@songsid/agend 2.3.1 → 2.3.2-beta.10

package/dist/turn-reply-guard.js

@@ -1,3 +1,34 @@
+/**
+ * #2544: only a person waiting on a channel answer arms the reply-completion
+ * guard. Schedules (silent or not), cross-instance traffic, and AgEnD system
+ * notices must not expect a reply to a person.
+ */
+export function turnExpectsPersonReply(meta) {
+    if (meta.from_instance)
+        return false;
+    const source = meta.source ?? "";
+    if (source === "agend-system" || source === "schedule")
+        return false;
+    if (meta.user === "scheduler")
+        return false;
+    if (!meta.chat_id && source !== "web")
+        return false;
+    return true;
+}
+/** Short, stable diagnostic summary for daemon.log and the web Log; never channel text. */
+export function formatReplyDropDetection(turn, reason) {
+    const bits = [reason, turn.replyDelivered ? "reply-delivered" : "no-adapter-confirmed-reply"];
+    if (turn.replyAttempted)
+        bits.push("reply-attempted");
+    if (turn.completionDelivered)
+        bits.push("completion-delivered");
+    if (turn.target.chatId)
+        bits.push(`chat=${turn.target.chatId}`);
+    if (turn.target.threadId)
+        bits.push(`thread=${turn.target.threadId}`);
+    return bits.join(", ");
+}
+const PRE_ARM_GENERATION = 0;
 /**
  * Generation-scoped evidence for one human-facing turn (or a batch of messages
  * delivered into the same busy interval).  A tool invocation is only an
@@ -15,6 +46,12 @@ export class TurnReplyGuard {
      * that delivery's ingress — anything older belongs to an earlier turn.
      */
     pendingActivityAt = 0;
+    /**
+     * #2544: a completion tool can begin/settle before paste proof arms the
+     * guard (codex: reply at 22:22:25, task_complete + idle confirm later).
+     * Bounded by the next arm's ingress, same as pendingActivityAt.
+     */
+    pendingTool = null;
     /**
      * Fired exactly when a turn actually completes (stale generations are
      * fenced out, like the boolean result). #1209 registers a marker-clear
@@ -26,17 +63,19 @@ export class TurnReplyGuard {
         if (!this.active || this.active.cancelledByUser) {
             const carried = this.pendingActivityAt >= ingressAt ? this.pendingActivityAt : 0;
             this.pendingActivityAt = 0;
+            const pending = this.pendingTool && this.pendingTool.at >= ingressAt ? this.pendingTool : null;
+            this.pendingTool = null;
             this.active = {
                 generation: ++this.generation,
                 phase: "awaiting",
                 cancelledByUser: false,
                 target,
                 latestObligation: 1,
-                replyAttemptedAt: 0,
-                replyAttemptFailedAt: 0,
-                replyDeliveredAt: 0,
-                completionDeliveredAt: 0,
-                outboundDeliveredAt: 0,
+                replyAttemptedAt: pending?.replyAttempted ? 1 : 0,
+                replyAttemptFailedAt: pending?.replyAttemptFailed ? 1 : 0,
+                replyDeliveredAt: pending?.replyDelivered ? 1 : 0,
+                completionDeliveredAt: pending?.completionDelivered ? 1 : 0,
+                outboundDeliveredAt: pending?.outboundDelivered ? 1 : 0,
                 busyObservedAt: carried,
             };
             return this.active.generation;
@@ -45,6 +84,7 @@ export class TurnReplyGuard {
             this.active.busyObservedAt = Math.max(this.active.busyObservedAt, this.pendingActivityAt);
         }
         this.pendingActivityAt = 0;
+        this.pendingTool = null;
         this.active.latestObligation++;
         this.active.target = target;
         return this.active.generation;
@@ -76,8 +116,16 @@ export class TurnReplyGuard {
     }
     beginToolAttempt(reply, completionAction = reply) {
         const active = this.active;
-        if (!active)
-            return null;
+        if (!active) {
+            // #2544: Codex can call reply before paste proof arms this generation.
+            this.stashPendingBegin(reply);
+            return {
+                generation: PRE_ARM_GENERATION,
+                obligation: 0,
+                reply,
+                completionAction,
+            };
+        }
         if (reply)
             active.replyAttemptedAt = Math.max(active.replyAttemptedAt, active.latestObligation);
         return {
@@ -88,21 +136,71 @@ export class TurnReplyGuard {
         };
     }
     settleToolAttempt(token, delivered) {
+        if (!token)
+            return;
         const active = this.active;
-        if (!token || !active || token.generation !== active.generation)
+        if (token.generation === PRE_ARM_GENERATION) {
+            if (active && !active.cancelledByUser) {
+                this.applySettle(active, token, delivered, active.latestObligation);
+                return;
+            }
+            if (active?.cancelledByUser)
+                return;
+            this.stashPendingSettle(token, delivered);
             return;
+        }
+        if (!active || token.generation !== active.generation)
+            return;
+        this.applySettle(active, token, delivered, token.obligation);
+    }
+    applySettle(active, token, delivered, obligation) {
         if (!delivered) {
             // #1377: a definitive failure (adapter returned an error) is recorded so
             // maybeProxyReplyOnTurnEnd can distinguish "in-flight" from "known-failed".
             if (token.reply)
-                active.replyAttemptFailedAt = Math.max(active.replyAttemptFailedAt, token.obligation);
+                active.replyAttemptFailedAt = Math.max(active.replyAttemptFailedAt, obligation);
             return;
         }
-        active.outboundDeliveredAt = Math.max(active.outboundDeliveredAt, token.obligation);
+        active.outboundDeliveredAt = Math.max(active.outboundDeliveredAt, obligation);
         if (token.reply)
-            active.replyDeliveredAt = Math.max(active.replyDeliveredAt, token.obligation);
+            active.replyDeliveredAt = Math.max(active.replyDeliveredAt, obligation);
         if (token.completionAction)
-            active.completionDeliveredAt = Math.max(active.completionDeliveredAt, token.obligation);
+            active.completionDeliveredAt = Math.max(active.completionDeliveredAt, obligation);
+    }
+    stashPendingBegin(reply) {
+        const prev = this.pendingTool;
+        this.pendingTool = {
+            at: Date.now(),
+            replyAttempted: (prev?.replyAttempted ?? false) || reply,
+            replyAttemptFailed: prev?.replyAttemptFailed ?? false,
+            replyDelivered: prev?.replyDelivered ?? false,
+            completionDelivered: prev?.completionDelivered ?? false,
+            outboundDelivered: prev?.outboundDelivered ?? false,
+        };
+    }
+    stashPendingSettle(token, delivered) {
+        const at = Date.now();
+        const prev = this.pendingTool ?? {
+            at,
+            replyAttempted: token.reply,
+            replyAttemptFailed: false,
+            replyDelivered: false,
+            completionDelivered: false,
+            outboundDelivered: false,
+        };
+        if (!delivered) {
+            if (token.reply)
+                prev.replyAttemptFailed = true;
+        }
+        else {
+            prev.outboundDelivered = true;
+            if (token.reply)
+                prev.replyDelivered = true;
+            if (token.completionAction)
+                prev.completionDelivered = true;
+        }
+        prev.at = at;
+        this.pendingTool = prev;
     }
     snapshot() {
         const active = this.active;
@@ -142,6 +240,7 @@ export class TurnReplyGuard {
     reset() {
         this.active = null;
         this.pendingActivityAt = 0;
+        this.pendingTool = null;
     }
 }
 //# sourceMappingURL=turn-reply-guard.js.map

