@songsid/agend 2.3.0-beta.9 → 2.3.0

package/dist/ui/shared/app.js

@@ -8,8 +8,9 @@
 // #1665 first: the host's preferences go into this browser's cache before any module below reads its key.
 import { bootPrefs } from "./app-prefs.js";
 import { html, render } from "./app-html.js";
-import { Shell, handleKey, showDialog, closeDrawer, openDrawer, shellStore, retryable, setNewInstanceOpener } from "./app-shell.js";
+import { Shell, handleKey, handleSearchKey, showDialog, closeDrawer, openDrawer, shellStore, retryable, setNewInstanceOpener, isMacLike } from "./app-shell.js";
 import { installSwipe } from "./app-swipe.js";
+import { installTextUndo } from "./text-undo.js";
 import { startRouter, navStore, navigate } from "./app-nav.js";
 import { createStream } from "./app-stream.js";
 import { appStore, applyStatus, applyActivity, guestPage } from "./app-store.js";
@@ -93,6 +94,8 @@ if (mode === "full") {
     panels.set("log", { load: () => loadLog().then((m) => m.LogPanel) });
     // #1386 §6.3: desktop notifications for new "Needs you" items, in any panel, while this signed-in page is open.
     startNeedsNotifier({ open: (instance) => navigate(chatPath(instance)) });
+    // #2233: a backend sign-in running anywhere is shown on every admin page (the module lives behind the session gate).
+    import("/ui/js/backend-signin.js").then((m) => m.installSignIn(), () => {});
   }
   // #1665: this device's first upload of its own choices (once), then another device's changes at each status frame.
   // A guest's page only reads them (prefsWritable is false there).
@@ -121,6 +124,11 @@ if (!guest) installOwnerCss();
 }
 
 document.addEventListener("keydown", handleKey);
+// #2293: Ctrl+K / ⌘K (and Ctrl+F in a chat) — an admin's full app only; the server refuses a guest's search anyway.
+if (mode === "full" && !guest) document.addEventListener("keydown", handleSearchKey);
+// #2342: Ctrl/⌘+Z and Ctrl+Shift+Z / Ctrl+Y / ⌘⇧Z in every text field, one history per field (the browser's is one
+// for the whole page, and any script write wipes it).
+installTextUndo({ mac: isMacLike() });
 // #1605: on a phone (the sidebar is a drawer), swipe right in the main area to open it, left to close it — the same
 // open/close as ☰ and the scrim. Nothing that owns a sideways drag (code, tables, the terminal, inputs, dialogs) and
 // never the left edge (iOS: "back").

package/dist/ui/shared/card-strings.js

@@ -11,8 +11,10 @@ register("card", {
     sizeSName: "Small", sizeMName: "Medium", sizeLName: "Large",
     byHuman: "set by a person",
     byAgent: "set by the agent",
+    menu: "Identity card",
     show: "Show card",
     hide: "Hide card",
+    showRow: "Show picture and bio",
     bannerSafe: "Every screen",
     bannerPhone: "Phone · M card",
   },
@@ -24,8 +26,10 @@ register("card", {
     sizeSName: "小", sizeMName: "中", sizeLName: "大",
     byHuman: "由人設定",
     byAgent: "由 agent 設定",
+    menu: "身分卡",
     show: "顯示卡片",
     hide: "隱藏卡片",
+    showRow: "顯示小圖和介紹",
     bannerSafe: "所有螢幕",
     bannerPhone: "手機 · 中卡片",
   },

package/dist/ui/shared/effect-app-runtime.js

@@ -13,7 +13,7 @@ const episodes = new WeakSet();
 
