@zq-silk/yui 2.12.0 → 2.15.0

package/README.md

@@ -199,6 +199,11 @@ Settings; saving it does not switch the current view or Session.
 MCP forms and URL confirmations can be completed in Terminal or declined in
 Conversation. Native additional input is saved as a user Message with its exact
 steer receipt before submission.
+
+**Settings → Command permissions** provides a searchable, read-only command ×
+role discovery matrix and built-in capability contracts. Visibility is not
+authorization for a specific call; this view never changes rules or Grants.
+See [discovery and authorization](docs/authorization.md#read-only-web-templates).
 Attachments and native configuration changes
 are not supported by this managed text-input surface.
 The detail has four tabs: Overview (user input, progress and key Decisions),

package/dist/config/configCatalog.js

@@ -8,7 +8,7 @@ export const CONFIG_DOMAINS = ["system", "runtime", "workflow", "resources", "to
 export const CONFIG_DEFINITIONS = Object.freeze([
     { key: "default-agent", domain: "system", property: "defaultAgent", label: "Default Agent", summary: "Configured Agent used when a Task or Role does not select one explicitly.", takesEffect: "Future Role and Task defaults; existing bindings are unchanged." },
     { key: "default-workspace", domain: "system", property: "defaultWorkspace", label: "Default workspace", summary: "Absolute workspace root outside YUI_HOME used when no workspace is selected.", takesEffect: "Future workspace selection; existing Roles and worktrees are unchanged." },
-    { key: "time-zone", domain: "system", property: "timeZone", label: "Time zone", summary: "IANA timezone for human-facing timestamps (default: Asia/Shanghai).", takesEffect: "The next human-readable timestamp rendering; durable JSON remains UTC." },
+    { key: "time-zone", domain: "system", property: "timeZone", label: "Time zone", summary: "IANA timezone for human-facing timestamps and new default Project sync plans (default: Asia/Shanghai).", takesEffect: "The next human-readable timestamp rendering and newly installed Project sync plans; existing Schedule rules stay unchanged and durable timestamps remain UTC." },
     { key: "reconciliation-interval-seconds", domain: "runtime", property: "reconciliationIntervalSeconds", label: "Reconciliation interval", summary: "Recovery reconciliation interval, 5-300 seconds (default: 120).", takesEffect: "The running Controller is refreshed after the value is saved." },
     { key: "controller-task-concurrency", domain: "runtime", property: "controllerTaskConcurrency", label: "Controller Task concurrency", summary: "Maximum Tasks reconciled concurrently, 1-32 (default: 4).", takesEffect: "After the Controller restarts." },
     { key: "runtime-health", domain: "runtime", property: "runtimeHealth", label: "Runtime health thresholds", summary: "Quiet, checkpoint-overdue, and read-only diagnostic thresholds in seconds; values must be strictly increasing (defaults: 300/900/1800).", takesEffect: "CLI and Web projections immediately; scheduler diagnostics after the Controller restarts." },

package/dist/controlPlaneCli.js

@@ -689,7 +689,7 @@ export async function main() {
             const describe = (status) => status
                 ? `Web listener: ${status.state}\n`
                     + (status.alreadyRunning ? "Existing listener reused; credentials were not reloaded.\n" : "")
-                    + (status.authentication === "basic" ? "Browser authentication: username yui; use the password from your private credential file.\n" : "")
+                    + (status.authentication === "password" ? "Browser sign-in: open the URL and enter the password from your private credential file on the Yui sign-in page.\n" : "")
                     + (status.urls ?? []).map(url => `Yui web control room: ${url}\n`).join("")
                     + (status.warnings ?? []).map(warning => `Warning: ${warning}\n`).join("")
                 : "Web is not running. Start it explicitly; Controller recovery does not restore listeners.\n";

package/dist/controller/runtime.js

@@ -45,6 +45,7 @@ import { archiveOrdinaryTask } from "../task/ordinaryArchive.js";
 import { createWebSettings } from "../web/webSettings.js";
 import { createModelManagement } from "../models/modelManagement.js";
 import { createWebSkills } from "../web/webSkills.js";
+import { createWebPermissions } from "../web/webPermissions.js";
 import { createWebJobs } from "../web/webJobs.js";
 import { isTaskOwnedWorkspace, sameManagedWorkspaceIdentity } from "../worktree/managedWorkspace.js";
 import { AgentRuntimeObserver } from "./agentRuntimeObserver.js";
@@ -417,6 +418,7 @@ export async function startFileTaskControllerRuntime(home, options = {}) {
         const web = createControllerWeb(store, {
             previews: () => createTaskPreviews(store, home),
             skills: createWebSkills(store),
+            permissions: createWebPermissions(store),
             jobs: createWebJobs(store, home),
             models: createModelManagement(store),
             settings: createWebSettings(store, {

