@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/web-api.js

@@ -1,6 +1,4 @@
-import { hubModeOf, hubNameOf } from "./hub-mode.js";
 import { CANVAS_WORKER_EXPERIMENTAL_MESSAGE } from "./web-experimental.js";
-import { MachineSlotLimitError } from "./windows-agents.js";
 import { daemonTopicMode } from "./web-only-fleet.js";
 import { webHumanOrigin } from "./human-delivery-receipts.js";
 import { classifyWebPeer, confirmAfterBody, noAuthority } from "./authority/web-authority.js";
@@ -34,7 +32,6 @@ import { shellRoute } from "./web-shell-routes.js";
 import { createReadStream, createWriteStream, readFileSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
-import { createHash, randomUUID } from "node:crypto";
 import { CreateInstanceArgs, CreateScheduleArgs, UpdateScheduleArgs, validateArgs } from "./outbound-schemas.js";
 import { scheduleView } from "./web-schedules.js";
 import { DEFAULT_SCHEDULER_CONFIG } from "./scheduler/index.js";
@@ -47,9 +44,6 @@ import { WEB_CHAT_CARDS_OVERFLOW, catchUpWindow, newWebMessageId, parseLastEvent
 import { PAGE_SHARE_LIMITS, htmlFences, htmlTitle } from "./page-share.js";
 import { attachmentDelivery, createPartFile, displayName, fileTooLargeText, INLINE_MIME, isFileId, MEDIA_RANGE_MAX, publicAttachment, UPLOAD_LIMITS, UPLOAD_MAX_MS, UPLOAD_STALL_MS, UploadSniffer, uploadLimits, wellFormed } from "./web-upload.js";
 import { getAgendHome } from "./paths.js";
-import { workspaceChanges, workspaceFile, workspaceImage, workspaceList, workspaceRoot, WorkspaceError } from "./agent-workspace.js";
-import { isGeneralInstance } from "./general-instance.js";
-import { resolveToolSet } from "./tool-permissions.js";
 import { OPERATOR, isOwnerEffectKey } from "./web-prefs.js";
 import { WEB_NAME_FALLBACK, webPersonKey } from "./web-profile.js";
 import { commitTeamCreate, commitTeamUpdate } from "./outbound-handlers.js";
@@ -60,13 +54,6 @@ import { resolveTz } from "./tz-utils.js";
 import { QUERY_MAX_CHARS, RESULT_MAX, SEARCH_SOURCES } from "./search/search-store.js";
 import { xmsgShown } from "./search/search-docs.js";
 import { WebSendDedupe } from "./web-send-dedupe.js";
-import { handleWindowsCliRequest, nativeCliAuthorization } from "./windows-cli-api.js";
-import { createNativeInstance, handleNativeInstanceRequest } from "./native-instance-api.js";
-import { handleAgentRuntimeChange } from "./agent-runtime-api.js";
-import { isWindowsInstance, isNativePaneInstance, isNativeExecInstance } from "./native-instance-registry.js";
-import { handleNativeModelCatalog } from "./native-model-catalog.js";
-import { claudeDocumentedModels } from "./model-catalog-defaults.js";
-import { handleRuntimeRequest } from "./runtime-api.js";
 import { taskBoardOffNames } from "./dashboard-permissions.js";
 import { topicFields } from "./instance-topic-delete.js";
 // ── Strict public-facing schemas ────────────────────────────────────────────
@@ -247,8 +234,8 @@ function visibleNeeds(ctx, gateway, items) {
     const { hidden } = boardHiding(ctx, true);
     return items.filter((i) => {
         const item = i;
-        if (item.type === "config" || item.type === "hub")
-            return false; // member-local diagnostics/proposals never cross a public link
+        if (item.type === "config")
+            return false; // private operator configuration diagnostics never cross a public link
         if (item.type !== "task")
             return true;
         const code = item.card?.code;
@@ -1223,18 +1210,7 @@ function handleBackendLogin(req, res, url, ctx, path, method) {
     }
     const action = /^\/ui\/backend-login\/(check|start|cancel)$/.exec(path)?.[1];
     if (reading && path === "/ui/backend-login" && [...url.searchParams.keys()].length === 0) {
-        // The sign-in view (its access code included) is answered at once and never waits for an account to be read: that happens in the background
-        // and the page is told to read again when something new is known.
