@songsid/agend 2.1.12-beta.9 → 2.2.0-alpha.1

package/dist/tmux-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux-read.js","sourceRoot":"","sources":["../src/tmux-read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAqB,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAC7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAexC,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEjB;IADZ,IAAI,CAAmB;IAChC,YAAqB,IAA+D,EAAE,OAAe,EAAE,KAAe;QACpH,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QADP,SAAI,GAAJ,IAAI,CAA2D;QAElF,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;QACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC7E,CAAC;CACF;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,KAAsE,CAAC;IACtF,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,KAAK,mCAAmC,CAAC,CAAC,CAAC,OAAO;QACzE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;YAC5B,CAAC,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACtG,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAoB;IAC/C,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACtF,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACpG,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBACrD,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,kCAAkC,EAAE,GAAG,EAAE,aAAa;aACjF,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAChB,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1E,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;gBAC1G,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACrG,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAmBD,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,CAAC;QAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;AAChF,CAAC;AAED,4FAA4F;AAC5F,MAAM,OAAO,YAAY;IAOH;IAA+B;IAN3C,IAAI,GAAc,EAAE,CAAC;IACrB,MAAM,GAAmB,IAAI,CAAC;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAAW,CAAC;IAC9B,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAoB,MAAqB,EAAU,OAA6B;QAA5D,WAAM,GAAN,MAAM,CAAe;QAAU,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAEpF,KAAK,KAAW,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;IACvC,IAAI,KAAW,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7B,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ;YAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,IAAc,EAAE,SAAiB;QACpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACrI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,qBAAqB,EAAE,CAAC;YAC7E,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG;gBACV,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;aAC1F,CAAC;YACb,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC7D,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAC/E,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,GAAY;QAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1G,CAAC;IAEO,MAAM,CAAC,GAAY,EAAE,KAAe,EAAE,MAAM,GAAG,EAAE;QACvD,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO;QACrB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAC5C,IAAI,KAAK;YAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;YAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,sBAAsB;YAAE,OAAO;QAClF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAY;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;gBACrF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;gBACzF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO;gBACrB,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACpE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,sBAAsB,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,aAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACvE,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE;gBACvE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,mBAAmB;aACnG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACnB,mEAAmE;gBACnE,kEAAkE;gBAClE,aAAa,GAAG,KAAK,CAAC;gBACtB,IAAI,aAAa,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;gBACtE,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO;gBACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;;oBAChG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,CAAC,CAAC,CAAC,CAAC;YACJ,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;YACrB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,qEAAqE;YACrE,yEAAyE;YACzE,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpE,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF"}

package/dist/topic-commands.d.ts

@@ -7,6 +7,8 @@ export { parseContextPercent, parseTokenContextRatio } from "./context-percent.j
 export type { TokenContextRatio } from "./context-percent.js";
 type ExecutionFleetContext = FleetContext & {
     getInstanceExecutionState?(instanceName: string): "idle" | "working" | "stuck" | null;
+    /** The running launch's own steer capability (CliBackend.supportsSteer, #1405); undefined when it has none to give. */
+    instanceLaunchSupportsSteer?(instanceName: string): boolean | undefined;
 };
 /** Sanitize a directory name into a valid instance name. Keeps Unicode letters (incl. CJK). */
 export declare function sanitizeInstanceName(name: string): string;
@@ -174,6 +176,18 @@ export declare class TopicCommands {
     private ctx;
     constructor(ctx: ExecutionFleetContext);
     /** Get the adapter that should reply to a given inbound message */
+    /**
+     * #754: who may run a typed Telegram command is decided by the command table — the same rule a Discord slash
+     * command goes through (`decideCommand`), here with its Telegram column — before any handler runs. `msg.adapterId`
+     * is the topic's owning adapter (ownedCopy), so the admin it asks about is that bot's. A command the table does not
+     * know (`/raw`) or does not handle here (a passthrough cell) is left to the handlers below. `command` is what the
+     * dispatcher recognized (GENERAL_FORMS / INSTANCE_FORMS), so the table judges exactly what would run.
+     *
+     * Synchronous on purpose (#1399 review): the decision, the handler's own checks and the command's effect run in one
+     * stretch, so the instance cannot be rebound to another bot between the check and the act. The refusal, if any.
