@livx.cc/agentx 0.99.57 → 0.99.59

package/dist/cli.js

@@ -2561,7 +2561,7 @@ async function psGroupCpuSeconds(pgid) {
     const out = await new Promise((res, rej) => execFile4("ps", ["-A", "-o", "pid=,ppid=,pgid=,time="], { timeout: 5e3, env: { ...process.env, LC_ALL: "C" } }, (e, so) => e ? rej(e) : res(String(so))));
     return sumTreeCpu(out, pgid);
   } catch (e) {
-    log17.debug(`ps cpu probe failed for group ${pgid}: ${e}`);
+    log23.debug(`ps cpu probe failed for group ${pgid}: ${e}`);
     return void 0;
   }
 }
@@ -2693,7 +2693,7 @@ function makeRealShellTool(options) {
               proc.stdout?.off?.("data", collect);
               proc.stderr?.off?.("data", collect);
               const id = registry.adopt(cmd, proc, out);
-              finish(handoffFor(timeoutMs, id, clean(out), !!registry.notifiesOnExit));
+              finish(handoffFor(timeoutMs, id, clean2(out), !!registry.notifiesOnExit));
             };
           }
           const collect = (chunk) => {
@@ -2708,14 +2708,14 @@ function makeRealShellTool(options) {
           proc.stdout?.on("data", collect);
           proc.stderr?.on("data", collect);
           proc.on("error", (err2) => {
-            if (err2?.name === "AbortError" || ctl.signal.aborted) return finish(reasonFor(timedOut, timeoutMs, clean(out)));
-            log17.debug("shell spawn error", err2);
-            finish(`[exit 1] ${err2?.message ?? err2}${out ? "\n" + clean(out) : ""}`);
+            if (err2?.name === "AbortError" || ctl.signal.aborted) return finish(reasonFor(timedOut, timeoutMs, clean2(out)));
+            log23.debug("shell spawn error", err2);
+            finish(`[exit 1] ${err2?.message ?? err2}${out ? "\n" + clean2(out) : ""}`);
           });
           proc.on("close", (code) => {
             flushEmit(ctx);
-            if (ctl.signal.aborted) return finish(reasonFor(timedOut, timeoutMs, clean(out)));
-            const body = clean(out);
+            if (ctl.signal.aborted) return finish(reasonFor(timedOut, timeoutMs, clean2(out)));
+            const body = clean2(out);
             if (code && code !== 0) return finish(`[exit ${code}]${body ? "\n" + body : ""}`);
             finish(body || "(command succeeded, no output)");
           });
@@ -2754,7 +2754,7 @@ function makeShellJobTools(registry) {
         if (out == null) return NO_JOB2(String(id));
         const st = registry.status(String(id));
         return `[${st.status}${st.exitCode != null ? ` exit ${st.exitCode}` : ""}${st.reason ? `: ${st.reason}` : ""}]
-${clean(out) || "(no output yet)"}`;
+${clean2(out) || "(no output yet)"}`;
       }
     },
     {
@@ -2782,7 +2782,7 @@ ${clean(out) || "(no output yet)"}`;
     }
   ];
 }
-var log17, clean, DETACHED, SECRET_ENV_RE, _spawn, ShellJobRegistry, shellStatus, NO_JOB2;
+var log23, clean2, DETACHED, SECRET_ENV_RE, _spawn, ShellJobRegistry, shellStatus, NO_JOB2;
 var init_tools_shell = __esm({
   "src/tools.shell.ts"() {
     "use strict";
@@ -2791,8 +2791,8 @@ var init_tools_shell = __esm({
     init_logging();
     init_shell_sandbox();
     init_tools_jobs();
-    log17 = forComponent("shell");
-    clean = (s) => truncateOutput(redactSecrets(s.replace(/\n+$/, "")));
+    log23 = forComponent("shell");
+    clean2 = (s) => truncateOutput(redactSecrets(s.replace(/\n+$/, "")));
     DETACHED = { stdio: ["ignore", "pipe", "pipe"], detached: true };
     SECRET_ENV_RE = /(_API_KEY|_TOKEN|_SECRET|_PASSWORD|_PRIVATE_KEY|^AWS_|^GITHUB_TOKEN$|^OPENAI_|^ANTHROPIC_|^GOOGLE_|^GEMINI_|^GROQ_|^NPM_TOKEN$)/i;
     ShellJobRegistry = class {
@@ -2877,7 +2877,7 @@ var init_tools_shell = __esm({
       notifyExit(id, meta, status, reason) {
         if (!this.cfg.onExit || status === "killed" && !reason?.startsWith("stuck")) return;
         try {
-          this.cfg.onExit({ id, command: meta.command, status: shellStatus(status), exitCode: meta.exitCode, tail: clean(this.jobs.output(id) ?? "").slice(-4e3), ...reason && status !== "done" ? { reason } : {} });
+          this.cfg.onExit({ id, command: meta.command, status: shellStatus(status), exitCode: meta.exitCode, tail: clean2(this.jobs.output(id) ?? "").slice(-4e3), ...reason && status !== "done" ? { reason } : {} });
         } catch {
         }
       }
@@ -2939,7 +2939,7 @@ var init_tools_shell = __esm({
 
 // cli/cli.ts
 import { createInterface } from "readline/promises";
-import { existsSync as existsSync9, readFileSync as readFileSync9, appendFileSync, mkdirSync as mkdirSync12, writeFileSync as writeFileSync9, readdirSync as readdirSync4, statSync as statSync5, unlinkSync as unlinkSync5 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync9, appendFileSync, mkdirSync as mkdirSync12, writeFileSync as writeFileSync9, readdirSync as readdirSync4, statSync as statSync6, unlinkSync as unlinkSync5 } from "fs";
 import { homedir as homedir10 } from "os";
 import { spawnSync as spawnSync6 } from "child_process";
 
@@ -3009,7 +3009,7 @@ function copyTextToClipboard(text, platform2 = process.platform) {
 
 // cli/cli.ts
 import { join as join14, resolve as resolve4, basename as basename2, extname, dirname as dirname5 } from "path";
-import { AIClient, listModels, listProviders, getProviderFromModel, getModelInfo, resolveModel, isModelSupported, disposeCursorSessions, disposeClaudeCodeSessions } from "ai.libx.js";
+import { AIClient, DecideClient, listModels, listProviders, getProviderFromModel, getModelInfo, resolveModel, isModelSupported, disposeCursorSessions, disposeClaudeCodeSessions } from "ai.libx.js";
 
 // src/Agent.ts
 init_llm();
@@ -3571,6 +3571,7 @@ function resolveModelAlias(input) {
   const slash = input.indexOf("/");
   const prefix = slash === -1 ? "" : input.slice(0, slash + 1);
   const rest = slash === -1 ? input : input.slice(slash + 1);
+  if (prefix === "claude-code/") return input;
   return prefix + (MODEL_ALIASES[rest.toLowerCase()] ?? rest);
 }
 function modelProvider(model) {
@@ -5524,14 +5525,14 @@ function summarize(messages, focus) {
   if (lastAssistant) lines.push(`last assistant: ${lastAssistant}`);
   if (carried.length) lines.push("earlier recap:", ...carried.map((l) => `  ${l}`));
   if (focus?.trim()) {
-    const words = focus.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
+    const words2 = focus.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
     const kept = [];
     const ordered = [...messages.filter((m) => !isSyntheticSummary(m)), ...messages.filter(isSyntheticSummary)];
     outer: for (const msg of ordered) {
       if (msg.role === "tool") continue;
       for (const line of contentText(msg.content).split("\n")) {
         const l = line.toLowerCase();
-        if (line.trim() && words.some((w) => l.includes(w))) {
+        if (line.trim() && words2.some((w) => l.includes(w))) {
           kept.push(line.trim().slice(0, 200));
           if (kept.length >= 12) break outer;
         }
@@ -6489,6 +6490,130 @@ var EmotionStream = class {
   }
 };
 
