aimeat 2.6.1 → 3.0.0

package/dist/public/views/profile/agents/scopes-modal.js

@@ -5,6 +5,16 @@
  *   to satisfy max-file-lines.
  * @version-history
  *   v1.0.0 — 2026-07-13 — Extracted from views/profile/agents-tab.js (max-file-lines)
+ *   v1.1.0 — 2026-08-08 — The editor stopped treating `*` as "every box". It expanded the wildcard
+ *     into all of them, so memory:write-reserved — which the server grants on the exact string
+ *     only — showed as already granted on a full-access agent, and then collapsed a fully-ticked
+ *     editor back to ['*'] on save, dropping it again. Ticking it therefore could never take
+ *     effect, which is exactly what production showed: the grant looked on, the write was refused.
+ *   v1.2.0 — 2026-08-08 — Each row says what it does ("Write and send invoices, and book accounting
+ *     entries in your name") instead of sharing one word with every other domain's row; a scope the
+ *     editor has no row for is listed under "other permissions" so it can be seen and removed
+ *     rather than silently kept; and the dialog states that a change takes effect on the agent's
+ *     next connection, which is what the session-scope snapshot actually does.
  */
 import { h } from 'preact';
 import { useState } from 'preact/hooks';
@@ -14,46 +24,32 @@ import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
 import { InboxLink } from '/components/InboxLink.js';
 import { Modal } from '/components/Modal.js';
-import { SCOPE_DOMAINS, SCOPE_TEMPLATES, detectTemplate, templateLabel, domainLabel, permLabel } from './scope-config.js';
+import {
+  SCOPE_DOMAINS, SCOPE_TEMPLATES, NOT_IN_WILDCARD,
+  wildcardScopes, bulkScopes, expandScopes, collapseScopes, detectTemplate, unknownScopes,
+  templateLabel, domainLabel, permLabel,
+} from './scope-config.js';
 
 export default function ScopesModal({ agent, session, onSave, onCancel }) {
   const scopes = agent.default_scopes ?? ['*'];
-
-  function expandScopes(scopeList) {
-    const set = new Set();
-    if (scopeList.includes('*')) {
-      for (const d of SCOPE_DOMAINS) {
-        for (const p of d.permissions) set.add(`${d.key}:${p}`);
-      }
-      return set;
-    }
-    for (const s of scopeList) {
-      const [domain, perm] = s.split(':');
-      if (perm === '*') {
-        const domDef = SCOPE_DOMAINS.find(d => d.key === domain);
-        if (domDef) domDef.permissions.forEach(p => set.add(`${domain}:${p}`));
-      } else {
-        set.add(s);
-      }
-    }
-    return set;
-  }
+  // Scopes with no row of their own. Rendered anyway, at the bottom: one the owner cannot see is
+  // one they cannot revoke.
+  const unknown = unknownScopes(scopes);
 
   const [checked, setChecked] = useState(() => expandScopes(scopes));
   const [advanced, setAdvanced] = useState(() => detectTemplate(scopes) === 'custom');
   const [saving, setSaving] = useState(false);
-  const currentTemplate = detectTemplate([...checked]);
+  // Read from what would be SAVED, not from the expanded checkbox set — otherwise a fully-ticked
+  // editor never matches a template and "Full access" stays unlit while being exactly what it is.
+  const currentTemplate = detectTemplate(collapseScopes(checked, scopes));
 
   function applyTemplate(name) {
-    if (name === 'full') {
-      const all = new Set();
-      for (const d of SCOPE_DOMAINS) {
-        for (const p of d.permissions) all.add(`${d.key}:${p}`);
-      }
-      setChecked(all);
-    } else {
-      setChecked(new Set(SCOPE_TEMPLATES[name] || []));
-    }
+    // Templates replace the editable rows; a scope with no row is not something a preset can
+    // decide about, so it is carried through rather than silently dropped.
+    const carried = [...checked].filter(s => unknown.includes(s));
+    const next = name === 'full' ? wildcardScopes() : new Set(SCOPE_TEMPLATES[name] || []);
+    carried.forEach(s => next.add(s));
+    setChecked(next);
   }
 
   function toggleScope(scope) {
@@ -68,7 +64,7 @@ export default function ScopesModal({ agent, session, onSave, onCancel }) {
   function toggleDomain(domain) {
     const domDef = SCOPE_DOMAINS.find(d => d.key === domain);
     if (!domDef) return;
-    const domScopes = domDef.permissions.map(p => `${domain}:${p}`);
+    const domScopes = bulkScopes(domDef);
     const allChecked = domScopes.every(s => checked.has(s));
     setChecked(prev => {
       const next = new Set(prev);
@@ -77,16 +73,9 @@ export default function ScopesModal({ agent, session, onSave, onCancel }) {
     });
   }
 
