@songsid/agend 2.3.3 → 2.3.4-beta.1

package/dist/env-file.d.ts

@@ -9,3 +9,5 @@
  * - a key that appears twice: the last one wins.
  */
 export declare function parseEnvText(text: string): Map<string, string>;
+/** The key a .env line sets, as parseEnvText reads it (`export KEY=…` included); null for a blank, comment or keyless line. */
+export declare function envLineKey(line: string): string | null;

package/dist/env-file.js

@@ -11,17 +11,22 @@
 export function parseEnvText(text) {
     const out = new Map();
     for (const line of text.split("\n")) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#"))
-            continue;
-        const eqIdx = trimmed.indexOf("=");
-        if (eqIdx < 0)
-            continue;
-        const key = trimmed.slice(0, eqIdx).replace(/^export\s+/, "").trim();
+        const key = envLineKey(line);
         if (!key)
             continue;
-        out.set(key, trimmed.slice(eqIdx + 1).replace(/^["'](.*)["']$/, "$1"));
+        const trimmed = line.trim();
+        out.set(key, trimmed.slice(trimmed.indexOf("=") + 1).replace(/^["'](.*)["']$/, "$1"));
     }
     return out;
 }
+/** The key a .env line sets, as parseEnvText reads it (`export KEY=…` included); null for a blank, comment or keyless line. */
+export function envLineKey(line) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#"))
+        return null;
+    const eqIdx = trimmed.indexOf("=");
+    if (eqIdx < 0)
+        return null;
+    return trimmed.slice(0, eqIdx).replace(/^export\s+/, "").trim() || null;
+}
 //# sourceMappingURL=env-file.js.map

package/dist/env-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../src/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../src/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AAC1E,CAAC"}

package/dist/fleet-manager.d.ts

@@ -4,6 +4,7 @@ import { AppIconStore } from "./web-app-icon.js";
 import { type NamedTestResult } from "./tunnel/named-link-test.js";
 import { OfficeShareService } from "./office-share-service.js";
 import { type OfficeShare } from "./office-share.js";
+import type { PageShare } from "./page-share.js";
 import type { LoginCodeOwner } from "./web-login.js";
 import { type ProfileTicket } from "./runtime-cpu-profile.js";
 import type { CpuProfile } from "./cpu-profile.js";
@@ -100,6 +101,7 @@ import { type MemoryHog } from "./memory-hogs.js";
 import { type CacheReport } from "./cache-service.js";
 import { type WebCommandResult } from "./web-commands.js";
 import { type SessionRecord } from "./web-session.js";
+import { WebNotices } from "./web-notices.js";
 import { VERIFIED_SESSION_HOURS, type HumanAuthority, type WebAuthorityRefusal, type WebAuthorityResult, type WebPeer } from "./authority/web-authority.js";
 import { type AuthorityState } from "./authority/authority-state.js";
 import { type SessionAuthorization } from "./authority/session-authorizations.js";
@@ -687,6 +689,10 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * `share` null with `count`: "Revoke all".
      */
     officeShareNotice(event: "created" | "revoked", who: string, share: OfficeShare | null, count: number): void;
+    /** #2911: the open page shares changed — the page hears it; each one handed out that ended is said in its channel. */
+    pageSharesChanged(_list: PageShare[], ended: PageShare[]): void;
+    /** #2911: a page share was made — said in the channel of the instance whose chat it came from (never its URL). */
+    pageShareNotice(who: string, share: PageShare): void;
     /** A share's owner: a person (`person:<adapter>:<user>`) still a fleet admin there; the host's own admin session stays. */
     private officeShareOwnerCurrent;
     private officeActsInstance?;
@@ -2289,7 +2295,8 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private handleOutboundFromInstance;
     /** Side effects of a routed reply: cancel-button lifecycle, logs, SSE, chat log. */
     /** No chat platform is configured at all: the web dashboard is the fleet's only surface. */
-    private isWebOnlyFleet;
+    /** #2910: no Discord or Telegram connection at all (src/web-only-fleet.ts). */
+    isWebOnlyFleet(): boolean;
     /** On a fleet with no chat platform, the dashboard is where an instance-health prompt is posted (#1307 item 6). */
     private webOnlyPromptPlace;
     /** Resolves when the reply is in the web chat (#1770: after its files are copied); the caller need not wait. */
@@ -2852,6 +2859,16 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     notifyFleetError(text: string, opts?: {
         throttle?: boolean;
     }): boolean;
+    private webNotices;
+    /** #2910 D2 (web-api): the Notices on a web-only fleet; null on any other (its General says them). */
+    webNoticesFeed(): WebNotices | null;
+    /** #2910 D2: the web-only fleet's Notices (web-notices.json), read on first use. */
+    webNoticeStore(): WebNotices | null;
+    /**
+     * #2910 D2: on a web-only fleet (no chat connection at all), keep what General or an agent's topic would have been
+     * told as a Notice, and push it to the dashboard. False on any other fleet (its chat says it; nothing is kept).
