@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/ui/settings-strings.js

@@ -5,9 +5,8 @@ import { register } from "/assets/app-i18n.js";
 register("settings", {
   en: {
     noticeTopic: "Topic", noticeOff: "Off",
-    webNotifyLogin: "Web sign-in notices", dailyTips: "Daily tips",
+    webNotifyLogin: "Web sign-in notices",
     webNotifyLoginHint: "Posted in the topic. Off suppresses operator notices only; guest and public-link security notices still post. Default: Topic.",
-    dailyTipsHint: "Posted in the General topic. Default: Topic. /tips still posts where invoked.",
     title: "Settings",
     myAgents: "My Agents",
     bots: "Bots",
@@ -64,13 +63,12 @@ register("settings", {
     tags: "Tags",
     generalTopicField: "General topic (fleet dispatcher)",
     oneGeneral: "{0} is already the General. Untick it first.",
-    runtimeResources: "Runtime & Resources",
     autoPause: "Auto-pause after",
     minutes: "minutes",
     inheritDefault: "Inherit from defaults",
     // #2347 §10: the value in effect, and where it comes from.
     defaultMark: "default", inEffect: "In effect: {0}", inheritedValue: "Inherited: {0}",
-    changeInDefaults: "change in Agent defaults", changeInClassic: "change in ClassicBot defaults",
+    changeInClassic: "change in ClassicBot defaults",
     cappedBySession: "capped by the session length", hoursValue: "{0} h", minutesValue: "{0} min", valueOn: "on", valueOff: "off", valueNone: "none",
     concurrencyAuto: "automatic, 2–10 by free memory and CPU cores", inEffectShort: "in effect: {0}", cappedByTotal: "capped by upload_max_total_mb",
     statusEmojis: "Status emojis",
@@ -98,18 +96,13 @@ register("settings", {
     se_externalEmojiHint: "Another server's emoji needs the bot's Use External Emojis permission in the channel it reacts in.",
     se_unavailable: "unavailable",
     se_hint: "Empty keeps the default. The preview is resolved by AgEnD exactly as the bot will react. Progress prefix is not a reaction: it starts the progress message.",
-    detection: "Detection",
-    startup: "Startup",
     backendSection: "Backend",
     advancedSection: "Advanced",
-    hangEnabled: "Hang detector enabled",
     hangTimeout: "Stuck timeout",
     agentMode: "Agent mode",
     toolSet: "Tool set",
     toolSetUnset: "Not set ({0}; a General: {1})",
     toolProgress: "Tool progress",
-    crossInstanceVisibility: "Bot-to-bot messages in topics",
-    crossInstanceVisibilityHint: "full: the whole message · summary: one line · hidden: nothing. Messages are always delivered; the Mirror Topic still shows them.",
     replyCompletionGuard: "Require a delivered reply",
     dashboardAccess: "Dashboard access",
     dashboardAccessHint: "What this agent may use on the dashboard, on top of its tool set. Switching a feature off applies at once (its tools are refused and leave its tool list); switching one on is confirmed first.",
@@ -167,7 +160,7 @@ register("settings", {
     failed: "Failed",
     actionFailed: "{0} failed",
     noAgentMatch: "No agents match \"{0}\".",
-    deleteAgent: "Delete agent \"{0}\"? This will be applied only after you confirm the pending changes.",
+    deleteAgent: "Delete agent \"{0}\" and its chat topic (on Discord, its channel and history)? This will be applied only after you confirm the pending changes.",
     nameRequired: "name required",
     tokenEnvRequired: "token env required",
     removeBot: "Remove bot \"{0}\"? (the token in .env is left untouched)",
@@ -292,7 +285,7 @@ register("settings", {
     sec_agents: "Agents",
     "sec_windows-cli": "Windows CLI",
     sec_runtimes: "Runtime",
-    "sec_agent-defaults": "Agent defaults", sec_chat: "Chat & connections", "sec_web-dashboard": "Web dashboard", sec_access: "Access & security",
+    sec_chat: "Chat & connections", "sec_web-dashboard": "Web dashboard", sec_access: "Access & security",
     sec_advanced: "Advanced", sec_look: "Look", grp_you: "You", grp_fleet: "Fleet",
     classicDefaultsTitle: "ClassicBot defaults", publicLinkTitle: "Public link & fixed address", webDashboardTitle: "Dashboard features", webSettingsLabel: "Web settings",
     stRunning: "Running",
@@ -318,7 +311,6 @@ register("settings", {
     updateAgent: "Update {0}",
     projectRootsTitle: "Project folders", projectRootsHint: "New agents may only work inside these folders (empty: anywhere). Checked when an agent is created.",
     projectRootsAnywhere: "any folder",
