@gotcos/glasses-server 7.0.7 → 7.0.18

package/server/web-control/app.js

@@ -266,7 +266,10 @@
       if (timer && o.responseType !== 'blob') clearTimeout(timer);
       sxNoteClock(res, sentAt);
       noteServer(true);
-      if (res.status === 401 && path.indexOf('/api/web-session/') !== 0) { showAuth(); var gone = new Error('Signed out. Connect this browser again.'); gone.status = 401; throw gone; }
+      // A request that renewed this browser's sign-in says so (lib/api-auth.ts): `<new expiry> <30-day cap>`.
+      var renewedTo = res.headers && typeof res.headers.get === 'function' ? res.headers.get('X-COS-Web-Session') : null;
+      if (renewedTo && typeof signinRemember === 'function') { var rt = String(renewedTo).split(' '); signinRemember({ expiresAt: rt[0], renewUntil: rt[1] }); }
+      if (res.status === 401 && path.indexOf('/api/web-session/') !== 0) { showAuth(typeof signinLapsedCopy === 'function' && signedInOnce() ? signinLapsedCopy() : undefined); var gone = new Error('Signed out. Connect this browser again.'); gone.status = 401; throw gone; }
       if (o.responseType === 'blob' && res.ok) return res.blob();
       return res.text().then(function (text) {
         var data = {};
@@ -357,6 +360,103 @@
     sessions: [], sessionsMode: 'words', workTasks: [], workOpenStages: { complete: false },
     stream: null, lastLoad: {}, livePoll: null
   };
+  // ── Mac reachability and sign-in lifetime (W1, 7.0.x): audit 02 F2, F3, F23 ──
+  // F3: with no offline shell (that needs a service worker, so HTTPS), an open page says plainly when the Mac stops answering,
+  // when it last heard from it, and offers Retry, instead of spinners. Retry asks GET /api/health (public, no state) and then
+  // reloads the pane on screen. While the Mac is down it asks again every 30 s, only while the page is visible.
+  // F2: a sign-in lasts 7 days and, since 7.0.x, renews while in use up to 30 days (lib/web-session-auth.ts). Status and the
+  // login answer carry this browser's own expiresAt; within a day of it the page says when it ends and how to sign in again.
+  // Sign-in (7.0.x, Miles 2026-11-09 "Renew while in use, 30-day cap"): `ends` is this cookie's expiry, `cap` the latest a
+  // renewal can reach (30 days from the first sign-in). A server without renewal sends no cap: then the cookie's end is the end.
+  var CONN = { timer: null, retrying: false, signin: null, hideFor: 0, lapsed: false };
+  var CONN_RETRY_MS = 30000, SIGNIN_WARN_MS = 24 * 3600000, SIGNIN_STORE = 'cos.web.signinEnds';
+  // Names the row, never the Settings page: that page was renamed in COS Control 0.5.387, and a phone may pair with either build.
+  var SIGNIN_HOW = 'On your Mac, open COS Control Settings and choose Open COS on your phone. Or get a code from another signed-in browser, or from the COS Glasses app.';
+  function connWhen(ms) {
+    if (!ms) return '';
+    var d = new Date(ms), same = new Date().toDateString() === d.toDateString();
+    return same ? clock(d) : d.toLocaleDateString(undefined, { weekday: 'short' }) + ' ' + clock(d);
+  }
+  function signinRemember(info) {
+    var ends = info && info.expiresAt ? Date.parse(info.expiresAt) : NaN, cap = info && info.renewUntil ? Date.parse(info.renewUntil) : NaN;
+    // Q1: a signed-in answer with no expiry (the token, or an older server) leaves nothing to warn about.
+    if (info && info.authenticated === true && !info.expiresAt) {
+      CONN.signin = null;
+      try { localStorage.removeItem(SIGNIN_STORE); } catch (e) { /* nothing kept */ }
+      return;
+    }
+    if (!isFinite(ends) || ends <= 0) return;
+    CONN.signin = { ends: ends, cap: isFinite(cap) && cap >= ends ? cap : 0 };
+    try { localStorage.setItem(SIGNIN_STORE, JSON.stringify(CONN.signin)); } catch (e) { /* the notice still works for this page */ }
+    if (typeof connPaint === 'function') connPaint();
+  }
+  function signinKnown() {
+    if (CONN.signin) return CONN.signin;
+    try {
+      var raw = localStorage.getItem(SIGNIN_STORE), v = raw ? JSON.parse(raw) : null;
+      if (typeof v === 'number' && v > 0) return { ends: v, cap: 0 };   // the earlier page kept the expiry alone
+      if (v && typeof v.ends === 'number' && v.ends > 0) return { ends: v.ends, cap: typeof v.cap === 'number' ? v.cap : 0 };
+    } catch (e) { /* nothing known */ }
+    return null;
+  }
+  // When this sign-in really ends while it is in use: the 30-day cap where the server renews, else the cookie's own end.
+  function signinEndsAt() { var k = signinKnown(); return k ? (k.cap || k.ends) : 0; }
+  // Why the sign-in gate opened after this page had been signed in: the 30 days, no use in the cookie's last 2 days (its
+  // only renewal window, so a browser used on day 4 still ends on day 7), or a sign-out. Q1 R-3.
+  function signinLapsedCopy() {
+    var k = signinKnown(), soon = Date.now() + 60000;
+    if (k && k.cap && k.cap <= soon) return 'Your sign-in on this browser reached its 30 days. ' + SIGNIN_HOW;
+    if (k && k.cap && k.ends <= soon) return 'Your sign-in on this browser ended because COS was not used here in its last 2 days. ' + SIGNIN_HOW;
+    if (k && !k.cap && k.ends <= soon) return 'Your sign-in on this browser ended. Sign-ins last 7 days. ' + SIGNIN_HOW;
+    return 'This browser is signed out. ' + SIGNIN_HOW;
+  }
+  // Q1 M1: a request that never got an answer cannot tell a sleeping Mac from this device being offline or off
+  // Tailscale, so the line names both. Only the browser's own "offline" is certain enough to say alone.
+  function connOffline() { return typeof navigator !== 'undefined' && navigator && navigator.onLine === false; }
+  function connTitle() { return connOffline() ? 'This device is offline.' : 'COS on your Mac is not answering.'; }
+  function connWhy() {
+    return connOffline() ? 'Connect to the internet and Tailscale, then try again.'
+      : 'Your Mac may be asleep, or this device may be offline or off Tailscale.';
+  }
+  function connHtml() {
+    var html = '';
+    if (SERVER.up === false) {
+      html += '<div class="conn-line" role="status"><strong>' + esc(connTitle()) + '</strong><span class="conn-sub">' +
+        esc((SERVER.lastUpAt ? 'Last updated ' + connWhen(SERVER.lastUpAt) + '. ' : '') + 'What is on screen may be out of date. ' + connWhy()) + '</span>' +
+        '<button type="button" class="btn small" data-action="conn-retry"' + (CONN.retrying ? ' disabled' : '') + '>' + (CONN.retrying ? 'Checking' : 'Retry') + '</button></div>';
+    }
+    var ends = signinEndsAt(), left = ends - Date.now();
+    if (ends && left > 0 && left <= SIGNIN_WARN_MS && CONN.hideFor !== ends) {
+      html += '<div class="conn-line" role="status"><strong>Sign-in here ends ' + esc(connWhen(ends)) + '.</strong><span class="conn-sub">' +
+        esc('Sign in again before then from COS Control Settings on your Mac: Open COS on your phone.') + '</span>' +
+        '<button type="button" class="btn small" data-action="conn-hide-signin">Hide</button></div>';
+    }
+    return html;
+  }
+  function connPaint() {
+    var box = $('conn-notice'); if (!box) return;
+    var html = connHtml();
+    if (box.innerHTML !== html) box.innerHTML = html;
+    box.hidden = !html;
+  }
+  function connSchedule() {
+    if (CONN.timer) { clearTimeout(CONN.timer); CONN.timer = null; }
+    if (SERVER.up !== false) return;
+    CONN.timer = setTimeout(function () { CONN.timer = null; if (!document.hidden) connRetry(false); else connSchedule(); }, CONN_RETRY_MS);
+  }
+  function connRetry(byHand) {
+    if (CONN.retrying) return Promise.resolve(false);
+    CONN.retrying = true; connPaint();
+    return api('/api/health', { timeoutMs: 10000 }).then(function () { return true; }, function () { return false; }).then(function (up) {
+      CONN.retrying = false;
+      if (up) { connPaint(); if (typeof route === 'function') route(); }
+      else { if (byHand) noteServer(false); connPaint(); connSchedule(); }
+      return up;
+    });
+  }
+  SERVER.hooks.push(function () { connPaint(); connSchedule(); });
+  // ── end Mac reachability and sign-in lifetime
+
   // Control's order (ActivitySection.visibleSections): Today, then Messages to Dictation. Usage is a
   // view inside Sessions on the Mac; its route stays so old links work, and the rail marks Sessions.
   var ROOT_PANES = ['today', 'messages', 'speakers', 'meetings', 'memories', 'threads', 'sessions', 'work', 'dictation', 'usage', 'settings'];
@@ -531,6 +631,8 @@
     readerImagesStop($('session-turns')); readerImagesStop($('ta-last'));
     if (typeof liveHide === 'function') { liveHide(); liveStopWatch(); LIVE.mode = 'idle'; }
     var alreadyOpen = !$('auth-gate').classList.contains('hidden');
+    if (typeof CONN === 'object' && !$('app-shell').classList.contains('hidden')) CONN.lapsed = true;
+    if (typeof authOffline === 'function') authOffline(false);
     $('app-shell').classList.add('hidden');
     $('auth-gate').classList.remove('hidden');
     // A later 401 from a pane still polling (W.api passes no message) must not blank what the gate already says:
@@ -539,13 +641,17 @@
     setStatus($('auth-error'), message || '', true);
     $('auth-error').classList.toggle('hidden', !message);
   }
+  function signedInOnce() { var shell = typeof $ === 'function' ? $('app-shell') : null; return !!(shell && !shell.classList.contains('hidden')) || CONN.lapsed; }
   function showShell(info) {
+    if (typeof signinRemember === 'function') signinRemember(info);
+    if (typeof authOffline === 'function') authOffline(false);
     $('auth-gate').classList.add('hidden');
     $('app-shell').classList.remove('hidden');
     state.serverName = (info && info.serverName) || 'Your Mac';
     $('host-name').textContent = state.serverName.replace(/-/g, ' ');
     loadTailnetUrl();
     runHooks(shellHooks, info);
+    if (typeof connPaint === 'function') connPaint();
     route();
     if (typeof liveStart === 'function') liveStart();   // 7.0.1: the one live stream for this page (a no-op if it is already open)
     // Reloaded with Today's overlay open: its history entry is still current. The overlay opens the same thing again
@@ -1282,7 +1388,8 @@
       sessionList(force === true ? 0 : 15000).catch(function () { return null; }),
       api('/api/work-board/your-move').catch(function () { return null; }),
       api('/api/welcome-context').catch(function () { return null; }),
-      api('/api/meetings/live-chunks').catch(function () { return null; })
+      api('/api/meetings/live-chunks').catch(function () { return null; }),
+      loadRunJobs()
     ]).then(function (res) {
       if (gen !== TODAY.gen) return;
       var sessions = (res[0] && res[0].sessions) || [];
@@ -1305,6 +1412,7 @@
       TODAY.recording = false;
 
       renderRunning(working, open);
+      runJobsSchedule();
       if (!offline) renderPet(sessions);
       paintNeeds();
       renderWeather(welcome);
@@ -1342,7 +1450,7 @@
     var box = $('today-rec');
     if (!rec) { box.innerHTML = ''; return; }
     box.innerHTML = '<button type="button" class="rec-banner" data-goto="meetings"><span class="rec-dot"></span>' +
-      '<span class="rec-copy"><strong>Recording now</strong><span>' + esc(rec.source + (rec.startTime ? ', ' + span(rec.startTime) + ' so far' : '')) + '</span></span>' +
+      '<span class="rec-copy"><strong>Recording now</strong><span>' + esc(rec.source + (rec.startTime ? ', ' + span(rec.startTime) + ' so far' : '') + (rec.source === SOURCES.mac ? '. Stop it in COS Control on your Mac.' : '')) + '</span></span>' +
       '<span class="btn small">Live view</span></button>';
   }
   // ── The Today summary (6.99.26 candidate) ───────────────
@@ -1350,8 +1458,10 @@
   // the server (lib/today-brief.ts). Today sends what it already read: session titles, states, how long, each session's
   // latest line and what needs you. The server decides whether a new one is written (off unless switched on, only when
   // the inputs changed, 10 minutes apart, the Summaries per day cap, a breaker). Today never waits for it: the counts line paints at once
-  // and the summary replaces it when one arrives. Never shown over a session list that was not read.
-  var BRIEF = { view: null, inflight: false, sentKey: '', sentAt: 0, reconnect: false };
+  // and the summary replaces it when one arrives. T1 spec (lead 23:04, same rule as Control 0.5.388): today's summary
+  // stays through a pending or failed session read (its age line already says what could not be read), the block keeps
+  // its tallest height so nothing under it moves while Miles reads, and unchanged text is never written again.
