@songsid/agend 2.3.4-beta.7 → 2.3.5-alpha.3

package/dist/ui/settings-outside.js

@@ -0,0 +1,176 @@
+// #3008 ② (alpha.3; decision 28c2d3a3 rule 3, the user's simplified form hmsg-33c3d609): Settings → Access & security →
+// "Connections from outside", on a fleet with no chat connection. This computer's admin, here, sets up an authenticator
+// app (a QR code and the key, then its first code), and turns on "Allow connections from outside": the public link
+// opens, and signing in through it asks for the app's code. Turning it off closes the link and signs everyone out there.
+// Every change applies at once (an action, not a staged setting) and is this computer's only: elsewhere the card shows
+// the state, read-only. The server decides who may (GET /ui/outside's `here`) and refuses everything else regardless.
+// The words are the leader's (cid-alpha3-design, strings 1–13 and 17).
+import { html, useEffect, useRef, useState } from "/assets/app-html.js";
+import { t, register } from "/assets/app-i18n.js";
+import { toast } from "/assets/ui-toast.js";
+import { confirmDialog } from "/assets/ui-confirm.js";
+import { api } from "./settings-confirm.js";
+
+register("outside", {
+  en: {
+    title: "Connections from outside", switch: "Allow connections from outside",
+    needApp: "Set up an authenticator app first. Signing in from outside will ask for its code.",
+    setUp: "Set up authenticator app",
+    scan: "Scan this with Authy, Google Authenticator or Microsoft Authenticator, or type the key. Then enter the 6-digit code it shows.",
+    setUpOn: "Authenticator app set up on {0}.", again: "Set up again",
+    againConfirm: "Codes from the old app stop working, and everyone signed in from outside is signed out.",
+    remove: "Remove", removeConfirm: "Connections from outside are turned off, and everyone signed in from outside is signed out.",
+    openAt: "Open at {0}.", quick: "A quick link gets a new address each time it opens.",
+    hereOnly: "Only on the AgEnD computer.", lostPhone: "Lost your phone? On the AgEnD computer, choose “Set up again”.",
+    wrong: "That code didn't work. Check that your phone's clock is right and try the newest code.",
+    paused: "Too many wrong codes. Try again in {0}.", code: "Authenticator code", key: "Key",
+    minutes: "{0} minutes", minute: "1 minute", hours: "{0} hours", hour: "1 hour",
+  },
+  "zh-TW": {
+    title: "從外面連線", switch: "允許從外面連線",
+    needApp: "請先設定驗證器 App。從外面登入時會要求輸入它的代碼。",
+    setUp: "設定驗證器 App",
+    scan: "用 Authy、Google Authenticator 或 Microsoft Authenticator 掃描，或手動輸入金鑰，再輸入 App 顯示的 6 位數代碼。",
+    setUpOn: "驗證器 App 已於 {0} 設定。", again: "重新設定",
+    againConfirm: "舊 App 的代碼會失效，所有從外面登入的人都會被登出。",
+    remove: "移除", removeConfirm: "從外面連線會關閉，所有從外面登入的人都會被登出。",
+    openAt: "已開啟：{0}。", quick: "快速連結每次開啟網址都不同。",
+    hereOnly: "只能在 AgEnD 電腦上變更。", lostPhone: "手機遺失？請在 AgEnD 電腦上選「重新設定」。",
+    wrong: "代碼不對。請確認手機時間正確，並輸入最新的代碼。",
+    paused: "錯誤次數太多，請 {0} 後再試。", code: "驗證器代碼", key: "金鑰",
+    minutes: "{0} 分鐘", minute: "1 分鐘", hours: "{0} 小時", hour: "1 小時",
+  },
+});
+const to = (k, ...v) => t(`outside.${k}`, ...v);
+
+/** A wait as words: "15 minutes" / 「15 分鐘」, "2 hours" / 「2 小時」 (rounded up). */
+export function waitWords(ms) {
+  const minutes = Math.max(1, Math.ceil(ms / 60000));
+  if (minutes < 60) return minutes === 1 ? to("minute") : to("minutes", minutes);
+  const hours = Math.ceil(minutes / 60);
+  return hours === 1 ? to("hour") : to("hours", hours);
+}
+
+/** The key as an app shows it: groups of four. */
+export function keyGroups(secret) {
+  return String(secret || "").replace(/(.{4})(?=.)/g, "$1 ");
+}
+
+/**
+ * The QR code of an otpauth:// URI as one SVG path (dark modules), drawn by the page — no inline style, no innerHTML
+ * (the CSP). `qrcode` is the vendored encoder's factory (qrcode.module.js).
