@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/fleet-manager.js

@@ -1,10 +1,6 @@
-import { readInstalledBuild } from "./build-provenance.js";
-import { buildNativeFleetInstructions } from "./instructions.js";
-import { GENERAL_ROLE_INSTRUCTIONS } from "./general-role.js";
-import { NativePaneRecoveryError } from "./native-pane-recovery.js";
-import { nativePaneToolAvailable, nativePaneToolRefusal } from "./native-pane-tools.js";
-import { windowsAgentsFor } from "./windows-agents.js";
-import { AgentRuntimeChanges } from "./agent-runtime-change.js";
+import { QuotaNotices } from "./usage/quota-notices.js";
+import { quotaNoticeRule } from "./quota-notice-config.js";
+import { onUsageSnapshot } from "./usage/usage-api.js";
 import { supportsVerifiedKiroMigration, getCachedKiroCliCompatibility, kiroV1DbPath, kiroV2SessionsDir } from "./backend/kiro.js";
 import { listKiroV1Sessions, readKiroClassicLinks } from "./backend/kiro-identity.js";
 import { readKiroV1SavedModel } from "./backend/kiro-retired-model.js";
@@ -17,17 +13,10 @@ import { WorkingRecoveryCoordinator, WORKING_RECOVERY_KIND, buildWorkingRecovery
 import { PUBLIC_TUNNEL_TOKEN_ENV, PUBLIC_TUNNEL_TOKEN_HINT, normalizePublicTunnelToken } from "./public-tunnel-config.js";
 import { humanOwnerObjectId, webHumanOrigin } from "./human-delivery-receipts.js";
 import { SettingsBaselines } from "./settings-baseline.js";
-import { hubMembershipSettings } from "./hub-membership-settings.js";
-import { prepareSettingsEffect } from "./settings-effect.js";
-import { settingsDisplay } from "./settings-change.js";
-import { SettingsConfirmationError, SettingsConfirmationStore, settingsSourceLabel } from "./settings-confirmation.js";
+import { SettingsConfirmationStore, settingsSourceLabel } from "./settings-confirmation.js";
 import { SettingsHttpConfirmation } from "./settings-http-confirmation.js";
 import { SettingsControlServer } from "./settings-control.js";
-import { SettingsRouteLifetime } from "./settings-route-lifetime.js";
-import { GeneralManagedFileError } from "./runtime-general-protocol.js";
-import { GeneralBindings, generalBindingRevision, parseGeneralSwitchInput, switchGeneralLocation } from "./general-binding.js";
-import { confirmGeneralHostExit } from "./general-host-owner.js";
-import { settingsFingerprint, SettingsExecution, settingsRevision, noteSettingsWrite, settingsFileResource, assertSettingsLease, trySettingsLease, waitSettingsLease, settingsUndo, undoSettingsPaths } from "./settings-transaction.js";
+import { SettingsExecution, settingsRevision, noteSettingsWrite, settingsFileResource, assertSettingsLease, trySettingsLease, waitSettingsLease, settingsUndo, undoSettingsPaths } from "./settings-transaction.js";
 import { performance } from "node:perf_hooks";
 import { withSpawnHoldReply } from "./spawn-hold-reply.js";
 import { gatewayRequestContext } from "./web-request-context.js";
@@ -47,8 +36,6 @@ import { InstallStream } from "./install-stream.js";
 import { namedTestLane, runNamedLinkTest } from "./tunnel/named-link-test.js";
 import { daemonTopicMode, isWebOnlyFleetConfig } from "./web-only-fleet.js";
 import { OFFICE_SHARE_TUNNEL_DIR, OfficeShareService } from "./office-share-service.js";
-import { OfficeTalk } from "./office-talk.js";
-import { pairingSummary } from "./hub-pairing-summary.js";
 import { ALL_OFFICES, WHOLE_FLEET } from "./office-share.js";
 import { TunnelPurposeLane } from "./tunnel/purpose-lane.js";
 import { ManagedTunnel } from "./tunnel/manager.js";
@@ -59,7 +46,7 @@ import { ProfileControlServer } from "./profile-control.js";
 import { existsSync, readFileSync, mkdirSync, writeFileSync, unlinkSync, rmSync, readdirSync, renameSync, copyFileSync, chmodSync, statSync, realpathSync, lstatSync, closeSync } from "node:fs";
 import { atomicWriteFileSync } from "./atomic-write.js";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
-import { freemem, totalmem, homedir, hostname } from "node:os";
+import { freemem, totalmem, homedir } from "node:os";
 import { effectiveCpuCount } from "./cpu-quota.js";
 import { createServer } from "node:http";
 import { Worker } from "node:worker_threads";
@@ -85,11 +72,6 @@ import { tmuxExecHelper } from "./tmux-exec-helper.js";
 import { kiroLogGate } from "./kiro-log-gate.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-// Describe this running program, not files an updater may replace later. No reads on dashboard polls.
-const RUNNING_BUILD = readInstalledBuild();
-if (RUNNING_BUILD.source)
-    Object.freeze(RUNNING_BUILD.source);
-Object.freeze(RUNNING_BUILD);
 /** Fallback access policy for a channel with no `access:` block — open (no gate). */
 const DEFAULT_OPEN_ACCESS = { mode: "open", allowed_users: [], max_pending_codes: 0, code_expiry_minutes: 0 };
 import { STATUS_EMOJI_CONFIG_KEYS, STATUS_EMOJI_KEYS, STATUS_EMOJI_SUGGESTIONS, TELEGRAM_REACTION_EMOJIS, builtinStatusEmojis, customEmojiValue, emojiImageUrl, normalizeEmoji, previewStatusEmojis, reactionForm, reactionMatchKey, resolveStatusEmojis, statusAvoidList, statusEmojiProblem, statusMatchKey, statusMatchKeys, textForm, } from "./status-emojis.js";
@@ -107,8 +89,7 @@ import { startEventLoopWatch } from "./event-loop-watch.js";
 import { TmuxManager } from "./tmux-manager.js";
 import { AccessManager } from "./channel/access-manager.js";
 import { IpcClient } from "./channel/ipc-bridge.js";
-import { NativeDaemonClient } from "./native-daemon-client.js";
-import { usesChannelAddress, TOOLS } from "./channel/mcp-tools.js";
+import { usesChannelAddress } from "./channel/mcp-tools.js";
 import { ParkedNotices, PARKED_NOTICE_LEDGER_FILE } from "./parked-notices.js";
 import { formatFleetTime } from "./tz-utils.js";
 import { createAdapter } from "./channel/factory.js";
@@ -119,7 +100,6 @@ import { createBackend } from "./backend/factory.js";
 import { readEffortMetadata } from "./backend/effort-metadata.js";
 import { codexEffort, flagEffort } from "./backend/launch-effort.js";
 import { codexMetadataHomes, readCodexModelEffortLevels, resolveCodexLaunchModel } from "./backend/codex-metadata.js";
-import { readGrokModelCache } from "./backend/grok-model-cache.js";
 import { CLI_ENV_TTL_MS, isModelCompatible, noteResolvedBinary, resolveBinary, SYSINFO_BACKEND_IDS, UnsupportedCliError, ResumeBlockedError } from "./backend/types.js";
 import { createLogger, rotateLogIfNeeded } from "./logger.js";
 import { processAttachments } from "./channel/attachment-handler.js";
@@ -140,7 +120,6 @@ import { InstanceLifecycle, SupersededStartError, BACKEND_INSTALLATION_INFO, che
 import { TopicArchiver } from "./topic-archiver.js";
 import { StatuslineWatcher } from "./statusline-watcher.js";
 import { applyInstanceConfigPatch, outboundHandlers } from "./outbound-handlers.js";
-import { HUB_REPORT_TARGET } from "./hub-report-target.js";
 import { backendArgs, backendStep, joinBackendArgs, modelNameCarried, planDisplay } from "./backend-command.js";
 import { DeliveryOutbox, DEFAULT_REPLY_OBLIGATION_TTL_MS, isSilentScheduleDelivery } from "./delivery-outbox.js";
 // The target Daemon can legitimately wait 30 minutes for a busy pane before
@@ -209,24 +188,11 @@ export function applyTaskListCap(tasks, filterAssignee, filterStatus) {
     return tasks;
 }
 import { handleWebRequest, webPeerOf, broadcastSseEvent, broadcastToGuests, SSE_HEARTBEAT_MS } from "./web-api.js";
-import { windowsCliEnabled, closeWindowsBridge, inventoryProbed, LOCAL_WINDOWS_CLI_OFF } from "./windows-cli.js";
-import { nativeCliVersionState } from "./runtime-pane-native.js";
-import { localWindowsCliEnabled, remoteRuntimeEnabled, setConfiguredRuntimeSwitches, maxAgentsPerMachine } from "./runtime-switches.js";
-import { RuntimeInstallService } from "./runtime-install.js";
-import { RUNTIME_CREDENTIAL_CAPABILITY } from "./runtime-credential-profiles.js";
-import { RuntimeCoordinator } from "./runtime-coordinator.js";
-import { RuntimeWindowsBridge } from "./runtime-windows-bridge.js";
-import { FleetWindowsRuntime } from "./fleet-windows-runtime.js";
-import { NativeMcpSessions } from "./native-mcp.js";
-import { nativeProviderMcpSupported } from "./windows-cli-providers.js";
-import { isWindowsInstance, isNativePaneInstance, isNativeExecInstance, WINDOWS_CONFIG_REFUSED, nativeCredentialProfile } from "./native-instance-registry.js";
-import { createNativeWindowsInstance, updateNativeWindowsInstance } from "./native-instance-api.js";
-import { NativeInstanceConfigEdit, parseNativeInstanceCreate } from "./native-instance-input.js";
 import { LogService } from "./log-service.js";
 import { viewHistory } from "./view-history.js";