+  var BRIEF = { view: null, inflight: false, sentKey: '', sentAt: 0, reconnect: false, heldPx: 0, heldDay: '', heldWidth: -1, shownKind: '', shownText: '', shownEl: null };
   // 6.99.26 QA: the same rows are asked about again only after five minutes (a Today that sits open still learns what
   // the server reads itself: sub-agents and Work cards); changed rows are asked about at once, one ask at a time.
   var BRIEF_RESEND_MS = 5 * 60000, BRIEF_OFF_RECHECK_MS = 5 * 60000, BRIEF_TICK_MS = 60000, BRIEF_LIVE_GAP_MS = 60000;
@@ -1412,14 +1522,43 @@
       if (TODAY.model && state.pane === 'today') renderStory(TODAY.model);
     });
   }
-  /** The summary to show, or null: only with text, only over a session list that was read. */
+  /** The summary to show, or null: only with text, fresh or stale, and written today. T1 spec 0: a session read that is
+   *  pending or failed no longer swaps it for the counts line (an offline Today still hides it, in renderStory). */
   function briefShown() {
     var v = BRIEF.view;
-    if (!v || !v.text || (v.state !== 'fresh' && v.state !== 'stale') || TODAY.sessionsState !== 'answered') return null;
+    if (!v || !v.text || (v.state !== 'fresh' && v.state !== 'stale')) return null;
+    var at = toDate(v.at);
+    if (!at || at.toDateString() !== new Date().toDateString()) return null;
     return v;
   }
-  // Forget the summary (Settings turned it on or off): the next Today paint asks at once.
-  function resetBrief() { BRIEF.view = null; BRIEF.sentKey = ''; BRIEF.sentAt = 0; }
+  // Forget the summary (Settings turned it on or off): the next Today paint asks at once, and the block may shrink.
+  function resetBrief() { BRIEF.view = null; BRIEF.sentKey = ''; BRIEF.sentAt = 0; BRIEF.heldPx = 0; }
+  // T1 spec 1 and 2: #today-story keeps the tallest height it has had, so a shorter rewrite, or the fall back to the
+  // counts line, never pulls the page up under Miles. It may shrink on a new local day, when its width changes (resize,
+  // Duo fold or unfold, rotation reflow the text anyway), after Refresh lands and after resetBrief; never on a rewrite.
+  function storyHold(el) {
+    if (!el || !el.style || typeof el.getBoundingClientRect !== 'function') return;
+    var day = new Date().toDateString(), w = el.clientWidth || 0;
+    if (BRIEF.heldDay !== day || Math.abs(w - BRIEF.heldWidth) >= 1) { BRIEF.heldPx = 0; BRIEF.heldDay = day; BRIEF.heldWidth = w; }
+    el.style.minHeight = '';
+    var h = Math.ceil(el.getBoundingClientRect().height || 0);
+    if (h > BRIEF.heldPx) BRIEF.heldPx = h;
+    el.style.minHeight = BRIEF.heldPx ? BRIEF.heldPx + 'px' : '';
+  }
+  // T1 spec 3: Today repaints on every session move; the same words are not written again (no reflow, no aria-live
+  // re-announcement). Only the age line under a summary moves on.
+  function storyWrite(el, kind, text, when) {
+    if (BRIEF.shownEl !== el || BRIEF.shownKind !== kind || BRIEF.shownText !== text) {
+      if (kind === 'brief') el.innerHTML = esc(text) + '<span class="story-when">' + esc(when) + '</span>';
+      else el.textContent = text;
+      BRIEF.shownEl = el; BRIEF.shownKind = kind; BRIEF.shownText = text;
+    } else if (kind === 'brief') {
+      var w = typeof document !== 'undefined' && document.querySelector ? document.querySelector('#today-story .story-when') : null;
+      if (w) { if (w.textContent !== when) w.textContent = when; }
+      else el.innerHTML = esc(text) + '<span class="story-when">' + esc(when) + '</span>';
+    }
+    storyHold(el);
+  }
   // Every minute while Today is on screen: "Updated N min ago" moves on, and an unchanged Today asks again once its
   // five minutes are up (requestBrief's own throttle). Hidden or another pane: nothing.
   setInterval(function () {
@@ -1441,13 +1580,22 @@
   function renderStory(m) {
     var el = $('today-story');
     el.className = 'story';
-    if (TODAY.offline) { el.textContent = 'COS on ' + state.serverName + ' is not answering right now. Today fills in when it does.'; return; }
+    // Today round 2: "Ask about this" shows under a model summary only (paintTodayAsk, below the Today block). The test
+    // harnesses that run this block alone do not have it, so it is looked up, never assumed.
+    var askBox = typeof paintTodayAsk === 'function' ? paintTodayAsk : function () {};
+    // The harnesses that run this block alone have no storyWrite either: a plain write there.
+    var write = typeof storyWrite === 'function' ? storyWrite : function (e, kind, text, when) {
+      if (kind === 'brief') e.innerHTML = esc(text) + '<span class="story-when">' + esc(when) + '</span>'; else e.textContent = text;
+    };
+    if (TODAY.offline) { askBox(null); write(el, 'offline', 'COS on ' + state.serverName + ' is not answering right now. Today fills in when it does.'); return; }
     // The model's summary when there is one (it never blocks: the counts line below shows until it lands). The test
     // harnesses that run this block alone have no requestBrief, so it is looked up, never assumed.
+    askBox(null);
     if (typeof requestBrief === 'function') {
       requestBrief(m);
       var brief = briefShown();
-      if (brief) { el.innerHTML = esc(brief.text) + '<span class="story-when">' + esc(briefWhen(brief, m)) + '</span>'; return; }
+      askBox(brief);
+      if (brief) { write(el, 'brief', brief.text, briefWhen(brief, m)); return; }
     }
     var first = '';
     if (m.sessionsWaiting > 0) first = countWord(m.sessionsWaiting) + ' ' + plural(m.sessionsWaiting, 'session is', 'sessions are') + ' waiting on you';
@@ -1471,7 +1619,7 @@
     var others = m.failed.filter(function (n) { return n !== 'sessions'; });
     if (!m.settled && !m.now.length && !m.later.length) out += (unread ? others : m.failed).length ? ' Couldn\u2019t read ' + listWords(unread ? others : m.failed) + ', so this may not be everything.' : unread ? ' This may not be everything that needs you.' : ' Still reading what needs you.';
     else if (unread) out += ' This may not be everything that needs you.';
-    el.textContent = out;
+    write(el, 'counts', out);
   }
   function listWords(names) { return names.length < 2 ? names.join('') : names.slice(0, -1).join(', ') + ' and ' + names[names.length - 1]; }
   function runRow(s, activeNow) {
@@ -1493,14 +1641,16 @@
       '<span class="run-meta">' + metaHtml + '</span></button>';
   }
   function renderRunning(working, open) {
-    $('run-count').textContent = working.length ? String(working.length) : '';
+    // W1: COS's own jobs (questions it is answering, routines, Work runs) count as running too, as on the Mac.
+    var jobs = typeof runJobsHtml === 'function' ? runJobsHtml() : { html: '', n: 0 };
+    $('run-count').textContent = working.length + jobs.n ? String(working.length + jobs.n) : '';
     var list = $('run-list');
     // Never "Nothing running" about a list that was not read.
-    if (TODAY.sessionsState === 'failed') { list.innerHTML = '<button type="button" class="run-more run-failed" data-today-needs="retry">Couldn\u2019t read sessions. Try again</button>'; return; }
+    if (TODAY.sessionsState === 'failed') { list.innerHTML = jobs.html + '<button type="button" class="run-more run-failed" data-today-needs="retry">Couldn\u2019t read sessions. Try again</button>'; return; }
     var shown = working.slice(0, 3);
-    var html = shown.map(function (s) { return runRow(s, true); }).join('');
+    var html = jobs.html + shown.map(function (s) { return runRow(s, true); }).join('');
     if (!shown.length) {
-      html = open.slice(0, 2).map(function (s) { return runRow(s, false); }).join('');
+      html = jobs.html + open.slice(0, 2).map(function (s) { return runRow(s, false); }).join('');
       if (!html) html = '<div class="run-empty">Nothing running. Start a session on your Mac and it shows here.</div>';
     }
     var more = (working.length - shown.length) + (shown.length ? open.length : Math.max(0, open.length - 2));
@@ -1508,6 +1658,57 @@
     list.innerHTML = html;
     if (typeof liveTickStart === 'function' && list.querySelector && list.querySelector('[data-live-since]')) liveTickStart();
   }
+  // ── Running beyond sessions (W1, 7.0.x): audit 02 F10, Q1 M6. The same job rows COS Control 0.5.386 draws
+  // (Models.swift TodayHome running rows, b02d1ad 14185-14207), from the same server list, GET /api/query-jobs/active
+  // (titles only, never a prompt or an answer):
+  //   person   "A question to COS" row, "COS is answering, N min", Open in Messages
+  //   routine  "Routine" row, "running since 7:30 PM", Open in Messages
+  //   task     "A captured task" row, "a captured task, on the server, N min", In Sessions
+  //   other    never a row: it is a Control Work session or a meeting review, already shown as the row it is
+  // No Stop on any of them, as on the Mac: Control's only Stop is on a Work run it started itself, which lives in the Mac's
+  // own handoff store and is not visible to this page.
+  var RUN_JOB_ROW = {
+    person: { word: 'Question', title: 'A question to COS', open: 'messages', label: 'Open in Messages' },
+    routine: { word: 'Routine', title: 'Routine', open: 'messages', label: 'Open in Messages' },
+    task: { word: 'Work', title: 'A captured task', open: 'sessions', label: 'In Sessions' },
+  };
+  var RUN_JOBS = { items: null, timer: null };
+  var RUN_JOBS_POLL_MS = 15000;
+  function runJobValid(j) { return j && typeof j.jobId === 'string' && /^[A-Za-z0-9_-]{1,80}$/.test(j.jobId) && RUN_JOB_ROW[j.origin]; }
+  function loadRunJobs() {
+    return api('/api/query-jobs/active').then(function (d) {
+      // An older server answers 400 or no protocol: no jobs row, never an error line (Control keys off the field, not the status).
+      RUN_JOBS.items = d && d.protocolVersion === 1 && d.enabled !== false && Array.isArray(d.items) ? d.items.filter(runJobValid).slice(0, 8) : [];
+    }, function () { RUN_JOBS.items = null; });
+  }
+  function runJobsSchedule() {
+    if (RUN_JOBS.timer) { clearTimeout(RUN_JOBS.timer); RUN_JOBS.timer = null; }
+    if (!RUN_JOBS.items || !RUN_JOBS.items.length) return;
+    RUN_JOBS.timer = setTimeout(function () {
+      RUN_JOBS.timer = null;
+      // Only while Today is in front: a hidden page reads nothing (it reads again when Today comes back).
+      if (state.pane !== 'today' || document.hidden) return;
+      loadRunJobs().then(function () { renderRunning(TODAY.working || [], TODAY.open || []); runJobsSchedule(); });
+    }, RUN_JOBS_POLL_MS);
+  }
+  function runJobMinutes(j) { return Math.max(0, Math.round((Number(j.elapsedMs) || 0) / 60000)); }
+  function runJobRow(j) {
+    var kind = RUN_JOB_ROW[j.origin], mins = runJobMinutes(j);
+    var started = new Date(Date.now() - (Number(j.elapsedMs) || 0));
+    var meta = j.origin === 'routine' ? 'running since ' + clock(started)
+      : j.origin === 'person' ? 'COS is answering, ' + mins + ' min'
+      : 'a captured task, on the server, ' + mins + ' min';
+    return '<div class="run-row run-job"><span class="run-who"><span class="badge work">' + esc(kind.word) + '</span></span>' +
+      '<span class="run-title">' + esc(plain(j.title || '').trim() || kind.title) + '</span>' +
+      '<span class="run-meta">' + esc(meta) + '</span>' +
+      '<span class="row-actions"><button type="button" class="link-btn" data-goto="' + kind.open + '">' + esc(kind.label) + '</button></span></div>';
+  }
+  function runJobsHtml() {
+    var items = RUN_JOBS.items || [];
+    return { html: items.map(runJobRow).join(''), n: items.length };
+  }
+  // ── end running beyond sessions
+
   // ── live state on screen (7.0.1): Today's counts and rows, the pet, the Sessions rows, the header line ──
   // The live model (above) calls this, batched, after a frame or a list read moved something.
   function liveRepaint(rows, structural) {
@@ -1599,6 +1800,8 @@
         BRIEF.inflight = false;
         if (v && typeof v === 'object') { BRIEF.view = v; BRIEF.sentAt = Date.now(); }
         if (v && v.reason === 'refresh_throttled') TR.retryAt = Date.now() + Math.max(1000, Number(v.retryAfterMs) || 30000);
+        // T1 spec 2: Refresh re-fits the block to what it now holds.
+        BRIEF.heldPx = 0;
         if (TODAY.model && state.pane === 'today') renderStory(TODAY.model);
         return done(refreshWords(v));
       }, function (err) {
@@ -1670,8 +1873,29 @@
   // Control's askedTitle and askedWhy for a session waiting on you.
   // Control's TodayHome: guarded(title) ?? "A session". Never the workspace path or the session id: this line is shown
   // on Today and goes into the Today summary sent to the model, which carries no ids.