+ */
+export function qrPath(qrcode, uri) {
+  const qr = qrcode(0, "M");
+  qr.addData(uri);
+  qr.make();
+  const n = qr.getModuleCount();
+  let d = "";
+  for (let r = 0; r < n; r++) for (let c = 0; c < n; c++) if (qr.isDark(r, c)) d += `M${c + 4} ${r + 4}h1v1h-1z`;
+  return { size: n + 8, d };
+}
+
+function Qr({ uri }) {
+  const [shape, setShape] = useState(null);
+  useEffect(() => {
+    let live = true;
+    import("/assets/qrcode.module.js").then((m) => { if (live) setShape(qrPath(m.default || m.qrcode, uri)); }).catch(() => { if (live) setShape(null); });
+    return () => { live = false; };
+  }, [uri]);
+  if (!shape) return null;
+  return html`<svg class="s-out-qr" id="outQr" viewBox=${`0 0 ${shape.size} ${shape.size}`} width="200" height="200" role="img" aria-label=${to("setUp")}>
+    <rect width=${shape.size} height=${shape.size} fill="#fff" /><path d=${shape.d} fill="#000" /></svg>`;
+}
+
+/**
+ * #3035 review: how often the card reads the state again while it is shown — quickly while the link is opening (the
+ * switch answers before the link is up), slowly otherwise (its lifetime ending, a wait starting or ending elsewhere).
+ */
+export const outsidePoll = { quickMs: 2000, slowMs: 15000 };
+
+export function OutsideCard() {
+  const [s, setS] = useState(null), [enroll, setEnroll] = useState(null), [code, setCode] = useState(""), [msg, setMsg] = useState(""), [busy, setBusy] = useState(false);
+  // Fences: an answer that arrives after the card is gone, or after a newer read began, is dropped; nor does a read
+  // land while an action is under way (the box shows the click until the action's own read).
+  const live = useRef({ mounted: true, seq: 0, busy: false });
+  // Every read that ends (answered or not) moves `rev`: the next one is scheduled from there, so a failed read (the
+  // network, a 5xx, an unreadable answer) never stops the card reading again (#3035 review r2) — and keeps what it
+  // showed meanwhile.
+  const [rev, setRev] = useState(0), failed = useRef(false);
+  const load = async () => {
+    const seq = ++live.current.seq;
+    let r = null;
+    try { r = await api("/ui/outside"); } catch { r = null; }
+    if (!live.current.mounted || seq !== live.current.seq) return;
+    const ok = !!(r && r.ok && r.body && typeof r.body === "object");
+    failed.current = !ok;
+    if (ok) setS(r.body);
+    setRev((n) => n + 1);
+  };
+  useEffect(() => { live.current.mounted = true; load(); return () => { live.current.mounted = false; }; }, []);
+  useEffect(() => {
+    if (rev === 0) return undefined;                                              // the first read is still out
+    if (s && !s.webOnly && !failed.current) return undefined;                    // a chat fleet: nothing to follow
+    const opening = !!s && s.outside && (!s.link || s.link.state !== "open");
+    const delay = !s || opening ? outsidePoll.quickMs : outsidePoll.slowMs;      // none read yet, or opening: soon
+    const timer = setTimeout(() => { if (!live.current.busy) load(); else setRev((n) => n + 1); }, delay);
+    return () => clearTimeout(timer);
+  }, [rev]);
+  if (!s || !s.webOnly) return null;
+  const here = s.here === true;
+  const act = async (fn) => {
+    setBusy(true); setMsg(""); live.current.busy = true; live.current.seq++;      // a read under way is outdated now
+    try { await fn(); } finally { live.current.busy = false; if (live.current.mounted) { setBusy(false); load(); } }
+  };
+  const begin = () => act(async () => {
+    const r = await api("/ui/outside/enroll", { method: "POST", body: "{}" });
+    if (r.ok && r.body && r.body.secret) { setEnroll(r.body); setCode(""); } else toast(t("app.failed"), false);
+  });
+  const confirm = () => act(async () => {
