@gotcos/glasses-server 6.99.25 → 6.99.33

package/server/web-control/app.js

@@ -58,6 +58,19 @@
     if (diff === 1) return 'tomorrow';
     return d.toLocaleDateString(undefined, { weekday: 'long' });
   }
+  // 6.99.30 (design QA): a day in a row, in plain words: "Today", else "Nov 7" ("Nov 7, 2025" in another year). Takes
+  // a YYYY-MM-DD (a meeting's date, read as that calendar day, never shifted by time zone) or a Date. Anything else comes
+  // back as it was.
+  var MONTHS = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
+  function plainDay(v, now) {
+    var y, m, d;
+    if (v instanceof Date && isFinite(v.getTime())) { y = v.getFullYear(); m = v.getMonth(); d = v.getDate(); }
+    else { var p = /^(\d{4})-(\d{2})-(\d{2})/.exec(String(v == null ? '' : v)); if (!p) return v == null ? '' : String(v); y = +p[1]; m = +p[2] - 1; d = +p[3]; }
+    if (m < 0 || m > 11 || d < 1 || d > 31) return String(v);
+    var n = now || new Date();
+    if (y === n.getFullYear() && m === n.getMonth() && d === n.getDate()) return 'Today';
+    return MONTHS[m] + ' ' + d + (y === n.getFullYear() ? '' : ', ' + y);
+  }
   var PROVIDERS = { claude: 'Claude Code', codex: 'Codex', cursor: 'Cursor', glasses: 'Glasses', cos: 'COS' };
   function providerLabel(p) { return PROVIDERS[p] || (p ? p.charAt(0).toUpperCase() + p.slice(1) : 'Session'); }
   function badge(p) { var cls = PROVIDERS[p] ? (p === 'cos' ? 'glasses' : p) : 'work'; return '<span class="badge ' + esc(cls) + '">' + esc(providerLabel(p)) + '</span>'; }
@@ -100,9 +113,14 @@
     var limit = o.timeoutMs != null ? o.timeoutMs : (method === 'GET' ? API_READ_TIMEOUT_MS : 0);
     var ctrl = limit && window.AbortController ? new AbortController() : null;
     var timer = ctrl ? setTimeout(function () { ctrl.abort(); }, limit) : null;
+    var sentAt = Date.now();
     return fetch(path, { method: method, headers: headers, credentials: 'same-origin', body: body, signal: ctrl ? ctrl.signal : undefined }).then(function (res) {
-      if (timer) clearTimeout(timer);
+      // Blob bodies keep their deadline after headers: a stalled download must release its queue slot.
+      if (timer && o.responseType !== 'blob') clearTimeout(timer);
+      sxNoteClock(res, sentAt);
+      noteServer(true);
       if (res.status === 401 && path.indexOf('/api/web-session/') !== 0) { showAuth(); var gone = new Error('Signed out. Connect this browser again.'); gone.status = 401; throw gone; }
+      if (o.responseType === 'blob' && res.ok) return res.blob();
       return res.text().then(function (text) {
         var data = {};
         try { data = text ? JSON.parse(text) : {}; } catch (_e) { data = {}; }
@@ -118,17 +136,74 @@
         }
         return data;
       });
+    }).then(function (value) {
+      if (timer) clearTimeout(timer);
+      return value;
     }, function (err) {
       if (timer) clearTimeout(timer);
       if (err && err.name === 'AbortError' && ctrl && ctrl.signal.aborted) {
+        // 6.99.32 (QA 6.99.30 canary W1): a read the Mac never answered in time means it is not answering. A write has
+        // no deadline unless its caller set one, and a slow save is not a Mac that went away, so only reads say so.
+        if (method === 'GET' && !(SERVER.lastUpAt >= sentAt)) noteServer(false);
         var late = new Error('Your Mac did not answer in ' + Math.round(limit / 1000) + ' seconds. Check that it is awake, then try again.');
         late.code = 'timeout'; throw late;
       }
+      // 6.99.30: the browser's own words for a request that never reached the Mac ("Failed to fetch" in Chrome and
+      // Comet, "Load failed" in Safari, "NetworkError..." in Firefox) never reach the page. Anything with no status
+      // that is not a timeout or an abort the caller asked for is the Mac out of reach, said once, here.
+      if (err && err.status == null && !err.code && err.name !== 'AbortError') { noteServer(false); throw unreachableError(err); }
       throw err;
     });
   }
   var API_READ_TIMEOUT_MS = 20000;
 
+  // ── what every request learns about the Mac (6.99.30) ──
+  // api() above and apiAnswer() (the Sessions reader's transport) share these; they sit here, between api() and the
+  // state, so a test that loads api() alone has them.
+  // 6.99.30: the one sentence for a request that never reached the Mac (api() and apiAnswer() below, and the panes with
+  // their own fetch: COSWeb.unreachableCopy). Never the browser's own "Failed to fetch" or "Load failed".
+  var UNREACHABLE_COPY = 'Could not reach COS on your Mac. Check that it is awake and on Tailscale, then try again.';
+  function unreachableError(cause) { var e = new Error(UNREACHABLE_COPY); e.code = 'unreachable'; e.cause = cause; return e; }
+
+  // 6.99.30 (QA: clock skew): the Mac's clock, as this page's offset from it. The session card's one state (sxTruth)
+  // weighs the Mac's own times (state_since, a row's activity) against moments this page stamped with its own clock (a
+  // gate answer, a Stop). A phone a minute behind made every Mac time look a minute newer, so a stale Idle beat a
+  // Working the page had just been told about. Each answer's Date header (whole seconds, read at the midpoint of the
+  // request) gives the offset; the answer with the shortest round trip in the last ten minutes wins, so one slow answer
+  // never moves it. Zero until the first answer. A missing or unreadable header changes nothing.
+  var SX_CLOCK = { skew: 0, rtt: Infinity, at: 0 };
+  var SX_CLOCK_KEEP_MS = 600000;
+  function sxNoteClock(res, sentAt) {
+    var got = Date.now(), h = null;
+    try { h = res && res.headers && typeof res.headers.get === 'function' ? res.headers.get('date') : null; } catch (_e) { h = null; }
+    var server = h ? Date.parse(h) : NaN;
+    if (!isFinite(server) || typeof sentAt !== 'number') return;
+    var rtt = Math.max(0, got - sentAt);
+    // The header drops the milliseconds: on average the Mac's moment is half a second after the stamped second.
+    var skew = Math.round(server + 500 - (sentAt + rtt / 2));
+    if (rtt <= SX_CLOCK.rtt || got - SX_CLOCK.at > SX_CLOCK_KEEP_MS) { SX_CLOCK.skew = skew; SX_CLOCK.rtt = rtt; SX_CLOCK.at = got; }
+  }
+  // 6.99.30 (QA: "Server connected" stayed green for five minutes after the Mac went away): every request says whether
+  // the Mac answered. A request that never reached it marks it down; any HTTP answer, whatever its status, marks it up.
+  // QA 6.99.30 (Skeptic): never a 502. Nothing sits in front of the Mac (direct HTTPS over Tailscale) and COS sends its
+  // own 502s (an unsupported Memories workspace, a bad Meetings Ask answer), so a 502 flapped the rail, the question
+  // cards and an open sheet down and up again. The rail's server line, Today's sheet and the question cards hear each change at once
+  // (COSWeb.onServer). null until the first answer.
+  // lastUpAt (6.99.32, QA Skeptic W-2): when the Mac last answered anything, on this page's clock. A read that timed out
+  // marks it down only if nothing has answered since that read went out (a slow image whose headers already came, a busy
+  // Mac whose question poll keeps answering), so a slow but alive Mac never flaps.
+  var SERVER = { up: null, hooks: [], lastUpAt: 0 };
+  function noteServer(up) {
+    up = !!up;
+    if (up) SERVER.lastUpAt = Date.now();
+    if (SERVER.up === up) return;
+    SERVER.up = up;
+    SERVER.hooks.slice().forEach(function (fn) { try { fn(up); } catch (err) { console.error(err); } });
+  }
+
+  /** This page's moment `t` (its own Date.now()) on the Mac's clock. */
+  function sxServerTime(t) { return t == null ? t : t + SX_CLOCK.skew; }
+
   // ── state ───────────────────────────────────────────────
   var state = {
     pane: 'today', serverName: '', tailnetUrl: '',
@@ -204,6 +279,17 @@
     if (location.hash === hash) route(); else location.hash = hash;
   }
   function isPhone() { return !window.matchMedia('(min-width: 600px)').matches; }
+  /** A keyboard and a fine pointer are the way in (a Mac, a PC): Return sends. Touch screens type a new line. */
+  function keyboardFirst() { return !!(window.matchMedia && window.matchMedia('(hover: hover) and (pointer: fine)').matches); }
+  // Return in a text box sends only where a keyboard and a pointer are the way in (cos-chat.js keyboardFirst): never on
+  // a touch screen, whatever its width (6.99.30: the unfolded Duo's on-screen keyboard sent on Return), and never
+  // mid-composition (an IME's Return picks the word; keyCode 229 is Safari's composing key). Shift-Return is a new line.
+  // QA 6.99.30 (Skeptic): Cmd-Return or Ctrl-Return sends on every device, so a Bluetooth keyboard on the Duo or an iPad
+  // (a coarse pointer, so plain Return is a new line there) still has a send key.
+  function returnSends(e) {
+    if (!e || e.key !== 'Enter' || e.shiftKey || e.isComposing || e.keyCode === 229 || !e.target || e.target.tagName !== 'TEXTAREA') return false;
+    return !!(e.metaKey || e.ctrlKey || keyboardFirst());
+  }
   function route(forceChanged) {
     var r = parseRoute();
     var changedPane = forceChanged === true || r.pane !== state.pane || !document.querySelector('#pane-' + r.pane + ':not(.hidden)');
@@ -215,7 +301,7 @@
     var railPane = r.pane === 'usage' ? 'sessions' : r.pane;
     document.querySelectorAll('.rail-btn,.rail-settings').forEach(function (b) { if (b.getAttribute('data-pane') === railPane) b.setAttribute('aria-current', 'page'); else b.removeAttribute('aria-current'); });
     if (state.stream && !(r.pane === 'sessions' && r.args.length === 2)) { state.stream.close(); state.stream = null; }
-    if (!(r.pane === 'sessions' && r.args.length === 2)) { clearInterval(state.turnPoll); if (state.reading) clearInterval(state.reading.heldTimer); state.reading = null; }
+    if (!(r.pane === 'sessions' && r.args.length === 2)) { readerImagesStop($('session-turns')); clearInterval(state.turnPoll); if (state.reading) clearInterval(state.reading.heldTimer); state.reading = null; }
     if (r.pane !== 'meetings' && state.livePoll) { clearInterval(state.livePoll); state.livePoll = null; }
 
     var reading = r.args.length > 0 && !isTabRoute(r.args);
@@ -292,6 +378,7 @@
 
   // ── auth ────────────────────────────────────────────────
   function showAuth(message) {
+    readerImagesStop($('session-turns')); readerImagesStop($('ta-last'));
     var alreadyOpen = !$('auth-gate').classList.contains('hidden');
     $('app-shell').classList.add('hidden');
     $('auth-gate').classList.remove('hidden');
@@ -332,16 +419,35 @@
   // stories all asked for it separately. Now there is one copy: a request younger than maxAgeMs is
   // answered from it, a request already on the wire is shared, and panes can paint the last copy at
   // once while a fresh one loads (sessionListCached).
-  var SL = { data: null, at: 0, inflight: null };
+  var SL = { data: null, at: 0, inflight: null, waiting: null };
   function sessionList(maxAgeMs) {
     if (SL.data && Date.now() - SL.at < (maxAgeMs || 0)) return Promise.resolve(SL.data);
     if (SL.inflight) return SL.inflight;
     SL.inflight = api('/api/agent-sessions?limit=80&sort=updated').then(function (d) {
-      SL.data = d; SL.at = Date.now(); SL.inflight = null; return d;
+      SL.data = d; SL.at = Date.now(); SL.inflight = null;
+      noteWaiting(d);
+      return d;
     }, function (err) { SL.inflight = null; throw err; });
     return SL.inflight;
   }
   function sessionListCached() { return SL.data ? { data: SL.data, at: SL.at } : null; }
+  // 6.99.27 (Miles 11/07 09:29, "a big delay to see the questions"): a session that has just gone to waiting may have
+  // parked a question for this page. The question poll (panes/questions.js) reads at once rather than at its next turn.
+  function questionsNudge() {
+    var q = window.COSWeb && window.COSWeb.sessionQuestions;
+    if (q && typeof q.nudge === 'function') { try { q.nudge(); } catch (_e) {} }
+  }
+  function noteWaiting(d) {
+    var now = {}, fresh = false;
+    ((d && d.sessions) || []).forEach(function (s) {
+      if (!s || sxState(s) !== 'waiting') return;
+      var k = splitSessionId(s.provider, s.session_id || s.id), key = k.provider + '|' + String(k.id).toLowerCase();
+      now[key] = 1;
+      if (!SL.waiting || !SL.waiting[key]) fresh = true;
+    });
+    SL.waiting = now;
+    if (fresh) questionsNudge();
+  }
 
   // ── the session pet (Today) ─────────────────────────────
   // Same pet and the same pose rule as COS Control (PetSpritePose.resolve): waiting with nothing running
@@ -367,27 +473,99 @@
     return merged;
   }
   var PET_HEIGHT = 140;
-  function petPose(sessions) {
-    var working = 0, waiting = 0, alive = 0;
+  // 6.99.27 (Miles 11/07 09:29, "there wasn't an option for the pet to interact with the questions"): the questions
+  // this page holds (panes/questions.js), the ones that can be answered here. One key per session, as Needs you keys
+  // them.
+  function petQuestions() {
+    var q = window.COSWeb && window.COSWeb.sessionQuestions;
+    var items = q && typeof q.itemsFor === 'function' ? q.itemsFor('') : [];
+    return (items || []).filter(function (it) { return it && it.sessionId; });
+  }
+  function petQKey(it) { var k = splitSessionId(it.provider, it.sessionId); return k.provider + '|' + k.id; }
+  function petPose(sessions, questions) {
+    var working = 0, waiting = 0, alive = 0, asked = {};
+    var qs = questions || [];
+    qs.forEach(function (it) { asked[petQKey(it).toLowerCase()] = 1; });
     sessions.forEach(function (s) {
       var st = sxState(s);
       // Working is the Running card's own test (running_active), so the caption under the pet never
       // disagrees with the Running count beside it (11/06: the pet said 3 while the card said 2).
       if (s.running_active) working++;
-      else if (st === 'waiting') waiting++;
+      // A session whose question the caption already leads with is not counted again as waiting on you.
+      else if (st === 'waiting' && !asked[petKey(s).toLowerCase()]) waiting++;
       if (s.running || s.running_active) alive++;
     });
     var pose;
-    if (waiting > 0 && working === 0) pose = 'waiting';
+    // COS Control's rule (PetSpritePose.resolve): attention outranks every count pose. A question waiting here is the
+    // web's attention: it needs you, and this page can answer it.
+    if (qs.length) pose = 'attention';
+    else if (waiting > 0 && working === 0) pose = 'waiting';
     else if (working + waiting >= 4) pose = 'swarm';
     else if (working + waiting === 3) pose = 'trio';
     else if (working + waiting === 2) pose = 'duel';
     else if (working + waiting === 1) pose = 'working';
     else pose = alive > 0 ? 'patrol' : 'idle';
-    return { pose: pose, working: working, waiting: waiting };
+    // QA 6.99.27 (User 6): a permission request is an approval, counted apart from the questions.
+    var approvals = qs.filter(function (it) { return it.kind === 'approval'; }).length;
+    return { pose: pose, working: working, waiting: waiting, questions: qs.length - approvals, approvals: approvals };
+  }
+  // COS Control's fallbacks (PetSpritePose.fallbackPoses) for a pet that has no strip for the pose.
+  var PET_FALLBACK = { attention: ['error', 'waiting', 'idle'], patrol: ['idle'], duel: ['swarm', 'working', 'idle'], trio: ['swarm', 'duel', 'working', 'idle'],
+    swarm: ['duel', 'trio', 'working', 'idle'], working: ['idle'], waiting: ['idle'] };
+  function petPoseIn(poses, want) {
+    if (poses[want]) return want;
+    var chain = PET_FALLBACK[want] || [];
+    for (var i = 0; i < chain.length; i++) if (poses[chain[i]]) return chain[i];
+    return poses.idle ? 'idle' : Object.keys(poses)[0];
+  }
+  // 6.99.26 (Miles 11/07, "Open what matters"): the sessions behind the pet's caption, by the same test petPose
+  // counts with, so a tap opens what the caption says. In play: waiting on you, then running. Done today rides along in
+  // the list, never in the count.
