@songsid/agend 2.3.3-beta.4 → 2.3.3-beta.6

package/dist/ui/settings-mods.js

@@ -4,7 +4,6 @@
 // parts the person ticks are applied, all or nothing. Custom CSS from a file is never ticked by default. Installed
 // mods can be downloaded again or uninstalled (what they applied stays: Reset and the CSS controls work on it).
 // Export builds a file from what is in force now.
-import { canvasWorkerEnabled, useCanvasWorker } from "/assets/feature-flags.js";
 import { html, useEffect, useLayoutEffect, useRef, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
 import { appStore, useStore } from "/assets/app-store.js";
@@ -48,7 +47,6 @@ export function defaultChoice(plan) {
   for (const it of plan.items) {
     if (it.part === "theme" || it.part === "identity" || it.part === "ambient") c[it.part] = true;
     else if (it.part === "widget") c.widgets[it.slot] = true;
-    else if (it.part === "effect" && canvasWorkerEnabled()) c.effects = true;
     // ownerCss stays false: "read it before turning it on" (r4 §4).
   }
   return c;
@@ -62,7 +60,7 @@ function Swatch({ color }) {
   return html`<span class="s-mod-sw"><span class="s-mod-sw-chip" ref=${ref} aria-hidden="true"></span><code>${color}</code></span>`;
 }
 /** Every field of the checked theme, as it will be applied — nothing left unseen (#1897 review). */
-export function ThemeDetail({ theme, pictures, effects }) {
+export function ThemeDetail({ theme, pictures }) {
   const th = theme || {};
   const row = (k, v) => html`<div class="s-mod-kv"><span class="k">${k}</span><span class="v">${v}</span></div>`;
   const pal = (mode) => {
@@ -83,7 +81,6 @@ export function ThemeDetail({ theme, pictures, effects }) {
     ${th.background ? pic(th.background.image, tn("modBackground")) : null}
     ${th.background ? row(tn("modBackgroundFit"), `${th.background.fit} · ${Math.round(th.background.opacity * 100)}%`) : null}
     ${th.avatar ? pic(th.avatar, tn("modAvatar")) : null}
-    ${(canvasWorkerEnabled() ? effects || [] : []).map((e, i) => html`<div key=${i}>${row(tn("modPlacesEffect"), html`<span><code>${e.effect}</code>${e.id ? html` <span class="muted">${e.id.slice(0, 8)}</span>` : null}${Object.keys(e.params || {}).length ? html` · <code>${JSON.stringify(e.params)}</code>` : null}</span>`)}</div>`)}
     <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify(th, null, 2)}</pre></details>
   </div>`;
 }
@@ -92,7 +89,7 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
   const tick = (label, on, set) => html`<label class="check s-mod-tick"><input type="checkbox" checked=${on} onChange=${(e) => set(e.target.checked)} /><span>${label}</span></label>`;
   if (it.part === "theme") {
     return html`<li class="s-mod-item">${tick(tn("modPartTheme"), choice.theme, (v) => setChoice({ ...choice, theme: v }))}
-      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} effects=${it.effects} /></div></li>`;
+      <div class="s-mod-detail"><${ThemeDetail} theme=${it.theme} pictures=${it.pictures} /></div></li>`;
   }
   if (it.part === "identity") {
     return html`<li class="s-mod-item">${tick(tn("modPartIdentity"), choice.identity, (v) => setChoice({ ...choice, identity: v }))}
@@ -116,11 +113,8 @@ function PlanItem({ it, choice, setChoice, binds, fleet }) {
       <div class="s-mod-detail">${one("loop")}${one("click")}
         <details class="s-mod-raw"><summary>${tn("modAllFields")}</summary><pre class="s-mod-css-text">${JSON.stringify({ loop: it.loop, click: it.click }, null, 2)}</pre></details></div></li>`;
   }
-  if (it.part === "effect") {
-    if (!canvasWorkerEnabled()) return null;
-    return html`<li class="s-mod-item">${tick(tn("modPartEffect", it.title), choice.effects, (v) => setChoice({ ...choice, effects: v }))}
-      <div class="s-mod-detail"><span>${kib(it.bytes)} · ${tn("modRegions", it.regions.join(", "))}</span>${it.wants.length ? html`<span>${tn("modWants", it.wants.join(", "))}</span>` : null}</div></li>`;
-  }
+  // #2799: a Canvas Worker effect entry (the server refuses the file that carries one) is not offered.
+  if (it.part === "effect") return null;
   if (it.part === "ownerCss") {
     return html`<li class="s-mod-item s-mod-css">${tick(tn("modPartCss"), choice.ownerCss, (v) => setChoice({ ...choice, ownerCss: v }))}
       <p class="s-mod-warn">${tn("modCssWarn")}</p>
@@ -141,7 +135,7 @@ function Plan({ staged, onDone }) {
   const names = (app.instances || []).map((i) => i.name);
   const install = async () => {
     setBusy(true); setError("");
-    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: canvasWorkerEnabled() && choice.effects }, ...(toInstance ? { target } : {}) });
+    const r = await postJson("/ui/mods/commit", { stage: staged.stage, plan_hash: staged.plan_hash, include: { ...choice, effects: false }, ...(toInstance ? { target } : {}) });
     setBusy(false);
     // The stage this plan shows is gone or no longer this plan (replaced on another device, expired): read again —
     // the page then shows whatever is staged now, with its own, fresh choices (keyed by stage).
@@ -209,7 +203,6 @@ function ExportForm() {
 }
 
 export function ModsCard() {
-  useCanvasWorker();
   const [state, setState] = useState(null);
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState("");

package/dist/ui/settings-registry.js

@@ -28,7 +28,6 @@ const ROWS = [
   ["look.widget", "look", ".s-widget", "settings.widgetTitle", "widget.sidebar", ["sidebar widget", "widget", "json"], ["側邊欄小工具", "小工具"]],
   ["look.css", "look", ".s-owner-css", "settings.cssTitle", null, ["custom css", "stylesheet", "style", "css"], ["自訂 CSS", "樣式表", "樣式"]],
   ["look.mods", "look", ".s-mods", "settings.modsTitle", null, ["mod", "mods", "import", "add-on", "agendmod"], ["mod", "匯入", "擴充"]],
-  ["look.effects", "look", ".s-effects", null, null, ["effects", "canvas", "ambient", "petals", "click stars"], ["特效", "效果", "花瓣", "氛圍"], L("Effects", "效果")],
   ["look.restore", "look", ".s-restore", "settings.restoreTitle", null, ["restore defaults", "reset", "default"], ["還原預設值", "重設", "預設"]],
   // Fleet · Agents
   ["agents.new", "agents", "#newAgentBtn", "settings.newAgent", null, ["new agent", "create", "add agent", "instance"], ["新增 agent", "建立", "新 agent"]],

