@genesislcap/ai-assistant 15.26.0 → 15.27.0-agent-log-submit.3

package/dist/custom-elements.json

@@ -742,6 +742,14 @@
             "module": "./utils/cost-session-history"
           }
         },
+        {
+          "kind": "js",
+          "name": "ResolvedDebugLogNoteConfig",
+          "declaration": {
+            "name": "ResolvedDebugLogNoteConfig",
+            "module": "./utils/resolve-debug-log-note"
+          }
+        },
         {
           "kind": "js",
           "name": "ModelTagAppearance",
@@ -1775,6 +1783,12 @@
       "kind": "javascript-module",
       "path": "src/main/main.template.ts",
       "declarations": [
+        {
+          "kind": "variable",
+          "name": "messageTimestampTemplate",
+          "default": "html<ChatMessage, FoundationAiAssistant>`\n  <time\n    class=\"message-timestamp\"\n    part=\"message-timestamp\"\n    datetime=\"${(m) => messageTimestampDateTime(m.timestamp)}\"\n  >\n    <span aria-hidden=\"true\">\n      ${(m, c) => formatMessageTimestamp(m.timestamp, c.parent.timestampClock)}\n    </span>\n    <span class=\"visually-hidden\">${(m) => formatAbsoluteTimestamp(m.timestamp)}</span>\n  </time>\n`",
+          "description": "The timestamp shown beside the sender name (GENC-1257).\n\nTwo strings, not one. A screen reader announces a `<time>` element's TEXT — it has no\nimplicit ARIA role, and the `datetime` attribute is never surfaced to the user — so the\nrelative text is hidden from assistive tech and paired with a visually-hidden absolute\nstring. Otherwise AT would hear \"5 minutes ago\" with nothing to anchor it, and in\n`'hover'` mode would hear it for a timestamp sighted users never asked to see.\n`datetime` stays because it is correct HTML and useful to tooling, not for a11y.\n\nOnly the VISUAL reveal is hover-gated, in CSS — see `.message-timestamp`. `opacity: 0`\nleaves the element in the accessibility tree, so AT gets a time in both visible modes;\n`'off'` is the only mode that removes it.\n\nReads `timestampClock` rather than `Date.now()` so every row shares one invalidatable\nclock and a tick re-evaluates them all; see `FoundationAiAssistant.timestampClock`."
+        },
         {
           "kind": "function",
           "name": "FoundationAiAssistantTemplate",
@@ -1794,6 +1808,14 @@
         }
       ],
       "exports": [
+        {
+          "kind": "js",
+          "name": "messageTimestampTemplate",
+          "declaration": {
+            "name": "messageTimestampTemplate",
+            "module": "src/main/main.template.ts"
+          }
+        },
         {
           "kind": "js",
           "name": "FoundationAiAssistantTemplate",
@@ -2232,6 +2254,42 @@
               },
               "description": "Current user-facing toggle state for agent switch indicator visibility."
             },
+            {
+              "kind": "field",
+              "name": "timestampDisplay",
+              "type": {
+                "text": "TimestampDisplay"
+              },
+              "description": "When each message shows its timestamp — `'off'`, `'hover'` (default) or `'always'`.\n\nFalls back to `DEFAULT_TIMESTAMP_DISPLAY` rather than `'off'` when there is no\nstore yet: this preference defaults ON, so the pre-store render must match the state\nthe baseline is about to resolve to, or timestamps would visibly pop in on connect."
+            },
+            {
+              "kind": "field",
+              "name": "timestampClock",
+              "type": {
+                "text": "number"
+              },
+              "description": "Epoch ms the transcript's relative timestamps are measured against.\n\nA relative label is only correct at the instant it renders: FAST evaluates the\nbinding once, and an idle conversation never re-renders, so \"2 minutes ago\" would\nstill read \"2 minutes ago\" an hour later. Making the formatter read this observable\ninstead of `Date.now()` gives every row one shared, invalidatable clock — a tick\nre-evaluates them all."
+            },
+            {
+              "kind": "field",
+              "name": "_timestampClockTimer",
+              "type": {
+                "text": "ReturnType<typeof setInterval> | undefined"
+              },
+              "privacy": "private",
+              "description": "Handle for the `TIMESTAMP_CLOCK_INTERVAL_MS` ticker; undefined while stopped."
+            },
+            {
+              "kind": "method",
+              "name": "syncTimestampClock",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "Start or stop the timestamp clock to match the current mode and connection state.\n\nIdempotent, and safe to call from either lifecycle end — it is driven from\n`connectedCallback`, `disconnectedCallback` and the `timestampDisplay` setter, which\ncan fire in any order. Nothing runs while the mode is `'off'` (no binding reads the\nclock) or while disconnected (a timer outliving its element is a leak, and a\npopped-out view disconnects without the session ending)."
+            },
             {
               "kind": "field",
               "name": "enabledAnimations",
@@ -2797,6 +2855,78 @@
               "default": "false",
               "description": "True while `downloadDebugLog` is building the log (GENC-1351 §5.8). Drives the\ndownload button's disabled + spinner state — the lifetime-stitch path is async\n(a provider `loadDiagnostics` round-trip), so without feedback a click looks\nlike nothing happened. Per-instance and transient (not shared/persisted): each\nelement has its own settings modal."
             },
+            {
+              "kind": "field",
+              "name": "submittingDebugLog",
+              "type": {
+                "text": "boolean"
+              },
+              "default": "false",
+              "description": "True while `submitDebugLog` is building and handing off the log. Same role as\n`downloadingDebugLog` for the Send button: the lifetime-stitch and the host's\n`send` callback are async, so the button needs a visible in-flight state."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitResult",
+              "type": {
+                "text": "'sent' | 'error' | null"
+              },
+              "default": "null",
+              "description": "Outcome of the last log submission, shown briefly on the button ('Sent' /\n'Failed — retry') then cleared by `setDebugLogSubmitResult`'s timer. `null` when idle."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitResultTimer",
+              "type": {
+                "text": "ReturnType<typeof setTimeout> | undefined"
+              },
+              "privacy": "private",
+              "description": "Timer that clears `debugLogSubmitResult` back to idle."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogComposeOpen",
+              "type": {
+                "text": "boolean"
+              },
+              "default": "false",
+              "description": "Whether the agent-log compose box (note + Send/Cancel) is open. Opened by the row's\nSend button when `debugLogSubmit.note` is not `false`; closed by Cancel or a\nsuccessful send. Stays open after a failure so the typed note is not lost."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogNote",
+              "type": {
+                "text": "string"
+              },
+              "default": "''",
+              "description": "The note typed in the compose box, raw (trimmed only at submit time)."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogNoteEl",
+              "type": {
+                "text": "HTMLElement | undefined"
+              },
+              "description": "Bound to the compose box's text-area via the template ref, for focus on open."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitResultFlashMs",
+              "default": "4000",
+              "description": "How long 'Sent' shows before idle. Overridable so tests need not wait 4 seconds.",
+              "type": {
+                "text": "number"
+              }
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitGeneration",
+              "type": {
+                "text": "number"
+              },
+              "privacy": "private",
+              "default": "0",
+              "description": "Bumped by `resetDebugLogSubmitState`. An in-flight `submitDebugLog` captures it and\ndrops its continuation when a reset (disconnect, session switch, Clear) happened\nwhile it awaited — otherwise the stale submission would write state, arm a timer on\na torn-down element, or report 'Sent' into a session it never belonged to."
+            },
             {
               "kind": "field",
               "name": "settingsModalTab",
@@ -4049,6 +4179,105 @@
               "description": "Whether session token usage should render on the Usage tab.",
               "readonly": true
             },
+            {
+              "kind": "field",
+              "name": "settingsAgentLogSectionVisible",
+              "type": {
+                "text": "boolean"
+              },
+              "description": "Whether the settings \"Agent log\" section renders — shown when either action is\nenabled: the download button (`allowDebugDownload`) or the host-transport Send\nbutton (`debugLogSubmit`). Each button is additionally gated on its own flag\ninside the section, so a host can enable one without the other.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogNoteConfig",
+              "type": {
+                "text": "ResolvedDebugLogNoteConfig | null"
+              },
+              "description": "The resolved compose-box settings for the agent-log Send button, or `null` when the\nhost opted out (`debugLogSubmit.note: false`) and the button sends on first click.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogNoteMissing",
+              "type": {
+                "text": "boolean"
+              },
+              "description": "Whether the typed note counts as empty — the ONE emptiness rule, shared by the\ncompose box's disabled state and its \"required\" hint so the two cannot drift apart.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitLabel",
+              "type": {
+                "text": "string"
+              },
+              "description": "The Send button's idle label, as the host configured it.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitButtonLabel",
+              "type": {
+                "text": "string"
+              },
+              "description": "Label on the agent-log row's Send button. While the compose box is open the row\nbutton is just the (disabled) trigger, so it keeps its idle label; otherwise it\nreflects the in-flight / flashed outcome of the last submission.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogComposeHint",
+              "type": {
+                "text": "string"
+              },
+              "description": "The compose box's footer hint: a failure first, then the \"required\" nudge, else the\nlive counter. Visual only — the same information reaches assistive technology via\n`debugLogNoteAriaLabel` (counter, required) and `debugLogSubmitAnnouncement` (outcome),\nbecause IDREF attributes such as `aria-describedby` cannot point across the\ndesign-system text-area's shadow boundary.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogNoteAriaLabel",
+              "type": {
+                "text": "string"
+              },
+              "description": "Accessible name for the note. Deliberately STATIC apart from \"(required)\": a name\nthat changed per keystroke would be re-read in full by NVDA on every key and never\nupdated by JAWS. The running count reaches AT through `debugLogSubmitAnnouncement`\nat the thresholds where it matters.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSubmitAnnouncement",
+              "type": {
+                "text": "string"
+              },
+              "description": "Text for the always-present live region beside the agent-log row, so the outcome of\na submission is announced even when the compose box is closed or opted out\n(`note: false`), where the only visible change is the button label.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogRowDescription",
+              "type": {
+                "text": "string"
+              },
+              "description": "The agent-log row's description, phrased for whichever actions the host enabled.\nSend is called out as transmitting: Download keeps the log on the user's machine,\nSend hands the full conversation to wherever the host's transport delivers it.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogSendDisabled",
+              "type": {
+                "text": "boolean"
+              },
+              "description": "Whether the compose box's Send button is inert: a send is already in flight, or the\nhost made the note required and it is still blank.",
+              "readonly": true
+            },
+            {
+              "kind": "field",
+              "name": "debugLogNoteCounter",
+              "type": {
+                "text": "string"
+              },
+              "description": "Live \"typed / max\" counter for the compose box.",
+              "readonly": true
+            },
             {
               "kind": "field",
               "name": "settingsCogVisible",
@@ -4245,68 +4474,59 @@
             },
             {
               "kind": "method",
-              "name": "buildDownloadLog",
-              "privacy": "private",
+              "name": "submitDebugLog",
               "return": {
                 "type": {
-                  "text": "Promise<DebugLog>"
+                  "text": "Promise<void>"
                 }
               },
-              "description": "The log to download (GENC-1351 §5.8). When the provider persists diagnostics,\nstitch the **whole lifetime** stream (every page load) rather than just the\ncurrent page's in-memory view: flush the current delta first so it's included,\nthen reassemble everything `loadDiagnostics` returns. Independent of \"remember\nchat\" — diagnostics are a forensic stream keyed on provider capability, not on\nwhether the *chat* is remembered (like preferences). Falls back to the live\ncurrent-page log when diagnostics isn't available or the fetch fails.\n\nThe stored `meta-snapshot`s are replaced by a fresh one (`withFreshMetaSnapshot`)\nbefore reassembly. The persisted stream only re-appends that block when the\nnear-static config signature changes (see `collectDiagnosticsDelta`), so on a session\nwhose config never changes the newest STORED snapshot is the first one — its\n`context` half (session cost/usage, context tokens, live agent state) frozen seconds\ninto the session, which is how a lifetime log came out reporting near-zero spend\nagainst a transcript full of priced messages."
+              "description": "Hand the agent log to the host's `ui.debugLogSubmit.send` callback — the Send\nbutton next to Download. Reuses `buildDownloadLog`, so the submitted log is\nbyte-identical to what Download saves (lifetime-stitched when the provider\npersists diagnostics). The assistant is vendor-agnostic: the callback owns the\ntransport (Sentry feedback, a support API, an upload endpoint). Outcome lands in\n`debugLogSubmitResult` so the button can flash 'Sent'/'Failed'; failures also go\nto the logger with the cause."
+            },
+            {
+              "kind": "field",
+              "name": "debugLogAgentName",
+              "type": {
+                "text": "string"
+              },
+              "privacy": "private",
+              "description": "The agent name stamped on the log: the active agent, else the header title.",
+              "readonly": true
             },
             {
               "kind": "method",
-              "name": "persister",
+              "name": "debugLogFilename",
               "privacy": "private",
               "return": {
                 "type": {
-                  "text": "SessionPersister | undefined"
+                  "text": "string"
                 }
               },
-              "description": "The shared per-session `SessionPersister` that owns restore-core\nsave/restore/freeze (GENC-1351 §5.10). Created once per `stateKey` and shared by\nevery element view (bubble + panel) via the registry, so there is a single save\ntimer + carry-forward cache — no per-view double-writes. The deps are getters so\nthe persister always reads the current driver/store/config and never holds a\nstale reference. `undefined` before the session key is available."
+              "description": "Filename for the agent log — the ONE derivation Download saves under and Send hands\nto the host, so `ChatDebugLogSubmission.filename`'s \"same stem as the download\"\npromise is enforced rather than relying on two copies agreeing."
             },
             {
               "kind": "method",
-              "name": "buildPersisterDeps",
+              "name": "resetDebugLogSubmitState",
               "privacy": "private",
               "return": {
                 "type": {
-                  "text": "SessionPersisterDeps"
+                  "text": "void"
                 }
               },
-              "parameters": [
-                {
-                  "name": "key",
-                  "type": {
-                    "text": "string"
-                  }
-                }
-              ],
-              "description": "The `SessionPersister` dependency getters bound to THIS element + `key`.\nThe host-owned getters (`getPersistence`/`getAgentNames`/`getDiagnosticEntries`)\nread the live element; `getDriver`/`getStore` resolve by key from the registries.\nRebound onto the shared persister on every activation (see `activateSession`) so\na remounted element becomes the live source, not the torn-down creator (GENC-1351 §5.10 / #7)."
+              "description": "Back to idle: nothing in flight, no flash, no open compose box, no note. Called on\ndisconnect and on a session switch / Clear (a note typed against one conversation\nmust not caption the next one's log). On disconnect — the\nflash timer would otherwise fire against a torn-down element, and clearing ONLY the\ntimer would strand `debugLogSubmitResult` at 'sent'/'error' for good on a pop-out /\npop-in (nothing else resets it), with the box remounting open on a stale note."
