@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/fleet-manager.d.ts

@@ -1,18 +1,13 @@
-import { AgentRuntimeChanges } from "./agent-runtime-change.js";
 import { type HumanOrigin } from "./human-delivery-receipts.js";
-import { type SettingsPendingView } from "./settings-confirmation.js";
-import { type GeneralSwitchInput } from "./general-binding.js";
 import { SettingsExecution } from "./settings-transaction.js";
 import { AppIconStore } from "./web-app-icon.js";
 import { type NamedTestResult } from "./tunnel/named-link-test.js";
 import { OfficeShareService } from "./office-share-service.js";
-import { OfficeTalk } from "./office-talk.js";
 import { type OfficeShare } from "./office-share.js";
 import type { PageShare } from "./page-share.js";
 import type { LoginCodeOwner } from "./web-login.js";
 import { type ProfileTicket } from "./runtime-cpu-profile.js";
 import type { CpuProfile } from "./cpu-profile.js";
-import { type IncomingMessage } from "node:http";
 import { type FleetMemory } from "./process-memory.js";
 import { MemoryPressure, type MemoryPressureSnapshot } from "./memory-pressure.js";
 import { ReplyDeduper } from "./reply-dedup.js";
@@ -24,7 +19,7 @@ import { type TopicDeleteOutcome } from "./instance-topic-delete.js";
 import { BackendAvailabilityStore, type AvailabilityProbes, type BackendAvailability } from "./backend-availability.js";
 import { AdapterWorld } from "./adapter-world.js";
 import { CostGuard } from "./cost-guard.js";
-import { type InstanceClient } from "./channel/ipc-bridge.js";
+import { IpcClient } from "./channel/ipc-bridge.js";
 import type { AdapterHealthSnapshot, ChannelAdapter, InboundMessage, InboundReaction } from "./channel/types.js";
 import { type BackendCliVersionSnapshot } from "./backend/types.js";
 import { type Logger } from "./logger.js";
@@ -72,10 +67,6 @@ export declare function applyTaskListCap<T extends {
     hint: string;
 } | T[];
 import { type PublicPreviewForUi } from "./web-api.js";
-import { RuntimeInstallService } from "./runtime-install.js";
-import { RuntimeCoordinator } from "./runtime-coordinator.js";
-import { FleetWindowsRuntime, type NativeRuntimePatch } from "./fleet-windows-runtime.js";
-import { NativeMcpSessions } from "./native-mcp.js";
 import { type LogAnswer, type LogQuery } from "./log-service.js";
 import { type ViewHistoryAnswer, type ViewHistoryQuery } from "./view-history.js";
 import { WebChatHistory, type WebChatPost } from "./web-chat-history.js";
@@ -118,9 +109,8 @@ import { type OrgChart } from "./web-org.js";
 import { type MemoryHog } from "./memory-hogs.js";
 import { type CacheReport } from "./cache-service.js";
 import { type WebCommandResult } from "./web-commands.js";
-import { type SessionRecord, type WebDeviceRow } from "./web-session.js";
+import { type SessionRecord } from "./web-session.js";
 import { WebNotices } from "./web-notices.js";
-import { WebRemoteAccess } from "./web-remote-access.js";
 import { VERIFIED_SESSION_HOURS, type HumanAuthority, type WebAuthorityRefusal, type WebAuthorityResult, type WebPeer } from "./authority/web-authority.js";
 import { type AuthorityState } from "./authority/authority-state.js";
 import { type SessionAuthorization } from "./authority/session-authorizations.js";
@@ -131,7 +121,6 @@ import { type ConnectionMetadata, type ConnectionBinding, type BindingProbe, typ
 import { type ProviderSecretStatus } from "./provider-secret-registry.js";
 import { ApplyJobStore, type ApplyJob, type ApplyTargetKind, type SelfRestartResult } from "./apply-job.js";
 import { type CarryResult } from "./backend/claude-carry.js";
-import { type AccountsView } from "./accounts-view.js";
 import { StormWindow } from "./storm-window.js";
 import { SpawnGate } from "./spawn-gate.js";
 import { BackendOutageTracker } from "./backend-outage.js";
@@ -219,18 +208,8 @@ export interface ModelCatalog {
     note?: string;
 }
 export interface DeliveryOptions {
-    /**
-     * A Windows instance only: the sender's authority after the handoff (see NativeRuntimeDeliveryOptions.authorityCurrent).
-     * stillCurrent fences the handoff itself; this one is rechecked before the Windows process starts.
-     */
-    authorityCurrent?: () => boolean;
     /** Explicitly identify agent-to-agent delivery when metadata is unavailable. */
     isCrossInstance?: boolean;
-    /**
-     * The Hub representative's last step (docs/design/hub-representative-agent.md): run after any wake, the idle wait and
-     * the storm recheck, immediately before the IPC hand-off. False drops the delivery unsent. Not for Windows agents.
