diff --git a/changelog.d/1266-feishu-connector-row.changed.md b/changelog.d/1266-feishu-connector-row.changed.md
new file mode 100644
index 00000000..c05bfe41
--- /dev/null
+++ b/changelog.d/1266-feishu-connector-row.changed.md
@@ -0,0 +1 @@
+Feishu (Lark) is now connected on Settings → Connectors (左下角「连接应用」), not through the Secrets page or a config file. The one Feishu row offers two modes — a custom-bot webhook (outbound only, as before) or a self-built app with its long connection — and renders one field per credential: the App ID is kept in the record because it is not a secret, the App Secret only in `secrets.json`. App mode proves the pair with one tenant token, opens the socket from the row, answers a message back into the same Feishu chat as the app, and offers `Choose Bots`; the row also carries **允许的飞书用户** — nobody by default, the sender who was turned away listed with Allow, and a field to paste an `open_id` — so a stranger's message never spends the owner's tokens. `Disconnect` closes the socket and clears both credentials. A replayed `event_id` still lands once, and a half-saved pair dials nothing and says so. The app pair is no longer read from `FEISHU_APP_ID` on the Secrets page, and `feishu` is now a reserved capability name. ([#1266](https://github.com/ThinkFlowLab/FlyBot/issues/1266), [#1292](https://github.com/ThinkFlowLab/FlyBot/issues/1292))
diff --git a/core/client.js b/core/client.js
index 23298d0f..1905d180 100644
--- a/core/client.js
+++ b/core/client.js
@@ -321,6 +321,20 @@ var ZH = {
   "Posts into one Feishu group through a custom bot webhook": "通过自定义机器人 webhook 发到你的一个飞书群",
   "Feishu webhook URL": "飞书 webhook 地址",
   "Get a webhook URL in Feishu": "去飞书获取 webhook 地址",
+  "Custom bot webhook": "自定义机器人 webhook",
+  "App (long connection)": "自建应用（长连接）",
+  "Webhook URL": "Webhook 地址",
+  "App ID": "App ID",
+  "App Secret": "App Secret",
+  "Create a Feishu app": "去飞书创建自建应用",
+  "How to connect": "连接方式",
+  "Connected: app, over the long connection": "已连接：自建应用，走长连接",
+  "Connected: custom bot webhook": "已连接：自定义机器人 webhook",
+  "Who may talk to the Bots": "允许的飞书用户",
+  "Nobody yet. A message from anyone else starts no turn.": "还没有人。其他人发来的消息不会起 turn。",
+  "Paste an open_id to allow": "粘贴 open_id 来允许某个人",
+  "Feishu open_id": "飞书 open_id",
+  Block: "移除",
   "Message to send to Feishu": "要发到飞书的消息",
   "Type a message for the Feishu group": "输入要发到飞书群的消息",
   Send: "发送",
@@ -12514,7 +12528,7 @@ function ownBots(roster) {
   const me = roster?.self?.memberId;
   return (roster?.bots ?? []).filter((bot) => !bot.remote && (me === void 0 || me === null || bot.ownerId === void 0 || bot.ownerId === me));
 }
-var connectedConnectors = (roster) => (roster?.connectors ?? []).filter((connector) => connector.state !== "off" && connector.kind !== "sender");
+var connectedConnectors = (roster) => (roster?.connectors ?? []).filter((connector) => connector.state !== "off" && connector.kind !== "sender" && !(connector.kind === "channel" && connector.mode !== "app"));
 var isOn = (bot, id) => bot.connectors?.[id] !== false;
 function ownHint(bot, id) {
   return isOn(bot, id) ? t("On. This Bot can use it on every turn.") : t("Off. This Bot will not use it.");
@@ -15935,10 +15949,81 @@ var ABOUT = {
 function statusText2(connector) {
   if (connector.state === "connecting") return t("Connecting…");
   if (connector.state === "error") return t("Could not connect: {error}", { error: connector.error ?? "" });
+  if (connector.state === "ready" && connector.kind === "channel") {
+    return connector.mode === "app" ? t("Connected: app, over the long connection") : t("Connected: custom bot webhook");
+  }
   if (connector.state === "ready" && connector.apps?.length > 0) return t("Connected: {apps}", { apps: connector.apps.map(appName).join(", ") });
   if (connector.state === "ready") return connector.account ? t("Connected as {account}", { account: connector.account }) : t("Connected");
   return ABOUT[connector.id]?.() ?? "";
 }
+function CredentialField({ credential, value, onChange, onEnter, autoFocus }) {
+  const label = t(credential.label);
+  if (credential.masked) return (0, import_react37.createElement)(MaskedInput, { value, onChange, onEnter, label, autoFocus });
+  return (0, import_react37.createElement)(
+    "label",
+    { className: "bt-q-field" },
+    (0, import_react37.createElement)("input", {
+      className: "bt-input",
+      type: "text",
+      value,
+      "aria-label": label,
+      placeholder: label,
+      spellCheck: false,
+      autoFocus,
+      onChange: (event) => onChange(event.target.value),
+      onKeyDown: (event) => {
+        if (event.key === "Enter") onEnter?.();
+      }
+    })
+  );
+}
+function AllowedSenders({ connector, actions, run, busy }) {
+  const [openId, setOpenId] = (0, import_react37.useState)("");
+  const allowed = connector.allowed ?? [];
+  const refused = connector.inbound?.refusedSenders ?? [];
+  const allow = (id) => void run(actions.connectorAllow(connector.id, id));
+  return (0, import_react37.createElement)(
+    "div",
+    { className: "bt-connector-allowed" },
+    (0, import_react37.createElement)("span", { className: "bt-connector-person-title" }, t("Who may talk to the Bots")),
+    allowed.length === 0 && refused.length === 0 ? (0, import_react37.createElement)("span", { className: "bt-set-hint" }, t("Nobody yet. A message from anyone else starts no turn.")) : null,
+    allowed.map((entry) => (0, import_react37.createElement)(
+      "div",
+      { key: entry.openId, className: "bt-connector-person" },
+      (0, import_react37.createElement)("span", { className: "bt-connector-person-name" }, entry.name ?? entry.openId),
+      (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => void run(actions.connectorBlock(connector.id, entry.openId)) }, t("Block"))
+    )),
+    refused.map((entry) => (0, import_react37.createElement)(
+      "div",
+      { key: entry.openId, className: "bt-connector-person" },
+      (0, import_react37.createElement)("span", { className: "bt-connector-person-name" }, entry.name ?? entry.openId),
+      (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => allow(entry.openId) }, t("Allow"))
+    )),
+    (0, import_react37.createElement)(
+      "div",
+      { className: "bt-connector-form-row" },
+      (0, import_react37.createElement)("input", {
+        className: "bt-input",
+        type: "text",
+        value: openId,
+        spellCheck: false,
+        "aria-label": t("Feishu open_id"),
+        placeholder: t("Paste an open_id to allow"),
+        onChange: (event) => setOpenId(event.target.value),
+        onKeyDown: (event) => {
+          if (event.key === "Enter" && openId.trim() !== "") {
+            allow(openId.trim());
+            setOpenId("");
+          }
+        }
+      }),
+      (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || openId.trim() === "", onClick: () => {
+        allow(openId.trim());
+        setOpenId("");
+      } }, t("Allow"))
+    )
+  );
+}
 var APP_STATUS = { ready: () => t("Ready"), "sign-in": () => t("Needs sign-in") };
 function AppChip({ name, status, onRemove }) {
   const label = APP_STATUS[status]?.();
@@ -16021,6 +16106,14 @@ function ConnectorRow({ connector, roster, actions }) {
   };
   const gateway = connector.id === "composio";
   const sender = connector.kind === "sender";
+  const channel = connector.kind === "channel";
+  const modes = connector.modes ?? [];
+  const [mode, setMode] = (0, import_react37.useState)(() => connector.mode ?? modes[0]?.id);
+  const [values, setValues] = (0, import_react37.useState)({});
+  const chosen = modes.find((entry) => entry.id === mode) ?? modes[0];
+  const field = (name) => values[name] ?? "";
+  const setField = (name, value) => setValues((current) => ({ ...current, [name]: value }));
+  const filled = chosen !== void 0 && chosen.credentials.every((credential) => field(credential.name).trim() !== "");
   const [statuses, setStatuses] = (0, import_react37.useState)({});
   const appsKey = (connector.apps ?? []).join(",");
   (0, import_react37.useEffect)(() => {
@@ -16040,7 +16133,17 @@ function ConnectorRow({ connector, roster, actions }) {
   }, [gateway, connector.state, appsKey, picking]);
   const search = (0, import_react37.useCallback)((query) => actions.connectorAppSearch(connector.id, query, connector.state === "off" ? token : void 0), [connector.id, connector.state, token]);
   const connect = () => {
-    if (busy || token.trim() === "") return;
+    if (busy) return;
+    if (channel) {
+      if (chosen === void 0 || !filled) return;
+      const credentials = Object.fromEntries(chosen.credentials.map((credential) => [credential.name, field(credential.name)]));
+      void run(actions.connectorConnect(connector.id, { mode: chosen.id, credentials }), () => {
+        setValues({});
+        setForm(false);
+      });
+      return;
+    }
+    if (token.trim() === "") return;
     if (gateway && apps.length === 0) {
       setError(t("Pick at least one app"));
       return;
@@ -16059,9 +16162,11 @@ function ConnectorRow({ connector, roster, actions }) {
     void run(actions.connectorApps(connector.id, apps), () => setPicking(false));
   };
   const on = connector.state !== "off";
+  const canPost = sender || channel && connector.mode === "webhook";
+  const perBot = !sender && (!channel || connector.mode === "app");
   const Mark = MARKS[connector.id];
   const row = (0, import_react37.useRef)(null);
-  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}`);
+  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}:${mode}`);
   return (0, import_react37.createElement)(
     "div",
     { ref: row, className: "bt-connector", "data-state": connector.state },
@@ -16083,14 +16188,15 @@ function ConnectorRow({ connector, roster, actions }) {
           setApps(connector.apps ?? []);
           setPicking(true);
         } }, t("Choose apps")) : null,
-        on && !sender ? (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", "aria-expanded": bots, onClick: () => setBots((value) => !value) }, bots ? t("Done") : t("Choose Bots")) : null,
+        on && perBot ? (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", "aria-expanded": bots, onClick: () => setBots((value) => !value) }, bots ? t("Done") : t("Choose Bots")) : null,
         on ? (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => void run(actions.connectorDisconnect(connector.id)) }, t("Disconnect")) : form ? null : (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => setForm(true) }, t("Connect"))
       )
     ),
     on && gateway && !picking ? (0, import_react37.createElement)(AppStatusList, { apps: connector.apps ?? [], statuses }) : null,
-    on && !sender ? (0, import_react37.createElement)("span", { className: "bt-connector-uses" }, usageText(roster, connector.id)) : null,
+    on && perBot ? (0, import_react37.createElement)("span", { className: "bt-connector-uses" }, usageText(roster, connector.id)) : null,
     on && bots ? (0, import_react37.createElement)(ConnectorBots, { connector, roster, actions, run, SwitchRow }) : null,
-    on && sender ? (0, import_react37.createElement)(
+    on && channel && connector.mode === "app" ? (0, import_react37.createElement)(AllowedSenders, { connector, actions, run, busy }) : null,
+    on && canPost ? (0, import_react37.createElement)(
       "div",
       { className: "bt-connector-form" },
       (0, import_react37.createElement)("label", { className: "bt-q-field" }, (0, import_react37.createElement)("input", { className: "bt-input", type: "text", value: message, "aria-label": t("Message to send to Feishu"), placeholder: t("Type a message for the Feishu group"), onChange: (event) => setMessage(event.target.value) })),
@@ -16104,18 +16210,41 @@ function ConnectorRow({ connector, roster, actions }) {
     !on && form ? (0, import_react37.createElement)(
       "div",
       { className: "bt-connector-form" },
-      (0, import_react37.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react37.createElement)(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: sender ? t("Feishu webhook URL") : gateway ? t("Composio API key") : t("GitHub token"), autoFocus: true })),
+      channel ? (0, import_react37.createElement)("div", { className: "bt-states", role: "group", "aria-label": t("How to connect") }, modes.map((entry) => (0, import_react37.createElement)("button", {
+        key: entry.id,
+        type: "button",
+        className: "bt-state",
+        "aria-pressed": entry.id === chosen?.id,
+        onClick: () => {
+          setMode(entry.id);
+          setValues({});
+          setError(null);
+        }
+      }, t(entry.label)))) : null,
+      channel ? (chosen?.credentials ?? []).map((credential, index) => (0, import_react37.createElement)(CredentialField, {
+        key: credential.name,
+        credential,
+        value: field(credential.name),
+        onChange: (value) => setField(credential.name, value),
+        onEnter: connect,
+        autoFocus: index === 0
+      })) : (0, import_react37.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react37.createElement)(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: gateway ? t("Composio API key") : t("GitHub token"), autoFocus: true })),
       gateway ? (0, import_react37.createElement)(AppPicker, { apps, onChange: setApps, search: token.trim() === "" ? void 0 : search }) : null,
       (0, import_react37.createElement)(
         "div",
         { className: "bt-connector-form-row" },
-        (0, import_react37.createElement)("a", { className: "bt-connector-link", href: sender ? FEISHU_WEBHOOK_URL : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: "_blank", rel: "noopener noreferrer" }, sender ? t("Get a webhook URL in Feishu") : gateway ? t("Get a Composio API key") : t("Create a token on GitHub")),
+        (0, import_react37.createElement)(
+          "a",
+          { className: "bt-connector-link", href: channel ? chosen?.link ?? FEISHU_WEBHOOK_URL : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: "_blank", rel: "noopener noreferrer" },
+          channel ? t(chosen?.linkLabel ?? "Get a webhook URL in Feishu") : gateway ? t("Get a Composio API key") : t("Create a token on GitHub")
+        ),
         (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => {
           setForm(false);
           setToken("");
+          setValues({});
           setError(null);
         } }, t("Cancel")),
-        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || token.trim() === "", onClick: connect }, busy ? t("Connecting…") : t("Connect"))
+        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || (channel ? !filled : token.trim() === ""), onClick: connect }, busy ? t("Connecting…") : t("Connect"))
       )
     ) : null,
     on && gateway && picking ? (0, import_react37.createElement)(
@@ -20038,10 +20167,14 @@ function apply(ctx) {
     secretCancel: (requestId) => after(call("secret-cancel", { requestId })),
     secretUpdate: (name, scope) => after(call("secret-update", { name, scope })),
     secretDelete: (name) => after(call("secret-delete", { name })),
-    connectorConnect: (id, token, apps) => after(call("connector-connect", { id, token, ...apps !== void 0 ? { apps } : {} })),
+    // A channel's form sends { mode, credentials }, one field per credential; every other connector
+    // sends its one token. Both go out under the same endpoint.
+    connectorConnect: (id, token, apps) => after(call("connector-connect", typeof token === "object" && token !== null ? { id, ...token, ...apps !== void 0 ? { apps } : {} } : { id, token, ...apps !== void 0 ? { apps } : {} })),
     connectorApps: (id, apps) => after(call("connector-apps", { id, apps })),
     connectorAppSearch: (id, query, token) => call("connector-app-search", { id, query, ...token ? { token } : {} }),
     connectorAppStatus: (id) => call("connector-app-status", { id }),
+    connectorAllow: (id, openId) => after(call("connector-allow", { id, openId })),
+    connectorBlock: (id, openId) => after(call("connector-block", { id, openId })),
     connectorDisconnect: (id) => after(call("connector-disconnect", { id })),
     connectorRetry: (id) => after(call("connector-retry", { id })),
     connectorSend: (id, text) => after(call("connector-send", { id, text })),
diff --git a/core/src/client/connector-bots.js b/core/src/client/connector-bots.js
index 27fd56ed..068a6b8a 100644
--- a/core/src/client/connector-bots.js
+++ b/core/src/client/connector-bots.js
@@ -12,9 +12,12 @@ export function ownBots(roster) {
   return (roster?.bots ?? []).filter(bot => !bot.remote && (me === undefined || me === null || bot.ownerId === undefined || bot.ownerId === me))
 }
 
-// Connectors that give a Bot tools. A sender (#1263) has none: a per-Bot switch for it would be a
-// choice that never changes anything, so it is not offered.
-export const connectedConnectors = roster => (roster?.connectors ?? []).filter(connector => connector.state !== 'off' && connector.kind !== 'sender')
+// Connectors that give a Bot tools or a way in. A sender (#1263) has neither: a per-Bot switch for it
+// would be a choice that never changes anything, so it is not offered. A channel (#1266) offers the
+// switch only in app mode: a webhook-only Feishu row is today's sender and has nothing to share.
+export const connectedConnectors = roster => (roster?.connectors ?? []).filter(connector => connector.state !== 'off'
+  && connector.kind !== 'sender'
+  && !(connector.kind === 'channel' && connector.mode !== 'app'))
 
 // Only an explicit false turns it off; no record means on.
 export const isOn = (bot, id) => bot.connectors?.[id] !== false
diff --git a/core/src/client/connectors.js b/core/src/client/connectors.js
index 7d256412..0de3db10 100644
--- a/core/src/client/connectors.js
+++ b/core/src/client/connectors.js
@@ -41,11 +41,54 @@ const ABOUT = {
 function statusText(connector) {
   if (connector.state === 'connecting') return t('Connecting…')
   if (connector.state === 'error') return t('Could not connect: {error}', { error: connector.error ?? '' })
+  if (connector.state === 'ready' && connector.kind === 'channel') {
+    return connector.mode === 'app' ? t('Connected: app, over the long connection') : t('Connected: custom bot webhook')
+  }
   if (connector.state === 'ready' && connector.apps?.length > 0) return t('Connected: {apps}', { apps: connector.apps.map(appName).join(', ') })
   if (connector.state === 'ready') return connector.account ? t('Connected as {account}', { account: connector.account }) : t('Connected')
   return ABOUT[connector.id]?.() ?? ''
 }
 
+// One credential of the form (#1266): the definition says which fields a mode needs and whether a
+// field is masked. A masked one is the same field the Secrets page uses, so it never comes back.
+function CredentialField({ credential, value, onChange, onEnter, autoFocus }) {
+  const label = t(credential.label)
+  if (credential.masked) return h(MaskedInput, { value, onChange, onEnter, label, autoFocus })
+  return h('label', { className: 'bt-q-field' },
+    h('input', {
+      className: 'bt-input', type: 'text', value, 'aria-label': label, placeholder: label, spellCheck: false, autoFocus,
+      onChange: event => onChange(event.target.value),
+      onKeyDown: event => { if (event.key === 'Enter') onEnter?.() },
+    }))
+}
+
+// Who may talk to the Bots (#1266). Nobody until the owner allows someone: a stranger who messages
+// is one line here with Allow beside it, and the open_id can be pasted before anyone has written.
+function AllowedSenders({ connector, actions, run, busy }) {
+  const [openId, setOpenId] = useState('')
+  const allowed = connector.allowed ?? []
+  const refused = connector.inbound?.refusedSenders ?? []
+  const allow = id => void run(actions.connectorAllow(connector.id, id))
+  return h('div', { className: 'bt-connector-allowed' },
+    h('span', { className: 'bt-connector-person-title' }, t('Who may talk to the Bots')),
+    allowed.length === 0 && refused.length === 0
+      ? h('span', { className: 'bt-set-hint' }, t('Nobody yet. A message from anyone else starts no turn.'))
+      : null,
+    allowed.map(entry => h('div', { key: entry.openId, className: 'bt-connector-person' },
+      h('span', { className: 'bt-connector-person-name' }, entry.name ?? entry.openId),
+      h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => void run(actions.connectorBlock(connector.id, entry.openId)) }, t('Block')))),
+    refused.map(entry => h('div', { key: entry.openId, className: 'bt-connector-person' },
+      h('span', { className: 'bt-connector-person-name' }, entry.name ?? entry.openId),
+      h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => allow(entry.openId) }, t('Allow')))),
+    h('div', { className: 'bt-connector-form-row' },
+      h('input', {
+        className: 'bt-input', type: 'text', value: openId, spellCheck: false, 'aria-label': t('Feishu open_id'), placeholder: t('Paste an open_id to allow'),
+        onChange: event => setOpenId(event.target.value),
+        onKeyDown: event => { if (event.key === 'Enter' && openId.trim() !== '') { allow(openId.trim()); setOpenId('') } },
+      }),
+      h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || openId.trim() === '', onClick: () => { allow(openId.trim()); setOpenId('') } }, t('Allow'))))
+}
+
 // What a picked app needs before a Bot can use it, as Composio last answered.
 const APP_STATUS = { ready: () => t('Ready'), 'sign-in': () => t('Needs sign-in') }
 
@@ -122,6 +165,17 @@ function ConnectorRow({ connector, roster, actions }) {
   const gateway = connector.id === 'composio'
   // A sender posts through one webhook: no tools, so no per-Bot switch, and its own send field.
   const sender = connector.kind === 'sender'
+  // A channel (#1266) is one row with two modes: a custom-bot webhook (outbound only, today's
+  // behaviour) or a self-built app (the long connection in, answers out). The form is the mode's
+  // credential list, rendered field by field.
+  const channel = connector.kind === 'channel'
+  const modes = connector.modes ?? []
+  const [mode, setMode] = useState(() => connector.mode ?? modes[0]?.id)
+  const [values, setValues] = useState({})
+  const chosen = modes.find(entry => entry.id === mode) ?? modes[0]
+  const field = name => values[name] ?? ''
+  const setField = (name, value) => setValues(current => ({ ...current, [name]: value }))
+  const filled = chosen !== undefined && chosen.credentials.every(credential => field(credential.name).trim() !== '')
   const [statuses, setStatuses] = useState({})
   const appsKey = (connector.apps ?? []).join(',')
   // Asks Composio which picked apps are signed in, when the row is ready and again when the list changes.
@@ -133,7 +187,14 @@ function ConnectorRow({ connector, roster, actions }) {
   }, [gateway, connector.state, appsKey, picking])
   const search = useCallback(query => actions.connectorAppSearch(connector.id, query, connector.state === 'off' ? token : undefined), [connector.id, connector.state, token])
   const connect = () => {
-    if (busy || token.trim() === '') return
+    if (busy) return
+    if (channel) {
+      if (chosen === undefined || !filled) return
+      const credentials = Object.fromEntries(chosen.credentials.map(credential => [credential.name, field(credential.name)]))
+      void run(actions.connectorConnect(connector.id, { mode: chosen.id, credentials }), () => { setValues({}); setForm(false) })
+      return
+    }
+    if (token.trim() === '') return
     if (gateway && apps.length === 0) { setError(t('Pick at least one app')); return }
     void run(actions.connectorConnect(connector.id, token, gateway ? apps : undefined), () => { setToken(''); setForm(false) })
   }
@@ -143,9 +204,14 @@ function ConnectorRow({ connector, roster, actions }) {
     void run(actions.connectorApps(connector.id, apps), () => setPicking(false))
   }
   const on = connector.state !== 'off'
+  // A channel offers Send only while its webhook mode is live: app mode answers by itself.
+  const canPost = sender || (channel && connector.mode === 'webhook')
+  // Choose Bots is for what gives a Bot tools or a way in. A webhook-only channel has neither, so the
+  // switch would change nothing (acceptance 5, #1266).
+  const perBot = !sender && (!channel || connector.mode === 'app')
   const Mark = MARKS[connector.id]
   const row = useRef(null)
-  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}`)
+  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}:${mode}`)
   return h('div', { ref: row, className: 'bt-connector', 'data-state': connector.state },
     h('div', { className: 'bt-connector-head' },
       h('span', { className: 'bt-connector-mark' }, Mark ? h(Mark) : null),
@@ -155,25 +221,36 @@ function ConnectorRow({ connector, roster, actions }) {
       h('span', { className: 'bt-connector-actions' },
         connector.state === 'error' ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => void run(actions.connectorRetry(connector.id)) }, t('Try again')) : null,
         on && gateway && !picking ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setApps(connector.apps ?? []); setPicking(true) } }, t('Choose apps')) : null,
-        on && !sender ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', 'aria-expanded': bots, onClick: () => setBots(value => !value) }, bots ? t('Done') : t('Choose Bots')) : null,
+        on && perBot ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', 'aria-expanded': bots, onClick: () => setBots(value => !value) }, bots ? t('Done') : t('Choose Bots')) : null,
         on
           ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => void run(actions.connectorDisconnect(connector.id)) }, t('Disconnect'))
           : form ? null : h('button', { type: 'button', className: 'bt-soft bt-soft-sm', onClick: () => setForm(true) }, t('Connect')))),
     on && gateway && !picking ? h(AppStatusList, { apps: connector.apps ?? [], statuses }) : null,
-    on && !sender ? h('span', { className: 'bt-connector-uses' }, usageText(roster, connector.id)) : null,
+    on && perBot ? h('span', { className: 'bt-connector-uses' }, usageText(roster, connector.id)) : null,
     on && bots ? h(ConnectorBots, { connector, roster, actions, run, SwitchRow }) : null,
-    on && sender ? h('div', { className: 'bt-connector-form' },
+    on && channel && connector.mode === 'app' ? h(AllowedSenders, { connector, actions, run, busy }) : null,
+    on && canPost ? h('div', { className: 'bt-connector-form' },
       h('label', { className: 'bt-q-field' }, h('input', { className: 'bt-input', type: 'text', value: message, 'aria-label': t('Message to send to Feishu'), placeholder: t('Type a message for the Feishu group'), onChange: event => setMessage(event.target.value) })),
       h('div', { className: 'bt-connector-form-row' },
         h('span', { className: 'bt-connector-link' }),
         h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || message.trim() === '' || actions.connectorSend === undefined, onClick: () => void run(actions.connectorSend(connector.id, message), () => setMessage('')) }, t('Send')))) : null,
     !on && form ? h('div', { className: 'bt-connector-form' },
-      h('label', { className: 'bt-q-field bt-secret-field' }, h(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: sender ? t('Feishu webhook URL') : gateway ? t('Composio API key') : t('GitHub token'), autoFocus: true })),
+      channel ? h('div', { className: 'bt-states', role: 'group', 'aria-label': t('How to connect') }, modes.map(entry =>
+        h('button', {
+          key: entry.id, type: 'button', className: 'bt-state', 'aria-pressed': entry.id === chosen?.id,
+          onClick: () => { setMode(entry.id); setValues({}); setError(null) },
+        }, t(entry.label)))) : null,
+      channel
+        ? (chosen?.credentials ?? []).map((credential, index) => h(CredentialField, {
+          key: credential.name, credential, value: field(credential.name), onChange: value => setField(credential.name, value), onEnter: connect, autoFocus: index === 0,
+        }))
+        : h('label', { className: 'bt-q-field bt-secret-field' }, h(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: gateway ? t('Composio API key') : t('GitHub token'), autoFocus: true })),
       gateway ? h(AppPicker, { apps, onChange: setApps, search: token.trim() === '' ? undefined : search }) : null,
       h('div', { className: 'bt-connector-form-row' },
-        h('a', { className: 'bt-connector-link', href: sender ? FEISHU_WEBHOOK_URL : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: '_blank', rel: 'noopener noreferrer' }, sender ? t('Get a webhook URL in Feishu') : gateway ? t('Get a Composio API key') : t('Create a token on GitHub')),
-        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setForm(false); setToken(''); setError(null) } }, t('Cancel')),
-        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || token.trim() === '', onClick: connect }, busy ? t('Connecting…') : t('Connect')))) : null,
+        h('a', { className: 'bt-connector-link', href: channel ? (chosen?.link ?? FEISHU_WEBHOOK_URL) : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: '_blank', rel: 'noopener noreferrer' },
+          channel ? t(chosen?.linkLabel ?? 'Get a webhook URL in Feishu') : gateway ? t('Get a Composio API key') : t('Create a token on GitHub')),
+        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setForm(false); setToken(''); setValues({}); setError(null) } }, t('Cancel')),
+        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || (channel ? !filled : token.trim() === ''), onClick: connect }, busy ? t('Connecting…') : t('Connect')))) : null,
     on && gateway && picking ? h('div', { className: 'bt-connector-form' },
       h(AppPicker, { apps, onChange: setApps, search, statuses }),
       h('span', { className: 'bt-set-hint' }, t('The first time a Bot uses an app, it shows a sign-in link in the chat.')),
diff --git a/core/src/client/i18n.js b/core/src/client/i18n.js
index b91668eb..8397b2a7 100644
--- a/core/src/client/i18n.js
+++ b/core/src/client/i18n.js
@@ -285,6 +285,20 @@ const ZH = {
   'Posts into one Feishu group through a custom bot webhook': '通过自定义机器人 webhook 发到你的一个飞书群',
   'Feishu webhook URL': '飞书 webhook 地址',
   'Get a webhook URL in Feishu': '去飞书获取 webhook 地址',
+  'Custom bot webhook': '自定义机器人 webhook',
+  'App (long connection)': '自建应用（长连接）',
+  'Webhook URL': 'Webhook 地址',
+  'App ID': 'App ID',
+  'App Secret': 'App Secret',
+  'Create a Feishu app': '去飞书创建自建应用',
+  'How to connect': '连接方式',
+  'Connected: app, over the long connection': '已连接：自建应用，走长连接',
+  'Connected: custom bot webhook': '已连接：自定义机器人 webhook',
+  'Who may talk to the Bots': '允许的飞书用户',
+  'Nobody yet. A message from anyone else starts no turn.': '还没有人。其他人发来的消息不会起 turn。',
+  'Paste an open_id to allow': '粘贴 open_id 来允许某个人',
+  'Feishu open_id': '飞书 open_id',
+  Block: '移除',
   'Message to send to Feishu': '要发到飞书的消息',
   'Type a message for the Feishu group': '输入要发到飞书群的消息',
   Send: '发送',
diff --git a/core/src/client/index.js b/core/src/client/index.js
index 069d0b04..f9242763 100644
--- a/core/src/client/index.js
+++ b/core/src/client/index.js
@@ -596,10 +596,16 @@ export function apply(ctx) {
     secretCancel: requestId => after(call('secret-cancel', { requestId })),
     secretUpdate: (name, scope) => after(call('secret-update', { name, scope })),
     secretDelete: name => after(call('secret-delete', { name })),
-    connectorConnect: (id, token, apps) => after(call('connector-connect', { id, token, ...(apps !== undefined ? { apps } : {}) })),
+    // A channel's form sends { mode, credentials }, one field per credential; every other connector
+    // sends its one token. Both go out under the same endpoint.
+    connectorConnect: (id, token, apps) => after(call('connector-connect', typeof token === 'object' && token !== null
+      ? { id, ...token, ...(apps !== undefined ? { apps } : {}) }
+      : { id, token, ...(apps !== undefined ? { apps } : {}) })),
     connectorApps: (id, apps) => after(call('connector-apps', { id, apps })),
     connectorAppSearch: (id, query, token) => call('connector-app-search', { id, query, ...(token ? { token } : {}) }),
     connectorAppStatus: id => call('connector-app-status', { id }),
+    connectorAllow: (id, openId) => after(call('connector-allow', { id, openId })),
+    connectorBlock: (id, openId) => after(call('connector-block', { id, openId })),
     connectorDisconnect: id => after(call('connector-disconnect', { id })),
     connectorRetry: id => after(call('connector-retry', { id })),
     connectorSend: (id, text) => after(call('connector-send', { id, text })),
diff --git a/core/src/host/authz.js b/core/src/host/authz.js
index e317a6de..d2cce743 100644
--- a/core/src/host/authz.js
+++ b/core/src/host/authz.js
@@ -25,7 +25,7 @@ const NO_ACTOR_ALLOWED = new Set(['auth-redeem', 'auth-whoami', 'auth-invite'])
 // is one of them: there is at most one, and it carries no owner.
 const SHARED_BLOCKED = new Set([
   'secret-set', 'secret-allow', 'secret-cancel', 'secret-update', 'secret-delete',
-  'connector-connect', 'connector-apps', 'connector-app-search', 'connector-app-status', 'connector-disconnect', 'connector-retry', 'connector-send', 'bot-connectors',
+  'connector-connect', 'connector-apps', 'connector-app-search', 'connector-app-status', 'connector-allow', 'connector-block', 'connector-disconnect', 'connector-retry', 'connector-send', 'bot-connectors',
   'capability-save', 'capability-delete', 'capability-approve',
   'folders', 'folder-pick', 'folder-list',
   'browser-wait', 'browser-result',
diff --git a/core/src/host/channel.js b/core/src/host/channel.js
index 9f4fabe0..96483b35 100644
--- a/core/src/host/channel.js
+++ b/core/src/host/channel.js
@@ -489,6 +489,8 @@ export function install(rt) {
         case 'connector-apps':
         case 'connector-app-search':
         case 'connector-app-status':
+        case 'connector-allow':
+        case 'connector-block':
         case 'connector-disconnect':
         case 'connector-retry':
         case 'connector-send':
diff --git a/core/src/host/connectors.js b/core/src/host/connectors.js
index 3753869b..634d5091 100644
--- a/core/src/host/connectors.js
+++ b/core/src/host/connectors.js
@@ -18,7 +18,7 @@
 
 import { randomUUID } from 'node:crypto'
 import { createNotifier } from './notify.js'
-import { appCredentials, createInbound } from './feishu-inbound.js'
+import { APP_SECRET_SECRET, appCredentials, createInbound } from './feishu-inbound.js'
 import { createFeishuTransport } from './feishu-sdk.js'
 
 export const GITHUB = 'github'
@@ -28,7 +28,7 @@ export const COMPOSIO_SECRET = 'COMPOSIO_API_KEY'
 export const FEISHU = 'feishu'
 export const FEISHU_SECRET = 'FEISHU_WEBHOOK'
 // Names a saved capability may not take, because the mount already uses them.
-export const RESERVED_NAMES = [GITHUB, COMPOSIO]
+export const RESERVED_NAMES = [GITHUB, COMPOSIO, FEISHU]
 const MCP_CLIENT = '@deepseek-ai/dsh-mcp-client'
 const GITHUB_DEFAULTS = {
   url: 'https://api.githubcopilot.com/mcp/',
@@ -318,20 +318,118 @@ export function feishuTransport(webhook, { fetch: request = fetch, timeoutMs = S
   return { postMessage: message => feishuPost(webhook, message?.text ?? '', { fetch: request, timeoutMs }) }
 }
 
-// The way out for an answer to a Feishu message (#1266): the webhook phase 1 already posts on, so a
-// message in and an answer out are one credential and one transport. Kept out of `install` so the
-// exit can be asserted without a socket. A missing webhook or a refusal is a sentence the chat
-// shows ("Not sent: …"), never a silent drop: `remote-chat` prints exactly what is thrown here.
-export function feishuReply({ secretValue, post = feishuPost, timeoutMs = SEND_TIMEOUT_MS } = {}) {
-  return async ({ text }) => {
+// The app-mode probe (#1266): a POST that proves the pair and is then thrown away. The long
+// connection dials with its own credentials, so nothing here may leak the token into an error, a log
+// line or the row; the answer is only "accepted" or one sentence.
+const FEISHU_TOKEN_PATH = '/open-apis/auth/v3/tenant_access_token/internal'
+
+const feishuOrigin = (api) => {
+  try {
+    return new URL(String(api)).origin
+  } catch {
+    throw new Error('The Feishu API address is not a URL')
+  }
+}
+
+// One tenant token, asked for at the moment it is needed (the probe, or one answer). It is never
+// kept: the socket keeps its own, and an answer does not outlive its POST.
+export async function feishuAppToken({ appId, appSecret }, { api = FEISHU_DEFAULTS.api, fetch: request = fetch, timeoutMs = CHECK_TIMEOUT_MS } = {}) {
+  let response
+  try {
+    response = await withDeadline(request(`${feishuOrigin(api)}${FEISHU_TOKEN_PATH}`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json; charset=utf-8' },
+      body: JSON.stringify({ app_id: appId, app_secret: appSecret }),
+      redirect: 'error',
+      signal: AbortSignal.timeout(Math.max(1, timeoutMs)),
+    }), timeoutMs)
+  } catch {
+    throw new Error('Could not reach Feishu')
+  }
+  const body = await response.json().catch(() => ({}))
+  const code = Number(body?.code)
+  if (response.status === 401 || response.status === 403 || code === 10003 || code === 10014) throw new Error('Feishu did not accept this App ID and App Secret')
+  if (!response.ok) throw new Error(`Feishu answered ${response.status}`)
+  const token = body?.tenant_access_token
+  if (code !== 0 || typeof token !== 'string' || token === '') throw new Error('Feishu did not accept this App ID and App Secret')
+  return token
+}
+
+// The connect step of app mode: prove the pair, then forget the token on purpose.
+export async function feishuAppCheck(credentials, options = {}) {
+  await feishuAppToken(credentials, options)
+  return {}
+}
+
+// One answer back into the chat the message came from, as the app itself: `im/v1/messages` addressed
+// by chat id (the `oc_…` tail of the `feishu:oc_…` handle). This is what makes "connect the app and
+// it works" true with no webhook saved — the pair the owner just pasted is the whole credential.
+export async function feishuAppSend({ appId, appSecret, chatId, text }, { api = FEISHU_DEFAULTS.api, fetch: request = fetch, timeoutMs = SEND_TIMEOUT_MS } = {}) {
+  const token = await feishuAppToken({ appId, appSecret }, { api, fetch: request, timeoutMs })
+  let response
+  try {
+    response = await withDeadline(request(`${feishuOrigin(api)}/open-apis/im/v1/messages?receive_id_type=chat_id`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json; charset=utf-8', authorization: `Bearer ${token}` },
+      body: JSON.stringify({ receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text: String(text) }) }),
+      redirect: 'error',
+      signal: AbortSignal.timeout(Math.max(1, timeoutMs)),
+    }), timeoutMs)
+  } catch {
+    throw new Error('Not sent: could not reach Feishu')
+  }
+  const body = await response.json().catch(() => ({}))
+  const code = Number(body?.code)
+  if (response.ok && code === 0) return
+  if (response.status === 401 || response.status === 403 || code === 99991663) throw new Error('Not sent: Feishu refused the app token while sending the answer')
+  throw new Error(`Not sent: Feishu refused the answer (feishu/${Number.isFinite(code) ? code : response.status})`)
+}
+
+// The way out for an answer to a Feishu message (#1266). App mode answers as the app, in the very
+// chat the message came from; webhook mode answers on the webhook phase 1 already posts on, so a
+// message in and an answer out stay one credential and one transport. Which one is read on every
+// send, so switching modes needs no re-registration. A missing credential or a refusal is a sentence
+// the chat shows ("Not sent: …"), never a silent drop: `remote-chat` prints exactly what is thrown.
+export function feishuReply({ secretValue, appOf, post = feishuPost, sendApp = feishuAppSend, timeoutMs = SEND_TIMEOUT_MS } = {}) {
+  return async ({ text, handle }) => {
+    const app = appOf?.()
+    if (app !== undefined) {
+      const chatId = typeof handle === 'string' && handle.startsWith(`${FEISHU}:`) ? handle.slice(FEISHU.length + 1) : undefined
+      if (chatId === undefined || chatId === '') throw new Error('Not sent: this answer has no Feishu chat to go to.')
+      await sendApp({ ...app, chatId, text: String(text ?? '') }, { timeoutMs })
+      return
+    }
     const webhook = secretValue?.(FEISHU_SECRET)
-    if (webhook === undefined) throw new Error('Not sent: connect Feishu first, so the answer has a webhook to leave on.')
+    if (webhook === undefined) throw new Error('Not sent: connect Feishu first, so the answer has a way out.')
     const answer = await post(webhook, String(text ?? ''), { timeoutMs })
     if (answer?.ok === true) return
     throw new Error(`Not sent: Feishu refused the answer (${answer?.error ?? 'no answer'})`)
   }
 }
 
+// The two ways the Feishu row connects (#1266), as data the form renders: one field per credential,
+// `masked` on the ones that never come back to the client. There is one Feishu row, not one per mode:
+// two rows with the same name would be a puzzle, and the owner asked to click Connect in one place.
+export const FEISHU_MODES = [
+  {
+    id: 'webhook',
+    label: 'Custom bot webhook',
+    credentials: [{ name: 'webhook', label: 'Webhook URL', masked: true }],
+    link: 'https://open.feishu.cn/document/client-docs/bot-v3/add-custom-bot',
+    linkLabel: 'Get a webhook URL in Feishu',
+  },
+  {
+    id: 'app',
+    label: 'App (long connection)',
+    credentials: [
+      { name: 'app_id', label: 'App ID', masked: false },
+      { name: 'app_secret', label: 'App Secret', masked: true },
+    ],
+    link: 'https://open.feishu.cn/document/home/develop-a-bot-in-5-minutes/create-an-app',
+    linkLabel: 'Create a Feishu app',
+  },
+]
+
 const DEFINITIONS = {
   [GITHUB]: {
     id: GITHUB,
@@ -388,10 +486,11 @@ const DEFINITIONS = {
     // Keeps the user id: a new key for the same FlyBot finds the apps already signed in.
     afterDisconnect: saved => saved?.userId === undefined ? undefined : { userId: saved.userId },
   },
-  // Feishu (Lark) is not an MCP server: a custom-bot webhook is one HTTPS POST into the instance's
-  // own group. So it is a *sender* — nothing is mounted, no Bot's tool list changes, and the only
-  // things it has are a status and a send (#1263). The app-credential path slots in behind the same
-  // send, without touching a caller.
+  // Feishu (Lark) is not an MCP server: it is a *channel* (#1266). Nothing is mounted and no Bot's
+  // tool list changes; what it has is a status, one way in (the long connection of a self-built app)
+  // and one way out (that app, or the custom-bot webhook of phase 1). `kind: 'channel'` is what makes
+  // the row offer Choose Bots and what makes `reconcile()` open the socket instead of importing a
+  // client: webhook mode is the same row with nothing to dial.
   [FEISHU]: {
     id: FEISHU,
     name: 'Feishu',
@@ -399,8 +498,9 @@ const DEFINITIONS = {
     purpose: 'Feishu webhook',
     defaults: FEISHU_DEFAULTS,
     addresses: options => [options.api],
-    kind: 'sender',
-    paste: 'Paste a webhook URL first',
+    kind: 'channel',
+    modes: FEISHU_MODES,
+    paste: 'Choose how to connect Feishu and fill in its fields first',
     async check({ token, options }) {
       return feishuCheck(token, { api: options.api })
     },
@@ -432,23 +532,31 @@ export function install(rt) {
 
   // Feishu inbound (#1266): a message in Feishu starts a turn here. The socket is injected —
   // `rt.feishuTransport` is the one adapter the SDK-versus-hand-written decision changes, so nothing
-  // below depends on which client dials. Off unless the owner turned it on, and with no socket adapter
-  // it starts nothing rather than pretend. The message lands through `remote-chat.deliver` — the same
-  // seam a friend's Bot uses — and the answer leaves through the sender this module registers in that
-  // same seam, on the webhook phase 1 posts on: one path in, one path out.
+  // below depends on which client dials. Off unless the owner connected the app on the row, and with
+  // no socket adapter it starts nothing rather than pretend. The message lands through
+  // `remote-chat.deliver` — the same seam a friend's Bot uses — and the answer leaves through the
+  // sender this module registers in that same seam: app mode answers as the app, webhook mode on the
+  // webhook phase 1 posts on. One path in, one path out.
   //
+  // What the owner set lives in the connector record, not in `rt.config` (#1266): the row is the
+  // place Feishu is configured, so the switch and the allowed senders are read from the record every
+  // time instead of being copied while this module installs.
+  const saved = c => state.connectors?.[c.def.id]
+  const feishuRecord = () => state.connectors?.[FEISHU]
+  const appOf = () => appCredentials(feishuRecord(), name => rt.secretValue(name))
+
   // The default adapter is the official SDK, and it is put on the runtime *before* the policy reads
   // it. That read happens on every `start()` rather than once here, so an adapter installed later
   // (a test's stub, a plugin's own client) is the one the next start dials instead of a snapshot
   // taken while it was missing.
   if (rt.feishuTransport === undefined) {
     rt.feishuTransport = createFeishuTransport({
-      credentials: () => appCredentials(name => rt.secretValue(name)),
+      credentials: () => appOf(),
       log: (format, ...args) => rt.warn(`ds-bot: ${format}`, ...args),
     })
   }
   // One way out per Feishu chat: `remote-chat` keys a reply's sender by the chat's plugin, so this
-  // registers the webhook post under `feishu`. Registered against the seam object it saw, so a runtime
+  // registers the Feishu exit under `feishu`. Registered against the seam object it saw, so a runtime
   // that replaces the seam is wired again instead of keeping a dead registration.
   let feishuWire = { seam: undefined, off: undefined }
   const wireFeishuReply = () => {
@@ -456,12 +564,15 @@ export function install(rt) {
     if (typeof seam?.onSend !== 'function') return
     if (feishuWire.seam === seam) return
     feishuWire.off?.()
-    feishuWire = { seam, off: seam.onSend(FEISHU, feishuReply({ secretValue: name => rt.secretValue(name) })) }
+    feishuWire = { seam, off: seam.onSend(FEISHU, feishuReply({ secretValue: name => rt.secretValue(name), appOf })) }
   }
 
   const feishuInbound = createInbound({
-    enabled: rt.config?.feishu?.enabled === true,
+    // "On" means app mode with both halves saved. A half-saved pair dials nothing, and an event that
+    // arrives while it is off starts no turn, whatever adapter is still handing events over.
+    enabled: () => feishuRecord()?.mode === 'app' && appOf() !== undefined,
     ownerOpenId: rt.config?.feishu?.ownerOpenId,
+    allowed: () => feishuRecord()?.allowed ?? [],
     transport: () => rt.feishuTransport,
     deliver: async ({ handle, text, name }) => {
       const seam = rt.remoteChats
@@ -479,7 +590,6 @@ export function install(rt) {
     redact: rt.redactSecrets,
   })
 
-  const saved = c => state.connectors?.[c.def.id]
   const unmount = async (c) => {
     const fiber = c.mount?.fiber
     c.mount = null
@@ -487,8 +597,9 @@ export function install(rt) {
   }
 
   // A sender's retry policy is notify.js's, not a second one written here: one transport per
-  // sender, reading the saved webhook when it is called, so a reconnect needs no rebuild.
-  const notifiers = new Map(connectors.filter(c => c.def.kind === 'sender').map(c => [c.def.id, createNotifier({
+  // sender, reading the saved webhook when it is called, so a reconnect needs no rebuild. Feishu is a
+  // channel now, but its webhook mode still sends: the notifier is per definition that has a `post`.
+  const notifiers = new Map(connectors.filter(c => typeof c.def.post === 'function').map(c => [c.def.id, createNotifier({
     channel: c.def.id,
     log: (format, ...args) => rt.warn(`ds-bot: ${format}`, ...args),
     transport: {
@@ -522,10 +633,72 @@ export function install(rt) {
     return rt.redactSecrets(text || 'error').slice(0, 300)
   }
 
+  // A channel is the row's life, not a mount (#1266): webhook mode is ready once its URL is saved,
+  // app mode is ready once its socket is open, and the socket's own lifecycle is the status. Keyed by
+  // what the dial depends on, so a new pair (or a mode switch) closes the old socket and opens one.
+  async function reconcileChannel(c, force, token) {
+    const { def } = c
+    const record = saved(c) ?? {}
+    const mode = record.mode === 'app' ? 'app' : record.mode === 'webhook' ? 'webhook' : undefined
+    const app = mode === 'app' ? appOf() : undefined
+    const key = mode === 'app' ? `app\n${app?.appId ?? ''}\n${app?.appSecret ?? ''}` : mode === 'webhook' ? `webhook\n${token ?? ''}` : undefined
+    if (!force && c.mount !== null && c.mount.key === key) return
+    await unmount(c)
+    // A changed pair (or a mode switch) is a new socket: the old one is hung up before the new one
+    // dials, so one record never holds two long connections.
+    await feishuInbound.stop()
+    if (mode === undefined) {
+      notifierOf(c)?.setEnabled(false)
+      await feishuInbound.stop()
+      c.status = { state: 'off' }
+      c.mount = { key }
+      return
+    }
+    if (c.insecure) {
+      c.mount = { key }
+      c.status = { state: 'error', error: INSECURE(def.name) }
+      return
+    }
+    // App mode answers as the app, webhook mode on the webhook: a saved webhook is worth a manual
+    // Send in either mode, and nothing else turns the notifier on.
+    notifierOf(c)?.setEnabled(token !== undefined)
+    if (mode === 'webhook') {
+      if (token === undefined) {
+        await feishuInbound.stop()
+        c.status = { state: 'off' }
+        c.mount = { key }
+        return
+      }
+      c.status = { state: 'connecting' }
+      // A start-up (or a secret change) only reports that a webhook is saved — a restart must not post
+      // to the group again. `force` is a person pressing Try again, which is that person asking for it.
+      if (force) await probe(c, token)
+      else c.status = { state: 'ready' }
+      c.mount = { key }
+      return
+    }
+    if (app === undefined) {
+      await feishuInbound.stop()
+      c.status = { state: 'error', error: 'A Feishu App ID and App Secret are both needed before the long connection can dial.' }
+      c.mount = { key }
+      return
+    }
+    c.status = { state: 'connecting' }
+    const result = await feishuInbound.start()
+    const inbound = feishuInbound.view()
+    c.status = result === 'ready'
+      ? { state: 'ready' }
+      : result === 'off'
+        ? { state: 'off' }
+        : { state: 'error', error: inbound.error ?? 'the Feishu long connection did not open' }
+    c.mount = { key }
+  }
+
   async function reconcile(c, force) {
     const { def, options } = c
     if (c.saving > 0 && !force) return
     const token = options !== null && !stopped ? rt.secretValue(def.secret) : undefined
+    if (def.kind === 'channel') return reconcileChannel(c, force, token)
     const key = token === undefined ? undefined : `${token}\n${def.mountKey(saved(c))}`
     if (!force && c.mount !== null && c.mount.key === key) return
     await unmount(c)
@@ -540,16 +713,6 @@ export function install(rt) {
       return
     }
     c.status = { state: 'connecting' }
-    // A sender mounts nothing: the test POST belongs to the connect step, so a start-up (or a
-    // secret change) only reports that a webhook is saved — a restart must not post to the group
-    // again. `force` is a person pressing Try again, which is that person asking for the test.
-    if (def.kind === 'sender') {
-      notifierOf(c)?.setEnabled(true)
-      if (force) await probe(c, token)
-      else c.status = { state: 'ready' }
-      c.mount = { key }
-      return
-    }
     const loader = ctx.get?.('loader')
     if (typeof loader?.import !== 'function' || typeof ctx.plugin !== 'function') {
       c.mount = { key }
@@ -602,7 +765,15 @@ export function install(rt) {
     ...(c.def.kind !== undefined ? { kind: c.def.kind } : {}),
     account: rt.secretValue(c.def.secret) !== undefined ? c.def.account(saved(c)) : null,
     ...(c.def.extra !== undefined ? c.def.extra(rt.secretValue(c.def.secret) !== undefined ? saved(c) : undefined) : {}),
-    ...(c.def.id === FEISHU ? { inbound: { ...feishuInbound.view(), app: appCredentials(name => rt.secretValue(name)) === undefined ? 'missing' : 'set' } } : {}),
+    // #1266: one row, two modes. `mode` is which one is live (null before the first connect), `modes`
+    // is what the form renders, and `allowed` is the guest list the app mode's gate reads. Nothing
+    // here carries a secret: the App ID is not one, and the webhook never comes back.
+    ...(c.def.id === FEISHU ? {
+      mode: saved(c)?.mode ?? null,
+      modes: c.def.modes,
+      allowed: (saved(c)?.allowed ?? []).map(entry => ({ openId: entry.openId, name: entry.name ?? entry.openId })),
+      inbound: { ...feishuInbound.view(), app: appOf() === undefined ? 'missing' : 'set' },
+    } : {}),
   })
   const connectorsView = () => connectors.filter(c => c.options !== null).map(view)
 
@@ -623,29 +794,92 @@ export function install(rt) {
     await Promise.resolve(c.def.discard?.({ keys: [...new Set(keys.filter(key => key !== undefined))], options: c.options, session: gone })).catch(() => { /* never blocks the change */ })
   }
 
+  // The Feishu row's own connect (#1266): one row, two modes. `credentials` is one field per
+  // credential the picked mode declares — the App ID is kept in the record because it is not a
+  // secret, the App Secret goes only to secrets.js. App mode proves the pair with one tenant token,
+  // then `sync` opens the socket; webhook mode proves the URL with one test message, as phase 1 did.
+  const connectChannel = async (c, body) => {
+    // A phase-1 client sends one `token` and no mode: that is the webhook, unchanged (#1266).
+    const mode = body.mode === 'app' ? 'app'
+      : body.mode === 'webhook' || (body.mode === undefined && typeof body.token === 'string' && body.token.trim() !== '') ? 'webhook'
+        : undefined
+    if (mode === undefined) throw new Error('Choose how to connect Feishu first')
+    if (c.insecure) throw new Error(INSECURE(c.def.name))
+    await rt.loadSecrets()
+    const given = body.credentials !== null && typeof body.credentials === 'object' && body.credentials !== undefined ? body.credentials : {}
+    const text = name => (typeof given[name] === 'string' ? given[name].trim() : '')
+    if (mode === 'webhook') {
+      const webhook = text('webhook') !== '' ? text('webhook') : (typeof body.token === 'string' ? body.token.trim() : '')
+      if (webhook === '') throw new Error('Paste the webhook URL Feishu gave you')
+      const previous = saved(c) ?? {}
+      c.saving += 1
+      try {
+        await rt.secretEndpoint('secret-set', { name: FEISHU_SECRET, value: webhook, purpose: c.def.purpose })
+        state.connectors = { ...state.connectors, [FEISHU]: { ...previous, mode: 'webhook', connectedAt: Date.now() } }
+        await rt.save()
+      } finally {
+        c.saving -= 1
+      }
+      // Phase 1's connect, unchanged: the webhook is saved first and then proved with one test
+      // message, so a refusal leaves the row in `error` with Try again beside it instead of losing
+      // what the owner pasted (acceptance 5, #1266).
+      await feishuInbound.stop()
+      await probe(c, webhook)
+      c.mount = { key: `webhook\n${webhook}` }
+      notifierOf(c)?.setEnabled(true)
+      return connectorsView()
+    }
+    const appId = text('app_id')
+    const appSecret = text('app_secret')
+    if (appId === '' || appSecret === '') throw new Error('Paste the App ID and App Secret Feishu gave the app')
+    await feishuAppCheck({ appId, appSecret }, { api: c.options.api })
+    c.saving += 1
+    try {
+      await rt.secretEndpoint('secret-set', { name: APP_SECRET_SECRET, value: appSecret, purpose: 'Feishu app secret' })
+      // The guest list survives a re-pair: connecting again is not a decision to let strangers in.
+      const previous = saved(c) ?? {}
+      state.connectors = { ...state.connectors, [FEISHU]: { ...previous, mode: 'app', appId, connectedAt: Date.now() } }
+      await rt.save()
+    } finally {
+      c.saving -= 1
+    }
+    await sync(c)
+    return connectorsView()
+  }
+  // The guest list, written from the row (#1266): Allow adds one open_id, Block takes it away. Who
+  // may talk is read by the inbound gate on every message, so this needs no restart — the next
+  // message from that sender is treated as the owner's.
+  const allowedOp = async (body, on) => {
+    const c = known(body.id)
+    if (c.def.kind !== 'channel') throw new Error('This connector has no allowed senders')
+    const openId = typeof body.openId === 'string' ? body.openId.trim() : ''
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(openId)) throw new Error('Paste the open_id of the sender to allow')
+    await rt.loadSecrets()
+    const record = saved(c) ?? {}
+    if (record.mode !== 'app') throw new Error('Connect Feishu as an app first')
+    const list = Array.isArray(record.allowed) ? record.allowed : []
+    let next
+    if (on) {
+      const knownSender = (feishuInbound.view().refusedSenders ?? []).find(entry => entry.openId === openId)
+      next = list.some(entry => entry.openId === openId) ? list
+        : [...list, { openId, ...(knownSender?.name === undefined ? {} : { name: knownSender.name }) }]
+    } else {
+      next = list.filter(entry => entry.openId !== openId)
+    }
+    state.connectors = { ...state.connectors, [FEISHU]: { ...record, allowed: next } }
+    await rt.save()
+    return connectorsView()
+  }
+
   const endpoints = {
     async 'connector-connect'(body) {
       const c = known(body.id)
+      // A channel has no single token: its form sends a mode and that mode's credential fields.
+      if (c.def.kind === 'channel') return connectChannel(c, body)
       const token = typeof body.token === 'string' ? body.token.trim() : ''
       if (token === '') throw new Error(c.def.paste ?? (c.def.id === GITHUB ? 'Paste a token first' : 'Paste a key first'))
       if (c.insecure) throw new Error(INSECURE(c.def.name))
       await rt.loadSecrets()
-      // A sender has nothing to mount, so the webhook is saved first and then proved: a webhook
-      // Feishu refuses stays on the row as `error` with Try again beside it, the way a connector
-      // that fails its MCP mount does, instead of losing what the owner pasted.
-      if (c.def.kind === 'sender') {
-        c.saving += 1
-        try {
-          await rt.secretEndpoint('secret-set', { name: c.def.secret, value: token, purpose: c.def.purpose })
-          await keep(c, {})
-        } finally {
-          c.saving -= 1
-        }
-        await probe(c, token)
-        c.mount = { key: `${token}\n${c.def.mountKey(saved(c))}` }
-        notifierOf(c)?.setEnabled(true)
-        return connectorsView()
-      }
       const oldToken = rt.secretValue(c.def.secret)
       const previous = saved(c)
       const record = await c.def.check({ token, options: c.options, saved: previous, body })
@@ -715,9 +949,31 @@ export function install(rt) {
         throw new Error(reason(error))
       }
     },
+    async 'connector-allow'(body) {
+      return allowedOp(body, true)
+    },
+    async 'connector-block'(body) {
+      return allowedOp(body, false)
+    },
     async 'connector-disconnect'(body) {
       const c = known(body.id)
       await rt.loadSecrets()
+      if (c.def.kind === 'channel') {
+        // Disconnect closes both (#1266): the socket goes down, the webhook and the app secret are
+        // deleted (each only if it is there — deleting a key that is not saved is an error), and the
+        // record goes with them, so the row is `off` and no turn can start.
+        for (const name of [FEISHU_SECRET, APP_SECRET_SECRET]) {
+          if (rt.secretValue(name) !== undefined) await rt.secretEndpoint('secret-delete', { name })
+        }
+        if (saved(c) !== undefined) {
+          delete state.connectors[c.def.id]
+          await rt.save()
+        }
+        await feishuInbound.stop()
+        await rt.forgetConnector?.(c.def.id)
+        await sync(c)
+        return connectorsView()
+      }
       const oldToken = rt.secretValue(c.def.secret)
       const previous = saved(c)
       if (oldToken !== undefined) await rt.secretEndpoint('secret-delete', { name: c.def.secret })
@@ -735,18 +991,18 @@ export function install(rt) {
     async 'connector-retry'(body) {
       const c = known(body.id)
       await rt.loadSecrets()
+      // "Try again" is one press for the whole row: a channel re-proves a webhook and dials the
+      // socket again (which is how an adapter installed after the first attempt comes up without a
+      // restart), and `reconcile` is the only place that dials, so one press is one socket.
       await sync(c, true)
-      // "Try again" is one press for the whole row: a Feishu row proves the webhook and, when the
-      // long connection is switched on, dials it again — which is how an adapter installed after the
-      // first attempt comes up without a restart.
-      if (c.def.id === FEISHU) await feishuInbound.start()
       return connectorsView()
     },
     // One message, on demand, once. Nothing posts room traffic on its own: that is a spam
-    // decision the owner has not made (#1263).
+    // decision the owner has not made (#1263). Feishu's channel offers this only while a webhook is
+    // saved (today's behaviour, acceptance 5): app mode answers by itself, it has no room to post to.
     async 'connector-send'(body) {
       const c = known(body.id)
-      if (c.def.kind !== 'sender') throw new Error('This connector sends no messages')
+      if (typeof c.def.post !== 'function') throw new Error('This connector sends no messages')
       const text = typeof body.text === 'string' ? body.text.trim() : ''
       if (text === '') throw new Error('Type a message first')
       if (c.insecure) throw new Error(INSECURE(c.def.name))
@@ -777,11 +1033,11 @@ export function install(rt) {
 
   ctx.effect(() => {
     stopped = false
-    // The long connection dials once the secrets are loaded: the app pair lives there, so starting
-    // before that read would report a missing app that is in fact saved.
+    // The long connection dials once the secrets are loaded: the App Secret lives there, so dialling
+    // before that read would report a missing app that is in fact saved. `reconcile` opens it, so
+    // there is exactly one dial per start — a second call here would be two sockets on one record.
     void scrubAddresses().catch(error => rt.warn('ds-bot: connectors: %s', reason(error))).then(() => rt.loadSecrets()).then(async () => {
       await syncAll()
-      if (!stopped) await feishuInbound.start()
     })
     return () => {
       stopped = true
diff --git a/core/src/host/feishu-inbound.js b/core/src/host/feishu-inbound.js
index 3b53471c..e953fa5d 100644
--- a/core/src/host/feishu-inbound.js
+++ b/core/src/host/feishu-inbound.js
@@ -47,19 +47,17 @@ export function readEvent(envelope) {
 }
 
 // Phase 1 spent one secret per connector (`FEISHU_WEBHOOK`, redacted by secrets.js). The long
-// connection needs an app, which is a pair: this reads both through the same `rt.secretValue` and
-// answers undefined unless both are present, so a half-configured app dials nothing instead of
-// failing at the handshake. The two values never leave this function: the view reports `missing`,
+// connection needs an app, which is a pair in two different places (#1266): the App ID is not a
+// secret, so it lives in the connector record and shows on the row; only the App Secret goes to
+// secrets.js. Either half missing answers undefined, so a half-configured app dials nothing instead
+// of failing at the handshake. The secret never leaves this function: the view reports `missing`,
 // never the id or the secret.
-export const APP_ID_SECRET = 'FEISHU_APP_ID'
 export const APP_SECRET_SECRET = 'FEISHU_APP_SECRET'
 
-export function appCredentials(secretValue) {
-  const id = secretValue?.(APP_ID_SECRET)
-  const secret = secretValue?.(APP_SECRET_SECRET)
+export function appCredentials(record, secretValue) {
   const asText = value => (typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined)
-  const appId = asText(id)
-  const appSecret = asText(secret)
+  const appId = asText(record?.appId)
+  const appSecret = asText(secretValue?.(APP_SECRET_SECRET))
   if (appId === undefined || appSecret === undefined) return undefined
   return { appId, appSecret }
 }
@@ -72,9 +70,17 @@ export const handleOf = chatId => `feishu:${chatId}`
 // `start()`: an adapter that is installed after this module still comes up, and one replaced while
 // the connection is off is the one the next start dials.
 // `deliver({ handle, text, name })` is `remote-chat`'s seam, and `redact` is `rt.redactSecrets`.
+// A refused sender is kept so the connector row can show who was turned away and offer Allow. The
+// list is bounded: a stranger who messages a hundred times is one row that keeps its last time, not
+// an unbounded log in state.json. It lives in the view only — the connector decides what to save.
+// `enabled` and `allowed` may each be a value or a function answering it: the row changes both while
+// this object is already installed.
+export const MAX_REFUSED = 20
+
 export function createInbound({
   enabled = false,
   ownerOpenId,
+  allowed,
   transport,
   deliver,
   log = () => {},
@@ -88,7 +94,7 @@ export function createInbound({
   // in `deliver`; the ring is written only after that resolves (#1266 INC), so this is what keeps the
   // second copy from starting a second turn in the gap.
   const inFlight = new Set()
-  const view = { state: enabled ? 'connecting' : 'off', connected: 0, duplicates: 0, refused: 0, ignored: 0 }
+  const view = { state: (typeof enabled === 'function' ? enabled() === true : enabled) ? 'connecting' : 'off', connected: 0, duplicates: 0, refused: 0, ignored: 0 }
   let closer
   let starting
   // Bumped by `stop()`: a dial that was already in flight when the owner stopped the connector is
@@ -106,14 +112,44 @@ export function createInbound({
     return true
   }
 
-  // The owner is the only sender that may start a turn. An unset or empty id refuses everyone: a
-  // missing owner and a missing `open_id` must never compare equal.
-  const owner = () => (typeof ownerOpenId === 'string' && ownerOpenId !== '' ? ownerOpenId : undefined)
+  // The switch and the guest list are read every time, not copied when the module is installed: the
+  // owner turns the connection on and allows a sender on the row, while this object is already made.
+  const on = () => (typeof enabled === 'function' ? enabled() === true : enabled === true)
+
+  // Who may start a turn (#1266): the owner, plus whoever the row allowed. `<allowed>` is the row's
+  // list — a list of open_ids, or of `{ openId }` entries — and empty means nobody, exactly as the
+  // owner-only gate did: connecting the app must never let a stranger spend the owner's tokens.
+  const allowedIds = () => {
+    const ids = new Set()
+    if (typeof ownerOpenId === 'string' && ownerOpenId !== '') ids.add(ownerOpenId)
+    const list = typeof allowed === 'function' ? allowed() : allowed
+    for (const entry of Array.isArray(list) ? list : []) {
+      const id = typeof entry === 'string' ? entry : entry?.openId
+      if (typeof id === 'string' && id !== '') ids.add(id)
+    }
+    return ids
+  }
+
+  // One row per refused sender, newest last, bounded: a stranger who messages a hundred times is one
+  // line with a fresh time, not an unbounded log. A sender the row allows leaves the list at once.
+  const refused = new Map()
+  const refuse = (openId, name) => {
+    refused.delete(openId)
+    refused.set(openId, { openId, ...(name === undefined ? {} : { name }), at: new Date(now()).toISOString() })
+    while (refused.size > MAX_REFUSED) refused.delete(refused.keys().next().value)
+  }
+  const refusedSenders = () => {
+    const ids = allowedIds()
+    return [...refused.values()].filter(entry => !ids.has(entry.openId))
+  }
 
   async function nameOf(openId) {
-    if (typeof transport?.nameOf !== 'function') return undefined
+    // The transport may be a function (read again on every start), so the display name is asked of
+    // the adapter this call would dial, never of the option itself.
+    const socket = socketOf()
+    if (typeof socket?.nameOf !== 'function') return undefined
     try {
-      const name = await transport.nameOf(openId)
+      const name = await socket.nameOf(openId)
       return typeof name === 'string' && name.trim() !== '' ? name.trim() : undefined
     } catch {
       return undefined
@@ -127,10 +163,18 @@ export function createInbound({
       log('a Feishu event carried no readable text message; no turn started')
       return 'ignored'
     }
-    const expected = owner()
-    if (expected === undefined || read.openId !== expected) {
+    // Off is off: a socket that delivers while the owner has disconnected (a close that is still in
+    // flight, a stale adapter) starts nothing (#1266, acceptance 4).
+    if (!on()) {
+      view.refused += 1
+      log('the Feishu long connection is off; no turn started')
+      return 'off'
+    }
+    if (!allowedIds().has(read.openId)) {
       view.refused += 1
-      log('a Feishu message from %s is not the owner; no turn started', read.openId)
+      const name = await nameOf(read.openId)
+      refuse(read.openId, name)
+      log('a Feishu message from %s is not the owner or an allowed sender; no turn started', read.openId)
       return 'refused'
     }
     if (seen.has(read.id) || inFlight.has(read.id)) {
@@ -155,7 +199,7 @@ export function createInbound({
   // One socket per connector. A second start while the first dials shares it, so a reconnect loop
   // cannot become two members of the same conversation.
   function start() {
-    if (!enabled) return Promise.resolve('off')
+    if (!on()) return Promise.resolve('off')
     if (starting !== undefined) return starting
     const socket = socketOf()
     // No adapter yet is a configuration state, not a failed dial: nothing is remembered, so a later
@@ -201,10 +245,10 @@ export function createInbound({
     starting = undefined
     const closing = closer
     closer = undefined
-    view.state = enabled ? 'connecting' : 'off'
+    view.state = on() ? 'connecting' : 'off'
     if (closing !== undefined) await Promise.resolve().then(() => closing.close()).catch(() => { /* an already-dead socket is not an error */ })
   }
 
-  const viewOf = () => ({ state: view.state, ...(view.error === undefined ? {} : { error: view.error }), ...(view.lastEventAt === undefined ? {} : { lastEventAt: view.lastEventAt }), connected: view.connected, duplicates: view.duplicates, refused: view.refused })
+  const viewOf = () => ({ state: view.state, ...(view.error === undefined ? {} : { error: view.error }), ...(view.lastEventAt === undefined ? {} : { lastEventAt: view.lastEventAt }), connected: view.connected, duplicates: view.duplicates, refused: view.refused, refusedSenders: refusedSenders() })
   return { start, stop, handleEvent, view: viewOf, seen: () => seen.size }
 }
diff --git a/core/test/connectors.test.js b/core/test/connectors.test.js
index 36d7b486..d8ad10ce 100644
--- a/core/test/connectors.test.js
+++ b/core/test/connectors.test.js
@@ -418,32 +418,50 @@ test('deleting COMPOSIO_API_KEY on the Secrets page unmounts Composio, and GitHu
   assert.deepEqual(view.map(entry => [entry.id, entry.state]), [['github', 'ready'], ['composio', 'off'], ['feishu', 'off']])
   // #1266: the Feishu row carries the inbound state as well, and with no app pair saved it says so
   // without ever showing a value. Nothing dialled: the long connection is off by default.
-  assert.deepEqual(view.find(entry => entry.id === 'feishu').inbound, { state: 'off', connected: 0, duplicates: 0, refused: 0, app: 'missing' })
+  assert.deepEqual(view.find(entry => entry.id === 'feishu').inbound, { state: 'off', connected: 0, duplicates: 0, refused: 0, refusedSenders: [], app: 'missing' })
 
 })
 
+// #1266 (connector-row half): the app pair lives in the connector record and secrets.json, so a test
+// renders the row a person would have filled in. The App ID is not a secret; only the secret is.
+function appHome() {
+  const home = teamHome()
+  const state = JSON.parse(readFileSync(join(home, 'state.json'), 'utf8'))
+  state.connectors = { feishu: { mode: 'app', appId: 'cli_app_1', allowed: [{ openId: 'ou_owner_1' }] } }
+  writeFileSync(join(home, 'state.json'), JSON.stringify(state))
+  writeFileSync(join(home, 'secrets.json'), JSON.stringify({
+    version: 1,
+    secrets: [{ name: 'FEISHU_APP_SECRET', value: 'app-secret-value', purpose: 'Feishu app secret', scope: 'all', createdAt: 1, updatedAt: 1 }],
+  }))
+  return home
+}
+
 // #1266: the inbound socket is read from the runtime on every start, not copied while module install
 // runs. This is the shape a plugin (or a test) has when it puts its own adapter on the runtime after
 // the connectors module was installed: the next Try again has to dial that one.
 test('an adapter installed after the connectors module is the one the next Try again dials (#1266)', async (t) => {
-  const home = teamHome()
+  const home = appHome()
   const ctx = fakeContext()
   capture(ctx)
-  const rt = createRuntime(ctx, { home, feishu: { enabled: true, ownerOpenId: 'ou_owner_1' } })
+  const rt = createRuntime(ctx, { home })
   t.after(async () => { await ctx.dispose(); await cleanHome(home) })
 
+  const dials = []
   const inboundOf = async () => (await call(ctx, 'state', {})).value.connectors.find(entry => entry.id === 'feishu').inbound
-  // Boot dialled the default adapter, which refuses because no app pair is saved: the error proves a
-  // socket was attempted, and that it was not the stub installed below.
+  // Boot dialled on its own: the pair is saved, so the row left `off` before this test installed any
+  // adapter. Whether it settles on `connecting` (a dial in flight) or `error` (a box with no SDK)
+  // depends on the host, so the assertion is that it is not `off` and that no stub dialled — the
+  // socket in flight is the host's own adapter, never the one installed below.
   const until = Date.now() + 2000
   let boot = await inboundOf()
-  while (boot.error === undefined && Date.now() < until) {
+  while (boot.state === 'off' && Date.now() < until) {
     await new Promise(resolve => setTimeout(resolve, 10))
     boot = await inboundOf()
   }
-  assert.match(boot.error ?? '', /app id and app secret/, JSON.stringify(boot))
+  assert.equal(boot.app, 'set')
+  assert.notEqual(boot.state, 'off')
+  assert.equal(dials.length, 0, 'no stub was installed when boot dialled')
 
