@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/view-history.js

@@ -0,0 +1,116 @@
+export const VIEW_HISTORY_PAGE = 100;
+/** A result over `lines` lines keeps `keep`; a diff over `diffRows` rows keeps `diffKeep`; kept text at most `chars`. */
+export const VIEW_FOLD = { lines: 5, keep: 3, diffRows: 10, diffKeep: 6, chars: 600 };
+/** The query's own parts from a URL's search params (anything malformed is left out: the newest page). */
+export function viewHistoryQuery(params) {
+    const offset = (v) => (v !== null && /^\d{1,15}$/.test(v) ? Number(v) : undefined);
+    const q = {};
+    const before = offset(params.get("before")), end = offset(params.get("end"));
+    const key = params.get("key"), step = params.get("step");
+    if (before !== undefined)
+        q.before = before;
+    if (end !== undefined)
+        q.end = end;
+    if (key && /^\d{1,20}-\d{1,20}$/.test(key))
+        q.key = key;
+    if (step && step.length <= 200 && /^[\w.:-]+$/.test(step))
+        q.step = step;
+    return q;
+}
+/** Null: no such instance. */
+export async function viewHistory(read, name, q) {
+    if (q.step !== undefined) {
+        if (q.end === undefined)
+            return { view_history: 1, supported: false, reason: "bad_request" };
+        const back = await read(name, { end: q.end, ...(q.key !== undefined ? { key: q.key } : {}), limit: VIEW_HISTORY_PAGE });
+        if (!back)
+            return null;
+        if (back.format !== "claude" || back.steps === undefined)
+            return { view_history: 1, supported: false, reason: back.reason ?? "unsupported" };
+        // Another transcript now (a new session), or past its end: the step is not there to give whole.
+        if (back.reset)
+            return { view_history: 1, supported: true, key: back.key, step: null };
+        const found = back.steps.find((s) => s.id === q.step);
+        return { view_history: 1, supported: true, key: back.key, step: found ? viewStep(found, false) : null };
+    }
+    const back = await read(name, { ...(q.before !== undefined ? { end: q.before } : {}), ...(q.key !== undefined ? { key: q.key } : {}), limit: VIEW_HISTORY_PAGE });
+    if (!back)
+        return null;
+    if (back.format !== "claude" || back.steps === undefined)
+        return { view_history: 1, supported: false, reason: back.reason ?? "unsupported" };
+    const steps = back.steps.map((s) => viewStep(s, true)).filter((s) => s !== null);
+    return { view_history: 1, supported: true, key: back.key, steps, before: back.before, end: back.end, ...(back.reset ? { reset: true } : {}) };
+}
+/** A Log step as the View draws it (null: not drawn); `fold`: long results and diffs keep their start. */
+export function viewStep(s, fold) {
+    if (s.kind === "user" || s.kind === "assistant") {
+        if (!s.body)
+            return null;
+        return { id: s.id, kind: s.kind, body: s.body, ...(s.bodyCut ? { cut: s.bodyCut } : {}) };
+    }
+    if (s.kind === "error")
+        return { id: s.id, kind: "error", ...folded(s.body ?? s.note ?? "", fold), ...(s.bodyCut ? { cut: s.bodyCut } : {}) };
+    if (s.kind !== "tool")
+        return null;
+    const step = { id: s.id, kind: "tool", tool: s.tool ?? "", ...(s.subject ? { subject: s.subject } : {}), ...(s.status ? { status: s.status } : {}) };
+    const diff = s.status !== "failed" ? diffOf(s.tool ?? "", s.input) : null;
+    if (diff) {
+        const rows = diff.reduce((n, h) => n + h.del.length + h.add.length, 0);
+        if (!fold || rows <= VIEW_FOLD.diffRows)
+            return { ...step, diff };
+        let left = VIEW_FOLD.diffKeep;
+        const kept = [];
+        for (const h of diff) {
+            if (left <= 0)
+                break;
+            const del = h.del.slice(0, left);
+            left -= del.length;
+            const add = h.add.slice(0, Math.max(0, left));
+            left -= add.length;
+            kept.push({ del, add });
+        }
+        return { ...step, diff: kept, more: rows - VIEW_FOLD.diffKeep };
+    }
+    const body = clean(s.body ?? "");
+    return { ...step, ...(body ? folded(body, fold) : {}), ...(s.bodyCut ? { cut: s.bodyCut } : {}) };
+}
+/** A tool's error comes wrapped (`<tool_use_error>…</tool_use_error>`): the page shows its words. */
+function clean(text) { return text.replace(/^<tool_use_error>([\s\S]*?)<\/tool_use_error>$/, "$1").replace(/\n+$/, ""); }
+function folded(text, fold) {
+    const lines = text.split("\n");
+    if (!fold)
+        return { body: text };
+    let keep = lines.length > VIEW_FOLD.lines ? lines.slice(0, VIEW_FOLD.keep) : lines;
+    let more = lines.length - keep.length;
+    let body = keep.join("\n");
