@markusylisiurunen/tau 0.3.76 → 0.3.78

package/dist/core/static/tau_docs/config-reference.md

@@ -8,18 +8,16 @@ Read [configuration](configuration.md) first for discovery and precedence. In th
 
 These are defaults built into this Tau version, not a dump of the effective configuration:
 
-| Behavior | Shipped default |
-| --- | --- |
-| Default persona | `opus-5.5-chat` |
-| Default TUI theme | `gold` |
-| Built-in personas | Enabled |
-| Built-in themes | Enabled |
-| Automatic compaction | `{ "enabled": true, "reserveTokens": 16384, "keepRecentTokens": 20000 }` |
-| Speech-to-text provider when unset | `openai` |
-| Built-in diff tool code theme | `github-dark-dimmed` |
-| Command client tool timeout when unset | `60000` ms |
-
-Project and global content can change which ids are actually available. A configured default that is not loaded produces a warning rather than creating that persona or theme.
+| Behavior                               | Shipped default      |
+| -------------------------------------- | -------------------- |
+| Default persona                        | `sonnet-5.5-coder`   |
+| Default TUI theme                      | `gold`               |
+| Built-in personas                      | Enabled              |
+| Speech-to-text provider when unset     | `openai`             |
+| Built-in diff tool code theme          | `github-dark-dimmed` |
+| Command client tool timeout when unset | `60000` ms           |
+
+Project and global content can change which persona ids are available. A configured default must match an available persona or built-in theme; otherwise Tau reports a warning.
 
 ## Field summary
 
@@ -27,19 +25,13 @@ Project and global content can change which ids are actually available. A config
 | --- | --- | --- | --- | --- |
 | `apiKeys` | Object of string values | Global, project | Merge by provider id | Host or feature consumer; `/reload` for session runtime keys, process restart for environment changes |
 | `defaultPersona` | Non-empty string | Global, project | Most-specific wins | Session host; new session |
-| `disableBuiltinPersonas` | Boolean | Global, project | Most-specific wins | Session runtime; `/reload` or new session |
-| `disableBuiltinThemes` | Boolean | Global, project | Most-specific wins | TUI client; client restart |
+| `speech` | Object with optional `voiceId` | Global, project | Merge by field | TUI client or Telegram runner; process restart |
 | `defaultTheme` | Non-empty string | Global, project | Most-specific wins | TUI client; client restart |
-| `diffTool` | Object | Global, project | Most-specific complete object | TUI client; client restart |
-| `builtInDiffTool` | Object | Global, project | Most-specific complete object | TUI client; client restart |
 | `clientTools` | Array of objects | Global only | One global definition list | Owning client; TUI restart or new Telegram session client |
 | `enabledClientTools` | String array | Project only | Most-specific project list | Owning client; TUI restart or new Telegram session client |
 | `agentContextFiles` | String array | Global, project | Additive, resolved and deduplicated | Execution environment and session host; `/reload` or new session |
 | `subagents` | Object | Global, project | Field-wise, currently one selectable list | Session runtime; `/reload` or new session |
-| `autoCompact` | Object | Global, project | Merge by field over shipped defaults | Session runtime; `/reload` or new session |
 | `modelSystemNotices` | String map | Global, project | Merge by model target | Session runtime; `/reload`, affects later inputs |
-| `speechToText` | Object | Global, project | Most-specific wins | TUI client or Telegram runner; process restart |
-| `cloudflareSandbox` | Object | Global, project | Merge bridges by id | Host startup; host restart |
 | `flySprites` | Object | Global, project | Merge APIs by id | Host startup; host restart |
 | `nook` | Object | Global, project | Most-specific complete object | Host tool runtime; `/reload` or new session |
 | `history` | Object | Global only | One global object | Host startup; host restart |
@@ -62,18 +54,6 @@ Allowed reasoning suffixes are `none`, `minimal`, `low`, `medium`, `high`, `xhig
 
 `defaultPersona` selects a new session when no CLI or session-creation override is supplied. Reloading an existing session retains its current persona id when possible. See [personas](personas.md).
 
-### `disableBuiltinPersonas`
-
-A boolean that removes shipped personas from the loaded persona catalog:
-
-```json
-{
-  "disableBuiltinPersonas": true
-}
-```
-
-The default is `false`. When enabled, at least one valid custom persona must be available or session startup fails. This field does not disable user or project personas.
-
 ### `agentContextFiles`
 
 An array of non-empty paths to additional text files included as project context:
@@ -92,16 +72,16 @@ The startup flag `--no-agent-context-files` disables context injection independe
 
 The top-level subagent configuration currently accepts one optional field:
 
-| Nested field | Type | Contract |
-| --- | --- | --- |
-| `defaultLaunchModels` | String array | Allowlist for launch overrides of the built-in `default` subagent |
+| Nested field   | Type         | Contract                                     |
+| -------------- | ------------ | -------------------------------------------- |
+| `launchModels` | String array | Allowlist for launch overrides for subagents |
 
