@songsid/agend 2.1.12 → 2.2.0-alpha.1

package/dist/setup-auth.js

@@ -21,10 +21,9 @@
  *
  * See `docs/design/setup-host-tunnel.zh-TW.md` §3.8 and envelope rule 28.
  */
-import { createHash, randomBytes, randomInt, timingSafeEqual } from "node:crypto";
-/** RFC 4648 base32, minus nothing: the digits 0/1 are absent from it already. */
-const CODE_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-export const SETUP_CODE_LENGTH = 8;
+import { createHash, randomBytes } from "node:crypto";
+import { constantTimeMatches, formatOneTimeCode, generateOneTimeCode, normalizeOneTimeCode, ONE_TIME_CODE_LENGTH, } from "./auth/one-time-code.js";
+export const SETUP_CODE_LENGTH = ONE_TIME_CODE_LENGTH;
 /**
  * Five, not three.
  *
@@ -34,40 +33,12 @@ export const SETUP_CODE_LENGTH = 8;
  */
 export const MAX_SETUP_ATTEMPTS = 5;
 export const SETUP_COOKIE_NAME = "agend_setup";
-export function generateSetupCode() {
-    let code = "";
-    for (let i = 0; i < SETUP_CODE_LENGTH; i++)
-        code += CODE_ALPHABET[randomInt(CODE_ALPHABET.length)];
-    return code;
-}
-/** `ABCD-EFGH` — a shape that survives being read aloud and retyped. */
-export function formatSetupCode(code) {
-    return `${code.slice(0, 4)}-${code.slice(4)}`;
-}
-/**
- * What the person typed, as the code it was meant to be.
- *
- * Case and the dash are presentation. Rejecting `abcd efgh` would be rejecting
- * a correct answer, and the person retyping it has no idea which detail was
- * wrong — so they spend attempts on formatting.
- */
-export function normalizeSetupCode(input) {
-    return input.replace(/[^0-9A-Za-z]/g, "").toUpperCase();
-}
-/**
- * Fixed-length constant-time compare.
- *
- * Both sides are padded to the same length first: `timingSafeEqual` throws on a
- * mismatch, and returning early on one leaks the length through timing.
- */
-export function constantTimeMatches(provided, expected) {
-    const width = Math.max(provided.length, expected.length, 1);
-    const a = Buffer.alloc(width);
-    const b = Buffer.alloc(width);
-    a.write(provided, "utf8");
-    b.write(expected, "utf8");
-    return timingSafeEqual(a, b) && provided.length === expected.length;
-}
+// The code primitives live in `auth/one-time-code.ts`; these names stay because
+// the setup page and its tests already speak them.
+export const generateSetupCode = generateOneTimeCode;
+export const formatSetupCode = formatOneTimeCode;
+export const normalizeSetupCode = normalizeOneTimeCode;
+export { constantTimeMatches };
 /** The cookie carries a hash of the secret, never the secret itself. */
 export function setupCookieValue(secret) {
     return createHash("sha256").update(`agend-setup-session-v1:${secret}`).digest("hex");
@@ -97,6 +68,9 @@ export class SetupCredentials {
     sid;
     code;
     secret = null;
+    sessionOwner = null;
+    get sessionIdentity() { return this.lockedOut ? null : this.sessionOwner; }
+    isSessionCurrent(owner) { return !this.lockedOut && !!this.secret && this.sessionOwner === owner; }
     failures = 0;
     constructor(opts = {}) {
         this.sid = opts.sid ?? randomBytes(16).toString("hex");
@@ -114,6 +88,7 @@ export class SetupCredentials {
     revoke() {
         this.revoked = true;
         this.secret = null;
+        this.sessionOwner = null;
     }
     get revokedNow() { return this.revoked; }
     get lockedOut() { return this.revoked || this.failures >= MAX_SETUP_ATTEMPTS; }
@@ -153,6 +128,7 @@ export class SetupCredentials {
         if (this.secret)
             return { kind: "rejected", attemptsLeft: this.attemptsLeft };
         this.secret = randomBytes(32).toString("hex");
+        this.sessionOwner = { id: randomBytes(16).toString("hex") };
         return { kind: "ok", secret: this.secret };
     }
     /**

package/dist/setup-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-auth.js","sourceRoot":"","sources":["../src/setup-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAElF,iFAAiF;AACjF,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAE/C,MAAM,UAAU,iBAAiB;IAC/B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAAgB;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1B,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAA8D;IAC7G,MAAM,KAAK,GAAG;QACZ,GAAG,iBAAiB,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE;QAClD,QAAQ,IAAI,CAAC,IAAI,EAAE;QACnB,UAAU;QACV,kEAAkE;QAClE,+DAA+D;QAC/D,iBAAiB;QACjB,WAAW,IAAI,CAAC,aAAa,EAAE;KAChC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAClB,GAAG,CAAS;IACZ,IAAI,CAAS;IACd,MAAM,GAAkB,IAAI,CAAC;IAC7B,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAY,OAAwC,EAAE;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAEO,OAAO,GAAG,KAAK,CAAC;IAExB;;;;;;;OAOG;IACH,MAAM;QACJ,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,IAAI,UAAU,KAAc,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAElD,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC,CAAC;IACxF,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtF,iFAAiF;IACjF,IAAI,QAAQ,KAAc,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC;IAExD;;;;;;;;OAQG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,IAAI,eAAe,KAAa,OAAO,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEnE,8EAA8E;IAC9E,MAAM,CAAC,YAAoB;QACzB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACpD,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACrG,CAAC;QACD,yEAAyE;QACzE,gDAAgD;QAChD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9E,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAA6B;QACvC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC9C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACrG,CAAC;QACD,IAAI,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACrG,CAAC;CACF"}
+{"version":3,"file":"setup-auth.js","sourceRoot":"","sources":["../src/setup-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAE/C,gFAAgF;AAChF,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAA8D;IAC7G,MAAM,KAAK,GAAG;QACZ,GAAG,iBAAiB,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE;QAClD,QAAQ,IAAI,CAAC,IAAI,EAAE;QACnB,UAAU;QACV,kEAAkE;QAClE,+DAA+D;QAC/D,iBAAiB;QACjB,WAAW,IAAI,CAAC,aAAa,EAAE;KAChC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAClB,GAAG,CAAS;IACZ,IAAI,CAAS;IACd,MAAM,GAAkB,IAAI,CAAC;IAC7B,YAAY,GAA0B,IAAI,CAAC;IACnD,IAAI,eAAe,KAAqC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3G,gBAAgB,CAAC,KAAa,IAAa,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC;IAC5G,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAY,OAAwC,EAAE;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAEO,OAAO,GAAG,KAAK,CAAC;IAExB;;;;;;;OAOG;IACH,MAAM;QACJ,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU,KAAc,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAElD,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC,CAAC;IACxF,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtF,iFAAiF;IACjF,IAAI,QAAQ,KAAc,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC;IAExD;;;;;;;;OAQG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,IAAI,eAAe,KAAa,OAAO,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEnE,8EAA8E;IAC9E,MAAM,CAAC,YAAoB;QACzB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACpD,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACrG,CAAC;QACD,yEAAyE;QACzE,gDAAgD;QAChD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9E,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAA6B;QACvC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC9C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACrG,CAAC;QACD,IAAI,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACrG,CAAC;CACF"}