+    if (body.length > VIEW_FOLD.chars) {
+        body = body.slice(0, VIEW_FOLD.chars);
+        keep = body.split("\n");
+        more = Math.max(1, lines.length - keep.length + 1);
+    }
+    return { body, ...(more > 0 ? { more } : {}) };
+}
+/** An edit's change from its arguments (Edit, MultiEdit, Write), or null — also when the arguments were cut. */
+function diffOf(tool, input) {
+    if (!input || !["Edit", "MultiEdit", "Write"].includes(tool))
+        return null;
+    let args;
+    try {
+        args = JSON.parse(input);
+    }
+    catch {
+        return null;
+    }
+    const lines = (v) => (typeof v === "string" && v !== "" ? v.replace(/\n$/, "").split("\n") : []);
+    if (tool === "Write")
+        return typeof args.content === "string" ? [{ del: [], add: lines(args.content) }] : null;
+    const edits = tool === "MultiEdit" ? (Array.isArray(args.edits) ? args.edits : null) : [args];
+    if (!edits)
+        return null;
+    const hunks = edits
+        .filter((e) => !!e && typeof e === "object")
+        .map((e) => ({ del: lines(e.old_string), add: lines(e.new_string) }))
+        .filter((h) => h.del.length || h.add.length);
+    return hunks.length ? hunks : null;
+}
+//# sourceMappingURL=view-history.js.map

package/dist/view-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-history.js","sourceRoot":"","sources":["../src/view-history.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,yHAAyH;AACzH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAW,CAAC;AA6B/F,0GAA0G;AAC1G,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,MAAM,MAAM,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClG,MAAM,CAAC,GAAqB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,SAAS;QAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS;QAAE,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;IACnC,IAAI,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;IACxD,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;IACzE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8BAA8B;AAC9B,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAY,EAAE,CAAmB;IACnF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACxH,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;QAC7I,gGAAgG;QAChG,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClK,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IAC7I,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAChG,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,QAAQ,CAAC,CAAU,EAAE,IAAa;IAChD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9I,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/J,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,SAAS,CAAC,QAAQ;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;QAClE,IAAI,IAAI,GAAW,SAAS,CAAC,QAAQ,CAAC;QACtC,MAAM,IAAI,GAA4C,EAAE,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,IAAI,CAAC;gBAAE,MAAM;YACrB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;YACrD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,qGAAqG;AACrG,SAAS,KAAK,CAAC,IAAY,IAAY,OAAO,IAAI,CAAC,OAAO,CAAC,gDAAgD,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAEzI,SAAS,MAAM,CAAC,IAAY,EAAE,IAAa;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,gHAAgH;AAChH,SAAS,MAAM,CAAC,IAAY,EAAE,KAAyB;IACrD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1G,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,MAAM,KAAK,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK;SAChB,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;SACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SACpE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC"}

package/dist/web-api.d.ts

@@ -19,12 +19,13 @@ import { type Actor as BoardActor, type TaskBoard } from "./scheduler/task-board
 import { type PreviewAvailability } from "./web-preview.js";
 import { type WebChatHistory, type WebChatMessage, type WebChatPost } from "./web-chat-history.js";
 import { type WebFileLedger } from "./web-upload.js";
-import type { WebSessionStore, SessionRecord } from "./web-session.js";
+import type { WebSessionStore, SessionRecord, WebDeviceRow } from "./web-session.js";
 import { type WebPrefsStore } from "./web-prefs.js";
 import { type WebAccount } from "./web-profile.js";
 import { type MentionNames, type MentionQuery } from "./web-mentions.js";
 import type { ExplicitInstanceRemoval } from "./instance-removal.js";
 import type { RuntimeCoordinator } from "./runtime-coordinator.js";
+import { type TopicDeleteOutcome } from "./instance-topic-delete.js";
 /**
  * #1920 §5.2: one event for the guests' streams only, each as projected for it — a message that has just become what
  * its channel saw (an admin's page already has it, unchanged).