package/dist/job/projectSync.js

@@ -7,9 +7,9 @@ import { requireRefreshProject, projectRefreshTargetDigest } from "../repository
 import { createJobDefinition, reviseJobDefinition, validateJobDefinition } from "./jobDefinition.js";
 import { nextScheduleDue, validateScheduleRule } from "../schedule/schedule.js";
 import { scheduleServiceBinding } from "./scheduleService.js";
+import { resolveTimeZone } from "../config/timeZone.js";
 const scope = { kind: "global" };
 const unavailable = "Project sync unavailable: ";
-export const PROJECT_SYNC_INTERVAL_MS = 6 * 60 * 60_000;
 /** Called under the maintenance lock immediately before Git, not a timer probe. */
 export function requireProjectSyncCheckout(store, job) {
     requireProjectSyncTarget(store, job);
@@ -86,8 +86,8 @@ export function reconcileProjectSync(store, now, onError = () => { }) {
                     reason = unavailable + (error instanceof Error ? error.message : String(error));
                 }
                 if (!plan) {
-                    const rule = { kind: "interval", anchor: new Date(now.getTime() + PROJECT_SYNC_INTERVAL_MS).toISOString(),
-                        everyMs: PROJECT_SYNC_INTERVAL_MS };
+                    const rule = { kind: "cron", expression: "0 */6 * * *",
+                        timezone: resolveTimeZone(tx.getConfig().timeZone) };
                     const grantId = randomUUID();
                     plan = { schemaVersion: 1, id, scope, jobId: id, target: { kind: "existing-job" }, rule,
                         builtin: { projectId, enabled: true }, revision: 1, generation: 1,

package/dist/storage/sqliteSchema.js

@@ -10,6 +10,7 @@ import { GLOBAL_SESSION_TABLE_SQL, SESSION_HISTORY_UPGRADE_SQL } from "./session
 import { migrateJobDefinitions } from "./upgrade/jobDefinitionMigration.js";
 import { migrateJobBusinessResults } from "./upgrade/jobBusinessResultMigration.js";
 import { migrateScheduleDispatch } from "./upgrade/scheduleDispatchMigration.js";
+import { migrateProjectSyncClock } from "./upgrade/projectSyncClockMigration.js";
 import { CURRENT_STORAGE_VERSION, MIN_SUPPORTED_STORAGE_VERSION, STORAGE_FORMAT, isMinorStorageUpgrade, isStorageVersion, storageVersionParts } from "./storageVersions.js";
 export { BASELINE_SCHEMA_SQL };
 export const SQLITE_SCHEMA_TABLES = [...BASELINE_SCHEMA_TABLES, "job_definitions", "global_job_runs", "schedules", "agent_job_runs"];
@@ -233,6 +234,15 @@ const MINOR_UPGRADES = Object.freeze([{
         // Existing records and immutable artifacts remain byte-for-byte unchanged.
         // Declares Agent definitions/Runs and optional Job ownership of a non-Task Role.
         sql: AGENT_JOB_SCHEMA_SQL
+    }, {
+        fromVersion: "1.20",
+        toVersion: "1.21",
+        name: "project-sync-clock",
+        introducedIn: "next",
+        sourceChecksum: CURRENT_SCHEMA_CHECKSUM,
+        targetChecksum: CURRENT_SCHEMA_CHECKSUM,
+        sql: "",
+        dataMigration: "project-sync-clock"
     }]);
 export function storageMinorUpgradePlan(from) {
     if (from === CURRENT_STORAGE_VERSION)
@@ -363,6 +373,8 @@ export function applySqliteMinorUpgrades(db, home, createdRoots = []) {
                 migrateJobBusinessResults(db);
             if (step.dataMigration === "schedule-dispatch")
                 migrateScheduleDispatch(db);
+            if (step.dataMigration === "project-sync-clock")
+                migrateProjectSyncClock(db);
             const { major, minor } = storageVersionParts(step.toVersion);
             db.prepare("UPDATE storage_schema SET major=?,minor=?,checksum=? WHERE id=1")
                 .run(major, minor, step.targetChecksum);

package/dist/storage/storageVersions.js

@@ -1,4 +1,4 @@
-export const CURRENT_STORAGE_VERSION = "1.20";
+export const CURRENT_STORAGE_VERSION = "1.21";
 export const MIN_SUPPORTED_STORAGE_VERSION = "1.0";
 export const STORAGE_FORMAT = "yui-home";
 export function isStorageVersion(value) {