 Each entry must use `<provider>/<model>:<effort>` and resolve against the merged model catalog:
 
 ```json
 {
   "subagents": {
-    "defaultLaunchModels": [
+    "launchModels": [
       "openai-codex/gpt-6.1-sol:high",
       "anthropic/claude-haiku-4-5:low"
     ]
@@ -109,29 +89,7 @@ Each entry must use `<provider>/<model>:<effort>` and resolve against the merged
 }
 ```
 
-A more-specific list replaces the broader list. Custom subagent definitions belong in persona frontmatter, not this object. See [subagents](subagents.md).
-
-### `autoCompact`
-
-Automatic compaction settings:
-
-| Nested field | Type | Default | Meaning |
-| --- | --- | --- | --- |
-| `enabled` | Boolean | `true` | Whether Tau checks and compacts before model subturns |
-| `reserveTokens` | Positive integer | `16384` | Context reserved below the model's context-window limit |
-| `keepRecentTokens` | Positive integer | `20000` | Target budget for the recent retained tail |
-
-Fields merge independently across levels:
-
-```json
-{
-  "autoCompact": {
-    "reserveTokens": 24000
-  }
-}
-```
-
-The omitted fields retain their broader or shipped values. This setting changes Tau's automatic policy; manual `/compact-all` and `/compact-keep-last` remain available. See [sessions](sessions.md).
+A more-specific list replaces the broader list. The worker’s instructions and tools are inherited from the main persona; custom worker definitions are not supported. See [subagents](subagents.md).
 
 ### `modelSystemNotices`
 
@@ -175,23 +133,25 @@ Feature-specific helpers use different precedence: `EXA_API_KEY`, `GEMINI_API_KE
 
 Credentials are consumed where the model or feature runs. In an attached session that is usually the host, not the TUI client. Avoid committing project API keys. See [credentials](credentials.md).
 
-### `speechToText`
-
-An object with one required field when present:
+### `speech`
 
-| Nested field | Type   | Values               |
-| ------------ | ------ | -------------------- |
-| `provider`   | String | `gemini` or `openai` |
+Controls `/speak` and Telegram `/tts_on` voice selection. Set `voiceId` to a non-empty ElevenLabs voice ID:
 
 ```json
 {
-  "speechToText": {
-    "provider": "gemini"
+  "speech": {
+    "voiceId": "QtY3JBOUKEB5xzrRfOKc"
   }
 }
 ```
 
-When the object is absent, `/listen` and Telegram transcription use `openai`. The TUI consumes this setting for client-local recording; the Telegram runner consumes it for Telegram audio. Restart the owning process after changing it.
+Without an override, Tau looks up Maisie (`QtY3JBOUKEB5xzrRfOKc`) before synthesis and tries Caleb (`AaOhDHYJ1XLZk74lXhdE`) only if ElevenLabs reports that Maisie was not found. If neither is available, speech fails. A configured voice is used exclusively: an unavailable custom voice is an error, not a request to use a default.
+
+Voice lookup authentication, permission, rate-limit, and network errors do not trigger fallback. Successful metadata lookup fixes the voice for the entire reply; it does not guarantee synthesis permission. Synthesis failures never switch voices or automatically retry a potentially billable request.
+
+Speech uses Eleven v4 Turbo, the delivery note `[Brisk but relaxed, speaking naturally to a colleague]`, and a 1.15× tempo adjustment. GPT-6 Luna rewrites the text with reasoning disabled before ElevenLabs synthesis, so both OpenAI and ElevenLabs credentials are required. Voice Library API access may require a paid ElevenLabs plan, and shared voices can become unavailable.
+
+The TUI reads this setting from its client-side configuration, including during remote attachment. Telegram reads it from the runner's startup configuration, not individual session workspaces. Restart the respective process after changes. This setting does not affect the explicit voices supplied to `tau tool speech-generate`.
 
 ### `nook`
 
@@ -239,21 +199,9 @@ Credential precedence is `TAU_HISTORY_API_KEY`, then the variable named by `apiK
 
 ## TUI presentation and diff review
 
-### `disableBuiltinThemes`
-
-A boolean that removes shipped themes from the TUI client's loaded theme list. The default is `false`.
-
-```json
-{
-  "disableBuiltinThemes": true
-}
-```
-
-If built-ins are disabled, provide a valid custom theme. This setting does not affect personas or model behavior.
-
 ### `defaultTheme`
 
-The exact, case-sensitive id of a loaded theme. The shipped default is `gold`:
+The exact, case-sensitive id of a built-in theme. The shipped default is `gold`:
 
 ```json
 {
@@ -261,49 +209,7 @@ The exact, case-sensitive id of a loaded theme. The shipped default is `gold`:
 }
 ```
 