package/dist/ui/settings-strings.js

@@ -393,16 +393,14 @@ register("settings", {
     modPartWidget_chat_header: "Chat header widget",
     modPartWidget_details: "Details page widget",
     modPartWidget_sidebar: "Your sidebar widget",
-    modPartEffect: "Effect: {0}",
     modPartCss: "Custom CSS (on your screens only)",
     modCssWarn: "Custom CSS from this file — read it before turning it on.",
     modCssAssets: "{0} files for it ({1})",
     modAccent: "Accent", modFont: "Font", modPictures: "{0} pictures ({1})", modPlaces: "places {0} effects",
     modColorsLight: "Light colours", modColorsDark: "Dark colours", modBubble: "Bubbles", modWorkingLabel: "Working label",
     modBackground: "Background picture", modBackgroundFit: "Background fit and opacity", modAvatar: "Picture (face)",
-    modPlacesEffect: "Places effect", modAllFields: "Every field, as it will be applied",
+    modAllFields: "Every field, as it will be applied",
     modStageGone: "That import was replaced or ran out of time. Showing what is staged now.",
-    modRegions: "draws on: {0}", modWants: "hears: {0}",
     modTarget: "Apply to",
     modTargetPick: "Choose an agent…",
     modTargetNeeded: "Choose the agent this look goes to.",
@@ -541,6 +539,8 @@ register("settings", {
     grantsChoose: "Choose", grantsChosen: "Chosen", grantsMaySee: "{0} may see:", grantsClassicRooms: "ClassicBot rooms", grantsWroteHere: "wrote here", grantsWroteTo: "Wrote to: {0}",
     grantsLastSeen: "last seen {0}", grantsRecent: "Recent changes", grantsRecentNone: "No change to anyone's access yet.", grantsAuditDirect: "applied at once", grantsAuditConfirmed: "confirmed in General", grantsAuditEnded: "{0} session(s) ended", grantsAuditCodeSent: "sign-in code sent", grantsAuditCodeNot: "sign-in code not sent ({0})", grantsAuditDmFailed: "the DM did not go through", grantsAuditWait: "asked again within a minute", grantsAuditAdminLimit: "the admin's limit of codes was reached",
     grantsEditAgents: "Edit agents", grantsRemove: "Remove access", grantsUndoRemove: "Keep access",
+    grantsLevel: "What {0} may do", grantsLevelChat: "Chat", grantsLevelTrusted: "Trusted",
+    grantsLevelTrustedHint: "Trusted adds watching these agents' screens (read-only) and searching their chats. The screen shows everything the agent's terminal does: other people's messages to it, commands and their output, which can include secrets. Chat and search stay limited to what this person may see.", grantsAuditLevel: "→ {0}",
     grantsWillBeRemoved: "Access ends when you save.", grantsNew: "New — granted when you save", grantsNoAgents: "Tick at least one agent, or remove this person.",
     grantsSend: "Send sign-in code", grantsSendAgain: "Send again in {0}", grantsSendSaveFirst: "Save first: a code goes only to saved access.",
     grantsSent: "Code sent {0} · expires {1}", grantsSentPublic: "It works on the open public link too.", grantsSending: "Sending…",
@@ -1047,16 +1047,14 @@ register("settings", {
     modPartWidget_chat_header: "聊天標頭小工具",
     modPartWidget_details: "詳細資料頁小工具",
     modPartWidget_sidebar: "你的側邊欄小工具",
-    modPartEffect: "效果：{0}",
     modPartCss: "自訂 CSS（只套用在你的畫面）",
     modCssWarn: "這是檔案裡的自訂 CSS——開啟前請先讀過。",
     modCssAssets: "附帶 {0} 個檔案（{1}）",
     modAccent: "強調色", modFont: "字型", modPictures: "{0} 張圖片（{1}）", modPlaces: "放置 {0} 個效果",
     modColorsLight: "淺色模式顏色", modColorsDark: "深色模式顏色", modBubble: "對話泡泡", modWorkingLabel: "工作中文字",
     modBackground: "背景圖片", modBackgroundFit: "背景填滿方式與不透明度", modAvatar: "圖片（頭像）",
-    modPlacesEffect: "放置效果", modAllFields: "所有欄位（套用時的樣子）",
+    modAllFields: "所有欄位（套用時的樣子）",
     modStageGone: "那次匯入已被取代或已逾時。以下顯示目前暫存的內容。",
-    modRegions: "繪製於：{0}", modWants: "接收：{0}",
     modTarget: "套用到",
     modTargetPick: "選擇一個 agent…",
     modTargetNeeded: "請選擇這套外觀要套用到哪個 agent。",
@@ -1194,6 +1192,8 @@ register("settings", {
     grantsChoose: "選擇", grantsChosen: "已選擇", grantsMaySee: "{0} 可以看到：", grantsClassicRooms: "ClassicBot 聊天室", grantsWroteHere: "傳過訊息", grantsWroteTo: "傳過訊息給：{0}",
     grantsLastSeen: "最後出現 {0}", grantsRecent: "最近的變更", grantsRecentNone: "還沒有人的存取權變更過。", grantsAuditDirect: "立即生效", grantsAuditConfirmed: "在 General 確認後生效", grantsAuditEnded: "結束了 {0} 個登入", grantsAuditCodeSent: "已寄出登入碼", grantsAuditCodeNot: "登入碼未寄出（{0}）", grantsAuditDmFailed: "私訊沒有送達", grantsAuditWait: "一分鐘內重複要求", grantsAuditAdminLimit: "已達管理員的登入碼上限",
     grantsEditAgents: "編輯 agent", grantsRemove: "移除存取權", grantsUndoRemove: "保留存取權",
+    grantsLevel: "{0} 可以做什麼", grantsLevelChat: "聊天", grantsLevelTrusted: "信任",
+    grantsLevelTrustedHint: "信任多了：觀看這些 agent 的畫面（唯讀），以及搜尋它們的聊天。畫面會顯示 agent 終端上的一切：別人傳給它的訊息、指令和它們的輸出，其中可能有機密。聊天和搜尋仍只限這個人看得到的內容。", grantsAuditLevel: "→ {0}",
     grantsWillBeRemoved: "儲存後存取權就會結束。", grantsNew: "新增 —— 儲存後授權", grantsNoAgents: "至少勾選一個 agent，或移除這個人。",
     grantsSend: "傳送登入碼", grantsSendAgain: "{0} 後可再傳", grantsSendSaveFirst: "請先儲存：登入碼只會傳給已儲存的授權。",
     grantsSent: "{0} 已傳送 · {1} 到期", grantsSentPublic: "也可以用在目前開啟的公開連結上。", grantsSending: "傳送中…",