+  function petPlay(sessions) {
+    var waiting = [], running = [], done = [], today = new Date().toDateString();
+    (sessions || []).forEach(function (s) {
+      var st = sxState(s);
+      if (s.running_active) running.push(s);
+      else if (st === 'waiting') waiting.push(s);
+      else if ((st === 'recent' || st === 'stale') && !sxKeepWarm(s)) {
+        var d = toDate(s.last_activity_at || s.state_since);
+        if (d && d.toDateString() === today) done.push(s);
+      }
+    });
+    return { waiting: waiting, running: running, done: done };
+  }
+  function petKey(s) { var k = splitSessionId(s.provider, s.session_id || s.id); return k.provider + '|' + k.id; }
+  // One session in play opens its own sheet (waiting: the question card or reply box; else the Running peek); several
+  // open the short list; none does nothing.
+  function petTap(t) {
+    // A question waiting here comes first: one session's question opens its card in the overlay; questions from
+    // several sessions open the list, question rows first.
+    var qs = petQuestions(), qkeys = {};
+    qs.forEach(function (it) { qkeys[petQKey(it)] = 1; });
+    var qk = Object.keys(qkeys);
+    if (qk.length === 1) return openTodayAction(t, 'wait', qk[0]);
+    if (qk.length > 1) return openTodayAction(t, 'pet', '');
+    var p = petPlay(state.sessions || []), n = p.waiting.length + p.running.length;
+    if (!n) return;
+    if (n > 1) return openTodayAction(t, 'pet', '');
+    var s = p.waiting[0] || p.running[0];
+    openTodayAction(t, sxState(s) === 'waiting' ? 'wait' : 'run', petKey(s));
+  }
+  function petButtonState(box, c, label) {
+    var btn = box.querySelector('.pet-btn');
+    if (!btn) return;
+    var any = c.working + c.waiting + (c.questions || 0) + (c.approvals || 0) > 0;
+    btn.setAttribute('aria-label', any ? label + '. Open' : label);
+    btn.setAttribute('aria-disabled', any ? 'false' : 'true');
   }
   function petCaption(c) {
     var parts = [];
+    // A question or an approval waiting here leads (6.99.27): "1 question for you", "1 approval for you", or
+    // "1 question and 1 approval for you" (QA 6.99.27, User 6: approvals were counted as questions).
+    var asks = [];
+    if (c.questions) asks.push(c.questions === 1 ? '1 question' : c.questions + ' questions');
+    if (c.approvals) asks.push(c.approvals === 1 ? '1 approval' : c.approvals + ' approvals');
+    if (asks.length) parts.push(asks.join(' and ') + ' for you');
     if (c.working) parts.push(c.working + ' running');
     if (c.waiting) parts.push(c.waiting + ' waiting on you');
     return parts.length ? parts.join(', ') : 'Nothing running';
@@ -418,17 +596,17 @@
   var PET_CHANGE = '<button type="button" class="pet-change" data-goto="settings/pet">Change pet</button>';
   // A still pet (a gallery pick, Cloud Puff, or a single image on the Mac): one picture for every state.
   function renderPetStill(box, m, sessions) {
-    var c = petPose(sessions), label = petCaption(c);
+    var c = petPose(sessions, petQuestions()), label = petCaption(c);
     petStop(); PET.pose = 'still:' + m.still;
     var img = box.querySelector('.pet-still');
     if (!img || img.getAttribute('src') !== m.still) {
-      box.innerHTML = '<button type="button" class="pet-btn" data-goto="sessions"><img class="pet-still" alt="" src="' + esc(m.still) + '"><span class="pet-caption"></span></button>' + PET_CHANGE;
+      box.innerHTML = '<button type="button" class="pet-btn" data-today="pet"><img class="pet-still" alt="" src="' + esc(m.still) + '"><span class="pet-caption"></span></button>' + PET_CHANGE;
       img = box.querySelector('.pet-still');
       img.addEventListener('error', function () { box.classList.add('hidden'); });
       img.addEventListener('load', function () { img.classList.toggle('pixel', img.naturalHeight > 0 && img.naturalHeight < 140); });
     }
     box.querySelector('.pet-caption').textContent = label;
-    box.querySelector('.pet-btn').setAttribute('aria-label', 'Sessions: ' + label);
+    petButtonState(box, c, label);
     box.classList.remove('hidden');
   }
   function renderPet(sessions) {
@@ -448,15 +626,14 @@
         if (!now.show || now.pet !== prefs.pet) return;
         if (!m || !m.available) { box.classList.add('hidden'); petStop(); return; }
         if (m.kind === 'still') { renderPetStill(box, m, sessions); return; }
-        var c = petPose(sessions);
-        var pose = m.poses[c.pose] ? c.pose : (m.poses.idle ? 'idle' : Object.keys(m.poses)[0]);
+        var c = petPose(sessions, petQuestions());
+        var pose = petPoseIn(m.poses, c.pose);
         var spec = m.poses[pose];
         var label = petCaption(c);
         box.classList.remove('hidden');
         var cap = box.querySelector('.pet-caption');
         if (cap) cap.textContent = label;
-        var btn = box.querySelector('.pet-btn');
-        if (btn) btn.setAttribute('aria-label', 'Sessions: ' + label);
+        petButtonState(box, c, label);
         if (PET.pose === pose && PET.timer) return;
         var token = ++PET.token;
         petLoadImages(spec).then(function () {
@@ -464,10 +641,10 @@
           petStop();
           PET.pose = pose; PET.frame = 0;
           if (!box.querySelector('.pet-sprite')) {
-            box.innerHTML = '<button type="button" class="pet-btn" data-goto="sessions"><span class="pet-sprite" aria-hidden="true"></span><span class="pet-caption"></span></button>' + PET_CHANGE;
+            box.innerHTML = '<button type="button" class="pet-btn" data-today="pet"><span class="pet-sprite" aria-hidden="true"></span><span class="pet-caption"></span></button>' + PET_CHANGE;
           }
           box.querySelector('.pet-caption').textContent = label;
-          box.querySelector('.pet-btn').setAttribute('aria-label', 'Sessions: ' + label);
+          petButtonState(box, c, label);
           var el = box.querySelector('.pet-sprite'), scale = PET_HEIGHT / spec.height;
           el.style.width = Math.round(spec.frameWidth * scale) + 'px';
           petPaint(el, spec, 0, scale);
@@ -531,6 +708,7 @@
       renderRunning(working, open);
       if (!offline) renderPet(sessions);
       paintNeeds();
+      renderWeather(welcome);
       renderNext(welcome);
       loadTodayIntake();
       setBadge('sessions', working.length > 0);
@@ -563,11 +741,94 @@
       '<span class="rec-copy"><strong>Recording now</strong><span>' + esc(rec.source + (rec.startTime ? ', ' + span(rec.startTime) + ' so far' : '')) + '</span></span>' +
       '<span class="btn small">Live view</span></button>';
   }
+  // ── The Today summary (6.99.26 candidate) ───────────────
+  // "The orchestrator's eyes" (Miles, 11/07): two or three sentences on what the sessions add up to, written by Haiku on
+  // the server (lib/today-brief.ts). Today sends what it already read: session titles, states, how long, each session's
+  // latest line and what needs you. The server decides whether a new one is written (off unless switched on, only when
+  // the inputs changed, 10 minutes apart, 60 a day, a breaker). Today never waits for it: the counts line paints at once
+  // and the summary replaces it when one arrives. Never shown over a session list that was not read.
+  var BRIEF = { view: null, inflight: false, sentKey: '', sentAt: 0 };
+  // 6.99.26 QA: the same rows are asked about again only after five minutes (a Today that sits open still learns what
+  // the server reads itself: sub-agents and Work cards); changed rows are asked about at once, one ask at a time.
+  var BRIEF_RESEND_MS = 5 * 60000, BRIEF_OFF_RECHECK_MS = 5 * 60000, BRIEF_TICK_MS = 60000;
+  function briefMinutes(v) { var d = toDate(v); return d ? Math.max(0, Math.round((Date.now() - d.getTime()) / 60000)) : 0; }
+  function briefInputs(m) {
+    var sessions = [];
+    (state.sessions || []).forEach(function (s) {
+      if (sxKeepWarm(s)) return;
+      var kind = sxState(s) === 'waiting' ? 'waiting' : s.running_active ? 'working' : s.running ? 'open' : '';
+      if (!kind) return;   // only what Today counts: waiting, working and open
+      var k = splitSessionId(s.provider, s.session_id || s.id);
+      sessions.push({ title: sessionTitle(s), provider: k.provider, state: kind,
+        minutes: briefMinutes(kind === 'open' ? (s.last_activity_at || s.state_since) : (s.state_since || s.last_activity_at)),
+        line: String(s.discussion_summary || '').slice(0, 400), waiting: kind === 'waiting' ? askedWhy(s) : '',
+        // Only so the server can read this session's sub-agents (names, tasks, status); it never reaches the model.
+        key: k.provider + '|' + k.id,
+        agents: s.subagent_activity ? { active: s.subagent_activity.active, completed: s.subagent_activity.completed, total: s.subagent_activity.total } : undefined });
+    });
+    var needs = m.rows.filter(function (r) { return r.kind !== 'session'; }).slice(0, 12).map(function (r) {
+      if (r.kind === 'work') return { title: r.item.sessionTitle || r.item.title || 'Handoff', why: needWhy(r.item) };
+      return { title: r.title, why: r.why || '' };
+    });
+    // Today folds all but waiting sessions under "can wait until tomorrow" in quiet hours; the summary says the same.
+    var later = m.later.filter(function (r) { return r.kind !== 'session'; }).length;
+    return { sessions: sessions.slice(0, 40), needs: needs, later: Math.min(later, needs.length), sessionsRead: TODAY.sessionsState === 'answered', needsComplete: !!m.settled,
+      unread: m.failed.slice(), recording: !!TODAY.recording };
+  }
+  // Asked once every source answered or failed: at once when what Today read changed, else at most every five minutes
+  // (the server gates the spend; this only saves requests). When the switch is off, every five minutes.
+  function requestBrief(m) {
+    if (BRIEF.inflight || state.pane !== 'today') return;   // renderStory already answered an offline Today
+    if (Object.keys(m.states).some(function (k) { return m.states[k] === 'pending'; })) return;
+    var body = briefInputs(m);
+    var key = JSON.stringify([body.sessions.map(function (s) { return [s.title, s.state, s.line, s.waiting, s.agents]; }), body.needs, body.later, body.sessionsRead, body.needsComplete, body.unread, body.recording]);
+    var since = Date.now() - BRIEF.sentAt;
+    if (BRIEF.view && BRIEF.view.state === 'off' ? since < BRIEF_OFF_RECHECK_MS : key === BRIEF.sentKey && since < BRIEF_RESEND_MS) return;
+    BRIEF.inflight = true; BRIEF.sentKey = key; BRIEF.sentAt = Date.now();
+    api('/api/today/brief', { method: 'POST', body: body, timeoutMs: 45000 }).then(function (v) {
+      BRIEF.view = v && typeof v === 'object' ? v : null;
+    }, function () { /* keep what was shown: the counts line or the last summary */ }).then(function () {
+      BRIEF.inflight = false;
+      if (TODAY.model && state.pane === 'today') renderStory(TODAY.model);
+    });
+  }
+  /** The summary to show, or null: only with text, only over a session list that was read. */
+  function briefShown() {
+    var v = BRIEF.view;
+    if (!v || !v.text || (v.state !== 'fresh' && v.state !== 'stale') || TODAY.sessionsState !== 'answered') return null;
+    return v;
+  }
+  // Forget the summary (Settings turned it on or off): the next Today paint asks at once.
+  function resetBrief() { BRIEF.view = null; BRIEF.sentKey = ''; BRIEF.sentAt = 0; }
+  // Every minute while Today is on screen: "Updated N min ago" moves on, and an unchanged Today asks again once its
+  // five minutes are up (requestBrief's own throttle). Hidden or another pane: nothing.
+  setInterval(function () {
+    if (document.hidden || state.pane !== 'today' || !TODAY.model || TODAY.offline) return;
+    requestBrief(TODAY.model);
+    var v = briefShown(), when = document.querySelector('#today-story .story-when');
+    if (v && when) when.textContent = briefWhen(v, TODAY.model);
+  }, BRIEF_TICK_MS);
+  function briefWhen(v, m) {
+    var mins = briefMinutes(v.at);
+    var out = 'Updated ' + (mins < 1 ? 'just now' : span(v.at) + ' ago');
+    // Stale says so once it is five minutes old: a summary from a minute ago over one new reply is still the picture.
+    if (v.state === 'stale' && mins >= 5) out += '. Things have moved since';
+    if (m.failed.length) out += '. Couldn’t read ' + listWords(m.failed) + ', so this may not be everything';
+    return out + '.';
+  }
+
   // The headline: COS Control's brief (Models.swift TodayHome.brief) over the same rows Needs you lists.
   function renderStory(m) {
     var el = $('today-story');
     el.className = 'story';
     if (TODAY.offline) { el.textContent = 'COS on ' + state.serverName + ' is not answering right now. Today fills in when it does.'; return; }
+    // The model's summary when there is one (it never blocks: the counts line below shows until it lands). The test
+    // harnesses that run this block alone have no requestBrief, so it is looked up, never assumed.
+    if (typeof requestBrief === 'function') {
+      requestBrief(m);
+      var brief = briefShown();
+      if (brief) { el.innerHTML = esc(brief.text) + '<span class="story-when">' + esc(briefWhen(brief, m)) + '</span>'; return; }
+    }
     var first = '';
     if (m.sessionsWaiting > 0) first = countWord(m.sessionsWaiting) + ' ' + plural(m.sessionsWaiting, 'session is', 'sessions are') + ' waiting on you';
     else if (m.now.length > 0) first = countWord(m.now.length) + ' ' + plural(m.now.length, 'thing needs', 'things need') + ' you' + (m.settled ? '' : ' so far');
@@ -658,6 +919,29 @@
     if (s.waiting_kind === 'question' && d) return d.length > 160 ? d.slice(0, 159) + '…' : d;
     return 'Waiting for you' + (sxProvider(s.provider) === 'claude' ? '. Paused until you answer.' : '');
   }
+  // 6.99.26: where a waiting session's question can be answered. 'here': this page holds it (panes/questions.js), as
+  // cards in its waiting sheet. 'mac': a Claude session's own prompt (or a held one that went back to the Mac), which
+  // only the Mac can answer, in person or through Screens. 'answered': answered on some screen in the last two minutes,
+  // the list not caught up yet. '': a reply answers it (a Codex or Cursor session).
+  function sessionQs() { var q = window.COSWeb && window.COSWeb.sessionQuestions; return q && q.itemsFor ? q : null; }
+  function askedHere(items) {
+    var it = items[0];
+    if (!it) return '';
+    if (it.kind === 'approval') return it.approval && it.approval.summary ? 'Wants to run ' + clipWords(it.approval.summary, 80) : '';
+    var q = (it.questions || [])[0];
+    return q && q.question ? clipWords(q.question, 160) : '';
+  }
+  function clipWords(text, n) { var t = String(text || '').replace(/\s+/g, ' ').trim(); return t.length > n ? t.slice(0, n - 1) + '…' : t; }
+  function whereFor(provider, id) {
+    var q = sessionQs();
+    var held = q ? q.itemsFor(id) : [], mac = q && q.atMacFor ? q.atMacFor(id) : [];
+    if (held.length) return { where: 'here', ask: askedHere(held) };
+    if (q && q.answeredFor && q.answeredFor(id)) return { where: 'answered', ask: '' };
+    var words = mac.length && q.wordsOf ? q.wordsOf(mac[0].id) : null;
+    var ask = words ? clipWords(words.questions[0] || (words.summary ? 'Wants to run ' + words.summary : ''), 160) : '';
+    if (mac.length || sxProvider(provider) === 'claude') return { where: 'mac', ask: ask };
+    return { where: '', ask: '' };
+  }
   function needsModel() {
     var states = { sessions: TODAY.sessionsState, work: TODAY.workState, voices: TODAY.voices.state, memories: TODAY.memories.state };
     var rows = [], seen = {};
@@ -665,7 +949,19 @@
       if (sxKeepWarm(s) || sxState(s) !== 'waiting') return;
       var k = splitSessionId(s.provider, s.session_id || s.id);
       seen[k.provider + '|' + String(k.id).toLowerCase()] = 1;
-      rows.push({ kind: 'session', tier: 1, title: askedTitle(s), why: askedWhy(s), since: s.state_since || s.last_activity_at, key: k.provider + '|' + k.id });
+      var w = whereFor(k.provider, k.id);
+      rows.push({ kind: 'session', tier: 1, title: askedTitle(s), why: askedWhy(s), since: s.state_since || s.last_activity_at, key: k.provider + '|' + k.id, where: w.where, ask: w.ask });
+    });
+    // A question this page holds for a session the list has not shown waiting yet: its own row, so every held
+    // question is in front of you (two at once each get one).
