@songsid/agend 2.3.2-beta.5 → 2.3.2-beta.6

package/dist/ui/office-share-page.js

@@ -0,0 +1,116 @@
+// #2636: an Office share link's page (/o/<token> on the share tunnel, src/office-share.ts) — the live Office view for
+// people outside the fleet, read-only, with no sign-in. The same Office as Fleet → Org chart → Office (fleet-office.js),
+// fed by the share's own reads instead of the app shell's: its status and structure (/o/<t>/state, every POLL_MS while
+// the page is shown), the offices, acts and skin packs (the Office's own reads, sent to the share's addresses by the
+// lease's fetch). Nothing opens a chat, edits or writes; there is no other page. When the share ends (revoked, expired,
+// its office deleted) its reads answer 404 and the page says so and stops.
+import { html, render, useEffect, useMemo, useState } from "/assets/app-html.js";
+import { appStore, useStore } from "/assets/app-store.js";
+import { createLease } from "/assets/app-ctx.js";
+import { t, register } from "/assets/app-i18n.js";
+import { buildOrgView } from "./fleet-org.js";
+import { createTrafficStore, POLL_MS } from "./fleet-traffic.js";
+import { Office } from "./fleet-office.js";
+import { ALL_ID } from "./fleet-office-overview.js";
+
+register("share", {
+  en: { title: "Office", live: "Live view", ends: "until {0}", readOnly: "Read-only: names and states only.", ended: "This Office link has ended.", loading: "Loading the office…", offline: "Can't reach the office right now. Trying again…" },
+  "zh-TW": { title: "辦公室", live: "即時畫面", ends: "到 {0} 為止", readOnly: "唯讀：只顯示名稱與狀態。", ended: "這個辦公室連結已結束。", loading: "正在載入辦公室…", offline: "目前連不上辦公室，正在重試…" },
+});
+const to = (k, ...v) => t(`share.${k}`, ...v);
+
+/** The share's own address: `/o/<token>` (the page's path). */
+export function shareBase(pathname) {
+  const m = /^\/o\/([A-Za-z0-9_-]{43})\/?$/.exec(pathname || "");
+  return m ? `/o/${m[1]}` : null;
+}
+
+/** The Office's reads, at the share's addresses (anything else is not the share's to answer: refused here). */
+export function shareUrl(base, path) {
+  const p = String(path);
+  if (p === "/ui/offices") return `${base}/offices`;
+  if (p === "/ui/office-acts") return `${base}/office-acts`;
+  if (p === "/ui/office-skins" || p.startsWith("/ui/office-skins/") || p.startsWith("/ui/office-skins?")) return `${base}${p.slice(3)}`;
+  return null;
+}
+
+/** A lease whose fetch reads the share's addresses (createLease's timers), refusing any other. */
+export function shareLease(base, timers = globalThis) {
+  return createLease({
+    setTimeout: (...a) => timers.setTimeout(...a), clearTimeout: (h) => timers.clearTimeout(h),
+    setInterval: (...a) => timers.setInterval(...a), clearInterval: (h) => timers.clearInterval(h),
+    fetch: (path, opts) => {
+      const url = shareUrl(base, path);
+      return url ? timers.fetch(url, opts) : Promise.resolve(new Response("", { status: 404 }));
+    },
+  });
+}
+
+/** The share's /state into the app store's shape (the status frame's, as app-store.js takes it). */
+export function appFromState(d) {
+  const instances = Array.isArray(d && d.instances) ? d.instances : [];
+  const exec = {}, awaiting = {};
+  for (const i of instances) {
+    exec[i.name] = (i.execution_state !== undefined ? i.execution_state : i.state) ?? null;
+    if (i.state === "awaiting_input") awaiting[i.name] = "";
+  }
