Release 0.1.66 [auto-version-bump]

AGENTS.md

@@ -10,3 +10,5 @@
 - Helm charts are published to `harbor.k3s.k0.nu/ai-spel`; Argo CD uses the existing `ai-spel` project and namespace.
 - Player-facing speech uses the local Piper WebAssembly adapter when the player has activated audio. The separate `ai-spel-static` Nginx service serves pinned Swedish Piper models and ONNX/Piper runtime files from same-origin `/static/piper-wasm-v1/` URLs with immutable caching. Game text is synthesized on-device and must never be sent to a TTS provider.
 - This pipeline bundles only the Piper worker/client glue. Model/runtime downloads, image builds, and deployment belong to `ai-spel/ai-spel-static` and the existing `large` runner. Never build or run these assets locally.
+- Browser local AI loads its client adapter, Wllama runtime, WebAssembly, Gemma model, manifest, YAML prompt, and license resources only from the same-origin `/static/wllama-gemma3-v1/` path owned by `ai-spel/ai-spel-static`. Do not add browser CDN, npm, or model-hub fallbacks. The player must be shown and accept applicable model terms before the model downloads or runs. Acceptance, model failure, or local-AI opt-out must never block play. Incompatible asset changes require a new immutable static path and a coordinated frontend release.
+- Local model output is advisory only. Preserve the original player input, send local hints only as untrusted context to Rust, and label offline replies as unsaved. Local diagnostic logging is opt-in, browser-local, exportable/deletable, and expires after 30 days.

README.md

@@ -6,6 +6,8 @@ After login, character creation and play use one dialogue history and one text i
 
 During play the UI has no persistent location, task, inventory, economy, status, or purchase panels. The player asks for information or writes an action in the same input. Rust validates state changes; the AI can only propose a typed intent. A direct request to travel may establish a new place and an encounter when Rust commits that movement.
 
+The dialogue also offers **Gör om senaste** and **Torrkör senaste**. Both resend the latest player action while leaving the previous dialogue turn out of the AI conversation context. “Gör om” processes a fresh, normal turn. “Torrkör” calls the narrator, generates and validates a temporary Luau rule when needed, and evaluates either that temporary rule or an approved stored rule. It rolls back the complete game transaction and does not save the player turn, AI trace, generated rule, event, ownership, or world progress. The reply identifies which rule was evaluated and marks a temporary rule as such.
+
 If the player asks to find or approach someone and no NPC is present, the direct dialogue scene may propose one person and an opening line. Rust creates that NPC only for the explicit request and commits the first exchange idempotently; a later turn continues the saved conversation. Clear requests about the current location are answered from its saved facts without asking the player to restate what they want to inspect.
 
 The separate `/admin` route provides an authenticated operations view for player search/profile/trace, YAML prompt assets, generated Luau rules with validation results, runtime debug logging, and the append-only audit log. All privileged data comes from the Rust `/api/admin/...` API; the browser never connects directly to PostgreSQL. Backend endpoints require `accounts.is_admin=true`. The Driftloggar view lets an administrator switch `debug=true` on or off without restarting pods; the setting is stored in PostgreSQL and propagated to running replicas. Verbose pod logs include request, AI-call, validation, and commit metadata but never raw player text, prompts, model responses, sessions, or secrets. Full protected prompt/provider exchanges remain in the audited player trace.

VERSION

@@ -1 +1 @@
-0.1.62
+0.1.66

deploy/helm/ai-spel-frontend/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: ai-spel-frontend
 description: Static web frontend for the Swedish life simulator
 type: application
-version: 0.1.62
-appVersion: "0.1.62"
+version: 0.1.66
+appVersion: "0.1.66"