-        try {
-            ctx.refreshSignInIdentities?.();
-        }
-        catch { /* the list is served with what is known */ }
-        try {
-            json(res, 200, { login: logins.view(first.handle), targets: ctx.backendSignInTargets?.() ?? [] });
-        }
-        catch {
-            json(res, 503, { error: "sign_in_unavailable" });
-        }
+        json(res, 200, { login: logins.view(first.handle), targets: ctx.backendSignInTargets?.() ?? [] });
         return true;
     }
     if (method !== "POST" || !action) {
@@ -1897,29 +1873,6 @@ export function handleWebRequest(req, res, url, ctx) {
         return false;
     }
     // ── Static files ───────────────────────────────────────
-    // Native local tools retain their administrator boundary on the shared chat/read/action routes.
-    const nativePath = /^\/ui\/(?:chat|instance|cancel|stop|start|restart)\/([^/]+)$/.exec(path);
-    let nativeTarget = url.searchParams.get("instance") ?? "";
-    if (nativePath) {
-        try {
-            nativeTarget = decodeURIComponent(nativePath[1]);
-        }
-        catch {
-            nativeTarget = "";
-        }
-    }
-    if (isWindowsInstance(ctx.fleetConfig?.instances?.[nativeTarget]) && !nativeCliAuthorization(req, url, ctx)) {
-        json(res, 403, { error: "Windows runtime requires an administrator on the local dashboard" });
-        return true;
-    }
-    if (handleAgentRuntimeChange(req, res, url, ctx))
-        return true;
-    if (handleNativeInstanceRequest(req, res, url, ctx))
-        return true;
-    if (handleWindowsCliRequest(req, res, url, ctx))
-        return true;
-    if (handleRuntimeRequest(req, res, url, ctx))
-        return true;
     // #1408: the app shell, for exactly the paths the classifier names (src/web-shell-routes.ts). One page for every
     // route; the client router mounts the panel. A malformed instance name is a 400, an unknown one is the shell (the
     // panel says "not found"), so the response never tells which names exist.
@@ -1928,11 +1881,6 @@ export function handleWebRequest(req, res, url, ctx) {
         json(res, 400, { error: "invalid instance name" });
         return true;
     }
-    // AgEnD Hub P1: the Hub's pages live on a Hub's own listener (slice 1), never on this fleet's: the ordinary not-found.
-    if (shell?.kind === "shell" && shell.route.panel === "hub") {
-        json(res, 404, { error: "not found" });
-        return true;
-    }
     if (shell?.kind === "shell") {
         serveAppShell(req, res, ctx, "full");
         return true;
@@ -1980,45 +1928,7 @@ export function handleWebRequest(req, res, url, ctx) {
             json(res, 400, { error: "backend (and optional instance) required" });
             return true;
         }
-        const runtime = url.searchParams.get("runtime"), refresh = url.searchParams.get("refresh");
-        const machineId = url.searchParams.get("machineId");
-        if (machineId !== null && (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i.test(machineId) || runtime === "wsl")) {
-            json(res, 400, { error: "Invalid model runtime machine" });
-            return true;
-        }
-        if ((runtime !== null && runtime !== "wsl" && runtime !== "windows") || (refresh !== null && refresh !== "1")) {
-            json(res, 400, { error: "Invalid model catalog options" });
-            return true;
-        }
-        if (handleNativeModelCatalog(req, res, url, ctx))
-            return true;
-        const models = ctx.modelCatalogFor?.(backend, instance) ?? [];
-        const answerCatalog = () => {
-            if (backend === "claude-code" && !models.length) {
-                const version = ctx.backendAvailabilityRows?.().find(row => row.backend === backend)?.version;
-                json(res, 200, { backend, models: claudeDocumentedModels(version), source: "official-catalog" });
-            }
-            else
-                json(res, 200, { backend, models });
-        };
-        // The existing catalog belongs to this instance/account and always wins.
-        if (models.length || !ctx.cliModelCatalogFor) {
-            answerCatalog();
-            return true;
-        }
-        const canAnswer = () => !res.headersSent && !res.destroyed && !res.writableEnded && stillAuthorized(req, res, url, ctx);
-        void (async () => {
-            const cliModels = await ctx.cliModelCatalogFor?.(backend, instance) ?? [];
-            if (!canAnswer())
-                return;
-            if (cliModels.length)
-                json(res, 200, { backend, models: cliModels, source: "cli-cache" });
-            else
-                answerCatalog();
-        })().catch(() => {
-            if (canAnswer())
-                json(res, 503, { error: "CLI model cache unavailable" });
-        });
+        json(res, 200, { backend, models: ctx.modelCatalogFor?.(backend, instance) ?? [] });
         return true;
     }
     if (method === "GET" && path === "/ui/backends") {
@@ -2224,112 +2134,6 @@ export function handleWebRequest(req, res, url, ctx) {
         json(res, 200, { messages, boot: ctx.webChatHistory?.boot ?? null, lastId: ctx.webChatHistory?.lastId ?? 0, ...(allHidden ? { allHidden: true } : {}) });
         return true;
     }
-    // ── #3212 PR 1: Settings → Agents → Accounts (read-only) ─────────────────────────────────
-    // Each CLI's default sign-in and credential profiles, who uses them and their weekly usage. Names, states, the masked
-    // identity and the host login command (which, as in the sign-in list, names the profile's folder) — no credential or
-    // full e-mail: only for the fleet's local admin session — never the public link, a guest, a token or the gateway (the
-    // same rule as the sign-in list it extends).
