@songsid/agend 2.3.2 → 2.3.3-beta.10

package/dist/fleet-manager.js

@@ -27,6 +27,7 @@ import { clearPublicLinkOwner, readPublicLinkOwner, writePublicLinkOwner } from
 import { PUBLIC_PREVIEW_FRAME_SRC, PUBLIC_PREVIEW_TUNNEL_DIR, PublicPreview, publicPreviewWanted } from "./public-preview.js";
 import { CloudflaredProvider } from "./tunnel/cloudflared.js";
 import { ensureCloudflared } from "./tunnel/cloudflared-install.js";
+import { namedTestLane, runNamedLinkTest } from "./tunnel/named-link-test.js";
 import { OFFICE_SHARE_TUNNEL_DIR, OfficeShareService } from "./office-share-service.js";
 import { ALL_OFFICES, WHOLE_FLEET } from "./office-share.js";
 import { TunnelPurposeLane } from "./tunnel/purpose-lane.js";
@@ -52,7 +53,7 @@ import { applyKiroMigration, kiroMigrationPrompt, planKiroMigration } from "./ki
 import { fleetLabel } from "./fleet-label.js";
 import { beginFullRestartProgress as persistFullRestartProgress, beginUpdateProgress as persistUpdateProgress, clearUpdateMarker, isUpdateInProgress, readUpdateProgress, sameUpdateMarker, setUpdateProgressStage, updateMarkerIdentity, updateProgressOperation, updateReceiptOf, } from "./update-marker.js";
 import { formatUpdateProgress } from "./update-progress.js";
-import { sdNotify, sdNotifyBlocking, setSdNotifyWarn } from "./sd-notify.js";
+import { sdNotify, sdNotifyBlocking, setSdNotifyWarn, startSdWatchdog } from "./sd-notify.js";
 import { StartupMemoryDeadline, fleetStopConcurrency } from "./startup-memory-deadline.js";
 import { readFleetMemory } from "./process-memory.js";
 import { MemoryPressure } from "./memory-pressure.js";
@@ -67,7 +68,7 @@ const __dirname = dirname(__filename);
 const DEFAULT_OPEN_ACCESS = { mode: "open", allowed_users: [], max_pending_codes: 0, code_expiry_minutes: 0 };
 import { STATUS_EMOJI_CONFIG_KEYS, STATUS_EMOJI_KEYS, STATUS_EMOJI_SUGGESTIONS, TELEGRAM_REACTION_EMOJIS, builtinStatusEmojis, customEmojiValue, emojiImageUrl, normalizeEmoji, previewStatusEmojis, reactionForm, reactionMatchKey, resolveStatusEmojis, statusAvoidList, statusEmojiProblem, statusMatchKey, statusMatchKeys, textForm, } from "./status-emojis.js";
 import { isProbeableRouteTarget } from "./fleet-context.js";
-import { getEffectiveInstanceDefaults, loadFleetConfig, loadRawFleetConfig, DEFAULT_COST_GUARD, DEFAULT_DAILY_SUMMARY, DEFAULT_INSTANCE_CONFIG, autoGeneralInstanceConfig } from "./config.js";
+import { getEffectiveInstanceDefaults, loadFleetConfig, loadRawFleetConfig, loadFleetConfigSource, loadRawFleetConfigSource, DEFAULT_COST_GUARD, DEFAULT_DAILY_SUMMARY, DEFAULT_INSTANCE_CONFIG, autoGeneralInstanceConfig } from "./config.js";
 import { EventLog } from "./event-log.js";
 import { binaryProbe } from "./binary-probe.js";
 import { AVAILABILITY_STALE_MS, BackendAvailabilityStore, hostAvailabilityProbes } from "./backend-availability.js";
@@ -80,6 +81,7 @@ import { TmuxManager } from "./tmux-manager.js";
 import { AccessManager } from "./channel/access-manager.js";
 import { IpcClient } from "./channel/ipc-bridge.js";
 import { usesChannelAddress } from "./channel/mcp-tools.js";
+import { ParkedNotices, PARKED_NOTICE_LEDGER_FILE } from "./parked-notices.js";
 import { formatFleetTime } from "./tz-utils.js";
 import { createAdapter } from "./channel/factory.js";
 import { isWebChannelEcho, WEB_ECHO_PREFIX } from "./web-channel-echo.js";
@@ -94,13 +96,12 @@ import { processAttachments } from "./channel/attachment-handler.js";
 import { routeToolCall } from "./channel/tool-router.js";
 import { Scheduler } from "./scheduler/index.js";
 import { boardActivity, boardCardLimit, boardToolAction } from "./task-board-tool.js";
-import { TaskBoardWaker } from "./task-board-waker.js";
+import { TaskBoardWaker, namesCard } from "./task-board-waker.js";
 import { TaskBoardError, waitsForPerson, wrapUpGap } from "./scheduler/task-board.js";
 import { escapeTelegramHtml, scheduleClock, scheduleRetryLabel } from "./scheduler/retry-label.js";
 import { DEFAULT_SCHEDULER_CONFIG } from "./scheduler/index.js";
 import { TopicCommands, saveCommandForBackend, parseSaveFilename, parsePauseWakeCommand, parseCompactCommand, SAVE_FILENAME_RE, resolveInstanceContext, forgetInstanceContext, readStatuslineJson, statuslineModel } from "./topic-commands.js";
 import { DailySummary } from "./daily-summary.js";
-import { TaskBoardSummaryClock, buildSummary, isQuiet, renderSummary, summaryMarkFile, summaryTime } from "./task-board-summary.js";
 import { WebhookEmitter } from "./webhook-emitter.js";
 import { TmuxControlClient } from "./tmux-control.js";
 import { safeHandler } from "./safe-async.js";
@@ -177,13 +178,6 @@ import { OfficeSkinStore } from "./web-office-skins.js";
 import { OfficeActs } from "./web-office-acts.js";
 import { OFFICE_PACK_TOOLS, OfficePackTools } from "./web-office-pack-tools.js";
 import { WebAppearance } from "./web-appearance.js";
-import { WebEffectLibrary } from "./web-effect-library.js";
-import { WebEffectTrials } from "./web-effect-trials.js";
-import { WebEffectService } from "./web-effect-service.js";
-import { WebEffectProfiles } from "./web-effect-profiles.js";
-import { WebEffectTools, WEB_EFFECT_TOOLS } from "./web-effect-tools.js";
-import { resolveEffectParams } from "./web-effect.js";
-import { cw1EffectChecker } from "./web-mod-bundle.js";
 import { effectiveAppearanceLimits } from "./web-appearance-limits.js";
 import { WEB_NAME_FALLBACK, safeWebName, validateWebName, webNameInUse, webPersonKey } from "./web-profile.js";
 import { ReplyButtonStore, parseReplyButtons, replyButtonClickText, replyButtonsFallbackText, REPLY_BUTTON_PREFIX } from "./reply-buttons.js";
@@ -196,7 +190,6 @@ import { autoIdentityColor } from "./web-identity-color.js";
 import { AppearanceTools } from "./web-appearance-tools.js";
 import { cardVersion, resolveCard } from "./web-card.js";
 import { ModStore } from "./web-mod-store.js";
-import { AgentMods } from "./web-mod-agent.js";
 import { downloadStickerImage } from "./channel/sticker-download.js";
 import { WebImageCache, imageMimeForFile, WEB_IMAGE_MAX_AGE_MS, WEB_IMAGE_MAX_BYTES, WEB_IMAGE_RETRY_MS } from "./web-images.js";
 import { accentColor, avatarFor, ownBotConnections } from "./instance-avatar.js";
@@ -215,7 +208,7 @@ import { crossInstanceVisibility, runVisibilityCommand, xmsgVisibility } from ".
 import { SEARCH_RETENTION_DAYS, SearchIndex } from "./search/search-index.js";
 import { chatDoc, taskDoc, xmsgDoc } from "./search/search-docs.js";
 import { WebSettingsTools } from "./web-settings-tools.js";
-import { bindGuestRequest, guestRouteDecision } from "./web-guest-access.js";
+import { GUEST_COMMAND_RUNS, GUEST_PREF_WRITES, GUEST_SEARCHES, bindGuestRequest, guestRouteDecision } from "./web-guest-access.js";
 import { GUEST_ROOM_TICK_MS, GuestRoomMembership, guestGroupRooms } from "./web-guest-rooms.js";
 import { Delegations, TrafficLog, trafficItem } from "./fleet-traffic.js";
 import { installedChannel, updateNoticeKey } from "./update-check.js";
@@ -235,6 +228,7 @@ import { remoteCardAction, remoteCardChoiceLabel, remoteCardOutcomeText, remoteC
 import { recentChatContext } from "./log-tail.js";
 import { describeSignalSource, recordInternalRequest, withOrigin } from "./fleet-control-audit.js";
 import { handleAgentRequest, ToolNotPermittedError } from "./agent-endpoint.js";
+import { ConfigHistory, ConfigSyntaxError, configIssueText } from "./config-history.js";
 import { ClassicChannelManager, classicWebEchoOn, getClassicBackendChoices, inferClassicChannelType, isSelectableClassicBackend, readClassicLastActivityAt, readClassicRoomNames } from "./classic-channel-manager.js";
 import { assertExplicitInstanceRemoval } from "./instance-removal.js";
 import { KNOWN_BACKENDS, validateFleetConfig } from "./config-validator.js";
@@ -254,20 +248,19 @@ import { isSetupComplete, markSetupComplete } from "./setup-marker.js";
 import { manualCleanupMessage, reapStaleTunnel } from "./tunnel/lease.js";
 import { buildToolPermissionsNotice } from "./tool-permissions-notice.js";
 import { NeedsYouHub } from "./needs-you-hub.js";
-import { WEB_CHAT_NOTICE, claimNotice, hasWebChat, releaseNotice, upgradeNoticesPath } from "./upgrade-notices.js";
 import { GENERAL_NAME, GENERAL_PAUSE_ERROR, adoptGeneralByName, freeGeneralName, isGeneralInstance } from "./general-instance.js";
 import { buildOrgChart } from "./web-org.js";
 import { topMemoryHogs } from "./memory-hogs.js";
 import { GENERAL_POINTING_REFUSALS, SNOWFLAKE, hasPlaceRefs, placeRef, webRoute, webTextLinks, placeSuffix, renderPlaceRefs, stripPlaceRefs, topicUrl, worldPlaceOf } from "./topic-link.js";
 import { CacheService, cacheWindow } from "./cache-service.js";
-import { runWebCommand } from "./web-commands.js";
+import { guestWebCommands, runWebCommand } from "./web-commands.js";
 import { CompactWatch, launchIdentity } from "./compact-watch.js";
 import { agyLegacyAgentsFile, danglingSymlink, migrateAgyAgentsFile } from "./backend/antigravity.js";
 import { claudeConfigDirFor, claudeProjectKey } from "./backend/claude-code.js";
 import { sharedRolloutIndex } from "./rollout-index.js";
 import { TASK_BOARD_ON_NOTICE, dashboardRefusalIn, taskBoardSwitchedOn } from "./dashboard-permissions.js";
 import { mayUseTool, resolveToolSet, scheduleOpRefusal, toolForIpcType, toolRefusedMessage, } from "./tool-permissions.js";
-import { authorizeSession, decideWebGate, loadOrCreateWebToken, readWebToken, sessionCookieUpgrade } from "./web-auth.js";
+import { authorizeSession, decideWebGate, loadOrCreateWebToken, readSessionCookies, readWebToken, sessionCookieUpgrade } from "./web-auth.js";
 import { bypassesWebGate, handleAuthRequest, serveGuestRefusedPage, serveSigninPage } from "./auth-api.js";
 import { isWebPageNavigation } from "./web-shell-routes.js";
 import { guestSessionPolicy, localSessionPolicy, tokenEpoch, WebSessionStore } from "./web-session.js";
@@ -280,10 +273,8 @@ import { decisionListAnswer } from "./decision-list.js";
 import { CodeRequestLimiter, ReturningDevices } from "./web-returning-device.js";
 import { allowedHostNames, applyWebSecurityHeaders, hostnameOf, isHostAllowed, LOOPBACK_HOST_NAMES, WEB_HOST_REJECTED_MESSAGE } from "./web-host-guard.js";
 import { createPreviewListener, normalizeOrigin, previewAvailability, previewSettings } from "./web-preview.js";
-import { canvasWorkerEnabled, isCanvasWorkerTool, CANVAS_WORKER_EXPERIMENTAL_MESSAGE } from "./web-experimental.js";
-import { isCanvasWorkerHttpPath } from "./web-experimental-http.js";
+import { isCanvasWorkerTool, CANVAS_WORKER_EXPERIMENTAL_MESSAGE } from "./web-experimental.js";
 import { bundledSkillContents } from "./bundled-skills.js";
-import { createEffectBootstrap } from "./web-effect-bootstrap.js";
 import { fleetLevelDifferences, fleetLevelSignature, appendedConnections } from "./fleet-level-config.js";
 import { checkSelfRestartAllowance, recordSelfRestartAttempt } from "./self-restart-limit.js";
 import { SecretStore } from "./secret-store.js";
@@ -612,7 +603,6 @@ export function deriveSpawnConcurrency(freeMemMB, cores) {
 /** #926: how often reply obligations are checked, the owner-reminder grace, and the default overdue window. */
 const REPLY_OBLIGATION_SWEEP_MS = 30_000;
 const REPLY_REMINDER_GRACE_MS = 60_000;
-const DEFAULT_REPLY_OVERDUE_MINUTES = 15;
 /**
  * The filter `list_emojis` and `list_stickers` take (#1226). Values may come from the agent CLI as strings, so a
  * limit is read as a number and the flags accept "true". No limit means all of them — never zero.
