@paradow/ledge 0.27.0 → 0.29.0

package/dist/cli/{chunk-CVHX7GUB.js → chunk-TREGH6WM.js}

@@ -10,7 +10,7 @@ import {
   templateExists,
   templateId,
   templateText
-} from "./chunk-YLN3VOGV.js";
+} from "./chunk-WCBXS3EU.js";
 import {
   NO_ALWAYS,
   NO_NOTE,
@@ -39,7 +39,7 @@ import {
   shownCommand,
   teammates,
   withImages
-} from "./chunk-7JRQCKBP.js";
+} from "./chunk-UWDE365N.js";
 import {
   definitionFiles,
   definitionHash,
@@ -47,7 +47,7 @@ import {
   loadRole,
   quoteScalar,
   repoRoot
-} from "./chunk-UPKJO3BZ.js";
+} from "./chunk-73YNZ3BN.js";
 import {
   PARENT_AGENT_VARS,
   agentEnv,
@@ -57,7 +57,7 @@ import {
   labelTranscript,
   resumeLabel,
   spawnSession
-} from "./chunk-ADAGKOFO.js";
+} from "./chunk-K3SDHHZF.js";
 import {
   ACTIONS,
   ATTACHMENT_ID,
@@ -66,6 +66,8 @@ import {
   AttachmentRefSchema,
   BRIEF_MAX,
   CHAT_HISTORY_BUDGET,
+  CHECKLIST_TASKS_MAX,
+  CHECKLIST_TEXT_MAX,
   CONTEXT_NEAR,
   ContextPrefsSchema,
   DEFAULT_PROJECTS,
@@ -80,6 +82,7 @@ import {
   MESSAGE_MAX,
   MachinesSchema,
   ModelIdSchema,
+  ModelRefusalSchema,
   NEVER_PROPOSED,
   NOTE_NOT_TYPED,
   OperationIdSchema,
@@ -88,6 +91,7 @@ import {
   PREVIEW_MAX,
   PROTOCOL_PORT,
   PhoneClientMessageSchema,
+  PhoneModelChoiceSchema,
   PhoneRoleSchema,
   PhoneTemplateSchema,
   ProjectsSchema,
@@ -103,6 +107,7 @@ import {
   THREAD_BUDGET,
   THREAD_ITEMS_MAX,
   THREAD_TEXT_MAX,
+  TODO_TOOLS,
   TOOL_TEXT_MAX,
   TOPIC_MAX,
   TeamSchema,
@@ -114,6 +119,7 @@ import {
   backendOf,
   canonicalJson,
   contextNear,
+  doneCount,
   ensureDaemonToken,
   extractProposal,
   givenByLedge,
@@ -121,6 +127,7 @@ import {
   isArchived,
   isTeamLive,
   isTeamsOperation,
+  latestTodos,
   offers,
   ompApprovalFor,
   padPlain,
@@ -147,7 +154,7 @@ import {
   teamsPurpose,
   tokenEquals,
   transmissions
-} from "./chunk-37G5F75H.js";
+} from "./chunk-7S7ZLGIY.js";
 import {
   log
 } from "./chunk-6IYPRUQG.js";
@@ -2241,7 +2248,7 @@ function teamsJournal(path) {
 
 // src/daemon/server.ts
 import { createServer } from "http";
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 import { homedir as homedir7 } from "os";
 import { basename as basename6, join as join18, resolve as resolve8 } from "path";
 import { existsSync } from "fs";
@@ -5675,6 +5682,7 @@ function serveSsh(ws, alias, opts = {}) {
 
 // src/mobile/gateway.ts
 import { hostname } from "os";
+import { randomUUID as randomUUID5 } from "crypto";
 
 // ../ui/src/semver.ts
 var parts = (v) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
@@ -6025,6 +6033,8 @@ function fingerprint(m) {
     f.rows ?? null,
     ...f.row !== void 0 || f.team !== void 0 || f.task !== void 0 ? [f.row ?? null, f.team ?? null, f.task ?? null] : [],
     ...f.attachments?.length ? [f.attachments] : [],
+    // A model change is its model and effort: the same id for another model is another operation (null, the agent's default, too).
+    ...m.type === "session.model" ? [m.model, m.effort] : [],
     // A role or team operation is its whole content: the same id with another prompt, seats or base is another operation.
