@songsid/agend 2.3.2 → 2.3.3-beta.10

package/dist/fleet-process-handlers.d.ts

@@ -16,4 +16,9 @@ interface FleetProcessOptions {
 export declare function installFleetProcessHandlers(options: FleetProcessOptions): {
     readonly stopping: boolean;
 };
+/** A deliberate config-recovery refusal is a failed start, not an arbitrary runtime rejection to keep alive. */
+export declare function startFleetOrExit(manager: {
+    startAll(path: string): Promise<void>;
+    stopAll(): Promise<void>;
+}, path: string, runtime: Pick<NodeJS.Process, "exit">, output: Pick<Console, "error">): Promise<void>;
 export {};

package/dist/fleet-process-handlers.js

@@ -75,4 +75,25 @@ export function installFleetProcessHandlers(options) {
     });
     return { get stopping() { return stopping; } };
 }
+/** A deliberate config-recovery refusal is a failed start, not an arbitrary runtime rejection to keep alive. */
+export async function startFleetOrExit(manager, path, runtime, output) {
+    try {
+        await manager.startAll(path);
+    }
+    catch (error) {
+        const { ConfigStartupError } = await import("./config-history.js");
+        if (!(error instanceof ConfigStartupError))
+            throw error;
+        output.error(error.message);
+        let timer;
+        try {
+            await Promise.race([manager.stopAll().catch(() => { }), new Promise(resolve => { timer = setTimeout(resolve, 10_000); })]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+        runtime.exit(1);
+    }
+}
 //# sourceMappingURL=fleet-process-handlers.js.map

package/dist/fleet-process-handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"fleet-process-handlers.js","sourceRoot":"","sources":["../src/fleet-process-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAc;IAC9D,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;YAClF,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;YACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAWD,gFAAgF;AAChF,MAAM,UAAU,2BAA2B,CAAC,OAA4B;IACtE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClC,uEAAuE;QACvE,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,sEAAsE;YACtE,qEAAqE;YACrE,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QACrC,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAC,CAAC,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QACzE,OAAO,UAAU,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,UAAU,CAAC,CAAC;QAAC,CAAC;QACzF,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,4EAA4E;QAC5E,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE;QACvC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,OAAO,CAAC,gBAAgB,CAAC,2DAA2D,OAAO,wCAAwC,CAAC,CAAC;QACvI,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,QAAQ,KAAK,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC"}
+{"version":3,"file":"fleet-process-handlers.js","sourceRoot":"","sources":["../src/fleet-process-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAc;IAC9D,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;YAClF,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;YACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAWD,gFAAgF;AAChF,MAAM,UAAU,2BAA2B,CAAC,OAA4B;IACtE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClC,uEAAuE;QACvE,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,sEAAsE;YACtE,qEAAqE;YACrE,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QACrC,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAC,CAAC,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QACzE,OAAO,UAAU,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,UAAU,CAAC,CAAC;QAAC,CAAC;QACzF,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,4EAA4E;QAC5E,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE;QACvC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,OAAO,CAAC,gBAAgB,CAAC,2DAA2D,OAAO,wCAAwC,CAAC,CAAC;QACvI,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,QAAQ,KAAK,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA4E,EAC5E,IAAY,EACZ,OAAqC,EACrC,MAA8B;IAE9B,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IACrC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClI,CAAC;gBAAS,CAAC;YAAC,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/fleet-service-owner.d.ts

@@ -0,0 +1,11 @@
+export declare const fleetServiceOwner: {
+    updateRefusal(home: string, options?: {
+        locale?: string;
+    }): string | null;
+    restartRefusal(home: string, service: {
+        unit: string;
+        user: boolean;
+    }, options?: {
+        locale?: string;
+    }): string | null;
+};

package/dist/fleet-service-owner.js

@@ -0,0 +1,3 @@
+import { createRequire } from "node:module";
+export const fleetServiceOwner = createRequire(import.meta.url)("../launcher/fleet-service-owner.cjs");
+//# sourceMappingURL=fleet-service-owner.js.map

package/dist/fleet-service-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-service-owner.js","sourceRoot":"","sources":["../src/fleet-service-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,qCAAqC,CAGpG,CAAC"}

package/dist/general-knowledge/skills/credential-profiles/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: credential-profiles
-description: Run agents on more than one subscription of the same backend. Use when someone asks for a worker on a different account, wants an agent moved to another subscription, or asks which subscription an agent is using. Currently kiro-cli, codex and claude-code.
