@paradow/ledge 0.26.0 → 0.28.0

package/dist/cli/{chunk-2V2OJR2N.js → chunk-OYDTU6AP.js}

@@ -10,7 +10,7 @@ import {
   templateExists,
   templateId,
   templateText
-} from "./chunk-HCTXTN2X.js";
+} from "./chunk-QSRB3F5Y.js";
 import {
   NO_ALWAYS,
   NO_NOTE,
@@ -39,7 +39,7 @@ import {
   shownCommand,
   teammates,
   withImages
-} from "./chunk-TYNRKZFE.js";
+} from "./chunk-ZI47U5CQ.js";
 import {
   definitionFiles,
   definitionHash,
@@ -47,7 +47,7 @@ import {
   loadRole,
   quoteScalar,
   repoRoot
-} from "./chunk-II6VRGLU.js";
+} from "./chunk-JHFKBKSO.js";
 import {
   PARENT_AGENT_VARS,
   agentEnv,
@@ -57,7 +57,7 @@ import {
   labelTranscript,
   resumeLabel,
   spawnSession
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-LG3XFIPV.js";
 import {
   ACTIONS,
   ATTACHMENT_ID,
@@ -66,6 +66,8 @@ import {
   AttachmentRefSchema,
   BRIEF_MAX,
   CHAT_HISTORY_BUDGET,
+  CHECKLIST_TASKS_MAX,
+  CHECKLIST_TEXT_MAX,
   CONTEXT_NEAR,
   ContextPrefsSchema,
   DEFAULT_PROJECTS,
@@ -80,6 +82,7 @@ import {
   MESSAGE_MAX,
   MachinesSchema,
   ModelIdSchema,
+  ModelRefusalSchema,
   NEVER_PROPOSED,
   NOTE_NOT_TYPED,
   OperationIdSchema,
@@ -88,6 +91,7 @@ import {
   PREVIEW_MAX,
   PROTOCOL_PORT,
   PhoneClientMessageSchema,
+  PhoneModelChoiceSchema,
   PhoneRoleSchema,
   PhoneTemplateSchema,
   ProjectsSchema,
@@ -95,6 +99,7 @@ import {
   RefusalCodeSchema,
   RoleIdSchema,
   RouteResultSchema,
+  SEMVER,
   SESSION_KEY_VAR,
   SNAPSHOT_BODY_MAX,
   SshAliasSchema,
@@ -102,6 +107,7 @@ import {
   THREAD_BUDGET,
   THREAD_ITEMS_MAX,
   THREAD_TEXT_MAX,
+  TODO_TOOLS,
   TOOL_TEXT_MAX,
   TOPIC_MAX,
   TeamSchema,
@@ -113,6 +119,7 @@ import {
   backendOf,
   canonicalJson,
   contextNear,
+  doneCount,
   ensureDaemonToken,
   extractProposal,
   givenByLedge,
@@ -120,6 +127,7 @@ import {
   isArchived,
   isTeamLive,
   isTeamsOperation,
+  latestTodos,
   offers,
   ompApprovalFor,
   padPlain,
@@ -131,6 +139,7 @@ import {
   parseServerMessage,
   parseTaskBlock,
   parseTeamBlock,
+  pcSubject,
   pendingKey,
   pickName,
   projectOf,
@@ -145,7 +154,7 @@ import {
   teamsPurpose,
   tokenEquals,
   transmissions
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-VKRFHDRK.js";
 import {
   log
 } from "./chunk-6IYPRUQG.js";
@@ -2239,7 +2248,7 @@ function teamsJournal(path) {
 
 // src/daemon/server.ts
 import { createServer } from "http";
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 import { homedir as homedir7 } from "os";
 import { basename as basename6, join as join18, resolve as resolve8 } from "path";
 import { existsSync } from "fs";
@@ -2276,12 +2285,12 @@ var RpcError = class extends Error {
 };
 function lineReader(max, onLine, onBad) {
   const decoder = new TextDecoder("utf-8", { fatal: true });
-  let parts = [];
+  let parts2 = [];
   let size = 0;
   let skipping = false;
   const flush = () => {
-    const whole = parts.length === 1 ? parts[0] : Buffer.concat(parts);
-    parts = [];
+    const whole = parts2.length === 1 ? parts2[0] : Buffer.concat(parts2);
+    parts2 = [];
     size = 0;
     let text;
     try {
@@ -2301,10 +2310,10 @@ function lineReader(max, onLine, onBad) {
         size += end - from;
         if (size > max) {
           skipping = true;
-          parts = [];
+          parts2 = [];
           size = 0;
           onBad(`frame over ${max} bytes`);
-        } else if (end > from) parts.push(chunk.subarray(from, end));
+        } else if (end > from) parts2.push(chunk.subarray(from, end));
       }
       if (nl === -1) return;
       if (skipping) skipping = false;
@@ -3959,9 +3968,9 @@ function createForge(deps = {}) {
           index.push(`- ${name}: no repository on this machine`);
           return;
         }
-        const parts = await Promise.all(local.map((r) => section(r.path)));
-        await writeFile5(join9(ctx.dir, file), parts.flatMap((s) => s.lines).join("\n"));
-        const sources = parts.flatMap((s) => s.source ? [s.source] : []);
+        const parts2 = await Promise.all(local.map((r) => section(r.path)));
+        await writeFile5(join9(ctx.dir, file), parts2.flatMap((s) => s.lines).join("\n"));
+        const sources = parts2.flatMap((s) => s.source ? [s.source] : []);
         ctx.steps.set(file, { kind: "repo", name, path: sources.join(", ") || file });
         index.push(`- ${name}: ${file}`);
       }));
@@ -5061,18 +5070,18 @@ async function readAt(request, path) {