+     */
+    private tableRefusal;
+    private sendRefusal;
     private getReplyAdapter;
     /**
      * #1346: keep only the owning adapter's copy. When several bots share a
@@ -189,17 +203,13 @@ export declare class TopicCommands {
     /** Parse and dispatch commands from the General topic */
     handleGeneralCommand(msg: InboundMessage, instanceName?: string): Promise<boolean>;
     /**
-     * Build the dashboard URL text (View / Settings / Web UI). The Settings/Web UI
-     * URLs carry the web token; when `htmlSpoiler` is set they're wrapped in a
-     * Telegram HTML spoiler (`<tg-spoiler>`) so the token isn't shown in the clear
-     * in a shared topic (the caller must send with format: "html"). /view is
-     * public, so it's never spoilered. DC uses the plain form (ephemeral reply).
+     * Pure, secret-free dashboard/menu copy. Issuance belongs to the private
+     * delivery action; rendering or previewing this text cannot retire a code.
      */
-    getDashboardText(htmlSpoiler?: boolean): string;
+    getDashboardText(_htmlSpoiler?: boolean, showRemoteHint?: boolean): string;
     /**
-     * /dashboard (TG): admin-only. Replies directly in the topic; the token-
-     * bearing URLs are wrapped in a Telegram HTML spoiler so they aren't shown in
-     * the clear (the adapter supports plain/HTML, not MarkdownV2's `||…||`).
+     * /dashboard (TG): admin-only menu in General; codes are sent privately.
+     * `/dashboard revoke` also closes the public link and signs browsers out.
      */
     private handleDashboardCommand;
     /** Handle /ctx or /compact in any instance topic — returns true if handled */
@@ -249,7 +259,8 @@ export declare class TopicCommands {
      * Backends whose TUI accepts a busy-pane paste as steering input,
      * live-verified: claude-code and codex buffer-then-submit at the turn
      * boundary, grok accepts it in its input line. kiro's legacy TUI swallows
-     * the paste outright, and opencode/antigravity are unverified — for those
+     * the paste outright; its TUI front-ends steer, so kiro answers per launch
+     * (#1405). opencode/antigravity are unverified — for those
      * the user gets an honest "not supported" instead of a silent queue
      * fallback that looks like a steer but behaves like a normal message.
      */

package/dist/topic-commands.js

@@ -1,4 +1,6 @@
 import { measureSyncWork } from "./sync-work-attribution.js";
+import { LOOPBACK_HOST_NAMES } from "./web-host-guard.js";
+import { WEB_REMOTE_DOCS_URL } from "./upgrade-notices.js";
 import { readFileSync, existsSync } from "node:fs";
 import { exec, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
@@ -11,11 +13,11 @@ import { formatCents } from "./cost-guard.js";
 import { truncateDisplay, MODEL_DISPLAY_WIDTH_MAX } from "./ls-rows.js";
 import { getTmuxSocketName, getTmuxSessionName } from "./paths.js";
 import { t, getLocale } from "./locale.js";
-import { telegramMenu } from "./command-table.js";
+import { commandSpec, decideCommand, telegramMenu } from "./command-table.js";
 import { runVisibilityCommand } from "./cross-instance-notice.js";
 import { clampContextPercent, parseContextPercent, parseTokenContextRatio, } from "./context-percent.js";
 import { isGeneralInstance } from "./general-instance.js";
-import { backendSupportsSteer } from "./steer-capability.js";
+import { instanceSupportsSteer } from "./steer-capability.js";
 import { SYSINFO_BACKEND_IDS } from "./backend/types.js";
 import { recordInternalRequest, withOrigin } from "./fleet-control-audit.js";
 import { UPDATE_COMMAND } from "./update-check.js";
@@ -455,12 +457,89 @@ export function resolveInstanceContext(dataDir, instanceName, backend, opts) {
     refreshPaneContext(instanceName, backend);
     return hit ? { context: hit.context, tokenRatio: hit.tokenRatio } : { context: null, tokenRatio: null };
 }
+const PROFILE_RE = /^\/profile(?:@\w+)?(?:\s+([\s\S]*))?$/;
+const RESTART_RE = /^\/restart(?:@[A-Za-z0-9_]*)?(?:\s+(.*))?$/i;
+const LEGACY_INSTALL_RE = /^\/install[-_]cli(?:@\S+)?(?:\s+([\s\S]*))?$/;
+const VISIBILITY_RE = /^\/visibility(?:@\S+)?(?:\s+([\s\S]*))?$/i;
+/** `/name` or `/name@bot`. */
+const bare = (name) => (text) => text === `/${name}` || text.startsWith(`/${name}@`);
+/** `/name`, `/name@bot`, or `/name <args>`. */
+const withArgs = (name) => (text) => bare(name)(text) || text.startsWith(`/${name} `);
+/**
+ * The typed forms each dispatcher runs, in its order. The one recognizer for both the command-table gate and the
+ * dispatch (#1399 review): a form no handler runs (`/STATUS`, `/status report`, `/pause one two`) is text for the
+ * agent, and the table never answers it either.
