Face-room human send: owner approval card shows raw FLYBOT-FACE-HUMAN JSON then vanishes without a click #159

Environment: ThinkFlowLab/FlyBot main 7a7225f on @deepseek-ai/dsh@0.2.0-rc.2, two fresh instances A (:3080) / B (:3081) against https://47-80-69-220.sslip.io. Scheduled UI self-test 2026-10-17 (~11:47 Asia/Shanghai). No model API key on the box.

What happened

In an open face-to-face room, the first human send on A briefly showed an owner approval card (accessibility text; gone before a screenshot could be taken):

• “Waiting for approval”
• “Chief → the room”
• draft: To face room: FLYBOT-FACE-HUMAN {"v":1,"who":"SelfA1136","text":"hello from A 1136"}
• buttons Approve, Always approve, Reject
• sidebar briefly “1 to approve”

Within seconds the card disappeared with no click. The human line still landed on B. Later human sends on both sides showed no card. B (non-owner of A’s Chief) never saw a “Waiting for the owner's approval” state for these lines.

Repro

1. A and B join the same face room and Enter chat.
2. On A (no model set), send a short human line in the room.
3. Watch for the in-chat approval card.

Expected (owner design)

• Owner sees Approve / Always approve / Reject for the readable human text (not the wire FLYBOT-FACE-HUMAN envelope).
• Card stays until the owner chooses (or Always approve turns on Auto-send for that pair, same as the Auto-send checkbox, owner-only, default off).
• Non-owners see a waiting state, not silence, while held.

Actual

• One flash of raw protocol JSON; card auto-dismisses; later sends skip the card entirely.
• Always approve was visible in the flash (good that the control exists) but could not be used.

Notes

• Room details and friend’s Bot settings both showed Auto-send unchecked (default off) as expected.
• Could not keep a held Bot reply on screen without a model; do not treat missing Bot replies as part of this bug.
• Related closed work: in-chat approvals (Approvals: approve/reject inline in the chat or group; slim down the sidebar approvals panel #114 / [Team] Remove a friend's Bot, and approve held Bot replies inside the chat #90). This is a remaining face-room human-hold UX/protocol leak.