@songsid/agend 2.3.3-beta.4 → 2.3.3-beta.6

package/dist/fleet-manager.js

@@ -176,13 +176,6 @@ import { OfficeSkinStore } from "./web-office-skins.js";
 import { OfficeActs } from "./web-office-acts.js";
 import { OFFICE_PACK_TOOLS, OfficePackTools } from "./web-office-pack-tools.js";
 import { WebAppearance } from "./web-appearance.js";
-import { WebEffectLibrary } from "./web-effect-library.js";
-import { WebEffectTrials } from "./web-effect-trials.js";
-import { WebEffectService } from "./web-effect-service.js";
-import { WebEffectProfiles } from "./web-effect-profiles.js";
-import { WebEffectTools, WEB_EFFECT_TOOLS } from "./web-effect-tools.js";
-import { resolveEffectParams } from "./web-effect.js";
-import { cw1EffectChecker } from "./web-mod-bundle.js";
 import { effectiveAppearanceLimits } from "./web-appearance-limits.js";
 import { WEB_NAME_FALLBACK, safeWebName, validateWebName, webNameInUse, webPersonKey } from "./web-profile.js";
 import { ReplyButtonStore, parseReplyButtons, replyButtonClickText, replyButtonsFallbackText, REPLY_BUTTON_PREFIX } from "./reply-buttons.js";
@@ -195,7 +188,6 @@ import { autoIdentityColor } from "./web-identity-color.js";
 import { AppearanceTools } from "./web-appearance-tools.js";
 import { cardVersion, resolveCard } from "./web-card.js";
 import { ModStore } from "./web-mod-store.js";
-import { AgentMods } from "./web-mod-agent.js";
 import { downloadStickerImage } from "./channel/sticker-download.js";
 import { WebImageCache, imageMimeForFile, WEB_IMAGE_MAX_AGE_MS, WEB_IMAGE_MAX_BYTES, WEB_IMAGE_RETRY_MS } from "./web-images.js";
 import { accentColor, avatarFor, ownBotConnections } from "./instance-avatar.js";
@@ -214,7 +206,7 @@ import { crossInstanceVisibility, runVisibilityCommand, xmsgVisibility } from ".
 import { SEARCH_RETENTION_DAYS, SearchIndex } from "./search/search-index.js";
 import { chatDoc, taskDoc, xmsgDoc } from "./search/search-docs.js";
 import { WebSettingsTools } from "./web-settings-tools.js";
-import { bindGuestRequest, guestRouteDecision } from "./web-guest-access.js";
+import { GUEST_COMMAND_RUNS, GUEST_PREF_WRITES, GUEST_SEARCHES, bindGuestRequest, guestRouteDecision } from "./web-guest-access.js";
 import { GUEST_ROOM_TICK_MS, GuestRoomMembership, guestGroupRooms } from "./web-guest-rooms.js";
 import { Delegations, TrafficLog, trafficItem } from "./fleet-traffic.js";
 import { installedChannel, updateNoticeKey } from "./update-check.js";
@@ -259,14 +251,14 @@ import { buildOrgChart } from "./web-org.js";
 import { topMemoryHogs } from "./memory-hogs.js";
 import { GENERAL_POINTING_REFUSALS, SNOWFLAKE, hasPlaceRefs, placeRef, webRoute, webTextLinks, placeSuffix, renderPlaceRefs, stripPlaceRefs, topicUrl, worldPlaceOf } from "./topic-link.js";
 import { CacheService, cacheWindow } from "./cache-service.js";
-import { runWebCommand } from "./web-commands.js";
+import { guestWebCommands, runWebCommand } from "./web-commands.js";
 import { CompactWatch, launchIdentity } from "./compact-watch.js";
 import { agyLegacyAgentsFile, danglingSymlink, migrateAgyAgentsFile } from "./backend/antigravity.js";
 import { claudeConfigDirFor, claudeProjectKey } from "./backend/claude-code.js";
 import { sharedRolloutIndex } from "./rollout-index.js";
 import { TASK_BOARD_ON_NOTICE, dashboardRefusalIn, taskBoardSwitchedOn } from "./dashboard-permissions.js";
 import { mayUseTool, resolveToolSet, scheduleOpRefusal, toolForIpcType, toolRefusedMessage, } from "./tool-permissions.js";
-import { authorizeSession, decideWebGate, loadOrCreateWebToken, readWebToken, sessionCookieUpgrade } from "./web-auth.js";
+import { authorizeSession, decideWebGate, loadOrCreateWebToken, readSessionCookies, readWebToken, sessionCookieUpgrade } from "./web-auth.js";
 import { bypassesWebGate, handleAuthRequest, serveGuestRefusedPage, serveSigninPage } from "./auth-api.js";
 import { isWebPageNavigation } from "./web-shell-routes.js";
 import { guestSessionPolicy, localSessionPolicy, tokenEpoch, WebSessionStore } from "./web-session.js";
@@ -279,10 +271,8 @@ import { decisionListAnswer } from "./decision-list.js";
 import { CodeRequestLimiter, ReturningDevices } from "./web-returning-device.js";
 import { allowedHostNames, applyWebSecurityHeaders, hostnameOf, isHostAllowed, LOOPBACK_HOST_NAMES, WEB_HOST_REJECTED_MESSAGE } from "./web-host-guard.js";
 import { createPreviewListener, normalizeOrigin, previewAvailability, previewSettings } from "./web-preview.js";
-import { canvasWorkerEnabled, isCanvasWorkerTool, CANVAS_WORKER_EXPERIMENTAL_MESSAGE } from "./web-experimental.js";
-import { isCanvasWorkerHttpPath } from "./web-experimental-http.js";
+import { isCanvasWorkerTool, CANVAS_WORKER_EXPERIMENTAL_MESSAGE } from "./web-experimental.js";
 import { bundledSkillContents } from "./bundled-skills.js";
-import { createEffectBootstrap } from "./web-effect-bootstrap.js";
 import { fleetLevelDifferences, fleetLevelSignature, appendedConnections } from "./fleet-level-config.js";
 import { checkSelfRestartAllowance, recordSelfRestartAttempt } from "./self-restart-limit.js";
 import { SecretStore } from "./secret-store.js";
@@ -988,11 +978,6 @@ export class FleetManager {
     collabInstances = new Set();
     // Health endpoint
     healthServer = null;
-    /** #2118: independent of HTML preview availability/port; fixed bootstrap only, no effect resources. */
-    effectBootstrap = createEffectBootstrap();
