Merge pull request #3274 from esokullu/main

Finalize quota card sharing reward pause and UI updates

Author: esokullu

CHANGELOG.md

@@ -10,6 +10,7 @@ This changelog was generated from the repository Git history and release tags. V
 - Settings → General → **Agent activity effect** chooses how a tab looks while WebBrain works on it: **Neural circuit**, the new default, where circuit traces grow in from the edges and signals run along them toward each element WebBrain acts on; **Aurora**, a soft purple band that drifts around the frame; **Scan**, corner brackets with a slow scanning beam; **Gears**, meshing cog trains turning in the corners; or **Classic glow**, the pulsing border used until now. Every style lets clicks, typing and scrolling through to the page, is hidden while WebBrain takes a screenshot, and holds still when your system asks to reduce motion. A new choice applies to a running task at once and is included in settings export and import. Chrome and Firefox.
 
 ### Changed
+- Settings → Advanced → **Vision mode** now carries a monochrome Tesla mark and is explained as "Tesla" mode: on, Act runs work from screenshots alone, like a Tesla driving on cameras; Off works more like Waymo and reads the page's accessibility tree too. The setting, its values and saved configurations are unchanged. Chrome and Firefox.
 - The agent cursor no longer disappears three seconds after an action. It now keeps one, smaller size: it glides from target to target, presses once with a ripple when WebBrain clicks, and between actions stays where it last acted, slowly fading in and out until the task ends. The ring around the target still fades after a moment. Chrome and Firefox.
 
 ## [44.0.0] - 2026-10-27

docs/compass-quota-rollout.md

@@ -5,7 +5,7 @@ Implementation spans `webbrain2` and sibling `webbrain-cloud`. The constructor d
 ## Release order
 
 1. **Backend compatibility first.** Back up the entire usage JSON while the service is stopped or while holding its store lock. Set `WEEKLY_FREE_USD=0.50` explicitly in the active backend environment for the approved transition while clients update. The constructor default also matches $0.50. Ship the additive usage fields, `/usage` (`/v1/usage` alias), promotion endpoints, persistent ledger, review CLI, and telemetry first. Older clients retain their existing Subscribe card until they update. Verify a free-quota 402 still includes the device-linked `subscribe_url`, and paid/payment-failure responses still point to the existing upgrade/account flows. Confirm the CLI and web workers resolve the same `USAGE_PATH`, and that all workers share the same filesystem lock.
-2. **Extension next.** Ship both Chrome and Firefox together. Check the reward and subscription choices, narrow panels, keyboard focus, claim submission/status, restored conversations, and a return from checkout. Confirm an automatic award leaves browser actions stopped until the explicit Continue/Retry button is selected. Confirm pending claims from older versions are automatically accepted when status is fetched, approved/redeemed devices have no offer to earn again, and existing payment recovery and Plus upgrades still work. Confirm the backend returns promotion state before enabling the new experience to users.
+2. **Extension next.** Ship both Chrome and Firefox together. While the sharing reward is paused (see below) the card has no reward choice, claim form or claim status, so the reward and claim checks in this step apply only when it is enabled. Check the reward and subscription choices, narrow panels, keyboard focus, claim submission/status, restored conversations, and a return from checkout. Confirm an automatic award leaves browser actions stopped until the explicit Continue/Retry button is selected. Confirm pending claims from older versions are automatically accepted when status is fetched, approved/redeemed devices have no offer to earn again, and existing payment recovery and Plus upgrades still work. Confirm the backend returns promotion state before enabling the new experience to users.
 3. **Verify the transition amount.** Check the actual web-worker/service/container environment as well as `.env`: exported variables take precedence over `.env`. Query `/usage` from the running service with `X-WebBrain-Device-Id`; both `base_weekly_allowance_usd` and `weekly_limit_usd` must be `0.50`, and `next_reset_at` must be the next Monday 00:00 UTC. Verify an exhausted free device's 402 reports the same amount and retains `subscribe_url`. Do not rely on the example file or a CLI process with a different environment. Keep the explicit $0.50 override while clients adopt the update. A later reduction to $0.375 requires a separate rollout decision after reviewing extension availability, adoption, and consumption; it is not activated automatically.
 4. **Observe for 14 full days at $0.50.** Record the UTC activation time, active amount, extension versions, and automatic reward behavior. Review the report daily and reassess the amount after two full UTC weeks. If recovery choices are unavailable or the allowance proves too small, restore the override to `0.75` while leaving the backend ledger and extension controls in place. A rollback must preserve lifetime awards and remaining balances.
 