-    if (method === "GET" && path === "/ui/accounts") {
-        res.setHeader("Cache-Control", "private, no-store");
-        if (gatewayRequestContext(req)) {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        const localAdmin = () => {
-            const v = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
-            return v.kind === "allow" && v.via === "session" && v.session.tier === "admin" && v.session.surface === "local" ? v.session : null;
-        };
-        const who = localAdmin();
-        if (!who) {
-            json(res, 403, { error: "accounts_need_a_local_admin" });
-            return true;
-        }
-        if (typeof ctx.accountsView !== "function") {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        void ctx.accountsView().then(view => {
-            if (localAdmin()?.handle !== who.handle) {
-                json(res, 403, { error: "accounts_need_a_local_admin" });
-                return;
-            }
-            json(res, 200, view);
-        }, err => { ctx.logger.error({ err: err.message }, "Accounts view failed"); json(res, 500, { error: "could not read the accounts" }); });
-        return true;
-    }
-    // ── #3153 P1: an agent's Files / Changes (read-only) ─────────────────────────────────
-    // The fleet's local admin session only: never the public link, a guest, a token or a connection from outside. One
-    // agent's own working directory (agent-workspace.ts confines and filters every path); not General or a coordinator
-    // (they work in the fleet's own directory), not an agent on another machine.
-    if (method === "GET" && path === "/ui/workspace") {
-        res.setHeader("Cache-Control", "private, no-store");
-        res.setHeader("X-Content-Type-Options", "nosniff");
-        if (gatewayRequestContext(req)) {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        const localAdmin = () => {
-            const v = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
-            return v.kind === "allow" && v.via === "session" && v.session.tier === "admin" && v.session.surface === "local" ? v.session : null;
-        };
-        const who = localAdmin();
-        if (!who) {
-            json(res, 403, { error: "workspace_needs_a_local_admin" });
-            return true;
-        }
-        const p = url.searchParams, instance = p.get("instance") ?? "", op = p.get("op") ?? "";
-        const cfg = ctx.fleetConfig?.instances && Object.hasOwn(ctx.fleetConfig.instances, instance) ? ctx.fleetConfig.instances[instance] : undefined;
-        if (!cfg) {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        const offered = !isGeneralInstance(ctx.fleetConfig, instance) && resolveToolSet(cfg, instance) !== "coordinator"
-            && cfg.runtime !== "windows" && !cfg.machine_id;
-        if (!offered) {
-            json(res, 404, { error: "workspace_not_offered" });
-            return true;
-        }
-        if (!["changes", "list", "file", "image"].includes(op)) {
-            json(res, 400, { error: "op: changes | list | file | image" });
-            return true;
-        }
-        const workDir = String(cfg.working_directory ?? "").replace(/^~(?=$|\/)/, process.env.HOME ?? "~");
-        void (async () => {
-            try {
-                const ws = await workspaceRoot(workDir, getAgendHome());
-                // The session must still be the same one when the answer goes out (it may have ended while git ran).
-                const answer = async () => {
-                    if (op === "changes")
-                        return { kind: "json", body: await workspaceChanges(ws) };
-                    if (op === "list")
-                        return { kind: "json", body: await workspaceList(ws, p.get("path") ?? "") };
-                    if (op === "file")
-                        return { kind: "json", body: await workspaceFile(ws, p.get("path")) };
-                    return { kind: "image", body: await workspaceImage(ws, p.get("path")) };
-                };
-                const out = await answer();
-                if (localAdmin()?.handle !== who.handle) {
-                    json(res, 403, { error: "workspace_needs_a_local_admin" });
-                    return;
-                }
-                if (out.kind === "image") {
-                    res.writeHead(200, { "Content-Type": out.body.mime, "Content-Length": String(out.body.bytes.length), "Content-Security-Policy": "default-src 'none'; sandbox" });
-                    res.end(out.body.bytes);
-                    return;
-                }
-                json(res, 200, out.body);
-            }
-            catch (err) {
-                if (err instanceof WorkspaceError) {
-                    json(res, err.code === "not_found" || err.code === "not_a_directory" ? 404 : 403, { error: err.code });
-                    return;
-                }
-                ctx.logger.error({ err: err.message, instance }, "Workspace read failed");
-                json(res, 500, { error: "could not read the folder" });
-            }
-        })();
-        return true;
-    }
     // ── #1218: the Log tab ─────────────────────────────────
     // An instance's steps, read on demand from its own transcript (log-service.ts). Read-only, and offered on the public
     // link on purpose (the user's decision): the same masking applies to every viewer. Passive (web-auth.ts).