package/dist/ui/shared/app-i18n.js

@@ -89,7 +89,13 @@ register("app", {
     pendingWeb: "Confirmed by your account (this browser is web-verified). General is told.",
     pending_applied: "Confirmed and applied", pending_rejected: "Not applied", pending_expired: "Expired — nothing was changed",
     pending_stale: "Not applied — settings changed meanwhile", pending_failed: "Confirmed, but applying it failed",
-    pendingChat: "A fleet admin confirms this in chat (General topic).", pendingHost: "Confirm it on the host: {0}", pendingLeft: "{0} left", withdraw: "Withdraw",
+    pendingLeft: "{0} left", withdraw: "Withdraw",
+    // #2868: where to confirm it, said plainly; the host's command folded away unless it is the only way.
+    pendingPosting: "Sending the confirm card to General…", pendingChatWhere: "To apply it, press Confirm on the card in General on {0}.",
+    pendingHostOnly: "No General can take the confirm card. Confirm it on the host: {0}", pendingAdvanced: "Advanced: confirm on the host",
+    pendingSelf: "This browser is verified, so you can also apply it here.", pendingApplyNow: "Apply now",
+    pendingApplyRefused: "This browser can't apply it here now — confirm it in General.",
+    pendingAuthorize: "Authorize this browser to apply changes like this here next time, without General.",
     opWriting: "Applying settings… {0}/{1}", opWaiting: "Settings: waiting for confirmation in chat", opApplying: "Applying settings…",
     opDone: "Settings applied", opRestart: "Settings saved — AgEnD needs a restart to use them", opPartial: "Some settings were not applied",
     opFailed: "Settings were not applied", openSettings: "Open Settings",
@@ -131,7 +137,12 @@ register("app", {
     pendingWeb: "由你的帳號確認（這個瀏覽器已通過網頁驗證），也會通知 General。",
     pending_applied: "已確認並套用", pending_rejected: "未套用", pending_expired: "已逾時——沒有任何變更",
     pending_stale: "未套用——設定在這期間已變動", pending_failed: "已確認，但套用失敗",
-    pendingChat: "由 fleet 管理員在聊天（General topic）中確認。", pendingHost: "請在主機上確認：{0}", pendingLeft: "剩 {0}", withdraw: "撤回",
+    pendingLeft: "剩 {0}", withdraw: "撤回",
+    pendingPosting: "正在把確認卡送到 General…", pendingChatWhere: "要套用，請到 {0} 的 General，在確認卡上按「確認」。",
+    pendingHostOnly: "沒有可以接收確認卡的 General。請在主機上確認：{0}", pendingAdvanced: "進階：在主機上確認",
+    pendingSelf: "這個瀏覽器已通過驗證，也可以直接在這裡套用。", pendingApplyNow: "直接套用",
+    pendingApplyRefused: "這個瀏覽器現在無法直接套用，請到 General 確認。",
+    pendingAuthorize: "授權這個瀏覽器，之後這類變更可以直接套用，不必到 General。",
     opWriting: "正在套用設定… {0}/{1}", opWaiting: "設定：等待在聊天中確認", opApplying: "正在套用設定…",
     opDone: "設定已套用", opRestart: "設定已儲存——需要重新啟動 AgEnD 才會生效", opPartial: "部分設定沒有套用",
     opFailed: "設定沒有套用", openSettings: "開啟設定",

package/dist/ui/shared/app-prefs.js

@@ -91,15 +91,6 @@ let holding = 0;
 const held = new Map();        // key → value chosen in Settings, shown here, not saved yet
 const heldFrom = new Map();    // key → its cached form before it was held (a choice back to it is no change)
 const heldListeners = new Set();
-// #2193: whether the signed-in person has a personal effect slot chosen (their fx.* keys: in the page's data-prefs and
-// in every host read, never in this host cache). The effects runtime is loaded only when there is something to play.
-const ownerEffectsIn = (values) => !!values && OWNER_EFFECT_PREF_KEYS.some((k) => own(values, k) && values[k] != null && values[k] !== "");
-let ownerFx = initial ? ownerEffectsIn(initial.values) : false;
-const ownerFxListeners = new Set();
-/** Whether the person has any personal effect (fx.page/header/sidebar/box/cursor) chosen, as this page last read. */
-export function ownerEffectsChosen() { return ownerFx; }
-/** Called when that changes. Returns the unsubscribe. */
-export function onOwnerEffectsChanged(fn) { ownerFxListeners.add(fn); return () => ownerFxListeners.delete(fn); }
 
 // The host's values into the cache, now — before the sidebar, the tour or the first-run card read their keys. A key
 // the host does not have: the default, on a device in step with the host; this device's own (to upload) otherwise.
@@ -111,9 +102,20 @@ if (host) {
   }
 }
 