+    var qs = sessionQs();
+    (qs ? qs.itemsFor('') : []).forEach(function (it) {
+      var k = splitSessionId(it.provider, it.sessionId), sk = k.provider + '|' + String(k.id).toLowerCase();
+      if (!k.id || seen[sk]) return;
+      seen[sk] = 1;
+      var s = (state.sessions || []).filter(function (x) { var xk = splitSessionId(x.provider, x.session_id || x.id); return xk.provider === k.provider && String(xk.id).toLowerCase() === String(k.id).toLowerCase(); })[0];
+      var title = s ? askedTitle(s) : it.kind === 'approval' ? 'A session wants your permission' : 'A session asked you a question';
+      rows.push({ kind: 'session', tier: 1, title: title, why: 'Waiting for you. Paused until you answer.', since: it.createdAt, key: k.provider + '|' + k.id, where: 'here', ask: askedHere([it]) });
     });
     (TODAY.needs || []).forEach(function (it) {
       var k = splitSessionId(it.provider, it.sessionId);
@@ -721,9 +1017,11 @@
         (k.id ? '<div class="need-actions"><button type="button" class="btn small' + (i === 0 ? ' primary' : '') + '" data-session="' + esc(k.provider) + '|' + esc(k.id) + '">Open session</button></div>' : '') + '</div>';
     }
     if (r.kind === 'session') {
-      // The session's question shows in the overlay's peek, with its cards to answer.
+      // The session's question shows in the overlay's peek, with its cards to answer. Under it, where it can be answered.
+      var q = sessionQs(), whereLine = r.where === 'here' ? 'Answer it here.' : r.where === 'mac' ? (q && q.macLine) || '' : r.where === 'answered' ? (q && q.answeredLine) || '' : '';
       return '<div class="need-row">' +
-        '<button type="button" class="need-open" data-today="wait" data-key="' + esc(r.key) + '">' + top(r.title) + '<span class="need-foot">' + esc(r.why) + '</span></button>' +
+        '<button type="button" class="need-open" data-today="wait" data-key="' + esc(r.key) + '">' + top(r.title) + '<span class="need-foot">' + esc(r.ask || r.why) + '</span>' +
+        (whereLine ? '<span class="need-foot need-where" data-where="' + esc(r.where) + '">' + esc(whereLine) + '</span>' : '') + '</button>' +
         '<div class="need-actions"><button type="button" class="btn small' + (i === 0 ? ' primary' : '') + '" data-session="' + esc(r.key) + '">Open session</button></div></div>';
     }
     var go2 = r.kind === 'voices' ? 'speakers' : 'memories/view/review', label = r.kind === 'voices' ? 'Name' : 'Review';
@@ -739,18 +1037,32 @@
     var html = visible.map(needRowHtml).join('');
     if (shown.length > visible.length) html += '<button type="button" class="need-more" data-today-needs="all">Show ' + (shown.length - visible.length) + ' more</button>';
     if (m.later.length && !TODAY.showLater) html += '<button type="button" class="need-more" data-today-needs="later">' + esc(m.later.length + (m.later.length === 1 ? ' thing can' : ' things can') + ' wait until tomorrow. Show') + '</button>';
-    if (!m.rows.length) html = '<p class="card-empty">' + esc(m.settled ? 'Nothing is waiting on you.' : m.failed.length ? '' : 'Reading sessions, Work, voices and memories.') + '</p>';
-    m.failed.forEach(function (name) { html += '<button type="button" class="need-more need-failed" data-today-needs="retry">' + esc('Couldn’t read ' + name + '. Try again') + '</button>'; });
+    // 6.99.30 (design QA): no empty line above a failed read (it left a 45 px gap), and one retry row, never one per
+    // source: with the Mac not answering (sessions and Work both unread, or more than two sources) it says so once.
+    if (!m.rows.length) html = m.failed.length ? '' : '<p class="card-empty">' + esc(m.settled ? 'Nothing is waiting on you.' : 'Reading sessions, Work, voices and memories.') + '</p>';
+    if (m.failed.length) {
+      var silent = TODAY.offline || m.failed.length > 2;
+      html += '<button type="button" class="need-more need-failed" data-today-needs="retry">' + esc(silent ? 'Your Mac is not answering. Try again.' : 'Couldn’t read ' + listWords(m.failed) + '. Try again') + '</button>';
+    }
     list.innerHTML = html;
   }
+  // Weather sits under the date at the top left (Miles, 11/07), where the eye starts, not inside Next up.
+  // It shows whether or not a meeting is next.
+  function renderWeather(w) {
+    var el = $('today-weather'); if (!el) return;
+    var x = w && w.weather;
+    if (!x || !x.temp) { el.classList.add('hidden'); el.textContent = ''; return; }
+    var desc = String(x.desc || '').toLowerCase(), place = x.location ? String(x.location).split(',')[0] : '';
+    el.textContent = x.temp + (desc ? ' and ' + desc : '') + (place ? ' in ' + place : '');
+    el.classList.remove('hidden');
+  }
   function renderNext(w) {
     var card = $('next-card');
     var n = w && w.nextEvent; var d = n && toDate(n.time);
     if (!d || !n.title) { card.classList.add('hidden'); return; }
-    var weather = w.weather && w.weather.temp ? w.weather.temp + ' and ' + String(w.weather.desc || '').toLowerCase() + (w.weather.location ? ' in ' + w.weather.location.split(',')[0] : '') : '';
     var dw = dayWord(d);
     $('next-body').innerHTML = '<span class="when">' + esc(clock(d)) + '</span><span><span class="what">' + esc(n.title) + '</span>' +
-      '<span class="sub" style="display:block">' + esc((dw.charAt(0).toUpperCase() + dw.slice(1)) + (weather ? '. Now ' + weather : '')) + '</span></span>';
+      '<span class="sub" style="display:block">' + esc(dw.charAt(0).toUpperCase() + dw.slice(1)) + '</span></span>';
     // Control's Next up (todayPrepButtons): Prep me opens the Prep composer in the COS chat (panes/cos-chat.js prepFor),
     // Open meeting opens Meetings. Without a server to answer, Prep me is not offered.
     var prep = !TODAY.offline && window.COSWeb && window.COSWeb.cosChat && window.COSWeb.cosChat.prepFor;
@@ -800,8 +1112,8 @@
     }).join('') + '<p class="intake-foot">Moves to Work at midnight.</p>';
     card.classList.remove('hidden');
   }
-  function openTodayAction(t) {
-    var kind = t.getAttribute('data-today'), key = t.getAttribute('data-key') || '';
+  function openTodayAction(t, kindIn, keyIn) {
+    var kind = kindIn || t.getAttribute('data-today'), key = keyIn != null ? keyIn : t.getAttribute('data-key') || '';
     ensurePane('todayActions', 4000).then(function (m) {
       if (!m || !m.open) throw new Error('The Today overlay did not start.');
       m.open(kind, key, t);
@@ -811,9 +1123,9 @@
       // history entry, which the fallback replaces, so Back from there still lands on Today.
       var s = String(kind === 'run' || kind === 'wait' ? key : t.getAttribute('data-session-key') || '').split('|');
       var session = (kind === 'run' || kind === 'wait' || kind === 'need') && !!s[1];
-      var dest = session ? ['sessions', s[0], s.slice(1).join('|')] : ['work'].concat(kind === 'need' ? [] : ['sort']);
+      var dest = session ? ['sessions', s[0], s.slice(1).join('|')] : kind === 'pet' ? ['sessions'] : ['work'].concat(kind === 'need' ? [] : ['sort']);
       console.error('[today] the overlay did not open (' + kind + '); opening ' + dest.join('/') + ' instead.', err);
-      toast(session ? 'Could not open that here. Opening the session.' : 'Could not open that here. Opening it in Work.');
+      toast(session ? 'Could not open that here. Opening the session.' : kind === 'pet' ? 'Could not open that here. Opening Sessions.' : 'Could not open that here. Opening it in Work.');
       if (history.state && history.state.cosTodayOverlay) location.replace('#/' + dest.map(encodeURIComponent).join('/'));
       else go(dest[0], dest.slice(1));
     });
@@ -1059,6 +1371,7 @@
     var meta = sxBadge(key.provider) +
       (s.pinned ? '<span class="sx-pinned">PINNED</span>' : '') +
       (label ? '<span class="sx-chip ' + st + '">' + esc(label) + '</span>' : '') +
+      (notSentFor(key.provider, key.id) ? '<span class="sx-chip refused" title="' + esc(notSentFor(key.provider, key.id).line) + '">Not sent</span>' : '') +
       (upd ? '<span class="sx-when">Updated ' + esc(sxShortDate(upd)) + '</span>' : '') +
       (ambiguous[title] && opened ? '<span class="sx-opened" title="Another session on screen has the same name. This one was opened ' + esc(sxShortDate(opened)) + '.">Opened ' + esc(sxShortDate(opened)) + '</span>' : '') +
       (s.project && String(s.project) !== title ? '<span class="sx-ws">' + esc(s.project) + '</span>' : '');
@@ -1335,18 +1648,49 @@
   }
   function sessionPath(provider, id, tail) { return '/api/agent-sessions/' + encodeURIComponent(provider) + '/' + encodeURIComponent(id) + (tail || ''); }
 
+  // 6.99.30 (QA, held from Codex for .30): a queued message the server refused or let expire is said where the person
+  // looks, not only in the Sessions reader: a "Not sent" line in Today's sheet for that session and a chip on its row in
+  // the Sessions list. What the server's queue said last, per session, in this browser for a day; each read of the
+  // queue replaces it, so a row the server drops clears the mark.
+  var NOT_SENT_KEY = 'cos_web_not_sent', NOT_SENT_KEEP_MS = 86400000;
+  function notSentRows(rows) { return (rows || []).filter(function (t) { return t && (t.status === 'refused' || t.status === 'expired'); }); }
+  function notSentLine(t) {
+    var why = String((t && t.reasonCopy) || (t && t.status === 'expired' ? 'the thread stayed busy too long.' : 'the session refused it.')).trim();
+    return /^not sent\b/i.test(why) ? why : 'Not sent: ' + why.charAt(0).toLowerCase() + why.slice(1);
+  }
+  function noteNotSent(provider, id, rows) {
+    var all = readStore(NOT_SENT_KEY), k = provider + '|' + id, now = Date.now(), list = notSentRows(rows);
+    Object.keys(all).forEach(function (x) { if (!all[x] || now - (Number(all[x].at) || 0) > NOT_SENT_KEEP_MS) delete all[x]; });
+    if (list.length) all[k] = { n: list.length, line: notSentLine(list[list.length - 1]).slice(0, 240), at: now }; else delete all[k];
+    writeStore(NOT_SENT_KEY, all);
+  }
+  function notSentFor(provider, id) {
+    var v = readStore(NOT_SENT_KEY)[provider + '|' + id];
+    return v && Date.now() - (Number(v.at) || 0) <= NOT_SENT_KEEP_MS ? v : null;
+  }
+
   // Like api(), but a 4xx refusal comes back as { status, body } instead of throwing, because
   // these routes answer "busy", "changed" or "not now" with a body the person should read.
+  // A timeout here stays the caller's (an abort: "may have saved", a probe that gives up), never a down mark; api()
+  // reads and the question poll are what say a hung Mac is not answering (6.99.32).
   function apiAnswer(path, opts) {
     var o = opts || {};
     var ctrl = typeof AbortController === 'function' ? new AbortController() : null;
     var timer = ctrl && o.timeoutMs ? setTimeout(function () { ctrl.abort(); }, o.timeoutMs) : null;
     var headers = { 'X-COS-Web': '1' };
     if (o.body !== undefined) headers['Content-Type'] = 'application/json';
+    var sentAt = Date.now();
     return fetch(path, { method: o.method || 'GET', headers: headers, credentials: 'same-origin', body: o.body !== undefined ? JSON.stringify(o.body) : undefined, signal: ctrl ? ctrl.signal : undefined })
       .then(function (res) {
+        sxNoteClock(res, sentAt);
+        noteServer(true);
         if (res.status === 401) { showAuth(); throw new Error('Signed out. Connect this browser again.'); }
         return res.text().then(function (t) { var b = {}; try { b = t ? JSON.parse(t) : {}; } catch (_e) { b = {}; } return { status: res.status, body: b || {} }; });
+      }, function (err) {
+        // A timeout this call asked for stays an abort (its callers say "may have saved"); the rest never reached the Mac.
+        if (err && err.name === 'AbortError') throw err;
+        noteServer(false);
+        throw unreachableError(err);
       })
       .finally(function () { if (timer) clearTimeout(timer); });
   }
@@ -1358,7 +1702,11 @@
   function writeStore(key, v) { try { localStorage.setItem(key, JSON.stringify(v)); } catch (_e) {} }
   function saveHeld(r) {
     var all = readStore(HELD_KEY), k = r.provider + '|' + r.id;
-    var keep = r.held.filter(function (h) { return !h.cancelled; }).map(function (h) { return { text: h.text, key: h.key, since: h.since }; });
+    var keep = r.held.filter(function (h) { return !h.cancelled; }).map(function (h) {
+      var o = { text: h.text, key: h.key, since: h.since };
+      if (h.ids && h.ids.length) { o.ids = h.ids; if (h.files && h.files.length) o.files = h.files; }
+      return o;
+    });
     if (keep.length) all[k] = keep; else delete all[k];
     writeStore(HELD_KEY, all);
   }
@@ -1393,6 +1741,7 @@
   function openSession(provider, id) {
     var reader = $('session-reader');
     if (!provider || !id) return;
+    readerImagesStop($('session-turns'));
     if (state.stream) { state.stream.close(); state.stream = null; }
     clearInterval(state.turnPoll);
     if (state.reading) { clearInterval(state.reading.heldTimer); clearInterval(state.reading.feedTimer); }
@@ -1422,15 +1771,21 @@
         '<p class="sx-copy-note hidden" id="session-copy-note" role="status"></p>' +
         '<div class="sx-chat">' +
           '<div id="session-verdict"></div>' +
-          '<form class="composer" id="session-form" data-provider="' + esc(provider) + '" data-id="' + esc(id) + '">' +
+          '<form class="composer att-composer" id="session-form" data-provider="' + esc(provider) + '" data-id="' + esc(id) + '">' +
+            '<div class="cc-chips att-files hidden" id="session-files"></div>' +
             '<textarea id="session-input" rows="1" placeholder="Continue this session…" enterkeyhint="send" aria-label="Continue this session"></textarea>' +
-            '<div class="composer-actions"><button type="button" class="btn small" data-action="fork-session" title="Copy this session and send the message to the copy">Fork</button>' +
-            '<button type="submit" class="btn primary small">Send</button></div>' +
+            '<div class="composer-actions"><span id="session-clip" class="att-clip"></span><button type="button" class="btn small" data-action="fork-session" title="Copy this session and send the message to the copy">Fork</button>' +
+            '<button type="submit" class="btn primary small" id="session-send">Send</button></div>' +
           '</form><div class="status-line" id="session-status"></div>' +
           '<p class="sx-caution hidden" id="session-caution"></p>' +
           '<div id="session-queue"></div>' +
         '</div>';
-      setLive({ working: !!d.running_active });
+      readerImagesMount($('session-turns'), r);
+      sxNoteList(r, d);
+      setLive({});
+      paintReaderFiles();
+      // The Mac's answer about files may not be in yet: ask once, then draw the clip.
+      var kitR = readerKit(); if (kitR && !kitR.turnFiles()) kitR.ensureCaps().then(paintReaderFiles, function () {});
       renderHeld(state.reading);
       loadQueue(provider, id);
       sxProbeAttach(r);
@@ -1449,20 +1804,30 @@
   // ACTIVITY (ActivityWindow.swift SessionActivityFeed 6800-6890, SessionLiveFeed.swift): the state
   // word with its clock, the current prompt, the last eight tool lines, and the honest counters.
   // The reducer follows SessionLiveFeed.applying: a reseed (seq 1 after anything) starts over.
