@songsid/agend 2.3.2 → 2.3.3-beta.10

package/dist/ui/search-dialog.js

@@ -3,10 +3,11 @@
 // ↑↓ and Enter, Esc or a click outside to close; filters folded under one toggle. A chat row still in the agent's
 // history opens there, at the message (#m=); anything else — a chat row that has left the history, a message between
 // agents, a task — opens here as the index's copy (GET /ui/search/context). Text only: no innerHTML, no style attribute.
+// #2855: a trusted guest's — the chats it can see only (the server's rule): no settings, teams, sources or "only mine".
 import { html, useEffect, useLayoutEffect, useMemo, useRef, useState } from "/assets/app-html.js";
 import { t, register } from "/assets/app-i18n.js";
 import { recordEdit } from "/assets/text-undo.js";
-import { appStore, useStore } from "/assets/app-store.js";
+import { appStore, guestPage, useStore } from "/assets/app-store.js";
 import { navigate } from "/assets/app-nav.js";
 import { chatPath, fleetPath } from "/assets/app-route.js";
 import { namesOf, namesStore } from "/assets/instance-nav.js";
@@ -28,6 +29,8 @@ register("search", {
     building: "Still indexing — some older results may be missing.",
     limited: "Words of 1–2 characters alone search the newest 5,000 entries only — add a longer word to search everything.",
     unavailable: "Search is off or not available (web.search in fleet.yaml).", busy: "Search is busy — try again in a moment.",
+    guestPlaceholder: "Search your chats…", guestHint: "Find something said in the chats you can see: a word or two. Short words (1–2 characters) work too.",
+    tooMany: "Too many searches. Try again in {0} seconds.",
     signedOut: "Signed out — sign in again to search.", failed: "Search failed — try again.",
     keys: "↑↓ move · Enter open · Esc close", results: "Results", back: "Results",
     gone: "This message is no longer in the chat's history — this is the copy kept by search.",
@@ -47,6 +50,8 @@ register("search", {
     building: "索引仍在建立中，較舊的結果可能還沒出現。",
     limited: "只有 1–2 個字的短詞時，只會搜尋最新的 5,000 筆；加上較長的詞即可搜尋全部。",
     unavailable: "搜尋已關閉或無法使用（fleet.yaml 的 web.search）。", busy: "搜尋忙碌中，請稍後再試。",
+    guestPlaceholder: "搜尋你的聊天…", guestHint: "找你看得到的聊天裡說過的事：輸入一兩個詞。1–2 個字的短詞也可以。",
+    tooMany: "搜尋太多次了，請 {0} 秒後再試。",
     signedOut: "已登出，請重新登入後再搜尋。", failed: "搜尋失敗，請再試一次。",
     keys: "↑↓ 移動 · Enter 開啟 · Esc 關閉", results: "結果", back: "結果",
     gone: "這則訊息已不在聊天紀錄中，以下是搜尋保留的副本。",
@@ -144,7 +149,10 @@ export function jumpToMessage(instance, key, w = window) {
   w.dispatchEvent(new Event("hashchange"));
 }
 
-const errorText = (status) => (status === 404 ? t("search.unavailable") : status === 503 ? t("search.busy") : status === 401 ? t("search.signedOut") : t("search.failed"));
+const errorText = (status, retryS) => (status === 404 ? t("search.unavailable") : status === 503 ? t("search.busy") : status === 401 ? t("search.signedOut")
+  : status === 429 ? t("search.tooMany", retryS || 60) : t("search.failed"));
+/** #2855: a refused guest search's "try again in" (seconds), from its answer. */
+const retryOf = async (r) => { try { const b = await r.json(); return { error: b && b.error, s: Number(b && b.retry_after_s) || 0 }; } catch { return { error: null, s: 0 }; } };
 
 /** #2347 §6: how many settings the dialog lists above the messages (the Settings page's own search lists them all). */
 const SETTINGS_SHOWN = 5;
@@ -154,7 +162,8 @@ export function SearchDialog({ preset = {}, onClose }) {
   const app = useStore(appStore);
   const names = useStore(namesStore);
   const [q, setQ] = useState(preset.q || "");
-  const [f, setF] = useState({ instance: preset.instance || "", team: "", since: "any", sources: [...SOURCES], mine: false });
+  const guest = guestPage();
+  const [f, setF] = useState({ instance: preset.instance || "", team: "", since: "any", sources: guest ? ["chat"] : [...SOURCES], mine: false });
   const [showFilters, setShowFilters] = useState(!!preset.instance);
   const [teams, setTeams] = useState(null);
   const [res, setRes] = useState({ status: "idle" });
@@ -193,8 +202,15 @@ export function SearchDialog({ preset = {}, onClose }) {
     const ac = typeof AbortController === "function" ? new AbortController() : null;
     const timer = setTimeout(async () => {
       try {
-        const r = await fetch(url, { headers: { Accept: "application/json" }, ...(ac ? { signal: ac.signal } : {}) });
+        const ask = () => fetch(url, { headers: { Accept: "application/json" }, ...(ac ? { signal: ac.signal } : {}) });
+        let r = await ask();
         if (mine !== seq.current) return;
+        if (r.status === 429) {
+          // #2855: a guest's searches run one at a time — the one before this may still be finishing: once more, shortly.
+          const why = await retryOf(r);
+          if (why.error === "guest_search_running") { await new Promise((ok) => setTimeout(ok, 400)); if (mine !== seq.current) return; r = await ask(); if (mine !== seq.current) return; }
+          if (r.status === 429) { const again = why.error === "guest_search_running" ? await retryOf(r) : why; setRes({ status: "error", error: errorText(429, again.s) }); return; }
+        }
         if (!r.ok) { setRes({ status: "error", error: errorText(r.status) }); return; }
         const body = await r.json();
         if (mine !== seq.current) return;
@@ -209,7 +225,7 @@ export function SearchDialog({ preset = {}, onClose }) {
 
