@songsid/agend 2.2.1 → 2.3.0-beta.10

package/dist/topic-link.js

@@ -0,0 +1,269 @@
+/**
+ * #1990: links to another topic. One place builds "a link to instance X's place (or a world's General) on surface S"
+ * from what the adapters already know — Discord guild/channel ids, the Telegram supergroup id, its public @username
+ * when it has one, and topic ids — and messages name such a place through a token that each surface renders in its own
+ * form, or as plain text when the reader could not open the target.
+ *
+ *   Discord   `<#channel>` (clickable in place); in a DM, `https://discord.com/channels/<guild>/<channel>`
+ *   Telegram  `https://t.me/<username>/<topic>` (public group) or `https://t.me/c/<id without -100>/<topic>`, carried by
+ *             a `text_link` entity on plain text — no parse mode, so nothing in the text needs escaping
+ *   plain     the label alone (a suffix token disappears)
+ *
+ * The forms are the documented ones; no real client was driven (#1990: the user checks them on the 2.3 beta).
+ */
+/** A world's place, for links: its platform, its group and (Telegram) the group's public @username once read. */
+export function worldPlaceOf(world) {
+    const username = world.groupId ? world.adapter?.groupUsername?.(world.groupId) : undefined;
+    return { type: world.type, ...(world.groupId ? { groupId: world.groupId } : {}), ...(username ? { username } : {}) };
+}
+export const SNOWFLAKE = /^\d{5,25}$/;
+/** A Telegram @username as the platform allows it: 4–32 of [A-Za-z0-9_], starting with a letter. */
+const TELEGRAM_USERNAME = /^[A-Za-z][A-Za-z0-9_]{3,31}$/;
+/** t.me/c/ links take a supergroup's id without its -100 prefix; anything else has no such link. */
+export function telegramInternalId(chatId) {
+    const m = /^-100(\d+)$/.exec(chatId);
+    return m ? m[1] : undefined;
+}
+/** The t.me path prefix of a group: `<username>` for a public one, `c/<id>` for a private supergroup. */
+function telegramGroupPath(place, chatId = place.groupId ?? "") {
+    if (place.username && TELEGRAM_USERNAME.test(place.username) && chatId === place.groupId)
+        return place.username;
+    const internal = telegramInternalId(chatId);
+    return internal ? `c/${internal}` : undefined;
+}
+/** A link to a message (a prompt's own buttons), or undefined when none can be built for this platform/place. */
+export function messageLink(place, at) {
+    if (!at.messageId)
+        return undefined;
+    if (place.type === "discord") {
+        const channel = at.threadId ?? at.chatId;
+        if (!place.groupId || !SNOWFLAKE.test(place.groupId) || !SNOWFLAKE.test(channel) || !SNOWFLAKE.test(at.messageId))
+            return undefined;
+        return `https://discord.com/channels/${place.groupId}/${channel}/${at.messageId}`;
+    }
+    if (place.type === "telegram") {
+        const path = telegramGroupPath(place, at.chatId);
+        if (!path || !/^\d+$/.test(at.messageId))
+            return undefined;
+        const topic = at.threadId && at.threadId !== "1" && /^\d+$/.test(at.threadId) ? `${at.threadId}/` : "";
+        return `https://t.me/${path}/${topic}${at.messageId}`;
+    }
+    return undefined;
+}
+/**
+ * A browser URL to a topic or channel. Telegram's General topic (1) gets one only when `general` is set: an
+ * instance's link never points at General.
+ */
+export function topicUrl(place, topicId, opts = {}) {
+    if (!place || !topicId)
+        return undefined;
+    if (place.type === "discord") {
+        if (!place.groupId || !SNOWFLAKE.test(place.groupId) || !SNOWFLAKE.test(topicId))
+            return undefined;
+        return `https://discord.com/channels/${place.groupId}/${topicId}`;
+    }
+    if (place.type === "telegram") {
+        const path = telegramGroupPath(place);
+        if (!path || !/^\d+$/.test(topicId) || (topicId === "1" && !opts.general))
+            return undefined;
+        return `https://t.me/${path}/${topicId}`;
+    }
+    return undefined;
+}
+/** A way to the instance's own thread: Discord's channel mention (clickable in place), Telegram's topic link. */
+export function instanceLink(place, topicId) {
+    if (!topicId)
+        return undefined;
+    if (place.type === "discord")
+        return SNOWFLAKE.test(topicId) ? `<#${topicId}>` : undefined;
+    return topicUrl(place, topicId);
+}
+// Private-use code points: no normal text carries them, and a stray one is never taken for a token.