@@ -676,32 +666,6 @@ export class FleetManager {
             laneFree: name => !this.isInstanceRestarting(name) && !this.activeDurableTargets.has(name)
                 && outbox.countForTarget(name, ["queued", "retry_wait", "delivering", "submission_started", "reconciliation_pending"]) === 0,
             admit: (episode, tasks, advisory) => outbox.admitWorkingRecovery(episode, buildWorkingRecoveryPrompt(tasks, this.workingRecoveryCause, advisory), advisory),
-            summary: (group, rows) => {
-                const general = this.findGeneralInstance();
-                if (!general || !this.daemons.has(general))
-                    return;
-                // Our own informational notice must not supersede General's recovery
-                // as unrelated pending work before it crosses the input boundary.
-                const generalEpisode = store.get(general);
-                if (generalEpisode?.outcome === "admitted" && generalEpisode.deliveryId) {
-                    const state = outbox.get(generalEpisode.deliveryId)?.state;
-                    if (!state || !["delivered", "uncertain", "failed", "cancelled"].includes(state))
-                        return;
-                }
-                const deferredAdvisories = rows.filter(row => row.outcome === "deferred"
-                    && (this.daemons.get(row.instance)?.getWorkingRecoveryState?.().background ?? null) === null)
-                    .map(row => `${row.instance} (${row.reason})`);
-                const posted = store.summary(group, () => outbox.admitSystemNotice(general, `working-recovery-summary:${group}`, `[system:working-recovery-summary] Observed cause: unknown interruption${this.workingRecoveryCause === "unknown_interruption" ? "" : `; prior requested action: ${this.workingRecoveryCause}`}. ${rows.length} interrupted instances; continuation queued ${rows.filter(r => r.outcome === "admitted").length}, excluded ${rows.filter(r => r.outcome === "excluded").length}, still deferred ${rows.filter(r => r.outcome === "deferred").length}. ${rows.filter(r => r.reason === "advisory_background_unknown").length ? `Advisory, background unknown: ${rows.filter(r => r.reason === "advisory_background_unknown").map(r => r.instance).join(", ")}. ` : ""}${deferredAdvisories.length ? `Deferred advisory candidates (background unknown; all other gates still apply): ${deferredAdvisories.join(", ")}. ` : ""}Details are in the Log. Deferred work remains eligible; no action or confirmation is requested.`));
-                if (posted) {
-                    const counts = { interrupted: rows.length, queued: rows.filter(row => row.outcome === "admitted").length,
-                        excluded: rows.filter(row => row.outcome === "excluded").length, deferred: rows.filter(row => row.outcome === "deferred").length };
-                    const requestedAction = this.workingRecoveryCause === "unknown_interruption" ? null : this.workingRecoveryCause;
-                    this.logger.info({ group, ...counts, observedCause: "unknown_interruption", requestedAction }, "Interrupted work recovery summary queued for General");
-                    this.eventLog?.insert(general, "working_state", { reason: "recovery_summary", group, ...counts,
-                        observedCause: "unknown_interruption", requestedAction,
-                        message: `Interrupted work summary queued for General: ${counts.interrupted} interrupted; ${counts.queued} queued, ${counts.excluded} excluded, ${counts.deferred} deferred.` });
-                }
-            },
             log: (episode, outcome, reason) => {
                 const requestedAction = this.workingRecoveryCause === "unknown_interruption" ? null : this.workingRecoveryCause;
                 this.logger.info({ name: episode.instance, episode: episode.key, outcome, reason,
@@ -825,8 +789,6 @@ export class FleetManager {
     costGuard = null;
     statuslineWatcher;
     dailySummary = null;
-    /** #2246 step 3: the task board's daily summary for the person (task-board-summary.ts). */
-    taskBoardSummary = null;
     dailyTipScheduler = null;
     /** The task board's wakes (step 2): an instance hears when someone else changes a card it owns or handed out. */
     taskBoardWaker = null;
@@ -937,6 +899,12 @@ export class FleetManager {
     kiroMigrationRuns = new Map();
     /** #1386 "Needs you": the list, its live chat messages and Acknowledge. Started with the fleet (finishStartup). */
     needsYou = null;
+    configHistory = null;
+    configHistoryTimer = null;
+    loadedFleetSource = null;
+    getConfigHistory() {
+        return this.configHistory ??= new ConfigHistory(this.dataDir, () => this.needsYou?.poke(), message => this.logger.warn(message));
+    }
     /** When the fleet first saw an instance crashed, for its "Needs you" age; cleared when it is not. */
     needsCrashedAt = new Map();
     /** Pause reason/time read from the marker, per paused instance; dropped on any attention change of it, and at most
@@ -1012,11 +980,6 @@ export class FleetManager {
     collabInstances = new Set();
     // Health endpoint
     healthServer = null;
-    /** #2118: independent of HTML preview availability/port; fixed bootstrap only, no effect resources. */
-    effectBootstrap = createEffectBootstrap();
-    /** Fixed trusted document coherence, independent of the HTML preview listener; never a resource grant. */
-    get effectBoot() { return this.effectBootstrap.boot; }
-    canvasWorkerEnabled() { return canvasWorkerEnabled(this.fleetConfig?.web); }
     healthServerDrain = null;
     /** #1306: the preview listener (health_port + 1 by default), and whether it is listening. */
     previewListener = null;
@@ -1195,7 +1158,7 @@ export class FleetManager {
     /** #1629: every instance's theme, placements, assets and lock (web-themes.json). */
     get themeStore() {
         // r4.1 Q3 (b): the card's limits are read from fleet.yaml at each upload (a change applies without a restart).
-        return (this.themeStoreInstance ??= new ThemeStore(this.dataDir, { limits: () => effectiveAppearanceLimits(this.fleetConfig?.web?.appearance).limits, effectsDropped: ids => this.effectLibrary.collectUnreferenced(ids) }));
+        return (this.themeStoreInstance ??= new ThemeStore(this.dataDir, { limits: () => effectiveAppearanceLimits(this.fleetConfig?.web?.appearance).limits }));
     }
     officeStoreInstance;
     /** Fleet → Org chart → Office: the offices people made (web-offices.json, beside web-themes.json). */
@@ -1207,6 +1170,12 @@ export class FleetManager {
     officeSkinWrites = new OfficeWriteLimiter(undefined, { perWindow: 10, windowMs: 60_000 });
     /** How often a person may save the offices (PUT /ui/offices); memory only, as the appearance limiter. */
     officeWrites = new OfficeWriteLimiter();
+    /** #2855: a guest's preference saves, per account. */
+    guestPrefWrites = new OfficeWriteLimiter(undefined, GUEST_PREF_WRITES);
+    /** #2855: a guest's commands, per account. */
+    guestCommandRuns = new OfficeWriteLimiter(undefined, GUEST_COMMAND_RUNS);
+    /** #2855: a trusted guest's searches, per account. */
+    guestSearches = new OfficeWriteLimiter(undefined, { perWindow: GUEST_SEARCHES.perWindow, windowMs: GUEST_SEARCHES.windowMs });
     officeSharesInstance;
     /**
      * #2636: Office share links — the live Office view for people outside the fleet, read-only, on a quick tunnel of
@@ -1402,96 +1371,16 @@ export class FleetManager {
         }
         catch { /* the next frame carries the rev */ } }));
     }
-    effectLibraryInstance;
-    effectTrialsInstance;
-    /** Lazy, single-owner storage. Register every host reference source before any operation can collect. */
-    get effectLibrary() {
-        if (!this.effectLibraryInstance) {
-            const library = new WebEffectLibrary(this.dataDir);
-            // Providers are lazy; publish only after every registration succeeds.
-            library.registerReferenceSource("themes", () => {
-                if (!this.themeStore.readable())
-                    throw new Error("themes_unreadable");
-                return this.themeStore.placedEffects().flatMap(row => row.ids.map(id => ({ id, holder: `instance:${row.name}` })));
-            });
-            library.registerReferenceSource("prefs", () => this.webPrefs.ownerEffectReferences());
-            library.registerReferenceSource("mods", () => {
-                const mods = this.mods.list();
-                if (mods.unreadable)
-                    throw new Error("mods_unreadable");
-                return mods.mods.flatMap(mod => mod.effects.map(effect => ({ id: effect.id, holder: `mod:${mod.id}` })));
-            });
-            this.effectTrialsInstance = new WebEffectTrials({ library, known: name => this.isKnownInstance(name) });
-            this.effectLibraryInstance = library;
-        }
-        return this.effectLibraryInstance;
-    }
-    /** Volatile Try offers and session-bound runs share this library. */
-    get effectTrials() { if (!this.effectTrialsInstance)
-        void this.effectLibrary; return this.effectTrialsInstance; }
-    effectProfilesInstance;
-    get effectProfiles() { return (this.effectProfilesInstance ??= new WebEffectProfiles(this.dataDir)); }
-    effectServiceInstance;
-    get effectService() {
-        return (this.effectServiceInstance ??= new WebEffectService({ library: this.effectLibrary, themes: this.themeStore, profiles: this.effectProfiles, prefs: this.webPrefs, trials: this.effectTrials,
-            known: name => this.isKnownInstance(name), changed: () => { try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { /* next status carries revision */ } } }));
-    }
-    effectToolsService;
-    /** Caller identity is supplied only by the owned IPC connection / verified agent endpoint token. */
-    get effectTools() {
-        return (this.effectToolsService ??= new WebEffectTools({
-            library: this.effectLibrary, limiter: this.webAppearance.limiter,
-            authorize: (name, buckets) => !this.isKnownInstance(name) ? { error: "unknown_instance" } : this.webAppearance.authorizeEffect(name, buckets),
-            placed: name => this.themeStore.get(name).placements.effects,
-            place: (name, effects) => {
-                const before = this.themeStore.get(name).placements.effects;
-                const explicit = new Set(effects.filter(e => typeof e !== "string").map(e => e.id));
-                const w = this.themeStore.setPlacements(name, { effects }, "agent", what => {
-                    // An unchanged human/private placement may be retained, never exposed or newly acquired by an agent.
