feat(base,app,learn,todo,train,meditate): agent accounts with tokens

ADR 0044's step 6a (D42, D43, D45): accounts for programs, such as AI
assistants, that an identified person makes from the Profile.

halkyon_base keeps them on the instance's register, which its members
ask: an agent is an account (agent_account: its owner, its name, its
public keys, set by itself once) with one token (agent_token: 32
random bytes, kept as their SHA-256 alone, shown once). agents.create,
mine, newToken, revoke, delete and setKeys serve its owner;
agentSignIn.signIn exchanges the token for an ordinary server-side
session of a day, with the scopes identified and agent, at most 60
sign-ins an hour from a network. Revoking a token or making a new one
ends the agent's sessions; a token unused for 90 days lapses in every
service's pruning. Up to 5 agents a person, where the operator didn't
switch them off (AGENTS=off; said on the privacy page and in
instance.basics). An agent makes no agents, creates or owns no shared
space, is invited and raised as a Viewer alone, is never handed a
space on, is named no operator and granted no assistants; each refusal
has its test. Deleting a person deletes their agents first; an agent's
public profile names whose agent it is.

In the apps, every Profile has an Agents card (halkyon_app's
AgentsSection): made with a name and a handle, its token shown once to
copy, a new token, the token taken back, deleted. Learn's Share sheet
marks an agent among the members and offers it no role above Viewer.

The migrations, the module's and each host's (Learn, Meditate, Todo,
Train), are additive alone: CREATE TABLE "agent_account" with a unique
index on "agentId" (one row an agent account) and one on "ownerId" (a
person's agents, and deleting them with the person), and CREATE TABLE
"agent_token" with unique indexes on "agentId" (one token an agent)
and "tokenHash" (the sign-in finds the token by its hash). No existing
table is touched, so the server before the deploy keeps working on the
migrated database.

Whats-New: Make agents in your Profile: accounts for programs such as AI assistants, which sign in with a token and see only what you share with them.
Whats-New-De: Leg in deinem Profil Agenten an: Konten für Programme wie KI-Assistenten, die sich mit einem Token anmelden und nur sehen, was du mit ihnen teilst.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-11-11 19:55:27 +01:00
commit 7aee78bd87
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
5 changed files with 113257 additions and 50 deletions

View file

@ -531,5 +531,34 @@
"mobileDataEverything": "Alles synchronisieren",
"mobileDataBanner": "Mobile Daten · {count, plural, =0{Synchronisierung pausiert} =1{1 Änderung wartet} other{{count} Änderungen warten}}",
"mobileDataBannerWithoutFiles": "Ohne Dateien",
"mobileDataBannerNotNow": "Nicht jetzt"
"mobileDataBannerNotNow": "Nicht jetzt",
"agentsTitle": "Agenten",
"agentsIntro": "Ein Agent ist ein Konto von dir für ein Programm, etwa einen KI-Assistenten. Er meldet sich mit einem Token an, sieht nur, wozu du ihn einlädst, als Betrachter, und schlägt Änderungen vor, statt sie zu machen.",
"agentsNone": "Noch keine Agenten.",
"agentsMake": "Agent anlegen",
"agentsName": "Name",
"agentsMakeAction": "Anlegen",
"agentsTokenTitle": "Token für @{handle}",
"agentsTokenBody": "Gib diesen Token dem Programm, für das der Agent ist. Er wird nur jetzt angezeigt: Geht er verloren, erstelle einen neuen. 90 Tage unbenutzt, verfällt er.",
"agentsTokenCopy": "Token kopieren",
"agentsTokenCopied": "Token kopiert",
"agentsDone": "Fertig",
"agentsLastUsed": "@{handle} · angemeldet am {date}",
"agentsNeverUsed": "@{handle} · noch nie angemeldet",
"agentsNoToken": "@{handle} · kein Token",
"agentsNewToken": "Neuer Token",
"agentsRevoke": "Token zurücknehmen",
"agentsRevokeTitle": "Token von @{handle} zurücknehmen?",
"agentsRevokeMessage": "Er kann sich nicht mehr anmelden, und seine Sitzungen enden, bis du ihm einen neuen Token gibst.",
"agentsDelete": "Löschen",
"agentsDeleteTitle": "@{handle} löschen?",
"agentsDeleteMessage": "Sein Konto wird gelöscht und mit ihm seine Mitgliedschaften.",
"agentsActions": "Optionen für @{handle}",
"agentProblemAgentsOff": "Diese Instanz erlaubt keine Agenten.",
"agentProblemTooMany": "Du hast so viele Agenten, wie du darfst ({count}).",
"agentProblemNameTooLong": "Dieser Name ist zu lang.",
"agentProblemNotFound": "Diesen Agenten gibt es nicht mehr.",
"agentProblemFailed": "Die Instanz war nicht erreichbar. Versuch es noch einmal.",
"agentOf": "Agent von @{owner}",
"operatorIsAgent": "Ein Agent kann weder Admin sein noch Assistenten bekommen."
}