+const OPEN = "";
+const MID = "";
+const CLOSE = "";
+const TOKEN = /([^-]*)([^-]*)/g;
+const MARKERS = /[-]/g;
+function encodeTarget(target) {
+    return target.kind === "general" ? "g" : `i:${encodeURIComponent(target.name)}`;
+}
+function decodeTarget(payload) {
+    if (payload === "g")
+        return { kind: "general" };
+    if (!payload.startsWith("i:"))
+        return undefined;
+    try {
+        const name = decodeURIComponent(payload.slice(2));
+        return name ? { kind: "instance", name } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Name a place in a message: rendered as `label` linked to the target, or as `label` alone. */
+export function placeRef(target, label) {
+    return `${OPEN}${encodeTarget(target)}${MID}${label.replace(MARKERS, "")}${CLOSE}`;
+}
+/**
+ * A link appended to a message (" → General"): the message's own words stay as they are, and when the place cannot
+ * be linked the suffix disappears with its leading space.
+ */
+export function placeSuffix(target, label) {
+    return ` ${OPEN}s|${encodeTarget(target)}${MID}${label.replace(MARKERS, "")}${CLOSE}`;
+}
+export function hasPlaceRefs(text) {
+    return text.includes(OPEN);
+}
+/**
+ * Render every token for one surface. `resolve` says how this reader reaches a target (undefined: plain text). The
+ * text outside tokens is copied unchanged; `textLinks` is non-empty only on Telegram.
+ */
+export function renderPlaceRefs(text, surface, resolve) {
+    if (!hasPlaceRefs(text))
+        return { text, textLinks: [] };
+    const textLinks = [];
+    let out = "";
+    let last = 0;
+    for (const m of text.matchAll(TOKEN)) {
+        let before = text.slice(last, m.index);
+        last = m.index + m[0].length;
+        const suffix = m[1].startsWith("s|");
+        const target = decodeTarget(suffix ? m[1].slice(2) : m[1]);
+        const label = m[2];
+        const link = target && label && surface !== "plain" ? resolve(target) : undefined;
+        if (!link) {
+            // A suffix is all link: without one it goes, with the space placeSuffix put before it.
+            if (suffix)
+                before = before.endsWith(" ") ? before.slice(0, -1) : before;
+            out += before + (suffix ? "" : label);
+            continue;
+        }
+        out += before;
+        const arrow = suffix ? "→ " : "";
+        if (surface === "discord") {
+            // A mention is clickable in place; a URL (a DM) in angle brackets so Discord adds no embed.
+            const ref = "mention" in link ? link.mention : `<${link.url}>`;
+            out += suffix ? `${arrow}${ref}` : `${label} (${ref})`;
+        }
+        else if ("url" in link) {
+            out += arrow;
+            textLinks.push({ offset: out.length, length: label.length, url: link.url });
+            out += label;
+        }
+        else {
+            out += arrow + label;
+        }
+    }
+    out += text.slice(last);
+    return { text: out, textLinks };
+}
+/**
+ * #1990: an in-app route of the web app for an instance — its chat, or its terminal View — as the web client parses it
+ * (src/ui/shared/app-route.js chatPath / viewPath). Undefined for a name no route takes.
+ */
+export function webRoute(panel, name) {
+    if (!name || name.length > 128 || /[/\\\u0000-\u001f\u007f]/.test(name) || name === "." || name.includes(".."))
+        return undefined;
+    return panel === "chat" ? `/ui/chat/${encodeURIComponent(name)}` : `/view/${encodeURIComponent(name)}`;
+}
+const WEB_ROUTE = /^\/(?:ui\/chat|view)\/[^/?#\s]+$/;
+export const WEB_TEXT_LINKS_MAX = 16;
+/**
+ * #1990: links as the web keeps them — on a status line or a prompt, ranges of its text that open an instance's chat
+ * or View in the app. Whatever is not exactly that (out of the text, overlapping, not such a route) is dropped; an
+ * empty result is undefined.
+ */
+export function webTextLinks(raw, text) {
+    if (!Array.isArray(raw))
+        return undefined;
+    const out = [];
+    let end = 0;
+    for (const l of raw.slice(0, WEB_TEXT_LINKS_MAX)) {
+        if (!l || typeof l !== "object")
+            continue;
+        const { offset, length, url } = l;
+        if (!Number.isSafeInteger(offset) || !Number.isSafeInteger(length) || typeof url !== "string")
+            continue;
+        const o = offset, n = length;
+        if (o < end || n < 1 || o + n > text.length || !WEB_ROUTE.test(url))
+            continue;
+        try {
+            decodeURIComponent(url);
+        }
+        catch {
+            continue;
+        }
+        out.push({ offset: o, length: n, url });
+        end = o + n;
+    }
+    return out.length ? out : undefined;
+}
+/** Every token as its label, suffixes gone: what a surface that renders no links shows. */
+export function stripPlaceRefs(text) {
+    return renderPlaceRefs(text, "plain", () => undefined).text;
+}
+/** Text links that lie wholly inside [start, end), re-based to start; one that crosses the boundary is dropped. */
+export function textLinksWithin(links, start, end) {
+    return links.filter(l => l.offset >= start && l.offset + l.length <= end).map(l => ({ ...l, offset: l.offset - start }));
+}
+/**
+ * Whether a DM recipient may get links into a group: only a confirmed member (#1990 — never link to what the reader
+ * cannot open). One read per (group, user) per `ttlMs`, bounded by `deadlineMs`; a non-member, an error, a timeout or
+ * an adapter that cannot tell all mean "no" (plain text). Answers are cached, failures included, so a refusing
+ * platform is asked again only after the TTL; concurrent asks share one read.