+    const r = await api("/ui/outside/enroll/confirm", { method: "POST", body: JSON.stringify({ code }) });
+    if (r.ok) { setEnroll(null); setCode(""); return; }
+    const why = r.body && r.body.error;
+    if (why === "expired") { setEnroll(null); return; }
+    setMsg(why === "wrong" ? to("wrong") : t("app.failed"));
+  });
+  const again = async () => {
+    if (!(await confirmDialog({ title: to("again"), message: to("againConfirm"), confirmLabel: to("again"), danger: true }))) return;
+    begin();
+  };
+  const remove = async () => {
+    if (!(await confirmDialog({ title: to("remove"), message: to("removeConfirm"), confirmLabel: to("remove"), danger: true }))) return;
+    act(async () => { const r = await api("/ui/outside/remove", { method: "POST", body: "{}" }); if (!r.ok) toast(t("app.failed"), false); });
+  };
+  // The box follows the click at once (smoke-web-outside-3008: a controlled box that waits for the server reads as a
+  // click that did nothing); the server's state, read again after, is what stays.
+  const flip = (on) => { setS((x) => ({ ...x, outside: on })); act(async () => {
+    const r = await api("/ui/outside/switch", { method: "POST", body: JSON.stringify({ on }) });
+    if (!r.ok) toast(t("app.failed"), false);
+  }); };
+  const link = s.link, open = link && link.state === "open";
+  return html`<section class="card s-outside" id="outsideCard"><h3>${to("title")}</h3>
+    ${!here ? html`<p class="note" id="outHereOnly">${to("hereOnly")}</p>` : null}
+    <label class="check"><input id="outSwitch" type="checkbox" checked=${s.outside} disabled=${!here || busy || (!s.enrolled && !s.outside)}
+      onChange=${(e) => flip(e.target.checked)} /><span>${to("switch")}</span></label>
+    ${!s.enrolled ? html`<p class="note" id="outNeedApp">${to("needApp")}</p>` : null}
+    ${s.outside && open && link.url ? html`<p class="note" id="outOpenAt">${to("openAt", link.url)}${link.quick ? ` ${to("quick")}` : ""}</p>` : null}
+    ${s.outside && link && !open ? html`<p class="note" id="outStarting">${t("app.loading")}</p>` : null}
+    ${s.pausedForMs > 0 ? html`<p class="note s-va-warn" role="status" id="outPaused">${to("paused", waitWords(s.pausedForMs))}</p>` : null}
+    ${enroll ? html`<div class="s-out-enroll" id="outEnroll">
+        <p class="note">${to("scan")}</p>
+        <${Qr} uri=${enroll.uri} />
+        <p class="note">${to("key")}: <code id="outKey">${keyGroups(enroll.secret)}</code></p>
+        <div class="field"><label for="outCode">${to("code")}</label>
+          <input id="outCode" type="text" inputmode="numeric" autocomplete="one-time-code" maxlength="7" placeholder="123456" value=${code}
+            onInput=${(e) => setCode(e.target.value)} /></div>
+        ${msg ? html`<p class="feedback error" role="alert" id="outMsg">${msg}</p>` : null}
+        <div class="save-row"><button type="button" class="btn" id="outCancel" disabled=${busy} onClick=${() => { setEnroll(null); setMsg(""); }}>${t("app.cancel")}</button>
+          <button type="button" class="btn btn-primary" id="outConfirm" disabled=${busy || !/^\s*\d{3}\s?\d{3}\s*$/.test(code)} onClick=${confirm}>${t("app.confirmOk")}</button></div>
+      </div>`
+      : s.enrolled ? html`<p class="note" id="outSetUpOn">${to("setUpOn", new Date(s.enrolledAt).toLocaleDateString())}</p>
+        <p class="note">${to("lostPhone")}</p>
+        ${here ? html`<div class="save-row"><button type="button" class="btn" id="outAgain" disabled=${busy} onClick=${again}>${to("again")}</button>
+          <button type="button" class="btn btn-danger" id="outRemove" disabled=${busy} onClick=${remove}>${to("remove")}</button></div>` : null}`
+      : here ? html`<div class="save-row"><button type="button" class="btn btn-primary" id="outSetUp" disabled=${busy} onClick=${begin}>${to("setUp")}</button></div>` : null}
+  </section>`;
+}