index.html

@@ -17,6 +17,7 @@
     #dialogue li { margin-block: 1rem; white-space: pre-wrap; overflow-wrap: anywhere; }
     #dialogue li[data-role="user"] { font-weight: 650; }
     #dialogue li[data-role="assistant"] { padding-inline-start: .75rem; border-inline-start: .2rem solid currentColor; }
+    #dialogue li[data-role="system"] { padding-inline-start: .75rem; border-inline-start: .2rem dashed currentColor; font-size: .92em; }
     #message { width: 100%; min-height: 3.5rem; box-sizing: border-box; }
     #message-tools { display: flex; flex-wrap: wrap; align-items: center; gap: .5rem; }
     #voice-status { min-height: 1.5em; }
@@ -38,6 +39,16 @@
     #debug-trace details { border: 1px solid currentColor; border-radius: .3rem; padding: .5rem; }
     #debug-trace summary { cursor: pointer; overflow-wrap: anywhere; }
     #debug-trace pre { white-space: pre-wrap; overflow-wrap: anywhere; font: .8rem/1.45 ui-monospace, monospace; }
+    .trace-chain { display: grid; gap: .65rem; margin-block: .75rem; }
+    .trace-step { border: 1px solid currentColor; border-inline-start: .35rem solid currentColor; border-radius: .3rem; padding: .65rem; }
+    .trace-step[data-engine="player"] { border-inline-start-color: #64748b; }
+    .trace-step[data-engine="ai"] { border-inline-start-color: #2563eb; }
+    .trace-step[data-engine="luau"] { border-inline-start-color: #9333ea; }
+    .trace-step[data-engine="rust"] { border-inline-start-color: #c2410c; }
+    .trace-step h3 { font-size: 1rem; margin: 0 0 .5rem; }
+    .trace-step .trace-engine { font-weight: 750; }
+    .trace-step pre { margin: .25rem 0 .75rem; }
+    .trace-raw { margin-block-start: .75rem; }
     @media (max-width: 800px) {
       body.debug-layout { height: auto; overflow: auto; }
       #play-layout.debug-enabled { grid-template-columns: minmax(0, 1fr); height: auto; }
@@ -70,7 +81,7 @@
       <form id="message-form">
         <label for="message" id="message-label">Skriv ett meddelande</label>
         <textarea id="message" name="message" maxlength="4000" aria-describedby="message-help" autocomplete="off"></textarea>
-        <div id="message-tools"><button type="submit" id="send-message">Skicka</button> <button type="button" id="microphone" aria-pressed="false" aria-describedby="voice-status">Starta mikrofon</button></div>
+        <div id="message-tools"><button type="submit" id="send-message">Skicka</button> <button type="button" id="microphone" aria-pressed="false" aria-describedby="voice-status">Starta mikrofon</button> <button type="button" id="redo-action" disabled>Gör om senaste</button> <button type="button" id="dry-run-action" disabled>Torrkör senaste</button></div>
         <span id="message-help" class="sr-only">Tryck på Skicka eller Enter för att skicka. Tryck Skift och Enter för ny rad.</span>
       </form>
       <p id="voice-status" role="status" aria-live="polite"></p>
@@ -82,7 +93,7 @@
     </section>
     <aside id="debug-panel" aria-labelledby="debug-heading" hidden>
       <h2 id="debug-heading">Beslutsspårning</h2>
-      <p>Administratörsvy för ditt eget spelkonto. Promptar, modelltrafik, regelresultat och Rust-commit visas från revisionsloggad API-data. Hemligheter och credentials ska vara maskerade av servern.</p>
+      <p>Administratörsvy för ditt eget spelkonto. Varje steg visar sparad indata och utdata i kedjan: spelare (grå), AI (blå), Luau (lila) och Rust (orange). Promptar, modelltrafik, regelresultat och commit visas från revisionsloggad API-data. Hemligheter och credentials maskeras av servern.</p>
       <button type="button" id="debug-refresh">Uppdatera spår</button>
       <p id="debug-status" role="status" aria-live="polite">Hämtar spårning…</p>
       <div id="debug-trace" aria-label="Kronologiskt beslutsspår"></div>
@@ -105,6 +116,7 @@
   <footer id="version-footer">Frontend <span id="frontend-version">__FRONTEND_VERSION__</span> · Statik <span id="static-version">hämtar version…</span> · API <span id="api-version">hämtar version…</span></footer>
   <script src="/piper-runtime.js?v=__FRONTEND_VERSION__"></script>
   <script src="/voice.js?v=__FRONTEND_VERSION__"></script>
+  <script src="/static/wllama-gemma3-v1/local-ai.js"></script>