-  const dials = []
   rt.feishuTransport = { connect: async (onEvent) => { dials.push(onEvent); return { close: async () => {} } } }
   const after = (await call(ctx, 'connector-retry', { id: 'feishu' })).value.find(entry => entry.id === 'feishu')
   assert.equal(after.inbound.state, 'ready')
@@ -465,10 +483,10 @@ const FEISHU_INBOUND_EVENT = {
 // The inbound socket of a running runtime, dialled through Try again so the adapter is a stub: what
 // comes back is the `onEvent` the policy layer handed the socket.
 async function feishuInboundRig(t) {
-  const home = teamHome()
+  const home = appHome()
   const ctx = fakeContext()
   capture(ctx)
-  const rt = createRuntime(ctx, { home, feishu: { enabled: true, ownerOpenId: 'ou_owner_1' } })
+  const rt = createRuntime(ctx, { home })
   t.after(async () => { await ctx.dispose(); await cleanHome(home) })
   const dials = []
   rt.feishuTransport = { connect: async (onEvent) => { dials.push(onEvent); return { close: async () => {} } } }
diff --git a/core/test/feishu-channel.test.js b/core/test/feishu-channel.test.js
new file mode 100644
index 00000000..2d147084
--- /dev/null
+++ b/core/test/feishu-channel.test.js
@@ -0,0 +1,258 @@
+import assert from 'node:assert/strict'
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { test } from 'node:test'
+import { createRuntime } from '../index.js'
+import { RESERVED_NAMES, feishuAppSend, feishuReply } from '../src/host/connectors.js'
+import { fakeContext } from './fake-ctx.js'
+
+// #1266, the connector-row half: the owner's word is 「飞书是做成一个连接器，左下角点击连接应用的时候
+// 可以连接」. So the row is where Feishu is configured — one row, two modes (a custom-bot webhook, or a
+// self-built app with its long connection), the App ID kept in the record because it is not a secret,
+// the App Secret only in secrets.json, Choose Bots for what a Bot can reach, and the guest list the
+// app mode's gate reads. Every test here fails on the sender-row shape it replaces.
+
+const TEAM = {
+  version: 1,
+  mainBotIds: ['m1'],
+  revision: 1,
+  bots: { m1: { id: 'm1', sessionId: 'm1', name: 'Chief', role: 'Chief of Staff', instructions: '', createdAt: 1 } },
+  rooms: {},
+  exchanges: [],
+  exchangeTurns: {},
+  questions: {},
+}
+
+const teamHome = record => {
+  const home = mkdtempSync(join(tmpdir(), 'dsb-feishu-channel-'))
+  const state = record === undefined ? TEAM : { ...TEAM, connectors: { feishu: record } }
+  writeFileSync(join(home, 'state.json'), JSON.stringify(state))
+  return home
+}
+
+const cleanHome = home => rmSync(home, { recursive: true, force: true, maxRetries: 5, retryDelay: 20 })
+const answer = (status, body) => ({ status, ok: status >= 200 && status < 300, body, json: async () => body })
+
+// A fake Feishu: tenant tokens and message sends, and every call recorded. The scripted answers are
+// consumed in order by non-token calls (the webhook probe, a send), the last one repeating.
+function fakeFeishu(script = []) {
+  const calls = []
+  const queue = [...script]
+  const fetch = async (url, init) => {
+    const body = init?.body === undefined ? undefined : JSON.parse(init.body)
+    calls.push({ url: String(url), method: init?.method, body, headers: init?.headers ?? {} })
+    if (String(url).includes('/auth/v3/tenant_access_token/internal')) return answer(200, { code: 0, tenant_access_token: 't_app_token' })
+    if (String(url).includes('/open-apis/im/v1/messages')) return answer(200, { code: 0, data: { message_id: 'om_answer' } })
+    return queue.length > 1 ? queue.shift() : (queue[0] ?? answer(200, { code: 0, data: { message_id: 'om_1' } }))
+  }
+  return { calls, fetch }
+}
+
+// The runtime a plugin sees after install, with the socket replaced by a stub: `dials` are the
+// `onEvent` handlers handed to it, exactly what a real long connection would call.
+function rig(t, { record, feishu = { api: 'https://feishu.test' } } = {}) {
+  const home = teamHome(record)
+  const ctx = fakeContext()
+  const register = ctx.connection.fetch.register
+  ctx.connection.fetch.register = (route) => { ctx.route = route; return register(route) }
+  const rt = createRuntime(ctx, { home, feishu })
+  const dials = []
+  const closes = []
+  rt.feishuTransport = {
+    nameOf: async openId => (openId === 'ou_stranger_1' ? 'Mallory' : `Someone ${openId}`),
+    connect: async (onEvent) => { dials.push(onEvent); return { close: async () => { closes.push(1) } } },
+  }
+  t.after(async () => { await ctx.dispose(); cleanHome(home) })
+  return { rt, ctx, home, dials, closes }
+}
+
+async function call(ctx, endpoint, payload) {
+  const response = await ctx.route.fetch(new Request('http://localhost/api/bot', { method: 'POST', body: JSON.stringify({ endpoint, payload }) }))
+  return response.json()
+}
+
+const rowOf = value => (value?.connectors ?? value ?? []).find(entry => entry.id === 'feishu')
+const until = async (read, done, ms = 3000) => {
+  const end = Date.now() + ms
+  let value = await read()
+  while (!done(value) && Date.now() < end) {
+    await new Promise(resolve => setTimeout(resolve, 10))
+    value = await read()
+  }
+  return value
+}
+const event = ({ id = 'e1', openId = 'ou_owner_1', chatId = 'oc_chat_1', text = 'hello there' } = {}) => ({
+  header: { event_id: id, event_type: 'im.message.receive_v1' },
+  event: {
+    sender: { sender_id: { open_id: openId } },
+    message: { chat_id: chatId, message_type: 'text', content: JSON.stringify({ text }) },
+  },
+})
+
+test('#1266: one Feishu row, two modes, nothing connected and no socket', async (t) => {
+  const { ctx, dials } = rig(t)
+  const row = rowOf((await call(ctx, 'state', {})).value)
+  assert.equal(row.kind, 'channel')
+  assert.equal(row.state, 'off')
+  assert.equal(row.mode, null, 'no mode is live before the first connect')
+  assert.deepEqual(row.modes.map(mode => mode.id), ['webhook', 'app'])
+  assert.deepEqual(row.modes[0].credentials.map(field => [field.name, field.masked]), [['webhook', true]])
+  assert.deepEqual(row.modes[1].credentials.map(field => [field.name, field.masked]), [['app_id', false], ['app_secret', true]], 'the App ID is not a secret; the App Secret never comes back')
+  assert.deepEqual(row.allowed, [])
+  assert.deepEqual(row.inbound.refusedSenders, [])
+  assert.equal(row.inbound.state, 'off')
+  assert.equal(dials.length, 0, 'connecting is a decision, not a default')
+})
+
+test('#1266: connecting the app keeps the id in the record, the secret in secrets.json, and opens the socket', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { rt, ctx, home, dials } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+
+  const connected = await call(ctx, 'connector-connect', { id: 'feishu', mode: 'app', credentials: { app_id: ' cli_app_1 ', app_secret: 'app-secret-value' } })
+  assert.equal(connected.ok, true, JSON.stringify(connected))
+  const row = rowOf(connected.value)
+  assert.equal(row.state, 'ready')
+  assert.equal(row.mode, 'app')
+  assert.equal(row.inbound.state, 'ready')
+  assert.equal(row.inbound.app, 'set')
+  assert.equal(dials.length, 1, 'the socket dialled once the pair was proved')
+
+  const tokenCall = feishu.calls.find(entry => entry.url.endsWith('/open-apis/auth/v3/tenant_access_token/internal'))
+  assert.deepEqual(tokenCall.body, { app_id: 'cli_app_1', app_secret: 'app-secret-value' }, 'the probe proves the pair it was given')
+  assert.equal(feishu.calls.filter(entry => entry.url.includes('im/v1/messages')).length, 0, 'connecting sends no message')
+
+  const disk = readFileSync(join(home, 'state.json'), 'utf8')
+  assert.equal(JSON.parse(disk).connectors.feishu.appId, 'cli_app_1')
+  assert.doesNotMatch(disk, /app-secret-value/, 'the App Secret is not in state.json')
+  assert.equal(rt.secretValue('FEISHU_APP_SECRET'), 'app-secret-value')
+  assert.doesNotMatch(JSON.stringify(connected.value), /app-secret-value/, 'and it never comes back in the row')
+})
+
+test('#1266: a stranger starts no turn, appears on the row, and Allow makes the next message land', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { rt, ctx, dials } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+  const delivered = []
+  rt.remoteChats.open = async () => 'chat'
+  rt.remoteChats.deliver = async message => { delivered.push(message); return 'chat' }
+
+  await call(ctx, 'connector-connect', { id: 'feishu', mode: 'app', credentials: { app_id: 'cli_app_1', app_secret: 'app-secret-value' } })
+  const onEvent = dials[0]
+  assert.equal(await onEvent(event({ id: 'e1', openId: 'ou_stranger_1' })), 'refused')
+  assert.equal(delivered.length, 0, 'nobody may spend the owner\'s tokens by default')
+
+  const refused = rowOf((await call(ctx, 'state', {})).value).inbound.refusedSenders
+  assert.equal(refused.length, 1)
+  assert.equal(refused[0].openId, 'ou_stranger_1')
+  assert.equal(refused[0].name, 'Mallory', 'the row names who was turned away')
+  assert.match(refused[0].at, /^\d{4}-\d{2}-\d{2}T/)
+
+  const allowed = await call(ctx, 'connector-allow', { id: 'feishu', openId: 'ou_stranger_1' })
+  assert.equal(allowed.ok, true, JSON.stringify(allowed))
+  const row = rowOf(allowed.value)
+  assert.deepEqual(row.allowed, [{ openId: 'ou_stranger_1', name: 'Mallory' }])
+  assert.deepEqual(row.inbound.refusedSenders, [], 'an allowed sender leaves the refused list at once')
+
+  assert.equal(await onEvent(event({ id: 'e2', openId: 'ou_stranger_1' })), 'delivered')
+  assert.equal(delivered.length, 1)
+  assert.equal(delivered[0].handle, 'feishu:oc_chat_1')
+  assert.equal(delivered[0].plugin, 'feishu', 'the chat still carries the plugin its answers leave on')
+
+  const blocked = await call(ctx, 'connector-block', { id: 'feishu', openId: 'ou_stranger_1' })
+  assert.deepEqual(rowOf(blocked.value).allowed, [])
+  assert.equal(await onEvent(event({ id: 'e3', openId: 'ou_stranger_1' })), 'refused')
+  assert.equal(delivered.length, 1)
+})
+
+test('#1266: Disconnect closes the socket, deletes both credentials, and no turn starts after it', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { rt, ctx, dials, closes, home } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+  const delivered = []
+  rt.remoteChats.open = async () => 'chat'
+  rt.remoteChats.deliver = async message => { delivered.push(message); return 'chat' }
+
+  await call(ctx, 'connector-connect', { id: 'feishu', mode: 'app', credentials: { app_id: 'cli_app_1', app_secret: 'app-secret-value' } })
+  const onEvent = dials[0]
+  const off = await call(ctx, 'connector-disconnect', { id: 'feishu' })
+  assert.equal(off.ok, true, JSON.stringify(off))
+  const row = rowOf(off.value)
+  assert.equal(row.state, 'off')
+  assert.equal(row.mode, null)
+  assert.equal(row.inbound.state, 'off')
+  assert.deepEqual(row.allowed, [])
+  assert.equal(closes.length, 1, 'the socket was closed, not leaked')
+  assert.equal(rt.secretValue('FEISHU_APP_SECRET'), undefined)
+  assert.equal(JSON.parse(readFileSync(join(home, 'state.json'), 'utf8')).connectors?.feishu, undefined)
+
+  assert.equal(await onEvent(event({ id: 'e9' })), 'off', 'an event a socket still hands over starts nothing while off')
+  assert.equal(delivered.length, 0)
+})
+
+test('#1266: webhook mode is today\'s sender: one test POST, ready, no socket and no guest list', async (t) => {
+  const feishu = fakeFeishu([answer(200, { code: 0, data: { message_id: 'om_test' } })])
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { ctx, dials } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+
+  const connected = await call(ctx, 'connector-connect', { id: 'feishu', mode: 'webhook', credentials: { webhook: 'https://feishu.test/open-apis/bot/v2/hook/abc' } })
+  assert.equal(connected.ok, true, JSON.stringify(connected))
+  const row = rowOf(connected.value)
+  assert.equal(row.state, 'ready')
+  assert.equal(row.mode, 'webhook')
+  assert.equal(row.inbound.state, 'off')
+  assert.equal(dials.length, 0, 'webhook mode dials nothing')
+  assert.equal(feishu.calls.filter(entry => entry.url.includes('/bot/v2/hook/')).length, 1, 'one test message, as phase 1')
+  const guest = await call(ctx, 'connector-allow', { id: 'feishu', openId: 'ou_someone_1' })
+  assert.equal(guest.ok, false, 'a webhook-only row has no guest list')
+})
+
+test('#1266: a half-saved app pair dials nothing and says so on the row', async (t) => {
+  const { ctx, dials } = rig(t, { record: { mode: 'app', appId: 'cli_app_1' } })
+  const row = await until(async () => rowOf((await call(ctx, 'state', {})).value), value => value?.state === 'error')
+  assert.equal(row.state, 'error')
+  assert.match(row.error, /App ID and App Secret/)
+  assert.equal(dials.length, 0, 'one half of a pair never opens a socket')
+  assert.equal(row.inbound.state, 'off')
+})
+
+test('#1266: app mode answers back into the same Feishu chat, as the app', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  t.after(() => { globalThis.fetch = realFetch })
+
+  const handed = []
+  const reply = feishuReply({
+    appOf: () => ({ appId: 'cli_app_1', appSecret: 'app-secret-value' }),
+    secretValue: () => undefined,
+    sendApp: async (message, options) => { handed.push({ message, options }) },
+  })
+  await reply({ handle: 'feishu:oc_chat_9', text: 'the answer' })
+  assert.deepEqual(handed[0].message, { appId: 'cli_app_1', appSecret: 'app-secret-value', chatId: 'oc_chat_9', text: 'the answer' })
+  await assert.rejects(reply({ handle: 'not-a-feishu-chat', text: 'x' }), /Not sent: this answer has no Feishu chat/)
+
+  await feishuAppSend(
+    { appId: 'cli_app_1', appSecret: 'app-secret-value', chatId: 'oc_chat_9', text: 'the answer' },
+    { api: 'https://feishu.test' },
+  )
+  const send = feishu.calls.find(entry => entry.url.includes('/open-apis/im/v1/messages'))
+  assert.equal(send.url, 'https://feishu.test/open-apis/im/v1/messages?receive_id_type=chat_id')
+  assert.equal(send.body.receive_id, 'oc_chat_9')
+  assert.equal(send.body.msg_type, 'text')
+  assert.deepEqual(JSON.parse(send.body.content), { text: 'the answer' })
+  assert.equal(send.headers.authorization, 'Bearer t_app_token')
+})
+
+test('#1266: feishu is a name a saved capability may not take', () => {
+  assert.ok(RESERVED_NAMES.includes('feishu'))
+})
diff --git a/core/test/feishu-inbound.test.js b/core/test/feishu-inbound.test.js
index 9f9e56cc..ee333f72 100644
--- a/core/test/feishu-inbound.test.js
+++ b/core/test/feishu-inbound.test.js
@@ -1,6 +1,6 @@
 import assert from 'node:assert/strict'
 import { test } from 'node:test'
-import { APP_ID_SECRET, APP_SECRET_SECRET, DEDUPE_RING, appCredentials, createInbound, readEvent } from '../src/host/feishu-inbound.js'
+import { APP_SECRET_SECRET, DEDUPE_RING, MAX_REFUSED, appCredentials, createInbound, readEvent } from '../src/host/feishu-inbound.js'
 
 // #1266 phase 2: a message in Feishu starts a turn here, over the long connection. The socket is not
 // part of this module — every test injects one — so what is asserted is the policy a DSH upgrade or a
@@ -142,27 +142,31 @@ test('readEvent reads only the envelope phase 2 means to accept (#1266)', () =>
   assert.equal(readEvent({ header: { event_id: 'e6' }, event: { sender: { sender_id: { open_id: OWNER } }, message: { chat_id: 'oc', message_type: 'text', content: '{"text":"x"}' } } }) !== null, true)
 })
 
-test('the app pair is one credential: either half missing dials nothing (#1266)', () => {
-  const secrets = { [APP_ID_SECRET]: 'cli_app_1', [APP_SECRET_SECRET]: 'app-secret-value' }
-  const read = name => secrets[name]
-  assert.deepEqual(appCredentials(read), { appId: 'cli_app_1', appSecret: 'app-secret-value' })
-  assert.equal(appCredentials(name => (name === APP_ID_SECRET ? undefined : secrets[name])), undefined)
-  assert.equal(appCredentials(name => (name === APP_SECRET_SECRET ? '   ' : secrets[name])), undefined)
-  assert.equal(appCredentials(undefined), undefined)
+test('the app pair is one credential: it is the record\'s id and the saved secret, either half missing dials nothing (#1266)', () => {
+  const read = name => (name === APP_SECRET_SECRET ? 'app-secret-value' : undefined)
+  assert.deepEqual(appCredentials({ appId: 'cli_app_1' }, read), { appId: 'cli_app_1', appSecret: 'app-secret-value' })
+  // The id is not a secret: it lives in the connector record, so a missing record field is the half
+  // that is missing, without anything having to be saved on the Secrets page.
+  assert.equal(appCredentials({}, read), undefined)
+  assert.equal(appCredentials({ appId: '   ' }, read), undefined)
+  assert.equal(appCredentials({ appId: 'cli_app_1' }, () => '   '), undefined)
+  assert.equal(appCredentials({ appId: 'cli_app_1' }, () => undefined), undefined)
+  assert.equal(appCredentials(undefined, read), undefined)
 })
 
 test('the view never carries either half of the app pair (#1266)', async () => {
-  const secrets = { [APP_ID_SECRET]: 'cli_app_1', [APP_SECRET_SECRET]: 'app-secret-value' }
+  const secrets = { [APP_SECRET_SECRET]: 'app-secret-value' }
+  const app = { appId: 'cli_app_1' }
   const seen = []
   const transport = {
-    connect: async () => { throw new Error(`handshake refused for ${secrets[APP_ID_SECRET]} / ${secrets[APP_SECRET_SECRET]}`) },
+    connect: async () => { throw new Error(`handshake refused for ${app.appId} / ${secrets[APP_SECRET_SECRET]}`) },
   }
   const inbound = createInbound({
     enabled: true,
     ownerOpenId: OWNER,
     transport,
     deliver: async message => { seen.push(message) },
-    redact: text => String(text).split(secrets[APP_SECRET_SECRET]).join('[redacted]').split(secrets[APP_ID_SECRET]).join('[redacted]'),
+    redact: text => String(text).split(secrets[APP_SECRET_SECRET]).join('[redacted]').split(app.appId).join('[redacted]'),
   })
   await inbound.start()
   const view = JSON.stringify(inbound.view())
@@ -263,3 +267,42 @@ test('two copies of one event arriving together still start one turn (#1266)', a
   assert.deepEqual(results.sort(), ['delivered', 'duplicate'])
   assert.equal(turns.length, 1)
 })
+
+// #1266, the connector-row half: who may talk is the row's list (owner plus allowed senders), and a
+// refused sender is kept as one bounded line the row can offer Allow on.
+test('a sender the row allowed starts a turn; one it did not is refused (#1266)', async () => {
+  const turns = []
+  let allowed = ['ou_guest']
+  const inbound = createInbound({
+    enabled: true,
+    allowed: () => allowed.map(openId => ({ openId })),
+    transport: {},
+    deliver: async message => { turns.push(message) },
+  })
+  assert.equal(await inbound.handleEvent(event({ id: 'g1', openId: 'ou_guest' })), 'delivered')
+  allowed = []
+  assert.equal(await inbound.handleEvent(event({ id: 'g2', openId: 'ou_guest' })), 'refused')
+  assert.equal(turns.length, 1)
+})
+
+test('the refused list is one row per sender, bounded, and an allowed sender leaves it (#1266)', async () => {
+  let allowed = []
+  const inbound = createInbound({
+    enabled: true,
+    allowed: () => allowed,
+    transport: { nameOf: async openId => `Name ${openId}` },
+    deliver: async () => { throw new Error('nobody is allowed yet') },
+    now: () => Date.parse('2026-10-26T10:00:00Z'),
+  })
+  for (let n = 0; n < MAX_REFUSED + 5; n += 1) await inbound.handleEvent(event({ id: `r-${n}`, openId: `ou_${n}` }))
+  const refused = inbound.view().refusedSenders
+  assert.equal(refused.length, MAX_REFUSED, 'a stranger who writes many times cannot grow the row')
+  assert.equal(refused.at(-1).openId, `ou_${MAX_REFUSED + 4}`, 'the newest line is the one kept')
+  assert.equal(refused.at(-1).name, `Name ou_${MAX_REFUSED + 4}`)
+  assert.equal(refused.at(-1).at, '2026-10-26T10:00:00.000Z')
+  // One sender writing again is one line with a fresh time, not two lines.
+  await inbound.handleEvent(event({ id: 'again', openId: `ou_${MAX_REFUSED + 4}` }))
+  assert.equal(inbound.view().refusedSenders.length, MAX_REFUSED)
+  allowed = [`ou_${MAX_REFUSED + 4}`]
+  assert.ok(!inbound.view().refusedSenders.some(entry => entry.openId === `ou_${MAX_REFUSED + 4}`), 'allowing someone clears their line at once')
+})
diff --git a/core/test/feishu.test.js b/core/test/feishu.test.js
index 149f5322..c0662ce9 100644
--- a/core/test/feishu.test.js
+++ b/core/test/feishu.test.js
@@ -8,7 +8,7 @@ import { fileURLToPath } from 'node:url'
 import { runInNewContext } from 'node:vm'
 import { build } from 'esbuild'
 import { apply } from '../index.js'
-import { feishuPost } from '../src/host/connectors.js'
+import { FEISHU_MODES, feishuPost } from '../src/host/connectors.js'
 import { createNotifier } from '../src/host/notify.js'
 import { fakeContext } from './fake-ctx.js'
 
@@ -63,7 +63,10 @@ async function call(ctx, endpoint, payload) {
 const row = (view, id = 'feishu') => (view?.connectors ?? view ?? []).find(entry => entry.id === id)
 // #1266: the same row now carries the inbound state (off, no socket, app pair not saved). It is
 // spelled out here instead of spread, so a value leaking into the row cannot pass unnoticed.
-const INBOUND_OFF = { state: 'off', connected: 0, duplicates: 0, refused: 0, app: 'missing' }
+const INBOUND_OFF = { state: 'off', connected: 0, duplicates: 0, refused: 0, refusedSenders: [], app: 'missing' }
+// #1266: the sender row became a channel with two modes. Spelled out here, so a field leaking into
+// the row (or a mode arriving from nowhere) cannot pass unnoticed.
+const feishuRow = (state, mode = null) => ({ id: 'feishu', name: 'Feishu', state, kind: 'channel', account: null, mode, modes: FEISHU_MODES, allowed: [], inbound: INBOUND_OFF })
 const said = (warns, needle) => warns.filter(args => args.some(value => String(value).includes(needle)))
 
 // A fake Feishu that records each POST and answers from the script (the last answer repeats).
@@ -81,7 +84,7 @@ test('#1263: Feishu is a sender row of its own, off until a webhook is pasted',
   const { ctx, home } = setup()
   t.after(async () => { await ctx.dispose(); cleanHome(home) })
   const state = await call(ctx, 'state', {})
-  assert.deepEqual(row(state.value), { id: 'feishu', name: 'Feishu', state: 'off', kind: 'sender', account: null, inbound: INBOUND_OFF })
+  assert.deepEqual(row(state.value), feishuRow('off'))
   // A sender has no tools, so it is not a name a saved capability may take either way.
   assert.deepEqual(state.value.connectors.map(entry => entry.id), ['github', 'composio', 'feishu'])
 })
@@ -97,7 +100,7 @@ test('#1263: connecting posts one test message, turns ready, and keeps the webho
 
   const connected = await call(ctx, 'connector-connect', { id: 'feishu', token: ` ${webhook} ` })
   assert.equal(connected.ok, true, JSON.stringify(connected))
-  assert.deepEqual(row(connected.value), { id: 'feishu', name: 'Feishu', state: 'ready', kind: 'sender', account: null, inbound: INBOUND_OFF })
+  assert.deepEqual(row(connected.value), feishuRow('ready', 'webhook'))
 
   assert.equal(feishu.posts.length, 1, 'one test POST on connect')
   assert.equal(feishu.posts[0].url, webhook)
@@ -239,21 +242,46 @@ const renderRow = (connector, given = []) => {
   return tree
 }
 
-test('#1263: the Feishu row asks for a webhook URL and links to Feishu, not to GitHub', () => {
-  // form open, so the masked input and the link are drawn
-  const tree = renderRow({ id: 'feishu', name: 'Feishu', state: 'off', kind: 'sender', account: null }, [true, false, '', [], false, false, null])
+const FEISHU_OFF = { id: 'feishu', name: 'Feishu', state: 'off', kind: 'channel', account: null, mode: null, modes: FEISHU_MODES, allowed: [] }
+const FEISHU_APP = { ...FEISHU_OFF, state: 'ready', mode: 'app', allowed: [{ openId: 'ou_owner_1', name: 'Owner' }], inbound: { state: 'ready', refusedSenders: [{ openId: 'ou_stranger_1', name: 'Mallory', at: '2026-10-26T10:00:00.000Z' }] } }
+
+test('#1266: the Feishu row offers both ways to connect, and the webhook one links to Feishu', () => {
+  // form open, so the two mode buttons, the field and the link are drawn
+  const tree = renderRow(FEISHU_OFF, [true, false, '', [], false, false, null])
+  const buttons = all(tree).filter(node => node.type === 'button')
+  const modeButtons = buttons.filter(node => node.props['aria-pressed'] !== undefined && !node.props.className?.includes('bt-app-chip'))
+  assert.deepEqual(modeButtons.map(text), ['Custom bot webhook', 'App (long connection)'], 'one row, two modes, not a second Feishu row')
   const input = all(tree).find(node => node.type === 'input')
-  assert.equal(input.props['aria-label'], 'Feishu webhook URL')
+  assert.equal(input.props['aria-label'], 'Webhook URL', 'the webhook mode asks for its one credential')
   const link = all(tree).find(node => node.type === 'a')
-  assert.doesNotMatch(link.props.href, /github\.com/, 'the row must not send the owner to GitHub for a Feishu webhook')
+  assert.doesNotMatch(link.props.href, /github\.com/, 'the row must not send the owner to GitHub for Feishu')
   assert.match(link.props.href, /feishu/i)
   assert.doesNotMatch(text(tree), /GitHub token/)
 })
 
-test('#1263: a connected Feishu offers no per-Bot switch, because it has no tools', () => {
-  const tree = renderRow({ id: 'feishu', name: 'Feishu', state: 'ready', kind: 'sender', account: null })
-  const labels = all(tree).filter(node => node.type === 'button').map(text)
-  assert.ok(labels.includes('Disconnect'), labels.join('|'))
-  assert.ok(!labels.includes('Choose Bots'), 'a sender has no tools, so a per-Bot switch would do nothing')
-  assert.doesNotMatch(text(tree), /On for all \d+ Bots/)
+test('#1266: app mode asks for the App ID and the App Secret, and the App ID is not masked', () => {
+  const tree = renderRow({ ...FEISHU_OFF, mode: 'app' }, [true, false, '', [], false, false, null])
+  const inputs = all(tree).filter(node => node.type === 'input')
+  assert.deepEqual(inputs.map(node => node.props['aria-label']).filter(Boolean).slice(0, 3), ['App ID', 'App Secret'])
+  assert.equal(inputs[0].props.type, 'text', 'the App ID is kept in the record, so it is not a secret field')
+  assert.equal(all(tree).find(node => node.type === 'a').props.href.includes('app'), true, 'the link is how to create the app')
+})
+
+test('#1266: a webhook-only Feishu offers no per-Bot switch; the app mode does, with the guest list', () => {
+  const webhook = renderRow({ ...FEISHU_OFF, state: 'ready', mode: 'webhook' })
+  const webhookLabels = all(webhook).filter(node => node.type === 'button').map(text)
+  assert.ok(webhookLabels.includes('Disconnect'), webhookLabels.join('|'))
+  assert.ok(!webhookLabels.includes('Choose Bots'), 'a webhook is the phase-1 sender: a per-Bot switch would do nothing')
+  assert.doesNotMatch(text(webhook), /On for all \d+ Bots/)
+  assert.doesNotMatch(text(webhook), /Who may talk to the Bots/)
+
+  const app = renderRow(FEISHU_APP)
+  const appLabels = all(app).filter(node => node.type === 'button').map(text)
+  assert.ok(appLabels.includes('Choose Bots'), 'an app gives a Bot a way in, so the switch is real')
+  assert.match(text(app), /Off for every Bot|On for all \d+ Bots/, 'the row says which Bots may reach it')
+  assert.match(text(app), /Who may talk to the Bots/)
+  assert.match(text(app), /Owner/, 'who is allowed is on the row')
+  assert.match(text(app), /Mallory/, 'and who was turned away is there with Allow beside it')
+  assert.ok(appLabels.includes('Allow') && appLabels.includes('Block'))
+  assert.ok(!appLabels.includes('Send'), 'app mode answers by itself: there is no room to post into')
 })
diff --git a/docs/subsystems/core-client.md b/docs/subsystems/core-client.md
index 1d8d48eb..a4fbd5a2 100644
--- a/docs/subsystems/core-client.md
+++ b/docs/subsystems/core-client.md
@@ -226,6 +226,8 @@ Settings → Connectors (`src/client/connectors.js`) lists one row per connector
 
 The Feishu row (#1263) is a **sender** (`kind: 'sender'` from the host, not an id the client knows): the input is labelled **Feishu webhook URL** and its link goes to Feishu's custom-bot page, never to GitHub's token page. Because a sender has no tools there is no **Choose Bots** button and no *On for N Bots* line, and the Bot-settings **Connectors** card skips it (`connectedConnectors` drops `kind === 'sender'`), so no switch is offered that would change nothing. Once it is ready the row carries a text field with **Send**, which is the only caller of `connector-send`; a refused webhook shows **Could not connect: …** with **Try again** beside it.
 
+The same row is the whole act of connecting Feishu (#1266): it draws one row, not two, and the form has a **mode** — **Custom bot webhook** (one masked URL, outbound only, exactly phase 1) or **App (long connection)** (App ID + App Secret, one field per `credential` the definition declares, the App ID not masked because it is not a secret). Connect submits `{ mode, credentials }` through `connectorConnect`, which passes an object body straight to `connector-connect` and keeps the older single `token` body for every other row; the status line names the mode that is live, and **Disconnect** clears both. With `kind: 'channel'` the row offers the same per-Bot **Choose Bots** switch GitHub and Composio have (`connectedConnectors` includes a channel, so `connector-bots.js` lists it; off by default, never for a Bot shared with someone else) — a webhook-only row still shows no switch. App mode also renders **允许的飞书用户**: the refused senders the host reports, each with **Allow** / **Block** (`connector-allow` / `connector-block`), plus a paste-an-`open_id` field for the case where nobody has messaged yet; nobody is allowed until the owner adds them, so connecting the app never lets a stranger spend the owner's tokens.
+
 ### About FlyBot page (#374)
 
 `src/client/about.js` shows the FlyBot mark, `Version <core version> · <branch> <commit>` (the part after the version only for a git install), the Star button (the repository from `update.repoUrl`, the live count only when it came back) and the star request line, then **Updates** (the **FlyBot core** row and the **DeepSeek Harness (underlying)** row, zh `DeepSeek Harness（底层）`) and **Links** (Source code → the repository, Release notes → its releases, Report a problem → Settings → Feedback). For a git install on a branch the **FlyBot core** row reads `Installed from GitHub (main 082563a). Updates come from the maintainer: reinstall FlyBot to get them.`, and after **Check for updates** `Up to date with main.`, `1 commit behind main. …`, `N commits behind main. …` or `Could not compare with main. …` plus `· Checked <time>`; a row with no known commit keeps the first sentence. An install pinned to a commit (`build.pinned`) reads `Pinned to commit 6d04db6. Updates come from the maintainer: reinstall FlyBot to get them.` and the version line shows only the short commit (#379). Other installs keep their old lines (`Updates are not offered for this install.`, `Installed from a local folder; update it there.`, `Update checks are off.`). Every string has a zh entry.
diff --git a/docs/subsystems/core-host.md b/docs/subsystems/core-host.md
index 52caea11..5cf8823d 100644
--- a/docs/subsystems/core-host.md
+++ b/docs/subsystems/core-host.md
@@ -390,6 +390,8 @@ Feishu (Lark) is the first **sender** connector (#1263): a group's custom-bot we
 
 The same row carries a Feishu message coming **in** (#1266): `inbound` reports `off|connecting|ready|error`, the last event, the last error and whether the app pair is `set` or `missing` — never a value. `src/host/feishu-inbound.js` owns the policy: off unless `feishu.enabled` is true (an off connector dials nothing), the owner is the only sender that may start a turn (an unset or empty `feishu.ownerOpenId` refuses everyone, and an empty `open_id` never compares equal), a bounded ring of 512 `event_id`s makes a replay land once — the id enters it only after `deliver` has returned, so a handover that threw is retried instead of being refused as a duplicate for ever — and one socket per connector shares a start. The socket itself is injected as `rt.feishuTransport` (`connect(onEvent) -> { close }`) so the client behind it is one adapter, and it is read again on every start rather than copied while the modules install — an adapter that arrives later comes up on the row's **Try again**, which retries the sender and the socket together; a stop that lands while a socket dials hangs up the one that arrives instead of adopting it. `src/host/feishu-sdk.js` is the default adapter over the official `@larksuiteoapi/node-sdk`, imported only when a socket is dialled and reading the app pair at that moment, so a host that never turns the long connection on pays nothing for the package; the message lands through `remote-chat.deliver`, the seam a friend's Bot already uses, and the answer leaves again through the sender this module registers in that seam under the `feishu` plugin, posting on the same `FEISHU_WEBHOOK` `feishuPost` has used since phase 1 (a chat an older build opened without the plugin is refreshed on its next message) — one path in, one path out. `FEISHU_APP_ID` + `FEISHU_APP_SECRET` are read as one credential through the same `rt.secretValue`, and a half-saved pair reports `missing` and dials nothing.
 
+The connector row is where Feishu is configured (#1266, owner's word 「飞书是做成一个连接器，左下角点击连接应用的时候可以连接」), so the definition is no longer one secret and one mode: `feishu` is `kind: 'channel'`, declares `credentials` (`FEISHU_MODES` — a custom-bot **webhook** with one masked URL, outbound only as phase 1, or a self-built **app** with App ID + App Secret) instead of the singular `secret`, and `reconcile()` branches on `kind` — a channel is a socket whose lifecycle is the row's status (`off|connecting|ready|error`), while every other connector is still an MCP client. App mode proves the pair with one `POST /open-apis/auth/v3/tenant_access_token/internal` that is then discarded (the socket dials with its own credentials, so the token never reaches a row, a log line or an error), keeps `app_id` in the record because it is not a secret, and puts `app_secret` only in `secrets.json`; a half-saved pair is `missing` and dials nothing. The record also carries the guest list the inbound gate reads — `allowed: [{ openId, name? }]`, nobody by default, changed only through `connector-allow` / `connector-block` (both `SHARED_BLOCKED` like the rest of the `connector-*` writes, both routed in `channel.js`), so a stranger's message starts no turn and appears on the row as one refused sender. `Disconnect` closes the socket and clears both credentials. `feishu` joins `github` and `composio` in `RESERVED_NAMES`, so a saved capability cannot take the row's id.
+
 ### Secret scope defaults (#545)
 
 A key the owner saves is for **all of the owner's Bots** (`scope: 'all'`) unless the owner narrows it: a card's "Only <Bot>", the Secrets page's *Chosen Bots* or *No Bot*. That holds for a connector key too (`GITHUB_TOKEN`, `COMPOSIO_API_KEY`): `connector-connect` no longer passes `scope: []`, and a reconnect keeps the scope the key already has. A scope the owner chose is stored with `scopeSet: true` (`secret-update`, `secret-set` with a `scope`, a card's "Only <Bot>", and a deleted Bot leaving a picked list), so an empty list stays "No Bot". On load, an empty list **without** `scopeSet` is the old connector default and becomes `'all'` once (written back by the host that holds the team; a reading host widens it in memory only). An empty list the owner picked before #545 carries no marker and is widened too: there is no way to tell it apart. **Every turn of every one of the owner's own Bots** gets the keys its scope allows (owner decision 2026-10-22, #601: 「放开这个权限管理，我的bot都应该能看到」). Where the turn came from no longer matters for secrets: a group round, a Bot-to-Bot relay, a scheduled turn, a turn a friend started on a shared Bot, a turn with no recorded origin, and bash inside a sub-agent all get them. A sub-agent's shell resolves to its parent Bot along the same chain as the connector guard (`rt.whoseAgent`, from `connector-access.js`); a chain that cannot be followed to a Bot gets no value. The boundaries that stay: a friend's Bot (`remote`) never gets the owner's keys, and a key scoped to chosen Bots goes only to those Bots. A capability (`canUseSecret`) follows the same rule. This replaces the turn-origin rule of #545/#581, under which a shell got `'all'` keys only on a turn that `settled` as the owner's. The connector *tools* follow the same rule (#601, below); secrets no longer read `turn-origin.js`. Owner decision 2026-10-20 (#359, AGENTS.md hard rule 4).
diff --git a/patches/ds-bot/0001-core-fixes.patch b/patches/ds-bot/0001-core-fixes.patch
index fd26691f..4fb595ed 100644
--- a/patches/ds-bot/0001-core-fixes.patch
+++ b/patches/ds-bot/0001-core-fixes.patch
@@ -218,7 +218,7 @@ diff --git a/src/client/browser-pane.js b/src/client/browser-pane.js
 diff --git a/src/client/connectors.js b/src/client/connectors.js
 --- a/src/client/connectors.js
 +++ b/src/client/connectors.js
-@@ -1,41 +1,151 @@
+@@ -1,41 +1,217 @@
 -import { createElement as h, useRef, useState } from 'react'
 +import { createElement as h, useCallback, useEffect, useRef, useState } from 'react'
  import { useMorph } from './motion.js'
@@ -265,12 +265,55 @@ diff --git a/src/client/connectors.js b/src/client/connectors.js
  function statusText(connector) {
    if (connector.state === 'connecting') return t('Connecting…')
    if (connector.state === 'error') return t('Could not connect: {error}', { error: connector.error ?? '' })
++  if (connector.state === 'ready' && connector.kind === 'channel') {
++    return connector.mode === 'app' ? t('Connected: app, over the long connection') : t('Connected: custom bot webhook')
++  }
 +  if (connector.state === 'ready' && connector.apps?.length > 0) return t('Connected: {apps}', { apps: connector.apps.map(appName).join(', ') })
    if (connector.state === 'ready') return connector.account ? t('Connected as {account}', { account: connector.account }) : t('Connected')
    return ABOUT[connector.id]?.() ?? ''
  }
  
 -function ConnectorRow({ connector, actions }) {
++// One credential of the form (#1266): the definition says which fields a mode needs and whether a
++// field is masked. A masked one is the same field the Secrets page uses, so it never comes back.
++function CredentialField({ credential, value, onChange, onEnter, autoFocus }) {
++  const label = t(credential.label)
++  if (credential.masked) return h(MaskedInput, { value, onChange, onEnter, label, autoFocus })
++  return h('label', { className: 'bt-q-field' },
++    h('input', {
++      className: 'bt-input', type: 'text', value, 'aria-label': label, placeholder: label, spellCheck: false, autoFocus,
++      onChange: event => onChange(event.target.value),
++      onKeyDown: event => { if (event.key === 'Enter') onEnter?.() },
++    }))
++}
++
++// Who may talk to the Bots (#1266). Nobody until the owner allows someone: a stranger who messages
++// is one line here with Allow beside it, and the open_id can be pasted before anyone has written.
++function AllowedSenders({ connector, actions, run, busy }) {
++  const [openId, setOpenId] = useState('')
++  const allowed = connector.allowed ?? []
++  const refused = connector.inbound?.refusedSenders ?? []
++  const allow = id => void run(actions.connectorAllow(connector.id, id))
++  return h('div', { className: 'bt-connector-allowed' },
++    h('span', { className: 'bt-connector-person-title' }, t('Who may talk to the Bots')),
++    allowed.length === 0 && refused.length === 0
++      ? h('span', { className: 'bt-set-hint' }, t('Nobody yet. A message from anyone else starts no turn.'))
++      : null,
++    allowed.map(entry => h('div', { key: entry.openId, className: 'bt-connector-person' },
++      h('span', { className: 'bt-connector-person-name' }, entry.name ?? entry.openId),
++      h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => void run(actions.connectorBlock(connector.id, entry.openId)) }, t('Block')))),
++    refused.map(entry => h('div', { key: entry.openId, className: 'bt-connector-person' },
++      h('span', { className: 'bt-connector-person-name' }, entry.name ?? entry.openId),
++      h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => allow(entry.openId) }, t('Allow')))),
++    h('div', { className: 'bt-connector-form-row' },
++      h('input', {
++        className: 'bt-input', type: 'text', value: openId, spellCheck: false, 'aria-label': t('Feishu open_id'), placeholder: t('Paste an open_id to allow'),
++        onChange: event => setOpenId(event.target.value),
++        onKeyDown: event => { if (event.key === 'Enter' && openId.trim() !== '') { allow(openId.trim()); setOpenId('') } },
++      }),
++      h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || openId.trim() === '', onClick: () => { allow(openId.trim()); setOpenId('') } }, t('Allow'))))
++}
++
 +// What a picked app needs before a Bot can use it, as Composio last answered.
 +const APP_STATUS = { ready: () => t('Ready'), 'sign-in': () => t('Needs sign-in') }
 +
@@ -347,6 +390,17 @@ diff --git a/src/client/connectors.js b/src/client/connectors.js
 +  const gateway = connector.id === 'composio'
 +  // A sender posts through one webhook: no tools, so no per-Bot switch, and its own send field.
 +  const sender = connector.kind === 'sender'
++  // A channel (#1266) is one row with two modes: a custom-bot webhook (outbound only, today's
++  // behaviour) or a self-built app (the long connection in, answers out). The form is the mode's
++  // credential list, rendered field by field.
++  const channel = connector.kind === 'channel'
++  const modes = connector.modes ?? []
++  const [mode, setMode] = useState(() => connector.mode ?? modes[0]?.id)
++  const [values, setValues] = useState({})
++  const chosen = modes.find(entry => entry.id === mode) ?? modes[0]
++  const field = name => values[name] ?? ''
++  const setField = (name, value) => setValues(current => ({ ...current, [name]: value }))
++  const filled = chosen !== undefined && chosen.credentials.every(credential => field(credential.name).trim() !== '')
 +  const [statuses, setStatuses] = useState({})
 +  const appsKey = (connector.apps ?? []).join(',')
 +  // Asks Composio which picked apps are signed in, when the row is ready and again when the list changes.
@@ -358,8 +412,16 @@ diff --git a/src/client/connectors.js b/src/client/connectors.js
 +  }, [gateway, connector.state, appsKey, picking])
 +  const search = useCallback(query => actions.connectorAppSearch(connector.id, query, connector.state === 'off' ? token : undefined), [connector.id, connector.state, token])
    const connect = () => {
-     if (busy || token.trim() === '') return
+-    if (busy || token.trim() === '') return
 -    void run(actions.connectorConnect(connector.id, token), () => { setToken(''); setForm(false) })
++    if (busy) return
++    if (channel) {
++      if (chosen === undefined || !filled) return
++      const credentials = Object.fromEntries(chosen.credentials.map(credential => [credential.name, field(credential.name)]))
++      void run(actions.connectorConnect(connector.id, { mode: chosen.id, credentials }), () => { setValues({}); setForm(false) })
++      return
++    }
++    if (token.trim() === '') return
 +    if (gateway && apps.length === 0) { setError(t('Pick at least one app')); return }
 +    void run(actions.connectorConnect(connector.id, token, gateway ? apps : undefined), () => { setToken(''); setForm(false) })
 +  }
@@ -369,43 +431,61 @@ diff --git a/src/client/connectors.js b/src/client/connectors.js
 +    void run(actions.connectorApps(connector.id, apps), () => setPicking(false))
    }
    const on = connector.state !== 'off'
++  // A channel offers Send only while its webhook mode is live: app mode answers by itself.
++  const canPost = sender || (channel && connector.mode === 'webhook')
++  // Choose Bots is for what gives a Bot tools or a way in. A webhook-only channel has neither, so the
++  // switch would change nothing (acceptance 5, #1266).
++  const perBot = !sender && (!channel || connector.mode === 'app')
    const Mark = MARKS[connector.id]
    const row = useRef(null)
 -  useMorph(row, `${form}:${error !== null}:${connector.state}`)
-+  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}`)
++  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}:${mode}`)
    return h('div', { ref: row, className: 'bt-connector', 'data-state': connector.state },
      h('div', { className: 'bt-connector-head' },
        h('span', { className: 'bt-connector-mark' }, Mark ? h(Mark) : null),
-@@ -44,15 +44,33 @@ function ConnectorRow({ connector, actions }) {
+@@ -44,15 +44,44 @@ function ConnectorRow({ connector, actions }) {
          h('span', { className: 'bt-connector-status' }, statusText(connector))),
        h('span', { className: 'bt-connector-actions' },
          connector.state === 'error' ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => void run(actions.connectorRetry(connector.id)) }, t('Try again')) : null,
 +        on && gateway && !picking ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setApps(connector.apps ?? []); setPicking(true) } }, t('Choose apps')) : null,
-+        on && !sender ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', 'aria-expanded': bots, onClick: () => setBots(value => !value) }, bots ? t('Done') : t('Choose Bots')) : null,
++        on && perBot ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', 'aria-expanded': bots, onClick: () => setBots(value => !value) }, bots ? t('Done') : t('Choose Bots')) : null,
          on
            ? h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => void run(actions.connectorDisconnect(connector.id)) }, t('Disconnect'))
            : form ? null : h('button', { type: 'button', className: 'bt-soft bt-soft-sm', onClick: () => setForm(true) }, t('Connect')))),
 +    on && gateway && !picking ? h(AppStatusList, { apps: connector.apps ?? [], statuses }) : null,
-+    on && !sender ? h('span', { className: 'bt-connector-uses' }, usageText(roster, connector.id)) : null,
++    on && perBot ? h('span', { className: 'bt-connector-uses' }, usageText(roster, connector.id)) : null,
 +    on && bots ? h(ConnectorBots, { connector, roster, actions, run, SwitchRow }) : null,
-+    on && sender ? h('div', { className: 'bt-connector-form' },
++    on && channel && connector.mode === 'app' ? h(AllowedSenders, { connector, actions, run, busy }) : null,
++    on && canPost ? h('div', { className: 'bt-connector-form' },
 +      h('label', { className: 'bt-q-field' }, h('input', { className: 'bt-input', type: 'text', value: message, 'aria-label': t('Message to send to Feishu'), placeholder: t('Type a message for the Feishu group'), onChange: event => setMessage(event.target.value) })),
 +      h('div', { className: 'bt-connector-form-row' },
 +        h('span', { className: 'bt-connector-link' }),
 +        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || message.trim() === '' || actions.connectorSend === undefined, onClick: () => void run(actions.connectorSend(connector.id, message), () => setMessage('')) }, t('Send')))) : null,
      !on && form ? h('div', { className: 'bt-connector-form' },
 -      h('label', { className: 'bt-q-field bt-secret-field' }, h(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: t('GitHub token'), autoFocus: true })),
-+      h('label', { className: 'bt-q-field bt-secret-field' }, h(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: sender ? t('Feishu webhook URL') : gateway ? t('Composio API key') : t('GitHub token'), autoFocus: true })),
++      channel ? h('div', { className: 'bt-states', role: 'group', 'aria-label': t('How to connect') }, modes.map(entry =>
++        h('button', {
++          key: entry.id, type: 'button', className: 'bt-state', 'aria-pressed': entry.id === chosen?.id,
++          onClick: () => { setMode(entry.id); setValues({}); setError(null) },
++        }, t(entry.label)))) : null,
++      channel
++        ? (chosen?.credentials ?? []).map((credential, index) => h(CredentialField, {
++          key: credential.name, credential, value: field(credential.name), onChange: value => setField(credential.name, value), onEnter: connect, autoFocus: index === 0,
++        }))
++        : h('label', { className: 'bt-q-field bt-secret-field' }, h(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: gateway ? t('Composio API key') : t('GitHub token'), autoFocus: true })),
 +      gateway ? h(AppPicker, { apps, onChange: setApps, search: token.trim() === '' ? undefined : search }) : null,
-       h('div', { className: 'bt-connector-form-row' },
--        h('a', { className: 'bt-connector-link', href: TOKEN_URL, target: '_blank', rel: 'noopener noreferrer' }, t('Create a token on GitHub')),
-+        h('a', { className: 'bt-connector-link', href: sender ? FEISHU_WEBHOOK_URL : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: '_blank', rel: 'noopener noreferrer' }, sender ? t('Get a webhook URL in Feishu') : gateway ? t('Get a Composio API key') : t('Create a token on GitHub')),
-         h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setForm(false); setToken(''); setError(null) } }, t('Cancel')),
-         h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || token.trim() === '', onClick: connect }, busy ? t('Connecting…') : t('Connect')))) : null,
++      h('div', { className: 'bt-connector-form-row' },
++        h('a', { className: 'bt-connector-link', href: channel ? (chosen?.link ?? FEISHU_WEBHOOK_URL) : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: '_blank', rel: 'noopener noreferrer' },
++          channel ? t(chosen?.linkLabel ?? 'Get a webhook URL in Feishu') : gateway ? t('Get a Composio API key') : t('Create a token on GitHub')),
++        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setForm(false); setToken(''); setValues({}); setError(null) } }, t('Cancel')),
++        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || (channel ? !filled : token.trim() === ''), onClick: connect }, busy ? t('Connecting…') : t('Connect')))) : null,
 +    on && gateway && picking ? h('div', { className: 'bt-connector-form' },
 +      h(AppPicker, { apps, onChange: setApps, search, statuses }),
 +      h('span', { className: 'bt-set-hint' }, t('The first time a Bot uses an app, it shows a sign-in link in the chat.')),
-+      h('div', { className: 'bt-connector-form-row' },
+       h('div', { className: 'bt-connector-form-row' },
+-        h('a', { className: 'bt-connector-link', href: TOKEN_URL, target: '_blank', rel: 'noopener noreferrer' }, t('Create a token on GitHub')),
+-        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setForm(false); setToken(''); setError(null) } }, t('Cancel')),
+-        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || token.trim() === '', onClick: connect }, busy ? t('Connecting…') : t('Connect')))) : null,
 +        h('span', { className: 'bt-connector-link' }),
 +        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy, onClick: () => { setPicking(false); setError(null) } }, t('Cancel')),
 +        h('button', { type: 'button', className: 'bt-soft bt-soft-sm', disabled: busy || apps.length === 0, onClick: saveApps }, busy ? t('Connecting…') : t('Save')))) : null,
@@ -710,7 +790,7 @@ diff --git a/src/client/i18n.js b/src/client/i18n.js
    Connected: '已连接',
    Disconnect: '断开',
    Connect: '连接',
-@@ -105,17 +105,50 @@ const ZH = {
+@@ -105,17 +105,64 @@ const ZH = {
    'GitHub addresses must start with https://': 'GitHub 地址必须以 https:// 开头',
    'This DSH cannot load connectors': '这个 DSH 不能加载连接器',
    'No such connector': '没有这个连接器',
@@ -720,6 +800,20 @@ diff --git a/src/client/i18n.js b/src/client/i18n.js
 +  'Posts into one Feishu group through a custom bot webhook': '通过自定义机器人 webhook 发到你的一个飞书群',
 +  'Feishu webhook URL': '飞书 webhook 地址',
 +  'Get a webhook URL in Feishu': '去飞书获取 webhook 地址',
++  'Custom bot webhook': '自定义机器人 webhook',
++  'App (long connection)': '自建应用（长连接）',
++  'Webhook URL': 'Webhook 地址',
++  'App ID': 'App ID',
++  'App Secret': 'App Secret',
++  'Create a Feishu app': '去飞书创建自建应用',
++  'How to connect': '连接方式',
++  'Connected: app, over the long connection': '已连接：自建应用，走长连接',
++  'Connected: custom bot webhook': '已连接：自定义机器人 webhook',
++  'Who may talk to the Bots': '允许的飞书用户',
++  'Nobody yet. A message from anyone else starts no turn.': '还没有人。其他人发来的消息不会起 turn。',
++  'Paste an open_id to allow': '粘贴 open_id 来允许某个人',
++  'Feishu open_id': '飞书 open_id',
++  Block: '移除',
 +  'Message to send to Feishu': '要发到飞书的消息',
 +  'Type a message for the Feishu group': '输入要发到飞书群的消息',
 +  Send: '发送',
@@ -2632,7 +2726,7 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +
 +import { randomUUID } from 'node:crypto'
 +import { createNotifier } from './notify.js'
-+import { appCredentials, createInbound } from './feishu-inbound.js'
++import { APP_SECRET_SECRET, appCredentials, createInbound } from './feishu-inbound.js'
 +import { createFeishuTransport } from './feishu-sdk.js'
  
  export const GITHUB = 'github'
@@ -2642,7 +2736,7 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +export const FEISHU = 'feishu'
 +export const FEISHU_SECRET = 'FEISHU_WEBHOOK'
 +// Names a saved capability may not take, because the mount already uses them.
-+export const RESERVED_NAMES = [GITHUB, COMPOSIO]
++export const RESERVED_NAMES = [GITHUB, COMPOSIO, FEISHU]
  const MCP_CLIENT = '@deepseek-ai/dsh-mcp-client'
 -const DEFAULTS = {
 +const GITHUB_DEFAULTS = {
@@ -2672,7 +2766,7 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
    let response
    try {
      response = await request(`${api.replace(/\/$/, '')}/user`, {
-@@ -38,132 +38,729 @@ export async function signIn(token, { api = DEFAULTS.api, fetch: request = fetch
+@@ -38,132 +38,985 @@ export async function signIn(token, { api = DEFAULTS.api, fetch: request = fetch
    return { login: user.login }
  }
  
@@ -2926,20 +3020,118 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +  return { postMessage: message => feishuPost(webhook, message?.text ?? '', { fetch: request, timeoutMs }) }
 +}
 +
-+// The way out for an answer to a Feishu message (#1266): the webhook phase 1 already posts on, so a
-+// message in and an answer out are one credential and one transport. Kept out of `install` so the
-+// exit can be asserted without a socket. A missing webhook or a refusal is a sentence the chat
-+// shows ("Not sent: …"), never a silent drop: `remote-chat` prints exactly what is thrown here.
-+export function feishuReply({ secretValue, post = feishuPost, timeoutMs = SEND_TIMEOUT_MS } = {}) {
-+  return async ({ text }) => {
++// The app-mode probe (#1266): a POST that proves the pair and is then thrown away. The long
++// connection dials with its own credentials, so nothing here may leak the token into an error, a log
++// line or the row; the answer is only "accepted" or one sentence.
++const FEISHU_TOKEN_PATH = '/open-apis/auth/v3/tenant_access_token/internal'
++
++const feishuOrigin = (api) => {
++  try {
++    return new URL(String(api)).origin
++  } catch {
++    throw new Error('The Feishu API address is not a URL')
++  }
++}
++
++// One tenant token, asked for at the moment it is needed (the probe, or one answer). It is never
++// kept: the socket keeps its own, and an answer does not outlive its POST.
++export async function feishuAppToken({ appId, appSecret }, { api = FEISHU_DEFAULTS.api, fetch: request = fetch, timeoutMs = CHECK_TIMEOUT_MS } = {}) {
++  let response
++  try {
++    response = await withDeadline(request(`${feishuOrigin(api)}${FEISHU_TOKEN_PATH}`, {
++      method: 'POST',
++      headers: { 'content-type': 'application/json; charset=utf-8' },
++      body: JSON.stringify({ app_id: appId, app_secret: appSecret }),
++      redirect: 'error',
++      signal: AbortSignal.timeout(Math.max(1, timeoutMs)),
++    }), timeoutMs)
++  } catch {
++    throw new Error('Could not reach Feishu')
++  }
++  const body = await response.json().catch(() => ({}))
++  const code = Number(body?.code)
++  if (response.status === 401 || response.status === 403 || code === 10003 || code === 10014) throw new Error('Feishu did not accept this App ID and App Secret')
++  if (!response.ok) throw new Error(`Feishu answered ${response.status}`)
++  const token = body?.tenant_access_token
++  if (code !== 0 || typeof token !== 'string' || token === '') throw new Error('Feishu did not accept this App ID and App Secret')
++  return token
++}
++
++// The connect step of app mode: prove the pair, then forget the token on purpose.
++export async function feishuAppCheck(credentials, options = {}) {
++  await feishuAppToken(credentials, options)
++  return {}
++}
++
++// One answer back into the chat the message came from, as the app itself: `im/v1/messages` addressed
++// by chat id (the `oc_…` tail of the `feishu:oc_…` handle). This is what makes "connect the app and
++// it works" true with no webhook saved — the pair the owner just pasted is the whole credential.
++export async function feishuAppSend({ appId, appSecret, chatId, text }, { api = FEISHU_DEFAULTS.api, fetch: request = fetch, timeoutMs = SEND_TIMEOUT_MS } = {}) {
++  const token = await feishuAppToken({ appId, appSecret }, { api, fetch: request, timeoutMs })
++  let response
++  try {
++    response = await withDeadline(request(`${feishuOrigin(api)}/open-apis/im/v1/messages?receive_id_type=chat_id`, {
++      method: 'POST',
++      headers: { 'content-type': 'application/json; charset=utf-8', authorization: `Bearer ${token}` },
++      body: JSON.stringify({ receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text: String(text) }) }),
++      redirect: 'error',
++      signal: AbortSignal.timeout(Math.max(1, timeoutMs)),
++    }), timeoutMs)
++  } catch {
++    throw new Error('Not sent: could not reach Feishu')
++  }
++  const body = await response.json().catch(() => ({}))
++  const code = Number(body?.code)
++  if (response.ok && code === 0) return
++  if (response.status === 401 || response.status === 403 || code === 99991663) throw new Error('Not sent: Feishu refused the app token while sending the answer')
++  throw new Error(`Not sent: Feishu refused the answer (feishu/${Number.isFinite(code) ? code : response.status})`)
++}
++
++// The way out for an answer to a Feishu message (#1266). App mode answers as the app, in the very
++// chat the message came from; webhook mode answers on the webhook phase 1 already posts on, so a
++// message in and an answer out stay one credential and one transport. Which one is read on every
++// send, so switching modes needs no re-registration. A missing credential or a refusal is a sentence
++// the chat shows ("Not sent: …"), never a silent drop: `remote-chat` prints exactly what is thrown.
++export function feishuReply({ secretValue, appOf, post = feishuPost, sendApp = feishuAppSend, timeoutMs = SEND_TIMEOUT_MS } = {}) {
++  return async ({ text, handle }) => {
++    const app = appOf?.()
++    if (app !== undefined) {
++      const chatId = typeof handle === 'string' && handle.startsWith(`${FEISHU}:`) ? handle.slice(FEISHU.length + 1) : undefined
++      if (chatId === undefined || chatId === '') throw new Error('Not sent: this answer has no Feishu chat to go to.')
++      await sendApp({ ...app, chatId, text: String(text ?? '') }, { timeoutMs })
++      return
++    }
 +    const webhook = secretValue?.(FEISHU_SECRET)
-+    if (webhook === undefined) throw new Error('Not sent: connect Feishu first, so the answer has a webhook to leave on.')
++    if (webhook === undefined) throw new Error('Not sent: connect Feishu first, so the answer has a way out.')
 +    const answer = await post(webhook, String(text ?? ''), { timeoutMs })
 +    if (answer?.ok === true) return
 +    throw new Error(`Not sent: Feishu refused the answer (${answer?.error ?? 'no answer'})`)
 +  }
 +}
 +
++// The two ways the Feishu row connects (#1266), as data the form renders: one field per credential,
++// `masked` on the ones that never come back to the client. There is one Feishu row, not one per mode:
++// two rows with the same name would be a puzzle, and the owner asked to click Connect in one place.
++export const FEISHU_MODES = [
++  {
++    id: 'webhook',
++    label: 'Custom bot webhook',
++    credentials: [{ name: 'webhook', label: 'Webhook URL', masked: true }],
++    link: 'https://open.feishu.cn/document/client-docs/bot-v3/add-custom-bot',
++    linkLabel: 'Get a webhook URL in Feishu',
++  },
++  {
++    id: 'app',
++    label: 'App (long connection)',
++    credentials: [
++      { name: 'app_id', label: 'App ID', masked: false },
++      { name: 'app_secret', label: 'App Secret', masked: true },
++    ],
++    link: 'https://open.feishu.cn/document/home/develop-a-bot-in-5-minutes/create-an-app',
++    linkLabel: 'Create a Feishu app',
++  },
++]
++
 +const DEFINITIONS = {
 +  [GITHUB]: {
 +    id: GITHUB,
@@ -2996,10 +3188,11 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +    // Keeps the user id: a new key for the same FlyBot finds the apps already signed in.
 +    afterDisconnect: saved => saved?.userId === undefined ? undefined : { userId: saved.userId },
 +  },
-+  // Feishu (Lark) is not an MCP server: a custom-bot webhook is one HTTPS POST into the instance's
-+  // own group. So it is a *sender* — nothing is mounted, no Bot's tool list changes, and the only
-+  // things it has are a status and a send (#1263). The app-credential path slots in behind the same
-+  // send, without touching a caller.
++  // Feishu (Lark) is not an MCP server: it is a *channel* (#1266). Nothing is mounted and no Bot's
++  // tool list changes; what it has is a status, one way in (the long connection of a self-built app)
++  // and one way out (that app, or the custom-bot webhook of phase 1). `kind: 'channel'` is what makes
++  // the row offer Choose Bots and what makes `reconcile()` open the socket instead of importing a
++  // client: webhook mode is the same row with nothing to dial.
 +  [FEISHU]: {
 +    id: FEISHU,
 +    name: 'Feishu',
@@ -3007,8 +3200,9 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +    purpose: 'Feishu webhook',
 +    defaults: FEISHU_DEFAULTS,
 +    addresses: options => [options.api],
-+    kind: 'sender',
-+    paste: 'Paste a webhook URL first',
++    kind: 'channel',
++    modes: FEISHU_MODES,
++    paste: 'Choose how to connect Feishu and fill in its fields first',
 +    async check({ token, options }) {
 +      return feishuCheck(token, { api: options.api })
 +    },
@@ -3050,23 +3244,31 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +
 +  // Feishu inbound (#1266): a message in Feishu starts a turn here. The socket is injected —
 +  // `rt.feishuTransport` is the one adapter the SDK-versus-hand-written decision changes, so nothing
-+  // below depends on which client dials. Off unless the owner turned it on, and with no socket adapter
-+  // it starts nothing rather than pretend. The message lands through `remote-chat.deliver` — the same
-+  // seam a friend's Bot uses — and the answer leaves through the sender this module registers in that
-+  // same seam, on the webhook phase 1 posts on: one path in, one path out.
++  // below depends on which client dials. Off unless the owner connected the app on the row, and with
++  // no socket adapter it starts nothing rather than pretend. The message lands through
++  // `remote-chat.deliver` — the same seam a friend's Bot uses — and the answer leaves through the
++  // sender this module registers in that same seam: app mode answers as the app, webhook mode on the
++  // webhook phase 1 posts on. One path in, one path out.
 +  //
++  // What the owner set lives in the connector record, not in `rt.config` (#1266): the row is the
++  // place Feishu is configured, so the switch and the allowed senders are read from the record every
++  // time instead of being copied while this module installs.
++  const saved = c => state.connectors?.[c.def.id]
++  const feishuRecord = () => state.connectors?.[FEISHU]
++  const appOf = () => appCredentials(feishuRecord(), name => rt.secretValue(name))
++
 +  // The default adapter is the official SDK, and it is put on the runtime *before* the policy reads
 +  // it. That read happens on every `start()` rather than once here, so an adapter installed later
 +  // (a test's stub, a plugin's own client) is the one the next start dials instead of a snapshot
 +  // taken while it was missing.
 +  if (rt.feishuTransport === undefined) {
 +    rt.feishuTransport = createFeishuTransport({
-+      credentials: () => appCredentials(name => rt.secretValue(name)),
++      credentials: () => appOf(),
 +      log: (format, ...args) => rt.warn(`ds-bot: ${format}`, ...args),
 +    })
 +  }
 +  // One way out per Feishu chat: `remote-chat` keys a reply's sender by the chat's plugin, so this
-+  // registers the webhook post under `feishu`. Registered against the seam object it saw, so a runtime
++  // registers the Feishu exit under `feishu`. Registered against the seam object it saw, so a runtime
 +  // that replaces the seam is wired again instead of keeping a dead registration.
 +  let feishuWire = { seam: undefined, off: undefined }
 +  const wireFeishuReply = () => {
@@ -3074,12 +3276,15 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +    if (typeof seam?.onSend !== 'function') return
 +    if (feishuWire.seam === seam) return
 +    feishuWire.off?.()
-+    feishuWire = { seam, off: seam.onSend(FEISHU, feishuReply({ secretValue: name => rt.secretValue(name) })) }
++    feishuWire = { seam, off: seam.onSend(FEISHU, feishuReply({ secretValue: name => rt.secretValue(name), appOf })) }
 +  }
 +
 +  const feishuInbound = createInbound({
-+    enabled: rt.config?.feishu?.enabled === true,
++    // "On" means app mode with both halves saved. A half-saved pair dials nothing, and an event that
++    // arrives while it is off starts no turn, whatever adapter is still handing events over.
++    enabled: () => feishuRecord()?.mode === 'app' && appOf() !== undefined,
 +    ownerOpenId: rt.config?.feishu?.ownerOpenId,
++    allowed: () => feishuRecord()?.allowed ?? [],
 +    transport: () => rt.feishuTransport,
 +    deliver: async ({ handle, text, name }) => {
 +      const seam = rt.remoteChats
@@ -3097,16 +3302,17 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +    redact: rt.redactSecrets,
 +  })
 +
-+  const saved = c => state.connectors?.[c.def.id]
 +  const unmount = async (c) => {
 +    const fiber = c.mount?.fiber
 +    c.mount = null
 +    if (fiber !== undefined) await Promise.resolve().then(() => fiber.dispose()).catch(() => { /* a fiber that fails to dispose must not block unloading */ })
-+  }
-+
+   }
+ 
+-  // The MCP client wraps the server's answer (a 401, say) as the cause.
 +  // A sender's retry policy is notify.js's, not a second one written here: one transport per
-+  // sender, reading the saved webhook when it is called, so a reconnect needs no rebuild.
-+  const notifiers = new Map(connectors.filter(c => c.def.kind === 'sender').map(c => [c.def.id, createNotifier({
++  // sender, reading the saved webhook when it is called, so a reconnect needs no rebuild. Feishu is a
++  // channel now, but its webhook mode still sends: the notifier is per definition that has a `post`.
++  const notifiers = new Map(connectors.filter(c => typeof c.def.post === 'function').map(c => [c.def.id, createNotifier({
 +    channel: c.def.id,
 +    log: (format, ...args) => rt.warn(`ds-bot: ${format}`, ...args),
 +    transport: {
@@ -3129,9 +3335,8 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +      c.status = { state: 'error', error: reason(error) }
 +      rt.warn('ds-bot: %s connector failed: %s', c.def.name, c.status.error)
 +    }
-   }
- 
--  // The MCP client wraps the server's answer (a 401, say) as the cause.
++  }
++
 +  // The MCP client wraps the server's answer (a 401, say) as the cause. The session address of a
 +  // mount in progress is not kept anywhere, so it is also taken out of what is shown or logged.
 +  let addresses = []
@@ -3146,10 +3351,72 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 -    const token = options !== null && !stopped ? rt.secretValue(GITHUB_SECRET) : undefined
 -    if (!force && mount !== null && mount.token === token) return
 -    await unmount()
++  // A channel is the row's life, not a mount (#1266): webhook mode is ready once its URL is saved,
++  // app mode is ready once its socket is open, and the socket's own lifecycle is the status. Keyed by
++  // what the dial depends on, so a new pair (or a mode switch) closes the old socket and opens one.
++  async function reconcileChannel(c, force, token) {
++    const { def } = c
++    const record = saved(c) ?? {}
++    const mode = record.mode === 'app' ? 'app' : record.mode === 'webhook' ? 'webhook' : undefined
++    const app = mode === 'app' ? appOf() : undefined
++    const key = mode === 'app' ? `app\n${app?.appId ?? ''}\n${app?.appSecret ?? ''}` : mode === 'webhook' ? `webhook\n${token ?? ''}` : undefined
++    if (!force && c.mount !== null && c.mount.key === key) return
++    await unmount(c)
++    // A changed pair (or a mode switch) is a new socket: the old one is hung up before the new one
++    // dials, so one record never holds two long connections.
++    await feishuInbound.stop()
++    if (mode === undefined) {
++      notifierOf(c)?.setEnabled(false)
++      await feishuInbound.stop()
++      c.status = { state: 'off' }
++      c.mount = { key }
++      return
++    }
++    if (c.insecure) {
++      c.mount = { key }
++      c.status = { state: 'error', error: INSECURE(def.name) }
++      return
++    }
++    // App mode answers as the app, webhook mode on the webhook: a saved webhook is worth a manual
++    // Send in either mode, and nothing else turns the notifier on.
++    notifierOf(c)?.setEnabled(token !== undefined)
++    if (mode === 'webhook') {
++      if (token === undefined) {
++        await feishuInbound.stop()
++        c.status = { state: 'off' }
++        c.mount = { key }
++        return
++      }
++      c.status = { state: 'connecting' }
++      // A start-up (or a secret change) only reports that a webhook is saved — a restart must not post
++      // to the group again. `force` is a person pressing Try again, which is that person asking for it.
++      if (force) await probe(c, token)
++      else c.status = { state: 'ready' }
++      c.mount = { key }
++      return
++    }
++    if (app === undefined) {
++      await feishuInbound.stop()
++      c.status = { state: 'error', error: 'A Feishu App ID and App Secret are both needed before the long connection can dial.' }
++      c.mount = { key }
++      return
++    }
++    c.status = { state: 'connecting' }
++    const result = await feishuInbound.start()
++    const inbound = feishuInbound.view()
++    c.status = result === 'ready'
++      ? { state: 'ready' }
++      : result === 'off'
++        ? { state: 'off' }
++        : { state: 'error', error: inbound.error ?? 'the Feishu long connection did not open' }
++    c.mount = { key }
++  }
++
 +  async function reconcile(c, force) {
 +    const { def, options } = c
 +    if (c.saving > 0 && !force) return
 +    const token = options !== null && !stopped ? rt.secretValue(def.secret) : undefined
++    if (def.kind === 'channel') return reconcileChannel(c, force, token)
 +    const key = token === undefined ? undefined : `${token}\n${def.mountKey(saved(c))}`
 +    if (!force && c.mount !== null && c.mount.key === key) return
 +    await unmount(c)
@@ -3157,28 +3424,18 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 -      status = { state: 'off' }
 +      notifierOf(c)?.setEnabled(false)
 +      c.status = { state: 'off' }
-+      return
-+    }
-+    if (c.insecure) {
-+      c.mount = { key }
-+      c.status = { state: 'error', error: INSECURE(def.name) }
        return
      }
 -    if (insecure) {
 -      mount = { token }
 -      status = { state: 'error', error: INSECURE }
-+    c.status = { state: 'connecting' }
-+    // A sender mounts nothing: the test POST belongs to the connect step, so a start-up (or a
-+    // secret change) only reports that a webhook is saved — a restart must not post to the group
-+    // again. `force` is a person pressing Try again, which is that person asking for the test.
-+    if (def.kind === 'sender') {
-+      notifierOf(c)?.setEnabled(true)
-+      if (force) await probe(c, token)
-+      else c.status = { state: 'ready' }
++    if (c.insecure) {
 +      c.mount = { key }
++      c.status = { state: 'error', error: INSECURE(def.name) }
        return
      }
 -    status = { state: 'connecting' }
++    c.status = { state: 'connecting' }
      const loader = ctx.get?.('loader')
      if (typeof loader?.import !== 'function' || typeof ctx.plugin !== 'function') {
 -      mount = { token }
@@ -3254,7 +3511,15 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +    ...(c.def.kind !== undefined ? { kind: c.def.kind } : {}),
 +    account: rt.secretValue(c.def.secret) !== undefined ? c.def.account(saved(c)) : null,
 +    ...(c.def.extra !== undefined ? c.def.extra(rt.secretValue(c.def.secret) !== undefined ? saved(c) : undefined) : {}),
-+    ...(c.def.id === FEISHU ? { inbound: { ...feishuInbound.view(), app: appCredentials(name => rt.secretValue(name)) === undefined ? 'missing' : 'set' } } : {}),
++    // #1266: one row, two modes. `mode` is which one is live (null before the first connect), `modes`
++    // is what the form renders, and `allowed` is the guest list the app mode's gate reads. Nothing
++    // here carries a secret: the App ID is not one, and the webhook never comes back.
++    ...(c.def.id === FEISHU ? {
++      mode: saved(c)?.mode ?? null,
++      modes: c.def.modes,
++      allowed: (saved(c)?.allowed ?? []).map(entry => ({ openId: entry.openId, name: entry.name ?? entry.openId })),
++      inbound: { ...feishuInbound.view(), app: appOf() === undefined ? 'missing' : 'set' },
++    } : {}),
 +  })
 +  const connectorsView = () => connectors.filter(c => c.options !== null).map(view)
  