-     */
-    beforeInput?: () => Promise<boolean>;
     /** Force or bypass the idle gate. Schedules set this explicitly. */
     waitForIdle?: boolean;
     /** Test/operational override; normal deliveries use the 60 second backstop. */
@@ -352,213 +331,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     /** Live view of lifecycle.daemons — used throughout; not deprecated. */
     get daemons(): Map<string, Daemon>;
     fleetConfig: FleetConfig | null;
-    private fleetWindowsRuntime;
-    private nativeMcpStore;
-    private paneManager;
-    private localPaneRelay;
-    private openingLocalPane;
-    private runtimeHub;
-    private runtimeInstall;
-    /** One service for the public installer routes and the administrator API: the hash the dashboard shows is the hash of what is sent. */
-    runtimeInstaller(): RuntimeInstallService;
-    private runtimeExecutor;
-    private runtimeStatusScheduled;
-    private readonly reconciledRemoteResults;
-    /** Machine credentials are separate from dashboard sessions and per-turn agent capabilities. */
-    runtimeCoordinator(): RuntimeCoordinator;
-    private runtimeWindowsExecutor;
-    /** Per-turn capabilities for native MCP, separate from browser and Linux-agent credentials. */
-    nativeMcpSessions(): NativeMcpSessions;
-    /** Retire only existing native capabilities; ordinary lifecycle changes do not instantiate the Windows path. */
-    invalidateNativeMcp(name: string): void;
-    /** The same instance registry and delivery entry point, with a native Windows execution adapter. */
-    nativeInstanceRuntime(): FleetWindowsRuntime;
-    private agentRuntimeChangeService?;
-    agentRuntimeChanges(): AgentRuntimeChanges;
-    /** Explicit dashboard opt-in, with the same General confirmation and ordinary topic/Daemon routing. */
-    createNativePaneInstance(profile: Record<string, unknown>, channelId: string | undefined, authorized: () => boolean, execution: SettingsExecution): Promise<{
-        name: string;
-        runtime: "windows";
-        agent: import("./windows-agents.js").WindowsAgent;
-    }>;
-    /** Admin-only settings path: validate first, then close the exact old launch before changing cold fields. */
-    updateNativePaneConfig(name: string, patch: Partial<NativeRuntimePatch>, authorized: () => boolean, transaction?: Pick<SettingsExecution, "mutate" | "complete">): Promise<ReturnType<FleetWindowsRuntime["update"]>>;
-    /** The local machine's inventory as last used to open its pane relay (status only; never a launch decision). */
-    private localPaneInventory;
-    private nativeCliStatus;
-    private localNativePaneEndpoint;
-    /** Persistent ownership is independent of the exec worker's per-turn capabilities. */
-    private nativePanes;
-    /** Prepare only bundled role files; this neither switches General nor starts a provider process. */
-    prepareWindowsGeneralWorkspace(name: string, machineId: string, cli: "codex" | "claude-code", bindingId: string, authorized: () => boolean): Promise<import("./runtime-general-protocol.js").GeneralWorkspaceReceipt>;
-    /** S3c (S-55): the member's exposure API, attached by S5's member composition (null: no Hub member here). */
-    private hubMemberExposureApi;
-    hubMemberExposures(): import("./hub/member/exposure-api.js").HubMemberExposureApi | null;
-    attachHubMemberExposures(api: import("./hub/member/exposure-api.js").HubMemberExposureApi | null): void;
-    /** S3c PR B: the member's pairing API, attached by S5's member composition (null: no Hub member here). */
-    private hubMemberPairingApi;
-    hubMemberPairing(): ReturnType<typeof import("./hub/member/pairing-api.js").createHubMemberPairingApi> | null;
-    attachHubMemberPairing(api: ReturnType<typeof import("./hub/member/pairing-api.js").createHubMemberPairingApi> | null): void;
-    private readonly generalLocationFlights;
-    private readonly generalAttentionEpisodes;
-    private generalBindings;
-    generalLocations(): unknown;
-    /** Pure preflight for the confirmation diff and stale-tab refusal; never prepares files or starts a CLI. */
-    previewGeneralLocation(raw: unknown): {
-        input: GeneralSwitchInput;
-        summary: string[];
-        connections: string[];
-    };
-    /** All entry points, including automatic native recovery, must respect an interrupted binding switch. */
-    assertGeneralBindingStart(name: string, config: InstanceConfig): void;
-    /** Only the Settings replay's confirmed admin can enter; the whole switch owns one lifecycle transition. */
-    switchGeneralLocation(raw: unknown, authorized: () => boolean, execution: SettingsExecution): Promise<{
-        started: boolean;
-        message: string;
-    }>;
-    /** An offline PC or a confirmed binding boundary holds old waiting input; it never becomes another conversation's queue. */
-    private holdGeneralOldDeliveries;
-    generalLocationDeliveryHold(name: string): string | null;
-    private generalLocationAttention;
-    nativePaneFor(name: string, config: InstanceConfig, assertCurrent: () => void): Promise<import("./native-pane-lifecycle.js").NativePaneLifecycle>;
-    recoverNativePane(name: string, launchId: string, authorized: () => boolean): Promise<void>;
-    holdNativePaneRecovery(name: string, error: unknown): boolean;
-    startFreshNativePane(name: string, launchId: string, sessionId: string | null, authorized: () => boolean): Promise<void>;
-    nativePanePinnedSession(name: string): string | null;
-    onNativePaneRecoverySettled(name: string): void;
-    setNativePanePaused(name: string, paused: boolean): void;
-    closeRetainedNativePane(name: string): Promise<void>;
-    reconcileNativePaneBeforeStart(name: string, daemon: Daemon): Promise<boolean>;
-    /** M-2255: the Windows runtimes' switches the fleet's own state reflects (null until the start-up has applied them). */
-    private runtimeEffects;
-    private runtimeEffectsScheduled;
-    private localPaneDrain;
-    private remotePaneDrain;
-    /** Revoke admissions synchronously; keep the captured transport only long enough for exact owned closes. */
-    private drainNativeRuntime;
-    /**
-     * M-2255: Settings → Runtime's switches (fleet.yaml `runtimes`, or their environment override) in force — set each time
-     * the configuration in force changes (a load, a save, a reload's rollback), next to the web authority's. Every gate reads
-     * them at once; what the fleet itself holds (paired computers' connections, this PC's Windows process, agents' tool
-     * sessions) follows just after, outside the save that changed them (applyRuntimeSwitches): no restart is needed.
