCode) => {
+      const language = String(rawLanguage || "").trim().replace(/[^a-zA-Z0-9_+-]/g, "");
+      const className = language ? ' class="language-' + attr(language) + '"' : "";
+      const label = language ? ' data-code-language="' + attr(language) + '"' : "";
+      const block = '<pre class="chat-code-block" tabindex="0" title="Copy code" data-chat-copy="code-block"' + label + "><code" + className + ">" + rawCode + "</code></pre>";
+      const index = blocks.push(block) - 1;
+      return CHAT_CODE_BLOCK_PREFIX + index + CHAT_CODE_BLOCK_SUFFIX;
+    });
+  }
+  function extractChatInlineCode(text, inline) {
+    let result = "";
+    let index = 0;
+    while (index < text.length) {
+      if (text[index] !== "`") {
+        result += text[index];
+        index += 1;
+        continue;
+      }
+      let tickCount = 1;
+      while (text[index + tickCount] === "`") tickCount += 1;
+      const fence = "`".repeat(tickCount);
+      const start = index + tickCount;
+      const end = text.indexOf(fence, start);
+      if (end === -1) {
+        result += fence;
+        index += tickCount;
+        continue;
+      }
+      const content = text.slice(start, end);
+      if (content.includes("\n")) {
+        result += fence;
+        index += tickCount;
+        continue;
+      }
+      const button = '<button type="button" class="chat-inline-code copy-id" title="Copy code" data-chat-copy="inline-code">' + content + "</button>";
+      result += CHAT_INLINE_CODE_PREFIX + (inline.push(button) - 1) + CHAT_INLINE_CODE_SUFFIX;
+      index = end + tickCount;
+    }
+    return result;
+  }
+  function formatChatBold(text) {
+    return text.replace(/(?<!\*)\*\*(?!\s)([^\n]*?\S)\*\*(?!\*)/g, "<strong>$1</strong>");
+  }
+  function formatChatItalic(text) {
+    return text.replace(/(?<![\w_])_(?!\s)([^_\n]*?\S)_(?![\w_])/g, "<em>$1</em>").replace(/(?<![\w*])\*(?!\s)([^*\n]*?\S)\*(?![\w*])/g, "<em>$1</em>");
+  }
+  function formatChatLinks(text) {
+    return text.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g, (_match, label, url) => {
+      const safeUrl = sanitizeChatUrl(String(url).replace(/&amp;/g, "&"));
+      return '<a class="chat-link" href="' + attr(safeUrl) + '" target="_blank" rel="noreferrer noopener">' + label + "</a>";
+    });
+  }
+  function sanitizeChatUrl(url) {
+    const trimmed = String(url || "").trim().replace(/"/g, "%22");
+    return /^(https?|mailto):/i.test(trimmed) ? trimmed : "#";
+  }
+  function formatChatBlockquotes(text) {
+    const lines = text.split("\n");
+    const out = [];
+    let quote = [];
+    const flush = () => {
+      if (quote.length) {
+        out.push('<blockquote class="chat-blockquote">' + quote.join("\n") + "</blockquote>");
+        quote = [];
+      }
+    };
+    for (const line of lines) {
+      const match = line.match(/^&gt; ?(.*)$/);
+      if (match) {
+        quote.push(match[1]);
+        continue;
+      }
+      flush();
+      out.push(line);
+    }
+    flush();
+    return out.join("\n");
+  }
+  function formatChatLists(text) {
+    const lines = text.split("\n");
+    const out = [];
+    let list = null;
+    const flush = () => {
+      if (list) {
+        out.push("</" + list + ">");
+        list = null;
+      }
+    };
+    for (const line of lines) {
+      const task = line.match(/^\s*[-*]\s+\[([ xX])\]\s+(.+)$/);
+      const bullet = line.match(/^\s*[-*]\s+(.+)$/);
+      const ordered = line.match(/^\s*\d+[.)]\s+(.+)$/);
+      if (task) {
+        if (list !== "ul") {
+          flush();
+          out.push('<ul class="chat-list chat-task-list">');
+          list = "ul";
+        }
+        const checked = task[1].toLowerCase() === "x" ? "[x]" : "[ ]";
+        out.push('<li><span class="chat-task-mark">' + checked + "</span> " + task[2] + "</li>");
+        continue;
+      }
+      if (bullet) {
+        if (list !== "ul") {
+          flush();
+          out.push('<ul class="chat-list">');
+          list = "ul";
+        }
+        out.push("<li>" + bullet[1] + "</li>");
+        continue;
+      }
+      if (ordered) {
+        if (list !== "ol") {
+          flush();
+          out.push('<ol class="chat-list">');
+          list = "ol";
+        }
+        out.push("<li>" + ordered[1] + "</li>");
+        continue;
+      }
+      flush();
+      out.push(line);
+    }
+    flush();
+    return out.join("\n");
+  }
+  function formatChatHeadings(text) {
+    return text.split("\n").map((line) => {
+      const match = line.match(/^(#{1,4})\s+(.+)$/);