 import { WebChatHistory, WEB_CHAT_TEXT_MAX, isWebMessageId, newWebMessageId, webChatFrom } from "./web-chat-history.js";
 import { WEB_ECHO_COPIES_MAX, WEB_MIRROR_TIMEOUT_MS, webReactionEmoji, webReactionProblem } from "./web-reactions.js";
-import { WebChatDiskStore, isSafeInstanceDirName } from "./web-chat-store.js";
+import { WebChatDiskStore } from "./web-chat-store.js";
 import { SeenUsers, resolveMentions } from "./web-mentions.js";
 import { OPERATOR, WebPrefsStore } from "./web-prefs.js";
 import { agendVersion } from "./agent-whats-new.js";
@@ -257,7 +223,7 @@ import { discordGeneralChannelId } from "./discord-general.js";
 import { parseEnvText } from "./env-file.js";
 import { isDisallowedIntentsError, isRejectedTokenError } from "./discord-permissions.js";
 import { filterUsageProviders, formatDiscordUsageActivity, getUsageSnapshot, handleUsageRequest, isUsagePath, setCapacityLookup, usageProviderIdForBackend } from "./usage/usage-api.js";
-import { LOGIN_FLOWS, checkAuthStatus, checkAuthIdentity, authIdentitySupported, LOGIN_BACKEND_ALIASES } from "./login-flows.js";
+import { LOGIN_FLOWS, checkAuthStatus, LOGIN_BACKEND_ALIASES } from "./login-flows.js";
 import { LoginSession } from "./login-manager.js";
 import { runOnLoginShell } from "./login-shell.js";
 import { tightenInstanceDirs } from "./private-dir.js";
@@ -324,10 +290,8 @@ import { mayUseTool, resolveToolSet, scheduleOpRefusal, toolForIpcType, toolRefu
 import { authorizeSession, decideWebGate, loadOrCreateWebToken, readSessionCookies, readWebToken, sessionCookieUpgrade } from "./web-auth.js";
 import { bypassesWebGate, handleAuthRequest, serveGuestRefusedPage, serveSigninPage } from "./auth-api.js";
 import { isWebPageNavigation } from "./web-shell-routes.js";
-import { guestSessionPolicy, localSessionPolicy, sessionVia, tokenEpoch, WebSessionStore } from "./web-session.js";
+import { guestSessionPolicy, localSessionPolicy, tokenEpoch, WebSessionStore } from "./web-session.js";
 import { WebNotices, WEB_NOTICES_FILE } from "./web-notices.js";
-import { DeviceLoginRequests } from "./web-device-login.js";
-import { isOutsideLinkOwner, OUTSIDE_LINK_OWNER, OUTSIDE_LINK_RETRY_MS, OUTSIDE_OWN_CLOSES, outsideDuration, outsideTimer, TOTP_STEP_SECONDS, WEB_REMOTE_ACCESS_FILE, WebRemoteAccess } from "./web-remote-access.js";
 import { authorityNow, evaluateWebAuthority, HOST_OPERATOR, VERIFIED_SESSION_HOURS, webAuthorityPolicy } from "./authority/web-authority.js";
 import { AuthorityStateStore } from "./authority/authority-state.js";
 import { SessionAuthorizations } from "./authority/session-authorizations.js";
@@ -349,10 +313,9 @@ import { PROVIDER_SECRET_SPECS, PUBLIC_TUNNEL_SECRET_SPEC, providerSecretSpec, p
 const SELF_RESTART_DEADLINE_MS = 300_000;
 import { APPLY_FLEET_TARGET, ApplyJobStore, viewOf, } from "./apply-job.js";
 import { kiroHome } from "./backend/kiro-kas-store.js";
-import { CHAT_PROFILE_LOGIN_BACKENDS, credentialHomeSpec, credentialProfileHome, credentialProfileEnv, credentialProfileLogin, credentialProfileLoginCommand, credentialProfileStoreHome, credentialSwitchCarriesConversation, credentialSwitchStartsFresh, instanceCredentialProfile, listConfiguredProfiles } from "./backend/credential-profile.js";
+import { CHAT_PROFILE_LOGIN_BACKENDS, credentialHomeSpec, credentialProfileHome, credentialProfileLogin, credentialProfileLoginCommand, credentialProfileStoreHome, credentialSwitchCarriesConversation, credentialSwitchStartsFresh, instanceCredentialProfile, listConfiguredProfiles } from "./backend/credential-profile.js";
 import { carryClaudeConversation } from "./backend/claude-carry.js";
-import { classicProfile, mergeBackendOptions, profileKey, profileName, profileOf, readClassicBindings } from "./classic-bindings.js";
-import { ACCOUNT_CLIS, PROFILE_CLIS, buildAccountsView, profilesOnDisk, weeklyUsage } from "./accounts-view.js";
+import { mergeBackendOptions, profileKey, profileName, profileOf } from "./classic-bindings.js";
 import { classifyInstanceChange, CLASSIC_HOT_CONFIG_KEYS, HOT_INSTANCE_CONFIG_KEYS, hotConfigUpdate, } from "./instance-config-impact.js";
 import { cleanupWatchVerdict, formatRestartProgressCompletion, RestartProgress, } from "./restart-progress.js";
 import { FleetStartup } from "./fleet-startup.js";
@@ -805,1403 +768,7 @@ export class FleetManager {
     /** Live view of lifecycle.daemons — used throughout; not deprecated. */
     get daemons() { return this.lifecycle.daemons; }
     fleetConfig = null;
-    fleetWindowsRuntime = null;
-    nativeMcpStore = null;
-    paneManager = null;
-    localPaneRelay = null;
-    openingLocalPane = null;
-    runtimeHub = null;
-    runtimeInstall;
-    /** One service for the public installer routes and the administrator API: the hash the dashboard shows is the hash of what is sent. */
-    runtimeInstaller() { return this.runtimeInstall ??= new RuntimeInstallService(); }
-    runtimeExecutor = null;
-    runtimeStatusScheduled = false;
-    reconciledRemoteResults = new Set();
-    /** Machine credentials are separate from dashboard sessions and per-turn agent capabilities. */
-    runtimeCoordinator() {
-        if (!remoteRuntimeEnabled())
-            throw new Error("Remote runtimes are not enabled");
-        return this.runtimeHub ??= new RuntimeCoordinator(this.dataDir, {
-            handleMcp: (machineId, runId, body) => this.runtimeWindowsExecutor().mcp(machineId, runId, body),
-            handlePaneMcp: async (machineId, body, current) => (await this.nativePanes()).handle(machineId, body, current),
-            warn: (fields, message) => this.logger.warn(fields, message),
-            changed: event => {
-                if (event?.type === "machine" && this.runtimeHub?.machine(event.machineId)?.status !== "online") {
-                    for (const [name, config] of Object.entries(this.fleetConfig?.instances ?? {}))
-                        if (config.machine_id === event.machineId) {
-                            this.nativeMcpStore?.closeInstance(name);
-                            if (config.general_topic) {
-                                this.cancelPendingDeliveries(name);
-                                this.holdGeneralOldDeliveries(name);
-                            }
-                        }
-                    this.needsYou?.poke();
-                }
-                if (this.runtimeStatusScheduled || this.shuttingDown)
-                    return;
-                this.runtimeStatusScheduled = true;
-                queueMicrotask(() => {
-                    this.runtimeStatusScheduled = false;
-                    if (this.shuttingDown)
-                        return;
-                    try {
-                        this.fleetWindowsRuntime?.importHistory();
-                        for (const snapshot of this.runtimeHub?.tasks() ?? [])
-                            this.reconcileRemoteDelivery(snapshot.machineId, snapshot.task);
-                        this.emitSseEvent("status", this.getUiStatus());
-                        this.scheduleDeliveryOutboxPump();
-                    }
-                    catch (error) {
-                        this.logger.warn({ err: error }, "Runtime status reconciliation failed");
-                    }
-                });
-            },
-        });
-    }
-    runtimeWindowsExecutor() {
-        return this.runtimeExecutor ??= new RuntimeWindowsBridge(this, () => remoteRuntimeEnabled() && !this.shuttingDown ? this.runtimeCoordinator() : null);
-    }
-    /** Per-turn capabilities for native MCP, separate from browser and Linux-agent credentials. */
-    nativeMcpSessions() {
-        return this.nativeMcpStore ??= new NativeMcpSessions(this);
-    }
-    /** Retire only existing native capabilities; ordinary lifecycle changes do not instantiate the Windows path. */
-    invalidateNativeMcp(name) { this.nativeMcpStore?.closeInstance(name); }
-    /** The same instance registry and delivery entry point, with a native Windows execution adapter. */
-    nativeInstanceRuntime() {
-        return this.fleetWindowsRuntime ??= new FleetWindowsRuntime({
-            owner: this, fleet: () => this.fleetConfig, save: () => this.saveFleetConfig(), stopping: () => this.shuttingDown, history: this.webChatHistory,
-            openMcp: (instance, requestId, sandbox, stillCurrent) => this.healthServerListening
-                ? this.nativeMcpSessions().grant({ instance, requestId, sandbox, stillCurrent, endpoint: `http://127.0.0.1:${this.fleetConfig?.health_port ?? 19280}/agent` }) : null,
-            warn: (message, error) => this.logger.warn({ err: error }, message),
