@songsid/agend 2.2.0-beta.8 → 2.2.0

package/dist/ui/settings-strings.js

@@ -10,7 +10,7 @@ register("settings", {
     classicChannels: "ClassicBot Channels",
     noClassic: "No ClassicBot channels — start one with /start in a chat.",
     publicLink: "Offer temporary public web links",
-    publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. No preview exposure.",
+    publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. HTML previews get a second temporary tunnel unless web.preview_on_public_link is false.",
     publicTtl: "Public link minutes (1–480)",
     publicProtocol: "Tunnel protocol",
     webEcho: "Web echo",
@@ -164,7 +164,9 @@ register("settings", {
     wizardWaitingStart: "Waiting for a message in the group…",
     wizardNoStartYet: "No group message yet — post one and press Detect again.",
     wizardGeneralChannel: "General channel id",
-    wizardAdminUser: "Your user id (becomes the first allowed user)",
+    wizardAdminUser: "Your user ID (required; becomes the first allowed user)",
+    wizardNeedDiscordAdmin: "Enter your Discord user ID: 17–20 digits, without a leading zero.",
+    wizardNeedTelegramAdmin: "Enter your Telegram user ID: 1–20 positive digits, without a leading zero.",
     wizardNeedVerify: "Verify the token before continuing.",
     wizardPlanLoading: "Building the plan…",
     wizardWillWrite: "This will be written:",
@@ -176,7 +178,7 @@ register("settings", {
     deleteBot: "Delete this bot",
     noAllowedUsers: "no allowed users",
     searchAll: "Search agents, bots, channels…",
-    accessMovedHint: "Who may use the bot is set on the connection itself — open Settings on \"{0}\" under Connections & Bots.",
+    accessMovedHint: "Who may use the bot is set on the connection itself — open Settings on \"{0}\" under Connections.",
     applyRestartNeeded: "Saved — restart AgEnD to apply",
     applyNoChange: "no change needed",
     applyRestartHint: "This change needs AgEnD itself restarted. You can restart it here, or run /restart in your chat channel.",
@@ -219,6 +221,11 @@ register("settings", {
     staggerRange: "Must be between 0 and 30000",
     staggerWarning: "Very low values can cause startup spikes",
     sec_device: "Preferences", syncedTitle: "Synced across your devices", syncedLead: "Changes here apply on every device where you are signed in.",
+    profileTitle: "Your name",
+    profileLeadBound: "Agents see your web messages as the Discord or Telegram account your sign-in code was sent to: its id, and its name unless you choose another here. It follows you to every device you sign in on. It is for recognition only: it grants nothing.",
+    profileLeadUnbound: "This browser was not signed in with a code sent to your Discord or Telegram account, so agents see your web messages as \"web-user\" (or the name you set here). Sign in with a code from /web to be recognised as your account.",
+    profileName: "Name", profileHelp: "Agents see: {0} · id {1}", profileSave: "Save", profileClear: "Use web-user", profileUseAccount: "Use {0}",
+    profileSaved: "Agents now see you as {0}", profileFailed: "Could not save the name",
     syncedPublicLink: "On the public link these are read-only: a change here stays in this browser.",
     deviceTitle: "This device only", deviceLead: "The tour, text size, view fit, the sidebar shown or hidden, panel widths and desktop notifications stay on each device.",
     sec_agents: "Agents",
@@ -281,7 +288,7 @@ register("settings", {
     accessTitle: "Access",
     webChat: "Web chat",
     sec_web: "Web",
-    webLead: "How the web dashboard behaves. A change that loosens access (longer sessions, the browser terminal back on or for longer, the public link) waits for a fleet admin to confirm it in General; one that tightens it applies at once.",
+    webLead: "How the web dashboard behaves. A change that loosens access (longer sessions, the browser terminal back on or for longer, the public link) waits for a fleet admin to confirm it in chat (General topic) or on the host; one that tightens it applies at once.",
     webPublicRefused: "Web settings can't be changed over a temporary public link. Open the dashboard at its own address to change them.",
     webSessionTitle: "Sign-in sessions",
     webSessionHint: "For sign-ins at the dashboard's own address (this computer, the LAN, a tailnet). A temporary public link always keeps 4 h / 30 min. Shortening ends the sessions it now outlives; lengthening applies to new sign-ins and to an existing one's idle time on its next use. Empty = the default.",
@@ -365,7 +372,7 @@ register("settings", {
     help1: "Agents: each agent's settings, Start/Stop, Pause/Wake, and New agent.",
     help2: "Connections: who may use each bot, its binding, its status emojis, a new token; and provider API keys.",
     help3: "ClassicBot: each room's backend, model and options.",
-    help4: "General: defaults for every agent, ClassicBot defaults and web chat. Review changes stages them.",
+    help4: "General: defaults for every agent and ClassicBot defaults. Web: the dashboard's sign-in sessions, browser terminal, web echo, Log and public link. Review changes stages them.",
     help5: "Changes are staged, then applied together with Apply changes. Each shows what it costs: immediately, an agent restart, or an AgEnD restart.",
     help6: "A change to access, secrets or connections waits for a fleet admin to confirm it in chat before it applies.",
   },
@@ -401,7 +408,7 @@ register("settings", {
     classicChannels: "ClassicBot 頻道",
     noClassic: "沒有 ClassicBot 頻道 — 在聊天中用 /start 建立。",
     publicLink: "提供臨時公開網頁連結",
-    publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限，不公開 preview。",
+    publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限。HTML 預覽會另開一條臨時通道，除非設定 web.preview_on_public_link: false。",
     publicTtl: "公開連結分鐘數（1–480）",
     publicProtocol: "Tunnel 協定",
     webEcho: "Web 同步",
@@ -530,7 +537,9 @@ register("settings", {
     wizardWaitingStart: "等待群組訊息中…",
     wizardNoStartYet: "還沒收到群組訊息 —— 發一則之後再按一次。",
     wizardGeneralChannel: "General 頻道 id",
-    wizardAdminUser: "你的 user id（會成為第一個允許使用者）",
+    wizardAdminUser: "你的使用者 ID（必填；會成為第一個允許使用者）",
+    wizardNeedDiscordAdmin: "請輸入 Discord 使用者 ID：17–20 位數字，開頭不能是 0。",
+    wizardNeedTelegramAdmin: "請輸入 Telegram 使用者 ID：1–20 位正整數字，開頭不能是 0。",
     wizardNeedVerify: "請先驗證 token 再繼續。",
     wizardPlanLoading: "正在產生方案…",
     wizardWillWrite: "將寫入：",
@@ -542,7 +551,7 @@ register("settings", {
     deleteBot: "刪除這個機器人",
     noAllowedUsers: "沒有允許的使用者",
     searchAll: "搜尋 agent、機器人、頻道…",
-    accessMovedHint: "誰可以使用 bot 是在連線本身設定 —— 請到「連線與機器人」開啟「{0}」的設定。",
+    accessMovedHint: "誰可以使用 bot 是在連線本身設定 —— 請到「連線」開啟「{0}」的設定。",
     applyRestartNeeded: "已儲存 —— 需要重新啟動 AgEnD 才會生效",
     applyNoChange: "無需變更",
     applyRestartHint: "此變更需要重新啟動 AgEnD 本身。可以在這裡重新啟動，或在聊天頻道執行 /restart。",
@@ -585,6 +594,11 @@ register("settings", {
     staggerRange: "必須介於 0 到 30000",
     staggerWarning: "數值太低可能造成啟動尖峰",
     sec_device: "偏好設定", syncedTitle: "在你所有的裝置同步", syncedLead: "這裡的變更會套用到你登入的每一台裝置。",
+    profileTitle: "你的名字",
+    profileLeadBound: "agent 會把你從網頁送出的訊息，認成收到登入驗證碼的那個 Discord 或 Telegram 帳號：用它的 id，名字也用它的，除非你在這裡另外取名。它會跟著你到每一台登入的裝置。這只用來辨認，不代表任何權限。",
+    profileLeadUnbound: "這個瀏覽器不是用私訊到你 Discord 或 Telegram 帳號的驗證碼登入的，所以 agent 會把你的網頁訊息看成「web-user」（或你在這裡設定的名字）。用 /web 的驗證碼登入，就能被認成你的帳號。",
+    profileName: "名字", profileHelp: "agent 看到：{0} · id {1}", profileSave: "儲存", profileClear: "改回 web-user", profileUseAccount: "改用 {0}",
+    profileSaved: "agent 現在會看到你是 {0}", profileFailed: "無法儲存名字",
     syncedPublicLink: "公開連結只能讀取這些設定：在這裡變更只會留在這個瀏覽器。",
     deviceTitle: "只限這台裝置", deviceLead: "導覽、文字大小、視圖寬度、側欄顯示或隱藏、面板寬度與桌面通知，每台裝置各自保留。",
     sec_agents: "Agent",
@@ -647,7 +661,7 @@ register("settings", {
     accessTitle: "存取",
     webChat: "網頁聊天",
     sec_web: "網頁",
-    webLead: "網頁儀表板的行為。放寬存取的變更（延長 session、重新開啟或延長瀏覽器終端機、公開連結）需要 fleet admin 在 General 確認；收緊的變更會立即套用。",
+    webLead: "網頁儀表板的行為。放寬存取的變更（延長 session、重新開啟或延長瀏覽器終端機、公開連結）需要 fleet admin 在聊天（General topic）或主機上確認；收緊的變更會立即套用。",
     webPublicRefused: "無法透過臨時公開連結變更網頁設定。請從儀表板本身的網址開啟後再變更。",
     webSessionTitle: "登入 session",
     webSessionHint: "適用於從儀表板本身網址登入的 session（本機、區域網路、tailnet）。臨時公開連結固定為 4 小時 / 30 分鐘。縮短會讓已超過新限制的 session 結束；延長會套用到新的登入，以及既有 session 下次使用時的閒置時間。留空 = 預設值。",
@@ -731,7 +745,7 @@ register("settings", {
     help1: "Agent：每個 agent 的設定、啟動/停止、暫停/喚醒，以及新增 agent。",
     help2: "連線：誰可以使用各個 bot、它的綁定、狀態表情、新的 token；以及供應商 API key。",
     help3: "ClassicBot：每個房間的 backend、model 與選項。",
-    help4: "一般：所有 agent 的預設值、ClassicBot 預設值與網頁聊天。「檢查變更」會把它們暫存。",
+    help4: "一般：所有 agent 的預設值與 ClassicBot 預設值。網頁：儀表板的登入 session、瀏覽器終端機、網頁轉發、紀錄與公開連結。「檢查變更」會把它們暫存。",
     help5: "變更會先暫存，再用「套用變更」一起套用。每項都會標示代價：立即生效、重新啟動 agent，或重新啟動 AgEnD。",
     help6: "存取、密鑰或連線的變更，要等 fleet 管理員在聊天中確認後才會套用。",
   },

