pi-roundtable-web 0.23.2 → 0.24.0

package/src/console-api.ts

@@ -81,6 +81,8 @@ export interface ConsolePorts {
 	presentation?: ConsolePresentation;
 	mountPath?: string;
 	look?: "modern" | "camelot";
+	/** The host's six skin tones, which the page draws every character with. */
+	characterSkins?: readonly string[];
 	/** Present when the owner app is served: its rooms' key prefix, for the page. */
 	app?: { surface: string; protocol: string };
 }
@@ -245,6 +247,9 @@ export class ConsoleApi {
 			...(features?.cleanup ? { cleanup: true } : {}),
 			...(connectorAdminUrl ? { connectorAdminUrl } : {}),
 			look: this.#ports.look ?? "modern",
+			...(this.#ports.characterSkins
+				? { characterSkins: [...this.#ports.characterSkins] }
+				: {}),
 			...(this.#ports.mountPath ? { mountPath: this.#ports.mountPath } : {}),
 			...(this.#ports.app ? { app: this.#ports.app } : {}),
 		};

package/src/i18n/zh-tw.ts

@@ -25,6 +25,95 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	Settings: "設定",
 	More: "更多",
 
+	// 檔案
+	Files: "檔案",
+	"this place is read-only": "此區唯讀",
+	"inside .git": ".git 內的檔案",
+	"in the trash": "垃圾桶內的檔案",
+	"a link": "連結",
+	"binary file": "二進位檔",
+	"too large": "檔案太大",
+	"not UTF-8": "不是 UTF-8",
+	"Agents' workspace": "夥伴工作區",
+	Scratch: "暫存區",
+	Path: "路徑",
+	"This folder is empty": "這個資料夾是空的",
+	"Show or hide {name}": "展開或收合 {name}",
+	"Outside the workspace": "連到工作區外",
+	"Only the first 2,000 items are listed": "只列出前 2,000 項",
+	"No files yet": "還沒有檔案",
+	"Not a regular file": "不是一般檔案",
+	"Actions for {name}": "{name} 的操作",
+	Saved: "已存檔",
+	Find: "尋找",
+	Replace: "取代",
+	next: "下一個",
+	previous: "上一個",
+	all: "全部",
+	"match case": "區分大小寫",
+	regexp: "正規表示式",
+	"by word": "整個單字",
+	replace: "取代",
+	"replace all": "全部取代",
+	close: "關閉",
+	"Read only: {reason}": "唯讀：{reason}",
+	"File menu": "檔案選單",
+	"This file is gone": "這個檔案已經不見了",
+	"A partner is changing this file": "夥伴正在改這個檔案",
+	"Reload (discard my edits)": "重新載入（放棄我的修改）",
+	"This file is too large to show here.": "這個檔案太大，無法在這裡顯示。",
+	"This file is not text, so it cannot be shown here.":
+		"這個檔案不是文字檔，無法在這裡顯示。",
+	"This browser cannot show this file.": "這個瀏覽器無法顯示這個檔案。",
+	"Fit to window": "符合視窗大小",
+	"Show at full size": "以原始大小顯示",
+	Open: "開啟",
+	Editing: "編輯中",
+	Undo: "復原",
+	Redo: "重做",
+	Tab: "Tab",
+	"Do not wrap lines": "不要自動換行",
+	"Wrap lines": "自動換行",
+	"This file changed while you were editing": "你編輯時，這個檔案被改了",
+	"Someone deleted it. Your text has not been saved.":
+		"有人把它刪除了。你的內容還沒有存檔。",
+	"Your text has not been saved. What should happen to it?":
+		"你的內容還沒有存檔。要怎麼處理？",
+	"Copy my text": "複製我的內容",
+	"Save mine as a new file": "存成新檔案",
+	"Save mine anyway": "仍用我的版本覆蓋",
+	"Replace the partner's changes?": "要蓋掉夥伴的修改嗎？",
+	"The file has been changed since you opened it. Saving yours writes over those changes.":
+		"你開啟後，這個檔案又被改過。存下你的版本會蓋掉那些修改。",
+	"Unsaved changes, leave?": "還沒存檔，要離開嗎？",
+	"Your edits to {name} have not been saved.": "你對 {name} 的修改還沒有存檔。",
+	Rename: "重新命名",
+	"New folder": "新增資料夾",
+	"New file": "新增檔案",
+	"Use a name without slashes.": "名稱不能含有斜線。",
+	Renamed: "已重新命名",
+	Created: "已建立",
+	Create: "建立",
+	Trash: "垃圾桶",
+	"The trash is empty": "垃圾桶是空的",
+	Restored: "已還原",
+	"The folder it was in is gone.": "它原本所在的資料夾已經不見了。",
+	Restore: "還原",
+	"Delete {name} for good": "永久刪除 {name}",
+	"Delete for good?": "要永久刪除嗎？",
+	"Delete for good": "永久刪除",
+	"“{name}” will be removed and cannot be brought back.":
+		"「{name}」會被永久移除，無法復原。",
+	"Read only": "唯讀",
+	Back: "返回",
+	Place: "位置",
+	Folders: "資料夾",
+	"Move to the trash?": "要移到垃圾桶嗎？",
+	"Moved to the trash": "已移到垃圾桶",
+	"“{name}” goes to the trash, where you can bring it back.":
+		"「{name}」會移到垃圾桶，之後可以還原。",
+	"Resize the folder list": "調整資料夾列表的寬度",
+
 	// 錯誤邊界
 	Reload: "重新載入",
 	"Something went wrong": "發生了一些問題",
@@ -103,6 +192,7 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	Accessory: "配件",
 	Idle: "閒置",
 	Thinking: "思考中",
+	"Thinking level": "思考強度",
 	Working: "工作中",
 	"Waiting for you": "等你回應",
 	Done: "完成",
@@ -226,14 +316,12 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	Yesterday: "昨天",
 