package/dist/storage/upgrade/projectSyncClockMigration.js

@@ -0,0 +1,30 @@
+import { resolveTimeZone } from "../../config/timeZone.js";
+import { nextScheduleDue, validateSchedule } from "../../schedule/schedule.js";
+/** 1.20 had no rule-edit provenance. Only revision 1 proves no user mutation.
+ * Higher revisions may be dispatch, recovery OR an equal-valued user edit;
+ * preserve them instead of guessing from interval values or generation.
+ */
+export function migrateProjectSyncClock(db) {
+    const now = new Date();
+    const rows = db.prepare("SELECT rowid,scope_key,schedule_id,payload FROM schedules").all();
+    for (const row of rows) {
+        const old = JSON.parse(row.payload);
+        if (!old.builtin || old.revision !== 1)
+            continue;
+        validateSchedule(old);
+        // Confirm the declared install shape, in addition to the mutation evidence.
+        if (old.generation !== 1 || old.rule.kind !== "interval" || old.rule.everyMs !== 21_600_000
+            || Date.parse(old.rule.anchor) !== Date.parse(old.createdAt) + 21_600_000)
+            continue;
+        const config = db.prepare("SELECT payload FROM config WHERE id=1").get();
+        const rule = { kind: "cron", expression: "0 */6 * * *",
+            timezone: resolveTimeZone(config ? JSON.parse(config.payload).timeZone : undefined) };
+        const after = new Date(Math.max(now.getTime(), Date.parse(old.processedThrough ?? "") || 0));
+        const next = validateSchedule({ ...old, rule, revision: old.revision + 1, generation: old.generation + 1,
+            processedThrough: after.toISOString(), nextDue: nextScheduleDue(rule, after), updatedAt: now.toISOString() });
+        db.prepare("INSERT INTO storage_migration_archive(migration_version,family,record_key,payload) VALUES(?,?,?,?)")
+            .run(21, "schedules", `${row.scope_key}/${row.schedule_id}`, row.payload);
+        db.prepare("UPDATE schedules SET payload=?,next_due=? WHERE rowid=?")
+            .run(JSON.stringify(next), next.nextDue, row.rowid);
+    }
+}

package/dist/web/assets/assetManifest.js

@@ -8,6 +8,7 @@ import { APP_SCRIPT, CLIENT_MODULES } from "./client/index.js";
 import { THEME_BOOTSTRAP_SCRIPT } from "./client/lib/theme.js";
 import { FONT_WOFF2_BASE64 } from "./fontData.js";
 import { DASHBOARD_HTML } from "./shell/index.js";
+import { LOGIN_HTML } from "./shell/login.js";
 import { STYLESHEETS } from "./styles/index.js";
 const require = createRequire(import.meta.url);
 const CSS = "text/css; charset=utf-8";
@@ -22,7 +23,28 @@ export const WEB_ASSETS = Object.freeze({
     "/assets/vendor/addon-fit.mjs": vendorAsset("@xterm/addon-fit/lib/addon-fit.mjs", JS),
     "/assets/vendor/xterm.css": vendorAsset("@xterm/xterm/css/xterm.css", CSS)
 });
-export { DASHBOARD_HTML };
+export { DASHBOARD_HTML, LOGIN_HTML };
+// The sign-in document's static closure (its stylesheets, fonts, theme script
+// and module import graph). Only these assets are served without a session;
+// every other asset, like every document and API, requires sign-in.
+const LOGIN_ASSETS = (() => {
+    const found = new Set();
+    const visit = (body) => {
+        for (const [path] of body.matchAll(/\/assets\/[\w./-]+/g)) {
+            const asset = WEB_ASSETS[path];
+            if (!asset || found.has(path))
+                continue;
+            found.add(path);
+            if (asset.encoding !== "base64")
+                visit(asset.body);
+        }
+    };
+    visit(LOGIN_HTML);
+    return found;
+})();
+export function isLoginAsset(pathname) {
+    return LOGIN_ASSETS.has(pathname);
+}
 // One content revision covers the complete import graph: changing a dependency
 // invalidates its importers too. Only these static assets may be cached.
 export const WEB_ASSET_VERSION = createHash("sha256")