@@ -3274,12 +3539,91 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +  const retire = async (c, { gone, kept, keys }) => {
 +    if (gone?.id === undefined || gone.id === kept?.id) return
 +    await Promise.resolve(c.def.discard?.({ keys: [...new Set(keys.filter(key => key !== undefined))], options: c.options, session: gone })).catch(() => { /* never blocks the change */ })
++  }
++
++  // The Feishu row's own connect (#1266): one row, two modes. `credentials` is one field per
++  // credential the picked mode declares — the App ID is kept in the record because it is not a
++  // secret, the App Secret goes only to secrets.js. App mode proves the pair with one tenant token,
++  // then `sync` opens the socket; webhook mode proves the URL with one test message, as phase 1 did.
++  const connectChannel = async (c, body) => {
++    // A phase-1 client sends one `token` and no mode: that is the webhook, unchanged (#1266).
++    const mode = body.mode === 'app' ? 'app'
++      : body.mode === 'webhook' || (body.mode === undefined && typeof body.token === 'string' && body.token.trim() !== '') ? 'webhook'
++        : undefined
++    if (mode === undefined) throw new Error('Choose how to connect Feishu first')
++    if (c.insecure) throw new Error(INSECURE(c.def.name))
++    await rt.loadSecrets()
++    const given = body.credentials !== null && typeof body.credentials === 'object' && body.credentials !== undefined ? body.credentials : {}
++    const text = name => (typeof given[name] === 'string' ? given[name].trim() : '')
++    if (mode === 'webhook') {
++      const webhook = text('webhook') !== '' ? text('webhook') : (typeof body.token === 'string' ? body.token.trim() : '')
++      if (webhook === '') throw new Error('Paste the webhook URL Feishu gave you')
++      const previous = saved(c) ?? {}
++      c.saving += 1
++      try {
++        await rt.secretEndpoint('secret-set', { name: FEISHU_SECRET, value: webhook, purpose: c.def.purpose })
++        state.connectors = { ...state.connectors, [FEISHU]: { ...previous, mode: 'webhook', connectedAt: Date.now() } }
++        await rt.save()
++      } finally {
++        c.saving -= 1
++      }
++      // Phase 1's connect, unchanged: the webhook is saved first and then proved with one test
++      // message, so a refusal leaves the row in `error` with Try again beside it instead of losing
++      // what the owner pasted (acceptance 5, #1266).
++      await feishuInbound.stop()
++      await probe(c, webhook)
++      c.mount = { key: `webhook\n${webhook}` }
++      notifierOf(c)?.setEnabled(true)
++      return connectorsView()
++    }
++    const appId = text('app_id')
++    const appSecret = text('app_secret')
++    if (appId === '' || appSecret === '') throw new Error('Paste the App ID and App Secret Feishu gave the app')
++    await feishuAppCheck({ appId, appSecret }, { api: c.options.api })
++    c.saving += 1
++    try {
++      await rt.secretEndpoint('secret-set', { name: APP_SECRET_SECRET, value: appSecret, purpose: 'Feishu app secret' })
++      // The guest list survives a re-pair: connecting again is not a decision to let strangers in.
++      const previous = saved(c) ?? {}
++      state.connectors = { ...state.connectors, [FEISHU]: { ...previous, mode: 'app', appId, connectedAt: Date.now() } }
++      await rt.save()
++    } finally {
++      c.saving -= 1
++    }
++    await sync(c)
++    return connectorsView()
++  }
++  // The guest list, written from the row (#1266): Allow adds one open_id, Block takes it away. Who
++  // may talk is read by the inbound gate on every message, so this needs no restart — the next
++  // message from that sender is treated as the owner's.
++  const allowedOp = async (body, on) => {
++    const c = known(body.id)
++    if (c.def.kind !== 'channel') throw new Error('This connector has no allowed senders')
++    const openId = typeof body.openId === 'string' ? body.openId.trim() : ''
++    if (!/^[A-Za-z0-9_-]{1,128}$/.test(openId)) throw new Error('Paste the open_id of the sender to allow')
++    await rt.loadSecrets()
++    const record = saved(c) ?? {}
++    if (record.mode !== 'app') throw new Error('Connect Feishu as an app first')
++    const list = Array.isArray(record.allowed) ? record.allowed : []
++    let next
++    if (on) {
++      const knownSender = (feishuInbound.view().refusedSenders ?? []).find(entry => entry.openId === openId)
++      next = list.some(entry => entry.openId === openId) ? list
++        : [...list, { openId, ...(knownSender?.name === undefined ? {} : { name: knownSender.name }) }]
++    } else {
++      next = list.filter(entry => entry.openId !== openId)
++    }
++    state.connectors = { ...state.connectors, [FEISHU]: { ...record, allowed: next } }
++    await rt.save()
++    return connectorsView()
    }
  
    const endpoints = {
      async 'connector-connect'(body) {
 -      known(body.id)
 +      const c = known(body.id)
++      // A channel has no single token: its form sends a mode and that mode's credential fields.
++      if (c.def.kind === 'channel') return connectChannel(c, body)
        const token = typeof body.token === 'string' ? body.token.trim() : ''
 -      if (token === '') throw new Error('Paste a token first')
 -      if (insecure) throw new Error(INSECURE)
@@ -3292,22 +3636,6 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 -      state.connectors = { ...state.connectors, [GITHUB]: { login, connectedAt: Date.now() } }
 -      await rt.save()
 -      await sync()
-+      // A sender has nothing to mount, so the webhook is saved first and then proved: a webhook
-+      // Feishu refuses stays on the row as `error` with Try again beside it, the way a connector
-+      // that fails its MCP mount does, instead of losing what the owner pasted.
-+      if (c.def.kind === 'sender') {
-+        c.saving += 1
-+        try {
-+          await rt.secretEndpoint('secret-set', { name: c.def.secret, value: token, purpose: c.def.purpose })
-+          await keep(c, {})
-+        } finally {
-+          c.saving -= 1
-+        }
-+        await probe(c, token)
-+        c.mount = { key: `${token}\n${c.def.mountKey(saved(c))}` }
-+        notifierOf(c)?.setEnabled(true)
-+        return connectorsView()
-+      }
 +      const oldToken = rt.secretValue(c.def.secret)
 +      const previous = saved(c)
 +      const record = await c.def.check({ token, options: c.options, saved: previous, body })
@@ -3324,8 +3652,8 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +      }
 +      await retire(c, { gone: previous?.session, kept: record.session, keys: [oldToken, token] })
 +      await sync(c)
-+      return connectorsView()
-+    },
+       return connectorsView()
+     },
 +    // Changes which apps a connected gateway offers, without asking for the key again.
 +    async 'connector-apps'(body) {
 +      const c = known(body.id)
@@ -3344,8 +3672,8 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +      }
 +      await retire(c, { gone: previous?.session, kept: record.session, keys: [token] })
 +      await sync(c)
-       return connectorsView()
-     },
++      return connectorsView()
++    },
 +    // Searches Composio's app list: with the saved key, or before connecting with the key being pasted
 +    // (sent only to Composio, never saved by this call).
 +    async 'connector-app-search'(body) {
@@ -3376,6 +3704,12 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 +      } catch (error) {
 +        throw new Error(reason(error))
 +      }
++    },
++    async 'connector-allow'(body) {
++      return allowedOp(body, true)
++    },
++    async 'connector-block'(body) {
++      return allowedOp(body, false)
 +    },
      async 'connector-disconnect'(body) {
 -      known(body.id)
@@ -3384,6 +3718,22 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
 -      if (rt.secretValue(GITHUB_SECRET) !== undefined) await rt.secretEndpoint('secret-delete', { name: GITHUB_SECRET })
 -      if (state.connectors?.[GITHUB] !== undefined) {
 -        delete state.connectors[GITHUB]
++      if (c.def.kind === 'channel') {
++        // Disconnect closes both (#1266): the socket goes down, the webhook and the app secret are
++        // deleted (each only if it is there — deleting a key that is not saved is an error), and the
++        // record goes with them, so the row is `off` and no turn can start.
++        for (const name of [FEISHU_SECRET, APP_SECRET_SECRET]) {
++          if (rt.secretValue(name) !== undefined) await rt.secretEndpoint('secret-delete', { name })
++        }
++        if (saved(c) !== undefined) {
++          delete state.connectors[c.def.id]
++          await rt.save()
++        }
++        await feishuInbound.stop()
++        await rt.forgetConnector?.(c.def.id)
++        await sync(c)
++        return connectorsView()
++      }
 +      const oldToken = rt.secretValue(c.def.secret)
 +      const previous = saved(c)
 +      if (oldToken !== undefined) await rt.secretEndpoint('secret-delete', { name: c.def.secret })
@@ -3402,24 +3752,24 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
      async 'connector-retry'(body) {
 -      known(body.id)
 +      const c = known(body.id)
-+      await rt.loadSecrets()
+       await rt.loadSecrets()
+-      await sync(true)
++      // "Try again" is one press for the whole row: a channel re-proves a webhook and dials the
++      // socket again (which is how an adapter installed after the first attempt comes up without a
++      // restart), and `reconcile` is the only place that dials, so one press is one socket.
 +      await sync(c, true)
-+      // "Try again" is one press for the whole row: a Feishu row proves the webhook and, when the
-+      // long connection is switched on, dials it again — which is how an adapter installed after the
-+      // first attempt comes up without a restart.
-+      if (c.def.id === FEISHU) await feishuInbound.start()
 +      return connectorsView()
 +    },
 +    // One message, on demand, once. Nothing posts room traffic on its own: that is a spam
-+    // decision the owner has not made (#1263).
++    // decision the owner has not made (#1263). Feishu's channel offers this only while a webhook is
++    // saved (today's behaviour, acceptance 5): app mode answers by itself, it has no room to post to.
 +    async 'connector-send'(body) {
 +      const c = known(body.id)
-+      if (c.def.kind !== 'sender') throw new Error('This connector sends no messages')
++      if (typeof c.def.post !== 'function') throw new Error('This connector sends no messages')
 +      const text = typeof body.text === 'string' ? body.text.trim() : ''
 +      if (text === '') throw new Error('Type a message first')
 +      if (c.insecure) throw new Error(INSECURE(c.def.name))
-       await rt.loadSecrets()
--      await sync(true)
++      await rt.loadSecrets()
 +      if (rt.secretValue(c.def.secret) === undefined) throw new Error(`Connect ${c.def.name} first`)
 +      const notifier = notifierOf(c)
 +      // A fresh key per call: two messages with the same text are two messages, not a duplicate.
@@ -3447,11 +3797,11 @@ diff --git a/src/host/connectors.js b/src/host/connectors.js
    ctx.effect(() => {
      stopped = false
 -    void rt.loadSecrets().then(() => sync())
-+    // The long connection dials once the secrets are loaded: the app pair lives there, so starting
-+    // before that read would report a missing app that is in fact saved.
++    // The long connection dials once the secrets are loaded: the App Secret lives there, so dialling
++    // before that read would report a missing app that is in fact saved. `reconcile` opens it, so
++    // there is exactly one dial per start — a second call here would be two sockets on one record.
 +    void scrubAddresses().catch(error => rt.warn('ds-bot: connectors: %s', reason(error))).then(() => rt.loadSecrets()).then(async () => {
 +      await syncAll()
-+      if (!stopped) await feishuInbound.start()
 +    })
      return () => {
        stopped = true
@@ -6456,7 +6806,7 @@ diff --git a/test/connectors.test.js b/test/connectors.test.js
  })
  
  test('a GitHub address without https refuses to send the token', async (t) => {
-@@ -165,10 +165,712 @@ test('a GitHub address without https refuses to send the token', async (t) => {
+@@ -165,10 +165,730 @@ test('a GitHub address without https refuses to send the token', async (t) => {
    let asked = false
    globalThis.fetch = async () => { asked = true; return answer(200, { login: 'octo' }) }
    const { ctx, home, mounts } = setup({ github: { url: 'http://mcp.test/', api: 'https://gh.test' } })
@@ -6663,32 +7013,50 @@ diff --git a/test/connectors.test.js b/test/connectors.test.js
 +  assert.deepEqual(view.map(entry => [entry.id, entry.state]), [['github', 'ready'], ['composio', 'off'], ['feishu', 'off']])
 +  // #1266: the Feishu row carries the inbound state as well, and with no app pair saved it says so
 +  // without ever showing a value. Nothing dialled: the long connection is off by default.
-+  assert.deepEqual(view.find(entry => entry.id === 'feishu').inbound, { state: 'off', connected: 0, duplicates: 0, refused: 0, app: 'missing' })
++  assert.deepEqual(view.find(entry => entry.id === 'feishu').inbound, { state: 'off', connected: 0, duplicates: 0, refused: 0, refusedSenders: [], app: 'missing' })
 +
 +})
 +
++// #1266 (connector-row half): the app pair lives in the connector record and secrets.json, so a test
++// renders the row a person would have filled in. The App ID is not a secret; only the secret is.
++function appHome() {
++  const home = teamHome()
++  const state = JSON.parse(readFileSync(join(home, 'state.json'), 'utf8'))
++  state.connectors = { feishu: { mode: 'app', appId: 'cli_app_1', allowed: [{ openId: 'ou_owner_1' }] } }
++  writeFileSync(join(home, 'state.json'), JSON.stringify(state))
++  writeFileSync(join(home, 'secrets.json'), JSON.stringify({
++    version: 1,
++    secrets: [{ name: 'FEISHU_APP_SECRET', value: 'app-secret-value', purpose: 'Feishu app secret', scope: 'all', createdAt: 1, updatedAt: 1 }],
++  }))
++  return home
++}
++
 +// #1266: the inbound socket is read from the runtime on every start, not copied while module install
 +// runs. This is the shape a plugin (or a test) has when it puts its own adapter on the runtime after
 +// the connectors module was installed: the next Try again has to dial that one.
 +test('an adapter installed after the connectors module is the one the next Try again dials (#1266)', async (t) => {
-+  const home = teamHome()
++  const home = appHome()
 +  const ctx = fakeContext()
 +  capture(ctx)
-+  const rt = createRuntime(ctx, { home, feishu: { enabled: true, ownerOpenId: 'ou_owner_1' } })
++  const rt = createRuntime(ctx, { home })
 +  t.after(async () => { await ctx.dispose(); await cleanHome(home) })
 +
++  const dials = []
 +  const inboundOf = async () => (await call(ctx, 'state', {})).value.connectors.find(entry => entry.id === 'feishu').inbound
-+  // Boot dialled the default adapter, which refuses because no app pair is saved: the error proves a
-+  // socket was attempted, and that it was not the stub installed below.
++  // Boot dialled on its own: the pair is saved, so the row left `off` before this test installed any
++  // adapter. Whether it settles on `connecting` (a dial in flight) or `error` (a box with no SDK)
++  // depends on the host, so the assertion is that it is not `off` and that no stub dialled — the
++  // socket in flight is the host's own adapter, never the one installed below.
 +  const until = Date.now() + 2000
 +  let boot = await inboundOf()
-+  while (boot.error === undefined && Date.now() < until) {
++  while (boot.state === 'off' && Date.now() < until) {
 +    await new Promise(resolve => setTimeout(resolve, 10))
 +    boot = await inboundOf()
 +  }
-+  assert.match(boot.error ?? '', /app id and app secret/, JSON.stringify(boot))
++  assert.equal(boot.app, 'set')
++  assert.notEqual(boot.state, 'off')
++  assert.equal(dials.length, 0, 'no stub was installed when boot dialled')
 +
-+  const dials = []
 +  rt.feishuTransport = { connect: async (onEvent) => { dials.push(onEvent); return { close: async () => {} } } }
 +  const after = (await call(ctx, 'connector-retry', { id: 'feishu' })).value.find(entry => entry.id === 'feishu')
 +  assert.equal(after.inbound.state, 'ready')
@@ -6710,10 +7078,10 @@ diff --git a/test/connectors.test.js b/test/connectors.test.js
 +// The inbound socket of a running runtime, dialled through Try again so the adapter is a stub: what
 +// comes back is the `onEvent` the policy layer handed the socket.
 +async function feishuInboundRig(t) {
-+  const home = teamHome()
++  const home = appHome()
 +  const ctx = fakeContext()
 +  capture(ctx)
-+  const rt = createRuntime(ctx, { home, feishu: { enabled: true, ownerOpenId: 'ou_owner_1' } })
++  const rt = createRuntime(ctx, { home })
 +  t.after(async () => { await ctx.dispose(); await cleanHome(home) })
 +  const dials = []
 +  rt.feishuTransport = { connect: async (onEvent) => { dials.push(onEvent); return { close: async () => {} } } }
diff --git a/patches/ds-bot/0003-flybot-api-client.patch b/patches/ds-bot/0003-flybot-api-client.patch
index 8c1b67f1..d6d12f03 100644
--- a/patches/ds-bot/0003-flybot-api-client.patch
+++ b/patches/ds-bot/0003-flybot-api-client.patch
@@ -1467,15 +1467,21 @@ diff --git a/src/client/index.js b/src/client/index.js
      stopMemberWork: (roomId, botId) => after(call('stop-member-work', { roomId, botId })),
      // Values go out in these requests and never come back in a response.
      secretSet: payload => after(call('secret-set', payload)),
-@@ -539,15 +539,29 @@ export function apply(ctx) {
+@@ -539,15 +539,35 @@ export function apply(ctx) {
      secretCancel: requestId => after(call('secret-cancel', { requestId })),
      secretUpdate: (name, scope) => after(call('secret-update', { name, scope })),
      secretDelete: name => after(call('secret-delete', { name })),
 -    connectorConnect: (id, token) => after(call('connector-connect', { id, token })),
-+    connectorConnect: (id, token, apps) => after(call('connector-connect', { id, token, ...(apps !== undefined ? { apps } : {}) })),
++    // A channel's form sends { mode, credentials }, one field per credential; every other connector
++    // sends its one token. Both go out under the same endpoint.
++    connectorConnect: (id, token, apps) => after(call('connector-connect', typeof token === 'object' && token !== null
++      ? { id, ...token, ...(apps !== undefined ? { apps } : {}) }
++      : { id, token, ...(apps !== undefined ? { apps } : {}) })),
 +    connectorApps: (id, apps) => after(call('connector-apps', { id, apps })),
 +    connectorAppSearch: (id, query, token) => call('connector-app-search', { id, query, ...(token ? { token } : {}) }),
 +    connectorAppStatus: id => call('connector-app-status', { id }),
++    connectorAllow: (id, openId) => after(call('connector-allow', { id, openId })),
++    connectorBlock: (id, openId) => after(call('connector-block', { id, openId })),
      connectorDisconnect: id => after(call('connector-disconnect', { id })),
      connectorRetry: id => after(call('connector-retry', { id })),
 +    connectorSend: (id, text) => after(call('connector-send', { id, text })),
diff --git a/patches/ds-bot/0005-social-seams.patch b/patches/ds-bot/0005-social-seams.patch
index 5991c338..5661127e 100644
--- a/patches/ds-bot/0005-social-seams.patch
+++ b/patches/ds-bot/0005-social-seams.patch
@@ -719,13 +719,15 @@ diff --git a/src/host/channel.js b/src/host/channel.js
          case 'stop-member-work':
            return ok(await rt.stopMemberWork(String(body.roomId ?? ''), String(body.botId ?? '')))
          case 'dismiss-question':
-@@ -231,8 +231,12 @@ export function install(rt) {
+@@ -231,8 +231,14 @@ export function install(rt) {
            await rt.load()
            return ok(await rt.secretEndpoint(endpoint, body))
          case 'connector-connect':
 +        case 'connector-apps':
 +        case 'connector-app-search':
 +        case 'connector-app-status':
++        case 'connector-allow':
++        case 'connector-block':
          case 'connector-disconnect':
          case 'connector-retry':
 +        case 'connector-send':
@@ -1187,7 +1189,7 @@ diff --git a/src/host/delivery.js b/src/host/delivery.js
 diff --git a/test/rounds.test.js b/test/rounds.test.js
 --- a/test/rounds.test.js
 +++ b/test/rounds.test.js
-@@ -16,6 +16,9 @@
+@@ -16,6 +16,9 @@ function start() {
    const ctx = fakeContext()
    const workspaces = new Map()
    const sent = []
@@ -1197,7 +1199,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
    const inboxes = new Map()
    const inboxOf = (sessionId) => {
      if (!inboxes.has(sessionId)) {
-@@ -53,7 +53,7 @@
+@@ -53,7 +53,7 @@ function start() {
      },
      sessionController: {
        create: async () => ({ sessionId: `s${++sessions}` }),
@@ -1206,7 +1208,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
        selectModel: async () => {},
        prompt: async (request) => {
          const inbox = inboxOf(request.sessionId)
-@@ -101,7 +101,7 @@
+@@ -101,7 +101,7 @@ function start() {
      await ctx.dispose()
      rmSync(home, { recursive: true, force: true, maxRetries: 5 })
    }
@@ -1215,7 +1217,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
  }
  
  const settle = () => new Promise(resolve => setTimeout(resolve, 20))
-@@ -114,6 +114,8 @@
+@@ -114,6 +114,8 @@ const waitFor = async (check) => {
    return undefined
  }
  const turnFor = (sent, ...earlier) => waitFor(() => sent.find(entry => !earlier.includes(entry) && entry.message.source.role === 'room'))
@@ -1224,7 +1226,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
  
  test('a new group Session waits for capabilities before its first member prompt', async (t) => {
    const { call, emit, userMessage, relay, answer, stop, sent, rt } = start()
-@@ -180,6 +180,158 @@
+@@ -180,6 +180,158 @@ test('a message the composer queues mid-round joins the round and leaves the Ses
    assert.deepEqual(inboxOf(room.id).nextTurn, [])
  })
  
@@ -1383,7 +1385,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
  test('a plain message steered mid-round is answered by everyone, admin first, inside the round', async (t) => {
    const { call, emit, userMessage, compose, relay, inboxOf, answer, stop, sent } = start()
    t.after(stop)
-@@ -253,32 +253,6 @@
+@@ -253,32 +253,6 @@ test('in admin mode a plain mid-round message goes to the admin', async (t) => {
    assert.deepEqual(result.replies.map(reply => reply.name ?? 'User'), ['Chief', 'Writer', 'User', 'Chief'])
  })
  
@@ -1416,7 +1418,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
  test('a message with an image or a chat reference waits for its own round, and so does what follows it', async (t) => {
    const { call, emit, userMessage, compose, relay, inboxOf, answer, stop, sent } = start()
    t.after(stop)
-@@ -300,19 +300,26 @@
+@@ -300,19 +300,26 @@ test('a message with an image or a chat reference waits for its own round, and s
    assert.equal(inboxOf(room.id).nextStep.length, 1)
  })
  
@@ -1450,7 +1452,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
  })
  
  test('a stopped round leaves a waiting message for the next round', async (t) => {
-@@ -331,6 +331,377 @@
+@@ -331,6 +331,377 @@ test('a stopped round leaves a waiting message for the next round', async (t) =>
    assert.equal(inboxOf(room.id).nextTurn.length, 1)
  })
  
@@ -1828,7 +1830,7 @@ diff --git a/test/rounds.test.js b/test/rounds.test.js
  test('a message sent between rounds still opens a full round', async (t) => {
    const { call, emit, userMessage, relay, answer, stop, sent } = start()
    t.after(stop)
-@@ -347,3 +347,1325 @@
+@@ -347,3 +347,1325 @@ test('a message sent between rounds still opens a full round', async (t) => {
    const result = JSON.parse(await running)
    assert.deepEqual(result.replies.map(reply => reply.name ?? 'User'), ['Chief', 'Writer'])
  })
diff --git a/patches/ds-bot/0008-client-bundle.patch b/patches/ds-bot/0008-client-bundle.patch
index 04844830..ae560484 100644
--- a/patches/ds-bot/0008-client-bundle.patch
+++ b/patches/ds-bot/0008-client-bundle.patch
@@ -225,7 +225,7 @@ diff --git a/client.js b/client.js
    Connected: "已连接",
    Disconnect: "断开",
    Connect: "连接",
-@@ -141,17 +141,50 @@ var ZH = {
+@@ -141,17 +141,64 @@ var ZH = {
    "GitHub addresses must start with https://": "GitHub 地址必须以 https:// 开头",
    "This DSH cannot load connectors": "这个 DSH 不能加载连接器",
    "No such connector": "没有这个连接器",
@@ -235,6 +235,20 @@ diff --git a/client.js b/client.js
 +  "Posts into one Feishu group through a custom bot webhook": "通过自定义机器人 webhook 发到你的一个飞书群",
 +  "Feishu webhook URL": "飞书 webhook 地址",
 +  "Get a webhook URL in Feishu": "去飞书获取 webhook 地址",
++  "Custom bot webhook": "自定义机器人 webhook",
++  "App (long connection)": "自建应用（长连接）",
++  "Webhook URL": "Webhook 地址",
++  "App ID": "App ID",
++  "App Secret": "App Secret",
++  "Create a Feishu app": "去飞书创建自建应用",
++  "How to connect": "连接方式",
++  "Connected: app, over the long connection": "已连接：自建应用，走长连接",
++  "Connected: custom bot webhook": "已连接：自定义机器人 webhook",
++  "Who may talk to the Bots": "允许的飞书用户",
++  "Nobody yet. A message from anyone else starts no turn.": "还没有人。其他人发来的消息不会起 turn。",
++  "Paste an open_id to allow": "粘贴 open_id 来允许某个人",
++  "Feishu open_id": "飞书 open_id",
++  Block: "移除",
 +  "Message to send to Feishu": "要发到飞书的消息",
 +  "Type a message for the Feishu group": "输入要发到飞书群的消息",
 +  Send: "发送",
@@ -3074,6 +3088,21 @@ diff --git a/client.js b/client.js
 -.bt-set-bot{flex:1;display:flex;align-items:center;gap:8px;min-width:0}
 -.bt-set-paste{flex-direction:column;align-items:stretch;gap:8px}
 -.bt-chevron{color:var(--bt-ink-3);display:inline-flex;flex:none}
+-
+-/* Settings → Connectors. */
+-.bt-connector{display:flex;flex-direction:column;gap:10px;padding:12px}
+-.bt-connector-head{display:flex;align-items:center;gap:12px;min-width:0}
+-.bt-connector-mark{flex:none;width:36px;height:36px;border-radius:10px;background:var(--bt-card);border:.5px solid var(--bt-line);display:flex;align-items:center;justify-content:center;color:var(--bt-ink)}
+-.bt-connector-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}
+-.bt-connector-name{font-size:14px;line-height:20px;font-weight:500}
+-.bt-connector-status{font-size:12px;line-height:16px;color:var(--bt-ink-3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-connector[data-state=ready] .bt-connector-status{color:var(--bt-ink-2)}
+-.bt-connector[data-state=error] .bt-connector-status{color:#e02135;white-space:normal}
+-.bt-connector-actions{flex:none;display:flex;gap:6px}
+-.bt-connector-form{display:flex;flex-direction:column;gap:8px;padding-left:48px;animation:bt-q-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
+-.bt-connector-form-row{display:flex;align-items:center;gap:6px}
+-.bt-connector-link{flex:1;font-size:12px;color:var(--bt-ink-2)}
+-.bt-connector-error{padding-left:48px;font-size:12px;line-height:16px;color:#e02135}
 +.bt-flybot-section { margin-top: 8px; border-top: 1px solid var(--bt-line, rgba(0,0,0,.08)); padding-top: 6px; }
 +/* A section whose component renders null leaves the wrapper empty, and an empty wrapper must not draw
 +   the separator: #818's "no border" held for the component but not for the box around it. Keyed on
@@ -3103,20 +3132,14 @@ diff --git a/client.js b/client.js
 +.bt-flybot-pointer button { border: 0; border-radius: 999px; padding: 3px 10px; font-size: 12px; cursor: pointer; background: var(--bt-accent, #2563eb); color: #fff; }
 +`;
  
--/* Settings → Connectors. */
--.bt-connector{display:flex;flex-direction:column;gap:10px;padding:12px}
--.bt-connector-head{display:flex;align-items:center;gap:12px;min-width:0}
--.bt-connector-mark{flex:none;width:36px;height:36px;border-radius:10px;background:var(--bt-card);border:.5px solid var(--bt-line);display:flex;align-items:center;justify-content:center;color:var(--bt-ink)}
--.bt-connector-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}
--.bt-connector-name{font-size:14px;line-height:20px;font-weight:500}
--.bt-connector-status{font-size:12px;line-height:16px;color:var(--bt-ink-3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-connector[data-state=ready] .bt-connector-status{color:var(--bt-ink-2)}
--.bt-connector[data-state=error] .bt-connector-status{color:#e02135;white-space:normal}
--.bt-connector-actions{flex:none;display:flex;gap:6px}
--.bt-connector-form{display:flex;flex-direction:column;gap:8px;padding-left:48px;animation:bt-q-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
--.bt-connector-form-row{display:flex;align-items:center;gap:6px}
--.bt-connector-link{flex:1;font-size:12px;color:var(--bt-ink-2)}
--.bt-connector-error{padding-left:48px;font-size:12px;line-height:16px;color:#e02135}
+-/* Shell chrome reshaped for the team view. Selectors use stable data attributes where the
+-   shell offers them and CSS-module name suffixes elsewhere. */
+-[class*="_logoRow"],[class*="_newSession"],nav[class*="_panelList"]{display:none!important}
+-[class*="_footArea"]{display:flex!important;flex-direction:row-reverse;align-items:center;gap:9px;padding:8px 6px 6px!important}
+-[class*="_footArea"]>[class*="_footerActions"]{flex:1 1 auto;min-width:0}
+-[class*="_footArea"]>[class*="_settingsArea"]{flex:none;width:auto!important}
+-[class*="_footArea"] button[aria-label="Settings"]{width:auto!important;padding:0!important;background:none!important;border-radius:50%!important;height:auto!important}
+-[class*="_widthHandle"]{display:none!important}
 +// src/shared/turn-failures.js
 +var FAILURE_LINES_SHOWN = 3;
 +var failureLines = (snapshot, place, t2, limit = FAILURE_LINES_SHOWN) => {
@@ -3128,44 +3151,6 @@ diff --git a/client.js b/client.js
 +  }));
 +};
  
