@songsid/agend 2.2.0-beta.2 → 2.2.0-beta.4

package/dist/fleet-manager.js

@@ -4,6 +4,7 @@ import { SettingsHttpConfirmation } from "./settings-http-confirmation.js";
 import { SettingsControlServer } from "./settings-control.js";
 import { SettingsExecution, settingsRevision, noteSettingsWrite, settingsFileResource, assertSettingsLease, trySettingsLease, waitSettingsLease, settingsUndo, undoSettingsPaths } from "./settings-transaction.js";
 import { performance } from "node:perf_hooks";
+import { withSpawnHoldReply } from "./spawn-hold-reply.js";
 import { gatewayRequestContext } from "./web-request-context.js";
 import { createPublicWebGateway } from "./public-web-gateway.js";
 import { handleWebIconRequest } from "./web-icons.js";
@@ -75,7 +76,7 @@ import { InstanceLifecycle, SupersededStartError, BACKEND_INSTALLATION_INFO, che
 import { TopicArchiver } from "./topic-archiver.js";
 import { StatuslineWatcher } from "./statusline-watcher.js";
 import { outboundHandlers } from "./outbound-handlers.js";
-import { DeliveryOutbox } from "./delivery-outbox.js";
+import { DeliveryOutbox, DEFAULT_REPLY_OBLIGATION_TTL_MS, isSilentScheduleDelivery } from "./delivery-outbox.js";
 // The target Daemon can legitimately wait 30 minutes for a busy pane before
 // deciding to defer before submission. This is an alert threshold only: the
 // active manager/target generation pair owns the lane until the daemon reports
@@ -129,6 +130,8 @@ export function applyTaskListCap(tasks, filterAssignee, filterStatus) {
 import { handleWebRequest, broadcastSseEvent, SSE_HEARTBEAT_MS } from "./web-api.js";
 import { WebChatHistory, WEB_CHAT_TEXT_MAX, isWebMessageId, newWebMessageId } from "./web-chat-history.js";
 import { WebChatDiskStore } from "./web-chat-store.js";
+import { SeenUsers, resolveMentions } from "./web-mentions.js";
+import { WebPrefsStore } from "./web-prefs.js";
 import { ReplyButtonStore, parseReplyButtons, replyButtonClickText, replyButtonsFallbackText, REPLY_BUTTON_PREFIX } from "./reply-buttons.js";
 import { ReplyButtonsController } from "./reply-buttons-controller.js";
 import { publicAttachment, sweepOrphanedUploads, WebFileLedger } from "./web-upload.js";
@@ -150,7 +153,7 @@ import { runVisibilityCommand } from "./cross-instance-notice.js";
 import { installedChannel, isPrereleaseVersion, updateNoticeKey } from "./update-check.js";
 import { resolveInstalledAgend } from "./update-dispatch.js";
 import { resolveUpdateLaunch, watchUpdateLaunch } from "./update-launch.js";
-import { LoginController, LOGIN_TOKEN_RESEND_PREFIX, POST_LOGIN_RECOVERY_DEADLINE_MS } from "./login-controller.js";
+import { admitProfileLogin, LoginController, LOGIN_TOKEN_RESEND_PREFIX, POST_LOGIN_RECOVERY_DEADLINE_MS } from "./login-controller.js";
 import { runBeforeDeadline } from "./deadline.js";
 import { LoginWindowLock } from "./login-window-lock.js";
 import { handleSettingsRequest } from "./settings-api.js";
@@ -178,7 +181,7 @@ import { GENERAL_PAUSE_ERROR, isGeneralInstance } from "./general-instance.js";
 import { buildOrgChart } from "./web-org.js";
 import { CacheService, WINDOWS } from "./cache-service.js";
 import { runWebCommand } from "./web-commands.js";
-import { claudeProjectKey } from "./backend/claude-code.js";
+import { claudeConfigDirFor, claudeProjectKey } from "./backend/claude-code.js";
 import { sharedRolloutIndex } from "./rollout-index.js";
 import { mayUseTool, resolveToolSet, scheduleOpRefusal, toolForIpcType, toolRefusedMessage, } from "./tool-permissions.js";
 import { authorizeSession, decideWebGate, loadOrCreateWebToken, readWebToken } from "./web-auth.js";
@@ -198,7 +201,7 @@ import { PROVIDER_SECRET_SPECS, providerSecretSpec, providerRegistryEnvKeys, isR
 /** A self-restart is a whole service restart; 120s is the apply budget, not this. */
 const SELF_RESTART_DEADLINE_MS = 300_000;
 import { APPLY_FLEET_TARGET, ApplyJobStore, viewOf, } from "./apply-job.js";
-import { credentialSwitchStartsFresh, instanceCredentialProfile } from "./backend/credential-profile.js";
+import { CHAT_PROFILE_LOGIN_BACKENDS, credentialHomeSpec, credentialProfileHome, credentialSwitchStartsFresh, instanceCredentialProfile } from "./backend/credential-profile.js";
 import { mergeBackendOptions, profileKey, profileName, profileOf } from "./classic-bindings.js";
 import { classifyInstanceChange, CLASSIC_HOT_CONFIG_KEYS, HOT_INSTANCE_CONFIG_KEYS, hotConfigUpdate, } from "./instance-config-impact.js";
 import { formatRestartProgressCompletion, RESTART_PROGRESS_TERMINAL_TIMEOUT_MS, RestartProgress, } from "./restart-progress.js";
@@ -427,6 +430,8 @@ const CLI_ENV_FRESH_MS = 60 * 60 * 1000;
  * and hides exactly the newly released model the user opened `/model` to find.
  * The wait is announced before it starts, so it reads as progress, not a stall.
  */
+/** #1690: how long `/model` waits for the daemon's word on our own runtime switch (its dialog wait plus settling). */
+export const RUNTIME_SWITCH_RESULT_MS = 12_000;
 export const CLI_ENV_PROBE_DEADLINE_MS = 16_000;
 /**
  * How many CLIs may cold-start at once, from BOTH memory and cores.
@@ -749,8 +754,8 @@ export class FleetManager {
     memoryLogAt = null;
     memoryDebugAt = null;
     memoryLogLevel = null;
-    memoryNoticeAt = null;
-    memoryNoticeLevel = null;
+    /** #1685: the host_memory value the last status frame carried, so a change re-sends the frame. */
+    memoryIndicatorShown = null;
     // Mirror topic: buffer cross-instance messages, flush every 3s
     mirrorBuffer = [];
     mirrorTimer = null;
@@ -762,6 +767,17 @@ export class FleetManager {
     webChatStore = null;
     /** Uploaded files and the files the dashboard may fetch back (uploads, reply attachments). */
     webFiles = new WebFileLedger();
+    /** #1682: the people seen on inbound messages (id → name), for the web chat's mention pills; bounded, in memory. */
+    seenUsers = new SeenUsers();
+    webPrefsStore;
+    /** #1665: the web preferences kept on the host (<home>/web-prefs.json), read on first use. */
+    get webPrefs() {
+        // #1664: a favorite must be an instance of this fleet now — fleet.yaml's (own keys) or a ClassicBot room's.