             },
             {
               "kind": "method",
-              "name": "reportPersistenceBroken",
+              "name": "openDebugLogCompose",
               "return": {
                 "type": {
                   "text": "void"
                 }
               },
-              "parameters": [
-                {
-                  "name": "overrides",
-                  "optional": true,
-                  "type": {
-                    "text": "{\n    message?: string;\n    detail?: string;\n    source?: string;\n  }"
-                  },
-                  "description": "`message` replaces the body; `detail` adds/replaces the second line;\n`source` identifies the reporter so its own recovery withdraws only its own warning. Give\neach independent keyspace its own id — see `brokenSources` for what sharing one costs."
-                }
-              ],
-              "description": "Tell the user their work is no longer being saved, and block until they reload (GENC-1511).\n\nPublic because the assistant is not the only thing that persists. Its own persister covers\n`sessions/<key>`; a host may own other keyspaces whose failure is just as costly — Create's\n`projects/<id>.json` holds the entity model, handlers and VFS, i.e. the app itself — and had\nno way to reach this modal (§17 of the GENC-1511 plan).\n\nBoth copy fields are optional and default to the session wording in the template, so the\ncommon case stays a bare call. Idempotent per source while already broken: re-reporting the\nsame source refreshes its copy, and the property change only shows a modal that is not open."
+              "description": "The row's Send button. With a compose box configured (the default) it opens the box\nand focuses the note so the user can caption the log; with `note: false` it sends\nstraight away, as before."
             },
             {
               "kind": "method",
-              "name": "reportPersistenceRecovered",
+              "name": "noteDebugLogInput",
               "return": {
                 "type": {
                   "text": "void"
@@ -4314,92 +4534,222 @@
               },
               "parameters": [
                 {
-                  "name": "source",
-                  "default": "DEFAULT_PERSISTENCE_SOURCE",
+                  "name": "value",
                   "type": {
                     "text": "string"
-                  },
-                  "description": "must match the id the failure was reported under."
+                  }
                 }
               ],
-              "description": "Withdraw one reporter's warning — its save landed, or the host's own store recovered.\n\nOnly `source`'s entry is removed, so a session recovery cannot cancel a host's still-live\nproject failure (GENC-1511, caught in review; see `brokenSources`). The modal closes\nonly once nothing is broken; while anything remains, the copy falls back to the newest\nsurvivor."
+              "description": "The note's `@input`: track the text, and let typing dismiss a standing failure."
             },
             {
               "kind": "method",
-              "name": "syncPersistenceBrokenCopy",
-              "privacy": "private",
+              "name": "cancelDebugLogCompose",
               "return": {
                 "type": {
                   "text": "void"
                 }
               },
-              "description": "Recompute the derived flag and the displayed copy from `brokenSources`.\n\nCopy order is last-in-wins, which is both deterministic (`Map` iterates in insertion order)\nand the behaviour a reader expects — the most recent failure is the one described. Setting\n`persistenceBroken` last means the modal is only ever shown or closed once the copy backing\nit is already correct."
+              "description": "Close the compose box and discard the typed note."
             },
             {
               "kind": "method",
-              "name": "onPersistenceBroken",
+              "name": "restoreDebugLogTriggerFocus",
               "privacy": "private",
               "return": {
                 "type": {
                   "text": "void"
                 }
               },
-              "parameters": [
-                {
-                  "name": "d",
-                  "type": {
-                    "text": "{\n    unsavedMessages: number;\n    lastSavedAt?: string;\n    reason: string;\n  }"
-                  }
-                }
-              ],
-              "description": "This element's own persister said the session snapshot is not landing (GENC-1511)."
+              "description": "Closing the compose box unmounts the focused text-area, which drops focus to the\ndocument body and strands keyboard and screen-reader users. Hand it back to the row's\nSend button — next frame, once the `when` block has torn down and the button, disabled\nwhile the box was open, is interactive again."
             },
             {
               "kind": "method",
-              "name": "onPersistenceRecovered",
+              "name": "restoreDebugLogRetryFocus",
               "privacy": "private",
               "return": {
                 "type": {
                   "text": "void"
                 }
               },
-              "description": "A session save landed after a broken episode — withdraw OUR warning only (GENC-1511).\n\nThe explicit source is the whole point: a host's project store may still be failing, and\nbefore this was per-source a session recovery closed that modal too."
-            },
-            {
-              "kind": "method",
-              "name": "reloadForPersistence",
-              "return": {
-                "type": {
-                  "text": "void"
-                }
-              },
-              "description": "The modal's only action. A reload re-reads the stored snapshot, which is plain data parsed\nfrom the server, so it also clears the serialisation fault that is the most likely cause."
+              "description": "After a FAILED send the controls come back but the element that started the send\nwas disabled meanwhile, so focus has already dropped to the document body. Put it\nwhere the retry happens: the note when the box is open, else the row trigger."
             },
             {
               "kind": "method",
-              "name": "initPersistenceForNewStore",
+              "name": "setDebugLogSubmitResult",
               "privacy": "private",
               "return": {
                 "type": {
-                  "text": "Promise<void>"
+                  "text": "void"
                 }
               },
               "parameters": [
                 {
-                  "name": "key",
+                  "name": "result",
                   "type": {
-                    "text": "string"
+                    "text": "'sent' | 'error'"
                   }
                 }
               ],
-              "description": "First-load persistence init for a freshly created store (GENC-1351). Restores\nthe user's remembered persistence-toggle choice — kept independently of the\nsession snapshot so it survives a clear; the host-configured `enabled` is only\nthe default for a first-ever load — then auto-restores the session when\npersistence is (now) on."
+              "description": "Record the submit outcome. 'sent' flashes and falls back to idle; 'error' PERSISTS\nuntil the user acts (types, reopens the box, cancels, or retries) — a failure that\nsilently reverted to the counter after four seconds left no trace it had happened."
             },
             {
               "kind": "method",
-              "name": "triggerFileInput",
+              "name": "buildDownloadLog",
+              "privacy": "private",
               "return": {
                 "type": {
-                  "text": "void"
+                  "text": "Promise<DebugLog>"
+                }
+              },
+              "description": "The log to download (GENC-1351 §5.8). When the provider persists diagnostics,\nstitch the **whole lifetime** stream (every page load) rather than just the\ncurrent page's in-memory view: flush the current delta first so it's included,\nthen reassemble everything `loadDiagnostics` returns. Independent of \"remember\nchat\" — diagnostics are a forensic stream keyed on provider capability, not on\nwhether the *chat* is remembered (like preferences). Falls back to the live\ncurrent-page log when diagnostics isn't available or the fetch fails.\n\nThe stored `meta-snapshot`s are replaced by a fresh one (`withFreshMetaSnapshot`)\nbefore reassembly. The persisted stream only re-appends that block when the\nnear-static config signature changes (see `collectDiagnosticsDelta`), so on a session\nwhose config never changes the newest STORED snapshot is the first one — its\n`context` half (session cost/usage, context tokens, live agent state) frozen seconds\ninto the session, which is how a lifetime log came out reporting near-zero spend\nagainst a transcript full of priced messages."
+            },
+            {
+              "kind": "method",
+              "name": "persister",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "SessionPersister | undefined"
+                }
+              },
+              "description": "The shared per-session `SessionPersister` that owns restore-core\nsave/restore/freeze (GENC-1351 §5.10). Created once per `stateKey` and shared by\nevery element view (bubble + panel) via the registry, so there is a single save\ntimer + carry-forward cache — no per-view double-writes. The deps are getters so\nthe persister always reads the current driver/store/config and never holds a\nstale reference. `undefined` before the session key is available."
+            },
+            {
+              "kind": "method",
+              "name": "buildPersisterDeps",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "SessionPersisterDeps"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "key",
+                  "type": {
+                    "text": "string"
+                  }
+                }
+              ],
+              "description": "The `SessionPersister` dependency getters bound to THIS element + `key`.\nThe host-owned getters (`getPersistence`/`getAgentNames`/`getDiagnosticEntries`)\nread the live element; `getDriver`/`getStore` resolve by key from the registries.\nRebound onto the shared persister on every activation (see `activateSession`) so\na remounted element becomes the live source, not the torn-down creator (GENC-1351 §5.10 / #7)."
+            },
+            {
+              "kind": "method",
+              "name": "reportPersistenceBroken",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "overrides",
+                  "optional": true,
+                  "type": {
+                    "text": "{\n    message?: string;\n    detail?: string;\n    source?: string;\n  }"
+                  },
+                  "description": "`message` replaces the body; `detail` adds/replaces the second line;\n`source` identifies the reporter so its own recovery withdraws only its own warning. Give\neach independent keyspace its own id — see `brokenSources` for what sharing one costs."
+                }
+              ],
+              "description": "Tell the user their work is no longer being saved, and block until they reload (GENC-1511).\n\nPublic because the assistant is not the only thing that persists. Its own persister covers\n`sessions/<key>`; a host may own other keyspaces whose failure is just as costly — Create's\n`projects/<id>.json` holds the entity model, handlers and VFS, i.e. the app itself — and had\nno way to reach this modal (§17 of the GENC-1511 plan).\n\nBoth copy fields are optional and default to the session wording in the template, so the\ncommon case stays a bare call. Idempotent per source while already broken: re-reporting the\nsame source refreshes its copy, and the property change only shows a modal that is not open."
+            },
+            {
+              "kind": "method",
+              "name": "reportPersistenceRecovered",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "source",
+                  "default": "DEFAULT_PERSISTENCE_SOURCE",
+                  "type": {
+                    "text": "string"
+                  },
+                  "description": "must match the id the failure was reported under."
+                }
+              ],
+              "description": "Withdraw one reporter's warning — its save landed, or the host's own store recovered.\n\nOnly `source`'s entry is removed, so a session recovery cannot cancel a host's still-live\nproject failure (GENC-1511, caught in review; see `brokenSources`). The modal closes\nonly once nothing is broken; while anything remains, the copy falls back to the newest\nsurvivor."
+            },
+            {
+              "kind": "method",
+              "name": "syncPersistenceBrokenCopy",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "Recompute the derived flag and the displayed copy from `brokenSources`.\n\nCopy order is last-in-wins, which is both deterministic (`Map` iterates in insertion order)\nand the behaviour a reader expects — the most recent failure is the one described. Setting\n`persistenceBroken` last means the modal is only ever shown or closed once the copy backing\nit is already correct."
+            },
+            {
+              "kind": "method",
+              "name": "onPersistenceBroken",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "d",
+                  "type": {
+                    "text": "{\n    unsavedMessages: number;\n    lastSavedAt?: string;\n    reason: string;\n  }"
+                  }
+                }
+              ],
+              "description": "This element's own persister said the session snapshot is not landing (GENC-1511)."
+            },
+            {
+              "kind": "method",
+              "name": "onPersistenceRecovered",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "A session save landed after a broken episode — withdraw OUR warning only (GENC-1511).\n\nThe explicit source is the whole point: a host's project store may still be failing, and\nbefore this was per-source a session recovery closed that modal too."
+            },
+            {
+              "kind": "method",
+              "name": "reloadForPersistence",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "The modal's only action. A reload re-reads the stored snapshot, which is plain data parsed\nfrom the server, so it also clears the serialisation fault that is the most likely cause."
+            },
+            {
+              "kind": "method",
+              "name": "initPersistenceForNewStore",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "Promise<void>"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "key",
+                  "type": {
+                    "text": "string"
+                  }
+                }
+              ],
+              "description": "First-load persistence init for a freshly created store (GENC-1351). Restores\nthe user's remembered persistence-toggle choice — kept independently of the\nsession snapshot so it survives a clear; the host-configured `enabled` is only\nthe default for a first-ever load — then auto-restores the session when\npersistence is (now) on."
+            },
+            {
+              "kind": "method",
+              "name": "triggerFileInput",
+              "return": {
+                "type": {
+                  "text": "void"
                 }
               }
             },
@@ -6785,6 +7135,119 @@
       "declarations": [],
       "exports": []
     },
+    {
+      "kind": "javascript-module",
+      "path": "src/utils/format-message-timestamp.ts",
+      "declarations": [
+        {
+          "kind": "variable",
+          "name": "ABSOLUTE_FORMAT_OPTIONS",
+          "type": {
+            "text": "Intl.DateTimeFormatOptions"
+          },
+          "default": "{\n  day: 'numeric',\n  month: 'short',\n  year: 'numeric',\n  hour: '2-digit',\n  minute: '2-digit',\n  hourCycle: 'h23',\n}",
+          "description": "Field selection for the absolute tier.\n\nExported so tests can build their expectation from the same options rather than from a\nliteral: every field below renders differently per locale and time zone, so asserting\n`\"Sep\"` or `\"10\"` only asserts the machine the test happened to run on.\n\nLocale is left undefined so it follows the user's, and `hourCycle: 'h23'` pins the clock\nto 24-hour regardless — a locale-chosen 12-hour clock would add \"am\"/\"pm\" and widen the\nstring next to the sender name."
+        },
+        {
+          "kind": "function",
+          "name": "formatMessageTimestamp",
+          "return": {
+            "type": {
+              "text": ""
+            }
+          },
+          "parameters": [
+            {
+              "name": "iso",
+              "type": {
+                "text": "string | undefined"
+              },
+              "description": "ISO-8601 timestamp, as stamped by the driver on append."
+            },
+            {
+              "name": "now",
+              "type": {
+                "text": "number"
+              },
+              "description": "Current epoch ms. Passed in rather than read, so tests pin the clock."
+            }
+          ],
+          "description": "Display text for a message timestamp, per the tiers above.\n\nA timestamp slightly in the future (clock skew between a server-stamped message and the\nbrowser) reads `Now` rather than a negative count — \"-3 minutes ago\" looks broken and\ntells the user nothing. That indulgence is bounded at an hour: beyond it the stamp is\nnot skew but bad data (a machine with a badly wrong clock, a hand-edited session), and\nshowing `Now` forever on every message would hide that. Past the bound it falls through\nto the absolute tier, which shows the user what the data actually says."
+        },
+        {
+          "kind": "function",
+          "name": "formatAbsoluteTimestamp",
+          "return": {
+            "type": {
+              "text": ""
+            }
+          },
+          "parameters": [
+            {
+              "name": "iso",
+              "type": {
+                "text": "string | undefined"
+              },
+              "description": "ISO-8601 timestamp, as stamped by the driver on append."
+            }
+          ],
+          "description": "The absolute rendering of a stamp, whatever its age — the accessible text behind a\nmessage timestamp.\n\nExists because the visible text is relative and a screen reader announces the element's\nTEXT, not its `datetime` attribute: `<time>` carries no implicit ARIA role, so the\nmachine-readable value reaches tooling and nobody else. The template pairs this with\n`aria-hidden` on the relative string so assistive tech hears one unambiguous time\ninstead of \"5 minutes ago\" with no anchor."
