@songsid/agend 2.2.0 → 2.2.5

package/dist/topic-link.d.ts

@@ -0,0 +1,128 @@
+/**
+ * #1990: links to another topic. One place builds "a link to instance X's place (or a world's General) on surface S"
+ * from what the adapters already know — Discord guild/channel ids, the Telegram supergroup id, its public @username
+ * when it has one, and topic ids — and messages name such a place through a token that each surface renders in its own
+ * form, or as plain text when the reader could not open the target.
+ *
+ *   Discord   `<#channel>` (clickable in place); in a DM, `https://discord.com/channels/<guild>/<channel>`
+ *   Telegram  `https://t.me/<username>/<topic>` (public group) or `https://t.me/c/<id without -100>/<topic>`, carried by
+ *             a `text_link` entity on plain text — no parse mode, so nothing in the text needs escaping
+ *   plain     the label alone (a suffix token disappears)
+ *
+ * The forms are the documented ones; no real client was driven (#1990: the user checks them on the 2.3 beta).
+ */
+export interface WorldPlace {
+    type: "discord" | "telegram" | string;
+    /** Discord: the guild id. Telegram: the supergroup id (-100…). */
+    groupId?: string;
+    /** Telegram: the group's public @username (without the @), when it has one — then links work for non-members too. */
+    username?: string;
+}
+/** A world's place, for links: its platform, its group and (Telegram) the group's public @username once read. */
+export declare function worldPlaceOf(world: {
+    type: string;
+    groupId: string;
+    adapter?: {
+        groupUsername?(groupId: string): string | undefined;
+    };
+}): WorldPlace;
+export declare const SNOWFLAKE: RegExp;
+/** t.me/c/ links take a supergroup's id without its -100 prefix; anything else has no such link. */
+export declare function telegramInternalId(chatId: string): string | undefined;
+/** A link to a message (a prompt's own buttons), or undefined when none can be built for this platform/place. */
+export declare function messageLink(place: WorldPlace, at: {
+    chatId: string;
+    threadId?: string;
+    messageId?: string;
+}): string | undefined;
+/**
+ * A browser URL to a topic or channel. Telegram's General topic (1) gets one only when `general` is set: an
+ * instance's link never points at General.
+ */
+export declare function topicUrl(place: WorldPlace | undefined, topicId: string | undefined, opts?: {
+    general?: boolean;
+}): string | undefined;
+/** A way to the instance's own thread: Discord's channel mention (clickable in place), Telegram's topic link. */
+export declare function instanceLink(place: WorldPlace, topicId: string | undefined): string | undefined;
+/** What a token points at: a world's General, or an instance's topic/room. */
+export type PlaceTarget = {
+    kind: "general";
+} | {
+    kind: "instance";
+    name: string;
+};
+/** How a surface reaches a target: a Discord mention, or a URL. Undefined: the reader gets plain text. */
+export type PlaceLink = {
+    mention: string;
+} | {
+    url: string;
+};
+/** A Telegram `text_link` entity: UTF-16 offsets, which is what a JS string's indices are. */
+export interface TextLink {
+    offset: number;
+    length: number;
+    url: string;
+}
+/** "web": like Telegram, the label carries the link (a range of the text), here an in-app route (webRoute). */
+export type PlaceSurface = "discord" | "telegram" | "web" | "plain";
+/** Name a place in a message: rendered as `label` linked to the target, or as `label` alone. */
+export declare function placeRef(target: PlaceTarget, label: string): string;
+/**
+ * A link appended to a message (" → General"): the message's own words stay as they are, and when the place cannot
+ * be linked the suffix disappears with its leading space.
+ */
+export declare function placeSuffix(target: PlaceTarget, label: string): string;
+export declare function hasPlaceRefs(text: string): boolean;
+/**
+ * Render every token for one surface. `resolve` says how this reader reaches a target (undefined: plain text). The
+ * text outside tokens is copied unchanged; `textLinks` is non-empty only on Telegram.
+ */
+export declare function renderPlaceRefs(text: string, surface: PlaceSurface, resolve: (target: PlaceTarget) => PlaceLink | undefined): {
+    text: string;
+    textLinks: TextLink[];
+};
+/**
+ * #1990: an in-app route of the web app for an instance — its chat, or its terminal View — as the web client parses it
+ * (src/ui/shared/app-route.js chatPath / viewPath). Undefined for a name no route takes.
