Release 0.1.70 [auto-version-bump]

AGENTS.md

@@ -10,3 +10,5 @@
 - Helm charts are published to `harbor.k3s.k0.nu/ai-spel`; Argo CD uses the existing `ai-spel` project and namespace.
 - Player-facing speech uses the local Piper WebAssembly adapter when the player has activated audio. The separate `ai-spel-static` Nginx service serves pinned Swedish Piper models and ONNX/Piper runtime files from same-origin `/static/piper-wasm-v1/` URLs with immutable caching. Game text is synthesized on-device and must never be sent to a TTS provider.
 - This pipeline bundles only the Piper worker/client glue. Model/runtime downloads, image builds, and deployment belong to `ai-spel/ai-spel-static` and the existing `large` runner. Never build or run these assets locally.
+- Browser local AI is paused by default behind `FEATURE_FLAGS.localAI` in `index.html`. When disabled, do not load its adapter or any Wllama/WebAssembly/Gemma assets. If it is deliberately enabled in a later change, it must load the adapter, runtime, model, manifest, YAML prompt, and license resources only from the same-origin `/static/wllama-gemma3-v2/` path owned by `ai-spel/ai-spel-static`. Do not add browser CDN, npm, or model-hub fallbacks. The player must be shown and accept applicable model terms before the model downloads or runs. Acceptance, model failure, or local-AI opt-out must never block play. Incompatible asset changes require a new immutable static path and a coordinated frontend release.
+- Local model output is advisory only. Preserve the original player input, send local hints only as untrusted context to Rust, and label offline replies as unsaved. Local diagnostic logging is opt-in, browser-local, exportable/deletable, and expires after 30 days.

README.md

@@ -6,11 +6,11 @@ After login, character creation and play use one dialogue history and one text i
 
 During play the UI has no persistent location, task, inventory, economy, status, or purchase panels. The player asks for information or writes an action in the same input. Rust validates state changes; the AI can only propose a typed intent. A direct request to travel may establish a new place and an encounter when Rust commits that movement.
 
-The dialogue also offers **Gör om senaste** and **Torrkör senaste**. Both resend the latest player action while leaving the previous dialogue turn out of the AI conversation context. “Gör om” processes a fresh, normal turn. “Torrkör” calls the narrator and evaluates already-approved stored Luau rules, then rolls back the complete game transaction; it does not save the player turn, AI trace, rule, event, ownership, or world progress. A rule that would need to be newly generated is reported as not evaluated, because a dry run never stores newly generated rules.
+The dialogue also offers **Gör om senaste** and **Torrkör senaste**. Both resend the latest player action while leaving the previous dialogue turn out of the AI conversation context. “Gör om” processes a fresh, normal turn. “Torrkör” calls the narrator, generates and validates a temporary Luau rule when needed, and evaluates either that temporary rule or an approved stored rule. It rolls back the complete game transaction and does not save the player turn, AI trace, generated rule, event, ownership, or world progress. The reply identifies which rule was evaluated and marks a temporary rule as such.
 
 If the player asks to find or approach someone and no NPC is present, the direct dialogue scene may propose one person and an opening line. Rust creates that NPC only for the explicit request and commits the first exchange idempotently; a later turn continues the saved conversation. Clear requests about the current location are answered from its saved facts without asking the player to restate what they want to inspect.
 
-The separate `/admin` route provides an authenticated operations view for player search/profile/trace, YAML prompt assets, generated Luau rules with validation results, runtime debug logging, and the append-only audit log. All privileged data comes from the Rust `/api/admin/...` API; the browser never connects directly to PostgreSQL. Backend endpoints require `accounts.is_admin=true`. The Driftloggar view lets an administrator switch `debug=true` on or off without restarting pods; the setting is stored in PostgreSQL and propagated to running replicas. Verbose pod logs include request, AI-call, validation, and commit metadata but never raw player text, prompts, model responses, sessions, or secrets. Full protected prompt/provider exchanges remain in the audited player trace.
+The separate `/admin` route provides an authenticated operations view for player search/profile/trace, NPC selection and editing, YAML prompt assets, generated Luau rules with validation results, runtime debug logging, and the append-only audit log. NPC editing covers identity and voice, typed profile fields plus future JSON properties, existing memory reconstructions, and owned items. The UI displays current position and commitments for context. Every NPC read and write goes through Rust, checks `accounts.is_admin=true`, validates domain limits, and writes an audit record in the same transaction as each mutation; the browser never connects directly to PostgreSQL. Profile and memory writes use expected-current values to detect stale edits. The Driftloggar view lets an administrator switch `debug=true` on or off without restarting pods; the setting is stored in PostgreSQL and propagated to running replicas. Verbose pod logs include request, AI-call, validation, and commit metadata but never raw player text, prompts, model responses, sessions, or secrets. Full protected prompt/provider exchanges remain in the audited player trace.
 
 The game is text- and dialogue-based and uses no images. Place descriptions include sound, smell, air/temperature, touch/surface, and spatial-orientation cues. Visible details may also be described in words, but are never required to understand the scene or play. The transcript is screen-reader announced. A clearly labeled **Skicka** button beside the microphone submits typed text; Enter also submits while Shift+Enter inserts a newline. Typed text, speech transcriptions, and the send button all use the same submission flow.
 
@@ -39,3 +39,6 @@ CI needs repository Action secrets named `HARBOR_USERNAME` and `HARBOR_PASSWORD`
 The first Argo Application is described in `deploy/argocd/application.yaml`. The backend ingress routes `/api`, `/version`, and health checks to Rust while serving the static client at `/`. Both services share the same origin so the session cookie remains same-origin.
 
 Builds, checks, and runtime verification happen in the pipeline and Kubernetes. Do not run the app, tests, container images, or binaries locally.
+# Browser-local AI status
+
+Gemma/Wllama assistance is currently paused. `FEATURE_FLAGS.localAI` in `index.html` is `false`; while disabled, the client does not load the adapter, download model/runtime assets, run local inference, or send local hints. Re-enabling it requires an explicit code change and the normal frontend release pipeline. This does not affect the regular Rust-backed dialogue flow.

VERSION

@@ -1 +1 @@
-0.1.64
+0.1.70

deploy/helm/ai-spel-frontend/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: ai-spel-frontend
 description: Static web frontend for the Swedish life simulator
 type: application
-version: 0.1.64
+version: 0.1.70
-appVersion: "0.1.64"
+appVersion: "0.1.70"

docs/adr/0004-pause-browser-local-ai.md

@@ -0,0 +1,19 @@
+# ADR 0004: Pause browser-local AI by default
+
+## Status
+
+Accepted
+
+## Decision
+
+Browser-local Gemma/Wllama assistance is disabled by the `FEATURE_FLAGS.localAI` flag in `index.html`. The adapter is loaded dynamically only when the flag is true. When it is false, the browser does not load the adapter, request model/runtime assets, initialize local inference, attach local hints to dialogue requests, or produce local offline replies. The normal text dialogue remains available through the Rust API.
+
+## Rationale
+
+Pause model execution while the rest of the game and narrator experience is stabilized. Keep the implementation available for a deliberate future reactivation without downloading model resources or sending local inference hints in the meantime.
+
+## Consequences
+
+- Re-enabling local AI requires an explicit code change and frontend release.
+- Tests and the static frontend check must enforce the default-off behavior and lazy loading.
+- Existing Gemma asset publication and documentation may remain in place; the browser does not request those assets while the flag is off.

