@songsid/agend 2.3.3-beta.4 → 2.3.3-beta.5

package/dist/ui/settings-appearance.js

@@ -6,8 +6,6 @@ import { register, t } from "/assets/app-i18n.js";
 import { recordEdit } from "/assets/text-undo.js";
 import { appStore, useStore } from "/assets/app-store.js";
 import { ModsCard } from "./settings-mods.js";
-import { experimentalComponent } from "/assets/feature-flags.js";
-const EffectsCard = experimentalComponent(() => import("./settings-effects.js"), m => m.EffectsCard);
 import { Icon } from "/assets/ui-icons.js";
 import { toast } from "/assets/ui-toast.js";
 import { ownerCssOffHere, ownerCssTrial, safeMode, setOwnerCssActive, setOwnerCssOffHere, startOwnerCssTrial } from "/assets/owner-css.js";
@@ -71,7 +69,7 @@ export function AppearanceSection(props = {}) {
   return html`${group("groupLook")}<${ThemesCard} ...${props} /><${IdentityColorCard} /><${CardSizeCard} />
     ${group("groupLayout")}<${SidebarWidgetCard} />
     ${group("groupCss")}<${OwnerCssCard} />
-    ${group("groupMods")}<${ModsCard} /><${EffectsCard} />
+    ${group("groupMods")}<${ModsCard} />
     <${RestoreDefaultsCard} ...${props} />`;
 }
 

package/dist/ui/settings-guests.js

@@ -22,13 +22,16 @@ const PLATFORMS = { discord: "Discord", telegram: "Telegram" };
 const own = (o, k) => !!o && Object.prototype.hasOwnProperty.call(o, k);
 const sameList = (a, b) => (a || []).length === (b || []).length && (a || []).every((n) => (b || []).includes(n));
 const accountKey = (g) => `${g.adapterId}:${g.userId}`;
-const copyGrants = (m) => { const out = {}; for (const [k, v] of Object.entries(m || {})) if (v && Array.isArray(v.instances)) out[k] = { ...(v.name ? { name: v.name } : {}), instances: [...v.instances] }; return out; };
+// #2855: a grant's level — "trusted", or chat (the default, so never written).
+const grantOf = (v) => ({ ...(v.name ? { name: v.name } : {}), instances: [...v.instances], ...(v.level === "trusted" ? { level: "trusted" } : {}) });
+const copyGrants = (m) => { const out = {}; for (const [k, v] of Object.entries(m || {})) if (v && Array.isArray(v.instances)) out[k] = grantOf(v); return out; };
 /** The saved state, from the fleet's config: `grants` null while the fleet still uses #1920's derived access. */
 export function savedGuests(fleet) {
   const g = (fleet && fleet.web && fleet.web.guests) || {};
   return { enabled: g.enabled === true, chat: g.chat !== false, grants: g.grants ? copyGrants(g.grants) : null };
 }
-const sameGrant = (a, b) => !!a && !!b && (a.name || "") === (b.name || "") && sameList(a.instances, b.instances);
+const levelOf = (g) => (g && g.level === "trusted" ? "trusted" : "chat");
+const sameGrant = (a, b) => !!a && !!b && (a.name || "") === (b.name || "") && sameList(a.instances, b.instances) && levelOf(a) === levelOf(b);
 
 /**
  * What changed against the saved state, as the PUT /api/settings/fleet/web body's `guests` (null: nothing), and how
@@ -44,7 +47,7 @@ export function guestsBody(original, f) {
     for (const k of new Set([...Object.keys(was), ...Object.keys(f.grants)])) {
       const a = own(was, k) ? was[k] : undefined, b = own(f.grants, k) ? f.grants[k] : undefined;
       if (a && b && sameGrant(a, b)) continue;
-      diff[k] = b ? { ...(b.name ? { name: b.name } : {}), instances: [...b.instances] } : null;
+      diff[k] = b ? grantOf(b) : null;
       count++;
     }
     // #2365 review: turning grants on is a change by itself, even with no one in them yet (default deny): `grants: {}`.
@@ -235,6 +238,12 @@ export function GuestsSection({ ctx, staged }) {
             ${removed ? html`<span class="g-state">${tn("grantsWillBeRemoved")}</span>` : added ? html`<span class="g-state">${tn("grantsNew")}</span>` : pill(person)}</div>
           <div class="g-chips">${((draft || saved).instances || []).map((n) => html`<span key=${n} class="g-chip" title=${shownName(rooms, n) !== n ? n : undefined}>${shownName(rooms, n)}</span>`)}</div>
           ${draft && !draft.instances.length ? html`<p class="note g-error" role="alert">${tn("grantsNoAgents")}</p>` : null}
+          ${draft ? html`<div class=${`g-level${levelOf(draft) !== levelOf(saved) && saved ? " s-dirty" : ""}`}>
+            <span class="note" id=${`level-${k}`}>${tn("grantsLevel", person.name)}</span>
+            <div class="seg-inline" role="group" aria-labelledby=${`level-${k}`}>${["chat", "trusted"].map((l) => html`<button key=${l} type="button"
+              class=${`btn btn-sm${levelOf(draft) === l ? " btn-primary" : ""}`} aria-pressed=${levelOf(draft) === l ? "true" : "false"} data-level=${l}
+              onClick=${() => setGrant(k, { ...draft, level: l === "trusted" ? "trusted" : undefined })}>${tn(l === "trusted" ? "grantsLevelTrusted" : "grantsLevelChat")}</button>`)}</div>
+            ${levelOf(draft) === "trusted" ? html`<p class="note">${tn("grantsLevelTrustedHint")}</p>` : null}</div>` : null}
           ${editing === k && draft ? html`<div class="g-edit"><p class="note">${tn("grantsMaySee", person.name)}</p>
             <${Names} id=${`grant-${k}`} all=${instances} rooms=${rooms} value=${draft.instances} wrote=${person.wrote} onChange=${(list) => setGrant(k, { ...draft, instances: list })} /></div>` : null}
           ${readOnly ? null : html`<div class="guest-actions">
@@ -260,7 +269,7 @@ export function GuestsSection({ ctx, staged }) {
     ${overview && overview.audit ? html`<h4>${tn("grantsRecent")}</h4>${!overview.audit.length ? html`<p class="note" id="grantsRecentNone">${tn("grantsRecentNone")}</p>`
       : html`<ul class="g-audit" id="grantsRecentList">${overview.audit.map((e, i) => html`<li key=${`${e.at}-${i}`} class="g-audit-row" data-kind=${e.kind}>
         <span class="g-when">${new Date(e.at).toLocaleString()}</span> <strong>${e.name}</strong>
-        ${e.kind === "grant" ? html`${e.added.map((n) => html` <span key=${`+${n}`} class="g-wrote g-add">+${n}</span>`)}${e.removed.map((n) => html` <span key=${`-${n}`} class="g-wrote g-del">−${n}</span>`)}
+        ${e.kind === "grant" ? html`${e.added.map((n) => html` <span key=${`+${n}`} class="g-wrote g-add">+${n}</span>`)}${e.removed.map((n) => html` <span key=${`-${n}`} class="g-wrote g-del">−${n}</span>`)}${e.level ? html` <span class="g-wrote g-level-to">${tn("grantsAuditLevel", tn(e.level === "trusted" ? "grantsLevelTrusted" : "grantsLevelChat"))}</span>` : null}
           <span class="note"> · <span class="g-wrote">${tn(e.via === "confirmed" ? "grantsAuditConfirmed" : "grantsAuditDirect")}</span>${e.endedSessions ? html` · <span class="g-wrote">${tn("grantsAuditEnded", e.endedSessions)}</span>` : null}</span>`
         : html` <span class="note">${e.outcome === "sent" ? tn("grantsAuditCodeSent") : tn("grantsAuditCodeNot", auditOutcome(e.outcome))}</span>`}</li>`)}</ul>`}` : null}
     ${status && status.kind === "waiting" ? html`<p class="note" role="status">${tn("grantsWaiting")}</p>` : null}