+// node_modules/@bod.ee/voice/src/core/endpointing.ts
+var INCOMPLETE_ENDINGS = /* @__PURE__ */ new Set([
+  // Conjunctions
+  "and",
+  "but",
+  "or",
+  "so",
+  "because",
+  "although",
+  "though",
+  "while",
+  "since",
+  "unless",
+  "if",
+  "when",
+  "where",
+  // Prepositions
+  "to",
+  "for",
+  "with",
+  "about",
+  "of",
+  "at",
+  "in",
+  "on",
+  "from",
+  "by",
+  "into",
+  "through",
+  // Articles / determiners
+  "the",
+  "a",
+  "an",
+  "this",
+  "that",
+  "these",
+  "those",
+  "my",
+  "your",
+  "his",
+  "her",
+  "our",
+  "their",
+  // Bare pronouns ("…as I asked it" — the live case above)
+  "i",
+  "you",
+  "we",
+  "they",
+  "he",
+  "she",
+  "it",
+  // Fillers (thinking)
+  "um",
+  "uh",
+  "like",
+  "well"
+]);
+var CONTINUATION_MARKERS = [
+  "you know",
+  "i mean",
+  "the thing is",
+  "let me think",
+  "first of all",
+  "on one hand",
+  "for example"
+];
+var COMPLETE_ENDINGS = /* @__PURE__ */ new Set([
+  "yeah",
+  "yes",
+  "no",
+  "nah",
+  "okay",
+  "ok",
+  "sure",
+  "right",
+  "thanks",
+  "bye",
+  "absolutely",
+  "definitely",
+  "exactly",
+  "correct",
+  "true",
+  "false"
+]);
+function isTranscriptComplete(text) {
+  const trimmed = text.trim();
+  if (!trimmed) return false;
+  if (/[.?!]$/.test(trimmed)) return true;
+  const words2 = trimmed.toLowerCase().split(/\s+/);
+  const lastWord = words2[words2.length - 1];
+  if (COMPLETE_ENDINGS.has(lastWord)) return true;
+  if (INCOMPLETE_ENDINGS.has(lastWord)) return false;
+  const lower = trimmed.toLowerCase();
+  for (const marker of CONTINUATION_MARKERS) if (lower.endsWith(marker)) return false;
+  if (words2.length <= 2) return false;
+  return true;
+}
+var MAX_HOLD_MS = 2e3;
+var MIN_MERGE_HOLD_MS = 800;
+function endpointTier(transcript) {
+  const t = transcript.trim();
+  if (!isTranscriptComplete(t)) return 1;
+  return /[.?!]$/.test(t) ? 3 : 2;
+}
+function tierHoldMs(tier, ctx) {
+  if (tier === 1) return ctx.incompleteMs;
+  if (tier === 2) return Math.round((ctx.baseMs + ctx.incompleteMs) / 2);
+  return ctx.baseMs;
+}
+function computeHoldMs(ctx) {
+  const t = ctx.transcript.trim();
+  const tier = endpointTier(t);
+  let ms = tierHoldMs(tier, ctx);
+  const ai = ctx.lastAiMessage?.trim();
+  if (ai) {
+    if (/\?$/.test(ai)) ms -= 300;
+    if (ai.split(/\s+/).length > 60) ms += 400;
+  }
+  const lastWord = t.toLowerCase().split(/\s+/).pop();
+  if (lastWord === "um" || lastWord === "uh" || lastWord === "hmm") ms += 500;
+  const floor = tier === 3 ? ctx.baseMs : Math.max(ctx.baseMs, Math.min(tierHoldMs(tier, ctx), MIN_MERGE_HOLD_MS));
+  return Math.max(floor, Math.min(MAX_HOLD_MS, ms));
+}
+
 // node_modules/@bod.ee/voice/src/core/engine.ts
 var log12 = forComponent2("VoiceEngine");
 var realClock = {
@@ -6497,7 +6622,7 @@ var realClock = {
   clearTimeout: (h) => clearTimeout(h)
 };
 var forSpeech = (t) => t.replace(/[*`#]+/g, "").replace(/(?<![\p{L}\p{N}])_([^_\n]+)_(?![\p{L}\p{N}])/gu, "$1").replace(/^[ \t]*[-•]\s+/gm, "").replace(/\s*[\u2013\u2014]\s*/g, ", ").replace(/[\u2010\u2011]/g, "-").replace(/\s*\|\s*/g, ", ").replace(/(\d)\s+%/g, "$1%").replace(/\.{3,}/g, ".");
-var normWord = (w) => w.toLowerCase().replace(/[^a-z0-9]/g, "");
+var normWord = (w) => w.toLowerCase().replace(/[^\p{L}\p{M}\p{N}]/gu, "");
 var SPEC_TRAILING_OK = /* @__PURE__ */ new Set(["please", "thanks", "thank", "you", "now", "okay", "ok", "kindly", "alright", "then", "though", "right", "yeah"]);
 function speculationConfirms(spec, final) {
   const sw = spec.trim().split(/\s+/).map(normWord).filter(Boolean);
@@ -6508,11 +6633,27 @@ function speculationConfirms(spec, final) {
   for (let i = sw.length; i < fw.length; i++) if (!SPEC_TRAILING_OK.has(fw[i])) return false;
   return true;
 }
+function heardPrefix(text, spoken, lookahead = 4) {
+  const toks = [...text.matchAll(/\S+/g)];
+  let i = 0, at = 0;
+  for (const w of spoken) {
+    const nw = normWord(w);
+    if (!nw) continue;
+    for (let k = i; k < Math.min(toks.length, i + lookahead); k++)
+      if (normWord(toks[k][0]) === nw) {
+        at = toks[k].index;
+        i = k + 1;
+        break;
+      }
+  }
+  return at;
+}
 var VoiceEngineOptions = class {
   stt;
   tts;
   player;
-  /** a final utterance arrived (endpoint) — host dispatches it as a turn */
+  /** a final utterance arrived (endpoint) — host dispatches it as a turn. `meta.supersedes` marks a fuller
+   *  re-finalization of the utterance dispatched just before it: replace that turn, don't add one. */
   onUtterance = () => {
   };
   /** live partial transcript while listening (host renders the 🎤 line) */
@@ -6520,6 +6661,14 @@ var VoiceEngineOptions = class {
   };
   onState = () => {
   };
+  /** The assistant's spoken turn finished AUDIBLY — every TTS chunk arrived AND playback drained.
+   *  Fires from the same `settle()` that returns the engine to 'listening', just before that state
+   *  change. Distinct from the host's `endSpeech()`, which only closes the TEXT stream (audio is
+   *  still playing at that point). NOT fired for a turn cut by barge-in — the host gets `onBargeIn`
+   *  instead. Also fires for engine-internal speech (adaptive ack, filler, queued utterances), so a
+   *  host that only cares about ITS turns should gate on its own open-turn flag. Default no-op. */
+  onSpeechEnd = () => {
+  };
   /** user spoke/acted over playback — host aborts the in-flight turn (called AFTER audio is killed).
    *  phase: 'speaking' = cut mid-speech (real interruption); 'drain' = in the final audio tail
    *  (normal turn-taking — hosts shouldn't alarm). */
@@ -6534,6 +6683,14 @@ var VoiceEngineOptions = class {
   /** the adaptive ack actually fired (host can mark the turn as spoken — e.g. suppress dead-air repair) */
   onAdaptiveAck = () => {
   };
+  /** HOST-CHOSEN adaptive ack: asked once per armed ack (at beginSpeech(true), i.e. at dispatch) so a slow pick
+   *  runs in parallel with the reflex. Return the phrase to speak, or `null` = stay silent this turn. A Promise
+   *  still pending when the ack is due gets up to another `adaptiveAckMs` (then the turn stays silent — a wrong
+   *  ack is worse than none); a rejection falls back to the default pools. Unset (null) = the engine's own
+   *  shape-picked pools (ACKS_NEUTRAL / ACKS_QUESTION). Phrases enter the echo set like the defaults — keep them
+   *  short and not a lone word users say on their own ("okay", "yeah"): the ack-squash guard drops a user
+   *  utterance that equals the last ack. */
+  pickAck = null;
   /** Endpoint merge window (ms): hold an endpointed utterance briefly — if speech resumes (spelled
    *  letters, mid-thought pauses), the next utterance MERGES instead of dispatching a truncated one
    *  ("E-L-Y." / "A."). Costs this much latency per turn; 0 disables. */
@@ -6541,6 +6698,21 @@ var VoiceEngineOptions = class {
   /** Extended merge window (ms) for utterances that look incomplete (trailing conjunction/filler).
    *  Gives the user time to finish their thought without triggering a model call. */
   incompleteMergeMs = 1500;
+  /** ADAPTIVE endpoint hold (opt-in; default OFF = today's byte-identical two-tier behavior).
+   *  The fixed merge tiers (`utteranceMergeMs` vs `incompleteMergeMs`, chosen by a trailing-word
+   *  regex, and skipped entirely at ≥4 words) dispatch mid-thought FRAGMENTS as their own turn: live,
+   *  "…give me the best" dispatched, got an empty reply, and "…give me the best of it." arrived 766ms
+   *  later as a second turn. When true, every endpointed utterance is held for
+   *  `computeHoldMs(...)` — sized by linguistic completeness, whether the STT emitted a sentence-final
+   *  mark, and what the assistant last said — so the continuation MERGES instead of burning a turn.
+   *  COST — this is strictly slower than the default path, never faster: today every ≥4-word utterance
+   *  dispatches at 0ms (the fast path below), so adaptive ADDS the whole hold — ~350ms to every
+   *  sentence-final utterance, ~925ms to every complete-looking unpunctuated one (the common case),
+   *  and up to 2s on a mid-thought fragment. Paid on turns that didn't need it, to stop burning a turn
+   *  (empty reply + blank bubble) on the ones that did — hence opt-in. Also changes `onHold` timing:
+   *  it now fires on every tier-2/3 hold, not only on `looksIncomplete` (`holdFiller` stays tier-1
+   *  only). See core/endpointing.ts. */
+  adaptiveEndpointing = false;
   /** Grace window (ms) after an utterance dispatches, during which the user's own trailing audio cannot
    *  barge the reply it requested. Soniox keeps finalizing partials past <end>; without this they read
    *  as a barge and abort the fresh turn (live: mid-sentence self-interruption + steps=1→steps=0 double
@@ -6551,6 +6723,15 @@ var VoiceEngineOptions = class {
    *  while audible (speaking + drain tail), so echo can never become a phantom turn — the right mode
    *  when there's no AEC (e.g. the non-VPIO mic fallback) and no headphones. Cost: can't interrupt. */
   bargeIn = true;
+  /** Which barge-in TIER to run — the host's override of the mic's self-report.
+   *  - `'auto'` (default) — trust `stt.usingAec`: AEC tier when the mic reports echo cancellation
+   *    applied, heuristic/energy tier otherwise. Unchanged legacy behavior.
+   *  - `'aec'` — force the AEC tier (STT stays live through TTS; barge decided by the dominant-novel
+   *    gate + overlap pause) even if the mic reports no echo cancellation.
+   *  - `'energy'` — force the heuristic tier (echo-baseline EMA spike arms `suspectUntil`, novel-word
+   *    count decides; STT buffer reset after our own audio) even if the mic REPORTS echoCancellation.
+   *    Mobile Safari reports `true` while cancelling poorly — that report is what this overrides. */
+  bargeInMode = "auto";
   /** Filler phrase spoken when holding for an incomplete utterance ('' disables). */
   holdFiller = "";
   /** Called when the engine holds an incomplete utterance (host can render a visual cue). */
@@ -6574,6 +6755,15 @@ var VoiceEngineOptions = class {
    *  Mechanism-based discriminator: a re-PAUSE this soon after a resume = a persistent human, not an
    *  echo blip (which pauses once and stalls). Cede on the re-pause regardless of the novel gate. */
   overlapRepauseCedeMs = 1500;
+  /** HOST-DECIDED short overlaps (opt-in; 0 = off = cede on ≥2 genuine words, as always). The fast "≥2 novel words →
+   *  cede" rule cannot tell a reaction ("Oh, that's new") from a barge, and it fires ~300ms before a host-side judge
+   *  (e.g. an AI instinct) can answer — so a judge could never keep a delivery going (live 20260923-125143: ceded on
+   *  "Oh, that", the judge said keep_talking 300ms later). When > 0, a SHORT genuine overlap (≤ overlapDecideMaxWords,
+   *  no '?', no stop/question word) keeps the pause and waits for `decideOverlap()`; with no decision after this many
+   *  ms it cedes. Long or obvious barges still cede instantly. Audio is already paused, so waiting costs no talk-over. */
+  overlapDecideMs = 0;
+  /** Longest overlap (words) the host decides; also how far an overlap the host kept may grow before it cedes. */
+  overlapDecideMaxWords = 4;
   /** Speculative ENERGY pre-pause while speaking (AEC tier): two residue gate-passes within 350ms →
    *  pause ~300ms before the STT tokens land. But energy CANNOT separate residue bursts from speech
    *  (the documented whack-a-mole) — so a residue spike during loud playback false-pauses with NO user
@@ -6626,6 +6816,10 @@ var VoiceEngineOptions = class {
    *             timestamp-emitting TTS (CartesiaTTS.wantTimestamps) driven over `AudioSink.playedMs`.
    */
   revealMode = "off";
+  /** Locate EXACTLY what the user heard when a barge cuts speech: request word timestamps from the TTS (when it
+   *  supports them) and match them against the playback clock (InterruptedReply `heard`/`exact`). Independent of
+   *  `revealMode` — no reveal events. Without timestamps the cut falls back to the ~15 chars/s estimate. */
+  heardTimestamps = true;
   /** Called with the cumulative revealed text for the current assistant turn (see `revealMode`).
    *  Reset to '' at the start of each spoken turn. */
   onReveal = () => {
@@ -6656,8 +6850,27 @@ var VoiceEngine = class _VoiceEngine {
   // cumulative revealed (on-screen) text for the current turn — see revealMode
   // 'word' karaoke reveal: spoken-word start times (sec, absolute from turn-audio start) + poll state.
   wordStarts = [];
+  wordTexts = [];
+  // the timestamped words, parallel to wordStarts (heard-cut matching)
+  ackWords = 0;
+  // leading timestamped words that are the ack spoken on this turn's context, not the reply
   revealedN = 0;
   revealPoll = null;
+  // Sub-turn timestamp anchoring. A TTS context emits word starts relative to ITS OWN audio start, so
+  // `wordStarts` (one flat turn timeline) is only valid while the turn stays on one context. It does
+  // not: `subturnBoundary()` rotates the context, and Cartesia ALSO rotates it on its own (~5s idle
+  // timeout mid tool-call) — after which starts restart at 0 and every remaining word instantly
+  // satisfies the reveal predicate, dumping the whole segment on screen.
+  // Fix is deterministic, not detective: at a boundary we FORCE the rotation ourselves, so the new
+  // context's origin is always known — it is the turn-audio position where its first byte lands,
+  // captured from the sink at that byte (`playedMs + drainMs` = content seconds written so far).
+  // Starts arriving before that byte are held in `wordPending` and rebased when it does.
+  wordOrigin = 0;
+  // sec offset added to incoming starts (0 = first sub-turn)
+  wordAnchorPending = false;
+  // awaiting the new sub-turn's first audio byte
+  wordPending = [];
+  // [word, start] received while pending, rebased on capture
   clock;
   drainTimer = null;
   // heuristic tier state (inert under AEC) — frozen as validated in the experiment
@@ -6688,6 +6901,8 @@ var VoiceEngine = class _VoiceEngine {
   // endpointed text held for the merge window
   mergePath = "direct";
   // how the pending utterance was assembled (diag)
+  holdTier = 0;
+  // adaptive tier of the hold this dispatch came out of (diag; 0 = none)
   lastGraceDiag = 0;
   // grace_suppress emitted once per grace window
   pendingTimer = null;
@@ -6698,10 +6913,24 @@ var VoiceEngine = class _VoiceEngine {
   // the agent replied (or after 3s) still dispatches.
   lastDispatchFlat = "";
   lastDispatchWords = [];
+  lastDispatchText = "";
   lastDispatchAt = 0;
   repliedSinceDispatch = false;
+  dispatchReply = "";
+  // the agent's prose since the last dispatch (answeredSinceDispatch)
   static DUP_FINAL_MS = 3e3;
   lastInterrupted = null;
+  queuedTurn = false;
+  // the current spoken turn is a queued worker utterance (pumpQueue), not a host turn
+  // host-decided overlap (options.overlapDecideMs): pending decision timer, a final that landed while waiting, and
+  // the window in which the overlap the host chose to talk over is absorbed (its growth + its final)
+  decideTimer = null;
+  decideSince = 0;
+  // when this hold began waiting for the host — caps re-decisions (3× overlapDecideMs)
+  decideHeldFinal = "";
+  overlapKeptUntil = 0;
+  overlapKept = "";
+  // what the host judged keep_talking on — only THOSE words are absorbed
   // overlap (pause) tier state — AEC + pause-capable sinks only
   pausedAt = 0;
   lastResumeAt = 0;
@@ -6750,13 +6979,21 @@ var VoiceEngine = class _VoiceEngine {
   }
   async start() {
     this.tts.onAudio = (c) => {
-      if (this.speaking || this.bcActive) this.player.write(c);
+      if (!this.speaking && !this.bcActive) return;
+      if (this.wordAnchorPending && this.speaking) this.anchorSubturn();
+      this.player.write(c);
     };
-    if (this.options.revealMode === "word") {
+    if (this.options.revealMode === "word" || this.options.heardTimestamps) {
       this.tts.wantTimestamps = true;
-      this.tts.onTimestamps = (_words, start) => {
+      this.tts.onTimestamps = (words2, start) => {
         if (this.interrupted) return;
-        for (const s of start) this.wordStarts.push(s);
+        start.forEach((s, i) => {
+          if (this.wordAnchorPending) this.wordPending.push([words2[i] ?? "", s]);
+          else {
+            this.wordStarts.push(this.wordOrigin + s);
+            this.wordTexts.push(words2[i] ?? "");
+          }
+        });
       };
     }
     this.stt.onPartial = (text) => this.handlePartial(text);
@@ -6765,10 +7002,15 @@ var VoiceEngine = class _VoiceEngine {
     await Promise.all([this.tts.connect(), this.stt.start()]);
     this.tts.warmup?.();
     this.setState("listening");
-    log12.debug(`voice I/O up (${this.stt.usingAec ? "AEC" : "heuristic echo"} capture)`);
+    if (this.options.bargeInMode === "aec" && !this.stt.usingAec)
+      log12.warn("bargeInMode=aec but mic does not report echoCancellation applied \u2014 STT may transcribe the assistant");
+    log12.debug(`voice I/O up (${this.usingAec ? "AEC" : "heuristic echo"} capture, mode=${this.options.bargeInMode}, mic reports aec=${this.stt.usingAec})`);
   }
+  /** The RESOLVED barge-in tier (the single seam every tier branch reads). `bargeInMode` overrides
+   *  the mic's self-report — see the option doc for why the report is not trustworthy on mobile. */
   get usingAec() {
-    return this.stt.usingAec;
+    const m = this.options.bargeInMode;
+    return m === "aec" ? true : m === "energy" ? false : this.stt.usingAec;
   }
   /** Flip barge-in at runtime (e.g. the mic fell back to non-VPIO → go half-duplex so echo can't leak). */
   setBargeIn(on) {
@@ -6800,6 +7042,12 @@ var VoiceEngine = class _VoiceEngine {
       for (const r of this.idleWaiters.splice(0)) r();
     }
   }
+  /** True while the assistant is AUDIBLE — deltas flowing or queued audio still draining. Goes false
+   *  exactly when `onSpeechEnd` fires (or immediately on barge-in). Lets a host tell "the turn closed
+   *  but audio is still playing" from "there was nothing to play", without waiting for a callback. */
+  get audible() {
+    return this.speaking;
+  }
   /** Resolve when the engine is no longer speaking (immediate if already idle). */
   awaitIdle() {
     if (this.state !== "speaking" && this.state !== "thinking") return Promise.resolve();
@@ -6816,19 +7064,31 @@ var VoiceEngine = class _VoiceEngine {
       this.drainTimer = null;
     }
     this.interrupted = false;
+    this.queuedTurn = false;
     this.bcSupersede();
     this.resetOverlap(true);
+    const acked = ack && this.dispatchRefinal && this.ackSpent;
+    if (acked) {
+      ack = false;
+      this.diag("ack_skipped", { reason: "refinal" });
+    }
     this.diag("tts_turn_begin", { ack, gapless: this.speaking });
+    const gapless = this.speaking;
     if (!this.speaking) this.player.markTurn();
     this.speaking = true;
     this.ctxOpen = true;
     this.spokeDeltas = false;
-    this.adaptiveAckFired = false;
-    this.ackProbe = null;
+    this.adaptiveAckFired = acked;
+    this.ackProbe = acked ? "" : null;
+    this.ackPickedFired = false;
     this.reply = "";
     this.revealText = "";
     this.wordStarts = [];
+    this.wordTexts = [];
+    this.ackWords = 0;
     this.revealedN = 0;
+    this.resetSubturnAnchor();
+    if (gapless) this.wordAnchorPending = true;
     if (this.options.revealMode === "word") this.startWordReveal();
     this.emo = this.options.emotions ? new EmotionStream(this.options.showEmotions) : null;
     this.echoWords = new Set(this.words(this.prevReply));
@@ -6840,23 +7100,27 @@ var VoiceEngine = class _VoiceEngine {
       this.spokeDeltas = true;
       this.ackAt = this.clock.now();
       this.lastAck = this.options.ackPhrase;
+      this.ackSpent = true;
+      this.ackWords = this.options.ackPhrase.trim().split(/\s+/).length;
       for (const w of this.words(this.options.ackPhrase)) this.echoWords.add(w);
     } else if (ack && this.options.adaptiveAckMs > 0) {
+      const pick = this.startAckPick();
+      const ms = this.options.adaptiveAckMs;
       this.ackTimer = this.clock.setTimeout(() => {
         this.ackTimer = null;
-        if (!this.speaking || !this.ctxOpen || this.spokeDeltas || this.interrupted) return;
-        const phrase = this.pickAck();
-        this.diag("ack_fired", { phrase, adaptive: true, waitedMs: this.options.adaptiveAckMs });
-        this.tts.speak(phrase + " ", true);
-        this.spokeDeltas = true;
-        this.ackAt = this.clock.now();
-        this.lastAck = phrase;
-        for (const w of this.words(phrase)) this.echoWords.add(w);
-        this.setState("speaking");
-        this.adaptiveAckFired = true;
-        this.ackProbe = "";
-        this.options.onAdaptiveAck();
-      }, this.options.adaptiveAckMs);
+        if (!pick.pending) return this.fireAck(pick.phrase, pick.picked);
+        this.ackTimer = this.clock.setTimeout(() => {
+          this.ackTimer = null;
+          pick.onDone = null;
+          this.ackPick = null;
+          this.diag("ack_cancelled", { reason: "pick_late" });
+        }, ms);
+        pick.onDone = () => {
+          this.clearAckTimer();
+          this.fireAck(pick.phrase, pick.picked);
+        };
+      }, ms);
+      this.ackPick = pick;
     }
     if (!this.turnStartAt) this.turnStartAt = this.clock.now();
     this.setState("thinking");
@@ -6876,11 +7140,16 @@ var VoiceEngine = class _VoiceEngine {
       this.adaptiveAckFired = false;
       const lead = m ? m[1] : bare;
       const norm2 = lead.replace(/[^a-z ]/gi, " ").replace(/\s+/g, " ").trim().toLowerCase();
+      const same = this.ackPickedFired ? bare.match(_VoiceEngine.leadingPhrase(this.lastAck)) : null;
       if (_VoiceEngine.ACK_LEADING.test(norm2)) {
         const rest = m ? m[2] : "";
         this.diag("reflex_ack_suppressed", { lead: lead.trim() });
         if (!rest.trim()) return "";
         text = rest;
+      } else if (same) {
+        this.diag("reflex_ack_suppressed", { lead: same[0].trim() });
+        text = bare.slice(same[0].length);
+        if (!text.trim()) return "";
       } else {
         text = probe;
       }
@@ -6893,7 +7162,10 @@ var VoiceEngine = class _VoiceEngine {
       prose = " " + prose;
     }
     this.reply += prose;
-    if (prose.trim()) this.repliedSinceDispatch = true;
+    if (prose.trim()) {
+      this.repliedSinceDispatch = true;
+      this.dispatchReply += prose;
+    }
     for (const w of this.words(this.reply)) this.echoWords.add(w);
     this.tts.speak(forSpeech(speech), true);
     if (!this.spokeDeltas && this.turnStartAt) log12.debug(`ttft: ${Math.round(this.clock.now() - this.turnStartAt)}ms`);
@@ -6905,6 +7177,42 @@ var VoiceEngine = class _VoiceEngine {
     }
     return display;
   }
+  /** Sub-turn seam: the host's agent stream interrupted the reply with a tool call, so the spoken
+   *  turn continues on a FRESH TTS context. Flushes the current context and opens the next, then
+   *  re-anchors the karaoke timeline at the position the next context's first audio byte lands on.
+   *
+   *  Rotating unconditionally is the point: Cartesia restarts word timestamps at 0 for each context
+   *  and ALSO rotates on its own after ~5s idle — so leaving the context alone makes reveal timing
+   *  depend on an invisible server-side timer (short gap = one timeline, long gap = a restart we
+   *  never saw). By always rotating, the origin is always known and never inferred.
+   *
+   *  No-op outside an open turn. Reveal text/word ordering is unchanged — only the time origin. */
+  subturnBoundary() {
+    if (!this.speaking || !this.ctxOpen) return;
+    this.diag("tts_subturn_boundary", { playedMs: Math.round(Math.max(0, this.player.playedMs())) });
+    this.tts.end();
+    this.tts.newContext();
+    this.wordAnchorPending = true;
+    this.wordPending = [];
+  }
+  /** Capture the current sub-turn's time origin = content seconds already written to the sink.
+   *  `playedMs + drainMs` is that sum in both regimes (mid-playback it telescopes to the scheduled
+   *  content; fully drained, drainMs is 0 and playedMs has reached the scheduled total). */
+  anchorSubturn() {
+    this.wordAnchorPending = false;
+    this.wordOrigin = Math.max(0, this.player.playedMs() + this.player.drainMs()) / 1e3;
+    this.diag("reveal_anchor", { originSec: Number(this.wordOrigin.toFixed(3)), held: this.wordPending.length });
+    for (const [w, s] of this.wordPending) {
+      this.wordStarts.push(this.wordOrigin + s);
+      this.wordTexts.push(w);
+    }
+    this.wordPending = [];
+  }
+  resetSubturnAnchor() {
+    this.wordOrigin = 0;
+    this.wordAnchorPending = false;
+    this.wordPending = [];
+  }
   /** Karaoke reveal poll: reveal the display-word prefix up to the count of spoken words whose
    *  Cartesia start time has been reached on the playback clock (`AudioSink.playedMs`, which excludes
    *  paused time). Poll-driven (not AudioContext timers) so it's portable across CLI/browser sinks and
@@ -6919,8 +7227,8 @@ var VoiceEngine = class _VoiceEngine {
       while (n < this.wordStarts.length && this.wordStarts[n] <= playedSec) n++;
       if (n !== this.revealedN) {
         this.revealedN = n;
-        const words = this.revealText.trim().split(/\s+/).filter(Boolean);
-        this.options.onReveal(words.slice(0, n).join(" "));
+        const words2 = this.revealText.trim().split(/\s+/).filter(Boolean);
+        this.options.onReveal(words2.slice(0, n).join(" "));
       }
       this.revealPoll = this.clock.setTimeout(tick, 60);
     };
@@ -6976,6 +7284,11 @@ var VoiceEngine = class _VoiceEngine {
       if (this.turnStartAt) log12.debug(`turn: ${Math.round(this.clock.now() - this.turnStartAt)}ms (incl. playback)`);
       this.echoUntil = this.clock.now() + 2500;
       if (!this.usingAec) this.stt.reset();
+      try {
+        this.options.onSpeechEnd();
+      } catch (e) {
+        log12.warn(`onSpeechEnd threw: ${e instanceof Error ? e.message : e}`);
+      }
       this.setState("listening");
       if (this.uttQueue.length) this.pumpQueue();
     };
@@ -6990,8 +7303,9 @@ var VoiceEngine = class _VoiceEngine {
       this.drainTimer = this.clock.setTimeout(drainThenSettle, 15e3);
     } else drainThenSettle();
   }
-  /** text of the reply cut by the last barge-in — consumed by the host to tell the model what
-   *  the user did NOT hear. Cleared on read. */
+  /** What the last barge-in cut — the reply that was playing (and its estimated heard part) plus every queued worker
+   *  utterance it dropped — consumed by the host to tell the model what the user did NOT hear, or to park the rest of
+   *  a delivery for resuming. Cleared on read. */
   takeInterruptedReply() {
     const r = this.lastInterrupted;
     this.lastInterrupted = null;
@@ -7000,11 +7314,12 @@ var VoiceEngine = class _VoiceEngine {
   /** Speak a short filler phrase without starting a model turn (stays in listening mode after). */
   speakFiller(text) {
     if (!text || this.speaking) return;
-    const replied = this.repliedSinceDispatch;
+    const replied = this.repliedSinceDispatch, reply = this.dispatchReply;
     this.beginSpeech();
     this.speakDelta(text);
     this.endSpeech();
     this.repliedSinceDispatch = replied;
+    this.dispatchReply = reply;
   }
   /** Enqueue a COMPLETE worker utterance (already-split spoken text) onto the central speech queue.
    *  If nothing is currently speaking it plays immediately; otherwise it queues and plays after the
@@ -7022,6 +7337,7 @@ var VoiceEngine = class _VoiceEngine {
     const text = this.uttQueue.shift();
     if (text == null) return;
     this.beginSpeech();
+    this.queuedTurn = true;
     this.speakDelta(text);
     this.endSpeech();
   }
@@ -7036,6 +7352,69 @@ var VoiceEngine = class _VoiceEngine {
    *  micro-ack already spoke one. Anchored end-to-end so only a whole ack-only clause matches. */
   static ACK_LEADING = /^(?:(?:okay|ok|alright|sure|yeah|yep|right|got it|on it|still|still on it|still working on it|working on it|checking|one sec|one moment|mm hm|mmhm|hmm|let me (?:see|check|think))[ ,]*)+$/;
   recentAcks = [];
+  /** The armed turn's ack choice: the host's `pickAck` (sync or async); `phrase` undefined = the default pools, drawn
+   *  only when the ack actually fires. `onDone` is set only while the ack is due and the pick is still pending. */
+  ackPick = null;
+  startAckPick() {
+    const host = this.options.pickAck;
+    const pick = { pending: false, phrase: void 0, picked: !!host, onDone: null };
+    if (!host) return pick;
+    const ctx = { text: this.lastDispatchText, question: this.lastDispatchWasQuestion, barged: this.bargedBeforeDispatch };
+    const fallback = (e) => {
+      log12.warn(`pickAck failed \u2014 using the default pools: ${e instanceof Error ? e.message : e}`);
+      pick.picked = false;
+      return void 0;
+    };
+    let r;
+    try {
+      r = host(ctx);
+    } catch (e) {
+      pick.phrase = fallback(e);
+      return pick;
+    }
+    if (typeof r?.then !== "function") {
+      pick.phrase = r;
+      return pick;
+    }
+    pick.pending = true;
+    Promise.resolve(r).catch(fallback).then((phrase) => {
+      pick.pending = false;
+      pick.phrase = phrase;
+      if (this.ackPick === pick) pick.onDone?.();
+    });
+    return pick;
+  }
+  /** Speak the adaptive ack (null = the host chose silence, undefined = draw from the default pools) — only if the
+   *  turn is still waiting on its reflex. */
+  fireAck(phrase, picked) {
+    this.ackPick = null;
+    if (!this.speaking || !this.ctxOpen || this.spokeDeltas || this.interrupted) return;
+    if (phrase === void 0) phrase = this.pickAck();
+    if (phrase === null || !phrase.trim()) {
+      this.diag("ack_skipped", { reason: "silent" });
+      return;
+    }
+    this.diag("ack_fired", { phrase, adaptive: true, waitedMs: this.options.adaptiveAckMs, ...picked ? { picked } : {} });
+    this.tts.speak(phrase + " ", true);
+    this.spokeDeltas = true;
+    this.ackAt = this.clock.now();
+    this.lastAck = phrase;
+    this.ackSpent = true;
+    this.ackWords = phrase.trim().split(/\s+/).length;
+    for (const w of this.words(phrase)) this.echoWords.add(w);
+    this.setState("speaking");
+    this.adaptiveAckFired = true;
+    this.ackProbe = "";
+    this.ackPickedFired = picked;
+    this.options.onAdaptiveAck();
+  }
+  /** `phrase`'s words at the very start of a text, any punctuation between them ("Oh no." ~ "oh, no —"). */
+  static leadingPhrase(phrase) {
+    const w = phrase.toLowerCase().match(/[a-z0-9]+/g) ?? [];
+    return w.length ? new RegExp(`^[^a-z0-9]*${w.join("[^a-z0-9]+")}(?![a-z0-9])[^a-z0-9]*`, "i") : /$^/;
+  }
+  ackPickedFired = false;
+  // the fired ack was the host's pick → the probe also strips the reflex repeating it
   pickAck() {
     const pool = this.lastDispatchWasQuestion ? _VoiceEngine.ACKS_QUESTION : _VoiceEngine.ACKS_NEUTRAL;
     const fresh = pool.filter((p) => !this.recentAcks.includes(p));
@@ -7045,7 +7424,16 @@ var VoiceEngine = class _VoiceEngine {
     return phrase;
   }
   lastDispatchWasQuestion = false;
+  dispatchRefinal = false;
+  // the last dispatch re-finalized (superseded) the one before it — same logical turn
+  ackSpent = false;
+  // an ack already played for the current logical turn (reset by a non-refinal dispatch)
+  bargedSinceDispatch = false;
+  // an effective interrupt landed since the last dispatch
+  bargedBeforeDispatch = false;
+  // …as of the last dispatch (AckContext.barged)
   clearAckTimer(reason) {
+    if (reason) this.ackPick = null;
     if (!this.ackTimer) return;
     this.clock.clearTimeout(this.ackTimer);
     this.ackTimer = null;
@@ -7061,11 +7449,16 @@ var VoiceEngine = class _VoiceEngine {
     this.clearAckTimer("interrupt");
     this.adaptiveAckFired = false;
     this.ackProbe = null;
-    if (this.uttQueue.length) log12.info(`barge-in dropped ${this.uttQueue.length} queued worker utterance(s)`);
-    const droppedQueued = this.uttQueue.length;
-    this.uttQueue = [];
-    if (!this.speaking && !this.drainTimer) return;
+    const queued = this.uttQueue.splice(0);
+    const droppedQueued = queued.length;
+    if (droppedQueued) log12.info(`barge-in cut ${droppedQueued} queued worker utterance(s) \u2014 handed to the host`);
+    this.overlapKeptUntil = 0;
+    if (!this.speaking && !this.drainTimer) {
+      if (droppedQueued) this.lastInterrupted = { full: "", heard: "", queued, queuedTurn: false };
+      return;
+    }
     this.stopWordReveal(false);
+    this.resetSubturnAnchor();
     this.diag("interrupt", { droppedQueued, ctxOpen: this.ctxOpen, playedMs: Math.round(Math.max(0, this.player.playedMs())) });
     if (this.drainTimer) {
       this.clock.clearTimeout(this.drainTimer);
@@ -7073,8 +7466,9 @@ var VoiceEngine = class _VoiceEngine {
     }
     this.resetOverlap(false);
     this.lastResumeAt = 0;
-    const heardChars = Math.round(Math.max(0, this.player.playedMs()) / 1e3 * 15);
-    if (this.reply) this.lastInterrupted = { full: this.reply, heard: this.reply.slice(0, heardChars) };
+    const { heard, exact } = this.heardCut();
+    if (this.reply || droppedQueued) this.lastInterrupted = { full: this.reply, heard, exact, queued, queuedTurn: this.queuedTurn };
+    if (heard.length < this.reply.length || droppedQueued) this.bargedSinceDispatch = true;
     this.speaking = false;
     this.ctxOpen = false;
     this.interrupted = true;
@@ -7086,8 +7480,23 @@ var VoiceEngine = class _VoiceEngine {
     if (this.reply) this.prevReply = this.reply;
     this.setState("listening");
   }
+  /** How much of the reply the user heard at a cut (paused time is excluded by the sink's playedMs). Exact from the
+   *  TTS word timestamps the playback clock has reached (the ack's leading words skipped); without timestamps, an
+   *  estimate — played seconds × ~15 chars/s of TTS speech, coarse and often mid-word. */
+  heardCut() {
+    const played = Math.max(0, this.player.playedMs());
+    if (!this.wordTexts.length) return { heard: this.reply.slice(0, Math.round(played / 1e3 * 15)), exact: false };
+    let n = 0;
+    while (n < this.wordStarts.length && this.wordStarts[n] <= played / 1e3) n++;
+    if (!this.ctxOpen && n === this.wordStarts.length && played / 1e3 - this.wordStarts[n - 1] >= 0.4) return { heard: this.reply, exact: true };
+    return { heard: this.reply.slice(0, heardPrefix(this.reply, this.wordTexts.slice(this.ackWords, n))), exact: true };
+  }
   stop() {
     this.uttQueue = [];
+    if (this.decideTimer) {
+      this.clock.clearTimeout(this.decideTimer);
+      this.decideTimer = null;
+    }
     this.clearAckTimer();
     if (this.resumeTimer) this.clock.clearTimeout(this.resumeTimer);
     if (this.pendingTimer) this.clock.clearTimeout(this.pendingTimer);
@@ -7100,9 +7509,41 @@ var VoiceEngine = class _VoiceEngine {
     this.setState("idle");
   }
   // --- listening side (STT-driven) ---
+  /** Echo-comparable tokens. Our text and the STT's rendering of it must tokenize alike: every non-alphanumeric
+   *  (em-dash, non-breaking hyphen, nbsp, …) SEPARATES words — deleting it glued "releases—GPT‑6" into
+   *  "releasesgpt6" and the echo gate missed our own words. Numbers take the spoken form STT may hear: letter/digit
+   *  runs split ("K2.8" → k 2 point 8), a decimal point is "point", number words are digits ("five" → 5).
+   *  Apostrophes are dropped (it's → its). Words under 2 letters are noise; digits are kept. Any script counts (Unicode
+   *  letters/marks/digits): an ASCII-only split gave Hebrew speech ZERO words, which the echo gate read as pure echo
+   *  (live 20260923-125143: "סבתא מחוץ לדלת?" and "תודה." swallowed). */
   words(s) {
-    return s.toLowerCase().replace(/[^a-z0-9\s]/g, "").split(/\s+/).filter((w) => w.length >= 2);
-  }
+    return s.toLowerCase().replace(/['’]/g, "").replace(/(\d)\.(?=\d)/g, "$1 point ").replace(new RegExp("(\\p{L})(?=\\d)|(\\d)(?=\\p{L})", "gu"), "$1$2 ").split(/[^\p{L}\p{M}\p{N}]+/u).map((w) => _VoiceEngine.NUMBER_WORDS[w] ?? w).filter((w) => w.length >= 2 || /\d/.test(w));
+  }
+  static NUMBER_WORDS = Object.fromEntries(
+    [
+      "zero",
+      "one",
+      "two",
+      "three",
+      "four",
+      "five",
+      "six",
+      "seven",
+      "eight",
+      "nine",
+      "ten",
+      "eleven",
+      "twelve",
+      "thirteen",
+      "fourteen",
+      "fifteen",
+      "sixteen",
+      "seventeen",
+      "eighteen",
+      "nineteen",
+      "twenty"
+    ].map((w, i) => [w, String(i)])
+  );
   novelWords(text) {
     return this.words(text).filter((w) => !this.echoWords.has(w));
   }
@@ -7119,6 +7560,22 @@ var VoiceEngine = class _VoiceEngine {
     const novel = this.novelWords(text).length;
     return novel > 0 && novel / Math.max(1, total) > 0.5;
   }
+  /** Echo verdict for a FINAL in the echo window (AEC tier). Bag-of-words genuine() alone swallowed real replies
+   *  that reuse a few of our words — live 20260923-102258, right after a barge over "…Gemini 3.8 Flash…":
+   *  "Wait, there is a new Gemini model?" (3 novel / 6) was dropped twice and the user had to repeat it. Echo
+   *  of our own audio reproduces RUNS of what we said, in order (mis-hearings break a word, not the run); a
+   *  reply that shares vocabulary scatters it. So a ≥4-word final that fails the bag test is echo only if at
+   *  least half its words sit in a word pair we actually said. Shorter finals can't show order → bag rule. */
+  echoFinal(text) {
+    if (this.genuine(text)) return false;
+    const w = this.words(text);
+    if (w.length < 4) return true;
+    const said = this.words(`${this.prevReply} ${this.reply} ${this.lastAck}`);
+    const pairs = new Set(said.slice(1).map((x, i) => `${said[i]} ${x}`));
+    const inRun = w.map(() => false);
+    for (let i = 1; i < w.length; i++) if (pairs.has(`${w[i - 1]} ${w[i]}`)) inRun[i - 1] = inRun[i] = true;
+    return inRun.filter(Boolean).length * 2 >= w.length;
+  }
   handlePartial(text) {
     if (this.speaking) {
       if (!this.options.bargeIn) return;
@@ -7130,14 +7587,29 @@ var VoiceEngine = class _VoiceEngine {
         if (!this.echoActive() || (this.usingAec ? this.genuine(text) : this.novelWords(text).length >= 1)) this.options.onPartial(text);
         return;
       }
+      if (this.echoesDispatch(text, true)) {
+        if (this.lastDupPartial !== text.trim()) {
+          this.lastDupPartial = text.trim();
+          this.diag("dup_partial", { reason: "dup_final", text: text.slice(0, 60) });
+        }
+        if (this.pausedAt) {
+          this.diag("overlap_resume", { heldMs: Math.round(this.clock.now() - this.pausedAt), reason: "dup_final" });
+          this.resetOverlap(true);
+        }
+        return;
+      }
       if (this.overlapCapable) {
         const txt = text.trim();
         if (!txt || txt === this.lastOverlapPartial) return;
         this.lastOverlapPartial = txt;
         if (!this.genuine(txt)) {
-          if (this.pausedAt) this.armResume();
+          if (this.pausedAt && !this.decideTimer) this.armResume();
           return;
         }
+        if (this.overlapKeptUntil && this.clock.now() < this.overlapKeptUntil) {
+          if (!this.unjudged(txt)) return;
+          this.overlapKeptUntil = 0;
+        }
         if (!this.pausedAt) {
           this.pausedAt = this.clock.now();
           const sinceResumeMs = this.lastResumeAt ? Math.round(this.clock.now() - this.lastResumeAt) : void 0;
@@ -7152,13 +7624,14 @@ var VoiceEngine = class _VoiceEngine {
           }
         }
         if (this.words(txt).length >= 2) {
-          const phase = this.ctxOpen ? "speaking" : "drain";
-          this.diag("barge_in", { phase, trigger: "overlap_cede", novel: this.novelWords(txt).length, total: this.words(txt).length });
-          this.interrupt();
-          this.options.onBargeIn(phase);
+          if (this.options.overlapDecideMs > 0 && this.shortOverlap(txt)) {
+            this.awaitOverlapDecision(txt);
+            return;
+          }
+          this.cedeOverlap("overlap_cede", txt);
           return;
         }
-        this.armResume();
+        if (!this.decideTimer) this.armResume();
         return;
       }
       const barge = this.usingAec ? this.genuine(text) : this.novelWords(text).length >= (this.suspectUntil ? 1 : 2);
@@ -7203,7 +7676,7 @@ var VoiceEngine = class _VoiceEngine {
       this.specTimer = null;
       if (this.speaking || this.specSpent || this.pendingUtt) return;
       if (this.words(this.specPartial).length < this.options.speculativeMinWords) return;
-      const flat = this.specPartial.toLowerCase().replace(/[^a-z0-9]/g, "");
+      const flat = normWord(this.specPartial);
       if (flat && this.lastDispatchFlat && this.clock.now() - this.lastDispatchAt < _VoiceEngine.DUP_FINAL_MS && (this.lastDispatchFlat.startsWith(flat) || flat.startsWith(this.lastDispatchFlat))) return;
       this.specSpent = true;
       this.specText = this.specPartial;
@@ -7242,7 +7715,7 @@ var VoiceEngine = class _VoiceEngine {
       const letters = p.replace(/[^\p{L}]/gu, "");
       const latin = p.replace(/[^A-Za-z]/g, "");
       if (!letters || latin.length / letters.length < 0.7) return veto("non_latin");
-      const flat = p.toLowerCase().replace(/[^a-z0-9]/g, "");
+      const flat = normWord(p);
       if (flat && this.lastDispatchFlat && this.clock.now() - this.lastDispatchAt < _VoiceEngine.DUP_FINAL_MS && (this.lastDispatchFlat.startsWith(flat) || flat.startsWith(this.lastDispatchFlat))) return;
       this.fireBackchannel();
     }, this.options.backchannelMs);
@@ -7330,6 +7803,10 @@ var VoiceEngine = class _VoiceEngine {
       }
       if (pfx && norm2(nw[pw.length - 1]).startsWith(norm2(pw[pw.length - 1]))) return next;
     }
+    if (_VoiceEngine.restates(prev, next)) {
+      this.diag("merge_restated", { dropped: prev.slice(0, 60) });
+      return next;
+    }
     const max = Math.min(pw.length, nw.length);
     for (let k = max; k > 0; k--) {
       let match = true;
@@ -7344,6 +7821,25 @@ var VoiceEngine = class _VoiceEngine {
   static normWord(w) {
     return normWord(w);
   }
+  /** `next` RESTATES the held, unfinished `prev` — the user restarted ("Wo- wait, can you explain more about" →
+   *  "What— wait, can you explain more about that? …", live 20260924-093945, where both landed in the dispatch).
+   *  Keep only the later version. Conservative: prev's words from index i ≤ 2 through its END reappear contiguously
+   *  in next starting at j ≤ 2, that run is ≥4 words and ≥75% of prev. i > 0 with j = 0 is NOT a restart — that is
+   *  an overlapping re-final continuing prev ("Tell me about the" + "about the weather"), deduped by the caller
+   *  keeping prev's head. prev's last word may be a char-prefix (a mid-word endpoint). */
+  static restates(prev, next) {
+    const p = prev.split(/\s+/).map(normWord).filter(Boolean), n = next.split(/\s+/).map(normWord).filter(Boolean);
+    for (let i = 0; i <= 2; i++) {
+      const k = p.length - i;
+      if (k < 4 || k < 0.75 * p.length) return false;
+      for (let j = i === 0 ? 0 : 1; j <= 2 && j + k <= n.length; j++) {
+        let ok = true;
+        for (let x = 0; x < k && ok; x++) ok = x === k - 1 ? n[j + x].startsWith(p[i + x]) : n[j + x] === p[i + x];
+        if (ok) return true;
+      }
+    }
+    return false;
+  }
   /** Soniox re-finalization of an ALREADY-DISPATCHED utterance, arriving PAST the merge window:
    *  the new final is a strict word-prefix superset of the last dispatch (the last dispatched word
    *  may be a char-prefix of the corresponding new word — a mid-word endpoint), and it lands within
@@ -7374,18 +7870,71 @@ var VoiceEngine = class _VoiceEngine {
     if (!nSame.startsWith(pLast)) return false;
     return nw.length > pw.length || nSame.length > pLast.length;
   }
+  /** The STT re-emitting (part of) the utterance just dispatched: ≥2 words that form a contiguous run of the dispatched
+   *  words, within DUP_FINAL_MS. A merged dispatch ("Okay." + "Um, check for the recent news in AI.") has its later
+   *  segment come back as a partial/final a beat later — the identical/superset guards miss a PIECE. A human cannot
+   *  re-speak a ≥2-word stretch of what they said within ~1s; one word ("stop") is never treated as a duplicate.
+   *  `partial`: the last word may be cut mid-word ("…news in A"). */
+  echoesDispatch(text, partial = false) {
+    if (!this.lastDispatchWords.length || this.clock.now() - this.lastDispatchAt >= _VoiceEngine.DUP_FINAL_MS) return false;
+    const d = this.lastDispatchWords.map(normWord).filter(Boolean), w = text.trim().split(/\s+/).map(normWord).filter(Boolean);
+    if (w.length < 2 || w.length > d.length) return false;
+    const last = w.length - 1;
+    outer: for (let i = 0; i + w.length <= d.length; i++) {
+      for (let k = 0; k < w.length; k++) if (partial && k === last ? !d[i + k].startsWith(w[k]) : d[i + k] !== w[k]) continue outer;
+      return true;
+    }
+    return false;
+  }
+  /** The agent replied since the dispatch with more than an acknowledgement (ACK_LEADING: "On it.", "Sure, one sec."). */
+  answeredSinceDispatch() {
+    return this.repliedSinceDispatch && !_VoiceEngine.ACK_LEADING.test(this.dispatchReply.replace(/[^a-z ]/gi, " ").replace(/\s+/g, " ").trim().toLowerCase());
+  }
+  lastDupPartial = "";
+  // dup_partial diag once per distinct partial
   static TRAIL_RE = /(?:^|\s)(?:and|but|or|so|to|the|a|an|of|in|for|with|that|if|uh|um|like|about|from|into|on|is|are|was|were|,)$/i;
+  /** The user's line right after a barge cut our speech (or a re-final growing it), with no terminal punctuation:
+   *  they took the floor mid-thought — Soniox closes on the pause, not the thought (live 20260923-192543: "But isn't it"
+   *  → "…can be done" → "…with boxing" → "…or semantic?" dispatched 4 times). Held like an incomplete utterance. */
+  unfinishedBargeLine(text) {
+    const line = this.bargedSinceDispatch || this.bargedBeforeDispatch && this.refinalizes(text);
+    return line && !/[.?!…]["'”’)\]]*$/.test(text.trim()) && !_VoiceEngine.CONTROL_RE.test(text.trim());
+  }
+  /** A short line that is complete on its own ("Stop", "Yes", "Okay, stop", "go on") — never held as unfinished. */
+  static CONTROL_RE = ((w) => new RegExp(`^${w}(?:[\\s,]+${w})*[.!?\u2026]*$`, "i"))("(?:stop|wait|yes|yeah|yep|no|nope|okay|ok|go on|continue|never ?mind)");
   /** The utterance sounds like the user paused mid-thought (trailing conjunction/filler/comma). */
   looksIncomplete(text) {
-    return _VoiceEngine.TRAIL_RE.test(text.trim());
+    return _VoiceEngine.TRAIL_RE.test(text.trim()) && !_VoiceEngine.CONTROL_RE.test(text.trim());
   }
   handleUtterance(text) {
-    if (this.speaking && (this.ctxOpen || this.pausedAt) && this.overlapCapable) {
+    if (this.speaking && this.echoesDispatch(text)) {
+      this.diag("utterance_drop", { reason: "dup_final", text: text.slice(0, 60) });
+      if (this.pausedAt) {
+        this.diag("overlap_resume", { heldMs: Math.round(this.clock.now() - this.pausedAt), reason: "dup_final" });
+        this.resetOverlap(true);
+      }
+      return;
+    }
+    if (this.decideTimer) {
+      this.decideHeldFinal = this.mergeUtterance(this.decideHeldFinal, text);
+      this.diag("utterance_held", { reason: "overlap_decide", text: text.slice(0, 60) });
+      return;
+    }
+    if (this.overlapKeptUntil) {
+      const kept = this.clock.now() < this.overlapKeptUntil && !this.unjudged(text);
+      this.overlapKeptUntil = 0;
+      if (kept) {
+        this.diag("utterance_drop", { reason: "overlap_kept", text: text.slice(0, 60) });
+        return;
+      }
+    }
+    const ownTail = !this.pausedAt && (this.clock.now() < this.bargeGraceUntil || this.refinalizes(text));
+    if (this.speaking && (this.ctxOpen || this.pausedAt) && this.overlapCapable && !ownTail) {
       this.diag("utterance_drop", { reason: "overlap_noise", text: text.slice(0, 60) });
       this.stt.reset();
       return;
     }
-    if (this.echoActive() && (!this.options.bargeIn || (this.usingAec ? !this.genuine(text) : this.novelWords(text).length < 2))) {
+    if (this.echoActive() && (!this.options.bargeIn || (this.usingAec ? this.echoFinal(text) : this.novelWords(text).length < 2))) {
       this.diag("echo_swallow", { guard: "echo_gate", text: text.slice(0, 60) });
       this.stt.reset();
       return;
@@ -7399,9 +7948,28 @@ var VoiceEngine = class _VoiceEngine {
     if (this.pendingUtt) this.mergePath = "merged";
     this.pendingUtt = this.mergeUtterance(this.pendingUtt, text);
     if (this.pendingTimer) this.clock.clearTimeout(this.pendingTimer);
-    if (this.options.incompleteMergeMs && this.looksIncomplete(this.pendingUtt)) {
+    if (this.options.adaptiveEndpointing) {
+      const holdMs = computeHoldMs({
+        transcript: this.pendingUtt,
+        lastAiMessage: this.prevReply,
+        baseMs: this.options.utteranceMergeMs,
+        incompleteMs: this.options.incompleteMergeMs
+      });
+      const tier = endpointTier(this.pendingUtt);
+      this.holdTier = tier;
+      this.diag("hold", { reason: "adaptive", tier, punctuated: tier === 3, holdMs, tail: this.pendingUtt.slice(-40) });
+      if (holdMs > this.options.utteranceMergeMs) {
+        this.options.onHold();
+        if (tier === 1 && this.options.holdFiller && !this.speaking) this.speakFiller(this.options.holdFiller);
+      }
+      if (holdMs <= 0) return this.flushUtterance();
+      this.pendingTimer = this.clock.setTimeout(() => this.flushUtterance(), holdMs);
+      return;
+    }
+    const bargeHold = !this.looksIncomplete(this.pendingUtt) && this.unfinishedBargeLine(this.pendingUtt);
+    if (this.options.incompleteMergeMs && (bargeHold || this.looksIncomplete(this.pendingUtt))) {
       log12.verbose(`hold: incomplete utterance "${this.pendingUtt.slice(-40)}"`);
-      this.diag("hold", { reason: "incomplete", tail: this.pendingUtt.slice(-40) });
+      this.diag("hold", { reason: bargeHold ? "barge_unfinished" : "incomplete", tail: this.pendingUtt.slice(-40) });
       this.options.onHold();
       if (this.options.holdFiller && !this.speaking) this.speakFiller(this.options.holdFiller);
       this.pendingTimer = this.clock.setTimeout(() => this.flushUtterance(), this.options.incompleteMergeMs);
@@ -7432,9 +8000,13 @@ var VoiceEngine = class _VoiceEngine {
     this.pendingUtt = "";
     const path = this.mergePath;
     this.mergePath = "direct";
+    const heldTier = this.holdTier;
+    this.holdTier = 0;
     if (text) {
-      const flat = text.toLowerCase().replace(/[^a-z0-9]/g, "");
-      if (flat && flat === this.lastDispatchFlat && !this.repliedSinceDispatch && this.clock.now() - this.lastDispatchAt < _VoiceEngine.DUP_FINAL_MS) {
+      const flat = normWord(text);
+      const answered = this.answeredSinceDispatch();
+      const part = flat !== this.lastDispatchFlat && !answered && this.echoesDispatch(text);
+      if (part || flat && flat === this.lastDispatchFlat && !answered && this.clock.now() - this.lastDispatchAt < _VoiceEngine.DUP_FINAL_MS) {
         log12.verbose(`dropped duplicate final "${text.slice(0, 40)}" (identical to the just-dispatched utterance, no reply between)`);
         this.diag("utterance_drop", { reason: "dup_final", text: text.slice(0, 60) });
         return;
@@ -7445,22 +8017,121 @@ var VoiceEngine = class _VoiceEngine {
         this.diag("utterance_drop", { reason: "refinalized", text: text.slice(0, 60) });
         this.lastDispatchFlat = flat;
         this.lastDispatchWords = text.trim().split(/\s+/);
+        this.lastDispatchText = text;
         return;
       }
+      const meta = refinal ? { supersedes: this.lastDispatchText } : void 0;
       this.lastDispatchFlat = flat;
       this.lastDispatchWords = text.trim().split(/\s+/);
+      this.lastDispatchText = text;
       this.lastDispatchAt = this.clock.now();
       this.repliedSinceDispatch = false;
+      this.dispatchReply = "";
       this.lastDispatchWasQuestion = /\?\s*$/.test(text);
+      this.bargedBeforeDispatch = refinal ? this.bargedBeforeDispatch || this.bargedSinceDispatch : this.bargedSinceDispatch;
+      this.bargedSinceDispatch = false;
+      this.dispatchRefinal = refinal;
+      if (!refinal) this.ackSpent = false;
       this.turnStartAt = this.clock.now();
       this.bargeGraceUntil = this.clock.now() + this.options.bargeGraceMs;
-      this.diag("dispatch", { text, path: refinal ? "refinalized" : path, question: this.lastDispatchWasQuestion });
-      this.options.onUtterance(text);
+      this.diag("dispatch", { text, path: refinal ? "refinalized" : path, heldTier, question: this.lastDispatchWasQuestion, ...this.bargedBeforeDispatch ? { barged: true } : {} });
+      this.options.onUtterance(text, meta);
     }
   }
   get overlapCapable() {
     return this.usingAec && this.options.overlapPause && !!this.player.pause && !!this.player.resume;
   }
+  /** Stop/question words that make an overlap an obvious barge — never held for a host decision. */
+  static OVERLAP_CEDE_WORDS = /* @__PURE__ */ new Set([
+    "stop",
+    "wait",
+    "no",
+    "hold",
+    "hang",
+    "pause",
+    "quiet",
+    "enough",
+    "shut",
+    "cancel",
+    "what",
+    "why",
+    "how",
+    "who",
+    "when",
+    "where",
+    "which"
+  ]);
+  /** A short, non-urgent overlap: the kind a listener cue or reaction takes (see overlapDecideMs). */
+  shortOverlap(text) {
+    const w = this.words(text);
+    return w.length <= this.options.overlapDecideMaxWords && !/\?/.test(text) && !w.some((x) => _VoiceEngine.OVERLAP_CEDE_WORDS.has(x));
+  }
+  /** Cede the floor to an overlap: interrupt, tell the host, then dispatch a final that was held while deciding. */
+  cedeOverlap(trigger, txt) {
+    const phase = this.ctxOpen ? "speaking" : "drain";
+    const held2 = this.decideHeldFinal;
+    this.decideHeldFinal = "";
+    this.diag("barge_in", { phase, trigger, novel: this.novelWords(txt).length, total: this.words(txt).length });
+    this.interrupt();
+    this.options.onBargeIn(phase);
+    if (held2) this.handleUtterance(held2);
+  }
+  /** Wait (bounded) for the host's verdict. `fresh` = a re-decision on grown text: it gets its own window — the host
+   *  was only just asked about it (live: "Oh," → "Oh, that" → "Oh, that— that's new" outgrew every verdict, and the
+   *  first window ran out mid-chase, ceding a reaction Jev kept) — but the whole hold is capped at 3× the window. */
+  awaitOverlapDecision(txt, fresh = false) {
+    if (this.decideTimer && !fresh) return;
+    if (this.resumeTimer) {
+      this.clock.clearTimeout(this.resumeTimer);
+      this.resumeTimer = null;
+    }
+    if (this.decideTimer) this.clock.clearTimeout(this.decideTimer);
+    const now4 = this.clock.now(), ms = this.options.overlapDecideMs;
+    if (!this.decideSince) this.decideSince = now4;
+    const wait = Math.min(ms, this.decideSince + 3 * ms - now4);
+    this.diag("overlap_await", { text: txt.slice(0, 60), ms: wait });
+    this.decideTimer = this.clock.setTimeout(() => {
+      this.decideTimer = null;
+      if (this.pausedAt) this.cedeOverlap("overlap_decide_timeout", this.lastOverlapPartial || txt);
+    }, Math.max(0, wait));
+  }
+  /** Words in `text` the host's keep_talking verdict never covered (the overlap grew after it judged). */
+  unjudged(text) {
+    const seen = new Set(this.words(this.overlapKept));
+    return this.words(text).some((w) => !seen.has(w));
+  }
+  /** The host's verdict on the overlap the engine is holding (overlapDecideMs, or any live overlap pause):
+   *  'yield' cedes the floor (a final that landed meanwhile is dispatched); 'keep_talking' resumes playback and
+   *  absorbs the rest of THAT reaction — `heard`, the text the verdict judged (default: the live partial); its final
+   *  is dropped. Words beyond `heard` are a new overlap, decided afresh: if the partial/final has already grown past
+   *  it, the hold stays and `overlap_pause` is re-emitted for a new verdict (bounded by overlapDecideMs, else it
+   *  cedes; a re-decision gets its own window, the whole hold capped at 3× it) and this returns false. Also false when no overlap hold is live (the engine already decided). */
+  decideOverlap(choice, heard) {
+    if (!this.pausedAt || !this.speaking) return false;
+    if (choice === "yield") {
+      this.cedeOverlap("host_yield", this.lastOverlapPartial);
+      return true;
+    }
+    this.overlapKept = heard?.trim() || this.lastOverlapPartial;
+    const grown = this.decideHeldFinal || this.lastOverlapPartial;
+    if (this.unjudged(grown)) {
+      if (!(this.options.overlapDecideMs > 0 && this.shortOverlap(grown))) {
+        this.cedeOverlap("overlap_cede", grown);
+        return false;
+      }
+      this.diag("overlap_pause", { text: grown.slice(0, 60), redecide: true });
+      this.awaitOverlapDecision(grown, true);
+      return false;
+    }
+    const held2 = this.decideHeldFinal;
+    this.decideHeldFinal = "";
+    this.diag("overlap_resume", { heldMs: Math.round(this.clock.now() - this.pausedAt), reason: "host_keep" });
+    if (held2) this.diag("utterance_drop", { reason: "overlap_kept", text: held2.slice(0, 60) });
+    this.overlapKeptUntil = held2 ? 0 : this.clock.now() + 4e3;
+    this.resetOverlap(true);
+    this.lastResumeAt = 0;
+    return true;
+  }
   armResume() {
     if (this.resumeTimer) this.clock.clearTimeout(this.resumeTimer);
     this.resumeTimer = this.clock.setTimeout(() => {
@@ -7476,6 +8147,20 @@ var VoiceEngine = class _VoiceEngine {
       this.clock.clearTimeout(this.resumeTimer);
       this.resumeTimer = null;
     }
+    if (this.decideTimer) {
+      this.clock.clearTimeout(this.decideTimer);
+      this.decideTimer = null;
+    }
+    this.decideSince = 0;
+    const held2 = this.decideHeldFinal;
+    this.decideHeldFinal = "";
+    if (held2) {
+      this.diag("utterance_release", { reason: "overlap_hold_exit", text: held2.slice(0, 60) });
+      this.pendingUtt = this.mergeUtterance(this.pendingUtt, held2);
+      if (this.pendingTimer) this.clock.clearTimeout(this.pendingTimer);
+      this.pendingTimer = this.clock.setTimeout(() => this.flushUtterance(), 0);
+    }
+    if (this.pausedAt) this.diag("overlap_end", { resumed: resume, heldMs: Math.round(this.clock.now() - this.pausedAt) });
     if (this.pausedAt && resume) {
       this.player.resume?.();
       this.lastResumeAt = this.clock.now();
@@ -7541,7 +8226,8 @@ var SentenceCoalescer = class _SentenceCoalescer {
   feed(delta) {
     if (delta) this.buf += delta;
     let cut = -1;
-    for (let i = 0; i < this.buf.length; i++) if (_SentenceCoalescer.isEnd(this.buf[i])) cut = i;
+    const decimal = (i) => this.buf[i] === "." && /\d/.test(this.buf[i - 1] ?? "") && (i + 1 === this.buf.length || /\d/.test(this.buf[i + 1]));
+    for (let i = 0; i < this.buf.length; i++) if (_SentenceCoalescer.isEnd(this.buf[i]) && !decimal(i)) cut = i;
     if (cut < 0) return "";
     if (this.buf[cut] !== "\n") while (cut + 1 < this.buf.length && CLOSERS.includes(this.buf[cut + 1])) cut++;
     const ready = this.buf.slice(0, cut + 1).trim();
@@ -7556,9 +8242,14 @@ var SentenceCoalescer = class _SentenceCoalescer {
 };
 var SpokenSplitter = class {
   buf = "";
-  inSpoken = false;
+  open = false;
   /** True once any spoken char has ever been emitted (drives the no-spoken fallback). */
   spokeAny = false;
+  /** Inside a `<spoken>` block after the last feed. Once it is false, a caller coalescing sentences can flush: nothing
+   *  more of that block is coming (a held "…in 2026." would otherwise wait for the next spoken text or the stream end). */
+  get inSpoken() {
+    return this.open;
+  }
   /** Feed a delta; returns the spoken/detail spans completed by this chunk (either may be ''). */
   feed(delta) {
     this.buf += delta;
@@ -7572,26 +8263,26 @@ var SpokenSplitter = class {
     let spoken = "";
     let detail = "";
     while (this.buf.length) {
-      const tag = this.inSpoken ? CLOSE : OPEN;
+      const tag = this.open ? CLOSE : OPEN;
       const idx = this.buf.indexOf(tag);
       if (idx >= 0) {
         const text2 = this.buf.slice(0, idx);
-        if (this.inSpoken) spoken += text2;
+        if (this.open) spoken += text2;
         else detail += text2;
         this.buf = this.buf.slice(idx + tag.length);
-        this.inSpoken = !this.inSpoken;
+        this.open = !this.open;
         continue;
       }
       const lt = this.buf.lastIndexOf("<");
       const holdStart = lt >= 0 && tag.startsWith(this.buf.slice(lt)) ? lt : this.buf.length;
       const text = this.buf.slice(0, holdStart);
-      if (this.inSpoken) spoken += text;
+      if (this.open) spoken += text;
       else detail += text;
       this.buf = this.buf.slice(holdStart);
       break;
     }
     if (final && this.buf) {
-      if (this.inSpoken) spoken += this.buf;
+      if (this.open) spoken += this.buf;
       else detail += this.buf;
       this.buf = "";
     }
@@ -7606,7 +8297,11 @@ var now = () => performance.now();
 var SonioxSTTOptions = class {
   auth = "";
   source;
-  model = "stt-rt-preview";
+  /** `stt-rt-preview` was RETIRED (aliased to the two-generations-old v3 on 2025-10-31), so every
+   *  caller that never set this was silently running an old model while the alias kept it working —
+   *  the failure mode of a default that is a moving vendor pointer. Pin a real version instead;
+   *  `stt-rt-v5` is live today (verified against GET https://api.soniox.com/v1/models). */
+  model = "stt-rt-v5";
   languageHints = ["en"];
   /** Client-side endpoint: finalized text + no new tokens for this long = utterance (don't wait for
    *  Soniox's semantic <end>, which adds 0.5-1.5s — the difference between ping-pong and lag). */
@@ -7979,6 +8674,15 @@ function base64ToBytes(b64) {
   return out;
 }
 
