@songsid/agend 2.3.5-alpha.2 → 2.3.5-alpha.4

package/dist/agend-home.d.ts

@@ -3,3 +3,16 @@ export declare function ensureAgendHome(dir: string, options?: {
     label?: string;
     log?: (line: string) => void;
 }): void;
+/** #3009: how long the off-thread home check may take before the caller is told it could not be done. */
+export declare const AGEND_HOME_CHECK_MS = 10000;
+/**
+ * #3009 (#3017 review, Prism P1): ensureAgendHome — the very same checks (ownership, symlink and descriptor fences) —
+ * run on a short-lived worker thread, so a home filesystem that stops answering stalls that worker, never the fleet's
+ * event loop and its systemd watchdog. Bounded: past `timeoutMs` it rejects (the worker, possibly stuck in the kernel,
+ * is let go — unref'd, it never holds the process open). Only for paths that may write on a user's request (a login's
+ * tunnel lease); startup keeps the synchronous call.
+ */
+export declare function ensureAgendHomeOffThread(dir: string, options?: {
+    create?: boolean;
+    label?: string;
+}, timeoutMs?: number): Promise<void>;

package/dist/agend-home.js

@@ -1,7 +1,49 @@
 import { createRequire } from "node:module";
+import { Worker } from "node:worker_threads";
 // The installer and runtime enforce the same root policy before writing credentials or operator sockets.
 const { ensurePrivateHome } = createRequire(import.meta.url)("../launcher/private-home.cjs");
 export function ensureAgendHome(dir, options) {
     ensurePrivateHome(dir, options);
 }
+/** #3009: how long the off-thread home check may take before the caller is told it could not be done. */
+export const AGEND_HOME_CHECK_MS = 10_000;
+const privateHomeModule = createRequire(import.meta.url).resolve("../launcher/private-home.cjs");
+/**
+ * #3009 (#3017 review, Prism P1): ensureAgendHome — the very same checks (ownership, symlink and descriptor fences) —
+ * run on a short-lived worker thread, so a home filesystem that stops answering stalls that worker, never the fleet's
+ * event loop and its systemd watchdog. Bounded: past `timeoutMs` it rejects (the worker, possibly stuck in the kernel,
+ * is let go — unref'd, it never holds the process open). Only for paths that may write on a user's request (a login's
+ * tunnel lease); startup keeps the synchronous call.
+ */
+export function ensureAgendHomeOffThread(dir, options = {}, timeoutMs = AGEND_HOME_CHECK_MS) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const done = (err) => { if (settled)
+            return; settled = true; clearTimeout(timer); if (err)
+            reject(err);
+        else
+            resolve(); };
+        let worker;
+        try {
+            worker = new Worker(`const { parentPort, workerData } = require("node:worker_threads");
+try { require(workerData.module).ensurePrivateHome(workerData.dir, workerData.options); parentPort.postMessage({ ok: true }); }
+catch (e) { parentPort.postMessage({ ok: false, message: e && e.message ? String(e.message) : String(e), code: e && e.code }); }`, { eval: true, workerData: { module: privateHomeModule, dir, options } });
+        }
+        catch (err) {
+            reject(err);
+            return;
+        }
+        worker.unref();
+        const timer = setTimeout(() => {
+            done(Object.assign(new Error(`the AgEnD home could not be checked in time (${dir}): its filesystem did not answer`), { code: "ETIMEDOUT" }));
+            void worker.terminate().catch(() => { });
+        }, timeoutMs);
+        timer.unref?.();
+        worker.once("message", (m) => {
+            done(m.ok ? undefined : Object.assign(new Error(m.message ?? "AgEnD home check failed"), m.code ? { code: m.code } : {}));
+            void worker.terminate().catch(() => { });
+        });
+        worker.once("error", (err) => done(err instanceof Error ? err : new Error(String(err))));
+    });
+}
 //# sourceMappingURL=agend-home.js.map