-                    const r = explicit.has(what.id) ? this.effectLibrary.read(what.id, { kind: "agent", id: name })
-                        : this.effectLibrary.readReferenced(what.id, `instance:${name}`);
-                    if (!r.ok)
-                        return r.error;
-                    const params = explicit.has(what.id) ? what.params : before.find(e => e.id === what.id)?.params;
-                    return resolveEffectParams(r.entry.manifest, params ?? {}).ok ? null : "effect_params";
-                });
-                return w.ok ? { ok: true, rev: w.rev } : { ok: false, error: w.error };
-            },
-            changed: () => { try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { /* later status carries placements */ } },
-            // A nonmutating own/shared offer is not an appearance write. Only an explicit non-public admin-session click may start it.
-            preview: async (instance, id) => {
-                const result = this.effectTrials.offer(instance, id);
-                if (!result.ok)
-                    return { error: "not_found" };
-                const present = this.webChatHistory.list(instance).some(row => row.effectTrial?.offer === result.offer.offer);
-                if (!present && !this.publishEffectTrial(instance, result.offer))
-                    return { error: "trial_unavailable" };
-                return { id, status: "offered", expiresAt: result.offer.expiresAt, message: "A trial card is in your web chat. A signed-in admin outside the public link can start it; nothing was applied." };
-            },
-            profiles: id => this.effectProfiles.read(id),
-            profileSummary: id => this.effectService.profileSummary(id),
-            profileSummaries: ids => this.effectService.profileSummaries(ids),
-            playbackSummary: (name, id) => this.effectService.playbackSummary(name, id),
-        }));
-    }
     appearanceToolsService;
     /** #1629 r4 §1: get_web_appearance / preview_web_appearance — the caller's own look, resolved as the page resolves it. */
     get appearanceTools() {
         return (this.appearanceToolsService ??= new AppearanceTools({
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
             frame: (name) => (this.getUiStatus().instances.find(i => i.name === name) ?? { name }),
             theme: (name) => {
                 const r = this.themeStore.get(name);
                 return { theme: r.theme, locked: r.locked, widgets: r.placements.widgets, ambient: r.placements.ambient,
                     glyphAsset: (id) => this.themeStore.asset(name, id) };
             },
-            effects: name => this.themeStore.readable() ? this.themeStore.get(name).placements.effects.map(p => ({ id: p.id, by: p.by, ...(p.params ? { params: p.params } : {}), playback: this.effectService.playbackSummary(name, p.id) })) : [],
             card: (name) => resolveCard(name, humanCards(this.dataDir).get(name), this.themeStore.get(name).theme.card),
             // #1958: the host's identity-colour settings, as the page reads them (an unreadable prefs file: the defaults).
             colorPrefs: () => { try {
@@ -1520,49 +1409,17 @@ export class FleetManager {
         return Object.hasOwn(this.fleetConfig?.instances ?? {}, name) || (this.classicChannels?.getAll() ?? []).some((ch) => ch.instanceName === name);
     }
     modStore;
-    /**
-     * #1629 r4-5 / B2: installed mods use the same validated library and scoped holder claims as direct uploads.
-     */
+    /** #1629 r4-5: installed mods (#2799: a bundle that carries Canvas Worker effects is refused). */
     get mods() {
         return (this.modStore ??= new ModStore(this.dataDir, {
             themes: this.themeStore,
             prefs: this.webPrefs,
             ownerCss: this.ownerCss,
-            effects: this.effectLibrary,
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
-            context: () => ({ agendVersion: agendVersion(), limits: this.themeStore.limits(), effects: cw1EffectChecker() }),
+            context: () => ({ agendVersion: agendVersion(), limits: this.themeStore.limits() }),
             isKnownInstance: (name) => this.isKnownInstance(name),
             prefsIdentity: OPERATOR,
         }));
     }
-    agentModsService;
-    /** #1629 r4-5b: export_web_mod / propose_web_mod — the caller's own look as a file, and a proposal for a person. */
-    get agentMods() {
-        return (this.agentModsService ??= new AgentMods({
-            themes: this.themeStore, mods: this.mods, limiter: this.webAppearance.limiter,
-            webConfig: () => this.fleetConfig?.web ?? null,
-            // The mod store's own: a proposal is checked exactly as the person's import of it will be.
-            context: () => this.mods.checkContext(),
-            readOwnEffect: (instance, id) => { const r = this.effectLibrary.read(id, { kind: "agent", id: instance }); return r.ok ? { name: r.entry.manifest.name, files: r.entry.files } : null; },
-            notice: (instance, text) => { try {
-                this.emitSseEvent("message", { instance, sender: instance, role: "status", text, ts: new Date().toISOString() });
-            }
-            catch { /* the page reads it from Settings too */ } },
-            changed: () => { try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { /* the next frame */ } },
-        }));
-    }
-    /**
-     * #1629 r4-5c: an effect as this person may carry it away in an export — their own claim, or one a person shared —
-     * read with their principal (Sol's ACL). Being able to view or run a placed effect never grants packaging someone
-     * else's private claim: the library's reference read is runtime access, not an export path. Null: not theirs.
-     */
-    modPlacedEffect(person, id) {
-        const r = this.effectLibrary.read(id, { kind: "human", id: person });
-        return r.ok ? { name: r.entry.manifest.name, files: r.entry.files } : null;
-    }
     /** #1629 r4-5: an instance's card text as every viewer sees it (a person's fields over the agent's). */
     modCardText(name) {
         const card = resolveCard(name, humanCards(this.dataDir).get(name), this.themeStore.get(name).theme.card);
@@ -1585,8 +1442,7 @@ export class FleetManager {
      */
     get webSettings() {
         return (this.webSettingsToolsService ??= new WebSettingsTools({
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
-            prefs: this.webPrefs, ownerCss: this.ownerCss, mods: this.mods, effects: this.effectService,
+            prefs: this.webPrefs, ownerCss: this.ownerCss,
             instances: () => [...Object.keys(this.fleetConfig?.instances ?? {}),
                 ...(this.classicChannels?.getAll() ?? []).map((ch) => ch.instanceName).filter((n) => !Object.hasOwn(this.fleetConfig?.instances ?? {}, n))],
             colour: (name) => personIdentityColour(this.dataDir, name),
@@ -1595,7 +1451,6 @@ export class FleetManager {
             bannerFocus: (name) => personBannerFocus(this.dataDir, name),
             setBannerFocus: (name, focus) => { const w = setPersonBannerFocus(this.dataDir, name, focus); if (w.ok)
                 this.identityChanged(); return w; },
-            placements: (name) => this.themeStore.get(name).placements.effects.map((e) => (typeof e === "string" ? { id: e } : e)),
             ambient: (name) => Object.fromEntries(Object.entries(this.themeStore.get(name).placements.ambient).flatMap(([k, a]) => a ? [[k, { spec: a.spec, by: a.by }]] : [])),
             setAmbient: (name, spec, which) => this.webAppearance.humanSetAmbient(name, spec, which),
             announce: () => { try {
@@ -1909,7 +1764,7 @@ export class FleetManager {
                     retire();
                     continue;
                 }
-                if (store.attachPrompt(view.id, retire))
+                if (store.attachPrompt(view.id, retire, { platform: adapter.type, connection: adapterId }))
                     return;
             }
             catch {
@@ -2436,12 +2291,10 @@ export class FleetManager {
                     const notice = silent
                         ? t(`delivery.fleet_${row.state}_silent_schedule`, row.targetInstance, row.operationId, row.deliveryId, row.lastError ?? "unknown")
                         : t(`delivery.fleet_${row.state}`, row.targetInstance, row.operationId, row.deliveryId);
+                    // #2804: log-only. The person sees a failed or unconfirmed delivery as a Needs-you item (with Acknowledge),
+                    // not as a separate General post; the sending agent still gets its delivery-outcome notice.
                     this.logger.error({ deliveryId: row.deliveryId, operationId: row.operationId, target: row.targetInstance, state: row.state,
                         cause: row.lastError, ...(silent ? { silentSchedule: true } : {}) }, notice);
-                    // A self-scheduled silent heartbeat stays log-only, including the
-                    // operator alert; another source still receives the normal notice.
-                    if (!silent || row.sourceInstance !== row.targetInstance)
-                        this.notifyFleetError(notice);
                 }
             }
         });
@@ -2473,8 +2326,9 @@ export class FleetManager {
             if (event.count)
                 this.needsYou?.poke(); // #1386: rows that expired failed — they wait on someone now
             this.wakeCoordinator?.kick();
+            // #2804: the expired rows are Needs-you items now; the count is logged, not posted to General.
             if (event.count)
-                this.notifyFleetError(t("delivery.expired", event.count, event.uncertain ?? 0));
+                this.logger.warn({ count: event.count, uncertain: event.uncertain ?? 0 }, t("delivery.expired", event.count, event.uncertain ?? 0));
         });
         this.scheduleDeliveryOutboxPump();
     }
@@ -2604,27 +2458,8 @@ export class FleetManager {
         const daemon = this.daemons.get(name);
         if (daemon?.bootId === daemonBootId)
             this.listenForWorkingState(name, daemon);
-        const outbox = this.deliveryOutbox;
-        if (!outbox)
-            return;
-        for (const prior of outbox.getUnansweredAccepted(name, daemonBootId)) {
-            try {
-                outbox.admitPostRestartOutcomeNotice(prior, daemonBootId);
-            }
-            catch (err) {
-                this.logger.error({ err, source: name, operationId: prior.operationId }, "Could not persist post-restart delivery outcome notice");
-            }
-        }
-        // #926: a restart kills the turn that was working on a request, and a
-        // resumed CLI does not pick it back up. Remind the owner once per restart.
-        try {
-            const now = new Date();
-            this.expireReplyObligations(now);
-            outbox.remindReplyObligations(name, { reason: "restart", graceMs: 0, now, since: now, restartId: daemonBootId });
-        }
-        catch (err) {
-            this.logger.error({ err, owner: name }, "Could not persist the post-restart reply reminder");
-        }
+        // #2802: no post-restart notices. The outbox still delivers or fails a row accepted before the restart, and an open
+        // request is reminded by the ordinary turn-ended nudge (sweepReplyObligations) once the owner is idle.
         this.scheduleDeliveryOutboxPump();
     }
     workingStateListeners;
@@ -2708,9 +2543,8 @@ export class FleetManager {
         }
     }
     /**
-     * #926: the two reply-obligation safety nets. Idle owners with an unanswered
-     * request get one reminder (after the grace); requesters get one overdue
-     * notice when the owner is not working and nothing came back in time.