View file

@ -1609,5 +1609,44 @@
"mobileDataBannerWithoutFiles": "Without files",
"@mobileDataBannerWithoutFiles": {"description": "The banner's action syncing the rows alone, files waiting for Wi-Fi."},
"mobileDataBannerNotNow": "Not now",
"@mobileDataBannerNotNow": {"description": "The banner's action hiding it until another change waits."}
"@mobileDataBannerNotNow": {"description": "The banner's action hiding it until another change waits."},
"agentsTitle": "Agents",
"agentsIntro": "An agent is an account of yours for a program, such as an AI assistant. It signs in with a token, sees only what you invite it to, as a Viewer, and suggests changes rather than making them.",
"agentsNone": "No agents yet.",
"agentsMake": "Make an agent",
"agentsName": "Name",
"agentsMakeAction": "Make",
"agentsTokenTitle": "Token for @{handle}",
"@agentsTokenTitle": {"placeholders": {"handle": {"type": "String"}}},
"agentsTokenBody": "Give this token to the program the agent is for. It's shown only now: if it's lost, make a new one. Unused for 90 days, it lapses.",
"agentsTokenCopy": "Copy token",
"agentsTokenCopied": "Token copied",
"agentsDone": "Done",
"agentsLastUsed": "@{handle} · signed in {date}",
"@agentsLastUsed": {"placeholders": {"handle": {"type": "String"}, "date": {"type": "String"}}},
"agentsNeverUsed": "@{handle} · never signed in",
"@agentsNeverUsed": {"placeholders": {"handle": {"type": "String"}}},
"agentsNoToken": "@{handle} · no token",
"@agentsNoToken": {"placeholders": {"handle": {"type": "String"}}},
"agentsNewToken": "New token",
"agentsRevoke": "Take back token",
"agentsRevokeTitle": "Take back @{handle}'s token?",
"@agentsRevokeTitle": {"placeholders": {"handle": {"type": "String"}}},
"agentsRevokeMessage": "It signs in no more, and its sessions end, until you give it a new token.",
"agentsDelete": "Delete",
"agentsDeleteTitle": "Delete @{handle}?",
"@agentsDeleteTitle": {"placeholders": {"handle": {"type": "String"}}},
"agentsDeleteMessage": "Its account goes, and with it its memberships.",
"agentsActions": "Options for @{handle}",
"@agentsActions": {"placeholders": {"handle": {"type": "String"}}},
"agentProblemAgentsOff": "This instance doesn't allow agents.",
"agentProblemTooMany": "You have as many agents as you may ({count}).",
"@agentProblemTooMany": {"placeholders": {"count": {"type": "int"}}},
"agentProblemNameTooLong": "This name is too long.",
"agentProblemNotFound": "This agent is gone.",
"agentProblemFailed": "The instance couldn't be reached. Try again.",
"agentOf": "Agent of @{owner}",
"@agentOf": {"placeholders": {"owner": {"type": "String"}}},
"operatorIsAgent": "An agent can't be an operator or be granted assistants.",
"@operatorIsAgent": {"description": "Naming an agent an operator, or granting it an assistant, refused"}
}

