@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/ui/panel-windows-cli.js

@@ -1,189 +0,0 @@
-import { html, useEffect, useRef, useState } from "/assets/app-html.js";
-import { t, register } from "/assets/app-i18n.js";
-import { useLease } from "/assets/app-ctx.js";
-import { PanelHeader, setTitle } from "/assets/app-shell.js";
-import { Icon } from "/assets/ui-icons.js";
-import { CliPicker, CliProductMark, cliLabel } from "./cli-picker.js";
-import { ModelSelect } from "./settings-dialogs.js";
-import { useWindowsCliCatalog, WindowsCliDiscoveryStatus, WindowsCliHostIdentity } from "./windows-cli-catalog.js";
-
-register("wincli", {
-  "zh-TW": { intro:"在 Windows 上執行一次性任務，使用本機已安裝的 CLI 和登入。", probe:"偵測 Windows CLI", probing:"正在偵測…", newTask:"派送 Windows Codex 任務", folder:"Windows 工作目錄", prompt:"任務內容", access:"檔案存取", readOnly:"唯讀", write:"工作目錄可寫入", limits:"目前支援 Codex 單次任務，同時一個，五分鐘後請求取消。使用 CLI 的沙箱與核准政策；此頁不提供互動核准按鈕。Claude 目前提供偵測。", run:"開始任務", results:"任務與結果", refresh:"更新", signedIn:"已登入", signedOut:"尚未登入", unknown:"登入狀態未知", missing:"未找到執行檔", empty:"還沒有任務。", cancel:"取消任務", starting:"準備啟動", running:"執行中", cancelling:"正在取消", cancelled:"已取消", completed:"已完成", failed:"失敗", waiting:"正在接收 Windows CLI 的輸出…", uncertain:"提交結果不明，請按「更新」確認任務狀態，勿立即重送。" },
-  en: { intro:"Run a one-off Windows task using locally installed CLIs and their sign-ins.", probe:"Detect Windows CLIs", probing:"Detecting…", newTask:"Run a Windows Codex task", folder:"Windows working directory", prompt:"Task", access:"File access", readOnly:"Read only", write:"Workspace write", limits:"Codex one-off tasks only: one at a time, cancellation requested after five minutes. The CLI owns sandbox and approval policy; this page has no interactive approval controls. Claude is detection-only for now.", run:"Start task", results:"Tasks and results", refresh:"Refresh", signedIn:"Signed in", signedOut:"Not signed in", unknown:"Sign-in unknown", missing:"Executable not found", empty:"No tasks yet.", cancel:"Cancel task", starting:"Starting", running:"Running", cancelling:"Cancelling", cancelled:"Cancelled", completed:"Completed", failed:"Failed", waiting:"Waiting for Windows CLI output…", uncertain:"Submission outcome is unknown. Refresh to check the task before sending it again." },
-});
-register("wincli", {
-  "zh-TW": { workspace:"Windows 本機工作區", native:"Windows 本機", providers:"本機 CLI", available:"可派工", unavailableBadge:"尚未就緒", detectionOnly:"僅偵測", notDetected:"尚未偵測", checking:"檢查中", path:"執行檔路徑", taskHint:"使用 Windows Codex，在指定專案中執行一次性任務。", folderHint:"請填入已存在的 Windows 專案資料夾。", promptPlaceholder:"例如：檢查這個專案的結構，說明如何在 Windows 上啟動。", readHint:"適合檢查、查詢與分析", writeHint:"適合修改程式與檔案", taskLimits:"同時 1 個任務 · 5 分鐘後請求取消", policy:"存取與核准方式", policyText:"沿用本機 CLI 的沙箱與核准政策，包含已設定的自動審查。此頁不提供互動核准按鈕。", ready:"Codex 已就緒", busy:"Windows 任務執行中", unavailable:"請先確認 Codex 已安裝並登入", historyHint:"查看執行狀態與 CLI 輸出", emptyHint:"派送第一個任務後，進度與結果會出現在這裡。", noOutput:"這個任務沒有回傳輸出。", records:"筆", historyNote:"保留最近 20 筆，重啟後清空", output:"執行輸出", submitting:"正在提交…" },
-  en: { workspace:"Your Windows workspace", native:"Native Windows", providers:"Local CLIs", available:"Tasks enabled", unavailableBadge:"Not ready", detectionOnly:"Detection only", notDetected:"Not detected yet", checking:"Checking", path:"Executable path", taskHint:"Run a one-off task in your project with Windows Codex.", folderHint:"Use an existing Windows project folder.", promptPlaceholder:"For example: inspect this project and explain how to run it on Windows.", readHint:"Inspect, query and analyze", writeHint:"Edit code and files", taskLimits:"One task at a time · Cancellation after 5 min", policy:"Access and approvals", policyText:"Uses the local CLI's sandbox and approval policy, including any configured automatic reviewer. This page has no interactive approval controls.", ready:"Codex is ready", busy:"Windows task in progress", unavailable:"Check that Codex is installed and signed in", historyHint:"Execution status and CLI output", emptyHint:"Send your first task to see its progress and results here.", noOutput:"This task returned no output.", records:"tasks", historyNote:"Latest 20 tasks; cleared on restart", output:"Execution output", submitting:"Submitting…" },
-});
-register("wincli", {
-  en: { paneUnverified:"Not yet verified", paneUnverifiedHint:"AgEnD has not tested this version in Windows panes yet. It still runs; any screen AgEnD does not recognise stops and waits for you in Needs you.", paneDenied:"Known not to work", paneDeniedHint:"AgEnD knows this version does not work in Windows panes, so it will not start it. Install a different version." },
-  "zh-TW": { paneUnverified:"尚未驗證", paneUnverifiedHint:"AgEnD 還沒在 Windows 面板中測試過這個版本。它仍然可以執行；遇到 AgEnD 認不得的畫面時，會停下來在「需要你」等你處理。", paneDenied:"已知無法使用", paneDeniedHint:"AgEnD 已知這個版本無法在 Windows 面板中使用，所以不會啟動它。請改裝其他版本。" },
-});
-const tn = key => t(`wincli.${key}`);
-register("wincli", {
-  "zh-TW": { newTask:"派送 Windows CLI 任務", taskHint:"選擇本機 CLI 與模型，在指定專案中執行任務。", ready:"CLI 已就緒", unavailable:"請先確認 CLI 已安裝並登入", model:"模型", defaultModel:"使用 CLI 預設模型", write:"使用本機 CLI 權限", writeHint:"依照此 CLI 的本機核准設定", writeHintClaude:"可修改工作目錄內的檔案；目錄外的寫入、會修改檔案的 Shell 指令與網路都會被拒絕（唯讀指令仍會執行）", noReadOnly:"此 CLI 無法保證唯讀，請明確選擇本機 CLI 權限。", noProviders:"沒有找到已安裝的 CLI。安裝後可重新偵測。" },
-  en: { newTask:"Run a Windows CLI task", taskHint:"Choose a local CLI and model, then run a task in your project.", ready:"CLI is ready", unavailable:"Check that the CLI is installed and signed in", model:"Model", defaultModel:"Use the CLI default model", write:"Use native CLI permissions", writeHint:"Uses this CLI's local approval settings", writeHintClaude:"Edits files in the working directory; writes outside it, shell commands that change files and network access are denied (read-only commands still run)", noReadOnly:"This CLI cannot guarantee read-only access. Choose native CLI permissions explicitly.", noProviders:"No installed CLIs found. Detect again after installation." },
-});
-register("wincli", {
-  en: { remoteIntro:"Inspect CLIs and run a one-off task on the selected Windows computer.", offline:"This computer is offline. Showing its last reported inventory; reconnect its Runtime to detect or run tasks.", removed:"This Runtime is unavailable or no longer approved. Select another computer.", historyLoading:"Loading this computer's task status…", outcomePending:"A task outcome is unconfirmed. Reconnect this Runtime to reconcile before sending another task.", remoteHistory:"Latest 20 tasks on this computer", remoteWorkspace:"Selected Windows computer", remoteHint:"Choose this computer's CLI and model, then run a task in its working directory." },
-  "zh-TW": { remoteIntro:"查看所選 Windows 電腦的 CLI，並在該電腦執行一次性任務。", offline:"這台電腦已離線。目前顯示上次回報的清單；請重新連接該 Runtime，才能偵測或派送任務。", removed:"此 Runtime 無法使用或已不再核准，請選擇另一台電腦。", historyLoading:"正在讀取這台電腦的任務狀態…", outcomePending:"有任務的執行結果尚未確認，請重新連接該 Runtime 完成確認後再派工。", remoteHistory:"保留這台電腦最近 20 筆任務", remoteWorkspace:"所選 Windows 電腦", remoteHint:"選擇這台電腦的 CLI 與模型，在該電腦的工作目錄執行任務。" },
-});
-register("wincli", {
-  en: { testCli:"Test CLI", testHint:"Optional: send a one-off task to check execution on this computer.", closeKeepsTask:"Closing this window keeps submitted tasks running. Reopen this computer's diagnostics to check their status.", lastDetection:"Last detection: {0}", inventoryTitle:"Detected CLIs", neverDetection:"No detection recorded yet", modelsFound:"Models reported by this CLI", localDisabled:"This computer's Windows CLI access is disabled." },
-  "zh-TW": { testCli:"測試 CLI", testHint:"選用：送出一次性任務，確認這台電腦的 CLI 執行能力。", closeKeepsTask:"關閉視窗後，已提交的任務會繼續執行；重開這台電腦的診斷即可查看狀態。", lastDetection:"最近偵測：{0}", inventoryTitle:"偵測到的 CLI", neverDetection:"尚未有偵測紀錄", modelsFound:"此 CLI 回報的模型", localDisabled:"這台電腦的 Windows CLI 存取已停用。" },
-});
-const active = task => ["starting","running","cancelling"].includes(task.status);
-
-/** cc3ce4fe: a persistent-pane CLI's version AgEnD has not audited (or knows is broken), from the coordinator's label.