-  function newFeed() { return { transport: 'idle', agentState: null, stateSince: null, waitingKind: null, waitingDetail: null, failure: null, lastReply: null, prompt: '', tools: [], lastSeq: 0, lastEventAt: null, missed: 0, connected: false, fallback: null }; }
+  function newFeed() { return { transport: 'idle', transportSeenAt: null, agentState: null, stateSince: null, stateSeenAt: null, seenMemo: null, statusAt: null, waitingKind: null, waitingDetail: null, failure: null, lastReply: null, prompt: '', tools: [], lastSeq: 0, lastEventAt: null, missed: 0, connected: false, fallback: null }; }
   function applyFeed(r, e) {
     if (typeof e.seq !== 'number') return;
     var f = r.feed;
-    if (e.seq === 1 && f.lastSeq > 0) { var keep = f.connected; f = r.feed = newFeed(); f.connected = keep; }
+    if (e.seq === 1 && f.lastSeq > 0) { var keep = f.connected, seenMemo = f.seenMemo; f = r.feed = newFeed(); f.connected = keep; f.seenMemo = seenMemo; }
     else if (f.lastSeq > 0 && e.seq > f.lastSeq + 1) f.missed += e.seq - f.lastSeq - 1;
     f.lastSeq = e.seq;
     f.lastEventAt = typeof e.at === 'number' ? new Date(e.at) : new Date();
     f.connected = true;
     if (f.fallback === 'reconnecting') f.fallback = null;
     if (e.kind === 'status') {
-      if (e.state) f.transport = e.state;
+      f.statusAt = f.lastEventAt;
+      // When this page first saw each state (its own clock): the Stop's echo window is measured by it. The
+      // memo outlives a reseed, so a reconnect that repeats a state seen before a Stop is not news.
+      var memo = f.seenMemo || (f.seenMemo = {});
+      if (e.state) {
+        if (!memo.stream || memo.stream.key !== e.state) memo.stream = { key: e.state, seen: Date.now() };
+        f.transport = e.state; f.transportSeenAt = memo.stream.seen;
+      }
       if (e.agent_state) {
-        f.agentState = e.agent_state; f.stateSince = toDate(e.state_since);
+        var since = toDate(e.state_since), hookKey = e.agent_state + '|' + sxMs(since);
+        if (!memo.hook || memo.hook.key !== hookKey) memo.hook = { key: hookKey, seen: Date.now() };
+        f.stateSeenAt = memo.hook.seen;
+        f.agentState = e.agent_state; f.stateSince = since;
         f.waitingKind = e.waiting_kind || null; f.waitingDetail = e.waiting_detail || null; f.failure = e.failure || null;
         if (e.last_reply) f.lastReply = e.last_reply;
       }
@@ -1476,16 +1841,110 @@
   // `other` is the stream's verb for every tool it has no verb for; its target names the tool ("Used SendMessage").
   var SX_VERBS = { read: 'Read', edit: 'Edited', write: 'Edited', bash: 'Ran', run: 'Ran', search: 'Searched', grep: 'Searched', glob: 'Searched', fetch: 'Fetched', web: 'Fetched', agent: 'Delegated', task: 'Delegated', other: 'Used' };
   function sxToolLine(t) { var v = String(t.verb || 'tool'); var w = SX_VERBS[v] || v.charAt(0).toUpperCase() + v.slice(1); return t.target ? w + ' ' + t.target : w; }
-  // The word follows the page's own working flag, which a Stop or a finished turn settles before
-  // the stream's status catches up; otherwise the server's derived state, as Control reads it.
+  // ONE STATE FOR THE SESSION CARD (6.99.29). Miles, 11/07 11:01: Today's session overlay showed
+  // "Idle 40s" over "Working on: Yes install and proceed", beside "Working right now" and "The
+  // session is busy" while the session ran its turn. Each piece read its own source: the badge the
+  // hooks' derived state (which a turn delivered through the peer inbox does not move), the composer
+  // the server's write gate, the send note the park answer, and a delivered live turn was read as a
+  // finished one. Now every piece of the card (the badge word and clock, the prompt line's label,
+  // Stop, the composer's park note and the reader's state line) reads sxTruth, and each signal says
+  // what it saw and WHEN that became true; the freshest wins:
+  //   hook   the stream's derived agent_state, since its state_since
+  //   stream the stream's own state, when no derived state rides it, as of that status line
+  //   list   the session row or detail: running_active as of its last activity, else since state_since
+  //   gate   the server's write gate: native_thread_working on the attachability probe, a refused
+  //          turn or a parked send, or a turn delivered live into the open session, as of the answer;
+  //          a later free answer, or a COS child's turn that finished, clears it
+  //   stop   this page's Stop (and a finished COS child turn): idle as of then, and no working signal
+  //          that ARRIVED in the next SX_STOP_ECHO_MS counts (the stream's status trails a Stop). The
+  //          window is the page's own clock (`seen`, when this page observed each signal), never the
+  //          signal's server time, and a turn this page sends ends it (continueSession clears stoppedAt).
+  // Waiting, failed and ended, from the hook or the session row, are the session's own words and stay:
+  // a gate or stream that sees a busy file does not unseat a question (QA 6.99.29: the row and the
+  // hook carry the same state_since, so the row's Waiting must hold as the hook's does). Signals with
+  // the same time are ordered gate, stream, list, hook, stop: the hook's word wins a tie. Idle yields
+  // only to working seen more than SX_IDLE_GRACE_MS after it, the server's rule for the flush that
+  // trails a Stop (TRANSCRIPT_AFTER_IDLE_GRACE_MS).
+  var SX_IDLE_GRACE_MS = 5000, SX_STOP_ECHO_MS = 8000, SX_GATE_RECHECK_MS = 20000, SX_PROBE_TIMEOUT_MS = 15000;
+  var SX_TIE_RANK = { gate: 0, stream: 1, list: 2, hook: 3, stop: 4 };
+  function sxMs(v) {
+    var t = v instanceof Date ? v.getTime() : typeof v === 'number' ? v : typeof v === 'string' && v ? Date.parse(v) : NaN;
+    return isFinite(t) ? t : null;
+  }
+  var SX_HOOK_WORD = { running: 'Working', waiting: 'Waiting', failed: 'Failed', ended: 'Done', idle: 'Idle' };
+  function sxSignals(r) {
+    var f = r.feed || {}, out = [];
+    // `seen`: when this page observed the signal (its own clock), for the Stop's echo window.
+    if (f.agentState && SX_HOOK_WORD[f.agentState]) out.push({ word: SX_HOOK_WORD[f.agentState], at: sxMs(f.stateSince) || sxMs(f.statusAt) || 0, src: 'hook', seen: sxMs(f.stateSeenAt) });
+    else if (f.statusAt) out.push({ word: f.transport === 'working' ? 'Working' : f.transport === 'done' ? 'Done' : 'Idle', at: sxMs(f.statusAt), src: 'stream', seen: sxMs(f.transportSeenAt) });
+    if (r.list && r.list.at != null) out.push({ word: r.list.word, at: r.list.at, src: 'list', seen: sxMs(r.list.seen) });
+    // A gate answer and a Stop are this page's own moments: ranked on the Mac's clock (sxServerTime) against the Mac's
+    // own times, and kept on this page's clock as `seen` for the echo window (6.99.30, QA: clock skew).
+    if (r.gate && r.gate.busy && r.gate.at != null) out.push({ word: 'Working', at: sxServerTime(r.gate.at), src: 'gate', seen: r.gate.at });
+    var stop = sxMs(r.stoppedAt);
+    if (stop !== null) out.push({ word: 'Idle', at: sxServerTime(stop), src: 'stop', seen: stop });
+    return out;
+  }
+  /** { word, at, src }: the one state the whole card shows. Null before any signal. */
+  function sxTruth(r) {
+    var stop = sxMs(r.stoppedAt);
+    var all = sxSignals(r).sort(function (a, b) { return a.at - b.at || SX_TIE_RANK[a.src] - SX_TIE_RANK[b.src]; });
+    var best = null;
+    all.forEach(function (c) {
+      if (!best) { best = c; return; }
+      if (c.word === 'Working') {
+        // The Stop's echo, judged by when this page saw the signal (a signal with no arrival time: by its own).
+        var seen = c.seen != null ? c.seen : c.at;
+        if (stop !== null && seen >= stop && seen - stop < SX_STOP_ECHO_MS) return;
+        if (stop !== null && seen < stop) return;
+        if ((best.src === 'hook' || best.src === 'list') && (c.src === 'gate' || c.src === 'stream') && /^(Waiting|Failed|Done)$/.test(best.word)) return;
+        if (best.word === 'Idle' && best.src !== 'stop' && c.src !== best.src && c.at <= best.at + SX_IDLE_GRACE_MS) return;
+      }
+      best = c;
+    });
+    return best;
+  }
+  /** Settle the page's working flag from the one state; true when it changed. */
+  function sxSettle(r) {
+    var t = sxTruth(r), working = !!(t && t.word === 'Working');
+    r.live = r.live || {};
+    var was = !!r.live.working;
+    r.live.working = working;
+    r.live.waiting = !!(t && t.word === 'Waiting');
+    if (!working) { r.live.step = null; r.live.prose = null; }
+    return was !== working;
+  }
+  /** What the server's write gate said, and when. A free answer clears an earlier busy one. */
+  function sxNoteGate(r, busy) { r.gate = { busy: !!busy, at: Date.now() }; }
+  /** The list or detail row's view, timed by its own evidence. */
+  function sxNoteList(r, row) {
+    if (!row) return;
+    var waiting = sxState(row) === 'waiting', working = !!row.running_active && !waiting;
+    var at = working ? (sxMs(row.last_activity_at) || sxMs(row.state_since)) : (sxMs(row.state_since) || sxMs(row.last_activity_at));
+    // A row with no time of its own is the oldest word: the live feed outranks it the moment it speaks.
+    var word = working ? 'Working' : waiting ? 'Waiting' : 'Idle', was = r.list;
+    // Arrival is the first time this page saw THIS word at THIS time: a re-read of the same row is not news.
+    r.list = { word: word, at: at != null ? at : 0, seen: was && was.word === word && was.at === (at != null ? at : 0) && was.seen != null ? was.seen : Date.now() };
+  }
+  /** A gate busy answer that decides the card is re-asked while the card shows it: 20 s after the last attempt, and
+   *  each failed attempt doubles the wait, up to 16 times (QA 6.99.29: a failing probe was re-asked every second).
+   *  Every attempt is stamped (gate.triedAt) and ends within SX_PROBE_TIMEOUT_MS (6.99.30: before that a probe that
+   *  never answered left r.probing set, and the gate was never asked again). So a busy gate stands only while the
+   *  server keeps answering busy, or keeps not answering, and a fresher signal (a Stop, the hook going idle more than
+   *  the grace after it) still outranks it. `at` stays the time of the last ANSWER: a failure is no evidence of busy. */
+  function sxGateStale(r) {
+    var t = sxTruth(r);
+    if (!(t && t.src === 'gate' && r.gate) || r.probing) return false;
+    var last = Math.max(r.gate.at || 0, r.gate.triedAt || 0), fails = r.gate.failures || 0;
+    return Date.now() - last > SX_GATE_RECHECK_MS * Math.min(Math.pow(2, fails), 16);
+  }
   function sxFeedWord(r) {
-    var f = r.feed;
-    if (r.live && r.live.working) return 'Working';
-    var s = f.agentState || f.transport;
-    if (s === 'waiting') return 'Waiting';
-    if (s === 'failed') return 'Failed';
-    if (s === 'ended' || s === 'done') return 'Done';
-    return 'Idle';
+    var t = sxTruth(r);
+    return t ? t.word : 'Idle';
+  }
+  /** The prompt line: what the session works on, or what it was last asked. */
+  function sxPromptLine(r, text) {
+    return (sxFeedWord(r) === 'Working' ? 'Working on: ' : 'Last asked: ') + text;
   }
   function sxFeedDetail(f, word) {
     if (word === 'Waiting' && f.agentState === 'waiting') {
@@ -1500,10 +1959,13 @@
     if (word === 'Idle' && f.agentState === 'idle') { var reply = String(f.lastReply || '').trim(); return reply ? 'last reply: ' + reply : ''; }
     return '';
   }
-  function sxElapsed(f) {
-    var since = f.stateSince || f.lastEventAt;
+  function sxElapsed(f, r) {
+    var t = r ? sxTruth(r) : null;
+    var since = t && t.at ? new Date(t.at) : f.stateSince || f.lastEventAt;
     if (!since) return '';
-    var s = Math.max(0, Math.floor((Date.now() - since.getTime()) / 1000));
+    // QA 6.99.30 (Skeptic): every moment here is on the Mac's clock (the truth's own time, or the Mac's state_since), so
+    // now is too; a phone a minute behind read "0s" for a minute.
+    var s = Math.max(0, Math.floor((sxServerTime(Date.now()) - since.getTime()) / 1000));
     if (s < 60) return s + 's';
     if (s < 3600) return Math.floor(s / 60) + 'm ' + (s % 60) + 's';
     return Math.floor(s / 3600) + 'h ' + Math.floor((s % 3600) / 60) + 'm';
@@ -1513,6 +1975,7 @@
     if (reason === 'http_503') return 'The server has no room for another live feed right now; showing the stored turns.';
     if (reason === 'reconnecting') return 'Reconnecting to the live feed…';
     if (reason === 'stream_lost') return 'The live feed stopped answering; showing the stored turns. Reopen the session to try again.';
+    if (reason === 'unreachable') return 'Your Mac is not answering. This is the last state it sent.';
     return 'Live feed unavailable (' + reason + '); showing the stored turns.';
   }
   // The block keeps one size whatever it holds (/qa: the turns below moved while Miles read, as tool
@@ -1533,7 +1996,7 @@
       var word = sxFeedWord(r), detail = sxFeedDetail(f, word);
       html += '<div class="sx-act-state"><span class="sx-dot ' + word.toLowerCase() + '" aria-hidden="true"></span><strong>' + word + '</strong>' +
         '<span class="sx-act-detail">' + esc(detail) + '</span>' +
-        '<span class="sx-act-clock" id="session-elapsed">' + esc(sxElapsed(f)) + '</span>' +
+        '<span class="sx-act-clock" id="session-elapsed">' + esc(sxElapsed(f, r)) + '</span>' +
         (live.working ? '<button type="button" class="cx-btn quiet sx-act-stop" data-action="stop-session">Stop</button>' : '') + '</div>' +
         '<p class="sx-act-prompt">' + esc(f.prompt) + '</p>' +
         '<div class="sx-act-tail">' + f.tools.map(function (t) { return '<div class="sx-act-tool">' + esc(sxToolLine(t)) + '</div>'; }).join('') +
@@ -1542,13 +2005,15 @@
       html += '<p class="sx-act-fallback">' + esc(f.fallback ? sxFallbackLine(f.fallback) : 'Connecting to the live feed…') + '</p>';
     }
     box.innerHTML = html;
-    // The clock ticks only while the session works or waits (Control 0.5.337).
+    // The clock ticks only while the session works or waits (Control 0.5.337). A Working that only the write gate
+    // says is re-asked even with no live feed (QA 6.99.29), so it cannot stand forever once the feed is lost.
     clearInterval(r.feedTimer); r.feedTimer = null;
-    var w = sxFeedWord(r);
-    if ((f.connected || f.lastSeq > 0) && (w === 'Working' || w === 'Waiting')) {
+    var t = sxTruth(r), w = t ? t.word : 'Idle';
+    if (((f.connected || f.lastSeq > 0) && (w === 'Working' || w === 'Waiting')) || (t && t.src === 'gate' && w === 'Working')) {
       r.feedTimer = setInterval(function () {
         if (state.reading !== r) { clearInterval(r.feedTimer); return; }
-        var el = $('session-elapsed'); if (el) el.textContent = sxElapsed(r.feed);
+        var el = $('session-elapsed'); if (el) el.textContent = sxElapsed(r.feed, r);
+        if (sxGateStale(r)) sxProbeAttach(r);
       }, 1000);
     }
   }
@@ -1571,7 +2036,7 @@
     var es;
     try { es = new EventSource(sessionPath(provider, id, '/stream?seed=turn')); } catch (_e) { if (r0) { r0.feed.fallback = 'unsupported'; paintActivity(r0); } return; }
     state.stream = es;
-    var wasWorking = false;
+    var wasWorking = false, wasWaiting = false;
     es.onerror = function () {
       var r = state.reading;
       if (!r || r.id !== id || state.stream !== es) return;
@@ -1586,15 +2051,17 @@
       if (!r || r.id !== id) return;
       applyFeed(r, e);
       if (e.kind === 'status') {
-        var working = e.state === 'working' || e.agent_state === 'running';
-        // The stream's status trails a Stop by a few seconds; do not let that echo reopen it.