-/** This page may change the host's preferences: the signed-in app, not over the public link, not a guest's (#1920). */
-export function prefsWritable() {
-  return !!initial && !guestPage() && !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
+/**
+ * #2855: the preferences a guest keeps as its own, on the host under its account (the same list as web-prefs.ts
+ * GUEST_OWN_PREF_KEYS); the rest of a guest's page follows the host's look and stays on this browser.
+ */
+export const GUEST_OWN_PREF_KEYS = Object.freeze(["theme", "lang", "nav.favorites", "nav.sort", "nav.filter"]);
+const GUEST_OWN = new Set(GUEST_OWN_PREF_KEYS);
+/**
+ * This page may change a preference on the host: the signed-in app, not over the public link (#1920). A guest's page
+ * (#2855): only its own keys — over the public link too, since only its own bucket is written; no key named: none.
+ */
+export function prefsWritable(key) {
+  if (!initial) return false;
+  if (guestPage()) return key !== undefined && GUEST_OWN.has(key);
+  return !(typeof document !== "undefined" && document.body && document.body.dataset.publicLink === "1");
 }
 /**
  * The value in force for a key, in memory — never only in this browser's storage (a full storage must not bring back
@@ -140,8 +142,6 @@ function take(body) {
   if (!isView(body) || (rev !== null && body.rev < rev)) return false;
   rev = body.rev;
   host = hostValues(body.values);
-  const fx = ownerEffectsIn(body.values);
-  if (fx !== ownerFx) { ownerFx = fx; for (const fn of [...ownerFxListeners]) { try { fn(fx); } catch { /* the rest still hear */ } } }
   return true;
 }
 
@@ -153,7 +153,7 @@ export function savePref(key, value) {
   if (!hostKey(key)) return;
   if (holding && HELD_KEYS.has(key)) { hold(key, value); return; }
   cache(key, value);
-  if (!prefsWritable()) return;
+  if (!prefsWritable(key)) return;
   pending.set(key, value);
   mine.set(key, value);
   clearTimeout(flushTimer);
@@ -328,9 +328,9 @@ function apply(changed) {
  * refused session or an unreadable store leaves the device unmarked, so the next load tries again.
  */
 export async function migratePrefs() {
-  if (!prefsWritable() || inStep()) return false;
+  if (!initial || inStep() || !HOST_KEYS.some((key) => prefsWritable(key))) return false;
   for (const key of HOST_KEYS) {
-    if (own(host, key)) continue;
+    if (own(host, key) || !prefsWritable(key)) continue;
     const local = SYNCED[key].fromLocal(readLocal(SYNCED[key].ls));
     if (local === undefined) continue;
     let r;

package/dist/ui/shared/app-shell.js

@@ -7,7 +7,7 @@ import { Toasts } from "./ui-toast.js";
 import { ConfirmHost, confirmDialog } from "./ui-confirm.js";
 import { ColorDialogHost } from "./identity-color.js";
 import { t, lang, setLang, onLang } from "./app-i18n.js";
-import { appStore, createStore, guestBadge, guestPage, useStore } from "./app-store.js";
+import { appStore, createStore, guestBadge, guestPage, guestTrusted, useStore } from "./app-store.js";
 import { navStore } from "./app-nav.js";
 import { toast } from "./ui-toast.js";
 import { chatPath, viewPath, settingsPath, routeKey, NEEDS_PATH, fleetEntryPath } from "./app-route.js";
@@ -17,6 +17,7 @@ import { applyPageTheme, pageNow, resolvedMode, themesStore } from "./app-themes
 import { ErrorState, Skeleton } from "./ui-states.js";
 import { InstanceNav, RosterNav, namesStore, setNamesPrimary } from "./instance-nav.js";
 import { usageRailStore } from "./header-tools.js";
+import { useWebAuthorization } from "./web-authorize.js";
 import { RightRail, sidePanelStore } from "./side-panel.js";
 import { OwnerCssKeepBar } from "./owner-css.js";
 import { AgentWidget, fleetBinds, sidebarWidget, sidebarWidgetStore } from "./agent-widget.js";
@@ -78,7 +79,8 @@ export const searchShortcut = () => (isMacLike() ? "⌘K" : "Ctrl K");
 export function searchOffered(admin) {
   const body = typeof document !== "undefined" ? document.body : null;
   const offLink = !!body && body.dataset.publicLink === "1" && body.dataset.searchLink === "0";
-  return !!admin && !guestPage() && !offLink;
+  // #2855: a trusted guest searches too (only what it can see: the server's rule).
+  return (guestPage() ? guestTrusted() : !!admin) && !offLink;
 }
 let searchModule = null;
 /** Open search; `preset.instance`: narrowed to that agent (Ctrl+F in its chat). */
@@ -107,6 +109,10 @@ export function handleSearchKey(e) {
   openSearch(key === "f" ? { instance: route.instance } : {});
 }
 
+/** The sidebar's Search row (Ctrl+K / ⌘K). */
+const searchRow = () => html`<button type="button" class="side-row side-search" onClick=${() => openSearch()} title=${t("app.searchTitle", searchShortcut())}
+  aria-keyshortcuts=${isMacLike() ? "Meta+K" : "Control+K"}><${Icon} name="search" /><span class="grow">${t("app.search")}</span><kbd class="kbd-hint" aria-hidden="true">${searchShortcut()}</kbd></button>`;
+
 function readCollapsed() { try { return localStorage.getItem("agend_sidebar") === "hidden"; } catch { return false; } }
 const narrow = () => typeof matchMedia === "function" && matchMedia("(max-width: 899px)").matches;
 
@@ -350,6 +356,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
         <a class="brand" href="/ui" onClick=${closeDrawer}>${t("app.brand")}</a>
         <button type="button" class="icon-btn side-collapse" onClick=${toggleSidebar} aria-label=${narrow() ? t("app.closeMenu") : t("app.collapse")} title=${narrow() ? t("app.closeMenu") : t("app.collapse")} aria-controls="sidebar"><${Icon} name="sidebar" /></button>
       </div>
+      ${searchOffered(false) ? html`<nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>${searchRow()}</nav>` : null}
       <${InstanceNav} route=${route} items=${app.instances} loaded=${app.ready !== false} exec=${app.exec} awaiting=${app.awaiting} onPick=${closeDrawer} />
       <div class="side-foot" data-trust="navigation">
         <${GuestChip} />
@@ -372,8 +379,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
     <nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>
       ${overview}
       ${navLink("needs", NEEDS_PATH, "inbox", t("app.needsNav"), needsCount)}
-      ${searchOffered(canCreate) ? html`<button type="button" class="side-row side-search" onClick=${() => openSearch()} title=${t("app.searchTitle", searchShortcut())}
-        aria-keyshortcuts=${isMacLike() ? "Meta+K" : "Control+K"}><${Icon} name="search" /><span class="grow">${t("app.search")}</span><kbd class="kbd-hint" aria-hidden="true">${searchShortcut()}</kbd></button>` : null}
+      ${searchOffered(canCreate) ? searchRow() : null}
       ${canCreate && onNewInstance ? html`<button type="button" class="side-row side-new" onClick=${onNewInstance}><${Icon} name="plus" /><span class="grow">${t("app.newAgent")}</span></button>` : null}
     </nav>
     ${shell.side ? html`<${shell.side.Component} />` : html`<${InstanceNav} route=${route} items=${app.instances} loaded=${app.ready !== false}
@@ -393,8 +399,7 @@ function GuestChip() {
   const { name, platform } = guestBadge();
   const where = PLATFORM_NAMES[platform] || platform;
   const label = name ? (where ? t("app.guestAsOn", name, where) : t("app.guestAs", name)) : t("app.guestChip");
-  // Inside .side-foot (a marked, stock-trusted element): no trust marker of its own — effect-stock-trust's closed inventory
-  // refuses any element it does not know, which would hide a guest's static effect posters (#2101 review).
+  // Inside .side-foot (a marked element): no trust marker of its own (#2101 review).
   return html`<p class="guest-chip" title=${t("app.guestHint")}><${Icon} name="user" size=${14} /><span class="grow">${label}</span></p>`;
 }
 
