@songsid/agend 2.2.0-alpha.9 → 2.2.0-beta.10

package/dist/types.d.ts

@@ -247,6 +247,8 @@ export interface FleetDefaults extends Partial<InstanceConfig> {
      * 0 turns the notice off. The owner reminder is not affected.
      */
     reply_overdue_minutes?: number;
+    /** #1694: hours since the last ask before an open reply obligation expires (default 24; positive finite duration). */
+    reply_obligation_ttl_hours?: number;
     scheduler?: {
         max_schedules?: number;
         default_timezone?: string;
@@ -343,6 +345,12 @@ export interface WebConfig {
     echo_to_channel?: boolean;
     /** Show the AI subscription usage panel on /view and serve /api/ai-usage (default true). */
     usage_panel?: boolean;
+    /**
+     * #1218: the instance Log tab (紀錄) — each agent's steps (prompts, replies, tool calls and results, errors) read on
+     * demand from its own transcript, secrets masked. Default false: off, it does no work at all. Turning it on is an
+     * admin's change, confirmed like any access change (Settings → Web).
+     */
+    log_tab?: boolean;
     /** Expose provider API-key verify/apply endpoints (default false until dark-shipped). */
     provider_secrets?: boolean;
     /**
@@ -359,6 +367,17 @@ export interface WebConfig {
     view_access?: "open" | "session";
     /** Tell the admin channel when someone signs in to the web panel (default true). */
     notify_login?: boolean;
+    /**
+     * #1620: how long a web session lasts. Only the LOCAL surface (the dashboard reached directly — loopback, a LAN, a
+     * tailnet) is configurable; a public-link session's limits stay fixed. Hours, 1 ≤ idle_hours ≤ absolute_hours ≤ 720;
+     * defaults 12 (absolute, from sign-in) and 2 (idle, since the last use). Shortening applies to existing sessions.
+     */
+    session?: {
+        local?: {
+            absolute_hours?: number;
+            idle_hours?: number;
+        };
+    };
     /**
      * #1306: HTML previews in the web chat (default true). false: no preview listener; cards show Source and
      * Download only. Even when true, a browser runs a preview only after that device opted in.
@@ -371,6 +390,12 @@ export interface WebConfig {
      * previews through a tunnel or proxy need one. It must not be a name the dashboard answers to.
      */
     preview_origin?: string;
+    /**
+     * #1723: previews over the temporary public link (default true): the link opens a second quick tunnel of its own
+     * for them, in the background, closed with the link. false: none on the public link. A web.preview_origin is used
+     * instead of it; web.preview: false turns previews off everywhere.
+     */
+    preview_on_public_link?: boolean;
 }
 /** `login:` section — remote /login behaviour. */
 export interface LoginConfig {

package/dist/ui/chat-commands.js

@@ -9,6 +9,7 @@ export const CHAT_COMMANDS = [
   { name: "compact", arg: "[instructions]" },
   { name: "clear", arg: "" },
   { name: "model", arg: "[name]" },
+  { name: "backend", arg: "[backend] [model] [effort]" },
   { name: "effort", arg: "[level]" },
   { name: "cancel", arg: "" },
   { name: "btw", arg: "<question>" },

package/dist/ui/chat-emojis.js

@@ -0,0 +1,33 @@
+// #1630 (design: the comment on #1630): the Discord server emoji the fleet's bots know — GET /ui/emojis, session-gated
+// and served same-origin — so a message's `<:name:id>` / `<a:name:id>` can be drawn as its picture (chat-render.js).
+// Read once per page, and only once a message shows such a tag; until it arrives (or if it fails) every tag stays text.
+// A message drawn before the list arrived is drawn again when it does (the thread replaces what changed).
+
+const TAG = /<a?:[A-Za-z0-9_]{2,32}:\d{15,25}>/;
+const ID = /^\d{15,25}$/;
+
+export function createEmojiIndex(fetchImpl) {
+  let ids = null;          // Set of known ids once read (empty after a failure: no retry on this page)
+  let loading = false;
+  const listeners = new Set();
+  const settle = (next) => { ids = next; for (const f of [...listeners]) f(); };
+  return {
+    known: (id) => !!ids && ids.has(id),
+    /** Any of these messages carries a server-emoji tag. */
+    wants: (msgs) => (msgs || []).some((x) => x && typeof x.text === "string" && TAG.test(x.text)),
+    /** Starts the one read of this page (once). */
+    ensure() {
+      if (ids || loading) return;
+      loading = true;
+      Promise.resolve()
+        .then(() => fetchImpl("/ui/emojis"))
+        .then((r) => (r && r.ok ? r.json() : null))
+        .then((body) => {
+          const next = new Set();
+          if (body && Array.isArray(body.emojis)) for (const e of body.emojis) if (e && typeof e.id === "string" && ID.test(e.id)) next.add(e.id);
+          settle(next);
+        }, () => settle(new Set()));
+    },
+    subscribe(f) { listeners.add(f); return () => listeners.delete(f); },
+  };
+}