+     */
+    private recordWebNotice;
     private static readonly FLEET_ERROR_THROTTLE_MS;
     private fleetErrorNotices;
     /**
@@ -3144,6 +3161,13 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
         ok: false;
         refusal: WebAuthorityRefusal;
     };
+    /**
+     * #2910 D1 (auth-api, at sign-in): a web-only fleet's host session — signed in with the host's own code (`agend web
+     * --code`) on this computer — is the host operator, authorized from now for max_session_hours (as an account's
+     * Confirm would be), under the current epoch: a revocation ends it, and only a new sign-in on this computer gives it
+     * again. A fleet with a chat connection, another session, or another peer: nothing (§3 as before).
+     */
+    authorizeHostSession(session: SessionRecord, peer: WebPeer): void;
     private authorityStateStore;
     /**
      * #1939 §10: the switch, "Only this computer can authorize" and the revocation epoch in force for the configuration as

package/dist/fleet-manager.js

@@ -28,6 +28,7 @@ import { PUBLIC_PREVIEW_FRAME_SRC, PUBLIC_PREVIEW_TUNNEL_DIR, PublicPreview, pub
 import { CloudflaredProvider } from "./tunnel/cloudflared.js";
 import { ensureCloudflared } from "./tunnel/cloudflared-install.js";
 import { namedTestLane, runNamedLinkTest } from "./tunnel/named-link-test.js";
+import { daemonTopicMode, isWebOnlyFleetConfig } from "./web-only-fleet.js";
 import { OFFICE_SHARE_TUNNEL_DIR, OfficeShareService } from "./office-share-service.js";
 import { ALL_OFFICES, WHOLE_FLEET } from "./office-share.js";
 import { TunnelPurposeLane } from "./tunnel/purpose-lane.js";
@@ -264,7 +265,8 @@ import { authorizeSession, decideWebGate, loadOrCreateWebToken, readSessionCooki
 import { bypassesWebGate, handleAuthRequest, serveGuestRefusedPage, serveSigninPage } from "./auth-api.js";
 import { isWebPageNavigation } from "./web-shell-routes.js";
 import { guestSessionPolicy, localSessionPolicy, tokenEpoch, WebSessionStore } from "./web-session.js";
-import { authorityNow, evaluateWebAuthority, VERIFIED_SESSION_HOURS, webAuthorityPolicy } from "./authority/web-authority.js";
+import { WebNotices, WEB_NOTICES_FILE } from "./web-notices.js";
+import { authorityNow, evaluateWebAuthority, HOST_OPERATOR, VERIFIED_SESSION_HOURS, webAuthorityPolicy } from "./authority/web-authority.js";
 import { AuthorityStateStore } from "./authority/authority-state.js";
 import { SessionAuthorizations } from "./authority/session-authorizations.js";
 import { SessionAuthorizationRequests } from "./web-session-authorization.js";
@@ -1201,6 +1203,11 @@ export class FleetManager {
             officeExists: id => this.officeStore.list().offices.some(o => o.id === id),
             ownerCurrent: owner => this.officeShareOwnerCurrent(owner),
             changed: () => this.emitSseEvent("office_shares", {}),
+            // #2911: page shares on the same tunnel. Their end (expired, stopped, the feature off, the maker no longer an admin,
+            // the fleet stopping) is said in the page's own channel, as its start is (pageShareNotice); never its URL.