package/dist/turn-reply-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"turn-reply-guard.js","sourceRoot":"","sources":["../src/turn-reply-guard.ts"],"names":[],"mappings":"AA4DA;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,GAAsB,IAAI,CAAC;IACjC,UAAU,GAAG,CAAC,CAAC;IACvB;;;;;OAKG;IACK,iBAAiB,GAAG,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,UAAU,CAA2B;IAErC,GAAG,CAAC,MAAuB,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,EAAE,IAAI,CAAC,UAAU;gBAC7B,KAAK,EAAE,UAAU;gBACjB,eAAe,EAAE,KAAK;gBACtB,MAAM;gBACN,gBAAgB,EAAE,CAAC;gBACnB,gBAAgB,EAAE,CAAC;gBACnB,oBAAoB,EAAE,CAAC;gBACvB,gBAAgB,EAAE,CAAC;gBACnB,qBAAqB,EAAE,CAAC;gBACxB,mBAAmB,EAAE,CAAC;gBACtB,cAAc,EAAE,OAAO;aACxB,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,IAAI,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;;YACrE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED,+EAA+E;IAC/E,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAChC,CAAC;IAED,gBAAgB,CAAC,KAAc,EAAE,gBAAgB,GAAG,KAAK;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,KAAK;YAAE,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAChG,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,gBAAgB;YACnC,KAAK;YACL,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAA+B,EAAE,SAAkB;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;YAAE,OAAO;QACxE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,yEAAyE;YACzE,4EAA4E;YAC5E,IAAI,KAAK,CAAC,KAAK;gBAAE,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/F,IAAI,KAAK,CAAC,gBAAgB;YAAE,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtH,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;YAC5B,cAAc,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB;YAClE,kBAAkB,EAAE,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,gBAAgB;YAC1E,cAAc,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB;YAClE,mBAAmB,EAAE,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAC,gBAAgB;YAC5E,iBAAiB,EAAE,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,gBAAgB;YACxE,YAAY,EAAE,MAAM,CAAC,cAAc,GAAG,CAAC;YACvC,UAAU,EAAE,MAAM,CAAC,cAAc;SAClC,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;eACxF,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,UAAkB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}
+{"version":3,"file":"turn-reply-guard.js","sourceRoot":"","sources":["../src/turn-reply-guard.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA4B;IACjE,IAAI,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,wBAAwB,CACtC,IAKC,EACD,MAAc;IAEd,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC9F,IAAI,IAAI,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,mBAAmB;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AA2DD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,GAAsB,IAAI,CAAC;IACjC,UAAU,GAAG,CAAC,CAAC;IACvB;;;;;OAKG;IACK,iBAAiB,GAAG,CAAC,CAAC;IAC9B;;;;OAIG;IACK,WAAW,GAA+B,IAAI,CAAC;IACvD;;;;;OAKG;IACH,UAAU,CAA2B;IAErC,GAAG,CAAC,MAAuB,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/F,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,EAAE,IAAI,CAAC,UAAU;gBAC7B,KAAK,EAAE,UAAU;gBACjB,eAAe,EAAE,KAAK;gBACtB,MAAM;gBACN,gBAAgB,EAAE,CAAC;gBACnB,gBAAgB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjD,oBAAoB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,gBAAgB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjD,qBAAqB,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,cAAc,EAAE,OAAO;aACxB,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,IAAI,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;;YACrE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED,+EAA+E;IAC/E,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAChC,CAAC;IAED,gBAAgB,CAAC,KAAc,EAAE,gBAAgB,GAAG,KAAK;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,uEAAuE;YACvE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO;gBACL,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,CAAC;gBACb,KAAK;gBACL,gBAAgB;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAChG,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,gBAAgB;YACnC,KAAK;YACL,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAA+B,EAAE,SAAkB;QACnE,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;YAC5C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBACtC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,IAAI,MAAM,EAAE,eAAe;gBAAE,OAAO;YACpC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;YAAE,OAAO;QAC9D,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;IAEO,WAAW,CAAC,MAAkB,EAAE,KAAwB,EAAE,SAAkB,EAAE,UAAkB;QACtG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,yEAAyE;YACzE,4EAA4E;YAC5E,IAAI,KAAK,CAAC,KAAK;gBAAE,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QACzF,IAAI,KAAK,CAAC,gBAAgB;YAAE,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;IAChH,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG;YACjB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,cAAc,EAAE,CAAC,IAAI,EAAE,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK;YACxD,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,IAAI,KAAK;YACrD,cAAc,EAAE,IAAI,EAAE,cAAc,IAAI,KAAK;YAC7C,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,IAAI,KAAK;YACvD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,KAAK;SACpD,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,KAAwB,EAAE,SAAkB;QACrE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI;YAC/B,EAAE;YACF,cAAc,EAAE,KAAK,CAAC,KAAK;YAC3B,kBAAkB,EAAE,KAAK;YACzB,cAAc,EAAE,KAAK;YACrB,mBAAmB,EAAE,KAAK;YAC1B,iBAAiB,EAAE,KAAK;SACzB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC5C,IAAI,KAAK,CAAC,gBAAgB;gBAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;YAC5B,cAAc,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB;YAClE,kBAAkB,EAAE,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,gBAAgB;YAC1E,cAAc,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB;YAClE,mBAAmB,EAAE,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAC,gBAAgB;YAC5E,iBAAiB,EAAE,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,gBAAgB;YACxE,YAAY,EAAE,MAAM,CAAC,cAAc,GAAG,CAAC;YACvC,UAAU,EAAE,MAAM,CAAC,cAAc;SAClC,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;eACxF,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,UAAkB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;CACF"}