package/dist/web/assets/client/app/login.js

@@ -0,0 +1,156 @@
+export const LOGIN_SCRIPT = String.raw `
+// Sign-in page controller. Posts the password once per submission as
+// same-origin JSON; the server sets an HttpOnly session cookie and returns a
+// validated same-origin destination. The password is never written to the
+// URL, storage or console, and the field is cleared after a rejection.
+import { createI18n } from "/assets/js/lib/i18n.js";
+
+const form = document.querySelector("#login-form");
+const password = document.querySelector("#login-password");
+const reveal = document.querySelector("#login-reveal");
+const submit = document.querySelector("#login-submit");
+const submitLabel = document.querySelector("#login-submit-label");
+const errorBox = document.querySelector("#login-error");
+const notice = document.querySelector("#login-notice");
+const transport = document.querySelector("#login-transport");
+
+const i18n = createI18n(document.querySelector("#locale-select"));
+const t = i18n.t;
+const params = new URLSearchParams(window.location.search);
+const next = params.get("next") || "/";
+const reason = params.get("reason");
+let busy = false;
+let lockedUntil = 0;
+let lockTimer = null;
+let currentError = null;
+
+function isLoopbackHost(host) {
+  return host === "localhost" || host === "[::1]" || /^127\./.test(host);
+}
+
+function showError(key, values) {
+  currentError = { key: key, values: values || {} };
+  let text = t(key);
+  Object.keys(currentError.values).forEach(function (name) { text = text.split("{" + name + "}").join(String(currentError.values[name])); });
+  errorBox.textContent = text;
+  errorBox.hidden = false;
+  password.setAttribute("aria-invalid", key === "login.error.network" || key === "login.error.origin" ? "false" : "true");
+}
+
+function clearError() {
+  currentError = null;
+  errorBox.hidden = true;
+  errorBox.textContent = "";
+  password.setAttribute("aria-invalid", "false");
+}
+
+function setBusy(value) {
+  busy = value;
+  form.setAttribute("aria-busy", value ? "true" : "false");
+  password.readOnly = value;
+  updateSubmit();
+}
+
+function updateSubmit() {
+  const locked = Date.now() < lockedUntil;
+  submit.disabled = busy || locked;
+  submitLabel.textContent = t(busy ? "login.submitting" : "login.submit");
+}
+
+function renderStatic() {
+  document.title = t("login.title");
+  if (reason === "expired" || reason === "signed-out") {
+    notice.className = "login-notice " + (reason === "expired" ? "tone-warn" : "tone-ok");
+    notice.textContent = t(reason === "expired" ? "login.notice.expired" : "login.notice.signedOut");
+    notice.hidden = false;
+  }
+  const revealed = reveal.getAttribute("aria-pressed") === "true";
+  reveal.setAttribute("aria-label", t(revealed ? "login.hide" : "login.show"));
+  reveal.title = t(revealed ? "login.hide" : "login.show");
+  if (currentError) showError(currentError.key, currentError.values);
+  updateSubmit();
+}
+
+function lockFor(seconds) {
+  lockedUntil = Date.now() + seconds * 1000;
+  window.clearInterval(lockTimer);
+  const tick = function () {
+    const remaining = Math.ceil((lockedUntil - Date.now()) / 1000);
+    if (remaining <= 0) {
+      window.clearInterval(lockTimer);
+      lockTimer = null;
+      clearError();
+      updateSubmit();
+      return;
+    }
+    showError("login.error.throttled", { seconds: remaining });
+    updateSubmit();
+  };
+  tick();
+  lockTimer = window.setInterval(tick, 1000);
+}
+
+reveal.addEventListener("click", function () {
+  const revealed = reveal.getAttribute("aria-pressed") !== "true";
+  reveal.setAttribute("aria-pressed", revealed ? "true" : "false");
+  password.type = revealed ? "text" : "password";
+  renderStatic();
+  password.focus();
+});
+
+password.addEventListener("input", function () {
+  if (currentError && currentError.key !== "login.error.throttled") clearError();
+});
+
+form.addEventListener("submit", async function (event) {
+  event.preventDefault();
+  if (busy || Date.now() < lockedUntil) return;
+  if (!password.value) {
+    showError("login.error.empty");
+    password.focus();
+    return;
+  }
+  clearError();
+  setBusy(true);
+  let response;
+  let body = null;
+  try {
+    response = await fetch("/auth/login", {
+      method: "POST", credentials: "same-origin", cache: "no-store",
+      headers: { "content-type": "application/json", accept: "application/json" },
+      body: JSON.stringify({ password: password.value, next: next })
+    });
+    try { body = await response.json(); } catch {}
+  } catch {
+    setBusy(false);
+    showError("login.error.network");
+    password.focus();
+    return;
+  }
+  if (response.ok && body && typeof body.location === "string" && body.location.startsWith("/") && !body.location.startsWith("//")) {
+    // Keep the busy state while the browser navigates to the destination.
+    window.location.replace(body.location + window.location.hash);
+    return;
+  }
+  setBusy(false);
+  if (response.status === 429) {
+    lockFor(Math.max(1, Number(body && body.retryAfterSeconds) || Number(response.headers.get("retry-after")) || 30));
+  } else if (response.status === 401) {
+    password.value = "";
+    showError("login.error.invalid");
+  } else if (response.status === 403) {
+    showError("login.error.origin");
+  } else if (response.status === 404 && body && body.code === "password-not-configured") {
+    window.location.replace("/");
+    return;
+  } else {
+    showError("login.error.network");
+  }
+  password.focus();
+});
+
+i18n.subscribe(renderStatic);
+transport.hidden = window.location.protocol !== "http:" || isLoopbackHost(window.location.hostname);
+renderStatic();
+password.focus();
+`;