-     */
-    /** S-51: the Hub switches follow the configuration in force (load, save, reload rollback), like the runtime ones. */
-    private observeHubSwitches;
-    /** Reads the raw configuration at run time (the newest wins); off and never started: returns before any import. */
-    private applyHubSwitches;
-    /** Single flight: one import, one runtime, assigned once; every caller (and Stop) gets that same runtime. */
-    private hubRuntimeCreated;
-    /**
-     * S-51 PR 2b: while the member switch is on, the local owner's "Connect to a Hub" backend (S3c's pairing API) is
-     * attached, paired or not; switched off, it is detached. A binding change re-composes the member side.
-     */
-    private observeHubMemberPairing;
-    /**
-     * Disconnect: every published exposure is withdrawn and saved before the disconnect reports success. Through the
-     * running member's API, or — held or not composed — directly in the member's own store; a failure here makes the
-     * disconnect report "unsaved" (S3c), so consent never outlives the disconnect.
-     */
-    private hubMemberWithdrawAll;
-    /**
-     * The Hub exposure picker's agents (docs/design/hub-representative-agent.md): every configured instance normal
-     * delivery addresses, General included, shown by its display name. The dedicated Hub daemon is not a fleet instance.
-     */
-    private hubMemberAgents;
-    /** Same cached usage source as the owner's rail, scoped to the representative's CLI and credential profile. */
-    private hubAgentQuota;
-    /**
-     * A published representative's lifecycle token (#3145, #3147 review): a DURABLE incarnation id per agent name, rotated
-     * whenever its backend, folder or runtime changes and dropped when the instance is removed. A replacement (remove and
-     * re-add, even with the same name and config, across restarts) or any retarget — including A→B→A — gets a new id, so
-     * earlier consent never matches again without an explicit republish. Stopping or pausing changes nothing.
-     */
-    private hubAgentToken;
-    private hubIncarnationsPath;
-    /**
-     * M-2451 (#3147 residual): written beside hub-member/, in the data directory itself, when an invalidation could not be
-     * made durable in hub-member/. A later process that finds it invalidates every incarnation before handing out any
-     * token, so a restart never revives consent the earlier process had to withdraw (A→B→A, or a removal, while hub-member/
-     * was unwritable).
-     */
-    private hubIncarnationsMarkerPath;
-    /** Whether this process has settled the incarnations on disk (the marker handled, the file proven writable). */
-    private hubIncarnationsSettled;
-    /**
-     * Once per process, before the first token: an invalidation an earlier process could not persist (the marker) clears
-     * every incarnation; and an existing file must be rewritable here, else this process is broken (no token at all) —
-     * an incarnation this process could not rotate must never be handed out. Fails closed: any doubt marks it broken.
-     */
-    private settleHubIncarnations; /**
-     * #3147 r2: set when an invalidation could not be made durable in any way (neither the atomic write nor removing the
-     * file worked). From then on this process hands out no representative token at all, and the transitions the fleet
-     * controls (a config save, a removal) are refused instead of applied.
-     */
-    private hubIncarnationsBroken;
-    private readHubIncarnations;
-    /**
-     * Persist the incarnation map: "written", or — when the atomic write fails — "cleared": the whole file is removed, which
-     * durably invalidates EVERY earlier incarnation (all consent then needs a republish; never a revival). Throws (and
-     * marks the process broken) only when neither is possible.
-     */
-    private writeHubIncarnations;
-    /** The agent's durable incarnation id (create: make one if none; else null). A changed fingerprint rotates it. */
-    private hubAgentIncarnation;
-    /**
-     * Every configuration in force: rotate a recorded agent's incarnation when its backend/folder/runtime changed; drop
-     * removed ones. strict (a config save the fleet is about to write): a failure to make that durable throws, so the save
-     * is refused instead of applied. Otherwise (a load or reload of a hand-edited file) a failure is logged — the
-     * invalidation then is the cleared file, or, if nothing could be written, this process hands out no token at all.
-     */
-    private observeHubAgentIncarnations;
-    /** A removed instance's incarnation goes with it (a later instance of the same name is a new one). strict: throw if not durable. */
-    private forgetHubAgentIncarnation;
-    /**
-     * A Hub question to its representative agent: ordinary cross-instance delivery (idle gate, wake, retries), from the
-     * reserved Hub sender with the Hub-issued correlation id. beforeInput runs immediately before the IPC hand-off.