 /** `current` belongs to the page/session episode. Route cleanup only releases its contribution. */
 export function createAppEffectRuntime({ window: host, current, observe, onChange = () => {}, onDispose = () => {}, resolveOwnerTarget = null, onOwnerUnavailable = () => {}, factories = {} }) {
-  let dead = false, error = null, loader = null, registry = null, writer = null, source = null, personal = null, trial = null, pending = null, lastMetadata = null, serial = 0, revision = 0, stamp = null, syncing = false, queued = false;
+  let dead = false, claimed = false, error = null, loader = null, registry = null, writer = null, source = null, personal = null, trial = null, pending = null, lastMetadata = null, serial = 0, revision = 0, stamp = null, syncing = false, queued = false;
   const bindings = new Map(), profiles = new Map();
   let lastContext = null, playbackUnavailable = null;
   const identity = effectPlaybackIdentity(host), auth = host?.AgendAuth;
@@ -26,7 +26,7 @@ export function createAppEffectRuntime({ window: host, current, observe, onChang
   };
   const placementIdentity = p => JSON.stringify([p.by, p.manifest.layer, p.params]);
   const clock = () => host.performance.now();
-  let offAuth = null;
+  let offAuth = null, disposed = null;
   const snapshot = s => {
     const effects = s?.metadata?.effects ?? [], known = registry?.snapshot?.() ?? [];
     const rows = effects.map(p => {
@@ -76,16 +76,18 @@ export function createAppEffectRuntime({ window: host, current, observe, onChang
     if (pending?.source === s) safe(() => pending.controller.abort());
     revision++; stamp = null;
   }
-  function dispose() {
-    if (dead) return; dead = true; discard(source);
+  function dispose(restartable = false) {
+    if (dead) return disposed; dead = true; discard(source);
     safe(() => trial?.dispose()); safe(() => pending?.controller.abort()); safe(() => registry?.dispose?.()); safe(() => loader?.dispose?.()); safe(() => personal?.dispose()); safe(() => writer?.dispose()); safe(() => offAuth?.());
     safe(() => host?.removeEventListener?.("pagehide", dispose));
     for (const row of profiles.values()) safe(() => row.collector.dispose()); profiles.clear(); bindings.clear(); safe(() => onDispose({ error }));
+    disposed = Promise.all([safe(() => loader?.whenDisposed?.()), safe(() => registry?.whenDisposed?.())]).then(() => { if (restartable === true && claimed) episodes.delete(host); });
+    return disposed;
   }
   function fail(reason) { if (dead) return; error = reason; dispose(); safe(() => onChange({ error, rows: [], effects: [], loading: false })); }
   const unavailable = { ok: false, sync() {}, changedChat() {}, reply() {}, detachChat() {}, attachChat() { return null; }, attachTrial() { return null; }, stopTrial() {}, trialSnapshot: () => ({ rows: [] }), snapshot: () => snapshot(null), dispose };
   if (!host || typeof host !== "object" || episodes.has(host) || !identity || typeof current !== "function" || typeof observe !== "function" || typeof auth?.onSessionEnd !== "function" || typeof auth?.sessionEnded !== "function") return unavailable;
-  episodes.add(host); // Claim before invoking current/auth callbacks: one attempt per Window episode.
+  episodes.add(host); claimed = true; // Claim before invoking current/auth callbacks: one attempt per Window episode.
   if (!alive()) { dispose(); return unavailable; }
   try {
     offAuth = auth.onSessionEnd(dispose);

package/dist/ui/shared/effect-chat-runtime.js

@@ -1,3 +1,4 @@
+import { chatEffectIdentity } from "./effect-display-metadata.js";
 /** #1629: one committed local Chat lease joins the reviewed host-only effect primitives. */
 import { createEffectRuntimeLoader } from "./effect-runtime-loader.js";
 import { createEffectRegistry } from "./effect-registry.js";
@@ -43,13 +44,7 @@ export function createEffectWriter(host, current) {
 }
 
 /** Frozen, server-rendered session identity only. A header-token/public/View load has no identity. */
-export function chatEffectIdentity(host) {
-  try {
-    const b = host.document.body.dataset, x = JSON.parse(host.document.documentElement.getAttribute("data-prefs") || "null");
-    if (b.mode !== "full" || b.tier === "guest" || b.publicLink === "1" || b.webTransport === "poll" || !["person", "operator"].includes(x?.ownerScope) || x.unreadable === true || typeof x.ownerEpoch !== "string" || !/^[a-f0-9]{16}$/.test(x.ownerEpoch)) return null;
-    return Object.freeze({ epoch: x.ownerEpoch, scope: x.ownerScope });
-  } catch { return null; }
-}
+export { chatEffectIdentity } from "./effect-display-metadata.js";
 /** Chat-only public/guest capability stays separate from personal preferences and management. */
 export function effectPlaybackIdentity(host) {
   try {

package/dist/ui/shared/effect-cursor.js

@@ -25,9 +25,10 @@ export function createEffectCursor({ window: host, current, readImage, onChange
   const unavailable = { ok: false, update() {}, snapshot: () => ({ status: "unavailable", id: null }), dispose() {} };
   if (!host?.document || owners.has(host) || ![current, readImage, onChange, host.getComputedStyle, host.Blob, host.URL?.createObjectURL, host.URL?.revokeObjectURL, host.AbortController, host.setTimeout, host.clearTimeout, host.performance?.now].every(x => typeof x === "function")) return unavailable;
   const token = {}; owners.set(host, token);
+  let finishDisposed; const disposed = new Promise(resolve => { finishDisposed = resolve; });
   const doc = host.document; let dead = false, previous = null, wanted = null, pending = null, active = null, blocked = null, generation = 0, checking = false, notifying = false, status = "off";
   const safe = fn => { try { return fn(); } catch { return null; } };
-  const release = () => { if (dead && !pending && owners.get(host) === token) owners.delete(host); };
+  const release = () => { if (dead && !pending) { if (owners.get(host) === token) owners.delete(host); finishDisposed(); } };
   function alive() {
     if (dead || checking) return false;
     checking = true; const value = safe(() => current() === true && host.document === doc); checking = false;
@@ -121,5 +122,5 @@ export function createEffectCursor({ window: host, current, readImage, onChange
     }
     start(); tell();
   }
-  return { ok: true, update, snapshot, dispose };
+  return { ok: true, update, snapshot, dispose, whenDisposed: () => disposed };
 }