-        if (working && r.stoppedAt && Date.now() - r.stoppedAt < 8000) working = false;
-        var waiting = e.state === 'waiting' || e.state === 'needs_input' || e.agent_state === 'waiting';
+        // 6.99.29: the one state (sxTruth), never this line's own reading of itself.
+        setLive({});
+        var working = !!(r.live && r.live.working);
+        var waiting = !working && (e.state === 'waiting' || e.state === 'needs_input' || e.agent_state === 'waiting');
         var el = $('session-state');
         if (el) el.textContent = working ? 'Working now' : waiting ? 'Waiting for you' : 'Open';
-        setLive({ working: working });
         if (wasWorking && !working) { refreshTurns(provider, id); replyEnded(r); }
         wasWorking = working;
+        // Gone to waiting: its question may be parked for this page now (6.99.27).
+        if (waiting && !working && !wasWaiting) questionsNudge();
+        wasWaiting = waiting && !working;
       } else if (e.kind === 'tool') {
         setLive({ step: [e.verb, e.target].filter(Boolean).join(' ') });
       } else if (e.kind === 'prose' && e.text) {
@@ -1606,16 +2073,20 @@
   }
   function setLive(patch) {
     var r = state.reading; if (!r) return;
-    r.live = Object.assign(r.live || {}, patch);
-    if (!r.live.working) { r.live.step = null; r.live.prose = null; }
+    // The working flag is never set here: it is the one state's (sxSettle).
+    var p = Object.assign({}, patch); delete p.working;
+    r.live = Object.assign(r.live || {}, p);
+    var moved = sxSettle(r);
     paintActivity(r);
+    if (moved) renderVerdict(r);
   }
   function refreshTurns(provider, id) {
+    var reading = state.reading;
     api(sessionPath(provider, id, '?turns=' + SX_TURNS)).then(function (d) {
       var r = state.reading;
-      if (!r || r.id !== id) return;
+      if (!r || r !== reading || r.id !== id || r.provider !== provider) return;
       var turns = Array.isArray(d && d.recent_turns) ? d.recent_turns : [];
-      var box = $('session-turns'); if (box) sxMergeTurns(box, r.turns || [], turns, d);
+      var box = $('session-turns'); if (box) { sxMergeTurns(box, r.turns || [], turns, d); readerImagesMount(box, r); }
       // The header keeps the subtitle it opened with: a rewrap above the turns would move them.
       r.detail = d; r.turns = turns; r.more = d.recent_turns_more === true;
       renderHeld(r);
@@ -1638,13 +2109,21 @@
       var box = $('session-queue'); if (!box || !r || r.id !== id) return;
       var rows = (q.status === 200 && q.body && q.body.turns) || [];
       var waiting = rows.filter(function (t) { return t.status === 'waiting' || t.status === 'queued' || t.status === 'pending'; });
+      // QA 6.99.29: a queued message the server refused (or let expire) stays in view with the server's reason,
+      // instead of vanishing from the line.
+      var notSent = notSentRows(rows);
+      if (q.status === 200) noteNotSent(provider, id, rows);
       if (q.status === 200 && r.queued !== waiting.length) { r.queued = waiting.length; paintActivity(r); }
-      if (!waiting.length) { box.innerHTML = ''; return; }
-      box.innerHTML = '<div class="sx-queue"><p class="sx-queue-head">' + (waiting.length === 1 ? '1 follow-up queued. It sends when this session is available.' : waiting.length + ' follow-ups queued. They send in order when this session is available.') + '</p>' +
+      if (!waiting.length && !notSent.length) { box.innerHTML = ''; return; }
+      box.innerHTML = '<div class="sx-queue">' + (waiting.length ? '<p class="sx-queue-head">' + (waiting.length === 1 ? '1 follow-up queued. It sends when this session is available.' : waiting.length + ' follow-ups queued. They send in order when this session is available.') + '</p>' : '') +
         waiting.map(function (t) {
           var mine = t.owner !== 'codex' && parkedByMe(r, t.clientTurnId);
           return '<div class="sx-queue-row"><span class="sx-queue-state">' + esc(sxQueueLine(t)) + '</span><span class="sx-queue-text">' + esc(t.preview || t.prompt || 'Message') + '</span>' +
             (mine ? '<button type="button" class="cx-btn quiet" data-action="unqueue" data-turn-key="' + esc(t.clientTurnId) + '" title="Cancel this queued message. It will not be sent.">Cancel</button>' : '') + '</div>';
+        }).join('') +
+        notSent.map(function (t) {
+          return '<div class="sx-queue-row sx-queue-refused"><span class="sx-queue-state">Not sent</span><span class="sx-queue-text">' + esc(t.preview || t.prompt || 'Message') +
+            '<span class="sx-queue-reason">' + esc(notSentLine(t)) + '</span></span></div>';
         }).join('') + '</div>';
     }).catch(function () {});
   }
@@ -1654,21 +2133,33 @@
   // and anything else is the server's refusal, word for word.
   function sxProbeAttach(r) {
     // Today's overlay probes its own session object (r.view): the same verdict, painted by its view.
-    return apiAnswer(sessionPath(r.provider, r.id, '/attachability')).then(function (a) {
+    r.probing = true;
+    // Every attempt is stamped; a failed one backs the next off (sxGateStale). A gate answer resets both.
+    if (r.gate) r.gate.triedAt = Date.now();
+    var failed = function () { if (r.gate) r.gate.failures = (r.gate.failures || 0) + 1; };
+    return apiAnswer(sessionPath(r.provider, r.id, '/attachability'), { timeoutMs: SX_PROBE_TIMEOUT_MS }).then(function (a) {
       if (state.reading !== r && !r.view) return;
-      if (a.status === 404) { r.verdict = { attachable: false, reason: 'route_absent', reasonCopy: 'Update the COS server to continue a thread from here.', ownerCount: 0 }; viewOf(r).verdict(r); return; }
+      if (a.status === 404) { failed(); r.verdict = { attachable: false, reason: 'route_absent', reasonCopy: 'Update the COS server to continue a thread from here.', ownerCount: 0 }; viewOf(r).verdict(r); return; }
       var b = a.body || {};
-      if (a.status !== 200 || typeof b.attachable !== 'boolean') return;
+      if (a.status !== 200 || typeof b.attachable !== 'boolean') { failed(); return; }
       var owners = Number(b.ownerCount) || 0;
       r.verdict = { attachable: b.attachable, reason: String(b.reason || ''), reasonCopy: String(b.reasonCopy || ''), ownerCount: owners, caution: b.attachable === true && owners > 0 };
-      viewOf(r).verdict(r);
-    }).catch(function () {});
+      // 6.99.29: the gate's answer is a signal of the one state, as of now.
+      sxNoteGate(r, b.attachable === false && b.reason === 'native_thread_working');
+      sxRepaint(r);
+    }).catch(failed).finally(function () { r.probing = false; });
   }
   var SX_PARK = {
     cursor: 'Working right now. A message you send goes into this Cursor chat when its turn ends.',
     codex: 'Working right now. A message you send joins the Codex app’s queue for this thread.',
     claude: 'Working right now. A message you send waits and lands when this turn ends.'
   };
+  /** The composer's "Working right now" note: a busy gate verdict, and the one state agrees. */
+  function sxParkNoteShows(r) {
+    var v = r.verdict;
+    if (!v || v.attachable !== false || !/^(native_thread_working|native_target_busy)$/.test(v.reason)) return false;
+    return sxFeedWord(r) === 'Working' || v.reason === 'native_target_busy';
+  }
   function sxSupplement(reason) {
     if (reason === 'native_target_busy') return 'It frees itself within 30 minutes. Detaching is not available in Control yet.';
     if (reason === 'native_target_fenced') return 'Fences can be released from the Fences card in this panel.';
@@ -1694,7 +2185,8 @@
         (f.retry ? '<button type="button" class="cx-btn quiet" data-sx="retry">Retry</button>' : '') +
         (f.fork ? forkBtn : ''));
     } else if (v && v.attachable === false && /^(native_thread_working|native_target_busy)$/.test(v.reason)) {
-      html = '<div class="sx-park"><p>' + esc(SX_PARK[sxProvider(r.provider)]) + '</p>' + (/fork/i.test(v.reasonCopy) ? '<div class="sx-box-actions">' + forkBtn + '</div>' : '') + '</div>';
+      // 6.99.29: "Working right now" only while the one state says so.
+      if (sxParkNoteShows(r)) html = '<div class="sx-park"><p>' + esc(SX_PARK[sxProvider(r.provider)]) + '</p>' + (/fork/i.test(v.reasonCopy) ? '<div class="sx-box-actions">' + forkBtn + '</div>' : '') + '</div>';
     } else if (v && v.attachable === false && v.reasonCopy) {
       html = refusalBox(v.reasonCopy, sxSupplement(v.reason), /fork/i.test(v.reasonCopy) ? forkBtn : '');
     }
@@ -1707,14 +2199,23 @@
     }
   }
 
+  /** Repaint whichever card shows this session after its one state moved (the reader or a view). */
+  function sxRepaint(r) {
+    sxSettle(r);
+    if (r.view) { if (typeof r.view.stateChanged === 'function') r.view.stateChanged(r); else r.view.verdict(r); return; }
+    if (state.reading === r) { paintActivity(r); renderVerdict(r); }
+  }
   function sessionStatus(text, kind, actionHtml) {
     var el = $('session-status'); if (!el) return;
     el.className = 'status-line' + (kind === 'error' ? ' error' : '');
     el.innerHTML = esc(text || '') + (actionHtml || '');
   }
-  function draftFor(text, r) {
+  // 11/07: the files sent with the words (media ids) are part of the draft: other files are another message, with a
+  // key of its own, so the server never answers a new message with an old one's replay.
+  function draftFor(text, r, ids) {
     r = r || state.reading;
-    if (!r.draft || r.draft.text !== text) r.draft = { text: text, key: newTurnKey() };
+    var files = Array.isArray(ids) ? ids.slice() : [];
+    if (!r.draft || r.draft.text !== text || (r.draft.ids || []).join(',') !== files.join(',')) r.draft = { text: text, key: newTurnKey(), ids: files };
     return r.draft;
   }
   // The box is cleared only of the very words that were sent; anything typed since stays.
@@ -1723,11 +2224,12 @@
     if (input && input.value.trim() === String(text).trim()) { input.value = ''; autoGrow(input); }
     if (state.reading && state.reading.draft && state.reading.draft.text === text) state.reading.draft = null;
   }
-  // Words go back in the box only if the box is empty; otherwise the status line keeps them.
-  function returnToBox(text, why) {
+  // Words go back in the box only if the box is empty; otherwise the status line keeps them. `files` says what became
+  // of the message's files (heldFilesBack).
+  function returnToBox(text, why, files) {
     var input = $('session-input');
-    if (input && !input.value.trim()) { input.value = text; autoGrow(input); sessionStatus(why + ' Your message is back in the box.', 'error'); }
-    else sessionStatus(why + ' Not sent: “' + String(text).slice(0, 80) + (text.length > 80 ? '…' : '') + '”', 'error');
+    if (input && !input.value.trim()) { input.value = text; autoGrow(input); sessionStatus(why + ' Your message is back in the box.' + (files || ''), 'error'); }
+    else sessionStatus(why + ' Not sent: “' + String(text).slice(0, 80) + (text.length > 80 ? '…' : '') + '”' + (files || ''), 'error');
   }
   // Your words show in the conversation the moment the Mac accepts them; the next refresh of
   // the transcript replaces the bubble with the real turn.
@@ -1761,11 +2263,96 @@
   };
   function viewOf(r) { return (r && r.view) || READER_VIEW; }
 
+  // ── files with a message to a session (6.99.27, Miles: "We still don't have the ability to take picture, or add photo
+  // or files from the web") ──
+  // The COS chat's attach kit (panes/cos-chat.js, W.cosChat.attach), as on Today's reply box: Take photo and the clip,
+  // any file the Mac takes on a turn (threadTurnFileBytes, 64 MB; a video 100 MB), up to 5, sent as it is. The ids go
+  // with the words; the server writes where each file is on the Mac under them. One box per session, kept in this tab.
+  var READER_FILES = {};
+  function readerKit() { var c = window.COSWeb && window.COSWeb.cosChat; return c && c.attach ? c.attach : null; }
+  function readerFilesOn() { var k = readerKit(); return !!(k && k.turnFiles() > 0 && state.reading); }
+  function readerBox(r) {
+    var kit = readerKit(); if (!kit || !r) return null;
+    var key = r.provider + '|' + r.id;
+    if (!READER_FILES[key]) READER_FILES[key] = kit.box({
+      changed: function (box) { if (state.reading && READER_FILES[state.reading.provider + '|' + state.reading.id] === box) paintReaderFiles(); },
+      removed: function () { sessionStatus(''); },
+      signedOut: function () { sessionStatus('This browser was signed out. Your message and files are kept. Sign in, then tap Retry on each file.', 'error'); }
+    }, { anyBytes: kit.turnFileBytes() });
+    if (!READER_FILES[key].anyBytes && !READER_FILES[key].atts.length && kit.turnFileBytes()) READER_FILES[key].anyBytes = kit.turnFileBytes();
+    return READER_FILES[key];
+  }
+  function readerFilesState(box) {
+    var kit = readerKit();
+    if (!kit || !box || !box.atts.length) return 'none';
+    return kit.pending(box) ? 'waiting' : kit.failed(box) ? 'failed' : 'ready';
+  }
+  function paintReaderFiles() {
+    var kit = readerKit(), r = state.reading, slot = $('session-clip'), list = $('session-files');
+    if (!slot || !list) return;
+    if (!readerFilesOn()) { slot.innerHTML = ''; list.innerHTML = ''; list.classList.add('hidden'); return; }
+    var box = readerBox(r), full = box.atts.length >= kit.max, mode = String(box.anyBytes || 0);
+    if (slot.getAttribute('data-mode') !== mode) { slot.innerHTML = kit.cameraHtml('data-sx-file') + kit.clipHtml('data-sx-file', { any: box.anyBytes }); slot.setAttribute('data-mode', mode); }
+    Array.prototype.forEach.call(slot.querySelectorAll('.cc-attach'), function (l) { l.classList.toggle('full', full); });
+    Array.prototype.forEach.call(slot.querySelectorAll('[data-sx-file]'), function (i) { i.disabled = full || !!r.sending; });
+    list.innerHTML = kit.chipsHtml(box, 'data-action') + (box.atts.length ? '<p class="att-limit">' + esc(kit.limitLine(box)) + '</p>' : '');
+    list.classList.toggle('hidden', !box.atts.length);
+    // Send and Fork wait while a file uploads. A failed file never greys them out (QA 6.99.27): a tap says why.
+    var st = readerFilesState(box), form = $('session-form');
+    if (!form || r.sending) return;
+    var send = $('session-send'), forkBtn = form.querySelector('[data-action="fork-session"]');
+    if (send) { send.disabled = st === 'waiting'; send.textContent = st === 'waiting' ? 'Uploading' : 'Send'; }
+    if (forkBtn) forkBtn.disabled = st === 'waiting';
+  }
+  function addReaderFiles(list) {
+    var kit = readerKit(), r = state.reading; if (!kit || !r || !readerFilesOn() || !list || !list.length) return;
+    var refusals = kit.add(readerBox(r), list);
+    if (refusals.length) sessionStatus(refusals.join(' '), 'error');
+    paintReaderFiles();
+  }
+  // The files that went with a message leave the box; any added since stay. Taken, not removed: the status line stays
+  // (a held message's Don't send is on it). Answers what went, for a held message to keep.
+  function readerFilesSent(box, ids) {
+    var kit = readerKit(); if (!kit || !box || !ids || !ids.length) return [];
+    return kit.take(box, ids);
+  }
+  // QA 6.99.27: a held message keeps what its files were, so if it does not go, it comes back whole (heldFilesBack).
+  function keepHeldFiles(r, text, ids, went) {
+    if (!went || !went.length) return;
+    r.held.forEach(function (h) { if (!h.files && h.text === text && (h.ids || []).join(',') === ids.join(',')) h.files = went; });
+    saveHeld(r);
+  }
+  // The Mac keeps a file no turn took for 4 hours (lib/turn-file-store.ts, and the media store's own rule); this
+  // trusts a file for 5 minutes less. Past that it says the file has gone rather than offer one the send would refuse.