package/dist/agend-home.js.map

@@ -1 +1 @@
-{"version":3,"file":"agend-home.js","sourceRoot":"","sources":["../src/agend-home.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,yGAAyG;AACzG,MAAM,EAAE,iBAAiB,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,8BAA8B,CAE1F,CAAC;AACF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,OAA4E;IACvH,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC"}
+{"version":3,"file":"agend-home.js","sourceRoot":"","sources":["../src/agend-home.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,yGAAyG;AACzG,MAAM,EAAE,iBAAiB,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,8BAA8B,CAE1F,CAAC;AACF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,OAA4E;IACvH,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAEjG;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,OAAO,GAAyC,EAAE,EAAE,SAAS,GAAG,mBAAmB;IACvI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;YAAM,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAClI,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,MAAM,CAAC;;iIAEuG,EACzH,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAY,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,GAAG,kCAAkC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAC7I,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqC,CAAC,CAAC,CAAC;QAC7E,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAmD,EAAE,EAAE;YAC7E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,yBAAyB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1H,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAc,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-runtime-api.d.ts

@@ -0,0 +1,4 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { WebApiContext } from "./web-api.js";
+/** Explicit dashboard-only runtime moves. Agent tool schemas do not offer this endpoint. */
+export declare function handleAgentRuntimeChange(req: IncomingMessage, res: ServerResponse, url: URL, ctx: WebApiContext): boolean;

package/dist/agent-runtime-api.js

@@ -0,0 +1,59 @@
+import { readBoundedWebBody } from "./web-body.js";
+import { nativeCliAuthorization } from "./windows-cli-api.js";
+function json(res, status, value) { if (!res.destroyed && !res.writableEnded) {
+    res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(value));
+} }
+/** Explicit dashboard-only runtime moves. Agent tool schemas do not offer this endpoint. */
+export function handleAgentRuntimeChange(req, res, url, ctx) {
+    const match = /^\/ui\/instances\/([^/]+)\/runtime$/.exec(url.pathname);
+    if (!match)
+        return false;
+    const allowed = () => nativeCliAuthorization(req, url, ctx);
+    if (!allowed()) {
+        json(res, 403, { error: "Runtime changes require a dashboard administrator" });
+        return true;
+    }
+    let name;
+    try {
+        name = decodeURIComponent(match[1]);
+    }
+    catch {
+        json(res, 400, { error: "Invalid Agent name" });
+        return true;
+    }
+    if (!Object.hasOwn(ctx.fleetConfig?.instances ?? {}, name)) {
+        json(res, 404, { error: "Agent not found" });
+        return true;
+    }
+    if (!ctx.agentRuntimeChanges) {
+        json(res, 503, { error: "Runtime changes are unavailable on this host" });
+        return true;
+    }
+    if (req.method === "GET") {
+        json(res, 200, ctx.agentRuntimeChanges().describe(name));
+        return true;
+    }
+    if (req.method !== "POST") {
+        json(res, 405, { error: "Method not allowed" });
+        return true;
+    }
+    void (async () => {
+        try {
+            const raw = await readBoundedWebBody(req, 4096);
+            if (!allowed()) {
+                json(res, 403, { error: "Authorization expired" });
+                return;
+            }
+            if (req.aborted || res.destroyed)
+                return;
+            const input = JSON.parse(raw.toString("utf8")), result = await ctx.agentRuntimeChanges().change(name, input, allowed);
+            json(res, 200, result);
+        }
+        catch (error) {
+            json(res, allowed() ? 409 : 403, { error: allowed() ? (error instanceof Error ? error.message : "Could not change Runtime") : "Authorization expired" });
+        }
+    })();
+    return true;
+}
+//# sourceMappingURL=agent-runtime-api.js.map