@@ -571,13 +576,46 @@ export function PendingChanges({ inline = false } = {}) {
       ${p.dismiss ? html`<button type="button" class="icon-btn" aria-label=${t("app.close")} title=${t("app.close")} onClick=${p.dismiss}><${Icon} name="close" size=${14} /></button>` : null}</div>
     ${p.label ? html`<div class="pending-label">${p.label}</div>` : null}
     ${Array.isArray(p.summary) && p.summary.length ? html`<ul class="pending-summary">${p.summary.map((line, i) => html`<li key=${i}>${line}</li>`)}</ul>` : null}
-    ${p.state === "pending" ? html`<p class="note">${p.confirmation && p.confirmation.kind === "host_cli" ? t("app.pendingHost", `agend settings confirm ${p.id}`) : t("app.pendingChat")}</p>` : null}
+    ${p.state === "pending" ? html`<${PendingHow} p=${p} />` : null}
     ${(p.state === "applying" || p.state === "applied") && p.confirmation && p.confirmation.kind === "web" ? html`<p class="note">${t("app.pendingWeb")}</p>` : null}
     ${p.state !== "pending" && p.state !== "applying" && p.state !== "applied" && p.outcome && p.outcome.message ? html`<p class="note">${p.outcome.message}</p>` : null}
     ${p.withdraw ? html`<div class="pending-actions"><button type="button" class="btn btn-sm" onClick=${p.withdraw}>${t("app.withdraw")}</button></div>` : null}
   </section>`)}</div>`;
 }
 
+/** #2868: where the confirm card was posted: "Discord", or "Discord (team-b)" for a connection with an id of its own. */
+function whereText(where) {
+  const names = (Array.isArray(where) ? where : []).map((w) => `${PLATFORM_NAMES[w.platform] || w.platform}${w.connection && w.connection !== w.platform ? ` (${w.connection})` : ""}`);
+  return names.length ? [...new Set(names)].join(" / ") : "Discord / Telegram";
+}
+/**
+ * #2868: how a pending change is confirmed, in the order a person can act on it. First where: the General card (naming
+ * the platform it was posted on), or the host's command when no General could take it. Then, when this browser could
+ * confirm it itself (the server's read says so: #2170's rule), "Apply now"; when it isn't verified but could be,
+ * "Authorize this browser" (the same DM card as the composer's). The host's command otherwise sits folded under
+ * "Advanced".
+ */
+function PendingHow({ p }) {
+  const a = useWebAuthorization();
+  const [refused, setRefused] = useState(false);
+  const c = p.confirmation || {}, cmd = `agend settings confirm ${p.id}`;
+  const lead = c.kind === "posting" ? t("app.pendingPosting") : c.kind === "host_cli" ? t("app.pendingHostOnly", cmd) : t("app.pendingChatWhere", whereText(c.where));
+  // A browser that isn't verified but could be: authorizing it makes this one (and later ones) "Apply now".
+  const route = c.kind !== "host_cli" && !p.applyNow && a.st;
+  const canAsk = route && a.st.state === "none" && (a.st.reason === "not_authorized" || a.st.reason === "authorization_expired");
+  const asking = route && a.st.state === "pending";
+  const apply = async () => { setRefused(false); const r = await p.applyNow(); if (!r || !r.ok) setRefused(true); };
+  return html`<p class="note">${lead}</p>
+    ${p.applyNow ? html`<div class="pending-self"><span class="note">${t("app.pendingSelf")}</span>
+      <button type="button" class="btn btn-sm btn-primary" onClick=${apply}>${t("app.pendingApplyNow")}</button></div>` : null}
+    ${refused && !p.applyNow ? html`<p class="note" role="status">${t("app.pendingApplyRefused")}</p>` : null}
+    ${canAsk ? html`<div class="pending-self"><span class="note">${t("app.pendingAuthorize")}</span>
+      <button type="button" class="btn btn-sm" onClick=${a.ask}>${t("webauth.authorize")}</button></div>` : null}
+    ${asking ? html`<p class="note">${t("webauth.waiting", mmss(a.left))}</p>` : null}
+    ${a.notice && (canAsk || asking) ? html`<p class="note" role="status">${a.notice}</p>` : null}
+    ${c.kind !== "host_cli" ? html`<details class="pending-host"><summary>${t("app.pendingAdvanced")}</summary><code>${cmd}</code></details>` : null}`;
+}
+
 /** Settings' Apply, followed from another panel: one line, and the way back to it (§5: progress shows in any panel). */
 function OperationLine({ route }) {
   const { settingsOp: op } = useStore(appStore);
@@ -781,7 +819,7 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
       document.removeEventListener("compositionstart", start, true); document.removeEventListener("compositionend", end, true);
     };
   }, []);
-  const guest = guestPage();             // #1920: a guest's page — no operations, usage, pending changes or owner CSS
+  const guest = guestPage();             // #1920: a guest's page — no operations, pending changes or owner CSS (#2855: usage, yes)
   const cls = ["shell", shell.collapsed ? "sb-collapsed" : "", shell.drawer ? "sb-open" : "", shell.keyboard ? "kb-open" : "", guest ? "guest" : ""].filter(Boolean).join(" ");
   return html`<div ref=${root} class=${cls}>
     <a data-trust="navigation" class="skip" href="#main">${t("app.skip")}</a>
@@ -795,7 +833,7 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
       ${viewOnly || guest || !shell.banner ? null : html`<${shell.banner} />`}
       <${Outlet} route=${nav.route} seq=${nav.seq} panels=${panels} />
     </main>
-    ${guest ? null : html`<${RightRail} route=${nav.route} />`}
+    <${RightRail} route=${nav.route} />
     <${BottomTabs} route=${nav.route} viewOnly=${viewOnly} />
     ${shell.dialog ? html`<${shell.dialog.Component} ...${shell.dialog.props} onClose=${closeDialog} />` : null}
     ${viewOnly || guest || (nav.route && nav.route.panel === "settings") ? null : html`<${PendingChanges} />`}

