@songsid/agend 2.3.2-beta.4 → 2.3.2-beta.6

package/dist/fleet-manager.d.ts

@@ -1,6 +1,8 @@
 import { type HumanOrigin } from "./human-delivery-receipts.js";
 import { SettingsExecution } from "./settings-transaction.js";
 import { AppIconStore } from "./web-app-icon.js";
+import { OfficeShareService } from "./office-share-service.js";
+import { type OfficeShare } from "./office-share.js";
 import type { LoginCodeOwner } from "./web-login.js";
 import { type ProfileTicket } from "./runtime-cpu-profile.js";
 import type { CpuProfile } from "./cpu-profile.js";
@@ -85,6 +87,7 @@ import { type CrossInstanceRecord, type XmsgVisibility } from "./search/search-d
 import { WebSettingsTools } from "./web-settings-tools.js";
 import { type Delegation, type TrafficItem } from "./fleet-traffic.js";
 import { WebBackendLogins, type SignInTarget } from "./web-backend-login.js";
+import { BrowserBackendSignIns } from "./browser-backend-signins.js";
 import { type RawConfigPatch } from "./settings-api.js";
 import { type AgentEndpointContext } from "./agent-endpoint.js";
 import { ClassicChannelManager } from "./classic-channel-manager.js";
@@ -246,6 +249,7 @@ export declare const CLI_ENV_PROBE_DEADLINE_MS = 16000;
  * started ten CLIs together, saturated the CPU, and healthy starts then missed
  * their startup budget — which used to cost the user their conversation. Cores
  * bound how many can actually make progress; memory bounds how many fit.
+ * `cores` is what this process may use (cpuset and cgroup quota, #749), not the host's count.
  */
 export declare function deriveSpawnConcurrency(freeMemMB: number, cores: number): number;
 /** #2499 review: one line of Settings → Guests' Recent changes (guestOverview), from the event log. */
@@ -285,6 +289,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private workingRecovery;
     private workingRecoveryTimer;
     private workingRecoveryCause;
+    private workingRecoveryGroup;
     private recoveryEnabled;
     private initializeWorkingRecovery;
     private recoveryDeliveryEligible;
@@ -454,6 +459,8 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private pendingBackendSelects;
     /** nonce → pending button prompt (hang restart, interactive assist, clean-exit restart). */
     private pendingNonceButtons;
+    /** #2598 B2: the kiro moves waiting on a fleet admin's Confirm in General, by prompt nonce. */
+    private pendingKiroMigrations;
     /** #1386 "Needs you": the list, its live chat messages and Acknowledge. Started with the fleet (finishStartup). */
     private needsYou;
     /** When the fleet first saw an instance crashed, for its "Needs you" age; cleared when it is not. */
@@ -659,6 +666,19 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     readonly officeSkinWrites: OfficeWriteLimiter;
     /** How often a person may save the offices (PUT /ui/offices); memory only, as the appearance limiter. */
     readonly officeWrites: OfficeWriteLimiter;
+    private officeSharesInstance?;
+    /**
+     * #2636: Office share links — the live Office view for people outside the fleet, read-only, on a quick tunnel of
+     * their own (a manager and lease of its own: never the fleet's one tunnel lane nor the public link's preview tunnel).
+     */
+    get officeShares(): OfficeShareService;
+    /**
+     * #2636: a share made or ended — said in General, as a sign-in is (who, which office, for how long; never its URL).
+     * `share` null with `count`: "Revoke all".
+     */
+    officeShareNotice(event: "created" | "revoked", who: string, share: OfficeShare | null, count: number): void;
+    /** A share's owner: a person (`person:<adapter>:<user>`) still a fleet admin there; the host's own admin session stays. */
+    private officeShareOwnerCurrent;
     private officeActsInstance?;
     /** #2578: the agents' acts in the Office view (office_view / office_set), memory only; every change is `office_acts`. */
     get officeActs(): OfficeActs;
@@ -764,6 +784,21 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     /** Exact configured effect owners; this does not depend on prompt location. */
     private settingsChatAuthority;
     private promptSettingsChange;
+    private kiroMigrateDeps;
+    /**
+     * #2598 B2, migrate_kiro_instance: judge the move, then ask in General for a fleet admin's Confirm. Nothing changes
+     * here; the move runs on the Confirm (handleKiroMigrateCallback), judged again then.