+      return match ? '<strong class="chat-heading chat-heading-' + match[1].length + '">' + match[2] + "</strong>" : line;
+    }).join("\n");
+  }
+  function restoreChatMarkdown(text, prefix, suffix, values) {
+    const pattern = new RegExp(escapeChatRegExp(prefix) + "(\\d+)" + escapeChatRegExp(suffix), "g");
+    return text.replace(pattern, (_match, rawIndex) => values[Number.parseInt(rawIndex, 10)] ?? "");
+  }
+  function escapeChatRegExp(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  }
+  function bindChatCopyButtons(root) {
+    root.querySelectorAll?.("[data-chat-copy]").forEach((el) => {
+      el.onclick = (event) => {
+        event.preventDefault();
+        event.stopPropagation();
+        const code = el.dataset.chatCopy === "code-block" ? el.querySelector("code")?.textContent : el.textContent;
+        copyText(code || "", "Copied code");
+      };
+      el.onkeydown = (event) => {
+        if (el.tagName === "BUTTON") return;
+        if (event.key === "Enter" || event.key === " ") {
+          event.preventDefault();
+          el.click();
+        }
+      };
+    });
+  }
   function connectEvents() {
     if (state.events) state.events.close();
     const eventsUrl = state.selectedPeer && state.selectedPeer !== "local" ? "/api/peers/" + encodeURIComponent(state.selectedPeer) + "/events?contextKey=" + encodeURIComponent("web:dashboard") : "/api/events";
@@ -765,9 +1065,10 @@
     });
     events.addEventListener("text_delta", (e) => {
       const d = JSON.parse(e.data);
+      const stick = isChatNearBottom();
       if (!currentAgentMessage) currentAgentMessage = appendMessage("agent", "");
-      currentAgentMessage.textContent += d.delta;
-      scrollChatToBottom();
+      setMessageText(currentAgentMessage, (currentAgentMessage.__rawText || "") + d.delta);
+      if (stick) scrollChatToBottom({ force: true });
       if (state.currentPage === "tasks") loadTasks();
     });
     events.addEventListener("tool_start", (e) => {
@@ -785,7 +1086,7 @@
     });
     events.addEventListener("todo_update", (e) => {
       const d = JSON.parse(e.data);
-      tool("tool", "Plan:\\n" + d.items.map((i) => (i.completed ? "[x] " : "[ ] ") + i.text).join("\\n"));
+      tool("tool", "Plan:\n" + d.items.map((i) => (i.completed ? "[x] " : "[ ] ") + i.text).join("\n"));
     });
     events.addEventListener("turn_error", (e) => {
       const d = JSON.parse(e.data);
@@ -806,7 +1107,10 @@
         toast(msg, { sticky: true });
         return;
       }
-      if (isCliDoneStatus(msg)) state.cliStatusActive = false;
+      if (isCliDoneStatus(msg)) {
+        state.cliStatusActive = false;
+        clearStickyToast();
+      }
       toast(msg);
     });
     events.onerror = () => {
@@ -971,6 +1275,27 @@
   });
   document.getElementById("promptForm").onsubmit = (e) => safe(async () => {
     e.preventDefault();
+    const input = document.getElementById("promptInput");
+    const text = input.value.trim();
+    if (/^\/mirror\b/i.test(text)) {
+      if (selectedFiles.length) {
+        toast("/mirror cannot be sent with attachments");
+        return;
+      }
+      const argument = text.replace(/^\/mirror\b/i, "").trim();
+      if (argument && !can("settings.write")) {
+        toast("Permission required: settings.write");
+        return;
+      }
+      if (!argument && !can("sessions.read")) {
+        toast("Permission required: sessions.read");
+        return;
+      }
+      input.value = "";
+      const data = argument ? await setMirrorPreference(argument) : await loadMirrorPreference();
+      appendMessage("system", data?.response?.plain || "CLI mirroring: " + (data?.mode || "-"));
+      return;
+    }
     if (!can("prompt.send")) {
       toast("Permission required: prompt.send");
       return;
@@ -979,8 +1304,6 @@
       toast("Permission required: files.write");
       return;
     }
-    const input = document.getElementById("promptInput");
-    const text = input.value.trim();
     if (!text && selectedFiles.length === 0) return;
     const files = selectedFiles;
     input.value = "";
@@ -989,7 +1312,7 @@
     renderSelectedFiles();
     const payloadFiles = files.length ? await Promise.all(files.map(filePayload)) : [];
     const r = files.length ? await api("/api/prompt/upload", { method: "POST", body: JSON.stringify({ text, files: payloadFiles }) }) : await api("/api/prompt", { method: "POST", body: JSON.stringify({ text }) });
-    if (r.transcribeOnly) appendMessage("system", "Transcribed audio:\\n" + (r.transcript || "(empty)"));