-    updateDefaults: "Update agent defaults",
     updateClassicDefaults: "Update ClassicBot defaults and access",
     updateAccess: "Update {0} access",
     updateEmojis: "Update {0} status emojis",
@@ -349,7 +341,6 @@ register("settings", {
     keyApplied: "Applied",
     keyRolledBack: "Rolled back",
     keyRollbackFailed: "Rollback failed",
-    accessTitle: "Access",
     webChat: "Web chat",
     // #1629 r4 §3: Settings → Appearance (owner CSS).
     motionTitle: "Effects on this device", groupLook: "Look", groupLayout: "Your layout", groupCss: "Styles you write", groupMods: "Add-ons", groupAdvanced: "Advanced", learnMore: "Learn more: {0}",
@@ -582,7 +573,6 @@ register("settings", {
     searchRetentionUnset: "not set (no age limit; 300,000-row cap)",
     searchRetentionZero: "0 (no age limit; 300,000-row cap)",
     webSearchHint: "Global search keeps entries with no age limit by default. The daily prune still caps the index at 300,000 rows (oldest first). Set web.search.retention_days in fleet.yaml (1–3650 days, or 0 for no age limit); it takes effect at the next fleet start.",
-    defaultsTitle: "Defaults",
     classicBackend: "ClassicBot default backend",
     whoUsesClassic: "Who can use ClassicBot",
     userIdPlaceholder: "user id",
@@ -653,7 +643,6 @@ register("settings", {
     devApply: "Apply",
     devApplyHint: "Adds this edit to the Save bar below: Save writes it, with any other unsaved change.",
     devStaged: "In the Save bar: {0} change(s) to fleet.yaml. Save writes them, Discard drops them; edit and Apply again to replace them.",
-    devFormsUnsaved: "Save or discard the unsaved changes to agents, agent defaults or connections first: this editor writes the same settings.",
     yamlUnsaved: "An unsaved fleet.yaml edit (Advanced) writes these settings. Save or discard it to edit them here.",
     yamlOpen: "Open the editor",
     noChanges: "Nothing to change.",
@@ -665,7 +654,6 @@ register("settings", {
     help1: "Agents: each agent's settings, Start/Stop, Pause/Wake, and New agent.",
     help2: "Connections: who may use each bot, its binding, its status emojis, a new token; and provider API keys.",
     help3: "ClassicBot: each room's backend, model and options.",
-    help4: "General: defaults for every agent and ClassicBot defaults. Web: the dashboard's sign-in sessions, browser terminal, web echo, Log and public link. Review changes stages them.",
     help5: "Changes are staged, then applied together with Apply changes. Each shows what it costs: immediately, an agent restart, or an AgEnD restart.",
     help6: "A change to access, secrets or connections waits for a fleet admin to confirm it in chat before it applies.",
   },
@@ -696,9 +684,8 @@ register("settings", {
     se_unavailable: "無法使用",
     se_hint: "留空即使用預設值。預覽由 AgEnD 依 bot 實際 react 的方式解析。進度前綴不是反應，而是進度訊息開頭的 emoji。",
     noticeTopic: "頻道", noticeOff: "關閉",
-    webNotifyLogin: "網頁登入通知", dailyTips: "每日提示",
+    webNotifyLogin: "網頁登入通知",
     webNotifyLoginHint: "發在頻道。關閉只停用管理者登入通知；訪客與公開連結安全通知仍會發出。預設：頻道。",
-    dailyTipsHint: "發在 General 頻道。預設：頻道。/tips 仍送至呼叫的聊天室。",
     title: "設定",
     myAgents: "我的 Agent",
     bots: "機器人",
@@ -755,26 +742,20 @@ register("settings", {
     tags: "標籤",
     generalTopicField: "General topic（fleet 分派器）",
     oneGeneral: "{0} 已經是 General，請先取消勾選它。",
-    runtimeResources: "執行環境與資源",
     autoPause: "閒置後自動暫停",
     minutes: "分鐘",
     inheritDefault: "沿用全域預設值",
     defaultMark: "預設", inEffect: "目前生效：{0}", inheritedValue: "沿用：{0}",
-    changeInDefaults: "到 Agent 預設值變更", changeInClassic: "到 ClassicBot 預設值變更",
+    changeInClassic: "到 ClassicBot 預設值變更",
     cappedBySession: "受 session 時長限制", hoursValue: "{0} 小時", minutesValue: "{0} 分鐘", valueOn: "開", valueOff: "關", valueNone: "無",
     concurrencyAuto: "自動，依可用記憶體與 CPU 核心數取 2–10", inEffectShort: "實際：{0}", cappedByTotal: "受 upload_max_total_mb 限制",
-    detection: "偵測",
-    startup: "啟動",
     backendSection: "後端",
     advancedSection: "進階",
-    hangEnabled: "啟用卡住偵測",
     hangTimeout: "卡住逾時",
     agentMode: "Agent 模式",
     toolSet: "工具集",
     toolSetUnset: "未設定（{0}；General 為 {1}）",
     toolProgress: "工具進度",
-    crossInstanceVisibility: "Agent 之間的訊息在主題中",
-    crossInstanceVisibilityHint: "full：完整訊息 · summary：一行摘要 · hidden：不顯示。訊息一律照常送達，Mirror Topic 也照常顯示。",
     replyCompletionGuard: "要求送出回覆",
     dashboardAccess: "Dashboard 權限",