     if (!stat4.isFile()) return failure(request, "not_file");
     if (stat4.size > DOCUMENT_MAX_BYTES) return failure(request, "too_large");
     const chunk = Buffer.allocUnsafe(64 * 1024);
-    const parts = [];
+    const parts2 = [];
     let bytes4 = 0;
     while (bytes4 <= DOCUMENT_MAX_BYTES) {
       const { bytesRead } = await file.read(chunk, 0, Math.min(chunk.length, DOCUMENT_MAX_BYTES + 1 - bytes4), null);
       if (!bytesRead) break;
-      parts.push(Buffer.from(chunk.subarray(0, bytesRead)));
+      parts2.push(Buffer.from(chunk.subarray(0, bytesRead)));
       bytes4 += bytesRead;
     }
     if (bytes4 > DOCUMENT_MAX_BYTES) return failure(request, "too_large");
     let text;
     try {
-      text = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(parts, bytes4));
+      text = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(parts2, bytes4));
     } catch {
       return failure(request, "invalid_utf8");
     }
@@ -5673,6 +5682,19 @@ function serveSsh(ws, alias, opts = {}) {
 
 // src/mobile/gateway.ts
 import { hostname } from "os";
+import { randomUUID as randomUUID5 } from "crypto";
+
+// ../ui/src/semver.ts
+var parts = (v) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
+function compareVersions(a, b2) {
+  const x = parts(a);
+  const y = parts(b2);
+  for (let i = 0; i < 3; i++) {
+    const d = (x[i] ?? 0) - (y[i] ?? 0);
+    if (d) return d > 0 ? 1 : -1;
+  }
+  return a === b2 ? 0 : a.includes("-") ? -1 : b2.includes("-") ? 1 : 0;
+}
 
 // src/mobile/chat.ts
 var HISTORY_TURNS = 50;
@@ -6011,6 +6033,8 @@ function fingerprint(m) {
     f.rows ?? null,
     ...f.row !== void 0 || f.team !== void 0 || f.task !== void 0 ? [f.row ?? null, f.team ?? null, f.task ?? null] : [],
     ...f.attachments?.length ? [f.attachments] : [],
+    // A model change is its model and effort: the same id for another model is another operation (null, the agent's default, too).
+    ...m.type === "session.model" ? [m.model, m.effort] : [],
     // A role or team operation is its whole content: the same id with another prompt, seats or base is another operation.
     ...isTeamsOperation(m) ? [teamsContent(m)] : []
   ]);
@@ -6038,12 +6062,14 @@ var OperationRegistry = class {
     return { kind: "fresh", record: { ...record } };
   }
   /** An operation already forgotten (expired) is left forgotten. */
-  finish(op, status, reason) {
+  finish(op, status, reason, models) {
     const r = this.records.get(op);
     if (!r) return;
     r.status = status;
     if (reason) r.reason = reason;
     else delete r.reason;
+    if (models) r.models = models;
+    else delete r.models;
   }
   get(op) {
     this.expire();
@@ -6195,7 +6221,27 @@ function toPhoneRequest(s, bodyMax) {
   return toPhonePending(s.pending, pendingKey(s.pending), verdict.risk, verdict.reason, bodyMax);
 }
 var toPhoneFullRequest = (s) => toPhoneRequest(s, PENDING_BODY_MAX);
-function toPhoneSession(s, readAt2) {
+var checklistCut = (todos) => todos.length > CHECKLIST_TASKS_MAX || todos.some((t) => t.text.length > CHECKLIST_TEXT_MAX);
+function toPhoneChecklist(todos) {
+  if (!todos) return null;
+  return {
+    tasks: todos.slice(0, CHECKLIST_TASKS_MAX).map((t) => ({ text: clip(t.text, CHECKLIST_TEXT_MAX).text, status: t.status })),
+    done: doneCount(todos),
+    total: todos.length,
+    ...checklistCut(todos) ? { cut: true } : {}
+  };
+}
+function checklistSummary(todos) {
+  if (!todos) return void 0;
+  const current2 = todos.find((t) => t.status === "in_progress");
+  return {
+    done: doneCount(todos),
+    total: todos.length,
+    ...current2 ? { current: clip(current2.text, CHECKLIST_TEXT_MAX).text } : {},
+    ...checklistCut(todos) ? { cut: true } : {}
+  };
+}
+function toPhoneSession(s, readAt2, checklist) {
   const pending = toPhoneRequest(s, SNAPSHOT_BODY_MAX);
   return {
     id: s.id,
@@ -6211,10 +6257,19 @@ function toPhoneSession(s, readAt2) {
     ...pickSet(s, ["repo", "branch", "worktree", "role", "roleLabel", "team", "context", "relieves"]),
     // Its relief's state only (context handover spec §3.2): the phone shows it, the PC starts it.
     ...s.handover ? { handover: { state: s.handover.state, ...s.handover.toName ? { toName: s.handover.toName.slice(0, 80) } : {} } } : {},
+    // Its model, effort and the change waiting for its next free moment (#58), cut to the bounds of a model id and an effort.