-    /** Fixed trusted document coherence, independent of the HTML preview listener; never a resource grant. */
-    get effectBoot() { return this.effectBootstrap.boot; }
-    canvasWorkerEnabled() { return canvasWorkerEnabled(this.fleetConfig?.web); }
     healthServerDrain = null;
     /** #1306: the preview listener (health_port + 1 by default), and whether it is listening. */
     previewListener = null;
@@ -1171,7 +1156,7 @@ export class FleetManager {
     /** #1629: every instance's theme, placements, assets and lock (web-themes.json). */
     get themeStore() {
         // r4.1 Q3 (b): the card's limits are read from fleet.yaml at each upload (a change applies without a restart).
-        return (this.themeStoreInstance ??= new ThemeStore(this.dataDir, { limits: () => effectiveAppearanceLimits(this.fleetConfig?.web?.appearance).limits, effectsDropped: ids => this.effectLibrary.collectUnreferenced(ids) }));
+        return (this.themeStoreInstance ??= new ThemeStore(this.dataDir, { limits: () => effectiveAppearanceLimits(this.fleetConfig?.web?.appearance).limits }));
     }
     officeStoreInstance;
     /** Fleet → Org chart → Office: the offices people made (web-offices.json, beside web-themes.json). */
@@ -1183,6 +1168,12 @@ export class FleetManager {
     officeSkinWrites = new OfficeWriteLimiter(undefined, { perWindow: 10, windowMs: 60_000 });
     /** How often a person may save the offices (PUT /ui/offices); memory only, as the appearance limiter. */
     officeWrites = new OfficeWriteLimiter();
+    /** #2855: a guest's preference saves, per account. */
+    guestPrefWrites = new OfficeWriteLimiter(undefined, GUEST_PREF_WRITES);
+    /** #2855: a guest's commands, per account. */
+    guestCommandRuns = new OfficeWriteLimiter(undefined, GUEST_COMMAND_RUNS);
+    /** #2855: a trusted guest's searches, per account. */
+    guestSearches = new OfficeWriteLimiter(undefined, { perWindow: GUEST_SEARCHES.perWindow, windowMs: GUEST_SEARCHES.windowMs });
     officeSharesInstance;
     /**
      * #2636: Office share links — the live Office view for people outside the fleet, read-only, on a quick tunnel of
@@ -1378,96 +1369,16 @@ export class FleetManager {
         }
         catch { /* the next frame carries the rev */ } }));
     }
-    effectLibraryInstance;
-    effectTrialsInstance;
-    /** Lazy, single-owner storage. Register every host reference source before any operation can collect. */
-    get effectLibrary() {
-        if (!this.effectLibraryInstance) {
-            const library = new WebEffectLibrary(this.dataDir);
-            // Providers are lazy; publish only after every registration succeeds.
-            library.registerReferenceSource("themes", () => {
-                if (!this.themeStore.readable())
-                    throw new Error("themes_unreadable");
-                return this.themeStore.placedEffects().flatMap(row => row.ids.map(id => ({ id, holder: `instance:${row.name}` })));
-            });
-            library.registerReferenceSource("prefs", () => this.webPrefs.ownerEffectReferences());
-            library.registerReferenceSource("mods", () => {
-                const mods = this.mods.list();
-                if (mods.unreadable)
-                    throw new Error("mods_unreadable");
-                return mods.mods.flatMap(mod => mod.effects.map(effect => ({ id: effect.id, holder: `mod:${mod.id}` })));
-            });
-            this.effectTrialsInstance = new WebEffectTrials({ library, known: name => this.isKnownInstance(name) });
-            this.effectLibraryInstance = library;
-        }
-        return this.effectLibraryInstance;
-    }
-    /** Volatile Try offers and session-bound runs share this library. */
-    get effectTrials() { if (!this.effectTrialsInstance)
-        void this.effectLibrary; return this.effectTrialsInstance; }
-    effectProfilesInstance;
-    get effectProfiles() { return (this.effectProfilesInstance ??= new WebEffectProfiles(this.dataDir)); }
-    effectServiceInstance;
-    get effectService() {
-        return (this.effectServiceInstance ??= new WebEffectService({ library: this.effectLibrary, themes: this.themeStore, profiles: this.effectProfiles, prefs: this.webPrefs, trials: this.effectTrials,
-            known: name => this.isKnownInstance(name), changed: () => { try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { /* next status carries revision */ } } }));
-    }
-    effectToolsService;
-    /** Caller identity is supplied only by the owned IPC connection / verified agent endpoint token. */
-    get effectTools() {
-        return (this.effectToolsService ??= new WebEffectTools({
-            library: this.effectLibrary, limiter: this.webAppearance.limiter,
-            authorize: (name, buckets) => !this.isKnownInstance(name) ? { error: "unknown_instance" } : this.webAppearance.authorizeEffect(name, buckets),
-            placed: name => this.themeStore.get(name).placements.effects,
-            place: (name, effects) => {
-                const before = this.themeStore.get(name).placements.effects;
-                const explicit = new Set(effects.filter(e => typeof e !== "string").map(e => e.id));
-                const w = this.themeStore.setPlacements(name, { effects }, "agent", what => {
-                    // An unchanged human/private placement may be retained, never exposed or newly acquired by an agent.