-     */
-    private deliverHubQuestion;
-    /** S-51: why the Hub (or this fleet's Hub membership) is not running, if it is held. Empty while off or running. */
-    getHubHolds(): readonly import("./hub/runtime.js").HubHold[];
-    hubBrowserCertificate(): import("./hub/browser-certificate.js").HubBrowserCertificateControl | null;
-    hubRetention(): import("./hub/retention.js").HubRetentionControl | null;
-    private observeRuntimeSwitches;
-    /**
-     * Turned off: what it allowed ends now — the paired computers' connections (their agents show as offline) or this PC's
-     * Windows process (a turn in progress is cancelled, as when the fleet stops), and those agents' tool sessions.
-     * Turned on: the Windows agents are registered and their chat history read, as at start-up.
-     */
-    private applyRuntimeSwitches;
-    /** An unavailable opt-in runtime must not prevent the Linux fleet from starting or restoring its own history. */
-    private initializeNativeInstances;
-    /** Native CLIs are headless: the manager owns the durable delivery generation instead of a tmux daemon. */
-    private deliveryBootId;
     private rawFleetConfig;
-    /**
-     * S-51 (#3095, experimental, off by default): the Hub runtime. src/hub/runtime.js is imported only once a Hub switch
-     * (hub.enabled / hub_member.enabled) is on; while both are off nothing Hub-related loads, opens or listens.
-     */
-    private hubRuntime;
-    /** S3c's currentBinding reader, loaded with the pairing API (only while the member switch is on). */
-    private hubMemberBinding;
-    /** The member link as the "Connect to a Hub" view shows it (S5's client lifecycle). */
-    private hubMemberLink;
-    /** OutboundContext: the Hub representative's answer hook (null: no member service running, or not a Hub answer). */
-    hubReport(input: {
-        correlationId: string;
-        caller: string;
-        text: string;
-        callerCurrent(): boolean;
-        extras?: import("./hub-report-target.js").HubReportExtras;
-    }): Promise<import("./hub-report-target.js").HubReportOutcome> | null;
-    /** The member side's pane-failure hook for a Hub-issued correlation id (else null). */
-    private hubDeliveryFailed;
-    /** The member side's report_result hook for HUB_REPORT_TARGET while a representative service runs (else null). */
-    private hubReports;
-    /** The one in-flight creation (single flight): overlapping first observations share it, Stop waits for it. */
-    private hubRuntimeInit;
-    private hubEffectsReady;
-    private hubEffectsScheduled;
-    private hubHolds;
     private rawFleetDocument;
     /** #2208: the paths a saveFleetConfig() wrote, for its check that nothing else changed. */
     private fleetDocumentWrites;
@@ -574,7 +347,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     get primaryWorld(): AdapterWorld | undefined;
     readonly routing: RoutingEngine;
     get routingTable(): Map<string, RouteTarget>;
-    instanceIpcClients: Map<string, InstanceClient>;
+    instanceIpcClients: Map<string, IpcClient>;
     scheduler: Scheduler | null;
     private configPath;
     /** SIGHUPs received before startAll finishes are replayed once startup is safe. */
@@ -712,7 +485,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private kiroMigrationRuns;
     /** #1386 "Needs you": the list, its live chat messages and Acknowledge. Started with the fleet (finishStartup). */
     private needsYou;
-    private hubExecutionAttention;
     private missedOfflineStore;
     private configHistory;
     private configHistoryTimer;
@@ -941,8 +713,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     /** #2855: a trusted guest's searches, per account. */
     readonly guestSearches: OfficeWriteLimiter;
     private officeSharesInstance?;
-    /** #2861: when each instance was last talked to and answered (no words), for share links' dialogue box. */
-    readonly officeTalk: OfficeTalk;
     /**
      * #2636: Office share links — the live Office view for people outside the fleet, read-only, on a quick tunnel of
      * their own (a manager and lease of its own: never the fleet's one tunnel lane nor the public link's preview tunnel).
@@ -1021,8 +791,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * authorizing revoked links and cookies until the fleet restarted.
      */
     private settingsGeneration;
-    /** #2942: the settings baseline the agent-requested Windows changes are checked against (set with the gate). */
-    private settingsBaselineReader;
     private settingsRuntimeRevision;
     private settingsConfirmation;
     private settingsControl;
@@ -1047,107 +815,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * still hears it: a notice, not a step.
      */
     private settingsSelfConfirmation;
-    /**
-     * alpha.2 (M-2300; #2973's agent requests, junsion's §6): on a fleet with no chat connection there is no General to
-     * post an agent's Windows request in — it waited for `agend settings confirm` on the host. Its owner (decision
-     * 28c2d3a3: the `agend web --code` session on this computer, web-verified) now sees and decides it from the web's
-     * Needs you. The authority is asked from the request each time, and again at execution by the store (`current`):
-     * still that owner now (this computer, not revoked, signed out or run out), still a fleet with no chat connection,
-     * never over the public link. Anyone else — a guest, a LAN or public-link session, a chat-connected fleet's admin —
-     * gets nothing (a chat fleet keeps General's card as its way).
-     */
-    /**
-     * #2997 review (Prism P2): how many times an agent's request came or was decided — in a web-only fleet's status frame,
-     * so a page that never hears the stream's ping (one polling /ui/poll, one reconnecting, a tab from before the upgrade)
-     * reads the list again when it moves. A count, nothing more.