package/dist/ui/chat-mentions.js

@@ -0,0 +1,63 @@
+// #1682 (design: the comment on #1682): the names of the Discord mentions a page shows — `<@id>` / `<@!id>` (a user),
+// `<@&id>` (a role), `<#id>` (a channel). Asked from GET /ui/mentions (same-origin; the host answers from memory) only
+// for the ids the page's messages carry, each id once per page, at most MAX_IDS per request. Until a name arrives (or
+// if it never does) the pill reads @user / @role / #channel; when names arrive, the messages are drawn again.
+
+const TOKEN = /<(@!?|@&|#)(\d{15,25})>/g;
+const KIND = { "@": "u", "@!": "u", "@&": "r", "#": "c" };
+const MAX_IDS = 100;
+
+export function createMentionIndex(fetchImpl) {
+  const names = new Map();     // "u:id" → name
+  const asked = new Set();     // "u:id" asked already (answered or not: never again on this page)
+  const listeners = new Set();
+  let inFlight = 0;
+  function idsIn(msgs) {
+    const want = [];
+    for (const x of msgs || []) {
+      if (!x || typeof x.text !== "string" || x.text.indexOf("<") === -1) continue;
+      for (const m of x.text.matchAll(TOKEN)) {
+        const key = `${KIND[m[1]]}:${m[2]}`;
+        if (!asked.has(key) && !want.includes(key)) want.push(key);
+      }
+    }
+    return want;
+  }
+  return {
+    /** The name the page knows for a mention, or null (the pill says @user / @role / #channel). */
+    name: (kind, id) => names.get(`${kind}:${id}`) ?? null,
+    /** Ask for the names of the mentions in these messages the page has not asked about yet. */
+    ensure(msgs) {
+      const want = idsIn(msgs);
+      for (let i = 0; i < want.length; i += MAX_IDS) {
+        const batch = want.slice(i, i + MAX_IDS);
+        for (const key of batch) asked.add(key);
+        const params = new URLSearchParams();
+        for (const kind of ["u", "r", "c"]) {
+          const ids = batch.filter((k) => k[0] === kind).map((k) => k.slice(2));
+          if (ids.length) params.set(kind, ids.join(","));
+        }
+        inFlight++;
+        Promise.resolve()
+          .then(() => fetchImpl(`/ui/mentions?${params}`))
+          .then((r) => (r && r.ok ? r.json() : null))
+          .then((body) => {
+            let added = false;
+            for (const kind of ["u", "r", "c"]) {
+              const got = body && typeof body[kind] === "object" && body[kind] ? body[kind] : {};
+              for (const key of batch) {
+                if (key[0] !== kind) continue;
+                const id = key.slice(2);
+                if (Object.prototype.hasOwnProperty.call(got, id) && typeof got[id] === "string" && got[id]) { names.set(key, got[id]); added = true; }
+              }
+            }
+            if (added) for (const f of [...listeners]) f();
+          }, () => {})
+          .finally(() => { inFlight--; });
+      }
+    },
+    subscribe(f) { listeners.add(f); return () => listeners.delete(f); },
+    /** Requests not answered yet (tests). */
+    pending: () => inFlight,
+  };
+}

package/dist/ui/chat-render.js

@@ -51,11 +51,44 @@
     return s;
   }
 
+  // #1630: a Discord server emoji, `<:name:id>` / `<a:name:id>` — escaped by now — drawn as its picture. Only an id the
+  // page knows (the fleet's servers: /ui/emojis) and only from the dashboard's own route; the src is built from the
+  // matched digits, the name (word characters only) goes into alt/title. An unknown id stays the literal text.
+  var EMOJI_RE = /&lt;(a?):([A-Za-z0-9_]{2,32}):(\d{15,25})&gt;/g;
+  function emojiImg(id, name) {
+    return '<img class="emoji" src="/ui/img/emoji/' + id + '" alt=":' + name + ':" title=":' + name + ':" decoding="async">';
+  }
+
+  // #1682: Discord mentions — `<@id>` / `<@!id>` (a user), `<@&id>` (a role), `<#id>` (a channel) — escaped by now (the
+  // role's & too), drawn as a pill: the name the page knows (store.mentions(kind, id), inserted escaped), else @user /
+  // @role / #channel; never the raw token. The id is the token's own digits (title, data-mention: the page fills a
+  // name in later). And a Telegram @username (a letter, then 4–31 word characters; not part of a word, an e-mail
+  // or a path) gets the same look — no lookup, no link. It runs after the links (see inline()).
+  var MENTION_RE = /&lt;(@!?|@&amp;|#)(\d{15,25})&gt;/g;
+  // Not a package or a path either: `@scope/pkg`, `@anthropic-ai/sdk` (followed by - or /) stay text.
+  var TG_MENTION_RE = /(^|[^\w@\/.&;])@([A-Za-z][A-Za-z0-9_]{4,31})(?![\w@\/-])/g;
+  var MENTION_KIND = { "@": "u", "@!": "u", "@&amp;": "r", "#": "c" };
+  var MENTION_UNKNOWN = { u: "@user", r: "@role", c: "#channel" };
+  function mentionPill(kind, id, name) {
+    var label = name ? (kind === "c" ? "#" : "@") + escapeHtml(name) : MENTION_UNKNOWN[kind];
+    return '<span class="mention" data-mention="' + kind + ":" + id + '" title="' + id + '">' + label + "</span>";
+  }
+
   /** Inline Markdown over ALREADY-ESCAPED text. */
   function inline(escaped, store) {
     var s = escaped;
     // `code` first: nothing inside it is Markdown.
-    s = s.replace(/`([^`\n]+)`/g, function (_m, code) { return stash(store, "<code>" + code + "</code>"); });
+    // #1812: in a table cell a path may wrap after its separators — the cell keeps words whole, so without these a long
+    // path held its whole column wide.
+    s = s.replace(/`([^`\n]+)`/g, function (_m, code) { return stash(store, "<code>" + (store.inCell ? code.replace(/\//g, "/<wbr>") : code) + "</code>"); });
+    var known = store.emojis;
+    if (known) s = s.replace(EMOJI_RE, function (m, _a, name, id) { return known(id) ? stash(store, emojiImg(id, name)) : m; });
+    var names = store.mentions;
+    s = s.replace(MENTION_RE, function (_m, sigil, id) {
+      var kind = MENTION_KIND[sigil];
+      var name = names ? names(kind, id) : null;
+      return stash(store, mentionPill(kind, id, typeof name === "string" && name ? name : null));
+    });
     // [label](url)
     s = s.replace(/\[([^\]\n]+)\]\(([^)\s]+)\)/g, function (m, label, url) {
       var href = safeHref(url);
@@ -66,6 +99,8 @@
       var href = safeHref(url);
       return href ? pre + stash(store, link(href, url)) : m;
     });
+    // #1682: a Telegram @username — after the links (a link is stashed by now, so an @ inside a URL is never touched).
+    s = s.replace(TG_MENTION_RE, function (_m, pre, user) { return pre + stash(store, '<span class="mention tg">@' + user + "</span>"); });
     return emphasis(s);
   }
 