   <script>
     const auth = document.querySelector('#auth');
     const play = document.querySelector('#play');
@@ -126,6 +138,7 @@
     let submitBusy = false;
     let pendingDialogue = null;
     let latestAssistantText = '';
+    let latestPlayerAction = '';
     let latestAssistantVoice = {role: 'narrator', voiceIdentity: 'neutral'};
     let speechRecoveryElement = null;
     const voiceSettingsKey = 'ai-spel.voice-settings.v2';
@@ -150,6 +163,7 @@
       line.dataset.role = role;
       line.textContent = `${options.speaker || (role === 'user' ? 'Du' : 'Berättelsen')}: ${content}`;
       transcript.append(line);
+      if (role === 'user' || role === 'assistant') window.localGameAI?.record({type: 'dialogue', role, content});
       line.scrollIntoView({block: 'end'});
       if (role === 'assistant') {
         latestAssistantText = content;
@@ -194,6 +208,28 @@
       const authVoiceStatus = document.querySelector('#auth-voice-status');
       if (authVoiceStatus && !auth.hidden && message) authVoiceStatus.textContent = message;
     }
+    window.addEventListener('local-ai-status', event => {
+      if (!currentAccount || currentAccount.is_admin || play.hidden) return;
+      let statusLine = transcript.querySelector('li[data-local-ai-status]');
+      if (!statusLine) {
+        const detail = typeof event.detail === 'string' ? {text: event.detail} : event.detail;
+        statusLine = appendLine(detail.type === 'terms-required' ? 'assistant' : 'system', detail.text || '', {speaker: 'Lokal AI', speak: detail.type === 'terms-required'});
+        statusLine.dataset.localAiStatus = 'true';
+      }
+      const detail = typeof event.detail === 'string' ? {text: event.detail} : event.detail;
+      statusLine.replaceChildren(document.createTextNode(`Lokal AI: ${detail.text || ''}`));
+      if (detail.type === 'terms-required') {
+        statusLine.append(document.createTextNode(' Läs dokumenten: '));
+        for (const [label, url] of [['Spelvillkor för Gemma', detail.user_terms], ['Gemma-villkor', detail.terms], ['policy för förbjuden användning', detail.policy], ['modellinformation', detail.notice]]) {
+          if (!url) continue;
+          const link = document.createElement('a');
+          link.href = url; link.target = '_blank'; link.rel = 'noopener noreferrer';
+          link.textContent = label;
+          statusLine.append(link, document.createTextNode('. '));
+        }
+        statusLine.append(document.createElement('br'), document.createTextNode(detail.command || ''));
+      }
+    });
     function updateSpeechProgress(message = '') {
       const container = document.querySelector('#speech-progress-container');
       const progress = document.querySelector('#speech-progress');
@@ -439,6 +475,7 @@
           : next === 'world-draft'
             ? 'Ändra startförslaget eller skriv “godkänn”'
             : 'Skriv vad du vill göra eller fråga';
+      refreshActionTools();
       messageField.focus();
     }
     function showAuth() {
@@ -673,7 +710,9 @@
       const lines = await request('/api/dialogue');
       transcript.replaceChildren();
       latestAssistantText = '';
-      for (const line of lines) appendLine(line.role === 'user' ? 'user' : 'assistant', line.content, {speak: false});
+      latestPlayerAction = [...lines].reverse().find(line => line.role === 'user')?.content || '';
+      for (const line of lines) appendLine(line.role === 'user' ? 'user' : line.role === 'system' ? 'system' : 'assistant', line.content, {speaker: line.speaker, speak: false});
+      refreshActionTools();
       if (lines.length > 0 && latestAssistantText && location.pathname !== '/admin') {
         voiceController?.speak(latestAssistantText, {role: 'narrator', voiceIdentity: 'neutral'});
       } else if (lines.length === 0 && gameState?.world) {
@@ -685,6 +724,7 @@
       currentAccount = await request('/api/me');
       gameState = await request('/api/world');
       showPlay();
+      if (!currentAccount.is_admin) window.localGameAI?.start(currentAccount.id);
       if (!gameState.character) {
         transcript.replaceChildren();
         appendInitialPrompt();
@@ -707,7 +747,7 @@
     }
 