+  return { ready: true, instances, exec, awaiting, needs: Array.isArray(d && d.needs) ? d.needs : [], connection: "polling" };
+}
+
+const clock = (ms) => {
+  try { return new Intl.DateTimeFormat(undefined, { hour: "2-digit", minute: "2-digit" }).format(new Date(ms)); } catch { return ""; }
+};
+
+export function SharePage({ base, timers = globalThis, pollMs = POLL_MS }) {
+  const lease = useMemo(() => shareLease(base, timers), [base]);
+  const traffic = useMemo(createTrafficStore, []);
+  const [state, setState] = useState({ phase: "loading" });   // loading | live | ended | offline
+  const [items, setItems] = useState([]);
+  useEffect(() => {
+    let stopped = false;
+    const read = async () => {
+      try {
+        const r = await timers.fetch(`${base}/state`, { method: "GET", headers: { Accept: "application/json" } });
+        if (stopped || !lease.current()) return;
+        if (r.status === 404) { stopped = true; setState({ phase: "ended" }); return; }
+        if (!r.ok) { setState((s) => (s.phase === "live" ? s : { phase: "offline" })); return; }
+        const d = await r.json();
+        if (stopped || !lease.current()) return;
+        appStore.set((s) => ({ ...s, ...appFromState(d) }));
+        if (d.traffic && traffic.load(d.traffic)) setItems(traffic.items());
+        setState({ phase: "live", org: d.org, office: typeof d.office === "string" ? d.office : null, ends: typeof d.ends === "number" ? d.ends : null });
+      } catch { if (!stopped) setState((s) => (s.phase === "live" ? s : { phase: "offline" })); }
+    };
+    void read();
+    const hs = [
+      lease.interval(() => { if (!stopped && !globalThis.document?.hidden) void read(); }, pollMs),
+      lease.interval(() => { if (traffic.sweep()) setItems(traffic.items()); }, 1000),
+    ];
+    return () => { stopped = true; for (const h of hs) lease.clear(h); };
+  }, [lease]);
+  useEffect(() => () => lease.dispose(), [lease]);
+  const app = useStore(appStore);
+  const view = useMemo(() => (state.phase === "live" ? buildOrgView(state.org, app) : null), [state, app.instances, app.needs]);
+  if (state.phase === "ended") return html`<main class="share-page share-ended"><p>${to("ended")}</p></main>`;
+  return html`<main class="share-page">
+    <header class="share-head">
+      <strong>${to("title")}</strong>
+      <span class="muted">${to("live")}${state.ends ? ` · ${to("ends", clock(state.ends))}` : ""}</span>
+      <span class="muted share-note">${to("readOnly")}</span>
+    </header>
+    ${state.phase === "offline" ? html`<p class="note share-note" role="status">${to("offline")}</p>` : null}
+    ${view ? html`<div class="share-stage"><${Office} view=${view} traffic=${items} lease=${lease} assetUrl=${(p) => shareUrl(base, p) || p}
+      opening=${state.office === "all" ? ALL_ID : state.office || undefined} /></div>`
+      : html`<p class="muted share-loading" role="status">${to("loading")}</p>`}
+  </main>`;
+}
+
+/** Mount on the page (the module's entry): the share's address from the path, else nothing to show. */
+export function mount(root = globalThis.document?.getElementById("app")) {
+  const base = shareBase(globalThis.location?.pathname);
+  if (!root || !base) return;
+  globalThis.document.body.dataset.webTransport = "poll";
+  render(html`<${SharePage} base=${base} />`, root);
+}
+
+if (globalThis.document?.getElementById?.("app")?.dataset?.share === "1") mount();