-The attached TUI uses its client-local configuration and theme files. `/theme:<id>` changes the current client only and is not persisted into the session. See [TUI](tui.md).
-
-### `diffTool`
-
-A custom client-local diff-review launcher:
-
-| Nested field | Type | Required | Contract |
-| --- | --- | --- | --- |
-| `command` | Non-empty string | Yes | Executable name or path |
-| `args` | String array | No | Arguments passed to the executable |
-| `env` | Object of string values | No | Extra environment entries for the tool process |
-
-```json
-{
-  "diffTool": {
-    "command": "./tools/review-ui",
-    "args": ["--browser", "firefox"],
-    "env": {
-      "REVIEW_LOG_LEVEL": "warn"
-    }
-  }
-}
-```
-
-The most-specific complete object wins. A relative command containing `/` resolves from the declaring level root; a bare command resolves through client `PATH`. The TUI launches this process on the client machine. If this field is absent, the TUI uses Tau's built-in diff tool. See [TUI](tui.md) and [client tools](client-tools.md) for the broader client-local distinction.
-
-### `builtInDiffTool`
-
-Settings for the built-in fallback diff tool:
-
-```json
-{
-  "builtInDiffTool": {
-    "codeTheme": "nord"
-  }
-}
-```
-
-`codeTheme` defaults to `github-dark-dimmed`. Supported values are:
-
-`andromeeda`, `aurora-x`, `ayu-dark`, `ayu-mirage`, `catppuccin-frappe`, `catppuccin-macchiato`, `catppuccin-mocha`, `dark-plus`, `dracula`, `dracula-soft`, `everforest-dark`, `github-dark`, `github-dark-default`, `github-dark-dimmed`, `github-dark-high-contrast`, `gruvbox-dark-hard`, `gruvbox-dark-medium`, `gruvbox-dark-soft`, `horizon`, `horizon-bright`, `houston`, `kanagawa-dragon`, `kanagawa-wave`, `laserwave`, `material-theme`, `material-theme-darker`, `material-theme-ocean`, `material-theme-palenight`, `min-dark`, `monokai`, `night-owl`, `nord`, `one-dark-pro`, `plastic`, `poimandres`, `red`, `rose-pine`, `rose-pine-moon`, `slack-dark`, `solarized-dark`, `synthwave-84`, `tokyo-night`, `vesper`, `vitesse-black`, and `vitesse-dark`.
-
-This object does not configure a custom `diffTool` process.
+The attached TUI uses its client-local configuration. `/theme:<id>` changes the current client only and is not persisted into the session. See [TUI](tui.md).
 
 ## Command client tools
 
@@ -362,36 +268,7 @@ The most-specific project list replaces broader project lists. Project configura
 
 ## Hosted execution environments
 
-These fields configure resolvers owned by a host process. They do not provision sandboxes or Sprites. A client creating a session supplies an existing environment identity and `cwd` that references one of these host-known entries. See [remote sessions](remote-sessions.md).
-
-### `cloudflareSandbox`
-
-An optional `bridges` map keyed by bridge id:
-
-```json
-{
-  "cloudflareSandbox": {
-    "bridges": {
-      "team": {
-        "url": "https://tau-sandbox.example.workers.dev",
-        "apiKeyEnv": "TAU_SANDBOX_BRIDGE_KEY",
-        "home": "/home/sandbox"
-      }
-    }
-  }
-}
-```
-
-Each bridge accepts:
-
-| Nested field | Type | Required | Default or behavior |
-| --- | --- | --- | --- |
-| `url` | Non-empty string | Yes | Bridge base URL; schema requires a string but does not perform general URL validation |
-| `apiKey` | Non-empty string | No | Inline bridge key; takes precedence when present |
-| `apiKeyEnv` | Non-empty string | No | Host environment variable used when `apiKey` is absent |
-| `home` | Non-empty string | No | Execution-environment home, default `/home/sandbox` |
-
-Bridge maps merge by id. A more-specific bridge replaces the complete entry with that id, so it must repeat the required `url`.
+These fields configure resolvers owned by a host process. They do not provision Sprites. A client creating a session supplies an existing environment identity and `cwd` that references one of these host-known entries. See [remote sessions](remote-sessions.md).
 
 ### `flySprites`
 

package/dist/core/static/tau_docs/configuration.md

@@ -47,8 +47,7 @@ In `~/.config/tau/config.json`:
 
 ```json
 {
-  "defaultPersona": "opus-5.5-chat",
-  "speechToText": { "provider": "openai" }
+  "defaultPersona": "sonnet-5.5-coder"
 }
 ```
 
@@ -56,23 +55,19 @@ In `~/work/ledger/.tau/config.json`:
 
 ```json
 {
-  "defaultPersona": "gpt-6.1-sol-coder:high",
-  "speechToText": { "provider": "gemini" }
+  "defaultPersona": "gpt-6.1-sol-coder:high"
 }
 ```
 
-Within the project, the effective values are the coder persona and the Gemini speech provider. Tau does not recursively combine `speechToText`; the project object replaces the global object.
+Within the project, the effective default persona is `gpt-6.1-sol-coder:high`.
 