package/dist/setup-form.d.ts

@@ -15,4 +15,4 @@
  * prove they also have the code they learn nothing from it.
  */
 export declare const SETUP_CODE_PAGE_HTML = "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<!-- Proof that a request reached THIS listener and not merely something that\n     answers 200. The tunnel's readiness probe looks for exactly this. It is the\n     sid, which is already in the URL, so it discloses nothing new. -->\n<meta name=\"agend-setup\" content=\"__AGEND_SETUP_MARKER__\">\n<title>Set up AgEnD</title>\n<style>\n  body { font-family: Inter, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; margin: 0; background: #ffffff; color: #111827; }\n  main { max-width: 420px; margin: 0 auto; padding: 64px 20px; }\n  h1 { font-size: 20px; margin: 0 0 8px; }\n  p { color: #6b7280; font-size: 13px; margin: 0 0 20px; }\n  input { width: 100%; padding: 12px; border: 1px solid #e5e7eb; border-radius: 6px; font-size: 20px; letter-spacing: 3px; text-align: center; text-transform: uppercase; box-sizing: border-box; }\n  button { width: 100%; margin-top: 12px; padding: 12px; border: 1px solid #2563eb; border-radius: 6px; background: #2563eb; color: #fff; font-size: 15px; cursor: pointer; }\n  button:disabled { opacity: .5; cursor: default; }\n  .err { color: #dc2626; font-size: 13px; margin-top: 12px; min-height: 18px; }\n</style>\n</head>\n<body>\n<main>\n  <h1>Set up AgEnD</h1>\n  <p>Enter the setup code shown in the terminal where you ran <code>agend setup</code>.</p>\n  <form id=\"f\">\n    <input id=\"code\" autocomplete=\"off\" autocapitalize=\"characters\" spellcheck=\"false\" placeholder=\"ABCD-EFGH\" maxlength=\"12\" autofocus>\n    <button id=\"go\" type=\"submit\">Continue</button>\n  </form>\n  <div class=\"err\" id=\"msg\"></div>\n</main>\n<script>\n(() => {\n  \"use strict\";\n  const msg = document.getElementById(\"msg\");\n  const go = document.getElementById(\"go\");\n  document.getElementById(\"f\").addEventListener(\"submit\", async (event) => {\n    event.preventDefault();\n    go.disabled = true;\n    msg.textContent = \"\";\n    let res;\n    try {\n      res = await fetch(\"open\", {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ code: document.getElementById(\"code\").value }),\n      });\n    } catch {\n      msg.textContent = \"Could not reach the setup page.\";\n      go.disabled = false;\n      return;\n    }\n    if (res.ok) { location.reload(); return; }\n    let body = null; try { body = await res.json(); } catch {}\n    msg.textContent = (body && body.error) || \"That code was not accepted.\";\n    // A spent budget ends the page; there is nothing useful left to type into.\n    if (res.status !== 410) go.disabled = false;\n  });\n})();\n</script>\n</body>\n</html>\n";
-export declare const SETUP_FORM_HTML = "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Set up AgEnD</title>\n<style>\n  * { box-sizing: border-box; }\n  body { font-family: Inter, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; margin: 0; background: #ffffff; color: #111827; }\n  main { max-width: 640px; margin: 0 auto; padding: 32px 20px 64px; }\n  h1 { font-size: 20px; margin: 0 0 4px; }\n  .sub { color: #6b7280; font-size: 13px; }\n  .step { border: 1px solid #e5e7eb; border-radius: 8px; padding: 16px; margin-top: 16px; }\n  .step h2 { font-size: 14px; margin: 0 0 12px; }\n  label { display: block; font-size: 13px; font-weight: 600; margin: 12px 0 4px; }\n  input, select { width: 100%; padding: 8px 10px; border: 1px solid #e5e7eb; border-radius: 6px; font-size: 14px; }\n  button { padding: 8px 14px; border: 1px solid #e5e7eb; border-radius: 6px; background: #fff; font-size: 14px; cursor: pointer; }\n  button.primary { background: #2563eb; color: #fff; border-color: #2563eb; }\n  button:disabled { opacity: .5; cursor: default; }\n  .row { display: flex; gap: 8px; align-items: center; margin-top: 12px; flex-wrap: wrap; }\n  .msg { font-size: 13px; }\n  .ok { color: #059669; } .err { color: #dc2626; }\n  pre { background: #f9fafb; border: 1px solid #e5e7eb; border-radius: 6px; padding: 12px; font-size: 12px; overflow: auto; }\n</style>\n</head>\n<body>\n<main>\n  <h1>Set up AgEnD</h1>\n  <div class=\"sub\" id=\"intro\">This page is open only while setup is running. It closes itself when you finish, or after 15 minutes.</div>\n\n  <div class=\"step\">\n    <h2>1 \u00B7 Agent</h2>\n    <label for=\"backend\">Backend</label>\n    <select id=\"backend\"></select>\n    <div class=\"sub\" id=\"backendHint\"></div>\n    <label for=\"dir\">Working directory (absolute path)</label>\n    <input id=\"dir\" placeholder=\"/home/you/projects/app\">\n    <label for=\"name\">First agent name</label>\n    <input id=\"name\" value=\"agent-1\">\n  </div>\n\n  <div class=\"step\">\n    <h2>2 \u00B7 Platform</h2>\n    <div class=\"row\">\n      <button id=\"pickTelegram\" class=\"primary\">Telegram</button>\n      <button id=\"pickDiscord\">Discord</button>\n    </div>\n    <div class=\"sub\" id=\"platformHint\">Create a bot with @BotFather, then add it to a group.</div>\n  </div>\n\n  <div class=\"step\">\n    <h2>3 \u00B7 Credentials</h2>\n    <label for=\"token\">Bot token</label>\n    <input id=\"token\" type=\"password\" placeholder=\"123456:ABC-DEF\u2026\">\n    <div class=\"sub\">Written to ~/.agend/.env and never shown again.</div>\n    <label for=\"tokenEnv\">Environment variable</label>\n    <input id=\"tokenEnv\" value=\"AGEND_BOT_TOKEN\">\n    <div class=\"row\"><button id=\"verify\">Verify</button><span class=\"msg\" id=\"verifyMsg\"></span></div>\n    <div id=\"platformFields\"></div>\n  </div>\n\n  <div class=\"step\">\n    <h2>4 \u00B7 Review and start</h2>\n    <div class=\"row\"><button id=\"preview\">Show what will be written</button></div>\n    <pre id=\"planOut\" hidden></pre>\n    <div class=\"row\"><button id=\"finish\" class=\"primary\" disabled>Create and start AgEnD</button><span class=\"msg\" id=\"finishMsg\"></span></div>\n  </div>\n</main>\n<script>\n(() => {\n  \"use strict\";\n  const $ = (id) => document.getElementById(id);\n  const state = { platform: \"telegram\", identity: null, guilds: [], offset: 0, plan: null };\n  // Relative to the page's own directory, which is /s/<sid>/. An absolute path\n  // would leave that namespace and 404 \u2014 the sid is where this page lives, not\n  // a prefix bolted on to it.