     dashboardAccessHint: "這個 agent 能在 dashboard 上用哪些功能（在工具組之外再加一層限制）。關掉立即生效（工具會被拒絕，也從它的工具清單拿掉）；打開要先確認。",
@@ -832,7 +813,7 @@ register("settings", {
     failed: "失敗",
     actionFailed: "{0}失敗",
     noAgentMatch: "沒有符合「{0}」的 Agent。",
-    deleteAgent: "確定刪除 Agent「{0}」嗎？只有在確認套用待處理變更後才會生效。",
+    deleteAgent: "確定刪除 Agent「{0}」及它的聊天 topic（在 Discord 上是它的頻道與訊息記錄）嗎？只有在確認套用待處理變更後才會生效。",
     nameRequired: "必須填寫名稱",
     tokenEnvRequired: "必須填寫 token 環境變數",
     removeBot: "確定移除機器人「{0}」嗎？（.env 中的 token 會保留）",
@@ -957,7 +938,7 @@ register("settings", {
     sec_agents: "Agent",
     "sec_windows-cli": "Windows CLI",
     sec_runtimes: "Runtime",
-    "sec_agent-defaults": "Agent 預設值", sec_chat: "聊天與連線", "sec_web-dashboard": "網頁儀表板", sec_access: "存取與安全",
+    sec_chat: "聊天與連線", "sec_web-dashboard": "網頁儀表板", sec_access: "存取與安全",
     sec_advanced: "進階", sec_look: "外觀", grp_you: "你自己", grp_fleet: "整個 Fleet",
     classicDefaultsTitle: "ClassicBot 預設值", publicLinkTitle: "公開連結與固定網址", webDashboardTitle: "儀表板功能", webSettingsLabel: "網頁設定",
     stRunning: "執行中",
@@ -983,7 +964,6 @@ register("settings", {
     updateAgent: "更新 {0}",
     projectRootsTitle: "專案資料夾", projectRootsHint: "新的 agent 只能在這些資料夾裡工作（留空：不限）。建立 agent 時檢查。",
     projectRootsAnywhere: "不限",
-    updateDefaults: "更新 agent 預設值",
     updateClassicDefaults: "更新 ClassicBot 預設值與存取",
     updateAccess: "更新 {0} 的存取",
     updateEmojis: "更新 {0} 的狀態表情",
@@ -1014,7 +994,6 @@ register("settings", {
     keyApplied: "已套用",
     keyRolledBack: "已還原",
     keyRollbackFailed: "還原失敗",
-    accessTitle: "存取",
     webChat: "網頁聊天",
     motionTitle: "這個裝置上的特效", groupLook: "外觀", groupLayout: "你的版面", groupCss: "自己寫的樣式", groupMods: "擴充", groupAdvanced: "進階", learnMore: "了解更多：{0}",
     colorTitle: "識別色", colorLead: "單一 agent 的顏色：⋯ 選單 → 顏色…",
@@ -1245,7 +1224,6 @@ register("settings", {
     searchRetentionUnset: "未設定（不限天數；上限 30 萬筆）",
     searchRetentionZero: "0（不限天數；上限 30 萬筆）",
     webSearchHint: "全域搜尋預設不限天數。每日清理仍會把索引上限維持在 30 萬筆（先刪最舊的）。在 fleet.yaml 設定 web.search.retention_days（1–3650 天，或 0 代表不限天數），下次啟動 fleet 後生效。",
-    defaultsTitle: "預設值",
     classicBackend: "ClassicBot 預設 backend",
     whoUsesClassic: "誰可以使用 ClassicBot",
     userIdPlaceholder: "使用者 id",
@@ -1316,7 +1294,6 @@ register("settings", {
     devApply: "套用",
     devApplyHint: "把這次編輯加入下方的儲存列：按「儲存」時和其他未儲存的變更一起寫入。",
     devStaged: "已加入儲存列：fleet.yaml 的 {0} 項變更。按「儲存」寫入，按「捨棄」放棄；修改後再按「套用」會取代它們。",
-    devFormsUnsaved: "請先儲存或捨棄 Agent、Agent 預設值或連線中未儲存的變更：這個編輯器會寫入相同的設定。",
     yamlUnsaved: "有一份未儲存的 fleet.yaml 編輯（進階）會寫入這些設定。請先儲存或捨棄它，才能在這裡修改。",
     yamlOpen: "開啟編輯器",
     noChanges: "沒有需要變更的內容。",
@@ -1328,7 +1305,6 @@ register("settings", {
     help1: "Agent：每個 agent 的設定、啟動/停止、暫停/喚醒，以及新增 agent。",
     help2: "連線：誰可以使用各個 bot、它的綁定、狀態表情、新的 token；以及供應商 API key。",
     help3: "ClassicBot：每個房間的 backend、model 與選項。",
-    help4: "一般：所有 agent 的預設值與 ClassicBot 預設值。網頁：儀表板的登入 session、瀏覽器終端機、網頁轉發、紀錄與公開連結。「檢查變更」會把它們暫存。",
     help5: "變更會先暫存，再用「套用變更」一起套用。每項都會標示代價：立即生效、重新啟動 agent，或重新啟動 AgEnD。",
     help6: "存取、密鑰或連線的變更，要等 fleet 管理員在聊天中確認後才會套用。",
   },
@@ -1385,13 +1361,7 @@ register("settings", {
     "uiConnectionColumnService": "Service & connection",
     "uiConnectionColumnInfo": "Connection details",
     "uiClassicColumnRoom": "Room",
-    "uiProviderKeyActionHint": "Verify and apply each key separately. These actions do not wait for the page Save button.",
-    "uiDefaultsModelsTitle": "Models & language",
-    "uiDefaultsWorkTitle": "Work behavior",
-    "uiDefaultsCollaborationTitle": "Collaboration & replies",
-    "uiDefaultsCapabilitiesTitle": "Agent capabilities & permissions",
-    "uiDefaultsWorkspaceTitle": "Workspace rules",
-    "uiDefaultsAdvancedTitle": "Advanced execution policies"
+    "uiProviderKeyActionHint": "Verify and apply each key separately. These actions do not wait for the page Save button."
   },
   "zh-TW": {
     "uiAgentColumnName": "名稱",
@@ -1403,13 +1373,7 @@ register("settings", {
     "uiConnectionColumnService": "服務與連線",
     "uiConnectionColumnInfo": "連線資訊",
     "uiClassicColumnRoom": "房間",
-    "uiProviderKeyActionHint": "每組金鑰會分別驗證並套用，不需等待頁面底部的儲存。",
-    "uiDefaultsModelsTitle": "模型與語言",
-    "uiDefaultsWorkTitle": "工作行為",
-    "uiDefaultsCollaborationTitle": "協作與回覆",
-    "uiDefaultsCapabilitiesTitle": "Agent 能力與權限",
-    "uiDefaultsWorkspaceTitle": "工作區規則",
-    "uiDefaultsAdvancedTitle": "進階執行策略"
+    "uiProviderKeyActionHint": "每組金鑰會分別驗證並套用，不需等待頁面底部的儲存。"
   }
 }
 );