package/dist/web/assets/client/app/settings.js

@@ -9,6 +9,7 @@ import { clearPreference, readSessionAccessMode, writeSessionAccessMode } from "
 import { i18n, createManageShell, pageSections, registerManagePage, navigateManage } from "/assets/js/layout/manageShell.js";
 import { mountSkills } from "/assets/js/views/skills.js";
 import { mountJobs } from "/assets/js/views/jobs.js";
+import { mountPermissions } from "/assets/js/views/permissions.js";
 
 const $ = selector => document.querySelector(selector);
 const t = i18n.t;
@@ -20,12 +21,14 @@ function readSection() {
 }
 let section = readSection();
 let jobs;
+let permissions;
 const shell = createManageShell({ page: "settings", t, onNavigate: navigate });
 function showSection(next) {
   section = next;
   document.querySelectorAll("#settings-root > .manage-section[data-section]").forEach(panel => { panel.hidden = panel.dataset.section !== next; });
   shell.set(next);
   if (next === "jobs" && !jobs) jobs = mountJobs($("#global-jobs"), t);
+  if (next === "permissions" && !permissions) permissions = mountPermissions($("#permission-browser"), t);
 }
 function navigate(next) {
   navigateManage({ page: "settings", section: next });
@@ -39,6 +42,7 @@ registerManagePage("settings", { show: next => showSection(next.section) });
 i18n.subscribe(() => shell.render());
 i18n.subscribe(() => {
   if (jobs && !jobs.isDirty() && !jobs.isBusy()) jobs = mountJobs($("#global-jobs"), t);
+  permissions?.translate();
 });
 showSection(section);
 const skills = mountSkills($("#skill-browser"), t, { heading: false, onDirty: value => markDirty("skills", value) });

package/dist/web/assets/client/i18n/en.js

@@ -3,6 +3,52 @@
 // domain vocabulary (statuses, owners, actions) keeps the exact product terms.
 // Placeholders such as {count} are filled by fill() in lib/format.
 export const EN = {
+    "settings.section.permissions": "Command permissions",
+    "permissions.intro": "Read-only discovery templates, not authorization for a specific call. No rules or Grants are changed.",
+    "permissions.notice": "Compare CLI discovery by role. Visible means included in that role's default help/completion, not permission to execute. Choosing a role does not switch your identity.",
+    "permissions.commands": "Command × role matrix",
+    "permissions.capabilities": "Built-in capability contracts",
+    "permissions.view": "View",
+    "permissions.search": "Find a command or capability",
+    "permissions.role": "Role template",
+    "permissions.category": "Command category",
+    "permissions.allRoles": "Compare all role templates",
+    "permissions.allCategories": "All categories",
+    "permissions.configured": "Configured GlobalRole",
+    "permissions.role.public": "Terminal / unmanaged",
+    "permissions.role.operator": "Operator",
+    "permissions.role.global": "GlobalRole",
+    "permissions.role.leader": "Task Leader",
+    "permissions.role.worker": "Task Worker",
+    "permissions.role.reviewer": "Task Reviewer",
+    "permissions.role.unbound": "Unbound identity",
+    "permissions.command": "Command",
+    "permissions.visible": "Visible",
+    "permissions.hidden": "Hidden",
+    "permissions.tableHint": "Discovery only · select a command for role-specific usage and boundaries. Scroll horizontally to compare roles.",
+    "permissions.reason.visible": "Included by the current catalog projection. Options below are filtered by the same role audience as CLI help.",
+    "permissions.reason.hidden": "Not discoverable as an executable command in this audience's catalog. This is not a missing-Grant assessment.",
+    "permissions.unevaluated": "No specific authorization assessment performed. No target, live Session or Grant has been inspected.",
+    "permissions.boundaries": "Execution still checks the actual Session, Task/lifecycle, planning or delivery authority, Assignment/Review, Project/workspace and resource/Grant bounds as applicable. The catalog cannot enumerate every domain check; never infer authorization from visibility, command name or a query effect.",
