@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/ui/settings-strings.js

@@ -5,9 +5,8 @@ import { register } from "/assets/app-i18n.js";
 register("settings", {
   en: {
     noticeTopic: "Topic", noticeOff: "Off",
-    webNotifyLogin: "Web sign-in notices", dailyTips: "Daily tips",
+    webNotifyLogin: "Web sign-in notices",
     webNotifyLoginHint: "Posted in the topic. Off suppresses operator notices only; guest and public-link security notices still post. Default: Topic.",
-    dailyTipsHint: "Posted in the General topic. Default: Topic. /tips still posts where invoked.",
     title: "Settings",
     myAgents: "My Agents",
     bots: "Bots",
@@ -64,13 +63,12 @@ register("settings", {
     tags: "Tags",
     generalTopicField: "General topic (fleet dispatcher)",
     oneGeneral: "{0} is already the General. Untick it first.",
-    runtimeResources: "Runtime & Resources",
     autoPause: "Auto-pause after",
     minutes: "minutes",
     inheritDefault: "Inherit from defaults",
     // #2347 §10: the value in effect, and where it comes from.
     defaultMark: "default", inEffect: "In effect: {0}", inheritedValue: "Inherited: {0}",
-    changeInDefaults: "change in Agent defaults", changeInClassic: "change in ClassicBot defaults",
+    changeInClassic: "change in ClassicBot defaults",
     cappedBySession: "capped by the session length", hoursValue: "{0} h", minutesValue: "{0} min", valueOn: "on", valueOff: "off", valueNone: "none",
     concurrencyAuto: "automatic, 2–10 by free memory and CPU cores", inEffectShort: "in effect: {0}", cappedByTotal: "capped by upload_max_total_mb",
     statusEmojis: "Status emojis",
@@ -98,18 +96,13 @@ register("settings", {
     se_externalEmojiHint: "Another server's emoji needs the bot's Use External Emojis permission in the channel it reacts in.",
     se_unavailable: "unavailable",
     se_hint: "Empty keeps the default. The preview is resolved by AgEnD exactly as the bot will react. Progress prefix is not a reaction: it starts the progress message.",
-    detection: "Detection",
-    startup: "Startup",
     backendSection: "Backend",
     advancedSection: "Advanced",
-    hangEnabled: "Hang detector enabled",
     hangTimeout: "Stuck timeout",
     agentMode: "Agent mode",
     toolSet: "Tool set",
     toolSetUnset: "Not set ({0}; a General: {1})",
     toolProgress: "Tool progress",
-    crossInstanceVisibility: "Bot-to-bot messages in topics",
-    crossInstanceVisibilityHint: "full: the whole message · summary: one line · hidden: nothing. Messages are always delivered; the Mirror Topic still shows them.",
     replyCompletionGuard: "Require a delivered reply",
     dashboardAccess: "Dashboard access",
     dashboardAccessHint: "What this agent may use on the dashboard, on top of its tool set. Switching a feature off applies at once (its tools are refused and leave its tool list); switching one on is confirmed first.",
@@ -167,7 +160,7 @@ register("settings", {
     failed: "Failed",
     actionFailed: "{0} failed",
     noAgentMatch: "No agents match \"{0}\".",
-    deleteAgent: "Delete agent \"{0}\"? This will be applied only after you confirm the pending changes.",
+    deleteAgent: "Delete agent \"{0}\" and its chat topic (on Discord, its channel and history)? This will be applied only after you confirm the pending changes.",
     nameRequired: "name required",
     tokenEnvRequired: "token env required",
     removeBot: "Remove bot \"{0}\"? (the token in .env is left untouched)",
@@ -292,7 +285,7 @@ register("settings", {
     sec_agents: "Agents",
     "sec_windows-cli": "Windows CLI",
     sec_runtimes: "Runtime",