 A few fields intentionally use other rules:
 
 - `apiKeys` merges by provider id. A more-specific key replaces only the same provider's value.
-- `autoCompact` merges by field on top of shipped defaults.
 - `modelSystemNotices` merges by normalized `<provider>/<model>` key.
-- `cloudflareSandbox.bridges` merges by bridge id. A more-specific bridge replaces the complete bridge with that id.
 - `flySprites.apis` merges by API id. A more-specific API replaces the complete API entry with that id.
 - `agentContextFiles` is additive across levels, resolves each entry at its owning level, and removes duplicate resolved paths while preserving order.
-- `diffTool` and `builtInDiffTool` select the complete object from the most-specific level that defines them.
-- `subagents.defaultLaunchModels` selects the most-specific list.
+- `subagents.launchModels` selects the most-specific list.
 - `clientTools` is defined only at global scope. `enabledClientTools` at the most-specific project level is an exact selection from those definitions.
 - `history` is accepted only at global scope.
 
@@ -92,22 +87,18 @@ Relative path bases belong to the level that declares the value:
 
 - Global `agentContextFiles` entries resolve from home.
 - Project `agentContextFiles` entries resolve from the directory containing `.tau`.
-- A relative `diffTool.command` containing a slash resolves from the same level root.
 - A global `clientTools[].command` containing a slash resolves from home.
-- A bare command such as `review-ui` is left bare and resolves through the owning process's `PATH`.
+- A bare command such as `git` is left bare and resolves through the owning process's `PATH`.
 
 For example, in `/home/ada/work/ledger/.tau/config.json`:
 
 ```json
 {
-  "agentContextFiles": ["docs/AI_GUIDE.md"],
-  "diffTool": {
-    "command": "./tools/review-ui"
-  }
+  "agentContextFiles": ["docs/AI_GUIDE.md"]
 }
 ```
 
-Tau resolves the paths as `/home/ada/work/ledger/docs/AI_GUIDE.md` and `/home/ada/work/ledger/tools/review-ui`. In an attached session, `diffTool` used by the TUI comes from the client-local load, so this resolved command is a client path.
+Tau resolves the path as `/home/ada/work/ledger/docs/AI_GUIDE.md`.
 
 Other strings that happen to contain paths are not automatically rebased unless their field contract says so. In particular, hosted execution-environment `home` values are passed as configured.
 
@@ -160,10 +151,8 @@ Never verify a secret by printing the full config or environment into a shared t
 
 Tau loads startup configuration and content before opening the TUI. Restart the local TUI or `tau attach` to apply client-owned changes such as:
 
-- `defaultTheme`, `disableBuiltinThemes`, and theme files
-- `diffTool` and `builtInDiffTool`
+- `defaultTheme`
 - `clientTools` and `enabledClientTools`
-- `speechToText` for `/listen`
 - client environment variables
 
 Changing `/theme:<id>` updates only the current client presentation. Themes are not persisted in session snapshots.
@@ -180,7 +169,6 @@ A logical turn captures its persona, model settings, and tools when it starts. R
 
 Restart the host process to apply settings used to construct host-wide services, including:
 
-- `cloudflareSandbox.bridges`
 - `flySprites.apis`
 - `history`
 - host environment variables and Codex account forcing
@@ -201,7 +189,7 @@ The Telegram runner loads its speech provider and separate runner config at star
 
 **Editing the host filesystem for target content.** A hosted execution environment owns its project files and home. Put project `.tau` content on that target, not in a similarly named path on the host.
 
-**Expecting nested objects to deep-merge.** A project bridge or Sprite API entry replaces the complete entry with the same id. Repeat required fields such as a Cloudflare bridge `url`.
+**Expecting nested objects to deep-merge.** A project Sprite API entry replaces the complete entry with the same id. Repeat any credentials and settings needed by that API.
 
 **Expecting `/reload` to rebuild the client or server.** Reload is a current-session runtime operation. Restart the component that owns startup-only behavior.
 

package/dist/core/static/tau_docs/credentials.md

@@ -17,7 +17,7 @@ Common cases are:
 | Exa-backed `web.search` and `web.fetch` | Session host |
 | Remote history replication and queries | Session host |
 | Nook host tool | Session host |
-| Cloudflare Sandbox bridge and Fly Sprite API | Session host startup |
+| Fly Sprite API | Session host startup |
 | `/listen` and `/speak` | TUI client |
 | Telegram transcription and voice responses | Telegram runner |
 | `tau tool pdf-unpack`, `image-generate`, and `speech-generate` | The process running that command |
@@ -61,16 +61,16 @@ Several Tau features share provider credentials but intentionally prefer a fixed
 | Feature | Resolution order |
 | --- | --- |
 | Exa web search and fetch | `EXA_API_KEY`, then `apiKeys.exa` |
-| Google image generation, speech, Gemini speech-to-text, Telegram Gemini transcription, and Telegram voice responses | `GEMINI_API_KEY`, then `apiKeys.google` |
+| Google image generation, speech-to-text, and Telegram transcription | `GEMINI_API_KEY`, then `apiKeys.google` |
 | Mistral PDF OCR | `MISTRAL_API_KEY`, then `apiKeys.mistral` |
-| OpenAI image generation, speech-to-text, and Telegram OpenAI transcription | `OPENAI_API_KEY`, then `apiKeys.openai` |
-| ElevenLabs speech generation and voice listing | `ELEVENLABS_API_KEY`, then `apiKeys.elevenlabs` |
+| OpenAI image generation, speech rewriting, and transcription spelling hints | `OPENAI_API_KEY`, then `apiKeys.openai` |
+| ElevenLabs speech generation, `/speak` synthesis, Telegram voice synthesis, and voice listing | `ELEVENLABS_API_KEY`, then `apiKeys.elevenlabs` |
 
