Sync the self-hosting stack

CHANGELOG.md

@@ -9,6 +9,28 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-09 — Quick Assist: no second question, and one notice at the top of the screen `agent 0.49.0` `api 0.131.0` `web 0.161.0`
+
+**The person is no longer asked to allow your connection.** They already said yes by opening the link,
+reading who is helping them and running the helper, so your viewer opens their screen straight away.
+What does not change: nothing is captured until the notice is up on their screen, it stands for as long
+as you watch, and it names you.
+
+**Everything the person sees is now one Jarvis notice at the top of their screen**, the same one an
+enrolled machine shows during a session, instead of a window in the corner plus the notice. It says
+"Connecting", then "Antoine Cavelier, from Mixvoip, can view and control this machine." while you are
+connected, then who is viewing while you watch, and "The session has ended." when you end it. It can be
+folded down to its badge and slid along the top edge, and it is kept on the visible part of the screen.
+
+**Its Disconnect button ends the whole call**, whether the person presses it while you are watching or
+not: the helper stops, so you cannot reconnect without a new session. If you were watching, your viewer
+says the person ended the session; the Quick Assist page then shows them disconnected.
+
+Update the API, the web image and the agent release image. No database update is required. The person
+has to download the helper again to get the new notice. A helper downloaded before this release keeps
+its window in the corner, is not asked either with the new API, and its notice's Disconnect ends only
+the screen you were watching; it lasts until the call ends, at most four hours.
+
 ## 2026-10-09 — The Quick Assist window stays in sight `agent 0.48.2`
 
 The Quick Assist window on the person's screen is the only sign that the helper is running, and it

README.md

@@ -485,8 +485,10 @@ asking for any.
 starts a session under **Quick Assist**, gets a single-use code that lasts 10 minutes, and sends the
 person a link to `/help/<code>` on your instance. That public page names the operator and the
 organization, then hands over `JarvisQuickAssist.exe`: the Windows agent, carrying your address and
-the code. The person opens it, a Jarvis window shows who is helping, and the screen is shared only
+the code. The person opens it, and the Jarvis notice at the top of their screen says who is helping
-after they accept, with the notice on their screen throughout. It installs nothing and keeps no key on
+and that they can view and control the machine. Opening the helper is the consent: the operator's
+viewer opens the screen without a second question, the notice says when they are watching, and its
+Disconnect ends the call. It installs nothing and keeps no key on
 disk; it shows the person's own session only, with their own rights, and answers nothing but the
 screen. The download needs the agent release image, like enrolment does.