package/dist/types.d.ts

@@ -94,6 +94,8 @@ export declare function resolveDeliveryWorkerMode(config: {
     }>;
 } | null | undefined, name: string): DeliveryWorkerMode;
 export interface InstanceConfig {
+    /** Proactive interrupted-work continuation; defaults true, inherited from fleet defaults. */
+    resume_interrupted_work?: boolean;
     working_directory: string;
     /** Minutes an idle CLI may remain resident before auto-pause. 0 disables it. */
     auto_pause_after?: number;
@@ -153,8 +155,9 @@ export interface InstanceConfig {
     backend?: string;
     /**
      * Kiro CLI interface/engine profile. Only used when backend is "kiro-cli".
-     * "legacy" preserves AgEnD's current --legacy-ui launch; "tui" uses Kiro's
-     * default UI; "v3" opts into the experimental next-generation agent.
+     * "legacy" is kiro's classic UI/v1 engine (the value when unset); "tui" its
+     * TUI/v2 engine, which new instances are written with (#2598,
+     * newInstanceKiroUi); "v3" the next-generation agent (refused by validation).
      */
     kiro_ui?: "legacy" | "tui" | "v3";
     /**
@@ -183,12 +186,15 @@ export interface InstanceConfig {
     board_cards_at_once?: number;
     /**
      * Which dashboard features this instance may use, on top of its `tool_set` (dashboard-permissions.ts): `appearance`
-     * (its own look: theme, pictures, widgets, ambient, effects, mod proposals), `task_board` (the `task` tool) and
-     * `web_settings` (Settings → Web appearance for the person). `false` switches one off; unset allows. `defaults.dashboard`
+     * (its own look: theme, pictures, widgets, ambient, effects, mod proposals), `task_board` (the `task` tool),
+     * `web_settings` (Settings → Web appearance for the person). `false` switches one off; unset allows. Office uses
+     * the separate `office_access` switch (off unless true). `defaults.dashboard`
      * sets it for every instance and merges key by key with an instance's own. The fleet reads it at each tool call; the
      * daemon keeps it current, and an agent's tool menu follows from its next start.
      */
     dashboard?: import("./dashboard-permissions.js").DashboardAccess;
+    /** Office tools: off unless true; inherits defaults.office_access. Stored outside the legacy closed dashboard map. */
+    office_access?: boolean;
     /**
      * Detect a human-channel turn that ended without a delivered reply and ask
      * the agent to send one bounded recovery reply. Only capable backends use
@@ -196,6 +202,8 @@ export interface InstanceConfig {
      * Default: true.
      */
     reply_completion_guard?: boolean;
+    /** Fleet-wide default for native replies addressing ClassicBot collab rooms. */
+    reply_triggers?: boolean;
     /** Skip non-essential subsystems (transcript monitor, context guardian, approval server, prompt detector) */
     lightweight?: boolean;
     /** System prompt — supports comma-separated file: paths for modularization */
@@ -283,8 +291,8 @@ export interface FleetDefaults extends Partial<InstanceConfig> {
     cost_guard?: CostGuardConfig;
     hang_detector?: HangDetectorConfig;
     daily_summary?: DailySummaryConfig;
-    /** Daily General-topic tips and update-completion tip. Default: true. */
-    tips?: boolean;
+    /** Daily tips: true (posted in the General topic) or false. A legacy "dm" (#2581, withdrawn) reads as true. Update-completion tips stay with the result. Default: true. */
+    tips?: boolean | "dm";
     /** #2246 step 3: the task board's fleet-level settings. */
     task_board?: {
         /** The daily summary's time in the fleet's zone ("HH:MM", 24 h), or "off". Default "09:00". */
@@ -411,6 +419,15 @@ export interface WebConfig {
         retention_days?: number;
         public_link?: boolean;
     };
+    /**
+     * #2636: Office share links — the live Office view for people outside the fleet, read-only, on a quick tunnel of its
+     * own. `enabled` (default true): false offers no Share and ends every open share. `max_hours` (1–24, default 24): the
+     * longest a share may live.
+     */
+    office_share?: {
+        enabled?: boolean;
+        max_hours?: number;
+    };
     /** Expose provider API-key verify/apply endpoints (default false until dark-shipped). */
     provider_secrets?: boolean;
     /**
@@ -425,8 +442,13 @@ export interface WebConfig {
      * `session`: a signed-in web session or the CLI header token. Writes need a credential either way.
      */
     view_access?: "open" | "session";
-    /** Tell the admin channel when someone signs in to the web panel (default true). */
-    notify_login?: boolean;
+    /** Sign-in notices: true/topic (default) or false/operator notices off. A legacy "dm" (#2581, withdrawn) reads as true. */
+    notify_login?: boolean | "dm";
+    /** Legacy (#2591), ignored and dropped on startup: notices always post in the topic. */
+    notice_delivery?: {
+        login?: "dm";
+        tips?: "dm";
+    };
     /**
      * #1620: how long a web session lasts. Only the LOCAL surface (the dashboard reached directly — loopback, a LAN, a
      * tailnet) is configurable; a public-link session's limits stay fixed. Hours, 1 ≤ idle_hours ≤ absolute_hours ≤ 720;
@@ -494,9 +516,15 @@ export interface WebVerifiedAuthorityConfig {
     /**
      * #2453 (§0.2): sessions over the admin's own named tunnel (`web.public_link.hostname`) may be authorized too — off by
      * default. Turning it on is confirmed in a General or on the host (never by the asking session); off applies at once
-     * and every receipt from a named-link session reads as none. A quick tunnel never qualifies.
+     * and every receipt from a named-link session reads as none. A quick tunnel is `quick_link`'s (§0.3).
      */
     named_link?: boolean;
+    /**
+     * #1939 §0.3: sessions over the temporary public link (the quick tunnel `/web` opens) may be authorized too — off by
+     * default (the user's decision, 2026-10-23). Turning it on is confirmed in a General or on the host (never by the
+     * asking session); off applies at once and every receipt from a quick-link session reads as none.
+     */
+    quick_link?: boolean;
 }
 /** #1920: fleet.yaml `web.guests`. */
 export interface WebGuestsConfig {
@@ -511,6 +539,15 @@ export interface WebGuestsConfig {
     open_instances?: Record<string, string[]>;
     /** An admin's narrowing, per `<connection id>:<user id>`: intersected with the derived scope, never widening it. */
     narrow?: Record<string, string[]>;
+    /**
+     * #2348: an admin's explicit grants, per `<connection id>:<user id>` — the agents that person may see as a guest. Once
+     * this key exists it is the only scope there is (default deny): the derived scope above (connection access, rooms,
+     * open_instances, narrow) no longer gives anything. `name` is display only (who it was when granted).
+     */
+    grants?: Record<string, {
+        name?: string;
+        instances: string[];
+    }>;
     /** A guest session's limits: absolute 1–24 h (default 12), idle 15–720 min (default 120). */
     session?: {
         absolute_hours?: number;