+            pageConfig: () => this.fleetConfig?.web?.page_share,
+            pageCdn: () => this.fleetConfig?.web?.preview_cdn === true,
+            pagesChanged: (list, ended) => this.pageSharesChanged(list, ended),
             log: (event, detail) => this.logger.info({ event, ...(detail ? { detail } : {}) }, "Office share link"),
         }));
     }
@@ -1215,6 +1222,17 @@ export class FleetManager {
             : share ? t("office_share.revoked_notice", who, office) : t("office_share.revoked_all_notice", who, count);
         this.notifyFleetError(text, { throttle: false });
     }
+    /** #2911: the open page shares changed — the page hears it; each one handed out that ended is said in its channel. */
+    pageSharesChanged(_list, ended) {
+        this.emitSseEvent("page_shares", {});
+        for (const s of ended)
+            this.notifyInstanceTopic(s.instance, t("page_share.ended_notice", s.title || t("page_share.untitled")));
+    }
+    /** #2911: a page share was made — said in the channel of the instance whose chat it came from (never its URL). */
+    pageShareNotice(who, share) {
+        const minutes = Math.round((share.expiresAt - share.createdAt) / 60_000);
+        this.notifyInstanceTopic(share.instance, t("page_share.created_notice", who, share.title || t("page_share.untitled"), minutes < 60 ? `${minutes} min` : `${Math.round(minutes / 60)} h`));
+    }
     /** A share's owner: a person (`person:<adapter>:<user>`) still a fleet admin there; the host's own admin session stays. */
     officeShareOwnerCurrent(owner) {
         const m = /^person:([^:]+):(.+)$/.exec(owner);
@@ -1612,6 +1630,17 @@ export class FleetManager {
         const actor = verified();
         if (!actor)
             return null;
+        // #2910 D1: a web-only fleet's host operator (its `agend web --code` session on this computer) confirms its own
+        // change — the trust `agend settings confirm` has here; there is no account to be an admin of and no General to
+        // ask. Asked again at execution: still the host operator now (this computer, not revoked or run out), still web-only.
+        const hostOperator = (a) => !!a && a.adapter_id === HOST_OPERATOR.adapterId && a.user_id === HOST_OPERATOR.userId && this.isWebOnlyFleet();
+        if (hostOperator(actor)) {
+            return {
+                label: t("settings_confirm.host_operator_label"),
+                current: () => hostOperator(verified()),
+                done: view => { this.logger.info({ id: view.id, state: view.state }, "Settings change confirmed from the web by this computer's admin"); },
+            };
+        }
         const chat = this.settingsChatAuthority(store, id);
         if (!chat)
             return null;
@@ -5690,8 +5719,7 @@ export class FleetManager {
     }
     /** Recreate a daemon for a marker-only paused instance after an explicit wake/delivery. */
     async startPersistedPausedInstance(name, transition) {
-        const topicMode = this.fleetConfig?.channel?.mode === "topic"
-            || !!this.fleetConfig?.channels?.some(channel => channel.mode === "topic");
+        const topicMode = daemonTopicMode(this.fleetConfig);
         const fleetConfig = this.fleetConfig?.instances[name];
         if (fleetConfig) {
             await this.startInstance(name, fleetConfig, topicMode, "fleet-topic", false, transition);
@@ -5902,8 +5930,7 @@ export class FleetManager {
             this.logger.info({ name, attempt: attempt + 1 }, "Startup retry deferred — tmux storm window is blocking spawns");
             return;
         }
-        const topicMode = this.fleetConfig?.channel?.mode === "topic"
-            || !!this.fleetConfig?.channels?.some(channel => channel.mode === "topic");
+        const topicMode = daemonTopicMode(this.fleetConfig);
         this.startupRetriesRunning.add(name);
         try {
             await this.spawnGate.run({
@@ -6426,7 +6453,7 @@ export class FleetManager {
                 const backend = config.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
                 return { backend, profile: credentialHomeSpec(backend) ? instanceCredentialProfile(config, this.fleetConfig?.defaults, backend) : null };
             });
-            const topicMode = this.fleetConfig?.channel?.mode === "topic";
+            const topicMode = daemonTopicMode(this.fleetConfig);
             await this.startAfterRestart(name, wasPaused, pausedAt, pauseReason, () => opts?.kiroMigration ? this.startInstance(name, config, topicMode ?? false, "fleet-topic", false, transition, undefined, opts.kiroMigration)
                 : this.startInstance(name, config, topicMode ?? false, "fleet-topic", false, transition));
             this.stormWindow.markRecovered(name);
@@ -6729,6 +6756,7 @@ export class FleetManager {
                 if (!publicPreviewWanted(this.fleetConfig?.web))
                     return null;
                 return new PublicPreview({ exposureId: id, expiresAt, dashboardOrigin, isCurrent, manager: this.getPreviewTunnel(),
+                    cdn: () => this.fleetConfig?.web?.preview_cdn === true,
                     provider: () => new CloudflaredProvider({ binaryName: binary, protocol }),
                     log: (event, detail) => this.logger.info({ event, exposureId: id, ...(detail ? { detail } : {}) }, "Public web link") });
             },
@@ -7690,7 +7718,8 @@ export class FleetManager {
             return;
         // The session handle makes each notice distinct: notifyFleetError throttles by text, and a second
         // sign-in from the same kind of browser is exactly the one the operator most needs to hear about.