package/dist/ui/settings-learn.js

@@ -12,7 +12,7 @@ const DOCS = { en: "https://github.com/songsid/AgEnD/blob/main/docs/web-dashboar
 export const LEARN_ANCHORS = {
   colors: ["identity-colours", "識別色"], css: ["custom-css-settings--look", "自訂-css設定--外觀"], themes: ["agents-themes", "agent-的主題"],
   cards: ["identity-cards", "身分卡"], limits: ["card-upload-limits", "身分卡上傳限制"], widgets: ["widgets", "小工具"], mods: ["mods", "mod"],
-  effects: ["effects", "效果"], restore: ["restore-defaults", "還原預設值"],
+  restore: ["restore-defaults", "還原預設值"],
   "app-icon": ["app-icon", "app-圖示"],
 };
 export function learnHref(topic, language = lang()) {

package/dist/ui/settings-mods.js

@@ -4,7 +4,6 @@
 // parts the person ticks are applied, all or nothing. Custom CSS from a file is never ticked by default. Installed
 // mods can be downloaded again or uninstalled (what they applied stays: Reset and the CSS controls work on it).
 // Export builds a file from what is in force now.
-import { canvasWorkerEnabled, useCanvasWorker } from "/assets/feature-flags.js";
 import { html, useEffect, useLayoutEffect, useRef, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
 import { appStore, useStore } from "/assets/app-store.js";
@@ -48,7 +47,6 @@ export function defaultChoice(plan) {
   for (const it of plan.items) {
     if (it.part === "theme" || it.part === "identity" || it.part === "ambient") c[it.part] = true;
     else if (it.part === "widget") c.widgets[it.slot] = true;
-    else if (it.part === "effect" && canvasWorkerEnabled()) c.effects = true;
     // ownerCss stays false: "read it before turning it on" (r4 §4).
   }
   return c;
@@ -62,7 +60,7 @@ function Swatch({ color }) {
   return html`<span class="s-mod-sw"><span class="s-mod-sw-chip" ref=${ref} aria-hidden="true"></span><code>${color}</code></span>`;
 }
 /** Every field of the checked theme, as it will be applied — nothing left unseen (#1897 review). */
-export function ThemeDetail({ theme, pictures, effects }) {
+export function ThemeDetail({ theme, pictures }) {
   const th = theme || {};
   const row = (k, v) => html`<div class="s-mod-kv"><span class="k">${k}</span><span class="v">${v}</span></div>`;
   const pal = (mode) => {
@@ -83,7 +81,6 @@ export function ThemeDetail({ theme, pictures, effects }) {
     ${th.background ? pic(th.background.image, tn("modBackground")) : null}
     ${th.background ? row(tn("modBackgroundFit"), `${th.background.fit} · ${Math.round(th.background.opacity * 100)}%`) : null}
     ${th.avatar ? pic(th.avatar, tn("modAvatar")) : null}
-    ${(canvasWorkerEnabled() ? effects || [] : []).map((e, i) => html`<div key=${i}>${row(tn("modPlacesEffect"), html`<span><code>${e.effect}</code>${e.id ? html` <span class="muted">${e.id.slice(0, 8)}</span>` : null}${Object.keys(e.params || {}).length ? html` · <code>${JSON.stringify(e.params)}</code>` : null}</span>`)}</div>`)}
     <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify(th, null, 2)}</pre></details>
   </div>`;
 }
@@ -92,7 +89,7 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
   const tick = (label, on, set) => html`<label class="check s-mod-tick"><input type="checkbox" checked=${on} onChange=${(e) => set(e.target.checked)} /><span>${label}</span></label>`;
   if (it.part === "theme") {
     return html`<li class="s-mod-item">${tick(tn("modPartTheme"), choice.theme, (v) => setChoice({ ...choice, theme: v }))}
-      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} effects=${it.effects} /></div></li>`;
+      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} /></div></li>`;
   }
   if (it.part === "identity") {
     return html`<li class="s-mod-item">${tick(tn("modPartIdentity"), choice.identity, (v) => setChoice({ ...choice, identity: v }))}
@@ -116,11 +113,8 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
       <div class="s-mod-detail">${one("loop")}${one("click")}
         <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify({ loop: it.loop, click: it.click }, null, 2)}</pre></details></div></li>`;
   }
-  if (it.part === "effect") {
-    if (!canvasWorkerEnabled()) return null;
-    return html`<li class="s-mod-item">${tick(tn("modPartEffect", it.title), choice.effects, (v) => setChoice({ ...choice, effects: v }))}
-      <div class="s-mod-detail"><span>${kib(it.bytes)} · ${tn("modRegions", it.regions.join(", "))}</span>${it.wants.length ? html`<span>${tn("modWants", it.wants.join(", "))}</span>` : null}</div></li>`;
-  }
+  // #2799: a Canvas Worker effect entry (the server refuses the file that carries one) is not offered.
+  if (it.part === "effect") return null;
   if (it.part === "ownerCss") {
     return html`<li class="s-mod-item s-mod-css">${tick(tn("modPartCss"), choice.ownerCss, (v) => setChoice({ ...choice, ownerCss: v }))}
       <p class="s-mod-warn">${tn("modCssWarn")}</p>
@@ -141,7 +135,7 @@ function Plan({ staged, onDone }) {
   const names = (app.instances || []).map((i) => i.name);
   const install = async () => {
     setBusy(true); setError("");
-    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: canvasWorkerEnabled() && choice.effects }, ...(toInstance ? { target } : {}) });
+    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: false }, ...(toInstance ? { target } : {}) });
     setBusy(false);
     // The stage this plan shows is gone or no longer this plan (replaced on another device, expired): read again —
     // the page then shows whatever is staged now, with its own, fresh choices (keyed by stage).
@@ -209,7 +203,6 @@ function ExportForm() {
 }
 
