@songsid/agend 2.2.0-beta.2 → 2.2.0-beta.20

package/dist/ui/settings-strings.js

@@ -10,11 +10,12 @@ register("settings", {
     classicChannels: "ClassicBot Channels",
     noClassic: "No ClassicBot channels — start one with /start in a chat.",
     publicLink: "Offer temporary public web links",
-    publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. No preview exposure.",
+    publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. HTML previews get a second temporary tunnel unless web.preview_on_public_link is false.",
     publicTtl: "Public link minutes (1–480)",
     publicProtocol: "Tunnel protocol",
     webEcho: "Web echo",
     webEchoHint: "Copies web messages to the bound Telegram or Discord topic. ClassicBot rooms are excluded.",
+    webLogTab: "Log tab: each agent's steps", webLogTabHint: "Shows each instance's prompts, replies, tool calls and results, and fleet events in its Log tab, read from its own transcript only while the tab is open. Secret values are masked. Also over the public link. Turning it on waits for a fleet admin's confirmation.",
     general: "General Settings",
     advanced: "Advanced",
     new: "New",
@@ -163,7 +164,9 @@ register("settings", {
     wizardWaitingStart: "Waiting for a message in the group…",
     wizardNoStartYet: "No group message yet — post one and press Detect again.",
     wizardGeneralChannel: "General channel id",
-    wizardAdminUser: "Your user id (becomes the first allowed user)",
+    wizardAdminUser: "Your user ID (required; becomes the first allowed user)",
+    wizardNeedDiscordAdmin: "Enter your Discord user ID: 17–20 digits, without a leading zero.",
+    wizardNeedTelegramAdmin: "Enter your Telegram user ID: 1–20 positive digits, without a leading zero.",
     wizardNeedVerify: "Verify the token before continuing.",
     wizardPlanLoading: "Building the plan…",
     wizardWillWrite: "This will be written:",
@@ -175,7 +178,7 @@ register("settings", {
     deleteBot: "Delete this bot",
     noAllowedUsers: "no allowed users",
     searchAll: "Search agents, bots, channels…",
-    accessMovedHint: "Who may use the bot is set on the connection itself — open Settings on \"{0}\" under Connections & Bots.",
+    accessMovedHint: "Who may use the bot is set on the connection itself — open Settings on \"{0}\" under Connections.",
     applyRestartNeeded: "Saved — restart AgEnD to apply",
     applyNoChange: "no change needed",
     applyRestartHint: "This change needs AgEnD itself restarted. You can restart it here, or run /restart in your chat channel.",
@@ -217,7 +220,14 @@ register("settings", {
     concurrencyWarning: "May exceed CPU capacity on smaller hosts",
     staggerRange: "Must be between 0 and 30000",
     staggerWarning: "Very low values can cause startup spikes",
-    sec_device: "This device", deviceLead: "Choices for this browser only — other devices keep their own.",
+    sec_device: "Preferences", syncedTitle: "Synced across your devices", syncedLead: "Changes here apply on every device where you are signed in.",
+    profileTitle: "Your name",
+    profileLeadBound: "Agents see your web messages as the Discord or Telegram account your sign-in code was sent to: its id, and its name unless you choose another here. It follows you to every device you sign in on. It is for recognition only: it grants nothing.",
+    profileLeadUnbound: "This browser was not signed in with a code sent to your Discord or Telegram account, so agents see your web messages as \"web-user\" (or the name you set here). Sign in with a code from /web to be recognised as your account.",
+    profileName: "Name", profileHelp: "Agents see: {0} · id {1}", profileSave: "Save", profileClear: "Use web-user", profileUseAccount: "Use {0}",
+    profileSaved: "Agents now see you as {0}", profileFailed: "Could not save the name",
+    syncedPublicLink: "On the public link these are read-only: a change here stays in this browser.",
+    deviceTitle: "This device only", deviceLead: "The tour, text size, view fit, the sidebar shown or hidden, panel widths and desktop notifications stay on each device.",
     sec_agents: "Agents",
     sec_bots: "Connections",
     sec_classic: "ClassicBot",
@@ -278,7 +288,7 @@ register("settings", {
     accessTitle: "Access",
     webChat: "Web chat",
     sec_web: "Web",
-    webLead: "How the web dashboard behaves. A change that loosens access (longer sessions, the browser terminal back on or for longer, the public link) waits for a fleet admin to confirm it in General; one that tightens it applies at once.",
+    webLead: "How the web dashboard behaves. A change that loosens access (longer sessions, the browser terminal back on or for longer, the public link) waits for a fleet admin to confirm it in chat (General topic) or on the host; one that tightens it applies at once.",
     webPublicRefused: "Web settings can't be changed over a temporary public link. Open the dashboard at its own address to change them.",
     webSessionTitle: "Sign-in sessions",