-        this.notifyFleetError(t("web.login_notice", info.label, info.surface, info.handle.slice(0, 8)));
+        // #2910 D2: a web-only fleet has no /web to revoke with — its Notice names the host's way (every browser signed out).
+        this.notifyFleetError(t(this.webOnlyPromptPlace() ? "web.login_notice_web_only" : "web.login_notice", info.label, info.surface, info.handle.slice(0, 8)));
     }
     getDashboardAccess() {
         return { ready: this.healthServerListening, token: this.webToken };
@@ -8110,7 +8139,8 @@ export class FleetManager {
         // Must run before the first General/CLI spawn: pressure can hold startup.
         // Logs remain available even before the adapters and health listener exist.
         this.memoryPressure.start();
-        const topicMode = fleet.channel?.mode === "topic" || !!fleet.channels?.some(ch => ch.mode === "topic");
+        // #2910: a web-only fleet's agents run in topic mode too (their cross-instance tools work; the dashboard is their place).
+        const topicMode = daemonTopicMode(fleet);
         // Set tmux socket isolation for custom AGEND_HOME
         const { getTmuxSocketName: getSocket } = await import("./paths.js");
         TmuxManager.setSocketName(getSocket());
@@ -8327,7 +8357,8 @@ export class FleetManager {
         }
         if (generalsCreated && !this.configHistory?.isFallback(this.configPath))
             this.saveFleetConfig();
-        if (topicMode && (fleet.channel || fleet.channels?.length)) {
+        // #2910: the scheduler (schedules, the task board, decisions) runs on a web-only fleet too; it needs no chat.
+        if (topicMode) {
             const schedulerConfig = {
                 ...DEFAULT_SCHEDULER_CONFIG,
                 ...this.fleetConfig?.defaults.scheduler,
@@ -10836,7 +10867,10 @@ export class FleetManager {
         // else to go, and "retry shortly" would have the agent retry forever. It goes to the web chat.
         const webOnlyReply = tool === "reply" && this.worlds.size === 0 && this.isWebOnlyFleet();
         if (this.worlds.size === 0 && !webOnlyReply) {
-            respond(null, "Channel adapters are not ready — retry shortly");
+            // #2910: on a web-only fleet there will never be an adapter — say so, so the agent does not retry forever.
+            respond(null, this.isWebOnlyFleet()
+                ? `${tool} is not available on a web-only fleet (no Discord or Telegram connection); answer with reply`
+                : "Channel adapters are not ready — retry shortly");
             return;
         }
         // Resolve threadId: use sender's topic_id if sender is a known fleet instance,
@@ -11036,9 +11070,9 @@ export class FleetManager {
     }
     /** Side effects of a routed reply: cancel-button lifecycle, logs, SSE, chat log. */
     /** No chat platform is configured at all: the web dashboard is the fleet's only surface. */
+    /** #2910: no Discord or Telegram connection at all (src/web-only-fleet.ts). */
     isWebOnlyFleet() {
-        const config = this.fleetConfig;
-        return config != null && !config.channel && !(config.channels?.length);
+        return isWebOnlyFleetConfig(this.fleetConfig);
     }
     /** On a fleet with no chat platform, the dashboard is where an instance-health prompt is posted (#1307 item 6). */
     webOnlyPromptPlace() {
@@ -11413,6 +11447,9 @@ export class FleetManager {
         // through the target's adapter, so a Telegram-created schedule for a
         // Discord target announced its failure into the wrong platform.
         const adapter = this.scheduleSourceAdapter(schedule);
+        // #2910 D2: a web-only fleet has no chat to say it in: a Notice about the schedule's target.