+// node_modules/@bod.ee/voice/src/adapters/fish.ts
+var log15 = forComponent2("FishTTS");
+
+// node_modules/@bod.ee/voice/src/adapters/grok.ts
+var log16 = forComponent2("GrokTTS");
+
+// node_modules/@bod.ee/voice/src/adapters/grok-stt.ts
+var log17 = forComponent2("GrokSTT");
+
 // src/voice/engine.ts
 init_logging();
 configureLogging((name) => {
@@ -7987,8 +8691,431 @@ configureLogging((name) => {
   return { debug: at("debug"), verbose: at("verbose"), info: at("info"), warn: at("warn"), error: at("error") };
 });
 
+// src/voice/instinct.ts
+init_logging();
+var log18 = forComponent("Instinct");
+var InstinctOptions = class {
+  decider;
+  /** Partial unchanged this long (a micro-pause) → consult. */
+  stableMs = 250;
+  /** Don't consult on fragments shorter than this. */
+  minWords = 4;
+  /** Act only on the TOP choice, and only above its floor (live eval 2026-09-23: a correct cut-in often
+   *  tops at 0.6-0.8; a mid-thought "we could maybe" drew a 0.58 backchannel that must not fire). */
+  backchannelMin = 0.65;
+  interjectMin = 0.6;
+  yieldMin = 0.7;
+  backchannelGapMs = 5e3;
+  interjectGapMs = 2e4;
+  /** A decision whose partial grew by this many words while in flight is stale → dropped. */
+  staleWords = 3;
+  /** Overlap: consult only once the engine has HELD the pause this long without ceding. The engine cedes on
+   *  the 2nd novel word (~200ms after the pause, live 2026-09-23) — a call fired at the pause lands after that
+   *  (~300-400ms) and can never act. A hold that survives this window is the undecided case (a 1-word overlap
+   *  the engine would RESUME over at overlapResumeMs=700) — the one where a yield actually changes the outcome. */
+  overlapSettleMs = 250;
+  /** ackFor waits this long for the host's ackOutcome before treating the ack as unspoken. Hosts set it to the engine's
+   *  last chance to fire (bod-voice: 2×adaptiveAckMs — past that a pending pick is dropped as pick_late). */
+  ackSettleMs = 1500;
+  context = () => ({});
+  /** Actions return `false` when the host could not act (engine state moved on) → logged as `<act>_skipped`. */
+  onBackchannel = () => {
+  };
+  onInterject = () => {
+  };
+  onYield = () => {
+  };
+  /** The overlap was judged a listener cue — carry on. Hosts whose engine HOLDS short overlaps for a verdict
+   *  (bod-voice overlapDecideMs) resume it here; otherwise leave the default no-op (the engine decides). */
+  onKeepTalking = () => {
+  };
+  onDecision = () => {
+  };
+  now = () => performance.now();
+};
+var ACK_SITUATIONS = {
+  hard_question: `a question that takes real thought, judgment or looking something up ("what's the biggest takeaway?", "how should I structure this?")`,
+  simple_question: 'a quick question with an instant, obvious answer ("how are you?", "what time is it?", "can you hear me?")',
+  emotional_bad: "they share something bad, sad, painful, worrying or frustrating",
+  emotional_good: "they share good news, excitement, relief or pride",
+  challenge: `they doubt, question or push back on what you just said ("are you sure?", "why do you say that?", "that doesn't sound right")`,
+  surprise: `they react with surprise or disbelief to what you said ("oh, that's new", "really?", "no way", "oh.")`,
+  agreement: `they agree with you, confirm, or tell you to go on ("exactly", "yes, that's it", "okay, so continue")`,
+  goodbye: "they are wrapping up the conversation or saying goodbye",
+  command: 'a request or instruction for you to do, find, check or tell them something ("tell me the news", "check my calendar")',
+  silent: 'ONLY when nothing was really said yet: an unfinished fragment or false start, a mic check or count ("one, two"), a bare greeting or filler ("hey", "um")'
+};
+var ACK_BANK = {
+  hard_question: ["Hmm, let me think on that.", "Ooh, interesting one.", "Hm, that's a big one.", "Let's see here."],
+  simple_question: ["Oh, well, so\u2014", "Well, let's see\u2014", "Oh, easy one\u2014"],
+  challenge: ["Fair question.", "Mm, fair to ask.", "Hm, okay, so\u2014", "Ah, I get why\u2014"],
+  emotional_bad: ["Oh, I'm sorry.", "Ugh, that's rough.", "Aw, that's hard.", "Oh man, I'm sorry."],
+  emotional_good: ["Oh, that's great!", "Oh, that's awesome!", "Oh, nice one!", "Love to hear it!"],
+  surprise: ["Right? Pretty wild.", "Yeah, wild, huh?", "Huh, I know.", "Wild, isn't it?"],
+  agreement: ["Mm, good, so\u2014", "Yeah, so\u2014", "Alright, so\u2014", "Yep, with you."],
+  goodbye: ["Alright, catch you later.", "Great chatting.", "Okay, all set then."],
+  command: ["On it.", "Sure, one sec.", "Got it, one moment.", "Sure thing, one sec."],
+  silent: [],
+  // interruption acks, keyed on the barge intent
+  stop: ["Sure, stopping.", "Okay, stopping here.", "Got it, I'll stop."],
+  aside: ["Oh, quick one\u2014", "Ah, sure, so\u2014", "Oh, right, so\u2014"],
+  steer: ["Ah, okay, switching\u2014", "Ah, got it, so\u2014", "Oh, gotcha, sure\u2014"],
+  resume: ["Right, so\u2014", "Anyway, so\u2014", "So, as I was saying\u2014"]
+};
+var INTENT_ACK_OVER = {
+  stop: Object.keys(ACK_SITUATIONS).filter((s) => s !== "silent"),
+  steer: ["command"],
+  resume: ["agreement", "silent"],
+  aside: []
+};
+function interruptionNote(cut, intent) {
+  const full = cut.full.trim();
+  let at = Math.min(cut.heard.length, cut.full.length);
+  if (/\S/.test(cut.full[at] ?? "") && /\S/.test(cut.full[at - 1] ?? "")) at = cut.full.lastIndexOf(" ", at) + 1;
+  const heardWords = cut.full.slice(0, at).trim().split(/\s+/).filter(Boolean).length;
+  const unheard = cut.full.slice(at).trim();
+  const landed = heardWords < 4 ? "They cut in almost at once \u2014 treat all of it as unsaid." : `They heard everything before this part. They missed the rest of it: "${unheard}".`;
+  const how = {
+    resume: "They did not ask anything new. Carry on with the part they missed \u2014 no restart, no apology.",
+    aside: "It was an aside. Answer it briefly FIRST, then finish the part they missed, adjusted to anything they just said. Say each point once: skip whatever they already heard and whatever your answer just covered.",
+    steer: "They steered away. Follow their new direction; carry over only what still matters from your unfinished point, or drop it.",
+    stop: "They want you to stop. Do not resume; at most a few words of acknowledgement.",
+    unknown: "Decide like a person would: if it was an aside, answer it and then finish your point; if they steered away, follow them and drop or adapt the rest."
+  };
+  return `
+[the user interrupted you mid-speech. You were saying: "${full}" ${landed} ${how[intent ?? "unknown"]} Just talk, like a person picking the thread back up: never tell them what they heard or missed, never say where you were cut off, and never quote your earlier words back. If their words are still an unfinished fragment, call Hold instead of answering.]`;
+}
+var FRAME = "You are the instinct of a warm, attentive human in a live spoken conversation. Decide what a natural human would do THIS instant \u2014 the way people do without thinking. ";
+var acted = (what, r) => r === false ? `${what}_skipped` : what;
+var words = (s) => s.trim() ? s.trim().split(/\s+/).length : 0;
+var Instinct = class {
+  constructor(options) {
+    this.options = options;
+    this.options = { ...new InstinctOptions(), ...options };
+  }
+  options;
+  partial = "";
+  turnStart = 0;
+  timer = null;
+  inflight = false;
+  lastBcAt = -Infinity;
+  lastInterjectAt = -Infinity;
+  lastIntent;
+  overlapGen = 0;
+  // bumped by overlapEnded / a newer overlap → cancels a pending or in-flight overlap consult
+  lastAckPick;
+  interjecting = false;
+  // inside onInterject — see pickAck
+  lastAckSaid = "";
+  get o() {
+    return this.options;
+  }
+  /** A live user partial while the agent is LISTENING. Consults once the partial goes stable. */
+  hear(text) {
+    const t = text.trim();
+    if (!t || t === this.partial) return;
+    this.partial = t;
+    if (!this.turnStart) this.turnStart = this.o.now();
+    if (this.timer) clearTimeout(this.timer);
+    this.timer = setTimeout(() => {
+      this.timer = null;
+      void this.consult(t);
+    }, this.o.stableMs);
+  }
+  /** The user's turn ended (final dispatched, or the agent took the floor) — forget the partial, and drop any
+   *  pending overlap consult: whatever hold it was about is over. */
+  reset() {
+    this.overlapGen++;
+    if (this.timer) clearTimeout(this.timer);
+    this.timer = null;
+    this.partial = "";
+    this.turnStart = 0;
+  }
+  async consult(heard) {
+    if (this.inflight || words(heard) < this.o.minWords) return;
+    this.inflight = true;
+    try {
+      const now4 = this.o.now();
+      const d = await this.ask("listen", heard, {
+        heard_so_far: heard,
+        user_speaking_for_ms: Math.round(now4 - this.turnStart),
+        ms_since_our_last_backchannel: Number.isFinite(this.lastBcAt) ? Math.round(now4 - this.lastBcAt) : null
+      }, FRAME + "The user is mid-turn and just paused for a split second. Do you keep quiet, give a tiny listener cue, or cut in? Cut in only when a human really would: they are clearly wrong about something that matters, they are struggling for a word you know, or they asked something and are trailing off.", {
+        stay_silent: "keep listening \u2014 they are mid-thought, nothing to add",
+        backchannel: 'a tiny "mm-hm"/"right" to show you are following, without taking the turn (fits after a clause in a longer story or explanation)',
+        interject: "cut in now with a short correction, the word they are reaching for, or an answer"
+      });
+      if (!d) return;
+      if (!this.partial || words(this.partial) - words(heard) >= this.o.staleWords) return this.o.onDecision({ ...d, acted: "stale" });
+      const p = d.probabilities, t = this.o.now();
+      if (d.choice === "interject" && p.interject >= this.o.interjectMin && t - this.lastInterjectAt > this.o.interjectGapMs) {
+        this.lastInterjectAt = t;
+        const at = this.partial;
+        this.reset();
+        this.interjecting = true;
+        let r;
+        try {
+          r = this.o.onInterject(at);
+        } finally {
+          this.interjecting = false;
+        }
+        this.o.onDecision({ ...d, acted: acted("interject", r) });
+      } else if (d.choice === "backchannel" && p.backchannel >= this.o.backchannelMin && t - this.lastBcAt > this.o.backchannelGapMs) {
+        this.lastBcAt = t;
+        this.o.onDecision({ ...d, acted: acted("backchannel", this.o.onBackchannel()) });
+      } else this.o.onDecision(d);
+    } finally {
+      this.inflight = false;
+    }
+  }
+  /** The user started talking OVER the agent (engine paused on a genuine overlap). Yield or keep going?
+   *  Consulted only if the engine is STILL holding after overlapSettleMs — see overlapEnded(). */
+  async overlap(heard) {
+    if (!heard.trim()) return;
+    const gen = ++this.overlapGen;
+    if (this.o.overlapSettleMs > 0) await new Promise((r) => setTimeout(r, this.o.overlapSettleMs));
+    if (gen !== this.overlapGen) return;
+    const d = await this.ask(
+      "overlap",
+      heard,
+      { user_said_over_us: heard },
+      FRAME + "You are mid-sentence and the user just said something over you. Would a human stop and give them the floor, or treat it as a listener cue and carry on?",
+      {
+        yield: 'they want the floor \u2014 an objection, question, correction, "stop"/"wait", or new information',
+        keep_talking: 'just a listener cue or agreement ("yeah", "mm-hm", "right", "okay") \u2014 carry on'
+      }
+    );
+    if (d && gen !== this.overlapGen) this.o.onDecision({ ...d, acted: "stale" });
+    else if (d && (d.probabilities.yield ?? 0) >= this.o.yieldMin) {
+      this.o.onDecision({ ...d, acted: acted("yield", this.o.onYield(heard)) });
+    } else if (d?.choice === "keep_talking") {
+      this.o.onDecision({ ...d, acted: acted("keep_talking", this.o.onKeepTalking(heard)) });
+    } else if (d) this.o.onDecision(d);
+  }
+  /** The engine's hold ended (it ceded the floor, resumed over a stalled overlap, began a new turn, or was
+   *  interrupted) — drop any pending/in-flight overlap consult. Hosts call this on every hold exit. */
+  overlapEnded() {
+    this.overlapGen++;
+  }
+  /** What the user meant by cutting us off mid-speech. Memoized per text (the duplex judge and the host's
+   *  note builder ask about the same line). Rejects on decider failure — callers pick their fallback. */
+  bargeIntent(heard) {
+    if (this.lastIntent?.heard === heard) return this.lastIntent.p;
+    const p = this.ask(
+      "barge_intent",
+      heard,
+      { user_said_after_cutting_us_off: heard },
+      FRAME + "You were in the middle of saying something (what_we_said_last) and the user cut you off with this. What would a human take from it?",
+      {
+        resume: 'nothing new \u2014 a filler, apology, or "go on": just pick up where you left off',
+        aside: "a quick question, comment, or clarification about what you were saying \u2014 answer it, then carry on with your point",
+        steer: "they are redirecting \u2014 a different topic, a correction of your plan, or a new request that replaces what you were saying",
+        stop: "they want you to stop talking or drop it"
+      },
+      true
+    ).then((d) => {
+      if (d) this.o.onDecision({ ...d, acted: d.choice });
+      return d?.choice ?? "steer";
+    });
+    this.lastIntent = { heard, p };
+    return p;
+  }
+  /** The ack for a finished user turn (engine `pickAck`, asked at dispatch): one Choice over ACK_SITUATIONS, run in
+   *  parallel with the reflex. After a barge the interruption's intent (bargeIntent, memoized — the same call the note
+   *  builder makes) replaces the situations in INTENT_ACK_OVER with its own ack; the rest keep the situational ack.
+   *  `null` = say nothing. Never rejects: a failed Choice → silence (logged in ask) — a wrong ack is worse than none,
+   *  and a slow reflex still gets the dead-air repair.
+   *  A cut-in (asked from inside onInterject) is always silent: it has no dispatch, so the engine's context carries the
+   *  user's PREVIOUS final (live: "My dog died yesterday." re-acked "Oh no." before a cut-in correction), and the
+   *  unfinished partial is no turn to react to — the interjection itself is the reply. */
+  pickAck(ctx) {
+    if (this.interjecting) {
+      log18.debug(`ack: cut-in turn \u2192 silent (engine context "${ctx.text.slice(0, 40)}" is the previous final)`);
+      return Promise.resolve(null);
+    }
+    const text = ctx.text.trim();
+    const p = (async () => {
+      const intentP = ctx.barged ? this.bargeIntent(text).catch((e) => {
+        log18.warn(`barge intent for the ack failed \u2014 situational ack: ${e.message}`);
+        return null;
+      }) : null;
+      const d = await this.ask(
+        "ack",
+        text,
+        { user_just_said: text },
+        FRAME + "The user just finished speaking (user_just_said) and your real reply is a moment away. Classify what they said, so the fitting quick acknowledgement can be voiced first. Pick the category that matches their words; most requests and questions are NOT silent.",
+        ACK_SITUATIONS
+      );
+      const sit = d?.choice ?? "silent";
+      const intent = intentP ? await intentP : null;
+      const key = intent && INTENT_ACK_OVER[intent].includes(sit) ? intent : sit;
+      const phrase = this.rotate(ACK_BANK[key] ?? []);
+      if (d) this.o.onDecision({ ...d, acted: phrase ? `${key}: ${phrase}` : `${key}: silent` });
+      return phrase;
+    })();
+    let settle;
+    const spoken = new Promise((r) => {
+      settle = r;
+    });
+    const timer = setTimeout(() => {
+      log18.debug(`ack: no engine outcome in ${this.o.ackSettleMs}ms \u2014 not claimed`);
+      settle(null);
+    }, this.o.ackSettleMs);
+    void spoken.then(() => clearTimeout(timer));
+    this.lastAckPick = { text, p, spoken, settle };
+    return p;
+  }
+  /** The host reports what the engine did with the armed ack: the phrase it actually spoke, or null (silent, late,
+   *  cancelled). First report per pick wins — a later turn's cancel of an already-spoken ack changes nothing. */
+  ackOutcome(said) {
+    this.lastAckPick?.settle(said);
+  }
+  /** What was said out loud to open the reply to this exact text — lets a host tell the reply turn, without a second
+   *  call. Only an ack the engine actually SPOKE (ackOutcome): a pick that lands after the engine's deadline is never
+   *  claimed. null: nothing picked, not spoken, not asked, or no outcome within ackSettleMs of the pick's start.
+   *  Never waits past that cap (a hung pick included), and returns as soon as the outcome settles. */
+  async ackFor(text) {
+    const pick = this.lastAckPick;
+    if (pick?.text !== text.trim()) return null;
+    return Promise.race([pick.p.then((p) => p ? pick.spoken : null), pick.spoken]);
+  }
+  /** A random phrase from `pool`, never the one said last (no back-to-back repeat across keys). */
+  rotate(pool) {
+    const fresh = pool.filter((x) => x !== this.lastAckSaid);
+    const from = fresh.length ? fresh : pool;
+    if (!from.length) return null;
+    return this.lastAckSaid = from[Math.floor(Math.random() * from.length)];
+  }
+  async ask(kind, heard, state, instructions, criteria, rethrow = false) {
+    const t0 = this.o.now();
+    try {
+      const ctx = this.o.context();
+      const { answers } = await this.o.decider.decide({
+        state: { ...state, what_we_said_last: ctx.agentSaid || null, recent_conversation: ctx.recent || null },
+        questions: { act: { type: "choice", instructions, criteria } }
+      });
+      return { kind, heard, choice: answers.act.choice, probabilities: answers.act.probabilities, ms: Math.round(this.o.now() - t0) };
+    } catch (e) {
+      log18.warn(`${kind} decision failed \u2014 falling back to engine defaults: ${e.message}`);
+      if (rethrow) throw e;
+      return null;
+    }
+  }
+};
+
+// src/voice/unsaid.ts
+init_logging();
+var log19 = forComponent("Unsaid");
+var STOP2 = new Set("that this with have from they them their there then than what when were will would your about into just also been some only over more most very which while after before because these those does here".split(" "));
+var contentStems = (s) => (s.toLowerCase().match(/[a-z0-9']+/g) ?? []).filter((w) => w.length >= 4 && !STOP2.has(w)).map((w) => w.slice(0, 4));
+var SAID_OVERLAP = 0.6;
+var UNSAID_OVERLAP = 0.25;
+var CONVEYED_MIN = 0.3;
+function splitClauses(text) {
+  return text.split(/(?<=[.!?…])\s+|(?<=;)\s+|(?<=,)\s+(?=(?:and|but)\b)/i).map((s) => s.trim()).filter((s) => contentStems(s).length > 0);
+}
+var overlap = (clause, said) => {
+  const w = contentStems(clause);
+  return w.filter((x) => said.has(x)).length / w.length;
+};
+var INSTRUCTIONS = "A voice assistant was interrupted mid-delivery; ASSISTANT_SAID is what it then said aloud. Did the MAIN POINT of this clause of the unheard delivery reach the listener through ASSISTANT_SAID \u2014 would hearing the clause too add nothing important? Different words, casual phrasing, rounder numbers, or a missing minor detail (a name, an exact figure) still count as conveyed. Not conveyed only when the clause's main point is absent from ASSISTANT_SAID, even if a neighbouring point is there.";
+async function unsaidClauses(pieces, spoken, decider, timeoutMs = 5e3) {
+  const said = new Set(contentStems(spoken));
+  const open = splitClauses(pieces.join(" ")).map((c) => ({ c, r: overlap(c, said) })).filter((x) => x.r < SAID_OVERLAP);
+  if (!open.length) return [];
+  const fallback = () => open.filter((x) => x.r < UNSAID_OVERLAP).map((x) => x.c);
+  if (!decider) return fallback();
+  const state = { assistant_said: spoken };
+  const questions = {};
+  open.forEach((x, i) => {
+    state[`c${i}`] = x.c;
+    questions[`c${i}`] = { type: "noul", instructions: `${INSTRUCTIONS} The clause is c${i}.`, criteria: { true: `the main point of c${i} reached the listener`, false: `the main point of c${i} is missing` } };
+  });
+  let timer;
+  try {
+    const { answers } = await Promise.race([
+      decider.decide({ state, questions }),
+      new Promise((_, rej) => {
+        timer = setTimeout(() => rej(new Error(`no verdict in ${timeoutMs}ms`)), timeoutMs);
+      })
+    ]);
+    return open.filter((_, i) => {
+      const p = Number(answers[`c${i}`]?.noul);
+      if (!Number.isFinite(p)) throw new Error(`no noul for c${i}`);
+      return p < CONVEYED_MIN;
+    }).map((x) => x.c);
+  } catch (e) {
+    log19.warn(`unsaid judge failed \u2014 only near-zero-overlap clauses count as unsaid: ${e.message}`);
+    return fallback();
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/voice/leak.ts
+var TOOL = String.raw`(?:QuickLook|TaskStatus|CancelTask|AnswerTask|ExitSession|Act|Think|Hold(?! on\b))`;
+var SUSPECT = [
+  /\b(?:user|assistant)\b/i,
+  /\b(?:instructions?|guidelines?|polic(?:y|ies)|system prompt|developer (?:message|instructions?|prompt))\b/i,
+  new RegExp(String.raw`\b${TOOL}\b`),
+  /\bwe (?:need to|have to|should|must|ought to)\b|(?:^|[.!?]\s*)(?:need to|should|must|let's)\b/i,
+  /\bi (?:need to|have to|should|must) (?:respond|reply|answer|output|produce|comply|acknowledge|say|ask|greet|call|use|dispatch|wait|keep|avoid|not)\b/i,
+  /\b(?:respond|reply|output|produce|comply|acknowledge?)\w*\b/i,
+  /\bwe(?: have|'ve)\b|\bwe (?:already )?(?:responded|replied|dispatched|used|called|did|gave|said|asked)\b/i,
+  /\bno (?:further|more|other)\b/i,
+  /\[\s*task\b|\bt\d+\b|\bwait(?:ing)? for (?:the )?(?:events?|results?|task)\b/i,
+  /\w\s*\{\s*"|\bwhat:\s*"/,
+  /\b(?:last|previous) (?:response|reply|message|turn)\b|\bthe (?:conversation|transcript|context)\b/i
+];
+var STRICT = [
+  // the listener as a third-person subject opening the sentence ("The user wants…", telegraphic "User wants…")
+  /^(?:the )?user(?:'s)? (?:asks|asked|wants|wanted|said|says|is (?:asking|saying|speaking|referring|requesting)|just (?:said|asked)|requests|requested|mentioned|seems|keeps|repeated|typed|provided|expects|explicitly)\b/i,
+  /\b(?:if|when|since|because) user (?:is|keeps|wants|says|said|asks|asked|seems)\b/i,
+  /\bwe have (?:an? )?(?:user (?:who|request|message|asking|saying)|conversation (?:where|with)|new user message)\b|^we have task\b/i,
+  /\bthe assistant(?:'s (?:context|last|previous) (?:response|reply|turn|message)| (?:responded|replied) with)\b/i,
+  // planning its own reply
+  /\b(?:we|i) (?:need to|have to|should|must) (?:respond|reply|answer)(?:\s*:|\s+(?:briefly|concisely|accordingly|according to|appropriately|to the user|with (?:a |the )?(?:brief|short|result|acknowledg)))/i,
+  /\b(?:we|i) (?:need to|should|must) output\b|^(?:we|i) must comply[.!]?$/i,
+  /\bno (?:further|more|other) (?:response|reply|output)s? (?:is )?(?:needed|required|necessary)\b/i,
+  /\bwe(?: have|'ve)? (?:already )?(?:responded|replied)[.!]?$/i,
+  // its own protocol: using its tools, tool-call syntax, task events
+  new RegExp(String.raw`(?:\b[Ww]e(?: need to| should| must| have to| will|'ll)|\b[Ll]et'?s|^[Ss]hould|^[Nn]ow we should) (?:call|use|do|dispatch(?: to)?|invoke) (?:the )?${TOOL}\b`),
+  new RegExp(String.raw`\b(?:[Ww]e (?:called|dispatched)|responded with) ${TOOL}\b|\b${TOOL}\s*\{|\bwhat:\s*"|\b${TOOL} (?:tool )?(?:brief|call|args?|arguments)\b`),
+  /\bwait(?:ing)? for (?:the )?(?:events?|t\d+)\b|\bt\d+ (?:completed|failed)\b|\[\s*task\b/i
+];
+var SENTENCE_END = new RegExp(`[.!?\u2026]+["')\\]]*(?:\\s|(?=\\p{Lu}|\\[))`, "gu");
+var SENTENCE_SPLIT = new RegExp(`(?<=[.!?\u2026]+["')\\]]*)(?:\\s+|(?=\\p{Lu}|\\[))`, "u");
+var clean = (s) => s.replace(/\[[a-z_ ]+\]\s*/gi, "").trim();
+function isLeakSuspect(sentence) {
+  const s = clean(sentence);
+  return SUSPECT.some((re) => re.test(s));
+}
+function isStrictLeak(sentence) {
+  return sentence.split(SENTENCE_SPLIT).some((x) => {
+    const s = clean(x);
+    return STRICT.some((re) => re.test(s));
+  });
+}
+var JUDGE_INSTRUCTIONS = `This sentence was produced by a voice assistant's reply stream and is about to be read aloud to the user. Is it the assistant's private scratchpad reasoning that leaked out \u2014 talking ABOUT the conversation instead of TO the listener? Leaked reasoning: refers to the listener in the third person ("the user wants\u2026", "user said\u2026"), plans its own reply ("we need to respond\u2026", "we should output\u2026", "I should answer briefly"), cites its own guidelines/instructions, or narrates its internal tool calls and task events (QuickLook, Act, Think, Hold, TaskStatus, "t2 completed") as steps it is taking. Speech: anything said TO the listener \u2014 answers, questions, offers, news, advice, explaining what it can do when asked, even if it mentions a user, an assistant, a policy, instructions, replying, or a tool.`;
+var LEAK_JUDGE_THRESHOLD = 0.6;
+async function judgeLeak(decider, sentence, userSaid) {
+  const { answers } = await decider.decide({
+    state: { what_the_user_just_said: userSaid.slice(-600) || null, sentence_about_to_be_spoken: clean(sentence) },
+    questions: {
+      q: {
+        type: "noul",
+        instructions: JUDGE_INSTRUCTIONS,
+        criteria: { true: "leaked private reasoning \u2014 must not be spoken", false: "said to the listener \u2014 fine to speak" }
+      }
+    }
+  });
+  const p = Number(answers.q.noul);
+  if (!Number.isFinite(p)) throw new Error("leak judge: no noul in the answer");
+  return p;
+}
+
 // src/duplex.ts
-var log15 = forComponent("DuplexAgent");
+var log20 = forComponent("DuplexAgent");
 function describeCall(call) {
   const v = call.args && Object.values(call.args).find((x) => typeof x === "string" && x.trim());
   const hint = v ? ` (${String(v).replace(/\s+/g, " ").trim().slice(0, 48)})` : "";
@@ -8030,6 +9157,13 @@ var DuplexAgentOptions = class {
   /** Teach the model to emit inline `[emotion]` tags for Cartesia emotion control. Only set when the
    *  TTS actually speaks them — text-duplex (no TTS) would otherwise print literal tags. */
   emotionTags = false;
+  /** Judge a post-barge line while a delivery is parked: resume it now, answer an aside and carry it on (the reflex,
+   *  told what was heard — see asideNote), or drop it (steer/stop). Unset → the conservative `isTrivialBarge` allowlist (resume | steer); a throwing judge
+   *  falls back to it too. */
+  bargeIntent;
+  /** Typed-decision model (e.g. ai.libx.js DecideClient → Jev). Judges reflex sentences the leak screen flags as
+   *  SUSPECT (src/voice/leak.ts) — only suspects pay the ~300ms call. Unset → only the strict leak shapes are cut. */
+  decider;
   /** Awaited BEFORE a worker spawns — open a per-task checkpoint frame, audit, etc.
    *  (post-spawn would race the worker's first edits). */
   onTaskStart;
@@ -8038,6 +9172,13 @@ var DuplexAgentOptions = class {
   progressUpdates = false;
   /** Min ms between progress re-voices per task. */
   progressIntervalMs = 25e3;
+  /** Spoken budget of ONE task delivery (chars, ~3 short sentences). Past it the rest is parked — cut at a sentence
+   *  boundary, `spokenOffer` spoken instead — so "go on" continues it once (the parked/resume path) and an aside or
+   *  steer handles it like any parked delivery. The worker is also asked for a short spoken summary + one offer (the
+   *  source); this is the backstop. Live 20260924-093945: ~20s and ~70s monologues whose closing choice went unspoken.
+   *  The full result always folds into the transcript. 0 = unbudgeted. */
+  spokenBudgetChars = 0;
+  spokenOffer = "There's more. Want me to go on?";
   /** Relay worker questions (AskUserQuestion + permission asks via parkQuestion) through the VOICE:
    *  the question re-voices as '[task <id> asks] …', the user answers conversationally, and the
    *  voice model resolves it with the AnswerTask tool. Off → host.ask passthrough (text menus). */
@@ -8056,20 +9197,30 @@ var DuplexAgentOptions = class {
   /** User-scope memory dir for global facts (type=user/feedback). Forwarded to Remember's routing. */
   memoryUserDir;
 };
+var SESSION_ID_RE = /^\d{8}-\d{6}(?:-[\w-]+)?$/;
 var RESERVED_EVENT_MARKER = /\[task\b[^\]\n]*\b(?:completed|failed|progress|asks)\b/i;
 var RESERVED_EVENT_OPENER = /\[\s*task\b/i;
 var STAGE_DIRECTION_RE = /^\(\s*(?:(?:waiting|checking|searching|thinking|processing|loading|working|fetching|looking)\b[^)]*|[^)]*(?:\.\.\.|…)\s*)\)$/i;
 function nowLine() {
   return `Current date and time: ${(/* @__PURE__ */ new Date()).toLocaleString("en-US", { weekday: "long", year: "numeric", month: "long", day: "numeric", hour: "numeric", minute: "2-digit", timeZoneName: "short" })}`;
 }
+var STOP_INTENT = /\b(stop|cancel|no|nope|nah|never\s?mind|nvm|forget it|drop it|don'?t|quiet|shut up|enough|hold on|wait|pause|hang on|actually)\b/;
 function isTrivialBarge(text) {
   const t = text.trim().toLowerCase().replace(/[.,!?…\s]+$/g, "").replace(/^[.,!?…\s]+/, "");
   if (!t) return false;
-  if (/\b(stop|cancel|no|nope|nah|never\s?mind|nvm|forget it|drop it|don'?t|quiet|shut up|enough|hold on|wait|pause|hang on|actually)\b/.test(t)) return false;
+  if (STOP_INTENT.test(t)) return false;
   const core = t.replace(/^(?:oh|um+|uh+|er+|hmm+|ah+|well|so|okay|ok|yeah|yep)[\s,]+/, "").trim();
   return /^(?:oh|um+|uh+|er+|hmm+|ah+|sorry|oops|whoops|my bad|pardon|excuse me|apologies|go on|go ahead|continue|keep going|carry on|as you were|please continue|you were saying|sorry go on|sorry continue|go on then|go on please)$/.test(core || t);
 }
-var VOICE_SYSTEM_PROMPT = 'You are a spoken voice assistant \u2014 the user HEARS everything you say. Use short sentences. One idea per sentence. No markdown, no bullet lists, no code blocks, no headings, no emoji. Never emit stage directions or parenthetical asides about your own process \u2014 nothing like "(waiting for the result...)" or "(checking)"; while work runs, either say it as plain speech or end your turn.\nThis holds even when asked to "print", "list", "show", or "make a table" \u2014 there is no screen for the spoken channel. Speak it as flowing prose ("Tuesday is half a meter, Wednesday a bit less\u2026"), or if they truly need it on screen, route it to Act to render. Never emit dashes or pipes into speech.\nKeep turns SHORT \u2014 one to three sentences, then stop. Never lecture, enumerate cases, or add caveats unprompted. Conversation is a fast exchange: give the one thing asked, and let the user pull more if they want it.\nYou have three cognitive tiers \u2014 like a human brain:\n\u2022 YOU (reflex) \u2014 instant, lightweight. Handle greetings, simple questions, status checks, QuickLook.\n\u2022 `Act` \u2014 your hands. A background worker with its own configured tools and access to the user\'s environment (files and shell{{WORKER_WEB}}). Use for reading, editing, searching, running tasks, building \u2014 any real work.\n{{THINK_SLOT}}\nWhen you are unsure whether you can do or access something, do NOT assume and do NOT claim a capability you have not confirmed. To check what you can do, QuickLook `capabilities` (instant \u2014 it lists your worker\'s real tools) and answer from that. Never promise an ability that is not in your capabilities; if it is not there, tell the user plainly you can\'t. To actually DO real work, call `Act`. When the user mentions their project, folder, files, or environment ("this project", "the current folder", "my code"), call `Act` IMMEDIATELY \u2014 do not ask for paths or details the worker can discover itself. Never pretend to have done the work or invent results \u2014 the worker\'s report is your only source.\nYou cannot mute the microphone or stop voice capture yourself \u2014 no tool does it. If the user asks you to stop listening or turn the voice off, never claim you did: tell them to say exactly "voice off" (handled by the app directly), or type /voice.\nYou are NOT a knowledge base. For any question whose answer needs SPECIFIC verifiable facts you do not already have in hand \u2014 how to build/configure/implement something, exact API, library, entitlement, command or option names, current events, or particular numbers, dates, or names \u2014 do NOT answer from your own memory: you will confidently make things up (a fake API, a wrong entitlement, an event that did not happen). Route it to `Act`, which can search and verify, and speak only what its report says. DELEGATION RULE \u2014 decide for yourself, the user never has to push: if you cannot answer confidently from the conversation plus trivial well-known knowledge, do NOT refuse and do NOT guess \u2014 dispatch `Act` immediately with a clear brief and say you are checking. Anything needing CURRENT data (weather, news, prices, dates, sky/astronomy, "right now"), real computation, or verification is an automatic dispatch \u2014 never a refusal. The user should never need to say "search the web" or "think harder" to make you act; needing fresh or verified information IS the trigger. Refuse only what your worker genuinely cannot do (check `capabilities`), and say why. Answer inline ONLY for general conversation, chit-chat, and trivia you are sure of, or facts you can see via QuickLook. When elaborating on a completed task ("tell me more", "the gist"), stay strictly within what that result actually said \u2014 if the user asks for something the result did not cover, that is NEW information: dispatch `Act`, do not improvise.\nALWAYS react before you work: the FIRST thing in your turn is a brief spoken acknowledgement of what you heard and what you are about to do ("got it \u2014 opening that now", "sure, let me pull it up", "okay, checking"). NEVER call a tool (Act, Think, QuickLook) silently \u2014 the user must hear you react before you go quiet to work. After dispatching Act or Think, that same one short sentence IS your turn \u2014 end it and do not wait for the result. Exactly ONE short line: never stack a second acknowledgement, and never narrate your own presence or status while waiting ("I\'m here", "let me see", "still checking" right after you already acked). One clean ack then silence reads as competent; repeated check-ins read as nervous.\nA completed task speaks its OWN result to the user (the worker voices what matters as it finishes) \u2014 you do NOT re-voice clean task results. A FAILED or INCOMPLETE task still arrives as a "[task t1 failed] \u2026" event for you to handle. The completed result stays in YOUR context \u2014 it is yours to draw on. When the user follows up ("tell me more", "what else", "and?"), answer FROM that result first: you already have the detail, so elaborate on what you have. Do NOT spawn a fresh worker to re-search or re-gather what you were just handed. Re-dispatch ONLY when genuinely new information is needed \u2014 e.g. the user wants the full contents of a SPECIFIC source, which is one WebFetch of that URL, not a brand-new search. "[task t1 progress] \u2026" events are interim status, NOT results \u2014 on a genuinely LONG wait you MAY give one brief half-sentence aside, but only occasionally; silence while working is normal and fine (the user knows you are on it). Do NOT narrate every step or re-announce yourself. Never present progress as a finished result.\nCRITICAL: while a task is still running you have NO answer yet \u2014 never state a specific result of any kind (a number, size, count, name, path, or value). The real answer arrives ONLY in the "[task \u2026 completed]" event; inventing one meanwhile (a made-up disk size, commit count, etc.) is a serious error. Until then, only acknowledge and wait.\nNever read raw file paths, diffs, or code aloud verbatim.\nDo NOT end every turn with the same canned offer ("want a rundown?", "want the steps?"). Offer once at most; if the user pushes back, repeats themselves, or sounds unsatisfied ("you know what I mean?", "think deeper", "are you sure?"), do NOT re-offer the same thing \u2014 change approach: dispatch `Act`/`Think` to actually dig in, or ask one concrete clarifying question. Repeating a non-answer is worse than silence.\n"[task t1 asks] \u2026" events are QUESTIONS from a background task \u2014 relay to the user in your own words, short, then end your turn. When the user answers, call `AnswerTask` with that id and their answer. NEVER answer on the user\'s behalf for permissions or risky operations; if their reply is ambiguous, confirm first.\nIf the user\'s message sounds INCOMPLETE \u2014 trailing off mid-sentence, a fragment that needs more context ("and then we", "but the problem is"), hesitation fillers ("uh", "um") \u2014 call `Hold` instead of answering. This keeps listening for the rest of their thought. Only respond with substance when you have a complete question or request.\nDispatch discipline: send ONE self-contained task per request \u2014 a single worker with the full brief beats several workers with fragments (each worker starts fresh and re-discovers context). NEVER dispatch a worker just to read files or gather information \u2014 workers explore and discover context themselves; pass on what you already know and let one worker do the whole job. Split into parallel tasks only when the user asks for genuinely independent things. When a task completes, report its result and stop \u2014 do NOT dispatch follow-up work (verification, polish, extras) the user did not ask for, unless the report itself signals failure or doubt.\nDo not fire a second Act/Think for work already in flight, and NEVER spawn a second task to re-count, cross-check, or verify a result a worker already gave you \u2014 trust its answer; a single question gets ONE task. Call `TaskStatus` at most ONCE per turn; if a task is still running, give one brief status aside and end the turn \u2014 never poll it again and again in a loop. "Still on it" is ONLY for a repeat check on a task you already acknowledged earlier \u2014 NEVER as the ack when you first dispatch work ("still" is wrong when nothing was running yet; use a fresh "on it"/"got it, checking" instead). Use `CancelTask` when the user asks to stop something.\nPRIORITY: when the user says goodbye or wants to end/finish/wrap up the session ("ok bye", "that\'s all", "let\'s finish", "let\'s end", "goodnight", "exit", "wrap up"), call `ExitSession` IMMEDIATELY \u2014 do not act, do not check status, just exit.\nFor TRIVIAL instant lookups only \u2014 current time, git branch, listing a folder, peeking at a small file, or checking your own `capabilities`/tools \u2014 use `QuickLook` (instant, no task). Whenever the user asks what you can do or whether you have some ability, QuickLook `capabilities` and answer from that \u2014 never guess. Anything requiring searching, reasoning, running commands, or editing goes through `Act`.\n{{MEMORY_SLOT}}\nUser messages may arrive via speech-to-text and can carry transcription artifacts \u2014 odd words, cut-offs, homophones ("for you" vs "folder"). Read for INTENT, not surface text. If a message seems garbled, surprising, or only half-parses, do NOT guess an action or improvise content from it \u2014 briefly confirm what they meant ("did you mean\u2026?") and wait. A one-line confirm beats a confident wrong answer or an invented response to a request you did not actually understand.';
+function isOfferAcceptance(text) {
+  const t = text.trim().toLowerCase().replace(/[.,!?…]+/g, " ").replace(/\s+/g, " ").trim();
+  if (!t || STOP_INTENT.test(t)) return false;
+  const core = t.replace(/^(?:oh|um+|uh+|well|so|okay|ok|alright)\s+/, "");
+  return /^(?:(?:yes|yeah|yep|yup|sure|ok|okay|alright)(?: please| sure| go on| go ahead| tell me more| do it| why not)?|please|please do|sure thing|go for it|do it|more|tell me more|what else|and then|sounds good|absolutely|definitely|of course|why not|i'?d like that|let'?s hear it|let'?s do it)$/.test(core || t);
+}
+var isQuestion = (s) => /\?["'”’)\]]*$/.test(s.trim());
+var OFFER_OVERRUN = 150;
+var VOICE_SYSTEM_PROMPT = 'You are a spoken voice assistant \u2014 the user HEARS everything you say. Use short sentences. One idea per sentence. No markdown, no bullet lists, no code blocks, no headings, no emoji. Never emit stage directions or parenthetical asides about your own process \u2014 nothing like "(waiting for the result...)" or "(checking)"; while work runs, either say it as plain speech or end your turn.\nThis holds even when asked to "print", "list", "show", or "make a table" \u2014 there is no screen for the spoken channel. Speak it as flowing prose ("Tuesday is half a meter, Wednesday a bit less\u2026"), or if they truly need it on screen, route it to Act to render. Never emit dashes or pipes into speech.\nKeep turns SHORT \u2014 one to three sentences, then stop. Never lecture, enumerate cases, or add caveats unprompted. Conversation is a fast exchange: give the one thing asked, and let the user pull more if they want it.\nYou have three cognitive tiers \u2014 like a human brain:\n\u2022 YOU (reflex) \u2014 instant, lightweight. Handle greetings, simple questions, status checks, QuickLook.\n\u2022 `Act` \u2014 your hands. A background worker with its own configured tools and access to the user\'s environment (files and shell{{WORKER_WEB}}). Use for reading, editing, searching, running tasks, building \u2014 any real work.\n{{THINK_SLOT}}\nWhen you are unsure whether you can do or access something, do NOT assume and do NOT claim a capability you have not confirmed. To check what you can do, QuickLook `capabilities` (instant \u2014 it lists your worker\'s real tools) and answer from that. Never promise an ability that is not in your capabilities; if it is not there, tell the user plainly you can\'t. To actually DO real work, call `Act`. When the user mentions their project, folder, files, or environment ("this project", "the current folder", "my code"), call `Act` IMMEDIATELY \u2014 do not ask for paths or details the worker can discover itself. Never pretend to have done the work or invent results \u2014 the worker\'s report is your only source.\nYou cannot mute the microphone or stop voice capture yourself \u2014 no tool does it. If the user asks you to stop listening or turn the voice off, never claim you did: tell them to say exactly "voice off" (handled by the app directly), or type /voice.\nYou are NOT a knowledge base. For any question whose answer needs SPECIFIC verifiable facts you do not already have in hand \u2014 how to build/configure/implement something, exact API, library, entitlement, command or option names, current events, or particular numbers, dates, or names \u2014 do NOT answer from your own memory: you will confidently make things up (a fake API, a wrong entitlement, an event that did not happen). Route it to `Act`, which can search and verify, and speak only what its report says. DELEGATION RULE \u2014 decide for yourself, the user never has to push: if you cannot answer confidently from the conversation plus trivial well-known knowledge, do NOT refuse and do NOT guess \u2014 dispatch `Act` immediately with a clear brief and say you are checking. Anything needing CURRENT data (weather, news, prices, dates, sky/astronomy, "right now"), real computation, or verification is an automatic dispatch \u2014 never a refusal. The user should never need to say "search the web" or "think harder" to make you act; needing fresh or verified information IS the trigger. Refuse only what your worker genuinely cannot do (check `capabilities`), and say why. Answer inline ONLY for general conversation, chit-chat, and trivia you are sure of, or facts you can see via QuickLook. When elaborating on a completed task ("tell me more", "the gist"), stay strictly within what that result actually said \u2014 if the user asks for something the result did not cover, that is NEW information: dispatch `Act`, do not improvise.\nALWAYS react before you work: the FIRST thing in your turn is a brief spoken acknowledgement of what you heard and what you are about to do ("got it \u2014 opening that now", "sure, let me pull it up", "okay, checking"). NEVER call a tool (Act, Think, QuickLook) silently \u2014 the user must hear you react before you go quiet to work. After dispatching Act or Think, that same one short sentence IS your turn \u2014 end it and do not wait for the result. Exactly ONE short line: never stack a second acknowledgement, and never narrate your own presence or status while waiting ("I\'m here", "let me see", "still checking" right after you already acked). One clean ack then silence reads as competent; repeated check-ins read as nervous.\nA completed task speaks its OWN result to the user (the worker voices what matters as it finishes) \u2014 you do NOT re-voice clean task results. A FAILED or INCOMPLETE task still arrives as a "[task t1 failed] \u2026" event for you to handle. The completed result stays in YOUR context \u2014 it is yours to draw on. When the user follows up ("tell me more", "what else", "and?"), answer FROM that result first: you already have the detail, so elaborate on what you have. Do NOT spawn a fresh worker to re-search or re-gather what you were just handed. Re-dispatch ONLY when genuinely new information is needed \u2014 e.g. the user wants the full contents of a SPECIFIC source, which is one WebFetch of that URL, not a brand-new search. "[task t1 progress] \u2026" events are interim status, NOT results \u2014 on a genuinely LONG wait you MAY give one brief half-sentence aside, but only occasionally; silence while working is normal and fine (the user knows you are on it). Do NOT narrate every step or re-announce yourself. Never present progress as a finished result.\nCRITICAL: while a task is still running you have NO answer yet \u2014 never state a specific result of any kind (a number, size, count, name, path, or value). The real answer exists ONLY once the task finishes (the worker speaks it, and `TaskStatus` then returns it); inventing one meanwhile (a made-up disk size, commit count, etc.) is a serious error. Until then, only acknowledge and wait.\nNever read raw file paths, diffs, or code aloud verbatim.\nDo NOT end every turn with the same canned offer ("want a rundown?", "want the steps?"). Offer once at most; if the user pushes back, repeats themselves, or sounds unsatisfied ("you know what I mean?", "think deeper", "are you sure?"), do NOT re-offer the same thing \u2014 change approach: dispatch `Act`/`Think` to actually dig in, or ask one concrete clarifying question. Repeating a non-answer is worse than silence.\n"[task t1 asks] \u2026" events are QUESTIONS from a background task \u2014 relay to the user in your own words, short, then end your turn. When the user answers, call `AnswerTask` with that id and their answer. NEVER answer on the user\'s behalf for permissions or risky operations; if their reply is ambiguous, confirm first.\nIf the user\'s message sounds INCOMPLETE \u2014 trailing off mid-sentence, a fragment that needs more context ("and then we", "but the problem is"), hesitation fillers ("uh", "um") \u2014 call `Hold` instead of answering. This keeps listening for the rest of their thought. Only respond with substance when you have a complete question or request.\nDispatch discipline: send ONE self-contained task per request \u2014 a single worker with the full brief beats several workers with fragments (each worker starts fresh and re-discovers context). NEVER dispatch a worker just to read files or gather information \u2014 workers explore and discover context themselves; pass on what you already know and let one worker do the whole job. Split into parallel tasks only when the user asks for genuinely independent things. When a task completes, report its result and stop \u2014 do NOT dispatch follow-up work (verification, polish, extras) the user did not ask for, unless the report itself signals failure or doubt.\nDo not fire a second Act/Think for work already in flight, and NEVER spawn a second task to re-count, cross-check, or verify a result a worker already gave you \u2014 trust its answer; a single question gets ONE task. Call `TaskStatus` at most ONCE per turn; if a task is still running, give one brief status aside and end the turn \u2014 never poll it again and again in a loop. "Still on it" is ONLY for a repeat check on a task you already acknowledged earlier \u2014 NEVER as the ack when you first dispatch work ("still" is wrong when nothing was running yet; use a fresh "on it"/"got it, checking" instead). Use `CancelTask` when the user asks to stop something.\nPRIORITY: when the user says goodbye or wants to end/finish/wrap up the session ("ok bye", "that\'s all", "let\'s finish", "let\'s end", "goodnight", "exit", "wrap up"), call `ExitSession` IMMEDIATELY \u2014 do not act, do not check status, just exit.\nFor TRIVIAL instant lookups only \u2014 current time, git branch, listing a folder, peeking at a small file, or checking your own `capabilities`/tools \u2014 use `QuickLook` (instant, no task). Whenever the user asks what you can do or whether you have some ability, QuickLook `capabilities` and answer from that \u2014 never guess. Anything requiring searching, reasoning, running commands, or editing goes through `Act`.\n{{MEMORY_SLOT}}\nUser messages may arrive via speech-to-text and can carry transcription artifacts \u2014 odd words, cut-offs, homophones ("for you" vs "folder"). Read for INTENT, not surface text. If a message seems garbled, surprising, or only half-parses, do NOT guess an action or improvise content from it \u2014 briefly confirm what they meant ("did you mean\u2026?") and wait. A one-line confirm beats a confident wrong answer or an invented response to a request you did not actually understand.';