package/dist/ui/settings-registry.js

@@ -12,6 +12,7 @@ import { GUESTS_SETTINGS } from "./settings-guests.js";
 const L = (en, zh) => ({ en, "zh-TW": zh });
 /** [id, section, target, labelKey | label, config key, words en, words zh] */
 const ROWS = [
+  ["general.location", "agent-defaults", "#general-location", null, null, ["general", "windows", "paired PC", "host", "location"], ["General", "Windows", "電腦", "主機", "執行位置"], L("Run General on", "General 執行位置")],
   // You · Preferences
   ["profile.name", "preferences", "#profile-name", "settings.profileTitle", null, ["name", "display name", "who agents see", "profile"], ["名字", "名稱", "顯示名稱", "個人資料"]],
   ["prefs.theme", "preferences", "#pref-theme", "app.theme", null, ["theme", "dark", "light", "dark mode", "colour scheme"], ["主題", "深色", "淺色", "外觀"]],
@@ -32,6 +33,11 @@ const ROWS = [
   // Fleet · Agents
   ["agents.new", "agents", "#newAgentBtn", "settings.newAgent", null, ["new agent", "create", "add agent", "instance"], ["新增 agent", "建立", "新 agent"]],
   ["agents.provider-keys", "agents", ".s-provider-keys", "settings.providerKeys", "web.provider_secrets", ["api key", "provider", "openai", "anthropic", "token", "secret"], ["API 金鑰", "金鑰", "供應商", "token"]],
+  // M-2255: the two switches (fleet.yaml runtimes.*).
+  ["runtimes.windows-cli", "runtimes", "#runtimeWindowsCli", null, "runtimes.windows_cli", ["windows cli", "this pc", "local windows", "AGEND_WINDOWS_CLI", "codex", "claude code"], ["Windows CLI", "這台電腦", "本機"], L("Use this PC's Windows CLIs", "使用這台電腦 Windows 上的 CLI")],
+  ["runtimes.remote-runtime", "runtimes", "#runtimeRemoteRuntime", null, "runtimes.remote_runtime", ["pair", "remote", "other computer", "AGEND_REMOTE_RUNTIME", "tailscale", "ssh"], ["配對", "遠端", "其他電腦"], L("Allow other Windows PCs to pair", "允許其他 Windows 電腦配對")],
+  ["runtimes.max-agents", "runtimes", "#runtimeMaxAgents", null, "runtimes.max_agents_per_machine", ["concurrent", "at once", "limit", "parallel", "how many agents"], ["同時", "上限", "並行", "數量"], L("Agents at once on each Windows PC", "每台 Windows 電腦同時執行的 Agent 數")],
+  ["runtimes.machines", "runtimes", ".runtime-settings", "settings.sec_runtimes", null, ["runtime", "computer", "machine", "pair", "connect", "windows", "linux", "CLI"], ["執行環境", "電腦", "機器", "配對", "連接", "Windows", "CLI"]],
   ["defaults.tips", "agent-defaults", "#g-tips", "settings.dailyTips", "defaults.tips", ["daily tips", "notices"], ["每日提示"]],
   ["web.notify-login", "access", "#webNotifyLogin", "settings.webNotifyLogin", "web.notify_login", ["sign in", "login", "notices"], ["登入通知"]],
   // Fleet · Agent defaults