package/dist/ui/settings-token.js

@@ -10,6 +10,13 @@ import { api } from "./settings-confirm.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
 
+// UI feedback only: the plan and commit independently enforce this on the server.
+export const adminUserIdPattern = (platform) => platform === "discord" ? "[1-9][0-9]{16,19}" : "[1-9][0-9]{0,19}";
+export function adminUserIdError(platform, value) {
+  return typeof value === "string" && new RegExp(`^${adminUserIdPattern(platform)}$`).test(value)
+    ? null : tn(platform === "discord" ? "wizardNeedDiscordAdmin" : "wizardNeedTelegramAdmin");
+}
+
 /** Who this token is: { valid, username?, reason? } — one outbound check, the token sent once and not kept. */
 export async function verifyBotToken(platform, token) {
   const res = await api("/api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "verify", platform, token }) })

package/dist/ui/settings-wizard.js

@@ -10,7 +10,7 @@ import { api } from "./settings-confirm.js";
 import { startOperation } from "./settings-apply.js";
 import { BACKENDS, DEFAULT_SCHEMA, impactOf, toYaml } from "./settings-model.js";
 import { Drawer, Select } from "./settings-dialogs.js";
-import { botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
+import { adminUserIdError, adminUserIdPattern, botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
 import { DiscordServerPicker } from "./settings-discord.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
@@ -90,6 +90,8 @@ export function SetupWizard({ ctx, onClose }) {
     if (w.step === 2) { setW({ ...w, step: 3 }); return; }
     if (w.step === 3) {
       if (!w.identity || !w.identity.valid) { setErr(tn("wizardNeedVerify")); return; }
+      const adminError = adminUserIdError(w.platform, w.admin_user_id);
+      if (adminError) { setErr(adminError); return; }
       const at = rev.current;
       setBusy(tn("wizardPlanLoading"));
       const res = await post("/api/settings/quickstart/plan", input());
@@ -146,12 +148,12 @@ export function SetupWizard({ ctx, onClose }) {
         <${DiscordServerPicker} idPrefix="wz" token=${w.identity && w.identity.valid ? w.token : ""} bot=${w.identity && botHandle(w.identity.username)}
           invite=${w.identity && w.identity.invite} portal=${w.identity && w.identity.portal} guilds=${w.guilds} onGuilds=${(g) => setW((x) => ({ ...x, guilds: g }))}
           guild=${w.guild_id} onGuild=${set("guild_id")} channel=${w.general_channel_id} onChannel=${set("general_channel_id")} />
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
       : html`
         <div class="field"><label for="wz-group">${tn("groupIdField")}</label><input id="wz-group" type="text" placeholder="-1001234567890" value=${w.group_id} onInput=${(e) => set("group_id")(e.target.value.trim())} />
           <p class="note">${tn("wizardDetectHint")}</p></div>
         <div class="dlg-inline-actions"><button type="button" class="btn btn-sm" disabled=${!!busy} onClick=${detect}>${tn("wizardDetect")}</button></div>
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
   } else {
     body = !w.plan ? html`<p class="note">${tn("wizardPlanLoading")}</p>` : html`
       <p><strong>${tn("wizardWillWrite")}</strong></p>

package/dist/ui/shared/app-i18n.js

@@ -98,7 +98,7 @@ register("app", {
     theme: "主題", themeSystem: "跟隨系統", themeLight: "淺色", themeDark: "深色", language: "語言",
     previews: "允許預覽 HTML", tour: "導覽", tourTitle: "再看一次網頁聊天導覽",
     needsYou: "等你回應", approxNote: "從終端畫面判讀，僅供參考", chat: "聊天", details: "詳細資訊", log: "紀錄", instanceViews: "{0} 的檢視",
-    textSize: "字級：{0}", textSize_s: "小", textSize_m: "中", textSize_l: "大", textSize_fit: "剛好填滿", usage: "用量", usageHide: "隱藏用量",
+    textSize: "字級：{0}", textSize_s: "小", textSize_m: "中", textSize_l: "大", textSize_fit: "填滿", usage: "用量", usageHide: "隱藏用量",
     statusRunning: "執行中", statusStopped: "已停止", statusPaused: "已暫停", statusCrashed: "已當掉", statusWorking: "工作中", statusStuck: "似乎卡住", statusIdle: "閒置",
     connReconnecting: "連不上 AgEnD——可能正在重新啟動。正在重新連線…", connReconnectingIn: "連不上 AgEnD——可能正在重新啟動。{0} 秒後再試。",
     hydrating: "正在載入目前的狀態…", hydrateFailed: "無法載入目前的狀態（提示、送達標記）。",

package/dist/ui/shared/app-stream.js

@@ -30,7 +30,7 @@
 // - suspend()/resume(): the page is leaving (pagehide) / came back from the back-forward cache.
 
 // #1218: steps_tick — an instance's transcript moved while a Log watches it (SSE only: a poll page asks the Log itself).
-const EVENTS = ["status", "message", "delivery", "deliveries", "prompt", "prompts", "prompt_resolved", "activity", "needs", "reply_buttons", "steps_tick"];
+const EVENTS = ["status", "message", "delivery", "deliveries", "prompt", "prompts", "prompt_resolved", "activity", "needs", "reply_buttons", "steps_tick", "clock"];
 const MAX_HELD = 1000;                    // live events held during one catch-up read; more → read again afterwards
 const RETRY_DELAYS = [1000, 2000, 4000];  // after the first failed catch-up read; then it waits for Retry
 const POLL_LIMIT_MS = 10000;              // a poll that has not answered by then counts as failed
@@ -114,6 +114,7 @@ export function createStream(opts) {
         if (closed || mine !== pollSeq || !r.ok) return false;
         const d = await r.json();
         if (closed || mine !== pollSeq) return false;
+        if (typeof d.now === "number") emit("clock", { now: d.now });   // #1823: read just now, handed over at once
         if (d.status) emit("status", d.status);
         for (const m of d.messages || []) emit("message", m);
         if (typeof d.cursor === "string") state.cursor = d.cursor;
@@ -209,6 +210,8 @@ export function createStream(opts) {
         try { data = JSON.parse(e.data); } catch { return; }
         if (!spoke) { spoke = true; alive(); if (again) catchUp(); }
         else alive();
+        // #1823: a clock reading is about now, not about order: it is never held behind a catch-up (it would be stale).
+        if (name === "clock") { emit(name, data); return; }
         live(name, data, name === "message" ? e.lastEventId : null);
       });
     }