+    ...s.model !== void 0 ? { model: clip(s.model, MODEL_MAX).text } : {},
+    ...s.effort !== void 0 ? { effort: clip(s.effort, EFFORT_MAX).text } : {},
+    ...s.modelNext ? { modelNext: {
+      ...s.modelNext.model !== void 0 ? { model: clip(s.modelNext.model, MODEL_MAX).text } : {},
+      ...s.modelNext.effort !== void 0 ? { effort: clip(s.modelNext.effort, EFFORT_MAX).text } : {}
+    } } : {},
+    ...canSwitch(s) ? { canSwitch: true } : {},
     helpers: s.helpers.map((h) => ({ id: h.id, kind: h.kind, task: h.task, state: h.state, ...pickSet(h, ["finishedAt"]) })),
     // A preview only: the whole reply is in the thread.
     ...s.lastReply ? { lastReply: { text: clip(s.lastReply.text, TOOL_TEXT_MAX).text, at: s.lastReply.at, ...pickSet(s.lastReply, ["plan"]) } } : {},
     ...pending ? { pending } : {},
+    ...checklist ? { checklist } : {},
     unread: !!s.lastReply && s.lastReply.at > readAt2
   };
 }
@@ -6435,10 +6490,39 @@ function toPhoneTask(x, owner, teamName) {
   };
 }
 var phoneTasks = (tasks, now) => tasks.filter((x) => x.giver === LEDGE_GIVER && (!taskClosed(x) || !x.seen && now - Date.parse(x.updatedAt) < 864e5)).slice(-200);
+var MODEL_MAX = 200;
+var EFFORT_MAX = 20;
+var MODELS_MAX = 40;
+function canSwitch(s) {
+  return s.source === "launcher" && s.state !== "exited";
+}
+function toPhoneModels(models) {
+  const out = [];
+  for (const m of models) {
+    if (out.length >= MODELS_MAX) break;
+    const efforts = m.efforts?.filter((e) => EffortSchema.safeParse(e).success).slice(0, 8);
+    const c = PhoneModelChoiceSchema.safeParse({
+      id: m.id,
+      label: clip(m.label, 80).text,
+      ...m.description !== void 0 ? { description: clip(m.description, 200).text } : {},
+      ...efforts ? { efforts } : {},
+      ...pickSet(m, ["defaultEffort", "isDefault"])
+    });
+    if (c.success) out.push(c.data);
+  }
+  return out;
+}
 
 // src/mobile/teamsOps.ts
 var FAILED = { status: "failed" };
 var invalid = { status: "rejected", reason: "invalid" };
+function withSeats(models) {
+  const seats = (models ?? []).flatMap((x) => {
+    if (x.code) return [{ role: x.role, session: x.session, status: "refused", reason: x.code }];
+    return x.when ? [{ role: x.role, session: x.session, status: x.when === "now" ? "applied" : "scheduled" }] : [];
+  });
+  return seats.length ? { models: seats } : {};
+}
 function createTeamsOps(deps) {
   const listing = async () => {
     let found;
@@ -6492,10 +6576,12 @@ function createTeamsOps(deps) {
         if (!m.code) return true;
         if (m.code === "missing") return FAILED;
         return { status: "rejected", reason: m.code };
-      case "team.changed":
+      case "team.changed": {
         if (m.rid !== rid) return void 0;
-        if (m.reason && m.team && type === "team.compose") return { status: "applied", reason: "seat_failed" };
-        return !m.reason;
+        const seats = withSeats(m.models);
+        if (m.reason && m.team && type === "team.compose") return { status: "applied", reason: "seat_failed", ...seats };
+        return m.reason ? FAILED : { status: "applied", ...seats };
+      }
       case "team.launched":
         return m.rid === rid ? true : void 0;
       case "team.failed":
@@ -6690,12 +6776,14 @@ function verifyAssertion(a, cred, rp, challenge) {
 // src/mobile/gateway.ts
 var FLUSH_BEFORE_REVOKE_MS = 5e3;
 var REQUEST_NAME = /^[a-z][a-z.]{0,39}$/;
+var MODELS_WAIT_MS = 2e4;
 function createPhoneGateway(deps) {
   const { mobile, log: log2 } = deps;
   const startedAt = new Date(deps.now ? deps.now() : Date.now()).toISOString();
   const registry = new OperationRegistry();
   const followers = /* @__PURE__ */ new Map();
   let stopped2 = false;
+  const modelFailures = /* @__PURE__ */ new Map();
   const follower = (deviceId) => {
     let f = followers.get(deviceId);
     if (!f) followers.set(deviceId, f = { subscribed: false, watching: null, reads: /* @__PURE__ */ new Map(), visible: false });
@@ -6738,7 +6826,17 @@ function createPhoneGateway(deps) {
     const s = deps.session(id);
     return s && !isArchived(s) ? s : void 0;
   };
-  const projected = (deviceId, s) => toPhoneSession(s, followers.get(deviceId)?.reads.get(s.id) ?? startedAt);
+  const checklists = /* @__PURE__ */ new Map();
+  const computeChecklist = (id) => {
+    const todos = latestTodos(deps.thread(id) ?? []);
+    return { list: toPhoneChecklist(todos), summary: checklistSummary(todos) };
+  };
+  const checklistOf = (id) => {
+    let c = checklists.get(id);
+    if (!c) checklists.set(id, c = computeChecklist(id));
+    return c;
+  };
+  const projected = (deviceId, s) => toPhoneSession(s, followers.get(deviceId)?.reads.get(s.id) ?? startedAt, checklistOf(s.id).summary);
   const pushStatus = (deviceId) => {
     const key = mobile.relayPushKey();
     if (key === null) return "unavailable";
@@ -6750,14 +6848,15 @@ function createPhoneGateway(deps) {
     const push2 = pushStatus(deviceId);
     const f = followers.get(deviceId);
     if (f) f.pushStatus = push2;