+    if (r.transcribeOnly) appendMessage("system", "Transcribed audio:\n" + (r.transcript || "(empty)"));
     else if (r.queued) appendQueuedMessage(r.queueId);
   }, e);
   document.getElementById("newSessionBtn").onclick = () => {
@@ -1024,6 +1347,14 @@
     loadBootstrap();
   });
   document.getElementById("notifyBtn").onclick = () => enableNotifications();
+  document.getElementById("mirrorModeSelect").onchange = () => safe(async () => {
+    if (!can("settings.write")) {
+      toast("Permission required: settings.write");
+      renderMirrorPreference(state.webMirror);
+      return;
+    }
+    await setMirrorPreference(document.getElementById("mirrorModeSelect").value);
+  });
   document.getElementById("clearChatBtn").onclick = () => safe(async () => {
     if (!can("sessions.write")) {
       toast("Permission required: sessions.write");
@@ -1049,7 +1380,7 @@
       return;
     }
     const r = await api("/api/handback", { method: "POST" });
-    appendMessage("system", "Handback command:\\n" + (r.command || "No command available"));
+    appendMessage("system", "Handback command:\n" + (r.command || "No command available"));
   });
   document.getElementById("recordBtn").onclick = () => safe(async () => {
     if (!can("files.write")) {
@@ -1077,6 +1408,24 @@
     state.mediaRecorder.start();
     btn.textContent = "Stop recording";
   });
+  function renderMirrorPreference(data) {
+    if (!data) return;
+    state.webMirror = data;
+    const select = document.getElementById("mirrorModeSelect");
+    if (select && data.mode) select.value = data.mode;
+  }
+  async function loadMirrorPreference() {
+    if (!can("sessions.read")) return null;
+    const data = await api("/api/chat/mirror");
+    renderMirrorPreference(data);
+    return data;
+  }
+  async function setMirrorPreference(argument) {
+    const data = await api("/api/chat/mirror", { method: "POST", body: JSON.stringify({ argument }) });
+    renderMirrorPreference(data);
+    toast("Mirror " + data.mode);
+    return data;
+  }
   function renderNewSessionControls(c) {
     const s = state.snapshot?.session || {};
     const caps = c.capabilities || {};
@@ -1120,7 +1469,7 @@
     document.getElementById("newSessionDialog").close();
     toast("New session started");
     await loadBootstrap();
-    await loadChatHistory();
+    await loadChatHistory({ forceScroll: true });
   }, e);
   document.getElementById("cancelSessionBtn").onclick = () => document.getElementById("newSessionDialog").close();
   function val(id) {
@@ -1488,10 +1837,16 @@
       ["Buckets", (rate?.buckets || []).length]
     ].map(([k, v]) => [name + " " + k, v]);
   }
+  function webRouteRows(d) {
+    return (d.web?.routes || []).slice(0, 8).map((route) => [route.method + " " + route.path, route.averageMs + "ms avg / " + route.maxMs + "ms max / " + route.count + " hit(s)"]);
+  }
+  function webSlowRows(d) {
+    return (d.web?.slowest || []).slice(0, 8).map((sample) => [sample.method + " " + sample.path, sample.durationMs + "ms / " + sample.statusCode + " / " + fmtDate(sample.at)]);
+  }
   function renderMetrics(d) {
     const adapters = d.adapters || {};
     const adapterCards = Object.entries(adapters).map(([name, rate]) => card(name.charAt(0).toUpperCase() + name.slice(1) + " rate limits", rateRows("", rate).map(([k, v]) => [String(k).trim(), v]))).join("");
-    document.getElementById("metricsPanel").innerHTML = '<div class="metrics-grid">' + card("Runtime", metricStatusRows(d)) + card("Process", metricProcessRows(d)) + card("Jobs", metricJobRows(d)) + adapterCards + "</div>";
+    document.getElementById("metricsPanel").innerHTML = '<div class="metrics-grid">' + card("Runtime", metricStatusRows(d)) + card("Process", metricProcessRows(d)) + card("Jobs", metricJobRows(d)) + card("Web API latency", webRouteRows(d)) + card("Slow Web API calls", webSlowRows(d)) + adapterCards + "</div>";
   }
   document.getElementById("reloadMetricsBtn").onclick = () => safe(loadMetrics);
   function activityQuery() {
@@ -2151,14 +2506,17 @@
       return;
     }
     setLoading("peersList", "Loading peers...");
-    const d = await api("/api/peers", { local: true });
+    const [d, jobsData] = await Promise.all([api("/api/peers", { local: true }), can("peers.connect") ? api("/api/peers/discovery-jobs", { local: true }).catch(() => ({ jobs: [] })) : Promise.resolve({ jobs: [] })]);
     state.peers = d;
+    state.peerDiscoveryJobs = jobsData.jobs || [];
