@songsid/agend 2.3.3 → 2.3.4-beta.2

package/dist/fleet-manager.js

@@ -28,6 +28,7 @@ import { PUBLIC_PREVIEW_FRAME_SRC, PUBLIC_PREVIEW_TUNNEL_DIR, PublicPreview, pub
 import { CloudflaredProvider } from "./tunnel/cloudflared.js";
 import { ensureCloudflared } from "./tunnel/cloudflared-install.js";
 import { namedTestLane, runNamedLinkTest } from "./tunnel/named-link-test.js";
+import { daemonTopicMode, isWebOnlyFleetConfig } from "./web-only-fleet.js";
 import { OFFICE_SHARE_TUNNEL_DIR, OfficeShareService } from "./office-share-service.js";
 import { ALL_OFFICES, WHOLE_FLEET } from "./office-share.js";
 import { TunnelPurposeLane } from "./tunnel/purpose-lane.js";
@@ -264,7 +265,8 @@ import { authorizeSession, decideWebGate, loadOrCreateWebToken, readSessionCooki
 import { bypassesWebGate, handleAuthRequest, serveGuestRefusedPage, serveSigninPage } from "./auth-api.js";
 import { isWebPageNavigation } from "./web-shell-routes.js";
 import { guestSessionPolicy, localSessionPolicy, tokenEpoch, WebSessionStore } from "./web-session.js";
-import { authorityNow, evaluateWebAuthority, VERIFIED_SESSION_HOURS, webAuthorityPolicy } from "./authority/web-authority.js";
+import { WebNotices, WEB_NOTICES_FILE } from "./web-notices.js";
+import { authorityNow, evaluateWebAuthority, HOST_OPERATOR, VERIFIED_SESSION_HOURS, webAuthorityPolicy } from "./authority/web-authority.js";
 import { AuthorityStateStore } from "./authority/authority-state.js";
 import { SessionAuthorizations } from "./authority/session-authorizations.js";
 import { SessionAuthorizationRequests } from "./web-session-authorization.js";
@@ -300,6 +302,7 @@ import { SpawnGate } from "./spawn-gate.js";
 import { BackendOutageTracker } from "./backend-outage.js";
 import { canUnlockAdvancedTips, DailyTipScheduler, selectTip, visibleTipLevels, } from "./tips.js";
 import { getTmuxSession } from "./config.js";
+import { OwnStatusMessages, discordMessageKey } from "./chat-log-ids.js";
 // Closed migration cohort: these 11 names existed immediately before the first
 // managed-skill publisher (a1ac499f; parent e267e684). Never grow this set when
 // adding a bundled skill: its new name is not proof of old AgEnD ownership.
@@ -1201,6 +1204,11 @@ export class FleetManager {
             officeExists: id => this.officeStore.list().offices.some(o => o.id === id),
             ownerCurrent: owner => this.officeShareOwnerCurrent(owner),
             changed: () => this.emitSseEvent("office_shares", {}),
+            // #2911: page shares on the same tunnel. Their end (expired, stopped, the feature off, the maker no longer an admin,
+            // the fleet stopping) is said in the page's own channel, as its start is (pageShareNotice); never its URL.
+            pageConfig: () => this.fleetConfig?.web?.page_share,
+            pageCdn: () => this.fleetConfig?.web?.preview_cdn === true,
+            pagesChanged: (list, ended) => this.pageSharesChanged(list, ended),
             log: (event, detail) => this.logger.info({ event, ...(detail ? { detail } : {}) }, "Office share link"),
         }));
     }
@@ -1215,6 +1223,17 @@ export class FleetManager {
             : share ? t("office_share.revoked_notice", who, office) : t("office_share.revoked_all_notice", who, count);
         this.notifyFleetError(text, { throttle: false });
     }
+    /** #2911: the open page shares changed — the page hears it; each one handed out that ended is said in its channel. */
+    pageSharesChanged(_list, ended) {
+        this.emitSseEvent("page_shares", {});
+        for (const s of ended)
+            this.notifyInstanceTopic(s.instance, t("page_share.ended_notice", s.title || t("page_share.untitled")));
+    }
+    /** #2911: a page share was made — said in the channel of the instance whose chat it came from (never its URL). */
+    pageShareNotice(who, share) {
+        const minutes = Math.round((share.expiresAt - share.createdAt) / 60_000);
+        this.notifyInstanceTopic(share.instance, t("page_share.created_notice", who, share.title || t("page_share.untitled"), minutes < 60 ? `${minutes} min` : `${Math.round(minutes / 60)} h`));
+    }
     /** A share's owner: a person (`person:<adapter>:<user>`) still a fleet admin there; the host's own admin session stays. */
     officeShareOwnerCurrent(owner) {
         const m = /^person:([^:]+):(.+)$/.exec(owner);
@@ -1612,6 +1631,17 @@ export class FleetManager {
         const actor = verified();
         if (!actor)
             return null;
+        // #2910 D1: a web-only fleet's host operator (its `agend web --code` session on this computer) confirms its own
+        // change — the trust `agend settings confirm` has here; there is no account to be an admin of and no General to
+        // ask. Asked again at execution: still the host operator now (this computer, not revoked or run out), still web-only.