 The Google, Mistral, OpenAI, and ElevenLabs rows describe feature-specific helpers. Model calls follow the general model-authentication order instead, where the configured provider key wins over ambient environment authentication.
 
-`web.discover` does not require Exa. `web.search` and `web.fetch` do. `/speak` and Telegram `/tts_on` voice responses use Google. `/listen` and incoming Telegram voice notes use the configured `speechToText.provider`, which is `openai` unless configuration selects `gemini`. PDF OCR through `tau tool pdf-unpack` uses Mistral.
+`web.discover` does not require Exa. `web.search` and `web.fetch` do. `/speak` and Telegram `/tts_on` voice responses require OpenAI for text rewriting and ElevenLabs for synthesis. `/listen` and incoming Telegram voice notes use Google, with optional OpenAI spelling hints. PDF OCR through `tau tool pdf-unpack` uses Mistral.
 
-Set these variables on the process that owns the feature. For example, a remote TUI's `/speak` reads the attached client's `GEMINI_API_KEY`, while a Google model selected by the session reads credentials at the host.
+Set these variables on the process that owns the feature. For example, a remote TUI's `/speak` reads the attached client's `OPENAI_API_KEY` and `ELEVENLABS_API_KEY`, while a Google model selected by the session reads credentials at the host.
 
 For `tau tool` commands, credentials and configuration belong to the machine running the command. Tau's agent Bash removes inherited API-key environment variables, so commands invoked through it may need keys in private configuration on that machine. See [configuration](configuration.md) for configuration file locations and [security](security.md) for command environment handling.
 
@@ -153,26 +153,7 @@ If the named `accessClientSecretEnv` has a non-empty value, it wins over inline
 