--/* Shell chrome reshaped for the team view. Selectors use stable data attributes where the
--   shell offers them and CSS-module name suffixes elsewhere. */
--[class*="_logoRow"],[class*="_newSession"],nav[class*="_panelList"]{display:none!important}
--[class*="_footArea"]{display:flex!important;flex-direction:row-reverse;align-items:center;gap:9px;padding:8px 6px 6px!important}
--[class*="_footArea"]>[class*="_footerActions"]{flex:1 1 auto;min-width:0}
--[class*="_footArea"]>[class*="_settingsArea"]{flex:none;width:auto!important}
--[class*="_footArea"] button[aria-label="Settings"]{width:auto!important;padding:0!important;background:none!important;border-radius:50%!important;height:auto!important}
--[class*="_widthHandle"]{display:none!important}
-+// src/client/turn-failures.js
-+var import_react3 = require("react");
-+function TurnFailures({ sessionId, work }) {
-+  const [snapshot, setSnapshot] = (0, import_react3.useState)(() => work?.getSnapshot?.());
-+  (0, import_react3.useEffect)(() => {
-+    if (typeof work?.subscribe !== "function") return void 0;
-+    const read = () => setSnapshot(work.getSnapshot());
-+    const off = work.subscribe(read);
-+    read();
-+    return off;
-+  }, [work]);
-+  const lines = failureLines(snapshot, sessionId, t);
-+  if (lines.length === 0) return null;
-+  return (0, import_react3.createElement)(
-+    "div",
-+    { className: "bt-turn-failures", "data-flybot": "turn-failures" },
-+    lines.map((line2) => (0, import_react3.createElement)(
-+      "div",
-+      { key: line2.id, className: "bt-turn-failure", "data-flybot": "turn-failure" },
-+      (0, import_react3.createElement)("span", { className: "bt-turn-failure-text" }, line2.text),
-+      line2.streak === void 0 ? null : (0, import_react3.createElement)("span", { className: "bt-turn-failure-streak" }, ` ${t("{count} turns in a row", { count: line2.streak })}`)
-+    ))
-+  );
-+}
-+var TURN_FAILURES_CSS = `
-+.bt-turn-failures{width:100%;max-width:min(992px,100%);margin:0 auto;padding:0 0 6px;box-sizing:border-box}
-+.bt-turn-failure{display:flex;gap:6px;align-items:baseline;padding:6px 10px;border-radius:8px;font-size:12px;line-height:1.45;background:color-mix(in srgb,var(--bt-ink) 6%,transparent);color:color-mix(in srgb,var(--bt-ink) 72%,transparent)}
-+.bt-turn-failure-streak{opacity:.72}
-+`;
- 
 -.bt-voice-pane{flex-direction:column;align-items:center;justify-content:center;animation:bt-fade .2s ease-out}
 -.bt-voice-stage{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:10px;padding:24px;max-width:560px;text-align:center}
 -.bt-voice-orb{position:relative;width:200px;height:200px;display:grid;place-items:center;margin-bottom:8px}
@@ -3225,6 +3210,143 @@ diff --git a/client.js b/client.js
 -button:hover .bt-you{background:color-mix(in srgb,var(--bt-ink) 9%,var(--bt-sidebar))}
 -.bt-you-wrap{display:inline-flex;padding:0}
 -.bt-connect-foot{width:100%;height:36px}
++// src/client/turn-failures.js
++var import_react3 = require("react");
++function TurnFailures({ sessionId, work }) {
++  const [snapshot, setSnapshot] = (0, import_react3.useState)(() => work?.getSnapshot?.());
++  (0, import_react3.useEffect)(() => {
++    if (typeof work?.subscribe !== "function") return void 0;
++    const read = () => setSnapshot(work.getSnapshot());
++    const off = work.subscribe(read);
++    read();
++    return off;
++  }, [work]);
++  const lines = failureLines(snapshot, sessionId, t);
++  if (lines.length === 0) return null;
++  return (0, import_react3.createElement)(
++    "div",
++    { className: "bt-turn-failures", "data-flybot": "turn-failures" },
++    lines.map((line2) => (0, import_react3.createElement)(
++      "div",
++      { key: line2.id, className: "bt-turn-failure", "data-flybot": "turn-failure" },
++      (0, import_react3.createElement)("span", { className: "bt-turn-failure-text" }, line2.text),
++      line2.streak === void 0 ? null : (0, import_react3.createElement)("span", { className: "bt-turn-failure-streak" }, ` ${t("{count} turns in a row", { count: line2.streak })}`)
++    ))
++  );
++}
++var TURN_FAILURES_CSS = `
++.bt-turn-failures{width:100%;max-width:min(992px,100%);margin:0 auto;padding:0 0 6px;box-sizing:border-box}
++.bt-turn-failure{display:flex;gap:6px;align-items:baseline;padding:6px 10px;border-radius:8px;font-size:12px;line-height:1.45;background:color-mix(in srgb,var(--bt-ink) 6%,transparent);color:color-mix(in srgb,var(--bt-ink) 72%,transparent)}
++.bt-turn-failure-streak{opacity:.72}
++`;
+ 
+-.bt-menu{position:fixed;pointer-events:auto;z-index:60;min-width:200px;padding:6px;border-radius:12px;background:var(--bt-main);border:.5px solid var(--bt-line-2);box-shadow:0 10px 20px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1),0 0 0 1px rgba(228,228,228,.04);display:flex;flex-direction:column;gap:2px;transform-origin:var(--bt-origin,top left);animation:bt-pop-drop ${SPRING_TAP.duration}ms ${SPRING_TAP.easing},bt-veil-in .14s ease-out;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;box-sizing:border-box}
+-.bt-menu button{display:flex;align-items:center;gap:4px;width:100%;min-height:30px;text-align:left;border:0;background:none;border-radius:6px;padding:6px 8px;font:inherit;font-size:13px;line-height:18px;color:var(--bt-ink);cursor:pointer;box-sizing:border-box}
+-.bt-menu button:hover{background:var(--bt-hover)}
+-.bt-menu button svg{flex:none;width:16px;height:16px;margin:0 1px}
+-.bt-menu .bt-danger{color:#c21d2e}
+-.bt-menu-sep{height:.5px;flex:none;background:var(--bt-line-2);margin:4px 8px}
+-.bt-menu-up{--bt-origin:bottom left;animation-name:bt-pop-lift,bt-veil-in}
+-.bt-menu[data-leaving]{pointer-events:none;animation:bt-pop-out .12s cubic-bezier(.4,0,1,1) forwards}
+-.bt-menu-label{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-menu-hint{flex:none;color:var(--bt-ink-3);font-size:12px;font-variant-numeric:tabular-nums}
+-.bt-palette-layer{position:fixed;inset:var(--dsh-frame-chrome-top,0px) 0 0;z-index:70;pointer-events:auto;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif}
+-.bt-backdrop{position:absolute;inset:0;background:rgba(0,0,0,.46);animation:bt-fade .22s ease-out}
+-.bt-palette{position:absolute;top:50%;left:50%;width:min(560px,92vw);transform:translate(-50%,-50%);display:flex;flex-direction:column;border-radius:12px;background:var(--bt-main);border:1px solid var(--bt-line-2);box-shadow:0 24px 48px -12px rgba(0,0,0,.25);overflow:hidden;color:var(--bt-ink);animation:bt-palette-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
+-.bt-palette-layer[data-leaving]{pointer-events:none}
+-.bt-palette-layer[data-leaving] .bt-backdrop{opacity:0;transition:opacity .16s ease-in}
+-.bt-palette-layer[data-leaving] .bt-palette{animation:bt-dialog-sink .16s cubic-bezier(.4,0,1,1) forwards}
+-@keyframes bt-palette-in{from{translate:0 -10px;scale:.96}}
+-.bt-palette-head{display:flex;align-items:center;gap:4px;padding:14px 10px 14px 14px;border-bottom:.5px solid var(--bt-line-2)}
+-.bt-palette-glyph{display:inline-flex;width:18px;height:18px;align-items:center;justify-content:center;color:var(--bt-ink-3);margin-right:4px}
+-.bt-palette-head input{flex:1;min-width:0;border:0;outline:none;background:none;color:var(--bt-ink);font:inherit;font-size:15px;line-height:22px;padding:0}
+-.bt-palette-head input::placeholder{color:var(--bt-ink-3)}
+-.bt-palette-clear{width:18px;height:18px;border:0;padding:0;border-radius:6px;background:none;color:var(--bt-ink-3);display:inline-flex;align-items:center;justify-content:center;cursor:pointer}
+-.bt-palette-clear:hover{color:var(--bt-ink)}
+-.bt-palette-clear svg{width:12px;height:12px}
+-.bt-palette-list{position:relative;height:402px;overflow-y:auto;padding:8px;display:flex;flex-direction:column;gap:2px;box-sizing:border-box}
+-.bt-palette-list>.bt-thumb,.bt-drop-list>.bt-thumb{left:0;right:0;border-radius:8px;background:var(--bt-active)}
+-.bt-palette-list>.bt-thumb{left:8px;right:8px}
+-:is(.bt-palette-list,.bt-drop-list)[data-glide] [aria-selected=true]{background:transparent}
+-:is(.bt-palette-row,.bt-palette-section,.bt-drop-list>.bt-option){position:relative;z-index:1}
+-.bt-palette-section{padding:8px 8px 4px;font-size:12px;line-height:16px;color:var(--bt-ink-3);flex:none}
+-.bt-palette-section:first-of-type{padding-top:0}
+-.bt-palette-row{flex:none;display:flex;align-items:center;gap:8px;height:49px;padding:6px 10px 6px 8px;border:0;border-radius:8px;background:none;color:inherit;font:inherit;text-align:left;cursor:pointer;box-sizing:border-box;width:100%}
+-.bt-palette-row[aria-selected=true]{background:var(--bt-active)}
+-.bt-palette-lead{flex:none;width:24px;height:24px;display:inline-flex;align-items:center;justify-content:center}
+-.bt-palette-cmd{width:24px;height:24px;border-radius:50%;background:var(--bt-hover);display:inline-flex;align-items:center;justify-content:center;color:var(--bt-ink-2)}
+-.bt-palette-cmd svg{width:14px;height:14px}
+-.bt-palette-agent{width:24px;height:24px;border-radius:50%;background:var(--bt-hover);display:inline-flex;align-items:center;justify-content:center;color:var(--bt-ink)}
+-.bt-palette-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:1px}
+-.bt-palette-title{font-size:14px;line-height:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-palette-sub{font-size:12px;line-height:16px;color:var(--bt-ink-3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-palette-badge{flex:none;font-size:11px;line-height:16px;padding:0 6px;border-radius:4px;background:var(--bt-tag-bg);color:var(--bt-tag-ink)}
+-.bt-palette-empty{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:8px;padding:0 16px;text-align:center;animation:bt-veil-in .22s ease-out}
+-.bt-palette-empty-icon{color:var(--bt-line-2)}
+-.bt-palette-empty-icon svg{width:32px;height:32px}
+-.bt-palette-empty-label{font-size:14px;font-weight:500;color:var(--bt-ink-2)}
+-.bt-palette-empty-hint{font-size:13px;line-height:16px;color:var(--bt-ink-3)}
+-@media (prefers-reduced-motion:reduce){.bt-palette{animation:bt-fade .1s ease-out}}
+-.bt-account-menu{width:224px}
+-.bt-account{flex:none;width:36px;height:36px;border:0;padding:0;background:none;border-radius:50%;cursor:pointer;display:inline-flex}
+-.bt-account:hover .bt-you,.bt-account[aria-expanded=true] .bt-you{background:color-mix(in srgb,var(--bt-ink) 9%,var(--bt-sidebar))}
+-/* Popover keyframes move translate and scale, which compose with a transform the popover
+-   already has. */
+-@keyframes bt-pop-drop{from{translate:0 -4px;scale:.96}}
+-@keyframes bt-pop-lift{from{translate:0 4px;scale:.96}}
+-@keyframes bt-pop-out{to{opacity:0;scale:.97;filter:blur(2px)}}
+-@keyframes bt-veil-in{from{opacity:0;filter:blur(6px)}}
+-@keyframes bt-check-pop{from{opacity:0;scale:.4}}
+-@media (prefers-reduced-motion:reduce){.bt-menu,.bt-avedit,.bt-react-strip{animation:bt-fade .1s ease-out}.bt-react-strip button,.bt-q-check,.bt-color[aria-pressed=true] span{animation:none}}
+-.bt-brand:hover{background:var(--bt-hover)}
+-.bt-drop-list{position:relative;display:flex;flex-direction:column;gap:2px}
+-.bt-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:4px}
+-.bt-pick{display:flex;flex-direction:column;align-items:center;gap:4px;padding:7px 2px 6px;border-radius:10px;border:1px solid transparent;background:none;color:var(--bt-ink);cursor:pointer;font:inherit;font-size:11px;line-height:14px;min-width:0}
+-.bt-pick:hover{background:var(--bt-hover)}
+-.bt-pick[aria-pressed=true]{border-color:var(--bt-line-2);background:var(--bt-hover)}
+-.bt-pick>span:last-child:not(.bt-mark){max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-pick:hover .bt-mark[data-state=idle] .bt-eye{animation:bt-blink .5s linear 1}
+-.bt-select{width:100%;height:34px;box-sizing:border-box;border-radius:8px;border:1px solid var(--bt-line);background:var(--bt-card);color:var(--bt-ink);padding:0 8px;font:inherit;font-size:13px}
+-.bt-note{font-size:12px;line-height:16px;color:var(--bt-ink-2);margin-top:6px}
+-.bt-swatch-sep{width:1px;height:22px;background:var(--bt-line-2);margin:0 2px}
+-.bt-swatch-custom{position:relative;overflow:hidden;background:conic-gradient(#ff3e51,#ffaf38,#00c972,#1cc3b0,#2a92fe,#a97efe,#ff5eb1,#ff3e51);box-sizing:border-box}
+-.bt-swatch-custom[data-on=true]{border-color:var(--bt-ink)}
+-.bt-swatch-custom input{position:absolute;inset:-4px;width:calc(100% + 8px);height:calc(100% + 8px);opacity:0;cursor:pointer;border:0;padding:0}
+-.bt-swatch-default{background:linear-gradient(135deg,var(--bt-card) 0 46%,var(--bt-line-2) 46% 54%,var(--bt-card) 54%);box-shadow:inset 0 0 0 1px var(--bt-line-2)}
+-.bt-states{display:flex;flex-wrap:wrap;gap:4px}
+-.bt-state{border:1px solid var(--bt-line);background:none;border-radius:999px;font:inherit;font-size:11px;line-height:16px;padding:2px 8px;color:var(--bt-ink-2);cursor:pointer}
+-.bt-state:hover{color:var(--bt-ink)}
+-.bt-state[aria-pressed=true]{background:var(--bt-active);border-color:var(--bt-line-2);color:var(--bt-ink)}
+-.bt-theme-chip{position:relative;width:46px;height:30px;border-radius:8px;box-shadow:inset 0 0 0 1px var(--bt-line-2);background:linear-gradient(90deg,var(--ls) 0 36%,var(--lb) 36%);overflow:hidden}
+-.bt-theme-chip i{position:absolute;right:7px;bottom:7px;width:10px;height:10px;border-radius:50%;background:var(--la)}
+-body[data-ds-dark-theme] .bt-theme-chip{background:linear-gradient(90deg,var(--ds) 0 36%,var(--db) 36%)}
+-body[data-ds-dark-theme] .bt-theme-chip i{background:var(--da)}
+-.bt-tabs{flex-wrap:wrap}
+-.bt-soft:disabled{opacity:.4;cursor:default}
+-.bt-group-role{margin-left:6px;font-size:11px;line-height:14px;padding:1px 5px;border-radius:4px;background:var(--bt-tag-bg);color:var(--bt-tag-ink);vertical-align:1px}
+-.bt-members{display:flex;flex-direction:column;gap:1px}
+-.bt-member{display:flex;align-items:center;gap:4px;min-height:40px;padding:0 4px 0 6px;border-radius:8px;animation:bt-rise .18s ease-out}
+-.bt-member:hover{background:var(--bt-hover)}
+-.bt-member-name{flex:1;min-width:0;display:flex;align-items:center;gap:10px;border:0;background:none;padding:6px 0;color:var(--bt-ink);font:inherit;font-size:14px;line-height:20px;cursor:pointer;text-align:left}
+-.bt-member-name>span:last-child{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-chip-admin{background:var(--bt-tag-bg);color:var(--bt-tag-ink);border-color:transparent}
+-.bt-mini{flex:none;border:0;background:none;border-radius:6px;padding:2px 6px;font:inherit;font-size:12px;line-height:18px;color:var(--bt-ink-2);cursor:pointer}
+-.bt-mini:hover{background:var(--bt-active);color:var(--bt-ink)}
+-.bt-member .bt-mini,.bt-member .bt-x{opacity:0;transition:opacity .15s ease}
+-.bt-member:hover .bt-mini,.bt-member:hover .bt-x,.bt-member .bt-mini:focus-visible,.bt-member .bt-x:focus-visible{opacity:1}
+-.bt-add{color:var(--bt-ink-2);margin-top:2px}
+-.bt-add:hover,.bt-addlist .bt-option:hover{background:var(--bt-hover);color:var(--bt-ink)}
+-.bt-addlist{display:flex;flex-direction:column;margin-top:4px;padding:4px;border:1px solid var(--bt-line);border-radius:10px;background:var(--bt-card);animation:bt-rise .16s ease-out}
+-.bt-seg{position:relative;display:flex;gap:2px;padding:2px;border-radius:10px;background:var(--bt-hover)}
+-.bt-motion-seg{width:216px}
+-.bt-seg button{position:relative;z-index:1;flex:1;height:30px;border:0;border-radius:8px;background:none;font:inherit;font-size:13px;color:var(--bt-ink-2);cursor:pointer;transition:background-color .15s ease,color .15s ease,box-shadow .15s ease,${spring(SPRING_TAP, "scale")}}
+-.bt-seg button[aria-pressed=true]{background:var(--bt-card);color:var(--bt-ink);box-shadow:0 1px 3px rgba(0,0,0,.08)}
+-.bt-seg button:disabled{opacity:.4;cursor:default}
+-.bt-seg button:active:not(:disabled){scale:.96}
+-.bt-seg>.bt-thumb{top:2px;bottom:2px;border-radius:8px;background:var(--bt-card);box-shadow:0 1px 3px rgba(0,0,0,.08)}
+-.bt-seg[data-glide] button[aria-pressed=true]{background:transparent;box-shadow:none}
+-@keyframes bt-rise{from{opacity:0;transform:translateY(-3px)}to{opacity:1;transform:none}}
+-@media (prefers-reduced-motion:reduce){.bt-member,.bt-addlist{animation:none}}
 +// src/client/themes.js
 +var THEME_KEYS = ["bg", "sidebar", "bubble", "card", "text", "user", "userText", "accent"];
 +var THEMES = {
@@ -3329,50 +3451,236 @@ diff --git a/client.js b/client.js
 +  };
 +}
 +var allThemes = () => ({ ...THEMES, ...customThemes });
-+
-+// src/client/mention-style.js
-+function chipKey(bot) {
-+  if (/\s/.test(bot?.name)) return null;
-+  return String(bot?.name ?? "").toLowerCase();
-+}
-+function mentionCss(bots) {
-+  const list = Array.isArray(bots) ? bots : [];
-+  const owner = /* @__PURE__ */ new Map();
-+  for (const bot of list) {
-+    const key = chipKey(bot);
-+    if (key === null) continue;
-+    const prev = owner.get(key);
-+    if (prev && !prev.remote && bot?.remote) continue;
-+    owner.set(key, bot);
-+  }
-+  return list.map((bot) => {
-+    const anchor = `.bt-bubble a[href="${MENTION_ORIGIN}${bot.id}"]`;
-+    const key = chipKey(bot);
-+    const chip = key !== null && owner.get(key) === bot ? `[class*="_userRow"] [data-ref-chip="file"][title="@${String(bot.name).replace(/["\\]/g, "\\$&")}" i]` : "";
-+    const look = bot?.remote ? lookAvoidingLocals(bot) : lookOf(bot);
-+    const marks = chip ? `${anchor}::before,${chip}::before` : `${anchor}::before`;
-+    const mark = look.image ? `${marks}{background:center/cover url("${look.image}");-webkit-mask:none;mask:none;border-radius:50%}` : `${marks}{background:${paintCss(look.color)};-webkit-mask-image:${maskOf(look.shape)};mask-image:${maskOf(look.shape)}}`;
-+    const chipBase = chip ? `${chip}{color:inherit;font-weight:600}${chip}>svg{display:none}${chip}::before{content:"";display:inline-block;flex:none;width:16px;height:16px;margin-right:3px;vertical-align:-3px;-webkit-mask:${DEFAULT_MASK} center/contain no-repeat;mask:${DEFAULT_MASK} center/contain no-repeat}` : "";
-+    return `${anchor}{color:${inkText(look.color)}}${chipBase}${mark}`;
-+  }).join("\n");
-+}
-+
-+// src/client/motion.js
-+var import_react4 = require("react");
-+var reducedMotion = () => window.matchMedia?.("(prefers-reduced-motion: reduce)").matches === true;
-+function springEasing(stiffness, damping) {
-+  const w0 = Math.sqrt(stiffness);
-+  const zeta = damping / (2 * w0);
-+  const at = (t2) => {
-+    if (zeta >= 1) return 1 - (1 + w0 * t2) * Math.exp(-w0 * t2);
-+    const wd = w0 * Math.sqrt(1 - zeta * zeta);
-+    return 1 - Math.exp(-zeta * w0 * t2) * (Math.cos(wd * t2) + zeta * w0 / wd * Math.sin(wd * t2));
-+  };
-+  let end = 0.05;
-+  while (end < 2 && Math.abs(1 - at(end)) > 1e-3) end += 0.01;
-+  const points = Array.from({ length: 25 }, (_, index) => (index === 24 ? 1 : at(end * index / 24)).toFixed(4));
-+  return { duration: Math.round(end * 1e3), easing: `linear(${points.join(",")})`, stiffness, damping };
-+}
+ 
+-/* Memory dialog: a summary of every entry, the entries behind the menu, "Ask or update" below. */
+-.bt-mem-row{display:flex;align-items:center;gap:8px;width:100%;height:36px;padding:0 8px 0 10px;border:.5px solid var(--bt-line-2);border-radius:10px;background:var(--bt-card);color:var(--bt-ink);font:inherit;font-size:13px;cursor:pointer;box-sizing:border-box;transition:background-color .12s ease}
+-.bt-mem-row:hover{background:var(--bt-hover)}
+-.bt-mem-row>svg{flex:none;color:var(--bt-ink-2)}
+-.bt-mem-row-copy{flex:1;text-align:left}
+-.bt-mem-row-go{display:inline-flex;align-items:center;gap:2px;color:var(--bt-ink-3);font-size:12px}
+-.bt-mem-layer{position:fixed;inset:var(--dsh-frame-chrome-top,0px) 0 0;z-index:61;display:flex;align-items:center;justify-content:center;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif}
+-.bt-mem-scrim{animation:bt-fade .2s ease-out}
+-.bt-mem{position:relative;width:min(680px,calc(100vw - 48px));height:min(760px,calc(100vh - 2*max(32px,var(--dsh-frame-overlay-top,32px))));background:var(--bt-main);border-radius:20px;border:.5px solid var(--bt-line-2);box-shadow:0 24px 80px rgba(0,0,0,.24);display:flex;flex-direction:column;overflow:hidden;color:var(--bt-ink);animation:bt-dialog-rise ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
+-.bt-mem-head{position:relative;display:flex;align-items:center;gap:8px;height:60px;flex:none;padding:0 14px 0 24px;border-bottom:.5px solid var(--bt-line);box-sizing:border-box}
+-.bt-mem-head .bt-icon-btn{width:32px;height:32px;flex:none}
+-.bt-mem-head [aria-haspopup] svg{width:18px;height:18px;stroke-width:2.6}
+-.bt-mem-head>.bt-icon-btn:first-child{margin-left:-10px}
+-.bt-mem-head h2{margin:0;font-size:17px;line-height:24px;font-weight:600;white-space:nowrap}
+-.bt-mem-status{font-size:13px;line-height:18px;color:var(--bt-ink-3);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0;font-variant-numeric:tabular-nums}
+-.bt-mem-head-gap{flex:1}
+-.bt-mem-menu{position:absolute;top:52px;right:50px;min-width:220px;--bt-origin:top right}
+-.bt-mem-menu button:disabled{opacity:.4;cursor:default;background:none}
+-.bt-mem-body{flex:1;overflow-y:auto;padding:22px 28px 24px;scrollbar-width:thin;display:flex;flex-direction:column;gap:12px}
+-.bt-mem-summary{transition:opacity .3s ease}
+-.bt-mem-summary[data-stale]{opacity:.55}
+-.bt-mem-summary h3{margin:20px 0 6px;font-size:17px;line-height:26px;font-weight:600}
+-.bt-mem-summary h3:first-child{margin-top:0}
+-.bt-mem-summary p{margin:0;font-size:15px;line-height:26px}
+-.bt-mem-summary>*{animation:bt-mem-line .45s cubic-bezier(.16,1,.3,1) both}
+-.bt-mem-summary>:nth-child(2){animation-delay:.03s}
+-.bt-mem-summary>:nth-child(3){animation-delay:.06s}
+-.bt-mem-summary>:nth-child(4){animation-delay:.09s}
+-.bt-mem-summary>:nth-child(5){animation-delay:.12s}
+-.bt-mem-summary>:nth-child(6){animation-delay:.15s}
+-.bt-mem-summary>:nth-child(n+7){animation-delay:.18s}
+-@keyframes bt-mem-line{from{opacity:0;transform:translateY(4px)}}
+-.bt-mem-skel{display:flex;flex-direction:column;gap:24px}
+-.bt-mem-skel-block{display:flex;flex-direction:column;gap:10px}
+-.bt-mem-skel-block span{display:block;height:12px;border-radius:6px;background:linear-gradient(90deg,var(--bt-hover) 25%,var(--bt-active) 50%,var(--bt-hover) 75%);background-size:200% 100%;animation:bt-mem-skel 1.4s ease-in-out infinite}
+-.bt-mem-skel-block .bt-mem-skel-head{width:30%;height:16px;margin-bottom:2px}
+-@keyframes bt-mem-skel{from{background-position:150% 0}to{background-position:-50% 0}}
+-.bt-mem-skel-label{font-size:13px;line-height:18px;color:var(--bt-ink-3)}
+-.bt-mem-empty{margin:auto;max-width:400px;display:flex;flex-direction:column;align-items:center;gap:8px;text-align:center;padding:24px 0;animation:bt-mem-line .45s cubic-bezier(.16,1,.3,1) both}
+-.bt-mem-empty-mark{width:48px;height:48px;border-radius:50%;background:var(--bt-hover);display:flex;align-items:center;justify-content:center;color:var(--bt-ink-2);margin-bottom:4px}
+-.bt-mem-empty-mark svg{width:22px;height:22px}
+-.bt-mem-empty-title{font-size:15px;line-height:22px;font-weight:600}
+-.bt-mem-empty-text{font-size:13px;line-height:20px;color:var(--bt-ink-2)}
+-.bt-mem-failed{display:flex;align-items:center;gap:12px;padding:10px 12px;border-radius:12px;background:var(--bt-hover);font-size:13px;line-height:18px;color:var(--bt-ink-2)}
+-.bt-mem-failed>span{flex:1;min-width:0;overflow-wrap:anywhere}
+-.bt-mem-entries{display:flex;flex-direction:column;gap:28px;animation:bt-page-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .22s ease-out}
+-.bt-mem-section-head{display:flex;align-items:baseline;gap:8px;margin-bottom:4px}
+-.bt-mem-section-head h3{margin:0;font-size:15px;line-height:22px;font-weight:600}
+-.bt-mem-section-head span{font-size:12px;line-height:16px;color:var(--bt-ink-3)}
+-.bt-mem-section-head .bt-mem-size{margin-left:auto;font-variant-numeric:tabular-nums;white-space:nowrap}
+-.bt-mem-topic{font-size:12px;line-height:16px;color:var(--bt-ink-2);margin:14px 0 2px 4px;font-weight:500}
+-.bt-mem-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column}
+-.bt-mem-entry{display:flex;align-items:center;gap:10px;padding:9px 4px;border-bottom:.5px solid var(--bt-line);transition:opacity .2s ease}
+-.bt-mem-entry[data-busy]{opacity:.4}
+-.bt-mem-entry-copy{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}
+-.bt-mem-entry-text{font-size:14px;line-height:20px;overflow-wrap:anywhere}
+-.bt-mem-entry-meta{font-size:12px;line-height:16px;color:var(--bt-ink-3);font-variant-numeric:tabular-nums}
+-.bt-mem-remove{flex:none;height:28px;min-width:28px;border-radius:999px;border:0;background:none;color:var(--bt-ink-3);display:inline-flex;align-items:center;justify-content:center;cursor:pointer;padding:0 6px;font:inherit;font-size:12px;opacity:0;transition:opacity .12s ease,background-color .12s ease,color .12s ease}
+-.bt-mem-entry:hover .bt-mem-remove,.bt-mem-remove:focus-visible,.bt-mem-remove[data-confirm]{opacity:1}
+-.bt-mem-remove:hover{background:var(--bt-hover);color:var(--bt-ink)}
+-.bt-mem-remove[data-confirm]{background:rgba(224,33,53,.1);color:#e02135;padding:0 10px}
+-@media (hover:none){.bt-mem-remove{opacity:1}}
+-.bt-mem-none{font-size:13px;line-height:18px;color:var(--bt-ink-3);padding:8px 4px}
+-.bt-mem-foot{flex:none;padding:8px 20px 20px;display:flex;flex-direction:column;gap:10px}
+-.bt-mem-reply{border-radius:16px;background:var(--bt-hover);padding:8px 8px 12px 16px;display:flex;flex-direction:column;gap:6px;max-height:36vh;overflow-y:auto;scrollbar-width:thin;transform-origin:50% 100%;animation:bt-pop-lift ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
+-.bt-mem-reply-head{display:flex;align-items:center;gap:8px;min-height:24px}
+-.bt-mem-reply-asked{flex:1;min-width:0;font-size:12px;line-height:16px;color:var(--bt-ink-3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-mem-reply .bt-icon-btn{width:24px;height:24px;flex:none}
+-.bt-mem-reply-text{font-size:14px;line-height:21px;padding-right:8px;overflow-wrap:anywhere}
+-.bt-mem-changes{list-style:none;margin:2px 0 0;padding:0 8px 0 0;display:flex;flex-direction:column;gap:4px}
+-.bt-mem-changes li{display:flex;align-items:flex-start;gap:6px;font-size:13px;line-height:18px;color:var(--bt-ink-2);overflow-wrap:anywhere}
+-.bt-mem-changes li svg{flex:none;margin-top:1px;color:#e02135;animation:bt-check-pop ${SPRING_POP.duration}ms ${SPRING_POP.easing} .12s backwards}
+-.bt-mem-changes li[data-ok] svg{color:var(--bt-green)}
+-.bt-mem-ask{display:flex;align-items:center;gap:8px;height:52px;padding:0 8px 0 22px;border-radius:999px;border:.5px solid var(--bt-line-2);background:var(--bt-card);box-shadow:0 4px 16px rgba(0,0,0,.06);box-sizing:border-box;transition:border-color .15s ease,box-shadow .15s ease}
+-.bt-mem-ask:focus-within{border-color:var(--bt-ink-3);box-shadow:0 4px 20px rgba(0,0,0,.1)}
+-.bt-mem-input{flex:1;min-width:0;border:0;background:none;outline:none;color:var(--bt-ink);font:inherit;font-size:15px;line-height:22px;padding:0}
+-.bt-mem-input::placeholder{color:var(--bt-ink-3)}
+-.bt-mem-send{flex:none;width:36px;height:36px;border-radius:50%;border:0;background:var(--bt-ink);color:var(--bt-main);display:flex;align-items:center;justify-content:center;cursor:pointer;padding:0;transition:opacity .15s ease,${spring(SPRING_TAP, "scale")}}
+-.bt-mem-send:disabled{opacity:.22;cursor:default}
+-.bt-mem-send:not(:disabled):active{scale:.92}
+-.bt-mem-send>*{animation:bt-check-pop ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
+-.bt-mem-spin{width:14px;height:14px;border-radius:50%;border:2px solid currentColor;border-right-color:transparent;box-sizing:border-box;animation:bt-mem-spin .7s linear infinite}
+-@keyframes bt-mem-spin{to{transform:rotate(360deg)}}
+-@media (max-width:640px){.bt-mem{width:100vw;height:100%;border-radius:0;border:0}.bt-mem-body{padding:18px 18px 20px}.bt-mem-foot{padding:8px 12px 12px}}
+-@media (prefers-reduced-motion:reduce){.bt-mem,.bt-mem-scrim,.bt-mem-summary>*,.bt-mem-empty,.bt-mem-reply,.bt-mem-skel-block span,.bt-mem-entries,.bt-mem-send>*,.bt-mem-changes li svg{animation:none}}
++// src/client/mention-style.js
++function chipKey(bot) {
++  if (/\s/.test(bot?.name)) return null;
++  return String(bot?.name ?? "").toLowerCase();
++}
++function mentionCss(bots) {
++  const list = Array.isArray(bots) ? bots : [];
++  const owner = /* @__PURE__ */ new Map();
++  for (const bot of list) {
++    const key = chipKey(bot);
++    if (key === null) continue;
++    const prev = owner.get(key);
++    if (prev && !prev.remote && bot?.remote) continue;
++    owner.set(key, bot);
++  }
++  return list.map((bot) => {
++    const anchor = `.bt-bubble a[href="${MENTION_ORIGIN}${bot.id}"]`;
++    const key = chipKey(bot);
++    const chip = key !== null && owner.get(key) === bot ? `[class*="_userRow"] [data-ref-chip="file"][title="@${String(bot.name).replace(/["\\]/g, "\\$&")}" i]` : "";
++    const look = bot?.remote ? lookAvoidingLocals(bot) : lookOf(bot);
++    const marks = chip ? `${anchor}::before,${chip}::before` : `${anchor}::before`;
++    const mark = look.image ? `${marks}{background:center/cover url("${look.image}");-webkit-mask:none;mask:none;border-radius:50%}` : `${marks}{background:${paintCss(look.color)};-webkit-mask-image:${maskOf(look.shape)};mask-image:${maskOf(look.shape)}}`;
++    const chipBase = chip ? `${chip}{color:inherit;font-weight:600}${chip}>svg{display:none}${chip}::before{content:"";display:inline-block;flex:none;width:16px;height:16px;margin-right:3px;vertical-align:-3px;-webkit-mask:${DEFAULT_MASK} center/contain no-repeat;mask:${DEFAULT_MASK} center/contain no-repeat}` : "";
++    return `${anchor}{color:${inkText(look.color)}}${chipBase}${mark}`;
++  }).join("\n");
++}
+ 
+-.bt-thumb{position:absolute;left:0;top:0;z-index:0;pointer-events:none;transition:opacity .14s ease}
+-.bt-thumb[data-hidden]{opacity:0}
+-[data-morph]{overflow:hidden!important}
+-.bt-veil{animation:bt-veil-in .22s ease-out}
+-.bt-with-icon{display:inline-flex;align-items:center;gap:4px}
+-.bt-with-icon svg{width:14px;height:14px}
+-.bt-tag-admin{display:inline-flex;align-items:center;gap:4px}
+-.bt-create-inline{padding:18px 16px;border:1px solid var(--bt-line);border-radius:12px;background:var(--bt-card)}
+-.bt-create-inline .bt-create-card{max-width:none}
+-.bt-panel-view>[data-move=in]{animation:bt-page-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing} backwards,bt-veil-in .2s ease-out backwards}
+-.bt-panel-view>[data-move=out]{animation:bt-page-out ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing} backwards,bt-veil-in .2s ease-out backwards}
+-.bt-panel-view>:is([data-move=in],[data-move=out]):nth-child(2){animation-delay:25ms}
+-.bt-panel-view>:is([data-move=in],[data-move=out]):nth-child(n+3){animation-delay:50ms}
+-.bt-panel-view>.bt-drawer-body[data-move=tab]{animation:bt-veil-in .2s ease-out}
+-.bt-drawer-name-input{animation:bt-veil-in .16s ease-out}
+-.bt-pop-in{display:inline-flex;animation:bt-check-pop ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
+-:is(.bt-soft,.bt-send,.bt-icon-btn,.bt-settings-close,.bt-mini,.bt-tab,.bt-nc-send,.bt-avedit-tab,.bt-shape,.bt-pick,.bt-swatch,.bt-palette-clear){transition:background-color .12s ease,color .12s ease,border-color .12s ease,opacity .12s ease,${spring(SPRING_TAP, "scale")}}
+-:is(.bt-icon-btn,.bt-settings-close,.bt-nc-send,.bt-shape,.bt-swatch,.bt-color,.bt-x,.bt-q-x,.bt-palette-clear):active:not(:disabled){scale:.9}
+-:is(.bt-soft,.bt-send,.bt-mini,.bt-tab,.bt-avedit-tab,.bt-pick,.bt-q-submit,.bt-q-btn):active:not(:disabled){scale:.96}
+-@media (prefers-reduced-motion:reduce){.bt-thumb{transition:none}.bt-panel-view>[data-move],.bt-drawer-name-input,.bt-veil,.bt-pop-in,.bt-token,.bt-drop,.bt-newchat,.bt-option-hint,.bt-connector-form,.bt-settings-head>*{animation:none}}
+-`;
+-var CONVERSATION_CSS = `
+-.bt-think{font-size:13px;line-height:18px;color:var(--bt-ink-2);margin:2px 0 4px;max-width:min(560px,78%)}
+-.bt-think summary{cursor:pointer;list-style:none;display:inline-flex;align-items:center;gap:6px}
+-.bt-think summary::-webkit-details-marker{display:none}
+-.bt-think-text{white-space:pre-wrap;margin-top:6px;padding-left:10px;border-left:2px solid var(--bt-line-2)}
+-.bt-event{display:flex;justify-content:center;align-items:center;gap:2px;min-height:24px;margin:2px 0;font-size:12px;line-height:16px;color:var(--bt-ink-2);flex-wrap:wrap}
+-.bt-event>span{padding:0 2px}
+-.bt-event button{border:0;background:none;color:inherit;font:inherit;display:inline-flex;align-items:center;gap:4px;cursor:pointer;height:24px;padding:4px 6px 4px 4px;border-radius:999px;box-sizing:border-box;transition:background-color .12s ease}
+-.bt-event button:hover{background:var(--bt-hover)}
+-.bt-event button:active{background:var(--bt-active)}
+-.bt-event button.bt-event-whole{min-width:0;max-width:100%;padding:4px 6px 4px 8px}
+-.bt-event-whole>*{flex:none}
+-.bt-event-whole>span:first-child{margin-right:2px}
+-/* One button cannot wrap like separate parts, so a long name is cut to fit the chat. */
+-.bt-event-whole>.bt-event-name{flex:0 1 auto;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-time-sep{display:flex;justify-content:center;align-items:center;height:28px;margin:14px 0 8px;font-size:12px;line-height:16px;color:var(--bt-ink-2);white-space:nowrap}
+-[class*="_scroll"]>[class*="_column"]::before{content:var(--bt-first-sep,none);display:block;flex:none;height:28px;margin:17px 0 12px;font-size:12px;line-height:28px;text-align:center;color:var(--bt-ink-2);white-space:nowrap}
+-.bt-activity{display:flex;align-items:center;gap:10px;margin:8px 0 4px 2px;font-size:14px;color:var(--bt-ink-2)}
+-.bt-group-replies{display:contents}
+-/* A Bot chat is flat in every work-details mode, without changing the user's mode
+-   (it is a DSH-wide setting): step groups lose their header and stay open, and what a
+-   mode folds away in a finished turn stays shown. TurnProcessCell also opens that
+-   fold; these rules cover the first frame before it does. */
+-[data-step-process]>div:first-child{display:none!important}
+-[data-step-process]>[data-step-process-body]{display:block!important;content-visibility:visible!important;max-height:none!important;overflow:visible!important;mask-image:none!important;scrollbar-gutter:auto!important}
+-:is([data-step-process],[data-turn-process-hidden])[hidden]{content-visibility:visible!important}
+-[class*="_flowItem"]:has(> [data-slot="conversation.chat.node"]:empty){display:none!important}
+-[class*="_header"]:has(.bt-head){border-bottom-color:transparent!important;box-shadow:none!important}
+-/* The transcript runs under a floating header pill. */
+-header[class*="_header"]:has(.bt-head){position:absolute!important;top:0;left:0;right:0;z-index:8;display:flex!important;padding:10px 0 0!important;background:transparent!important;pointer-events:none;justify-content:center}
+-header[class*="_header"]:has(.bt-head)::before{content:"";position:absolute;inset:0 0 auto;height:60px;background:linear-gradient(to bottom,var(--bt-main),color-mix(in srgb,var(--bt-main) 0%,transparent));pointer-events:none;z-index:-1}
+-header[class*="_header"]:has(.bt-head)>[class*="_headerLeading"]{position:absolute;left:12px;top:10px;pointer-events:auto}
+-header[class*="_header"] .bt-head{flex:1 1 auto;width:100%}
+-[class*="_body"]:has(> [class*="_scrollBody"]){--dsh-chat-content-width:min(960px,100%)}
+-/* DSH's turn tail keeps what plugins put in it (delivered files, the Bot's separators),
+-   without its copy and branch row; a tail with nothing in it takes no room. */
+-[data-turn-tail]>:not([data-slot="conversation.chat.turnTail"]){display:none!important}
+-[class*="_flowItem"][data-chat-flow-kind="turn-tail"]:not(:has([data-slot="conversation.chat.turnTail"]:not(:empty))){display:none!important}
+-/* Every team Session belongs to a Bot or a group, so a blank one is an empty chat, not
+-   the shell's new-session hero: no headline, no workspace or mode picker, and the
+-   composer stays docked at the bottom. */
+-[data-content-phase=hero] [class*="_scrollBody"]{justify-content:flex-end!important}
+-[data-content-phase=hero] [class*="_composerHero"]{align-self:stretch!important;width:auto!important;padding-bottom:0!important}
+-[data-content-phase=hero] [class*="_composerHero"]>[class$="_root"],[data-content-phase=hero] [class*="_heroWorkspaceRow"]{display:none!important}
+-[data-content-phase=hero] [class*="_composerHero"] [class*="_input"]{min-height:0!important}
+-/* The right sides give back the scrollbar gutter so both edges sit 16px from the column. */
+-[class*="_scroll"]:has(> [class*="_column"]){padding:60px 11px 16px 16px!important}
+-/* The shell's running status only hosts the activity row (.bt-typing). */
+-[data-chat-running]{display:block!important;width:100%;min-height:0!important;margin:0!important;padding:0!important}
+-[data-chat-running]>span:not([role=status]){display:none!important}
+-[data-chat-running]:has(> .bt-typing){margin-top:var(--dsh-chat-flow-gap,12px)!important}
+-.bt-typing{display:flex;align-items:center;gap:12px;height:36px;min-width:0;padding-inline-start:8px;transform-origin:0 50%;animation:bt-typing-in ${SPRING_TAP.duration}ms ${SPRING_TAP.easing} backwards}
+-.bt-typing[data-exiting]{animation:bt-typing-out .14s cubic-bezier(.22,1,.36,1) forwards}
+-.bt-typing>.bt-mark,.bt-typing>.bt-cluster{flex-shrink:0}
+-.bt-typing>.bt-mark{cursor:pointer;transition:filter .16s ease-out}
+-.bt-typing>.bt-mark:hover{filter:drop-shadow(0 2px 4px rgba(0,0,0,.18))}
+-.bt-typing>.bt-mark .bt-eyes{transition:scale .28s cubic-bezier(.4,.06,.18,1)}
+-.bt-typing>.bt-mark:hover .bt-eyes{scale:1.18}
+-.bt-typing-text{display:flex;align-items:center;flex:1 1 auto;min-width:0;animation:bt-typing-label .22s ease-out .2s backwards}
+-.bt-typing-label{display:inline-flex;align-items:center;gap:6px;min-width:0;animation:bt-typing-label .22s ease-out backwards}
+-.bt-typing-label>.bt-shimmer{font-size:14px;line-height:22px;font-weight:400;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+-.bt-typing-time{flex-shrink:0;font-size:12px;line-height:22px;color:var(--bt-ink-3);white-space:nowrap}
+-@keyframes bt-typing-in{from{opacity:0;transform:scale(.9)}}
+-@keyframes bt-typing-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(.92);filter:blur(3px)}}
+-@keyframes bt-typing-label{from{opacity:0;filter:blur(5px);transform:translateY(3px)}}
+-/* Shimmer: a stepped sweep clipped to the text. */
+-.bt-shimmer{color:transparent;background:linear-gradient(90deg,var(--bt-shimmer-base) 0%,var(--bt-shimmer-base) 25%,var(--bt-ink) 60%,var(--bt-shimmer-base) 75%,var(--bt-shimmer-base) 100%);background-size:200% 100%;-webkit-background-clip:text;background-clip:text;animation:bt-shimmer 2.2s steps(60) infinite;--bt-shimmer-base:color-mix(in srgb,var(--bt-ink) 40%,transparent)}
+-@keyframes bt-shimmer{from{background-position:200% 0}to{background-position:-200% 0}}
+-/* New rows slide up; a reply that replaces the activity row grows out of its corner. */
+-[data-bt-enter="new"]{animation:bt-row-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing}}
+-[data-bt-enter="after-collapse"]{transform-origin:0 100%;animation:bt-row-after .24s cubic-bezier(.23,1,.32,1) .38s backwards}
+-@keyframes bt-row-in{from{transform:translateY(12px)}to{transform:none}}
+-@keyframes bt-row-after{0%{opacity:0;transform:translateY(12px) scale(.94)}55%{opacity:1}100%{opacity:1;transform:none}}
+-@media (prefers-reduced-motion:reduce){
+-.bt-typing,.bt-typing[data-exiting]{animation-name:bt-fade-in;animation-duration:.12s;transform:none}
+-.bt-typing[data-exiting]{animation-name:bt-fade-out}
+-.bt-typing-text,.bt-typing-label{animation-name:bt-fade-in;animation-delay:0s}
+-.bt-shimmer{animation:none;background:none;color:var(--bt-ink-2)}
+-[data-bt-enter="new"]{animation:none}
+-[data-bt-enter="after-collapse"]{animation:bt-fade-in .12s ease-out}
++// src/client/motion.js
++var import_react4 = require("react");
++var reducedMotion = () => window.matchMedia?.("(prefers-reduced-motion: reduce)").matches === true;
++function springEasing(stiffness, damping) {
++  const w0 = Math.sqrt(stiffness);
++  const zeta = damping / (2 * w0);
++  const at = (t2) => {
++    if (zeta >= 1) return 1 - (1 + w0 * t2) * Math.exp(-w0 * t2);
++    const wd = w0 * Math.sqrt(1 - zeta * zeta);
++    return 1 - Math.exp(-zeta * w0 * t2) * (Math.cos(wd * t2) + zeta * w0 / wd * Math.sin(wd * t2));
++  };
++  let end = 0.05;
++  while (end < 2 && Math.abs(1 - at(end)) > 1e-3) end += 0.01;
++  const points = Array.from({ length: 25 }, (_, index) => (index === 24 ? 1 : at(end * index / 24)).toFixed(4));
++  return { duration: Math.round(end * 1e3), easing: `linear(${points.join(",")})`, stiffness, damping };
++}
 +var SPRING_SHAPE = springEasing(400, 31.2);
 +var SPRING_TAP = springEasing(900, 48);
 +var SPRING_LIST = springEasing(484, 35.2);
@@ -4653,114 +4961,7 @@ diff --git a/client.js b/client.js
 +    style.remove();
 +  };
 +}
- 
--.bt-menu{position:fixed;pointer-events:auto;z-index:60;min-width:200px;padding:6px;border-radius:12px;background:var(--bt-main);border:.5px solid var(--bt-line-2);box-shadow:0 10px 20px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1),0 0 0 1px rgba(228,228,228,.04);display:flex;flex-direction:column;gap:2px;transform-origin:var(--bt-origin,top left);animation:bt-pop-drop ${SPRING_TAP.duration}ms ${SPRING_TAP.easing},bt-veil-in .14s ease-out;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;box-sizing:border-box}
--.bt-menu button{display:flex;align-items:center;gap:4px;width:100%;min-height:30px;text-align:left;border:0;background:none;border-radius:6px;padding:6px 8px;font:inherit;font-size:13px;line-height:18px;color:var(--bt-ink);cursor:pointer;box-sizing:border-box}
--.bt-menu button:hover{background:var(--bt-hover)}
--.bt-menu button svg{flex:none;width:16px;height:16px;margin:0 1px}
--.bt-menu .bt-danger{color:#c21d2e}
--.bt-menu-sep{height:.5px;flex:none;background:var(--bt-line-2);margin:4px 8px}
--.bt-menu-up{--bt-origin:bottom left;animation-name:bt-pop-lift,bt-veil-in}
--.bt-menu[data-leaving]{pointer-events:none;animation:bt-pop-out .12s cubic-bezier(.4,0,1,1) forwards}
--.bt-menu-label{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-menu-hint{flex:none;color:var(--bt-ink-3);font-size:12px;font-variant-numeric:tabular-nums}
--.bt-palette-layer{position:fixed;inset:var(--dsh-frame-chrome-top,0px) 0 0;z-index:70;pointer-events:auto;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif}
--.bt-backdrop{position:absolute;inset:0;background:rgba(0,0,0,.46);animation:bt-fade .22s ease-out}
--.bt-palette{position:absolute;top:50%;left:50%;width:min(560px,92vw);transform:translate(-50%,-50%);display:flex;flex-direction:column;border-radius:12px;background:var(--bt-main);border:1px solid var(--bt-line-2);box-shadow:0 24px 48px -12px rgba(0,0,0,.25);overflow:hidden;color:var(--bt-ink);animation:bt-palette-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
--.bt-palette-layer[data-leaving]{pointer-events:none}
--.bt-palette-layer[data-leaving] .bt-backdrop{opacity:0;transition:opacity .16s ease-in}
--.bt-palette-layer[data-leaving] .bt-palette{animation:bt-dialog-sink .16s cubic-bezier(.4,0,1,1) forwards}
--@keyframes bt-palette-in{from{translate:0 -10px;scale:.96}}
--.bt-palette-head{display:flex;align-items:center;gap:4px;padding:14px 10px 14px 14px;border-bottom:.5px solid var(--bt-line-2)}
--.bt-palette-glyph{display:inline-flex;width:18px;height:18px;align-items:center;justify-content:center;color:var(--bt-ink-3);margin-right:4px}
--.bt-palette-head input{flex:1;min-width:0;border:0;outline:none;background:none;color:var(--bt-ink);font:inherit;font-size:15px;line-height:22px;padding:0}
--.bt-palette-head input::placeholder{color:var(--bt-ink-3)}
--.bt-palette-clear{width:18px;height:18px;border:0;padding:0;border-radius:6px;background:none;color:var(--bt-ink-3);display:inline-flex;align-items:center;justify-content:center;cursor:pointer}
--.bt-palette-clear:hover{color:var(--bt-ink)}
--.bt-palette-clear svg{width:12px;height:12px}
--.bt-palette-list{position:relative;height:402px;overflow-y:auto;padding:8px;display:flex;flex-direction:column;gap:2px;box-sizing:border-box}
--.bt-palette-list>.bt-thumb,.bt-drop-list>.bt-thumb{left:0;right:0;border-radius:8px;background:var(--bt-active)}
--.bt-palette-list>.bt-thumb{left:8px;right:8px}
--:is(.bt-palette-list,.bt-drop-list)[data-glide] [aria-selected=true]{background:transparent}
--:is(.bt-palette-row,.bt-palette-section,.bt-drop-list>.bt-option){position:relative;z-index:1}
--.bt-palette-section{padding:8px 8px 4px;font-size:12px;line-height:16px;color:var(--bt-ink-3);flex:none}
--.bt-palette-section:first-of-type{padding-top:0}
--.bt-palette-row{flex:none;display:flex;align-items:center;gap:8px;height:49px;padding:6px 10px 6px 8px;border:0;border-radius:8px;background:none;color:inherit;font:inherit;text-align:left;cursor:pointer;box-sizing:border-box;width:100%}
--.bt-palette-row[aria-selected=true]{background:var(--bt-active)}
--.bt-palette-lead{flex:none;width:24px;height:24px;display:inline-flex;align-items:center;justify-content:center}
--.bt-palette-cmd{width:24px;height:24px;border-radius:50%;background:var(--bt-hover);display:inline-flex;align-items:center;justify-content:center;color:var(--bt-ink-2)}
--.bt-palette-cmd svg{width:14px;height:14px}
--.bt-palette-agent{width:24px;height:24px;border-radius:50%;background:var(--bt-hover);display:inline-flex;align-items:center;justify-content:center;color:var(--bt-ink)}
--.bt-palette-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:1px}
--.bt-palette-title{font-size:14px;line-height:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-palette-sub{font-size:12px;line-height:16px;color:var(--bt-ink-3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-palette-badge{flex:none;font-size:11px;line-height:16px;padding:0 6px;border-radius:4px;background:var(--bt-tag-bg);color:var(--bt-tag-ink)}
--.bt-palette-empty{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:8px;padding:0 16px;text-align:center;animation:bt-veil-in .22s ease-out}
--.bt-palette-empty-icon{color:var(--bt-line-2)}
--.bt-palette-empty-icon svg{width:32px;height:32px}
--.bt-palette-empty-label{font-size:14px;font-weight:500;color:var(--bt-ink-2)}
--.bt-palette-empty-hint{font-size:13px;line-height:16px;color:var(--bt-ink-3)}
--@media (prefers-reduced-motion:reduce){.bt-palette{animation:bt-fade .1s ease-out}}
--.bt-account-menu{width:224px}
--.bt-account{flex:none;width:36px;height:36px;border:0;padding:0;background:none;border-radius:50%;cursor:pointer;display:inline-flex}
--.bt-account:hover .bt-you,.bt-account[aria-expanded=true] .bt-you{background:color-mix(in srgb,var(--bt-ink) 9%,var(--bt-sidebar))}
--/* Popover keyframes move translate and scale, which compose with a transform the popover
--   already has. */
--@keyframes bt-pop-drop{from{translate:0 -4px;scale:.96}}
--@keyframes bt-pop-lift{from{translate:0 4px;scale:.96}}
--@keyframes bt-pop-out{to{opacity:0;scale:.97;filter:blur(2px)}}
--@keyframes bt-veil-in{from{opacity:0;filter:blur(6px)}}
--@keyframes bt-check-pop{from{opacity:0;scale:.4}}
--@media (prefers-reduced-motion:reduce){.bt-menu,.bt-avedit,.bt-react-strip{animation:bt-fade .1s ease-out}.bt-react-strip button,.bt-q-check,.bt-color[aria-pressed=true] span{animation:none}}
--.bt-brand:hover{background:var(--bt-hover)}
--.bt-drop-list{position:relative;display:flex;flex-direction:column;gap:2px}
--.bt-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:4px}
--.bt-pick{display:flex;flex-direction:column;align-items:center;gap:4px;padding:7px 2px 6px;border-radius:10px;border:1px solid transparent;background:none;color:var(--bt-ink);cursor:pointer;font:inherit;font-size:11px;line-height:14px;min-width:0}
--.bt-pick:hover{background:var(--bt-hover)}
--.bt-pick[aria-pressed=true]{border-color:var(--bt-line-2);background:var(--bt-hover)}
--.bt-pick>span:last-child:not(.bt-mark){max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-pick:hover .bt-mark[data-state=idle] .bt-eye{animation:bt-blink .5s linear 1}
--.bt-select{width:100%;height:34px;box-sizing:border-box;border-radius:8px;border:1px solid var(--bt-line);background:var(--bt-card);color:var(--bt-ink);padding:0 8px;font:inherit;font-size:13px}
--.bt-note{font-size:12px;line-height:16px;color:var(--bt-ink-2);margin-top:6px}
--.bt-swatch-sep{width:1px;height:22px;background:var(--bt-line-2);margin:0 2px}
--.bt-swatch-custom{position:relative;overflow:hidden;background:conic-gradient(#ff3e51,#ffaf38,#00c972,#1cc3b0,#2a92fe,#a97efe,#ff5eb1,#ff3e51);box-sizing:border-box}
--.bt-swatch-custom[data-on=true]{border-color:var(--bt-ink)}
--.bt-swatch-custom input{position:absolute;inset:-4px;width:calc(100% + 8px);height:calc(100% + 8px);opacity:0;cursor:pointer;border:0;padding:0}
--.bt-swatch-default{background:linear-gradient(135deg,var(--bt-card) 0 46%,var(--bt-line-2) 46% 54%,var(--bt-card) 54%);box-shadow:inset 0 0 0 1px var(--bt-line-2)}
--.bt-states{display:flex;flex-wrap:wrap;gap:4px}
--.bt-state{border:1px solid var(--bt-line);background:none;border-radius:999px;font:inherit;font-size:11px;line-height:16px;padding:2px 8px;color:var(--bt-ink-2);cursor:pointer}
--.bt-state:hover{color:var(--bt-ink)}
--.bt-state[aria-pressed=true]{background:var(--bt-active);border-color:var(--bt-line-2);color:var(--bt-ink)}
--.bt-theme-chip{position:relative;width:46px;height:30px;border-radius:8px;box-shadow:inset 0 0 0 1px var(--bt-line-2);background:linear-gradient(90deg,var(--ls) 0 36%,var(--lb) 36%);overflow:hidden}
--.bt-theme-chip i{position:absolute;right:7px;bottom:7px;width:10px;height:10px;border-radius:50%;background:var(--la)}
--body[data-ds-dark-theme] .bt-theme-chip{background:linear-gradient(90deg,var(--ds) 0 36%,var(--db) 36%)}
--body[data-ds-dark-theme] .bt-theme-chip i{background:var(--da)}
--.bt-tabs{flex-wrap:wrap}
--.bt-soft:disabled{opacity:.4;cursor:default}
--.bt-group-role{margin-left:6px;font-size:11px;line-height:14px;padding:1px 5px;border-radius:4px;background:var(--bt-tag-bg);color:var(--bt-tag-ink);vertical-align:1px}
--.bt-members{display:flex;flex-direction:column;gap:1px}
--.bt-member{display:flex;align-items:center;gap:4px;min-height:40px;padding:0 4px 0 6px;border-radius:8px;animation:bt-rise .18s ease-out}
--.bt-member:hover{background:var(--bt-hover)}
--.bt-member-name{flex:1;min-width:0;display:flex;align-items:center;gap:10px;border:0;background:none;padding:6px 0;color:var(--bt-ink);font:inherit;font-size:14px;line-height:20px;cursor:pointer;text-align:left}
--.bt-member-name>span:last-child{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-chip-admin{background:var(--bt-tag-bg);color:var(--bt-tag-ink);border-color:transparent}
--.bt-mini{flex:none;border:0;background:none;border-radius:6px;padding:2px 6px;font:inherit;font-size:12px;line-height:18px;color:var(--bt-ink-2);cursor:pointer}
--.bt-mini:hover{background:var(--bt-active);color:var(--bt-ink)}
--.bt-member .bt-mini,.bt-member .bt-x{opacity:0;transition:opacity .15s ease}
--.bt-member:hover .bt-mini,.bt-member:hover .bt-x,.bt-member .bt-mini:focus-visible,.bt-member .bt-x:focus-visible{opacity:1}
--.bt-add{color:var(--bt-ink-2);margin-top:2px}
--.bt-add:hover,.bt-addlist .bt-option:hover{background:var(--bt-hover);color:var(--bt-ink)}
--.bt-addlist{display:flex;flex-direction:column;margin-top:4px;padding:4px;border:1px solid var(--bt-line);border-radius:10px;background:var(--bt-card);animation:bt-rise .16s ease-out}
--.bt-seg{position:relative;display:flex;gap:2px;padding:2px;border-radius:10px;background:var(--bt-hover)}
--.bt-motion-seg{width:216px}
--.bt-seg button{position:relative;z-index:1;flex:1;height:30px;border:0;border-radius:8px;background:none;font:inherit;font-size:13px;color:var(--bt-ink-2);cursor:pointer;transition:background-color .15s ease,color .15s ease,box-shadow .15s ease,${spring(SPRING_TAP, "scale")}}
--.bt-seg button[aria-pressed=true]{background:var(--bt-card);color:var(--bt-ink);box-shadow:0 1px 3px rgba(0,0,0,.08)}
--.bt-seg button:disabled{opacity:.4;cursor:default}
--.bt-seg button:active:not(:disabled){scale:.96}
--.bt-seg>.bt-thumb{top:2px;bottom:2px;border-radius:8px;background:var(--bt-card);box-shadow:0 1px 3px rgba(0,0,0,.08)}
--.bt-seg[data-glide] button[aria-pressed=true]{background:transparent;box-shadow:none}
--@keyframes bt-rise{from{opacity:0;transform:translateY(-3px)}to{opacity:1;transform:none}}
--@media (prefers-reduced-motion:reduce){.bt-member,.bt-addlist{animation:none}}
++
 +// src/shared/face-title.js
 +var MONTHS = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
 +function isGenericFaceTitle(name) {
@@ -4826,92 +5027,7 @@ diff --git a/client.js b/client.js
 +  bits.push(join.length === 6 ? join : when3);
 +  return bits.join(" · ");
 +}
- 
--/* Memory dialog: a summary of every entry, the entries behind the menu, "Ask or update" below. */
--.bt-mem-row{display:flex;align-items:center;gap:8px;width:100%;height:36px;padding:0 8px 0 10px;border:.5px solid var(--bt-line-2);border-radius:10px;background:var(--bt-card);color:var(--bt-ink);font:inherit;font-size:13px;cursor:pointer;box-sizing:border-box;transition:background-color .12s ease}
--.bt-mem-row:hover{background:var(--bt-hover)}
--.bt-mem-row>svg{flex:none;color:var(--bt-ink-2)}
--.bt-mem-row-copy{flex:1;text-align:left}
--.bt-mem-row-go{display:inline-flex;align-items:center;gap:2px;color:var(--bt-ink-3);font-size:12px}
--.bt-mem-layer{position:fixed;inset:var(--dsh-frame-chrome-top,0px) 0 0;z-index:61;display:flex;align-items:center;justify-content:center;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif}
--.bt-mem-scrim{animation:bt-fade .2s ease-out}
--.bt-mem{position:relative;width:min(680px,calc(100vw - 48px));height:min(760px,calc(100vh - 2*max(32px,var(--dsh-frame-overlay-top,32px))));background:var(--bt-main);border-radius:20px;border:.5px solid var(--bt-line-2);box-shadow:0 24px 80px rgba(0,0,0,.24);display:flex;flex-direction:column;overflow:hidden;color:var(--bt-ink);animation:bt-dialog-rise ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
--.bt-mem-head{position:relative;display:flex;align-items:center;gap:8px;height:60px;flex:none;padding:0 14px 0 24px;border-bottom:.5px solid var(--bt-line);box-sizing:border-box}
--.bt-mem-head .bt-icon-btn{width:32px;height:32px;flex:none}
--.bt-mem-head [aria-haspopup] svg{width:18px;height:18px;stroke-width:2.6}
--.bt-mem-head>.bt-icon-btn:first-child{margin-left:-10px}
--.bt-mem-head h2{margin:0;font-size:17px;line-height:24px;font-weight:600;white-space:nowrap}
--.bt-mem-status{font-size:13px;line-height:18px;color:var(--bt-ink-3);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0;font-variant-numeric:tabular-nums}
--.bt-mem-head-gap{flex:1}
--.bt-mem-menu{position:absolute;top:52px;right:50px;min-width:220px;--bt-origin:top right}
--.bt-mem-menu button:disabled{opacity:.4;cursor:default;background:none}
--.bt-mem-body{flex:1;overflow-y:auto;padding:22px 28px 24px;scrollbar-width:thin;display:flex;flex-direction:column;gap:12px}
--.bt-mem-summary{transition:opacity .3s ease}
--.bt-mem-summary[data-stale]{opacity:.55}
--.bt-mem-summary h3{margin:20px 0 6px;font-size:17px;line-height:26px;font-weight:600}
--.bt-mem-summary h3:first-child{margin-top:0}
--.bt-mem-summary p{margin:0;font-size:15px;line-height:26px}
--.bt-mem-summary>*{animation:bt-mem-line .45s cubic-bezier(.16,1,.3,1) both}
--.bt-mem-summary>:nth-child(2){animation-delay:.03s}
--.bt-mem-summary>:nth-child(3){animation-delay:.06s}
--.bt-mem-summary>:nth-child(4){animation-delay:.09s}
--.bt-mem-summary>:nth-child(5){animation-delay:.12s}
--.bt-mem-summary>:nth-child(6){animation-delay:.15s}
--.bt-mem-summary>:nth-child(n+7){animation-delay:.18s}
--@keyframes bt-mem-line{from{opacity:0;transform:translateY(4px)}}
--.bt-mem-skel{display:flex;flex-direction:column;gap:24px}
--.bt-mem-skel-block{display:flex;flex-direction:column;gap:10px}
--.bt-mem-skel-block span{display:block;height:12px;border-radius:6px;background:linear-gradient(90deg,var(--bt-hover) 25%,var(--bt-active) 50%,var(--bt-hover) 75%);background-size:200% 100%;animation:bt-mem-skel 1.4s ease-in-out infinite}
--.bt-mem-skel-block .bt-mem-skel-head{width:30%;height:16px;margin-bottom:2px}
--@keyframes bt-mem-skel{from{background-position:150% 0}to{background-position:-50% 0}}
--.bt-mem-skel-label{font-size:13px;line-height:18px;color:var(--bt-ink-3)}
--.bt-mem-empty{margin:auto;max-width:400px;display:flex;flex-direction:column;align-items:center;gap:8px;text-align:center;padding:24px 0;animation:bt-mem-line .45s cubic-bezier(.16,1,.3,1) both}
--.bt-mem-empty-mark{width:48px;height:48px;border-radius:50%;background:var(--bt-hover);display:flex;align-items:center;justify-content:center;color:var(--bt-ink-2);margin-bottom:4px}
--.bt-mem-empty-mark svg{width:22px;height:22px}
--.bt-mem-empty-title{font-size:15px;line-height:22px;font-weight:600}
--.bt-mem-empty-text{font-size:13px;line-height:20px;color:var(--bt-ink-2)}
--.bt-mem-failed{display:flex;align-items:center;gap:12px;padding:10px 12px;border-radius:12px;background:var(--bt-hover);font-size:13px;line-height:18px;color:var(--bt-ink-2)}
--.bt-mem-failed>span{flex:1;min-width:0;overflow-wrap:anywhere}
--.bt-mem-entries{display:flex;flex-direction:column;gap:28px;animation:bt-page-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .22s ease-out}
--.bt-mem-section-head{display:flex;align-items:baseline;gap:8px;margin-bottom:4px}
--.bt-mem-section-head h3{margin:0;font-size:15px;line-height:22px;font-weight:600}
--.bt-mem-section-head span{font-size:12px;line-height:16px;color:var(--bt-ink-3)}
--.bt-mem-section-head .bt-mem-size{margin-left:auto;font-variant-numeric:tabular-nums;white-space:nowrap}
--.bt-mem-topic{font-size:12px;line-height:16px;color:var(--bt-ink-2);margin:14px 0 2px 4px;font-weight:500}
--.bt-mem-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column}
--.bt-mem-entry{display:flex;align-items:center;gap:10px;padding:9px 4px;border-bottom:.5px solid var(--bt-line);transition:opacity .2s ease}
--.bt-mem-entry[data-busy]{opacity:.4}
--.bt-mem-entry-copy{flex:1;min-width:0;display:flex;flex-direction:column;gap:2px}
--.bt-mem-entry-text{font-size:14px;line-height:20px;overflow-wrap:anywhere}
--.bt-mem-entry-meta{font-size:12px;line-height:16px;color:var(--bt-ink-3);font-variant-numeric:tabular-nums}
--.bt-mem-remove{flex:none;height:28px;min-width:28px;border-radius:999px;border:0;background:none;color:var(--bt-ink-3);display:inline-flex;align-items:center;justify-content:center;cursor:pointer;padding:0 6px;font:inherit;font-size:12px;opacity:0;transition:opacity .12s ease,background-color .12s ease,color .12s ease}
--.bt-mem-entry:hover .bt-mem-remove,.bt-mem-remove:focus-visible,.bt-mem-remove[data-confirm]{opacity:1}
--.bt-mem-remove:hover{background:var(--bt-hover);color:var(--bt-ink)}
--.bt-mem-remove[data-confirm]{background:rgba(224,33,53,.1);color:#e02135;padding:0 10px}
--@media (hover:none){.bt-mem-remove{opacity:1}}
--.bt-mem-none{font-size:13px;line-height:18px;color:var(--bt-ink-3);padding:8px 4px}
--.bt-mem-foot{flex:none;padding:8px 20px 20px;display:flex;flex-direction:column;gap:10px}
--.bt-mem-reply{border-radius:16px;background:var(--bt-hover);padding:8px 8px 12px 16px;display:flex;flex-direction:column;gap:6px;max-height:36vh;overflow-y:auto;scrollbar-width:thin;transform-origin:50% 100%;animation:bt-pop-lift ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing},bt-veil-in .2s ease-out}
--.bt-mem-reply-head{display:flex;align-items:center;gap:8px;min-height:24px}
--.bt-mem-reply-asked{flex:1;min-width:0;font-size:12px;line-height:16px;color:var(--bt-ink-3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-mem-reply .bt-icon-btn{width:24px;height:24px;flex:none}
--.bt-mem-reply-text{font-size:14px;line-height:21px;padding-right:8px;overflow-wrap:anywhere}
--.bt-mem-changes{list-style:none;margin:2px 0 0;padding:0 8px 0 0;display:flex;flex-direction:column;gap:4px}
--.bt-mem-changes li{display:flex;align-items:flex-start;gap:6px;font-size:13px;line-height:18px;color:var(--bt-ink-2);overflow-wrap:anywhere}
--.bt-mem-changes li svg{flex:none;margin-top:1px;color:#e02135;animation:bt-check-pop ${SPRING_POP.duration}ms ${SPRING_POP.easing} .12s backwards}
--.bt-mem-changes li[data-ok] svg{color:var(--bt-green)}
--.bt-mem-ask{display:flex;align-items:center;gap:8px;height:52px;padding:0 8px 0 22px;border-radius:999px;border:.5px solid var(--bt-line-2);background:var(--bt-card);box-shadow:0 4px 16px rgba(0,0,0,.06);box-sizing:border-box;transition:border-color .15s ease,box-shadow .15s ease}
--.bt-mem-ask:focus-within{border-color:var(--bt-ink-3);box-shadow:0 4px 20px rgba(0,0,0,.1)}
--.bt-mem-input{flex:1;min-width:0;border:0;background:none;outline:none;color:var(--bt-ink);font:inherit;font-size:15px;line-height:22px;padding:0}
--.bt-mem-input::placeholder{color:var(--bt-ink-3)}
--.bt-mem-send{flex:none;width:36px;height:36px;border-radius:50%;border:0;background:var(--bt-ink);color:var(--bt-main);display:flex;align-items:center;justify-content:center;cursor:pointer;padding:0;transition:opacity .15s ease,${spring(SPRING_TAP, "scale")}}
--.bt-mem-send:disabled{opacity:.22;cursor:default}
--.bt-mem-send:not(:disabled):active{scale:.92}
--.bt-mem-send>*{animation:bt-check-pop ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
--.bt-mem-spin{width:14px;height:14px;border-radius:50%;border:2px solid currentColor;border-right-color:transparent;box-sizing:border-box;animation:bt-mem-spin .7s linear infinite}
--@keyframes bt-mem-spin{to{transform:rotate(360deg)}}
--@media (max-width:640px){.bt-mem{width:100vw;height:100%;border-radius:0;border:0}.bt-mem-body{padding:18px 18px 20px}.bt-mem-foot{padding:8px 12px 12px}}
--@media (prefers-reduced-motion:reduce){.bt-mem,.bt-mem-scrim,.bt-mem-summary>*,.bt-mem-empty,.bt-mem-reply,.bt-mem-skel-block span,.bt-mem-entries,.bt-mem-send>*,.bt-mem-changes li svg{animation:none}}
++
 +// src/client/brand.js
 +var FLYBOT_WING = "M150 238 C 96 200, 40 196, 22 214 C 8 230, 40 262, 150 300 Z";
 +var FLYBOT_WING_LOW = "M150 318 C 104 300, 62 306, 54 322 C 48 338, 84 352, 150 352 Z";
@@ -4982,108 +5098,7 @@ diff --git a/client.js b/client.js
 +    link.remove();
 +  };
 +}
- 
--.bt-thumb{position:absolute;left:0;top:0;z-index:0;pointer-events:none;transition:opacity .14s ease}
--.bt-thumb[data-hidden]{opacity:0}
--[data-morph]{overflow:hidden!important}
--.bt-veil{animation:bt-veil-in .22s ease-out}
--.bt-with-icon{display:inline-flex;align-items:center;gap:4px}
--.bt-with-icon svg{width:14px;height:14px}
--.bt-tag-admin{display:inline-flex;align-items:center;gap:4px}
--.bt-create-inline{padding:18px 16px;border:1px solid var(--bt-line);border-radius:12px;background:var(--bt-card)}
--.bt-create-inline .bt-create-card{max-width:none}
--.bt-panel-view>[data-move=in]{animation:bt-page-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing} backwards,bt-veil-in .2s ease-out backwards}
--.bt-panel-view>[data-move=out]{animation:bt-page-out ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing} backwards,bt-veil-in .2s ease-out backwards}
--.bt-panel-view>:is([data-move=in],[data-move=out]):nth-child(2){animation-delay:25ms}
--.bt-panel-view>:is([data-move=in],[data-move=out]):nth-child(n+3){animation-delay:50ms}
--.bt-panel-view>.bt-drawer-body[data-move=tab]{animation:bt-veil-in .2s ease-out}
--.bt-drawer-name-input{animation:bt-veil-in .16s ease-out}
--.bt-pop-in{display:inline-flex;animation:bt-check-pop ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
--:is(.bt-soft,.bt-send,.bt-icon-btn,.bt-settings-close,.bt-mini,.bt-tab,.bt-nc-send,.bt-avedit-tab,.bt-shape,.bt-pick,.bt-swatch,.bt-palette-clear){transition:background-color .12s ease,color .12s ease,border-color .12s ease,opacity .12s ease,${spring(SPRING_TAP, "scale")}}
--:is(.bt-icon-btn,.bt-settings-close,.bt-nc-send,.bt-shape,.bt-swatch,.bt-color,.bt-x,.bt-q-x,.bt-palette-clear):active:not(:disabled){scale:.9}
--:is(.bt-soft,.bt-send,.bt-mini,.bt-tab,.bt-avedit-tab,.bt-pick,.bt-q-submit,.bt-q-btn):active:not(:disabled){scale:.96}
--@media (prefers-reduced-motion:reduce){.bt-thumb{transition:none}.bt-panel-view>[data-move],.bt-drawer-name-input,.bt-veil,.bt-pop-in,.bt-token,.bt-drop,.bt-newchat,.bt-option-hint,.bt-connector-form,.bt-settings-head>*{animation:none}}
--`;
--var CONVERSATION_CSS = `
--.bt-think{font-size:13px;line-height:18px;color:var(--bt-ink-2);margin:2px 0 4px;max-width:min(560px,78%)}
--.bt-think summary{cursor:pointer;list-style:none;display:inline-flex;align-items:center;gap:6px}
--.bt-think summary::-webkit-details-marker{display:none}
--.bt-think-text{white-space:pre-wrap;margin-top:6px;padding-left:10px;border-left:2px solid var(--bt-line-2)}
--.bt-event{display:flex;justify-content:center;align-items:center;gap:2px;min-height:24px;margin:2px 0;font-size:12px;line-height:16px;color:var(--bt-ink-2);flex-wrap:wrap}
--.bt-event>span{padding:0 2px}
--.bt-event button{border:0;background:none;color:inherit;font:inherit;display:inline-flex;align-items:center;gap:4px;cursor:pointer;height:24px;padding:4px 6px 4px 4px;border-radius:999px;box-sizing:border-box;transition:background-color .12s ease}
--.bt-event button:hover{background:var(--bt-hover)}
--.bt-event button:active{background:var(--bt-active)}
--.bt-event button.bt-event-whole{min-width:0;max-width:100%;padding:4px 6px 4px 8px}
--.bt-event-whole>*{flex:none}
--.bt-event-whole>span:first-child{margin-right:2px}
--/* One button cannot wrap like separate parts, so a long name is cut to fit the chat. */
--.bt-event-whole>.bt-event-name{flex:0 1 auto;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-time-sep{display:flex;justify-content:center;align-items:center;height:28px;margin:14px 0 8px;font-size:12px;line-height:16px;color:var(--bt-ink-2);white-space:nowrap}
--[class*="_scroll"]>[class*="_column"]::before{content:var(--bt-first-sep,none);display:block;flex:none;height:28px;margin:17px 0 12px;font-size:12px;line-height:28px;text-align:center;color:var(--bt-ink-2);white-space:nowrap}
--.bt-activity{display:flex;align-items:center;gap:10px;margin:8px 0 4px 2px;font-size:14px;color:var(--bt-ink-2)}
--.bt-group-replies{display:contents}
--/* A Bot chat is flat in every work-details mode, without changing the user's mode
--   (it is a DSH-wide setting): step groups lose their header and stay open, and what a
--   mode folds away in a finished turn stays shown. TurnProcessCell also opens that
--   fold; these rules cover the first frame before it does. */
--[data-step-process]>div:first-child{display:none!important}
--[data-step-process]>[data-step-process-body]{display:block!important;content-visibility:visible!important;max-height:none!important;overflow:visible!important;mask-image:none!important;scrollbar-gutter:auto!important}
--:is([data-step-process],[data-turn-process-hidden])[hidden]{content-visibility:visible!important}
--[class*="_flowItem"]:has(> [data-slot="conversation.chat.node"]:empty){display:none!important}
--[class*="_header"]:has(.bt-head){border-bottom-color:transparent!important;box-shadow:none!important}
--/* The transcript runs under a floating header pill. */
--header[class*="_header"]:has(.bt-head){position:absolute!important;top:0;left:0;right:0;z-index:8;display:flex!important;padding:10px 0 0!important;background:transparent!important;pointer-events:none;justify-content:center}
--header[class*="_header"]:has(.bt-head)::before{content:"";position:absolute;inset:0 0 auto;height:60px;background:linear-gradient(to bottom,var(--bt-main),color-mix(in srgb,var(--bt-main) 0%,transparent));pointer-events:none;z-index:-1}
--header[class*="_header"]:has(.bt-head)>[class*="_headerLeading"]{position:absolute;left:12px;top:10px;pointer-events:auto}
--header[class*="_header"] .bt-head{flex:1 1 auto;width:100%}
--[class*="_body"]:has(> [class*="_scrollBody"]){--dsh-chat-content-width:min(960px,100%)}
--/* DSH's turn tail keeps what plugins put in it (delivered files, the Bot's separators),
--   without its copy and branch row; a tail with nothing in it takes no room. */
--[data-turn-tail]>:not([data-slot="conversation.chat.turnTail"]){display:none!important}
--[class*="_flowItem"][data-chat-flow-kind="turn-tail"]:not(:has([data-slot="conversation.chat.turnTail"]:not(:empty))){display:none!important}
--/* Every team Session belongs to a Bot or a group, so a blank one is an empty chat, not
--   the shell's new-session hero: no headline, no workspace or mode picker, and the
--   composer stays docked at the bottom. */
--[data-content-phase=hero] [class*="_scrollBody"]{justify-content:flex-end!important}
--[data-content-phase=hero] [class*="_composerHero"]{align-self:stretch!important;width:auto!important;padding-bottom:0!important}
--[data-content-phase=hero] [class*="_composerHero"]>[class$="_root"],[data-content-phase=hero] [class*="_heroWorkspaceRow"]{display:none!important}
--[data-content-phase=hero] [class*="_composerHero"] [class*="_input"]{min-height:0!important}
--/* The right sides give back the scrollbar gutter so both edges sit 16px from the column. */
--[class*="_scroll"]:has(> [class*="_column"]){padding:60px 11px 16px 16px!important}
--/* The shell's running status only hosts the activity row (.bt-typing). */
--[data-chat-running]{display:block!important;width:100%;min-height:0!important;margin:0!important;padding:0!important}
--[data-chat-running]>span:not([role=status]){display:none!important}
--[data-chat-running]:has(> .bt-typing){margin-top:var(--dsh-chat-flow-gap,12px)!important}
--.bt-typing{display:flex;align-items:center;gap:12px;height:36px;min-width:0;padding-inline-start:8px;transform-origin:0 50%;animation:bt-typing-in ${SPRING_TAP.duration}ms ${SPRING_TAP.easing} backwards}
--.bt-typing[data-exiting]{animation:bt-typing-out .14s cubic-bezier(.22,1,.36,1) forwards}
--.bt-typing>.bt-mark,.bt-typing>.bt-cluster{flex-shrink:0}
--.bt-typing>.bt-mark{cursor:pointer;transition:filter .16s ease-out}
--.bt-typing>.bt-mark:hover{filter:drop-shadow(0 2px 4px rgba(0,0,0,.18))}
--.bt-typing>.bt-mark .bt-eyes{transition:scale .28s cubic-bezier(.4,.06,.18,1)}
--.bt-typing>.bt-mark:hover .bt-eyes{scale:1.18}
--.bt-typing-text{display:flex;align-items:center;flex:1 1 auto;min-width:0;animation:bt-typing-label .22s ease-out .2s backwards}
--.bt-typing-label{display:inline-flex;align-items:center;gap:6px;min-width:0;animation:bt-typing-label .22s ease-out backwards}
--.bt-typing-label>.bt-shimmer{font-size:14px;line-height:22px;font-weight:400;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
--.bt-typing-time{flex-shrink:0;font-size:12px;line-height:22px;color:var(--bt-ink-3);white-space:nowrap}
--@keyframes bt-typing-in{from{opacity:0;transform:scale(.9)}}
--@keyframes bt-typing-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(.92);filter:blur(3px)}}
--@keyframes bt-typing-label{from{opacity:0;filter:blur(5px);transform:translateY(3px)}}
--/* Shimmer: a stepped sweep clipped to the text. */
--.bt-shimmer{color:transparent;background:linear-gradient(90deg,var(--bt-shimmer-base) 0%,var(--bt-shimmer-base) 25%,var(--bt-ink) 60%,var(--bt-shimmer-base) 75%,var(--bt-shimmer-base) 100%);background-size:200% 100%;-webkit-background-clip:text;background-clip:text;animation:bt-shimmer 2.2s steps(60) infinite;--bt-shimmer-base:color-mix(in srgb,var(--bt-ink) 40%,transparent)}
--@keyframes bt-shimmer{from{background-position:200% 0}to{background-position:-200% 0}}
--/* New rows slide up; a reply that replaces the activity row grows out of its corner. */
--[data-bt-enter="new"]{animation:bt-row-in ${SPRING_SHAPE.duration}ms ${SPRING_SHAPE.easing}}
--[data-bt-enter="after-collapse"]{transform-origin:0 100%;animation:bt-row-after .24s cubic-bezier(.23,1,.32,1) .38s backwards}
--@keyframes bt-row-in{from{transform:translateY(12px)}to{transform:none}}
--@keyframes bt-row-after{0%{opacity:0;transform:translateY(12px) scale(.94)}55%{opacity:1}100%{opacity:1;transform:none}}
--@media (prefers-reduced-motion:reduce){
--.bt-typing,.bt-typing[data-exiting]{animation-name:bt-fade-in;animation-duration:.12s;transform:none}
--.bt-typing[data-exiting]{animation-name:bt-fade-out}
--.bt-typing-text,.bt-typing-label{animation-name:bt-fade-in;animation-delay:0s}
--.bt-shimmer{animation:none;background:none;color:var(--bt-ink-2)}
--[data-bt-enter="new"]{animation:none}
--[data-bt-enter="after-collapse"]{animation:bt-fade-in .12s ease-out}
++
 +// src/client/icons.js
 +var import_react5 = require("react");
 +function PlusIcon() {
@@ -5353,121 +5368,7 @@ diff --git a/client.js b/client.js
 +    ) : null,
 +    foot
 +  );
- }
--@keyframes bt-fade-in{from{opacity:0}to{opacity:1}}
--@keyframes bt-fade-out{from{opacity:1}to{opacity:0}}
--[data-composer-card]{display:flex!important;flex-direction:row;flex-wrap:wrap;align-items:center;gap:0!important;min-height:44px;border-radius:22px!important;padding:7.5px!important;box-sizing:border-box;background:var(--bt-main)!important;border:.5px solid var(--bt-line-2)!important;box-shadow:0 2px 8px -1px rgba(0,0,0,.05),0 1px 2px rgba(0,0,0,.03),0 0 0 1px rgba(228,228,228,.04)!important;transition:border-color .15s ease,background-color .15s ease,${spring(SPRING_SHAPE, "border-radius")}!important}
--[data-composer-card]:hover,[data-composer-card]:focus-within{border-color:color-mix(in srgb,var(--bt-ink) 30%,transparent)!important}
--[data-composer-card]:has(> [data-slot="conversation.input.attachments"] *),[data-composer-card]:has([data-composer-input] br + *),[data-composer-card]:has([data-composer-input] > :nth-child(2)){border-radius:18px!important}
--[class*="_root"]:has(> [data-composer-card]){padding:0 11px 13px 16px!important}
--[class*="_root"]:has(> [data-composer-card])>[data-composer-card]{max-width:min(992px,100%)!important}
--[data-composer-card]>[class*="_row"]{display:contents!important}
--[data-composer-card] [class*="_tools"]{order:1;flex:none;align-self:flex-end;margin:0}
--[data-composer-card]>[data-input-scroll]{order:2;flex:1 1 0;min-width:0;padding:0 8px!important;margin:0!important}
--[data-composer-card] [class*="_trailing"]{order:3;flex:none;align-self:flex-end;margin:0}
--[data-composer-card]>[data-slot="conversation.input.attachments"]{order:0;flex-basis:100%}
--[data-composer-card] [data-composer-input]{min-height:24px;padding:2px 0!important}
--[data-composer-card] [data-composer-placeholder]{left:0!important;top:2px!important}
--[data-composer-placeholder]{font-size:0!important;line-height:0!important}
--[data-composer-placeholder]::after{content:var(--bt-placeholder,"Message");display:block;font-size:14px;line-height:24px;color:color-mix(in srgb,var(--bt-ink) 36%,transparent)}
--/* The team's "+" (ComposerPlus) takes the seat of the shell's command-menu button. */
--[data-composer-card] button[class*="_add"]{display:none!important}
--.bt-plus{flex:none;width:28px;height:28px;padding:0;border:0;border-radius:50%;display:inline-flex;align-items:center;justify-content:center;background:color-mix(in srgb,var(--bt-ink) 5%,transparent);box-shadow:inset 0 0 0 .5px var(--bt-line);color:var(--bt-ink-2);cursor:pointer;transition:background-color .15s ease,color .15s ease,${spring(SPRING_TAP, "scale")}}
--.bt-plus:hover,.bt-plus[aria-expanded=true]{background:color-mix(in srgb,var(--bt-ink) 10%,transparent);color:var(--bt-ink)}
--.bt-plus:active{scale:.9}
--.bt-plus svg{width:14px;height:14px;transition:${spring(SPRING_POP, "rotate")}}
--.bt-plus[aria-expanded=true] svg{rotate:45deg}
--.bt-plus-menu{min-width:180px}
--[data-composer-card] [class*="_tools"]{gap:0!important}
--[data-composer-card] [class*="_modes"]:empty{display:none!important}
--[data-composer-card] [class*="_activity"]:not(:has([data-slot] > *)){display:none!important}
--[data-composer-card] [class*="_trailing"]{gap:8px}
--[data-composer-card] [class*="_standardControls"]{display:flex;align-items:center;gap:8px}
--[data-composer-card] button[class*="_primary"]{width:28px!important;height:28px!important;background:var(--bt-accent)!important;color:var(--bt-accent-ink,#fff)!important;border-radius:50%!important;transition:opacity .15s ease,${spring(SPRING_TAP, "scale")};animation:bt-icon-swap ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
--[data-composer-card] button[class*="_primary"]:hover:not(:disabled){opacity:.9}
--[data-composer-card] button[class*="_primary"]:active:not(:disabled){scale:.9}
--@keyframes bt-icon-swap{from{opacity:0;transform:scale(.5) rotate(-30deg)}}
--[data-composer-card] button[class*="_primary"] svg{width:14px;height:14px}
--[data-composer-card] button[class*="_primary"]:disabled{display:none!important}
--[data-composer-dock]{display:none!important}
--.bt-mic,.bt-voice{flex:none;width:28px;height:28px;border-radius:50%;border:0;padding:0;display:inline-grid;place-items:center;cursor:pointer;transition:background-color .15s ease,color .15s ease,${spring(SPRING_TAP, "scale")}}
--.bt-mic{background:color-mix(in srgb,var(--bt-ink) 5%,transparent);box-shadow:inset 0 0 0 .5px var(--bt-line);color:var(--bt-ink-2)}
--.bt-mic:hover{background:color-mix(in srgb,var(--bt-ink) 10%,transparent);color:var(--bt-ink)}
--.bt-mic[aria-pressed=true]{background:#ff3e51;color:#fff;animation:bt-mic-pulse 1.4s ease-in-out infinite}
--@keyframes bt-mic-pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,62,81,.35)}50%{box-shadow:0 0 0 5px rgba(255,62,81,0)}}
--.bt-voice{display:none;background:var(--bt-accent);color:var(--bt-accent-ink,#fff);animation:bt-icon-swap ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
--.bt-voice:hover{opacity:.9}
--.bt-mic:active,.bt-voice:active{scale:.9}
--[data-composer-card]:has(button[class*="_primary"]:disabled) .bt-voice{display:inline-grid}
--body[data-bt-room] .bt-voice{display:none!important}
--body[data-bt-room] [data-composer-card]:has(button[class*="_primary"]:disabled) .bt-mic:not([aria-pressed=true]){background:var(--bt-accent);color:var(--bt-accent-ink,#fff)}
--.bt-mic-note{position:absolute;right:12px;bottom:calc(100% + 8px);padding:5px 10px;border-radius:8px;background:var(--bt-user);color:var(--bt-user-ink);font-size:12px;line-height:16px;white-space:nowrap;pointer-events:none;animation:bt-rise .16s ease-out}
--[data-chain-overlay-fallback="conversation.composer"]:has(~ .bt-q){display:block!important;order:2}
--.bt-q{order:1}
--div:has(> nav [class*="_marks"]){display:none!important}
--/* Every user-side bubble (sent, steering mid-turn, not yet admitted, question replies)
--   takes its surface and its text from the one --bt-user pair: a skin that repaints
--   the host's bubble surface alone would otherwise leave the text unreadable. */
--[class*="_userRow"] [class*="_bubble"],[data-chat-flow-kind=question-reply] [class*="_bubble"],[data-chat-flow-kind=command-input] [class*="_bubble"]{background:var(--bt-user)!important;color:var(--bt-user-ink)!important;border-radius:18px!important;padding:7px 12px!important;font-size:var(--dsh-content-font-size,14px)!important;line-height:calc(var(--dsh-content-font-size,14px) + 8px)!important}
--[class*="_userRow"] [class*="_bubble"] [class*="_markdown"],[class*="_userRow"] [class*="_bubble"] a{color:inherit}
--/* Sent messages get the hover toolbar below; steering and unsent bubbles keep none. */
--[class*="_userRow"] [class*="_actions"]{display:none!important}
--[data-chat-flow-kind=user] [class*="_userRow"]{flex-direction:row-reverse;align-items:center;justify-content:flex-start}
--[data-chat-flow-kind=user] [class*="_actions"]{display:flex!important;height:24px!important;gap:2px!important;opacity:0!important;visibility:hidden;transition:opacity .12s ease,visibility .12s!important;flex:none}
--[data-chat-flow-kind=user] [class*="_userRow"]:hover [class*="_actions"],[data-chat-flow-kind=user] [class*="_userRow"]:focus-within [class*="_actions"]{opacity:1!important;visibility:visible}
--[data-chat-flow-kind=user] [class*="_actions"] [class*="_timeStart"]{display:none}
--[data-chat-flow-kind=user] [class*="_actions"] button{width:24px;height:24px;border-radius:6px;color:var(--bt-ink-2)}
--[data-chat-flow-kind=user] [class*="_actions"] button:hover{background:var(--bt-hover);color:var(--bt-ink)}
--[data-chat-flow-kind=user] [class*="_actions"] svg{width:15px;height:15px}
--.bt-q-inline{display:flex;margin:4px 0 6px}
--[data-chat-flow-kind=assistant-step]+[data-step-process]:has(.bt-q-inline){margin-top:0!important}
--[data-chat-flow-kind=question-reply]:has(.bt-q-inline),[data-chat-group-key]:has([data-chat-flow-kind=question-reply] .bt-q-inline),[data-chat-group-key]:has(.bt-q-gone){margin-top:0!important}
--.bt-q-inline .bt-q{margin:0;max-width:min(550px,86%);order:0}
--.bt-q-dock{width:100%;display:flex;justify-content:center}
--.bt-q-dock .bt-q{margin:0 auto 8px}
--[class*="_toBottomSlot"]{justify-content:center!important;padding-right:0!important}
--[data-conversation-scroll] [class*="_toBottomSlot"]{bottom:calc(var(--dsh-composer-height,152px) + 8px)!important}
--[class*="_toBottomSlot"]>button{width:36px!important;height:36px!important;margin-top:-36px!important;background:var(--bt-main)!important;color:var(--bt-ink)!important;box-shadow:0 0 0 .5px var(--bt-line-2),0 2px 8px -2px rgba(0,0,0,.12)!important;animation:bt-tobottom-in ${SPRING_TAP.duration}ms ${SPRING_TAP.easing},bt-veil-in .16s ease-out;transition:background-color .12s ease,${spring(SPRING_TAP, "scale")}}
--[class*="_toBottomSlot"]>button:active{scale:.9}
--[class*="_toBottomSlot"]>button:hover{background:color-mix(in srgb,var(--bt-ink) 4%,var(--bt-main))!important}
--[class*="_toBottomSlot"]>button svg{display:none}
--[class*="_toBottomSlot"]>button::before{content:"";width:20px;height:20px;background:currentColor;-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M10 4v12M5 11l5 5 5-5'/%3E%3C/svg%3E") center/contain no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M10 4v12M5 11l5 5 5-5'/%3E%3C/svg%3E") center/contain no-repeat}
--@keyframes bt-tobottom-in{from{translate:0 8px;scale:.8}}
--[data-bt-news] [class*="_toBottomSlot"]>button{visibility:hidden!important;pointer-events:none!important}
--.bt-news{position:fixed;z-index:30;transform:translateX(-50%);display:inline-flex;align-items:center;overflow:hidden;border-radius:999px;background:#0c64c1;color:#fcfcfc;box-shadow:inset 0 0 0 1px rgba(20,20,20,.05),0 1px 3px 0 rgba(0,0,0,.12);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;animation:bt-news-in ${SPRING_TAP.duration}ms ${SPRING_TAP.easing},bt-veil-in .16s ease-out}
--@keyframes bt-news-in{from{translate:0 8px;scale:.9}}
--.bt-news[data-direction=up]{animation-name:bt-news-in-up,bt-veil-in}
--@keyframes bt-news-in-up{from{translate:0 -8px;scale:.9}}
--.bt-news-jump{display:inline-flex;align-items:center;gap:2px;margin:0;padding:4px 26px 4px 4px;border:0;border-radius:0;background:transparent;color:inherit;font:inherit;font-size:13px;line-height:18px;white-space:nowrap;cursor:pointer;outline:none}
--.bt-news-ico{flex:none;display:inline-flex;align-items:center;justify-content:center;width:20px;height:20px}
--.bt-news-ico svg{width:16px;height:16px}
--.bt-news-x{position:absolute;right:4px;top:50%;z-index:1;transform:translateY(-50%);width:20px;height:20px;padding:0;border:0;border-radius:999px;background:transparent;color:inherit;opacity:.75;display:inline-flex;align-items:center;justify-content:center;cursor:pointer}
--.bt-news-x svg{width:12px;height:12px}
--.bt-news-x:hover{opacity:1;background:rgba(20,20,20,.5)}
--@media (prefers-reduced-motion:reduce){.bt-news,[class*="_toBottomSlot"]>button{animation:none}}
--.bt-new-sep{display:flex;align-items:center;gap:8px;margin:14px 0 8px;padding:2px 0;font-size:11px;line-height:14px;font-weight:500;letter-spacing:.02em;text-transform:uppercase;color:#0c64c1;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif}
--.bt-new-sep::before,.bt-new-sep::after{content:"";flex:1;height:1px;background:color-mix(in srgb,#0c64c1 20%,transparent)}
--.bt-open-new{display:flex;flex-direction:column}
--.bt-open-new .bt-new-sep{margin:18px 0 0}
--.bt-open-new .bt-time-sep{height:16px;margin:32px 0 2px}
--.bt-earlier{display:flex;flex-direction:column;gap:6px}
--.bt-earlier-top{display:flex;justify-content:center;align-items:center;height:34px;flex:none}
--.bt-earlier-top .bt-soft{height:28px;font-size:12px;padding:0 12px}
--.bt-urow{display:flex;justify-content:flex-end}
--.bt-ububble{max-width:min(560px,78%);background:var(--bt-user);color:var(--bt-user-ink);border-radius:18px;padding:7px 12px;font-size:14px;line-height:20px;box-sizing:border-box;overflow-wrap:anywhere}
--.bt-ububble [class*="_markdown"],.bt-ububble a{color:inherit!important}
--.bt-ububble p{margin:0;line-height:22px}
--.bt-uimages{display:block;font-size:12px;opacity:.7}
--.bt-earlier .bt-event{margin:4px 0}
--.bt-part-line{display:flex;align-items:center;gap:10px;margin:10px 0 6px;font-size:11px;line-height:14px;color:var(--bt-ink-3)}
--.bt-part-line::before,.bt-part-line::after{content:"";flex:1;height:1px;background:var(--bt-line)}
--`;
--function installStyles(text, tag) {
--  const style = document.createElement("style");
--  style.dataset.dshBot = tag;
--  style.textContent = text;
--  document.head.appendChild(style);
--  return style;
++}
 +function SettledQuestion({ question, answer }) {
 +  const options = optionsOf(question);
 +  const prompt = question?.question ?? "";
@@ -5499,15 +5400,7 @@ diff --git a/client.js b/client.js
 +      );
 +    }))
 +  );
- }
--var FRAGMENT_SELECTOR = /\[class\*="(_[\w-]+)"\]/g;
--var CLASS_TOKEN = /\.((?:\\.|[\w-])+)/g;
--function sheetClassNames(sheet) {
--  const names = [];
--  const visit = (rules) => {
--    for (const rule of rules) {
--      if (rule.selectorText) for (const match of rule.selectorText.matchAll(CLASS_TOKEN)) names.push(match[1]);
--      if (rule.cssRules) visit(rule.cssRules);
++}
 +function QuestionCard({ matched }) {
 +  const pending = matched;
 +  const questions = pending.questions ?? [];
@@ -5521,12 +5414,9 @@ diff --git a/client.js b/client.js
 +      setAnswers(next);
 +      setIndex(index + 1);
 +      return;
-     }
++    }
 +    pending.answer({ answers: next });
-   };
--  try {
--    visit(sheet.cssRules);
--  } catch {
++  };
 +  return (0, import_react6.createElement)(QuestionView, { key: index, question, onAnswer, onDismiss: () => pending.dismiss(), ownAnswer: true, raised: true });
 +}
 +function PendingQuestion({ sessionId, question, actions, inline }) {
@@ -5558,22 +5448,14 @@ diff --git a/client.js b/client.js
 +  const questions = Array.isArray(data.questions) ? data.questions : [];
 +  if (questions.length === 0) {
 +    return data.text ? (0, import_react6.createElement)("div", { className: "bt-urow" }, (0, import_react6.createElement)("div", { className: "bt-ububble" }, data.text)) : null;
-   }
--  return names;
++  }
 +  const answers = Array.isArray(data.answers) ? data.answers : [];
 +  return (0, import_react6.createElement)("div", { className: "bt-q-inline" }, questions.map((question) => (0, import_react6.createElement)(SettledQuestion, {
 +    key: question.id,
 +    question,
 +    answer: answers.find((answer) => answer.id === question.id) ?? { selected: [] }
 +  })));
- }
--function compileFragmentSelectors(text, names) {
--  const compiled = /* @__PURE__ */ new Map();
--  return text.replace(FRAGMENT_SELECTOR, (whole, fragment) => {
--    if (!compiled.has(fragment)) {
--      const exact = [];
--      for (const name of names) if (name.includes(fragment)) exact.push(`.${name}`);
--      compiled.set(fragment, exact.length ? `:is(${exact.join(",")})` : whole);
++}
 +
 +// src/client/secret-card.js
 +var import_react7 = require("react");
@@ -5627,32 +5509,9 @@ diff --git a/client.js b/client.js
 +      if (event.key !== "Enter" || event.nativeEvent.isComposing) return;
 +      event.preventDefault();
 +      onEnter?.();
-     }
--    return compiled.get(fragment);
-   });
- }
--function installCompiledStyles(text, tag) {
--  const style = installStyles("", tag);
--  const cache = /* @__PURE__ */ new WeakMap();
--  const render = () => {
--    const names = /* @__PURE__ */ new Set();
--    for (const sheet of document.styleSheets) {
--      if (sheet.ownerNode?.dataset?.dshBot) continue;
--      let list = cache.get(sheet);
--      if (!list) {
--        list = sheetClassNames(sheet);
--        cache.set(sheet, list);
--      }
--      for (const name of list) names.add(name);
--    }
--    const next = compileFragmentSelectors(text, names);
--    if (style.textContent !== next) style.textContent = next;
--  };
--  render();
--  let timer;
--  const schedule = () => {
--    clearTimeout(timer);
--    timer = setTimeout(render, 120);
++    }
++  });
++}
 +function ScopeSwitch({ value, onChange, bot }) {
 +  const options = [["all", t("All my Bots")], ["bot", t("Only {name}", { name: bot.name })]];
 +  return (0, import_react7.createElement)(
@@ -5695,25 +5554,15 @@ diff --git a/client.js b/client.js
 +    setBusy(true);
 +    setError("");
 +    return Promise.resolve(promise).then(() => setValue(""), (failure) => setError(failure?.message ?? String(failure))).finally(() => setBusy(false));
-   };
--  const onLoad = (event) => {
--    if (event.target instanceof HTMLLinkElement) schedule();
++  };
 +  const cancel = () => run(actions.secretCancel(request.id));
 +  const long = value.trim().length >= MIN_VALUE;
 +  const save = () => {
 +    if (long && !busy) void run(actions.secretSet({ requestId: request.id, value, scope }));
-   };
--  const observer = new MutationObserver(schedule);
--  observer.observe(document.head, { childList: true });
--  document.addEventListener("load", onLoad, true);
--  return () => {
--    observer.disconnect();
--    document.removeEventListener("load", onLoad, true);
--    clearTimeout(timer);
--    style.remove();
++  };
 +  const allow = () => {
 +    if (!busy) void run(actions.secretAllow(request.id));
-   };
++  };
 +  const filling = request.kind === "fill" || replacing;
 +  const warn = insecure() ? (0, import_react7.createElement)("div", { className: "bt-secret-warn", role: "note" }, (0, import_react7.createElement)(WarnIcon), t("This page is not on HTTPS: the key crosses the network unencrypted.")) : null;
 +  return (0, import_react7.createElement)(
@@ -5751,44 +5600,7 @@ diff --git a/client.js b/client.js
 +      filling ? (0, import_react7.createElement)("button", { type: "button", className: "bt-q-submit", disabled: !long || busy, onClick: save }, busy ? t("Saving…") : t("Save")) : (0, import_react7.createElement)("button", { type: "button", className: "bt-q-submit", disabled: busy, onClick: allow }, busy ? t("Allowing…") : t("Allow"))
 +    )
 +  );
- }
--
--// src/client/mark.js
--var import_react2 = require("react");
--var STATES = ["idle", "thinking", "searching", "working", "sending", "orbit", "alert", "done"];
--var botState = (running, activity, alert) => running ? STATES.includes(activity) ? activity : "working" : alert ? "alert" : "idle";
--var toolState = (name) => /^(message_bot|stop_bot|create_bot|update_bot|create_group|update_group|delete_group|post_to_group)$/.test(name) ? "sending" : /search|fetch|browse|read|grep|glob|list|recall/i.test(name) ? "searching" : "working";
--function useGaze(ref, enabled) {
--  (0, import_react2.useEffect)(() => {
--    if (!enabled) return void 0;
--    let frame = 0;
--    let point = null;
--    const place = () => {
--      frame = 0;
--      const node = ref.current;
--      if (!node || !point) return;
--      const box = node.getBoundingClientRect();
--      const clamp = (value) => Math.max(-1, Math.min(1, value));
--      node.style.setProperty("--bt-gx", clamp((point.x - box.left - box.width / 2) / 160).toFixed(2));
--      node.style.setProperty("--bt-gy", clamp((point.y - box.top - box.height / 2) / 160).toFixed(2));
--    };
--    const onMove = (event) => {
--      point = { x: event.clientX, y: event.clientY };
--      if (!frame) frame = requestAnimationFrame(place);
--    };
--    const onLeave = () => {
--      point = null;
--      ref.current?.style.setProperty("--bt-gx", "0");
--      ref.current?.style.setProperty("--bt-gy", "0");
--    };
--    window.addEventListener("pointermove", onMove, { passive: true });
--    document.documentElement.addEventListener("pointerleave", onLeave);
--    return () => {
--      cancelAnimationFrame(frame);
--      window.removeEventListener("pointermove", onMove);
--      document.documentElement.removeEventListener("pointerleave", onLeave);
--    };
--  }, [enabled]);
++}
 +function SettledSecret({ bot, request, roster }) {
 +  const canceled = request.status === "canceled";
 +  const text = canceled ? t("{bot} asked for {name}", { bot: bot.name, name: request.name }) : request.status === "allowed" ? t("Allowed {bot} to use {name}", { bot: bot.name, name: request.name }) : t("Saved {name}", { name: request.name });
@@ -5808,32 +5620,7 @@ diff --git a/client.js b/client.js
 +      canceled ? (0, import_react7.createElement)("span", { className: "bt-q-badge" }, t("Canceled")) : (0, import_react7.createElement)("span", { className: "bt-q-check bt-secret-check", title: t("Done") }, (0, import_react7.createElement)(CheckIcon))
 +    )
 +  );
- }
--var FIDGETS = ["hop", "sway", "stretch", "look"];
--function BotMark({ bot, look: given, size = 36, state = "idle", live = false, gaze = false, pokeable = false, label }) {
--  const look = given ?? lookOf(bot);
--  const ref = (0, import_react2.useRef)(null);
--  const maskId = (0, import_react2.useRef)("");
--  if (maskId.current === "") maskId.current = `bt-mark-${nextMarkSerial()}`;
--  const [poked, setPoked] = (0, import_react2.useState)(false);
--  useGaze(ref, gaze);
--  const common = {
--    ref,
--    className: poked ? "bt-mark bt-mark-poke" : "bt-mark",
--    "data-shape": look.image ? "image" : shapeId(look.shape),
--    "data-state": STATES.includes(state) ? state : "idle",
--    "data-live": live ? "" : void 0,
--    "data-fidget": live ? FIDGETS[fnv1a(`${bot?.id ?? ""}:fidget`) % FIDGETS.length] : void 0,
--    "data-gaze": gaze ? "" : void 0,
--    "data-poke": pokeable ? "" : void 0,
--    style: { width: size, height: size, ...live ? { "--bt-delay": `${-(fnv1a(String(bot?.id ?? "")) % 5e3) / 1e3}s`, "--bt-fidget-delay": `${-(fnv1a(`${bot?.id ?? ""}:when`) % 9e3) / 1e3}s` } : {} },
--    role: label ? "img" : void 0,
--    "aria-label": label,
--    "aria-hidden": label ? void 0 : true,
--    onClick: pokeable ? () => setPoked(true) : void 0,
--    onAnimationEnd: poked ? (event) => {
--      if (/^bt-poke/.test(event.animationName)) setPoked(false);
--    } : void 0
++}
 +function RequestView({ bot, request, roster, actions }) {
 +  return request.status === "pending" ? (0, import_react7.createElement)(SecretCard, { key: `${request.id}:${request.kind}`, bot, request, roster, actions }) : (0, import_react7.createElement)(SettledSecret, { bot, request, roster });
 +}
@@ -5905,16 +5692,7 @@ diff --git a/client.js b/client.js
 +        setReplaced(true);
 +      }
 +    });
-   };
--  if (look.image) return (0, import_react2.createElement)("span", common, (0, import_react2.createElement)("img", { className: "bt-mark-img", src: look.image, alt: "", draggable: false }));
--  const box = shapeOf(look.shape).size;
--  return (0, import_react2.createElement)("span", common, (0, import_react2.createElement)("svg", { viewBox: `0 0 ${box} ${box}`, dangerouslySetInnerHTML: { __html: characterMarkup(look.shape, look.color).replaceAll(MASK_ID, maskId.current) } }));
--}
--function StarIcon({ size = 8 }) {
--  return (0, import_react2.createElement)(
--    "svg",
--    { width: size, height: size, viewBox: "0 0 10 10", "aria-hidden": true },
--    (0, import_react2.createElement)("path", { d: "M5 .6l1.3 2.8 3 .3-2.3 2 .7 3L5 7.2 2.3 8.7l.7-3L.7 3.7l3-.3z", fill: "#fff" })
++  };
 +  const edit = (next) => {
 +    setValue(next);
 +    setReplaced(false);
@@ -5930,10 +5708,115 @@ diff --git a/client.js b/client.js
 +      (0, import_react7.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: !long, onClick: save }, t("Replace"))
 +    ),
 +    value !== "" && !long ? (0, import_react7.createElement)("div", { className: "bt-set-hint" }, t("At least {count} characters.", { count: MIN_VALUE })) : replaced ? (0, import_react7.createElement)("div", { className: "bt-set-hint bt-secret-ok", role: "status" }, (0, import_react7.createElement)(CheckIcon), t("Replaced. Bots get the new value from their next command.")) : null
-   );
++  );
  }
--function AdminStar() {
--  return (0, import_react2.createElement)("span", { className: "bt-admin-star", role: "img", "aria-label": t("Admin") }, (0, import_react2.createElement)(StarIcon, { size: 7 }));
+-@keyframes bt-fade-in{from{opacity:0}to{opacity:1}}
+-@keyframes bt-fade-out{from{opacity:1}to{opacity:0}}
+-[data-composer-card]{display:flex!important;flex-direction:row;flex-wrap:wrap;align-items:center;gap:0!important;min-height:44px;border-radius:22px!important;padding:7.5px!important;box-sizing:border-box;background:var(--bt-main)!important;border:.5px solid var(--bt-line-2)!important;box-shadow:0 2px 8px -1px rgba(0,0,0,.05),0 1px 2px rgba(0,0,0,.03),0 0 0 1px rgba(228,228,228,.04)!important;transition:border-color .15s ease,background-color .15s ease,${spring(SPRING_SHAPE, "border-radius")}!important}
+-[data-composer-card]:hover,[data-composer-card]:focus-within{border-color:color-mix(in srgb,var(--bt-ink) 30%,transparent)!important}
+-[data-composer-card]:has(> [data-slot="conversation.input.attachments"] *),[data-composer-card]:has([data-composer-input] br + *),[data-composer-card]:has([data-composer-input] > :nth-child(2)){border-radius:18px!important}
+-[class*="_root"]:has(> [data-composer-card]){padding:0 11px 13px 16px!important}
+-[class*="_root"]:has(> [data-composer-card])>[data-composer-card]{max-width:min(992px,100%)!important}
+-[data-composer-card]>[class*="_row"]{display:contents!important}
+-[data-composer-card] [class*="_tools"]{order:1;flex:none;align-self:flex-end;margin:0}
+-[data-composer-card]>[data-input-scroll]{order:2;flex:1 1 0;min-width:0;padding:0 8px!important;margin:0!important}
+-[data-composer-card] [class*="_trailing"]{order:3;flex:none;align-self:flex-end;margin:0}
+-[data-composer-card]>[data-slot="conversation.input.attachments"]{order:0;flex-basis:100%}
+-[data-composer-card] [data-composer-input]{min-height:24px;padding:2px 0!important}
+-[data-composer-card] [data-composer-placeholder]{left:0!important;top:2px!important}
+-[data-composer-placeholder]{font-size:0!important;line-height:0!important}
+-[data-composer-placeholder]::after{content:var(--bt-placeholder,"Message");display:block;font-size:14px;line-height:24px;color:color-mix(in srgb,var(--bt-ink) 36%,transparent)}
+-/* The team's "+" (ComposerPlus) takes the seat of the shell's command-menu button. */
+-[data-composer-card] button[class*="_add"]{display:none!important}
+-.bt-plus{flex:none;width:28px;height:28px;padding:0;border:0;border-radius:50%;display:inline-flex;align-items:center;justify-content:center;background:color-mix(in srgb,var(--bt-ink) 5%,transparent);box-shadow:inset 0 0 0 .5px var(--bt-line);color:var(--bt-ink-2);cursor:pointer;transition:background-color .15s ease,color .15s ease,${spring(SPRING_TAP, "scale")}}
+-.bt-plus:hover,.bt-plus[aria-expanded=true]{background:color-mix(in srgb,var(--bt-ink) 10%,transparent);color:var(--bt-ink)}
+-.bt-plus:active{scale:.9}
+-.bt-plus svg{width:14px;height:14px;transition:${spring(SPRING_POP, "rotate")}}
+-.bt-plus[aria-expanded=true] svg{rotate:45deg}
+-.bt-plus-menu{min-width:180px}
+-[data-composer-card] [class*="_tools"]{gap:0!important}
+-[data-composer-card] [class*="_modes"]:empty{display:none!important}
+-[data-composer-card] [class*="_activity"]:not(:has([data-slot] > *)){display:none!important}
+-[data-composer-card] [class*="_trailing"]{gap:8px}
+-[data-composer-card] [class*="_standardControls"]{display:flex;align-items:center;gap:8px}
+-[data-composer-card] button[class*="_primary"]{width:28px!important;height:28px!important;background:var(--bt-accent)!important;color:var(--bt-accent-ink,#fff)!important;border-radius:50%!important;transition:opacity .15s ease,${spring(SPRING_TAP, "scale")};animation:bt-icon-swap ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
+-[data-composer-card] button[class*="_primary"]:hover:not(:disabled){opacity:.9}
+-[data-composer-card] button[class*="_primary"]:active:not(:disabled){scale:.9}
+-@keyframes bt-icon-swap{from{opacity:0;transform:scale(.5) rotate(-30deg)}}
+-[data-composer-card] button[class*="_primary"] svg{width:14px;height:14px}
+-[data-composer-card] button[class*="_primary"]:disabled{display:none!important}
+-[data-composer-dock]{display:none!important}
+-.bt-mic,.bt-voice{flex:none;width:28px;height:28px;border-radius:50%;border:0;padding:0;display:inline-grid;place-items:center;cursor:pointer;transition:background-color .15s ease,color .15s ease,${spring(SPRING_TAP, "scale")}}
+-.bt-mic{background:color-mix(in srgb,var(--bt-ink) 5%,transparent);box-shadow:inset 0 0 0 .5px var(--bt-line);color:var(--bt-ink-2)}
+-.bt-mic:hover{background:color-mix(in srgb,var(--bt-ink) 10%,transparent);color:var(--bt-ink)}
+-.bt-mic[aria-pressed=true]{background:#ff3e51;color:#fff;animation:bt-mic-pulse 1.4s ease-in-out infinite}
+-@keyframes bt-mic-pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,62,81,.35)}50%{box-shadow:0 0 0 5px rgba(255,62,81,0)}}
+-.bt-voice{display:none;background:var(--bt-accent);color:var(--bt-accent-ink,#fff);animation:bt-icon-swap ${SPRING_POP.duration}ms ${SPRING_POP.easing}}
+-.bt-voice:hover{opacity:.9}
+-.bt-mic:active,.bt-voice:active{scale:.9}
+-[data-composer-card]:has(button[class*="_primary"]:disabled) .bt-voice{display:inline-grid}
+-body[data-bt-room] .bt-voice{display:none!important}
+-body[data-bt-room] [data-composer-card]:has(button[class*="_primary"]:disabled) .bt-mic:not([aria-pressed=true]){background:var(--bt-accent);color:var(--bt-accent-ink,#fff)}
+-.bt-mic-note{position:absolute;right:12px;bottom:calc(100% + 8px);padding:5px 10px;border-radius:8px;background:var(--bt-user);color:var(--bt-user-ink);font-size:12px;line-height:16px;white-space:nowrap;pointer-events:none;animation:bt-rise .16s ease-out}
+-[data-chain-overlay-fallback="conversation.composer"]:has(~ .bt-q){display:block!important;order:2}
+-.bt-q{order:1}
+-div:has(> nav [class*="_marks"]){display:none!important}
+-/* Every user-side bubble (sent, steering mid-turn, not yet admitted, question replies)
+-   takes its surface and its text from the one --bt-user pair: a skin that repaints
+-   the host's bubble surface alone would otherwise leave the text unreadable. */
+-[class*="_userRow"] [class*="_bubble"],[data-chat-flow-kind=question-reply] [class*="_bubble"],[data-chat-flow-kind=command-input] [class*="_bubble"]{background:var(--bt-user)!important;color:var(--bt-user-ink)!important;border-radius:18px!important;padding:7px 12px!important;font-size:var(--dsh-content-font-size,14px)!important;line-height:calc(var(--dsh-content-font-size,14px) + 8px)!important}
+-[class*="_userRow"] [class*="_bubble"] [class*="_markdown"],[class*="_userRow"] [class*="_bubble"] a{color:inherit}
+-/* Sent messages get the hover toolbar below; steering and unsent bubbles keep none. */
+-[class*="_userRow"] [class*="_actions"]{display:none!important}
+-[data-chat-flow-kind=user] [class*="_userRow"]{flex-direction:row-reverse;align-items:center;justify-content:flex-start}
+-[data-chat-flow-kind=user] [class*="_actions"]{display:flex!important;height:24px!important;gap:2px!important;opacity:0!important;visibility:hidden;transition:opacity .12s ease,visibility .12s!important;flex:none}
+-[data-chat-flow-kind=user] [class*="_userRow"]:hover [class*="_actions"],[data-chat-flow-kind=user] [class*="_userRow"]:focus-within [class*="_actions"]{opacity:1!important;visibility:visible}
+-[data-chat-flow-kind=user] [class*="_actions"] [class*="_timeStart"]{display:none}
+-[data-chat-flow-kind=user] [class*="_actions"] button{width:24px;height:24px;border-radius:6px;color:var(--bt-ink-2)}
+-[data-chat-flow-kind=user] [class*="_actions"] button:hover{background:var(--bt-hover);color:var(--bt-ink)}
+-[data-chat-flow-kind=user] [class*="_actions"] svg{width:15px;height:15px}
+-.bt-q-inline{display:flex;margin:4px 0 6px}
+-[data-chat-flow-kind=assistant-step]+[data-step-process]:has(.bt-q-inline){margin-top:0!important}
+-[data-chat-flow-kind=question-reply]:has(.bt-q-inline),[data-chat-group-key]:has([data-chat-flow-kind=question-reply] .bt-q-inline),[data-chat-group-key]:has(.bt-q-gone){margin-top:0!important}
+-.bt-q-inline .bt-q{margin:0;max-width:min(550px,86%);order:0}
+-.bt-q-dock{width:100%;display:flex;justify-content:center}
+-.bt-q-dock .bt-q{margin:0 auto 8px}
+-[class*="_toBottomSlot"]{justify-content:center!important;padding-right:0!important}
+-[data-conversation-scroll] [class*="_toBottomSlot"]{bottom:calc(var(--dsh-composer-height,152px) + 8px)!important}
+-[class*="_toBottomSlot"]>button{width:36px!important;height:36px!important;margin-top:-36px!important;background:var(--bt-main)!important;color:var(--bt-ink)!important;box-shadow:0 0 0 .5px var(--bt-line-2),0 2px 8px -2px rgba(0,0,0,.12)!important;animation:bt-tobottom-in ${SPRING_TAP.duration}ms ${SPRING_TAP.easing},bt-veil-in .16s ease-out;transition:background-color .12s ease,${spring(SPRING_TAP, "scale")}}
+-[class*="_toBottomSlot"]>button:active{scale:.9}
+-[class*="_toBottomSlot"]>button:hover{background:color-mix(in srgb,var(--bt-ink) 4%,var(--bt-main))!important}
+-[class*="_toBottomSlot"]>button svg{display:none}
+-[class*="_toBottomSlot"]>button::before{content:"";width:20px;height:20px;background:currentColor;-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M10 4v12M5 11l5 5 5-5'/%3E%3C/svg%3E") center/contain no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M10 4v12M5 11l5 5 5-5'/%3E%3C/svg%3E") center/contain no-repeat}
+-@keyframes bt-tobottom-in{from{translate:0 8px;scale:.8}}
+-[data-bt-news] [class*="_toBottomSlot"]>button{visibility:hidden!important;pointer-events:none!important}
+-.bt-news{position:fixed;z-index:30;transform:translateX(-50%);display:inline-flex;align-items:center;overflow:hidden;border-radius:999px;background:#0c64c1;color:#fcfcfc;box-shadow:inset 0 0 0 1px rgba(20,20,20,.05),0 1px 3px 0 rgba(0,0,0,.12);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;animation:bt-news-in ${SPRING_TAP.duration}ms ${SPRING_TAP.easing},bt-veil-in .16s ease-out}
+-@keyframes bt-news-in{from{translate:0 8px;scale:.9}}
+-.bt-news[data-direction=up]{animation-name:bt-news-in-up,bt-veil-in}
+-@keyframes bt-news-in-up{from{translate:0 -8px;scale:.9}}
+-.bt-news-jump{display:inline-flex;align-items:center;gap:2px;margin:0;padding:4px 26px 4px 4px;border:0;border-radius:0;background:transparent;color:inherit;font:inherit;font-size:13px;line-height:18px;white-space:nowrap;cursor:pointer;outline:none}
+-.bt-news-ico{flex:none;display:inline-flex;align-items:center;justify-content:center;width:20px;height:20px}
+-.bt-news-ico svg{width:16px;height:16px}
+-.bt-news-x{position:absolute;right:4px;top:50%;z-index:1;transform:translateY(-50%);width:20px;height:20px;padding:0;border:0;border-radius:999px;background:transparent;color:inherit;opacity:.75;display:inline-flex;align-items:center;justify-content:center;cursor:pointer}
+-.bt-news-x svg{width:12px;height:12px}
+-.bt-news-x:hover{opacity:1;background:rgba(20,20,20,.5)}
+-@media (prefers-reduced-motion:reduce){.bt-news,[class*="_toBottomSlot"]>button{animation:none}}
+-.bt-new-sep{display:flex;align-items:center;gap:8px;margin:14px 0 8px;padding:2px 0;font-size:11px;line-height:14px;font-weight:500;letter-spacing:.02em;text-transform:uppercase;color:#0c64c1;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif}
+-.bt-new-sep::before,.bt-new-sep::after{content:"";flex:1;height:1px;background:color-mix(in srgb,#0c64c1 20%,transparent)}
+-.bt-open-new{display:flex;flex-direction:column}
+-.bt-open-new .bt-new-sep{margin:18px 0 0}
+-.bt-open-new .bt-time-sep{height:16px;margin:32px 0 2px}
+-.bt-earlier{display:flex;flex-direction:column;gap:6px}
+-.bt-earlier-top{display:flex;justify-content:center;align-items:center;height:34px;flex:none}
+-.bt-earlier-top .bt-soft{height:28px;font-size:12px;padding:0 12px}
+-.bt-urow{display:flex;justify-content:flex-end}
+-.bt-ububble{max-width:min(560px,78%);background:var(--bt-user);color:var(--bt-user-ink);border-radius:18px;padding:7px 12px;font-size:14px;line-height:20px;box-sizing:border-box;overflow-wrap:anywhere}
+-.bt-ububble [class*="_markdown"],.bt-ububble a{color:inherit!important}
+-.bt-ububble p{margin:0;line-height:22px}
+-.bt-uimages{display:block;font-size:12px;opacity:.7}
+-.bt-earlier .bt-event{margin:4px 0}
+-.bt-part-line{display:flex;align-items:center;gap:10px;margin:10px 0 6px;font-size:11px;line-height:14px;color:var(--bt-ink-3)}
+-.bt-part-line::before,.bt-part-line::after{content:"";flex:1;height:1px;background:var(--bt-line)}
 +function SecretRow({ secret, roster, actions, run, open, onToggle }) {
 +  const [confirm, setConfirm] = (0, import_react7.useState)(false);
 +  (0, import_react7.useEffect)(() => {
@@ -5976,12 +5859,7 @@ diff --git a/client.js b/client.js
 +      )
 +    ) : null
 +  );
- }
--function MainStar() {
--  return (0, import_react2.createElement)(
--    "svg",
--    { viewBox: "0 0 20 20", "aria-hidden": true },
--    (0, import_react2.createElement)("path", { d: "M10 2.4l2.29 5.04 5.51.63-4.09 3.74 1.11 5.42L10 14.5l-4.82 2.73 1.11-5.42L2.2 8.07l5.51-.63z" })
++}
 +function AddSecret({ actions, run, onDone }) {
 +  const [name, setName] = (0, import_react7.useState)("");
 +  const [purpose, setPurpose] = (0, import_react7.useState)("");
@@ -6009,17 +5887,8 @@ diff --git a/client.js b/client.js
 +      (0, import_react7.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: onDone }, t("Cancel")),
 +      (0, import_react7.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: !ready, onClick: save }, t("Save key"))
 +    )
-   );
- }
--function useSettled(state) {
--  const prev = (0, import_react2.useRef)(state);
--  const [settled, setSettled] = (0, import_react2.useState)(false);
--  (0, import_react2.useEffect)(() => {
--    const was = prev.current;
--    prev.current = state;
--    if (state !== "idle") {
--      setSettled(false);
--      return void 0;
++  );
++}
 +function SecretsPage({ roster, actions, run, Section }) {
 +  const [open, setOpen] = (0, import_react7.useState)(null);
 +  const [adding, setAdding] = (0, import_react7.useState)(false);
@@ -6106,7 +5975,13 @@ diff --git a/client.js b/client.js
 +.bt-secret-danger svg{width:13px;height:13px}
 +.bt-secret-add .bt-input{height:34px}
 +@media (prefers-reduced-motion:reduce){.bt-secret-glide{transition:none}.bt-secret-check,.bt-secret-done,.bt-secret-ok,.bt-secret-edit{animation:none}}
-+`;
+ `;
+-function installStyles(text, tag) {
+-  const style = document.createElement("style");
+-  style.dataset.dshBot = tag;
+-  style.textContent = text;
+-  document.head.appendChild(style);
+-  return style;
 +
 +// src/client/face-seats.js
 +function faceSeats(room2, roster, { left = false } = {}) {
@@ -6158,40 +6033,14 @@ diff --git a/client.js b/client.js
 +    if (known) {
 +      known.seats.push(seat);
 +      continue;
-     }
--    if (was === "idle" || was === "alert") return void 0;
--    setSettled(true);
--    const timer = setTimeout(() => setSettled(false), 1800);
--    return () => clearTimeout(timer);
--  }, [state]);
--  return settled;
++    }
 +    people2.push({ key, name: seat.person || (seat.mine ? cleanPeerName(roster.self?.displayName, "") : "") || t("Someone"), mine: seat.mine, seats: [seat] });
 +  }
 +  return [...people2.filter((person) => person.mine), ...people2.filter((person) => !person.mine)];
- }
--function BotAvatar({ bot, size, state = "idle", main, admin, badge = true, live = true, gaze = false, pokeable = false }) {
--  const settled = useSettled(state);
--  if (bot === void 0) return (0, import_react2.createElement)(BotMark, { size });
--  const badgeKind = !badge ? null : state === "alert" ? "alert" : state !== "idle" ? "working" : admin ? "admin" : main ? "main" : null;
--  return (0, import_react2.createElement)(
--    "span",
--    { className: "bt-mark", style: { width: size, height: size, "--bt-size": `${size}px` } },
--    (0, import_react2.createElement)(BotMark, { bot, size, state: settled ? "done" : state, live, gaze, pokeable }),
--    badgeKind === "working" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-working", "aria-label": t("Working"), role: "img" }) : null,
--    badgeKind === "alert" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-alert", "aria-label": t("Waiting for your answer"), role: "img" }, "?") : null,
--    badgeKind === "admin" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-admin", "aria-label": t("Admin"), role: "img" }, (0, import_react2.createElement)(StarIcon)) : null,
--    badgeKind === "main" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-main", "aria-label": t("Main Bot"), role: "img" }, (0, import_react2.createElement)(MainStar)) : null
--  );
++}
 +function facePersonLabel(person) {
 +  return person.mine ? t("{name} (you)", { name: person.name }) : person.name;
- }
--function clusterSeats(count, frame) {
--  if (count === 1) return [[0, 0, frame]];
--  if (count === 2) return [[0, 0, frame * 2 / 3], [frame / 3, frame / 3, frame * 2 / 3]];
--  if (count === 3) {
--    const size = frame * 5 / 9;
--    const rest = frame - size;
--    return [[rest / 2, 0, size], [0, rest, size], [rest, rest, size]];
++}
 +
 +// src/client/held-reply.js
 +var import_react8 = require("react");
@@ -6201,21 +6050,7 @@ diff --git a/client.js b/client.js
 +  constructor(props) {
 +    super(props);
 +    this.state = { failed: false };
-   }
--  const half = frame / 2;
--  return [[0, 0, half], [half, 0, half], [0, half, half], [half, half, half]];
--}
--function RoomAvatar({ room: room2, roster, size = 36 }) {
--  const members = room2.members.map((id) => roster.byId[id]).filter(Boolean);
--  const people = members.length === 1 ? [members[0], null] : members;
--  const seat = (bot, seatSize, key) => bot ? (0, import_react2.createElement)(BotMark, { key, bot, size: seatSize }) : (0, import_react2.createElement)("span", { key, className: "bt-cluster-you", style: { width: seatSize * 0.92, height: seatSize * 0.92, margin: seatSize * 0.04 } });
--  if (people.length === 0) return (0, import_react2.createElement)(BotMark, { size });
--  if (size <= 20 && people.length > 1) {
--    return (0, import_react2.createElement)(
--      "span",
--      { className: "bt-stack", style: { "--bt-stack-size": `${size}px` } },
--      people.slice(0, 3).map((bot, index) => seat(bot, size, bot?.id ?? `you-${index}`)),
--      people.length > 3 ? (0, import_react2.createElement)("span", { className: "bt-stack-more" }, `+${people.length - 3}`) : null
++  }
 +  static getDerivedStateFromError() {
 +    return { failed: true };
 +  }
@@ -6264,68 +6099,8 @@ diff --git a/client.js b/client.js
 +      // different field elsewhere. A failure that can never succeed draws no button on any surface.
 +      failed && canRetry(held) ? (0, import_react8.createElement)("button", { type: "button", className: "bt-held-retry", disabled: busy, onClick: () => decide("retry") }, t("Retry")) : null,
 +      error ? (0, import_react8.createElement)("span", { className: "bt-flybot-approval-error", role: "alert" }, error) : null
-     );
-   }
--  const seats = clusterSeats(Math.min(people.length, 4), size);
--  const overflow = people.length > 4 ? people.length - 3 : 0;
--  const gap = size / 14;
--  const rings = seats.map(([x, y, s]) => ({ cx: x + s / 2, cy: y + s / 2, r: s * 0.48 + gap }));
--  return (0, import_react2.createElement)(
--    "span",
--    { className: "bt-cluster", style: { width: size, height: size } },
--    seats.map(([x, y, s], index) => {
--      const holes2 = rings.slice(index + 1).filter((ring) => Math.hypot(ring.cx - x - s / 2, ring.cy - y - s / 2) < ring.r + s * 0.46).map((ring) => `radial-gradient(circle at ${ring.cx - x}px ${ring.cy - y}px,transparent ${ring.r}px,#000 ${ring.r + 0.5}px)`);
--      const style = { left: x, top: y, width: s, height: s };
--      if (holes2.length > 0) Object.assign(style, { WebkitMaskImage: holes2.join(","), maskImage: holes2.join(","), WebkitMaskComposite: "source-in", maskComposite: "intersect" });
--      if (overflow > 0 && index === 3) {
--        return (0, import_react2.createElement)("span", { key: "more", className: "bt-cluster-more", style: { ...style, width: s * 0.92, height: s * 0.92, margin: s * 0.04, fontSize: Math.max(8, Math.round(s * 0.36)) } }, `+${overflow}`);
--      }
--      const bot = people[index];
--      return (0, import_react2.createElement)("span", { key: bot?.id ?? "you", style }, seat(bot, s));
--    })
--  );
--}
--
--// src/client/icons.js
--var import_react3 = require("react");
--function PlusIcon() {
--  return (0, import_react3.createElement)("svg", { width: 18, height: 18, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M10 3.5v13M3.5 10h13", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round" }));
--}
--function SearchIcon() {
--  return (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("circle", { cx: 8.5, cy: 8.5, r: 5.5, stroke: "currentColor", strokeWidth: 1.6, fill: "none" }), (0, import_react3.createElement)("path", { d: "M13 13l4 4", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round" }));
--}
--function PeopleIcon() {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", "aria-hidden": true },
--    (0, import_react3.createElement)("circle", { cx: 7.5, cy: 7, r: 3 }),
--    (0, import_react3.createElement)("path", { d: "M2 16.5c.6-2.8 2.8-4.5 5.5-4.5s4.9 1.7 5.5 4.5" }),
--    (0, import_react3.createElement)("path", { d: "M13 4.3a3 3 0 0 1 0 5.4M15 12.4c1.6.6 2.6 2 3 4.1" })
--  );
--}
--function ArrowUpIcon() {
--  return (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M10 16V4M5 9l5-5 5 5", stroke: "currentColor", strokeWidth: 1.8, fill: "none", strokeLinecap: "round", strokeLinejoin: "round" }));
--}
--function MicIcon({ size = 16 }) {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: size, height: size, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", "aria-hidden": true },
--    (0, import_react3.createElement)("rect", { x: 7, y: 2.5, width: 6, height: 10, rx: 3, fill: "currentColor", stroke: "none" }),
--    (0, import_react3.createElement)("path", { d: "M4.5 9.5a5.5 5.5 0 0 0 11 0M10 15v2.5" })
--  );
--}
--function WaveIcon({ size = 16 }) {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: size, height: size, viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": true },
--    [[3, 7.5, 5], [6.5, 4.5, 11], [10, 2.5, 15], [13.5, 5.5, 9], [17, 8, 4]].map(([x, y, height]) => (0, import_react3.createElement)("rect", { key: x, x: x - 1, y, width: 2, height, rx: 1 }))
--  );
--}
--function ShareIcon() {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: 16, height: 16, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
--    (0, import_react3.createElement)("path", { d: "M10 12.5V3M6.5 6.5L10 3l3.5 3.5M4 11v4.5A1.5 1.5 0 0 0 5.5 17h9a1.5 1.5 0 0 0 1.5-1.5V11" })
++    );
++  }
 +  const plain = (0, import_react8.createElement)(
 +    "div",
 +    { className: "bt-held-card", role: "region", "aria-label": t("Waiting for your approval") },
@@ -6343,33 +6118,23 @@ diff --git a/client.js b/client.js
 +    "div",
 +    { className: "bt-held-actions", "data-flybot": "held-reply-actions" },
 +    custom ? (0, import_react8.createElement)(boundary(), { id: custom.id, fallback: plain }, (0, import_react8.createElement)(custom.component, { held, decide, call: call3, actions })) : plain
-   );
++  );
  }
--function CloseIcon() {
--  return (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M5 5l10 10M15 5L5 15", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round" }));
+-var FRAGMENT_SELECTOR = /\[class\*="(_[\w-]+)"\]/g;
+-var CLASS_TOKEN = /\.((?:\\.|[\w-])+)/g;
+-function sheetClassNames(sheet) {
+-  const names = [];
+-  const visit = (rules) => {
+-    for (const rule of rules) {
+-      if (rule.selectorText) for (const match of rule.selectorText.matchAll(CLASS_TOKEN)) names.push(match[1]);
+-      if (rule.cssRules) visit(rule.cssRules);
 +
 +// src/client/turn-reasoning.js
 +function turnReasoning(steps, current) {
 +  const members = steps.length ? steps : [current];
 +  if (members.find((step) => stepReasoning(step) !== "")?.step !== current.step) return "";
 +  return members.filter((step) => !thinkingLive(step)).map(stepReasoning).filter(Boolean).join("\n\n");
- }
--var ChevronLeftIcon = () => (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M12.5 4.5L7 10l5.5 5.5" }));
--var ChevronRightIcon = () => (0, import_react3.createElement)("svg", { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M7.5 4.5L13 10l-5.5 5.5" }));
--var lineIcon = (paths) => function LineIcon() {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: 15, height: 15, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
--    paths.map((d, index) => (0, import_react3.createElement)("path", { key: index, d }))
--  );
--};
--var CLOUD = "M6.5 15.25H5.75a3.25 3.25 0 0 1-.55-6.45 4.75 4.75 0 0 1 9.2-1.1 3.75 3.75 0 0 1 .1 7.55H13.5";
--function CloudDownloadIcon({ done = false }) {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: 16, height: 16, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
--    (0, import_react3.createElement)("path", { d: CLOUD }),
--    done ? (0, import_react3.createElement)("path", { d: "M7.75 13.25l1.75 1.75 3-3.25" }) : (0, import_react3.createElement)("g", { className: "bt-cloud-arrow" }, (0, import_react3.createElement)("path", { d: "M10 9.75v7" }), (0, import_react3.createElement)("path", { d: "M7.75 14.5L10 16.75l2.25-2.25" }))
++}
 +var texts = (step) => step.blocks.filter((block) => block.kind === "text" && block.text.trim() !== "");
 +var thinkingLive = (step) => step.status === "running" && texts(step).length === 0 && step.blocks.some((block) => block.kind === "reasoning");
 +var stepReasoning = (step) => step.blocks.filter((block) => block.kind === "reasoning").map((block) => block.text).join("\n").trim();
@@ -6419,34 +6184,8 @@ diff --git a/client.js b/client.js
 +        }, emoji))) : null
 +      );
 +    })
-   );
- }
--var SmileIcon = lineIcon(["M10 3.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13z", "M7.3 11.6a3.4 3.4 0 0 0 5.4 0", "M7.75 8.25h.01M12.25 8.25h.01"]);
--var ReplyIcon = lineIcon(["M8 5L4 9l4 4", "M4 9h7.5a4.5 4.5 0 0 1 4.5 4.5V15"]);
--var DotsIcon = lineIcon(["M5 10h.01M10 10h.01M15 10h.01"]);
--var CheckIcon = lineIcon(["M4.5 10.5l3.5 3.5 7.5-8"]);
--var ArrowDownIcon = lineIcon(["M10 4v12", "M5 11l5 5 5-5"]);
--var DownloadIcon = lineIcon(["M10 3.5v9", "M6.5 9.5L10 13l3.5-3.5", "M4 16h12"]);
--var GaugeIcon = lineIcon(["M3.5 13.5a6.5 6.5 0 1 1 13 0", "M10 13.5l3-4", "M10 13.5h.01"]);
--var PlugIcon = lineIcon(["M7 3v4M13 3v4", "M5 7h10v2.5a5 5 0 0 1-10 0z", "M10 14.5V17"]);
--var CalendarIcon = lineIcon(["M5.5 5h9A1.5 1.5 0 0 1 16 6.5v8a1.5 1.5 0 0 1-1.5 1.5h-9A1.5 1.5 0 0 1 4 14.5v-8A1.5 1.5 0 0 1 5.5 5z", "M4 8.75h12", "M7.25 3.5v3M12.75 3.5v3"]);
--var ConnectorIcon = lineIcon(["M7 10a2.5 2.5 0 1 1-5 0 2.5 2.5 0 0 1 5 0z", "M18 10a2.5 2.5 0 1 1-5 0 2.5 2.5 0 0 1 5 0z", "M7 10h6"]);
--var SwitchIcon = lineIcon(["M4 7h9.5M10.5 3.5L14 7l-3.5 3.5", "M16 13H6.5M9.5 9.5L6 13l3.5 3.5"]);
--var PaperclipIcon = lineIcon(["M15.5 9.5l-5.6 5.6a3.4 3.4 0 0 1-4.8-4.8l6.1-6.1a2.25 2.25 0 0 1 3.2 3.2l-6 6a1.1 1.1 0 0 1-1.6-1.6l5.5-5.5"]);
--var ClockIcon = lineIcon(["M10 3.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13z", "M10 6.5V10l2.5 1.5"]);
--var GearIcon = lineIcon(["M10 7.4a2.6 2.6 0 1 1 0 5.2 2.6 2.6 0 0 1 0-5.2z", "M7.85 4.4l.29-1.87a7.7 7.7 0 0 1 3.72 0l.29 1.87a6 6 0 0 1 1.63.94l1.76-.69a7.7 7.7 0 0 1 1.86 3.23l-1.47 1.18a6 6 0 0 1 0 1.88l1.47 1.18a7.7 7.7 0 0 1-1.86 3.23l-1.76-.69a6 6 0 0 1-1.63.94l-.29 1.87a7.7 7.7 0 0 1-3.72 0l-.29-1.87a6 6 0 0 1-1.63-.94l-1.76.69a7.7 7.7 0 0 1-1.86-3.23l1.47-1.18a6 6 0 0 1 0-1.88L2.6 7.88a7.7 7.7 0 0 1 1.86-3.23l1.76.69a6 6 0 0 1 1.63-.94z"]);
--var PinIcon = lineIcon(["M12.5 3l4.5 4.5-3 1.5-2.5 2.5.5 3.5-1.5 1.5L7 13 3.5 16.5", "M7 13l-3.5-3.5L5 8l3.5.5L11 6l1.5-3"]);
--function PinMarkIcon() {
--  return (0, import_react3.createElement)(
--    "svg",
--    { width: 12, height: 12, viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": true },
--    (0, import_react3.createElement)(
--      "g",
--      { transform: "rotate(45 10 10)" },