-  function buildScopesArray() {
-    const arr = [...checked];
-    const allScopes = SCOPE_DOMAINS.flatMap(d => d.permissions.map(p => `${d.key}:${p}`));
-    if (allScopes.every(s => checked.has(s))) return ['*'];
-    return arr.length > 0 ? arr : ['catalogue:read'];
-  }
-
   async function handleSave() {
     setSaving(true);
-    await onSave(agent.name, buildScopesArray());
+    await onSave(agent.name, collapseScopes(checked, scopes));
     setSaving(false);
   }
 
@@ -124,8 +113,7 @@ export default function ScopesModal({ agent, session, onSave, onCancel }) {
           ${advanced && html`
             <div class="scope-domains">
               ${SCOPE_DOMAINS.map(d => {
-                const domScopes = d.permissions.map(p => `${d.key}:${p}`);
-                const allChecked = domScopes.every(s => checked.has(s));
+                const allChecked = bulkScopes(d).every(s => checked.has(s));
                 const isCatalogue = d.key === 'catalogue';
                 return html`
                   <div class="scope-domain">
@@ -136,6 +124,7 @@ export default function ScopesModal({ agent, session, onSave, onCancel }) {
                     ${d.permissions.map(p => {
                       const scope = `${d.key}:${p}`;
                       const isLocked = isCatalogue && p === 'read';
+                      const isExtra = NOT_IN_WILDCARD.includes(scope);
                       return html`
                         <div class="scope-row ${isLocked ? 'disabled' : ''}">
                           <label>
@@ -144,17 +133,39 @@ export default function ScopesModal({ agent, session, onSave, onCancel }) {
                               onChange=${() => !isLocked && toggleScope(scope)}
                               disabled=${isLocked}
                             />
-                            <span class="scope-friendly">${permLabel(p)}</span>
+                            <span class="scope-friendly">${permLabel(p, d.key)}</span>
                             <span class="scope-technical">${scope}</span>
                             ${isLocked && html`<span class="scope-lock" title=${t('profile.agents.scopeUi.alwaysOn')}>🔒</span>`}
+                            ${isExtra && html`<span class="scope-extra-note">${t('profile.agents.scopeUi.notInFullAccess')}</span>`}
                           </label>
                         </div>`;
                     })}
                   </div>`;
               })}
+
+              ${unknown.length > 0 && html`
+                <div class="scope-domain">
+                  <div class="scope-domain-header">
+                    <span class="domain-label">${t('profile.agents.scopeUi.domainOther')}</span>
+                  </div>
+                  <p class="scope-domain-desc">${t('profile.agents.scopeUi.otherScopesHint')}</p>
+                  ${unknown.map(scope => html`
+                    <div class="scope-row">
+                      <label>
+                        <input type="checkbox"
+                          checked=${checked.has(scope)}
+                          onChange=${() => toggleScope(scope)}
+                        />
+                        <span class="scope-technical">${escHtml(scope)}</span>
+                      </label>
+                    </div>`)}
+                </div>
+              `}
             </div>
           `}
 
+          <p class="scope-reconnect-note">${t('profile.agents.scopeUi.reconnectNote')}</p>
+
           <div class="form-actions mt-1">
             <button class="btn-primary" onClick=${handleSave} disabled=${saving}>
               ${saving ? t('profile.agents.scopeUi.saving') : t('profile.agents.scopeUi.save')}

package/dist/public/views/profile/agents/shared-board.js

@@ -7,6 +7,11 @@
  *   an "ID card" face (renderIdCard): full GAII with its expansion, issued date, last seen,
  *   task/message tallies, trust + morsels — teaching display-name-vs-GAII at a glance.
  * @version-history
+ *   v3.2.0 -- 2026-08-09 -- Buckets and sort order come from the server verdict. The local
+ *     BUCKET_OF map had no `system` key, so `|| 'quiet'` filed every internal agent under quiet
+ *     on the one surface meant to be read at a glance; there is now an `internal` pill.
+ *   v3.1.0 -- 2026-08-08 -- The GAII copy button uses the shared classes and default labels; .pf-agd-idcard-copy and
+ *       the profile.agents.idcard.copyGaii/copied keys are gone.
  *   v3.0.0 -- 2026-07-12 -- ID-card treatment: each board mini-card reveals a full agent
  *     identity plate on hover/focus (labelled GAII + Global AI Instance Identifier, issued
  *     date, last seen, tasks done/active/failed, messages, trust, morsels, issuer node,
@@ -24,18 +29,19 @@ import { useMemo, useState } from 'preact/hooks';
 import htm from 'htm';
 import { t } from '/js/i18n.js';
 import { CopyButton } from '/components/CopyButton.js';
-import { detectAgentState, getStateColor } from './state-detector.js';
+import { agentState, agentBucket, agentRank, getStateColor } from './state-detector.js';
 