+ */
+export class GroupMembership {
+    opts;
+    answers = new Map();
+    reads = new Map();
+    constructor(opts = { now: () => performance.now() }) {
+        this.opts = opts;
+    }
+    async isMember(source, groupId, userId) {
+        if (!source.isGroupMember || !groupId || !userId)
+            return false;
+        const key = `${groupId}\u0000${userId}`;
+        const ttl = this.opts.ttlMs ?? 10 * 60_000;
+        const cached = this.answers.get(key);
+        if (cached && this.opts.now() - cached.at < ttl)
+            return cached.member;
+        const pending = this.reads.get(key);
+        if (pending)
+            return pending;
+        const read = this.read(source, groupId, userId).then(member => {
+            this.answers.delete(key); // re-insert: the map's order is its age, for the bound below
+            this.answers.set(key, { member, at: this.opts.now() });
+            const max = this.opts.maxEntries ?? 1000;
+            while (this.answers.size > max)
+                this.answers.delete(this.answers.keys().next().value);
+            return member;
+        }).finally(() => this.reads.delete(key));
+        this.reads.set(key, read);
+        return read;
+    }
+    read(source, groupId, userId) {
+        const deadlineMs = this.opts.deadlineMs ?? 5_000;
+        return new Promise(resolve => {
+            const timer = setTimeout(() => resolve(false), deadlineMs);
+            timer.unref?.();
+            let asked;
+            try {
+                asked = source.isGroupMember(groupId, userId);
+            }
+            catch {
+                asked = Promise.resolve(false);
+            }
+            asked.then(member => { clearTimeout(timer); resolve(member === true); }, () => { clearTimeout(timer); resolve(false); });
+        });
+    }
+}
+/** #1990: refusals that send the person to General — their reply carries a link to it. */
+export const GENERAL_POINTING_REFUSALS = new Set(["cmd.use_in_general", "profile.general_only"]);
+/**
+ * Text from outside (an agent's message, a pane line, a dialog's description) as a place-token-free argument: a
+ * message that interpolates it must not let it name a place of its own.
+ */
+export function noPlaceMarkers(text) {
+    return text.replace(MARKERS, "");
+}
+//# sourceMappingURL=topic-link.js.map

package/dist/topic-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-link.js","sourceRoot":"","sources":["../src/topic-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,iHAAiH;AACjH,MAAM,UAAU,YAAY,CAAC,KAA2G;IACtI,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC;AACtC,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAEzD,oGAAoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,yGAAyG;AACzG,SAAS,iBAAiB,CAAC,KAAiB,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE;IACxE,IAAI,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IAChH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,EAA6D;IAC1G,IAAI,CAAC,EAAE,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACpI,OAAO,gCAAgC,KAAK,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,OAAO,gBAAgB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAA6B,EAAE,OAA2B,EAAE,OAA8B,EAAE;IACnH,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACnG,OAAO,gCAAgC,KAAK,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5F,OAAO,gBAAgB,IAAI,IAAI,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAA2B;IACzE,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAgBD,oGAAoG;AACpG,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,GAAG,GAAG,GAAG,CAAC;AAChB,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,SAAS,YAAY,CAAC,MAAmB;IACvC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,QAAQ,CAAC,MAAmB,EAAE,KAAa;IACzD,OAAO,GAAG,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAmB,EAAE,KAAa;IAC5D,OAAO,IAAI,IAAI,KAAK,YAAY,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,OAAqB,EACrB,OAAuD;IAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACxD,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,uFAAuF;YACvF,IAAI,MAAM;gBAAE,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,GAAG,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,GAAG,IAAI,MAAM,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,4FAA4F;YAC5F,MAAM,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC;YAC/D,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,GAAG,GAAG,CAAC;QACzD,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,KAAK,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAsB,EAAE,IAAY;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjI,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,IAAY;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAA4B,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACxG,MAAM,CAAC,GAAG,MAAgB,EAAE,CAAC,GAAG,MAAgB,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9E,IAAI,CAAC;YAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,eAAe,CAAC,KAA0B,EAAE,KAAa,EAAE,GAAW;IACpF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3H,CAAC;AAQD;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAIG;IAHZ,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