package/dist/ui/backend-signin.js

@@ -5,12 +5,13 @@
 // session that started a sign-in gets its terminal link, access code and device code; every other admin page only that
 // one runs, on which device, and may cancel it. The stream's `backend_login` event carries nothing — it only says to
 // read again. Starting is two steps, as in chat: check (the server keeps what it found) and start (with its id).
-import { html, useEffect, useState } from "/assets/app-html.js";
+import { html, useEffect, useState, useRef } from "/assets/app-html.js";
 import { t, register } from "/assets/app-i18n.js";
 import { appStore, createStore, useStore } from "/assets/app-store.js";
 import { closeDialog, shellStore, showDialog } from "/assets/app-shell.js";
 import { Dialog } from "/assets/ui-dialog.js";
 import { toast } from "/assets/ui-toast.js";
+import { mountStructuredSignIns } from "./structured-signin.js";
 
 register("signin", {
   en: {
@@ -49,6 +50,8 @@ register("signin", {
     notOffered: "A public link is not offered for this sign-in.",
     failed: "That did not work.",
     listTitle: "Sign-ins",
+    browserRunning: "Signing in to {0} on this machine",
+    consoleFallback: "Use console fallback",
     listHint: "Each backend's login on this machine, and each credential profile an agent uses.",
     stUsable: "signed in",
     stNotSignedIn: "not signed in",
@@ -98,6 +101,8 @@ register("signin", {
     notOffered: "這次登入不提供公開連結。",
     failed: "沒有成功。",
     listTitle: "登入",
+    browserRunning: "正在這台機器登入 {0}",
+    consoleFallback: "改用主控台備援",
     listHint: "這台機器上每個 backend 的登入，以及代理使用的每個憑證設定檔。",
     stUsable: "已登入",
     stNotSignedIn: "未登入",
@@ -116,7 +121,7 @@ const tn = (k, ...v) => t(`signin.${k}`, ...v);
 const shownOf = (backend, profile) => (profile ? tn("profile", backend, profile) : backend);
 
 /** What this page knows: the current sign-in as this session may see it, and Settings' list. */
-export const signInStore = createStore({ loaded: false, login: null, targets: [] });
+export const signInStore = createStore({ loaded: false, login: null, targets: [], structured: null });
 
 let reading = null, again = false;
 /**
@@ -125,9 +130,13 @@ let reading = null, again = false;
  */
 export function refreshSignIn() {
   if (reading) { again = true; return reading; }
-  reading = fetch("/ui/backend-login", { cache: "no-store" })
-    .then((r) => (r.ok ? r.json() : null))
-    .then((b) => { if (b) signInStore.set({ loaded: true, login: b.login || null, targets: Array.isArray(b.targets) ? b.targets : [] }); return b; })
+  reading = Promise.all([
+    fetch("/ui/backend-login", { cache: "no-store" }).then(r => r.ok ? r.json() : null).catch(() => null),
+    fetch("/ui/browser-backend-signins", { cache: "no-store" }).then(r => r.ok ? r.json() : null).catch(() => null),
+  ]).then(([b, structured]) => {
+    if (b) signInStore.set({ loaded: true, login: b.login || null, targets: Array.isArray(b.targets) ? b.targets : [] });
+    signInStore.set({ structured: structured && Array.isArray(structured.selected) && Array.isArray(structured.pending) ? structured : null }); return b;
+  })
     .catch(() => null)
     .finally(() => { reading = null; if (again) { again = false; void refreshSignIn(); } });
   return reading;
@@ -140,13 +149,25 @@ export function installSignIn() {
   installed = true;
   const on = appStore.get().streamOn;
   if (typeof on === "function") on("backend_login", () => { void refreshSignIn(); });
-  void refreshSignIn();
+  void refreshSignIn().then(() => {
+    // A navigation hint from the installer, never authority to start a CLI or cancel another writer.
+    const backends = installerSignInBackends(typeof location === "undefined" ? "" : location.search);
+    if (backends && signInStore.get().structured) showDialog(BrowserSignInDialog, { backends });
+  });
   shellStore.set({ banner: SignInLine });
 }
 