     webSessionHint: "For sign-ins at the dashboard's own address (this computer, the LAN, a tailnet). A temporary public link always keeps 4 h / 30 min. Shortening ends the sessions it now outlives; lengthening applies to new sign-ins and to an existing one's idle time on its next use. Empty = the default.",
@@ -362,7 +372,7 @@ register("settings", {
     help1: "Agents: each agent's settings, Start/Stop, Pause/Wake, and New agent.",
     help2: "Connections: who may use each bot, its binding, its status emojis, a new token; and provider API keys.",
     help3: "ClassicBot: each room's backend, model and options.",
-    help4: "General: defaults for every agent, ClassicBot defaults and web chat. Review changes stages them.",
+    help4: "General: defaults for every agent and ClassicBot defaults. Web: the dashboard's sign-in sessions, browser terminal, web echo, Log and public link. Review changes stages them.",
     help5: "Changes are staged, then applied together with Apply changes. Each shows what it costs: immediately, an agent restart, or an AgEnD restart.",
     help6: "A change to access, secrets or connections waits for a fleet admin to confirm it in chat before it applies.",
   },
@@ -398,11 +408,12 @@ register("settings", {
     classicChannels: "ClassicBot 頻道",
     noClassic: "沒有 ClassicBot 頻道 — 在聊天中用 /start 建立。",
     publicLink: "提供臨時公開網頁連結",
-    publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限，不公開 preview。",
+    publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限。HTML 預覽會另開一條臨時通道，除非設定 web.preview_on_public_link: false。",
     publicTtl: "公開連結分鐘數（1–480）",
     publicProtocol: "Tunnel 協定",
     webEcho: "Web 同步",
     webEchoHint: "將網頁訊息複製到綁定的 Telegram 或 Discord 主題，不包含 ClassicBot 群組。",
+    webLogTab: "紀錄分頁：每個 agent 的步驟", webLogTabHint: "在每個 instance 的「紀錄」分頁顯示提示、回覆、工具呼叫與結果，以及 fleet 事件；只在分頁開著時從它自己的對話紀錄讀取。機密值會遮蔽。公開連結也看得到。開啟需 fleet admin 確認。",
     general: "一般設定",
     advanced: "進階",
     new: "新增",
@@ -526,7 +537,9 @@ register("settings", {
     wizardWaitingStart: "等待群組訊息中…",
     wizardNoStartYet: "還沒收到群組訊息 —— 發一則之後再按一次。",
     wizardGeneralChannel: "General 頻道 id",
-    wizardAdminUser: "你的 user id（會成為第一個允許使用者）",
+    wizardAdminUser: "你的使用者 ID（必填；會成為第一個允許使用者）",
+    wizardNeedDiscordAdmin: "請輸入 Discord 使用者 ID：17–20 位數字，開頭不能是 0。",
+    wizardNeedTelegramAdmin: "請輸入 Telegram 使用者 ID：1–20 位正整數字，開頭不能是 0。",
     wizardNeedVerify: "請先驗證 token 再繼續。",
     wizardPlanLoading: "正在產生方案…",
     wizardWillWrite: "將寫入：",
@@ -538,7 +551,7 @@ register("settings", {
     deleteBot: "刪除這個機器人",
     noAllowedUsers: "沒有允許的使用者",
     searchAll: "搜尋 agent、機器人、頻道…",
-    accessMovedHint: "誰可以使用 bot 是在連線本身設定 —— 請到「連線與機器人」開啟「{0}」的設定。",
+    accessMovedHint: "誰可以使用 bot 是在連線本身設定 —— 請到「連線」開啟「{0}」的設定。",
     applyRestartNeeded: "已儲存 —— 需要重新啟動 AgEnD 才會生效",
     applyNoChange: "無需變更",
     applyRestartHint: "此變更需要重新啟動 AgEnD 本身。可以在這裡重新啟動，或在聊天頻道執行 /restart。",
@@ -580,7 +593,14 @@ register("settings", {
     concurrencyWarning: "在較小的主機上可能超出 CPU 負荷",
     staggerRange: "必須介於 0 到 30000",
     staggerWarning: "數值太低可能造成啟動尖峰",
-    sec_device: "這台裝置", deviceLead: "只套用在這個瀏覽器，其他裝置保留各自的設定。",
+    sec_device: "偏好設定", syncedTitle: "在你所有的裝置同步", syncedLead: "這裡的變更會套用到你登入的每一台裝置。",
+    profileTitle: "你的名字",
+    profileLeadBound: "agent 會把你從網頁送出的訊息，認成收到登入驗證碼的那個 Discord 或 Telegram 帳號：用它的 id，名字也用它的，除非你在這裡另外取名。它會跟著你到每一台登入的裝置。這只用來辨認，不代表任何權限。",
+    profileLeadUnbound: "這個瀏覽器不是用私訊到你 Discord 或 Telegram 帳號的驗證碼登入的，所以 agent 會把你的網頁訊息看成「web-user」（或你在這裡設定的名字）。用 /web 的驗證碼登入，就能被認成你的帳號。",
+    profileName: "名字", profileHelp: "agent 看到：{0} · id {1}", profileSave: "儲存", profileClear: "改回 web-user", profileUseAccount: "改用 {0}",
+    profileSaved: "agent 現在會看到你是 {0}", profileFailed: "無法儲存名字",
+    syncedPublicLink: "公開連結只能讀取這些設定：在這裡變更只會留在這個瀏覽器。",
+    deviceTitle: "只限這台裝置", deviceLead: "導覽、文字大小、視圖寬度、側欄顯示或隱藏、面板寬度與桌面通知，每台裝置各自保留。",
     sec_agents: "Agent",
     sec_bots: "連線",
     sec_classic: "ClassicBot",
@@ -641,7 +661,7 @@ register("settings", {
     accessTitle: "存取",
     webChat: "網頁聊天",
     sec_web: "網頁",
-    webLead: "網頁儀表板的行為。放寬存取的變更（延長 session、重新開啟或延長瀏覽器終端機、公開連結）需要 fleet admin 在 General 確認；收緊的變更會立即套用。",
+    webLead: "網頁儀表板的行為。放寬存取的變更（延長 session、重新開啟或延長瀏覽器終端機、公開連結）需要 fleet admin 在聊天（General topic）或主機上確認；收緊的變更會立即套用。",
     webPublicRefused: "無法透過臨時公開連結變更網頁設定。請從儀表板本身的網址開啟後再變更。",
     webSessionTitle: "登入 session",
     webSessionHint: "適用於從儀表板本身網址登入的 session（本機、區域網路、tailnet）。臨時公開連結固定為 4 小時 / 30 分鐘。縮短會讓已超過新限制的 session 結束；延長會套用到新的登入，以及既有 session 下次使用時的閒置時間。留空 = 預設值。",
@@ -725,7 +745,7 @@ register("settings", {
     help1: "Agent：每個 agent 的設定、啟動/停止、暫停/喚醒，以及新增 agent。",
     help2: "連線：誰可以使用各個 bot、它的綁定、狀態表情、新的 token；以及供應商 API key。",
     help3: "ClassicBot：每個房間的 backend、model 與選項。",
-    help4: "一般：所有 agent 的預設值、ClassicBot 預設值與網頁聊天。「檢查變更」會把它們暫存。",
+    help4: "一般：所有 agent 的預設值與 ClassicBot 預設值。網頁：儀表板的登入 session、瀏覽器終端機、網頁轉發、紀錄與公開連結。「檢查變更」會把它們暫存。",
     help5: "變更會先暫存，再用「套用變更」一起套用。每項都會標示代價：立即生效、重新啟動 agent，或重新啟動 AgEnD。",
     help6: "存取、密鑰或連線的變更，要等 fleet 管理員在聊天中確認後才會套用。",
   },