   // Teams, once the filters are first shown.
   useEffect(() => {
-    if (!showFilters || teams) return;
+    if (guest || !showFilters || teams) return;
     fetch("/ui/teams", { headers: { Accept: "application/json" } }).then(r => (r.ok ? r.json() : { teams: {} })).then(
       (b) => setTeams(Object.keys((b && b.teams) || {}).sort()), () => setTeams([]));
   }, [showFilters, teams]);
@@ -219,9 +235,9 @@ export function SearchDialog({ preset = {}, onClose }) {
   // While a new query runs, the last answer stays (dimmed) rather than flashing empty.
   const groups = useMemo(() => groupHits(res.hits || []), [res]);
   // #2347 §6: the settings matching the query, from the page's own registry (no request), above the messages.
-  const settings = useMemo(() => (q.trim() ? searchSettings(q).slice(0, SETTINGS_SHOWN) : []), [q]);
+  const settings = useMemo(() => (q.trim() && !guest ? searchSettings(q).slice(0, SETTINGS_SHOWN) : []), [q]);
   const flat = useMemo(() => [...settings.map((entry) => ({ setting: entry })), ...flatHits(groups)], [settings, groups]);
-  const activeFilters = (f.instance ? 1 : 0) + (f.team ? 1 : 0) + (f.since !== "any" ? 1 : 0) + (f.sources.length < SOURCES.length ? 1 : 0) + (f.mine ? 1 : 0);
+  const activeFilters = (f.instance ? 1 : 0) + (f.team ? 1 : 0) + (f.since !== "any" ? 1 : 0) + (!guest && f.sources.length < SOURCES.length ? 1 : 0) + (f.mine ? 1 : 0);
 
   // The active row stays in view.
   useEffect(() => {
@@ -239,7 +255,7 @@ export function SearchDialog({ preset = {}, onClose }) {
     // Any failure — the request, or a body that is not JSON — ends as an error, never "Loading…" for good.
     fetch(`/ui/search/context?key=${encodeURIComponent(hit.key)}`, { headers: { Accept: "application/json" } })
       .then(async (r) => {
-        if (!r.ok) { setDetail(d => (d && d.hit === hit ? { hit, status: "error", error: r.status === 404 ? t("search.notFound") : errorText(r.status) } : d)); return; }
+        if (!r.ok) { const s = r.status === 429 ? (await retryOf(r)).s : 0; setDetail(d => (d && d.hit === hit ? { hit, status: "error", error: r.status === 404 ? t("search.notFound") : errorText(r.status, s) } : d)); return; }
         const body = await r.json();
         setDetail(d => (d && d.hit === hit ? { hit, status: "ok", ctx: body } : d));
       })
@@ -266,7 +282,7 @@ export function SearchDialog({ preset = {}, onClose }) {
     <div class="search-box">
       <div class="search-head">
         <${Icon} name="search" />
-        <input ref=${input} class="search-input" type="search" value=${q} placeholder=${t("search.placeholder")} aria-label=${t("search.label")}
+        <input ref=${input} class="search-input" type="search" value=${q} placeholder=${t(guest ? "search.guestPlaceholder" : "search.placeholder")} aria-label=${t("search.label")}
           role="combobox" aria-expanded=${flat.length && !detail ? "true" : "false"} aria-controls="search-results" aria-autocomplete="list"
           aria-activedescendant=${activeId} autocomplete="off" spellcheck=${false} enterkeyhint="search"
           onInput=${(e) => { setQ(e.target.value); setDetail(null); }} />
@@ -288,24 +304,24 @@ export function SearchDialog({ preset = {}, onClose }) {
           ${["any", "day", "week", "month"].map(k => html`<button type="button" class=${`chip-btn${f.since === k ? " on" : ""}`} aria-pressed=${f.since === k ? "true" : "false"}
             onClick=${() => setFilter({ since: k })}>${k === "any" ? t("search.anyTime") : t(`search.${k}`)}</button>`)}
         </div>
-        <div class="search-chips" role="group" aria-label=${t("search.sources")}>
+        ${guest ? null : html`<div class="search-chips" role="group" aria-label=${t("search.sources")}>
           ${SOURCES.map(s => html`<button type="button" class=${`chip-btn${f.sources.includes(s) ? " on" : ""}`} aria-pressed=${f.sources.includes(s) ? "true" : "false"}
             onClick=${() => toggleSource(s)}>${t(`search.src_${s}`)}</button>`)}
           <label class="search-mine"><input type="checkbox" checked=${f.mine} onChange=${(e) => setFilter({ mine: e.target.checked })} />${t("search.mine")}</label>
-        </div>
+        </div>`}
       </div>` : null}
       <div class="search-body" ref=${list}>
         ${detail ? html`<${Detail} detail=${detail} q=${q} label=${label} onBack=${() => { setDetail(null); input.current && input.current.focus(); }} onClose=${onClose} />`
-          : html`<${Results} q=${q} res=${res} groups=${groups} settings=${settings} active=${active} setActive=${setActive} open=${open} label=${label} filtered=${activeFilters > 0}
+          : html`<${Results} guest=${guest} q=${q} res=${res} groups=${groups} settings=${settings} active=${active} setActive=${setActive} open=${open} label=${label} filtered=${activeFilters > 0}
               recent=${recent} pick=${(s) => { recordEdit(input.current); setQ(s); input.current && input.current.focus(); }} clearRecent=${() => { forgetRecent(); setRecent([]); }} />`}
       </div>
       <div class="search-foot" aria-hidden="true">${t("search.keys")}</div>
     </div></dialog>`;
 }
 