@@ -147,7 +182,8 @@
   function renderTable(header, aligns, rows, store) {
     function cell(tag, text, i) {
       var a = aligns[i] ? ' class="al-' + aligns[i] + '"' : "";
-      return "<" + tag + a + ">" + inline(text, store) + "</" + tag + ">";
+      store.inCell = true;
+      try { return "<" + tag + a + ">" + inline(text, store) + "</" + tag + ">"; } finally { store.inCell = false; }
     }
     function row(tag, cells) {
       var out = "";
@@ -273,6 +309,10 @@
     var cards = !!(opts && opts.htmlCards);
     var src = String(text == null ? "" : text).replace(/\r\n?/g, "\n").replace(/\u0000/g, "");   // \u0000 is the placeholder mark
     var store = [];
+    // #1630: which server emoji ids the page knows (a function id → boolean); without it every `<:name:id>` stays text.
+    store.emojis = opts && typeof opts.emojis === "function" ? opts.emojis : null;
+    // #1682: the names the page knows for mentions (a function (kind "u" | "r" | "c", id) → name or null).
+    store.mentions = opts && typeof opts.mentions === "function" ? opts.mentions : null;
     var html = "";
     var re = new RegExp(FENCE_RE.source, "g");
     var last = 0;

package/dist/ui/chat-store.js

@@ -66,7 +66,7 @@ export function createChatStore(deps) {
     if (!m || typeof m.instance !== "string") return;
     const before = s.msgs[m.instance];
     s.msgs[m.instance] = R().mergeMessages(before, [m], 500);
-    if (m.instance === s.current && s.msgs[m.instance] !== before && !isUser(m, m.instance) && (s.msgs[m.instance] || []).length > (before || []).length) deps.announce(tf("chat.a11yReplied", m.sender));
+    if (m.instance === s.current && s.msgs[m.instance] !== before && m.role !== "status" && !isUser(m, m.instance) && (s.msgs[m.instance] || []).length > (before || []).length) deps.announce(tf("chat.a11yReplied", m.sender));
     if (s.msgs[m.instance] !== before) changed(m.instance, "msgs");
   }
   function applyDeliveries(list) {
@@ -300,7 +300,7 @@ export function createChatStore(deps) {
     };
     let r = await post({});
     if (r && r.confirm) {
-      const yes = deps.confirm ? await deps.confirm({ title: `/${command}`, message: r.confirm.message, confirmLabel: t("chat.cmdConfirm"), danger: true }) : false;
+      const yes = deps.confirm ? await deps.confirm({ title: `/${command}`, message: r.confirm.message, confirmLabel: t(command === "backend" ? "chat.cmdConfirmBackend" : "chat.cmdConfirm"), danger: true }) : false;
       if (!yes || !alive()) { delete s.commands[target]; changed(target); return; }
       r = await post({ confirm: r.confirm.token });
     }

package/dist/ui/chat-strings.js

@@ -3,11 +3,11 @@ import { register } from "/assets/app-i18n.js";
 