 ## Hosted execution credentials
 
-Cloudflare Sandbox bridges and Fly Sprite APIs are host-owned resolver configuration. They must be available when the host is constructed, before a client asks it to create one of those execution environments.
-
-A Cloudflare bridge can use an inline key or name a host environment variable:
-
-```json
-{
-  "cloudflareSandbox": {
-    "bridges": {
-      "engineering": {
-        "url": "https://sandbox-bridge.example.workers.dev",
-        "apiKeyEnv": "TAU_SANDBOX_BRIDGE_KEY"
-      }
-    }
-  }
-}
-```
-
-For a bridge, inline `apiKey` wins when present; `apiKeyEnv` is consulted only when no inline key exists. A bridge may also be configured without authentication.
-
-A Fly API requires a token:
+Fly Sprite APIs are host-owned resolver configuration. They must be available when the host starts, before a client asks it to create a Sprite session. Each API requires a token:
 
 ```json
 {
@@ -189,7 +170,7 @@ A Fly API requires a token:
 
 For Fly, inline `token` wins when present; `tokenEnv` is the fallback. Session creation fails if neither resolves.
 
-These target definitions are read from the host's startup configuration, not from an attached client. `/reload` refreshes session runtime content but does not rebuild the host's execution-environment resolvers. Restart the host after changing bridge definitions, Sprite API definitions, or their environment.
+These target definitions are read from the host's startup configuration, not from an attached client. `/reload` refreshes session runtime content but does not rebuild the host's execution-environment resolvers. Restart the host after changing Sprite API definitions or their environment.
 
 ## Safe verification
 
@@ -198,7 +179,7 @@ Verify credentials through the operation that owns them, without printing secret
 - Run `tau auth list` to check Codex identities, enabled state, refresh health, and quota windows.
 - Run `/reload` while the session is idle after changing runtime `apiKeys`; review every configuration warning.
 - Make a small request with the intended persona to verify model authentication and endpoint access.
-- Exercise the specific feature after setting Exa, speech, History, Nook, Cloudflare, or Fly credentials. Their missing-credential errors name the accepted source.
+- Exercise the specific feature after setting Exa, speech, History, Nook or Fly credentials. Their missing-credential errors name the accepted source.
 - For remote sessions, first confirm which machine is the host and which process owns the feature.
 
 Do not verify by printing the process environment, dumping `config.json`, or reading `auth.json` into a transcript. If a secret was exposed in shell history, logs, a session, or version control, rotate it at the provider and replace the compromised value. Broader handling guidance is in [security](security.md) and failure checks are in [troubleshooting](troubleshooting.md).

package/dist/core/static/tau_docs/image-generation.md

@@ -96,7 +96,7 @@ The output's parent directory must exist. Neither the output nor `<output>.parts
 
 Original bytes and usage remain available if conversion fails. Conversion may discard embedded metadata; use the original when provenance matters.
 
-Failures exit nonzero and report the retained artifact directory when generation has started. Requests are not automatically retried because a failed request may already have incurred a charge.
+Failures exit nonzero and identify the invalid option or failed processing stage. Existing output or artifact paths require a fresh `--output` path; preserve retained recovery artifacts. Once generation starts, errors report the retained directory, which may be empty or incomplete. If final publication fails, the error points to the completed image to copy to a fresh path without generating again. Requests are not automatically retried because a failed request may already have incurred a charge; another generation request may incur another charge.
 
 ## Approximate cost
 

package/dist/core/static/tau_docs/node-sdk.md

@@ -149,7 +149,7 @@ try {
 
 `client.sessions.create(input)` sends `session.create`, then observes the new session before resolving. `client.sessions.observe(sessionId)` does the same observation handshake for an existing session. `client.sessions.list()` returns `{ sessionId, lifecycle }` summaries.
 
-Creation requires complete execution-environment input and immutable attributes. The execution `cwd` must be absolute and belongs to the selected environment, not necessarily the SDK process. Cloudflare Sandbox and Fly Sprite sessions refer to already-provisioned targets configured on the host. See [sessions](sessions.md) for creation attributes and [ownership and scope](ownership-and-scope.md) for path ownership.
+Creation requires complete execution-environment input and immutable attributes. The execution `cwd` must be absolute and belongs to the selected environment, not necessarily the SDK process. Fly Sprite sessions refer to already-provisioned targets configured on the host. See [sessions](sessions.md) for creation attributes and [ownership and scope](ownership-and-scope.md) for path ownership.
 
 `session.unobserve()` stops observation and makes that `TauSdkSession` facade terminal. It does not delete the hosted session. `client.close()` is idempotent and closes the whole client.
 

package/dist/core/static/tau_docs/ownership-and-scope.md

@@ -43,7 +43,7 @@ For repository and composite projects it prepares managed workspaces. A configur
 | SDK over WebSocket | SDK caller | Remote server | Environment selected or restored by that host |
 | `tau telegram` | Telegram runner | In-process on the runner machine | Prepared project workspace or persistent directory |
 
-A Cloudflare Sandbox or Fly Sprite can place the execution environment on another target while the host stays on its own machine. The host keeps provider credentials and orchestration authority; the target owns its paths and commands.
+A Fly Sprite can place the execution environment on another target while the host stays on its own machine. The host keeps provider credentials and orchestration authority; the target owns its paths and commands.
 
 ## Who owns common paths and behavior
 
@@ -56,11 +56,11 @@ A Cloudflare Sandbox or Fly Sprite can place the execution environment on anothe
 | Codex OAuth accounts | Host home | Run `tau auth …` on the host machine. Do not edit auth storage. |
 | Session snapshots | Host home | Local defaults live under the host's Tau config directory. Do not edit session files. |
 | Local transcript history and remote history outbox | Host home | History follows the host, not an attached TUI or execution target. |