+        return (this.webPrefsStore ??= new WebPrefsStore(this.dataDir, {
+            exists: (name) => Object.hasOwn(this.fleetConfig?.instances ?? {}, name)
+                || (this.classicChannels?.getAll() ?? []).some((ch) => ch.instanceName === name),
+        }));
+    }
     /**
      * Read from disk on every access rather than cached at startup: `agend
      * web-token rotate` runs in a separate process, and a cached copy would keep
@@ -1219,8 +1235,13 @@ export class FleetManager {
             if (event.deliveryId && (event.state === "failed" || event.state === "uncertain")) {
                 const row = outbox.get(event.deliveryId);
                 if (row && row.kind !== "delivery_outcome_notice" && row.kind !== "post_restart_outcome_notice") {
-                    const notice = t(`delivery.fleet_${row.state}`, row.targetInstance, row.operationId, row.deliveryId);
-                    this.logger.error({ deliveryId: row.deliveryId, operationId: row.operationId, target: row.targetInstance, state: row.state }, notice);
+                    // #1647: the cause goes in the log (the notice points there), and a silent schedule's paste says what it is.
+                    const silent = isSilentScheduleDelivery(row);
+                    const notice = silent
+                        ? t(`delivery.fleet_${row.state}_silent_schedule`, row.targetInstance, row.operationId, row.deliveryId, row.lastError ?? "unknown")
+                        : t(`delivery.fleet_${row.state}`, row.targetInstance, row.operationId, row.deliveryId);
+                    this.logger.error({ deliveryId: row.deliveryId, operationId: row.operationId, target: row.targetInstance, state: row.state,
+                        cause: row.lastError, ...(silent ? { silentSchedule: true } : {}) }, notice);
                     this.notifyFleetError(notice);
                 }
             }
@@ -1315,7 +1336,9 @@ export class FleetManager {
         // #926: a restart kills the turn that was working on a request, and a
         // resumed CLI does not pick it back up. Remind the owner once per restart.
         try {
-            outbox.remindReplyObligations(name, { reason: "restart", graceMs: 0, since: new Date() });
+            const now = new Date();
+            this.expireReplyObligations(now);
+            outbox.remindReplyObligations(name, { reason: "restart", graceMs: 0, now, since: now, restartId: daemonBootId });
         }
         catch (err) {
             this.logger.error({ err, owner: name }, "Could not persist the post-restart reply reminder");
@@ -1333,6 +1356,7 @@ export class FleetManager {
             return;
         const stateOf = (name) => this.daemons.get(name)?.getInstanceState();
         try {
+            this.expireReplyObligations(now);
             for (const name of this.daemons.keys()) {
                 if (stateOf(name) === "idle")
                     outbox.remindReplyObligations(name, { now, graceMs: REPLY_REMINDER_GRACE_MS, reason: "turn-ended" });
@@ -1344,6 +1368,15 @@ export class FleetManager {
             this.logger.error({ err }, "Reply-obligation sweep failed");
         }
     }
+    expireReplyObligations(now) {
+        const hours = this.fleetConfig?.defaults?.reply_obligation_ttl_hours;
+        const duration = typeof hours === "number" && hours > 0 && Number.isFinite(hours * 3_600_000)
+            ? hours * 3_600_000 : DEFAULT_REPLY_OBLIGATION_TTL_MS;
+        for (const row of this.deliveryOutbox.expireReplyObligations({ now, ttlMs: duration })) {
+            this.logger.info({ owner: row.ownerInstance, requester: row.requesterInstance,
+                correlationId: row.correlationId, lastAskedAt: row.lastAskedAt, expiredAt: row.expiredAt }, "Reply obligation expired");
+        }
+    }
     scheduleDeliveryOutboxPump(delayMs = 0) {
         if (!this.deliveryOutbox || this.shuttingDown || !this.deliveryOutbox.isOpen)
             return;
@@ -1583,6 +1616,14 @@ export class FleetManager {
             return Math.max(1, Math.min(20, explicit));
         return deriveSpawnConcurrency(Math.round(freemem() / (1024 * 1024)), cpus().length);
     }
+    /** #1685: "elevated" or "critical" while host memory pressure slows or holds new agents; otherwise null (an
+     *  unknown macOS reading — the advisory case — is unknown, so null too). */
+    hostMemoryIndicator() {
+        if (!this.memoryPressure)
+            return null;
+        const level = this.memoryPressure.snapshot().level;
+        return level === "elevated" || level === "critical" ? level : null;
+    }
     /** Separate cooldown: changing measurements must not create new text-throttle keys. */
     reportMemoryPressure(snapshot) {
         if (this.shuttingDown)
@@ -1593,6 +1634,12 @@ export class FleetManager {
             this.logger.debug({ hostMemory: snapshot }, "Host memory sample");
         }
         const changed = snapshot.level !== this.memoryLogLevel;
+        // #1685: the dashboard's indicator (the status frame's host_memory) is re-sent when it changes.
+        const indicator = this.hostMemoryIndicator();
+        if (indicator !== this.memoryIndicatorShown) {
+            this.memoryIndicatorShown = indicator;
+            this.emitSseEvent("status", this.getUiStatus());
+        }
         if (this.memoryPressure.advisoryOnly()) {
             // The sampler logs the unknown kernel value once per lifecycle; no warning/cooldown here.
             this.memoryLogLevel = snapshot.level;
@@ -1613,20 +1660,6 @@ export class FleetManager {
                     : "Host memory sample unavailable — slowing new CLI spawns");
         }
         this.memoryLogLevel = snapshot.level;
-        if (!snapshot.memory || snapshot.level === "unknown" || (!this.adapter && this.adapters.size === 0))
-            return;
-        const escalation = snapshot.level === "critical" && this.memoryNoticeLevel !== "critical";
-        if (!escalation && this.memoryNoticeAt !== null && now - this.memoryNoticeAt < 10 * 60_000)
-            return;
-        const size = (bytes) => bytes === null ? t("memory.unknown") : `${Math.round(bytes / 1024 / 1024)} MiB`;
-        const action = t(snapshot.level === "critical" ? "memory.holding" : "memory.slowing");
-        const text = this.memoryPressure.platform === "darwin"
-            ? t("memory.kernel_pressure", snapshot.memory.darwinPressureLevel ?? t("memory.unknown"), size(snapshot.memory.availableBytes), size(snapshot.memory.swapFreeBytes), action)
-            : t("memory.pressure", t(snapshot.memory.availableKind === "available" ? "memory.available" : "memory.free", size(snapshot.memory.availableBytes)), size(snapshot.memory.swapFreeBytes), action);
-        if (this.notifyFleetError(text, { throttle: false })) {
-            this.memoryNoticeAt = now;
-            this.memoryNoticeLevel = snapshot.level;
-        }
     }
     /** Wire the one fleet-wide storm into notification and recovery surfaces. */
     bindStormWindowEvents() {
@@ -3020,13 +3053,38 @@ export class FleetManager {
         }
         return posted;
     }
-    reserveWebChannelEcho(instanceName, sendEcho) {
+    /**
+     * #1666: a delivered web chat message starts the same cancel/progress lifecycle in the instance's topic as a platform
+     * inbound (afterUserInboundDelivered): the same bubble, ticker and retire rules. Not its ✅ tracking — the web message
+     * id is no platform message, and the echo is the fleet's own post. The web send calls this on the echo's lane.