 	// 夥伴
-	"Back to the room": "回到聊天室",
 	"Class, colors and parts. The picture here, in the rooms and in Discord all follow it.":
 		"職業、配色與部件。這裡、聊天室與 Discord 的圖像都會跟著改變。",
 	"Follow the assistant (automatic)": "跟隨助理（自動）",
 	"Follow the assistant": "跟隨助理",
 	Look: "造型",
 	Name: "名稱",
-	Profile: "個人檔案",
 	Prompt: "提示詞",
 	"Runs on {model}, thinking {thinking}": "使用 {model}，思考程度 {thinking}",
 	"Saved.": "已儲存。",
@@ -377,10 +465,42 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	"Turn on yolo mode": "開啟 Yolo 模式",
 	"Working…": "處理中…",
 
+	// 長按與右鍵選單
+	"Edit agent": "編輯夥伴",
+	"Change look": "換外觀",
+	"Notifications are off": "通知已關閉",
+	"Notifications are on for {name}": "已開啟{name}的通知",
+	"Notifications are off for {name}": "已關閉{name}的通知",
+	"Push this room's posts to every owner's devices. A card that waits for you is always pushed.":
+		"把這個聊天室的發言推送到每位擁有者的裝置。等你處理的卡片一律會推送。",
+	"Full screen": "全螢幕",
+	"Review changes": "檢視變更",
+	"Back to editing": "繼續編輯",
+	"Lines: {added} added, {removed} removed":
+		"新增 {added} 行、移除 {removed} 行",
+	Added: "新增",
+	Removed: "移除",
+	Off: "關閉",
+	Minimal: "最低",
+	Low: "低",
+	Medium: "中",
+	High: "高",
+	"Very high": "極高",
+	"Copy as Markdown": "複製為 Markdown",
+	"Quote reply": "引用回覆",
+	"Select text": "選取文字",
+	Share: "分享",
+	"Agent profile": "夥伴資料",
+	"Copy details": "複製細節",
+	Download: "下載",
+	"Could not copy.": "無法複製。",
+	"Could not share.": "無法分享。",
+
 	// 聊天室列表
 	Agents: "夥伴",
 	"Dispatch threads": "派工討論串",
 	"Find a room": "尋找聊天室",
+	"Switch rooms": "切換聊天室",
 	Group: "群組",
 	Groups: "群組",
 	Home: "首頁",
@@ -469,6 +589,12 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 
 	// 圓桌
 	"Reset view": "重設視角",
+	Log: "記錄",
+	"Hide the message box": "收起對話框",
+	"Show the message box": "展開對話框",
+	"Back to the whole table": "回到整張圓桌",
+	You: "你",
+	"Tap to show the whole message": "點一下顯示整段訊息",
 