+  // ── A turn that ended asking you (7.0.18, X1 contract v1; Miles 2026-11-10 07:14) ──
+  // A Claude session ended its turn with the app's next-step box: a question and reply buttons. The server marks the row
+  // (waiting_source 'turn_end', waiting_choices: 0 to 2 labels) only while COS_TURN_END_ASKS is on. Unlike a question at
+  // the Mac's prompt, a reply IS the answer here, so Today and the reader offer the choices and the reply box. What is
+  // sent is the contract's exact text: it never reads as typed at the desk, and the session may ask him to confirm.
+  var TURN_END_PREFIX = 'Answer sent from COS Control Web through COS, not typed in this session: ';
+  var TURN_END_LINE = 'A choice or a reply here reaches the session as a message from COS, not typed in the session, and the session may ask you to confirm.';
+  /** The turn-end ask on a session row, or null: any other row, an older server, or the switch off. */
+  function turnEndOf(s) {
+    if (!s || s.waiting_source !== 'turn_end' || s.agent_state !== 'waiting') return null;
+    var clean = function (v, n) { return String(v == null ? '' : v).replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u202a-\u202e\u2066-\u2069]/g, ' ').replace(/\s+/g, ' ').trim().slice(0, n); };
+    var choices = Array.isArray(s.waiting_choices) ? s.waiting_choices.filter(function (c) { return typeof c === 'string' && clean(c, 40); }).map(function (c) { return clean(c, 40); }).slice(0, 2) : [];
+    return { ask: clean(s.waiting_detail, 160), choices: choices };
+  }
+  /** The exact words a choice or a reply sends (contract v1): attributed to COS Control Web, never to the desk. */
+  function turnEndPrompt(text) { return TURN_END_PREFIX + turnEndBare(text); }
+  /** The words as he wrote them: a message that came back to the box already carries the prefix, never twice. */
+  function turnEndBare(text) { var t = String(text || '').trim(); return t.indexOf(TURN_END_PREFIX) === 0 ? t.slice(TURN_END_PREFIX.length).trim() : t; }
   function askedTitle(s) {
     var t = plain(s.display_label || s.custom_title || '').replace(/\s+/g, ' ').trim() || 'A session';
+    // The harnesses that run this block alone have no turnEndOf: looked up, never assumed.
+    var te = typeof turnEndOf === 'function' ? turnEndOf(s) : null;
+    if (te) return te.ask ? t + ' asked: ' + te.ask : t + ' asked you something';
     if (sxProvider(s.provider) !== 'claude') return t + ' is waiting for your reply';
     if (s.waiting_kind === 'plan') return t + ' has a plan for you to approve';
     if (s.waiting_kind === 'permission') return t + ' wants your permission';
@@ -1682,6 +1906,8 @@
   var TOOL_NAMES = ['AskUserQuestion', 'ExitPlanMode', 'Bash', 'BashOutput', 'KillShell', 'Edit', 'Write', 'Read', 'Grep', 'Glob', 'LS', 'Task', 'Agent',
     'WebFetch', 'WebSearch', 'TodoWrite', 'NotebookEdit', 'MultiEdit', 'SlashCommand', 'Skill', 'ToolSearch'];
   function askedWhy(s) {
+    var te = typeof turnEndOf === 'function' ? turnEndOf(s) : null;
+    if (te) return te.choices.length ? 'Tap a choice or reply here' : 'Reply here';
     if (s.waiting_kind === 'plan') return 'Has a plan for you to approve';
     var d = String(s.waiting_detail || '').trim();
     if (TOOL_NAMES.indexOf(d) >= 0) d = '';
@@ -1692,7 +1918,8 @@
       return d.indexOf('[home]') >= 0 ? 'Wants to run (home folder hidden) ' + shown : 'Wants to run ' + shown;
     }
     if (s.waiting_kind === 'question' && d) return d.length > 160 ? d.slice(0, 159) + '…' : d;
-    return 'Waiting for you' + (sxProvider(s.provider) === 'claude' ? '. Paused until you answer.' : '');
+    // W1 A5: a Claude session waits on its own prompt; the card under it says where, once.
+    return sxProvider(s.provider) === 'claude' ? 'Waiting for your answer' : 'Waiting for you';
   }
   // 6.99.26: where a waiting session's question can be answered. 'here': this page holds it (panes/questions.js), as
   // cards in its waiting sheet. 'mac': a Claude session's own prompt (or a held one that went back to the Mac), which
@@ -1707,16 +1934,111 @@
     return q && q.question ? clipWords(q.question, 160) : '';
   }
   function clipWords(text, n) { var t = String(text || '').replace(/\s+/g, ' ').trim(); return t.length > n ? t.slice(0, n - 1) + '…' : t; }
-  function whereFor(provider, id) {
+  function whereFor(provider, id, row) {
     var q = sessionQs();
     var held = q ? q.itemsFor(id) : [], mac = q && q.atMacFor ? q.atMacFor(id) : [];
     if (held.length) return { where: 'here', ask: askedHere(held) };
+    // 7.0.18: a turn that ended asking him is answered by a reply, here or anywhere: never "at the Mac".
+    var te = row && typeof turnEndOf === 'function' ? turnEndOf(row) : null;
+    if (te) return { where: 'turnend', ask: te.ask, choices: te.choices };
     if (q && q.answeredFor && q.answeredFor(id)) return { where: 'answered', ask: '' };
-    var words = mac.length && q.wordsOf ? q.wordsOf(mac[0].id) : null;
+    // X1 contract: a card built from the server's `waiting` list carries its own words; a held one gone back to the Mac
+    // has the words this page saw while it was held.
+    var first = mac[0];
+    var words = first && first.fromWaiting ? { questions: (first.questions || []).map(function (x) { return x.question; }), summary: '' }
+      : first && q.wordsOf ? q.wordsOf(first.id) : null;
     var ask = words ? clipWords(words.questions[0] || (words.summary ? 'Wants to run ' + words.summary : ''), 160) : '';
-    if (mac.length || sxProvider(provider) === 'claude') return { where: 'mac', ask: ask };
+    if (mac.length) return { where: 'mac', ask: ask };
+    // DESIGN.md step 4 #5: the Mac line only for a Claude row that waits on a question or an approval, never for any
+    // waiting Claude session. A row the page has not read says nothing about it, so it keeps the Mac line as before.
+    var kind = row ? String(row.waiting_kind || '') : '';
+    if (sxProvider(provider) === 'claude' && (!row || kind === 'question' || kind === 'permission')) return { where: 'mac', ask: ask };
     return { where: '', ask: '' };
   }
+  // ── At the Mac's prompt, in the session reader (W1 A5) ──
+  // Miles 11/09: "when I actually navigate to the session, there is no ability to answer the question." The reader cannot
+  // answer a question that waits on the Mac's own prompt either, so it says so at the top, with the words when this page
+  // has them (a held question it saw, or the server's waiting line) and plainly when it does not. Nothing here sends.
+  var MAC_Q = { line: "Answer this at your Mac's prompt. A message sent from here does not answer it; it waits until the question is answered at the Mac.", none: "COS cannot read this question's words from here. They show at the Mac's prompt." };
+  /** 7.0.18: the reader's card for a turn that ended asking him: the question, a button per choice, the honest line. */
+  function readerTurnEndHtml(r, row) {
+    var te = turnEndOf(row);
+    if (!te) return '';
+    var title = plain((row && (row.display_label || row.custom_title)) || '').replace(/\s+/g, ' ').trim() || 'This session';
+    var busy = !!(r && r.teSending);
+    return '<p class="sx-mac-q-title"><strong>' + esc(te.ask ? title + ' asked:' : title + ' asked you something') + '</strong></p>' +
+      (te.ask ? '<blockquote class="ta-quote sx-te-ask">' + esc(te.ask) + '</blockquote>' : '') +
+      (te.choices.length ? '<div class="sx-te-choices">' + te.choices.map(function (c, i) {
+        return '<button type="button" class="cx-btn' + (i === 0 ? ' primary' : '') + '" data-sx="turnend" data-i="' + i + '"' + (busy ? ' disabled' : '') + '>' + esc(c) + '</button>';
+      }).join('') + '</div>' : '') +
+      '<p class="sx-note sx-te-line">' + esc(TURN_END_LINE) + '</p>';
+  }
+  function readerMacHtml(provider, id, row) {
+    var w = whereFor(provider, id, row);
+    if (w.where !== 'mac') return '';
+    // X1 contract: when the server listed this question (`waiting`), the shared card list mounted above draws it, with
+    // its options. This block is only for a question it did not list (an older server, or asked before a restart).
+    var qs0 = sessionQs();
+    if (qs0 && qs0.atMacFor && qs0.atMacFor(id).length) return '';
+    var q = sessionQs();
+    var why = row ? askedWhy(row) : '';
+    var words = w.ask || (why && !/^Waiting for (you|your answer)/.test(why) ? why : '');
+    return '<p class="sx-mac-q-title"><strong>Waiting for your answer at the Mac</strong></p>' +
+      (words ? '<blockquote class="ta-quote sx-mac-q-words">' + esc(words) + '</blockquote>' : '<p class="sx-note sx-mac-q-none">' + esc((q && q.macNoWords) || MAC_Q.none) + '</p>') +
+      '<p class="sx-note sx-mac-q-line">' + esc((q && q.macLine) || MAC_Q.line) + '</p>';
+  }
+  function readerRowOf(r) {
+    return (state.sessions || []).filter(function (s) { var k = splitSessionId(s.provider, s.session_id || s.id); return k.provider === r.provider && String(k.id).toLowerCase() === String(r.id).toLowerCase(); })[0] || null;
+  }
+  // 7.0.18: a tap on a choice sends the contract's exact text through the reader's own Continue (continueSession), so the
+  // queue, the held reply and the turn watch behave as for any message. The outcome is said in the status line.
+  var TURN_END_SENT = function (label) { return 'Sent \u201c' + label + '\u201d. It reaches the session as a message from COS; it may ask you to confirm.'; };
+  var TURN_END_GONE = 'Already answered on another screen, or the session moved on. Nothing was sent.';
+  function sendTurnEndChoice(r, i) {
+    if (!r || r.sending) return;
+    var te = turnEndOf(readerRowOf(r));
+    if (!te) { sessionStatus(TURN_END_GONE); readerMacPaint(r, r.waitingNow); return; }
+    var label = te.choices[i];
+    if (!label) return;
+    r.sending = true; r.teSending = true; readerMacPaint(r, r.waitingNow);
+    var done = function () { r.sending = false; r.teSending = false; if (state.reading === r) readerMacPaint(r, r.waitingNow); };
+    return continueSession(r, turnEndPrompt(label), {}).then(function (how) {
+      done();
+      if (state.reading !== r) return how;
+      if (how === 'sent') sessionStatus(TURN_END_SENT(label));
+      else if (how === 'changed') {
+        // The box under it would offer Continue anyway for the composer's words, not this choice: a choice says it plainly.
+        r.refusal = null; r.sendAnyway = null; renderVerdict(r);
+        sessionStatus('The session moved on before this reached it. \u201c' + label + '\u201d was not sent.', 'error');
+      } else if (how === 'refused') sessionStatus('The session did not take \u201c' + label + '\u201d. Try again, or answer it on your Mac.', 'error');
+      return how;
+    }, function (err) {
+      done();
+      if (state.reading !== r) return;
+      var why = err && err.name === 'AbortError' ? 'No answer from your Mac yet. It may still land; tapping again is safe, it will not post twice.' : (err && err.message) || 'Could not reach your Mac.';
+      sessionStatus('Not sent: ' + why, 'error');
+    });
+  }
+  function readerMacPaint(r, waiting) {
+    var el = $('session-mac-q');
+    if (!el || !r) return;
+    r.waitingNow = !!waiting;
+    var row = readerRowOf(r);
+    // 7.0.18: a turn that ended asking him gets its card whether or not the reader thinks it waits (the row is the truth).
+    var te = typeof turnEndOf === 'function' ? turnEndOf(row) : null;
+    r.turnEnd = te;
+    var html = te ? readerTurnEndHtml(r, row) : waiting ? readerMacHtml(r.provider, r.id, row) : '';
+    if (el.innerHTML !== html) el.innerHTML = html;
+    el.hidden = !html;
+    // Q1 M3: the Send box under it says plainly that a message is not the answer, whichever block shows the question
+    // (this one, a Mac card or a held card above).
+    var qs1 = sessionQs(), open = (!!html && !te) || !!(qs1 && ((qs1.itemsFor && qs1.itemsFor(r.id).length) || (qs1.atMacFor && qs1.atMacFor(r.id).length)));
+    var box = $('session-input');
+    // 7.0.18: here a reply IS the answer (sent with the contract's attribution), so the box says so.
+    if (box && box.setAttribute) box.setAttribute('placeholder', te ? 'Or write your own answer' : open ? 'Message this session (not an answer)' : 'Continue this session…');
+  }
+  // ── end at the Mac's prompt
+
   function needsModel() {
     var states = { sessions: TODAY.sessionsState, work: TODAY.workState, voices: TODAY.voices.state, memories: TODAY.memories.state };
     var rows = [], seen = {};
@@ -1724,8 +2046,8 @@
       if (sxKeepWarm(s) || sxState(s) !== 'waiting') return;
       var k = splitSessionId(s.provider, s.session_id || s.id);
       seen[k.provider + '|' + String(k.id).toLowerCase()] = 1;
-      var w = whereFor(k.provider, k.id);
-      rows.push({ kind: 'session', tier: 1, title: askedTitle(s), why: askedWhy(s), since: s.state_since || s.last_activity_at, key: k.provider + '|' + k.id, where: w.where, ask: w.ask });
+      var w = whereFor(k.provider, k.id, s);
+      rows.push({ kind: 'session', tier: 1, title: askedTitle(s), why: askedWhy(s), since: s.state_since || s.last_activity_at, key: k.provider + '|' + k.id, where: w.where, ask: w.ask, choices: w.choices || [] });
     });
     // A question this page holds for a session the list has not shown waiting yet: its own row, so every held
     // question is in front of you (two at once each get one).