 const html = htm.bind(h);
 
-// Detailed states collapse into four glanceable buckets for the legend/filter.
-const BUCKET_OF = { production: 'online', idle: 'quiet', new: 'onboarding', onboarding: 'onboarding', problem: 'issue' };
-const BUCKET_RANK = { issue: 0, onboarding: 1, online: 2, quiet: 3 };
+// The buckets and their order come from the server (services/agent-health.ts) with the agent. The
+// local BUCKET_OF map had no `system` key, so `BUCKET_OF[state] || 'quiet'` filed every internal
+// agent under "quiet" — on the one surface that exists to be read at a glance.
 const BUCKETS = [
   { id: 'online', color: 'var(--success)', key: 'profile.agents.board.online' },
   { id: 'quiet', color: 'var(--text-muted)', key: 'profile.agents.board.quiet' },
   { id: 'onboarding', color: 'var(--warning)', key: 'profile.agents.board.onboarding' },
   { id: 'issue', color: 'var(--danger)', key: 'profile.agents.board.issue' },
+  { id: 'internal', color: 'var(--text-muted)', key: 'profile.agents.board.internal' },
 ];
 
 export default function SharedBoard({ agents, onboardings, onAgentClick }) {
@@ -43,18 +49,20 @@ export default function SharedBoard({ agents, onboardings, onAgentClick }) {
 
   // Hooks must run unconditionally before any early return (Rules of Hooks).
   const agentStates = useMemo(() => {
-    const rows = (agents || []).map(agent => {
-      const state = detectAgentState(agent, onboardings?.[agent.name]);
-      return { agent, state, bucket: BUCKET_OF[state] || 'quiet', onboarding: onboardings?.[agent.name] };
-    });
+    const rows = (agents || []).map(agent => ({
+      agent,
+      state: agentState(agent),
+      bucket: agentBucket(agent),
+      onboarding: onboardings?.[agent.name],
+    }));
     // Problems first, onboarding second, then the rest — an issue must not drown.
-    rows.sort((a, b) => (BUCKET_RANK[a.bucket] ?? 9) - (BUCKET_RANK[b.bucket] ?? 9));
+    rows.sort((a, b) => agentRank(a.agent) - agentRank(b.agent));
     return rows;
   }, [agents, onboardings]);
 
   const counts = useMemo(() => {
-    const c = { online: 0, quiet: 0, onboarding: 0, issue: 0 };
-    for (const r of agentStates) c[r.bucket]++;
+    const c = { online: 0, quiet: 0, onboarding: 0, issue: 0, internal: 0 };
+    for (const r of agentStates) c[r.bucket] = (c[r.bucket] ?? 0) + 1;
     return c;
   }, [agentStates]);
 
@@ -206,11 +214,7 @@ function renderIdCard(agent) {
             <strong>${t('profile.agents.idcard.gaiiLabel')}</strong> · ${t('profile.agents.idcard.gaiiFull')}
           </span>
           <span onClick=${(e) => e.stopPropagation()}>
-            <${CopyButton}
-              text=${gaii}
-              className="pf-agd-idcard-copy"
-              label=${t('profile.agents.idcard.copyGaii')}
-              copiedLabel=${'✅ ' + t('profile.agents.idcard.copied')} />
+            <${CopyButton} text=${gaii} className="btn-ghost btn-sm btn-copy-inline" />
           </span>
         </div>
         <code class="pf-agd-idcard-gaii-value">${gaii}</code>