     const inviteIds = new Set((d.invitations || []).map((i) => i.id));
     Object.keys(state.peerInviteSecrets || {}).forEach((id) => {
       if (!inviteIds.has(id)) delete state.peerInviteSecrets[id];
     });
     document.getElementById("peerStatus").innerHTML = peerStatusHtml(d);
     document.getElementById("peersList").innerHTML = (d.peers || []).map(peerCard).join("") || '<div class="item">No peers configured.</div>';
+    document.getElementById("peerDiscovery").innerHTML = peerDiscoveryJobsHtml(state.peerDiscoveryJobs);
+    bindUiCopyButtons(document.getElementById("peerDiscovery"));
     document.getElementById("peerInvites").innerHTML = (d.invitations || []).map(peerInviteCard).join("") || '<div class="item">No open invitations.</div>';
     ensureGlobalPeerSessionsPanel();
     bindPeerButtons();
@@ -2166,8 +2524,10 @@
     applyPermissions();
   }
   function openPeerAddDialog() {
-    adminDialog("Add peer", '<label>Peer URL<input id="dlgPeerAddUrl" placeholder="https://host:31979"></label><label>Pairing code<input id="dlgPeerAddCode"></label><label>Name<input id="dlgPeerAddName" placeholder="optional local label"></label><label>Public URL for this node<input id="dlgPeerAddPublicUrl" placeholder="optional"></label>', async () => {
+    const publicUrl = state.peers?.enabled ? state.peers?.listenUrl || "" : "";
+    adminDialog("Add peer", '<label>Peer URL<input id="dlgPeerAddUrl" placeholder="https://host:31979"></label><label>Pairing code<input id="dlgPeerAddCode"></label><label>Name<input id="dlgPeerAddName" placeholder="optional local label"></label><label>Group<input id="dlgPeerAddGroup" placeholder="LAN, Servers, Workstations"></label><label>Public URL for this node<input id="dlgPeerAddPublicUrl" placeholder="optional" value="' + attr(publicUrl) + '"></label>', async () => {
       const r = await api("/api/peers/pair", { method: "POST", body: JSON.stringify({ url: val("dlgPeerAddUrl"), code: val("dlgPeerAddCode"), name: val("dlgPeerAddName") || void 0, publicUrl: val("dlgPeerAddPublicUrl") || void 0 }), local: true });
+      if (val("dlgPeerAddGroup") && r.peer?.id) await api("/api/peers/" + encodeURIComponent(r.peer.id), { method: "PATCH", body: JSON.stringify({ group: val("dlgPeerAddGroup") }), local: true });
       toast("Added peer " + (r.peer?.name || ""));
       await loadPeers();
     });
@@ -2187,6 +2547,10 @@
     }
     openPeerAddDialog();
   };
+  document.getElementById("discoverPeersBtn").onclick = () => safe(discoverPeers);
+  document.getElementById("cancelPeerDiscoveryBtn").onclick = () => safe(cancelPeerDiscovery);
+  document.getElementById("exportPeerIdentityBtn").onclick = () => safe(exportPeerIdentity);
+  document.getElementById("restorePeerIdentityBtn").onclick = () => safe(restorePeerIdentity);
   async function loadAdapterHealth() {
     setLoading("adapterHealth", "Loading adapters...");
     setLoading("adapterConformance", "Loading conformance...");
@@ -2349,6 +2713,21 @@
     }));
   }
   document.getElementById("loadVersionBtn").onclick = () => loadVersion();
+  document.addEventListener("click", (e) => {
+    const b = e.target.closest?.("[data-peer-repin]");
+    if (!b) return;
+    safe(async () => {
+      if (!can("peers.write")) {
+        toast("Permission required: peers.write");
+        return;
+      }
+      if (confirm("Re-pin TLS fingerprint for this peer?")) {
+        const r = await api("/api/peers/" + encodeURIComponent(b.dataset.peerRepin) + "/repin", { method: "POST", local: true });
+        toast("TLS fingerprint updated: " + (r.peer?.tlsFingerprint || "-"), { duration: 8e3 });
+        loadPeers();
+      }
+    });
+  });
   document.getElementById("updateBtn").onclick = () => safe(async () => {
     if (!can("updates.run")) {
       toast("Permission required: updates.run");
@@ -2428,6 +2807,92 @@
     const command = r.manualCheckCommand || "nordrelay peer check " + (d.listenUrl || "");
     return '<div class="item"><strong>Local peer identity <span class="adapter-status ' + (r.enabled && r.localListening ? "enabled" : r.enabled ? "planned" : "disabled") + '">' + esc(r.enabled ? r.localListening ? "ready" : "not listening" : "disabled") + "</span></strong>" + rows.map((row) => "<small>" + esc(row[0]) + ": " + esc(row[1] ?? "-") + "</small>").join("") + peerWarningsHtml(r.warnings || [], "Peer readiness") + '<div class="peer-invite-details"><small>Manual reachability check</small><button type="button" class="copy-id peer-invite-command" data-peer-invite-copy="' + attr(command) + '" data-peer-invite-copy-label="Peer check command copied">' + esc(command) + '</button><small>Run this on another machine to verify LAN, port-forward, or firewall reachability.</small></div><div class="row"><button id="checkPeerReachabilityBtn" class="secondary"' + disabledAttr("peers.connect") + '>Check local endpoint</button></div><div id="peerProbeResult">' + peerProbeResultHtml(state.peerProbeResult) + "</div></div>";