\n  const api = async (path, opts) => {\n    const res = await fetch(path, Object.assign({ headers: { \"Content-Type\": \"application/json\" } }, opts || {}));\n    let body = null; try { body = await res.json(); } catch {}\n    return { ok: res.ok, status: res.status, body };\n  };\n\n  async function loadEnvironment() {\n    const res = await api(\"api/settings/quickstart/environment\");\n    const backends = res.body?.backends || [];\n    $(\"backend\").innerHTML = \"\";\n    for (const name of backends.length ? backends : [\"claude-code\"]) {\n      const opt = document.createElement(\"option\"); opt.value = name; opt.textContent = name; $(\"backend\").append(opt);\n    }\n    $(\"backendHint\").textContent = backends.length\n      ? \"Found on this host: \" + backends.join(\", \")\n      : \"No backend CLI found on this host \u2014 install one first.\";\n  }\n\n  function setPlatform(platform) {\n    state.platform = platform;\n    state.identity = null; $(\"verifyMsg\").textContent = \"\";\n    $(\"pickTelegram\").className = platform === \"telegram\" ? \"primary\" : \"\";\n    $(\"pickDiscord\").className = platform === \"discord\" ? \"primary\" : \"\";\n    $(\"platformHint\").textContent = platform === \"telegram\"\n      ? \"Create a bot with @BotFather, then add it to a group.\"\n      : \"Create an application in the Discord developer portal and invite the bot to your server.\";\n    renderPlatformFields();\n  }\n\n  // Only the ids that platform has \u2014 the same question the CLI asks.\n  function renderPlatformFields() {\n    const host = $(\"platformFields\"); host.innerHTML = \"\";\n    const field = (id, labelText, hint) => {\n      const label = document.createElement(\"label\"); label.textContent = labelText; label.htmlFor = id;\n      const input = document.createElement(\"input\"); input.id = id;\n      host.append(label, input);\n      if (hint) { const h = document.createElement(\"div\"); h.className = \"sub\"; h.textContent = hint; host.append(h); }\n      return input;\n    };\n    if (state.platform === \"discord\") {\n      const guild = document.createElement(\"select\"); guild.id = \"guild\";\n      const label = document.createElement(\"label\"); label.textContent = \"Server (guild)\"; label.htmlFor = \"guild\";\n      host.append(label, guild);\n      for (const g of state.guilds) { const opt = document.createElement(\"option\"); opt.value = g.id; opt.textContent = g.name + \" (\" + g.id + \")\"; guild.append(opt); }\n      field(\"general\", \"General channel id\");\n      field(\"admin\", \"Your Discord user id\", \"Becomes the first allowed user.\");\n    } else {\n      field(\"group\", \"Group id\", \"Or post any message in the group and press Detect.\");\n      const row = document.createElement(\"div\"); row.className = \"row\";\n      const detect = document.createElement(\"button\"); detect.textContent = \"Detect from a message\";\n      detect.onclick = detectGroup; row.append(detect);\n      const msg = document.createElement(\"span\"); msg.className = \"msg\"; msg.id = \"detectMsg\"; row.append(msg);\n      host.append(row);\n      field(\"admin\", \"Your Telegram user id\", \"Becomes the first allowed user.\");\n    }\n  }\n\n  async function detectGroup() {\n    $(\"detectMsg\").textContent = \"Waiting for a message in the group\u2026\";\n    const res = await api(\"api/settings/quickstart/probe\", { method: \"POST\", body: JSON.stringify({ action: \"await-telegram-start\", token: $(\"token\").value.trim(), offset: state.offset }) });\n    if (!res.ok) { $(\"detectMsg\").textContent = res.body?.error || \"Failed.\"; return; }\n    state.offset = res.body.offset;\n    if (res.body.found) {\n      $(\"group\").value = String(res.body.found.groupId);\n      $(\"admin\").value = String(res.body.found.userId);\n      $(\"detectMsg\").textContent = \"Found.\";\n    } else $(\"detectMsg\").textContent = \"No group message yet \u2014 post one and press Detect again.\";\n  }\n\n  function input() {\n    return {\n      platform: state.platform,\n      token_env: $(\"tokenEnv\").value.trim(),\n      backend: $(\"backend\").value,\n      working_directory: $(\"dir\").value.trim(),\n      instance_name: $(\"name\").value.trim(),\n      group_id: $(\"group\") ? $(\"group\").value.trim() || undefined : undefined,\n      guild_id: $(\"guild\") ? $(\"guild\").value || undefined : undefined,\n      general_channel_id: $(\"general\") ? $(\"general\").value.trim() || undefined : undefined,\n      admin_user_id: $(\"admin\") ? $(\"admin\").value.trim() || undefined : undefined,\n    };\n  }\n\n  $(\"verify\").onclick = async () => {\n    $(\"verifyMsg\").textContent = \"Asking the provider\u2026\";\n    const token = $(\"token\").value.trim();\n    const res = await api(\"api/settings/quickstart/probe\", { method: \"POST\", body: JSON.stringify({ action: \"verify\", platform: state.platform, token }) });\n    state.identity = res.body?.identity || { valid: false };\n    $(\"verifyMsg\").className = \"msg \" + (state.identity.valid ? \"ok\" : \"err\");\n    $(\"verifyMsg\").textContent = state.identity.valid ? \"\u2713 \" + (state.identity.username || \"verified\") : \"\u2717 \" + (state.identity.reason || \"rejected\");\n    if (state.identity.valid && state.platform === \"discord\") {\n      const guilds = await api(\"api/settings/quickstart/probe\", { method: \"POST\", body: JSON.stringify({ action: \"guilds\", token }) });\n      state.guilds = guilds.body?.guilds || [];\n      renderPlatformFields();\n    }\n  };\n\n  $(\"preview\").onclick = async () => {\n    const res = await api(\"api/settings/quickstart/plan\", { method: \"POST\", body: JSON.stringify(input()) });\n    if (!res.ok) { $(\"planOut\").hidden = false; $(\"planOut\").textContent = res.body?.error || \"Failed.