-function Results({ q, res, groups, settings = [], active, setActive, open, label, filtered, recent, pick, clearRecent }) {
+function Results({ guest = false, q, res, groups, settings = [], active, setActive, open, label, filtered, recent, pick, clearRecent }) {
   if (!q.trim()) {
-    return html`<div class="search-empty"><p class="search-hint">${t("search.hint")}</p>
+    return html`<div class="search-empty"><p class="search-hint">${t(guest ? "search.guestHint" : "search.hint")}</p>
       ${recent.length ? html`<div class="search-recent"><div class="search-recent-head"><span>${t("search.recent")}</span>
         <button type="button" class="chip-btn" onClick=${clearRecent}>${t("search.clearRecent")}</button></div>
         <ul>${recent.map(s => html`<li><button type="button" class="search-recent-item" onClick=${() => pick(s)}><${Icon} name="clock" size=${14} /><span>${s}</span></button></li>`)}</ul></div>` : null}</div>`;

package/dist/ui/settings-appearance.js

@@ -6,8 +6,6 @@ import { register, t } from "/assets/app-i18n.js";
 import { recordEdit } from "/assets/text-undo.js";
 import { appStore, useStore } from "/assets/app-store.js";
 import { ModsCard } from "./settings-mods.js";
-import { experimentalComponent, useCanvasWorker } from "/assets/feature-flags.js";
-const EffectsCard = experimentalComponent(() => import("./settings-effects.js"), m => m.EffectsCard);
 import { Icon } from "/assets/ui-icons.js";
 import { toast } from "/assets/ui-toast.js";
 import { ownerCssOffHere, ownerCssTrial, safeMode, setOwnerCssActive, setOwnerCssOffHere, startOwnerCssTrial } from "/assets/owner-css.js";
@@ -17,7 +15,7 @@ import { CARD_SIZES, cardSizeDefault, cardSizeStore, setCardSizeDefault } from "
 import { AgentWidget, checkWidget, fleetBinds, setSidebarWidget, sidebarWidgetRaw, sidebarWidgetStore, widgetProblem } from "/assets/agent-widget.js";
 import { confirmedWrite } from "./settings-confirm.js";
 import { savePref, withoutHold } from "/assets/app-prefs.js";
-import { DEFAULT_SCHEMA, impactOf, ownChoiceImpact } from "./settings-model.js";
+import { ownChoiceImpact } from "./settings-model.js";
 import { confirmDialog } from "/assets/ui-confirm.js";
 import { colorsOff, defaultPlaces, identityClasses, identityOf, PLACEMENTS, paintIdentity, setColorsOff, setDefaultPlaces, useIdentityColors } from "/assets/identity-color.js";
 import { CardTitle } from "./settings-learn.js";
@@ -66,12 +64,12 @@ export function AppearanceSection(props = {}) {
   // dashboard) are drawn where each belongs. None of it is offered over the public link (Look says so).
   if (publicLink) return part === "look" ? html`<section class="card s-appearance"><h3>${tn("cssTitle")}</h3><p class="sub">${tn("cssPublicLink")}</p></section>` : null;
   if (part === "device") return html`<${MotionCard} ...${props} /><${DeviceCard} ...${props} />`;
-  if (part === "dashboard") return html`<${AppIconCard} /><${CardLimitsCard} /><${ExperimentalEffectsCard} ...${props} />`;
+  if (part === "dashboard") return html`<${AppIconCard} /><${CardLimitsCard} />`;
   const group = (key) => html`<h2 class="s-ap-group">${tn(key)}</h2>`;
   return html`${group("groupLook")}<${ThemesCard} ...${props} /><${IdentityColorCard} /><${CardSizeCard} />
     ${group("groupLayout")}<${SidebarWidgetCard} />
     ${group("groupCss")}<${OwnerCssCard} />
-    ${group("groupMods")}<${ModsCard} /><${EffectsCard} />
+    ${group("groupMods")}<${ModsCard} />
     <${RestoreDefaultsCard} ...${props} />`;
 }
 
@@ -92,38 +90,6 @@ function deviceChoice(props, key, label, read, write) {
   };
 }
 
-register("experimentalEffects", {
-  en: { title: "Experimental: Canvas Worker effects", help: "Enable uploaded Canvas Worker effects. Ambient effects are always available. Saved effects stay intact when this is off.", failed: "Could not change this setting. Try again." },
-  "zh-TW": { title: "實驗功能：Canvas Worker 特效", help: "啟用上傳的 Canvas Worker 特效。氛圍特效不受影響；關閉時保留已儲存的特效。", failed: "無法變更此設定，請重試。" },
-});
-const CANVAS_WORKER = "fleet:experimental.canvas_worker";
-function ExperimentalEffectsCard(props = {}) {
-  const enabled = useCanvasWorker(), [writable, setWritable] = useState(false), [busy, setBusy] = useState(false), [failed, setFailed] = useState(false);
-  useEffect(() => { let live = true; Promise.resolve(globalThis.AgendAuth?.trialSession?.()).then(value => { if (live) setWritable(value?.localAdmin === true); }, () => {}); return () => { live = false; }; }, []);
-  if (!writable) return null;
-  // #2347: in Settings it is a fleet change like any other — staged here, written by the bar's Save (this page's switch
-  // follows once it applied).
-  const pending = props.staged && props.staged.get(CANVAS_WORKER);
-  const shown = pending ? pending.draft : enabled;
-  const stageIt = (value) => {
-    setFailed(false);
-    if (value === enabled) { props.unstage(CANVAS_WORKER); return; }
-    props.stage(CANVAS_WORKER, { label: t("experimentalEffects.title"), impact: impactOf(props.schema || DEFAULT_SCHEMA, "web.experimental.canvas_worker"), draft: value,
-      request: { method: "PUT", url: "/api/settings/fleet/web", body: { experimental: { canvas_worker: value } } },
-      onResult: (outcome) => { if (outcome && outcome.status === "applied") appStore.set({ canvasWorker: value }); else if (outcome && outcome.status === "failed") setFailed(true); } }, true);
-  };
-  const change = async value => {
-    if (props.stage) { stageIt(value); return; }
-    setBusy(true); setFailed(false);
-    try {
-      const result = await confirmedWrite("/api/settings/fleet/web", { method: "PUT", body: { experimental: { canvas_worker: value } }, label: t("experimentalEffects.title") });
-      if (result.ok) appStore.set({ canvasWorker: value }); else setFailed(true);
-    } catch { setFailed(true); }
-    finally { setBusy(false); }
-  };
-  return html`<section class="card s-appearance s-experimental-effects"><label class="check"><input type="checkbox" checked=${shown} disabled=${busy} onChange=${event => change(event.target.checked)} /><span>${t("experimentalEffects.title")}</span></label><p class="sub">${t("experimentalEffects.help")}</p>${failed ? html`<p role="alert">${t("experimentalEffects.failed")}</p>` : null}</section>`;
-}
-
 /** #2056 B: a sample sidebar row in the host's default colour places, so the choice is seen rather than described. */
 const SAMPLE = { color: { person: "preset:teal" } };
 function ColorSample({ places, off }) {