package/dist/ui/shared/effect-display-metadata.js

@@ -0,0 +1,39 @@
+/** #1629: closed host display metadata. Neither this object nor its token grants a trial read. */
+const KEYS = ["v", "offer", "id", "title", "expiresAt"], ID = /^[0-9a-f]{32}$/;
+const FORBIDDEN = /(?!\u200d)[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u;
+const VISIBLE = /[^\p{M}\p{C}\p{Z}\u115f\u1160\u3164\uffa0\u2800]/u;
+let graphemes = null;
+export function checkEffectTrialOffer(value) {
+  try {
+    if (!value || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) return null;
+    const keys = Reflect.ownKeys(value);
+    if (keys.length !== KEYS.length || keys.some(k => typeof k !== "string" || !KEYS.includes(k))) return null;
+    const x = Object.create(null);
+    for (const key of KEYS) {
+      const d = Object.getOwnPropertyDescriptor(value, key);
+      if (!d || !("value" in d) || !d.enumerable) return null;
+      x[key] = d.value;
+    }
+    if (x.v !== 1 || typeof x.offer !== "string" || !ID.test(x.offer) || typeof x.id !== "string" || !ID.test(x.id)
+      || typeof x.title !== "string" || x.title.length > 400 || x.title.normalize("NFC") !== x.title || x.title.trim() !== x.title
+      || FORBIDDEN.test(x.title) || !VISIBLE.test(x.title) || !Number.isSafeInteger(x.expiresAt) || x.expiresAt < 0) return null;
+    graphemes ??= new Intl.Segmenter(undefined, { granularity: "grapheme" });
+    let count = 0; for (const _part of graphemes.segment(x.title)) if (++count > 40) return null;
+    if (count < 1) return null;
+    return Object.freeze({ v: 1, offer: x.offer, id: x.id, title: x.title, expiresAt: x.expiresAt });
+  } catch { return null; }
+}
+/** Role and sender are host fields, never inferred from a message's text. Start must separately authorize. */
+export function effectTrialMessage(message) {
+  if (!message || message.role !== "status" || message.sender !== "agend" || typeof message.instance !== "string"
+    || message.instance.length < 1 || message.instance.length > 128) return null;
+  return checkEffectTrialOffer(message.effectTrial);
+}
+
+export function chatEffectIdentity(host) {
+  try {
+    const b = host.document.body.dataset, x = JSON.parse(host.document.documentElement.getAttribute("data-prefs") || "null");
+    if (b.mode !== "full" || b.tier === "guest" || b.publicLink === "1" || b.webTransport === "poll" || !["person", "operator"].includes(x?.ownerScope) || x.unreadable === true || typeof x.ownerEpoch !== "string" || !/^[a-f0-9]{16}$/.test(x.ownerEpoch)) return null;
+    return Object.freeze({ epoch: x.ownerEpoch, scope: x.ownerScope });
+  } catch { return null; }
+}

package/dist/ui/shared/effect-owner-source.js

@@ -74,7 +74,14 @@ export function createOwnerEffectSource({ current, readMetadata, readResource, r
     },
     descriptors() {
       if (!alive() || !metadata || error) return [];
-      const body = metadata, gen = generation, proof = safe(() => effectStockSnapshot(stock()));
+      const body = metadata, gen = generation;
+      // #2188: the stock snapshot walks the whole page (thousands of computed styles). With no slot holding an effect
+      // that could play, there is nothing for it to admit: skipped — every page change (a status, a chat switch) ran it.
+      if (!SLOTS.some(slot => body.slots[slot]?.status === "available" && failed.get(slot) !== body.slots[slot].id)) {
+        for (const slot of SLOTS) drop(slot);
+        return [];
+      }
+      const proof = safe(() => effectStockSnapshot(stock()));
       if (!fresh(body, gen)) return [];
       if (!proof) { clear(); return []; }
       const result = [];