-    "sec_agent-defaults": "Agent defaults", sec_chat: "Chat & connections", "sec_web-dashboard": "Web dashboard", sec_access: "Access & security",
+    sec_chat: "Chat & connections", "sec_web-dashboard": "Web dashboard", sec_access: "Access & security",
     sec_advanced: "Advanced", sec_look: "Look", grp_you: "You", grp_fleet: "Fleet",
     classicDefaultsTitle: "ClassicBot defaults", publicLinkTitle: "Public link & fixed address", webDashboardTitle: "Dashboard features", webSettingsLabel: "Web settings",
     stRunning: "Running",
@@ -318,7 +311,6 @@ register("settings", {
     updateAgent: "Update {0}",
     projectRootsTitle: "Project folders", projectRootsHint: "New agents may only work inside these folders (empty: anywhere). Checked when an agent is created.",
     projectRootsAnywhere: "any folder",
-    updateDefaults: "Update agent defaults",
     updateClassicDefaults: "Update ClassicBot defaults and access",
     updateAccess: "Update {0} access",
     updateEmojis: "Update {0} status emojis",
@@ -349,7 +341,6 @@ register("settings", {
     keyApplied: "Applied",
     keyRolledBack: "Rolled back",
     keyRollbackFailed: "Rollback failed",
-    accessTitle: "Access",
     webChat: "Web chat",
     // #1629 r4 §3: Settings → Appearance (owner CSS).
     motionTitle: "Effects on this device", groupLook: "Look", groupLayout: "Your layout", groupCss: "Styles you write", groupMods: "Add-ons", groupAdvanced: "Advanced", learnMore: "Learn more: {0}",
@@ -582,7 +573,6 @@ register("settings", {
     searchRetentionUnset: "not set (no age limit; 300,000-row cap)",
     searchRetentionZero: "0 (no age limit; 300,000-row cap)",
     webSearchHint: "Global search keeps entries with no age limit by default. The daily prune still caps the index at 300,000 rows (oldest first). Set web.search.retention_days in fleet.yaml (1–3650 days, or 0 for no age limit); it takes effect at the next fleet start.",
-    defaultsTitle: "Defaults",
     classicBackend: "ClassicBot default backend",
     whoUsesClassic: "Who can use ClassicBot",
     userIdPlaceholder: "user id",
@@ -653,7 +643,6 @@ register("settings", {
     devApply: "Apply",
     devApplyHint: "Adds this edit to the Save bar below: Save writes it, with any other unsaved change.",
     devStaged: "In the Save bar: {0} change(s) to fleet.yaml. Save writes them, Discard drops them; edit and Apply again to replace them.",
-    devFormsUnsaved: "Save or discard the unsaved changes to agents, agent defaults or connections first: this editor writes the same settings.",
     yamlUnsaved: "An unsaved fleet.yaml edit (Advanced) writes these settings. Save or discard it to edit them here.",
     yamlOpen: "Open the editor",
     noChanges: "Nothing to change.",
@@ -665,7 +654,6 @@ register("settings", {
     help1: "Agents: each agent's settings, Start/Stop, Pause/Wake, and New agent.",
     help2: "Connections: who may use each bot, its binding, its status emojis, a new token; and provider API keys.",
     help3: "ClassicBot: each room's backend, model and options.",
-    help4: "General: defaults for every agent and ClassicBot defaults. Web: the dashboard's sign-in sessions, browser terminal, web echo, Log and public link. Review changes stages them.",
     help5: "Changes are staged, then applied together with Apply changes. Each shows what it costs: immediately, an agent restart, or an AgEnD restart.",
     help6: "A change to access, secrets or connections waits for a fleet admin to confirm it in chat before it applies.",
   },
@@ -696,9 +684,8 @@ register("settings", {
     se_unavailable: "無法使用",
     se_hint: "留空即使用預設值。預覽由 AgEnD 依 bot 實際 react 的方式解析。進度前綴不是反應，而是進度訊息開頭的 emoji。",
     noticeTopic: "頻道", noticeOff: "關閉",