-    return {
+    const message = {
       type: "snapshot",
       protocol: PHONE_PROTOCOL,
       sessions: deps.sessions().filter((s) => !isArchived(s)).map((s) => projected(deviceId, s)),
       capabilities: capabilities(),
-      daemon: { version: deps.version, boot: deps.boot, name: clip(hostname(), 40).text },
+      daemon: { version: deps.version, boot: deps.boot, name: clip(hostname(), 40).text, ...teamsOps ? { teams: true } : {}, ...deps.pc?.canUpdate ? { update: true } : {}, ...deps.pc?.canRestart ? { restart: true } : {}, checklist: true },
       device: { confirm: deps.credential(deviceId) !== null, push: push2, ...deps.chats ? { chat: true } : {}, ...deps.contextNear ? { contextNear: deps.contextNear() } : {} }
     };
+    return deps.models ? { ...message, daemon: { ...message.daemon, models: true } } : message;
   };
   const phoneTeams = () => (deps.teams?.() ?? []).flatMap((t) => {
     const x = toPhoneTeam(t, deps.tasks?.() ?? [], deps.projectName ?? (() => null));
@@ -6779,6 +6878,8 @@ function createPhoneGateway(deps) {
       if (followers.get(deviceId)?.subscribed) {
         outbox.push(deviceId, snapshot(deviceId), "snapshot");
         teamsAndTasks(deviceId);
+        const watching = followers.get(deviceId)?.watching;
+        if (watching) outbox.push(deviceId, { type: "session.checklist", id: watching, checklist: checklistOf(watching).list }, `session.checklist:${watching}`);
       }
     },
     log: log2,
@@ -6787,9 +6888,27 @@ function createPhoneGateway(deps) {
   const push = (deviceId, msg, key) => {
     if (!stopped2) outbox.push(deviceId, msg, key);
   };
-  const result = (deviceId, op, status, reason) => {
+  const replayModelFailures = (deviceId) => {
+    for (const [id, f] of modelFailures) if (live3(id)) push(deviceId, { type: "session.model.failed", id, reason: f.reason });
+  };
+  const keepModelFailure = (m) => {
+    if (m.type === "session.removed") {
+      modelFailures.delete(m.id);
+      return;
+    }
+    if (m.type === "session.updated") {
+      const f = modelFailures.get(m.session.id);
+      if (f && (isArchived(m.session) || f.model !== m.session.model || f.effort !== m.session.effort)) modelFailures.delete(m.session.id);
+      return;
+    }
+    if (m.type !== "error" || m.request !== "session.model" || m.id === void 0) return;
+    const reason = ModelRefusalSchema.safeParse(m.code);
+    const s = live3(m.id);
+    if (reason.success && s) modelFailures.set(m.id, { reason: reason.data, model: s.model, effort: s.effort });
+  };
+  const result = (deviceId, op, status, reason, models) => {
     if (stopped2 || !approved(deviceId)) return;
-    push(deviceId, { type: "operation.result", op, status, ...reason ? { reason } : {} });
+    push(deviceId, { type: "operation.result", op, status, ...reason ? { reason } : {}, ...models ? { models } : {} });
   };
   const needsAssertion = (msg, s) => {
     if (msg.type === "session.decide") return msg.decision !== "deny" && riskOf2(s)?.risk !== "low";
@@ -6851,6 +6970,9 @@ function createPhoneGateway(deps) {
         return s.pending.requestId === msg.requestId ? void 0 : { status: "rejected", reason: "stale" };
       case "session.interrupt":
         return s.tmuxSession || backendOf(s) === "omp-rpc" ? void 0 : { status: "rejected", reason: "read_only" };
+      case "session.model":
+        if (canSwitch(s)) return void 0;
+        return { status: "rejected", reason: s.state === "exited" ? "ended" : "not_launched" };
     }
   };
   const local = (msg) => {
@@ -6863,6 +6985,8 @@ function createPhoneGateway(deps) {
         return { type: "session.answer", id: msg.id, requestId: msg.requestId, answers: msg.answers, ...msg.cancel ? { cancel: true } : {} };
       case "session.interrupt":
         return { type: "session.interrupt", id: msg.id };
+      case "session.model":
+        return { type: "session.model", id: msg.id, model: msg.model, effort: msg.effort };
     }
   };
   const outcomeOf = (code) => {
@@ -6984,6 +7108,41 @@ function createPhoneGateway(deps) {
     });
     return outcome ?? opts.silent ?? { status: "applied" };
   };
+  const modelChange = async (out) => {
+    let when;
+    let refusal2;
+    await deps.dispatch(out, (m) => {
+      if (m.type === "session.model.accepted" && m.id === out.id) when ??= m.when;
+      if (m.type === "error" && m.request === "session.model" && (m.id === void 0 || m.id === out.id)) refusal2 ??= { code: m.code };
+    });
+    if (when) modelFailures.delete(out.id);
+    if (when) return when === "turn" ? { status: "applied", reason: "scheduled" } : { status: "applied" };
+    const model = ModelRefusalSchema.safeParse(refusal2?.code);
+    if (model.success) return { status: "rejected", reason: model.data };
+    const known2 = RefusalCodeSchema.safeParse(refusal2?.code);
+    return known2.success ? { status: "rejected", reason: known2.data } : { status: "failed" };
+  };
+  const modelsList = async (deviceId, tool) => {
+    const requestId = randomUUID5();
