@livx.cc/agentx 0.99.101 → 0.99.102

package/dist/cli.js

@@ -709,16 +709,16 @@ ${entries.map((s) => "  " + s).join("\n")}`);
   return blocks.length ? blocks.join("\n") : `(no ${label} found)`;
 }
 function fuzzyLineReplace(content, oldStr, newStr) {
-  const norm3 = (s) => s.trim();
+  const norm4 = (s) => s.trim();
   const cl = content.split("\n");
-  const ol = oldStr.split("\n").map(norm3);
+  const ol = oldStr.split("\n").map(norm4);
   while (ol.length && ol[ol.length - 1] === "") ol.pop();
   while (ol.length && ol[0] === "") ol.shift();
   if (!ol.length) return null;
   const matches = [];
   for (let i2 = 0; i2 + ol.length <= cl.length; i2++) {
     let ok = true;
-    for (let j = 0; j < ol.length; j++) if (norm3(cl[i2 + j]) !== ol[j]) {
+    for (let j = 0; j < ol.length; j++) if (norm4(cl[i2 + j]) !== ol[j]) {
       ok = false;
       break;
     }
@@ -2954,7 +2954,7 @@ async function psGroupCpuSeconds(pgid) {
     try {
       return await winTreeCpuSeconds(pgid);
     } catch (e) {
-      log24.debug(`cpu probe failed for ${pgid}: ${e}`);
+      log25.debug(`cpu probe failed for ${pgid}: ${e}`);
       return void 0;
     }
   }
@@ -2963,7 +2963,7 @@ async function psGroupCpuSeconds(pgid) {
     const out = await new Promise((res, rej) => execFile5("ps", ["-A", "-o", "pid=,ppid=,pgid=,time="], { timeout: 5e3, env: { ...process.env, LC_ALL: "C" } }, (e, so) => e ? rej(e) : res(String(so))));
     return sumTreeCpu(out, pgid);
   } catch (e) {
-    log24.debug(`ps cpu probe failed for group ${pgid}: ${e}`);
+    log25.debug(`ps cpu probe failed for group ${pgid}: ${e}`);
     return void 0;
   }
 }
@@ -3112,7 +3112,7 @@ function makeRealShellTool(options) {
           proc.stderr?.on("data", collect);
           proc.on("error", (err2) => {
             if (err2?.name === "AbortError" || ctl.signal.aborted) return finish(reasonFor(timedOut, timeoutMs, clean2(out)));
-            log24.debug("shell spawn error", err2);
+            log25.debug("shell spawn error", err2);
             finish(`[exit 1] ${err2?.message ?? err2}${out ? "\n" + clean2(out) : ""}`);
           });
           proc.on("close", (code) => {
@@ -3191,7 +3191,7 @@ ${clean2(out) || "(no output yet)"}`;
     }
   ];
 }
-var log24, clean2, DETACHED, shellArgv, SECRET_ENV_RE, _spawn, ShellJobRegistry, shellStatus, NO_JOB2;
+var log25, clean2, DETACHED, shellArgv, SECRET_ENV_RE, _spawn, ShellJobRegistry, shellStatus, NO_JOB2;
 var init_tools_shell = __esm({
   "src/tools.shell.ts"() {
     "use strict";
@@ -3201,7 +3201,7 @@ var init_tools_shell = __esm({
     init_shell_sandbox();
     init_tools_jobs();
     init_platform();
-    log24 = forComponent("shell");
+    log25 = forComponent("shell");
     clean2 = (s) => truncateOutput(redactSecrets(s.replace(/\n+$/, "")));
     DETACHED = { stdio: ["ignore", "pipe", "pipe"], ...DETACH_OPTIONS };
     shellArgv = (sh, command) => ({ bin: sh.bin, args: sh.args(command), ...sh.spawnOptions ? { spawnOptions: sh.spawnOptions } : {} });
@@ -7697,9 +7697,9 @@ var VoiceEngine = class _VoiceEngine {
       this.ackProbe = null;
       this.adaptiveAckFired = false;
       const lead2 = m ? m[1] : bare;
-      const norm3 = lead2.replace(/[^a-z ]/gi, " ").replace(/\s+/g, " ").trim().toLowerCase();
+      const norm4 = lead2.replace(/[^a-z ]/gi, " ").replace(/\s+/g, " ").trim().toLowerCase();
       const same = this.ackPickedFired ? bare.match(_VoiceEngine.leadingPhrase(this.lastAck)) : null;
-      if (_VoiceEngine.ACK_LEADING.test(norm3)) {
+      if (_VoiceEngine.ACK_LEADING.test(norm4)) {
         const rest = m ? m[2] : "";
         this.diag("reflex_ack_suppressed", { lead: lead2.trim() });
         if (!rest.trim()) return "";
@@ -7813,8 +7813,8 @@ var VoiceEngine = class _VoiceEngine {
     this.adaptiveAckFired = false;
     this.ackProbe = null;
     if (heldProbe) {
-      const norm3 = heldProbe.replace(/\[emotion[^\]]*\]/gi, "").replace(/[^a-z ]/gi, " ").replace(/\s+/g, " ").trim().toLowerCase();
-      if (_VoiceEngine.ACK_LEADING.test(norm3)) this.diag("reflex_ack_suppressed", { lead: heldProbe.trim() });
+      const norm4 = heldProbe.replace(/\[emotion[^\]]*\]/gi, "").replace(/[^a-z ]/gi, " ").replace(/\s+/g, " ").trim().toLowerCase();
+      if (_VoiceEngine.ACK_LEADING.test(norm4)) this.diag("reflex_ack_suppressed", { lead: heldProbe.trim() });
       else this.speakDelta(heldProbe);
     }
     if (!this.speaking) return;
@@ -8352,14 +8352,14 @@ var VoiceEngine = class _VoiceEngine {
     if (!prev) return next;
     if (!next) return prev;
     const pw = prev.split(/\s+/), nw = next.split(/\s+/);
-    const norm3 = _VoiceEngine.normWord;
+    const norm4 = _VoiceEngine.normWord;
     if (pw.length >= 2 && pw.length <= nw.length) {
       let pfx = true;
-      for (let i = 0; i < pw.length - 1; i++) if (norm3(pw[i]) !== norm3(nw[i])) {
+      for (let i = 0; i < pw.length - 1; i++) if (norm4(pw[i]) !== norm4(nw[i])) {
         pfx = false;
         break;
       }
-      if (pfx && norm3(nw[pw.length - 1]).startsWith(norm3(pw[pw.length - 1]))) return next;
+      if (pfx && norm4(nw[pw.length - 1]).startsWith(norm4(pw[pw.length - 1]))) return next;
     }
     if (_VoiceEngine.restates(prev, next)) {
       this.diag("merge_restated", { dropped: prev.slice(0, 60) });
@@ -8368,7 +8368,7 @@ var VoiceEngine = class _VoiceEngine {
     const max = Math.min(pw.length, nw.length);
     for (let k = max; k > 0; k--) {
       let match = true;
-      for (let i = 0; i < k; i++) if (norm3(pw[pw.length - k + i]) !== norm3(nw[i])) {
+      for (let i = 0; i < k; i++) if (norm4(pw[pw.length - k + i]) !== norm4(nw[i])) {
         match = false;
         break;
       }
@@ -8420,11 +8420,11 @@ var VoiceEngine = class _VoiceEngine {
    *    race), never worse. Fillers ("mhm") deliberately don't count as replies — see speakFiller. */
   refinalizes(next) {
     const pw = this.lastDispatchWords, nw = next.trim().split(/\s+/);
-    const norm3 = _VoiceEngine.normWord;
+    const norm4 = _VoiceEngine.normWord;
     if (pw.length < 3 || nw.length < pw.length) return false;
     if (this.clock.now() - this.lastDispatchAt >= _VoiceEngine.DUP_FINAL_MS) return false;
-    for (let i = 0; i < pw.length - 1; i++) if (norm3(pw[i]) !== norm3(nw[i])) return false;
-    const pLast = norm3(pw[pw.length - 1]), nSame = norm3(nw[pw.length - 1]);
+    for (let i = 0; i < pw.length - 1; i++) if (norm4(pw[i]) !== norm4(nw[i])) return false;
+    const pLast = norm4(pw[pw.length - 1]), nSame = norm4(nw[pw.length - 1]);
     if (!nSame.startsWith(pLast)) return false;
     return nw.length > pw.length || nSame.length > pLast.length;
   }
@@ -9252,7 +9252,91 @@ configureLogging((name) => {
 // src/voice/instinct.ts
 init_logging();
 import { AIClient, DecideClient, JevAdapter, LlmDecideAdapter } from "ai.libx.js";
-var log19 = forComponent("Instinct");
+
+// src/voice/overlap.ts
+init_logging();
+var log19 = forComponent("Overlap");
+var norm2 = (s) => s.toLowerCase().replace(/[’']/g, "'").replace(/[^\p{L}\p{N}' -]+/gu, " ").replace(/\s+/g, " ").trim();
+var HARD = /\b(?:stop|wait|no|nope|nah|hold on|hang on|hold up|pause|cancel|quiet|enough|shut up|never ?mind|actually|but|sorry what|what|why|how|who|when|where|which|can you|could you|tell me|i mean|excuse me)\b/;
+var ACK = new Set("yeah yea yes yep yup ya ok okay k right sure true totally exactly definitely absolutely indeed mm mmm hmm mhm mm-hm uh-huh uh huh aha ah oh ooh wow nice cool great awesome perfect good fine interesting gotcha got it i see makes sense fair agreed correct of course for sure lol ha haha hahaha heh hehe yeah yeah alright all right sweet neat oh nice oh wow oh cool oh okay oh yeah oh right that's right that's true thats right thats true love it i know me too same".split(" "));
+var PHRASES = ["got it", "i see", "makes sense", "of course", "for sure", "all right", "that's right", "that's true", "thats right", "thats true", "love it", "i know", "me too", "uh huh"];
+function overlapRule(text) {
+  if (/\?/.test(text)) return "cut";
+  let t = norm2(text);
+  if (!t) return void 0;
+  if (HARD.test(t)) return "cut";
+  for (const p of PHRASES) t = t.split(p).join(" ");
+  const words3 = t.split(/[\s-]+/).filter(Boolean);
+  if (words3.every((w) => ACK.has(w) || /^(?:ha)+h?$|^(?:he)+h?$|^m+(?:hm+)?$|^h?m+$/.test(w))) return "keep";
+  return void 0;
+}
+function fastOverlapModel(ai, model = "groq/qwen/qwen3.8-27b") {
+  return async (heard, signal) => {
+    const prompt = 'Live voice call. The assistant is mid-sentence and the user just said this over it: "' + heard + '"\nIs it ONLY a listener cue \u2014 agreement, acknowledgement, a short reaction or laugh \u2014 so the assistant should keep talking? Answer no if they want the floor: a question, objection, correction, request, or new information.\nAnswer yes or no.';
+    const reasoning = /qwen/.test(model) ? { providerOptions: { reasoning_effort: "none" } } : /gpt-oss/.test(model) ? { providerOptions: { reasoning_effort: "low" } } : {};
+    const r = await ai.chat({ model, messages: [{ role: "user", content: prompt }], stream: false, signal, temperature: 0, maxTokens: /gpt-oss/.test(model) ? 200 : 3, ...reasoning });
+    const a = (r.content ?? "").trim().toLowerCase();
+    return /^yes/.test(a) ? "keep" : /^no/.test(a) ? "cut" : null;
+  };
+}
+var OverlapJudgeOptions = class {
+  /** The fast model for ambiguous overlaps; absent → ambiguous cuts. */
+  model;
+  /** A model verdict later than this is dropped → cut. */
+  budgetMs = 300;
+  onDecision = () => {
+  };
+  now = () => performance.now();
+};
+var OverlapJudge = class {
+  constructor(options) {
+    this.options = options;
+    this.options = { ...new OverlapJudgeOptions(), ...options };
+  }
+  options;
+  get o() {
+    return this.options;
+  }
+  async judge(heard) {
+    const t0 = this.o.now();
+    const done = (verdict, by) => {
+      const d = { verdict, by, ms: Math.round(this.o.now() - t0) };
+      if (by === "late" || by === "error" || by === "none") log19.warn(`overlap "${heard.slice(0, 60)}": no verdict (${by}, ${d.ms}ms) \u2192 cut`);
+      else log19.debug(`overlap "${heard.slice(0, 60)}": ${verdict} by ${by} ${d.ms}ms`);
+      this.o.onDecision(heard, d);
+      return d;
+    };
+    const rule = overlapRule(heard);
+    if (rule) return done(rule, "rule");
+    if (!this.o.model) return done("cut", "none");
+    const ctl = new AbortController();
+    let timer;
+    const late = new Promise((r) => {
+      timer = setTimeout(() => {
+        ctl.abort();
+        r("late");
+      }, this.o.budgetMs);
+    });
+    try {
+      const v = await Promise.race([this.o.model(heard, ctl.signal).catch((e) => {
+        log19.warn(`overlap model failed: ${e.message}`);
+        return "error";
+      }), late]);
+      if (v === "late" || v === "error") return done("cut", v);
+      return v ? done(v, "model") : done("cut", "error");
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+};
+function overlapModelFor(ai, env = process.env) {
+  const model = env.AGENTX_CHANNEL_DECIDER_MODEL || void 0;
+  return model || env.GROQ_API_KEY ? fastOverlapModel(ai, model) : void 0;
+}
+var softBarge = (mode) => mode !== "turn";
+
+// src/voice/instinct.ts
+var log20 = forComponent("Instinct");
 function voiceDeciderOptions(env = process.env) {
   if (env.TYPESAFE_AI_KEY) return { apiKey: env.TYPESAFE_AI_KEY };
   if (env.GROQ_API_KEY) return { provider: "llm", model: "groq/openai/gpt-oss-120b", apiKey: env.GROQ_API_KEY };
@@ -9285,6 +9369,10 @@ var InstinctOptions = class {
    *  (~300-400ms) and can never act. A hold that survives this window is the undecided case (a 1-word overlap
    *  the engine would RESUME over at overlapResumeMs=700) — the one where a yield actually changes the outcome. */
   overlapSettleMs = 250;
+  /** Soft barge-in's fast yes/no model (overlap.ts fastOverlapModel) for overlaps the 0ms rules leave open, inside
+   *  `overlapBudgetMs`; late/failed → yield. Absent → the generic Choice decides them (slower; no verdict → engine default). */
+  overlapModel;
+  overlapBudgetMs = 300;
   /** ackFor waits this long for the host's ackOutcome before treating the ack as unspoken. Hosts set it to the engine's
    *  last chance to fire (bod-voice: 2×adaptiveAckMs — past that a pending pick is dropped as pick_late). */
   ackSettleMs = 1500;
@@ -9457,7 +9545,8 @@ var Instinct = class {
     const gen = ++this.overlapGen;
     if (this.o.overlapSettleMs > 0) await new Promise((r) => setTimeout(r, this.o.overlapSettleMs));
     if (gen !== this.overlapGen) return;
-    const d = await this.ask(
+    const fast = overlapRule(heard) ?? this.o.overlapModel;
+    const d = fast ? await this.judgeOverlap(heard) : await this.ask(
       "overlap",
       heard,
       { user_said_over_us: heard },
@@ -9474,6 +9563,12 @@ var Instinct = class {
       this.o.onDecision({ ...d, acted: acted("keep_talking", this.o.onKeepTalking(heard)) });
     } else if (d) this.o.onDecision(d);
   }
+  /** Rules + fast model (OverlapJudge) as an overlap decision; undecided → yield (today's hard barge). */
+  async judgeOverlap(heard) {
+    const j = await new OverlapJudge({ model: this.o.overlapModel, budgetMs: this.o.overlapBudgetMs, now: this.o.now }).judge(heard);
+    const choice = j.verdict === "keep" ? "keep_talking" : "yield";
+    return { kind: "overlap", heard, choice, probabilities: { [choice]: 1 }, ms: j.ms };
+  }
   /** The engine's hold ended (it ceded the floor, resumed over a stalled overlap, began a new turn, or was
    *  interrupted) — drop any pending/in-flight overlap consult. Hosts call this on every hold exit. */
   overlapEnded() {
@@ -9512,13 +9607,13 @@ var Instinct = class {
    *  unfinished partial is no turn to react to — the interjection itself is the reply. */
   pickAck(ctx) {
     if (this.interjecting) {
-      log19.debug(`ack: cut-in turn \u2192 silent (engine context "${ctx.text.slice(0, 40)}" is the previous final)`);
+      log20.debug(`ack: cut-in turn \u2192 silent (engine context "${ctx.text.slice(0, 40)}" is the previous final)`);
       return Promise.resolve(null);
     }
     const text = ctx.text.trim();
     const p = (async () => {
       const intentP = ctx.barged ? this.bargeIntent(text).catch((e) => {
-        log19.warn(`barge intent for the ack failed \u2014 situational ack: ${e.message}`);