\"; return; }\n    state.plan = res.body;\n    $(\"planOut\").hidden = false;\n    $(\"planOut\").textContent = JSON.stringify(res.body, null, 2);\n    $(\"finish\").disabled = !state.identity?.valid;\n  };\n\n  $(\"finish\").onclick = async () => {\n    $(\"finish\").disabled = true;\n    $(\"finishMsg\").textContent = \"Writing configuration\u2026\";\n    const commit = await api(\"api/settings/quickstart/commit\", { method: \"POST\", body: JSON.stringify(Object.assign({}, input(), { token: $(\"token\").value.trim() })) });\n    if (!commit.ok) { $(\"finishMsg\").className = \"msg err\"; $(\"finishMsg\").textContent = commit.body?.error || \"Failed.\"; $(\"finish\").disabled = false; return; }\n    const finished = await api(\"setup/finish\", { method: \"POST\" });\n    $(\"finishMsg\").className = \"msg\";\n    if (finished.body && finished.body.watch === false) {\n      // Behind a tunnel this page and its hostname are both about to stop\n      // existing, so there is nothing here to watch. And the dashboard is not\n      // the thing to promise: it binds loopback, so a link to it is one this\n      // phone cannot open. The channel is what was just set up, and it is\n      // where the agent will be.\n      $(\"finishMsg\").className = \"msg ok\";\n      $(\"finishMsg\").textContent = \"AgEnD is starting. Talk to it in the channel you just set up \u2014 this page is done.\";\n      return;\n    }\n    $(\"finishMsg\").textContent = \"Starting AgEnD\u2026 this page will stop responding while the port changes hands.\";\n    waitForFleet();\n  };\n\n  // The host is gone; the fleet is binding the same port. Connection refused is\n  // the expected state in between, so it is not an error until the cap.\n  function waitForFleet() {\n    const deadline = Date.now() + 60_000;\n    const tick = async () => {\n      try {\n        const res = await fetch(\"/health\", { cache: \"no-store\" });\n        if (res.status) {\n          $(\"finishMsg\").className = \"msg ok\";\n          $(\"finishMsg\").textContent = \"AgEnD is up. Talk to it in the channel you just set up.\";\n          return;\n        }\n      } catch { /* not listening yet */ }\n      if (Date.now() > deadline) {\n        $(\"finishMsg\").className = \"msg err\";\n        $(\"finishMsg\").textContent = \"AgEnD has not come up within 60 seconds. Run `agend start` on the machine itself and check fleet.log \u2014 this page cannot tell you any more.\";\n        return;\n      }\n      setTimeout(tick, 1000);\n    };\n    setTimeout(tick, 1500);\n  }\n\n  $(\"pickTelegram\").onclick = () => setPlatform(\"telegram\");\n  $(\"pickDiscord\").onclick = () => setPlatform(\"discord\");\n  loadEnvironment();\n  setPlatform(\"telegram\");\n})();\n</script>\n</body>\n</html>\n";
+export declare const SETUP_FORM_HTML = "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Set up AgEnD</title>\n<style>\n  * { box-sizing: border-box; }\n  body { font-family: Inter, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; margin: 0; background: #ffffff; color: #111827; }\n  main { max-width: 640px; margin: 0 auto; padding: 32px 20px 64px; }\n  h1 { font-size: 20px; margin: 0 0 4px; }\n  .sub { color: #6b7280; font-size: 13px; }\n  .step { border: 1px solid #e5e7eb; border-radius: 8px; padding: 16px; margin-top: 16px; }\n  .step h2 { font-size: 14px; margin: 0 0 12px; }\n  label { display: block; font-size: 13px; font-weight: 600; margin: 12px 0 4px; }\n  input, select { width: 100%; padding: 8px 10px; border: 1px solid #e5e7eb; border-radius: 6px; font-size: 14px; }\n  button { padding: 8px 14px; border: 1px solid #e5e7eb; border-radius: 6px; background: #fff; font-size: 14px; cursor: pointer; }\n  button.primary { background: #2563eb; color: #fff; border-color: #2563eb; }\n  button:disabled { opacity: .5; cursor: default; }\n  .row { display: flex; gap: 8px; align-items: center; margin-top: 12px; flex-wrap: wrap; }\n  .msg { font-size: 13px; }\n  .ok { color: #059669; } .err { color: #dc2626; }\n  pre { background: #f9fafb; border: 1px solid #e5e7eb; border-radius: 6px; padding: 12px; font-size: 12px; overflow: auto; }\n</style>\n</head>\n<body>\n<main>\n  <h1>Set up AgEnD</h1>\n  <div class=\"sub\" id=\"intro\">This page is open only while setup is running. It closes itself when you finish, or after 15 minutes.</div>\n\n  <div class=\"step\">\n    <h2>1 \u00B7 Agent</h2>\n    <label for=\"backend\">Backend</label>\n    <select id=\"backend\"></select>\n    <div class=\"sub\" id=\"backendHint\"></div>\n    <label for=\"dir\">Working directory (absolute path)</label>\n    <input id=\"dir\" placeholder=\"/home/you/projects/app\">\n    <label for=\"name\">First agent name</label>\n    <input id=\"name\" value=\"agent-1\">\n  </div>\n\n  <div class=\"step\">\n    <h2>2 \u00B7 Platform</h2>\n    <div class=\"row\">\n      <button id=\"pickTelegram\" class=\"primary\">Telegram</button>\n      <button id=\"pickDiscord\">Discord</button>\n    </div>\n    <div class=\"sub\" id=\"platformHint\">Create a bot with @BotFather, then add it to a group.</div>\n  </div>\n\n  <div class=\"step\">\n    <h2>3 \u00B7 Credentials</h2>\n    <label for=\"token\">Bot token</label>\n    <input id=\"token\" type=\"password\" placeholder=\"123456:ABC-DEF\u2026\">\n    <div class=\"sub\">Written to ~/.agend/.env and never shown again.</div>\n    <label for=\"tokenEnv\">Environment variable</label>\n    <input id=\"tokenEnv\" value=\"AGEND_BOT_TOKEN\">\n    <div class=\"row\"><button id=\"verify\">Verify</button><span class=\"msg\" id=\"verifyMsg\"></span></div>\n    <div id=\"platformFields\"></div>\n  </div>\n\n  <div class=\"step\">\n    <h2>4 \u00B7 Review and start</h2>\n    <div class=\"row\"><button id=\"preview\">Show what will be written</button></div>\n    <pre id=\"planOut\" hidden></pre>\n    <div class=\"row\"><button id=\"finish\" class=\"primary\" disabled>Create and start AgEnD</button><span class=\"msg\" id=\"finishMsg\"></span></div>\n  </div>\n</main>\n<script>\n(() => {\n  \"use strict\";\n  const $ = (id) => document.getElementById(id);\n  const state = { platform: \"telegram\", identity: null, guilds: [], offset: 0, plan: null };\n  // Relative to the page's own directory, which is /s/<sid>/. An absolute path\n  // would leave that namespace and 404 \u2014 the sid is where this page lives, not\n  // a prefix bolted on to it.