package/dist/ui/settings-web-authority.js

@@ -15,6 +15,7 @@ import { editsOf, keepDraft, syncStage } from "./settings-draft.js";
 import { resetWebAuthorization } from "/assets/web-authorize.js";
 import "./settings-strings.js";
 import { layoutText } from "./settings-layout.js";
+import "./settings-access-strings.js";   // revAuthorityBriefWeb / revAuthorityEnabledWeb / revAuthorityRule: an older settings-layout.js from a tab that visited Fleet first lacks them (#3061)
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
 
@@ -65,7 +66,9 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
     syncStage(ctx, "verified_authority", body ? { label: tn("vaTitle"), count: Object.keys(body).length,
       impact: impactOf(ctx.schema || DEFAULT_SCHEMA, "web.verified_authority"), request: { method: "PUT", url: "/api/settings/fleet/web", body: { verified_authority: body } } } : null);
   }, [f, original, overview]);
-  const card = (body) => html`<section class="card s-web-authority"><h3>${tn("vaTitle")}</h3><p class="note s-authority-brief">${layoutText("revAuthorityBrief")}</p>${body}<details class="s-setting-details"><summary>${layoutText("revAuthorityDetails")}</summary><p class="note">${tn("vaHint")}</p><p class="note">${tn("vaEnabledHint")}</p><p class="note">${tn("vaLoopbackOnlyHint")}</p></details></section>`;
+  // A fleet with no chat connection is worded for the authenticator (the reference page); one with Discord / Telegram keeps the confirm-card words.
+  const webOnly = !!overview && overview.webOnly === true;
+  const card = (body) => html`<section class="card s-web-authority"><h3>${tn("vaTitle")}</h3><p class="note s-authority-brief">${layoutText(webOnly ? "revAuthorityBriefWeb" : "revAuthorityBrief")}</p><p class="note s-authority-rule">${layoutText("revAuthorityRule")}</p>${body}<details class="s-setting-details"><summary>${layoutText("revAuthorityDetails")}</summary><p class="note">${tn("vaHint")}</p><p class="note">${tn("vaEnabledHint")}</p><p class="note">${tn("vaLoopbackOnlyHint")}</p></details></section>`;
   if (failed) return card(html`<p class="note" role="status">${tn("vaLoadFailed")} <button type="button" class="btn btn-sm" onClick=${load}>${t("app.retry")}</button></p>`);
   if (!overview || !f) return card(html`<p class="note">${t("app.loading")}</p>`);
 
@@ -87,7 +90,7 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
 
   return card(html`<fieldset class="s-va-fields" disabled=${disabled}>
       ${stuckOff ? html`<p class="note s-va-warn" role="status" id="vaStuckOff">${tn("vaStuckOff")}</p>` : null}
-      <label class=${fc("check", "enabled")}><input class="s-ui-toggle" id="vaEnabled" type="checkbox" checked=${f.enabled} onChange=${(e) => set({ enabled: e.target.checked })} /><span>${layoutText("revAuthorityEnabled")}</span></label>
+      <label class=${fc("check", "enabled")}><input class="s-ui-toggle" id="vaEnabled" type="checkbox" checked=${f.enabled} onChange=${(e) => set({ enabled: e.target.checked })} /><span>${layoutText(webOnly ? "revAuthorityEnabledWeb" : "revAuthorityEnabled")}</span></label>
       <p class="note">${layoutText("revAuthorityEnabledHint")}</p>
       <label class=${fc("check", "loopbackOnly")}><input class="s-ui-toggle" id="vaLoopbackOnly" type="checkbox" checked=${f.loopbackOnly} onChange=${(e) => set({ loopbackOnly: e.target.checked })} /><span>${layoutText("revAuthorityLocal")}</span></label>
       <p class="note">${layoutText("revAuthorityLocalHint")}</p>