package/dist/public/views/profile/agents/state-detector.js

@@ -1,9 +1,26 @@
 /**
  * @file state-detector.js
- * @description Determines agent state from onboarding record and agent data.
- *   States: 'new' | 'onboarding' | 'problem' | 'idle' | 'production'
- *   Also provides default tab selection and state color mapping.
+ * @description Presentation for an agent's state — the default tab and the colour. It does NOT
+ *   decide the state any more: the server does, in src/services/agent-health.ts, and every agent in
+ *   /v1/agents carries a `health` object.
+ *
+ *   It used to decide it here, and could not do so correctly. Two of its three "problem" conditions
+ *   read fields the response has never contained — `webhookFailCount` was not projected at all, and
+ *   `previousReadinessLevel` is not a field on any record in the system — so a broken push channel
+ *   showed as healthy and "problem" silently meant only "not seen in 24 h". Its readiness ladder
+ *   named a level the node never produces (`advanced`) and omitted the one it does (`expert`),
+ *   which inverted the comparison at the top. None of that was visible from this file.
+ *
+ *   States: 'system' | 'new' | 'onboarding' | 'problem' | 'idle' | 'production' — unchanged, which
+ *   is why every locale key and colour below still applies.
+ * @structure agentState(agent) · getDefaultTab(state) · getStateColor(state)
+ * @usage
+ *   import { agentState, getDefaultTab } from './state-detector.js';
+ *   const state = agentState(agent);
  * @version-history
+ *   v2.0.0 -- 2026-08-09 -- Renders the server's verdict instead of computing its own (V1). Removed
+ *     detectAgentState(), READINESS_RANKS, readinessRank() and isStale(); the three dead conditions
+ *     went with them.
  *   v1.3.0 -- 2026-05-24 -- Remove unused getStateLabel() export (audit fix #7)
  *   v1.2.1 -- 2026-05-24 -- Document idle state in design spec, align with audit findings
  *   v1.2.0 -- 2026-05-24 -- Add idle state for inactive production agents
@@ -12,25 +29,24 @@
  */
 
 /**
- * Detect agent state from onboarding record and agent data.
- * Checked in priority order: new > onboarding > problem > idle > production.
+ * The agent's state as the server computed it.
+ *
+ * `health` is always present on /v1/agents. The fallback exists for the one case where it is not —
+ * an object assembled locally before a refresh — and says 'new' rather than guessing 'production',
+ * because claiming an agent is fine is the failure that matters.
  */
-export function detectAgentState(agent, onboarding) {
-  // System agents (Secretary, company Secretary, specialists) are auto-provisioned and never run the
-  // device-auth "Hello Integration" onboarding — so they must never show the 0/11 "onboarding not
-  // started" state. Any `system:*` tag marks an internal agent.
-  if ((agent.tags || []).some((tag) => typeof tag === 'string' && tag.startsWith('system:'))) return 'system';
-  if (!onboarding || onboarding.status === 'pending' || onboarding.status === 'not_started') return 'new';
-  if (onboarding.status === 'in_progress') return 'onboarding';
+export function agentState(agent) {
+  return agent?.health?.state ?? 'new';
+}
 
-  const webhookDown = (agent.webhookFailCount ?? 0) >= 5;
-  const noTelemetry = !agent.last_seen || isStale(agent.last_seen, 24 * 60);
-  const readinessDrop = onboarding.previousReadinessLevel && onboarding.readinessLevel
-    && readinessRank(onboarding.readinessLevel) < readinessRank(onboarding.previousReadinessLevel);
-  if (webhookDown || noTelemetry || readinessDrop) return 'problem';
+/** The fleet-board bucket ('issue' | 'onboarding' | 'online' | 'quiet' | 'internal'). */
+export function agentBucket(agent) {
+  return agent?.health?.bucket ?? 'onboarding';
+}
 
-  if (!agent.last_seen || isStale(agent.last_seen, 60)) return 'idle';
-  return 'production';
+/** Sort key: lower is more urgent. An issue must never drown in a long list. */
+export function agentRank(agent) {
+  return agent?.health?.rank ?? 1;
 }
 
 export function getDefaultTab(state) {
@@ -56,13 +72,3 @@ export function getStateColor(state) {
     default: return 'var(--text-muted)';
   }
 }
-
-const READINESS_RANKS = { none: 0, basic: 1, standard: 2, advanced: 3, full: 4 };
-function readinessRank(level) {
-  return READINESS_RANKS[level] ?? 0;
-}
-
-function isStale(isoDate, thresholdMinutes) {
-  const diff = Date.now() - new Date(isoDate).getTime();
-  return diff > thresholdMinutes * 60 * 1000;
-}