+ */
+export declare function webRoute(panel: "chat" | "view", name: string): string | undefined;
+export declare const WEB_TEXT_LINKS_MAX = 16;
+/**
+ * #1990: links as the web keeps them — on a status line or a prompt, ranges of its text that open an instance's chat
+ * or View in the app. Whatever is not exactly that (out of the text, overlapping, not such a route) is dropped; an
+ * empty result is undefined.
+ */
+export declare function webTextLinks(raw: unknown, text: string): TextLink[] | undefined;
+/** Every token as its label, suffixes gone: what a surface that renders no links shows. */
+export declare function stripPlaceRefs(text: string): string;
+/** Text links that lie wholly inside [start, end), re-based to start; one that crosses the boundary is dropped. */
+export declare function textLinksWithin(links: readonly TextLink[], start: number, end: number): TextLink[];
+export interface MembershipSource {
+    isGroupMember?(groupId: string, userId: string): Promise<boolean>;
+}
+/**
+ * Whether a DM recipient may get links into a group: only a confirmed member (#1990 — never link to what the reader
+ * cannot open). One read per (group, user) per `ttlMs`, bounded by `deadlineMs`; a non-member, an error, a timeout or
+ * an adapter that cannot tell all mean "no" (plain text). Answers are cached, failures included, so a refusing
+ * platform is asked again only after the TTL; concurrent asks share one read.
+ */
+export declare class GroupMembership {
+    private readonly opts;
+    private readonly answers;
+    private readonly reads;
+    constructor(opts?: {
+        now: () => number;
+        ttlMs?: number;
+        deadlineMs?: number;
+        maxEntries?: number;
+    });
+    isMember(source: MembershipSource, groupId: string, userId: string): Promise<boolean>;
+    private read;
+}
+/** #1990: refusals that send the person to General — their reply carries a link to it. */
+export declare const GENERAL_POINTING_REFUSALS: ReadonlySet<string>;
+/**
+ * Text from outside (an agent's message, a pane line, a dialog's description) as a place-token-free argument: a
+ * message that interpolates it must not let it name a place of its own.
+ */
+export declare function noPlaceMarkers(text: string): string;

package/dist/topic-link.js

@@ -0,0 +1,269 @@
+/**
+ * #1990: links to another topic. One place builds "a link to instance X's place (or a world's General) on surface S"
+ * from what the adapters already know — Discord guild/channel ids, the Telegram supergroup id, its public @username
+ * when it has one, and topic ids — and messages name such a place through a token that each surface renders in its own
+ * form, or as plain text when the reader could not open the target.
+ *
+ *   Discord   `<#channel>` (clickable in place); in a DM, `https://discord.com/channels/<guild>/<channel>`
+ *   Telegram  `https://t.me/<username>/<topic>` (public group) or `https://t.me/c/<id without -100>/<topic>`, carried by
+ *             a `text_link` entity on plain text — no parse mode, so nothing in the text needs escaping
+ *   plain     the label alone (a suffix token disappears)
+ *
+ * The forms are the documented ones; no real client was driven (#1990: the user checks them on the 2.3 beta).
+ */
+/** A world's place, for links: its platform, its group and (Telegram) the group's public @username once read. */
+export function worldPlaceOf(world) {
+    const username = world.groupId ? world.adapter?.groupUsername?.(world.groupId) : undefined;
+    return { type: world.type, ...(world.groupId ? { groupId: world.groupId } : {}), ...(username ? { username } : {}) };
+}
+export const SNOWFLAKE = /^\d{5,25}$/;
+/** A Telegram @username as the platform allows it: 4–32 of [A-Za-z0-9_], starting with a letter. */
+const TELEGRAM_USERNAME = /^[A-Za-z][A-Za-z0-9_]{3,31}$/;
+/** t.me/c/ links take a supergroup's id without its -100 prefix; anything else has no such link. */
+export function telegramInternalId(chatId) {
+    const m = /^-100(\d+)$/.exec(chatId);
+    return m ? m[1] : undefined;
+}
+/** The t.me path prefix of a group: `<username>` for a public one, `c/<id>` for a private supergroup. */
+function telegramGroupPath(place, chatId = place.groupId ?? "") {
+    if (place.username && TELEGRAM_USERNAME.test(place.username) && chatId === place.groupId)
+        return place.username;
+    const internal = telegramInternalId(chatId);
+    return internal ? `c/${internal}` : undefined;
+}
+/** A link to a message (a prompt's own buttons), or undefined when none can be built for this platform/place. */
+export function messageLink(place, at) {
+    if (!at.messageId)
+        return undefined;
+    if (place.type === "discord") {
+        const channel = at.threadId ?? at.chatId;
+        if (!place.groupId || !SNOWFLAKE.test(place.groupId) || !SNOWFLAKE.test(channel) || !SNOWFLAKE.test(at.messageId))
+            return undefined;
+        return `https://discord.com/channels/${place.groupId}/${channel}/${at.messageId}`;
+    }
+    if (place.type === "telegram") {
+        const path = telegramGroupPath(place, at.chatId);
+        if (!path || !/^\d+$/.test(at.messageId))
+            return undefined;
+        const topic = at.threadId && at.threadId !== "1" && /^\d+$/.test(at.threadId) ? `${at.threadId}/` : "";
+        return `https://t.me/${path}/${topic}${at.messageId}`;
+    }
+    return undefined;
+}
+/**
+ * A browser URL to a topic or channel. Telegram's General topic (1) gets one only when `general` is set: an
+ * instance's link never points at General.