--      (0, import_react3.createElement)("path", { d: "M8 2.5h4a.9.9 0 0 1 0 1.8h-.4v4.1c0 1.4 1.1 2.6 2.6 3.1l.7.3v1.5H5.1v-1.5l.7-.3c1.5-.5 2.6-1.7 2.6-3.1V4.3H8a.9.9 0 0 1 0-1.8z" }),
--      (0, import_react3.createElement)("path", { d: "M9.35 13.3h1.3v3.6L10 18l-.65-1.1z" })
--    )
--  );
++  );
++}
 +var WAITING_OTHERS_NOTICE = "Waiting for the owner's approval";
 +var REACTIONS = ["👍", "❤️", "😂", "😮", "😢", "🙏"];
 +function leaveNoticeCoveredByClose(room2, text) {
@@ -6460,31 +6199,7 @@ diff --git a/client.js b/client.js
 +    if (name && (who === name || who.endsWith(` (${name})`))) return true;
 +  }
 +  return false;
- }
--var UnreadIcon = lineIcon(["M10 3.5a4.5 4.5 0 0 0-4.5 4.5v3L4 13.5h12L14.5 11V8", "M8.3 16a1.8 1.8 0 0 0 3.4 0", "M15.5 3.2a1.6 1.6 0 1 1 0 3.2 1.6 1.6 0 0 1 0-3.2z"]);
--var PencilIcon = lineIcon(["M9 4H6a2 2 0 0 0-2 2v8a2 2 0 0 0 2 2h8a2 2 0 0 0 2-2v-3", "M14.3 3.7a1.6 1.6 0 0 1 2.3 2.3L10.5 12l-3 .8.8-3z"]);
--var InfoIcon = lineIcon(["M10 3.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13z", "M10 9.25v4", "M10 6.6h.01"]);
--var StarLineIcon = lineIcon(["M10 3l2.1 4.3 4.7.7-3.4 3.3.8 4.7L10 13.8 5.8 16l.8-4.7L3.2 8l4.7-.7z"]);
--var CopyIcon = lineIcon(["M8.5 7h6A1.5 1.5 0 0 1 16 8.5v6a1.5 1.5 0 0 1-1.5 1.5h-6A1.5 1.5 0 0 1 7 14.5v-6A1.5 1.5 0 0 1 8.5 7z", "M4 12.5V5.5A1.5 1.5 0 0 1 5.5 4H13"]);
--var HideIcon = lineIcon(["M3 3l14 14", "M8.6 5.2A7.6 7.6 0 0 1 10 5c4.5 0 7 5 7 5a12.6 12.6 0 0 1-2 2.6M12.2 14.5A6.8 6.8 0 0 1 10 15c-4.5 0-7-5-7-5a12.4 12.4 0 0 1 3-3.4", "M8.5 8.5a2 2 0 0 0 3 3"]);
--var TrashIcon = lineIcon(["M3.5 5.5h13", "M8 5.5V4a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1v1.5", "M5 5.5l.7 10A1.5 1.5 0 0 0 7.2 17h5.6a1.5 1.5 0 0 0 1.5-1.5l.7-10", "M8.5 9v4.5M11.5 9v4.5"]);
--var DuplicateIcon = lineIcon(["M7 7h8.5v9.5H7z", "M4.5 13V3.5H13", "M11.25 9.5v4.5M9 11.75h4.5"]);
--var SlidersIcon = lineIcon(["M4 6.5h5M12.5 6.5H16M4 13.5h4M11.5 13.5H16", "M10.5 4.5v4M9.5 11.5v4"]);
--var MemoryIcon = lineIcon(["M5.5 3.5h8A1.5 1.5 0 0 1 15 5v10a1.5 1.5 0 0 1-1.5 1.5h-8z", "M5.5 3.5v13", "M8.5 7.5h3.5M8.5 10.5h2.5", "M12 3.5v4l1-.8 1 .8"]);
--var FolderIcon = lineIcon(["M3 6A1.5 1.5 0 0 1 4.5 4.5h3.2l1.8 2h6A1.5 1.5 0 0 1 17 8v6.5a1.5 1.5 0 0 1-1.5 1.5h-11A1.5 1.5 0 0 1 3 14.5z"]);
--var ChatsIcon = lineIcon(["M3.5 5.5A1.5 1.5 0 0 1 5 4h7a1.5 1.5 0 0 1 1.5 1.5V10A1.5 1.5 0 0 1 12 11.5H8L5 14v-2.5A1.5 1.5 0 0 1 3.5 10z", "M13.5 7.5H15A1.5 1.5 0 0 1 16.5 9v4.5A1.5 1.5 0 0 1 15 15v2l-2.5-2h-3A1.5 1.5 0 0 1 8 13.5V13"]);
--var SETTINGS_ICONS = { general: GearIcon, bots: PeopleIcon, groups: ChatsIcon, usage: GaugeIcon };
--
--// src/client/questions.js
--var import_react4 = require("react");
--var keyLetter = (index) => String.fromCharCode(65 + index);
--var optionsOf = (question) => (question?.options ?? []).map((option) => typeof option === "string" ? { label: option } : option);
--var isTypingTarget = (node) => node instanceof HTMLInputElement || node instanceof HTMLTextAreaElement || node instanceof HTMLSelectElement || node instanceof HTMLElement && node.isContentEditable;
--function useOptionKeys(count, onPick, ownRef) {
--  const pick2 = (0, import_react4.useRef)(onPick);
--  pick2.current = onPick;
--  (0, import_react4.useEffect)(() => {
--    if (count === 0) return void 0;
++}
 +function useDismiss(open, close, refs) {
 +  (0, import_react9.useEffect)(() => {
 +    if (!open) return void 0;
@@ -6492,25 +6207,12 @@ diff --git a/client.js b/client.js
 +      if (refs.some((ref) => ref.current?.contains(event.target))) return;
 +      close();
 +    };
-     const onKey = (event) => {
--      if (event.defaultPrevented || event.metaKey || event.ctrlKey || event.altKey || event.shiftKey || event.key.length !== 1) return;
--      if (isTypingTarget(event.target) || isTypingTarget(document.activeElement)) return;
--      if (document.querySelector('[role="dialog"], [aria-modal="true"]') !== null) return;
--      const index = event.key.toUpperCase().charCodeAt(0) - 65;
--      if (index >= 0 && index < count) {
--        event.preventDefault();
--        pick2.current(index);
--      } else if (index === count && ownRef.current) {
--        event.preventDefault();
--        ownRef.current.focus();
++    const onKey = (event) => {
 +      if (event.key === "Escape") {
 +        event.stopPropagation();
 +        close();
-       }
-     };
--    document.addEventListener("keydown", onKey, true);
--    return () => document.removeEventListener("keydown", onKey, true);
--  }, [count, ownRef]);
++      }
++    };
 +    window.addEventListener("mousedown", onDown);
 +    window.addEventListener("keydown", onKey, true);
 +    return () => {
@@ -6518,19 +6220,7 @@ diff --git a/client.js b/client.js
 +      window.removeEventListener("keydown", onKey, true);
 +    };
 +  }, [open]);
- }
--function QuestionView({ question, onAnswer, onDismiss, ownAnswer = false, raised = false }) {
--  const [own, setOwn] = (0, import_react4.useState)("");
--  const [picked, setPicked] = (0, import_react4.useState)([]);
--  const ownRef = (0, import_react4.useRef)(null);
--  const titleId = (0, import_react4.useId)();
--  const options = optionsOf(question);
--  const multi = question.multiSelect === true;
--  const custom = own.trim();
--  const canSubmit = multi ? picked.length > 0 || custom !== "" : custom !== "";
--  const choose = (label) => {
--    if (multi) {
--      setPicked((current) => current.includes(label) ? current.filter((item) => item !== label) : [...current, label]);
++}
 +function MessageTools({ text, name, sessionId, react, actions }) {
 +  const [panel, setPanel] = (0, import_react9.useState)(null);
 +  const [place, setPlace] = (0, import_react9.useState)(null);
@@ -6542,62 +6232,22 @@ diff --git a/client.js b/client.js
 +  const open = (kind, event) => {
 +    if (panel === kind) {
 +      close();
-       return;
++      return;
      }
--    onAnswer({ selected: [label] });
 +    const rect = event.currentTarget.getBoundingClientRect();
 +    const below = rect.bottom + 220 < window.innerHeight;
 +    setPlace(kind === "react" ? { left: rect.left + rect.width / 2, top: rect.top - 6, "--bt-origin": "bottom center" } : { left: Math.min(rect.left, window.innerWidth - 208), ...below ? { top: rect.bottom + 4 } : { bottom: window.innerHeight - rect.top + 4, "--bt-origin": "bottom left" } });
 +    setPanel(kind);
    };
--  const submit = () => {
--    if (!canSubmit) return;
--    onAnswer({ selected: multi ? picked : [], ...custom ? { custom } : {} });
+-  try {
+-    visit(sheet.cssRules);
+-  } catch {
 +  const copy2 = () => {
 +    void navigator.clipboard?.writeText(text).then(() => {
 +      setCopied(true);
 +      setTimeout(() => setCopied(false), 1e3);
 +    });
-   };
--  useOptionKeys(options.length, (index) => choose(options[index].label), ownRef);
--  const ownLetter = options.length > 0 ? keyLetter(options.length) : void 0;
--  const field = ownAnswer ? (0, import_react4.createElement)("textarea", {
--    ref: ownRef,
--    rows: 1,
--    value: own,
--    autoComplete: "off",
--    spellCheck: false,
--    className: "bt-q-input",
--    "aria-label": t("Your own answer"),
--    placeholder: t("Type your own answer"),
--    "aria-keyshortcuts": ownLetter?.toLowerCase(),
--    onChange: (event) => setOwn(event.target.value),
--    onKeyDown: (event) => {
--      if (event.key !== "Enter" || event.shiftKey || event.nativeEvent.isComposing) return;
--      event.preventDefault();
--      submit();
--    }
--  }) : null;
--  const rows = options.map((option, optionIndex) => {
--    const selected = multi && picked.includes(option.label);
--    return (0, import_react4.createElement)(
--      "button",
--      {
--        key: option.label,
--        type: "button",
--        className: "bt-q-opt",
--        "aria-pressed": multi ? selected : void 0,
--        "aria-keyshortcuts": keyLetter(optionIndex).toLowerCase(),
--        onClick: () => choose(option.label)
--      },
--      (0, import_react4.createElement)("span", { className: "bt-key", "aria-hidden": true }, keyLetter(optionIndex)),
--      (0, import_react4.createElement)(
--        "span",
--        { className: "bt-q-body" },
--        (0, import_react4.createElement)("span", { className: "bt-q-label" }, option.label),
--        option.description ? (0, import_react4.createElement)("span", { className: "bt-q-desc" }, option.description) : null
--      ),
--      selected && !raised ? (0, import_react4.createElement)("span", { className: "bt-q-check", title: t("Selected") }, (0, import_react4.createElement)(CheckIcon)) : null
++  };
 +  const download2 = () => {
 +    const url = URL.createObjectURL(new Blob([text], { type: "text/markdown" }));
 +    const link = Object.assign(document.createElement("a"), { href: url, download: `${name}-message.md` });
@@ -6731,19 +6381,9 @@ diff --git a/client.js b/client.js
 +        (0, import_react9.createElement)(BotMark, { bot: bots[0], size: 16 }),
 +        (0, import_react9.createElement)("span", { className: "bt-event-name" }, bots[0].name)
 +      )
-     );
--  });
--  if (raised && field) {
--    rows.push((0, import_react4.createElement)(
--      "label",
--      { key: "own", className: "bt-q-opt bt-q-ownrow", "data-filled": custom !== "" ? "" : void 0 },
--      ownLetter ? (0, import_react4.createElement)("span", { className: "bt-key", "aria-hidden": true }, ownLetter) : null,
--      (0, import_react4.createElement)("span", { className: "bt-q-body" }, field)
--    ));
++    );
    }
--  let foot = null;
--  if (raised && multi) {
--    foot = (0, import_react4.createElement)(
+-  return names;
 +  const parts = [];
 +  parts.push((0, import_react9.createElement)("span", { key: "p" }, prefix));
 +  bots.forEach((bot, index) => {
@@ -6785,28 +6425,12 @@ diff --git a/client.js b/client.js
 +  const held = heldLineState(room2, { seq, botId: bot.id, text });
 +  if (held === "rejected") {
 +    return (0, import_react9.createElement)(
-       "div",
--      { className: "bt-q-foot" },
--      (0, import_react4.createElement)("button", { type: "button", className: "bt-q-btn", onClick: onDismiss }, t("Skip")),
--      (0, import_react4.createElement)("button", { type: "submit", className: "bt-q-submit", disabled: !canSubmit }, t("Submit"))
++      "div",
 +      { className: "bt-event bt-not-sent", "data-flybot": "held-not-sent", role: "status" },
 +      (0, import_react9.createElement)(BotMark, { bot, size: 16 }),
 +      (0, import_react9.createElement)("span", null, t("{name} · Not sent", { name: bot.name }))
-     );
--  } else if ((raised || multi) && canSubmit) {
--    foot = (0, import_react4.createElement)("div", { className: "bt-q-foot" }, (0, import_react4.createElement)("button", { type: "submit", className: "bt-q-submit" }, t("Submit")));
-   }
--  return (0, import_react4.createElement)(
--    "form",
--    {
--      className: raised ? "bt-q bt-q-raised" : "bt-q",
--      "aria-labelledby": titleId,
--      onSubmit: (event) => {
--        event.preventDefault();
--        submit();
--      }
--    },
--    (0, import_react4.createElement)(
++    );
++  }
 +  if (held === "held" || isHeldLine(room2, text, bot)) return null;
 +  const lead = (0, import_react9.createElement)(
 +    "button",
@@ -6866,14 +6490,7 @@ diff --git a/client.js b/client.js
 +  const person = typeof source.remote.typedBy === "string" ? source.remote.typedBy : "";
 +  if (person) {
 +    return (0, import_react9.createElement)(
-       "div",
--      { className: "bt-q-head" },
--      (0, import_react4.createElement)(
--        "div",
--        { className: "bt-q-text" },
--        (0, import_react4.createElement)("p", { className: "bt-q-title", id: titleId }, question.header ? `${question.header} · ` : "", question.question),
--        question.detail ? (0, import_react4.createElement)("div", { className: "bt-q-detail" }, question.detail) : null,
--        raised && multi ? (0, import_react4.createElement)("div", { className: "bt-q-detail" }, t("Choose all that apply")) : null
++      "div",
 +      { className: "bt-group-msg bt-person-msg bt-remote-msg", "data-person": person, "data-remote": handle },
 +      // One short header: the person, and the Bot that carried the line only when it is known (#275).
 +      (0, import_react9.createElement)(
@@ -6881,8 +6498,7 @@ diff --git a/client.js b/client.js
 +        { className: "bt-group-name", title: handle },
 +        person,
 +        carrier ? (0, import_react9.createElement)("span", { className: "bt-remote-handle" }, t("via {name}", { name: carrier })) : null
-       ),
--      (0, import_react4.createElement)("button", { type: "button", className: "bt-q-x", "aria-label": t("Dismiss question"), title: t("Dismiss"), onClick: onDismiss }, (0, import_react4.createElement)(CloseIcon))
++      ),
 +      (0, import_react9.createElement)(Bubbles, { texts: [stripTrace(text)], roster, selfId: bot.id, actions, sessionId, msgKey, useUi, lead: (0, import_react9.createElement)("span", { className: "bt-lead", title: person }, (0, import_react9.createElement)(PersonMark, { name: person })) }),
 +      files.length ? (0, import_react9.createElement)(RemoteFiles, { files, plugin: member?.plugin ?? "social", botId: roster.byId[sessionId]?.id ?? sessionId }) : null
 +    );
@@ -6898,19 +6514,40 @@ diff --git a/client.js b/client.js
 +      { className: "bt-group-name", style: { color: inkText(colorOf(bot)) } },
 +      name,
 +      (0, import_react9.createElement)("span", { className: "bt-remote-handle", title: source.remote.home ?? handle, "aria-label": t("Friend's Bot") }, (0, import_react9.createElement)(GlobeMark), handle)
-     ),
--    rows.length > 0 ? (0, import_react4.createElement)("div", { className: "bt-q-list", role: "group" }, rows) : null,
--    field && !raised ? (0, import_react4.createElement)(
++    ),
 +    (0, import_react9.createElement)(Bubbles, { texts: [stripTrace(text)], roster, selfId: bot.id, actions, sessionId, msgKey, useUi, lead }),
 +    files.length ? (0, import_react9.createElement)(RemoteFiles, { files, plugin: member?.plugin ?? "social", botId: roster.byId[sessionId]?.id ?? sessionId }) : null
 +  );
-+}
+ }
+-function compileFragmentSelectors(text, names) {
+-  const compiled = /* @__PURE__ */ new Map();
+-  return text.replace(FRAGMENT_SELECTOR, (whole, fragment) => {
+-    if (!compiled.has(fragment)) {
+-      const exact = [];
+-      for (const name of names) if (name.includes(fragment)) exact.push(`.${name}`);
+-      compiled.set(fragment, exact.length ? `:is(${exact.join(",")})` : whole);
+-    }
+-    return compiled.get(fragment);
+-  });
 +function FirstContact({ source, roster, sessionId }) {
 +  const person = typeof source.remote.typedBy === "string" ? source.remote.typedBy : "";
 +  const who = person || remoteSpeaker(source, roster).name;
 +  const bot = roster.byId[sessionId]?.name ?? t("your Bot");
 +  return (0, import_react9.createElement)("div", { className: "bt-event", "data-first-contact": source.remote.handle }, (0, import_react9.createElement)("span", null, t("{name} is talking to {bot} through Bot Social", { name: who, bot })));
-+}
+ }
+-function installCompiledStyles(text, tag) {
+-  const style = installStyles("", tag);
+-  const cache = /* @__PURE__ */ new WeakMap();
+-  const render = () => {
+-    const names = /* @__PURE__ */ new Set();
+-    for (const sheet of document.styleSheets) {
+-      if (sheet.ownerNode?.dataset?.dshBot) continue;
+-      let list = cache.get(sheet);
+-      if (!list) {
+-        list = sheetClassNames(sheet);
+-        cache.set(sheet, list);
+-      }
+-      for (const name of list) names.add(name);
 +function GlobeMark() {
 +  return (0, import_react9.createElement)(
 +    "svg",
@@ -6937,8 +6574,28 @@ diff --git a/client.js b/client.js
 +      setError(String(reason?.message ?? reason));
 +    } finally {
 +      setBusy("");
-+    }
-+  };
+     }
+-    const next = compileFragmentSelectors(text, names);
+-    if (style.textContent !== next) style.textContent = next;
+-  };
+-  render();
+-  let timer;
+-  const schedule = () => {
+-    clearTimeout(timer);
+-    timer = setTimeout(render, 120);
+-  };
+-  const onLoad = (event) => {
+-    if (event.target instanceof HTMLLinkElement) schedule();
+-  };
+-  const observer = new MutationObserver(schedule);
+-  observer.observe(document.head, { childList: true });
+-  document.addEventListener("load", onLoad, true);
+-  return () => {
+-    observer.disconnect();
+-    document.removeEventListener("load", onLoad, true);
+-    clearTimeout(timer);
+-    style.remove();
+   };
 +  return (0, import_react9.createElement)(
 +    "div",
 +    { className: "bt-file-chips" },
@@ -6949,7 +6606,74 @@ diff --git a/client.js b/client.js
 +    )),
 +    error ? (0, import_react9.createElement)("span", { className: "bt-file-error", role: "alert" }, error) : null
 +  );
-+}
+ }
+-
+-// src/client/mark.js
+-var import_react2 = require("react");
+-var STATES = ["idle", "thinking", "searching", "working", "sending", "orbit", "alert", "done"];
+-var botState = (running, activity, alert) => running ? STATES.includes(activity) ? activity : "working" : alert ? "alert" : "idle";
+-var toolState = (name) => /^(message_bot|stop_bot|create_bot|update_bot|create_group|update_group|delete_group|post_to_group)$/.test(name) ? "sending" : /search|fetch|browse|read|grep|glob|list|recall/i.test(name) ? "searching" : "working";
+-function useGaze(ref, enabled) {
+-  (0, import_react2.useEffect)(() => {
+-    if (!enabled) return void 0;
+-    let frame = 0;
+-    let point = null;
+-    const place = () => {
+-      frame = 0;
+-      const node = ref.current;
+-      if (!node || !point) return;
+-      const box = node.getBoundingClientRect();
+-      const clamp = (value) => Math.max(-1, Math.min(1, value));
+-      node.style.setProperty("--bt-gx", clamp((point.x - box.left - box.width / 2) / 160).toFixed(2));
+-      node.style.setProperty("--bt-gy", clamp((point.y - box.top - box.height / 2) / 160).toFixed(2));
+-    };
+-    const onMove = (event) => {
+-      point = { x: event.clientX, y: event.clientY };
+-      if (!frame) frame = requestAnimationFrame(place);
+-    };
+-    const onLeave = () => {
+-      point = null;
+-      ref.current?.style.setProperty("--bt-gx", "0");
+-      ref.current?.style.setProperty("--bt-gy", "0");
+-    };
+-    window.addEventListener("pointermove", onMove, { passive: true });
+-    document.documentElement.addEventListener("pointerleave", onLeave);
+-    return () => {
+-      cancelAnimationFrame(frame);
+-      window.removeEventListener("pointermove", onMove);
+-      document.documentElement.removeEventListener("pointerleave", onLeave);
+-    };
+-  }, [enabled]);
+-}
+-var FIDGETS = ["hop", "sway", "stretch", "look"];
+-function BotMark({ bot, look: given, size = 36, state = "idle", live = false, gaze = false, pokeable = false, label }) {
+-  const look = given ?? lookOf(bot);
+-  const ref = (0, import_react2.useRef)(null);
+-  const maskId = (0, import_react2.useRef)("");
+-  if (maskId.current === "") maskId.current = `bt-mark-${nextMarkSerial()}`;
+-  const [poked, setPoked] = (0, import_react2.useState)(false);
+-  useGaze(ref, gaze);
+-  const common = {
+-    ref,
+-    className: poked ? "bt-mark bt-mark-poke" : "bt-mark",
+-    "data-shape": look.image ? "image" : shapeId(look.shape),
+-    "data-state": STATES.includes(state) ? state : "idle",
+-    "data-live": live ? "" : void 0,
+-    "data-fidget": live ? FIDGETS[fnv1a(`${bot?.id ?? ""}:fidget`) % FIDGETS.length] : void 0,
+-    "data-gaze": gaze ? "" : void 0,
+-    "data-poke": pokeable ? "" : void 0,
+-    style: { width: size, height: size, ...live ? { "--bt-delay": `${-(fnv1a(String(bot?.id ?? "")) % 5e3) / 1e3}s`, "--bt-fidget-delay": `${-(fnv1a(`${bot?.id ?? ""}:when`) % 9e3) / 1e3}s` } : {} },
+-    role: label ? "img" : void 0,
+-    "aria-label": label,
+-    "aria-hidden": label ? void 0 : true,
+-    onClick: pokeable ? () => setPoked(true) : void 0,
+-    onAnimationEnd: poked ? (event) => {
+-      if (/^bt-poke/.test(event.animationName)) setPoked(false);
+-    } : void 0
+-  };
+-  if (look.image) return (0, import_react2.createElement)("span", common, (0, import_react2.createElement)("img", { className: "bt-mark-img", src: look.image, alt: "", draggable: false }));
+-  const box = shapeOf(look.shape).size;
+-  return (0, import_react2.createElement)("span", common, (0, import_react2.createElement)("svg", { viewBox: `0 0 ${box} ${box}`, dangerouslySetInnerHTML: { __html: characterMarkup(look.shape, look.color).replaceAll(MASK_ID, maskId.current) } }));
 +function GroupEvent({ prefix, room: room2, name, roster, actions }) {
 +  return (0, import_react9.createElement)(
 +    "div",
@@ -6957,7 +6681,12 @@ diff --git a/client.js b/client.js
 +    (0, import_react9.createElement)("span", null, prefix),
 +    room2 ? (0, import_react9.createElement)("button", { type: "button", onClick: () => actions.openSession(room2.id) }, (0, import_react9.createElement)(RoomAvatar, { room: room2, roster, size: 16 }), room2.name) : name ? (0, import_react9.createElement)("span", null, name) : null
 +  );
-+}
+ }
+-function StarIcon({ size = 8 }) {
+-  return (0, import_react2.createElement)(
+-    "svg",
+-    { width: size, height: size, viewBox: "0 0 10 10", "aria-hidden": true },
+-    (0, import_react2.createElement)("path", { d: "M5 .6l1.3 2.8 3 .3-2.3 2 .7 3L5 7.2 2.3 8.7l.7-3L.7 3.7l3-.3z", fill: "#fff" })
 +function MemoryEvent({ sessionId, scope, result, roster, actions, findBot }) {
 +  if (!/^(Saved to|Updated in|Removed from) /.test(result)) return null;
 +  const self = roster.byId[sessionId];
@@ -6970,11 +6699,18 @@ diff --git a/client.js b/client.js
 +    "div",
 +    { className: "bt-event" },
 +    (0, import_react9.createElement)("button", { type: "button", title: result, onClick: () => actions.openMemory(target.id) }, (0, import_react9.createElement)(MemoryIcon), label)
-+  );
-+}
+   );
+ }
+-function AdminStar() {
+-  return (0, import_react2.createElement)("span", { className: "bt-admin-star", role: "img", "aria-label": t("Admin") }, (0, import_react2.createElement)(StarIcon, { size: 7 }));
 +function PartLine({ time }) {
 +  return (0, import_react9.createElement)("div", { className: "bt-part-line", role: "separator" }, Number.isFinite(time) ? (0, import_react9.createElement)("span", null, dayLabel(time)) : null);
-+}
+ }
+-function MainStar() {
+-  return (0, import_react2.createElement)(
+-    "svg",
+-    { viewBox: "0 0 20 20", "aria-hidden": true },
+-    (0, import_react2.createElement)("path", { d: "M10 2.4l2.29 5.04 5.51.63-4.09 3.74 1.11 5.42L10 14.5l-4.82 2.73 1.11-5.42L2.2 8.07l5.51-.63z" })
 +var scrollParent = (node) => {
 +  for (let at = node.parentElement; at; at = at.parentElement) {
 +    if (/(auto|scroll)/.test(getComputedStyle(at).overflowY)) return at;
@@ -7034,12 +6770,7 @@ diff --git a/client.js b/client.js
 +    "div",
 +    { className: "bt-earlier", role: "feed", "aria-label": t("Earlier messages"), "aria-busy": view.loading },
 +    (0, import_react9.createElement)(
-       "div",
--      { className: "bt-q-custom" },
--      (0, import_react4.createElement)("label", { className: "bt-q-field" }, field),
--      !multi && canSubmit ? (0, import_react4.createElement)("button", { type: "submit", className: "bt-q-submit" }, t("Submit")) : null
--    ) : null,
--    foot
++      "div",
 +      { ref: top, className: "bt-earlier-top" },
 +      view.loading ? (0, import_react9.createElement)(Shimmer, null, t("Loading earlier messages…")) : view.failed ? (0, import_react9.createElement)("button", { type: "button", className: "bt-soft", onClick: () => load(view.cursor) }, t("Couldn’t load earlier messages · Retry")) : view.cursor ? (0, import_react9.createElement)("button", { type: "button", className: "bt-soft", onClick: () => load(view.cursor) }, t("Load earlier")) : null
 +    ),
@@ -7074,21 +6805,15 @@ diff --git a/client.js b/client.js
 +    (0, import_react9.createElement)(PartLine, { time: view.startedAt })
    );
  }
--function SettledQuestion({ question, answer }) {
--  const options = optionsOf(question);
--  const prompt = question?.question ?? "";
--  const chosen = [...answer.selected ?? [], ...answer.custom ? [answer.custom] : []];
--  if (chosen.length === 0) {
--    return (0, import_react4.createElement)(
--      "div",
--      { className: "bt-q bt-q-settled bt-q-dismissed", role: "group", "aria-label": prompt },
--      (0, import_react4.createElement)(
--        "div",
--        { className: "bt-q-head" },
--        (0, import_react4.createElement)("div", { className: "bt-q-text" }, (0, import_react4.createElement)("p", { className: "bt-q-title" }, prompt)),
--        (0, import_react4.createElement)("span", { className: "bt-q-badge" }, t("Dismissed"))
--      )
--    );
+-function useSettled(state) {
+-  const prev = (0, import_react2.useRef)(state);
+-  const [settled, setSettled] = (0, import_react2.useState)(false);
+-  (0, import_react2.useEffect)(() => {
+-    const was = prev.current;
+-    prev.current = state;
+-    if (state !== "idle") {
+-      setSettled(false);
+-      return void 0;
 +function TriggerCell({ node, sessionId, useRoster, useSessions, useTurnClock, useUi, actions }) {
 +  const roster = useRoster((value) => value);
 +  const data = node.data;
@@ -7160,18 +6885,84 @@ diff --git a/client.js b/client.js
 +        onOpen: (bot) => actions.openExchange(selfId, bot.id),
 +        whole: true
 +      });
-+    }
+     }
+-    if (was === "idle" || was === "alert") return void 0;
+-    setSettled(true);
+-    const timer = setTimeout(() => setSettled(false), 1800);
+-    return () => clearTimeout(timer);
+-  }, [state]);
+-  return settled;
+-}
+-function BotAvatar({ bot, size, state = "idle", main, admin, badge = true, live = true, gaze = false, pokeable = false }) {
+-  const settled = useSettled(state);
+-  if (bot === void 0) return (0, import_react2.createElement)(BotMark, { size });
+-  const badgeKind = !badge ? null : state === "alert" ? "alert" : state !== "idle" ? "working" : admin ? "admin" : main ? "main" : null;
+-  return (0, import_react2.createElement)(
+-    "span",
+-    { className: "bt-mark", style: { width: size, height: size, "--bt-size": `${size}px` } },
+-    (0, import_react2.createElement)(BotMark, { bot, size, state: settled ? "done" : state, live, gaze, pokeable }),
+-    badgeKind === "working" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-working", "aria-label": t("Working"), role: "img" }) : null,
+-    badgeKind === "alert" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-alert", "aria-label": t("Waiting for your answer"), role: "img" }, "?") : null,
+-    badgeKind === "admin" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-admin", "aria-label": t("Admin"), role: "img" }, (0, import_react2.createElement)(StarIcon)) : null,
+-    badgeKind === "main" ? (0, import_react2.createElement)("span", { className: "bt-badge bt-badge-main", "aria-label": t("Main Bot"), role: "img" }, (0, import_react2.createElement)(MainStar)) : null
+-  );
+-}
+-function clusterSeats(count, frame) {
+-  if (count === 1) return [[0, 0, frame]];
+-  if (count === 2) return [[0, 0, frame * 2 / 3], [frame / 3, frame / 3, frame * 2 / 3]];
+-  if (count === 3) {
+-    const size = frame * 5 / 9;
+-    const rest = frame - size;
+-    return [[rest / 2, 0, size], [0, rest, size], [rest, rest, size]];
 +    if (source.kind === "schedule") {
 +      const prompts = reminderPrompts(contentText(data.content));
 +      return (0, import_react9.createElement)("div", { className: "bt-event" }, prompts.length > 0 ? t("Scheduled task: {text}", { text: prompts.join(" · ").slice(0, 80) }) : t("Routine started"));
 +    }
 +    if (source.kind === "user-question-reply") return null;
 +    return (0, import_react9.createElement)("div", { className: "bt-event" }, contentText(data.content).slice(0, 80) || t("Update"));
-+  }
-+}
+   }
+-  const half = frame / 2;
+-  return [[0, 0, half], [half, 0, half], [0, half, half], [half, half, half]];
+ }
+-function RoomAvatar({ room: room2, roster, size = 36 }) {
+-  const members = room2.members.map((id) => roster.byId[id]).filter(Boolean);
+-  const people = members.length === 1 ? [members[0], null] : members;
+-  const seat = (bot, seatSize, key) => bot ? (0, import_react2.createElement)(BotMark, { key, bot, size: seatSize }) : (0, import_react2.createElement)("span", { key, className: "bt-cluster-you", style: { width: seatSize * 0.92, height: seatSize * 0.92, margin: seatSize * 0.04 } });
+-  if (people.length === 0) return (0, import_react2.createElement)(BotMark, { size });
+-  if (size <= 20 && people.length > 1) {
+-    return (0, import_react2.createElement)(
+-      "span",
+-      { className: "bt-stack", style: { "--bt-stack-size": `${size}px` } },
+-      people.slice(0, 3).map((bot, index) => seat(bot, size, bot?.id ?? `you-${index}`)),
+-      people.length > 3 ? (0, import_react2.createElement)("span", { className: "bt-stack-more" }, `+${people.length - 3}`) : null
+-    );
+-  }
+-  const seats = clusterSeats(Math.min(people.length, 4), size);
+-  const overflow = people.length > 4 ? people.length - 3 : 0;
+-  const gap = size / 14;
+-  const rings = seats.map(([x, y, s]) => ({ cx: x + s / 2, cy: y + s / 2, r: s * 0.48 + gap }));
+-  return (0, import_react2.createElement)(
+-    "span",
+-    { className: "bt-cluster", style: { width: size, height: size } },
+-    seats.map(([x, y, s], index) => {
+-      const holes2 = rings.slice(index + 1).filter((ring) => Math.hypot(ring.cx - x - s / 2, ring.cy - y - s / 2) < ring.r + s * 0.46).map((ring) => `radial-gradient(circle at ${ring.cx - x}px ${ring.cy - y}px,transparent ${ring.r}px,#000 ${ring.r + 0.5}px)`);
+-      const style = { left: x, top: y, width: s, height: s };
+-      if (holes2.length > 0) Object.assign(style, { WebkitMaskImage: holes2.join(","), maskImage: holes2.join(","), WebkitMaskComposite: "source-in", maskComposite: "intersect" });
+-      if (overflow > 0 && index === 3) {
+-        return (0, import_react2.createElement)("span", { key: "more", className: "bt-cluster-more", style: { ...style, width: s * 0.92, height: s * 0.92, margin: s * 0.04, fontSize: Math.max(8, Math.round(s * 0.36)) } }, `+${overflow}`);
+-      }
+-      const bot = people[index];
+-      return (0, import_react2.createElement)("span", { key: bot?.id ?? "you", style }, seat(bot, s));
+-    })
+-  );
 +function NewDivider() {
 +  return (0, import_react9.createElement)("div", { className: "bt-new-sep", role: "separator", "aria-label": t("New messages") }, (0, import_react9.createElement)("span", null, t("New")));
-+}
+ }
+-
+-// src/client/icons.js
+-var import_react3 = require("react");
+-function PlusIcon() {
+-  return (0, import_react3.createElement)("svg", { width: 18, height: 18, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M10 3.5v13M3.5 10h13", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round" }));
 +function TurnProcessCell({ node, sessionId, turnProcess, useRoster, useUi, useTurnClock, actions }) {
 +  const open = turnProcess === void 0 || !turnProcess.foldable || turnProcess.open;
 +  (0, import_react9.useEffect)(() => {
@@ -7189,10 +6980,20 @@ diff --git a/client.js b/client.js
 +    return !hidden && typeof visit?.seen === "number" && own?.first !== void 0 && own.first <= visit.seen && own.end !== void 0 && own.end > visit.seen && own.end <= visit.entered;
 +  });
 +  return fresh ? (0, import_react9.createElement)(NewDivider) : null;
-+}
+ }
+-function SearchIcon() {
+-  return (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("circle", { cx: 8.5, cy: 8.5, r: 5.5, stroke: "currentColor", strokeWidth: 1.6, fill: "none" }), (0, import_react3.createElement)("path", { d: "M13 13l4 4", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round" }));
 +function Nothing() {
 +  return null;
-+}
+ }
+-function PeopleIcon() {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", "aria-hidden": true },
+-    (0, import_react3.createElement)("circle", { cx: 7.5, cy: 7, r: 3 }),
+-    (0, import_react3.createElement)("path", { d: "M2 16.5c.6-2.8 2.8-4.5 5.5-4.5s4.9 1.7 5.5 4.5" }),
+-    (0, import_react3.createElement)("path", { d: "M13 4.3a3 3 0 0 1 0 5.4M15 12.4c1.6.6 2.6 2 3 4.1" })
+-  );
 +var HIDDEN_REMOVED_TOOLS = /* @__PURE__ */ new Set(["ask_user_question"]);
 +var isConnectorTool = (name) => typeof name === "string" && /^mcp__(github|composio)__/.test(name);
 +var SILENT_REGISTRATION_TOOLS = /* @__PURE__ */ new Set([
@@ -7241,42 +7042,12 @@ diff --git a/client.js b/client.js
 +    if (isHiddenNotice(block)) continue;
 +    if (block?.type === "tool-removal" && block.toolName) parts.push(`Tool removed: ${block.toolName}`);
 +    else if (block?.type === "tool-addition" && block.toolName) parts.push(`Tool added: ${block.toolName}`);
-   }
--  return (0, import_react4.createElement)(
--    "div",
--    { className: "bt-q bt-q-settled", role: "group", "aria-label": prompt },
--    prompt ? (0, import_react4.createElement)("div", { className: "bt-q-head" }, (0, import_react4.createElement)("div", { className: "bt-q-text" }, (0, import_react4.createElement)("p", { className: "bt-q-title" }, prompt))) : null,
--    (0, import_react4.createElement)("div", { className: "bt-q-list", role: "group", "aria-label": t("Your answer") }, chosen.map((label, index) => {
--      const optionIndex = options.findIndex((option) => option.label === label);
--      return (0, import_react4.createElement)(
--        "div",
--        { key: `${label}-${index}`, className: "bt-q-opt" },
--        optionIndex >= 0 ? (0, import_react4.createElement)("span", { className: "bt-key", "aria-hidden": true }, keyLetter(optionIndex)) : null,
--        (0, import_react4.createElement)("span", { className: "bt-q-body" }, (0, import_react4.createElement)("span", { className: "bt-q-label" }, label)),
--        (0, import_react4.createElement)("span", { className: "bt-q-check", title: t("Selected") }, (0, import_react4.createElement)(CheckIcon))
--      );
--    }))
--  );
++  }
 +  if (parts.length === 0) return null;
 +  return (0, import_react9.createElement)("div", { className: "bt-event" }, parts.join(" · "));
  }
--function QuestionCard({ matched }) {
--  const pending = matched;
--  const questions = pending.questions ?? [];
--  const [index, setIndex] = (0, import_react4.useState)(0);
--  const [answers, setAnswers] = (0, import_react4.useState)([]);
--  const question = questions[index];
--  if (question === void 0) return null;
--  const onAnswer = (answer) => {
--    const next = [...answers, { id: question.id, ...answer }];
--    if (index + 1 < questions.length) {
--      setAnswers(next);
--      setIndex(index + 1);
--      return;
--    }
--    pending.answer({ answers: next });
--  };
--  return (0, import_react4.createElement)(QuestionView, { key: index, question, onAnswer, onDismiss: () => pending.dismiss(), ownAnswer: true, raised: true });
+-function ArrowUpIcon() {
+-  return (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M10 16V4M5 9l5-5 5 5", stroke: "currentColor", strokeWidth: 1.8, fill: "none", strokeLinecap: "round", strokeLinejoin: "round" }));
 +var SEPARATOR_GAP_MS = 30 * 60 * 1e3;
 +function clockLabel(time, now = Date.now()) {
 +  const date = new Date(time);
@@ -7288,21 +7059,12 @@ diff --git a/client.js b/client.js
 +  const sameYear = date.getFullYear() === new Date(now).getFullYear();
 +  return `${date.toLocaleDateString(dateLocale(), { weekday: "short", month: "short", day: "numeric", ...sameYear ? {} : { year: "numeric" } })} ${clock4}`;
  }
--function PendingQuestion({ sessionId, question, actions, inline }) {
--  const [answered, setAnswered] = (0, import_react4.useState)(null);
--  if (answered === question.id) return null;
--  const onAnswer = (answer) => {
--    setAnswered(question.id);
--    void actions.answerQuestion(sessionId, question.id, { selected: answer.selected ?? [], custom: answer.custom ?? "" }).catch(() => setAnswered(null));
--  };
--  const onDismiss = () => {
--    setAnswered(question.id);
--    void actions.dismissQuestion(sessionId);
--  };
--  return (0, import_react4.createElement)(
--    "div",
--    { className: inline ? "bt-q-inline" : "bt-q-dock" },
--    (0, import_react4.createElement)(QuestionView, { key: question.id, question, onAnswer, onDismiss, ownAnswer: question.allowCustom === true, raised: !inline })
+-function MicIcon({ size = 16 }) {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: size, height: size, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", "aria-hidden": true },
+-    (0, import_react3.createElement)("rect", { x: 7, y: 2.5, width: 6, height: 10, rx: 3, fill: "currentColor", stroke: "none" }),
+-    (0, import_react3.createElement)("path", { d: "M4.5 9.5a5.5 5.5 0 0 0 11 0M10 15v2.5" })
 -  );
 +function nextTurnStart(turns, turn) {
 +  let next;
@@ -7312,12 +7074,12 @@ diff --git a/client.js b/client.js
 +  }
 +  return next === void 0 ? void 0 : turns[next].first;
  }
--function QuestionDock({ sessionId, useRoster, useCards, useSession, actions }) {
--  const question = useRoster((value) => value.questions?.[sessionId]);
--  const drawn = useCards?.((state) => state[sessionId]?.[question?.callId] > 0) === true;
--  const loading = useSession?.(historyLoading) === true;
--  if (question === void 0 || question.callId && (drawn || loading)) return null;
--  return (0, import_react4.createElement)(PendingQuestion, { sessionId, question, actions, inline: false });
+-function WaveIcon({ size = 16 }) {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: size, height: size, viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": true },
+-    [[3, 7.5, 5], [6.5, 4.5, 11], [10, 2.5, 15], [13.5, 5.5, 9], [17, 8, 4]].map(([x, y, height]) => (0, import_react3.createElement)("rect", { key: x, x: x - 1, y, width: 2, height, rx: 1 }))
+-  );
 +function openingTurn(turns, firstTurns, hiddenTurns) {
 +  if (!turns || !firstTurns) return null;
 +  const start = nextTurnStart(turns, -Infinity);
@@ -7327,55 +7089,20 @@ diff --git a/client.js b/client.js
 +  const earlier = listed.filter((entry) => entry < turn);
 +  return listed.includes(turn) && earlier.every((entry) => hiddenTurns?.includes(entry)) ? { turn, start } : null;
  }
--function AnsweredCell({ node }) {
--  const data = node.data ?? {};
--  const questions = Array.isArray(data.questions) ? data.questions : [];
--  if (questions.length === 0) {
--    return data.text ? (0, import_react4.createElement)("div", { className: "bt-urow" }, (0, import_react4.createElement)("div", { className: "bt-ububble" }, data.text)) : null;
+-function ShareIcon() {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: 16, height: 16, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
+-    (0, import_react3.createElement)("path", { d: "M10 12.5V3M6.5 6.5L10 3l3.5 3.5M4 11v4.5A1.5 1.5 0 0 0 5.5 17h9a1.5 1.5 0 0 0 1.5-1.5V11" })
 +var unseenSince = (visit, time) => typeof visit?.seen === "number" && time > visit.seen && time <= visit.entered;
 +function movedOnSince(visit, turns, hiddenTurns) {
 +  if (typeof visit?.entered !== "number") return false;
 +  for (const key in turns ?? {}) {
 +    if (hiddenTurns?.includes(Number(key))) continue;
 +    if (turns[key].first !== void 0 && turns[key].first > visit.entered) return true;
-   }
--  const answers = Array.isArray(data.answers) ? data.answers : [];
--  return (0, import_react4.createElement)("div", { className: "bt-q-inline" }, questions.map((question) => (0, import_react4.createElement)(SettledQuestion, {
--    key: question.id,
--    question,
--    answer: answers.find((answer) => answer.id === question.id) ?? { selected: [] }
--  })));
++  }
 +  return false;
- }
--
--// src/client/secret-card.js
--var import_react5 = require("react");
--var MIN_VALUE = 4;
--var NONE = {};
--var KeyIcon = () => (0, import_react5.createElement)(
--  "svg",
--  { width: 15, height: 15, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
--  (0, import_react5.createElement)("path", { d: "M7 9.5a3.5 3.5 0 1 1 0 .01z" }),
--  (0, import_react5.createElement)("path", { d: "M10.4 10.6L17 10.6M14.5 10.6v2.4M16.6 10.6v1.8" })
--);
--var LockIcon = () => (0, import_react5.createElement)(
--  "svg",
--  { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
--  (0, import_react5.createElement)("path", { d: "M6.5 9V7a3.5 3.5 0 0 1 7 0v2" }),
--  (0, import_react5.createElement)("rect", { x: 4.5, y: 9, width: 11, height: 8, rx: 2 })
--);
--var WarnIcon = () => (0, import_react5.createElement)(
--  "svg",
--  { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
--  (0, import_react5.createElement)("path", { d: "M10 3.5l7 12.5H3z" }),
--  (0, import_react5.createElement)("path", { d: "M10 8.5v3.5M10 14.2h.01" })
--);
--var MASK_BY_CSS = typeof CSS !== "undefined" && typeof CSS.supports === "function" && CSS.supports("-webkit-text-security", "disc");
--var insecure = () => typeof location !== "undefined" && location.protocol === "http:" && !/^(localhost|127(?:\.\d{1,3}){3}|\[::1\])$/.test(location.hostname);
--var scopeLabel = (scope, roster) => {
--  if (scope === "all") return t("All Bots");
--  const names = (scope ?? []).map((id) => roster.byId[id]?.name).filter(Boolean);
--  return names.length === 0 ? t("No Bot") : names.join(t(" and "));
++}
 +var settledVisit = (visit) => typeof visit?.seen === "number" && visit.seen < visit.entered ? { ...visit, seen: visit.entered } : visit;
 +function TurnTailCell({ turn: location2, sessionId, useTurnClock, useUi, actions }) {
 +  const turn = location2.turn;
@@ -7399,38 +7126,60 @@ diff --git a/client.js b/client.js
 +    null,
 +    label ? (0, import_react9.createElement)("div", { className: "bt-time-sep", role: "separator" }, label) : null,
 +    fresh ? (0, import_react9.createElement)(NewDivider) : null
-+  );
-+}
+   );
+ }
+-function CloseIcon() {
+-  return (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M5 5l10 10M15 5L5 15", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round" }));
 +function Shimmer({ children }) {
 +  return (0, import_react9.createElement)("span", { className: "bt-shimmer" }, children);
-+}
+ }
+-var ChevronLeftIcon = () => (0, import_react3.createElement)("svg", { width: 16, height: 16, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M12.5 4.5L7 10l5.5 5.5" }));
+-var ChevronRightIcon = () => (0, import_react3.createElement)("svg", { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true }, (0, import_react3.createElement)("path", { d: "M7.5 4.5L13 10l-5.5 5.5" }));
+-var lineIcon = (paths) => function LineIcon() {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: 15, height: 15, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
+-    paths.map((d, index) => (0, import_react3.createElement)("path", { key: index, d }))
+-  );
 +var PHRASES = {
 +  thinking: ["Thinking about it", "Weighing the options", "Working out a plan", "Sorting out the details"],
 +  working: ["On it", "Busy with it", "Moving ahead", "Taking care of it", "Making headway"]
  };
--var when = (time) => Number.isFinite(time) ? new Date(time).toLocaleString(dateLocale(), { month: "short", day: "numeric", hour: "2-digit", minute: "2-digit" }) : "";
--function MaskedInput({ value, onChange, onEnter, label, autoFocus = false }) {
--  return (0, import_react5.createElement)("input", {
--    className: "bt-secret-input",
--    type: MASK_BY_CSS ? "text" : "password",
--    "data-masked": MASK_BY_CSS ? "" : void 0,
--    value,
--    autoFocus,
--    autoComplete: MASK_BY_CSS ? "off" : "new-password",
--    autoCorrect: "off",
--    autoCapitalize: "off",
--    spellCheck: false,
--    "data-1p-ignore": "",
--    "data-lpignore": "true",
--    "data-bwignore": "",
--    "data-form-type": "other",
--    "aria-label": label,
--    placeholder: t("Paste or type the key"),
--    onChange: (event) => onChange(event.target.value),
--    onKeyDown: (event) => {
--      if (event.key !== "Enter" || event.nativeEvent.isComposing) return;
--      event.preventDefault();
--      onEnter?.();
+-var CLOUD = "M6.5 15.25H5.75a3.25 3.25 0 0 1-.55-6.45 4.75 4.75 0 0 1 9.2-1.1 3.75 3.75 0 0 1 .1 7.55H13.5";
+-function CloudDownloadIcon({ done = false }) {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: 16, height: 16, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
+-    (0, import_react3.createElement)("path", { d: CLOUD }),
+-    done ? (0, import_react3.createElement)("path", { d: "M7.75 13.25l1.75 1.75 3-3.25" }) : (0, import_react3.createElement)("g", { className: "bt-cloud-arrow" }, (0, import_react3.createElement)("path", { d: "M10 9.75v7" }), (0, import_react3.createElement)("path", { d: "M7.75 14.5L10 16.75l2.25-2.25" }))
+-  );
+-}
+-var SmileIcon = lineIcon(["M10 3.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13z", "M7.3 11.6a3.4 3.4 0 0 0 5.4 0", "M7.75 8.25h.01M12.25 8.25h.01"]);
+-var ReplyIcon = lineIcon(["M8 5L4 9l4 4", "M4 9h7.5a4.5 4.5 0 0 1 4.5 4.5V15"]);
+-var DotsIcon = lineIcon(["M5 10h.01M10 10h.01M15 10h.01"]);
+-var CheckIcon = lineIcon(["M4.5 10.5l3.5 3.5 7.5-8"]);
+-var ArrowDownIcon = lineIcon(["M10 4v12", "M5 11l5 5 5-5"]);
+-var DownloadIcon = lineIcon(["M10 3.5v9", "M6.5 9.5L10 13l3.5-3.5", "M4 16h12"]);
+-var GaugeIcon = lineIcon(["M3.5 13.5a6.5 6.5 0 1 1 13 0", "M10 13.5l3-4", "M10 13.5h.01"]);
+-var PlugIcon = lineIcon(["M7 3v4M13 3v4", "M5 7h10v2.5a5 5 0 0 1-10 0z", "M10 14.5V17"]);
+-var CalendarIcon = lineIcon(["M5.5 5h9A1.5 1.5 0 0 1 16 6.5v8a1.5 1.5 0 0 1-1.5 1.5h-9A1.5 1.5 0 0 1 4 14.5v-8A1.5 1.5 0 0 1 5.5 5z", "M4 8.75h12", "M7.25 3.5v3M12.75 3.5v3"]);
+-var ConnectorIcon = lineIcon(["M7 10a2.5 2.5 0 1 1-5 0 2.5 2.5 0 0 1 5 0z", "M18 10a2.5 2.5 0 1 1-5 0 2.5 2.5 0 0 1 5 0z", "M7 10h6"]);
+-var SwitchIcon = lineIcon(["M4 7h9.5M10.5 3.5L14 7l-3.5 3.5", "M16 13H6.5M9.5 9.5L6 13l3.5 3.5"]);
+-var PaperclipIcon = lineIcon(["M15.5 9.5l-5.6 5.6a3.4 3.4 0 0 1-4.8-4.8l6.1-6.1a2.25 2.25 0 0 1 3.2 3.2l-6 6a1.1 1.1 0 0 1-1.6-1.6l5.5-5.5"]);
+-var ClockIcon = lineIcon(["M10 3.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13z", "M10 6.5V10l2.5 1.5"]);
+-var GearIcon = lineIcon(["M10 7.4a2.6 2.6 0 1 1 0 5.2 2.6 2.6 0 0 1 0-5.2z", "M7.85 4.4l.29-1.87a7.7 7.7 0 0 1 3.72 0l.29 1.87a6 6 0 0 1 1.63.94l1.76-.69a7.7 7.7 0 0 1 1.86 3.23l-1.47 1.18a6 6 0 0 1 0 1.88l1.47 1.18a7.7 7.7 0 0 1-1.86 3.23l-1.76-.69a6 6 0 0 1-1.63.94l-.29 1.87a7.7 7.7 0 0 1-3.72 0l-.29-1.87a6 6 0 0 1-1.63-.94l-1.76.69a7.7 7.7 0 0 1-1.86-3.23l1.47-1.18a6 6 0 0 1 0-1.88L2.6 7.88a7.7 7.7 0 0 1 1.86-3.23l1.76.69a6 6 0 0 1 1.63-.94z"]);
+-var PinIcon = lineIcon(["M12.5 3l4.5 4.5-3 1.5-2.5 2.5.5 3.5-1.5 1.5L7 13 3.5 16.5", "M7 13l-3.5-3.5L5 8l3.5.5L11 6l1.5-3"]);
+-function PinMarkIcon() {
+-  return (0, import_react3.createElement)(
+-    "svg",
+-    { width: 12, height: 12, viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": true },
+-    (0, import_react3.createElement)(
+-      "g",
+-      { transform: "rotate(45 10 10)" },
+-      (0, import_react3.createElement)("path", { d: "M8 2.5h4a.9.9 0 0 1 0 1.8h-.4v4.1c0 1.4 1.1 2.6 2.6 3.1l.7.3v1.5H5.1v-1.5l.7-.3c1.5-.5 2.6-1.7 2.6-3.1V4.3H8a.9.9 0 0 1 0-1.8z" }),
+-      (0, import_react3.createElement)("path", { d: "M9.35 13.3h1.3v3.6L10 18l-.65-1.1z" })
+-    )
+-  );
 +var TOOL_PHRASES = [
 +  [/web_?search|search_?web/i, "Searching online"],
 +  [/fetch|browse|browser|web/i, "Reading a page"],
@@ -7456,8 +7205,7 @@ diff --git a/client.js b/client.js
 +    case "message_bot": {
 +      const target = findBot(arg("to"));
 +      return { label: target ? t("Asking {name}", { name: target.name }) : t("Asking another Bot"), state: "sending" };
-     }
--  });
++    }
 +    case "stop_bot": {
 +      const target = findBot(arg("bot"));
 +      return { label: target ? t("Stopping {name}", { name: target.name }) : t("Stopping another Bot"), state: "sending" };
@@ -7486,99 +7234,48 @@ diff --git a/client.js b/client.js
 +      return { label: phrase ? t(phrase) : null, state: toolState(name) };
 +  }
  }
--function ScopeSwitch({ value, onChange, bot }) {
--  const options = [["all", t("All Bots")], ["bot", t("Only {name}", { name: bot.name })]];
--  return (0, import_react5.createElement)(
--    "div",
--    { className: "bt-secret-scope", role: "radiogroup", "aria-label": t("Who may use it") },
--    (0, import_react5.createElement)("span", { className: "bt-secret-glide", "data-at": value === "all" ? 0 : 1, "aria-hidden": true }),
--    options.map(([id, text]) => (0, import_react5.createElement)("button", {
--      key: id,
--      type: "button",
--      role: "radio",
--      "aria-checked": value === id,
--      className: "bt-secret-seg",
--      onClick: () => onChange(id)
--    }, text))
--  );
-+function workPhrase(tool) {
-+  if (!tool) return t("Thinking about it");
-+  return toolActivity(tool, () => void 0, () => void 0)?.label ?? t("Using {tool}", { tool });
- }
--function SecretHead({ bot, title, detail, name, onClose }) {
--  return (0, import_react5.createElement)(
--    "div",
--    { className: "bt-q-head bt-secret-head" },
--    (0, import_react5.createElement)("span", { className: "bt-secret-who" }, (0, import_react5.createElement)(BotMark, { bot, size: 28 }), (0, import_react5.createElement)("span", { className: "bt-secret-lock" }, (0, import_react5.createElement)(LockIcon))),
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-q-text" },
--      (0, import_react5.createElement)("p", { className: "bt-q-title" }, title),
--      (0, import_react5.createElement)("div", { className: "bt-q-detail" }, (0, import_react5.createElement)("code", { className: "bt-secret-name" }, name), detail ? ` · ${detail}` : "")
--    ),
--    onClose ? (0, import_react5.createElement)("button", { type: "button", className: "bt-q-x", "aria-label": t("Cancel the request"), title: t("Cancel"), onClick: onClose }, (0, import_react5.createElement)(CloseIcon)) : null
--  );
-+function workText(tool, step) {
-+  return step ? t("{action}: {detail}", { action: workPhrase(tool), detail: step }) : `${workPhrase(tool)}…`;
- }
--function SecretCard({ bot, request, roster, actions }) {
--  const [value, setValue] = (0, import_react5.useState)("");
--  const [scope, setScope] = (0, import_react5.useState)("all");
--  const [replacing, setReplacing] = (0, import_react5.useState)(false);
--  const [busy, setBusy] = (0, import_react5.useState)(false);
--  const [error, setError] = (0, import_react5.useState)("");
--  const noteId = (0, import_react5.useId)();
--  const secret = (roster.secrets ?? []).find((entry) => entry.name === request.name);
--  const run = (promise) => {
--    setBusy(true);
--    setError("");
--    return Promise.resolve(promise).then(() => setValue(""), (failure) => setError(failure?.message ?? String(failure))).finally(() => setBusy(false));
--  };
--  const cancel = () => run(actions.secretCancel(request.id));
--  const long = value.trim().length >= MIN_VALUE;
--  const save = () => {
--    if (long && !busy) void run(actions.secretSet({ requestId: request.id, value, scope }));
--  };
--  const allow = () => {
--    if (!busy) void run(actions.secretAllow(request.id));
--  };
--  const filling = request.kind === "fill" || replacing;
--  const warn = insecure() ? (0, import_react5.createElement)("div", { className: "bt-secret-warn", role: "note" }, (0, import_react5.createElement)(WarnIcon), t("This page is not on HTTPS: the key crosses the network unencrypted.")) : null;
--  return (0, import_react5.createElement)(
--    "div",
--    { className: "bt-q bt-secret", role: "group", "aria-describedby": noteId, "data-kind": request.kind },
--    (0, import_react5.createElement)(SecretHead, {
--      bot,
--      title: request.kind === "allow" ? t("Let {bot} use {name}?", { bot: bot.name, name: request.name }) : t("{name} needs a key", { name: bot.name }),
--      detail: request.purpose,
--      name: request.name,
--      onClose: busy ? void 0 : cancel
--    }),
--    request.kind === "allow" ? (0, import_react5.createElement)("div", { className: "bt-secret-saved" }, (0, import_react5.createElement)(KeyIcon), t("Saved for {scope}", { scope: scopeLabel(secret?.scope, roster) })) : null,
--    filling ? (0, import_react5.createElement)(
--      "div",
--      { className: "bt-secret-body" },
--      (0, import_react5.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react5.createElement)(MaskedInput, { value, onChange: setValue, onEnter: save, label: t("Value of {name}", { name: request.name }), autoFocus: replacing })),
--      request.kind === "fill" ? (0, import_react5.createElement)(ScopeSwitch, { value: scope, onChange: setScope, bot }) : null
--    ) : null,
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-secret-note", id: noteId },
--      t("{bot} never sees the value. It reaches {bot}'s shell as ", { bot: bot.name }),
--      (0, import_react5.createElement)("code", null, `$DSH_SECRET_${request.name}`),
--      ".",
--      filling && value !== "" && !long ? t(" At least {count} characters.", { count: MIN_VALUE }) : ""
--    ),
--    warn,
--    error ? (0, import_react5.createElement)("div", { className: "bt-secret-error", role: "alert" }, error) : null,
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-q-foot" },
--      request.kind === "allow" && !replacing ? (0, import_react5.createElement)("button", { type: "button", className: "bt-q-btn", disabled: busy, onClick: () => setReplacing(true) }, t("Replace value")) : null,
--      (0, import_react5.createElement)("button", { type: "button", className: "bt-q-btn", disabled: busy, onClick: cancel }, t("Cancel")),
--      filling ? (0, import_react5.createElement)("button", { type: "button", className: "bt-q-submit", disabled: !long || busy, onClick: save }, busy ? t("Saving…") : t("Save")) : (0, import_react5.createElement)("button", { type: "button", className: "bt-q-submit", disabled: busy, onClick: allow }, busy ? t("Allowing…") : t("Allow"))
--    )
--  );
+-var UnreadIcon = lineIcon(["M10 3.5a4.5 4.5 0 0 0-4.5 4.5v3L4 13.5h12L14.5 11V8", "M8.3 16a1.8 1.8 0 0 0 3.4 0", "M15.5 3.2a1.6 1.6 0 1 1 0 3.2 1.6 1.6 0 0 1 0-3.2z"]);
+-var PencilIcon = lineIcon(["M9 4H6a2 2 0 0 0-2 2v8a2 2 0 0 0 2 2h8a2 2 0 0 0 2-2v-3", "M14.3 3.7a1.6 1.6 0 0 1 2.3 2.3L10.5 12l-3 .8.8-3z"]);
+-var InfoIcon = lineIcon(["M10 3.5a6.5 6.5 0 1 1 0 13 6.5 6.5 0 0 1 0-13z", "M10 9.25v4", "M10 6.6h.01"]);
+-var StarLineIcon = lineIcon(["M10 3l2.1 4.3 4.7.7-3.4 3.3.8 4.7L10 13.8 5.8 16l.8-4.7L3.2 8l4.7-.7z"]);
+-var CopyIcon = lineIcon(["M8.5 7h6A1.5 1.5 0 0 1 16 8.5v6a1.5 1.5 0 0 1-1.5 1.5h-6A1.5 1.5 0 0 1 7 14.5v-6A1.5 1.5 0 0 1 8.5 7z", "M4 12.5V5.5A1.5 1.5 0 0 1 5.5 4H13"]);
+-var HideIcon = lineIcon(["M3 3l14 14", "M8.6 5.2A7.6 7.6 0 0 1 10 5c4.5 0 7 5 7 5a12.6 12.6 0 0 1-2 2.6M12.2 14.5A6.8 6.8 0 0 1 10 15c-4.5 0-7-5-7-5a12.4 12.4 0 0 1 3-3.4", "M8.5 8.5a2 2 0 0 0 3 3"]);
+-var TrashIcon = lineIcon(["M3.5 5.5h13", "M8 5.5V4a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1v1.5", "M5 5.5l.7 10A1.5 1.5 0 0 0 7.2 17h5.6a1.5 1.5 0 0 0 1.5-1.5l.7-10", "M8.5 9v4.5M11.5 9v4.5"]);
+-var DuplicateIcon = lineIcon(["M7 7h8.5v9.5H7z", "M4.5 13V3.5H13", "M11.25 9.5v4.5M9 11.75h4.5"]);
+-var SlidersIcon = lineIcon(["M4 6.5h5M12.5 6.5H16M4 13.5h4M11.5 13.5H16", "M10.5 4.5v4M9.5 11.5v4"]);
+-var MemoryIcon = lineIcon(["M5.5 3.5h8A1.5 1.5 0 0 1 15 5v10a1.5 1.5 0 0 1-1.5 1.5h-8z", "M5.5 3.5v13", "M8.5 7.5h3.5M8.5 10.5h2.5", "M12 3.5v4l1-.8 1 .8"]);
+-var FolderIcon = lineIcon(["M3 6A1.5 1.5 0 0 1 4.5 4.5h3.2l1.8 2h6A1.5 1.5 0 0 1 17 8v6.5a1.5 1.5 0 0 1-1.5 1.5h-11A1.5 1.5 0 0 1 3 14.5z"]);
+-var ChatsIcon = lineIcon(["M3.5 5.5A1.5 1.5 0 0 1 5 4h7a1.5 1.5 0 0 1 1.5 1.5V10A1.5 1.5 0 0 1 12 11.5H8L5 14v-2.5A1.5 1.5 0 0 1 3.5 10z", "M13.5 7.5H15A1.5 1.5 0 0 1 16.5 9v4.5A1.5 1.5 0 0 1 15 15v2l-2.5-2h-3A1.5 1.5 0 0 1 8 13.5V13"]);
+-var SETTINGS_ICONS = { general: GearIcon, bots: PeopleIcon, groups: ChatsIcon, usage: GaugeIcon };
+-
+-// src/client/questions.js
+-var import_react4 = require("react");
+-var keyLetter = (index) => String.fromCharCode(65 + index);
+-var optionsOf = (question) => (question?.options ?? []).map((option) => typeof option === "string" ? { label: option } : option);
+-var isTypingTarget = (node) => node instanceof HTMLInputElement || node instanceof HTMLTextAreaElement || node instanceof HTMLSelectElement || node instanceof HTMLElement && node.isContentEditable;
+-function useOptionKeys(count, onPick, ownRef) {
+-  const pick2 = (0, import_react4.useRef)(onPick);
+-  pick2.current = onPick;
+-  (0, import_react4.useEffect)(() => {
+-    if (count === 0) return void 0;
+-    const onKey = (event) => {
+-      if (event.defaultPrevented || event.metaKey || event.ctrlKey || event.altKey || event.shiftKey || event.key.length !== 1) return;
+-      if (isTypingTarget(event.target) || isTypingTarget(document.activeElement)) return;
+-      if (document.querySelector('[role="dialog"], [aria-modal="true"]') !== null) return;
+-      const index = event.key.toUpperCase().charCodeAt(0) - 65;
+-      if (index >= 0 && index < count) {
+-        event.preventDefault();
+-        pick2.current(index);
+-      } else if (index === count && ownRef.current) {
+-        event.preventDefault();
+-        ownRef.current.focus();
++function workPhrase(tool) {
++  if (!tool) return t("Thinking about it");
++  return toolActivity(tool, () => void 0, () => void 0)?.label ?? t("Using {tool}", { tool });
++}
++function workText(tool, step) {
++  return step ? t("{action}: {detail}", { action: workPhrase(tool), detail: step }) : `${workPhrase(tool)}…`;
++}
 +function useLiveNote(actions, sessionId, id, entry) {
 +  const key = entry ? JSON.stringify(entry) : "";
 +  (0, import_react9.useEffect)(() => {
@@ -7586,11 +7283,7 @@ diff --git a/client.js b/client.js
 +    actions.noteLive(sessionId, id, JSON.parse(key));
 +    return () => actions.noteLive(sessionId, id, null);
 +  }, [sessionId, id, key]);
- }
--function SettledSecret({ bot, request, roster }) {
--  const canceled = request.status === "canceled";
--  const text = canceled ? t("{bot} asked for {name}", { bot: bot.name, name: request.name }) : request.status === "allowed" ? t("Allowed {bot} to use {name}", { bot: bot.name, name: request.name }) : t("Saved {name}", { name: request.name });
--  return (0, import_react5.createElement)(
++}
 +function GroupReplies({ sessionId, callId, done, content, roster, actions, useUi }) {
 +  const [live, setLive] = (0, import_react9.useState)({ replies: [] });
 +  (0, import_react9.useEffect)(() => {
@@ -7606,9 +7299,50 @@ diff --git a/client.js b/client.js
 +      if (entry && key !== seen) {
 +        seen = key;
 +        setLive({ replies: entry.replies ?? [] });
-+      }
+       }
 +      timer = setTimeout(tick, document.hidden ? 5e3 : 1e3);
-+    };
+     };
+-    document.addEventListener("keydown", onKey, true);
+-    return () => document.removeEventListener("keydown", onKey, true);
+-  }, [count, ownRef]);
+-}
+-function QuestionView({ question, onAnswer, onDismiss, ownAnswer = false, raised = false }) {
+-  const [own, setOwn] = (0, import_react4.useState)("");
+-  const [picked, setPicked] = (0, import_react4.useState)([]);
+-  const ownRef = (0, import_react4.useRef)(null);
+-  const titleId = (0, import_react4.useId)();
+-  const options = optionsOf(question);
+-  const multi = question.multiSelect === true;
+-  const custom = own.trim();
+-  const canSubmit = multi ? picked.length > 0 || custom !== "" : custom !== "";
+-  const choose = (label) => {
+-    if (multi) {
+-      setPicked((current) => current.includes(label) ? current.filter((item) => item !== label) : [...current, label]);
+-      return;
+-    }
+-    onAnswer({ selected: [label] });
+-  };
+-  const submit = () => {
+-    if (!canSubmit) return;
+-    onAnswer({ selected: multi ? picked : [], ...custom ? { custom } : {} });
+-  };
+-  useOptionKeys(options.length, (index) => choose(options[index].label), ownRef);
+-  const ownLetter = options.length > 0 ? keyLetter(options.length) : void 0;
+-  const field = ownAnswer ? (0, import_react4.createElement)("textarea", {
+-    ref: ownRef,
+-    rows: 1,
+-    value: own,
+-    autoComplete: "off",
+-    spellCheck: false,
+-    className: "bt-q-input",
+-    "aria-label": t("Your own answer"),
+-    placeholder: t("Type your own answer"),
+-    "aria-keyshortcuts": ownLetter?.toLowerCase(),
+-    onChange: (event) => setOwn(event.target.value),
+-    onKeyDown: (event) => {
+-      if (event.key !== "Enter" || event.shiftKey || event.nativeEvent.isComposing) return;
+-      event.preventDefault();
+-      submit();
 +    void tick();
 +    return () => {
 +      stop = true;
@@ -7621,25 +7355,61 @@ diff --git a/client.js b/client.js
 +      replies = JSON.parse(contentText(content)).replies ?? [];
 +    } catch {
 +      replies = [];
-+    }
-+  }
+     }
+-  }) : null;
+-  const rows = options.map((option, optionIndex) => {
+-    const selected = multi && picked.includes(option.label);
+-    return (0, import_react4.createElement)(
+-      "button",
+-      {
+-        key: option.label,
+-        type: "button",
+-        className: "bt-q-opt",
+-        "aria-pressed": multi ? selected : void 0,
+-        "aria-keyshortcuts": keyLetter(optionIndex).toLowerCase(),
+-        onClick: () => choose(option.label)
+-      },
+-      (0, import_react4.createElement)("span", { className: "bt-key", "aria-hidden": true }, keyLetter(optionIndex)),
+-      (0, import_react4.createElement)(
+-        "span",
+-        { className: "bt-q-body" },
+-        (0, import_react4.createElement)("span", { className: "bt-q-label" }, option.label),
+-        option.description ? (0, import_react4.createElement)("span", { className: "bt-q-desc" }, option.description) : null
+-      ),
+-      selected && !raised ? (0, import_react4.createElement)("span", { className: "bt-q-check", title: t("Selected") }, (0, import_react4.createElement)(CheckIcon)) : null
+-    );
+-  });
+-  if (raised && field) {
+-    rows.push((0, import_react4.createElement)(
+-      "label",
+-      { key: "own", className: "bt-q-opt bt-q-ownrow", "data-filled": custom !== "" ? "" : void 0 },
+-      ownLetter ? (0, import_react4.createElement)("span", { className: "bt-key", "aria-hidden": true }, ownLetter) : null,
+-      (0, import_react4.createElement)("span", { className: "bt-q-body" }, field)
+-    ));
+-  }
+-  let foot = null;
+-  if (raised && multi) {
+-    foot = (0, import_react4.createElement)(
+-      "div",
+-      { className: "bt-q-foot" },
+-      (0, import_react4.createElement)("button", { type: "button", className: "bt-q-btn", onClick: onDismiss }, t("Skip")),
+-      (0, import_react4.createElement)("button", { type: "submit", className: "bt-q-submit", disabled: !canSubmit }, t("Submit"))
+-    );
+-  } else if ((raised || multi) && canSubmit) {
+-    foot = (0, import_react4.createElement)("div", { className: "bt-q-foot" }, (0, import_react4.createElement)("button", { type: "submit", className: "bt-q-submit" }, t("Submit")));
+   }
+-  return (0, import_react4.createElement)(
+-    "form",
+-    {
+-      className: raised ? "bt-q bt-q-raised" : "bt-q",
+-      "aria-labelledby": titleId,
+-      onSubmit: (event) => {
+-        event.preventDefault();
+-        submit();
 +  if (replies.length === 0) return null;
 +  const room2 = roster.roomsById[sessionId];
 +  return (0, import_react9.createElement)(
-     "div",
--    { className: "bt-q bt-q-settled bt-secret bt-secret-done", role: "group", "aria-label": text, "data-status": request.status },
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-q-head" },
--      (0, import_react5.createElement)("span", { className: "bt-secret-who" }, (0, import_react5.createElement)(BotMark, { bot, size: 22 })),
--      (0, import_react5.createElement)("div", { className: "bt-q-text" }, (0, import_react5.createElement)(
--        "p",
--        { className: "bt-q-title" },
--        text,
--        canceled ? null : (0, import_react5.createElement)("span", { className: "bt-secret-scope-tag" }, ` · ${scopeLabel(request.scope, roster)}`)
--      )),
--      canceled ? (0, import_react5.createElement)("span", { className: "bt-q-badge" }, t("Canceled")) : (0, import_react5.createElement)("span", { className: "bt-q-check bt-secret-check", title: t("Done") }, (0, import_react5.createElement)(CheckIcon))
--    )
++    "div",
 +    { className: "bt-group-replies" },
 +    replies.map((reply, index) => {
 +      const stored = roster.byId[reply.botId];
@@ -7661,7 +7431,28 @@ diff --git a/client.js b/client.js
 +          ),
 +          room2?.origin === "face-to-face" ? (0, import_react9.createElement)("span", { className: "bt-lead", title: who || void 0 }, (0, import_react9.createElement)(PersonMark, { name: who || void 0 })) : null
 +        );
-+      }
+       }
+-    },
+-    (0, import_react4.createElement)(
+-      "div",
+-      { className: "bt-q-head" },
+-      (0, import_react4.createElement)(
+-        "div",
+-        { className: "bt-q-text" },
+-        (0, import_react4.createElement)("p", { className: "bt-q-title", id: titleId }, question.header ? `${question.header} · ` : "", question.question),
+-        question.detail ? (0, import_react4.createElement)("div", { className: "bt-q-detail" }, question.detail) : null,
+-        raised && multi ? (0, import_react4.createElement)("div", { className: "bt-q-detail" }, t("Choose all that apply")) : null
+-      ),
+-      (0, import_react4.createElement)("button", { type: "button", className: "bt-q-x", "aria-label": t("Dismiss question"), title: t("Dismiss"), onClick: onDismiss }, (0, import_react4.createElement)(CloseIcon))
+-    ),
+-    rows.length > 0 ? (0, import_react4.createElement)("div", { className: "bt-q-list", role: "group" }, rows) : null,
+-    field && !raised ? (0, import_react4.createElement)(
+-      "div",
+-      { className: "bt-q-custom" },
+-      (0, import_react4.createElement)("label", { className: "bt-q-field" }, field),
+-      !multi && canSubmit ? (0, import_react4.createElement)("button", { type: "submit", className: "bt-q-submit" }, t("Submit")) : null
+-    ) : null,
+-    foot
 +      if (reply.kind === "failed") {
 +        return (0, import_react9.createElement)(
 +          "div",
@@ -7722,8 +7513,37 @@ diff --git a/client.js b/client.js
 +    })
    );
  }
--function RequestView({ bot, request, roster, actions }) {
--  return request.status === "pending" ? (0, import_react5.createElement)(SecretCard, { key: `${request.id}:${request.kind}`, bot, request, roster, actions }) : (0, import_react5.createElement)(SettledSecret, { bot, request, roster });
+-function SettledQuestion({ question, answer }) {
+-  const options = optionsOf(question);
+-  const prompt = question?.question ?? "";
+-  const chosen = [...answer.selected ?? [], ...answer.custom ? [answer.custom] : []];
+-  if (chosen.length === 0) {
+-    return (0, import_react4.createElement)(
+-      "div",
+-      { className: "bt-q bt-q-settled bt-q-dismissed", role: "group", "aria-label": prompt },
+-      (0, import_react4.createElement)(
+-        "div",
+-        { className: "bt-q-head" },
+-        (0, import_react4.createElement)("div", { className: "bt-q-text" }, (0, import_react4.createElement)("p", { className: "bt-q-title" }, prompt)),
+-        (0, import_react4.createElement)("span", { className: "bt-q-badge" }, t("Dismissed"))
+-      )
+-    );
+-  }
+-  return (0, import_react4.createElement)(
+-    "div",
+-    { className: "bt-q bt-q-settled", role: "group", "aria-label": prompt },
+-    prompt ? (0, import_react4.createElement)("div", { className: "bt-q-head" }, (0, import_react4.createElement)("div", { className: "bt-q-text" }, (0, import_react4.createElement)("p", { className: "bt-q-title" }, prompt))) : null,
+-    (0, import_react4.createElement)("div", { className: "bt-q-list", role: "group", "aria-label": t("Your answer") }, chosen.map((label, index) => {
+-      const optionIndex = options.findIndex((option) => option.label === label);
+-      return (0, import_react4.createElement)(
+-        "div",
+-        { key: `${label}-${index}`, className: "bt-q-opt" },
+-        optionIndex >= 0 ? (0, import_react4.createElement)("span", { className: "bt-key", "aria-hidden": true }, keyLetter(optionIndex)) : null,
+-        (0, import_react4.createElement)("span", { className: "bt-q-body" }, (0, import_react4.createElement)("span", { className: "bt-q-label" }, label)),
+-        (0, import_react4.createElement)("span", { className: "bt-q-check", title: t("Selected") }, (0, import_react4.createElement)(CheckIcon))
+-      );
+-    }))
+-  );
 +var DRAWN = /* @__PURE__ */ new Set(["message_bot", "stop_bot", "create_bot", "update_bot", "group_relay", "create_group", "update_group", "delete_group", "post_to_group", "ask_user", "request_secret", "ask_user_question", "read_group_chat", "remember", "forget"]);
 +var CARDS = /* @__PURE__ */ new Set(["ask_user", "request_secret"]);
 +function callTree(root) {
@@ -7739,13 +7559,19 @@ diff --git a/client.js b/client.js
 +  visit(root);
 +  return calls;
  }
--function SecretToolCell({ sessionId, callId, name, done, content, roster, actions }) {
--  const bot = roster.byId[sessionId];
--  if (!bot) return null;
--  const request = (roster.secretRequests?.[bot.id] ?? []).find((entry) => entry.callId === callId && (entry.sessionId ?? sessionId) === sessionId);
--  if (request) return (0, import_react5.createElement)("div", { className: "bt-q-inline" }, (0, import_react5.createElement)(RequestView, { bot, request, roster, actions }));
--  if (done && /already saved/.test(contentText(content))) {
--    return (0, import_react5.createElement)("div", { className: "bt-event" }, (0, import_react5.createElement)("span", { className: "bt-secret-event" }, (0, import_react5.createElement)(KeyIcon), t("{bot} is using {name}", { bot: bot.name, name: name ?? t("a saved key") })));
+-function QuestionCard({ matched }) {
+-  const pending = matched;
+-  const questions = pending.questions ?? [];
+-  const [index, setIndex] = (0, import_react4.useState)(0);
+-  const [answers, setAnswers] = (0, import_react4.useState)([]);
+-  const question = questions[index];
+-  if (question === void 0) return null;
+-  const onAnswer = (answer) => {
+-    const next = [...answers, { id: question.id, ...answer }];
+-    if (index + 1 < questions.length) {
+-      setAnswers(next);
+-      setIndex(index + 1);
+-      return;
 +function useShownCards(actions, sessionId, callIds) {
 +  const key = JSON.stringify(callIds);
 +  (0, import_react9.useLayoutEffect)(() => {
@@ -7765,7 +7591,10 @@ diff --git a/client.js b/client.js
 +      const target = findBot(arg("to")) ?? { name: arg("to") ?? "…", color: "gray" };
 +      if (done && call4.isError) return (0, import_react9.createElement)("div", { className: "bt-event" }, t("Couldn't message {name}", { name: target.name }));
 +      return (0, import_react9.createElement)(EventLine, { prefix: t("Messaged"), bots: [target], onOpen: (bot) => bot.id && actions.openExchange(self?.id ?? sessionId, bot.id), whole: true });
-+    }
+     }
+-    pending.answer({ answers: next });
+-  };
+-  return (0, import_react4.createElement)(QuestionView, { key: index, question, onAnswer, onDismiss: () => pending.dismiss(), ownAnswer: true, raised: true });
 +    case "stop_bot": {
 +      const target = findBot(arg("bot")) ?? { name: arg("bot") ?? "…", color: "gray" };
 +      if (done && call4.isError) return (0, import_react9.createElement)("div", { className: "bt-event" }, t("Couldn't stop {name}", { name: target.name }));
@@ -7830,20 +7659,26 @@ diff --git a/client.js b/client.js
 +      return done && !call4.isError ? (0, import_react9.createElement)(MemoryEvent, { sessionId, scope: arg("scope"), result: contentText(call4.content), roster, actions, findBot }) : null;
 +    default:
 +      return null;
-   }
--  return null;
++  }
  }
--function SecretDock({ sessionId, useRoster, useCards, useSession, actions }) {
-+function ToolCell({ node, sessionId, useRoster, useUi, actions }) {
-   const roster = useRoster((value) => value);
--  const shown = useCards?.((state) => state[sessionId]) ?? NONE;
--  const loading = useSession?.(historyLoading) === true;
--  const bot = roster.byId[sessionId];
--  if (!bot || currentPart(bot) !== sessionId) return null;
--  const drawn = (entry) => entry.callId && entry.sessionId === sessionId && (loading || shown[entry.callId] > 0);
--  const waiting = (roster.secretRequests?.[bot.id] ?? []).filter((entry) => entry.status === "pending" && !drawn(entry));
--  if (waiting.length === 0) return null;
--  return (0, import_react5.createElement)("div", { className: "bt-q-dock bt-secret-dock" }, waiting.map((request) => (0, import_react5.createElement)(SecretCard, { key: `${request.id}:${request.kind}`, bot, request, roster, actions })));
+-function PendingQuestion({ sessionId, question, actions, inline }) {
+-  const [answered, setAnswered] = (0, import_react4.useState)(null);
+-  if (answered === question.id) return null;
+-  const onAnswer = (answer) => {
+-    setAnswered(question.id);
+-    void actions.answerQuestion(sessionId, question.id, { selected: answer.selected ?? [], custom: answer.custom ?? "" }).catch(() => setAnswered(null));
+-  };
+-  const onDismiss = () => {
+-    setAnswered(question.id);
+-    void actions.dismissQuestion(sessionId);
+-  };
+-  return (0, import_react4.createElement)(
+-    "div",
+-    { className: inline ? "bt-q-inline" : "bt-q-dock" },
+-    (0, import_react4.createElement)(QuestionView, { key: question.id, question, onAnswer, onDismiss, ownAnswer: question.allowCustom === true, raised: !inline })
+-  );
++function ToolCell({ node, sessionId, useRoster, useUi, actions }) {
++  const roster = useRoster((value) => value);
 +  const root = node.data.root;
 +  const turn = node.location?.turn?.turn ?? root.turn;
 +  const hidden = isHiddenTurn(roster, sessionId, turn);
@@ -7857,7 +7692,13 @@ diff --git a/client.js b/client.js
 +  if (drawn.length === 0) return null;
 +  const env = { sessionId, roster, actions, useUi, findBot };
 +  return (0, import_react9.createElement)(import_react9.Fragment, null, drawn.map((call4, index) => (0, import_react9.createElement)(import_react9.Fragment, { key: call4.callId ?? index }, renderCall(call4, env))));
-+}
+ }
+-function QuestionDock({ sessionId, useRoster, useCards, useSession, actions }) {
+-  const question = useRoster((value) => value.questions?.[sessionId]);
+-  const drawn = useCards?.((state) => state[sessionId]?.[question?.callId] > 0) === true;
+-  const loading = useSession?.(historyLoading) === true;
+-  if (question === void 0 || question.callId && (drawn || loading)) return null;
+-  return (0, import_react4.createElement)(PendingQuestion, { sessionId, question, actions, inline: false });
 +
 +// src/client/awaiting.js
 +var AWAIT_REPLY_MS = 10 * 60 * 1e3;
@@ -7865,7 +7706,19 @@ diff --git a/client.js b/client.js
 +  const at = roster?.remoteAwaiting?.[sessionId];
 +  if (typeof at !== "number" || roster?.byId?.[sessionId]?.remote === void 0) return false;
 +  return now - at < AWAIT_REPLY_MS;
-+}
+ }
+-function AnsweredCell({ node }) {
+-  const data = node.data ?? {};
+-  const questions = Array.isArray(data.questions) ? data.questions : [];
+-  if (questions.length === 0) {
+-    return data.text ? (0, import_react4.createElement)("div", { className: "bt-urow" }, (0, import_react4.createElement)("div", { className: "bt-ububble" }, data.text)) : null;
+-  }
+-  const answers = Array.isArray(data.answers) ? data.answers : [];
+-  return (0, import_react4.createElement)("div", { className: "bt-q-inline" }, questions.map((question) => (0, import_react4.createElement)(SettledQuestion, {
+-    key: question.id,
+-    question,
+-    answer: answers.find((answer) => answer.id === question.id) ?? { selected: [] }
+-  })));
 +
 +// src/client/remote-approval-wait.js
 +var REMOTE_APPROVAL_LABEL = "Waiting for their approval";
@@ -7873,8 +7726,36 @@ diff --git a/client.js b/client.js
 +  if (!remote) return null;
 +  if (tool && inputAt <= (tool.at ?? 0)) return null;
 +  return { key: "remote-approval", label: REMOTE_APPROVAL_LABEL, state: "thinking" };
-+}
-+
+ }
+ 
+-// src/client/secret-card.js
+-var import_react5 = require("react");
+-var MIN_VALUE = 4;
+-var NONE = {};
+-var KeyIcon = () => (0, import_react5.createElement)(
+-  "svg",
+-  { width: 15, height: 15, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
+-  (0, import_react5.createElement)("path", { d: "M7 9.5a3.5 3.5 0 1 1 0 .01z" }),
+-  (0, import_react5.createElement)("path", { d: "M10.4 10.6L17 10.6M14.5 10.6v2.4M16.6 10.6v1.8" })
+-);
+-var LockIcon = () => (0, import_react5.createElement)(
+-  "svg",
+-  { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
+-  (0, import_react5.createElement)("path", { d: "M6.5 9V7a3.5 3.5 0 0 1 7 0v2" }),
+-  (0, import_react5.createElement)("rect", { x: 4.5, y: 9, width: 11, height: 8, rx: 2 })
+-);
+-var WarnIcon = () => (0, import_react5.createElement)(
+-  "svg",
+-  { width: 14, height: 14, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.5, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": true },
+-  (0, import_react5.createElement)("path", { d: "M10 3.5l7 12.5H3z" }),
+-  (0, import_react5.createElement)("path", { d: "M10 8.5v3.5M10 14.2h.01" })
+-);
+-var MASK_BY_CSS = typeof CSS !== "undefined" && typeof CSS.supports === "function" && CSS.supports("-webkit-text-security", "disc");
+-var insecure = () => typeof location !== "undefined" && location.protocol === "http:" && !/^(localhost|127(?:\.\d{1,3}){3}|\[::1\])$/.test(location.hostname);
+-var scopeLabel = (scope, roster) => {
+-  if (scope === "all") return t("All Bots");
+-  const names = (scope ?? []).map((id) => roster.byId[id]?.name).filter(Boolean);
+-  return names.length === 0 ? t("No Bot") : names.join(t(" and "));
 +// src/client/activity-row.js
 +var import_react10 = require("react");
 +var import_react_dom2 = require("react-dom");
@@ -7899,39 +7780,7 @@ diff --git a/client.js b/client.js
 +    return () => clearTimeout(timer);
 +  }, [shown, at]);
 +  return shown;
- }
--function ScopeEditor({ secret, roster, onSave }) {
--  const [mode, setMode] = (0, import_react5.useState)(secret.scope === "all" ? "all" : "some");
--  const [picked, setPicked] = (0, import_react5.useState)(secret.scope === "all" ? [] : secret.scope);
--  const toggle = (id) => setPicked((list) => list.includes(id) ? list.filter((item) => item !== id) : [...list, id]);
--  const same = mode === "all" ? secret.scope === "all" : secret.scope !== "all" && [...picked].sort().join() === [...secret.scope].sort().join();
--  return (0, import_react5.createElement)(
--    "div",
--    { className: "bt-secret-edit-block" },
--    (0, import_react5.createElement)("div", { className: "bt-secret-edit-label" }, t("Who may use it")),
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-secret-radios", role: "radiogroup", "aria-label": t("Who may use {name}", { name: secret.name }) },
--      [["all", t("All Bots")], ["some", t("Chosen Bots")]].map(([id, text]) => (0, import_react5.createElement)(
--        "label",
--        { key: id, className: "bt-secret-radio" },
--        (0, import_react5.createElement)("input", { type: "radio", name: `scope-${secret.name}`, checked: mode === id, onChange: () => setMode(id) }),
--        text
--      ))
--    ),
--    mode === "some" ? (0, import_react5.createElement)("div", { className: "bt-secret-bots" }, roster.bots.map((bot) => (0, import_react5.createElement)("button", {
--      key: bot.id,
--      type: "button",
--      className: "bt-secret-bot",
--      "aria-pressed": picked.includes(bot.id),
--      onClick: () => toggle(bot.id)
--    }, (0, import_react5.createElement)(BotAvatar, { bot, size: 20, badge: false, live: false }), bot.name, picked.includes(bot.id) ? (0, import_react5.createElement)(CheckIcon) : null))) : null,
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-secret-row-actions" },
--      (0, import_react5.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: same, onClick: () => onSave(mode === "all" ? "all" : picked) }, t("Save access"))
--    )
--  );
++}
 +function findHost(where) {
 +  if (where !== TAIL_HOST) return document.querySelector(where);
 +  const flow = document.querySelector("[data-conversation-scroll] [data-chat-flow]") ?? document.querySelector("[data-chat-flow]");
@@ -7945,7 +7794,30 @@ diff --git a/client.js b/client.js
 +  let top = -1;
 +  for (const node of document.querySelectorAll(`[data-chat-flow-kind${kind ? `="${kind}"` : ""}][data-chat-turn]`)) top = Math.max(top, Number(node.dataset.chatTurn));
 +  return top;
-+};
+ };
+-var when = (time) => Number.isFinite(time) ? new Date(time).toLocaleString(dateLocale(), { month: "short", day: "numeric", hour: "2-digit", minute: "2-digit" }) : "";
+-function MaskedInput({ value, onChange, onEnter, label, autoFocus = false }) {
+-  return (0, import_react5.createElement)("input", {
+-    className: "bt-secret-input",
+-    type: MASK_BY_CSS ? "text" : "password",
+-    "data-masked": MASK_BY_CSS ? "" : void 0,
+-    value,
+-    autoFocus,
+-    autoComplete: MASK_BY_CSS ? "off" : "new-password",
+-    autoCorrect: "off",
+-    autoCapitalize: "off",
+-    spellCheck: false,
+-    "data-1p-ignore": "",
+-    "data-lpignore": "true",
+-    "data-bwignore": "",
+-    "data-form-type": "other",
+-    "aria-label": label,
+-    placeholder: t("Paste or type the key"),
+-    onChange: (event) => onChange(event.target.value),
+-    onKeyDown: (event) => {
+-      if (event.key !== "Enter" || event.nativeEvent.isComposing) return;
+-      event.preventDefault();
+-      onEnter?.();
 +function useReplyAfterSend(remote, sending) {
 +  const sendTurn = (0, import_react10.useRef)(-1);
 +  const wasSending = (0, import_react10.useRef)(false);
@@ -7957,7 +7829,24 @@ diff --git a/client.js b/client.js
 +      sendTurn.current = -1;
 +      setReplied(false);
 +      return void 0;
-+    }
+     }
+-  });
+-}
+-function ScopeSwitch({ value, onChange, bot }) {
+-  const options = [["all", t("All Bots")], ["bot", t("Only {name}", { name: bot.name })]];
+-  return (0, import_react5.createElement)(
+-    "div",
+-    { className: "bt-secret-scope", role: "radiogroup", "aria-label": t("Who may use it") },
+-    (0, import_react5.createElement)("span", { className: "bt-secret-glide", "data-at": value === "all" ? 0 : 1, "aria-hidden": true }),
+-    options.map(([id, text]) => (0, import_react5.createElement)("button", {
+-      key: id,
+-      type: "button",
+-      role: "radio",
+-      "aria-checked": value === id,
+-      className: "bt-secret-seg",
+-      onClick: () => onChange(id)
+-    }, text))
+-  );
 +    if (wasSending.current) {
 +      wasSending.current = false;
 +      sendTurn.current = lastTurnOnScreen();
@@ -7980,16 +7869,19 @@ diff --git a/client.js b/client.js
 +  }, [remote, sending]);
 +  return replied;
  }
--function ValueEditor({ secret, onSave }) {
--  const [value, setValue] = (0, import_react5.useState)("");
--  const [replaced, setReplaced] = (0, import_react5.useState)(false);
--  const long = value.trim().length >= MIN_VALUE;
--  const save = () => {
--    if (!long) return;
--    void Promise.resolve(onSave(value)).then((ok) => {
--      if (ok) {
--        setValue("");
--        setReplaced(true);
+-function SecretHead({ bot, title, detail, name, onClose }) {
+-  return (0, import_react5.createElement)(
+-    "div",
+-    { className: "bt-q-head bt-secret-head" },
+-    (0, import_react5.createElement)("span", { className: "bt-secret-who" }, (0, import_react5.createElement)(BotMark, { bot, size: 28 }), (0, import_react5.createElement)("span", { className: "bt-secret-lock" }, (0, import_react5.createElement)(LockIcon))),
+-    (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-q-text" },
+-      (0, import_react5.createElement)("p", { className: "bt-q-title" }, title),
+-      (0, import_react5.createElement)("div", { className: "bt-q-detail" }, (0, import_react5.createElement)("code", { className: "bt-secret-name" }, name), detail ? ` · ${detail}` : "")
+-    ),
+-    onClose ? (0, import_react5.createElement)("button", { type: "button", className: "bt-q-x", "aria-label": t("Cancel the request"), title: t("Cancel"), onClick: onClose }, (0, import_react5.createElement)(CloseIcon)) : null
+-  );
 +function useRunningHost(active, where = RUNNING_HOST) {
 +  const [host, setHost] = (0, import_react10.useState)(null);
 +  (0, import_react10.useEffect)(() => {
@@ -8014,7 +7906,65 @@ diff --git a/client.js b/client.js
 +    };
 +  }, [active, where]);
 +  return host;
-+}
+ }
+-function SecretCard({ bot, request, roster, actions }) {
+-  const [value, setValue] = (0, import_react5.useState)("");
+-  const [scope, setScope] = (0, import_react5.useState)("all");
+-  const [replacing, setReplacing] = (0, import_react5.useState)(false);
+-  const [busy, setBusy] = (0, import_react5.useState)(false);
+-  const [error, setError] = (0, import_react5.useState)("");
+-  const noteId = (0, import_react5.useId)();
+-  const secret = (roster.secrets ?? []).find((entry) => entry.name === request.name);
+-  const run = (promise) => {
+-    setBusy(true);
+-    setError("");
+-    return Promise.resolve(promise).then(() => setValue(""), (failure) => setError(failure?.message ?? String(failure))).finally(() => setBusy(false));
+-  };
+-  const cancel = () => run(actions.secretCancel(request.id));
+-  const long = value.trim().length >= MIN_VALUE;
+-  const save = () => {
+-    if (long && !busy) void run(actions.secretSet({ requestId: request.id, value, scope }));
+-  };
+-  const allow = () => {
+-    if (!busy) void run(actions.secretAllow(request.id));
+-  };
+-  const filling = request.kind === "fill" || replacing;
+-  const warn = insecure() ? (0, import_react5.createElement)("div", { className: "bt-secret-warn", role: "note" }, (0, import_react5.createElement)(WarnIcon), t("This page is not on HTTPS: the key crosses the network unencrypted.")) : null;
+-  return (0, import_react5.createElement)(
+-    "div",
+-    { className: "bt-q bt-secret", role: "group", "aria-describedby": noteId, "data-kind": request.kind },
+-    (0, import_react5.createElement)(SecretHead, {
+-      bot,
+-      title: request.kind === "allow" ? t("Let {bot} use {name}?", { bot: bot.name, name: request.name }) : t("{name} needs a key", { name: bot.name }),
+-      detail: request.purpose,
+-      name: request.name,
+-      onClose: busy ? void 0 : cancel
+-    }),
+-    request.kind === "allow" ? (0, import_react5.createElement)("div", { className: "bt-secret-saved" }, (0, import_react5.createElement)(KeyIcon), t("Saved for {scope}", { scope: scopeLabel(secret?.scope, roster) })) : null,
+-    filling ? (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-secret-body" },
+-      (0, import_react5.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react5.createElement)(MaskedInput, { value, onChange: setValue, onEnter: save, label: t("Value of {name}", { name: request.name }), autoFocus: replacing })),
+-      request.kind === "fill" ? (0, import_react5.createElement)(ScopeSwitch, { value: scope, onChange: setScope, bot }) : null
+-    ) : null,
+-    (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-secret-note", id: noteId },
+-      t("{bot} never sees the value. It reaches {bot}'s shell as ", { bot: bot.name }),
+-      (0, import_react5.createElement)("code", null, `$DSH_SECRET_${request.name}`),
+-      ".",
+-      filling && value !== "" && !long ? t(" At least {count} characters.", { count: MIN_VALUE }) : ""
+-    ),
+-    warn,
+-    error ? (0, import_react5.createElement)("div", { className: "bt-secret-error", role: "alert" }, error) : null,
+-    (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-q-foot" },
+-      request.kind === "allow" && !replacing ? (0, import_react5.createElement)("button", { type: "button", className: "bt-q-btn", disabled: busy, onClick: () => setReplacing(true) }, t("Replace value")) : null,
+-      (0, import_react5.createElement)("button", { type: "button", className: "bt-q-btn", disabled: busy, onClick: cancel }, t("Cancel")),
+-      filling ? (0, import_react5.createElement)("button", { type: "button", className: "bt-q-submit", disabled: !long || busy, onClick: save }, busy ? t("Saving…") : t("Save")) : (0, import_react5.createElement)("button", { type: "button", className: "bt-q-submit", disabled: busy, onClick: allow }, busy ? t("Allowing…") : t("Allow"))
+-    )
+-  );
 +function useRowEntrances(replacing) {
 +  const check = (0, import_react10.useRef)(replacing);
 +  check.current = replacing;
@@ -8050,28 +8000,11 @@ diff --git a/client.js b/client.js
 +        const reply = [void 0, "assistant-step", "tool-call"].includes(item.dataset.chatFlowKind);
 +        item.dataset.btEnter = reply && check.current() ? "after-collapse" : "new";
 +        item.addEventListener("animationend", settle);
-       }
++      }
 +    };
 +    const observer = new MutationObserver(() => {
 +      if (!frame) frame = requestAnimationFrame(scan);
-     });
--  };
--  const edit = (next) => {
--    setValue(next);
--    setReplaced(false);
--  };
--  return (0, import_react5.createElement)(
--    "div",
--    { className: "bt-secret-edit-block" },
--    (0, import_react5.createElement)("div", { className: "bt-secret-edit-label" }, t("Replace the value")),
--    (0, import_react5.createElement)(
--      "div",
--      { className: "bt-secret-inline" },
--      (0, import_react5.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react5.createElement)(MaskedInput, { value, onChange: edit, onEnter: save, label: t("New value of {name}", { name: secret.name }) })),
--      (0, import_react5.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: !long, onClick: save }, t("Replace"))
--    ),
--    value !== "" && !long ? (0, import_react5.createElement)("div", { className: "bt-set-hint" }, t("At least {count} characters.", { count: MIN_VALUE })) : replaced ? (0, import_react5.createElement)("div", { className: "bt-set-hint bt-secret-ok", role: "status" }, (0, import_react5.createElement)(CheckIcon), t("Replaced. Bots get the new value from their next command.")) : null
--  );
++    });
 +    scan();
 +    return () => {
 +      cancelAnimationFrame(frame);
@@ -8079,14 +8012,9 @@ diff --git a/client.js b/client.js
 +    };
 +  }, []);
  }
--function SecretRow({ secret, roster, actions, run, open, onToggle }) {
--  const [confirm, setConfirm] = (0, import_react5.useState)(false);
--  (0, import_react5.useEffect)(() => {
--    if (!open) setConfirm(false);
--  }, [open]);
--  const asker = secret.requestedBy ? roster.byId[secret.requestedBy]?.name ?? t("a deleted Bot") : t("you");
--  const allowed = secret.scope === "all" ? [] : secret.scope.map((id) => roster.byId[id]).filter(Boolean);
--  const meta = [t("Asked by {name}", { name: asker }), t("added {time}", { time: when(secret.createdAt) }), secret.lastUsedAt ? t("last used {time}", { time: when(secret.lastUsedAt) }) : t("not used yet")].join(" · ");
+-function SettledSecret({ bot, request, roster }) {
+-  const canceled = request.status === "canceled";
+-  const text = canceled ? t("{bot} asked for {name}", { bot: bot.name, name: request.name }) : request.status === "allowed" ? t("Allowed {bot} to use {name}", { bot: bot.name, name: request.name }) : t("Saved {name}", { name: request.name });
 -  return (0, import_react5.createElement)(
 +function ActivityIndicator({ sessionId, useRoster, useSessionStatus, useLive, useSession, actions }) {
 +  const roster = useRoster((value) => value);
@@ -8184,49 +8112,35 @@ diff --git a/client.js b/client.js
 +  const elapsed = now - shown.at >= 6e4 ? elapsedLabel(now - shown.at) : null;
 +  return (0, import_react_dom2.createPortal)((0, import_react10.createElement)(
      "div",
--    { className: "bt-secret-item", "data-open": open ? "" : void 0 },
+-    { className: "bt-q bt-q-settled bt-secret bt-secret-done", role: "group", "aria-label": text, "data-status": request.status },
 -    (0, import_react5.createElement)(
--      "button",
--      { type: "button", className: "bt-set-row bt-secret-summary", "aria-expanded": open, onClick: onToggle },
--      (0, import_react5.createElement)(
--        "span",
--        { className: "bt-set-copy" },
--        (0, import_react5.createElement)("span", { className: "bt-secret-title" }, (0, import_react5.createElement)(KeyIcon), (0, import_react5.createElement)("code", { className: "bt-secret-name" }, secret.name), secret.purpose ? (0, import_react5.createElement)("span", { className: "bt-secret-purpose" }, secret.purpose) : null),
--        (0, import_react5.createElement)("span", { className: "bt-set-hint" }, meta)
--      ),
--      (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-q-head" },
+-      (0, import_react5.createElement)("span", { className: "bt-secret-who" }, (0, import_react5.createElement)(BotMark, { bot, size: 22 })),
+-      (0, import_react5.createElement)("div", { className: "bt-q-text" }, (0, import_react5.createElement)(
+-        "p",
+-        { className: "bt-q-title" },
+-        text,
+-        canceled ? null : (0, import_react5.createElement)("span", { className: "bt-secret-scope-tag" }, ` · ${scopeLabel(request.scope, roster)}`)
+-      )),
+-      canceled ? (0, import_react5.createElement)("span", { className: "bt-q-badge" }, t("Canceled")) : (0, import_react5.createElement)("span", { className: "bt-q-check bt-secret-check", title: t("Done") }, (0, import_react5.createElement)(CheckIcon))
 +    { className: "bt-typing", "data-exiting": phase === "out" ? "" : void 0, "data-carry": carry && phase !== "out" ? "" : void 0, "data-remote": remote ? "" : void 0, "data-flybot": shown.key === "remote-approval" ? "remote-approval" : void 0, "aria-hidden": true },
 +    bot ? (0, import_react10.createElement)(BotMark, { bot, size: 28, state: markState.current, live: true, pokeable: true }) : (0, import_react10.createElement)(RoomAvatar, { room: room2, roster, size: 28 }),
 +    (0, import_react10.createElement)(
 +      "span",
 +      { className: "bt-typing-text" },
 +      (0, import_react10.createElement)(
-         "span",
--        { className: "bt-set-control" },
--        secret.scope === "all" ? (0, import_react5.createElement)("span", { className: "bt-tag" }, t("All Bots")) : allowed.length === 0 ? (0, import_react5.createElement)("span", { className: "bt-tag" }, t("No Bot")) : (0, import_react5.createElement)("span", { className: "bt-secret-faces", title: allowed.map((bot) => bot.name).join(", ") }, allowed.slice(0, 5).map((bot) => (0, import_react5.createElement)(BotAvatar, { key: bot.id, bot, size: 20, badge: false, live: false })))
--      )
--    ),
--    open ? (0, import_react5.createElement)(
--      "div",
--      { className: "bt-secret-edit" },
--      (0, import_react5.createElement)(ScopeEditor, { key: JSON.stringify(secret.scope), secret, roster, onSave: (scope) => run(actions.secretUpdate(secret.name, scope)) }),
--      (0, import_react5.createElement)(ValueEditor, { secret, onSave: (value) => run(actions.secretSet({ name: secret.name, value })) }),
--      (0, import_react5.createElement)(
--        "div",
--        { className: "bt-secret-row-actions" },
--        confirm ? [
--          (0, import_react5.createElement)("span", { key: "q", className: "bt-set-hint" }, t("Delete {name}? Bots lose it at once.", { name: secret.name })),
--          (0, import_react5.createElement)("button", { key: "no", type: "button", className: "bt-soft bt-soft-sm", onClick: () => setConfirm(false) }, t("Keep")),
--          (0, import_react5.createElement)("button", { key: "yes", type: "button", className: "bt-soft bt-soft-sm bt-secret-danger", onClick: () => run(actions.secretDelete(secret.name)) }, t("Delete"))
--        ] : (0, import_react5.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm bt-secret-danger", onClick: () => setConfirm(true) }, (0, import_react5.createElement)(TrashIcon), t("Delete"))
++        "span",
 +        { key: `${shown.key}:${shown.at}`, className: "bt-typing-label" },
 +        (0, import_react10.createElement)(Shimmer, null, `${shown.text}…`),
 +        elapsed ? (0, import_react10.createElement)("span", { className: "bt-typing-time" }, `· ${elapsed}`) : null
-       )
--    ) : null
-+    )
++      )
+     )
+-  );
 +  ), host);
-+}
+ }
+-function RequestView({ bot, request, roster, actions }) {
+-  return request.status === "pending" ? (0, import_react5.createElement)(SecretCard, { key: `${request.id}:${request.kind}`, bot, request, roster, actions }) : (0, import_react5.createElement)(SettledSecret, { bot, request, roster });
 +
 +// src/client/dsh-offer.js
 +var APP_OFFER = /* @__PURE__ */ new Set(["available", "downloading", "verifying", "installing", "ready"]);
@@ -8236,7 +8150,16 @@ diff --git a/client.js b/client.js
 +  if (!dsh?.verified || !dsh.current || sameVersion(dsh.verified, dsh.current)) return false;
 +  if (dsh.kind === "npm") return true;
 +  return dsh.kind === "app" && APP_OFFER.has(app?.phase) && sameVersion(app.version, dsh.verified);
-+}
+ }
+-function SecretToolCell({ sessionId, callId, name, done, content, roster, actions }) {
+-  const bot = roster.byId[sessionId];
+-  if (!bot) return null;
+-  const request = (roster.secretRequests?.[bot.id] ?? []).find((entry) => entry.callId === callId && (entry.sessionId ?? sessionId) === sessionId);
+-  if (request) return (0, import_react5.createElement)("div", { className: "bt-q-inline" }, (0, import_react5.createElement)(RequestView, { bot, request, roster, actions }));
+-  if (done && /already saved/.test(contentText(content))) {
+-    return (0, import_react5.createElement)("div", { className: "bt-event" }, (0, import_react5.createElement)("span", { className: "bt-secret-event" }, (0, import_react5.createElement)(KeyIcon), t("{bot} is using {name}", { bot: bot.name, name: name ?? t("a saved key") })));
+-  }
+-  return null;
 +
 +// src/client/overlay-hooks.js
 +var import_react11 = require("react");
@@ -8255,7 +8178,17 @@ diff --git a/client.js b/client.js
 +      if (escapeLayers.length === 0) window.removeEventListener("keydown", onEscapeKey);
 +    };
 +  }, []);
-+}
+ }
+-function SecretDock({ sessionId, useRoster, useCards, useSession, actions }) {
+-  const roster = useRoster((value) => value);
+-  const shown = useCards?.((state) => state[sessionId]) ?? NONE;
+-  const loading = useSession?.(historyLoading) === true;
+-  const bot = roster.byId[sessionId];
+-  if (!bot || currentPart(bot) !== sessionId) return null;
+-  const drawn = (entry) => entry.callId && entry.sessionId === sessionId && (loading || shown[entry.callId] > 0);
+-  const waiting = (roster.secretRequests?.[bot.id] ?? []).filter((entry) => entry.status === "pending" && !drawn(entry));
+-  if (waiting.length === 0) return null;
+-  return (0, import_react5.createElement)("div", { className: "bt-q-dock bt-secret-dock" }, waiting.map((request) => (0, import_react5.createElement)(SecretCard, { key: `${request.id}:${request.kind}`, bot, request, roster, actions })));
 +function usePaneLeft() {
 +  const [paneLeft, setPaneLeft] = (0, import_react11.useState)(280);
 +  (0, import_react11.useLayoutEffect)(() => {
@@ -8263,7 +8196,39 @@ diff --git a/client.js b/client.js
 +    if (column) setPaneLeft(Math.round(column.getBoundingClientRect().right));
 +  }, []);
 +  return paneLeft;
-+}
+ }
+-function ScopeEditor({ secret, roster, onSave }) {
+-  const [mode, setMode] = (0, import_react5.useState)(secret.scope === "all" ? "all" : "some");
+-  const [picked, setPicked] = (0, import_react5.useState)(secret.scope === "all" ? [] : secret.scope);
+-  const toggle = (id) => setPicked((list) => list.includes(id) ? list.filter((item) => item !== id) : [...list, id]);
+-  const same = mode === "all" ? secret.scope === "all" : secret.scope !== "all" && [...picked].sort().join() === [...secret.scope].sort().join();
+-  return (0, import_react5.createElement)(
+-    "div",
+-    { className: "bt-secret-edit-block" },
+-    (0, import_react5.createElement)("div", { className: "bt-secret-edit-label" }, t("Who may use it")),
+-    (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-secret-radios", role: "radiogroup", "aria-label": t("Who may use {name}", { name: secret.name }) },
+-      [["all", t("All Bots")], ["some", t("Chosen Bots")]].map(([id, text]) => (0, import_react5.createElement)(
+-        "label",
+-        { key: id, className: "bt-secret-radio" },
+-        (0, import_react5.createElement)("input", { type: "radio", name: `scope-${secret.name}`, checked: mode === id, onChange: () => setMode(id) }),
+-        text
+-      ))
+-    ),
+-    mode === "some" ? (0, import_react5.createElement)("div", { className: "bt-secret-bots" }, roster.bots.map((bot) => (0, import_react5.createElement)("button", {
+-      key: bot.id,
+-      type: "button",
+-      className: "bt-secret-bot",
+-      "aria-pressed": picked.includes(bot.id),
+-      onClick: () => toggle(bot.id)
+-    }, (0, import_react5.createElement)(BotAvatar, { bot, size: 20, badge: false, live: false }), bot.name, picked.includes(bot.id) ? (0, import_react5.createElement)(CheckIcon) : null))) : null,
+-    (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-secret-row-actions" },
+-      (0, import_react5.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: same, onClick: () => onSave(mode === "all" ? "all" : picked) }, t("Save access"))
+-    )
+-  );
 +
 +// src/client/member-status.js
 +var import_react12 = require("react");
@@ -8286,11 +8251,81 @@ diff --git a/client.js b/client.js
 +    const approvals = askedIn(room2, work, id, doing);
 +    return { id, approvals, doing, here: doing !== void 0, state: approvals.length > 0 ? "ask" : doing ? "work" : "idle" };
 +  });
-+}
+ }
+-function ValueEditor({ secret, onSave }) {
+-  const [value, setValue] = (0, import_react5.useState)("");
+-  const [replaced, setReplaced] = (0, import_react5.useState)(false);
+-  const long = value.trim().length >= MIN_VALUE;
+-  const save = () => {
+-    if (!long) return;
+-    void Promise.resolve(onSave(value)).then((ok) => {
+-      if (ok) {
+-        setValue("");
+-        setReplaced(true);
+-      }
+-    });
+-  };
+-  const edit = (next) => {
+-    setValue(next);
+-    setReplaced(false);
+-  };
+-  return (0, import_react5.createElement)(
+-    "div",
+-    { className: "bt-secret-edit-block" },
+-    (0, import_react5.createElement)("div", { className: "bt-secret-edit-label" }, t("Replace the value")),
+-    (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-secret-inline" },
+-      (0, import_react5.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react5.createElement)(MaskedInput, { value, onChange: edit, onEnter: save, label: t("New value of {name}", { name: secret.name }) })),
+-      (0, import_react5.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: !long, onClick: save }, t("Replace"))
+-    ),
+-    value !== "" && !long ? (0, import_react5.createElement)("div", { className: "bt-set-hint" }, t("At least {count} characters.", { count: MIN_VALUE })) : replaced ? (0, import_react5.createElement)("div", { className: "bt-set-hint bt-secret-ok", role: "status" }, (0, import_react5.createElement)(CheckIcon), t("Replaced. Bots get the new value from their next command.")) : null
+-  );
 +function busyMembers(room2, work, roster) {
 +  const busy = memberWork(room2, work).filter((entry) => entry.state !== "idle" && roster.byId[entry.id]);
 +  return [...busy.filter((entry) => entry.state === "ask"), ...busy.filter((entry) => entry.state === "work")].map((entry) => ({ ...entry, bot: roster.byId[entry.id] }));
-+}
+ }
+-function SecretRow({ secret, roster, actions, run, open, onToggle }) {
+-  const [confirm, setConfirm] = (0, import_react5.useState)(false);
+-  (0, import_react5.useEffect)(() => {
+-    if (!open) setConfirm(false);
+-  }, [open]);
+-  const asker = secret.requestedBy ? roster.byId[secret.requestedBy]?.name ?? t("a deleted Bot") : t("you");
+-  const allowed = secret.scope === "all" ? [] : secret.scope.map((id) => roster.byId[id]).filter(Boolean);
+-  const meta = [t("Asked by {name}", { name: asker }), t("added {time}", { time: when(secret.createdAt) }), secret.lastUsedAt ? t("last used {time}", { time: when(secret.lastUsedAt) }) : t("not used yet")].join(" · ");
+-  return (0, import_react5.createElement)(
+-    "div",
+-    { className: "bt-secret-item", "data-open": open ? "" : void 0 },
+-    (0, import_react5.createElement)(
+-      "button",
+-      { type: "button", className: "bt-set-row bt-secret-summary", "aria-expanded": open, onClick: onToggle },
+-      (0, import_react5.createElement)(
+-        "span",
+-        { className: "bt-set-copy" },
+-        (0, import_react5.createElement)("span", { className: "bt-secret-title" }, (0, import_react5.createElement)(KeyIcon), (0, import_react5.createElement)("code", { className: "bt-secret-name" }, secret.name), secret.purpose ? (0, import_react5.createElement)("span", { className: "bt-secret-purpose" }, secret.purpose) : null),
+-        (0, import_react5.createElement)("span", { className: "bt-set-hint" }, meta)
+-      ),
+-      (0, import_react5.createElement)(
+-        "span",
+-        { className: "bt-set-control" },
+-        secret.scope === "all" ? (0, import_react5.createElement)("span", { className: "bt-tag" }, t("All Bots")) : allowed.length === 0 ? (0, import_react5.createElement)("span", { className: "bt-tag" }, t("No Bot")) : (0, import_react5.createElement)("span", { className: "bt-secret-faces", title: allowed.map((bot) => bot.name).join(", ") }, allowed.slice(0, 5).map((bot) => (0, import_react5.createElement)(BotAvatar, { key: bot.id, bot, size: 20, badge: false, live: false })))
+-      )
+-    ),
+-    open ? (0, import_react5.createElement)(
+-      "div",
+-      { className: "bt-secret-edit" },
+-      (0, import_react5.createElement)(ScopeEditor, { key: JSON.stringify(secret.scope), secret, roster, onSave: (scope) => run(actions.secretUpdate(secret.name, scope)) }),
+-      (0, import_react5.createElement)(ValueEditor, { secret, onSave: (value) => run(actions.secretSet({ name: secret.name, value })) }),
+-      (0, import_react5.createElement)(
+-        "div",
+-        { className: "bt-secret-row-actions" },
+-        confirm ? [
+-          (0, import_react5.createElement)("span", { key: "q", className: "bt-set-hint" }, t("Delete {name}? Bots lose it at once.", { name: secret.name })),
+-          (0, import_react5.createElement)("button", { key: "no", type: "button", className: "bt-soft bt-soft-sm", onClick: () => setConfirm(false) }, t("Keep")),
+-          (0, import_react5.createElement)("button", { key: "yes", type: "button", className: "bt-soft bt-soft-sm bt-secret-danger", onClick: () => run(actions.secretDelete(secret.name)) }, t("Delete"))
+-        ] : (0, import_react5.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm bt-secret-danger", onClick: () => setConfirm(true) }, (0, import_react5.createElement)(TrashIcon), t("Delete"))
+-      )
+-    ) : null
 +function splitBusy(busy) {
 +  const here = busy.filter((entry) => entry.state === "work" && entry.here);
 +  const rows = [...here.filter((entry) => entry.doing.speaking === true), ...here.filter((entry) => entry.doing.speaking !== true)].slice(0, ROWS_MAX);
@@ -8536,8 +8571,6 @@ diff --git a/client.js b/client.js
 -    return () => {
 -      window.removeEventListener("mousedown", onDown);
 -      window.removeEventListener("keydown", onKey, true);
--    };
--  }, [open]);
 +function MemberDock({ sessionId, useRoster, useWork, actions }) {
 +  const roster = useRoster((value) => value);
 +  const work = useWork((value) => value);
@@ -8571,6 +8604,24 @@ diff --git a/client.js b/client.js
 +    now,
 +    onOpen: () => actions.openSession(item.room.id)
 +  })));
++}
++function useFlowColumn(ref, active, key) {
++  (0, import_react12.useLayoutEffect)(() => {
++    const node = ref.current;
++    const flow = document.querySelector("[data-chat-flow]");
++    if (!active || !node || !flow) return void 0;
++    const place = () => {
++      node.style.marginInlineStart = "0px";
++      const column = flow.getBoundingClientRect();
++      node.style.marginInlineStart = `${Math.round(column.left - node.getBoundingClientRect().left)}px`;
++      node.style.width = `${Math.round(column.width)}px`;
+     };
+-  }, [open]);
++    place();
++    const observer = new ResizeObserver(place);
++    for (const target of [flow, flow.parentElement, node.parentElement]) if (target) observer.observe(target);
++    return () => observer.disconnect();
++  }, [active, key]);
  }
 -function MessageTools({ text, name, sessionId, react, actions }) {
 -  const [panel, setPanel] = (0, import_react6.useState)(null);
@@ -8601,23 +8652,6 @@ diff --git a/client.js b/client.js
 -    const link = Object.assign(document.createElement("a"), { href: url, download: `${name}-message.md` });
 -    link.click();
 -    setTimeout(() => URL.revokeObjectURL(url), 1e3);
-+function useFlowColumn(ref, active, key) {
-+  (0, import_react12.useLayoutEffect)(() => {
-+    const node = ref.current;
-+    const flow = document.querySelector("[data-chat-flow]");
-+    if (!active || !node || !flow) return void 0;
-+    const place = () => {
-+      node.style.marginInlineStart = "0px";
-+      const column = flow.getBoundingClientRect();
-+      node.style.marginInlineStart = `${Math.round(column.left - node.getBoundingClientRect().left)}px`;
-+      node.style.width = `${Math.round(column.width)}px`;
-+    };
-+    place();
-+    const observer = new ResizeObserver(place);
-+    for (const target of [flow, flow.parentElement, node.parentElement]) if (target) observer.observe(target);
-+    return () => observer.disconnect();
-+  }, [active, key]);
-+}
 +function useNow(active) {
 +  const [now, setNow] = (0, import_react12.useState)(Date.now);
 +  (0, import_react12.useEffect)(() => {
@@ -10704,6 +10738,76 @@ diff --git a/client.js b/client.js
 +    onRetry: actions?.deliveryBoard ? retry : null,
 +    onProbe: actions?.deliveryProbe ? () => actions.deliveryProbe() : null
 +  });
++}
++function DeliveryCard({ card, repo = null }) {
++  const model = githubCard(card, repo) ?? { source: "github", key: null, title: card?.title ?? "", badge: card?.badge ?? null };
++  return (0, import_react16.createElement)(BoardCard, {
++    card: model,
++    skin: DELIVERY_SKIN,
++    attrs: { "data-kind": card?.kind, "data-number": card?.number, "data-badge": card?.badge ?? void 0 },
++    idText: `#${card?.number ?? "?"}`,
++    badge: badgeLabel(card?.badge)
++  });
++}
++var DELIVERY_CSS = `
++.bt-del-body{flex:1 1 auto;min-height:0;display:flex;flex-direction:column;gap:10px;padding:12px 14px 16px}
++.bt-del-head{display:flex;flex-direction:column;gap:6px;border-bottom:.5px solid var(--bt-line);padding-bottom:8px}
++.bt-del-metrics{display:flex;flex-wrap:wrap;align-items:flex-start;gap:16px}
++.bt-del-table{border-collapse:collapse;font-size:12px;line-height:16px;font-variant-numeric:tabular-nums}
++.bt-del-table th,.bt-del-table td{padding:2px 8px;text-align:right;white-space:nowrap}
++.bt-del-table th[scope=row]{text-align:left;font-weight:500;color:var(--bt-ink-2)}
++.bt-del-table thead th{font-weight:600;color:var(--bt-ink-3)}
++.bt-del-ci,.bt-del-open{margin:0;font-size:12px;line-height:16px;color:var(--bt-ink-2)}
++.bt-del-asof{margin:0;font-size:11.5px;line-height:15px;color:var(--bt-ink-3);display:flex;flex-wrap:wrap;align-items:center;gap:6px}
++.bt-del-loading{margin:0;font-size:13px;line-height:18px;color:var(--bt-ink-2);font-variant-numeric:tabular-nums}
++.bt-del-hint{margin:2px 0 0;font-size:12px;line-height:16px;color:var(--bt-ink-3)}
++.bt-del-stale,.bt-del-partial{margin:0;font-size:12px;line-height:16px;color:var(--bt-ink-2)}
++.bt-del-stale[role=status],.bt-del-partial[role=status]{padding:6px 8px;border-radius:10px;background:var(--bt-hover)}
++.bt-del-diag{display:inline-flex;position:relative}
++.bt-del-diag-box{position:absolute;top:100%;left:0;z-index:3;display:flex;flex-direction:column;gap:6px;padding:8px;border:.5px solid var(--bt-line-2);border-radius:10px;background:var(--bt-card,var(--bt-main));min-width:320px}
++.bt-del-diag-text{margin:0;font-size:11px;line-height:15px;white-space:pre-wrap;word-break:break-all;color:var(--bt-ink-2);max-height:220px;overflow:auto}
++.bt-del-columns{flex:1 1 auto;min-height:0;display:flex;gap:10px;overflow:auto}
++.bt-del-column{flex:1 1 0;min-width:200px;display:flex;flex-direction:column;gap:8px;padding:8px;border-radius:14px;background:var(--bt-hover);overflow:auto}
++.bt-del-repos{flex:1 1 auto;min-height:0;display:flex;flex-direction:column;gap:14px;overflow:auto}
++.bt-del-repo-block{display:flex;flex-direction:column;gap:8px;min-height:0}
++.bt-del-repo-head{position:sticky;top:0;z-index:1;margin:0;padding:2px 4px;font-size:13px;line-height:18px;color:var(--bt-ink-2);background:var(--bt-main,var(--bt-card));border-radius:8px}
++.bt-del-block-state{margin:0;padding:12px 8px;font-size:12px;line-height:16px;color:var(--bt-ink-3)}
++.bt-del-card{display:flex;flex-direction:column;gap:5px;padding:10px;border:.5px solid var(--bt-line-2);border-radius:12px;background:var(--bt-card,var(--bt-main))}
++.bt-del-card-top{display:flex;align-items:center;gap:6px}
++.bt-del-id{font-size:12px;line-height:16px;color:var(--bt-ink-3);font-variant-numeric:tabular-nums}
++.bt-del-badge{margin-left:auto;font-size:10.5px;line-height:16px;padding:0 6px;border-radius:999px;background:var(--bt-hover);color:var(--bt-ink-2)}
++.bt-del-badge[data-badge=inc]{background:rgba(224,33,53,.12);color:#c21d2e}
++.bt-del-badge[data-badge=ci-red]{background:rgba(224,33,53,.12);color:#c21d2e}
++.bt-del-badge[data-badge=checks-unknown]{background:var(--bt-hover);color:var(--bt-ink-3)}
++.bt-del-badge[data-badge=pass-enqueue],.bt-del-badge[data-badge=pass-merge]{background:color-mix(in srgb,var(--bt-green) 16%,transparent);color:color-mix(in srgb,var(--bt-green) 70%,var(--bt-ink))}
++.bt-del-title{font-size:13.5px;line-height:19px;color:var(--bt-ink)}
++.bt-del-labels{display:flex;flex-wrap:wrap;gap:4px}
++.bt-del-label{font-size:10.5px;line-height:16px;padding:0 6px;border-radius:999px;background:var(--bt-hover);color:var(--bt-ink-2)}
++.bt-del-owner{font-size:12px;line-height:16px;color:var(--bt-ink-2)}
++.bt-del-owner[data-kind=human]{font-weight:600;color:var(--bt-ink)}
++.bt-del-linked,.bt-del-sha{font-size:11.5px;line-height:15px;color:var(--bt-ink-3)}
++.bt-del-open{align-self:flex-start;font-size:12px;line-height:16px;color:var(--bt-accent)}
++@media (max-width:800px){
++  .bt-del-columns{overflow:auto}
++  .bt-del-column{min-width:220px}
++}
++@media (max-width:640px){
++  .bt-del-columns{flex-direction:column}
++  .bt-del-column{min-width:0}
++}
++` + DELIVERY_CHART_CSS;
++
++// src/client/kanban.js
++var import_react17 = require("react");
++var POLL_MS4 = 15e3;
++function BoardIcon() {
++  return (0, import_react17.createElement)(
++    "svg",
++    { width: 18, height: 18, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinejoin: "round", "aria-hidden": true },
++    (0, import_react17.createElement)("rect", { x: 2.5, y: 3, width: 4, height: 14, rx: 1 }),
++    (0, import_react17.createElement)("rect", { x: 8, y: 3, width: 4, height: 9, rx: 1 }),
++    (0, import_react17.createElement)("rect", { x: 13.5, y: 3, width: 4, height: 12, rx: 1 })
++  );
  }
 -function useShownCards(actions, sessionId, callIds) {
 -  const key = JSON.stringify(callIds);
@@ -10713,15 +10817,9 @@ diff --git a/client.js b/client.js
 -    actions.noteCards(sessionId, ids, 1);
 -    return () => actions.noteCards(sessionId, ids, -1);
 -  }, [sessionId, key]);
-+function DeliveryCard({ card, repo = null }) {
-+  const model = githubCard(card, repo) ?? { source: "github", key: null, title: card?.title ?? "", badge: card?.badge ?? null };
-+  return (0, import_react16.createElement)(BoardCard, {
-+    card: model,
-+    skin: DELIVERY_SKIN,
-+    attrs: { "data-kind": card?.kind, "data-number": card?.number, "data-badge": card?.badge ?? void 0 },
-+    idText: `#${card?.number ?? "?"}`,
-+    badge: badgeLabel(card?.badge)
-+  });
++function shortId(id) {
++  const hex = String(id ?? "").replace(/^task-/, "");
++  return `#${hex.slice(-6)}`;
  }
 -function renderCall(call2, { sessionId, roster, actions, useUi, useWork, findBot }) {
 -  const tool = toolName(call2);
@@ -10792,70 +10890,6 @@ diff --git a/client.js b/client.js
 -      if (!done) return null;
 -      const room2 = roster.rooms.find((entry) => entry.name === arg("group"));
 -      return room2 ? (0, import_react6.createElement)(GroupEvent, { prefix: t("Read"), room: room2, roster, actions }) : null;
-+var DELIVERY_CSS = `
-+.bt-del-body{flex:1 1 auto;min-height:0;display:flex;flex-direction:column;gap:10px;padding:12px 14px 16px}
-+.bt-del-head{display:flex;flex-direction:column;gap:6px;border-bottom:.5px solid var(--bt-line);padding-bottom:8px}
-+.bt-del-metrics{display:flex;flex-wrap:wrap;align-items:flex-start;gap:16px}
-+.bt-del-table{border-collapse:collapse;font-size:12px;line-height:16px;font-variant-numeric:tabular-nums}
-+.bt-del-table th,.bt-del-table td{padding:2px 8px;text-align:right;white-space:nowrap}
-+.bt-del-table th[scope=row]{text-align:left;font-weight:500;color:var(--bt-ink-2)}
-+.bt-del-table thead th{font-weight:600;color:var(--bt-ink-3)}
-+.bt-del-ci,.bt-del-open{margin:0;font-size:12px;line-height:16px;color:var(--bt-ink-2)}
-+.bt-del-asof{margin:0;font-size:11.5px;line-height:15px;color:var(--bt-ink-3);display:flex;flex-wrap:wrap;align-items:center;gap:6px}
-+.bt-del-loading{margin:0;font-size:13px;line-height:18px;color:var(--bt-ink-2);font-variant-numeric:tabular-nums}
-+.bt-del-hint{margin:2px 0 0;font-size:12px;line-height:16px;color:var(--bt-ink-3)}
-+.bt-del-stale,.bt-del-partial{margin:0;font-size:12px;line-height:16px;color:var(--bt-ink-2)}
-+.bt-del-stale[role=status],.bt-del-partial[role=status]{padding:6px 8px;border-radius:10px;background:var(--bt-hover)}
-+.bt-del-diag{display:inline-flex;position:relative}
-+.bt-del-diag-box{position:absolute;top:100%;left:0;z-index:3;display:flex;flex-direction:column;gap:6px;padding:8px;border:.5px solid var(--bt-line-2);border-radius:10px;background:var(--bt-card,var(--bt-main));min-width:320px}
-+.bt-del-diag-text{margin:0;font-size:11px;line-height:15px;white-space:pre-wrap;word-break:break-all;color:var(--bt-ink-2);max-height:220px;overflow:auto}
-+.bt-del-columns{flex:1 1 auto;min-height:0;display:flex;gap:10px;overflow:auto}
-+.bt-del-column{flex:1 1 0;min-width:200px;display:flex;flex-direction:column;gap:8px;padding:8px;border-radius:14px;background:var(--bt-hover);overflow:auto}
-+.bt-del-repos{flex:1 1 auto;min-height:0;display:flex;flex-direction:column;gap:14px;overflow:auto}
-+.bt-del-repo-block{display:flex;flex-direction:column;gap:8px;min-height:0}
-+.bt-del-repo-head{position:sticky;top:0;z-index:1;margin:0;padding:2px 4px;font-size:13px;line-height:18px;color:var(--bt-ink-2);background:var(--bt-main,var(--bt-card));border-radius:8px}
-+.bt-del-block-state{margin:0;padding:12px 8px;font-size:12px;line-height:16px;color:var(--bt-ink-3)}
-+.bt-del-card{display:flex;flex-direction:column;gap:5px;padding:10px;border:.5px solid var(--bt-line-2);border-radius:12px;background:var(--bt-card,var(--bt-main))}
-+.bt-del-card-top{display:flex;align-items:center;gap:6px}
-+.bt-del-id{font-size:12px;line-height:16px;color:var(--bt-ink-3);font-variant-numeric:tabular-nums}
-+.bt-del-badge{margin-left:auto;font-size:10.5px;line-height:16px;padding:0 6px;border-radius:999px;background:var(--bt-hover);color:var(--bt-ink-2)}
-+.bt-del-badge[data-badge=inc]{background:rgba(224,33,53,.12);color:#c21d2e}
-+.bt-del-badge[data-badge=ci-red]{background:rgba(224,33,53,.12);color:#c21d2e}
-+.bt-del-badge[data-badge=checks-unknown]{background:var(--bt-hover);color:var(--bt-ink-3)}
-+.bt-del-badge[data-badge=pass-enqueue],.bt-del-badge[data-badge=pass-merge]{background:color-mix(in srgb,var(--bt-green) 16%,transparent);color:color-mix(in srgb,var(--bt-green) 70%,var(--bt-ink))}
-+.bt-del-title{font-size:13.5px;line-height:19px;color:var(--bt-ink)}
-+.bt-del-labels{display:flex;flex-wrap:wrap;gap:4px}
-+.bt-del-label{font-size:10.5px;line-height:16px;padding:0 6px;border-radius:999px;background:var(--bt-hover);color:var(--bt-ink-2)}
-+.bt-del-owner{font-size:12px;line-height:16px;color:var(--bt-ink-2)}
-+.bt-del-owner[data-kind=human]{font-weight:600;color:var(--bt-ink)}
-+.bt-del-linked,.bt-del-sha{font-size:11.5px;line-height:15px;color:var(--bt-ink-3)}
-+.bt-del-open{align-self:flex-start;font-size:12px;line-height:16px;color:var(--bt-accent)}
-+@media (max-width:800px){
-+  .bt-del-columns{overflow:auto}
-+  .bt-del-column{min-width:220px}
-+}
-+@media (max-width:640px){
-+  .bt-del-columns{flex-direction:column}
-+  .bt-del-column{min-width:0}
-+}
-+` + DELIVERY_CHART_CSS;
-+
-+// src/client/kanban.js
-+var import_react17 = require("react");
-+var POLL_MS4 = 15e3;
-+function BoardIcon() {
-+  return (0, import_react17.createElement)(
-+    "svg",
-+    { width: 18, height: 18, viewBox: "0 0 20 20", fill: "none", stroke: "currentColor", strokeWidth: 1.6, strokeLinejoin: "round", "aria-hidden": true },
-+    (0, import_react17.createElement)("rect", { x: 2.5, y: 3, width: 4, height: 14, rx: 1 }),
-+    (0, import_react17.createElement)("rect", { x: 8, y: 3, width: 4, height: 9, rx: 1 }),
-+    (0, import_react17.createElement)("rect", { x: 13.5, y: 3, width: 4, height: 12, rx: 1 })
-+  );
-+}
-+function shortId(id) {
-+  const hex = String(id ?? "").replace(/^task-/, "");
-+  return `#${hex.slice(-6)}`;
-+}
 +var ARCHIVE_SHOWN = 20;
 +function boardTasksFor(tasks, archive, limit = ARCHIVE_SHOWN) {
 +  const newest = [...archive ?? []].sort((a, b) => (b.updatedAt ?? 0) - (a.updatedAt ?? 0) || (b.createdAt ?? 0) - (a.createdAt ?? 0));
@@ -11210,6 +11244,10 @@ diff --git a/client.js b/client.js
 -  if (!host || phase === null || !shown) return null;
 -  const elapsed = now - shown.at >= 6e4 ? elapsedLabel(now - shown.at) : null;
 -  return (0, import_react_dom2.createPortal)((0, import_react7.createElement)(
+-    "div",
+-    { className: "bt-typing", "data-exiting": phase === "out" ? "" : void 0, "aria-hidden": true },
+-    bot ? (0, import_react7.createElement)(BotMark, { bot, size: 28, state: markState.current, live: true, pokeable: true }) : (0, import_react7.createElement)(RoomAvatar, { room: room2, roster, size: 28 }),
+-    (0, import_react7.createElement)(
 +function BoardCard2({ task, roster, movable, onMove, onDrag, partOf: partOf2 }) {
 +  const column = columnOf(task);
 +  const priority = priorityOf(task);
@@ -11239,11 +11277,16 @@ diff --git a/client.js b/client.js
 +      question ? (0, import_react17.createElement)("span", { key: "wait", className: "bt-board-wait" }, question) : null
 +    ],
 +    footer: (0, import_react17.createElement)(
-+      "span",
+       "span",
+-      { className: "bt-typing-text" },
+-      (0, import_react7.createElement)(
 +      { className: "bt-board-foot" },
 +      who ? (0, import_react17.createElement)("span", { className: "bt-board-who" }, who) : null,
 +      (0, import_react17.createElement)(
-+        "span",
+         "span",
+-        { key: `${shown.key}:${shown.at}`, className: "bt-typing-label" },
+-        (0, import_react7.createElement)(Shimmer, null, `${shown.text}…`),
+-        elapsed ? (0, import_react7.createElement)("span", { className: "bt-typing-time" }, `· ${elapsed}`) : null
 +        { className: "bt-board-progress" },
 +        (0, import_react17.createElement)(
 +          "span",
@@ -11320,17 +11363,7 @@ diff --git a/client.js b/client.js
 +  const selectedBot = scope?.kind === "bot" ? scope.botId : "";
 +  const selectedRoom = scope?.kind === "group" ? scope.roomId : "";
 +  return (0, import_react17.createElement)(
-     "div",
--    { className: "bt-typing", "data-exiting": phase === "out" ? "" : void 0, "aria-hidden": true },
--    bot ? (0, import_react7.createElement)(BotMark, { bot, size: 28, state: markState.current, live: true, pokeable: true }) : (0, import_react7.createElement)(RoomAvatar, { room: room2, roster, size: 28 }),
--    (0, import_react7.createElement)(
--      "span",
--      { className: "bt-typing-text" },
--      (0, import_react7.createElement)(
--        "span",