- * Drawn inside the version's own cell: the diagnostics summary is a fixed five-cell grid. */
-function paneVerificationTag(cli) {
-  const key = cli.paneVerification === "unverified" ? "paneUnverified" : cli.paneVerification === "denied" ? "paneDenied" : "";
-  return key ? html`<span class="tag" title=${tn(`${key}Hint`)}>${tn(key)}</span>` : null;
-}
-function CliCard({ cli, probing, diagnostic = false }) {
-  const signedIn = cli.authenticated === true;
-  const checking = probing && !cli.path;
-  const authKey = checking ? "checking" : !cli.path ? "missing" : signedIn ? "signedIn" : cli.authenticated === false ? "signedOut" : "unknown";
-  const providerLabel = cli.company || ({codex:"OpenAI","claude-code":"Anthropic",antigravity:"Google",grok:"xAI","kiro-cli":"AWS",opencode:"Anomaly",muse:"Meta"})[cli.id];
-  if(diagnostic) return html`<details class="windows-cli-diagnostic-row"><summary><${CliProductMark} id=${cli.id} size=${24} /><strong>${cliLabel(cli.id)}</strong><span class="windows-cli-diagnostic-version">${cli.version || "—"}${paneVerificationTag(cli) ? html` ${paneVerificationTag(cli)}` : null}</span><span class=${`windows-cli-auth ${signedIn ? "tone-ready" : "tone-neutral"}`}><span class="windows-cli-dot"></span>${tn(authKey)}</span><${Icon} name="chevron" size=${16} /></summary>
-    <div class="windows-cli-diagnostic-facts"><span class=${`windows-cli-badge ${cli.runnable ? "tone-ready" : "tone-neutral"}`}>${tn(cli.runnable ? "available" : cli.supports?.execution === false ? "detectionOnly" : "unavailableBadge")}</span><dl><dt>${tn("path")}</dt><dd><code class="windows-cli-path">${cli.path || tn("missing")}</code></dd>${cli.models?.length ? html`<dt>${tn("modelsFound")}</dt><dd><ul class="windows-cli-model-list">${cli.models.map(model=>html`<li key=${model.id}><code>${model.id}</code>${model.label && model.label!==model.id ? html`<span>${model.label}</span>` : null}</li>`)}</ul></dd>` : null}</dl>${cli.reason ? html`<p class="note">${cli.reason}</p>` : null}</div>
-  </details>`;
-  return html`<article class=${`windows-cli-provider is-${cli.id}`}>
-    <div class="windows-cli-provider-head">
-      <span class="windows-cli-brand"><${CliProductMark} id=${cli.id} size=${28} /></span>
-      <div class="windows-cli-provider-name"><span>${providerLabel}</span><h3>${cliLabel(cli.id)}</h3></div>
-      <span class=${`windows-cli-badge ${cli.runnable ? "tone-ready" : "tone-neutral"}`}>${tn(cli.runnable ? "available" : cli.supports?.execution === false ? "detectionOnly" : checking ? "checking" : "unavailableBadge")}</span>
-    </div>
-    <div class="windows-cli-provider-status"><span class=${`windows-cli-auth ${signedIn ? "tone-ready" : "tone-neutral"}`}><span class="windows-cli-dot"></span>${tn(authKey)}</span><span class="windows-cli-version">${cli.version || "—"}${paneVerificationTag(cli) ? html` ${paneVerificationTag(cli)}` : null}</span></div>
-    <details class="windows-cli-location"><summary>${tn("path")}<${Icon} name="chevron" size=${14} /></summary><code class="windows-cli-path">${cli.path || tn(checking ? "checking" : "notDetected")}</code></details>
-    ${cli.reason ? html`<p class="note">${cli.reason}</p>` : null}
-  </article>`;
-}
-
-function TaskResult({ task, latest, cancel }) {
-  const [expanded, setExpanded] = useState(latest || active(task));
-  const tone = task.status === "completed" ? "ready" : task.status === "failed" ? "failed" : active(task) ? "working" : "neutral";
-  return html`<details class="windows-cli-task" open=${expanded || active(task)} onToggle=${e => setExpanded(e.currentTarget.open)}>
-    <summary><span class=${`windows-cli-task-state tone-${tone}`}><span class="windows-cli-dot"></span>${tn(task.status)}</span><time dateTime=${new Date(task.startedAt).toISOString()}>${new Date(task.startedAt).toLocaleTimeString([], { hour:"2-digit", minute:"2-digit" })}</time><${Icon} name="chevron" size=${16} /></summary>
-    <code class="windows-cli-path windows-cli-task-cwd">${task.cwd}</code>
-    <div class="windows-cli-task-detail"><span class="windows-cli-output-label"><${Icon} name="view" size=${14} />${tn("output")}</span><pre class="windows-cli-output" tabIndex="0">${task.output || tn(active(task) ? "waiting" : "noOutput")}</pre>${task.error ? html`<p class="error">${task.error}</p>` : null}
-      ${cancel && ["starting","running"].includes(task.status) ? html`<button type="button" class="btn btn-sm btn-ghost danger" onClick=${() => cancel(task.id)}><${Icon} name="stop" size=${14} />${tn("cancel")}</button>` : null}
-    </div>
-  </details>`;
-}
-
-export function WindowsCliPanel({ navKey, embedded = false, machineId = "", machine, drafts, onInventoryChanged, diagnostic = false, enabled = true, session, taskLease }) {
-  const lease = useLease(navKey);
-  const approved = enabled && (!machineId || ["online","offline"].includes(machine?.status));
-  const online = enabled && (!machineId || machine?.status === "online");
-  const discovery = useWindowsCliCatalog(approved,machineId);
-  const apiBase = machineId ? `/ui/runtimes/machines/${encodeURIComponent(machineId)}` : "/ui/windows-cli";
-  const initialDraft = drafts?.get(machineId) || {};
-  const clis = discovery.data?.clis || [];
-  const probing = discovery.loading;
-  const [tasks,setTasks] = useState([]), [cwd,setCwd] = useState(initialDraft.cwd || "");
-  const [prompt,setPrompt] = useState(initialDraft.prompt || ""), [access,setAccess] = useState(initialDraft.access || "read-only");
-  const [selected,setSelected] = useState(initialDraft.selected || "codex"), [model,setModel] = useState(initialDraft.model || "");
-  // The page owns a send across diagnostic-dialog close/reopen. Closing never aborts a submitted POST.