package/dist/ui/settings-strings.js

@@ -63,6 +63,7 @@ register("settings", {
     systemPrompt: "System prompt",
     tags: "Tags",
     generalTopicField: "General topic (fleet dispatcher)",
+    oneGeneral: "{0} is already the General. Untick it first.",
     runtimeResources: "Runtime & Resources",
     autoPause: "Auto-pause after",
     minutes: "minutes",
@@ -259,6 +260,11 @@ register("settings", {
     backendNotInstalled: "not installed", backendNotSignedIn: "not signed in (use /login)", backendTooOld: "needs {0} or newer", backendUnchecked: "not checked yet",
     modelNotListed: "current — not in this CLI's list", modelOther: "Other…", modelOtherLabel: "Model name", modelOtherPlaceholder: "a model name this CLI accepts",
     modelNone: "— none —", inheritValue: "inherit ({0})", modelCliDefault: "the CLI's own default",
+    modelCatalogLoading: "Loading this CLI's models…", modelCatalogFailed: "Could not load models. Keep the default or enter a model name.",
+    modelCatalogEmpty: "No model list is available. Use the default or enter a model name.",
+    modelCatalogCliList: "Source: CLI model listing.", modelCatalogCliCache: "Source: local CLI model cache.",
+    modelCatalogOfficial: "Source: official candidate list. Availability depends on your account and provider.",
+    modelCatalogCached: "Source: AgEnD's cached CLI/account model list.", modelCatalogRetry: "Retry", modelCatalogRefresh: "Refresh models",
     readyApply: "Ready to apply",
     copied: "Copied",
     expectedMapping: "expected a mapping",
@@ -284,6 +290,8 @@ register("settings", {
     syncedPublicLink: "On the public link these are read-only: a change here stays in this browser.",
     deviceTitle: "This device only", deviceLead: "The tour, text size, view fit, the sidebar shown or hidden, panel widths and desktop notifications stay on each device.",
     sec_agents: "Agents",
+    "sec_windows-cli": "Windows CLI",
+    sec_runtimes: "Runtime",
     "sec_agent-defaults": "Agent defaults", sec_chat: "Chat & connections", "sec_web-dashboard": "Web dashboard", sec_access: "Access & security",
     sec_advanced: "Advanced", sec_look: "Look", grp_you: "You", grp_fleet: "Fleet",
     classicDefaultsTitle: "ClassicBot defaults", publicLinkTitle: "Public link & fixed address", webDashboardTitle: "Dashboard features", webSettingsLabel: "Web settings",
@@ -746,6 +754,7 @@ register("settings", {
     systemPrompt: "System prompt",
     tags: "標籤",
     generalTopicField: "General topic（fleet 分派器）",
+    oneGeneral: "{0} 已經是 General，請先取消勾選它。",
     runtimeResources: "執行環境與資源",
     autoPause: "閒置後自動暫停",
     minutes: "分鐘",
@@ -916,6 +925,11 @@ register("settings", {
     backendNotInstalled: "未安裝", backendNotSignedIn: "未登入（請用 /login）", backendTooOld: "需要 {0} 以上版本", backendUnchecked: "尚未檢查",
     modelNotListed: "目前使用中 — 不在這個 CLI 的清單裡", modelOther: "其他…", modelOtherLabel: "模型名稱", modelOtherPlaceholder: "這個 CLI 接受的模型名稱",
     modelNone: "— 無 —", inheritValue: "沿用（{0}）", modelCliDefault: "CLI 自己的預設",
+    modelCatalogLoading: "正在載入這個 CLI 的模型…", modelCatalogFailed: "模型清單載入失敗，可先使用預設或輸入模型名稱。",
+    modelCatalogEmpty: "目前沒有可讀取的模型清單，可使用預設或輸入模型名稱。",
+    modelCatalogCliList: "來源：CLI 列舉結果。", modelCatalogCliCache: "來源：本機 CLI 模型快取。",
+    modelCatalogOfficial: "來源：官方候選清單，實際可用性依帳戶與服務設定。",
+    modelCatalogCached: "來源：AgEnD 已快取的 CLI／帳號模型清單。", modelCatalogRetry: "重試", modelCatalogRefresh: "更新模型",
     readyApply: "可套用變更",
     copied: "已複製",
     expectedMapping: "預期為 mapping",
@@ -941,6 +955,8 @@ register("settings", {
     syncedPublicLink: "公開連結只能讀取這些設定：在這裡變更只會留在這個瀏覽器。",
     deviceTitle: "只限這台裝置", deviceLead: "導覽、文字大小、視圖寬度、側欄顯示或隱藏、面板寬度與桌面通知，每台裝置各自保留。",
     sec_agents: "Agent",
+    "sec_windows-cli": "Windows CLI",
+    sec_runtimes: "Runtime",
     "sec_agent-defaults": "Agent 預設值", sec_chat: "聊天與連線", "sec_web-dashboard": "網頁儀表板", sec_access: "存取與安全",
     sec_advanced: "進階", sec_look: "外觀", grp_you: "你自己", grp_fleet: "整個 Fleet",
     classicDefaultsTitle: "ClassicBot 預設值", publicLinkTitle: "公開連結與固定網址", webDashboardTitle: "儀表板功能", webSettingsLabel: "網頁設定",