package/dist/ui/settings-token.js

@@ -10,6 +10,13 @@ import { api } from "./settings-confirm.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
 
+// UI feedback only: the plan and commit independently enforce this on the server.
+export const adminUserIdPattern = (platform) => platform === "discord" ? "[1-9][0-9]{16,19}" : "[1-9][0-9]{0,19}";
+export function adminUserIdError(platform, value) {
+  return typeof value === "string" && new RegExp(`^${adminUserIdPattern(platform)}$`).test(value)
+    ? null : tn(platform === "discord" ? "wizardNeedDiscordAdmin" : "wizardNeedTelegramAdmin");
+}
+
 /** Who this token is: { valid, username?, reason? } — one outbound check, the token sent once and not kept. */
 export async function verifyBotToken(platform, token) {
   const res = await api("/api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "verify", platform, token }) })
@@ -31,7 +38,7 @@ export function TokenField({ id, platform, value, onInput, identity, busy, onVer
   const [shown, setShown] = useState(false);
   return html`<div class="field token-field"><label for=${id}>${tn("wizardToken")}</label>
     <div class="token-row">
-      <input id=${id} type=${shown ? "text" : "password"} autocomplete="off" autocapitalize="off" spellcheck="false" disabled=${!!busy}
+      <input id=${id} type=${shown ? "text" : "password"} autocomplete="off" autocapitalize="off" spellcheck=${false} disabled=${!!busy}
         placeholder=${platform === "discord" ? "MTA…" : "123456:ABC-DEF…"} value=${value} onInput=${(e) => onInput(e.target.value.trim())} />
       <button type="button" class="icon-btn" aria-pressed=${shown ? "true" : "false"} title=${shown ? tn("tokenHide") : tn("tokenShow")}
         aria-label=${shown ? tn("tokenHide") : tn("tokenShow")} onClick=${() => setShown(!shown)}><${Icon} name="eye" size=${16} /></button>