package/dist/ui/panel-settings.js

@@ -46,6 +46,7 @@ import { startTour } from "./chat-tour.js";
 import "./chat-strings.js";
 import { AppearanceSection } from "./settings-appearance.js";
 import { GuestsCard } from "./settings-guests.js";
+import { OfficeSharesCard } from "./office-share-dialog.js";
 import { syncStage, useDraft } from "./settings-draft.js";
 import { WebAuthorityCard } from "./settings-web-authority.js";
 import { SignInList } from "./backend-signin.js";
@@ -952,10 +953,11 @@ function Classic({ ctx, search, openDialog }) {
   })}</div>`;
 }
 
-const configuredNoticeMode = (value, route) => value === false ? false : value === "dm" || route === "dm" ? "dm" : true;
-const noticeMode = (v) => v === "dm" ? "dm" : v === "false" || v === false ? false : true;
-const noticeChoices = () => [{ value: "true", label: tn("noticeTopic") }, { value: "dm", label: tn("noticeDm") }, { value: "false", label: tn("noticeOff") }];
-const noticeLabel = (v) => tn(v === "dm" ? "noticeDm" : v === false ? "noticeOff" : "noticeTopic");
+// Sign-in notices and daily tips post in the topic or not at all: the DM choice was withdrawn (hmsg-d1809f2a,
+// hmsg-3b8ac2af), and an old "dm" reads as on.
+const noticeMode = (v) => v !== "false" && v !== false;
+const noticeChoices = () => [{ value: "true", label: tn("noticeTopic") }, { value: "false", label: tn("noticeOff") }];
+const noticeLabel = (v) => tn(v ? "noticeTopic" : "noticeOff");
 
 /** General's form, from the saved defaults (`d`) and ClassicBot's (`c`). */
 function generalForm(d, c, fleet = {}, schema = {}) {
@@ -971,7 +973,7 @@ function generalForm(d, c, fleet = {}, schema = {}) {
     // #2347 §10 review: unset startup concurrency is automatic (deriveSpawnConcurrency: 2–10 by free memory and cores),
     // not 10 — an empty field, and a save that leaves it unset (the defaults merge replaces `startup` whole).
     concurrency: startup.concurrency == null ? "" : String(startup.concurrency), stagger: String(startup.stagger_delay_ms ?? 500),
-    tips: String(configuredNoticeMode(d.tips, fleet.web?.notice_delivery?.tips)),
+    tips: String(noticeMode(d.tips)),
     replyTriggers: Boolean(d.reply_triggers ?? schema.reply_triggers_default),
     classicReplyTriggers: Boolean(c.reply_triggers ?? d.reply_triggers ?? schema.reply_triggers_default), classicReplyTriggersInherit: !hasOwn(c, "reply_triggers"),
     classicBackend: c.backend || d.backend || "claude-code",
@@ -1029,7 +1031,7 @@ function General({ ctx, part = "all" }) {
     }, {
       backend: d.backend || "claude-code", model: d.model || undefined, locale: d.locale || null, auto_pause_after: d.auto_pause_after ?? 0,
       agent_mode: d.agent_mode || "mcp", tool_set: TOOL_SETS.includes(d.tool_set) ? d.tool_set : null, tool_progress: d.tool_progress ?? "off",
-      tips: configuredNoticeMode(d.tips, ctx.fleet.web?.notice_delivery?.tips), cross_instance_visibility: visibilityDefault(d), reply_triggers: Boolean(d.reply_triggers ?? schema.reply_triggers_default), reply_completion_guard: d.reply_completion_guard ?? true, log_level: d.log_level || "info",
+      tips: d.tips ?? true, cross_instance_visibility: visibilityDefault(d), reply_triggers: Boolean(d.reply_triggers ?? schema.reply_triggers_default), reply_completion_guard: d.reply_completion_guard ?? true, log_level: d.log_level || "info",
       dashboard: Object.fromEntries(DASHBOARD_FEATURES.filter((k) => k !== "office").map((k) => [k, dashboardDefault(d, k)])),
       office_access: dashboardDefault(d, "office"),
       hang_detector: { enabled: hang.enabled !== false, timeout_minutes: hang.timeout_minutes ?? HANG_TIMEOUT_DEFAULT_MINUTES },
@@ -1190,7 +1192,7 @@ function WebSection({ ctx, staged, part = "all" }) {
   // serves their reads there).
   const overPublicLink = globalThis.document?.body?.dataset?.publicLink === "1";
   const original = useMemo(() => ({
-    notify: configuredNoticeMode(web.notify_login, web.notice_delivery?.login),
+    notify: noticeMode(web.notify_login),
     echo: web.echo_to_channel ?? true,
     log: web.log_tab === true,                                                  // #1218: off by default
     usagePub: web.usage_report_on_public_link === true,                         // #2122: off by default
@@ -1353,7 +1355,9 @@ function WebSection({ ctx, staged, part = "all" }) {
       ${named || f.autoOpen ? html`<label class=${fc("check", "autoOpen")}><input id="publicAutoOpen" type="checkbox" checked=${f.autoOpen} onChange=${(e) => set("autoOpen")(e.target.checked)} /><span>${tn("publicAutoOpen")}</span><${Impact} schema=${schema} field="web.public_link.auto_open" /></label>
       <p class="note">${tn("publicAutoOpenHint")}</p><${Feedback} error=${errors.autoOpen} />` : null}
     </section>`) : null}
-    ${has("access") && !overPublicLink ? html`<${PublicTunnelToken} /><${GuestsCard} ctx=${ctx} staged=${staged} /><${WebAuthorityCard} ctx=${ctx} staged=${staged} />` : null}
+    ${has("access") && !overPublicLink ? html`<${PublicTunnelToken} />` : null}
+    ${has("access") ? html`<${OfficeSharesCard} />` : null}
+    ${has("access") && !overPublicLink ? html`<${GuestsCard} ctx=${ctx} staged=${staged} /><${WebAuthorityCard} ctx=${ctx} staged=${staged} />` : null}
     ${has("chat") ? lock(html`<section class="card"><h3>${tn("webChat")}</h3>
       <label class=${fc("check", "echo")}><input id="webEchoToChannel" type="checkbox" checked=${f.echo} onChange=${(e) => set("echo")(e.target.checked)} /><span>${tn("webEcho")}</span><${Impact} schema=${schema} field="web.echo_to_channel" /></label>
       <p class="note">${tn("webEchoHint")}</p>