package/dist/agent-runtime-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime-api.js","sourceRoot":"","sources":["../src/agent-runtime-api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,kBAAkB,EAAC,MAAM,eAAe,CAAC;AACjD,OAAO,EAAC,sBAAsB,EAAC,MAAM,sBAAsB,CAAC;AAC5D,SAAS,IAAI,CAAC,GAAkB,EAAC,MAAa,EAAC,KAAa,IAAE,IAAG,CAAC,GAAG,CAAC,SAAS,IAAE,CAAC,GAAG,CAAC,aAAa,EAAC,CAAC;IAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,eAAe,EAAC,UAAU,EAAC,CAAC,CAAC;IAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAAC,CAAA,CAAC;AAC3N,4FAA4F;AAC5F,MAAM,UAAU,wBAAwB,CAAC,GAAmB,EAAC,GAAkB,EAAC,GAAO,EAAC,GAAiB;IACxG,MAAM,KAAK,GAAC,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAA,IAAG,CAAC,KAAK;QAAC,OAAO,KAAK,CAAC;IAC5F,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,sBAAsB,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,OAAO,EAAE,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,mDAAmD,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC5J,IAAI,IAAW,CAAC;IAAA,IAAG,CAAC;QAAA,IAAI,GAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oBAAoB,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACrH,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,IAAE,EAAE,EAAC,IAAI,CAAC,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC7G,IAAG,CAAC,GAAG,CAAC,mBAAmB,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,8CAA8C,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC/G,IAAG,GAAG,CAAC,MAAM,KAAG,KAAK,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC3F,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oBAAoB,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAChF,KAAI,CAAC,KAAK,IAAE,EAAE;QACb,IAAG,CAAC;YACH,MAAM,GAAG,GAAC,MAAM,kBAAkB,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;YAAA,IAAG,CAAC,OAAO,EAAE,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,uBAAuB,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAClH,IAAG,GAAG,CAAC,OAAO,IAAE,GAAG,CAAC,SAAS;gBAAC,OAAO;YACrC,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAC,MAAM,GAAC,MAAM,GAAG,CAAC,mBAAoB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAC,KAAK,EAAC,OAAO,CAAC,CAAC;YAChH,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,CAAC,GAAG,EAAC,OAAO,EAAE,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,EAAC,KAAK,EAAC,OAAO,EAAE,CAAA,CAAC,CAAA,CAAC,KAAK,YAAY,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,CAAA,CAAC,CAAA,0BAA0B,CAAC,CAAA,CAAC,CAAA,uBAAuB,EAAC,CAAC,CAAC;QAAA,CAAC;IACxJ,CAAC,CAAC,EAAE,CAAC;IAAA,OAAO,IAAI,CAAC;AAClB,CAAC"}

package/dist/agent-runtime-change.d.ts

@@ -0,0 +1,74 @@
+/** Administrator-only moves of one Fleet identity. Provider sessions never cross machines or providers. */
+import { z } from "zod";
+import type { InstanceConfig } from "./types.js";
+export declare const AgentRuntimeChangeInput: z.ZodObject<{
+    requestId: z.ZodString;
+    expectedRevision: z.ZodString;
+    runtime: z.ZodEnum<{
+        windows: "windows";
+        wsl: "wsl";
+    }>;
+    machineId: z.ZodOptional<z.ZodString>;
+    backend: z.ZodEnum<{
+        antigravity: "antigravity";
+        "claude-code": "claude-code";
+        codex: "codex";
+        grok: "grok";
+        "kiro-cli": "kiro-cli";
+        muse: "muse";
+        opencode: "opencode";
+    }>;
+    model: z.ZodDefault<z.ZodString>;
+    directory: z.ZodDefault<z.ZodString>;
+    sandbox: z.ZodDefault<z.ZodEnum<{
+        "read-only": "read-only";
+        "workspace-write": "workspace-write";
+    }>>;
+    adapter: z.ZodDefault<z.ZodEnum<{
+        exec: "exec";
+        pane: "pane";
+    }>>;
+    startNewConversation: z.ZodLiteral<true>;
+}, z.core.$strict>;
+export declare const GENERAL_USES_LOCATION_SWITCH = "General is moved from Settings \u2192 Agent defaults \u2192 General location, not from Runtime settings";
+export type AgentRuntimeTarget = z.infer<typeof AgentRuntimeChangeInput>;
+export interface PreparedAgentRuntime {
+    config: InstanceConfig;
+    discard(): void;
+    current?(): boolean;
+}
+export interface AgentRuntimeChangeHost {
+    config(name: string): InstanceConfig | undefined;
+    defaults(): unknown;
+    generation(name: string): unknown;
+    epoch(name: string): number;
+    backendState?(name: string, backend: string): string | undefined;
+    transition<T>(name: string, run: (stop: () => Promise<void>) => Promise<T>): Promise<T>;
+    /** Must reject busy, queued and unknown source work, including retained native owners. */
+    idle(name: string): boolean;
+    prepare(name: string, before: InstanceConfig, target: AgentRuntimeTarget, current: () => boolean): Promise<PreparedAgentRuntime>;
+    closed(name: string, before: InstanceConfig): Promise<boolean>;
+    /** Prepare fresh-session pointers without erasing provider history; returns a rollback for an unsaved change. */
+    fresh(name: string, requestId: string): () => void;
+    save(name: string, before: InstanceConfig, next: InstanceConfig): void;
+    changed(name: string): void;
+}
+export declare class AgentRuntimeChanges {
+    private readonly host;
+    private attempts;
+    constructor(host: AgentRuntimeChangeHost);
+    private isGeneral;
+    describe(name: string): {
+        revision: string;
+        runtime: string;
+        machineId: string | undefined;
+        backend: string;
+        backendState: string | undefined;
+        directory: string;
+        model: string;
+        general: boolean;
+        adapter: "exec" | "pane";
+        sandbox: "read-only" | "workspace-write";
+    };
+    change(name: string, raw: unknown, authorized: () => boolean): Promise<unknown>;
+}