@@ -40,9 +41,12 @@ export interface WebApiContext {
     recoverNativePane?(name: string, launchId: string, authorized: () => boolean): Promise<void>;
     startFreshNativePane?(name: string, launchId: string, sessionId: string | null, authorized: () => boolean): Promise<void>;
     nativeInstanceRuntime?(): import("./fleet-windows-runtime.js").FleetWindowsRuntime;
+    agentRuntimeChanges?(): import("./agent-runtime-change.js").AgentRuntimeChanges;
     createNativePaneInstance?(profile: Record<string, unknown>, channelId: string | undefined, authorized: () => boolean, execution: import("./settings-transaction.js").SettingsExecution): Promise<unknown>;
     updateNativePaneConfig?(name: string, patch: Partial<import("./fleet-windows-runtime.js").NativeRuntimePatch>, authorized: () => boolean, execution?: import("./settings-transaction.js").SettingsExecution): Promise<unknown>;
     runtimeCoordinator?(): RuntimeCoordinator;
+    /** The static installer files (script and bundle) and the hash of the script the dashboard shows. */
+    runtimeInstaller?(): import("./runtime-install.js").RuntimeInstallService;
     readonly webToken: string | null;
     /** #2072: what this host can run (the published snapshot); absent in a hand-built context. */
     backendAvailabilityRows?(): import("./backend-availability.js").BackendAvailability[];
@@ -65,6 +69,8 @@ export interface WebApiContext {
     readonly browserBackendSignIns?: import("./browser-backend-signins.js").BrowserBackendSignIns;
     /** #2233: Settings → Agents' sign-in list (FleetManager.backendSignInTargets). */
     backendSignInTargets?(): import("./web-backend-login.js").SignInTarget[];
+    /** Starts, in the background, reading the account behind each Claude Code sign-in (masked). Never awaited: the list answers at once with what is known. */
+    refreshSignInIdentities?(): void;
     readonly dataDir: string;
     readonly sseClients: Set<ServerResponse>;
     readonly fleetConfig: {
@@ -124,6 +130,8 @@ export interface WebApiContext {
     /** #1666: the cancel/progress bubble a platform inbound starts, posted in the instance's topic. */
     startWebChatProgress?(name: string): Promise<void>;
     readonly daemons: Map<string, unknown>;
+    /** #3212: the Accounts view (accounts-view.ts), for the local admin session only. */
+    accountsView?(): Promise<unknown>;
     readonly eventLog: {
         logActivity(event: string, sender: string, summary: string, receiver?: string, detail?: string): void;
         listActivity(opts?: {
@@ -379,6 +387,22 @@ export interface WebApiContext {
     webOutsideConfirmEnrollment?(req: IncomingMessage, code: string): "ok" | "wrong" | "expired" | "unsaved" | "not_here";
     webOutsideRemove?(req: IncomingMessage): "ok" | "unsaved" | "not_here";
     webOutsideSwitch?(req: IncomingMessage, on: boolean): "ok" | "not_enrolled" | "not_here" | "not_allowed" | "unsaved";
+    /** Refs #3061 (P2a): a web-only fleet's new-device approval — may this session approve (the verified owner), and the decision itself. */
+    webDevicesStatus?(req: IncomingMessage): {
+        webOnly: boolean;
+        owner: boolean;
+        authority?: boolean;
+        devices?: WebDeviceRow[];
+    };
+    webDeviceLoginAct?(req: IncomingMessage, op: "lookup" | "approve" | "deny", code: string): {
+        status: number;
+        body: Record<string, unknown>;
+    };
+    /** Refs #3061 (P2b): the owner ends another signed-in device (the settings list's button). */
+    webDeviceSignOut?(req: IncomingMessage, handle: string): {
+        status: number;
+        body: Record<string, unknown>;
+    };
     /** #2910 D2: a web-only fleet's Notices (web-notices.ts); null on a fleet whose General says them. */
     webNoticesFeed?(): {
         view(): {
@@ -413,6 +437,11 @@ export interface WebApiContext {
         explicit?: boolean;
     }): Promise<void>;
     removeInstance(name: string, authorization: ExplicitInstanceRemoval, execution?: SettingsExecution): Promise<void>;
+    /** delete_instance's removal: the agent, then its own topic (by default), with the platform's answer. */
+    removeInstanceAndTopic?(name: string, authorization: ExplicitInstanceRemoval, opts: {
+        deleteTopic: boolean;
+        execution?: SettingsExecution;
+    }): Promise<TopicDeleteOutcome>;
     lastInboundUser: Map<string, string>;
     saveFleetConfig(): void;
     readonly lifecycle: {
@@ -545,6 +574,24 @@ export interface AppShellContext {
     guestTrusted?(owner: WebAccount): boolean;
 }
 export type AppShellMode = "full" | "view-only";
+/**
+ * AgEnD Hub P1, slice 3: the app shell as a Hub's own workspace (served only by the Hub's listener, at its own origin).
+ * It boots Hub-only (app.js: no fleet stream, chat, Needs you, preferences or themes). Nothing of the request is read
+ * — no cookie (the fleet's or the Hub's), no session, no Host: who is signed in is the page's own /hub/v1/session.