@@ -1801,7 +2123,8 @@
       // The session's question shows in the overlay's peek, with its cards to answer. Under it, where it can be answered.
       var q = sessionQs(), whereLine = r.where === 'here' ? 'Answer it here.' : r.where === 'mac' ? (q && q.macLine) || '' : r.where === 'answered' ? (q && q.answeredLine) || '' : '';
       return '<div class="need-row">' +
-        '<button type="button" class="need-open" data-today="wait" data-key="' + esc(r.key) + '">' + top(r.title) + '<span class="need-foot">' + esc(r.ask || r.why) + '</span>' +
+        // 7.0.18: a turn-end row's title already says the question, so its foot says how to answer.
+        '<button type="button" class="need-open" data-today="wait" data-key="' + esc(r.key) + '">' + top(r.title) + '<span class="need-foot">' + esc(r.where === 'turnend' ? r.why : (r.ask || r.why)) + '</span>' +
         (whereLine ? '<span class="need-foot need-where" data-where="' + esc(r.where) + '">' + esc(whereLine) + '</span>' : '') + '</button>' +
         '<div class="need-actions"><button type="button" class="btn small' + (i === 0 ? ' primary' : '') + '" data-session="' + esc(r.key) + '">Open session</button></div></div>';
     }
@@ -1847,30 +2170,183 @@
     // Control's Next up (todayPrepButtons): Prep me opens the Prep composer in the COS chat (panes/cos-chat.js prepFor),
     // Open meeting opens Meetings. Without a server to answer, Prep me is not offered.
     var prep = !TODAY.offline && window.COSWeb && window.COSWeb.cosChat && window.COSWeb.cosChat.prepFor;
+    // Prep on every row (Miles 11/09): "Add context" opens the same inline panel the later rows' Prep opens, for this
+    // meeting. Not on a hold (the server's nextEvent.hold), and not while neither Prep nor Ask is on the Mac.
+    var key = nextPrepKey(n.title, d), ctx = !n.hold && nextPrepMode();
+    if (ctx) NEXT_PREP.rows[key] = { title: n.title, start: d.toISOString() };
     $('next-actions').innerHTML = (prep ? '<button type="button" class="btn small primary" data-today-next="prep">Prep me</button>' : '') +
+      (ctx ? '<button type="button" class="link-btn next-prep-open" data-next-prep="' + esc(key) + '" aria-expanded="' + (NEXT_PREP.open === key) + '">Add context</button>' : '') +
       '<button type="button" class="link-btn" data-goto="meetings">Open meeting</button>';
+    NEXT_PREP.firstKey = ctx ? key : '';
+    paintNextPrepSlot($('next-first-prep'), ctx && NEXT_PREP.open === key ? key : '');
     card.classList.remove('hidden');
   }
-  // PH plan P1: the rest of today from GET /api/calendar/today (selected calendars, next 3), under Next up.
+  // PH plan P1: the rest of today from GET /api/calendar/today (selected calendars), under Next up.
   // An aging snapshot says when it was read. Not connected or nothing more: the block stays hidden.
+  // Today round 2 (Miles 11/09): Next up is 5 rows in all, the event above plus up to 4 more, then "+N more today"
+  // (opens Meetings) when the calendar has more meetings left today than are shown. Desktop Control 0.5.384 matches.
   function loadCalendarLater(n, d) {
+    var LATER_ROWS = 4;
     var box = $('next-later'); if (!box) return;
-    if (!n || !n.title || !d) { box.classList.add('hidden'); box.innerHTML = ''; return; }
+    if (!n || !n.title || !d) { NEXT_PREP.later = null; clearLater(box); return; }
     var gen = TODAY.gen;
     api('/api/calendar/today').then(function (c) {
       if (gen !== TODAY.gen) return;
-      if (!c || !c.connected) { box.classList.add('hidden'); box.innerHTML = ''; return; }
+      if (!c || !c.connected) { NEXT_PREP.later = null; clearLater(box); return; }
       var same = function (r) { var rd = toDate(r.start); return r.title === n.title && rd && d && Math.abs(rd.getTime() - d.getTime()) < 60000; };
-      var rows = (c.next || []).filter(function (r) { return !r.allDay && !same(r); }).slice(0, 2);
-      var asOf = c.stale && c.asOf ? toDate(c.asOf) : null;
-      var html = rows.map(function (r) {
-        var rd = toDate(r.start);
-        return '<div class="later-row"><span class="later-when">' + esc(rd ? clock(rd) : '') + '</span><span class="later-what">' + esc(r.title) + '</span></div>';
-      }).join('');
-      if (asOf) html += '<div class="later-asof">' + esc('Calendar as of ' + clock(asOf)) + '</div>';
-      box.innerHTML = html;
-      box.classList.toggle('hidden', !html);
-    }, function () { box.classList.add('hidden'); box.innerHTML = ''; });
+      var list = c.next || [];
+      var rows = list.filter(function (r) { return !r.allDay && !same(r); }).slice(0, LATER_ROWS);
+      // What is left today past the rows on screen (the event above counts when it is one of today's).
+      var shown = rows.length + (list.some(same) ? 1 : 0), more = (Number(c.remainingCount) || 0) - shown;
+      NEXT_PREP.later = { rows: rows, more: more, asOf: c.stale && c.asOf ? toDate(c.asOf) : null };
+      paintCalendarLater();
+    }, function () { NEXT_PREP.later = null; clearLater(box); });
+  }
+  // Emptied, and its last write forgotten, so the next read that has rows writes them again (writeKeepingPrep skips a
+  // write that matches the last one).
+  function clearLater(box) { box.classList.add('hidden'); box.innerHTML = ''; box.cosPrepHtml = ''; }
+  // The later rows from the last calendar read. Each meeting that is not a hold (the server's `hold`) gets a quiet
+  // Prep, and the open row's panel sits under it. Written only when the markup changed, so a poll never takes the words
+  // or the caret from the panel; when it is written, the words, the focus and the caret are put back.
+  function paintCalendarLater() {
+    var box = $('next-later'), L = NEXT_PREP.later; if (!box || !L) return;
+    var mode = nextPrepMode(), openKey = '';
+    var html = L.rows.map(function (r) {
+      var rd = toDate(r.start), key = rd ? nextPrepKey(r.title, rd) : '', can = !!(mode && key && r.hold !== true);
+      if (can) { NEXT_PREP.rows[key] = { title: r.title, start: rd.toISOString() }; if (NEXT_PREP.open === key) openKey = key; }
+      return '<div class="later-row"><span class="later-when">' + esc(rd ? clock(rd) : '') + '</span><span class="later-what">' + esc(r.title) + '</span>' +
+        (can ? '<button type="button" class="link-btn later-prep" data-next-prep="' + esc(key) + '" aria-expanded="' + (NEXT_PREP.open === key) + '">Prep</button>' : '') + '</div>' +
+        (can && NEXT_PREP.open === key ? nextPrepPanelHtml(key, mode) : '');
+    }).join('');
+    if (L.more > 0) html += '<button type="button" class="link-btn later-more" data-goto="meetings">' + esc('+' + L.more + ' more today') + '</button>';
+    if (L.asOf) html += '<div class="later-asof">' + esc('Calendar as of ' + clock(L.asOf)) + '</div>';
+    // Shown before it is written: autoGrow measures the box, and a hidden one measures 0.
+    box.classList.toggle('hidden', !html);
+    writeKeepingPrep(box, html, openKey);
+  }
+
+  // ── Prep on every Next up row (Miles typed 2026-11-09 13:00 CST) ─────────
+  // "Inline options to prep for a given meeting which starts the gotCOS ask and gives us the ability to add in more
+  // context for the prep." Prep on a later row (or Add context beside the first row's Prep me) opens a small panel
+  // under that row: the context box, Add files, Start prep and Cancel. One panel at a time; Escape closes it. The words
+  // and files are kept per meeting (title plus start) while the page polls. Start prep goes to Messages, then COS, and
+  // hands them to cos-chat.js prepStart: the Prep composer for that meeting (the context joins its notes, the files go
+  // up through its own path, then Prep me runs), or, with Prep off on the Mac and Ask on, the plain Ask with the context
+  // as its quoted reference. Neither on (or the Mac not answering): no Prep on any row.
+  var NEXT_PREP = { open: '', rows: {}, drafts: {}, later: null, firstKey: '', busy: false, capsAsked: false };
+  function nextPrepKey(title, d) { return String(title || '') + '|' + (d ? d.toISOString() : ''); }
+  function nextPrepChat() { return typeof window !== 'undefined' && window.COSWeb && window.COSWeb.cosChat || null; }
+  /** 'prep' (Prep on the Mac), 'ask' (Ask only), or '' (neither, the Mac not answering, or not known yet). */
+  function nextPrepMode() {
+    var chat = nextPrepChat();
+    if (TODAY.offline || !chat || !chat.prepStart) return '';
+    if (chat.known && !chat.known()) {
+      // The chat reads /api/health once per page; paint the rows again when it lands.
+      if (!NEXT_PREP.capsAsked && chat.ensureCaps) {
+        NEXT_PREP.capsAsked = true;
+        chat.ensureCaps().then(function () { if (TODAY.welcome) renderNext(TODAY.welcome); paintCalendarLater(); }, function () {});
+      }
+      return '';
+    }
+    if (chat.prepCaps && chat.prepCaps()) return 'prep';
+    return chat.askOn && chat.askOn() ? 'ask' : '';
+  }
+  function nextPrepDraft(key) { return NEXT_PREP.drafts[key] || (NEXT_PREP.drafts[key] = { text: '', files: [] }); }
+  function nextPrepMax() { var chat = nextPrepChat(), c = chat && chat.prepCaps && chat.prepCaps(); return c || { maxFiles: 10, steerChars: 4000 }; }
+  function nextPrepPanelHtml(key, mode) {
+    var row = NEXT_PREP.rows[key] || { title: '' }, dr = nextPrepDraft(key), chat = nextPrepChat();
+    var label = 'Add context for this prep (goals, people, what you want out of it)';
+    var files = mode === 'prep' && dr.files.length ? '<ul class="next-prep-files">' + dr.files.map(function (f, i) {
+      return '<li><span class="next-prep-file">' + esc(f.name || 'File') + '</span><button type="button" class="link-btn" data-next-prep-remove="' + i + '" aria-label="' + esc('Remove ' + (f.name || 'file')) + '">Remove</button></li>';
+    }).join('') + '</ul>' : '';
+    var add = mode === 'prep' ? '<label class="cx-btn quiet next-prep-add" title="Add files to this prep"><svg class="icon" aria-hidden="true"><use href="#i-clip"/></svg><span>Add files</span>' +
+      '<input type="file" class="cc-file" multiple accept="' + esc((chat && chat.prepAccept) || '') + '" data-next-prep-file aria-label="' + esc('Add files to the prep for ' + row.title) + '"></label>' : '';
+    return '<form class="next-prep" data-next-prep-form data-key="' + esc(key) + '" autocomplete="off" aria-label="' + esc('Prep for ' + row.title) + '">' +
+      '<textarea class="field next-prep-input" rows="2" maxlength="' + (mode === 'prep' ? nextPrepMax().steerChars : 2000) + '" data-next-prep-steer placeholder="' + esc(label) + '" aria-label="' + esc(label) + '"></textarea>' +
+      files +
+      '<div class="next-prep-acts">' + add + '<span class="next-prep-gap"></span>' +
+        '<button type="button" class="link-btn next-prep-cancel" data-next-prep-cancel>Cancel</button>' +
+        '<button type="submit" class="cx-btn primary next-prep-start"' + (NEXT_PREP.busy ? ' disabled' : '') + '>Start prep</button></div>' +
+      '</form>';
+  }
+  // The first row's panel, in its own slot under Prep me and Open meeting.
+  function paintNextPrepSlot(slot, key) {
+    if (!slot) return;
+    var mode = key ? nextPrepMode() : '';
+    // Shown before it is written: autoGrow measures the box, and a hidden one measures 0.