+        log20.warn(`barge intent for the ack failed \u2014 situational ack: ${e.message}`);
         return null;
       }) : null;
       const d = await this.ask(
@@ -9540,7 +9635,7 @@ var Instinct = class {
       settle = r;
     });
     const timer = setTimeout(() => {
-      log19.debug(`ack: no engine outcome in ${this.o.ackSettleMs}ms \u2014 not claimed`);
+      log20.debug(`ack: no engine outcome in ${this.o.ackSettleMs}ms \u2014 not claimed`);
       settle(null);
     }, this.o.ackSettleMs);
     void spoken.then(() => clearTimeout(timer));
@@ -9589,7 +9684,7 @@ var Instinct = class {
       });
       return { kind, heard, choice: answers.act.choice, probabilities: answers.act.probabilities, ms: Math.round(this.o.now() - t0) };
     } catch (e) {
-      log19.warn(`${kind} decision failed \u2014 falling back to engine defaults: ${e.message}`);
+      log20.warn(`${kind} decision failed \u2014 falling back to engine defaults: ${e.message}`);
       if (rethrow) throw e;
       return null;
     }
@@ -9598,7 +9693,7 @@ var Instinct = class {
 
 // src/voice/unsaid.ts
 init_logging();
-var log20 = forComponent("Unsaid");
+var log21 = forComponent("Unsaid");
 var STOP2 = new Set("that this with have from they them their there then than what when were will would your about into just also been some only over more most very which while after before because these those does here".split(" "));
 var contentStems = (s) => (s.toLowerCase().match(/[a-z0-9']+/g) ?? []).filter((w) => w.length >= 4 && !STOP2.has(w)).map((w) => w.slice(0, 4));
 var SAID_OVERLAP = 0.6;
@@ -9638,7 +9733,7 @@ async function unsaidClauses(pieces, spoken, decider, timeoutMs = 5e3) {
       return p < CONVEYED_MIN;
     }).map((x) => x.c);
   } catch (e) {
-    log20.warn(`unsaid judge failed \u2014 only near-zero-overlap clauses count as unsaid: ${e.message}`);
+    log21.warn(`unsaid judge failed \u2014 only near-zero-overlap clauses count as unsaid: ${e.message}`);
     return fallback();
   } finally {
     clearTimeout(timer);
@@ -9722,13 +9817,13 @@ function scrubSpokenJunk(text, final = false) {
   return s;
 }
 function isRepeatOf(sentence, spoken) {
-  const norm3 = (x) => x.replace(/\[[a-z_ ]+\]/gi, "").replace(/[^\p{L}\p{N}]+/gu, " ").trim().toLowerCase();
-  const s = norm3(sentence);
-  return s.replace(/ /g, "").length >= 16 && spoken.split(SENTENCE_SPLIT).some((x) => norm3(x) === s);
+  const norm4 = (x) => x.replace(/\[[a-z_ ]+\]/gi, "").replace(/[^\p{L}\p{N}]+/gu, " ").trim().toLowerCase();
+  const s = norm4(sentence);
+  return s.replace(/ /g, "").length >= 16 && spoken.split(SENTENCE_SPLIT).some((x) => norm4(x) === s);
 }
 
 // src/duplex.ts
-var log21 = forComponent("DuplexAgent");
+var log22 = forComponent("DuplexAgent");
 function describeCall(call) {
   const v = call.args && Object.values(call.args).find((x) => typeof x === "string" && x.trim());
   const hint = v ? ` (${String(v).replace(/\s+/g, " ").trim().slice(0, 48)})` : "";
@@ -9916,7 +10011,7 @@ function isOfferAcceptance(text) {
 }
 var isQuestion = (s) => /\?["'”’)\]]*$/.test(s.trim());
 var OFFER_OVERRUN = 150;
-var VOICE_SYSTEM_PROMPT = 'You are a spoken voice assistant \u2014 the user HEARS everything you say. Use short sentences. One idea per sentence. No markdown, no bullet lists, no code blocks, no headings, no emoji. Never emit stage directions or parenthetical asides about your own process \u2014 nothing like "(waiting for the result...)" or "(checking)"; while work runs, either say it as plain speech or end your turn.\nThis holds even when asked to "print", "list", "show", or "make a table" \u2014 there is no screen for the spoken channel. Speak it as flowing prose ("Tuesday is half a meter, Wednesday a bit less\u2026"), or if they truly need it on screen, route it to Act to render. Never emit dashes or pipes into speech.\nKeep turns SHORT \u2014 one to three sentences, then stop. Never lecture, enumerate cases, or add caveats unprompted. Conversation is a fast exchange: give the one thing asked, and let the user pull more if they want it.\nYou have three cognitive tiers \u2014 like a human brain:\n\u2022 YOU (reflex) \u2014 instant, lightweight. Handle greetings, simple questions, status checks, QuickLook.\n\u2022 `Act` \u2014 your hands. A background worker with its own configured tools and access to the user\'s environment (files and shell{{WORKER_WEB}}). Use for reading, editing, searching, running tasks, building \u2014 any real work.\n{{THINK_SLOT}}\nWhen you are unsure whether you can do or access something, do NOT assume and do NOT claim a capability you have not confirmed. To check what you can do, QuickLook `capabilities` (instant \u2014 it lists your worker\'s real tools) and answer from that. Never promise an ability that is not in your capabilities; if it is not there, tell the user plainly you can\'t. To actually DO real work, call `Act`. When the user mentions their project, folder, files, or environment ("this project", "the current folder", "my code"), call `Act` IMMEDIATELY \u2014 do not ask for paths or details the worker can discover itself. Never pretend to have done the work or invent results \u2014 the worker\'s report is your only source.\nYou cannot mute the microphone or stop voice capture yourself \u2014 no tool does it. If the user asks you to stop listening or turn the voice off, never claim you did: tell them to say exactly "voice off" (handled by the app directly), or type /voice.\nYou are NOT a knowledge base. For any question whose answer needs SPECIFIC verifiable facts you do not already have in hand \u2014 how to build/configure/implement something, exact API, library, entitlement, command or option names, current events, or particular numbers, dates, or names \u2014 do NOT answer from your own memory: you will confidently make things up (a fake API, a wrong entitlement, an event that did not happen). Route it to `Act`, which can search and verify, and speak only what its report says. DELEGATION RULE \u2014 decide for yourself, the user never has to push: if you cannot answer confidently from the conversation plus trivial well-known knowledge, do NOT refuse and do NOT guess \u2014 dispatch `Act` immediately with a clear brief and say you are checking. Anything needing CURRENT data (weather, news, prices, dates, sky/astronomy, "right now"), real computation, or verification is an automatic dispatch \u2014 never a refusal. The user should never need to say "search the web" or "think harder" to make you act; needing fresh or verified information IS the trigger. Refuse only what your worker genuinely cannot do (check `capabilities`), and say why. Answer inline ONLY for general conversation, chit-chat, and trivia you are sure of, or facts you can see via QuickLook. When elaborating on a completed task ("tell me more", "the gist"), stay strictly within what that result actually said \u2014 if the user asks for something the result did not cover, that is NEW information: dispatch `Act`, do not improvise.\nALWAYS react before you work: the FIRST thing in your turn is a brief spoken acknowledgement of what you heard and what you are about to do ("got it \u2014 opening that now", "sure, let me pull it up", "okay, checking"). NEVER call a tool (Act, Think, QuickLook) silently \u2014 the user must hear you react before you go quiet to work. After dispatching Act or Think, that same one short sentence IS your turn \u2014 end it and do not wait for the result. Exactly ONE short line: never stack a second acknowledgement, and never narrate your own presence or status while waiting ("I\'m here", "let me see", "still checking" right after you already acked). One clean ack then silence reads as competent; repeated check-ins read as nervous.\nA completed task speaks its OWN result to the user (the worker voices what matters as it finishes) \u2014 you do NOT re-voice clean task results. A FAILED or INCOMPLETE task still arrives as a "[task t1 failed] \u2026" event for you to handle. The completed result stays in YOUR context \u2014 it is yours to draw on. When the user follows up ("tell me more", "what else", "and?"), answer FROM that result first: you already have the detail, so elaborate on what you have. Do NOT spawn a fresh worker to re-search or re-gather what you were just handed. Re-dispatch ONLY when genuinely new information is needed \u2014 e.g. the user wants the full contents of a SPECIFIC source, which is one WebFetch of that URL, not a brand-new search. "[task t1 progress] \u2026" events are interim status, NOT results \u2014 on a genuinely LONG wait you MAY give one brief half-sentence aside, but only occasionally; silence while working is normal and fine (the user knows you are on it). Do NOT narrate every step or re-announce yourself. Never present progress as a finished result.\nCRITICAL: while a task is still running you have NO answer yet \u2014 never state a specific result of any kind (a number, size, count, name, path, or value). The real answer exists ONLY once the task finishes (the worker speaks it, and `TaskStatus` then returns it); inventing one meanwhile (a made-up disk size, commit count, etc.) is a serious error. Until then, only acknowledge and wait.\nNever read raw file paths, diffs, or code aloud verbatim.\nDo NOT end every turn with the same canned offer ("want a rundown?", "want the steps?"). Offer once at most; if the user pushes back, repeats themselves, or sounds unsatisfied ("you know what I mean?", "think deeper", "are you sure?"), do NOT re-offer the same thing \u2014 change approach: dispatch `Act`/`Think` to actually dig in, or ask one concrete clarifying question. Repeating a non-answer is worse than silence. When the user says you looked in the wrong place, or doubts a "not found", do not defend the search you did: dispatch `Act` with their hint (the place, the id, the tool they name). Only say you checked or searched something you actually checked with a tool this conversation \u2014 name exactly what you looked at.\n"[task t1 asks] \u2026" events are QUESTIONS from a background task \u2014 relay to the user in your own words, short, then end your turn. When the user answers, call `AnswerTask` with that id and their answer. NEVER answer on the user\'s behalf for permissions or risky operations; if their reply is ambiguous, confirm first.\nIf the user\'s message sounds INCOMPLETE \u2014 it ENDS mid-sentence or on a hesitation ("and then we", "but the problem is", "so I was, um") \u2014 call `Hold` instead of answering. A hesitation INSIDE a finished message ("can you, um, open it?") does not make it incomplete, and an unclear or odd but finished message is not a fragment: answer it, or ask one short question \u2014 never Hold on it. This keeps listening for the rest of their thought. Only respond with substance when you have a complete question or request.\nDispatch discipline: send ONE self-contained task per request \u2014 a single worker with the full brief beats several workers with fragments (each worker starts fresh and re-discovers context). NEVER dispatch a worker just to read files or gather information \u2014 workers explore and discover context themselves; pass on what you already know and let one worker do the whole job. Split into parallel tasks only when the user asks for genuinely independent things. When a task completes, report its result and stop \u2014 do NOT dispatch follow-up work (verification, polish, extras) the user did not ask for, unless the report itself signals failure or doubt.\nDo not fire a second Act/Think for work already in flight, and NEVER spawn a second task to re-count, cross-check, or verify a result a worker already gave you \u2014 trust its answer; a single question gets ONE task. Call `TaskStatus` at most ONCE per turn; if a task is still running, give one brief status aside and end the turn \u2014 never poll it again and again in a loop. "Still on it" is ONLY for a repeat check on a task you already acknowledged earlier \u2014 NEVER as the ack when you first dispatch work ("still" is wrong when nothing was running yet; use a fresh "on it"/"got it, checking" instead). Use `CancelTask` when the user asks to stop something \u2014 to stop everything ("stop all", "cancel everything") pass id "all". When the user only ADDS to or CORRECTS a request whose task is still running (a detail, a path, a name, a spelling), call `Act` with `refines` set to that task id \u2014 it updates the running worker in place; never cancel and re-dispatch for a refinement.\nPRIORITY: when the user says goodbye or wants to end/finish/wrap up the session ("ok bye", "that\'s all", "let\'s finish", "let\'s end", "goodnight", "exit", "wrap up"), call `ExitSession` IMMEDIATELY \u2014 do not act, do not check status, just exit.\nFor TRIVIAL instant lookups only \u2014 current time, git branch, listing a folder, peeking at a small file, or checking your own `capabilities`/tools \u2014 use `QuickLook` (instant, no task). Whenever the user asks what you can do or whether you have some ability, QuickLook `capabilities` and answer from that \u2014 never guess. Anything requiring searching, reasoning, running commands, or editing goes through `Act`.\n{{MEMORY_SLOT}}\nUser messages may arrive via speech-to-text (audio transcribed to text) and can carry transcription errors \u2014 odd words, cut-offs, homophones ("for you" vs "folder"), and especially MISHEARD NAMES: a surname, company, or project name often comes out as ordinary sound-alike words. Read for INTENT, not surface text, and do not silently rewrite what they said. If a message seems garbled, surprising, or only half-parses, or a word sounds like a name you already know (from memory or this conversation) but is spelled differently, treat it with suspicion \u2014 do NOT act on the odd word blindly or improvise content from it; briefly confirm what they meant ("did you mean\u2026?") and wait. A one-line confirm beats a confident wrong answer. NEVER save to memory a name, spelling, or term you only HEARD (it may be a transcription error) \u2014 when the user spells something aloud, read the spelling back and get a yes before storing it.';