+        const hostOperator = (a) => !!a && a.adapter_id === HOST_OPERATOR.adapterId && a.user_id === HOST_OPERATOR.userId && this.isWebOnlyFleet();
+        if (hostOperator(actor)) {
+            return {
+                label: t("settings_confirm.host_operator_label"),
+                current: () => hostOperator(verified()),
+                done: view => { this.logger.info({ id: view.id, state: view.state }, "Settings change confirmed from the web by this computer's admin"); },
+            };
+        }
         const chat = this.settingsChatAuthority(store, id);
         if (!chat)
             return null;
@@ -5690,8 +5720,7 @@ export class FleetManager {
     }
     /** Recreate a daemon for a marker-only paused instance after an explicit wake/delivery. */
     async startPersistedPausedInstance(name, transition) {
-        const topicMode = this.fleetConfig?.channel?.mode === "topic"
-            || !!this.fleetConfig?.channels?.some(channel => channel.mode === "topic");
+        const topicMode = daemonTopicMode(this.fleetConfig);
         const fleetConfig = this.fleetConfig?.instances[name];
         if (fleetConfig) {
             await this.startInstance(name, fleetConfig, topicMode, "fleet-topic", false, transition);
@@ -5902,8 +5931,7 @@ export class FleetManager {
             this.logger.info({ name, attempt: attempt + 1 }, "Startup retry deferred — tmux storm window is blocking spawns");
             return;
         }
-        const topicMode = this.fleetConfig?.channel?.mode === "topic"
-            || !!this.fleetConfig?.channels?.some(channel => channel.mode === "topic");
+        const topicMode = daemonTopicMode(this.fleetConfig);
         this.startupRetriesRunning.add(name);
         try {
             await this.spawnGate.run({
@@ -6426,7 +6454,7 @@ export class FleetManager {
                 const backend = config.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
                 return { backend, profile: credentialHomeSpec(backend) ? instanceCredentialProfile(config, this.fleetConfig?.defaults, backend) : null };
             });
-            const topicMode = this.fleetConfig?.channel?.mode === "topic";
+            const topicMode = daemonTopicMode(this.fleetConfig);
             await this.startAfterRestart(name, wasPaused, pausedAt, pauseReason, () => opts?.kiroMigration ? this.startInstance(name, config, topicMode ?? false, "fleet-topic", false, transition, undefined, opts.kiroMigration)
                 : this.startInstance(name, config, topicMode ?? false, "fleet-topic", false, transition));
             this.stormWindow.markRecovered(name);
@@ -6729,6 +6757,7 @@ export class FleetManager {
                 if (!publicPreviewWanted(this.fleetConfig?.web))
                     return null;
                 return new PublicPreview({ exposureId: id, expiresAt, dashboardOrigin, isCurrent, manager: this.getPreviewTunnel(),
+                    cdn: () => this.fleetConfig?.web?.preview_cdn === true,
                     provider: () => new CloudflaredProvider({ binaryName: binary, protocol }),
                     log: (event, detail) => this.logger.info({ event, exposureId: id, ...(detail ? { detail } : {}) }, "Public web link") });
             },
@@ -7690,7 +7719,8 @@ export class FleetManager {
             return;
         // The session handle makes each notice distinct: notifyFleetError throttles by text, and a second
         // sign-in from the same kind of browser is exactly the one the operator most needs to hear about.