+export function installerSignInBackends(search) {
+  const csv = new URLSearchParams(search).get("backend_signins");
+  if (!csv || csv.length > 100) return null;
+  const ids = csv.split(",");
+  return ids.length <= 4 && ids.every(b => ["kiro-cli", "claude-code", "codex", "antigravity"].includes(b)) ? [...new Set(ids)] : null;
+}
+
 /** Open the dialog for one login (a backend's default one, or a credential profile). */
 export function openSignIn({ backend, profile }) {
-  showDialog(SignInDialog, { backend, ...(profile ? { profile } : {}) });
+  if (!profile && ["kiro-cli", "claude-code", "codex"].includes(backend)) showDialog(BrowserSignInDialog, { backend });
+  else showDialog(SignInDialog, { backend, ...(profile ? { profile } : {}) });
 }
 
 /** Open the dialog on the running sign-in (its starter's view, or the cancel-only one). */
@@ -191,6 +212,32 @@ function Running({ login }) {
   </div>`;
 }
 
+/** The same closed controls as first setup. Profile-specific logins retain their existing flow. */
+export function BrowserSignInDialog({ backend, backends, onClose }) {
+  const root = useRef(null), close = onClose || closeDialog;
+  useEffect(() => {
+    let cards, last = "";
+    cards = mountStructuredSignIns(root.current, { endpoint: "/ui/browser-backend-signins", changed: next => {
+      if (backends) { if (backends.some(b => !next.selected.includes(b))) void cards.addBackends(backends); }
+      else if (!next.selected.includes(backend)) void cards.addBackend(backend);
+      const signature = JSON.stringify([next.login, next.pending]);
+      if (signature !== last) { last = signature; void refreshSignIn(); }
+    } });
+    return () => cards.dispose();
+  }, [backend, backends]);
+  const fallback = async (chosen = backend) => {
+    const result = await post("/ui/browser-backend-signins", { operation: "cancel" });
+    if (!result.ok) { toast(tn("failed")); return; }
+    showDialog(SignInDialog, { backend: chosen });
+  };
+  return html`<${Dialog} title=${backends ? tn("listTitle") : tn("title", backend)} onClose=${close}>
+    <div ref=${root}></div>
+    ${backends ? backends.filter(b => b !== "antigravity").map(b => html`<button type="button" class="btn" onClick=${() => fallback(b)}>${b} · ${tn("consoleFallback")}</button>`) : null}
+    <div class="s-actions">${backend ? html`<button type="button" class="btn" onClick=${() => fallback(backend)}>${tn("consoleFallback")}</button>` : null}
+    <button type="button" class="btn" onClick=${close}>${tn("close")}</button></div>
+  </${Dialog}>`;
+}
+
 export function SignInDialog({ backend, profile, resume = false, onClose }) {
   const s = useStore(signInStore);
   const [step, setStep] = useState(resume ? { kind: "login" } : { kind: "checking" });
@@ -265,7 +312,12 @@ export function SignInDialog({ backend, profile, resume = false, onClose }) {
 
 /** The line every admin page shows while a sign-in runs (the shell's banner slot). */
 export function SignInLine() {
-  const { login } = useStore(signInStore);
+  const { login, structured } = useStore(signInStore);
+  const active = structured?.login;
+  if ((!login || login.phase !== "running") && active && active.phase !== "done" && !(active.phase === "failed" && active.reason)) {
+    return html`<div data-trust="status" class="conn op-line signin-line" role="status"><span>${tn("browserRunning", active.backend)}</span>
+      <button type="button" class="btn btn-sm" onClick=${() => openSignIn({ backend: active.backend })}>${tn("open")}</button></div>`;
+  }
   if (!login || login.phase !== "running") return null;
   return html`<div data-trust="status" class="conn op-line signin-line" role="status">
     <span>${tn("running", shownOf(login.backend, login.profile), login.startedOn)}</span>
@@ -276,10 +328,14 @@ const STATE_KEY = { usable: "stUsable", not_signed_in: "stNotSignedIn", not_inst
 
 /** Settings → Agents: each login on this machine, with Sign in where the dashboard can do it. */
 export function SignInList() {
-  const { targets, loaded, login } = useStore(signInStore);
-  useEffect(() => { void refreshSignIn(); }, []);
-  if (!loaded || !targets.length) return null;
-  const running = login && login.phase === "running";
+  const { targets, loaded, login, structured } = useStore(signInStore);
+  // Not over the temporary public link: only the dashboard reached directly signs a backend in, and the link does not
+  // serve this read (it was a 404 in the console there, found by smoke-1939-authorize-defaults).
+  const offered = signInOffered();
+  useEffect(() => { if (offered) void refreshSignIn(); }, []);
+  if (!offered || !loaded || !targets.length) return null;
+  const active = structured?.login;
+  const running = (login && login.phase === "running") || (active && active.phase !== "done" && !(active.phase === "failed" && active.reason));
   return html`<section class="s-group signin-list" aria-label=${tn("listTitle")}>
     <div class="list-head"><span>${tn("listTitle")}</span></div>
     <p class="sub">${tn("listHint")}</p>

package/dist/ui/chat-ambient.js

@@ -278,7 +278,7 @@ export function AmbientMotionNote({ name, canvasPlaying = false }) {
 /**
  * The fix for a block, done right here: both switches are this viewer's own (the show switch is a local choice on the
  * public link; the reduced-motion one is per device), so it works on the public link too; safe mode is the URL. Both
- * stay in Settings → Web appearance as well.
+ * stay in Settings → Look as well.
  */
 const FIX = {
   hidden: () => setThemesShown(true),

package/dist/ui/chat-effects.js

@@ -13,7 +13,7 @@ import { getAppEffects, wakeEffects, effectsLoaded, onEffectsAwake } from "./eff
 