package/dist/ui/shared/app-store.js

@@ -24,7 +24,7 @@ export function createStore(initial) {
  *  (app-stream.js catchUp) — "catching" / "retrying" / "failed" / "ok"; `retryHydration` asks for it again.
  *  `connections`: how many chat connections the fleet has (#1519 P7: 0 is web-only — the first-run card); null until known. */
 export const appStore = createStore({ ready: false, instances: [], uptime: 0, exec: {}, awaiting: {}, connection: "connecting", needs: [], connections: null,
-  hydration: "none", retryHydration: null, canvasWorker: typeof document !== "undefined" && document.body?.dataset.canvasWorker === "1" });
+  hydration: "none", retryHydration: null });
 
 /**
  * #1920 phase 3: this page is a guest's — the server says so on <body> (data-tier="guest"). A guest sees only its own
@@ -34,6 +34,10 @@ export const appStore = createStore({ ready: false, instances: [], uptime: 0, ex
 export function guestPage() {
   return typeof document !== "undefined" && !!document.body && document.body.dataset.tier === "guest";
 }
+/** #2855: this guest's access is Trusted — its page offers View (read-only) and search (the server's, on <body>). */
+export function guestTrusted() {
+  return guestPage() && document.body.dataset.guestLevel === "trusted";
+}
 /** Who a guest's page is signed in as: its web name and its platform (the server's, on <body>). */
 export function guestBadge() {
   const d = typeof document !== "undefined" && document.body ? document.body.dataset : {};
@@ -49,7 +53,7 @@ export function applyStatus(d) {
     exec[i.name] = (i.execution_state !== undefined ? i.execution_state : i.state) ?? null;
     if (i.state === "awaiting_input") awaiting[i.name] = typeof i.interaction_summary === "string" ? i.interaction_summary : "";
   }
-  appStore.set({ canvasWorker: d.canvas_worker === true, ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
+  appStore.set({ ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
     startup: d.startup?.phase === "starting" ? d.startup : null,
     connections: typeof d.connections === "number" ? d.connections : null,
     // #1665: the host preferences' revision (app-prefs.js re-reads them when it moves).

package/dist/ui/shared/app.css

@@ -952,6 +952,8 @@ img.amb-p { object-fit: contain; }
 .s-guests .g-chips { display: flex; flex-wrap: wrap; gap: var(--s-1); margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
 .s-guests .g-chip { padding: 1px var(--s-2); border: 1px solid color-mix(in srgb, var(--text-3) 55%, transparent); border-radius: 0; font-size: var(--fs-sm); color: var(--text-2); white-space: nowrap; }
 .s-guests .g-edit { margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
+.s-guests .g-level { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
+.s-guests .g-level > .note:last-child { flex-basis: 100%; margin: 0; }
 .s-guests .guest-actions { display: flex; flex-wrap: wrap; gap: var(--s-1); margin: var(--s-2) 0 0 calc(28px + var(--s-2)); }
 .s-guests .g-error { color: var(--danger); margin-left: calc(28px + var(--s-2)); }
 .s-guests .g-search { width: 100%; max-width: 360px; margin: var(--s-1) 0 var(--s-2); }
@@ -1212,6 +1214,18 @@ body.side-resizing, body.side-resizing * { cursor: col-resize !important; user-s
 .v-filter-box input::placeholder { color: var(--text-3); }
 .v-filter-clear { width: 28px; height: 28px; }
 .v-filter .note { padding: var(--s-1) var(--s-1) 0; font-variant-numeric: tabular-nums; }
+/* A short viewport (a phone in landscape: about 300–480 px tall): the head, nav, filter and footer pinned around the
+   list left it no room, and what did not fit was drawn over the footer (user report 2026-10-30). There the sidebar
+   scrolls as one column: nothing shrinks, the list grows to its rows, the nav rows sit two to a row, and the filter
+   stays in view at the bottom while the list scrolls past. Portrait phones and desktops are taller than this. */
+@media (max-height: 500px) {
+  .sidebar { overflow-y: auto; overscroll-behavior: contain; }
+  .sidebar > *, .view-roster > * { flex-shrink: 0; }
+  .view-roster { flex: none; }
+  .view-roster > .side-section { flex: none; overflow: visible; }
+  .side-nav { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); }
+  .v-filter { position: sticky; bottom: 0; z-index: 2; background: var(--bg-sidebar); }
+}
 /* alpha.2 (N1): status and CLI chips under the filter box — each a group of checkboxes under its header (#1700). */
 /* #1776: the "N / M" count is on the headers' row, at its right end — not a row of its own. The headers (and an open
    group's list, the reset) wrap in their own box beside it, so a filter's summary or a narrow sidebar moves a header
@@ -1265,6 +1279,7 @@ body.side-resizing, body.side-resizing * { cursor: col-resize !important; user-s
 .v-pre .ansi[data-b] { font-weight: var(--fw-bold); }
 /* #1582: faint text (SGR 2) — a CLI's suggestion or placeholder, never input — stays faint here. */
 .v-pre .ansi[data-dim] { opacity: .5; }
+.v-watching { flex-shrink: 0; margin: 0; padding: var(--s-2) var(--s-4); font-size: var(--fs-sm); color: var(--text-2); background: var(--surface); border-bottom: 1px solid var(--border); }
 .v-term-note { position: absolute; left: var(--s-3); right: var(--s-3); top: var(--s-3); padding: var(--s-2) var(--s-3); border-radius: var(--r-sm); background: var(--warn-bg); border: 1px solid var(--warn-line); color: #f0f0f0; font-size: var(--fs-sm); }
 .v-probe { position: absolute; visibility: hidden; white-space: pre; left: -9999px; top: 0; font-size: 100px; }
 .help-list { list-style: disc; padding-left: var(--s-5); display: flex; flex-direction: column; gap: var(--s-2); font-size: var(--fs-sm); }
@@ -1513,6 +1528,9 @@ textarea.s-yaml { white-space: pre; overflow-x: auto; }
 .pending-label { color: var(--text-2); }
 .pending-summary { list-style: disc; padding-left: var(--s-5); color: var(--text-2); font-size: var(--fs-xs); }
 .pending-actions { display: flex; justify-content: flex-end; }
+.pending-self { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: var(--s-2); }
+.pending-host summary { cursor: pointer; color: var(--text-2); font-size: var(--fs-xs); }
+.pending-host code { display: block; margin-top: var(--s-1); font-size: var(--fs-xs); overflow-wrap: anywhere; user-select: all; }
 /* Settings' pending bar sits at the bottom of the page: toasts and request cards stand above it, never on its buttons. */
 .shell:has(.s-pending) .toasts { bottom: calc(var(--s-6) + 64px); }
 /* In a chat the composer owns the bottom (Stop reply, Send): toasts come in under the header instead (alpha.2 sweep). */
@@ -2201,17 +2219,6 @@ html.oo-immersive .p-fleet > .panel-body { z-index: 50; }
 .s-limit-warnings { margin: var(--s-2) 0; padding-left: var(--s-4); }
 @media (max-width: 479px) { .grid3 { grid-template-columns: minmax(0, 1fr); } }
 