+var VOICE_SYSTEM_PROMPT = 'You are a spoken voice assistant \u2014 the user HEARS everything you say. Use short sentences. One idea per sentence. No markdown, no bullet lists, no code blocks, no headings, no emoji. Never emit stage directions or parenthetical asides about your own process \u2014 nothing like "(waiting for the result...)" or "(checking)"; while work runs, either say it as plain speech or end your turn.\nThis holds even when asked to "print", "list", "show", or "make a table" \u2014 there is no screen for the spoken channel. Speak it as flowing prose ("Tuesday is half a meter, Wednesday a bit less\u2026"), or if they truly need it on screen, route it to Act to render. Never emit dashes or pipes into speech.\nKeep turns SHORT \u2014 one to three sentences, then stop. Never lecture, enumerate cases, or add caveats unprompted. Conversation is a fast exchange: give the one thing asked, and let the user pull more if they want it.\nYou have three cognitive tiers \u2014 like a human brain:\n\u2022 YOU (reflex) \u2014 instant, lightweight. Handle greetings, simple questions, status checks, QuickLook.\n\u2022 `Act` \u2014 your hands. A background worker with its own configured tools and access to the user\'s environment (files and shell{{WORKER_WEB}}). Use for reading, editing, searching, running tasks, building \u2014 any real work.\n{{THINK_SLOT}}\nWhen you are unsure whether you can do or access something, do NOT assume and do NOT claim a capability you have not confirmed. To check what you can do, QuickLook `capabilities` (instant \u2014 it lists your worker\'s real tools) and answer from that. Never promise an ability that is not in your capabilities; if it is not there, tell the user plainly you can\'t. To actually DO real work, call `Act`. When the user mentions their project, folder, files, or environment ("this project", "the current folder", "my code"), call `Act` IMMEDIATELY \u2014 do not ask for paths or details the worker can discover itself. Never pretend to have done the work or invent results \u2014 the worker\'s report is your only source.\nYou cannot mute the microphone or stop voice capture yourself \u2014 no tool does it. If the user asks you to stop listening or turn the voice off, never claim you did: tell them to say exactly "voice off" (handled by the app directly), or type /voice.\nYou are NOT a knowledge base. For any question whose answer needs SPECIFIC verifiable facts you do not already have in hand \u2014 how to build/configure/implement something, exact API, library, entitlement, command or option names, current events, or particular numbers, dates, or names \u2014 do NOT answer from your own memory: you will confidently make things up (a fake API, a wrong entitlement, an event that did not happen). Route it to `Act`, which can search and verify, and speak only what its report says. DELEGATION RULE \u2014 decide for yourself, the user never has to push: if you cannot answer confidently from the conversation plus trivial well-known knowledge, do NOT refuse and do NOT guess \u2014 dispatch `Act` immediately with a clear brief and say you are checking. Anything needing CURRENT data (weather, news, prices, dates, sky/astronomy, "right now"), real computation, or verification is an automatic dispatch \u2014 never a refusal. The user should never need to say "search the web" or "think harder" to make you act; needing fresh or verified information IS the trigger. Refuse only what your worker genuinely cannot do (check `capabilities`), and say why. Answer inline ONLY for general conversation, chit-chat, and trivia you are sure of, or facts you can see via QuickLook. When elaborating on a completed task ("tell me more", "the gist"), stay strictly within what that result actually said \u2014 if the user asks for something the result did not cover, that is NEW information: dispatch `Act`, do not improvise.\nALWAYS react before you work: the FIRST thing in your turn is a brief spoken acknowledgement of what you heard and what you are about to do ("got it \u2014 opening that now", "sure, let me pull it up", "okay, checking"). NEVER call a tool (Act, Think, QuickLook) silently \u2014 the user must hear you react before you go quiet to work. After dispatching Act or Think, that same one short sentence IS your turn \u2014 end it and do not wait for the result. Exactly ONE short line: never stack a second acknowledgement, and never narrate your own presence or status while waiting ("I\'m here", "let me see", "still checking" right after you already acked). One clean ack then silence reads as competent; repeated check-ins read as nervous.\nA completed task speaks its OWN result to the user (the worker voices what matters as it finishes) \u2014 you do NOT re-voice clean task results. A FAILED or INCOMPLETE task still arrives as a "[task t1 failed] \u2026" event for you to handle. The completed result stays in YOUR context \u2014 it is yours to draw on. When the user follows up ("tell me more", "what else", "and?"), answer FROM that result first: you already have the detail, so elaborate on what you have. Do NOT spawn a fresh worker to re-search or re-gather what you were just handed. Re-dispatch ONLY when genuinely new information is needed \u2014 e.g. the user wants the full contents of a SPECIFIC source, which is one WebFetch of that URL, not a brand-new search. "[task t1 progress] \u2026" events are interim status, NOT results \u2014 on a genuinely LONG wait you MAY give one brief half-sentence aside, but only occasionally; silence while working is normal and fine (the user knows you are on it). Do NOT narrate every step or re-announce yourself. Never present progress as a finished result.\nCRITICAL: while a task is still running you have NO answer yet \u2014 never state a specific result of any kind (a number, size, count, name, path, or value). The real answer exists ONLY once the task finishes (the worker speaks it, and `TaskStatus` then returns it); inventing one meanwhile (a made-up disk size, commit count, etc.) is a serious error. Until then, only acknowledge and wait.\nNever read raw file paths, diffs, or code aloud verbatim.\nDo NOT end every turn with the same canned offer ("want a rundown?", "want the steps?"). Offer once at most; if the user pushes back, repeats themselves, or sounds unsatisfied ("you know what I mean?", "think deeper", "are you sure?"), do NOT re-offer the same thing \u2014 change approach: dispatch `Act`/`Think` to actually dig in, or ask one concrete clarifying question. Repeating a non-answer is worse than silence. A short yes or agreement right after you asked or offered something answers THAT question: act on it now (dispatch the work it needs) \u2014 never re-ask it, rephrase it, or narrow it into a new question. When the user says you looked in the wrong place, or doubts a "not found", do not defend the search you did: dispatch `Act` with their hint (the place, the id, the tool they name). Only say you checked or searched something you actually checked with a tool this conversation \u2014 name exactly what you looked at.\n"[task t1 asks] \u2026" events are QUESTIONS from a background task \u2014 relay to the user in your own words, short, then end your turn. When the user answers, call `AnswerTask` with that id and their answer. NEVER answer on the user\'s behalf for permissions or risky operations; if their reply is ambiguous, confirm first.\nIf the user\'s message sounds INCOMPLETE \u2014 it ENDS mid-sentence or on a hesitation ("and then we", "but the problem is", "so I was, um") \u2014 call `Hold` instead of answering. A hesitation INSIDE a finished message ("can you, um, open it?") does not make it incomplete, and an unclear or odd but finished message is not a fragment: answer it, or ask one short question \u2014 never Hold on it. This keeps listening for the rest of their thought. Only respond with substance when you have a complete question or request.\nDispatch discipline: send ONE self-contained task per request \u2014 a single worker with the full brief beats several workers with fragments (each worker starts fresh and re-discovers context). NEVER dispatch a worker just to read files or gather information \u2014 workers explore and discover context themselves; pass on what you already know and let one worker do the whole job. Split into parallel tasks only when the user asks for genuinely independent things. When a task completes, report its result and stop \u2014 do NOT dispatch follow-up work (verification, polish, extras) the user did not ask for, unless the report itself signals failure or doubt.\nDo not fire a second Act/Think for work already in flight, and NEVER spawn a second task to re-count, cross-check, or verify a result a worker already gave you \u2014 trust its answer; a single question gets ONE task. Call `TaskStatus` at most ONCE per turn; if a task is still running, give one brief status aside and end the turn \u2014 never poll it again and again in a loop. "Still on it" is ONLY for a repeat check on a task you already acknowledged earlier \u2014 NEVER as the ack when you first dispatch work ("still" is wrong when nothing was running yet; use a fresh "on it"/"got it, checking" instead). Use `CancelTask` when the user asks to stop something \u2014 to stop everything ("stop all", "cancel everything") pass id "all". When the user only ADDS to or CORRECTS a request whose task is still running (a detail, a path, a name, a spelling), call `Act` with `refines` set to that task id \u2014 it updates the running worker in place; never cancel and re-dispatch for a refinement.\nPRIORITY: when the user says goodbye or wants to end/finish/wrap up the session ("ok bye", "that\'s all", "let\'s finish", "let\'s end", "goodnight", "exit", "wrap up"), call `ExitSession` IMMEDIATELY \u2014 do not act, do not check status, just exit.\nFor TRIVIAL instant lookups only \u2014 current time, git branch, listing a folder, peeking at a small file, or checking your own `capabilities`/tools \u2014 use `QuickLook` (instant, no task). Whenever the user asks what you can do or whether you have some ability, QuickLook `capabilities` and answer from that \u2014 never guess. Anything requiring searching, reasoning, running commands, or editing goes through `Act`.\n{{MEMORY_SLOT}}\nUser messages may arrive via speech-to-text (audio transcribed to text) and can carry transcription errors \u2014 odd words, cut-offs, homophones ("for you" vs "folder"), and especially MISHEARD NAMES: a surname, company, or project name often comes out as ordinary sound-alike words. Read for INTENT, not surface text, and do not silently rewrite what they said. If a message seems garbled, surprising, or only half-parses, or a word sounds like a name you already know (from memory or this conversation) but is spelled differently, treat it with suspicion \u2014 do NOT act on the odd word blindly or improvise content from it; briefly confirm what they meant ("did you mean\u2026?") and wait. A one-line confirm beats a confident wrong answer. NEVER save to memory a name, spelling, or term you only HEARD (it may be a transcription error) \u2014 when the user spells something aloud, read the spelling back and get a yes before storing it.';
 var THINK_GUIDANCE = "\u2022 `Think` \u2014 your brain. A premium reasoning model, FAR more expensive than Act. Reserve it for open-ended architecture/design questions, or a problem Act already FAILED at. ALL implementation work \u2014 coding, refactoring, debugging, edge cases, tests \u2014 goes to Act; Act is highly capable. Never send the same work to both.";
 var THINK_DISABLED_GUIDANCE = "(Think tier is not available \u2014 use Act for all escalations.)";
 var VOICE_STYLE_CONVERSATIONAL = `Speak like a person in a live conversation, not an assistant reading a script. React first, then deliver: a quick impulsive beat ("oh nice", "hmm, hold on", "ah, got it") before the substance. Use contractions always. Vary sentence length \u2014 some very short. Light fillers and backchannels are fine ("mm-hm", "right", "let's see") but at most one per reply \u2014 never stack them. When you escalate to Act or Think, say it like a human would ("hang on, let me actually dig into that \u2014 gimme a minute") instead of announcing a task. When a result comes back, react to it like you just found out ("okay so \u2014 turns out\u2026"). Match the user's energy: a quick question gets a quick answer \u2014 a few words is a perfectly good turn. Prefer a short answer plus an offer ("want the details?") over covering everything. Never narrate your own mechanics (no "I will now act", no task ids out loud).`;
@@ -10083,7 +10178,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
           const m = this.reflexBuf.match(RESERVED_EVENT_MARKER) ?? this.reflexBuf.match(RESERVED_EVENT_OPENER);
           if (m) {
             this.fabricationCut = true;
-            log21.warn(`reflex fabricated a [task \u2026] event in its spoken stream \u2014 cutting it (kept ${m.index} chars)`);
+            log22.warn(`reflex fabricated a [task \u2026] event in its spoken stream \u2014 cutting it (kept ${m.index} chars)`);
             this.reflexBuf = this.reflexBuf.slice(0, Math.max(m.index, this.reflexForwarded));
             this.pumpReflex(true);
             return;
@@ -10207,7 +10302,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       this.leakHit = true;
       this.leakCuts.push(leak.trim().slice(0, 40));
       const why = this.cutKind === "claim" ? "stated a result no task has given yet" : this.cutKind === "restart" ? "started a second, restated reply" : "spoke its own analysis";
-      log21.warn(`reflex ${why} ("${leak.trim().slice(0, 40)}\u2026") \u2014 cut before TTS`);
+      log22.warn(`reflex ${why} ("${leak.trim().slice(0, 40)}\u2026") \u2014 cut before TTS`);
       this.notify("diag", this.cutKind === "claim" ? "result_claim" : this.cutKind === "restart" ? "reply_restart" : "analysis_leak", { text: leak.trim().slice(0, 80), at: this.turnSpoken.trim() ? "mid_reply" : "before_speech" });
       const next = this.stepMarks.find((k) => k > at);
       if (next === void 0) {
@@ -10224,6 +10319,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     if (!out) return;
     if (out.trim()) this.spokeThisTurn = true;
     this.turnSpoken += out;
+    this.noteVoiced(this.turnSpoken);
     this.emitHost({ kind: "text_delta", message: out });
   }
   /** Leak verdict for one complete sentence: false = speak, true = cut, undefined = the judge is still out.