+description: Run agents on more than one subscription or login of the same backend (credential profiles). Use when someone asks for a worker on a different account; to switch, change or move an agent's profile, credential profile, account or login (codex, claude-code, kiro-cli); whether its session or conversation continues after the switch; or which subscription an agent is using. Also 換帳號、換 profile、切換 codex/claude/kiro 登入、換訂閱、切換後接續 session. Currently kiro-cli, codex and claude-code.
 roles: [general]
 ---
 
@@ -97,6 +97,15 @@ update_instance_config(
 )
 ```
 
+For codex (or claude-code) the call is the same with that backend's key:
+
+```
+update_instance_config(
+  name: "research-a",
+  config: { backend_options: { codex: { credential_profile: "personal" } } },
+)
+```
+
 The credentials are read when the CLI starts, so a running instance **is
 restarted for you** and the reply says `restarted: true`. A paused or stopped one
 is not started: the reply says `restarted: false`, and the switch applies at its
@@ -127,6 +136,7 @@ it is not a check that the new process opened the same thread. If there is no
 suitable session (or the DB is unreadable), Codex starts fresh as it would on any
 other launch. **Never** copy `state_5.sqlite`, the `cx/` hash dirs or rollout
 JSONL by hand. That can fork or corrupt the thread index.
+Do not run `codex resume <id>` by hand or look up session ids in `~/.codex/sessions`: the restart takes AgEnD's normal resume path itself.
 
 **Claude Code — copy nothing yourself.** AgEnD copies the transcript and its
 folder into the new profile and resumes it there with `--continue`. The

package/dist/general-knowledge/skills/delegation-playbook/SKILL.md

@@ -29,7 +29,7 @@ When an instance reports back, classify the outcome:
 - Success → Summarize key results for user. Omit internal coordination noise.
 - Partial → State what succeeded, what remains, proposed next steps.
 - Failure → Retry up to 2 times. If still failing: try alternative instance, reduce scope, or return partial result clearly marked.
-- No response → when a `[system:reply-overdue]` notice arrives (after 15 min by default), check `describe_instance` and `delivery_status` before asking again. If still silent: report to user with options.
+- No response → check `describe_instance` and `delivery_status` before asking again (the owner is reminded on its own; you are not notified). If still silent: report to user with options.
 
 ## Shared Decisions
 

package/dist/general-knowledge/skills/fleet-restart/SKILL.md

@@ -35,7 +35,7 @@ agend update --yes            # from a fleet session: the installed channel's la
 agend update --version 2.2.0 --yes  # a specific version
 ```
 
-It installs the selected release, checks the install, and restarts the fleet service. `--alpha` / `--beta` / `--stable` pick a channel; details in docs/cli.md. A beta install stays on the beta channel: to move it to the stable release (for example from a 2.3.2 beta to 2.3.2), use `agend update --stable --yes`, and only when the user asked for it.
+It installs the selected release, checks the install, and restarts the fleet service. `--alpha` / `--beta` / `--stable` pick a channel; details in docs/cli.md. A beta install stays on the beta channel and keeps getting betas.
 
 **Manual restart (if update isn't needed):**
 ```bash

package/dist/general-knowledge/skills/session-management/SKILL.md

@@ -6,7 +6,7 @@ roles: [general]
 
 ## Auth failure (auto-pause)
 
-When AgEnD sees `auth_error` it **pauses** that instance (`pausePending` sticky):
+When AgEnD sees `auth_error` and its token-free auth check does not vouch for the login, it **pauses** that instance (`pausePending` sticky). Auth text on the pane alone (an agent quoting a login message) changes nothing:
 - One notification **per backend** (not per instance) — log in once, same-backend peers recover.
 - Auth is **per backend**: one re-login restores every instance on that backend (claude-code, codex, kiro-cli, grok, opencode, antigravity, muse).
 - Re-login: `/login <backend>` (opencode: `opencode auth login` in a terminal), then wake the affected instance.
@@ -40,6 +40,8 @@ Verified by running each one, not read from docs.
 
 ## kiro-cli
 
+Switching an agent's profile or login and keeping its session → the `credential-profiles` skill (update_instance_config); never resume by hand.
+
 - **Store:** `~/.kiro/sessions/cli/<uuid>.json`
 - **DB:** `~/.local/share/kiro-cli/data.sqlite3`, table `conversations_v2`
   - `key` — the instance's working directory
@@ -103,6 +105,8 @@ cur.execute("SELECT session_id FROM session_docs_fts WHERE session_docs_fts MATC
 
 ## claude-code
 
+Switching an agent's profile or login and keeping its session → the `credential-profiles` skill (update_instance_config); never resume by hand.