index.html

@@ -17,6 +17,7 @@
     #dialogue li { margin-block: 1rem; white-space: pre-wrap; overflow-wrap: anywhere; }
     #dialogue li[data-role="user"] { font-weight: 650; }
     #dialogue li[data-role="assistant"] { padding-inline-start: .75rem; border-inline-start: .2rem solid currentColor; }
+    #dialogue li[data-role="system"] { padding-inline-start: .75rem; border-inline-start: .2rem dashed currentColor; font-size: .92em; }
     #message { width: 100%; min-height: 3.5rem; box-sizing: border-box; }
     #message-tools { display: flex; flex-wrap: wrap; align-items: center; gap: .5rem; }
     #voice-status { min-height: 1.5em; }
@@ -26,6 +27,7 @@
     #dialogue li[data-role="voice-controls"] fieldset { display: grid; gap: .5rem; margin-block: .5rem; }
     #admin-content { display: grid; gap: 1rem; }
     #admin-content section, #admin-content article { border: 1px solid currentColor; border-radius: .35rem; padding: .75rem; }
+    #admin-content article > button { display: block; max-width: 100%; margin-block: .5rem; text-align: start; white-space: normal; }
     #admin-content pre { white-space: pre-wrap; overflow-wrap: anywhere; max-height: 32rem; overflow: auto; }
     #admin-toolbar { display: flex; flex-wrap: wrap; gap: .5rem; margin-block: 1rem; }
     #player-search { display: flex; flex-wrap: wrap; align-items: end; gap: .5rem; }
@@ -103,6 +105,7 @@
       <p>Privilegierad läsning loggas. Känsligt spelarinnehåll visas bara här för administratörer.</p>
       <nav id="admin-toolbar" aria-label="Administrationsvyer">
         <button type="button" data-admin-view="players">Spelare</button>
+        <button type="button" data-admin-view="npcs">NPC:er</button>
         <button type="button" data-admin-view="prompts">Prompter</button>
         <button type="button" data-admin-view="rules">Luau-regler</button>
         <button type="button" data-admin-view="logging">Driftloggar</button>
@@ -116,6 +119,24 @@
   <script src="/piper-runtime.js?v=__FRONTEND_VERSION__"></script>
   <script src="/voice.js?v=__FRONTEND_VERSION__"></script>
   <script>
+    // Local Gemma/Wllama assistance is paused until explicitly re-enabled here.
+    // Keep the adapter unloaded when false so it cannot download or initialize.
+    const FEATURE_FLAGS = Object.freeze({localAI: false});
+    let localAiAdapterPromise = null;
+    function loadLocalAiAdapter() {
+      if (!FEATURE_FLAGS.localAI) return Promise.resolve(null);
+      if (window.localGameAI) return Promise.resolve(window.localGameAI);
+      if (!localAiAdapterPromise) {
+        localAiAdapterPromise = new Promise((resolve) => {
+          const script = document.createElement('script');
+          script.src = '/static/' + 'wllama-gemma3-v2/local-ai.js';
+          script.onload = () => resolve(window.localGameAI || null);
+          script.onerror = () => resolve(null);
+          document.head.append(script);
+        });
+      }
+      return localAiAdapterPromise;
+    }
     const auth = document.querySelector('#auth');
     const play = document.querySelector('#play');
     const playLayout = document.querySelector('#play-layout');
@@ -146,6 +167,7 @@
     let voiceDisclosureAcknowledged = false;
     let adminOffset = 0;
     const adminPageSize = 50;
+    let adminTraceOffset = 0;
     let presenceTimer = null;
     let playerMessagesPrimed = false;
     const seenPlayerMessageIds = new Set();
@@ -161,6 +183,7 @@
       line.dataset.role = role;
       line.textContent = `${options.speaker || (role === 'user' ? 'Du' : 'Berättelsen')}: ${content}`;
       transcript.append(line);
+      if (FEATURE_FLAGS.localAI && (role === 'user' || role === 'assistant')) window.localGameAI?.record({type: 'dialogue', role, content});
       line.scrollIntoView({block: 'end'});
       if (role === 'assistant') {
         latestAssistantText = content;
@@ -171,6 +194,24 @@
       }
       return line;
     }
+    let activityStatusLine = null;
+    function setActivityStatus(message) {
+      if (!message) return;
+      if (!activityStatusLine?.isConnected) {
+        activityStatusLine = document.createElement('li');
+        activityStatusLine.dataset.role = 'system';
+        activityStatusLine.dataset.activityStatus = 'true';
+        activityStatusLine.setAttribute('role', 'status');
+        activityStatusLine.setAttribute('aria-live', 'polite');
+        transcript.append(activityStatusLine);
+      }
+      activityStatusLine.textContent = `Berättelsen: ${message}`;
+      activityStatusLine.scrollIntoView({block: 'end'});
+    }
+    function clearActivityStatus() {
+      activityStatusLine?.remove();
+      activityStatusLine = null;
+    }
     function biographyContextText(context) {
       if (!context || typeof context !== 'object') return '';
       const details = [];
@@ -205,6 +246,32 @@
       const authVoiceStatus = document.querySelector('#auth-voice-status');
       if (authVoiceStatus && !auth.hidden && message) authVoiceStatus.textContent = message;
     }
+    window.addEventListener('local-ai-status', event => {
+      if (!FEATURE_FLAGS.localAI || !currentAccount || currentAccount.is_admin || play.hidden) return;
+      const detail = typeof event.detail === 'string' ? {text: event.detail} : event.detail;
+      const statusAttribute = detail.type === 'activity' ? 'data-local-ai-activity' : 'data-local-ai-status';
+      let statusLine = transcript.querySelector(`li[${statusAttribute}]`);
+      if (!statusLine) {
+        statusLine = appendLine(detail.type === 'terms-required' ? 'assistant' : 'system', detail.text || '', {
+          speaker: 'Lokal AI', speak: detail.type === 'terms-required',
+        });
+        statusLine.setAttribute(statusAttribute, 'true');
+        statusLine.setAttribute('role', 'status');
+        statusLine.setAttribute('aria-live', 'polite');
+      }
+      statusLine.replaceChildren(document.createTextNode(`Lokal AI: ${detail.text || ''}`));
+      if (detail.type === 'terms-required') {
+        statusLine.append(document.createTextNode(' Läs dokumenten: '));
+        for (const [label, url] of [['Spelvillkor för Gemma', detail.user_terms], ['Gemma-villkor', detail.terms], ['policy för förbjuden användning', detail.policy], ['modellinformation', detail.notice]]) {
+          if (!url) continue;
+          const link = document.createElement('a');
+          link.href = url; link.target = '_blank'; link.rel = 'noopener noreferrer';
+          link.textContent = label;
+          statusLine.append(link, document.createTextNode('. '));
+        }