@@ -10247,7 +10343,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       this.notify("diag", "leak_judge", { text: s.slice(0, 80), p: Math.round(p * 100) / 100, ms: Math.round(performance.now() - t0) });
       return p >= LEAK_JUDGE_THRESHOLD;
     }, (e) => {
-      log21.warn(`leak judge failed \u2014 speaking the sentence: ${e.message}`);
+      log22.warn(`leak judge failed \u2014 speaking the sentence: ${e.message}`);
       return false;
     }).then((leak) => {
       clearTimeout(timer);
@@ -10319,7 +10415,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       let i = t.length - 1;
       while (i >= this.turnBase && !(t[i].role === "assistant" && typeof t[i].content === "string" && t[i].content.includes(key))) i--;
       if (i < this.turnBase) {
-        log21.warn("analysis leak cut, but its text was not found in the transcript to scrub");
+        log22.warn("analysis leak cut, but its text was not found in the transcript to scrub");
         continue;
       }
       const m = t[i];
@@ -10374,7 +10470,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     const res = await this.voice.send(content);
     const fb = this.options.reflexFallbackModel, model = this.voice.options.model;
     if (res.finishReason !== "error" || !rateLimited(res.error) || !fb || fb === model || fb.includes("/") && model.includes("/") && fb.split("/")[0] !== model.split("/")[0] || this.turnDispatched || this.turnSpoken.trim()) return res;
-    log21.warn(`reflex ${model} rate-limited \u2014 re-running the turn on ${fb}`);
+    log22.warn(`reflex ${model} rate-limited \u2014 re-running the turn on ${fb}`);
     this.notify("diag", "reflex_fallback", { from: model, to: fb });
     this.voice.transcript.length = base;
     this.voice.options.model = fb;
@@ -10407,7 +10503,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     try {
       await this.voice.send(reminder);
     } catch (e) {
-      log21.warn(`follow-through nudge failed: ${e instanceof Error ? e.message : e}`);
+      log22.warn(`follow-through nudge failed: ${e instanceof Error ? e.message : e}`);
     } finally {
       const i = this.voice.transcript.findIndex((m, k) => k >= base && m.role === "user" && m.content === reminder);
       if (i >= 0) this.voice.transcript.splice(i, 1);
@@ -10468,7 +10564,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     return {
       preToolUse: (call) => {
         if (this.spec?.state === "pending" && !_DuplexAgent.SPEC_SAFE_TOOLS.has(call.name)) {
-          log21.verbose(`speculation aborted: reflex called ${call.name} on unconfirmed input`);
+          log22.verbose(`speculation aborted: reflex called ${call.name} on unconfirmed input`);
           this.abortSpeculation();
           return { block: true, reason: "Speculative turn aborted." };
         }
@@ -10542,7 +10638,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     try {
       await this.voice.send(reminder);
     } catch (e) {
-      log21.warn(`ack nudge failed: ${e instanceof Error ? e.message : e}`);
+      log22.warn(`ack nudge failed: ${e instanceof Error ? e.message : e}`);
     } finally {
       this.nudging = false;
       const i = this.voice.transcript.findIndex((m, k) => k >= base && m.role === "user" && m.content === reminder);
@@ -10597,7 +10693,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       const accepted = this.offerOpen && this.parkedRedeliver.length > 0 && this.parkedRedeliver.every((p) => p.task === this.offer.task) && (isOfferAcceptance(content) || isTrivialBarge(content));
       const judge = accepted ? void 0 : this.options.bargeIntent;
       return (accepted ? Promise.resolve("resume") : judge ? judge(content).catch((e) => {
-        log21.warn(`bargeIntent judge failed \u2014 using the allowlist: ${e.message}`);
+        log22.warn(`bargeIntent judge failed \u2014 using the allowlist: ${e.message}`);
         return fallback();
       }) : Promise.resolve(fallback())).then((intent) => {
         this.notify("diag", "barge_intent", { intent, text: content.slice(0, 80) });
@@ -10622,7 +10718,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
         return this.sendTurn(content, false, rec, ext);
       });
     }
-    return this.sendTurn(content, false, rec, ext);
+    return this.sendTurn(typeof content === "string" ? content + this.acceptNote(content) : content, false, rec, ext);
   }
   /** Host-named user turns (send opts.id), so a later send can replace one. Bounded; a replace that arrives
    *  BEFORE its target (the host's dispatch hops can reorder) leaves a pre-superseded record behind. */
@@ -10793,7 +10889,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       try {
         res = await this.voice.send(spec.text);
       } catch (e) {
-        log21.warn(`speculative turn failed: ${e instanceof Error ? e.message : e}`);
+        log22.warn(`speculative turn failed: ${e instanceof Error ? e.message : e}`);
       } finally {
         this.voice.options.signal = prevSignal;
       }
@@ -10807,7 +10903,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       if (d === "abort") {
         if (this.voice.transcript.length > base) this.voice.transcript.length = base;
         this.speculativeAbortedCalls++;
-        log21.verbose(`speculation aborted (${this.speculativeAbortedCalls} total): "${spec.text.slice(0, 50)}"`);
+        log22.verbose(`speculation aborted (${this.speculativeAbortedCalls} total): "${spec.text.slice(0, 50)}"`);
         if (this.spec === spec) this.spec = void 0;
         return res ?? empty;
       }
@@ -10875,6 +10971,7 @@ Update: ${brief}`;
       this.bargeMark = this.parkedRedeliver.length;
       this.reflexCut = false;
       this.offerOpen = false;
+      this.asked = "";
     }
     const parked = [];
     for (const rec of this.tasks.values())
@@ -10918,6 +11015,7 @@ Update: ${brief}`;
       if (say) {
         this.offerOpen = false;
         this.options.host?.notify?.({ kind: "speak_utterance", message: say });
+        this.noteVoiced(say);
         if (rec) {
           this.voicedBy.set(say.trim(), rec.id);
           if (this.voicedBy.size > 64) this.voicedBy.delete(this.voicedBy.keys().next().value);
@@ -10930,6 +11028,7 @@ Update: ${brief}`;
         this.offer = { text: rec.capOffer = this.options.spokenOffer, task: rec.id };
         this.offerOpen = true;
         this.options.host?.notify?.({ kind: "speak_utterance", message: this.offer.text });
+        this.noteVoiced(this.offer.text);
       }
       this.notify("diag", "delivery_budget", { task: rec.id, spoke: rec.voicedChars, parked: rest.length });
     } else if (rec.deliveryParked === "barge") this.parkedRedeliver.push({ text: seg, task: rec.id });
@@ -10956,6 +11055,20 @@ Update: ${brief}`;
   offer = { text: "", task: "" };
   /** The cap offer was the last thing voiced (no delivery or turn has spoken since) — a plain yes accepts it (send). */
   offerOpen = false;
+  /** The last thing voiced (reflex reply or delivery), when it ended on a question — a plain yes answers it (acceptNote). */
+  asked = "";
+  noteVoiced(text) {
+    const last = text.trim().split(SENTENCE_SPLIT).at(-1) ?? "";
+    this.asked = isQuestion(last) ? last.trim() : "";
+  }
+  /** A plain yes to the question just voiced, tied to it in the user's line: left to the reflex, a bare "Oh, yeah." after
+   *  an offer read as ambiguous and the offer was asked again instead of done (Para phone call 2026-10-13). */
+  acceptNote(content) {
+    const q2 = this.asked;
+    this.asked = "";
+    return q2 && isOfferAcceptance(content) ? `
+[this answers the question you just asked \u2014 "${q2}" \u2014 with yes: act on it now (do what it offered, or pass the answer on to the task that asked); do not ask it again.]` : "";
+  }
   /** The task's outcome now belongs to its integration turn (failed / stopped early): take back its parked pieces and
    *  keep it from being revived — a "go on" must not replay raw segments of a result the reflex is about to explain. */
   dropParked(rec) {
@@ -10982,6 +11095,7 @@ Update: ${brief}`;
     if (!text) return;
     this.offerOpen = false;
     this.options.host?.notify?.({ kind: "speak_utterance", message: text });
+    this.noteVoiced(text);
     this.notify("diag", "parked_redelivered", { chars: text.length });
   }
   /** Resolve when all queued voice turns AND all in-flight worker tasks have settled (tests, graceful shutdown). */
@@ -11172,7 +11286,7 @@ Another agent just implemented the above. Independently check the CURRENT state
     this.notify("task_verify", `task ${id}: verifying`, { id });
     const cres = await new Agent(checkerOpts).run(checkBrief);
     if (cres.finishReason !== "stop") {
-      log21.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
+      log22.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
       this.notify("task_verify", `task ${id}: verify inconclusive (${cres.finishReason})`, { id, finishReason: cres.finishReason });
     }
     const sum = (a = 0, b = 0) => a + b;
@@ -11308,7 +11422,7 @@ Another agent just implemented the above. Independently check the CURRENT state
     rec.status = "done";
     rec.result = res.text;
     const incomplete = res.finishReason !== "stop" && res.finishReason !== "empty";
-    log21.verbose(`task ${id} done (${res.steps} steps${incomplete ? `, INCOMPLETE: ${res.finishReason}` : ""})`);
+    log22.verbose(`task ${id} done (${res.steps} steps${incomplete ? `, INCOMPLETE: ${res.finishReason}` : ""})`);
     this.notify("task_done", `task ${id} (${rec.label}) completed`, {
       id,
       text: res.text,
@@ -11342,14 +11456,14 @@ Another agent just implemented the above. Independently check the CURRENT state
   foldIfSuperseded(rec, note) {
     if (rec.deliveryParked !== "moved_on") return false;
     if (note.trim()) this.voice.transcript.push({ role: "assistant", content: note });
-    log21.verbose(`task ${rec.id} settled but superseded (${rec.status}) \u2014 folded into transcript, not voiced`);
+    log22.verbose(`task ${rec.id} settled but superseded (${rec.status}) \u2014 folded into transcript, not voiced`);
     return true;
   }
   failTask(rec, msg) {
     this.dropAsk(rec.id);
     rec.status = "error";
     rec.result = msg;
-    log21.warn(`task ${rec.id} failed: ${msg}`);
+    log22.warn(`task ${rec.id} failed: ${msg}`);
     this.notify("task_error", `task ${rec.id} (${rec.label}) failed: ${msg}`, { id: rec.id });
     if (this.foldIfSuperseded(rec, `The "${rec.label}" task failed: ${msg}`)) return;
     this.dropParked(rec);
@@ -11647,7 +11761,7 @@ Another agent just implemented the above. Independently check the CURRENT state
 init_llm();
 init_logging();
 init_models();
-var log22 = forComponent("ModelRouter");
+var log23 = forComponent("ModelRouter");
 var ModelRouterOptions = class {
   classifier = jevClassifier();
   /** Capability tiers → model id (any provider). basic/standard run the main session; premium is only ever an offload. */
@@ -11731,10 +11845,10 @@ var ModelRouter = class {
       if (tier === "premium") d.offload = this.state.offload && (c.sameThread ?? 0) >= o.sameThreadAt ? "continue" : "fresh";
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
-      log22.warn(`classifier failed, falling back to standard: ${msg}`);
+      log23.warn(`classifier failed, falling back to standard: ${msg}`);
       d = { tier: "standard", model: o.models.standard, probs: {}, fallback: msg, classifyMs: Math.round(performance.now() - t0) };
     }
-    log22.info(`route ${d.tier}${d.offload ? `(${d.offload})` : ""} \xB7 argmax=${d.choice ?? "-"} \xB7 p=${JSON.stringify(d.probs)}${d.sameThread != null ? ` \xB7 same=${d.sameThread.toFixed(2)}` : ""} \xB7 ${d.classifyMs}ms`);
+    log23.info(`route ${d.tier}${d.offload ? `(${d.offload})` : ""} \xB7 argmax=${d.choice ?? "-"} \xB7 p=${JSON.stringify(d.probs)}${d.sameThread != null ? ` \xB7 same=${d.sameThread.toFixed(2)}` : ""} \xB7 ${d.classifyMs}ms`);
     return d;
   }
   /** Run one user turn on `agent` with routing. Returns a RunResult carrying `costUsd` + `routing`. */
@@ -11786,7 +11900,7 @@ ${text}`;
     const answer = res.text || `(premium sub-agent finished with no reply; finishReason=${res.finishReason})`;
     agent.transcript.push({ role: "user", content }, { role: "assistant", content: answer });
     this.state.offload = { messages: child.transcript, mainLen: agent.transcript.length, question: text };
-    log22.info(`offload ${cont ? "continue" : "fresh"} done \xB7 ${res.finishReason} \xB7 ${res.steps} steps`);
+    log23.info(`offload ${cont ? "continue" : "fresh"} done \xB7 ${res.finishReason} \xB7 ${res.steps} steps`);
     const costUsd = o.costOf(main2, briefUsage) + o.costOf(o.models.premium, res.usage);
     return { ...res, text: answer, messages: agent.transcript, usage: addUsage(briefUsage, res.usage), costUsd, routing: d };