-  const ownSession = useRef({requestId:null,pending:false,error:""});
-  const operation = session || ownSession.current;
-  const [submitting,setSubmitting] = useState(!!operation.requestId), [error,setError] = useState(operation.error || "");
-  const [testOpen,setTestOpen] = useState(initialDraft.testOpen || false);
-  const readGeneration = useRef(0), polling = useRef(false);
-  const [historyReady,setHistoryReady] = useState(false);
-  const latestDraft = useRef(null), directoryInitialized = useRef(!!initialDraft.cwd);
-  latestDraft.current = {cwd,prompt,access,selected,model,testOpen};
-  useEffect(() => () => { drafts?.set(machineId,latestDraft.current); },[drafts,machineId]);
-  const api = async (path,body,owner = lease) => {
-    const r = await owner.fetch(path, { credentials:"same-origin", ...(body === undefined ? {} : { method:"POST", headers:{ "Content-Type":"application/json" }, body:JSON.stringify(body) }) });
-    const data = await r.json();
-    if (!r.ok) { const e = new Error(data.error || `HTTP ${r.status}`); e.rejected = true; throw e; }
-    return data;
-  };
-  const refresh = async () => {
-    const generation = ++readGeneration.current;
-    try {
-      const data = await api(`${apiBase}/tasks`);
-      if (!lease.current() || generation !== readGeneration.current) return;
-      setTasks(data.tasks); setHistoryReady(true);
-      if (operation.requestId && data.tasks.some(task => task.id === operation.requestId)) { operation.requestId = null; operation.pending = false; operation.error = ""; }
-      setSubmitting(!!operation.requestId);
-      if(operation.error) setError(operation.error);
-    } catch (e) { if (lease.current() && generation === readGeneration.current) setError(e.message); }
-  };
-  const probe = async () => { if (!online || !approved) return; const result = await discovery.refresh(); if (result && lease.current()) onInventoryChanged?.(); };
-  useEffect(() => { if (!embedded) setTitle("Windows CLI"); if (approved) void refresh(); },[lease,approved,online]);
-  useEffect(() => { if (discovery.data?.home && !directoryInitialized.current) { directoryInitialized.current = true; setCwd(discovery.data.home); } },[discovery.data]);
-  const running = tasks.some(active);
-  const uncertain = tasks.some(task => task.outcomeConfirmed === false);
-  useEffect(() => {
-    if ((!running && !uncertain && !operation.requestId) || !online || !approved) return;
-    const timer = lease.interval(async () => { if (polling.current) return; polling.current = true; try { await refresh(); } finally { polling.current = false; } },1000);
-    return () => lease.clear(timer);
-  },[lease,running,uncertain,online,approved,submitting]);
-  const run = async () => {
-    if (operation.requestId || !online || !approved || !historyReady || running || uncertain) return;
-    const input = { requestId:crypto.randomUUID(), cli:selected, ...(model.trim() ? {model:model.trim()} : {}), cwd:cwd.trim(), prompt, sandbox:access };
-    operation.requestId = input.requestId; operation.pending = true; operation.error = "";
-    setSubmitting(true);setError("");
-    try { await api(`${apiBase}/tasks`,input,taskLease || lease); }
-    catch (e) {
-      if(operation.requestId === input.requestId) {
-        operation.error = e.rejected ? e.message : `${e.message}\n${tn("uncertain")}`;
-        if(e.rejected) operation.requestId = null;
-        if (lease.current()) setError(operation.error || e.message);
-      }
-    } finally {
-      if(operation.requestId === input.requestId) operation.pending = false;
-    }
-    if (lease.current()) await refresh();
-  };
-  const cancel = async id => { if (!online || !approved) return; try { await api(`${apiBase}/tasks/${id}/cancel`,{}); if (lease.current()) await refresh(); } catch(e) { if (lease.current()) setError(e.message); } };
-  const current = clis.find(cli => cli.id === selected);
-  const permissionReady = access !== "read-only" || current?.readOnlySupport !== false;
-  const runnable = current?.runnable === true && permissionReady && online && approved && historyReady && !uncertain;
-  const providers = clis.filter(cli => cli.path);
-  const choices = providers.filter(cli => cli.supports?.execution !== false).map(cli => ({value:cli.id,label:cliLabel(cli.id),disabled:!cli.runnable,description:cli.authenticated === false ? tn("signedOut") : cli.version || "Windows"}));
-  useEffect(() => {
-    if (clis.length && !choices.some(choice => choice.value === selected)) {
-      const first = choices.find(choice => !choice.disabled) || choices[0];
-      if (first) { setSelected(first.value); setModel(""); }
-    }
-  },[clis]);
-  return html`<div class=${embedded ? "p-windows-cli windows-cli-settings" : "panel p-windows-cli"}>${!embedded ? html`<${PanelHeader} title="Windows CLI" />` : null}
-    <div class=${embedded ? "windows-cli-settings-body" : "panel-body"}><div class="windows-cli-content">
-      <header class="windows-cli-intro"><div>${diagnostic ? html`<p>${discovery.data?.probedAt ? t("wincli.lastDetection",new Date(discovery.data.probedAt).toLocaleString()) : tn("neverDetection")}</p>` : html`<span class="windows-cli-eyebrow"><${Icon} name="view" size=${14} />${tn("native")}</span><h2>${tn(machineId ? "remoteWorkspace" : "workspace")}</h2><p>${tn(machineId ? "remoteIntro" : "intro")}</p>`}</div>
-        <button type="button" class="btn windows-cli-probe" disabled=${probing || !online || !approved} onClick=${probe}><${Icon} name="restart" size=${16} cls=${probing ? "windows-cli-spin" : ""} />${tn(probing ? "probing" : "probe")}</button>
-      </header>
-      ${!diagnostic ? html`<${WindowsCliHostIdentity} inventory=${discovery.data} machineId=${machineId} machine=${machine} />` : null}
-      ${!approved || !online ? html`<p class="note" role="status">${tn(!enabled ? "localDisabled" : approved ? "offline" : "removed")}</p>` : null}
-      ${approved ? html`<${WindowsCliDiscoveryStatus} state=${{...discovery,refresh:probe}} disabled=${!online} />` : null}
-      <section class=${diagnostic ? "windows-cli-diagnostic-list" : "windows-cli-cards"} aria-label=${tn(diagnostic ? "inventoryTitle" : "providers")}>${providers.map(cli => html`<${CliCard} key=${cli.id} cli=${cli} probing=${probing} diagnostic=${diagnostic} />`)}${discovery.data && !providers.length && !probing && !discovery.error ? html`<p class="note">${tn("noProviders")}</p>` : null}</section>
-      ${error ? html`<p class="error windows-cli-error" role="alert"><${Icon} name="alert" size=${18} /><span>${error}</span></p>` : null}