+     * #926: idle owners with an unanswered request get one reminder (after the grace). #2802: the only reply notice —
+     * requesters are no longer told about overdue or expired asks (they can check delivery_status / describe_instance).
      */
     sweepReplyObligations(now = new Date()) {
         const outbox = this.deliveryOutbox;
@@ -2721,10 +2555,8 @@ export class FleetManager {
             this.expireReplyObligations(now);
             for (const name of this.daemons.keys()) {
                 if (stateOf(name) === "idle")
-                    outbox.remindReplyObligations(name, { now, graceMs: REPLY_REMINDER_GRACE_MS, reason: "turn-ended" });
+                    outbox.remindReplyObligations(name, { now, graceMs: REPLY_REMINDER_GRACE_MS });
             }
-            const minutes = this.fleetConfig?.defaults?.reply_overdue_minutes ?? DEFAULT_REPLY_OVERDUE_MINUTES;
-            outbox.notifyOverdueReplyObligations({ now, overdueMs: minutes * 60_000, ownerIdle: name => stateOf(name) !== "working" });
         }
         catch (err) {
             this.logger.error({ err }, "Reply-obligation sweep failed");
@@ -2981,7 +2813,9 @@ export class FleetManager {
                 if ((current?.state === "delivering" || current?.state === "submission_started")
                     && current.targetDaemonBootId === claimed.targetDaemonBootId
                     && current.managerBootId === claimed.managerBootId) {
-                    this.notifyFleetError(t("delivery.lane_waiting", claimed.targetInstance, Math.round(DURABLE_DELIVERY_LANE_ALERT_MS / 60_000), deliveryId));
+                    // #2804: logged, not posted. A delivery still in flight needs nobody yet; if it ends failed or unconfirmed it
+                    // becomes a Needs-you item.
+                    this.logger.warn({ deliveryId, target: claimed.targetInstance }, t("delivery.lane_waiting", claimed.targetInstance, Math.round(DURABLE_DELIVERY_LANE_ALERT_MS / 60_000), deliveryId));
                 }
             }, DURABLE_DELIVERY_LANE_ALERT_MS);
             alertTimer.unref?.();
@@ -3153,7 +2987,8 @@ export class FleetManager {
             // fleet.yaml, sent SIGHUP, and got no reaction and no explanation.
             this.logger.error({ err }, "SIGHUP config reload failed");
             const message = err instanceof Error ? err.message : String(err);
-            this.notifyFleetError(t("fleet.reload_failed", message));
+            if (!(err instanceof ConfigSyntaxError))
+                this.notifyFleetError(t("fleet.reload_failed", message));
         });
     }
     /**
@@ -3246,6 +3081,7 @@ export class FleetManager {
         if (this.reloadPending)
             this.scheduleReconcile();
         void this.sweepOrphanedCancelButtons();
+        void this.parkedNotices.sweep();
     }
     /**
      * We are the post-update fleet: the update is over by definition. Clearing it here (rather than in the update
@@ -3389,19 +3225,19 @@ export class FleetManager {
         };
     }
     /** Load fleet.yaml and build routing table */
-    loadConfig(configPath) {
+    loadConfig(configPath, options = {}) {
         this.configPath = configPath;
-        const source = existsSync(configPath) ? readFileSync(configPath, "utf-8") : "{}\n";
-        this.rawFleetDocument = parseDocument(source, { keepSourceTokens: true });
-        if (this.rawFleetDocument.errors.length > 0) {
-            throw new Error(`Invalid fleet.yaml: ${this.rawFleetDocument.errors[0].message}`);
-        }
-        const raw = loadRawFleetConfig(configPath);
-        const loaded = loadFleetConfig(configPath);
+        const history = this.getConfigHistory();
+        history.track("fleet.yaml", configPath);
+        const selected = existsSync(configPath) ? history.read("fleet.yaml", configPath, options.startup) : { source: "{}\n", fallback: false };
+        this.rawFleetDocument = parseDocument(selected.source, { keepSourceTokens: true });
+        const raw = loadRawFleetConfigSource(selected.source);
+        const loaded = loadFleetConfigSource(selected.source);
         this.assertProviderSecretEnvKeys(loaded);
         this.rawFleetConfig = raw;
         this.settingsRuntimeRevision++;
         this.fleetConfig = loaded;
+        this.loadedFleetSource = selected;
         this.savedFleetConfigSnapshot = structuredClone(this.fleetConfig);
         this.warnAboutRemovedLoginMode(loaded);
         this.enforceGuestSwitch();
@@ -3410,6 +3246,8 @@ export class FleetManager {
         // Scope the path to its owning data directory so another inherited home's override cannot enable CW.
         process.env.AGEND_FLEET_DATA_DIR = resolvePath(this.dataDir);
         process.env.AGEND_FLEET_CONFIG_PATH = resolvePath(configPath);
+        if (options.remember !== false && existsSync(configPath))
+            history.accepted("fleet.yaml", configPath, selected);
         return this.fleetConfig;
     }
     relayLoginModeWarned = false;
@@ -6694,10 +6532,12 @@ export class FleetManager {
                 dataDir: this.dataDir,
                 onWarn: message => this.logger.warn(message),
                 // #1620: fleet.yaml's web.session.local, read at every check — a Settings save or a reload applies at once
-                // (shortening ends the sessions it now outlives). The public link's policy stays fixed.
+                // (shortening ends the sessions it now outlives). The public link's own cap stays fixed.
                 localPolicy: () => localSessionPolicy(this.fleetConfig?.web?.session?.local),
                 // #1920 §5.4: a guest's, from web.guests.session (never longer than the surface's own).
                 guestPolicy: () => guestSessionPolicy(this.fleetConfig?.web?.guests?.session),
+                // A session over the temporary link ends with the link (its TTL, at most 8 h on a quick tunnel).
+                exposureEnd: id => this.publicWebLink?.endOf(id) ?? null,
             });
             this.enforceGuestSwitch(); // #1920: guests off while the fleet was down
         }
@@ -6746,6 +6586,32 @@ export class FleetManager {
         return this.previewTunnel ??= new ManagedTunnel({ dataDir: join(this.dataDir, PUBLIC_PREVIEW_TUNNEL_DIR),
             log: () => this.logger.warn("Public preview tunnel cleanup requires attention") });
     }
+    namedLinkTestRunning = false;
+    /**
+     * #2906 (the user, 2026-11-01): Settings → Access → Test connection, on the fixed-address values as filled in (the
+     * typed connector token, else the saved one). One at a time; the result is closed step codes only — the token is
+     * never logged or returned. Admin only, never over the public link (settings-api.ts).
+     */
+    async testNamedLink(input) {
+        if (this.namedLinkTestRunning)
+            return { busy: true };
+        this.namedLinkTestRunning = true;
+        try {
+            const typed = typeof input.token === "string" && input.token.trim() ? input.token : null;
+            const result = await runNamedLinkTest({ hostname: input.hostname, port: input.port, protocol: input.protocol, token: typed ?? process.env[PUBLIC_TUNNEL_TOKEN_ENV] ?? null }, {
+                healthPort: this.fleetConfig?.health_port ?? 19280,
+                ensureBinary: async (signal) => (await ensureCloudflared({ dataDir: this.dataDir, pinnedOnly: true, signal })).path,
+                liveMarker: values => this.publicWebLink?.liveNamedMarker(values) ?? null,
+                reserve: namedTestLane(this.getTunnelLane()),
+                current: input.current,
+            });
+            this.logger[result.cleanup ? "warn" : "info"]({ steps: result.steps.map(s => `${s.step}:${s.code}`), typedToken: !!typed, ...(result.cleanup ? { cleanup: result.cleanup } : {}) }, result.cleanup ? "Named link test: the test connector's stop could not be proven; the tunnel lane stays held" : "Named link test");
+            return result;
+        }
+        finally {
+            this.namedLinkTestRunning = false;
+        }
+    }
     getTunnelLane() {
         return this.tunnelPurposeLane ??= new TunnelPurposeLane(new ManagedTunnel({ dataDir: this.dataDir,
             log: () => this.logger.warn("Managed tunnel cleanup requires attention") }));
@@ -7121,7 +6987,8 @@ export class FleetManager {
                 : "\n" + t("dashboard.public_status", status.state, status.remainingSeconds ?? 0)
                     + (status.expiresAt ? t("dashboard.public_until", formatFleetTime(status.expiresAt)) : ""));
         const choices = [{ action: "local", label: t("dashboard.local_signin") },
-            ...(publicLinkSettings(this.fleetConfig?.web).allowed ? [{ action: "public", label: t("dashboard.public_open") }] : []),
+            ...(publicLinkSettings(this.fleetConfig?.web).allowed
+                ? [{ action: "public", label: t(publicLinkNamedHostname(this.fleetConfig?.web) ? "dashboard.public_open_named" : "dashboard.public_open") }] : []),
             ...(status.state !== "closed" ? [{ action: "close", label: t("dashboard.public_close") }] : [])];
         const posted = await this.postNonceButtonPrompt({
             prefix: "dashboard:", alertType: "login", instanceName: "dashboard", adapter, adapterId: owner.adapterId,
@@ -7341,7 +7208,7 @@ export class FleetManager {
             return { ...a, name: badge.name, platform: badge.platform, scope: [...this.guestScope(owner)].sort(), reach: [...this.guestReach(owner)].sort(),
                 devices: devices.get(k) ?? 0, narrow: own(cfg?.narrow, `${a.adapterId}:${a.userId}`) ?? null,
                 // #2348: the grant as fleet.yaml has it (null: none), and the last code an admin sent from Settings.
-                grant: grant ? { ...(grant.name ? { name: grant.name } : {}), instances: [...grant.instances] } : null,
+                grant: grant ? { ...(grant.name ? { name: grant.name } : {}), instances: [...grant.instances], ...(grant.level === "trusted" ? { level: "trusted" } : {}) } : null,
                 ...(sent ? { code: { at: sent.at, outcome: sent.outcome.kind, ...(sent.outcome.kind === "sent" ? { expiresAt: sent.at + sent.outcome.expiresInMs } : {}),
                         ...(sent.outcome.kind === "dm_failed" ? { reason: sent.outcome.reason, platform: sent.outcome.platform, ...(sent.outcome.startUrl ? { startUrl: sent.outcome.startUrl } : {}) } : {}) } } : {}) };
         }).sort((x, y) => (y.lastSeen ?? -1) - (x.lastSeen ?? -1));
@@ -7389,7 +7256,7 @@ export class FleetManager {
             const when = Date.parse(r.created_at.includes("T") ? r.created_at : `${r.created_at.replace(" ", "T")}Z`);
             return r.event_type === "guest_grant_changed"
                 ? [{ kind: "grant", at: when, account, name, via: p.via === "confirmed" ? "confirmed" : "direct", added: names(p.added), removed: names(p.removed),
-                        endedSessions: typeof p.endedSessions === "number" ? p.endedSessions : 0 }]
+                        endedSessions: typeof p.endedSessions === "number" ? p.endedSessions : 0, ...(p.level === "chat" || p.level === "trusted" ? { level: p.level } : {}) }]
                 : [{ kind: "code", at: when, account, name, outcome: typeof p.outcome === "string" ? p.outcome : "unknown" }];
         });
     }
@@ -7428,7 +7295,7 @@ export class FleetManager {
      * confirmed in General, the agents added and taken away, and the sessions a removal ended. Never message content.