-                    const r = explicit.has(what.id) ? this.effectLibrary.read(what.id, { kind: "agent", id: name })
-                        : this.effectLibrary.readReferenced(what.id, `instance:${name}`);
-                    if (!r.ok)
-                        return r.error;
-                    const params = explicit.has(what.id) ? what.params : before.find(e => e.id === what.id)?.params;
-                    return resolveEffectParams(r.entry.manifest, params ?? {}).ok ? null : "effect_params";
-                });
-                return w.ok ? { ok: true, rev: w.rev } : { ok: false, error: w.error };
-            },
-            changed: () => { try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { /* later status carries placements */ } },
-            // A nonmutating own/shared offer is not an appearance write. Only an explicit non-public admin-session click may start it.
-            preview: async (instance, id) => {
-                const result = this.effectTrials.offer(instance, id);
-                if (!result.ok)
-                    return { error: "not_found" };
-                const present = this.webChatHistory.list(instance).some(row => row.effectTrial?.offer === result.offer.offer);
-                if (!present && !this.publishEffectTrial(instance, result.offer))
-                    return { error: "trial_unavailable" };
-                return { id, status: "offered", expiresAt: result.offer.expiresAt, message: "A trial card is in your web chat. A signed-in admin outside the public link can start it; nothing was applied." };
-            },
-            profiles: id => this.effectProfiles.read(id),
-            profileSummary: id => this.effectService.profileSummary(id),
-            profileSummaries: ids => this.effectService.profileSummaries(ids),
-            playbackSummary: (name, id) => this.effectService.playbackSummary(name, id),
-        }));
-    }
     appearanceToolsService;
     /** #1629 r4 §1: get_web_appearance / preview_web_appearance — the caller's own look, resolved as the page resolves it. */
     get appearanceTools() {
         return (this.appearanceToolsService ??= new AppearanceTools({
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
             frame: (name) => (this.getUiStatus().instances.find(i => i.name === name) ?? { name }),
             theme: (name) => {
                 const r = this.themeStore.get(name);
                 return { theme: r.theme, locked: r.locked, widgets: r.placements.widgets, ambient: r.placements.ambient,
                     glyphAsset: (id) => this.themeStore.asset(name, id) };
             },
-            effects: name => this.themeStore.readable() ? this.themeStore.get(name).placements.effects.map(p => ({ id: p.id, by: p.by, ...(p.params ? { params: p.params } : {}), playback: this.effectService.playbackSummary(name, p.id) })) : [],
             card: (name) => resolveCard(name, humanCards(this.dataDir).get(name), this.themeStore.get(name).theme.card),
             // #1958: the host's identity-colour settings, as the page reads them (an unreadable prefs file: the defaults).
             colorPrefs: () => { try {
@@ -1496,49 +1407,17 @@ export class FleetManager {
         return Object.hasOwn(this.fleetConfig?.instances ?? {}, name) || (this.classicChannels?.getAll() ?? []).some((ch) => ch.instanceName === name);
     }
     modStore;
-    /**
-     * #1629 r4-5 / B2: installed mods use the same validated library and scoped holder claims as direct uploads.
-     */
+    /** #1629 r4-5: installed mods (#2799: a bundle that carries Canvas Worker effects is refused). */
     get mods() {
         return (this.modStore ??= new ModStore(this.dataDir, {
             themes: this.themeStore,
             prefs: this.webPrefs,
             ownerCss: this.ownerCss,
-            effects: this.effectLibrary,
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
-            context: () => ({ agendVersion: agendVersion(), limits: this.themeStore.limits(), effects: cw1EffectChecker() }),
+            context: () => ({ agendVersion: agendVersion(), limits: this.themeStore.limits() }),
             isKnownInstance: (name) => this.isKnownInstance(name),
             prefsIdentity: OPERATOR,
         }));
     }
-    agentModsService;
-    /** #1629 r4-5b: export_web_mod / propose_web_mod — the caller's own look as a file, and a proposal for a person. */
-    get agentMods() {
-        return (this.agentModsService ??= new AgentMods({
-            themes: this.themeStore, mods: this.mods, limiter: this.webAppearance.limiter,
-            webConfig: () => this.fleetConfig?.web ?? null,
-            // The mod store's own: a proposal is checked exactly as the person's import of it will be.