-            removed: name => this.nativeInstanceRemoved(name),
-            paneCurrent: name => this.daemons.get(name)?.nativePaneCurrent?.() === true,
-            machineAvailable: id => remoteRuntimeEnabled() && this.runtimeCoordinator().machine(id)?.status === "online",
-            machineGeneration: id => this.runtimeCoordinator().machine(id)?.bootId ?? null,
-            paneAvailable: id => this.runtimeCoordinator().machine(id)?.paneProtocol === 1,
-            validateMachine: (id, cli, sandbox, credentialProfile) => {
-                const machine = this.runtimeCoordinator().machine(id);
-                const provider = machine?.inventory?.clis.find(row => row.id === cli && row.runnable && row.supports.resume);
-                if (!machine || machine.status !== "online" || machine.platform !== "win32" || !provider)
-                    throw new Error("Choose an online runtime and an available CLI");
-                if (sandbox === "read-only" && !provider.readOnlySupport)
-                    throw new Error("This runtime CLI cannot enforce read-only execution");
-                if (credentialProfile !== undefined) {
-                    // Fail closed at selection time, not at the first message: an old Runtime would ignore the name and run another account.
-                    if (!machine.runtimeInfo?.capabilities.includes(RUNTIME_CREDENTIAL_CAPABILITY))
-                        throw new Error("This computer's Runtime is too old to choose a Claude account. Update the Runtime on that computer, then try again.");
-                    const row = machine.inventory?.credentialProfiles?.profiles.find(profile => profile.name === credentialProfile);
-                    if (!row)
-                        throw new Error(`This computer has not reported a credential profile named "${credentialProfile}". On that computer run: agend-runtime login claude-code ${credentialProfile}, then choose Detect again in that computer's CLI diagnostics (Settings → Runtime).`);
-                    if (row.loggedIn === false)
-                        throw new Error(`Credential profile "${credentialProfile}" is not signed in on that computer. Sign in there: agend-runtime login claude-code ${credentialProfile}`);
-                }
-            },
-            emit: (event, data) => {
-                this.emitSseEvent(event, event === "status" ? this.getUiStatus() : data);
-                if (event === "activity")
-                    this.scheduleDeliveryOutboxPump();
-            },
-        }, { bridge: this.runtimeWindowsExecutor() });
-    }
-    agentRuntimeChangeService;
-    agentRuntimeChanges() {
-        if (this.agentRuntimeChangeService)
-            return this.agentRuntimeChangeService;
-        const windowPins = new Map();
-        return this.agentRuntimeChangeService ??= new AgentRuntimeChanges({
-            config: name => Object.hasOwn(this.fleetConfig?.instances ?? {}, name) ? this.fleetConfig.instances[name] : undefined,
-            defaults: () => this.fleetConfig?.defaults,
-            generation: () => [this.managerBootId, this.settingsGeneration],
-            epoch: name => this.lifecycle.epochOf(name),
-            backendState: (name, backend) => !isWindowsInstance(this.fleetConfig?.instances[name]) ? this.backendAvailabilityFor(name).find(row => row.backend === backend)?.state : undefined,
-            transition: (name, run) => this.lifecycle.runTransition(name, async (transition) => {
-                const config = this.fleetConfig?.instances[name];
-                if (!isWindowsInstance(config)) {
-                    const path = join(this.getInstanceDir(name), "window-id");
-                    let pin;
-                    if (existsSync(path)) {
-                        if (statSync(path).size > 128)
-                            throw Error("Invalid saved CLI window identity");
-                        pin = readFileSync(path, "utf8").trim();
-                        if (!/^@\d+$/.test(pin))
-                            throw Error("Invalid saved CLI window identity");
-                    }
-                    else if (this.daemons.has(name))
-                        throw Error("The current CLI window identity is unavailable");
-                    windowPins.set(name, pin);
-                }
-                try {
-                    return await run(async () => {
-                        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-                            this.lifecycle.invalidate(name);
-                            this.nativeInstanceRuntime().setPaused(name, true);
-                        }
-                        else
-                            await this.stopInstance(name, transition);
-                    });
-                }
-                finally {
-                    windowPins.delete(name);
-                }
-            }),
-            idle: name => {
-                if (this.shuttingDown || this.lifecycle.hasWorkLease(name) || this.deliveryOutbox?.countForTarget(name, ["queued", "retry_wait", "delivering", "submission_started", "reconciliation_pending", "uncertain"]))
-                    return false;
-                const config = this.fleetConfig?.instances[name];
-                if (!config)
-                    return false;
-                if (isWindowsInstance(config)) {
-                    try {
-                        const agent = this.nativeInstanceRuntime().get(name);
-                        if (!agent || agent.blocked || agent.activeId && !isNativePaneInstance(config))
-                            return false;
-                    }
-                    catch {
-                        return false;
-                    }
-                }
-                if (!this.daemons.has(name) && !isWindowsInstance(config) && existsSync(join(this.getInstanceDir(name), "window-id")))
-                    return false;
-                return !this.daemons.has(name) || this.getInstanceExecutionState(name) === "idle";
-            },
-            prepare: async (name, before, target, current) => {
-                if (!current())
-                    throw Error("Runtime change authority expired");
-                if (isWindowsInstance(before))
-                    this.nativeInstanceRuntime().importHistory(name);
-                if (target.runtime === "windows")
-                    return this.nativeInstanceRuntime().prepareRuntimeChange(name, before, target, current);
-                const sameAccount = !isWindowsInstance(before) && target.backend === (before.backend || this.fleetConfig?.defaults?.backend || "claude-code");
-                const availability = (sameAccount ? this.backendAvailabilityFor(name) : this.backendAvailabilityRows()).find(row => row.backend === target.backend);
-                if (availability && ["not_installed", "not_signed_in", "too_old"].includes(availability.state))
-                    throw Error("Choose an available CLI on the Fleet host");
-                const supplied = target.directory.trim(), cwd = supplied || join(this.dataDir, "workspaces", name);
-                if (!isAbsolute(cwd) || /^[A-Za-z]:[\\/]/.test(cwd) || /[\x00-\x1f]/.test(cwd))
-                    throw Error("Enter an absolute Linux working directory or leave it empty");
-                if (!current())
-                    throw Error("Runtime change authority expired");
-                if (supplied) {
-                    if (!statSync(cwd).isDirectory())
-                        throw Error("The Linux working directory is not a directory");
-                }
-                else
-                    mkdirSync(cwd, { recursive: true, mode: 0o700 });
-                const config = { ...before, runtime: "wsl", working_directory: cwd, backend: target.backend, model: target.model };
-                if (before.backend !== target.backend)
-                    config.model_failover = [];
-                for (const key of ["machine_id", "native_agent_id", "native_adapter", "native_sandbox"])
-                    delete config[key];
-                if (!sameAccount)
-                    delete config.backend_options;
-                return { config, discard: () => { } };
-            },
-            closed: async (name, before) => {
-                if (this.daemons.has(name))
-                    return false;
-                if (isWindowsInstance(before))
-                    return !this.nativeInstanceRuntime().get(name)?.activeId;
-                // An unreadable tmux state is not evidence that the old process exited.