package/dist/ui/shared/effect-registry.js

@@ -42,6 +42,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
   try { if (!host?.document || !host.document.body || registries.has(host) || typeof load !== "function" || typeof stockSnapshot !== "function" || typeof onChange !== "function" || typeof onProfile !== "function" || typeof onMount !== "function" || typeof onRetire !== "function" || typeof clock !== "function" || !safety || ["allowed", "begin", "finish", "pause", "resume"].some(k => typeof safety[k] !== "function") || ["requestAnimationFrame", "cancelAnimationFrame", "setTimeout", "clearTimeout", "MutationObserver", "ResizeObserver", "AbortController"].some(k => typeof host[k] !== "function")) return { ok: false, reason: "registry_unsupported" }; } catch { return { ok: false, reason: "registry_unsupported" }; }
   let dead = false, blocked = null, revision = 0, last = null, lastView = null, frameSerial = 0, context = null, descriptors = [], raf = null, timer = null;
   const slots = new Map(), loads = new Set(), paused = new Map(), offs = [], observed = new Set(), failures = new Map(), results = new Map();
+  let finishDisposed; const disposed = new Promise(resolve => { finishDisposed = resolve; });
   let readingStock = false, stockFailure = "stock_evidence_invalid", warned = null;
   let root, geometry, observer, resize, longTasks = null, longTasksSupported = false;
   const time = () => {
@@ -189,6 +190,12 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     const proposal = revision;
     if (time() === null) blocked = "clock_unavailable";
     const hidden = context?.hidden === true || host.document.visibilityState !== "visible";
+    // #2188: nothing to place, nothing to prove — the stock walk (thousands of computed styles) is not run for an empty
+    // list; a frame still held is retired as superseded, exactly as an allocation of nothing would.
+    if (!blocked && descriptors.length === 0) {
+      for (const s of [...slots.values()]) { retire(s, "superseded"); if (dead || proposal !== revision) return; }
+      results.clear(); tell(); return;
+    }
     const stock = eligible() ? coverage() : null;
     if (dead || proposal !== revision) return;
     if (blocked || !eligible() || !stock) {
@@ -336,7 +343,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       }).catch(() => { if (current(s)) retire(s, "resource_unavailable"); }).finally(() => {
         if (request.timer !== null) host.clearTimeout(request.timer);
         loads.delete(request); if (s.request === request) s.request = null;
-        if (!dead) reconcile(); else if (loads.size === 0 && registries.get(host) === api) registries.delete(host);
+        if (!dead) reconcile(); else if (loads.size === 0) { if (registries.get(host) === api) registries.delete(host); finishDisposed(); }
       });
     }
     schedule(); tell();
@@ -440,7 +447,8 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     } catch { return false; }
   }
   function pointer(event) {
-    if (dead || blocked || !pointerGate() || event.isTrusted !== true) return;
+    // #2188: no frame to forward to — no gate to read (each read walks the page's computed styles, per pointer event).
+    if (dead || blocked || slots.size === 0 || !pointerGate() || event.isTrusted !== true) return;
     const kinds = { pointermove: "move", pointerdown: "down", pointerup: "up", click: "click", wheel: "wheel" }, kind = kinds[event.type];
     if (!kind || !finite(event.clientX) || !finite(event.clientY) || Math.abs(event.clientX) > 1e7 || Math.abs(event.clientY) > 1e7 || !Number.isInteger(event.buttons) || event.buttons < 0 || event.buttons > 31) return;
     try { const target = host.document.elementFromPoint(event.clientX, event.clientY); if (!target || typeof target.closest !== "function" || target.closest("[data-trust]")) return; } catch { return; }
@@ -511,7 +519,8 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     },
     /** Host-only content-free signal API. Raw pointer publishing is refused; native pointer metadata is coalesced here. */
     publish(type, fields, instance = null) {
-      if (dead || blocked || !globalAllowed() || context.hidden || !coverage() || !TYPES.includes(type)) return 0;
+      // #2188: no frame to send to — nothing to prove (the stock walk ran twice on every page change).
+      if (dead || blocked || slots.size === 0 || !globalAllowed() || context.hidden || !coverage() || !TYPES.includes(type)) return 0;
       const ts = time(); if (ts === null) { blocked = "clock_unavailable"; stopAll(blocked); tell(); return 0; }
       let sent = 0; const proposal = revision;
       for (const s of [...slots.values()]) {
@@ -522,11 +531,12 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       }
       return sent;
     },
+    whenDisposed: () => disposed,
     dispose() {
       if (dead) return; dead = true; revision++; stopAll("disposed");
       if (raf !== null) host.cancelAnimationFrame(raf); if (timer !== null) host.clearTimeout(timer);
       observer.disconnect(); resize.disconnect(); longTasks?.disconnect(); for (const off of offs) off();
-      geometry.dispose(); root.remove(); observed.clear(); if (loads.size === 0 && registries.get(host) === api) registries.delete(host);
+      geometry.dispose(); root.remove(); observed.clear(); if (loads.size === 0) { if (registries.get(host) === api) registries.delete(host); finishDisposed(); }
     },
   };
   // Read-only host geometry seam; no selector guessing among poster and live roots.

package/dist/ui/shared/effect-runtime-loader.js

@@ -143,7 +143,8 @@ export function createEffectRuntimeLoader({ window: host, ownerEpoch, current, o
   if (!host || typeof host !== "object" || loaders.has(host) || typeof host.fetch !== "function" || typeof host.AbortController !== "function" || typeof host.setTimeout !== "function" || typeof host.clearTimeout !== "function" || typeof ownerEpoch !== "string" || !EPOCH.test(ownerEpoch) || typeof current !== "function" || typeof onRevoke !== "function") return { ok: false };
   const reservation = {}; loaders.set(host, reservation);
   let dead = false, revoked = false, previous = null; const pending = new Set();
-  const releaseWindow = () => { if (dead && pending.size === 0 && loaders.get(host) === reservation) loaders.delete(host); };
+  let finishDisposed; const disposed = new Promise(resolve => { finishDisposed = resolve; });
+  const releaseWindow = () => { if (dead && pending.size === 0) { if (loaders.get(host) === reservation) loaders.delete(host); finishDisposed(); } };
   // Terminal state is latched before callbacks. Abort releases logical callers, never physical reservations.
   function revoke(reason) {
     if (dead || revoked) return;
@@ -215,6 +216,7 @@ export function createEffectRuntimeLoader({ window: host, ownerEpoch, current, o
   }
   const ownerRead = (signal, settled = false) => run("placements", `/ui/effects/owner?ownerEpoch=${ownerEpoch}`, checkEffectOwnerSlots, signal, settled);
   return { ok: true,
+    whenDisposed: () => disposed,
     owner(signal) { return ownerRead(signal); },
     placements(instance, signal) { return placementRead(instance, signal); },
     resource(input, signal) { return resourceRead(input, signal); },