@@ -17,11 +17,13 @@ Production storage must support POSIX directory `fsync`: verify file and parent-
 
 ## Sharing reward paused
 
-The extension hides the sharing reward: `SOCIAL_PROMOTION_ENABLED` in `src/*/src/ui/compass-quota.js` is `false`, because the offer invited abuse. The quota card then shows the weekly allowance (`quota.allowance`), the reset time, Subscribe, Refresh status and Continue/Retry. It never requests `/promotions/social`, shows no claim status, and a restored card that had its claim form open comes back without it. Credit a device already earned still appears as the reward balance, and the backend still spends it. The claim flow below is unchanged and still tested (`test/compass-quota-ui.mjs` mounts it with `socialPromotion: true`); setting the flag back to `true` in both builds restores it.
+The extension hides the sharing reward: `SOCIAL_PROMOTION_ENABLED` in `src/*/src/ui/compass-quota.js` is `false`, because the offer invited abuse. The quota card then shows the weekly allowance (`quota.allowance`), the reset time, Subscribe, Refresh status and Continue/Retry. It never requests `/promotions/social`, shows no claim status, and a restored card that had its claim form open comes back without it. Credit a device already earned still appears as the reward balance, and the backend still spends it. The claim flow below is unchanged and still tested (`test/compass-quota-ui.mjs` mounts it with `socialPromotion: true`); setting the flag back to `true` in both builds, and the expectation that pins it in `test/compass-quota.mjs`, restores it. While it is paused, Continue/Retry sends no `continuation_after_reward` event, and a balance that would print as $0.00 counts as none.
+
+The extension switch alone does not stop the reward. The backend still accepts `POST /promotions/social/claims` and awards $0.50 automatically for any syntactically valid post URL under any `X-WebBrain-Device-Id`, `/usage` still approves leftover pending claims, and extension versions released before this switch still show the offer. Pausing it for every client needs a server-side switch in webbrain-cloud: refuse new claims, stop automatic approval, and report `eligible: false` (older extension versions hide the share button then), while earned balances stay spendable.
 
 ## Automatic rewards
 
-A syntactically valid supported public post URL submitted to `/promotions/social/claims` immediately grants the one-time $0.50 reward under the usage-store lock. The response is already `approved`, with `eligible: false` and a $0.50 balance. The quota card offers sharing credit and a Compass subscription; it has no provider-switch choice.
+A syntactically valid supported public post URL submitted to `/promotions/social/claims` immediately grants the one-time $0.50 reward under the usage-store lock. The response is already `approved`, with `eligible: false` and a $0.50 balance. With the reward enabled, the quota card offers sharing credit and a Compass subscription; while it is paused it offers only the subscription. It has no provider-switch choice.
 
 Existing pending claims receive the same award on `/usage`, `/v1/usage`, `/promotions/social`, or a repeated submission. Drafts and rejected claims receive no credit until submitted. Ordinary usage reads still do not allocate claims or rewrite the ledger. Deploy this backend behavior before the extension copy.
 

docs/providers-and-models.md

@@ -16,7 +16,9 @@ decision switches. See [the settings guide](https://webbrain.one/docs/settings/#
 and [data flow](privacy-and-data-flow.md#decision-models-and-completion-verification)
 for setup and disclosure details. Existing `#multimodal` settings links still work.
 