package/dist/ui/settings-wizard.js

@@ -10,7 +10,7 @@ import { api } from "./settings-confirm.js";
 import { startOperation } from "./settings-apply.js";
 import { BACKENDS, DEFAULT_SCHEMA, impactOf, toYaml } from "./settings-model.js";
 import { Drawer, Select } from "./settings-dialogs.js";
-import { botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
+import { adminUserIdError, adminUserIdPattern, botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
 import { DiscordServerPicker } from "./settings-discord.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
@@ -90,6 +90,8 @@ export function SetupWizard({ ctx, onClose }) {
     if (w.step === 2) { setW({ ...w, step: 3 }); return; }
     if (w.step === 3) {
       if (!w.identity || !w.identity.valid) { setErr(tn("wizardNeedVerify")); return; }
+      const adminError = adminUserIdError(w.platform, w.admin_user_id);
+      if (adminError) { setErr(adminError); return; }
       const at = rev.current;
       setBusy(tn("wizardPlanLoading"));
       const res = await post("/api/settings/quickstart/plan", input());
@@ -146,12 +148,12 @@ export function SetupWizard({ ctx, onClose }) {
         <${DiscordServerPicker} idPrefix="wz" token=${w.identity && w.identity.valid ? w.token : ""} bot=${w.identity && botHandle(w.identity.username)}
           invite=${w.identity && w.identity.invite} portal=${w.identity && w.identity.portal} guilds=${w.guilds} onGuilds=${(g) => setW((x) => ({ ...x, guilds: g }))}
           guild=${w.guild_id} onGuild=${set("guild_id")} channel=${w.general_channel_id} onChannel=${set("general_channel_id")} />
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
       : html`
         <div class="field"><label for="wz-group">${tn("groupIdField")}</label><input id="wz-group" type="text" placeholder="-1001234567890" value=${w.group_id} onInput=${(e) => set("group_id")(e.target.value.trim())} />
           <p class="note">${tn("wizardDetectHint")}</p></div>
         <div class="dlg-inline-actions"><button type="button" class="btn btn-sm" disabled=${!!busy} onClick=${detect}>${tn("wizardDetect")}</button></div>
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
   } else {
     body = !w.plan ? html`<p class="note">${tn("wizardPlanLoading")}</p>` : html`
       <p><strong>${tn("wizardWillWrite")}</strong></p>

package/dist/ui/shared/app-i18n.js

@@ -1,14 +1,33 @@
 // #1408 §4: one dictionary for the app, namespaced (app.*, chat.*, fleet.*, …). A panel registers its own namespace
 // when it loads; t("chat.send") resolves it in the chosen language and falls back to English, then to the key.
-// The language is this browser's choice (agend_lang, the key every panel has used), else the device's.
+// The language is the person's choice — kept on the host since #1665 and cached in this browser as agend_lang, the key
+// every panel has used — else the device's.
 
 const tables = { en: {}, "zh-TW": {} };
 const listeners = new Set();
 
-function stored() {
-  try { const v = localStorage.getItem("agend_lang"); return v === "en" || v === "zh-TW" ? v : null; } catch { return null; }
+/** The device's own language: what applies when none is chosen. */
+export function deviceLanguage() { return typeof navigator !== "undefined" && /^zh/i.test(navigator.language || "") ? "zh-TW" : "en"; }
+function cacheLang(v) { try { if (v) localStorage.setItem("agend_lang", v); else localStorage.removeItem("agend_lang"); } catch { /* this page only */ } }
+/**
+ * #1665: the signed-in page carries the host's values (<html data-prefs>) — the same rule as theme.js: the host's
+ * language is this page's (the browser's copy is refreshed, best effort); none chosen on the host and this device in
+ * step with it: the device's language; not in step yet, or no data-prefs: this browser's copy, else the device's.
+ */
+function initialLang() {
+  let d = null;
+  try { d = JSON.parse(document.documentElement.getAttribute("data-prefs") || "null"); } catch { d = null; }
+  if (d && typeof d === "object" && d.values && typeof d.values === "object") {
+    const host = d.values.lang;
+    if (host === "en" || host === "zh-TW") { cacheLang(host); return host; }
+    let inStep = false;
+    try { inStep = localStorage.getItem("agend_prefs_synced") === "1"; } catch { inStep = false; }
+    if (inStep) { cacheLang(null); return deviceLanguage(); }
+  }
+  try { const v = localStorage.getItem("agend_lang"); if (v === "en" || v === "zh-TW") return v; } catch { /* none */ }
+  return deviceLanguage();
 }
-let current = stored() || (typeof navigator !== "undefined" && /^zh/i.test(navigator.language || "") ? "zh-TW" : "en");
+let current = initialLang();
 
 /** Add a namespace: `register("chat", { en: {...}, "zh-TW": {...} })`. */
 export function register(ns, byLang) {
@@ -19,11 +38,14 @@ export function register(ns, byLang) {
 
 export function lang() { return current; }
 
-/** Choose a language for this browser; every subscriber re-renders (a new navigation lease, §4). */
-export function setLang(next) {
+/**
+ * Choose a language; every subscriber re-renders (a new navigation lease, §4). `{ store: false }`: this page only —
+ * the host's "none chosen" arriving from another device (app-prefs.js), which leaves no copy in this browser.
+ */
+export function setLang(next, opts = {}) {
   if (next !== "en" && next !== "zh-TW") return;
   current = next;
-  try { localStorage.setItem("agend_lang", next); } catch { /* this page only */ }
+  if (opts.store !== false) cacheLang(next);
   if (typeof document !== "undefined" && document.documentElement) document.documentElement.lang = next === "zh-TW" ? "zh-Hant" : "en";
   for (const fn of listeners) fn(next);
 }
@@ -38,12 +60,14 @@ export function t(key, ...values) {
 