-| Terminal theme and `/theme` | TUI client | An attached client uses themes loaded on the client machine. Themes are not session state. |
-| `/diff` process | TUI client | `diffTool.command` must exist on the client machine. Repository capture still runs through the session execution environment. |
+| Terminal theme and `/theme` | TUI client | An attached client selects from Tau’s built-in themes. Themes are not session state. |
+| `/diff` process | TUI client | Tau’s built-in browser tool runs on the client machine. Repository capture still runs through the session execution environment. |
 | Configured command client tools | Owning client | Commands and their environment are client-local; their execution-environment facade reaches the session target explicitly. |
 | `/listen` and `/speak` capture or playback | TUI client | Required programs, devices, and media credentials belong on the client machine. |
-| Host execution-environment targets | Host startup | Cloudflare bridge and Fly Sprite API definitions must be available to the host before it accepts sessions using them. |
+| Host execution-environment targets | Host startup | Fly Sprite API definitions must be available to the host before it accepts sessions using them. |
 | Telegram bot token, routing, workspaces, and generated runner state | Telegram runner | Manage these through the Telegram config and runner commands, not project `config.json`. |
 
 ## Decide where to edit configuration
@@ -84,7 +84,7 @@ tau attach --new --cwd /srv/ledger ws://devbox.example:8787
 
 The path `/srv/ledger` is interpreted by the host and its local execution environment. Project personas and `.tau/config.json` are read from `/srv/ledger` and its ancestors on `devbox.example`. The laptop's current directory does not influence that session runtime.
 
-The laptop still loads its own theme, `diffTool`, and command client tools before attaching. If `/diff` launches `review-ui`, that executable must exist on the laptop. Git snapshot commands for the review run through the session and therefore see `/srv/ledger` on the execution environment.
+The laptop still loads its own theme and command client tools before attaching. `/diff` launches Tau’s built-in browser tool on the laptop. Git snapshot commands for the review run through the session and therefore see `/srv/ledger` on the execution environment.
 
 If the selected persona needs a provider credential, the host on `devbox.example` makes the model call. Export the provider environment variable for `tau serve` there, or make the appropriate runtime configuration available to that host. Setting it only in the laptop shell does not authenticate the remote host.
 

package/dist/core/static/tau_docs/pdf-unpacking.md

@@ -33,6 +33,6 @@ On success, stdout reports the persistent temporary output directory and a compl
 
 OCR text can contain recognition mistakes. Embedded visuals that are not represented in Markdown are marked with placeholders pointing to the corresponding page patches. Read `document.md` for the whole document, use `pages/` for page-level work, and inspect `images/` before trusting or correcting uncertain OCR.
 
-The command attempts to delete the remote upload after OCR. A deletion failure is reported in the command output. Successful local artifacts remain on disk for follow-up use; delete them when they are no longer needed. If processing fails, Tau attempts to remove the partial local output directory.
+The command attempts to delete the remote upload after OCR. A deletion failure is reported in the command output. Successful local artifacts remain on disk for follow-up use; delete them when they are no longer needed. If processing fails, Tau attempts to remove the partial local output directory. The error identifies the failed stage and reports whether partial output was removed or cleanup failed. Partial output is not a complete result. Failures after the OCR request starts warn that another OCR request may incur another charge.
 
 See [command-line tools](tools.md) for command discovery and execution ownership.

package/dist/core/static/tau_docs/personas.md

@@ -1,20 +1,22 @@
 # Personas
 
-A persona is Tau's complete model-facing working profile. It chooses a provider and model, supplies the base system prompt, sets reasoning and service behavior, and selects tools, skills, and subagents. Changing persona changes how future turns run without creating a new session.
+A persona is Tau's complete model-facing working profile. It chooses a provider and model, supplies the base system prompt, sets reasoning and service behavior, and selects tools and skills. Changing persona changes how future turns run without creating a new session.
 
 Tau ships generated built-in personas and discovers custom persona Markdown from the execution environment. The effective list is version-specific and scope-specific, so inspect the current catalog rather than relying on a memorized list of names.
 
 ## Built-in and effective personas
 
-Built-in personas are generated from Tau's current model catalog. Most model families have separate chat and coder variants; some families expose only the variants Tau supports. Built-ins carry Tau-maintained prompts, defaults, tool selections, skills, and the built-in `default` subagent.
+Built-in personas are generated from Tau's current model catalog. Most model families have separate chat and coder variants; some families expose only the variants Tau supports. Built-ins carry Tau-maintained prompts, defaults, tool selections, skills, and subagent supervision tools.
 
 The Opus 5.5 chat and coder personas are available only when `anthropic/claude-opus-5-5` is present in the effective model catalog. The Sonnet 5.5 variants (`sonnet-5.5-chat` and `sonnet-5.5-coder`) likewise require `anthropic/claude-sonnet-5-5`.
 
-GPT-6 Sol, GPT-6.1 Sol, and GPT-6 Luna have API, ChatGPT, and fast ChatGPT variants. They are available only when the effective catalog contains the matching model ID (`gpt-6-sol`, `gpt-6.1-sol`, or `gpt-6-luna`) for the corresponding provider.
+GPT-6.1 Sol, GPT-6 Luna, and GPT-6 Astra have API and ChatGPT variants for chat and coding. Fast ChatGPT variants use priority service and are available only for coding. They are available only when the effective catalog contains the matching model ID (`gpt-6.1-sol`, `gpt-6-luna`, or `gpt-6-astra`) for the corresponding provider.
+
+All built-in personas default to medium reasoning. The startup default is `sonnet-5.5-coder`.
 
 After a remote catalog refresh, `/reload` adopts the updated catalog for an existing session.
 
-Set `disableBuiltinPersonas: true` in `config.json` to omit built-ins from the effective catalog. Custom personas can also replace a built-in by using the same ID. A shipped built-in is therefore not necessarily available in a particular session.