+        if (!adapter && this.recordWebNotice("schedule", `⏰ Schedule "${schedule.label ?? schedule.id}" trigger failed: instance ${schedule.target} is offline.`, schedule.target))
+            return;
         if (!adapter) {
             this.logger.warn({ scheduleId: schedule.id, chatId: schedule.reply_chat_id, source: schedule.source }, "No adapter can reach the schedule's source chat — failure notice not sent");
             return;
@@ -14221,6 +14258,8 @@ export class FleetManager {
      * back to posting at the bare group id, which is the defect this replaced.
      */
     postDailySummary(text) {
+        if (this.recordWebNotice("summary", text))
+            return; // #2910 D2: a web-only fleet's Notices
         const target = this.fleetNoticeTarget();
         if (!this.adapter || !target) {
             this.logger.warn("Daily summary has no postable target — set a General topic or channel.options.general_channel_id");
@@ -14273,6 +14312,10 @@ export class FleetManager {
                 dispatched = true;
             }
         }
+        // #2910 D2: a web-only fleet has no General: the notice goes to the dashboard's Notices instead (and spends the
+        // throttle window like a post would).
+        if (!dispatched && this.recordWebNotice("fleet", body))
+            dispatched = true;
         if (!dispatched) {
             // Do NOT record the throttle key. It used to be claimed before delivery
             // was attempted, so a message nobody could receive — every fleet error
@@ -14295,6 +14338,31 @@ export class FleetManager {
         }
         return true;
     }
+    webNotices = null;
+    /** #2910 D2 (web-api): the Notices on a web-only fleet; null on any other (its General says them). */
+    webNoticesFeed() { return this.webOnlyPromptPlace() ? this.webNoticeStore() : null; }
+    /** #2910 D2: the web-only fleet's Notices (web-notices.json), read on first use. */
+    webNoticeStore() {
+        if (!this.dataDir)
+            return null;
+        this.webNotices ??= new WebNotices(join(this.dataDir, WEB_NOTICES_FILE), this.logger);
+        return this.webNotices;
+    }
+    /**
+     * #2910 D2: on a web-only fleet (no chat connection at all), keep what General or an agent's topic would have been
+     * told as a Notice, and push it to the dashboard. False on any other fleet (its chat says it; nothing is kept).
+     */
+    recordWebNotice(kind, text, instance) {
+        if (!this.webOnlyPromptPlace())
+            return false;
+        const store = this.webNoticeStore();
+        if (!store)
+            return false;
+        const known = instance !== undefined && Object.hasOwn(this.fleetConfig?.instances ?? {}, instance) ? instance : undefined;
+        const notice = store.add({ kind, text: stripPlaceRefs(text), ...(known ? { instance: known } : {}) });
+        this.emitSseEvent("notice", { notice, unread: store.unread() });
+        return true;
+    }
     static FLEET_ERROR_THROTTLE_MS = 10 * 60_000;
     fleetErrorNotices = new Map();
     /**
@@ -14308,6 +14376,9 @@ export class FleetManager {
      * would have to make this async and change every caller.
      */
     notifyInstanceTopic(instanceName, text, extraOpts) {
+        // #2910 D2: a web-only fleet has no topics: what the agent's topic would have been told is a Notice about it.