+ */
+const GENERAL_FORMS = [
+    ["profile", (text, source) => source === "telegram" && PROFILE_RE.test(text)],
+    ["status", bare("status")],
+    ["restart", text => RESTART_RE.test(text)],
+    ["sysinfo", text => bare("sysinfo")(text) || text === "/sys-info" || text === "/sys_info"],
+    ["doctor", bare("doctor")],
+    ["usage", bare("usage")],
+    ["tips", withArgs("tips")],
+    ["login", withArgs("login")],
+    ["install-cli", text => LEGACY_INSTALL_RE.test(text)],
+    ["update", bare("update")],
+    ["dashboard", withArgs("dashboard")],
+    ["visibility", text => VISIBILITY_RE.test(text)],
+];
+const INSTANCE_FORMS = [
+    ["tips", withArgs("tips")],
+    ["pause", text => parsePauseWakeCommand(text)?.action === "pause"],
+    ["wake", text => parsePauseWakeCommand(text)?.action === "wake"],
+    ["collab", bare("collab")],
+    ["effort", withArgs("effort")],
+    ["model", withArgs("model")],
+    ["compact", text => parseCompactCommand(text) !== null],
+    ["steer", withArgs("steer")],
+    ["btw", withArgs("btw")],
+    ["clear", bare("clear")],
+    ["cancel", bare("cancel")],
+    ["save", withArgs("save")],
+    ["raw", text => text === "/raw" || text.startsWith("/raw ")],
+    ["ctx", bare("ctx")],
+];
+const typedCommand = (forms, text, source) => forms.find(([, matches]) => matches(text, source))?.[0];
+/** A typed name that is another spelling of a command-table entry. */
+const TELEGRAM_COMMAND_ALIASES = { "install-cli": "login" };
 export class TopicCommands {
     ctx;
     constructor(ctx) {
         this.ctx = ctx;
     }
     /** Get the adapter that should reply to a given inbound message */
+    /**
+     * #754: who may run a typed Telegram command is decided by the command table — the same rule a Discord slash
+     * command goes through (`decideCommand`), here with its Telegram column — before any handler runs. `msg.adapterId`
+     * is the topic's owning adapter (ownedCopy), so the admin it asks about is that bot's. A command the table does not
+     * know (`/raw`) or does not handle here (a passthrough cell) is left to the handlers below. `command` is what the
+     * dispatcher recognized (GENERAL_FORMS / INSTANCE_FORMS), so the table judges exactly what would run.
+     *
+     * Synchronous on purpose (#1399 review): the decision, the handler's own checks and the command's effect run in one
+     * stretch, so the instance cannot be rebound to another bot between the check and the act. The refusal, if any.
+     */
+    tableRefusal(msg, command, scope) {
+        const spec = command ? commandSpec(TELEGRAM_COMMAND_ALIASES[command] ?? command) : undefined;
+        if (!spec)
+            return null;
+        const fleetAdmin = () => this.ctx.isFleetAdmin(msg.userId, msg.adapterId) ? "ok"
+            : this.ctx.hasFleetAdmins && !this.ctx.hasFleetAdmins(msg.adapterId) ? "disabled" : "denied";
+        const decision = decideCommand(spec, scope, {
+            fleetAdmin,
+            // In a fleet topic the channel's own admin IS the owning bot's fleet admin.
