feat: choose an available agent Web port from 3080 to 3100

templates/agent/README.md

@@ -11,6 +11,11 @@ nix run .#agent -- ssh        # root shell, starting in the same project cwd
 nix run .#agent -- stop
 ```
 
+The Web UI takes the first available port from **3080–3100**. The printed URL and
+`url` command use the selected port; a full range fails cleanly. Configure
+`agentVM.network.webPort` / `webPortEnd` to change the range (equal values mean a
+fixed port). Multiple VMs still need distinct `sshPort` settings.
+
 `$DSH_HOME` (default `~/.dsh`) and `${DSH_AGENTS_HOME:-~/.agents}/skills` are
 also mounted **read-write**. No other home directories or host sockets are shared.
 The first run creates missing DSH/skills directories. Existing DSH home must be

templates/agent/flake.nix

@@ -24,9 +24,11 @@
             agentVM.network = {
               hostAddress = "127.0.0.1"; # Or a host LAN/VPN IPv4 address, or 0.0.0.0.
               sshPort = 2222; # Always host localhost in user-network mode.
-              webPort = 3080;
-              # For 0.0.0.0, list the actual browser authorities, not a wildcard:
-              # trustedHosts = [ "192.168.1.20:3080" ];
+              webPort = 3080; # First available host Web port in this inclusive range.
+              webPortEnd = 3100; # Set equal to webPort to disable port hopping.
+              # For 0.0.0.0, list actual browser hosts, not a wildcard.
+              # A port-less host allows any selected port; host:port stays exact.
+              # trustedHosts = [ "192.168.1.20" ];
             };
           }
         ];