+    "permissions.boundary.public": "Ordinary terminals and unmanaged sessions share the public surface. This does not grant a managed identity or authorize unrequested effects.",
+    "permissions.boundary.operator": "Requires the current Operator binding and the domain's operation-specific checks. An offline template cannot establish that binding.",
+    "permissions.boundary.global": "Configured GlobalRoles share this discovery audience, not Operator authority. Role configuration and exact domain scope remain authoritative.",
+    "permissions.boundary.leader": "Own Task and captured Project scope. Planning Sessions do not acquire delivery authority just because a Task becomes active.",
+    "permissions.boundary.assignment": "Worker and Reviewer share discovery templates, but their exact Assignment/Review, frozen references and writable workspace may differ.",
+    "permissions.boundary.unbound": "Incomplete/conflicting managed identity has no public fallback. Historical or revoked Sessions are rechecked at execution even if offline help is visible.",
+    "permissions.capabilityNotice": "Built-in descriptors from the existing registry definition, not a second CLI-to-capability map. Permission categories and required inputs are contracts, not role grants. Task-local plugin descriptors and live assessments are intentionally excluded.",
+    "permissions.effect": "Declared effect",
+    "permissions.requiredPermissions": "Required permission categories",
+    "permissions.requiredInputs": "Required target inputs",
+    "permissions.inputs": "All input fields",
+    "permissions.legend": "Meaning, limits and sources",
+    "permissions.states": "Exact capability discovery may return hidden, requestable (with a bounded request route), or authorized (rechecked at execution). Without exact input there is no access assessment; this page never labels a role/command pair authorized or requestable.",
+    "permissions.sources": "Sources",
+    "permissions.previous": "Previous",
+    "permissions.next": "Next",
+    "permissions.loading": "Loading templates…",
+    "permissions.empty": "No matching templates.",
+    "permissions.retry": "Retry read",
     "tabs.jobs": "Jobs",
     "settings.section.jobs": "Jobs & schedules",
     "jobs.builtinSync": "Built-in Project sync · safe fast-forward only",
@@ -1180,5 +1226,22 @@ export const EN = {
     "discussion.older": "Show {count} earlier messages",
     "discussion.olderLoading": "Reading earlier messages…",
     "record.raw": "Raw record",
-    "record.reading": "Reading the exact record…"
+    "record.reading": "Reading the exact record…",
+    "login.title": "Sign in · Yui",
+    "login.heading": "Sign in to Yui",
+    "login.subtitle": "Enter the Web access password from this listener's private credential file.",
+    "login.password": "Password",
+    "login.show": "Show password",
+    "login.hide": "Hide password",
+    "login.submit": "Sign in",
+    "login.submitting": "Signing in…",
+    "login.error.empty": "Enter the password.",
+    "login.error.invalid": "Incorrect password. Check the credential file and try again.",
+    "login.error.throttled": "Too many failed attempts. Try again in {seconds} s.",
+    "login.error.origin": "This address is not accepted by the Web listener. Open one of the URLs printed by yui web.",
+    "login.error.network": "Cannot reach Yui Web. Check that the listener is running, then try again.",
+    "login.notice.expired": "Your session has expired. Sign in again to continue.",
+    "login.notice.signedOut": "You have signed out.",
+    "login.httpWarning": "This connection uses plain HTTP and is not encrypted. Sign in only on a trusted network.",
+    "login.noscript": "JavaScript is required to sign in."
 };