package/dist/agent-runtime-change.js

@@ -0,0 +1,102 @@
+/** Administrator-only moves of one Fleet identity. Provider sessions never cross machines or providers. */
+import { z } from "zod";
+import { settingsFingerprint } from "./settings-transaction.js";
+export const AgentRuntimeChangeInput = z.object({
+    requestId: z.string().uuid(), expectedRevision: z.string().regex(/^[a-f0-9]{64}$/),
+    runtime: z.enum(["wsl", "windows"]), machineId: z.string().uuid().optional(),
+    backend: z.enum(["claude-code", "codex", "opencode", "kiro-cli", "antigravity", "grok", "muse"]),
+    model: z.string().max(160).default(""), directory: z.string().max(1024).default(""),
+    sandbox: z.enum(["read-only", "workspace-write"]).default("read-only"),
+    adapter: z.enum(["exec", "pane"]).default("exec"), startNewConversation: z.literal(true),
+}).strict().superRefine((value, ctx) => {
+    if (value.runtime === "wsl" && (value.machineId || value.adapter !== "exec"))
+        ctx.addIssue({ code: "custom", message: "Choose the Fleet host for a WSL/Linux agent" });
+    if (value.runtime === "windows" && value.adapter === "pane" && !['codex', 'claude-code'].includes(value.backend))
+        ctx.addIssue({ code: "custom", message: "Persistent Windows terminals support Codex and Claude Code" });
+});
+export const GENERAL_USES_LOCATION_SWITCH = "General is moved from Settings → Agent defaults → General location, not from Runtime settings";
+export class AgentRuntimeChanges {
+    host;
+    attempts = new Map();
+    constructor(host) {
+        this.host = host;
+    }
+    isGeneral(name, config) { return config?.general_topic === true || name === "general"; }
+    describe(name) {
+        const config = this.host.config(name);
+        if (!config)
+            throw Error("Agent not found");
+        const backend = config.backend || this.host.defaults()?.backend || "claude-code";
+        return { revision: settingsFingerprint([config, this.host.defaults(), this.host.generation(name), this.host.epoch(name)]),
+            runtime: config.runtime === "windows" ? "windows" : "wsl", machineId: config.machine_id, backend, backendState: this.host.backendState?.(name, backend),
+            directory: config.working_directory, model: config.model ?? "", general: this.isGeneral(name, config), adapter: config.native_adapter ?? "exec", sandbox: config.native_sandbox ?? "read-only" };
+    }
+    change(name, raw, authorized) {
+        const target = AgentRuntimeChangeInput.parse(raw), digest = settingsFingerprint(target), old = this.attempts.get(name);
+        if (!authorized())
+            throw Error("Runtime change requires a current dashboard administrator");
+        // General's location has its own journalled switch (Agent defaults → General location, #3036): it holds deliveries,
+        // confirms the old host exited and clears the Linux-only fields. This path does none of that, so it is not offered.
+        if (this.isGeneral(name, this.host.config(name)))
+            throw Error(GENERAL_USES_LOCATION_SWITCH);
+        if (old?.id === target.requestId) {
+            if (old.digest !== digest)
+                throw Error("Runtime request ID belongs to another change");
+            return old.result;
+        }
+        if (old?.pending)
+            throw Error("A Runtime change is already in progress for this Agent");
+        if (this.describe(name).revision !== target.expectedRevision)
+            throw Error("Agent settings changed; reopen Runtime settings before switching");
+        // One synchronous claim per Agent before preparation, transition queueing or workspace allocation.
+        const attempt = { id: target.requestId, digest, pending: true, result: null };
+        this.attempts.set(name, attempt);
+        attempt.result = Promise.resolve().then(() => this.host.transition(name, async (stop) => {
+            if (this.describe(name).revision !== target.expectedRevision)
+                throw Error("Agent settings changed while waiting to switch Runtime");
+            const before = this.host.config(name), baseline = settingsFingerprint([this.host.defaults(), this.host.generation(name)]);
+            let epoch = this.host.epoch(name), revoked = false, prepared;
+            const current = () => {
+                if (revoked)
+                    return false;
+                if (!authorized() || this.host.config(name) !== before || this.host.epoch(name) !== epoch || settingsFingerprint([this.host.defaults(), this.host.generation(name)]) !== baseline || !this.host.idle(name) || prepared?.current?.() === false)
+                    revoked = true;
+                return !revoked;
+            };
+            if (!current())
+                throw Error("Wait for this Agent and its queued work to finish before switching Runtime");
+            let undoSession, saved = false;
+            try {
+                prepared = await this.host.prepare(name, before, target, current);
+                if (!current())
+                    throw Error("Runtime change was revoked or the Agent became busy during preparation");
+                // stop() owns exactly one epoch advance, even for the exec adapter. Any other advance permanently revokes us.
+                epoch++;
+                await stop();
+                if (!current())
+                    throw Error("Runtime change lost its source owner while stopping the old CLI");
+                if (!await this.host.closed(name, before))
+                    throw Error("The old CLI exit is unconfirmed; Runtime settings were not changed");
+                if (!current())
+                    throw Error("Runtime change was revoked while checking the old CLI exit");
+                if (target.runtime === "wsl")
+                    undoSession = this.host.fresh(name, target.requestId);
+                if (!current())
+                    throw Error("Runtime change authority expired before saving");
+                this.host.save(name, before, prepared.config);
+                saved = true;
+                this.host.changed(name);
+                return { ok: true, name, runtime: target.runtime, machineId: target.machineId, backend: target.backend, started: false, historyPreserved: true };
+            }
+            catch (error) {
+                if (!saved) {
+                    undoSession?.();
+                    prepared?.discard();
+                }
+                throw error;
+            }
+        })).finally(() => { attempt.pending = false; });
+        return attempt.result;
+    }
+}
+//# sourceMappingURL=agent-runtime-change.js.map