      */
     noteGuestGrantChange(change) {
-        this.logger.info({ account: change.account, via: change.via, added: change.added.length, removed: change.removed.length }, "Guest access changed in Settings");
+        this.logger.info({ account: change.account, via: change.via, added: change.added.length, removed: change.removed.length, ...(change.level ? { level: change.level } : {}) }, "Guest access changed in Settings");
         try {
             this.eventLog?.insert("fleet", "guest_grant_changed", { ...change });
         }
@@ -7513,6 +7380,8 @@ export class FleetManager {
      * #1920 §5.4: a guest's own `/web revoke` — its sessions and its outstanding code; nobody else's (an admin's revokes
      * everyone's, as before).
      */
+    /** #2855: the admin removed a guest — its own preferences (theme, language, favourites, sort, filter) go too. */
+    forgetGuestPrefs(owner) { this.webPrefs.forgetGuest(webPersonKey(owner)); }
     revokeGuestWebSessions(owner) {
         this.initializeWebSessions();
         const key = `${owner.adapterId}\u0000${owner.userId}`;
@@ -8170,7 +8039,7 @@ export class FleetManager {
         setSdNotifyWarn((fields, message) => this.logger.warn(fields, message));
         if (this.watchdogTimer)
             clearInterval(this.watchdogTimer);
-        this.watchdogTimer = setInterval(() => sdNotify("WATCHDOG=1"), 30_000);
+        this.watchdogTimer = startSdWatchdog();
         this.eventLoopWatch?.stop();
         this.eventLoopWatch = startEventLoopWatch({ logger: this.logger });
         try {
@@ -8219,7 +8088,7 @@ export class FleetManager {
         this.tmuxExecHelperTimer ??= setInterval(() => tmuxExecHelper.maintain(), 5_000);
         this.tmuxExecHelperTimer.unref?.();
         this.rotateFleetLogs();
-        const fleet = this.loadConfig(configPath);
+        const fleet = this.loadConfig(configPath, { startup: true });
         this.slimFleetConfigAtStartup();
         this.logConfigWarningsAtStartup();
         setLocale(detectLocale(fleet)); // user-facing text language (fleet.yaml defaults.locale / timezone)
@@ -8297,7 +8166,7 @@ export class FleetManager {
         // migrates legacy single-bot entries and names without a suffix. Classic
         // routing does NOT go through the routing engine (single-key, can't hold two
         // bots in one channel) — it resolves per-bot via getInstanceByChannel.
-        this.classicChannels = new ClassicChannelManager(this.dataDir, this.logger);
+        this.classicChannels = new ClassicChannelManager(this.dataDir, this.logger, this.getConfigHistory());
         const classicAdapters = fleet.channels?.length ? fleet.channels : (fleet.channel ? [fleet.channel] : []);
         this.classicChannels.configureAdapters(classicAdapters);
         // The unrecoverable-id report is deliberately NOT sent here: no adapter
@@ -8315,6 +8184,9 @@ export class FleetManager {
         // rooms), before the dashboard serves anything; from now on every change is written back (off the loop).
         this.restoreWebChat(fleet);
         this.startSearchIndex(fleet);
+        // Parse-only source monitoring; it does not apply hand-edited Fleet settings.
+        this.configHistoryTimer = setInterval(() => this.configHistory?.check(), 1_000);
+        this.configHistoryTimer.unref?.();
         // Poll classicBot.yaml for external changes every 30s
         this.classicReloadTimer = setInterval(() => {
             // Attributes the synchronous part, up to the reload's first await (#1235).
@@ -8346,7 +8218,8 @@ export class FleetManager {
             ...fleet.defaults.daily_summary,
         };
         this.dailySummary = new DailySummary(summaryConfig, costGuardConfig.timezone, (text) => {
-            this.postDailySummary(text);
+            if (text !== null)
+                this.postDailySummary(text);
             // Rotate classic channel chat logs daily
             this.classicChannels?.rotateLogs();
             this.rotateInboxes();
@@ -8364,17 +8237,6 @@ export class FleetManager {
             return DailySummary.generateText(this.eventLog, instances, costMap, this.costGuard?.getFleetTotalCents() ?? 0);
         });
         this.dailySummary.start();
-        // #2246 step 3: the task board's daily summary — its own time (defaults.task_board.summary_at, read at every look),
-        // in the fleet's zone; a summary missed while the fleet was down goes out when it is back.
-        this.taskBoardSummary = new TaskBoardSummaryClock({
-            at: () => summaryTime(this.fleetConfig?.defaults?.task_board?.summary_at) ?? null,
-            zone: () => this.usageZone(),
-            now: () => new Date(),
-            mark: summaryMarkFile(join(this.dataDir, "task-board-summary.json")),
-            send: (since, until) => this.postTaskBoardSummary(since, until),
-            failed: (err) => this.logger.warn({ err }, "The task board's daily summary failed; the next minute tries again"),
-        });
-        this.taskBoardSummary.start();
         // Rotate classic channel chat logs daily (piggyback on daily summary timer)
         this.classicChannels?.rotateLogs();
         this.rotateInboxes();
@@ -8463,7 +8325,7 @@ export class FleetManager {
             fleet.instances[name] = autoGeneralInstanceConfig(fleet.defaults, generalDir, need.adapterId); // #2598: its kiro_ui is the fleet's
             generalsCreated = true;
         }
-        if (generalsCreated)
+        if (generalsCreated && !this.configHistory?.isFallback(this.configPath))
             this.saveFleetConfig();
         if (topicMode && (fleet.channel || fleet.channels?.length)) {
             const schedulerConfig = {
@@ -8639,7 +8501,7 @@ export class FleetManager {
                     fixedGeneral = true;
                 }
             }
-            if (fixedGeneral)
+            if (fixedGeneral && !this.configHistory?.isFallback(this.configPath))
                 this.saveFleetConfig();
             // Auto-create topics AFTER adapter is ready (needs adapter.createTopic)
             await this.topicCommands.autoCreateTopics();
@@ -8734,8 +8596,6 @@ export class FleetManager {
                 }
                 await this.sendFleetStartCompletionFallback(String(fleet.channel.group_id), text, generalThreadId != null ? String(generalThreadId) : undefined);
             }
-            // After "fleet ready", so the notice is not the first thing people see of a restart.
-            void this.announceWebChatOnce(agendVersion);
             // #named-link-ttl: a named link with auto_open comes back now — after the web listener and the chat connections.
             this.startPublicLinkAutoOpen();
         }
@@ -10415,6 +10275,11 @@ export class FleetManager {
                     }
                     return;
                 }
+                // #2870 (the user's choice): in a private chat, a command from someone ClassicBot does not serve here — not an
+                // allowed user, not a ClassicBot admin, not a fleet admin, no room in this chat — gets no answer at all. /start
+                // above still asks for access; a guest's /web is handled before it.
+                if (isPrivateChat && text.startsWith("/") && this.isClassicPrivateStranger(msg.userId, chatId, msg.adapterId))
+                    return;
                 // Handle /stop command
                 if (text === "/stop" || text.startsWith("/stop ")) {
                     if (!this.classicChannels.isAdmin(msg.userId)) {
@@ -10870,34 +10735,6 @@ export class FleetManager {
      * their fleet is organised. Both stay theirs — this only makes sure they are
      * not discovered by an agent failing at three in the morning.
      */
-    /**
-     * #1366: the first time a fleet runs 2.2 or later, tell each chat platform's General — once — that its agents can
-     * now be talked to from a browser. Claimed in upgrade-notices.json before the send, released if the send fails.
-     * Platforms with nowhere to post fleet notices (no group, or a Discord fleet with no General channel) are skipped
-     * and not recorded, so they are told once they have one.
-     */
-    async announceWebChatOnce(version) {
-        if (!hasWebChat(version))
-            return;
-        const path = upgradeNoticesPath(this.dataDir);
-        for (const [adapterId, world] of this.worlds) {
-            if (this.shuttingDown)
-                return;
-            const target = this.fleetNoticeTarget(adapterId);
-            if (!target)
-                continue;
-            if (!claimNotice(path, WEB_CHAT_NOTICE, adapterId))
-                continue;
-            try {
-                await world.adapter.sendText(target.chatId, t("upgrade.web_chat"), target.opts);
-                this.logger.info({ adapterId, notice: WEB_CHAT_NOTICE }, "Announced web chat in General");
-            }
-            catch (err) {
-                const released = releaseNotice(path, WEB_CHAT_NOTICE, adapterId);
-                this.logger.warn({ err, adapterId, released }, "Could not announce web chat in General — will try at the next start");
-            }
-        }
-    }
     announceToolPermissionsChange() {
         try {
             const thirtyDaysAgo = new Date(Date.now() - 30 * 864e5).toISOString().slice(0, 19).replace("T", " ");
@@ -10917,8 +10754,8 @@ export class FleetManager {
         }
     }
     checkToolPermission(sink, instanceName, tool) {
-        if (isCanvasWorkerTool(tool) && !this.canvasWorkerEnabled())
-            return { allowed: false, message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE };
+        if (isCanvasWorkerTool(tool))
+            return { allowed: false, message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE }; // #2799: removed
         const profile = resolveToolSet(this.fleetConfig?.instances[instanceName], instanceName);
         const allowed = mayUseTool(profile, tool);
         if (!allowed) {
@@ -11651,19 +11488,6 @@ export class FleetManager {
     }
     dispatchTypedIpc(name, msg) {
         const type = String(msg.type);
-        if (type.startsWith("fleet_") && WEB_EFFECT_TOOLS.has(type.slice(6))) {
-            const ipc = this.instanceIpcClients.get(name), fleetRequestId = msg.fleetRequestId;
-            if (!ipc || typeof fleetRequestId !== "string")
-                return;
-            void this.handleWebThemeHttp(name, type.slice(6), (msg.payload ?? {})).then(result => {
-                if (this.instanceIpcClients.get(name) === ipc)
-                    ipc.send({ type: "fleet_web_theme_response", fleetRequestId, result });
-            }, err => {
-                if (this.instanceIpcClients.get(name) === ipc)
-                    ipc.send({ type: "fleet_web_theme_response", fleetRequestId, error: err instanceof Error ? err.message : "Effect operation failed" });
-            }).catch(err => this.logger.debug({ err }, "Effect tool response could not be written"));
-            return;
-        }
         if (type.startsWith("fleet_schedule_")) {
             this.handleScheduleCrud(name, msg);
             return;
@@ -11717,10 +11541,9 @@ export class FleetManager {
             const args = (msg.payload ?? {});
             const result = tool === "get_web_appearance" || tool === "preview_web_appearance"
                 ? this.appearanceTools.handle(instanceName, tool, args)
-                : tool === "export_web_mod" || tool === "propose_web_mod" ? this.agentMods.handle(instanceName, tool, args)
-                    : tool === "office_view" || tool === "office_set" ? this.officeActs.handle(instanceName, tool, args)
-                        : OFFICE_PACK_IPC.has(`fleet_${tool}`) ? this.officePackTools.handle(instanceName, tool, args)
-                            : this.webAppearance.handleTool(instanceName, tool, args);
+                : tool === "office_view" || tool === "office_set" ? this.officeActs.handle(instanceName, tool, args)
+                    : OFFICE_PACK_IPC.has(`fleet_${tool}`) ? this.officePackTools.handle(instanceName, tool, args)
+                        : this.webAppearance.handleTool(instanceName, tool, args);
             ipc.send({ type: "fleet_web_theme_response", fleetRequestId, result });
         }
         catch (err) {
@@ -12145,17 +11968,10 @@ export class FleetManager {
     }
     /** #1629: `agend-agent theme …` — the same service as the tools; `instance` is the token's. */
     async handleWebThemeHttp(instance, tool, args) {
-        if (isCanvasWorkerTool(tool) && !this.canvasWorkerEnabled())
-            return { error: "canvas_worker_experimental", message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE };
-        if (WEB_EFFECT_TOOLS.has(tool)) {
-            if (!this.isKnownInstance(instance))
-                return { error: "unknown_instance" };
-            return this.effectTools.handle(instance, tool, args);
-        }
+        if (isCanvasWorkerTool(tool))
+            return { error: "canvas_worker_experimental", message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE }; // #2799: removed
         if (tool === "get_web_appearance" || tool === "preview_web_appearance")
             return this.appearanceTools.handle(instance, tool, args);
-        if (tool === "export_web_mod" || tool === "propose_web_mod")
-            return this.agentMods.handle(instance, tool, args);
         if (tool === "office_view" || tool === "office_set")
             return this.officeActs.handle(instance, tool, args); // #2578
         if (OFFICE_PACK_IPC.has(`fleet_${tool}`))
@@ -12696,6 +12512,7 @@ export class FleetManager {
             },
         });
         this.rawFleetConfig = loadRawFleetConfig(this.configPath);
+        this.configHistory?.accepted("fleet.yaml", this.configPath, { source: output, fallback: false });
         // The instance map is defaults-expanded. A defaults edit changes that view even when it writes no instance
         // leaves. Re-resolve from the committed YAML so inherited values cannot become stale overrides on the next save.