+        statusLine.append(document.createElement('br'), document.createTextNode(detail.command || ''));
+      }
+    });
     function updateSpeechProgress(message = '') {
       const container = document.querySelector('#speech-progress-container');
       const progress = document.querySelector('#speech-progress');
@@ -550,6 +617,22 @@
       search.addEventListener('submit', event => { event.preventDefault(); loadAdminPlayers(field.value, 0); });
       const result = await request(`/api/admin/players?q=${encodeURIComponent(query)}&limit=${adminPageSize}&offset=${offset}`);
       adminElement('p', `${result.total} spelare. Visar ${result.offset + 1}–${Math.min(result.total, result.offset + result.players.length)}.`, adminContent);
+      if (result.players.length > 0) {
+        const chooser = adminElement('form');
+        const chooserLabel = adminElement('label', 'Välj konto att följa', chooser);
+        const chooserSelect = document.createElement('select');
+        chooserSelect.required = true;
+        for (const player of result.players) {
+          const option = document.createElement('option');
+          option.value = player.account_id;
+          option.textContent = `${player.username} · ${player.character_name || 'ingen karaktär'}`;
+          chooserSelect.append(option);
+        }
+        chooserLabel.append(chooserSelect);
+        const chooserButton = adminElement('button', 'Visa konto och konversationer', chooser);
+        chooserButton.type = 'submit';
+        chooser.addEventListener('submit', event => { event.preventDefault(); openAdminPlayer(chooserSelect.value); });
+      }
       const list = adminElement('ul');
       for (const player of result.players) {
         const item = adminElement('li', undefined, list);
@@ -568,23 +651,231 @@
       adminElement('h2', 'Spelarprofil');
       const profile = await request(`/api/admin/players/${encodeURIComponent(accountId)}`);
       adminJson(`${profile.username} · profil och biografi`, profile);
-      const trace = await request(`/api/admin/players/${encodeURIComponent(accountId)}/trace?limit=200`);
+      adminTraceOffset = 0;
-      const entries = [
+      const trace = await request(`/api/admin/players/${encodeURIComponent(accountId)}/trace?limit=200&offset=0`);
-        ...trace.events.map(event => ({kind: 'Världshändelse', at: event.recorded_at, order: event.commit_sequence, data: event})),
+      renderAdminConversations(trace, accountId);
-        ...trace.player_messages.map(message => ({kind: 'Privat spelarmeddelande', at: message.recorded_at, order: message.sequence, data: message})),
+    }
-        ...trace.ai_interactions.map(interaction => ({kind: `AI ${interaction.prompt_id} · ${interaction.outcome}`, at: interaction.requested_at, order: interaction.correlation_id, data: interaction}))
+    function renderAdminConversations(trace, accountId, existingRoot, hasMoreOverride) {
-      ].sort((a, b) => String(a.at).localeCompare(String(b.at)));
+      const root = existingRoot || adminElement('section');
-      adminElement('h2', 'Kronologiskt spelarspår');
+      root.replaceChildren();
-      adminElement('p', 'Registreringstid visas separat från världstid och commitordning. AI-frågor, svar och världshändelser är korrelerade där korrelations-ID finns.');
+      const groups = new Map();
-      for (const [index, entry] of entries.entries()) {
+      const groupFor = (correlationId, at) => {
-        const status = entry.data.execution_mode || entry.data.metadata?.decision || entry.data.outcome || 'status okänd';
+        const key = correlationId || `unlinked:${at || groups.size}`;
-        adminJson(`${index + 1}. ${entry.kind} · ${status} · ${entry.at} · ${entry.order}`, entry.data);
+        if (!groups.has(key)) groups.set(key, {correlationId, events: [], messages: [], interactions: [], at});
-        if (entry.data.external_call && Object.keys(entry.data.external_call).length > 0) {
+        return groups.get(key);
-          const call = entry.data.external_call;
+      };
-          const outcome = call.error || `HTTP ${call.response_status ?? 'okänt'}`;
+      for (const event of trace.events || []) groupFor(event.correlation_id, event.recorded_at).events.push(event);
-          adminJson(`Externt tjänsteanrop · ${call.service || 'okänd tjänst'} · ${outcome} · ${call.duration_ms ?? '?'} ms`, call);
+      for (const message of trace.player_messages || []) groupFor(message.correlation_id, message.recorded_at).messages.push(message);
+      for (const interaction of trace.ai_interactions || []) groupFor(interaction.correlation_id, interaction.requested_at).interactions.push(interaction);
+      const conversations = [...groups.values()].sort((a, b) => String(a.at).localeCompare(String(b.at)));
+      adminElement('h2', 'Samtal och beslut', root);
+      adminElement('p', `Visar ${conversations.length} korrelerade samtalsturer från den här sidan. Välj en berättarreplik eller ett AI-svar för att öppna hela registrerade beslutskedjan. Registreringstid, världstid och commitordning visas var för sig.`, root);
+      if (conversations.length === 0) { adminElement('p', 'Det finns inga sparade dialogturer för kontot ännu.', root); return; }
+      for (const [index, group] of conversations.entries()) {
+        group.events.sort((a, b) => (a.commit_sequence ?? 0) - (b.commit_sequence ?? 0));
+        group.messages.sort((a, b) => (a.sequence ?? 0) - (b.sequence ?? 0));
+        group.interactions.sort((a, b) => String(a.requested_at).localeCompare(String(b.requested_at)));
+        const card = adminElement('article', undefined, root);
+        adminElement('h3', `Tur ${index + 1} · ${group.at || 'tid saknas'} · ${group.correlationId || 'utan korrelations-ID'}`, card);
+        let showedPlayerInput = false;
+        for (const event of group.events) {
+          const payload = event.payload || {};
+          if (payload.player_message) { adminElement('p', `Spelaren: ${payload.player_message}`, card); showedPlayerInput = true; }
+          const reply = payload.reply || payload.npc_reply;
+          if (reply) {
+            const button = adminElement('button', `Berättaren${payload.npc_reply ? ' / NPC' : ''}: ${reply}`, card);
+            button.type = 'button';
+            button.setAttribute('aria-expanded', 'false');
+            const detail = adminElement('section', undefined, card); detail.hidden = true;
+            button.addEventListener('click', () => {
+              detail.hidden = !detail.hidden;