 register("chat", {
   en: {
-    cmdConfirm: "Clear", cmdRunning: "Running /{0}…", cmdNotCommand: "Not a command here — Enter sends it as a message.", cmdDismiss: "Dismiss", cmdCommands: "Commands",
+    cmdConfirm: "Clear", cmdConfirmBackend: "Switch and restart", cmdRunning: "Running /{0}…", cmdNotCommand: "Not a command here — Enter sends it as a message.", cmdDismiss: "Dismiss", cmdCommands: "Commands",
     cmdChoose: "Choose", cmdCurrent: "current", chipCompact: "Compact", chipClear: "Clear…", chipContext: "Context {0}% used",
     chipModel: "Model: {0} — choose another", chipEffort: "Effort: {0} — choose another",
     cmd_ctx: "Context use, model and effort", cmd_compact: "Compact the conversation", cmd_clear: "Clear the conversation (asks first)",
-    cmd_model: "Show or switch the model", cmd_effort: "Show or set the reasoning effort", cmd_cancel: "Stop the current reply",
+    cmd_model: "Show or switch the model", cmd_backend: "Switch the CLI backend, then model and effort (restarts)", cmd_effort: "Show or set the reasoning effort", cmd_cancel: "Stop the current reply",
     cmd_btw: "A side question that does not interrupt", cmd_steer: "Send into the current turn", cmd_pause: "Pause the instance",
     cmd_wake: "Wake a paused instance", cmd_save: "Save the conversation to a file",
     tourTitle: "Welcome to web chat", tourStep: "{0} of {1}", tourBack: "Back", tourNext: "Next", tourDone: "Got it", tourSkip: "Skip",
@@ -21,15 +21,15 @@ register("chat", {
     dropHere: "Drop files to attach them", asText: "As text", pasteAttached: "A long paste ({0} characters) was attached as a text file", pasteKeptAsText: "No room for another attachment: the long paste stays as text",
     send: "Send", composerPlaceholder: "Message {0}…", composerHint: "Enter to send · Shift+Enter for a new line · / for commands · Esc stops the reply", attachTitle: "Attach files (images, PDF, text — or paste / drop them)",
     pvPreview: "Preview", pvStop: "Stop", pvDownload: "Download", pvMenu: "Preview options", pvHtml: "HTML",
-    pvAllowButton: "Allow previews", pvAllow: "Allow HTML previews on this device — they may be able to send data out", pvDisallow: "Stop allowing HTML previews on this device",
-    pvConfirm: "Allow HTML previews on this device?\n\nA preview runs the agent's HTML in an isolated frame. It cannot use your login, but it may be able to send data out, and it can slow or freeze this tab. You still click Preview each time.",
+    pvAllowButton: "Allow previews", pvAllow: "Allow HTML previews — they may be able to send data out", pvDisallow: "Stop allowing HTML previews",
+    pvConfirm: "Allow HTML previews?\n\nThis applies on every device where you are signed in. A preview runs the agent's HTML in an isolated frame. It cannot use your login, but it may be able to send data out, and it can slow or freeze this tab. You still click Preview each time.",
     pvNever: "Never preview HTML on this device", pvNeverUndo: "Let this device preview HTML again", pvStarting: "Starting the preview…",
     pvChanged: "Preview stopped — the message changed. Preview again.", pvTruncated: "Truncated — ask the agent to send it as a .html file.",
     pvLoading: "Reading the file…", pvAttOver: "This file is over 1 MiB; it is not previewed.",
     pvAttGone: "This file is no longer available here (it changed, or the fleet restarted). Ask the agent to send it again.",
     pvAttFailed: "Could not read this file. Try again.",
     pvBannerAck: "I understand", pvBannerAckTitle: "Hide this notice until you sign in again",
-    attGone: "This file could not be found again after AgEnD restarted (moved, deleted or changed). Ask the agent to send it again.", attUnavailable: "unavailable",
+    attGone: "This file could not be found again after AgEnD restarted (moved, deleted or changed). Ask the agent to send it again.", attUnavailable: "unavailable", yesterdayAt: "Yesterday {0}",
     tcShow: "Show", tcHide: "Hide", tcDownload: "Download", tcShowAll: "Show all {0} lines", tcOver: "This file is over 1 MiB; download it to read it.", tcPlain: "Too large to format here: shown as plain text.",
     rbGroup: "Choices", rbChosen: "Chosen by {0}", rbExpired: "Expired — reply in text",
     pvOpenPanel: "Open in panel", pvInPanel: "Shown in the panel.", pvPanel: "HTML preview", pvSource: "From {0}, {1} — show the message",
@@ -37,8 +37,8 @@ register("chat", {
     pvNewer: "A newer version is in the reply from {0}.", pvNewerShow: "Show it", pvPanelIdle: "Click Preview to run it here.",