package/dist/ui/shared/app.css

@@ -69,10 +69,12 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
 .sidebar {
   width: var(--sidebar-w); flex-shrink: 0; display: flex; flex-direction: column; background: var(--bg-sidebar);
   position: relative;   /* #1722: the resize handle sits on its right edge (the width above: tokens.css, or this device's) */
-  padding: env(safe-area-inset-top) 0 env(safe-area-inset-bottom) env(safe-area-inset-left);
+  padding: 0 0 env(safe-area-inset-bottom) env(safe-area-inset-left);   /* the top inset is the head's, as the page header's is */
 }
 .sb-collapsed .sidebar { display: none; }
-.side-head { display: flex; align-items: center; gap: var(--s-1); padding: var(--s-3) var(--s-2) var(--s-2) var(--s-4); }
+/* The brand row is the page header's row: the same height, padding and centre line (--header-h; .panel-head, .panel-title). */
+.side-head { display: flex; align-items: center; gap: var(--s-1); box-sizing: content-box; min-height: calc(var(--header-h) - 2 * var(--s-1));
+  padding: max(var(--s-1), env(safe-area-inset-top)) var(--s-2) var(--s-1) var(--s-4); }
 .brand { flex: 1; font-size: var(--fs-lg); font-weight: var(--fw-semibold); letter-spacing: -0.01em; }
 .side-nav { display: flex; flex-direction: column; padding: var(--s-1) var(--s-2); gap: 1px; }
 .side-row {
@@ -150,6 +152,10 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
 .s-device { display: flex; flex-direction: column; gap: var(--s-3); }
 .s-device .sub { margin: 0; color: var(--text-3); font-size: var(--fs-sm); }
 .s-device-row { display: flex; gap: var(--s-2); }
+/* #1827: the person's web name — its field takes the card's width; a refusal reads in the danger colour. */
+.s-profile .field { display: flex; flex-direction: column; gap: var(--s-1); }
+.s-profile .field input { max-width: 24rem; }
+.s-profile .err { color: var(--danger); }
 /* #1620: Settings → Web — the lead, and the read-only list of what is set in fleet.yaml. */
 .s-web .sub { margin: 0; color: var(--text-3); font-size: var(--fs-sm); }
 .s-web-fields:disabled select { opacity: 0.6; }   /* over the public link: dimmed like the inputs (.field input:disabled) */
@@ -195,14 +201,17 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
 }
 .panel-head .sb-open { display: none; }
 .sb-collapsed .panel-head .sb-open { display: inline-flex; }
-.panel-title { flex: 1; min-width: 0; display: flex; align-items: baseline; gap: var(--s-3); }
+/* One row of --header-h on every page (a phone's instance tabs wrap below it): the title, its status and badges on one centre line. */
+.panel-title { flex: 1; min-width: 0; display: flex; align-items: center; gap: var(--s-3); min-height: calc(var(--header-h) - 2 * var(--s-1)); }
 .panel-title h1 { font-size: var(--fs-lg); line-height: var(--lh-lg); font-weight: var(--fw-semibold); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; min-width: 0; outline: none; }
 .panel-sub { color: var(--text-2); font-size: var(--fs-sm); white-space: nowrap; }
 .status { display: inline-flex; align-items: center; gap: 6px; }
 .panel-actions { display: flex; align-items: center; gap: var(--s-1); }
 /* #1523 N2: the instance view switch — beside the title on a wide screen; on a phone, a row of tabs under the header. */
 .inst-switch.seg { padding: 0; margin: 0; width: auto; max-width: none; flex-shrink: 0; }
-.inst-switch .seg-item { min-height: 30px; }
+.inst-switch .seg-item { min-height: 30px; flex-direction: column; justify-content: center; gap: 0; }
+/* The label again in the current tab's weight, taking width but no height and never seen: the bar's size does not change with the tab. */
+.inst-switch .seg-item::after { content: attr(data-label); font-weight: var(--fw-semibold); height: 0; overflow: hidden; visibility: hidden; pointer-events: none; user-select: none; }
 /* #1523 N3 (Q2 = A): the text size, one custom property from the root's data-text-size (header-tools.js). The chat's
    messages, Details and the Fleet tabs scale the type tokens by it; View's terminal scales itself (VIEW_SCALE). */
 :root { --text-scale: 1; }
@@ -248,6 +257,10 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
 .p-log .log-older, .p-log .log-start { text-align: center; margin: var(--s-2) 0; }
 .p-log .log-off { padding: var(--s-6) var(--s-4); }
 .p-details .d-edit { display: flex; align-items: center; justify-content: space-between; gap: var(--s-2); flex-wrap: wrap; margin-top: var(--s-2); }
+/* The header's controls are one height, the icon buttons' (36 px): its small buttons, and the instance tabs when they share
+   its row (a phone puts them on a row of their own, under it). */
+.panel-head .btn-sm { min-height: 36px; }
+@media (min-width: 900px) { .panel-head .inst-switch .seg-item { min-height: 36px; } }
 @media (max-width: 899px) {
   .panel-head:has(.inst-switch) { flex-wrap: wrap; }
   .inst-switch.seg { order: 3; flex-basis: 100%; display: grid; grid-template-columns: repeat(4, 1fr); padding: 0 0 var(--s-1); }
@@ -264,8 +277,7 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
 .empty-title { color: var(--text); font-size: var(--fs-lg); font-weight: var(--fw-semibold); }
 .empty-hint { font-size: var(--fs-sm); }
 .empty .btn { margin-top: var(--s-3); }
-/* #1519 P7: the first-run card (a fleet with no chat connection), above an empty chat or a Settings list. */
-.first-run-stack { width: 100%; max-width: var(--col); }
+/* #1519 P7: the first-run card (a fleet with no chat connection), above a Settings list (#1854: no longer on Chat). */
 .first-run h3 { display: flex; align-items: center; gap: var(--s-2); }
 .first-run p { color: var(--text-2); font-size: var(--fs-sm); }
 .error-state { display: flex; flex-direction: column; align-items: center; gap: var(--s-3); padding: var(--s-8) var(--s-4); color: var(--danger); text-align: center; }
@@ -370,6 +382,13 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