package/dist/ui/shared/effect-stock-trust.js

@@ -11,10 +11,10 @@ const SPECS = [
   ["confirmation", ".shell > .pending-stack, .shell .p-settings > .panel-body > .col > .pending-stack.inline"], ["preview", ".shell .chat-split > .pv-panel, .shell .chat-split > .pv-divider"],
   ["preview-menu", ".shell .thread details.pv-menu"], ["palette", ".shell .dock .cmd-palette"],
   ["drop", ".shell .p-chat > .drop-overlay"],
-  ["thread-control", ".shell .chat-main > .amb-note, .shell .p-chat .jump-latest, .shell .thread .msg-tools, .shell .thread .st-more, .shell .thread .cb-head, .shell .thread .cb-more, .shell .thread .tc-head, .shell .thread .tc-more, .shell .thread .pv-head, .shell .thread .pv-note, .shell .thread .pv-banner, .shell .thread .effect-trial-offer, .shell .thread .click-chip"],
+  ["thread-control", ".shell .chat-main > .amb-note, .shell .p-chat .jump-latest, .shell .thread .msg-tools, .shell .thread .msg > div.msg-actions, .shell .thread .msg > button.msg-quote, .shell .thread .st-more, .shell .thread .cb-head, .shell .thread .cb-more, .shell .thread .tc-head, .shell .thread .tc-more, .shell .thread .pv-head, .shell .thread .pv-note, .shell .thread .pv-banner, .shell .thread .effect-trial-offer, .shell .thread .click-chip"],
   ["link", ".shell .thread .md a, .shell .thread .st-text > a.st-link, .shell .dock .prompts .txt > a.st-link"], ["attachment", ".shell .thread .atts"], ["media", ".shell .thread .att-media"],
   ["panel-navigation", ".shell .p-fleet > .seg, .shell .p-settings > .seg"],
-  ["panel-content", ".shell .p-fleet > .panel-body, .shell .p-needs > .panel-body, .shell .p-settings > .panel-body, .shell .p-log > .panel-body, .shell .p-details > .panel-body, .shell .p-view > .panel-body, .shell .p-view > .v-term, .shell .p-view > .v-id, .shell .p-view > .v-card"],
+  ["panel-content", ".shell .p-fleet > .panel-body, .shell .p-needs > .panel-body, .shell .p-settings > .panel-body, .shell .p-log > .panel-body, .shell .p-details > .panel-body, .shell .p-view > .panel-body, .shell .p-view > .v-term, .shell .p-view > .v-id"],
   ["panel-controls", ".shell .p-log > .log-bar, .shell .p-settings > .s-pending"],
   ["session-ended", "body > .agend-session-ended[role=alert]"],
 ];
@@ -28,7 +28,7 @@ const PANELS = Object.freeze({
   settings: { required: [".panel-head", ".seg", ".panel-body"], optional: [".s-pending"] },
   log: { required: [".panel-head", ".panel-body"], optional: [".log-bar"] },
   details: { required: [".panel-head", ".panel-body"], optional: [] },
-  view: { required: [".panel-head"], optional: [".panel-body", ".v-term", ".v-id", ".v-card"] },
+  view: { required: [".panel-head"], optional: [".panel-body", ".v-term", ".v-id"] },
 });
 function panelSurface(doc, chat) {
   if (chat) return { panel: chat, structural: STRUCTURAL, content: CONTENT, kind: "chat" };
@@ -37,8 +37,8 @@ function panelSurface(doc, chat) {
   const children = [...panel.children], count = selector => children.filter(el => el.matches(selector)).length;
   if (spec.required.some(selector => count(selector) !== 1) || spec.optional.some(selector => count(selector) > 1)
     || children.some(el => !el.matches([...spec.required, ...spec.optional, "dialog.dlg", "dialog.lb"].join(",")))) return null;
-  if (kind === "view" && !(count(".panel-body") === 1 && !count(".v-term") && !count(".v-id") && !count(".v-card")
-    || !count(".panel-body") && count(".v-term") === 1 && count(".v-card") === 1)) return null;
+  if (kind === "view" && !(count(".panel-body") === 1 && !count(".v-term") && !count(".v-id")
+    || !count(".panel-body") && count(".v-term") === 1 && count(".v-id") === 1)) return null;
   const prefix = `.p-${kind} > `;
   return { panel, kind, structural: [...STRUCTURAL.slice(0, 5), `.main > .p-${kind}`],
     content: [...CONTENT.filter(selector => !selector.startsWith(".p-chat") && !selector.startsWith(".chat-main")),