@@ -3123,203 +2927,6 @@ export function handleWebRequest(req, res, url, ctx) {
         });
         return true;
     }
-    // ── #3008: connections from outside (a web-only fleet) ──
-    // GET /ui/outside: the state (any admin; over the outside link too, read-only). Everything that changes it is this
-    // computer's admin's, on this computer (the fleet asks the live session each time; the public link refuses these
-    // routes outright): POST /ui/outside/enroll (a new secret, shown once), POST /ui/outside/enroll/confirm {code},
-    // POST /ui/outside/remove, POST /ui/outside/switch {on}. Never a guest (not in GUEST_ROUTES).
-    if (method === "GET" && path === "/ui/outside") {
-        res.setHeader("Cache-Control", "no-store");
-        json(res, 200, ctx.webOutsideStatus?.(req) ?? { webOnly: false, here: false, enrolled: false, enrolledAt: null, outside: false, pausedForMs: 0, link: null });
-        return true;
-    }
-    if (method === "POST" && (path === "/ui/outside/enroll" || path === "/ui/outside/enroll/confirm" || path === "/ui/outside/remove" || path === "/ui/outside/switch")) {
-        if (gatewayRequestContext(req)) {
-            json(res, 403, { error: "outside_not_here" });
-            return true;
-        }
-        (async () => {
-            let body;
-            try {
-                body = await parseBody(req);
-            }
-            catch {
-                json(res, 400, { error: "Invalid JSON" });
-                return;
-            }
-            if (!permitWebContinuation(req, res, ctx))
-                return;
-            res.setHeader("Cache-Control", "no-store");
-            if (path === "/ui/outside/enroll") {
-                const r = ctx.webOutsideBeginEnrollment?.(req) ?? null;
-                if (!r) {
-                    json(res, 403, { error: "outside_not_here" });
-                    return;
-                }
-                json(res, 200, r);
-                return;
-            }
-            if (path === "/ui/outside/enroll/confirm") {
-                const code = body && typeof body === "object" ? body.code : undefined;
-                if (typeof code !== "string" || code.length > 32) {
-                    json(res, 400, { error: "code required" });
-                    return;
-                }
-                const r = ctx.webOutsideConfirmEnrollment?.(req, code) ?? "not_here";
-                json(res, r === "ok" ? 200 : r === "not_here" ? 403 : r === "unsaved" ? 503 : 400, r === "ok" ? { ok: true } : { error: r === "not_here" ? "outside_not_here" : r });
-                return;
-            }
-            if (path === "/ui/outside/remove") {
-                const r = ctx.webOutsideRemove?.(req) ?? "not_here";
-                json(res, r === "ok" ? 200 : r === "unsaved" ? 503 : 403, r === "ok" ? { ok: true } : { error: r === "unsaved" ? "unsaved" : "outside_not_here" });
-                return;
-            }
-            const on = body && typeof body === "object" ? body.on : undefined;
-            if (typeof on !== "boolean") {
-                json(res, 400, { error: "on must be true or false" });
-                return;
-            }
-            const r = ctx.webOutsideSwitch?.(req, on) ?? "not_here";
-            json(res, r === "ok" ? 200 : r === "not_here" ? 403 : r === "unsaved" ? 503 : 409, r === "ok" ? { ok: true } : { error: r === "not_here" ? "outside_not_here" : r });
-        })().catch(err => {
-            ctx.logger.error({ err: err.message }, "Outside connections change failed");
-            try {
-                json(res, 500, { error: "outside_failed" });
-            }
-            catch { /* already answered */ }
-        });
-        return true;
-    }
-    // ── Refs #3061 (P2a): signing a new device in with its 8-character code (a web-only fleet) ──
-    // GET /ui/devices: whether this is such a fleet and whether THIS session may approve (it is the verified owner — this
-    // computer's admin here, or signed in from outside with the authenticator's code). POST /ui/devices/lookup {code}: the
-    // request that code names, for the confirm screen; POST /ui/devices/approve {code} and /ui/devices/deny {code}. Every
-    // one asks the live session again in the fleet (webDeviceLoginAct) and answers 403 `owner_required` to anyone else —
-    // a guest, a LAN or device-approved session, the CLI's header token. Over the public link only for the owner who
-    // signed in from outside. A decision hands the new device nothing: its session is made by its own next poll.