+            channelAdmin: () => fleetAdmin() === "ok",
+            classicAdmin: () => false,
+        }, "telegram");
+        if (decision.allow || "passthrough" in decision)
+            return null;
+        return decision.reply;
+    }
+    async sendRefusal(msg, [key, ...args]) {
+        const adapter = this.getReplyAdapter(msg);
+        if (adapter)
+            await adapter.sendText(msg.chatId, t(key, ...args), { threadId: msg.threadId }).catch(() => { });
+    }
     getReplyAdapter(msg) {
         if (msg.adapterId && this.ctx.adapters) {
             return this.ctx.adapters.get(msg.adapterId) ?? this.ctx.adapter;
@@ -495,47 +574,50 @@ export class TopicCommands {
         const text = msg.text?.trim();
         if (!text)
             return false;
-        const profile = msg.source === "telegram" ? text.match(/^\/profile(?:@\w+)?(?:\s+([\s\S]*))?$/) : null;
-        if (profile) {
-            await this.ctx.runProfileCommand?.(msg, profile[1]?.trim());
+        const command = typedCommand(GENERAL_FORMS, text, msg.source);
+        const refusal = this.tableRefusal(msg, command, "general");
+        if (refusal) {
+            await this.sendRefusal(msg, refusal);
             return true;
         }
-        if (text === "/status" || text === "/status@" || text.startsWith("/status@")) {
+        if (command === "profile") {
+            await this.ctx.runProfileCommand?.(msg, text.match(PROFILE_RE)[1]?.trim());
+            return true;
+        }
+        if (command === "status") {
             await this.handleStatusCommand(msg);
             return true;
         }
-        const restart = text.match(/^\/restart(?:@[A-Za-z0-9_]*)?(?:\s+(.*))?$/i);
-        if (restart) {
-            const mode = restart[1]?.trim().toLowerCase();
+        if (command === "restart") {
+            const mode = text.match(RESTART_RE)[1]?.trim().toLowerCase();
             await this.handleRestartCommand(msg, mode);
             return true;
         }
-        if (text === "/sysinfo" || text === "/sysinfo@" || text.startsWith("/sysinfo@")
-            || text === "/sys-info" || text === "/sys_info") {
+        if (command === "sysinfo") {
             await this.handleSysInfoCommand(msg);
             return true;
         }
-        if (text === "/doctor" || text.startsWith("/doctor@")) {
+        if (command === "doctor") {
             await this.handleDoctorCommand(msg);
             return true;
         }
-        if (text === "/usage" || text.startsWith("/usage@")) {
+        if (command === "usage") {
             await this.handleUsageCommand(msg);
             return true;
         }
-        if (text === "/tips" || text.startsWith("/tips ") || text.startsWith("/tips@")) {
+        if (command === "tips") {
             await this.handleTipsCommand(msg);
             return true;
         }
-        if (text === "/login" || text.startsWith("/login ") || text.startsWith("/login@")) {
+        if (command === "login") {
             await this.handleLoginCommand(msg);
             return true;
         }
         // `/install-cli` became part of `/login` (#1131). Typed, it still works for
         // one release (2.1.10) — with a line saying where it went — and is in no
         // command menu. Both spellings: Telegram command names cannot contain "-".
-        const legacyInstall = text.match(/^\/install[-_]cli(?:@\S+)?(?:\s+([\s\S]*))?$/);
-        if (legacyInstall) {
+        if (command === "install-cli") {
+            const legacyInstall = text.match(LEGACY_INSTALL_RE);
             const adapter = this.getReplyAdapter(msg);
             if (adapter)
                 await adapter.sendText(msg.chatId, t("login.install_cli_moved"), { threadId: msg.threadId }).catch(() => { });
@@ -544,50 +626,48 @@ export class TopicCommands {
             await this.handleLoginCommand({ ...msg, text: mapped });
             return true;
         }
-        if (text === "/update" || text.startsWith("/update@")) {
+        if (command === "update") {
             await this.handleUpdateCommand(msg);
             return true;
         }
-        if (text === "/dashboard" || text.startsWith("/dashboard@")) {
+        if (command === "dashboard") {
             await this.handleDashboardCommand(msg);
             return true;
         }
-        const visibility = text.match(/^\/visibility(?:@\S+)?(?:\s+([\s\S]*))?$/i);
-        if (visibility) {
-            await this.handleVisibilityCommand(msg, visibility[1] ?? "");
+        if (command === "visibility") {
+            await this.handleVisibilityCommand(msg, text.match(VISIBILITY_RE)[1] ?? "");
             return true;
         }
         return false;
     }
     /**
-     * Build the dashboard URL text (View / Settings / Web UI). The Settings/Web UI
-     * URLs carry the web token; when `htmlSpoiler` is set they're wrapped in a
-     * Telegram HTML spoiler (`<tg-spoiler>`) so the token isn't shown in the clear
-     * in a shared topic (the caller must send with format: "html"). /view is
-     * public, so it's never spoilered. DC uses the plain form (ephemeral reply).