-     */
-    private agentProposalsRev;
-    private agentProposalOwner;
-    /**
-     * Refs #3061 (P2a): the new-device approval's one authority — the same one that decides an agent's request: this web-only
-     * fleet's owner, asked of the LIVE session each time (a sign-out, an expiry, a revocation, the authority switch or
-     * "Only this computer can authorize" turning a session into a non-owner is seen at once). A LAN session that signed in
-     * with a one-time code, a session a device approval made, a guest, a chat fleet's admin and the CLI's header token are
-     * none of them this: they are told so, and learn nothing about any request.
-     */
-    private deviceApprovalOwner;
-    /**
-     * Refs #3061 (auth-api): device-code sign-in is offered — a web-only fleet with web authorization on. With
-     * `web.verified_authority.enabled: false` no one is an owner (liveOwner → null), so no one could approve: the three
-     * `/auth/device-login*` routes answer 404 and the sign-in page shows no button. "Only this computer can authorize"
-     * does not close it: this computer's own session can still approve.
-     */
-    deviceLoginAvailable(): boolean;
-    /** Refs #3061 (P2b): `web.login_qr` (default off), read per page served — the sign-in page then draws the approve link's QR code. */
-    loginQrEnabled(): boolean;
-    /**
-     * GET /ui/devices: is this a web-only fleet, may THIS session approve a new device and end another (is it the verified
-     * owner), and — to an admin session, never to a guest or the CLI's header token — the signed-in devices (Refs #3061, P2b).
-     * `authority`: web authorization is on. With it off nobody is an owner (liveOwner → null), so nobody may add a device or
-     * sign another out; the page says why and points to `agend web-token rotate` on this computer instead of "use the AgEnD
-     * computer", which would not help.
-     */
-    webDevicesStatus(req: IncomingMessage): {
-        webOnly: boolean;
-        owner: boolean;
-        authority: boolean;
-        devices: WebDeviceRow[];
-    };
-    /**
-     * Refs #3061 (P2b): the device list — this fleet's admin sessions, newest activity first (a guest's sessions are the
-     * Guests page's, and a read-only tier has none): how each was approved, whether it carries owner authority, and which
-     * one is the reader's own. The same people may read this as may read `GET /auth/sessions` (any admin session).
-     *
-     * `ownerVerified` is the §3 verdict for the session as it would be used from where it signs in (a host session from
-     * this computer, a session from outside over the link): one that signed in with a one-time code or a device approval is
-     * not an owner until the authenticator vouches for it. Display only — the checks that act on it run again at each use.
-     */
-    private webDeviceRows;
-    /**
-     * Refs #3061 (P2b): may this request's session end ANOTHER session — one signed in elsewhere, or all of them (auth-api
-     * `DELETE /auth/sessions…`, which an admin session could always do). On a web-only fleet that is the verified owner's:
-     * a session a code or a device approval made is signed in but not an owner, and could otherwise sign out the owner's
-     * own. A fleet with a chat connection is as it was (its admins are the chat's). Ending one's OWN session is never this.
-     */
-    mayEndOtherSessions(req: IncomingMessage): boolean;
-    /**
-     * Refs #3061 (P2b): POST /ui/devices/signout {handle} — the owner ends another signed-in device (the settings list's
-     * button). Only the verified owner, asked of the LIVE session each time (a non-owner learns nothing about any handle:
-     * 403 before anything is looked up); only an admin session of this fleet (a guest's is the Guests page's; an unknown
-     * handle and a guest's are the same 404); never the owner's own session here (Sign out is /auth/logout). The device's
-     * authorization goes with it, so a copy of its cookie is nobody's.
-     */
-    webDeviceSignOut(req: IncomingMessage, handle: string): {
-        status: number;
-        body: Record<string, unknown>;
-    };
-    /**
-     * Refs #3061 (P2a): look a new device's code up (for the confirm screen), approve it, or deny it — the verified owner's,
-     * on a web-only fleet. The answer is the request as it now stands. Approving only marks the request approved: the new
-     * browser makes its own session when it next asks (auth-api POST /auth/device-login/poll), so no credential passes from
-     * here to there — not in the answer, not through the fleet. A wrong code counts against one fleet-wide breaker; while
-     * it is open every code (a right one too) waits.
-     */
-    webDeviceLoginAct(req: IncomingMessage, op: "lookup" | "approve" | "deny", code: string): {
-        status: number;
-        body: Record<string, unknown>;
-    };
-    /** alpha.2: the agents' requests waiting for this web-only fleet's owner, or null when the reader is not that owner. */
-    webAgentProposals(req: IncomingMessage): SettingsPendingView[] | null;
-    /**
-     * alpha.2: the owner's Approve or Reject of an agent's request. The store claims it before its first await (a second
-     * click, from here or the host, finds it no longer pending) and asks the owner, the request (its fleet generation and
-     * Windows switch) and the target machine again before and while it runs the same creation code the web uses. The
-     * answer is always the request as it now stands: applied (with the new agent's name), rejected, expired, stale or
-     * failed (with its reason), or already decided.