-    webNotifyLogin: "網頁登入通知", dailyTips: "每日提示",
+    webNotifyLogin: "網頁登入通知",
     webNotifyLoginHint: "發在頻道。關閉只停用管理者登入通知；訪客與公開連結安全通知仍會發出。預設：頻道。",
-    dailyTipsHint: "發在 General 頻道。預設：頻道。/tips 仍送至呼叫的聊天室。",
     title: "設定",
     myAgents: "我的 Agent",
     bots: "機器人",
@@ -755,26 +742,20 @@ register("settings", {
     tags: "標籤",
     generalTopicField: "General topic（fleet 分派器）",
     oneGeneral: "{0} 已經是 General，請先取消勾選它。",
-    runtimeResources: "執行環境與資源",
     autoPause: "閒置後自動暫停",
     minutes: "分鐘",
     inheritDefault: "沿用全域預設值",
     defaultMark: "預設", inEffect: "目前生效：{0}", inheritedValue: "沿用：{0}",
-    changeInDefaults: "到 Agent 預設值變更", changeInClassic: "到 ClassicBot 預設值變更",
+    changeInClassic: "到 ClassicBot 預設值變更",
     cappedBySession: "受 session 時長限制", hoursValue: "{0} 小時", minutesValue: "{0} 分鐘", valueOn: "開", valueOff: "關", valueNone: "無",
     concurrencyAuto: "自動，依可用記憶體與 CPU 核心數取 2–10", inEffectShort: "實際：{0}", cappedByTotal: "受 upload_max_total_mb 限制",
-    detection: "偵測",
-    startup: "啟動",
     backendSection: "後端",
     advancedSection: "進階",
-    hangEnabled: "啟用卡住偵測",
     hangTimeout: "卡住逾時",
     agentMode: "Agent 模式",
     toolSet: "工具集",
     toolSetUnset: "未設定（{0}；General 為 {1}）",
     toolProgress: "工具進度",
-    crossInstanceVisibility: "Agent 之間的訊息在主題中",
-    crossInstanceVisibilityHint: "full：完整訊息 · summary：一行摘要 · hidden：不顯示。訊息一律照常送達，Mirror Topic 也照常顯示。",
     replyCompletionGuard: "要求送出回覆",
     dashboardAccess: "Dashboard 權限",
     dashboardAccessHint: "這個 agent 能在 dashboard 上用哪些功能（在工具組之外再加一層限制）。關掉立即生效（工具會被拒絕，也從它的工具清單拿掉）；打開要先確認。",
@@ -832,7 +813,7 @@ register("settings", {
     failed: "失敗",
     actionFailed: "{0}失敗",
     noAgentMatch: "沒有符合「{0}」的 Agent。",
-    deleteAgent: "確定刪除 Agent「{0}」嗎？只有在確認套用待處理變更後才會生效。",
+    deleteAgent: "確定刪除 Agent「{0}」及它的聊天 topic（在 Discord 上是它的頻道與訊息記錄）嗎？只有在確認套用待處理變更後才會生效。",
     nameRequired: "必須填寫名稱",
     tokenEnvRequired: "必須填寫 token 環境變數",
     removeBot: "確定移除機器人「{0}」嗎？（.env 中的 token 會保留）",
@@ -957,7 +938,7 @@ register("settings", {
     sec_agents: "Agent",
     "sec_windows-cli": "Windows CLI",
     sec_runtimes: "Runtime",
-    "sec_agent-defaults": "Agent 預設值", sec_chat: "聊天與連線", "sec_web-dashboard": "網頁儀表板", sec_access: "存取與安全",
+    sec_chat: "聊天與連線", "sec_web-dashboard": "網頁儀表板", sec_access: "存取與安全",
     sec_advanced: "進階", sec_look: "外觀", grp_you: "你自己", grp_fleet: "整個 Fleet",
     classicDefaultsTitle: "ClassicBot 預設值", publicLinkTitle: "公開連結與固定網址", webDashboardTitle: "儀表板功能", webSettingsLabel: "網頁設定",
     stRunning: "執行中",
@@ -983,7 +964,6 @@ register("settings", {
     updateAgent: "更新 {0}",
     projectRootsTitle: "專案資料夾", projectRootsHint: "新的 agent 只能在這些資料夾裡工作（留空：不限）。建立 agent 時檢查。",
     projectRootsAnywhere: "不限",
-    updateDefaults: "更新 agent 預設值",
     updateClassicDefaults: "更新 ClassicBot 預設值與存取",
     updateAccess: "更新 {0} 的存取",
     updateEmojis: "更新 {0} 的狀態表情",
@@ -1014,7 +994,6 @@ register("settings", {
     keyApplied: "已套用",
     keyRolledBack: "已還原",
     keyRollbackFailed: "還原失敗",
-    accessTitle: "存取",
     webChat: "網頁聊天",
     motionTitle: "這個裝置上的特效", groupLook: "外觀", groupLayout: "你的版面", groupCss: "自己寫的樣式", groupMods: "擴充", groupAdvanced: "進階", learnMore: "了解更多：{0}",
     colorTitle: "識別色", colorLead: "單一 agent 的顏色：⋯ 選單 → 顏色…",
@@ -1245,7 +1224,6 @@ register("settings", {
     searchRetentionUnset: "未設定（不限天數；上限 30 萬筆）",
     searchRetentionZero: "0（不限天數；上限 30 萬筆）",
     webSearchHint: "全域搜尋預設不限天數。每日清理仍會把索引上限維持在 30 萬筆（先刪最舊的）。在 fleet.yaml 設定 web.search.retention_days（1–3650 天，或 0 代表不限天數），下次啟動 fleet 後生效。",
-    defaultsTitle: "預設值",
     classicBackend: "ClassicBot 預設 backend",
     whoUsesClassic: "誰可以使用 ClassicBot",
     userIdPlaceholder: "使用者 id",