-        this.notifyFleetError(t("web.login_notice", info.label, info.surface, info.handle.slice(0, 8)));
+        // #2910 D2: a web-only fleet has no /web to revoke with — its Notice names the host's way (every browser signed out).
+        this.notifyFleetError(t(this.webOnlyPromptPlace() ? "web.login_notice_web_only" : "web.login_notice", info.label, info.surface, info.handle.slice(0, 8)));
     }
     getDashboardAccess() {
         return { ready: this.healthServerListening, token: this.webToken };
@@ -8110,7 +8140,8 @@ export class FleetManager {
         // Must run before the first General/CLI spawn: pressure can hold startup.
         // Logs remain available even before the adapters and health listener exist.
         this.memoryPressure.start();
-        const topicMode = fleet.channel?.mode === "topic" || !!fleet.channels?.some(ch => ch.mode === "topic");
+        // #2910: a web-only fleet's agents run in topic mode too (their cross-instance tools work; the dashboard is their place).
+        const topicMode = daemonTopicMode(fleet);
         // Set tmux socket isolation for custom AGEND_HOME
         const { getTmuxSocketName: getSocket } = await import("./paths.js");
         TmuxManager.setSocketName(getSocket());
@@ -8327,7 +8358,8 @@ export class FleetManager {
         }
         if (generalsCreated && !this.configHistory?.isFallback(this.configPath))
             this.saveFleetConfig();
-        if (topicMode && (fleet.channel || fleet.channels?.length)) {
+        // #2910: the scheduler (schedules, the task board, decisions) runs on a web-only fleet too; it needs no chat.
+        if (topicMode) {
             const schedulerConfig = {
                 ...DEFAULT_SCHEDULER_CONFIG,
                 ...this.fleetConfig?.defaults.scheduler,
@@ -9109,6 +9141,9 @@ export class FleetManager {
                 return;
             await this.handleInboundMessage(msg);
         }, this.logger, "adapter.message"));
+        // #2940: a deleted message's chat-log line goes (and it is never logged after this).
+        adapter.on("message_deleted", (e) => { if (isCurrentAdapter())
+            this.onPlatformMessageDeleted(e); });
         adapter.on("reaction", safeHandler(async (r) => {
             if (!isCurrentAdapter())
                 return;
@@ -9259,6 +9294,9 @@ export class FleetManager {
                 return;
             await this.handleInboundMessage(msg);
         }, this.logger, `adapter[${adapterId}].message`));
+        // #2940: a deleted message's chat-log line goes (and it is never logged after this).
+        adapter.on("message_deleted", (e) => { if (isCurrentAdapter())
+            this.onPlatformMessageDeleted(e); });
         adapter.on("reaction", safeHandler(async (r) => {
             if (!isCurrentAdapter())
                 return;
@@ -10836,7 +10874,10 @@ export class FleetManager {
         // else to go, and "retry shortly" would have the agent retry forever. It goes to the web chat.
         const webOnlyReply = tool === "reply" && this.worlds.size === 0 && this.isWebOnlyFleet();
         if (this.worlds.size === 0 && !webOnlyReply) {
-            respond(null, "Channel adapters are not ready — retry shortly");
+            // #2910: on a web-only fleet there will never be an adapter — say so, so the agent does not retry forever.
+            respond(null, this.isWebOnlyFleet()
+                ? `${tool} is not available on a web-only fleet (no Discord or Telegram connection); answer with reply`
+                : "Channel adapters are not ready — retry shortly");
             return;
         }
         // Resolve threadId: use sender's topic_id if sender is a known fleet instance,
@@ -11036,9 +11077,9 @@ export class FleetManager {
     }
     /** Side effects of a routed reply: cancel-button lifecycle, logs, SSE, chat log. */
     /** No chat platform is configured at all: the web dashboard is the fleet's only surface. */
+    /** #2910: no Discord or Telegram connection at all (src/web-only-fleet.ts). */
     isWebOnlyFleet() {
-        const config = this.fleetConfig;
-        return config != null && !config.channel && !(config.channels?.length);
+        return isWebOnlyFleetConfig(this.fleetConfig);
     }
     /** On a fleet with no chat platform, the dashboard is where an instance-health prompt is posted (#1307 item 6). */
     webOnlyPromptPlace() {
@@ -11413,6 +11454,9 @@ export class FleetManager {
         // through the target's adapter, so a Telegram-created schedule for a
         // Discord target announced its failure into the wrong platform.
         const adapter = this.scheduleSourceAdapter(schedule);
+        // #2910 D2: a web-only fleet has no chat to say it in: a Notice about the schedule's target.