package/dist/ui/settings-confirm.js

@@ -65,6 +65,8 @@ function publish() {
       // Monotonic: when the server's countdown reaches zero on this page's clock.
       deadline: at + Math.max(0, Number(view.remaining_ms) || 0),
       withdraw: view.can_withdraw && view.state === "pending" ? () => withdraw(view.id) : null,
+      // #2868: this browser may confirm it itself now (the server's read says so; it checks again on the click).
+      applyNow: view.can_self_confirm && view.state === "pending" ? () => applyNow(view.id) : null,
       dismiss: TERMINAL.has(view.state) ? () => forget(view.id) : null,
     })),
   });
@@ -150,6 +152,22 @@ export async function withdraw(id) {
   return false;
 }
 
+/**
+ * #2868: "Apply now" — confirm this session's own pending request from this browser (#2170's rule, asked again by the
+ * server). Its answer is followed like any other; a refusal (no longer allowed here) leaves it waiting and is { ok: false }.
+ */
+export async function applyNow(id) {
+  const e = tracked.get(id);
+  if (!e) return { ok: false };
+  const token = ticket(e);
+  let res;
+  try { res = await api(`/api/settings/pending/${encodeURIComponent(id)}/confirm`, { method: "POST", body: "{}" }); } catch { return { ok: false }; }
+  if (isPendingResponse(res) && res.body.pending_change.id === id) { update(res.body.pending_change, token); schedule(); return { ok: true }; }
+  // Refused (403: not allowed here any more): read it again, so "Apply now" goes until the server offers it again.
+  if (e.view.can_self_confirm) update({ ...e.view, can_self_confirm: false }, token);
+  return { ok: false, status: res.status };
+}
+
 /** This session's requests still open on the server (after a reload): followed like new ones. */
 export async function attach() {
   let res;

package/dist/ui/settings-guests.js

@@ -22,13 +22,16 @@ const PLATFORMS = { discord: "Discord", telegram: "Telegram" };
 const own = (o, k) => !!o && Object.prototype.hasOwnProperty.call(o, k);
 const sameList = (a, b) => (a || []).length === (b || []).length && (a || []).every((n) => (b || []).includes(n));
 const accountKey = (g) => `${g.adapterId}:${g.userId}`;
-const copyGrants = (m) => { const out = {}; for (const [k, v] of Object.entries(m || {})) if (v && Array.isArray(v.instances)) out[k] = { ...(v.name ? { name: v.name } : {}), instances: [...v.instances] }; return out; };
+// #2855: a grant's level — "trusted", or chat (the default, so never written).
+const grantOf = (v) => ({ ...(v.name ? { name: v.name } : {}), instances: [...v.instances], ...(v.level === "trusted" ? { level: "trusted" } : {}) });
+const copyGrants = (m) => { const out = {}; for (const [k, v] of Object.entries(m || {})) if (v && Array.isArray(v.instances)) out[k] = grantOf(v); return out; };
 /** The saved state, from the fleet's config: `grants` null while the fleet still uses #1920's derived access. */
 export function savedGuests(fleet) {
   const g = (fleet && fleet.web && fleet.web.guests) || {};
   return { enabled: g.enabled === true, chat: g.chat !== false, grants: g.grants ? copyGrants(g.grants) : null };
 }
-const sameGrant = (a, b) => !!a && !!b && (a.name || "") === (b.name || "") && sameList(a.instances, b.instances);
+const levelOf = (g) => (g && g.level === "trusted" ? "trusted" : "chat");
+const sameGrant = (a, b) => !!a && !!b && (a.name || "") === (b.name || "") && sameList(a.instances, b.instances) && levelOf(a) === levelOf(b);
 