IAC7D,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE7D,YAA6B,OAAwF,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE;QAAxH,SAAI,GAAJ,IAAI,CAAoH;IAAG,CAAC;IAEzJ,KAAK,CAAC,QAAQ,CAAC,MAAwB,EAAE,OAAe,EAAE,MAAc;QACtE,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,OAAO,SAAS,MAAM,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC5D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAG,6DAA6D;YACzF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;YACzC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;YAChG,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,IAAI,CAAC,MAAwB,EAAE,OAAe,EAAE,MAAc;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;QACjD,OAAO,IAAI,OAAO,CAAU,OAAO,CAAC,EAAE;YACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;YAC1D,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAuB,CAAC;YAC5B,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,CAAC,aAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YACjG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3H,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAEtH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/types.d.ts

@@ -345,6 +345,12 @@ export interface WebConfig {
     echo_to_channel?: boolean;
     /** Show the AI subscription usage panel on /view and serve /api/ai-usage (default true). */
     usage_panel?: boolean;
+    /**
+     * #2122: serve the usage report (Fleet → Usage, GET /ui/usage-report) over the temporary public link too (default
+     * false). It is up to 400 days of per-agent, per-model, per-profile activity and amounts — more than the live quota
+     * rail or the cache report the link already shows. Guests never get it.
+     */
+    usage_report_on_public_link?: boolean;
     /**
      * #1937: the largest file the web chat takes, in MB (whole number, 1–500; default 50). Never more than
      * upload_max_total_mb; over the public link a file is at most 95 MB whatever this says (the quick tunnel's limit).
@@ -378,7 +384,7 @@ export interface WebConfig {
     /**
      * #1620: how long a web session lasts. Only the LOCAL surface (the dashboard reached directly — loopback, a LAN, a
      * tailnet) is configurable; a public-link session's limits stay fixed. Hours, 1 ≤ idle_hours ≤ absolute_hours ≤ 720;
-     * defaults 12 (absolute, from sign-in) and 2 (idle, since the last use). Shortening applies to existing sessions.
+     * defaults 48 (absolute, from sign-in) and 48 (idle, since the last use; #1670). Shortening applies to existing sessions.
      */
     session?: {
         local?: {
@@ -404,6 +410,60 @@ export interface WebConfig {
      * instead of it; web.preview: false turns previews off everywhere.
      */
     preview_on_public_link?: boolean;
+    /**
+     * #1629: agents' own web themes and effects. `agent_edit` (default true): false refuses every agent appearance write,
+     * fleet-wide; what is stored stays, and people can still reset and lock.
+     */
+    themes?: {
+        agent_edit?: boolean;
+    };
+    /**
+     * #1629 r4.1 Q3 (b): the identity card's upload limits and each agent's picture quota. Defaults: portrait
+     * 1024×1536 / 1536 KiB, banner 1600×600 / 768 KiB, quota 8 files / 4 MiB. A value outside its hard bound is clamped
+     * (and warned about); a change applies to new uploads only.
+     */
+    appearance?: import("./web-appearance-limits.js").AppearanceLimitsConfig;
+    /**
+     * #1920: guest web sign-in — a non-admin signed in as their own Discord or Telegram account, seeing only the instances
+     * they already use in chat (derived on every request). Default off.
+     */
+    guests?: WebGuestsConfig;
+    /**
+     * #1939: when a signed-in web session's messages carry authority (docs/design/1939-verified-web-sessions.md §3).
+     * S1 records it in receipts only; no agent acts on it yet.
+     */
+    verified_authority?: WebVerifiedAuthorityConfig;
+}
+/** #1939: fleet.yaml `web.verified_authority` (docs/design/1939-verified-web-sessions.md §0, §3, §10). */
+export interface WebVerifiedAuthorityConfig {
+    /**
+     * The server switch (§10): web messages carry authority only while it is on (default true, §0.1). Turning it off makes
+     * every web authority read as none at once; turning it back on never brings back authority given before.
+     */
+    enabled?: boolean;
+    /** "Only this computer can authorize": only loopback requests qualify (default false: LAN and tailnet too). */
+    loopback_only?: boolean;
+    /** A session's authorization lasts this many hours after it was given, 1–48 (default 48). */
+    max_session_hours?: number;
+}
+/** #1920: fleet.yaml `web.guests`. */
+export interface WebGuestsConfig {
+    /** Guest sign-in at all (default false). Turning it off ends every guest session. */
+    enabled?: boolean;
+    /** Guests may chat (default true); false: read-only. */
+    chat?: boolean;
+    /**
+     * An `open` connection's guests reach nothing until an admin names instances here, per connection id (the user's
+     * decision: least privilege, since an open group has no list of people).