+        },
+        {
+          "kind": "function",
+          "name": "messageTimestampDateTime",
+          "return": {
+            "type": {
+              "text": "string | null"
+            }
+          },
+          "parameters": [
+            {
+              "name": "iso",
+              "type": {
+                "text": "string | undefined"
+              },
+              "description": "ISO-8601 timestamp, as stamped by the driver on append."
+            }
+          ],
+          "description": "The `datetime` attribute value for the rendered `<time>` element — the raw ISO string,\nwhich is what the HTML spec wants and what date-aware tooling reads. It is NOT an\naccessibility affordance: screen readers announce the element's text content instead.\n\nReturns `null`, not `''`, for a missing or unparseable stamp: FAST removes an attribute\nonly for `null`/`undefined` (see `DOM.setAttribute`), so an empty string would emit\n`datetime=\"\"`, which is invalid per spec and flagged by HTML validators."
+        }
+      ],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "ABSOLUTE_FORMAT_OPTIONS",
+          "declaration": {
+            "name": "ABSOLUTE_FORMAT_OPTIONS",
+            "module": "src/utils/format-message-timestamp.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "formatMessageTimestamp",
+          "declaration": {
+            "name": "formatMessageTimestamp",
+            "module": "src/utils/format-message-timestamp.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "formatAbsoluteTimestamp",
+          "declaration": {
+            "name": "formatAbsoluteTimestamp",
+            "module": "src/utils/format-message-timestamp.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "messageTimestampDateTime",
+          "declaration": {
+            "name": "messageTimestampDateTime",
+            "module": "src/utils/format-message-timestamp.ts"
+          }
+        }
+      ]
+    },
     {
       "kind": "javascript-module",
       "path": "src/utils/format-usd.ts",
@@ -7406,30 +7869,160 @@
     },
     {
       "kind": "javascript-module",
-      "path": "src/utils/resolve-preference-baseline.ts",
-      "declarations": [],
-      "exports": []
-    },
-    {
-      "kind": "javascript-module",
-      "path": "src/utils/resolve-turn-input.ts",
+      "path": "src/utils/resolve-debug-log-note.ts",
       "declarations": [
         {
-          "kind": "function",
-          "name": "resolveTurnInput",
-          "return": {
-            "type": {
-              "text": "Promise<T | undefined>"
-            }
+          "kind": "variable",
+          "name": "DEBUG_LOG_NOTE_DEFAULT_MAX_LENGTH",
+          "type": {
+            "text": "number"
           },
-          "parameters": [
-            {
-              "name": "input",
-              "type": {
-                "text": "T | ((ctx: SystemPromptContext) => T | Promise<T>) | undefined"
-              }
-            },
-            {
+          "default": "500",
+          "description": "Default cap on the user's note. Short by design — it is a caption for the log, not a report."
+        },
+        {
+          "kind": "variable",
+          "name": "DEBUG_LOG_NOTE_DEFAULT_PLACEHOLDER",
+          "type": {
+            "text": "string"
+          },
+          "default": "'What were you doing, or what went wrong? (optional)'",
+          "description": "Default prompt in the empty note."
+        },
+        {
+          "kind": "variable",
+          "name": "DEBUG_LOG_NOTE_REQUIRED_PLACEHOLDER",
+          "type": {
+            "text": "string"
+          },
+          "default": "'What were you doing, or what went wrong?'",
+          "description": "The same prompt for a `required` note — \"(optional)\" would contradict the disabled Send."
+        },
+        {
+          "kind": "function",
+          "name": "resolveDebugLogNoteConfig",
+          "return": {
+            "type": {
+              "text": "ResolvedDebugLogNoteConfig | null"
+            }
+          },
+          "parameters": [
+            {
+              "name": "config",
+              "type": {
+                "text": "ChatDebugLogSubmitConfig | undefined"
+              }
+            }
+          ],
+          "description": "Resolve `debugLogSubmit.note` — `undefined`/`true` mean \"compose box with defaults\",\n`false` means \"no compose box, send on first click\" (→ `null`), and an object customises\nthe box. Keeps the template free of the boolean-or-object dance."
+        },
+        {
+          "kind": "function",
+          "name": "normalizeDebugLogNote",
+          "return": {
+            "type": {
+              "text": "string | undefined"
+            }
+          },
+          "parameters": [
+            {
+              "name": "note",
+              "type": {
+                "text": "string"
+              }
+            }
+          ],
+          "description": "Normalise the typed note for the submission: trimmed, and `undefined` when empty so a\nhost can `message ?? fallback` without checking for whitespace."
+        }
+      ],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "DEBUG_LOG_NOTE_DEFAULT_MAX_LENGTH",
+          "declaration": {
+            "name": "DEBUG_LOG_NOTE_DEFAULT_MAX_LENGTH",
+            "module": "src/utils/resolve-debug-log-note.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "DEBUG_LOG_NOTE_DEFAULT_PLACEHOLDER",
+          "declaration": {
+            "name": "DEBUG_LOG_NOTE_DEFAULT_PLACEHOLDER",
+            "module": "src/utils/resolve-debug-log-note.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "DEBUG_LOG_NOTE_REQUIRED_PLACEHOLDER",
+          "declaration": {
+            "name": "DEBUG_LOG_NOTE_REQUIRED_PLACEHOLDER",
+            "module": "src/utils/resolve-debug-log-note.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "resolveDebugLogNoteConfig",
+          "declaration": {
+            "name": "resolveDebugLogNoteConfig",
+            "module": "src/utils/resolve-debug-log-note.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "normalizeDebugLogNote",
+          "declaration": {
+            "name": "normalizeDebugLogNote",
+            "module": "src/utils/resolve-debug-log-note.ts"
+          }
+        }
+      ]
+    },
+    {
+      "kind": "javascript-module",
+      "path": "src/utils/resolve-preference-baseline.ts",
+      "declarations": [
+        {
+          "kind": "variable",
+          "name": "DEFAULT_TIMESTAMP_DISPLAY",
+          "type": {
+            "text": "TimestampDisplay"
+          },
+          "default": "'hover'",
+          "description": "The mode used when neither the host config nor stored prefs name a valid one."
+        }
+      ],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "DEFAULT_TIMESTAMP_DISPLAY",
+          "declaration": {
+            "name": "DEFAULT_TIMESTAMP_DISPLAY",
+            "module": "src/utils/resolve-preference-baseline.ts"
+          }
+        }
+      ]
+    },
+    {
+      "kind": "javascript-module",
+      "path": "src/utils/resolve-turn-input.ts",
+      "declarations": [
+        {
+          "kind": "function",
+          "name": "resolveTurnInput",
+          "return": {
+            "type": {
+              "text": "Promise<T | undefined>"
+            }
+          },
+          "parameters": [
+            {
+              "name": "input",
+              "type": {
+                "text": "T | ((ctx: SystemPromptContext) => T | Promise<T>) | undefined"
+              }
+            },
+            {
               "name": "ctx",
               "type": {
                 "text": "SystemPromptContext"
@@ -9095,16 +9688,14 @@
             },
             {
               "kind": "field",
-              "name": "pendingInteractions",
-              "privacy": "private",
-              "default": "new Map<\n    string,\n    {\n      resolve: (value: any) => void;\n      reject: (reason?: any) => void;\n      /** Present when the call requested a chat-input override. */\n      overrideId?: string;\n      /** Present when the call set `timeoutMs`; cleared on resolution. */\n      timeoutHandle?: ReturnType<typeof setTimeout>;\n    }\n  >()"
-            },
-            {
-              "kind": "field",
-              "name": "interactionContexts",
+              "name": "interactions",
+              "type": {
+                "text": "InteractionController"
+              },
               "privacy": "private",
-              "default": "new Map<string, InteractionContextHandle>()",
-              "description": "Live per-interaction contexts (GENC-1390), keyed by interactionId. Created in\n`requestInteraction` alongside the pending entry, disposed + removed in\n`resolveInteraction`. Non-serialisable (sockets, timers, subscriber sets), so\nthey live here on the driver — not on the DOM, not in the persisted store — and\ntherefore survive the element remounts (layout reflow/drag, transcript\nre-render) that this feature exists to make harmless. At most one is live at a\ntime (see the one-interaction-at-a-time guard in `requestInteraction`)."
+              "readonly": true,
+              "description": "Custom UI interactions: the pending call, its live context, and any host to delegate to.",
+              "default": "new InteractionController({\n      sessionKey,\n      activityBus,\n      activeAgentName: () => this.activeAgentName,\n      appendToHistory: (message) => this.appendToHistory(message),\n      patchInteractionMessage: (interactionId, patch) =>\n        this.patchInteractionMessage(interactionId, patch),\n      notifyHistoryUpdated: () => this.notifyHistoryUpdated(),\n      emit: (event) => this.dispatchEvent(event),\n      foldDiagnostics: (interactionId, harvested) =>\n        this.turnRecorder.foldDiagnostics(interactionId, harvested),\n    })"
             },
             {
               "kind": "field",
@@ -9194,15 +9785,6 @@
               },
               "privacy": "private"
             },
-            {
-              "kind": "field",
-              "name": "hostInteractionRequester",
-              "type": {
-                "text": "<T>(\n    componentName: string,\n    data: any,\n    options?: InteractionRequestOptions,\n  ) => Promise<T> | undefined"
-              },
-              "privacy": "private",
-              "description": "When set, `requestInteraction` delegates to this callback instead of using\nthis driver's own pending map. Wired by `invokeSubAgent` so a sub-agent's\nwidget renders in — and resolves through — the parent (ultimately the\nroot) driver, where the main UI is listening."
-            },
             {
               "kind": "field",
               "name": "providerHistoryTransform",
@@ -9362,63 +9944,14 @@
             },
             {
               "kind": "field",
-              "name": "turnSnapshots",
-              "type": {
-                "text": "TurnSnapshot[]"
-              },
-              "privacy": "private",
-              "default": "[]",
-              "description": "Ring buffer of per-LLM-call snapshots. Cap is configurable via\n`chatConfig.agent.maxTurnSnapshots`; older entries drop off as new ones\narrive. See TurnSnapshot for the captured shape."
-            },
-            {
-              "kind": "field",
-              "name": "externalDiagnostics",
-              "type": {
-                "text": "DiagnosticEntry[]"
-              },
-              "privacy": "private",
-              "readonly": true,
-              "default": "[]",
-              "description": "`turn` + `message` diagnostic-log entries harvested from an out-of-band source (a resolved\ninteraction whose widget returned `InteractionResult.diagnostics` — e.g. a server-side\nChatDriver's debug log). `event` entries are NOT kept here — they're folded into the session's\nmeta-event registry via `mergeMetaEvents` (see `resolveInteraction`) so they inherit fresh host\nindices, and reach the log through `getMetaEvents`. Append-only; the host folds these into its\ndebug log alongside this driver's own timeline. Not cleared here — it lives with the driver\ninstance, like `turnSnapshots`, so a new chat (fresh driver) starts empty while a compaction\n(same instance) keeps it. (GENC-1461.)"
-            },
-            {
-              "kind": "field",
-              "name": "externalDiagnosticsBatches",
-              "type": {
-                "text": "number"
-              },
-              "privacy": "private",
-              "default": "0",
-              "description": "Monotonic count of external-diagnostics batches harvested this driver-lifetime. Namespaces each\nbatch's re-keyed `turn` entries so distinct server generations in one chat session can't collide\non `turnIndex` in the forward-capture persister (which dedups turns by that key). (GENC-1461.)"
-            },
-            {
-              "kind": "field",
-              "name": "globalTurnIndex",
-              "type": {
-                "text": "number"
-              },
-              "privacy": "private",
-              "default": "0",
-              "description": "Monotonic counter that survives agent swaps — useful for cross-referencing with history."
-            },
-            {
-              "kind": "field",
-              "name": "debugSnapshotter",
-              "type": {
-                "text": "() => unknown | undefined"
-              },
-              "privacy": "private",
-              "description": "Captured from `applyAgent` so we don't store the whole `AgentConfig`."
-            },
-            {
-              "kind": "field",
-              "name": "maxTurnSnapshots",
+              "name": "turnRecorder",
               "type": {
-                "text": "number"
+                "text": "TurnRecorder"
               },
               "privacy": "private",
               "readonly": true,
-              "default": "maxTurnSnapshots"
+              "description": "Per-turn snapshots, forwarded sub-agent snapshots, and harvested external diagnostics —\neverything the exported debug log draws from this driver.",
+              "default": "new TurnRecorder(sessionKey, maxTurnSnapshots)"
             },
             {
               "kind": "field",
@@ -9727,7 +10260,7 @@
                   "text": "Promise<void>"
                 }
               },
-              "description": "Tear down the driver: aborts the lifecycle signal so any in-flight provider\nrequest (and prompt/tool factories awaiting it) cancels instead of running\non to completion or the transport timeout. Called by the host on driver\nswap and by `OrchestratingDriver.dispose()`. Idempotent.\n\nDeliberately does NOT settle `pendingInteractions` here: dispose is never\nreached while one is pending. The only host-level dispose is the agent-swap\nrebuild, which is guarded by `isBusy()` — a pending interaction keeps the\ntool loop suspended (`busy === true`), so the swap is deferred until the\nwidget resolves. Sub-agent child disposes always have an empty pending map\n(widgets park on the parent via `setHostInteractionRequester`). A pending\ninteraction is instead settled by `resolveInteraction` (user response or\ntimeout), which also stamps history and reverts the chat-input override."
+              "description": "Tear down the driver: aborts the lifecycle signal so any in-flight provider\nrequest (and prompt/tool factories awaiting it) cancels instead of running\non to completion or the transport timeout. Called by the host on driver\nswap and by `OrchestratingDriver.dispose()`. Idempotent.\n\nDeliberately does NOT settle pending interactions here: dispose is never\nreached while one is pending. The only host-level dispose is the agent-swap\nrebuild, which is guarded by `isBusy()` — a pending interaction keeps the\ntool loop suspended (`busy === true`), so the swap is deferred until the\nwidget resolves. Sub-agent child disposes always have an empty pending map\n(widgets park on the parent via `setHostInteractionRequester`). A pending\ninteraction is instead settled by `resolveInteraction` (user response or\ntimeout), which also stamps history and reverts the chat-input override."
             },
             {
               "kind": "method",
@@ -10174,7 +10707,7 @@
                   "text": "ReadonlyArray<TurnSnapshot>"
                 }
               },
-              "description": "Return the per-turn snapshots captured so far. Used by the host's debug\nlog exporter to show what the LLM saw on each turn — system prompt, tool\nsurface, and agent-supplied state (e.g. a machine snapshot).\n\nRing-buffered at `MAX_TURN_SNAPSHOTS`; older entries are dropped."