+  var HELD_FILE_KEEP_MS = 4 * 60 * 60000 - 5 * 60000;
+  function heldFilesBack(r, h) {
+    var ids = h.ids || []; if (!ids.length) return '';
+    var kit = readerKit(), box = readerFilesOn() ? readerBox(r) : null, now = Date.now();
+    var known = (h.files || []).filter(function (f) { return f && ids.indexOf(f.mediaId) >= 0; });
+    var kept = known.filter(function (f) { return f.keptAt > 0 && now - f.keptAt < HELD_FILE_KEEP_MS; });
+    var back = box && kept.length ? kit.restore(box, kept) : 0;
+    var lost = ids.length - back, expired = known.length - kept.length;
+    var said = !back ? '' : back === ids.length ? (back === 1 ? ' Its file is attached again.' : ' Its ' + back + ' files are attached again.')
+      : ' ' + back + ' of its files ' + (back === 1 ? 'is' : 'are') + ' attached again.';
+    if (!lost) return said;
+    var gone = lost === expired
+      ? (lost === 1 ? ' The file it carried was kept for 4 hours and has gone.' : ' The ' + lost + ' files it carried were kept for 4 hours and have gone.')
+      : (lost === 1 ? ' A file it carried did not come back.' : ' ' + lost + ' files it carried did not come back.');
+    return said + gone + ' Attach ' + (lost === 1 ? 'it' : 'them') + ' again.';
+  }
+
   function sendSessionTurn(fork, opts) {
     var r = state.reading; var form = $('session-form');
     if (!r || !form) return;
     var input = $('session-input'), text = input.value.trim();
     if (!text) { sessionStatus(fork ? 'Write what the copy should do first.' : 'Write a message first.', 'error'); return; }
+    // 6.99.27: files. Never before every upload has finished, never with one that failed. A fork carries them too: its
+    // first turn is this message, so the copy gets the same files (the fork route writes their paths as a turn does).
+    var fb = readerFilesOn() ? readerBox(r) : null, fst = readerFilesState(fb);
+    if (fst === 'waiting') { sessionStatus('A file is still uploading. ' + (fork ? 'Fork' : 'Send') + ' when it finishes.'); return; }
+    if (fst === 'failed') { sessionStatus('A file did not upload. Retry it or remove it.', 'error'); return; }
+    var fileIds = fst === 'ready' ? readerKit().ids(fb) : [];
+    if (fileIds.length && !fork) opts = Object.assign({}, opts || {}, { attachmentIds: fileIds });
     // Control's caution (SessionChatVerdict.caution): another app holds this session and looks
     // idle, so the first send asks before it writes. A fork writes to a copy and never asks.
     if (!fork && r.verdict && r.verdict.caution && !r.cautionAck) { r.cautionAsk = true; renderVerdict(r); return; }
@@ -1775,8 +2362,12 @@
     if (r.refusal || r.cautionAsk) { r.refusal = null; r.cautionAsk = false; renderVerdict(r); }
     r.sending = true;
     var btns = form.querySelectorAll('button'); btns.forEach(function (b) { b.disabled = true; });
-    var done = function () { r.sending = false; btns.forEach(function (b) { b.disabled = false; }); };
-    (fork ? forkSession(r, text) : continueSession(r, text, opts || {})).then(done, function (err) {
+    var done = function () { r.sending = false; btns.forEach(function (b) { b.disabled = false; }); paintReaderFiles(); };
+    (fork ? forkSession(r, text, fileIds) : continueSession(r, text, opts || {}).then(function (how) {
+      // The Mac took the message (sent, waiting in line, or held until the reply ends): its files went with it.
+      if (/^(sent|parked|held)$/.test(how)) { var went = readerFilesSent(fb, fileIds); if (how === 'held') keepHeldFiles(r, text, fileIds, went); }
+      return how;
+    })).then(done, function (err) {
       done();
       if (state.reading !== r) return;
       var why = err && err.name === 'AbortError'
@@ -1794,7 +2385,9 @@
   // Resolves to 'sent' | 'parked' | 'held' | 'refused' | 'changed'.
   function continueSession(r, text, opts) {
     var provider = r.provider, id = r.id;
-    var draft = opts.held ? { text: opts.held.text, key: opts.held.key } : draftFor(text, r), view = viewOf(r);
+    var draft = opts.held ? { text: opts.held.text, key: opts.held.key, ids: opts.held.ids || [] } : draftFor(text, r, opts.attachmentIds), view = viewOf(r);
+    // Files go only to a server that said it takes them (threadTurnAttachments); the caller shows no clip otherwise.
+    var files = draft.ids && draft.ids.length ? { attachmentIds: draft.ids } : {};
     if (!opts.held) view.status(r, 'Sending');
     var bound = bindingFor(provider, id);
     var attach = bound ? Promise.resolve({ ok: true, binding: bound }) : apiAnswer(sessionPath(provider, id, '/attach'), { method: 'POST', body: { cosSessionId: cosSessionId() }, timeoutMs: 20000 }).then(function (a) {
@@ -1823,9 +2416,12 @@
         }
         return 'refused';
       }
+      // QA 6.99.29: a turn this page sends starts new work, so the last Stop (or finished COS turn) no longer
+      // mutes the working signals that follow (a held follow-up goes 800 ms after the end, inside the echo window).
+      r.stoppedAt = null;
       return apiAnswer('/api/agent-sessions/bindings/' + encodeURIComponent(at.binding.bindingId) + '/turns', {
         method: 'POST', timeoutMs: 25000,
-        body: Object.assign({ prompt: draft.text, epoch: at.binding.epoch, targetKey: targetKey(provider, id), clientTurnId: draft.key }, opts.acknowledgedRevision ? { acknowledgedRevision: opts.acknowledgedRevision } : {}),
+        body: Object.assign({ prompt: draft.text, epoch: at.binding.epoch, targetKey: targetKey(provider, id), clientTurnId: draft.key }, files, opts.acknowledgedRevision ? { acknowledgedRevision: opts.acknowledgedRevision } : {}),
       }).then(function (t) {
         var b = t.body || {};
         if (t.status >= 200 && t.status < 300 && (b.outcome === 'queued' || b.outcome === 'completed')) {
@@ -1833,6 +2429,8 @@
           else { view.pending(r, draft.text, b.replayed ? 'already sent' : 'sent'); view.clear(r, draft.text); }
           view.status(r, b.replayed ? 'Already sent. Watching for the reply.' : 'Sent. Watching for the reply.');
           view.watch(r, at.binding.bindingId, draft.key);
+          // 6.99.29: a turn that went live is in the open session, which now works on it.
+          if (b.outcome === 'completed' && b.via === 'live') { sxNoteGate(r, true); try { sxRepaint(r); } catch (_e) {} }
           return 'sent';
         }
         var reason = b.reason || '';
@@ -1867,7 +2465,7 @@
   var HELD_MAX_MS = 5 * 60000, HELD_RETRY_MS = 8000;
   function holdUntilReplyEnds(r, draft) {
     if (!r.held.some(function (h) { return h.key === draft.key; })) {
-      r.held.push({ text: draft.text, key: draft.key, since: Date.now() });
+      r.held.push({ text: draft.text, key: draft.key, since: Date.now(), ids: draft.ids || [] });
       showPendingTurn(draft.text, 'sends after this reply', draft.key);
       saveHeld(r);
     }
@@ -1903,8 +2501,8 @@
       if (bubble) { bubble.removeAttribute('data-held-key'); bubble.querySelector('.who').textContent = 'You, waiting in line'; }
     } else {
       if (bubble) bubble.remove();
-      if (how === 'cancelled') returnToBox(h.text, 'Not sent.');
-      else returnToBox(h.text, copy || 'Not sent.');
+      // The whole message comes back: its words, and its files where the Mac still keeps them.
+      returnToBox(h.text, how === 'cancelled' ? 'Not sent.' : copy || 'Not sent.', heldFilesBack(r, h));
     }
     if (!r.held.some(function (x) { return !x.cancelled; })) clearInterval(r.heldTimer);
   }
@@ -1921,7 +2519,7 @@
     var view = viewOf(r);
     return apiAnswer(sessionPath(r.provider, r.id, '/queued-turns'), {
       method: 'POST', timeoutMs: 15000,
-      body: { cosSessionId: cosSessionId(), clientTurnId: draft.key, prompt: draft.text },
+      body: Object.assign({ cosSessionId: cosSessionId(), clientTurnId: draft.key, prompt: draft.text }, draft.ids && draft.ids.length ? { attachmentIds: draft.ids } : {}),
     }).then(function (q) {
       var b = q.body || {};
       if (b.queued === true || b.error === 'duplicate_turn') {
@@ -1930,10 +2528,14 @@
         else { view.pending(r, draft.text, 'waiting in line'); view.clear(r, draft.text); }
         view.status(r, b.error === 'duplicate_turn' ? 'Already waiting to send.' : (b.position ? 'The session is busy. Yours is #' + (b.position + 1) + ' in line and sends on its own.' : 'The session is busy. Yours sends next, on its own.'));
         view.queue(r);
+        // 6.99.29: "The session is busy" is the gate's word as of now; the card shows the same. Last, and
+        // never allowed to cost the parked message its settlement.
+        if (b.queued === true && refusal && refusal.reason === 'native_thread_working') { sxNoteGate(r, true); try { sxRepaint(r); } catch (_e) {} }
         return 'parked';
       }
       if (b.error === 'thread_free' && !opts.freeRetry) return continueSession(r, draft.text, Object.assign({}, opts, { freeRetry: true }));
-      var copy = (refusal && refusal.reasonCopy) || (b.error === 'queue_full' ? 'That session already has a full line of waiting messages.' : 'COS could not send or queue that.');
+      // 11/07: a file that could not be kept refuses the park with its own words, which say which step to take.
+      var copy = (b.attachmentError && b.reasonCopy) || (refusal && refusal.reasonCopy) || (b.error === 'queue_full' ? 'That session already has a full line of waiting messages.' : 'COS could not send or queue that.');
       if (opts.held) settleHeld(r, opts.held, 'refused', copy); else view.status(r, copy + ' It is still in the box.', 'error');
       return 'refused';
     });
@@ -1949,10 +2551,13 @@
       apiAnswer('/api/agent-sessions/bindings/' + encodeURIComponent(bindingId) + '/turns/' + encodeURIComponent(key)).then(function (s) {
         var o = s.body && s.body.outcome;
         if (o === 'completed') {
-          clearInterval(state.turnPoll); sessionStatus('Done.'); refreshTurns(provider, id);
-          // The finished turn is the authority; the stream's idle status can trail it.
-          setLive({ working: false }); var st = $('session-state'); if (st) st.textContent = 'Open';
-          replyEnded(r);
+          clearInterval(state.turnPoll); refreshTurns(provider, id);
+          // 6.99.29: a turn delivered LIVE is in the open session, which is now working on it; only a
+          // COS child's finished turn is the end of the work. Either way the one state settles it.
+          if (s.body.via === 'live') { sxNoteGate(r, true); sessionStatus('Sent into the open session.'); }
+          else { r.stoppedAt = Date.now(); sessionStatus('Done.'); }
+          setLive({}); var st = $('session-state'); if (st) st.textContent = r.live && r.live.working ? 'Working now' : 'Open';
+          if (s.body.via !== 'live') replyEnded(r);
         } else if (o === 'refused') { clearInterval(state.turnPoll); sessionStatus(s.body.reasonCopy || 'The session refused that message.', 'error'); replyEnded(r); }
         else if (o === 'ambiguous') { clearInterval(state.turnPoll); sessionStatus(s.body.reasonCopy || 'COS cannot tell whether that landed. Look at the session before sending it again.', 'error'); }
       }).catch(function () {});
@@ -1961,13 +2566,15 @@
 
   // Fork copies the session and runs the message there. One key per draft, so a second tap or
   // a resend after a timeout finds the same job instead of making a second copy.
-  function forkSession(r, text) {
-    if (!r.forkDraft || r.forkDraft.text !== text) r.forkDraft = { text: text, key: 'fk' + newTurnKey().slice(2) };
+  function forkSession(r, text, ids) {
+    ids = Array.isArray(ids) ? ids : [];
+    // Other files are another fork, with its own key.
+    if (!r.forkDraft || r.forkDraft.text !== text || (r.forkDraft.ids || []).join(',') !== ids.join(',')) r.forkDraft = { text: text, key: 'fk' + newTurnKey().slice(2), ids: ids.slice() };
     var forkId = r.forkDraft.key;
     sessionStatus('Copying the session. This can take up to a minute.');
     var settle = function (b) {
       if (b.forked === true) {
-        r.forkDraft = null; clearBoxOf(text);
+        r.forkDraft = null; clearBoxOf(text); readerFilesSent(readerFilesOn() ? readerBox(r) : null, ids);
         sessionStatus('Forked. The copy has your message and shows in Sessions in a moment.');
         setTimeout(function () { if (state.pane === 'sessions') loadSessions(true); }, 4000);
         return true;
@@ -1975,7 +2582,7 @@
       if (b.forked === false || b.state === 'failed' || b.state === 'refused') { sessionStatus((b.reasonCopy || 'COS could not copy that session.'), 'error'); return true; }
       return false;
     };
-    return apiAnswer(sessionPath(r.provider, r.id, '/fork'), { method: 'POST', timeoutMs: 65000, body: { prompt: text, cosSessionId: cosSessionId(), clientForkId: forkId } }).then(function (f) {
+    return apiAnswer(sessionPath(r.provider, r.id, '/fork'), { method: 'POST', timeoutMs: 65000, body: Object.assign({ prompt: text, cosSessionId: cosSessionId(), clientForkId: forkId }, ids.length ? { attachmentIds: ids } : {}) }).then(function (f) {
       if (settle(f.body || {})) return;
       if (f.status !== 202) { sessionStatus('COS could not copy that session.', 'error'); return; }
       // 202: running in the background. Follow its job for up to three minutes.
@@ -2000,7 +2607,7 @@
       if (b.cancelled) {
         r.stoppedAt = Date.now();
         clearInterval(state.turnPoll);
-        setLive({ working: false }); var st = $('session-state'); if (st) st.textContent = 'Open';
+        setLive({}); var st = $('session-state'); if (st) st.textContent = 'Open';
         setTimeout(function () { if (state.reading === r) refreshTurns(r.provider, r.id); }, 1500);
       }
     }).catch(function (err) { sessionStatus(err.message, 'error'); });
@@ -2014,6 +2621,36 @@
     });
   }
 
+  // Output previews are separate from composer attachments. Only the DTO fields reach the lazy viewer.
+  function readerImagesHtml(turn) {
+    var images = turn && Array.isArray(turn.outputImages) ? turn.outputImages.filter(function (x) {
+      return x && /^ai_[a-f0-9]{64}$/.test(x.id || '') && (x.state === 'available' || x.state === 'unavailable');
+    }).map(function (x) { return { id: x.id, label: String(x.label || 'Output image').slice(0, 180), state: x.state, reason: x.reason }; }) : [];
+    return images.length ? '<div data-reader-images="' + esc(JSON.stringify(images)) + '"><p class="rm-status" role="status">Loading image previews…</p></div>' : '';
+  }
+  function readerImagesStop(host) {
+    if (!host) return;
+    host.__cosImageOwner = null;
+    if (window.COSWeb.readerMedia) window.COSWeb.readerMedia.unmount(host);
+  }
+  function readerImagesMount(host, r) {
+    if (!host || !r) return;
+    if (!host.querySelectorAll('[data-reader-images]').length) { readerImagesStop(host); return; }
+    var owner = host.__cosImageOwner = {};
+    ensurePane('readerMedia', 4000).then(function (kit) {
+      if (host.__cosImageOwner !== owner || host.isConnected === false) return;
+      if (!kit) throw new Error('Image previews could not load.');
+      kit.mount(host, r.provider, r.id);
+    }).catch(function () {
+      if (host.__cosImageOwner !== owner || host.isConnected === false) return;
+      host.querySelectorAll('[data-reader-images]').forEach(function (slot) {
+        slot.textContent = 'Image previews could not load. ';
+        var retry = document.createElement('button'); retry.type = 'button'; retry.className = 'link-btn'; retry.textContent = 'Retry images';
+        retry.addEventListener('click', function () { readerImagesMount(host, r); }); slot.appendChild(retry);
+      });
+    });
+  }
+
   // Copy session (Control's Kickstart brief, HelperSources/main.swift claudeKickstartCopy). Control
   // builds it from the Mac's transcript; the web builds it from the turns the server serves and
   // the session's first prompt, so it keeps the original request and the newest context.