package/dist/agent-runtime-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime-change.js","sourceRoot":"","sources":["../src/agent-runtime-change.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChF,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACzE,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAC,OAAO,EAAC,UAAU,EAAC,UAAU,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IACzF,KAAK,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACpE,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACtF,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;IACnC,IAAG,KAAK,CAAC,OAAO,KAAG,KAAK,IAAE,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,MAAM,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,6CAA6C,EAAC,CAAC,CAAC;IACxJ,IAAG,KAAK,CAAC,OAAO,KAAG,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,MAAM,IAAE,CAAC,CAAC,OAAO,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,4DAA4D,EAAC,CAAC,CAAC;AAC5M,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAC,+FAA+F,CAAC;AAmB1I,MAAM,OAAO,mBAAmB;IAED,IAAI;IADzB,QAAQ,GAAC,IAAI,GAAG,EAA4E,CAAC;IACrG,YAA6B,IAA2B;oBAA3B,IAAI;IAAyB,CAAC;IACnD,SAAS,CAAC,IAAW,EAAC,MAA+B,IAAE,OAAO,MAAM,EAAE,aAAa,KAAG,IAAI,IAAE,IAAI,KAAG,SAAS,CAAC,CAAA,CAAC;IACtH,QAAQ,CAAC,IAAW;QAClB,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC,MAAM;YAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,IAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAkC,EAAE,OAAO,IAAE,aAAa,CAAC;QAC5G,OAAO,EAAC,QAAQ,EAAC,mBAAmB,CAAC,CAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAClH,OAAO,EAAC,MAAM,CAAC,OAAO,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,KAAK,EAAC,SAAS,EAAC,MAAM,CAAC,UAAU,EAAC,OAAO,EAAC,YAAY,EAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAC,OAAO,CAAC;YAC1I,SAAS,EAAC,MAAM,CAAC,iBAAiB,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,IAAE,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAC,MAAM,CAAC,EAAC,OAAO,EAAC,MAAM,CAAC,cAAc,IAAE,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,cAAc,IAAE,WAAW,EAAC,CAAC;IACpL,CAAC;IACD,MAAM,CAAC,IAAW,EAAC,GAAW,EAAC,UAAsB;QACnD,MAAM,MAAM,GAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,MAAM,GAAC,mBAAmB,CAAC,MAAM,CAAC,EAAC,GAAG,GAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/G,IAAG,CAAC,UAAU,EAAE;YAAC,MAAM,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC1F,oHAAoH;QACpH,oHAAoH;QACpH,IAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACzF,IAAG,GAAG,EAAE,EAAE,KAAG,MAAM,CAAC,SAAS,EAAC,CAAC;YAAA,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM;gBAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAAA,OAAO,GAAG,CAAC,MAAM,CAAC;QAAA,CAAC;QACrI,IAAG,GAAG,EAAE,OAAO;YAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACtF,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAG,MAAM,CAAC,gBAAgB;YAAC,MAAM,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC1I,mGAAmG;QACnG,MAAM,OAAO,GAAC,EAAC,EAAE,EAAC,MAAM,CAAC,SAAS,EAAC,MAAM,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,EAAC,IAAmC,EAAC,CAAC;QACnG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE;YAC9E,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAG,MAAM,CAAC,gBAAgB;gBAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAChI,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAE,EAAC,QAAQ,GAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,IAAI,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,OAAO,GAAC,KAAK,EAAC,QAAuC,CAAC;YAC3M,MAAM,OAAO,GAAC,GAAE,EAAE;gBAChB,IAAG,OAAO;oBAAC,OAAO,KAAK,CAAC;gBACxB,IAAG,CAAC,UAAU,EAAE,IAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAG,MAAM,IAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAG,KAAK,IAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAG,QAAQ,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAG,KAAK;oBAAC,OAAO,GAAC,IAAI,CAAC;gBACvO,OAAO,CAAC,OAAO,CAAC;YAClB,CAAC,CAAC;YACF,IAAG,CAAC,OAAO,EAAE;gBAAC,MAAM,KAAK,CAAC,4EAA4E,CAAC,CAAC;YACxG,IAAI,WAAgC,EAAC,KAAK,GAAC,KAAK,CAAC;YACjD,IAAG,CAAC;gBACF,QAAQ,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,CAAC,CAAC;gBAC7D,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBACpG,8GAA8G;gBAC9G,KAAK,EAAE,CAAC;gBAAA,MAAM,IAAI,EAAE,CAAC;gBACrB,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAC;gBAC7F,IAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC;oBAAC,MAAM,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBAC1H,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACxF,IAAG,MAAM,CAAC,OAAO,KAAG,KAAK;oBAAC,WAAW,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7E,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,GAAC,IAAI,CAAC;gBACvD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO,EAAC,EAAE,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,IAAI,EAAC,CAAC;YACrI,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBACZ,IAAG,CAAC,KAAK,EAAC,CAAC;oBAAA,WAAW,EAAE,EAAE,CAAC;oBAAA,QAAQ,EAAE,OAAO,EAAE,CAAC;gBAAA,CAAC;gBAChD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,OAAO,CAAC,OAAO,GAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;CACF"}