+ */
+export function topicUrl(place, topicId, opts = {}) {
+    if (!place || !topicId)
+        return undefined;
+    if (place.type === "discord") {
+        if (!place.groupId || !SNOWFLAKE.test(place.groupId) || !SNOWFLAKE.test(topicId))
+            return undefined;
+        return `https://discord.com/channels/${place.groupId}/${topicId}`;
+    }
+    if (place.type === "telegram") {
+        const path = telegramGroupPath(place);
+        if (!path || !/^\d+$/.test(topicId) || (topicId === "1" && !opts.general))
+            return undefined;
+        return `https://t.me/${path}/${topicId}`;
+    }
+    return undefined;
+}
+/** A way to the instance's own thread: Discord's channel mention (clickable in place), Telegram's topic link. */
+export function instanceLink(place, topicId) {
+    if (!topicId)
+        return undefined;
+    if (place.type === "discord")
+        return SNOWFLAKE.test(topicId) ? `<#${topicId}>` : undefined;
+    return topicUrl(place, topicId);
+}
+// Private-use code points: no normal text carries them, and a stray one is never taken for a token.
+const OPEN = "";
+const MID = "";
+const CLOSE = "";
+const TOKEN = /([^-]*)([^-]*)/g;
+const MARKERS = /[-]/g;
+function encodeTarget(target) {
+    return target.kind === "general" ? "g" : `i:${encodeURIComponent(target.name)}`;
+}
+function decodeTarget(payload) {
+    if (payload === "g")
+        return { kind: "general" };
+    if (!payload.startsWith("i:"))
+        return undefined;
+    try {
+        const name = decodeURIComponent(payload.slice(2));
+        return name ? { kind: "instance", name } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Name a place in a message: rendered as `label` linked to the target, or as `label` alone. */
+export function placeRef(target, label) {
+    return `${OPEN}${encodeTarget(target)}${MID}${label.replace(MARKERS, "")}${CLOSE}`;
+}
+/**
+ * A link appended to a message (" → General"): the message's own words stay as they are, and when the place cannot
+ * be linked the suffix disappears with its leading space.
+ */
+export function placeSuffix(target, label) {
+    return ` ${OPEN}s|${encodeTarget(target)}${MID}${label.replace(MARKERS, "")}${CLOSE}`;
+}
+export function hasPlaceRefs(text) {
+    return text.includes(OPEN);
+}
+/**
+ * Render every token for one surface. `resolve` says how this reader reaches a target (undefined: plain text). The
+ * text outside tokens is copied unchanged; `textLinks` is non-empty only on Telegram.
+ */
+export function renderPlaceRefs(text, surface, resolve) {
+    if (!hasPlaceRefs(text))
+        return { text, textLinks: [] };
+    const textLinks = [];
+    let out = "";
+    let last = 0;
+    for (const m of text.matchAll(TOKEN)) {
+        let before = text.slice(last, m.index);
+        last = m.index + m[0].length;
+        const suffix = m[1].startsWith("s|");
+        const target = decodeTarget(suffix ? m[1].slice(2) : m[1]);
+        const label = m[2];
+        const link = target && label && surface !== "plain" ? resolve(target) : undefined;
+        if (!link) {
+            // A suffix is all link: without one it goes, with the space placeSuffix put before it.