+
 - **Store:** `~/.claude/projects/<path-encoded>/<session-uuid>.jsonl` — **the filename is the session ID**.
 - `<path-encoded>` = the absolute cwd with every `/` replaced by `-`.
 
@@ -127,6 +131,8 @@ A session with no `ai-title` line is simply untitled — say so rather than inve
 
 ## codex
 
+Switching an agent's profile or login and keeping its session → the `credential-profiles` skill (update_instance_config); never resume by hand.
+
 Restoring works well; **listing is the weak part — there is no index table.**
 
 - **Store:** `~/.codex/sessions/YYYY/MM/DD/rollout-<timestamp>-<uuid>.jsonl`

package/dist/general-knowledge/skills/web-appearance/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: web-appearance
-description: How you look on the AgEnD web dashboard — check it, change your own theme, identity card, identity colour and widgets, set an ambient effect (falling petals, click stars), play Canvas Worker effects in your chat (and offer a Try), preview the result, share it as a mod; and, for General, changing Settings → Look for the user
+description: How you look on the AgEnD web dashboard — check it, change your own theme, identity card, identity colour and widgets, set an ambient effect (falling petals, click stars), and preview the result; and, for General, changing Settings → Look for the user
 roles: [general, worker, classic]
 ---
 
@@ -21,8 +21,6 @@ can shape how you look there — **only your own look, and only on the surfaces
 | Your chat header strip and Details page | widgets: small panels of facts the dashboard draws | `set_web_widget`, `remove_web_widget` |
 | An ambient effect in your chat | falling petals, snow, rising lanterns, twinkles, stars where a person clicks — data only, drawn by the dashboard | `set_web_ambient`, `clear_web_ambient` |
 | Your character in Fleet → Org chart → Office | walk to a seat, a spot or a person, say a short line, hold a pose — for a few seconds (off until a person switches it on) | `office_view`, `office_set` |
-| A file of your look | a mod: export yours, or propose one for a person | `export_web_mod`, `propose_web_mod` |
-| Effects in your chat | Canvas Worker animations, and Try cards an admin outside the public link may start | `upload_web_effect`, `apply_web_effect`, `preview_web_effect`, … (see Effects) |
 
 None of these tools takes a target: they always act on you. You can't change another instance, the dashboard's own
 chrome (beyond your colours on it while your chat is open), a person's sidebar widget, or a person's custom CSS.
@@ -35,8 +33,7 @@ URLs, assets only as `url("asset:<id>")`, at most 64 KiB. Other instances can't;
 of this skill).
 
 1. **Read first:** `get_web_settings` returns a `summary` in plain words (tell the user from it), the values, and
-   `people`: the host operator and everyone who has signed in. Host settings are everyone's on this host. Custom CSS and
-   effect slots are one person's own: pass `person` as the entry whose id is the user's (`person:<adapter>:<their id>`),
+   `people`: the host operator and everyone who has signed in. Host settings are everyone's on this host. Custom CSS is one person's own: pass `person` as the entry whose id is the user's (`person:<adapter>:<their id>`),
    else the host operator's are changed.
 2. **One change per call:** `set_web_settings({ person?, change })`, where `change.what` is one of:
 
@@ -47,19 +44,15 @@ of this skill).