+        if (!adapter && this.recordWebNotice("schedule", `⏰ Schedule "${schedule.label ?? schedule.id}" trigger failed: instance ${schedule.target} is offline.`, schedule.target))
+            return;
         if (!adapter) {
             this.logger.warn({ scheduleId: schedule.id, chatId: schedule.reply_chat_id, source: schedule.source }, "No adapter can reach the schedule's source chat — failure notice not sent");
             return;
@@ -14221,6 +14265,8 @@ export class FleetManager {
      * back to posting at the bare group id, which is the defect this replaced.
      */
     postDailySummary(text) {
+        if (this.recordWebNotice("summary", text))
+            return; // #2910 D2: a web-only fleet's Notices
         const target = this.fleetNoticeTarget();
         if (!this.adapter || !target) {
             this.logger.warn("Daily summary has no postable target — set a General topic or channel.options.general_channel_id");
@@ -14273,6 +14319,10 @@ export class FleetManager {
                 dispatched = true;
             }
         }
+        // #2910 D2: a web-only fleet has no General: the notice goes to the dashboard's Notices instead (and spends the
+        // throttle window like a post would).
+        if (!dispatched && this.recordWebNotice("fleet", body))
+            dispatched = true;
         if (!dispatched) {
             // Do NOT record the throttle key. It used to be claimed before delivery
             // was attempted, so a message nobody could receive — every fleet error
@@ -14295,6 +14345,31 @@ export class FleetManager {
         }
         return true;
     }
+    webNotices = null;
+    /** #2910 D2 (web-api): the Notices on a web-only fleet; null on any other (its General says them). */
+    webNoticesFeed() { return this.webOnlyPromptPlace() ? this.webNoticeStore() : null; }
+    /** #2910 D2: the web-only fleet's Notices (web-notices.json), read on first use. */
+    webNoticeStore() {
+        if (!this.dataDir)
+            return null;
+        this.webNotices ??= new WebNotices(join(this.dataDir, WEB_NOTICES_FILE), this.logger);
+        return this.webNotices;
+    }
+    /**
+     * #2910 D2: on a web-only fleet (no chat connection at all), keep what General or an agent's topic would have been
+     * told as a Notice, and push it to the dashboard. False on any other fleet (its chat says it; nothing is kept).
+     */
+    recordWebNotice(kind, text, instance) {
+        if (!this.webOnlyPromptPlace())
+            return false;
+        const store = this.webNoticeStore();
+        if (!store)
+            return false;
+        const known = instance !== undefined && Object.hasOwn(this.fleetConfig?.instances ?? {}, instance) ? instance : undefined;
+        const notice = store.add({ kind, text: stripPlaceRefs(text), ...(known ? { instance: known } : {}) });
+        this.emitSseEvent("notice", { notice, unread: store.unread() });
+        return true;
+    }
     static FLEET_ERROR_THROTTLE_MS = 10 * 60_000;
     fleetErrorNotices = new Map();
     /**
@@ -14308,6 +14383,9 @@ export class FleetManager {
      * would have to make this async and change every caller.
      */
     notifyInstanceTopic(instanceName, text, extraOpts) {
+        // #2910 D2: a web-only fleet has no topics: what the agent's topic would have been told is a Notice about it.
+        if (this.webOnlyPromptPlace())
+            return this.recordWebNotice("instance", text, instanceName);
         const send = this.sendToInstanceTopic(instanceName, text, extraOpts);
         if (!send)
             return false;
@@ -15584,6 +15662,7 @@ export class FleetManager {
             isAdmin: (userId, adapterId) => this.adminGate(userId, adapterId) === "ok",
             authorization: input.session ? this.sessionAuthorizationStore()?.get(input.session.handle) ?? null : null,
             policy: { ...webAuthorityPolicy(this.fleetConfig?.web), enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now: Date.now(),
+            hostOperator: this.isWebOnlyFleet(),
         });
     }
     sessionAuthorizations = null;
@@ -15616,6 +15695,33 @@ export class FleetManager {
         store.prune(a => a.epoch === state.epoch && now <= Math.min(a.until, a.authorizedAt + policy.maxSessionMs) && live.has(a.handle));
         return { ok: true, ...store.authorize(session.handle, session.owner, now, state.epoch, now + policy.maxSessionMs, peer) };
     }
+    /**
+     * #2910 D1 (auth-api, at sign-in): a web-only fleet's host session — signed in with the host's own code (`agend web
+     * --code`) on this computer — is the host operator, authorized from now for max_session_hours (as an account's
+     * Confirm would be), under the current epoch: a revocation ends it, and only a new sign-in on this computer gives it
+     * again. A fleet with a chat connection, another session, or another peer: nothing (§3 as before).