+     */
+    startWebChatProgress(instanceName) {
+        if (this.shuttingDown)
+            return Promise.resolve();
+        return this.sendCancelButton(instanceName);
+    }
+    /**
+     * `copy: false` (#1666/#1668): an entry that is not a copy of a message — the web send's Cancel/progress bubble. It
+     * keeps its place in the order, but the lane's copy rules do not apply to it: its 5 s budget starts when its turn
+     * starts (waiting behind a slow echo is not its delay), its own timeout only releases the lane (the copies queued
+     * behind it are not "behind an ambiguous copy"), and another entry's timeout never drops it. A copy reserved while
+     * any non-copy is still open starts its own budget when the last of them finishes: a slow bubble is no copy's delay,
+     * however far back the copy is. And a timeout only ever drops copies reserved AFTER the entry that timed out — with
+     * deferred budgets, deadlines no longer grow with the order, so that rule is stated, not implied (#1668 r3).
+     */
+    reserveWebChannelEcho(instanceName, sendEcho, opts = {}) {
+        const copy = opts.copy !== false;
         const epoch = this.getDeliveryEpoch(instanceName);
-        const deadlineAt = performance.now() + 5_000;
+        const queued = this.webChannelEchoTails.get(instanceName);
+        // The last open non-copy ahead of this copy: its budget starts when that one finishes.
+        const nonCopyAhead = copy && (queued?.nonCopiesOpen ?? 0) > 0 ? queued?.lastNonCopyDone : undefined;
+        let deadlineAt = copy && !nonCopyAhead ? performance.now() + 5_000 : Number.POSITIVE_INFINITY;
         let decide;
         const admission = new Promise(resolve => { decide = resolve; });
-        const queue = this.webChannelEchoTails.get(instanceName)
+        const queue = queued
             ?? { tail: Promise.resolve(), pending: new Set() };
+        const seq = queue.nextSeq ?? 0;
+        queue.nextSeq = seq + 1;
         const previous = queue.tail;
         let resolveDone;
         const tail = new Promise(resolve => { resolveDone = resolve; });
@@ -3037,6 +3095,8 @@ export class FleetManager {
             if (done)
                 return;
             done = true;
+            if (!copy)
+                queue.nonCopiesOpen = Math.max(0, (queue.nonCopiesOpen ?? 0) - 1);
             clearTimeout(timer);
             queue.pending.delete(entry);
             if (guard && this.webChannelEchoGuards.get(instanceName) === guard) {
@@ -3044,7 +3104,7 @@ export class FleetManager {
             }
             resolveDone();
         };
-        const entry = { started: false, drop: () => {
+        const entry = { seq, started: false, copy, drop: () => {
                 this.logger.warn({ instanceName }, "Queued web channel echo dropped after ordering timeout");
                 finish();
             } };
@@ -3054,14 +3114,16 @@ export class FleetManager {
             expired = true;
             this.logger.warn({ instanceName, inFlight: entry.started }, "Web channel echo ordering timed out");
             finish();
-            // Do not post copies that were queued behind an ambiguous platform send.
-            for (const pending of queue.pending)
-                if (!pending.started)
-                    pending.drop();
+            // Do not post copies that were queued behind an ambiguous platform send. A non-copy that timed out was no copy
+            // at all (nothing behind it is ambiguous), and a non-copy is never dropped as one.
+            if (copy)
+                for (const pending of queue.pending)
+                    if (pending.seq > seq && !pending.started && pending.copy)
+                        pending.drop();
         };
         const checkDeadline = () => {
-            if (done)
-                return;
+            if (done || deadlineAt === Number.POSITIVE_INFINITY)
+                return; // a non-copy's budget has not started yet
             const remaining = deadlineAt - performance.now();
             if (remaining <= 0)
                 expire();
@@ -3070,8 +3132,19 @@ export class FleetManager {
         };
         queue.pending.add(entry);
         queue.tail = tail;
+        if (!copy) {
+            queue.nonCopiesOpen = (queue.nonCopiesOpen ?? 0) + 1;
+            queue.lastNonCopyDone = tail;
+        }
         this.webChannelEchoTails.set(instanceName, queue);
         checkDeadline();
+        // Registered before the admission below (which waits on `previous`, itself after the non-copy ahead), so the budget
+        // is set by the time that runs.
+        if (nonCopyAhead)
+            void nonCopyAhead.then(() => { if (!done) {
+                deadlineAt = performance.now() + 5_000;
+                checkDeadline();
+            } });
         void Promise.all([previous, admission]).then(([, accepted]) => {
             if (done)
                 return;
@@ -3080,11 +3153,15 @@ export class FleetManager {
                 return;
             }
             // A delayed timer callback must not admit an already expired copy.
-            if (performance.now() >= deadlineAt) {
+            if (copy && performance.now() >= deadlineAt) {
                 expire();
                 return;
             }
             entry.started = true;
+            if (!copy) {
+                deadlineAt = performance.now() + 5_000;
+                checkDeadline();
+            }
             guard = { epoch, deadlineAt };
             this.webChannelEchoGuards.set(instanceName, guard);
             let request;
@@ -3251,6 +3328,9 @@ export class FleetManager {
      * the check and the act, so the channel's instance cannot be rebound to another bot in between.
      */
     async dispatchSlash(slash, adapterId, adapter) {
+        return withSpawnHoldReply(text => slash.respond(text), () => this.dispatchSlashCore(slash, adapterId, adapter));
+    }
+    async dispatchSlashCore(slash, adapterId, adapter) {
         // #1569: an alias (/web) is its command (/dashboard) from here on — the door, the table and the handler see one name.
         const data = { ...slash, command: canonicalCommand(slash.command) };
         const door = this.slashDoor(data, adapterId);
@@ -4710,6 +4790,16 @@ export class FleetManager {
             await owner.binding.sendText(owner.chatId, t("dashboard.menu_failed"), { threadId: owner.threadId }).catch(() => undefined);
         }
     }
+    /**
+     * #1686: build the Telegram deep-link that opens a DM with this bot pre-seeded with `/start web`.
+     * Returns null when no botUsername is known or the username fails Telegram's format validation.
+     */
+    tgStartWebUrl(adapterId) {
+        const username = this.worlds.get(adapterId)?.botUsername;
+        if (!username || !/^[A-Za-z0-9_]{5,32}$/.test(username))
+            return null;
+        return `https://t.me/${username}?start=web`;
+    }
     async sendLocalDashboard(data, adapterId) {
         if (this.shuttingDown || !this.hasFleetAdmins(adapterId) || !this.isFleetAdmin(data.userId, adapterId)) {
             await data.respond(t("not_authorized"));
@@ -4831,10 +4921,12 @@ export class FleetManager {
         const adapter = owner.binding;
         const status = this.getPublicWebStatus();
         const publicAllowed = publicLinkSettings(this.fleetConfig?.web).allowed;
+        const tgHint = adapter.type === "telegram" ? this.tgStartWebUrl(owner.adapterId) : null;
         const menuText = this.topicCommands.getDashboardText(false, !publicAllowed)
             + (publicAllowed ? "\n\n" + t("dashboard.public_risk") : "")
             + "\n" + t("dashboard.public_status", status.state, status.remainingSeconds ?? 0)
-            + (status.expiresAt ? t("dashboard.public_until", formatFleetTime(status.expiresAt)) : "");
+            + (status.expiresAt ? t("dashboard.public_until", formatFleetTime(status.expiresAt)) : "")
+            + (tgHint ? "\n" + t("dashboard.menu_tg_hint", tgHint) : "");
         const choices = [{ action: "local", label: t("dashboard.local") },
             ...(publicLinkSettings(this.fleetConfig?.web).allowed ? [{ action: "public", label: t("dashboard.public_open") }] : []),
             ...(status.state !== "closed" ? [{ action: "close", label: t("dashboard.public_close") }] : [])];
@@ -4977,7 +5069,11 @@ export class FleetManager {
             : owner.binding.type !== "discord" ? "dashboard.private_sent" : deliveredByDm ? "dashboard.private_sent_dm" : "dashboard.private_sent_here");
         await progress;
         await steps?.close(); // the last step edit has landed: the outcome cannot be overwritten by it
-        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, lastSteps ? renderPublicLinkProgress(lastSteps, performance.now(), outcome) : outcome, data.editClicked);
+        // #1686: attach the deep-link button on the failure outcome (Telegram only; Discord and the editClicked path ignore urlButtons).