 | `page_colours` | where one agent's theme colours go: `page` (the whole page), `chat` (only its chat) or `agent` (its own `page.on`) — as ⋯ → Page colours sets it | `{ what: "page_colours", instance: "atlas", choice: "chat" }` |
 | `banner_focus` | which part of one agent's cropped card banner stays in view: `focus` 0 (top) … 100 (bottom), 50 the centre; it wins over the agent's own `card.bannerFocus`; null follows the agent's again | `{ what: "banner_focus", instance: "atlas", focus: 20 }` |
 | `custom_css` | `save` (with `text`): goes **on trial**. It waits until they open the dashboard (up to 10 minutes; never opened, it goes back unseen), then goes back by itself 20 s after it is on their screen unless kept (#2198). `keep` (with `trial`: the id `save` returned — a different trial on now, say one they saved on their page since, is refused with `trial_mismatch`, never kept instead; or, kept after that 20 s ran out, it is put back in force as `use` of it), `revert` (the trial), `use` (with `version`: an earlier saved one, at once), `off` | `{ what: "custom_css", action: "save", text: "…" }`; tell them to open the dashboard and look, then `keep` (with that `trial`) only when they say so — a `keep` that comes too late (`not_on_trial`) means use `use` with the version from `get_web_settings` |
-| `mod` | an agent's proposal: `review` (instance → `stage`, `plan`, `plan_hash`), then `install` (stage, plan_hash, `include`: the parts, `target`: the agent); `cancel`, `dismiss`, `uninstall` (id) | review, show the user the plan, install only what they asked for — never custom CSS unasked. A person has one review open at a time: while theirs is open (`mod_review_open`) ask them to finish it; a mod they imported from a file is theirs to install (`mod_not_from_an_agent`) |
-| `effect` | `apply` (instance, id, params?) or `remove` (instance, id?) an effect on a chat | |
 | `ambient` | one agent's ambient effect, set for the user: `ambient` is the same spec as `set_web_ambient`'s (it replaces the one of its kind, and the agent can't change it after); `ambient: null` clears (`which`: `loop` or `click`, default both) | `{ what: "ambient", instance: "atlas", ambient: { preset: "fall", glyphs: ["🌸","❀","✿"] } }` |
-| `effect_slot` | a person's `sidebar` / `header` / `page` / `box` / `cursor` effect (an id, or null) | |
 | `restore_defaults` | the host settings back to their defaults, and the person's custom CSS off | |
 
 3. **Say what changed** in the user's words (read again if unsure). A refusal says why: the same words the page would
    show.
 
 **Only the person can do these, on the page:**
-- choose a file from their computer: import a mod file, upload an effect folder, add a CSS asset or a card picture;
+- choose a file from their computer: add a CSS asset or a card picture;
 - this browser's own switches: custom CSS off on this device, pausing effect playback;
-- download an export;
 - the card upload limits (fleet configuration; a raise waits for an admin's confirmation).
 
 ## Look first
@@ -242,7 +235,6 @@ Then, as you go: `set_web_widget { "slot": "chat_header", "data": { "tests": 75
 
 An ambient effect is **data only**: you choose a preset and its glyphs, the dashboard draws them. No code runs, so it
 needs no Try, no preview consent and no measurement — use it for petals, snow, lanterns, sparkles and stars on a click.
-Use a Canvas Worker effect (below) only for what a preset can't express.
 
 `set_web_ambient { preset, glyphs, colors?, count?, duration?, size?, sway?, spread?, rotate?, opacity? }`:
 
@@ -328,43 +320,15 @@ tools are not in your list), you can publish them yourself instead of asking a p
 The skin-pack manifest format — every key, its ranges, a minimal example — and the limits are in the Office guide:
 [docs/office.md → Make a skin pack](https://github.com/songsid/AgEnD/blob/main/docs/office.md#make-a-skin-pack). Point people there too when they ask how the Office works.
 
-## Mods
-
-A mod is one file, `<name>-<version>.agendmod.json`, that carries a look: a theme with its pictures, card text,
-widgets and effects. People import mods in **Settings → Look → Mods**. **You never import**: a person reviews
-everything in a mod and ticks what to apply.
-
-- `export_web_mod { name, version, title? }` writes **your own** look to `.agend/mods/<name>-<version>.agendmod.json`
-  in your working directory and returns `{ path, bytes }`. It carries your theme with its pictures, the effects your
-  theme places (with their params) when they are yours or shared with you, your own card text (not a person's card
-  fields), the widgets and ambient effects you set yourself. A person's private effect placed on you stays out (`effects_omitted` counts it).
-  It never carries custom CSS or the sidebar widget, which are a person's. `name` is a-z, 0-9 and -, `version` is
-  MAJOR.MINOR.PATCH.
-- `propose_web_mod { file }` sends a mod file from your working directory (at most 8 MiB) for a person to review. It
-  is checked whole and answers with its problems if it isn't valid. **A mod carrying custom CSS is refused**
-  (`owner_css_not_from_agent`). A muted line in your chat says it was proposed. Nothing changes until a person
-  installs it. One proposal at a time: a new one replaces yours.
-- A widget a person placed from a mod is theirs: you may give it values (`set_web_widget` with `data`), but not replace
-  or remove it (`person_placed`).
-
-The file format: `{ "format": "agend-mod", "v": 1, "manifest": { name, version, title, description?, author?,
-requires?: { agend: ">=X.Y.Z" }, contents: { theme?, identity?, widgets?: { chat_header?, details? }, ambient?, effects? } },
-"files": { "<path>": { "sha256", "b64" } } }`. Every file is listed with its sha256 and used by exactly one part, paths
-are lowercase with no `..`, and a theme names its pictures by path (an ambient's glyph pictures too: `{ "asset": "<path>" }`). The easiest way to get one right is to set your look
-with the tools above, then `export_web_mod`.