 var THINK_GUIDANCE = "\u2022 `Think` \u2014 your brain. A premium reasoning model, FAR more expensive than Act. Reserve it for open-ended architecture/design questions, or a problem Act already FAILED at. ALL implementation work \u2014 coding, refactoring, debugging, edge cases, tests \u2014 goes to Act; Act is highly capable. Never send the same work to both.";
 var THINK_DISABLED_GUIDANCE = "(Think tier is not available \u2014 use Act for all escalations.)";
 var VOICE_STYLE_CONVERSATIONAL = `Speak like a person in a live conversation, not an assistant reading a script. React first, then deliver: a quick impulsive beat ("oh nice", "hmm, hold on", "ah, got it") before the substance. Use contractions always. Vary sentence length \u2014 some very short. Light fillers and backchannels are fine ("mm-hm", "right", "let's see") but at most one per reply \u2014 never stack them. When you escalate to Act or Think, say it like a human would ("hang on, let me actually dig into that \u2014 gimme a minute") instead of announcing a task. When a result comes back, react to it like you just found out ("okay so \u2014 turns out\u2026"). Match the user's energy: a quick question gets a quick answer \u2014 a few words is a perfectly good turn. Prefer a short answer plus an offer ("want the details?") over covering everything. Never narrate your own mechanics (no "I will now act", no task ids out loud).`;
@@ -8084,14 +9235,22 @@ var DuplexAgent = class _DuplexAgent {
    *  (TaskRecord.createdTurn) so parking can tell a prior-topic task from the current turn's fresh one. */
   turn = 0;
   pendingEvents = [];
-  /** Spoken text of parked deliveries that have SETTLED, awaiting a trivial-barge resume decision on the
-   *  next turn (a substantive turn clears it — the result stays in the transcript, recoverable by asking). */
+  /** THE parked delivery: every piece the user has NOT heard, in speaking order — the unheard rest a barge cut out of
+   *  the voice queue (parkCutDelivery) followed by each segment a barge-parked task produced since (deliverSegment).
+   *  Nothing already voiced is ever added, so a resume never repeats what was heard. The next line's barge intent
+   *  decides: resume → spoken verbatim, aside → handed to the reflex to carry on after its answer (asideNote) — both
+   *  send the barge-parked tasks live again; steer/stop → cleared, and those tasks
+   *  are moved on from (the full result stays in the transcript, recoverable by asking). `task` = the owner, so a
+   *  task whose outcome goes to an integration turn takes its pieces back (dropParked). */
   parkedRedeliver = [];
-  /** A trivial barge arrived while a parked delivery was STILL RUNNING → resume it the moment it settles. */
-  awaitTrivialRedeliver = false;
-  /** Set by a SUBSTANTIVE turn after a barge: the user moved on, so a parked delivery that settles LATER
-   *  must NOT arm a resume (else a much-later "go on" replays a stale result). Reset by a fresh barge. */
-  suppressParkedResume = false;
+  /** parkedRedeliver length when the last barge parked (parkInFlightDeliveries): the cut it hands over later
+   *  (parkCutDelivery) was voiced BEFORE anything parked since, so it is inserted here. */
+  bargeMark = 0;
+  /** The last barge cut a REFLEX reply (parkCutDelivery): a "go on" is then the reflex's to answer — it runs a normal
+   *  turn (the host's interruption note continues the reply), and only then does the parked delivery resume. */
+  reflexCut = false;
+  /** Recent live task segments → their task id: attributes a cut delivery (parkCutDelivery) to the task that spoke it. */
+  voicedBy = /* @__PURE__ */ new Map();
   /** Out-of-band follow-up attribution for the events coalescing into the next flush turn: TRUE iff ≥1 of
    *  the tasks being integrated was NON-CLEAN (early-stop/failure). Carried out-of-band on the enqueue call
    *  by the caller that KNOWS the outcome — a plain boolean the MODEL CANNOT PERTURB. It is NOT scanned from
@@ -8124,6 +9283,24 @@ var DuplexAgent = class _DuplexAgent {
   // chars of reflexBuf already forwarded to the host/TTS
   fabricationCut = false;
   // reflex emitted a reserved [task …] marker → suppress its tail
+  leakCuts = [];
+  // heads of analysis-register leaks cut this turn — scrubbed from the transcript at turn end
+  leakStep = false;
+  // the CURRENT step's tail is muted by a leak cut (the next step speaks again, unlike a fabricated marker)
+  leakHit = false;
+  // this turn (or its repair) had a leak cut — the dead-air fallback must not blame the user
+  stepMarks = [];
+  // reflexBuf offsets where a step ended (its text is complete there)
+  leakVerdicts = /* @__PURE__ */ new Map();
+  // judged suspect sentences this turn (true = leak)
+  judging;
+  // the in-flight leak judge (one at a time — the gate is sequential)
+  turnGen = 0;
+  // bumped whenever the gated stream is replaced — a late verdict for an old one is dropped
+  turnSpoken = "";
+  // reflex text actually forwarded to the host this turn
+  turnBase = 0;
+  // transcript length at turn start (scope for the leak scrub)
   /** TRUE for the duration of a re-voice turn that is integrating ≥1 NON-CLEAN task (turn-eligibility,
    *  carried out-of-band — NOT derived from any worker/brief string). ANY Act/Think dispatched in such a
    *  turn is stamped followUp:true. This GUARANTEES the dangerous direction is impossible: a genuine
@@ -8172,7 +9349,8 @@ var DuplexAgent = class _DuplexAgent {
       ...new Set(workerToolNames.filter((n) => n.startsWith("mcp__")).map((n) => n.slice(5).split("__")[0]))
     ];
     const workerMcp = mcpNames.length ? `, and it can use these MCP servers: ${[...new Set(mcpNames)].join(", ")}` + (mcpNames.some((n) => /browser/i.test(n)) ? ' \u2014 including driving a REAL browser (open tabs, navigate, click, screenshot), so answer "yes" if asked whether you can control/drive a browser and route an actual browse to Act' : "") : "";
-    const prompt = VOICE_SYSTEM_PROMPT.replace("{{MEMORY_SLOT}}", memSlot).replace("{{THINK_SLOT}}", thinkSlot).replace("{{WORKER_WEB}}", workerWeb + workerMcp) + (o.voiceStyle === "conversational" ? "\n" + VOICE_STYLE_CONVERSATIONAL : "") + (o.emotionTags ? "\n" + EMOTION_TAGS_GUIDANCE : "") + `
+    const prompt = VOICE_SYSTEM_PROMPT.replace("{{MEMORY_SLOT}}", memSlot).replace("{{THINK_SLOT}}", thinkSlot).replace("{{WORKER_WEB}}", workerWeb + workerMcp) + (o.quickLook?.sessions ? `
+Past conversations with this user are saved. When they refer to an EARLIER conversation or session ("last time", "the previous session", "you already did it before", "earlier today"), call QuickLook what:"sessions" (then what:"sessions" with path:"<id>" to read one) BEFORE answering \u2014 never say it does not exist without checking. Report only what the recap says: if it does not say why something happened, say you don't know \u2014 never guess a motive.` : "") + (o.voiceStyle === "conversational" ? "\n" + VOICE_STYLE_CONVERSATIONAL : "") + (o.emotionTags ? "\n" + EMOTION_TAGS_GUIDANCE : "") + `
 ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today", "now", "current", "recent", "latest", "this year" \u2014 to THIS moment. When the user asks about something recent (news, sports, events), they mean near this date, not a well-known past instance; brief your worker with the current year so it searches for what is happening NOW, not a famous older event.`;
     const tools = [
       ...o.reflexOptions?.tools ?? [],
@@ -8193,32 +9371,26 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
           if (this.heldThisTurn) return;
           if (this.fabricationCut) return;
           if (this.turnDispatched && this.spokeBeforeDispatch) return;
-          const msg = ev.message;
-          this.reflexBuf += msg;
-          this.scrubStageDirections();
+          this.reflexBuf += ev.message;
           const m = this.reflexBuf.match(RESERVED_EVENT_MARKER) ?? this.reflexBuf.match(RESERVED_EVENT_OPENER);
           if (m) {
             this.fabricationCut = true;
-            log15.warn(`reflex fabricated a [task \u2026] event in its spoken stream \u2014 cutting it (kept ${m.index} chars)`);
-            const safe = this.reflexBuf.slice(this.reflexForwarded, m.index);
-            if (!safe) return;
-            if (safe.trim()) this.spokeThisTurn = true;
-            this.emitHost({ ...ev, message: safe });
+            log20.warn(`reflex fabricated a [task \u2026] event in its spoken stream \u2014 cutting it (kept ${m.index} chars)`);
+            this.reflexBuf = this.reflexBuf.slice(0, Math.max(m.index, this.reflexForwarded));
+            this.pumpReflex(true);
             return;
           }
-          const held2 = this.reflexBuf.length - this.reflexForwarded;
-          const partial = held2 > 0 && /\[\s*t?a?s?k?$/i.test(this.reflexBuf.slice(-Math.min(held2, 6)));
-          let upto = partial ? this.reflexBuf.length - this.reflexBuf.slice(-6).match(/\[\s*t?a?s?k?$/i)[0].length : this.reflexBuf.length;
-          const paren = this.reflexBuf.lastIndexOf("(");
-          if (paren >= this.reflexForwarded && !this.reflexBuf.includes(")", paren) && this.reflexBuf.length - paren <= 80)
-            upto = Math.min(upto, paren);
-          const out = this.reflexBuf.slice(this.reflexForwarded, upto);
-          this.reflexForwarded = upto;
-          if (!out) return;
-          if (out.trim()) this.spokeThisTurn = true;
-          this.emitHost({ ...ev, message: out });
+          this.pumpReflex(false);
           return;
         }
+        if (ev?.kind === "turn_start" || ev?.kind === "tool_use") {
+          this.stepMarks.push(this.reflexBuf.length);
+          if (this.leakStep) {
+            this.leakStep = false;
+            this.reflexForwarded = this.reflexBuf.length;
+          }
+          this.pumpReflex(false);
+        }
         host.notify?.(ev);
       }
     };
@@ -8252,16 +9424,163 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     this.voice.options.tools.push(...mem.tools);
     if (mem.index) this.voice.options.systemPrompt += "\n\n" + mem.index;
   }
-  /** Flush any held-back trailing fragment (a possible `[task` opener that never completed) once the
-   *  turn's stream is done — so a legit message ending in "[t" isn't silently dropped. */
-  flushHeldReflexTail() {
-    if (this.fabricationCut) return;
-    this.scrubStageDirections();
-    const tail = this.reflexBuf.slice(this.reflexForwarded);
-    this.reflexForwarded = this.reflexBuf.length;
-    if (!tail) return;
-    if (tail.trim()) this.spokeThisTurn = true;
-    this.emitHost({ kind: "text_delta", message: tail });
+  /** Forward what the reflex's spoken-stream gates allow (text_delta → host/TTS; forwarded audio can't be unsent):
+   *  - hold a trailing fragment that could be a `[task` opener split across deltas ("[ta" + "sk"), and an UNCLOSED
+   *    "(" (a stage direction is judged — and dropped — only once its ")" arrives; bounded at 80 chars);
+   *  - the leak gate: whole sentences only, each screened by isLeakSuspect the moment it completes — a strict match
+   *    is cut, any other suspect waits for the decider's verdict (judgeLeak) while the rest queues behind it.
+   *  `final` = the stream is done: release the holds and judge whatever is left as a sentence. Text before a step
+   *  boundary (stepMarks) is complete — no holds, its tail is a sentence. Idempotent; re-run as verdicts land. */
+  pumpReflex(final) {
+    for (; ; ) {
+      if (this.leakStep) return;
+      this.scrubStageDirections();
+      const from = this.reflexForwarded;
+      const buf = this.reflexBuf;
+      const lastMark = Math.max(from, ...this.stepMarks);
+      let upto = buf.length;
+      if (!final && upto > lastMark) {
+        const tail = buf.slice(Math.max(lastMark, upto - 6)).match(/\[\s*t?a?s?k?$/i);
+        if (tail) upto -= tail[0].length;
+        const paren = buf.lastIndexOf("(");
+        if (paren >= lastMark && !buf.includes(")", paren) && buf.length - paren <= 80) upto = Math.min(upto, paren);
+      }
+      if (upto <= from) return;
+      const region = buf.slice(from, upto);
+      const ends = [...region.matchAll(SENTENCE_END)].map((m) => m.index + m[0].length);
+      for (const k of this.stepMarks) if (k > from && k <= upto) ends.push(k - from);
+      if (final || !ends.length && region.length >= 160) ends.push(region.length);
+      ends.sort((a, b) => a - b);
+      let ok = 0, leak;
+      for (const e of ends) {
+        if (e <= ok) continue;
+        const v = this.leakVerdict(region.slice(ok, e));
+        if (v === void 0) break;
+        if (v) {
+          leak = region.slice(ok, e);
+          break;
+        }
+        ok = e;
+      }
+      this.forwardReflex(from + ok);
+      if (leak === void 0) return;
+      const at = from + ok;
+      this.leakHit = true;
+      this.leakCuts.push(leak.trim().slice(0, 40));
+      log20.warn(`reflex spoke its own analysis ("${leak.trim().slice(0, 40)}\u2026") \u2014 cut before TTS`);
+      this.notify("diag", "analysis_leak", { text: leak.trim().slice(0, 80), at: this.turnSpoken.trim() ? "mid_reply" : "before_speech" });
+      const next = this.stepMarks.find((k) => k > at);
+      if (next === void 0) {
+        this.reflexForwarded = buf.length;
+        this.leakStep = true;
+        return;
+      }
+      this.reflexForwarded = next;
+    }
+  }
+  forwardReflex(to) {
+    const out = this.reflexBuf.slice(this.reflexForwarded, to);
+    this.reflexForwarded = Math.max(this.reflexForwarded, to);
+    if (!out) return;
+    if (out.trim()) this.spokeThisTurn = true;
+    this.turnSpoken += out;
+    this.emitHost({ kind: "text_delta", message: out });
+  }
+  /** Leak verdict for one complete sentence: false = speak, true = cut, undefined = the judge is still out.
+   *  Non-suspects pass free; strict shapes are cut without a call; other suspects go to the decider (if any) —
+   *  one call at a time, cached per turn. A failed/slow judge fails OPEN (speech is never muted on a guess). */
+  leakVerdict(sentence) {
+    const s = sentence.trim();
+    if (!s || !isLeakSuspect(s)) return false;
+    if (isStrictLeak(s)) return true;
+    const decider = this.options.decider;
+    if (!decider) return false;
+    const known = this.leakVerdicts.get(s);
+    if (known !== void 0 || this.judging) return known;
+    const gen = this.turnGen, t0 = performance.now();
+    const userSaid = [...this.voice.transcript].reverse().map((m) => m.role === "user" ? contentText(m.content) : "").find((t) => t && !t.startsWith("[reminder]")) ?? "";
+    let timer;
+    const timeout = new Promise((_, rej) => {
+      timer = setTimeout(() => rej(new Error(`no verdict in ${_DuplexAgent.LEAK_JUDGE_TIMEOUT_MS}ms`)), _DuplexAgent.LEAK_JUDGE_TIMEOUT_MS);
+    });
+    this.judging = Promise.race([judgeLeak(decider, s, userSaid), timeout]).then((p) => {
+      this.notify("diag", "leak_judge", { text: s.slice(0, 80), p: Math.round(p * 100) / 100, ms: Math.round(performance.now() - t0) });
+      return p >= LEAK_JUDGE_THRESHOLD;
+    }, (e) => {
+      log20.warn(`leak judge failed \u2014 speaking the sentence: ${e.message}`);
+      return false;
+    }).then((leak) => {
+      clearTimeout(timer);
+      if (gen !== this.turnGen) return;
+      this.judging = void 0;
+      this.leakVerdicts.set(s, leak);
+      this.pumpReflex(false);
+    });
+    return void 0;
+  }
+  static LEAK_JUDGE_TIMEOUT_MS = 1500;
+  /** The stream is done: settle every pending verdict and release everything the gates still hold. */
+  async drainReflex() {
+    for (; ; ) {
+      this.pumpReflex(true);
+      if (!this.judging) return;
+      await this.judging;
+    }
+  }
+  /** Drop any in-flight judge of the current stream (its verdict must not pump a stream that moved on). */
+  dropJudge() {
+    this.turnGen++;
+    this.judging = void 0;
+  }
+  /** Remove a cut analysis leak from this turn's assistant message(s) — left in, it primes the next turn to
+   *  leak again and reads as something we said. Keeps any legit prefix; drops a message left empty. */
+  scrubLeakFromTranscript() {
+    const keys = this.leakCuts.splice(0);
+    const t = this.voice.transcript;
+    for (const key of keys) {
+      let i = t.length - 1;
+      while (i >= this.turnBase && !(t[i].role === "assistant" && typeof t[i].content === "string" && t[i].content.includes(key))) i--;
+      if (i < this.turnBase) {
+        log20.warn("analysis leak cut, but its text was not found in the transcript to scrub");
+        continue;
+      }
+      const m = t[i];
+      m.content = m.content.slice(0, m.content.indexOf(key)).trimEnd();
+      if (!m.content && !m.tool_calls?.length) t.splice(i, 1);
+    }
+  }
+  /** A Hold turn is silent BY DESIGN: every reflex text after the Hold is muted (voiceHost drops it), so none of it may
+   *  persist either — the transcript is what the agent SAID. Live 20260923-125143 msg 10: the model's reasoning ("We
+   *  need to respond according to guidelines… So we should hold") was saved as an assistant reply and fed every later
+   *  turn. Strips the text of assistant messages after the Hold call (tool calls stay — they happened); a message left
+   *  empty is removed. */
+  scrubHeldText() {
+    if (!this.heldThisTurn) return;
+    const t = this.voice.transcript;
+    let i = this.turnBase;
+    while (i < t.length && !t[i].tool_calls?.some((c) => c.function.name === "Hold")) i++;
+    for (let j = t.length - 1; j > i; j--) {
+      const m = t[j];
+      if (m.role !== "assistant" || !contentText(m.content).trim()) continue;
+      if (m.tool_calls?.length) m.content = "";
+      else t.splice(j, 1);
+    }
+  }
+  /** Shared turn epilogue (user turn, confirmed speculation, re-voice): release held text, scrub a cut leak,
+   *  then repair dead air — unless the turn was ABORTED: the user took the floor (barge-in / Esc), which is
+   *  not dead air, and a nudge would run on the same aborted signal (live: the "[reminder]" landed in the
+   *  transcript as a user turn with no reply, session 20260923-101910 msg 27). */
+  async endTurn(res, fallback) {
+    if (res?.finishReason === "aborted") {
+      this.dropJudge();
+      this.scrubLeakFromTranscript();
+      this.scrubHeldText();
+      return;
+    }
+    await this.drainReflex();
+    this.scrubLeakFromTranscript();
+    this.scrubHeldText();
+    if (this.silentTurn) await this.ackIfSilent(fallback);
   }
   /** Remove complete stage-direction parentheticals from the UNFORWARDED reflex text (STAGE_DIRECTION_RE).
    *  Only the unforwarded region is touched — already-spoken audio can't be unsent, and splicing before
@@ -8283,6 +9602,14 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     this.reflexBuf = "";
     this.reflexForwarded = 0;
     this.fabricationCut = false;
+    this.leakCuts = [];
+    this.leakStep = this.leakHit = false;
+    this.stepMarks = [];
+    this.leakVerdicts.clear();
+    this.turnSpoken = "";
+    this.offerOpen = false;
+    this.dropJudge();
+    this.turnBase = this.voice.transcript.length;
     this.turnFollowUp = false;
     this.voice.options.toolChoice = void 0;
   }
@@ -8294,7 +9621,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     return {
       preToolUse: (call) => {
         if (this.spec?.state === "pending" && !_DuplexAgent.SPEC_SAFE_TOOLS.has(call.name)) {
-          log15.verbose(`speculation aborted: reflex called ${call.name} on unconfirmed input`);
+          log20.verbose(`speculation aborted: reflex called ${call.name} on unconfirmed input`);
           this.abortSpeculation();
           return { block: true, reason: "Speculative turn aborted." };
         }
@@ -8328,16 +9655,27 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
    *  Wording adapts to whether work was dispatched (an ack) or the inline reply was simply lost. */
   async ackIfSilent(fallback) {
     const dispatched = this.turnDispatched;
+    const reminder = fallback ? "[reminder] You said nothing to the user this turn. Tell them, in ONE short spoken sentence, what just happened \u2014 no tools." : dispatched ? "[reminder] You dispatched a task but said nothing to the user. Say ONE short spoken acknowledgement now \u2014 no tools." : "[reminder] You said nothing to the user this turn. Give your ONE short spoken reply now \u2014 no tools.";
+    const base = this.voice.transcript.length;
+    this.fabricationCut = this.leakStep = false;
+    this.reflexBuf = "";
+    this.reflexForwarded = 0;
+    this.stepMarks = [];
+    this.dropJudge();
     this.nudging = true;
     try {
-      await this.voice.send(fallback ? "[reminder] You said nothing to the user this turn. Tell them, in ONE short spoken sentence, what just happened \u2014 no tools." : dispatched ? "[reminder] You dispatched a task but said nothing to the user. Say ONE short spoken acknowledgement now \u2014 no tools." : "[reminder] You said nothing to the user this turn. Give your ONE short spoken reply now \u2014 no tools.");
+      await this.voice.send(reminder);
     } catch (e) {
-      log15.warn(`ack nudge failed: ${e instanceof Error ? e.message : e}`);
+      log20.warn(`ack nudge failed: ${e instanceof Error ? e.message : e}`);
     } finally {
       this.nudging = false;
+      const i = this.voice.transcript.findIndex((m, k) => k >= base && m.role === "user" && m.content === reminder);
+      if (i >= 0) this.voice.transcript.splice(i, 1);
+      await this.drainReflex();
+      this.scrubLeakFromTranscript();
     }
     if (!this.spokeThisTurn) {
-      const pool = fallback ? [fallback] : dispatched ? _DuplexAgent.FALLBACK_ACKS : _DuplexAgent.FALLBACK_RETRY;
+      const pool = fallback ? [fallback] : dispatched ? _DuplexAgent.FALLBACK_ACKS : this.leakHit ? _DuplexAgent.FALLBACK_OWN : _DuplexAgent.FALLBACK_RETRY;
       const fresh = pool.filter((p) => p !== this.lastFallback);
       const line = (fresh.length ? fresh : pool)[Math.floor(Math.random() * (fresh.length || pool.length))];
       this.lastFallback = line;
@@ -8348,26 +9686,134 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
    *  hosts/tests key on it. */
   static FALLBACK_ACKS = ["Okay, on it.", "On it.", "Alright, working on it."];
   static FALLBACK_RETRY = ["Sorry, could you say that again?", "Hm, I missed that \u2014 could you say that again?"];
+  static FALLBACK_OWN = ["Sorry, I lost my train of thought there \u2014 give me that one more time?", "Hm, I got tangled up \u2014 ask me that once more?"];
   lastFallback = "";
   /** One user turn: the voice agent streams the reply (and may Act/Think). Serialized with re-voice turns.
    *  If a speculative reflex call is pending and this content CONFIRMS it (the final matches the
    *  speculated partial), the in-flight call is adopted as THE turn: its buffered output flushes to the
    *  host NOW (this is the latency win) and streaming continues live. Any other content aborts the
-   *  speculation first (rolled back silently) and runs a normal turn behind it. */
-  send(content) {
-    if (typeof content === "string" && isTrivialBarge(content) && this.hasParkedDelivery()) {
-      if (this.spec) this.abortSpeculation();
-      return this.enqueue(async () => {
-        this.resetTurn();
-        if (!this.redeliverParked()) this.awaitTrivialRedeliver = true;
-        return { text: "", steps: 0, finishReason: "stop", messages: [] };
+   *  speculation first (rolled back silently) and runs a normal turn behind it.
+   *  `opts.id` names the turn; `opts.replaces` names an earlier one this content REPLACES — the voice engine's
+   *  fuller re-finalization of an utterance whose reply had not started ("…previous" → "…previous
+   *  conversation."). The replaced turn is skipped if it has not run yet, else aborted and rolled back out of
+   *  the transcript (kept only if it already dispatched work) — one reply, to the full text. */
+  send(content, opts) {
+    if (opts?.replaces) this.replaceTurn(opts.replaces);
+    const cur = this.voice.options.signal;
+    const ext = cur && cur === this.turnSignal?.own ? this.turnSignal.ext : cur;
+    const rec = opts?.id ? this.trackTurn(opts.id) : void 0;
+    if (rec?.superseded) {
+      this.notify("diag", "turn_replaced", { id: opts.id, ran: false });
+      return Promise.resolve(_DuplexAgent.replacedResult(this.voice.transcript));
+    }
+    const reflexCut = this.reflexCut;
+    this.reflexCut = false;
+    if (typeof content === "string" && this.hasParkedDelivery()) {
+      const fallback = () => isTrivialBarge(content) ? "resume" : "steer";
+      const accepted = this.offerOpen && this.parkedRedeliver.length > 0 && this.parkedRedeliver.every((p) => p.task === this.offer.task) && (isOfferAcceptance(content) || isTrivialBarge(content));
+      const judge = accepted ? void 0 : this.options.bargeIntent;
+      return (accepted ? Promise.resolve("resume") : judge ? judge(content).catch((e) => {
+        log20.warn(`bargeIntent judge failed \u2014 using the allowlist: ${e.message}`);
+        return fallback();
+      }) : Promise.resolve(fallback())).then((intent) => {
+        this.notify("diag", "barge_intent", { intent, text: content.slice(0, 80) });
+        if (intent === "resume" && !reflexCut) return this.resumeParked();
+        if (intent === "aside" || intent === "resume") {
+          const told = intent === "aside" ? [...this.parkedRedeliver] : [];
+          return this.sendTurn(intent === "aside" ? content + this.asideNote(told) : content, true, rec, ext).then(async (r) => {
+            if (r.finishReason === "aborted" || this.heldThisTurn) return r;
+            const missed = unsaidClauses(told.map((p) => p.text), this.turnSpoken, this.options.decider);
+            const turn = this.turn;
+            this.parkedRedeliver = this.parkedRedeliver.filter((p) => !told.includes(p));
+            await this.resumeParked();
+            void missed.then((m) => {
+              const dropped = m.filter((c) => !isQuestion(c)).join(" ").replace(/[,;]$/, ".");
+              if (!dropped || this.turn !== turn) return;
+              this.parkedRedeliver.unshift({ text: dropped, task: told.at(-1)?.task });
+              this.notify("diag", "aside_dropped", { text: dropped.slice(0, 80) });
+            });
+            return r;
+          });
+        }
+        return this.sendTurn(content, false, rec, ext);
       });
     }
+    return this.sendTurn(content, false, rec, ext);
+  }
+  /** Host-named user turns (send opts.id), so a later send can replace one. Bounded; a replace that arrives
+   *  BEFORE its target (the host's dispatch hops can reorder) leaves a pre-superseded record behind. */
+  userTurns = /* @__PURE__ */ new Map();
+  turnSignal;
+  // the combined signal a named turn installed while it runs
+  trackTurn(id) {
+    let rec = this.userTurns.get(id);
+    if (!rec) {
+      rec = { ctl: new AbortController(), done: false, superseded: false };
+      this.userTurns.set(id, rec);
+      if (this.userTurns.size > 32) this.userTurns.delete(this.userTurns.keys().next().value);
+    }
+    return rec;
+  }
+  replaceTurn(id) {
+    const rec = this.trackTurn(id);
+    if (rec.done) {
+      const drop = rec.dropped;
+      rec.dropped = void 0;
+      if (drop?.length) void this.enqueue(async () => {
+        const t = this.voice.transcript;
+        for (const m of drop) {
+          const i = t.indexOf(m);
+          if (i >= 0) t.splice(i, 1);
+        }
+        this.notify("diag", "turn_replaced", { ran: true, rolledBack: true, late: true });
+      });
+      return;
+    }
+    if (rec.superseded) return;
+    rec.superseded = true;
+    rec.ctl.abort();
+  }
+  static replacedResult(messages) {
+    return { text: "", steps: 0, finishReason: "aborted", messages };
+  }
+  /** A turn replaced mid-run: mute whatever it still holds, and erase it from the transcript (the replacing turn
+   *  carries the user's full words) — unless it already dispatched work or SPOKE: the task is real, and the user
+   *  heard those words, so both stay visible to the replacing turn. An aborted stream never reaches the transcript,
+   *  so what was spoken is recorded as the replaced turn's reply. */
+  dropReplacedTurn() {
+    this.fabricationCut = true;
+    this.reflexBuf = this.reflexBuf.slice(0, this.reflexForwarded);
+    this.dropJudge();
+    const spoke = this.turnSpoken.trim();
+    const rolledBack = !this.turnDispatched && !spoke;
+    if (rolledBack) this.voice.transcript.length = this.turnBase;
+    else if (spoke) {
+      const t = this.voice.transcript;
+      const have = t.slice(this.turnBase).filter((m) => m.role === "assistant").map((m) => contentText(m.content)).join(" ");
+      if (!have.includes(spoke)) t.push({ role: "assistant", content: spoke });
+    }
+    this.notify("diag", "turn_replaced", { ran: true, rolledBack, spoke: !!spoke });
+    return _DuplexAgent.replacedResult(this.voice.transcript);
+  }
+  resumeParked() {
+    if (this.spec) this.abortSpeculation();
+    return this.enqueue(async () => {
+      this.resetTurn();
+      this.redeliverParked();
+      for (const t of this.tasks.values()) if (t.status === "running" && t.deliveryParked === "barge") t.deliveryParked = void 0;
+      return { text: "", steps: 0, finishReason: "stop", messages: [] };
+    });
+  }
+  sendTurn(content, keepParked = false, rec, ext) {
     const spec = this.spec;
     if (spec?.state === "pending") {
       if (typeof content === "string" && speculationConfirms(spec.text, content)) {
         spec.state = "confirmed";
         spec.finalText = content;
+        if (rec) {
+          spec.rec = rec;
+          rec.ctl.signal.addEventListener("abort", () => spec.ctl.abort(), { once: true });
+        }
         for (const ev of spec.buf.splice(0)) this.options.host?.notify?.(ev);
         spec.decide("confirm");
         this.notify("diag", "speculation_confirmed", { text: spec.text.slice(0, 80) });
@@ -8379,12 +9825,32 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       await this.initMemory();
       this.resetTurn();
       this.turn++;
-      this.awaitTrivialRedeliver = false;
-      this.parkedRedeliver = [];
-      this.suppressParkedResume = true;
-      const res = await this.voice.send(content);
-      this.flushHeldReflexTail();
-      if (this.silentTurn) await this.ackIfSilent();
+      if (!keepParked) {
+        this.parkedRedeliver = [];
+        for (const t of this.tasks.values()) if (t.deliveryParked === "barge") t.deliveryParked = "moved_on";
+      }
+      if (rec?.superseded) {
+        this.notify("diag", "turn_replaced", { ran: false });
+        return _DuplexAgent.replacedResult(this.voice.transcript);
+      }
+      const signal = rec && (ext ? AbortSignal.any([ext, rec.ctl.signal]) : rec.ctl.signal);
+      if (signal) {
+        this.voice.options.signal = signal;
+        this.turnSignal = { own: signal, ext };
+      }
+      let res;
+      try {
+        res = await this.voice.send(content);
+      } finally {
+        if (signal) {
+          this.voice.options.signal = ext;
+          this.turnSignal = void 0;
+        }
+        if (rec) rec.done = true;
+      }
+      if (rec?.superseded) return this.dropReplacedTurn();
+      if (rec && res.finishReason === "aborted" && !this.turnDispatched && !this.turnSpoken.trim()) rec.dropped = this.voice.transcript.slice(this.turnBase);
+      await this.endTurn(res);
       return res;
     });
   }
@@ -8425,7 +9891,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       try {
         res = await this.voice.send(spec.text);
       } catch (e) {
-        log15.warn(`speculative turn failed: ${e instanceof Error ? e.message : e}`);
+        log20.warn(`speculative turn failed: ${e instanceof Error ? e.message : e}`);
       } finally {
         this.voice.options.signal = prevSignal;
       }
@@ -8439,7 +9905,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       if (d === "abort") {
         if (this.voice.transcript.length > base) this.voice.transcript.length = base;
         this.speculativeAbortedCalls++;
-        log15.verbose(`speculation aborted (${this.speculativeAbortedCalls} total): "${spec.text.slice(0, 50)}"`);
+        log20.verbose(`speculation aborted (${this.speculativeAbortedCalls} total): "${spec.text.slice(0, 50)}"`);
         if (this.spec === spec) this.spec = void 0;
         return res ?? empty;
       }
@@ -8451,8 +9917,9 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
         }
       }
       this.spec = void 0;
-      this.flushHeldReflexTail();
-      if (this.silentTurn) await this.ackIfSilent();
+      if (spec.rec) spec.rec.done = true;
+      if (spec.rec?.superseded) return this.dropReplacedTurn();
+      await this.endTurn(res);
       return res ?? empty;
     });
   }
@@ -8481,37 +9948,125 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
    *  superseded topic never talks over the new one (the debt-after-jokes regression). Tasks keep running and
    *  still fold their result into the transcript — recoverable, just not spoken. Returns parked ids (logging).
    *  Does NOT cancel. Two callers, two shapes:
-   *   - BARGE (default): the user interrupted AUDIO. Park EVERY running task (including this turn's) — the
-   *     worker they cut off must stop, whatever turn launched it — and re-arm trivial-barge auto-resume so a
-   *     following "go on" can bring the parked delivery back.
-   *   - SUPERSEDE (`priorTurnsOnly`, `reenableResume:false`, from dispatch()): a new dispatch redirected to
-   *     fresh work. Park only PRIOR-turn tasks so parallel siblings dispatched in the SAME turn don't silence
-   *     each other, and keep them suppressed (the user moved on — don't resurface on a stray "go on"). */
-  parkInFlightDeliveries(reenableResume = true, priorTurnsOnly = false) {
-    if (reenableResume) this.suppressParkedResume = false;
+   *   - BARGE (default): the user interrupted AUDIO. Park EVERY live running task (including this turn's) — the
+   *     worker they cut off must stop, whatever turn launched it — as 'barge', so a following "go on" can bring
+   *     it back. A task the user already moved on from stays moved on: a barge never revives it.
+   *   - SUPERSEDE (`priorTurnsOnly`, `barge:false`, from dispatch()): a new dispatch redirected to fresh work.
+   *     Park only PRIOR-turn live tasks so parallel siblings dispatched in the SAME turn don't silence each other,
+   *     as 'moved_on' (don't resurface on a stray "go on"). */
+  parkInFlightDeliveries(barge = true, priorTurnsOnly = false) {
+    if (barge) {
+      this.bargeMark = this.parkedRedeliver.length;
+      this.reflexCut = false;
+      this.offerOpen = false;
+    }
     const parked = [];
     for (const rec of this.tasks.values())
       if (rec.status === "running" && !rec.deliveryParked && (!priorTurnsOnly || rec.createdTurn < this.turn)) {
-        rec.deliveryParked = true;
+        rec.deliveryParked = barge ? "barge" : "moved_on";
         parked.push(rec.id);
       }
     return parked;
   }
-  /** True while there is a parked delivery to potentially resume: either one already settled (queued) or
-   *  one still running that was parked by a barge. */
+  /** A barge-in cut a worker delivery the VOICE ENGINE was still speaking — the queued utterances it dropped plus the
+   *  unheard rest of the one playing (cli splitCut). It joins the parked delivery AHEAD of whatever parked tasks
+   *  produced since the barge (it was voiced first); the user's next line runs the barge-intent judge — resume it,
+   *  answer an aside and carry it on, or drop it on a steer/stop. `heard` = the cut utterance's part the user DID hear
+   *  (the aside note tells the reflex what was heard vs missed).
+   *  Live 20260923-125143: "Oh, that— that's new." cut an iOS-news delivery and its 6 remaining utterances vanished.
+   *  `reflexCut` = the barge cut a REFLEX reply (the host's cut had a reply): a "go on" then runs the reflex (see send).
+   *  A cut spoken by a task the user moved on from (or whose outcome went to an integration turn) is not parked. */
+  parkCutDelivery(text, reflexCut = false, heard = "") {
+    this.reflexCut = reflexCut;
+    const t = text.trim();
+    if (!t) return;
+    if (this.offer.text && this.offer.text.endsWith(t)) {
+      this.offerOpen = !reflexCut;
+      return;
+    }
+    if (t.split(SENTENCE_SPLIT).every(isQuestion)) return;
+    const first = t.split(/(?<=[.!?])\s/)[0];
+    const task = [...this.voicedBy].reverse().find(([seg]) => t.includes(seg) || first.length >= 16 && seg.includes(first))?.[1];
+    if (task && this.tasks.get(task)?.deliveryParked === "moved_on") return;
+    this.parkedRedeliver.splice(Math.min(this.bargeMark, this.parkedRedeliver.length), 0, { text: t, task, ...heard ? { heard } : {} });
+    this.notify("diag", "delivery_parked", { chars: t.length });
+  }
+  /** One spoken segment of a task's delivery — the ONLY path a worker's speech takes (streamed segments, the settle
+   *  tail, the no-spoken fallback). Live → the voice queue; barge-parked → the parked delivery, in order; superseded
+   *  (the user moved on) → nowhere (the result still folds into the transcript at settle). */
+  deliverSegment(rec, seg) {
+    if (!seg.trim()) return;
+    if (rec) rec.spokenText = (rec.spokenText ? rec.spokenText + " " : "") + seg;
+    if (!rec?.deliveryParked) {
+      const [say, rest] = rec ? this.budgetSplit(rec, seg) : [seg, ""];
+      if (say) {
+        this.offerOpen = false;
+        this.options.host?.notify?.({ kind: "speak_utterance", message: say });
+        if (rec) {
+          this.voicedBy.set(say.trim(), rec.id);
+          if (this.voicedBy.size > 64) this.voicedBy.delete(this.voicedBy.keys().next().value);
+        }
+      }
+      if (!rest || !rec) return;
+      rec.deliveryParked = "barge";
+      this.parkedRedeliver.push({ text: rest, task: rec.id });
+      if (this.options.spokenOffer) {
+        this.offer = { text: rec.capOffer = this.options.spokenOffer, task: rec.id };
+        this.offerOpen = true;
+        this.options.host?.notify?.({ kind: "speak_utterance", message: this.offer.text });
+      }
+      this.notify("diag", "delivery_budget", { task: rec.id, spoke: rec.voicedChars, parked: rest.length });
+    } else if (rec.deliveryParked === "barge") this.parkedRedeliver.push({ text: seg, task: rec.id });
+  }
+  /** Split a delivery segment at the spoken budget (whole sentences; the first sentence always speaks): what to voice
+   *  now, and the rest to park. Marks the budget spent on a cut, so a resumed delivery runs on unbudgeted. */
+  budgetSplit(rec, seg) {
+    const cap = this.options.spokenBudgetChars;
+    if (!cap || rec.budgetSpent) return [seg, ""];
+    const sents = seg.trim().split(SENTENCE_SPLIT);
+    let used = rec.voicedChars ?? 0, n = 0;
+    while (n < sents.length && (!used || used + sents[n].length <= cap)) used += sents[n++].length + 1;
+    const over = sents.slice(n);
+    if (!over.length || over.length === 1 && isQuestion(over[0]) && over[0].length <= OFFER_OVERRUN && used <= cap) {
+      rec.voicedChars = used + (over[0] ? over[0].length + 1 : 0);
+      return [seg, ""];
+    }
+    rec.voicedChars = used;
+    rec.budgetSpent = true;
+    return [sents.slice(0, n).join(" "), sents.slice(n).join(" ")];
+  }
+  /** The cap offer last spoken and the task whose rest it offers — a barge over it is not a delivery to park
+   *  (parkCutDelivery). */
+  offer = { text: "", task: "" };
+  /** The cap offer was the last thing voiced (no delivery or turn has spoken since) — a plain yes accepts it (send). */
+  offerOpen = false;
+  /** The task's outcome now belongs to its integration turn (failed / stopped early): take back its parked pieces and
+   *  keep it from being revived — a "go on" must not replay raw segments of a result the reflex is about to explain. */
+  dropParked(rec) {
+    this.parkedRedeliver = this.parkedRedeliver.filter((p) => p.task !== rec.id);
+    if (rec.deliveryParked) rec.deliveryParked = "moved_on";
+  }
+  /** True while there is a parked delivery the next line may resume: unheard text already parked, or a barge-parked
+   *  task still running (one the user moved on from does not count). */
   hasParkedDelivery() {
-    return this.parkedRedeliver.length > 0 || [...this.tasks.values()].some((t) => t.status === "running" && t.deliveryParked);
-  }
-  /** Speak any settled-and-queued parked delivery now (trivial-barge resume). Returns false if nothing was
-   *  queued yet (the caller then arms awaitTrivialRedeliver so the task resumes the instant it settles). */
+    return this.parkedRedeliver.length > 0 || [...this.tasks.values()].some((t) => t.status === "running" && t.deliveryParked === "barge");
+  }
+  /** The note for an aside over a parked delivery: the same reply-interruption note a cut reflex reply gets
+   *  (interruptionNote), over the delivery as it was being said — the cut utterance's heard part, then every unheard
+   *  piece. Nothing parked yet (the task is still working) → its result simply follows the answer. */
+  asideNote(told) {
+    const rest = told.map((p) => p.text).join(" ").trim();
+    if (!rest) return "\n[you were in the middle of delivering a task result \u2014 answer this briefly; the rest of the result follows right after your answer. If their words are an unfinished fragment, call Hold instead.]";
+    const heard = told[0]?.heard ?? "";
+    return interruptionNote({ full: heard + rest, heard }, "aside");
+  }
+  /** Speak the parked delivery now (resume), in order, and clear it. */
   redeliverParked() {
-    if (!this.parkedRedeliver.length) return false;
-    const text = this.parkedRedeliver.splice(0).join(" ").trim();
-    if (text) {
-      this.options.host?.notify?.({ kind: "speak_utterance", message: text });
-      this.notify("diag", "parked_redelivered", { chars: text.length });
-    }
-    return true;
+    const text = this.parkedRedeliver.splice(0).map((p) => p.text).join(" ").trim();
+    if (!text) return;
+    this.offerOpen = false;
+    this.options.host?.notify?.({ kind: "speak_utterance", message: text });
+    this.notify("diag", "parked_redelivered", { chars: text.length });
   }
   /** Resolve when all queued voice turns AND all in-flight worker tasks have settled (tests, graceful shutdown). */
   async idle() {
@@ -8567,9 +10122,8 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       const failed = events.find((e) => /^\[task\b[^\]\n]*\bfailed\b/i.test(e));
       this.resetTurn();
       this.turnFollowUp = nonCleanTurn;
-      await this.voice.send(events.join("\n"));
-      this.flushHeldReflexTail();
-      if (this.silentTurn) await this.ackIfSilent(failed ? "Sorry, that didn't work \u2014 the task failed." : void 0);
+      const res = await this.voice.send(events.join("\n"));
+      await this.endTurn(res, failed ? "Sorry, that didn't work \u2014 the task failed." : void 0);
       this.notify("revoice_done", "");
     });
   }
@@ -8577,13 +10131,14 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
    *  Act briefs get a self-verify footer — the worker's report is trusted without review, so it
    *  must check its own work before reporting (nearly free under prompt caching; measured honest:
    *  it does NOT fix one-shot logic bugs — see mind/10). Think tasks are pure reasoning — no footer. */
+  /** Static text snapshot of the last `turns` user/assistant messages (`role: text` lines). */
+  recentExcerpt(turns = this.options.excerptTurns) {
+    return this.voice.transcript.filter((m) => (m.role === "user" || m.role === "assistant") && contentText(m.content).trim()).slice(-turns).map((m) => `${m.role}: ${contentText(m.content)}`).join("\n");
+  }
   buildBrief(brief, tier = "act", deliver = true) {
-    const recent = this.voice.transcript.filter((m) => (m.role === "user" || m.role === "assistant") && contentText(m.content).trim()).slice(-this.options.excerptTurns).map((m) => `${m.role}: ${contentText(m.content)}`).join("\n");
+    const recent = this.recentExcerpt();
     const verify = tier === "act" ? "\n\nBefore reporting done: re-read what you changed and check it against EVERY requirement above \u2014 fix any gap first. Your report is trusted without review." : "";
-    const deliverContract = deliver ? `
-
-## DELIVER (spoken delivery)
-You are reporting back to a user who is LISTENING. Stream your work normally \u2014 your prose is the written work record and detail, and is NOT spoken. Wrap anything the user should HEAR in <spoken>\u2026</spoken> tags. LEAD WITH the actual content they asked for: if they asked for a specific piece of content \u2014 a value, a name, the actual lines, the writing itself \u2014 that content goes INSIDE the <spoken> tags, not a remark about it. Your FIRST <spoken> segment is substantive \u2014 never a greeting or an acknowledgement (the front-end has already acked; do not double-ack). Keep spoken text concise and natural for the ear: short sentences, no markdown. NEVER enumerate in speech \u2014 no numbered or bulleted lists ("One. \u2026 Two. \u2026" is robotic). Deliver multiple items as flowing conversation with brief connective phrasing ("here's one\u2026", "and another\u2026", "oh, and\u2026"), pausing between items with sentence breaks, not numbers.` + (this.options.emotionTags ? " Inside <spoken>, you may prefix a sentence with an inline [emotion] tag (e.g. [excited], [curious]) to color how it is voiced \u2014 only when it genuinely fits, and vary it; [laughter] gives a natural laugh." : "") : "";
+    const deliverContract = deliver ? "\n\n## DELIVER (spoken delivery)\nYou are reporting back to a user who is LISTENING. Stream your work normally \u2014 your prose is the written work record and detail, and is NOT spoken. Wrap anything the user should HEAR in <spoken>\u2026</spoken> tags. LEAD WITH the actual content they asked for: if they asked for a specific piece of content \u2014 a value, a name, the actual lines, the writing itself \u2014 that content goes INSIDE the <spoken> tags, not a remark about it. Your FIRST <spoken> segment is substantive \u2014 never a greeting or an acknowledgement (the front-end has already acked; do not double-ack). Keep spoken text concise and natural for the ear: short sentences, no markdown. " + (this.options.spokenBudgetChars ? `Speak a SHORT summary only: at most three short sentences with the one thing that matters most, then ONE short offer that names what else you have, as a question they can answer in a word \u2014 under ${this.options.spokenBudgetChars} characters in all, the offer included. Everything else stays in your written prose (it is kept and they can ask for it); spoken text past that budget is cut and held until they ask. ` : "") + `NEVER enumerate in speech \u2014 no numbered or bulleted lists ("One. \u2026 Two. \u2026" is robotic). Deliver multiple items as flowing conversation with brief connective phrasing ("here's one\u2026", "and another\u2026", "oh, and\u2026"), pausing between items with sentence breaks, not numbers.` + (this.options.emotionTags ? " Inside <spoken>, you may prefix a sentence with an inline [emotion] tag (e.g. [excited], [curious]) to color how it is voiced \u2014 only when it genuinely fits, and vary it; [laughter] gives a natural laugh." : "") : "";
     return `${nowLine()}.
 