\n  const api = async (path, opts) => {\n    const res = await fetch(path, Object.assign({ headers: { \"Content-Type\": \"application/json\" } }, opts || {}));\n    let body = null; try { body = await res.json(); } catch {}\n    return { ok: res.ok, status: res.status, body };\n  };\n\n  async function loadEnvironment() {\n    const res = await api(\"api/settings/quickstart/environment\");\n    if (formFrozen) return;\n    const backends = res.body?.backends || [];\n    $(\"backend\").innerHTML = \"\";\n    for (const name of backends.length ? backends : [\"claude-code\"]) {\n      const opt = document.createElement(\"option\"); opt.value = name; opt.textContent = name; $(\"backend\").append(opt);\n    }\n    $(\"backendHint\").textContent = backends.length\n      ? \"Found on this host: \" + backends.join(\", \")\n      : \"No backend CLI found on this host \u2014 install one first.\";\n  }\n\n  function setPlatform(platform) {\n    if (formFrozen) return;\n    state.platform = platform;\n    state.identity = null; $(\"verifyMsg\").textContent = \"\";\n    $(\"pickTelegram\").className = platform === \"telegram\" ? \"primary\" : \"\";\n    $(\"pickDiscord\").className = platform === \"discord\" ? \"primary\" : \"\";\n    $(\"platformHint\").textContent = platform === \"telegram\"\n      ? \"Create a bot with @BotFather, then add it to a group.\"\n      : \"Create an application in the Discord developer portal and invite the bot to your server.\";\n    renderPlatformFields();\n  }\n\n  // Only the ids that platform has \u2014 the same question the CLI asks.\n  function renderPlatformFields() {\n    if (formFrozen) return;\n    const host = $(\"platformFields\"); host.innerHTML = \"\";\n    const field = (id, labelText, hint) => {\n      const label = document.createElement(\"label\"); label.textContent = labelText; label.htmlFor = id;\n      const input = document.createElement(\"input\"); input.id = id;\n      host.append(label, input);\n      if (hint) { const h = document.createElement(\"div\"); h.className = \"sub\"; h.textContent = hint; host.append(h); }\n      return input;\n    };\n    if (state.platform === \"discord\") {\n      const guild = document.createElement(\"select\"); guild.id = \"guild\";\n      const label = document.createElement(\"label\"); label.textContent = \"Server (guild)\"; label.htmlFor = \"guild\";\n      host.append(label, guild);\n      for (const g of state.guilds) { const opt = document.createElement(\"option\"); opt.value = g.id; opt.textContent = g.name + \" (\" + g.id + \")\"; guild.append(opt); }\n      field(\"general\", \"General channel id\");\n      field(\"admin\", \"Your Discord user id\", \"Becomes the first allowed user.\");\n    } else {\n      field(\"group\", \"Group id\", \"Or post any message in the group and press Detect.\");\n      const row = document.createElement(\"div\"); row.className = \"row\";\n      const detect = document.createElement(\"button\"); detect.id = \"detect\"; detect.textContent = \"Detect from a message\";\n      detect.onclick = detectGroup; row.append(detect);\n      const msg = document.createElement(\"span\"); msg.className = \"msg\"; msg.id = \"detectMsg\"; row.append(msg);\n      host.append(row);\n      field(\"admin\", \"Your Telegram user id\", \"Becomes the first allowed user.\");\n    }\n  }\n\n  async function detectGroup() {\n    if (formFrozen) return;\n    $(\"detectMsg\").textContent = \"Waiting for a message in the group\u2026\";\n    const res = await api(\"api/settings/quickstart/probe\", { method: \"POST\", body: JSON.stringify({ action: \"await-telegram-start\", token: $(\"token\").value.trim(), offset: state.offset }) });\n    if (formFrozen) return;\n    if (!res.ok) { $(\"detectMsg\").textContent = res.body?.error || \"Failed.\"; return; }\n    state.offset = res.body.offset;\n    if (res.body.found) {\n      $(\"group\").value = String(res.body.found.groupId);\n      $(\"admin\").value = String(res.body.found.userId);\n      $(\"detectMsg\").textContent = \"Found.\";\n    } else $(\"detectMsg\").textContent = \"No group message yet \u2014 post one and press Detect again.\";\n  }\n\n  function input() {\n    return {\n      platform: state.platform,\n      token_env: $(\"tokenEnv\").value.trim(),\n      backend: $(\"backend\").value,\n      working_directory: $(\"dir\").value.trim(),\n      instance_name: $(\"name\").value.trim(),\n      group_id: $(\"group\") ? $(\"group\").value.trim() || undefined : undefined,\n      guild_id: $(\"guild\") ? $(\"guild\").value || undefined : undefined,\n      general_channel_id: $(\"general\") ? $(\"general\").value.trim() || undefined : undefined,\n      admin_user_id: $(\"admin\") ? $(\"admin\").value.trim() || undefined : undefined,\n    };\n  }\n\n  $(\"verify\").onclick = async () => {\n    if (formFrozen) return;\n    $(\"verifyMsg\").textContent = \"Asking the provider\u2026\";\n    const token = $(\"token\").value.trim();\n    const res = await api(\"api/settings/quickstart/probe\", { method: \"POST\", body: JSON.stringify({ action: \"verify\", platform: state.platform, token }) });\n    if (formFrozen) return;\n    state.identity = res.body?.identity || { valid: false };\n    $(\"verifyMsg\").className = \"msg \" + (state.identity.valid ? \"ok\" : \"err\");\n    $(\"verifyMsg\").textContent = state.identity.valid ? \"\u2713 \" + (state.identity.username || \"verified\") : \"\u2717 \" + (state.identity.reason || \"rejected\");\n    if (state.identity.valid && state.platform === \"discord\") {\n      const guilds = await api(\"api/settings/quickstart/probe\", { method: \"POST\", body: JSON.stringify({ action: \"guilds\", token }) });\n      if (formFrozen) return;\n      state.guilds = guilds.body?.guilds || [];\n      renderPlatformFields();\n    }\n  };\n\n  $(\"preview\").onclick = async () => {\n    if (formFrozen) return;\n    const res = await api(\"api/settings/quickstart/plan\", { method: \"POST\", body: JSON.stringify(input()) });\n    if (formFrozen) return;\n    if (!res.ok) { $(\"planOut\").hidden = false; $(\"planOut\").textContent = res.body?.error || \"Failed.