@songsid/agend 2.3.3-beta.3 → 2.3.3-beta.5

package/dist/ui/search-dialog.js

@@ -3,10 +3,11 @@
 // ↑↓ and Enter, Esc or a click outside to close; filters folded under one toggle. A chat row still in the agent's
 // history opens there, at the message (#m=); anything else — a chat row that has left the history, a message between
 // agents, a task — opens here as the index's copy (GET /ui/search/context). Text only: no innerHTML, no style attribute.
+// #2855: a trusted guest's — the chats it can see only (the server's rule): no settings, teams, sources or "only mine".
 import { html, useEffect, useLayoutEffect, useMemo, useRef, useState } from "/assets/app-html.js";
 import { t, register } from "/assets/app-i18n.js";
 import { recordEdit } from "/assets/text-undo.js";
-import { appStore, useStore } from "/assets/app-store.js";
+import { appStore, guestPage, useStore } from "/assets/app-store.js";
 import { navigate } from "/assets/app-nav.js";
 import { chatPath, fleetPath } from "/assets/app-route.js";
 import { namesOf, namesStore } from "/assets/instance-nav.js";
@@ -28,6 +29,8 @@ register("search", {
     building: "Still indexing — some older results may be missing.",
     limited: "Words of 1–2 characters alone search the newest 5,000 entries only — add a longer word to search everything.",
     unavailable: "Search is off or not available (web.search in fleet.yaml).", busy: "Search is busy — try again in a moment.",
+    guestPlaceholder: "Search your chats…", guestHint: "Find something said in the chats you can see: a word or two. Short words (1–2 characters) work too.",
+    tooMany: "Too many searches. Try again in {0} seconds.",
     signedOut: "Signed out — sign in again to search.", failed: "Search failed — try again.",
     keys: "↑↓ move · Enter open · Esc close", results: "Results", back: "Results",
     gone: "This message is no longer in the chat's history — this is the copy kept by search.",
@@ -47,6 +50,8 @@ register("search", {
     building: "索引仍在建立中，較舊的結果可能還沒出現。",
     limited: "只有 1–2 個字的短詞時，只會搜尋最新的 5,000 筆；加上較長的詞即可搜尋全部。",
     unavailable: "搜尋已關閉或無法使用（fleet.yaml 的 web.search）。", busy: "搜尋忙碌中，請稍後再試。",
+    guestPlaceholder: "搜尋你的聊天…", guestHint: "找你看得到的聊天裡說過的事：輸入一兩個詞。1–2 個字的短詞也可以。",
+    tooMany: "搜尋太多次了，請 {0} 秒後再試。",
     signedOut: "已登出，請重新登入後再搜尋。", failed: "搜尋失敗，請再試一次。",
     keys: "↑↓ 移動 · Enter 開啟 · Esc 關閉", results: "結果", back: "結果",
     gone: "這則訊息已不在聊天紀錄中，以下是搜尋保留的副本。",
@@ -144,7 +149,10 @@ export function jumpToMessage(instance, key, w = window) {
   w.dispatchEvent(new Event("hashchange"));
 }
 
-const errorText = (status) => (status === 404 ? t("search.unavailable") : status === 503 ? t("search.busy") : status === 401 ? t("search.signedOut") : t("search.failed"));
+const errorText = (status, retryS) => (status === 404 ? t("search.unavailable") : status === 503 ? t("search.busy") : status === 401 ? t("search.signedOut")
+  : status === 429 ? t("search.tooMany", retryS || 60) : t("search.failed"));
+/** #2855: a refused guest search's "try again in" (seconds), from its answer. */
+const retryOf = async (r) => { try { const b = await r.json(); return { error: b && b.error, s: Number(b && b.retry_after_s) || 0 }; } catch { return { error: null, s: 0 }; } };
 
 /** #2347 §6: how many settings the dialog lists above the messages (the Settings page's own search lists them all). */
 const SETTINGS_SHOWN = 5;
@@ -154,7 +162,8 @@ export function SearchDialog({ preset = {}, onClose }) {
   const app = useStore(appStore);
   const names = useStore(namesStore);
   const [q, setQ] = useState(preset.q || "");
-  const [f, setF] = useState({ instance: preset.instance || "", team: "", since: "any", sources: [...SOURCES], mine: false });
+  const guest = guestPage();
+  const [f, setF] = useState({ instance: preset.instance || "", team: "", since: "any", sources: guest ? ["chat"] : [...SOURCES], mine: false });
   const [showFilters, setShowFilters] = useState(!!preset.instance);
   const [teams, setTeams] = useState(null);
   const [res, setRes] = useState({ status: "idle" });
@@ -193,8 +202,15 @@ export function SearchDialog({ preset = {}, onClose }) {
     const ac = typeof AbortController === "function" ? new AbortController() : null;
     const timer = setTimeout(async () => {
       try {
-        const r = await fetch(url, { headers: { Accept: "application/json" }, ...(ac ? { signal: ac.signal } : {}) });
+        const ask = () => fetch(url, { headers: { Accept: "application/json" }, ...(ac ? { signal: ac.signal } : {}) });
+        let r = await ask();
         if (mine !== seq.current) return;
+        if (r.status === 429) {
+          // #2855: a guest's searches run one at a time — the one before this may still be finishing: once more, shortly.
+          const why = await retryOf(r);
+          if (why.error === "guest_search_running") { await new Promise((ok) => setTimeout(ok, 400)); if (mine !== seq.current) return; r = await ask(); if (mine !== seq.current) return; }
+          if (r.status === 429) { const again = why.error === "guest_search_running" ? await retryOf(r) : why; setRes({ status: "error", error: errorText(429, again.s) }); return; }
+        }
         if (!r.ok) { setRes({ status: "error", error: errorText(r.status) }); return; }
         const body = await r.json();
         if (mine !== seq.current) return;
@@ -209,7 +225,7 @@ export function SearchDialog({ preset = {}, onClose }) {
 