-    if (method === "GET" && path === "/ui/devices") {
-        res.setHeader("Cache-Control", "no-store");
-        json(res, 200, ctx.webDevicesStatus?.(req) ?? { webOnly: false, owner: false, devices: [] });
-        return true;
-    }
-    // Refs #3061 (P2b): POST /ui/devices/signout {handle} — the verified owner ends another signed-in device. The same
-    // authority as approving one, asked of the live session in the fleet after the body is in (webDeviceSignOut answers
-    // 403 `owner_required` to anyone else before it looks the handle up). Over the public link only for the owner signed in
-    // from outside, like approving.
-    if (method === "POST" && path === "/ui/devices/signout") {
-        const act = ctx.webDeviceSignOut?.bind(ctx);
-        if (!act) {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        (async () => {
-            let body;
-            try {
-                body = await parseBody(req);
-            }
-            catch {
-                json(res, 400, { error: "Invalid JSON" });
-                return;
-            }
-            if (!permitWebContinuation(req, res, ctx))
-                return;
-            const handle = body && typeof body === "object" ? body.handle : undefined;
-            if (typeof handle !== "string" || !/^[0-9a-f]{16}$/.test(handle)) {
-                json(res, 400, { error: "handle required" });
-                return;
-            }
-            res.setHeader("Cache-Control", "no-store");
-            const r = act(req, handle);
-            json(res, r.status, r.body);
-        })().catch(err => {
-            ctx.logger.error({ err: err.message }, "Device sign-out failed");
-            try {
-                json(res, 500, { error: "devices_failed" });
-            }
-            catch { /* already answered */ }
-        });
-        return true;
-    }
-    if (method === "POST" && (path === "/ui/devices/lookup" || path === "/ui/devices/approve" || path === "/ui/devices/deny")) {
-        const act = ctx.webDeviceLoginAct?.bind(ctx);
-        if (!act) {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        const op = path === "/ui/devices/lookup" ? "lookup" : path === "/ui/devices/approve" ? "approve" : "deny";
-        (async () => {
-            let body;
-            try {
-                body = await parseBody(req);
-            }
-            catch {
-                json(res, 400, { error: "Invalid JSON" });
-                return;
-            }
-            if (!permitWebContinuation(req, res, ctx))
-                return;
-            const code = body && typeof body === "object" ? body.code : undefined;
-            if (typeof code !== "string" || code.length > 32) {
-                json(res, 400, { error: "code required" });
-                return;
-            }
-            res.setHeader("Cache-Control", "no-store");
-            const r = act(req, op, code);
-            if (typeof r.body.retryAfterMs === "number")
-                res.setHeader("Retry-After", String(Math.ceil(r.body.retryAfterMs / 1000)));
-            json(res, r.status, r.body);
-        })().catch(err => {
-            ctx.logger.error({ err: err.message }, "New device approval failed");
-            try {
-                json(res, 500, { error: "devices_failed" });
-            }
-            catch { /* already answered */ }
-        });
-        return true;
-    }
-    // ── alpha.2 (M-2300): an agent's Windows request, decided by a web-only fleet's owner in Needs you ──
-    // The list is the owner's only: anyone else (a guest, a LAN or public-link session, a chat fleet's admin) reads an
-    // empty one, so nothing actionable ever reaches them. The stream's `agent_proposals` event carries nothing.
