@songsid/agend 2.3.2-beta.5 → 2.3.2-beta.7

package/dist/general-knowledge/skills/web-dashboard/SKILL.canvas-worker-off.md

@@ -281,6 +281,15 @@ default; disabled when everyone is in an office) adds the instances in no office
 only. Hover and click work across
 tiles; a tile's label, or a double-click on it, opens that office; traffic between offices flies straight across.
 Edit offices and Edit layout wait for a single office.
+**Share…** (#2636; an admin session, on the dashboard reached directly or over the public link — never read-only or a guest; the URL shows only to its maker, in the dialog) makes an Office share
+link: anyone who opens it watches one office (or **All offices**) live, read-only, with no sign-in — names, identity
+colours and states, every 5 s; no chat, no clicks into anything, no settings; agents' `office_set` lines only when
+**Include agents' own status lines** is ticked; hidden instances never. 1 h by default, 15 min to 24 h
+(`web.office_share.max_hours`); at most 10 open. Its own quick tunnel (`https://<random>.trycloudflare.com/o/<token>`)
+starts with the first link and stops with the last; the token is shown once. There is no chat command: the button only. Open links and **Revoke** are in **Settings → Access
+& security → Office share links**; each made or revoked link is announced in General (never its URL). A Cloudflare 429
+says to try again in a few minutes (no retry). `web.office_share.enabled: false` turns it off and ends open links.
+
 The Office fills the Fleet panel and moves like the Canvas (#2540): drag to pan, the wheel or a pinch to zoom,
 **+** / **−** / **Fit** / **Fill** at the top right (the zoom shown as a percentage above them) or the `+ - 0` keys
 (with the office focused), an overview at the bottom right to jump (not on a phone). It takes the whole panel: the
@@ -300,6 +309,8 @@ A pack may add a `foreground` (a 16:9 PNG over the whole scene, zones packs only
 and items in the air, below name tags, bubbles and "+N" — door frames, pillars, table fronts that hide whoever walks
 behind them. A furniture item's `depth` may be `"y"`: drawn among the people by base y (whoever stands lower is in
 front). Numeric depths keep their meaning (under 1000 under the people, 1000 and up over them).
+A pack may set `"straight": true` (#2634): each diagonal leg of a walk becomes an L (across, then up or down), so the
+three walking strips always fit; lay its graph out with horizontal and vertical edges and the corners land on the aisles.
 
 **Live traffic** (**Live** switch, on by default; **Key** in the toolbar explains it, as a strip above the canvas): a line for each message between instances.
 Colour by kind — task (delegate_task) purple, send/query/update teal, report pink, broadcast orange; between teams
@@ -476,6 +487,7 @@ opencode: no dashboard sign-in. Config: `web_terminal.*` (as `/login`).
 | Agent mode, Tool set | `agent_mode`, `tool_set` | agent |
 | Tool progress; Bot-to-bot messages in topics (full / summary / hidden); Log level | `tool_progress`, `cross_instance_visibility`, `log_level` | now |
 | Require a delivered reply | `reply_completion_guard` | now |
+| Daily tips (Topic / Off; always posted in General, never by DM) | `tips` | now |
 | Lightweight mode, Fallback model | `lightweight`, `model_failover` | agent |
 | System prompt | `systemPrompt` | agent |
 | Tags | `tags` | now |
@@ -510,11 +522,12 @@ progress, reply guard, **ClassicBot admins**, **Allowed guilds**.
 | Terminal session minutes (1–20) | `web_terminal.ttl_minutes` |
 | Web echo | `web.echo_to_channel` |
 | Log tab: each agent's steps | `web.log_tab` |
+| Web sign-in notices (Topic / Off; never by DM, guest and public-link notices always post) | `web.notify_login` |
 | Offer temporary public web links | `web.public_link.allow_public` |
 | Public link minutes (1–480; with a fixed hostname 0–10080, 0 = no expiry) | `web.public_link.ttl_minutes` |
 | Reopen the public link when AgEnD starts (fixed hostname only) | `web.public_link.auto_open` |
 | Tunnel protocol (http2 / quic / auto) | `web.public_link.protocol` |
-Shown read-only ("Set in fleet.yaml"): `web.allowed_hosts`, `view_access`, `notify_login`, `preview`, `preview_port`,
+Shown read-only ("Set in fleet.yaml"): `web.allowed_hosts`, `view_access`, `preview`, `preview_port`,
 `preview_origin`, `preview_on_public_link`, `usage_panel`, `search` (`retention_days`: unset and 0 = no age limit,
 300,000-row cap), `provider_secrets`, `upload_max_file_mb`,
 `upload_max_total_mb`, `web_terminal.bind`, `web_terminal.tunnel`.