 	// 對話記錄
 	"(empty)": "（空白）",
@@ -491,10 +617,43 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	"The body is not JSON.": "內容不是 JSON。",
 	"The body is not an object.": "內容不是物件。",
 	"Only an owner may do this.": "只有擁有者可以這麼做。",
+	"That path is not allowed.": "不允許這個路徑。",
+	"There is no such place.": "沒有這個位置。",
+	"There is no such file or folder.": "沒有這個檔案或資料夾。",
+	"That is not a folder.": "這不是資料夾。",
+	"That is a folder, not a file.": "這是資料夾，不是檔案。",
+	"That is the top folder, which cannot be changed.":
+		"這是最上層的資料夾，不能更動。",
+	"That points outside the workspace.": "這連到工作區外面。",
+	"That is not a regular file.": "這不是一般檔案。",
+	"That is a link; open the file it points to.":
+		"這是連結；請開啟它指向的檔案。",
+	"This place is read-only.": "這個位置是唯讀的。",
+	"Files inside .git are read-only.": ".git 內的檔案是唯讀的。",
+	"The trash cannot be changed this way.": "垃圾桶不能這樣更動。",
+	"This file is not text, so it cannot be edited.":
+		"這個檔案不是文字檔，無法編輯。",
+	"This file is not UTF-8 text, so it cannot be edited.":
+		"這個檔案不是 UTF-8 文字，無法編輯。",
+	"This file is too large.": "這個檔案太大了。",
+	"The text is too large to save (1 MiB at most).":
+		"文字太大，無法存檔（最多 1 MiB）。",
+	"A folder cannot be moved into itself.": "資料夾不能移進它自己裡面。",
+	"That cannot be moved to another disk.": "這不能移到另一個磁碟。",
+	"The server is not allowed to change that.": "伺服器沒有權限更動這個項目。",
+	"This file changed while you were editing.": "你編輯時，這個檔案被改了。",
+	"This file is gone.": "這個檔案已經不見了。",
+	"Something with that name is already there.": "已經有同名的項目了。",
+	"text must be text.": "text 必須是文字。",
+	"baseHash must be the hash the file was read with.":
+		"baseHash 必須是讀取檔案時取得的雜湊值。",
+	"kind must be file or dir.": "kind 必須是 file 或 dir。",
+	"from and to must be paths.": "from 與 to 必須是路徑。",
 	"Method not allowed.": "不允許使用這個方法。",
 	"There is no such API.": "沒有這個 API。",
 	"before and limit must be whole numbers.": "before 與 limit 必須是整數。",
 	"Give yolo or longRunning.": "請提供 yolo 或 longRunning。",
+	"muted must be true or false.": "muted 必須是 true 或 false。",
 	"This pane is not served.": "沒有提供這個頁面。",
 	"The schedule id is a number.": "排程 ID 必須是數字。",
 	"There is no such schedule.": "找不到這個排程。",
@@ -613,42 +772,42 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	// 服裝
 	"character.outfit.robe": "長袍",
 	"character.outfit.scholar": "學者服",
-	"character.outfit.armor": "盔甲",
+	"character.outfit.armor": "鎖子甲",
 	"character.outfit.plate": "板甲",
-	"character.outfit.apron": "圍裙",
-	"character.outfit.chef": "廚師服",
+	"character.outfit.apron": "鐵匠皮圍裙",
+	"character.outfit.chef": "廚工束衣",
 	"character.outfit.cloak": "斗篷",
 	"character.outfit.tunic": "束腰外衣",
-	"character.outfit.coat": "大衣",
-	"character.outfit.overalls": "吊帶工作褲",
-	"character.outfit.vest": "背心",
+	"character.outfit.coat": "緊身上衣",
+	"character.outfit.overalls": "工匠皮甲背心",
+	"character.outfit.vest": "絮縫短襖",
 	"character.outfit.habit": "修士服",
 	"character.outfit.surplice": "法衣",
 	"character.outfit.motley": "小丑裝",
-	"character.outfit.sailor": "水手服",
+	"character.outfit.sailor": "水手束衣",
 	// 帽子
 	"character.hat.none": "無帽子",
 	"character.hat.wizard": "巫師帽",
 	"character.hat.helm": "頭盔",
-	"character.hat.mortar": "學士帽",
-	"character.hat.goggcap": "護目鏡帽",
+	"character.hat.mortar": "學者四角帽",
+	"character.hat.goggcap": "皮護耳帽",
 	"character.hat.hood": "兜帽",
-	"character.hat.beret": "貝雷帽",
-	"character.hat.goggles": "護目鏡",
+	"character.hat.beret": "夏普倫頭巾帽",
+	"character.hat.goggles": "尖頂軟帽",
 	"character.hat.coif": "緊身頭巾",
-	"character.hat.tallcap": "高帽",
-	"character.hat.tricorn": "三角帽",
+	"character.hat.tallcap": "勃艮第氈帽",
+	"character.hat.tricorn": "朝聖者闊邊帽",
 	"character.hat.turban": "纏頭巾",
 	"character.hat.softcap": "軟帽",
-	"character.hat.hardhat": "安全帽",
+	"character.hat.hardhat": "鐵製圓盔",
 	"character.hat.wreath": "花冠",
-	"character.hat.toque": "廚師帽",
+	"character.hat.toque": "廚工亞麻軟帽",
 	"character.hat.kettle": "鐵壺盔",
-	"character.hat.cavalier": "騎士帽",
+	"character.hat.cavalier": "羽飾帽",
 	"character.hat.cowl": "風帽",
 	"character.hat.headband": "髮帶",
-	"character.hat.fcap": "平頂帽",
-	"character.hat.sailor": "水手帽",
+	"character.hat.fcap": "獵人帽",
+	"character.hat.sailor": "草帽",
 	"character.hat.jester": "小丑帽",
 	"character.hat.winghelm": "翼盔",
 	// 道具
@@ -658,14 +817,14 @@ export const ZH_TW: Readonly<Record<string, string>> = {
 	"character.prop.hammer": "鎚子",
 	"character.prop.bow": "弓",
 	"character.prop.lute": "魯特琴",
-	"character.prop.flask": "燒瓶",
+	"character.prop.flask": "煉金小瓶",
 	"character.prop.quill": "羽毛筆",
 	"character.prop.tome": "典籍",
 	"character.prop.bell": "鈴鐺",
 	"character.prop.keys": "鑰匙",
-	"character.prop.map": "地圖",
-	"character.prop.telescope": "望遠鏡",
-	"character.prop.wrench": "扳手",
+	"character.prop.map": "海圖",
+	"character.prop.telescope": "星盤",
+	"character.prop.wrench": "圓規",
 	"character.prop.spade": "鏟子",
 	"character.prop.ladle": "長柄勺",
 	"character.prop.lantern": "提燈",