package/dist/web/assets/client/i18n/zh-CN.js

@@ -1,6 +1,52 @@
 // Simplified Chinese UI copy. Typed against the English catalog, so a key that
 // does not exist in en.ts is a compile error; a missing key falls back to en.
 export const ZH_CN = {
+    "settings.section.permissions": "命令权限",
+    "permissions.intro": "只读的命令发现模板，不是具体调用的授权结论。不会修改规则或 Grant。",
+    "permissions.notice": "按角色比较 CLI 发现范围。“可见”仅表示默认帮助与补全包含该命令，不代表可以执行。选择角色不会切换你的身份。",
+    "permissions.commands": "命令 × 角色矩阵",
+    "permissions.capabilities": "内置能力契约",
+    "permissions.view": "视图",
+    "permissions.search": "查找命令或能力",
+    "permissions.role": "角色模板",
+    "permissions.category": "命令分类",
+    "permissions.allRoles": "比较全部角色模板",
+    "permissions.allCategories": "全部分类",
+    "permissions.configured": "已配置 GlobalRole",
+    "permissions.role.public": "终端 / 非管控会话",
+    "permissions.role.operator": "Operator",
+    "permissions.role.global": "GlobalRole",
+    "permissions.role.leader": "Task Leader",
+    "permissions.role.worker": "Task Worker",
+    "permissions.role.reviewer": "Task Reviewer",
+    "permissions.role.unbound": "未绑定身份",
+    "permissions.command": "命令",
+    "permissions.visible": "发现可见",
+    "permissions.hidden": "隐藏",
+    "permissions.tableHint": "仅展示发现范围 · 选择命令查看各角色用法与边界；可横向滚动比较角色。",
+    "permissions.reason.visible": "当前目录投影包含该命令。下方选项与 CLI 帮助使用相同的角色过滤规则。",
+    "permissions.reason.hidden": "该角色的目录中不展示此可执行命令。这不表示仅缺少一个 Grant。",
+    "permissions.unevaluated": "尚未进行具体授权评估；未检查目标、实时 Session 或 Grant。",
+    "permissions.boundaries": "执行仍按实际操作检查 Session、Task/生命周期、planning 或 delivery 权限、Assignment/Review、Project/工作区及资源/Grant 边界。目录不能枚举全部领域检查；不可根据可见性、命令名称或 query 效果推断已授权。",
+    "permissions.boundary.public": "普通终端与非 Yui 管控会话共用公共入口；这不赋予管控身份，也不授权未被请求的操作。",
+    "permissions.boundary.operator": "需要当前 Operator 绑定及领域操作检查。离线模板不能证明该绑定有效。",
+    "permissions.boundary.global": "已配置 GlobalRole 共用此发现范围，但不继承 Operator 权限；角色配置和具体领域范围仍是权威来源。",
+    "permissions.boundary.leader": "限自身 Task 及已捕获的 Project 范围。Task 激活不会将 planning Session 自动提升为 delivery。",
+    "permissions.boundary.assignment": "Worker 与 Reviewer 共用发现模板，但各自 Assignment/Review、冻结引用和可写工作区可能不同。",
+    "permissions.boundary.unbound": "不完整或冲突的管控身份不能回退为公共身份。历史或已撤销 Session 即使能看到离线帮助，执行时仍会被重新检查。",
+    "permissions.capabilityNotice": "直接展示现有 registry 的内置描述，不维护另一份 CLI 与能力映射。权限类别和必填输入是契约，不是角色授权；不展示 Task 私有插件描述或实时评估。",
+    "permissions.effect": "声明效果",
+    "permissions.requiredPermissions": "所需权限类别",
+    "permissions.requiredInputs": "必填目标输入",
+    "permissions.inputs": "全部输入字段",
+    "permissions.legend": "含义、限制与来源",
+    "permissions.states": "具体能力发现可能返回 hidden（隐藏）、requestable（可经限定渠道申请）或 authorized（已授权，执行时仍复核）。缺少具体输入时不提供 access 结论；此页不会将角色与命令组合标为已授权或可申请。",
+    "permissions.sources": "来源",
+    "permissions.previous": "上一页",
+    "permissions.next": "下一页",
+    "permissions.loading": "正在读取模板…",
+    "permissions.empty": "没有匹配的模板。",
+    "permissions.retry": "重新读取",
     "tabs.jobs": "Job",
     "settings.section.jobs": "Job 与时间计划",
     "jobs.builtinSync": "内置 Project 同步 · 仅安全快进",
@@ -1176,5 +1222,22 @@ export const ZH_CN = {
     "discussion.older": "显示更早的 {count} 条消息",
     "discussion.olderLoading": "正在读取更早的消息…",
     "record.raw": "原始记录",
-    "record.reading": "正在读取完整记录…"
+    "record.reading": "正在读取完整记录…",
+    "login.title": "登录 · Yui",
+    "login.heading": "登录 Yui",
+    "login.subtitle": "输入此 Web 监听所用私有凭证文件中的访问密码。",
+    "login.password": "密码",
+    "login.show": "显示密码",
+    "login.hide": "隐藏密码",
+    "login.submit": "登录",
+    "login.submitting": "正在登录…",
+    "login.error.empty": "请输入密码。",
+    "login.error.invalid": "密码不正确。请核对凭证文件后重试。",
+    "login.error.throttled": "失败次数过多，请在 {seconds} 秒后重试。",
+    "login.error.origin": "Web 监听不接受当前地址。请打开 yui web 输出的访问地址。",
+    "login.error.network": "无法连接 Yui Web。请确认监听仍在运行后重试。",
+    "login.notice.expired": "会话已过期，请重新登录以继续。",
+    "login.notice.signedOut": "你已退出登录。",
+    "login.httpWarning": "当前连接为未加密的 HTTP。请仅在可信网络中登录。",
+    "login.noscript": "需要启用 JavaScript 才能登录。"
 };