   // Teams, once the filters are first shown.
   useEffect(() => {
-    if (!showFilters || teams) return;
+    if (guest || !showFilters || teams) return;
     fetch("/ui/teams", { headers: { Accept: "application/json" } }).then(r => (r.ok ? r.json() : { teams: {} })).then(
       (b) => setTeams(Object.keys((b && b.teams) || {}).sort()), () => setTeams([]));
   }, [showFilters, teams]);
@@ -219,9 +235,9 @@ export function SearchDialog({ preset = {}, onClose }) {
   // While a new query runs, the last answer stays (dimmed) rather than flashing empty.
   const groups = useMemo(() => groupHits(res.hits || []), [res]);
   // #2347 §6: the settings matching the query, from the page's own registry (no request), above the messages.
-  const settings = useMemo(() => (q.trim() ? searchSettings(q).slice(0, SETTINGS_SHOWN) : []), [q]);
+  const settings = useMemo(() => (q.trim() && !guest ? searchSettings(q).slice(0, SETTINGS_SHOWN) : []), [q]);
   const flat = useMemo(() => [...settings.map((entry) => ({ setting: entry })), ...flatHits(groups)], [settings, groups]);
-  const activeFilters = (f.instance ? 1 : 0) + (f.team ? 1 : 0) + (f.since !== "any" ? 1 : 0) + (f.sources.length < SOURCES.length ? 1 : 0) + (f.mine ? 1 : 0);
+  const activeFilters = (f.instance ? 1 : 0) + (f.team ? 1 : 0) + (f.since !== "any" ? 1 : 0) + (!guest && f.sources.length < SOURCES.length ? 1 : 0) + (f.mine ? 1 : 0);
 
   // The active row stays in view.
   useEffect(() => {
@@ -239,7 +255,7 @@ export function SearchDialog({ preset = {}, onClose }) {
     // Any failure — the request, or a body that is not JSON — ends as an error, never "Loading…" for good.
     fetch(`/ui/search/context?key=${encodeURIComponent(hit.key)}`, { headers: { Accept: "application/json" } })
       .then(async (r) => {
-        if (!r.ok) { setDetail(d => (d && d.hit === hit ? { hit, status: "error", error: r.status === 404 ? t("search.notFound") : errorText(r.status) } : d)); return; }
+        if (!r.ok) { const s = r.status === 429 ? (await retryOf(r)).s : 0; setDetail(d => (d && d.hit === hit ? { hit, status: "error", error: r.status === 404 ? t("search.notFound") : errorText(r.status, s) } : d)); return; }
         const body = await r.json();
         setDetail(d => (d && d.hit === hit ? { hit, status: "ok", ctx: body } : d));
       })
@@ -266,7 +282,7 @@ export function SearchDialog({ preset = {}, onClose }) {
     <div class="search-box">
       <div class="search-head">
         <${Icon} name="search" />
-        <input ref=${input} class="search-input" type="search" value=${q} placeholder=${t("search.placeholder")} aria-label=${t("search.label")}
+        <input ref=${input} class="search-input" type="search" value=${q} placeholder=${t(guest ? "search.guestPlaceholder" : "search.placeholder")} aria-label=${t("search.label")}
           role="combobox" aria-expanded=${flat.length && !detail ? "true" : "false"} aria-controls="search-results" aria-autocomplete="list"
           aria-activedescendant=${activeId} autocomplete="off" spellcheck=${false} enterkeyhint="search"
           onInput=${(e) => { setQ(e.target.value); setDetail(null); }} />
@@ -288,24 +304,24 @@ export function SearchDialog({ preset = {}, onClose }) {
           ${["any", "day", "week", "month"].map(k => html`<button type="button" class=${`chip-btn${f.since === k ? " on" : ""}`} aria-pressed=${f.since === k ? "true" : "false"}
             onClick=${() => setFilter({ since: k })}>${k === "any" ? t("search.anyTime") : t(`search.${k}`)}</button>`)}
         </div>
-        <div class="search-chips" role="group" aria-label=${t("search.sources")}>
+        ${guest ? null : html`<div class="search-chips" role="group" aria-label=${t("search.sources")}>
           ${SOURCES.map(s => html`<button type="button" class=${`chip-btn${f.sources.includes(s) ? " on" : ""}`} aria-pressed=${f.sources.includes(s) ? "true" : "false"}
             onClick=${() => toggleSource(s)}>${t(`search.src_${s}`)}</button>`)}
           <label class="search-mine"><input type="checkbox" checked=${f.mine} onChange=${(e) => setFilter({ mine: e.target.checked })} />${t("search.mine")}</label>
-        </div>
+        </div>`}
       </div>` : null}
       <div class="search-body" ref=${list}>
         ${detail ? html`<${Detail} detail=${detail} q=${q} label=${label} onBack=${() => { setDetail(null); input.current && input.current.focus(); }} onClose=${onClose} />`
-          : html`<${Results} q=${q} res=${res} groups=${groups} settings=${settings} active=${active} setActive=${setActive} open=${open} label=${label} filtered=${activeFilters > 0}
+          : html`<${Results} guest=${guest} q=${q} res=${res} groups=${groups} settings=${settings} active=${active} setActive=${setActive} open=${open} label=${label} filtered=${activeFilters > 0}
               recent=${recent} pick=${(s) => { recordEdit(input.current); setQ(s); input.current && input.current.focus(); }} clearRecent=${() => { forgetRecent(); setRecent([]); }} />`}
       </div>
       <div class="search-foot" aria-hidden="true">${t("search.keys")}</div>
     </div></dialog>`;
 }
 