 ` + (recent ? `${brief}
@@ -8629,12 +10184,7 @@ ${recent}` : brief) + verify + deliverContract;
       return a || "(no answer from the user \u2014 use your best judgment and note the assumption)";
     };
     const splitter = new SpokenSplitter();
-    const speak = (seg) => {
-      if (!seg) return;
-      const r = this.tasks.get(id);
-      if (r) r.spokenText = (r.spokenText ? r.spokenText + " " : "") + seg;
-      if (!r?.deliveryParked) o.host?.notify?.({ kind: "speak_utterance", message: seg });
-    };
+    const speak = (seg) => this.deliverSegment(this.tasks.get(id), seg);
     const coalescer = new SentenceCoalescer();
     const feedSpoken = (s) => {
       const ready = coalescer.feed(s);
@@ -8648,6 +10198,7 @@ ${recent}` : brief) + verify + deliverContract;
         if (ev?.kind === "text_delta" && typeof ev.message === "string") {
           const { spoken, detail } = splitter.feed(ev.message);
           feedSpoken(spoken);
+          if (!splitter.inSpoken) flushSpoken();
           if (detail.trim()) pushTail(detail.trim());
           return;
         }
@@ -8704,7 +10255,7 @@ Another agent just implemented the above. Independently check the CURRENT state
     this.notify("task_verify", `task ${id}: verifying`, { id });
     const cres = await new Agent(checkerOpts).run(checkBrief);
     if (cres.finishReason !== "stop") {
-      log15.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
+      log20.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
       this.notify("task_verify", `task ${id}: verify inconclusive (${cres.finishReason})`, { id, finishReason: cres.finishReason });
     }
     const sum = (a = 0, b = 0) => a + b;
@@ -8735,7 +10286,7 @@ Another agent just implemented the above. Independently check the CURRENT state
     const due = () => {
       if (this.pendingAsks.size) return void 0;
       const rec = this.tasks.get(id);
-      return rec && rec.status === "running" && Date.now() - lastAt >= this.options.progressIntervalMs ? rec : void 0;
+      return rec && rec.status === "running" && !rec.deliveryParked && Date.now() - lastAt >= this.options.progressIntervalMs ? rec : void 0;
     };
     const emit = (rec, line, call) => {
       lastAt = Date.now();
@@ -8840,7 +10391,7 @@ Another agent just implemented the above. Independently check the CURRENT state
     rec.status = "done";
     rec.result = res.text;
     const incomplete = res.finishReason !== "stop" && res.finishReason !== "empty";
-    log15.verbose(`task ${id} done (${res.steps} steps${incomplete ? `, INCOMPLETE: ${res.finishReason}` : ""})`);
+    log20.verbose(`task ${id} done (${res.steps} steps${incomplete ? `, INCOMPLETE: ${res.finishReason}` : ""})`);
     this.notify("task_done", `task ${id} (${rec.label}) completed`, {
       id,
       text: res.text,
@@ -8852,46 +10403,39 @@ Another agent just implemented the above. Independently check the CURRENT state
     });
     if (incomplete) {
       if (this.foldIfSuperseded(rec, res.text)) return;
+      this.dropParked(rec);
       return this.queueRevoice(this.integrationPrompt(rec, "incomplete", res.text, res.finishReason), true);
     }
     const tail = rec.splitter?.flush();
-    if (tail?.spoken && !rec.deliveryParked) this.options.host?.notify?.({ kind: "speak_utterance", message: tail.spoken });
-    if (res.text.trim()) this.voice.transcript.push({ role: "assistant", content: res.text });
-    if (rec.deliveryParked && !this.suppressParkedResume) {
-      const gist = (rec.spokenText ?? "").trim() || res.text.trim();
-      if (gist) {
-        if (this.awaitTrivialRedeliver) {
-          this.awaitTrivialRedeliver = false;
-          this.options.host?.notify?.({ kind: "speak_utterance", message: gist });
-          this.notify("diag", "parked_redelivered", { chars: gist.length });
-        } else this.parkedRedeliver.push(gist);
-      }
-    }
-    if (!rec.splitter?.spokeAny && res.text.trim() && !rec.deliveryParked)
-      this.options.host?.notify?.({ kind: "speak_utterance", message: res.text });
+    if (tail?.spoken) this.deliverSegment(rec, tail.spoken);
+    if (!rec.splitter?.spokeAny && res.text.trim()) this.deliverSegment(rec, res.text);
+    if (res.text.trim()) this.voice.transcript.push({ role: "assistant", content: res.text + (rec.capOffer ? `
+
+(Said aloud in place of the rest of the spoken summary: "${rec.capOffer}")` : "") });
   }
   onWorkerFailed(id, err2) {
     this.failTask(this.tasks.get(id), err2 instanceof Error ? err2.message : String(err2));
   }
-  /** A delivery the user has SUPERSEDED — parked AND moved on (suppressParkedResume, set by a redirect) —
+  /** A delivery the user has SUPERSEDED — moved on from (deliveryParked 'moved_on', set by a redirect) —
    *  must not hijack the voice when it settles late (partial or failed): that would talk over the new topic
    *  and, worse, auto-escalate work the user already abandoned. Fold a recoverable note into the transcript
    *  instead (the reflex can surface it if asked) and report true so the caller skips queueRevoice. A merely
-   *  barge-parked task (suppressParkedResume false — a "go on" may still resume it) is NOT superseded: it
+   *  barge-parked task ('barge' — a "go on" may still resume it) is NOT superseded: it
    *  keeps the normal surfacing path so a failure the user still cares about is not swallowed. */
   foldIfSuperseded(rec, note) {
-    if (!(rec.deliveryParked && this.suppressParkedResume)) return false;
+    if (rec.deliveryParked !== "moved_on") return false;
     if (note.trim()) this.voice.transcript.push({ role: "assistant", content: note });
-    log15.verbose(`task ${rec.id} settled but superseded (${rec.status}) \u2014 folded into transcript, not voiced`);
+    log20.verbose(`task ${rec.id} settled but superseded (${rec.status}) \u2014 folded into transcript, not voiced`);
     return true;
   }
   failTask(rec, msg) {
     this.dropAsk(rec.id);
     rec.status = "error";
     rec.result = msg;
-    log15.warn(`task ${rec.id} failed: ${msg}`);
+    log20.warn(`task ${rec.id} failed: ${msg}`);
     this.notify("task_error", `task ${rec.id} (${rec.label}) failed: ${msg}`);
     if (this.foldIfSuperseded(rec, `The "${rec.label}" task failed: ${msg}`)) return;
+    this.dropParked(rec);
     this.queueRevoice(this.integrationPrompt(rec, "error", msg, "error"), true);
   }
   // --- voice tools (closures over this instance) ---
@@ -8920,10 +10464,18 @@ Another agent just implemented the above. Independently check the CURRENT state
     this.notify("task_started", `task ${id} (${lbl}) started`, { id, brief, tier });
     return id;
   }
+  /** Tool result for a dispatch. The task is ALREADY RUNNING — live, the terse "Acknowledge briefly" drew
+   *  "Did you want me to look up today's news?" right after dispatching exactly that (session 20260923-101910
+   *  msg 18). Also truthful about delivery: a clean result is spoken by the worker itself and lands in
+   *  context (TaskStatus returns it); only failures come back as a [task … failed] event. */
+  dispatchResult(id, verb) {
+    const after = `The worker speaks its result to the user itself when done (TaskStatus ${id} returns it).`;
+    return this.spokeBeforeDispatch ? `${verb} task ${id} \u2014 it is already running. You already acknowledged \u2014 end your turn now with NO further text. ${after}` : `${verb} task ${id} \u2014 it is already running. Now tell the user in ONE short sentence that you are on it (what you are doing) \u2014 do NOT ask whether they want it; it is already happening. ${after}`;
+  }
   actTool() {
     return {
       name: "Act",
-      description: 'Escalate real work (reading/editing files, searching, running tasks, building) to a standard background worker. Returns immediately with a task id; the result arrives later as a "[task <id> completed]" event. Provide a clear, self-contained `brief` (the worker does not hear the live conversation).',
+      description: 'Escalate real work (reading/editing files, searching, running tasks, building) to a standard background worker. Returns immediately with a task id; when it finishes the worker speaks its result to the user itself (failures arrive as a "[task <id> failed]" event). Provide a clear, self-contained `brief` (the worker does not hear the live conversation).',
       parameters: {
         type: "object",
         required: ["brief"],
@@ -8938,7 +10490,7 @@ Another agent just implemented the above. Independently check the CURRENT state
         this.turnBriefs.add(String(brief ?? ""));
         this.voice.options.toolChoice = "none";
         const id = await this.dispatch(String(brief ?? ""), "act", label ? String(label) : void 0, this.turnFollowUp);
-        return this.spokeBeforeDispatch ? `Acting on task ${id}. You already acknowledged \u2014 end your turn now with NO further text; the result will arrive as a [task ${id} completed] event.` : `Acting on task ${id}. Acknowledge briefly; the result will arrive as a [task ${id} completed] event.`;
+        return this.dispatchResult(id, "Acting on");
       }
     };
   }
@@ -8960,7 +10512,7 @@ Another agent just implemented the above. Independently check the CURRENT state
         this.turnBriefs.add(String(brief ?? ""));
         this.voice.options.toolChoice = "none";
         const id = await this.dispatch(String(brief ?? ""), "think", label ? String(label) : void 0, this.turnFollowUp);
-        return this.spokeBeforeDispatch ? `Thinking on task ${id}. You already acknowledged \u2014 end your turn now with NO further text; the result will arrive as a [task ${id} completed] event.` : `Thinking on task ${id}. Acknowledge briefly; the result will arrive as a [task ${id} completed] event.`;
+        return this.dispatchResult(id, "Thinking on");
       }
     };
   }
@@ -8972,7 +10524,13 @@ Another agent just implemented the above. Independently check the CURRENT state
       run: async ({ id }) => {
         const list = id ? [this.tasks.get(String(id))].filter(Boolean) : [...this.tasks.values()];
         if (!list.length) return id ? `No task '${id}'.` : "No background tasks.";
-        return list.map((t) => `${t.id} (${t.label}): ${t.status}`).join("\n");
+        const cap = id ? 1500 : 300;
+        const clip = (x) => x.length > cap ? `${x.slice(0, cap)}\u2026 (truncated)` : x;
+        return list.map((t) => {
+          const head = `${t.id} (${t.label}): ${t.status}`;
+          const body = (t.status === "done" ? t.spokenText?.trim() || t.result?.trim() : t.status === "error" ? t.result?.trim() : "") ?? "";
+          return body ? `${head}. ${t.status === "error" ? "Error" : "Result"}: ${clip(body)}` : head;
+        }).join("\n");
       }
     };
   }
@@ -8984,18 +10542,20 @@ Another agent just implemented the above. Independently check the CURRENT state
     const kinds = [.../* @__PURE__ */ new Set(["time", "branch", "ls", "file", "capabilities", ...Object.keys(this.options.quickLook ?? {})])];
     return {
       name: "QuickLook",
-      description: `Instant read-only lookup \u2014 one of: ${kinds.join(", ")}. For trivial facts only; anything needing search, commands, or reasoning goes through Act.`,
+      description: `Instant read-only lookup \u2014 one of: ${kinds.join(", ")}. ` + (kinds.includes("sessions") ? '`sessions` = EARLIER conversations with this user: what:"sessions" lists them; what:"sessions" with path:"<session id>" reads one (not what:"file"). ' : "") + "For trivial facts only; anything needing search, commands, or reasoning goes through Act.",
       parameters: {
         type: "object",
         required: ["what"],
         properties: {
           what: { type: "string", enum: kinds, description: "what to look up" },
-          path: { type: "string", description: "for ls/file: the path to look at" }
+          path: { type: "string", description: 'for ls/file: the path to look at; for sessions: a session id (or "previous")' }
         }
       },
       run: async ({ what, path }) => {
         const fs = this.options.fs;
         try {
+          const sessions = this.options.quickLook?.sessions;
+          if (sessions && (what === "file" || what === "ls") && SESSION_ID_RE.test(String(path ?? "").trim())) return await sessions(String(path).trim());
           const over = this.options.quickLook?.[String(what)];
           if (over) return await over(path ? String(path) : void 0);
           switch (String(what)) {
@@ -9103,6 +10663,250 @@ Another agent just implemented the above. Independently check the CURRENT state
   }
 };
 