package/dist/ui/settings-registry.js

@@ -33,8 +33,8 @@ const ROWS = [
   // Fleet · Agents
   ["agents.new", "agents", "#newAgentBtn", "settings.newAgent", null, ["new agent", "create", "add agent", "instance"], ["新增 agent", "建立", "新 agent"]],
   ["agents.provider-keys", "agents", ".s-provider-keys", "settings.providerKeys", "web.provider_secrets", ["api key", "provider", "openai", "anthropic", "token", "secret"], ["API 金鑰", "金鑰", "供應商", "token"]],
-  ["defaults.tips", "agent-defaults", "#g-tips", "settings.dailyTips", "defaults.tips", ["daily tips", "dm", "notices"], ["每日提示", "私訊"]],
-  ["web.notify-login", "access", "#webNotifyLogin", "settings.webNotifyLogin", "web.notify_login", ["sign in", "login", "dm", "notices"], ["登入通知", "私訊"]],
+  ["defaults.tips", "agent-defaults", "#g-tips", "settings.dailyTips", "defaults.tips", ["daily tips", "notices"], ["每日提示"]],
+  ["web.notify-login", "access", "#webNotifyLogin", "settings.webNotifyLogin", "web.notify_login", ["sign in", "login", "notices"], ["登入通知"]],
   // Fleet · Agent defaults
   ["defaults.locale", "agent-defaults", "#g-locale", "settings.language", "defaults.locale", ["language", "bot language", "reply language", "locale"], ["語言", "回覆語言", "bot 語言"]],
   ["defaults.backend", "agent-defaults", "#g-be", "settings.defaultBackend", "defaults.backend", ["backend", "cli", "claude", "codex", "kiro"], ["後端", "CLI"]],

package/dist/ui/settings-strings.js

@@ -4,10 +4,10 @@ import { register } from "/assets/app-i18n.js";
 