+     */
+    open_instances?: Record<string, string[]>;
+    /** An admin's narrowing, per `<connection id>:<user id>`: intersected with the derived scope, never widening it. */
+    narrow?: Record<string, string[]>;
+    /** A guest session's limits: absolute 1–24 h (default 12), idle 15–720 min (default 120). */
+    session?: {
+        absolute_hours?: number;
+        idle_minutes?: number;
+    };
 }
 /** `login:` section — remote /login behaviour. */
 export interface LoginConfig {

package/dist/ui/app-effects.js

@@ -0,0 +1,233 @@
+/** #1629: one session-only app effect owner. Importing this module starts nothing. */
+import { appStore } from "/assets/app-store.js";
+import { motionBlocked, onMotionChange } from "/assets/fx-motion.js";
+import { navStore } from "/assets/app-nav.js";
+import { onPrefsChanged } from "/assets/app-prefs.js";
+import { resolvedMode, themesStore, themesShown } from "/assets/app-themes.js";
+import { ownerCssLifecycle, safeMode } from "/assets/owner-css.js";
+import { constrainedDevice } from "/assets/effect-policy.js";
+import { createAppEffectRuntime } from "/assets/effect-app-runtime.js";
+import { effectBootstrapReady } from "/assets/effect-frame.js";
+import { createEffectCursor } from "/assets/effect-cursor.js";
+import { createOwnerEffectRegions } from "/assets/effect-owner-regions.js";
+import { chatEffectIdentity, effectPlaybackIdentity } from "/assets/effect-chat-runtime.js";
+import { createEffectTrialController } from "./effect-trial-controller.js";
+import { effectTrialMessage } from "./effect-trial-offer.js";
+import { claimPanel, panelVersion, panelStore, openTrialPanel, closePanel } from "./preview-panel.js";
+const owners = new WeakMap();
+export function getAppEffects(host = window) { const value = owners.get(host); return value && !value.dead && value.api?.ok ? value : null; }
+
+/** Boot once with the page's Chat store, including when the first visible panel is Fleet. */
+export function startAppEffects({ store, window: host = window, factories = {} } = {}) {
+  const existing = owners.get(host);
+  if (existing) { if (!existing.dead) existing.bindStore(store); return getAppEffects(host); }
+  const playbackIdentity = effectPlaybackIdentity(host), ownerIdentity = chatEffectIdentity(host);
+  if (!playbackIdentity || typeof host.AgendAuth?.onSessionEnd !== "function" || typeof host.AgendAuth?.sessionEnded !== "function") return null;
+  const doc = host.document, releases = [], ended = new Set(), updates = new Set(), trialUpdates = new Set(); let replyOff = null, replyStore = null, regions = null, cursor = null, cursorStamp = null, trialControl = null, trialIntent = null, trialHint = ownerIdentity ? null : false, trialSerial = 0, trialStamp = null, chatBinding = null;
+  const safe = fn => { try { return fn(); } catch { return null; } };
+  const hold = off => { if (entry.dead) safe(() => off?.()); else releases.push(off); };
+  const entry = { dead: false, api: null,
+    cursorSnapshot: () => cursor?.snapshot() ?? { status: "unavailable", id: null },
+    gates: () => context(),
+    subscribe(fn) { if (typeof fn !== "function" || entry.dead) return () => {}; updates.add(fn); return () => updates.delete(fn); },
+    subscribeTrial(fn) { if (typeof fn !== "function" || entry.dead) return () => {}; trialUpdates.add(fn); return () => trialUpdates.delete(fn); },
+    onEnd(fn) { if (typeof fn !== "function") return () => {}; if (entry.dead) { safe(fn); return () => {}; } ended.add(fn); return () => ended.delete(fn); },
+    bindStore(value) {
+      if (entry.dead || value === replyStore) return;
+      safe(() => replyOff?.()); replyOff = null; replyStore = value;
+      trialControl?.stop(); chatBinding = null; entry.api?.detachChat();
+      if (typeof value?.onAgentReply === "function") {
+        const off = value.onAgentReply(event => { if (!entry.dead && replyStore === value) entry.api?.reply(event); });
+        if (entry.dead || replyStore !== value) safe(() => off?.()); else replyOff = off;
+      }
+    },
+    trialStatus(message) {
+      const offer = safe(() => effectTrialMessage(message)), nav = navStore.get();
+      const now = safe(() => host.Date.now());
+      if (!offer || !Number.isFinite(now) || now >= offer.expiresAt) return "expired";
+      if (trialHint === null && !entry.dead) return "checking";
+      if (entry.dead || !trialHint || trialControl?.ok !== true) return "localAdmin";
+      if (!chatBinding || safe(() => chatBinding.current()) !== true || message.instance !== nav.route?.instance || nav.route?.panel !== "chat") return "chatChanged";
+      const state = trialControl.snapshot();
+      if (state.phase !== "idle" || state.busy) return "busy";
+      return trialPlaybackStatus();
+    },
+    trialFailure(message) {
+      const offer = safe(() => effectTrialMessage(message)), state = trialControl?.snapshot();
