@songsid/agend 2.3.2 → 2.3.3-beta.2

package/dist/fleet-service-owner.d.ts

@@ -0,0 +1,11 @@
+export declare const fleetServiceOwner: {
+    updateRefusal(home: string, options?: {
+        locale?: string;
+    }): string | null;
+    restartRefusal(home: string, service: {
+        unit: string;
+        user: boolean;
+    }, options?: {
+        locale?: string;
+    }): string | null;
+};

package/dist/fleet-service-owner.js

@@ -0,0 +1,3 @@
+import { createRequire } from "node:module";
+export const fleetServiceOwner = createRequire(import.meta.url)("../launcher/fleet-service-owner.cjs");
+//# sourceMappingURL=fleet-service-owner.js.map

package/dist/fleet-service-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-service-owner.js","sourceRoot":"","sources":["../src/fleet-service-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,qCAAqC,CAGpG,CAAC"}

package/dist/general-knowledge/skills/delegation-playbook/SKILL.md

@@ -29,7 +29,7 @@ When an instance reports back, classify the outcome:
 - Success → Summarize key results for user. Omit internal coordination noise.
 - Partial → State what succeeded, what remains, proposed next steps.
 - Failure → Retry up to 2 times. If still failing: try alternative instance, reduce scope, or return partial result clearly marked.
-- No response → when a `[system:reply-overdue]` notice arrives (after 15 min by default), check `describe_instance` and `delivery_status` before asking again. If still silent: report to user with options.
+- No response → check `describe_instance` and `delivery_status` before asking again (the owner is reminded on its own; you are not notified). If still silent: report to user with options.
 
 ## Shared Decisions
 

package/dist/general-knowledge/skills/fleet-restart/SKILL.md

@@ -35,7 +35,7 @@ agend update --yes            # from a fleet session: the installed channel's la
 agend update --version 2.2.0 --yes  # a specific version
 ```
 
-It installs the selected release, checks the install, and restarts the fleet service. `--alpha` / `--beta` / `--stable` pick a channel; details in docs/cli.md. A beta install stays on the beta channel: to move it to the stable release (for example from a 2.3.2 beta to 2.3.2), use `agend update --stable --yes`, and only when the user asked for it.
+It installs the selected release, checks the install, and restarts the fleet service. `--alpha` / `--beta` / `--stable` pick a channel; details in docs/cli.md. A beta install stays on the beta channel and keeps getting betas.
 
 **Manual restart (if update isn't needed):**
 ```bash

package/dist/general-knowledge/skills/session-management/SKILL.md

@@ -6,7 +6,7 @@ roles: [general]
 
 ## Auth failure (auto-pause)
 
-When AgEnD sees `auth_error` it **pauses** that instance (`pausePending` sticky):
+When AgEnD sees `auth_error` and its token-free auth check does not vouch for the login, it **pauses** that instance (`pausePending` sticky). Auth text on the pane alone (an agent quoting a login message) changes nothing:
 - One notification **per backend** (not per instance) — log in once, same-backend peers recover.
 - Auth is **per backend**: one re-login restores every instance on that backend (claude-code, codex, kiro-cli, grok, opencode, antigravity, muse).
 - Re-login: `/login <backend>` (opencode: `opencode auth login` in a terminal), then wake the affected instance.