-                const session = getTmuxSession();
-                if (!await TmuxManager.sessionExistsStrict(session))
-                    return true;
-                const pin = windowPins.get(name);
-                return !(await TmuxManager.listWindowsStrict(session)).some(window => window.name === name || pin && window.id === pin);
-            },
-            fresh: (name, requestId) => {
-                const dir = this.getInstanceDir(name), moved = [];
-                const restore = () => { for (const [source, saved] of moved.reverse())
-                    if (!existsSync(source) && existsSync(saved))
-                        renameSync(saved, source); };
-                try {
-                    for (const file of ["session-id", "session-id.backend"]) {
-                        const source = join(dir, file), saved = join(dir, `${file}.runtime-${requestId}`);
-                        if (existsSync(source)) {
-                            if (existsSync(saved))
-                                throw Error("Session backup already exists");
-                            renameSync(source, saved);
-                            moved.push([source, saved]);
-                        }
-                    }
-                    return restore;
-                }
-                catch (error) {
-                    restore();
-                    throw error;
-                }
-            },
-            save: (name, before, next) => {
-                if (this.fleetConfig?.instances[name] !== before)
-                    throw Error("Agent settings changed before saving Runtime");
-                // Mark the replacement stopped before committing its config. A marker failure must not leave a saved
-                // Windows config referring to a profile the preparation rollback would then remove.
-                writePausedMarker(this.getInstanceDir(name), Date.now(), "operator");
-                const fleet = this.fleetConfig;
-                fleet.instances[name] = next;
-                try {
-                    this.saveFleetConfig();
-                }
-                catch (error) {
-                    fleet.instances[name] = before;
-                    throw error;
-                }
-                // A move deliberately leaves the replacement stopped; its next explicit Start opens the fresh CLI.
-            },
-            changed: name => { this.instanceStateCache.delete(name); this.instanceProcessStatus.delete(name); this.emitSseEvent("status", this.getUiStatus()); },
-        });
-    }
-    /** Explicit dashboard opt-in, with the same General confirmation and ordinary topic/Daemon routing. */
-    async createNativePaneInstance(profile, channelId, authorized, execution) {
-        const { createNativePane } = await import("./native-pane-create.js");
-        return createNativePane({ fleet: () => this.fleetConfig, runtime: this.nativeInstanceRuntime(),
-            topic: target => {
-                const world = this.worlds.get(target.id), adapter = world?.adapter;
-                if (!world || !adapter?.createTopic || !adapter.deleteTopic)
-                    throw Error("The approved connection cannot create and compensate a topic");
-                const same = () => {
-                    const channels = this.fleetConfig?.channels ?? (this.fleetConfig?.channel ? [this.fleetConfig.channel] : []);
-                    const matches = channels.filter(row => (row.id ?? row.type) === target.id);
-                    return !this.shuttingDown && this.worlds.get(target.id) === world && world.adapter === adapter && matches.length === 1 && matches[0].type === target.type && matches[0].group_id === target.group_id;
-                };
-                return { current: same, create: name => adapter.createTopic(name), remove: id => adapter.deleteTopic(id) };
-            },
-            epoch: name => this.lifecycle.epochOf(name),
-            start: async (name, config, current) => {
-                if (!current())
-                    throw Error("Native creation expired before start");
-                await this.startInstance(name, config, true);
-                if (!current())
-                    throw Error("Native creation expired during start");
-                await this.connectIpcToInstance(name);
-                if (!current())
-                    throw Error("Native creation expired during channel connection");
-            },
-            close: (name, config, epoch) => this.lifecycle.runTransition(name, async (transition) => {
-                if (this.fleetConfig?.instances[name] !== config || this.lifecycle.epochOf(name) !== epoch)
-                    return false;
-                await this.stopInstance(name, transition);
-                return this.fleetConfig?.instances[name] === config && this.lifecycle.epochOf(name) === epoch + 1;
-            }),
-            routes: () => { if (this.fleetConfig)
-                this.routing.rebuild(this.fleetConfig); },
-            warn: error => this.logger.warn({ err: error }, "Native creation cleanup is held; retained identity and topic require attention"), }, profile, channelId, () => !this.shuttingDown && authorized(), execution);
-    }
-    /** Admin-only settings path: validate first, then close the exact old launch before changing cold fields. */
-    async updateNativePaneConfig(name, patch, authorized, transaction) {
-        return this.lifecycle.runTransition(name, async (transition) => {
-            const before = this.fleetConfig?.instances[name];
-            if (!isNativePaneInstance(before))
-                throw Error("Persistent Windows instance not found");
-            const runtime = this.nativeInstanceRuntime(), generation = this.explicitStopGeneration.get(name) ?? 0;
-            let expectedGeneration = generation;
-            const current = () => authorized() && !this.shuttingDown && this.fleetConfig?.instances[name] === before
-                && (this.explicitStopGeneration.get(name) ?? 0) === expectedGeneration
-                && (before.machine_id ? remoteRuntimeEnabled() : localWindowsCliEnabled());
-            if (!current())
-                throw Error("Native settings authority expired");
-            runtime.previewUpdate(name, patch);
-            const cold = ["working_directory", "model", "systemPrompt", "native_sandbox"].some(key => Object.hasOwn(patch, key) && (patch[key] ?? "") !== (before[key] ?? ""));
-            const running = this.daemons.get(name);
-            if (cold) {
-                if (running && !running.nativePaneHasExited() && (!await running.nativePauseReady({ current, accepts: () => true, revalidate: async () => current() }) || !running.nativePauseStillReady()))
-                    throw Error("Wait for this Windows agent to be idle before changing its launch settings");
-                if (!current())
-                    throw Error("Native settings authority expired before closing its old pane");
-                await this.stopInstance(name, transition);
-                expectedGeneration = generation + 1;
-                if (!current())
-                    throw Error("Native settings authority expired after closing its old pane");
-                if (runtime.get(name)?.activeId)
-                    throw Error("Native pane exit is unconfirmed; its settings were not changed");
-            }
-            const result = runtime.update(name, patch, current, transaction), next = this.fleetConfig.instances[name];
-            if (cold && running) {
-                if (!authorized() || this.shuttingDown || this.fleetConfig?.instances[name] !== next || (this.explicitStopGeneration.get(name) ?? 0) !== expectedGeneration)
-                    throw Error("Native settings saved; restart authority expired");
-                await this.startInstance(name, next, true, "fleet-topic", false, transition);
-            }
-            return result;
-        });
-    }
-    /** The local machine's inventory as last used to open its pane relay (status only; never a launch decision). */
-    localPaneInventory = null;
-    nativeCliStatus(cli, machineId, daemon) {
-        if (cli !== "codex" && cli !== "claude-code")
-            return {};
-        // The version the running pane actually launched; only without one, the machine's last inventory.