@@ -2146,7 +2783,7 @@
   // One turn's identity, for telling which turns a refresh brought that the page already shows.
   function sxTurnSig(t) {
     var text = String(t.text || t.content || '').trim();
-    return (String(t.role || '').toLowerCase() === 'user' ? 'u' : 'a') + '|' + (t.at || '') + '|' + text.length + '|' + text.slice(0, 48);
+    return (String(t.role || '').toLowerCase() === 'user' ? 'u' : 'a') + '|' + (t.at || '') + '|' + text.length + '|' + text.slice(0, 48) + '|' + readerImagesHtml(t);
   }
   function sxTurnHtml(t) {
     var role = String(t.role || '').toLowerCase() === 'user' ? 'user' : 'assistant';
@@ -2155,7 +2792,7 @@
     var when = at ? (Date.now() - at.getTime() < 86400000 ? clock(at) : sxShortDate(at)) : '';
     return '<div class="turn ' + role + ' sx-turn" data-sig="' + esc(sxTurnSig(t)) + '"><span class="who"><span>' + (role === 'user' ? 'YOU' : 'ASSISTANT') + '</span>' +
       (when ? '<span class="sx-turn-when">' + esc(when) + '</span>' : '') + '</span>' +
-      (role === 'user' ? '<div class="sx-plain">' + esc(text) + '</div>' : '<div class="sx-md">' + sxMd(text) + '</div>') + '</div>';
+      (role === 'user' ? '<div class="sx-plain">' + esc(text) + '</div>' : '<div class="sx-md">' + sxMd(text) + '</div>' + readerImagesHtml(t)) + '</div>';
   }
   // A refresh never rebuilds what you are reading (Miles, /qa: "start to scroll and then it reloads
   // the section"). The server's window slides as a session grows, so the turns the page already
@@ -2200,7 +2837,8 @@
     return h.slice(0, 8) + '-' + h.slice(8, 12) + '-' + h.slice(12, 16) + '-' + h.slice(16, 20) + '-' + h.slice(20);
   }
   var TODAY_REFERENCE = 'What Today in COS Control shows right now';
-  function askCos(prompt, statusEl) {
+  // files: { attachmentIds, atts } from the Ask sheet's clip (askSheetFiles), or nothing.
+  function askCos(prompt, statusEl, files) {
     // 6.99.12: "it shows Sent but never shows up" (Miles, 11/04). With Ask COS in Messages, the sheet hands its words to
     // that composer (panes/cos-chat.js submitAsk), so the answer streams on screen and lands as a numbered turn. The
     // request below is the fallback for a page without it; it resolves to the Messages route to open.
@@ -2209,17 +2847,27 @@
     // quoted reference, the query-jobs field for context. Asked from any other pane, nothing extra is sent.
     var context = state.pane === 'today' ? ensurePane('todayActions', 1500).then(function (m) {
       // A broken summary never costs the Ask: it goes without it, and the console says why.
-      try { return m && m.summary ? m.summary() : ''; } catch (err) { console.error('[today] the Today summary failed; asking without it.', err); return ''; }
+      var ctx;
+      try { ctx = m && m.summary ? m.summary() : ''; } catch (err) { console.error('[today] the Today summary failed; asking without it.', err); return ''; }
+      // The model's summary of the sessions leads it when there is one, inside the same cap; past the cap it is left out.
+      var b = typeof briefShown === 'function' ? briefShown() : null;
+      var lead = b ? 'Summary of the sessions, written by a model ' + (briefMinutes(b.at) < 1 ? 'just now' : span(b.at) + ' ago') + (b.state === 'stale' ? ' (things have moved since)' : '') + ': ' + b.text : '';
+      return ctx && lead && lead.length + 1 + ctx.length <= ((m && m.summaryMax) || 4000) ? lead + '\n' + ctx : ctx;
     }, function () { return ''; }) : Promise.resolve('');
     if (chat && chat.askFromSheet) {
       setStatus(statusEl, 'Sending…');
-      return context.then(function (ctx) { return chat.askFromSheet(prompt, ctx ? { context: ctx } : undefined); }).then(function (where) { setStatus(statusEl, ''); return where; }, function (err) {
+      return context.then(function (ctx) {
+        var extra = files ? { attachmentIds: files.attachmentIds, atts: files.atts } : {};
+        if (ctx) extra.context = ctx;
+        return chat.askFromSheet(prompt, ctx || files ? extra : undefined);
+      }).then(function (where) { setStatus(statusEl, ''); return where; }, function (err) {
         setStatus(statusEl, err.message, true);
         throw err;
       });
     }
     setStatus(statusEl, 'Sent. COS is answering.');
     var body = { clientJobId: webJobId(), generation: 1, query: prompt, source: 'web', activityToolMode: 'status' };
+    if (files && files.attachmentIds && files.attachmentIds.length) body.attachmentIds = files.attachmentIds;
     return context.then(function (ctx) {
       if (ctx) body.reference = { query: TODAY_REFERENCE, response: ctx };
       return api('/api/query-jobs', { method: 'POST', body: body, timeoutMs: 30000 });
@@ -3901,12 +4549,87 @@
     var q = ($('ask-q') && $('ask-q').value.trim()) || '';
     g.innerHTML = esc(ASK_FILE.busy ? 'Filing\u2026' : 'File to Work inbox') + fileNoteHtml(q);
   }
+  // ── files with Ask COS (11/07, Miles: "Sometimes I need to pass context via a screenshot, photo or file") ──
+  // The COS chat's own clip, chips, limits and upload (panes/cos-chat.js, W.cosChat.attach): photos, PDF, TXT, MD, CSV,
+  // JSON, XLSX, MP4 and MOV, up to 5, pasted, dropped or picked. They go with Ask COS only; the sheet's other rows take
+  // words. Ask COS waits for every upload, and a file that failed has to be retried or removed first. Closing the sheet
+  // keeps them for the next Ask in this tab.
+  var ASK_FILES = null, ASK_SENDING = false;
+  function askKit() { var c = window.COSWeb && window.COSWeb.cosChat; return c && c.attach ? c.attach : null; }
+  function askFiles() {
+    var kit = askKit(); if (!kit) return null;
+    if (!ASK_FILES) ASK_FILES = kit.box({
+      changed: paintAskFiles,
+      removed: function () { setStatus($('ask-status'), ''); },
+      signedOut: function () { setStatus($('ask-status'), 'This browser was signed out. Your files are kept. Sign in, then tap Retry on each file.', true); }
+    });
+    return ASK_FILES;
+  }
+  function askFilesState() {
+    var kit = askKit(), b = ASK_FILES;
+    if (!kit || !b || !b.atts.length) return 'none';
+    return kit.pending(b) ? 'waiting' : kit.failed(b) ? 'failed' : 'ready';
+  }
+  function paintAskClip() {
+    var slot = $('ask-clip'), kit = askKit(); if (!slot) return;
+    var on = !!(kit && kit.askOn());
+    if (!on) { slot.innerHTML = ''; return; }
+    // 6.99.27: Take photo beside the clip (a phone or tablet only; kit.cameraHtml).
+    if (!slot.querySelector('[data-ask-file]')) slot.innerHTML = kit.cameraHtml('data-ask-file') + kit.clipHtml('data-ask-file');
+    var full = !!(ASK_FILES && ASK_FILES.atts.length >= kit.max);
+    Array.prototype.forEach.call(slot.querySelectorAll ? slot.querySelectorAll('.cc-attach') : [], function (l) { l.classList.toggle('full', full); });
+    Array.prototype.forEach.call(slot.querySelectorAll ? slot.querySelectorAll('[data-ask-file]') : [], function (i) { i.disabled = full || ASK_SENDING; });
+  }
+  function paintAskFiles() {
+    var kit = askKit(), box = $('ask-files'), b = ASK_FILES; if (!box || !kit) return;
+    var st = askFilesState();
+    box.innerHTML = st === 'none' ? '' : kit.chipsHtml(b, 'data-action') + '<p class="ask-files-note">' + esc(
+      st === 'waiting' ? 'Uploading. Ask COS waits for it.' : st === 'failed' ? 'A file did not upload. Retry it or remove it, then Ask COS.'
+        : (b.atts.length === 1 ? 'This file goes' : 'These files go') + ' with Ask COS. Write the question above.') + '</p>';
+    box.classList.toggle('hidden', st === 'none');
+    paintAskClip(); paintAskRow();
+  }
+  function addAskFiles(list) {
+    var kit = askKit(), b = askFiles(); if (!kit || !b || !list || !list.length) return;
+    var refusals = kit.add(b, list);
+    setStatus($('ask-status'), refusals.join(' '), !!refusals.length);
+    paintAskFiles();
+  }
+  // The Ask COS row says what it sends, and waits while a file uploads.
+  function askRowNote(q) {
+    var n = ASK_FILES ? ASK_FILES.atts.length : 0;
+    // The files first: on the folded phone the line is cut, and they are what changed.
+    return '“' + q + '”' + (n ? ' with ' + (n === 1 ? '1 file' : n + ' files') : '') + (state.pane === 'today' ? (n ? ' and' : ' with') + ' what Today shows' : '');
+  }
+  function paintAskRow() {
+    var row = document.querySelector('#ask-results [data-action="ask-cos"]'); if (!row) return;
+    var st = askFilesState();
+    row.disabled = ASK_SENDING || st === 'waiting' || st === 'failed';
+    var note = row.querySelector('.note'), q = ($('ask-q') && $('ask-q').value.trim()) || '';
+    if (note) note.textContent = ASK_SENDING ? 'Sending…' : st === 'waiting' ? 'Waiting for the upload' : askRowNote(q);
+  }
+  function askSheetSend(q) {
+    if (ASK_SENDING) return;
+    var kit = askKit(), b = ASK_FILES, st = askFilesState();
+    if (st === 'waiting') { setStatus($('ask-status'), 'A file is still uploading. Ask COS when it finishes.'); return; }
+    if (st === 'failed') { setStatus($('ask-status'), 'A file did not upload. Retry it or remove it, then Ask COS.', true); return; }
+    var files = st === 'ready' ? { attachmentIds: kit.ids(b), atts: kit.sent(b) } : null;
+    ASK_SENDING = true; paintAskRow(); paintAskClip();
+    var done = function () { ASK_SENDING = false; paintAskRow(); paintAskClip(); };
+    askCos(q, $('ask-status'), files).then(function (where) {
+      done();
+      // Sent: these files went with it. Anything added while it was sending stays for the next Ask.
+      if (files && b) b.atts.filter(function (t) { return files.attachmentIds.indexOf(t.mediaId) >= 0; }).forEach(function (t) { kit.remove(b, t.id); });
+      closeAsk(); go('messages', Array.isArray(where) ? where : []);
+    }).catch(done);
+  }
   function openAsk(prefill) {
     loadFileDomains().then(function () { if (!$('ask-sheet').classList.contains('hidden') && $('ask-q').value.trim()) renderAsk(); });
     $('ask-sheet').classList.remove('hidden');
     document.body.style.overflow = 'hidden';
     var input = $('ask-q'); input.value = prefill || '';
-    renderAsk();
+    renderAsk(); paintAskFiles(); paintAskClip();
+    var kit = askKit(); if (kit && !kit.askOn()) kit.ensureCaps().then(paintAskClip, function () {});
     setTimeout(function () { input.focus(); }, 30);
   }
   function closeAsk() { $('ask-sheet').classList.add('hidden'); document.body.style.overflow = ''; }
@@ -3923,12 +4646,13 @@
     }
     var jumps = JUMPS.filter(function (j) { return j[1].toLowerCase().indexOf(q.toLowerCase()) === 0; });
     out.innerHTML = '<div class="list" style="margin-top:14px">' +
-      '<button type="button" class="nav-row" data-action="ask-cos"><svg class="icon"><use href="#i-ask"/></svg><span class="grow">Ask COS<span class="note">“' + esc(q) + '”' + (state.pane === 'today' ? ' with what Today shows' : '') + '</span></span></button>' +
+      '<button type="button" class="nav-row" data-action="ask-cos"><svg class="icon"><use href="#i-ask"/></svg><span class="grow">Ask COS<span class="note">' + esc(askRowNote(q)) + '</span></span></button>' +
       '<button type="button" class="nav-row" data-action="ask-file"' + (ASK_FILE.busy ? ' disabled' : '') + '><svg class="icon"><use href="#i-work"/></svg><span class="grow">' + (ASK_FILE.busy ? 'Filing\u2026' : 'File to Work inbox') + fileNoteHtml(q) + '</span></button>' +
       '<button type="button" class="nav-row" data-action="ask-meaning"><svg class="icon"><use href="#i-sessions"/></svg><span class="grow">Find a session about this<span class="note">Ranks every session by meaning</span></span></button>' +
       '<button type="button" class="nav-row" data-action="ask-work"><svg class="icon"><use href="#i-work"/></svg><span class="grow">Find a task about this<span class="note">Searches Work by meaning</span></span></button>' +
       jumps.map(function (j) { return '<button type="button" class="nav-row" data-goto="' + j[0] + '"><svg class="icon"><use href="#i-' + j[0] + '"/></svg><span class="grow">Go to ' + esc(j[1]) + '</span><span class="chev"></span></button>'; }).join('') +
       '</div><div id="ask-hits"></div><p class="status-line" id="ask-status"></p>';
+    paintAskRow();
     clearTimeout(renderAsk.t);
     if (q.length >= 2) renderAsk.t = setTimeout(function () {
       api('/api/agent-sessions/search?q=' + encodeURIComponent(q) + '&limit=6').then(function (d) {
@@ -3972,7 +4696,7 @@
       return;
     }
     if (t.hasAttribute('data-open-ask')) return openAsk();
-    if (t.hasAttribute('data-today')) return openTodayAction(t);
+    if (t.hasAttribute('data-today')) return t.getAttribute('data-today') === 'pet' ? petTap(t) : openTodayAction(t);
     if (t.hasAttribute('data-today-next')) return prepNext();
     if (t.hasAttribute('data-today-needs')) {
       var which = t.getAttribute('data-today-needs');
@@ -4004,7 +4728,18 @@
     }
     if (action === 'expand-turn') { var tr = document.querySelector('.turn[data-turn="' + t.getAttribute('data-turn') + '"]'); if (tr) tr.classList.remove('clamped'); t.remove(); return; }
     var q = $('ask-q').value.trim();
-    if (action === 'ask-cos' && q) { askCos(q, $('ask-status')).then(function (where) { closeAsk(); go('messages', Array.isArray(where) ? where : []); }).catch(function () {}); return; }
+    if ((action === 'att-remove' || action === 'att-retry') && t.closest('#session-form') && state.reading) {
+      var kitR = readerKit(), boxR = kitR && readerBox(state.reading); if (!boxR) return;
+      sessionStatus('');
+      if (action === 'att-remove') kitR.remove(boxR, t.getAttribute('data-att')); else kitR.retry(boxR, t.getAttribute('data-att'));
+      return;
+    }
+    if (inSheet && (action === 'att-remove' || action === 'att-retry') && ASK_FILES) {
+      var kitA = askKit(); setStatus($('ask-status'), '');
+      if (action === 'att-remove') kitA.remove(ASK_FILES, t.getAttribute('data-att')); else kitA.retry(ASK_FILES, t.getAttribute('data-att'));
+      return;
+    }
+    if (action === 'ask-cos' && q) return askSheetSend(q);
     if (action === 'ask-file' && q) return fileToInbox(q);
     if (action === 'ask-meaning' && q) { $('ask-hits').innerHTML = skeletonRows(3); findByMeaning(q).then(function (html) { var el = $('ask-hits'); if (el) el.innerHTML = html; }); return; }
     if (action === 'ask-work' && q) {
@@ -4026,7 +4761,7 @@
         .catch(function (err) {
           // The server names what failed (wrong token, wrong code, the glasses code, lockout).
           // No status means the request never reached COS (the browser's own "Load failed").
-          showAuth(err && err.status ? err.message : 'Could not reach COS on your Mac. Check that this phone is on Tailscale and the Mac is awake.');
+          showAuth(err && err.status ? err.message : UNREACHABLE_COPY);
         });
     } else if (f.id === 'session-form') sendSessionTurn(false);
     else if (f.id === 'sessions-search-form') { $('sessions-q').blur(); searchSessions(); }
@@ -4035,16 +4770,47 @@
     }
   });
 
+  // The Ask sheet's clip, a pasted screenshot in its box, and files dropped on it (askFiles above).