@@ -1316,7 +1294,6 @@ register("settings", {
     devApply: "套用",
     devApplyHint: "把這次編輯加入下方的儲存列：按「儲存」時和其他未儲存的變更一起寫入。",
     devStaged: "已加入儲存列：fleet.yaml 的 {0} 項變更。按「儲存」寫入，按「捨棄」放棄；修改後再按「套用」會取代它們。",
-    devFormsUnsaved: "請先儲存或捨棄 Agent、Agent 預設值或連線中未儲存的變更：這個編輯器會寫入相同的設定。",
     yamlUnsaved: "有一份未儲存的 fleet.yaml 編輯（進階）會寫入這些設定。請先儲存或捨棄它，才能在這裡修改。",
     yamlOpen: "開啟編輯器",
     noChanges: "沒有需要變更的內容。",
@@ -1328,8 +1305,88 @@ register("settings", {
     help1: "Agent：每個 agent 的設定、啟動/停止、暫停/喚醒，以及新增 agent。",
     help2: "連線：誰可以使用各個 bot、它的綁定、狀態表情、新的 token；以及供應商 API key。",
     help3: "ClassicBot：每個房間的 backend、model 與選項。",
-    help4: "一般：所有 agent 的預設值與 ClassicBot 預設值。網頁：儀表板的登入 session、瀏覽器終端機、網頁轉發、紀錄與公開連結。「檢查變更」會把它們暫存。",
     help5: "變更會先暫存，再用「套用變更」一起套用。每項都會標示代價：立即生效、重新啟動 agent，或重新啟動 AgEnD。",
     help6: "存取、密鑰或連線的變更，要等 fleet 管理員在聊天中確認後才會套用。",
   },
 });
+
+// Settings UX presentation labels.
+register("settings", {
+  "en": {
+    "prefsProfileGroup": "Personal details",
+    "prefsContentGroup": "Language and content",
+    "prefsAccountScope": "Your account",
+    "prefsHelpGroup": "Help and guidance",
+    "prefsTourHint": "Walk through the controls in an Agent conversation.",
+    "prefsReplayTour": "Replay tour",
+    "prefsLookHint": "Theme, appearance and effects are in Look",
+    "prefsNameImmediate": "Save name applies this change immediately, separately from the other preferences.",
+    "prefsSaveName": "Save name",
+    "lookDisplayGroup": "Display and layout",
+    "lookThemeHint": "Choose the theme used on your signed-in devices.",
+    "lookIdentityGroup": "Agent identity",
+    "lookMotionGroup": "Themes and motion",
+    "lookPreview": "Preview",
+    "lookPreviewHint": "A sample of your current colours and default card size."
+  },
+  "zh-TW": {
+    "prefsProfileGroup": "個人資料",
+    "prefsContentGroup": "語言與內容",
+    "prefsAccountScope": "你的帳號",
+    "prefsHelpGroup": "使用說明",
+    "prefsTourHint": "重新了解 Agent 對話中的常用操作。",
+    "prefsReplayTour": "重新播放導覽",
+    "prefsLookHint": "主題、外觀與動態效果請前往「外觀」",
+    "prefsNameImmediate": "「儲存名字」會立即套用，與其他偏好的儲存分開。",
+    "prefsSaveName": "儲存名字",
+    "lookDisplayGroup": "顯示與版面",
+    "lookThemeHint": "選擇你登入的裝置所使用的主題。",
+    "lookIdentityGroup": "Agent 識別",
+    "lookMotionGroup": "主題與動態效果",
+    "lookPreview": "預覽",
+    "lookPreviewHint": "目前識別色與預設身分卡大小的示意。"
+  }
+}
+);
+
+// Settings UX presentation labels.
+register("settings", {
+  "en": {
+    "uiAgentColumnName": "Name",
+    "uiAgentColumnCli": "CLI & model",
+    "uiListColumnState": "Status",
+    "uiListColumnActions": "Actions",
+    "uiRuntimeWindowsLocal": "Local Windows",
+    "uiRuntimeWindowsRemote": "Windows runtime",
+    "uiConnectionColumnService": "Service & connection",
+    "uiConnectionColumnInfo": "Connection details",
+    "uiClassicColumnRoom": "Room",
+    "uiProviderKeyActionHint": "Verify and apply each key separately. These actions do not wait for the page Save button."
+  },
+  "zh-TW": {
+    "uiAgentColumnName": "名稱",
+    "uiAgentColumnCli": "CLI 與模型",
+    "uiListColumnState": "狀態",
+    "uiListColumnActions": "操作",
+    "uiRuntimeWindowsLocal": "Windows 本機",
+    "uiRuntimeWindowsRemote": "Windows Runtime",
+    "uiConnectionColumnService": "服務與連線",
+    "uiConnectionColumnInfo": "連線資訊",
+    "uiClassicColumnRoom": "房間",
+    "uiProviderKeyActionHint": "每組金鑰會分別驗證並套用，不需等待頁面底部的儲存。"
+  }
+}
+);
+
+register("settings", {
+  "en": {
+    "lookBrandGroup": "Brand",
+    "lookIconMore": "Icon update help",
+    "prefsNameImmediate": "Name changes save immediately."
+  },
+  "zh-TW": {
+    "lookBrandGroup": "品牌",
+    "lookIconMore": "圖示更新說明",
+    "prefsNameImmediate": "名字會立即儲存。"
+  }
+});