-function Results({ q, res, groups, settings = [], active, setActive, open, label, filtered, recent, pick, clearRecent }) {
+function Results({ guest = false, q, res, groups, settings = [], active, setActive, open, label, filtered, recent, pick, clearRecent }) {
   if (!q.trim()) {
-    return html`<div class="search-empty"><p class="search-hint">${t("search.hint")}</p>
+    return html`<div class="search-empty"><p class="search-hint">${t(guest ? "search.guestHint" : "search.hint")}</p>
       ${recent.length ? html`<div class="search-recent"><div class="search-recent-head"><span>${t("search.recent")}</span>
         <button type="button" class="chip-btn" onClick=${clearRecent}>${t("search.clearRecent")}</button></div>
         <ul>${recent.map(s => html`<li><button type="button" class="search-recent-item" onClick=${() => pick(s)}><${Icon} name="clock" size=${14} /><span>${s}</span></button></li>`)}</ul></div>` : null}</div>`;

package/dist/ui/settings-appearance.js

@@ -6,8 +6,6 @@ import { register, t } from "/assets/app-i18n.js";
 import { recordEdit } from "/assets/text-undo.js";
 import { appStore, useStore } from "/assets/app-store.js";
 import { ModsCard } from "./settings-mods.js";
-import { experimentalComponent } from "/assets/feature-flags.js";
-const EffectsCard = experimentalComponent(() => import("./settings-effects.js"), m => m.EffectsCard);
 import { Icon } from "/assets/ui-icons.js";
 import { toast } from "/assets/ui-toast.js";
 import { ownerCssOffHere, ownerCssTrial, safeMode, setOwnerCssActive, setOwnerCssOffHere, startOwnerCssTrial } from "/assets/owner-css.js";
@@ -71,7 +69,7 @@ export function AppearanceSection(props = {}) {
   return html`${group("groupLook")}<${ThemesCard} ...${props} /><${IdentityColorCard} /><${CardSizeCard} />
     ${group("groupLayout")}<${SidebarWidgetCard} />
     ${group("groupCss")}<${OwnerCssCard} />
-    ${group("groupMods")}<${ModsCard} /><${EffectsCard} />
+    ${group("groupMods")}<${ModsCard} />
     <${RestoreDefaultsCard} ...${props} />`;
 }
 

package/dist/ui/settings-guests.js

@@ -22,13 +22,16 @@ const PLATFORMS = { discord: "Discord", telegram: "Telegram" };
 const own = (o, k) => !!o && Object.prototype.hasOwnProperty.call(o, k);
 const sameList = (a, b) => (a || []).length === (b || []).length && (a || []).every((n) => (b || []).includes(n));
 const accountKey = (g) => `${g.adapterId}:${g.userId}`;
-const copyGrants = (m) => { const out = {}; for (const [k, v] of Object.entries(m || {})) if (v && Array.isArray(v.instances)) out[k] = { ...(v.name ? { name: v.name } : {}), instances: [...v.instances] }; return out; };
+// #2855: a grant's level — "trusted", or chat (the default, so never written).
+const grantOf = (v) => ({ ...(v.name ? { name: v.name } : {}), instances: [...v.instances], ...(v.level === "trusted" ? { level: "trusted" } : {}) });
+const copyGrants = (m) => { const out = {}; for (const [k, v] of Object.entries(m || {})) if (v && Array.isArray(v.instances)) out[k] = grantOf(v); return out; };
 /** The saved state, from the fleet's config: `grants` null while the fleet still uses #1920's derived access. */
 export function savedGuests(fleet) {
   const g = (fleet && fleet.web && fleet.web.guests) || {};
   return { enabled: g.enabled === true, chat: g.chat !== false, grants: g.grants ? copyGrants(g.grants) : null };
 }
-const sameGrant = (a, b) => !!a && !!b && (a.name || "") === (b.name || "") && sameList(a.instances, b.instances);
+const levelOf = (g) => (g && g.level === "trusted" ? "trusted" : "chat");
+const sameGrant = (a, b) => !!a && !!b && (a.name || "") === (b.name || "") && sameList(a.instances, b.instances) && levelOf(a) === levelOf(b);
 