     function traceTimestamp(record) {
-      return record.recorded_at || record.requested_at || record.completed_at || '';
+      return record.recorded_at || record.requested_at || record.completed_at || record.created_at || '';
     }
     function renderDecisionTrace(data) {
       const groups = new Map();
@@ -736,9 +776,91 @@
         const eventNames = group.events.map(event => `${event.event_type} (${event.commit_status || 'okänt utfall'})`).join(', ');
         const prompts = group.ai_interactions.map(interaction => `${interaction.prompt_id} v${interaction.prompt_version}: ${interaction.outcome}`).join(', ');
         summary.textContent = `${group.latest || 'Tid saknas'} · ${group.correlation_id}${eventNames ? ` · Rust: ${eventNames}` : ''}${prompts ? ` · AI: ${prompts}` : ''}`;
+        const chain = document.createElement('div');
+        chain.className = 'trace-chain';
+        const addStep = (engine, title, input, output, note = '') => {
+          const card = document.createElement('article');
+          card.className = 'trace-step';
+          card.dataset.engine = engine;
+          const heading = document.createElement('h3');
+          const label = document.createElement('span');
+          label.className = 'trace-engine';
+          label.textContent = `${engine === 'luau' ? 'Luau' : engine === 'ai' ? 'AI' : engine === 'rust' ? 'Rust' : 'Spelare'} · `;
+          heading.append(label, document.createTextNode(title));
+          card.append(heading);
+          if (note) {
+            const noteElement = document.createElement('p');
+            noteElement.textContent = note;
+            card.append(noteElement);
+          }
+          const addValue = (name, value) => {
+            const valueHeading = document.createElement('strong');
+            valueHeading.textContent = name;
+            const pre = document.createElement('pre');
+            pre.textContent = typeof value === 'string' ? value : JSON.stringify(value ?? 'Ingen uppgift sparad', null, 2);
+            card.append(valueHeading, pre);
+          };
+          addValue('Indata', input);
+          addValue('Utdata', output);
+          chain.append(card);
+        };
+
+        const orderedEvents = [...group.events].sort((a, b) => traceTimestamp(a).localeCompare(traceTimestamp(b)));
+        const orderedInteractions = [...group.ai_interactions].sort((a, b) => traceTimestamp(a).localeCompare(traceTimestamp(b)));
+        const playerMessages = [
+          ...orderedEvents.map(event => event.payload?.player_message).filter(Boolean),
+          ...group.player_messages.map(message => message.message).filter(Boolean),
+        ];
+        for (const [index, message] of playerMessages.entries()) {
+          addStep('player', `Spelarens avsikt ${playerMessages.length > 1 ? index + 1 : ''}`, message, {submitted: true});
+        }
+
+        for (const interaction of orderedInteractions) {
+          const external = interaction.external_call || {};
+          const isCompaction = interaction.prompt_id === 'dialogue-context-compaction';
+          addStep('ai', `${isCompaction ? 'Kontextkomprimering' : interaction.prompt_id} · v${interaction.prompt_version} · ${interaction.outcome}`,
+            {prompt_yaml: interaction.prompt_yaml, rendered_messages: interaction.rendered_messages, provider: external.service, model: external.model, thinking_effort: external.thinking_effort, provider_request: external.request},
+            {response: interaction.response, outcome: interaction.outcome, provider_status: external.response_status, provider_response: external.response_body, provider_error: external.error, duration_ms: external.duration_ms, rust_interpretation_and_validation: interaction.metadata},
+            isCompaction
+              ? 'Äldre privat dialog kondenseras; kontrollera källhändelser, prompt, modellsvar, sammanfattningshash och sparad sekvens. Sammanfattningen är inte kanonisk världssanning.'