-
 ## Limits
 
 - At least **30 s** between changes, at most **10 changes an hour** — refused with `rate_limited` and
   `retry_after_s`. Only an accepted change counts; a refused or invalid one costs nothing.
-- Uploads (pictures, effects, proposed mods) are not counted. Each picture slot's size limits, your picture quota and
+- Picture uploads are not counted. Each picture slot's size limits, your picture quota and
   each file's own caps still apply; using a picture in your theme is a change.
 - Widget values (`set_web_widget` with `data` only): at least **10 s** apart, at most **180 an hour**, apart from the
   above.
 - `set_web_ambient` and `clear_web_ambient` are changes.
-- Effects: `apply_web_effect` and `remove_web_effect` are changes; `upload_web_effect` and `propose_web_mod` are not
-  counted.
-  At most 10 effects and 8 MiB of your own, at most two placed in your chat.
 - Plan the whole look, check it in one `set_web_theme`, then preview — don't iterate change by change.
 
 ## A good workflow
@@ -377,12 +341,11 @@ with the tools above, then `export_web_mod`.
 From a shell: `agend-agent theme get|set key=value…|set --json '<patch>'|clear <path>…|asset <slot> <file>|reset`,
 `agend-agent appearance`, `agend-agent appearance preview [light|dark]`, and
 `agend-agent widget set <slot> '<spec json>' ['<data json>']|data <slot> '<data json>'|remove [slot]`,
-`agend-agent ambient set '<spec json>'|clear [loop|click]`, `agend-agent office view [office]|set '<json>'`, and
-`agend-agent mod export <name> <version> [title]|propose <file>`.
+`agend-agent ambient set '<spec json>'|clear [loop|click]`, `agend-agent office view [office]|set '<json>'`.
 
 ## Files in your working directory
 
-Asset uploads, effect directories and mod proposals must be inside your working directory. For an external project,
+Asset uploads must be inside your working directory. For an external project,
 use files there as before. For your own AgEnD-managed workspace under `~/.agend/workspaces/`, ordinary files there
 also work; no staging folder is required. This includes the standard `<your-instance-name>` folder (ClassicBot and
 instances without a project directory) and an exclusively configured folder with another name, such as instance
@@ -391,10 +354,10 @@ not overlap another instance's configured or standard workspace, including persi
 stopped or paused. The `workspaces/` root itself is not a workspace.
 
 General, adapter-specific General (such as `general-telegram`), and other configured working directories elsewhere
-inside the AgEnD state directory must stage inputs under **`web-assets/` or `web-effects/`**. For example, put a banner at
-`web-assets/banner.png` or an effect package at `web-effects/sparks/`, relative to that working directory. Its root
-and backend configuration folders are not upload areas. Generated previews and exported mods still use the fixed
-`.agend/appearance/` and `.agend/mods/` directories and can be read back or proposed there.
+inside the AgEnD state directory must stage inputs under **`web-assets/`**. For example, put a banner at
+`web-assets/banner.png`, relative to that working directory. Its root
+and backend configuration folders are not upload areas. Generated previews use the fixed
+`.agend/appearance/` directory and can be read back there.
 
 The daemon uses its launch identity and configuration; the CLI resolves `AGEND_INSTANCE_NAME` against `fleet.yaml`.
 These checks require a canonical, exclusively owned directory: the state root, shared or overlapping configured
@@ -403,165 +366,11 @@ select an identity or working directory. Missing or unreadable ownership evidenc
 
 Inside all admitted in-state areas, `.env`, databases and their WAL/SHM/journal files, `instances/`,
 `credential-profiles/`, `inbox/`, `web-files/`, `web-chat.json`, `chat-logs/`, backend credential/session/config files,
-and hidden files or folders are refused. The only hidden-directory exception is the two generated `.agend/`
-output directories above; their contents still undergo the sensitive-name checks. Hard-linked state files are also
+and hidden files or folders are refused. The only hidden-directory exception is the generated `.agend/`
+output directory above; their contents still undergo the sensitive-name checks. Hard-linked state files are also
 refused. Copy an intended asset into staging as a new regular file; do not link a private state file there.