package/dist/auth-api.d.ts

@@ -51,6 +51,26 @@ export interface AuthApiContext {
     authorizeHostSession?(record: SessionRecord, peer: WebPeer): void;
     /** #2910 D5: no Discord or Telegram connection at all — the sign-in page leads with `agend web --code`. */
     isWebOnlyFleet?(): boolean;
+    /**
+     * #3008: a code from the authenticator app, typed at the outside link's sign-in (FleetManager.outsideSignIn): "ok"
+     * only for the link connections from outside opened (`exposureId`), with a code not used before.
+     */
+    outsideSignIn?(exposureId: string | undefined, code: string): {
+        kind: "ok";
+    } | {
+        kind: "wrong";
+    } | {
+        kind: "paused";
+        retryAfterMs: number;
+    } | {
+        kind: "closed";
+    } | {
+        kind: "unavailable";
+    };
+    /** #3008: this exposure is the link "Allow connections from outside" opened, open now (its sign-in asks for the code). */
+    isOutsideLink?(exposureId: string): boolean;
+    /** #3008: the session outsideSignIn's "ok" made is this computer's admin (and a Notice says who signed in). */
+    authorizeOutsideSession?(record: SessionRecord, peer: WebPeer, label: string): boolean;
     /** #1570: record this browser as a returning device of the code's owner; the cookie value, or null when not kept. */
     rememberReturningDevice?(owner: LoginCodeOwner, input: {
         surface: "local" | "gateway";
@@ -113,6 +133,7 @@ export declare function bypassesWebGate(req: {
  */
 export declare function serveSigninPage(res: ServerResponse, status?: number, opts?: {
     webOnly?: boolean;
+    outside?: boolean;
 }): void;
 /**
  * What a guest's browser gets for a page it cannot open (#2399 smoke: the gate's bare JSON before): "members" for a page