+ */
+export declare const HUB_SHELL_DROPS = "<script src=\"/assets/agend-auth.js\"></script>";
+export declare function serveHubWorkspaceShell(res: ServerResponse, hub: {
+    name: string;
+    preview?: Readonly<import("./hub/preview.js").HubPreviewView>;
+}): void;
 /** The app shell page for one entry, under the panels' CSP; it may frame exactly <preview origin>/frame, and only
  *  when this load chose one. */
-export declare function serveAppShell(req: IncomingMessage, res: ServerResponse, ctx: AppShellContext, mode: AppShellMode): void;
+/**
+ * The app shell page. `opts.hubWorkspace`: the page is a Hub's own workspace (slice 1's Hub listener only — the fleet's
+ * listener never passes it), so it is drawn as the Hub shell.
+ */
+export declare function serveAppShell(req: IncomingMessage, res: ServerResponse, ctx: AppShellContext, mode: AppShellMode, opts?: {
+    hubWorkspace?: {
+        name: string;
+    };
+}): void;

package/dist/web-api.js

@@ -1,3 +1,4 @@
+import { hubModeOf, hubNameOf } from "./hub-mode.js";
 import { CANVAS_WORKER_EXPERIMENTAL_MESSAGE } from "./web-experimental.js";
 import { MachineSlotLimitError } from "./windows-agents.js";
 import { daemonTopicMode } from "./web-only-fleet.js";
@@ -46,6 +47,9 @@ import { WEB_CHAT_CARDS_OVERFLOW, catchUpWindow, newWebMessageId, parseLastEvent
 import { PAGE_SHARE_LIMITS, htmlFences, htmlTitle } from "./page-share.js";
 import { attachmentDelivery, createPartFile, displayName, fileTooLargeText, INLINE_MIME, isFileId, MEDIA_RANGE_MAX, publicAttachment, UPLOAD_LIMITS, UPLOAD_MAX_MS, UPLOAD_STALL_MS, UploadSniffer, uploadLimits, wellFormed } from "./web-upload.js";
 import { getAgendHome } from "./paths.js";
+import { workspaceChanges, workspaceFile, workspaceImage, workspaceList, workspaceRoot, WorkspaceError } from "./agent-workspace.js";
+import { isGeneralInstance } from "./general-instance.js";
+import { resolveToolSet } from "./tool-permissions.js";
 import { OPERATOR, isOwnerEffectKey } from "./web-prefs.js";
 import { WEB_NAME_FALLBACK, webPersonKey } from "./web-profile.js";
 import { commitTeamCreate, commitTeamUpdate } from "./outbound-handlers.js";
@@ -58,10 +62,13 @@ import { xmsgShown } from "./search/search-docs.js";
 import { WebSendDedupe } from "./web-send-dedupe.js";
 import { handleWindowsCliRequest, nativeCliAuthorization } from "./windows-cli-api.js";
 import { createNativeInstance, handleNativeInstanceRequest } from "./native-instance-api.js";
+import { handleAgentRuntimeChange } from "./agent-runtime-api.js";
 import { isWindowsInstance, isNativePaneInstance, isNativeExecInstance } from "./native-instance-registry.js";
 import { handleNativeModelCatalog } from "./native-model-catalog.js";
 import { claudeDocumentedModels } from "./model-catalog-defaults.js";
 import { handleRuntimeRequest } from "./runtime-api.js";
+import { taskBoardOffNames } from "./dashboard-permissions.js";
+import { topicFields } from "./instance-topic-delete.js";
 // ── Strict public-facing schemas ────────────────────────────────────────────
 // web-api endpoints must reject unknown fields so the dashboard cannot inject
 // internal-only flags that would reach handleCreate/scheduler/config writers.
@@ -240,8 +247,8 @@ function visibleNeeds(ctx, gateway, items) {
     const { hidden } = boardHiding(ctx, true);
     return items.filter((i) => {
         const item = i;
-        if (item.type === "config")
-            return false; // private operator configuration diagnostics never cross a public link
+        if (item.type === "config" || item.type === "hub")
+            return false; // member-local diagnostics/proposals never cross a public link
         if (item.type !== "task")
             return true;
         const code = item.card?.code;
@@ -1216,7 +1223,18 @@ function handleBackendLogin(req, res, url, ctx, path, method) {
     }
     const action = /^\/ui\/backend-login\/(check|start|cancel)$/.exec(path)?.[1];
     if (reading && path === "/ui/backend-login" && [...url.searchParams.keys()].length === 0) {
-        json(res, 200, { login: logins.view(first.handle), targets: ctx.backendSignInTargets?.() ?? [] });
+        // The sign-in view (its access code included) is answered at once and never waits for an account to be read: that happens in the background
+        // and the page is told to read again when something new is known.