+     * Pure, secret-free dashboard/menu copy. Issuance belongs to the private
+     * delivery action; rendering or previewing this text cannot retire a code.
      */
-    getDashboardText(htmlSpoiler = false) {
+    getDashboardText(_htmlSpoiler = false, showRemoteHint = true) {
         const port = this.ctx.fleetConfig?.health_port ?? 19280;
         const host = this.ctx.fleetConfig?.hostname || "localhost";
         const access = this.ctx.getDashboardAccess?.();
         if (!access?.ready || !access.token)
             return t("dashboard.starting");
-        const token = access.token;
         const base = `http://${host}:${port}`;
-        const hide = (u) => htmlSpoiler ? `<tg-spoiler>${u}</tg-spoiler>` : u;
         return [
             t("dashboard.title"),
             "",
-            `• View:     ${base}/view`,
-            `• View (edit): ${hide(`${base}/view?token=${token}`)}`,
-            `• Settings: ${hide(`${base}/settings?token=${token}`)}`,
-            `• Web UI:   ${hide(`${base}/ui?token=${token}`)}`,
+            t("dashboard.signin", base),
+            "",
+            `• View:      ${base}/view`,
+            `• Dashboard: ${base}/ui`,
+            `• Settings:  ${base}/settings`,
+            "",
+            t("dashboard.code_help"),
+            // #1366: a loopback address does not open on a phone — say where the way in is documented.
+            ...(showRemoteHint && (LOOPBACK_HOST_NAMES.includes(host.toLowerCase()) || host === "::1") ? ["", t("dashboard.remote_hint", WEB_REMOTE_DOCS_URL)] : []),
         ].join("\n");
     }
     /**
-     * /dashboard (TG): admin-only. Replies directly in the topic; the token-
-     * bearing URLs are wrapped in a Telegram HTML spoiler so they aren't shown in
-     * the clear (the adapter supports plain/HTML, not MarkdownV2's `||…||`).
+     * /dashboard (TG): admin-only menu in General; codes are sent privately.
+     * `/dashboard revoke` also closes the public link and signs browsers out.
      */
     async handleDashboardCommand(msg) {
         const adapter = this.getReplyAdapter(msg);
@@ -604,7 +684,17 @@ export class TopicCommands {
             await adapter.sendText(chatId, t("not_authorized"), { threadId });
             return;
         }
-        await adapter.sendText(chatId, this.getDashboardText(true), { threadId, format: "html" });
+        const arg = (msg.text ?? "").trim().replace(/^\/dashboard(?:@\S+)?/i, "").trim().toLowerCase();
+        if (arg === "revoke") {
+            const result = this.ctx.revokeWebSessions?.() ?? { count: 0, durable: true };
+            // Not durable: they are signed out now, but a restart may bring them back — say so, never "done".
+            await adapter.sendText(chatId, result.durable ? t("dashboard.revoked", result.count) : t("dashboard.revoked_not_durable", result.count), { threadId });
+            return;
+        }
+        if (msg.source === "telegram")
+            await this.ctx.dashboardMenu?.(msg);
+        else
+            await adapter.sendText(chatId, this.getDashboardText(), { threadId });
     }
     /** Handle /ctx or /compact in any instance topic — returns true if handled */
     async handleInstanceCommand(msg, instanceName) {
@@ -615,15 +705,25 @@ export class TopicCommands {
         const text = msg.text?.trim();
         if (!text)
             return false;
+        const inGeneral = !!this.ctx.fleetConfig?.instances[instanceName]?.general_topic;
+        // A General command typed in an instance topic is recognized too, in its General forms only: the table points it
+        // to General (#1148) instead of handing it to the agent. No branch below runs it.
+        const command = typedCommand(INSTANCE_FORMS, text, msg.source)
+            ?? (inGeneral ? undefined : typedCommand(GENERAL_FORMS, text, msg.source));
+        const refusal = this.tableRefusal(msg, command, inGeneral ? "general" : "fleet");
+        if (refusal) {
+            await this.sendRefusal(msg, refusal);
+            return true;
+        }
         // Tips are informational and should appear where requested, including a
         // worker topic. This also keeps Telegram text commands aligned with
         // Discord's channel-local slash-command behavior.