+              "description": "Return the per-turn snapshots captured so far. Used by the host's debug\nlog exporter to show what the LLM saw on each turn — system prompt, tool\nsurface, and agent-supplied state (e.g. a machine snapshot).\n\nRing-buffered at `maxTurnSnapshots`; older entries are dropped."
             },
             {
               "kind": "method",
@@ -10184,63 +10717,7 @@
                   "text": "ReadonlyArray<DiagnosticEntry>"
                 }
               },
-              "description": "The `turn` + `message` diagnostic-log entries harvested from resolved interactions'\n`InteractionResult.diagnostics` (e.g. a server-side ChatDriver's collated debug log). The host\nconcatenates these into its own debug log so `downloadDebugLog`/the persisted diagnostics stream\ninclude external-engine logs; `event` entries are excluded here because they're merged into the\nsession's meta-event registry instead (see `resolveInteraction`) and reach the log via\n`getMetaEvents`. Opaque, chronologically sorted by the host at assemble time. (GENC-1461.)"
-            },
-            {
-              "kind": "method",
-              "name": "forwardSubAgentSnapshots",
-              "privacy": "private",
-              "return": {
-                "type": {
-                  "text": "void"
-                }
-              },
-              "parameters": [
-                {
-                  "name": "childSnapshots",
-                  "type": {
-                    "text": "ReadonlyArray<TurnSnapshot>"
-                  }
-                }
-              ],
-              "description": "Merge a sub-agent's turn snapshots into this driver's buffer so they surface\nas `kind:'turn'` entries in the exported debug log. The child runs as a\nseparate, discarded driver, so its snapshots would otherwise be lost. Each is\nre-labelled under the parent turn that activated the sub-agent: the child's\nown (numeric) turns become `\"<parentTurn>-1\"`, `\"-2\"`, … (1-based, in order);\nany already-forwarded grand-child labels (strings) have their leading segment\nremapped the same way, so nesting composes (`\"5-2\"` → `\"5-2-1\"`).\n\nNote: two sub-agents invoked in the *same* parent turn share the prefix, so\ntheir labels can repeat — `agentName` on each snapshot disambiguates them."
-            },
-            {
-              "kind": "method",
-              "name": "recordTurnSnapshot",
-              "privacy": "private",
-              "return": {
-                "type": {
-                  "text": "TurnSnapshot"
-                }
-              },
-              "parameters": [
-                {
-                  "name": "resolvedSystemPrompt",
-                  "type": {
-                    "text": "string | undefined"
-                  }
-                },
-                {
-                  "name": "temperature",
-                  "type": {
-                    "text": "number | undefined"
-                  }
-                },
-                {
-                  "name": "toolChoice",
-                  "type": {
-                    "text": "ChatToolChoice | undefined"
-                  }
-                },
-                {
-                  "name": "tailContext",
-                  "type": {
-                    "text": "string | undefined"
-                  }
-                }
-              ],
-              "description": "Push one snapshot to the ring buffer. Called inside `runToolLoop` just\nbefore each LLM call — that's the latest point where the prompt, tool\nsurface, and agent state line up with what the model is about to see.\n\nReturns the pushed object so the caller can back-fill what only the response\nknows (`usage`). Mutating it after the fact is safe whether or not the ring\nbuffer has since evicted it — an evicted snapshot is simply no longer exported."
+              "description": "The `turn` + `message` diagnostic-log entries harvested from resolved interactions'\n`InteractionResult.diagnostics` (e.g. a server-side ChatDriver's collated debug log). The host\nconcatenates these into its own debug log so `downloadDebugLog`/the persisted diagnostics stream\ninclude external-engine logs; `event` entries are excluded here because they're merged into the\nsession's meta-event registry instead and reach the log via `getMetaEvents`. Opaque,\nchronologically sorted by the host at assemble time. (GENC-1461.)"
             },
             {
               "kind": "field",
@@ -10321,7 +10798,8 @@
                     "text": "(history: ChatMessage[]) => ChatMessage[]"
                   }
                 }
-              ]
+              ],
+              "description": "Optional transform applied to conversation history immediately before each LLM request.\nCleared when `undefined`. Does not alter stored history."
             },
             {
               "kind": "method",
@@ -10553,7 +11031,7 @@
                   "description": "a positive delta in USD. Non-finite, zero and negative values are ignored."
                 }
               ],
-              "description": "Add external (non-LLM) spend to an interaction's message AFTER it has resolved.\n\n**Why this exists separately from `resolveInteraction`.** A widget's spend reaches the session\ntotal only through `InteractionResult.costUsd`, which is read exactly once — `resolveInteraction`\ndoes its whole job inside `if (interaction)` and then deletes the entry from\n`pendingInteractions`. That is correct for the resolution itself, but it assumes a widget stops\ncosting money when it resolves, and several deliberately do not: a widget that resolves EARLY so\nthe assistant stops waiting (options shown, a preview rendered) may stay interactive for minutes\nafterwards and do more paid work on the user's behalf. Re-emitting `interaction-completed` does\nnot help — with the interaction gone from the map the call is a silent no-op — so that spend had\nnowhere to go and was simply missing from the figure shown to the user.\n\nAdditive by design: the caller reports a DELTA, not a running total, so repeated calls sum. It\ntouches only `externalCostUsd`; the recorded `interaction.resolved` payload is left exactly as\nthe resolution wrote it, because this is not a second resolution and must not read like one.\n\nDeliberately does NOT require the interaction to be pending, does not resurrect it, and has no\nloading/turn side effects — this is bookkeeping about a turn that already happened."
+              "description": "Add external (non-LLM) spend to an interaction's message AFTER it has resolved — for a widget\nthat resolves early so the assistant stops waiting, then keeps doing paid work on the user's\nbehalf. `InteractionController.recordExternalCost` explains why the resolution path cannot\ncarry this.\n\nAdditive by design: the caller reports a DELTA, not a running total, so repeated calls sum.\n\nDeliberately does NOT require the interaction to be pending, does not resurrect it, and has no\nloading/turn side effects — this is bookkeeping about a turn that already happened."
             },
             {
               "kind": "method",
@@ -10601,22 +11079,28 @@
             },
             {
               "kind": "method",
-              "name": "cancelPendingInteractions",
+              "name": "patchInteractionMessage",
               "privacy": "private",
               "return": {
                 "type": {
-                  "text": "void"
+                  "text": "boolean"
                 }
               },
               "parameters": [
                 {
-                  "name": "message",
+                  "name": "interactionId",
                   "type": {
                     "text": "string"
                   }
+                },
+                {
+                  "name": "patch",
+                  "type": {
+                    "text": "(message: ChatMessage) => ChatMessage"
+                  }
                 }
               ],
-              "description": "Resolve every in-flight interaction with a `'timeout'` result, closing its\nwidget read-only. Used when a sub-agent that owns the open widget times out:\nthe widget is parked in *this* driver's map (interactions resolve on the\nhost, not the child), so cancelling it here unblocks the sub-agent handler\nawaiting it. The \"one interaction at a time\" invariant means there is at\nmost one."
+              "description": "Replace the history message owning `interactionId`. `false` when it is no longer in history.\nDoes not announce the change — the interaction paths differ on whether they should."
             },
             {
               "kind": "method",
@@ -10798,6 +11282,17 @@
                   }
                 }
               ]
+            },
+            {
+              "kind": "method",
+              "name": "notifyHistoryUpdated",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "Announce the current history to the host."
             }
           ],
           "events": [
@@ -10808,43 +11303,25 @@
               }
             },
             {
-              "name": "interaction-start",
-              "type": {
-                "text": "CustomEvent"
-              }
-            },
-            {
-              "name": "external-cost-recorded",
-              "type": {
-                "text": "CustomEvent"
-              }
-            },
-            {
-              "name": "history-updated",
+              "name": "sub-agent-history-updated",
               "type": {
                 "text": "CustomEvent"
               }
             },
             {
-              "name": "interaction-stop",
+              "name": "sub-agent-start",
               "type": {
                 "text": "CustomEvent"
               }
             },
             {
-              "name": "sub-agent-history-updated",
+              "name": "sub-agent-stop",
               "type": {
                 "text": "CustomEvent"
               }
             },
             {
-              "name": "sub-agent-start",
-              "type": {
-                "text": "CustomEvent"
-              }
-            },
-            {
-              "name": "sub-agent-stop",
+              "name": "history-updated",
               "type": {
                 "text": "CustomEvent"
               }
@@ -10881,6 +11358,14 @@
             "module": "./chat-driver.constants"
           }
         },
+        {
+          "kind": "js",
+          "name": "TurnSnapshot",
+          "declaration": {
+            "name": "TurnSnapshot",
+            "module": "./turn-recorder"
+          }
+        },
         {
           "kind": "js",
           "name": "ChatDriver",
@@ -11166,6 +11651,196 @@
         }
       ]
     },
+    {
+      "kind": "javascript-module",
+      "path": "src/components/chat-driver/interaction-controller.ts",
+      "declarations": [
+        {
+          "kind": "class",
+          "description": "Custom UI interactions: parking a tool handler on a widget, and settling it when the user (or a\ntimeout) answers.\n\nOwns the pending call and its live context, which are created and destroyed together. Everything\nelse it needs is the driver's history and event target, reached through `InteractionDeps`.",
+          "name": "InteractionController",
+          "members": [
+            {
+              "kind": "field",
+              "name": "pending",
+              "privacy": "private",
+              "readonly": true,
+              "default": "new Map<string, PendingInteraction>()"
+            },
+            {
+              "kind": "field",
+              "name": "contexts",
+              "privacy": "private",
+              "readonly": true,
+              "default": "new Map<string, InteractionContextHandle>()",
+              "description": "Live per-interaction contexts (GENC-1390), keyed by interactionId. Created in `request`\nalongside the pending entry, disposed + removed in `resolve`. Non-serialisable (sockets,\ntimers, subscriber sets), so they live here — not on the DOM, not in the persisted store — and\ntherefore survive the element remounts (layout reflow/drag, transcript re-render) that this\nfeature exists to make harmless. At most one is live at a time (see the\none-interaction-at-a-time guard in `request`)."
+            },
+            {
+              "kind": "field",
+              "name": "hostRequester",
+              "type": {
+                "text": "<T>(\n    componentName: string,\n    data: any,\n    options?: InteractionRequestOptions,\n  ) => Promise<T> | undefined"
+              },
+              "privacy": "private",
+              "description": "When set, `request` delegates to this callback instead of using this controller's own pending\nmap. Wired by `invokeSubAgent` so a sub-agent's widget renders in — and resolves through — the\nparent (ultimately the root) driver, where the main UI is listening."
+            },
+            {
+              "kind": "method",
+              "name": "setHostRequester",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "fn",
+                  "type": {
+                    "text": "<T>(componentName: string, data: any, options?: InteractionRequestOptions) => Promise<T>"
+                  }
+                }
+              ],
+              "description": "See `ChatDriver.setHostInteractionRequester`."
+            },
+            {
+              "kind": "method",
+              "name": "request",
+              "return": {
+                "type": {
+                  "text": "Promise<T>"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "componentName",
+                  "type": {
+                    "text": "string"
+                  }
+                },
+                {
+                  "name": "data",
+                  "type": {
+                    "text": "any"
+                  }
+                },
+                {
+                  "name": "options",
+                  "optional": true,
+                  "type": {
+                    "text": "InteractionRequestOptions"
+                  }
+                }
+              ],
+              "description": "See `ChatDriver.requestInteraction`."
+            },
+            {
+              "kind": "method",
+              "name": "resolve",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "interactionId",
+                  "type": {
+                    "text": "string"
+                  }
+                },
+                {
+                  "name": "result",
+                  "type": {
+                    "text": "any"
+                  }
+                }
+              ],
+              "description": "See `ChatDriver.resolveInteraction`. Warns and returns when the id is unknown — a widget can\nreport twice, and the second report has nothing left to settle."
+            },
+            {
+              "kind": "method",
+              "name": "recordExternalCost",
+              "return": {
+                "type": {
+                  "text": "boolean"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "interactionId",
+                  "type": {
+                    "text": "string"
+                  }
+                },
+                {
+                  "name": "costUsd",
+                  "type": {
+                    "text": "number"
+                  }
+                }
+              ],
+              "description": "See `ChatDriver.recordExternalCost`.\n\n**Why this exists separately from `resolve`.** A widget's spend reaches the session total only\nthrough `InteractionResult.costUsd`, which is read exactly once — `resolve` does its whole job\nagainst a live pending entry and then deletes it. That is correct for the resolution itself,\nbut it assumes a widget stops costing money when it resolves, and several deliberately do not:\na widget that resolves EARLY so the assistant stops waiting (options shown, a preview\nrendered) may stay interactive for minutes afterwards and do more paid work on the user's\nbehalf. Re-emitting `interaction-completed` does not help — with the interaction gone from the\nmap the call is a silent no-op — so that spend had nowhere to go and was simply missing from\nthe figure shown to the user.\n\nTouches only `externalCostUsd`: the recorded `interaction.resolved` payload is left exactly as\nthe resolution wrote it, because this is not a second resolution and must not read like one."
+            },
+            {
+              "kind": "method",
+              "name": "context",
+              "return": {
+                "type": {
+                  "text": "InteractionContext | undefined"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "interactionId",
+                  "type": {
+                    "text": "string"
+                  }
+                }
+              ],
+              "description": "See `ChatDriver.getInteractionContext`."
+            },
+            {
+              "kind": "method",
+              "name": "cancelAll",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "message",
+                  "type": {
+                    "text": "string"
+                  }
+                }
+              ],
+              "description": "Resolve every in-flight interaction with a `'timeout'` result, closing its\nwidget read-only. Used when a sub-agent that owns the open widget times out:\nthe widget is parked in *this* driver's map (interactions resolve on the\nhost, not the child), so cancelling it here unblocks the sub-agent handler\nawaiting it. The \"one interaction at a time\" invariant means there is at\nmost one."
+            },
+            {
+              "kind": "method",
+              "name": "disposeContexts",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "Drop any live interaction contexts on driver teardown. Normally empty (a context is created\nand destroyed with its pending interaction, and dispose is not reached mid-interaction);\ndisposed defensively so a stray context can never leak an open socket/timer."
+            }
+          ]
+        }
+      ],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "InteractionController",
+          "declaration": {
+            "name": "InteractionController",
+            "module": "src/components/chat-driver/interaction-controller.ts"
+          }
+        }
+      ]
+    },
     {
       "kind": "javascript-module",
       "path": "src/components/chat-driver/turn-failures.ts",
@@ -11258,6 +11933,190 @@
         }
       ]
     },
+    {
+      "kind": "javascript-module",
+      "path": "src/components/chat-driver/turn-recorder.ts",
+      "declarations": [
+        {
+          "kind": "class",
+          "description": "Everything the exported debug log draws from one driver: its own per-LLM-call snapshots, the\nones forwarded up from sub-agents, and the diagnostics harvested from resolved interactions.\n\nAll three feed the same timeline and all three are keyed in this driver's turn space, which is\nwhy they share an owner — a forwarded child turn and a harvested server turn are both re-labelled\nagainst the counter kept here.",
+          "name": "TurnRecorder",
+          "members": [
+            {
+              "kind": "field",
+              "name": "buffer",
+              "type": {
+                "text": "TurnSnapshot[]"
+              },
+              "privacy": "private",
+              "readonly": true,
+              "default": "[]",
+              "description": "Ring buffer of per-LLM-call snapshots, capped at `maxSnapshots`; older entries drop off as\nnew ones arrive."