package/dist/ui/settings-web-authority.js

@@ -14,6 +14,8 @@ import { DEFAULT_SCHEMA, impactOf, sameValue } from "./settings-model.js";
 import { editsOf, keepDraft, syncStage } from "./settings-draft.js";
 import { resetWebAuthorization } from "/assets/web-authorize.js";
 import "./settings-strings.js";
+import { layoutText } from "./settings-layout.js";
+import "./settings-access-strings.js";   // revAuthorityBriefWeb / revAuthorityEnabledWeb / revAuthorityRule: an older settings-layout.js from a tab that visited Fleet first lacks them (#3061)
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
 
@@ -64,7 +66,9 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
     syncStage(ctx, "verified_authority", body ? { label: tn("vaTitle"), count: Object.keys(body).length,
       impact: impactOf(ctx.schema || DEFAULT_SCHEMA, "web.verified_authority"), request: { method: "PUT", url: "/api/settings/fleet/web", body: { verified_authority: body } } } : null);
   }, [f, original, overview]);
-  const card = (body) => html`<section class="card s-web-authority"><h3>${tn("vaTitle")}</h3><p class="note">${tn("vaHint")}</p>${body}</section>`;
+  // A fleet with no chat connection is worded for the authenticator (the reference page); one with Discord / Telegram keeps the confirm-card words.
+  const webOnly = !!overview && overview.webOnly === true;
+  const card = (body) => html`<section class="card s-web-authority"><h3>${tn("vaTitle")}</h3><p class="note s-authority-brief">${layoutText(webOnly ? "revAuthorityBriefWeb" : "revAuthorityBrief")}</p><p class="note s-authority-rule">${layoutText("revAuthorityRule")}</p>${body}<details class="s-setting-details"><summary>${layoutText("revAuthorityDetails")}</summary><p class="note">${tn("vaHint")}</p><p class="note">${tn("vaEnabledHint")}</p><p class="note">${tn("vaLoopbackOnlyHint")}</p></details></section>`;
   if (failed) return card(html`<p class="note" role="status">${tn("vaLoadFailed")} <button type="button" class="btn btn-sm" onClick=${load}>${t("app.retry")}</button></p>`);
   if (!overview || !f) return card(html`<p class="note">${t("app.loading")}</p>`);
 
@@ -86,26 +90,28 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
 
   return card(html`<fieldset class="s-va-fields" disabled=${disabled}>
       ${stuckOff ? html`<p class="note s-va-warn" role="status" id="vaStuckOff">${tn("vaStuckOff")}</p>` : null}
-      <label class=${fc("check", "enabled")}><input id="vaEnabled" type="checkbox" checked=${f.enabled} onChange=${(e) => set({ enabled: e.target.checked })} /><span>${tn("vaEnabled")}</span></label>
-      <p class="note">${tn("vaEnabledHint")}</p>
-      <label class=${fc("check", "loopbackOnly")}><input id="vaLoopbackOnly" type="checkbox" checked=${f.loopbackOnly} onChange=${(e) => set({ loopbackOnly: e.target.checked })} /><span>${tn("vaLoopbackOnly")}</span></label>
-      <p class="note">${tn("vaLoopbackOnlyHint")}</p>
+      <label class=${fc("check", "enabled")}><input class="s-ui-toggle" id="vaEnabled" type="checkbox" checked=${f.enabled} onChange=${(e) => set({ enabled: e.target.checked })} /><span>${layoutText(webOnly ? "revAuthorityEnabledWeb" : "revAuthorityEnabled")}</span></label>
+      <p class="note">${layoutText("revAuthorityEnabledHint")}</p>
+      <label class=${fc("check", "loopbackOnly")}><input class="s-ui-toggle" id="vaLoopbackOnly" type="checkbox" checked=${f.loopbackOnly} onChange=${(e) => set({ loopbackOnly: e.target.checked })} /><span>${layoutText("revAuthorityLocal")}</span></label>
+      <p class="note">${layoutText("revAuthorityLocalHint")}</p>
       ${warnHosts ? html`<p class="note s-va-warn" role="status" id="vaLanWarning">${tn("vaLanWarning", overview.lanHosts.join(", "))}</p>` : null}
-      ${overview.namedHost || original.namedLink ? html`<label class=${fc("check", "namedLink")}><input id="vaNamedLink" type="checkbox" checked=${f.namedLink} onChange=${(e) => set({ namedLink: e.target.checked })} /><span>${tn("vaNamedLink", overview.namedHost || "—")}</span></label>
-      <p class="note">${tn("vaNamedLinkHint")}</p>` : null}
-      ${/* §0.3: always shown — any fleet can open the temporary public link with /web. */ ""}
-      <label class=${fc("check", "quickLink")}><input id="vaQuickLink" type="checkbox" checked=${f.quickLink} onChange=${(e) => set({ quickLink: e.target.checked })} /><span>${tn("vaQuickLink")}</span></label>
-      <p class="note">${tn("vaQuickLinkHint")}</p>
       <div class=${fc("field", "hours")}><label for="vaHours">${tn("vaHours", overview.hours.min, overview.hours.max)}</label>
         <input id="vaHours" type="number" min=${overview.hours.min} max=${overview.hours.max} step="any"
           class=${hoursError ? "invalid" : ""} value=${hoursText} onInput=${(e) => set({ hours: onHoursText(e.target.value) })} />
         <${Feedback} error=${hoursError} />
         ${hoursText.trim() === "" ? html`<${InEffect} text=${tn("hoursValue", overview.hours.default)} />` : null}</div>
+      <p class="note s-authority-public-warning">${layoutText("revAuthorityPublicWarning")}</p>
+      <details class="s-authority-links"><summary>${layoutText("revAuthorityLinks")}</summary><div>      ${overview.namedHost || original.namedLink ? html`<label class=${fc("check", "namedLink")}><input class="s-ui-toggle" id="vaNamedLink" type="checkbox" checked=${f.namedLink} onChange=${(e) => set({ namedLink: e.target.checked })} /><span>${tn("vaNamedLink", overview.namedHost || "—")}</span></label>
+      <p class="note">${tn("vaNamedLinkHint")}</p>` : null}
+      ${/* §0.3: always shown — any fleet can open the temporary public link with /web. */ ""}
+      <label class=${fc("check", "quickLink")}><input class="s-ui-toggle" id="vaQuickLink" type="checkbox" checked=${f.quickLink} onChange=${(e) => set({ quickLink: e.target.checked })} /><span>${tn("vaQuickLink")}</span></label>
+      <p class="note">${tn("vaQuickLinkHint")}</p>
+</div></details>
       <h4>${tn("vaSessionsTitle")}</h4>
       ${overview.authorized.length
         ? html`<ul class="s-va-sessions" id="vaSessions">${overview.authorized.map((a) => html`<li key=${a.handle} data-handle=${a.handle}>
             <strong>${a.label}</strong> <span class="note">${a.account}</span>${a.named ? html` <span class="note s-va-named">${tn("vaSessionNamed")}</span>` : null}${a.quick ? html` <span class="note s-va-named s-va-quick">${tn("vaSessionQuick")}</span>` : null}<br /><span class="note">${tn("vaSessionUntil", when(a.authorizedAt), when(a.until))}</span></li>`)}</ul>`
         : html`<p class="note" id="vaSessionsNone">${tn("vaSessionsNone")}</p>`}
     </fieldset>
-    <div class="save-row"><button type="button" class="btn btn-danger" id="vaRevoke" disabled=${disabled} onClick=${revoke}>${tn("vaRevoke")}</button></div>`);
+    <div class="save-row s-authority-revoke"><button type="button" class="btn btn-danger" id="vaRevoke" disabled=${disabled} onClick=${revoke}>${tn("vaRevoke")}</button></div>`);
 }