package/dist/ui/shared/accounts.css

@@ -0,0 +1,15 @@
+/* #3212: Settings → Agents → Accounts — linked by accounts-view.js (a page holding an older app.css still draws it). */
+.s-accounts { display: grid; gap: var(--s-3); }
+.s-account-card { border: 1px solid var(--border); border-radius: var(--r-md); padding: var(--s-3); display: grid; gap: var(--s-2); background: var(--surface); }
+.s-account-head { display: flex; align-items: center; gap: var(--s-2); }
+.s-account-rows { display: grid; gap: var(--s-1); }
+.s-account-row { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); }
+.s-account-who { flex: 1 1 16em; min-width: 0; display: grid; gap: 2px; }
+.s-account-who small { color: var(--text-2); font-size: var(--fs-xs); overflow-wrap: anywhere; }
+.s-account-usage.is-stale { color: var(--text-3); }
+.s-account-row .s-actions { display: flex; flex-wrap: wrap; gap: var(--s-1); }
+.s-account-row details { flex-basis: 100%; }
+.s-account-default { margin: var(--s-1) 0 0; }
+.s-account-machine { border-top: 1px dashed var(--border); padding-top: var(--s-2); }
+.s-account-move { list-style: none; margin: 0; padding: 0; display: grid; gap: var(--s-1); }
+.s-account-move .check small { margin-left: var(--s-2); }

package/dist/ui/shared/app-i18n.js

@@ -111,7 +111,7 @@ register("app", {
     confirmTitle: "Please confirm", confirmOk: "Continue", cancel: "Cancel",
     sidePanelLeave: "Leave {0} without saving? Your changes there will be lost.", sidePanelDiscard: "Discard changes",
     // The server's own wording (src/locale.ts needs.reason.*), so the web says what Discord says.
-    needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_question: "Asking you a question", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_backend_signin: "Backend sign-in needed", needs_reason_config_invalid: "Configuration file needs attention", needs_reason_config_fallback: "Running on stored configuration", config_history_edit: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. The next restart would use the stored valid copy from {4}. Correct the YAML error; the file has not been changed by AgEnD.", config_history_no_history: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. No stored valid copy is available, so the next restart cannot recover automatically. Correct the YAML error before restarting; the file has not been changed by AgEnD.", config_history_fallback: "{0}, line {1}, column {2}: {3}. AgEnD started using the stored valid copy from {4}. Correct the YAML error and reload the settings. The file on disk has not been changed by AgEnD.", needs_reason_general_windows_offline: "General’s Windows PC is offline", needs_reason_general_location_hold: "Run General on", needs_reason_native_pane_hold: "Windows agent needs attention", needs_reason_crashed: "Crashed", needs_reason_usage_limit: "Usage limit reached · reset time unknown", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
+    needs_reason_kiro_choice: "Kiro needs your decision", needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_question: "Asking you a question", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_backend_signin: "Backend sign-in needed", needs_reason_config_invalid: "Configuration file needs attention", needs_reason_hub_proposal: "Hub action proposed: review locally", needs_reason_hub_execution_hold: "Hub work held: review locally", needs_reason_hub_unavailable: "Hub not running", needs_reason_config_fallback: "Running on stored configuration", config_history_edit: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. The next restart would use the stored valid copy from {4}. Correct the YAML error; the file has not been changed by AgEnD.", config_history_no_history: "{0}, line {1}, column {2}: {3}. AgEnD is still running on the previous settings. No stored valid copy is available, so the next restart cannot recover automatically. Correct the YAML error before restarting; the file has not been changed by AgEnD.", config_history_fallback: "{0}, line {1}, column {2}: {3}. AgEnD started using the stored valid copy from {4}. Correct the YAML error and reload the settings. The file on disk has not been changed by AgEnD.", needs_reason_general_windows_offline: "General’s Windows PC is offline", needs_reason_general_location_hold: "Run General on", needs_reason_native_pane_hold: "Windows agent needs attention", needs_reason_crashed: "Crashed", needs_reason_usage_limit: "Usage limit reached · reset time unknown", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_missed_offline: "Missed while AgEnD was offline", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
   },
   "zh-TW": {
     brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet 概覽", view: "檢視", settings: "設定", instances: "Instances", newInstance: "新增 instance", newAgent: "新增 Agent",
@@ -156,6 +156,6 @@ register("app", {
     search: "搜尋", searchTitle: "搜尋聊天、agent 之間的訊息與任務（{0}）",
     confirmTitle: "請確認", confirmOk: "繼續", cancel: "取消",
     sidePanelLeave: "不儲存就離開「{0}」？你在那裡的修改會遺失。", sidePanelDiscard: "捨棄修改",
-    needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_question: "正在問你問題", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_backend_signin: "後端需要登入", needs_reason_config_invalid: "設定檔需要處理", needs_reason_config_fallback: "正在使用儲存的設定副本", config_history_edit: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。下次重新啟動會改用 {4} 儲存的有效副本。請修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_no_history: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。沒有可用的有效副本，下次重新啟動將無法自動恢復。請在重新啟動前修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_fallback: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 已使用 {4} 儲存的有效副本啟動。請修正 YAML 錯誤並重新載入設定。AgEnD 未更動磁碟上的檔案。", needs_reason_general_windows_offline: "General 所在的 Windows 電腦已離線", needs_reason_general_location_hold: "General 執行位置", needs_reason_native_pane_hold: "Windows 代理需要處理", needs_reason_crashed: "已崩潰", needs_reason_usage_limit: "用量已達上限 · 恢復時間未知", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
+    needs_reason_kiro_choice: "Kiro 需要你決定", needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_question: "正在問你問題", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_backend_signin: "後端需要登入", needs_reason_config_invalid: "設定檔需要處理", needs_reason_hub_proposal: "Hub 提議操作：請在本機檢視", needs_reason_hub_execution_hold: "Hub 工作已暫停：請在本機檢視", needs_reason_hub_unavailable: "Hub 未在執行", needs_reason_config_fallback: "正在使用儲存的設定副本", config_history_edit: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。下次重新啟動會改用 {4} 儲存的有效副本。請修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_no_history: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 仍使用先前的設定執行。沒有可用的有效副本，下次重新啟動將無法自動恢復。請在重新啟動前修正 YAML 錯誤；AgEnD 未更動此檔案。", config_history_fallback: "{0} 第 {1} 行、第 {2} 欄：{3}。AgEnD 已使用 {4} 儲存的有效副本啟動。請修正 YAML 錯誤並重新載入設定。AgEnD 未更動磁碟上的檔案。", needs_reason_general_windows_offline: "General 所在的 Windows 電腦已離線", needs_reason_general_location_hold: "General 執行位置", needs_reason_native_pane_hold: "Windows 代理需要處理", needs_reason_crashed: "已崩潰", needs_reason_usage_limit: "用量已達上限 · 恢復時間未知", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_missed_offline: "AgEnD 離線時錯過", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
   },
 });