   }
+  async function discoverPeers() {
+    if (!can("peers.connect")) {
+      toast("Permission required: peers.connect");
+      return;
+    }
+    const target = document.getElementById("peerDiscovery");
+    target.innerHTML = loadingHtml("Starting LAN peer discovery...");
+    const body = { targets: csvToList(val("peerDiscoveryTargets")), maxHosts: Number(val("peerDiscoveryMaxHosts") || 512), concurrency: Number(val("peerDiscoveryConcurrency") || 32) };
+    const data = await api("/api/peers/discovery-jobs", { method: "POST", body: JSON.stringify(body), local: true });
+    state.activePeerDiscoveryJobId = data.job?.id;
+    await pollPeerDiscoveryJob(data.job?.id);
+  }
+  async function pollPeerDiscoveryJob(id) {
+    if (!id) return;
+    const target = document.getElementById("peerDiscovery");
+    for (; ; ) {
+      const data = await api("/api/peers/discovery-jobs/" + encodeURIComponent(id), { local: true });
+      const job = data.job;
+      if (!job) {
+        target.innerHTML = uiEmpty("Discovery job not found.");
+        return;
+      }
+      target.innerHTML = peerDiscoveryJobHtml(job);
+      bindUiCopyButtons(target);
+      applyPermissions();
+      if (!["queued", "running"].includes(job.status)) break;
+      await new Promise((r) => setTimeout(r, 1e3));
+    }
+  }
+  async function cancelPeerDiscovery() {
+    const id = state.activePeerDiscoveryJobId;
+    if (!id) {
+      toast("No active discovery job");
+      return;
+    }
+    const data = await api("/api/peers/discovery-jobs/" + encodeURIComponent(id) + "/cancel", { method: "POST", local: true });
+    if (data.job) {
+      document.getElementById("peerDiscovery").innerHTML = peerDiscoveryJobHtml(data.job);
+    }
+    toast("Discovery cancelled");
+  }
+  async function exportPeerIdentity() {
+    if (!can("peers.write")) {
+      toast("Permission required: peers.write");
+      return;
+    }
+    const data = await api("/api/peers/identity/backup", { local: true });
+    downloadJson("nordrelay-peer-identity-backup.json", data.backup);
+    toast("Peer identity backup exported");
+  }
+  async function restorePeerIdentity() {
+    if (!can("peers.write")) {
+      toast("Permission required: peers.write");
+      return;
+    }
+    const text = prompt("Paste peer identity backup JSON");
+    if (!text) return;
+    const backup = JSON.parse(text);
+    await api("/api/peers/identity/restore", { method: "POST", body: JSON.stringify({ backup }), local: true });
+    toast("Peer identity restored. Restart peer server to use it.");
+    await loadPeers();
+  }
+  function downloadJson(name, value) {
+    const blob = new Blob([JSON.stringify(value, null, 2) + "\n"], { type: "application/json" });
+    const a = document.createElement("a");
+    a.href = URL.createObjectURL(blob);
+    a.download = name;
+    a.click();
+    URL.revokeObjectURL(a.href);
+  }
+  function peerDiscoveryJobsHtml(jobs) {
+    const list = (jobs || []).slice(0, 5);
+    return list.map(peerDiscoveryJobHtml).join("") || uiEmpty("No LAN discovery jobs yet.");
+  }
+  function peerDiscoveryJobHtml(job) {
+    const progress = job.total ? Math.round(job.scanned / job.total * 100) : 0;
+    return uiItem("Discovery job " + job.id, { badge: { text: job.status, status: job.status === "completed" ? "enabled" : job.status === "failed" ? "disabled" : "planned" }, rows: [["Progress", job.scanned + " / " + job.total + " (" + progress + "%)"], ["Targets", (job.options?.targets || []).join(", ") || "local LAN + mDNS"], ["Started", fmtDate(job.startedAt)], ["Completed", fmtDate(job.completedAt)]], body: peerDiscoveryHtml(job) + '<details class="peer-health-history"><summary>Discovery log (' + (job.log || []).length + ")</summary>" + (job.log || []).slice(-30).map((line) => "<small>" + esc(line) + "</small>").join("") + "</details>" });
+  }
+  function peerDiscoveryHtml(data) {
+    const warnings = (data.warnings || []).length ? peerWarningsHtml(data.warnings, "Discovery warning") : "";
+    const cards = (data.candidates || []).map((c) => {
+      const command = "nordrelay peer add " + c.url + " --code <pairing-code>";