package/dist/public/views/profile/agents/tab-agent-config.js

@@ -14,6 +14,9 @@
  *     red section-title.
  *   v1.3.0 -- 2026-06-10 -- AgentDangerZone at the tab bottom: typed-agent-name gate +
  *     the shared confirm — replaces the Delete button that sat on every tab's footer.
+ *   v1.5.0 -- 2026-08-08 -- Copy labels now resolve from the shared common.copy / common.copied / common.copyPrompt /
+ *       common.copyLink / common.copyUrl keys; the per-view copy label keys this file used were
+ *       removed from both locales. Same words on screen.
  */
 
 import { h } from 'preact';
@@ -176,7 +179,7 @@ export default function TabAgentConfig({ agent, agentName, showToast, onDeleteCl
 
   function handleCopy() {
     copyToClipboard(preview).then(() => {
-      showToast(t('profile.agents.detail.agent_config.copy'));
+      showToast(t('common.copy'));
     });
   }
 
@@ -264,7 +267,7 @@ export default function TabAgentConfig({ agent, agentName, showToast, onDeleteCl
             <div class="pf-agd-config-actions">
               ${!editing && html`
                 <button class="btn-outline btn-sm" onClick=${handleEdit}>${t('profile.agents.detail.agent_config.edit')}</button>
-                <button class="btn-outline btn-sm" onClick=${handleCopy}>${t('profile.agents.detail.agent_config.copy')}</button>
+                <button class="btn-outline btn-sm" onClick=${handleCopy}>${t('common.copy')}</button>
                 <button class="btn-outline btn-sm" onClick=${handleDownload}>${t('profile.agents.detail.agent_config.download')}</button>
               `}
             </div>

package/dist/public/views/profile/agents/tab-integration.js

@@ -4,6 +4,7 @@
  *   during onboarding or production status (connection, platform, readiness,
  *   identity, delivery log) after completion.
  * @version-history
+ *   v1.9.0 -- 2026-08-09 -- Reads the server's agent state instead of computing one.
  *   v1.8.0 -- 2026-07-17 -- Card scheme generalized: pf-agd-prod-grid renamed to the
  *     shared pf-agd-card-grid; production sections carry pf-agd-card / --full.
  *   v1.9.0 -- 2026-07-16 -- Mount folds webhook + delivery-log + onboarding-checklist into GET
@@ -37,6 +38,9 @@
  *     strengths/gaps, last validated, roles badge, platform version, bundle update, copy install cmd
  *   v1.3.0 -- 2026-05-24 -- Audit fix: always show delivery log section, add warn icon for step pills
  *   v1.2.0 -- 2026-05-24 -- Add delivery status indicator dot, show polling fallback interval
+ *   v1.10.0 -- 2026-08-08 -- Copy labels now resolve from the shared common.copy / common.copied / common.copyPrompt /
+ *       common.copyLink / common.copyUrl keys; the per-view copy label keys this file used were
+ *       removed from both locales. Same words on screen.
  */
 
 import { h } from 'preact';
@@ -46,7 +50,7 @@ import { onLiveUpdate } from '/lib/live-updates.js';
 import { t, tOr } from '/js/i18n.js';
 import { timeAgo } from '/js/utils.js';
 import { CopyButton } from '/components/CopyButton.js';
-import { detectAgentState } from './state-detector.js';
+import { agentState } from './state-detector.js';
 import { swallowed } from '/js/swallowed.js';
 import {
   getOnboarding, startOnboarding, getIntegrationOverview,
@@ -58,7 +62,7 @@ import {
 const html = htm.bind(h);
 
 export default function TabIntegration({ agent, onboarding, showToast, agentName }) {
-  const state = detectAgentState(agent, onboarding);
+  const state = agentState(agent);
   const [webhook, setWebhook] = useState(null);
   const [bundleVersion, setBundleVersion] = useState(null);
   const [deliveries, setDeliveries] = useState([]);
@@ -290,7 +294,7 @@ function renderOnboardingView(onboarding, agentName, handleRerun, rerunning, cur
             copiedLabel=${'✓ ' + t('profile.agents.detail.integration.installCommandCopied')} />
           <${CopyButton} text=${curlText} className="btn-outline btn-sm"
             label=${t('profile.agents.skillBundle.copyCurl')}
-            copiedLabel=${'✓ ' + t('profile.agents.copied')} />
+            />
           <a class="btn-outline btn-sm" href=${getSkillBundleUrl(agentName)} download>
             ${t('profile.agents.skillBundle.downloadZip')}
           </a>
@@ -438,7 +442,7 @@ function renderProductionView(agent, onboarding, webhook, bundleVersion, display
             copiedLabel=${'✓ ' + t('profile.agents.detail.integration.promptCopied')} />
           <${CopyButton} text=${curlText} className="btn-outline btn-sm"
             label=${t('profile.agents.skillBundle.reinstall')}
-            copiedLabel=${'✓ ' + t('profile.agents.copied')} />
+            />
           <button class="btn-outline btn-sm" onClick=${handleUpdateBundle} disabled=${updatingBundle}>
             ${updatingBundle ? '...' : t('profile.agents.detail.integration.update')}
           </button>