+              button.setAttribute('aria-expanded', String(!detail.hidden));
+              if (!detail.hidden && !detail.dataset.loaded) {
+                renderDecisionProvenance(group, event, detail);
+                detail.dataset.loaded = 'true';
+              }
+            });
           }
         }
+        if (!showedPlayerInput) {
+          const failedTurnInput = [...group.interactions].reverse().map(latestPlayerText).find(Boolean);
+          if (failedTurnInput) adminElement('p', `Spelaren: ${failedTurnInput}`, card);
+        }
+        for (const message of group.messages) adminElement('p', `Spelarmeddelande: ${message.message}`, card);
+        for (const interaction of group.interactions) {
+          if (!interaction.response) continue;
+          const button = adminElement('button', `AI-svar · ${interaction.prompt_id} · ${interaction.outcome}: ${interaction.response}`, card);
+          button.type = 'button'; button.setAttribute('aria-expanded', 'false');
+          const detail = adminElement('section', undefined, card); detail.hidden = true;
+          button.addEventListener('click', () => {
+            detail.hidden = !detail.hidden; button.setAttribute('aria-expanded', String(!detail.hidden));
+            if (!detail.hidden && !detail.dataset.loaded) { renderDecisionProvenance(group, null, detail, interaction); detail.dataset.loaded = 'true'; }
+          });
+        }
+        if (group.events.length === 0 && group.interactions.every(item => !item.response)) {
+          adminElement('p', 'Ingen färdig replik. Öppna turens tekniska spår:', card);
+          for (const interaction of group.interactions) adminJson(`${interaction.prompt_id} · ${interaction.outcome}`, interaction, card);
+        }
+      }
+      const pageHasMore = hasMoreOverride ?? trace.has_more ?? (Math.max(trace.events?.length || 0, trace.ai_interactions?.length || 0, trace.player_messages?.length || 0) >= (trace.limit || 200));
+      if (pageHasMore) {
+        const older = adminElement('button', 'Visa äldre samtalsturer', root);
+        older.type = 'button';
+        older.addEventListener('click', async () => {
+          older.disabled = true;
+          older.textContent = 'Hämtar äldre samtal…';
+          adminTraceOffset += trace.limit || 200;
+          const next = await request(`/api/admin/players/${encodeURIComponent(accountId)}/trace?limit=${trace.limit || 200}&offset=${adminTraceOffset}`);
+          const merge = (key, idKey) => [...(trace[key] || []), ...(next[key] || [])].filter((item, index, all) => all.findIndex(candidate => candidate[idKey] === item[idKey]) === index);
+          renderAdminConversations({events: merge('events', 'event_id'), ai_interactions: merge('ai_interactions', 'id'), player_messages: merge('player_messages', 'id'), limit: next.limit, offset: next.offset}, accountId, root, next.has_more);
+        });
+      }
+    }
+    function latestPlayerText(interaction) {
+      const messages = interaction.rendered_messages;
+      if (!Array.isArray(messages)) return '';
+      const userMessage = [...messages].reverse().find(message => message?.role === 'user');
+      if (!userMessage) return '';
+      if (typeof userMessage.content === 'string') return userMessage.content;
+      return userMessage.content == null ? '' : JSON.stringify(userMessage.content);
+    }
+    function renderDecisionProvenance(group, selectedEvent, container, selectedInteraction) {
+      adminElement('h4', 'Beslutsspår', container);
+      if (group.correlationId) adminElement('p', `Korrelations-ID: ${group.correlationId}`, container);
+      const interactions = selectedInteraction ? [selectedInteraction] : group.interactions;
+      for (const interaction of interactions) {
+        const ai = adminElement('section', undefined, container);
+        ai.className = 'trace-step'; ai.dataset.engine = 'ai';
+        adminElement('h5', `AI · ${interaction.prompt_id} v${interaction.prompt_version} · ${interaction.outcome}`, ai);
+        adminJson('YAML-prompt och renderad kontext', {prompt_yaml: interaction.prompt_yaml, rendered_messages: interaction.rendered_messages}, ai);
+        adminJson('Externt tjänsteanrop · förfrågan, svar och metadata', {external_call: interaction.external_call, response: interaction.response, outcome: interaction.outcome, metadata: interaction.metadata}, ai);
+      }
+      const events = selectedEvent ? [selectedEvent] : group.events;
+      for (const event of events) {
+        const payload = event.payload || {};
+        const details = payload.details || {};
+        const luau = details.luau_trace || payload.luau_trace;
+        const rust = details.rust_validation || payload.rust_validation;
+        if (luau) { const step = adminElement('section', undefined, container); step.className = 'trace-step'; step.dataset.engine = 'luau'; adminJson('Luau · regelindata och effektförslag', luau, step); }
+        if (rust) { const step = adminElement('section', undefined, container); step.className = 'trace-step'; step.dataset.engine = 'rust'; adminJson('Rust · validering och commit', rust, step); }
+        const commit = adminElement('section', undefined, container); commit.className = 'trace-step'; commit.dataset.engine = 'rust';
+        adminJson(`Rust · ${event.commit_status || 'händelse'} · världstid ${event.world_time ?? 'okänd'} · commit ${event.commit_sequence ?? 'saknas'}`, event, commit);
+      }
+      if (!interactions.length && !events.length) adminElement('p', 'Beslutsspår saknas för denna post.', container);
+    }
+    async function loadAdminNpcs(query = '', offset = 0) {
+      adminContent.replaceChildren();
+      const form = adminElement('form');
+      const label = adminElement('label', 'Sök NPC eller värld', form);
+      const input = document.createElement('input'); input.type = 'search'; input.maxLength = 100; input.value = query; label.append(input);
+      const search = adminElement('button', 'Sök', form); search.type = 'submit';
+      form.addEventListener('submit', event => { event.preventDefault(); loadAdminNpcs(input.value, 0); });
+      const result = await request(`/api/admin/npcs?q=${encodeURIComponent(query)}&limit=50&offset=${offset}`);
+      adminElement('p', `${result.total} NPC:er. Välj en för att granska och redigera profil, minne och ägodelar.`);
+      const list = adminElement('ul');
+      for (const npc of result.npcs) {
+        const item = adminElement('li', undefined, list);
+        const button = adminElement('button', `${npc.name} · ${npc.world} · ${npc.location}${npc.scene ? ` · ${npc.scene}` : ''}`, item);