+        if (this.webOnlyPromptPlace())
+            return this.recordWebNotice("instance", text, instanceName);
         const send = this.sendToInstanceTopic(instanceName, text, extraOpts);
         if (!send)
             return false;
@@ -15584,6 +15655,7 @@ export class FleetManager {
             isAdmin: (userId, adapterId) => this.adminGate(userId, adapterId) === "ok",
             authorization: input.session ? this.sessionAuthorizationStore()?.get(input.session.handle) ?? null : null,
             policy: { ...webAuthorityPolicy(this.fleetConfig?.web), enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now: Date.now(),
+            hostOperator: this.isWebOnlyFleet(),
         });
     }
     sessionAuthorizations = null;
@@ -15616,6 +15688,33 @@ export class FleetManager {
         store.prune(a => a.epoch === state.epoch && now <= Math.min(a.until, a.authorizedAt + policy.maxSessionMs) && live.has(a.handle));
         return { ok: true, ...store.authorize(session.handle, session.owner, now, state.epoch, now + policy.maxSessionMs, peer) };
     }
+    /**
+     * #2910 D1 (auth-api, at sign-in): a web-only fleet's host session — signed in with the host's own code (`agend web
+     * --code`) on this computer — is the host operator, authorized from now for max_session_hours (as an account's
+     * Confirm would be), under the current epoch: a revocation ends it, and only a new sign-in on this computer gives it
+     * again. A fleet with a chat connection, another session, or another peer: nothing (§3 as before).
+     */
+    authorizeHostSession(session, peer) {
+        const store = this.sessionAuthorizationStore();
+        if (!store || !session.host || session.owner || !this.isWebOnlyFleet())
+            return;
+        const state = this.webAuthorityState(), now = Date.now(), policy = webAuthorityPolicy(this.fleetConfig?.web);
+        const check = evaluateWebAuthority({
+            session, gateway: false, peer, tokenEpoch: this.webToken ? tokenEpoch(this.webToken) : null,
+            isAdmin: () => false,
+            authorization: { handle: session.handle, owner: HOST_OPERATOR, authorizedAt: now, until: now + policy.maxSessionMs, epoch: state.epoch },
+            policy: { ...policy, enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now,
+            hostOperator: true,
+        });
+        if (check.refusal) {
+            this.logger.info({ handle: session.handle, refusal: check.refusal }, "Host web session not authorized");
+            return;
+        }
+        const live = new Set(this.webSessions?.list(undefined, () => true).map(r => r.handle) ?? []);
+        store.prune(a => a.epoch === state.epoch && now <= Math.min(a.until, a.authorizedAt + policy.maxSessionMs) && live.has(a.handle));
+        const { durable } = store.authorize(session.handle, HOST_OPERATOR, now, state.epoch, now + policy.maxSessionMs, peer);
+        this.logger.info({ handle: session.handle, durable }, "Host web session authorized (this computer's admin)");
+    }
     authorityStateStore = null;
     /**
      * #1939 §10: the switch, "Only this computer can authorize" and the revocation epoch in force for the configuration as
@@ -15671,7 +15770,10 @@ export class FleetManager {
         const sessions = new Map((this.webSessions?.list(undefined, () => true) ?? []).map(r => [r.handle, r]));
         const authorized = state.enabled ? (this.sessionAuthorizationStore()?.list() ?? [])
             .filter(a => a.epoch === state.epoch && sessions.has(a.handle) && now <= Math.min(a.until, a.authorizedAt + maxMs))
-            .map(a => ({ handle: a.handle, label: sessions.get(a.handle).label, account: `${a.owner.adapterId}:${a.owner.userId}`, authorizedAt: a.authorizedAt,
+            .map(a => ({ handle: a.handle, label: sessions.get(a.handle).label,
+            // #2910 D1: the host operator's own session says whose it is, not "host:operator".
+            account: a.owner.adapterId === HOST_OPERATOR.adapterId && a.owner.userId === HOST_OPERATOR.userId && this.isWebOnlyFleet()
+                ? t("settings_confirm.host_operator_label") : `${a.owner.adapterId}:${a.owner.userId}`, authorizedAt: a.authorizedAt,
             until: Math.min(a.until, a.authorizedAt + maxMs, sessions.get(a.handle).absoluteExpiry),
             // Over a link: the temporary one (§0.3), else the named one (a record from before §0.3 has no peer).