-      <details class=${diagnostic ? "windows-cli-test-disclosure" : "windows-cli-test-disclosure is-standalone"} open=${!diagnostic || testOpen || running || uncertain || submitting} onToggle=${event=>{if(event.target===event.currentTarget)setTestOpen(event.currentTarget.open);}}>
-        ${diagnostic ? html`<summary><${Icon} name="view" size=${19} /><span><strong>${tn("testCli")}</strong><small>${tn("testHint")}</small></span><${Icon} name="chevron" size=${16} /></summary>` : null}
-      <div class="windows-cli-workbench">
-        <section class="windows-cli-card windows-cli-composer" aria-labelledby="windows-task-title"><div class="windows-cli-section-head"><span class="windows-cli-section-icon"><${Icon} name="edit" size=${19} /></span><div><h2 id="windows-task-title">${tn("newTask")}</h2><p>${tn(machineId ? "remoteHint" : "taskHint")}</p></div></div>
-          <form onSubmit=${e => { e.preventDefault(); if (runnable && !submitting && !running && cwd.trim() && prompt.trim()) void run(); }}>
-            <div class="windows-cli-field"><label>CLI</label><${CliPicker} label="CLI" value=${selected} choices=${choices} disabled=${!choices.length || submitting || running} onChange=${value => { setSelected(value); setModel(""); }} /></div>
-            <div class="windows-cli-field"><label for="windows-model">${tn("model")}</label><${ModelSelect} key=${selected} id="windows-model" value=${model} onChange=${setModel} catalogOverride=${current?.models || []} inherit=${tn("defaultModel")} /></div>
-            <div class="windows-cli-field"><label for="windows-cwd">${tn("folder")}</label><input id="windows-cwd" class="windows-cli-directory" value=${cwd} placeholder="J:\\Project\\Game" aria-describedby="windows-cwd-hint" required spellcheck=${false} onInput=${e => setCwd(e.target.value)} /><p id="windows-cwd-hint">${tn("folderHint")}</p></div>
-            <div class="windows-cli-field"><label for="windows-prompt">${tn("prompt")}</label><textarea id="windows-prompt" rows="5" value=${prompt} placeholder=${tn("promptPlaceholder")} required maxLength=${16384} onInput=${e => setPrompt(e.target.value)} /></div>
-            <fieldset class="windows-cli-access"><legend>${tn("access")}</legend><div class="windows-cli-access-options">
-              ${[["read-only","readOnly","readHint","eye"],["workspace-write","write","writeHint","edit"]].map(([value,label,hint,icon]) => html`<label key=${value} class=${`windows-cli-access-option${access === value ? " selected" : ""}`}><input type="radio" name="windows-sandbox" value=${value} checked=${access === value} disabled=${value === "read-only" && current?.readOnlySupport === false} onChange=${() => setAccess(value)} /><span><strong><${Icon} name=${icon} size=${15} />${tn(label)}</strong><small>${tn(value === "workspace-write" && current?.id === "claude-code" ? "writeHintClaude" : hint)}</small></span></label>`)}
-            </div></fieldset>
-            ${!permissionReady ? html`<p class="note">${tn("noReadOnly")}</p>` : null}
-            <details class="windows-cli-policy"><summary><${Icon} name="info" size=${14} />${tn("policy")}<${Icon} name="chevron" size=${14} /></summary><p>${tn("policyText")}</p></details>
-            <div class="windows-cli-submit"><span class=${`windows-cli-readiness ${runnable && !running ? "tone-ready" : "tone-neutral"}`} role="status"><span class="windows-cli-dot"></span>${tn(uncertain ? "outcomePending" : !historyReady ? "historyLoading" : running ? "busy" : runnable ? "ready" : "unavailable")}</span><button type="submit" class="btn btn-primary" disabled=${!runnable || submitting || running || !cwd.trim() || !prompt.trim()}><${Icon} name=${submitting ? "clock" : "play"} size=${16} />${tn(submitting ? "submitting" : "run")}</button></div>
-            <p class="windows-cli-limits"><${Icon} name="clock" size=${13} />${tn("taskLimits")}</p>
-          </form>
-        </section>
-        <section class="windows-cli-card windows-cli-history" aria-labelledby="windows-history-title"><div class="windows-cli-section-head"><span class="windows-cli-section-icon"><${Icon} name="clock" size=${19} /></span><div><h2 id="windows-history-title">${tn("results")} <span class="windows-cli-count">${tasks.length}</span></h2><p>${tn("historyHint")}</p></div><button type="button" class="icon-btn" aria-label=${tn("refresh")} title=${tn("refresh")} onClick=${refresh}><${Icon} name="restart" size=${16} /></button></div>
-          <div class="windows-cli-task-list">${!tasks.length ? html`<div class="windows-cli-empty"><span><${Icon} name="view" size=${28} /></span><h3>${tn("empty")}</h3><p>${tn("emptyHint")}</p></div>` : tasks.map((task,index) => html`<${TaskResult} key=${task.id} task=${task} cancel=${online && approved ? cancel : null} latest=${index === 0} />`)}</div>
-          <p class="windows-cli-history-note">${tn(machineId ? "remoteHistory" : "historyNote")}</p>
-        </section>
-      </div>
-      ${diagnostic ? html`<p class="windows-cli-close-note"><${Icon} name="info" size=${15} />${tn("closeKeepsTask")}</p>` : null}
-      </details>
-    </div></div></div>`;
-}

package/dist/ui/provider-marks.js

@@ -1,83 +0,0 @@
-// Provider marks identify the installed CLI, separate from AgEnD's own UI icons. Sources (THIRD_PARTY_NOTICES.md
-// "CLI provider marks"; retrieved 2026-11-02), each bundled unmodified:
-// - OpenAI: https://openai.com/brand/ (official site's inline Blossom).
-// - Anthropic: https://www.anthropic.com/ (company mark, separate from the Claude product).
-// - Claude: https://claude.com/icon.svg (official Claude product mark and original orange fill).
-// - Kiro: https://kiro.dev/icon.svg (official product icon).
-// - Antigravity: https://antigravity.google/press — the press kit's "Icon - Full Color" SVG.
-// - Grok, OpenCode, Muse: @lobehub/icons 1.102.0 (MIT, https://github.com/lobehub/lobe-icons) — grok.svg ("Grok (xAI)"),
-//   opencode.svg ("opencode", opencode.ai), muse-color.svg ("Muse (Meta)", muse.ai).
-// Trademarks and logos belong to their respective owners and are used only to identify the supported CLIs; no
-// affiliation or endorsement is implied.
-import { html } from "/assets/app-html.js";
-
-/**
- * Takedown switch (one line to edit): brandMarks: false shows every provider's generic tile instead of its mark; or list
- * a provider in withheld (e.g. new Set(["grok"])) to withhold only its mark. The generic tile is AgEnD's own (TILES).