 export function ModsCard() {
-  useCanvasWorker();
   const [state, setState] = useState(null);
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState("");

package/dist/ui/settings-registry.js

@@ -28,7 +28,6 @@ const ROWS = [
   ["look.widget", "look", ".s-widget", "settings.widgetTitle", "widget.sidebar", ["sidebar widget", "widget", "json"], ["側邊欄小工具", "小工具"]],
   ["look.css", "look", ".s-owner-css", "settings.cssTitle", null, ["custom css", "stylesheet", "style", "css"], ["自訂 CSS", "樣式表", "樣式"]],
   ["look.mods", "look", ".s-mods", "settings.modsTitle", null, ["mod", "mods", "import", "add-on", "agendmod"], ["mod", "匯入", "擴充"]],
-  ["look.effects", "look", ".s-effects", null, null, ["effects", "canvas", "ambient", "petals", "click stars"], ["特效", "效果", "花瓣", "氛圍"], L("Effects", "效果")],
   ["look.restore", "look", ".s-restore", "settings.restoreTitle", null, ["restore defaults", "reset", "default"], ["還原預設值", "重設", "預設"]],
   // Fleet · Agents
   ["agents.new", "agents", "#newAgentBtn", "settings.newAgent", null, ["new agent", "create", "add agent", "instance"], ["新增 agent", "建立", "新 agent"]],

package/dist/ui/settings-strings.js

@@ -393,16 +393,14 @@ register("settings", {
     modPartWidget_chat_header: "Chat header widget",
     modPartWidget_details: "Details page widget",
     modPartWidget_sidebar: "Your sidebar widget",
-    modPartEffect: "Effect: {0}",
     modPartCss: "Custom CSS (on your screens only)",
     modCssWarn: "Custom CSS from this file — read it before turning it on.",
     modCssAssets: "{0} files for it ({1})",
     modAccent: "Accent", modFont: "Font", modPictures: "{0} pictures ({1})", modPlaces: "places {0} effects",
     modColorsLight: "Light colours", modColorsDark: "Dark colours", modBubble: "Bubbles", modWorkingLabel: "Working label",
     modBackground: "Background picture", modBackgroundFit: "Background fit and opacity", modAvatar: "Picture (face)",
-    modPlacesEffect: "Places effect", modAllFields: "Every field, as it will be applied",
+    modAllFields: "Every field, as it will be applied",
     modStageGone: "That import was replaced or ran out of time. Showing what is staged now.",
-    modRegions: "draws on: {0}", modWants: "hears: {0}",
     modTarget: "Apply to",
     modTargetPick: "Choose an agent…",
     modTargetNeeded: "Choose the agent this look goes to.",
@@ -541,6 +539,8 @@ register("settings", {
     grantsChoose: "Choose", grantsChosen: "Chosen", grantsMaySee: "{0} may see:", grantsClassicRooms: "ClassicBot rooms", grantsWroteHere: "wrote here", grantsWroteTo: "Wrote to: {0}",
     grantsLastSeen: "last seen {0}", grantsRecent: "Recent changes", grantsRecentNone: "No change to anyone's access yet.", grantsAuditDirect: "applied at once", grantsAuditConfirmed: "confirmed in General", grantsAuditEnded: "{0} session(s) ended", grantsAuditCodeSent: "sign-in code sent", grantsAuditCodeNot: "sign-in code not sent ({0})", grantsAuditDmFailed: "the DM did not go through", grantsAuditWait: "asked again within a minute", grantsAuditAdminLimit: "the admin's limit of codes was reached",
     grantsEditAgents: "Edit agents", grantsRemove: "Remove access", grantsUndoRemove: "Keep access",
+    grantsLevel: "What {0} may do", grantsLevelChat: "Chat", grantsLevelTrusted: "Trusted",
+    grantsLevelTrustedHint: "Trusted adds watching these agents' screens (read-only) and searching their chats. The screen shows everything the agent's terminal does: other people's messages to it, commands and their output, which can include secrets. Chat and search stay limited to what this person may see.", grantsAuditLevel: "→ {0}",
     grantsWillBeRemoved: "Access ends when you save.", grantsNew: "New — granted when you save", grantsNoAgents: "Tick at least one agent, or remove this person.",
     grantsSend: "Send sign-in code", grantsSendAgain: "Send again in {0}", grantsSendSaveFirst: "Save first: a code goes only to saved access.",
     grantsSent: "Code sent {0} · expires {1}", grantsSentPublic: "It works on the open public link too.", grantsSending: "Sending…",
@@ -1047,16 +1047,14 @@ register("settings", {
     modPartWidget_chat_header: "聊天標頭小工具",
     modPartWidget_details: "詳細資料頁小工具",
     modPartWidget_sidebar: "你的側邊欄小工具",
-    modPartEffect: "效果：{0}",
     modPartCss: "自訂 CSS（只套用在你的畫面）",
     modCssWarn: "這是檔案裡的自訂 CSS——開啟前請先讀過。",
     modCssAssets: "附帶 {0} 個檔案（{1}）",
     modAccent: "強調色", modFont: "字型", modPictures: "{0} 張圖片（{1}）", modPlaces: "放置 {0} 個效果",
     modColorsLight: "淺色模式顏色", modColorsDark: "深色模式顏色", modBubble: "對話泡泡", modWorkingLabel: "工作中文字",
     modBackground: "背景圖片", modBackgroundFit: "背景填滿方式與不透明度", modAvatar: "圖片（頭像）",
-    modPlacesEffect: "放置效果", modAllFields: "所有欄位（套用時的樣子）",
+    modAllFields: "所有欄位（套用時的樣子）",
     modStageGone: "那次匯入已被取代或已逾時。以下顯示目前暫存的內容。",
-    modRegions: "繪製於：{0}", modWants: "接收：{0}",
     modTarget: "套用到",
     modTargetPick: "選擇一個 agent…",
     modTargetNeeded: "請選擇這套外觀要套用到哪個 agent。",
@@ -1194,6 +1192,8 @@ register("settings", {
     grantsChoose: "選擇", grantsChosen: "已選擇", grantsMaySee: "{0} 可以看到：", grantsClassicRooms: "ClassicBot 聊天室", grantsWroteHere: "傳過訊息", grantsWroteTo: "傳過訊息給：{0}",
     grantsLastSeen: "最後出現 {0}", grantsRecent: "最近的變更", grantsRecentNone: "還沒有人的存取權變更過。", grantsAuditDirect: "立即生效", grantsAuditConfirmed: "在 General 確認後生效", grantsAuditEnded: "結束了 {0} 個登入", grantsAuditCodeSent: "已寄出登入碼", grantsAuditCodeNot: "登入碼未寄出（{0}）", grantsAuditDmFailed: "私訊沒有送達", grantsAuditWait: "一分鐘內重複要求", grantsAuditAdminLimit: "已達管理員的登入碼上限",
     grantsEditAgents: "編輯 agent", grantsRemove: "移除存取權", grantsUndoRemove: "保留存取權",
+    grantsLevel: "{0} 可以做什麼", grantsLevelChat: "聊天", grantsLevelTrusted: "信任",
+    grantsLevelTrustedHint: "信任多了：觀看這些 agent 的畫面（唯讀），以及搜尋它們的聊天。畫面會顯示 agent 終端上的一切：別人傳給它的訊息、指令和它們的輸出，其中可能有機密。聊天和搜尋仍只限這個人看得到的內容。", grantsAuditLevel: "→ {0}",
     grantsWillBeRemoved: "儲存後存取權就會結束。", grantsNew: "新增 —— 儲存後授權", grantsNoAgents: "至少勾選一個 agent，或移除這個人。",
     grantsSend: "傳送登入碼", grantsSendAgain: "{0} 後可再傳", grantsSendSaveFirst: "請先儲存：登入碼只會傳給已儲存的授權。",
     grantsSent: "{0} 已傳送 · {1} 到期", grantsSentPublic: "也可以用在目前開啟的公開連結上。", grantsSending: "傳送中…",