+            },
+            {
+              "kind": "field",
+              "name": "turnIndex",
+              "type": {
+                "text": "number"
+              },
+              "privacy": "private",
+              "default": "0",
+              "description": "Monotonic counter that survives agent swaps — useful for cross-referencing with history."
+            },
+            {
+              "kind": "field",
+              "name": "externalEntries",
+              "type": {
+                "text": "DiagnosticEntry[]"
+              },
+              "privacy": "private",
+              "readonly": true,
+              "default": "[]",
+              "description": "`turn` + `message` diagnostic entries harvested from an out-of-band source. `event` entries\nare NOT kept here — they are folded into the session's meta-event registry so they inherit\nfresh host indices, and reach the log through `getMetaEvents`. Append-only, and never cleared:\nit lives with the recorder, so a new chat (fresh driver) starts empty while a compaction (same\ninstance) keeps it. (GENC-1461.)"
+            },
+            {
+              "kind": "field",
+              "name": "externalBatches",
+              "type": {
+                "text": "number"
+              },
+              "privacy": "private",
+              "default": "0",
+              "description": "Monotonic count of external-diagnostics batches folded this driver-lifetime. Namespaces each\nbatch's re-keyed `turn` entries so distinct server generations in one chat session can't\ncollide on `turnIndex` in the forward-capture persister (which dedups turns by that key)."
+            },
+            {
+              "kind": "field",
+              "name": "snapshotter",
+              "type": {
+                "text": "() => unknown | undefined"
+              },
+              "privacy": "private",
+              "description": "The active agent's `getDebugSnapshot`, captured on install so the whole config isn't held."
+            },
+            {
+              "kind": "method",
+              "name": "setSnapshotter",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "snapshotter",
+                  "optional": true,
+                  "type": {
+                    "text": "() => unknown"
+                  }
+                }
+              ],
+              "description": "Point at the incoming agent's `getDebugSnapshot`, or clear it when the agent supplies none."
+            },
+            {
+              "kind": "method",
+              "name": "snapshots",
+              "return": {
+                "type": {
+                  "text": "ReadonlyArray<TurnSnapshot>"
+                }
+              },
+              "description": "The per-turn snapshots captured so far — what the LLM saw on each turn: system prompt, tool\nsurface, and agent-supplied state (e.g. a machine snapshot)."
+            },
+            {
+              "kind": "method",
+              "name": "externalDiagnostics",
+              "return": {
+                "type": {
+                  "text": "ReadonlyArray<DiagnosticEntry>"
+                }
+              },
+              "description": "The harvested `turn` + `message` diagnostic entries. Opaque, and chronologically sorted by the\nhost at assemble time."
+            },
+            {
+              "kind": "method",
+              "name": "record",
+              "return": {
+                "type": {
+                  "text": "TurnSnapshot"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "turn",
+                  "type": {
+                    "text": "RecordedTurn"
+                  }
+                }
+              ],
+              "description": "Push one snapshot to the ring buffer. Called inside `runToolLoop` just\nbefore each LLM call — that's the latest point where the prompt, tool\nsurface, and agent state line up with what the model is about to see.\n\nReturns the pushed object so the caller can back-fill what only the response\nknows (`usage`). Mutating it after the fact is safe whether or not the ring\nbuffer has since evicted it — an evicted snapshot is simply no longer exported."
+            },
+            {
+              "kind": "method",
+              "name": "forwardSubAgent",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "childSnapshots",
+                  "type": {
+                    "text": "ReadonlyArray<TurnSnapshot>"
+                  }
+                }
+              ],
+              "description": "Merge a sub-agent's turn snapshots into this driver's buffer so they surface\nas `kind:'turn'` entries in the exported debug log. The child runs as a\nseparate, discarded driver, so its snapshots would otherwise be lost. Each is\nre-labelled under the parent turn that activated the sub-agent: the child's\nown (numeric) turns become `\"<parentTurn>-1\"`, `\"-2\"`, … (1-based, in order);\nany already-forwarded grand-child labels (strings) have their leading segment\nremapped the same way, so nesting composes (`\"5-2\"` → `\"5-2-1\"`).\n\nNote: two sub-agents invoked in the *same* parent turn share the prefix, so\ntheir labels can repeat — `agentName` on each snapshot disambiguates them."
+            },
+            {
+              "kind": "method",
+              "name": "foldDiagnostics",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "parameters": [
+                {
+                  "name": "interactionId",
+                  "type": {
+                    "text": "string"
+                  }
+                },
+                {
+                  "name": "harvested",
+                  "type": {
+                    "text": "unknown"
+                  }
+                }
+              ],
+              "description": "Fold a widget's out-of-band diagnostics into this session — typically a server-side\nChatDriver's collated log, arriving on `InteractionResult.diagnostics` — so the host's debug\nlog and persisted diagnostics stream include them. Independent of the interaction's own\nmessage: these describe the widget's work, not that message. A non-array or empty harvest is\na no-op."
+            },
+            {
+              "kind": "method",
+              "name": "trim",
+              "privacy": "private",
+              "return": {
+                "type": {
+                  "text": "void"
+                }
+              },
+              "description": "Hold the ring buffer at its cap, dropping oldest-first."
+            }
+          ]
+        }
+      ],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "TurnRecorder",
+          "declaration": {
+            "name": "TurnRecorder",
+            "module": "src/components/chat-driver/turn-recorder.ts"
+          }
+        }
+      ]
+    },
     {
       "kind": "javascript-module",
       "path": "src/components/chat-interaction-wrapper/chat-interaction-wrapper.styles.ts",
@@ -12627,7 +13486,7 @@
         {
           "kind": "variable",
           "name": "settingsModalStyles",
-          "default": "css`\n  /*\n   * Section headings come from the shared fragment the package also exports, so a host titling\n   * its own slotted section applies the same rule rather than a copy of it.\n   */\n  ${assistantSettingsSectionTitleStyles}\n\n  *,\n  *::before,\n  *::after {\n    box-sizing: border-box;\n  }\n\n  .settings-modal {\n    --ai-tier-badge-bg-mix: 14%;\n    --ai-tier-badge-text-lighten: 18%;\n  }\n\n  .settings-modal::part(dialog) {\n    max-width: 620px;\n    width: calc(100vw - 48px);\n    max-height: calc(100vh - 48px);\n    padding: 0;\n  }\n\n  .settings-modal::part(content) {\n    display: flex;\n    flex-direction: column;\n    min-height: 0;\n    padding: 0;\n    width: 100%;\n  }\n\n  .settings-modal::part(top) {\n    padding: calc(var(--design-unit) * 4px) calc(var(--design-unit) * 5px);\n    border-bottom: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-modal::part(bottom) {\n    padding: calc(var(--design-unit) * 4px) calc(var(--design-unit) * 5px);\n    border-top: 1px solid var(--neutral-stroke-rest);\n    border-bottom-left-radius: var(--card-border-radius, calc(var(--control-corner-radius) * 1px));\n    border-bottom-right-radius: var(--card-border-radius, calc(var(--control-corner-radius) * 1px));\n    background-color: var(--neutral-layer-2);\n  }\n\n  .settings-modal-header {\n    display: flex;\n    align-items: center;\n    min-width: 0;\n  }\n\n  .settings-modal-title {\n    margin: 0;\n    font-size: 16px;\n    font-weight: 600;\n    display: flex;\n    align-items: center;\n    gap: calc(var(--design-unit) * 2px);\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-modal-content {\n    display: flex;\n    flex-direction: column;\n    min-height: 0;\n    flex: 1 1 auto;\n  }\n\n  .settings-modal-tabs::part(tablist) {\n    border-bottom: 0;\n    padding: 0 calc(var(--design-unit) * 5px);\n    column-gap: calc(var(--design-unit) * 5px);\n  }\n\n  .settings-modal-tabs::part(activeIndicator) {\n    height: 2px;\n  }\n\n  .settings-modal-tab {\n    padding: 0;\n    font-weight: 600;\n    gap: 6px;\n  }\n\n  .settings-modal-tab[aria-selected='true'] {\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-modal-tabs::part(tabpanel) {\n    border-top: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-modal-tab-panel {\n    display: flex;\n    flex-direction: column;\n    min-height: 0;\n    flex: 1 1 auto;\n    padding: 0;\n    border-radius: 0;\n  }\n\n  .settings-modal-tab-panel[hidden] {\n    display: none !important;\n  }\n\n  .settings-modal-body {\n    overflow-y: auto;\n    padding: 0 calc(var(--design-unit) * 5px) calc(var(--design-unit) * 2px);\n    max-height: min(60vh, 520px);\n  }\n\n  .settings-modal-section {\n    padding: calc(var(--design-unit) * 5px) 0;\n    border-bottom: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-modal-section:last-child {\n    border-bottom: none;\n  }\n\n  /*\n   * Only the spacing. Everything else about this heading comes from the exported fragment\n   * above, which the assistant and its hosts share; margin is deliberately not in there,\n   * since the gap below a heading depends on the layout around it.\n   */\n  .ai-settings-section-title {\n    margin: 0 0 calc(var(--design-unit) * 3px);\n  }\n\n  .settings-modal-section-note {\n    margin: calc(var(--design-unit) * -2px) 0 calc(var(--design-unit) * 3px);\n    font-size: 12px;\n    line-height: 1.5;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-modal-section-body {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-toggle-row {\n    display: flex;\n    align-items: flex-start;\n    gap: calc(var(--design-unit) * 3px);\n    padding: 0 0 calc(var(--design-unit) * 4px) 0;\n    border-bottom: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-toggle-row:last-child {\n    border-bottom: none;\n    padding-bottom: calc(var(--design-unit) * 1px);\n  }\n\n  .settings-toggle-row.is-stacked {\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * For rows whose control is a button rather than a switch. The base row top-aligns, which suits\n   * a switch (it lands level with the title), but a button is tall enough that top-aligning leaves\n   * it above the title-plus-description block it acts on.\n   */\n  .settings-toggle-row.is-centered {\n    align-items: center;\n  }\n\n  .settings-animation-list {\n    display: flex;\n    flex-direction: column;\n    width: 100%;\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1.2px);\n    padding: calc(var(--design-unit) * 2px);\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-animation-list .settings-toggle-row {\n    border: 0;\n  }\n\n  .settings-animation-category {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-animation-category-label {\n    font-weight: 600;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-toggle-row + .settings-animation-category-label {\n    border-top: 1px solid var(--neutral-stroke-rest);\n    padding-top: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-animation-option {\n    padding: 0;\n    margin: 0;\n  }\n\n  .settings-animation-option:last-child {\n    border-bottom: none;\n    padding-bottom: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-toggle-text {\n    flex: 1;\n    min-width: 0;\n  }\n\n  .settings-toggle-title {\n    font-size: 14px;\n    font-weight: 500;\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-toggle-desc {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    line-height: 1.5;\n    max-width: 92%;\n  }\n\n  .settings-toggle-control {\n    flex: 0 0 auto;\n    min-width: 0;\n  }\n\n  .settings-toggle-control-wide {\n    width: 100%;\n    max-width: 280px;\n  }\n\n  .settings-toggle-row.is-stacked .settings-toggle-desc {\n    max-width: none;\n  }\n\n  .settings-toggle-row.is-stacked .settings-toggle-control-wide {\n    width: 100%;\n    max-width: none;\n  }\n\n  /*\n   * Sub-heading over the provider toggle group. Unlike the section headings it sits INSIDE\n   * .settings-modal-section-body, so the parent's 4-unit flex gap already separates it from the\n   * first toggle — and flex does not collapse margins, so the shared rule's 3-unit margin-bottom\n   * would add to that gap rather than replace it, leaving the label adrift from the rows it\n   * names. Zero the margin and pull back 2 of the 4 gap units, expressed in the same token so it\n   * tracks if that gap changes.\n   */\n  .settings-app-toggles-title {\n    margin: 0 0 calc(var(--design-unit) * -2px);\n  }\n\n  .settings-app-toggle-block {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 1px);\n  }\n\n  .settings-toggle-hint {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    line-height: 1.4;\n    padding-left: calc(var(--design-unit) * 1px);\n    font-style: italic;\n  }\n\n  /*\n   * The budget meter (GENC-1464) is the context indicator's money sibling and\n   * shares its row anatomy 1:1, so the budget classes JOIN these rules rather\n   * than restating them — one place to restyle the header/label/figures shape,\n   * and the two indicators cannot drift apart. Design-system tokens only, and\n   * unfallbacked: every token here ships a DS default, so a var(--x, y)\n   * fallback would be dead code that hides a broken token name (#2411/#2436\n   * review rule, pinned by settings-modal.styles.test.ts).\n   */\n  .settings-context-header,\n  .settings-budget-header {\n    display: flex;\n    justify-content: space-between;\n    gap: calc(var(--design-unit) * 2px);\n    margin-bottom: calc(var(--design-unit) * 2px);\n    font-size: 12px;\n  }\n\n  .settings-context-label,\n  .settings-budget-label {\n    color: var(--neutral-foreground-hint);\n    font-size: 11px;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n  }\n\n  .settings-context-tokens,\n  .settings-budget-figures {\n    color: var(--neutral-foreground-rest);\n  }\n\n  /* Freshness footer (GENC-1464): refresh button + label under the vendor\n     rows, left-aligned — a footnote to the figures above it. The button's\n     inline padding is pinned and cancelled by the container margin so the\n     ICON GLYPH (not the button box) sits flush with the budget labels'\n     left edge, whatever the density tokens say. */\n  .settings-budget-toolbar {\n    display: flex;\n    justify-content: flex-start;\n    align-items: center;\n    gap: 4px;\n    margin-inline-start: -4px;\n  }\n\n  .settings-budget-refresh::part(control) {\n    padding-inline: 4px;\n  }\n\n  .settings-budget-updated {\n    color: var(--neutral-foreground-hint);\n    font-size: 11px;\n  }\n\n  /*\n   * ONE rhythm for every meter row. The outer wrapper holds the context\n   * indicator and the budget meter; the inner one holds the budget meter's\n   * vendor rows — and both gap by the same 2 units (half the section body's 4)\n   * so that visually identical meter rows are evenly spaced whatever mix of\n   * them is on screen. Without the wrapper the context row inherits the body's\n   * 4-unit gap while the vendor rows keep 2, and three identical-looking rows\n   * read as an uneven 4/2/2. The wrapper renders only when at least one meter\n   * does — see settingsUsageMetersTemplate for why an always-on one would cost\n   * a stray gap.