 register("chatFx", {
   en: { stock: "Off: the page layout could not be verified ({0}). Reload and report this code if it persists.", transport: "Off: the isolated effect frame could not start. Reload to try again.", enableHere: "Turn effects on here", playMotion: "Play effects anyway", leaveSafe: "Leave safe mode", viewerShow: "Show themes, effects and widgets here", clock: "Off: the page timing clock is unavailable. Reload to try again.", gatesUnknown: "Off: the playback conditions could not be verified.", resource: "Off: this effect could not be loaded or verified. Reload to try again.", frontQueue: "Waiting for a foreground slot.", consent: "This page has older playback information. Reload to use the isolated effect player.", previewMissing: "Off: the isolated effect frame is unavailable. Reload to try again.", unsupported: "Off: this browser lacks required Canvas Worker or layout support.", calibration: "Starting the effect.", baseline: "This page has older playback information. Reload to try again.", safetyUnknown: "Stopped: this device's safety history could not be verified. Reload to check it.", rawReason: "Playback blocked: {0}", missingRow: "Playback state is unavailable (runtime_unavailable).", region: "Off: this effect does not declare the chat region.", blocked: "Placed effects are blocked for this viewer:", deviceSetting: "Open device preferences", webSetting: "Open Web settings", reloadHint: "Reload page",
-    title: "Effects", loading: "Checking effects…", empty: "No effects in this chat.", failed: "Effects stopped because their resources could not be verified. Reload the page to try again.", reload: "Reload page", pause: "Pause", resume: "Resume", remove: "Remove from chat", removeFailed: "Could not remove this effect. Reload the page to check its state.", css: "Agent foreground effects are paused while your custom CSS is on or cannot be verified.", setting: "Open Web appearance settings", running: "Running", starting: "Starting", off: "Stopped", resumeFailed: "This effect cannot resume: the page or its safety history is not ready. Reload the page or choose another effect.", queued: "Waiting for a slot", unknown: "Playback is off or unavailable here.", budget: "Paused to protect page responsiveness. Resume keeps the three-pauses safety limit.", pauseHelp: "Resume keeps this device’s automatic-pause history and three-pause safety limit.", paused: "Paused", low: "Reduced quality",
+    title: "Effects", loading: "Checking effects…", empty: "No effects in this chat.", failed: "Effects stopped because their resources could not be verified. Reload the page to try again.", reload: "Reload page", pause: "Pause", resume: "Resume", remove: "Remove from chat", removeFailed: "Could not remove this effect. Reload the page to check its state.", css: "Agent foreground effects are paused while your custom CSS is on or cannot be verified.", setting: "Open Settings → Look", running: "Running", starting: "Starting", off: "Stopped", resumeFailed: "This effect cannot resume: the page or its safety history is not ready. Reload the page or choose another effect.", queued: "Waiting for a slot", unknown: "Playback is off or unavailable here.", budget: "Paused to protect page responsiveness. Resume keeps the three-pauses safety limit.", pauseHelp: "Resume keeps this device’s automatic-pause history and three-pause safety limit.", paused: "Paused", low: "Reduced quality",
     typing: "Waiting while you type — it plays when you leave the message box.", covered: "Waiting while a menu or panel covers the chat.",
     dialogOpen: "Paused while this dialog is open.", wasRunning: "Was running; paused while this dialog is open.", modal: "Waiting while a dialog is open.",
     off3: "Turned off on this device after three automatic pauses. Resume cannot restart it here.", interrupted: "Stopped: the page closed while it was playing. Resume to play it again.",
@@ -21,7 +21,7 @@ register("chatFx", {
     hiddenTab: "Waiting until this tab is visible.", offscreen: "Waiting until the chat is on screen.",
     safeMode: "Off in safe mode.", publicLink: "Off on a public link.", disabled: "Effects are switched off." },
   "zh-TW": { stock: "已關閉：無法驗證頁面版面（{0}）。請重新載入；若持續發生，請回報此代碼。", transport: "已關閉：無法啟動隔離效果框架。請重新載入再試。", enableHere: "在這裡開啟效果", playMotion: "仍然播放效果", leaveSafe: "離開安全模式", viewerShow: "在這裡顯示主題、效果與小工具", clock: "已關閉：頁面計時無法使用。請重新載入再試。", gatesUnknown: "已關閉：無法確認播放條件。", resource: "已關閉：無法載入或驗證此效果。請重新載入再試。", frontQueue: "等待前景空位。", consent: "這個頁面的播放資訊已過期。請重新載入以使用隔離效果播放器。", previewMissing: "已關閉：隔離效果框架無法使用。請重新載入再試。", unsupported: "已關閉：這個瀏覽器缺少 Canvas Worker 或版面驗證支援。", calibration: "正在啟動效果。", baseline: "這個頁面的播放資訊已過期，請重新載入再試。", safetyUnknown: "已停止：無法確認這台裝置的安全紀錄。請重新載入確認。", rawReason: "播放受阻：{0}", missingRow: "無法取得播放狀態（runtime_unavailable）。", region: "已關閉：此效果未宣告聊天區域。", blocked: "放置的效果目前無法在這個畫面播放：", deviceSetting: "開啟裝置偏好設定", webSetting: "開啟網頁設定", reloadHint: "重新載入頁面",
-    title: "效果", loading: "正在確認效果…", empty: "這個聊天沒有放置效果。", failed: "無法確認效果資源，已停止播放。重新載入頁面後再試。", reload: "重新載入頁面", pause: "暫停", resume: "恢復", remove: "從聊天移除", removeFailed: "無法移除效果。請重新載入頁面確認狀態。", css: "自訂 CSS 開啟或無法確認時，代理的前景效果會暫停。", setting: "開啟網頁外觀設定", running: "播放中", starting: "啟動中", off: "已停止", resumeFailed: "頁面或安全紀錄尚未就緒，無法恢復此效果。請重新載入頁面，或選擇其他效果。", queued: "等待空位", unknown: "這裡已關閉播放，或無法播放效果。", budget: "為維持頁面順暢，已暫停效果。恢復仍保留三次暫停的安全上限。", pauseHelp: "恢復仍保留這台裝置的自動暫停紀錄與三次暫停安全上限。", paused: "已暫停", low: "降低畫質",
+    title: "效果", loading: "正在確認效果…", empty: "這個聊天沒有放置效果。", failed: "無法確認效果資源，已停止播放。重新載入頁面後再試。", reload: "重新載入頁面", pause: "暫停", resume: "恢復", remove: "從聊天移除", removeFailed: "無法移除效果。請重新載入頁面確認狀態。", css: "自訂 CSS 開啟或無法確認時，代理的前景效果會暫停。", setting: "開啟設定 → 外觀", running: "播放中", starting: "啟動中", off: "已停止", resumeFailed: "頁面或安全紀錄尚未就緒，無法恢復此效果。請重新載入頁面，或選擇其他效果。", queued: "等待空位", unknown: "這裡已關閉播放，或無法播放效果。", budget: "為維持頁面順暢，已暫停效果。恢復仍保留三次暫停的安全上限。", pauseHelp: "恢復仍保留這台裝置的自動暫停紀錄與三次暫停安全上限。", paused: "已暫停", low: "降低畫質",
     typing: "輸入時暫停，離開訊息輸入框就會播放。", covered: "選單或面板蓋住聊天時暫停。",
     dialogOpen: "開著這個對話框時暫停。", wasRunning: "原本在播放；開著這個對話框時暫停。", modal: "有對話框開著時暫停。",
     off3: "已自動暫停三次，這台裝置已關閉此效果，無法在這裡恢復。", interrupted: "播放時頁面被關閉而停止。按「恢復」再播放一次。",
@@ -64,7 +64,7 @@ export function effectRowText(row, { ownOpen = false, wasRunning = false, doc =
 /** Fixed local actions: no server/Worker-provided destination or raw reason in a URL. */
 export function effectReasonAction(reason) {
   if (reason === "preview_not_consented" || reason === "preview_unavailable") return { reload: true, label: "chatFx.reloadHint" };
-  if (["disabled", "owner_css"].includes(reason)) return { href: "/settings/appearance", label: "chatFx.setting" };
+  if (["disabled", "owner_css"].includes(reason)) return { href: "/settings/look", label: "chatFx.setting" };
   if (["transport_unavailable", "baseline_unsupported", "baseline_unavailable", "baseline_timeout", "runtime_unavailable", "resource_unavailable", "resource_timeout", "clock_unavailable", "safety_unknown"].includes(reason)) return { reload: true, label: "chatFx.reloadHint" };
   return null;
 }
@@ -155,7 +155,7 @@ export function ChatEffects({ name, lease, element, store, open, onClose, onPlay
   return html`${!open && localViewer() && effects.length ? html`<div class="chat-fx-notice"><label><input type="checkbox" checked=${themesShown()} onChange=${e => setThemesShown(e.currentTarget.checked)} /> ${t("chatFx.viewerShow")}</label></div>` : null}${!open && state?.error && !effects.length ? html`<div class="chat-fx-notice" role="status">${effectRowText({ reason: state.error })} <${ReasonAction} reason=${state.error} /></div>` : null}${!open && state?.reason ? html`<div class="chat-fx-notice" role="status">${effectRowText({ reason: state.reason })} <${ReasonAction} reason=${state.reason} /></div>` : null}${!open && blocked.length ? html`<div class="chat-fx-notice" role="status"><strong>${t("chatFx.blocked")}</strong>
     ${blocked.map(({ p, row }) => html`<span key=${p.id}>${p.manifest.title}: ${effectRowText(row)} ${["paused", "host_budget"].includes(row?.reason) ? html`<small>${t(row.reason === "host_budget" ? "chatFx.budget" : "chatFx.pauseHelp")}</small>` : null} <${ReasonAction} reason=${row?.reason} /></span>`)}</div>` : null}${open ? html`<${Dialog} title=${t("chatFx.title")} onClose=${onClose} busy=${busy}>
       ${state?.error ? html`<p>${t("chatFx.failed")}</p><button type="button" class="btn" onClick=${() => location.reload()}>${t("chatFx.reload")}</button>` : null}
-      ${css ? html`<p>${t("chatFx.css")}</p><button type="button" class="btn" onClick=${() => { onClose(); navigate("/settings/appearance"); }}>${t("chatFx.setting")}</button>` : null}
+      ${css ? html`<p>${t("chatFx.css")}</p><button type="button" class="btn" onClick=${() => { onClose(); navigate("/settings/look"); }}>${t("chatFx.setting")}</button>` : null}
       ${!effects.length && !state?.error ? html`<p>${t(state?.unavailable ? "chatFx.unknown" : state?.loading || !state ? "chatFx.loading" : "chatFx.empty")}</p>` : null}
       ${effects.map(p => { const row = rows.find(r => r.id === p.id); return html`<section key=${p.id}><h3>${p.manifest.title}</h3><p>${effectRowText(row, { ownOpen: open, wasRunning: before.current?.get(p.id) === true })}${row?.quality === "low" ? ` · ${t("chatFx.low")}` : ""}</p>
         <${ReasonAction} reason=${row?.reason} onClose=${onClose} />