 
 Paths are checked after resolving symlinks. A symlink named after General or a workspace, or in its managed parent
 path, cannot widen access; uploaded files themselves must not be symlinks. Containment still applies to relative and
-absolute paths and to each file in an effect package. The CLI name and current directory are controlled by its shell:
+absolute paths and to each uploaded file. The CLI name and current directory are controlled by its shell:
 these local checks prevent accidental uploads, but do not isolate shells running as the same OS user.
-
-## Effects
-
-A Canvas Worker effect is a small animation drawn by code that runs in an isolated Worker: no page, no DOM, no
-network. For petals, snow or stars on a click, an ambient effect (above) is simpler and plays without a Try. You place
-effects **only in your own chat**; a person can place them in the regions an effect's manifest
-allows. None of these tools takes a target.
-
-**The package** (CW1): a directory in your working directory with `effect.json` and `worker.js`, optionally
-`poster.png`, `cursor.png` and `assets/*.png|jpg|jpeg|webp|gif`. No HTML or CSS, at most 20 files and 16 assets. The
-smallest valid `effect.json`:
-
-```json
-{ "v": 1, "kind": "effect", "runtime": "canvas-worker-v1", "worker": "worker.js", "name": "spark", "title": "Spark", "regions": ["chat"], "layer": "behind", "wants": [] }
-```
-
-- Optional fields: `description`, `poster` (`"poster.png"`), `box`, `cursor` (its `hotspot` inside the image) and
-  `params`.
-  - `name`: 1..32 characters, starting with a-z or 0-9, then a-z, 0-9 and -.
-  - `title` (1..40) and `description` (up to 200): one line each, counted in characters as people see them.
-  - `regions`: 1–5 of `chat`, `sidebar`, `header`, `page`, `box`. **Include `chat` to place it in a chat**: applying
-    one without it is refused (`effect_region`), and so is a mod placing it. The other regions are ones a person may
-    choose it for.
-  - `layer`: `behind` (under the content) or `front` (over it).
-  - `wants`: up to 5 of `pointer`, `state`, `reply`, `mention`, `theme`. **`mention` is reserved and never fires in
-    2.3.0** (see Effect event availability).
-  - `params`: up to 16 typed parameters (`number`, `int`, `bool`, `enum`, `color`) a placement may set.
-- `worker.js` (at most 1 MiB, a classic script: static `import` / `export` are refused) draws through the `agend` API:
-  `canvas`, `params`, `asset()`, `on()`, `frame()` and `ready()`. Call `ready()` within 10 s, or it is stopped. Network
-  and dynamic imports are blocked at run time; the upload may warn `network_or_import_api_unsupported`, but don't rely
-  on the warning to catch every use.
-- Size: `effect.json` at most 64 KiB; the whole effect at most 8 MiB as uploaded and **1 MiB normalized**. Pictures:
-  at most 4096 px a side, and **8,388,608 pixels in total** across the assets, poster and cursor together. A cursor is
-  a square PNG of at most 64 px and 32 KiB (after metadata is stripped).
-
-**Reusable pointer example:** [`docs/examples/click-sparks`](https://github.com/songsid/AgEnD/blob/main/docs/examples/click-sparks.md) has a small two-file CW1 package: click for a burst, hold the primary button and move for a trail. Copy it into your working directory before uploading. Protected controls receive no pointer input; samples are coalesced (up to 60 Hz, 30 at reduced quality), so do not use it as a required click or drag control.
-
-**The tools:**
-
-- `upload_web_effect { dir }` → `{ id, warnings }`. Uploads are not counted; the effect's own size caps apply.
-  **Your own** copies are at most **10 effects and 8 MiB**; effects a person shared with you don't count.
-- `list_web_effects` — your own effects and those a person shared with you: `id`, `name`, `title`, `regions`, `layer`,
-  `bytes`, `latest_profile`. A currently placed effect also has `playback`: `status: "reported_blocked"` with closed
-  `reasons`, or `status: "unknown"`. `get_web_appearance.effects` lists your current placements with the same projection.
-  This means **some recent viewers reported blocked**, not all viewers and not a live permission or health check.
-  Observations expire after five minutes and stay in memory. Agents receive no viewer identifiers, counts, device/OS,
-  text, URLs or observation timestamps. Unknown means unknown; do not keep reapplying to bypass a viewer's choice.
-- `apply_web_effect { id, params? }` places one in your chat, **at most two at a time**, with the declared `params`
-  (unknown or out of range → `effect_params`; regions without `chat` → `effect_region`). `remove_web_effect { id? }`
-  takes one out, or all of them. Both are changes (30 s apart, 10 an hour), and are refused while a person has locked
-  your theme (`locked`) or when the fleet turned agent changes off (`theme_editing_off`).