package/dist/general-knowledge/skills/web-dashboard/SKILL.canvas-worker-off.md

@@ -107,8 +107,8 @@ just **✓ Verified**, with the until-when in its tooltip, its accessible name a
 browser's messages then carry the account's authority in their delivery receipt for `max_session_hours` (default 48).
 Not me signs that browser out, also after Confirm, from the same card. At most one card waits per browser, and 3 an hour
 per account. Never for a guest. Over the admin's own named link (#2453) only with **Also over my named link**
-(`named_link`, off by default); over the temporary public link `/web` opens only with **Also over the temporary public
-link** (`quick_link`, off by default, §0.3). That authority ends with the link, and the card says "over your named link"
+(`named_link`, off by default); over the temporary public link `/web` opens while **Also over the temporary public
+link** is on (`quick_link`, on by default since #2819, §0.3; `quick_link: false` turns it off). That authority ends with the link, and the card says "over your named link"
 or "over the temporary public link". When a browser can't be authorized, the line says why (with a link to Settings when the switch, "Only
 this computer" or the named-link option is the reason). Settings → Access & security → **Web authority** (`web.verified_authority`, on
 by default) has the switch, **Only this computer can authorize** (`loopback_only`), **Also over my named link** (shown
@@ -194,8 +194,7 @@ A prompt shows its own answer buttons (first answer wins); a delivery has **Ackn
 "Paused: sign-in needed" has **Sign in** when the dashboard can run that login (#2233); every item has **Open chat**. **Notify me on this device** (Turn on / Turn off) gives desktop notifications while the
 tab is hidden — per browser, not on phones or plain-HTTP addresses. Config: `needs_you.live_message` (default on),
 `needs_you.dm` (default off), `needs_you.task_board` (default off: the task board's cards waiting
-for you — set `true` to list them). The task board's daily summary is `defaults.task_board.summary_at` (off unless set,
-e.g. `"09:00"`).
+for you — set `true` to list them).
 
 ## Search
 
@@ -256,7 +255,7 @@ Telegram topic, and **Open chat**.
 
 **The Office guide** (`docs/office.md` in the AgEnD repository; `docs/office.zh-TW.md` in Traditional Chinese) is the one page for people: setting up offices, the
 skin-pack manifest format and its limits, Edit layout and seat reservations, bedtime, share links, agents' office and
-pack tools, and rolling back. Point people there for more than the summary below; it marks what is not released yet.
+pack tools, and rolling back. Point people there for more than the summary below; it lists the version each feature came in.
 
 **Office** (the third view, remembered per device) draws the same fleet as a pixel office: a room per team, a desk
 per instance with a name tag, General and "Not in a team" in the **Lobby**. Each little person is its state: typing

package/dist/general-knowledge/skills/web-dashboard/SKILL.md

@@ -115,8 +115,8 @@ just **✓ Verified**, with the until-when in its tooltip, its accessible name a
 browser's messages then carry the account's authority in their delivery receipt for `max_session_hours` (default 48).
 Not me signs that browser out, also after Confirm, from the same card. At most one card waits per browser, and 3 an hour
 per account. Never for a guest. Over the admin's own named link (#2453) only with **Also over my named link**
-(`named_link`, off by default); over the temporary public link `/web` opens only with **Also over the temporary public
-link** (`quick_link`, off by default, §0.3). That authority ends with the link, and the card says "over your named link"
+(`named_link`, off by default); over the temporary public link `/web` opens while **Also over the temporary public
+link** is on (`quick_link`, on by default since #2819, §0.3; `quick_link: false` turns it off). That authority ends with the link, and the card says "over your named link"
 or "over the temporary public link". When a browser can't be authorized, the line says why (with a link to Settings when the switch, "Only
 this computer" or the named-link option is the reason). Settings → Access & security → **Web authority** (`web.verified_authority`, on
 by default) has the switch, **Only this computer can authorize** (`loopback_only`), **Also over my named link** (shown
@@ -203,8 +203,7 @@ A prompt shows its own answer buttons (first answer wins); a delivery has **Ackn
 "Paused: sign-in needed" has **Sign in** when the dashboard can run that login (#2233); every item has **Open chat**. **Notify me on this device** (Turn on / Turn off) gives desktop notifications while the
 tab is hidden — per browser, not on phones or plain-HTTP addresses. Config: `needs_you.live_message` (default on),
 `needs_you.dm` (default off), `needs_you.task_board` (default off: the task board's cards waiting
-for you — set `true` to list them). The task board's daily summary is `defaults.task_board.summary_at` (off unless set,
-e.g. `"09:00"`).
+for you — set `true` to list them).
 
 ## Search
 
@@ -267,7 +266,7 @@ Telegram topic, and **Open chat**.
 
 **The Office guide** (`docs/office.md` in the AgEnD repository; `docs/office.zh-TW.md` in Traditional Chinese) is the one page for people: setting up offices, the
 skin-pack manifest format and its limits, Edit layout and seat reservations, bedtime, share links, agents' office and
-pack tools, and rolling back. Point people there for more than the summary below; it marks what is not released yet.
+pack tools, and rolling back. Point people there for more than the summary below; it lists the version each feature came in.
 