 register("app", {
   en: {
-    brand: "AgEnD", fleet: "Fleet", view: "View", settings: "Settings", instances: "Instances", newInstance: "New instance",
+    brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet overview", view: "View", settings: "Settings", instances: "Instances", newInstance: "New instance",
     collapse: "Hide the sidebar", expand: "Show the sidebar", openMenu: "Open the sidebar", closeMenu: "Close the sidebar",
+    resizeSidebar: "Sidebar width", resizeSidebarHint: "Drag to resize · double-click to reset",
+    names: "Names", namesNickname: "Nickname first", namesInstance: "Real name first",
     theme: "Theme", themeSystem: "System", themeLight: "Light", themeDark: "Dark", language: "Language",
-    previews: "Allow HTML previews on this device", tour: "Tour", tourTitle: "Show the web chat tour again",
-    needsYou: "needs you", approxNote: "Read from the terminal, so approximate", chat: "Chat", details: "Details", instanceViews: "Views of {0}",
-    textSize: "Text size: {0}", textSize_s: "S", textSize_m: "M", textSize_l: "L", textSize_fit: "Fit", usage: "Usage",
+    previews: "Allow HTML previews", tour: "Tour", tourTitle: "Show the web chat tour again",
+    needsYou: "needs you", approxNote: "Read from the terminal, so approximate", chat: "Chat", details: "Details", log: "Log", instanceViews: "Views of {0}",
+    textSize: "Text size: {0}", textSize_s: "S", textSize_m: "M", textSize_l: "L", textSize_fit: "Fit", usage: "Usage", usageHide: "Hide usage",
     statusRunning: "running", statusStopped: "stopped", statusPaused: "paused", statusCrashed: "crashed", statusWorking: "working", statusStuck: "looks stuck", statusIdle: "idle",
     connReconnecting: "Can't reach AgEnD — it may be restarting. Reconnecting…", connReconnectingIn: "Can't reach AgEnD — it may be restarting. Trying again in {0} s.",
     hydrating: "Loading what is open now…", hydrateFailed: "Could not load what is open now (prompts, ticks).",
@@ -67,12 +91,14 @@ register("app", {
     needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_crashed: "Crashed", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed",
   },
   "zh-TW": {
-    brand: "AgEnD", fleet: "Fleet", view: "檢視", settings: "設定", instances: "Instances", newInstance: "新增 instance",
+    brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet 概覽", view: "檢視", settings: "設定", instances: "Instances", newInstance: "新增 instance",
     collapse: "隱藏側邊欄", expand: "顯示側邊欄", openMenu: "打開側邊欄", closeMenu: "關閉側邊欄",
+    resizeSidebar: "側邊欄寬度", resizeSidebarHint: "拖曳調整寬度 · 按兩下恢復預設",
+    names: "名稱", namesNickname: "暱稱優先", namesInstance: "實際名稱優先",
     theme: "主題", themeSystem: "跟隨系統", themeLight: "淺色", themeDark: "深色", language: "語言",
-    previews: "允許這台裝置預覽 HTML", tour: "導覽", tourTitle: "再看一次網頁聊天導覽",
-    needsYou: "等你回應", approxNote: "從終端畫面判讀，僅供參考", chat: "聊天", details: "詳細資訊", instanceViews: "{0} 的檢視",
-    textSize: "字級：{0}", textSize_s: "小", textSize_m: "中", textSize_l: "大", textSize_fit: "剛好填滿", usage: "用量",
+    previews: "允許預覽 HTML", tour: "導覽", tourTitle: "再看一次網頁聊天導覽",
+    needsYou: "等你回應", approxNote: "從終端畫面判讀，僅供參考", chat: "聊天", details: "詳細資訊", log: "紀錄", instanceViews: "{0} 的檢視",
+    textSize: "字級：{0}", textSize_s: "小", textSize_m: "中", textSize_l: "大", textSize_fit: "填滿", usage: "用量", usageHide: "隱藏用量",
     statusRunning: "執行中", statusStopped: "已停止", statusPaused: "已暫停", statusCrashed: "已當掉", statusWorking: "工作中", statusStuck: "似乎卡住", statusIdle: "閒置",
     connReconnecting: "連不上 AgEnD——可能正在重新啟動。正在重新連線…", connReconnectingIn: "連不上 AgEnD——可能正在重新啟動。{0} 秒後再試。",
     hydrating: "正在載入目前的狀態…", hydrateFailed: "無法載入目前的狀態（提示、送達標記）。",