-        let running;
-        try {
-            running = daemon?.usesNativePane?.() ? daemon.nativePaneCliVersion() : undefined;
-        }
-        catch {
-            running = undefined;
-        }
-        const inventory = machineId ? this.runtimeHub?.machine(machineId)?.inventory : this.localPaneInventory;
-        const version = running ?? inventory?.clis?.find(item => item.id === cli && item.runnable)?.version;
-        if (version === undefined || version === null)
-            return {};
-        const result = nativeCliVersionState(cli, version);
-        return { ...(result.version ? { native_cli_version: result.version } : {}), native_cli_verification: result.state };
-    }
-    async localNativePaneEndpoint() {
-        const admit = () => { if (this.shuttingDown || this.localPaneDrain || !localWindowsCliEnabled())
-            throw Error("Local Windows runtime is switched off or draining"); };
-        admit();
-        if (this.localPaneDrain)
-            throw Error("Local Windows runtime cleanup is pending");
-        if (this.localPaneRelay?.online())
-            return this.localPaneRelay;
-        if (this.openingLocalPane)
-            return this.openingLocalPane;
-        const opening = (async () => {
-            const [{ LocalPaneEndpoint }, { launchLocalPaneRelay, localPaneScope }, inventory] = await Promise.all([
-                import("./local-pane-endpoint.js"), import("./local-pane-launcher.js"), this.runtimeWindowsExecutor().probe({ force: false }),
-            ]);
-            admit();
-            this.localPaneRelay?.stop();
-            this.localPaneInventory = inventory;
-            const relay = await LocalPaneEndpoint.open({ scope: localPaneScope(this.dataDir), admit, maxAgents: maxAgentsPerMachine,
-                diagnostic: text => this.logger.warn({ stderr: text }, "Local Windows pane relay wrote to stderr"),
-                version: provider => inventory.clis.find(row => row.id === provider && row.runnable)?.version ?? null,
-                launch: () => launchLocalPaneRelay(this.dataDir, admit),
-                mcp: async (body, current) => (await this.nativePanes()).handle("local", body, current),
-            });
-            try {
-                admit();
-                this.localPaneRelay = relay;
-                return relay;
-            }
-            catch (error) {
-                relay.stop();
-                throw error;
-            }
-        })();
-        this.openingLocalPane = opening;
-        try {
-            return await opening;
-        }
-        finally {
-            if (this.openingLocalPane === opening)
-                this.openingLocalPane = null;
-        }
-    }
-    /** Persistent ownership is independent of the exec worker's per-turn capabilities. */
-    async nativePanes() {
-        if (this.paneManager)
-            return this.paneManager;
-        const { NativePaneManager } = await import("./native-pane-manager.js");
-        if (this.paneManager)
-            return this.paneManager;
-        const store = windowsAgentsFor(this, this.runtimeWindowsExecutor());
-        const allowed = (name, tool) => nativePaneToolAvailable(tool) && mayUseTool(resolveToolSet(this.fleetConfig?.instances[name], name), tool)
-            && !dashboardRefusalIn(this.fleetConfig, name, tool);
-        return this.paneManager = new NativePaneManager({
-            home: this.dataDir, store, config: name => this.fleetConfig?.instances[name],
-            freshNotice: async (name, provider) => {
-                const message = t(provider === "codex" ? "native_pane.codex_fresh_started" : "native_pane.fresh_started");
-                this.eventLog?.insert(name, "native_pane_fresh_started", {});
-                this.logger.info({ name }, message);
-                await this.notifyInstanceTopic(name, message);
-            },
-            admit: (name, config) => {
-                const now = this.fleetConfig?.instances[name];
-                if (this.shuttingDown || !isNativePaneInstance(now) || now?.native_agent_id !== config.native_agent_id
-                    || now?.machine_id !== config.machine_id || now?.working_directory !== config.working_directory || now?.backend !== config.backend
-                    || now?.model !== config.model || now?.native_sandbox !== config.native_sandbox || now?.systemPrompt !== config.systemPrompt || now?.workflow !== config.workflow
-                    || now?.general_topic !== config.general_topic || now?.native_general_binding !== config.native_general_binding
-                    || nativeCredentialProfile(now) !== nativeCredentialProfile(config))
-                    throw Error("Native pane configuration or lifetime changed");
-                // Fail closed: a Runtime that does not report the capability would start the terminal on the computer's own account.
-                if (nativeCredentialProfile(config) && !this.runtimeCoordinator().machine(config.machine_id)?.runtimeInfo?.capabilities.includes(RUNTIME_CREDENTIAL_CAPABILITY))
-                    throw Error("This computer's Runtime is too old to choose a Claude account. Update the Runtime on that computer, then try again.");
-                if (config.machine_id ? this.remotePaneDrain || !remoteRuntimeEnabled() : this.localPaneDrain || !localWindowsCliEnabled())
-                    throw Error("Native runtime is switched off");
-            },
-            endpoint: async (agent, cleanup = false) => {
-                if (!agent.machineId) {
-                    if (!cleanup)
-                        return this.localNativePaneEndpoint();
-                    if (!this.localPaneRelay)
-                        throw Error("Local cleanup transport is unavailable; pane remains reserved");
-                    return this.localPaneRelay;
-                }
-                const hub = cleanup ? this.runtimeHub : this.runtimeCoordinator(), machineId = agent.machineId;
-                if (!hub)
-                    throw Error("Remote cleanup transport is unavailable; pane remains reserved");
-                const draining = () => !!this.remotePaneDrain;
-                return { machineId, online: () => !this.shuttingDown && (draining() || remoteRuntimeEnabled()) && this.runtimeHub === hub && hub.machine(machineId)?.status === "online",
-                    call: request => {
-                        if (this.runtimeHub !== hub || !(draining() || remoteRuntimeEnabled()) || draining() && request.action !== "snapshot" && request.action !== "close")
-                            return Promise.reject(Error("Remote pane transport only permits owned cleanup"));
-                        return hub.callPane(machineId, request, maxAgentsPerMachine());
-                    }, subscribe: listener => hub.subscribe(listener),
-                    epoch: () => hub.paneTransportEpoch(machineId), version: provider => hub.machine(machineId)?.inventory?.clis.find(row => row.id === provider && row.runnable)?.version ?? null };
-            },
-            instructions: (name, config) => buildNativeFleetInstructions({ instanceName: name, workingDirectory: config.working_directory,
-                displayName: config.display_name, description: config.description, customPrompt: config.systemPrompt,
-                workflow: config.workflow, taskBoard: !dashboardRefusalIn(this.fleetConfig, name, "task"),
-                runtimeIdentity: { kind: "fleet-topic", backend: config.backend ?? "codex", model: config.model || "default" } }, config.general_topic === true),
-            menu: name => TOOLS.filter(tool => allowed(name, tool.name)).map(tool => ({ ...tool })),
-            allowed: (name, tool, args) => allowed(name, tool) && !nativePaneToolRefusal(tool, args), published: (name, daemon) => this.daemons.get(name) === daemon,
-            invoke: async (daemon, input, current, name) => {
-                if (input.tool === "list_models") {
-                    const { ListModelsArgs } = await import("./outbound-schemas.js");
-                    const parsed = ListModelsArgs.safeParse(input.args);
-                    if (!parsed.success || !current())
-                        return { result: null, error: "Invalid native model request or expired owner" };
-                    const target = parsed.data.instance_name ?? name;
-                    if (!isWindowsInstance(this.fleetConfig?.instances[target]))
-                        return { result: null, error: "Native panes can only read Windows runtime model inventories" };
-                    return { result: await this.listModelCatalog({ instanceName: target }) };
-                }
-                const ops = { list_instances: "list", describe_instance: "describe", task: "task", send_to_instance: "send",
-                    delegate_task: "delegate", request_information: "ask", report_result: "report", delivery_status: "delivery-status" };
-                const { nativeAgentAdmissionContext } = await import("./native-agent-admission.js");
-                const { dispatchAgentOperation } = await import("./agent-endpoint.js");
-                return daemon.handlePaneToolCall(input, { current, allowed: tool => allowed(name, tool),
-                    dispatch: (tool, args) => ops[tool] ? dispatchAgentOperation(nativeAgentAdmissionContext(this, {
-                        instance: name, current: () => current() && allowed(name, tool), taskAllowed: () => current() && allowed(name, "task"),