+// src/modelRouter.ts
+init_llm();
+init_logging();
+var log21 = forComponent("ModelRouter");
+var ModelRouterOptions = class {
+  classifier = jevClassifier();
+  /** Capability tiers → model id (any provider). fast/standard run the main session; premium is only ever an offload. */
+  models = { fast: "anthropic/claude-haiku-4-5-20251001", standard: "anthropic/claude-sonnet-4-6", premium: "anthropic/claude-opus-5-5" };
+  /** Escalate to a stronger tier when it holds at least this much probability mass (upward bias). */
+  threshold = 0.25;
+  /** P(same thread) at or above which the previous premium side-conversation is resumed. */
+  sameThreadAt = 0.5;
+  classifyTimeoutMs = 1e4;
+  /** Host-supplied pricing (model, usage) → USD, so mixed-model turns are costed per model. */
+  costOf = () => 0;
+  /** Step budget for the premium sub-agent. */
+  offloadMaxSteps = 40;
+  /** Host-supplied provider options per model (e.g. claude-code's subscription env); applied on every tier switch + the offload child. */
+  providerOptionsFor;
+};
+function pickTier(c, th) {
+  const o = c.probs.premium ?? 0, s = c.probs.standard ?? 0;
+  if (o >= th || c.choice === "premium") return "premium";
+  if (c.choice === "standard" || s + o >= th) return "standard";
+  return "fast";
+}
+function textTurns(msgs) {
+  const out = [];
+  for (const m of msgs) {
+    if (m.role === "user") {
+      const t = contentText(m.content).trim();
+      if (t) out.push({ user: t, assistant: "" });
+    } else if (m.role === "assistant" && out.length) {
+      const t = contentText(m.content).trim();
+      if (t) out[out.length - 1].assistant = (out[out.length - 1].assistant + "\n" + t).trim();
+    }
+  }
+  return out;
+}
+var fmtTurns = (ts) => ts.map((t) => `USER: ${t.user}
+ASSISTANT: ${t.assistant || "(no text reply)"}`).join("\n\n");
+var addUsage = (a, b) => {
+  if (!a) return b;
+  if (!b) return a;
+  return {
+    promptTokens: a.promptTokens + b.promptTokens,
+    completionTokens: a.completionTokens + b.completionTokens,
+    totalTokens: a.totalTokens + b.totalTokens,
+    cacheCreationTokens: (a.cacheCreationTokens ?? 0) + (b.cacheCreationTokens ?? 0),
+    cacheReadTokens: (a.cacheReadTokens ?? 0) + (b.cacheReadTokens ?? 0)
+  };
+};
+var ModelRouter = class {
+  constructor(options) {
+    this.options = options;
+    this.options = { ...new ModelRouterOptions(), ...options };
+  }
+  options;
+  state = {};
+  get o() {
+    return this.options;
+  }
+  /** Classify one turn. Never throws: classifier failure/timeout ⇒ standard. */
+  async decide(transcript, next) {
+    const o = this.o;
+    const main2 = this.state.main === o.models.fast ? "fast" : "standard";
+    const input = {
+      previousModel: main2,
+      history: textTurns(transcript).slice(-4).map((t) => ({ user: t.user.slice(0, 1500), assistant: t.assistant.slice(0, 1500) })),
+      next,
+      lastOffload: this.state.offload?.question
+    };
+    const t0 = performance.now();
+    let d;
+    try {
+      let timer;
+      const c = await Promise.race([
+        o.classifier(input),
+        new Promise((_, rej) => {
+          timer = setTimeout(() => rej(new Error(`classifier timeout ${o.classifyTimeoutMs}ms`)), o.classifyTimeoutMs);
+        })
+      ]).finally(() => clearTimeout(timer));
+      const tier = pickTier(c, o.threshold);
+      d = { tier, model: o.models[tier], probs: c.probs, choice: c.choice, sameThread: c.sameThread, classifyMs: Math.round(performance.now() - t0) };
+      if (tier === "premium") d.offload = this.state.offload && (c.sameThread ?? 0) >= o.sameThreadAt ? "continue" : "fresh";
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      log21.warn(`classifier failed, falling back to standard: ${msg}`);
+      d = { tier: "standard", model: o.models.standard, probs: {}, fallback: msg, classifyMs: Math.round(performance.now() - t0) };
+    }
+    log21.info(`route ${d.tier}${d.offload ? `(${d.offload})` : ""} \xB7 argmax=${d.choice ?? "-"} \xB7 p=${JSON.stringify(d.probs)}${d.sameThread != null ? ` \xB7 same=${d.sameThread.toFixed(2)}` : ""} \xB7 ${d.classifyMs}ms`);
+    return d;
+  }
+  /** Run one user turn on `agent` with routing. Returns a RunResult carrying `costUsd` + `routing`. */
+  async send(agent, content) {
+    const o = this.o;
+    const text = contentText(content);
+    const d = await this.decide(agent.transcript, text);
+    if (d.tier !== "premium") {
+      this.use(agent, this.state.main = d.model);
+      const res = await agent.send(content);
+      return { ...res, costUsd: o.costOf(d.model, res.usage), routing: d };
+    }
+    this.use(agent, this.state.main ??= o.models.standard);
+    return this.offload(agent, content, text, d);
+  }
+  async offload(agent, content, text, d) {
+    const o = this.o, main2 = this.state.main;
+    const prev = this.state.offload;
+    const cont = d.offload === "continue" && prev && prev.mainLen <= agent.transcript.length;
+    let briefUsage, prompt;
+    if (cont) {
+      const delta = textTurns(agent.transcript.slice(prev.mainLen));
+      prompt = `Follow-up in the same thread.${delta.length ? ` Since your last answer the main conversation continued:
+
+${fmtTurns(delta)}
+` : ""}
+
+New request:
+${text}`;
+    } else {
+      const b = await this.brief(agent, text);
+      briefUsage = b.usage;
+      const last2 = textTurns(agent.transcript).slice(-2);
+      prompt = `You are handling a hard turn delegated by the main agent of an ongoing session. You do NOT see its conversation \u2014 only this brief. Do the work with your tools, then reply to the user directly (your reply is shown as the session's answer).
+
+--- brief from the main agent ---
+${b.text}
+
+${last2.length ? `--- last turns (verbatim) ---
+${fmtTurns(last2)}
+
+` : ""}--- current user request (verbatim) ---
+${text}`;
+    }
+    const child = this.spawn(agent);
+    const res = cont ? (child.transcript = prev.messages, await child.send(prompt)) : await child.run(prompt);
+    this.state.offloads = (this.state.offloads ?? 0) + 1;
+    if (cont) this.state.reuses = (this.state.reuses ?? 0) + 1;
+    const answer = res.text || `(premium sub-agent finished with no reply; finishReason=${res.finishReason})`;
+    agent.transcript.push({ role: "user", content }, { role: "assistant", content: answer });
+    this.state.offload = { messages: child.transcript, mainLen: agent.transcript.length, question: text };
+    log21.info(`offload ${cont ? "continue" : "fresh"} done \xB7 ${res.finishReason} \xB7 ${res.steps} steps`);
+    const costUsd = o.costOf(main2, briefUsage) + o.costOf(o.models.premium, res.usage);
+    return { ...res, text: answer, messages: agent.transcript, usage: addUsage(briefUsage, res.usage), costUsd, routing: d };
+  }
+  /** The main model writes the task brief on its own (cached) context, tools off; the transcript is restored after. */
+  async brief(agent, text) {
+    const snap = agent.transcript.slice();
+    const { host, toolChoice, maxSteps } = agent.options;
+    Object.assign(agent.options, { host: void 0, toolChoice: "none", maxSteps: 1 });
+    try {
+      const r = await agent.send(`[router] The next request is being delegated to a stronger sub-agent that will NOT see this conversation. Write the self-contained brief you would hand it (<=200 words): the task, the relevant facts/files/decisions established so far, constraints. Output only the brief.
+
+The request:
+${text}`);
+      return { text: r.text.trim() || text, usage: r.usage };
+    } catch (e) {
+      log21.warn(`brief failed, sending the raw request: ${e instanceof Error ? e.message : String(e)}`);
+      return { text };
+    } finally {
+      agent.transcript = snap;
+      Object.assign(agent.options, { host, toolChoice, maxSteps });
+    }
+  }
+  use(agent, model) {
+    agent.options.model = model;
+    if (this.o.providerOptionsFor) agent.options.providerOptions = this.o.providerOptionsFor(model);
+  }
+  spawn(agent) {
+    const a = agent.options;
+    const co = childOptionsFor(
+      { ai: a.ai, model: a.model, fs: a.fs, tools: a.tools, systemPrompt: a.systemPrompt, hooks: a.hooks, maxSteps: this.o.offloadMaxSteps, traceDir: a.traceDir, providerOptionsFor: this.o.providerOptionsFor },
+      a.fs,
+      a.depth ?? 0,
+      a.maxDepth ?? 2,
+      void 0,
+      this.o.models.premium
+    );
+    if (typeof co === "string") throw new Error(co);
+    co.signal = a.signal;
+    return new Agent(co);
+  }
+};
+var JEV_KEYS = ["AI_GATEWAY_API_KEY", "OPENROUTER_API_KEY", "TYPESAFE_API_KEY"];
+async function loadJev(opts) {
+  const mod = await import(opts.jevModule ?? process.env.AGENTX_JEV_MODULE ?? "@livx.cc/mcp-jev/jev");
+  const env = { ...process.env };
+  const file = opts.envFile ?? process.env.AGENTX_JEV_ENV;
+  if (file) {
+    const { readFileSync: readFileSync10 } = await import("fs");
+    for (const l of readFileSync10(file, "utf8").split("\n")) {
+      const m = l.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);
+      if (m && !env[m[1]]) env[m[1]] = m[2].replace(/^['"]|['"]$/g, "");
+    }
+  }
+  return { mod, env };
+}
+async function jevAvailable(opts = {}) {
+  try {
+    const { env } = await loadJev(opts);
+    return JEV_KEYS.some((k) => env[k]?.trim());
+  } catch (e) {
+    log21.debug(`jev unavailable: ${e instanceof Error ? e.message : String(e)}`);
+    return false;
+  }
+}
+function jevClassifier(opts = {}) {
+  let router;
+  const load = async () => {
+    const { mod, env } = await loadJev(opts);
+    return new mod.JevRouter({ env });
+  };
+  return async (input) => {
+    const jev = await (router ??= load().catch((e) => {
+      router = void 0;
+      throw e;
+    }));
+    const questions = [{
+      id: "tier",
+      type: "choice",
+      instructions: "Pick the CHEAPEST model that will handle the NEXT assistant turn correctly for this coding-agent conversation. Staying on previousModel keeps its prompt cache warm; switch only when the next turn clearly needs more (or much less) capability.",
+      criteria: {
+        fast: "Trivial: commands, lookups, acknowledgements, commits, mechanical single-file edits, short rewrites.",
+        standard: "Standard engineering: features, bounded refactors, reviews, tests, following a clear trace, summarising.",
+        premium: "Hard: root-causing subtle/intermittent bugs, concurrency, security semantics, architecture trade-offs, quantitative reasoning."
+      }
+    }];
+    if (input.lastOffload) questions.push({
+      id: "sameThread",
+      type: "boolean",
+      instructions: "Does nextUserMessage continue the same line of work as lastOffload (the previous hard request, handled by a specialist) \u2014 a follow-up, refinement or next step of it \u2014 rather than a new, unrelated topic?"
+    });
+    const state = { previousModel: input.previousModel, history: input.history, nextUserMessage: input.next, ...input.lastOffload ? { lastOffload: input.lastOffload } : {} };
+    const r = await jev.evaluate({ state, questions }, opts.provider);
+    const a = r.answers.tier;
+    const map = (k) => k;
+    const probs = {};
+    for (const [k, v] of Object.entries(a.probabilities ?? {})) probs[map(k)] = v;
+    const st = r.answers.sameThread;
+    return { choice: map(a.choice), probs, sameThread: st ? st.probability ?? (st.value ? 1 : 0) : void 0 };
+  };
+}
+
 // src/mcp.ts
 function toResult(result) {
   if (result == null) return { text: "" };
@@ -9290,7 +11094,7 @@ import { MemFilesystem as MemFilesystem3, IndexedDbFilesystem, CommandExecutor a
 init_logging();
 import { spawn } from "child_process";
 import { createHash } from "crypto";
-var log16 = forComponent("mcp");
+var log22 = forComponent("mcp");
 var PROTOCOL_VERSION = "2025-06-18";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_CALL_TIMEOUT_MS = 30 * 6e4;
@@ -9320,7 +11124,7 @@ var StdioTransport = class {
     proc.stdout.setEncoding("utf8");
     proc.stdout.on("data", (chunk) => this.onData(chunk));
     proc.stderr.setEncoding("utf8");
-    proc.stderr.on("data", (chunk) => log16.debug(`[${command}] stderr:`, chunk.trimEnd()));
+    proc.stderr.on("data", (chunk) => log22.debug(`[${command}] stderr:`, chunk.trimEnd()));
     proc.on("exit", (code) => this.failAll(new Error(`MCP server "${command}" exited (code ${code})`)));
     proc.on("error", (e) => this.failAll(e instanceof Error ? e : new Error(String(e))));
   }
@@ -9334,7 +11138,7 @@ var StdioTransport = class {
       try {
         this.dispatch(JSON.parse(line));
       } catch (e) {
-        log16.debug("dropping non-JSON line from MCP server:", line, e);
+        log22.debug("dropping non-JSON line from MCP server:", line, e);
       }
     }
   }
@@ -9344,7 +11148,7 @@ var StdioTransport = class {
       try {
         p2?.onProgress?.(msg.params ?? {});
       } catch (e) {
-        log16.debug("onProgress handler threw", e);
+        log22.debug("onProgress handler threw", e);
       }
       return;
     }
@@ -9382,7 +11186,7 @@ var StdioTransport = class {
       const onAbort = () => {
         if (!this.pending.delete(id)) return;
         clearTimeout(timer);
-        this.notify("notifications/cancelled", { requestId: id, reason: String(signal?.reason?.message ?? "cancelled") }).catch((e) => log16.debug("cancel notify failed", e));
+        this.notify("notifications/cancelled", { requestId: id, reason: String(signal?.reason?.message ?? "cancelled") }).catch((e) => log22.debug("cancel notify failed", e));
         reject(abortError(signal));
       };
       const done = () => signal?.removeEventListener("abort", onAbort);
@@ -9406,7 +11210,7 @@ var StdioTransport = class {
     try {
       this.proc?.stdin?.end();
     } catch (e) {
-      log16.debug("stdin end failed", e);
+      log22.debug("stdin end failed", e);
     }
     this.proc?.kill();
   }
@@ -9441,7 +11245,7 @@ var HttpTransport = class {
       return await this.post({ jsonrpc: "2.0", id, method, params: opts.onProgress ? withProgressToken(params, id) : params }, false, signal, opts.onProgress);
     } catch (e) {
       if (opts.signal?.aborted) {
-        void this.notify("notifications/cancelled", { requestId: id, reason: String(opts.signal.reason?.message ?? "cancelled") }).catch((err2) => log16.debug("cancel notify failed", err2));
+        void this.notify("notifications/cancelled", { requestId: id, reason: String(opts.signal.reason?.message ?? "cancelled") }).catch((err2) => log22.debug("cancel notify failed", err2));
         throw abortError(opts.signal);
       }
       throw e;
@@ -9484,7 +11288,7 @@ function sseMessage(line) {
   try {
     return JSON.parse(trimmed.slice(5).trim());
   } catch (e) {
-    log16.debug("skipping unparseable SSE data line", e);
+    log22.debug("skipping unparseable SSE data line", e);
     return void 0;
   }
 }
@@ -9494,7 +11298,7 @@ async function readSseResponse(resp, id, onProgress) {
       try {
         onProgress?.(obj.params ?? {});
       } catch (e) {
-        log16.debug("onProgress handler threw", e);
+        log22.debug("onProgress handler threw", e);
       }
       return void 0;
     }
@@ -9593,7 +11397,7 @@ async function mountWithDeadline(name, cfg, mountTimeoutMs) {
       return { name, client, tools, specs, serverInfo: init?.serverInfo, config: cfg };
     })(), mountTimeoutMs, name);
   } catch (e) {
-    await client.close().catch((err2) => log16.debug(`close after failed mount of "${name}": ${err2}`));
+    await client.close().catch((err2) => log22.debug(`close after failed mount of "${name}": ${err2}`));
     throw e;
   }
 }
@@ -9604,15 +11408,15 @@ function validEntries(servers) {
   return Object.entries(servers).filter(([name, cfg]) => {
     if (!cfg || cfg.disabled) return false;
     if (!cfg.command && !cfg.url) {
-      log16.warn(`MCP server "${name}" needs a command (stdio) or url (http) \u2014 skipping`);
+      log22.warn(`MCP server "${name}" needs a command (stdio) or url (http) \u2014 skipping`);
       return false;
     }
     return true;
   });
 }
 function logMountFailure(name, e) {
-  if (e instanceof McpAuthError) log16.warn(`MCP "${name}" needs-auth: HTTP ${e.status} \u2014 set bearerToken or headers in its config; skipping`);
-  else log16.error(`MCP server "${name}" failed to mount: ${e?.message ?? e}`);
+  if (e instanceof McpAuthError) log22.warn(`MCP "${name}" needs-auth: HTTP ${e.status} \u2014 set bearerToken or headers in its config; skipping`);
+  else log22.error(`MCP server "${name}" failed to mount: ${e?.message ?? e}`);
 }
 async function mountMcpServers(servers = {}, opts = {}) {
   const entries = validEntries(servers);
@@ -9622,7 +11426,7 @@ async function mountMcpServers(servers = {}, opts = {}) {
     const name = entries[i][0];
     if (r.status === "fulfilled") {
       out.push(r.value);
-      log16.debug(`MCP "${name}" mounted \u2014 ${r.value.tools.length} tool(s)${r.value.serverInfo?.name ? ` from ${r.value.serverInfo.name}` : ""}`);
+      log22.debug(`MCP "${name}" mounted \u2014 ${r.value.tools.length} tool(s)${r.value.serverInfo?.name ? ` from ${r.value.serverInfo.name}` : ""}`);
     } else logMountFailure(name, r.reason);
   });
   return out;
@@ -9662,7 +11466,7 @@ var McpPool = class {
     const prev = this.warm.get(key);
     if (prev) {
       clearTimeout(prev.timer);
-      if (prev.client !== client) void prev.client.close().catch((err2) => log16.debug(`warm-pool replace close failed: ${err2}`));
+      if (prev.client !== client) void prev.client.close().catch((err2) => log22.debug(`warm-pool replace close failed: ${err2}`));
     }
     const e = { client, timer: void 0 };
     this.warm.set(key, e);
@@ -9679,7 +11483,7 @@ var McpPool = class {
     const e = this.warm.get(key);
     if (!e) return;
     this.warm.delete(key);
-    await e.client.close().catch((err2) => log16.debug(`warm-pool evict close failed: ${err2}`));
+    await e.client.close().catch((err2) => log22.debug(`warm-pool evict close failed: ${err2}`));
   }
   async closeAll() {
     for (const e of this.warm.values()) {
@@ -9897,7 +11701,7 @@ init_tools_shell();
 // src/tools.notify.ts
 init_logging();
 import { execFile } from "child_process";
-var log18 = forComponent("notify");
+var log24 = forComponent("notify");
 function makeNotifyTool(opts = {}) {
   const platform2 = opts.platform ?? process.platform;
   const run = opts.exec ?? execFile;
@@ -9921,7 +11725,7 @@ function makeNotifyTool(opts = {}) {
       return new Promise((resolve5) => {
         run(argv[0], argv[1], { timeout: 5e3 }, (e) => {
           if (e) {
-            log18.debug("notification failed", e);
+            log24.debug("notification failed", e);
             resolve5(`Notification failed: ${e.message}`);
           } else resolve5("Notification shown.");
         });
@@ -9937,7 +11741,7 @@ import { BodDB as BodDB2 } from "@bod.ee/db";
 init_logging();
 import { existsSync as existsSync2, readFileSync as readFileSync4 } from "fs";
 import { homedir } from "os";
-var log19 = forComponent("cli-util");
+var log25 = forComponent("cli-util");
 function dotDirs(base, sub, opts = {}) {
   const home = opts.home ?? homedir();
   const dirs = [`${base}/.agent/${sub}`, `${base}/.claude/${sub}`, `${home}/.agent/${sub}`, `${home}/.claude/${sub}`];
@@ -9954,7 +11758,7 @@ function parseJson(text, fallback, what = "json") {
   try {
     return JSON.parse(text);
   } catch (e) {
-    log19.debug(`parseJson(${what}) failed: ${e.message}`);
+    log25.debug(`parseJson(${what}) failed: ${e.message}`);
     return fallback;
   }
 }
@@ -9964,7 +11768,7 @@ function readJsonFile(path, fallback) {
   try {
     text = readFileSync4(path, "utf8");
   } catch (e) {
-    log19.debug(`readJsonFile(${path}) unreadable: ${e.message}`);
+    log25.debug(`readJsonFile(${path}) unreadable: ${e.message}`);
     return fallback;
   }
   return parseJson(text, fallback, path);
@@ -10263,7 +12067,7 @@ import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as rea
 import { homedir as homedir3 } from "os";
 import { dirname as dirname3, join as join6 } from "path";
 import { fileURLToPath } from "url";
-var log20 = forComponent("VoiceIO");
+var log26 = forComponent("VoiceIO");
 var now3 = () => performance.now();
 var Player = class {
   proc = null;
@@ -10277,7 +12081,7 @@ var Player = class {
       ["-loglevel", "quiet", "-nodisp", "-fflags", "nobuffer", "-flags", "low_delay", "-probesize", "32", "-f", "s16le", "-ar", String(TTS_SAMPLE_RATE), "-ch_layout", "mono", "-i", "-"],
       { stdio: ["pipe", "ignore", "ignore"] }
     );
-    this.proc.on("error", (e) => log20.warn(`ffplay error: ${e.message}`));
+    this.proc.on("error", (e) => log26.warn(`ffplay error: ${e.message}`));
     this.proc.stdin.on("error", () => {
     });
     this.bytesWritten = 0;
@@ -10315,7 +12119,7 @@ function detectFfmpegMic() {
   const devices = [...audio.matchAll(/\[(\d+)\] (.+)/g)].map(([, idx, name]) => ({ idx, name: name.trim() }));
   const mic = devices.find((d) => /microphone|built-in/i.test(d.name) && !/teams|blackhole|loopback/i.test(d.name)) ?? devices[0];
   if (!mic) throw new Error("no audio input device found");
-  log20.debug(`ffmpeg mic: [${mic.idx}] ${mic.name}`);
+  log26.debug(`ffmpeg mic: [${mic.idx}] ${mic.name}`);
   return `:${mic.idx}`;
 }
 function detectedInputDevice() {
@@ -10351,15 +12155,15 @@ function resolveAecBinary() {
   if (existsSync4(bin) && statSync4(bin).mtimeMs >= statSync4(src).mtimeMs) return bin;
   if (spawnSync2("which", ["swiftc"]).status !== 0) return null;
   mkdirSync5(cacheDir, { recursive: true });
-  log20.info("compiling AEC mic helper (first run)\u2026");
+  log26.info("compiling AEC mic helper (first run)\u2026");
   const build = spawnSync2("swiftc", ["-O", "-o", bin, src, "-Xlinker", "-sectcreate", "-Xlinker", "__TEXT", "-Xlinker", "__info_plist", "-Xlinker", plist], { encoding: "utf8" });
   if (build.status !== 0) {
-    log20.warn(`AEC build failed: ${build.stderr?.slice(0, 400)}`);
+    log26.warn(`AEC build failed: ${build.stderr?.slice(0, 400)}`);
     return null;
   }
   const sign = spawnSync2("codesign", ["-fs", "-", bin], { encoding: "utf8" });
   if (sign.status !== 0) {
-    log20.warn(`codesign failed: ${sign.stderr?.slice(0, 200)}`);
+    log26.warn(`codesign failed: ${sign.stderr?.slice(0, 200)}`);
     return null;
   }
   return bin;
@@ -10401,16 +12205,16 @@ var NodeMicSource = class {
       this.proc = spawn2(this.bin, [], { stdio: ["ignore", "pipe", "ignore"] });
     } else {
       if (spawnSync2("which", ["ffmpeg"]).status !== 0) throw new Error("voice I/O unavailable: no AEC helper and no ffmpeg on PATH");
-      log20.info("mic: raw capture (no AEC) \u2014 echo handled heuristically; headphones recommended");
+      log26.info("mic: raw capture (no AEC) \u2014 echo handled heuristically; headphones recommended");
       this.proc = spawn2(
         "ffmpeg",
         ["-loglevel", "error", "-f", "avfoundation", "-i", detectFfmpegMic(), "-ar", String(STT_SAMPLE_RATE), "-ac", "1", "-f", "s16le", "-"],
         { stdio: ["ignore", "pipe", "pipe"] }
       );
-      this.proc.stderr.on("data", (d) => log20.warn(`ffmpeg: ${String(d).trim()}`));
+      this.proc.stderr.on("data", (d) => log26.warn(`ffmpeg: ${String(d).trim()}`));
     }
     this.proc.on("exit", (c) => {
-      if (c && !this.stopped) log20.error(`mic capture exited (${c}) \u2014 check mic permission / MIC_DEVICE / MIC_AEC=0`);
+      if (c && !this.stopped) log26.error(`mic capture exited (${c}) \u2014 check mic permission / MIC_DEVICE / MIC_AEC=0`);
     });
     this.proc.stdout.on("data", (chunk) => onChunk(chunk));
   }
@@ -10476,7 +12280,7 @@ var AecDuplexAudio = class {
     this.proc.stdin.on("error", () => {
     });
     this.proc.on("exit", (c) => {
-      if (c && !this.stopped) log20.error(`aec duplex audio exited (${c}) \u2014 check mic permission / MIC_AEC=0`);
+      if (c && !this.stopped) log26.error(`aec duplex audio exited (${c}) \u2014 check mic permission / MIC_AEC=0`);
     });
     this.proc.stdout.on("data", (chunk) => {
       this.gotChunk = true;
@@ -10492,7 +12296,7 @@ var AecDuplexAudio = class {
             openMicSettings();
             this.onFatal?.("microphone permission denied \u2014 enable it in System Settings \u2192 Privacy & Security \u2192 Microphone for your terminal, then restart it");
           }
-        } else log20.debug(`mic-aec: ${s}`);
+        } else log26.debug(`mic-aec: ${s}`);
       }
     });
     if (!this.noVpio && !this.triedFallback) {
@@ -10501,7 +12305,7 @@ var AecDuplexAudio = class {
         this.triedFallback = true;
         this.noVpio = true;
         this._aec = false;
-        log20.warn("mic-aec: VPIO delivered no audio in 2.5s \u2014 falling back to non-VPIO capture (no AEC \u2192 half-duplex, no barge-in)");
+        log26.warn("mic-aec: VPIO delivered no audio in 2.5s \u2014 falling back to non-VPIO capture (no AEC \u2192 half-duplex, no barge-in)");
         this.onDegrade?.();
         this.killProc();
         this.spawnHelper();
@@ -10605,6 +12409,78 @@ var matchVoiceCommand = (text) => {
   const t = text.toLowerCase().replace(/[^a-z ]/g, " ").replace(/\s+/g, " ").trim().replace(/^(?:hey|ok|okay|please) /, "").replace(/ (?:please|now)$/, "");
   return /^(voice off|mute|stop listening)( \1)*$/.test(t) ? "off" : null;
 };
+var replacedVoiceTurn = (last, meta) => meta?.supersedes !== void 0 && last?.text === meta.supersedes ? last : void 0;
+var CutInAbsorber = class {
+  cut = "";
+  absorbed;
+  interjected(heard) {
+    this.cut = heard;
+    this.absorbed = void 0;
+  }
+  absorbs(text, meta) {
+    const cut = this.cut || (meta?.supersedes !== void 0 && meta.supersedes === this.absorbed?.text ? this.absorbed.cut : "");
+    this.cut = "";
+    this.absorbed = void 0;
+    const words2 = (s) => s.trim().split(/\s+/).filter(Boolean).length;
+    if (!cut || words2(text) - words2(cut) >= 3) return false;
+    this.absorbed = { text, cut };
+    return true;
+  }
+};
+function splitCut(cut) {
+  if (!cut) return { reply: null, delivery: "", heard: "" };
+  const queued = cut.queued ?? [];
+  if (!cut.queuedTurn) return { reply: cut.full ? cut : null, delivery: queued.join(" ").trim(), heard: "" };
+  let at = cut.full.length;
+  if (cut.full.length - cut.heard.length > 12) {
+    const sentence = Math.max(...[". ", "! ", "? "].map((b) => cut.heard.lastIndexOf(b)));
+    at = cut.exact ? cut.heard.length : sentence < 0 ? 0 : sentence + 2;
+  }
+  const heard = cut.full.slice(0, at).trim();
+  return { reply: null, delivery: [cut.full.slice(at), ...queued].map((x) => x.trim()).filter(Boolean).join(" "), heard: heard && heard + " " };
+}
+function takeCut(v, forVoiceLine) {
+  const cut = v?.takeInterruptedReply() ?? null;
+  return splitCut(forVoiceLine ? cut : null);
+}
+function bindOverlapInstinct(v, instinct, live, decideMs = 900) {
+  const o = v.options;
+  const { onDiag } = o;
+  o.overlapDecideMs = decideMs;
+  instinct.options.overlapSettleMs = 0;
+  o.onDiag = (ev) => {
+    onDiag(ev);
+    if (!live()) return;
+    if (ev.kind === "overlap_pause") void instinct.overlap(String(ev.text ?? ""));
+    else if (/^(?:barge_in|overlap_resume|overlap_end|interrupt|tts_turn_begin)$/.test(ev.kind)) instinct.overlapEnded();
+  };
+  Object.assign(instinct.options, {
+    onYield: () => {
+      if (!live()) return false;
+      if (v.decideOverlap("yield")) return;
+      if (!v.audible) return false;
+      v.interrupt();
+      o.onBargeIn("speaking");
+    },
+    // `heard` = what Jev judged: the engine absorbs only those words — a reaction that grows past them is re-decided.
+    onKeepTalking: (heard) => live() ? v.decideOverlap("keep_talking", heard) : false
+  });
+}
+function bindAckInstinct(v, instinct) {
+  const o = v.options;
+  const { onDiag } = o;
+  o.pickAck = (c) => instinct.pickAck(c);
+  instinct.options.ackSettleMs = 2 * o.adaptiveAckMs + 200;
+  o.onDiag = (ev) => {
+    try {
+      if (ev.kind === "ack_fired") instinct.ackOutcome(String(ev.phrase));
+      else if (ev.kind === "ack_skipped" || ev.kind === "ack_cancelled") instinct.ackOutcome(null);
+    } catch (e) {
+      log26.warn(`ack outcome tap failed: ${e instanceof Error ? e.message : e}`);
+    }
+    onDiag(ev);
+  };
+}
 var VoiceIOOptions = class extends VoiceEngineOptions {
   sonioxApiKey = process.env.SONIOX_API_KEY ?? "";
   cartesiaApiKey = process.env.CARTESIA_API_KEY ?? "";
@@ -10721,7 +12597,7 @@ function fakeVoiceParts(uttFile) {
 init_logging();
 import { appendFile, mkdirSync as mkdirSync6 } from "fs";
 import { dirname as dirname4 } from "path";
-var log21 = forComponent("VoiceDiag");
+var log27 = forComponent("VoiceDiag");
 var JsonlDiagSink = class {
   constructor(path) {
     this.path = path;
@@ -10762,7 +12638,7 @@ var JsonlDiagSink = class {
   disable(e) {
     this.disabled = true;
     this.queue.length = 0;
-    log21.debug(`voice diag sink disabled (${this.path}): ${e instanceof Error ? e.message : e}`);
+    log27.debug(`voice diag sink disabled (${this.path}): ${e instanceof Error ? e.message : e}`);
   }
   /** True once a failure permanently disabled the sink (tests/inspection). */
   get isDisabled() {
@@ -10832,7 +12708,7 @@ async function loadConfig(cwd) {
 