package/dist/web/assets/client/index.js

@@ -17,6 +17,7 @@ import { FORMAT_SCRIPT } from "./lib/format.js";
 import { I18N_SCRIPT } from "./lib/i18n.js";
 import { MARKDOWN_SCRIPT } from "./lib/markdown.js";
 import { PREFS_SCRIPT } from "./lib/prefs.js";
+import { SESSION_SCRIPT } from "./lib/session.js";
 import { THEME_SCRIPT } from "./lib/theme.js";
 import { CONTAINERS_SCRIPT } from "./ui/containers.js";
 import { CONTROLS_SCRIPT } from "./ui/controls.js";
@@ -61,14 +62,17 @@ import { TASK_VIEW_SCRIPT } from "./app/taskView.js";
 import { SETTINGS_SCRIPT } from "./app/settings.js";
 import { SKILLS_SCRIPT } from "./views/skills.js";
 import { JOBS_SCRIPT } from "./views/jobs.js";
+import { PERMISSIONS_SCRIPT } from "./views/permissions.js";
 import { MODELS_VIEW_SCRIPT } from "./views/models.js";
 import { MODELS_SCRIPT } from "./app/models.js";
 import { MANAGE_SHELL_SCRIPT } from "./layout/manageShell.js";
 import { MANAGE_SCRIPT } from "./app/manage.js";
+import { LOGIN_SCRIPT } from "./app/login.js";
 export { APP_SCRIPT } from "./app/main.js";
 export const CLIENT_MODULES = Object.freeze({
     "views/skills": SKILLS_SCRIPT,
     "views/jobs": JOBS_SCRIPT,
+    "views/permissions": PERMISSIONS_SCRIPT,
     "views/models": MODELS_VIEW_SCRIPT,
     "lib/dom": DOM_SCRIPT,
     "lib/format": FORMAT_SCRIPT,
@@ -76,6 +80,7 @@ export const CLIENT_MODULES = Object.freeze({
     "lib/i18n": I18N_SCRIPT,
     "lib/theme": THEME_SCRIPT,
     "lib/api": API_SCRIPT,
+    "lib/session": SESSION_SCRIPT,
     "lib/markdown": MARKDOWN_SCRIPT,
     "ui/primitives": PRIMITIVES_SCRIPT,
     "ui/containers": CONTAINERS_SCRIPT,
@@ -119,6 +124,7 @@ export const CLIENT_MODULES = Object.freeze({
     "app/taskView": TASK_VIEW_SCRIPT,
     "app/settings": SETTINGS_SCRIPT,
     "app/manage": MANAGE_SCRIPT,
+    "app/login": LOGIN_SCRIPT,
     "app/models": MODELS_SCRIPT,
     "app/selection": SELECTION_SCRIPT
 });

package/dist/web/assets/client/lib/api.js

@@ -1,6 +1,8 @@
 export const API_SCRIPT = String.raw `
 // Loopback API client. Every request carries the page token; a write is keyed
 // so an unresolved submission can never be silently replayed from this page.
+import { sessionExpired } from "/assets/js/lib/session.js";
+
 const token = document.querySelector('meta[name="yui-web-token"]').content;
 const unresolved = new Set();
 
@@ -22,6 +24,9 @@ export async function requestJson(path, options) {
       const body = await response.json();
       if (body && body.error) message = body.error;
       if (body && body.disposition === "not-submitted") disposition = "not-submitted";
+      // The server rejected the request before reading it: the browser session
+      // is missing or expired. Return to the sign-in page for this view.
+      if (response.status === 401 && body && body.code === "authentication-required") sessionExpired();
     } catch {}
     throw Object.assign(new Error(message), { disposition, status: response.status });
   }

package/dist/web/assets/client/lib/session.js

@@ -0,0 +1,21 @@
+export const SESSION_SCRIPT = String.raw `
+// Browser session helper for password-protected listeners. The session
+// itself is an HttpOnly cookie owned by the server; this module never reads
+// or stores a credential. It only routes an expired page back to the
+// sign-in page with a same-origin return path.
+let redirecting = false;
+
+export function returnTarget() {
+  return window.location.pathname + window.location.search;
+}
+
+// Called when any API read/write answers 401. Navigates once; the fragment
+// survives on the sign-in URL and is restored after a successful sign-in.
+export function sessionExpired() {
+  if (redirecting) return;
+  redirecting = true;
+  const query = new URLSearchParams({ reason: "expired" });
+  if (returnTarget() !== "/") query.set("next", returnTarget());
+  window.location.assign("/login?" + query.toString() + window.location.hash);
+}
+`;

package/dist/web/assets/client/views/dock/terminal.js

@@ -8,6 +8,7 @@ import { h, icon, clear } from "/assets/js/lib/dom.js";
 import { fill } from "/assets/js/lib/format.js";
 import { pageToken, requestJson } from "/assets/js/lib/api.js";
 import { dot } from "/assets/js/ui/primitives.js";
+import { sessionExpired } from "/assets/js/lib/session.js";
 
 function cssVar(name, fallback) {
   const value = getComputedStyle(document.documentElement).getPropertyValue(name).trim();
@@ -172,9 +173,11 @@ function bindSocket(ctl, socket, terminal, link, generation) {
       terminal.writeln("\r\n" + message.message);
     }
   });
-  socket.addEventListener("close", function () {
+  socket.addEventListener("close", function (event) {
     if (generation !== ctl.generation) return;
     link.writable = false;
+    // 1008: the server closed this terminal because its browser session ended.
+    if (event && event.code === 1008) { sessionExpired(); return; }
     if (ctl.stateKey !== "terminal.error") setState(ctl, "terminal.closed", "closed");
   });
   socket.addEventListener("error", function () {