   }
@@ -11802,7 +11916,7 @@ The request:
 ${text}`);
       return { text: r.text.trim() || text, usage: r.usage };
     } catch (e) {
-      log22.warn(`brief failed, sending the raw request: ${e instanceof Error ? e.message : String(e)}`);
+      log23.warn(`brief failed, sending the raw request: ${e instanceof Error ? e.message : String(e)}`);
       return { text };
     } finally {
       agent.transcript = snap;
@@ -11847,7 +11961,7 @@ async function jevAvailable(opts = {}) {
     const { env } = await loadJev(opts);
     return JEV_KEYS.some((k) => env[k]?.trim());
   } catch (e) {
-    log22.debug(`jev unavailable: ${e instanceof Error ? e.message : String(e)}`);
+    log23.debug(`jev unavailable: ${e instanceof Error ? e.message : String(e)}`);
     return false;
   }
 }
@@ -12076,7 +12190,7 @@ init_logging();
 init_platform();
 import { spawn } from "child_process";
 import { createHash } from "crypto";
-var log23 = forComponent("mcp");
+var log24 = forComponent("mcp");
 var PROTOCOL_VERSION = "2025-06-18";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_CALL_TIMEOUT_MS = 30 * 6e4;
@@ -12108,7 +12222,7 @@ var StdioTransport = class {
     proc.stdout.setEncoding("utf8");
     proc.stdout.on("data", (chunk) => this.onData(chunk));
     proc.stderr.setEncoding("utf8");
-    proc.stderr.on("data", (chunk) => log23.debug(`[${command}] stderr:`, chunk.trimEnd()));
+    proc.stderr.on("data", (chunk) => log24.debug(`[${command}] stderr:`, chunk.trimEnd()));
     proc.on("exit", (code) => this.failAll(new Error(`MCP server "${command}" exited (code ${code})`)));
     proc.on("error", (e) => this.failAll(e instanceof Error ? e : new Error(String(e))));
   }
@@ -12122,7 +12236,7 @@ var StdioTransport = class {
       try {
         this.dispatch(JSON.parse(line));
       } catch (e) {
-        log23.debug("dropping non-JSON line from MCP server:", line, e);
+        log24.debug("dropping non-JSON line from MCP server:", line, e);
       }
     }
   }
@@ -12132,7 +12246,7 @@ var StdioTransport = class {
       try {
         p2?.onProgress?.(msg.params ?? {});
       } catch (e) {
-        log23.debug("onProgress handler threw", e);
+        log24.debug("onProgress handler threw", e);
       }
       return;
     }
@@ -12170,7 +12284,7 @@ var StdioTransport = class {
       const onAbort = () => {
         if (!this.pending.delete(id)) return;
         clearTimeout(timer);
-        this.notify("notifications/cancelled", { requestId: id, reason: String(signal?.reason?.message ?? "cancelled") }).catch((e) => log23.debug("cancel notify failed", e));
+        this.notify("notifications/cancelled", { requestId: id, reason: String(signal?.reason?.message ?? "cancelled") }).catch((e) => log24.debug("cancel notify failed", e));
         reject(abortError(signal));
       };
       const done = () => signal?.removeEventListener("abort", onAbort);
@@ -12194,7 +12308,7 @@ var StdioTransport = class {
     try {
       this.proc?.stdin?.end();
     } catch (e) {
-      log23.debug("stdin end failed", e);
+      log24.debug("stdin end failed", e);
     }
     if (!(IS_WIN && killTree(this.proc?.pid, "SIGTERM"))) this.proc?.kill();
   }
@@ -12229,7 +12343,7 @@ var HttpTransport = class {
       return await this.post({ jsonrpc: "2.0", id, method, params: opts.onProgress ? withProgressToken(params, id) : params }, false, signal, opts.onProgress);
     } catch (e) {
       if (opts.signal?.aborted) {
-        void this.notify("notifications/cancelled", { requestId: id, reason: String(opts.signal.reason?.message ?? "cancelled") }).catch((err2) => log23.debug("cancel notify failed", err2));
+        void this.notify("notifications/cancelled", { requestId: id, reason: String(opts.signal.reason?.message ?? "cancelled") }).catch((err2) => log24.debug("cancel notify failed", err2));
         throw abortError(opts.signal);
       }
       throw e;
@@ -12272,7 +12386,7 @@ function sseMessage(line) {
   try {
     return JSON.parse(trimmed.slice(5).trim());
   } catch (e) {
-    log23.debug("skipping unparseable SSE data line", e);
+    log24.debug("skipping unparseable SSE data line", e);
     return void 0;
   }
 }
@@ -12282,7 +12396,7 @@ async function readSseResponse(resp, id, onProgress) {
       try {
         onProgress?.(obj.params ?? {});
       } catch (e) {
-        log23.debug("onProgress handler threw", e);
+        log24.debug("onProgress handler threw", e);
       }
       return void 0;
     }
@@ -12381,7 +12495,7 @@ async function mountWithDeadline(name, cfg, mountTimeoutMs) {
       return { name, client, tools, specs, serverInfo: init?.serverInfo, config: cfg };
     })(), mountTimeoutMs, name);
   } catch (e) {
-    await client.close().catch((err2) => log23.debug(`close after failed mount of "${name}": ${err2}`));
+    await client.close().catch((err2) => log24.debug(`close after failed mount of "${name}": ${err2}`));
     throw e;
   }
 }
@@ -12392,15 +12506,15 @@ function validEntries(servers) {
   return Object.entries(servers).filter(([name, cfg]) => {
     if (!cfg || cfg.disabled) return false;
     if (!cfg.command && !cfg.url) {
-      log23.warn(`MCP server "${name}" needs a command (stdio) or url (http) \u2014 skipping`);
+      log24.warn(`MCP server "${name}" needs a command (stdio) or url (http) \u2014 skipping`);
       return false;
     }
     return true;
   });
 }
 function logMountFailure(name, e) {
-  if (e instanceof McpAuthError) log23.warn(`MCP "${name}" needs-auth: HTTP ${e.status} \u2014 set bearerToken or headers in its config; skipping`);
-  else log23.error(`MCP server "${name}" failed to mount: ${e?.message ?? e}`);
+  if (e instanceof McpAuthError) log24.warn(`MCP "${name}" needs-auth: HTTP ${e.status} \u2014 set bearerToken or headers in its config; skipping`);
+  else log24.error(`MCP server "${name}" failed to mount: ${e?.message ?? e}`);
 }
 async function mountMcpServers(servers = {}, opts = {}) {
   const entries = validEntries(servers);
@@ -12410,7 +12524,7 @@ async function mountMcpServers(servers = {}, opts = {}) {
     const name = entries[i][0];
     if (r.status === "fulfilled") {
       out.push(r.value);
-      log23.debug(`MCP "${name}" mounted \u2014 ${r.value.tools.length} tool(s)${r.value.serverInfo?.name ? ` from ${r.value.serverInfo.name}` : ""}`);
+      log24.debug(`MCP "${name}" mounted \u2014 ${r.value.tools.length} tool(s)${r.value.serverInfo?.name ? ` from ${r.value.serverInfo.name}` : ""}`);
     } else logMountFailure(name, r.reason);
   });
   return out;
@@ -12450,7 +12564,7 @@ var McpPool = class {
     const prev = this.warm.get(key);
     if (prev) {
       clearTimeout(prev.timer);
-      if (prev.client !== client) void prev.client.close().catch((err2) => log23.debug(`warm-pool replace close failed: ${err2}`));
+      if (prev.client !== client) void prev.client.close().catch((err2) => log24.debug(`warm-pool replace close failed: ${err2}`));
     }
     const e = { client, timer: void 0 };
     this.warm.set(key, e);
@@ -12467,7 +12581,7 @@ var McpPool = class {
     const e = this.warm.get(key);
     if (!e) return;
     this.warm.delete(key);
-    await e.client.close().catch((err2) => log23.debug(`warm-pool evict close failed: ${err2}`));
+    await e.client.close().catch((err2) => log24.debug(`warm-pool evict close failed: ${err2}`));
   }
   async closeAll() {
     for (const e of this.warm.values()) {
@@ -12686,7 +12800,7 @@ init_tools_shell();
 // src/tools.notify.ts
 init_logging();
 import { execFile as execFile2 } from "child_process";
-var log25 = forComponent("notify");
+var log26 = forComponent("notify");
 var WIN_TOAST = [
   "[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null",
   "$t = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)",
@@ -12717,7 +12831,7 @@ function makeNotifyTool(opts = {}) {
       return new Promise((resolve6) => {
         run(argv[0], argv[1], { timeout: 5e3, ...extra }, (e) => {
           if (e) {
-            log25.debug("notification failed", e);
+            log26.debug("notification failed", e);
             resolve6(`Notification failed: ${e.message}`);
           } else resolve6("Notification shown.");
         });
@@ -12733,7 +12847,7 @@ import { BodDB as BodDB2 } from "@bod.ee/db";
 init_logging();
 import { existsSync as existsSync2, readFileSync as readFileSync5 } from "fs";
 import { homedir } from "os";
-var log26 = forComponent("cli-util");
+var log27 = forComponent("cli-util");
 function dotDirs(base, sub, opts = {}) {
   const home = opts.home ?? homedir();
   const dirs = [`${base}/.agent/${sub}`, `${base}/.claude/${sub}`, `${home}/.agent/${sub}`, `${home}/.claude/${sub}`];
@@ -12750,7 +12864,7 @@ function parseJson(text, fallback, what = "json") {
   try {
     return JSON.parse(text);
   } catch (e) {
-    log26.debug(`parseJson(${what}) failed: ${e.message}`);
+    log27.debug(`parseJson(${what}) failed: ${e.message}`);
     return fallback;
   }
 }
@@ -12760,7 +12874,7 @@ function readJsonFile(path, fallback) {
   try {
     text = readFileSync5(path, "utf8");
   } catch (e) {
-    log26.debug(`readJsonFile(${path}) unreadable: ${e.message}`);
+    log27.debug(`readJsonFile(${path}) unreadable: ${e.message}`);
     return fallback;
   }
   return parseJson(text, fallback, path);
@@ -13064,7 +13178,7 @@ import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as rea
 import { homedir as homedir3 } from "os";
 import { dirname as dirname4, join as join7 } from "path";
 import { fileURLToPath } from "url";
-var log27 = forComponent("VoiceIO");
+var log28 = forComponent("VoiceIO");
 var now3 = () => performance.now();
 var Player = class {
   proc = null;
@@ -13078,7 +13192,7 @@ var Player = class {
       ["-loglevel", "quiet", "-nodisp", "-fflags", "nobuffer", "-flags", "low_delay", "-probesize", "32", "-f", "s16le", "-ar", String(TTS_SAMPLE_RATE), "-ch_layout", "mono", "-i", "-"],
       { stdio: ["pipe", "ignore", "ignore"] }
     );
-    this.proc.on("error", (e) => log27.warn(`ffplay error: ${e.message}`));
+    this.proc.on("error", (e) => log28.warn(`ffplay error: ${e.message}`));
     this.proc.stdin.on("error", () => {
     });
     this.bytesWritten = 0;
@@ -13116,7 +13230,7 @@ function detectFfmpegMic() {
   const devices = [...audio.matchAll(/\[(\d+)\] (.+)/g)].map(([, idx, name]) => ({ idx, name: name.trim() }));
   const mic = devices.find((d) => /microphone|built-in/i.test(d.name) && !/teams|blackhole|loopback/i.test(d.name)) ?? devices[0];
   if (!mic) throw new Error("no audio input device found");
-  log27.debug(`ffmpeg mic: [${mic.idx}] ${mic.name}`);
+  log28.debug(`ffmpeg mic: [${mic.idx}] ${mic.name}`);
   return `:${mic.idx}`;
 }
 function detectDshowMic() {
@@ -13127,7 +13241,7 @@ function detectDshowMic() {
   const devices = [...(r.stderr ?? "").matchAll(/"([^"]+)"\s*\(audio\)/g)].map((m) => m[1]);
   const mic = devices.find((d) => !/stereo mix|loopback|virtual|cable|teams/i.test(d)) ?? devices[0];
   if (!mic) throw new Error("no audio input device found (set MIC_DEVICE to the DirectShow device name)");
-  log27.debug(`ffmpeg dshow mic: ${mic}`);
+  log28.debug(`ffmpeg dshow mic: ${mic}`);
   return `audio=${mic}`;
 }
 function detectedInputDevice() {
@@ -13163,15 +13277,15 @@ function resolveAecBinary() {
   if (existsSync4(bin) && statSync6(bin).mtimeMs >= statSync6(src).mtimeMs) return bin;
   if (spawnSync3("which", ["swiftc"]).status !== 0) return null;
   mkdirSync5(cacheDir, { recursive: true });
-  log27.info("compiling AEC mic helper (first run)\u2026");
+  log28.info("compiling AEC mic helper (first run)\u2026");
   const build = spawnSync3("swiftc", ["-O", "-o", bin, src, "-Xlinker", "-sectcreate", "-Xlinker", "__TEXT", "-Xlinker", "__info_plist", "-Xlinker", plist], { encoding: "utf8" });
   if (build.status !== 0) {
-    log27.warn(`AEC build failed: ${build.stderr?.slice(0, 400)}`);
+    log28.warn(`AEC build failed: ${build.stderr?.slice(0, 400)}`);
     return null;
   }
   const sign = spawnSync3("codesign", ["-fs", "-", bin], { encoding: "utf8" });
   if (sign.status !== 0) {
-    log27.warn(`codesign failed: ${sign.stderr?.slice(0, 200)}`);
+    log28.warn(`codesign failed: ${sign.stderr?.slice(0, 200)}`);
     return null;
   }
   return bin;
@@ -13213,17 +13327,17 @@ var NodeMicSource = class {
       this.proc = spawn2(this.bin, [], { stdio: ["ignore", "pipe", "ignore"] });
     } else {
       if (!hasCommand("ffmpeg")) throw new Error("voice I/O unavailable: no AEC helper and no ffmpeg on PATH");
-      log27.info("mic: raw capture (no AEC) \u2014 echo handled heuristically; headphones recommended");
+      log28.info("mic: raw capture (no AEC) \u2014 echo handled heuristically; headphones recommended");
       const input = process.platform === "win32" ? ["-f", "dshow", "-i", detectDshowMic()] : ["-f", "avfoundation", "-i", detectFfmpegMic()];