     lbLabel: "Image: {0}", lbLabelNoName: "Image", lbClose: "Close", lbOpenOriginal: "Open original", lbPrev: "Previous image", lbNext: "Next image", lbCount: "{0} / {1}",
     // #1554: preview.js's words (its English is the fallback there), and the server's reasons by code.
-    pvWhyOptin: "HTML previews are off on this device (this browser, at this address). Allow them from this card's ⋯ menu or the sidebar.",
-    pvWhyOptinPanel: "HTML previews are off on this device (this browser, at this address).",
+    pvWhyOptin: "HTML previews are off. Allow them from this card's ⋯ menu or Settings → Preferences.",
+    pvWhyOptinPanel: "HTML previews are off.",
     pvWhyNever: "Previews are switched off on this device for this session.",
     pvWhyOrigin: "Previews are off: this page is at {0}, but the fleet believes it is at {1} (a proxy that rewrites Host). Pass the external Host through, or set web.preview_origin.",
     pvUnknownAddress: "an unknown address", pvWhyServer: "Previews are not available here.",
@@ -53,10 +53,19 @@ register("chat", {
     pvServer_needOrigin: "Previews need web.preview_origin when the dashboard is reached through a tunnel or proxy.",
     pvServer_needHttps: "Previews need an https web.preview_origin when the dashboard is reached over https.",
     pvServer_sameOrigin: "The preview origin cannot be the dashboard's own.",
-    pvServer_publicLink: "Previews are not offered over the public link. Open the dashboard on the machine running AgEnD to preview.",
+    pvServer_publicLink: "Previews are off on the public link (web.preview_on_public_link: false). Open the dashboard on the machine running AgEnD to preview.",
+    pvServer_publicLinkStarting: "Preview is starting… — the public link's preview address is being opened; the preview runs here as soon as it is up.",
+    pvServer_publicLinkPreviewFailed: "Previews are unavailable on this public link: {0}. The link itself keeps working.",
+    pvFail_exited: "its address closed unexpectedly", "pvFail_spawn-failed": "cloudflared could not start for it",
+    "pvFail_no-address": "no address was given for it", pvFail_unreachable: "its address could not be reached",
+    "pvFail_lease-held": "an earlier preview tunnel is still being cleaned up", "pvFail_gateway-failed": "its local listener could not start",
+    "pvFail_rate-limited": "Cloudflare is limiting new temporary links from this machine — try again in a while",
+    "pvFail_provisioning-failed": "Cloudflare refused to create its address right now", "pvFail_process-exited": "cloudflared stopped before it gave an address",
+    "pvFail_bad-address": "Cloudflare gave an address that could not be used",
+    pvFail_unknown: "an unexpected error",
     pvServer_notOffered: "Previews are not available on this page.",
-    previews: "Allow HTML previews on this device",
-    copy: "Copy", copyMessage: "Copy this reply", copied: "Copied", copyFailed: "Copy failed", wrap: "Wrap", showAll: "Show all {0} lines", showLess: "Show less", jumpLatest: "Latest", newBelow: "{0} new",
+    previews: "Allow HTML previews",
+    copy: "Copy", copyMessage: "Copy this reply", copied: "Copied", copyFailed: "Copy failed", wrap: "Wrap", showAll: "Show all {0} lines", showMore: "Show more", showLess: "Show less", jumpLatest: "Latest", newBelow: "{0} new",
     disconnected: "disconnected", tick_queued: "Waiting behind another message", tick_processing: "Handed to the agent", tick_delivered: "The agent has it", tick_failed: "Not delivered", tick_cancelled: "Dropped by Stop",
     promptAnswering: "Answering…", promptGone: "This prompt is no longer open", promptFor: "{0}: {1}",
     working: "{0} is working…", stuck: "{0} looks stuck", stopReply: "Stop reply", stopReplyTitle: "Stop the current reply (like Esc) and drop the messages still waiting. The instance keeps running.", stopSent: "Stopped",
@@ -78,11 +87,11 @@ register("chat", {
     configured: "(configured)", fleetDefault: "(fleet default)",
   },
   "zh-TW": {
-    cmdConfirm: "清空", cmdRunning: "執行 /{0} 中…", cmdNotCommand: "這裡沒有這個指令——按 Enter 會當成一般訊息送出。", cmdDismiss: "關閉", cmdCommands: "指令",
+    cmdConfirm: "清空", cmdConfirmBackend: "切換並重新啟動", cmdRunning: "執行 /{0} 中…", cmdNotCommand: "這裡沒有這個指令——按 Enter 會當成一般訊息送出。", cmdDismiss: "關閉", cmdCommands: "指令",
     cmdChoose: "選擇", cmdCurrent: "目前", chipCompact: "壓縮", chipClear: "清空…", chipContext: "已用 {0}% 的 context",
     chipModel: "模型：{0}——選擇其他", chipEffort: "推理強度：{0}——選擇其他",
     cmd_ctx: "context 用量、模型與推理強度", cmd_compact: "壓縮對話", cmd_clear: "清空對話（會先確認）",
-    cmd_model: "查看或切換模型", cmd_effort: "查看或設定推理強度", cmd_cancel: "停止目前的回覆",
+    cmd_model: "查看或切換模型", cmd_backend: "切換 CLI backend，再選模型和推理強度（會重新啟動）", cmd_effort: "查看或設定推理強度", cmd_cancel: "停止目前的回覆",