package/src/options.ts

@@ -1,4 +1,4 @@
-import { join } from "node:path";
+import { join, resolve } from "node:path";
 import type { ChannelKey, RoundtablePlugin } from "pi-roundtable";
 import { PluginError } from "pi-roundtable";
 import { PANES, type PaneName } from "./api-types.ts";
@@ -6,6 +6,7 @@ import {
 	DEFAULT_UPLOAD_MAX_BYTES,
 	UPLOAD_FRAMING_BYTES,
 } from "./app/uploads.ts";
+import { checkRoots, type WorkspaceRoot } from "./app/workspace-files.ts";
 import type { ConsoleFeatures, ConsolePresentation } from "./features.ts";
 import { isHostPattern } from "./push/endpoint.ts";
 import {
@@ -123,13 +124,36 @@ export interface WebConsoleOptions {
 	/** Hash routes by default; path routes retain links such as /console/skills. */
 	routing?: "hash" | "path";
 	/**
-	 * The panes to serve, in the order the page lists them; default `rooms`, `table`, `overview`,
-	 * `schedules`, `conversations`, `notes`. `rooms` is the owner app: the same agent team as on
-	 * Discord, in rooms of its own; `table` seats its agents at the round table and needs `rooms`.
+	 * The panes to serve, in the order the page lists them; default `rooms`, `table`, `workspace`,
+	 * `overview`, `schedules`, `conversations`, `notes`. `rooms` is the owner app: the same agent
+	 * team as on Discord, in rooms of its own; `table` seats its agents at the round table and
+	 * needs `rooms`; `workspace` browses and edits the agents' files and needs `rooms` and a
+	 * directory to show (the agents' own, or `workspace.roots`). The default list leaves
+	 * `workspace` out when there is no directory; an explicit list that names it must have one.
 	 * An explicit list is kept as written, so a host that listed the panes before 0.23 adds
-	 * `rooms`, `table` and `schedules` by hand.
+	 * `rooms`, `table` and `schedules` by hand, and one that listed them before 0.24 adds
+	 * `workspace`.
 	 */
 	panes?: readonly PaneName[];
+	/**
+	 * What the `workspace` pane shows. The agents' working directory (`agents`) and their scratch
+	 * directory (`scratch`, when the host has one) are shown without being named, from
+	 * `AGENTS.workspace`; `roots` adds more, or `agents: false` / `scratch: false` leaves one out.
+	 * A root must not be, or contain, the host's `dataDir`, which holds the sessions and keys.
+	 */
+	workspace?: {
+		/** More directories to show: an `id` (a lower-case word), a `label`, an absolute `dir`, and whether the owner may change files in it (default false). */
+		roots?: readonly {
+			id: string;
+			label: string;
+			dir: string;
+			writable?: boolean;
+		}[];
+		/** Leave the agents' working directory out of the pane; default shown. */
+		agents?: boolean;
+		/** Leave the agents' scratch directory out of the pane; default shown when the host has one. */
+		scratch?: boolean;
+	};
 	/**
 	 * The key prefix of the app's rooms: `<surface>:agent.<name>` and `<surface>:group.<name>`.
 	 * A lower-case word that is not `discord`; default `app`. Rooms keep their conversations under
@@ -207,6 +231,14 @@ export interface ResolvedOptions {
 	listener: string;
 	routing: "hash" | "path";
 	panes: PaneName[];
+	/** Whether `panes` was written out, which makes a missing directory for the workspace pane an error. */
+	panesGiven: boolean;
+	/** The `workspace` option checked and filled in. */
+	workspace: {
+		roots: readonly WorkspaceRoot[];
+		agents: boolean;
+		scratch: boolean;
+	};
 	surface: string;
 	cardGraceSeconds: number;
 	uploadMaxBytes: number;
@@ -275,6 +307,7 @@ function checkPanes(panes: readonly PaneName[] | undefined): PaneName[] {
 		return [
 			"rooms",
 			"table",
+			"workspace",
 			"overview",
 			"schedules",
 			"conversations",
@@ -291,9 +324,65 @@ function checkPanes(panes: readonly PaneName[] | undefined): PaneName[] {
 		fail("the schedules pane needs the rooms pane, which serves its API");
 	if (panes.includes("table") && !panes.includes("rooms"))
 		fail("the table pane needs the rooms pane, whose agents it seats");
+	if (panes.includes("workspace") && !panes.includes("rooms"))
+		fail("the workspace pane needs the rooms pane, which serves its API");
 	return [...panes];
 }
 