+    let listing;
+    let timer;
+    try {
+      await Promise.race([
+        deps.dispatch({ type: "models.list", requestId, tool }, (m) => {
+          if (m.type === "models.listing" && m.requestId === requestId) listing ??= m;
+        }),
+        new Promise((r) => {
+          timer = setTimeout(r, MODELS_WAIT_MS);
+        })
+      ]);
+    } catch (e) {
+      log2(`phone models.list failed (${e instanceof Error ? e.name : "error"})`);
+    } finally {
+      clearTimeout(timer);
+    }
+    if (!listing) return push(deviceId, { type: "models.listing", tool, models: [], error: true });
+    push(deviceId, { type: "models.listing", tool, models: toPhoneModels(listing.models), ...listing.error !== void 0 ? { error: true } : {} });
+  };
   const chatTeam = async (deviceId, msg) => {
     const turn = ownTurn(deviceId, msg.qid);
     if (!turn?.team || !deps.teams) return { status: "rejected", reason: "unknown_session" };
@@ -7019,7 +7178,23 @@ function createPhoneGateway(deps) {
     push: (deviceId, m) => push(deviceId, m),
     log: log2
   }) : void 0;
+  const pcOperation = (deviceId, msg) => {
+    const pc = deps.pc;
+    const update = msg.type === "daemon.update";
+    if (!pc || !(update ? pc.canUpdate : pc.canRestart)) return { status: "rejected", reason: "unavailable" };
+    if (update && (!SEMVER.test(deps.version) || compareVersions(msg.version, deps.version) <= 0)) return { status: "rejected", reason: "invalid" };
+    const refused = checkAssertion(deviceId, msg.assertion, "pc", update ? pcSubject("update", msg.version) : pcSubject("restart"));
+    if (refused) return refused;
+    const reply = (m) => {
+      if (m.type === "update.failed") push(deviceId, { type: "daemon.failed", version: m.version, reason: m.reason });
+    };
+    log2(`phone: device ${deviceId} asked the daemon to ${update ? `update to ${msg.version}` : "restart"}`);
+    if (update) pc.update(msg.version, reply);
+    else pc.restart(reply);
+    return { status: "applied" };
+  };
   const run2 = async (deviceId, msg) => {
+    if (msg.type === "daemon.update" || msg.type === "daemon.restart") return pcOperation(deviceId, msg);
     if (isTeamsOperation(msg)) return teamsOps ? teamsOps.run(deviceId, msg) : { status: "rejected", reason: "unavailable" };
     if (msg.type === "chat.ignore") return chatIgnore(deviceId, msg);
     if (msg.type === "chat.team") return chatTeam(deviceId, msg);
@@ -7048,6 +7223,7 @@ function createPhoneGateway(deps) {
     const refused = precheck(deviceId, msg);
     if (refused) return refused;
     const out = local(msg);
+    if (out.type === "session.model") return modelChange(out);
     let error;
     await deps.dispatch(out, (m) => {
       if (m.type === "error" && (m.request === void 0 || m.request === out.type)) error ??= { code: m.code };
@@ -7057,7 +7233,7 @@ function createPhoneGateway(deps) {
   const write = async (deviceId, msg) => {
     const begun = registry.begin(deviceId, msg.op, fingerprint(msg));
     if (begun.kind === "conflict") return result(deviceId, msg.op, "rejected", "conflict");
-    if (begun.kind === "replay") return result(deviceId, msg.op, begun.record.status, begun.record.reason);
+    if (begun.kind === "replay") return result(deviceId, msg.op, begun.record.status, begun.record.reason, begun.record.models);
     let outcome;
     try {
       result(deviceId, msg.op, "received");
@@ -7066,8 +7242,8 @@ function createPhoneGateway(deps) {
       log2(`phone ${msg.type} failed (${e instanceof Error ? e.name : "error"})`);
       outcome = { status: "failed" };
     }
-    registry.finish(msg.op, outcome.status, outcome.reason);
-    result(deviceId, msg.op, outcome.status, outcome.reason);
+    registry.finish(msg.op, outcome.status, outcome.reason, outcome.models);
+    result(deviceId, msg.op, outcome.status, outcome.reason, outcome.models);
     if (msg.type === "credential.register" && outcome.status === "applied" && approved(deviceId)) push(deviceId, snapshot(deviceId), "snapshot");
     if (msg.type === "device.forget" && outcome.status === "applied") {
       let timer;
@@ -7154,13 +7330,19 @@ function createPhoneGateway(deps) {
       case "presence":
         follower(deviceId).visible = msg.visible;
         return;
+      case "models.list":
+        if (!deps.models) return;
+        void modelsList(deviceId, msg.tool).catch((e) => log2(`phone models.list failed (${e instanceof Error ? e.name : "error"})`));
+        return;
       case "snapshot.request":
         follower(deviceId).subscribed = true;
         push(deviceId, snapshot(deviceId), "snapshot");
+        replayModelFailures(deviceId);
         return teamsAndTasks(deviceId);
       case "session.thread": {
         if (!live3(msg.id)) return push(deviceId, { type: "error", code: "unknown_session", request: msg.type });
-        return push(deviceId, { type: "session.thread", id: msg.id, ...toPhoneThread(deps.thread(msg.id) ?? []) });
+        push(deviceId, { type: "session.thread", id: msg.id, ...toPhoneThread(deps.thread(msg.id) ?? []) });