package/dist/ui/shared/accounts.css

@@ -0,0 +1,15 @@
+/* #3212: Settings → Agents → Accounts — linked by accounts-view.js (a page holding an older app.css still draws it). */
+.s-accounts { display: grid; gap: var(--s-3); }
+.s-account-card { border: 1px solid var(--border); border-radius: var(--r-md); padding: var(--s-3); display: grid; gap: var(--s-2); background: var(--surface); }
+.s-account-head { display: flex; align-items: center; gap: var(--s-2); }
+.s-account-rows { display: grid; gap: var(--s-1); }
+.s-account-row { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); }
+.s-account-who { flex: 1 1 16em; min-width: 0; display: grid; gap: 2px; }
+.s-account-who small { color: var(--text-2); font-size: var(--fs-xs); overflow-wrap: anywhere; }
+.s-account-usage.is-stale { color: var(--text-3); }
+.s-account-row .s-actions { display: flex; flex-wrap: wrap; gap: var(--s-1); }
+.s-account-row details { flex-basis: 100%; }
+.s-account-default { margin: var(--s-1) 0 0; }
+.s-account-machine { border-top: 1px dashed var(--border); padding-top: var(--s-2); }
+.s-account-move { list-style: none; margin: 0; padding: 0; display: grid; gap: var(--s-1); }
+.s-account-move .check small { margin-left: var(--s-2); }