\"; return; }\n    state.plan = res.body;\n    $(\"planOut\").hidden = false;\n    $(\"planOut\").textContent = JSON.stringify(res.body, null, 2);\n    $(\"finish\").disabled = !state.identity?.valid;\n  };\n\n  let approvedSetup = false;\n  let formFrozen = false;\n  let submission = null;\n  let pollGeneration = 0;\n  const freezeFields = (frozen) => {\n    formFrozen = frozen;\n    for (const field of document.querySelectorAll(\"main input, main select, #verify, #preview, #pickTelegram, #pickDiscord, #detect\")) field.disabled = frozen;\n  };\n  const restoreEditing = (message) => {\n    pollGeneration++; approvedSetup = false; submission = null; state.identity = null;\n    freezeFields(false); $(\"finish\").disabled = true; $(\"finish\").textContent = \"Create and start AgEnD\";\n    $(\"finishMsg\").className = \"msg err\"; $(\"finishMsg\").textContent = message;\n  };\n  for (const field of document.querySelectorAll(\"main input, main select\")) field.addEventListener(\"input\", () => {\n    approvedSetup = false; submission = null; $(\"finish\").textContent = \"Create and start AgEnD\";\n  });\n  const watchPending = (pendingId) => {\n    const generation = ++pollGeneration;\n    freezeFields(true); $(\"finish\").disabled = true;\n    $(\"finishMsg\").textContent = \"On the host, run: agend settings confirm \" + pendingId;\n    const poll = async () => {\n      if (generation !== pollGeneration) return;\n      try {\n        const result = await api(\"api/settings/pending/\" + pendingId);\n        if (generation !== pollGeneration) return;\n        if (!result.ok) { restoreEditing(\"Setup confirmation is no longer available. Review and enter the token again.\"); return; }\n        const pending = result.body;\n        if (pending.state === \"pending\" || pending.state === \"applying\") { setTimeout(poll, 1000); return; }\n        if (pending.state !== \"applied\") { restoreEditing(pending.outcome?.message || \"Change was not applied. Review and enter the token again.\"); return; }\n        approvedSetup = true; submission = null; $(\"finish\").disabled = false; $(\"finish\").textContent = \"Start AgEnD\";\n        $(\"finishMsg\").textContent = \"Configuration confirmed. Select Start AgEnD to finish setup.\";\n      } catch { if (generation === pollGeneration) setTimeout(poll, 1000); }\n    };\n    setTimeout(poll, 1000);\n  };\n  $(\"finish\").onclick = async () => {\n    $(\"finish\").disabled = true;\n    try {\n      if (approvedSetup) {\n        const finished = await api(\"setup/finish\", { method: \"POST\" });\n        if (!finished.ok) { restoreEditing(finished.body?.error || \"Confirmation is no longer current.\"); return; }\n        $(\"finishMsg\").textContent = \"AgEnD is starting. Continue in the channel you configured.\";\n        if (finished.body?.watch !== false) waitForFleet();\n        return;\n      }\n      // Preserve bytes and key on a lost HTTP response; a deliberate retry after\n      // a terminal outcome receives a new key and requires secret reentry.\n      submission ||= { key: crypto.randomUUID(), body: JSON.stringify(Object.assign({}, input(), { token: $(\"token\").value.trim() })) };\n      freezeFields(true);\n      $(\"finishMsg\").textContent = \"Requesting host confirmation\u2026\";\n      const commit = await api(\"api/settings/quickstart/commit\", { method: \"POST\", headers: { \"Content-Type\": \"application/json\", \"Idempotency-Key\": submission.key }, body: submission.body });\n      if (!commit.ok) { restoreEditing(commit.body?.error || \"Failed.\"); return; }\n      if (commit.body?.result !== \"pending_confirmation\" || !commit.body.pending_change?.id) { restoreEditing(\"Expected a pending host confirmation.\"); return; }\n      $(\"token\").value = \"\"; submission = null;\n      watchPending(commit.body.pending_change.id);\n    } catch { $(\"finishMsg\").textContent = \"Connection failed. Retry to find the same confirmation.\"; $(\"finish\").disabled = false; }\n  };\n  // Same-cookie reloads rediscover an unresolved consent request without a secret.\n  api(\"api/settings/pending\").then(result => {\n    const pending = result.ok && Array.isArray(result.body) && result.body.find(item => item.state === \"pending\" || item.state === \"applying\");\n    if (pending) { watchPending(pending.id); return; }\n    api(\"setup/status\").then(status => {\n      if (!status.ok || !status.body?.finish_ready || submission || pollGeneration) return;\n      approvedSetup = true; freezeFields(true); $(\"finish\").disabled = false; $(\"finish\").textContent = \"Start AgEnD\";\n      $(\"finishMsg\").textContent = \"Configuration confirmed. Select Start AgEnD to finish setup.\";\n    }).catch(() => {});\n  }).catch(() => {});\n\n  // The host is gone; the fleet is binding the same port. Connection refused is\n  // the expected state in between, so it is not an error until the cap.\n  function waitForFleet() {\n    const deadline = Date.now() + 60_000;\n    const tick = async () => {\n      try {\n        const res = await fetch(\"/health\", { cache: \"no-store\" });\n        if (res.status) {\n          $(\"finishMsg\").className = \"msg ok\";\n          $(\"finishMsg\").textContent = \"AgEnD is up. Talk to it in the channel you just set up.\";\n          return;\n        }\n      } catch { /* not listening yet */ }\n      if (Date.now() > deadline) {\n        $(\"finishMsg\").className = \"msg err\";\n        $(\"finishMsg\").textContent = \"AgEnD has not come up within 60 seconds. Run `agend start` on the machine itself and check fleet.log \u2014 this page cannot tell you any more.\";\n        return;\n      }\n      setTimeout(tick, 1000);\n    };\n    setTimeout(tick, 1500);\n  }\n\n  $(\"pickTelegram\").onclick = () => setPlatform(\"telegram\");\n  $(\"pickDiscord\").onclick = () => setPlatform(\"discord\");\n  loadEnvironment();\n  setPlatform(\"telegram\");\n})();\n</script>\n</body>\n</html>\n";