+        const failUrlButtons = (!ok && owner.binding.type === "telegram")
+            ? (() => { const u = this.tgStartWebUrl(adapterId); return u ? [{ label: t("dashboard.start_web_label"), url: u }] : undefined; })()
+            : undefined;
+        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, lastSteps ? renderPublicLinkProgress(lastSteps, performance.now(), outcome) : outcome, data.editClicked, failUrlButtons);
         return true;
     }
     /** `/dashboard revoke`: sign out every browser and withdraw any unused code. */
@@ -5322,7 +5418,11 @@ export class FleetManager {
         // Pre-flight (advisory, fire-and-forget): warm the per-backend auth cache
         // before instances spawn, so a CLI that comes up on its sign-in screen gets
         // an instant 🔑 verdict instead of decaying into crash/MCP-died noise.
-        this.lifecycle.primeAuthVerification(Object.values(fleet.instances).map(config => config.backend ?? fleet.defaults?.backend ?? "claude-code"));
+        this.lifecycle.primeAuthVerification(Object.values(fleet.instances).map(config => {
+            const backend = config.backend ?? fleet.defaults?.backend ?? "claude-code";
+            // #1699 follow-up: each instance's own login — a profile is probed with its own environment.
+            return { backend, profile: credentialHomeSpec(backend) ? instanceCredentialProfile(config, fleet.defaults, backend) : null };
+        }));
         // Start tmux control mode client for idle detection
         if (!this.controlClient) {
             this.controlClient = new TmuxControlClient(getTmuxSession(), 2000, this.logger);
@@ -6510,6 +6610,14 @@ export class FleetManager {
                         });
                     }
                 }
+                else if (msg.type === "runtime_switch_result") {
+                    // #1690: what our own runtime /model came to (the daemon answered claude's "Switch model?" or saw the result).
+                    const waiter = typeof msg.id === "string" ? this.runtimeSwitchWaiters.get(msg.id) : undefined;
+                    if (waiter) {
+                        this.runtimeSwitchWaiters.delete(msg.id);
+                        waiter(msg);
+                    }
+                }
                 else if (msg.type === "instance_state" || msg.type === "instance_state_response") {
                     this.cacheInstanceExecutionState(name, msg);
                     if (msg.type === "instance_state_response") {
@@ -7022,6 +7130,16 @@ export class FleetManager {
         });
     }
     async handleInboundMessage(msg) {
+        if (msg.isBotMessage)
+            return withSpawnHoldReply(undefined, () => this.handleInboundMessageCore(msg));
+        const adapter = this.worlds.get(msg.adapterId ?? "")?.adapter ?? this.adapters.get(msg.adapterId ?? "") ?? this.adapter;
+        return withSpawnHoldReply(text => adapter?.sendText(msg.chatId, text, { threadId: msg.threadId }) ?? Promise.resolve(), () => this.handleInboundMessageCore(msg));
+    }
+    async handleInboundMessageCore(msg) {
+        // #1682: who wrote, for the web chat's mention pills (a person, never one of the fleet's bots: those are named by
+        // the instance they belong to).
+        if (!msg.isBotMessage && msg.userId && msg.username)
+            this.seenUsers.record(msg.userId, msg.username);
         // Platform author identity is the authority. This runs before routing,
         // collab/commands/access/dedup and does not depend on any echo setting/ACK.
         const fleetBotIds = new Set();
@@ -7177,6 +7295,16 @@ export class FleetManager {
                 }
                 // Handle /start command
                 if (text === "/start" || text.startsWith("/start ")) {
+                    // #1686: intercept /start web before the ClassicBot admission flow runs.
+                    // /start alone already opens the DM for future bot-to-user messages — no further action needed.
+                    const requestedBackend = text.slice("/start".length).trim().split(/\s+/, 1)[0] || undefined;
+                    if (requestedBackend === "web" && isPrivateChat) {
+                        if (this.isFleetAdmin(msg.userId, msg.adapterId ?? "")) {
+                            await msgAdapter?.sendText(chatId, t("dashboard.start_web_ack"));
+                        }
+                        // Non-fleet-admins: /start alone is enough to open the DM channel; no further action.
+                        return;
+                    }
                     // All new starts, including explicit backend and later chooser callbacks,
                     // share validateClassicStart. Existing channels are recognized first.
                     const blocker = this.validateClassicStart(chatId, msg.userId, undefined, msg.adapterId);
@@ -7185,7 +7313,6 @@ export class FleetManager {
                         return;
                     }
                     const channelName = msg.username || chatId;
-                    const requestedBackend = text.slice("/start".length).trim().split(/\s+/, 1)[0] || undefined;
                     if (requestedBackend) {
                         // handleClassicStart binds the instance to this adapter authoritatively.
                         const reply = await this.handleClassicStart(chatId, channelName, msg.userId, undefined, msg.adapterId, requestedBackend);
@@ -9350,7 +9477,9 @@ export class FleetManager {
         else
             await this.lifecycle.remove(name, authorization);
         // A later same-name registration owns its files and caches.
-        if (this.fleetConfig?.instances[name] || this.daemons.has(name))
+        // Own keys only: an instance named "constructor" is removed as any other (its inherited namesake is not a
+        // re-registration) — #1677 review.
+        if (Object.hasOwn(this.fleetConfig?.instances ?? {}, name) || this.daemons.has(name))
             return;
         execution?.assert();
         // Clean up per-instance tracking maps so they don't grow unbounded
@@ -9362,6 +9491,13 @@ export class FleetManager {
         // must not be shown the old one's conversation, and deleted names must not pile up.
         this.webChatHistory.forget(name);
         this.webFiles.forget(name);
+        // #1664: and it is nobody's favorite any more (every device sees that at its next status frame).
+        try {
+            this.webPrefs.forgetInstance(name);
+        }
+        catch (err) {
+            this.logger.warn({ err: err.message, name }, "Dropping a removed instance from web favorites failed");
+        }
         // Clean up statusline watcher + instance directory
         this.statuslineWatcher.unwatch(name);
         // instanceDirToClean and effectiveBackend are captured before lifecycle.remove
@@ -9663,6 +9799,45 @@ export class FleetManager {
             return null;
         }
     }
+    /**
+     * #1682 GET /ui/mentions: names for the mention ids a page found in what it rendered — never a Discord request; in order:
+     * the fleet's bots (an instance's own bot is that instance's label: fleet.yaml, and the View profiles read from
+     * profiles.db, as the status frame does), the people seen on inbound messages, and the Discord adapters' caches
+     * (members, users, roles, channels).