-     */
-    webDecideAgentProposal(req: IncomingMessage, id: string, decision: "confirm" | "reject"): Promise<{
-        status: number;
-        body: Record<string, unknown>;
-    }>;
-    /** A confirmation belongs to the server route/lifetime, not the availability of General's model. */
-    private settingsGeneralRoute;
-    /** Connected, same-platform, unaffected server routes can post cards even while the model is offline. */
+    /** #2170: the Generals a chat card could be posted in (promptSettingsChange's rule): connected, on the platform, unaffected. */
     private settingsNoticeGenerals;
     /**
      * #2170: General's notice of a change confirmed from the web — the first General a chat card could have been posted
@@ -1156,17 +824,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private settingsWebConfirmedNotice;
     /** Exact configured effect owners; this does not depend on prompt location. */
     private settingsChatAuthority;
-    /**
-     * #2942: a Windows create or settings change an AGENT asked for. Nothing is created or written here: it becomes a
-     * pending settings change whose General card a fleet admin must confirm (promptSettingsChange — the same admin rule
-     * as every card). Its apply runs the same creation/patch code the web uses, inside the store's SettingsExecution, with
-     * the confirming admin, the Windows switch and the target machine asked again at that moment.
-     */
-    private proposeAgentWindowsChange;
-    /** #2942: create_instance with runtime "windows" from an agent: validated like the web, then held for General. */
-    requestWindowsCreate(requester: string, rawArgs: Record<string, unknown>): Promise<SettingsPendingView>;
-    /** #2942: update_instance_config on a Windows agent: only the fields the web editor allows, held for General. */
-    requestWindowsConfig(requester: string, name: string, patch: Record<string, unknown>): Promise<SettingsPendingView>;
     private promptSettingsChange;
     private kiroMigrateDeps;
     /**
@@ -1202,8 +859,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     sseHeartbeatMs: number;
     /** The dashboard's login codes. Memory only: a code that outlives the process is a code nobody can prove was not copied. */
     private webLoginCodes;
-    /** Refs #3061 (P2a): device-code sign-in requests (in memory; web-device-login.ts). Read by auth-api as `webDeviceLogins`. */
-    private webDeviceLogins;
     /**
      * #1920 step 4: guests' codes, apart from the admins' — one per account, so no guest's `/web` withdraws another's or
      * an admin's code (#2093 review), at most 32 at once. Local sign-in only for now (audience "local").
@@ -1343,11 +998,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private reconcileQueueWorkers;
     private createQueueWorker;
     private dispatchDurableDelivery;
-    /** The ordinary durable lane, with provider completion proof instead of terminal/IPC submission proof. */
-    private dispatchNativeDurableDelivery;
-    /** A runtime's persisted completion can outlive this manager. Resolve its original delivery fence, never send
-     * the prompt again, and reconstruct a missing peer report using the same durable operation ID. */
-    private reconcileRemoteDelivery;
     private waitForDurableLaneRelease;
     private spawnConcurrency;
     /** #1685: "elevated" or "critical" while host memory pressure slows or holds new agents; otherwise null (an
@@ -1468,7 +1118,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private tightenInstanceDirectories;
     /** AgEnD package version (for the Settings "current version" / What's New). */
     get currentVersion(): string;
-    get currentBuild(): import("./build-provenance.js").InstalledBuild;
     /**
      * Resolve a slash-command target in a channel. Classic channels are looked up
      * per-bot (same-channel multi-bot); a fleet-topic instance is found via the
@@ -1646,12 +1295,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * retry brings it up, however long the backoff, and fails only once the retries give up.
      */
     private sendWhenConnected;
-    /**
-     * The Hub representative's hand-off (#3145): only once a connected client exists, after every reconnect/order wait,
-     * the begin lease + input intent (beforeInput), then the fence and the LIVE client are checked again and the payload
-     * goes in one attempt. After the intent is spent nothing here retries: false is the caller's uncertain outcome.
-     */
-    private handOffAfterBeforeInput;
     /** Poll for the instance's IPC to come back, then send. Throws if it does not. */
     private sendAfterIpcReturns;
     /**
@@ -2086,8 +1729,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     /** #1742: `/start web` from a fleet admin: the /web menu right here in the DM, for the General this bot serves. */
     private startWebInDm;
     private getPublicWebLink;
-    /** The public link's wiring to this fleet (a test builds one with the tunnel itself stubbed: `ensure`, `provider`). */
-    private publicWebLinkDeps;
     private publicLinkAutoOpen;
     /**
      * #named-link-ttl: the admin who last opened a named-tunnel link from /web, with the live binding — only while they
@@ -2431,6 +2072,9 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * Discord bot and while some account has a running agent, read every 30 min — the same cached read (its 5-minute TTL
      * still bounds the vendor calls), recorded like any other.
      */
+    private quotaNotices;
+    private stopQuotaObserver;
+    private quotaNoticePolicy;
     private startQuotaBackgroundReads;
     /** #3066 §1: the latest estimates, by `provider\0metric` (what usage-api's lookup reads, synchronously). */
     private capacityEstimates;
@@ -2508,8 +2152,8 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      *                 that should be running is running
      *  - `degraded` — reachable, but something the operator should look at (an
      *                 adapter retrying, an instance crashed or stopped)
-     *  - `down`     — no configured adapter is connected, or a dedicated Hub's
-     *                 server mount is unavailable
+     *  - `down`     — the fleet cannot do its job: no adapter is connected, so no
+     *                 message can arrive or be answered
      *
      * Deliberately does NOT gate the systemd watchdog — see the comment at the
      * WATCHDOG timer for why.