     ...isTeamsOperation(m) ? [teamsContent(m)] : []
   ]);
@@ -6052,12 +6062,16 @@ var OperationRegistry = class {
     return { kind: "fresh", record: { ...record } };
   }
   /** An operation already forgotten (expired) is left forgotten. */
-  finish(op, status, reason) {
+  finish(op, status, reason, models, how) {
     const r = this.records.get(op);
     if (!r) return;
     r.status = status;
     if (reason) r.reason = reason;
     else delete r.reason;
+    if (models) r.models = models;
+    else delete r.models;
+    if (how) r.how = how;
+    else delete r.how;
   }
   get(op) {
     this.expire();
@@ -6209,7 +6223,27 @@ function toPhoneRequest(s, bodyMax) {
   return toPhonePending(s.pending, pendingKey(s.pending), verdict.risk, verdict.reason, bodyMax);
 }
 var toPhoneFullRequest = (s) => toPhoneRequest(s, PENDING_BODY_MAX);
-function toPhoneSession(s, readAt2) {
+var checklistCut = (todos) => todos.length > CHECKLIST_TASKS_MAX || todos.some((t) => t.text.length > CHECKLIST_TEXT_MAX);
+function toPhoneChecklist(todos) {
+  if (!todos) return null;
+  return {
+    tasks: todos.slice(0, CHECKLIST_TASKS_MAX).map((t) => ({ text: clip(t.text, CHECKLIST_TEXT_MAX).text, status: t.status })),
+    done: doneCount(todos),
+    total: todos.length,
+    ...checklistCut(todos) ? { cut: true } : {}
+  };
+}
+function checklistSummary(todos) {
+  if (!todos) return void 0;
+  const current2 = todos.find((t) => t.status === "in_progress");
+  return {
+    done: doneCount(todos),
+    total: todos.length,
+    ...current2 ? { current: clip(current2.text, CHECKLIST_TEXT_MAX).text } : {},
+    ...checklistCut(todos) ? { cut: true } : {}
+  };
+}
+function toPhoneSession(s, readAt2, checklist) {
   const pending = toPhoneRequest(s, SNAPSHOT_BODY_MAX);
   return {
     id: s.id,
@@ -6222,13 +6256,24 @@ function toPhoneSession(s, readAt2) {
     lastActivityAt: s.lastActivityAt,
     // Topics are already cut to TOPIC_MAX where they are set; clipped again so no source can swell a snapshot.
     ...s.topic !== void 0 ? { topic: clip(s.topic, TOPIC_MAX).text } : {},
-    ...pickSet(s, ["repo", "branch", "worktree", "role", "roleLabel", "team", "context", "relieves"]),
+    ...pickSet(s, ["repo", "branch", "worktree", "role", "roleLabel", "team", "context", "relieves", "exitedAt"]),
+    // Known up front: the phone shows neither Close nor Resume for it, rather than learning it from a refusal.
+    ...s.source === "hook_only" ? { readOnly: true } : {},
     // Its relief's state only (context handover spec §3.2): the phone shows it, the PC starts it.
     ...s.handover ? { handover: { state: s.handover.state, ...s.handover.toName ? { toName: s.handover.toName.slice(0, 80) } : {} } } : {},
+    // Its model, effort and the change waiting for its next free moment (#58), cut to the bounds of a model id and an effort.
+    ...s.model !== void 0 ? { model: clip(s.model, MODEL_MAX).text } : {},
+    ...s.effort !== void 0 ? { effort: clip(s.effort, EFFORT_MAX).text } : {},
+    ...s.modelNext ? { modelNext: {
+      ...s.modelNext.model !== void 0 ? { model: clip(s.modelNext.model, MODEL_MAX).text } : {},
+      ...s.modelNext.effort !== void 0 ? { effort: clip(s.modelNext.effort, EFFORT_MAX).text } : {}
+    } } : {},
+    ...canSwitch(s) ? { canSwitch: true } : {},
     helpers: s.helpers.map((h) => ({ id: h.id, kind: h.kind, task: h.task, state: h.state, ...pickSet(h, ["finishedAt"]) })),
     // A preview only: the whole reply is in the thread.
     ...s.lastReply ? { lastReply: { text: clip(s.lastReply.text, TOOL_TEXT_MAX).text, at: s.lastReply.at, ...pickSet(s.lastReply, ["plan"]) } } : {},
     ...pending ? { pending } : {},
+    ...checklist ? { checklist } : {},
     unread: !!s.lastReply && s.lastReply.at > readAt2
   };
 }
@@ -6449,10 +6494,39 @@ function toPhoneTask(x, owner, teamName) {
   };
 }
 var phoneTasks = (tasks, now) => tasks.filter((x) => x.giver === LEDGE_GIVER && (!taskClosed(x) || !x.seen && now - Date.parse(x.updatedAt) < 864e5)).slice(-200);
+var MODEL_MAX = 200;
+var EFFORT_MAX = 20;
+var MODELS_MAX = 40;
+function canSwitch(s) {
+  return s.source === "launcher" && s.state !== "exited";
+}
+function toPhoneModels(models) {
+  const out = [];
+  for (const m of models) {
+    if (out.length >= MODELS_MAX) break;
+    const efforts = m.efforts?.filter((e) => EffortSchema.safeParse(e).success).slice(0, 8);
+    const c = PhoneModelChoiceSchema.safeParse({
+      id: m.id,
+      label: clip(m.label, 80).text,
+      ...m.description !== void 0 ? { description: clip(m.description, 200).text } : {},
+      ...efforts ? { efforts } : {},
+      ...pickSet(m, ["defaultEffort", "isDefault"])
+    });
+    if (c.success) out.push(c.data);
+  }
+  return out;
+}
 
 // src/mobile/teamsOps.ts
 var FAILED = { status: "failed" };
 var invalid = { status: "rejected", reason: "invalid" };
+function withSeats(models) {
+  const seats = (models ?? []).flatMap((x) => {
+    if (x.code) return [{ role: x.role, session: x.session, status: "refused", reason: x.code }];