+        try {
+            ctx.refreshSignInIdentities?.();
+        }
+        catch { /* the list is served with what is known */ }
+        try {
+            json(res, 200, { login: logins.view(first.handle), targets: ctx.backendSignInTargets?.() ?? [] });
+        }
+        catch {
+            json(res, 503, { error: "sign_in_unavailable" });
+        }
         return true;
     }
     if (method !== "POST" || !action) {
@@ -1894,6 +1912,8 @@ export function handleWebRequest(req, res, url, ctx) {
         json(res, 403, { error: "Windows runtime requires an administrator on the local dashboard" });
         return true;
     }
+    if (handleAgentRuntimeChange(req, res, url, ctx))
+        return true;
     if (handleNativeInstanceRequest(req, res, url, ctx))
         return true;
     if (handleWindowsCliRequest(req, res, url, ctx))
@@ -1908,6 +1928,11 @@ export function handleWebRequest(req, res, url, ctx) {
         json(res, 400, { error: "invalid instance name" });
         return true;
     }
+    // AgEnD Hub P1: the Hub's pages live on a Hub's own listener (slice 1), never on this fleet's: the ordinary not-found.
+    if (shell?.kind === "shell" && shell.route.panel === "hub") {
+        json(res, 404, { error: "not found" });
+        return true;
+    }
     if (shell?.kind === "shell") {
         serveAppShell(req, res, ctx, "full");
         return true;
@@ -2199,6 +2224,112 @@ export function handleWebRequest(req, res, url, ctx) {
         json(res, 200, { messages, boot: ctx.webChatHistory?.boot ?? null, lastId: ctx.webChatHistory?.lastId ?? 0, ...(allHidden ? { allHidden: true } : {}) });
         return true;
     }
+    // ── #3212 PR 1: Settings → Agents → Accounts (read-only) ─────────────────────────────────
+    // Each CLI's default sign-in and credential profiles, who uses them and their weekly usage. Names, states, the masked
+    // identity and the host login command (which, as in the sign-in list, names the profile's folder) — no credential or
+    // full e-mail: only for the fleet's local admin session — never the public link, a guest, a token or the gateway (the
+    // same rule as the sign-in list it extends).
+    if (method === "GET" && path === "/ui/accounts") {
+        res.setHeader("Cache-Control", "private, no-store");
+        if (gatewayRequestContext(req)) {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        const localAdmin = () => {
+            const v = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
+            return v.kind === "allow" && v.via === "session" && v.session.tier === "admin" && v.session.surface === "local" ? v.session : null;
+        };
+        const who = localAdmin();
+        if (!who) {
+            json(res, 403, { error: "accounts_need_a_local_admin" });
+            return true;
+        }
+        if (typeof ctx.accountsView !== "function") {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        void ctx.accountsView().then(view => {
+            if (localAdmin()?.handle !== who.handle) {
+                json(res, 403, { error: "accounts_need_a_local_admin" });
+                return;
+            }
+            json(res, 200, view);
+        }, err => { ctx.logger.error({ err: err.message }, "Accounts view failed"); json(res, 500, { error: "could not read the accounts" }); });
+        return true;
+    }
+    // ── #3153 P1: an agent's Files / Changes (read-only) ─────────────────────────────────
+    // The fleet's local admin session only: never the public link, a guest, a token or a connection from outside. One
+    // agent's own working directory (agent-workspace.ts confines and filters every path); not General or a coordinator
+    // (they work in the fleet's own directory), not an agent on another machine.
+    if (method === "GET" && path === "/ui/workspace") {
+        res.setHeader("Cache-Control", "private, no-store");
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        if (gatewayRequestContext(req)) {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        const localAdmin = () => {
+            const v = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
+            return v.kind === "allow" && v.via === "session" && v.session.tier === "admin" && v.session.surface === "local" ? v.session : null;
+        };
+        const who = localAdmin();
+        if (!who) {
+            json(res, 403, { error: "workspace_needs_a_local_admin" });
+            return true;
+        }
+        const p = url.searchParams, instance = p.get("instance") ?? "", op = p.get("op") ?? "";
+        const cfg = ctx.fleetConfig?.instances && Object.hasOwn(ctx.fleetConfig.instances, instance) ? ctx.fleetConfig.instances[instance] : undefined;
+        if (!cfg) {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        const offered = !isGeneralInstance(ctx.fleetConfig, instance) && resolveToolSet(cfg, instance) !== "coordinator"
+            && cfg.runtime !== "windows" && !cfg.machine_id;
+        if (!offered) {
+            json(res, 404, { error: "workspace_not_offered" });
+            return true;
+        }
+        if (!["changes", "list", "file", "image"].includes(op)) {
+            json(res, 400, { error: "op: changes | list | file | image" });
+            return true;
+        }
+        const workDir = String(cfg.working_directory ?? "").replace(/^~(?=$|\/)/, process.env.HOME ?? "~");
+        void (async () => {
+            try {
+                const ws = await workspaceRoot(workDir, getAgendHome());
+                // The session must still be the same one when the answer goes out (it may have ended while git ran).