-/* #1629 B2: effect library controls. No runtime layer is created by this card. */
-.s-fx-actions { display: flex; flex-wrap: wrap; gap: var(--s-2); align-items: center; }
-.s-fx-item { margin-top: var(--s-3); padding-top: var(--s-3); border-top: 1px solid var(--border); }
-.s-fx-item h4 { margin: 0; }
-.s-fx-poster { display: block; max-width: min(240px, 100%); max-height: 160px; object-fit: contain; border-radius: var(--r-sm); }
-
-.s-fx-chat, .s-fx-params label:not(.check) { display: flex; align-items: center; flex-wrap: wrap; gap: var(--s-2); }
-.s-fx-chat { margin: var(--s-2) 0; }
-.s-fx-params { display: flex; flex-direction: column; gap: var(--s-2); margin: var(--s-2) 0; max-width: 100%; }
-.s-fx-target, .s-fx-params input:not([type=checkbox]), .s-fx-params select { min-height: 36px; min-width: 0; max-width: 100%; padding: 0 var(--s-2); border: 1px solid var(--border); border-radius: var(--r-sm); background: var(--bg); color: var(--text); }
-
 /* #1629: stock paint bands. Structural ancestors remain neutral; only bounded content owns level 1.
    The viewport effect root is a direct body sibling: behind 0 / stock content 1 (header 2) / front 20.
    Nested menus cannot cross a content stacking context: the unmounted trust guard suspends fronts for overlays. */
@@ -2222,38 +2229,14 @@ html.oo-immersive .p-fleet > .panel-body { z-index: 50; }
 /* Header menus must stay above the later scroller stacking context. */
 .panel-head { z-index: 2; }
 @media (min-width: 900px) { .chat-split > .pv-divider, .chat-split > .pv-panel { position: relative; z-index: 1; } }
-/* #1629: owner choices share the existing control font floor. */
-.s-fx-owner{margin-top:var(--s-4);padding-top:var(--s-3);border-top:1px solid var(--border)}
-.s-fx-owner-row{display:flex;align-items:end;flex-wrap:wrap;gap:var(--s-2);margin-top:var(--s-2)}
-.s-fx-owner-row>label{display:flex;flex-direction:column;gap:var(--s-1);min-width:0;flex:1}
-
-/* #2044: the effect frame's document declares no colour scheme (light). An iframe whose own colour scheme differs
-   from its document's gets an opaque backdrop, so under the dark theme the frame hid the whole chat: keep them equal. */
-.agend-effect-frame { color-scheme: normal !important; }
-
-/* #1629: host-created static poster IMG; geometry and visibility belong to the trusted CSSOM binding. */
-.agend-effect-poster { object-fit: cover !important; object-position: center !important; user-select: none; }
-
 /* #1629: full-app bounded stock surfaces. Panel roots stay neutral; effects never raise the whole app. */
 .p-fleet > .seg, .p-settings > .seg,
 .p-fleet > .panel-body, .p-needs > .panel-body, .p-settings > .panel-body,
 .p-log > .panel-body, .p-details > .panel-body, .p-view > .panel-body,
-.p-log > .log-bar, .p-view > .v-term, .p-view > .v-id { position: relative; z-index: 1; }
+.p-log > .log-bar, .p-view > .v-term, .p-view > .v-id, .p-view > .v-watching { position: relative; z-index: 1; }
 /* Keep the existing Apply bar's sticky behavior, in its own bounded stock band. */
 .p-settings > .s-pending { z-index: 1; }
 
-/* #1629: host-owned local Trial panel. Only its canvas frame lives inside the paint-contained stage. */
-.effect-trial-head, .effect-trial-controls, .effect-trial-note { position: relative; z-index: 1; background: var(--bg); padding: var(--s-3); margin: 0; }
-.effect-trial-head { display: flex; align-items: center; gap: var(--s-2); border-bottom: 1px solid var(--border); }
-.effect-trial-head > span { flex: 1; min-width: 0; overflow-wrap: anywhere; }
-.effect-trial-body { flex: 1; min-height: 0; display: flex; padding: var(--s-3); }
-.effect-trial-stage { position: relative; z-index: 0; flex: 1; min-width: 0; min-height: 0; contain: paint; overflow: clip; padding: 0; border: 0; outline: none; box-shadow: none; }
-
-/* #2115: diagnostics remain inside the stock protected panel header, never in an effect plane. */
-.panel-head:has(> .chat-fx-notice) { flex-wrap: wrap; }
-.chat-fx-notice { order: 10; flex: 1 1 100%; min-width: 0; max-width: 100%; font-size: var(--fs-sm); overflow-wrap: anywhere; }
-.chat-fx-notice > span { display: block; }
-
 /* ── #2293: global search — the sidebar row's shortcut, the header's button (collapsed sidebar, phone), the dialog ── */
 /* #2478: a touch screen has no Ctrl/⌘ K — the shortcut's hint is not shown there (the row is). */
 @media (pointer: coarse) { .side-search .kbd-hint { display: none; } }