package/dist/ui/shared/app-prefs.js

@@ -0,0 +1,250 @@
+// #1665: the web preferences that follow the person between devices — kept on the host (/ui/prefs), with this browser's
+// localStorage, under the keys every panel already reads, as the cache. Design: the comment on #1665.
+//
+// - Synced: theme, language, the sidebar (order, folds, filter, favorites — #1664) and the HTML-preview opt-in. The tour and the first-run
+//   card stay on each device, as every layout choice does.
+// - The signed-in page is served with the host's values (<html data-prefs>). This module, imported before any panel
+//   reads its key, copies them into the cache: the host wins once it has a value — and, on a device already in step
+//   with it, a key the host does not have is the default (its stale copy here is cleared). theme.js and the
+//   dictionary did the same for the theme and language, before paint.
+// - A change made here is cached at once and sent to the host (a short debounce gathers a burst, such as typing in the
+//   filter). Writes go one at a time; a key stays this page's own from the change until its write has ended, so no
+//   answer — a read or another write — that started before can put an older value back. Every answer carries the
+//   host's revision, and one older than what this page already has is ignored.
+// - The public link, and the anonymous View reader, have no host write: theirs stays local.
+// - The first load on a device (no agend_prefs_synced yet) uploads what it had locally for the keys the host does not
+//   have yet, each with onlyIfUnset — the first device to arrive wins — then reads the host's values back. Only once
+//   every upload got an answer and that read succeeded is the device marked: anything else tries again next load.
+// - The status frame's prefs_rev: another device changed something; the host's values are read again and applied. A
+//   revision counts as seen only once its read succeeded (a failed one is tried again, at most every few seconds).
+import { deviceLanguage, lang, setLang } from "./app-i18n.js";
+import { appStore } from "./app-store.js";
+
+const SYNCED_FLAG = "agend_prefs_synced";
+const RETRY_MS = 5000;
+const json = { toLocal: (v) => JSON.stringify(v), fromLocal: (s) => { try { return s == null ? undefined : JSON.parse(s); } catch { return undefined; } } };
+/** Each synced preference: its cache key, and how a host value is cached (null: no entry) and read back. */
+export const SYNCED = {
+  theme: { ls: "agend_theme", toLocal: (v) => (v === "light" || v === "dark" ? v : null), fromLocal: (s) => (s === "light" || s === "dark" ? s : undefined) },
+  lang: { ls: "agend_lang", toLocal: (v) => (v === "en" || v === "zh-TW" ? v : null), fromLocal: (s) => (s === "en" || s === "zh-TW" ? s : undefined) },
+  "nav.order": { ls: "agend_view_sidebar_order", ...json },
+  "nav.collapsed": { ls: "agend_instance_collapsed", ...json },
+  "nav.filter": { ls: "agend_instance_filter", ...json },
+  "nav.favorites": { ls: "agend_favorites", ...json },   // #1664
+  "preview.optIn": { ls: "agend_html_preview", toLocal: (v) => (v ? "on" : null), fromLocal: (s) => (s === "on" ? true : undefined) },
+  "names.primary": { ls: "agend_names_primary", toLocal: (v) => (v === "instance" ? v : null), fromLocal: (s) => (s === "instance" ? s : undefined) },   // #1722
+};
+const own = (o, k) => !!o && Object.prototype.hasOwnProperty.call(o, k);
+const now = () => (typeof performance !== "undefined" ? performance.now() : Date.now());
+
+function readLocal(key) { try { return localStorage.getItem(key); } catch { return null; } }
+function writeLocal(key, s) { try { if (s == null) localStorage.removeItem(key); else localStorage.setItem(key, s); } catch { /* this page only */ } }
+function cache(key, value) { const k = SYNCED[key]; writeLocal(k.ls, value == null ? null : k.toLocal(value)); }
+const inStep = () => readLocal(SYNCED_FLAG) === "1";
+
+function pageHost() {
+  try {
+    const d = JSON.parse(document.documentElement.getAttribute("data-prefs") || "null");
+    return d && typeof d === "object" && typeof d.rev === "number" && d.values && typeof d.values === "object" ? d : null;
+  } catch { return null; }
+}
+
+const initial = typeof document !== "undefined" ? pageHost() : null;
+let rev = initial ? initial.rev : null;
+let host = initial ? initial.values : null;
+const pending = new Map();     // key → value chosen here, not sent yet
+const mine = new Map();        // key → value chosen here whose write is not over (pending or out)
+const inflight = new Map();    // key → writes sent and not answered yet
+let flushTimer = null;
+let writes = Promise.resolve();   // one write at a time, in the order they were made
+const listeners = new Set();
+
+// The host's values into the cache, now — before the sidebar, the tour or the first-run card read their keys. A key
+// the host does not have: the default, on a device in step with the host; this device's own (to upload) otherwise.
+if (host) {
+  const step = inStep();
+  for (const key of Object.keys(SYNCED)) {
+    if (own(host, key)) cache(key, host[key]);
+    else if (step) cache(key, null);
+  }
+}
+
+/** This page may change the host's preferences: the signed-in app, not over the public link. */
+export function prefsWritable() {
+  return !!initial && !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
+}
+/**
+ * The value in force for a key, in memory — never only in this browser's storage (a full storage must not bring back
+ * an old value): this page's own choice while its write is not over; else the host's; else, on a device in step with
+ * the host, the default ({ value: undefined }). null: not known here (no host values on this page, or a device not yet
+ * in step) — the caller reads this browser's copy.
+ */
+export function prefInForce(key) {
+  if (!own(SYNCED, key)) return null;
+  if (mine.has(key)) return { value: mine.get(key) };
+  if (host && own(host, key)) return { value: host[key] };
+  if (initial && inStep()) return { value: undefined };
+  return null;
+}
+/** The host's value for a key as this page last saw it (undefined: not set there, or not known). */
+export function hostPref(key) { return host && own(host, key) ? host[key] : undefined; }
+/** Called with the keys another device changed, after they are cached and applied here. Returns the unsubscribe. */
+export function onPrefsChanged(fn) { listeners.add(fn); return () => listeners.delete(fn); }
+
+/** A host answer ({ values, rev }): a real view of the host (not an unreadable store's defaults)? */
+const isView = (body) => !!body && typeof body.rev === "number" && !!body.values && typeof body.values === "object" && !body.unreadable;
+/** Take a view as this page's — unless it is older than the one it has. True: taken. */
+function take(body) {
+  if (!isView(body) || (rev !== null && body.rev < rev)) return false;
+  rev = body.rev;
+  host = body.values;
+  return true;
+}
+
+/**