 /**
  * What changed against the saved state, as the PUT /api/settings/fleet/web body's `guests` (null: nothing), and how
@@ -44,7 +47,7 @@ export function guestsBody(original, f) {
     for (const k of new Set([...Object.keys(was), ...Object.keys(f.grants)])) {
       const a = own(was, k) ? was[k] : undefined, b = own(f.grants, k) ? f.grants[k] : undefined;
       if (a && b && sameGrant(a, b)) continue;
-      diff[k] = b ? { ...(b.name ? { name: b.name } : {}), instances: [...b.instances] } : null;
+      diff[k] = b ? grantOf(b) : null;
       count++;
     }
     // #2365 review: turning grants on is a change by itself, even with no one in them yet (default deny): `grants: {}`.
@@ -235,6 +238,12 @@ export function GuestsSection({ ctx, staged }) {
             ${removed ? html`<span class="g-state">${tn("grantsWillBeRemoved")}</span>` : added ? html`<span class="g-state">${tn("grantsNew")}</span>` : pill(person)}</div>
           <div class="g-chips">${((draft || saved).instances || []).map((n) => html`<span key=${n} class="g-chip" title=${shownName(rooms, n) !== n ? n : undefined}>${shownName(rooms, n)}</span>`)}</div>
           ${draft && !draft.instances.length ? html`<p class="note g-error" role="alert">${tn("grantsNoAgents")}</p>` : null}
+          ${draft ? html`<div class=${`g-level${levelOf(draft) !== levelOf(saved) && saved ? " s-dirty" : ""}`}>
+            <span class="note" id=${`level-${k}`}>${tn("grantsLevel", person.name)}</span>
+            <div class="seg-inline" role="group" aria-labelledby=${`level-${k}`}>${["chat", "trusted"].map((l) => html`<button key=${l} type="button"
+              class=${`btn btn-sm${levelOf(draft) === l ? " btn-primary" : ""}`} aria-pressed=${levelOf(draft) === l ? "true" : "false"} data-level=${l}
+              onClick=${() => setGrant(k, { ...draft, level: l === "trusted" ? "trusted" : undefined })}>${tn(l === "trusted" ? "grantsLevelTrusted" : "grantsLevelChat")}</button>`)}</div>
+            ${levelOf(draft) === "trusted" ? html`<p class="note">${tn("grantsLevelTrustedHint")}</p>` : null}</div>` : null}
           ${editing === k && draft ? html`<div class="g-edit"><p class="note">${tn("grantsMaySee", person.name)}</p>
             <${Names} id=${`grant-${k}`} all=${instances} rooms=${rooms} value=${draft.instances} wrote=${person.wrote} onChange=${(list) => setGrant(k, { ...draft, instances: list })} /></div>` : null}
           ${readOnly ? null : html`<div class="guest-actions">
@@ -260,7 +269,7 @@ export function GuestsSection({ ctx, staged }) {
     ${overview && overview.audit ? html`<h4>${tn("grantsRecent")}</h4>${!overview.audit.length ? html`<p class="note" id="grantsRecentNone">${tn("grantsRecentNone")}</p>`
       : html`<ul class="g-audit" id="grantsRecentList">${overview.audit.map((e, i) => html`<li key=${`${e.at}-${i}`} class="g-audit-row" data-kind=${e.kind}>
         <span class="g-when">${new Date(e.at).toLocaleString()}</span> <strong>${e.name}</strong>
-        ${e.kind === "grant" ? html`${e.added.map((n) => html` <span key=${`+${n}`} class="g-wrote g-add">+${n}</span>`)}${e.removed.map((n) => html` <span key=${`-${n}`} class="g-wrote g-del">−${n}</span>`)}
+        ${e.kind === "grant" ? html`${e.added.map((n) => html` <span key=${`+${n}`} class="g-wrote g-add">+${n}</span>`)}${e.removed.map((n) => html` <span key=${`-${n}`} class="g-wrote g-del">−${n}</span>`)}${e.level ? html` <span class="g-wrote g-level-to">${tn("grantsAuditLevel", tn(e.level === "trusted" ? "grantsLevelTrusted" : "grantsLevelChat"))}</span>` : null}
           <span class="note"> · <span class="g-wrote">${tn(e.via === "confirmed" ? "grantsAuditConfirmed" : "grantsAuditDirect")}</span>${e.endedSessions ? html` · <span class="g-wrote">${tn("grantsAuditEnded", e.endedSessions)}</span>` : null}</span>`
         : html` <span class="note">${e.outcome === "sent" ? tn("grantsAuditCodeSent") : tn("grantsAuditCodeNot", auditOutcome(e.outcome))}</span>`}</li>`)}</ul>`}` : null}
     ${status && status.kind === "waiting" ? html`<p class="note" role="status">${tn("grantsWaiting")}</p>` : null}

package/dist/ui/settings-learn.js

@@ -12,7 +12,7 @@ const DOCS = { en: "https://github.com/songsid/AgEnD/blob/main/docs/web-dashboar
 export const LEARN_ANCHORS = {
   colors: ["identity-colours", "識別色"], css: ["custom-css-settings--look", "自訂-css設定--外觀"], themes: ["agents-themes", "agent-的主題"],
   cards: ["identity-cards", "身分卡"], limits: ["card-upload-limits", "身分卡上傳限制"], widgets: ["widgets", "小工具"], mods: ["mods", "mod"],
-  effects: ["effects", "效果"], restore: ["restore-defaults", "還原預設值"],
+  restore: ["restore-defaults", "還原預設值"],
   "app-icon": ["app-icon", "app-圖示"],
 };
 export function learnHref(topic, language = lang()) {