+    slot.classList.toggle('hidden', !(key && mode));
+    writeKeepingPrep(slot, key && mode ? nextPrepPanelHtml(key, mode) : '', key);
+  }
+  /** Writes `html` into `el` unless it is already there, then puts the open panel's words back (and the focus and caret). */
+  function writeKeepingPrep(el, html, key) {
+    if (el.cosPrepHtml === html) return;
+    var doc = typeof document !== 'undefined' ? document : null, active = doc && doc.activeElement;
+    var had = !!(active && el.contains && el.contains(active) && active.hasAttribute && active.hasAttribute('data-next-prep-steer'));
+    var a = had ? active.selectionStart : 0, b = had ? active.selectionEnd : 0;
+    el.innerHTML = html;
+    el.cosPrepHtml = html;
+    var box = key && el.querySelector ? el.querySelector('[data-next-prep-steer]') : null;
+    if (!box) return;
+    box.value = nextPrepDraft(key).text;
+    autoGrow(box);
+    if (had) { box.focus(); try { box.setSelectionRange(a, b); } catch (_e) {} }
+  }
+  function repaintNextPrep() {
+    if (TODAY.welcome && TODAY.welcome.nextEvent) renderNext(TODAY.welcome);
+    paintCalendarLater();
+  }
+  function toggleNextPrep(key) {
+    NEXT_PREP.open = NEXT_PREP.open === key ? '' : key;
+    repaintNextPrep();
+    if (!NEXT_PREP.open || typeof document === 'undefined') return;
+    var box = document.querySelector('[data-next-prep-form] [data-next-prep-steer]');
+    if (box) { box.focus(); if (box.scrollIntoView) box.scrollIntoView({ block: 'nearest' }); }
+  }
+  // Escape closes the panel and keeps the words (they come back when it opens again); Cancel closes it and drops them.
+  function closeNextPrep(drop) {
+    var key = NEXT_PREP.open; if (!key) return false;
+    if (drop) delete NEXT_PREP.drafts[key];
+    NEXT_PREP.open = '';
+    repaintNextPrep();
+    var opener = typeof document !== 'undefined' && typeof CSS !== 'undefined' && CSS.escape ? document.querySelector('[data-next-prep="' + CSS.escape(key) + '"]') : null;
+    if (opener && opener.focus) opener.focus();
+    return true;
+  }
+  function nextPrepInput(box) { var key = NEXT_PREP.open; if (key) nextPrepDraft(key).text = box.value; }
+  function addNextPrepFiles(list) {
+    var key = NEXT_PREP.open; if (!key) return;
+    var dr = nextPrepDraft(key), max = nextPrepMax().maxFiles, chat = nextPrepChat(), refused = [];
+    Array.prototype.slice.call(list || []).forEach(function (f) {
+      if (dr.files.length >= max) { refused.push('A prep holds ' + max + ' files. ' + (f.name || 'A file') + ' was not added.'); return; }
+      var c = chat && chat.classify ? chat.classify(f) : {};
+      if (c && c.refuse) { refused.push(c.refuse); return; }
+      if (c && c.kind === 'video') { refused.push((f.name || 'That video') + ' is a video. Prep reads documents and the text in images.'); return; }
+      dr.files.push(f);
+    });
+    if (refused.length) toast(refused.join(' '));
+    repaintNextPrep();
+  }
+  function removeNextPrepFile(i) {
+    var key = NEXT_PREP.open; if (!key) return;
+    nextPrepDraft(key).files.splice(Number(i), 1);
+    repaintNextPrep();
+  }
+  function startNextPrep() {
+    var key = NEXT_PREP.open, row = key && NEXT_PREP.rows[key], chat = nextPrepChat();
+    if (!row || NEXT_PREP.busy || !chat || !chat.prepStart) return;
+    var mode = nextPrepMode(); if (!mode) return;
+    var dr = nextPrepDraft(key);
+    var extra = { steer: dr.text.trim(), files: mode === 'prep' ? dr.files.slice() : [] };
+    NEXT_PREP.busy = true; NEXT_PREP.open = '';
+    repaintNextPrep();
+    go('messages', ['cos']);
+    // The words and files stay with the meeting until the prep (or the Ask) is on its way; a failure keeps them.
+    chat.prepStart(row.title, row.start, extra).then(function (how) {
+      if (how) delete NEXT_PREP.drafts[key];
+      else toast('Prep is not on for this Mac.');
+    }, function (err) {
+      toast((err && err.message) || 'Prep did not start. Your context is still under the meeting on Today.');
+    }).then(function () { NEXT_PREP.busy = false; });
   }
   function prepNext() {
     var n = TODAY.welcome && TODAY.welcome.nextEvent, d = n && toDate(n.time), chat = window.COSWeb && window.COSWeb.cosChat;
@@ -1878,6 +2354,53 @@
     go('messages', ['cos']);
     chat.prepFor(n.title, d ? d.toISOString() : null).catch(function (err) { toast((err && err.message) || 'Prep me did not start.'); });
   }
+  // ── Ask about this (Today round 2, Miles 11/09) ─────────
+  // "Ask COS from this page about the summary and take action coming off of that summary": one box under the model's
+  // summary. Send goes to Messages, then COS, and submits an Ask (panes/cos-chat.js askAbout) that carries the summary,
+  // when it was written and the sessions it read, as the Ask's quoted reference (data, never instructions; no transcript
+  // text, only the last message into each session). COS can then answer, or pass an instruction to a session by its
+  // title through the Ask's own relay ("Sent to <title>" on the answer card). Hidden without a model summary, without
+  // Ask on the Mac (capabilities: durable query jobs) or while the Mac does not answer.
+  function paintTodayAsk(brief) {
+    var form = $('today-ask'); if (!form) return;
+    var chat = window.COSWeb && window.COSWeb.cosChat;
+    // Ask's capability is read once per page (the chat's /api/health read); paint again when it lands.
+    if (brief && chat && chat.known && !chat.known() && chat.ensureCaps && !TODAY.askCaps) {
+      TODAY.askCaps = true;
+      chat.ensureCaps().then(function () { if (TODAY.model && state.pane === 'today') renderStory(TODAY.model); }, function () {});
+    }
+    // T1 spec 0: the box stays while a session read is pending or failed; briefShown decides whether there is a summary.
+    var on = !!(brief && !TODAY.offline && chat && chat.askAbout && chat.askOn && chat.askOn());
+    form.classList.toggle('hidden', !on);
+  }
+  // The sessions the summary read: the server's own list with the summary (7.0.10+ round 2 `sessions`: title, provider,
+  // state, when it last moved, the last message into it), else what this page holds for the same rows.
+  function todayAskContext(b) {
+    var rows = [];
+    if (Array.isArray(b.sessions) && b.sessions.length) {
+      b.sessions.forEach(function (r) { if (r && r.title) rows.push({ title: String(r.title), provider: String(r.provider || 'claude'), state: String(r.state || ''), movedAt: r.movedAt || null, lastAsk: r.lastAsk ? String(r.lastAsk) : '' }); });
+    } else {
+      (state.sessions || []).forEach(function (s) {
+        if (sxKeepWarm(s)) return;
+        var kind = sxState(s) === 'waiting' ? 'waiting' : s.running_active ? 'working' : s.running ? 'open' : '';
+        if (!kind) return;
+        var k = splitSessionId(s.provider, s.session_id || s.id);
+        rows.push({ title: sessionTitle(s), provider: k.provider, state: kind, movedAt: kind === 'open' ? (s.last_activity_at || s.state_since) : (s.state_since || s.last_activity_at), lastAsk: '' });
+      });
+    }
+    return { summary: String(b.text || ''), at: b.at || null, sessions: rows };
+  }
+  function sendTodayAsk() {
+    var input = $('today-ask-input'), text = input ? input.value.trim() : '';
+    var chat = window.COSWeb && window.COSWeb.cosChat, b = briefShown();
+    if (!text || TODAY.askBusy || !b || !chat || !chat.askAbout) return;
+    TODAY.askBusy = true;
+    var ctx = todayAskContext(b);
+    go('messages', ['cos']);
+    chat.askAbout(text, ctx).then(function () { input.value = ''; autoGrow(input); }, function (err) {
+      toast((err && err.message) || 'Ask did not send. Your words are still in the box on Today.');
+    }).then(function () { TODAY.askBusy = false; });
+  }
   // From today's meetings: Work's suggestions from meetings held today. They stay here until
   // midnight, then join Sort in Work; Review opens them in Work's Sort.
   function localDay(d) { return d.getFullYear() + '-' + String(d.getMonth() + 1).padStart(2, '0') + '-' + String(d.getDate()).padStart(2, '0'); }
@@ -2322,20 +2845,84 @@
       renderSessionGroups();
     });
   }
-  // The meaning finder the Ask sheet offers ("Find a session about this").
-  function findByMeaning(q) {
-    return api('/api/agent-sessions/find', { method: 'POST', body: { query: q } }).then(function (d) {
-      if (d && d.available === false) return emptyBox('Meaning search is off', d.message || 'Turn on a decision provider in Settings.');
-      var results = (d && d.results) || [];
-      if (!results.length) return emptyBox('Nothing matched that meaning', 'Try different words, or search by Words.');
-      return '<h2 class="group-title"><span>About “' + esc(q) + '”</span><span>' + results.length + '</span></h2><div class="list">' + results.map(function (r) {
-        var s = r.session || r;
-        if (!s.provider && r.provider) s.provider = r.provider;
-        if (!s.session_id) s.session_id = r.sessionId || r.id;
-        return sessionRow(s, r.reason || s.project);
-      }).join('') + '</div>';
-    }).catch(function (err) { return emptyBox('Meaning search did not run', err.message); });
+  // ── Meaning search (W1, 7.0.x): "Find a session about this", as COS Control's command panel does it
+  // (SetupAssistant.swift 1476-1900). POST /api/agent-sessions/find takes exactly { query, consentedProvider, stage }
+  // (routes/session-find.ts:45-51). Nothing is sent before the person says yes for the decision model that decides search
+  // now. A yes for Jev is no yes for SubQ. The yes is kept in this browser only (the Mac keeps its own).
+  var MEANING_STORE = 'cos.web.meaningConsent';
+  var MEANING_NAME = { jev: 'Jev', subq: 'SubQ' };
+  var MEANING_TITLE = { consent_required: 'Meaning search needs your okay', provider_changed: 'The decision model changed',
+    decision_not_configured: 'Meaning search needs a key', jev_not_configured: 'Meaning search needs a key', sessions_off: 'Sessions are off',
+    find_off: 'Meaning search is off', cap_reached: 'Meaning search is used up for today', breaker_open: 'Meaning search is paused',
+    query_too_short: 'Type a few more words', failed: 'Meaning search did not answer' };
+  var MEANING_STRENGTH = { strong: 'Strong match', likely: 'Likely match', possible: 'Possible match' };
+  var MEANING = { view: null, at: 0 };
+  function meaningChoices() {
+    try { var v = JSON.parse(localStorage.getItem(MEANING_STORE) || '{}'); return v && typeof v === 'object' && !Array.isArray(v) ? v : {}; } catch (e) { return {}; }
+  }
+  function meaningChoose(provider, choice) {
+    if (!MEANING_NAME[provider]) return;
+    var c = meaningChoices();
+    if (choice === 'on' || choice === 'never') c[provider] = choice; else delete c[provider];
+    try { localStorage.setItem(MEANING_STORE, JSON.stringify(c)); } catch (e) { /* private mode: the question comes back next time */ }
+  }
+  // GET /api/decision-provider: the model that decides search now, whether its key is saved, and whether this server can
+  // find sessions by meaning at all (capabilities.sessionFind). Read again after a minute, or after a refusal.
+  function meaningSettings(force) {
+    if (!force && MEANING.view && Date.now() - MEANING.at < 60000) return Promise.resolve(MEANING.view);
+    return api('/api/decision-provider').then(function (d) {
+      var p = d && d.effective ? d.effective.search : null;
+      p = MEANING_NAME[p] ? p : null;
+      MEANING.view = { provider: p, keyed: !!(p && d.configured && d.configured[p] === true), capable: !!(d && d.capabilities && d.capabilities.sessionFind === true) };
+      MEANING.at = Date.now();
+      return MEANING.view;
+    });
+  }
+  function meaningConsentText(provider) {
+    return 'Each search sends the words you type here, plus the title and first 150 characters of the first prompt from up to 508 recent sessions, to ' +
+      MEANING_NAME[provider] + '. Emails, links, home-folder paths and key-shaped text are removed first. Names and other details are not.' +
+      (provider === 'subq' ? ' SubQ keeps what it is sent.' : '');
+  }
+  function meaningConsentHtml(provider) {
+    // Lead decision (11/09): the choice is kept in this browser only, and the card says so.
+    return '<div class="list meaning-consent"><p class="empty"><strong>Find sessions by meaning with ' + esc(MEANING_NAME[provider]) + '?</strong>' + esc(meaningConsentText(provider)) +
+      ' ' + esc('Your choice applies to this browser only.') + '</p>' +
+      '<div class="row-actions"><button type="button" class="btn small primary" data-action="meaning-consent" data-provider="' + esc(provider) + '" data-choice="on">Turn on</button>' +
+      '<button type="button" class="btn small" data-action="meaning-consent" data-provider="' + esc(provider) + '" data-choice="never">Never</button></div></div>';
+  }
+  function meaningRows(q, d) {
+    var rows = (d && Array.isArray(d.rows)) ? d.rows : [];
+    return '<h2 class="group-title"><span>About \u201c' + esc(q) + '\u201d</span><span>' + rows.length + '</span></h2><div class="list">' + rows.map(function (r) {
+      var s = { provider: r.provider, session_id: r.session_id, display_label: r.display_label, custom_title: r.custom_title, first_prompt: r.first_prompt, project: r.project,
+        modified: r.modified, last_activity_at: r.last_activity_at, alive: r.alive, pinned: r.pinned, slug: r.slug };
+      return sessionRow(s, MEANING_STRENGTH[r.strength] || MEANING_STRENGTH.possible);
+    }).join('') + '</div>';
   }
+  function meaningRun(q, provider, stage) {
+    return api('/api/agent-sessions/find', { method: 'POST', body: { query: q, consentedProvider: provider, stage: stage }, timeoutMs: 90000 }).then(function (d) {
+      if (d && d.available === false) {
+        if (d.reason === 'provider_changed') MEANING.view = null;
+        return emptyBox(MEANING_TITLE[d.reason] || 'Meaning search did not run', d.message || '');
+      }
+      var rows = (d && Array.isArray(d.rows)) ? d.rows : [];
+      // The first stage reads the newest 254 sessions; with nothing there, look once further back (Control's "Looking further back").