+ * A preference chosen on this page: cached now, and kept on the host (a burst within 400 ms is one write). Not writable
+ * (the public link, the anonymous reader): this browser only, as before.
+ */
+export function savePref(key, value) {
+  if (!own(SYNCED, key)) return;
+  cache(key, value);
+  if (!prefsWritable()) return;
+  pending.set(key, value);
+  mine.set(key, value);
+  clearTimeout(flushTimer);
+  flushTimer = setTimeout(flush, 400);
+}
+
+/** One write. ok: the host took it (its answer is a view; an older one than this page has is not taken). */
+async function post(set, onlyIfUnset) {
+  const res = await fetch("/ui/prefs", { method: "POST", credentials: "same-origin", headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(onlyIfUnset ? { set, onlyIfUnset: true } : { set }) });
+  const body = await res.json().catch(() => null);
+  const ok = res.ok && isView(body);
+  if (ok) take(body);
+  return { ok, status: res.status };
+}
+
+function flush() {
+  flushTimer = null;
+  if (!pending.size) return writes;
+  const set = Object.fromEntries(pending);
+  const keys = [...pending.keys()];
+  pending.clear();
+  for (const k of keys) inflight.set(k, (inflight.get(k) || 0) + 1);
+  writes = writes.then(async () => {
+    let ok = false;
+    try { ok = (await post(set, false)).ok; } catch { ok = false; }
+    const released = new Set();
+    for (const k of keys) {
+      const n = (inflight.get(k) || 1) - 1;
+      if (n) inflight.set(k, n); else inflight.delete(k);
+      if (!n && !pending.has(k)) { mine.delete(k); released.add(k); }
+    }
+    // Each key whose last write this was, and not changed here again since, now shows the newest host view this page
+    // has — usually its own value; another device's newer one if that arrived while the write was out (held back then,
+    // and an older answer to this write cannot overrule it); refused or not sent, what the host has (read back first).
+    // Always applied: what the page shows came from this page's own choice, not from the cache, so the cache matching
+    // the host (a storage that refused the choice) says nothing about the screen.
+    if (!ok) await refresh();
+    align(released, { force: true });
+  });
+  return writes;
+}
+
+/**
+ * Read the host's values again and apply the ones that differ from this page's — not a key still being changed here
+ * (unsent, or its write not answered yet), and nothing from an answer older than the view this page has. True: the read
+ * succeeded (taken, or older than what this page already has — nothing to do).
+ */
+export async function refresh() {
+  if (!initial) return false;
+  let body = null;
+  try {
+    const res = await fetch("/ui/prefs", { credentials: "same-origin" });
+    body = res.ok ? await res.json() : null;
+  } catch { body = null; }
+  if (!isView(body)) return false;
+  const before = new Map(Object.keys(SYNCED).map((key) => [key, own(host, key) ? SYNCED[key].toLocal(host[key]) : null]));
+  if (take(body)) align(Object.keys(SYNCED), { before });
+  return true;
+}
+
+/**
+ * Show the host view this page has for these keys — except a key still being changed here (unsent, or out). A key is
+ * applied when its host value moved in memory (`before`: the host view before this read), when this browser's copy
+ * differs, or always (`force`: this page's own write just ended). The copy alone never decides: a storage that refused
+ * a write keeps an old copy that may equal the host while the screen shows something else.
+ */
+function align(keys, opts = {}) {
+  const changed = new Set();
+  for (const key of keys) {
+    if (pending.has(key) || inflight.has(key)) continue;
+    const k = SYNCED[key];
+    const want = own(host, key) ? k.toLocal(host[key]) : null;
+    const copyDiffers = readLocal(k.ls) !== want;
+    const moved = !!opts.before && opts.before.get(key) !== want;
+    if (!copyDiffers && !moved && !opts.force) continue;
+    if (copyDiffers) writeLocal(k.ls, want);
+    changed.add(key);
+  }
+  if (changed.size) apply(changed);
+}
+
+function apply(changed) {
+  // Only what differs from what the page shows (a key re-applied after its own write may already be in force).
+  const T = globalThis.AgendTheme;
+  if (changed.has("theme") && typeof T !== "undefined") { const v = hostPref("theme") || "system"; if (typeof T.get !== "function" || T.get() !== v) T.set(v); }
+  if (changed.has("lang")) {
+    const l = hostPref("lang");
+    // None chosen any more: the device's own language, on this page only (no copy is kept for it).
+    if (l) { if (l !== lang()) setLang(l); } else if (deviceLanguage() !== lang()) setLang(deviceLanguage(), { store: false });
+  }
+  const P = globalThis.AgendPreview;
+  if (changed.has("preview.optIn") && P && typeof P.setOptIn === "function") {
+    const on = hostPref("preview.optIn") === true;
+    if (typeof P.optedIn !== "function" || P.optedIn() !== on) P.setOptIn(on);
+  }
+  for (const fn of [...listeners]) { try { fn(changed); } catch { /* one listener's error stops no other */ } }
+}
+
+/**
+ * Once per device: upload what this browser had for the keys the host has not got yet (each on its own, onlyIfUnset — a
+ * value the host refuses as invalid is simply not taken), then adopt the host's values. Marked only when every upload
+ * was answered (taken, or refused as invalid) and the read back succeeded; a request with no answer, a server error, a
+ * refused session or an unreadable store leaves the device unmarked, so the next load tries again.
+ */
+export async function migratePrefs() {
+  if (!prefsWritable() || inStep()) return false;
+  for (const key of Object.keys(SYNCED)) {
+    if (own(host, key)) continue;
+    const local = SYNCED[key].fromLocal(readLocal(SYNCED[key].ls));
+    if (local === undefined) continue;
+    let r;
+    try { r = await post({ [key]: local }, true); } catch { return false; }
+    if (!r.ok && r.status !== 400) return false;
+  }
+  if (!(await refresh())) return false;
+  writeLocal(SYNCED_FLAG, "1");
+  return true;
+}
+
+/** The app's boot ("full" mode): the first-load migration, then another device's changes at each status frame. */
+export function bootPrefs() {
+  if (!initial) return;
+  // Each new revision the frames announce, read once (the store changes many times a second); one announced while a read
+  // is out is read as soon as it ends. Seen only once its read succeeded: after a failed read the next try waits for a
+  // later frame, at least RETRY_MS on.
+  let seen = rev, busy = false, failedAt = -Infinity;
+  const check = () => {
+    const r = appStore.get().prefsRev;
+    if (typeof r !== "number" || r === seen || busy) return;
+    if (r === rev) { seen = r; return; }
+    if (now() - failedAt < RETRY_MS) return;
+    busy = true;
+    refresh().then((ok) => { if (ok) seen = r; else failedAt = now(); }, () => { failedAt = now(); })
+      .finally(() => { busy = false; check(); });
+  };
+  appStore.subscribe(check);
+  migratePrefs();
+}