 **Office** (the third view, remembered per device) draws the same fleet as a pixel office: a room per team, a desk
 per instance with a name tag, General and "Not in a team" in the **Lobby**. Each little person is its state: typing

package/dist/instance-lifecycle.js

@@ -603,6 +603,22 @@ export class InstanceLifecycle {
             else
                 this.ctx.reactMessageStatus(name, data.chatId, data.messageId, "failed", data.threadId);
         }, this.ctx.logger, `daemon.message_failed[${name}]`));
+        // #2770: a cancel dropped these before they reached the CLI. Each is marked ❌ and the person is told once, instead of
+        // the messages quietly ending "uncertain".
+        daemon.on("human_messages_cancelled", safeHandler((data) => {
+            const messages = Array.isArray(data?.messages) ? data.messages : [];
+            if (!messages.length)
+                return;
+            this.ctx.eventLog?.insert(name, "messages_cancelled", { count: messages.length });
+            this.ctx.logger.info({ name, count: messages.length }, "Messages dropped by a cancel before delivery — telling the person");
+            for (const m of messages) {
+                if (this.ctx.finishDeliveryStatus)
+                    this.ctx.finishDeliveryStatus(name, m.chatId, m.messageId, "failed", m.threadId);
+                else
+                    this.ctx.reactMessageStatus(name, m.chatId, m.messageId, "failed", m.threadId);
+            }
+            this.ctx.notifyInstanceTopic(name, t("delivery.cancelled_unsent", messages.length, name));
+        }, this.ctx.logger, `daemon.human_messages_cancelled[${name}]`));
     }
     attachIncidentHandlers(name, daemon) {
         daemon.on("capacity_nudge_cancelled", safeHandler((data) => {
@@ -931,6 +947,8 @@ export class InstanceLifecycle {
             this.ctx.notifyFleetError?.(t("fleet.dialog_answer_ignored", instancePlace(name), data.description, String(data.attempts)));
         }, this.ctx.logger, `daemon.dialog_answer_ignored[${name}]`));
         daemon.on("instance_interaction", () => this.ctx.onAttentionChanged?.(name));
+        // #2822: a usage-limit hold began or ended — Needs you lists it while it lasts.
+        daemon.on("usage_hold", () => this.ctx.onAttentionChanged?.(name));
         daemon.on("interactive_prompt", safeHandler(async (data) => {
             this.ctx.eventLog?.insert(name, "interactive_prompt", { kind: data.kind });
             this.ctx.logger.warn({ name, kind: data.kind, prompt: data.prompt }, "Instance is waiting for interactive terminal input");
@@ -1010,14 +1028,14 @@ export class InstanceLifecycle {
             if (data.type === "auth_error") {
                 const verdict = authVerdict = await this.verifyAuthError(name);
                 if (verdict === "valid") {
-                    this.ctx.logger.info({ name, backend: this.backendOf(name) }, "auth-error pattern ignored — token-free auth check passed (likely conversation text)");
-                    // Dropping the incident is not enough: the daemon armed its auth
-                    // suspicion and recovery gate before emitting, and leaving those set
-                    // would silently suppress hang notifications and MCP auto-restart for
-                    // an instance whose credentials are demonstrably fine.
+                    this.ctx.logger.debug({ name, backend: this.backendOf(name) }, "auth-error pattern ignored — token-free auth check passed (likely conversation text)");
+                    // #2795: a pattern match armed nothing, so this only drops it. A login-screen report did arm the auth
+                    // suspicion, and leaving that set would suppress hang notifications and MCP auto-restart.
                     this.daemons.get(name)?.clearSuspectedAuthFailure();
                     return;
                 }
+                // #2795: not vouched for — only now is a pattern match an auth failure on the daemon.
+                this.daemons.get(name)?.confirmAuthFailure?.();
             }
             // #2648: a kiro model error — the resumed conversation's saved model retired, or the instance's own model
             // unavailable. Restart once on kiro's default (no model of its own), else say it once; never on every start.