+     */
+    authorizeHostSession(session, peer) {
+        const store = this.sessionAuthorizationStore();
+        if (!store || !session.host || session.owner || !this.isWebOnlyFleet())
+            return;
+        const state = this.webAuthorityState(), now = Date.now(), policy = webAuthorityPolicy(this.fleetConfig?.web);
+        const check = evaluateWebAuthority({
+            session, gateway: false, peer, tokenEpoch: this.webToken ? tokenEpoch(this.webToken) : null,
+            isAdmin: () => false,
+            authorization: { handle: session.handle, owner: HOST_OPERATOR, authorizedAt: now, until: now + policy.maxSessionMs, epoch: state.epoch },
+            policy: { ...policy, enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now,
+            hostOperator: true,
+        });
+        if (check.refusal) {
+            this.logger.info({ handle: session.handle, refusal: check.refusal }, "Host web session not authorized");
+            return;
+        }
+        const live = new Set(this.webSessions?.list(undefined, () => true).map(r => r.handle) ?? []);
+        store.prune(a => a.epoch === state.epoch && now <= Math.min(a.until, a.authorizedAt + policy.maxSessionMs) && live.has(a.handle));
+        const { durable } = store.authorize(session.handle, HOST_OPERATOR, now, state.epoch, now + policy.maxSessionMs, peer);
+        this.logger.info({ handle: session.handle, durable }, "Host web session authorized (this computer's admin)");
+    }
     authorityStateStore = null;
     /**
      * #1939 §10: the switch, "Only this computer can authorize" and the revocation epoch in force for the configuration as
@@ -15671,7 +15777,10 @@ export class FleetManager {
         const sessions = new Map((this.webSessions?.list(undefined, () => true) ?? []).map(r => [r.handle, r]));
         const authorized = state.enabled ? (this.sessionAuthorizationStore()?.list() ?? [])
             .filter(a => a.epoch === state.epoch && sessions.has(a.handle) && now <= Math.min(a.until, a.authorizedAt + maxMs))
-            .map(a => ({ handle: a.handle, label: sessions.get(a.handle).label, account: `${a.owner.adapterId}:${a.owner.userId}`, authorizedAt: a.authorizedAt,
+            .map(a => ({ handle: a.handle, label: sessions.get(a.handle).label,
+            // #2910 D1: the host operator's own session says whose it is, not "host:operator".
+            account: a.owner.adapterId === HOST_OPERATOR.adapterId && a.owner.userId === HOST_OPERATOR.userId && this.isWebOnlyFleet()
+                ? t("settings_confirm.host_operator_label") : `${a.owner.adapterId}:${a.owner.userId}`, authorizedAt: a.authorizedAt,
             until: Math.min(a.until, a.authorizedAt + maxMs, sessions.get(a.handle).absoluteExpiry),
             // Over a link: the temporary one (§0.3), else the named one (a record from before §0.3 has no peer).
             ...(sessions.get(a.handle).surface === "gateway" ? (a.peer === "quick_link" ? { quick: true } : { named: true }) : {}) })) : [];
@@ -15781,6 +15890,8 @@ export class FleetManager {
             isAdmin: (userId, adapterId) => this.adminGate(userId, adapterId) === "ok",
             authorization: s?.owner ? { handle: s.handle, owner: s.owner, authorizedAt: now, until: now + policy.maxSessionMs, epoch: state.epoch } : null,
             policy: { ...policy, enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now,
+            // #2910 D1: a host operator's session is never asked about (no account to ask): only a sign-in authorizes it.