-In the side panel's composer, the model menu is an engine icon. The dot on the
+In the side panel's composer, the model menu shows the selected provider's logo,
+the same as its row in the menu (Compass Max uses the Compass logo), and an
+engine icon while the logo loads or when the provider has none. The dot on the
 icon's corner shows the selected provider's latest connection check: green when
 it answered, red when it failed, amber while it runs. The dot is part of the
 menu button, so clicking it opens the menu, and the button's accessible

src/chrome/icons/providers/SOURCES.md

@@ -22,3 +22,9 @@ Most brand marks come from [Lobe Icons](https://github.com/lobehub/lobe-icons)
 | cheaperinference | Cheaper Inference logo mark (cheaperinference.com) |
 
 Brand trademarks remain property of their owners; used only for provider identification in the settings UI.
+
+## Other marks
+
+| Where | Source |
+|-------|--------|
+| Settings → Advanced → Vision mode (inline SVG in `src/ui/settings.html`) | [Simple Icons](https://simpleicons.org/) `tesla` path data (CC0). Tesla is a trademark of Tesla, Inc.; the mark only illustrates the "Tesla" mode analogy and implies no affiliation. |

src/chrome/src/agent/agent.js

@@ -1367,6 +1367,14 @@ export class Agent extends LoopDetector {
         }
         if (changes.askBeforeConsequentialActions) {
           this._permissionGateOffStored = changes.askBeforeConsequentialActions.newValue === false;
+          // Turning prompts on, from any writer (the composer switch, Settings,
+          // an imported configuration), also ends a "this session only" skip.
+          if (!this._permissionGateOffStored) {
+            this._permissionGateOffForSession = false;
+            void Promise.resolve()
+              .then(() => chrome.storage.session.remove(PERMISSION_GATE_SESSION_OFF_KEY))
+              .catch(() => {});
+          }
           this._skipPermissionGate = this._permissionGateOffStored || this._permissionGateOffForSession;
         }
         if (changes[COST_ALLOWANCE_SESSION_KEY]) {
@@ -8991,15 +8999,15 @@ export class Agent extends LoopDetector {
     const force = options?.force === true;
     if (this._gateSettingLoaded && !force) return this._skipPermissionGate;
     this._gateSettingLoaded = true;
-    try {
-      const o = await chrome.storage.local.get('askBeforeConsequentialActions');
-      this._permissionGateOffStored = o?.askBeforeConsequentialActions === false;
-    } catch { /* default: gate on */ }
-    try {
-      const o = await chrome.storage.session.get(PERMISSION_GATE_SESSION_OFF_KEY);
-      this._permissionGateOffForSession = o?.[PERMISSION_GATE_SESSION_OFF_KEY] === true;
-    } catch { /* default: gate on */ }
-    this._skipPermissionGate = this._permissionGateOffStored || this._permissionGateOffForSession;
+    // Both areas at once. A switch whose area cannot be read keeps its value,
+    // and with neither readable the gate stays as it is (on by default).
+    const [stored, session] = await Promise.all([
+      Promise.resolve().then(() => chrome.storage.local.get('askBeforeConsequentialActions')).then(o => o || {}, () => null),
+      Promise.resolve().then(() => chrome.storage.session.get(PERMISSION_GATE_SESSION_OFF_KEY)).then(o => o || {}, () => null),
+    ]);
+    if (stored) this._permissionGateOffStored = stored.askBeforeConsequentialActions === false;
+    if (session) this._permissionGateOffForSession = session[PERMISSION_GATE_SESSION_OFF_KEY] === true;
+    if (stored || session) this._skipPermissionGate = this._permissionGateOffStored || this._permissionGateOffForSession;
     return this._skipPermissionGate;
   }
 