+Built-in personas are always included in the catalog. Custom personas can replace a built-in by using the same ID.
 
 Use one of these to inspect the current effective list:
 
@@ -65,14 +67,6 @@ tools:
   - view_image
   - web
   - history
-subagents:
-  default: false
-  verifier:
-    description: Verify release state independently. Trigger: balanced.
-    systemPrompt: Verify the requested release state and report concrete blockers.
-    tools:
-      - bash
-      - history
 ---
 
 Work as a release engineer. Inspect repository policy before changing release state.
@@ -102,9 +96,8 @@ The frontmatter must be a YAML object between valid delimiters. Unknown fields a
 | `allowedReasoningLevels` | Array of reasoning efforts offered by the TUI selector. |
 | `skills` | `"*"`, a list of discovered skill names, or `[]`. |
 | `tools` | Explicit list of persona-controlled tools. |
-| `subagents` | Map of enabled subagent definitions. |
 
-If a standalone custom persona omits `skills`, Tau selects all discovered skills with `"*"`. If it omits `subagents`, Tau enables the built-in `default` subagent. Tool defaults then include the ordinary host tools plus subagent supervision tools. See [skills](skills.md) and [subagents](subagents.md) for those contracts.
+If a standalone custom persona omits `skills`, Tau selects all discovered skills with `"*"`. If it omits `tools`, Tau enables the ordinary host tools plus subagent supervision tools. An explicit `tools` list without `spawn_agent` prevents subagent launches. See [skills](skills.md) and [subagents](subagents.md) for those contracts.
 
 The persona-controlled tool names are:
 
@@ -133,10 +126,8 @@ Important boundaries are:
 
 - `extends` resolves shipped built-ins, not another custom persona.
 - Lookup of the built-in ID is case-insensitive.
-- It remains available as an inheritance base even when `disableBuiltinPersonas` hides built-ins from the effective catalog.
 - A non-empty Markdown body replaces the inherited base prompt.
 - Explicit `skills` or `tools` replaces the inherited selection.
-- Explicit `subagents` builds a new subagent map rather than merging custom entries into the inherited map. Unless that map contains `default: false`, Tau adds the built-in `default` subagent.
 - `reasoning` and `serviceTier` override their individual inherited settings; omitted settings remain inherited.
 
 Extending a built-in is useful when Tau's maintained behavior is the desired base. A standalone body is more stable when the persona must not change as Tau updates its built-in prompts.
@@ -185,7 +176,7 @@ Run `/reload` while the TUI session is idle after editing personas, `models.json
 
 If the current persona ID still exists, Tau applies its newly loaded definition. This can reset runtime settings such as reasoning or service tier to the definition's values. If the ID disappeared, Tau selects the first effective persona. Existing session messages remain; changing a persona does not rewrite prior model-facing history.
 
-A reload does not alter a turn already in progress, and the TUI refuses the operation while one is running. Existing live subagent threads retain the runtime with which they were created; newly spawned subagents use the reloaded persona definition. See [subagents](subagents.md).
+A reload does not alter a turn already in progress, and the TUI refuses the operation while one is running. Existing live subagent threads retain the runtime with which they were created; newly spawned subagents inherit the reloaded persona. See [subagents](subagents.md).
 
 ## Validation and common mistakes
 
@@ -198,8 +189,6 @@ An invalid persona is skipped and reported as a configuration warning. Other val
 - an `extends` target that is not a shipped built-in;
 - an invalid reasoning effort or service tier;
 - `skills` that is neither `"*"` nor a string list, or contains a blank entry;
-- an unknown persona tool;
-- an invalid subagent name, missing custom `systemPrompt`, unsupported subagent tool, or invalid launch model; and
-- attempting to override the built-in `default` subagent instead of using `default: false`.
+- an unknown persona tool.
 
 `/reload` surfaces warning paths directly in the transcript. For a new local TUI session, `tau --debug --persona <id>` shows the selected model, settings, skills, subagents, tools, and complete effective prompt. If a remote edit appears to have no effect, confirm the session execution environment and `cwd` before changing another copy of the file. [Troubleshooting](troubleshooting.md) covers that check in more detail.

package/dist/core/static/tau_docs/prompts-and-project-context.md

@@ -64,16 +64,6 @@ After recording succeeds, the picker becomes non-actionable and shows the prompt
 
 Only the newest picker in a chat is active. Pickers are bound to the session that opened them and expire after selection, session replacement, or runner restart. Duplicate taps do not record the same picker twice. Prompt selection does not consume pending attachments or group context.
 
-### Install starter prompts
-
-Use `tau install` to copy Tau's starter content:
-
-```bash
-tau install --prompt commit-staged
-```
-
-The default target is `.tau/prompts/` under the current directory. Add `--global` for `~/.config/tau/prompts/`. Existing prompt files are skipped unless `--force` is supplied. Running `tau install` without `--prompt` or `--skill` installs all starter prompts and skills.
-
 ## `AGENTS.md` provides standing context
 
 `AGENTS.md` is project context injected into the effective system prompt. It is suitable for repository conventions, architectural boundaries, verification commands, and instructions that should apply to every relevant request.
@@ -159,7 +149,7 @@ The alternate directory controls:
 - target applicable `AGENTS.md` and `agentContextFiles`,
 - target-discovered skills filtered by the parent persona.
 
-The parent session remains the source of truth for the selected persona, subagent definition, model catalog, model settings, and tool policy. Tau filters skills discovered at the alternate directory through the parent persona's skill selection. It does not replace the source persona with a persona found in the target directory. See [subagents](subagents.md) for the full launch contract.
+The parent session remains the source of truth for the selected persona, model catalog, model settings, and tool policy. Tau filters skills discovered at the alternate directory through the parent persona's skill selection. It does not replace the source persona with a persona found in the target directory. See [subagents](subagents.md) for the full launch contract.
 
 ## Leading hidden system blocks