         // Keep the FleetConfig object itself: Settings and other request contexts hold it.
@@ -12774,6 +12591,8 @@ export class FleetManager {
     }
     /** One-time upgrade migration; invalid YAML is never rewritten. */
     migrateNoticeDeliveryStorage() {
+        if (this.configHistory?.isFallback(this.configPath))
+            return;
         if (this.fleetConfig && this.configPath && (this.fleetConfig.web?.notify_login === "dm" || this.fleetConfig.defaults.tips === "dm"
             || this.fleetConfig.web?.notice_delivery !== undefined)
             && validateFleetConfig(this.rawFleetConfig).valid) {
@@ -12788,6 +12607,8 @@ export class FleetManager {
         }
     }
     migrateOfficeStorage() {
+        if (this.configHistory?.isFallback(this.configPath))
+            return;
         if (!this.fleetConfig || !this.configPath || !hasLegacyOffice(this.rawFleetConfig) || !validateFleetConfig(this.rawFleetConfig).valid)
             return;
         try {
@@ -12811,6 +12632,8 @@ export class FleetManager {
         }
     }
     slimFleetConfigAtStartup() {
+        if (this.configHistory?.isFallback(this.configPath))
+            return;
         this.migrateOfficeStorage();
         this.migrateNoticeDeliveryStorage();
         const redundantPaths = collectRedundantInstanceDefaultPaths(this.rawFleetConfig);
@@ -13032,9 +12855,7 @@ export class FleetManager {
             this.themeStore.forget(name);
             this.webAppearance.forget(name);
             this.appearanceTools.forget(name);
-            this.effectToolsService?.forget(name);
             this.mods.forgetInstance(name);
-            this.agentMods.forget(name);
             this.officeActsInstance?.forget(name);
             this.officePackToolsInstance?.forget(name);
         }
@@ -14392,51 +14213,6 @@ export class FleetManager {
         }
         return { chatId, opts: {} };
     }
-    /**
-     * #2246 step 3: the task board's daily summary of [since, until) (task-board-summary.ts). Each chat world's General
-     * gets its own instances' cards — a card that no world's instance holds (nobody's, a person's) goes to the primary
-     * one — and each of that world's Generals shows the same text in the web chat. A world with nothing to say gets
-     * nothing. A web-only fleet: everything, in the web chat.
-     */
-    postTaskBoardSummary(since, until) {
-        const board = this.scheduler?.db.board;
-        if (!board)
-            return;
-        const read = board.summaryRead(since.toISOString(), until.toISOString(), this.dispatcherGone);
-        const projects = board.listProjects(true);
-        const stats = board.projectStats(this.dispatcherGone);
-        const names = new Map(projects.map((p) => [p.id, p.name]));
-        const configured = this.getPrimaryAdapterId();
-        const primary = configured !== undefined && this.worlds.has(configured) ? configured : this.worlds.keys().next().value;
-        const worldOf = (assignee) => {
-            const owner = assignee ? this.getInstanceAdapterId(assignee) : undefined;
-            return owner !== undefined && this.worlds.has(owner) ? owner : primary;
-        };
-        const zone = this.usageZone();
-        for (const world of this.worlds.size ? [...this.worlds.keys()] : [undefined]) {
-            const summary = buildSummary(read, since, until, { inChat: (assignee) => worldOf(assignee) === world, projects, stats });
-            if (isQuiet(summary))
-                continue;
-            const text = renderSummary(summary, { zone, t: (key, ...args) => t(key, ...args), projectOf: (c) => (c.projectId === null ? null : names.get(c.projectId) ?? null) });
-            const cards = [...new Set([...summary.review, ...summary.blocked, ...summary.done, ...summary.created].map((c) => c.code))];
-            if (world !== undefined) {
-                const adapter = this.worlds.get(world)?.adapter;
-                const target = this.fleetNoticeTarget(world);
-                if (adapter && target) {
-                    adapter.sendText(target.chatId, text, target.opts).catch(e => this.logger.warn({ err: e, world }, "Failed to send the task board's daily summary"));
-                }
-                else {
-                    this.logger.warn({ world }, "The task board's daily summary has no postable target — set a General topic or channel.options.general_channel_id");
-                }
-            }
-            for (const [name, cfg] of Object.entries(this.fleetConfig?.instances ?? {})) {
-                if (cfg.general_topic !== true || (world !== undefined && this.getInstanceAdapterId(name) !== world))
-                    continue;
-                // #2341 review: with the cards it names, so the public link withholds it while one of them is hidden there.
-                this.emitSseEvent("message", { instance: name, sender: name, role: "status", text, ts: new Date().toISOString(), cards });
-            }
-        }
-    }
     /**
      * Post the daily summary where fleet-wide notices go.
      *
@@ -14532,11 +14308,22 @@ export class FleetManager {
      * would have to make this async and change every caller.
      */
     notifyInstanceTopic(instanceName, text, extraOpts) {
+        const send = this.sendToInstanceTopic(instanceName, text, extraOpts);
+        if (!send)
+            return false;
+        send.sent.catch(e => this.logger.warn({ err: e, instanceName }, send.failure));
+        return true;
+    }
+    /**
+     * notifyInstanceTopic's routing, handing back the send itself — and which world sent it — for a caller that must
+     * edit or delete the message later (#2897). Null when there is no adapter or no postable target (already logged).
+     */
+    sendToInstanceTopic(instanceName, text, extraOpts) {
         const adapter = this.getAdapterForInstance(instanceName) ?? this.adapter;
         if (!adapter) {
             // Early startup: adapters are created well after the fleet object exists.
             this.logger.warn({ instanceName }, "No adapter yet — instance topic notification not sent");
-            return false;
+            return null;
         }
         const channelCfg = this.getChannelConfig(this.getInstanceAdapterId(instanceName));
         const groupId = channelCfg?.group_id;
@@ -14545,17 +14332,13 @@ export class FleetManager {
         const worldId = this.getInstanceAdapterId(instanceName);
         if (threadId != null && groupId) {
             const out = this.renderPlaces(worldId, text, { threadId: String(threadId), ...extraOpts });
-            adapter.sendText(String(groupId), out.text, out.opts)
-                .catch(e => this.logger.warn({ err: e, instanceName }, "Failed to send instance topic notification"));
-            return true;
+            return { adapterId: worldId, sent: adapter.sendText(String(groupId), out.text, out.opts), failure: "Failed to send instance topic notification" };
         }
         // Classic instance: find its channelId from the classic manager
         const classicChatId = this.classicChannels?.getChannelIdByInstance(instanceName);
         if (classicChatId) {
             // #1990: a ClassicBot room's readers need not be in the fleet's group, so its notices name places as plain text.
-            adapter.sendText(classicChatId, stripPlaceRefs(text), extraOpts)
-                .catch(e => this.logger.warn({ err: e, instanceName }, "Failed to send classic notification"));
-            return true;
+            return { adapterId: worldId, sent: adapter.sendText(classicChatId, stripPlaceRefs(text), extraOpts), failure: "Failed to send classic notification" };
         }
         // Fallback: the instance has neither a topic nor a classic channel, so post
         // where fleet-wide notices go. Not the bare group id: on Discord that is a
@@ -14563,12 +14346,67 @@ export class FleetManager {
         const target = this.fleetNoticeTarget(worldId);
         if (target) {
             const out = this.renderPlaces(worldId, text, { ...target.opts, ...extraOpts });
-            adapter.sendText(target.chatId, out.text, out.opts)
-                .catch(e => this.logger.warn({ err: e, instanceName }, "Failed to send notification (no topic)"));
-            return true;
+            return { adapterId: worldId, sent: adapter.sendText(target.chatId, out.text, out.opts), failure: "Failed to send notification (no topic)" };
         }
         this.logger.warn({ instanceName }, "No postable target — instance topic notification not sent");
-        return false;
+        return null;
+    }
+    // ── Parked-dialog notices (#2897) ──
+    parkedNoticesStore = null;
+    get parkedNotices() {
+        this.parkedNoticesStore ??= new ParkedNotices({
+            file: join(this.dataDir, PARKED_NOTICE_LEDGER_FILE),
+            logger: this.logger,
+            post: (instanceName, place, text) => this.postParkedNotice(instanceName, place, text),
+            adapterFor: adapterId => this.worlds.get(adapterId)?.adapter
+                ?? (adapterId === this.getPrimaryAdapterId() ? this.adapter ?? undefined : undefined),
+            resolvedText: () => t("fleet.dialog_parked_resolved"),
+            // A ClassicBot room names places as plain text (#1990), as its post did.
+            render: (row, text) => row.place === "topic" && this.classicChannels?.getChannelIdByInstance(row.instanceName) === row.chatId
+                ? stripPlaceRefs(text) : this.renderPlaces(row.adapterId, text).text,
+        });
+        return this.parkedNoticesStore;
+    }
+    /**
+     * A held CLI dialog's notices: the instance-topic one and the General one, each edited in place while the
+     * dialog stays (one live message per place, never a pile), and taken back by resolveParkedNotice.
+     */
+    showParkedNotice(instanceName, topicText, generalText) {
+        if (topicText !== null)
+            void this.parkedNotices.show(instanceName, "topic", topicText);
+        if (generalText !== null)
+            void this.parkedNotices.show(instanceName, "general", generalText);
+    }
+    /** The held dialog is resolved, or the instance stopped or restarted: delete its notices (no-op when none). */
+    resolveParkedNotice(instanceName) {
+        void this.parkedNotices.resolve(instanceName);
+    }
+    async postParkedNotice(instanceName, place, text) {
+        let send;
+        if (place === "topic") {
+            send = this.sendToInstanceTopic(instanceName, text);
+        }
+        else {
+            // Where notifyFleetError posts, without its text throttle: the ledger is what keeps this to one message.