+/**
+ * What no place of the files pane may be or contain: the host's data directory, and Pi's agent
+ * directory in its default place beside the sessions (`auth.json` lives there).
+ */
+export function protectedDirs(dataDir: string): string[] {
+	return [resolve(dataDir), resolve(dataDir, "pi")];
+}
+
+function checkWorkspace(
+	options: WebConsoleOptions,
+	dataDir: string,
+): ResolvedOptions["workspace"] {
+	const given = options.workspace;
+	if (given === undefined) return { roots: [], agents: true, scratch: true };
+	if (typeof given !== "object" || given === null)
+		return fail("workspace must be an object such as { roots: [...] }");
+	for (const key of ["agents", "scratch"] as const)
+		if (given[key] !== undefined && typeof given[key] !== "boolean")
+			fail(`workspace.${key} must be true or false`);
+	const list = given.roots ?? [];
+	if (!Array.isArray(list)) fail("workspace.roots must be a list");
+	const roots: WorkspaceRoot[] = list.map((root, index) => {
+		if (
+			typeof root !== "object" ||
+			root === null ||
+			typeof root.id !== "string" ||
+			typeof root.label !== "string" ||
+			!root.label.trim() ||
+			typeof root.dir !== "string" ||
+			(root.writable !== undefined && typeof root.writable !== "boolean")
+		)
+			return fail(
+				`workspace.roots[${index}] must be { id, label, dir, writable? } with text for the first three`,
+			);
+		return {
+			id: root.id,
+			label: root.label.trim(),
+			dir: root.dir,
+			writable: root.writable === true,
+		};
+	});
+	for (const reserved of ["agents", "scratch"])
+		if (roots.some((root) => root.id === reserved))
+			fail(
+				`workspace.roots may not use the id ${reserved}, which names the agents' own directory`,
+			);
+	checkRoots(roots, protectedDirs(dataDir));
+	return {
+		roots,
+		agents: given.agents !== false,
+		scratch: given.scratch !== false,
+	};
+}
+
 function checkAuth(options: WebConsoleOptions): ResolvedAuth {
 	const { auth, verifier } = options;
 	if (auth !== undefined && verifier !== undefined)
@@ -490,6 +579,8 @@ export function resolveOptions(options: WebConsoleOptions): ResolvedOptions {
 		listener: options.listener ?? "public",
 		routing: options.routing ?? "hash",
 		panes,
+		panesGiven: options.panes !== undefined,
+		workspace: checkWorkspace(options, options.dataDir ?? "data"),
 		surface: checkSurface(options.surface),
 		cardGraceSeconds: checkGrace(options.cardGraceSeconds),
 		uploadMaxBytes: checkUploadMax(options.uploadMaxBytes),
@@ -504,3 +595,55 @@ export function resolveOptions(options: WebConsoleOptions): ResolvedOptions {
 		presentation: options.presentation,
 	};
 }
+
+/** The directories the workspace pane shows: the agents' own, then the host's `workspace.roots`. */
+export function workspaceRootsOf(
+	settings: ResolvedOptions,
+	agents: { workDir: string; scratchDir?: string } | undefined,
+): WorkspaceRoot[] {
+	const roots: WorkspaceRoot[] = [];
+	if (agents && settings.workspace.agents)
+		roots.push({
+			id: "agents",
+			label: "Agents' workspace",
+			dir: agents.workDir,
+			writable: true,
+		});
+	if (agents?.scratchDir && settings.workspace.scratch)
+		roots.push({
+			id: "scratch",
+			label: "Scratch",
+			dir: agents.scratchDir,
+			writable: true,