package/dist/ui/shared/feature-flags.js

@@ -0,0 +1,127 @@
+// Product feature policy only: this module imports no experimental runtime.
+import { appStore } from "./app-store.js";
+import { navStore } from "./app-nav.js";
+import { ownerEffectsChosen, onOwnerEffectsChanged } from "./app-prefs.js";
+import { register } from "./app-i18n.js";
+import { html, useEffect, useState } from "./app-html.js";
+register("cwControls", { en: { title: "Effects" }, "zh-TW": { title: "效果" } });
+export function canvasWorkerEnabled() { return appStore.get().canvasWorker === true; }
+export function onCanvasWorkerChange(fn) {
+  let value = canvasWorkerEnabled();
+  return appStore.subscribe(() => { const next = canvasWorkerEnabled(); if (next !== value) { value = next; fn(next); } });
+}
+export function useCanvasWorker() {
+  const [value, setValue] = useState(canvasWorkerEnabled);
+  useEffect(() => { setValue(canvasWorkerEnabled()); return onCanvasWorkerChange(setValue); }, []);
+  return value;
+}
+// Never evaluate the optional module before admission. An obsolete import may finish, but cannot mount.
+export function experimentalComponent(load, select) {
+  return function ExperimentalComponent(props) {
+    const enabled = useCanvasWorker(), [component, setComponent] = useState(null);
+    useEffect(() => {
+      let current = true;
+      if (enabled) load().then(module => { if (current && canvasWorkerEnabled()) setComponent(() => select(module)); }, () => {});
+      return () => { current = false; };
+    }, [enabled]);
+    return enabled && component ? html`<${component} ...${props} />` : null;
+  };
+}
+
+/** effect_chat_v of a chat with no placements: sha256(JSON.stringify([])), first 32 hex (fleet-manager's status row). */
+export const EMPTY_CHAT_EFFECTS = "4f53cda18c2baa0c0354bb5f9a3ecbe5";
+
+let mod = null, waking = null, chatStore = null, started = false, generation = 0, awakeGeneration = -1, retiring = Promise.resolve();
+const awakeListeners = new Set();
+
+/** Whether `name`'s chat has Canvas Worker placements (as the status rows say). */
+export function chatHasEffects(name, app = appStore.get()) {
+  const v = name ? app.instances?.find(i => i.name === name)?.effect_chat_v : undefined;
+  return canvasWorkerEnabled() && typeof v === "string" && /^[a-f0-9]{32}$/.test(v) && v !== EMPTY_CHAT_EFFECTS;
+}
+
+/** The running effects owner, or null while dormant (or when it could not start: as getAppEffects always was). */
+export function getAppEffects(host) { return canvasWorkerEnabled() && mod ? mod.getAppEffects(host) : null; }
+
+/** Whether the runtime has been asked to start on this page. */
+export function effectsAwake() { return waking !== null; }
+/** Whether its module has loaded (started, or found it could not: getAppEffects() then says which). */
+export function effectsLoaded() { return mod !== null && awakeGeneration === generation; }
+
+/** Follow every completed runtime episode, including a replacement after an experimental off/on. */
+export function onEffectsAwake(fn) {
+  if (typeof fn !== "function") return () => {};
+  awakeListeners.add(fn);
+  if (effectsLoaded()) { try { fn(); } catch { /* a listener's error is its own */ } }
+  return () => awakeListeners.delete(fn);
+}
+
+/** Load lazily; each explicitly enabled episode owns its startup and cancellation. */
+export function wakeEffects() {
+  if (!canvasWorkerEnabled()) return Promise.resolve(null);
+  if (waking) return waking;
+  const episode = generation;
+  waking = (mod ? Promise.resolve(mod) : import("/ui/js/app-effects.js")).then(async m => {
+    mod = m;
+    await retiring;
+    if (episode !== generation || !canvasWorkerEnabled()) return null;
+    const owner = chatStore ? m.startAppEffects({ store: chatStore }) : null;
+    awakeGeneration = episode;
+    for (const fn of [...awakeListeners]) { try { fn(); } catch { /* the rest still hear */ } }
+    return owner;
+  }, () => null);
+  return waking;
+}
+
+/** Wake when the open chat has placements or the person has a personal effect. */
+function check() {
+  if (!canvasWorkerEnabled()) {
+    generation++;
+    const owner = mod?.getAppEffects();
+    if (owner) retiring = Promise.resolve(owner.dispose?.(true));
+    waking = null;
+    return;
+  }
+  if (waking) return;
+  const route = navStore.get().route;
+  if ((route?.panel === "chat" && chatHasEffects(route.instance)) || ownerEffectsChosen()) void wakeEffects();
+}
+
+/** Boot (once per page, with the Chat store the runtime binds to). Starts nothing but the watch. */
+export function startEffectsWaker({ store }) {
+  chatStore = store;
+  if (started) return;
+  started = true;
+  appStore.subscribe(check); navStore.subscribe(check); onOwnerEffectsChanged(check);
+  check();
+}
+
+// Full Canvas Worker metadata stays in the experimental graph, never in ordinary chat boot.
+let metadata = null, metadataPending = null;
+const metadataListeners = new Set();
+export function onCanvasMetadataChange(fn) { metadataListeners.add(fn); return () => metadataListeners.delete(fn); }
+export function loadCanvasWorkerMetadata() {
+  if (!canvasWorkerEnabled()) return Promise.resolve(null);
+  if (metadata) return Promise.resolve(metadata);
+  if (metadataPending?.episode === generation) return metadataPending.promise;
+  const episode = generation, op = { episode, promise: null };
+  metadataPending = op;
+  op.promise = import("./effect-display-metadata.js").then(value => {
+    if (episode !== generation || !canvasWorkerEnabled()) return null;
+    metadata = value;
+    for (const fn of [...metadataListeners]) { try { fn(); } catch { /* independent viewers */ } }
+    appStore.set({ canvasMetadataEpoch: episode });
+    return metadata;
+  }, () => null).finally(() => { if (metadataPending === op) metadataPending = null; });
+  return op.promise;
+}
+export function readCanvasTrialMessage(message) {
+  if (!canvasWorkerEnabled()) return null;
+  if (!metadata) { void loadCanvasWorkerMetadata(); return undefined; }
+  return metadata.effectTrialMessage(message);
+}
+export function canvasWorkerMenuAvailable(host) {
+  if (!canvasWorkerEnabled()) return false;
+  if (!metadata) { void loadCanvasWorkerMetadata(); return false; }
+  return metadata.chatEffectIdentity(host) !== null;
+}