+            const general = Object.entries(this.fleetConfig?.instances ?? {})
+                .find(([, config]) => config.general_topic === true)?.[0];
+            const target = general ? null : this.fleetNoticeTarget();
+            if (general)
+                send = this.sendToInstanceTopic(general, text);
+            else if (this.adapter && target) {
+                const out = this.renderPlaces(this.getPrimaryAdapterId(), text, target.opts);
+                send = { adapterId: this.getPrimaryAdapterId(), sent: this.adapter.sendText(target.chatId, out.text, out.opts) };
+            }
+            else
+                send = null;
+        }
+        if (!send)
+            return null;
+        const sent = await send.sent;
+        const adapterId = send.adapterId ?? this.getPrimaryAdapterId();
+        if (!adapterId)
+            return null;
+        return { adapterId, chatId: sent.chatId, ...(sent.threadId !== undefined ? { threadId: sent.threadId } : {}), messageId: sent.messageId };
     }
     // ── Nonce-armed button prompts (hang / assist / exit / clear) ──
     //
@@ -15146,6 +14984,7 @@ export class FleetManager {
                 pauseReason, pausedAt,
                 crashedAt: crashed ? (this.needsCrashedAt.get(name) ?? null) : null,
                 signIn: pauseReason === "auth" ? this.signInFor(name) : null,
+                usageHold: this.daemons.get(name)?.usageHold?.() ?? null,
             });
         }
         return out;
@@ -15219,6 +15058,9 @@ export class FleetManager {
             },
             tasks: () => this.needsYouTaskItems(),
             backendSignIns: () => this.needsYouBackendSignIns(),
+            configIssues: () => (this.configHistory?.currentIssues() ?? []).map(issue => ({
+                ...issue, detail: configIssueText(issue, t), owner: this.worlds.keys().next().value,
+            })),
             taskAction: action => this.taskActionFromChat(action),
             settings: () => ({
                 liveMessage: this.fleetConfig?.needs_you?.live_message !== false,
@@ -15968,6 +15810,16 @@ export class FleetManager {
         return result;
     }
     /** #1269: an instance's chat command from the web chat (web-commands.ts); `publicLink`: a gateway request. */
+    /** #2855: the table scope of an instance the web chat may command (a fleet instance or a ClassicBot room), else null. */
+    webCommandScope(instance) {
+        // Own entries only: a name like "__proto__" or "constructor" must not be found on the prototype (#1476 review).
+        const instances = this.fleetConfig?.instances;
+        if (instances && Object.prototype.hasOwnProperty.call(instances, instance))
+            return isGeneralInstance(this.fleetConfig, instance) ? "general" : "fleet";
+        return this.classicChannels?.getChannelIdByInstance(instance) !== undefined ? "classic" : null;
+    }
+    /** #2855: the platform an instance's channel is on, for the command table's cell (a web-only fleet: Discord's). */
+    commandPlatform(instance) { return this.getAdapterForInstance(instance)?.type === "telegram" ? "telegram" : "discord"; }
     webCommand(input, opts) {
         const webMeta = (instance) => {
             const topicId = this.fleetConfig?.instances[instance]?.topic_id;
@@ -15976,6 +15828,7 @@ export class FleetManager {
                 chatId: this.getGroupIdForInstance(instance) || "", messageId: newWebMessageId(),
                 username: opts.person?.name ?? WEB_NAME_FALLBACK, userId: opts.person?.userId ?? WEB_NAME_FALLBACK,
                 threadId: topicId != null ? String(topicId) : undefined, adapterId: this.getAdapterForInstance(instance)?.id ?? "", source: "web", humanOrigin: webHumanOrigin(true, opts.authority),
+                ...(opts.guest ? { webGuest: true } : {}), // #2855: a guest's /steer or /btw reaches the agent as a guest's
             };
         };
         const choicesFromCache = (instance) => {
@@ -15987,13 +15840,8 @@ export class FleetManager {
             return { current, options: this.withCurrentModel(cached.models, current).map(o => ({ id: o.id, label: this.modelChoiceLabel(o, current) })) };
         };
         return runWebCommand({
-            // Own entries only: a name like "__proto__" or "constructor" must not be found on the prototype (#1476 review).
-            scope: (instance) => {
-                const instances = this.fleetConfig?.instances;
-                if (instances && Object.prototype.hasOwnProperty.call(instances, instance))
-                    return isGeneralInstance(this.fleetConfig, instance) ? "general" : "fleet";
-                return this.classicChannels?.getChannelIdByInstance(instance) !== undefined ? "classic" : null;
-            },
+            scope: (instance) => this.webCommandScope(instance),
+            platform: (instance) => this.commandPlatform(instance),
             ctx: (instance) => this.topicCommands.getCtxText(instance),
             // Board 003648ac: a watch for the paste, armed when the daemon says it was written (raw_paste_written); one
             // for a command that was not handed over is dropped.
@@ -17670,6 +17518,13 @@ export class FleetManager {
             lines.push(t(admin === "added" ? "classic.approve_done_admin" : "classic.approve_done_admin_already", adminUserId ?? ""));
         }
         this.notifyInstanceTopic(entry.instanceName, lines.join("\n"));
+        // #2870: the chat just allowed — and the new ClassicBot admin's own chat — get the ClassicBot menu now, not at the
+        // bot's next start (Telegram only; the menu is per chat there).
+        const reply = entry.classicReplyTo;
+        if (reply && reply.adapter.type === "telegram" && scope !== "guild") {
+            for (const chat of new Set([groupId, ...(adminUserId ? [adminUserId] : [])]))
+                void this.topicCommands.addClassicMenuChat(reply.adapterId, chat);
+        }
         await this.notifyClassicRequester(entry, "classic.request_allowed");
     }
     async notifyClassicRequester(entry, key) {
@@ -18269,14 +18124,6 @@ export class FleetManager {
         const room = this.classicChannels?.getAll().find(c => c.instanceName === name);
         return room ? `room:${room.channelId}:${room.adapterId ?? ""}` : null;
     }
-    /** The only Try-card publisher: no arbitrary SSE sender/role can manufacture this metadata. */
-    publishEffectTrial(instance, offer) {
-        const row = this.webChatHistory.recordEffectTrial(instance, offer, new Date().toISOString());
-        if (!row)
-            return false;
-        broadcastSseEvent(this.sseClients, "message", row, err => this.logger.debug({ err }, "SSE client write failed; evicting"), this.webChatHistory.cursorOf(row));
-        return true;
-    }
     /** Push an SSE event to all connected Web UI clients. */
     emitSseEvent(event, data) {
         // #1386: a prompt opened or closed, or an instance's state moved — "Needs you" may have changed.
@@ -18321,8 +18168,8 @@ export class FleetManager {
      * The task board's live side: every committed change goes to the open pages (never to a guest) — the board's new
      * revision and the card numbers it touched; not who touched them (the page does not need it, and a public-link page
      * must not learn a hidden instance's name from it). Its news goes to the instances whose cards someone else changed:
-     * one "[Task board]" notice per instance, gathered for 10 s, held by the delivery outbox until it is taken
-     * (task-board-waker.ts).
+     * one "[Task board]" notice per instance, gathered for 10 s, held by the delivery outbox until it is taken, or
+     * withdrawn once its cards changed again (#2801; task-board-waker.ts).
      */
     attachTaskBoard(db) {
         this.taskBoardWaker?.stop();
@@ -18331,6 +18178,19 @@ export class FleetManager {
         const waker = this.taskBoardWaker = new TaskBoardWaker({
             deliver: (instance, message, key) => this.admitTaskBoardNotice(instance, message, key),
             isInstance: (name) => this.fleetConfig?.instances?.[name] != null,
+            // #2785 (c), #2801: the maker's own message already told it; the board's line would repeat it.
+            messagedAbout: (from, to, codes, sinceMs) => {
+                const outbox = this.deliveryOutbox;
+                if (!outbox?.isOpen)
+                    return false;
+                return outbox.recentTextsFrom(to, from, new Date(sinceMs).toISOString()).some((text) => codes.some((code) => namesCard(text, code)));
+            },
+            // #2801: a notice still waiting whose cards have all changed again is not delivered.
+            withdraw: (prefix, stale, reason) => {
+                const outbox = this.deliveryOutbox;
+                return outbox?.isOpen ? outbox.withdrawWaitingNotices(prefix, stale, reason).length : 0;
+            },
+            changedAt: (uuid) => db.board.lastChangeAt(uuid),
             holds: (wake) => db.board.wakeHolds(wake),
             card: (uuid) => db.board.findCard(uuid),
             // #2352: the card's Needs you buttons are in this instance's own channel (it is the card's lane).
@@ -18347,12 +18207,13 @@ export class FleetManager {
             },
             log: (level, message, extra) => this.logger[level](extra ?? {}, message),
         });
-        db.board.onChange(({ rev, ids, projects, wakes }) => {
+        db.board.onChange(({ rev, ids, projects, wakes, changed }) => {
             // Refresh both old and new owners on reassignment; wakes are not an ownership index.
             if (ids.length)
                 for (const name of this.daemons.keys())
                     this.observeWorkingState(name, "tasks");
             this.emitSseEvent("tasks", { rev, ids, projects });
+            waker.changed(changed);
             waker.note(wakes);
             // step 3: cards waiting for the person are Needs you items; #2355 review: a project's lead routes them too.
             if (ids.length || projects)
@@ -18570,27 +18431,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         this.syncRoleSkills(workDir, backend, "general", knowledgeDir);
         this.logger.debug({ knowledgeDir, workDir, backend }, "Synced general knowledge files");
     }
-    /** Update only AgEnD-managed skill copies; no launch or restart is needed for an experimental switch. */
-    canvasWorkerSettingChanged() {
-        this.refreshExperimentalSkills();
-        this.emitSseEvent("status", this.getUiStatus());
-    }
-    refreshExperimentalSkills() {
-        for (const [name, daemon] of this.daemons) {
-            try {
-                const cfg = daemon.getConfigSnapshot();
-                const backend = cfg.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
-                const workDir = this.resolveKnowledgeWorkDir(cfg.working_directory, backend, name);
-                const classic = this.classicChannels?.getAll().some(ch => ch.instanceName === name) === true;
-                if (classic && !insideManagedWorkspaces(workDir))
-                    continue;
-                this.syncRoleSkills(workDir, backend, classic ? "classic" : cfg.general_topic ? "general" : "worker");
-            }
-            catch (err) {
-                this.logger.warn({ name, err }, "Could not refresh experimental skill visibility");
-            }
-        }
-    }
     /** Publish only the bundled skills eligible for an instance role. */
     syncRoleSkills(workDir, backend, role, knowledgeDir) {
         const skillSegments = FleetManager.SKILLS_DIR_SEGMENTS[backend];
@@ -18795,7 +18635,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 continue;
             }
             managed.push(name);
-            const newContent = bundledSkillContents(join(srcSkills, name), this.canvasWorkerEnabled());
+            const newContent = bundledSkillContents(join(srcSkills, name));
             if (refuse(dest))
                 continue;
             try {
@@ -20953,6 +20793,17 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         return (adapterId ? generals.find(([name, cfg]) => (cfg.channel_id ?? this.getInstanceAdapterId(name)) === adapterId) : undefined)?.[0]
             ?? generals[0]?.[0];
     }
+    /**
+     * #2870: someone ClassicBot does not serve in this private chat: not on allowed_users, not a ClassicBot admin, not a
+     * fleet admin of this bot, and no ClassicBot room here. Their commands other than /start get no answer.