+      return offer && state?.phase === "idle" && state.offer === offer.offer && !["stopped", "replaced"].includes(state.reason) ? state.reason : null;
+    },
+    canTry(message) { return entry.trialStatus(message) === "ready"; },
+    stopTrial() { trialControl?.stop(); },
+    startTrial(message) {
+      if (!entry.canTry(message)) return Promise.resolve(false);
+      const nav = navStore.get(); trialIntent = { name: message.instance, seq: nav.seq, claim: claimPanel(), handle: null, chat: chatBinding };
+      return trialControl.start(message);
+    },
+    attachChat(options) {
+      const nav = navStore.get(), name = options?.name;
+      if (entry.dead || !entry.api?.ok || nav.route?.panel !== "chat" || nav.route.instance !== name || typeof options.current !== "function") return null;
+      const binding = { current: () => !entry.dead && host.document === doc && navStore.get().seq === nav.seq && navStore.get().route?.panel === "chat" && navStore.get().route?.instance === name && options.current() === true };
+      chatBinding = binding; trialControl?.stop();
+      if (entry.dead || chatBinding !== binding) return null;
+      const handle = entry.api.attachChat({ ...options, current: () => chatBinding === binding && binding.current() });
+      if (entry.dead || chatBinding !== binding) { safe(() => handle?.dispose()); return null; }
+      if (!handle) chatBinding = null;
+      return handle;
+    },
+    dispose() {
+      if (entry.dead) return; entry.dead = true;
+      safe(() => trialControl?.dispose()); safe(() => entry.api?.dispose()); safe(() => replyOff?.()); replyOff = null; replyStore = null;
+      for (const off of releases.splice(0)) safe(off);
+      updates.clear(); trialUpdates.clear(); const listeners = [...ended]; ended.clear(); for (const fn of listeners) safe(fn);
+    },
+  };
+  owners.set(host, entry); // Reentrant setup never constructs another owner.
+  let media, coarse;
+  function ownerCssForPlayback() {
+    if (doc.body.dataset.tier !== "guest") return ownerCssLifecycle.get().state;
+    // Guests never install owner CSS. Prove its absence rather than borrowing the uninstalled
+    // lifecycle's initial unknown, and refuse unexpected styles instead of trusting a missing id.
+    try {
+      if (doc.body.dataset.ownerCss || doc.querySelectorAll("#owner-css").length) return "unknown";
+      // A CSP-refused or disabled STYLE has no paint. Recheck on every proof so enabling
+      // it never borrows an earlier absence verdict (WebKit capture inserts a refused no-op).
+      for (const style of doc.querySelectorAll("style")) if (style.sheet && style.sheet.disabled !== true) return "unknown";
+      const allowed = new Set(["/assets/tokens.css", "/assets/app.css"]);
+      for (const link of doc.querySelectorAll('link[rel~="stylesheet"]')) {
+        const url = new URL(link.getAttribute("href"), host.location.origin);
+        if (url.origin !== host.location.origin || !allowed.has(url.pathname) || url.search || url.hash) return "unknown";
+      }
+      return "off";
+    } catch { return "unknown"; }
+  }
+  function guestChatVersion(value) {
+    if (doc.body.dataset.tier !== "guest") return null;
+    const name = navStore.get().route?.instance, v = value.instances?.find(i => i.name === name)?.effect_chat_v;
+    return typeof v === "string" && /^[a-f0-9]{32}$/.test(v) ? v : null;
+  }
+  function context() {
+    return { safe: safeMode(), publicLink: doc.body.dataset.publicLink === "1", reducedMotion: motionBlocked(host), saveData: host.navigator?.connection?.saveData === true,
+      hidden: doc.visibilityState !== "visible", enabled: entry.api?.playbackAvailable !== false && typeof host.OffscreenCanvas === "function" && typeof host.Worker === "function" && typeof host.MutationObserver === "function" && typeof host.ResizeObserver === "function",
+      show: themesShown(), transportReady: effectBootstrapReady(host, host.location?.origin, doc.body.dataset.effectBoot),
+      constrained: constrainedDevice({ memory: host.navigator?.deviceMemory, cores: host.navigator?.hardwareConcurrency, coarse: coarse?.matches === true, width: host.innerWidth }),
+      modal: !!doc.querySelector("dialog[open],.menu-list,.pop,[role=alertdialog],.oc-keep,.shell.sb-open"), openInstance: null };
+  }
+  function trialCurrent(name) {
+    const intent = trialIntent, nav = navStore.get();
+    return !entry.dead && host.document === doc && !!intent && !!intent.chat && chatBinding === intent.chat && intent.chat.current() === true && intent.name === name && nav.seq === intent.seq && nav.route?.panel === "chat" && nav.route.instance === name
+      && (panelVersion() === intent.claim || intent.handle !== null && panelStore.get().open?.handle === intent.handle);
+  }
+  // One priority order feeds both presentation and redraw identity: false→different-false must redraw.