+     */
+    webMentionNames(query) {
+        const bots = (q) => {
+            const u = Object.create(null);
+            if (!q.u.length)
+                return { u };
+            let own = new Map();
+            try {
+                own = this.ownBots();
+            }
+            catch { /* none known */ }
+            const profiles = profileIdentities(this.dataDir);
+            const rooms = new Map((this.classicChannels?.getAll() ?? []).map(ch => [ch.instanceName, ch]));
+            for (const [instance, connection] of own) {
+                const id = this.adapters.get(connection)?.getBotUserId?.();
+                if (!id || !q.u.includes(id))
+                    continue;
+                const cfg = Object.hasOwn(this.fleetConfig?.instances ?? {}, instance) ? this.fleetConfig.instances[instance] : undefined;
+                u[id] = resolveInstanceIdentity({ cfg, classic: rooms.get(instance), profile: profiles.get(instance) }).display_name || instance;
+            }
+            return { u };
+        };
+        const seen = (q) => {
+            const u = Object.create(null);
+            for (const id of q.u) {
+                const name = this.seenUsers.get(id);
+                if (name)
+                    u[id] = name;
+            }
+            return { u };
+        };
+        const caches = [...this.adapters.values()].filter(a => typeof a.mentionNames === "function").map(a => (q) => a.mentionNames(q));
+        return resolveMentions(query, [bots, seen, ...caches]);
+    }
     /** GET /ui/emojis: the custom emoji of every server the fleet's Discord bots are in (the Settings picker's cache). */
     async webEmojiList() {
         const adopted = [];
@@ -11106,6 +11281,48 @@ export class FleetManager {
         });
     }
     cacheService = null;
+    /**
+     * #1699: the credential profile an instance's CLI signs in with on `backend` — fleet.yaml's (with its defaults), or a
+     * ClassicBot room's launched or would-be login when the room runs that backend. Null: the backend's default login
+     * (also for a backend that has no profiles, where the option is ignored).
+     */
+    credentialProfileOf(name, backend) {
+        if (!credentialHomeSpec(backend))
+            return null;
+        const cfg = this.fleetConfig?.instances?.[name];
+        if (cfg)
+            return instanceCredentialProfile(cfg, this.fleetConfig?.defaults, backend);
+        const launched = this.daemons.get(name)?.getConfigSnapshot?.();
+        if (launched)
+            return (launched.backend ?? "claude-code") === backend ? profileName(profileOf(launched.backend_options, backend)) : null;
+        if (!this.classicChannels || this.classicChannels.getBackendByInstance(name, this.fleetConfig?.defaults?.backend) !== backend)
+            return null;
+        return profileName(this.classicChannels.getCredentialProfileByInstance(name, this.fleetConfig?.defaults));
+    }
+    /**
+     * #1699: the claude config dir an instance's CLI uses — its credential profile's, else exactly as before
+     * (CLAUDE_CONFIG_DIR or ~/.claude).
+     */
+    claudeConfigDirOf(name) {
+        const profile = this.credentialProfileOf(name, "claude-code");
+        return claudeConfigDirFor(profile ? credentialProfileHome(getAgendHome(), "claude-code", profile) : null);
+    }
+    /** The instances the cache analysis reads: fleet.yaml's, then the ClassicBot rooms (their workspace under the AgEnD home, their own backend). */
+    cacheInstances() {
+        const fleet = Object.entries(this.fleetConfig?.instances ?? {}).map(([name, cfg]) => ({
+            name, backend: this.backendNameOf(name), workingDirectory: cfg.working_directory, ledgerPath: join(this.getInstanceDir(name), "cache-ledger.json"),
+            claudeConfigDir: this.claudeConfigDirOf(name),
+        }));
+        const taken = new Set(fleet.map(i => i.name));
+        const classic = (this.classicChannels?.getAll() ?? []).filter(ch => !taken.has(ch.instanceName)).map(ch => ({
+            name: ch.instanceName,
+            backend: this.classicChannels?.getBackendByInstance(ch.instanceName, this.fleetConfig?.defaults?.backend) ?? this.fleetConfig?.defaults?.backend ?? "claude-code",
+            workingDirectory: join(getAgendHome(), "workspaces", ch.instanceName),
+            ledgerPath: join(this.getInstanceDir(ch.instanceName), "cache-ledger.json"),
+            claudeConfigDir: this.claudeConfigDirOf(ch.instanceName),
+        }));
+        return [...fleet, ...new Map(classic.map(c => [c.name, c])).values()];
+    }
     /**
      * #1468: the prompt-cache expiry analysis for the web, per instance, over `window`. Read from each instance's
      * ledger as it is now; the first request starts the bounded, persisted catch-up over the transcripts
@@ -11114,20 +11331,7 @@ export class FleetManager {
     cacheReport(window) {
         const w = Object.prototype.hasOwnProperty.call(WINDOWS, window) ? window : "7d";
         this.cacheService ??= new CacheService({
-            // fleet.yaml's instances, then the ClassicBot rooms (their workspace under the AgEnD home, their own backend).
-            instances: () => {
-                const fleet = Object.entries(this.fleetConfig?.instances ?? {}).map(([name, cfg]) => ({
-                    name, backend: this.backendNameOf(name), workingDirectory: cfg.working_directory, ledgerPath: join(this.getInstanceDir(name), "cache-ledger.json"),
-                }));
-                const taken = new Set(fleet.map(i => i.name));
-                const classic = (this.classicChannels?.getAll() ?? []).filter(ch => !taken.has(ch.instanceName)).map(ch => ({
-                    name: ch.instanceName,
-                    backend: this.classicChannels?.getBackendByInstance(ch.instanceName, this.fleetConfig?.defaults?.backend) ?? this.fleetConfig?.defaults?.backend ?? "claude-code",
-                    workingDirectory: join(getAgendHome(), "workspaces", ch.instanceName),
-                    ledgerPath: join(this.getInstanceDir(ch.instanceName), "cache-ledger.json"),
-                }));
-                return [...fleet, ...new Map(classic.map(c => [c.name, c])).values()];
-            },
+            instances: () => this.cacheInstances(),
             claudeProjectsDir: () => join(process.env.CLAUDE_CONFIG_DIR?.trim() || join(homedir(), ".claude"), "projects"),
             claudeKey: claudeProjectKey,
             codexSessionsDir: () => join(process.env.CODEX_HOME?.trim() || join(homedir(), ".codex"), "sessions"),
@@ -11314,7 +11518,9 @@ export class FleetManager {
     }
     async retireNonceButtons(pending, messageId, text, 
     /** The click's own edit of a private prompt (AdapterCallbackData.editClicked); preferred over the prompt's. */
-    editClicked) {
+    editClicked, 
+    /** #1686: URL buttons to attach when editing the outcome (Telegram only; ignored when editClicked or retire is set). */
+    urlButtons) {
         this.webPromptGone(pending, text);
         try {
             const retire = editClicked ?? pending.retire;
@@ -11324,7 +11530,12 @@ export class FleetManager {
             }
             if (!pending.adapter.editMessageRemoveButtons)
                 throw new Error("adapter cannot remove prompt buttons");
-            await pending.adapter.editMessageRemoveButtons(pending.chatId, messageId, text, pending.threadId);
+            if (urlButtons) {
+                await pending.adapter.editMessageRemoveButtons(pending.chatId, messageId, text, pending.threadId, urlButtons);
+            }
+            else {
+                await pending.adapter.editMessageRemoveButtons(pending.chatId, messageId, text, pending.threadId);
+            }
         }
         catch (err) {
             // The action was already atomically consumed. An edit failure must not
@@ -11938,9 +12149,12 @@ export class FleetManager {
      * Backends with no remote login flow (opencode logs in from a terminal) get
      * no button — the alert's own wording already tells them what to run.