+        button.type = 'button'; button.addEventListener('click', () => openAdminNpc(npc.id));
+      }
+      const paging = adminElement('div');
+      const previous = adminElement('button', 'Föregående sida', paging); previous.type = 'button'; previous.disabled = offset <= 0; previous.addEventListener('click', () => loadAdminNpcs(query, Math.max(0, offset - 50)));
+      const next = adminElement('button', 'Nästa sida', paging); next.type = 'button'; next.disabled = offset + result.npcs.length >= result.total; next.addEventListener('click', () => loadAdminNpcs(query, offset + 50));
+    }
+    async function openAdminNpc(npcId) {
+      adminContent.replaceChildren();
+      const back = adminElement('button', 'Tillbaka till NPC-listan'); back.type = 'button'; back.addEventListener('click', () => loadAdminNpcs());
+      const npc = await request(`/api/admin/npcs/${encodeURIComponent(npcId)}`);
+      adminElement('h2', `${npc.name} · ${npc.world}`);
+      adminElement('p', `Plats: ${npc.location}${npc.scene ? ` · ${npc.scene}` : ''}. ID och position visas som referens och ändras inte i den här vyn.`);
+
+      adminElement('h3', 'Namn, bakgrund och röstidentitet');
+      const identityForm = adminElement('form');
+      const nameLabel = adminElement('label', 'Namn ', identityForm);
+      const nameInput = document.createElement('input'); nameInput.required = true; nameInput.maxLength = 120; nameInput.value = npc.name; nameLabel.append(nameInput);
+      const biographyLabel = adminElement('label', 'Bakgrund ', identityForm);
+      const biographyInput = document.createElement('textarea'); biographyInput.required = true; biographyInput.maxLength = 4000; biographyInput.rows = 5; biographyInput.value = npc.biography; biographyLabel.append(biographyInput);
+      const voiceLabel = adminElement('label', 'Röstidentitet ', identityForm);
+      const voiceSelect = document.createElement('select');
+      for (const value of ['masculine', 'feminine', 'neutral']) { const option = document.createElement('option'); option.value = value; option.textContent = value; option.selected = value === npc.voice_identity; voiceSelect.append(option); }
+      voiceLabel.append(voiceSelect);
+      const identitySave = adminElement('button', 'Spara identitet', identityForm); identitySave.type = 'submit';
+      const identityStatus = adminElement('p'); identityStatus.setAttribute('role', 'status');
+      identityForm.addEventListener('submit', async event => {
+        event.preventDefault(); identitySave.disabled = true;
+        try {
+          await request(`/api/admin/npcs/${encodeURIComponent(npcId)}/identity`, {method: 'PUT', headers: {'content-type': 'application/json'}, body: JSON.stringify({expected_name: npc.name, expected_biography: npc.biography, expected_voice_identity: npc.voice_identity, name: nameInput.value, biography: biographyInput.value, voice_identity: voiceSelect.value})});
+          identityStatus.textContent = 'Identiteten sparades och revisionsloggades. Ladda om NPC:n för att hämta senaste version.';
+        } catch (error) { identityStatus.textContent = `Identiteten sparades inte: ${error.message}`; }
+        finally { identitySave.disabled = false; }
+      });
+
+      adminElement('h3', 'Egenskaper och framtida profilfält');
+      adminElement('p', 'Redigera profilens JSON. Kända spelvärden valideras av Rust; okända framtida egenskaper bevaras som JSON. Värld och position visas som referens och ändras inte här.');
+      const profileForm = adminElement('form');
+      const profileLabel = adminElement('label', 'NPC-profil i JSON', profileForm);
+      const profileInput = document.createElement('textarea'); profileInput.rows = 18; profileInput.cols = 80; profileInput.required = true; profileInput.value = JSON.stringify(npc.profile, null, 2); profileLabel.append(profileInput);
+      const profileSave = adminElement('button', 'Spara egenskaper', profileForm); profileSave.type = 'submit';
+      const profileStatus = adminElement('p'); profileStatus.setAttribute('role', 'status');
+      profileForm.addEventListener('submit', async event => {
+        event.preventDefault(); profileSave.disabled = true;
+        try {
+          const profile = JSON.parse(profileInput.value);
+          await request(`/api/admin/npcs/${encodeURIComponent(npcId)}/profile`, {method: 'PUT', headers: {'content-type': 'application/json'}, body: JSON.stringify({expected_profile: npc.profile, profile})});
+          profileStatus.textContent = 'Egenskaperna sparades och revisionsloggades. Ladda om NPC:n för att hämta senaste version.';
+        } catch (error) { profileStatus.textContent = `Egenskaperna sparades inte: ${error.message}`; }
+        finally { profileSave.disabled = false; }
+      });
+
+      adminElement('h3', 'Ägodelar');
+      const possessionsForm = adminElement('form');
+      const possessionsLabel = adminElement('label', 'En ägodel per rad: namn | antal', possessionsForm);
+      const possessionsInput = document.createElement('textarea'); possessionsInput.rows = 8; possessionsInput.cols = 60; possessionsInput.value = npc.possessions.map(item => `${item.name} | ${item.quantity}`).join('\n'); possessionsLabel.append(possessionsInput);
+      const possessionsSave = adminElement('button', 'Ersätt ägodelar', possessionsForm); possessionsSave.type = 'submit';
+      const possessionsStatus = adminElement('p'); possessionsStatus.setAttribute('role', 'status');
+      possessionsForm.addEventListener('submit', async event => {
+        event.preventDefault(); possessionsSave.disabled = true;
+        try {
+          const possessions = possessionsInput.value.split('\n').map(line => line.trim()).filter(Boolean).map(line => { const [name, amount] = line.split('|'); return {name: name?.trim() || '', quantity: Number(amount?.trim() || 1)}; });
+          const expected = npc.possessions.map(item => ({name: item.name, quantity: item.quantity}));
+          await request(`/api/admin/npcs/${encodeURIComponent(npcId)}/possessions`, {method: 'PUT', headers: {'content-type': 'application/json'}, body: JSON.stringify({expected, possessions})});
+          possessionsStatus.textContent = 'Ägodelarna ersattes och revisionsloggades.';
+        } catch (error) { possessionsStatus.textContent = `Ägodelarna sparades inte: ${error.message}`; }
+        finally { possessionsSave.disabled = false; }
+      });
+
+      adminElement('h3', 'Minnesrekonstruktioner');