-    if (method === "GET" && path === "/ui/agent-proposals") {
-        const list = ctx.webAgentProposals?.(req) ?? null;
-        json(res, 200, { owner: list !== null, proposals: list ?? [] });
-        return true;
-    }
-    const proposalMatch = method === "POST" ? /^\/ui\/agent-proposals\/([0-9a-f]{32})$/.exec(path) : null;
-    if (proposalMatch) {
-        if (!ctx.webDecideAgentProposal) {
-            json(res, 404, { error: "not_found" });
-            return true;
-        }
-        const decide = ctx.webDecideAgentProposal.bind(ctx), id = proposalMatch[1];
-        (async () => {
-            let body;
-            try {
-                body = await parseBody(req);
-            }
-            catch {
-                json(res, 400, { error: "Invalid JSON" });
-                return;
-            }
-            if (!permitWebContinuation(req, res, ctx))
-                return;
-            const decision = body && typeof body === "object" ? body.decision : undefined;
-            if (decision !== "confirm" && decision !== "reject") {
-                json(res, 400, { error: "decision must be confirm or reject" });
-                return;
-            }
-            const r = await decide(req, id, decision);
-            if (!res.headersSent && !res.destroyed)
-                json(res, r.status, r.body);
-        })().catch(err => {
-            ctx.logger.error({ err: err.message }, "Agent request decision failed");
-            try {
-                json(res, 500, { error: "decide_failed" });
-            }
-            catch { /* already answered */ }
-        });
-        return true;
-    }
     if (method === "POST" && path === "/ui/needs/ack") {
         if (!ctx.acknowledgeNeedsItem) {
             json(res, 404, { error: "Nothing to acknowledge here" });
@@ -3445,20 +3052,6 @@ export function handleWebRequest(req, res, url, ctx) {
                 json(res, 400, { error: "instance and command required" });
                 return;
             }
-            if (isNativeExecInstance(ctx.fleetConfig?.instances[instance])) {
-                json(res, 400, { error: "This runtime does not support CLI control commands; use Agent settings or Cancel" });
-                return;
-            }
-            if (isNativePaneInstance(ctx.fleetConfig?.instances[instance])) {
-                if (!nativeCliAuthorization(req, url, ctx)) {
-                    json(res, 403, { error: "Windows runtime requires an administrator on the local dashboard" });
-                    return;
-                }
-                if (command !== "model") {
-                    json(res, 400, { error: "This persistent Windows runtime supports the model command; use its shared controls for other actions" });
-                    return;
-                }
-            }
             if (body.args !== undefined && str(body.args, MAX_COMMAND_ARGS) === undefined) {
                 json(res, 400, { error: "args too long" });
                 return;
@@ -3727,10 +3320,6 @@ export function handleWebRequest(req, res, url, ctx) {
                 const body = await parseBody(req);
                 if (!permitWebContinuation(req, res, ctx))
                     return;
-                if (body?.runtime === "windows") {
-                    await createNativeInstance(req, res, url, ctx, body);
-                    return;
-                }
                 const v = validateArgs(CreateInstanceArgs, body, "create_instance");
                 if (!v.ok) {
                     json(res, 400, { error: v.error });
@@ -4495,9 +4084,6 @@ function uploadRecipient(ctx, name) {
 /** Closed, path-free explanations; arbitrary launch errors stay in the host log. */
 function webDeliveryFailure(err) {
     const message = err instanceof Error ? err.message : "";
-    // M-2297: the per-PC agent limit — say so, with the agents holding its slots (names only: no path, no id).
-    if (err instanceof MachineSlotLimitError)
-        return { reason: "machine_limit", error: message, limit: err.limit, holders: err.holders.map(h => ({ name: h.name, unknown: h.unknown })) };
     if (/No warm slot is free/.test(message))
         return { reason: "wake_capacity", error: "No slot is free to wake this instance. Retry when another instance is idle." };
     if (/login|log in|sign in|\bauth(?:entication|orization)?\b|credential|api.?key/i.test(message))
@@ -4545,15 +4131,6 @@ function handleSendMessage(req, res, ctx) {
                 return;
             }
             const { instance, message: typed, attachments = [], replyTo, clientId } = parsed.data;
-            const native = isWindowsInstance(ctx.fleetConfig?.instances[instance]);
-            if (native && !nativeCliAuthorization(req, new URL(req.url ?? "/", "http://localhost"), ctx)) {
-                json(res, 403, { error: "Windows runtime requires an administrator on the local dashboard" });
-                return;
-            }
-            if (native && attachments.length) {
-                json(res, 400, { error: "Attachments are not supported by this runtime yet" });
-                return;
-            }
             // #1920 step 2b: a guest writes only to an in-scope instance, while guests may chat, and never a command.
             const guest = guestRequestOf(req);
             const refused = guestChatRefusal(guest, instance);
@@ -4607,16 +4184,6 @@ function handleSendMessage(req, res, ctx) {
                     break;
                 }
             }
-            const locationHold = ctx.generalLocationDeliveryHold?.(instance);
-            if (locationHold) {
-                const messageId = newWebMessageId(), ts = new Date().toISOString();
-                // Settle this client ID as answered. A Retry after reconnect must never queue its old input.
-                acceptedId = messageId;
-                ctx.emitSseEvent("message", { instance, sender: person.name, role: "user", text: typed, ts, messageId, ...(person.bound ? { from: person.voterKey } : {}), ...(clientId ? { clientId } : {}) });
-                ctx.emitSseEvent("message", { instance, role: "status", sender: "AgEnD", text: locationHold, ts, messageId: newWebMessageId() });
-                json(res, 200, { sent: true, messageId, serviceResponse: true });
-                return;
-            }
             let files = [];
             if (attachments.length > 0) {
                 const taken = ctx.webFiles?.takeForMessage(instance, attachments);
@@ -4639,39 +4206,15 @@ function handleSendMessage(req, res, ctx) {
             // Recheck the same admission all the way through a wake, before the facade's actual IPC handoff.
             const requestUrl = new URL(req.url ?? "/", "http://localhost");
             const admission = admissionOf(req, requestUrl, ctx);
-            // The sender's authority, without the request's own lifetime: the same admission, the same guest still allowed, the
-            // instance still registered (a Windows one still Windows). A Windows turn is journaled before /ui/send answers and its
-            // process starts after, so the bridge rechecks this one (a revoke in between still stops it); never res, which a
-            // finished response marks destroyed (S-30: every web-chat turn to a Windows agent was refused).