 /**
  * What changed against the saved state, as the PUT /api/settings/fleet/web body's `guests` (null: nothing), and how
@@ -44,7 +47,7 @@ export function guestsBody(original, f) {
     for (const k of new Set([...Object.keys(was), ...Object.keys(f.grants)])) {
       const a = own(was, k) ? was[k] : undefined, b = own(f.grants, k) ? f.grants[k] : undefined;
       if (a && b && sameGrant(a, b)) continue;
-      diff[k] = b ? { ...(b.name ? { name: b.name } : {}), instances: [...b.instances] } : null;
+      diff[k] = b ? grantOf(b) : null;
       count++;
     }
     // #2365 review: turning grants on is a change by itself, even with no one in them yet (default deny): `grants: {}`.
@@ -235,6 +238,12 @@ export function GuestsSection({ ctx, staged }) {
             ${removed ? html`<span class="g-state">${tn("grantsWillBeRemoved")}</span>` : added ? html`<span class="g-state">${tn("grantsNew")}</span>` : pill(person)}</div>
           <div class="g-chips">${((draft || saved).instances || []).map((n) => html`<span key=${n} class="g-chip" title=${shownName(rooms, n) !== n ? n : undefined}>${shownName(rooms, n)}</span>`)}</div>
           ${draft && !draft.instances.length ? html`<p class="note g-error" role="alert">${tn("grantsNoAgents")}</p>` : null}
+          ${draft ? html`<div class=${`g-level${levelOf(draft) !== levelOf(saved) && saved ? " s-dirty" : ""}`}>
+            <span class="note" id=${`level-${k}`}>${tn("grantsLevel", person.name)}</span>
+            <div class="seg-inline" role="group" aria-labelledby=${`level-${k}`}>${["chat", "trusted"].map((l) => html`<button key=${l} type="button"
+              class=${`btn btn-sm${levelOf(draft) === l ? " btn-primary" : ""}`} aria-pressed=${levelOf(draft) === l ? "true" : "false"} data-level=${l}
+              onClick=${() => setGrant(k, { ...draft, level: l === "trusted" ? "trusted" : undefined })}>${tn(l === "trusted" ? "grantsLevelTrusted" : "grantsLevelChat")}</button>`)}</div>
+            ${levelOf(draft) === "trusted" ? html`<p class="note">${tn("grantsLevelTrustedHint")}</p>` : null}</div>` : null}
           ${editing === k && draft ? html`<div class="g-edit"><p class="note">${tn("grantsMaySee", person.name)}</p>
             <${Names} id=${`grant-${k}`} all=${instances} rooms=${rooms} value=${draft.instances} wrote=${person.wrote} onChange=${(list) => setGrant(k, { ...draft, instances: list })} /></div>` : null}
           ${readOnly ? null : html`<div class="guest-actions">
@@ -260,7 +269,7 @@ export function GuestsSection({ ctx, staged }) {
     ${overview && overview.audit ? html`<h4>${tn("grantsRecent")}</h4>${!overview.audit.length ? html`<p class="note" id="grantsRecentNone">${tn("grantsRecentNone")}</p>`
       : html`<ul class="g-audit" id="grantsRecentList">${overview.audit.map((e, i) => html`<li key=${`${e.at}-${i}`} class="g-audit-row" data-kind=${e.kind}>
         <span class="g-when">${new Date(e.at).toLocaleString()}</span> <strong>${e.name}</strong>
-        ${e.kind === "grant" ? html`${e.added.map((n) => html` <span key=${`+${n}`} class="g-wrote g-add">+${n}</span>`)}${e.removed.map((n) => html` <span key=${`-${n}`} class="g-wrote g-del">−${n}</span>`)}
+        ${e.kind === "grant" ? html`${e.added.map((n) => html` <span key=${`+${n}`} class="g-wrote g-add">+${n}</span>`)}${e.removed.map((n) => html` <span key=${`-${n}`} class="g-wrote g-del">−${n}</span>`)}${e.level ? html` <span class="g-wrote g-level-to">${tn("grantsAuditLevel", tn(e.level === "trusted" ? "grantsLevelTrusted" : "grantsLevelChat"))}</span>` : null}
           <span class="note"> · <span class="g-wrote">${tn(e.via === "confirmed" ? "grantsAuditConfirmed" : "grantsAuditDirect")}</span>${e.endedSessions ? html` · <span class="g-wrote">${tn("grantsAuditEnded", e.endedSessions)}</span>` : null}</span>`
         : html` <span class="note">${e.outcome === "sent" ? tn("grantsAuditCodeSent") : tn("grantsAuditCodeNot", auditOutcome(e.outcome))}</span>`}</li>`)}</ul>`}` : null}
     ${status && status.kind === "waiting" ? html`<p class="note" role="status">${tn("grantsWaiting")}</p>` : null}

package/dist/ui/settings-learn.js

@@ -12,7 +12,7 @@ const DOCS = { en: "https://github.com/songsid/AgEnD/blob/main/docs/web-dashboar
 export const LEARN_ANCHORS = {
   colors: ["identity-colours", "識別色"], css: ["custom-css-settings--look", "自訂-css設定--外觀"], themes: ["agents-themes", "agent-的主題"],
   cards: ["identity-cards", "身分卡"], limits: ["card-upload-limits", "身分卡上傳限制"], widgets: ["widgets", "小工具"], mods: ["mods", "mod"],
-  effects: ["effects", "效果"], restore: ["restore-defaults", "還原預設值"],
+  restore: ["restore-defaults", "還原預設值"],
   "app-icon": ["app-icon", "app-圖示"],
 };
 export function learnHref(topic, language = lang()) {