+            if (suffix)
+                before = before.endsWith(" ") ? before.slice(0, -1) : before;
+            out += before + (suffix ? "" : label);
+            continue;
+        }
+        out += before;
+        const arrow = suffix ? "→ " : "";
+        if (surface === "discord") {
+            // A mention is clickable in place; a URL (a DM) in angle brackets so Discord adds no embed.
+            const ref = "mention" in link ? link.mention : `<${link.url}>`;
+            out += suffix ? `${arrow}${ref}` : `${label} (${ref})`;
+        }
+        else if ("url" in link) {
+            out += arrow;
+            textLinks.push({ offset: out.length, length: label.length, url: link.url });
+            out += label;
+        }
+        else {
+            out += arrow + label;
+        }
+    }
+    out += text.slice(last);
+    return { text: out, textLinks };
+}
+/**
+ * #1990: an in-app route of the web app for an instance — its chat, or its terminal View — as the web client parses it
+ * (src/ui/shared/app-route.js chatPath / viewPath). Undefined for a name no route takes.
+ */
+export function webRoute(panel, name) {
+    if (!name || name.length > 128 || /[/\\\u0000-\u001f\u007f]/.test(name) || name === "." || name.includes(".."))
+        return undefined;
+    return panel === "chat" ? `/ui/chat/${encodeURIComponent(name)}` : `/view/${encodeURIComponent(name)}`;
+}
+const WEB_ROUTE = /^\/(?:ui\/chat|view)\/[^/?#\s]+$/;
+export const WEB_TEXT_LINKS_MAX = 16;
+/**
+ * #1990: links as the web keeps them — on a status line or a prompt, ranges of its text that open an instance's chat
+ * or View in the app. Whatever is not exactly that (out of the text, overlapping, not such a route) is dropped; an
+ * empty result is undefined.
+ */
+export function webTextLinks(raw, text) {
+    if (!Array.isArray(raw))
+        return undefined;
+    const out = [];
+    let end = 0;
+    for (const l of raw.slice(0, WEB_TEXT_LINKS_MAX)) {
+        if (!l || typeof l !== "object")
+            continue;
+        const { offset, length, url } = l;
+        if (!Number.isSafeInteger(offset) || !Number.isSafeInteger(length) || typeof url !== "string")
+            continue;
+        const o = offset, n = length;
+        if (o < end || n < 1 || o + n > text.length || !WEB_ROUTE.test(url))
+            continue;
+        try {
+            decodeURIComponent(url);
+        }
+        catch {
+            continue;
+        }
+        out.push({ offset: o, length: n, url });
+        end = o + n;
+    }
+    return out.length ? out : undefined;
+}
+/** Every token as its label, suffixes gone: what a surface that renders no links shows. */
+export function stripPlaceRefs(text) {
+    return renderPlaceRefs(text, "plain", () => undefined).text;
+}
+/** Text links that lie wholly inside [start, end), re-based to start; one that crosses the boundary is dropped. */
+export function textLinksWithin(links, start, end) {
+    return links.filter(l => l.offset >= start && l.offset + l.length <= end).map(l => ({ ...l, offset: l.offset - start }));
+}
+/**
+ * Whether a DM recipient may get links into a group: only a confirmed member (#1990 — never link to what the reader
+ * cannot open). One read per (group, user) per `ttlMs`, bounded by `deadlineMs`; a non-member, an error, a timeout or
+ * an adapter that cannot tell all mean "no" (plain text). Answers are cached, failures included, so a refusing
+ * platform is asked again only after the TTL; concurrent asks share one read.