package/dist/ui/shared/guest-refused.js

@@ -0,0 +1,35 @@
+// What a guest's browser is shown for a page it cannot open. Loaded from /assets/guest-refused.js.
+//
+// The gate answers a guest's navigation with this page instead of its JSON (#2399 smoke): "members" for a page that is
+// not a guest's (Fleet, Settings…), "ended" when no chat is shared with the guest any more. The page's words are in
+// the browser's language, as the sign-in page's are; the HTML carries the English for a browser without scripts.
+(() => {
+  "use strict";
+  const T = {
+    en: {
+      members_title: "This page is not open to guests",
+      members_lead: "This page is for the fleet's members. As a guest you can use the chats shared with you.",
+      members_go: "Open your chats",
+      ended_title: "No chats are shared with you",
+      ended_lead: "Your guest access on this fleet has no chat now — you may have left the room it came from. Ask whoever invited you to share a chat with you again.",
+    },
+    "zh-TW": {
+      members_title: "訪客無法開啟這個頁面",
+      members_lead: "這個頁面只給 fleet 的成員使用。身為訪客，你可以使用分享給你的聊天。",
+      members_go: "打開你的聊天",
+      ended_title: "目前沒有分享給你的聊天",
+      ended_lead: "你在這個 fleet 的訪客權限目前沒有任何聊天——你可能已經離開當初的頻道。請聯絡邀請你的人，再分享聊天給你。",
+    },
+  };
+  const lang = /^zh/i.test(navigator.language || "") ? "zh-TW" : "en";
+  const t = (k) => T[lang][k] || T.en[k] || k;
+  document.documentElement.lang = lang === "zh-TW" ? "zh-Hant" : "en";
+  const main = document.getElementById("refused");
+  const why = main && main.dataset.why === "ended" ? "ended" : "members";
+  document.getElementById("title").textContent = t(`${why}_title`);
+  document.getElementById("lead").textContent = t(`${why}_lead`);
+  // Nothing to open when no chat is shared (the chats would answer this page again): no button then.
+  const go = document.getElementById("go");
+  if (go) { if (why === "ended") go.remove(); else go.textContent = t("members_go"); }
+  document.title = `AgEnD — ${t(`${why}_title`)}`;
+})();

package/dist/ui/shared/header-tools.js

@@ -9,7 +9,7 @@ import { html, useEffect, useState } from "./app-html.js";
 import { t } from "./app-i18n.js";
 import { createStore, useStore } from "./app-store.js";
 import { Icon } from "./ui-icons.js";
-import { UsageBody, UsageDialog } from "./usage-dialog.js";
+import { UsageBody, UsageCompactToggle, UsageDialog } from "./usage-dialog.js";
 