package/dist/ui/settings-mods.js

@@ -4,7 +4,6 @@
 // parts the person ticks are applied, all or nothing. Custom CSS from a file is never ticked by default. Installed
 // mods can be downloaded again or uninstalled (what they applied stays: Reset and the CSS controls work on it).
 // Export builds a file from what is in force now.
-import { canvasWorkerEnabled, useCanvasWorker } from "/assets/feature-flags.js";
 import { html, useEffect, useLayoutEffect, useRef, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
 import { appStore, useStore } from "/assets/app-store.js";
@@ -48,7 +47,6 @@ export function defaultChoice(plan) {
   for (const it of plan.items) {
     if (it.part === "theme" || it.part === "identity" || it.part === "ambient") c[it.part] = true;
     else if (it.part === "widget") c.widgets[it.slot] = true;
-    else if (it.part === "effect" && canvasWorkerEnabled()) c.effects = true;
     // ownerCss stays false: "read it before turning it on" (r4 §4).
   }
   return c;
@@ -62,7 +60,7 @@ function Swatch({ color }) {
   return html`<span class="s-mod-sw"><span class="s-mod-sw-chip" ref=${ref} aria-hidden="true"></span><code>${color}</code></span>`;
 }
 /** Every field of the checked theme, as it will be applied — nothing left unseen (#1897 review). */
-export function ThemeDetail({ theme, pictures, effects }) {
+export function ThemeDetail({ theme, pictures }) {
   const th = theme || {};
   const row = (k, v) => html`<div class="s-mod-kv"><span class="k">${k}</span><span class="v">${v}</span></div>`;
   const pal = (mode) => {
@@ -83,7 +81,6 @@ export function ThemeDetail({ theme, pictures, effects }) {
     ${th.background ? pic(th.background.image, tn("modBackground")) : null}
     ${th.background ? row(tn("modBackgroundFit"), `${th.background.fit} · ${Math.round(th.background.opacity * 100)}%`) : null}
     ${th.avatar ? pic(th.avatar, tn("modAvatar")) : null}
-    ${(canvasWorkerEnabled() ? effects || [] : []).map((e, i) => html`<div key=${i}>${row(tn("modPlacesEffect"), html`<span><code>${e.effect}</code>${e.id ? html` <span class="muted">${e.id.slice(0, 8)}</span>` : null}${Object.keys(e.params || {}).length ? html` · <code>${JSON.stringify(e.params)}</code>` : null}</span>`)}</div>`)}
     <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify(th, null, 2)}</pre></details>
   </div>`;
 }
@@ -92,7 +89,7 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
   const tick = (label, on, set) => html`<label class="check s-mod-tick"><input type="checkbox" checked=${on} onChange=${(e) => set(e.target.checked)} /><span>${label}</span></label>`;
   if (it.part === "theme") {
     return html`<li class="s-mod-item">${tick(tn("modPartTheme"), choice.theme, (v) => setChoice({ ...choice, theme: v }))}
-      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} effects=${it.effects} /></div></li>`;
+      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} /></div></li>`;
   }
   if (it.part === "identity") {
     return html`<li class="s-mod-item">${tick(tn("modPartIdentity"), choice.identity, (v) => setChoice({ ...choice, identity: v }))}
@@ -116,11 +113,8 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
       <div class="s-mod-detail">${one("loop")}${one("click")}
         <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify({ loop: it.loop, click: it.click }, null, 2)}</pre></details></div></li>`;
   }
-  if (it.part === "effect") {
-    if (!canvasWorkerEnabled()) return null;
-    return html`<li class="s-mod-item">${tick(tn("modPartEffect", it.title), choice.effects, (v) => setChoice({ ...choice, effects: v }))}
-      <div class="s-mod-detail"><span>${kib(it.bytes)} · ${tn("modRegions", it.regions.join(", "))}</span>${it.wants.length ? html`<span>${tn("modWants", it.wants.join(", "))}</span>` : null}</div></li>`;
-  }
+  // #2799: a Canvas Worker effect entry (the server refuses the file that carries one) is not offered.
+  if (it.part === "effect") return null;
   if (it.part === "ownerCss") {
     return html`<li class="s-mod-item s-mod-css">${tick(tn("modPartCss"), choice.ownerCss, (v) => setChoice({ ...choice, ownerCss: v }))}
       <p class="s-mod-warn">${tn("modCssWarn")}</p>
@@ -141,7 +135,7 @@ function Plan({ staged, onDone }) {
   const names = (app.instances || []).map((i) => i.name);
   const install = async () => {
     setBusy(true); setError("");
-    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: canvasWorkerEnabled() && choice.effects }, ...(toInstance ? { target } : {}) });
+    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: false }, ...(toInstance ? { target } : {}) });
     setBusy(false);
     // The stage this plan shows is gone or no longer this plan (replaced on another device, expired): read again —
     // the page then shows whatever is staged now, with its own, fresh choices (keyed by stage).
@@ -209,7 +203,6 @@ function ExportForm() {
 }
 
 export function ModsCard() {
-  useCanvasWorker();
   const [state, setState] = useState(null);
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState("");

package/dist/ui/settings-registry.js

@@ -28,7 +28,6 @@ const ROWS = [
   ["look.widget", "look", ".s-widget", "settings.widgetTitle", "widget.sidebar", ["sidebar widget", "widget", "json"], ["側邊欄小工具", "小工具"]],
   ["look.css", "look", ".s-owner-css", "settings.cssTitle", null, ["custom css", "stylesheet", "style", "css"], ["自訂 CSS", "樣式表", "樣式"]],
   ["look.mods", "look", ".s-mods", "settings.modsTitle", null, ["mod", "mods", "import", "add-on", "agendmod"], ["mod", "匯入", "擴充"]],
-  ["look.effects", "look", ".s-effects", null, null, ["effects", "canvas", "ambient", "petals", "click stars"], ["特效", "效果", "花瓣", "氛圍"], L("Effects", "效果")],
   ["look.restore", "look", ".s-restore", "settings.restoreTitle", null, ["restore defaults", "reset", "default"], ["還原預設值", "重設", "預設"]],
   // Fleet · Agents
   ["agents.new", "agents", "#newAgentBtn", "settings.newAgent", null, ["new agent", "create", "add agent", "instance"], ["新增 agent", "建立", "新 agent"]],