@@ -2540,11 +2184,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
             topProcessesAt?: string;
         };
         problems: string[];
-        warnings: string[];
-        /** Local server mount availability; absent when the Hub server switch is off. */
-        hub?: {
-            server: import("./hub/runtime.js").HubServerHealth;
-        };
     };
     /** Start the primary adapter (backward-compatible, sets this.adapter) */
     private startSingleAdapter;
@@ -2897,13 +2536,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * channel, are seen to share it; and every connection's own General is protected, with or without a General agent.
      */
     private topicOwnership;
-    /**
-     * The bot an agent's configured topic is on (#3105 review, Prism P1): a fleet.yaml agent's `channel_id` (else the
-     * primary connection) whatever its runtime — a per-turn Windows agent has no execution adapter
-     * (getInstanceAdapterId), yet its topic is still on that bot, and must be counted as an owner and deleted through it.
-     * Topic planning and ownership only; execution routing is getInstanceAdapterId's and unchanged.
-     */
-    private topicAdapterIdOf;
     /** What deleting `name`'s topic would act on: its own bot only — a bot that is not there is never substituted. */
     private planInstanceTopicDelete;
     getForumTopicDeleter(adapterId?: string): ((topicId: number | string) => Promise<void>) | null;
@@ -2990,8 +2622,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private writingFleetDocument;
     getSettingsConfigPath(): string;
     removeInstance(name: string, authorization: ExplicitInstanceRemoval, execution?: SettingsExecution): Promise<void>;
-    /** Shared instance metadata goes with a native identity; its Windows workspace and provider sessions stay intact. */
-    private nativeInstanceRemoved;
     private removeInstanceOwned;
     startStatuslineWatcher(name: string): void;
     stopStatuslineWatcher(name: string): void;
@@ -3439,8 +3069,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     onAttentionChanged(name: string): void;
     /** The list for the web: every world's items, and those of instances with no world (#1386 §5.0). */
     needsYouItems(): WebNeedsItem[];
-    /** Enabled member composition supplies only a local attention reader, never an approval/execution callback. */
-    attachHubExecutionAttention(read: (() => import("./needs-you.js").HubExecutionAttentionInput[]) | null): void;
     /**
      * #1389: the org chart's structure for the web — the instances the dashboard lists (getUiStatus's names), General,
      * fleet.yaml's teams, each instance's description and thread link. Read on demand; the live state rides the stream.
@@ -3657,89 +3285,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * again. A fleet with a chat connection, another session, or another peer: nothing (§3 as before).
      */
     authorizeHostSession(session: SessionRecord, peer: WebPeer): void;
-    private webRemoteAccessState;
-    /** The authenticator, the outside switch and the wrong-code limiter (web-remote-access.json), read on first use. */
-    webRemoteAccess(): WebRemoteAccess | null;
-    /** "Allow connections from outside" is on (an app set up) and this is a web-only fleet. */
-    private outsideOn;
-    /** The link connections from outside opened, while it is open and still theirs: its exposure. Else null. */
-    private outsideLink;
-    /**
-     * The request's live session, asked again each time `current()` is called (its own cookie authenticated anew, the same
-     * handle): this web-only fleet's owner — this computer's admin, on this computer (`hostOnly`), or also signed in from
-     * outside — and web-verified now. Null when it is not (a guest, a LAN session, a chat fleet's admin, nobody).
-     */
-    private liveOwner;
-    /** Every session signed in from outside ends (and the authorizations kept for them). */
-    private endOutsideSessions;
-    /**
-     * #1939 §10 / #3008: a stored receipt's authority as it reads now — the web authority state, and for this computer's
-     * admin from outside the switch and the last revocation of remote authority (Prism P2 2).
-     */
-    receiptAuthorityNow(stored: HumanAuthority, state?: AuthorityState): HumanAuthority;
-    /** #3008 (the sign-in page): this exposure is the outside link, open now. */
-    isOutsideLink(exposureId: string): boolean;
-    /** What Settings shows: set up or not, the switch, a wait in force, the link — its address only to this computer. */
-    webOutsideStatus(req: IncomingMessage): {
-        webOnly: boolean;
-        here: boolean;
-        enrolled: boolean;
-        enrolledAt: number | null;
-        outside: boolean;
-        pausedForMs: number;
-        link: {
-            state: string;
-            url?: string;
-            expiresAt?: number;
-            noExpiry?: true;
-            quick: boolean;
-        } | null;
-    };
-    /** Set up (or set up again): a new secret, shown once to this computer's admin. Null: not them. */
-    webOutsideBeginEnrollment(req: IncomingMessage): {
-        secret: string;
-        uri: string;
-        expiresInMs: number;
-    } | null;
-    /** The new app's first code: on "ok" it replaces the old one, whose sessions from outside end. */
-    webOutsideConfirmEnrollment(req: IncomingMessage, code: string): "ok" | "wrong" | "expired" | "unsaved" | "not_here";
-    /** Forget the app: the switch goes off, the link closes, every session from outside ends. */
-    webOutsideRemove(req: IncomingMessage): "ok" | "unsaved" | "not_here";
-    /** The switch. On: needs an app set up; the link opens. Off: it closes and every session from outside ends. */
-    webOutsideSwitch(req: IncomingMessage, on: boolean): "ok" | "not_enrolled" | "not_here" | "not_allowed" | "unsaved";
-    private outsideAttempt;
-    private outsideOpening;
-    /**
-     * Open the outside link: an attempt after each delay in turn until one opens (#3008 B: twice more at most — the quick
-     * link's address service limits how often it may be asked). Every attempt asks again: the switch still on, the fleet
-     * running. A final failure: one Notice; the switch stays on, so the next start tries again.