-            context: () => this.mods.checkContext(),
-            readOwnEffect: (instance, id) => { const r = this.effectLibrary.read(id, { kind: "agent", id: instance }); return r.ok ? { name: r.entry.manifest.name, files: r.entry.files } : null; },
-            notice: (instance, text) => { try {
-                this.emitSseEvent("message", { instance, sender: instance, role: "status", text, ts: new Date().toISOString() });
-            }
-            catch { /* the page reads it from Settings too */ } },
-            changed: () => { try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { /* the next frame */ } },
-        }));
-    }
-    /**
-     * #1629 r4-5c: an effect as this person may carry it away in an export — their own claim, or one a person shared —
-     * read with their principal (Sol's ACL). Being able to view or run a placed effect never grants packaging someone
-     * else's private claim: the library's reference read is runtime access, not an export path. Null: not theirs.
-     */
-    modPlacedEffect(person, id) {
-        const r = this.effectLibrary.read(id, { kind: "human", id: person });
-        return r.ok ? { name: r.entry.manifest.name, files: r.entry.files } : null;
-    }
     /** #1629 r4-5: an instance's card text as every viewer sees it (a person's fields over the agent's). */
     modCardText(name) {
         const card = resolveCard(name, humanCards(this.dataDir).get(name), this.themeStore.get(name).theme.card);
@@ -1561,8 +1440,7 @@ export class FleetManager {
      */
     get webSettings() {
         return (this.webSettingsToolsService ??= new WebSettingsTools({
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
-            prefs: this.webPrefs, ownerCss: this.ownerCss, mods: this.mods, effects: this.effectService,
+            prefs: this.webPrefs, ownerCss: this.ownerCss,
             instances: () => [...Object.keys(this.fleetConfig?.instances ?? {}),
                 ...(this.classicChannels?.getAll() ?? []).map((ch) => ch.instanceName).filter((n) => !Object.hasOwn(this.fleetConfig?.instances ?? {}, n))],
             colour: (name) => personIdentityColour(this.dataDir, name),
@@ -1571,7 +1449,6 @@ export class FleetManager {
             bannerFocus: (name) => personBannerFocus(this.dataDir, name),
             setBannerFocus: (name, focus) => { const w = setPersonBannerFocus(this.dataDir, name, focus); if (w.ok)
                 this.identityChanged(); return w; },
-            placements: (name) => this.themeStore.get(name).placements.effects.map((e) => (typeof e === "string" ? { id: e } : e)),
             ambient: (name) => Object.fromEntries(Object.entries(this.themeStore.get(name).placements.ambient).flatMap(([k, a]) => a ? [[k, { spec: a.spec, by: a.by }]] : [])),
             setAmbient: (name, spec, which) => this.webAppearance.humanSetAmbient(name, spec, which),
             announce: () => { try {
@@ -1885,7 +1762,7 @@ export class FleetManager {
                     retire();
                     continue;
                 }
-                if (store.attachPrompt(view.id, retire))
+                if (store.attachPrompt(view.id, retire, { platform: adapter.type, connection: adapterId }))
                     return;
             }
             catch {
@@ -6652,10 +6529,12 @@ export class FleetManager {
                 dataDir: this.dataDir,
                 onWarn: message => this.logger.warn(message),
                 // #1620: fleet.yaml's web.session.local, read at every check — a Settings save or a reload applies at once
-                // (shortening ends the sessions it now outlives). The public link's policy stays fixed.
+                // (shortening ends the sessions it now outlives). The public link's own cap stays fixed.
                 localPolicy: () => localSessionPolicy(this.fleetConfig?.web?.session?.local),
                 // #1920 §5.4: a guest's, from web.guests.session (never longer than the surface's own).
                 guestPolicy: () => guestSessionPolicy(this.fleetConfig?.web?.guests?.session),
+                // A session over the temporary link ends with the link (its TTL, at most 8 h on a quick tunnel).
+                exposureEnd: id => this.publicWebLink?.endOf(id) ?? null,
             });
             this.enforceGuestSwitch(); // #1920: guests off while the fleet was down
         }
@@ -7299,7 +7178,7 @@ export class FleetManager {
             return { ...a, name: badge.name, platform: badge.platform, scope: [...this.guestScope(owner)].sort(), reach: [...this.guestReach(owner)].sort(),
                 devices: devices.get(k) ?? 0, narrow: own(cfg?.narrow, `${a.adapterId}:${a.userId}`) ?? null,
                 // #2348: the grant as fleet.yaml has it (null: none), and the last code an admin sent from Settings.
-                grant: grant ? { ...(grant.name ? { name: grant.name } : {}), instances: [...grant.instances] } : null,
+                grant: grant ? { ...(grant.name ? { name: grant.name } : {}), instances: [...grant.instances], ...(grant.level === "trusted" ? { level: "trusted" } : {}) } : null,
                 ...(sent ? { code: { at: sent.at, outcome: sent.outcome.kind, ...(sent.outcome.kind === "sent" ? { expiresAt: sent.at + sent.outcome.expiresInMs } : {}),
                         ...(sent.outcome.kind === "dm_failed" ? { reason: sent.outcome.reason, platform: sent.outcome.platform, ...(sent.outcome.startUrl ? { startUrl: sent.outcome.startUrl } : {}) } : {}) } } : {}) };
         }).sort((x, y) => (y.lastSeen ?? -1) - (x.lastSeen ?? -1));
@@ -7347,7 +7226,7 @@ export class FleetManager {
             const when = Date.parse(r.created_at.includes("T") ? r.created_at : `${r.created_at.replace(" ", "T")}Z`);
             return r.event_type === "guest_grant_changed"
                 ? [{ kind: "grant", at: when, account, name, via: p.via === "confirmed" ? "confirmed" : "direct", added: names(p.added), removed: names(p.removed),
-                        endedSessions: typeof p.endedSessions === "number" ? p.endedSessions : 0 }]
+                        endedSessions: typeof p.endedSessions === "number" ? p.endedSessions : 0, ...(p.level === "chat" || p.level === "trusted" ? { level: p.level } : {}) }]
                 : [{ kind: "code", at: when, account, name, outcome: typeof p.outcome === "string" ? p.outcome : "unknown" }];
         });
     }
@@ -7386,7 +7265,7 @@ export class FleetManager {
      * confirmed in General, the agents added and taken away, and the sessions a removal ended. Never message content.