--        { key: `${shown.key}:${shown.at}`, className: "bt-typing-label" },
--        (0, import_react7.createElement)(Shimmer, null, `${shown.text}…`),
--        elapsed ? (0, import_react7.createElement)("span", { className: "bt-typing-time" }, `· ${elapsed}`) : null
++    "div",
 +    { className: "bt-board-body" },
 +    (0, import_react17.createElement)(
 +      "aside",
@@ -13021,10 +13054,32 @@ diff --git a/client.js b/client.js
  // src/client/speech.js
  var VOICE_BUNDLE = "@deepseek-ai/dsh-experimental-voice-input-bundle";
  var USABLE = /* @__PURE__ */ new Set(["ready", "standby", "waking"]);
-@@ -6089,264 +6089,40 @@ async function openCapture() {
-         const decoded = await audio.decodeAudioData(await blob.arrayBuffer());
-         const length = Math.max(1, Math.floor(Math.min(decoded.duration, maxSeconds) * 16e3));
-         const offline = new OfflineAudioContext(1, length, 16e3);
+@@ -6067,286 +6067,62 @@ async function openCapture() {
+   return {
+     level() {
+       if (closed) return 0;
+-      analyser.getFloatTimeDomainData(frame);
+-      let sum = 0;
+-      for (const sample of frame) sum += sample * sample;
+-      return Math.min(1, Math.sqrt(sum / frame.length) * 4);
+-    },
+-    cancel: close,
+-    async finish(maxSeconds) {
+-      if (closed || recorder.state === "inactive") {
+-        close();
+-        return null;
+-      }
+-      try {
+-        await new Promise((resolve) => {
+-          recorder.onstop = resolve;
+-          recorder.stop();
+-        });
+-        stream.getTracks().forEach((track) => track.stop());
+-        const blob = new Blob(chunks, { type: recorder.mimeType });
+-        if (blob.size === 0) return null;
+-        const decoded = await audio.decodeAudioData(await blob.arrayBuffer());
+-        const length = Math.max(1, Math.floor(Math.min(decoded.duration, maxSeconds) * 16e3));
+-        const offline = new OfflineAudioContext(1, length, 16e3);
 -        const source = offline.createBufferSource();
 -        source.buffer = decoded;
 -        source.connect(offline.destination);
@@ -13279,6 +13334,28 @@ diff --git a/client.js b/client.js
 -      )
 -    )
 -  );
++      analyser.getFloatTimeDomainData(frame);
++      let sum = 0;
++      for (const sample of frame) sum += sample * sample;
++      return Math.min(1, Math.sqrt(sum / frame.length) * 4);
++    },
++    cancel: close,
++    async finish(maxSeconds) {
++      if (closed || recorder.state === "inactive") {
++        close();
++        return null;
++      }
++      try {
++        await new Promise((resolve) => {
++          recorder.onstop = resolve;
++          recorder.stop();
++        });
++        stream.getTracks().forEach((track) => track.stop());
++        const blob = new Blob(chunks, { type: recorder.mimeType });
++        if (blob.size === 0) return null;
++        const decoded = await audio.decodeAudioData(await blob.arrayBuffer());
++        const length = Math.max(1, Math.floor(Math.min(decoded.duration, maxSeconds) * 16e3));
++        const offline = new OfflineAudioContext(1, length, 16e3);
 +        const source = offline.createBufferSource();
 +        source.buffer = decoded;
 +        source.connect(offline.destination);
@@ -14594,31 +14671,30 @@ diff --git a/client.js b/client.js
          key: item.name,
          item,
          confirming: confirming === item.name,
-@@ -7359,22 +7359,68 @@ function BotCapabilitiesCard({ bot, roster, actions, run, Card: Card2, SwitchRow
+@@ -7359,10 +7359,10 @@ function BotCapabilitiesCard({ bot, roster, actions, run, Card: Card2, SwitchRow
    const attached = new Set(bot.capabilities ?? []);
    const statuses = roster.capabilityStatuses?.[bot.id] ?? {};
    if (items.length === 0) return null;
 -  return (0, import_react16.createElement)(
 +  return (0, import_react25.createElement)(
-+    Card2,
-+    { title: t("Capabilities") },
+     Card2,
+     { title: t("Capabilities") },
+-    items.map((item) => (0, import_react16.createElement)(SwitchRow2, {
 +    items.map((item) => (0, import_react25.createElement)(SwitchRow2, {
-+      key: item.name,
-+      label: item.name,
-+      hint: attached.has(item.name) ? statusText(statuses[item.name]) : void 0,
-+      on: attached.has(item.name),
-+      onChange: (enabled) => void run(actions.setBotCapability(bot.id, item.name, enabled))
-+    }))
-+  );
-+}
-+
+       key: item.name,
+       label: item.name,
+       hint: attached.has(item.name) ? statusText(statuses[item.name]) : void 0,
+@@ -7372,9 +7372,55 @@ function BotCapabilitiesCard({ bot, roster, actions, run, Card: Card2, SwitchRow
+   );
+ }
+ 
 +// src/client/connector-bots.js
 +var import_react26 = require("react");
 +function ownBots(roster) {
 +  const me = roster?.self?.memberId;
 +  return (roster?.bots ?? []).filter((bot) => !bot.remote && (me === void 0 || me === null || bot.ownerId === void 0 || bot.ownerId === me));
 +}
-+var connectedConnectors = (roster) => (roster?.connectors ?? []).filter((connector) => connector.state !== "off" && connector.kind !== "sender");
++var connectedConnectors = (roster) => (roster?.connectors ?? []).filter((connector) => connector.state !== "off" && connector.kind !== "sender" && !(connector.kind === "channel" && connector.mode !== "app"));
 +var isOn = (bot, id) => bot.connectors?.[id] !== false;
 +function ownHint(bot, id) {
 +  return isOn(bot, id) ? t("On. This Bot can use it on every turn.") : t("Off. This Bot will not use it.");
@@ -14648,24 +14724,16 @@ diff --git a/client.js b/client.js
 +  const connected = connectedConnectors(roster);
 +  if (connected.length === 0) return null;
 +  return (0, import_react26.createElement)(
-     Card2,
--    { title: t("Capabilities") },
--    items.map((item) => (0, import_react16.createElement)(SwitchRow2, {
--      key: item.name,
--      label: item.name,
--      hint: attached.has(item.name) ? statusText(statuses[item.name]) : void 0,
--      on: attached.has(item.name),
--      onChange: (enabled) => void run(actions.setBotCapability(bot.id, item.name, enabled))
--    }))
++    Card2,
 +    { title: t("Connectors") },
 +    connected.map((connector) => (0, import_react26.createElement)(
 +      "div",
 +      { key: connector.id, className: "bt-connector-bot" },
 +      (0, import_react26.createElement)(BotSwitch, { bot, connector, name: connector.name, actions, run, SwitchRow: SwitchRow2 })
 +    ))
-   );
- }
- 
++  );
++}
++
  // src/client/memory-panel.js
 -var import_react17 = require("react");
 -var POLL_MS2 = 1500;
@@ -14932,7 +15000,7 @@ diff --git a/client.js b/client.js
      alive.current = true;
      void load({ summarize: true });
      return () => {
-@@ -7606,9 +7606,9 @@ function useMemoryView(botId, actions) {
+@@ -7606,38 +7606,331 @@ function useMemoryView(botId, actions) {
    }, [botId]);
    return { view, error, load, show };
  }
@@ -14945,15 +15013,13 @@ diff --git a/client.js b/client.js
      const id = setInterval(() => setNow(Date.now()), every);
      return () => clearInterval(id);
    }, [every]);
-@@ -7616,18 +7616,18 @@ function useNow(every) {
+   return now;
  }
- function MemoryDialog({ bot, actions, leaving = false }) {
-   const { view, error, load, show } = useMemoryView(bot.id, actions);
+-function MemoryDialog({ bot, actions, leaving = false }) {
+-  const { view, error, load, show } = useMemoryView(bot.id, actions);
 -  const [page, setPage] = (0, import_react17.useState)("summary");
 -  const [menu, setMenu] = (0, import_react17.useState)(false);
-+  const [page, setPage] = (0, import_react27.useState)("summary");
-+  const [menu, setMenu] = (0, import_react27.useState)(false);
-   const [menuShown, menuLeaving] = useLinger(menu, MENU_EXIT_MS2);
+-  const [menuShown, menuLeaving] = useLinger(menu, MENU_EXIT_MS2);
 -  const [text, setText] = (0, import_react17.useState)("");
 -  const [answer, setAnswer] = (0, import_react17.useState)(null);
 -  const menuRef = (0, import_react17.useRef)(null);
@@ -14961,6 +15027,14 @@ diff --git a/client.js b/client.js
 -  const inputRef = (0, import_react17.useRef)(null);
 -  const now = useNow(3e4);
 -  const close = (0, import_react17.useCallback)(() => actions.closeMemory(), []);
+-  useEscape(close);
+-  (0, import_react17.useEffect)(() => {
+-    if (!menu) return void 0;
++function MemoryDialog({ bot, actions, leaving = false }) {
++  const { view, error, load, show } = useMemoryView(bot.id, actions);
++  const [page, setPage] = (0, import_react27.useState)("summary");
++  const [menu, setMenu] = (0, import_react27.useState)(false);
++  const [menuShown, menuLeaving] = useLinger(menu, MENU_EXIT_MS2);
 +  const [text, setText] = (0, import_react27.useState)("");
 +  const [answer, setAnswer] = (0, import_react27.useState)(null);
 +  const menuRef = (0, import_react27.useRef)(null);
@@ -14968,37 +15042,79 @@ diff --git a/client.js b/client.js
 +  const inputRef = (0, import_react27.useRef)(null);
 +  const now = useNow3(3e4);
 +  const close = (0, import_react27.useCallback)(() => actions.closeMemory(), []);
-   useEscape(close);
--  (0, import_react17.useEffect)(() => {
++  useEscape(close);
 +  (0, import_react27.useEffect)(() => {
-     if (!menu) return void 0;
-     const onDown = (event) => {
-       if (menuRef.current?.contains(event.target) || dotsRef.current?.contains(event.target)) return;
-@@ -7689,52 +7689,52 @@ function MemoryDialog({ bot, actions, leaving = false }) {
-   const when3 = view?.summary ? ago(view.summary.at, now) : null;
-   const status = view === null ? "" : page === "entries" ? count === 1 ? t("1 entry") : t("{count} entries", { count }) : view.summarizing && view.summary ? t("Updating…") : view.summary && view.fresh ? when3 ? t("Updated {time}", { time: when3 }) : t("Updated just now") : "";
-   const busy = answer?.pending === true;
--  return (0, import_react17.createElement)(
++    if (!menu) return void 0;
++    const onDown = (event) => {
++      if (menuRef.current?.contains(event.target) || dotsRef.current?.contains(event.target)) return;
++      setMenu(false);
++    };
++    const onKey = (event) => {
++      if (event.key === "Escape") {
++        event.stopPropagation();
++        setMenu(false);
++        dotsRef.current?.focus();
++      }
++    };
++    window.addEventListener("mousedown", onDown);
++    window.addEventListener("keydown", onKey, true);
++    return () => {
++      window.removeEventListener("mousedown", onDown);
++      window.removeEventListener("keydown", onKey, true);
++    };
++  }, [menu]);
++  const regenerate = () => {
++    setMenu(false);
++    setPage("summary");
++    void load({ regenerate: true });
++  };
++  const openEntries = () => {
++    setMenu(false);
++    setPage("entries");
++  };
++  const backToSummary = () => {
++    setPage("summary");
++    void load({ summarize: true });
++  };
++  const remove = async (entry) => {
++    try {
++      show(await actions.memoryForget(bot.id, entry));
++      return true;
++    } catch (failure) {
++      setAnswer({ asked: entry.text, error: failure?.message ?? String(failure) });
++      return false;
++    }
++  };
++  const ask = async (event) => {
++    event.preventDefault();
++    const asked = text.trim();
++    if (asked === "" || answer?.pending) return;
++    setText("");
++    setAnswer({ asked, pending: true });
++    try {
++      const result = await actions.memoryAsk(bot.id, asked);
++      setAnswer({ asked, reply: result.reply, changes: result.changes });
++      show(result.view);
++      if (result.changes.some((change) => change.ok)) void load({ summarize: page === "summary" });
++    } catch (failure) {
++      setAnswer({ asked, error: failure?.message ?? String(failure) });
++    }
++    inputRef.current?.focus();
++  };
++  const count = view?.entries.length ?? 0;
++  const when3 = view?.summary ? ago(view.summary.at, now) : null;
++  const status = view === null ? "" : page === "entries" ? count === 1 ? t("1 entry") : t("{count} entries", { count }) : view.summarizing && view.summary ? t("Updating…") : view.summary && view.fresh ? when3 ? t("Updated {time}", { time: when3 }) : t("Updated just now") : "";
++  const busy = answer?.pending === true;
 +  return (0, import_react27.createElement)(
-     "div",
-     { className: "bt-mem-layer", "data-leaving": leaving || void 0 },
--    (0, import_react17.createElement)("div", { className: "bt-scrim bt-mem-scrim", onMouseDown: close }),
--    (0, import_react17.createElement)(
++    "div",
++    { className: "bt-mem-layer", "data-leaving": leaving || void 0 },
 +    (0, import_react27.createElement)("div", { className: "bt-scrim bt-mem-scrim", onMouseDown: close }),
 +    (0, import_react27.createElement)(
-       "div",
-       { className: "bt-mem", role: "dialog", "aria-modal": true, "aria-label": t("{name}'s memory", { name: bot.name }) },
--      (0, import_react17.createElement)(
++      "div",
++      { className: "bt-mem", role: "dialog", "aria-modal": true, "aria-label": t("{name}'s memory", { name: bot.name }) },
 +      (0, import_react27.createElement)(
-         "div",
-         { className: "bt-mem-head" },
--        page === "entries" ? (0, import_react17.createElement)("button", { type: "button", className: "bt-icon-btn", "aria-label": t("Back to the summary"), onClick: backToSummary }, (0, import_react17.createElement)(ChevronLeftIcon)) : null,
--        (0, import_react17.createElement)("h2", null, page === "entries" ? t("All entries") : t("Memory summary")),
--        (0, import_react17.createElement)("span", { className: "bt-mem-status" }, page === "summary" ? [bot.name, status].filter(Boolean).join(" · ") : status),
--        (0, import_react17.createElement)("span", { className: "bt-mem-head-gap" }),
--        (0, import_react17.createElement)("button", { ref: dotsRef, type: "button", className: "bt-icon-btn", "aria-label": t("Memory options"), "aria-haspopup": "menu", "aria-expanded": menu, onClick: () => setMenu((value) => !value) }, (0, import_react17.createElement)(DotsIcon)),
--        (0, import_react17.createElement)("button", { type: "button", className: "bt-icon-btn", "aria-label": t("Close memory"), onClick: close }, (0, import_react17.createElement)(CloseIcon)),
--        menuShown ? (0, import_react17.createElement)(
++        "div",
++        { className: "bt-mem-head" },
 +        page === "entries" ? (0, import_react27.createElement)("button", { type: "button", className: "bt-icon-btn", "aria-label": t("Back to the summary"), onClick: backToSummary }, (0, import_react27.createElement)(ChevronLeftIcon)) : null,
 +        (0, import_react27.createElement)("h2", null, page === "entries" ? t("All entries") : t("Memory summary")),
 +        (0, import_react27.createElement)("span", { className: "bt-mem-status" }, page === "summary" ? [bot.name, status].filter(Boolean).join(" · ") : status),
@@ -15006,67 +15122,55 @@ diff --git a/client.js b/client.js
 +        (0, import_react27.createElement)("button", { ref: dotsRef, type: "button", className: "bt-icon-btn", "aria-label": t("Memory options"), "aria-haspopup": "menu", "aria-expanded": menu, onClick: () => setMenu((value) => !value) }, (0, import_react27.createElement)(DotsIcon)),
 +        (0, import_react27.createElement)("button", { type: "button", className: "bt-icon-btn", "aria-label": t("Close memory"), onClick: close }, (0, import_react27.createElement)(CloseIcon)),
 +        menuShown ? (0, import_react27.createElement)(
-           "div",
-           { ref: menuRef, className: "bt-menu bt-mem-menu", role: "menu", "aria-label": t("Memory options"), "data-leaving": menuLeaving || void 0 },
--          (0, import_react17.createElement)(
++          "div",
++          { ref: menuRef, className: "bt-menu bt-mem-menu", role: "menu", "aria-label": t("Memory options"), "data-leaving": menuLeaving || void 0 },
 +          (0, import_react27.createElement)(
-             "button",
-             { type: "button", role: "menuitem", onClick: openEntries },
--            (0, import_react17.createElement)("span", { className: "bt-menu-label" }, t("All entries")),
--            (0, import_react17.createElement)("span", { className: "bt-menu-hint" }, String(count))
++            "button",
++            { type: "button", role: "menuitem", onClick: openEntries },
 +            (0, import_react27.createElement)("span", { className: "bt-menu-label" }, t("All entries")),
 +            (0, import_react27.createElement)("span", { className: "bt-menu-hint" }, String(count))
-           ),
--          (0, import_react17.createElement)(
++          ),
 +          (0, import_react27.createElement)(
-             "button",
-             { type: "button", role: "menuitem", disabled: count === 0 || view?.summarizing, onClick: regenerate },
--            (0, import_react17.createElement)("span", { className: "bt-menu-label" }, t("Regenerate summary"))
++            "button",
++            { type: "button", role: "menuitem", disabled: count === 0 || view?.summarizing, onClick: regenerate },
 +            (0, import_react27.createElement)("span", { className: "bt-menu-label" }, t("Regenerate summary"))
-           )
-         ) : null
-       ),
--      (0, import_react17.createElement)(
++          )
++        ) : null
++      ),
 +      (0, import_react27.createElement)(
-         "div",
-         { className: "bt-mem-body" },
--        error ? (0, import_react17.createElement)("div", { className: "bt-error", role: "alert", style: { padding: 0 } }, hostText(error)) : null,
--        view === null ? error ? null : (0, import_react17.createElement)(Skeleton) : page === "entries" ? (0, import_react17.createElement)(Entries, { bot, view, remove }) : (0, import_react17.createElement)(Summary, { bot, view, regenerate })
++        "div",
++        { className: "bt-mem-body" },
 +        error ? (0, import_react27.createElement)("div", { className: "bt-error", role: "alert", style: { padding: 0 } }, hostText(error)) : null,
 +        view === null ? error ? null : (0, import_react27.createElement)(Skeleton) : page === "entries" ? (0, import_react27.createElement)(Entries, { bot, view, remove }) : (0, import_react27.createElement)(Summary, { bot, view, regenerate })
-       ),
--      (0, import_react17.createElement)(
++      ),
 +      (0, import_react27.createElement)(
-         "div",
-         { className: "bt-mem-foot" },
--        answer ? (0, import_react17.createElement)(Reply, { answer, dismiss: () => setAnswer(null) }) : null,
--        (0, import_react17.createElement)(
++        "div",
++        { className: "bt-mem-foot" },
 +        answer ? (0, import_react27.createElement)(Reply, { answer, dismiss: () => setAnswer(null) }) : null,
 +        (0, import_react27.createElement)(
-           "form",
-           { className: "bt-mem-ask", onSubmit: ask },
--          (0, import_react17.createElement)("input", {
++          "form",
++          { className: "bt-mem-ask", onSubmit: ask },
 +          (0, import_react27.createElement)("input", {
-             ref: inputRef,
-             className: "bt-mem-input",
-             value: text,
-@@ -7744,10 +7744,10 @@ function MemoryDialog({ bot, actions, leaving = false }) {
-             "aria-label": t("Ask about or update {name}'s memory", { name: bot.name }),
-             onChange: (event) => setText(event.target.value)
-           }),
--          (0, import_react17.createElement)(
++            ref: inputRef,
++            className: "bt-mem-input",
++            value: text,
++            maxLength: 2e3,
++            disabled: view === null,
++            placeholder: t("Ask or update"),
++            "aria-label": t("Ask about or update {name}'s memory", { name: bot.name }),
++            onChange: (event) => setText(event.target.value)
++          }),
 +          (0, import_react27.createElement)(
-             "button",
-             { type: "submit", className: "bt-mem-send", disabled: busy || text.trim() === "", "aria-label": t("Send") },
--            busy ? (0, import_react17.createElement)("span", { className: "bt-mem-spin", "aria-hidden": true }) : (0, import_react17.createElement)(ArrowUpIcon)
++            "button",
++            { type: "submit", className: "bt-mem-send", disabled: busy || text.trim() === "", "aria-label": t("Send") },
 +            busy ? (0, import_react27.createElement)("span", { className: "bt-mem-spin", "aria-hidden": true }) : (0, import_react27.createElement)(ArrowUpIcon)
-           )
-         )
-       )
-@@ -7755,8 +7755,40 @@ function MemoryDialog({ bot, actions, leaving = false }) {
-   );
- }
- 
++          )
++        )
++      )
++    )
++  );
++}
++
 +// src/client/standing-approvals.js
 +var import_react28 = require("react");
 +var standingOf = (target, roster) => {
@@ -15099,279 +15203,362 @@ diff --git a/client.js b/client.js
 +  );
 +}
 +
- // src/client/bot-settings.js
--var import_react18 = require("react");
++// src/client/bot-settings.js
 +var import_react29 = require("react");
- var capitalize = (word) => word[0].toUpperCase() + word.slice(1);
- async function avatarImage(file) {
-   if (!/^image\/(png|jpeg|webp|gif)$/.test(file.type)) throw new Error(t("Choose a PNG, JPEG, WebP, or GIF image"));
-@@ -7780,8 +7780,8 @@ async function avatarImage(file) {
-   throw new Error(t("That image is too large"));
- }
- function InlineText({ label, value, placeholder, required = false, maxLength, multiline = false, onSave }) {
--  const [draft, setDraft] = (0, import_react18.useState)(null);
--  const reverting = (0, import_react18.useRef)(false);
++var capitalize = (word) => word[0].toUpperCase() + word.slice(1);
++async function avatarImage(file) {
++  if (!/^image\/(png|jpeg|webp|gif)$/.test(file.type)) throw new Error(t("Choose a PNG, JPEG, WebP, or GIF image"));
++  if (file.size > 25 * 1024 * 1024) throw new Error(t("Choose an image smaller than 25 MB"));
++  const bitmap = await createImageBitmap(file);
++  const side = 160;
++  const canvas = document.createElement("canvas");
++  canvas.width = side;
++  canvas.height = side;
++  const context = canvas.getContext("2d");
++  context.imageSmoothingQuality = "high";
++  const crop = Math.min(bitmap.width, bitmap.height);
++  context.drawImage(bitmap, (bitmap.width - crop) / 2, (bitmap.height - crop) / 2, crop, crop, 0, 0, side, side);
++  bitmap.close?.();
++  for (const quality of [0.9, 0.75, 0.6]) {
++    const url = canvas.toDataURL("image/webp", quality);
++    if (url.startsWith("data:image/webp") && url.length < 15e4) return url;
++  }
++  const png = canvas.toDataURL("image/png");
++  if (png.length < 15e4) return png;
++  throw new Error(t("That image is too large"));
++}
++function InlineText({ label, value, placeholder, required = false, maxLength, multiline = false, onSave }) {
 +  const [draft, setDraft] = (0, import_react29.useState)(null);
 +  const reverting = (0, import_react29.useRef)(false);
-   const commit = () => {
-     const next = draft?.trim();
-     setDraft(null);
-@@ -7792,7 +7792,7 @@ function InlineText({ label, value, placeholder, required = false, maxLength, mu
-     if (next === void 0 || next === (value ?? "") || required && next === "") return;
-     void onSave(next);
-   };
--  return (0, import_react18.createElement)(multiline ? "textarea" : "input", {
++  const commit = () => {
++    const next = draft?.trim();
++    setDraft(null);
++    if (reverting.current) {
++      reverting.current = false;
++      return;
++    }
++    if (next === void 0 || next === (value ?? "") || required && next === "") return;
++    void onSave(next);
++  };
 +  return (0, import_react29.createElement)(multiline ? "textarea" : "input", {
-     className: multiline ? "bt-bs-input bt-bs-area" : "bt-bs-input",
-     value: draft ?? value ?? "",
-     placeholder,
-@@ -7813,29 +7813,29 @@ function InlineText({ label, value, placeholder, required = false, maxLength, mu
-   });
- }
- function Row({ label, hint, stack = false, children }) {
--  return (0, import_react18.createElement)(
++    className: multiline ? "bt-bs-input bt-bs-area" : "bt-bs-input",
++    value: draft ?? value ?? "",
++    placeholder,
++    maxLength,
++    required,
++    "aria-label": label,
++    spellCheck: false,
++    onChange: (event) => setDraft(event.target.value),
++    onBlur: commit,
++    onKeyDown: (event) => {
++      if (event.key === "Escape") {
++        event.stopPropagation();
++        reverting.current = true;
++        event.currentTarget.blur();
++      }
++      if (event.key === "Enter" && !multiline && !event.nativeEvent.isComposing) event.currentTarget.blur();
++    }
++  });
++}
++function Row({ label, hint, stack = false, children }) {
 +  return (0, import_react29.createElement)(
-     "label",
-     { className: stack ? "bt-set-row bt-bs-row bt-bs-stack" : "bt-set-row bt-bs-row" },
--    (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, label), hint ? (0, import_react18.createElement)("span", { className: "bt-set-hint" }, hint) : null),
++    "label",
++    { className: stack ? "bt-set-row bt-bs-row bt-bs-stack" : "bt-set-row bt-bs-row" },
 +    (0, import_react29.createElement)("span", { className: "bt-set-copy" }, (0, import_react29.createElement)("span", { className: "bt-bs-label" }, label), hint ? (0, import_react29.createElement)("span", { className: "bt-set-hint" }, hint) : null),
-     children
-   );
- }
- function Card({ title, children }) {
--  return (0, import_react18.createElement)("section", { className: "bt-set-section" }, title ? (0, import_react18.createElement)("h3", null, title) : null, (0, import_react18.createElement)("div", { className: "bt-set-card" }, children));
++    children
++  );
++}
++function Card({ title, children }) {
 +  return (0, import_react29.createElement)("section", { className: "bt-set-section" }, title ? (0, import_react29.createElement)("h3", null, title) : null, (0, import_react29.createElement)("div", { className: "bt-set-card" }, children));
- }
- function Switch({ on, label, disabled, onChange }) {
--  return (0, import_react18.createElement)(
++}
++function Switch({ on, label, disabled, onChange }) {
 +  return (0, import_react29.createElement)(
-     "button",
-     { type: "button", role: "switch", className: "bt-switch", "aria-checked": on, "aria-label": label, disabled, onClick: () => onChange(!on) },
--    (0, import_react18.createElement)("span", { className: "bt-switch-knob", "aria-hidden": true })
++    "button",
++    { type: "button", role: "switch", className: "bt-switch", "aria-checked": on, "aria-label": label, disabled, onClick: () => onChange(!on) },
 +    (0, import_react29.createElement)("span", { className: "bt-switch-knob", "aria-hidden": true })
-   );
- }
--function SwitchRow({ label, hint, on, disabled, onChange }) {
--  return (0, import_react18.createElement)(
++  );
++}
 +function SwitchRow({ label, hint, on, disabled, onChange, showLabel = true }) {
 +  return (0, import_react29.createElement)(
-     "div",
-     { className: "bt-set-row bt-bs-row" },
--    (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, label), hint ? (0, import_react18.createElement)("span", { className: "bt-set-hint" }, hint) : null),
--    (0, import_react18.createElement)(Switch, { on, label, disabled, onChange })
++    "div",
++    { className: "bt-set-row bt-bs-row" },
 +    (0, import_react29.createElement)("span", { className: "bt-set-copy" }, showLabel ? (0, import_react29.createElement)("span", { className: "bt-bs-label" }, label) : null, hint ? (0, import_react29.createElement)("span", { className: "bt-set-hint" }, hint) : null),
 +    (0, import_react29.createElement)(Switch, { on, label, disabled, onChange })
-   );
- }
- function modelHint(bot, roster) {
-@@ -7846,22 +7846,22 @@ function modelHint(bot, roster) {
-   return t("Applies from the next message.");
- }
- function ShapeRing({ shape, size }) {
--  const maskId = (0, import_react18.useRef)("");
++  );
++}
++function modelHint(bot, roster) {
++  const shown = modelOf(bot, roster);
++  if (shown === void 0) return t("Pick the model this Bot runs on.");
++  if (!shown.served && (roster.models ?? []).length > 0) return t("This model is not available now. Pick another one.");
++  if (bot.appliedModel && bot.appliedModel === bot.model) return t("Every message of this Bot runs on it.");
++  return t("Applies from the next message.");
++}
++function ShapeRing({ shape, size }) {
 +  const maskId = (0, import_react29.useRef)("");
-   if (maskId.current === "") maskId.current = `bt-ring-${nextMarkSerial()}`;
-   const def = shapeOf(shape);
-   const unit = def.size / size;
-   const markup = `<defs><mask id="${maskId.current}" ${maskBox(def.size)}>${holes(def, `<g stroke="#000" stroke-width="${6 * unit}" stroke-linejoin="round">${bodyOf(def, "#000", true)}</g>`)}</mask></defs><g mask="url(#${maskId.current})" stroke="currentColor" stroke-width="${8 * unit}" stroke-linejoin="round">${bodyOf(def, "currentColor", true)}</g>`;
--  return (0, import_react18.createElement)("svg", { className: "bt-ring", viewBox: `0 0 ${def.size} ${def.size}`, "aria-hidden": true, dangerouslySetInnerHTML: { __html: markup } });
++  if (maskId.current === "") maskId.current = `bt-ring-${nextMarkSerial()}`;
++  const def = shapeOf(shape);
++  const unit = def.size / size;
++  const markup = `<defs><mask id="${maskId.current}" ${maskBox(def.size)}>${holes(def, `<g stroke="#000" stroke-width="${6 * unit}" stroke-linejoin="round">${bodyOf(def, "#000", true)}</g>`)}</mask></defs><g mask="url(#${maskId.current})" stroke="currentColor" stroke-width="${8 * unit}" stroke-linejoin="round">${bodyOf(def, "currentColor", true)}</g>`;
 +  return (0, import_react29.createElement)("svg", { className: "bt-ring", viewBox: `0 0 ${def.size} ${def.size}`, "aria-hidden": true, dangerouslySetInnerHTML: { __html: markup } });
- }
- function CharacterGrid({ look, hasPhoto = false, onShape, onColor }) {
-   const shapes = [...PICKER_SHAPES, ...Object.keys(SHAPES).filter((id) => !Object.hasOwn(CHARACTERS, id))];
-   if (!shapes.includes(look.shape)) shapes.push(look.shape);
-   const rows = [];
-   for (let index = 0; index < shapes.length; index += PICKER_COLUMNS) rows.push(shapes.slice(index, index + PICKER_COLUMNS));
--  return (0, import_react18.createElement)(
--    import_react18.Fragment,
++}
++function CharacterGrid({ look, hasPhoto = false, onShape, onColor }) {
++  const shapes = [...PICKER_SHAPES, ...Object.keys(SHAPES).filter((id) => !Object.hasOwn(CHARACTERS, id))];
++  if (!shapes.includes(look.shape)) shapes.push(look.shape);
++  const rows = [];
++  for (let index = 0; index < shapes.length; index += PICKER_COLUMNS) rows.push(shapes.slice(index, index + PICKER_COLUMNS));
 +  return (0, import_react29.createElement)(
 +    import_react29.Fragment,
-     null,
--    (0, import_react18.createElement)("div", { className: "bt-shapes", role: "group", "aria-label": t("Character shape") }, rows.map((row, index) => (0, import_react18.createElement)("div", { key: index, className: "bt-shape-row" }, row.map((id) => (0, import_react18.createElement)("button", {
++    null,
 +    (0, import_react29.createElement)("div", { className: "bt-shapes", role: "group", "aria-label": t("Character shape") }, rows.map((row, index) => (0, import_react29.createElement)("div", { key: index, className: "bt-shape-row" }, row.map((id) => (0, import_react29.createElement)("button", {
-       key: id,
-       type: "button",
-       className: "bt-shape",
-@@ -7869,8 +7869,8 @@ function CharacterGrid({ look, hasPhoto = false, onShape, onColor }) {
-       title: t(shapeOf(id).label),
-       "aria-pressed": !hasPhoto && look.shape === id,
-       onClick: () => onShape(id)
--    }, (0, import_react18.createElement)(ShapeRing, { shape: id, size: 36 }), (0, import_react18.createElement)(BotMark, { look: { shape: id, color: look.color }, size: 36 })))))),
--    (0, import_react18.createElement)("div", { className: "bt-colors", role: "group", "aria-label": t("Character color") }, CHARACTER_COLORS.map((color) => (0, import_react18.createElement)("button", {
++      key: id,
++      type: "button",
++      className: "bt-shape",
++      "aria-label": t(shapeOf(id).label),
++      title: t(shapeOf(id).label),
++      "aria-pressed": !hasPhoto && look.shape === id,
++      onClick: () => onShape(id)
 +    }, (0, import_react29.createElement)(ShapeRing, { shape: id, size: 36 }), (0, import_react29.createElement)(BotMark, { look: { shape: id, color: look.color }, size: 36 })))))),
 +    (0, import_react29.createElement)("div", { className: "bt-colors", role: "group", "aria-label": t("Character color") }, CHARACTER_COLORS.map((color) => (0, import_react29.createElement)("button", {
-       key: color,
-       type: "button",
-       className: "bt-color",
-@@ -7878,19 +7878,19 @@ function CharacterGrid({ look, hasPhoto = false, onShape, onColor }) {
-       title: t(capitalize(color)),
-       "aria-pressed": look.color === color,
-       onClick: () => onColor(color)
--    }, (0, import_react18.createElement)("span", { style: { background: paintCss(color) } }))))
++      key: color,
++      type: "button",
++      className: "bt-color",
++      "aria-label": t(capitalize(color)),
++      title: t(capitalize(color)),
++      "aria-pressed": look.color === color,
++      onClick: () => onColor(color)
 +    }, (0, import_react29.createElement)("span", { style: { background: paintCss(color) } }))))
-   );
- }
- function AvatarEditor({ bot, actions, run, onClose }) {
-   const look = lookOf(bot);
--  const [tab, setTab] = (0, import_react18.useState)(look.image ? "upload" : "bot");
--  const [over, setOver] = (0, import_react18.useState)(false);
--  const ref = (0, import_react18.useRef)(null);
--  const fileRef = (0, import_react18.useRef)(null);
++  );
++}
++function AvatarEditor({ bot, actions, run, onClose }) {
++  const look = lookOf(bot);
 +  const [tab, setTab] = (0, import_react29.useState)(look.image ? "upload" : "bot");
 +  const [over, setOver] = (0, import_react29.useState)(false);
 +  const ref = (0, import_react29.useRef)(null);
 +  const fileRef = (0, import_react29.useRef)(null);
-   const upload = (file) => {
-     if (file) void run(avatarImage(file).then((image) => actions.updateBot(bot.id, { avatar: { ...bot.avatar ?? {}, image } })));
-   };
--  (0, import_react18.useEffect)(() => {
++  const upload = (file) => {
++    if (file) void run(avatarImage(file).then((image) => actions.updateBot(bot.id, { avatar: { ...bot.avatar ?? {}, image } })));
++  };
 +  (0, import_react29.useEffect)(() => {
      const onDown = (event) => {
-       if (!(event.target instanceof Element) || ref.current?.contains(event.target) || event.target.closest(".bt-avatar-trigger")) return;
-       onClose();
-@@ -7908,7 +7908,7 @@ function AvatarEditor({ bot, actions, run, onClose }) {
+-      if (menuRef.current?.contains(event.target) || dotsRef.current?.contains(event.target)) return;
+-      setMenu(false);
++      if (!(event.target instanceof Element) || ref.current?.contains(event.target) || event.target.closest(".bt-avatar-trigger")) return;
++      onClose();
+     };
+     const onKey = (event) => {
+       if (event.key === "Escape") {
+         event.stopPropagation();
+-        setMenu(false);
+-        dotsRef.current?.focus();
++        onClose();
+       }
+     };
+     window.addEventListener("mousedown", onDown);
+@@ -7646,514 +7646,900 @@ function MemoryDialog({ bot, actions, leaving = false }) {
+       window.removeEventListener("mousedown", onDown);
        window.removeEventListener("keydown", onKey, true);
      };
-   }, [onClose]);
--  (0, import_react18.useEffect)(() => {
+-  }, [menu]);
+-  const regenerate = () => {
+-    setMenu(false);
+-    setPage("summary");
+-    void load({ regenerate: true });
+-  };
+-  const openEntries = () => {
+-    setMenu(false);
+-    setPage("entries");
+-  };
+-  const backToSummary = () => {
+-    setPage("summary");
+-    void load({ summarize: true });
+-  };
+-  const remove = async (entry) => {
+-    try {
+-      show(await actions.memoryForget(bot.id, entry));
+-      return true;
+-    } catch (failure) {
+-      setAnswer({ asked: entry.text, error: failure?.message ?? String(failure) });
+-      return false;
+-    }
+-  };
+-  const ask = async (event) => {
+-    event.preventDefault();
+-    const asked = text.trim();
+-    if (asked === "" || answer?.pending) return;
+-    setText("");
+-    setAnswer({ asked, pending: true });
+-    try {
+-      const result = await actions.memoryAsk(bot.id, asked);
+-      setAnswer({ asked, reply: result.reply, changes: result.changes });
+-      show(result.view);
+-      if (result.changes.some((change) => change.ok)) void load({ summarize: page === "summary" });
+-    } catch (failure) {
+-      setAnswer({ asked, error: failure?.message ?? String(failure) });
+-    }
+-    inputRef.current?.focus();
++  }, [onClose]);
 +  (0, import_react29.useEffect)(() => {
-     if (tab !== "upload") return void 0;
-     const onPaste = (event) => {
-       const file = [...event.clipboardData?.files ?? []].find((item) => item.type.startsWith("image/"));
-@@ -7922,32 +7922,32 @@ function AvatarEditor({ bot, actions, run, onClose }) {
-   }, [tab, bot]);
-   const hasPhoto = Boolean(look.image);
-   const glide = useGlide(tab);
--  return (0, import_react18.createElement)(
++    if (tab !== "upload") return void 0;
++    const onPaste = (event) => {
++      const file = [...event.clipboardData?.files ?? []].find((item) => item.type.startsWith("image/"));
++      if (file) {
++        event.preventDefault();
++        upload(file);
++      }
++    };
++    window.addEventListener("paste", onPaste);
++    return () => window.removeEventListener("paste", onPaste);
++  }, [tab, bot]);
++  const hasPhoto = Boolean(look.image);
++  const glide = useGlide(tab);
 +  return (0, import_react29.createElement)(
-     "div",
-     { ref, className: "bt-avedit", role: "dialog", "aria-label": t("Avatar editor") },
--    (0, import_react18.createElement)(
++    "div",
++    { ref, className: "bt-avedit", role: "dialog", "aria-label": t("Avatar editor") },
 +    (0, import_react29.createElement)(
-       "div",
-       { className: "bt-avedit-top" },
--      (0, import_react18.createElement)(
++      "div",
++      { className: "bt-avedit-top" },
 +      (0, import_react29.createElement)(
-         "div",
-         { ref: glide.box, role: "tablist", "aria-label": t("Avatar source"), className: "bt-avedit-tabs" },
--        (0, import_react18.createElement)("span", { ref: glide.thumb, className: "bt-thumb", "aria-hidden": true }),
--        [["bot", "Bot"], ["upload", "Upload"]].map(([id, label]) => (0, import_react18.createElement)("button", { key: id, type: "button", role: "tab", className: "bt-avedit-tab", "aria-selected": tab === id, onClick: () => setTab(id) }, t(label)))
++        "div",
++        { ref: glide.box, role: "tablist", "aria-label": t("Avatar source"), className: "bt-avedit-tabs" },
 +        (0, import_react29.createElement)("span", { ref: glide.thumb, className: "bt-thumb", "aria-hidden": true }),
 +        [["bot", "Bot"], ["upload", "Upload"]].map(([id, label]) => (0, import_react29.createElement)("button", { key: id, type: "button", role: "tab", className: "bt-avedit-tab", "aria-selected": tab === id, onClick: () => setTab(id) }, t(label)))
-       ),
--      (0, import_react18.createElement)("button", {
++      ),
 +      (0, import_react29.createElement)("button", {
-         type: "button",
-         className: "bt-avedit-tab bt-avedit-reset",
-         title: t("Reset character to default"),
-         onClick: () => run(actions.updateBot(bot.id, { avatar: null, color: null }))
-       }, t("Reset"))
-     ),
--    tab === "bot" ? (0, import_react18.createElement)(CharacterGrid, {
++        type: "button",
++        className: "bt-avedit-tab bt-avedit-reset",
++        title: t("Reset character to default"),
++        onClick: () => run(actions.updateBot(bot.id, { avatar: null, color: null }))
++      }, t("Reset"))
++    ),
 +    tab === "bot" ? (0, import_react29.createElement)(CharacterGrid, {
-       look,
-       hasPhoto,
-       onShape: (shape) => run(actions.updateBot(bot.id, { avatar: { shape } })),
-       onColor: (color) => run(actions.updateBot(bot.id, { color }))
-     }) : null,
--    tab === "upload" ? (0, import_react18.createElement)(
++      look,
++      hasPhoto,
++      onShape: (shape) => run(actions.updateBot(bot.id, { avatar: { shape } })),
++      onColor: (color) => run(actions.updateBot(bot.id, { color }))
++    }) : null,
 +    tab === "upload" ? (0, import_react29.createElement)(
-       "div",
-       {
-         className: "bt-dropzone",
-@@ -7963,15 +7963,15 @@ function AvatarEditor({ bot, actions, run, onClose }) {
-           upload(event.dataTransfer.files?.[0]);
-         }
-       },
--      hasPhoto ? (0, import_react18.createElement)("img", { src: look.image, alt: "" }) : null,
--      (0, import_react18.createElement)("div", null, t("Drag, drop, or paste an image")),
--      (0, import_react18.createElement)(
++      "div",
++      {
++        className: "bt-dropzone",
++        "data-over": over || void 0,
++        onDragOver: (event) => {
++          event.preventDefault();
++          setOver(true);
++        },
++        onDragLeave: () => setOver(false),
++        onDrop: (event) => {
++          event.preventDefault();
++          setOver(false);
++          upload(event.dataTransfer.files?.[0]);
++        }
++      },
 +      hasPhoto ? (0, import_react29.createElement)("img", { src: look.image, alt: "" }) : null,
 +      (0, import_react29.createElement)("div", null, t("Drag, drop, or paste an image")),
 +      (0, import_react29.createElement)(
-         "div",
-         { className: "bt-actions", style: { justifyContent: "center" } },
--        (0, import_react18.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => fileRef.current?.click() }, hasPhoto ? t("Replace") : t("Browse files")),
--        hasPhoto ? (0, import_react18.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => run(actions.updateBot(bot.id, { avatar: hasShape(bot.avatar?.shape) ? { shape: bot.avatar.shape } : null })) }, t("Remove photo")) : null
++        "div",
++        { className: "bt-actions", style: { justifyContent: "center" } },
 +        (0, import_react29.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => fileRef.current?.click() }, hasPhoto ? t("Replace") : t("Browse files")),
 +        hasPhoto ? (0, import_react29.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => run(actions.updateBot(bot.id, { avatar: hasShape(bot.avatar?.shape) ? { shape: bot.avatar.shape } : null })) }, t("Remove photo")) : null
-       ),
--      (0, import_react18.createElement)("input", { ref: fileRef, type: "file", accept: "image/png,image/jpeg,image/webp,image/gif", hidden: true, onChange: (event) => {
++      ),
 +      (0, import_react29.createElement)("input", { ref: fileRef, type: "file", accept: "image/png,image/jpeg,image/webp,image/gif", hidden: true, onChange: (event) => {
-         const file = event.target.files?.[0];
-         event.target.value = "";
-         upload(file);
-@@ -7982,26 +7982,27 @@ function AvatarEditor({ bot, actions, run, onClose }) {
- function MemoryCard({ bot, actions }) {
-   const count = useMemoryCount(bot.id, actions);
-   const label = count === null ? t("Loading…") : count === 0 ? t("Nothing saved yet") : count === 1 ? t("1 entry") : t("{count} entries", { count });
--  return (0, import_react18.createElement)(
++        const file = event.target.files?.[0];
++        event.target.value = "";
++        upload(file);
++      } })
++    ) : null
++  );
++}
++function MemoryCard({ bot, actions }) {
++  const count = useMemoryCount(bot.id, actions);
++  const label = count === null ? t("Loading…") : count === 0 ? t("Nothing saved yet") : count === 1 ? t("1 entry") : t("{count} entries", { count });
 +  return (0, import_react29.createElement)(
-     Card,
-     { title: t("Memory") },
--    (0, import_react18.createElement)(
++    Card,
++    { title: t("Memory") },
 +    (0, import_react29.createElement)(
-       "button",
-       { type: "button", className: "bt-set-row bt-bs-row", "aria-label": t("Manage {name}'s memory", { name: bot.name }), onClick: () => actions.openMemory(bot.id) },
--      (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, label)),
--      (0, import_react18.createElement)("span", { className: "bt-mem-row-go" }, t("Manage"), (0, import_react18.createElement)(ChevronRightIcon))
++      "button",
++      { type: "button", className: "bt-set-row bt-bs-row", "aria-label": t("Manage {name}'s memory", { name: bot.name }), onClick: () => actions.openMemory(bot.id) },
 +      (0, import_react29.createElement)("span", { className: "bt-set-copy" }, (0, import_react29.createElement)("span", { className: "bt-bs-label" }, label)),
 +      (0, import_react29.createElement)("span", { className: "bt-mem-row-go" }, t("Manage"), (0, import_react29.createElement)(ChevronRightIcon))
-     )
-   );
- }
- function BotSettingsForm({ bot, roster, actions, run }) {
--  const [editing, setEditing] = (0, import_react18.useState)(false);
--  const [confirming, setConfirming] = (0, import_react18.useState)(false);
--  const closeEditor = (0, import_react18.useCallback)(() => setEditing(false), []);
--  (0, import_react18.useEffect)(() => {
++    )
++  );
++}
++function BotSettingsForm({ bot, roster, actions, run }) {
 +  const [editing, setEditing] = (0, import_react29.useState)(false);
 +  const [confirming, setConfirming] = (0, import_react29.useState)(false);
 +  const closeEditor = (0, import_react29.useCallback)(() => setEditing(false), []);
 +  (0, import_react29.useEffect)(() => {
-     if (!confirming) return void 0;
-     const timer = setTimeout(() => setConfirming(false), 4e3);
-     return () => clearTimeout(timer);
-   }, [confirming]);
++    if (!confirming) return void 0;
++    const timer = setTimeout(() => setConfirming(false), 4e3);
++    return () => clearTimeout(timer);
++  }, [confirming]);
 +  if (bot.remote) return null;
-   const isMainBot = isMainOf(roster, bot.id);
-   const onlyMain = isMainBot && (roster.mainBotIds ?? []).length === 1;
-   const isTile = roster.mainBotId === bot.id;
-@@ -8011,149 +8011,795 @@ function BotSettingsForm({ bot, roster, actions, run }) {
-     if (confirming) void run(actions.deleteBot(bot.id));
-     else setConfirming(true);
++  const isMainBot = isMainOf(roster, bot.id);
++  const onlyMain = isMainBot && (roster.mainBotIds ?? []).length === 1;
++  const isTile = roster.mainBotId === bot.id;
++  const save = (patch) => run(actions.updateBot(bot.id, patch));
++  const duplicate = () => run(actions.duplicateBot(bot.id).then((copy2) => actions.openSession(copy2.id)));
++  const remove = () => {
++    if (confirming) void run(actions.deleteBot(bot.id));
++    else setConfirming(true);
    };
--  (0, import_react18.useEffect)(() => {
+-  const count = view?.entries.length ?? 0;
+-  const when3 = view?.summary ? ago(view.summary.at, now) : null;
+-  const status = view === null ? "" : page === "entries" ? count === 1 ? t("1 entry") : t("{count} entries", { count }) : view.summarizing && view.summary ? t("Updating…") : view.summary && view.fresh ? when3 ? t("Updated {time}", { time: when3 }) : t("Updated just now") : "";
+-  const busy = answer?.pending === true;
+-  return (0, import_react17.createElement)(
 +  (0, import_react29.useEffect)(() => {
-     void actions.refreshModels?.();
-   }, [bot.id]);
--  return (0, import_react18.createElement)(
++    void actions.refreshModels?.();
++  }, [bot.id]);
 +  return (0, import_react29.createElement)(
      "div",
-     { className: "bt-bs" },
--    (0, import_react18.createElement)(
+-    { className: "bt-mem-layer", "data-leaving": leaving || void 0 },
+-    (0, import_react17.createElement)("div", { className: "bt-scrim bt-mem-scrim", onMouseDown: close }),
+-    (0, import_react17.createElement)(
++    { className: "bt-bs" },
 +    (0, import_react29.createElement)(
        "div",
-       { className: "bt-bs-hero" },
--      (0, import_react18.createElement)(
+-      { className: "bt-mem", role: "dialog", "aria-modal": true, "aria-label": t("{name}'s memory", { name: bot.name }) },
+-      (0, import_react17.createElement)(
++      { className: "bt-bs-hero" },
 +      (0, import_react29.createElement)(
          "div",
-         { className: "bt-avatar-anchor" },
--        (0, import_react18.createElement)(
+-        { className: "bt-mem-head" },
+-        page === "entries" ? (0, import_react17.createElement)("button", { type: "button", className: "bt-icon-btn", "aria-label": t("Back to the summary"), onClick: backToSummary }, (0, import_react17.createElement)(ChevronLeftIcon)) : null,
+-        (0, import_react17.createElement)("h2", null, page === "entries" ? t("All entries") : t("Memory summary")),
+-        (0, import_react17.createElement)("span", { className: "bt-mem-status" }, page === "summary" ? [bot.name, status].filter(Boolean).join(" · ") : status),
+-        (0, import_react17.createElement)("span", { className: "bt-mem-head-gap" }),
+-        (0, import_react17.createElement)("button", { ref: dotsRef, type: "button", className: "bt-icon-btn", "aria-label": t("Memory options"), "aria-haspopup": "menu", "aria-expanded": menu, onClick: () => setMenu((value) => !value) }, (0, import_react17.createElement)(DotsIcon)),
+-        (0, import_react17.createElement)("button", { type: "button", className: "bt-icon-btn", "aria-label": t("Close memory"), onClick: close }, (0, import_react17.createElement)(CloseIcon)),
+-        menuShown ? (0, import_react17.createElement)(
+-          "div",
+-          { ref: menuRef, className: "bt-menu bt-mem-menu", role: "menu", "aria-label": t("Memory options"), "data-leaving": menuLeaving || void 0 },
+-          (0, import_react17.createElement)(
+-            "button",
+-            { type: "button", role: "menuitem", onClick: openEntries },
+-            (0, import_react17.createElement)("span", { className: "bt-menu-label" }, t("All entries")),
+-            (0, import_react17.createElement)("span", { className: "bt-menu-hint" }, String(count))
+-          ),
+-          (0, import_react17.createElement)(
+-            "button",
+-            { type: "button", role: "menuitem", disabled: count === 0 || view?.summarizing, onClick: regenerate },
+-            (0, import_react17.createElement)("span", { className: "bt-menu-label" }, t("Regenerate summary"))
+-          )
+-        ) : null
++        { className: "bt-avatar-anchor" },
 +        (0, import_react29.createElement)(
-           "button",
-           { type: "button", className: "bt-avatar-trigger", "aria-label": t("Edit Bot avatar"), "aria-expanded": editing, onClick: () => setEditing((value) => !value) },
--          (0, import_react18.createElement)(BotMark, { bot, size: 64, live: true }),
--          (0, import_react18.createElement)("span", { className: "bt-avatar-pencil", "aria-hidden": true }, (0, import_react18.createElement)(PencilIcon))
++          "button",
++          { type: "button", className: "bt-avatar-trigger", "aria-label": t("Edit Bot avatar"), "aria-expanded": editing, onClick: () => setEditing((value) => !value) },
 +          (0, import_react29.createElement)(BotMark, { bot, size: 64, live: true }),
 +          (0, import_react29.createElement)("span", { className: "bt-avatar-pencil", "aria-hidden": true }, (0, import_react29.createElement)(PencilIcon))
-         ),
--        editing ? (0, import_react18.createElement)(AvatarEditor, { bot, actions, run, onClose: closeEditor }) : null
++        ),
 +        editing ? (0, import_react29.createElement)(AvatarEditor, { bot, actions, run, onClose: closeEditor }) : null
        ),
--      (0, import_react18.createElement)(
+-      (0, import_react17.createElement)(
 +      (0, import_react29.createElement)(
-+        "div",
+         "div",
+-        { className: "bt-mem-body" },
+-        error ? (0, import_react17.createElement)("div", { className: "bt-error", role: "alert", style: { padding: 0 } }, hostText(error)) : null,
+-        view === null ? error ? null : (0, import_react17.createElement)(Skeleton) : page === "entries" ? (0, import_react17.createElement)(Entries, { bot, view, remove }) : (0, import_react17.createElement)(Summary, { bot, view, regenerate })
 +        { className: "bt-bs-who" },
 +        (0, import_react29.createElement)("span", { className: "bt-bs-name" }, bot.name),
 +        (0, import_react29.createElement)("span", { className: "bt-bs-sub" }, [bot.role, isMainBot ? t("Main Bot") : ""].filter(Boolean).join(" · ") || t("Bot"))
@@ -15391,14 +15578,36 @@ diff --git a/client.js b/client.js
 +        { className: "bt-set-row bt-bs-row" },
 +        (0, import_react29.createElement)("span", { className: "bt-set-copy" }, (0, import_react29.createElement)("span", { className: "bt-set-hint" }, modelHint(bot, roster))),
 +        (0, import_react29.createElement)(ModelMenu, { bot, roster, actions, run })
-+      ),
+       ),
+-      (0, import_react17.createElement)(
 +      bot.model ? (0, import_react29.createElement)(ModelTestRow, { bot, modelName: modelOf(bot, roster)?.name }) : null
 +    ),
 +    (0, import_react29.createElement)(
 +      Card,
 +      { title: t("Working folder") },
 +      (0, import_react29.createElement)(
-+        "div",
+         "div",
+-        { className: "bt-mem-foot" },
+-        answer ? (0, import_react17.createElement)(Reply, { answer, dismiss: () => setAnswer(null) }) : null,
+-        (0, import_react17.createElement)(
+-          "form",
+-          { className: "bt-mem-ask", onSubmit: ask },
+-          (0, import_react17.createElement)("input", {
+-            ref: inputRef,
+-            className: "bt-mem-input",
+-            value: text,
+-            maxLength: 2e3,
+-            disabled: view === null,
+-            placeholder: t("Ask or update"),
+-            "aria-label": t("Ask about or update {name}'s memory", { name: bot.name }),
+-            onChange: (event) => setText(event.target.value)
+-          }),
+-          (0, import_react17.createElement)(
+-            "button",
+-            { type: "submit", className: "bt-mem-send", disabled: busy || text.trim() === "", "aria-label": t("Send") },
+-            busy ? (0, import_react17.createElement)("span", { className: "bt-mem-spin", "aria-hidden": true }) : (0, import_react17.createElement)(ArrowUpIcon)
+-          )
+-        )
 +        { className: "bt-set-row bt-bs-row" },
 +        (0, import_react29.createElement)("span", { className: "bt-set-copy" }, (0, import_react29.createElement)("span", { className: "bt-bs-label" }, t("Folder"))),
 +        (0, import_react29.createElement)(FolderMenu, { value: bot.workDir, actions, run, onPick: (workDir) => save({ workDir }) })
@@ -15460,10 +15669,10 @@ diff --git a/client.js b/client.js
 +          (0, import_react29.createElement)("span", { className: "bt-set-hint" }, confirming ? t("Click again to delete. Its chats are archived.") : t("Removes the Bot from the team."))
 +        ),
 +        (0, import_react29.createElement)("span", { className: "bt-chevron" }, (0, import_react29.createElement)(ChevronRightIcon))
-+      )
-+    )
-+  );
-+}
+       )
+     )
+   );
+ }
 +var BOT_SETTINGS_CSS = `
 +.bt-bs{display:flex;flex-direction:column;gap:18px}
 +.bt-bs-hero{display:flex;align-items:center;gap:14px;padding:2px 4px}
@@ -15498,7 +15707,26 @@ diff --git a/client.js b/client.js
 +.bt-avedit :is(.bt-shapes,.bt-colors,.bt-dropzone){animation:bt-veil-in .18s ease-out}
 +@media (prefers-reduced-motion:reduce){.bt-switch,.bt-switch-knob{transition:none}.bt-avedit :is(.bt-shapes,.bt-colors,.bt-dropzone){animation:none}}
 +`;
-+
+ 
+-// src/client/bot-settings.js
+-var import_react18 = require("react");
+-var capitalize = (word) => word[0].toUpperCase() + word.slice(1);
+-async function avatarImage(file) {
+-  if (!/^image\/(png|jpeg|webp|gif)$/.test(file.type)) throw new Error(t("Choose a PNG, JPEG, WebP, or GIF image"));
+-  if (file.size > 25 * 1024 * 1024) throw new Error(t("Choose an image smaller than 25 MB"));
+-  const bitmap = await createImageBitmap(file);
+-  const side = 160;
+-  const canvas = document.createElement("canvas");
+-  canvas.width = side;
+-  canvas.height = side;
+-  const context = canvas.getContext("2d");
+-  context.imageSmoothingQuality = "high";
+-  const crop = Math.min(bitmap.width, bitmap.height);
+-  context.drawImage(bitmap, (bitmap.width - crop) / 2, (bitmap.height - crop) / 2, crop, crop, 0, 0, side, side);
+-  bitmap.close?.();
+-  for (const quality of [0.9, 0.75, 0.6]) {
+-    const url = canvas.toDataURL("image/webp", quality);
+-    if (url.startsWith("data:image/webp") && url.length < 15e4) return url;
 +// src/client/group-settings.js
 +var import_react30 = require("react");
 +var ROOM_MODES = [
@@ -15533,7 +15761,42 @@ diff --git a/client.js b/client.js
 +    const bot = faceSeatBot(seat, roster);
 +    if (!bot) continue;
 +    marks.push((0, import_react30.createElement)(BotMark, { key: seat.key, bot, size, live: false }));
-+  }
+   }
+-  const png = canvas.toDataURL("image/png");
+-  if (png.length < 15e4) return png;
+-  throw new Error(t("That image is too large"));
+-}
+-function InlineText({ label, value, placeholder, required = false, maxLength, multiline = false, onSave }) {
+-  const [draft, setDraft] = (0, import_react18.useState)(null);
+-  const reverting = (0, import_react18.useRef)(false);
+-  const commit = () => {
+-    const next = draft?.trim();
+-    setDraft(null);
+-    if (reverting.current) {
+-      reverting.current = false;
+-      return;
+-    }
+-    if (next === void 0 || next === (value ?? "") || required && next === "") return;
+-    void onSave(next);
+-  };
+-  return (0, import_react18.createElement)(multiline ? "textarea" : "input", {
+-    className: multiline ? "bt-bs-input bt-bs-area" : "bt-bs-input",
+-    value: draft ?? value ?? "",
+-    placeholder,
+-    maxLength,
+-    required,
+-    "aria-label": label,
+-    spellCheck: false,
+-    onChange: (event) => setDraft(event.target.value),
+-    onBlur: commit,
+-    onKeyDown: (event) => {
+-      if (event.key === "Escape") {
+-        event.stopPropagation();
+-        reverting.current = true;
+-        event.currentTarget.blur();
+-      }
+-      if (event.key === "Enter" && !multiline && !event.nativeEvent.isComposing) event.currentTarget.blur();
+-    }
 +  if (marks.length === 0) return [(0, import_react30.createElement)(PersonMark, { key: "person", size, name: person?.name })];
 +  return marks;
 +}
@@ -15551,7 +15814,24 @@ diff --git a/client.js b/client.js
 +    const name = seat.local && onOpenBot ? (0, import_react30.createElement)("button", { key: seat.key, type: "button", className: "bt-face-bot", title: t("Open {name}'s chat", { name: seat.bot }), onClick: () => onOpenBot(seat.local.id) }, seat.bot) : (0, import_react30.createElement)("span", { key: seat.key, className: "bt-face-bot", title: seat.record?.handle || void 0 }, seat.bot);
 +    const marked = isLeadSeat(seat, lead) ? [name, (0, import_react30.createElement)("span", { key: `${seat.key}-lead`, className: "bt-tag", "data-flybot": "face-lead-tag" }, t("Lead"))] : [name];
 +    return index === 0 ? marked : [(0, import_react30.createElement)("span", { key: `${seat.key}-sep` }, t(", ")), ...marked];
-+  });
+   });
+-}
+-function Row({ label, hint, stack = false, children }) {
+-  return (0, import_react18.createElement)(
+-    "label",
+-    { className: stack ? "bt-set-row bt-bs-row bt-bs-stack" : "bt-set-row bt-bs-row" },
+-    (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, label), hint ? (0, import_react18.createElement)("span", { className: "bt-set-hint" }, hint) : null),
+-    children
+-  );
+-}
+-function Card({ title, children }) {
+-  return (0, import_react18.createElement)("section", { className: "bt-set-section" }, title ? (0, import_react18.createElement)("h3", null, title) : null, (0, import_react18.createElement)("div", { className: "bt-set-card" }, children));
+-}
+-function Switch({ on, label, disabled, onChange }) {
+-  return (0, import_react18.createElement)(
+-    "button",
+-    { type: "button", role: "switch", className: "bt-switch", "aria-checked": on, "aria-label": label, disabled, onClick: () => onChange(!on) },
+-    (0, import_react18.createElement)("span", { className: "bt-switch-knob", "aria-hidden": true })
 +  return (0, import_react30.createElement)(
 +    "div",
 +    { className, role: "listitem", "data-flybot": "face-person", "data-mine": person.mine || void 0 },
@@ -15566,8 +15846,10 @@ diff --git a/client.js b/client.js
 +        (0, import_react30.createElement)("span", { className: "bt-face-bots" }, bots)
 +      )
 +    )
-+  );
-+}
+   );
+ }
+-function SwitchRow({ label, hint, on, disabled, onChange }) {
+-  return (0, import_react18.createElement)(
 +function FaceLead({ room: room2, roster, pick: pick2 }) {
 +  const lead = room2.face?.lead;
 +  const [open, setOpen] = (0, import_react30.useState)(false);
@@ -15590,7 +15872,10 @@ diff --git a/client.js b/client.js
 +    }
 +  };
 +  return (0, import_react30.createElement)(
-+    "div",
+     "div",
+-    { className: "bt-set-row bt-bs-row" },
+-    (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, label), hint ? (0, import_react18.createElement)("span", { className: "bt-set-hint" }, hint) : null),
+-    (0, import_react18.createElement)(Switch, { on, label, disabled, onChange })
 +    { className: "bt-face-lead", "data-flybot": "face-lead" },
 +    (0, import_react30.createElement)("div", { className: "bt-section-title" }, t("Room lead")),
 +    (0, import_react30.createElement)(
@@ -15613,20 +15898,59 @@ diff --git a/client.js b/client.js
 +    open && canPick && lead.picked ? (0, import_react30.createElement)("button", { type: "button", className: "bt-more", disabled: busy, onClick: () => void choose(null) }, t("Use the default lead")) : null,
 +    canPick || !lead.supported ? null : (0, import_react30.createElement)("div", { className: "bt-set-hint" }, t("Only the person who created this room can change it.")),
 +    error ? (0, import_react30.createElement)("div", { className: "bt-set-hint", role: "alert" }, error) : null
-+  );
-+}
+   );
+ }
+-function modelHint(bot, roster) {
+-  const shown = modelOf(bot, roster);
+-  if (shown === void 0) return t("Pick the model this Bot runs on.");
+-  if (!shown.served && (roster.models ?? []).length > 0) return t("This model is not available now. Pick another one.");
+-  if (bot.appliedModel && bot.appliedModel === bot.model) return t("Every message of this Bot runs on it.");
+-  return t("Applies from the next message.");
 +function seatedCount(room2) {
 +  const live = room2?.presentedParticipants ?? room2?.participants ?? [];
 +  const humans = live.filter((p) => p.kind === "human" && p.leftSeq === void 0).length;
 +  const remotes = live.filter((p) => p.remote && p.leftSeq === void 0).length;
 +  return humans + remotes + (room2?.members?.length ?? 0);
-+}
+ }
+-function ShapeRing({ shape, size }) {
+-  const maskId = (0, import_react18.useRef)("");
+-  if (maskId.current === "") maskId.current = `bt-ring-${nextMarkSerial()}`;
+-  const def = shapeOf(shape);
+-  const unit = def.size / size;
+-  const markup = `<defs><mask id="${maskId.current}" ${maskBox(def.size)}>${holes(def, `<g stroke="#000" stroke-width="${6 * unit}" stroke-linejoin="round">${bodyOf(def, "#000", true)}</g>`)}</mask></defs><g mask="url(#${maskId.current})" stroke="currentColor" stroke-width="${8 * unit}" stroke-linejoin="round">${bodyOf(def, "currentColor", true)}</g>`;
+-  return (0, import_react18.createElement)("svg", { className: "bt-ring", viewBox: `0 0 ${def.size} ${def.size}`, "aria-hidden": true, dangerouslySetInnerHTML: { __html: markup } });
 +function roomSubtitle(room2, roster) {
 +  if (room2.origin === "face-to-face") return faceRoomCount(room2, roster);
 +  const admin = roster.byId[room2.admin];
 +  const count = seatedCount(room2);
 +  return [t(count === 1 ? "{count} member" : "{count} members", { count }), admin ? t("Admin {name}", { name: admin.name }) : t("No admin")].join(" · ");
-+}
+ }
+-function CharacterGrid({ look, hasPhoto = false, onShape, onColor }) {
+-  const shapes = [...PICKER_SHAPES, ...Object.keys(SHAPES).filter((id) => !Object.hasOwn(CHARACTERS, id))];
+-  if (!shapes.includes(look.shape)) shapes.push(look.shape);
+-  const rows = [];
+-  for (let index = 0; index < shapes.length; index += PICKER_COLUMNS) rows.push(shapes.slice(index, index + PICKER_COLUMNS));
+-  return (0, import_react18.createElement)(
+-    import_react18.Fragment,
+-    null,
+-    (0, import_react18.createElement)("div", { className: "bt-shapes", role: "group", "aria-label": t("Character shape") }, rows.map((row, index) => (0, import_react18.createElement)("div", { key: index, className: "bt-shape-row" }, row.map((id) => (0, import_react18.createElement)("button", {
+-      key: id,
+-      type: "button",
+-      className: "bt-shape",
+-      "aria-label": t(shapeOf(id).label),
+-      title: t(shapeOf(id).label),
+-      "aria-pressed": !hasPhoto && look.shape === id,
+-      onClick: () => onShape(id)
+-    }, (0, import_react18.createElement)(ShapeRing, { shape: id, size: 36 }), (0, import_react18.createElement)(BotMark, { look: { shape: id, color: look.color }, size: 36 })))))),
+-    (0, import_react18.createElement)("div", { className: "bt-colors", role: "group", "aria-label": t("Character color") }, CHARACTER_COLORS.map((color) => (0, import_react18.createElement)("button", {
+-      key: color,
+-      type: "button",
+-      className: "bt-color",
+-      "aria-label": t(capitalize(color)),
+-      title: t(capitalize(color)),
+-      "aria-pressed": look.color === color,
+-      onClick: () => onColor(color)
+-    }, (0, import_react18.createElement)("span", { style: { background: paintCss(color) } }))))
 +function GroupSettingsForm({ room: room2, roster, actions, run, onDeleted }) {
 +  const [adding, setAdding] = (0, import_react30.useState)(false);
 +  const [confirming, setConfirming] = (0, import_react30.useState)(false);
@@ -15676,20 +16000,15 @@ diff --git a/client.js b/client.js
 +      { className: "bt-bs-hero" },
 +      (0, import_react30.createElement)(RoomAvatar, { room: room2, roster, size: 64 }),
 +      (0, import_react30.createElement)(
-         "div",
-         { className: "bt-bs-who" },
--        (0, import_react18.createElement)("span", { className: "bt-bs-name" }, bot.name),
--        (0, import_react18.createElement)("span", { className: "bt-bs-sub" }, [bot.role, isMainBot ? t("Main Bot") : ""].filter(Boolean).join(" · ") || t("Bot"))
++        "div",
++        { className: "bt-bs-who" },
 +        (0, import_react30.createElement)("span", { className: "bt-bs-name" }, room2.name),
 +        (0, import_react30.createElement)("span", { className: "bt-bs-sub" }, roomSubtitle(room2, roster))
-       )
-     ),
--    (0, import_react18.createElement)(
++      )
++    ),
 +    (0, import_react30.createElement)(
-       Card,
-       { title: t("Profile") },
--      (0, import_react18.createElement)(Row, { label: t("Name") }, (0, import_react18.createElement)(InlineText, { label: t("Name"), value: bot.name, placeholder: "Bob", required: true, maxLength: 40, onSave: (name) => save({ name }) })),
--      (0, import_react18.createElement)(Row, { label: t("Label"), hint: t("Optional. Shown under the name.") }, (0, import_react18.createElement)(InlineText, { label: t("Label"), value: bot.role, placeholder: t("Research, admin…"), maxLength: 24, onSave: (role) => save({ role }) }))
++      Card,
++      { title: t("Profile") },
 +      (0, import_react30.createElement)(
 +        Row,
 +        { label: t("Name"), hint: t("Leave it empty to name the group after its members.") },
@@ -15700,18 +16019,12 @@ diff --git a/client.js b/client.js
 +        { label: t("Notice"), hint: t("Every member reads it before speaking in this group."), stack: true },
 +        (0, import_react30.createElement)(InlineText, { label: t("Group notice"), value: room2.notice, multiline: true, maxLength: 2e3, placeholder: t("Shared instructions every member reads before speaking…"), onSave: (notice) => update({ notice }) })
 +      )
-     ),
--    (0, import_react18.createElement)(
++    ),
 +    (0, import_react30.createElement)(
-       Card,
--      { title: t("Model") },
--      (0, import_react18.createElement)(
++      Card,
 +      { title: t("Who answers") },
 +      (0, import_react30.createElement)(
-         "div",
--        { className: "bt-set-row bt-bs-row" },
--        (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, t("Model")), (0, import_react18.createElement)("span", { className: "bt-set-hint" }, modelHint(bot, roster))),
--        (0, import_react18.createElement)(ModelMenu, { bot, roster, actions, run })
++        "div",
 +        { className: "bt-set-row bt-bs-row bt-bs-stack" },
 +        (0, import_react30.createElement)(Segmented, { label: t("Who answers"), value: mode }, ROOM_MODES.map(([id, label]) => (0, import_react30.createElement)("button", {
 +          key: id,
@@ -15724,31 +16037,20 @@ diff --git a/client.js b/client.js
 +          }
 +        }, t(label)))),
 +        (0, import_react30.createElement)("span", { key: mode, className: "bt-set-hint bt-veil" }, `${t(modeHint)} ${t("@mentions always pick who answers.")}`)
-       )
-     ),
--    (0, import_react18.createElement)(
++      )
++    ),
 +    (0, import_react30.createElement)(
-       Card,
-       { title: t("Working folder") },
--      (0, import_react18.createElement)(
++      Card,
++      { title: t("Working folder") },
 +      (0, import_react30.createElement)(
-         "div",
-         { className: "bt-set-row bt-bs-row" },
--        (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, t("Folder"))),
--        (0, import_react18.createElement)(FolderMenu, { value: bot.workDir, actions, run, onPick: (workDir) => save({ workDir }) })
++        "div",
++        { className: "bt-set-row bt-bs-row" },
 +        (0, import_react30.createElement)("span", { className: "bt-set-copy" }, (0, import_react30.createElement)("span", { className: "bt-bs-label" }, t("Folder"))),
 +        (0, import_react30.createElement)(FolderMenu, { value: room2.workDir, group: true, actions, run, onPick: (workDir) => update({ workDir }) })
-       )
-     ),
--    (0, import_react18.createElement)(
++      )
++    ),
 +    face ? (0, import_react30.createElement)(
-       Card,
--      { title: t("Instructions") },
--      (0, import_react18.createElement)(
--        Row,
--        { label: t("What this Bot does"), hint: t("Its job on the team. Part of the Bot's system prompt."), stack: true },
--        (0, import_react18.createElement)(InlineText, { label: t("Instructions"), value: bot.instructions, multiline: true, placeholder: t("What this Bot is responsible for…"), onSave: (instructions) => save({ instructions }) })
--      )
++      Card,
 +      { title: t("Members · {count}", { count: people2.length }) },
 +      people2.map((person) => (0, import_react30.createElement)(FacePersonRow, { key: person.key, person, roster, onOpenBot: openBot, lead: room2.face?.lead?.handle }))
 +    ) : null,
@@ -15844,16 +16146,10 @@ diff --git a/client.js b/client.js
 +      // #876: a plugin's rows for this room (Invite by link), only in a group that lives here. Last, after
 +      // the note on who leads, so that note stays with the members it is about (#892).
 +      room2.origin === "face-to-face" || room2.origin === "inbound-share" ? null : (0, import_react30.createElement)(FlyBotRoomMembers, { room: room2, roster, actions })
-     ),
--    (0, import_react18.createElement)(BotCapabilitiesCard, { bot, roster, actions, run, Card, SwitchRow }),
--    roster.memory === false ? null : (0, import_react18.createElement)(MemoryCard, { bot, actions }),
--    (0, import_react18.createElement)(BotSchedules, { bot, roster, actions }),
--    (0, import_react18.createElement)(
++    ),
 +    (0, import_react30.createElement)(StandingApprovalsCard, { scope: "room", target: room2, roster, actions, run, Card }),
 +    (0, import_react30.createElement)(
-       Card,
--      { title: t("Main Bot") },
--      onlyMain ? (0, import_react18.createElement)(
++      Card,
 +      { title: t("Sidebar") },
 +      (0, import_react30.createElement)(SwitchRow, { label: t("Pin"), hint: t("Kept above the other chats."), on: room2.pinned === true, onChange: (pinned) => run(actions.setFlags(room2.id, { pinned })) }),
 +      (0, import_react30.createElement)(SwitchRow, { label: t("Hide from sidebar"), hint: t("Search still finds it."), on: room2.hidden === true, onChange: (hidden) => run(actions.setFlags(room2.id, { hidden })) })
@@ -15873,8 +16169,16 @@ diff --git a/client.js b/client.js
 +        (0, import_react30.createElement)("span", { className: "bt-chevron" }, (0, import_react30.createElement)(ChevronRightIcon))
 +      )
 +    )
-+  );
-+}
+   );
+ }
+-function AvatarEditor({ bot, actions, run, onClose }) {
+-  const look = lookOf(bot);
+-  const [tab, setTab] = (0, import_react18.useState)(look.image ? "upload" : "bot");
+-  const [over, setOver] = (0, import_react18.useState)(false);
+-  const ref = (0, import_react18.useRef)(null);
+-  const fileRef = (0, import_react18.useRef)(null);
+-  const upload = (file) => {
+-    if (file) void run(avatarImage(file).then((image) => actions.updateBot(bot.id, { avatar: { ...bot.avatar ?? {}, image } })));
 +function NewGroupForm({ roster, actions, run, onCreated, onCancel }) {
 +  const [admin, setAdmin] = (0, import_react30.useState)(null);
 +  const [members, setMembers] = (0, import_react30.useState)([]);
@@ -15884,7 +16188,40 @@ diff --git a/client.js b/client.js
 +  const pickAdmin = (id) => {
 +    setAdmin(id);
 +    setMembers((list) => list.filter((item) => item !== id));
-+  };
+   };
+-  (0, import_react18.useEffect)(() => {
+-    const onDown = (event) => {
+-      if (!(event.target instanceof Element) || ref.current?.contains(event.target) || event.target.closest(".bt-avatar-trigger")) return;
+-      onClose();
+-    };
+-    const onKey = (event) => {
+-      if (event.key === "Escape") {
+-        event.stopPropagation();
+-        onClose();
+-      }
+-    };
+-    window.addEventListener("mousedown", onDown);
+-    window.addEventListener("keydown", onKey, true);
+-    return () => {
+-      window.removeEventListener("mousedown", onDown);
+-      window.removeEventListener("keydown", onKey, true);
+-    };
+-  }, [onClose]);
+-  (0, import_react18.useEffect)(() => {
+-    if (tab !== "upload") return void 0;
+-    const onPaste = (event) => {
+-      const file = [...event.clipboardData?.files ?? []].find((item) => item.type.startsWith("image/"));
+-      if (file) {
+-        event.preventDefault();
+-        upload(file);
+-      }
+-    };
+-    window.addEventListener("paste", onPaste);
+-    return () => window.removeEventListener("paste", onPaste);
+-  }, [tab, bot]);
+-  const hasPhoto = Boolean(look.image);
+-  const glide = useGlide(tab);
+-  return (0, import_react18.createElement)(
 +  const create = async () => {
 +    if (busy || admin === null || members.length === 0) return;
 +    setBusy(true);
@@ -15904,24 +16241,85 @@ diff --git a/client.js b/client.js
 +    onClick
 +  }, (0, import_react30.createElement)(BotAvatar, { bot, size: 22, badge: false, live: false }), (0, import_react30.createElement)("span", { className: "bt-ng-name" }, bot.name), on && role === "radio" ? (0, import_react30.createElement)(AdminStar) : null);
 +  return (0, import_react30.createElement)(
-+    "div",
+     "div",
+-    { ref, className: "bt-avedit", role: "dialog", "aria-label": t("Avatar editor") },
+-    (0, import_react18.createElement)(
 +    { className: "bt-set-card bt-ng" },
 +    (0, import_react30.createElement)(
-+      "div",
+       "div",
+-      { className: "bt-avedit-top" },
+-      (0, import_react18.createElement)(
 +      { className: "bt-set-row bt-bs-row bt-bs-stack" },
 +      (0, import_react30.createElement)("span", { className: "bt-set-copy" }, (0, import_react30.createElement)("span", { className: "bt-bs-label bt-ng-label" }, (0, import_react30.createElement)(AdminStar), t("Choose the group admin"))),
 +      (0, import_react30.createElement)(
-+        "div",
+         "div",
+-        { ref: glide.box, role: "tablist", "aria-label": t("Avatar source"), className: "bt-avedit-tabs" },
+-        (0, import_react18.createElement)("span", { ref: glide.thumb, className: "bt-thumb", "aria-hidden": true }),
+-        [["bot", "Bot"], ["upload", "Upload"]].map(([id, label]) => (0, import_react18.createElement)("button", { key: id, type: "button", role: "tab", className: "bt-avedit-tab", "aria-selected": tab === id, onClick: () => setTab(id) }, t(label)))
+-      ),
+-      (0, import_react18.createElement)("button", {
+-        type: "button",
+-        className: "bt-avedit-tab bt-avedit-reset",
+-        title: t("Reset character to default"),
+-        onClick: () => run(actions.updateBot(bot.id, { avatar: null, color: null }))
+-      }, t("Reset"))
 +        { className: "bt-ng-picks", role: "radiogroup", "aria-label": t("Group admin") },
 +        roster.bots.map((bot) => chip(bot, admin === bot.id, () => pickAdmin(bot.id), "radio"))
 +      )
-+    ),
+     ),
+-    tab === "bot" ? (0, import_react18.createElement)(CharacterGrid, {
+-      look,
+-      hasPhoto,
+-      onShape: (shape) => run(actions.updateBot(bot.id, { avatar: { shape } })),
+-      onColor: (color) => run(actions.updateBot(bot.id, { color }))
+-    }) : null,
+-    tab === "upload" ? (0, import_react18.createElement)(
 +    admin === null ? null : (0, import_react30.createElement)(
-+      "div",
+       "div",
+-      {
+-        className: "bt-dropzone",
+-        "data-over": over || void 0,
+-        onDragOver: (event) => {
+-          event.preventDefault();
+-          setOver(true);
+-        },
+-        onDragLeave: () => setOver(false),
+-        onDrop: (event) => {
+-          event.preventDefault();
+-          setOver(false);
+-          upload(event.dataTransfer.files?.[0]);
+-        }
+-      },
+-      hasPhoto ? (0, import_react18.createElement)("img", { src: look.image, alt: "" }) : null,
+-      (0, import_react18.createElement)("div", null, t("Drag, drop, or paste an image")),
+-      (0, import_react18.createElement)(
 +      { className: "bt-set-row bt-bs-row bt-bs-stack bt-ng-step" },
 +      (0, import_react30.createElement)("span", { className: "bt-set-copy" }, (0, import_react30.createElement)("span", { className: "bt-bs-label" }, t("Who to chat with…"))),
 +      (0, import_react30.createElement)(
-+        "div",
+         "div",
+-        { className: "bt-actions", style: { justifyContent: "center" } },
+-        (0, import_react18.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => fileRef.current?.click() }, hasPhoto ? t("Replace") : t("Browse files")),
+-        hasPhoto ? (0, import_react18.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => run(actions.updateBot(bot.id, { avatar: hasShape(bot.avatar?.shape) ? { shape: bot.avatar.shape } : null })) }, t("Remove photo")) : null
+-      ),
+-      (0, import_react18.createElement)("input", { ref: fileRef, type: "file", accept: "image/png,image/jpeg,image/webp,image/gif", hidden: true, onChange: (event) => {
+-        const file = event.target.files?.[0];
+-        event.target.value = "";
+-        upload(file);
+-      } })
+-    ) : null
+-  );
+-}
+-function MemoryCard({ bot, actions }) {
+-  const count = useMemoryCount(bot.id, actions);
+-  const label = count === null ? t("Loading…") : count === 0 ? t("Nothing saved yet") : count === 1 ? t("1 entry") : t("{count} entries", { count });
+-  return (0, import_react18.createElement)(
+-    Card,
+-    { title: t("Memory") },
+-    (0, import_react18.createElement)(
+-      "button",
+-      { type: "button", className: "bt-set-row bt-bs-row", "aria-label": t("Manage {name}'s memory", { name: bot.name }), onClick: () => actions.openMemory(bot.id) },
+-      (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, label)),
+-      (0, import_react18.createElement)("span", { className: "bt-mem-row-go" }, t("Manage"), (0, import_react18.createElement)(ChevronRightIcon))
 +        { className: "bt-ng-picks", role: "group", "aria-label": t("Members") },
 +        roster.bots.filter((bot) => bot.id !== admin).map((bot) => chip(bot, members.includes(bot.id), () => toggle(bot.id), "checkbox"))
 +      )
@@ -15937,9 +16335,26 @@ diff --git a/client.js b/client.js
 +      { className: "bt-set-row bt-task-foot" },
 +      (0, import_react30.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: onCancel }, t("Cancel")),
 +      (0, import_react30.createElement)("button", { type: "button", className: "bt-send bt-soft-sm", disabled: busy || admin === null || members.length === 0, onClick: () => void create() }, t("Create group chat"))
-+    )
-+  );
-+}
+     )
+   );
+ }
+-function BotSettingsForm({ bot, roster, actions, run }) {
+-  const [editing, setEditing] = (0, import_react18.useState)(false);
+-  const [confirming, setConfirming] = (0, import_react18.useState)(false);
+-  const closeEditor = (0, import_react18.useCallback)(() => setEditing(false), []);
+-  (0, import_react18.useEffect)(() => {
+-    if (!confirming) return void 0;
+-    const timer = setTimeout(() => setConfirming(false), 4e3);
+-    return () => clearTimeout(timer);
+-  }, [confirming]);
+-  const isMainBot = isMainOf(roster, bot.id);
+-  const onlyMain = isMainBot && (roster.mainBotIds ?? []).length === 1;
+-  const isTile = roster.mainBotId === bot.id;
+-  const save = (patch) => run(actions.updateBot(bot.id, patch));
+-  const duplicate = () => run(actions.duplicateBot(bot.id).then((copy2) => actions.openSession(copy2.id)));
+-  const remove = () => {
+-    if (confirming) void run(actions.deleteBot(bot.id));
+-    else setConfirming(true);
 +var GROUP_SETTINGS_CSS = `
 +.bt-ng{animation:bt-q-in .4s cubic-bezier(.22,1,.36,1),bt-veil-in .2s ease-out}
 +.bt-ng-step{animation:bt-veil-in .22s ease-out}
@@ -16077,15 +16492,115 @@ diff --git a/client.js b/client.js
 +    if (!row || leaving) return;
 +    void Promise.resolve(row.run()).catch((error) => actions.reportError(error, "menu"));
 +    close();
-+  };
+   };
+-  (0, import_react18.useEffect)(() => {
+-    void actions.refreshModels?.();
+-  }, [bot.id]);
+-  return (0, import_react18.createElement)(
 +  let index = -1;
 +  return (0, import_react31.createElement)(
-+    "div",
+     "div",
+-    { className: "bt-bs" },
+-    (0, import_react18.createElement)(
 +    { className: "bt-palette-layer", "data-leaving": leaving || void 0 },
 +    (0, import_react31.createElement)("div", { className: "bt-backdrop", onMouseDown: close }),
 +    (0, import_react31.createElement)(
-+      "div",
+       "div",
+-      { className: "bt-bs-hero" },
+-      (0, import_react18.createElement)(
 +      { className: "bt-palette", role: "dialog", "aria-label": t("Search"), "aria-modal": true },
++      (0, import_react31.createElement)(
+         "div",
+-        { className: "bt-avatar-anchor" },
+-        (0, import_react18.createElement)(
+-          "button",
+-          { type: "button", className: "bt-avatar-trigger", "aria-label": t("Edit Bot avatar"), "aria-expanded": editing, onClick: () => setEditing((value) => !value) },
+-          (0, import_react18.createElement)(BotMark, { bot, size: 64, live: true }),
+-          (0, import_react18.createElement)("span", { className: "bt-avatar-pencil", "aria-hidden": true }, (0, import_react18.createElement)(PencilIcon))
+-        ),
+-        editing ? (0, import_react18.createElement)(AvatarEditor, { bot, actions, run, onClose: closeEditor }) : null
++        { className: "bt-palette-head" },
++        (0, import_react31.createElement)("span", { className: "bt-palette-glyph", "aria-hidden": true }, (0, import_react31.createElement)(SearchIcon)),
++        (0, import_react31.createElement)("input", {
++          autoFocus: true,
++          value: query,
++          placeholder: t("Search Bots, chats and messages"),
++          "aria-label": t("Search"),
++          role: "combobox",
++          "aria-expanded": true,
++          "aria-controls": "bt-palette-list",
++          onChange: (event) => {
++            setQuery(event.target.value);
++            setCursor(0);
++          },
++          onKeyDown: (event) => {
++            if (event.nativeEvent.isComposing) return;
++            if (event.key === "ArrowDown") {
++              event.preventDefault();
++              setCursor(Math.min(active + 1, rows.length - 1));
++            } else if (event.key === "ArrowUp") {
++              event.preventDefault();
++              setCursor(Math.max(active - 1, 0));
++            } else if (event.key === "Enter") {
++              event.preventDefault();
++              choose(rows[active]);
++            }
++          }
++        }),
++        query ? (0, import_react31.createElement)("button", { type: "button", className: "bt-palette-clear", "aria-label": t("Clear search"), onClick: () => {
++          setQuery("");
++          setCursor(0);
++        } }, (0, import_react31.createElement)(CloseIcon)) : null
+       ),
+-      (0, import_react18.createElement)(
+-        "div",
+-        { className: "bt-bs-who" },
+-        (0, import_react18.createElement)("span", { className: "bt-bs-name" }, bot.name),
+-        (0, import_react18.createElement)("span", { className: "bt-bs-sub" }, [bot.role, isMainBot ? t("Main Bot") : ""].filter(Boolean).join(" · ") || t("Bot"))
+-      )
+-    ),
+-    (0, import_react18.createElement)(
+-      Card,
+-      { title: t("Profile") },
+-      (0, import_react18.createElement)(Row, { label: t("Name") }, (0, import_react18.createElement)(InlineText, { label: t("Name"), value: bot.name, placeholder: "Bob", required: true, maxLength: 40, onSave: (name) => save({ name }) })),
+-      (0, import_react18.createElement)(Row, { label: t("Label"), hint: t("Optional. Shown under the name.") }, (0, import_react18.createElement)(InlineText, { label: t("Label"), value: bot.role, placeholder: t("Research, admin…"), maxLength: 24, onSave: (role) => save({ role }) }))
+-    ),
+-    (0, import_react18.createElement)(
+-      Card,
+-      { title: t("Model") },
+-      (0, import_react18.createElement)(
+-        "div",
+-        { className: "bt-set-row bt-bs-row" },
+-        (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, t("Model")), (0, import_react18.createElement)("span", { className: "bt-set-hint" }, modelHint(bot, roster))),
+-        (0, import_react18.createElement)(ModelMenu, { bot, roster, actions, run })
+-      )
+-    ),
+-    (0, import_react18.createElement)(
+-      Card,
+-      { title: t("Working folder") },
+-      (0, import_react18.createElement)(
+-        "div",
+-        { className: "bt-set-row bt-bs-row" },
+-        (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, t("Folder"))),
+-        (0, import_react18.createElement)(FolderMenu, { value: bot.workDir, actions, run, onPick: (workDir) => save({ workDir }) })
+-      )
+-    ),
+-    (0, import_react18.createElement)(
+-      Card,
+-      { title: t("Instructions") },
+-      (0, import_react18.createElement)(
+-        Row,
+-        { label: t("What this Bot does"), hint: t("Its job on the team. Part of the Bot's system prompt."), stack: true },
+-        (0, import_react18.createElement)(InlineText, { label: t("Instructions"), value: bot.instructions, multiline: true, placeholder: t("What this Bot is responsible for…"), onSave: (instructions) => save({ instructions }) })
+-      )
+-    ),
+-    (0, import_react18.createElement)(BotCapabilitiesCard, { bot, roster, actions, run, Card, SwitchRow }),
+-    roster.memory === false ? null : (0, import_react18.createElement)(MemoryCard, { bot, actions }),
+-    (0, import_react18.createElement)(BotSchedules, { bot, roster, actions }),
+-    (0, import_react18.createElement)(
+-      Card,
+-      { title: t("Main Bot") },
+-      onlyMain ? (0, import_react18.createElement)(
 +      (0, import_react31.createElement)(
          "div",
 -        { className: "bt-set-row bt-bs-row" },
@@ -16113,39 +16628,7 @@ diff --git a/client.js b/client.js
 -        { type: "button", className: "bt-set-row bt-bs-row", onClick: duplicate },
 -        (0, import_react18.createElement)("span", { className: "bt-set-copy" }, (0, import_react18.createElement)("span", { className: "bt-bs-label" }, t("Duplicate")), (0, import_react18.createElement)("span", { className: "bt-set-hint" }, t("A copy with the same job and model, and fresh memory."))),
 -        (0, import_react18.createElement)("span", { className: "bt-chevron" }, (0, import_react18.createElement)(ChevronRightIcon))
-+        { className: "bt-palette-head" },
-+        (0, import_react31.createElement)("span", { className: "bt-palette-glyph", "aria-hidden": true }, (0, import_react31.createElement)(SearchIcon)),
-+        (0, import_react31.createElement)("input", {
-+          autoFocus: true,
-+          value: query,
-+          placeholder: t("Search Bots, chats and messages"),
-+          "aria-label": t("Search"),
-+          role: "combobox",
-+          "aria-expanded": true,
-+          "aria-controls": "bt-palette-list",
-+          onChange: (event) => {
-+            setQuery(event.target.value);
-+            setCursor(0);
-+          },
-+          onKeyDown: (event) => {
-+            if (event.nativeEvent.isComposing) return;
-+            if (event.key === "ArrowDown") {
-+              event.preventDefault();
-+              setCursor(Math.min(active + 1, rows.length - 1));
-+            } else if (event.key === "ArrowUp") {
-+              event.preventDefault();
-+              setCursor(Math.max(active - 1, 0));
-+            } else if (event.key === "Enter") {
-+              event.preventDefault();
-+              choose(rows[active]);
-+            }
-+          }
-+        }),
-+        query ? (0, import_react31.createElement)("button", { type: "button", className: "bt-palette-clear", "aria-label": t("Clear search"), onClick: () => {
-+          setQuery("");
-+          setCursor(0);
-+        } }, (0, import_react31.createElement)(CloseIcon)) : null
-       ),
+-      ),
 -      isMainBot ? null : (0, import_react18.createElement)(
 -        "button",
 -        { type: "button", className: "bt-set-row bt-bs-row bt-bs-danger", "data-confirm": confirming || void 0, onClick: remove },
@@ -16156,8 +16639,6 @@ diff --git a/client.js b/client.js
 -          (0, import_react18.createElement)("span", { className: "bt-set-hint" }, confirming ? t("Click again to delete. Its chats are archived.") : t("Removes the Bot from the team."))
 -        ),
 -        (0, import_react18.createElement)("span", { className: "bt-chevron" }, (0, import_react18.createElement)(ChevronRightIcon))
-+      (0, import_react31.createElement)(
-+        "div",
 +        { ref: listRef, id: "bt-palette-list", className: "bt-palette-list", role: "listbox", "aria-label": t("Results") },
 +        (0, import_react31.createElement)("span", { ref: glide.thumb, className: "bt-thumb", "aria-hidden": true }),
 +        rows.length === 0 ? (0, import_react31.createElement)(
@@ -16944,19 +17425,77 @@ diff --git a/client.js b/client.js
      if (!speech || !catalog || !listen) return void 0;
      const own = turn.current;
      let capture = null;
-@@ -8838,7 +8838,7 @@ function VoiceMode({ sessionId, roster, actions, useSessions, useSessionStatus }
-       setServiceLevel(0);
-     };
-   }, [speech, catalog, listen, cycle]);
+@@ -8785,381 +8785,137 @@ function VoiceMode({ sessionId, roster, actions, useSessions, useSessionStatus }
+     let smooth = 0;
+     const detect = turnDetector();
+     const limit = Math.max(1, catalog.maxDurationSeconds - 1) * 1e3;
+-    const finish = async (current) => {
+-      setPhase("transcribing");
+-      try {
+-        const wave = await current.finish(catalog.maxDurationSeconds);
+-        const text = wave ? await transcribeWave(speech, catalog, wave, new AbortController().signal) : "";
+-        if (turn.current !== own) return;
+-        if (text) submit(text);
+-        else setPhase("listening");
+-      } catch (error) {
+-        if (turn.current !== own) return;
+-        setNote(t(CAPTURE_NOTES[error?.kind] ?? "Couldn't hear that"));
+-        setPhase("listening");
+-      }
+-    };
+-    openCapture().then((opened) => {
+-      if (stopped) {
+-        opened.cancel();
+-        return;
+-      }
+-      capture = opened;
+-      const began = performance.now();
+-      const tick = () => {
+-        const now = performance.now();
+-        const level2 = capture.level();
+-        smooth = smooth * 0.8 + level2 * 0.2;
+-        setServiceLevel(Math.round(smooth * 100) / 100);
+-        const state = detect(level2, now);
+-        if (state === "done" || state === "speech" && now - began >= limit) {
+-          const current = capture;
+-          capture = null;
+-          setServiceLevel(0);
+-          void finish(current);
+-          return;
+-        }
+-        if (state === "waiting" && now - began >= limit) {
+-          setCycle((value) => value + 1);
+-          return;
+-        }
+-        frame = requestAnimationFrame(tick);
+-      };
+-      tick();
+-    }, (error) => {
+-      if (stopped) return;
+-      setNote(t(CAPTURE_NOTES[error?.kind] ?? "Couldn't hear that"));
+-      setPhase("paused");
+-    });
+-    return () => {
+-      stopped = true;
+-      cancelAnimationFrame(frame);
+-      capture?.cancel();
+-      setServiceLevel(0);
+-    };
+-  }, [speech, catalog, listen, cycle]);
 -  (0, import_react22.useEffect)(() => {
-+  (0, import_react35.useEffect)(() => {
-     if (phase !== "thinking" || running || waiting.current === null) return;
-     const [count, text] = [lastReply.slice(0, lastReply.indexOf("|")), lastReply.slice(lastReply.indexOf("|") + 1)];
-     if (count === waiting.current || !text.trim()) return;
-@@ -8852,314 +8852,70 @@ function VoiceMode({ sessionId, roster, actions, useSessions, useSessionStatus }
-     }
-     const utterance = new SpeechSynthesisUtterance(spoken);
-     utterance.lang = /[\u3400-\u9fff]/.test(spoken) ? "zh-CN" : "en-US";
+-    if (phase !== "thinking" || running || waiting.current === null) return;
+-    const [count, text] = [lastReply.slice(0, lastReply.indexOf("|")), lastReply.slice(lastReply.indexOf("|") + 1)];
+-    if (count === waiting.current || !text.trim()) return;
+-    waiting.current = null;
+-    const spoken = plainSpeech(text);
+-    setSaid(spoken);
+-    setHeard("");
+-    if (!window.speechSynthesis || !spoken) {
+-      setPhase("listening");
+-      return;
+-    }
+-    const utterance = new SpeechSynthesisUtterance(spoken);
+-    utterance.lang = /[\u3400-\u9fff]/.test(spoken) ? "zh-CN" : "en-US";
 -    utterance.onend = () => setPhase((current) => current === "speaking" ? "listening" : current);
 -    utterance.onerror = utterance.onend;
 -    setPhase("speaking");
@@ -17054,46 +17593,21 @@ diff --git a/client.js b/client.js
 -  const remove = () => {
 -    if (!confirming) {
 -      setConfirming(true);
-+    utterance.onend = () => setPhase((current) => current === "speaking" ? "listening" : current);
-+    utterance.onerror = utterance.onend;
-+    setPhase("speaking");
-+    window.speechSynthesis.cancel();
-+    window.speechSynthesis.speak(utterance);
-+  }, [phase, running, lastReply]);
-+  (0, import_react35.useEffect)(() => () => window.speechSynthesis?.cancel(), []);
-+  const micLevel = useMicLevel(!speech && phase === "listening" && dictation.listening);
-+  const level = speech ? serviceLevel : micLevel;
-+  const markState = phase === "thinking" || phase === "transcribing" ? "thinking" : phase === "speaking" ? "sending" : "idle";
-+  const blocked = phase === "unsupported" || phase === "setup" || phase === "starting";
-+  const togglePause = () => {
-+    if (phase === "paused") {
-+      setPhase("listening");
-       return;
-     }
+-      return;
+-    }
 -    void Promise.resolve(run(actions.deleteRoom(room2.id))).then((done) => {
 -      if (done) onDeleted?.();
 -    });
-+    turn.current += 1;
-+    window.speechSynthesis?.cancel();
-+    setPhase("paused");
-   };
+-  };
 -  return (0, import_react23.createElement)(
-+  const openSetup = phase === "setup" ? actions.voiceSetup() : null;
-+  const caption = phase === "speaking" ? said : heard;
-+  const shownNote = note || dictation.note;
-+  return (0, import_react35.createElement)(
-     "div",
+-    "div",
 -    { className: "bt-bs" },
 -    (0, import_react23.createElement)(
-+    { className: "bt-pane bt-voice-pane", style: { left: paneLeft } },
-+    (0, import_react35.createElement)(
-       "div",
+-      "div",
 -      { className: "bt-bs-hero" },
 -      (0, import_react23.createElement)(RoomAvatar, { room: room2, roster, size: 64 }),
 -      (0, import_react23.createElement)(
-+      { className: "bt-voice-stage", role: "dialog", "aria-label": t("Voice chat with {name}", { name }), "data-phase": phase === "transcribing" ? "thinking" : phase },
-+      (0, import_react35.createElement)(
-         "div",
+-        "div",
 -        { className: "bt-bs-who" },
 -        (0, import_react23.createElement)("span", { className: "bt-bs-name" }, room2.name),
 -        (0, import_react23.createElement)("span", { className: "bt-bs-sub" }, roomSubtitle(room2, roster))
@@ -17106,11 +17620,7 @@ diff --git a/client.js b/client.js
 -        Row,
 -        { label: t("Name"), hint: t("Leave it empty to name the group after its members.") },
 -        (0, import_react23.createElement)(InlineText, { label: t("Group name"), value: room2.named ? room2.name : "", placeholder: t("Name after members"), maxLength: 60, onSave: (name) => update({ name }) })
-+        { className: "bt-voice-orb", style: { "--bt-level": level } },
-+        (0, import_react35.createElement)("span", { className: "bt-voice-ring", "aria-hidden": true }),
-+        (0, import_react35.createElement)("span", { className: "bt-voice-ring bt-voice-ring-2", "aria-hidden": true }),
-+        bot ? (0, import_react35.createElement)(BotMark, { bot, size: 112, state: markState, live: true, gaze: phase === "listening" }) : room2 ? (0, import_react35.createElement)(RoomAvatar, { room: room2, roster, size: 112 }) : null
-       ),
+-      ),
 -      (0, import_react23.createElement)(
 -        Row,
 -        { label: t("Notice"), hint: t("Every member reads it before speaking in this group."), stack: true },
@@ -17227,7 +17737,93 @@ diff --git a/client.js b/client.js
 -    }));
 -    if (done && room2) onCreated(room2);
 -    else setBusy(false);
--  };
++    const finish = async (current) => {
++      setPhase("transcribing");
++      try {
++        const wave = await current.finish(catalog.maxDurationSeconds);
++        const text = wave ? await transcribeWave(speech, catalog, wave, new AbortController().signal) : "";
++        if (turn.current !== own) return;
++        if (text) submit(text);
++        else setPhase("listening");
++      } catch (error) {
++        if (turn.current !== own) return;
++        setNote(t(CAPTURE_NOTES[error?.kind] ?? "Couldn't hear that"));
++        setPhase("listening");
++      }
++    };
++    openCapture().then((opened) => {
++      if (stopped) {
++        opened.cancel();
++        return;
++      }
++      capture = opened;
++      const began = performance.now();
++      const tick = () => {
++        const now = performance.now();
++        const level2 = capture.level();
++        smooth = smooth * 0.8 + level2 * 0.2;
++        setServiceLevel(Math.round(smooth * 100) / 100);
++        const state = detect(level2, now);
++        if (state === "done" || state === "speech" && now - began >= limit) {
++          const current = capture;
++          capture = null;
++          setServiceLevel(0);
++          void finish(current);
++          return;
++        }
++        if (state === "waiting" && now - began >= limit) {
++          setCycle((value) => value + 1);
++          return;
++        }
++        frame = requestAnimationFrame(tick);
++      };
++      tick();
++    }, (error) => {
++      if (stopped) return;
++      setNote(t(CAPTURE_NOTES[error?.kind] ?? "Couldn't hear that"));
++      setPhase("paused");
++    });
++    return () => {
++      stopped = true;
++      cancelAnimationFrame(frame);
++      capture?.cancel();
++      setServiceLevel(0);
++    };
++  }, [speech, catalog, listen, cycle]);
++  (0, import_react35.useEffect)(() => {
++    if (phase !== "thinking" || running || waiting.current === null) return;
++    const [count, text] = [lastReply.slice(0, lastReply.indexOf("|")), lastReply.slice(lastReply.indexOf("|") + 1)];
++    if (count === waiting.current || !text.trim()) return;
++    waiting.current = null;
++    const spoken = plainSpeech(text);
++    setSaid(spoken);
++    setHeard("");
++    if (!window.speechSynthesis || !spoken) {
++      setPhase("listening");
++      return;
++    }
++    const utterance = new SpeechSynthesisUtterance(spoken);
++    utterance.lang = /[\u3400-\u9fff]/.test(spoken) ? "zh-CN" : "en-US";
++    utterance.onend = () => setPhase((current) => current === "speaking" ? "listening" : current);
++    utterance.onerror = utterance.onend;
++    setPhase("speaking");
++    window.speechSynthesis.cancel();
++    window.speechSynthesis.speak(utterance);
++  }, [phase, running, lastReply]);
++  (0, import_react35.useEffect)(() => () => window.speechSynthesis?.cancel(), []);
++  const micLevel = useMicLevel(!speech && phase === "listening" && dictation.listening);
++  const level = speech ? serviceLevel : micLevel;
++  const markState = phase === "thinking" || phase === "transcribing" ? "thinking" : phase === "speaking" ? "sending" : "idle";
++  const blocked = phase === "unsupported" || phase === "setup" || phase === "starting";
++  const togglePause = () => {
++    if (phase === "paused") {
++      setPhase("listening");
++      return;
++    }
++    turn.current += 1;
++    window.speechSynthesis?.cancel();
++    setPhase("paused");
+   };
 -  const chip = (bot, on, onClick, role) => (0, import_react23.createElement)("button", {
 -    key: bot.id,
 -    type: "button",
@@ -17237,14 +17833,22 @@ diff --git a/client.js b/client.js
 -    onClick
 -  }, (0, import_react23.createElement)(BotAvatar, { bot, size: 22, badge: false, live: false }), (0, import_react23.createElement)("span", { className: "bt-ng-name" }, bot.name), on && role === "radio" ? (0, import_react23.createElement)(AdminStar) : null);
 -  return (0, import_react23.createElement)(
--    "div",
++  const openSetup = phase === "setup" ? actions.voiceSetup() : null;
++  const caption = phase === "speaking" ? said : heard;
++  const shownNote = note || dictation.note;
++  return (0, import_react35.createElement)(
+     "div",
 -    { className: "bt-set-card bt-ng" },
 -    (0, import_react23.createElement)(
--      "div",
++    { className: "bt-pane bt-voice-pane", style: { left: paneLeft } },
++    (0, import_react35.createElement)(
+       "div",
 -      { className: "bt-set-row bt-bs-row bt-bs-stack" },
 -      (0, import_react23.createElement)("span", { className: "bt-set-copy" }, (0, import_react23.createElement)("span", { className: "bt-bs-label bt-ng-label" }, (0, import_react23.createElement)(AdminStar), t("Choose the group admin"))),
 -      (0, import_react23.createElement)(
--        "div",
++      { className: "bt-voice-stage", role: "dialog", "aria-label": t("Voice chat with {name}", { name }), "data-phase": phase === "transcribing" ? "thinking" : phase },
++      (0, import_react35.createElement)(
+         "div",
 -        { className: "bt-ng-picks", role: "radiogroup", "aria-label": t("Group admin") },
 -        roster.bots.map((bot) => chip(bot, admin === bot.id, () => pickAdmin(bot.id), "radio"))
 -      )
@@ -17254,6 +17858,11 @@ diff --git a/client.js b/client.js
 -      { className: "bt-set-row bt-bs-row bt-bs-stack bt-ng-step" },
 -      (0, import_react23.createElement)("span", { className: "bt-set-copy" }, (0, import_react23.createElement)("span", { className: "bt-bs-label" }, t("Who to chat with…"))),
 -      (0, import_react23.createElement)(
++        { className: "bt-voice-orb", style: { "--bt-level": level } },
++        (0, import_react35.createElement)("span", { className: "bt-voice-ring", "aria-hidden": true }),
++        (0, import_react35.createElement)("span", { className: "bt-voice-ring bt-voice-ring-2", "aria-hidden": true }),
++        bot ? (0, import_react35.createElement)(BotMark, { bot, size: 112, state: markState, live: true, gaze: phase === "listening" }) : room2 ? (0, import_react35.createElement)(RoomAvatar, { room: room2, roster, size: 112 }) : null
++      ),
 +      (0, import_react35.createElement)("div", { className: "bt-voice-name" }, name),
 +      (0, import_react35.createElement)(
          "div",
@@ -18009,7 +18618,7 @@ diff --git a/client.js b/client.js
      body
    );
  }
-@@ -10150,33 +10150,145 @@ button.bt-us-row:hover{background:var(--bt-hover)}
+@@ -10150,33 +10150,216 @@ button.bt-us-row:hover{background:var(--bt-hover)}
  @keyframes bt-us-drop{from{opacity:0;transform:translateY(-4px) scale(.96)}}
  @keyframes bt-us-fade{from{opacity:0}}
  @keyframes bt-us-cell{from{opacity:0;transform:scale(.5)}}
@@ -18062,16 +18671,16 @@ diff --git a/client.js b/client.js
    { width: 20, height: 20, viewBox: "0 0 16 16", fill: "currentColor", "aria-hidden": true },
 -  (0, import_react25.createElement)("path", { d: "M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z" })
 +  (0, import_react37.createElement)("path", { d: "M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z" })
- );
--var MARKS = { github: GitHubMark };
--var ABOUT = { github: () => t("Repositories, issues, and pull requests") };
++);
 +var FeishuMark = () => (0, import_react37.createElement)(
 +  "svg",
 +  { width: 20, height: 20, viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": true },
 +  (0, import_react37.createElement)("path", { d: "M3.2 6.6c3 .1 6.4 1.5 8.6 3.9-1.9.4-3.5 1.4-4.7 2.9-1.9-.6-3.4-1.9-3.9-3.6-.2-.7-.2-1.5 0-3.2z" }),
 +  (0, import_react37.createElement)("path", { d: "M16.8 5.4c-2.9.2-5.6 1.5-7.4 3.4 1.7 1.2 3.1 2.8 3.9 4.9 2.2-1.1 3.8-3.2 4-5.6.1-.9-.1-1.9-.4-2.7z" }),
 +  (0, import_react37.createElement)("path", { d: "M8.6 12.1c.9.7 1.7 1.6 2.2 2.7-1.1.2-2.3 0-3.3-.6.2-.8.6-1.5 1.1-2.1z" })
-+);
+ );
+-var MARKS = { github: GitHubMark };
+-var ABOUT = { github: () => t("Repositories, issues, and pull requests") };
 +var MARKS = { github: GitHubMark, composio: ConnectorIcon, feishu: FeishuMark };
 +var ABOUT = {
 +  github: () => t("Repositories, issues, and pull requests"),
@@ -18081,6 +18690,9 @@ diff --git a/client.js b/client.js
  function statusText2(connector) {
    if (connector.state === "connecting") return t("Connecting…");
    if (connector.state === "error") return t("Could not connect: {error}", { error: connector.error ?? "" });
++  if (connector.state === "ready" && connector.kind === "channel") {
++    return connector.mode === "app" ? t("Connected: app, over the long connection") : t("Connected: custom bot webhook");
++  }
 +  if (connector.state === "ready" && connector.apps?.length > 0) return t("Connected: {apps}", { apps: connector.apps.map(appName).join(", ") });
    if (connector.state === "ready") return connector.account ? t("Connected as {account}", { account: connector.account }) : t("Connected");
    return ABOUT[connector.id]?.() ?? "";
@@ -18090,6 +18702,74 @@ diff --git a/client.js b/client.js
 -  const [token, setToken] = (0, import_react25.useState)("");
 -  const [busy, setBusy] = (0, import_react25.useState)(false);
 -  const [error, setError] = (0, import_react25.useState)(null);
++function CredentialField({ credential, value, onChange, onEnter, autoFocus }) {
++  const label = t(credential.label);
++  if (credential.masked) return (0, import_react37.createElement)(MaskedInput, { value, onChange, onEnter, label, autoFocus });
++  return (0, import_react37.createElement)(
++    "label",
++    { className: "bt-q-field" },
++    (0, import_react37.createElement)("input", {
++      className: "bt-input",
++      type: "text",
++      value,
++      "aria-label": label,
++      placeholder: label,
++      spellCheck: false,
++      autoFocus,
++      onChange: (event) => onChange(event.target.value),
++      onKeyDown: (event) => {
++        if (event.key === "Enter") onEnter?.();
++      }
++    })
++  );
++}
++function AllowedSenders({ connector, actions, run, busy }) {
++  const [openId, setOpenId] = (0, import_react37.useState)("");
++  const allowed = connector.allowed ?? [];
++  const refused = connector.inbound?.refusedSenders ?? [];
++  const allow = (id) => void run(actions.connectorAllow(connector.id, id));
++  return (0, import_react37.createElement)(
++    "div",
++    { className: "bt-connector-allowed" },
++    (0, import_react37.createElement)("span", { className: "bt-connector-person-title" }, t("Who may talk to the Bots")),
++    allowed.length === 0 && refused.length === 0 ? (0, import_react37.createElement)("span", { className: "bt-set-hint" }, t("Nobody yet. A message from anyone else starts no turn.")) : null,
++    allowed.map((entry) => (0, import_react37.createElement)(
++      "div",
++      { key: entry.openId, className: "bt-connector-person" },
++      (0, import_react37.createElement)("span", { className: "bt-connector-person-name" }, entry.name ?? entry.openId),
++      (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => void run(actions.connectorBlock(connector.id, entry.openId)) }, t("Block"))
++    )),
++    refused.map((entry) => (0, import_react37.createElement)(
++      "div",
++      { key: entry.openId, className: "bt-connector-person" },
++      (0, import_react37.createElement)("span", { className: "bt-connector-person-name" }, entry.name ?? entry.openId),
++      (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => allow(entry.openId) }, t("Allow"))
++    )),
++    (0, import_react37.createElement)(
++      "div",
++      { className: "bt-connector-form-row" },
++      (0, import_react37.createElement)("input", {
++        className: "bt-input",
++        type: "text",
++        value: openId,
++        spellCheck: false,
++        "aria-label": t("Feishu open_id"),
++        placeholder: t("Paste an open_id to allow"),
++        onChange: (event) => setOpenId(event.target.value),
++        onKeyDown: (event) => {
++          if (event.key === "Enter" && openId.trim() !== "") {
++            allow(openId.trim());
++            setOpenId("");
++          }
++        }
++      }),
++      (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || openId.trim() === "", onClick: () => {
++        allow(openId.trim());
++        setOpenId("");
++      } }, t("Allow"))
++    )
++  );
++}
 +var APP_STATUS = { ready: () => t("Ready"), "sign-in": () => t("Needs sign-in") };
 +function AppChip({ name, status, onRemove }) {
 +  const label = APP_STATUS[status]?.();
@@ -18166,12 +18846,20 @@ diff --git a/client.js b/client.js
    const run = (task, after) => {
      setBusy(true);
      setError(null);
-@@ -10184,72 +10184,140 @@ function ConnectorRow({ connector, actions }) {
+@@ -10184,72 +10184,184 @@ function ConnectorRow({ connector, actions }) {
        after?.();
      }, (failure) => setError(failure?.message ?? String(failure))).finally(() => setBusy(false));
    };
 +  const gateway = connector.id === "composio";
 +  const sender = connector.kind === "sender";
++  const channel = connector.kind === "channel";
++  const modes = connector.modes ?? [];
++  const [mode, setMode] = (0, import_react37.useState)(() => connector.mode ?? modes[0]?.id);
++  const [values, setValues] = (0, import_react37.useState)({});
++  const chosen = modes.find((entry) => entry.id === mode) ?? modes[0];
++  const field = (name) => values[name] ?? "";
++  const setField = (name, value) => setValues((current) => ({ ...current, [name]: value }));
++  const filled = chosen !== void 0 && chosen.credentials.every((credential) => field(credential.name).trim() !== "");
 +  const [statuses, setStatuses] = (0, import_react37.useState)({});
 +  const appsKey = (connector.apps ?? []).join(",");
 +  (0, import_react37.useEffect)(() => {
@@ -18191,8 +18879,19 @@ diff --git a/client.js b/client.js
 +  }, [gateway, connector.state, appsKey, picking]);
 +  const search = (0, import_react37.useCallback)((query) => actions.connectorAppSearch(connector.id, query, connector.state === "off" ? token : void 0), [connector.id, connector.state, token]);
    const connect = () => {
-     if (busy || token.trim() === "") return;
+-    if (busy || token.trim() === "") return;
 -    void run(actions.connectorConnect(connector.id, token), () => {
++    if (busy) return;
++    if (channel) {
++      if (chosen === void 0 || !filled) return;
++      const credentials = Object.fromEntries(chosen.credentials.map((credential) => [credential.name, field(credential.name)]));
++      void run(actions.connectorConnect(connector.id, { mode: chosen.id, credentials }), () => {
++        setValues({});
++        setForm(false);
++      });
++      return;
++    }
++    if (token.trim() === "") return;
 +    if (gateway && apps.length === 0) {
 +      setError(t("Pick at least one app"));
 +      return;
@@ -18211,12 +18910,14 @@ diff --git a/client.js b/client.js
 +    void run(actions.connectorApps(connector.id, apps), () => setPicking(false));
 +  };
    const on = connector.state !== "off";
++  const canPost = sender || channel && connector.mode === "webhook";
++  const perBot = !sender && (!channel || connector.mode === "app");
    const Mark = MARKS[connector.id];
 -  const row = (0, import_react25.useRef)(null);
 -  useMorph(row, `${form}:${error !== null}:${connector.state}`);
 -  return (0, import_react25.createElement)(
 +  const row = (0, import_react37.useRef)(null);
-+  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}`);
++  useMorph(row, `${form}:${picking}:${bots}:${error !== null}:${connector.state}:${mode}`);
 +  return (0, import_react37.createElement)(
      "div",
      { ref: row, className: "bt-connector", "data-state": connector.state },
@@ -18246,25 +18947,24 @@ diff --git a/client.js b/client.js
 +          setApps(connector.apps ?? []);
 +          setPicking(true);
 +        } }, t("Choose apps")) : null,
-+        on && !sender ? (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", "aria-expanded": bots, onClick: () => setBots((value) => !value) }, bots ? t("Done") : t("Choose Bots")) : null,
++        on && perBot ? (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", "aria-expanded": bots, onClick: () => setBots((value) => !value) }, bots ? t("Done") : t("Choose Bots")) : null,
 +        on ? (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => void run(actions.connectorDisconnect(connector.id)) }, t("Disconnect")) : form ? null : (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", onClick: () => setForm(true) }, t("Connect"))
        )
      ),
 -    !on && form ? (0, import_react25.createElement)(
 +    on && gateway && !picking ? (0, import_react37.createElement)(AppStatusList, { apps: connector.apps ?? [], statuses }) : null,
-+    on && !sender ? (0, import_react37.createElement)("span", { className: "bt-connector-uses" }, usageText(roster, connector.id)) : null,
++    on && perBot ? (0, import_react37.createElement)("span", { className: "bt-connector-uses" }, usageText(roster, connector.id)) : null,
 +    on && bots ? (0, import_react37.createElement)(ConnectorBots, { connector, roster, actions, run, SwitchRow }) : null,
-+    on && sender ? (0, import_react37.createElement)(
++    on && channel && connector.mode === "app" ? (0, import_react37.createElement)(AllowedSenders, { connector, actions, run, busy }) : null,
++    on && canPost ? (0, import_react37.createElement)(
        "div",
        { className: "bt-connector-form" },
 -      (0, import_react25.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react25.createElement)(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: t("GitHub token"), autoFocus: true })),
 -      (0, import_react25.createElement)(
 +      (0, import_react37.createElement)("label", { className: "bt-q-field" }, (0, import_react37.createElement)("input", { className: "bt-input", type: "text", value: message, "aria-label": t("Message to send to Feishu"), placeholder: t("Type a message for the Feishu group"), onChange: (event) => setMessage(event.target.value) })),
 +      (0, import_react37.createElement)(
-         "div",
-         { className: "bt-connector-form-row" },
--        (0, import_react25.createElement)("a", { className: "bt-connector-link", href: TOKEN_URL, target: "_blank", rel: "noopener noreferrer" }, t("Create a token on GitHub")),
--        (0, import_react25.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => {
++        "div",
++        { className: "bt-connector-form-row" },
 +        (0, import_react37.createElement)("span", { className: "bt-connector-link" }),
 +        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || message.trim() === "" || actions.connectorSend === void 0, onClick: () => void run(actions.connectorSend(connector.id, message), () => setMessage("")) }, t("Send"))
 +      )
@@ -18272,19 +18972,43 @@ diff --git a/client.js b/client.js
 +    !on && form ? (0, import_react37.createElement)(
 +      "div",
 +      { className: "bt-connector-form" },
-+      (0, import_react37.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react37.createElement)(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: sender ? t("Feishu webhook URL") : gateway ? t("Composio API key") : t("GitHub token"), autoFocus: true })),
++      channel ? (0, import_react37.createElement)("div", { className: "bt-states", role: "group", "aria-label": t("How to connect") }, modes.map((entry) => (0, import_react37.createElement)("button", {
++        key: entry.id,
++        type: "button",
++        className: "bt-state",
++        "aria-pressed": entry.id === chosen?.id,
++        onClick: () => {
++          setMode(entry.id);
++          setValues({});
++          setError(null);
++        }
++      }, t(entry.label)))) : null,
++      channel ? (chosen?.credentials ?? []).map((credential, index) => (0, import_react37.createElement)(CredentialField, {
++        key: credential.name,
++        credential,
++        value: field(credential.name),
++        onChange: (value) => setField(credential.name, value),
++        onEnter: connect,
++        autoFocus: index === 0
++      })) : (0, import_react37.createElement)("label", { className: "bt-q-field bt-secret-field" }, (0, import_react37.createElement)(MaskedInput, { value: token, onChange: setToken, onEnter: connect, label: gateway ? t("Composio API key") : t("GitHub token"), autoFocus: true })),
 +      gateway ? (0, import_react37.createElement)(AppPicker, { apps, onChange: setApps, search: token.trim() === "" ? void 0 : search }) : null,
 +      (0, import_react37.createElement)(
-+        "div",
-+        { className: "bt-connector-form-row" },
-+        (0, import_react37.createElement)("a", { className: "bt-connector-link", href: sender ? FEISHU_WEBHOOK_URL : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: "_blank", rel: "noopener noreferrer" }, sender ? t("Get a webhook URL in Feishu") : gateway ? t("Get a Composio API key") : t("Create a token on GitHub")),
+         "div",
+         { className: "bt-connector-form-row" },
+-        (0, import_react25.createElement)("a", { className: "bt-connector-link", href: TOKEN_URL, target: "_blank", rel: "noopener noreferrer" }, t("Create a token on GitHub")),
+-        (0, import_react25.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => {
++        (0, import_react37.createElement)(
++          "a",
++          { className: "bt-connector-link", href: channel ? chosen?.link ?? FEISHU_WEBHOOK_URL : gateway ? COMPOSIO_KEY_URL : TOKEN_URL, target: "_blank", rel: "noopener noreferrer" },
++          channel ? t(chosen?.linkLabel ?? "Get a webhook URL in Feishu") : gateway ? t("Get a Composio API key") : t("Create a token on GitHub")
++        ),
 +        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => {
            setForm(false);
            setToken("");
-           setError(null);
-         } }, t("Cancel")),
--        (0, import_react25.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || token.trim() === "", onClick: connect }, busy ? t("Connecting…") : t("Connect"))
-+        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || token.trim() === "", onClick: connect }, busy ? t("Connecting…") : t("Connect"))
++          setValues({});
++          setError(null);
++        } }, t("Cancel")),
++        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || (channel ? !filled : token.trim() === ""), onClick: connect }, busy ? t("Connecting…") : t("Connect"))
 +      )
 +    ) : null,
 +    on && gateway && picking ? (0, import_react37.createElement)(
@@ -18298,8 +19022,9 @@ diff --git a/client.js b/client.js
 +        (0, import_react37.createElement)("span", { className: "bt-connector-link" }),
 +        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy, onClick: () => {
 +          setPicking(false);
-+          setError(null);
-+        } }, t("Cancel")),
+           setError(null);
+         } }, t("Cancel")),
+-        (0, import_react25.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || token.trim() === "", onClick: connect }, busy ? t("Connecting…") : t("Connect"))
 +        (0, import_react37.createElement)("button", { type: "button", className: "bt-soft bt-soft-sm", disabled: busy || apps.length === 0, onClick: saveApps }, busy ? t("Connecting…") : t("Save"))
        )
      ) : null,
@@ -21300,15 +22025,19 @@ diff --git a/client.js b/client.js
      stopMemberWork: (roomId, botId) => after(call("stop-member-work", { roomId, botId })),
      // Values go out in these requests and never come back in a response.
      secretSet: (payload) => after(call("secret-set", payload)),
-@@ -13819,15 +13819,29 @@ function apply(ctx) {
+@@ -13819,15 +13819,33 @@ function apply(ctx) {
      secretCancel: (requestId) => after(call("secret-cancel", { requestId })),
      secretUpdate: (name, scope) => after(call("secret-update", { name, scope })),
      secretDelete: (name) => after(call("secret-delete", { name })),
 -    connectorConnect: (id, token) => after(call("connector-connect", { id, token })),
-+    connectorConnect: (id, token, apps) => after(call("connector-connect", { id, token, ...apps !== void 0 ? { apps } : {} })),
++    // A channel's form sends { mode, credentials }, one field per credential; every other connector
++    // sends its one token. Both go out under the same endpoint.
++    connectorConnect: (id, token, apps) => after(call("connector-connect", typeof token === "object" && token !== null ? { id, ...token, ...apps !== void 0 ? { apps } : {} } : { id, token, ...apps !== void 0 ? { apps } : {} })),
 +    connectorApps: (id, apps) => after(call("connector-apps", { id, apps })),
 +    connectorAppSearch: (id, query, token) => call("connector-app-search", { id, query, ...token ? { token } : {} }),
 +    connectorAppStatus: (id) => call("connector-app-status", { id }),
++    connectorAllow: (id, openId) => after(call("connector-allow", { id, openId })),
++    connectorBlock: (id, openId) => after(call("connector-block", { id, openId })),
      connectorDisconnect: (id) => after(call("connector-disconnect", { id })),
      connectorRetry: (id) => after(call("connector-retry", { id })),
 +    connectorSend: (id, text) => after(call("connector-send", { id, text })),
diff --git a/patches/ds-bot/files/src/client/connector-bots.js b/patches/ds-bot/files/src/client/connector-bots.js
index 27fd56ed..068a6b8a 100644
--- a/patches/ds-bot/files/src/client/connector-bots.js
+++ b/patches/ds-bot/files/src/client/connector-bots.js
@@ -12,9 +12,12 @@ export function ownBots(roster) {
   return (roster?.bots ?? []).filter(bot => !bot.remote && (me === undefined || me === null || bot.ownerId === undefined || bot.ownerId === me))
 }
 