package/dist/general-knowledge/skills/web-dashboard/SKILL.md

@@ -296,6 +296,15 @@ default; disabled when everyone is in an office) adds the instances in no office
 only. Hover and click work across
 tiles; a tile's label, or a double-click on it, opens that office; traffic between offices flies straight across.
 Edit offices and Edit layout wait for a single office.
+**Share…** (#2636; an admin session, on the dashboard reached directly or over the public link — never read-only or a guest; the URL shows only to its maker, in the dialog) makes an Office share
+link: anyone who opens it watches one office (or **All offices**) live, read-only, with no sign-in — names, identity
+colours and states, every 5 s; no chat, no clicks into anything, no settings; agents' `office_set` lines only when
+**Include agents' own status lines** is ticked; hidden instances never. 1 h by default, 15 min to 24 h
+(`web.office_share.max_hours`); at most 10 open. Its own quick tunnel (`https://<random>.trycloudflare.com/o/<token>`)
+starts with the first link and stops with the last; the token is shown once. There is no chat command: the button only. Open links and **Revoke** are in **Settings → Access
+& security → Office share links**; each made or revoked link is announced in General (never its URL). A Cloudflare 429
+says to try again in a few minutes (no retry). `web.office_share.enabled: false` turns it off and ends open links.
+
 The Office fills the Fleet panel and moves like the Canvas (#2540): drag to pan, the wheel or a pinch to zoom,
 **+** / **−** / **Fit** / **Fill** at the top right (the zoom shown as a percentage above them) or the `+ - 0` keys
 (with the office focused), an overview at the bottom right to jump (not on a phone). It takes the whole panel: the
@@ -315,6 +324,8 @@ A pack may add a `foreground` (a 16:9 PNG over the whole scene, zones packs only
 and items in the air, below name tags, bubbles and "+N" — door frames, pillars, table fronts that hide whoever walks
 behind them. A furniture item's `depth` may be `"y"`: drawn among the people by base y (whoever stands lower is in
 front). Numeric depths keep their meaning (under 1000 under the people, 1000 and up over them).
+A pack may set `"straight": true` (#2634): each diagonal leg of a walk becomes an L (across, then up or down), so the
+three walking strips always fit; lay its graph out with horizontal and vertical edges and the corners land on the aisles.
 
 **Live traffic** (**Live** switch, on by default; **Key** in the toolbar explains it, as a strip above the canvas): a line for each message between instances.
 Colour by kind — task (delegate_task) purple, send/query/update teal, report pink, broadcast orange; between teams
@@ -491,6 +502,7 @@ opencode: no dashboard sign-in. Config: `web_terminal.*` (as `/login`).
 | Agent mode, Tool set | `agent_mode`, `tool_set` | agent |
 | Tool progress; Bot-to-bot messages in topics (full / summary / hidden); Log level | `tool_progress`, `cross_instance_visibility`, `log_level` | now |
 | Require a delivered reply | `reply_completion_guard` | now |
+| Daily tips (Topic / Off; always posted in General, never by DM) | `tips` | now |
 | Lightweight mode, Fallback model | `lightweight`, `model_failover` | agent |
 | System prompt | `systemPrompt` | agent |
 | Tags | `tags` | now |
@@ -525,11 +537,12 @@ progress, reply guard, **ClassicBot admins**, **Allowed guilds**.
 | Terminal session minutes (1–20) | `web_terminal.ttl_minutes` |
 | Web echo | `web.echo_to_channel` |
 | Log tab: each agent's steps | `web.log_tab` |
+| Web sign-in notices (Topic / Off; never by DM, guest and public-link notices always post) | `web.notify_login` |
 | Offer temporary public web links | `web.public_link.allow_public` |
 | Public link minutes (1–480; with a fixed hostname 0–10080, 0 = no expiry) | `web.public_link.ttl_minutes` |
 | Reopen the public link when AgEnD starts (fixed hostname only) | `web.public_link.auto_open` |
 | Tunnel protocol (http2 / quic / auto) | `web.public_link.protocol` |
-Shown read-only ("Set in fleet.yaml"): `web.allowed_hosts`, `view_access`, `notify_login`, `preview`, `preview_port`,
+Shown read-only ("Set in fleet.yaml"): `web.allowed_hosts`, `view_access`, `preview`, `preview_port`,
 `preview_origin`, `preview_on_public_link`, `usage_panel`, `search` (`retention_days`: unset and 0 = no age limit,
 300,000-row cap), `provider_secrets`, `upload_max_file_mb`,
 `upload_max_total_mb`, `web_terminal.bind`, `web_terminal.tunnel`.