\n   */\n  .settings-usage-meters,\n  .settings-budget-usage {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-current-build,\n  .settings-lifetime-usage {\n    background: var(--neutral-layer-2);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1.5px);\n    padding: calc(var(--design-unit) * 4px);\n    margin: calc(var(--design-unit) * 3px) 0;\n  }\n\n  /*\n   * Deliberately quieter than the live block: no pulsing badge and no accent, so the eye lands\n   * on what is being built now — which is why that block leads the tab and this one follows,\n   * under the history heading whose rows it totals.\n   */\n  .settings-lifetime-usage-top {\n    display: flex;\n    align-items: center;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 2px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n  }\n\n  .settings-lifetime-label {\n    font-size: 10px;\n    line-height: 1;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-current-build-top {\n    display: flex;\n    align-items: center;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 2px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n  }\n\n  /*\n   * Optically centring these 10px caps against the 14px project name beside them. Flex offers\n   * only two alignments and neither lands it, because a box centre and a text baseline are\n   * different lines:\n   *   - align-items: center   sits the badge baseline about 1.2px high\n   *   - align-items: baseline matches baselines, but the caps then read as bottom-aligned\n   *     against the name's ascenders, so the badge looks low\n   * The eye wants the midpoint, so: centre the boxes, then translate down by the ~1px of\n   * overshoot. This is a nudge, but it corrects a fixed relationship between two font sizes\n   * rather than some neighbouring element's layout, so unlike a margin tuned to a sibling it\n   * cannot rot when that sibling changes. In em, so it tracks the badge text.\n   *\n   * display: block, not inline-flex: a flex container has no text baseline of its own and\n   * synthesizes one from its first child, which here is the dot, an empty span. As a block box\n   * the badge takes the baseline of its first line, i.e. the text.\n   */\n  .settings-live-badge {\n    display: block;\n    font-size: 10px;\n    line-height: 1;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--accent-fill-rest);\n    white-space: nowrap;\n    transform: translateY(0.1em);\n  }\n\n  .settings-live-dot {\n    display: inline-block;\n    width: 7px;\n    height: 7px;\n\n    /* Replaces the flex gap the badge no longer has. */\n    margin-right: calc(var(--design-unit) * 1px);\n\n    /* Centres the dot on the text beside it without disturbing that text's baseline. */\n    vertical-align: middle;\n    border-radius: 50%;\n    background: var(--accent-fill-rest);\n    animation: settings-live-pulse 1.6s ease-out infinite;\n  }\n\n  @keyframes settings-live-pulse {\n    0% {\n      box-shadow: 0 0 0 0 color-mix(in srgb, var(--accent-fill-rest) 55%, transparent);\n    }\n\n    70% {\n      box-shadow: 0 0 0 7px transparent;\n    }\n\n    100% {\n      box-shadow: 0 0 0 0 transparent;\n    }\n  }\n\n  .settings-current-build-name {\n    font-size: 14px;\n    line-height: 1;\n    font-weight: 600;\n  }\n\n  /*\n   * Cost and the token buckets side by side: one number in its own box, the four buckets\n   * sharing the box next to it. Stretch, so the two are the same height however tall the 22px\n   * cost value makes the left one.\n   */\n  .settings-usage-row {\n    display: flex;\n    flex-wrap: wrap;\n    align-items: stretch;\n    gap: calc(var(--design-unit) * 3px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n  }\n\n  .settings-usage-row-tokens {\n    display: flex;\n    flex: 1 1 auto;\n    min-width: 0;\n  }\n\n  .settings-build-stat {\n    min-width: 0;\n    background: var(--neutral-layer-1);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1px);\n    padding: calc(var(--design-unit) * 3px);\n  }\n\n  .settings-build-stat-label {\n    font-size: 10px;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-build-stat-value {\n    font-size: 22px;\n    font-weight: 700;\n    margin-top: calc(var(--design-unit) * 1px);\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-build-stat-value .prefix,\n  .settings-build-stat-value .suffix {\n    color: var(--accent-fill-rest);\n  }\n\n  /*\n   * Per-bucket token split, beneath the headline cost. Small paired label/value cells\n   * rather than four more stat cards: they are the detail behind the cost above, so they\n   * have to read as subordinate to it rather than compete with it. The four buckets ARE\n   * the token figure now — there is no merged total anywhere for them to break down.\n   */\n  .settings-token-breakdown {\n    display: flex;\n    flex-direction: column;\n\n    /*\n     * Tight against the buckets below. One design unit rather than two, because each bucket\n     * separates its own label from its value by only 2px — at two units the title sat four\n     * times further from the bucket labels than they sit from their own numbers, which read\n     * as a gap between unrelated blocks instead of a heading over its content.\n     */\n    gap: calc(var(--design-unit) * 1px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n    padding: calc(var(--design-unit) * 2px) calc(var(--design-unit) * 3px);\n    background: var(--neutral-layer-1);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1px);\n  }\n\n  /*\n   * Titles the box, because nothing else in it named the unit. Same styling and position as\n   * the cost box's label, so two boxes sitting side by side are titled the same way; the\n   * hierarchy against the bucket labels comes from position, not a second type size.\n   */\n  .settings-token-breakdown-label {\n    font-size: 10px;\n    line-height: 1;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-token-buckets {\n    display: flex;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-token-bucket {\n    display: flex;\n\n    /*\n     * min-content (not 0) so a bucket cannot be shrunk narrower than its own unbreakable label.\n     * With the label set to nowrap, a zero minimum would overflow it into the next column instead\n     * of wrapping — so the container's flex-wrap takes over and moves a bucket to a second row,\n     * which is the degradation we want when the modal is dragged narrow.\n     */\n    min-width: min-content;\n    flex-direction: column;\n    gap: 2px;\n  }\n\n  .settings-token-bucket-label {\n    font-size: 10px;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n\n    /*\n     * One line, always. The rate marker is a separate inline box after collapsible whitespace, so\n     * a wrappable label gives it a break opportunity of its own — in a narrow column it orphaned\n     * onto line 2, which also pushed that bucket's value a line below the other three and broke\n     * the row of figures. nowrap removes every break opportunity in the label, the space before\n     * the marker included, so no glue character is needed.\n     */\n    white-space: nowrap;\n  }\n\n  .settings-token-bucket-value {\n    font-size: 13px;\n    font-weight: 600;\n    color: var(--neutral-foreground-rest);\n  }\n\n  /*\n   * The price-direction marker on a cache bucket's label — down for reads (a fraction of the\n   * uncached input rate), up for writes (a premium over it). Three tiers, so a bucket with no\n   * marker is the reference rate rather than an unlabelled fourth case.\n   *\n   * Carried by the label rather than the value, which is what this used to do: cache reads are\n   * usually the largest bucket by a wide margin in an agentic session, so the value was muted to\n   * stop the biggest number reading as the dominant cost driver. That priced the treatment to the\n   * wrong thing — a dimmed 0 (every Gemini cache write) looked disabled next to a normal 0, and a\n   * rate is a property of the bucket, not of this turn's figure.\n   *\n   * Sized down and nudged up rather than tinted: the label is already the hint colour, so a\n   * dimmer marker would vanish and a brighter one would out-shout the word it qualifies.\n   */\n  .settings-token-bucket-rate {\n    font-size: 8px;\n    line-height: 1;\n    vertical-align: 0.15em;\n    letter-spacing: 0;\n  }\n\n  /*\n   * Usage-row overrides. Placed after the base rules they refine rather than up beside\n   * .settings-usage-row itself, because stylelint's no-descending-specificity rejects a\n   * compound selector appearing before the plain one it overrides.\n   */\n\n  /* Sized by its content; the buckets take the rest, since four cells need the width. */\n  .settings-usage-row > .settings-build-stat {\n    flex: 0 1 auto;\n  }\n\n  .settings-usage-row .settings-token-breakdown {\n    flex: 1 1 auto;\n\n    /* The row owns the spacing now; this centres the column against the taller cost box. */\n    justify-content: center;\n    margin-bottom: 0;\n  }\n\n  /*\n   * Basis auto, not 0: a zero basis splits the row into four equal columns, so CACHE WRITE is\n   * squeezed exactly as hard as INPUT despite being twice the label. Sizing from content gives the\n   * long labels the room their text needs and lets the short ones concede it, which is what makes\n   * white-space: nowrap above safe — every column starts at least as wide as its own content,\n   * then shares the slack. Still grows and shrinks, so the four stay flush edge to edge.\n   */\n  .settings-usage-row .settings-token-bucket {\n    flex: 1 1 auto;\n  }\n\n  .settings-model-tags {\n    display: flex;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-model-tag {\n    font-size: 11px;\n    font-weight: 600;\n    padding: 3px 9px;\n    border-radius: 20px;\n    font-family: ui-monospace, monospace;\n    border: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-model-tag,\n  .settings-cost-history-icon {\n    --model-tag-color: var(--neutral-foreground-rest);\n\n    background: color-mix(\n      in srgb,\n      var(--model-tag-color) var(--ai-tier-badge-bg-mix),\n      var(--neutral-layer-1)\n    );\n    border-color: color-mix(in srgb, var(--model-tag-color) 20%, var(--neutral-layer-1));\n    color: color-mix(in srgb, var(--model-tag-color), white var(--ai-tier-badge-text-lighten));\n  }\n\n  .settings-cost-history-title {\n    font-size: 11px;\n    text-transform: uppercase;\n    letter-spacing: 0.08em;\n    color: var(--neutral-foreground-hint);\n    font-weight: 600;\n    margin: calc(var(--design-unit) * 4px) 0 calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * The heading labels the lifetime card as well as the rows, so the card gives up its own top\n   * margin and the gap becomes the heading's alone. Adjacent siblings collapse to the LARGER of\n   * the two margins, so leaving both would space the caps 3 units off the block they label while\n   * the rows below sit at 2 — reading as though the heading belonged to neither.\n   */\n  .settings-cost-history-title + .settings-lifetime-usage {\n    margin-top: 0;\n  }\n\n  .settings-cost-history {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n    padding-bottom: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-cost-history-icon {\n    flex: 0 0 auto;\n    width: 36px;\n    height: 36px;\n    border-radius: calc(var(--control-corner-radius) * 1px);\n    display: inline-flex;\n    align-items: center;\n    justify-content: center;\n    font-size: 16px;\n    font-weight: 700;\n    border: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-cost-history-row {\n    display: flex;\n    flex-direction: column;\n    background: var(--neutral-layer-1);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1.5px);\n    padding: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-cost-history-row-content {\n    display: flex;\n    align-items: flex-start;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * All of these carry a ?hidden binding, and all declare display: flex — which silently beat the\n   * UA [hidden] { display: none } rule, because author-origin declarations outrank user-agent\n   * origin whatever the specificity. Without this, showTokens: false still rendered the full\n   * breakdown in the lifetime block, the live block and every history row, and an empty row list\n   * still occupied its padding under the lifetime total. Sibling elements that hide correctly do\n   * so only by declaring no display at all. Same treatment as .settings-modal-tab-panel[hidden]\n   * near the top of this file.\n   */\n  .settings-usage-row-tokens[hidden],\n  .settings-cost-history[hidden],\n  .settings-cost-history-row-content[hidden] {\n    display: none !important;\n  }\n\n  /*\n   * The buckets inside a history row drop the panel treatment they carry in the summary\n   * blocks — the row is already a bordered card, and a second box inside it reads as a\n   * nested panel. The adjacent-sibling rule above supplies the separator instead.\n   */\n  .settings-cost-history-row-breakdown .settings-token-breakdown {\n    flex: 1 1 auto;\n    margin-bottom: 0;\n    padding: 0;\n    background: none;\n    border: none;\n  }\n\n  .settings-cost-history-row-content + .settings-cost-history-row-content {\n    border-top: 1px solid var(--neutral-stroke-rest);\n    margin-top: calc(var(--design-unit) * 2px);\n    padding-top: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-cost-history-row-body {\n    flex: 1 1 auto;\n    min-width: 0;\n    display: flex;\n    gap: calc(var(--design-unit) * 2px);\n    justify-content: space-between;\n  }\n\n  /*\n   * Holds the cost and the delete button as one centred pair. The button used to be a sibling\n   * of the whole row body, kept in place by a -2px nudge tuned for when the metrics column had\n   * two lines (cost plus a merged token total). Dropping that second line left the nudge\n   * compensating for nothing. Centring the two against each other needs no magic number and\n   * cannot drift again if the metrics content changes.\n   *\n   * NB this rule previously set align-items with no display:flex, so it had no effect at all.\n   */\n  .settings-cost-history-row-right {\n    display: flex;\n    align-items: center;\n    gap: calc(var(--design-unit) * 1px);\n    flex: 0 0 auto;\n  }\n\n  .settings-cost-history-row-cost,\n  .settings-cost-history-row-title {\n    font-size: 14px;\n    font-weight: 600;\n    color: var(--neutral-foreground-rest);\n    min-width: 0;\n  }\n\n  .settings-cost-history-row-metrics {\n    display: flex;\n    flex-direction: column;\n    flex: 0 0 auto;\n    font-size: 13px;\n    font-family: ui-monospace, monospace;\n    color: var(--neutral-foreground-rest);\n    white-space: nowrap;\n  }\n\n  .settings-cost-history-row-date {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-cost-history-delete {\n    flex: 0 0 auto;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-cost-history-delete:hover {\n    color: var(--error-color);\n  }\n\n  .settings-cost-history ::slotted(*) {\n    display: block;\n  }\n\n  .settings-modal-footer {\n    width: 100%;\n  }\n\n  .settings-done-button {\n    margin-left: auto;\n  }\n\n  .settings-modal-footer-actions {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    gap: calc(var(--design-unit) * 2px);\n    width: 100%;\n  }\n\n  .settings-disclaimer {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    max-width: 60%;\n    line-height: 1.4;\n  }\n\n  /*\n   * Inline spinner shown in the \"Download agent log\" button while the log builds\n   * (GENC-1351 §5.8) — the lifetime-stitch path is an async provider round-trip.\n   * Sized to the button label and tinted with currentColor so it tracks the\n   * button's text colour in every appearance / theme.\n   */\n  [part='download-button'] .download-spinner {\n    display: inline-block;\n    width: 12px;\n    height: 12px;\n    margin-right: calc(var(--design-unit) * 1px);\n    vertical-align: -1px;\n    border: 2px solid currentColor;\n    border-right-color: transparent;\n    border-radius: 50%;\n    animation: download-spin 0.6s linear infinite;\n  }\n\n  @keyframes download-spin {\n    to {\n      transform: rotate(360deg);\n    }\n  }\n`",