+        return push(deviceId, { type: "session.checklist", id: msg.id, checklist: checklistOf(msg.id).list }, `session.checklist:${msg.id}`);
       }
       case "session.pending": {
         const session = live3(msg.id);
@@ -7223,6 +7405,15 @@ function createPhoneGateway(deps) {
           const challenge = deps.challenges.issue({ deviceId, purpose: msg.purpose, subject: msg.digest });
           return push(deviceId, { type: "confirm.challenge", purpose: msg.purpose, challenge, rpId: rp.rpId, credentialId: cred.id, expiresInMs: CHALLENGE_TTL_MS, digest: msg.digest });
         }
+        if (msg.purpose === "pc") {
+          const pc = deps.pc;
+          if (!pc || !msg.action || msg.action === "update" !== (msg.version !== void 0)) return invalid2();
+          if (!(msg.action === "update" ? pc.canUpdate : pc.canRestart)) return invalid2();
+          const cred = deps.credential(deviceId);
+          if (!cred || cred.rpId !== rp.rpId) return invalid2();
+          const challenge = deps.challenges.issue({ deviceId, purpose: "pc", subject: pcSubject(msg.action, msg.version) });
+          return push(deviceId, { type: "confirm.challenge", purpose: "pc", challenge, rpId: rp.rpId, credentialId: cred.id, expiresInMs: CHALLENGE_TTL_MS });
+        }
         const unhandled = msg.purpose;
         void unhandled;
         return invalid2();
@@ -7252,6 +7443,7 @@ function createPhoneGateway(deps) {
       const request = typeof type === "string" && REQUEST_NAME.test(type) ? type : void 0;
       log2(`phone message refused: ${request ?? "?"}`);
       const op = OperationIdSchema.safeParse(raw?.op);
+      if (request === "session.model" && op.success && approved(deviceId)) return push(deviceId, { type: "operation.result", op: op.data, status: "rejected", reason: "invalid" });
       if ((request !== void 0 && TEAMS_OPERATION_TYPES.includes(request) || request === "push.subscribe" || request === "chat.launch" || request === "chat.close" || request === "chat.act" || request === "chat.ignore" || request === "chat.team" || request === "chat.task" || request === "team.resume" || request === "task.seen") && op.success && approved(deviceId)) return push(deviceId, { type: "operation.result", op: op.data, status: "rejected", reason: "invalid" });
       return push(deviceId, { type: "error", code: "invalid", ...request !== void 0 ? { request } : {} });
     }
@@ -7285,17 +7477,40 @@ function createPhoneGateway(deps) {
     }
   };
   const removed = (id) => {
+    checklists.delete(id);
     for (const [deviceId, f] of followers) {
       f.reads.delete(id);
       if (f.watching === id) f.watching = null;
       if (f.subscribed) push(deviceId, { type: "session.removed", id });
     }
   };
+  const checklistChanged = (id, item) => {
+    if (item.kind !== "tool" || item.helperId !== void 0 || !TODO_TOOLS.has(item.tool) || !checklists.has(id)) return;
+    const before = checklists.get(id);
+    const now = computeChecklist(id);
+    checklists.set(id, now);
+    if (JSON.stringify(now.list) !== JSON.stringify(before.list)) {
+      for (const [deviceId, f] of followers) if (f.watching === id) push(deviceId, { type: "session.checklist", id, checklist: now.list }, `session.checklist:${id}`);
+    }
+    const s = live3(id);
+    if (s && JSON.stringify(now.summary) !== JSON.stringify(before.summary)) {
+      for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "session.updated", session: projected(deviceId, s) }, `session.updated:${id}`);
+    }
+  };
   const unsubscribeMessage = mobile.onMessage(receive);
   const unsubscribeChange = mobile.onChange(pruneRevoked);
   return {
     forward(m) {
-      if (stopped2 || followers.size === 0) return;
+      if (!stopped2) try {
+        keepModelFailure(m);
+      } catch (e) {
+        log2(`phone model failure of ${m.type} failed (${e instanceof Error ? e.name : "error"})`);
+      }
+      if (stopped2) return;
+      if (followers.size === 0) {
+        checklists.clear();
+        return;
+      }
       try {
         switch (m.type) {
           case "session.updated":
@@ -7306,6 +7521,12 @@ function createPhoneGateway(deps) {
             return;
           case "session.removed":
             return removed(m.id);
+          case "error": {
+            const reason = ModelRefusalSchema.safeParse(m.code);
+            if (m.request !== "session.model" || m.id === void 0 || !reason.success || !live3(m.id)) return;
+            for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "session.model.failed", id: m.id, reason: reason.data });
+            return;
+          }
           case "context.prefs":
             for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, snapshot(deviceId), "snapshot");
             return;
@@ -7324,12 +7545,20 @@ function createPhoneGateway(deps) {
             }
             return;
           }
+          // The daemon updating or restarting itself, whoever asked. Never npm's output nor a command: both hold the PC's paths.