package/dist/ui/shared/app-prefs.js

@@ -91,15 +91,6 @@ let holding = 0;
 const held = new Map();        // key → value chosen in Settings, shown here, not saved yet
 const heldFrom = new Map();    // key → its cached form before it was held (a choice back to it is no change)
 const heldListeners = new Set();
-// #2193: whether the signed-in person has a personal effect slot chosen (their fx.* keys: in the page's data-prefs and
-// in every host read, never in this host cache). The effects runtime is loaded only when there is something to play.
-const ownerEffectsIn = (values) => !!values && OWNER_EFFECT_PREF_KEYS.some((k) => own(values, k) && values[k] != null && values[k] !== "");
-let ownerFx = initial ? ownerEffectsIn(initial.values) : false;
-const ownerFxListeners = new Set();
-/** Whether the person has any personal effect (fx.page/header/sidebar/box/cursor) chosen, as this page last read. */
-export function ownerEffectsChosen() { return ownerFx; }
-/** Called when that changes. Returns the unsubscribe. */
-export function onOwnerEffectsChanged(fn) { ownerFxListeners.add(fn); return () => ownerFxListeners.delete(fn); }
 
 // The host's values into the cache, now — before the sidebar, the tour or the first-run card read their keys. A key
 // the host does not have: the default, on a device in step with the host; this device's own (to upload) otherwise.
@@ -111,9 +102,20 @@ if (host) {
   }
 }
 
-/** This page may change the host's preferences: the signed-in app, not over the public link, not a guest's (#1920). */
-export function prefsWritable() {
-  return !!initial && !guestPage() && !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
+/**
+ * #2855: the preferences a guest keeps as its own, on the host under its account (the same list as web-prefs.ts
+ * GUEST_OWN_PREF_KEYS); the rest of a guest's page follows the host's look and stays on this browser.
+ */
+export const GUEST_OWN_PREF_KEYS = Object.freeze(["theme", "lang", "nav.favorites", "nav.sort", "nav.filter"]);
+const GUEST_OWN = new Set(GUEST_OWN_PREF_KEYS);
+/**
+ * This page may change a preference on the host: the signed-in app, not over the public link (#1920). A guest's page
+ * (#2855): only its own keys — over the public link too, since only its own bucket is written; no key named: none.
+ */
+export function prefsWritable(key) {
+  if (!initial) return false;
+  if (guestPage()) return key !== undefined && GUEST_OWN.has(key);
+  return !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
 }
 /**
  * The value in force for a key, in memory — never only in this browser's storage (a full storage must not bring back
@@ -140,8 +142,6 @@ function take(body) {
   if (!isView(body) || (rev !== null && body.rev < rev)) return false;
   rev = body.rev;
   host = hostValues(body.values);
-  const fx = ownerEffectsIn(body.values);
-  if (fx !== ownerFx) { ownerFx = fx; for (const fn of [...ownerFxListeners]) { try { fn(fx); } catch { /* the rest still hear */ } } }
   return true;
 }
 