+      return uiItem(c.name || c.host, { badge: { text: "found", status: "enabled" }, rows: [["URL", c.url], ["Node", c.nodeId], ["Fingerprint", c.fingerprint], ["TLS", c.tlsFingerprint || "-"], ["Latency", c.latencyMs !== void 0 ? c.latencyMs + "ms" : "-"]], body: '<div class="peer-invite-details"><small>Pairing command template</small>' + uiCopyButton(command, "Peer add command copied", "copy-id peer-invite-command") + "</div>" });
+    }).join("");
+    return warnings + (cards || uiEmpty("No LAN peers found. Scanned " + (data.scanned || 0) + " endpoint candidates."));
+  }
   function peerWarningsHtml(warnings, title) {
     return (warnings || []).length ? '<div class="peer-warning full-span"><strong>' + esc(title || "Warning") + "</strong>" + warnings.map((w) => "<small>" + esc(w) + "</small>").join("") + "</div>" : "";
   }
@@ -2445,18 +2910,20 @@
   function peerInviteCard(i) {
     const open = new Date(i.expiresAt) > /* @__PURE__ */ new Date() && !i.usedAt;
     const readiness = state.peers?.readiness;
-    return '<div class="item"><strong>' + esc(i.name) + ' <span class="chip">' + esc(open ? "open" : "closed") + "</span></strong><small>" + esc("Expires: " + fmtDate(i.expiresAt)) + "</small><small>" + esc("Scopes: " + (i.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((i.allowedAgents || []).join(", ") || "all")) + "</small>" + (i.usedAt ? "<small>" + esc("Used: " + fmtDate(i.usedAt) + " by " + (i.usedByNodeId || "-")) + "</small>" : "") + (open ? peerWarningsHtml(readiness?.warnings || [], "Pairing warning") + peerInviteDetails(i) + '<div class="row"><button class="danger" data-peer-invite-delete="' + attr(i.id) + '"' + disabledAttr("peers.write") + ">Delete invite</button></div>" : "") + "</div>";
+    return '<div class="item"><strong>' + esc(i.name) + ' <span class="chip">' + esc(open ? "open" : "closed") + "</span></strong>" + (i.group ? "<small>" + esc("Group: " + i.group) + "</small>" : "") + "<small>" + esc("Expires: " + fmtDate(i.expiresAt)) + "</small><small>" + esc("Scopes: " + (i.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((i.allowedAgents || []).join(", ") || "all")) + "</small>" + (i.usedAt ? "<small>" + esc("Used: " + fmtDate(i.usedAt) + " by " + (i.usedByNodeId || "-")) + "</small>" : "") + (open ? peerWarningsHtml(readiness?.warnings || [], "Pairing warning") + peerInviteDetails(i) + '<div class="row"><button class="danger" data-peer-invite-delete="' + attr(i.id) + '"' + disabledAttr("peers.write") + ">Delete invite</button></div>" : "") + "</div>";
   }
   function peerCard(p) {
     const selected = state.selectedPeer === p.id ? ' <span class="chip">selected</span>' : "";
     const health = p.remoteStatus || p.lastSeenAt ? "Health: " + (p.remoteStatus || "seen") + (p.lastLatencyMs !== void 0 ? " / " + p.lastLatencyMs + "ms" : "") + (p.remoteVersion ? " / v" + p.remoteVersion : "") : "Health: unchecked";
     const aliases = Object.entries(p.workspaceAliases || {}).map(([a, w]) => a + "=" + w).join(", ");
-    return '<div class="item"><strong>' + esc(p.name) + ' <span class="adapter-status ' + (p.enabled ? "enabled" : "disabled") + '">' + (p.enabled ? "enabled" : "disabled") + "</span>" + selected + "</strong><small>" + esc("URL: " + (p.url || "-")) + "</small><small>" + esc("Node: " + p.nodeId + " / " + p.fingerprint) + "</small>" + (p.tlsFingerprint ? "<small>" + esc("TLS: " + p.tlsFingerprint) + "</small>" : "") + "<small>" + esc("Direction: " + p.direction + " / scopes " + (p.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((p.allowedAgents || []).join(", ") || "all")) + "</small><small>" + esc("Workspaces: " + ((p.allowedWorkspaceRoots || []).join(", ") || "all")) + "</small>" + (aliases ? "<small>" + esc("Aliases: " + aliases) + "</small>" : "") + "<small>" + esc(health) + "</small>" + (p.lastCheckedAt ? "<small>" + esc("Checked: " + fmtDate(p.lastCheckedAt)) + "</small>" : "") + (p.lastSeenAt ? "<small>" + esc("Last seen: " + fmtDate(p.lastSeenAt)) + "</small>" : "") + (p.lastError ? '<small class="error">' + esc("Last error: " + p.lastError) + "</small>" : "") + '<div class="row"><button data-peer-select="' + attr(p.id) + '">Use target</button><button class="secondary" data-peer-test="' + attr(p.id) + '">Test</button><button class="secondary" data-peer-probe="' + attr(p.id) + '"' + disabledAttr("peers.connect") + '>Probe this node</button><button class="secondary" data-peer-edit="' + attr(p.id) + '"' + disabledAttr("peers.write") + '>Edit</button><button class="secondary" data-peer-toggle="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">" + (p.enabled ? "Disable" : "Enable") + '</button><button class="danger" data-peer-revoke="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">Revoke</button></div></div>";