+      adminElement('p', 'Varje ändring behåller minnespostens källa och läggs i revisionsloggen. Ändringar påverkar NPC:ns aktiva minne direkt.');
+      if (npc.memories.length === 0) adminElement('p', 'Inga sparade minnen för den här NPC:n.');
+      for (const memory of npc.memories) {
+        const section = adminElement('section');
+        adminElement('h4', `${memory.character_name} · ${memory.layer} · ${memory.active ? 'aktivt' : 'inaktivt'} · ${memory.visibility}`, section);
+        adminElement('p', `Källa ${memory.source_event_id}; informationsväg ${memory.information_source}; prioritet ${memory.priority}.`, section);
+        const form = adminElement('form', undefined, section);
+        const label = adminElement('label', 'Minnestext', form);
+        const text = document.createElement('textarea'); text.rows = 4; text.cols = 80; text.required = true; text.maxLength = 3000; text.value = memory.text; label.append(text);
+        const priorityLabel = adminElement('label', ' Prioritet 0–100 ', form);
+        const priority = document.createElement('input'); priority.type = 'number'; priority.min = '0'; priority.max = '100'; priority.value = memory.priority; priorityLabel.append(priority);
+        const activeLabel = adminElement('label', undefined, form);
+        const active = document.createElement('input'); active.type = 'checkbox'; active.checked = memory.active; activeLabel.append(active, document.createTextNode(' Aktivt minne'));
+        const visibilityLabel = adminElement('label', ' Synlighet ', form);
+        const visibility = document.createElement('select');
+        for (const value of ['private', 'confidential', 'shareable']) { const option = document.createElement('option'); option.value = value; option.textContent = value; option.selected = value === memory.visibility; visibility.append(option); }
+        visibilityLabel.append(visibility);
+        const save = adminElement('button', 'Spara minnesändring', form); save.type = 'submit';
+        const status = adminElement('p', undefined, section); status.setAttribute('role', 'status');
+        form.addEventListener('submit', async event => {
+          event.preventDefault(); save.disabled = true;
+          try {
+            await request(`/api/admin/npcs/${encodeURIComponent(npcId)}/memories/${encodeURIComponent(memory.id)}`, {method: 'PUT', headers: {'content-type': 'application/json'}, body: JSON.stringify({expected_text: memory.text, expected_priority: memory.priority, expected_active: memory.active, expected_visibility: memory.visibility, text: text.value, priority: Number(priority.value), active: active.checked, visibility: visibility.value})});
+            status.textContent = 'Minnet sparades och revisionsloggades. Ladda om NPC:n för senaste version.';
+          } catch (error) { status.textContent = `Minnet sparades inte: ${error.message}`; }
+          finally { save.disabled = false; }
+        });
+      }
+      adminElement('h3', 'Löften och åtaganden');
+      if (npc.commitments.length === 0) adminElement('p', 'Inga registrerade åtaganden.');
+      for (const commitment of npc.commitments) adminJson(`${commitment.status} · ${commitment.created_at}`, commitment);
     }
     async function loadAdminPrompts() {
       adminContent.replaceChildren();
@@ -645,15 +936,17 @@
       stage = 'world-start';
       messageField.disabled = true;
       appendLine('user', message);
-      appendLine('assistant', 'Jag tar fram ett förslag på startplats och startläge…');
+      setActivityStatus('Berättaren ber AI ta fram ett förslag på startvärld och en plats som passar din biografi.');
       try {
         const proposal = await request('/api/world/draft', {
           method: 'POST', headers: {'content-type': 'application/json'},
           body: JSON.stringify({input: message, current_draft: worldDraft}),
         });
         worldDraft = proposal.draft;
+        clearActivityStatus();
         appendLine('assistant', `${proposal.message}\n\nVärld: ${worldDraft.name}\nStartplats: ${worldDraft.location_name}. ${worldDraft.location_description}\nStartbelopp: ${worldDraft.starting_balance_sek} kronor. ${worldDraft.offer_name} kostar ${worldDraft.offer_price_sek} kronor.\n\nSkriv ändringar eller “godkänn”.`);
       } catch (error) {
+        clearActivityStatus();
         appendLine('assistant', `Förslaget kunde inte tas fram: ${error.message}. Skriv “försök igen” när du vill försöka på nytt.`);
       }
       setStage('world-draft');
@@ -667,6 +960,7 @@
       }
       appendLine('user', message);
       messageField.disabled = true;
+      setActivityStatus('Sparar det godkända världsförslaget och skapar din startposition.');
       try {
         gameState = await request('/api/world/start', {
           method: 'POST', headers: {'content-type': 'application/json'}, body: JSON.stringify(worldDraft),
@@ -674,8 +968,10 @@
         worldDraft = null;
         await loadSavedDialogue();
         setStage('game');
+        clearActivityStatus();
         appendLine('assistant', 'Du kan fråga om platsen, dina saker eller din ekonomi, vänta, handla, prata med någon som finns här eller skriva vart du vill gå.');
       } catch (error) {
+        clearActivityStatus();
         appendLine('assistant', `Världsförslaget kunde inte sparas: ${error.message}. Förslaget finns kvar så att du kan försöka igen.`);
       }
       messageField.disabled = false;
@@ -686,7 +982,7 @@
       transcript.replaceChildren();
       latestAssistantText = '';
       latestPlayerAction = [...lines].reverse().find(line => line.role === 'user')?.content || '';
-      for (const line of lines) appendLine(line.role === 'user' ? 'user' : 'assistant', line.content, {speaker: line.speaker, speak: false});
+      for (const line of lines) appendLine(line.role === 'user' ? 'user' : line.role === 'system' ? 'system' : 'assistant', line.content, {speaker: line.speaker, speak: false});
       refreshActionTools();
       if (lines.length > 0 && latestAssistantText && location.pathname !== '/admin') {
         voiceController?.speak(latestAssistantText, {role: 'narrator', voiceIdentity: 'neutral'});
@@ -699,6 +995,10 @@
       currentAccount = await request('/api/me');
       gameState = await request('/api/world');
       showPlay();
+      if (!currentAccount.is_admin && FEATURE_FLAGS.localAI) {
+        const localAI = await loadLocalAiAdapter();
+        localAI?.start(currentAccount.id);
+      }
       if (!gameState.character) {
         transcript.replaceChildren();
         appendInitialPrompt();
@@ -791,10 +1091,13 @@
 