-        if (text === "/tips" || text.startsWith("/tips ") || text.startsWith("/tips@")) {
+        if (command === "tips") {
             await this.handleTipsCommand(msg);
             return true;
         }
-        const pauseWake = parsePauseWakeCommand(text);
-        if (pauseWake) {
+        if (command === "pause" || command === "wake") {
+            const pauseWake = parsePauseWakeCommand(text);
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -631,7 +731,7 @@ export class TopicCommands {
                 await adapter.sendText(msg.chatId, t("permission.denied"), { threadId: msg.threadId });
                 return true;
             }
-            const isGeneral = !!this.ctx.fleetConfig?.instances[instanceName]?.general_topic;
+            const isGeneral = inGeneral;
             if (isGeneral && !pauseWake.instance) {
                 await adapter.sendText(msg.chatId, t(`${pauseWake.action}.usage`), { threadId: msg.threadId });
                 return true;
@@ -641,6 +741,11 @@ export class TopicCommands {
                 await adapter.sendText(msg.chatId, t("instance.not_found", target), { threadId: msg.threadId });
                 return true;
             }
+            // #754 audit: a General speaks for its own bot's instances only — an admin of this bot is not one of another's.
+            if (isGeneral && this.ctx.getInstanceAdapterId && this.ctx.getInstanceAdapterId(target) !== msg.adapterId) {
+                await adapter.sendText(msg.chatId, t("instance.other_bot", target), { threadId: msg.threadId });
+                return true;
+            }
             if (pauseWake.action === "pause" && isGeneralInstance(this.ctx.fleetConfig, target)) {
                 await adapter.sendText(msg.chatId, t("general.pause_forbidden"), { threadId: msg.threadId });
                 return true;
@@ -648,17 +753,22 @@ export class TopicCommands {
             await adapter.sendText(msg.chatId, await this.runPauseWake(target, pauseWake.action), { threadId: msg.threadId });
             return true;
         }
-        if (text === "/collab" || text.startsWith("/collab@")) {
+        if (command === "collab") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
+            // Channel-admin, as the Discord slash command (#754 audit): it changes how the instance is reached.
+            if (!this.ctx.isFleetAdmin(msg.userId, msg.adapterId)) {
+                await adapter.sendText(msg.chatId, t("permission.denied"), { threadId: msg.threadId });
+                return true;
+            }
             const isCollab = this.ctx.toggleFleetCollab(instanceName);
             await adapter.sendText(msg.chatId, isCollab
                 ? t("collab.on")
                 : t("collab.off"), { threadId: msg.threadId });
             return true;
         }
-        if (text === "/effort" || text.startsWith("/effort ") || text.startsWith("/effort@")) {
+        if (command === "effort") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -674,13 +784,13 @@ export class TopicCommands {
             }
             else if (this.ctx.promptEffortMenu) {
                 // No arg → inline keyboard menu (TG), same shape as /model.
-                const fallback = await this.ctx.promptEffortMenu(instanceName, msg.userId, msg.threadId ?? msg.chatId, adapter, msg.chatId, msg.threadId);
+                const fallback = await this.ctx.promptEffortMenu(instanceName, msg.userId, msg.threadId ?? msg.chatId, adapter, msg.chatId, msg.threadId, msg.adapterId);
                 if (fallback)
                     await adapter.sendText(msg.chatId, fallback, { threadId: msg.threadId });
             }
             return true;
         }
-        if (text === "/model" || text.startsWith("/model ") || text.startsWith("/model@")) {
+        if (command === "model") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -695,7 +805,7 @@ export class TopicCommands {
             }
             else if (this.ctx.promptModelMenu) {
                 // No arg → inline keyboard menu (TG)
-                const fallback = await this.ctx.promptModelMenu(instanceName, msg.userId, msg.threadId ?? msg.chatId, adapter, msg.chatId, msg.threadId);
+                const fallback = await this.ctx.promptModelMenu(instanceName, msg.userId, msg.threadId ?? msg.chatId, adapter, msg.chatId, msg.threadId, msg.adapterId);
                 if (fallback)
                     await adapter.sendText(msg.chatId, fallback, { threadId: msg.threadId });
             }
@@ -704,16 +814,21 @@ export class TopicCommands {
             }
             return true;
         }
-        const compact = parseCompactCommand(text);
-        if (compact) {
+        if (command === "compact") {
+            const compact = parseCompactCommand(text);
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
+            // Channel-admin, as the Discord slash command (#754 audit): it rewrites the instance's context.