package/dist/ui/shared/app-i18n.js

@@ -111,7 +111,7 @@ register("app", {
     confirmTitle: "Please confirm", confirmOk: "Continue", cancel: "Cancel",
     sidePanelLeave: "Leave {0} without saving? Your changes there will be lost.", sidePanelDiscard: "Discard changes",
     // The server's own wording (src/locale.ts needs.reason.*), so the web says what Discord says.
-    needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_question: "Asking you a question", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_backend_signin: "Backend sign-in needed", needs_reason_config_invalid: "Configuration file needs attention", needs_reason_config_fallback: "Running on stored configuration", config_history_edit: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. The next restart would use the stored valid copy from {4}. Correct the YAML error; the file has not been changed by AgEnD.", config_history_no_history: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. No stored valid copy is available, so the next restart cannot recover automatically. Correct the YAML error before restarting; the file has not been changed by AgEnD.", config_history_fallback: "{0}, line {1}, column {2}: {3}. AgEnD started using the stored valid copy from {4}. Correct the YAML error and reload the settings. The file on disk has not been changed by AgEnD.", needs_reason_crashed: "Crashed", needs_reason_usage_limit: "Usage limit reached · reset time unknown", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
+    needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_question: "Asking you a question", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_backend_signin: "Backend sign-in needed", needs_reason_config_invalid: "Configuration file needs attention", needs_reason_config_fallback: "Running on stored configuration", config_history_edit: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. The next restart would use the stored valid copy from {4}. Correct the YAML error; the file has not been changed by AgEnD.", config_history_no_history: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. No stored valid copy is available, so the next restart cannot recover automatically. Correct the YAML error before restarting; the file has not been changed by AgEnD.", config_history_fallback: "{0}, line {1}, column {2}: {3}. AgEnD started using the stored valid copy from {4}. Correct the YAML error and reload the settings. The file on disk has not been changed by AgEnD.", needs_reason_general_windows_offline: "General’s Windows PC is offline", needs_reason_general_location_hold: "Run General on", needs_reason_native_pane_hold: "Windows agent needs attention", needs_reason_crashed: "Crashed", needs_reason_usage_limit: "Usage limit reached · reset time unknown", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
   },
   "zh-TW": {
     brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet 概覽", view: "檢視", settings: "設定", instances: "Instances", newInstance: "新增 instance", newAgent: "新增 Agent",
@@ -156,6 +156,6 @@ register("app", {
     search: "搜尋", searchTitle: "搜尋聊天、agent 之間的訊息與任務（{0}）",
     confirmTitle: "請確認", confirmOk: "繼續", cancel: "取消",
     sidePanelLeave: "不儲存就離開「{0}」？你在那裡的修改會遺失。", sidePanelDiscard: "捨棄修改",
-    needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_question: "正在問你問題", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_backend_signin: "後端需要登入", needs_reason_config_invalid: "設定檔需要處理", needs_reason_config_fallback: "正在使用儲存的設定副本", config_history_edit: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。下次重新啟動會改用 {4} 儲存的有效副本。請修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_no_history: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。沒有可用的有效副本，下次重新啟動將無法自動恢復。請在重新啟動前修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_fallback: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 已使用 {4} 儲存的有效副本啟動。請修正 YAML 錯誤並重新載入設定。AgEnD 未更動磁碟上的檔案。", needs_reason_crashed: "已崩潰", needs_reason_usage_limit: "用量已達上限 · 恢復時間未知", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
+    needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_question: "正在問你問題", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_backend_signin: "後端需要登入", needs_reason_config_invalid: "設定檔需要處理", needs_reason_config_fallback: "正在使用儲存的設定副本", config_history_edit: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。下次重新啟動會改用 {4} 儲存的有效副本。請修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_no_history: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。沒有可用的有效副本，下次重新啟動將無法自動恢復。請在重新啟動前修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_fallback: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 已使用 {4} 儲存的有效副本啟動。請修正 YAML 錯誤並重新載入設定。AgEnD 未更動磁碟上的檔案。", needs_reason_general_windows_offline: "General 所在的 Windows 電腦已離線", needs_reason_general_location_hold: "General 執行位置", needs_reason_native_pane_hold: "Windows 代理需要處理", needs_reason_crashed: "已崩潰", needs_reason_usage_limit: "用量已達上限 · 恢復時間未知", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
   },
 });