- */
-export const MARK_SWITCH = { brandMarks: true, withheld: new Set([]) };
-
-/** The generic tile per provider: two letters on a neutral rounded square (no third-party artwork). */
-export const TILES = { openai: "Oa", claude: "Cl", anthropic: "An", kiro: "Ki", antigravity: "Ag", grok: "Gk", opencode: "Oc", muse: "Mu" };
-
-const MARKS = {
-  "openai": {
-    "viewBox": "0 0 41 41",
-    "paths": [
-      "M37.5324 16.8707C37.9808 15.5241 38.1363 14.0974 37.9886 12.6859C37.8409 11.2744 37.3934 9.91076 36.676 8.68622C35.6126 6.83404 33.9882 5.3676 32.0373 4.4985C30.0864 3.62941 27.9098 3.40259 25.8215 3.85078C24.8796 2.7893 23.7219 1.94125 22.4257 1.36341C21.1295 0.785575 19.7249 0.491269 18.3058 0.500197C16.1708 0.495044 14.0893 1.16803 12.3614 2.42214C10.6335 3.67624 9.34853 5.44666 8.6917 7.47815C7.30085 7.76286 5.98686 8.3414 4.8377 9.17505C3.68854 10.0087 2.73073 11.0782 2.02839 12.312C0.956464 14.1591 0.498905 16.2988 0.721698 18.4228C0.944492 20.5467 1.83612 22.5449 3.268 24.1293C2.81966 25.4759 2.66413 26.9026 2.81182 28.3141C2.95951 29.7256 3.40701 31.0892 4.12437 32.3138C5.18791 34.1659 6.8123 35.6322 8.76321 36.5013C10.7141 37.3704 12.8907 37.5973 14.9789 37.1492C15.9208 38.2107 17.0786 39.0587 18.3747 39.6366C19.6709 40.2144 21.0755 40.5087 22.4946 40.4998C24.6307 40.5054 26.7133 39.8321 28.4418 38.5772C30.1704 37.3223 31.4556 35.5506 32.1119 33.5179C33.5027 33.2332 34.8167 32.6547 35.9659 31.821C37.115 30.9874 38.0728 29.9178 38.7752 28.684C39.8458 26.8371 40.3023 24.6979 40.0789 22.5748C39.8556 20.4517 38.9639 18.4544 37.5324 16.8707ZM22.4978 37.8849C20.7443 37.8874 19.0459 37.2733 17.6994 36.1501C17.7601 36.117 17.8666 36.0586 17.936 36.0161L25.9004 31.4156C26.1003 31.3019 26.2663 31.137 26.3813 30.9378C26.4964 30.7386 26.5563 30.5124 26.5549 30.2825V19.0542L29.9213 20.998C29.9389 21.0068 29.9541 21.0198 29.9656 21.0359C29.977 21.052 29.9842 21.0707 29.9867 21.0902V30.3889C29.9842 32.375 29.1946 34.2791 27.7909 35.6841C26.3872 37.0892 24.4838 37.8806 22.4978 37.8849ZM6.39227 31.0064C5.51397 29.4888 5.19742 27.7107 5.49804 25.9832C5.55718 26.0187 5.66048 26.0818 5.73461 26.1244L13.699 30.7248C13.8975 30.8408 14.1233 30.902 14.3532 30.902C14.583 30.902 14.8088 30.8408 15.0073 30.7248L24.731 25.1103V28.9979C24.7321 29.0177 24.7283 29.0376 24.7199 29.0556C24.7115 29.0736 24.6988 29.0893 24.6829 29.1012L16.6317 33.7497C14.9096 34.7416 12.8643 35.0097 10.9447 34.4954C9.02506 33.9811 7.38785 32.7263 6.39227 31.0064ZM4.29707 13.6194C5.17156 12.0998 6.55279 10.9364 8.19885 10.3327C8.19885 10.4013 8.19491 10.5228 8.19491 10.6071V19.808C8.19351 20.0378 8.25334 20.2638 8.36823 20.4629C8.48312 20.6619 8.64893 20.8267 8.84863 20.9404L18.5723 26.5542L15.206 28.4979C15.1894 28.5089 15.1703 28.5155 15.1505 28.5173C15.1307 28.5191 15.1107 28.516 15.0924 28.5082L7.04046 23.8557C5.32135 22.8601 4.06716 21.2235 3.55289 19.3046C3.03862 17.3858 3.30624 15.3413 4.29707 13.6194ZM31.955 20.0556L22.2312 14.4411L25.5976 12.4981C25.6142 12.4872 25.6333 12.4805 25.6531 12.4787C25.6729 12.4769 25.6928 12.4801 25.7111 12.4879L33.7631 17.1364C34.9967 17.849 36.0017 18.8982 36.6606 20.1613C37.3194 21.4244 37.6047 22.849 37.4832 24.2684C37.3617 25.6878 36.8382 27.0432 35.9743 28.1759C35.1103 29.3086 33.9415 30.1717 32.6047 30.6641C32.6047 30.5947 32.6047 30.4733 32.6047 30.3889V21.188C32.6066 20.9586 32.5474 20.7328 32.4332 20.5338C32.319 20.3348 32.154 20.1698 31.955 20.0556ZM35.3055 15.0128C35.2464 14.9765 35.1431 14.9142 35.069 14.8717L27.1045 10.2712C26.906 10.1554 26.6803 10.0943 26.4504 10.0943C26.2206 10.0943 25.9948 10.1554 25.7963 10.2712L16.0726 15.8858V11.9982C16.0715 11.9783 16.0753 11.9585 16.0837 11.9405C16.0921 11.9225 16.1048 11.9068 16.1207 11.8949L24.1719 7.25025C25.4053 6.53903 26.8158 6.19376 28.2383 6.25482C29.6608 6.31589 31.0364 6.78077 32.2044 7.59508C33.3723 8.40939 34.2842 9.53945 34.8334 10.8531C35.3826 12.1667 35.5464 13.6095 35.3055 15.0128ZM14.2424 21.9419L10.8752 19.9981C10.8576 19.9893 10.8423 19.9763 10.8309 19.9602C10.8195 19.9441 10.8122 19.9254 10.8098 19.9058V10.6071C10.8107 9.18295 11.2173 7.78848 11.9819 6.58696C12.7466 5.38544 13.8377 4.42659 15.1275 3.82264C16.4173 3.21869 17.8524 2.99464 19.2649 3.1767C20.6775 3.35876 22.0089 3.93941 23.1034 4.85067C23.0427 4.88379 22.937 4.94215 22.8668 4.98473L14.9024 9.58517C14.7025 9.69878 14.5366 9.86356 14.4215 10.0626C14.3065 10.2616 14.2466 10.4877 14.2479 10.7175L14.2424 21.9419ZM16.071 17.9991L20.4018 15.4978L24.7325 17.9975V22.9985L20.4018 25.4983L16.071 22.9985V17.9991Z"
-    ]
-  },
-  "claude": {
-    "viewBox": "0 0 248 248",
-    "fill": "#D97757",
-    "paths": [
-      "M52.4285 162.873L98.7844 136.879L99.5485 134.602L98.7844 133.334H96.4921L88.7237 132.862L62.2346 132.153L39.3113 131.207L17.0249 130.026L11.4214 128.844L6.2 121.873L6.7094 118.447L11.4214 115.257L18.171 115.847L33.0711 116.911L55.485 118.447L71.6586 119.392L95.728 121.873H99.5485L100.058 120.337L98.7844 119.392L97.7656 118.447L74.5877 102.732L49.4995 86.1905L36.3823 76.62L29.3779 71.7757L25.8121 67.2858L24.2839 57.3608L30.6515 50.2716L39.3113 50.8623L41.4763 51.4531L50.2636 58.1879L68.9842 72.7209L93.4357 90.6804L97.0015 93.6343L98.4374 92.6652L98.6571 91.9801L97.0015 89.2625L83.757 65.2772L69.621 40.8192L63.2534 30.6579L61.5978 24.632C60.9565 22.1032 60.579 20.0111 60.579 17.4246L67.8381 7.49965L71.9133 6.19995L81.7193 7.49965L85.7946 11.0443L91.9074 24.9865L101.714 46.8451L116.996 76.62L121.453 85.4816L123.873 93.6343L124.764 96.1155H126.292V94.6976L127.566 77.9197L129.858 57.3608L132.15 30.8942L132.915 23.4505L136.608 14.4708L143.994 9.62643L149.725 12.344L154.437 19.0788L153.8 23.4505L150.998 41.6463L145.522 70.1215L141.957 89.2625H143.994L146.414 86.7813L156.093 74.0206L172.266 53.698L179.398 45.6635L187.803 36.802L193.152 32.5484H203.34L210.726 43.6549L207.415 55.1159L196.972 68.3492L188.312 79.5739L175.896 96.2095L168.191 109.585L168.882 110.689L170.738 110.53L198.755 104.504L213.91 101.787L231.994 98.7149L240.144 102.496L241.036 106.395L237.852 114.311L218.495 119.037L195.826 123.645L162.07 131.592L161.696 131.893L162.137 132.547L177.36 133.925L183.855 134.279H199.774L229.447 136.524L237.215 141.605L241.8 147.867L241.036 152.711L229.065 158.737L213.019 154.956L175.45 145.977L162.587 142.787H160.805V143.85L171.502 154.366L191.242 172.089L215.82 195.011L217.094 200.682L213.91 205.172L210.599 204.699L188.949 188.394L180.544 181.069L161.696 165.118H160.422V166.772L164.752 173.152L187.803 207.771L188.949 218.405L187.294 221.832L181.308 223.959L174.813 222.777L161.187 203.754L147.305 182.486L136.098 163.345L134.745 164.2L128.075 235.42L125.019 239.082L117.887 241.8L111.902 237.31L108.718 229.984L111.902 215.452L115.722 196.547L118.779 181.541L121.58 162.873L123.291 156.636L123.14 156.219L121.773 156.449L107.699 175.752L86.304 204.699L69.3663 222.777L65.291 224.431L58.2867 220.768L58.9235 214.27L62.8713 208.48L86.304 178.705L100.44 160.155L109.551 149.507L109.462 147.967L108.959 147.924L46.6977 188.512L35.6182 189.93L30.7788 185.44L31.4156 178.115L33.7079 175.752L52.4285 162.873Z"