-     */
-    private openOutsideLink;
-    private closeOutsideLink;
-    /** PublicWebLink.onClose for the outside link: what closed it decides what happens next (#3008 B). */
-    private outsideLinkClosed;
-    /**
-     * #3008 (auth-api POST /auth/totp): a sign-in through the outside link with the authenticator's code. "ok": the caller
-     * makes the session (SessionRecord.remote) and then calls authorizeOutsideSession. Each wrong code counts; a wait that
-     * starts is a Notice; a code that matches a step just outside the window logs how far this clock seems to be off.
-     */
-    outsideSignIn(exposureId: string | undefined, code: string): {
-        kind: "ok";
-    } | {
-        kind: "wrong";
-    } | {
-        kind: "paused";
-        retryAfterMs: number;
-    } | {
-        kind: "closed";
-    } | {
-        kind: "unavailable";
-    };
-    /**
-     * #3008: a session just made by outsideSignIn's "ok" is this computer's admin for its authorization's life. False: it
-     * could not be admitted (its handle not saved, #3015 review r3) — the caller ends it.
-     */
-    authorizeOutsideSession(session: SessionRecord, peer: WebPeer, label: string): boolean;
     private authorityStateStore;
     /**
      * #1939 §10: the switch, "Only this computer can authorize" and the revocation epoch in force for the configuration as
@@ -3773,8 +3318,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
         }>;
         /** #2453 (§0.2): the admin's named-tunnel hostname, while one is configured (the named-link row shows only then). */
         namedHost: string | null;
-        /** A fleet with no chat connection: the page words the card for the authenticator, not for Discord / Telegram. */
-        webOnly: boolean;
     };
     private authorizationRequests;
     /**
@@ -4115,34 +3658,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * #2233: Settings → Agents' sign-in list — every backend's default login as the availability snapshot has it, then
      * each credential profile an agent uses (its own login state, read offline).
      */
-    /** Which account each sign-in is, as the host's own `claude auth status` said (masked; see checkAuthIdentity). Keys are `backend\0profile` in a Map: a name is data, never a property. */
-    private readonly signInIdentities;
-    /** Reads in flight, by the same key: a second request for a sign-in that is already being read joins it instead of starting another process. */
-    private readonly signInIdentityReads;
-    /** Raised each time the accounts are forgotten: a read that began before is never allowed to write what it found. */
-    private signInIdentityGeneration;
-    private signInIdentitySlots;
-    private readonly signInIdentityWaiters;
-    private signInIdentity;
-    /** A sign-in finished (or changed): forget what was read and let no read that was already running put its answer back. */
-    private forgetSignInIdentities;
-    /** At most three `claude auth status` at once across the whole host, however many requests ask. */
-    private withSignInIdentitySlot;
-    /** One `claude auth status` for a sign-in (the default one, or a credential profile's folder). */
-    private readSignInIdentity;
-    /**
-     * Start reading, in the background, the account of each Claude Code sign-in that is signed in (the default and every profile an agent uses) and
-     * not read in the last five minutes. It never waits and never blocks a request: the list shows what is already known, and the pages are told to
-     * read it again when something new was learned. A sign-in already being read is not read twice, and a read that began before the accounts were
-     * forgotten (a sign-in finished meanwhile) is dropped. No login, no network request of ours, nothing logged.
-     */
-    refreshSignInIdentities(): void;
-    /**
-     * #3212 PR 1: the Accounts view (accounts-view.ts) — every CLI's default sign-in and named profiles (used or only on
-     * disk), who uses each and its weekly usage. Host rows only; a paired computer's rows come with #3190 Part 3c. Its
-     * usage is the usage panel's cached read (never forced), given at most `usageWaitMs` before the view is sent without it.
-     */
-    accountsView(usageWaitMs?: number): Promise<AccountsView>;
     backendSignInTargets(): SignInTarget[];
     /** #2233: the session with this handle is live, admin, local and of the current dashboard token. */
     private isLocalAdminSession;
@@ -4668,8 +4183,6 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * profile's, when it is named and has one), claude's account catalog included. Read only: never a probe.
      */
     modelCatalogFor(backend: string, instance: string | null): import("./backend/types.js").ModelOption[];
-    /** Host-default fallback only: Grok has no modeled profile home. Never construct a backend or start a probe. */
-    cliModelCatalogFor(backend: string, instance: string | null): Promise<import("./backend/types.js").ModelOption[]>;
     /**
      * #2072 (#2078 review): the snapshot as THIS instance would see it. Its sign-in on a backend is its own credential
      * profile's when it has one there — the host's default login says nothing about it. A profile's login is a file check
@@ -5140,5 +4653,3 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     getUiStatus(): unknown;
     private getUiStatusSync;
 }
-/** alpha.2 (M-2300): the agent an applied Windows request created (its name, for the page's "Open chat"), or null. */
-export declare function agentNameOf(view: SettingsPendingView): string | null;