       this.proc = spawn2(
         "ffmpeg",
         ["-loglevel", "error", ...input, "-ar", String(STT_SAMPLE_RATE), "-ac", "1", "-f", "s16le", "-"],
         { stdio: ["ignore", "pipe", "pipe"], ...process.platform === "win32" ? { windowsHide: true } : {} }
       );
-      this.proc.stderr.on("data", (d) => log27.warn(`ffmpeg: ${String(d).trim()}`));
+      this.proc.stderr.on("data", (d) => log28.warn(`ffmpeg: ${String(d).trim()}`));
     }
     this.proc.on("exit", (c) => {
-      if (c && !this.stopped) log27.error(`mic capture exited (${c}) \u2014 check mic permission / MIC_DEVICE / MIC_AEC=0`);
+      if (c && !this.stopped) log28.error(`mic capture exited (${c}) \u2014 check mic permission / MIC_DEVICE / MIC_AEC=0`);
     });
     this.proc.stdout.on("data", (chunk) => onChunk(chunk));
   }
@@ -13289,7 +13403,7 @@ var AecDuplexAudio = class {
     this.proc.stdin.on("error", () => {
     });
     this.proc.on("exit", (c) => {
-      if (c && !this.stopped) log27.error(`aec duplex audio exited (${c}) \u2014 check mic permission / MIC_AEC=0`);
+      if (c && !this.stopped) log28.error(`aec duplex audio exited (${c}) \u2014 check mic permission / MIC_AEC=0`);
     });
     this.proc.stdout.on("data", (chunk) => {
       this.gotChunk = true;
@@ -13305,7 +13419,7 @@ var AecDuplexAudio = class {
             openMicSettings();
             this.onFatal?.("microphone permission denied \u2014 enable it in System Settings \u2192 Privacy & Security \u2192 Microphone for your terminal, then restart it");
           }
-        } else log27.debug(`mic-aec: ${s}`);
+        } else log28.debug(`mic-aec: ${s}`);
       }
     });
     if (!this.noVpio && !this.triedFallback) {
@@ -13314,7 +13428,7 @@ var AecDuplexAudio = class {
         this.triedFallback = true;
         this.noVpio = true;
         this._aec = false;
-        log27.warn("mic-aec: VPIO delivered no audio in 2.5s \u2014 falling back to non-VPIO capture (no AEC \u2192 half-duplex, no barge-in)");
+        log28.warn("mic-aec: VPIO delivered no audio in 2.5s \u2014 falling back to non-VPIO capture (no AEC \u2192 half-duplex, no barge-in)");
         this.onDegrade?.();
         this.killProc();
         this.spawnHelper();
@@ -13485,7 +13599,7 @@ function bindAckInstinct(v, instinct) {
       if (ev.kind === "ack_fired") instinct.ackOutcome(String(ev.phrase));
       else if (ev.kind === "ack_skipped" || ev.kind === "ack_cancelled") instinct.ackOutcome(null);
     } catch (e) {
-      log27.warn(`ack outcome tap failed: ${e instanceof Error ? e.message : e}`);
+      log28.warn(`ack outcome tap failed: ${e instanceof Error ? e.message : e}`);
     }
     onDiag(ev);
   };
@@ -13562,7 +13676,7 @@ function channelInput(sc, m) {
   }
   if (m.type === "agent_state") {
     if (typeof m.state === "string" && MAIN_STATES.has(m.state)) sc.onAgentState(m.state);
-    else log27.warn(`agent_state: unknown state ${JSON.stringify(m.state)} \u2014 ignored`);
+    else log28.warn(`agent_state: unknown state ${JSON.stringify(m.state)} \u2014 ignored`);
     return true;
   }
   return false;
@@ -13686,7 +13800,7 @@ function fakeVoiceParts(uttFile) {
 init_logging();
 import { appendFile, mkdirSync as mkdirSync6 } from "fs";
 import { dirname as dirname5 } from "path";
-var log28 = forComponent("VoiceDiag");
+var log29 = forComponent("VoiceDiag");
 var JsonlDiagSink = class {
   constructor(path) {
     this.path = path;
@@ -13727,7 +13841,7 @@ var JsonlDiagSink = class {
   disable(e) {
     this.disabled = true;
     this.queue.length = 0;
-    log28.debug(`voice diag sink disabled (${this.path}): ${e instanceof Error ? e.message : e}`);
+    log29.debug(`voice diag sink disabled (${this.path}): ${e instanceof Error ? e.message : e}`);
   }
   /** True once a failure permanently disabled the sink (tests/inspection). */
   get isDisabled() {
@@ -13749,7 +13863,7 @@ init_logging();
 init_logging();
 import { mkdir, readFile, writeFile } from "fs/promises";
 import { join as join8 } from "path";
-var log29 = forComponent("ChannelBanks");
+var log30 = forComponent("ChannelBanks");
 var LINE_KINDS = ["backchannel", "filler", "bridge"];
 var BANK_KEYS = [...LINE_KINDS, "phatic"];
 var EN_PHATIC = [
@@ -13782,9 +13896,9 @@ var EN_PHATIC = [
 var EN_BANK = { ...CHANNEL_BANK, phatic: EN_PHATIC };
 var primaryLang = (tag) => tag.trim().toLowerCase().split(/[-_]/)[0];
 function isPhatic(text, bank) {
-  const t = norm2(text);
+  const t = norm3(text);
   return !!t && !!bank?.phatic?.some((p) => {
-    const q2 = norm2(p);
+    const q2 = norm3(p);
     return !!q2 && (t === q2 || t.startsWith(q2 + " "));
   });
 }
@@ -13862,16 +13976,16 @@ function fitsLanguage(line, lang) {
   const ws = line.toLowerCase().match(new RegExp("\\p{L}+", "gu")) ?? [];
   return !ws.some((w) => !mine?.has(w) && Object.entries(STOP3).some(([l, s]) => l !== lang && s.has(w)));
 }
-var norm2 = (s) => s.toLowerCase().replace(/[^\p{L}\p{N}' ]/gu, "").replace(/\s+/g, " ").trim();
+var norm3 = (s) => s.toLowerCase().replace(/[^\p{L}\p{N}' ]/gu, "").replace(/\s+/g, " ").trim();
 function cleanLine(s, lang, maxWords = 6) {
   const raw = s.trim().split("\n")[0];
   const l = raw.replace(/^[-*•\d.)\s]+/, "").replace(/^["'“”«»]+|["'“”«»]+$/g, "").replace(new RegExp("^\\p{L}+:\\s*", "u"), "").trim();
   if (!l || isLeakSuspect(raw) || isLeakSuspect(l)) {
-    if (l) log29.debug(`line "${raw}" reads as meta \u2014 rejected`);
+    if (l) log30.debug(`line "${raw}" reads as meta \u2014 rejected`);
     return "";
   }
   if (lang && !fitsLanguage(l, lang)) {
-    log29.debug(`line "${l}" is not ${lang} \u2014 rejected`);
+    log30.debug(`line "${l}" is not ${lang} \u2014 rejected`);
     return "";
   }
   return l.split(/\s+/).length > maxWords || l.length > 60 ? "" : l;
@@ -13883,9 +13997,9 @@ function validateBank(raw, lang, minPerKind = 3) {
   for (const k of BANK_KEYS) {
     const v = raw[k];
     const seen = /* @__PURE__ */ new Set();
-    out[k] = (Array.isArray(v) ? v : []).filter((x) => typeof x === "string").map((x) => cleanLine(x, lang)).filter((x) => x && !(k === "filler" && SPEAKER_FILLER.test(norm2(x))) && !seen.has(norm2(x)) && seen.add(norm2(x)));
+    out[k] = (Array.isArray(v) ? v : []).filter((x) => typeof x === "string").map((x) => cleanLine(x, lang)).filter((x) => x && !(k === "filler" && SPEAKER_FILLER.test(norm3(x))) && !seen.has(norm3(x)) && seen.add(norm3(x)));
     if (out[k].length < minPerKind) {
-      log29.warn(`bank ${lang}: only ${out[k].length} valid ${k} lines \u2014 rejected`);
+      log30.warn(`bank ${lang}: only ${out[k].length} valid ${k} lines \u2014 rejected`);
       return null;
     }
   }
@@ -13955,11 +14069,11 @@ var ChannelBanks = class {
     const f = this.file(lang);
     let cached = null;
     if (f) cached = await readFile(f, "utf8").then((s) => JSON.parse(s)).catch((e) => {
-      if (e.code !== "ENOENT") log29.warn(`bank cache ${f} unreadable \u2014 regenerating: ${e.message}`);
+      if (e.code !== "ENOENT") log30.warn(`bank cache ${f} unreadable \u2014 regenerating: ${e.message}`);
       return null;
     });
     if (cached && cached.v !== BANK_VERSION) {
-      log29.debug(`bank ${lang}: cache v${cached.v ?? 1} predates v${BANK_VERSION} \u2014 regenerating`);
+      log30.debug(`bank ${lang}: cache v${cached.v ?? 1} predates v${BANK_VERSION} \u2014 regenerating`);
       cached = null;
     }
     const valid = cached && validateBank(cached.bank, lang, 0);
@@ -13967,7 +14081,7 @@ var ChannelBanks = class {
     if (valid) {
       for (const k of BANK_KEYS) if (!valid[k].length) valid[k] = [...this.o.fallback[lang]?.[k] ?? []];
       this.banks.set(lang, valid);
-      log29.debug(`bank ${lang}: cache hit (${BANK_KEYS.map((k) => valid[k].length).join("/")})${complete ? "" : " \u2014 missing kinds, refreshing"}`);
+      log30.debug(`bank ${lang}: cache hit (${BANK_KEYS.map((k) => valid[k].length).join("/")})${complete ? "" : " \u2014 missing kinds, refreshing"}`);
     }
     if (complete && this.o.now() - cached.at < this.o.refreshMs) return;
     await this.generate(lang, valid);
@@ -13983,14 +14097,14 @@ var ChannelBanks = class {
       const bank = {};
       for (const k of BANK_KEYS) {
         const seen = /* @__PURE__ */ new Set();
-        bank[k] = [...fresh[k], ...have?.[k] ?? []].filter((x) => !seen.has(norm2(x)) && seen.add(norm2(x))).slice(0, this.o.maxPerKind);
+        bank[k] = [...fresh[k], ...have?.[k] ?? []].filter((x) => !seen.has(norm3(x)) && seen.add(norm3(x))).slice(0, this.o.maxPerKind);
       }
       this.banks.set(lang, bank);
-      log29.debug(`bank ${lang}: ${have ? "refreshed" : "generated"} (${BANK_KEYS.map((k) => bank[k].length).join("/")}) in ${Math.round(this.o.now() - t0)}ms`);
+      log30.debug(`bank ${lang}: ${have ? "refreshed" : "generated"} (${BANK_KEYS.map((k) => bank[k].length).join("/")}) in ${Math.round(this.o.now() - t0)}ms`);
       const f = this.file(lang);
-      if (f) await mkdir(this.o.cacheDir, { recursive: true }).then(() => writeFile(f, JSON.stringify({ at: this.o.now(), v: BANK_VERSION, bank }))).catch((e) => log29.warn(`bank cache write ${f} failed: ${e.message}`));
+      if (f) await mkdir(this.o.cacheDir, { recursive: true }).then(() => writeFile(f, JSON.stringify({ at: this.o.now(), v: BANK_VERSION, bank }))).catch((e) => log30.warn(`bank cache write ${f} failed: ${e.message}`));
     } catch (e) {
-      log29.warn(`bank ${lang}: generation failed \u2014 ${have ? "keeping the cached bank" : lang in this.o.fallback ? "fallback bank" : "silent"}: ${e.message}`);
+      log30.warn(`bank ${lang}: generation failed \u2014 ${have ? "keeping the cached bank" : lang in this.o.fallback ? "fallback bank" : "silent"}: ${e.message}`);
     } finally {
       clearTimeout(t);
       if (!this.banks.has(lang)) setTimeout(() => this.pending.delete(lang), this.o.retryMs).unref?.();
@@ -13999,7 +14113,7 @@ var ChannelBanks = class {
 };
 
 // src/voice/backchannelPlan.ts
-var log30 = forComponent("BackchannelPlan");
+var log31 = forComponent("BackchannelPlan");
 var TURN_TYPES = ["story", "list", "complaint", "explanation", "short_command", "question", "other"];
 var DENSITIES = ["none", "low", "normal", "high"];
 var silentTurn = (p) => p.density === "none" || p.turn === "short_command" || p.turn === "question";
@@ -14064,13 +14178,13 @@ Reply JSON only: {"turn":"...","density":"...","cues":[{"when":["phrase",...],"l
     const reasoning = /gpt-oss/.test(o.model) ? { providerOptions: { reasoning_effort: "low" } } : {};
     const r = await this.ai.chat({ model: o.model, messages: [{ role: "user", content: prompt }], stream: false, signal, maxTokens: o.maxTokens, ...reasoning });
     const p = parsePlan(r.content ?? "", c.lang);
-    if (!p) log30.debug(`unusable plan: ${(r.content ?? "").slice(0, 120)}`);
+    if (!p) log31.debug(`unusable plan: ${(r.content ?? "").slice(0, 120)}`);
     return p;
   }
 };
 
 // src/voice/secondChannel.ts
-var log31 = forComponent("SecondChannel");
+var log32 = forComponent("SecondChannel");
 var CHANNEL_MODES = {
   turn: { kinds: ["bridge"], bridgeDelayMs: 1500 },
   normal: {},
@@ -14180,13 +14294,13 @@ function withBudget(p, ms, what, ac) {
   let t;
   const late = new Promise((r) => {
     t = setTimeout(() => {
-      log31.debug(`${what}: over the ${ms}ms budget \u2014 dropped`);
+      log32.debug(`${what}: over the ${ms}ms budget \u2014 dropped`);
       ac?.abort();
       r(null);
     }, ms);
   });
   return Promise.race([p.catch((e) => {
-    log31.warn(`${what} failed \u2014 falling back: ${e?.message ?? e}`);
+    log32.warn(`${what} failed \u2014 falling back: ${e?.message ?? e}`);
     return null;
   }), late]).finally(() => clearTimeout(t));
 }
@@ -14258,7 +14372,7 @@ var SecondChannel = class {
     if (host) this.pinned = true;
     const lang = primaryLang(tag);
     if (!lang || lang === this.lang) return;
-    log31.debug(`language ${this.lang} \u2192 ${lang}`);
+    log32.debug(`language ${this.lang} \u2192 ${lang}`);
     this.lang = lang;
     this.recent = [];
     this.picks.clear();
@@ -14279,7 +14393,7 @@ var SecondChannel = class {
     if (o.mode !== "chatty" || o.aec) return o;
     if (!this.degradedLogged) {
       this.degradedLogged = true;
-      log31.info("chatty mode without echo cancellation \u2014 normal timing (our lines would re-trigger the mic)");
+      log32.info("chatty mode without echo cancellation \u2014 normal timing (our lines would re-trigger the mic)");
     }
     return { ...o, ...this.normalTiming };
   }
@@ -14394,7 +14508,7 @@ var SecondChannel = class {
       try {
         this.o.cancel();
       } catch (e) {
-        log31.warn(`cancel threw: ${e.message}`);
+        log32.warn(`cancel threw: ${e.message}`);
       }
     }
   }
@@ -14479,19 +14593,19 @@ var SecondChannel = class {