@@ -153,7 +153,7 @@ export function savePref(key, value) {
   if (!hostKey(key)) return;
   if (holding && HELD_KEYS.has(key)) { hold(key, value); return; }
   cache(key, value);
-  if (!prefsWritable()) return;
+  if (!prefsWritable(key)) return;
   pending.set(key, value);
   mine.set(key, value);
   clearTimeout(flushTimer);
@@ -328,9 +328,9 @@ function apply(changed) {
  * refused session or an unreadable store leaves the device unmarked, so the next load tries again.
  */
 export async function migratePrefs() {
-  if (!prefsWritable() || inStep()) return false;
+  if (!initial || inStep() || !HOST_KEYS.some((key) => prefsWritable(key))) return false;
   for (const key of HOST_KEYS) {
-    if (own(host, key)) continue;
+    if (own(host, key) || !prefsWritable(key)) continue;
     const local = SYNCED[key].fromLocal(readLocal(SYNCED[key].ls));
     if (local === undefined) continue;
     let r;

package/dist/ui/shared/app-shell.js

@@ -7,7 +7,7 @@ import { Toasts } from "./ui-toast.js";
 import { ConfirmHost, confirmDialog } from "./ui-confirm.js";
 import { ColorDialogHost } from "./identity-color.js";
 import { t, lang, setLang, onLang } from "./app-i18n.js";
-import { appStore, createStore, guestBadge, guestPage, useStore } from "./app-store.js";
+import { appStore, createStore, guestBadge, guestPage, guestTrusted, useStore } from "./app-store.js";
 import { navStore } from "./app-nav.js";
 import { toast } from "./ui-toast.js";
 import { chatPath, viewPath, settingsPath, routeKey, NEEDS_PATH, fleetEntryPath } from "./app-route.js";
@@ -78,7 +78,8 @@ export const searchShortcut = () => (isMacLike() ? "⌘K" : "Ctrl K");
 export function searchOffered(admin) {
   const body = typeof document !== "undefined" ? document.body : null;
   const offLink = !!body && body.dataset.publicLink === "1" && body.dataset.searchLink === "0";
-  return !!admin && !guestPage() && !offLink;
+  // #2855: a trusted guest searches too (only what it can see: the server's rule).
+  return (guestPage() ? guestTrusted() : !!admin) && !offLink;
 }
 let searchModule = null;
 /** Open search; `preset.instance`: narrowed to that agent (Ctrl+F in its chat). */
@@ -107,6 +108,10 @@ export function handleSearchKey(e) {
   openSearch(key === "f" ? { instance: route.instance } : {});
 }
 
+/** The sidebar's Search row (Ctrl+K / ⌘K). */
+const searchRow = () => html`<button type="button" class="side-row side-search" onClick=${() => openSearch()} title=${t("app.searchTitle", searchShortcut())}
+  aria-keyshortcuts=${isMacLike() ? "Meta+K" : "Control+K"}><${Icon} name="search" /><span class="grow">${t("app.search")}</span><kbd class="kbd-hint" aria-hidden="true">${searchShortcut()}</kbd></button>`;
+
 function readCollapsed() { try { return localStorage.getItem("agend_sidebar") === "hidden"; } catch { return false; } }
 const narrow = () => typeof matchMedia === "function" && matchMedia("(max-width: 899px)").matches;
 
@@ -350,6 +355,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
         <a class="brand" href="/ui" onClick=${closeDrawer}>${t("app.brand")}</a>
         <button type="button" class="icon-btn side-collapse" onClick=${toggleSidebar} aria-label=${narrow() ? t("app.closeMenu") : t("app.collapse")} title=${narrow() ? t("app.closeMenu") : t("app.collapse")} aria-controls="sidebar"><${Icon} name="sidebar" /></button>
       </div>
+      ${searchOffered(false) ? html`<nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>${searchRow()}</nav>` : null}
       <${InstanceNav} route=${route} items=${app.instances} loaded=${app.ready !== false} exec=${app.exec} awaiting=${app.awaiting} onPick=${closeDrawer} />
       <div class="side-foot" data-trust="navigation">
         <${GuestChip} />
@@ -372,8 +378,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
     <nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>
       ${overview}
       ${navLink("needs", NEEDS_PATH, "inbox", t("app.needsNav"), needsCount)}
-      ${searchOffered(canCreate) ? html`<button type="button" class="side-row side-search" onClick=${() => openSearch()} title=${t("app.searchTitle", searchShortcut())}
-        aria-keyshortcuts=${isMacLike() ? "Meta+K" : "Control+K"}><${Icon} name="search" /><span class="grow">${t("app.search")}</span><kbd class="kbd-hint" aria-hidden="true">${searchShortcut()}</kbd></button>` : null}
+      ${searchOffered(canCreate) ? searchRow() : null}
       ${canCreate && onNewInstance ? html`<button type="button" class="side-row side-new" onClick=${onNewInstance}><${Icon} name="plus" /><span class="grow">${t("app.newAgent")}</span></button>` : null}
     </nav>
     ${shell.side ? html`<${shell.side.Component} />` : html`<${InstanceNav} route=${route} items=${app.instances} loaded=${app.ready !== false}
@@ -393,8 +398,7 @@ function GuestChip() {
   const { name, platform } = guestBadge();
   const where = PLATFORM_NAMES[platform] || platform;
   const label = name ? (where ? t("app.guestAsOn", name, where) : t("app.guestAs", name)) : t("app.guestChip");
-  // Inside .side-foot (a marked, stock-trusted element): no trust marker of its own — effect-stock-trust's closed inventory
-  // refuses any element it does not know, which would hide a guest's static effect posters (#2101 review).
+  // Inside .side-foot (a marked element): no trust marker of its own (#2101 review).
   return html`<p class="guest-chip" title=${t("app.guestHint")}><${Icon} name="user" size=${14} /><span class="grow">${label}</span></p>`;
 }
 