+            hostOperator: this.isWebOnlyFleet(),
         });
         return r.refusal;
     }
@@ -16088,8 +16199,10 @@ export class FleetManager {
             ? [{ action: "resume", label: t("inst.session_oom_resume") }, { action: "fresh", label: t("inst.session_oom_fresh") }]
             : [{ action: "restart", label: t("exit.restart") }, { action: "ignore", label: t("exit.ignore") }];
         const extra = sessionOomRetry ? { sessionOomRetry, ...(current ? { confirmationCurrent: current } : {}) } : undefined;
-        this.notifyInstanceTopic(instanceName, (oom ? message : t("exit.instance_notice", instanceName)) + placeSuffix({ kind: "general" }, "General"));
         const web = this.webOnlyPromptPlace();
+        // A pointer to General's controls; on a web-only fleet (#2910 D2) the controls are in Needs you and nothing points there.
+        if (!web)
+            this.notifyInstanceTopic(instanceName, (oom ? message : t("exit.instance_notice", instanceName)) + placeSuffix({ kind: "general" }, "General"));
         if (web) {
             await this.postNonceButtonPrompt({
                 prefix, alertType: "exit_restart", instanceName, ...web,
@@ -16168,11 +16281,19 @@ export class FleetManager {
      * contain usernames or secret-adjacent text and stays in daemon.log.
      */
     async notifyInteractivePrompt(instanceName, kind) {
-        this.notifyInstanceTopic(instanceName, t("interactive.instance_notice", instanceName) + placeSuffix({ kind: "general" }, "General"));
+        // #2910 D2: on a web-only fleet the assist prompt is in Needs you; there is no General to point to.
+        if (!this.webOnlyPromptPlace())
+            this.notifyInstanceTopic(instanceName, t("interactive.instance_notice", instanceName) + placeSuffix({ kind: "general" }, "General"));
         // Multi-world fleets can have one General per bot/platform. Route the assist
         // request to the General bound to the same adapter as the blocked instance.
         const generalName = this.findGeneralInstance(this.getInstanceAdapterId(instanceName));
         if (!generalName) {
+            // #2910 D4: a web-only fleet with no General to ask for help — and a password or sudo prompt is not answered from a
+            // web page: a Notice says where it waits (its View, where the person types it).
+            if (this.webOnlyPromptPlace()) {
+                this.recordWebNotice("instance", t("interactive.web_only_notice", instanceName, this.interactivePromptLabel(kind)), instanceName);
+                return;
+            }
             this.logger.warn({ instanceName }, "Interactive prompt has no General topic notification target");
             return;
         }
@@ -16331,6 +16452,10 @@ export class FleetManager {
      * was gone; this is the fallback).
      */
     async postRemoteCard(instanceName, card) {
+        // #2910 D4: a CLI's own dialog read as a card (selection-card.ts) is put to people only on a web-only fleet — the
+        // dashboard; a chat fleet keeps its parked notice and its General's controls, as before.
+        if (card.kind === "question" && card.webOnly && !this.webOnlyPromptPlace())
+            return;
         this.retireRemoteCard(instanceName, null, t("card.answered_in_pane"));
         const place = this.remoteCardPlace(instanceName);
         if (!place) {
@@ -16660,6 +16785,9 @@ export class FleetManager {
                 choices: [{ id: `cancel:${instanceName}`, label: t("cancel.button") }],
             }, threadId ? { threadId } : undefined);
             publication.inFlight = false;
+            // #2940: a status bubble of ours — never a chat-log line, for any bot of this fleet in the room; one a sibling
+            // already logged (its gateway event can come before this answer) is taken out again.
+            this.noteOwnStatusMessage(adapter, sent);
             const entry = {
                 instanceName,
                 adapterId,
@@ -18771,6 +18899,45 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         await adapter.sendText(msg.chatId, t("cmd.not_a_command"), { threadId: msg.threadId });
         return true;
     }
+    /** #2940: this fleet's own status bubbles and the messages the platform said were deleted (ids, never text). */
+    ownStatusMessages = new OwnStatusMessages();
+    /**
+     * #2940: a status bubble of ours was posted: never logged, and a line already logged for it (by a sibling bot) goes.
+     * Discord only (#2943 review: the only platform where our bots see each other's posts), keyed by channel and id.