      */
     noteGuestGrantChange(change) {
-        this.logger.info({ account: change.account, via: change.via, added: change.added.length, removed: change.removed.length }, "Guest access changed in Settings");
+        this.logger.info({ account: change.account, via: change.via, added: change.added.length, removed: change.removed.length, ...(change.level ? { level: change.level } : {}) }, "Guest access changed in Settings");
         try {
             this.eventLog?.insert("fleet", "guest_grant_changed", { ...change });
         }
@@ -7471,6 +7350,8 @@ export class FleetManager {
      * #1920 §5.4: a guest's own `/web revoke` — its sessions and its outstanding code; nobody else's (an admin's revokes
      * everyone's, as before).
      */
+    /** #2855: the admin removed a guest — its own preferences (theme, language, favourites, sort, filter) go too. */
+    forgetGuestPrefs(owner) { this.webPrefs.forgetGuest(webPersonKey(owner)); }
     revokeGuestWebSessions(owner) {
         this.initializeWebSessions();
         const key = `${owner.adapterId}\u0000${owner.userId}`;
@@ -10364,6 +10245,11 @@ export class FleetManager {
                     }
                     return;
                 }
+                // #2870 (the user's choice): in a private chat, a command from someone ClassicBot does not serve here — not an
+                // allowed user, not a ClassicBot admin, not a fleet admin, no room in this chat — gets no answer at all. /start
+                // above still asks for access; a guest's /web is handled before it.
+                if (isPrivateChat && text.startsWith("/") && this.isClassicPrivateStranger(msg.userId, chatId, msg.adapterId))
+                    return;
                 // Handle /stop command
                 if (text === "/stop" || text.startsWith("/stop ")) {
                     if (!this.classicChannels.isAdmin(msg.userId)) {
@@ -10838,8 +10724,8 @@ export class FleetManager {
         }
     }
     checkToolPermission(sink, instanceName, tool) {
-        if (isCanvasWorkerTool(tool) && !this.canvasWorkerEnabled())
-            return { allowed: false, message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE };
+        if (isCanvasWorkerTool(tool))
+            return { allowed: false, message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE }; // #2799: removed
         const profile = resolveToolSet(this.fleetConfig?.instances[instanceName], instanceName);
         const allowed = mayUseTool(profile, tool);
         if (!allowed) {
@@ -11572,19 +11458,6 @@ export class FleetManager {
     }
     dispatchTypedIpc(name, msg) {
         const type = String(msg.type);
-        if (type.startsWith("fleet_") && WEB_EFFECT_TOOLS.has(type.slice(6))) {
-            const ipc = this.instanceIpcClients.get(name), fleetRequestId = msg.fleetRequestId;
-            if (!ipc || typeof fleetRequestId !== "string")
-                return;
-            void this.handleWebThemeHttp(name, type.slice(6), (msg.payload ?? {})).then(result => {
-                if (this.instanceIpcClients.get(name) === ipc)
-                    ipc.send({ type: "fleet_web_theme_response", fleetRequestId, result });
-            }, err => {
-                if (this.instanceIpcClients.get(name) === ipc)
-                    ipc.send({ type: "fleet_web_theme_response", fleetRequestId, error: err instanceof Error ? err.message : "Effect operation failed" });
-            }).catch(err => this.logger.debug({ err }, "Effect tool response could not be written"));
-            return;
-        }
         if (type.startsWith("fleet_schedule_")) {
             this.handleScheduleCrud(name, msg);
             return;
@@ -11638,10 +11511,9 @@ export class FleetManager {
             const args = (msg.payload ?? {});
             const result = tool === "get_web_appearance" || tool === "preview_web_appearance"
                 ? this.appearanceTools.handle(instanceName, tool, args)
-                : tool === "export_web_mod" || tool === "propose_web_mod" ? this.agentMods.handle(instanceName, tool, args)
-                    : tool === "office_view" || tool === "office_set" ? this.officeActs.handle(instanceName, tool, args)
-                        : OFFICE_PACK_IPC.has(`fleet_${tool}`) ? this.officePackTools.handle(instanceName, tool, args)
-                            : this.webAppearance.handleTool(instanceName, tool, args);
+                : tool === "office_view" || tool === "office_set" ? this.officeActs.handle(instanceName, tool, args)
+                    : OFFICE_PACK_IPC.has(`fleet_${tool}`) ? this.officePackTools.handle(instanceName, tool, args)
+                        : this.webAppearance.handleTool(instanceName, tool, args);
             ipc.send({ type: "fleet_web_theme_response", fleetRequestId, result });
         }
         catch (err) {
@@ -12066,17 +11938,10 @@ export class FleetManager {
     }
     /** #1629: `agend-agent theme …` — the same service as the tools; `instance` is the token's. */
     async handleWebThemeHttp(instance, tool, args) {