+      if (!rows.length && stage === 'first') return meaningRun(q, provider, 'full');
+      if (!rows.length) return emptyBox('Nothing close by meaning', 'Checked ' + (Number(d && d.asked) || 0) + ' sessions. Try other words, or search by words.');
+      return meaningRows(q, d);
+    });
+  }
+  function findByMeaning(q) {
+    return meaningSettings(false).then(function (m) {
+      if (!m.capable) return emptyBox('Meaning search is not on here', 'This COS server cannot find sessions by meaning. Search by words instead.');
+      if (!m.provider || !m.keyed) return emptyBox('Meaning search needs a decision model', 'Choose Jev or SubQ in Settings, then save its key in COS Control on your Mac: search Settings there for Jev key or SubQ key.');
+      var choice = meaningChoices()[m.provider];
+      if (choice === 'never') return emptyBox('Meaning search is off in this browser', 'You chose Never for ' + MEANING_NAME[m.provider] + '.') +
+        '<div class="row-actions"><button type="button" class="btn small" data-action="meaning-consent" data-provider="' + esc(m.provider) + '" data-choice="ask">Ask me again</button></div>';
+      if (choice !== 'on') return meaningConsentHtml(m.provider);
+      return meaningRun(q, m.provider, 'first');
+    }).catch(function (err) { return emptyBox('Meaning search did not run', (err && err.message) || ''); });
+  }
+  // ── end meaning search
 
   // The hooks banner (ActivityWindow.swift 2867-2905). Installing hooks writes to the Mac's Claude
   // settings, which stays a Mac action, so the web names where to do it.
@@ -2390,6 +2977,7 @@
       if (act === 'retry' && rd) { rd.refusal = null; renderVerdict(rd); return sendSessionTurn(!!rd.retryFork); }
       if (act === 'caution-send' && rd) { rd.cautionAck = true; rd.cautionAsk = false; renderVerdict(rd); return sendSessionTurn(false); }
       if (act === 'caution-cancel' && rd) { rd.cautionAsk = false; renderVerdict(rd); return; }
+      if (act === 'turnend' && rd) return sendTurnEndChoice(rd, Number(t.getAttribute('data-i')));
       if (act === 'usage-clear') { SX.uTool = 'All tools'; SX.uModel = 'All models'; SX.uToolBefore = null; uSliceChanged(); return paintUsage(); }
       if (act === 'usage-range') return uOpenRange(t, true);
     });
@@ -2730,12 +3318,16 @@
         '<div class="sx-reader-head"><div class="sx-head-line">' + sxBadge(provider) + '<h2 class="sx-reader-title">' + esc(title) + '</h2>' + sxFullButton() + '</div>' +
           '<p class="sx-subtitle">' + esc(sxSubtitle(d, provider, turns, r.more)) + '</p></div>' +
         '<div class="sx-activity" id="session-live" aria-live="polite"></div>' +
+        '<div class="sx-mac-q" id="session-mac-q" role="status" hidden></div>' +
         (trunc ? '<p class="sx-note">' + esc(trunc) + '</p>' : '') +
         '<div class="turns sx-turns" id="session-turns">' + renderTurns(turns, d) + '</div>' +
         '<div class="sx-foot"><button type="button" class="cx-btn quiet" data-sx="copy-session" title="A kickstart brief for another agent, built from the turns COS serves. Not a Claude Code resume: it does not reopen this session.">Copy session</button>' +
           '<span class="sx-foot-note">Kickstart brief for another agent. Not a Claude Code resume.</span></div>' +
         '<p class="sx-copy-note hidden" id="session-copy-note" role="status"></p>' +
         '<div class="sx-chat">' +
+          // DESIGN.md step 4 #3: this session's question cards (held and answerable, or at the Mac with its words), above
+          // the verdict and the Send box, the same component Today's sheet mounts, so the full hold lights up here.
+          '<div class="sx-questions" id="session-questions"></div>' +
           '<div id="session-verdict"></div>' +
           '<form class="composer att-composer" id="session-form" data-provider="' + esc(provider) + '" data-id="' + esc(id) + '">' +
             '<div class="cc-chips att-files hidden" id="session-files"></div>' +
@@ -2749,9 +3341,13 @@
       readerImagesMount($('session-turns'), r);
       sxNoteList(r, d);
       setLive({});
+      if (typeof readerMacPaint === 'function') readerMacPaint(r, sxState(d) === 'waiting');
+      var qk = window.COSWeb.sessionQuestions, qhost = $('session-questions');
+      if (qk && qk.mount && qhost) r.qMount = qk.mount(qhost, id, function () { if (state.reading === r && typeof readerMacPaint === 'function') readerMacPaint(r, r.waitingNow); });
       paintReaderFiles();
+      paintWebKeyOffer(r);
       // The Mac's answer about files may not be in yet: ask once, then draw the clip.
-      var kitR = readerKit(); if (kitR && !kitR.turnFiles()) kitR.ensureCaps().then(paintReaderFiles, function () {});
+      var kitR = readerKit(); if (kitR && !kitR.turnFiles()) kitR.ensureCaps().then(function () { paintReaderFiles(); paintWebKeyOffer(r); }, function () {});
       renderHeld(state.reading);
       loadQueue(provider, id);
       sxProbeAttach(r);
@@ -3023,6 +3619,7 @@
         var waiting = !working && (e.state === 'waiting' || e.state === 'needs_input' || e.agent_state === 'waiting');
         var el = $('session-state');
         if (el) el.textContent = working ? 'Working now' : waiting ? 'Waiting for you' : 'Open';
+        if (typeof readerMacPaint === 'function') readerMacPaint(r, waiting);
         if (wasWorking && !working) { refreshTurns(provider, id); replyEnded(r); }
         wasWorking = working;
         // Gone to waiting: its question may be parked for this page now (6.99.27).
@@ -3200,7 +3797,8 @@
   // The box is cleared only of the very words that were sent; anything typed since stays.
   function clearBoxOf(text) {
     var input = $('session-input');
-    if (input && input.value.trim() === String(text).trim()) { input.value = ''; autoGrow(input); }
+    // 7.0.18: an answer to a turn-end ask was sent with the attribution in front; the box holds his words without it.
+    if (input && (input.value.trim() === String(text).trim() || input.value.trim() === turnEndBare(text))) { input.value = ''; autoGrow(input); }
     if (state.reading && state.reading.draft && state.reading.draft.text === text) state.reading.draft = null;
   }
   // Words go back in the box only if the box is empty; otherwise the status line keeps them. `files` says what became
@@ -3347,6 +3945,9 @@
     // during the first attach could park the same text in the queue while the first lands.
     if (r.sending) return;
     if (r.refusal || r.cautionAsk) { r.refusal = null; r.cautionAsk = false; renderVerdict(r); }
+    // 7.0.18: while a turn-end ask is open, the box's words are his own answer ('Other' in the contract): sent with the
+    // same attribution as a choice. A fork goes to a copy and is not an answer, so it is sent as written.
+    if (!fork && r.turnEnd && turnEndOf(readerRowOf(r))) text = turnEndPrompt(text);
     r.sending = true;
     var btns = form.querySelectorAll('button'); btns.forEach(function (b) { b.disabled = true; });
     var done = function () { r.sending = false; btns.forEach(function (b) { b.disabled = false; }); paintReaderFiles(); };
@@ -3449,6 +4050,205 @@
     });
   }
 
+  // ── BEGIN web-key handoff (6.99.31, Phase 3, review W2) ──
+  // With the Mac's webKeySigner capability (only with COS_WEB_KEY_AUTHORITY on) and an enrolled phone key, the session
+  // composer offers "Approve on this phone". That is a TOP-LEVEL navigation to the signer page on port 3144 carrying a
+  // one-use handoff id in the fragment. The words stay on the Mac until the signer claims them; they are never in a URL.
+  // Without the capability nothing here runs: no request, no button, the composer exactly as before.
+  var WEB_KEY = { status: null, statusAt: 0, loading: null, generation: 0, views: [], refreshing: null, navigation: null };
+  var WEB_KEY_COPY = {
+    no_phone_key: 'No phone has a key yet. Set one up on the approval page first.',
+    attachments_not_signable: 'Files cannot be approved on the phone yet. Remove them, or use Send.',
+    words_too_long: 'That message is too long to approve on the phone. Shorten it, or use Send.',
+    handoff_cap_reached: 'Too many approvals are waiting. Finish one, or wait two minutes.',
+    origin_unavailable: 'Your Mac does not know its Tailscale name yet, so the approval page cannot open.',
+    web_key_authority_off: 'Phone approval is turned off on the Mac.'
+  };
+  function webKeyCapable() { var k = readerKit(); return !!(k && typeof k.webKeySigner === 'function' && k.webKeySigner() === 1); }
+  function webKeyStatus() {
+    var age = Date.now() - WEB_KEY.statusAt;
+    if (WEB_KEY.status && age >= 0 && age < 30000) return Promise.resolve(WEB_KEY.status);
+    if (!WEB_KEY.loading) {
+      var generation = WEB_KEY.generation;
+      WEB_KEY.loading = apiAnswer('/api/web-key/status', { timeoutMs: 15000 }).then(function (a) {
+        if (generation !== WEB_KEY.generation) return null;
+        WEB_KEY.loading = null;
+        WEB_KEY.status = a.status === 200 && a.body && a.body.ok === true && Number.isSafeInteger(a.body.activeKeys) && a.body.activeKeys >= 0 ? { activeKeys: a.body.activeKeys } : null;
+        WEB_KEY.statusAt = Date.now();
+        return WEB_KEY.status;
+      }, function () { if (generation === WEB_KEY.generation) { WEB_KEY.loading = null; WEB_KEY.status = null; } return null; });
+    }
+    return WEB_KEY.loading;
+  }
+  function webKeySetupUrl() {
+    var host = location.hostname;
+    // The passkey belongs to this Mac's full MagicDNS host, never an IP, local alias or public suffix.
+    if (typeof host !== 'string' || host.length > 253 || !/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.){2,}ts\.net$/.test(host)) return null;
+    return 'https://' + host + ':3144/';
+  }
+  function phoneApprovalView(r, opts) {
+    opts = opts || {};
+    var prefix = opts.prefix || 'session';
+    return { prefix: prefix, form: $(prefix + '-form'), send: $(prefix + '-send'), input: $(prefix + '-input'),
+      live: opts.live || function () { return state.reading === r; },
+      status: opts.status || sessionStatus, files: opts.files || function () { return readerFilesState(readerFilesOn() ? readerBox(r) : null); } };
+  }
+  function phoneApprovalViewLive(view) {
+    return view.live() && view.form && view.send && view.form === $(view.prefix + '-form') && view.send === $(view.prefix + '-send');
+  }
+  function clearPhoneOffer(r, view) {
+    var offer = view.form.querySelector('[data-phone-offer]'), packets = view.form.querySelector('[data-phone-packets]');
+    if (offer && offer.parentNode) offer.parentNode.removeChild(offer);
+    if (packets && packets.parentNode) packets.parentNode.removeChild(packets);
+    r.phonePackets = {}; r.phonePacketSha256 = ''; r.phoneDraft = null;
+  }
+  function refreshWebKeyOffers() {
+    if (!webKeyCapable() || WEB_KEY.refreshing) return;
+    WEB_KEY.status = null; WEB_KEY.statusAt = 0; WEB_KEY.loading = null; WEB_KEY.generation += 1;
+    WEB_KEY.views = WEB_KEY.views.filter(function (entry) { return phoneApprovalViewLive(entry.view); });
+    if (!WEB_KEY.views.length) return;
+    var views = WEB_KEY.views.slice();
+    views.forEach(function (entry) { clearPhoneOffer(entry.r, entry.view); });
+    var fresh = webKeyStatus(); WEB_KEY.refreshing = fresh;
+    fresh.then(function () { if (WEB_KEY.refreshing === fresh) WEB_KEY.refreshing = null; });
+    views.forEach(function (entry) { paintWebKeyOffer(entry.r, entry.opts); });
+  }
+  // Safari can restore this exact DOM after enrollment or revocation on the separate signer origin.
+  // Refetch once per persisted return; closed/replaced readers are pruned and no timer is installed.
+  // (Guarded: it runs at load, and a host without window events, the web-control vm harnesses, must still load.)