src/chrome/src/ui/compass-quota.js

@@ -44,10 +44,11 @@ export function createQuotaController({ t, locale, request, openUrl, continueTas
     const balance = el('div', '', 'quota-balance');
     const reset = el('div', '', 'quota-reset');
     const actions = el('div', '', 'quota-choices');
-    const claimArea = el('div', '', 'quota-claim');
+    // The share button and claim form exist only while the reward is offered.
+    const claimArea = socialPromotion ? el('div', '', 'quota-claim') : null;
     const status = el('div', '', 'quota-status');
     status.setAttribute('role', 'status'); status.setAttribute('aria-live', 'polite');
-    const share = button(t('quota.get'), async () => {
+    const share = socialPromotion && button(t('quota.get'), async () => {
       host.dataset.claimOpen = 'true';
       try {
         if (social?.status === 'pending') { await inflight; await refresh(); return; }
@@ -58,22 +59,24 @@ export function createQuotaController({ t, locale, request, openUrl, continueTas
       } catch (error) { status.textContent = error.message; }
     }, 'quota-share');
     const subscribe = button(t('quota.subscribe'), () => { event('checkout_open'); openUrl(quota.subscribe_url); }, 'subscribe-btn');
-    actions.append(...(socialPromotion ? [share] : []), subscribe);
+    actions.append(...[share, subscribe].filter(Boolean));
     const resume = button(t(context.retry ? 'sp.retry' : 'sp.continue_btn'), () => {
-      if (social && !social.eligible) event('continuation_after_reward');
+      // Reward telemetry: a paused offer has no reward to continue after.
+      if (socialPromotion && social && !social.eligible) event('continuation_after_reward');
       continueTask(resume, context);
     }, 'subscribe-resume-btn');
     resume.dataset.resumeMode = context.mode || 'act';
     resume.dataset.resumeForeground = context.foreground ? 'true' : 'false';
     const refreshButton = button(t('quota.refresh'), () => refresh(), 'quota-refresh');
-    host.append(info, balance, reset, actions, claimArea, status, refreshButton, resume);
+    host.append(...[info, balance, reset, actions, claimArea, status, refreshButton, resume].filter(Boolean));
 
     function renderState() {
       if (cards.get(host)?.refresh !== refresh) return;
       const base = state.base_weekly_allowance_usd ?? state.weekly_limit_usd ?? state.daily_limit_usd;
       const credit = social?.remaining_credit_usd ?? state.promotional_balance_usd;
       // Credit a device already earned stays visible while the offer is paused.
-      balance.textContent = base == null ? '' : socialPromotion || Number(credit) > 0
+      // A remainder that formatQuotaUsd would print as $0.00 counts as none.
+      balance.textContent = base == null ? '' : socialPromotion || Math.round(Number(credit) * 1e6) > 0
         ? t('quota.balance', { base: formatQuotaUsd(base, locale()), credit: formatQuotaUsd(credit, locale()) })
         : t('quota.allowance', { base: formatQuotaUsd(base, locale()) });
       const date = new Date(state.next_reset_at || social?.next_reset_at || '');

src/chrome/src/ui/locales/ar.js

@@ -961,7 +961,7 @@ export default {
   "st.display.lean_mode.on": "تشغيل",
   "st.display.lean_mode.off": "إيقاف",
   "st.display.vision_mode.label": "الوضع المرئي",
-  "st.display.vision_mode.desc": "الرؤية فقط (aka \"Tesla\" mode)، مثل سيارة Tesla تقود بالكاميرات وحدها. عند الإيقاف يشبه Waymo أكثر، إذ يضيف حساسات أخرى: يقرأ الوكيل شجرة إمكانية الوصول أيضًا. في وضع التنفيذ يرى الوكيل الصفحة كلقطات شاشة وينقر ويكتب ويمرّر عند إحداثيات الشاشة بدلًا من قراءة شجرة إمكانية الوصول. يتطلب نموذجًا يقبل الصور؛ وتواصل النماذج الأخرى استخدام شجرة إمكانية الوصول. بعد كل إجراء يُرسَل الجزء المتغيّر من الشاشة فقط. تُعالَج شاشات Retina وتكبير المتصفح تلقائيًا.",
+  "st.display.vision_mode.desc": "الرؤية فقط (aka \"Tesla\" mode)، مثل سيارة Tesla تقود بالكاميرات وحدها. في وضع التنفيذ يرى الوكيل الصفحة كلقطات شاشة وينقر ويكتب ويمرّر عند إحداثيات الشاشة بدلًا من قراءة شجرة إمكانية الوصول. عند الإيقاف يشبه Waymo أكثر، إذ يضيف حساسات أخرى: يقرأ الوكيل شجرة إمكانية الوصول أيضًا. يتطلب نموذجًا يقبل الصور؛ وتواصل النماذج الأخرى استخدام شجرة إمكانية الوصول. بعد كل إجراء يُرسَل الجزء المتغيّر من الشاشة فقط. تُعالَج شاشات Retina وتكبير المتصفح تلقائيًا.",
   "st.display.vision_mode.auto": "تلقائي",
   "st.display.vision_mode.off": "إيقاف",
   "st.display.vision_quality.label": "حجم لقطات الوضع المرئي",