+          case "update.progress":
+            for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "daemon.progress", version: m.version, step: m.step });
+            return;
+          case "update.failed":
+            for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "daemon.failed", version: m.version, reason: m.reason });
+            return;
           case "session.preview":
             for (const [deviceId, f] of followers) {
               if (f.watching === m.id) push(deviceId, { type: "session.preview", id: m.id, lines: [...m.lines] }, `session.preview:${m.id}`);
             }
             return;
           case "session.thread.item": {
+            checklistChanged(m.id, m.item);
             const watchers = [...followers].filter(([, f]) => f.watching === m.id);
             if (watchers.length === 0) return;
             const { item, cut: cut2 } = toPhoneItem(m.item);
@@ -8110,6 +8339,7 @@ async function startServer(opts) {
   async function applyOmpModel(s) {
     const next2 = s.modelNext;
     typing.add(s.id);
+    applyingModel.set(s.id, null);
     try {
       await omp.setModel(s.id, next2);
       log(`model of ${s.id} is now ${next2.model ?? "unchanged"}${next2.effort ? ` \xB7 ${next2.effort}` : ""}`);
@@ -8117,32 +8347,91 @@ async function startServer(opts) {
       const message = e.message;
       log(`model change of ${s.id} failed: ${message}`);
       store.patch(s.id, { modelNext: void 0 });
-      broadcast({ type: "error", id: s.id, message, request: "session.model" });
+      modelFailed(s.id, message, "refused");
     } finally {
       typing.delete(s.id);
+      afterModelApply(s.id);
+    }
+  }
+  const modelFailed = (id, message, code) => broadcast({ type: "error", id, message, request: "session.model", code });
+  const applyingModel = /* @__PURE__ */ new Map();
+  function afterModelApply(id) {
+    const later = applyingModel.get(id);
+    applyingModel.delete(id);
+    const s = store.get(id);
+    if (!later || !s) return;
+    const refusal2 = modelRefusal(s, later.effort ?? null);
+    if (refusal2) {
+      store.patch(id, { modelNext: void 0 });
+      return modelFailed(id, refusal2.message, refusal2.refused);
     }
+    store.patch(id, { modelNext: later.model === s.model && later.effort === s.effort ? void 0 : later });
+  }
+  function canApplyNow(id) {
+    return free(store.get(id)) && !typing.has(id) && !closing.has(id) && !cardThreads.queuedRelays().some((q) => q.relay.id === id);
+  }
+  function modelRefusal(s, effort) {
+    const inPlace = backendOf(s) === "omp-rpc";
+    if (s.source === "hook_only") return { refused: "not_launched", message: READ_ONLY2 };
+    if (s.state === "exited") return { refused: "ended", message: "the session has ended" };
+    if (!resumeKey(s)) return { refused: "no_conversation", message: "no conversation to resume" };
+    if (inPlace && !omp.isLive(s.id)) return { refused: "not_running", message: "the session is not running" };
+    if (effort && !inPlace && !EFFORT_ARGS[s.tool]) return { refused: "effort_in_model", message: `${s.tool} takes its effort in the model id` };
+    return null;
+  }
+  async function changeModel(id, model, effort) {
+    const s = store.get(id);
+    if (!s) throw unknownSession();
+    const refusal2 = modelRefusal(s, effort);
+    if (refusal2) return refusal2;
+    const next2 = { ...model ? { model } : {}, ...effort ? { effort } : {} };
+    if (applyingModel.has(id)) {
+      applyingModel.set(id, next2);
+      store.patch(id, { modelNext: next2 });
+      return { when: "turn" };
+    }
+    if (next2.model === s.model && next2.effort === s.effort) {
+      if (s.modelNext) store.patch(id, { modelNext: void 0 });
+      return { when: "none" };
+    }
+    const when = canApplyNow(id) ? "now" : "turn";
+    store.patch(id, { modelNext: next2 });
+    return { when };
   }
   async function applyModelNext(id) {
     const s = store.get(id);
-    if (!s?.modelNext || !free(s) || typing.has(id) || closing.has(id) || cardThreads.queuedRelays().some((q) => q.relay.id === id)) return;
+    if (!s?.modelNext || !canApplyNow(id)) return;
     if (backendOf(s) === "omp-rpc") return applyOmpModel(s);
-    const key = resumeKey(s);
-    if (!key || s.source !== "launcher") {
+    const { model, effort } = s.modelNext;
+    const refusal2 = modelRefusal(s, effort ?? null);
+    if (refusal2) {
       store.patch(id, { modelNext: void 0 });
-      return;
+      return modelFailed(id, refusal2.message, refusal2.refused);
     }
-    const { model, effort } = s.modelNext;
+    const key = resumeKey(s);
     typing.add(id);
+    applyingModel.set(id, null);
     try {
       for (const [k, at] of respawned) if (Date.now() - at > RESPAWN_HOOKS_MS) respawned.delete(k);
       respawned.set(id, Date.now());
       await endSession(s);
       const ended = store.get(id);
-      if (!ended || ended.archivedAt !== void 0) return;
+      if (!ended || ended.archivedAt !== void 0) {
+        store.patch(id, { modelNext: void 0 });
+        return;
+      }
       const refused = await respawn({ ...ended, modelNext: void 0 }, key, model, effort);
-      if (refused) log(`model change of ${id} failed: ${refused}`);
+      if (refused) {
+        log(`model change of ${id} failed: ${refused}`);
+        modelFailed(id, refused, "restart_failed");
+      }
+    } catch (e) {
+      log(`model change of ${id} failed: ${e.message}`);
+      store.patch(id, { modelNext: void 0 });