package/dist/setup-form.js

@@ -161,6 +161,7 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
 
   async function loadEnvironment() {
     const res = await api("api/settings/quickstart/environment");
+    if (formFrozen) return;
     const backends = res.body?.backends || [];
     $("backend").innerHTML = "";
     for (const name of backends.length ? backends : ["claude-code"]) {
@@ -172,6 +173,7 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
   }
 
   function setPlatform(platform) {
+    if (formFrozen) return;
     state.platform = platform;
     state.identity = null; $("verifyMsg").textContent = "";
     $("pickTelegram").className = platform === "telegram" ? "primary" : "";
@@ -184,6 +186,7 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
 
   // Only the ids that platform has — the same question the CLI asks.
   function renderPlatformFields() {
+    if (formFrozen) return;
     const host = $("platformFields"); host.innerHTML = "";
     const field = (id, labelText, hint) => {
       const label = document.createElement("label"); label.textContent = labelText; label.htmlFor = id;
@@ -202,7 +205,7 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
     } else {
       field("group", "Group id", "Or post any message in the group and press Detect.");
       const row = document.createElement("div"); row.className = "row";
-      const detect = document.createElement("button"); detect.textContent = "Detect from a message";
+      const detect = document.createElement("button"); detect.id = "detect"; detect.textContent = "Detect from a message";
       detect.onclick = detectGroup; row.append(detect);
       const msg = document.createElement("span"); msg.className = "msg"; msg.id = "detectMsg"; row.append(msg);
       host.append(row);
@@ -211,8 +214,10 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
   }
 
   async function detectGroup() {
+    if (formFrozen) return;
     $("detectMsg").textContent = "Waiting for a message in the group…";
     const res = await api("api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "await-telegram-start", token: $("token").value.trim(), offset: state.offset }) });
+    if (formFrozen) return;
     if (!res.ok) { $("detectMsg").textContent = res.body?.error || "Failed."; return; }
     state.offset = res.body.offset;
     if (res.body.found) {
@@ -237,21 +242,26 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
   }
 
   $("verify").onclick = async () => {
+    if (formFrozen) return;
     $("verifyMsg").textContent = "Asking the provider…";
     const token = $("token").value.trim();
     const res = await api("api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "verify", platform: state.platform, token }) });
+    if (formFrozen) return;
     state.identity = res.body?.identity || { valid: false };
     $("verifyMsg").className = "msg " + (state.identity.valid ? "ok" : "err");
     $("verifyMsg").textContent = state.identity.valid ? "✓ " + (state.identity.username || "verified") : "✗ " + (state.identity.reason || "rejected");
     if (state.identity.valid && state.platform === "discord") {
       const guilds = await api("api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "guilds", token }) });
+      if (formFrozen) return;
       state.guilds = guilds.body?.guilds || [];
       renderPlatformFields();
     }
   };
 
   $("preview").onclick = async () => {
+    if (formFrozen) return;
     const res = await api("api/settings/quickstart/plan", { method: "POST", body: JSON.stringify(input()) });
+    if (formFrozen) return;
     if (!res.ok) { $("planOut").hidden = false; $("planOut").textContent = res.body?.error || "Failed."; return; }
     state.plan = res.body;
     $("planOut").hidden = false;
@@ -259,26 +269,73 @@ export const SETUP_FORM_HTML = `<!DOCTYPE html>
     $("finish").disabled = !state.identity?.valid;
   };
 
+  let approvedSetup = false;
+  let formFrozen = false;
+  let submission = null;
+  let pollGeneration = 0;
+  const freezeFields = (frozen) => {
+    formFrozen = frozen;
+    for (const field of document.querySelectorAll("main input, main select, #verify, #preview, #pickTelegram, #pickDiscord, #detect")) field.disabled = frozen;
+  };
+  const restoreEditing = (message) => {
+    pollGeneration++; approvedSetup = false; submission = null; state.identity = null;
+    freezeFields(false); $("finish").disabled = true; $("finish").textContent = "Create and start AgEnD";
+    $("finishMsg").className = "msg err"; $("finishMsg").textContent = message;
+  };
+  for (const field of document.querySelectorAll("main input, main select")) field.addEventListener("input", () => {
+    approvedSetup = false; submission = null; $("finish").textContent = "Create and start AgEnD";
+  });
+  const watchPending = (pendingId) => {
+    const generation = ++pollGeneration;
+    freezeFields(true); $("finish").disabled = true;
+    $("finishMsg").textContent = "On the host, run: agend settings confirm " + pendingId;
+    const poll = async () => {
+      if (generation !== pollGeneration) return;
+      try {
+        const result = await api("api/settings/pending/" + pendingId);
+        if (generation !== pollGeneration) return;
+        if (!result.ok) { restoreEditing("Setup confirmation is no longer available. Review and enter the token again."); return; }
+        const pending = result.body;
+        if (pending.state === "pending" || pending.state === "applying") { setTimeout(poll, 1000); return; }
+        if (pending.state !== "applied") { restoreEditing(pending.outcome?.message || "Change was not applied. Review and enter the token again."); return; }
+        approvedSetup = true; submission = null; $("finish").disabled = false; $("finish").textContent = "Start AgEnD";
+        $("finishMsg").textContent = "Configuration confirmed. Select Start AgEnD to finish setup.";
+      } catch { if (generation === pollGeneration) setTimeout(poll, 1000); }
+    };
+    setTimeout(poll, 1000);
+  };
   $("finish").onclick = async () => {
     $("finish").disabled = true;
-    $("finishMsg").textContent = "Writing configuration…";
-    const commit = await api("api/settings/quickstart/commit", { method: "POST", body: JSON.stringify(Object.assign({}, input(), { token: $("token").value.trim() })) });
-    if (!commit.ok) { $("finishMsg").className = "msg err"; $("finishMsg").textContent = commit.body?.error || "Failed."; $("finish").disabled = false; return; }
-    const finished = await api("setup/finish", { method: "POST" });
-    $("finishMsg").className = "msg";
-    if (finished.body && finished.body.watch === false) {
-      // Behind a tunnel this page and its hostname are both about to stop
-      // existing, so there is nothing here to watch. And the dashboard is not
-      // the thing to promise: it binds loopback, so a link to it is one this
-      // phone cannot open. The channel is what was just set up, and it is
-      // where the agent will be.
-      $("finishMsg").className = "msg ok";
-      $("finishMsg").textContent = "AgEnD is starting. Talk to it in the channel you just set up — this page is done.";
-      return;
-    }
-    $("finishMsg").textContent = "Starting AgEnD… this page will stop responding while the port changes hands.";
-    waitForFleet();
+    try {
+      if (approvedSetup) {
+        const finished = await api("setup/finish", { method: "POST" });
+        if (!finished.ok) { restoreEditing(finished.body?.error || "Confirmation is no longer current."); return; }
+        $("finishMsg").textContent = "AgEnD is starting. Continue in the channel you configured.";
+        if (finished.body?.watch !== false) waitForFleet();
+        return;
+      }
+      // Preserve bytes and key on a lost HTTP response; a deliberate retry after
+      // a terminal outcome receives a new key and requires secret reentry.
+      submission ||= { key: crypto.randomUUID(), body: JSON.stringify(Object.assign({}, input(), { token: $("token").value.trim() })) };
+      freezeFields(true);
+      $("finishMsg").textContent = "Requesting host confirmation…";
+      const commit = await api("api/settings/quickstart/commit", { method: "POST", headers: { "Content-Type": "application/json", "Idempotency-Key": submission.key }, body: submission.body });
+      if (!commit.ok) { restoreEditing(commit.body?.error || "Failed."); return; }
+      if (commit.body?.result !== "pending_confirmation" || !commit.body.pending_change?.id) { restoreEditing("Expected a pending host confirmation."); return; }
+      $("token").value = ""; submission = null;
+      watchPending(commit.body.pending_change.id);
+    } catch { $("finishMsg").textContent = "Connection failed. Retry to find the same confirmation."; $("finish").disabled = false; }
   };
+  // Same-cookie reloads rediscover an unresolved consent request without a secret.
+  api("api/settings/pending").then(result => {
+    const pending = result.ok && Array.isArray(result.body) && result.body.find(item => item.state === "pending" || item.state === "applying");
+    if (pending) { watchPending(pending.id); return; }
+    api("setup/status").then(status => {
+      if (!status.ok || !status.body?.finish_ready || submission || pollGeneration) return;
+      approvedSetup = true; freezeFields(true); $("finish").disabled = false; $("finish").textContent = "Start AgEnD";
+      $("finishMsg").textContent = "Configuration confirmed. Select Start AgEnD to finish setup.";
+    }).catch(() => {});
+  }).catch(() => {});
 