+            if (!this.ctx.isFleetAdmin(msg.userId, msg.adapterId)) {
+                await adapter.sendText(msg.chatId, t("permission.denied"), { threadId: msg.threadId });
+                return true;
+            }
             const result = await this.sendCompact(instanceName, compact.instructions);
             await adapter.sendText(msg.chatId, result, { threadId: msg.threadId });
             return true;
         }
-        if (text === "/steer" || text.startsWith("/steer ") || text.startsWith("/steer@")) {
+        if (command === "steer") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -730,7 +845,7 @@ export class TopicCommands {
             await adapter.sendText(msg.chatId, result, { threadId: msg.threadId });
             return true;
         }
-        if (text === "/btw" || text.startsWith("/btw ") || text.startsWith("/btw@")) {
+        if (command === "btw") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -746,7 +861,7 @@ export class TopicCommands {
             await adapter.sendText(msg.chatId, result, { threadId: msg.threadId });
             return true;
         }
-        if (text === "/clear" || text.startsWith("/clear@")) {
+        if (command === "clear") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -763,7 +878,7 @@ export class TopicCommands {
                 await adapter.sendText(msg.chatId, fallback, { threadId: msg.threadId });
             return true;
         }
-        if (text === "/cancel" || text.startsWith("/cancel@")) {
+        if (command === "cancel") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
@@ -771,10 +886,15 @@ export class TopicCommands {
             await adapter.sendText(msg.chatId, ok ? t("cancel.sent", instanceName) : t("cancel.not_running", instanceName), { threadId: msg.threadId });
             return true;
         }
-        if (text === "/save" || text.startsWith("/save ") || text.startsWith("/save@")) {
+        if (command === "save") {
             const adapter = this.getReplyAdapter(msg);
             if (!adapter)
                 return false;
+            // Channel-admin, as the Discord slash command (#754 audit): it writes a file in the instance's directory.
+            if (!this.ctx.isFleetAdmin(msg.userId, msg.adapterId)) {
+                await adapter.sendText(msg.chatId, t("permission.denied"), { threadId: msg.threadId });
+                return true;
+            }
             const filename = parseSaveFilename(text);
             if (!filename) {
                 await adapter.sendText(msg.chatId, t("save.usage"), { threadId: msg.threadId });
@@ -788,7 +908,17 @@ export class TopicCommands {
             await adapter.sendText(msg.chatId, result, { threadId: msg.threadId });
             return true;
         }
-        if (text !== "/ctx" && !text.startsWith("/ctx@"))
+        // `/raw <text>` is pasted into the CLI as typed, with no [user:] envelope (daemon.ts): it is CLI input, so only
+        // the owning bot's fleet admin may send it (#754 audit). An admin's falls through to delivery unchanged.
+        if (command === "raw") {
+            if (this.ctx.isFleetAdmin(msg.userId, msg.adapterId))
+                return false;
+            const adapter = this.getReplyAdapter(msg);
+            if (adapter)
+                await adapter.sendText(msg.chatId, t("permission.denied"), { threadId: msg.threadId });
+            return true;
+        }
+        if (command !== "ctx")
             return false;
         const adapter = this.getReplyAdapter(msg);
         if (!adapter)
@@ -946,14 +1076,17 @@ export class TopicCommands {
      * Backends whose TUI accepts a busy-pane paste as steering input,
      * live-verified: claude-code and codex buffer-then-submit at the turn
      * boundary, grok accepts it in its input line. kiro's legacy TUI swallows
-     * the paste outright, and opencode/antigravity are unverified — for those
+     * the paste outright; its TUI front-ends steer, so kiro answers per launch
+     * (#1405). opencode/antigravity are unverified — for those
      * the user gets an honest "not supported" instead of a silent queue
      * fallback that looks like a steer but behaves like a normal message.
      */
     sendSteer(instanceName, content, msg) {
         const backend = this.effectiveBackend(instanceName);
-        if (!backendSupportsSteer(backend)) {
-            return t("steer.unsupported", backend);
+        const launchSupportsSteer = this.ctx.instanceLaunchSupportsSteer?.(instanceName);
+        if (!instanceSupportsSteer(backend, launchSupportsSteer)) {
+            // A backend that answers per launch (kiro, #1405) can steer, just not as this instance runs now.
+            return launchSupportsSteer === false ? t("steer.unsupported_launch", backend) : t("steer.unsupported", backend);
         }
         const ipc = this.ctx.instanceIpcClients.get(instanceName);
         if (!ipc?.connected)