-                    }), name, ops[tool], args, input.operationId) : undefined });
-            },
-        });
-    }
-    /** Prepare only bundled role files; this neither switches General nor starts a provider process. */
-    async prepareWindowsGeneralWorkspace(name, machineId, cli, bindingId, authorized) {
-        const config = this.fleetConfig?.instances[name], hub = this.runtimeCoordinator(), epoch = hub.paneTransportEpoch(machineId);
-        if (!config?.general_topic || !epoch)
-            throw Error("General or its paired runtime is unavailable");
-        const current = () => authorized() && !this.shuttingDown && remoteRuntimeEnabled() && this.runtimeHub === hub
-            && this.fleetConfig?.instances[name] === config && hub.paneTransportEpoch(machineId) === epoch;
-        const [{ loadGeneralKnowledge }, { validateGeneralWorkspaceRequest, validateGeneralWorkspaceReceipt, generalWorkspaceUpgrade }, { assertRunnableNativePaneVersion }] = await Promise.all([
-            import("./runtime-general-workspace.js"), import("./runtime-general-protocol.js"), import("./runtime-pane-native.js"),
-        ]);
-        if (!current())
-            throw Error("General workspace authority expired");
-        assertRunnableNativePaneVersion(cli, hub.machine(machineId)?.inventory?.clis.find(row => row.id === cli && row.runnable)?.version ?? null);
-        const request = validateGeneralWorkspaceRequest({ action: "general-workspace", bindingId, instance: name, cli, packHash: loadGeneralKnowledge(cli).hash });
-        const inventory = await hub.callPane(machineId, { action: "list" }, maxAgentsPerMachine());
-        if (!current())
-            throw Error("General workspace authority expired");
-        if (inventory?.capabilities?.generalWorkspace !== true)
-            throw new NativePaneRecoveryError({ kind: "host-upgrade" });
-        const result = await hub.callPane(machineId, request, maxAgentsPerMachine());
-        if (!current())
-            throw Error("General workspace authority expired");
-        if (generalWorkspaceUpgrade(result, request))
-            throw new NativePaneRecoveryError({ kind: "host-upgrade" });
-        return validateGeneralWorkspaceReceipt(result, request);
-    }
-    /** S3c (S-55): the member's exposure API, attached by S5's member composition (null: no Hub member here). */
-    hubMemberExposureApi = null;
-    hubMemberExposures() { return this.hubMemberExposureApi; }
-    attachHubMemberExposures(api) { this.hubMemberExposureApi = api; }
-    /** S3c PR B: the member's pairing API, attached by S5's member composition (null: no Hub member here). */
-    hubMemberPairingApi = null;
-    hubMemberPairing() { return this.hubMemberPairingApi; }
-    attachHubMemberPairing(api) { this.hubMemberPairingApi = api; }
-    generalLocationFlights = new Map();
-    generalAttentionEpisodes = new Map();
-    generalBindings() { return new GeneralBindings(this.dataDir); }
-    generalLocations() {
-        const store = this.generalBindings();
-        return { generals: Object.entries(this.fleetConfig?.instances ?? {}).filter(([, cfg]) => cfg.general_topic).map(([name, cfg]) => {
-                const record = store.read(name), machine = cfg.machine_id ? this.runtimeHub?.machine(cfg.machine_id) : null;
-                return { name, displayName: cfg.display_name ?? name, location: isWindowsInstance(cfg) ? "windows" : "host",
-                    machineId: cfg.machine_id ?? null, cli: cfg.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code", model: cfg.model ?? "",
-                    revision: generalBindingRevision(record, cfg), canSwitchBack: !!record && record.active !== "host",
-                    offline: isWindowsInstance(cfg) && (!remoteRuntimeEnabled() || machine?.status !== "online" || !this.runtimeHub?.paneTransportEpoch(cfg.machine_id)),
-                    retryTarget: record?.pending?.phase === "selected" ? (record.pending.to === "host" ? { location: "host" } : (() => { const row = record.windows.find(item => item.id === record.pending.to); return { location: "windows", machineId: row.machineId, cli: row.cli, model: row.config.model ?? "" }; })()) : null,
-                    hold: record?.hold ?? (record?.pending ? record.pending.phase === "selected" ? "start" : "exit" : null), switching: this.generalLocationFlights.has(name) };
-            }), machines: (this.runtimeHub?.listMachines() ?? []).filter(row => row.status !== "pending" && row.status !== "revoked").map(row => ({
-                id: row.id, name: row.name, online: row.status === "online" && !!this.runtimeHub?.paneTransportEpoch(row.id),
-                clis: row.inventory?.clis.filter(cli => cli.runnable && (cli.id === "claude-code" || cli.id === "codex")).map(cli => ({ id: cli.id, version: cli.version })) ?? [],
-            })) };
-    }
-    /** Pure preflight for the confirmation diff and stale-tab refusal; never prepares files or starts a CLI. */
-    previewGeneralLocation(raw) {
-        const input = parseGeneralSwitchInput(raw), cfg = this.fleetConfig?.instances[input.name];
-        if (!cfg?.general_topic || this.shuttingDown)
-            throw Error("General is unavailable");
-        const record = this.generalBindings().read(input.name);
-        if (input.revision !== generalBindingRevision(record, cfg))
-            throw Error("General location changed; read its settings again");
-        const connections = cfg.channel_id ? [cfg.channel_id] : [];
-        const channels = this.fleetConfig?.channels ?? (this.fleetConfig?.channel ? [this.fleetConfig.channel] : []);
-        if (channels.length && (connections.length !== 1 || channels.filter(row => (row.id ?? row.type) === connections[0]).length !== 1))
-            throw Error("General's connection cannot be resolved");
-        if (input.target.location === "host") {
-            if (!record)
-                throw Error("General's saved host location is unavailable");
-            return { input, connections, summary: [t("general_location.confirm_host"), t("general_location.history")] };
-        }
-        const active = record?.windows.find(row => row.id === record.active);
-        if (!record?.pending && record?.hold !== "start" && active?.machineId === input.target.machineId && active.cli === input.target.cli)
-            throw Error("General already runs at this location");
-        const machine = this.runtimeHub?.machine(input.target.machineId);
-        if (!remoteRuntimeEnabled() || machine?.status !== "online" || !this.runtimeHub?.paneTransportEpoch(machine.id))
-            throw Error(t("general_location.offline"));
-        const provider = input.target.cli;
-        if (!machine.inventory?.clis.some(cli => cli.id === provider && cli.runnable))
-            throw Error("The chosen Windows CLI is unavailable");
-        return { input, connections, summary: [t("general_location.confirm_windows", settingsDisplay(machine.name)), t("general_location.history")] };
-    }
-    /** All entry points, including automatic native recovery, must respect an interrupted binding switch. */
-    assertGeneralBindingStart(name, config) {
-        if (!config.general_topic)
-            return;
-        try {
-            this.generalBindings().assertStart(name, config);
-        }
-        catch (err) {
-            this.logger.warn({ name, err }, "General location start held by its saved binding");
-            this.needsYou?.poke();
-            throw new UnsupportedCliError(t("general_location.exit_unconfirmed"));
-        }
-    }
-    /** Only the Settings replay's confirmed admin can enter; the whole switch owns one lifecycle transition. */
-    async switchGeneralLocation(raw, authorized, execution) {
-        const { input } = this.previewGeneralLocation(raw), name = input.name;
-        return this.lifecycle.runTransition(name, async (transition) => {
-            execution.assert();
-            if (!authorized() || this.generalLocationFlights.has(name))
-                throw Error("General location authority expired or a switch is already running");
-            const token = Symbol(name), generation = this.settingsGeneration;
-            const destinationEpoch = input.target.location === "windows" ? this.runtimeHub?.paneTransportEpoch(input.target.machineId) : null;
-            let expected = this.fleetConfig.instances[name], stopGeneration = this.explicitStopGeneration.get(name) ?? 0, epoch = this.lifecycle.epochOf(name);
-            const hostSnapshot = !isWindowsInstance(expected) ? structuredClone(this.daemons.get(name)?.getConfigSnapshot() ?? expected) : undefined;
-            const current = () => !this.shuttingDown && this.settingsGeneration === generation && authorized()
-                && this.generalLocationFlights.get(name) === token && this.fleetConfig?.instances[name] === expected
-                && (input.target.location !== "windows" || remoteRuntimeEnabled() && !!destinationEpoch && this.runtimeHub?.paneTransportEpoch(input.target.machineId) === destinationEpoch)
-                && (this.explicitStopGeneration.get(name) ?? 0) === stopGeneration && this.lifecycle.epochOf(name) === epoch;
-            const check = () => { if (!current())
-                throw Error("General location switch was superseded"); };
-            this.generalLocationFlights.set(name, token);
-            // Old ephemeral waiters carry this epoch; they cannot wake into the selected conversation.