         for (const interaction of orderedInteractions) {
           const external = interaction.external_call || {};
-          addStep('ai', `${interaction.prompt_id} · v${interaction.prompt_version} · ${interaction.outcome}`,
+          const isCompaction = interaction.prompt_id === 'dialogue-context-compaction';
+          addStep('ai', `${isCompaction ? 'Kontextkomprimering' : interaction.prompt_id} · v${interaction.prompt_version} · ${interaction.outcome}`,
             {prompt_yaml: interaction.prompt_yaml, rendered_messages: interaction.rendered_messages, provider: external.service, model: external.model, thinking_effort: external.thinking_effort, provider_request: external.request},
             {response: interaction.response, outcome: interaction.outcome, provider_status: external.response_status, provider_response: external.response_body, provider_error: external.error, duration_ms: external.duration_ms, rust_interpretation_and_validation: interaction.metadata},
-            'AI-förslag och providertrafik. Förslaget är inte i sig ett fastställt världsfaktum.');
+            isCompaction
+              ? 'Äldre privat dialog kondenseras; kontrollera källhändelser, prompt, modellsvar, sammanfattningshash och sparad sekvens. Sammanfattningen är inte kanonisk världssanning.'
+              : 'AI-förslag och providertrafik. Förslaget är inte i sig ett fastställt världsfaktum.');
           const metadata = interaction.metadata || {};
           if (metadata.validation_inputs || metadata.validation_results || metadata.decision?.includes?.('rule')) {
             addStep('luau', `Regelutkast och tester · ${metadata.rule_key || metadata.activity_key || interaction.prompt_id}`,
@@ -862,6 +1165,7 @@
       presenceTimer = null;
       playerMessagesPrimed = false;
       seenPlayerMessageIds.clear();
+      if (FEATURE_FLAGS.localAI) window.localGameAI?.stop();
       await request('/api/logout', {method: 'POST'});
       if (location.pathname !== '/admin') appendLine('assistant', 'Du har loggat ut. Logga in igen för att fortsätta spela.');
       characterDraft = null;
@@ -894,6 +1198,7 @@
       }
       appendLine('user', message);
       messageField.disabled = true;
+      setActivityStatus('Berättaren ber AI skapa eller uppdatera ett biografiförslag utifrån det du skrev.');
       try {
         const proposal = await request('/api/character/draft', {
           method: 'POST',
@@ -901,8 +1206,10 @@
           body: JSON.stringify({input: message, current_draft: characterDraft}),
         });
         characterDraft = proposal.draft;
+        clearActivityStatus();
         appendLine('assistant', `${proposal.message}\n\nFörslag: ${characterDraft.name}, ${characterDraft.age} år.\n${characterDraft.biography}${biographyContextText(characterDraft.life_context)}\n\nSkriv ändringar eller “godkänn”.`);
       } catch (error) {
+        clearActivityStatus();
         appendLine('assistant', `Jag kunde inte ta fram ett biografiförslag: ${error.message}. Försök igen när tjänsten svarar.`);
       }
       messageField.disabled = false;
@@ -914,6 +1221,12 @@
       document.querySelector('#dry-run-action').disabled = !enabled;
     }
     async function handleGameMessage(message, actionMode = 'normal') {
+      if (FEATURE_FLAGS.localAI && actionMode === 'normal' && /^lokal ai(?:\s|$)/i.test(message.trim())) {
+        const response = await window.localGameAI?.settings(message);
+        appendLine('user', message);
+        appendLine('assistant', response || 'Kommandon: “lokal ai villkor”, “lokal ai godkänn villkor”, “lokal ai avvisa villkor”, “lokal ai på/av”, “lokal ai loggar på/av”, “lokal ai exportera loggar” och “lokal ai radera loggar”.');
+        return;
+      }
       if (/^logga ut[.!]?$/i.test(message.trim())) {
         appendLine('user', message);
         await handleLogout();
@@ -941,14 +1254,32 @@
       if (actionMode === 'normal') pendingDialogue = {message, idempotencyKey};
       appendLine('user', message, actionMode === 'dry_run' ? {speaker: 'Torrkörning'} : actionMode === 'redo' ? {speaker: 'Gör om'} : {});
       messageField.disabled = true;
+      setActivityStatus(actionMode === 'dry_run'
+        ? 'Torrkör handlingen utan att spara eller göra framsteg.'
+        : actionMode === 'redo'
+        ? 'Gör om den senaste handlingen med aktuella regler.'
+        : 'Berättaren arbetar med din avsikt. Den avgör om en plats, scen eller person behöver etableras och fortsätter sedan berättelsen.');
       try {
+        let clientAssistance = null;
+        if (FEATURE_FLAGS.localAI && actionMode === 'normal' && currentAccount && !currentAccount.is_admin && window.localGameAI) {
+          try {
+            const history = [...transcript.querySelectorAll('li')].map(line => line.textContent).filter(Boolean);
+            const assisted = await window.localGameAI.assist(message, history, gameState?.world || {});
+            clientAssistance = {
+              intent_hint: String(assisted.intent_hint || '').slice(0, 500),
+              warning: String(assisted.warning || '').slice(0, 500),
+              excerpts: Array.isArray(assisted.excerpts) ? assisted.excerpts.filter(item => typeof item === 'string' && item.length <= 500 && history.some(line => line.includes(item))).slice(0, 3) : [],
+            };
+            if (clientAssistance.warning) appendLine('system', `Lokal textkontroll: ${clientAssistance.warning}`, {speaker: 'Lokal AI', speak: false});
+          } catch (_) { /* Local assistance is optional; the original input always proceeds. */ }
+        }
         let result;
         for (let attempt = 0; attempt < 2; attempt += 1) {
           try {
             result = await request('/api/dialogue', {
               method: 'POST',
               headers: {'content-type': 'application/json'},
-              body: JSON.stringify({message, expected_world_version: gameState.world.version, idempotency_key: idempotencyKey, forget_previous_turn: actionMode !== 'normal', dry_run: actionMode === 'dry_run'}),
+              body: JSON.stringify({message, expected_world_version: gameState.world.version, idempotency_key: idempotencyKey, forget_previous_turn: actionMode !== 'normal', dry_run: actionMode === 'dry_run', client_assistance: clientAssistance}),
             });
             break;
           } catch (error) {
@@ -968,7 +1299,11 @@
             if (refreshed.world) gameState = refreshed;
           } catch (_) { /* The committed dialogue stays successful if this optional view refresh fails. */ }
         }
+        clearActivityStatus();
         const speakingNpc = result.status !== 'dry_run' && ['speak', 'meet'].includes(result.intent) ? gameState.world.npc : null;
+        for (const change of result.world_changes || []) {
+          appendLine('system', change, {speaker: 'Världsändring', speak: false});
+        }
         for (const ruleName of result.debug_rules_created || []) {
           appendLine('assistant', ruleName, {speaker: 'Nya regler', speak: false});
         }
@@ -977,10 +1312,21 @@
           : speakingNpc
           ? {speaker: speakingNpc.name, voice: {characterId: speakingNpc.id, voiceIdentity: speakingNpc.voice_identity}}
           : {speaker: 'Berättaren', voice: {role: 'narrator', voiceIdentity: 'neutral'}});
+        if (result.context_compaction?.notice) {
+          appendLine('system', result.context_compaction.notice, {speaker: 'Kontext', speak: false});
+        }
         refreshActionTools();
       } catch (error) {
+        clearActivityStatus();
         messageField.value = message;
-        appendLine('assistant', `${explainDialogueError(error)} Ditt meddelande ligger kvar i inmatningen.`);
+        try {
+          const history = [...transcript.querySelectorAll('li')].map(line => line.textContent).filter(Boolean);
+          const localReply = FEATURE_FLAGS.localAI
+            ? await window.localGameAI?.offline(message, history, gameState?.world || {})
+            : null;
+          if (localReply) appendLine('assistant', `Lokalt, osparat förslag: ${localReply}`, {speaker: 'Lokal hjälp'});
+          else appendLine('assistant', `${explainDialogueError(error)} Ditt meddelande ligger kvar i inmatningen.`);
+        } catch (_) { appendLine('assistant', `${explainDialogueError(error)} Ditt meddelande ligger kvar i inmatningen.`); }
       }
       messageField.disabled = false;
       messageField.focus();
@@ -1124,6 +1470,7 @@
       adminContent.setAttribute('aria-busy', 'true');
       try {
         if (button.dataset.adminView === 'players') await loadAdminPlayers();
+        else if (button.dataset.adminView === 'npcs') await loadAdminNpcs();
         else if (button.dataset.adminView === 'prompts') await loadAdminPrompts();
         else if (button.dataset.adminView === 'rules') await loadAdminRules();
         else if (button.dataset.adminView === 'logging') await loadAdminLogging();