-        if (isCanvasWorkerTool(tool) && !this.canvasWorkerEnabled())
-            return { error: "canvas_worker_experimental", message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE };
-        if (WEB_EFFECT_TOOLS.has(tool)) {
-            if (!this.isKnownInstance(instance))
-                return { error: "unknown_instance" };
-            return this.effectTools.handle(instance, tool, args);
-        }
+        if (isCanvasWorkerTool(tool))
+            return { error: "canvas_worker_experimental", message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE }; // #2799: removed
         if (tool === "get_web_appearance" || tool === "preview_web_appearance")
             return this.appearanceTools.handle(instance, tool, args);
-        if (tool === "export_web_mod" || tool === "propose_web_mod")
-            return this.agentMods.handle(instance, tool, args);
         if (tool === "office_view" || tool === "office_set")
             return this.officeActs.handle(instance, tool, args); // #2578
         if (OFFICE_PACK_IPC.has(`fleet_${tool}`))
@@ -12960,9 +12825,7 @@ export class FleetManager {
             this.themeStore.forget(name);
             this.webAppearance.forget(name);
             this.appearanceTools.forget(name);
-            this.effectToolsService?.forget(name);
             this.mods.forgetInstance(name);
-            this.agentMods.forget(name);
             this.officeActsInstance?.forget(name);
             this.officePackToolsInstance?.forget(name);
         }
@@ -15855,6 +15718,16 @@ export class FleetManager {
         return result;
     }
     /** #1269: an instance's chat command from the web chat (web-commands.ts); `publicLink`: a gateway request. */
+    /** #2855: the table scope of an instance the web chat may command (a fleet instance or a ClassicBot room), else null. */
+    webCommandScope(instance) {
+        // Own entries only: a name like "__proto__" or "constructor" must not be found on the prototype (#1476 review).
+        const instances = this.fleetConfig?.instances;
+        if (instances && Object.prototype.hasOwnProperty.call(instances, instance))
+            return isGeneralInstance(this.fleetConfig, instance) ? "general" : "fleet";
+        return this.classicChannels?.getChannelIdByInstance(instance) !== undefined ? "classic" : null;
+    }
+    /** #2855: the platform an instance's channel is on, for the command table's cell (a web-only fleet: Discord's). */
+    commandPlatform(instance) { return this.getAdapterForInstance(instance)?.type === "telegram" ? "telegram" : "discord"; }
     webCommand(input, opts) {
         const webMeta = (instance) => {
             const topicId = this.fleetConfig?.instances[instance]?.topic_id;
@@ -15863,6 +15736,7 @@ export class FleetManager {
                 chatId: this.getGroupIdForInstance(instance) || "", messageId: newWebMessageId(),
                 username: opts.person?.name ?? WEB_NAME_FALLBACK, userId: opts.person?.userId ?? WEB_NAME_FALLBACK,
                 threadId: topicId != null ? String(topicId) : undefined, adapterId: this.getAdapterForInstance(instance)?.id ?? "", source: "web", humanOrigin: webHumanOrigin(true, opts.authority),
+                ...(opts.guest ? { webGuest: true } : {}), // #2855: a guest's /steer or /btw reaches the agent as a guest's
             };
         };
         const choicesFromCache = (instance) => {
@@ -15874,13 +15748,8 @@ export class FleetManager {
             return { current, options: this.withCurrentModel(cached.models, current).map(o => ({ id: o.id, label: this.modelChoiceLabel(o, current) })) };
         };
         return runWebCommand({
-            // Own entries only: a name like "__proto__" or "constructor" must not be found on the prototype (#1476 review).
-            scope: (instance) => {
-                const instances = this.fleetConfig?.instances;
-                if (instances && Object.prototype.hasOwnProperty.call(instances, instance))
-                    return isGeneralInstance(this.fleetConfig, instance) ? "general" : "fleet";
-                return this.classicChannels?.getChannelIdByInstance(instance) !== undefined ? "classic" : null;
-            },
+            scope: (instance) => this.webCommandScope(instance),
+            platform: (instance) => this.commandPlatform(instance),
             ctx: (instance) => this.topicCommands.getCtxText(instance),
             // Board 003648ac: a watch for the paste, armed when the daemon says it was written (raw_paste_written); one
             // for a command that was not handed over is dropped.
@@ -17557,6 +17426,13 @@ export class FleetManager {
             lines.push(t(admin === "added" ? "classic.approve_done_admin" : "classic.approve_done_admin_already", adminUserId ?? ""));
         }
         this.notifyInstanceTopic(entry.instanceName, lines.join("\n"));
+        // #2870: the chat just allowed — and the new ClassicBot admin's own chat — get the ClassicBot menu now, not at the
+        // bot's next start (Telegram only; the menu is per chat there).