package/dist/ui/settings-mods.js

@@ -4,7 +4,6 @@
 // parts the person ticks are applied, all or nothing. Custom CSS from a file is never ticked by default. Installed
 // mods can be downloaded again or uninstalled (what they applied stays: Reset and the CSS controls work on it).
 // Export builds a file from what is in force now.
-import { canvasWorkerEnabled, useCanvasWorker } from "/assets/feature-flags.js";
 import { html, useEffect, useLayoutEffect, useRef, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
 import { appStore, useStore } from "/assets/app-store.js";
@@ -48,7 +47,6 @@ export function defaultChoice(plan) {
   for (const it of plan.items) {
     if (it.part === "theme" || it.part === "identity" || it.part === "ambient") c[it.part] = true;
     else if (it.part === "widget") c.widgets[it.slot] = true;
-    else if (it.part === "effect" && canvasWorkerEnabled()) c.effects = true;
     // ownerCss stays false: "read it before turning it on" (r4 §4).
   }
   return c;
@@ -62,7 +60,7 @@ function Swatch({ color }) {
   return html`<span class="s-mod-sw"><span class="s-mod-sw-chip" ref=${ref} aria-hidden="true"></span><code>${color}</code></span>`;
 }
 /** Every field of the checked theme, as it will be applied — nothing left unseen (#1897 review). */
-export function ThemeDetail({ theme, pictures, effects }) {
+export function ThemeDetail({ theme, pictures }) {
   const th = theme || {};
   const row = (k, v) => html`<div class="s-mod-kv"><span class="k">${k}</span><span class="v">${v}</span></div>`;
   const pal = (mode) => {
@@ -83,7 +81,6 @@ export function ThemeDetail({ theme, pictures, effects }) {
     ${th.background ? pic(th.background.image, tn("modBackground")) : null}
     ${th.background ? row(tn("modBackgroundFit"), `${th.background.fit} · ${Math.round(th.background.opacity * 100)}%`) : null}
     ${th.avatar ? pic(th.avatar, tn("modAvatar")) : null}
-    ${(canvasWorkerEnabled() ? effects || [] : []).map((e, i) => html`<div key=${i}>${row(tn("modPlacesEffect"), html`<span><code>${e.effect}</code>${e.id ? html` <span class="muted">${e.id.slice(0, 8)}</span>` : null}${Object.keys(e.params || {}).length ? html` · <code>${JSON.stringify(e.params)}</code>` : null}</span>`)}</div>`)}
     <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify(th, null, 2)}</pre></details>
   </div>`;
 }
@@ -92,7 +89,7 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
   const tick = (label, on, set) => html`<label class="check s-mod-tick"><input type="checkbox" checked=${on} onChange=${(e) => set(e.target.checked)} /><span>${label}</span></label>`;
   if (it.part === "theme") {
     return html`<li class="s-mod-item">${tick(tn("modPartTheme"), choice.theme, (v) => setChoice({ ...choice, theme: v }))}
-      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} effects=${it.effects} /></div></li>`;
+      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} /></div></li>`;
   }
   if (it.part === "identity") {
     return html`<li class="s-mod-item">${tick(tn("modPartIdentity"), choice.identity, (v) => setChoice({ ...choice, identity: v }))}
@@ -116,11 +113,8 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
       <div class="s-mod-detail">${one("loop")}${one("click")}
         <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify({ loop: it.loop, click: it.click }, null, 2)}</pre></details></div></li>`;
   }
-  if (it.part === "effect") {
-    if (!canvasWorkerEnabled()) return null;
-    return html`<li class="s-mod-item">${tick(tn("modPartEffect", it.title), choice.effects, (v) => setChoice({ ...choice, effects: v }))}
-      <div class="s-mod-detail"><span>${kib(it.bytes)} · ${tn("modRegions", it.regions.join(", "))}</span>${it.wants.length ? html`<span>${tn("modWants", it.wants.join(", "))}</span>` : null}</div></li>`;
-  }
+  // #2799: a Canvas Worker effect entry (the server refuses the file that carries one) is not offered.
+  if (it.part === "effect") return null;
   if (it.part === "ownerCss") {
     return html`<li class="s-mod-item s-mod-css">${tick(tn("modPartCss"), choice.ownerCss, (v) => setChoice({ ...choice, ownerCss: v }))}
       <p class="s-mod-warn">${tn("modCssWarn")}</p>
@@ -141,7 +135,7 @@ function Plan({ staged, onDone }) {
   const names = (app.instances || []).map((i) => i.name);
   const install = async () => {
     setBusy(true); setError("");
-    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: canvasWorkerEnabled() && choice.effects }, ...(toInstance ? { target } : {}) });
+    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: false }, ...(toInstance ? { target } : {}) });
     setBusy(false);
     // The stage this plan shows is gone or no longer this plan (replaced on another device, expired): read again —
     // the page then shows whatever is staged now, with its own, fresh choices (keyed by stage).
@@ -209,7 +203,6 @@ function ExportForm() {
 }
 
 export function ModsCard() {
-  useCanvasWorker();
   const [state, setState] = useState(null);
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState("");