+  document.addEventListener('change', function (e) {
+    if (e.target && e.target.hasAttribute && e.target.hasAttribute('data-ask-file')) { addAskFiles(e.target.files); e.target.value = ''; }
+    if (e.target && e.target.hasAttribute && e.target.hasAttribute('data-sx-file')) { addReaderFiles(e.target.files); e.target.value = ''; }
+  });
+  // The Sessions reader's box: a pasted screenshot, and files dropped on it.
+  document.addEventListener('paste', function (e) {
+    if (!e.target || e.target.id !== 'session-input') return;
+    var kit = readerKit(), files = kit && readerFilesOn() ? kit.pasted(e) : null;
+    if (files) { e.preventDefault(); addReaderFiles(files); }
+  });
+  ['dragenter', 'dragover', 'dragleave', 'drop'].forEach(function (type) {
+    document.addEventListener(type, function (e) {
+      var form = e.target && e.target.closest ? e.target.closest('#session-form') : null, kit = readerKit();
+      if (!form || !kit || !readerFilesOn()) return;
+      var files = kit.dragged(e, form); if (files) addReaderFiles(files);
+    });
+  });
+  document.addEventListener('paste', function (e) {
+    if (!e.target || e.target.id !== 'ask-q') return;
+    var kit = askKit(), files = kit && kit.askOn() ? kit.pasted(e) : null;
+    if (files) { e.preventDefault(); addAskFiles(files); }
+  });
+  ['dragenter', 'dragover', 'dragleave', 'drop'].forEach(function (type) {
+    var sheet = $('ask-sheet'); if (!sheet) return;
+    sheet.addEventListener(type, function (e) {
+      var kit = askKit(), zone = sheet.querySelector('.sheet'); if (!kit || !zone || !kit.askOn()) return;
+      var files = kit.dragged(e, zone); if (files) addAskFiles(files);
+    });
+  });
   document.addEventListener('input', function (e) {
     if (e.target.tagName === 'TEXTAREA') autoGrow(e.target);
     if (e.target.id === 'ask-q') renderAsk();
     if (e.target.id === 'sessions-q' && !e.target.value.trim()) renderSessionGroups(state.sessions);
   });
   document.addEventListener('keydown', function (e) {
+    if (window.COSWeb.readerMedia && window.COSWeb.readerMedia.isOpen()) return;
     if ((e.metaKey || e.ctrlKey) && e.key.toLowerCase() === 'k') { e.preventDefault(); openAsk(); return; }
     if (e.key === 'Escape' && !$('ask-sheet').classList.contains('hidden')) { closeAsk(); return; }
     if (e.key === 'Escape' && !$('section-menu').classList.contains('hidden')) { closeMenu(); $('section-btn').focus(); return; }
-    if (e.key === 'Enter' && !e.shiftKey && e.target.tagName === 'TEXTAREA' && !isPhone()) { e.preventDefault(); var form = e.target.closest('form'); if (form) form.requestSubmit(); }
+    if (returnSends(e)) { e.preventDefault(); var form = e.target.closest('form'); if (form) form.requestSubmit(); }
   });
   document.querySelectorAll('[data-mode]').forEach(function (b) {
     b.addEventListener('click', function () {
@@ -4055,6 +4821,17 @@
   });
   window.addEventListener('hashchange', route);
   window.addEventListener('scroll', onScroll, { passive: true });
+  // 6.99.30: back from the browser's back-forward cache (a swipe back, the app switcher) the open reader's live stream
+  // is closed and the page's last reading is however old the visit was. Open the stream again and read the turns.
+  window.addEventListener('pageshow', function (e) {
+    if (!e || !e.persisted) return;
+    var r = state.reading;
+    if (r && r.provider && r.id) {
+      if (state.stream) { try { state.stream.close(); } catch (_e) {} state.stream = null; }
+      watchSession(r.provider, r.id); refreshTurns(r.provider, r.id);
+    }
+    if (state.pane === 'today' && !$('app-shell').classList.contains('hidden')) loadToday();
+  });
   document.addEventListener('visibilitychange', function () {
     if (document.hidden || $('app-shell').classList.contains('hidden')) return;
     // Coming back to the page refreshes Today in place. Other panes keep what is on screen:
@@ -4095,10 +4872,80 @@
     });
   }
 
+  // ── the visible viewport, read one way (6.99.30) ──────
+  // Today's session sheet (panes/today-actions.js) and the question card's footer on Today (panes/questions.js) both
+  // place things above whatever covers the bottom of the page: an on-screen keyboard, a hardware keyboard's strip, or a
+  // browser's own bottom bar (Comet, Chrome, Safari's, whichever: nothing here knows any browser's bar). Only what the
+  // browser reports is used: window.visualViewport's height, offsetTop and scale against the layout viewport.
+  //   layoutH  the layout viewport's height. Read whenever the page is not pinch-zoomed (then innerHeight is the layout
+  //            viewport everywhere) and kept while it is, since some browsers report the zoomed size there.
+  //   inset    what covers the bottom, in unzoomed CSS px: layoutH less the visible height times the zoom. A pinch
+  //            zoom alone is no inset (half the height at 2x is all of the page).
+  //   top, height  the box to fill, in layout px. Unzoomed it is the visible viewport itself (offsetTop is where a
+  //            browser panned the page to keep a focused field in view). Zoomed it is the layout viewport less the
+  //            inset, so a pinch zoom magnifies the sheet instead of shrinking its layout into the zoomed window.
+  //   below    what of the layout viewport lies under that box: the backdrop alone reaches down over it.
+  // No visualViewport (old browsers): the whole layout viewport, nothing covered.
+  var VP = { layoutH: 0 };
+  function viewportFit() {
+    var vv = window.visualViewport, de = document.documentElement;
+    var inner = window.innerHeight || (de && de.clientHeight) || 0;
+    var scale = vv && vv.scale > 0 ? vv.scale : 1, zoomed = scale > 1.01;
+    if (!zoomed || !VP.layoutH) VP.layoutH = zoomed ? Math.max(inner, (de && de.clientHeight) || 0) : inner;
+    var H = VP.layoutH;
+    if (!vv || !(vv.height > 0)) return { layoutH: H, top: 0, height: H, inset: 0, below: 0, scale: 1, zoomed: false, vv: false };
+    var inset = Math.max(0, Math.round(H - vv.height * scale));
+    var top, height;
+    if (!zoomed) { top = Math.max(0, Math.round(vv.offsetTop || 0)); height = Math.min(Math.round(vv.height), H); }
+    else { height = H - inset; top = Math.min(Math.max(0, Math.round(vv.offsetTop || 0)), inset); }
+    if (top + height > H) top = Math.max(0, H - height);
+    return { layoutH: H, top: top, height: height, inset: inset, below: Math.max(0, H - top - height), scale: scale, zoomed: zoomed, vv: true };
+  }
+
+  // ── layout breadcrumbs (6.99.30) ──────────────────────
+  // When a sheet lands wrong on a phone nobody here holds, the numbers have to come back on their own. A breadcrumb
+  // goes to the server's existing client diagnostics log (POST /api/diag/client, routes/diag.ts: 10 MB with one
+  // rotation, 30 lines per 10 s per client) when an overlay opens and each time its keyboard state changes. Numbers and
+  // a browser family only: no address, no text, no ids, never the user agent string itself. At most one identical
+  // line per 2 s and LAYOUT_CRUMB_MAX a page load, fire and forget.
+  var LAYOUT_CRUMB_MAX = 40, LAYOUT_CRUMB_GAP_MS = 2000;
+  var crumbs = { sent: 0, last: '', lastAt: 0 };
+  /** The browser family, from the UA string, for the breadcrumb. Comet first: it says Chrome or Safari too. */
+  function uaClass(ua) {
+    ua = String(ua == null ? (navigator && navigator.userAgent) || '' : ua);
+    var ios = /iPhone|iPad|iPod/.test(ua) || (/Macintosh/.test(ua) && typeof navigator !== 'undefined' && navigator.maxTouchPoints > 1);
+    var android = /Android/.test(ua);
+    var os = ios ? 'ios' : android ? 'android' : /Mac OS X|Macintosh/.test(ua) ? 'mac' : /Windows/.test(ua) ? 'windows' : /Linux|CrOS/.test(ua) ? 'linux' : 'other';
+    var hints = typeof navigator !== 'undefined' && navigator.userAgentData && navigator.userAgentData.brands ? navigator.userAgentData.brands.map(function (b) { return b && b.brand; }).join(' ') : '';
+    var brand = /Comet\//i.test(ua) || /\bComet\b/i.test(ua) || /\bComet\b/i.test(hints) ? 'comet'
+      : /CriOS\//.test(ua) ? 'crios' : /FxiOS\//.test(ua) ? 'firefox' : /EdgiOS\/|Edg\//.test(ua) ? 'edge'
+      : /Firefox\//.test(ua) ? 'firefox' : /Chrome\/|Chromium\//.test(ua) ? 'chrome'
+      : /Safari\//.test(ua) ? 'safari' : 'other';
+    return { os: os, brand: brand };
+  }
+  /** One breadcrumb: `event` (open, kb), the viewport as the browser reports it, and the overlay's own state. */
+  function layoutCrumb(event, extra) {
+    try {
+      var vv = window.visualViewport, de = document.documentElement, ua = uaClass();
+      var r = function (n) { return typeof n === 'number' && isFinite(n) ? Math.round(n * 100) / 100 : null; };
+      var o = (screen && screen.orientation && screen.orientation.type) || (typeof window.orientation === 'number' ? 'deg' + window.orientation : '');
+      var data = { what: String(event || ''), ua: ua.brand, os: ua.os, iw: r(window.innerWidth), ih: r(window.innerHeight), ch: r(de && de.clientHeight),
+        vvh: vv ? r(vv.height) : null, vvw: vv ? r(vv.width) : null, vvt: vv ? r(vv.offsetTop) : null, vvs: vv ? r(vv.scale) : null,
+        orient: String(o).slice(0, 24), coarse: !!(window.matchMedia && window.matchMedia('(pointer: coarse)').matches) };
+      var x = extra || {};
+      Object.keys(x).forEach(function (k) { var v = x[k]; if (/^[a-z][a-zA-Z0-9]{0,15}$/.test(k) && (typeof v === 'number' || typeof v === 'boolean' || (typeof v === 'string' && v.length <= 24))) data[k] = typeof v === 'number' ? r(v) : v; });
+      var key = JSON.stringify(data), now = Date.now();
+      if (crumbs.sent >= LAYOUT_CRUMB_MAX || (key === crumbs.last && now - crumbs.lastAt < LAYOUT_CRUMB_GAP_MS)) return false;
+      crumbs.sent++; crumbs.last = key; crumbs.lastAt = now;
+      api('/api/diag/client', { method: 'POST', body: { ts: now, level: 'info', event: 'web.layout', data: data }, timeoutMs: 5000 }).catch(function () {});
+      return true;
+    } catch (_e) { return false; }
+  }
+
   // ── the shared kit for pane modules (panes/*.js) ───────
   window.COSWeb = {
     $: $, esc: esc, md: md, plain: plain, api: api, toast: toast, ago: ago, clock: clock, toDate: toDate,
-    plural: plural, countWord: countWord, dayWord: dayWord, providerLabel: providerLabel, domainLabel: domainLabel,
+    plural: plural, countWord: countWord, dayWord: dayWord, plainDay: plainDay, providerLabel: providerLabel, domainLabel: domainLabel,
     skeletonRows: skeletonRows, emptyBox: emptyBox, setStatus: setStatus, autoGrow: autoGrow,
     readStore: readStore, writeStore: writeStore, copyText: copyText, isPhone: isPhone,
     state: state, titles: TITLES, go: go, parseRoute: parseRoute, goBack: goBack,
@@ -4106,6 +4953,7 @@
     sessionList: sessionList,
     petPrefs: petPrefs,
     setPetPrefs: setPetPrefs,
+    resetTodayBrief: resetBrief,
     onRoute: function (fn) { routeHooks.push(fn); },
     onShell: function (fn) { shellHooks.push(fn); },
     // The detail title after "COS Control > Section" (Control's breadcrumb). Pane modules set it
@@ -4117,7 +4965,13 @@
     // Control's session state (the Sessions pane's sxState) and warm-up test, so the rail's
     // "N waiting on you, N working" counts exactly what the pane lists.
     sessionState: function (s) { return sxState(s); },
-    isKeepWarm: function (s) { return sxKeepWarm(s); }
+    isKeepWarm: function (s) { return sxKeepWarm(s); },
+    // 6.99.30: the visible viewport read one way, layout breadcrumbs, the one unreachable sentence, Return-sends.
+    viewportFit: viewportFit, layoutCrumb: layoutCrumb, uaClass: uaClass, unreachableCopy: UNREACHABLE_COPY, keyboardFirst: keyboardFirst,
+    serverUp: function () { return SERVER.up; },
+    // Panes with their own fetch (the questions poll) say whether the Mac answered, so a "down" mark never outlives it.
+    noteServer: function (up) { noteServer(up); },
+    onServer: function (fn) { SERVER.hooks.push(fn); }
   };
   // Today as a place to act (panes/today-actions.js, Miles 11/06): what the Today cards show, a repaint after a
   // decision, and the Sessions reader's own pieces, so the overlay sends and reads through the reader's code.
@@ -4139,7 +4993,11 @@
     railLine: function () { return TODAY.model ? { text: todayRailLine(TODAY.model), hot: TODAY.model.now.length > 0 } : null; },
     markGone: function (id, gone) { if (gone) TODAY.gone[id] = 1; else delete TODAY.gone[id]; paintTodayIntake(); },
     reloadIntake: function () { return loadTodayIntake(); },
-    refresh: function () { if (state.pane === 'today') loadToday(); }
+    refresh: function () { if (state.pane === 'today') loadToday(); },
+    // 6.99.26: the pet's sessions (petPlay), and a repaint of Needs you when the held questions change.
+    petPlay: function () { return petPlay(state.sessions || []); },
+    // 6.99.27: the pet's caption and pose follow the held questions too.
+    questionsChanged: function () { if (TODAY.at) { paintNeeds(); if (state.pane === 'today' && !TODAY.offline) renderPet(state.sessions || []); } }
   };
   window.COSWeb.sessionKit = {
     // A session object for continueSession, with the overlay's own view (READER_VIEW's methods).
@@ -4150,7 +5008,10 @@
     newKey: newTurnKey,
     probe: function (r) { return sxProbeAttach(r); },
     path: sessionPath, answer: apiAnswer,
-    feed: { fresh: newFeed, apply: applyFeed, word: sxFeedWord, detail: sxFeedDetail, tool: sxToolLine, elapsed: sxElapsed, fallback: sxFallbackLine },
+    notSent: { rows: notSentRows, line: notSentLine, note: noteNotSent, get: notSentFor },
+    imageHtml: readerImagesHtml, imagesMount: readerImagesMount, imagesStop: readerImagesStop,
+    feed: { fresh: newFeed, apply: applyFeed, word: sxFeedWord, detail: sxFeedDetail, tool: sxToolLine, elapsed: sxElapsed, fallback: sxFallbackLine,
+      truth: sxTruth, settle: sxSettle, noteList: sxNoteList, noteGate: sxNoteGate, gateStale: sxGateStale, promptLine: sxPromptLine, parkNoteShows: sxParkNoteShows },
     title: sxTitle, stateOf: sxState, stateLabel: function (s) { return sxStateLabel(s, sxState(s)); },
     parkCopy: function (p) { return SX_PARK[sxProvider(p)]; }, providerLabel: sxProviderLabel, markdown: sxMd
   };
@@ -4163,7 +5024,7 @@
       history.replaceState({}, document.title, location.pathname + location.hash);
       api('/api/web-session/login', { method: 'POST', body: { code: linkCode } }).then(showShell)
         .catch(function (err) {
-          showAuth(err && err.status ? err.message : 'Could not reach COS on your Mac. Check that this phone is on Tailscale and the Mac is awake.');
+          showAuth(err && err.status ? err.message : UNREACHABLE_COPY);
           var box = $('auth-code'); if (box) box.value = linkCode;
         });
       return;
@@ -4175,7 +5036,7 @@
         .catch(function (err) { showAuth(err && err.status ? err.message : 'That sign-in link did not work. Get a new one from COS Control on your Mac or the COS Glasses app, or use a code or the token.'); });
       return;
     }
-    api('/api/web-session/status').then(function (st) { if (st && st.authenticated) showShell(st); else showAuth(); }).catch(function () { showAuth('COS on your Mac is not answering. Check that the Mac is awake and on Tailscale.'); });
+    api('/api/web-session/status').then(function (st) { if (st && st.authenticated) showShell(st); else showAuth(); }).catch(function () { showAuth(UNREACHABLE_COPY); });
   }
   if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', boot); else boot();
 })();