    such as 「昨天 下午03:58」, ticks) — and a block body would stretch to it; fit-content keeps a short message short, on
    the right under its meta, and a long one still wraps at the message's max-width. */
 .msg.user .body { background: var(--user-bubble); border-radius: var(--r-xl); padding: 10px var(--s-4); width: fit-content; max-width: 100%; margin-left: auto; }
+/* A person's click on a reply button: the bubble shows 🔘 and the button's label (never the value the agent was given);
+   live, the label is a button that shows the reply its buttons were on. */
+.click-chip { display: flex; }
+.click-chip .click-link, .click-chip .click-text { display: inline-flex; align-items: baseline; gap: var(--s-1); padding: 0; border: 0; background: none; color: inherit; font: inherit; text-align: left; overflow-wrap: anywhere; }
+.click-chip .click-link { cursor: pointer; }
+.click-chip .click-link:hover, .click-chip .click-link:focus-visible { text-decoration: underline; }
+.click-mark { flex: none; }
 .msg.agent { align-self: stretch; }
 /* #1672: a status line (another instance's message, a daemon notice): muted plain text, no bubble; a long one folds.
    Its class is `status-line`, never `status`: that is the header's inline-flex badge class, and on a message it turned
@@ -400,10 +419,13 @@ html:has(.shell), html:has(.shell) body { overflow: hidden; }
 .text-card { margin-top: var(--s-2); border: 1px solid var(--border); border-radius: var(--r-sm); padding: var(--s-2) var(--s-3); }
 .text-card .tc-head { display: flex; align-items: center; gap: var(--s-2); }
 .text-card .tc-label { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: var(--fs-xs); font-family: var(--font-mono); color: var(--text-2); }
-.text-card .tc-body { margin-top: var(--s-2); max-height: 480px; overflow: auto; }
+/* #1812: the scroller spans the card's padding box and insets its own content — 12px on both sides, from the border on
+   the left and from the scrollbar (or the border, with overlay scrollbars) on the right. A stable gutter keeps a
+   classic scrollbar off the content, and the content from shifting when the scrollbar comes and goes. */
+.text-card .tc-body { margin: var(--s-2) calc(-1 * var(--s-3)) 0; padding: 0 var(--s-3); max-height: 480px; overflow: auto; scrollbar-gutter: stable; }
 .text-card .tc-body[hidden] { display: none; }
 .text-card .tc-pre { margin: 0; white-space: pre-wrap; word-break: break-word; font-size: var(--fs-xs); }
-.text-card .tc-table-wrap { overflow-x: auto; }
+.text-card .tc-table-wrap { overflow-x: auto; padding-bottom: var(--s-3); }
 .text-card .tc-table { border-collapse: collapse; font-size: var(--fs-xs); }
 .text-card .tc-table th, .text-card .tc-table td { border: 1px solid var(--border); padding: 2px 6px; text-align: left; vertical-align: top; }
 .text-card .tc-more { margin-top: var(--s-2); }
@@ -436,10 +458,17 @@ html.lb-open .scroller { overflow: hidden; }
 .msg .md ul { list-style: disc; } .msg .md ol { list-style: decimal; }
 .msg .md li > ul, .msg .md li > ol { margin: 2px 0; }
 .msg .md hr { border: 0; border-top: 1px solid var(--border); margin: var(--s-3) 0; }
-.msg .md .tbl { overflow-x: auto; margin: var(--s-2) 0; }
+/* #1812: a table too wide for its message scrolls in this wrapper (see the cell rule below); the bottom padding keeps an
+   overlay scrollbar off the last row. */
+.msg .md .tbl { overflow-x: auto; margin: var(--s-2) 0 0; padding-bottom: var(--s-3); }
 .msg .md table { border-collapse: collapse; font-size: var(--fs-sm); }
 .msg .md th, .msg .md td { border: 1px solid var(--border); padding: 5px 9px; text-align: left; vertical-align: top; }
 .msg .md th { background: var(--surface); font-weight: var(--fw-semibold); }
+/* #1812: table cells keep their words whole. The message's `overflow-wrap: anywhere` also shrinks a cell's minimum
+   width, so auto table layout squeezed the columns and split words ("directo|r"); `break-word` breaks a word only when
+   it alone is wider than its line and leaves the minimum at whole words, so a wide table overflows into its scrolling
+   wrapper instead. A column keeps at least 5em: CJK text can break between any two characters. */
+.msg .md th, .msg .md td, .text-card .tc-table th, .text-card .tc-table td { overflow-wrap: break-word; word-break: normal; min-width: 5em; }
 .msg .md .al-c { text-align: center; } .msg .md .al-r { text-align: right; }
 .msg .md h3, .msg .md h4, .msg .md h5, .msg .md h6 { margin: var(--s-3) 0 var(--s-2); font-size: var(--fs-md); font-weight: var(--fw-semibold); }
 .msg .md .tk-k { color: var(--tk-k); } .msg .md .tk-s { color: var(--tk-s); } .msg .md .tk-n { color: var(--tk-n); } .msg .md .tk-c { color: var(--tk-c); font-style: italic; }
@@ -516,6 +545,10 @@ html.lb-open .scroller { overflow: hidden; }
 .rb-btn { max-width: 100%; white-space: normal; text-align: left; }
 .rb-btn.chosen, .rb-btn.chosen:disabled { border-color: var(--ok); color: var(--text); background: color-mix(in srgb, var(--ok) 14%, transparent); font-weight: var(--fw-semibold); opacity: 1; }
 .rb-btn:disabled:not(.chosen) { opacity: 0.55; }
+/* #1823: a poll — its closed buttons show the tally, so they stay readable; the time left keeps its width. */
+.rb-row.poll .rb-btn:disabled { opacity: 0.85; }
+.rb-row.poll .poll-left { font-variant-numeric: tabular-nums; }
+.poll-voters { margin: var(--s-1) 0 0; padding-left: var(--s-4); color: var(--text-2); font-size: var(--fs-sm); }
 .rb-note { font-size: var(--fs-xs); color: var(--text-3); }
 .pv-menu { position: relative; }
 .pv-menu > summary { list-style: none; cursor: pointer; padding: 2px var(--s-2); border-radius: var(--r-sm); color: var(--text-3); }
@@ -704,7 +737,15 @@ body.side-resizing, body.side-resizing * { cursor: col-resize !important; user-s
 .nav-chip { display: flex; align-items: center; gap: var(--s-2); cursor: pointer; color: var(--text); }
 .nav-facet-reset { font-size: var(--fs-xs); }
 