      */
-    async offerBackendLogin(targetInstance, backend) {
+    async offerBackendLogin(targetInstance, backend, profile) {
         if (!LOGIN_FLOWS[backend])
             return;
+        if (profile && !CHAT_PROFILE_LOGIN_BACKENDS.has(backend))
+            return; // that profile signs in on the host
+        const shown = profile ? t("login.profile_label", backend, profile) : backend;
         const adapterId = this.getInstanceAdapterId(targetInstance);
         const adapter = this.getAdapterForInstance(targetInstance);
         const chatId = this.getGroupIdForInstance(targetInstance);
@@ -11958,9 +12172,10 @@ export class FleetManager {
             adapterId,
             chatId,
             threadId,
-            message: t("login.offer", backend),
-            choices: [{ action: backend, label: t("login.offer_action", backend) }],
+            message: t("login.offer", shown),
+            choices: [{ action: backend, label: t("login.offer_action", shown) }],
             expiredText: t("buttons.stale"),
+            ...(profile ? { extra: { loginProfile: profile } } : {}),
         });
     }
     /** Consume a General assist button exactly once. */
@@ -12773,7 +12988,7 @@ export class FleetManager {
                 fleetConfig: () => this.fleetConfig,
                 isFleetAdmin: (userId, adapterId) => this.isFleetAdmin(userId, adapterId),
                 eventLog: () => this.eventLog,
-                recoverBackendInstances: backend => this.recoverBackendInstances(backend),
+                recoverBackendInstances: (backend, profile) => this.recoverBackendInstances(backend, undefined, profile ?? null),
                 claimWindow: backend => this.loginWindow.tryClaim("web", backend),
                 releaseWindow: claim => { this.loginWindow.release(claim); },
                 isClaimCurrent: claim => this.loginWindow.isCurrent(claim),
@@ -12782,11 +12997,12 @@ export class FleetManager {
                 reserveTunnel: owner => this.getTunnelLane().reserve("login", owner),
                 // Throws when the prompt cannot be posted: the controller tells the
                 // user so instead of leaving "Starting…" as the last word (#1133).
-                postButtons: async ({ prefix, instanceName, chat, message, choices, expiredText }) => {
+                postButtons: async ({ prefix, instanceName, chat, message, choices, expiredText, profile }) => {
                     await this.postNonceButtonPromptOrThrow({
                         prefix, alertType: "login", instanceName,
                         adapter: chat.adapter, adapterId: chat.adapterId, chatId: chat.chatId, threadId: chat.threadId,
                         message, choices, expiredText,
+                        ...(profile ? { extra: { loginProfile: profile } } : {}),
                     });
                 },
             });
@@ -13000,10 +13216,20 @@ export class FleetManager {
         // A removed backend (#1280) is neither installed nor signed into: say what replaces it.
         if (isRemovedBackend(wanted))
             return removedBackendMessage(wanted);
+        // #1699 part 2: a profile is admitted before anything is installed for it — a name that is not one, or a backend
+        // whose profiles sign in on the host, is refused here, not after an install it did not need.
+        if (opts.profile !== undefined) {
+            const admitted = admitProfileLogin(wanted, opts.profile);
+            if ("refusal" in admitted)
+                return admitted.refusal;
+            opts = { ...opts, profile: admitted.profile };
+        }
         if (BACKEND_INSTALLATION_INFO[wanted] && !this.isCliInstalled(wanted)) {
             const flow = LOGIN_FLOWS[wanted];
             this.recordLoginFlow(wanted, flow && flow.remoteLogin !== "unsupported" ? "install_then_login" : "install_only", chat.userId);
-            return this.startInstallSession(wanted, chat);
+            return opts.profile !== undefined
+                ? this.startInstallSession(wanted, chat, { profile: opts.profile })
+                : this.startInstallSession(wanted, chat);
         }
         this.recordLoginFlow(wanted, "login", chat.userId);
         return this.launchSignIn(backendArg, chat, opts);
@@ -13092,7 +13318,9 @@ export class FleetManager {
      * cancelled: they are still coming back, and are reported as pending so the
      * message can say so instead of implying failure.
      */
-    async recoverBackendInstances(backend, deadlineMs = POST_LOGIN_RECOVERY_DEADLINE_MS) {
+    async recoverBackendInstances(backend, deadlineMs = POST_LOGIN_RECOVERY_DEADLINE_MS, 
+    /** #1699 part 2: the login just signed in — a profile, or null for the backend's default one. */
+    profile = null) {
         const woken = [];
         const restarted = [];
         const pending = [];
@@ -13100,6 +13328,9 @@ export class FleetManager {
         for (const name of this.configuredBackendInstanceNames()) {
             if (this.backendNameOf(name) !== backend)
                 continue;
+            // Only the instances on the login that changed: another profile's (or the default's) credentials did not.
+            if (this.credentialProfileOf(name, backend) !== profile)
+                continue;
             const status = this.getInstanceStatus(name);
             if (status !== "paused" && status !== "running")
                 continue;
@@ -13137,14 +13368,16 @@ export class FleetManager {
         if (claimed === "consumed")
             return true;
         const { entry, action: backend } = claimed;
-        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.starting_backend", backend));
-        const text = await this.startLoginSession(backend, {
+        const profile = entry.loginProfile;
+        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.starting_backend", profile ? t("login.profile_label", backend, profile) : backend));
+        const chat = {
             adapter: entry.adapter,
             adapterId: entry.adapterId,
             chatId: entry.chatId,
             threadId: entry.threadId,
             userId: data.userId,
-        });
+        };
+        const text = profile ? await this.startLoginSession(backend, chat, { profile }) : await this.startLoginSession(backend, chat);
         if (text)
             await this.postPromptOutcome(entry, text);
         return true;
@@ -13158,11 +13391,13 @@ export class FleetManager {
             return true;
         const { entry, action } = claimed;
         const backend = entry.instanceName;
+        const profile = entry.loginProfile;
+        const shown = profile ? t("login.profile_label", backend, profile) : backend;
         if (action === "cancel") {
-            await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.cancelled", backend));
+            await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.cancelled", shown));
             return true;
         }
-        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.starting_backend", backend));
+        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.starting_backend", shown));
         const text = await this.startLoginSession(backend, {
             adapter: entry.adapter,
             adapterId: entry.adapterId,
@@ -13174,6 +13409,7 @@ export class FleetManager {
             tokenPresent: action === "go-relogin" || action === "go-relogin-tunnel",
             // The consent is the button itself: only the explicit "Open public link" actions carry it.
             tunnel: action === "go-tunnel" || action === "go-relogin-tunnel",
+            ...(profile ? { profile } : {}),
         });
         if (text)
             await this.postPromptOutcome(entry, text);
@@ -13201,7 +13437,7 @@ export class FleetManager {
     /** An install that succeeded, between its success line and the sign-in it hands over to (#1131). */
     installHandoff = null;
     /** Start a CLI install session. Caller enforces admin. */
-    async startInstallSession(backendArg, chat) {
+    async startInstallSession(backendArg, chat, signIn = {}) {
         const backend = LOGIN_BACKEND_ALIASES[backendArg.toLowerCase()] ?? backendArg.toLowerCase();
         const info = BACKEND_INSTALLATION_INFO[backend];
         if (!info)
@@ -13285,7 +13521,8 @@ export class FleetManager {
                 // without a click.