package/dist/public/views/profile/agents-tab.js

@@ -45,7 +45,7 @@
  *   v3.4.0 -- 2026-05-31 -- Drag-to-reorder agent bars (per-browser localStorage order, ungrouped/unfiltered list only) + pop-out button opening an agent in its own window (/v1/profile?solo=)
  *   v3.5.0 -- 2026-06-02 -- Component unification: replace 4 bespoke copy-prompt buttons
  *     (connect command, MCP onboarding, manual agent prompt, task-runner prompt) with the
- *     canonical <CopyButton> (className="copy-prompt-btn" preserves appearance); removed the
+ *     canonical <CopyButton> (className="btn-primary" preserves appearance); removed the
  *     now-dead copiedAction state + markCopied helper.
  *   v3.8.0 -- 2026-06-10 -- "Group by: Tag" becomes the default once any agent carries tags
  *     (never overrides a user-picked grouping); unseen-change tracking drops memory churn and
@@ -61,13 +61,14 @@
  *     active tasks already fetched in loadData, so no extra requests); clicking a
  *     row deep-links into that agent's Tasks tab and auto-opens the task
  *     (expandedAgent + deepLink → AgentCard preSelectedTab/openTaskId).
+ *   v3.9.0 -- 2026-08-08 -- Copy control unified: the bespoke .copy-prompt-btn is the shared .btn-primary, whose
+ *       .copied state now lives in theme.css. Copy labels come from the shared common.* keys.
  */
 import { h } from 'preact';
 import { useState, useEffect, useRef } from 'preact/hooks';
 import htm from 'htm';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
-import { escHtml } from '/js/utils.js';
 import { CopyButton } from '/components/CopyButton.js';
 import { Spinner } from './shared.js';
 import { apiGet, apiPost, apiPatch } from '/js/api.js';
@@ -75,7 +76,7 @@ import { listAgents, updateAgentScopes, deleteAgent, getAgentGroups, saveAgentGr
 import { getNodeUrl } from '/js/services/auth.js';
 import { useConfirm } from '/components/Modal.js';
 import SharedBoard from './agents/shared-board.js';
-import { SCOPE_TEMPLATES, templateLabel } from './agents/scope-config.js';
+import { AgentConsent } from '/components/AgentConsent.js';
 import { buildAgentPrompt, buildTaskRunnerPrompt, buildMcpOnboardingPrompt, PLATFORMS, PLATFORM_KEYS, PLATFORM_LABELS } from './agents/connect-prompts.js';
 import { loadAgentOrder, saveAgentOrder, UNGROUPED_ID, loadCollapsedGroups, saveCollapsedGroups, loadSeen, saveSeen, markTabSeen, effectiveOrderedNames, popOutAgent } from './agents/tab-helpers.js';
 import { renderFilterBar, ActiveTasksPanel, renderAgentGroups } from './agents/groups-render.js';
@@ -94,8 +95,6 @@ export default function AgentsTab({ session, showToast, onStats }) {
   const [scopesModal, setScopesModal] = useState(null);
   const [expandedAgent, setExpandedAgent] = useState(null);
   const [pendingRequests, setPendingRequests] = useState([]);
-  const [approvingCode, setApprovingCode] = useState(null);
-  const [approvePreset, setApprovePreset] = useState('standard');
   const [connectExpanded, setConnectExpanded] = useState(false);
   const [pasteExpanded, setPasteExpanded] = useState(false);
   const [taskRunnerExpanded, setTaskRunnerExpanded] = useState(false);
@@ -390,8 +389,9 @@ export default function AgentsTab({ session, showToast, onStats }) {
     }
   }
 