+                const answer = async () => {
+                    if (op === "changes")
+                        return { kind: "json", body: await workspaceChanges(ws) };
+                    if (op === "list")
+                        return { kind: "json", body: await workspaceList(ws, p.get("path") ?? "") };
+                    if (op === "file")
+                        return { kind: "json", body: await workspaceFile(ws, p.get("path")) };
+                    return { kind: "image", body: await workspaceImage(ws, p.get("path")) };
+                };
+                const out = await answer();
+                if (localAdmin()?.handle !== who.handle) {
+                    json(res, 403, { error: "workspace_needs_a_local_admin" });
+                    return;
+                }
+                if (out.kind === "image") {
+                    res.writeHead(200, { "Content-Type": out.body.mime, "Content-Length": String(out.body.bytes.length), "Content-Security-Policy": "default-src 'none'; sandbox" });
+                    res.end(out.body.bytes);
+                    return;
+                }
+                json(res, 200, out.body);
+            }
+            catch (err) {
+                if (err instanceof WorkspaceError) {
+                    json(res, err.code === "not_found" || err.code === "not_a_directory" ? 404 : 403, { error: err.code });
+                    return;
+                }
+                ctx.logger.error({ err: err.message, instance }, "Workspace read failed");
+                json(res, 500, { error: "could not read the folder" });
+            }
+        })();
+        return true;
+    }
     // ── #1218: the Log tab ─────────────────────────────────
     // An instance's steps, read on demand from its own transcript (log-service.ts). Read-only, and offered on the public
     // link on purpose (the user's decision): the same masking applies to every viewer. Passive (web-auth.ts).
@@ -3059,6 +3190,93 @@ export function handleWebRequest(req, res, url, ctx) {
         });
         return true;
     }
+    // ── Refs #3061 (P2a): signing a new device in with its 8-character code (a web-only fleet) ──
+    // GET /ui/devices: whether this is such a fleet and whether THIS session may approve (it is the verified owner — this
+    // computer's admin here, or signed in from outside with the authenticator's code). POST /ui/devices/lookup {code}: the
+    // request that code names, for the confirm screen; POST /ui/devices/approve {code} and /ui/devices/deny {code}. Every
+    // one asks the live session again in the fleet (webDeviceLoginAct) and answers 403 `owner_required` to anyone else —
+    // a guest, a LAN or device-approved session, the CLI's header token. Over the public link only for the owner who
+    // signed in from outside. A decision hands the new device nothing: its session is made by its own next poll.
+    if (method === "GET" && path === "/ui/devices") {
+        res.setHeader("Cache-Control", "no-store");
+        json(res, 200, ctx.webDevicesStatus?.(req) ?? { webOnly: false, owner: false, devices: [] });
+        return true;
+    }
+    // Refs #3061 (P2b): POST /ui/devices/signout {handle} — the verified owner ends another signed-in device. The same
+    // authority as approving one, asked of the live session in the fleet after the body is in (webDeviceSignOut answers
+    // 403 `owner_required` to anyone else before it looks the handle up). Over the public link only for the owner signed in
+    // from outside, like approving.
+    if (method === "POST" && path === "/ui/devices/signout") {
+        const act = ctx.webDeviceSignOut?.bind(ctx);
+        if (!act) {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        (async () => {
+            let body;
+            try {
+                body = await parseBody(req);
+            }
+            catch {
+                json(res, 400, { error: "Invalid JSON" });
+                return;
+            }
+            if (!permitWebContinuation(req, res, ctx))
+                return;
+            const handle = body && typeof body === "object" ? body.handle : undefined;
+            if (typeof handle !== "string" || !/^[0-9a-f]{16}$/.test(handle)) {
+                json(res, 400, { error: "handle required" });
+                return;
+            }
+            res.setHeader("Cache-Control", "no-store");
+            const r = act(req, handle);
+            json(res, r.status, r.body);
+        })().catch(err => {
+            ctx.logger.error({ err: err.message }, "Device sign-out failed");
+            try {
+                json(res, 500, { error: "devices_failed" });
+            }
+            catch { /* already answered */ }
+        });
+        return true;
+    }
+    if (method === "POST" && (path === "/ui/devices/lookup" || path === "/ui/devices/approve" || path === "/ui/devices/deny")) {
+        const act = ctx.webDeviceLoginAct?.bind(ctx);
+        if (!act) {
+            json(res, 404, { error: "not_found" });
+            return true;
+        }
+        const op = path === "/ui/devices/lookup" ? "lookup" : path === "/ui/devices/approve" ? "approve" : "deny";
+        (async () => {
+            let body;
+            try {
+                body = await parseBody(req);
+            }
+            catch {
+                json(res, 400, { error: "Invalid JSON" });
+                return;
+            }
+            if (!permitWebContinuation(req, res, ctx))
+                return;
+            const code = body && typeof body === "object" ? body.code : undefined;
+            if (typeof code !== "string" || code.length > 32) {
+                json(res, 400, { error: "code required" });
+                return;
+            }
+            res.setHeader("Cache-Control", "no-store");
+            const r = act(req, op, code);
+            if (typeof r.body.retryAfterMs === "number")
+                res.setHeader("Retry-After", String(Math.ceil(r.body.retryAfterMs / 1000)));
+            json(res, r.status, r.body);
+        })().catch(err => {
+            ctx.logger.error({ err: err.message }, "New device approval failed");
+            try {
+                json(res, 500, { error: "devices_failed" });
+            }
+            catch { /* already answered */ }
+        });
+        return true;
+    }
     // ── alpha.2 (M-2300): an agent's Windows request, decided by a web-only fleet's owner in Needs you ──
     // The list is the owner's only: anyone else (a guest, a LAN or public-link session, a chat fleet's admin) reads an
     // empty one, so nothing actionable ever reaches them. The stream's `agent_proposals` event carries nothing.