package/dist/auth-api.js

@@ -88,7 +88,14 @@ const ASSETS = {
         "fx-motion.js",
         // #1958: identity colours on the page and the Color dialog (static code; the colours come in the status frame).
         "identity-color.js",
+        // #2936 / #2978 merge: Settings' content width (this device's), shared by the shell and the lazy Settings panel.
+        "settings-width.js",
+        // The computer's display name, in a module of its own so a tab opened before an upgrade loads it fresh (Chat imports it).
+        "machine-name.js",
         "preact.module.js", "preact-hooks.module.js", "htm.module.js",
+        // #3008: the QR code of an authenticator's setup (qrcode-generator 2.0.4, MIT; shared/vendor/vendor.json, byte-checked).
+        // Static code, no data — the secret is drawn by Settings behind the gate; loaded only when an app is being set up.
+        "qrcode.module.js",
     ].map(name => [name, { file: join("shared", name), type: "text/javascript; charset=utf-8" }])),
     "app.css": { file: join("shared", "app.css"), type: "text/css; charset=utf-8" },
 };
@@ -133,7 +140,9 @@ function json(res, code, body, headers = {}) {
 export function serveSigninPage(res, status = 200, opts = {}) {
     try {
         const page = readFileSync(join(__dirname, "ui", "signin.html"), "utf-8");
-        const html = opts.webOnly ? page.replace("<body>", '<body data-web-only="1">') : page;
+        // #3008: through the link "Allow connections from outside" opened, the page asks for the authenticator's code.
+        const marks = `${opts.webOnly ? ' data-web-only="1"' : ""}${opts.webOnly && opts.outside ? ' data-outside="1"' : ""}`;
+        const html = marks ? page.replace("<body>", `<body${marks}>`) : page;
         sendPanelHtml(res, withAppIconLinks(html), status, { "Cache-Control": "no-store" });
     }
     catch {
@@ -194,7 +203,8 @@ export function handleAuthRequest(req, res, url, ctx) {
             json(res, 405, { error: "method not allowed" });
             return true;
         }
-        serveSigninPage(res, 200, { webOnly: ctx.isWebOnlyFleet?.() === true });
+        const link = gatewayRequestContext(req);
+        serveSigninPage(res, 200, { webOnly: ctx.isWebOnlyFleet?.() === true, outside: !!link && ctx.isOutsideLink?.(link.exposureId) === true });
         return true;
     }
     if (path.startsWith("/assets/")) {
@@ -213,6 +223,87 @@ export function handleAuthRequest(req, res, url, ctx) {
         }
         return true;
     }
+    // ── #3008: POST /auth/totp — signing in from outside, with the authenticator app's code ──
+    // Only through the link "Allow connections from outside" opened (the gateway's own provenance names it, never a
+    // header); anything else is refused as a wrong code would be, without counting. An admin session with no account,
+    // marked `remote`, ended by the switch's Off, a new app, or the link closing.
+    if (path === "/auth/totp") {
+        if (method !== "POST") {
+            json(res, 405, { error: "method not allowed" });
+            return true;
+        }
+        if (!req.headers.origin || !isSameOriginRequest(gateReq)) {
+            json(res, 403, { error: "Cross-site request rejected" });
+            return true;
+        }
+        if (!isJsonRequest(req)) {
+            json(res, 415, { error: "expected application/json" });
+            return true;
+        }
+        const token = ctx.webToken, gateway = gatewayRequestContext(req);
+        if (!token || !ctx.webSessions || !gateway || !ctx.outsideSignIn) {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        const sessions = ctx.webSessions, signIn = ctx.outsideSignIn.bind(ctx);
+        void readJsonBody(req).then(body => {
+            if (!body || typeof body.code !== "string" || body.code.length > 32) {
+                json(res, 400, { error: "expected {\"code\": \"123456\"}" });
+                return;
+            }
+            if (!isWebRequestCurrent(req) || ctx.webToken !== token) {