 // cli/hooks-config.ts
 import { spawnSync as spawnSync3 } from "child_process";
-var log22 = forComponent("hooks");
+var log28 = forComponent("hooks");
 var escapeRegex = (s) => s.replace(/[.+^${}()|[\]\\]/g, "\\$&");
 function ruleMatches(rule, toolName) {
   if (!rule.tool || rule.tool === "*") return true;
@@ -10849,7 +12725,7 @@ function runCmd(rule, env) {
     });
     return { code: r.status ?? 1, out: ((r.stdout ?? "") + (r.stderr ?? "")).trim() };
   } catch (e) {
-    log22.debug(`hook command failed: ${rule.command}`, e);
+    log28.debug(`hook command failed: ${rule.command}`, e);
     return { code: 1, out: String(e?.message ?? e) };
   }
 }
@@ -10953,10 +12829,10 @@ function formatDiff(ops, opts = {}) {
 }
 
 // cli/session.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync4, readdirSync, renameSync, symlinkSync as symlinkSync2, unlinkSync, readlinkSync } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync4, readdirSync, renameSync, symlinkSync as symlinkSync2, unlinkSync, readlinkSync, statSync as statSync5 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join8 } from "path";
-var log23 = forComponent("session");
+var log29 = forComponent("session");
 var globalDir = () => join8(homedir5(), ".agent", "sessions");
 var SessionStore = class {
   dir;
@@ -11001,7 +12877,7 @@ var SessionStore = class {
   }
   load(id) {
     if (!this.safeId(id)) {
-      log23.debug(`rejecting unsafe session id: ${id}`);
+      log29.debug(`rejecting unsafe session id: ${id}`);
       return void 0;
     }
     const path = join8(this.dir, `${id}.json`);
@@ -11009,7 +12885,7 @@ var SessionStore = class {
     try {
       return JSON.parse(readFileSync7(path, "utf8"));
     } catch (e) {
-      log23.debug(`unreadable session ${id} \u2014 ignoring`, e);
+      log29.debug(`unreadable session ${id} \u2014 ignoring`, e);
       return void 0;
     }
   }
@@ -11022,11 +12898,26 @@ var SessionStore = class {
       try {
         metas.push(JSON.parse(readFileSync7(join8(this.dir, f), "utf8")).meta);
       } catch (e) {
-        log23.debug(`skipping unreadable session file ${f}`, e);
+        log29.debug(`skipping unreadable session file ${f}`, e);
       }
     }
     return metas.sort((a, b) => b.updated - a.updated);
   }
+  /** Cheap listing — ids from filenames + mtime/size from stat, NO parsing (list() parses every file: 870
+   *  sessions / 157MB took ~150ms+ synchronously). Most-recently-written first. */
+  files() {
+    if (!existsSync6(this.dir)) return [];
+    const out = [];
+    for (const f of readdirSync(this.dir)) {
+      if (!f.endsWith(".json")) continue;
+      try {
+        const st = statSync5(join8(this.dir, f));
+        out.push({ id: f.slice(0, -5), mtime: st.mtimeMs, size: st.size });
+      } catch {
+      }
+    }
+    return out.sort((a, b) => b.mtime - a.mtime);
+  }
   latest() {
     return this.list()[0];
   }
@@ -11087,6 +12978,61 @@ function titleOf(messages) {
   const t = contentText(u?.content).replace(/\s+/g, " ").trim();
   return t.length > 60 ? t.slice(0, 57) + "\u2026" : t || "(empty)";
 }
+function recapLine(m) {
+  if (m.role !== "user" && m.role !== "assistant") return "";
+  let t = contentText(m.content);
+  if (m.role === "user" && /^\[(?:session started|reminder)\]/.test(t)) return "";
+  const spoken = [...t.matchAll(/<spoken>([\s\S]*?)<\/spoken>/g)].map((x) => x[1]).join(" ");
+  if (spoken) t = spoken;
+  t = t.replace(/\s*\[the user interrupted you[\s\S]*$/, "").replace(/\[[a-z_ ]+\]\s*/gi, "").replace(/\s+/g, " ").trim();
+  return t ? `${m.role}: ${t}` : "";
+}
+function sessionRecap(store, currentId, which, cap = 2500, maxParseBytes = 4e6) {
+  const others = store.files().filter((f) => f.id !== currentId);
+  if (!others.length) return "No earlier sessions in this project.";
+  const created = (id) => {
+    const m = id.match(/^(\d{4})(\d{2})(\d{2})-(\d{2})(\d{2})(\d{2})/);
+    return m ? new Date(+m[1], +m[2] - 1, +m[3], +m[4], +m[5], +m[6]).getTime() : NaN;
+  };
+  const when = (ts) => {
+    if (!Number.isFinite(ts)) return "unknown time";
+    const d = new Date(ts), today = (/* @__PURE__ */ new Date()).toDateString() === d.toDateString();
+    return `${today ? "today" : d.toLocaleDateString("en-US", { month: "short", day: "numeric" })} ${d.toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit" })}`;
+  };
+  const load = (f) => f.size <= maxParseBytes ? store.load(f.id) : void 0;
+  const w = which?.trim();
+  if (!w) {
+    const rows = others.slice(0, 5).map((f) => {
+      const data2 = load(f);
+      const asks = (data2?.messages ?? []).filter((m) => m.role === "user").map(recapLine).filter(Boolean).slice(0, 3).map((l) => `"${l.slice(6, 86)}"`);
+      return `- ${f.id} (${when(created(f.id))}${data2 ? `, ${data2.meta.turns} turns` : ""})${asks.length ? `: ${asks.join("; ")}` : ""}`;
+    });
+    return `Earlier sessions (newest first) \u2014 to read one, call QuickLook with what:"sessions" and path:"<id>":
+${rows.join("\n")}`;
+  }
+  const recent = others.slice(0, 5).map((f) => f.id).join(", ");
+  let hit;
+  if (/^(latest|last|previous|prev)$/i.test(w)) {
+    const cur = created(currentId);
+    hit = others.filter((f) => created(f.id) < cur).sort((a, b) => created(b.id) - created(a.id))[0] ?? others[0];
+  } else {
+    hit = others.find((f) => f.id === w);
+    if (!hit) {
+      const pre = others.filter((f) => f.id.startsWith(w));
+      if (pre.length > 1) return `'${w}' matches ${pre.length} sessions \u2014 use the full id: ${pre.slice(0, 5).map((f) => f.id).join(", ")}`;
+      hit = pre[0];
+    }
+  }
+  if (!hit) return `No session '${w}'. Recent: ${recent}`;
+  const data = load(hit);
+  if (!data) return `Session ${hit.id} is too large (or unreadable) to recap here \u2014 ask a worker (Act) to read it.`;
+  let body = data.messages.map(recapLine).filter(Boolean).map((l) => l.length > 600 ? `${l.slice(0, 600)}\u2026` : l).join("\n");
+  if (body.length > cap) body = `\u2026(earlier lines omitted)
+${body.slice(-cap)}`;
+  return `Session ${data.meta.id} (${when(data.meta.created)}):
+${body || "(no conversation)"}
+(That is everything recorded. Where it does not say why something was done or what was meant, say you do not know \u2014 never supply a reason.)`;
+}
 