-    ]
-  },
-  "anthropic": {
-    "viewBox": "0 0 35 24",
-    "paths": [
-      "M-0.00143743 24L9.56656 -1.90735e-06H15.0546L24.6226 24H19.2626L17.3106 18.96H7.29456L5.34256 24H-0.00143743ZM9.02256 14.496H15.5826L12.3026 6.064L9.02256 14.496ZM29.0386 24L19.4706 -1.90735e-06H24.7186L34.2866 24H29.0386Z"
-    ]
-  },
-  "kiro": {
-    "svg64": "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"
-  },
-  "antigravity": {
-    "svg64": "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"
-  },
-  "grok": {
-    "viewBox": "0 0 24 24",
-    "fillRule": "evenodd",
-    "paths": [
-      "M9.27 15.29l7.978-5.897c.391-.29.95-.177 1.137.272.98 2.369.542 5.215-1.41 7.169-1.951 1.954-4.667 2.382-7.149 1.406l-2.711 1.257c3.889 2.661 8.611 2.003 11.562-.953 2.341-2.344 3.066-5.539 2.388-8.42l.006.007c-.983-4.232.242-5.924 2.75-9.383.06-.082.12-.164.179-.248l-3.301 3.305v-.01L9.267 15.292M7.623 16.723c-2.792-2.67-2.31-6.801.071-9.184 1.761-1.763 4.647-2.483 7.166-1.425l2.705-1.25a7.808 7.808 0 00-1.829-1A8.975 8.975 0 005.984 5.83c-2.533 2.536-3.33 6.436-1.962 9.764 1.022 2.487-.653 4.246-2.34 6.022-.599.63-1.199 1.259-1.682 1.925l7.62-6.815"
-    ]
-  },
-  "opencode": {
-    "viewBox": "0 0 24 24",
-    "fillRule": "evenodd",
-    "paths": [
-      "M16 6H8v12h8V6zm4 16H4V2h16v20z"
-    ]
-  },
-  "muse": {
-    "svg64": "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"
-  }
-};
-
-/** Whether `provider`'s own mark is shown (else its generic tile). */
-export function showsBrandMark(provider) { return MARK_SWITCH.brandMarks && !MARK_SWITCH.withheld.has(provider) && !!MARKS[provider]; }
-
-function GenericTile({ letters, size }) {
-  return html`<svg width=${size} height=${size} viewBox="0 0 24 24" aria-hidden="true" focusable="false" class="provider-tile"><rect x="1" y="1" width="22" height="22" rx="6" fill="currentColor" fill-opacity="0.14" /><text x="12" y="16" text-anchor="middle" font-size="10" font-weight="600" font-family="system-ui, sans-serif" fill="currentColor">${letters}</text></svg>`;
-}
-
-export function ProviderMark({ provider, size = 28 }) {
-  const mark = MARKS[provider];
-  if (!mark && !TILES[provider]) return null;
-  if (!showsBrandMark(provider)) return TILES[provider] ? html`<${GenericTile} letters=${TILES[provider]} size=${size} />` : null;
-  // Complete marks (gradients, masks) are isolated images, byte for byte as published (base64): their ids cannot
-  // collide, their colours are their own, and nothing in them is rewritten.
-  if (mark.svg64) return html`<img width=${size} height=${size} src=${"data:image/svg+xml;base64," + mark.svg64} alt="" aria-hidden="true" />`;
-  return html`<svg width=${size} height=${size} viewBox=${mark.viewBox} fill=${mark.fill || "currentColor"} fill-rule=${mark.fillRule || undefined} aria-hidden="true" focusable="false">${mark.paths.map(d => html`<path d=${d} />`)}</svg>`;
-}

package/dist/ui/runtime-catalog.js

@@ -1,55 +0,0 @@
-// Machine inventory is a fast central snapshot. Reading it never launches a model or a CLI probe.
-import { useEffect } from "/assets/app-html.js";
-import { createStore, useStore } from "/assets/app-store.js";
-import { useLease } from "/assets/app-ctx.js";
-
-const initial = () => ({ data:null, loading:false, error:"", checkedAt:0 });
-export function createRuntimeCatalog({ fetcher = (...args) => fetch(...args), now = () => Date.now(), ttlMs = 5000, timeoutMs = 15_000 } = {}) {
-  const store = createStore(initial());
-  let pending = null, controller = null, generation = 0;
-  const load = ({ force = false } = {}) => {
-    if (pending) return pending;
-    if (!force && store.get().data && now()-store.get().checkedAt < ttlMs) return Promise.resolve(store.get().data);
-    const mine = generation, abort = controller = new AbortController();
-    const timer = setTimeout(() => abort.abort(),timeoutMs);
-    store.set({loading:true,error:""});
-    pending = Promise.resolve().then(async () => {
-      try {
-        const response = await fetcher("/ui/runtimes",{credentials:"same-origin",signal:abort.signal});
-        const value = await response.json();
-        if (!response.ok) {
-          if (mine === generation && [401,403].includes(response.status)) store.set({data:null,checkedAt:0});
-          throw new Error(value?.error || `HTTP ${response.status}`);
-        }
-        if (!value || !Array.isArray(value.machines)) throw new Error("Invalid runtime inventory response");
-        if (mine === generation) store.set({data:value,checkedAt:now(),error:""});
-        return value;
-      } catch(error) {
-        if (mine === generation) store.set({error:error?.message || "Runtime inventory unavailable"});
-        return null;
-      } finally {
-        clearTimeout(timer);
-        if (mine === generation) { pending = null; controller = null; store.set({loading:false}); }
-      }
-    });
-    return pending;
-  };
-  return {get:store.get,subscribe:store.subscribe,load,clear(){generation++;controller?.abort();controller=null;pending=null;store.set(initial());}};
-}
-const catalog = createRuntimeCatalog();
-export const forgetRuntimeCatalog = () => catalog.clear();
-export function useRuntimeCatalog(enabled = true) {
-  const state = useStore(catalog), lease = useLease(`runtime-catalog:${enabled}`);
-  useEffect(() => {
-    if (!enabled) return;
-    void catalog.load();
-    const timer = lease.interval(() => { void catalog.load(); },5000);
-    return () => lease.clear(timer);
-  },[lease,enabled]);
-  return {...(enabled ? state : initial()),refresh:() => catalog.load({force:true})};
-}
-export const instanceMachineId = instance => instance?.machine_id || instance?.machineId || "";
-/** Inventory can be viewed offline; only online, installed, supported providers can receive new work. */
-export function runtimeCliChoices(machine) {
-  return (machine?.inventory?.clis || []).filter(cli => cli.path && cli.supports?.execution !== false && cli.supports?.resume !== false);
-}

package/dist/ui/runtime-commands.d.ts

@@ -1,4 +0,0 @@
-export function safeRuntimeOrigin(server: unknown): string;
-export function runtimeConnectCommand(server: unknown): string;
-export function runtimeInstallCommand(server: unknown, scriptSha256: unknown): string;
-export function runtimeWindowsConnectCommand(server: unknown): string;

package/dist/ui/runtime-commands.js

@@ -1,59 +0,0 @@
-/**
- * The commands Settings -> Runtime -> Connect a computer offers to copy. Pure functions, no DOM and no network, so the page and the tests
- * build exactly the same text.