package/dist/instance-lifecycle.d.ts

@@ -201,6 +201,8 @@ export interface IncidentEventSource {
     isCodexLivePane?(): Promise<boolean>;
     /** Existing occurrence count used to preserve Codex capacity history on restart. */
     getErrorPatternOccurrenceCount?(type: "model_error", pattern: RegExp): number;
+    /** #2648: kiro only — what a model error on its current launch should do (restart once, say once, or nothing). */
+    kiroModelError?(): import("./backend/kiro-retired-model.js").KiroModelErrorVerdict | null;
     /** Present on real daemons; hang buttons attach only when it returns one. */
     getHangDetector?(): {
         on(event: string, handler: (...args: any[]) => void): unknown;

package/dist/instance-lifecycle.js

@@ -1012,15 +1012,30 @@ export class InstanceLifecycle {
                     return;
                 }
             }
+            // #2648: a kiro model error — the resumed conversation's saved model retired, or the instance's own model
+            // unavailable. Restart once on kiro's default (no model of its own), else say it once; never on every start.
+            const kiroVerdict = data.type === "model_error" && this.backendOf(name) === "kiro-cli" ? daemon.kiroModelError?.() ?? null : null;
+            if (kiroVerdict?.kind === "restart") {
+                this.ctx.logger.warn({ name, model: kiroVerdict.model }, "kiro model unavailable on a resumed conversation — restarting once on kiro's default model");
+                this.ctx.clearCancelButton(name);
+                this.ctx.restartSingleInstance(name).catch(err => this.ctx.logger.error({ err, name }, "kiro model-switch restart failed"));
+                return;
+            }
+            if (kiroVerdict?.kind === "quiet") {
+                this.ctx.logger.info({ name }, "kiro model unavailable — already said for this conversation and model");
+                return;
+            }
             const emoji = data.type === "rate_limit" || data.type === "timeout" ? "⏳" : data.type === "auth_error" ? "🔑" : "⚠️";
-            const incidentMessage = data.type === "model_error" && this.backendOf(name) === "claude-code"
-                ? (() => {
-                    const liveModel = readStatuslineModel(this.ctx.dataDir, name);
-                    return liveModel
-                        ? t("inst.claude_model_fallback", liveModel)
-                        : t("inst.claude_model_unavailable");
-                })()
-                : data.message;
+            const incidentMessage = kiroVerdict?.kind === "notify"
+                ? (kiroVerdict.configured ? t("kiro.model_unavailable_configured", name, kiroVerdict.configured) : t("kiro.model_unavailable_once", name))
+                : data.type === "model_error" && this.backendOf(name) === "claude-code"
+                    ? (() => {
+                        const liveModel = readStatuslineModel(this.ctx.dataDir, name);
+                        return liveModel
+                            ? t("inst.claude_model_fallback", liveModel)
+                            : t("inst.claude_model_unavailable");
+                    })()
+                    : data.message;
             const notificationTarget = this.ptyErrorNotificationTarget(name);
             // Auth failures are a property of the BACKEND's shared credentials, not of
             // one instance: every instance on that CLI fails at once, and one re-login