+     */
+    noteOwnStatusMessage(adapter, sent) {
+        if (adapter.type !== "discord")
+            return;
+        const key = discordMessageKey(sent.threadId ?? sent.chatId, sent.messageId);
+        if (!key)
+            return;
+        this.ownStatusMessages.addStatus(key);
+        const removed = ClassicChannelManager.loggedLines.remove(key);
+        if (removed)
+            this.logger.debug({ key, removed }, "A status bubble logged before its id was known was taken out of the chat log");
+    }
+    /** #2940: Discord says a message was deleted — its chat-log line goes, and it is never logged after this. */
+    onPlatformMessageDeleted(e) {
+        const key = discordMessageKey(e?.channelId, e?.messageId);
+        if (!key)
+            return;
+        this.ownStatusMessages.markDeleted(key);
+        const removed = ClassicChannelManager.loggedLines.remove(key);
+        if (removed)
+            this.logger.debug({ key, removed }, "A deleted message was taken out of the chat log");
+    }
+    /** #2940: the key a Discord message's chat-log line is kept under (none for another platform: nothing is tracked). */
+    chatLogKey(msg) {
+        return msg.source === "discord" ? discordMessageKey(msg.threadId ?? msg.chatId, msg.messageId) : undefined;
+    }
+    /** #2940: whether `msg` must not enter the chat log (only its key is looked at; the debug trail names keys, not text). */
+    chatLogExcludes(instanceName, msg) {
+        const key = this.chatLogKey(msg);
+        if (!this.ownStatusMessages.excluded(key))
+            return false;
+        this.logger.debug({ instanceName, key }, "Not logged: a status bubble of this fleet, or a deleted message");
+        return true;
+    }
     /** Handle a message in a classic channel: log it, forward only /chat messages */
     async handleClassicChannelMessage(instanceName, msg) {
         const text = msg.text ?? "";
@@ -18814,7 +18981,10 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 : (msg.attachments?.length
                     ? ` [${msg.attachments.map(a => `${a.kind === "photo" ? "📷" : "📎"} ${a.filename || a.kind}`).join(", ")}]`
                     : "");
-            ClassicChannelManager.logMessage(instanceName, msg.username, text + collabAttachTag, msg.timestamp, msg.replyToText);
+            // #2940: one of this fleet's own status bubbles (any bot's), or a message already deleted, never enters the log.
+            if (this.chatLogExcludes(instanceName, msg))
+                return;
+            ClassicChannelManager.logMessage(instanceName, msg.username, text + collabAttachTag, msg.timestamp, msg.replyToText, this.chatLogKey(msg));
             this.logger.info({ instanceName, user: msg.username, textLen: text.length, attachments: msg.attachments?.length ?? 0, source: msg.source }, "Collab mode message");
             // Check for @mention trigger: must be exact <@BOT_USER_ID>, not @everyone/@here.
             // Each bot matches ONLY its own id. A secondary bot must NOT fall back to the
@@ -18915,7 +19085,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         const attachmentTag = saved ? ` [${saved.kind === "photo" ? "📷" : "📎"} saved: ${saved.paths.join(", ")}]`
             : msg.attachments?.length ? ` [${msg.attachments.map(a => `📎 ${a.kind}${a.filename ? `: ${a.filename}` : ""}`).join(", ")}]`
                 : "";
-        ClassicChannelManager.logMessage(instanceName, msg.username, text + attachmentTag, msg.timestamp, msg.replyToText);
+        // #2940: likewise in a room without collab (a bot's message reaches here only through a /chat text command).
+        if (!this.chatLogExcludes(instanceName, msg))
+            ClassicChannelManager.logMessage(instanceName, msg.username, text + attachmentTag, msg.timestamp, msg.replyToText, this.chatLogKey(msg));
         // Bare attachment without /chat: save + log only, don't trigger agent
         if (!isChat) {
             const reactAdapter = this.worlds.get(msg.adapterId ?? "")?.adapter ?? this.adapter;
@@ -21624,7 +21796,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         this.reconcilePreviewListener();
         this.publicWebLink?.refresh();
         const newInstances = this.fleetConfig.instances;
-        const topicMode = this.fleetConfig?.channel?.mode === "topic";
+        const topicMode = daemonTopicMode(this.fleetConfig);
         // Only what a fresh process can adopt, and only relative to the signature
         // this process came up on: a Settings edit mutates this.fleetConfig in place
         // before the reload, so comparing the pre-load copy sees nothing at all.