+    const effective = "Effective access: " + (p.scopes || []).length + " scope(s), agents " + ((p.allowedAgents || []).join(", ") || "all") + ", workspaces " + ((p.allowedWorkspaceRoots || []).join(", ") || "all");
+    const history = (p.healthHistory || []).slice(-5).reverse().map((h) => "<small>" + esc(fmtDate(h.checkedAt) + " | " + h.status + (h.latencyMs !== void 0 ? " | " + h.latencyMs + "ms" : "") + (h.error ? " | " + h.error : "")) + "</small>").join("");
+    return '<div class="item"><strong>' + esc(p.name) + ' <span class="adapter-status ' + (p.enabled ? "enabled" : "disabled") + '">' + (p.enabled ? "enabled" : "disabled") + "</span>" + selected + "</strong>" + (p.group ? "<small>" + esc("Group: " + p.group) + "</small>" : "") + "<small>" + esc("URL: " + (p.url || "-")) + "</small><small>" + esc("Node: " + p.nodeId + " / " + p.fingerprint) + "</small>" + (p.tlsFingerprint ? "<small>" + esc("TLS: " + p.tlsFingerprint) + "</small>" : "") + "<small>" + esc("Direction: " + p.direction + " / scopes " + (p.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((p.allowedAgents || []).join(", ") || "all")) + "</small><small>" + esc("Workspaces: " + ((p.allowedWorkspaceRoots || []).join(", ") || "all")) + "</small>" + (aliases ? "<small>" + esc("Aliases: " + aliases) + "</small>" : "") + "<small>" + esc(effective) + "</small><small>" + esc(health) + "</small>" + (p.lastCheckedAt ? "<small>" + esc("Checked: " + fmtDate(p.lastCheckedAt)) + "</small>" : "") + (p.lastSeenAt ? "<small>" + esc("Last seen: " + fmtDate(p.lastSeenAt)) + "</small>" : "") + (p.lastError ? '<small class="error">' + esc("Last error: " + p.lastError) + "</small>" : "") + (history ? '<details class="peer-health-history"><summary>Health history (' + (p.healthHistory || []).length + ")</summary>" + history + "</details>" : "") + '<div class="row"><button data-peer-select="' + attr(p.id) + '">Use target</button><button class="secondary" data-peer-test="' + attr(p.id) + '">Test</button><button class="secondary" data-peer-probe="' + attr(p.id) + '"' + disabledAttr("peers.connect") + '>Probe this node</button><button class="secondary" data-peer-repin="' + attr(p.id) + '"' + disabledAttr("peers.write") + '>Re-pin TLS</button><button class="secondary" data-peer-edit="' + attr(p.id) + '"' + disabledAttr("peers.write") + '>Edit</button><button class="secondary" data-peer-toggle="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">" + (p.enabled ? "Disable" : "Enable") + '</button><button class="danger" data-peer-revoke="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">Revoke</button></div></div>";
   }
   function openPeerDialog(p) {
     const aliases = Object.entries(p.workspaceAliases || {}).map(([a, w]) => a + "=" + w).join(", ");
-    adminDialog("Edit peer", '<label>Name<input id="dlgPeerName" value="' + attr(p.name || "") + '"></label><label>URL<input id="dlgPeerUrl" value="' + attr(p.url || "") + '"></label><label class="checkbox"><input id="dlgPeerEnabled" type="checkbox" ' + (p.enabled ? "checked" : "") + '> Enabled</label><label class="full-span">Scopes<input id="dlgPeerScopes" value="' + attr((p.scopes || []).join(", ")) + '"></label><label class="full-span">Allowed agents<input id="dlgPeerAgents" value="' + attr((p.allowedAgents || []).join(", ")) + '"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerWorkspaces" value="' + attr((p.allowedWorkspaceRoots || []).join(", ")) + '"></label><label class="full-span">Workspace aliases<input id="dlgPeerAliases" placeholder="project=/srv/project, demo=/home/me/demo" value="' + attr(aliases) + '"></label>', async () => {
-      await api("/api/peers/" + encodeURIComponent(p.id), { method: "PATCH", body: JSON.stringify({ name: val("dlgPeerName"), url: val("dlgPeerUrl"), enabled: document.getElementById("dlgPeerEnabled").checked, scopes: csvToList(val("dlgPeerScopes")), allowedAgents: csvToList(val("dlgPeerAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerWorkspaces")), workspaceAliases: aliasMap(val("dlgPeerAliases")) }), local: true });