 register("settings", {
   en: {
-    noticeTopic: "Topic", noticeDm: "Direct message (topic fallback)", noticeOff: "Off",
+    noticeTopic: "Topic", noticeOff: "Off",
     webNotifyLogin: "Web sign-in notices", dailyTips: "Daily tips",
-    webNotifyLoginHint: "DM the signing-in operator or public-link owner; local guest notices go to the owning connection’s first configured admin. Missing account or failed DM falls back to the topic. Off suppresses operator notices only; guest and public-link security notices remain in the topic. Existing default: Topic; new fleets: DM.",
-    dailyTipsHint: "DM the General connection’s first configured admin, with topic fallback. Default: Topic. /tips still posts where invoked.",
+    webNotifyLoginHint: "Posted in the topic. Off suppresses operator notices only; guest and public-link security notices still post. Default: Topic.",
+    dailyTipsHint: "Posted in the General topic. Default: Topic. /tips still posts where invoked.",
     title: "Settings",
     myAgents: "My Agents",
     bots: "Bots",
@@ -679,10 +679,10 @@ register("settings", {
     se_externalEmojiHint: "使用其他伺服器的 emoji，bot 在要加反應的頻道需有「使用外部表情符號」權限。",
     se_unavailable: "無法使用",
     se_hint: "留空即使用預設值。預覽由 AgEnD 依 bot 實際 react 的方式解析。進度前綴不是反應，而是進度訊息開頭的 emoji。",
-    noticeTopic: "頻道", noticeDm: "私訊（失敗時改送頻道）", noticeOff: "關閉",
+    noticeTopic: "頻道", noticeOff: "關閉",
     webNotifyLogin: "網頁登入通知", dailyTips: "每日提示",
-    webNotifyLoginHint: "私訊登入的管理者或公開連結擁有者；本機訪客登入通知送給所屬連線的第一位設定管理員。帳號不明或私訊失敗時改送原頻道。關閉只停用管理者登入通知；訪客與公開連結安全通知仍送頻道。既有預設：頻道；新 fleet：私訊。",
-    dailyTipsHint: "私訊 General 所屬連線的第一位設定管理員，失敗時改送頻道。預設：頻道。/tips 仍送至呼叫的聊天室。",
+    webNotifyLoginHint: "發在頻道。關閉只停用管理者登入通知；訪客與公開連結安全通知仍會發出。預設：頻道。",
+    dailyTipsHint: "發在 General 頻道。預設：頻道。/tips 仍送至呼叫的聊天室。",
     title: "設定",
     myAgents: "我的 Agent",
     bots: "機器人",

package/dist/ui/shared/app.css

@@ -2504,3 +2504,31 @@ html.oo-immersive .p-fleet > .panel-body { z-index: 50; }
 .msg.user .msg-reactions { justify-content: flex-end; }
 .msg-reactions .reaction { display: inline-flex; align-items: center; justify-content: center; min-width: 28px; height: 24px; padding: 0 6px;
   border: 1px solid var(--border); border-radius: var(--r-full); background: var(--surface-2); font-family: var(--font-emoji); font-size: 15px; line-height: 1; }
+
+/* #2636: an Office share link's page (office-share-page.js) — the Office alone, filling the window under a one-line head. */
+.share-page { display: flex; flex-direction: column; min-height: 100dvh; background: var(--bg); color: var(--text); }
+.share-head { display: flex; flex-wrap: wrap; align-items: baseline; gap: var(--s-1) var(--s-3); padding: var(--s-3) var(--s-4); border-bottom: 1px solid var(--border); }
+.share-head .share-note { margin-left: auto; }
+.share-stage { flex: 1 1 auto; display: flex; flex-direction: column; min-height: 0; padding: var(--s-2); }
+.share-loading, .share-page > .note { padding: var(--s-4); }
+.share-ended { align-items: center; justify-content: center; padding: var(--s-6); text-align: center; }
+@media (max-width: 640px) { .share-head .share-note { margin-left: 0; flex-basis: 100%; } }
+
+/* #2636: Office share links — the Share… dialog and the open links (office-share-dialog.js; Settings → Access & security). */
+.os { display: flex; flex-direction: column; gap: var(--s-3); }
+.os > p { margin: 0; }
+.os-form { display: grid; grid-template-columns: 1fr 1fr; gap: var(--s-3); align-items: end; }
+.os-form .check, .os-form .note { grid-column: 1 / -1; margin: 0; }
+.os-made { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); }
+.os-url { flex: 1 1 260px; min-width: 0; min-height: 40px; padding: var(--s-2) var(--s-3); border: 1px solid var(--border-strong); border-radius: var(--r-sm);
+  background: var(--bg); color: var(--text); font-size: var(--fs-sm); outline: none; }
+.os-url:focus { border-color: var(--focus); box-shadow: 0 0 0 3px var(--accent-dim); }
+.os-made .note { flex-basis: 100%; margin: 0; }
+.os-head { margin: var(--s-2) 0 0; font-size: var(--fs-sm); font-weight: var(--fw-medium); color: var(--text-2); }
+.os-rows { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: var(--s-2); }
+.os-row { display: flex; align-items: center; gap: var(--s-3); padding: var(--s-2) var(--s-3); border: 1px solid var(--border); border-radius: var(--r-sm); }
+.os-what { flex: 1; min-width: 0; overflow-wrap: anywhere; font-size: var(--fs-sm); }
+.os-all { margin-top: var(--s-2); }
+.os-none { margin: 0; }
+.os-form .os-err { grid-column: 1 / -1; margin: 0; padding: var(--s-2) var(--s-3); border: 1px solid var(--danger); border-radius: var(--r-sm); }
+@media (max-width: 480px) { .os-form { grid-template-columns: 1fr; } }