package/dist/ui/shared/app-needs.js

@@ -63,7 +63,7 @@ export const configDetail = (item) => {
   const issue = item.configIssue;
   return issue ? t(`app.config_history_${issue.mode === "fallback" ? "fallback" : issue.time ? "edit" : "no_history"}`, issue.file, issue.line, issue.column, issue.reason, issue.time || "") : item.detail;
 };
-export const reasonText = (item) => t(`app.needs_reason_${item.reason}`);
+export const reasonText = (item) => t(`app.needs_reason_${item.kiroChoice ? "kiro_choice" : item.reason}`);
 
 let stop = null;
 

package/dist/ui/shared/app-route.js

@@ -34,6 +34,10 @@ export function parseRoute(pathname) {
   if (pathname === "/ui/fleet") return { panel: "fleet", tab: "tasks" };
   if (pathname === "/ui/needs") return { panel: "needs" };
   if (pathname === NOTICES_PATH) return { panel: "notices" };              // #2910 D2: a web-only fleet's Notices
+  // AgEnD Hub P1: a Hub workspace's pages (served only by a Hub's own listener; this fleet's answers not found).
+  if (pathname === "/ui/hub") return { panel: "hub", tab: "ask" };
+  if (pathname === "/ui/hub/exposures") return { panel: "hub", tab: "exposures" };
+  if (pathname === "/ui/hub/admin") return { panel: "hub", tab: "admin" };
   // #1523 N2: one instance's Details (`agent` is no Fleet tab; a tab is one segment).
   let m = /^\/ui\/fleet\/agent\/([^/]+)$/.exec(pathname);
   if (m) return named("details", m[1]);
@@ -116,6 +120,7 @@ export function routePath(route) {
   if (route.panel === "settings") return settingsPath(route.section);
   if (route.panel === "needs") return NEEDS_PATH;
   if (route.panel === "notices") return NOTICES_PATH;
+  if (route.panel === "hub") return route.tab === "exposures" ? "/ui/hub/exposures" : route.tab === "admin" ? "/ui/hub/admin" : "/ui/hub";
   if (route.panel === "view") return viewPath(route.instance);
   if (route.panel === "details") return detailsPath(route.instance);
   if (route.panel === "log") return logPath(route.instance);
@@ -148,7 +153,7 @@ export function routeKey(route) {
   if (!route) return "none";
   if (route.panel === "needs") return "needs:";
   if (route.panel === "notices") return "notices:";
-  return `${route.panel}:${route.panel === "fleet" ? route.tab : route.panel === "settings" ? route.section : route.instance ?? ""}`;
+  return `${route.panel}:${route.panel === "fleet" || route.panel === "hub" ? route.tab : route.panel === "settings" ? route.section : route.instance ?? ""}`;
 }
 
 /**

package/dist/ui/shared/app-session.js

@@ -19,6 +19,9 @@ const ago = (ms) => { const m = Math.round((Date.now() - ms) / 60000); return m
 export function SessionMenu() {
   const [me, setMe] = useState(undefined);         // undefined: not read yet; null: signed out
   const [sessions, setSessions] = useState(null);
+  // #3061 (P2b): on a web-only fleet only the verified owner ends the OTHER devices (the server says so with the list and
+  // refuses anyone else regardless); a session that is not one still sees them and can sign itself out.
+  const [mayEndOthers, setMayEndOthers] = useState(true);
   const [open, setOpen] = useState(false);
   const [error, setError] = useState(false);
   const btn = useRef(null), pop = useRef(null);
@@ -27,6 +30,7 @@ export function SessionMenu() {
     setMe(m);
     const s = m ? await getJson("/auth/sessions") : null;
     setSessions(s && s.sessions ? s.sessions : null);
+    setMayEndOthers(!(s && s.canEndOthers === false));
   }
   useEffect(() => { refresh(); }, []);
   useEffect(() => {
@@ -57,10 +61,10 @@ export function SessionMenu() {
         <${AuthorizeChip} />
         ${rows.length > 1 ? html`<h3>${t("app.devices")}</h3><ul class="devices">${rows.map(s => html`<li key=${s.handle}>
           <span class="grow"><span class="name">${s.label}${s.current ? ` · ${t("app.thisDevice")}` : ""}</span><span class="when">${t("app.lastActive", ago(s.lastSeen))}</span></span>
-          ${s.current ? null : html`<button type="button" class="btn btn-sm danger" onClick=${() => act("DELETE", `/auth/sessions/${encodeURIComponent(s.handle)}`, refresh)}>${t("app.signOut")}</button>`}</li>`)}</ul>` : null}
+          ${s.current || !mayEndOthers ? null : html`<button type="button" class="btn btn-sm danger" onClick=${() => act("DELETE", `/auth/sessions/${encodeURIComponent(s.handle)}`, refresh)}>${t("app.signOut")}</button>`}</li>`)}</ul>` : null}
         <div class="row">
           <button type="button" class="btn" onClick=${() => act("POST", "/auth/logout", () => { location.href = "/signin"; })}><${Icon} name="user" size=${16} />${t("app.signOut")}</button>
-          ${rows.length > 1 ? html`<button type="button" class="btn danger" onClick=${() => act("DELETE", "/auth/sessions", () => { location.href = "/signin"; })}>${t("app.signOutAll")}</button>` : null}
+          ${rows.length > 1 && mayEndOthers ? html`<button type="button" class="btn danger" onClick=${() => act("DELETE", "/auth/sessions", () => { location.href = "/signin"; })}>${t("app.signOutAll")}</button>` : null}
         </div>`}
       ${error ? html`<p class="err" role="alert">${t("app.failed")}</p>` : null}
     </div>` : null}