+  if (window.addEventListener) window.addEventListener('pageshow', function (e) {
+    if (!e || !e.persisted) return;
+    var nav = WEB_KEY.navigation; WEB_KEY.navigation = null;
+    if (nav && nav.token.completed && nav.r.phoneNavigation === nav.token) {
+      if (nav.r.sending === nav.token) nav.r.sending = false;
+      nav.r.phoneNavigation = null;
+    }
+    refreshWebKeyOffers();
+  });
+  function phonePacketDetails(p, sha) {
+    return 'Requested ' + p.action + ': ' + p.artifact + ' ' + p.version + '\nChannel: ' + p.channel + '\nDigest: ' + p.digest +
+      '\nReceiver: ' + p.provider + ' / ' + p.sessionId + '\nExpires: ' + new Date(p.exp).toISOString() + '\nPacket: ' + sha +
+      '\nThis request approves nothing until you review it and confirm on the phone.';
+  }
+  function paintWebKeyOffer(r, opts) {
+    if (!webKeyCapable()) return;
+    var view = phoneApprovalView(r, opts);
+    if (!phoneApprovalViewLive(view)) return;
+    WEB_KEY.views = WEB_KEY.views.filter(function (entry) { return phoneApprovalViewLive(entry.view) && entry.view.form !== view.form; });
+    WEB_KEY.views.push({ r: r, opts: opts, view: view });
+    var generation = WEB_KEY.generation;
+    webKeyStatus().then(function (st) {
+      if (generation !== WEB_KEY.generation || !phoneApprovalViewLive(view)) return;
+      if (!st) { clearPhoneOffer(r, view); return; }
+      var offer = view.form.querySelector('[data-phone-offer]');
+      if (offer && !!view.form.querySelector('[data-phone-setup]') === (st.activeKeys === 0)) return;
+      if (offer || st.activeKeys === 0) clearPhoneOffer(r, view);
+      if (st.activeKeys === 0) {
+        var setupUrl = webKeySetupUrl(); if (!setupUrl) return;
+        var setup = document.createElement('a');
+        setup.className = 'btn small'; setup.setAttribute('data-phone-offer', '1');
+        setup.setAttribute('data-phone-setup', '1'); setup.setAttribute('href', setupUrl); setup.setAttribute('target', '_top');
+        setup.textContent = 'Set up phone approvals';
+        view.send.parentNode.insertBefore(setup, view.send);
+        return;
+      }
+      var b = document.createElement('button');
+      b.type = 'button'; b.className = 'btn small'; b.setAttribute('data-phone-offer', '1');
+      b.setAttribute(view.prefix === 'ta' ? 'data-ta' : 'data-action', view.prefix === 'ta' ? 'approve-phone' : 'approve-on-phone');
+      b.title = 'Review an exact request on the approval page, then confirm with your phone passkey';
+      b.textContent = 'Approve on this phone';
+      view.send.parentNode.insertBefore(b, view.send);
+      return apiAnswer('/api/web-key/packets?provider=' + encodeURIComponent(r.provider) + '&sessionId=' + encodeURIComponent(r.id)).then(function (a) {
+        if (generation !== WEB_KEY.generation || !phoneApprovalViewLive(view) || view.form.querySelector('[data-phone-offer]') !== b) return;
+        var rows = a.status === 200 && a.body && a.body.ok === true && Array.isArray(a.body.packets) ? a.body.packets : [];
+        rows = rows.filter(function (row) { var p = row && row.packet; return p && p.provider === r.provider && p.sessionId === r.id &&
+          (p.action === 'install' || p.action === 'publish') && Number.isSafeInteger(p.exp) && p.exp >= Date.now() && /^[0-9a-f]{64}$/.test(row.packetSha256 || ''); });
+        r.phonePackets = {}; rows.forEach(function (row) { r.phonePackets[row.packetSha256] = row.packet; });
+        if (!rows.length) return;
+        var box = document.createElement('div'), label = document.createElement('label'), select = document.createElement('select'), disclosure = document.createElement('details'), summary = document.createElement('summary'), detail = document.createElement('pre');
+        box.className = 'phone-approval-packet'; box.setAttribute('data-phone-packets', '1'); select.id = view.prefix + '-phone-packet'; detail.id = view.prefix + '-phone-details';
+        label.textContent = 'What to approve'; label.setAttribute('for', select.id);
+        var message = document.createElement('option'); message.value = ''; message.textContent = 'Message only — no release approval'; select.appendChild(message);
+        rows.forEach(function (row) { var option = document.createElement('option'), p = row.packet; option.value = row.packetSha256;
+          option.textContent = p.action + ' ' + p.artifact + ' ' + p.version + ' / ' + p.channel; select.appendChild(option); });
+        select.value = r.phonePacketSha256 || '';
+        var update = function () { r.phonePacketSha256 = select.value; var p = r.phonePackets[select.value];
+          detail.textContent = p ? phonePacketDetails(p, select.value) : 'Message only. This authorizes no install, publish or push.';
+          if (p && view.input && !view.input.value.trim()) view.input.value = 'Approve ' + p.action + ' ' + p.artifact + ' ' + p.version + ' on ' + p.channel + '.';
+        };
+        select.addEventListener('change', update); update();
+        summary.textContent = 'Review release request'; disclosure.appendChild(summary); disclosure.appendChild(detail);
+        box.appendChild(label); box.appendChild(select); box.appendChild(disclosure); view.form.insertBefore(box, view.form.firstChild);
+      }, function () { /* No packet is selected implicitly when this read fails. */ });
+    });
+  }
+  // Only the signer on this same host, port 3144, path /, with nothing but the handoff id in the fragment.
+  function webKeySignerUrlOk(u) {
+    try {
+      var x = new URL(u);
+      return x.protocol === 'https:' && x.hostname === location.hostname && x.port === '3144' && x.pathname === '/' && !x.search && /^#h=[A-Za-z0-9_-]{16,64}$/.test(x.hash);
+    } catch (_e) { return false; }
+  }
+  function approveOnPhone(opts) {
+    opts = opts || {};
+    var r = opts.r || state.reading; if (!r || r.sending) return Promise.resolve('busy');
+    var view = phoneApprovalView(r, opts), say = view.status;
+    if (!view.live()) return Promise.resolve('stale');
+    var input = view.input, text = input ? input.value.trim() : '';
+    if (!text) { say('Write a message first.', 'error'); return Promise.resolve('empty'); }
+    if (view.files() !== 'none') { say(WEB_KEY_COPY.attachments_not_signable, 'error'); return Promise.resolve('files'); }
+    var provider = r.provider, id = r.id, packetSha = r.phonePacketSha256 || '';
+    var packet = packetSha && r.phonePackets && r.phonePackets[packetSha];
+    if (packetSha && (!packet || packet.exp < Date.now() || packet.provider !== provider || packet.sessionId !== id)) { say('That release request expired or changed. Reopen this session to load its current request.', 'error'); return Promise.resolve('packet'); }
+    var draft = r.phoneDraft;
+    if (!draft || draft.text !== text || draft.packetSha256 !== packetSha) draft = r.phoneDraft = { text: text, key: newTurnKey(), packetSha256: packetSha };
+    var bound = bindingFor(provider, id);
+    // Other senders assign boolean true. This unique truthy owner lets late callbacks and a BFCache return
+    // release only this phone operation, never a newer ordinary send or another phone operation.
+    var operation = { completed: false };
+    r.phoneNavigation = operation; r.sending = operation;
+    var ownsSending = function () { return r.sending === operation && r.phoneNavigation === operation; };
+    var releaseSending = function () { if (ownsSending()) { r.sending = false; r.phoneNavigation = null; } };
+    say('Opening the approval page.');
+    var attach = bound ? Promise.resolve(bound) : apiAnswer(sessionPath(provider, id, '/attach'), { method: 'POST', body: { cosSessionId: cosSessionId() }, timeoutMs: 20000 }).then(function (a) {
+      if (a.status >= 200 && a.status < 300 && a.body.attached === true && a.body.bindingId && typeof a.body.epoch === 'number') {
+        var b = { bindingId: a.body.bindingId, epoch: a.body.epoch, at: Date.now() };
+        rememberBinding(provider, id, b);
+        return b;
+      }
+      return null;
+    });
+    return attach.then(function (b) {
+      if (!ownsSending() || !phoneApprovalViewLive(view)) return 'stale';
+      if (!b) { say('COS cannot write to this session right now.', 'error'); return 'refused'; }
+      var request = { bindingId: b.bindingId, epoch: b.epoch, targetKey: targetKey(provider, id), clientTurnId: draft.key, prompt: draft.text };
+      if (packetSha) request.packetSha256 = packetSha;
+      return apiAnswer('/api/web-key/handoff', { method: 'POST', timeoutMs: 15000, body: request }).then(function (h) {
+        if (!ownsSending() || !phoneApprovalViewLive(view)) return 'stale';
+        var body = h.body || {};
+        if (h.status === 201 && body.ok === true && webKeySignerUrlOk(body.signerUrl)) {
+          say('Opening the approval page.');
+          location.assign(body.signerUrl);
+          operation.completed = true;
+          WEB_KEY.navigation = { r: r, token: operation };
+          return 'opened';
+        }
+        if (h.status === 201) { say('Open Control from your Mac’s Tailscale name to approve on this phone.', 'error'); return 'refused'; }
+        if (/^(binding_changed|unknown_binding)$/.test(body.error || '') && !opts.reattached) {
+          rememberBinding(provider, id, null);
+          releaseSending();
+          return approveOnPhone(Object.assign({}, opts, { r: r, reattached: true }));
+        }
+        say(WEB_KEY_COPY[body.error] || 'The Mac did not open an approval for that message.', 'error');
+        return 'refused';
+      });
+    }).then(function (how) { if (how !== 'opened') releaseSending(); return how; }, function () {
+      if (ownsSending()) { releaseSending(); say('Could not reach your Mac.', 'error'); }
+      return 'failed';
+    });
+  }
+  // ── END web-key handoff ──
+
   var HELD_MAX_MS = 5 * 60000, HELD_RETRY_MS = 8000;
   function holdUntilReplyEnds(r, draft) {
     if (!r.held.some(function (h) { return h.key === draft.key; })) {
@@ -5723,11 +6523,12 @@
 
   // ── events (one delegated listener) ─────────────────────
   document.addEventListener('click', function (e) {
-    var t = e.target.closest('[data-today-next],[data-today-needs],[data-today],[data-goto],[data-pane],[data-session],[data-meeting],[data-speakers],[data-action],[data-open-ask],[data-theme-choice],#topbar-back,#section-btn,#sign-out,#copy-link,#ask-close,#auth-switch,#auth-token-show,#device-code-btn');
+    var t = e.target.closest('[data-today-next],[data-next-prep],[data-next-prep-cancel],[data-next-prep-remove],[data-today-needs],[data-today],[data-goto],[data-pane],[data-session],[data-meeting],[data-speakers],[data-action],[data-open-ask],[data-theme-choice],#topbar-back,#section-btn,#sign-out,#copy-link,#ask-close,#auth-switch,#auth-token-show,#auth-retry,#device-code-btn');
     if (!t) { if (e.target.id === 'ask-sheet') closeAsk(); if (e.target.id === 'section-menu') closeMenu(); return; }
     var inSheet = !!t.closest('#ask-sheet');
     if (t.id === 'topbar-back') return goBack();
     if (t.id === 'section-btn') return openMenu();
+    if (t.id === 'auth-retry') { t.disabled = true; t.textContent = 'Checking'; bootStatus().then(function () { t.disabled = false; t.textContent = 'Try again'; }); return; }
     if (t.id === 'auth-switch') {
       var toToken = $('auth-token-block').classList.contains('hidden');
       $('auth-token-block').classList.toggle('hidden', !toToken);
@@ -5756,6 +6557,9 @@
     if (t.hasAttribute('data-open-ask')) return openAsk();
     if (t.hasAttribute('data-today')) return t.getAttribute('data-today') === 'pet' ? petTap(t) : openTodayAction(t);
     if (t.hasAttribute('data-today-next')) return prepNext();
+    if (t.hasAttribute('data-next-prep')) return toggleNextPrep(t.getAttribute('data-next-prep'));
+    if (t.hasAttribute('data-next-prep-cancel')) return closeNextPrep(true);
+    if (t.hasAttribute('data-next-prep-remove')) return removeNextPrepFile(t.getAttribute('data-next-prep-remove'));
     if (t.hasAttribute('data-today-needs')) {
       var which = t.getAttribute('data-today-needs');
       if (which === 'all') TODAY.showAllNeeds = true;
@@ -5775,6 +6579,9 @@
     if (t.hasAttribute('data-speakers')) return go('speakers', [t.getAttribute('data-speakers')]);
     var action = t.getAttribute('data-action');
     if (action === 'fork-session') return sendSessionTurn(true);
+    if (action === 'conn-retry') return connRetry(true);
+    if (action === 'conn-hide-signin') { CONN.hideFor = signinEndsAt(); return connPaint(); }
+    if (action === 'approve-on-phone') return approveOnPhone();
     if (action === 'send-anyway') { var rev = state.reading && state.reading.sendAnyway; if (state.reading) state.reading.sendAnyway = null; return sendSessionTurn(false, { acknowledgedRevision: rev }); }
     if (action === 'stop-session') return stopSession();
     if (action === 'drop-after') return dropHeld();
@@ -5800,6 +6607,7 @@
     if (action === 'ask-cos' && q) return askSheetSend(q);
     if (action === 'ask-file' && q) return fileToInbox(q);
     if (action === 'ask-meaning' && q) { $('ask-hits').innerHTML = skeletonRows(3); findByMeaning(q).then(function (html) { var el = $('ask-hits'); if (el) el.innerHTML = html; }); return; }
+    if (action === 'meaning-consent') { meaningChoose(t.getAttribute('data-provider'), t.getAttribute('data-choice')); if (q) { $('ask-hits').innerHTML = skeletonRows(3); findByMeaning(q).then(function (html) { var el = $('ask-hits'); if (el) el.innerHTML = html; }); } return; }
     if (action === 'ask-work' && q) {
       closeAsk(); go('work');
       // The Work pane (panes/work.js) owns its search box; hand it the query.