- *
- * A command only ever contains: the origin the administrator reviewed in step 1 (inert host and port characters, https or loopback
- * http), and, for the install command, the SHA-256 of install.ps1 that the AgEnD server itself reported to this signed-in page. No
- * pairing code, token, credential or flag the page did not choose is ever put in one.
- */
-
-/** The origin, only when it is composed of inert hostname/port characters; "" otherwise. Nothing else is placed in a copyable shell command. */
-export function safeRuntimeOrigin(server) {
-  try {
-    const url = new URL(server);
-    const local = ["localhost","127.0.0.1","[::1]"].includes(url.hostname);
-    if (!/^([a-z0-9.-]+|\[[a-f0-9:]+\])$/i.test(url.hostname) || url.username || url.password || url.search || url.hash || url.pathname !== "/"
-      || !(url.protocol === "https:" || url.protocol === "http:" && local)) return "";
-    return url.origin;
-  } catch { return ""; }
-}
-/** ZIP flow: run from the extracted folder. */
-export function runtimeConnectCommand(server) {
-  const origin = safeRuntimeOrigin(server);
-  return origin ? `.\\agend-runtime.cmd connect --server "${origin}"` : "";
-}
-/**
- * Windows one-line install. The script and its bundle come from the same server over the same TLS channel, so a hash inside the script
- * cannot vouch for the script. This page is the trust anchor: the command downloads install.ps1, hashes the bytes it received, compares
- * the result with the SHA-256 shown here and runs the text (iex) only when they are equal. A copy that was modified, or fetched from
- * another server, is refused before anything of it runs, whatever the TLS trust decision was. The address is handed to the script by
- * `$agend`: the script reads it from nowhere else. It never skips certificate validation, and says not to.
- *
- * The rule for every step is that NO FAILURE MAY REACH `iex`. In PowerShell a failing method call is only statement-terminating: the
- * statement is skipped and the next one runs. So `if (<check that can fail>) { throw }; iex $s` is fail-OPEN (in ConstrainedLanguage
- * `[Security.Cryptography.SHA256]::Create()` is refused, the `if` is skipped, and the unverified script runs). Here:
- *   - `$s` and `$h` are reset to $null first, so a failed download or a failed hash leaves nothing from an earlier command to act on;
- *   - the hash is computed into `$h` in a statement of its own, so a failure there leaves `$h` null;
- *   - the condition is only `$s -and $h -eq '<hex>'` (no method call that could throw), and `iex` is inside the branch it passes: when
- *     anything above failed, `$h` is null, the condition is false, and the else branch says why and throws. (The message is written with
- *     Write-Host first because under `$ErrorActionPreference = 'SilentlyContinue'` a bare `throw` is swallowed and prints nothing; the
- *     script still does not run, as `iex` is not in that branch.)
- *   - the first statement (TLS 1.2, which Windows PowerShell 5.1 may not offer by default) touches nothing the check depends on: if it
- *     fails, the rest still runs and the rest still refuses.
- * This differs from the shape in the upstream design review (`if (-not $s -or <hash> -ne …) { throw }; iex $s`) for exactly that reason.
- */
-export function runtimeInstallCommand(server, scriptSha256) {
-  const origin = safeRuntimeOrigin(server);
-  if (!origin || typeof scriptSha256 !== "string" || !/^[a-f0-9]{64}$/.test(scriptSha256)) return "";
-  return `[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; `
-    + `$agend = '${origin}'; $s = $null; $h = $null; `
-    + `$s = (iwr "$agend/runtime/install.ps1" -UseBasicParsing).Content; `
-    + `$h = (-join ([Security.Cryptography.SHA256]::Create().ComputeHash([Text.Encoding]::UTF8.GetBytes($s)) | % { $_.ToString('x2') })); `
-    + `if ($s -and $h -eq '${scriptSha256}') { iex $s } `
-    + `else { Write-Host 'install.ps1 could not be verified against the hash on the AgEnD page (a certificate or download error above is the usual cause: trust this AgEnD certificate, or use the ZIP; otherwise reload the page and copy the command again)' -ForegroundColor Red; throw 'install.ps1 was not run' }`;
-}
-/** After the install script: agend-runtime is on the user's PATH. The pairing code is typed into the terminal, never here. */
-export function runtimeWindowsConnectCommand(server) {
-  const origin = safeRuntimeOrigin(server);
-  return origin ? `agend-runtime connect --server "${origin}"` : "";
-}

package/dist/ui/settings-access-strings.js

@@ -1,42 +0,0 @@
-// Refs #3061: the words Access & security added to modules a tab can already hold from before an upgrade, kept in a file of their
-// own on purpose (the pattern settings-shared-strings.js documents, #3087).
-//
-// Why a file of their own: Fleet and search import settings-strings.js and settings-layout.js (panel-fleet.js → settings-dialogs.js,
-// search-dialog.js → settings-registry.js). A tab that visited either before the upgrade has already run the old copies, and the
-// browser hands the same module back when the new Settings page imports that URL again — so a key only the new file had would read
-// as the raw `settings.…` / `settingsLayout.…` key there, in both languages. This file's URL is new, so no tab can hold an old
-// copy of it: every module that draws one of these words imports it, and register() merges its words into the same tables.
-//
-// Rules for this file (the same as settings-shared-strings.js):
-// - A key lives here or in settings-strings.js / settings-layout.js, never in both. A change to Access & security that adds a word
-//   to one of those modules (one an open Fleet or search tab already holds) puts it here instead.
-// - Every module that reads one of these keys imports "./settings-access-strings.js": the Settings page (panel-settings.js), the
-//   search path (settings-registry.js, search-dialog.js) and the Web authorization card (settings-web-authority.js).
-//   tests/settings-access-strings-3061.test.ts checks that every module that reads a key from here imports this file.
-// - The strings of modules no tab can have loaded before (settings-devices.js is new) stay in the module that draws them.
-import { register } from "/assets/app-i18n.js";
-
-register("settings", {
-  en: {
-    webLoginQr: "Show a QR code when a new device signs in with another device",
-    webLoginQrHint: "On the new device's sign-in page, beside the 8-character code. It holds only that page's address and the code, never a credential, and approving still takes a device signed in as the owner. Off by default; it has no effect on a fleet with a chat connection.",
-  },
-  "zh-TW": {
-    webLoginQr: "新裝置用其他裝置登入時顯示 QR Code",
-    webLoginQrHint: "顯示在新裝置登入頁、8 碼代碼旁邊。裡面只有該頁面的網址和代碼，沒有任何憑證；核准仍需要已登入並驗證擁有者的裝置。預設關閉；有連接聊天平台的 fleet 不受影響。",
-  },
-});
-
-// The Web authorization card on a fleet with no chat connection (settings-web-authority.js; layoutText reads settingsLayout.*).
-register("settingsLayout", {
-  en: {
-    revAuthorityBriefWeb: "This fleet has no chat platform connected. The host owner can verify directly; a remote session confirms who the owner is with the authenticator.",
-    revAuthorityEnabledWeb: "Allow web authorization by a verified owner",
-    revAuthorityRule: "Signing in a device and authorizing an action are judged separately. When this is off, even a verified web session cannot approve actions that need authority.",
-  },
-  "zh-TW": {
-    revAuthorityBriefWeb: "這個 fleet 未連接聊天平台。主機 owner 可直接驗證；遠端工作階段需透過驗證器確認擁有者身分。",
-    revAuthorityEnabledWeb: "允許已驗證擁有者的網頁授權",
-    revAuthorityRule: "裝置登入與擁有者授權分開判斷。關閉後，已驗證的網頁工作階段也不能核准需授權的操作。",
-  },
-});

package/dist/ui/settings-agent-filters.js

@@ -1,94 +0,0 @@
-// View-only Agent list filters. They never stage settings or read another endpoint.