-  async function handleApprove(userCode) {
-    const scopes = SCOPE_TEMPLATES[approvePreset] || SCOPE_TEMPLATES.standard;
+  // Scopes come from the shared consent panel, which owns the preset choice — this stays the
+  // approve action so the tab keeps its own toast, list update and reload.
+  async function handleApprove(userCode, scopes) {
     try {
       const resp = await apiPost('/v1/agents/verify', {
         user_code: userCode,
@@ -402,8 +402,6 @@ export default function AgentsTab({ session, showToast, onStats }) {
       if (resp?.ok !== false) {
         showToast(t('profile.agents.pendingRequests.approved'));
         setPendingRequests(prev => prev.filter(r => r.user_code !== userCode));
-        setApprovingCode(null);
-        setApprovePreset('standard');
         loadData();
       } else {
         showToast(resp?.error?.message || t('profile.agents.pendingRequests.approveError'), true);
@@ -457,58 +455,10 @@ export default function AgentsTab({ session, showToast, onStats }) {
     </div>
     <div class="section-desc">${t('profile.agents.desc')}</div>
 
-    ${pendingRequests.length > 0 && html`
-      <div class="agent-cta mb-1">
-        <div class="section-title">${t('profile.agents.pendingRequests.title')}</div>
-        <p>${t('profile.agents.pendingRequests.desc')}</p>
-        ${pendingRequests.map(req => html`
-          <div class="card mt-1 p-1" key=${req.user_code}>
-            <div class="flex-row mb-half">
-              <span class="badge badge-info">${t('profile.agents.pendingRequests.waiting')}</span>
-              <span class="text-caption">${t('profile.agents.pendingRequests.expiresIn')}: ${Math.floor(req.expires_in / 60)}:${String(req.expires_in % 60).padStart(2, '0')}</span>
-            </div>
-            <div class="mb-half">
-              <div class="text-caption mb-half">${t('profile.agents.pendingRequests.agentName')}</div>
-              <div class="text-bold">${escHtml(req.agent_name)}${req.display_name ? ` (${escHtml(req.display_name)})` : ''}</div>
-            </div>
-            <div class="mb-half">
-              <div class="text-caption mb-half">${t('profile.agents.pendingRequests.code')}</div>
-              <div class="pf-device-code">${req.user_code}</div>
-            </div>
-            ${approvingCode === req.user_code ? html`
-              <div class="mb-half">
-                <div class="text-caption mb-half">${t('profile.agents.pendingRequests.scopeLevel')}</div>
-                <div class="flex-row pf-scope-presets">
-                  ${['readonly', 'standard', 'full'].map(p => html`
-                    <button class="${approvePreset === p ? 'btn-primary' : 'btn-outline'} pf-scope-preset-btn"
-                      onClick=${() => setApprovePreset(p)}>
-                      ${templateLabel(p)}
-                    </button>
-                  `)}
-                </div>
-              </div>
-              <div class="flex-row mt-1">
-                <button class="btn-success" onClick=${() => handleApprove(req.user_code)}>
-                  ${t('profile.agents.pendingRequests.confirmApprove')}
-                </button>
-                <button class="btn-outline" onClick=${() => setApprovingCode(null)}>
-                  ${t('profile.agents.pendingRequests.cancel')}
-                </button>
-              </div>
-            ` : html`
-              <div class="flex-row mt-1">
-                <button class="btn-success" onClick=${() => setApprovingCode(req.user_code)}>
-                  ${t('profile.agents.pendingRequests.approve')}
-                </button>
-                <button class="btn-danger-solid" onClick=${() => handleDeny(req.user_code)}>
-                  ${t('profile.agents.pendingRequests.deny')}
-                </button>
-              </div>
-            `}
-          </div>
-        `)}
-      </div>
-    `}
+    ${/* The approval panel is a SHARED component (components/AgentConsent.js): the remake's home
+          shows the same panel for the person's FIRST agent, and a copy here would drift from it.
+          Behaviour is unchanged — same requests, same scope presets, same verify calls. */''}
+    <${AgentConsent} requests=${pendingRequests} onApprove=${handleApprove} onDeny=${handleDeny} />
 
     ${connectExpanded && html`
       <div class="pf-agd-connect-content">
@@ -520,9 +470,9 @@ export default function AgentsTab({ session, showToast, onStats }) {
         <div class="agent-prompt-box"><code>npx aimeat connect --url ${getNodeUrl()} --owner ${session.owner}</code></div>
         <${CopyButton}
           text=${`npx aimeat connect --url ${getNodeUrl()} --owner ${session.owner}`}
-          className="copy-prompt-btn"
+          className="btn-primary"
           label=${t('profile.agents.copyCommand')}
-          copiedLabel=${'\u2705 ' + t('profile.agents.copied')} />
+          />
 