package/dist/ui/shared/app-shell.js

@@ -6,7 +6,7 @@ import { Icon } from "./ui-icons.js";
 import { Toasts } from "./ui-toast.js";
 import { ConfirmHost, confirmDialog } from "./ui-confirm.js";
 import { ColorDialogHost } from "./identity-color.js";
-import { t, lang, setLang, onLang } from "./app-i18n.js";
+import { t, lang, setLang, onLang, register } from "./app-i18n.js";
 import { appStore, createStore, guestBadge, guestPage, guestTrusted, useStore } from "./app-store.js";
 import { navStore } from "./app-nav.js";
 import { toast } from "./ui-toast.js";
@@ -330,6 +330,57 @@ export function signInHref() {
   return `/signin?next=${encodeURIComponent(here)}`;
 }
 
+// ── AgEnD Hub P1 (docs/design/hub-ui-client.md): the page's mark, set by the listener that served it ──
+register("hubShell", {
+  en: { brand: "AgEnD Hub", ask: "Ask", exposures: "My exposures", admin: "Administration" },
+  "zh-TW": { brand: "AgEnD Hub", ask: "提問", exposures: "我的公開 Agent", admin: "管理" },
+});
+function hubMarks() {
+  const tokens = String((typeof document !== "undefined" && document.body?.dataset?.hub) || "").split(/\s+/);
+  return { hub: tokens.includes("hub"), member: tokens.includes("member") };
+}
+/**
+ * The Hub workspace's sidebar: its brand and name, the conversation list (#3226 B: the Hub's lazy module's HubNav —
+ * New chat, a filter, the rooms) and the session with its menu. A Hub module without HubNav (one from before) gets the
+ * three page links instead.
+ */
+function HubSidebar({ route }) {
+  const name = String(document.body?.dataset?.hubName || "").trim();
+  const tab = route && route.panel === "hub" ? route.tab : "ask";
+  const row = (key, href, icon) => html`<a class=${`side-row${tab === key ? " active" : ""}`} href=${href}
+    aria-current=${tab === key ? "page" : undefined} onClick=${closeDrawer}><${Icon} name=${icon} /><span class="grow">${t(`hubShell.${key}`)}</span></a>`;
+  return html`<aside id="sidebar" class="sidebar" aria-label=${t("app.menu")}>
+    <div class="side-head" data-trust="navigation">
+      <a class="brand hub-brand" href="/ui/hub" onClick=${closeDrawer}>${t("hubShell.brand")}${name ? html`<span class="hub-brand-name"> · ${name}</span>` : null}</a>
+      <button type="button" class="icon-btn side-collapse" onClick=${toggleSidebar} aria-label=${narrow() ? t("app.closeMenu") : t("app.collapse")} title=${narrow() ? t("app.closeMenu") : t("app.collapse")} aria-controls="sidebar"><${Icon} name="sidebar" /></button>
+    </div>
+    <nav data-trust="navigation" class="side-nav hub-side-nav" aria-label=${t("app.menu")}>
+      <${HubNavSlot} fallback=${html`${row("ask", "/ui/hub", "chat")}${row("exposures", "/ui/hub/exposures", "globe")}${row("admin", "/ui/hub/admin", "key")}`} />
+    </nav>
+    <div class="side-foot" data-trust="navigation"><${HubSessionSlot} /></div>
+    <${SidebarResize} />
+  </aside>`;
+}
+/** #3226 B: the conversation list from the Hub's lazy module; `fallback` until it loads, or when it has none. */
+function HubNavSlot({ fallback }) {
+  const [mod, setMod] = useState(null);
+  const [none, setNone] = useState(false);
+  useEffect(() => { let live = true; import("/ui/js/panel-hub.js").then((m) => { if (!live) return; if (m.HubNav) setMod(() => m.HubNav); else setNone(true); }, () => { if (live) setNone(true); }); return () => { live = false; }; }, []);
+  return mod ? html`<${mod} onPick=${closeDrawer} />` : none ? fallback : null;
+}
+/** The Hub's own session row (S3b): who is signed in to the Hub, and Sign out — from the Hub's lazy module, never /auth/. */
+function HubSessionSlot() {
+  const [mod, setMod] = useState(null);
+  useEffect(() => { let live = true; import("/ui/js/panel-hub.js").then((m) => { if (live && m.HubSessionMenu) setMod(() => m.HubSessionMenu); }, () => {}); return () => { live = false; }; }, []);
+  return mod ? html`<${mod} />` : null;
+}
+/** A member fleet's "My fleet ↔ Hub" switcher: its module loads only on a member page, and shows only once paired. */
+function HubSwitcherSlot() {
+  const [mod, setMod] = useState(null);