+    return x.when ? [{ role: x.role, session: x.session, status: x.when === "now" ? "applied" : "scheduled" }] : [];
+  });
+  return seats.length ? { models: seats } : {};
+}
 function createTeamsOps(deps) {
   const listing = async () => {
     let found;
@@ -6506,10 +6580,12 @@ function createTeamsOps(deps) {
         if (!m.code) return true;
         if (m.code === "missing") return FAILED;
         return { status: "rejected", reason: m.code };
-      case "team.changed":
+      case "team.changed": {
         if (m.rid !== rid) return void 0;
-        if (m.reason && m.team && type === "team.compose") return { status: "applied", reason: "seat_failed" };
-        return !m.reason;
+        const seats = withSeats(m.models);
+        if (m.reason && m.team && type === "team.compose") return { status: "applied", reason: "seat_failed", ...seats };
+        return m.reason ? FAILED : { status: "applied", ...seats };
+      }
       case "team.launched":
         return m.rid === rid ? true : void 0;
       case "team.failed":
@@ -6704,12 +6780,14 @@ function verifyAssertion(a, cred, rp, challenge) {
 // src/mobile/gateway.ts
 var FLUSH_BEFORE_REVOKE_MS = 5e3;
 var REQUEST_NAME = /^[a-z][a-z.]{0,39}$/;
+var MODELS_WAIT_MS = 2e4;
 function createPhoneGateway(deps) {
   const { mobile, log: log2 } = deps;
   const startedAt = new Date(deps.now ? deps.now() : Date.now()).toISOString();
   const registry = new OperationRegistry();
   const followers = /* @__PURE__ */ new Map();
   let stopped2 = false;
+  const modelFailures = /* @__PURE__ */ new Map();
   const follower = (deviceId) => {
     let f = followers.get(deviceId);
     if (!f) followers.set(deviceId, f = { subscribed: false, watching: null, reads: /* @__PURE__ */ new Map(), visible: false });
@@ -6752,7 +6830,17 @@ function createPhoneGateway(deps) {
     const s = deps.session(id);
     return s && !isArchived(s) ? s : void 0;
   };
-  const projected = (deviceId, s) => toPhoneSession(s, followers.get(deviceId)?.reads.get(s.id) ?? startedAt);
+  const checklists = /* @__PURE__ */ new Map();
+  const computeChecklist = (id) => {
+    const todos = latestTodos(deps.thread(id) ?? []);
+    return { list: toPhoneChecklist(todos), summary: checklistSummary(todos) };
+  };
+  const checklistOf = (id) => {
+    let c = checklists.get(id);
+    if (!c) checklists.set(id, c = computeChecklist(id));
+    return c;
+  };
+  const projected = (deviceId, s) => toPhoneSession(s, followers.get(deviceId)?.reads.get(s.id) ?? startedAt, checklistOf(s.id).summary);
   const pushStatus = (deviceId) => {
     const key = mobile.relayPushKey();
     if (key === null) return "unavailable";
@@ -6764,14 +6852,15 @@ function createPhoneGateway(deps) {
     const push2 = pushStatus(deviceId);
     const f = followers.get(deviceId);
     if (f) f.pushStatus = push2;
-    return {
+    const message = {
       type: "snapshot",
       protocol: PHONE_PROTOCOL,
       sessions: deps.sessions().filter((s) => !isArchived(s)).map((s) => projected(deviceId, s)),
       capabilities: capabilities(),
-      daemon: { version: deps.version, boot: deps.boot, name: clip(hostname(), 40).text, ...teamsOps ? { teams: true } : {}, ...deps.pc?.canUpdate ? { update: true } : {}, ...deps.pc?.canRestart ? { restart: true } : {} },
+      daemon: { version: deps.version, boot: deps.boot, name: clip(hostname(), 40).text, ...teamsOps ? { teams: true } : {}, ...deps.pc?.canUpdate ? { update: true } : {}, ...deps.pc?.canRestart ? { restart: true } : {}, checklist: true, ...deps.closeSession ? { sessionClose: true } : {} },
       device: { confirm: deps.credential(deviceId) !== null, push: push2, ...deps.chats ? { chat: true } : {}, ...deps.contextNear ? { contextNear: deps.contextNear() } : {} }
     };
+    return deps.models ? { ...message, daemon: { ...message.daemon, models: true } } : message;
   };
   const phoneTeams = () => (deps.teams?.() ?? []).flatMap((t) => {
     const x = toPhoneTeam(t, deps.tasks?.() ?? [], deps.projectName ?? (() => null));
@@ -6793,6 +6882,8 @@ function createPhoneGateway(deps) {
       if (followers.get(deviceId)?.subscribed) {
         outbox.push(deviceId, snapshot(deviceId), "snapshot");
         teamsAndTasks(deviceId);
+        const watching = followers.get(deviceId)?.watching;
+        if (watching) outbox.push(deviceId, { type: "session.checklist", id: watching, checklist: checklistOf(watching).list }, `session.checklist:${watching}`);
       }
     },
     log: log2,
@@ -6801,9 +6892,27 @@ function createPhoneGateway(deps) {
   const push = (deviceId, msg, key) => {
     if (!stopped2) outbox.push(deviceId, msg, key);
   };
-  const result = (deviceId, op, status, reason) => {
+  const replayModelFailures = (deviceId) => {
+    for (const [id, f] of modelFailures) if (live3(id)) push(deviceId, { type: "session.model.failed", id, reason: f.reason });
+  };
+  const keepModelFailure = (m) => {
+    if (m.type === "session.removed") {