         <p class="mt-1 mb-half text-bold">${t('profile.agents.cliServe')}</p>
         <div class="agent-prompt-box"><code>npx aimeat connect serve</code></div>
@@ -534,9 +484,9 @@ export default function AgentsTab({ session, showToast, onStats }) {
         <div class="agent-prompt-box">${buildMcpOnboardingPrompt()}</div>
         <${CopyButton}
           text=${buildMcpOnboardingPrompt()}
-          className="copy-prompt-btn"
+          className="btn-primary"
           label=${t('profile.agents.copyAgentInstruction')}
-          copiedLabel=${'\u2705 ' + t('profile.agents.copied')} />
+          />
 
         <div class="pf-agent-divider mt-1">
           <button class="expand-btn" onClick=${() => setPlatExpand(!platExpand)}>
@@ -567,9 +517,9 @@ export default function AgentsTab({ session, showToast, onStats }) {
               <div class="agent-prompt-box">${buildAgentPrompt(session)}</div>
               <${CopyButton}
                 text=${buildAgentPrompt(session)}
-                className="copy-prompt-btn"
-                label=${t('profile.agents.copyPrompt')}
-                copiedLabel=${'\u2705 ' + t('profile.agents.copied')} />
+                className="btn-primary"
+                label=${t('common.copyPrompt')}
+                />
             </div>
           `}
         </div>
@@ -600,9 +550,9 @@ export default function AgentsTab({ session, showToast, onStats }) {
               <div class="agent-prompt-box">${buildTaskRunnerPrompt(session, taskRunnerName)}</div>
               <${CopyButton}
                 text=${buildTaskRunnerPrompt(session, taskRunnerName)}
-                className="copy-prompt-btn"
+                className="btn-primary"
                 label=${t('profile.agents.taskRunner.copyButton')}
-                copiedLabel=${'\u2705 ' + t('profile.agents.copied')} />
+                />
             </div>
           `}
         </div>

package/dist/public/views/profile/ai-setup-guide.js

@@ -15,6 +15,9 @@
  *   v2.0.0 — 2026-07-31 — Table fetched from GET /v1/ai-tools instead of an in-SPA copy, so
  *     the Experience Center reads the same one.
  *   v1.0.0 — 2026-07-31 — Initial.
+ *   v2.1.0 — 2026-08-08 — Copy labels now resolve from the shared common.copy / common.copied / common.copyPrompt /
+ *       common.copyLink / common.copyUrl keys; the per-view copy label keys this file used were
+ *       removed from both locales. Same words on screen.
  */
 import { h } from 'preact';
 import { useState, useEffect } from 'preact/hooks';
@@ -72,7 +75,8 @@ function ToolPicker({ tools, value, onPick }) {
       ${tools.map(tool => html`
         <button key=${tool.id} type="button" role="tab" aria-selected=${tool.id === value}
           class=${'ast-tool' + (tool.id === value ? ' ast-tool--active' : '')}
-          onClick=${() => onPick(tool.id)}>${tool.label}</button>`)}
+          onClick=${() => onPick(tool.id)}>${tool.label}${tool.recommended
+            ? html` <span class="ast-tool-reco">${tr('setup.recommendedBadge', 'recommended')}</span>` : null}</button>`)}
     </div>`;
 }
 
@@ -90,7 +94,7 @@ function Params({ params }) {
             <div class="ast-param-value">
               ${v
                 ? html`<code class="ast-code">${v}</code><${CopyButton} text=${v} className="btn-ghost btn-sm"
-                    label=${tr('setup.copy', 'Copy')} copiedLabel=${tr('setup.copied', 'Copied')} />`
+                    label=${tr('common.copy', 'Copy')} copiedLabel=${tr('common.copied', 'Copied')} />`
                 : html`<span class="ast-param-empty">${tr('setup.leaveEmpty', 'leave empty')}</span>`}
             </div>
             ${prm.note ? html`<div class="ast-param-note">${prm.note}</div>` : null}
@@ -132,7 +136,7 @@ export function McpSetupGuide() {
         <div class="ast-cmd">
           <pre class="ast-cmd-text">${cmd}</pre>
           <${CopyButton} text=${cmd} className="btn-primary btn-sm"
-            label=${tr('setup.copyCmd', 'Copy the command')} copiedLabel=${tr('setup.copied', 'Copied')} />
+            label=${tr('setup.copyCmd', 'Copy the command')} copiedLabel=${tr('common.copied', 'Copied')} />
         </div>` : null}
 
       <${Params} params=${tool.mcp.params} />