     cmd_btw: "不打斷目前工作的旁問", cmd_steer: "送進目前這一輪", cmd_pause: "暫停 instance",
     cmd_wake: "喚醒已暫停的 instance", cmd_save: "把對話存成檔案",
     tourTitle: "歡迎使用網頁聊天", tourStep: "{0} / {1}", tourBack: "上一步", tourNext: "下一步", tourDone: "知道了", tourSkip: "略過",
@@ -96,23 +105,23 @@ register("chat", {
     dropHere: "放開即可附加檔案", asText: "改為文字", pasteAttached: "貼上的長文字（{0} 個字元）已改為文字檔附加", pasteKeptAsText: "附件已滿，貼上的長文字保留為一般文字",
     send: "送出", composerPlaceholder: "傳訊息給 {0}…", composerHint: "Enter 送出 · Shift+Enter 換行 · / 叫出指令 · Esc 中止回覆", attachTitle: "附加檔案（圖片、PDF、文字檔，也可以貼上或拖曳）",
     pvPreview: "預覽", pvStop: "停止", pvDownload: "下載", pvMenu: "預覽選項", pvHtml: "HTML",
-    pvAllowButton: "允許預覽", pvAllow: "允許這台裝置預覽 HTML（預覽可能把資料傳出去）", pvDisallow: "不再允許這台裝置預覽 HTML",
-    pvConfirm: "要允許這台裝置預覽 HTML 嗎？\n\n預覽會在隔離的框架裡執行 agent 的 HTML。它無法使用你的登入，但可能把資料傳出去，也可能讓這個分頁變慢或卡住。每次仍需要你按「預覽」。",
+    pvAllowButton: "允許預覽", pvAllow: "允許預覽 HTML（預覽可能把資料傳出去）", pvDisallow: "不再允許預覽 HTML",
+    pvConfirm: "要允許預覽 HTML 嗎？\n\n這會套用到你登入的每一台裝置。預覽會在隔離的框架裡執行 agent 的 HTML。它無法使用你的登入，但可能把資料傳出去，也可能讓這個分頁變慢或卡住。每次仍需要你按「預覽」。",
     pvNever: "這台裝置永不預覽 HTML", pvNeverUndo: "讓這台裝置再次可以預覽 HTML", pvStarting: "正在啟動預覽…",
     pvChanged: "預覽已停止——訊息內容變了。請再預覽一次。", pvTruncated: "內容被截斷——請 agent 改用 .html 檔案傳送。",
     pvLoading: "正在讀取檔案…", pvAttOver: "這個檔案超過 1 MiB，不提供預覽。",
     pvAttGone: "這裡已無法取得這個檔案（檔案已變更，或艦隊已重新啟動）。請 agent 再傳一次。",
     pvAttFailed: "無法讀取這個檔案，請再試一次。",
     pvBannerAck: "我知道了", pvBannerAckTitle: "隱藏這則提醒，直到下次登入",
-    attGone: "AgEnD 重新啟動後找不到這個檔案（已移動、刪除或變更）。請 agent 再傳一次。", attUnavailable: "無法取得",
+    attGone: "AgEnD 重新啟動後找不到這個檔案（已移動、刪除或變更）。請 agent 再傳一次。", attUnavailable: "無法取得", yesterdayAt: "昨天 {0}",
     tcShow: "顯示", tcHide: "收起", tcDownload: "下載", tcShowAll: "顯示全部 {0} 行", tcOver: "這個檔案超過 1 MiB，請下載後閱讀。", tcPlain: "內容太大，無法在這裡排版，改以純文字顯示。",
     rbGroup: "選項", rbChosen: "{0} 已選擇", rbExpired: "已逾時，請直接回覆文字",
     pvOpenPanel: "在面板中開啟", pvInPanel: "已在面板中顯示。", pvPanel: "HTML 預覽", pvSource: "來自 {0}，{1}——顯示該訊息",
     pvPage: "頁面", pvCode: "程式碼", pvReload: "重新載入", pvClose: "關閉面板", pvBack: "回到對話", pvResize: "調整預覽面板寬度",
     pvNewer: "{0} 的回覆裡有較新的版本。", pvNewerShow: "顯示", pvPanelIdle: "按「預覽」在這裡執行。",
     lbLabel: "圖片：{0}", lbLabelNoName: "圖片", lbClose: "關閉", lbOpenOriginal: "開啟原圖", lbPrev: "上一張", lbNext: "下一張", lbCount: "{0} / {1}",
-    pvWhyOptin: "這台裝置（這個瀏覽器、這個網址）還沒允許 HTML 預覽。可從這張卡片的 ⋯ 選單或側欄允許。",
-    pvWhyOptinPanel: "這台裝置（這個瀏覽器、這個網址）還沒允許 HTML 預覽。",
+    pvWhyOptin: "還沒允許 HTML 預覽。可從這張卡片的 ⋯ 選單或「設定 → 偏好設定」允許。",
+    pvWhyOptinPanel: "還沒允許 HTML 預覽。",
     pvWhyNever: "這台裝置在這個工作階段已關閉預覽。",
     pvWhyOrigin: "預覽已關閉：這個頁面位於 {0}，但艦隊認為它位於 {1}（有會改寫 Host 的代理）。請讓外部 Host 原樣傳入，或設定 web.preview_origin。",
     pvUnknownAddress: "未知的網址", pvWhyServer: "這裡無法使用預覽。",
@@ -127,10 +136,19 @@ register("chat", {
     pvServer_needOrigin: "透過通道或代理開啟儀表板時，預覽需要設定 web.preview_origin。",
     pvServer_needHttps: "以 https 開啟儀表板時，預覽需要 https 的 web.preview_origin。",
     pvServer_sameOrigin: "預覽的來源不能和儀表板相同。",
-    pvServer_publicLink: "公開連結不提供預覽。要預覽，請在執行 AgEnD 的那台機器上開啟儀表板。",
+    pvServer_publicLink: "公開連結的預覽已關閉（web.preview_on_public_link: false）。要預覽，請在執行 AgEnD 的那台機器上開啟儀表板。",
+    pvServer_publicLinkStarting: "預覽啟動中…——正在開啟公開連結的預覽網址，好了就會在這裡執行。",
+    pvServer_publicLinkPreviewFailed: "這個公開連結無法預覽：{0}。連結本身照常可用。",
+    pvFail_exited: "它的網址意外關閉了", "pvFail_spawn-failed": "無法為它啟動 cloudflared",
+    "pvFail_no-address": "沒有取得它的網址", pvFail_unreachable: "連不到它的網址",
+    "pvFail_lease-held": "上一個預覽通道還在清理中", "pvFail_gateway-failed": "它的本機監聽無法啟動",
+    "pvFail_rate-limited": "Cloudflare 正在限制這台機器建立新的臨時連結 — 請過一陣子再試",
+    "pvFail_provisioning-failed": "Cloudflare 目前拒絕建立它的網址", "pvFail_process-exited": "cloudflared 在給出網址前就停止了",
+    "pvFail_bad-address": "Cloudflare 給出的網址無法使用",
+    pvFail_unknown: "發生了未預期的錯誤",
     pvServer_notOffered: "這個頁面不提供預覽。",
-    previews: "允許這台裝置預覽 HTML",
-    copy: "複製", copyMessage: "複製這則回覆", copied: "已複製", copyFailed: "複製失敗", wrap: "換行", showAll: "展開全部 {0} 行", showLess: "收合", jumpLatest: "最新", newBelow: "{0} 則新訊息",
+    previews: "允許預覽 HTML",
+    copy: "複製", copyMessage: "複製這則回覆", copied: "已複製", copyFailed: "複製失敗", wrap: "換行", showAll: "展開全部 {0} 行", showMore: "顯示更多", showLess: "收合", jumpLatest: "最新", newBelow: "{0} 則新訊息",
     disconnected: "已斷線", tick_queued: "排在前一則訊息之後", tick_processing: "已交給 agent", tick_delivered: "agent 已收到", tick_failed: "未送達", tick_cancelled: "已被中止取消",
     promptAnswering: "回覆中…", promptGone: "這個提示已經結束", promptFor: "{0}：{1}",
     working: "{0} 處理中…", stuck: "{0} 似乎卡住了", stopReply: "中止回覆", stopReplyTitle: "中止目前的回覆（同 Esc），並取消還在排隊的訊息。instance 會繼續運行。", stopSent: "已中止",