             ...(sessions.get(a.handle).surface === "gateway" ? (a.peer === "quick_link" ? { quick: true } : { named: true }) : {}) })) : [];
@@ -15781,6 +15883,8 @@ export class FleetManager {
             isAdmin: (userId, adapterId) => this.adminGate(userId, adapterId) === "ok",
             authorization: s?.owner ? { handle: s.handle, owner: s.owner, authorizedAt: now, until: now + policy.maxSessionMs, epoch: state.epoch } : null,
             policy: { ...policy, enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now,
+            // #2910 D1: a host operator's session is never asked about (no account to ask): only a sign-in authorizes it.
+            hostOperator: this.isWebOnlyFleet(),
         });
         return r.refusal;
     }
@@ -16088,8 +16192,10 @@ export class FleetManager {
             ? [{ action: "resume", label: t("inst.session_oom_resume") }, { action: "fresh", label: t("inst.session_oom_fresh") }]
             : [{ action: "restart", label: t("exit.restart") }, { action: "ignore", label: t("exit.ignore") }];
         const extra = sessionOomRetry ? { sessionOomRetry, ...(current ? { confirmationCurrent: current } : {}) } : undefined;
-        this.notifyInstanceTopic(instanceName, (oom ? message : t("exit.instance_notice", instanceName)) + placeSuffix({ kind: "general" }, "General"));
         const web = this.webOnlyPromptPlace();
+        // A pointer to General's controls; on a web-only fleet (#2910 D2) the controls are in Needs you and nothing points there.
+        if (!web)
+            this.notifyInstanceTopic(instanceName, (oom ? message : t("exit.instance_notice", instanceName)) + placeSuffix({ kind: "general" }, "General"));
         if (web) {
             await this.postNonceButtonPrompt({
                 prefix, alertType: "exit_restart", instanceName, ...web,
@@ -16168,11 +16274,19 @@ export class FleetManager {
      * contain usernames or secret-adjacent text and stays in daemon.log.
      */
     async notifyInteractivePrompt(instanceName, kind) {
-        this.notifyInstanceTopic(instanceName, t("interactive.instance_notice", instanceName) + placeSuffix({ kind: "general" }, "General"));
+        // #2910 D2: on a web-only fleet the assist prompt is in Needs you; there is no General to point to.
+        if (!this.webOnlyPromptPlace())
+            this.notifyInstanceTopic(instanceName, t("interactive.instance_notice", instanceName) + placeSuffix({ kind: "general" }, "General"));
         // Multi-world fleets can have one General per bot/platform. Route the assist
         // request to the General bound to the same adapter as the blocked instance.
         const generalName = this.findGeneralInstance(this.getInstanceAdapterId(instanceName));
         if (!generalName) {
+            // #2910 D4: a web-only fleet with no General to ask for help — and a password or sudo prompt is not answered from a
+            // web page: a Notice says where it waits (its View, where the person types it).
+            if (this.webOnlyPromptPlace()) {
+                this.recordWebNotice("instance", t("interactive.web_only_notice", instanceName, this.interactivePromptLabel(kind)), instanceName);
+                return;
+            }
             this.logger.warn({ instanceName }, "Interactive prompt has no General topic notification target");
             return;
         }
@@ -16331,6 +16445,10 @@ export class FleetManager {
      * was gone; this is the fallback).
      */
     async postRemoteCard(instanceName, card) {
+        // #2910 D4: a CLI's own dialog read as a card (selection-card.ts) is put to people only on a web-only fleet — the
+        // dashboard; a chat fleet keeps its parked notice and its General's controls, as before.
+        if (card.kind === "question" && card.webOnly && !this.webOnlyPromptPlace())
+            return;
         this.retireRemoteCard(instanceName, null, t("card.answered_in_pane"));
         const place = this.remoteCardPlace(instanceName);
         if (!place) {
@@ -21624,7 +21742,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         this.reconcilePreviewListener();
         this.publicWebLink?.refresh();
         const newInstances = this.fleetConfig.instances;
-        const topicMode = this.fleetConfig?.channel?.mode === "topic";
+        const topicMode = daemonTopicMode(this.fleetConfig);
         // Only what a fresh process can adopt, and only relative to the signature
         // this process came up on: a Settings edit mutates this.fleetConfig in place
         // before the reload, so comparing the pre-load copy sees nothing at all.