-// Connectors that give a Bot tools. A sender (#1263) has none: a per-Bot switch for it would be a
-// choice that never changes anything, so it is not offered.
-export const connectedConnectors = roster => (roster?.connectors ?? []).filter(connector => connector.state !== 'off' && connector.kind !== 'sender')
+// Connectors that give a Bot tools or a way in. A sender (#1263) has neither: a per-Bot switch for it
+// would be a choice that never changes anything, so it is not offered. A channel (#1266) offers the
+// switch only in app mode: a webhook-only Feishu row is today's sender and has nothing to share.
+export const connectedConnectors = roster => (roster?.connectors ?? []).filter(connector => connector.state !== 'off'
+  && connector.kind !== 'sender'
+  && !(connector.kind === 'channel' && connector.mode !== 'app'))
 
 // Only an explicit false turns it off; no record means on.
 export const isOn = (bot, id) => bot.connectors?.[id] !== false
diff --git a/patches/ds-bot/files/src/host/authz.js b/patches/ds-bot/files/src/host/authz.js
index e317a6de..d2cce743 100644
--- a/patches/ds-bot/files/src/host/authz.js
+++ b/patches/ds-bot/files/src/host/authz.js
@@ -25,7 +25,7 @@ const NO_ACTOR_ALLOWED = new Set(['auth-redeem', 'auth-whoami', 'auth-invite'])
 // is one of them: there is at most one, and it carries no owner.
 const SHARED_BLOCKED = new Set([
   'secret-set', 'secret-allow', 'secret-cancel', 'secret-update', 'secret-delete',
-  'connector-connect', 'connector-apps', 'connector-app-search', 'connector-app-status', 'connector-disconnect', 'connector-retry', 'connector-send', 'bot-connectors',
+  'connector-connect', 'connector-apps', 'connector-app-search', 'connector-app-status', 'connector-allow', 'connector-block', 'connector-disconnect', 'connector-retry', 'connector-send', 'bot-connectors',
   'capability-save', 'capability-delete', 'capability-approve',
   'folders', 'folder-pick', 'folder-list',
   'browser-wait', 'browser-result',
diff --git a/patches/ds-bot/files/src/host/feishu-inbound.js b/patches/ds-bot/files/src/host/feishu-inbound.js
index 3b53471c..e953fa5d 100644
--- a/patches/ds-bot/files/src/host/feishu-inbound.js
+++ b/patches/ds-bot/files/src/host/feishu-inbound.js
@@ -47,19 +47,17 @@ export function readEvent(envelope) {
 }
 