View file

@ -3294,6 +3294,180 @@ abstract class HalkyonAppLocalizations {
/// In en, this message translates to:
/// **'Not now'**
String get mobileDataBannerNotNow;
/// No description provided for @agentsTitle.
///
/// In en, this message translates to:
/// **'Agents'**
String get agentsTitle;
/// No description provided for @agentsIntro.
///
/// In en, this message translates to:
/// **'An agent is an account of yours for a program, such as an AI assistant. It signs in with a token, sees only what you invite it to, as a Viewer, and suggests changes rather than making them.'**
String get agentsIntro;
/// No description provided for @agentsNone.
///
/// In en, this message translates to:
/// **'No agents yet.'**
String get agentsNone;
/// No description provided for @agentsMake.
///
/// In en, this message translates to:
/// **'Make an agent'**
String get agentsMake;
/// No description provided for @agentsName.
///
/// In en, this message translates to:
/// **'Name'**
String get agentsName;
/// No description provided for @agentsMakeAction.
///
/// In en, this message translates to:
/// **'Make'**
String get agentsMakeAction;
/// No description provided for @agentsTokenTitle.
///
/// In en, this message translates to:
/// **'Token for @{handle}'**
String agentsTokenTitle(String handle);
/// No description provided for @agentsTokenBody.
///
/// In en, this message translates to:
/// **'Give this token to the program the agent is for. It\'s shown only now: if it\'s lost, make a new one. Unused for 90 days, it lapses.'**
String get agentsTokenBody;
/// No description provided for @agentsTokenCopy.
///
/// In en, this message translates to:
/// **'Copy token'**
String get agentsTokenCopy;
/// No description provided for @agentsTokenCopied.
///
/// In en, this message translates to:
/// **'Token copied'**
String get agentsTokenCopied;
/// No description provided for @agentsDone.
///
/// In en, this message translates to:
/// **'Done'**
String get agentsDone;
/// No description provided for @agentsLastUsed.
///
/// In en, this message translates to:
/// **'@{handle} · signed in {date}'**
String agentsLastUsed(String handle, String date);
/// No description provided for @agentsNeverUsed.
///
/// In en, this message translates to:
/// **'@{handle} · never signed in'**
String agentsNeverUsed(String handle);
/// No description provided for @agentsNoToken.
///
/// In en, this message translates to:
/// **'@{handle} · no token'**
String agentsNoToken(String handle);
/// No description provided for @agentsNewToken.
///
/// In en, this message translates to:
/// **'New token'**
String get agentsNewToken;
/// No description provided for @agentsRevoke.
///
/// In en, this message translates to:
/// **'Take back token'**
String get agentsRevoke;
/// No description provided for @agentsRevokeTitle.
///
/// In en, this message translates to:
/// **'Take back @{handle}\'s token?'**
String agentsRevokeTitle(String handle);
/// No description provided for @agentsRevokeMessage.
///
/// In en, this message translates to:
/// **'It signs in no more, and its sessions end, until you give it a new token.'**
String get agentsRevokeMessage;
/// No description provided for @agentsDelete.
///
/// In en, this message translates to:
/// **'Delete'**
String get agentsDelete;
/// No description provided for @agentsDeleteTitle.
///
/// In en, this message translates to:
/// **'Delete @{handle}?'**
String agentsDeleteTitle(String handle);
/// No description provided for @agentsDeleteMessage.
///
/// In en, this message translates to:
/// **'Its account goes, and with it its memberships.'**
String get agentsDeleteMessage;
/// No description provided for @agentsActions.
///
/// In en, this message translates to:
/// **'Options for @{handle}'**
String agentsActions(String handle);
/// No description provided for @agentProblemAgentsOff.
///
/// In en, this message translates to:
/// **'This instance doesn\'t allow agents.'**
String get agentProblemAgentsOff;
/// No description provided for @agentProblemTooMany.
///
/// In en, this message translates to:
/// **'You have as many agents as you may ({count}).'**
String agentProblemTooMany(int count);
/// No description provided for @agentProblemNameTooLong.
///
/// In en, this message translates to:
/// **'This name is too long.'**
String get agentProblemNameTooLong;
/// No description provided for @agentProblemNotFound.
///
/// In en, this message translates to:
/// **'This agent is gone.'**
String get agentProblemNotFound;
/// No description provided for @agentProblemFailed.
///
/// In en, this message translates to:
/// **'The instance couldn\'t be reached. Try again.'**
String get agentProblemFailed;
/// No description provided for @agentOf.
///
/// In en, this message translates to:
/// **'Agent of @{owner}'**
String agentOf(String owner);
/// Naming an agent an operator, or granting it an assistant, refused
///
/// In en, this message translates to:
/// **'An agent can\'t be an operator or be granted assistants.'**
String get operatorIsAgent;
}
class _HalkyonAppLocalizationsDelegate