+              : 'AI-förslag och providertrafik. Förslaget är inte i sig ett fastställt världsfaktum.');
+          const metadata = interaction.metadata || {};
+          if (metadata.validation_inputs || metadata.validation_results || metadata.decision?.includes?.('rule')) {
+            addStep('luau', `Regelutkast och tester · ${metadata.rule_key || metadata.activity_key || interaction.prompt_id}`,
+              {rule_draft: interaction.response, test_inputs: metadata.validation_inputs},
+              {decision: metadata.decision || interaction.outcome, test_results: metadata.validation_results, source_hash: metadata.source_hash, rule_id: metadata.rule_id, rule_version: metadata.rule_version},
+              'Luau körs med isolerade testindata; resultatet kontrolleras av Rust innan regeln aktiveras.');
+          }
+        }
+
+        for (const event of orderedEvents) {
+          const payload = event.payload || {};
+          const domain = payload.details || {};
+          const luau = domain.luau_trace;
+          if (luau) {
+            addStep('luau', `Regelkörning · ${domain.activity_key || domain.rule_id || 'regel'}`,
+              {source: event.rule_source || 'Källkod saknas i denna spårpost.', invocation: luau.input},
+              luau.error ? {error: luau.error, output: luau.output} : luau.output,
+              `Regel ${domain.rule_id || 'okänd'} version ${domain.rule_version ?? 'okänd'} · hash ${domain.rule_hash || 'saknas'}`);
+            addStep('rust', 'Effektvalidering och världskommando',
+              {proposed_effects: domain.rust_validation?.input_effects || luau.output, activity: domain.activity_key, world_version_before: luau.input?.snapshot?.version},
+              {validation: domain.rust_validation, committed_event: event.event_type, commit_status: event.commit_status, commit_sequence: event.commit_sequence, world_time: event.world_time, committed_details: domain},
+              'Rust verifierar typade effekter och skriver den godkända förändringen atomärt.');
+          } else {
+            addStep('rust', `Domänbeslut och commit · ${event.event_type}`,
+              {player_intent: payload.player_message, interpreted_intent: payload.intent, details: domain, world_version: payload.world_version},
+              {commit_status: event.commit_status, commit_sequence: event.commit_sequence, world_time: event.world_time, event_id: event.event_id},
+              'Rust fastställer om handlingen kan committas till den kanoniska världen.');
+          }
+        }
+        const raw = document.createElement('details');
+        raw.className = 'trace-raw';
+        const rawSummary = document.createElement('summary');
+        rawSummary.textContent = 'Visa all rå spårdata';
         const pre = document.createElement('pre');
         pre.textContent = JSON.stringify(group, null, 2);
-        details.append(summary, pre);
+        raw.append(rawSummary, pre);
+        details.append(summary, chain, raw);
         debugTrace.append(details);
       }
     }
@@ -769,6 +891,7 @@
       presenceTimer = null;
       playerMessagesPrimed = false;
       seenPlayerMessageIds.clear();
+      window.localGameAI?.stop();
       await request('/api/logout', {method: 'POST'});
       if (location.pathname !== '/admin') appendLine('assistant', 'Du har loggat ut. Logga in igen för att fortsätta spela.');
       characterDraft = null;
@@ -815,7 +938,18 @@
       messageField.disabled = false;
       messageField.focus();
     }
-    async function handleGameMessage(message) {
+    function refreshActionTools() {
+      const enabled = stage === 'game' && Boolean(latestPlayerAction) && !submitBusy;
+      document.querySelector('#redo-action').disabled = !enabled;
+      document.querySelector('#dry-run-action').disabled = !enabled;
+    }
+    async function handleGameMessage(message, actionMode = 'normal') {
+      if (actionMode === 'normal' && /^lokal ai(?:\s|$)/i.test(message.trim())) {