package/dist/ui/chat-render.js

@@ -627,7 +627,9 @@
     if (!Array.isArray(attachments)) return "";
     var cards = !!(opts && opts.htmlCards);
     // #1589: { inlinePreviews: true } (not on the public link) plays media and offers text inline, after the file list.
-    var inline = !!(opts && opts.inlinePreviews);
+    // #2547: { textPreviews: true } offers the text cards (Markdown, CSV/TSV, JSON, code, text) on the public link too:
+    // the same capped, same-origin read and the same rendering (nothing in the file ever runs); media stays local.
+    var inline = !!(opts && opts.inlinePreviews), texts = inline || !!(opts && opts.textPreviews);
     var out = [], after = [];
     attachments.forEach(function (a) {
       // #1565: a file from before the fleet restarted that could not be served again — its name, marked unavailable;
@@ -639,7 +641,8 @@
       if (!a || typeof a.id !== "string" || !/^[0-9a-f]{32}$/.test(a.id)) return;
       if (cards && isHtmlAttachment(a)) after.push('<div class="html-card" data-att="' + a.id + '"></div>');
       var url = "/ui/file/" + a.id;
-      var kind = inline ? attachmentPreviewType(a) : null;
+      var kind = texts ? attachmentPreviewType(a) : null;
+      if ((kind === "video" || kind === "audio") && !inline) kind = null;
       if (kind === "video") after.push('<div data-trust="media" class="att-media"><video class="att-video" controls preload="metadata" src="' + url + '"></video></div>');
       else if (kind === "audio") after.push('<div data-trust="media" class="att-media"><audio class="att-audio" controls preload="metadata" src="' + url + '"></audio></div>');
       else if (kind) after.push('<div class="text-card" data-att="' + a.id + '" data-type="' + kind + '"></div>');