 export const TEXT_SIZE_KEY = "agend_text_size";
 export const VIEW_FIT_KEY = "agend_view_fit";
@@ -126,7 +126,7 @@ export function UsageRail({ route }) {
   const { open } = useStore(usageRailStore);
   if (!wide || !open || !route || !RAIL_PANELS.includes(route.panel) || !usageOffered()) return null;
   return html`<aside data-trust="usage" class="u-rail" aria-label=${t("view.usage.title_plain")}>
-    <div class="u-rail-head"><h2>${t("view.usage.title")}</h2>
+    <div class="u-rail-head"><h2>${t("view.usage.title")}</h2><${UsageCompactToggle} />
       <button type="button" class="icon-btn" onClick=${() => setUsageRail(false)} aria-label=${t("app.usageHide")} title=${t("app.usageHide")}><${Icon} name="close" size=${16} /></button></div>
     <div class="u-rail-body"><${UsageBody} owner="usage-rail" /></div>
   </aside>`;

package/dist/ui/shared/identity-card.js

@@ -160,35 +160,53 @@ function SizeControl({ name, size }) {
   </div>`;
 }
 
+/**
+ * #2217 hotfix (Prism): pictures that failed to load on this page, by src — shared, so the chat's card menu judges a card
+ * as drawn (a broken banner is not drawn, and then the card cannot fold), not by its metadata alone.
+ */
+export const brokenPictures = createStore({});
+const markBroken = (src) => { if (src && !brokenPictures.get()[src]) brokenPictures.set((s) => ({ ...s, [src]: true })); };
+const drawn = (card, slot) => !!(card && card[slot] && !brokenPictures.get()[card[slot].src]);
+/**
+ * #2217: whether a card can fold its row away and keep the banner — a banner drawn, and something on its row (a picture
+ * drawn, a tagline or a bio). The chat's card menu enables Show picture and bio only then.
+ */
+export const cardFoldable = (card) => !!(card && drawn(card, "banner") && (drawn(card, "portrait") || card.tagline || card.bio));
+
 /**
  * The card. `compact`: the chat header's own small size (no size control; the banner still follows the size choice,
  * #2038). Nothing when the card is empty. The
  * tagline and bio say whose they are (title), since a person's field wins over the agent's.
+ * #2217: `rowHidden` — the chat's picture and bio folded away, the banner kept. The user (2026-10-20): no control on the
+ * card at all — the chat header's two buttons show / hide the card and fold / unfold its row. Only a card with a banner
+ * and something on its row folds (cardFoldable; else it would be the card hidden).
  */
-export function IdentityCard({ name, card, compact = false, sizeControl = !compact }) {
+export function IdentityCard({ name, card, compact = false, sizeControl = !compact, rowHidden = false }) {
   useStore(cardSizeStore);
-  const [broken, setBroken] = useState({});
+  const broken = useStore(brokenPictures);
   if (!card) return null;
   const size = compact ? "c" : cardSizeFor(name);
   // #2038: the chat header's card is its own small size, but its banner follows the person's size choice too.
   const bannerSize = compact ? ` bs-${cardSizeFor(name)}` : "";
   const whose = (f) => t(f.by === "human" ? "card.byHuman" : "card.byAgent");
-  const pic = (slot, cls, alt) => card[slot] && broken[slot] !== card[slot].src
-    ? html`<img class=${cls} src=${card[slot].src} alt=${alt} title=${whose(card[slot])} decoding="async" onError=${() => setBroken({ ...broken, [slot]: card[slot].src })} />` : null;
+  const pic = (slot, cls, alt) => card[slot] && !broken[card[slot].src]
+    ? html`<img class=${cls} src=${card[slot].src} alt=${alt} title=${whose(card[slot])} decoding="async" onError=${() => markBroken(card[slot].src)} />` : null;
   // #2086: the banner at its focus; on a screen wider than BANNER_MAX_ASPECT it is centred over a blurred copy of itself.
   const focus = card.banner_focus ? card.banner_focus.value : 50;
   const atFocus = (el) => { if (el && el.style) el.style.setProperty("--id-focus", `${focus}%`); };
   const banner = pic("banner", "id-banner", "");
-  return html`<section class=${`id-card card-${size}${bannerSize}`} aria-label=${t("card.label", name)}>
+  const portrait = pic("portrait", "id-portrait", t("card.portraitAlt", name));
+  const rowShown = !(rowHidden && banner && cardFoldable(card));
+  return html`<section class=${`id-card card-${size}${bannerSize}${rowShown ? "" : " row-hidden"}`} aria-label=${t("card.label", name)}>
     ${banner ? html`<div class="id-banner-box" ref=${atFocus}><img class="id-banner-fill" src=${card.banner.src} alt="" aria-hidden="true" decoding="async" />${banner}</div>` : null}
-    <div class="id-row">
-      ${pic("portrait", "id-portrait", t("card.portraitAlt", name))}
+    ${rowShown ? html`<div class="id-row">
+      ${portrait}
       <div class="id-text">
         ${card.tagline ? html`<p class="id-tagline" title=${whose(card.tagline)}>${card.tagline.text}</p>` : null}
         ${card.bio ? html`<p class="id-bio" title=${whose(card.bio)}>${card.bio.text}</p>` : null}
       </div>
       ${sizeControl ? html`<${SizeControl} name=${name} size=${size} />` : null}
-    </div>
+    </div>` : null}
   </section>`;
 }