+                json(res, 401, { error: "wrong_code" });
+                return;
+            }
+            const result = signIn(gateway.exposureId, body.code);
+            if (result.kind === "paused") {
+                json(res, 429, { error: "paused", retryAfterMs: result.retryAfterMs }, { "Retry-After": String(Math.ceil(result.retryAfterMs / 1000)) });
+                return;
+            }
+            if (result.kind === "closed") {
+                json(res, 404, { error: "not_found" });
+                return;
+            }
+            if (result.kind === "unavailable") {
+                json(res, 503, { error: "unavailable" });
+                return;
+            }
+            if (result.kind === "wrong") {
+                ctx.logger.debug("outside sign-in refused");
+                json(res, 401, { error: "wrong_code" });
+                return;
+            }
+            for (const previous of readSessionCookies(gateReq, token)) {
+                if (sessions.authenticate(previous, tokenEpoch(token), { touch: false, surface: gateway.surface, exposureId: gateway.exposureId }))
+                    sessions.revokeById(previous);
+            }
+            const label = labelFromUserAgent(typeof req.headers["user-agent"] === "string" ? req.headers["user-agent"] : undefined);
+            const { sessionId, record } = sessions.create({ tier: "admin", surface: gateway.surface, label, tokenEpoch: tokenEpoch(token), exposureId: gateway.exposureId, remote: "totp" });
+            if (record.remote !== "totp") {
+                sessions.revokeById(sessionId);
+                json(res, 404, { error: "not_found" });
+                return;
+            }
+            ctx.logger.info({ handle: record.handle, label, surface: record.surface }, "Web sign-in from outside");
+            // #3015 review r3: admitted (its handle saved) and authorized, or no session at all.
+            let admitted = false;
+            try {
+                admitted = ctx.authorizeOutsideSession?.(record, gateway.named === true ? "named_link" : "quick_link", label) === true;
+            }
+            catch (err) {
+                ctx.logger.debug({ err }, "outside session not authorized");
+            }
+            if (!admitted) {
+                sessions.revokeById(sessionId);
+                json(res, 503, { error: "unavailable" });
+                return;
+            }
+            const session = buildSessionCookie(sessionId, isSecureRequest(gateReq), (record.absoluteExpiry - record.created) / 1000, token);
+            json(res, 200, { ok: true, csrf: csrfTokenFor(sessionId), tier: record.tier, expiresAt: record.absoluteExpiry }, { "Set-Cookie": session });
+        }).catch(() => { if (!res.destroyed && !res.headersSent)
+            json(res, 500, { error: "sign-in failed" }); });
+        return true;
+    }
     // ── POST /auth/login ──
     if (path === "/auth/login") {
         if (method !== "POST") {
@@ -267,8 +358,8 @@ export function handleAuthRequest(req, res, url, ctx) {
             const guestCodes = ctx.webGuestLoginCodes ?? null;
             const audience = gateway?.exposureId ?? "local";
             const guestPausedMs = guestCodes?.pausedForMs() ?? 0;
-            const result = guestPausedMs > 0 ? { kind: "paused", retryAfterMs: Math.max(guestPausedMs, codes.pausedForMs()) }
-                : codes.pausedForMs() > 0 ? codes.redeem(body.code, tokenEpoch(token), audience)
+            const result = guestPausedMs > 0 ? { kind: "paused", retryAfterMs: Math.max(guestPausedMs, codes.pausedForMs(audience)) }
+                : codes.pausedForMs(audience) > 0 ? codes.redeem(body.code, tokenEpoch(token), audience)
                     : guestCodes?.match(body.code, tokenEpoch(token), audience) ?? codes.redeem(body.code, tokenEpoch(token), audience);
             if (result.kind === "invalid")
                 guestCodes?.recordWrong(body.code);