+     */
+    requestKiroMigration(name: string, startFresh: boolean): Promise<{
+        ok: true;
+        text: string;
+        classic_conversation: string | null;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+    /** A fleet admin's Confirm or Cancel on a kiro move. Any fleet admin (the default nonce authorization), in General. */
+    private handleKiroMigrateCallback;
     private handleSettingsChangeCallback;
     startSettingsConfirmationControl(): Promise<void>;
     private get webToken();
@@ -1642,10 +1677,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
         remainingSeconds?: number;
         noExpiry?: true;
     };
-    /** Notices use the first explicit admin of the owning connection; never a guest/paired account. */
-    private noticeAdmin;
-    /** Best-effort private delivery. The caller retains its existing topic fallback and authority fences. */
-    private tryNoticeDm;
     confirmPublicWebLogin(info: {
         label: string;
         handle: string;
@@ -1972,6 +2003,10 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private sweepOrphanedWebUploads;
     /** Start the shared channel adapter(s) for topic mode */
     private startSharedAdapter;
+    /** How long fleet startup waits for its chat connections before it continues without the slow ones (#2642). */
+    static ADAPTER_STARTUP_WAIT_MS: number;
+    /** Track a connection's startup outcome; a failure gets the background retry. */
+    private recordAdapterStartup;
     /** Keep trying while the fleet runs, with a five-minute cap even after a long outage. */
     private scheduleAdapterRetry;
     /** One login per connection, shared by the background timer and the operator's Retry now. */
@@ -2410,6 +2445,8 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * non-identity instance leaves are canonicalized to inheritance afterward.
      */
     saveFleetConfig(explicitPatches?: RawConfigPatch[]): void;
+    /** A permission tightening is effective when its save returns, independently of the later apply job or IPC. */
+    private refreshSavedDashboardPermissions;
     /** Why the config written to `candidate` must not replace fleet.yaml, or null: it does not load, or it adds errors. */
     private savedFleetConfigProblem;
     /**
@@ -2890,6 +2927,8 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * without one); codex "unrecorded" (its rollouts don't say which login wrote them).
      */
     private usageProfileOf;
+    /** #2122 §10: a Kiro instance with a credential profile writes its classic store in that profile's home. */
+    private kiroDbPathOf;
     /** #2122: the fleet's day boundary zone — defaults.scheduler.default_timezone, else this host's. */
     usageZone(): string;
     /**
@@ -3009,7 +3048,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     /** Persistently enable advanced tips through the admin-only slash command. */
     unlockAdvancedTips(userId: string): boolean;
     /** Post one fresh nonce-armed tip in a known General channel. */
-    promptTip(generalName: string, adapter: ChannelAdapter, chatId: string, threadId?: string, directUserId?: string): Promise<"posted" | "empty" | "unavailable">;
+    promptTip(generalName: string, adapter: ChannelAdapter, chatId: string, threadId?: string): Promise<"posted" | "empty" | "unavailable">;
     private promptAdvancedTipUnlock;
     private sendTipToGeneral;
     private handleTipDismiss;
@@ -3370,6 +3409,13 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      */
     private readonly loginWindow;
     private get webLogin();
+    private browserBackendSignInsInstance;
+    private structuredLoginCleanupFailed;
+    private readonly pendingBackendSince;
+    private browserSignInOwnerCurrent;
+    /** #2599: default-account controls share the exact writer reservation with chat/profile/install. */
+    get browserBackendSignIns(): BrowserBackendSignIns;
+    private needsYouBackendSignIns;
     /** #2233: sign-ins started from the web dashboard (local admin sessions), on the same controller as chat's. */
     private webBackendLoginsInstance;
     get webBackendLogins(): WebBackendLogins;
@@ -3663,6 +3709,11 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private cliEnvPath;
     /** Read the cached CLI env for a backend (a credential profile's own, when given), or null if missing/stale/unparseable. */
     private readCliEnv;
+    /**
+     * #2122 §10: the version the CLI probe last recorded for a backend — its cache file read whatever its age (the usage
+     * reader's version gate needs the last known version, not a fresh one); null when none was recorded. Never a probe.
+     */
+    private lastRecordedCliVersion;
     /** Return cached CLI versions immediately. Refresh is started after /sysinfo is sent. */
     getBackendCliVersionSnapshot(): BackendCliVersionSnapshot;
     /** Called only after the user-visible sysinfo send/respond has settled. */