-.p-view .panel-actions .btn { gap: var(--s-1); }
+/* One gap on every page (View's, #1448): the header's controls are the same size on every tab. */
+.panel-actions .btn { gap: var(--s-1); }
+/* Aa's names share one cell, only the current one shown: the button is as wide as its widest name on every page. */
+.hd-text-names { display: inline-grid; }
+.hd-text-names > span { grid-area: 1 / 1; visibility: hidden; }
+.hd-text-names > .on { visibility: visible; }
+.hd-slot { visibility: hidden; pointer-events: none; }
+/* #1844 Fleet overview → Docs: the arrow says "opens a new tab". */
+.hd-docs .hd-ext { color: var(--text-3); }
 .v-term { flex: 1; min-height: 0; overflow: auto; scrollbar-gutter: stable; padding: 5px 6px; background: #000000; position: relative; }
 .v-pre { margin: 0; min-width: 100%; min-height: 100%; font-family: var(--font-mono); line-height: 1.2; white-space: pre; color: #d0d0d0; }
 .v-pre .ansi[data-b] { font-weight: var(--fw-bold); }
@@ -1041,6 +1082,7 @@ strong.org-name { font-size: var(--fs-sm); color: var(--text); }
 .cmd-head { display: flex; align-items: center; justify-content: space-between; gap: var(--s-2); }
 .cmd-name { font-weight: var(--fw-semibold); }
 .cmd-text { margin: 0; white-space: pre-wrap; overflow-wrap: anywhere; font-family: var(--font-ui); color: var(--text-2); }
+.cmd-phase { color: var(--text); font-weight: var(--fw-semibold); }
 .cmd-choices { display: flex; flex-wrap: wrap; gap: var(--s-1); max-height: 180px; overflow-y: auto; }
 .cmd-choices .btn.current { border-color: var(--accent); color: var(--accent); }
 .quick-actions { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); margin-bottom: var(--s-2); font-size: var(--fs-xs); color: var(--text-2); }