package/dist/ui/settings-named-test.js

@@ -0,0 +1,144 @@
+// #2906 (the user, 2026-11-01): Settings → Access → the fixed address's 「測試連線」 / "Test connection". It tests the
+// values as filled in (unsaved too: the typed connector token, else the saved one) and shows each step ✓ or ✗; every ✗
+// says what the person can do next. The server answers closed step codes only (settings-api.ts, named-link-test.ts):
+// the token never comes back. Words never name the person's workplace — "this machine's network", "network administrator".
+import { html, useRef, useState } from "/assets/app-html.js";
+import { register, t } from "/assets/app-i18n.js";
+import { useLease } from "/assets/app-ctx.js";
+import { api } from "./settings-confirm.js";
+
+register("settings", {
+  en: {
+    ntButton: "Test connection",
+    ntRunning: "Testing… (up to about a minute)",
+    ntHint: "Tests the values above as filled in, saved or not — with the token typed below, or the saved one.",
+    ntBusy: "A test is already running. Try again when it ends.",
+    ntFailed: "The test could not run. Try again.",
+    ntNotRun: "Not tested (an earlier step failed).",
+    ntTimeout: "The test took too long and was stopped. Test again; if it repeats, check this machine's network.",
+    ntCancelled: "Your sign-in ended, so nothing was started. Sign in again and test again.",
+    ntCleanup: "The test's connector could not be confirmed stopped. Run agend restart before testing or opening the link again.",
+    ntStep_values: "The domain, port and token",
+    ntStep_origin: "This machine answers on port {1}",
+    ntStep_tunnel: "The tunnel connects to Cloudflare",
+    ntStep_dns: "{0} can be looked up",
+    ntStep_reach: "{0} reaches this AgEnD",
+    nt_values_ok: "Filled in correctly.",
+    "nt_values_bad-hostname": "Enter a domain such as agend.example.com (no https://, path or port).",
+    "nt_values_bad-port": "Enter a port from 1024 to 65535.",
+    "nt_values_no-token": "No connector token: paste it below (Cloudflare → your tunnel → the long string that starts with eyJ).",
+    "nt_values_bad-token": "This is not a connector token: copy only the long string that starts with eyJ.",
+    nt_origin_ok: "Answered for this test.",
+    nt_origin_live: "Your link is open on these values: it is tested as it is.",
+    "nt_origin_dashboard-port": "{1} is the dashboard's own port. Choose another (19282 by default), and make the Cloudflare route's service http://127.0.0.1:<that port>.",
+    "nt_origin_port-in-use": "Port {1} is used by another program on this machine. Choose another port here, and make the Cloudflare route's service http://127.0.0.1:<that port>.",
+    "nt_origin_origin-failed": "AgEnD could not listen on port {1}. Try another port.",
+    "nt_origin_link-open-other": "Your link is open with other settings. Close it (/web → Close public link), then test again.",
+    "nt_origin_tunnel-busy": "Another tunnel is starting or running (a public link or a sign-in). Try again in a minute.",
+    nt_tunnel_ok: "Connected to Cloudflare.",
+    nt_tunnel_live: "Your open link is connected.",
+    nt_tunnel_auth: "Cloudflare refused the token: it is wrong or was rotated. Copy the current token from the tunnel's page in Cloudflare and paste it again.",
+    nt_tunnel_network: "This machine could not reach Cloudflare within 20 seconds. Set the protocol to http2 here, or ask the network administrator to allow outbound connections to Cloudflare (port 7844).",
+    nt_tunnel_stopped: "cloudflared stopped before it connected. Test again; if it repeats, check the token and the protocol.",
+    "nt_tunnel_no-binary": "cloudflared could not be prepared on this machine (its download or install failed). Check this machine's internet access and test again.",
+    nt_dns_ok: "Found.",
+    "nt_dns_dns-missing": "{0} does not exist yet. In Cloudflare, add a Published application route for {0} on this tunnel.",
+    "nt_dns_dns-failed": "This machine could not look up {0}: this machine's network may block DNS. Ask the network administrator.",
+    nt_reach_ok: "It works: {0} reached this AgEnD.",
+    "nt_reach_wrong-service": "Cloudflare answered but could not reach the service: make the route's service http://127.0.0.1:{1} (HTTP, not HTTPS).",
+    "nt_reach_other-page": "{0} answered with another page: its route points to another service or tunnel. Point it to this tunnel, with the service http://127.0.0.1:{1}.",
+    "nt_reach_route-missing": "{0} is not routed to this tunnel. In Cloudflare, add a Published application route for {0}.",
+    "nt_reach_self-unreachable": "The tunnel is connected, but this machine's network can't open {0} (some networks filter new domains). From another network, such as a phone on mobile data, it may still work. Ask the network administrator to allow {0}.",
+    "nt_reach_reach-failed": "{0} did not answer as expected. Test again in a minute; if it repeats, check the route in Cloudflare.",
+  },
+  "zh-TW": {
+    ntButton: "測試連線",
+    ntRunning: "測試中…（最多約 1 分鐘）",
+    ntHint: "用上面填的設定測試（不論是否已儲存），token 用下方輸入的，沒有就用已儲存的。",
+    ntBusy: "已經有一個測試在進行，請等它結束再試。",
+    ntFailed: "測試沒有執行成功，請再試一次。",
+    ntNotRun: "未測試（前面的步驟失敗）。",
+    ntTimeout: "測試太久，已經停止。請再測一次；如果一直這樣，請檢查這台主機所在的網路。",
+    ntCancelled: "你的登入已結束，所以沒有啟動任何東西。請重新登入後再測。",
+    ntCleanup: "無法確認測試用的連接器已經停止。請先執行 agend restart，再測試或開啟連結。",
+    ntStep_values: "網域、port 與 token",
+    ntStep_origin: "這台主機在 port {1} 回應",
+    ntStep_tunnel: "tunnel 連上 Cloudflare",
+    ntStep_dns: "查得到 {0}",
+    ntStep_reach: "{0} 連得到這台 AgEnD",
+    nt_values_ok: "填寫正確。",
+    "nt_values_bad-hostname": "請填網域，例如 agend.example.com（不含 https://、路徑或 port）。",
+    "nt_values_bad-port": "請填 1024–65535 之間的 port。",
+    "nt_values_no-token": "沒有 connector token：請貼在下方（Cloudflare → 你的 tunnel → 以 eyJ 開頭的長字串）。",
+    "nt_values_bad-token": "這不是 connector token：只複製以 eyJ 開頭的那串長字串。",
+    nt_origin_ok: "這次測試有回應。",
+    nt_origin_live: "你的連結正以這些設定開著：直接測試它。",
+    "nt_origin_dashboard-port": "{1} 是儀表板自己的 port。請換一個（預設 19282），並把 Cloudflare 路由的 service 設成 http://127.0.0.1:<那個 port>。",
+    "nt_origin_port-in-use": "這台主機上有其他程式在用 port {1}。請在這裡換一個 port，並把 Cloudflare 路由的 service 改成 http://127.0.0.1:<那個 port>。",
+    "nt_origin_origin-failed": "AgEnD 無法在 port {1} 監聽，請換一個 port。",
+    "nt_origin_link-open-other": "你的連結正以其他設定開著。請先關閉（/web → 關閉公開連結），再測試。",
+    "nt_origin_tunnel-busy": "另一條 tunnel 正在啟動或執行（公開連結或登入用）。請過一分鐘再試。",
+    nt_tunnel_ok: "已連上 Cloudflare。",
+    nt_tunnel_live: "開著的連結已連線。",
+    nt_tunnel_auth: "Cloudflare 拒絕這個 token：它是錯的或已被更換。請到 Cloudflare 的 tunnel 頁面複製目前的 token 再貼上。",
+    nt_tunnel_network: "這台主機在 20 秒內連不上 Cloudflare。請在這裡把通訊協定改成 http2，或請網路管理員允許對 Cloudflare 的對外連線（port 7844）。",
+    nt_tunnel_stopped: "cloudflared 在連上之前就停止了。請再測一次；如果一直這樣，請檢查 token 與通訊協定。",
+    "nt_tunnel_no-binary": "這台主機無法準備 cloudflared（下載或安裝失敗）。請確認這台主機能連上網路後再測。",
+    nt_dns_ok: "查得到。",
+    "nt_dns_dns-missing": "{0} 還不存在。請在 Cloudflare 為這條 tunnel 新增 {0} 的 Published application 路由。",
+    "nt_dns_dns-failed": "這台主機查不到 {0}：這台主機所在的網路可能擋了 DNS。請洽網路管理員。",
+    nt_reach_ok: "正常：{0} 連到了這台 AgEnD。",
+    "nt_reach_wrong-service": "Cloudflare 有回應，但連不到服務：請把路由的 service 設成 http://127.0.0.1:{1}（HTTP，不是 HTTPS）。",
+    "nt_reach_other-page": "{0} 回應了別的頁面：它的路由指向別的服務或 tunnel。請把它指向這條 tunnel，service 設成 http://127.0.0.1:{1}。",
+    "nt_reach_route-missing": "{0} 沒有路由到這條 tunnel。請在 Cloudflare 新增 {0} 的 Published application 路由。",
+    "nt_reach_self-unreachable": "tunnel 已連上，但這台主機所在的網路打不開 {0}（有些網路會擋新的網域）。從其他網路（例如手機行動網路）可能可以正常使用。請網路管理員允許 {0}。",
+    "nt_reach_reach-failed": "{0} 沒有如預期回應。請過一分鐘再測；如果一直這樣，請檢查 Cloudflare 上的路由。",
+  },
+});
+const tn = (k, ...v) => t(`settings.${k}`, ...v);
+const STEPS = ["values", "origin", "tunnel", "dns", "reach"];
+
+/**
+ * The connector token typed in the token card below (not yet saved): the test uses it when there is one. The card
+ * owns it: it sets it as typed and clears it when saved, cleared or unmounted (#2907 review: a hidden token from a
+ * card no longer on screen is never used).
+ */
+let typedToken = "";
+export function setTypedTunnelToken(value) { typedToken = typeof value === "string" ? value : ""; }
+
+/** The button and its result, for the fixed-address values the form holds now. */
+export function NamedLinkTest({ hostname, port, protocol }) {
+  const lease = useLease("named-link-test");
+  const [busy, setBusy] = useState(false);
+  const [result, setResult] = useState(null);
+  const [note, setNote] = useState("");
+  const running = useRef(false);
+  const run = async () => {
+    if (running.current) return;
+    running.current = true; setBusy(true); setNote(""); setResult(null);
+    try {
+      const r = await api("/api/settings/public-link/test", { method: "POST", body: JSON.stringify({
+        hostname: String(hostname ?? "").trim(), origin_port: String(port ?? "").trim() || "19282", protocol, ...(typedToken.trim() ? { token: typedToken } : {}),
+      }) });
+      if (!lease.current()) return;
+      if (r.status === 409) setNote(tn("ntBusy"));
+      else if (!r.ok || !Array.isArray(r.body?.steps)) setNote(tn("ntFailed"));
+      else setResult(r.body);
+    } catch { if (lease.current()) setNote(tn("ntFailed")); }
+    finally { running.current = false; if (lease.current()) setBusy(false); }
+  };
+  const host = result?.hostname || String(hostname ?? "").trim() || "—", shownPort = result?.port ?? (String(port ?? "").trim() || "19282");
+  return html`<div class="named-test">
+    <div class="save-row"><button type="button" class="btn btn-sm" id="namedLinkTest" disabled=${busy} onClick=${run}>${busy ? tn("ntRunning") : tn("ntButton")}</button></div>
+    <p class="note">${tn("ntHint")}</p>
+    ${note ? html`<p class="note" role="status">${note}</p>` : null}
+    ${result ? html`<ol class="named-test-steps" role="status" aria-live="polite">${STEPS.map((step) => {
+      const r = result.steps.find((s) => s.step === step);
+      const mark = !r ? "–" : r.ok ? "✓" : "✗";
+      const said = !r ? tn("ntNotRun") : r.code === "timeout" ? tn("ntTimeout") : r.code === "cancelled" ? tn("ntCancelled") : tn(`nt_${step}_${r.code}`, host, shownPort);
+      return html`<li key=${step} class=${!r ? "nt-skip" : r.ok ? "nt-ok" : "nt-fail"} data-step=${step} data-code=${r ? r.code : ""}>
+        <span class="nt-mark" aria-hidden="true">${mark}</span> <strong>${tn(`ntStep_${step}`, host, shownPort)}</strong> — ${said}</li>`;
+    })}</ol>` : null}
+    ${result?.cleanup ? html`<p class="feedback error" role="alert">${tn("ntCleanup")}</p>` : null}
+  </div>`;
+}