         const d = await withBudget(this.o.decide(this.tail(), { ...this.state(pauseMs), rule }, ac.signal), this.o.decisionBudgetMs, "channel decision", ac);
         choice = d?.choice;
         if (choice && choice in CHANNEL_ACTIONS && (choice === "silence" || this.allowed(choice))) kind = choice;
-        else if (choice && choice in CHANNEL_ACTIONS) log31.debug(`decider chose ${choice} for a ${rule} moment \u2014 the rule stands`);
+        else if (choice && choice in CHANNEL_ACTIONS) log32.debug(`decider chose ${choice} for a ${rule} moment \u2014 the rule stands`);
       }
       if (kind === "silence") return ev({ choice, acted: "silence" });
       if (stale()) return ev({ choice, kind, acted: "stale" });
       if (!this.allowed(kind)) return ev({ choice, kind, acted: "gated" });
       const react = kind === "backchannel" && this.o.now() - this.lastReactAt >= this.o.reactionGapMs;
-      const text = cue && react && !this.recent.some((r) => norm2(r) === norm2(cue.line)) ? cue.line : await this.line(kind, react);
+      const text = cue && react && !this.recent.some((r) => norm3(r) === norm3(cue.line)) ? cue.line : await this.line(kind, react);
       if (!text) return ev({ choice, kind, acted: "no_bank" });
       if (stale()) return ev({ choice, kind, text, acted: "stale" });
       if (!this.allowed(kind)) return ev({ choice, kind, text, acted: "gated" });
       const said = this.say(kind, text);
       if (said && cue) this.cueFrom = words2(this.heard).length;
-      if (said && kind === "backchannel" && this.o.reactionGapMs && !this.bank?.backchannel.some((b) => norm2(b) === norm2(text))) this.lastReactAt = this.o.now();
+      if (said && kind === "backchannel" && this.o.reactionGapMs && !this.bank?.backchannel.some((b) => norm3(b) === norm3(text))) this.lastReactAt = this.o.now();
       ev({ choice, kind, text, acted: said ? "spoken" : "skipped" });
     } finally {
       this.busy = false;
@@ -14515,8 +14629,8 @@ var SecondChannel = class {
       const raw = await withBudget(this.o.generate(ctx, ac.signal), this.o.generateBudgetMs, `${kind} generate`);
       if (raw === null) ac.abort();
       const text = cleanLine(raw ?? "", this.lang);
-      if (text && !this.recent.some((r) => norm2(r) === norm2(text))) return text;
-      if (text) log31.debug(`generated "${text}" repeats a recent line \u2014 canned`);
+      if (text && !this.recent.some((r) => norm3(r) === norm3(text))) return text;
+      if (text) log32.debug(`generated "${text}" repeats a recent line \u2014 canned`);
     }
     return this.pick(kind);
   }
@@ -14526,8 +14640,8 @@ var SecondChannel = class {
     const pool = this.bank?.[kind] ?? [];
     if (!pool.length) return "";
     const hist = this.picks.get(kind) ?? [];
-    const recent = new Set([...hist.slice(-this.o.bankExclude), ...this.recent].map(norm2));
-    const fresh = pool.filter((x) => !recent.has(norm2(x)));
+    const recent = new Set([...hist.slice(-this.o.bankExclude), ...this.recent].map(norm3));
+    const fresh = pool.filter((x) => !recent.has(norm3(x)));
     const from = fresh.length ? fresh : pool;
     const p = from[Math.floor(this.o.random() * from.length)];
     this.picks.set(kind, [...hist, p].slice(-this.o.bankExclude));
@@ -14538,7 +14652,7 @@ var SecondChannel = class {
     try {
       r = this.o.speak(text, kind);
     } catch (e) {
-      log31.warn(`speak threw \u2014 line dropped: ${e.message}`);
+      log32.warn(`speak threw \u2014 line dropped: ${e.message}`);
       return false;
     }
     if (r === false) return false;
@@ -14550,7 +14664,7 @@ var SecondChannel = class {
     this.o.show(text, kind);
     const p = Promise.resolve(r).then(() => {
     }, (e) => {
-      log31.warn(`channel line playback failed: ${e?.message ?? e}`);
+      log32.warn(`channel line playback failed: ${e?.message ?? e}`);
     }).finally(() => {
       if (this.inflight === p) this.inflight = null;
     });
@@ -14747,7 +14861,7 @@ function applyOverlay(cfg, file) {
 // cli/hooks-config.ts
 import { spawnSync as spawnSync4 } from "child_process";
 init_platform();
-var log32 = forComponent("hooks");
+var log33 = forComponent("hooks");
 var escapeRegex = (s) => s.replace(/[.+^${}()|[\]\\]/g, "\\$&");
 function ruleMatches(rule, toolName) {
   if (!rule.tool || rule.tool === "*") return true;
@@ -14766,7 +14880,7 @@ function runCmd(rule, env) {
     });
     return { code: r.status ?? 1, out: ((r.stdout ?? "") + (r.stderr ?? "")).trim() };
   } catch (e) {
-    log32.debug(`hook command failed: ${rule.command}`, e);
+    log33.debug(`hook command failed: ${rule.command}`, e);
     return { code: 1, out: String(e?.message ?? e) };
   }
 }
@@ -14874,7 +14988,7 @@ import { existsSync as existsSync6, mkdirSync as mkdirSync8, readFileSync as rea
 import { homedir as homedir6 } from "os";
 import { join as join11 } from "path";
 init_platform();
-var log33 = forComponent("session");
+var log34 = forComponent("session");
 var globalDir = () => join11(homedir6(), ".agent", "sessions");
 function indexLink(target, link2) {
   try {
@@ -14937,7 +15051,7 @@ var SessionStore = class {
   }
   load(id) {
     if (!this.safeId(id)) {
-      log33.debug(`rejecting unsafe session id: ${id}`);
+      log34.debug(`rejecting unsafe session id: ${id}`);
       return void 0;
     }
     const path = join11(this.dir, `${id}.json`);
@@ -14945,7 +15059,7 @@ var SessionStore = class {
     try {
       return JSON.parse(readFileSync8(path, "utf8"));
     } catch (e) {
-      log33.debug(`unreadable session ${id} \u2014 ignoring`, e);
+      log34.debug(`unreadable session ${id} \u2014 ignoring`, e);
       return void 0;
     }
   }
@@ -14958,7 +15072,7 @@ var SessionStore = class {
       try {
         metas.push(JSON.parse(readFileSync8(join11(this.dir, f), "utf8")).meta);
       } catch (e) {
-        log33.debug(`skipping unreadable session file ${f}`, e);
+        log34.debug(`skipping unreadable session file ${f}`, e);
       }
     }
     return metas.sort((a, b) => b.updated - a.updated);
@@ -15197,7 +15311,7 @@ import { promisify } from "util";
 import { writeFileSync as writeFileSync6, mkdirSync as mkdirSync9 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join12, resolve as resolve4, sep as sep3, parse as parsePath } from "path";
-var log34 = forComponent("checkpoints");
+var log35 = forComponent("checkpoints");
 var exec = promisify(execFile4);
 var DEFAULT_EXCLUDE = [".agent/", ".git/", "node_modules/", "dist/", "build/", ".next/", "target/", ".venv/", "__pycache__/", "*.log"];
 function isBroadRoot(p) {
@@ -15243,7 +15357,7 @@ var ShadowRepo = class {
       writeFileSync6(join12(this.gitDir, "info", "exclude"), this.exclude.join("\n") + "\n");
       this.ready = true;
     } catch (e) {
-      log34.debug(`git checkpoints unavailable for ${this.workTree}`, e);
+      log35.debug(`git checkpoints unavailable for ${this.workTree}`, e);
       this.ready = false;
     }
     return this.ready;
@@ -15254,7 +15368,7 @@ var ShadowRepo = class {
   }
   async commit(label, forced = []) {
     await this.run("add", "-A");
-    for (const p of forced) await this.run("add", "-f", "--", p).catch((e) => log34.debug(`force-add failed: ${p}`, e));
+    for (const p of forced) await this.run("add", "-f", "--", p).catch((e) => log35.debug(`force-add failed: ${p}`, e));
     await this.run("commit", "--allow-empty", "-q", "-m", label);
   }
   /** Inject the CURRENT (pre-edit) content of `paths` into the turn-open restore point by amending it.
@@ -15262,8 +15376,8 @@ var ShadowRepo = class {
    *  turn-boundary `add -A` would never have captured it. Amend (vs a new commit) keeps one restore
    *  point per turn, so the REPL's turn↔frame mapping stays intact. */
   async amendForced(paths) {
-    for (const p of paths) await this.run("add", "-f", "--", p).catch((e) => log34.debug(`force-capture failed: ${p}`, e));
-    await this.run("commit", "--amend", "--no-edit", "-q", "--allow-empty").catch((e) => log34.debug("amend failed", e));
+    for (const p of paths) await this.run("add", "-f", "--", p).catch((e) => log35.debug(`force-capture failed: ${p}`, e));
+    await this.run("commit", "--amend", "--no-edit", "-q", "--allow-empty").catch((e) => log35.debug("amend failed", e));
   }
   /** Commits on `ref`, oldest-first (canonical index space). */
   async log(ref) {
@@ -15323,7 +15437,7 @@ var ShadowRepo = class {
       await this.run("gc", "--auto", "-q").catch(() => {
       });
     } catch (e) {
-      log34.debug("checkpoint prune failed", e);
+      log35.debug("checkpoint prune failed", e);
     }
   }
 };
@@ -15391,7 +15505,7 @@ var GitCheckpoints = class {
   use(sessionId) {
     if (sessionId === this.session) return;
     this.session = sessionId;
-    if (this.started) for (const r of this.repos) void r.point(this.ref()).catch((e) => log34.debug("re-point failed", e));
+    if (this.started) for (const r of this.repos) void r.point(this.ref()).catch((e) => log35.debug("re-point failed", e));
   }
   async begin(label) {
     if (!await this.start()) return;
@@ -15411,7 +15525,7 @@ var GitCheckpoints = class {
           process.stderr.write(`\x1B[2m  checkpoints: '${this.repos[i].root}' too large to snapshot in ${Math.round(this.options.opTimeoutMs / 1e3)}s \u2014 file rewind disabled here\x1B[0m
 `);
         } else {
-          log34.debug("checkpoint commit failed", e);
+          log35.debug("checkpoint commit failed", e);
           survivors.push(this.repos[i]);
           survivorCaches.push(this.caches[i] ?? []);
         }
@@ -15446,7 +15560,7 @@ var GitCheckpoints = class {
           if (this.forced.has(abs)) continue;
           this.forced.add(abs);
           const i = this.repoIndexFor(abs);
-          if (i >= 0) await this.repos[i].amendForced([abs]).catch((e) => log34.debug("amendForced failed", e));
+          if (i >= 0) await this.repos[i].amendForced([abs]).catch((e) => log35.debug("amendForced failed", e));
         }
       }
     };
@@ -17231,7 +17345,7 @@ import { spawnSync as spawnSync6 } from "child_process";
 import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync10, readdirSync as readdirSync2, unlinkSync as unlinkSync3, chmodSync, existsSync as existsSync7 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join14 } from "path";
-var log35 = forComponent("os-sched");
+var log36 = forComponent("os-sched");
 var OsScheduler = class {
   options;
   constructor(options) {
@@ -17293,7 +17407,7 @@ var OsScheduler = class {
         }
       }
     } catch (e) {
-      log35.debug(`cancel ${id}`, e);
+      log36.debug(`cancel ${id}`, e);
     }
     for (const f of [`${id}.json`, `${id}.sh`]) {
       try {
@@ -17411,7 +17525,7 @@ import { existsSync as existsSync8, mkdirSync as mkdirSync11, unlinkSync as unli
 import { homedir as homedir9 } from "os";
 import { join as join15 } from "path";
 init_platform();
-var log36 = forComponent("remote-trigger");
+var log37 = forComponent("remote-trigger");
 var TRIGGER_DIR = () => join15(homedir9(), ".agent", "triggers");
 var sockPath = (sessionId, dir = TRIGGER_DIR()) => join15(dir, `${sessionId}.sock`);
 var TriggerServer = class {
@@ -17449,13 +17563,13 @@ var TriggerServer = class {
             conn.end(JSON.stringify({ ok: false, error: String(e) }) + "\n");
           }
         });
-        conn.on("error", (e) => log36.debug("trigger conn error", e));
+        conn.on("error", (e) => log37.debug("trigger conn error", e));
       });
-      this.server.on("error", (e) => log36.debug("trigger server error", e));
+      this.server.on("error", (e) => log37.debug("trigger server error", e));
       this.server.listen(p);
       this.path = p;
     } catch (e) {
-      log36.debug("trigger server unavailable", e);
+      log37.debug("trigger server unavailable", e);
     }
   }
   /** Re-bind on /resume (the session id changed). */
@@ -17587,7 +17701,7 @@ var strike = C("9");
 var link = (text, url) => useColor ? `\x1B]8;;${url}\x1B\\${cyan(text)}\x1B]8;;\x1B\\` : `${text} (${url})`;
 var mdPalette = { bold, dim, cyan, italic, strike, green, link };
 var err = (s) => process.stderr.write(s);
-var log37 = forComponent("cli");
+var log38 = forComponent("cli");
 var VERSION = (() => {
   try {
     return JSON.parse(readFileSync10(new URL("../package.json", import.meta.url), "utf8")).version ?? "?";
@@ -18436,7 +18550,7 @@ function turnCost(model, usage) {
   const priced = model.startsWith("claude-code/") ? `anthropic/${resolveModelAlias(model.slice("claude-code/".length))}` : model;
   return costOf(getModelInfo(priced)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0, priced);
 }
-async function evaluateGoal(ai, condition, transcript, log38) {
+async function evaluateGoal(ai, condition, transcript, log39) {
   const recent = transcript.filter((m) => m.role === "assistant").slice(-8).map((m) => {