+        const reply = entry.classicReplyTo;
+        if (reply && reply.adapter.type === "telegram" && scope !== "guild") {
+            for (const chat of new Set([groupId, ...(adminUserId ? [adminUserId] : [])]))
+                void this.topicCommands.addClassicMenuChat(reply.adapterId, chat);
+        }
         await this.notifyClassicRequester(entry, "classic.request_allowed");
     }
     async notifyClassicRequester(entry, key) {
@@ -18156,14 +18032,6 @@ export class FleetManager {
         const room = this.classicChannels?.getAll().find(c => c.instanceName === name);
         return room ? `room:${room.channelId}:${room.adapterId ?? ""}` : null;
     }
-    /** The only Try-card publisher: no arbitrary SSE sender/role can manufacture this metadata. */
-    publishEffectTrial(instance, offer) {
-        const row = this.webChatHistory.recordEffectTrial(instance, offer, new Date().toISOString());
-        if (!row)
-            return false;
-        broadcastSseEvent(this.sseClients, "message", row, err => this.logger.debug({ err }, "SSE client write failed; evicting"), this.webChatHistory.cursorOf(row));
-        return true;
-    }
     /** Push an SSE event to all connected Web UI clients. */
     emitSseEvent(event, data) {
         // #1386: a prompt opened or closed, or an instance's state moved — "Needs you" may have changed.
@@ -18471,27 +18339,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         this.syncRoleSkills(workDir, backend, "general", knowledgeDir);
         this.logger.debug({ knowledgeDir, workDir, backend }, "Synced general knowledge files");
     }
-    /** Update only AgEnD-managed skill copies; no launch or restart is needed for an experimental switch. */
-    canvasWorkerSettingChanged() {
-        this.refreshExperimentalSkills();
-        this.emitSseEvent("status", this.getUiStatus());
-    }
-    refreshExperimentalSkills() {
-        for (const [name, daemon] of this.daemons) {
-            try {
-                const cfg = daemon.getConfigSnapshot();
-                const backend = cfg.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
-                const workDir = this.resolveKnowledgeWorkDir(cfg.working_directory, backend, name);
-                const classic = this.classicChannels?.getAll().some(ch => ch.instanceName === name) === true;
-                if (classic && !insideManagedWorkspaces(workDir))
-                    continue;
-                this.syncRoleSkills(workDir, backend, classic ? "classic" : cfg.general_topic ? "general" : "worker");
-            }
-            catch (err) {
-                this.logger.warn({ name, err }, "Could not refresh experimental skill visibility");
-            }
-        }
-    }
     /** Publish only the bundled skills eligible for an instance role. */
     syncRoleSkills(workDir, backend, role, knowledgeDir) {
         const skillSegments = FleetManager.SKILLS_DIR_SEGMENTS[backend];
@@ -18696,7 +18543,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 continue;
             }
             managed.push(name);
-            const newContent = bundledSkillContents(join(srcSkills, name), this.canvasWorkerEnabled());
+            const newContent = bundledSkillContents(join(srcSkills, name));
             if (refuse(dest))
                 continue;
             try {
@@ -20854,6 +20701,17 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         return (adapterId ? generals.find(([name, cfg]) => (cfg.channel_id ?? this.getInstanceAdapterId(name)) === adapterId) : undefined)?.[0]
             ?? generals[0]?.[0];
     }
+    /**
+     * #2870: someone ClassicBot does not serve in this private chat: not on allowed_users, not a ClassicBot admin, not a
+     * fleet admin of this bot, and no ClassicBot room here. Their commands other than /start get no answer.
+     */
+    isClassicPrivateStranger(userId, chatId, adapterId) {
+        const classic = this.classicChannels;
+        if (!classic)
+            return false;
+        return !classic.isAdmin(userId) && !classic.isUserAllowed(userId) && !this.isFleetAdmin(userId, adapterId ?? "")
+            && !classic.isClassicChannel(chatId, adapterId);
+    }
     /** Return a user-facing blocker without mutating ClassicBot state. */
     validateClassicStart(channelId, userId, guildId, adapterId) {
         const classic = this.classicChannels;
@@ -21136,7 +20994,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             try {
                 this.themeStore.forget(ch.instanceName);
                 this.webAppearance.limiter.forget(ch.instanceName);
-                this.effectToolsService?.forget(ch.instanceName);
             }
             catch (err) {
                 this.logger.warn({ err: err.message, instanceName: ch.instanceName }, "Dropping a removed room's web theme failed");
@@ -21643,9 +21500,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             this.getConfigHistory().accepted("fleet.yaml", this.configPath, this.loadedFleetSource);
         this.migrateOfficeStorage();
         this.migrateNoticeDeliveryStorage();
-        if (canvasWorkerEnabled(oldConfig?.web) !== this.canvasWorkerEnabled()) {
-            this.canvasWorkerSettingChanged();
-        }
         // Classic behavior settings share the fleet defaults but are not entries
         // in fleet.yaml. Snapshot the old effective chain before reloading the
         // Classic file so SIGHUP can hot-apply either source without waiting for
@@ -23512,6 +23366,21 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         return scope.size ? scope : NO_GUEST_SCOPE;
     }
+    /** #2855: whether a request carries a guest's live session (its cookie; checked without counting as activity). */
+    presentsGuestSession(req) {
+        if (!this.webToken || !this.webSessions)
+            return false;
+        const epoch = tokenEpoch(this.webToken);
+        return readSessionCookies(req, this.webToken).some(id => this.webSessions.authenticate(id, epoch, { touch: false })?.tier === "guest");
+    }
+    /** #2855: whether the admin made this guest Trusted — only an explicit grant can (web.guests.grants[account].level). */
+    guestTrusted(owner) {
+        const guests = this.fleetConfig?.web?.guests;
+        if (guests?.enabled !== true || !guests.grants)
+            return false;
+        const key = `${owner.adapterId}:${owner.userId}`;
+        return Object.hasOwn(guests.grants, key) && guests.grants[key]?.level === "trusted";
+    }
     /**
      * #1920 (#2104 review): what an account reaches before an admin's narrowing — its connection's topics (an open one's
      * named agents), its own Telegram private room, its verified group rooms. Narrowing can only take from this set, so it
@@ -23690,13 +23559,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 return;
             }
             const requestPath = new URL(req.url ?? "/", `http://localhost:${port}`).pathname;
-            if (!this.canvasWorkerEnabled() && isCanvasWorkerHttpPath(requestPath)) {
-                res.writeHead(403, { "Content-Type": "application/json", "Cache-Control": "no-store" });
-                res.end(JSON.stringify({ error: "canvas_worker_experimental", message: CANVAS_WORKER_EXPERIMENTAL_MESSAGE }));
-                return;
-            }
-            if (this.effectBootstrap.handle(req, res))
-                return;
             // Branding is public, after Host admission: automatic favicon requests
             // must not become noisy web-token 401s in the browser console.