+		});
+	return [...roots, ...settings.workspace.roots];
+}
+
+/**
+ * Roots the default pane list may show. A directory of the agents that holds the host's data would
+ * stop the host from starting after an upgrade that only added a pane, so such a root is left out,
+ * with the reason; the roots a host names itself are kept, and `checkRoots` fails on them.
+ */
+export function showableRoots(
+	roots: readonly WorkspaceRoot[],
+	guarded: readonly string[],
+): { roots: WorkspaceRoot[]; left: { id: string; reason: string }[] } {
+	const kept: WorkspaceRoot[] = [];
+	const left: { id: string; reason: string }[] = [];
+	for (const root of roots) {
+		if (root.id !== "agents" && root.id !== "scratch") {
+			kept.push(root);
+			continue;
+		}
+		try {
+			checkRoots([root], guarded);
+			kept.push(root);
+		} catch (error) {
+			left.push({
+				id: root.id,
+				reason: error instanceof Error ? error.message : String(error),
+			});
+		}
+	}
+	return { roots: kept, left };
+}

package/src/push/mutes.ts

@@ -0,0 +1,68 @@
+import type { SQL } from "bun";
+import type { Migration } from "pi-roundtable";
+
+/**
+ * The rooms whose owners asked for no push, one row per muted room in `web_push_muted_rooms`.
+ * A mute belongs to the room, not to a device or a person: every owner's devices follow it.
+ */
+export class PushMutes {
+	readonly #sql: SQL;
+
+	constructor(sql: SQL) {
+		this.#sql = sql;
+	}
+
+	static readonly migration: Migration = {
+		name: "web-push-muted-rooms",
+		up: async (sql) => {
+			await sql`
+				CREATE TABLE IF NOT EXISTS web_push_muted_rooms (
+					room text PRIMARY KEY,
+					muted_by text NOT NULL,
+					muted_at timestamptz NOT NULL DEFAULT now()
+				)`;
+		},
+	};
+
+	/** Whether the room is muted. */
+	async has(room: string): Promise<boolean> {
+		const rows: unknown[] = await this
+			.#sql`SELECT 1 FROM web_push_muted_rooms WHERE room = ${room}`;
+		return rows.length > 0;
+	}
+
+	/** Every muted room. */
+	async all(): Promise<Set<string>> {
+		const rows: { room: string }[] = await this
+			.#sql`SELECT room FROM web_push_muted_rooms`;
+		return new Set(rows.map((row) => row.room));
+	}
+
+	/** Mutes or unmutes a room; doing either twice leaves it as it is. */
+	async set(room: string, muted: boolean, by: string): Promise<void> {
+		if (muted)
+			await this.#sql`
+				INSERT INTO web_push_muted_rooms (room, muted_by) VALUES (${room}, ${by})
+				ON CONFLICT (room) DO NOTHING`;
+		else await this.#sql`DELETE FROM web_push_muted_rooms WHERE room = ${room}`;
+	}
+}
+
+/**
+ * Whether a room's push is held back. A dispatch thread has no mute of its own: it follows the room
+ * it was opened under, so `threadPrefix` (the keys of every thread start with it) maps a thread's key
+ * to its parent.
+ */
+export function roomMuted(
+	mutes: { has(room: string): Promise<boolean> },
+	threads: { get(id: string): Promise<{ parent: string } | undefined> },
+	threadPrefix: string,
+): (room: string) => Promise<boolean> {
+	return async (room) => {
+		if (!room.startsWith(threadPrefix)) return mutes.has(room);
+		const thread = await threads.get(
+			room.slice(threadPrefix.length - "thread.".length),
+		);
+		return mutes.has(thread?.parent ?? room);
+	};
+}