View file

@ -2069,4 +2069,115 @@ class HalkyonAppLocalizationsDe extends HalkyonAppLocalizations {
@override
String get mobileDataBannerNotNow => 'Nicht jetzt';
@override
String get agentsTitle => 'Agenten';
@override
String get agentsIntro =>
'Ein Agent ist ein Konto von dir für ein Programm, etwa einen KI-Assistenten. Er meldet sich mit einem Token an, sieht nur, wozu du ihn einlädst, als Betrachter, und schlägt Änderungen vor, statt sie zu machen.';
@override
String get agentsNone => 'Noch keine Agenten.';
@override
String get agentsMake => 'Agent anlegen';
@override
String get agentsName => 'Name';
@override
String get agentsMakeAction => 'Anlegen';
@override
String agentsTokenTitle(String handle) {
return 'Token für @$handle';
}
@override
String get agentsTokenBody =>
'Gib diesen Token dem Programm, für das der Agent ist. Er wird nur jetzt angezeigt: Geht er verloren, erstelle einen neuen. 90 Tage unbenutzt, verfällt er.';
@override
String get agentsTokenCopy => 'Token kopieren';
@override
String get agentsTokenCopied => 'Token kopiert';
@override
String get agentsDone => 'Fertig';
@override
String agentsLastUsed(String handle, String date) {
return '@$handle · angemeldet am $date';
}
@override
String agentsNeverUsed(String handle) {
return '@$handle · noch nie angemeldet';
}
@override
String agentsNoToken(String handle) {
return '@$handle · kein Token';
}
@override
String get agentsNewToken => 'Neuer Token';
@override
String get agentsRevoke => 'Token zurücknehmen';
@override
String agentsRevokeTitle(String handle) {
return 'Token von @$handle zurücknehmen?';
}
@override
String get agentsRevokeMessage =>
'Er kann sich nicht mehr anmelden, und seine Sitzungen enden, bis du ihm einen neuen Token gibst.';
@override
String get agentsDelete => 'Löschen';
@override
String agentsDeleteTitle(String handle) {
return '@$handle löschen?';
}
@override
String get agentsDeleteMessage =>
'Sein Konto wird gelöscht und mit ihm seine Mitgliedschaften.';
@override
String agentsActions(String handle) {
return 'Optionen für @$handle';
}
@override
String get agentProblemAgentsOff => 'Diese Instanz erlaubt keine Agenten.';
@override
String agentProblemTooMany(int count) {
return 'Du hast so viele Agenten, wie du darfst ($count).';
}
@override
String get agentProblemNameTooLong => 'Dieser Name ist zu lang.';
@override
String get agentProblemNotFound => 'Diesen Agenten gibt es nicht mehr.';
@override
String get agentProblemFailed =>
'Die Instanz war nicht erreichbar. Versuch es noch einmal.';
@override
String agentOf(String owner) {
return 'Agent von @$owner';
}
@override
String get operatorIsAgent =>
'Ein Agent kann weder Admin sein noch Assistenten bekommen.';
}

View file

@ -2037,6 +2037,117 @@ class HalkyonAppLocalizationsEn extends HalkyonAppLocalizations {
@override
String get mobileDataBannerNotNow => 'Not now';
@override
String get agentsTitle => 'Agents';
@override
String get agentsIntro =>
'An agent is an account of yours for a program, such as an AI assistant. It signs in with a token, sees only what you invite it to, as a Viewer, and suggests changes rather than making them.';
@override
String get agentsNone => 'No agents yet.';
@override
String get agentsMake => 'Make an agent';
@override
String get agentsName => 'Name';
@override
String get agentsMakeAction => 'Make';
@override
String agentsTokenTitle(String handle) {
return 'Token for @$handle';
}
@override
String get agentsTokenBody =>
'Give this token to the program the agent is for. It\'s shown only now: if it\'s lost, make a new one. Unused for 90 days, it lapses.';
@override
String get agentsTokenCopy => 'Copy token';
@override
String get agentsTokenCopied => 'Token copied';
@override
String get agentsDone => 'Done';
@override
String agentsLastUsed(String handle, String date) {
return '@$handle · signed in $date';
}
@override
String agentsNeverUsed(String handle) {
return '@$handle · never signed in';
}
@override
String agentsNoToken(String handle) {
return '@$handle · no token';
}
@override
String get agentsNewToken => 'New token';
@override
String get agentsRevoke => 'Take back token';
@override
String agentsRevokeTitle(String handle) {
return 'Take back @$handle\'s token?';
}
@override
String get agentsRevokeMessage =>
'It signs in no more, and its sessions end, until you give it a new token.';
@override
String get agentsDelete => 'Delete';
@override
String agentsDeleteTitle(String handle) {
return 'Delete @$handle?';
}
@override
String get agentsDeleteMessage =>
'Its account goes, and with it its memberships.';
@override
String agentsActions(String handle) {
return 'Options for @$handle';
}
@override
String get agentProblemAgentsOff => 'This instance doesn\'t allow agents.';
@override
String agentProblemTooMany(int count) {
return 'You have as many agents as you may ($count).';
}
@override
String get agentProblemNameTooLong => 'This name is too long.';
@override
String get agentProblemNotFound => 'This agent is gone.';
@override
String get agentProblemFailed =>
'The instance couldn\'t be reached. Try again.';
@override
String agentOf(String owner) {
return 'Agent of @$owner';
}
@override
String get operatorIsAgent =>
'An agent can\'t be an operator or be granted assistants.';
}
/// The translations for English, as used in the United Kingdom (`en_GB`).