package/dist/ui/shared/header-tools.js

@@ -13,6 +13,8 @@ import { UsageBody, UsageDialog } from "./usage-dialog.js";
 
 export const TEXT_SIZE_KEY = "agend_text_size";
 export const VIEW_FIT_KEY = "agend_view_fit";
+/** #1869: set once this device's View Fit was put back (a size chosen on another page used to turn it off). */
+export const VIEW_FIT_RESTORED_KEY = "agend_view_fit_1869";
 const LEGACY_DENSITY_KEY = "agend_view_density";
 export const TEXT_SIZES = ["s", "m", "l"];
 /** View's terminal: its fitted size times this (S / M / L are View's old compact / – / comfortable). */
@@ -24,6 +26,7 @@ const write = (k, v) => { try { localStorage.setItem(k, v); } catch { /* this pa
 /**
  * This device's choice: `agend_text_size` (+ View's Fit), else — once — from View's `agend_view_density`:
  * comfortable → L, compact → S (Fit off); fit, or nothing → M with View on Fit (View's default, as before).
+ * #1869: until then any page's S / M / L also turned View's Fit off, so a Fit off from before is put back once.
  */
 export function loadTextSize() {
   let size = read(TEXT_SIZE_KEY), fit = read(VIEW_FIT_KEY);
@@ -31,7 +34,11 @@ export function loadTextSize() {
     const legacy = read(LEGACY_DENSITY_KEY);
     size = legacy === "comfortable" ? "l" : legacy === "compact" ? "s" : "m";
     fit = legacy === "comfortable" || legacy === "compact" ? "0" : "1";
-    write(TEXT_SIZE_KEY, size); write(VIEW_FIT_KEY, fit);
+    write(TEXT_SIZE_KEY, size); write(VIEW_FIT_KEY, fit); write(VIEW_FIT_RESTORED_KEY, "1");
+  }
+  if (read(VIEW_FIT_RESTORED_KEY) !== "1") {
+    if (fit === "0") { fit = "1"; write(VIEW_FIT_KEY, fit); }
+    write(VIEW_FIT_RESTORED_KEY, "1");
   }
   return { size, viewFit: fit !== "0" };
 }
@@ -50,15 +57,22 @@ export function initTextSize() {
     window.addEventListener("storage", (e) => { if (!e || e.key === TEXT_SIZE_KEY || e.key === VIEW_FIT_KEY || e.key === null) textSizeStore.set(loadTextSize()); });
   }
 }
-/** A size chosen anywhere is the size everywhere (View's Fit included: the last choice wins). */
-export function setTextSize(size) {
+/**
+ * A size chosen anywhere is the size everywhere. View's Fit is left only from View's own Aa (`view`): a size chosen on
+ * another page keeps View on Fit (#1869).
+ */
+export function setTextSize(size, { view = false } = {}) {
   if (!TEXT_SIZES.includes(size)) return;
-  write(TEXT_SIZE_KEY, size); write(VIEW_FIT_KEY, "0");
-  textSizeStore.set({ size, viewFit: false });
+  write(TEXT_SIZE_KEY, size);
+  if (view) write(VIEW_FIT_KEY, "0");
+  textSizeStore.set((s) => ({ size, viewFit: view ? false : s.viewFit }));
 }
 export function setViewFit() { write(VIEW_FIT_KEY, "1"); textSizeStore.set((s) => ({ ...s, viewFit: true })); }
 
-/** Aa: S → M → L → S; on View, Fit → S → M → L → Fit. */
+/**
+ * Aa: S → M → L → S; on View, Fit → S → M → L → Fit. Every page's button is as wide as its widest name (Fit's
+ * included): switching pages or sizes never moves the controls beside it.
+ */
 export function TextSizeButton({ view = false }) {
   const st = useStore(textSizeStore);
   const cur = view && st.viewFit ? "fit" : st.size;
@@ -66,8 +80,9 @@ export function TextSizeButton({ view = false }) {
   const next = order[(order.indexOf(cur) + 1) % order.length];
   const name = t(`app.textSize_${cur}`);
   const label = t("app.textSize", name);
-  return html`<button type="button" class="btn btn-ghost btn-sm hd-text" onClick=${() => (next === "fit" ? setViewFit() : setTextSize(next))}
-    title=${label} aria-label=${label}><${Icon} name="type" size=${16} /><span class="hide-narrow" aria-hidden="true">${name}</span></button>`;
+  return html`<button type="button" class="btn btn-ghost btn-sm hd-text" onClick=${() => (next === "fit" ? setViewFit() : setTextSize(next, { view }))}
+    title=${label} aria-label=${label}><${Icon} name="type" size=${16} /><span class="hide-narrow" aria-hidden="true"><span class="hd-text-names">${
+      ["fit", ...TEXT_SIZES].map(k => html`<span key=${k} class=${k === cur ? "on" : undefined}>${t(`app.textSize_${k}`)}</span>`)}</span></span></button>`;
 }
 
 /** Whether the fleet serves the usage panel: the page says so (data-usage-panel); "0" only when turned off. */
@@ -76,14 +91,15 @@ export function usageOffered() {
 }
 