-import { html } from "/assets/app-html.js";
-import { register, t } from "/assets/app-i18n.js";
-import { instanceMachineId } from "./runtime-catalog.js";
-
-register("agentFilters", {
-  en: {
-    title: "Filter Agents", runtime: "Runtime", status: "Status", allRuntimes: "All Runtimes", allStatuses: "All statuses",
-    wsl: "WSL / Linux", local: "Windows local", remote: "Windows remote", machine: "{0} · Windows remote", unknownRuntime: "Unknown Runtime",
-    revokedMachine: "{0} · revoked", revokedComputer: "Revoked computer · {0}", unknownComputer: "Unknown computer · {0}",
-    machineGone: "This computer is no longer connected. Open the Agent's settings and change its Runtime. ({0})",
-    running: "Running", paused: "Paused", stopped: "Stopped", crashed: "Crashed", unknown: "Unknown status", offline: "Runtime offline",
-    results: "Showing {0} of {1} Agents", clear: "Clear filters", noMatch: "No matching Agents", noMatchHint: "Try a different search, Runtime, or status.",
-  },
-  "zh-TW": {
-    title: "篩選 Agent", runtime: "Runtime", status: "狀態", allRuntimes: "所有 Runtime", allStatuses: "所有狀態",
-    wsl: "WSL / Linux", local: "Windows 本機", remote: "Windows 遠端", machine: "{0} · Windows 遠端", unknownRuntime: "未知 Runtime",
-    revokedMachine: "{0} · 已撤銷", revokedComputer: "已撤銷的電腦 · {0}", unknownComputer: "未知電腦 · {0}",
-    machineGone: "這台電腦已不再連線。請開啟 Agent 設定，變更 Runtime。（{0}）",
-    running: "執行中", paused: "已暫停", stopped: "已停止", crashed: "已當掉", unknown: "未知狀態", offline: "Runtime 離線",
-    results: "顯示 {0} / {1} 個 Agent", clear: "清除篩選", noMatch: "沒有符合條件的 Agent", noMatchHint: "請調整搜尋、Runtime 或狀態。",
-  },
-});
-export const agentFilterText = (key, ...values) => t(`agentFilters.${key}`, ...values);
-const STATUSES = ["running", "paused", "stopped", "crashed"];
-
-/** A computer is named by what the Runtime page shows; only an id that names no computer is shown as (the start of) the id. */
-const shortId = (id) => String(id).slice(0, 8);
-/**
- * One computer's label. `found` is false once the computer list has loaded and has no such computer; until then (or when
- * the list cannot be read) an unnamed one is simply "Windows remote" rather than a claim that it is gone.
- */
-export function machineLabel(id, name, status, found = true) {
-  if (name) return { label: agentFilterText(status === "revoked" ? "revokedMachine" : "machine", name), title: status === "revoked" ? agentFilterText("machineGone", id) : name, gone: status === "revoked" };
-  if (status === "revoked") return { label: agentFilterText("revokedComputer", shortId(id)), title: agentFilterText("machineGone", id), gone: true };
-  if (!found) return { label: agentFilterText("unknownComputer", shortId(id)), title: agentFilterText("machineGone", id), gone: true };
-  return { label: agentFilterText("remote"), title: id, gone: false };
-}
-/** Missing runtime is the configured WSL default; invalid explicit values are not WSL. `machines` (id → {name, status}) is the loaded computer list, or null. */
-export function agentRuntime(inst, live, machines = null) {
-  if (inst?.runtime === undefined || inst?.runtime === "wsl") return { kind: "wsl", machineId: "", label: agentFilterText("wsl") };
-  if (inst?.runtime !== "windows") return { kind: "unknown", machineId: "", label: agentFilterText("unknownRuntime") };
-  const id = instanceMachineId(inst);
-  if (id && typeof id !== "string") return { kind: "unknown", machineId: "", label: agentFilterText("unknownRuntime") };
-  if (!id) return { kind: "windows-local", machineId: "", label: agentFilterText("local") };
-  const sameLive = instanceMachineId(live) === id, row = machines?.get(id);
-  const name = inst.machine_name || (sameLive ? live?.machine_name : "") || row?.name || "";
-  const status = (sameLive ? live?.machine_status : "") === "revoked" || row?.status === "revoked" ? "revoked" : row?.status || (sameLive ? live?.machine_status : "");
-  return { kind: "windows-remote", machineId: id, ...machineLabel(id, name, status, !machines || !!row || !!name) };
-}
-
-/** Unknown/unreadable snapshots must not be reported as stopped. */
-export function agentStatus(live) {
-  return STATUSES.includes(live?.status) ? live.status : "unknown";
-}
-export const agentRuntimeOffline = (inst, live) => agentRuntime(inst, live).kind === "windows-remote" && live?.machine_status === "offline";
-
-/** Search and grouping have already run; preserve their ordering and group identities. */
-export function filterAgentGroups(groups, instances, live, { runtime = "", status = "" } = {}) {
-  return groups.map((group) => ({ ...group, names: group.names.filter((name) => {
-    const target = agentRuntime(instances[name], live[name]);
-    const matchesRuntime = !runtime || (runtime.startsWith("machine:") ? target.machineId === runtime.slice(8) && target.kind === "windows-remote" : target.kind === runtime);
-    const matchesStatus = !status || (status === "runtime-offline" ? agentRuntimeOffline(instances[name], live[name]) : agentStatus(live[name]) === status);
-    return matchesRuntime && matchesStatus;
-  }) })).filter((group) => group.names.length);
-}
-
-export function AgentFilters({ instances, live, machines = null, runtime, status, matched, total, active, onRuntime, onStatus, onClear }) {
-  const labels = new Map();
-  let unknownRuntime = runtime === "unknown", offline = status === "runtime-offline";
-  for (const [name, inst] of Object.entries(instances)) {
-    const target = agentRuntime(inst, live[name], machines);
-    if (target.machineId) labels.set(target.machineId, target.label);
-    if (target.kind === "unknown") unknownRuntime = true;
-    if (agentRuntimeOffline(inst, live[name])) offline = true;
-  }
-  // Preserve a selected machine across a snapshot/config refresh instead of silently selecting another Runtime.
-  if (runtime.startsWith("machine:") && !labels.has(runtime.slice(8))) labels.set(runtime.slice(8), machineLabel(runtime.slice(8), "", "", false).label);
-  return html`<div class="s-agent-filters" role="group" aria-label=${agentFilterText("title")}>
-    <div class="s-agent-filter-controls">
-      <label><span>${agentFilterText("runtime")}</span><select value=${runtime} onChange=${(event) => onRuntime(event.target.value)}>
-        <option value="">${agentFilterText("allRuntimes")}</option><option value="wsl">${agentFilterText("wsl")}</option><option value="windows-local">${agentFilterText("local")}</option><option value="windows-remote">${agentFilterText("remote")}</option>
-        ${[...labels].sort((a, b) => a[1].localeCompare(b[1])).map(([id, label]) => html`<option key=${id} value=${`machine:${id}`}>${label}</option>`)}
-        ${unknownRuntime ? html`<option value="unknown">${agentFilterText("unknownRuntime")}</option>` : null}
-      </select></label>
-      <label><span>${agentFilterText("status")}</span><select value=${status} onChange=${(event) => onStatus(event.target.value)}>
-        <option value="">${agentFilterText("allStatuses")}</option>${[...STATUSES, "unknown"].map((value) => html`<option key=${value} value=${value}>${agentFilterText(value)}</option>`)}
-        ${offline ? html`<option value="runtime-offline">${agentFilterText("offline")}</option>` : null}
-      </select></label>
-      <button type="button" class="btn btn-sm s-agent-filter-clear" disabled=${!active} onClick=${onClear}>${agentFilterText("clear")}</button>
-    </div>
-    <p class="s-agent-filter-count" role="status" aria-live="polite">${agentFilterText("results", matched, total)}</p>
-  </div>`;
-}