package/dist/ui/settings-strings.js

@@ -393,16 +393,14 @@ register("settings", {
     modPartWidget_chat_header: "Chat header widget",
     modPartWidget_details: "Details page widget",
     modPartWidget_sidebar: "Your sidebar widget",
-    modPartEffect: "Effect: {0}",
     modPartCss: "Custom CSS (on your screens only)",
     modCssWarn: "Custom CSS from this file — read it before turning it on.",
     modCssAssets: "{0} files for it ({1})",
     modAccent: "Accent", modFont: "Font", modPictures: "{0} pictures ({1})", modPlaces: "places {0} effects",
     modColorsLight: "Light colours", modColorsDark: "Dark colours", modBubble: "Bubbles", modWorkingLabel: "Working label",
     modBackground: "Background picture", modBackgroundFit: "Background fit and opacity", modAvatar: "Picture (face)",
-    modPlacesEffect: "Places effect", modAllFields: "Every field, as it will be applied",
+    modAllFields: "Every field, as it will be applied",
     modStageGone: "That import was replaced or ran out of time. Showing what is staged now.",
-    modRegions: "draws on: {0}", modWants: "hears: {0}",
     modTarget: "Apply to",
     modTargetPick: "Choose an agent…",
     modTargetNeeded: "Choose the agent this look goes to.",
@@ -541,6 +539,8 @@ register("settings", {
     grantsChoose: "Choose", grantsChosen: "Chosen", grantsMaySee: "{0} may see:", grantsClassicRooms: "ClassicBot rooms", grantsWroteHere: "wrote here", grantsWroteTo: "Wrote to: {0}",
     grantsLastSeen: "last seen {0}", grantsRecent: "Recent changes", grantsRecentNone: "No change to anyone's access yet.", grantsAuditDirect: "applied at once", grantsAuditConfirmed: "confirmed in General", grantsAuditEnded: "{0} session(s) ended", grantsAuditCodeSent: "sign-in code sent", grantsAuditCodeNot: "sign-in code not sent ({0})", grantsAuditDmFailed: "the DM did not go through", grantsAuditWait: "asked again within a minute", grantsAuditAdminLimit: "the admin's limit of codes was reached",
     grantsEditAgents: "Edit agents", grantsRemove: "Remove access", grantsUndoRemove: "Keep access",
+    grantsLevel: "What {0} may do", grantsLevelChat: "Chat", grantsLevelTrusted: "Trusted",
+    grantsLevelTrustedHint: "Trusted adds watching these agents' screens (read-only) and searching their chats. The screen shows everything the agent's terminal does: other people's messages to it, commands and their output, which can include secrets. Chat and search stay limited to what this person may see.", grantsAuditLevel: "→ {0}",
     grantsWillBeRemoved: "Access ends when you save.", grantsNew: "New — granted when you save", grantsNoAgents: "Tick at least one agent, or remove this person.",
     grantsSend: "Send sign-in code", grantsSendAgain: "Send again in {0}", grantsSendSaveFirst: "Save first: a code goes only to saved access.",
     grantsSent: "Code sent {0} · expires {1}", grantsSentPublic: "It works on the open public link too.", grantsSending: "Sending…",
@@ -1047,16 +1047,14 @@ register("settings", {
     modPartWidget_chat_header: "聊天標頭小工具",
     modPartWidget_details: "詳細資料頁小工具",
     modPartWidget_sidebar: "你的側邊欄小工具",
-    modPartEffect: "效果：{0}",
     modPartCss: "自訂 CSS（只套用在你的畫面）",
     modCssWarn: "這是檔案裡的自訂 CSS——開啟前請先讀過。",
     modCssAssets: "附帶 {0} 個檔案（{1}）",
     modAccent: "強調色", modFont: "字型", modPictures: "{0} 張圖片（{1}）", modPlaces: "放置 {0} 個效果",
     modColorsLight: "淺色模式顏色", modColorsDark: "深色模式顏色", modBubble: "對話泡泡", modWorkingLabel: "工作中文字",
     modBackground: "背景圖片", modBackgroundFit: "背景填滿方式與不透明度", modAvatar: "圖片（頭像）",
-    modPlacesEffect: "放置效果", modAllFields: "所有欄位（套用時的樣子）",
+    modAllFields: "所有欄位（套用時的樣子）",
     modStageGone: "那次匯入已被取代或已逾時。以下顯示目前暫存的內容。",
-    modRegions: "繪製於：{0}", modWants: "接收：{0}",
     modTarget: "套用到",
     modTargetPick: "選擇一個 agent…",
     modTargetNeeded: "請選擇這套外觀要套用到哪個 agent。",
@@ -1194,6 +1192,8 @@ register("settings", {
     grantsChoose: "選擇", grantsChosen: "已選擇", grantsMaySee: "{0} 可以看到：", grantsClassicRooms: "ClassicBot 聊天室", grantsWroteHere: "傳過訊息", grantsWroteTo: "傳過訊息給：{0}",
     grantsLastSeen: "最後出現 {0}", grantsRecent: "最近的變更", grantsRecentNone: "還沒有人的存取權變更過。", grantsAuditDirect: "立即生效", grantsAuditConfirmed: "在 General 確認後生效", grantsAuditEnded: "結束了 {0} 個登入", grantsAuditCodeSent: "已寄出登入碼", grantsAuditCodeNot: "登入碼未寄出（{0}）", grantsAuditDmFailed: "私訊沒有送達", grantsAuditWait: "一分鐘內重複要求", grantsAuditAdminLimit: "已達管理員的登入碼上限",
     grantsEditAgents: "編輯 agent", grantsRemove: "移除存取權", grantsUndoRemove: "保留存取權",
+    grantsLevel: "{0} 可以做什麼", grantsLevelChat: "聊天", grantsLevelTrusted: "信任",
+    grantsLevelTrustedHint: "信任多了：觀看這些 agent 的畫面（唯讀），以及搜尋它們的聊天。畫面會顯示 agent 終端上的一切：別人傳給它的訊息、指令和它們的輸出，其中可能有機密。聊天和搜尋仍只限這個人看得到的內容。", grantsAuditLevel: "→ {0}",
     grantsWillBeRemoved: "儲存後存取權就會結束。", grantsNew: "新增 —— 儲存後授權", grantsNoAgents: "至少勾選一個 agent，或移除這個人。",
     grantsSend: "傳送登入碼", grantsSendAgain: "{0} 後可再傳", grantsSendSaveFirst: "請先儲存：登入碼只會傳給已儲存的授權。",
     grantsSent: "{0} 已傳送 · {1} 到期", grantsSentPublic: "也可以用在目前開啟的公開連結上。", grantsSending: "傳送中…",

package/dist/ui/shared/app-prefs.js

@@ -91,15 +91,6 @@ let holding = 0;
 const held = new Map();        // key → value chosen in Settings, shown here, not saved yet
 const heldFrom = new Map();    // key → its cached form before it was held (a choice back to it is no change)
 const heldListeners = new Set();
-// #2193: whether the signed-in person has a personal effect slot chosen (their fx.* keys: in the page's data-prefs and
-// in every host read, never in this host cache). The effects runtime is loaded only when there is something to play.
-const ownerEffectsIn = (values) => !!values && OWNER_EFFECT_PREF_KEYS.some((k) => own(values, k) && values[k] != null && values[k] !== "");
-let ownerFx = initial ? ownerEffectsIn(initial.values) : false;
-const ownerFxListeners = new Set();
-/** Whether the person has any personal effect (fx.page/header/sidebar/box/cursor) chosen, as this page last read. */
-export function ownerEffectsChosen() { return ownerFx; }
-/** Called when that changes. Returns the unsubscribe. */
-export function onOwnerEffectsChanged(fn) { ownerFxListeners.add(fn); return () => ownerFxListeners.delete(fn); }
 