+        const response = await window.localGameAI?.settings(message);
+        appendLine('user', message);
+        appendLine('assistant', response || 'Kommandon: “lokal ai villkor”, “lokal ai godkänn villkor”, “lokal ai avvisa villkor”, “lokal ai på/av”, “lokal ai loggar på/av”, “lokal ai exportera loggar” och “lokal ai radera loggar”.');
+        return;
+      }
       if (/^logga ut[.!]?$/i.test(message.trim())) {
         appendLine('user', message);
         await handleLogout();
@@ -835,21 +969,35 @@
         else await proposeWorld(message);
         return;
       }
-      if (await handlePlayerMessageCommand(message)) return;
-      const idempotencyKey = pendingDialogue?.message === message
+      if (actionMode === 'normal' && await handlePlayerMessageCommand(message)) return;
+      if (actionMode === 'normal') latestPlayerAction = message;
+      const idempotencyKey = actionMode === 'normal' && pendingDialogue?.message === message
         ? pendingDialogue.idempotencyKey
         : crypto.randomUUID();
-      pendingDialogue = {message, idempotencyKey};
-      appendLine('user', message);
+      if (actionMode === 'normal') pendingDialogue = {message, idempotencyKey};
+      appendLine('user', message, actionMode === 'dry_run' ? {speaker: 'Torrkörning'} : actionMode === 'redo' ? {speaker: 'Gör om'} : {});
       messageField.disabled = true;
       try {
+        let clientAssistance = null;
+        if (actionMode === 'normal' && currentAccount && !currentAccount.is_admin && window.localGameAI) {
+          try {
+            const history = [...transcript.querySelectorAll('li')].map(line => line.textContent).filter(Boolean);
+            const assisted = await window.localGameAI.assist(message, history, gameState?.world || {});
+            clientAssistance = {
+              intent_hint: String(assisted.intent_hint || '').slice(0, 500),
+              warning: String(assisted.warning || '').slice(0, 500),
+              excerpts: Array.isArray(assisted.excerpts) ? assisted.excerpts.filter(item => typeof item === 'string' && item.length <= 500 && history.some(line => line.includes(item))).slice(0, 3) : [],
+            };
+            if (clientAssistance.warning) appendLine('system', `Lokal textkontroll: ${clientAssistance.warning}`, {speaker: 'Lokal AI', speak: false});
+          } catch (_) { /* Local assistance is optional; the original input always proceeds. */ }
+        }
         let result;
         for (let attempt = 0; attempt < 2; attempt += 1) {
           try {
             result = await request('/api/dialogue', {
               method: 'POST',
               headers: {'content-type': 'application/json'},
-              body: JSON.stringify({message, expected_world_version: gameState.world.version, idempotency_key: idempotencyKey}),
+              body: JSON.stringify({message, expected_world_version: gameState.world.version, idempotency_key: idempotencyKey, forget_previous_turn: actionMode !== 'normal', dry_run: actionMode === 'dry_run', client_assistance: clientAssistance}),
             });
             break;
           } catch (error) {
@@ -858,22 +1006,38 @@
             if (!gameState.world) throw new Error('world_not_available');
           }
         }
+        if (result.status !== 'dry_run') {
           gameState.world.version = result.world_version;
           gameState.world.world_time = result.world_time;
           pendingDialogue = null;
-        if (result.intent === 'move' || result.intent === 'meet') {
+        }
+        if (result.status !== 'dry_run' && (result.intent === 'move' || result.intent === 'meet')) {
           try {
             const refreshed = await request('/api/world');
             if (refreshed.world) gameState = refreshed;
           } catch (_) { /* The committed dialogue stays successful if this optional view refresh fails. */ }
         }