+          "default": "css`\n  /*\n   * Section headings come from the shared fragment the package also exports, so a host titling\n   * its own slotted section applies the same rule rather than a copy of it.\n   */\n  ${assistantSettingsSectionTitleStyles}\n\n  *,\n  *::before,\n  *::after {\n    box-sizing: border-box;\n  }\n\n  .settings-modal {\n    --ai-tier-badge-bg-mix: 14%;\n    --ai-tier-badge-text-lighten: 18%;\n  }\n\n  .settings-modal::part(dialog) {\n    max-width: 620px;\n    width: calc(100vw - 48px);\n    max-height: calc(100vh - 48px);\n    padding: 0;\n  }\n\n  .settings-modal::part(content) {\n    display: flex;\n    flex-direction: column;\n    min-height: 0;\n    padding: 0;\n    width: 100%;\n  }\n\n  .settings-modal::part(top) {\n    padding: calc(var(--design-unit) * 4px) calc(var(--design-unit) * 5px);\n    border-bottom: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-modal::part(bottom) {\n    padding: calc(var(--design-unit) * 4px) calc(var(--design-unit) * 5px);\n    border-top: 1px solid var(--neutral-stroke-rest);\n    border-bottom-left-radius: var(--card-border-radius, calc(var(--control-corner-radius) * 1px));\n    border-bottom-right-radius: var(--card-border-radius, calc(var(--control-corner-radius) * 1px));\n    background-color: var(--neutral-layer-2);\n  }\n\n  .settings-modal-header {\n    display: flex;\n    align-items: center;\n    min-width: 0;\n  }\n\n  .settings-modal-title {\n    margin: 0;\n    font-size: 16px;\n    font-weight: 600;\n    display: flex;\n    align-items: center;\n    gap: calc(var(--design-unit) * 2px);\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-modal-content {\n    display: flex;\n    flex-direction: column;\n    min-height: 0;\n    flex: 1 1 auto;\n  }\n\n  .settings-modal-tabs::part(tablist) {\n    border-bottom: 0;\n    padding: 0 calc(var(--design-unit) * 5px);\n    column-gap: calc(var(--design-unit) * 5px);\n  }\n\n  .settings-modal-tabs::part(activeIndicator) {\n    height: 2px;\n  }\n\n  .settings-modal-tab {\n    padding: 0;\n    font-weight: 600;\n    gap: 6px;\n  }\n\n  .settings-modal-tab[aria-selected='true'] {\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-modal-tabs::part(tabpanel) {\n    border-top: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-modal-tab-panel {\n    display: flex;\n    flex-direction: column;\n    min-height: 0;\n    flex: 1 1 auto;\n    padding: 0;\n    border-radius: 0;\n  }\n\n  .settings-modal-tab-panel[hidden] {\n    display: none !important;\n  }\n\n  .settings-modal-body {\n    overflow-y: auto;\n    padding: 0 calc(var(--design-unit) * 5px) calc(var(--design-unit) * 2px);\n    max-height: min(60vh, 520px);\n  }\n\n  .settings-modal-section {\n    padding: calc(var(--design-unit) * 5px) 0;\n    border-bottom: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-modal-section:last-child {\n    border-bottom: none;\n  }\n\n  /*\n   * Only the spacing. Everything else about this heading comes from the exported fragment\n   * above, which the assistant and its hosts share; margin is deliberately not in there,\n   * since the gap below a heading depends on the layout around it.\n   */\n  .ai-settings-section-title {\n    margin: 0 0 calc(var(--design-unit) * 3px);\n  }\n\n  .settings-modal-section-note {\n    margin: calc(var(--design-unit) * -2px) 0 calc(var(--design-unit) * 3px);\n    font-size: 12px;\n    line-height: 1.5;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-modal-section-body {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-toggle-row {\n    display: flex;\n    align-items: flex-start;\n    gap: calc(var(--design-unit) * 3px);\n    padding: 0 0 calc(var(--design-unit) * 4px) 0;\n    border-bottom: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-toggle-row:last-child {\n    border-bottom: none;\n    padding-bottom: calc(var(--design-unit) * 1px);\n  }\n\n  .settings-toggle-row.is-stacked {\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * For rows whose control is a button rather than a switch. The base row top-aligns, which suits\n   * a switch (it lands level with the title), but a button is tall enough that top-aligning leaves\n   * it above the title-plus-description block it acts on.\n   */\n  .settings-toggle-row.is-centered {\n    align-items: center;\n  }\n\n  .settings-animation-list {\n    display: flex;\n    flex-direction: column;\n    width: 100%;\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1.2px);\n    padding: calc(var(--design-unit) * 2px);\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-animation-list .settings-toggle-row {\n    border: 0;\n  }\n\n  .settings-animation-category {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-animation-category-label {\n    font-weight: 600;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-toggle-row + .settings-animation-category-label {\n    border-top: 1px solid var(--neutral-stroke-rest);\n    padding-top: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-animation-option {\n    padding: 0;\n    margin: 0;\n  }\n\n  .settings-animation-option:last-child {\n    border-bottom: none;\n    padding-bottom: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-toggle-text {\n    flex: 1;\n    min-width: 0;\n  }\n\n  .settings-toggle-title {\n    font-size: 14px;\n    font-weight: 500;\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-toggle-desc {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    line-height: 1.5;\n    max-width: 92%;\n  }\n\n  .settings-toggle-control {\n    flex: 0 0 auto;\n    min-width: 0;\n  }\n\n  .settings-toggle-control-wide {\n    width: 100%;\n    max-width: 280px;\n  }\n\n  .settings-toggle-row.is-stacked .settings-toggle-desc {\n    max-width: none;\n  }\n\n  .settings-toggle-row.is-stacked .settings-toggle-control-wide {\n    width: 100%;\n    max-width: none;\n  }\n\n  /*\n   * Sub-heading over the provider toggle group. Unlike the section headings it sits INSIDE\n   * .settings-modal-section-body, so the parent's 4-unit flex gap already separates it from the\n   * first toggle — and flex does not collapse margins, so the shared rule's 3-unit margin-bottom\n   * would add to that gap rather than replace it, leaving the label adrift from the rows it\n   * names. Zero the margin and pull back 2 of the 4 gap units, expressed in the same token so it\n   * tracks if that gap changes.\n   */\n  .settings-app-toggles-title {\n    margin: 0 0 calc(var(--design-unit) * -2px);\n  }\n\n  .settings-app-toggle-block {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 1px);\n  }\n\n  .settings-toggle-hint {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    line-height: 1.4;\n    padding-left: calc(var(--design-unit) * 1px);\n    font-style: italic;\n  }\n\n  /*\n   * The budget meter (GENC-1464) is the context indicator's money sibling and\n   * shares its row anatomy 1:1, so the budget classes JOIN these rules rather\n   * than restating them — one place to restyle the header/label/figures shape,\n   * and the two indicators cannot drift apart. Design-system tokens only, and\n   * unfallbacked: every token here ships a DS default, so a var(--x, y)\n   * fallback would be dead code that hides a broken token name (#2411/#2436\n   * review rule, pinned by settings-modal.styles.test.ts).\n   */\n  .settings-context-header,\n  .settings-budget-header {\n    display: flex;\n    justify-content: space-between;\n    gap: calc(var(--design-unit) * 2px);\n    margin-bottom: calc(var(--design-unit) * 2px);\n    font-size: 12px;\n  }\n\n  .settings-context-label,\n  .settings-budget-label {\n    color: var(--neutral-foreground-hint);\n    font-size: 11px;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n  }\n\n  .settings-context-tokens,\n  .settings-budget-figures {\n    color: var(--neutral-foreground-rest);\n  }\n\n  /* Freshness footer (GENC-1464): refresh button + label under the vendor\n     rows, left-aligned — a footnote to the figures above it. The button's\n     inline padding is pinned and cancelled by the container margin so the\n     ICON GLYPH (not the button box) sits flush with the budget labels'\n     left edge, whatever the density tokens say. */\n  .settings-budget-toolbar {\n    display: flex;\n    justify-content: flex-start;\n    align-items: center;\n    gap: 4px;\n    margin-inline-start: -4px;\n  }\n\n  .settings-budget-refresh::part(control) {\n    padding-inline: 4px;\n  }\n\n  .settings-budget-updated {\n    color: var(--neutral-foreground-hint);\n    font-size: 11px;\n  }\n\n  /*\n   * ONE rhythm for every meter row. The outer wrapper holds the context\n   * indicator and the budget meter; the inner one holds the budget meter's\n   * vendor rows — and both gap by the same 2 units (half the section body's 4)\n   * so that visually identical meter rows are evenly spaced whatever mix of\n   * them is on screen. Without the wrapper the context row inherits the body's\n   * 4-unit gap while the vendor rows keep 2, and three identical-looking rows\n   * read as an uneven 4/2/2. The wrapper renders only when at least one meter\n   * does — see settingsUsageMetersTemplate for why an always-on one would cost\n   * a stray gap.\n   */\n  .settings-usage-meters,\n  .settings-budget-usage {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-current-build,\n  .settings-lifetime-usage {\n    background: var(--neutral-layer-2);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1.5px);\n    padding: calc(var(--design-unit) * 4px);\n    margin: calc(var(--design-unit) * 3px) 0;\n  }\n\n  /*\n   * Deliberately quieter than the live block: no pulsing badge and no accent, so the eye lands\n   * on what is being built now — which is why that block leads the tab and this one follows,\n   * under the history heading whose rows it totals.\n   */\n  .settings-lifetime-usage-top {\n    display: flex;\n    align-items: center;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 2px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n  }\n\n  .settings-lifetime-label {\n    font-size: 10px;\n    line-height: 1;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-current-build-top {\n    display: flex;\n    align-items: center;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 2px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n  }\n\n  /*\n   * Optically centring these 10px caps against the 14px project name beside them. Flex offers\n   * only two alignments and neither lands it, because a box centre and a text baseline are\n   * different lines:\n   *   - align-items: center   sits the badge baseline about 1.2px high\n   *   - align-items: baseline matches baselines, but the caps then read as bottom-aligned\n   *     against the name's ascenders, so the badge looks low\n   * The eye wants the midpoint, so: centre the boxes, then translate down by the ~1px of\n   * overshoot. This is a nudge, but it corrects a fixed relationship between two font sizes\n   * rather than some neighbouring element's layout, so unlike a margin tuned to a sibling it\n   * cannot rot when that sibling changes. In em, so it tracks the badge text.\n   *\n   * display: block, not inline-flex: a flex container has no text baseline of its own and\n   * synthesizes one from its first child, which here is the dot, an empty span. As a block box\n   * the badge takes the baseline of its first line, i.e. the text.\n   */\n  .settings-live-badge {\n    display: block;\n    font-size: 10px;\n    line-height: 1;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--accent-fill-rest);\n    white-space: nowrap;\n    transform: translateY(0.1em);\n  }\n\n  .settings-live-dot {\n    display: inline-block;\n    width: 7px;\n    height: 7px;\n\n    /* Replaces the flex gap the badge no longer has. */\n    margin-right: calc(var(--design-unit) * 1px);\n\n    /* Centres the dot on the text beside it without disturbing that text's baseline. */\n    vertical-align: middle;\n    border-radius: 50%;\n    background: var(--accent-fill-rest);\n    animation: settings-live-pulse 1.6s ease-out infinite;\n  }\n\n  @keyframes settings-live-pulse {\n    0% {\n      box-shadow: 0 0 0 0 color-mix(in srgb, var(--accent-fill-rest) 55%, transparent);\n    }\n\n    70% {\n      box-shadow: 0 0 0 7px transparent;\n    }\n\n    100% {\n      box-shadow: 0 0 0 0 transparent;\n    }\n  }\n\n  .settings-current-build-name {\n    font-size: 14px;\n    line-height: 1;\n    font-weight: 600;\n  }\n\n  /*\n   * Cost and the token buckets side by side: one number in its own box, the four buckets\n   * sharing the box next to it. Stretch, so the two are the same height however tall the 22px\n   * cost value makes the left one.\n   */\n  .settings-usage-row {\n    display: flex;\n    flex-wrap: wrap;\n    align-items: stretch;\n    gap: calc(var(--design-unit) * 3px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n  }\n\n  .settings-usage-row-tokens {\n    display: flex;\n    flex: 1 1 auto;\n    min-width: 0;\n  }\n\n  .settings-build-stat {\n    min-width: 0;\n    background: var(--neutral-layer-1);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1px);\n    padding: calc(var(--design-unit) * 3px);\n  }\n\n  .settings-build-stat-label {\n    font-size: 10px;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-build-stat-value {\n    font-size: 22px;\n    font-weight: 700;\n    margin-top: calc(var(--design-unit) * 1px);\n    color: var(--neutral-foreground-rest);\n  }\n\n  .settings-build-stat-value .prefix,\n  .settings-build-stat-value .suffix {\n    color: var(--accent-fill-rest);\n  }\n\n  /*\n   * Per-bucket token split, beneath the headline cost. Small paired label/value cells\n   * rather than four more stat cards: they are the detail behind the cost above, so they\n   * have to read as subordinate to it rather than compete with it. The four buckets ARE\n   * the token figure now — there is no merged total anywhere for them to break down.\n   */\n  .settings-token-breakdown {\n    display: flex;\n    flex-direction: column;\n\n    /*\n     * Tight against the buckets below. One design unit rather than two, because each bucket\n     * separates its own label from its value by only 2px — at two units the title sat four\n     * times further from the bucket labels than they sit from their own numbers, which read\n     * as a gap between unrelated blocks instead of a heading over its content.\n     */\n    gap: calc(var(--design-unit) * 1px);\n    margin-bottom: calc(var(--design-unit) * 3px);\n    padding: calc(var(--design-unit) * 2px) calc(var(--design-unit) * 3px);\n    background: var(--neutral-layer-1);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1px);\n  }\n\n  /*\n   * Titles the box, because nothing else in it named the unit. Same styling and position as\n   * the cost box's label, so two boxes sitting side by side are titled the same way; the\n   * hierarchy against the bucket labels comes from position, not a second type size.\n   */\n  .settings-token-breakdown-label {\n    font-size: 10px;\n    line-height: 1;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-token-buckets {\n    display: flex;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-token-bucket {\n    display: flex;\n\n    /*\n     * min-content (not 0) so a bucket cannot be shrunk narrower than its own unbreakable label.\n     * With the label set to nowrap, a zero minimum would overflow it into the next column instead\n     * of wrapping — so the container's flex-wrap takes over and moves a bucket to a second row,\n     * which is the degradation we want when the modal is dragged narrow.