+      modelFailures.delete(m.id);
+      return;
+    }
+    if (m.type === "session.updated") {
+      const f = modelFailures.get(m.session.id);
+      if (f && (isArchived(m.session) || f.model !== m.session.model || f.effort !== m.session.effort)) modelFailures.delete(m.session.id);
+      return;
+    }
+    if (m.type !== "error" || m.request !== "session.model" || m.id === void 0) return;
+    const reason = ModelRefusalSchema.safeParse(m.code);
+    const s = live3(m.id);
+    if (reason.success && s) modelFailures.set(m.id, { reason: reason.data, model: s.model, effort: s.effort });
+  };
+  const result = (deviceId, op, status, reason, models, how) => {
     if (stopped2 || !approved(deviceId)) return;
-    push(deviceId, { type: "operation.result", op, status, ...reason ? { reason } : {} });
+    push(deviceId, { type: "operation.result", op, status, ...reason ? { reason } : {}, ...models ? { models } : {}, ...how ? { how } : {} });
   };
   const needsAssertion = (msg, s) => {
     if (msg.type === "session.decide") return msg.decision !== "deny" && riskOf2(s)?.risk !== "low";
@@ -6865,6 +6974,9 @@ function createPhoneGateway(deps) {
         return s.pending.requestId === msg.requestId ? void 0 : { status: "rejected", reason: "stale" };
       case "session.interrupt":
         return s.tmuxSession || backendOf(s) === "omp-rpc" ? void 0 : { status: "rejected", reason: "read_only" };
+      case "session.model":
+        if (canSwitch(s)) return void 0;
+        return { status: "rejected", reason: s.state === "exited" ? "ended" : "not_launched" };
     }
   };
   const local = (msg) => {
@@ -6877,6 +6989,8 @@ function createPhoneGateway(deps) {
         return { type: "session.answer", id: msg.id, requestId: msg.requestId, answers: msg.answers, ...msg.cancel ? { cancel: true } : {} };
       case "session.interrupt":
         return { type: "session.interrupt", id: msg.id };
+      case "session.model":
+        return { type: "session.model", id: msg.id, model: msg.model, effort: msg.effort };
     }
   };
   const outcomeOf = (code) => {
@@ -6985,6 +7099,39 @@ function createPhoneGateway(deps) {
       throw e;
     }
   };
+  const sessionSubject = (id) => `session:${id}`;
+  const sessionEnd = async (deviceId, msg) => {
+    const close = deps.closeSession;
+    if (!close) return { status: "rejected", reason: "unavailable" };
+    const closing = msg.type === "session.close";
+    const s = live3(msg.id);
+    if (!s) return { status: "rejected", reason: "unknown_session" };
+    if (s.source === "hook_only") return { status: "rejected", reason: "read_only" };
+    if (closing && s.state === "exited") return { status: "rejected", reason: "ended" };
+    if (!closing && s.state !== "exited") return { status: "rejected", reason: "busy" };
+    if (deps.credential(deviceId) === null) return { status: "rejected", reason: "confirm_required" };
+    const refused = checkAssertion(deviceId, msg.assertion, closing ? "close" : "act", sessionSubject(msg.id));
+    if (refused) return refused;
+    if (!closing) {
+      let error;
+      await deps.dispatch({ type: "session.resume", id: msg.id }, (m) => {
+        if (m.type === "error" && m.request === "session.resume") error ??= { code: m.code };
+      });
+      if (!error) return { status: "applied" };
+      return error.code === "no_conversation" ? { status: "rejected", reason: "no_conversation" } : outcomeOf(error.code);
+    }
+    try {
+      const { how } = await close(msg.id);
+      log2(`phone: device ${deviceId} closed ${msg.id} (${how})`);
+      return { status: "applied", how };
+    } catch (e) {
+      if (live3(msg.id)?.state === "exited") return { status: "rejected", reason: "ended" };
+      const code = RefusalCodeSchema.safeParse(e instanceof Error ? e.code : void 0);
+      if (code.success) return { status: "rejected", reason: code.data };
+      log2(`phone session.close failed (${e instanceof Error ? e.name : "error"})`);
+      return { status: "failed" };
+    }
+  };
   const ask = async (out, ok2, opts = {}) => {
     let outcome;
     await deps.dispatch(out, (m) => {
@@ -6998,6 +7145,41 @@ function createPhoneGateway(deps) {
     });
     return outcome ?? opts.silent ?? { status: "applied" };
   };
+  const modelChange = async (out) => {
+    let when;
+    let refusal2;
+    await deps.dispatch(out, (m) => {
+      if (m.type === "session.model.accepted" && m.id === out.id) when ??= m.when;
+      if (m.type === "error" && m.request === "session.model" && (m.id === void 0 || m.id === out.id)) refusal2 ??= { code: m.code };
+    });
+    if (when) modelFailures.delete(out.id);
+    if (when) return when === "turn" ? { status: "applied", reason: "scheduled" } : { status: "applied" };
+    const model = ModelRefusalSchema.safeParse(refusal2?.code);
+    if (model.success) return { status: "rejected", reason: model.data };
+    const known2 = RefusalCodeSchema.safeParse(refusal2?.code);