 // #1673: the rail. Wide enough for it beside the sidebar and the page: RAIL_MEDIA (followed as it changes). Shown or
-// hidden is this device's choice (agend_usage_rail; "0" = hidden, else shown) — a layout choice, not synced (#1665).
+// hidden is this device's choice (agend_usage_rail; "1" = shown, "0" = hidden) — a layout choice, not synced (#1665).
+// #1854 (rank 7): a device that never chose starts with it hidden — a quiet first page; ◔ shows it (and remembers).
 export const RAIL_MEDIA = "(min-width: 1200px)";
 export const RAIL_KEY = "agend_usage_rail";
-/** The pages whose header has ◔ — the rail is theirs. */
-export const RAIL_PANELS = ["chat", "view", "details", "fleet"];
-export const usageRailStore = createStore({ open: true });
-/** A page load: this device's choice. */
-export function initUsageRail() { usageRailStore.set({ open: read(RAIL_KEY) !== "0" }); }
+/** The pages whose header has ◔ — the rail is theirs (Log's too: one frame on every tab of an instance). */
+export const RAIL_PANELS = ["chat", "view", "log", "details", "fleet"];
+export const usageRailStore = createStore({ open: false });
+/** A page load: this device's choice; none made yet = hidden. */
+export function initUsageRail() { usageRailStore.set({ open: read(RAIL_KEY) === "1" }); }
 export function setUsageRail(open) { write(RAIL_KEY, open ? "1" : "0"); usageRailStore.set({ open: !!open }); }
 const railQuery = () => { try { return typeof matchMedia === "function" ? matchMedia(RAIL_MEDIA) : null; } catch { return null; } };
 /** Whether the screen is wide enough for the rail, now and as it changes. */
@@ -141,3 +157,7 @@ export function UsageButton({ navKey }) {
 export function HeaderTools({ view = false, navKey }) {
   return html`<${TextSizeButton} view=${view} /><${UsageButton} navKey=${navKey} />`;
 }
+/** Where a page with no control of its own after the shared ones (Log) keeps the room Chat's ⋯ takes: the same box on every tab. */
+export function HeaderSlot() {
+  return html`<span class="icon-btn hd-slot" aria-hidden="true"></span>`;
+}

package/dist/ui/shared/instance-switch.js

@@ -6,10 +6,13 @@ import { html } from "./app-html.js";
 import { t } from "./app-i18n.js";
 import { chatPath, detailsPath, logPath, viewPath } from "./app-route.js";
 
-/** current: "chat" | "view" | "log" | "details". #1218: Log sits between View and Details. */
+/**
+ * current: "chat" | "view" | "log" | "details". #1218: Log sits between View and Details. `data-label`: each tab is as
+ * wide as its label in the current tab's weight (app.css), so the bar keeps its size whichever tab is current.
+ */
 export function InstanceSwitch({ name, current }) {
   const seg = (key, href, label) => html`<a key=${key} class=${`seg-item${current === key ? " active" : ""}`} href=${href}
-    aria-current=${current === key ? "page" : undefined}>${label}</a>`;
+    aria-current=${current === key ? "page" : undefined} data-label=${label}>${label}</a>`;
   return html`<nav class="inst-switch seg" aria-label=${t("app.instanceViews", name)}>
     ${seg("chat", chatPath(name), t("app.chat"))}${seg("view", viewPath(name), t("app.view"))}${seg("log", logPath(name), t("app.log"))}${seg("details", detailsPath(name), t("app.details"))}
   </nav>`;

package/dist/ui/shared/panel-view.js

@@ -114,7 +114,9 @@ export { viewStore };
 // ── The panel ──
 
 // readStream: one stream of reads under a lease (read-stream.js; View's pane and roster use it).
-const MIN_PX = 12, MAX_PX = 22;
+// S / M / L: the fitted size kept within 12–22 px, then scaled. Fit (#1869): never larger than what fits — only a 6 px
+// floor for legibility (a grid too wide for the box even at 6 px, e.g. 200 columns on a phone, still scrolls).
+const MIN_PX = 12, MAX_PX = 22, FIT_FLOOR_PX = 6;
 
 export function ViewPanel({ route, navKey }) {
   const lease = useLease(navKey);
@@ -219,10 +221,11 @@ function Terminal({ name, lease, density }) {
     const lh = parseFloat(pcs.lineHeight) / parseFloat(pcs.fontSize);
     const lineH = Number.isFinite(lh) && lh > 0 ? lh : 1.2;
     let size = Math.min(innerW / (g.cols * glyphRatio(p)), innerH / (g.rows * lineH)) * 0.995;
-    size = Math.max(MIN_PX, Math.min(size, MAX_PX)) * (density === "fit" ? 1 : VIEW_SCALE[density] || 1);
-    size = Math.max(8, Math.min(size, 32));
+    if (density === "fit") size = Math.max(FIT_FLOOR_PX, Math.min(size, MAX_PX));
+    else size = Math.max(8, Math.min(Math.max(MIN_PX, Math.min(size, MAX_PX)) * (VIEW_SCALE[density] || 1), 32));
     g.key = key;
-    if (Math.abs(size - g.applied) < 0.75) return;
+    // A small change is skipped only when growing (the size applied still fits); a smaller box always shrinks it.
+    if (size >= g.applied && size - g.applied < 0.75) return;
     g.applied = size;
     p.style.fontSize = `${size.toFixed(2)}px`;          // CSSOM, never a style attribute (#1300)
   };
@@ -314,6 +317,8 @@ function EditProfile({ it, onClose }) {
   const [f, setF] = useState({ display: it.display_name || "", role: it.role || "", desc: it.description || "" });
   const [busy, setBusy] = useState(false);
   const [msg, setMsg] = useState(null);
+  // #1630 follow-up: the uploaded picture is removed on Save (Cancel keeps it); a newly picked file wins over removing.
+  const [removePic, setRemovePic] = useState(false);
   const file = useRef(null);
   async function save() {
     if (busy) return;
@@ -323,6 +328,7 @@ function EditProfile({ it, onClose }) {
     const name = encodeURIComponent(it.instance_name);
     const draft = { display_name: f.display, role: f.role, description: f.desc };
     const picked = file.current && file.current.files && file.current.files[0];
+    const removing = removePic;
     try {
       const r = await fetch(`/api/profile/${name}`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(draft) });
       if (!lease.current()) return;
@@ -331,6 +337,9 @@ function EditProfile({ it, onClose }) {
       if (picked) {
         const ar = await fetch(`/api/avatar/${name}`, { method: "POST", headers: { "Content-Type": picked.type }, body: picked });
         if (!ar.ok) { const e = await ar.json().catch(() => ({})); throw new Error(tn("avatarFailed", { error: e.error || ar.status })); }
+      } else if (removing) {                              // a newly picked file replaces it instead
+        const dr = await fetch(`/api/avatar/${name}`, { method: "DELETE" });
+        if (!dr.ok) { const e = await dr.json().catch(() => ({})); throw new Error(tn("avatarRemoveFailed", { error: e.error || dr.status })); }
       }
       if (!lease.current()) return;
       setBusy(false);
@@ -345,6 +354,8 @@ function EditProfile({ it, onClose }) {
       <label class="field"><span>${tn("role")}</span><input value=${f.role} onInput=${(e) => setF({ ...f, role: e.target.value })} /></label>
       <label class="field"><span>${tn("description")}</span><textarea rows="3" value=${f.desc} onInput=${(e) => setF({ ...f, desc: e.target.value })}></textarea></label>
       <label class="field"><span>${tn("avatar")}</span><input ref=${file} type="file" accept="image/png,image/jpeg,image/gif,image/webp" /></label>
+      ${it.has_avatar ? html`<div class="field-row"><button type="button" class="btn btn-sm" aria-pressed=${removePic ? "true" : "false"}
+        onClick=${() => setRemovePic(!removePic)}>${tn(removePic ? "keepPicture" : "removePicture")}</button>${removePic ? html`<span class="muted">${tn("removePictureNote")}</span>` : null}</div>` : null}
     </fieldset></form>
     ${msg ? html`<p class="err" role="alert">${msg}${msg === tn("signInToSave") ? html` <a class="link" href=${signInHref()}>${t("app.signIn")}</a>` : null}</p>` : null}
   </${Dialog}>`;