                 // launchSignIn, not startLoginSession: if the new binary were still
                 // not visible, startLoginSession would route straight back to an install.
-                const next = await this.launchSignIn(backend, chat, {}).catch((err) => t("login.failed", backend, err?.message ?? String(err)));
+                // A `/login <backend> <profile>` that had to install first signs that profile in, not the default login.
+                const next = await this.launchSignIn(backend, chat, signIn.profile !== undefined ? { profile: signIn.profile } : {}).catch((err) => t("login.failed", backend, err?.message ?? String(err)));
                 if (next) {
                     await chat.adapter.sendText(chat.chatId, next, { threadId: chat.threadId })
                         .catch(err => this.logger.warn({ err, backend }, "Could not post the sign-in step after an install"));
@@ -13393,8 +13630,16 @@ export class FleetManager {
             return;
         }
         const backend = String(data.options?.backend ?? "").trim();
+        // #1699 part 2: a supplied profile is never dropped — a blank one is refused by the admission like any bad name,
+        // and one without a backend is refused rather than becoming the default login's picker.
+        const profileSupplied = data.options?.profile !== undefined && data.options?.profile !== null;
+        const profile = profileSupplied ? String(data.options?.profile).trim() : undefined;
+        if (profileSupplied && !backend) {
+            await data.respond(t("login.profile_needs_backend"));
+            return;
+        }
         if (backend) {
-            const text = await this.startLoginSession(backend, chat);
+            const text = profile !== undefined ? await this.startLoginSession(backend, chat, { profile }) : await this.startLoginSession(backend, chat);
             await data.respond(text ?? t("login.confirm_posted"));
             return;
         }
@@ -14251,6 +14496,49 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         });
     }
     /** Paste raw text directly to a classic instance's CLI (no [user:] wrapping) */
+    /** #1690: our own runtime switches awaiting the daemon's outcome, by id. */
+    runtimeSwitchWaiters = new Map();
+    /**
+     * #1690: type `/model <model>` and wait for what it came to: the daemon answers claude's "Switch model?" for us (Yes
+     * when it names this model, No otherwise) or sees claude's own result. Null when it could not be sent; a timeout is
+     * "not confirmed".
+     */
+    runRuntimeModelSwitch(instanceName, model) {
+        const ipc = this.instanceIpcClients.get(instanceName);
+        if (!ipc)
+            return Promise.resolve({ outcome: "not_sent" });
+        const id = `switch-${randomUUID()}`;
+        return new Promise(resolve => {
+            const timer = setTimeout(() => { this.runtimeSwitchWaiters.delete(id); resolve({ outcome: "not_confirmed" }); }, RUNTIME_SWITCH_RESULT_MS);
+            timer.unref?.();
+            this.runtimeSwitchWaiters.set(id, result => { clearTimeout(timer); resolve(result); });
+            const sent = ipc.send({ type: "raw_paste", content: `/model ${model}`, runtime_switch: { id, kind: "model", requested: model } });
+            if (!sent) {
+                clearTimeout(timer);
+                this.runtimeSwitchWaiters.delete(id);
+                resolve({ outcome: "not_sent" });
+                return;
+            }
+            this.logger.info({ instanceName, model }, "Runtime model switch sent");
+        });
+    }
+    /**
+     * #1690: the names claude-code is known to accept, for checking `/model <name>` BEFORE it is typed — claude itself
+     * accepts any string ("Set model to opsu"), and its "Switch model?" then names the typo. Static aliases (with [1m]),
+     * the cached account catalog, the configured model; without a cached catalog, any `claude-…` id too (cannot check).
+     */
+    claudeModelKnown(instanceName, model) {
+        const aliases = ["default", "sonnet", "opus", "haiku", "opusplan", "Fable"];
+        const api = (this.readCliEnv("claude-code")?.apiModels ?? []).map(m => m.id);
+        const configured = this.fleetConfig?.instances[instanceName]?.model ?? this.fleetConfig?.defaults?.model;
+        const lower = model.trim().toLowerCase();
+        const bare = lower.replace(/\[1m\]$/, "");
+        const known = aliases.some(a => a.toLowerCase() === bare)
+            || api.some(id => id.toLowerCase() === lower || `${id.toLowerCase()}[1m]` === lower)
+            || (typeof configured === "string" && configured.toLowerCase() === lower)
+            || (api.length === 0 && /^claude-[a-z0-9][a-z0-9.-]*(\[1m\])?$/.test(lower));
+        return { known, names: [...aliases, ...api.filter(id => !id.endsWith("[1m]")).slice(0, 12)] };
+    }
     pasteRawToClassicInstance(instanceName, text) {
         const ipc = this.instanceIpcClients.get(instanceName);
         if (!ipc) {
@@ -14850,7 +15138,16 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             try {
                 // Asked again after the progress edit awaited above: the instance may have moved, or the admin lost admin.
                 result = this.menuClickStillCurrent(pending.instanceName, data.userId, pending.channelId, adapterId, pending.adapterChatId)
-                    ? await this.applyEffort(pending.instanceName, level) : t("menu.click_stale");
+                    ? await withSpawnHoldReply(async (text) => {
+                        if (pending.adapter && pending.adapterChatId) {
+                            if (progressMsgId)
+                                await pending.adapter.editMessage(pending.adapterChatId, progressMsgId, text, pending.adapterThreadId);
+                            else
+                                await pending.adapter.sendText(pending.adapterChatId, text, { threadId: pending.adapterThreadId });
+                        }
+                        else
+                            await pending.respond(text);
+                    }, () => this.applyEffort(pending.instanceName, level)) : t("menu.click_stale");
             }
             catch (err) {
                 this.logger.error({ err, instance: pending.instanceName, level }, "Effort switch failed");
@@ -15175,7 +15472,16 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             try {
                 // Asked again after the progress edit awaited above: the instance may have moved, or the admin lost admin.
                 result = this.menuClickStillCurrent(pending.instanceName, data.userId, pending.channelId, adapterId, pending.adapterChatId)
-                    ? await this.applyModel(pending.instanceName, model) : t("menu.click_stale");
+                    ? await withSpawnHoldReply(async (text) => {
+                        if (pending.adapter && pending.adapterChatId) {
+                            if (progressMsgId)
+                                await pending.adapter.editMessage(pending.adapterChatId, progressMsgId, text, pending.adapterThreadId);
+                            else
+                                await pending.adapter.sendText(pending.adapterChatId, text, { threadId: pending.adapterThreadId });
+                        }
+                        else
+                            await pending.respond(text);
+                    }, () => this.applyModel(pending.instanceName, model)) : t("menu.click_stale");
             }
             catch (err) {
                 this.logger.error({ err, instance: pending.instanceName, model }, "Model switch failed");
@@ -15309,21 +15615,34 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         catch { /* default restart */ }
         const warn = isModelCompatible(backendName, model) ? "" : t("model.pattern_warning", model, backendName);
+        // #1690: claude takes any name; a mistyped one would be "switched" to and fail the next turn. Checked first —
+        // nothing is typed or saved for an unknown one.
+        if (backendName === "claude-code") {
+            const check = this.claudeModelKnown(instanceName, model);
+            if (!check.known)
+                return t("model.unknown_name", model, check.names.join(", "));
+        }
         if (strategy === "runtime" && !this.instanceIpcClients.get(instanceName)) {
             return `${warn}${t("effort.not_running", instanceName)}`;
         }
+        // #1690: claude-code's runtime switch reports what it came to; the model is saved unless claude was told No.