+  function trialPlaybackStatus() {
+    const c = context();
+    if (c.safe) return "safe";
+    if (!c.show) return "effectsOff";
+    if (c.reducedMotion) return "reducedMotion";
+    if (!c.enabled) return "unsupported";
+    if (!c.transportReady) return "transport";
+    if (c.publicLink) return "localAdmin";
+    if (c.hidden || doc.hasFocus?.() !== true) return "inactive";
+    if (c.modal) return "dialog";
+    return "ready";
+  }
+  function trialAllowed() {
+    const c = context();
+    return !entry.dead && doc.visibilityState === "visible" && doc.hasFocus?.() === true
+      && c.enabled && c.show && c.transportReady && !c.safe && !c.publicLink && !c.reducedMotion && !c.hidden && !c.modal;
+  }
+  function mountTrial(handle) {
+    const intent = trialIntent; if (!intent || !trialCurrent(handle.instance) || !handle.current() || !Number.isSafeInteger(++trialSerial)) throw Error("trial_unavailable");
+    intent.handle = handle;
+    const binding = Object.freeze({ key: `trial:${trialSerial}:${handle.reply.trial}`, id: handle.reply.offer.id, run: handle.reply.trial, instance: handle.instance, generation: trialSerial });
+    let stage = null, source = null;
+    const cleanup = () => {
+      safe(() => source?.stop()); safe(() => stage?.dispose());
+      if (panelStore.get().open?.handle === handle) closePanel();
+    };
+    try {
+      openTrialPanel({ key: binding.key, instance: handle.instance, binding, handle,
+        onStage(value) {
+          stage = value;
+          if (!handle.current()) { cleanup(); handle.stop(); return; }
+          source = entry.api.attachTrial({ reply: handle.reply, offer: handle.reply.offer.offer, startedAt: handle.startedAt, stage,
+            current: handle.current, onStop: handle.stop });
+          if (!source) { cleanup(); handle.stop(); }
+        },
+      });
+    } catch (error) { cleanup(); throw error; }
+    return cleanup;
+  }
+  function notifyTrial() {
+    if (entry.dead) return;
+    const nav = navStore.get(), next = JSON.stringify([trialHint, safe(() => chatBinding?.current()) === true, trialPlaybackStatus(), nav.route?.panel, nav.route?.instance, trialControl?.snapshot()]);
+    if (next === trialStamp) return; trialStamp = next;
+    for (const fn of [...trialUpdates]) safe(fn);
+  }
+  const notify = () => { if (!entry.dead) { trialControl?.sync(); notifyTrial(); for (const fn of [...updates]) safe(fn); } };
+  const cursorDragging = () => doc.body.classList?.contains("side-resizing") === true || !!doc.querySelector(".chat-split.resizing");
+  function syncCursor() {
+    if (entry.dead || !cursor) return;
+    const c = context();
+    cursor.update(entry.api?.cursorSelection?.() ?? null, c.enabled && c.show && c.transportReady && !c.safe && !c.publicLink && !c.reducedMotion && !c.hidden && !c.modal && !cursorDragging());
+  }
+  try {
+    if (appStore.get().connection === "ended") { entry.dispose(); return null; }
+    media = host.matchMedia?.("(prefers-reduced-motion: reduce)") ?? { matches: true };
+    coarse = host.matchMedia?.("(pointer: coarse)") ?? { matches: false };
+    entry.api = (factories.runtime ?? createAppEffectRuntime)({ window: host, current: () => !entry.dead && host.document === doc,
+      observe: () => ({ context: context(), ownerCss: ownerCssForPlayback(), mode: resolvedMode() }), onDispose: () => entry.dispose(),
+      resolveOwnerTarget: (slot, manifest, proof) => !entry.dead ? regions?.resolve?.(slot, manifest.box, proof) ?? null : null,
+      onChange: () => { syncCursor(); notify(); } });
+    if (entry.dead || !entry.api.ok) { entry.dispose(); return null; }
+    if (ownerIdentity) trialControl = (factories.trialController ?? createEffectTrialController)({ window: host, current: trialCurrent, allowed: trialAllowed, onStart: mountTrial, onChange: notify });
+    hold(() => trialControl?.dispose());
+    if (ownerIdentity && typeof host.AgendAuth.trialSession === "function") Promise.resolve().then(() => host.AgendAuth.trialSession()).then(value => {