piper-worker.js

@@ -18,6 +18,8 @@ self.fetch = async (resource, options) => {
   const requestedUrl = resource instanceof Request ? resource.url : String(resource);
   const localModelUrl = localPiperModelUrl(requestedUrl, self.location.origin);
   if (!localModelUrl) {
+    const requestUrl = new URL(requestedUrl, self.location.origin);
+    if (requestUrl.origin !== self.location.origin) throw new Error(`External Piper asset blocked: ${requestUrl.origin}`);
     const runtimeAsset = requestedUrl.includes('/static/piper-wasm-v1/onnx/');
     const runtimeFile = runtimeAsset ? new URL(requestedUrl, self.location.origin).pathname.split('/').pop() : undefined;
     if (activeRequestId && runtimeAsset) {

scripts/check-frontend.sh

@@ -5,6 +5,10 @@ test -s index.html
 grep -q '<html lang="sv">' index.html
 grep -q 'id="frontend-version">__FRONTEND_VERSION__' index.html
 grep -q '<script src="/voice.js?v=__FRONTEND_VERSION__"></script>' index.html
+grep -q 'const FEATURE_FLAGS = Object.freeze({localAI: false})' index.html
+grep -q 'if (!FEATURE_FLAGS.localAI) return Promise.resolve(null)' index.html
+grep -q "script.src = '/static/' + 'wllama-gemma3-v2/local-ai.js'" index.html
+! grep -q '<script src="/static/wllama-gemma3-v2/local-ai.js"></script>' index.html
 grep -q '<script src="/piper-runtime.js?v=__FRONTEND_VERSION__"></script>' index.html
 grep -q 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0' nginx/default.conf
 grep -q 'Cross-Origin-Embedder-Policy "require-corp"' nginx/default.conf
@@ -46,6 +50,13 @@ grep -q 'WebKit versions before Safari 27' voice.js
 grep -q "voiceIdentity: speakingNpc.voice_identity" index.html
 grep -q "role: 'narrator', voiceIdentity: 'neutral'" index.html
 grep -q 'COPY voice.js /usr/share/nginx/html/voice.js' Dockerfile
+grep -Fq 'if (!currentAccount.is_admin && FEATURE_FLAGS.localAI)' index.html
+grep -Fq 'localAI?.start(currentAccount.id)' index.html
+grep -q "type === 'terms-required'" index.html
+grep -q 'Gemma-villkor' index.html
+grep -q 'lokal ai godkänn villkor' index.html
+grep -q 'lokal ai avvisa villkor' index.html
+grep -q 'client_assistance: clientAssistance' index.html
 grep -q 'COPY public/piper-runtime.js /usr/share/nginx/html/piper-runtime.js' Dockerfile
 grep -q 'COPY public/tts/piper-wasm-v1/' Dockerfile
 grep -q 'build:piper' .gitea/workflows/publish.yaml
@@ -55,6 +66,7 @@ grep -q "new Worker(workerUrl, {type: 'module'})" piper-runtime.js
 grep -q 'worker.js?v=' piper-runtime.js
 grep -q 'worker.onmessageerror' piper-runtime.js
 grep -q 'localPiperModelUrl' piper-worker.js
+grep -q 'External Piper asset blocked' piper-worker.js
 grep -q 'trackDownloadProgress' piper-worker.js
 grep -q 'new ReadableStream' piper-download-progress.mjs
 grep -q 'createOnnxWasmPaths(self.location.origin)' piper-worker.js
@@ -88,12 +100,25 @@ grep -q 'function renderDecisionTrace' index.html
 grep -q 'JSON.stringify(group, null, 2)' index.html
 grep -q 'debug-enabled' index.html
 grep -q '/api/admin/players?' index.html
+grep -q 'Välj konto att följa' index.html
+grep -q 'function renderAdminConversations' index.html
+grep -q 'function renderDecisionProvenance' index.html
+grep -q 'Visa äldre samtalsturer' index.html
+grep -q 'aria-expanded' index.html
 grep -q "request('/api/admin/prompts'" index.html
 grep -q "request('/api/admin/rules'" index.html
 grep -q "request('/api/admin/settings/logging'" index.html
 grep -q 'data-admin-view="logging"' index.html
 grep -q '/api/admin/audit?limit=200' index.html
-grep -q 'entry.data.external_call' index.html
+grep -q 'data-admin-view="npcs"' index.html
+grep -q '/api/admin/npcs?q=' index.html
+grep -q '/api/admin/npcs/${encodeURIComponent(npcId)}/profile' index.html
+grep -q '/api/admin/npcs/${encodeURIComponent(npcId)}/identity' index.html
+grep -q '/api/admin/npcs/${encodeURIComponent(npcId)}/memories/${encodeURIComponent(memory.id)}' index.html
+grep -q '/api/admin/npcs/${encodeURIComponent(npcId)}/possessions' index.html
+grep -q 'Egenskaper och framtida profilfält' index.html
+grep -q 'Minnesrekonstruktioner' index.html
+grep -q 'interaction.external_call' index.html
 grep -q 'Externt tjänsteanrop' index.html
 grep -q "request('/api/world/start'" index.html
 grep -q "request('/api/character'" index.html

tests/activity-feedback.test.cjs

@@ -0,0 +1,23 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const test = require('node:test');
+
+const source = fs.readFileSync(path.join(__dirname, '..', 'index.html'), 'utf8');
+
+test('player sees an accessible live activity line during world and character proposals', () => {
+  assert.match(source, /function setActivityStatus\(message\)/);
+  assert.match(source, /setAttribute\('aria-live', 'polite'\)/);
+  assert.match(source, /AI ta fram ett förslag på startvärld och en plats/);
+  assert.match(source, /AI skapa eller uppdatera ett biografiförslag/);
+});
+
+test('dialogue processing explains that scene, place, or person establishment is being considered', () => {
+  assert.match(source, /Berättaren arbetar med din avsikt\. Den avgör om en plats, scen eller person behöver etableras/);
+});
+
+test('local AI activity is shown separately from general narrator processing', () => {
+  assert.match(source, /detail\.type === 'activity' \? 'data-local-ai-activity'/);
+  assert.match(source, /Lokal AI: \$\{detail\.text \|\| ''\}/);
+  assert.match(source, /clearActivityStatus\(\);/);
+});

tests/admin-conversation-trace.test.cjs

@@ -0,0 +1,33 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+
+const page = fs.readFileSync(new URL('../index.html', `file://${__filename}`), 'utf8');
+
+test('admin can select a searched account before opening its conversations', () => {
+  assert.match(page, /Välj konto att följa/);
+  assert.match(page, /chooserSelect\.value\);/);
+  assert.match(page, /\/api\/admin\/players\?q=/);
+});
+
+test('conversation transcript exposes player and narrator messages as expandable replies', () => {
+  assert.match(page, /function renderAdminConversations/);
+  assert.match(page, /payload\.player_message/);
+  assert.match(page, /payload\.reply \|\| payload\.npc_reply/);
+  assert.match(page, /aria-expanded/);
+  assert.match(page, /renderDecisionProvenance\(group, event, detail\)/);
+});
+
+test('selected replies reveal AI, Luau and Rust provenance without injecting HTML', () => {
+  assert.match(page, /function renderDecisionProvenance/);
+  assert.match(page, /interaction\.prompt_yaml/);
+  assert.match(page, /interaction\.external_call/);
+  assert.match(page, /details\.luau_trace/);
+  assert.match(page, /details\.rust_validation/);
+  assert.match(page, /element\.textContent = text/);
+});
+
+test('account trace can be paged until all stored turns are loaded', () => {
+  assert.match(page, /Visa äldre samtalsturer/);
+  assert.match(page, /\?limit=\$\{trace\.limit \|\| 200\}&offset=\$\{adminTraceOffset\}/);
+});

tests/local-ai-integration.test.cjs

@@ -0,0 +1,31 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const test = require('node:test');
+
+const page = fs.readFileSync(path.join(__dirname, '..', 'index.html'), 'utf8');
+
+test('local AI is paused by default and adapter loading is gated by its feature flag', () => {
+  assert.match(page, /const FEATURE_FLAGS = Object\.freeze\(\{localAI: false\}\)/);
+  assert.match(page, /if \(!FEATURE_FLAGS\.localAI\) return Promise\.resolve\(null\)/);
+  assert.match(page, /script\.src = '\/static\/' \+ 'wllama-gemma3-v2\/local-ai\.js'/);
+  assert.doesNotMatch(page, /<script src="\/static\/wllama-gemma3-v2\/local-ai\.js"><\/script>/);
+  assert.match(page, /if \(!currentAccount\.is_admin && FEATURE_FLAGS\.localAI\)[\s\S]*?loadLocalAiAdapter\(\)/);
+});
+
+test('Gemma license links are shown in the accessible game dialogue and consent can be withdrawn', () => {
+  assert.match(page, /type === 'terms-required'/);
+  assert.match(page, /Gemma-villkor/);
+  assert.match(page, /Spelvillkor för Gemma/);
+  assert.match(page, /policy för förbjuden användning/);
+  assert.match(page, /lokal ai godkänn villkor/);
+  assert.match(page, /lokal ai avvisa villkor/);
+  assert.match(page, /window\.localGameAI\?\.stop\(\)/);
+});
+
+test('local assistance remains advisory and preserves the normal dialogue request path', () => {
+  assert.match(page, /client_assistance: clientAssistance/);
+  assert.match(page, /Local assistance is optional; the original input always proceeds/);
+  assert.match(page, /request\('\/api\/dialogue'/);
+  assert.match(page, /Lokalt, osparat förslag:/);
+});