 // cli/checkpoints.ts
 var MUTATORS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "ApplyEdits"]);
@@ -11191,7 +13137,7 @@ import { promisify } from "util";
 import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync8 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join9, resolve as resolve3, sep as sep3, parse as parsePath } from "path";
-var log24 = forComponent("checkpoints");
+var log30 = forComponent("checkpoints");
 var exec = promisify(execFile3);
 var DEFAULT_EXCLUDE = [".agent/", ".git/", "node_modules/", "dist/", "build/", ".next/", "target/", ".venv/", "__pycache__/", "*.log"];
 function isBroadRoot(p) {
@@ -11237,7 +13183,7 @@ var ShadowRepo = class {
       writeFileSync5(join9(this.gitDir, "info", "exclude"), this.exclude.join("\n") + "\n");
       this.ready = true;
     } catch (e) {
-      log24.debug(`git checkpoints unavailable for ${this.workTree}`, e);
+      log30.debug(`git checkpoints unavailable for ${this.workTree}`, e);
       this.ready = false;
     }
     return this.ready;
@@ -11248,7 +13194,7 @@ var ShadowRepo = class {
   }
   async commit(label, forced = []) {
     await this.run("add", "-A");
-    for (const p of forced) await this.run("add", "-f", "--", p).catch((e) => log24.debug(`force-add failed: ${p}`, e));
+    for (const p of forced) await this.run("add", "-f", "--", p).catch((e) => log30.debug(`force-add failed: ${p}`, e));
     await this.run("commit", "--allow-empty", "-q", "-m", label);
   }
   /** Inject the CURRENT (pre-edit) content of `paths` into the turn-open restore point by amending it.
@@ -11256,8 +13202,8 @@ var ShadowRepo = class {
    *  turn-boundary `add -A` would never have captured it. Amend (vs a new commit) keeps one restore
    *  point per turn, so the REPL's turn↔frame mapping stays intact. */
   async amendForced(paths) {
-    for (const p of paths) await this.run("add", "-f", "--", p).catch((e) => log24.debug(`force-capture failed: ${p}`, e));
-    await this.run("commit", "--amend", "--no-edit", "-q", "--allow-empty").catch((e) => log24.debug("amend failed", e));
+    for (const p of paths) await this.run("add", "-f", "--", p).catch((e) => log30.debug(`force-capture failed: ${p}`, e));
+    await this.run("commit", "--amend", "--no-edit", "-q", "--allow-empty").catch((e) => log30.debug("amend failed", e));
   }
   /** Commits on `ref`, oldest-first (canonical index space). */
   async log(ref) {
@@ -11317,7 +13263,7 @@ var ShadowRepo = class {
       await this.run("gc", "--auto", "-q").catch(() => {
       });
     } catch (e) {
-      log24.debug("checkpoint prune failed", e);
+      log30.debug("checkpoint prune failed", e);
     }
   }
 };
@@ -11385,7 +13331,7 @@ var GitCheckpoints = class {
   use(sessionId) {
     if (sessionId === this.session) return;
     this.session = sessionId;
-    if (this.started) for (const r of this.repos) void r.point(this.ref()).catch((e) => log24.debug("re-point failed", e));
+    if (this.started) for (const r of this.repos) void r.point(this.ref()).catch((e) => log30.debug("re-point failed", e));
   }
   async begin(label) {
     if (!await this.start()) return;
@@ -11405,7 +13351,7 @@ var GitCheckpoints = class {
           process.stderr.write(`\x1B[2m  checkpoints: '${this.repos[i].root}' too large to snapshot in ${Math.round(this.options.opTimeoutMs / 1e3)}s \u2014 file rewind disabled here\x1B[0m
 `);
         } else {
-          log24.debug("checkpoint commit failed", e);
+          log30.debug("checkpoint commit failed", e);
           survivors.push(this.repos[i]);
           survivorCaches.push(this.caches[i] ?? []);
         }
@@ -11440,7 +13386,7 @@ var GitCheckpoints = class {
           if (this.forced.has(abs)) continue;
           this.forced.add(abs);
           const i = this.repoIndexFor(abs);
-          if (i >= 0) await this.repos[i].amendForced([abs]).catch((e) => log24.debug("amendForced failed", e));
+          if (i >= 0) await this.repos[i].amendForced([abs]).catch((e) => log30.debug("amendForced failed", e));
         }
       }
     };
@@ -12519,8 +14465,8 @@ var REWIND = "\0REWIND";
 var PASTE_PREVIEW_MAX = 40;
 function pastePreview(text) {
   const line = text.split("\n").find((l) => l.trim()) ?? "";
-  const clean2 = line.replace(/[[\]]/g, "").replace(/\s+/g, " ").trim();
-  return clean2.length > PASTE_PREVIEW_MAX ? clean2.slice(0, PASTE_PREVIEW_MAX) + "\u2026" : clean2;
+  const clean3 = line.replace(/[[\]]/g, "").replace(/\s+/g, " ").trim();
+  return clean3.length > PASTE_PREVIEW_MAX ? clean3.slice(0, PASTE_PREVIEW_MAX) + "\u2026" : clean3;
 }
 function applyVimNormal(s, key, str) {
   const k = key?.name;
@@ -13293,7 +15239,7 @@ import { spawnSync as spawnSync5 } from "child_process";
 import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync10, readdirSync as readdirSync2, unlinkSync as unlinkSync3, chmodSync, existsSync as existsSync7 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join12 } from "path";
-var log25 = forComponent("os-sched");
+var log31 = forComponent("os-sched");
 var OsScheduler = class {
   options;
   constructor(options) {
@@ -13355,7 +15301,7 @@ var OsScheduler = class {
         }
       }
     } catch (e) {
-      log25.debug(`cancel ${id}`, e);
+      log31.debug(`cancel ${id}`, e);
     }
     for (const f of [`${id}.json`, `${id}.sh`]) {
       try {
@@ -13472,7 +15418,7 @@ import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync8, mkdirSync as mkdirSync11, unlinkSync as unlinkSync4, readdirSync as readdirSync3 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join13 } from "path";
-var log26 = forComponent("remote-trigger");
+var log32 = forComponent("remote-trigger");
 var TRIGGER_DIR = () => join13(homedir9(), ".agent", "triggers");
 var sockPath = (sessionId, dir = TRIGGER_DIR()) => join13(dir, `${sessionId}.sock`);
 var TriggerServer = class {
@@ -13510,13 +15456,13 @@ var TriggerServer = class {
             conn.end(JSON.stringify({ ok: false, error: String(e) }) + "\n");
           }
         });
-        conn.on("error", (e) => log26.debug("trigger conn error", e));
+        conn.on("error", (e) => log32.debug("trigger conn error", e));
       });
-      this.server.on("error", (e) => log26.debug("trigger server error", e));
+      this.server.on("error", (e) => log32.debug("trigger server error", e));
       this.server.listen(p);
       this.path = p;
     } catch (e) {
-      log26.debug("trigger server unavailable", e);
+      log32.debug("trigger server unavailable", e);
     }
   }
   /** Re-bind on /resume (the session id changed). */
@@ -13638,7 +15584,7 @@ var strike = C("9");
 var link = (text, url) => useColor ? `\x1B]8;;${url}\x1B\\${cyan(text)}\x1B]8;;\x1B\\` : `${text} (${url})`;
 var mdPalette = { bold, dim, cyan, italic, strike, green, link };
 var err = (s) => process.stderr.write(s);
-var log27 = forComponent("cli");
+var log33 = forComponent("cli");
 var VERSION = (() => {
   try {
     return JSON.parse(readFileSync9(new URL("../package.json", import.meta.url), "utf8")).version ?? "?";
@@ -13745,6 +15691,10 @@ function parseArgs(argv) {
         a.listModels = true;
         if (nxt === "list" || nxt === "ls" || nxt === "?") i++;
       } else a.model = argv[++i];
+      if (a.model === "auto") {
+        a.autoRoute = true;
+        a.model = autoModels().standard;
+      }
     } else if (x === "-C" || x === "--cwd") a.cwd = val(++i, x);
     else if (x === "-p" || x === "--print") {
       const nxt = argv[i + 1];
@@ -13823,7 +15773,7 @@ var HELP = `agentx \u2014 agent runtime CLI
   agentx -c "<task>"              continue the most recent session
 
 Flags:
-  -m, --model <id>     model (default anthropic/claude-sonnet-4-6); bare -m or -m list = list all models
+  -m, --model <id>     model (default auto: per-turn haiku/sonnet + opus offload when Jev is configured, else anthropic/claude-sonnet-4-6); bare -m or -m list = list all models
   -C, --cwd <dir>      working dir / project root (default .)
   -c, --continue       resume the most recent session in this dir
   -r, --resume [id]    resume a session \u2014 with an id, or bare for an interactive picker
@@ -14391,10 +16341,25 @@ function costOf(pricing, promptTokens = 0, completionTokens = 0, cacheCreationTo
   const fresh = Math.max(0, promptTokens - cacheCreationTokens - cacheReadTokens);
   return fresh / 1e3 * pricing.inputCostPer1K + cacheCreationTokens / 1e3 * pricing.inputCostPer1K * mult.write + cacheReadTokens / 1e3 * pricing.inputCostPer1K * mult.read + completionTokens / 1e3 * pricing.outputCostPer1K;
 }
+var autoModels = () => ({ ...new ModelRouterOptions().models, ...JSON.parse(process.env.AGENTX_AUTO_MODELS || "{}") });
+function autoRouteSend(args, agent, session, pof) {
+  if (!args.autoRoute) return void 0;
+  const router = new ModelRouter({ costOf: turnCost, models: autoModels(), providerOptionsFor: pof });
+  return async (c) => {
+    const s = session();
+    router.state = s.meta.router ?? {};
+    try {
+      return await router.send(agent, c);
+    } finally {
+      s.meta.router = router.state;
+    }
+  };
+}
 function turnCost(model, usage) {
-  return costOf(getModelInfo(model)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0, model);
+  const priced = model.startsWith("claude-code/") ? `anthropic/${resolveModelAlias(model.slice("claude-code/".length))}` : model;
+  return costOf(getModelInfo(priced)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0, priced);
 }
-async function evaluateGoal(ai, condition, transcript, log28) {
+async function evaluateGoal(ai, condition, transcript, log34) {
   const recent = transcript.filter((m) => m.role === "assistant").slice(-8).map((m) => {
     const text = typeof m.content === "string" ? m.content : m.content.filter((p) => p.type === "text").map((p) => p.text).join(" ");
     return text.slice(0, 600);
@@ -14414,7 +16379,7 @@ ${recent}` }
     const match = r.content.match(/\{[\s\S]*\}/);
     if (match) return JSON.parse(match[0]);
   } catch (e) {
-    log28(dim(`  (goal evaluator error: ${e?.message ?? e})
+    log34(dim(`  (goal evaluator error: ${e?.message ?? e})
 `));
   }
   return { met: false, reason: "evaluation unclear" };
@@ -14635,7 +16600,7 @@ function mcpAgentTools(mounted, opts) {
   return tools;
 }
 async function closeMcp(mounted) {
-  await Promise.all(mounted.map((m) => m.client.close().catch((e) => log27.debug("mcp close failed", e))));
+  await Promise.all(mounted.map((m) => m.client.close().catch((e) => log33.debug("mcp close failed", e))));
 }
 var IMG_EXT = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".gif": "image/gif", ".webp": "image/webp" };
 function mentionRefs(line) {
@@ -14650,7 +16615,7 @@ function readImageParts(cwd, line) {
     if (!mime) continue;
     const abs = ref.startsWith("~/") ? untilde(ref) : resolve4(cwd, ref);
     try {
-      statSync5(abs);
+      statSync6(abs);
     } catch {
       continue;
     }
@@ -14666,7 +16631,7 @@ function pastePathClassifier(cwd) {
     if (!/^(\/|~\/|\.\/|\.\.\/)/.test(t)) return null;
     const abs = t.startsWith("~/") ? untilde(t) : resolve4(cwd, t);
     try {
-      if (!statSync5(abs).isFile()) return null;
+      if (!statSync6(abs).isFile()) return null;
     } catch {
       return null;
     }
@@ -14687,7 +16652,7 @@ async function expandMentions(fs, line) {
     if (loaded.includes(ref) || missing.includes(ref)) continue;
     if (ref.includes(":") && mcpMentionResolver) {
       const body = await mcpMentionResolver(ref).catch((e) => {
-        log27.debug("mcp mention resolve failed", e);
+        log33.debug("mcp mention resolve failed", e);
         return null;
       });
       if (body != null) {
@@ -14722,6 +16687,8 @@ function jsonResult(res, session) {
     steps: res.steps,
     tools: res.messages.slice(lastUser).filter((m) => m.role === "tool").length,
     usage: res.usage,
+    ...res.routing ? { costUsd: res.costUsd, routing: res.routing } : {},
+    // cast: tsup dts hoists a modelRouter import above the shebang
     sessionId: session.meta.id,
     // The parked question, machine-readable — the caller answers it and resumes `sessionId`.
     ...res.finishReason === "needs_input" && res.question ? { question: res.question } : {},
@@ -14774,7 +16741,7 @@ async function runTurn(agent, store, session, task, cp, cwd = process.cwd(), sen
       try {
         store.save(session);
       } catch (ex) {
-        log27.debug("mid-turn session flush failed", ex);
+        log33.debug("mid-turn session flush failed", ex);
       }
     }
     return origNotify(e);
@@ -14795,14 +16762,14 @@ async function runTurn(agent, store, session, task, cp, cwd = process.cwd(), sen
   } finally {
     spinner.stop();
     spinner.turnStart = 0;
-    activeTurn = null;
-    agent.options.signal = void 0;
+    if (activeTurn === ctrl) activeTurn = null;
+    if (agent.options.signal === ctrl.signal) agent.options.signal = void 0;
     if (host && origNotify) host.notify = origNotify;
   }
   agent.options.host?.flushText?.();
   flushLookupGroup();
   const secs2 = ((Date.now() - t0) / 1e3).toFixed(1);
-  const cost = turnCost(agent.options.model, res.usage);
+  const cost = res.costUsd ?? turnCost(agent.options.model, res.usage);
   const m = res.usageEstimated ? "~" : "";
   const tok = res.usage?.totalTokens ? `${m}${(res.usage.totalTokens / 1e3).toFixed(1)}k tok \xB7 ${cost > 0 ? m + fmtUsd(cost) + " \xB7 " : ""}` : "";
   agent.options.host?.takeToolCount?.();
@@ -14923,14 +16890,14 @@ var isCancelTeardown = (e) => {
 function installCancelGuards(mounted) {
   process.on("unhandledRejection", (e) => {
     if (isCancelTeardown(e)) {
-      log27.debug("suppressed unhandledRejection (cursor stream cancel)", e);
+      log33.debug("suppressed unhandledRejection (cursor stream cancel)", e);
       return;
     }
-    log27.error("unhandledRejection", e);
+    log33.error("unhandledRejection", e);
   });
   process.on("uncaughtException", (e) => {
     if (isCancelTeardown(e)) {
-      log27.debug("suppressed uncaughtException (cursor stream cancel)", e);
+      log33.debug("suppressed uncaughtException (cursor stream cancel)", e);
       return;
     }
     console.error(e);
@@ -14990,6 +16957,18 @@ async function repl(args, ai, cfg, cwd) {
   let dx;
   let voiceIO;
   let voiceDiag;
+  const decider = duplex && process.env.TYPESAFE_AI_KEY ? new DecideClient({ apiKey: process.env.TYPESAFE_AI_KEY }) : void 0;
+  const instinct = decider && process.env.VOICE_INSTINCT === "1" ? new Instinct({
+    decider,
+    context: () => ({ agentSaid: dx?.recentExcerpt(1).replace(/^\w+: /, ""), recent: dx?.recentExcerpt(4) }),
+    onDecision: ({ kind, ...d }) => {
+      voiceDiag?.push({ t: performance.now(), kind: `instinct_${kind}`, ...d });
+      const probs = Object.entries(d.probabilities).sort((a, b) => b[1] - a[1]).map(([k, p]) => `${k} ${Math.round(p * 100)}%`).join(" \xB7 ");
+      const act = d.acted && !/stale|skipped/.test(d.acted) ? yellow(`\u26A1 ${d.acted}`) : dim(d.acted ?? "no-op");
+      err("\r\x1B[0J" + dim(`  \u{1F9E0} jev ${kind.padEnd(12)} ${probs}  ${d.ms}ms  "${d.heard.slice(-40)}"  `) + act + "\n");
+      editorRef?.redrawNow();
+    }
+  }) : void 0;
   let voiceLineOpen = false;
   const emotionsOn = process.env.VOICE_EMOTIONS !== "0";
   let showEmotions = process.env.VOICE_SHOW_EMOTIONS === "1";
@@ -15180,6 +17159,8 @@ async function repl(args, ai, cfg, cwd) {
     };
     dx = new DuplexAgent({
       ai,
+      ...instinct ? { bargeIntent: (t) => instinct.bargeIntent(t) } : {},
+      decider,
       fs: agent.options.fs,
       memoryDir: agent.options.memoryDir,
       memoryUserDir: agent.options.memoryUserDir,
@@ -15189,7 +17170,7 @@ async function repl(args, ai, cfg, cwd) {
       providerOptionsFor: (m) => providerOptionsFor(m, cwd, cfg.mcpServers, mounted.map((x) => x.name)),
       ...(args.thinkModel ?? cfg.thinkModel) !== void 0 ? { thinkModel: (args.thinkModel ?? cfg.thinkModel) === false ? false : resolveModelOrNewest(String(args.thinkModel ?? cfg.thinkModel)) } : {},
       host,
-      ...args.voice ? { voiceStyle: "conversational", progressUpdates: true, askRelay: true, emotionTags: emotionsOn } : {},
+      ...args.voice ? { voiceStyle: "conversational", progressUpdates: true, askRelay: true, emotionTags: emotionsOn, spokenBudgetChars: 350 } : {},
       // voice: progress asides + worker questions relayed through the conversation; emotion tags taught only with a TTS that speaks them
       // Per-TASK checkpoint frames (the natural undo unit in duplex = one delegation): opened BEFORE
       // the worker spawns (post-spawn would race its first edits). `checkpoints` is bound below.
@@ -15219,7 +17200,9 @@ async function repl(args, ai, cfg, cwd) {
             }
           }
           return parts.length ? parts.join("\n").slice(0, 2e3) : "(no memory yet)";
-        }
+        },
+        // Cross-session recall: earlier conversations in this project (path = a session id / "previous").
+        sessions: (which) => sessionRecap(store, session.meta.id, which)
       },
       // The voice runs on the REAL fs (it has no fs tools — harmless) so @mentions, !cmd and #note
       // resolve against the project; + CC-parity chrome for its own tool calls (⚙ Act …).
@@ -15230,7 +17213,8 @@ async function repl(args, ai, cfg, cwd) {
   }
   const face = dx ? dx.voice : agent;
   const work = workerOptions ?? agent.options;
-  const sendVia = dx ? (c) => dx.send(c) : void 0;
+  const sendVia = dx ? (c, o) => dx.send(c, o) : void 0;
+  const routeVia = autoRouteSend(args, agent, () => session, (m) => providerOptionsFor(m, cwd, cfg.mcpServers, mounted.map((x) => x.name)));
   const baseRules = () => [
     ...parsePermRules({ deny: args.disallowedTools }),
     ...parsePermRules({ allow: args.allowedTools }),
@@ -15335,7 +17319,7 @@ async function repl(args, ai, cfg, cwd) {
     try {
       mkdirSync12(dir, { recursive: true });
     } catch (e) {
-      log27.debug("paste image dir create failed", e);
+      log33.debug("paste image dir create failed", e);
     }
     const img = grabClipboardImage(dir, String(Date.now()));
     return img ? { display: "Image", ref: "@" + img.path, path: img.path } : null;
@@ -15448,7 +17432,7 @@ Added entries are loadable now via the Skill/SlashCommand tools; removed ones ar
       mkdirSync12(join14(cwd, ".agent"), { recursive: true });
       appendFileSync(histPath, line + "\n");
     } catch (e) {
-      log27.debug("history write failed", e);
+      log33.debug("history write failed", e);
     }
   };
   const ago = (t) => {
@@ -15520,7 +17504,7 @@ Added entries are loadable now via the Skill/SlashCommand tools; removed ones ar
       try {
         store.save(session);
       } catch (e) {
-        log27.debug("session save after rewind failed", e);
+        log33.debug("session save after rewind failed", e);
       }
       err(green("  \u27F2 jumped back") + dim(` \u2014 ${face.transcript.length} message(s) kept; edit + resend
 `));
@@ -15546,7 +17530,8 @@ Added entries are loadable now via the Skill/SlashCommand tools; removed ones ar
     else err(red("  no such session\n"));
   };
   const announcedTasks = /* @__PURE__ */ new Set();
-  const turn = async (task) => {
+  const replacedVoiceTurns = /* @__PURE__ */ new Set();
+  const turn = async (task, opts) => {
     if (bangContext.length) {
       task = `${bangContext.join("\n\n")}
 
@@ -15554,20 +17539,20 @@ ${task}`;
       bangContext.length = 0;
     }
     const delta = await refreshCatalogs().catch((e) => {
-      log27.debug("catalog refresh failed", e);
+      log33.debug("catalog refresh failed", e);
       return "";
     });
     if (delta) {
       err(dim("  \u27F3 skill/command catalog changed \u2014 delta attached to this turn\n"));
       task += "\n\n" + delta;
     }
-    const r = await runTurn(face, store, session, task, duplex ? void 0 : checkpoints, cwd, sendVia);
+    const r = await runTurn(face, store, session, task, duplex ? void 0 : checkpoints, cwd, sendVia ? (c) => sendVia(c, opts) : routeVia);
     if (voiceIO) {
       voiceReasonEnd();
       voiceEchoEnd();
       editorRef?.resume();
     }
-    voiceIO?.endSpeech();
+    if (!(opts?.id && replacedVoiceTurns.delete(opts.id))) voiceIO?.endSpeech();
     if (dx) {
       const fresh = [...dx.tasks.values()].filter((t) => t.status === "running" && !announcedTasks.has(t.id));
       fresh.forEach((t) => announcedTasks.add(t.id));
@@ -15818,7 +17803,7 @@ ${task}`;
       desc: "rescan skills/commands dirs and rebuild the system prompt (one cache miss) \u2014 picks up entries created mid-session",
       run: async () => {
         await refreshCatalogs().catch((e) => {
-          log27.debug("catalog refresh failed", e);
+          log33.debug("catalog refresh failed", e);
         });
         face.reprepare();
         err(green(`  \u2713 reloaded \u2014 ${skills.length} skill(s), ${cmds.length} command(s); system prompt rebuilds on next message
@@ -16320,7 +18305,7 @@ ${task}`;
           try {
             for (const def of (await loadAgents(fs2, d)).agents) if (!seen.has(def.name)) seen.set(def.name, { def, from: d });
           } catch (e) {
-            log27.debug(`loadAgents(${d}) failed`, e);
+            log33.debug(`loadAgents(${d}) failed`, e);
           }
         }
         if (!seen.size) {
@@ -16408,7 +18393,7 @@ ${task}`;
           }
           if (idx >= 0) {
             const old = mounted.splice(idx, 1)[0];
-            await old.client.close().catch((e) => log27.debug("mcp close failed", e));
+            await old.client.close().catch((e) => log33.debug("mcp close failed", e));
           }
           try {
             const m = await mountMcpServer(name, conf);
@@ -16436,7 +18421,7 @@ ${task}`;
           }
           const m = mounted.splice(idx, 1)[0];
           remountMcpTools();
-          await m.client.close().catch((e) => log27.debug("mcp close failed", e));
+          await m.client.close().catch((e) => log33.debug("mcp close failed", e));
           err(dim(`  removed "${name}"
 `));
           return;
@@ -16639,7 +18624,7 @@ ${task}`;
     try {
       return readdirSync4(join14(cwd, absDir.replace(/^\/+/, "")), { withFileTypes: true }).map((d) => ({ name: d.name, dir: d.isDirectory() }));
     } catch (e) {
-      log27.debug("completion readdir failed", absDir, e);
+      log33.debug("completion readdir failed", absDir, e);
       return null;
     }
   };
@@ -16738,7 +18723,8 @@ ${task}`;
   };
   let prefill;
   let tick = 0;
-  const dispatchLine = async (line) => {
+  const dispatchLine = async (line, opts) => {
+    if (!opts?.id) takeCut(voiceIO, false);
     if (/^[!#/]/.test(line)) dispatchPending = false;
     history.unshift(line.replace(/\n+/g, " \u23CE "));
     remember(line.replace(/\n+/g, " \u23CE "));
@@ -16775,7 +18761,7 @@ ${out}
         return;
       }
       await refreshCatalogs().catch((e) => {
-        log27.debug("catalog refresh failed", e);
+        log33.debug("catalog refresh failed", e);
       });
       const sk = skills.find((x) => x.name === name);
       if (sk) {
@@ -16795,7 +18781,7 @@ ${out}
     }
     const task = pendingImages.length ? `${line} ${pendingImages.map((p) => "@" + p).join(" ")}` : line;
     pendingImages.length = 0;
-    await turn(task);
+    await turn(task, opts);
     if (goalCondition && !aborting && !exitRequested) {
       goalTurns++;
       persistGoal();
@@ -16804,6 +18790,11 @@ ${out}
     if (exitRequested) return "quit";
   };
   let voicePartial = "";
+  let interjectNote = "";
+  const ackedNote = (said) => said ? `
+[you already said "${said}" out loud to open this reply \u2014 do not acknowledge again; go straight on.]` : "";
+  let voiceSeq = 0;
+  let lastVoiceTurn;
   let partialRedraw = null;
   const startVoice = async (greet) => {
     if (voiceIO) return true;
@@ -16861,7 +18852,7 @@ ${out}
         voiceEchoEnd();
         if (phase === "speaking") err("\r\x1B[0J" + yellow("  \u270B interrupted\n"));
       },
-      onUtterance: (text) => {
+      onUtterance: (text, meta) => {
         voicePartial = "";
         if (!text.trim()) return;
         if (matchVoiceCommand(text) === "off") {
@@ -16876,15 +18867,24 @@ ${out}
           })();
           return;
         }
-        const cut = voiceIO.takeInterruptedReply();
-        const note = !cut || cut.full.length - cut.heard.length <= 40 ? "" : cut.heard.trim() ? `
-[the user interrupted you mid-speech \u2014 they only heard up to: "\u2026${cut.heard.slice(-80)}". Work any unheard essentials into your reply naturally, only if still relevant.]` : `
-[the user interrupted you before hearing any of your previous reply \u2014 none of it landed; do not assume they got it.]`;
-        if (/^[!#/]/.test(text.trim()) || note || pendingImages.length) dx?.abortSpeculation();
+        const replaces = replacedVoiceTurn(lastVoiceTurn, meta);
+        const { reply: cut, delivery, heard } = takeCut(voiceIO, !replaces);
+        if (delivery || cut) dx?.parkCutDelivery(delivery, !!cut, heard);
+        const cutReply = cut && cut.full.length - cut.heard.length > 40 ? cut : null;
+        const noteP = replaces ? replaces.note : !cutReply ? Promise.resolve("") : (instinct ? instinct.bargeIntent(text).catch((e) => {
+          log33.warn(`barge intent failed \u2014 model decides: ${e.message}`);
+          return void 0;
+        }) : Promise.resolve(void 0)).then(async (intent) => interruptionNote(cutReply, intent) + ackedNote(await instinct?.ackFor(text)));
+        const cutIn = replaces ? replaces.cutIn : interjectNote;
+        interjectNote = "";
+        const id = `v${++voiceSeq}`;
+        lastVoiceTurn = { id, text, note: noteP, cutIn };
+        if (replaces) replacedVoiceTurns.add(replaces.id);
+        if (/^[!#/]/.test(text.trim()) || cutReply || cutIn || replaces || pendingImages.length) dx?.abortSpeculation();
         if (!/^[!#/]/.test(text.trim())) voiceIO.beginSpeech(true);
         err(`\r\x1B[K  ${bold(cyan("\u{1F3A4} \u203A"))} ${text}
 `);
-        void dispatchLine(text + note).then(async (r) => {
+        void noteP.then((note) => dispatchLine(text + note + cutIn, { id, replaces: replaces?.id })).then(async (r) => {
           if (r === "quit") {
             await voiceIO?.awaitIdle();
             editorRef?.abort();
@@ -16892,6 +18892,43 @@ ${out}
         }).finally(() => editorRef?.redrawNow());
       }
     });
+    if (instinct) {
+      const v = voiceIO, o = v.options;
+      const { onPartial } = o;
+      const onUtterance = o.onUtterance;
+      const listening = () => voiceIO === v && v.state === "listening" && !v.audible;
+      const cutIns = new CutInAbsorber();
+      o.onPartial = (text) => {
+        if (listening()) instinct.hear(text);
+        onPartial(text);
+      };
+      bindOverlapInstinct(v, instinct, () => voiceIO === v);
+      bindAckInstinct(v, instinct);
+      o.onUtterance = (text, meta) => {
+        instinct.reset();
+        if (cutIns.absorbs(text, meta)) {
+          voicePartial = "";
+          voiceDiag?.push({ t: performance.now(), kind: "instinct_final_absorbed", text });
+          return;
+        }
+        onUtterance(text, meta);
+      };
+      Object.assign(instinct.options, {
+        // Engine blip path: throwaway TTS context, no floor claim. Private in bod-voice — upstream a public
+        // `backchannel()` if this graduates from the spike. AEC only (the blip would deafen half-duplex).
+        onBackchannel: () => {
+          if (!listening() || !v.usingAec) return false;
+          v.fireBackchannel();
+        },
+        onInterject: (heard) => {
+          if (!listening()) return false;
+          cutIns.interjected(heard);
+          interjectNote = `
+[you are CUTTING IN \u2014 the user is still mid-sentence and has said only this so far. Do it the way a person would: one short natural interjection (a correction, the word they're reaching for, or the answer), then stop and let them continue.]`;
+          onUtterance(heard);
+        }
+      });
+    }
     {
       const vo = voiceIO.options;
       voiceDiag.push({
@@ -16909,9 +18946,11 @@ ${out}
           bargeIn: vo.bargeIn,
           overlapPause: vo.overlapPause,
           overlapResumeMs: vo.overlapResumeMs,
+          overlapDecideMs: vo.overlapDecideMs,
           speculativeMs: vo.speculativeMs,
           backchannelMs: vo.backchannelMs,
-          emotions: vo.emotions
+          emotions: vo.emotions,
+          ackPick: !!vo.pickAck
         }
       });
     }
@@ -17222,6 +19261,10 @@ async function main() {
   }
   const cwd = resolve4(args.cwd ?? process.cwd());
   const cfg = await loadConfig(cwd);
+  if (!args.autoRoute && !args.model && (cfg.model === "auto" || !cfg.model && await jevAvailable())) {
+    args.autoRoute = true;
+    args.model = autoModels().standard;
+  }
   cfg.permissions = mergePerms(loadClaudeSettings(cwd), mergePerms(loadPersistedRules(cwd), cfg.permissions));
   if (canPrompt && !args.yes && !isTrusted(cwd)) {
     const ok = await makeHost().confirm?.(`Trust this directory? agent.libx will read and edit files in:
@@ -17271,7 +19314,7 @@ async function main() {
     const store = new SessionStore(cwd);
     const session = startSession(args, store, agent, cwd);
     process.once("SIGINT", () => activeTurn?.abort());
-    const { ok, res } = await runTurn(agent, store, session, args.task, void 0, cwd);
+    const { ok, res } = await runTurn(agent, store, session, args.task, void 0, cwd, autoRouteSend(args, agent, () => session, (m) => providerOptionsFor(m, cwd, cfg.mcpServers, mounted.map((x) => x.name))));
     if (cfg.reflectOnFailure && !ok && res?.finishReason !== "needs_input" && res && agent.options.memoryDir) {
       const _fsBase = agent.options.fs.getCwd() === "/" ? "" : agent.options.fs.getCwd();
       const slug2 = await reflectOnRun({ ai, model: agent.options.model, fs: agent.options.fs, dir: primaryMemDir(agent.options.memoryDir, `${_fsBase}/.agent/memory`), result: res });
@@ -17318,6 +19361,7 @@ export {
   runShellLine,
   runTurn,
   setMcpMentionResolver,
-  summarizeResult
+  summarizeResult,
+  turnCost
 };
 //# sourceMappingURL=cli.js.map