@@ -3389,12 +3607,17 @@ export function handleWebRequest(req, res, url, ctx) {
                     return;
                 }
                 const execution = settingsRequestExecution(req);
-                if (execution)
+                // The same removal as delete_instance: the agent, then its own topic (the user's default), said truthfully.
+                let topic = null;
+                if (ctx.removeInstanceAndTopic) {
+                    topic = await ctx.removeInstanceAndTopic(name, authorizeExplicitInstanceRemoval("dashboard-confirmed"), { deleteTopic: true, ...(execution ? { execution } : {}) });
+                }
+                else if (execution)
                     await ctx.removeInstance(name, authorizeExplicitInstanceRemoval("dashboard-confirmed"), execution);
                 else
                     await ctx.removeInstance(name, authorizeExplicitInstanceRemoval("dashboard-confirmed"));
                 ctx.emitSseEvent("status", ctx.getUiStatus());
-                json(res, 200, { deleted: name });
+                json(res, 200, { deleted: name, ...topicFields(name, topic) });
             }
             catch (err) {
                 json(res, 500, { error: err.message });
@@ -3628,7 +3851,10 @@ export function handleWebRequest(req, res, url, ctx) {
                 // board for a revision, so it is built once per (revision, done=all, minute) — the minute for the 14-day
                 // window. The public link's reads are filtered per request (hidden instances) and are built each time.
                 // #2757 review: and by the dispatchers gone (a deleted one makes its cards the person's, the revision unchanged).
-                const key = gateway ? null : `${rev}:${allDone ? 1 : 0}:${Math.floor(Date.now() / 60_000)}:${board.goneDispatchers(ctx.dispatcherGone)}`;
+                // The instances with the task board switched off: no card is handed to them (the pickers mark them), and a
+                // fleet.yaml edit changes them with the revision unchanged.
+                const boardOff = taskBoardOffNames(ctx.fleetConfig).filter((n) => !hiddenName(n));
+                const key = gateway ? null : `${rev}:${allDone ? 1 : 0}:${Math.floor(Date.now() / 60_000)}:${board.goneDispatchers(ctx.dispatcherGone)}:${boardOff.join("\u0000")}`;
                 const kept = key ? boardBodies.get(board) : undefined;
                 if (kept && kept.key === key) {
                     jsonText(res, 200, kept.body);
@@ -3640,7 +3866,7 @@ export function handleWebRequest(req, res, url, ctx) {
                 // #2355 review: the names a project's lead may be — the fleet's instances (a Classic-only room is not one); over the
                 // public link, not a hidden one.
                 const leads = Object.keys(ctx.fleetConfig?.instances ?? {}).filter((n) => !hiddenName(n)).sort();
-                const body = JSON.stringify({ rev, cards: board.views(cards, scope, ctx.dispatcherGone), projects, leads, stats: board.projectStats(ctx.dispatcherGone) });
+                const body = JSON.stringify({ rev, cards: board.views(cards, scope, ctx.dispatcherGone), projects, leads, boardOff, stats: board.projectStats(ctx.dispatcherGone) });
                 if (key)
                     boardBodies.set(board, { key, body });
                 jsonText(res, 200, body);
@@ -4893,6 +5119,16 @@ function shellHtmlTag(ctx, mode, viewer) {
 function shellOwnerCss(ctx, mode, viewer) {
     return mode === "full" && !viewer?.guest && viewer?.person !== null && viewer?.person !== undefined && ctx.ownerCss ? ctx.ownerCss.active(viewer.person) : null;
 }
+/**
+ * AgEnD Hub P1 (docs/design/hub.md, docs/design/hub-ui-client.md): the page's Hub mark — presentation only, never
+ * authority, set by the listener that serves the page (never a client's choice): `member` on this fleet's listener when
+ * `hub_member.enabled`, never over the public link. `hub` is only the Hub listener's own workspace page
+ * (serveHubWorkspaceShell). Nothing otherwise: no Hub UI is drawn and no Hub module loads.