     const text = typeof m.content === "string" ? m.content : m.content.filter((p) => p.type === "text").map((p) => p.text).join(" ");
     return text.slice(0, 600);
@@ -18456,7 +18570,7 @@ ${recent}` }
     const match = r.content.match(/\{[\s\S]*\}/);
     if (match) return JSON.parse(match[0]);
   } catch (e) {
-    log38(dim(`  (goal evaluator error: ${e?.message ?? e})
+    log39(dim(`  (goal evaluator error: ${e?.message ?? e})
 `));
   }
   return { met: false, reason: "evaluation unclear" };
@@ -18682,7 +18796,7 @@ function mcpAgentTools(mounted, opts) {
   return tools;
 }
 async function closeMcp(mounted) {
-  await Promise.all(mounted.map((m) => m.client.close().catch((e) => log37.debug("mcp close failed", e))));
+  await Promise.all(mounted.map((m) => m.client.close().catch((e) => log38.debug("mcp close failed", e))));
 }
 var IMG_EXT = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".gif": "image/gif", ".webp": "image/webp" };
 function mentionRefs(line) {
@@ -18741,7 +18855,7 @@ async function expandMentions(fs, line) {
     if (loaded.includes(ref) || missing.includes(ref)) continue;
     if (ref.includes(":") && mcpMentionResolver) {
       const body = await mcpMentionResolver(ref).catch((e) => {
-        log37.debug("mcp mention resolve failed", e);
+        log38.debug("mcp mention resolve failed", e);
         return null;
       });
       if (body != null) {
@@ -18832,7 +18946,7 @@ async function runTurn(agent, store, session, task, cp, cwd = process.cwd(), sen
       try {
         store.save(session);
       } catch (ex) {
-        log37.debug("mid-turn session flush failed", ex);
+        log38.debug("mid-turn session flush failed", ex);
       }
     }
     return origNotify(e);
@@ -18996,14 +19110,14 @@ var isCancelTeardown = (e) => {
 function installCancelGuards(mounted) {
   process.on("unhandledRejection", (e) => {
     if (isCancelTeardown(e)) {
-      log37.debug("suppressed unhandledRejection (cursor stream cancel)", e);
+      log38.debug("suppressed unhandledRejection (cursor stream cancel)", e);
       return;
     }
-    log37.error("unhandledRejection", e);
+    log38.error("unhandledRejection", e);
   });
   process.on("uncaughtException", (e) => {
     if (isCancelTeardown(e)) {
-      log37.debug("suppressed uncaughtException (cursor stream cancel)", e);
+      log38.debug("suppressed uncaughtException (cursor stream cancel)", e);
       return;
     }
     console.error(e);
@@ -19067,6 +19181,7 @@ async function repl(args, ai, cfg, cwd) {
   const decider = duplex ? leakDecider() : void 0;
   const instinct = decider && process.env.VOICE_INSTINCT === "1" ? new Instinct({
     decider,
+    overlapModel: overlapModelFor(ai),
     context: () => ({ agentSaid: dx?.recentExcerpt(1).replace(/^\w+: /, ""), recent: dx?.recentExcerpt(4) }),
     onDecision: ({ kind, ...d }) => {
       voiceDiag?.push({ t: performance.now(), kind: `instinct_${kind}`, ...d });
@@ -19432,7 +19547,7 @@ async function repl(args, ai, cfg, cwd) {
     try {
       mkdirSync12(dir, { recursive: true });
     } catch (e) {
-      log37.debug("paste image dir create failed", e);
+      log38.debug("paste image dir create failed", e);
     }
     const img = grabClipboardImage(dir, String(Date.now()));
     return img ? { display: "Image", ref: "@" + img.path, path: img.path } : null;
@@ -19545,7 +19660,7 @@ Added entries are loadable now via the Skill/SlashCommand tools; removed ones ar
       mkdirSync12(join16(cwd, ".agent"), { recursive: true });
       appendFileSync(histPath, line + "\n");
     } catch (e) {
-      log37.debug("history write failed", e);
+      log38.debug("history write failed", e);
     }
   };
   const ago = (t) => {
@@ -19617,7 +19732,7 @@ Added entries are loadable now via the Skill/SlashCommand tools; removed ones ar
       try {
         store.save(session);
       } catch (e) {
-        log37.debug("session save after rewind failed", e);
+        log38.debug("session save after rewind failed", e);
       }
       err(green("  \u27F2 jumped back") + dim(` \u2014 ${face.transcript.length} message(s) kept; edit + resend
 `));
@@ -19652,7 +19767,7 @@ ${task}`;
       bangContext.length = 0;
     }
     const delta = await refreshCatalogs().catch((e) => {
-      log37.debug("catalog refresh failed", e);
+      log38.debug("catalog refresh failed", e);
       return "";
     });
     if (delta) {
@@ -19915,7 +20030,7 @@ ${task}`;
       desc: "rescan skills/commands dirs and rebuild the system prompt (one cache miss) \u2014 picks up entries created mid-session",
       run: async () => {
         await refreshCatalogs().catch((e) => {
-          log37.debug("catalog refresh failed", e);
+          log38.debug("catalog refresh failed", e);
         });
         face.reprepare();
         err(green(`  \u2713 reloaded \u2014 ${skills.length} skill(s), ${cmds.length} command(s); system prompt rebuilds on next message
@@ -20418,7 +20533,7 @@ ${task}`;
           try {
             for (const def of (await loadAgents(fs2, d)).agents) if (!seen.has(def.name)) seen.set(def.name, { def, from: d });
           } catch (e) {
-            log37.debug(`loadAgents(${d}) failed`, e);
+            log38.debug(`loadAgents(${d}) failed`, e);
           }
         }
         if (!seen.size) {
@@ -20506,7 +20621,7 @@ ${task}`;
           }
           if (idx >= 0) {
             const old = mounted.splice(idx, 1)[0];
-            await old.client.close().catch((e) => log37.debug("mcp close failed", e));
+            await old.client.close().catch((e) => log38.debug("mcp close failed", e));
           }
           try {
             const m = await mountMcpServer(name, conf);
@@ -20534,7 +20649,7 @@ ${task}`;
           }
           const m = mounted.splice(idx, 1)[0];
           remountMcpTools();
-          await m.client.close().catch((e) => log37.debug("mcp close failed", e));
+          await m.client.close().catch((e) => log38.debug("mcp close failed", e));
           err(dim(`  removed "${name}"
 `));
           return;
@@ -20737,7 +20852,7 @@ ${task}`;
     try {
       return readdirSync4(join16(cwd, absDir.replace(/^\/+/, "")), { withFileTypes: true }).map((d) => ({ name: d.name, dir: d.isDirectory() }));
     } catch (e) {
-      log37.debug("completion readdir failed", absDir, e);
+      log38.debug("completion readdir failed", absDir, e);
       return null;
     }
   };
@@ -20874,7 +20989,7 @@ ${out}
         return;
       }
       await refreshCatalogs().catch((e) => {
-        log37.debug("catalog refresh failed", e);
+        log38.debug("catalog refresh failed", e);
       });
       const sk = skills.find((x) => x.name === name);
       if (sk) {
@@ -20993,7 +21108,7 @@ ${out}
         if (delivery || cut) dx?.parkCutDelivery(delivery, !!cut, heard);
         const cutReply = cut && cut.full.length - cut.heard.length > 40 ? cut : null;
         const noteP = replaces ? replaces.note : !cutReply ? Promise.resolve("") : (instinct ? instinct.bargeIntent(text).catch((e) => {
-          log37.warn(`barge intent failed \u2014 model decides: ${e.message}`);
+          log38.warn(`barge intent failed \u2014 model decides: ${e.message}`);
           return void 0;
         }) : Promise.resolve(void 0)).then(async (intent) => interruptionNote(cutReply, intent) + ackedNote(await instinct?.ackFor(text)));
         const cutIn = replaces ? replaces.cutIn : interjectNote;
@@ -21013,6 +21128,10 @@ ${out}
         }).finally(() => editorRef?.redrawNow());
       }
     });
+    if (!instinct && decider && args.duplexV2 && softBarge(args.channelMode)) {
+      const v = voiceIO;
+      bindOverlapInstinct(v, new Instinct({ decider, overlapModel: overlapModelFor(ai) }), () => voiceIO === v);
+    }
     if (instinct) {
       const v = voiceIO, o = v.options;
       const { onPartial } = o;
@@ -21023,7 +21142,7 @@ ${out}
         if (listening()) instinct.hear(text);
         onPartial(text);
       };
-      bindOverlapInstinct(v, instinct, () => voiceIO === v);
+      if (!args.duplexV2 || softBarge(args.channelMode)) bindOverlapInstinct(v, instinct, () => voiceIO === v);
       bindAckInstinct(v, instinct);
       o.onUtterance = (text, meta) => {
         instinct.reset();
@@ -21362,10 +21481,17 @@ function makeSecondChannel(ai, reflexModel, mode = "normal", opts) {
     // Anticipated backchannels: on in chatty mode (its preset), else off until the offline replay proves them (tests/voice-bc-anticipate-eval.ts)
     plan: (c, s) => planner.plan(c, s),
     ...process.env.AGENTX_CHANNEL_ANTICIPATE === "1" ? { anticipate: true } : {},
-    onEvent: (e) => log37.debug(`channel ${e.trigger}: rule=${e.rule} choice=${e.choice ?? "-"} \u2192 ${e.acted}${e.text ? ` "${e.text}"` : ""}${e.cue ? " (planned cue)" : ""} ${e.ms}ms`),
+    onEvent: (e) => log38.debug(`channel ${e.trigger}: rule=${e.rule} choice=${e.choice ?? "-"} \u2192 ${e.acted}${e.text ? ` "${e.text}"` : ""}${e.cue ? " (planned cue)" : ""} ${e.ms}ms`),
     ...opts
   });
 }
+function overlapResponder(ai, mode, out) {
+  const judge = softBarge(mode) ? new OverlapJudge({ model: overlapModelFor(ai) }) : void 0;
+  return (m) => {
+    const text = String(m.text ?? "");
+    void (judge ? judge.judge(text) : Promise.resolve({ verdict: "cut", by: "mode", ms: 0 })).then((d) => out({ type: "overlap", ...m.id !== void 0 ? { id: m.id } : {}, verdict: d.verdict, by: d.by, ms: d.ms }));
+  };
+}
 async function duplexServe(args, ai, cfg, cwd) {
   const out = (o) => process.stdout.write(JSON.stringify(o) + "\n");
   const mounted = await mountMcp(cfg, new McpOAuth({ storePath: join16(cwd, ".agent", "mcp-auth.json") }));
@@ -21424,10 +21550,11 @@ async function duplexServe(args, ai, cfg, cwd) {
     try {
       store.save(session);
     } catch (e) {
-      log37.warn("duplex session save failed", e);
+      log38.warn("duplex session save failed", e);
     }
   };
-  out({ type: "ready", sessionId: session.meta.id, reflexModel: dx.options.reflexModel, actModel: dx.options.actModel, ...notes.length ? { notes } : {} });
+  const overlap2 = overlapResponder(ai, args.duplexV2 ? args.channelMode : void 0, out);
+  out({ type: "ready", sessionId: session.meta.id, reflexModel: dx.options.reflexModel, actModel: dx.options.actModel, softBarge: softBarge(args.duplexV2 ? args.channelMode : void 0), ...notes.length ? { notes } : {} });
   const done = new Promise((resolveDone) => {
     const rl = createInterface({ input: process.stdin });
     rl.on("line", (line) => {
@@ -21442,7 +21569,8 @@ async function duplexServe(args, ai, cfg, cwd) {
         dx.userActive();
         activeTurn?.abort();
         dx.parkInFlightDeliveries();
-      } else if (sc && channelInput(sc, m)) {
+      } else if (m.type === "overlap") overlap2(m);
+      else if (sc && channelInput(sc, m)) {
         if (m.type === "interim" && String(m.text ?? "").trim()) dx.userActive();
       } else if (m.type === "cancel") out({ type: "task", kind: "cancel_result", id: m.task, message: dx.cancelTask(String(m.task)) });
       else if (m.type === "exit") rl.close();
@@ -21462,7 +21590,7 @@ async function duplexServe(args, ai, cfg, cwd) {
           done2();
           out({ type: "turn_done", id, finishReason: res?.finishReason ?? "error", ...why ? { error: why } : {} });
         }).catch((e) => {
-          log37.error("duplex turn failed", e);
+          log38.error("duplex turn failed", e);
           done2();
           out({ type: "turn_done", id, finishReason: "error", error: String(e?.message ?? e) });
         });
@@ -21481,7 +21609,8 @@ async function channelServe(args, ai, cfg) {
   const { reflexModel, notes } = duplexModels({ voiceModel: args.voiceModel, reflexModel: cfg.reflexModel, thinkModel: false, actModel: String(args.model ?? cfg.model ?? ""), apiKeys: { ...cfg.apiKeys, ...apiKeysFromEnv() } });
   const model = reflexModel ?? new DuplexAgentOptions().reflexModel;
   const sc = makeSecondChannel(ai, model, args.channelMode, { show: (text, kind) => out({ type: "channel", kind, text }) });
-  out({ type: "ready", model, channelMode: args.channelMode, ...notes.length ? { notes } : {} });
+  const overlap2 = overlapResponder(ai, args.channelMode, out);
+  out({ type: "ready", model, channelMode: args.channelMode, softBarge: softBarge(args.channelMode), ...notes.length ? { notes } : {} });
   const rl = createInterface({ input: process.stdin });
   rl.on("line", (line) => {
     let m;
@@ -21494,6 +21623,7 @@ async function channelServe(args, ai, cfg) {
     if (m.type === "user" && typeof m.text === "string") sc.onUserTurn(m.text);
     else if (m.type === "text" && typeof m.text === "string") sc.onMainTokens(m.text);
     else if (m.type === "barge") sc.onBargeIn();
+    else if (m.type === "overlap") overlap2(m);
     else if (m.type === "exit") rl.close();
   });
   await new Promise((r) => rl.on("close", () => r()));