             // #2308: the icon routes and the pages' icon links follow the app icon set in Settings.
@@ -23704,8 +23566,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             if (handleWebIconRequest(req, res, requestPath))
                 return;
             // Public: the health probe, /agent (instance-token auth of its own), the
-            // sign-in surface, and /view's reads unless web.view_access says otherwise.
-            if (bypassesWebGate(req, requestPath, this.fleetConfig, p => !gatewayRequestContext(req) && (isViewPath(p) || isUsagePath(p)))) {
+            // sign-in surface, and /view's reads unless web.view_access says otherwise (#2855: never a guest's, which go
+            // through the guest gate and its limits on either listener).
+            if (bypassesWebGate(req, requestPath, this.fleetConfig, p => !gatewayRequestContext(req) && (isViewPath(p) || isUsagePath(p)) && !this.presentsGuestSession(req))) {
                 // fall through to the handlers below
             }
             else {
@@ -23771,7 +23634,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                         streamOpened: () => { void this.refreshGuestRooms(owner, { mode: "force" }); },
                         history: () => this.webChatHistory,
                         // #1920 §5.1: guests chat unless the host made them read-only (web.guests.chat: false).
-                        chat: () => this.fleetConfig?.web?.guests?.chat !== false });
+                        chat: () => this.fleetConfig?.web?.guests?.chat !== false,
+                        // #2855: the admin's level for this guest, read at each request (a change applies at once).
+                        trusted: () => this.guestTrusted(owner) });
                 }
                 if (decision.via === "session" && this.webToken) {
                     const upgrade = sessionCookieUpgrade(req, this.webToken, decision.session);
@@ -24177,7 +24042,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             return;
         }
         const listener = createPreviewListener({ settings, healthPort: boundPort, config: this.fleetConfig,
-            canvasWorkerEnabled: () => this.canvasWorkerEnabled(),
             // #1723: with a web.preview_origin, the open public link's dashboard frames this listener's preview too.
             extraOrigins: () => { const o = settings.origin ? this.publicWebLink?.openDashboardOrigin() : null; return o ? [o] : []; } });
         this.previewListener = listener;
@@ -24354,8 +24218,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 catch {
                     return {};
                 } })(),
-                // #2118: only this Chat's placement content; guest projection drops global revisions.
-                effect_chat_v: this.canvasWorkerEnabled() ? createHash("sha256").update(JSON.stringify(this.themeStore.get(name).placements.effects)).digest("hex").slice(0, 32) : null,
                 // #1958: the identity colour's tiers (the page resolves them: the agent's only while it shows agents' themes).
                 color: { ...(colors.get(name)?.color ? { person: colors.get(name).color } : {}), ...(image.agentColor ? { agent: image.agentColor } : {}),
                     ...(image.roleColor ? { role: image.roleColor } : {}), auto: autoIdentityColor(name) },
@@ -24366,6 +24228,12 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 tags: identity.tags,
                 teams: instanceTeams(this.fleetConfig?.teams, name), // #2172: the sidebar groups a team's members under it
                 last_reply: this.webChatHistory.lastAgentReply(name) ?? undefined, // #2179: its last reply to a person (ISO)
+                // #2855: its last reply that reached the channel — the only reply time a guest's sidebar gets (guestStatus).
+                last_reply_channel: this.webChatHistory.lastAgentReply(name, { channel: true }) ?? undefined,
+                // #2855: the web commands a guest may run here — the table's "anyone" cells for this channel (guestWebCommands);
+                // only while guests are on (no guest reads it otherwise).
+                ...(this.fleetConfig?.web?.guests?.enabled === true
+                    ? { guest_commands: (() => { const scope = this.webCommandScope(name); return scope ? guestWebCommands(scope, this.commandPlatform(name)) : []; })() } : {}),
                 status: this.getInstanceStatus(name),
                 // `state` (presentation: may be awaiting_input) and `execution_state` (working / idle / stuck, or null —
                 // what the dashboard's activity events carry) come from instancePresentation (#1212).
@@ -24382,7 +24250,6 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             };
         });
         return {
-            canvas_worker: this.canvasWorkerEnabled(),
             instances,
             startup: this.startupDashboard?.snapshot() ?? null,
             publicLink: this.getPublicWebStatus(),