package/dist/ui/shared/app-route.js

@@ -6,11 +6,11 @@ export const FLEET_TABS = ["tasks", "schedules", "teams", "org", "cache", "usage
 // #2347: two groups — "You" changes only you or this browser; "Fleet" changes AgEnD for everyone.
 export const SETTINGS_GROUPS = Object.freeze([
   Object.freeze({ id: "you", sections: Object.freeze(["preferences", "look"]) }),
-  Object.freeze({ id: "fleet", sections: Object.freeze(["agents", "agent-defaults", "chat", "web-dashboard", "access", "advanced"]) }),
+  Object.freeze({ id: "fleet", sections: Object.freeze(["agents", "runtimes", "agent-defaults", "chat", "web-dashboard", "access", "advanced"]) }),
 ]);
 export const SETTINGS_SECTIONS = Object.freeze(SETTINGS_GROUPS.flatMap((g) => g.sections));
 /** #2347: the sections' names before the regrouping (links and bookmarks keep working) and where each one went. */
-export const LEGACY_SETTINGS = Object.freeze({ device: "preferences", appearance: "look", general: "agent-defaults", bots: "chat", classic: "chat#classicbot", web: "access" });
+export const LEGACY_SETTINGS = Object.freeze({ device: "preferences", appearance: "look", general: "agent-defaults", bots: "chat", classic: "chat#classicbot", web: "access", "windows-cli":"runtimes" });
 const legacySection = (name) => (Object.prototype.hasOwnProperty.call(LEGACY_SETTINGS, name) ? LEGACY_SETTINGS[name] : null);
 const MAX_INSTANCE_NAME = 128;
 const PATH_SEPARATOR_OR_CONTROL = /[/\\\u0000-\u001f\u007f]/;
@@ -28,6 +28,9 @@ export function isSafeInstanceName(name) {
  */
 export function parseRoute(pathname) {
   if (pathname === "/ui") return { panel: "chat", instance: null };
+  if (pathname === "/ui/windows-cli") return { panel: "settings", section: "runtimes" };
+  const windowsAgent = /^\/ui\/windows-agents\/([a-f0-9-]{36})$/i.exec(pathname);
+  if (windowsAgent) return { panel: "windows-agent", instance: windowsAgent[1] };
   if (pathname === "/ui/fleet") return { panel: "fleet", tab: "tasks" };
   if (pathname === "/ui/needs") return { panel: "needs" };
   if (pathname === NOTICES_PATH) return { panel: "notices" };              // #2910 D2: a web-only fleet's Notices
@@ -108,6 +111,7 @@ export function legacySettingsTarget(pathname) {
 }
 export function routePath(route) {
   if (!route) return "/ui";
+  if (route.panel === "windows-agent") return `/ui/windows-agents/${route.instance}`;
   if (route.panel === "fleet") return fleetPath(route.tab);
   if (route.panel === "settings") return settingsPath(route.section);
   if (route.panel === "needs") return NEEDS_PATH;