package/dist/ui/shared/app-i18n.js

@@ -111,7 +111,7 @@ register("app", {
     confirmTitle: "Please confirm", confirmOk: "Continue", cancel: "Cancel",
     sidePanelLeave: "Leave {0} without saving? Your changes there will be lost.", sidePanelDiscard: "Discard changes",
     // The server's own wording (src/locale.ts needs.reason.*), so the web says what Discord says.
-    needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_question: "Asking you a question", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_backend_signin: "Backend sign-in needed", needs_reason_config_invalid: "Configuration file needs attention", needs_reason_config_fallback: "Running on stored configuration", config_history_edit: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. The next restart would use the stored valid copy from {4}. Correct the YAML error; the file has not been changed by AgEnD.", config_history_no_history: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. No stored valid copy is available, so the next restart cannot recover automatically. Correct the YAML error before restarting; the file has not been changed by AgEnD.", config_history_fallback: "{0}, line {1}, column {2}: {3}. AgEnD started using the stored valid copy from {4}. Correct the YAML error and reload the settings. The file on disk has not been changed by AgEnD.", needs_reason_general_windows_offline: "General’s Windows PC is offline", needs_reason_general_location_hold: "Run General on", needs_reason_native_pane_hold: "Windows agent needs attention", needs_reason_crashed: "Crashed", needs_reason_usage_limit: "Usage limit reached · reset time unknown", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
+    needs_reason_kiro_choice: "Kiro needs your decision", needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_question: "Asking you a question", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_backend_signin: "Backend sign-in needed", needs_reason_config_invalid: "Configuration file needs attention", needs_reason_hub_proposal: "Hub action proposed: review locally", needs_reason_hub_execution_hold: "Hub work held: review locally", needs_reason_hub_unavailable: "Hub not running", needs_reason_config_fallback: "Running on stored configuration", config_history_edit: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. The next restart would use the stored valid copy from {4}. Correct the YAML error; the file has not been changed by AgEnD.", config_history_no_history: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. No stored valid copy is available, so the next restart cannot recover automatically. Correct the YAML error before restarting; the file has not been changed by AgEnD.", config_history_fallback: "{0}, line {1}, column {2}: {3}. AgEnD started using the stored valid copy from {4}. Correct the YAML error and reload the settings. The file on disk has not been changed by AgEnD.", needs_reason_general_windows_offline: "General’s Windows PC is offline", needs_reason_general_location_hold: "Run General on", needs_reason_native_pane_hold: "Windows agent needs attention", needs_reason_crashed: "Crashed", needs_reason_usage_limit: "Usage limit reached · reset time unknown", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_missed_offline: "Missed while AgEnD was offline", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
   },
   "zh-TW": {
     brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet 概覽", view: "檢視", settings: "設定", instances: "Instances", newInstance: "新增 instance", newAgent: "新增 Agent",
@@ -156,6 +156,6 @@ register("app", {
     search: "搜尋", searchTitle: "搜尋聊天、agent 之間的訊息與任務（{0}）",
     confirmTitle: "請確認", confirmOk: "繼續", cancel: "取消",
     sidePanelLeave: "不儲存就離開「{0}」？你在那裡的修改會遺失。", sidePanelDiscard: "捨棄修改",
-    needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_question: "正在問你問題", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_backend_signin: "後端需要登入", needs_reason_config_invalid: "設定檔需要處理", needs_reason_config_fallback: "正在使用儲存的設定副本", config_history_edit: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。下次重新啟動會改用 {4} 儲存的有效副本。請修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_no_history: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。沒有可用的有效副本，下次重新啟動將無法自動恢復。請在重新啟動前修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_fallback: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 已使用 {4} 儲存的有效副本啟動。請修正 YAML 錯誤並重新載入設定。AgEnD 未更動磁碟上的檔案。", needs_reason_general_windows_offline: "General 所在的 Windows 電腦已離線", needs_reason_general_location_hold: "General 執行位置", needs_reason_native_pane_hold: "Windows 代理需要處理", needs_reason_crashed: "已崩潰", needs_reason_usage_limit: "用量已達上限 · 恢復時間未知", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
+    needs_reason_kiro_choice: "Kiro 需要你決定", needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_question: "正在問你問題", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_backend_signin: "後端需要登入", needs_reason_config_invalid: "設定檔需要處理", needs_reason_hub_proposal: "Hub 提議操作：請在本機檢視", needs_reason_hub_execution_hold: "Hub 工作已暫停：請在本機檢視", needs_reason_hub_unavailable: "Hub 未在執行", needs_reason_config_fallback: "正在使用儲存的設定副本", config_history_edit: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。下次重新啟動會改用 {4} 儲存的有效副本。請修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_no_history: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。沒有可用的有效副本，下次重新啟動將無法自動恢復。請在重新啟動前修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_fallback: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 已使用 {4} 儲存的有效副本啟動。請修正 YAML 錯誤並重新載入設定。AgEnD 未更動磁碟上的檔案。", needs_reason_general_windows_offline: "General 所在的 Windows 電腦已離線", needs_reason_general_location_hold: "General 執行位置", needs_reason_native_pane_hold: "Windows 代理需要處理", needs_reason_crashed: "已崩潰", needs_reason_usage_limit: "用量已達上限 · 恢復時間未知", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_missed_offline: "AgEnD 離線時錯過", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
   },
 });

package/dist/ui/shared/app-needs.js

@@ -63,7 +63,7 @@ export const configDetail = (item) => {
   const issue = item.configIssue;
   return issue ? t(`app.config_history_${issue.mode === "fallback" ? "fallback" : issue.time ? "edit" : "no_history"}`, issue.file, issue.line, issue.column, issue.reason, issue.time || "") : item.detail;
 };
-export const reasonText = (item) => t(`app.needs_reason_${item.reason}`);
+export const reasonText = (item) => t(`app.needs_reason_${item.kiroChoice ? "kiro_choice" : item.reason}`);
 
 let stop = null;
 