@@ -781,7 +785,7 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
       document.removeEventListener("compositionstart", start, true); document.removeEventListener("compositionend", end, true);
     };
   }, []);
-  const guest = guestPage();             // #1920: a guest's page — no operations, usage, pending changes or owner CSS
+  const guest = guestPage();             // #1920: a guest's page — no operations, pending changes or owner CSS (#2855: usage, yes)
   const cls = ["shell", shell.collapsed ? "sb-collapsed" : "", shell.drawer ? "sb-open" : "", shell.keyboard ? "kb-open" : "", guest ? "guest" : ""].filter(Boolean).join(" ");
   return html`<div ref=${root} class=${cls}>
     <a data-trust="navigation" class="skip" href="#main">${t("app.skip")}</a>
@@ -795,7 +799,7 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
       ${viewOnly || guest || !shell.banner ? null : html`<${shell.banner} />`}
       <${Outlet} route=${nav.route} seq=${nav.seq} panels=${panels} />
     </main>
-    ${guest ? null : html`<${RightRail} route=${nav.route} />`}
+    <${RightRail} route=${nav.route} />
     <${BottomTabs} route=${nav.route} viewOnly=${viewOnly} />
     ${shell.dialog ? html`<${shell.dialog.Component} ...${shell.dialog.props} onClose=${closeDialog} />` : null}
     ${viewOnly || guest || (nav.route && nav.route.panel === "settings") ? null : html`<${PendingChanges} />`}

package/dist/ui/shared/app-store.js

@@ -24,7 +24,7 @@ export function createStore(initial) {
  *  (app-stream.js catchUp) — "catching" / "retrying" / "failed" / "ok"; `retryHydration` asks for it again.
  *  `connections`: how many chat connections the fleet has (#1519 P7: 0 is web-only — the first-run card); null until known. */
 export const appStore = createStore({ ready: false, instances: [], uptime: 0, exec: {}, awaiting: {}, connection: "connecting", needs: [], connections: null,
-  hydration: "none", retryHydration: null, canvasWorker: typeof document !== "undefined" && document.body?.dataset.canvasWorker === "1" });
+  hydration: "none", retryHydration: null });
 
 /**
  * #1920 phase 3: this page is a guest's — the server says so on <body> (data-tier="guest"). A guest sees only its own
@@ -34,6 +34,10 @@ export const appStore = createStore({ ready: false, instances: [], uptime: 0, ex
 export function guestPage() {
   return typeof document !== "undefined" && !!document.body && document.body.dataset.tier === "guest";
 }
+/** #2855: this guest's access is Trusted — its page offers View (read-only) and search (the server's, on <body>). */
+export function guestTrusted() {
+  return guestPage() && document.body.dataset.guestLevel === "trusted";
+}
 /** Who a guest's page is signed in as: its web name and its platform (the server's, on <body>). */
 export function guestBadge() {
   const d = typeof document !== "undefined" && document.body ? document.body.dataset : {};
@@ -49,7 +53,7 @@ export function applyStatus(d) {
     exec[i.name] = (i.execution_state !== undefined ? i.execution_state : i.state) ?? null;
     if (i.state === "awaiting_input") awaiting[i.name] = typeof i.interaction_summary === "string" ? i.interaction_summary : "";
   }
-  appStore.set({ canvasWorker: d.canvas_worker === true, ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
+  appStore.set({ ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
     startup: d.startup?.phase === "starting" ? d.startup : null,
     connections: typeof d.connections === "number" ? d.connections : null,
     // #1665: the host preferences' revision (app-prefs.js re-reads them when it moves).

package/dist/ui/shared/app.css

@@ -952,6 +952,8 @@ img.amb-p { object-fit: contain; }
 .s-guests .g-chips { display: flex; flex-wrap: wrap; gap: var(--s-1); margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
 .s-guests .g-chip { padding: 1px var(--s-2); border: 1px solid color-mix(in srgb, var(--text-3) 55%, transparent); border-radius: 0; font-size: var(--fs-sm); color: var(--text-2); white-space: nowrap; }
 .s-guests .g-edit { margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
+.s-guests .g-level { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
+.s-guests .g-level > .note:last-child { flex-basis: 100%; margin: 0; }
 .s-guests .guest-actions { display: flex; flex-wrap: wrap; gap: var(--s-1); margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
 .s-guests .g-error { color: var(--danger); margin-left: calc(28px + var(--s-2)); }
 .s-guests .g-search { width: 100%; max-width: 360px; margin: var(--s-1) 0 var(--s-2); }
@@ -1265,6 +1267,7 @@ body.side-resizing, body.side-resizing * { cursor: col-resize !important; user-s
 .v-pre .ansi[data-b] { font-weight: var(--fw-bold); }
 /* #1582: faint text (SGR 2) — a CLI's suggestion or placeholder, never input — stays faint here. */
 .v-pre .ansi[data-dim] { opacity: .5; }
+.v-watching { flex-shrink: 0; margin: 0; padding: var(--s-2) var(--s-4); font-size: var(--fs-sm); color: var(--text-2); background: var(--surface); border-bottom: 1px solid var(--border); }
 .v-term-note { position: absolute; left: var(--s-3); right: var(--s-3); top: var(--s-3); padding: var(--s-2) var(--s-3); border-radius: var(--r-sm); background: var(--warn-bg); border: 1px solid var(--warn-line); color: #f0f0f0; font-size: var(--fs-sm); }
 .v-probe { position: absolute; visibility: hidden; white-space: pre; left: -9999px; top: 0; font-size: 100px; }
 .help-list { list-style: disc; padding-left: var(--s-5); display: flex; flex-direction: column; gap: var(--s-2); font-size: var(--fs-sm); }
@@ -2201,17 +2204,6 @@ html.oo-immersive .p-fleet > .panel-body { z-index: 50; }
 .s-limit-warnings { margin: var(--s-2) 0; padding-left: var(--s-4); }
 @media (max-width: 479px) { .grid3 { grid-template-columns: minmax(0, 1fr); } }
 