package/dist/web-api.d.ts

@@ -200,6 +200,20 @@ export interface WebApiContext {
     readonly officeWrites?: OfficeWriteLimiter;
     /** #2578: the agents' live acts in the Office view (office_set); absent: /ui/office-acts is not offered. */
     readonly officeActs?: Pick<OfficeActs, "live">;
+    /** #2636: Office share links (office-share-service.ts): the open ones, making and ending one. */
+    readonly officeShares?: {
+        enabled(): boolean;
+        list(): import("./office-share.js").OfficeShare[];
+        create(opts: {
+            office: string;
+            minutes?: number;
+            text?: boolean;
+            owner: string;
+        }): Promise<import("./office-share-service.js").OfficeShareMade>;
+        revoke(id: string): number;
+    };
+    /** #2636: a share was made or ended from the page — said in General (who, which office, until when). */
+    officeShareNotice?(event: "created" | "revoked", who: string, share: import("./office-share.js").OfficeShare | null, count: number): void;
     /** #2513: the Office view's uploaded skin packs (web-office-skins/); absent: /ui/office-skins is not offered. */
     readonly officeSkins?: OfficeSkinStore;
     /** How often a person may upload or delete a skin pack (absent: no limit). */

package/dist/web-api.js

@@ -448,6 +448,95 @@ function handleAppIcon(req, res, url, ctx, method) {
     });
     return true;
 }
+/**
+ * #2636: Office share links — GET /ui/office-share (the open ones, and whether this fleet offers them), POST { office,
+ * minutes?, text? } (a new one; answers its URL once its tunnel is up, or why not), DELETE /ui/office-share/<id|all>.
+ * An admin session only — on the dashboard reached directly, or (the user, #2636 follow-up) a fleet admin signed in over
+ * the /web public link: the same check either way. Never the CLI token, a read-only session or a guest. The share's own
+ * tunnel and gateway stay apart from /web's. The person is asked again once the body is in.
+ */
+function handleOfficeShare(req, res, url, ctx, path, method) {
+    const service = ctx.officeShares;
+    if (!service) {
+        json(res, 404, { error: "Office share links are not kept on this fleet" });
+        return true;
+    }
+    const one = /^\/ui\/office-share\/([0-9a-f]{8}|all)$/.exec(path);
+    const known = (method === "GET" && path === "/ui/office-share") || (method === "POST" && path === "/ui/office-share") || (method === "DELETE" && !!one);
+    if (!known) {
+        json(res, 404, { error: "not found" });
+        return true;
+    }
+    const who = () => {
+        const verdict = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
+        if (verdict.kind !== "allow")
+            return { status: 401 };
+        if (verdict.via !== "session" || verdict.session?.tier !== "admin")
+            return { status: 403 };
+        const owner = verdict.session.owner;
+        return { person: owner ? webPersonKey(owner) : "admin-session", name: owner ? ctx.webPerson?.(owner)?.name ?? owner.userId : "admin" };
+    };
+    const refuse = (status) => json(res, status, { error: status === 401 ? WEB_TOKEN_INVALID_MESSAGE : "office_share_needs_an_admin_session" });
+    const first = who();
+    if ("status" in first) {
+        refuse(first.status);
+        return true;
+    }
+    res.setHeader("Cache-Control", "no-store");