package/dist/ui/chat-thread.js

@@ -9,6 +9,7 @@
 import "./chat-render.js";
 import "./preview.js";
 import { loadHtmlAttachment } from "./html-attachment.js";
+import { chatTime, chatTimeFull, onDayChange } from "./chat-time.js";
 
 const R = () => globalThis.AgendChatRender;
 /** #1589: the public link shows attachments as downloads only (its page says so: <body data-public-link="1">). */
@@ -22,6 +23,9 @@ export const TEXT_PREVIEW_NODES = 4000;
 /** A csv/tsv wider than this is shown as text, as Markdown tables are capped at 20 columns. */
 export const TEXT_PREVIEW_COLUMNS = 50;
 const P = () => globalThis.AgendPreview;
+/** #1672: a status line longer than this (lines, or characters) is folded until it is opened. */
+export const STATUS_FOLD_LINES = 6;
+export const STATUS_FOLD_CHARS = 600;
 const COPY = '<svg class="icon" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg>';
 
 /** Escapes & " ' < >: safe for text and inside a quoted attribute. */
@@ -31,7 +35,7 @@ export const msgKey = (x) => `${x.boot}-${x.id}`;
 /**
  * Bind a renderer to `list` (the thread element) inside `scroller`. opts: { t, tf, isUser(x), onJump({show, unseen}),
  * setPreviewOptIn(on), copyText(text) → Promise<boolean>, download(code), panel? }. panel (#1481): { shown() → the card
- * key the side panel shows, or null; open(spec, { run }) } — without it a card has no "Open in panel".
+ * key the side panel shows, or null; open(spec, { run }); version(); claim(); claims() } — without it a card has no "Open in panel".
  */
 export function createThread(list, scroller, opts) {
   const nodes = new Map();          // key → { html, node }
@@ -46,17 +50,48 @@ export function createThread(list, scroller, opts) {
   const cardRefresh = new WeakMap(); // card node → re-read availability (weak: a card that left takes its source with it)
   const tr = opts.t, trf = opts.tf;
   const stopIn = (node) => (P() ? P().stopIn(node) : []);
+  /** #1770: write a message node's time label for now; unchanged text is not touched. */
+  function timeLabel(node) {
+    const el = node.querySelector(".meta .time[data-ts]");
+    if (!el) return;
+    const v = chatTime(el.dataset.ts, { yesterday: (hm) => trf("chat.yesterdayAt", hm) });
+    if (el.textContent !== v) el.textContent = v;
+  }
+  // #1770: "today" ends at the fleet's midnight; the labels are rewritten then (and on every render), while there are any.
+  let offDay = null;
+  function armDay() {
+    if (nodes.size && !offDay) offDay = onDayChange(() => { for (const v of nodes.values()) timeLabel(v.node); });
+    else if (!nodes.size && offDay) { offDay(); offDay = null; }
+  }
 
   const TICKS = () => ({ queued: tr("chat.tick_queued"), processing: tr("chat.tick_processing"), delivered: tr("chat.tick_delivered"), failed: tr("chat.tick_failed"), cancelled: tr("chat.tick_cancelled") });
 