+    return known2.success ? { status: "rejected", reason: known2.data } : { status: "failed" };
+  };
+  const modelsList = async (deviceId, tool) => {
+    const requestId = randomUUID5();
+    let listing;
+    let timer;
+    try {
+      await Promise.race([
+        deps.dispatch({ type: "models.list", requestId, tool }, (m) => {
+          if (m.type === "models.listing" && m.requestId === requestId) listing ??= m;
+        }),
+        new Promise((r) => {
+          timer = setTimeout(r, MODELS_WAIT_MS);
+        })
+      ]);
+    } catch (e) {
+      log2(`phone models.list failed (${e instanceof Error ? e.name : "error"})`);
+    } finally {
+      clearTimeout(timer);
+    }
+    if (!listing) return push(deviceId, { type: "models.listing", tool, models: [], error: true });
+    push(deviceId, { type: "models.listing", tool, models: toPhoneModels(listing.models), ...listing.error !== void 0 ? { error: true } : {} });
+  };
   const chatTeam = async (deviceId, msg) => {
     const turn = ownTurn(deviceId, msg.qid);
     if (!turn?.team || !deps.teams) return { status: "rejected", reason: "unknown_session" };
@@ -7075,9 +7257,11 @@ function createPhoneGateway(deps) {
     if (msg.type === "chat.launch") return chatLaunch(deviceId, msg);
     if (msg.type === "chat.close") return chatClose(deviceId, msg);
     if (msg.type === "chat.act") return chatAct(deviceId, msg);
+    if (msg.type === "session.close" || msg.type === "session.resume") return sessionEnd(deviceId, msg);
     const refused = precheck(deviceId, msg);
     if (refused) return refused;
     const out = local(msg);
+    if (out.type === "session.model") return modelChange(out);
     let error;
     await deps.dispatch(out, (m) => {
       if (m.type === "error" && (m.request === void 0 || m.request === out.type)) error ??= { code: m.code };
@@ -7087,7 +7271,7 @@ function createPhoneGateway(deps) {
   const write = async (deviceId, msg) => {
     const begun = registry.begin(deviceId, msg.op, fingerprint(msg));
     if (begun.kind === "conflict") return result(deviceId, msg.op, "rejected", "conflict");
-    if (begun.kind === "replay") return result(deviceId, msg.op, begun.record.status, begun.record.reason);
+    if (begun.kind === "replay") return result(deviceId, msg.op, begun.record.status, begun.record.reason, begun.record.models, begun.record.how);
     let outcome;
     try {
       result(deviceId, msg.op, "received");
@@ -7096,8 +7280,8 @@ function createPhoneGateway(deps) {
       log2(`phone ${msg.type} failed (${e instanceof Error ? e.name : "error"})`);
       outcome = { status: "failed" };
     }
-    registry.finish(msg.op, outcome.status, outcome.reason);
-    result(deviceId, msg.op, outcome.status, outcome.reason);
+    registry.finish(msg.op, outcome.status, outcome.reason, outcome.models, outcome.how);
+    result(deviceId, msg.op, outcome.status, outcome.reason, outcome.models, outcome.how);
     if (msg.type === "credential.register" && outcome.status === "applied" && approved(deviceId)) push(deviceId, snapshot(deviceId), "snapshot");
     if (msg.type === "device.forget" && outcome.status === "applied") {
       let timer;
@@ -7184,13 +7368,19 @@ function createPhoneGateway(deps) {
       case "presence":
         follower(deviceId).visible = msg.visible;
         return;
+      case "models.list":
+        if (!deps.models) return;
+        void modelsList(deviceId, msg.tool).catch((e) => log2(`phone models.list failed (${e instanceof Error ? e.name : "error"})`));
+        return;
       case "snapshot.request":
         follower(deviceId).subscribed = true;
         push(deviceId, snapshot(deviceId), "snapshot");
+        replayModelFailures(deviceId);
         return teamsAndTasks(deviceId);
       case "session.thread": {
         if (!live3(msg.id)) return push(deviceId, { type: "error", code: "unknown_session", request: msg.type });
-        return push(deviceId, { type: "session.thread", id: msg.id, ...toPhoneThread(deps.thread(msg.id) ?? []) });
+        push(deviceId, { type: "session.thread", id: msg.id, ...toPhoneThread(deps.thread(msg.id) ?? []) });
+        return push(deviceId, { type: "session.checklist", id: msg.id, checklist: checklistOf(msg.id).list }, `session.checklist:${msg.id}`);
       }
       case "session.pending": {
         const session = live3(msg.id);
@@ -7228,6 +7418,14 @@ function createPhoneGateway(deps) {
           const challenge = deps.challenges.issue({ deviceId, purpose: "launch", subject: msg.qid });
           return push(deviceId, { type: "confirm.challenge", purpose: "launch", challenge, rpId: rp.rpId, credentialId: cred.id, expiresInMs: CHALLENGE_TTL_MS });
         }
+        if ((msg.purpose === "close" || msg.purpose === "act") && msg.qid === void 0 && msg.id !== void 0) {
+          if (!deps.closeSession) return invalid2();
+          if (!live3(msg.id)) return push(deviceId, { type: "error", code: "unknown_session", request: msg.type });
+          const cred = deps.credential(deviceId);
+          if (!cred || cred.rpId !== rp.rpId) return invalid2();