@@ -23203,7 +23375,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         const fleet = this.loadConfig(this.configPath);
         this.fleetConfig = fleet;
-        const topicMode = fleet.channel?.mode === "topic" || !!fleet.channels?.some(ch => ch.mode === "topic");
+        const topicMode = daemonTopicMode(fleet);
         const restartProgress = new RestartProgress(this.runnableStartupCount(fleet, topicMode), restartStartedAt, this.logger);
         // Phase 1: generals first
         const restartEntries = Object.entries(fleet.instances);
@@ -23355,7 +23527,8 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             // Only notify when target is genuinely newer (semver), so a beta user on
             // 2.0.8-beta.16 is never told that stable 2.0.7 is "available".
             if (target && this.semverGt(target, currentVersion)) {
-                const generalId = this.findGeneralInstance();
+                // #2910 D2 (#2925 review): a web-only fleet first — even with a General instance it has no chat for /update.
+                const generalId = this.webOnlyPromptPlace() ? null : this.findGeneralInstance();
                 if (generalId) {
                     // No release URL — Discord's SuppressEmbeds proved unreliable and the
                     // link preview looked bad. Version + /update instruction is enough.
@@ -23366,6 +23539,12 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                     if (key)
                         this.notifyInstanceTopic(generalId, t(key, `v${target}`, `v${currentVersion}`));
                 }
+                else if (this.webOnlyPromptPlace() && (fromChannel || updateNoticeKey(currentVersion, target))) {
+                    // #2910 D2: a web-only fleet: a Notice, once per version (the check runs daily); installed from this computer.
+                    const text = t("update.available_web_only", `v${target}`, `v${currentVersion}`);
+                    if (this.webNoticeStore()?.latest("update")?.text !== text)
+                        this.recordWebNotice("update", text);
+                }
             }
         }
         catch { /* silent — network issues */ }
@@ -23679,7 +23858,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                     if (decision.reason === "no-credential" && req.method === "GET"
                         && String(req.headers.accept ?? "").includes("text/html")
                         && isWebPageNavigation(requestPath)) {
-                        serveSigninPage(res, 401);
+                        serveSigninPage(res, 401, { webOnly: this.isWebOnlyFleet() });
                         return;
                     }
                     res.writeHead(decision.status);
@@ -23902,7 +24081,7 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
                 (async () => {
                     let held = false;
                     try {
-                        const topicMode = this.fleetConfig?.channel?.mode === "topic";
+                        const topicMode = daemonTopicMode(this.fleetConfig);
                         await withSpawnHoldReply(async (message) => {
                             held = true;
                             res.writeHead(202, { "Content-Type": "application/json" });
@@ -24137,7 +24316,9 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
         }
         const listener = createPreviewListener({ settings, healthPort: boundPort, config: this.fleetConfig,
             // #1723: with a web.preview_origin, the open public link's dashboard frames this listener's preview too.
-            extraOrigins: () => { const o = settings.origin ? this.publicWebLink?.openDashboardOrigin() : null; return o ? [o] : []; } });
+            extraOrigins: () => { const o = settings.origin ? this.publicWebLink?.openDashboardOrigin() : null; return o ? [o] : []; },
+            // #2911 (7): CDN libraries in previews, as fleet.yaml says now (a change applies to the next preview started).
+            cdn: () => this.fleetConfig?.web?.preview_cdn === true });
         this.previewListener = listener;
         listener.server.on("error", (err) => {
             if (this.previewListener !== listener)
@@ -24357,6 +24538,8 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
             // #1685: host memory pressure while it slows or holds new agents (the dashboard's indicator; macOS elevated is
             // shown here rather than in chat). null when normal, unknown or advisory.
             host_memory: this.hostMemoryIndicator(),
+            // #2910 D2: a web-only fleet's newest Notice — a polling page (no SSE `notice`) reads the list again when it moves.
+            ...(this.webOnlyPromptPlace() ? { notices_newest: this.webNoticeStore()?.newest() ?? 0 } : {}),
             // #2015: the largest processes while it lasts (name, pid, RSS, and whose: an instance, the fleet or tmux).
             ...(this.hostMemoryIndicator() && this.memoryTop ? { host_memory_top: this.memoryTop.processes } : {}),
         };