+  useEffect(() => { let live = true; import("/ui/js/hub-switcher.js").then((m) => { if (live) setMod(() => m.HubSwitcher); }, () => {}); return () => { live = false; }; }, []);
+  return mod ? html`<${mod} />` : null;
+}
+
 function Sidebar({ route, onNewInstance, viewOnly }) {
   const app = useStore(appStore);
   const shell = useStore(shellStore);
@@ -374,6 +425,8 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
       <${SidebarResize} />
     </aside>`;
   }
+  // AgEnD Hub P1: a Hub workspace (a Hub's own listener marked the page) has the Hub's sidebar, never the fleet's.
+  if (hubMarks().hub) return html`<${HubSidebar} route=${route} />`;
   // #1675: the whole fleet, from anywhere — top left, so at the top of a phone's drawer too. #2183 (the user's call): the
   // one Fleet entry ("Fleet" / "Fleet 概覽"), on the tab this device used last (the Org chart the first time); an agent's
   // View, Log and Details are its header's tabs, so the sidebar has no "Fleet" (Details) or "View" row of its own.
@@ -385,6 +438,7 @@ function Sidebar({ route, onNewInstance, viewOnly }) {
       <a class="brand" href="/ui" onClick=${closeDrawer}>${t("app.brand")}</a>
       <button type="button" class="icon-btn side-collapse" onClick=${toggleSidebar} aria-label=${narrow() ? t("app.closeMenu") : t("app.collapse")} title=${narrow() ? t("app.closeMenu") : t("app.collapse")} aria-controls="sidebar"><${Icon} name="sidebar" /></button>
     </div>
+    ${/* AgEnD Hub P1: a member fleet's "My fleet ↔ Hub" (shown once paired; nothing loads when the switch is off) */ hubMarks().member ? html`<${HubSwitcherSlot} />` : null}
     <nav data-trust="navigation" class="side-nav" aria-label=${t("app.menu")}>
       ${overview}
       ${navLink("needs", NEEDS_PATH, "inbox", t("app.needsNav"), needsCount)}
@@ -835,6 +889,8 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
     };
   }, []);
   const guest = guestPage();             // #1920: a guest's page — no operations, pending changes or owner CSS (#2855: usage, yes)
+  // AgEnD Hub P1 (S3b): a Hub workspace has none of the fleet's lines, rails, tabs or bars (their endpoints are the fleet's).
+  const hub = hubMarks().hub;
   const cls = ["shell", shell.collapsed ? "sb-collapsed" : "", shell.drawer ? "sb-open" : "", shell.keyboard ? "kb-open" : "", guest ? "guest" : ""].filter(Boolean).join(" ");
   return html`<div ref=${root} class=${cls}>
     <a data-trust="navigation" class="skip" href="#main">${t("app.skip")}</a>
@@ -843,18 +899,18 @@ export function Shell({ panels, onNewInstance, viewOnly = false }) {
     <main id="main" class="main" tabindex="-1" inert=${shell.drawer && narrow() ? true : undefined}>
       <${ConnectionLine} />
       <${StartupLine} />
-      ${viewOnly || guest ? null : html`<${OperationLine} route=${nav.route} />`}
-      ${viewOnly || guest ? null : html`<${RestartLine} />`}
-      ${viewOnly || guest || !shell.banner ? null : html`<${shell.banner} />`}
+      ${viewOnly || guest || hub ? null : html`<${OperationLine} route=${nav.route} />`}
+      ${viewOnly || guest || hub ? null : html`<${RestartLine} />`}
+      ${viewOnly || guest || hub || !shell.banner ? null : html`<${shell.banner} />`}
       <${Outlet} route=${nav.route} seq=${nav.seq} panels=${panels} />
     </main>
-    <${RightRail} route=${nav.route} />
-    <${BottomTabs} route=${nav.route} viewOnly=${viewOnly} />
+    ${hub ? null : html`<${RightRail} route=${nav.route} />`}
+    ${hub ? null : html`<${BottomTabs} route=${nav.route} viewOnly=${viewOnly} />`}
     ${shell.dialog ? html`<${shell.dialog.Component} ...${shell.dialog.props} onClose=${closeDialog} />` : null}
-    ${viewOnly || guest || (nav.route && nav.route.panel === "settings") ? null : html`<${PendingChanges} />`}
+    ${viewOnly || guest || hub || (nav.route && nav.route.panel === "settings") ? null : html`<${PendingChanges} />`}
     <${ConfirmHost} />
     <${ColorDialogHost} />
-    ${viewOnly || guest ? null : html`<${OwnerCssKeepBar} />`}
+    ${viewOnly || guest || hub ? null : html`<${OwnerCssKeepBar} />`}
     <${Toasts} />
   </div>`;
 }