 // Phase 1 spent one secret per connector (`FEISHU_WEBHOOK`, redacted by secrets.js). The long
-// connection needs an app, which is a pair: this reads both through the same `rt.secretValue` and
-// answers undefined unless both are present, so a half-configured app dials nothing instead of
-// failing at the handshake. The two values never leave this function: the view reports `missing`,
+// connection needs an app, which is a pair in two different places (#1266): the App ID is not a
+// secret, so it lives in the connector record and shows on the row; only the App Secret goes to
+// secrets.js. Either half missing answers undefined, so a half-configured app dials nothing instead
+// of failing at the handshake. The secret never leaves this function: the view reports `missing`,
 // never the id or the secret.
-export const APP_ID_SECRET = 'FEISHU_APP_ID'
 export const APP_SECRET_SECRET = 'FEISHU_APP_SECRET'
 
-export function appCredentials(secretValue) {
-  const id = secretValue?.(APP_ID_SECRET)
-  const secret = secretValue?.(APP_SECRET_SECRET)
+export function appCredentials(record, secretValue) {
   const asText = value => (typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined)
-  const appId = asText(id)
-  const appSecret = asText(secret)
+  const appId = asText(record?.appId)
+  const appSecret = asText(secretValue?.(APP_SECRET_SECRET))
   if (appId === undefined || appSecret === undefined) return undefined
   return { appId, appSecret }
 }
@@ -72,9 +70,17 @@ export const handleOf = chatId => `feishu:${chatId}`
 // `start()`: an adapter that is installed after this module still comes up, and one replaced while
 // the connection is off is the one the next start dials.
 // `deliver({ handle, text, name })` is `remote-chat`'s seam, and `redact` is `rt.redactSecrets`.
+// A refused sender is kept so the connector row can show who was turned away and offer Allow. The
+// list is bounded: a stranger who messages a hundred times is one row that keeps its last time, not
+// an unbounded log in state.json. It lives in the view only — the connector decides what to save.
+// `enabled` and `allowed` may each be a value or a function answering it: the row changes both while
+// this object is already installed.
+export const MAX_REFUSED = 20
+
 export function createInbound({
   enabled = false,
   ownerOpenId,
+  allowed,
   transport,
   deliver,
   log = () => {},
@@ -88,7 +94,7 @@ export function createInbound({
   // in `deliver`; the ring is written only after that resolves (#1266 INC), so this is what keeps the
   // second copy from starting a second turn in the gap.
   const inFlight = new Set()
-  const view = { state: enabled ? 'connecting' : 'off', connected: 0, duplicates: 0, refused: 0, ignored: 0 }
+  const view = { state: (typeof enabled === 'function' ? enabled() === true : enabled) ? 'connecting' : 'off', connected: 0, duplicates: 0, refused: 0, ignored: 0 }
   let closer
   let starting
   // Bumped by `stop()`: a dial that was already in flight when the owner stopped the connector is
@@ -106,14 +112,44 @@ export function createInbound({
     return true
   }
 
-  // The owner is the only sender that may start a turn. An unset or empty id refuses everyone: a
-  // missing owner and a missing `open_id` must never compare equal.
-  const owner = () => (typeof ownerOpenId === 'string' && ownerOpenId !== '' ? ownerOpenId : undefined)
+  // The switch and the guest list are read every time, not copied when the module is installed: the
+  // owner turns the connection on and allows a sender on the row, while this object is already made.
+  const on = () => (typeof enabled === 'function' ? enabled() === true : enabled === true)
+
+  // Who may start a turn (#1266): the owner, plus whoever the row allowed. `<allowed>` is the row's
+  // list — a list of open_ids, or of `{ openId }` entries — and empty means nobody, exactly as the
+  // owner-only gate did: connecting the app must never let a stranger spend the owner's tokens.
+  const allowedIds = () => {
+    const ids = new Set()
+    if (typeof ownerOpenId === 'string' && ownerOpenId !== '') ids.add(ownerOpenId)
+    const list = typeof allowed === 'function' ? allowed() : allowed
+    for (const entry of Array.isArray(list) ? list : []) {
+      const id = typeof entry === 'string' ? entry : entry?.openId
+      if (typeof id === 'string' && id !== '') ids.add(id)
+    }
+    return ids
+  }
+
+  // One row per refused sender, newest last, bounded: a stranger who messages a hundred times is one
+  // line with a fresh time, not an unbounded log. A sender the row allows leaves the list at once.
+  const refused = new Map()
+  const refuse = (openId, name) => {
+    refused.delete(openId)
+    refused.set(openId, { openId, ...(name === undefined ? {} : { name }), at: new Date(now()).toISOString() })
+    while (refused.size > MAX_REFUSED) refused.delete(refused.keys().next().value)
+  }
+  const refusedSenders = () => {
+    const ids = allowedIds()
+    return [...refused.values()].filter(entry => !ids.has(entry.openId))
+  }
 
   async function nameOf(openId) {
-    if (typeof transport?.nameOf !== 'function') return undefined
+    // The transport may be a function (read again on every start), so the display name is asked of
+    // the adapter this call would dial, never of the option itself.
+    const socket = socketOf()
+    if (typeof socket?.nameOf !== 'function') return undefined
     try {
-      const name = await transport.nameOf(openId)
+      const name = await socket.nameOf(openId)
       return typeof name === 'string' && name.trim() !== '' ? name.trim() : undefined
     } catch {
       return undefined
@@ -127,10 +163,18 @@ export function createInbound({
       log('a Feishu event carried no readable text message; no turn started')
       return 'ignored'
     }
-    const expected = owner()
-    if (expected === undefined || read.openId !== expected) {
+    // Off is off: a socket that delivers while the owner has disconnected (a close that is still in
+    // flight, a stale adapter) starts nothing (#1266, acceptance 4).
+    if (!on()) {
+      view.refused += 1
+      log('the Feishu long connection is off; no turn started')
+      return 'off'
+    }
+    if (!allowedIds().has(read.openId)) {
       view.refused += 1
-      log('a Feishu message from %s is not the owner; no turn started', read.openId)
+      const name = await nameOf(read.openId)
+      refuse(read.openId, name)
+      log('a Feishu message from %s is not the owner or an allowed sender; no turn started', read.openId)
       return 'refused'
     }
     if (seen.has(read.id) || inFlight.has(read.id)) {
@@ -155,7 +199,7 @@ export function createInbound({
   // One socket per connector. A second start while the first dials shares it, so a reconnect loop
   // cannot become two members of the same conversation.
   function start() {
-    if (!enabled) return Promise.resolve('off')
+    if (!on()) return Promise.resolve('off')
     if (starting !== undefined) return starting
     const socket = socketOf()
     // No adapter yet is a configuration state, not a failed dial: nothing is remembered, so a later
@@ -201,10 +245,10 @@ export function createInbound({
     starting = undefined
     const closing = closer
     closer = undefined
-    view.state = enabled ? 'connecting' : 'off'
+    view.state = on() ? 'connecting' : 'off'
     if (closing !== undefined) await Promise.resolve().then(() => closing.close()).catch(() => { /* an already-dead socket is not an error */ })
   }
 
-  const viewOf = () => ({ state: view.state, ...(view.error === undefined ? {} : { error: view.error }), ...(view.lastEventAt === undefined ? {} : { lastEventAt: view.lastEventAt }), connected: view.connected, duplicates: view.duplicates, refused: view.refused })
+  const viewOf = () => ({ state: view.state, ...(view.error === undefined ? {} : { error: view.error }), ...(view.lastEventAt === undefined ? {} : { lastEventAt: view.lastEventAt }), connected: view.connected, duplicates: view.duplicates, refused: view.refused, refusedSenders: refusedSenders() })
   return { start, stop, handleEvent, view: viewOf, seen: () => seen.size }
 }
diff --git a/patches/ds-bot/files/test/feishu-channel.test.js b/patches/ds-bot/files/test/feishu-channel.test.js
new file mode 100644
index 00000000..2d147084
--- /dev/null
+++ b/patches/ds-bot/files/test/feishu-channel.test.js
@@ -0,0 +1,258 @@
+import assert from 'node:assert/strict'
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { test } from 'node:test'
+import { createRuntime } from '../index.js'
+import { RESERVED_NAMES, feishuAppSend, feishuReply } from '../src/host/connectors.js'
+import { fakeContext } from './fake-ctx.js'
+
+// #1266, the connector-row half: the owner's word is 「飞书是做成一个连接器，左下角点击连接应用的时候
+// 可以连接」. So the row is where Feishu is configured — one row, two modes (a custom-bot webhook, or a
+// self-built app with its long connection), the App ID kept in the record because it is not a secret,
+// the App Secret only in secrets.json, Choose Bots for what a Bot can reach, and the guest list the
+// app mode's gate reads. Every test here fails on the sender-row shape it replaces.
+
+const TEAM = {
+  version: 1,
+  mainBotIds: ['m1'],
+  revision: 1,
+  bots: { m1: { id: 'm1', sessionId: 'm1', name: 'Chief', role: 'Chief of Staff', instructions: '', createdAt: 1 } },
+  rooms: {},
+  exchanges: [],
+  exchangeTurns: {},
+  questions: {},
+}
+
+const teamHome = record => {
+  const home = mkdtempSync(join(tmpdir(), 'dsb-feishu-channel-'))
+  const state = record === undefined ? TEAM : { ...TEAM, connectors: { feishu: record } }
+  writeFileSync(join(home, 'state.json'), JSON.stringify(state))
+  return home
+}
+
+const cleanHome = home => rmSync(home, { recursive: true, force: true, maxRetries: 5, retryDelay: 20 })
+const answer = (status, body) => ({ status, ok: status >= 200 && status < 300, body, json: async () => body })
+
+// A fake Feishu: tenant tokens and message sends, and every call recorded. The scripted answers are
+// consumed in order by non-token calls (the webhook probe, a send), the last one repeating.
+function fakeFeishu(script = []) {
+  const calls = []
+  const queue = [...script]
+  const fetch = async (url, init) => {
+    const body = init?.body === undefined ? undefined : JSON.parse(init.body)
+    calls.push({ url: String(url), method: init?.method, body, headers: init?.headers ?? {} })
+    if (String(url).includes('/auth/v3/tenant_access_token/internal')) return answer(200, { code: 0, tenant_access_token: 't_app_token' })
+    if (String(url).includes('/open-apis/im/v1/messages')) return answer(200, { code: 0, data: { message_id: 'om_answer' } })
+    return queue.length > 1 ? queue.shift() : (queue[0] ?? answer(200, { code: 0, data: { message_id: 'om_1' } }))
+  }
+  return { calls, fetch }
+}
+
+// The runtime a plugin sees after install, with the socket replaced by a stub: `dials` are the
+// `onEvent` handlers handed to it, exactly what a real long connection would call.
+function rig(t, { record, feishu = { api: 'https://feishu.test' } } = {}) {
+  const home = teamHome(record)
+  const ctx = fakeContext()
+  const register = ctx.connection.fetch.register
+  ctx.connection.fetch.register = (route) => { ctx.route = route; return register(route) }
+  const rt = createRuntime(ctx, { home, feishu })
+  const dials = []
+  const closes = []
+  rt.feishuTransport = {
+    nameOf: async openId => (openId === 'ou_stranger_1' ? 'Mallory' : `Someone ${openId}`),
+    connect: async (onEvent) => { dials.push(onEvent); return { close: async () => { closes.push(1) } } },
+  }
+  t.after(async () => { await ctx.dispose(); cleanHome(home) })
+  return { rt, ctx, home, dials, closes }
+}
+
+async function call(ctx, endpoint, payload) {
+  const response = await ctx.route.fetch(new Request('http://localhost/api/bot', { method: 'POST', body: JSON.stringify({ endpoint, payload }) }))
+  return response.json()
+}
+
+const rowOf = value => (value?.connectors ?? value ?? []).find(entry => entry.id === 'feishu')
+const until = async (read, done, ms = 3000) => {
+  const end = Date.now() + ms
+  let value = await read()
+  while (!done(value) && Date.now() < end) {
+    await new Promise(resolve => setTimeout(resolve, 10))
+    value = await read()
+  }
+  return value
+}
+const event = ({ id = 'e1', openId = 'ou_owner_1', chatId = 'oc_chat_1', text = 'hello there' } = {}) => ({
+  header: { event_id: id, event_type: 'im.message.receive_v1' },
+  event: {
+    sender: { sender_id: { open_id: openId } },
+    message: { chat_id: chatId, message_type: 'text', content: JSON.stringify({ text }) },
+  },
+})
+
+test('#1266: one Feishu row, two modes, nothing connected and no socket', async (t) => {
+  const { ctx, dials } = rig(t)
+  const row = rowOf((await call(ctx, 'state', {})).value)
+  assert.equal(row.kind, 'channel')
+  assert.equal(row.state, 'off')
+  assert.equal(row.mode, null, 'no mode is live before the first connect')
+  assert.deepEqual(row.modes.map(mode => mode.id), ['webhook', 'app'])
+  assert.deepEqual(row.modes[0].credentials.map(field => [field.name, field.masked]), [['webhook', true]])
+  assert.deepEqual(row.modes[1].credentials.map(field => [field.name, field.masked]), [['app_id', false], ['app_secret', true]], 'the App ID is not a secret; the App Secret never comes back')
+  assert.deepEqual(row.allowed, [])
+  assert.deepEqual(row.inbound.refusedSenders, [])
+  assert.equal(row.inbound.state, 'off')
+  assert.equal(dials.length, 0, 'connecting is a decision, not a default')
+})
+
+test('#1266: connecting the app keeps the id in the record, the secret in secrets.json, and opens the socket', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { rt, ctx, home, dials } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+
+  const connected = await call(ctx, 'connector-connect', { id: 'feishu', mode: 'app', credentials: { app_id: ' cli_app_1 ', app_secret: 'app-secret-value' } })
+  assert.equal(connected.ok, true, JSON.stringify(connected))
+  const row = rowOf(connected.value)
+  assert.equal(row.state, 'ready')
+  assert.equal(row.mode, 'app')
+  assert.equal(row.inbound.state, 'ready')
+  assert.equal(row.inbound.app, 'set')
+  assert.equal(dials.length, 1, 'the socket dialled once the pair was proved')
+
+  const tokenCall = feishu.calls.find(entry => entry.url.endsWith('/open-apis/auth/v3/tenant_access_token/internal'))
+  assert.deepEqual(tokenCall.body, { app_id: 'cli_app_1', app_secret: 'app-secret-value' }, 'the probe proves the pair it was given')
+  assert.equal(feishu.calls.filter(entry => entry.url.includes('im/v1/messages')).length, 0, 'connecting sends no message')
+
+  const disk = readFileSync(join(home, 'state.json'), 'utf8')
+  assert.equal(JSON.parse(disk).connectors.feishu.appId, 'cli_app_1')
+  assert.doesNotMatch(disk, /app-secret-value/, 'the App Secret is not in state.json')
+  assert.equal(rt.secretValue('FEISHU_APP_SECRET'), 'app-secret-value')
+  assert.doesNotMatch(JSON.stringify(connected.value), /app-secret-value/, 'and it never comes back in the row')
+})
+
+test('#1266: a stranger starts no turn, appears on the row, and Allow makes the next message land', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { rt, ctx, dials } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+  const delivered = []
+  rt.remoteChats.open = async () => 'chat'
+  rt.remoteChats.deliver = async message => { delivered.push(message); return 'chat' }
+
+  await call(ctx, 'connector-connect', { id: 'feishu', mode: 'app', credentials: { app_id: 'cli_app_1', app_secret: 'app-secret-value' } })
+  const onEvent = dials[0]
+  assert.equal(await onEvent(event({ id: 'e1', openId: 'ou_stranger_1' })), 'refused')
+  assert.equal(delivered.length, 0, 'nobody may spend the owner\'s tokens by default')
+
+  const refused = rowOf((await call(ctx, 'state', {})).value).inbound.refusedSenders
+  assert.equal(refused.length, 1)
+  assert.equal(refused[0].openId, 'ou_stranger_1')
+  assert.equal(refused[0].name, 'Mallory', 'the row names who was turned away')
+  assert.match(refused[0].at, /^\d{4}-\d{2}-\d{2}T/)
+
+  const allowed = await call(ctx, 'connector-allow', { id: 'feishu', openId: 'ou_stranger_1' })
+  assert.equal(allowed.ok, true, JSON.stringify(allowed))
+  const row = rowOf(allowed.value)
+  assert.deepEqual(row.allowed, [{ openId: 'ou_stranger_1', name: 'Mallory' }])
+  assert.deepEqual(row.inbound.refusedSenders, [], 'an allowed sender leaves the refused list at once')
+
+  assert.equal(await onEvent(event({ id: 'e2', openId: 'ou_stranger_1' })), 'delivered')
+  assert.equal(delivered.length, 1)
+  assert.equal(delivered[0].handle, 'feishu:oc_chat_1')
+  assert.equal(delivered[0].plugin, 'feishu', 'the chat still carries the plugin its answers leave on')
+
+  const blocked = await call(ctx, 'connector-block', { id: 'feishu', openId: 'ou_stranger_1' })
+  assert.deepEqual(rowOf(blocked.value).allowed, [])
+  assert.equal(await onEvent(event({ id: 'e3', openId: 'ou_stranger_1' })), 'refused')
+  assert.equal(delivered.length, 1)
+})
+
+test('#1266: Disconnect closes the socket, deletes both credentials, and no turn starts after it', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { rt, ctx, dials, closes, home } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+  const delivered = []
+  rt.remoteChats.open = async () => 'chat'
+  rt.remoteChats.deliver = async message => { delivered.push(message); return 'chat' }
+
+  await call(ctx, 'connector-connect', { id: 'feishu', mode: 'app', credentials: { app_id: 'cli_app_1', app_secret: 'app-secret-value' } })
+  const onEvent = dials[0]
+  const off = await call(ctx, 'connector-disconnect', { id: 'feishu' })
+  assert.equal(off.ok, true, JSON.stringify(off))
+  const row = rowOf(off.value)
+  assert.equal(row.state, 'off')
+  assert.equal(row.mode, null)
+  assert.equal(row.inbound.state, 'off')
+  assert.deepEqual(row.allowed, [])
+  assert.equal(closes.length, 1, 'the socket was closed, not leaked')
+  assert.equal(rt.secretValue('FEISHU_APP_SECRET'), undefined)
+  assert.equal(JSON.parse(readFileSync(join(home, 'state.json'), 'utf8')).connectors?.feishu, undefined)
+
+  assert.equal(await onEvent(event({ id: 'e9' })), 'off', 'an event a socket still hands over starts nothing while off')
+  assert.equal(delivered.length, 0)
+})
+
+test('#1266: webhook mode is today\'s sender: one test POST, ready, no socket and no guest list', async (t) => {
+  const feishu = fakeFeishu([answer(200, { code: 0, data: { message_id: 'om_test' } })])
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  const { ctx, dials } = rig(t)
+  t.after(() => { globalThis.fetch = realFetch })
+
+  const connected = await call(ctx, 'connector-connect', { id: 'feishu', mode: 'webhook', credentials: { webhook: 'https://feishu.test/open-apis/bot/v2/hook/abc' } })
+  assert.equal(connected.ok, true, JSON.stringify(connected))
+  const row = rowOf(connected.value)
+  assert.equal(row.state, 'ready')
+  assert.equal(row.mode, 'webhook')
+  assert.equal(row.inbound.state, 'off')
+  assert.equal(dials.length, 0, 'webhook mode dials nothing')
+  assert.equal(feishu.calls.filter(entry => entry.url.includes('/bot/v2/hook/')).length, 1, 'one test message, as phase 1')
+  const guest = await call(ctx, 'connector-allow', { id: 'feishu', openId: 'ou_someone_1' })
+  assert.equal(guest.ok, false, 'a webhook-only row has no guest list')
+})
+
+test('#1266: a half-saved app pair dials nothing and says so on the row', async (t) => {
+  const { ctx, dials } = rig(t, { record: { mode: 'app', appId: 'cli_app_1' } })
+  const row = await until(async () => rowOf((await call(ctx, 'state', {})).value), value => value?.state === 'error')
+  assert.equal(row.state, 'error')
+  assert.match(row.error, /App ID and App Secret/)
+  assert.equal(dials.length, 0, 'one half of a pair never opens a socket')
+  assert.equal(row.inbound.state, 'off')
+})
+
+test('#1266: app mode answers back into the same Feishu chat, as the app', async (t) => {
+  const feishu = fakeFeishu()
+  const realFetch = globalThis.fetch
+  globalThis.fetch = feishu.fetch
+  t.after(() => { globalThis.fetch = realFetch })
+
+  const handed = []
+  const reply = feishuReply({
+    appOf: () => ({ appId: 'cli_app_1', appSecret: 'app-secret-value' }),
+    secretValue: () => undefined,
+    sendApp: async (message, options) => { handed.push({ message, options }) },
+  })
+  await reply({ handle: 'feishu:oc_chat_9', text: 'the answer' })
+  assert.deepEqual(handed[0].message, { appId: 'cli_app_1', appSecret: 'app-secret-value', chatId: 'oc_chat_9', text: 'the answer' })
+  await assert.rejects(reply({ handle: 'not-a-feishu-chat', text: 'x' }), /Not sent: this answer has no Feishu chat/)
+
+  await feishuAppSend(
+    { appId: 'cli_app_1', appSecret: 'app-secret-value', chatId: 'oc_chat_9', text: 'the answer' },
+    { api: 'https://feishu.test' },
+  )
+  const send = feishu.calls.find(entry => entry.url.includes('/open-apis/im/v1/messages'))
+  assert.equal(send.url, 'https://feishu.test/open-apis/im/v1/messages?receive_id_type=chat_id')
+  assert.equal(send.body.receive_id, 'oc_chat_9')
+  assert.equal(send.body.msg_type, 'text')
+  assert.deepEqual(JSON.parse(send.body.content), { text: 'the answer' })
+  assert.equal(send.headers.authorization, 'Bearer t_app_token')
+})
+
+test('#1266: feishu is a name a saved capability may not take', () => {
+  assert.ok(RESERVED_NAMES.includes('feishu'))
+})
diff --git a/patches/ds-bot/files/test/feishu-inbound.test.js b/patches/ds-bot/files/test/feishu-inbound.test.js
index 9f9e56cc..ee333f72 100644
--- a/patches/ds-bot/files/test/feishu-inbound.test.js
+++ b/patches/ds-bot/files/test/feishu-inbound.test.js
@@ -1,6 +1,6 @@
 import assert from 'node:assert/strict'
 import { test } from 'node:test'
-import { APP_ID_SECRET, APP_SECRET_SECRET, DEDUPE_RING, appCredentials, createInbound, readEvent } from '../src/host/feishu-inbound.js'
+import { APP_SECRET_SECRET, DEDUPE_RING, MAX_REFUSED, appCredentials, createInbound, readEvent } from '../src/host/feishu-inbound.js'
 
 // #1266 phase 2: a message in Feishu starts a turn here, over the long connection. The socket is not
 // part of this module — every test injects one — so what is asserted is the policy a DSH upgrade or a
@@ -142,27 +142,31 @@ test('readEvent reads only the envelope phase 2 means to accept (#1266)', () =>
   assert.equal(readEvent({ header: { event_id: 'e6' }, event: { sender: { sender_id: { open_id: OWNER } }, message: { chat_id: 'oc', message_type: 'text', content: '{"text":"x"}' } } }) !== null, true)
 })
 
-test('the app pair is one credential: either half missing dials nothing (#1266)', () => {
-  const secrets = { [APP_ID_SECRET]: 'cli_app_1', [APP_SECRET_SECRET]: 'app-secret-value' }
-  const read = name => secrets[name]
-  assert.deepEqual(appCredentials(read), { appId: 'cli_app_1', appSecret: 'app-secret-value' })
-  assert.equal(appCredentials(name => (name === APP_ID_SECRET ? undefined : secrets[name])), undefined)
-  assert.equal(appCredentials(name => (name === APP_SECRET_SECRET ? '   ' : secrets[name])), undefined)
-  assert.equal(appCredentials(undefined), undefined)
+test('the app pair is one credential: it is the record\'s id and the saved secret, either half missing dials nothing (#1266)', () => {
+  const read = name => (name === APP_SECRET_SECRET ? 'app-secret-value' : undefined)
+  assert.deepEqual(appCredentials({ appId: 'cli_app_1' }, read), { appId: 'cli_app_1', appSecret: 'app-secret-value' })
+  // The id is not a secret: it lives in the connector record, so a missing record field is the half
+  // that is missing, without anything having to be saved on the Secrets page.
+  assert.equal(appCredentials({}, read), undefined)
+  assert.equal(appCredentials({ appId: '   ' }, read), undefined)
+  assert.equal(appCredentials({ appId: 'cli_app_1' }, () => '   '), undefined)
+  assert.equal(appCredentials({ appId: 'cli_app_1' }, () => undefined), undefined)
+  assert.equal(appCredentials(undefined, read), undefined)
 })
 
 test('the view never carries either half of the app pair (#1266)', async () => {
-  const secrets = { [APP_ID_SECRET]: 'cli_app_1', [APP_SECRET_SECRET]: 'app-secret-value' }
+  const secrets = { [APP_SECRET_SECRET]: 'app-secret-value' }
+  const app = { appId: 'cli_app_1' }
   const seen = []
   const transport = {
-    connect: async () => { throw new Error(`handshake refused for ${secrets[APP_ID_SECRET]} / ${secrets[APP_SECRET_SECRET]}`) },
+    connect: async () => { throw new Error(`handshake refused for ${app.appId} / ${secrets[APP_SECRET_SECRET]}`) },
   }
   const inbound = createInbound({
     enabled: true,
     ownerOpenId: OWNER,
     transport,
     deliver: async message => { seen.push(message) },
-    redact: text => String(text).split(secrets[APP_SECRET_SECRET]).join('[redacted]').split(secrets[APP_ID_SECRET]).join('[redacted]'),
+    redact: text => String(text).split(secrets[APP_SECRET_SECRET]).join('[redacted]').split(app.appId).join('[redacted]'),
   })
   await inbound.start()
   const view = JSON.stringify(inbound.view())
@@ -263,3 +267,42 @@ test('two copies of one event arriving together still start one turn (#1266)', a
   assert.deepEqual(results.sort(), ['delivered', 'duplicate'])
   assert.equal(turns.length, 1)
 })
+
+// #1266, the connector-row half: who may talk is the row's list (owner plus allowed senders), and a
+// refused sender is kept as one bounded line the row can offer Allow on.
+test('a sender the row allowed starts a turn; one it did not is refused (#1266)', async () => {
+  const turns = []
+  let allowed = ['ou_guest']
+  const inbound = createInbound({
+    enabled: true,
+    allowed: () => allowed.map(openId => ({ openId })),
+    transport: {},
+    deliver: async message => { turns.push(message) },
+  })
+  assert.equal(await inbound.handleEvent(event({ id: 'g1', openId: 'ou_guest' })), 'delivered')
+  allowed = []
+  assert.equal(await inbound.handleEvent(event({ id: 'g2', openId: 'ou_guest' })), 'refused')
+  assert.equal(turns.length, 1)
+})
+
+test('the refused list is one row per sender, bounded, and an allowed sender leaves it (#1266)', async () => {
+  let allowed = []
+  const inbound = createInbound({
+    enabled: true,
+    allowed: () => allowed,
+    transport: { nameOf: async openId => `Name ${openId}` },
+    deliver: async () => { throw new Error('nobody is allowed yet') },
+    now: () => Date.parse('2026-10-26T10:00:00Z'),
+  })
+  for (let n = 0; n < MAX_REFUSED + 5; n += 1) await inbound.handleEvent(event({ id: `r-${n}`, openId: `ou_${n}` }))
+  const refused = inbound.view().refusedSenders
+  assert.equal(refused.length, MAX_REFUSED, 'a stranger who writes many times cannot grow the row')
+  assert.equal(refused.at(-1).openId, `ou_${MAX_REFUSED + 4}`, 'the newest line is the one kept')
+  assert.equal(refused.at(-1).name, `Name ou_${MAX_REFUSED + 4}`)
+  assert.equal(refused.at(-1).at, '2026-10-26T10:00:00.000Z')
+  // One sender writing again is one line with a fresh time, not two lines.
+  await inbound.handleEvent(event({ id: 'again', openId: `ou_${MAX_REFUSED + 4}` }))
+  assert.equal(inbound.view().refusedSenders.length, MAX_REFUSED)
+  allowed = [`ou_${MAX_REFUSED + 4}`]
+  assert.ok(!inbound.view().refusedSenders.some(entry => entry.openId === `ou_${MAX_REFUSED + 4}`), 'allowing someone clears their line at once')
+})
diff --git a/patches/ds-bot/files/test/feishu.test.js b/patches/ds-bot/files/test/feishu.test.js
index 149f5322..c0662ce9 100644
--- a/patches/ds-bot/files/test/feishu.test.js
+++ b/patches/ds-bot/files/test/feishu.test.js
@@ -8,7 +8,7 @@ import { fileURLToPath } from 'node:url'
 import { runInNewContext } from 'node:vm'
 import { build } from 'esbuild'
 import { apply } from '../index.js'
-import { feishuPost } from '../src/host/connectors.js'
+import { FEISHU_MODES, feishuPost } from '../src/host/connectors.js'
 import { createNotifier } from '../src/host/notify.js'
 import { fakeContext } from './fake-ctx.js'
 
@@ -63,7 +63,10 @@ async function call(ctx, endpoint, payload) {
 const row = (view, id = 'feishu') => (view?.connectors ?? view ?? []).find(entry => entry.id === id)
 // #1266: the same row now carries the inbound state (off, no socket, app pair not saved). It is
 // spelled out here instead of spread, so a value leaking into the row cannot pass unnoticed.
-const INBOUND_OFF = { state: 'off', connected: 0, duplicates: 0, refused: 0, app: 'missing' }
+const INBOUND_OFF = { state: 'off', connected: 0, duplicates: 0, refused: 0, refusedSenders: [], app: 'missing' }
+// #1266: the sender row became a channel with two modes. Spelled out here, so a field leaking into
+// the row (or a mode arriving from nowhere) cannot pass unnoticed.
+const feishuRow = (state, mode = null) => ({ id: 'feishu', name: 'Feishu', state, kind: 'channel', account: null, mode, modes: FEISHU_MODES, allowed: [], inbound: INBOUND_OFF })
 const said = (warns, needle) => warns.filter(args => args.some(value => String(value).includes(needle)))
 
 // A fake Feishu that records each POST and answers from the script (the last answer repeats).
@@ -81,7 +84,7 @@ test('#1263: Feishu is a sender row of its own, off until a webhook is pasted',
   const { ctx, home } = setup()
   t.after(async () => { await ctx.dispose(); cleanHome(home) })
   const state = await call(ctx, 'state', {})
-  assert.deepEqual(row(state.value), { id: 'feishu', name: 'Feishu', state: 'off', kind: 'sender', account: null, inbound: INBOUND_OFF })
+  assert.deepEqual(row(state.value), feishuRow('off'))
   // A sender has no tools, so it is not a name a saved capability may take either way.
   assert.deepEqual(state.value.connectors.map(entry => entry.id), ['github', 'composio', 'feishu'])
 })
@@ -97,7 +100,7 @@ test('#1263: connecting posts one test message, turns ready, and keeps the webho
 
   const connected = await call(ctx, 'connector-connect', { id: 'feishu', token: ` ${webhook} ` })
   assert.equal(connected.ok, true, JSON.stringify(connected))
-  assert.deepEqual(row(connected.value), { id: 'feishu', name: 'Feishu', state: 'ready', kind: 'sender', account: null, inbound: INBOUND_OFF })
+  assert.deepEqual(row(connected.value), feishuRow('ready', 'webhook'))
 
   assert.equal(feishu.posts.length, 1, 'one test POST on connect')
   assert.equal(feishu.posts[0].url, webhook)
@@ -239,21 +242,46 @@ const renderRow = (connector, given = []) => {
   return tree
 }
 
-test('#1263: the Feishu row asks for a webhook URL and links to Feishu, not to GitHub', () => {
-  // form open, so the masked input and the link are drawn
-  const tree = renderRow({ id: 'feishu', name: 'Feishu', state: 'off', kind: 'sender', account: null }, [true, false, '', [], false, false, null])
+const FEISHU_OFF = { id: 'feishu', name: 'Feishu', state: 'off', kind: 'channel', account: null, mode: null, modes: FEISHU_MODES, allowed: [] }
+const FEISHU_APP = { ...FEISHU_OFF, state: 'ready', mode: 'app', allowed: [{ openId: 'ou_owner_1', name: 'Owner' }], inbound: { state: 'ready', refusedSenders: [{ openId: 'ou_stranger_1', name: 'Mallory', at: '2026-10-26T10:00:00.000Z' }] } }
+
+test('#1266: the Feishu row offers both ways to connect, and the webhook one links to Feishu', () => {
+  // form open, so the two mode buttons, the field and the link are drawn
+  const tree = renderRow(FEISHU_OFF, [true, false, '', [], false, false, null])
+  const buttons = all(tree).filter(node => node.type === 'button')
+  const modeButtons = buttons.filter(node => node.props['aria-pressed'] !== undefined && !node.props.className?.includes('bt-app-chip'))
+  assert.deepEqual(modeButtons.map(text), ['Custom bot webhook', 'App (long connection)'], 'one row, two modes, not a second Feishu row')
   const input = all(tree).find(node => node.type === 'input')
-  assert.equal(input.props['aria-label'], 'Feishu webhook URL')
+  assert.equal(input.props['aria-label'], 'Webhook URL', 'the webhook mode asks for its one credential')
   const link = all(tree).find(node => node.type === 'a')
-  assert.doesNotMatch(link.props.href, /github\.com/, 'the row must not send the owner to GitHub for a Feishu webhook')
+  assert.doesNotMatch(link.props.href, /github\.com/, 'the row must not send the owner to GitHub for Feishu')
   assert.match(link.props.href, /feishu/i)
   assert.doesNotMatch(text(tree), /GitHub token/)
 })
 
-test('#1263: a connected Feishu offers no per-Bot switch, because it has no tools', () => {
-  const tree = renderRow({ id: 'feishu', name: 'Feishu', state: 'ready', kind: 'sender', account: null })
-  const labels = all(tree).filter(node => node.type === 'button').map(text)
-  assert.ok(labels.includes('Disconnect'), labels.join('|'))
-  assert.ok(!labels.includes('Choose Bots'), 'a sender has no tools, so a per-Bot switch would do nothing')
-  assert.doesNotMatch(text(tree), /On for all \d+ Bots/)
+test('#1266: app mode asks for the App ID and the App Secret, and the App ID is not masked', () => {
+  const tree = renderRow({ ...FEISHU_OFF, mode: 'app' }, [true, false, '', [], false, false, null])
+  const inputs = all(tree).filter(node => node.type === 'input')
+  assert.deepEqual(inputs.map(node => node.props['aria-label']).filter(Boolean).slice(0, 3), ['App ID', 'App Secret'])
+  assert.equal(inputs[0].props.type, 'text', 'the App ID is kept in the record, so it is not a secret field')
+  assert.equal(all(tree).find(node => node.type === 'a').props.href.includes('app'), true, 'the link is how to create the app')
+})
+
+test('#1266: a webhook-only Feishu offers no per-Bot switch; the app mode does, with the guest list', () => {
+  const webhook = renderRow({ ...FEISHU_OFF, state: 'ready', mode: 'webhook' })
+  const webhookLabels = all(webhook).filter(node => node.type === 'button').map(text)
+  assert.ok(webhookLabels.includes('Disconnect'), webhookLabels.join('|'))
+  assert.ok(!webhookLabels.includes('Choose Bots'), 'a webhook is the phase-1 sender: a per-Bot switch would do nothing')
+  assert.doesNotMatch(text(webhook), /On for all \d+ Bots/)
+  assert.doesNotMatch(text(webhook), /Who may talk to the Bots/)
+
+  const app = renderRow(FEISHU_APP)
+  const appLabels = all(app).filter(node => node.type === 'button').map(text)
+  assert.ok(appLabels.includes('Choose Bots'), 'an app gives a Bot a way in, so the switch is real')
+  assert.match(text(app), /Off for every Bot|On for all \d+ Bots/, 'the row says which Bots may reach it')
+  assert.match(text(app), /Who may talk to the Bots/)
+  assert.match(text(app), /Owner/, 'who is allowed is on the row')
+  assert.match(text(app), /Mallory/, 'and who was turned away is there with Allow beside it')
+  assert.ok(appLabels.includes('Allow') && appLabels.includes('Block'))
+  assert.ok(!appLabels.includes('Send'), 'app mode answers by itself: there is no room to post into')
 })