-            const authorityCurrent = () => admission !== null && admissionOf(req, requestUrl, ctx) === admission
+            const stillCurrent = () => !res.destroyed && admission !== null && admissionOf(req, requestUrl, ctx) === admission
                 && (!guest || (guest.current() && !guestChatRefusal(guest, instance)))
-                && (native ? isWindowsInstance(ctx.fleetConfig?.instances[instance]) && nativeCliAuthorization(req, requestUrl, ctx)
-                    : registered ? registeredChatInstance(ctx, instance) : ctx.instanceIpcClients.has(instance));
-            const stillCurrent = () => !res.destroyed && authorityCurrent();
+                && (registered ? registeredChatInstance(ctx, instance) : ctx.instanceIpcClients.has(instance));
             const message = typed;
             // #1939 S1: what the receipt records about who authorized it (observe only: agents still read web as recognition).
             const { authority } = confirmAfterBody(arrival, webAuthorityOf(req, new URL(req.url ?? "/", "http://localhost"), ctx, instance));
             const ts = new Date().toISOString();
             // The id the agent is given, and the one its delivery reports come back under: the page's ticks.
-            const nativeRequestId = isNativeExecInstance(ctx.fleetConfig?.instances[instance]) ? (() => {
-                if (!clientId)
-                    return randomUUID();
-                const hash = createHash("sha256").update(`agend-native-web\0${WebSendDedupe.key(person.key, instance, clientId)}`).digest("hex");
-                return `${hash.slice(0, 8)}-${hash.slice(8, 12)}-4${hash.slice(13, 16)}-8${hash.slice(17, 20)}-${hash.slice(20, 32)}`;
-            })() : undefined;
-            const messageId = nativeRequestId ? `native:${nativeRequestId}:user` : newWebMessageId();
-            if (nativeRequestId && ctx.nativeInstanceRuntime) {
-                const previous = ctx.nativeInstanceRuntime().get(instance)?.turns.find(turn => turn.id === nativeRequestId);
-                if (previous) {
-                    if (previous.prompt !== delivery.text) {
-                        json(res, 409, { error: "clientId belongs to a different message" });
-                        return;
-                    }
-                    acceptedId = messageId;
-                    json(res, 200, { sent: true, messageId, repeated: true });
-                    return;
-                }
-            }
+            const messageId = newWebMessageId();
             // Use real Telegram context so daemon's lastChatId/lastThreadId are set,
             // enabling reply tool even when first message comes from Web UI.
             // Pure Web UI mode (no channel config) leaves these empty; the agent's reply then comes back to the
@@ -4717,12 +4260,11 @@ function handleSendMessage(req, res, ctx) {
             let delivered;
             try {
                 const deliver = (name, payload) => ctx.deliverHumanToInstance
-                    ? ctx.deliverHumanToInstance(name, payload, webHumanOrigin(false, authority), typed, { stillCurrent, ...(native ? { authorityCurrent } : {}) })
-                    : ctx.deliverToInstance(name, payload, { stillCurrent, ...(native ? { authorityCurrent } : {}) });
+                    ? ctx.deliverHumanToInstance(name, payload, webHumanOrigin(false, authority), typed, { stillCurrent })
+                    : ctx.deliverToInstance(name, payload, { stillCurrent });
                 delivered = await deliver(instance, {
                     type: "fleet_inbound",
                     content: delivery.text,
-                    ...(nativeRequestId ? { requestId: nativeRequestId } : {}),
                     targetSession: instance,
                     meta: {
                         chat_id: groupId ? String(groupId) : "",
@@ -5119,16 +4661,6 @@ function shellHtmlTag(ctx, mode, viewer) {
 function shellOwnerCss(ctx, mode, viewer) {
     return mode === "full" && !viewer?.guest && viewer?.person !== null && viewer?.person !== undefined && ctx.ownerCss ? ctx.ownerCss.active(viewer.person) : null;
 }
-/**
- * AgEnD Hub P1 (docs/design/hub.md, docs/design/hub-ui-client.md): the page's Hub mark — presentation only, never
- * authority, set by the listener that serves the page (never a client's choice): `member` on this fleet's listener when
- * `hub_member.enabled`, never over the public link. `hub` is only the Hub listener's own workspace page
- * (serveHubWorkspaceShell). Nothing otherwise: no Hub UI is drawn and no Hub module loads.