+      modelFailed(id, e.message, "restart_failed");
     } finally {
       typing.delete(id);
+      afterModelApply(id);
     }
   }
   const chatLaunches = /* @__PURE__ */ new Set();
@@ -8405,6 +8694,26 @@ ${now2.prompt}` });
     for (const id of leaverRefused) if (!leaving.has(id)) leaverRefused.delete(id);
   }
   const seatsInFlight = /* @__PURE__ */ new Set();
+  async function seatModels(before, team) {
+    const out = [];
+    const roles = listDefinitions(team.cwd).roles;
+    for (const seat of team.seats) {
+      const was = before.get(seat.role);
+      if (!was || seat.leaving || was.tool !== seat.tool || was.model === seat.model && was.effort === seat.effort) continue;
+      const holder = seat.sessionId ? store.get(seat.sessionId) : void 0;
+      if (!holder) continue;
+      const resolved = resolveSeats([seat], roles);
+      const want = "unknown" in resolved ? seat : resolved[0];
+      try {
+        const r = await changeModel(holder.id, want.model ?? null, want.effort ?? null);
+        if ("refused" in r) out.push({ role: seat.role, session: holder.id, code: r.refused });
+        else if (r.when !== "none") out.push({ role: seat.role, session: holder.id, when: r.when });
+      } catch (e) {
+        log(`team ${team.id}: model of @${seat.role} (${holder.id}) not changed: ${e.message}`);
+      }
+    }
+    return out;
+  }
   async function composeTeam(msg) {
     const changed = (extra) => ({ type: "team.changed", rid: msg.rid, ...extra });
     const t = teams.get(msg.team);
@@ -8421,12 +8730,14 @@ ${now2.prompt}` });
     if (busy) return changed({ reason: `@${busy.role} : une op\xE9ration est d\xE9j\xE0 en cours sur ce si\xE8ge` });
     for (const k of keys) seatsInFlight.add(k);
     try {
+      const before = new Map(t.seats.map((s) => [s.role, s]));
       const r = teams.compose(msg.team, msg.seats);
       if (typeof r === "string") return changed({ reason: r });
       log(`team ${t.id} composed: +${r.added.join(",") || "-"} \u2212${r.removed.join(",") || "-"}`);
       const failed = r.added.length ? await startSeats(r.team, msg.seats.filter((s) => r.added.includes(s.role))) : null;
       closeLeavers();
-      return changed({ team: teams.get(t.id), ...failed ? { reason: failed } : {} });
+      const models2 = await seatModels(before, teams.get(t.id));
+      return changed({ team: teams.get(t.id), ...failed ? { reason: failed } : {}, ...models2.length ? { models: models2 } : {} });
     } finally {
       for (const k of keys) seatsInFlight.delete(k);
     }
@@ -8767,21 +9078,10 @@ ${now2.prompt}` });
         return;
       }
       case "session.model": {
-        const s = store.get(msg.id);
-        if (!s) return refuse("unknown session", msg.id);
-        if (s.source === "hook_only") return refuse(READ_ONLY2, msg.id);
-        if (s.state === "exited") return refuse("the session has ended", msg.id);
-        if (!resumeKey(s)) return refuse("no conversation to resume", msg.id);
-        if (backendOf(s) === "omp-rpc" && !omp.isLive(s.id)) return refuse("the session is not running", msg.id);
-        if (msg.effort && backendOf(s) !== "omp-rpc" && !EFFORT_ARGS[s.tool]) return refuse(`${s.tool} takes its effort in the model id`, msg.id);
-        const next2 = { ...msg.model ? { model: msg.model } : {}, ...msg.effort ? { effort: msg.effort } : {} };
-        if (next2.model === s.model && next2.effort === s.effort) {
-          if (s.modelNext) store.patch(msg.id, { modelNext: void 0 });
-          return;
-        }
-        store.patch(msg.id, { modelNext: next2 });
-        await applyModelNext(msg.id);
-        return;
+        if (!store.get(msg.id)) return refuse("unknown session", msg.id);
+        const r = await changeModel(msg.id, msg.model, msg.effort);
+        if ("refused" in r) return refuse({ message: r.message, code: r.refused }, msg.id);
+        return reply({ type: "session.model.accepted", id: msg.id, when: r.when });
       }
       case "session.delete": {
         const s = store.get(msg.id);
@@ -9047,7 +9347,7 @@ ${now2.prompt}` });
     },
     onChatEnd: (deviceId, end) => notifyChatEnd?.(deviceId, end.code),
     version: opts.daemon?.version ?? "unknown",
-    boot: randomUUID5(),
+    boot: randomUUID6(),
     log,
     now,
     rp: () => rpOf(mobile.state().relayUrl),
@@ -9060,7 +9360,22 @@ ${now2.prompt}` });
     projectName: (id) => id ? projects.projects.find((p) => p.id === id)?.name ?? null : null,
     // A project's folder is its first local repo: only a project with one can be named by the phone.
     projectByName: (name) => projects.projects.find((p) => p.name === name && p.repos.some((r) => r.machine === "local"))?.id ?? null,
-    teamCatalog: true
+    teamCatalog: true,
+    // The phone's model switch (#58): `session.model` answers with a code, and `models.list` asks this machine's agents.
+    models: true,
+    // The phone's « Mettre à jour le PC » and « Redémarrer le daemon »: the updater Desktop's `update.daemon` uses, progress broadcast.
+    ...opts.updater && opts.daemon ? {
+      pc: {
+        canUpdate: opts.daemon.install === "npm" && opts.daemon.systemd,
+        canRestart: opts.daemon.systemd,
+        update: (version, reply) => {
+          void opts.updater.update(version, broadcast, reply);
+        },
+        restart: (reply) => {
+          void opts.updater.restart(broadcast, reply);
+        }
+      }
+    } : {}
   });
   let unsubscribePush;
   if (mobile) {