+    if (method === "GET") {
+        // Each with its office's name as it is now (Settings' card has no office list of its own).
+        const names = new Map((ctx.officeStore?.list().offices ?? []).map(o => [o.id, o.name]));
+        json(res, 200, { enabled: service.enabled(), shares: service.list().map(s => ({ ...s, ...(names.has(s.office) ? { office_name: names.get(s.office) } : {}) })) });
+        return true;
+    }
+    if (method === "DELETE") {
+        const id = one[1];
+        const before = id === "all" ? null : service.list().find(s => s.id === id) ?? null;
+        const n = service.revoke(id);
+        if (n)
+            ctx.officeShareNotice?.("revoked", first.name, before, n);
+        json(res, n ? 200 : 404, n ? { revoked: n } : { error: "not_found" });
+        return true;
+    }
+    (async () => {
+        let body;
+        try {
+            body = await parseBody(req);
+        }
+        catch {
+            json(res, 400, { error: "Invalid JSON" });
+            return;
+        }
+        if (!permitWebContinuation(req, res, ctx))
+            return;
+        const now = who();
+        if ("status" in now) {
+            refuse(now.status);
+            return;
+        }
+        if (!body || typeof body !== "object" || Array.isArray(body) || typeof body.office !== "string"
+            || (body.minutes !== undefined && typeof body.minutes !== "number") || (body.text !== undefined && typeof body.text !== "boolean")) {
+            json(res, 400, { error: "office (string), minutes? (number), text? (boolean)" });
+            return;
+        }
+        const made = await service.create({ office: body.office, owner: now.person, ...(typeof body.minutes === "number" ? { minutes: body.minutes } : {}),
+            ...(typeof body.text === "boolean" ? { text: body.text } : {}) });
+        if (!made.ok) {
+            const status = made.error === "disabled" ? 404 : made.error === "tunnel" ? 503 : made.error === "too_many" ? 409 : 400;
+            json(res, status, { error: made.error, ...(made.reason ? { reason: made.reason } : {}) });
+            return;
+        }
+        ctx.officeShareNotice?.("created", now.name, made.share, 1);
+        json(res, 200, { share: made.share, url: made.url });
+    })().catch(err => {
+        ctx.logger.error({ err: err.message }, "Office share failed");
+        try {
+            json(res, 500, { error: "Office share failed" });
+        }
+        catch { /* already answered */ }
+    });
+    return true;
+}
 /**
  * #2513: the Office view's skin packs (web-office-skins.ts). The reads are the offices' (GET /ui/offices): whoever may
  * open the org chart, the public link too (its manifest lists them; a guest's routes do not): the list, a pack's
@@ -2322,6 +2411,8 @@ export function handleWebRequest(req, res, url, ctx) {
     }
     if (path === "/ui/office-skins" || path.startsWith("/ui/office-skins/"))
         return handleOfficeSkins(req, res, url, ctx, path, method);
+    if (path === "/ui/office-share" || path.startsWith("/ui/office-share/"))
+        return handleOfficeShare(req, res, url, ctx, path, method);
     // ── #1630: avatars and Discord server emoji, same-origin (the page never loads a platform's CDN; img-src stays 'self') ──
     const imageMatch = path.match(/^\/ui\/img\/(bot|avatar|emoji)\/([^/]+)$/);
     if (method === "GET" && imageMatch) {