package/dist/ui/shared/app-route.js

@@ -13,7 +13,7 @@ export function isSafeInstanceName(name) {
 }
 
 /**
- * A path → the route it names: { panel: "chat" | "view" | "details", instance } | { panel: "fleet", tab } |
+ * A path → the route it names: { panel: "chat" | "view" | "details" | "log", instance } | { panel: "fleet", tab } |
  * { panel: "settings", section } | null (not a page of the app: a full load). A malformed name is null too; the
  * server answers it 400.
  */
@@ -28,6 +28,9 @@ export function parseRoute(pathname) {
   if (m) return FLEET_TABS.includes(m[1]) ? { panel: "fleet", tab: m[1] } : null;
   m = /^\/ui\/chat\/([^/]+)$/.exec(pathname);
   if (m) return named("chat", m[1]);
+  // #1218: one instance's Log.
+  m = /^\/ui\/log\/([^/]+)$/.exec(pathname);
+  if (m) return named("log", m[1]);
   if (pathname === "/view") return { panel: "view", instance: null };
   m = /^\/view\/([^/]+)$/.exec(pathname);
   if (m) return named("view", m[1]);
@@ -45,6 +48,7 @@ function named(panel, segment) {
 export function chatPath(instance) { return `/ui/chat/${encodeURIComponent(instance)}`; }
 export function viewPath(instance) { return instance ? `/view/${encodeURIComponent(instance)}` : "/view"; }
 export function detailsPath(instance) { return `/ui/fleet/agent/${encodeURIComponent(instance)}`; }
+export function logPath(instance) { return `/ui/log/${encodeURIComponent(instance)}`; }
 export function fleetPath(tab) { return tab && tab !== "tasks" ? `/ui/fleet/${tab}` : "/ui/fleet"; }
 export const NEEDS_PATH = "/ui/needs";
 export function settingsPath(section) { return section && section !== "agents" ? `/settings/${section}` : "/settings"; }
@@ -55,6 +59,7 @@ export function routePath(route) {
   if (route.panel === "needs") return NEEDS_PATH;
   if (route.panel === "view") return viewPath(route.instance);
   if (route.panel === "details") return detailsPath(route.instance);
+  if (route.panel === "log") return logPath(route.instance);
   return route.instance ? chatPath(route.instance) : "/ui";
 }
 /** One string per route: a change of it is a new navigation (a new lease for the panel, §4). */