-            this.cancelPendingDeliveries(name);
-            let lease = null;
-            try {
-                lease = await waitSettingsLease([settingsFileResource(this.getSettingsConfigPath()), `general:${this.dataDir}:${name}`], () => current() && execution.current(), performance.now() + execution.remainingMs, execution.owner);
-                const store = this.generalBindings();
-                const result = await switchGeneralLocation({ store, current: () => expected, assert: check,
-                    prepare: async (target, retained) => {
-                        if (target.location !== "windows")
-                            return null;
-                        const old = retained.windows.find(row => row.machineId === target.machineId && row.cli === target.cli);
-                        const id = old?.id ?? randomUUID(), agentId = old?.agentId ?? randomUUID();
-                        const publication = await this.prepareWindowsGeneralWorkspace(name, target.machineId, target.cli, id, () => current() && execution.current());
-                        check();
-                        execution.assert();
-                        const config = { ...structuredClone(expected), runtime: "windows", machine_id: target.machineId,
-                            native_adapter: "pane", native_agent_id: agentId, native_general_binding: id, native_sandbox: "workspace-write",
-                            backend: target.cli, model: target.model, working_directory: publication.cwd, systemPrompt: "", agent_mode: "cli" };
-                        // Host credentials, shell hooks and provider-specific options never become Windows launch configuration.
-                        for (const key of ["backend_options", "credential_profile", "pre_task_command"])
-                            delete config[key];
-                        windowsAgentsFor(this, this.runtimeWindowsExecutor()).ensureGeneralBinding({ id: agentId, instance: name, machineId: target.machineId,
-                            cli: target.cli, cwd: publication.cwd, name: (expected.display_name ?? name).slice(0, 64), model: target.model, instructions: "", description: expected.description ?? "" }, () => current() && execution.current());
-                        return { id, agentId, machineId: target.machineId, cli: target.cli, config };
-                    },
-                    idle: async () => {
-                        check();
-                        const daemon = this.daemons.get(name);
-                        return !daemon || daemon.getInstanceStateSnapshot().state === "idle" && daemon.getWorkingRecoveryState().idle
-                            && daemon.getInteractionSnapshot().phase === "clear" && !this.lifecycle.hasWorkLease(name)
-                            && Date.now() - (this.lastDeliveryAt.get(name) ?? 0) >= 2000;
-                    },
-                    hostSnapshot: () => hostSnapshot,
-                    capture: async () => {
-                        if (isWindowsInstance(expected))
-                            return undefined;
-                        const daemon = this.daemons.get(name);
-                        if (!daemon)
-                            throw Error(t("general_location.exit_unconfirmed"));
-                        const owner = await daemon.generalHostOwner();
-                        check();
-                        execution.assert();
-                        return owner;
-                    },
-                    stop: async (owner) => {
-                        check();
-                        const stopping = this.stopInstance(name, transition);
-                        stopGeneration++;
-                        epoch++;
-                        await stopping;
-                        check();
-                        if (isWindowsInstance(expected)) {
-                            const profile = windowsAgentsFor(this, this.runtimeWindowsExecutor()).get(expected.native_agent_id);
-                            if (profile.activeId || profile.paneLaunchId)
-                                throw Error(t("general_location.exit_unconfirmed"));
-                            execution.mutate(() => this.holdGeneralOldDeliveries(name));
-                            return undefined;
-                        }
-                        if (!owner || !await confirmGeneralHostExit(owner, getTmuxSession()))
-                            throw Error(t("general_location.exit_unconfirmed"));
-                        check();
-                        execution.mutate(() => this.holdGeneralOldDeliveries(name));
-                        return owner.pin;
-                    },
-                    save: next => {
-                        check();
-                        const previous = expected;
-                        try {
-                            this.fleetConfig.instances[name] = next;
-                            this.saveFleetConfig([{ path: ["instances", name], value: next }]);
-                            expected = next;
-                            this.routing.rebuild(this.fleetConfig);
-                        }
-                        catch (err) {
-                            this.fleetConfig.instances[name] = previous;
-                            throw err;
-                        }
-                    },
-                    start: async () => {
-                        check();
-                        if (!execution.completed)
-                            throw Error("General's selected binding has no committed approval");
-                        // The committed receipt permits only this selected startup. Live authority still fences every awaited spawn boundary.
-                        const startup = new SettingsExecution({ current: () => current() && execution.completed && execution.remainingMs > 0,
-                            snapshot: () => this.fleetConfig });
-                        try {
-                            await this.startInstance(name, expected, true, "fleet-topic", false, transition, startup);
-                        }
-                        finally {
-                            startup.close();
-                        }
-                        check();
-                        const daemon = this.daemons.get(name);
-                        if (!daemon || daemon.getProcessStatus() !== "running" || isNativePaneInstance(expected) && !daemon.nativePaneCurrent())
-                            throw Error(t("general_location.start_failed"));
-                        await this.connectIpcToInstance(name);
-                        check();
-                    },
-                    notify: (kind, err) => {
-                        const message = t(kind === "exit" ? "general_location.exit_unconfirmed" : kind === "start" ? "general_location.start_failed" : "general_location.complete", isWindowsInstance(expected) ? this.runtimeHub?.machine(expected.machine_id)?.name ?? t("general_location.windows") : t("general_location.host"));
-                        this.eventLog?.insert(name, "general_location", { phase: kind, message });
-                        if (err)
-                            this.logger.warn({ name, phase: kind, err }, message);
-                        else
-                            this.logger.info({ name, phase: kind }, message);
-                        this.needsYou?.poke();
-                        this.emitSseEvent("status", this.getUiStatus());
-                        this.notifyInstanceTopic(name, message);
-                    },
-                }, input, execution);
-                return { ...result, message: result.started ? t("general_location.complete", isWindowsInstance(expected)
-                        ? this.runtimeHub?.machine(expected.machine_id)?.name ?? t("general_location.windows") : t("general_location.host")) : t("general_location.start_failed") };
-            }
-            finally {
-                lease?.release();
-                if (this.generalLocationFlights.get(name) === token)
-                    this.generalLocationFlights.delete(name);
-                this.needsYou?.poke();
-            }
-        });
-    }
-    /** An offline PC or a confirmed binding boundary holds old waiting input; it never becomes another conversation's queue. */
-    holdGeneralOldDeliveries(name) {
-        const outbox = this.deliveryOutbox;
-        if (!outbox)
-            return;
-        for (const row of outbox.listPending().filter(row => row.targetInstance === name)) {
-            if (row.state !== "submission_started")
-                outbox.failBeforeBegin(row.deliveryId, t("general_location.input_not_replayed"));
-            else if (row.targetDaemonBootId) {
-                outbox.markTargetReconciliationPending(name, row.targetDaemonBootId);
-                if (!outbox.reconcileAttempt(row.deliveryId, row.targetDaemonBootId, row.attemptNo, "uncertain", t("general_location.input_not_replayed")))
-                    throw Error("General's old delivery could not be held");
-            }
-            else
-                throw Error("General's old delivery has no confirmed owner");
-        }
-        this.needsYou?.poke();
-    }
-    generalLocationDeliveryHold(name) {
-        const config = this.fleetConfig?.instances[name];
-        if (!config?.general_topic)
-            return null;
-        if (this.generalLocationFlights?.has(name))
-            return t("general_location.exit_unconfirmed");
-        let record;
-        try {
-            record = this.generalBindings().read(name);
-        }
-        catch {
-            return t("general_location.start_failed");
-        }
-        if (record?.pending || record?.hold)