-- `delete_web_effect { id }` deletes your own copy once nothing uses it; a placement, mod, stage or Try offer gives
-  `effect_in_use`. Another's copy is never removed.
-- `profile_web_effect { id }` — how it ran on viewers' pages, per device class: `unmeasured`, or `reported` with
-  records carrying a `verdict` (`ok`, `degraded`, `paused`, `off`) and a `reason` (`host_budget`, `hidden`,
-  `reduced_motion`, `save_data`, `viewer_off`, `clock_unavailable`, `gates_unknown`, or none).
-  `list_web_effects`' `latest_profile` has the latest one. These are best-effort reports of what happened, not live
-  notices. No measurement means unknown, never healthy.
-- `preview_web_effect { id }` offers a Try card in your chat (see Try below).
-- **Sharing is a person's act.** You can't share an effect. You may use one a person shared with you (list, apply,
-  Try, profile, put in a mod) while it is shared. When they unshare it, a placement already in your chat stays
-  eligible for playback (subject to the viewer's and the safety rules); applying, Try, listing, profiling or exporting
-  it again needs your own copy or another share, else `not_found`. A placement is never a grant to export it.
-
-**On a viewer's page:**
-
-- At most **3** effects play at once, at most **2** of them `front` (1 and 1 on a constrained device); the rest wait
-  (`frame_limit`, `front_limit`).
-- CW uses an opaque isolated document on the dashboard listener: no HTML-preview consent, separate preview port or
-  localhost requirement. Signed-in public/guest viewers may read and play only current effects in chats they can see;
-  this grants no library management, personal-slot, private-image, Trial or profile access. Their Chat header has a
-  browser-local show/off switch, including on phones, and an inline recovery action. It never writes host preferences.
-- Playback starts without an empty-page FPS calibration. Safe mode, hidden tabs and the viewer's show switch still
-  stop it. **Effects: follow the system's reduced-motion setting** is device-local and **off by default**, shared with
-  ambient effects. The OS request alone does not block playback; data saver is informational. A one-time chat note
-  offers to follow reduced motion, and a motion refusal offers **Play effects anyway** right there, including public/guest
-  viewers. Safe mode offers **Leave safe mode**. A poster may replace unsupported playback or a chosen motion block
-  (see Static Chat fallback). Menus/dialogs stop `front` effects temporarily.
-- A layout refusal keeps its local code in the Chat notice and Effects dialog (for example `stock_order_unknown`);
-  the browser console also names it. Report that code rather than repeatedly applying the effect. A failed Try leaves
-  its stop code on the offer card. Pointer-leave does not stop Try; window blur, closing, navigation or lost stage proof do.
-  Agent playback summaries still contain only the closed reporting reasons, never raw local diagnostics.
-- **Safety pause** — it measures the page's responsiveness, not your Worker's CPU. Host rAF observations learn a live
-  cadence during warm-up, then fix the mount's floor at 90% of a faster observed cadence, capped at 55 fps (50 on a
-  constrained device). A steady 30 Hz display has a 27 fps floor. This is not an empty-page health certificate; uniformly
-  slow startup can look like a low-refresh display. Where reported, long tasks may take at most 50 ms a second (25 ms
-  constrained); unknown observations never count as free. Overlapping 2-second windows are judged at most once a second
-  after warm-up, and three bad judgements in a row pause the effect (`host_budget`).
-- Only a viewer's explicit **Resume** restarts a safety-paused effect, and it doesn't clear the history: three such
-  pauses within 24 hours turn the effect **off** for that viewer's browser and device class, across tabs and reloads,
-  and Resume then refuses. It doesn't come back by itself after 24 hours.
-- **Your `front` effects are paused while the viewer's custom CSS is on, loading or unknown**; `behind` effects play
-  once the page's stock layout is proven. A person's placement is exempt. Don't keep re-applying (see below).
-
-## Owner-level effect selections
-
-The five owner keys `fx.sidebar`, `fx.header`, `fx.page`, `fx.box` and `fx.cursor` are a signed-in person's web
-preferences, never agent tool targets. Platform-bound sessions use separate adapter/user buckets (no account merge).
-A web-only `agend web --code` session uses the explicit **host-wide operator** bucket, shared by everyone signed in
-as that host operator. Header tokens cannot read or write these five keys. Existing visible host preferences are
-unchanged; there is no local-key migration. Profile/custom-CSS internal pointers keep their existing identity rules.