-        const speakingNpc = ['speak', 'meet'].includes(result.intent) ? gameState.world.npc : null;
-        appendLine('assistant', result.reply, speakingNpc
+        const speakingNpc = result.status !== 'dry_run' && ['speak', 'meet'].includes(result.intent) ? gameState.world.npc : null;
+        for (const ruleName of result.debug_rules_created || []) {
+          appendLine('assistant', ruleName, {speaker: 'Nya regler', speak: false});
+        }
+        appendLine('assistant', result.reply, result.status === 'dry_run'
+          ? {speaker: 'Torrkörning', voice: {role: 'narrator', voiceIdentity: 'neutral'}}
+          : speakingNpc
           ? {speaker: speakingNpc.name, voice: {characterId: speakingNpc.id, voiceIdentity: speakingNpc.voice_identity}}
-          : {speaker: 'Berättelsen', voice: {role: 'narrator', voiceIdentity: 'neutral'}});
+          : {speaker: 'Berättaren', voice: {role: 'narrator', voiceIdentity: 'neutral'}});
+        if (result.context_compaction?.notice) {
+          appendLine('system', result.context_compaction.notice, {speaker: 'Kontext', speak: false});
+        }
+        refreshActionTools();
       } catch (error) {
         messageField.value = message;
-        appendLine('assistant', `${explainDialogueError(error)} Ditt meddelande ligger kvar i inmatningen.`);
+        try {
+          const history = [...transcript.querySelectorAll('li')].map(line => line.textContent).filter(Boolean);
+          const localReply = await window.localGameAI?.offline(message, history, gameState?.world || {});
+          if (localReply) appendLine('assistant', `Lokalt, osparat förslag: ${localReply}`, {speaker: 'Lokal hjälp'});
+          else appendLine('assistant', `${explainDialogueError(error)} Ditt meddelande ligger kvar i inmatningen.`);
+        } catch (_) { appendLine('assistant', `${explainDialogueError(error)} Ditt meddelande ligger kvar i inmatningen.`); }
       }
       messageField.disabled = false;
       messageField.focus();
@@ -895,11 +1059,11 @@
         if (location.pathname !== '/admin') voiceController.speak(status.textContent, {role: 'narrator', voiceIdentity: 'neutral'});
       }
     });
-    async function submitMessage(input, source = 'text') {
+    async function submitMessage(input, source = 'text', actionMode = 'normal') {
       if (submitBusy || messageField.disabled) return;
       const message = String(input || '').trim();
       if (!message) return;
-      if (handleVoiceCommand(message, source)) { messageField.value = ''; return; }
+      if (actionMode === 'normal' && handleVoiceCommand(message, source)) { messageField.value = ''; return; }
       submitBusy = true;
       refreshMicrophone();
       voiceController.stopListening();
@@ -911,11 +1075,12 @@
       messageField.value = '';
       try {
         if (stage === 'biography') await handleBiography(message);
-        else await handleGameMessage(message);
+        else await handleGameMessage(message, actionMode);
       } catch (error) {
         appendLine('assistant', `Det gick inte att genomföra begäran: ${error.message}`);
       } finally {
         submitBusy = false;
+        refreshActionTools();
         refreshMicrophone();
         if (currentAccount?.is_admin) await refreshDecisionTrace();
         if (!play.hidden && !messageField.disabled) messageField.focus();
@@ -1006,6 +1171,12 @@
       event.preventDefault();
       await submitMessage(messageField.value);
     });
+    document.querySelector('#redo-action').addEventListener('click', () => {
+      if (latestPlayerAction) submitMessage(latestPlayerAction, 'button', 'redo');
+    });
+    document.querySelector('#dry-run-action').addEventListener('click', () => {
+      if (latestPlayerAction) submitMessage(latestPlayerAction, 'button', 'dry_run');
+    });
     document.querySelectorAll('[data-admin-view]').forEach(button => button.addEventListener('click', async () => {
       adminContent.setAttribute('aria-busy', 'true');
       try {