+          const challenge = deps.challenges.issue({ deviceId, purpose: msg.purpose, subject: sessionSubject(msg.id) });
+          return push(deviceId, { type: "confirm.challenge", purpose: msg.purpose, challenge, rpId: rp.rpId, credentialId: cred.id, expiresInMs: CHALLENGE_TTL_MS });
+        }
         if (msg.purpose === "close") {
           if (msg.qid === void 0 || !ownTurn(deviceId, msg.qid)) return invalid2();
           const cred = deps.credential(deviceId);
@@ -7291,7 +7489,8 @@ function createPhoneGateway(deps) {
       const request = typeof type === "string" && REQUEST_NAME.test(type) ? type : void 0;
       log2(`phone message refused: ${request ?? "?"}`);
       const op = OperationIdSchema.safeParse(raw?.op);
-      if ((request !== void 0 && TEAMS_OPERATION_TYPES.includes(request) || request === "push.subscribe" || request === "chat.launch" || request === "chat.close" || request === "chat.act" || request === "chat.ignore" || request === "chat.team" || request === "chat.task" || request === "team.resume" || request === "task.seen") && op.success && approved(deviceId)) return push(deviceId, { type: "operation.result", op: op.data, status: "rejected", reason: "invalid" });
+      if (request === "session.model" && op.success && approved(deviceId)) return push(deviceId, { type: "operation.result", op: op.data, status: "rejected", reason: "invalid" });
+      if ((request !== void 0 && TEAMS_OPERATION_TYPES.includes(request) || request === "push.subscribe" || request === "chat.launch" || request === "chat.close" || request === "chat.act" || request === "chat.ignore" || request === "chat.team" || request === "chat.task" || request === "team.resume" || request === "task.seen" || request === "session.close" || request === "session.resume") && op.success && approved(deviceId)) return push(deviceId, { type: "operation.result", op: op.data, status: "rejected", reason: "invalid" });
       return push(deviceId, { type: "error", code: "invalid", ...request !== void 0 ? { request } : {} });
     }
     const msg = parsed.data;
@@ -7324,17 +7523,40 @@ function createPhoneGateway(deps) {
     }
   };
   const removed = (id) => {
+    checklists.delete(id);
     for (const [deviceId, f] of followers) {
       f.reads.delete(id);
       if (f.watching === id) f.watching = null;
       if (f.subscribed) push(deviceId, { type: "session.removed", id });
     }
   };
+  const checklistChanged = (id, item) => {
+    if (item.kind !== "tool" || item.helperId !== void 0 || !TODO_TOOLS.has(item.tool) || !checklists.has(id)) return;
+    const before = checklists.get(id);
+    const now = computeChecklist(id);
+    checklists.set(id, now);
+    if (JSON.stringify(now.list) !== JSON.stringify(before.list)) {
+      for (const [deviceId, f] of followers) if (f.watching === id) push(deviceId, { type: "session.checklist", id, checklist: now.list }, `session.checklist:${id}`);
+    }
+    const s = live3(id);
+    if (s && JSON.stringify(now.summary) !== JSON.stringify(before.summary)) {
+      for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "session.updated", session: projected(deviceId, s) }, `session.updated:${id}`);
+    }
+  };
   const unsubscribeMessage = mobile.onMessage(receive);
   const unsubscribeChange = mobile.onChange(pruneRevoked);
   return {
     forward(m) {
-      if (stopped2 || followers.size === 0) return;
+      if (!stopped2) try {
+        keepModelFailure(m);
+      } catch (e) {
+        log2(`phone model failure of ${m.type} failed (${e instanceof Error ? e.name : "error"})`);
+      }
+      if (stopped2) return;
+      if (followers.size === 0) {
+        checklists.clear();
+        return;
+      }
       try {
         switch (m.type) {
           case "session.updated":
@@ -7345,6 +7567,12 @@ function createPhoneGateway(deps) {
             return;
           case "session.removed":
             return removed(m.id);
+          case "error": {
+            const reason = ModelRefusalSchema.safeParse(m.code);
+            if (m.request !== "session.model" || m.id === void 0 || !reason.success || !live3(m.id)) return;
+            for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "session.model.failed", id: m.id, reason: reason.data });
+            return;
+          }
           case "context.prefs":
             for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, snapshot(deviceId), "snapshot");
             return;
@@ -7376,6 +7604,7 @@ function createPhoneGateway(deps) {
             }
             return;
           case "session.thread.item": {
+            checklistChanged(m.id, m.item);
             const watchers = [...followers].filter(([, f]) => f.watching === m.id);
             if (watchers.length === 0) return;
             const { item, cut: cut2 } = toPhoneItem(m.item);
@@ -8156,6 +8385,7 @@ async function startServer(opts) {
   async function applyOmpModel(s) {
     const next2 = s.modelNext;
     typing.add(s.id);
+    applyingModel.set(s.id, null);