+ */
+function hubBodyAttrs(req, config) {
+    // hub.md §1: member handlers are local-owner-only and unavailable through the public gateway — no member mark there.
+    return hubModeOf(config).member && !gatewayRequestContext(req) ? ' data-hub="member"' : "";
+}
 function guestBodyAttrs(ctx, owner, attr) {
     const badge = ctx.guestBadge?.(owner);
     const trusted = ctx.guestTrusted?.(owner) ? ' data-guest-level="trusted"' : "";
@@ -4929,12 +5165,47 @@ function shellBodyTag(req, ctx, mode, viewer) {
         + `${gatewayRequestContext(req) ? ' data-public-link="1"' : ""}`
         // #2478: search is offered over the public link unless web.search.public_link is false (the page then shows no entry).
         + `${gatewayRequestContext(req) && ctx.fleetConfig?.web?.search?.public_link === false ? ' data-search-link="0"' : ""}`
+        // AgEnD Hub P1 (docs/design/hub-ui-client.md): the Hub's marks — only when a switch is on, never on a guest's page.
+        + `${mode === "full" && !viewer?.guest ? hubBodyAttrs(req, ctx.fleetConfig) : ""}`
         // #1920 phase 3: a guest's page — the shell shows only what a guest may use, and who it is signed in as.
         + `${mode === "full" && viewer?.guest && viewer.owner ? guestBodyAttrs(ctx, viewer.owner, attr) : ""}>`;
 }
+/**
+ * AgEnD Hub P1, slice 3: the app shell as a Hub's own workspace (served only by the Hub's listener, at its own origin).
+ * It boots Hub-only (app.js: no fleet stream, chat, Needs you, preferences or themes). Nothing of the request is read
+ * — no cookie (the fleet's or the Hub's), no session, no Host: who is signed in is the page's own /hub/v1/session.
+ */
+export const HUB_SHELL_DROPS = '<script src="/assets/agend-auth.js"></script>';
+export function serveHubWorkspaceShell(res, hub) {
+    try {
+        // Without the fleet's fetch wrapper (agend-auth.js): it reads the fleet's /auth/session for a CSRF value and answers
+        // a 401 with the fleet's "session ended" banner. The Hub's pages carry the Hub's own CSRF (hub-client.js).
+        const html = readFileSync(join(__dirname, "ui", "app.html"), "utf-8").replace(HUB_SHELL_DROPS, "");
+        const attr = (v) => v.replace(/[&<>"']/g, c => `&#${c.charCodeAt(0)};`);
+        const name = hubNameOf(hub.name);
+        const preview = hub.preview;
+        const previewAttrs = preview ? ` data-dashboard-origin="${attr(preview.dashboardOrigin)}"`
+            + (preview.previewOrigin && preview.bootId ? ` data-preview-origin="${attr(preview.previewOrigin)}" data-preview-boot="${attr(preview.bootId)}"`
+                : ` data-preview-reason-code="${attr(preview.reasonCode ?? "notOffered")}" data-preview-reason="${attr(preview.reason ?? "")}"`) : "";
+        const body = `<body data-mode="full" data-web-transport="none" data-usage-panel="0" data-log-tab="0" data-hub="hub"${name ? ` data-hub-name="${attr(name)}"` : ""}${previewAttrs}>`;
+        sendPanelHtml(res, withAppIconLinks(html).replace("<body>", body), 200, { "Cache-Control": "no-store" }, { mediaSrc: "'none'", ...(preview?.previewOrigin ? { frameSrc: `${preview.previewOrigin}/frame` } : {}) });
+    }
+    catch {
+        json(res, 500, { error: "app.html not found" });
+    }
+}
 /** The app shell page for one entry, under the panels' CSP; it may frame exactly <preview origin>/frame, and only
  *  when this load chose one. */
-export function serveAppShell(req, res, ctx, mode) {
+/**
+ * The app shell page. `opts.hubWorkspace`: the page is a Hub's own workspace (slice 1's Hub listener only — the fleet's
+ * listener never passes it), so it is drawn as the Hub shell.
+ */
+export function serveAppShell(req, res, ctx, mode, opts = {}) {
+    // A Hub workspace is drawn from nothing of this fleet's: no fleet cookie, session, preference or preview is read.
+    if (opts.hubWorkspace) {
+        serveHubWorkspaceShell(res, opts.hubWorkspace);
+        return;
+    }
     try {
         const html = readFileSync(join(__dirname, "ui", "app.html"), "utf-8");
         const viewer = mode === "full" ? prefsViewer(req, new URL(req.url ?? "/", "http://localhost"), ctx) : null;