+    adminDialog("Edit peer", '<label>Name<input id="dlgPeerName" value="' + attr(p.name || "") + '"></label><label>Group<input id="dlgPeerGroup" value="' + attr(p.group || "") + '" placeholder="LAN, Servers, Workstations"></label><label>URL<input id="dlgPeerUrl" value="' + attr(p.url || "") + '"></label><label class="checkbox"><input id="dlgPeerEnabled" type="checkbox" ' + (p.enabled ? "checked" : "") + '> Enabled</label><label class="full-span">Scopes<input id="dlgPeerScopes" value="' + attr((p.scopes || []).join(", ")) + '"></label><label class="full-span">Allowed agents<input id="dlgPeerAgents" value="' + attr((p.allowedAgents || []).join(", ")) + '"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerWorkspaces" value="' + attr((p.allowedWorkspaceRoots || []).join(", ")) + '"></label><label class="full-span">Workspace aliases<input id="dlgPeerAliases" placeholder="project=/srv/project, demo=/home/me/demo" value="' + attr(aliases) + '"></label>', async () => {
+      await api("/api/peers/" + encodeURIComponent(p.id), { method: "PATCH", body: JSON.stringify({ name: val("dlgPeerName"), group: val("dlgPeerGroup"), url: val("dlgPeerUrl"), enabled: document.getElementById("dlgPeerEnabled").checked, scopes: csvToList(val("dlgPeerScopes")), allowedAgents: csvToList(val("dlgPeerAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerWorkspaces")), workspaceAliases: aliasMap(val("dlgPeerAliases")) }), local: true });
       toast("Peer updated");
       await loadPeers();
     });
@@ -2464,8 +2931,8 @@
   function openPeerInviteDialog() {
     const warnings = state.peers?.readiness?.warnings || [];
     const warningHtml = peerWarningsHtml(warnings, "Pairing warning") + (warnings.length ? '<small class="full-span">The invite can still be created, but pairing may fail until the peer endpoint is reachable.</small>' : "");
-    adminDialog("Create peer invite", warningHtml + '<label>Name<input id="dlgPeerInviteName" value="NordRelay peer"></label><label>Expires minutes<input id="dlgPeerInviteExpires" type="number" value="10" min="1" max="1440"></label><label class="full-span">Scopes<input id="dlgPeerInviteScopes" value="inspect, sessions.read, sessions.write, prompt.send, prompt.abort, queue.read, queue.write, files.read, files.write, diagnostics.read, logs.read"></label><label class="full-span">Allowed agents<input id="dlgPeerInviteAgents" value="codex, pi, hermes, openclaw, claude-code"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerInviteWorkspaces" placeholder="empty means all"></label><label class="full-span">Workspace aliases<input id="dlgPeerInviteAliases" placeholder="project=/srv/project, demo=/home/me/demo"></label>', async () => {
-      const r = await api("/api/peers/invite", { method: "POST", body: JSON.stringify({ name: val("dlgPeerInviteName"), expiresMinutes: Number(val("dlgPeerInviteExpires") || 10), scopes: csvToList(val("dlgPeerInviteScopes")), allowedAgents: csvToList(val("dlgPeerInviteAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerInviteWorkspaces")), workspaceAliases: aliasMap(val("dlgPeerInviteAliases")) }), local: true });
+    adminDialog("Create peer invite", warningHtml + '<label>Name<input id="dlgPeerInviteName" value="NordRelay peer"></label><label>Group<input id="dlgPeerInviteGroup" placeholder="LAN, Servers, Workstations"></label><label>Expires minutes<input id="dlgPeerInviteExpires" type="number" value="10" min="1" max="1440"></label><label class="full-span">Scopes<input id="dlgPeerInviteScopes" value="inspect, sessions.read, sessions.write, prompt.send, prompt.abort, queue.read, queue.write, files.read, files.write, diagnostics.read, logs.read"></label><label class="full-span">Allowed agents<input id="dlgPeerInviteAgents" value="codex, pi, hermes, openclaw, claude-code"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerInviteWorkspaces" placeholder="empty means all"></label><label class="full-span">Workspace aliases<input id="dlgPeerInviteAliases" placeholder="project=/srv/project, demo=/home/me/demo"></label>', async () => {
+      const r = await api("/api/peers/invite", { method: "POST", body: JSON.stringify({ name: val("dlgPeerInviteName"), group: val("dlgPeerInviteGroup") || void 0, expiresMinutes: Number(val("dlgPeerInviteExpires") || 10), scopes: csvToList(val("dlgPeerInviteScopes")), allowedAgents: csvToList(val("dlgPeerInviteAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerInviteWorkspaces")), workspaceAliases: aliasMap(val("dlgPeerInviteAliases")) }), local: true });
       if (r.invitation?.id) state.peerInviteSecrets[r.invitation.id] = { code: r.code || "", command: r.command || "" };
       toast("Peer invite created. Pairing details are shown under Open invitations.", { duration: 8e3 });
       await loadPeers();