   function msgHtml(x) {
+    // #1770: the label ("17:38", "Yesterday 17:38", "10/11 17:38") depends on today, so it is not part of the html a node
+    // is kept by: it is written into the node (timeLabels) — crossing midnight relabels in place and reloads no preview.
+    const time = x.ts ? `<span class="time" data-ts="${escAttr(x.ts)}" title="${escAttr(chatTimeFull(x.ts))}"></span>` : `<span class="time"></span>`;
+    if (x.role === "status") return statusHtml(x, time);
     const u = opts.isUser(x);
-    const time = x.ts ? new Date(x.ts).toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" }) : "";
     // renderMarkdown escapes the whole text before it adds any tag of its own (chat-render.js).
     const ticks = u && x.delivery ? R().deliveryHtml(x.delivery, TICKS()) : "";
     const tools = u ? "" : `<div class="msg-tools"><button type="button" class="chip-btn icon-only" data-act="copyMsg" data-arg="${escAttr(msgKey(x))}" title="${escAttr(tr("chat.copyMessage"))}" aria-label="${escAttr(tr("chat.copyMessage"))}">${COPY}</button></div>`;
     const buttons = x.role === "agent" ? replyButtonsHtml(x.buttons) : "";
-    return `<div class="msg ${u ? "user" : "agent"}"><div class="meta"><span class="sender">${escAttr(x.sender)}</span><span class="time">${time}</span>${ticks}</div><div class="body"><div class="md">${R().renderMarkdown(x.text, x.role === "agent" ? { htmlCards: true } : undefined)}</div>${R().attachmentsHtml(x.attachments, { htmlCards: x.role === "agent", goneTitle: tr("chat.attGone"), goneLabel: tr("chat.attUnavailable"), inlinePreviews: !PUBLIC_LINK() })}${buttons}</div>${tools}</div>`;
+    return `<div class="msg ${u ? "user" : "agent"}"><div class="meta"><span class="sender">${escAttr(x.sender)}</span>${time}${ticks}</div><div class="body"><div class="md">${R().renderMarkdown(x.text, { htmlCards: x.role === "agent", emojis: opts.emojis, mentions: opts.mentions })}</div>${R().attachmentsHtml(x.attachments, { htmlCards: x.role === "agent", goneTitle: tr("chat.attGone"), goneLabel: tr("chat.attUnavailable"), inlinePreviews: !PUBLIC_LINK() })}${buttons}</div>${tools}</div>`;
+  }
+  /**
+   * #1672: a status line (another instance's message, a daemon notice) is muted, read-only plain text — never Markdown,
+   * a preview card, a button or a person's bubble. Checked before isUser, which reads the sender: a fleet name need not
+   * start with "agend". A long one is folded until it is opened.
+   */
+  function statusHtml(x, time) {
+    const text = String(x.text == null ? "" : x.text);
+    const lines = R().lineCount(text);
+    const manyLines = lines > STATUS_FOLD_LINES;
+    const more = manyLines || text.length > STATUS_FOLD_CHARS
+      ? `<button type="button" class="st-more" data-act="toggleFold"${manyLines ? ` data-lines="${escAttr(lines)}"` : ""}>${escAttr(manyLines ? trf("chat.showAll", lines) : tr("chat.showMore"))}</button>`
+      : "";
+    const tools = `<div class="msg-tools"><button type="button" class="chip-btn icon-only" data-act="copyMsg" data-arg="${escAttr(msgKey(x))}" title="${escAttr(tr("chat.copyMessage"))}" aria-label="${escAttr(tr("chat.copyMessage"))}">${COPY}</button></div>`;
+    return `<div class="msg status-line${more ? " folded" : ""}"><div class="meta">${time}</div><div class="body"><div class="st-text">${escAttr(text)}</div>${more}</div>${tools}</div>`;
   }
   /**
    * #1266: an agent reply's buttons. Labels are text (escaped, never Markdown); the click names the set and the index,
@@ -78,6 +113,7 @@ export function createThread(list, scroller, opts) {
     tpl.innerHTML = html;
     const node = tpl.content.firstElementChild;
     decorateCode(node);
+    timeLabel(node);
     if (x) decorateHtmlCards(node, x, stoppedKeys || []);
     if (x) decorateTextCards(node, x);
     return node;
@@ -299,14 +335,32 @@ export function createThread(list, scroller, opts) {
     };
     const ui = { state: (name, reason) => { state = name === "starting" || name === "running" ? name : "idle"; refresh(reason || null); } };
     // Nothing is read for Preview on a device that does not allow previews: the button is not even shown there.
-    run.onclick = () => { if (P().availability().ok) withCode((c) => P().start(key, holder, c, ui)); };
+    // A Preview click is newer than any Open in panel still reading (#1704): it claims the panel's turn too — and, its
+    // own HTML read, starts only if no newer click claimed meanwhile and no preview was started since (the panel's own
+    // Preview): a late read never undoes a newer choice. A close is neither, so it does not drop this click.
+    run.onclick = () => {
+      if (!P().availability().ok || reading) return;     // this card already reading: that click stays the one
+      const mine = panel ? (panel.claim(), panel.claims()) : 0, started = P().startCount();
+      withCode((c) => {
+        if ((panel && panel.claims() !== mine) || P().startCount() !== started) { refresh(); return; }
+        P().start(key, holder, c, ui);
+      });
+    };
     stopB.onclick = () => { if (reading) { reading = 0; refresh(); } else P().stop(key, "stopped", ""); };
-    // A running preview moves: it stops here and starts in the panel (the click that ran it). An idle one opens the
-    // panel with its own Preview to click.
+    // #1704: this click runs it in the panel, as Preview there would — a running preview moves (it stops here and
+    // starts there), an idle one starts there. Whether it can run is the panel's to say: a device that has not allowed
+    // previews is offered Allow first (and allowing runs it); where previews are off, nothing runs.
+    // An attachment's HTML is read first. The click claims the panel at once, so a newer click (even one still reading)
+    // wins: if the panel changed (another click, block, close) or any preview started meanwhile, this one is dropped —
+    // a late read never undoes a newer click.
     if (toPanel) toPanel.onclick = () => {
-      const moving = P().running(key);
-      if (moving) P().stop(key, "stopped", "");
-      withCode((c) => panel.open({ key, instance: x.instance, msgKey: msgKey(x), ...(att ? { att } : { n: source.n }), code: c, sender: x.sender, ts: x.ts }, { run: moving }));
+      if (reading) return;                               // this card already reading: that click stays the one
+      if (P().running(key)) P().stop(key, "stopped", "");
+      const at = panel.claim(), started = P().startCount();
+      withCode((c) => {
+        if (panel.version() !== at || P().startCount() !== started) { refresh(); return; }
+        panel.open({ key, instance: x.instance, msgKey: msgKey(x), ...(att ? { att } : { n: source.n }), code: c, sender: x.sender, ts: x.ts }, { run: true });
+      });
     };
     if (dl) dl.onclick = () => opts.download(code);
     ack.onclick = () => P().ackBanner();      // every card and the panel hear it (onChange)
@@ -341,6 +395,7 @@ export function createThread(list, scroller, opts) {
     if (!msgs.length) {
       for (const v of nodes.values()) stopIn(v.node);
       nodes.clear();
+      armDay();
       list.textContent = "";
       opts.onEmpty(true);
       return;
@@ -357,12 +412,13 @@ export function createThread(list, scroller, opts) {
         const node = msgNode(html, x, stopped);
         if (have) have.node.replaceWith(node); else added++;
         have = { html, node }; nodes.set(key, have);
-      }
+      } else timeLabel(have.node);
       const want = prev ? prev.nextSibling : list.firstChild;
       // A node already in the list is being moved: its preview stops first. A new node (still in its template) has none.
       if (have.node !== want) { if (have.node.parentNode === list) stopIn(have.node); list.insertBefore(have.node, want); }
       prev = have.node;
     }
+    armDay();
     if ("restore" in renderOpts) {
       unseen = 0;
       if (renderOpts.restore == null) toBottom();
@@ -426,9 +482,9 @@ export function createThread(list, scroller, opts) {
     if (act === "copyMsg") { const x = msgs.find(y => msgKey(y) === el.dataset.arg); if (x) copyFrom(el, x.text); }
     else if (act === "copyCode") { const pre = el.closest(".codeblock")?.querySelector("pre"); if (pre) copyFrom(el, pre.textContent); }
     else if (act === "toggleFold") {
-      const box = el.closest(".codeblock"); if (!box) return;
+      const box = el.closest(".codeblock, .msg.status-line"); if (!box) return;
       const folded = box.classList.toggle("folded");
-      el.textContent = folded ? trf("chat.showAll", el.dataset.lines) : tr("chat.showLess");
+      el.textContent = !folded ? tr("chat.showLess") : el.dataset.lines ? trf("chat.showAll", el.dataset.lines) : tr("chat.showMore");
     } else if (act === "toggleWrap") opts.toggleWrap();
     else if (act === "replyButton") {
       const m = /^([0-9a-f]{32}):(\d{1,2})$/.exec(el.dataset.arg || "");
@@ -441,6 +497,7 @@ export function createThread(list, scroller, opts) {
     if (ro) ro.disconnect();
     if (P()) P().stopAll("leave");
     nodes.clear();
+    armDay();
   }
 
   return { render, onScroll, onClick, jumpLatest, reveal, refreshCards, dispose, nodes, get unseen() { return unseen; } };