package/dist/ui/chat-strings.js

@@ -49,7 +49,7 @@ register("chat", {
     cmd_wake: "Wake a paused instance", cmd_save: "Save the conversation to a file",
     tourTitle: "Welcome to web chat", tourStep: "{0} of {1}", tourBack: "Back", tourNext: "Next", tourDone: "Got it", tourSkip: "Skip",
     tour1: "Pick an instance in the list to chat with it. On a phone, ☰ opens the list.",
-    tour2: "This is the agent's conversation. If it also has a Telegram or Discord chat, web echo (Settings → Web) decides whether what you send here shows there too.",
+    tour2: "This is the agent's conversation. If it also has a Telegram or Discord chat, web echo (Settings → Chat & connections) decides whether what you send here shows there too.",
     tour3: "Attach files and images with 📎, or paste or drop them on the chat.",
     tour4: "While the agent works, Stop reply appears in the message box: it interrupts the current reply. The instance itself keeps running.",
     tour5: "A “needs you” badge means the agent is waiting on its terminal, for example a permission question. Answer it from the buttons in its chat.",
@@ -116,7 +116,7 @@ register("chat", {
     file_empty: "empty file", file_too_large: "over {0} MB", file_too_large_public: "over {0} MB — the most the public link carries in one upload", file_too_many: "at most {0} files per message", file_too_much: "the files together would be over {0} MB", removeFile: "Remove", putBack: "Put back", 
     noMessages: "Type a task below.",
     pick: "Choose an agent to start chatting.", noAgents: "Create an agent to start chatting.", newAgent: "New agent", notFound: "No instance called “{0}”", notFoundHint: "It may have been deleted or renamed.", backToList: "Choose an agent",
-    details: "Instance details", start: "Start instance", stopInstance: "Stop instance", restart: "Restart instance", delete: "Delete instance…",
+    details: "Instance details", fullWidth: "Full width", start: "Start instance", stopInstance: "Stop instance", restart: "Restart instance", delete: "Delete instance…",
     started: "{0} started", stoppedInst: "{0} stopped", restarted: "{0} restarted", instanceDeleted: "{0} was deleted",
     deleteTitle: "Delete {0}?", deleteHelp: "This removes the instance from the fleet and stops it. Its working directory is kept. Type “delete {0}” to confirm.", deleteGo: "Delete", cancel: "Cancel",
     loadFailed: "Failed to load", tour: "Chat tour", tourBtnTitle: "Show the chat tour on an agent's chat", tourNoAgent: "Choose an agent before opening the chat tour.",
@@ -190,7 +190,7 @@ register("chat", {
     cmd_wake: "喚醒已暫停的 instance", cmd_save: "把對話存成檔案",
     tourTitle: "歡迎使用網頁聊天", tourStep: "{0} / {1}", tourBack: "上一步", tourNext: "下一步", tourDone: "知道了", tourSkip: "略過",
     tour1: "在清單裡選一個 instance，就能跟它對話。手機上請按 ☰ 打開清單。",
-    tour2: "這是這個 Agent 的對話。如果它也有 Telegram 或 Discord 聊天，在這裡送出的訊息是否也出現在那裡，由「設定 → 網頁」的網頁轉發決定。",
+    tour2: "這是這個 Agent 的對話。如果它也有 Telegram 或 Discord 聊天，在這裡送出的訊息是否也出現在那裡，由「設定 → 聊天與連線」的網頁轉發決定。",
     tour3: "按 📎 附上檔案和圖片，也可以直接貼上或拖到聊天裡。",
     tour4: "Agent 工作時，輸入框會出現「中止回覆」：中斷目前的回覆，instance 本身會繼續運行。",
     tour5: "看到「等你回應」標記，表示 Agent 在終端機上等你，例如權限詢問。到它的聊天裡按按鈕回應即可。",
@@ -255,7 +255,7 @@ register("chat", {
     file_empty: "空檔案", file_too_large: "超過 {0} MB", file_too_large_public: "超過 {0} MB，這是公開連結單次上傳的上限", file_too_many: "每則訊息最多 {0} 個檔案", file_too_much: "檔案合計會超過 {0} MB", removeFile: "移除", putBack: "放回輸入框", 
     noMessages: "直接在下方輸入任務。",
     pick: "選一個 Agent 開始聊天。", noAgents: "先建立一個 Agent，再開始聊天。", newAgent: "新增 Agent", notFound: "沒有叫「{0}」的 instance", notFoundHint: "它可能已被刪除或改名。", backToList: "選擇 Agent",
-    details: "Instance 詳細資料", start: "啟動 instance", stopInstance: "停止 instance", restart: "重新啟動 instance", delete: "刪除 instance…",
+    details: "Instance 詳細資料", fullWidth: "全寬", start: "啟動 instance", stopInstance: "停止 instance", restart: "重新啟動 instance", delete: "刪除 instance…",
     started: "{0} 已啟動", stoppedInst: "{0} 已停止", restarted: "{0} 已重新啟動", instanceDeleted: "{0} 已刪除",
     deleteTitle: "要刪除 {0} 嗎？", deleteHelp: "這會把 instance 從 fleet 移除並停止它，工作目錄會保留。請輸入「delete {0}」確認。", deleteGo: "刪除", cancel: "取消",
     loadFailed: "載入失敗", tour: "聊天導覽", tourBtnTitle: "在 Agent 的聊天上開啟聊天導覽", tourNoAgent: "請先選一個 Agent，再開啟聊天導覽。",