@@ -5822,6 +6630,8 @@
           showAuth(err && err.status ? err.message : UNREACHABLE_COPY);
         });
     } else if (f.id === 'session-form') sendSessionTurn(false);
+    else if (f.id === 'today-ask') sendTodayAsk();
+    else if (f.hasAttribute && f.hasAttribute('data-next-prep-form')) startNextPrep();
     else if (f.id === 'sessions-search-form') { $('sessions-q').blur(); searchSessions(); }
     else if (f.id === 'ask-form') {
       var hits = $('ask-hits'); if (hits && $('ask-q').value.trim().length >= 2) renderAsk();
@@ -5832,6 +6642,7 @@
   document.addEventListener('change', function (e) {
     if (e.target && e.target.hasAttribute && e.target.hasAttribute('data-ask-file')) { addAskFiles(e.target.files); e.target.value = ''; }
     if (e.target && e.target.hasAttribute && e.target.hasAttribute('data-sx-file')) { addReaderFiles(e.target.files); e.target.value = ''; }
+    if (e.target && e.target.hasAttribute && e.target.hasAttribute('data-next-prep-file')) { addNextPrepFiles(e.target.files); e.target.value = ''; }
   });
   // The Sessions reader's box: a pasted screenshot, and files dropped on it.
   document.addEventListener('paste', function (e) {
@@ -5861,6 +6672,7 @@
   document.addEventListener('input', function (e) {
     if (e.target.tagName === 'TEXTAREA') autoGrow(e.target);
     if (e.target.id === 'ask-q') renderAsk();
+    if (e.target.hasAttribute && e.target.hasAttribute('data-next-prep-steer')) nextPrepInput(e.target);
     if (e.target.id === 'sessions-q' && !e.target.value.trim()) renderSessionGroups(state.sessions);
   });
   document.addEventListener('keydown', function (e) {
@@ -5868,6 +6680,7 @@
     if ((e.metaKey || e.ctrlKey) && e.key.toLowerCase() === 'k') { e.preventDefault(); openAsk(); return; }
     if (e.key === 'Escape' && !$('ask-sheet').classList.contains('hidden')) { closeAsk(); return; }
     if (e.key === 'Escape' && !$('section-menu').classList.contains('hidden')) { closeMenu(); $('section-btn').focus(); return; }
+    if (e.key === 'Escape' && NEXT_PREP.open && closeNextPrep(false)) { e.preventDefault(); return; }
     if (returnSends(e)) { e.preventDefault(); var form = e.target.closest('form'); if (form) form.requestSubmit(); }
   });
   document.querySelectorAll('[data-mode]').forEach(function (b) {
@@ -6141,6 +6954,7 @@
     questionsChanged: function () { if (TODAY.at) { paintNeeds(); if (state.pane === 'today' && !TODAY.offline) renderPet(state.sessions || []); } }
   };
   window.COSWeb.sessionKit = {
+    phoneOffer: paintWebKeyOffer, approvePhone: approveOnPhone,
     // A session object for continueSession, with the overlay's own view (READER_VIEW's methods).
     session: function (provider, id, view) {
       return { provider: provider, id: id, draft: null, held: [], view: view, verdict: null, refusal: null, cautionAck: false, feed: newFeed(), live: null, queued: 0 };
@@ -6174,7 +6988,7 @@
   // through COSWeb.onKeyboard; COSWeb.keyboardUp says whether it is up now. Which composer the keyboard is for is the
   // pane's to mark (panes/cos-chat.js sets html.kb-chat and .cc-kb).
   var KB_UP_PX = 120, KB_AFTER_MS = 300;
-  var LR = { up: false, frame: 0, after: 0, cycle: 0, focusN: 0, device: false, field: null, hooks: [], box: '' };
+  var LR = { up: false, frame: 0, after: 0, cycle: 0, focusN: 0, device: false, field: null, hooks: [], box: '', zoomed: false, touchAt: 0 };
   function lrPane() { var r = parseRoute(); return String(r.pane + (r.args[0] === 'cos' ? '.cos' : '')).slice(0, 24); }
   function lrKind(a) {
     var tag = String((a && a.tagName) || '').toLowerCase();
@@ -6232,9 +7046,21 @@
     layoutCrumb('kb-after', { pane: lrPane(), n: LR.cycle, gap: gap, sy: s.sy, smax: s.smax, over: s.sy > s.smax, gapNow: lrGap(viewportFit()), syNow: s2.sy,
       dvh: lrProbe('height:100dvh', 'h'), svh: lrProbe('height:100svh', 'h'), lvh: lrProbe('height:100lvh', 'h'), lh: v.layoutH });
   }
+  // 7.0.17: when the page's zoom crosses 1.01 either way, one breadcrumb (inside layoutCrumb's caps): the scale, the
+  // pane, the focused element's tag (never its text or value) and how long since the last touch. A double-tap zoom
+  // reads as a few hundred ms after a touch with no field focused; a focus zoom as an INPUT or TEXTAREA. Read only:
+  // nothing here changes the zoom.
+  function zoomCrumb(v) {
+    var zoomed = !!(v && v.zoomed);
+    if (zoomed === LR.zoomed) return false;
+    LR.zoomed = zoomed;
+    var a = document.activeElement, tag = a && a !== document.body && a.tagName ? String(a.tagName).toLowerCase().slice(0, 24) : 'none';
+    return layoutCrumb(zoomed ? 'zoom-in' : 'zoom-out', { pane: lrPane(), scale: v.scale, tag: tag, sinceTouch: LR.touchAt ? Date.now() - LR.touchAt : -1 });
+  }
   function lrApply() {
     LR.frame = 0;
     var v = viewportFit(), de = document.documentElement;
+    zoomCrumb(v);
     // Written only when they change: a pinch or pan fires this every frame, and each write restyles the page.
     var box = v.top + '|' + v.height + '|' + v.dock, moved = box !== LR.box;
     if (moved && de && de.style && de.style.setProperty) {
@@ -6262,9 +7088,24 @@
     if (vv && vv.addEventListener) { vv.addEventListener('resize', lrFit); vv.addEventListener('scroll', lrFit); }
     window.addEventListener('resize', lrFit); window.addEventListener('orientationchange', lrFit); window.addEventListener('pageshow', lrFit);
     document.addEventListener('focusin', function () { lrFocus(); lrFit(); });
+    // 7.0.17: when the last touch landed, for the zoom breadcrumb only. Passive: it never blocks a gesture.
+    document.addEventListener('touchstart', function () { LR.touchAt = Date.now(); }, { capture: true, passive: true });
     document.addEventListener('focusout', function () { setTimeout(lrFit, 0); });
     shellHooks.push(function () { lrDevice(); lrFit(); });
   })();
+  // 7.0.17 (Miles 2026-11-10, the Duo web app zooming in and out around the keyboard): on iOS only, the viewport is
+  // capped at maximum-scale=1, once, as the page loads. Other platforms keep the viewport exactly as it is. Never while
+  // the page is already zoomed (a reload mid-zoom), so the zoom is never changed under the person's fingers; nothing
+  // calls this again after load.
+  function viewportCap(meta, ua, vv) {
+    if (!meta || ua.os !== 'ios') return false;
+    if (vv && vv.scale > 1.01) return false;
+    var content = String(meta.getAttribute('content') || '');
+    if (/maximum-scale\s*=/.test(content)) return false;
+    meta.setAttribute('content', content + (content ? ', ' : '') + 'maximum-scale=1');
+    return true;
+  }
+  try { viewportCap(document.querySelector('meta[name="viewport"]'), uaClass(), window.visualViewport); } catch (_e) { /* the viewport stays as it is */ }
   window.COSWeb.keyboardUp = function () { return LR.up; };
   window.COSWeb.onKeyboard = function (fn) { if (typeof fn === 'function') LR.hooks.push(fn); };
   // ── end layout reports
@@ -6277,8 +7118,8 @@
       history.replaceState({}, document.title, location.pathname + location.hash);
       api('/api/web-session/login', { method: 'POST', body: { code: linkCode } }).then(showShell)
         .catch(function (err) {
-          showAuth(err && err.status ? err.message : UNREACHABLE_COPY);
-          var box = $('auth-code'); if (box) box.value = linkCode;
+          if (!(err && err.status)) { showAuth(UNREACHABLE_COPY); var box0 = $('auth-code'); if (box0) box0.value = linkCode; return; }
+          return linkFailed(err.message, function () { var box = $('auth-code'); if (box) box.value = linkCode; });
         });
       return;
     }
@@ -6286,10 +7127,65 @@
     if (handoff) {
       history.replaceState({}, document.title, location.pathname + location.hash);
       api('/api/web-session/login', { method: 'POST', body: { handoff: handoff } }).then(showShell)
-        .catch(function (err) { showAuth(err && err.status ? err.message : 'That sign-in link did not work. Get a new one from COS Control on your Mac or the COS Glasses app, or use a code or the token.'); });
+        .catch(function (err) {
+          if (!(err && err.status)) return showAuth('That sign-in link did not work. Get a new one from COS Control on your Mac or the COS Glasses app, or use a code or the token.');
+          return linkFailed(err.message);
+        });
       return;
     }
-    api('/api/web-session/status').then(function (st) { if (st && st.authenticated) showShell(st); else showAuth(); }).catch(function () { showAuth(UNREACHABLE_COPY); });
+    // The status read stays here in boot() itself (routes/web-phone-link.test.ts runs boot alone and pins it).
+    api('/api/web-session/status').then(function (st) { return bootAnswer(st); }, function (err) { return bootFail(err); });
+  }
+  // S1 item 7 (lead go, 20:11): a link or code the server refused may be old while this browser is still signed in (an
+  // old QR, a reopened tab). Ask status first: signed in opens the app and says the link was old; signed out shows the
+  // refusal as before, with nothing else changed. A status read that fails also shows the refusal.
+  var OLD_LINK_COPY = 'That sign-in link was old or already used. This browser is still signed in.';
+  function linkFailed(message, after) {
+    return api('/api/web-session/status').then(function (st) {
+      if (st && st.authenticated) { showShell(st); toast(OLD_LINK_COPY); return; }
+      showAuth(message); if (after) after();
+    }, function () { showAuth(message); if (after) after(); });
+  }
+  // The same read on every retry of the not-answering card.
+  function bootStatus() {
+    return api('/api/web-session/status').then(function (st) { return bootAnswer(st); }, function (err) { return bootFail(err); });
+  }
+  function bootAnswer(st) {
+    if (st && st.authenticated) return showShell(st);
+    // Q1 S2: a browser that was signed in before learns why it is not now (the 30 days, no use in its last 2 days, a sign-out).
+    showAuth(typeof signinKnown === 'function' && signinKnown() ? signinLapsedCopy() : undefined);
+  }
+  function bootFail(err) {
+    // F23: a Mac that did not answer is not a sign-in problem. Say so, offer Try again, keep the form out of the way.
+    if (err && err.status) showAuth(err.message); else { showAuth(); authOffline(true); }
+  }
+  // Q1 M2: the not-answering card checks again every 30 s while the page is in front, and stops while it is hidden.
+  var AUTH_RETRY = { timer: null, ms: 30000 };
+  function authRetrySchedule(on) {
+    if (AUTH_RETRY.timer) { clearTimeout(AUTH_RETRY.timer); AUTH_RETRY.timer = null; }
+    if (!on || document.hidden) return;
+    AUTH_RETRY.timer = setTimeout(function () { AUTH_RETRY.timer = null; if (!document.hidden) bootStatus(); }, AUTH_RETRY.ms);
+  }
+  document.addEventListener('visibilitychange', function () {
+    var box = $('auth-offline');
+    var showing = !!(box && !box.classList.contains('hidden'));
+    if (!showing) return;
+    if (document.hidden) authRetrySchedule(false); else bootStatus();
+  });
+  // The sign-in card's "Your Mac is not answering" state (boot only): the form hides until the Mac answers.
+  function authOffline(on) {
+    var box = $('auth-offline'), form = $('auth-form');
+    if (!box || !form) return;
+    box.classList.toggle('hidden', !on); form.classList.toggle('hidden', !!on);
+    var title = $('auth-title'), intro = $('auth-intro');
+    var offline = typeof connOffline === 'function' && connOffline();
+    if (title) title.textContent = on ? (offline ? 'This device is offline' : 'COS on your Mac is not answering') : 'Connect this browser';
+    if (intro) intro.classList.toggle('hidden', !!on);
+    var text = $('auth-offline-text');
+    if (text && on) text.textContent = offline ? 'Connect to the internet and Tailscale. This page checks again every 30 seconds.'
+      : 'Your Mac may be asleep, or this device may be offline or off Tailscale. This page checks again every 30 seconds.';
+    authRetrySchedule(!!on);
+    if (on) { var err = $('auth-error'); if (err) { setStatus(err, '', true); err.classList.add('hidden'); } }
   }
   if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', boot); else boot();
 })();