     try {
       await omp.setModel(s.id, next2);
       log(`model of ${s.id} is now ${next2.model ?? "unchanged"}${next2.effort ? ` \xB7 ${next2.effort}` : ""}`);
@@ -8163,32 +8393,91 @@ async function startServer(opts) {
       const message = e.message;
       log(`model change of ${s.id} failed: ${message}`);
       store.patch(s.id, { modelNext: void 0 });
-      broadcast({ type: "error", id: s.id, message, request: "session.model" });
+      modelFailed(s.id, message, "refused");
     } finally {
       typing.delete(s.id);
+      afterModelApply(s.id);
+    }
+  }
+  const modelFailed = (id, message, code) => broadcast({ type: "error", id, message, request: "session.model", code });
+  const applyingModel = /* @__PURE__ */ new Map();
+  function afterModelApply(id) {
+    const later = applyingModel.get(id);
+    applyingModel.delete(id);
+    const s = store.get(id);
+    if (!later || !s) return;
+    const refusal2 = modelRefusal(s, later.effort ?? null);
+    if (refusal2) {
+      store.patch(id, { modelNext: void 0 });
+      return modelFailed(id, refusal2.message, refusal2.refused);
     }
+    store.patch(id, { modelNext: later.model === s.model && later.effort === s.effort ? void 0 : later });
+  }
+  function canApplyNow(id) {
+    return free(store.get(id)) && !typing.has(id) && !closing.has(id) && !cardThreads.queuedRelays().some((q) => q.relay.id === id);
+  }
+  function modelRefusal(s, effort) {
+    const inPlace = backendOf(s) === "omp-rpc";
+    if (s.source === "hook_only") return { refused: "not_launched", message: READ_ONLY2 };
+    if (s.state === "exited") return { refused: "ended", message: "the session has ended" };
+    if (!resumeKey(s)) return { refused: "no_conversation", message: "no conversation to resume" };
+    if (inPlace && !omp.isLive(s.id)) return { refused: "not_running", message: "the session is not running" };
+    if (effort && !inPlace && !EFFORT_ARGS[s.tool]) return { refused: "effort_in_model", message: `${s.tool} takes its effort in the model id` };
+    return null;
+  }
+  async function changeModel(id, model, effort) {
+    const s = store.get(id);
+    if (!s) throw unknownSession();
+    const refusal2 = modelRefusal(s, effort);
+    if (refusal2) return refusal2;
+    const next2 = { ...model ? { model } : {}, ...effort ? { effort } : {} };
+    if (applyingModel.has(id)) {
+      applyingModel.set(id, next2);
+      store.patch(id, { modelNext: next2 });
+      return { when: "turn" };
+    }
+    if (next2.model === s.model && next2.effort === s.effort) {
+      if (s.modelNext) store.patch(id, { modelNext: void 0 });
+      return { when: "none" };
+    }
+    const when = canApplyNow(id) ? "now" : "turn";
+    store.patch(id, { modelNext: next2 });
+    return { when };
   }
   async function applyModelNext(id) {
     const s = store.get(id);
-    if (!s?.modelNext || !free(s) || typing.has(id) || closing.has(id) || cardThreads.queuedRelays().some((q) => q.relay.id === id)) return;
+    if (!s?.modelNext || !canApplyNow(id)) return;
     if (backendOf(s) === "omp-rpc") return applyOmpModel(s);
-    const key = resumeKey(s);
-    if (!key || s.source !== "launcher") {
+    const { model, effort } = s.modelNext;
+    const refusal2 = modelRefusal(s, effort ?? null);
+    if (refusal2) {
       store.patch(id, { modelNext: void 0 });
-      return;
+      return modelFailed(id, refusal2.message, refusal2.refused);
     }
-    const { model, effort } = s.modelNext;
+    const key = resumeKey(s);
     typing.add(id);
+    applyingModel.set(id, null);
     try {
       for (const [k, at] of respawned) if (Date.now() - at > RESPAWN_HOOKS_MS) respawned.delete(k);
       respawned.set(id, Date.now());
       await endSession(s);
       const ended = store.get(id);
-      if (!ended || ended.archivedAt !== void 0) return;
+      if (!ended || ended.archivedAt !== void 0) {
+        store.patch(id, { modelNext: void 0 });
+        return;
+      }
       const refused = await respawn({ ...ended, modelNext: void 0 }, key, model, effort);
-      if (refused) log(`model change of ${id} failed: ${refused}`);
+      if (refused) {
+        log(`model change of ${id} failed: ${refused}`);
+        modelFailed(id, refused, "restart_failed");
+      }
+    } catch (e) {
+      log(`model change of ${id} failed: ${e.message}`);
+      store.patch(id, { modelNext: void 0 });
+      modelFailed(id, e.message, "restart_failed");
     } finally {
       typing.delete(id);
+      afterModelApply(id);
     }
   }
   const chatLaunches = /* @__PURE__ */ new Set();
@@ -8451,6 +8740,26 @@ ${now2.prompt}` });
     for (const id of leaverRefused) if (!leaving.has(id)) leaverRefused.delete(id);
   }
   const seatsInFlight = /* @__PURE__ */ new Set();
+  async function seatModels(before, team) {
+    const out = [];
+    const roles = listDefinitions(team.cwd).roles;
+    for (const seat of team.seats) {
+      const was = before.get(seat.role);