piper-worker.js

@@ -18,6 +18,8 @@ self.fetch = async (resource, options) => {
   const requestedUrl = resource instanceof Request ? resource.url : String(resource);
   const localModelUrl = localPiperModelUrl(requestedUrl, self.location.origin);
   if (!localModelUrl) {
+    const requestUrl = new URL(requestedUrl, self.location.origin);
+    if (requestUrl.origin !== self.location.origin) throw new Error(`External Piper asset blocked: ${requestUrl.origin}`);
     const runtimeAsset = requestedUrl.includes('/static/piper-wasm-v1/onnx/');
     const runtimeFile = runtimeAsset ? new URL(requestedUrl, self.location.origin).pathname.split('/').pop() : undefined;
     if (activeRequestId && runtimeAsset) {

scripts/check-frontend.sh

@@ -5,6 +5,7 @@ test -s index.html
 grep -q '<html lang="sv">' index.html
 grep -q 'id="frontend-version">__FRONTEND_VERSION__' index.html
 grep -q '<script src="/voice.js?v=__FRONTEND_VERSION__"></script>' index.html
+grep -q '<script src="/static/wllama-gemma3-v1/local-ai.js"></script>' index.html
 grep -q '<script src="/piper-runtime.js?v=__FRONTEND_VERSION__"></script>' index.html
 grep -q 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0' nginx/default.conf
 grep -q 'Cross-Origin-Embedder-Policy "require-corp"' nginx/default.conf
@@ -46,6 +47,12 @@ grep -q 'WebKit versions before Safari 27' voice.js
 grep -q "voiceIdentity: speakingNpc.voice_identity" index.html
 grep -q "role: 'narrator', voiceIdentity: 'neutral'" index.html
 grep -q 'COPY voice.js /usr/share/nginx/html/voice.js' Dockerfile
+grep -Fq 'localGameAI?.start(currentAccount.id)' index.html
+grep -q "type === 'terms-required'" index.html
+grep -q 'Gemma-villkor' index.html
+grep -q 'lokal ai godkänn villkor' index.html
+grep -q 'lokal ai avvisa villkor' index.html
+grep -q 'client_assistance: clientAssistance' index.html
 grep -q 'COPY public/piper-runtime.js /usr/share/nginx/html/piper-runtime.js' Dockerfile
 grep -q 'COPY public/tts/piper-wasm-v1/' Dockerfile
 grep -q 'build:piper' .gitea/workflows/publish.yaml
@@ -55,6 +62,7 @@ grep -q "new Worker(workerUrl, {type: 'module'})" piper-runtime.js
 grep -q 'worker.js?v=' piper-runtime.js
 grep -q 'worker.onmessageerror' piper-runtime.js
 grep -q 'localPiperModelUrl' piper-worker.js
+grep -q 'External Piper asset blocked' piper-worker.js
 grep -q 'trackDownloadProgress' piper-worker.js
 grep -q 'new ReadableStream' piper-download-progress.mjs
 grep -q 'createOnnxWasmPaths(self.location.origin)' piper-worker.js

tests/local-ai-integration.test.cjs

@@ -0,0 +1,28 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const test = require('node:test');
+
+const page = fs.readFileSync(path.join(__dirname, '..', 'index.html'), 'utf8');
+
+test('local AI adapter comes from the static service and starts after authenticated game entry', () => {
+  assert.match(page, /<script src="\/static\/wllama-gemma3-v1\/local-ai\.js"><\/script>/);
+  assert.match(page, /showPlay\(\);\s*if \(!currentAccount\.is_admin\) window\.localGameAI\?\.start\(currentAccount\.id\)/);
+});
+
+test('Gemma license links are shown in the accessible game dialogue and consent can be withdrawn', () => {
+  assert.match(page, /type === 'terms-required'/);
+  assert.match(page, /Gemma-villkor/);
+  assert.match(page, /Spelvillkor för Gemma/);
+  assert.match(page, /policy för förbjuden användning/);
+  assert.match(page, /lokal ai godkänn villkor/);
+  assert.match(page, /lokal ai avvisa villkor/);
+  assert.match(page, /window\.localGameAI\?\.stop\(\)/);
+});
+
+test('local assistance remains advisory and preserves the normal dialogue request path', () => {
+  assert.match(page, /client_assistance: clientAssistance/);
+  assert.match(page, /Local assistance is optional; the original input always proceeds/);
+  assert.match(page, /request\('\/api\/dialogue'/);
+  assert.match(page, /Lokalt, osparat förslag:/);
+});