 // The host's values into the cache, now — before the sidebar, the tour or the first-run card read their keys. A key
 // the host does not have: the default, on a device in step with the host; this device's own (to upload) otherwise.
@@ -111,9 +102,20 @@ if (host) {
   }
 }
 
-/** This page may change the host's preferences: the signed-in app, not over the public link, not a guest's (#1920). */
-export function prefsWritable() {
-  return !!initial && !guestPage() && !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
+/**
+ * #2855: the preferences a guest keeps as its own, on the host under its account (the same list as web-prefs.ts
+ * GUEST_OWN_PREF_KEYS); the rest of a guest's page follows the host's look and stays on this browser.
+ */
+export const GUEST_OWN_PREF_KEYS = Object.freeze(["theme", "lang", "nav.favorites", "nav.sort", "nav.filter"]);
+const GUEST_OWN = new Set(GUEST_OWN_PREF_KEYS);
+/**
+ * This page may change a preference on the host: the signed-in app, not over the public link (#1920). A guest's page
+ * (#2855): only its own keys — over the public link too, since only its own bucket is written; no key named: none.
+ */
+export function prefsWritable(key) {
+  if (!initial) return false;
+  if (guestPage()) return key !== undefined && GUEST_OWN.has(key);
+  return !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
 }
 /**
  * The value in force for a key, in memory — never only in this browser's storage (a full storage must not bring back
@@ -140,8 +142,6 @@ function take(body) {
   if (!isView(body) || (rev !== null && body.rev < rev)) return false;
   rev = body.rev;
   host = hostValues(body.values);
-  const fx = ownerEffectsIn(body.values);
-  if (fx !== ownerFx) { ownerFx = fx; for (const fn of [...ownerFxListeners]) { try { fn(fx); } catch { /* the rest still hear */ } } }
   return true;
 }
 
@@ -153,7 +153,7 @@ export function savePref(key, value) {
   if (!hostKey(key)) return;
   if (holding && HELD_KEYS.has(key)) { hold(key, value); return; }
   cache(key, value);
-  if (!prefsWritable()) return;
+  if (!prefsWritable(key)) return;
   pending.set(key, value);
   mine.set(key, value);
   clearTimeout(flushTimer);
@@ -328,9 +328,9 @@ function apply(changed) {
  * refused session or an unreadable store leaves the device unmarked, so the next load tries again.
  */
 export async function migratePrefs() {
-  if (!prefsWritable() || inStep()) return false;
+  if (!initial || inStep() || !HOST_KEYS.some((key) => prefsWritable(key))) return false;
   for (const key of HOST_KEYS) {
-    if (own(host, key)) continue;
+    if (own(host, key) || !prefsWritable(key)) continue;
     const local = SYNCED[key].fromLocal(readLocal(SYNCED[key].ls));
     if (local === undefined) continue;
     let r;

package/dist/ui/shared/app-shell.js

@@ -7,7 +7,7 @@ import { Toasts } from "./ui-toast.js";
 import { ConfirmHost, confirmDialog } from "./ui-confirm.js";
 import { ColorDialogHost } from "./identity-color.js";
 import { t, lang, setLang, onLang } from "./app-i18n.js";
-import { appStore, createStore, guestBadge, guestPage, useStore } from "./app-store.js";
+import { appStore, createStore, guestBadge, guestPage, guestTrusted, useStore } from "./app-store.js";
 import { navStore } from "./app-nav.js";
 import { toast } from "./ui-toast.js";
 import { chatPath, viewPath, settingsPath, routeKey, NEEDS_PATH, fleetEntryPath } from "./app-route.js";
@@ -78,7 +78,8 @@ export const searchShortcut = () => (isMacLike() ? "⌘K" : "Ctrl K");
 export function searchOffered(admin) {
   const body = typeof document !== "undefined" ? document.body : null;
   const offLink = !!body && body.dataset.publicLink === "1" && body.dataset.searchLink === "0";
-  return !!admin && !guestPage() && !offLink;
+  // #2855: a trusted guest searches too (only what it can see: the server's rule).
+  return (guestPage() ? guestTrusted() : !!admin) && !offLink;
 }
 let searchModule = null;
 /** Open search; `preset.instance`: narrowed to that agent (Ctrl+F in its chat). */
@@ -107,6 +108,10 @@ export function handleSearchKey(e) {
   openSearch(key === "f" ? { instance: route.instance } : {});
 }
 
+/** The sidebar's Search row (Ctrl+K / ⌘K). */
+const searchRow = () => html`<button type="button" class="side-row side-search" onClick=${() => openSearch()} title=${t("app.searchTitle", searchShortcut())}
+  aria-keyshortcuts=${isMacLike() ? "Meta+K" : "Control+K"}><${Icon} name="search" /><span class="grow">${t("app.search")}</span><kbd class="kbd-hint" aria-hidden="true">${searchShortcut()}</kbd></button>`;
+
 function readCollapsed() { try { return localStorage.getItem("agend_sidebar") === "hidden"; } catch { return false; } }
 const narrow = () => typeof matchMedia === "function" && matchMedia("(max-width: 899px)").matches;
 