+     */
+    isClassicPrivateStranger(userId, chatId, adapterId) {
+        const classic = this.classicChannels;
+        if (!classic)
+            return false;
+        return !classic.isAdmin(userId) && !classic.isUserAllowed(userId) && !this.isFleetAdmin(userId, adapterId ?? "")
+            && !classic.isClassicChannel(chatId, adapterId);
+    }
     /** Return a user-facing blocker without mutating ClassicBot state. */
     validateClassicStart(channelId, userId, guildId, adapterId) {
         const classic = this.classicChannels;
@@ -21235,7 +21086,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             try {
                 this.themeStore.forget(ch.instanceName);
                 this.webAppearance.limiter.forget(ch.instanceName);
-                this.effectToolsService?.forget(ch.instanceName);
             }
             catch (err) {
                 this.logger.warn({ err: err.message, instanceName: ch.instanceName }, "Dropping a removed room's web theme failed");
@@ -21344,6 +21194,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         const sharesStopped = this.officeSharesInstance?.close(); // #2636: every Office share ends, and its tunnel
         // #1386: every live "Needs you" message says the fleet stopped (capabilities revoked first) — while the
         // adapters can still edit. Bounded: a platform that does not answer must not hold the shutdown.
+        if (this.configHistoryTimer)
+            clearInterval(this.configHistoryTimer);
+        this.configHistoryTimer = null;
         const needsStopped = this.stopNeedsYou();
         // #1490 P3: stop() now returns a Promise; await it so the final
         // ledger flush completes before process.exit(0) in doStopAll's caller.
@@ -21399,7 +21252,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         this.clearStatuslineWatchers();
         this.costGuard?.stop();
         this.dailySummary?.stop();
-        this.taskBoardSummary?.stop();
         this.dailyTipScheduler?.stop();
         this.dailyTipScheduler = null;
         if (this.updateCheckTimer) {
@@ -21455,6 +21307,8 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         for (const timer of this.cancelButtonIdleRetireTimers.values())
             clearTimeout(timer);
         this.cancelButtonIdleRetireTimers.clear();
+        // #2897: notices still being retired stay in the ledger; the next fleet's sweep finishes them.
+        this.parkedNoticesStore?.dispose();
         if (this.topicCleanupTimer) {
             clearInterval(this.topicCleanupTimer);
             this.topicCleanupTimer = null;
@@ -21690,14 +21544,16 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         const previousRawConfig = this.rawFleetConfig;
         const previousRawDocument = this.rawFleetDocument;
         const previousSavedSnapshot = this.savedFleetConfigSnapshot;
+        const previousSource = this.loadedFleetSource;
         try {
-            this.loadConfig(this.configPath);
+            this.loadConfig(this.configPath, { remember: false });
         }
         catch (err) {
             this.fleetConfig = oldConfig;
             this.rawFleetConfig = previousRawConfig;
             this.rawFleetDocument = previousRawDocument;
             this.savedFleetConfigSnapshot = previousSavedSnapshot;
+            this.loadedFleetSource = previousSource;
             throw err;
         }
         const validation = validateFleetConfig(this.rawFleetConfig);
@@ -21713,6 +21569,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             this.rawFleetConfig = previousRawConfig;
             this.rawFleetDocument = previousRawDocument;
             this.savedFleetConfigSnapshot = previousSavedSnapshot;
+            this.loadedFleetSource = previousSource;
             this.observeWebAuthority(); // #2453 review: the configuration back in force is the one seen
             this.logger.error({
                 oldCount,
@@ -21733,11 +21590,10 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             // mark every row done and tell the user "changes applied".
             return { rejected: why };
         }
+        if (this.loadedFleetSource)
+            this.getConfigHistory().accepted("fleet.yaml", this.configPath, this.loadedFleetSource);
         this.migrateOfficeStorage();
         this.migrateNoticeDeliveryStorage();
-        if (canvasWorkerEnabled(oldConfig?.web) !== this.canvasWorkerEnabled()) {
-            this.canvasWorkerSettingChanged();
-        }
         // Classic behavior settings share the fleet defaults but are not entries
         // in fleet.yaml. Snapshot the old effective chain before reloading the
         // Classic file so SIGHUP can hot-apply either source without waiting for
@@ -21947,7 +21803,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
      * the panel shows the mismatch instead of a button.
      */
     checkStartupSignatureConsistency() {
-        if (!this.configPath) {
+        if (!this.configPath || this.configHistory?.isFallback(this.configPath)) {
             this.fleetSignatureMismatch = null;
             return;
         }
@@ -23506,7 +23362,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                     // From the install's own channel tag, this is what /update installs — even a stable the release pointed the
                     // tag at (2.2.0 on @alpha / @beta): the plain /update text, never "/update stays on … use --stable" (#1928).
                     const key = fromChannel ? "update.available_current" : updateNoticeKey(currentVersion, target);
-                    this.notifyInstanceTopic(generalId, t(key, `v${target}`, `v${currentVersion}`));
+                    // #2775: null = a beta install and a stable target; beta users are never told to switch.
+                    if (key)
+                        this.notifyInstanceTopic(generalId, t(key, `v${target}`, `v${currentVersion}`));
                 }
             }
         }
@@ -23602,6 +23460,21 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         return scope.size ? scope : NO_GUEST_SCOPE;
     }
+    /** #2855: whether a request carries a guest's live session (its cookie; checked without counting as activity). */
+    presentsGuestSession(req) {
+        if (!this.webToken || !this.webSessions)
+            return false;
+        const epoch = tokenEpoch(this.webToken);
+        return readSessionCookies(req, this.webToken).some(id => this.webSessions.authenticate(id, epoch, { touch: false })?.tier === "guest");
+    }
+    /** #2855: whether the admin made this guest Trusted — only an explicit grant can (web.guests.grants[account].level). */
+    guestTrusted(owner) {
+        const guests = this.fleetConfig?.web?.guests;
+        if (guests?.enabled !== true || !guests.grants)
+            return false;
+        const key = `${owner.adapterId}:${owner.userId}`;
+        return Object.hasOwn(guests.grants, key) && guests.grants[key]?.level === "trusted";
+    }
     /**
      * #1920 (#2104 review): what an account reaches before an admin's narrowing — its connection's topics (an open one's
      * named agents), its own Telegram private room, its verified group rooms. Narrowing can only take from this set, so it
@@ -23780,13 +23653,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 return;
             }
             const requestPath = new URL(req.url ?? "/", `http://localhost:${port}`).pathname;
-            if (!this.canvasWorkerEnabled() && isCanvasWorkerHttpPath(requestPath)) {
-                res.writeHead(403, { "Content-Type": "application/json", "Cache-Control": "no-store" });
-                res.end(JSON.stringify({ error: "canvas_worker_experimental", message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE }));
-                return;
-            }
-            if (this.effectBootstrap.handle(req, res))
-                return;
             // Branding is public, after Host admission: automatic favicon requests
             // must not become noisy web-token 401s in the browser console.
             // #2308: the icon routes and the pages' icon links follow the app icon set in Settings.
@@ -23794,8 +23660,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             if (handleWebIconRequest(req, res, requestPath))
                 return;
             // Public: the health probe, /agent (instance-token auth of its own), the
-            // sign-in surface, and /view's reads unless web.view_access says otherwise.
-            if (bypassesWebGate(req, requestPath, this.fleetConfig, p => !gatewayRequestContext(req) && (isViewPath(p) || isUsagePath(p)))) {
+            // sign-in surface, and /view's reads unless web.view_access says otherwise (#2855: never a guest's, which go
+            // through the guest gate and its limits on either listener).
+            if (bypassesWebGate(req, requestPath, this.fleetConfig, p => !gatewayRequestContext(req) && (isViewPath(p) || isUsagePath(p)) && !this.presentsGuestSession(req))) {
                 // fall through to the handlers below
             }
             else {
@@ -23861,7 +23728,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                         streamOpened: () => { void this.refreshGuestRooms(owner, { mode: "force" }); },
                         history: () => this.webChatHistory,
                         // #1920 §5.1: guests chat unless the host made them read-only (web.guests.chat: false).
-                        chat: () => this.fleetConfig?.web?.guests?.chat !== false });
+                        chat: () => this.fleetConfig?.web?.guests?.chat !== false,
+                        // #2855: the admin's level for this guest, read at each request (a change applies at once).
+                        trusted: () => this.guestTrusted(owner) });
                 }
                 if (decision.via === "session" && this.webToken) {
                     const upgrade = sessionCookieUpgrade(req, this.webToken, decision.session);
@@ -24267,7 +24136,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             return;
         }
         const listener = createPreviewListener({ settings, healthPort: boundPort, config: this.fleetConfig,
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
             // #1723: with a web.preview_origin, the open public link's dashboard frames this listener's preview too.
             extraOrigins: () => { const o = settings.origin ? this.publicWebLink?.openDashboardOrigin() : null; return o ? [o] : []; } });
         this.previewListener = listener;
@@ -24444,8 +24312,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 catch {
                     return {};
                 } })(),
-                // #2118: only this Chat's placement content; guest projection drops global revisions.
-                effect_chat_v: this.canvasWorkerEnabled() ? createHash("sha256").update(JSON.stringify(this.themeStore.get(name).placements.effects)).digest("hex").slice(0, 32) : null,
                 // #1958: the identity colour's tiers (the page resolves them: the agent's only while it shows agents' themes).
                 color: { ...(colors.get(name)?.color ? { person: colors.get(name).color } : {}), ...(image.agentColor ? { agent: image.agentColor } : {}),
                     ...(image.roleColor ? { role: image.roleColor } : {}), auto: autoIdentityColor(name) },
@@ -24456,6 +24322,12 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 tags: identity.tags,
                 teams: instanceTeams(this.fleetConfig?.teams, name), // #2172: the sidebar groups a team's members under it
                 last_reply: this.webChatHistory.lastAgentReply(name) ?? undefined, // #2179: its last reply to a person (ISO)
+                // #2855: its last reply that reached the channel — the only reply time a guest's sidebar gets (guestStatus).
+                last_reply_channel: this.webChatHistory.lastAgentReply(name, { channel: true }) ?? undefined,
+                // #2855: the web commands a guest may run here — the table's "anyone" cells for this channel (guestWebCommands);
+                // only while guests are on (no guest reads it otherwise).
+                ...(this.fleetConfig?.web?.guests?.enabled === true
+                    ? { guest_commands: (() => { const scope = this.webCommandScope(name); return scope ? guestWebCommands(scope, this.commandPlatform(name)) : []; })() } : {}),
                 status: this.getInstanceStatus(name),
                 // `state` (presentation: may be awaiting_input) and `execution_state` (working / idle / stuck, or null —
                 // what the dashboard's activity events carry) come from instancePresentation (#1212).
@@ -24472,7 +24344,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             };
         });
         return {
-            canvas_worker: this.canvasWorkerEnabled(),
             instances,
             startup: this.startupDashboard?.snapshot() ?? null,
             publicLink: this.getPublicWebStatus(),