package/dist/ui/shared/app-shell.js

@@ -331,7 +331,8 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
   const navLink = (panel, href, icon, label, count = 0, countText = "app.needsCount") => html`<a class=${`side-row${on(panel) ? " active" : ""}`} href=${href}
     aria-current=${on(panel) ? "page" : undefined} aria-label=${count ? `${label} (${t(countText, count)})` : undefined} onClick=${closeDrawer}>
     <${Icon} name=${icon} /><span class="grow">${label}</span>${count ? html`<span class="nav-count" aria-hidden="true">${count}</span>` : null}</a>`;
-  const needsCount = Array.isArray(app.needs) ? app.needs.length : 0;
+  // alpha.2 (M-2300): an agent's request waiting for this web-only fleet's owner counts too (only the owner's page has any).
+  const needsCount = (Array.isArray(app.needs) ? app.needs.length : 0) + (Array.isArray(app.proposals) ? app.proposals.length : 0);
   // View-only (an anonymous reader, #1408 §3): View and a way to sign in — nothing that needs a session is rendered.
   if (viewOnly) {
     return html`<aside id="sidebar" class="sidebar" aria-label=${t("app.menu")}>
@@ -502,7 +503,7 @@ function BottomTabs({ route, viewOnly }) {
   // last tab), Settings.
   return html`<nav data-trust="navigation" class="tabs" aria-label=${t("app.menu")}>
     ${tab(chatHref, "chat", t("app.chat"), !!open || (!!route && route.panel === "chat"), anyAwaiting)}
-    ${tab(NEEDS_PATH, "inbox", t("app.needsTab"), route && route.panel === "needs", (app.needs || []).length, t("app.needsCount", (app.needs || []).length))}
+    ${tab(NEEDS_PATH, "inbox", t("app.needsTab"), route && route.panel === "needs", (app.needs || []).length + (app.proposals || []).length, t("app.needsCount", (app.needs || []).length + (app.proposals || []).length))}
     ${tab(fleetEntryPath(route), "fleet", t("app.fleet"), route && route.panel === "fleet")}
     ${tab(settingsPath(), "settings", t("app.settings"), route && route.panel === "settings")}
   </nav>`;

package/dist/ui/shared/app-store.js

@@ -56,6 +56,7 @@ export function applyStatus(d) {
   appStore.set({ ready: true, instances: d.instances, uptime: d.uptime ?? 0, exec, awaiting,
     startup: d.startup?.phase === "starting" ? d.startup : null,
     connections: typeof d.connections === "number" ? d.connections : null,
+    windowsCli: d.windows_cli === true,
     // #1665: the host preferences' revision (app-prefs.js re-reads them when it moves).
     prefsRev: typeof d.prefs_rev === "number" ? d.prefs_rev : null,
     // #1629: the agents' themes' revision (app-themes.js re-reads them when it moves).

package/dist/ui/shared/app-stream.js

@@ -36,11 +36,13 @@
 // #1918: traffic — a message between instances moved; delegation — a task opened, or its report closed it (SSE only: the
 // org canvas reads /ui/traffic when it has no stream).
 // #2233: backend_login — a dashboard sign-in started, moved or ended (no details: the page reads its own view).
+// alpha.2 (M-2300): agent_proposals — an agent's Windows request came or was decided (no details: a web-only fleet's
+// owner reads GET /ui/agent-proposals).
 // tasks — the task board changed: the card numbers a write touched (SSE only: the board reads again when it is shown).
 // offices — the stored offices changed ({ rev }; SSE only: the Office view reads /ui/offices again).
 // office_skins — a skin pack was uploaded or deleted ({ rev }; SSE only: the Office view reads /ui/office-skins again).
 // office_acts — the agents' live acts in the Office view changed ({ acts }, #2578; a poll page reads /ui/office-acts).
-const EVENTS = ["status", "message", "agent_reply_live", "delivery", "deliveries", "prompt", "prompts", "prompt_resolved", "activity", "needs", "reply_buttons", "reactions", "steps_tick", "clock", "traffic", "delegation", "backend_login", "tasks", "offices", "office_skins", "office_acts", "office_pack_changes", "notice"];
+const EVENTS = ["status", "message", "agent_reply_live", "delivery", "deliveries", "prompt", "prompts", "prompt_resolved", "activity", "needs", "reply_buttons", "reactions", "steps_tick", "clock", "traffic", "delegation", "backend_login", "tasks", "offices", "office_skins", "office_acts", "office_pack_changes", "agent_proposals", "notice"];
 const MAX_HELD = 1000;                    // live events held during one catch-up read; more → read again afterwards
 const RETRY_DELAYS = [1000, 2000, 4000];  // after the first failed catch-up read; then it waits for Retry
 const POLL_LIMIT_MS = 10000;              // a poll that has not answered by then counts as failed