@@ -350,6 +355,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
         <a class="brand" href="/ui" onClick=${closeDrawer}>${t("app.brand")}</a>
         <button type="button" class="icon-btn side-collapse" onClick=${toggleSidebar} aria-label=${narrow() ? t("app.closeMenu") : t("app.collapse")} title=${narrow() ? t("app.closeMenu") : t("app.collapse")} aria-controls="sidebar"><${Icon} name="sidebar" /></button>
       </div>
+      ${searchOffered(false) ? html`<nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>${searchRow()}</nav>` : null}
       <${InstanceNav} route=${route} items=${app.instances} loaded=${app.ready !== false} exec=${app.exec} awaiting=${app.awaiting} onPick=${closeDrawer} />
       <div class="side-foot" data-trust="navigation">
         <${GuestChip} />
@@ -372,8 +378,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
     <nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>
       ${overview}
       ${navLink("needs", NEEDS_PATH, "inbox", t("app.needsNav"), needsCount)}
-      ${searchOffered(canCreate) ? html`<button type="button" class="side-row side-search" onClick=${() => openSearch()} title=${t("app.searchTitle", searchShortcut())}
-        aria-keyshortcuts=${isMacLike() ? "Meta+K" : "Control+K"}><${Icon} name="search" /><span class="grow">${t("app.search")}</span><kbd class="kbd-hint" aria-hidden="true">${searchShortcut()}</kbd></button>` : null}
+      ${searchOffered(canCreate) ? searchRow() : null}
       ${canCreate && onNewInstance ? html`<button type="button" class="side-row side-new" onClick=${onNewInstance}><${Icon} name="plus" /><span class="grow">${t("app.newAgent")}</span></button>` : null}
     </nav>
     ${shell.side ? html`<${shell.side.Component} />` : html`<${InstanceNav} route=${route} items=${app.instances} loaded=${app.ready !== false}
@@ -393,8 +398,7 @@ function GuestChip() {
   const { name, platform } = guestBadge();
   const where = PLATFORM_NAMES[platform] || platform;
   const label = name ? (where ? t("app.guestAsOn", name, where) : t("app.guestAs", name)) : t("app.guestChip");
-  // Inside .side-foot (a marked, stock-trusted element): no trust marker of its own — effect-stock-trust's closed inventory
-  // refuses any element it does not know, which would hide a guest's static effect posters (#2101 review).
+  // Inside .side-foot (a marked element): no trust marker of its own (#2101 review).
   return html`<p class="guest-chip" title=${t("app.guestHint")}><${Icon} name="user" size=${14} /><span class="grow">${label}</span></p>`;
 }
 
@@ -781,7 +785,7 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
       document.removeEventListener("compositionstart", start, true); document.removeEventListener("compositionend", end, true);
     };
   }, []);
-  const guest = guestPage();             // #1920: a guest's page — no operations, usage, pending changes or owner CSS
+  const guest = guestPage();             // #1920: a guest's page — no operations, pending changes or owner CSS (#2855: usage, yes)
   const cls = ["shell", shell.collapsed ? "sb-collapsed" : "", shell.drawer ? "sb-open" : "", shell.keyboard ? "kb-open" : "", guest ? "guest" : ""].filter(Boolean).join(" ");
   return html`<div ref=${root} class=${cls}>
     <a data-trust="navigation" class="skip" href="#main">${t("app.skip")}</a>
@@ -795,7 +799,7 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
       ${viewOnly || guest || !shell.banner ? null : html`<${shell.banner} />`}
       <${Outlet} route=${nav.route} seq=${nav.seq} panels=${panels} />
     </main>
-    ${guest ? null : html`<${RightRail} route=${nav.route} />`}
+    <${RightRail} route=${nav.route} />
     <${BottomTabs} route=${nav.route} viewOnly=${viewOnly} />
     ${shell.dialog ? html`<${shell.dialog.Component} ...${shell.dialog.props} onClose=${closeDialog} />` : null}
     ${viewOnly || guest || (nav.route && nav.route.panel === "settings") ? null : html`<${PendingChanges} />`}

package/dist/ui/shared/app-store.js

@@ -24,7 +24,7 @@ export function createStore(initial) {
  *  (app-stream.js catchUp) — "catching" / "retrying" / "failed" / "ok"; `retryHydration` asks for it again.
  *  `connections`: how many chat connections the fleet has (#1519 P7: 0 is web-only — the first-run card); null until known. */
 export const appStore = createStore({ ready: false, instances: [], uptime: 0, exec: {}, awaiting: {}, connection: "connecting", needs: [], connections: null,
-  hydration: "none", retryHydration: null, canvasWorker: typeof document !== "undefined" && document.body?.dataset.canvasWorker === "1" });
+  hydration: "none", retryHydration: null });
 
 /**
  * #1920 phase 3: this page is a guest's — the server says so on <body> (data-tier="guest"). A guest sees only its own
@@ -34,6 +34,10 @@ export const appStore = createStore({ ready: false, instances: [], uptime: 0, ex
 export function guestPage() {
   return typeof document !== "undefined" && !!document.body && document.body.dataset.tier === "guest";
 }
+/** #2855: this guest's access is Trusted — its page offers View (read-only) and search (the server's, on <body>). */
+export function guestTrusted() {
+  return guestPage() && document.body.dataset.guestLevel === "trusted";
+}
 /** Who a guest's page is signed in as: its web name and its platform (the server's, on <body>). */
 export function guestBadge() {
   const d = typeof document !== "undefined" && document.body ? document.body.dataset : {};
@@ -49,7 +53,7 @@ export function applyStatus(d) {
     exec[i.name] = (i.execution_state !== undefined ? i.execution_state : i.state) ?? null;
     if (i.state === "awaiting_input") awaiting[i.name] = typeof i.interaction_summary === "string" ? i.interaction_summary : "";
   }
-  appStore.set({ canvasWorker: d.canvas_worker === true, ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
+  appStore.set({ ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
     startup: d.startup?.phase === "starting" ? d.startup : null,
     connections: typeof d.connections === "number" ? d.connections : null,
     // #1665: the host preferences' revision (app-prefs.js re-reads them when it moves).