@@ -23203,7 +23321,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         const fleet = this.loadConfig(this.configPath);
         this.fleetConfig = fleet;
-        const topicMode = fleet.channel?.mode === "topic" || !!fleet.channels?.some(ch => ch.mode === "topic");
+        const topicMode = daemonTopicMode(fleet);
         const restartProgress = new RestartProgress(this.runnableStartupCount(fleet, topicMode), restartStartedAt, this.logger);
         // Phase 1: generals first
         const restartEntries = Object.entries(fleet.instances);
@@ -23355,7 +23473,8 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             // Only notify when target is genuinely newer (semver), so a beta user on
             // 2.0.8-beta.16 is never told that stable 2.0.7 is "available".
             if (target && this.semverGt(target, currentVersion)) {
-                const generalId = this.findGeneralInstance();
+                // #2910 D2 (#2925 review): a web-only fleet first — even with a General instance it has no chat for /update.
+                const generalId = this.webOnlyPromptPlace() ? null : this.findGeneralInstance();
                 if (generalId) {
                     // No release URL — Discord's SuppressEmbeds proved unreliable and the
                     // link preview looked bad. Version + /update instruction is enough.
@@ -23366,6 +23485,12 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                     if (key)
                         this.notifyInstanceTopic(generalId, t(key, `v${target}`, `v${currentVersion}`));
                 }
+                else if (this.webOnlyPromptPlace() && (fromChannel || updateNoticeKey(currentVersion, target))) {
+                    // #2910 D2: a web-only fleet: a Notice, once per version (the check runs daily); installed from this computer.
+                    const text = t("update.available_web_only", `v${target}`, `v${currentVersion}`);
+                    if (this.webNoticeStore()?.latest("update")?.text !== text)
+                        this.recordWebNotice("update", text);
+                }
             }
         }
         catch { /* silent — network issues */ }
@@ -23679,7 +23804,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                     if (decision.reason === "no-credential" && req.method === "GET"
                         && String(req.headers.accept ?? "").includes("text/html")
                         && isWebPageNavigation(requestPath)) {
-                        serveSigninPage(res, 401);
+                        serveSigninPage(res, 401, { webOnly: this.isWebOnlyFleet() });
                         return;
                     }
                     res.writeHead(decision.status);
@@ -23902,7 +24027,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 (async () => {
                     let held = false;
                     try {
-                        const topicMode = this.fleetConfig?.channel?.mode === "topic";
+                        const topicMode = daemonTopicMode(this.fleetConfig);
                         await withSpawnHoldReply(async (message) => {
                             held = true;
                             res.writeHead(202, { "Content-Type": "application/json" });
@@ -24137,7 +24262,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         const listener = createPreviewListener({ settings, healthPort: boundPort, config: this.fleetConfig,
             // #1723: with a web.preview_origin, the open public link's dashboard frames this listener's preview too.
-            extraOrigins: () => { const o = settings.origin ? this.publicWebLink?.openDashboardOrigin() : null; return o ? [o] : []; } });
+            extraOrigins: () => { const o = settings.origin ? this.publicWebLink?.openDashboardOrigin() : null; return o ? [o] : []; },
+            // #2911 (7): CDN libraries in previews, as fleet.yaml says now (a change applies to the next preview started).
+            cdn: () => this.fleetConfig?.web?.preview_cdn === true });
         this.previewListener = listener;
         listener.server.on("error", (err) => {
             if (this.previewListener !== listener)
@@ -24357,6 +24484,8 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             // #1685: host memory pressure while it slows or holds new agents (the dashboard's indicator; macOS elevated is
             // shown here rather than in chat). null when normal, unknown or advisory.
             host_memory: this.hostMemoryIndicator(),
+            // #2910 D2: a web-only fleet's newest Notice — a polling page (no SSE `notice`) reads the list again when it moves.
+            ...(this.webOnlyPromptPlace() ? { notices_newest: this.webNoticeStore()?.newest() ?? 0 } : {}),
             // #2015: the largest processes while it lasts (name, pid, RSS, and whose: an instance, the fleet or tmux).
             ...(this.hostMemoryIndicator() && this.memoryTop ? { host_memory_top: this.memoryTop.processes } : {}),
         };