- */
-function hubBodyAttrs(req, config) {
-    // hub.md §1: member handlers are local-owner-only and unavailable through the public gateway — no member mark there.
-    return hubModeOf(config).member && !gatewayRequestContext(req) ? ' data-hub="member"' : "";
-}
 function guestBodyAttrs(ctx, owner, attr) {
     const badge = ctx.guestBadge?.(owner);
     const trusted = ctx.guestTrusted?.(owner) ? ' data-guest-level="trusted"' : "";
@@ -5165,47 +4697,12 @@ function shellBodyTag(req, ctx, mode, viewer) {
         + `${gatewayRequestContext(req) ? ' data-public-link="1"' : ""}`
         // #2478: search is offered over the public link unless web.search.public_link is false (the page then shows no entry).
         + `${gatewayRequestContext(req) && ctx.fleetConfig?.web?.search?.public_link === false ? ' data-search-link="0"' : ""}`
-        // AgEnD Hub P1 (docs/design/hub-ui-client.md): the Hub's marks — only when a switch is on, never on a guest's page.
-        + `${mode === "full" && !viewer?.guest ? hubBodyAttrs(req, ctx.fleetConfig) : ""}`
         // #1920 phase 3: a guest's page — the shell shows only what a guest may use, and who it is signed in as.
         + `${mode === "full" && viewer?.guest && viewer.owner ? guestBodyAttrs(ctx, viewer.owner, attr) : ""}>`;
 }
-/**
- * AgEnD Hub P1, slice 3: the app shell as a Hub's own workspace (served only by the Hub's listener, at its own origin).
- * It boots Hub-only (app.js: no fleet stream, chat, Needs you, preferences or themes). Nothing of the request is read
- * — no cookie (the fleet's or the Hub's), no session, no Host: who is signed in is the page's own /hub/v1/session.
- */
-export const HUB_SHELL_DROPS = '<script src="/assets/agend-auth.js"></script>';
-export function serveHubWorkspaceShell(res, hub) {
-    try {
-        // Without the fleet's fetch wrapper (agend-auth.js): it reads the fleet's /auth/session for a CSRF value and answers
-        // a 401 with the fleet's "session ended" banner. The Hub's pages carry the Hub's own CSRF (hub-client.js).
-        const html = readFileSync(join(__dirname, "ui", "app.html"), "utf-8").replace(HUB_SHELL_DROPS, "");
-        const attr = (v) => v.replace(/[&<>"']/g, c => `&#${c.charCodeAt(0)};`);
-        const name = hubNameOf(hub.name);
-        const preview = hub.preview;
-        const previewAttrs = preview ? ` data-dashboard-origin="${attr(preview.dashboardOrigin)}"`
-            + (preview.previewOrigin && preview.bootId ? ` data-preview-origin="${attr(preview.previewOrigin)}" data-preview-boot="${attr(preview.bootId)}"`
-                : ` data-preview-reason-code="${attr(preview.reasonCode ?? "notOffered")}" data-preview-reason="${attr(preview.reason ?? "")}"`) : "";
-        const body = `<body data-mode="full" data-web-transport="none" data-usage-panel="0" data-log-tab="0" data-hub="hub"${name ? ` data-hub-name="${attr(name)}"` : ""}${previewAttrs}>`;
-        sendPanelHtml(res, withAppIconLinks(html).replace("<body>", body), 200, { "Cache-Control": "no-store" }, { mediaSrc: "'none'", ...(preview?.previewOrigin ? { frameSrc: `${preview.previewOrigin}/frame` } : {}) });
-    }
-    catch {
-        json(res, 500, { error: "app.html not found" });
-    }
-}
 /** The app shell page for one entry, under the panels' CSP; it may frame exactly <preview origin>/frame, and only
  *  when this load chose one. */
-/**
- * The app shell page. `opts.hubWorkspace`: the page is a Hub's own workspace (slice 1's Hub listener only — the fleet's
- * listener never passes it), so it is drawn as the Hub shell.
- */
-export function serveAppShell(req, res, ctx, mode, opts = {}) {
-    // A Hub workspace is drawn from nothing of this fleet's: no fleet cookie, session, preference or preview is read.
-    if (opts.hubWorkspace) {
-        serveHubWorkspaceShell(res, opts.hubWorkspace);
-        return;
-    }
+export function serveAppShell(req, res, ctx, mode) {
     try {
         const html = readFileSync(join(__dirname, "ui", "app.html"), "utf-8");
         const viewer = mode === "full" ? prefsViewer(req, new URL(req.url ?? "/", "http://localhost"), ctx) : null;