+      if (!was || seat.leaving || was.tool !== seat.tool || was.model === seat.model && was.effort === seat.effort) continue;
+      const holder = seat.sessionId ? store.get(seat.sessionId) : void 0;
+      if (!holder) continue;
+      const resolved = resolveSeats([seat], roles);
+      const want = "unknown" in resolved ? seat : resolved[0];
+      try {
+        const r = await changeModel(holder.id, want.model ?? null, want.effort ?? null);
+        if ("refused" in r) out.push({ role: seat.role, session: holder.id, code: r.refused });
+        else if (r.when !== "none") out.push({ role: seat.role, session: holder.id, when: r.when });
+      } catch (e) {
+        log(`team ${team.id}: model of @${seat.role} (${holder.id}) not changed: ${e.message}`);
+      }
+    }
+    return out;
+  }
   async function composeTeam(msg) {
     const changed = (extra) => ({ type: "team.changed", rid: msg.rid, ...extra });
     const t = teams.get(msg.team);
@@ -8467,12 +8776,14 @@ ${now2.prompt}` });
     if (busy) return changed({ reason: `@${busy.role} : une op\xE9ration est d\xE9j\xE0 en cours sur ce si\xE8ge` });
     for (const k of keys) seatsInFlight.add(k);
     try {
+      const before = new Map(t.seats.map((s) => [s.role, s]));
       const r = teams.compose(msg.team, msg.seats);
       if (typeof r === "string") return changed({ reason: r });
       log(`team ${t.id} composed: +${r.added.join(",") || "-"} \u2212${r.removed.join(",") || "-"}`);
       const failed = r.added.length ? await startSeats(r.team, msg.seats.filter((s) => r.added.includes(s.role))) : null;
       closeLeavers();
-      return changed({ team: teams.get(t.id), ...failed ? { reason: failed } : {} });
+      const models2 = await seatModels(before, teams.get(t.id));
+      return changed({ team: teams.get(t.id), ...failed ? { reason: failed } : {}, ...models2.length ? { models: models2 } : {} });
     } finally {
       for (const k of keys) seatsInFlight.delete(k);
     }
@@ -8807,27 +9118,16 @@ ${now2.prompt}` });
         if (!s) return refuse(unknownSession(), msg.id);
         if (s.state !== "exited") return refuse(new Refusal("the session is still running", "busy"), msg.id);
         const key = resumeKey(s);
-        if (!key) return refuse("no conversation to resume", msg.id);
+        if (!key) return refuse({ message: "no conversation to resume", code: "no_conversation" }, msg.id);
         const refused = await respawn(s, key, s.model, s.effort);
         if (refused) refuse(refused, msg.id);
         return;
       }
       case "session.model": {
-        const s = store.get(msg.id);
-        if (!s) return refuse("unknown session", msg.id);
-        if (s.source === "hook_only") return refuse(READ_ONLY2, msg.id);
-        if (s.state === "exited") return refuse("the session has ended", msg.id);
-        if (!resumeKey(s)) return refuse("no conversation to resume", msg.id);
-        if (backendOf(s) === "omp-rpc" && !omp.isLive(s.id)) return refuse("the session is not running", msg.id);
-        if (msg.effort && backendOf(s) !== "omp-rpc" && !EFFORT_ARGS[s.tool]) return refuse(`${s.tool} takes its effort in the model id`, msg.id);
-        const next2 = { ...msg.model ? { model: msg.model } : {}, ...msg.effort ? { effort: msg.effort } : {} };
-        if (next2.model === s.model && next2.effort === s.effort) {
-          if (s.modelNext) store.patch(msg.id, { modelNext: void 0 });
-          return;
-        }
-        store.patch(msg.id, { modelNext: next2 });
-        await applyModelNext(msg.id);
-        return;
+        if (!store.get(msg.id)) return refuse("unknown session", msg.id);
+        const r = await changeModel(msg.id, msg.model, msg.effort);
+        if ("refused" in r) return refuse({ message: r.message, code: r.refused }, msg.id);
+        return reply({ type: "session.model.accepted", id: msg.id, when: r.when });
       }
       case "session.delete": {
         const s = store.get(msg.id);
@@ -9093,7 +9393,7 @@ ${now2.prompt}` });
     },
     onChatEnd: (deviceId, end) => notifyChatEnd?.(deviceId, end.code),
     version: opts.daemon?.version ?? "unknown",
-    boot: randomUUID5(),
+    boot: randomUUID6(),
     log,
     now,
     rp: () => rpOf(mobile.state().relayUrl),
@@ -9107,6 +9407,10 @@ ${now2.prompt}` });
     // A project's folder is its first local repo: only a project with one can be named by the phone.
     projectByName: (name) => projects.projects.find((p) => p.name === name && p.repos.some((r) => r.machine === "local"))?.id ?? null,
     teamCatalog: true,
+    // The phone's model switch (#58): `session.model` answers with a code, and `models.list` asks this machine's agents.
+    models: true,
+    // A session's « Fermer » on the phone: the cards' close, so a close under way (a card's, another phone's) is shared.
+    closeSession: closeForCard,
     // The phone's « Mettre à jour le PC » and « Redémarrer le daemon »: the updater Desktop's `update.daemon` uses, progress broadcast.
     ...opts.updater && opts.daemon ? {
       pc: {