package/dist/ui/shared/signin.js

@@ -11,10 +11,12 @@
   const $ = (id) => document.getElementById(id);
   const T = {
     en: {
-      checking: "Checking your session…", title: "Sign in to AgEnD", lead: "Enter the one-time code from your chat channel.",
+      checking: "Checking your session…", title: "Sign in to AgEnD", lead: "Enter your sign-in code.",
       label: "One-time code", submit: "Sign in", working: "Signing in…",
-      hint: "Send /web to your AgEnD bot, or run “agend web --code” on the host. A code works once and expires in 5 minutes.",
-      refused: "That code did not work — it may be wrong, expired or already used. Ask for a new one with /web.",
+      hint: "No code? Send /web in General, then press a sign-in button to get one.",
+      nobot: "No chat bot?", nobot_body: "Ask the operator to run agend web --code on the AgEnD computer.",
+      refused: "The code is invalid or no longer works. Send /web in General, then press a sign-in button for a new code.",
+      unconfirmed: "Sign-in could not be confirmed. Get a new code and try again; if it keeps failing, contact the operator.",
       paused: "Too many wrong codes — sign-in is paused for a few minutes.",
       network: "Could not reach AgEnD. Check the connection and try again.",
       resend: "Send me a new code", resent: "A new code was sent to you privately in chat. Enter it above.",
@@ -22,10 +24,12 @@
       resend_refused: "A new code could not be sent. Ask for one with /web.",
     },
     "zh-TW": {
-      checking: "正在確認登入狀態…", title: "登入 AgEnD", lead: "請輸入聊天頻道給你的一次性登入碼。",
+      checking: "正在確認登入狀態…", title: "登入 AgEnD", lead: "輸入登入碼。",
       label: "一次性登入碼", submit: "登入", working: "登入中…",
-      hint: "在 AgEnD bot 傳 /web，或在主機執行「agend web --code」。登入碼只能用一次，5 分鐘內有效。",
-      refused: "登入碼無效：可能輸入錯誤、已過期或已使用。請用 /web 再要一個。",
+      hint: "沒收到？在 General 傳 /web，再按登入按鈕取碼。",
+      nobot: "沒有聊天 bot？", nobot_body: "請管理員在 AgEnD 電腦執行 agend web --code。",
+      refused: "登入碼無效或已失效。請在 General 傳 /web，再按登入按鈕取新碼。",
+      unconfirmed: "登入暫時無法確認。請重新取碼再試；若仍失敗，請聯絡管理員。",
       paused: "錯誤次數過多，登入暫停幾分鐘。",
       network: "連不上 AgEnD，請檢查連線後再試。",
       resend: "傳一組新的登入碼給我", resent: "新的登入碼已私訊給你，請在上方輸入。",
@@ -47,8 +51,8 @@
       history.replaceState(null, "", here.pathname + here.search + here.hash);
     }
   } catch { /* nothing to clean */ }
-  // The command in the hint is a <code> that never breaks across lines (a break inside "--code" reads as two dashes
-  // and a word, alpha.2 sweep); the text around it is text.
+  // The command in the "No chat bot?" help is a <code> that never breaks across lines (a break inside "--code" reads as
+  // two dashes and a word, alpha.2 sweep); the text around it is text.
   const CMD = "agend web --code";
   document.querySelectorAll("[data-i18n]").forEach((el) => {
     const text = t(el.getAttribute("data-i18n"));
@@ -163,7 +167,9 @@
         body: JSON.stringify({ code: $("code").value }),
       });
       if (r.ok) { clearBounce(); location.replace(nextTarget()); return; }
-      msg.textContent = r.status === 429 ? t("paused") : t("refused");
+      // #1854: a 5xx is the server failing to confirm the sign-in (503: a public link's notice did not go out), not a
+      // wrong code — say so. The code is spent either way: the way on is a new one.
+      msg.textContent = r.status === 429 ? t("paused") : r.status >= 500 ? t("unconfirmed") : t("refused");
     } catch {
       msg.textContent = t("network");
     }

package/dist/ui/shared/ui-icons.js

@@ -54,6 +54,7 @@ const P = {
   panel: () => html`<rect x="3" y="4" width="18" height="16" rx="2"/><path d="M14 4v16"/>`,
   back: () => html`<path d="M19 12H5M12 19l-7-7 7-7"/>`,
   forward: () => html`<path d="M5 12h14M12 5l7 7-7 7"/>`,
+  book: () => html`<path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20V3H6.5A2.5 2.5 0 0 0 4 5.5z"/><path d="M4 19.5A2.5 2.5 0 0 0 6.5 22H20v-5"/>`,
   external: () => html`<path d="M14 4h6v6M20 4l-9 9"/><path d="M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5"/>`,
 };