+ */
+export class GroupMembership {
+    opts;
+    answers = new Map();
+    reads = new Map();
+    constructor(opts = { now: () => performance.now() }) {
+        this.opts = opts;
+    }
+    async isMember(source, groupId, userId) {
+        if (!source.isGroupMember || !groupId || !userId)
+            return false;
+        const key = `${groupId}\u0000${userId}`;
+        const ttl = this.opts.ttlMs ?? 10 * 60_000;
+        const cached = this.answers.get(key);
+        if (cached && this.opts.now() - cached.at < ttl)
+            return cached.member;
+        const pending = this.reads.get(key);
+        if (pending)
+            return pending;
+        const read = this.read(source, groupId, userId).then(member => {
+            this.answers.delete(key); // re-insert: the map's order is its age, for the bound below
+            this.answers.set(key, { member, at: this.opts.now() });
+            const max = this.opts.maxEntries ?? 1000;
+            while (this.answers.size > max)
+                this.answers.delete(this.answers.keys().next().value);
+            return member;
+        }).finally(() => this.reads.delete(key));
+        this.reads.set(key, read);
+        return read;
+    }
+    read(source, groupId, userId) {
+        const deadlineMs = this.opts.deadlineMs ?? 5_000;
+        return new Promise(resolve => {
+            const timer = setTimeout(() => resolve(false), deadlineMs);
+            timer.unref?.();
+            let asked;
+            try {
+                asked = source.isGroupMember(groupId, userId);
+            }
+            catch {
+                asked = Promise.resolve(false);
+            }
+            asked.then(member => { clearTimeout(timer); resolve(member === true); }, () => { clearTimeout(timer); resolve(false); });
+        });
+    }
+}
+/** #1990: refusals that send the person to General — their reply carries a link to it. */
+export const GENERAL_POINTING_REFUSALS = new Set(["cmd.use_in_general", "profile.general_only"]);
+/**
+ * Text from outside (an agent's message, a pane line, a dialog's description) as a place-token-free argument: a
+ * message that interpolates it must not let it name a place of its own.
+ */
+export function noPlaceMarkers(text) {
+    return text.replace(MARKERS, "");
+}
+//# sourceMappingURL=topic-link.js.map

package/dist/topic-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-link.js","sourceRoot":"","sources":["../src/topic-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,iHAAiH;AACjH,MAAM,UAAU,YAAY,CAAC,KAA2G;IACtI,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC;AACtC,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAEzD,oGAAoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,yGAAyG;AACzG,SAAS,iBAAiB,CAAC,KAAiB,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE;IACxE,IAAI,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IAChH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,EAA6D;IAC1G,IAAI,CAAC,EAAE,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACpI,OAAO,gCAAgC,KAAK,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,OAAO,gBAAgB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAA6B,EAAE,OAA2B,EAAE,OAA8B,EAAE;IACnH,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACnG,OAAO,gCAAgC,KAAK,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5F,OAAO,gBAAgB,IAAI,IAAI,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAA2B;IACzE,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAgBD,oGAAoG;AACpG,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,GAAG,GAAG,GAAG,CAAC;AAChB,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,SAAS,YAAY,CAAC,MAAmB;IACvC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,QAAQ,CAAC,MAAmB,EAAE,KAAa;IACzD,OAAO,GAAG,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAmB,EAAE,KAAa;IAC5D,OAAO,IAAI,IAAI,KAAK,YAAY,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,OAAqB,EACrB,OAAuD;IAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACxD,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,uFAAuF;YACvF,IAAI,MAAM;gBAAE,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,GAAG,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,GAAG,IAAI,MAAM,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,4FAA4F;YAC5F,MAAM,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC;YAC/D,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,GAAG,GAAG,CAAC;QACzD,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,KAAK,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAsB,EAAE,IAAY;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjI,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,IAAY;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAA4B,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACxG,MAAM,CAAC,GAAG,MAAgB,EAAE,CAAC,GAAG,MAAgB,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9E,IAAI,CAAC;YAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,eAAe,CAAC,KAA0B,EAAE,KAAa,EAAE,GAAW;IACpF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3H,CAAC;AAQD;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAIG;IAHZ,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IAC7D,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE7D,YAA6B,OAAwF,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE;QAAxH,SAAI,GAAJ,IAAI,CAAoH;IAAG,CAAC;IAEzJ,KAAK,CAAC,QAAQ,CAAC,MAAwB,EAAE,OAAe,EAAE,MAAc;QACtE,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,OAAO,SAAS,MAAM,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC5D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAG,6DAA6D;YACzF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;YACzC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;YAChG,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,IAAI,CAAC,MAAwB,EAAE,OAAe,EAAE,MAAc;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;QACjD,OAAO,IAAI,OAAO,CAAU,OAAO,CAAC,EAAE;YACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;YAC1D,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAuB,CAAC;YAC5B,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,CAAC,aAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YACjG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3H,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAEtH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/types.d.ts

@@ -345,6 +345,12 @@ export interface WebConfig {
     echo_to_channel?: boolean;
     /** Show the AI subscription usage panel on /view and serve /api/ai-usage (default true). */
     usage_panel?: boolean;
+    /**
+     * #2122: serve the usage report (Fleet → Usage, GET /ui/usage-report) over the temporary public link too (default
+     * false). It is up to 400 days of per-agent, per-model, per-profile activity and amounts — more than the live quota
+     * rail or the cache report the link already shows. Guests never get it.