+      if (entry.dead) return; trialHint = value?.localAdmin === true && value.epoch === chatEffectIdentity(host)?.epoch; notify();
+    }).catch(() => { if (!entry.dead) { trialHint = false; notify(); } });
+    hold(panelStore.subscribe(() => { trialControl?.sync(); notifyTrial(); }));
+    const ownRegions = ownerIdentity && (factories.regions ?? createOwnerEffectRegions)({ window: host, current: () => !entry.dead && host.document === doc });
+    regions = ownRegions?.ok ? ownRegions : null; hold(() => ownRegions?.dispose?.());
+    if (entry.dead) return null;
+    const ownCursor = ownerIdentity && safe(() => (factories.cursor ?? createEffectCursor)({ window: host, current: () => !entry.dead && host.document === doc,
+      readImage: (selection, signal) => entry.api?.cursorImageSettled?.(selection, signal) ?? Promise.resolve(null),
+      onChange(value) { const next = JSON.stringify(value); if (next !== cursorStamp) { cursorStamp = next; notify(); } },
+    }));
+    cursor = ownCursor?.ok ? ownCursor : null; hold(() => ownCursor?.dispose?.());
+    if (entry.dead) return null;
+    const sync = () => { if (!entry.dead) { trialControl?.sync(); entry.api.sync(); syncCursor(); notifyTrial(); } };
+    let revision = appStore.get().themesRev, prefsRevision = appStore.get().prefsRev, guestRevision = guestChatVersion(appStore.get()), navSeq = navStore.get().seq;
+    hold(navStore.subscribe(value => { if (entry.dead || value.seq === navSeq) return; navSeq = value.seq; trialControl?.stop(); chatBinding = null; entry.api.detachChat(); syncCursor(); }));
+    hold(appStore.subscribe(value => {
+      if (entry.dead) return;
+      if (value.connection === "ended") { entry.dispose(); return; }
+      const guestNext = guestChatVersion(value), chatChanged = value.themesRev !== revision || guestNext !== guestRevision, ownerChanged = value.prefsRev !== prefsRevision;
+      revision = value.themesRev; prefsRevision = value.prefsRev; guestRevision = guestNext;
+      if (chatChanged) entry.api.changedChat();
+      if (ownerChanged) entry.api.changedOwner();
+      if (!chatChanged && !ownerChanged) sync();
+    }));
+    hold(ownerCssLifecycle.subscribe(sync)); hold(themesStore.subscribe(sync)); hold(onPrefsChanged(sync)); hold(onMotionChange(sync));
+    if (typeof host.AgendTheme?.onChange === "function") hold(host.AgendTheme.onChange(sync));
+    for (const [target, type] of [[media, "change"], [coarse, "change"], [doc, "visibilitychange"], [host, "resize"], [host.navigator?.connection, "change"]]) {
+      if (target?.addEventListener) { target.addEventListener(type, sync); hold(() => target.removeEventListener(type, sync)); }
+    }
+    if (entry.dead) return null;
+    let modal = context().modal, dragging = cursorDragging(), queuedSurface = false;
+    // Panel commits can happen after navigation and contain no Chat lease. Reproject fixed owner targets
+    // once after stock DOM changes. Body-level effect roots/frames/rules do not schedule themselves.
+    const surfaceChanged = () => {
+      if (entry.dead || queuedSurface) return; queuedSurface = true;
+      Promise.resolve().then(() => { queuedSurface = false; sync(); });
+    };
+    const barriers = typeof host.MutationObserver === "function" ? new host.MutationObserver(records => {
+      if (entry.dead) return;
+      const value = context().modal, drag = cursorDragging(); if (value !== modal || drag !== dragging) { modal = value; dragging = drag; sync(); }
+      if (Array.isArray(records) && records.some(r => r.target?.closest?.("#app") || r.target === doc.getElementById?.("app"))) surfaceChanged();
+    }) : null;
+    hold(() => barriers?.disconnect());
+    if (entry.dead) return null;
+    barriers?.observe(doc.documentElement, { subtree: true, childList: true, attributes: true, attributeFilter: ["class", "open", "hidden", "role"] });
+    entry.bindStore(store); sync();
+    return getAppEffects(host);
+  } catch { entry.dispose(); return null; }
+}