   // The host is gone; the fleet is binding the same port. Connection refused is
   // the expected state in between, so it is not an error until the cap.

package/dist/setup-form.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-form.js","sourceRoot":"","sources":["../src/setup-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DnC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0O9B,CAAC"}
+{"version":3,"file":"setup-form.js","sourceRoot":"","sources":["../src/setup-form.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DnC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmS9B,CAAC"}

package/dist/setup-guide.d.ts

@@ -0,0 +1,13 @@
+/** Locale-keyed setup guide URLs per platform. */
+export declare const SETUP_GUIDE_URLS: {
+    readonly telegram: {
+        readonly en: "https://songsid.github.io/AgEnD/setup-telegram/";
+        readonly "zh-TW": "https://songsid.github.io/AgEnD/zh-tw/setup-telegram/";
+    };
+    readonly discord: {
+        readonly en: "https://songsid.github.io/AgEnD/setup-discord/";
+        readonly "zh-TW": "https://songsid.github.io/AgEnD/zh-tw/setup-discord/";
+    };
+};
+/** Returns the locale-appropriate setup guide URL for the given platform. */
+export declare function setupGuideUrl(platform: "telegram" | "discord"): string;

package/dist/setup-guide.js

@@ -0,0 +1,25 @@
+/**
+ * Setup guide URLs for the bot-token steps in quickstart and the setup wizard.
+ *
+ * A single constant used by both src/quickstart.ts and src/setup-wizard.ts to
+ * avoid duplication and prevent a circular import (quickstart imports from
+ * setup-wizard, so the URLs must live in a third module that both can import).
+ */
+import { getLocale } from "./locale.js";
+/** Locale-keyed setup guide URLs per platform. */
+export const SETUP_GUIDE_URLS = {
+    telegram: {
+        en: "https://songsid.github.io/AgEnD/setup-telegram/",
+        "zh-TW": "https://songsid.github.io/AgEnD/zh-tw/setup-telegram/",
+    },
+    discord: {
+        en: "https://songsid.github.io/AgEnD/setup-discord/",
+        "zh-TW": "https://songsid.github.io/AgEnD/zh-tw/setup-discord/",
+    },
+};
+/** Returns the locale-appropriate setup guide URL for the given platform. */
+export function setupGuideUrl(platform) {
+    const locale = getLocale();
+    return SETUP_GUIDE_URLS[platform][locale === "zh-TW" ? "zh-TW" : "en"];
+}
+//# sourceMappingURL=setup-guide.js.map

package/dist/setup-guide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-guide.js","sourceRoot":"","sources":["../src/setup-guide.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,kDAAkD;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE;QACR,EAAE,EAAE,iDAAiD;QACrD,OAAO,EAAE,uDAAuD;KACjE;IACD,OAAO,EAAE;QACP,EAAE,EAAE,gDAAgD;QACpD,OAAO,EAAE,sDAAsD;KAChE;CACO,CAAC;AAEX,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,QAAgC;IAC5D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC"}

package/dist/setup-host.d.ts

@@ -67,6 +67,8 @@ export declare class SetupHost {
     private get basePath();
     private managedTunnel;
     private tunnelHandle;
+    private tunnelStartup;
+    private tunnelAbort;
     /** The exact host the tunnel answers on; nothing else is added to the set. */
     private externalHost;
     private tunnelStopResult;
@@ -80,6 +82,19 @@ export declare class SetupHost {
      * "starting", and no fleet.
      */
     private handoverRequested;
+    private confirmation;
+    private confirmationControl;
+    private setupContext;
+    private committedFingerprint;
+    private committedOwner;
+    private committedExecution;
+    private committedApproved;
+    private startedAt;
+    private admittedFinish;
+    private shutdownPromise;
+    private confirmationGate;
+    private finishReady;
+    private finishSetup;
     private get ttlMs();
     private get idleMs();
     private log;
@@ -145,6 +160,7 @@ export declare class SetupHost {
      * hang at "starting…" and the fleet would never be spawned.
      */
     shutdown(spawnSuccessor: boolean, reason: string): Promise<void>;
+    private performShutdown;
     /**
      * Whether an unconfirmed tunnel may be left behind while the fleet starts.
      *