\n     */\n    min-width: min-content;\n    flex-direction: column;\n    gap: 2px;\n  }\n\n  .settings-token-bucket-label {\n    font-size: 10px;\n    font-weight: 600;\n    text-transform: uppercase;\n    letter-spacing: 0.06em;\n    color: var(--neutral-foreground-hint);\n\n    /*\n     * One line, always. The rate marker is a separate inline box after collapsible whitespace, so\n     * a wrappable label gives it a break opportunity of its own — in a narrow column it orphaned\n     * onto line 2, which also pushed that bucket's value a line below the other three and broke\n     * the row of figures. nowrap removes every break opportunity in the label, the space before\n     * the marker included, so no glue character is needed.\n     */\n    white-space: nowrap;\n  }\n\n  .settings-token-bucket-value {\n    font-size: 13px;\n    font-weight: 600;\n    color: var(--neutral-foreground-rest);\n  }\n\n  /*\n   * The price-direction marker on a cache bucket's label — down for reads (a fraction of the\n   * uncached input rate), up for writes (a premium over it). Three tiers, so a bucket with no\n   * marker is the reference rate rather than an unlabelled fourth case.\n   *\n   * Carried by the label rather than the value, which is what this used to do: cache reads are\n   * usually the largest bucket by a wide margin in an agentic session, so the value was muted to\n   * stop the biggest number reading as the dominant cost driver. That priced the treatment to the\n   * wrong thing — a dimmed 0 (every Gemini cache write) looked disabled next to a normal 0, and a\n   * rate is a property of the bucket, not of this turn's figure.\n   *\n   * Sized down and nudged up rather than tinted: the label is already the hint colour, so a\n   * dimmer marker would vanish and a brighter one would out-shout the word it qualifies.\n   */\n  .settings-token-bucket-rate {\n    font-size: 8px;\n    line-height: 1;\n    vertical-align: 0.15em;\n    letter-spacing: 0;\n  }\n\n  /*\n   * Usage-row overrides. Placed after the base rules they refine rather than up beside\n   * .settings-usage-row itself, because stylelint's no-descending-specificity rejects a\n   * compound selector appearing before the plain one it overrides.\n   */\n\n  /* Sized by its content; the buckets take the rest, since four cells need the width. */\n  .settings-usage-row > .settings-build-stat {\n    flex: 0 1 auto;\n  }\n\n  .settings-usage-row .settings-token-breakdown {\n    flex: 1 1 auto;\n\n    /* The row owns the spacing now; this centres the column against the taller cost box. */\n    justify-content: center;\n    margin-bottom: 0;\n  }\n\n  /*\n   * Basis auto, not 0: a zero basis splits the row into four equal columns, so CACHE WRITE is\n   * squeezed exactly as hard as INPUT despite being twice the label. Sizing from content gives the\n   * long labels the room their text needs and lets the short ones concede it, which is what makes\n   * white-space: nowrap above safe — every column starts at least as wide as its own content,\n   * then shares the slack. Still grows and shrinks, so the four stay flush edge to edge.\n   */\n  .settings-usage-row .settings-token-bucket {\n    flex: 1 1 auto;\n  }\n\n  .settings-model-tags {\n    display: flex;\n    flex-wrap: wrap;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-model-tag {\n    font-size: 11px;\n    font-weight: 600;\n    padding: 3px 9px;\n    border-radius: 20px;\n    font-family: ui-monospace, monospace;\n    border: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-model-tag,\n  .settings-cost-history-icon {\n    --model-tag-color: var(--neutral-foreground-rest);\n\n    background: color-mix(\n      in srgb,\n      var(--model-tag-color) var(--ai-tier-badge-bg-mix),\n      var(--neutral-layer-1)\n    );\n    border-color: color-mix(in srgb, var(--model-tag-color) 20%, var(--neutral-layer-1));\n    color: color-mix(in srgb, var(--model-tag-color), white var(--ai-tier-badge-text-lighten));\n  }\n\n  .settings-cost-history-title {\n    font-size: 11px;\n    text-transform: uppercase;\n    letter-spacing: 0.08em;\n    color: var(--neutral-foreground-hint);\n    font-weight: 600;\n    margin: calc(var(--design-unit) * 4px) 0 calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * The heading labels the lifetime card as well as the rows, so the card gives up its own top\n   * margin and the gap becomes the heading's alone. Adjacent siblings collapse to the LARGER of\n   * the two margins, so leaving both would space the caps 3 units off the block they label while\n   * the rows below sit at 2 — reading as though the heading belonged to neither.\n   */\n  .settings-cost-history-title + .settings-lifetime-usage {\n    margin-top: 0;\n  }\n\n  .settings-cost-history {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n    padding-bottom: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-cost-history-icon {\n    flex: 0 0 auto;\n    width: 36px;\n    height: 36px;\n    border-radius: calc(var(--control-corner-radius) * 1px);\n    display: inline-flex;\n    align-items: center;\n    justify-content: center;\n    font-size: 16px;\n    font-weight: 700;\n    border: 1px solid var(--neutral-stroke-rest);\n  }\n\n  .settings-cost-history-row {\n    display: flex;\n    flex-direction: column;\n    background: var(--neutral-layer-1);\n    border: 1px solid var(--neutral-stroke-rest);\n    border-radius: calc(var(--control-corner-radius) * 1.5px);\n    padding: calc(var(--design-unit) * 4px);\n  }\n\n  .settings-cost-history-row-content {\n    display: flex;\n    align-items: flex-start;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * All of these carry a ?hidden binding, and all declare display: flex — which silently beat the\n   * UA [hidden] { display: none } rule, because author-origin declarations outrank user-agent\n   * origin whatever the specificity. Without this, showTokens: false still rendered the full\n   * breakdown in the lifetime block, the live block and every history row, and an empty row list\n   * still occupied its padding under the lifetime total. Sibling elements that hide correctly do\n   * so only by declaring no display at all. Same treatment as .settings-modal-tab-panel[hidden]\n   * near the top of this file.\n   */\n  .settings-usage-row-tokens[hidden],\n  .settings-cost-history[hidden],\n  .settings-cost-history-row-content[hidden] {\n    display: none !important;\n  }\n\n  /*\n   * The buckets inside a history row drop the panel treatment they carry in the summary\n   * blocks — the row is already a bordered card, and a second box inside it reads as a\n   * nested panel. The adjacent-sibling rule above supplies the separator instead.\n   */\n  .settings-cost-history-row-breakdown .settings-token-breakdown {\n    flex: 1 1 auto;\n    margin-bottom: 0;\n    padding: 0;\n    background: none;\n    border: none;\n  }\n\n  .settings-cost-history-row-content + .settings-cost-history-row-content {\n    border-top: 1px solid var(--neutral-stroke-rest);\n    margin-top: calc(var(--design-unit) * 2px);\n    padding-top: calc(var(--design-unit) * 2px);\n  }\n\n  .settings-cost-history-row-body {\n    flex: 1 1 auto;\n    min-width: 0;\n    display: flex;\n    gap: calc(var(--design-unit) * 2px);\n    justify-content: space-between;\n  }\n\n  /*\n   * Holds the cost and the delete button as one centred pair. The button used to be a sibling\n   * of the whole row body, kept in place by a -2px nudge tuned for when the metrics column had\n   * two lines (cost plus a merged token total). Dropping that second line left the nudge\n   * compensating for nothing. Centring the two against each other needs no magic number and\n   * cannot drift again if the metrics content changes.\n   *\n   * NB this rule previously set align-items with no display:flex, so it had no effect at all.\n   */\n  .settings-cost-history-row-right {\n    display: flex;\n    align-items: center;\n    gap: calc(var(--design-unit) * 1px);\n    flex: 0 0 auto;\n  }\n\n  .settings-cost-history-row-cost,\n  .settings-cost-history-row-title {\n    font-size: 14px;\n    font-weight: 600;\n    color: var(--neutral-foreground-rest);\n    min-width: 0;\n  }\n\n  .settings-cost-history-row-metrics {\n    display: flex;\n    flex-direction: column;\n    flex: 0 0 auto;\n    font-size: 13px;\n    font-family: ui-monospace, monospace;\n    color: var(--neutral-foreground-rest);\n    white-space: nowrap;\n  }\n\n  .settings-cost-history-row-date {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-cost-history-delete {\n    flex: 0 0 auto;\n    color: var(--neutral-foreground-hint);\n  }\n\n  .settings-cost-history-delete:hover {\n    color: var(--error-color);\n  }\n\n  .settings-cost-history ::slotted(*) {\n    display: block;\n  }\n\n  .settings-modal-footer {\n    width: 100%;\n  }\n\n  .settings-done-button {\n    margin-left: auto;\n  }\n\n  .settings-modal-footer-actions {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    gap: calc(var(--design-unit) * 2px);\n    width: 100%;\n  }\n\n  .settings-disclaimer {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    max-width: 60%;\n    line-height: 1.4;\n  }\n\n  /* The agent-log row's two actions (Download / Send) side by side. */\n  .agent-log-actions {\n    display: flex;\n    align-items: center;\n    gap: calc(var(--design-unit) * 2px);\n  }\n\n  /*\n   * Row + compose box. The row is normally the section's last child (no divider); inside\n   * the wrapper it is only the last child while the box is closed, so drop the divider\n   * explicitly and let the box supply its own spacing beneath the row.\n   */\n  .agent-log-block {\n    display: flex;\n    flex-direction: column;\n  }\n\n  .agent-log-block .settings-toggle-row {\n    border-bottom: none;\n    padding-bottom: calc(var(--design-unit) * 1px);\n  }\n\n  .agent-log-compose {\n    display: flex;\n    flex-direction: column;\n    gap: calc(var(--design-unit) * 2px);\n    margin-top: calc(var(--design-unit) * 2px);\n  }\n\n  .agent-log-note {\n    width: 100%;\n  }\n\n  .agent-log-note::part(control) {\n    width: 100%;\n    box-sizing: border-box;\n    font-size: 13px;\n    line-height: 1.5;\n  }\n\n  .agent-log-compose-footer {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    gap: calc(var(--design-unit) * 3px);\n  }\n\n  /* Counter / validation / failure line. Hint-coloured until it carries an error. */\n  .agent-log-compose-hint {\n    font-size: 12px;\n    color: var(--neutral-foreground-hint);\n    min-width: 0;\n  }\n\n  /*\n   * Failure state without leaning on --error-color: rapid's fixed brand red is 3.02:1 on a\n   * light surface, under AA for 12px text, and the failure line is the one that most needs\n   * reading. The contrast-adaptive foreground plus weight carries it; the text itself also\n   * changes, so colour was never the only channel.\n   */\n  .agent-log-compose-hint.is-error {\n    color: var(--neutral-foreground-rest);\n    font-weight: 600;\n  }\n\n  /* Screen-reader-only live region for submission outcomes (same recipe as main.styles). */\n  .visually-hidden {\n    position: absolute;\n    width: 1px;\n    height: 1px;\n    margin: -1px;\n    padding: 0;\n    overflow: hidden;\n    clip-path: inset(50%);\n    white-space: nowrap;\n    border: 0;\n  }\n\n  /*\n   * Inline spinner shown in the agent-log buttons (Download / Send) while the log\n   * builds (GENC-1351 §5.8) — the lifetime-stitch path is an async provider\n   * round-trip. Sized to the button label and tinted with currentColor so it tracks\n   * the button's text colour in every appearance / theme.\n   */\n  [part='download-button'] .download-spinner,\n  [part='submit-log-button'] .download-spinner,\n  [part='agent-log-send-button'] .download-spinner {\n    display: inline-block;\n    width: 12px;\n    height: 12px;\n    margin-right: calc(var(--design-unit) * 1px);\n    vertical-align: -1px;\n    border: 2px solid currentColor;\n    border-right-color: transparent;\n    border-radius: 50%;\n    animation: download-spin 0.6s linear infinite;\n  }\n\n  @keyframes download-spin {\n    to {\n      transform: rotate(360deg);\n    }\n  }\n`",
           "description": "Styles for the assistant settings modal (tabs, sections, toggles, cost summary)."
         }
       ],
@@ -12646,6 +13505,54 @@
       "kind": "javascript-module",
       "path": "src/components/settings-modal/settings-modal.template.ts",
       "declarations": [
+        {
+          "kind": "function",
+          "name": "timestampModePickerTemplate",
+          "return": {
+            "type": {
+              "text": "ViewTemplate<FoundationAiAssistant>"
+            }
+          },
+          "parameters": [
+            {
+              "name": "segmentedControlTag",
+              "type": {
+                "text": "string"
+              }
+            },
+            {
+              "name": "segmentedItemTag",
+              "type": {
+                "text": "string"
+              }
+            }
+          ],
+          "description": "Three-way picker for TimestampDisplay (GENC-1257).\n\nThe design system's segmented control rather than the `switch` every other row uses,\nbecause the setting genuinely has three states — and rather than hand-rolled buttons\ncarrying `role=\"radio\"`, because ARIA roles supply semantics but never behaviour:\npromising a radio group means owning roving `tabindex` and arrow-key navigation.\n\n`SegmentedControl extends FASTRadioGroup` (and `SegmentedItem extends FASTRadio`), so\nthis IS the DS radio group — it inherits the whole keyboard pattern — just skinned as\nsegments rather than dots, which is the right affordance for three short mode labels.\n\nThe usual reason to avoid a DS control here does not apply. `RadioGroup.valueChanged`\nemits `change` whenever `value` is written — including the write this template's own\nbinding performs on render, exactly the phantom-change footgun the DS switch has\n(GENC-1351 #1). It is harmless because the `timestampDisplay` setter guards on\n`preferenceUnchanged`, as every preference setter does, so a render-time echo returns early\nand never reaches the store or marks preferences user-changed."
+        },
+        {
+          "kind": "function",
+          "name": "agentLogSectionTemplate",
+          "return": {
+            "type": {
+              "text": "ViewTemplate<FoundationAiAssistant>"
+            }
+          },
+          "parameters": [
+            {
+              "name": "buttonTag",
+              "type": {
+                "text": "string"
+              }
+            },
+            {
+              "name": "textareaTag",
+              "type": {
+                "text": "string"
+              }
+            }
+          ],
+          "description": "The settings \"Agent log\" section: the Download / Send row, the always-present status\nlive region, and the Send button's compose box. Exported (like\n`settingsUsageMetersTemplate`) so `agent-log-section.template.test.ts` can render it on\nan unconnected element and pin what the getters alone cannot show — that the `when`s,\n`?disabled`s and part tokens are actually wired to them."
+        },
         {
           "kind": "function",
           "name": "SettingsModalTemplate",
@@ -12666,6 +13573,22 @@
         }
       ],
       "exports": [
+        {
+          "kind": "js",
+          "name": "timestampModePickerTemplate",
+          "declaration": {
+            "name": "timestampModePickerTemplate",
+            "module": "src/components/settings-modal/settings-modal.template.ts"
+          }
+        },
+        {
+          "kind": "js",
+          "name": "agentLogSectionTemplate",
+          "declaration": {
+            "name": "agentLogSectionTemplate",
+            "module": "src/components/settings-modal/settings-modal.template.ts"
+          }
+        },
         {
           "kind": "js",
           "name": "SettingsModalTemplate",