package/dist/ui/shared/app.js

@@ -13,7 +13,7 @@ import { installSwipe } from "./app-swipe.js";
 import { installTextUndo } from "./text-undo.js";
 import { startRouter, navStore, navigate } from "./app-nav.js";
 import { createStream } from "./app-stream.js";
-import { appStore, applyStatus, applyActivity, guestPage } from "./app-store.js";
+import { appStore, applyStatus, applyActivity, guestPage, guestTrusted } from "./app-store.js";
 import { chatPath } from "./app-route.js";
 import { startNeedsNotifier } from "./app-needs.js";
 import { toast } from "./ui-toast.js";
@@ -101,7 +101,8 @@ if (mode === "full") {
     import("/ui/js/backend-signin.js").then((m) => m.installSignIn(), () => {});
   }
   // #1665: this device's first upload of its own choices (once), then another device's changes at each status frame.
-  // A guest's page only reads them (prefsWritable is false there).
+  // A guest's page (#2855) uploads and saves only its own keys (prefsWritable(key)); another device's changes reach it at
+  // its next load (its status frames carry no prefs_rev).
   bootPrefs();
   // #1629: agents' themes, read when the status frame's themes_rev moves (a guest's frames never carry it).
   if (!guest) startThemes();
@@ -127,8 +128,8 @@ if (!guest) installOwnerCss();
 }
 
 document.addEventListener("keydown", handleKey);
-// #2293: Ctrl+K / ⌘K (and Ctrl+F in a chat) — an admin's full app only; the server refuses a guest's search anyway.
-if (mode === "full" && !guest) document.addEventListener("keydown", handleSearchKey);
+// #2293: Ctrl+K / ⌘K (and Ctrl+F in a chat) — an admin's full app, and a trusted guest's (#2855: what it can see).
+if (mode === "full" && (!guest || guestTrusted())) document.addEventListener("keydown", handleSearchKey);
 // #2342: Ctrl/⌘+Z and Ctrl+Shift+Z / Ctrl+Y / ⌘⇧Z in every text field, one history per field (the browser's is one
 // for the whole page, and any script write wipes it).
 installTextUndo({ mac: isMacLike() });

package/dist/ui/shared/instance-nav.js

@@ -504,18 +504,18 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
   const known = new Set(byName.keys());
   const favs = nav.favorites.filter((n) => known.has(n));
   const favSet = new Set(favs);
-  const canStar = !viewOnly && prefsWritable();
-  // #1920: a guest's list is to pick from — no reordering and no filters (one this device kept would hide rows with no
-  // way to clear it).
+  const canStar = !viewOnly && prefsWritable("nav.favorites");
+  // #1920: a guest's list is not reordered (the order is the host's). #2855: it stars, sorts and filters as its own
+  // preferences (kept on the host under its account), with reply times that only count replies its channel showed.
   const guest = guestPage();
-  // #2179: when each row last replied (a guest's list has no times). "recent" mode (never a guest's): the favorites keep
+  // #2179: when each row last replied (a guest's: replies its channel showed). "recent" mode: the favorites keep
   // their order or are sorted too, and every other row is one list, the last reply first. "custom" (the default) is the
   // person's own order — a reply never moves a row.
   const now = Date.now();
   // The anonymous View reader (viewOnly) has no reply times (/api/profiles carries none) and no way to change the sort:
   // its list is always Custom, whatever this browser kept from a signed-in page (#2181 review).
-  const ageOf = (n) => (guest || viewOnly ? null : replyAge(byName.get(n), now));
-  const recent = !guest && !viewOnly && nav.sort.mode === "recent";
+  const ageOf = (n) => (viewOnly ? null : replyAge(byName.get(n), now));
+  const recent = !viewOnly && nav.sort.mode === "recent";
   const favsSorted = recent && nav.sort.favs === "recent";
   let shownGroups, shownInsts;
   if (recent) {
@@ -528,7 +528,7 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
     shownInsts = new Map([...instByGroup].map(([g, names]) => [g, names.filter((n) => !favSet.has(n))]));
     if (favs.length) shownInsts.set(FAV_GROUP, favs);
   }
-  const f = guest ? { q: "", status: [], cli: [] } : nav.filter;
+  const f = nav.filter;
   const shown = filterSidebar(shownGroups, shownInsts, byName, f.q, backendLabel, { status: f.status, cli: f.cli, statusOf: facetOf });
   // #1936: while a filter is on, the instance you have open stays on top, pinned and marked "Current", whether or not
   // it matches; a match is not repeated below. "N / M" still counts the filter's matches (the pinned row counts only
@@ -626,7 +626,7 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
   return html`<div class=${`view-roster inst-nav${editing && canStar ? " fav-editing" : ""}`}>
     <div data-trust="navigation" class="side-section" id="instanceList" ref=${list}>
     <div class="inst-head"><h2 class="side-label">${tn("instancesLabel")}</h2>
-      ${canStar && items.length && !guest ? html`<${SortMenu} sort=${nav.sort} />`
+      ${canStar && items.length ? html`<${SortMenu} sort=${nav.sort} />`
         : recent ? html`<span class="chip-btn nav-sort-btn on nav-sort-static"><${Icon} name="sort" size=${12} /><span>${tn("sortRecent")}</span></span>` : null}
       ${canStar && items.length ? html`<button type="button" class="chip-btn fav-edit" aria-pressed=${editing ? "true" : "false"} onClick=${() => setEditing(!editing)}>
         ${editing ? tn("favDone") : html`<${Icon} name="star" size=${12} />${tn("favEdit")}`}</button>` : null}</div>
@@ -653,7 +653,7 @@ export function InstanceNav({ route, items, loaded = true, exec = {}, awaiting =
     })}
     ${loaded && shown.active && !shown.groups.length ? html`<p class="side-empty">${tn("filterNone")}</p>` : null}
     </div>
-    ${guest ? null : html`<div class="v-filter">
+    ${html`<div class="v-filter">
       <label class="v-filter-box"><${Icon} name="search" size=${14} /><span class="sr-only">${tn("filterPh")}</span>
         <input ref=${filterRef} id="filterInput" type="text" autocomplete="off" spellcheck=${false} placeholder=${tn("filterPh")} value=${f.q}
           onInput=${(e) => setNavFilter({ q: e.target.value })}