package/src/push/triggers.ts

@@ -28,6 +28,11 @@ export interface PushServiceOptions {
 	 * not pushed then, while a card is. Default never.
 	 */
 	quiet?: (at: number) => boolean;
+	/**
+	 * Whether the owners muted a room: an agent's post in it is not pushed, while a
+	 * card is. Default never.
+	 */
+	muted?: (room: string) => Promise<boolean>;
 }
 
 /** What a trigger says; the service shapes it into a notification. */
@@ -54,8 +59,8 @@ export function previewOf(text: string): string {
 /**
  * Decides when an owner's devices are pushed and what is said. Each trigger pushes only while no
  * page of an owner is in view, and only to owners: a device whose person is no owner any more is
- * skipped. In the quiet hours an agent's post and a notice wait for the owner to look; a card,
- * which holds up work, is still pushed. Delivery never throws into the code that raised the trigger.
+ * skipped. In the quiet hours an agent's post and a notice wait for the owner to look; in a room the
+ * owners muted only the post does. A card, which holds up work, is still pushed. Delivery never throws into the code that raised the trigger.
  */
 export class PushService {
 	readonly #options: PushServiceOptions;
@@ -77,14 +82,14 @@ export class PushService {
 	}
 
 	/** An agent posted in a room, such as a finished job's report or an answer nobody was watching for. */
-	reply(room: string, author: string, text: string): Promise<void> {
+	async reply(room: string, author: string, text: string): Promise<void> {
 		const now = this.#now();
-		if (this.#options.quiet?.(now)) return Promise.resolve();
+		if (this.#options.quiet?.(now)) return;
+		if (await this.#muted(room)) return;
 		const last = this.#repliedAt.get(room);
-		if (last !== undefined && now - last < REPLY_QUIET_MS)
-			return Promise.resolve();
+		if (last !== undefined && now - last < REPLY_QUIET_MS) return;
 		this.#repliedAt.set(room, now);
-		return this.#push({
+		await this.#push({
 			kind: "reply",
 			title: this.#options.preview ? author : "New reply",
 			text,
@@ -93,10 +98,14 @@ export class PushService {
 		});
 	}
 
-	/** A notice for one person, from the `notify` tool. */
-	notice(principalId: string, text: string, room?: string): Promise<void> {
-		if (this.#options.quiet?.(this.#now())) return Promise.resolve();
-		return this.#push({
+	/** A notice for one person, from the `notify` tool. A mute does not hold it back: a notice is addressed to the person, and it always names the home room. */
+	async notice(
+		principalId: string,
+		text: string,
+		room?: string,
+	): Promise<void> {
+		if (this.#options.quiet?.(this.#now())) return;
+		await this.#push({
 			kind: "notice",
 			title: "Notice",
 			text,
@@ -106,6 +115,16 @@ export class PushService {
 		});
 	}
 
+	/** Whether the room is muted; a mute that cannot be read leaves the owner's pushes on, with a warning. */
+	async #muted(room: string): Promise<boolean> {
+		try {
+			return (await this.#options.muted?.(room)) ?? false;
+		} catch (error) {
+			this.#options.logger.warn({ err: error, room }, "a mute was not read");
+			return false;
+		}
+	}
+
 	#now(): number {
 		return (this.#options.now ?? Date.now)();
 	}