package/dist/ui/shared/app-route.js

@@ -34,6 +34,10 @@ export function parseRoute(pathname) {
   if (pathname === "/ui/fleet") return { panel: "fleet", tab: "tasks" };
   if (pathname === "/ui/needs") return { panel: "needs" };
   if (pathname === NOTICES_PATH) return { panel: "notices" };              // #2910 D2: a web-only fleet's Notices
+  // AgEnD Hub P1: a Hub workspace's pages (served only by a Hub's own listener; this fleet's answers not found).
+  if (pathname === "/ui/hub") return { panel: "hub", tab: "ask" };
+  if (pathname === "/ui/hub/exposures") return { panel: "hub", tab: "exposures" };
+  if (pathname === "/ui/hub/admin") return { panel: "hub", tab: "admin" };
   // #1523 N2: one instance's Details (`agent` is no Fleet tab; a tab is one segment).
   let m = /^\/ui\/fleet\/agent\/([^/]+)$/.exec(pathname);
   if (m) return named("details", m[1]);
@@ -116,6 +120,7 @@ export function routePath(route) {
   if (route.panel === "settings") return settingsPath(route.section);
   if (route.panel === "needs") return NEEDS_PATH;
   if (route.panel === "notices") return NOTICES_PATH;
+  if (route.panel === "hub") return route.tab === "exposures" ? "/ui/hub/exposures" : route.tab === "admin" ? "/ui/hub/admin" : "/ui/hub";
   if (route.panel === "view") return viewPath(route.instance);
   if (route.panel === "details") return detailsPath(route.instance);
   if (route.panel === "log") return logPath(route.instance);
@@ -148,7 +153,7 @@ export function routeKey(route) {
   if (!route) return "none";
   if (route.panel === "needs") return "needs:";
   if (route.panel === "notices") return "notices:";
-  return `${route.panel}:${route.panel === "fleet" ? route.tab : route.panel === "settings" ? route.section : route.instance ?? ""}`;
+  return `${route.panel}:${route.panel === "fleet" || route.panel === "hub" ? route.tab : route.panel === "settings" ? route.section : route.instance ?? ""}`;
 }
 
 /**

package/dist/ui/shared/app-session.js

@@ -19,6 +19,9 @@ const ago = (ms) => { const m = Math.round((Date.now() - ms) / 60000); return m
 export function SessionMenu() {
   const [me, setMe] = useState(undefined);         // undefined: not read yet; null: signed out
   const [sessions, setSessions] = useState(null);
+  // #3061 (P2b): on a web-only fleet only the verified owner ends the OTHER devices (the server says so with the list and
+  // refuses anyone else regardless); a session that is not one still sees them and can sign itself out.
+  const [mayEndOthers, setMayEndOthers] = useState(true);
   const [open, setOpen] = useState(false);
   const [error, setError] = useState(false);
   const btn = useRef(null), pop = useRef(null);
@@ -27,6 +30,7 @@ export function SessionMenu() {
     setMe(m);
     const s = m ? await getJson("/auth/sessions") : null;
     setSessions(s && s.sessions ? s.sessions : null);
+    setMayEndOthers(!(s && s.canEndOthers === false));
   }
   useEffect(() => { refresh(); }, []);
   useEffect(() => {
@@ -57,10 +61,10 @@ export function SessionMenu() {
         <${AuthorizeChip} />
         ${rows.length > 1 ? html`<h3>${t("app.devices")}</h3><ul class="devices">${rows.map(s => html`<li key=${s.handle}>
           <span class="grow"><span class="name">${s.label}${s.current ? ` · ${t("app.thisDevice")}` : ""}</span><span class="when">${t("app.lastActive", ago(s.lastSeen))}</span></span>
-          ${s.current ? null : html`<button type="button" class="btn btn-sm danger" onClick=${() => act("DELETE", `/auth/sessions/${encodeURIComponent(s.handle)}`, refresh)}>${t("app.signOut")}</button>`}</li>`)}</ul>` : null}
+          ${s.current || !mayEndOthers ? null : html`<button type="button" class="btn btn-sm danger" onClick=${() => act("DELETE", `/auth/sessions/${encodeURIComponent(s.handle)}`, refresh)}>${t("app.signOut")}</button>`}</li>`)}</ul>` : null}
         <div class="row">
           <button type="button" class="btn" onClick=${() => act("POST", "/auth/logout", () => { location.href = "/signin"; })}><${Icon} name="user" size=${16} />${t("app.signOut")}</button>
-          ${rows.length > 1 ? html`<button type="button" class="btn danger" onClick=${() => act("DELETE", "/auth/sessions", () => { location.href = "/signin"; })}>${t("app.signOutAll")}</button>` : null}
+          ${rows.length > 1 && mayEndOthers ? html`<button type="button" class="btn danger" onClick=${() => act("DELETE", "/auth/sessions", () => { location.href = "/signin"; })}>${t("app.signOutAll")}</button>` : null}
         </div>`}
       ${error ? html`<p class="err" role="alert">${t("app.failed")}</p>` : null}
     </div>` : null}