-/* #1629 B2: effect library controls. No runtime layer is created by this card. */
-.s-fx-actions { display: flex; flex-wrap: wrap; gap: var(--s-2); align-items: center; }
-.s-fx-item { margin-top: var(--s-3); padding-top: var(--s-3); border-top: 1px solid var(--border); }
-.s-fx-item h4 { margin: 0; }
-.s-fx-poster { display: block; max-width: min(240px, 100%); max-height: 160px; object-fit: contain; border-radius: var(--r-sm); }
-
-.s-fx-chat, .s-fx-params label:not(.check) { display: flex; align-items: center; flex-wrap: wrap; gap: var(--s-2); }
-.s-fx-chat { margin: var(--s-2) 0; }
-.s-fx-params { display: flex; flex-direction: column; gap: var(--s-2); margin: var(--s-2) 0; max-width: 100%; }
-.s-fx-target, .s-fx-params input:not([type=checkbox]), .s-fx-params select { min-height: 36px; min-width: 0; max-width: 100%; padding: 0 var(--s-2); border: 1px solid var(--border); border-radius: var(--r-sm); background: var(--bg); color: var(--text); }
-
 /* #1629: stock paint bands. Structural ancestors remain neutral; only bounded content owns level 1.
    The viewport effect root is a direct body sibling: behind 0 / stock content 1 (header 2) / front 20.
    Nested menus cannot cross a content stacking context: the unmounted trust guard suspends fronts for overlays. */
@@ -2222,38 +2214,14 @@ html.oo-immersive .p-fleet > .panel-body { z-index: 50; }
 /* Header menus must stay above the later scroller stacking context. */
 .panel-head { z-index: 2; }
 @media (min-width: 900px) { .chat-split > .pv-divider, .chat-split > .pv-panel { position: relative; z-index: 1; } }
-/* #1629: owner choices share the existing control font floor. */
-.s-fx-owner{margin-top:var(--s-4);padding-top:var(--s-3);border-top:1px solid var(--border)}
-.s-fx-owner-row{display:flex;align-items:end;flex-wrap:wrap;gap:var(--s-2);margin-top:var(--s-2)}
-.s-fx-owner-row>label{display:flex;flex-direction:column;gap:var(--s-1);min-width:0;flex:1}
-
-/* #2044: the effect frame's document declares no colour scheme (light). An iframe whose own colour scheme differs
-   from its document's gets an opaque backdrop, so under the dark theme the frame hid the whole chat: keep them equal. */
-.agend-effect-frame { color-scheme: normal !important; }
-
-/* #1629: host-created static poster IMG; geometry and visibility belong to the trusted CSSOM binding. */
-.agend-effect-poster { object-fit: cover !important; object-position: center !important; user-select: none; }
-
 /* #1629: full-app bounded stock surfaces. Panel roots stay neutral; effects never raise the whole app. */
 .p-fleet > .seg, .p-settings > .seg,
 .p-fleet > .panel-body, .p-needs > .panel-body, .p-settings > .panel-body,
 .p-log > .panel-body, .p-details > .panel-body, .p-view > .panel-body,
-.p-log > .log-bar, .p-view > .v-term, .p-view > .v-id { position: relative; z-index: 1; }
+.p-log > .log-bar, .p-view > .v-term, .p-view > .v-id, .p-view > .v-watching { position: relative; z-index: 1; }
 /* Keep the existing Apply bar's sticky behavior, in its own bounded stock band. */
 .p-settings > .s-pending { z-index: 1; }
 
-/* #1629: host-owned local Trial panel. Only its canvas frame lives inside the paint-contained stage. */
-.effect-trial-head, .effect-trial-controls, .effect-trial-note { position: relative; z-index: 1; background: var(--bg); padding: var(--s-3); margin: 0; }
-.effect-trial-head { display: flex; align-items: center; gap: var(--s-2); border-bottom: 1px solid var(--border); }
-.effect-trial-head > span { flex: 1; min-width: 0; overflow-wrap: anywhere; }
-.effect-trial-body { flex: 1; min-height: 0; display: flex; padding: var(--s-3); }
-.effect-trial-stage { position: relative; z-index: 0; flex: 1; min-width: 0; min-height: 0; contain: paint; overflow: clip; padding: 0; border: 0; outline: none; box-shadow: none; }
-
-/* #2115: diagnostics remain inside the stock protected panel header, never in an effect plane. */
-.panel-head:has(> .chat-fx-notice) { flex-wrap: wrap; }
-.chat-fx-notice { order: 10; flex: 1 1 100%; min-width: 0; max-width: 100%; font-size: var(--fs-sm); overflow-wrap: anywhere; }
-.chat-fx-notice > span { display: block; }
-
 /* ── #2293: global search — the sidebar row's shortcut, the header's button (collapsed sidebar, phone), the dialog ── */
 /* #2478: a touch screen has no Ctrl/⌘ K — the shortcut's hint is not shown there (the row is). */
 @media (pointer: coarse) { .side-search .kbd-hint { display: none; } }

package/dist/ui/shared/app.js

@@ -13,7 +13,7 @@ import { installSwipe } from "./app-swipe.js";
 import { installTextUndo } from "./text-undo.js";
 import { startRouter, navStore, navigate } from "./app-nav.js";
 import { createStream } from "./app-stream.js";
-import { appStore, applyStatus, applyActivity, guestPage } from "./app-store.js";
+import { appStore, applyStatus, applyActivity, guestPage, guestTrusted } from "./app-store.js";
 import { chatPath } from "./app-route.js";
 import { startNeedsNotifier } from "./app-needs.js";
 import { toast } from "./ui-toast.js";
@@ -101,7 +101,8 @@ if (mode === "full") {
     import("/ui/js/backend-signin.js").then((m) => m.installSignIn(), () => {});
   }
   // #1665: this device's first upload of its own choices (once), then another device's changes at each status frame.
-  // A guest's page only reads them (prefsWritable is false there).
+  // A guest's page (#2855) uploads and saves only its own keys (prefsWritable(key)); another device's changes reach it at
+  // its next load (its status frames carry no prefs_rev).
   bootPrefs();
   // #1629: agents' themes, read when the status frame's themes_rev moves (a guest's frames never carry it).
   if (!guest) startThemes();
@@ -127,8 +128,8 @@ if (!guest) installOwnerCss();
 }
 
 document.addEventListener("keydown", handleKey);
-// #2293: Ctrl+K / ⌘K (and Ctrl+F in a chat) — an admin's full app only; the server refuses a guest's search anyway.
-if (mode === "full" && !guest) document.addEventListener("keydown", handleSearchKey);
+// #2293: Ctrl+K / ⌘K (and Ctrl+F in a chat) — an admin's full app, and a trusted guest's (#2855: what it can see).
+if (mode === "full" && (!guest || guestTrusted())) document.addEventListener("keydown", handleSearchKey);
 // #2342: Ctrl/⌘+Z and Ctrl+Shift+Z / Ctrl+Y / ⌘⇧Z in every text field, one history per field (the browser's is one
 // for the whole page, and any script write wipes it).
 installTextUndo({ mac: isMacLike() });