+        if (strategy === "runtime" && backendName === "claude-code") {
+            const result = await this.runRuntimeModelSwitch(instanceName, model);
+            if (result.outcome === "mismatch")
+                return `${warn}${t("model.switch_mismatch", instanceName, result.shown, model)}`;
+            if (result.outcome === "not_sent")
+                return `${warn}${t("model.switch_not_sent", instanceName, model)}`;
+            const persistedNow = this.persistInstanceModel(instanceName, model);
+            if (!persistedNow)
+                return `${warn}${t("model.persist_failed", instanceName)}`;
+            const head = result.outcome === "switched"
+                ? (result.confirmed ? t("model.switch_confirmed", instanceName, model) : t("model.runtime_success", instanceName, model))
+                : t("model.switch_unconfirmed", instanceName, model, Math.round(RUNTIME_SWITCH_RESULT_MS / 1000));
+            return `${warn}${head}${this.effortSuffix(instanceName)}`;
+        }
         // Persist either way: a runtime switch must survive the next respawn too,
         // or the instance silently reverts to the CLI default after a fleet restart.
-        let persisted = false;
-        if (this.fleetConfig?.instances[instanceName]) {
-            this.fleetConfig.instances[instanceName].model = model;
-            this.saveFleetConfig();
-            persisted = true;
-        }
-        else if (this.classicChannels?.setModelByInstance(instanceName, model)) {
-            persisted = true;
-        }
-        if (!persisted)
+        if (!this.persistInstanceModel(instanceName, model))
             return `${warn}${t("model.persist_failed", instanceName)}`;
         if (strategy === "runtime") {
             this.pasteRawToClassicInstance(instanceName, `/model ${model}`);
@@ -15332,6 +15651,15 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         await this.restartSingleInstance(instanceName);
         return `${warn}${t("model.restart_success", instanceName, model)}${this.effortSuffix(instanceName)}`;
     }
+    /** Save an instance's model (fleet.yaml, or its ClassicBot channel). False when neither holds it. */
+    persistInstanceModel(instanceName, model) {
+        if (this.fleetConfig?.instances[instanceName]) {
+            this.fleetConfig.instances[instanceName].model = model;
+            this.saveFleetConfig();
+            return true;
+        }
+        return this.classicChannels?.setModelByInstance(instanceName, model) === true;
+    }
     /**
      * The trailing "Current effort: …" line for a /model reply.
      *
@@ -15442,6 +15770,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
     }
     /** Handle Discord's required static slash choice, warning before a likely startup failure. */
     async handleClassicStartSlash(data, adapterId) {
+        return withSpawnHoldReply(text => data.respond(text), () => this.handleClassicStartSlashCore(data, adapterId));
+    }
+    async handleClassicStartSlashCore(data, adapterId) {
         const requestedBackend = typeof data.options?.backend === "string" ? data.options.backend : undefined;
         if (!requestedBackend) {
             // beta.31 made this option required. Discord can briefly retain the old
@@ -15558,7 +15889,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         // failure. The selected backend is still attempted as requested.
         if (warning)
             await pending.complete(warning, pending.messageId);
-        const reply = await this.handleClassicStart(pending.channelId, pending.channelName, pending.userId, pending.guildId, pending.adapterId, selectedBackend);
+        const reply = await withSpawnHoldReply(text => pending.complete(text, pending.messageId), () => this.handleClassicStart(pending.channelId, pending.channelName, pending.userId, pending.guildId, pending.adapterId, selectedBackend));
         await pending.complete(warning ? `${warning}\n\n${reply}` : reply, pending.messageId);
     }
     /** Start a classic channel instance with lightweight config */
@@ -15639,6 +15970,17 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         const ch = this.classicChannels.unregister(channelId, adapterId);
         if (!ch)
             return t("classic.no_agent");
+        // #1664: the room is gone (not paused or stopped): nobody's favorite any more — unless the name is still an
+        // instance (fleet.yaml's, or another room's), so a later room of the same name does not inherit an old star.
+        if (!Object.hasOwn(this.fleetConfig?.instances ?? {}, ch.instanceName)
+            && !this.classicChannels.getAll().some((c) => c.instanceName === ch.instanceName)) {
+            try {
+                this.webPrefs.forgetInstance(ch.instanceName);
+            }
+            catch (err) {
+                this.logger.warn({ err: err.message, instanceName: ch.instanceName }, "Dropping a removed room from web favorites failed");
+            }
+        }
         this.instanceWorldBinding.delete(ch.instanceName);
         await this.stopInstance(ch.instanceName).catch(err => this.logger.warn({ err, instanceName: ch.instanceName }, "Failed to stop classic instance"));
         clearPausedMarker(this.getInstanceDir(ch.instanceName));
@@ -18013,14 +18355,25 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                     return;
                 }
                 (async () => {
+                    let held = false;
                     try {
                         const topicMode = this.fleetConfig?.channel?.mode === "topic";
-                        await this.startInstance(name, config, topicMode ?? false, "fleet-topic", true);
+                        await withSpawnHoldReply(async (message) => {
+                            held = true;
+                            res.writeHead(202, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ held: true, message, instance: name }));
+                        }, () => this.startInstance(name, config, topicMode ?? false, "fleet-topic", true));
                         this.emitSseEvent("status", this.getUiStatus());
+                        if (held)
+                            return;
                         res.writeHead(200);
                         res.end(JSON.stringify({ ok: true }));
                     }
                     catch (err) {
+                        if (held) {
+                            this.logger.error({ err, name }, "Held start failed");
+                            return;
+                        }
                         res.writeHead(500);
                         res.end(JSON.stringify({ error: `Start failed: ${err.message}` }));
                     }
@@ -18035,15 +18388,24 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 const name = decodeURIComponent(req.url.slice("/restart/".length));
                 this.logger.info({ name }, "Instance restart requested via HTTP");
                 (async () => {
+                    let held = false;
                     try {
-                        await this.restartSingleInstance(name, { explicit: true });
+                        await withSpawnHoldReply(async (message) => {
+                            held = true;
+                            res.writeHead(202, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ held: true, message, instance: name }));
+                        }, () => this.restartSingleInstance(name, { explicit: true }));
                         this.logger.info({ name }, "Instance restarted");
                         this.emitSseEvent("status", this.getUiStatus());
+                        if (held)
+                            return;
                         res.writeHead(200);
                         res.end(JSON.stringify({ restarted: name }));
                     }
                     catch (err) {
                         this.logger.error({ err, name }, "Instance restart failed");
+                        if (held)
+                            return;
                         const status = err.message.includes("not found") ? 404 : 500;
                         res.writeHead(status);
                         res.end(JSON.stringify({ error: `Restart failed: ${err.message}` }));
@@ -18357,6 +18719,11 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             uptime: Math.floor((Date.now() - this.startedAt) / 1000),
             // #1519 P7: how many chat connections are configured — 0 is a web-only fleet, which gets the first-run card.
             connections: (this.fleetConfig?.channels ?? (this.fleetConfig?.channel ? [this.fleetConfig.channel] : [])).length,
+            // #1665: the host preferences' revision — a page that has another re-reads /ui/prefs (no values in this frame).
+            prefs_rev: this.webPrefs.rev(),
+            // #1685: host memory pressure while it slows or holds new agents (the dashboard's indicator; macOS elevated is
+            // shown here rather than in chat). null when normal, unknown or advisory.
+            host_memory: this.hostMemoryIndicator(),
         };
     }
 }