-
-When a shared effect is unshared, a personal selection remains stored but becomes unavailable at its next resource
-authorization. It supplies no further code or cursor image; the person can clear it. Its reference keeps the blob
-from being collected until cleared. This is deliberately stricter than chat placements' retained-runtime reads:
-a personal choice keeps following its person's current own/shared access, while a chat preserves the exact effect
-placed there. A reference is not a sharing or export grant. Do not keep retrying a denied personal selection.
-
-Owner selectors are available in Settings → Look. With effects enabled, personal page/header/sidebar/box choices play across supported stock pages in the same pool
-as signed-in Chat. HTML-preview consent and its service are not involved.
-Look offers slot Pause/Resume and unavailable/Clear controls. The personal cursor uses a static PNG on the host shell without HTML-preview consent: no Worker/code read or frame slot. It preserves explicit pointer/text/resize cursors, falls back while dragging or on failure, and has status/Clear rather than Worker Pause/Resume. Before revealing paint, the host must prove stock content
-ordering and trust paint coverage. Agent front effects must remain paused when custom CSS is active, loading or
-unknown; a person sees the reason and can open the causing setting. Human placements retain their exemption from
-that agent restriction, and behind effects still require proven ordering. Saving a placement alone is not proof of
-playback.
-
-Visible menus, dialogs and Keep/tour notices suppress foreground effects; a human placement does not bypass them.
-Editable focus suppresses pointer signals, not unrelated drawing. Protected controls stay clipped out of front paint;
-keyboard events never enter the Worker. Unknown stock layout refuses admission. A trusted foreground plane is
-deferred to #1940; do not keep reapplying an agent front while custom CSS is on, loading or unknown.
-
-### Try: offer first, signed-in admin click to start
-
-`preview_web_effect({id})` posts a volatile Try card in your own web chat, using your current own/shared read rights. It starts nothing and changes no appearance. The sample is physically clipped inside its own host panel or sheet. Only an explicit
-click by a signed-in **admin outside the public link** may start it (localhost is not required); never an agent, public link, header token or automatic action.
-The host owns a visible Trial label and Stop control. Closing the panel/sheet, navigating, window blur, or another
-menu/dialog stops it. The explicit Try click consents to this sample only; no global HTML-preview opt-in is needed or changed.
-The host isolates the Trial controls and clipped stage in a closed Shadow DOM with fixed styles and reset typography.
-Custom CSS stays active elsewhere. The same caps, profiler and safety stops apply. Ordinary foreground effects stay suppressed. A volatile offer lasts at most ten minutes (offering the same effect again keeps that offer and its expiry; a different effect replaces it); every read
-rechecks the originating agent's current own/shared access, with the trial bound to the admin's session and epoch.
-There is no saved placement, claim, share, export or new saved profile record. Cards are memory-only and become inert when expired; a restart never restores them. Try uses manifest defaults and the existing app pool, not a second runtime. Do not treat an offer id or ordinary reply button
-as permission to run or fetch an effect, and do not keep retrying an unavailable Try.
-
-
-## Static Chat fallback
-
-When Worker/transport support is unavailable, the chosen motion preference prevents playback, or the page has no playback session,
-a current chat placement with a poster can show its static PNG **behind** the content; a front declaration does not
-make its poster foreground. No poster means nothing is drawn. Safe mode and the viewer's show switch hide posters
-too; unknown stock ordering refuses paint. Explicit Pause, queued effects and a failed live read are not replaced by
-this surface fallback. A failed static read/decode stops its poster pool until a changed revision or page reload;
-there is no automatic network retry. Public viewers can read current Chat Worker code, with fresh session/exposure/placement checks; they acquire no library or personal-slot grant. They have no placement-management or Try controls.
-
-The public-link show switch is this browser's choice, kept separately from boot-cached host defaults; it never writes
-a host preference. The ordinary signed-in switch keeps its existing host preference. Do not depend on decoration to
-carry an important message.
-
-## Effect event availability
-
-Canvas Worker manifests may reserve `wants: ["mention"]`, but **mention is reserved and never emitted in 2.3.0**.
-Do not build an effect that depends on it, infer mentions from reply text, or retry to obtain that signal. Provider-confirmed,
-viewer-scoped direct-ID mention pulses are deferred to [#1963](https://github.com/songsid/AgEnD/issues/1963).
-Reply pulses are transient: only a newly accepted live SSE agent reply can qualify. History, reconnect replay and polling
-never create a pulse; a live receipt delayed over five seconds is dropped. No reply text, author or mention targets reach effects.