package/dist/ui/shared/instance-nav.js

@@ -504,18 +504,18 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
   const known = new Set(byName.keys());
   const favs = nav.favorites.filter((n) => known.has(n));
   const favSet = new Set(favs);
-  const canStar = !viewOnly && prefsWritable();
-  // #1920: a guest's list is to pick from — no reordering and no filters (one this device kept would hide rows with no
-  // way to clear it).
+  const canStar = !viewOnly && prefsWritable("nav.favorites");
+  // #1920: a guest's list is not reordered (the order is the host's). #2855: it stars, sorts and filters as its own
+  // preferences (kept on the host under its account), with reply times that only count replies its channel showed.
   const guest = guestPage();
-  // #2179: when each row last replied (a guest's list has no times). "recent" mode (never a guest's): the favorites keep
+  // #2179: when each row last replied (a guest's: replies its channel showed). "recent" mode: the favorites keep
   // their order or are sorted too, and every other row is one list, the last reply first. "custom" (the default) is the
   // person's own order — a reply never moves a row.
   const now = Date.now();
   // The anonymous View reader (viewOnly) has no reply times (/api/profiles carries none) and no way to change the sort:
   // its list is always Custom, whatever this browser kept from a signed-in page (#2181 review).
-  const ageOf = (n) => (guest || viewOnly ? null : replyAge(byName.get(n), now));
-  const recent = !guest && !viewOnly && nav.sort.mode === "recent";
+  const ageOf = (n) => (viewOnly ? null : replyAge(byName.get(n), now));
+  const recent = !viewOnly && nav.sort.mode === "recent";
   const favsSorted = recent && nav.sort.favs === "recent";
   let shownGroups, shownInsts;
   if (recent) {
@@ -528,7 +528,7 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
     shownInsts = new Map([...instByGroup].map(([g, names]) => [g, names.filter((n) => !favSet.has(n))]));
     if (favs.length) shownInsts.set(FAV_GROUP, favs);
   }
-  const f = guest ? { q: "", status: [], cli: [] } : nav.filter;
+  const f = nav.filter;
   const shown = filterSidebar(shownGroups, shownInsts, byName, f.q, backendLabel, { status: f.status, cli: f.cli, statusOf: facetOf });
   // #1936: while a filter is on, the instance you have open stays on top, pinned and marked "Current", whether or not
   // it matches; a match is not repeated below. "N / M" still counts the filter's matches (the pinned row counts only
@@ -626,7 +626,7 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
   return html`<div class=${`view-roster inst-nav${editing && canStar ? " fav-editing" : ""}`}>
     <div data-trust="navigation" class="side-section" id="instanceList" ref=${list}>
     <div class="inst-head"><h2 class="side-label">${tn("instancesLabel")}</h2>
-      ${canStar && items.length && !guest ? html`<${SortMenu} sort=${nav.sort} />`
+      ${canStar && items.length ? html`<${SortMenu} sort=${nav.sort} />`
         : recent ? html`<span class="chip-btn nav-sort-btn on nav-sort-static"><${Icon} name="sort" size=${12} /><span>${tn("sortRecent")}</span></span>` : null}
       ${canStar && items.length ? html`<button type="button" class="chip-btn fav-edit" aria-pressed=${editing ? "true" : "false"} onClick=${() => setEditing(!editing)}>
         ${editing ? tn("favDone") : html`<${Icon} name="star" size=${12} />${tn("favEdit")}`}</button>` : null}</div>
@@ -653,7 +653,7 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
     })}
     ${loaded && shown.active && !shown.groups.length ? html`<p class="side-empty">${tn("filterNone")}</p>` : null}
     </div>
-    ${guest ? null : html`<div class="v-filter">
+    ${html`<div class="v-filter">
       <label class="v-filter-box"><${Icon} name="search" size=${14} /><span class="sr-only">${tn("filterPh")}</span>
         <input ref=${filterRef} id="filterInput" type="text" autocomplete="off" spellcheck=${false} placeholder=${tn("filterPh")} value=${f.q}
           onInput=${(e) => setNavFilter({ q: e.target.value })}

package/dist/ui/shared/instance-switch.js

@@ -1,8 +1,10 @@
 // #1523 N2 (§3.2): the instance view switch — Chat | View | Details of ONE instance. Each segment is a link to that
 // view's URL for the same instance, so switching keeps the instance (and the sidebar, which is never remounted).
 // Desktop: links in the header; a phone: the same four as top tabs under it (app.css). The anonymous View reader
-// gets none (Chat and Details need a session): the caller does not render it there.
+// gets none (Chat and Details need a session): the caller does not render it there. #2855: a trusted guest's is Chat |
+// View | Search (search opens on this agent); a chat-level guest gets none.
 import { html } from "./app-html.js";
+import { openSearch } from "./app-shell.js";
 import { t } from "./app-i18n.js";
 import { chatPath, detailsPath, logPath, viewPath } from "./app-route.js";
 
@@ -10,9 +12,13 @@ import { chatPath, detailsPath, logPath, viewPath } from "./app-route.js";
  * current: "chat" | "view" | "log" | "details". #1218: Log sits between View and Details. `data-label`: each tab is as
  * wide as its label in the current tab's weight (app.css), so the bar keeps its size whichever tab is current.
  */
-export function InstanceSwitch({ name, current }) {
+export function InstanceSwitch({ name, current, guest = false }) {
   const seg = (key, href, label) => html`<a key=${key} class=${`seg-item${current === key ? " active" : ""}`} href=${href}
     aria-current=${current === key ? "page" : undefined} data-label=${label}>${label}</a>`;
+  if (guest) return html`<nav class="inst-switch seg" aria-label=${t("app.instanceViews", name)}>
+    ${seg("chat", chatPath(name), t("app.chat"))}${seg("view", viewPath(name), t("app.view"))}<button key="search" type="button" class="seg-item"
+      data-label=${t("app.search")} onClick=${() => openSearch({ instance: name })}>${t("app.search")}</button>
+  </nav>`;
   return html`<nav class="inst-switch seg" aria-label=${t("app.instanceViews", name)}>
     ${seg("chat", chatPath(name), t("app.chat"))}${seg("view", viewPath(name), t("app.view"))}${seg("log", logPath(name), t("app.log"))}${seg("details", detailsPath(name), t("app.details"))}
   </nav>`;