+     */
+    usage_report_on_public_link?: boolean;
     /**
      * #1937: the largest file the web chat takes, in MB (whole number, 1–500; default 50). Never more than
      * upload_max_total_mb; over the public link a file is at most 95 MB whatever this says (the quick tunnel's limit).
@@ -378,7 +384,7 @@ export interface WebConfig {
     /**
      * #1620: how long a web session lasts. Only the LOCAL surface (the dashboard reached directly — loopback, a LAN, a
      * tailnet) is configurable; a public-link session's limits stay fixed. Hours, 1 ≤ idle_hours ≤ absolute_hours ≤ 720;
-     * defaults 12 (absolute, from sign-in) and 2 (idle, since the last use). Shortening applies to existing sessions.
+     * defaults 48 (absolute, from sign-in) and 48 (idle, since the last use; #1670). Shortening applies to existing sessions.
      */
     session?: {
         local?: {
@@ -404,6 +410,60 @@ export interface WebConfig {
      * instead of it; web.preview: false turns previews off everywhere.
      */
     preview_on_public_link?: boolean;
+    /**
+     * #1629: agents' own web themes and effects. `agent_edit` (default true): false refuses every agent appearance write,
+     * fleet-wide; what is stored stays, and people can still reset and lock.
+     */
+    themes?: {
+        agent_edit?: boolean;
+    };
+    /**
+     * #1629 r4.1 Q3 (b): the identity card's upload limits and each agent's picture quota. Defaults: portrait
+     * 1024×1536 / 1536 KiB, banner 1600×600 / 768 KiB, quota 8 files / 4 MiB. A value outside its hard bound is clamped
+     * (and warned about); a change applies to new uploads only.
+     */
+    appearance?: import("./web-appearance-limits.js").AppearanceLimitsConfig;
+    /**
+     * #1920: guest web sign-in — a non-admin signed in as their own Discord or Telegram account, seeing only the instances
+     * they already use in chat (derived on every request). Default off.
+     */
+    guests?: WebGuestsConfig;
+    /**
+     * #1939: when a signed-in web session's messages carry authority (docs/design/1939-verified-web-sessions.md §3).
+     * S1 records it in receipts only; no agent acts on it yet.
+     */
+    verified_authority?: WebVerifiedAuthorityConfig;
+}
+/** #1939: fleet.yaml `web.verified_authority` (docs/design/1939-verified-web-sessions.md §0, §3, §10). */
+export interface WebVerifiedAuthorityConfig {
+    /**
+     * The server switch (§10): web messages carry authority only while it is on (default true, §0.1). Turning it off makes
+     * every web authority read as none at once; turning it back on never brings back authority given before.
+     */
+    enabled?: boolean;
+    /** "Only this computer can authorize": only loopback requests qualify (default false: LAN and tailnet too). */
+    loopback_only?: boolean;
+    /** A session's authorization lasts this many hours after it was given, 1–48 (default 48). */
+    max_session_hours?: number;
+}
+/** #1920: fleet.yaml `web.guests`. */
+export interface WebGuestsConfig {
+    /** Guest sign-in at all (default false). Turning it off ends every guest session. */
+    enabled?: boolean;
+    /** Guests may chat (default true); false: read-only. */
+    chat?: boolean;
+    /**
+     * An `open` connection's guests reach nothing until an admin names instances here, per connection id (the user's
+     * decision: least privilege, since an open group has no list of people).
+     */
+    open_instances?: Record<string, string[]>;
+    /** An admin's narrowing, per `<connection id>:<user id>`: intersected with the derived scope, never widening it. */
+    narrow?: Record<string, string[]>;
+    /** A guest session's limits: absolute 1–24 h (default 12), idle 15–720 min (default 120). */
+    session?: {
+        absolute_hours?: number;
+        idle_minutes?: number;
+    };
 }
 /** `login:` section — remote /login behaviour. */
 export interface LoginConfig {