package/dist/ui/settings-registry.js

@@ -28,7 +28,6 @@ const ROWS = [
   ["look.widget", "look", ".s-widget", "settings.widgetTitle", "widget.sidebar", ["sidebar widget", "widget", "json"], ["側邊欄小工具", "小工具"]],
   ["look.css", "look", ".s-owner-css", "settings.cssTitle", null, ["custom css", "stylesheet", "style", "css"], ["自訂 CSS", "樣式表", "樣式"]],
   ["look.mods", "look", ".s-mods", "settings.modsTitle", null, ["mod", "mods", "import", "add-on", "agendmod"], ["mod", "匯入", "擴充"]],
-  ["look.effects", "look", ".s-effects", null, null, ["effects", "canvas", "ambient", "petals", "click stars"], ["特效", "效果", "花瓣", "氛圍"], L("Effects", "效果")],
   ["look.restore", "look", ".s-restore", "settings.restoreTitle", null, ["restore defaults", "reset", "default"], ["還原預設值", "重設", "預設"]],
   // Fleet · Agents
   ["agents.new", "agents", "#newAgentBtn", "settings.newAgent", null, ["new agent", "create", "add agent", "instance"], ["新增 agent", "建立", "新 agent"]],
@@ -69,7 +68,6 @@ const ROWS = [
   ["dash.office-levels", "web-dashboard", "#webOfficeLevels", "settings.webOfficeLevels", "web.office_levels", ["office", "level", "badge", "profile card"], ["辦公室", "等級", "徽章", "名片"]],
   ["dash.app-icon", "web-dashboard", ".s-app-icon", "settings.appIconTitle", null, ["app icon", "favicon", "home screen", "icon"], ["App 圖示", "圖示", "主畫面"]],
   ["dash.card-limits", "web-dashboard", ".s-card-limits", "settings.cardLimitsTitle", "web.appearance", ["upload limits", "portrait", "banner", "card limits"], ["上傳限制", "身分卡上傳限制"]],
-  ["dash.canvas-worker", "web-dashboard", ".s-experimental-effects", "experimentalEffects.title", "web.experimental.canvas_worker", ["canvas worker", "experimental", "effects"], ["Canvas Worker", "實驗功能", "特效"]],
   // Fleet · Access & security
   ["access.session-absolute", "access", "#webSessionAbsolute", "settings.sessionAbsolute", "web.session.local.absolute_hours", ["session", "sign in", "hours", "expire", "logout"], ["session", "登入", "時數", "到期"]],
   ["access.session-idle", "access", "#webSessionIdle", "settings.sessionIdle", "web.session.local.idle_hours", ["session", "idle", "unused", "hours"], ["session", "閒置", "時數"]],