-            return t(record.pending?.phase === "selected" || record.hold === "start" ? "general_location.start_failed" : "general_location.exit_unconfirmed");
-        if (isWindowsInstance(config) && config.machine_id && (!remoteRuntimeEnabled() || this.runtimeHub?.machine(config.machine_id)?.status !== "online" || !this.runtimeHub?.paneTransportEpoch(config.machine_id)))
-            return t("general_location.offline");
-        return null;
-    }
-    generalLocationAttention(name) {
-        const cfg = this.fleetConfig?.instances[name];
-        if (!cfg?.general_topic)
-            return null;
-        const detail = this.generalLocationDeliveryHold(name);
-        if (!detail) {
-            this.generalAttentionEpisodes.delete(name);
-            return null;
-        }
-        let record = null;
-        try {
-            record = this.generalBindings().read(name);
-        }
-        catch { /* a corrupt journal is a visible hold too */ }
-        const offline = !record?.pending && !record?.hold && isWindowsInstance(cfg) && detail === t("general_location.offline");
-        const key = record?.pending?.id ?? `${record?.revision ?? "unknown"}:${offline ? "offline" : "hold"}`;
-        let episode = this.generalAttentionEpisodes.get(name);
-        if (!episode || episode.key !== key) {
-            episode = { key, since: record?.pending?.at ?? Date.now() };
-            this.generalAttentionEpisodes.set(name, episode);
-        }
-        return { ...episode, detail, offline };
-    }
-    async nativePaneFor(name, config, assertCurrent) {
-        try {
-            return await (await this.nativePanes()).prepare(name, config, assertCurrent);
-        }
-        catch (err) {
-            if (config.general_topic && err instanceof GeneralManagedFileError) {
-                assertCurrent();
-                const store = this.generalBindings(), record = store.read(name);
-                if (record && record.active === config.native_general_binding) {
-                    record.hold = "start";
-                    store.write(record);
-                }
-                this.logger.warn({ name, managedFile: err.file }, t("general_location.start_failed"));
-                this.needsYou?.poke();
-                throw new UnsupportedCliError(t("general_location.start_failed"));
-            }
-            throw err;
-        }
-    }
-    async recoverNativePane(name, launchId, authorized) {
-        const config = this.fleetConfig?.instances[name];
-        if (!isNativePaneInstance(config))
-            throw Error("Persistent Windows pane is not configured");
-        const generation = this.explicitStopGeneration.get(name) ?? 0;
-        await this.lifecycle.runTransition(name, async (transition) => {
-            const current = () => { if (!authorized() || this.shuttingDown || this.fleetConfig?.instances[name] !== config || (this.explicitStopGeneration.get(name) ?? 0) !== generation)
-                throw Error(t("native_pane.authority_expired")); };
-            current();
-            if (this.daemons.get(name)?.nativePaneCurrent())
-                throw Error(t("native_pane.still_running"));
-            this.cancelStartupRetry(name);
-            this.lifecycle.cancelNativeRecovery(name);
-            await (await this.nativePanes()).recover(name, config, launchId, true, current);
-            current();
-            // The host supplied a positive exit before ordinary lifecycle cleanup. No signal or input is required.
-            await this.lifecycle.stop(name, transition);
-            current();
-            this.instanceProcessStatus.set(name, "stopped");
-            this.eventLog?.insert(name, "native_pane_recovered", { launchId, confirmedStopped: true });
-            this.logger.info({ name, launchId }, "Windows saved pane recovered by an administrator; waiting for Start");
-            this.emitSseEvent("status", this.getUiStatus());
-        });
-    }
-    holdNativePaneRecovery(name, error) {
-        if (!(error instanceof NativePaneRecoveryError))
-            return false;
-        this.instanceProcessStatus.set(name, "stopped");
-        this.logger.warn({ name, recovery: error.recovery }, error.message);
-        this.eventLog?.insert(name, "native_pane_recovery_needed", { ...error.recovery });
-        this.needsYou?.poke();
-        this.emitSseEvent("status", this.getUiStatus());
-        return true;
-    }
-    async startFreshNativePane(name, launchId, sessionId, authorized) {
-        const config = this.fleetConfig?.instances[name];
-        if (!isNativePaneInstance(config))
-            throw Error("Persistent Windows pane is not configured");
-        const generation = this.explicitStopGeneration.get(name) ?? 0;
-        await this.lifecycle.runTransition(name, async (transition) => {
-            const current = () => { if (!authorized() || this.shuttingDown || this.fleetConfig?.instances[name] !== config || (this.explicitStopGeneration.get(name) ?? 0) !== generation)
-                throw Error(t("native_pane.authority_expired")); };
-            current();
-            const held = windowsAgentsFor(this, this.runtimeWindowsExecutor()).get(config.native_agent_id).paneRecovery;
-            if (held?.kind !== "session-unconfirmed" || held.launchId !== launchId || (held.sessionId ?? null) !== sessionId)
-                throw Error(t("native_pane.changed"));
-            if (this.daemons.get(name)?.nativePaneCurrent())
-                throw Error(t("native_pane.still_running"));
-            this.cancelStartupRetry(name);
-            this.lifecycle.cancelNativeRecovery(name);
-            await this.lifecycle.stop(name, transition);
-            current();
-            try {
-                await (await this.nativePanes()).startFresh(name, config, launchId, sessionId, current);
-                current();
-            }
-            catch (error) {
-                current();
-                this.needsYou?.poke();
-                this.emitSseEvent("status", this.getUiStatus());
-                throw error;
-            }
-            this.eventLog?.insert(name, "native_pane_new_conversation", { launchId, sessionId });
-            await this.startInstance(name, config, true, "fleet-topic", true, transition);
-            current();
-            this.needsYou?.poke();
-            this.emitSseEvent("status", this.getUiStatus());
-        });
-    }
-    nativePanePinnedSession(name) {
-        const config = this.fleetConfig?.instances[name];
-        if (!isNativePaneInstance(config) || !config.native_agent_id)
-            return null;
-        const agent = windowsAgentsFor(this, this.runtimeWindowsExecutor()).get(config.native_agent_id);
-        return agent.fleet_instance === name && agent.machineId === config.machine_id ? agent.threadId ?? null : null;
-    }
-    onNativePaneRecoverySettled(name) {
-        if (this.daemons.get(name)?.nativePaneCurrent())
-            this.instanceProcessStatus.delete(name);
-        this.onAttentionChanged(name);
-        this.scheduleDeliveryOutboxPump();
-    }
-    setNativePanePaused(name, paused) {
-        const id = this.fleetConfig?.instances[name]?.native_agent_id;
-        if (!id)
-            throw Error("Native profile is missing");
-        windowsAgentsFor(this, this.runtimeWindowsExecutor()).setPaused(id, paused);
-    }
-    async closeRetainedNativePane(name) {
-        const config = this.fleetConfig?.instances[name];
-        if (!config)
-            throw Error("Native instance configuration is missing");
-        await (await this.nativePanes()).closeRetained(name, config, () => { if (this.shuttingDown)
-            throw Error("Fleet is stopping"); });
-    }
-    async reconcileNativePaneBeforeStart(name, daemon) {
-        const outbox = this.deliveryOutbox;
-        if (!outbox)
-            return true;
-        const epoch = this.lifecycle.epochOf(name);
-        return daemon.reconcileNativeDeliveries(outbox, () => !this.shuttingDown && this.lifecycle.epochOf(name) === epoch);
-    }
-    /** M-2255: the Windows runtimes' switches the fleet's own state reflects (null until the start-up has applied them). */
-    runtimeEffects = null;
-    runtimeEffectsScheduled = false;
-    localPaneDrain = null;
-    remotePaneDrain = null;
-    /** Revoke admissions synchronously; keep the captured transport only long enough for exact owned closes. */
-    drainNativeRuntime(remote) {
-        const existing = remote ? this.remotePaneDrain : this.localPaneDrain;
-        if (existing)
-            return existing;
-        const hub = this.runtimeHub, relay = this.localPaneRelay;
-        if (!remote)
-            relay?.beginCleanup();
-        const targets = Object.entries(this.fleetConfig?.instances ?? {}).filter(([, config]) => isWindowsInstance(config) && !!config.machine_id === remote);
-        for (const [name, config] of targets) {
-            this.nativeMcpStore?.closeInstance(name);
-            if (isNativePaneInstance(config)) {
-                this.lifecycle.cancelNativeRecovery(name);
-                this.lifecycle.invalidate(name);
-                this.daemons.get(name)?.fenceDeliveryWritesForStop();
-            }
-        }
-        const run = Promise.resolve().then(async () => {
-            const results = await Promise.allSettled(targets.filter(([, config]) => isNativePaneInstance(config)).map(([name]) => this.stopInstance(name)));
-            results.forEach((result, index) => { if (result.status === "rejected")
-                this.logger.warn({ err: result.reason, remote, index }, "Windows pane cleanup unconfirmed; its reservation is retained"); });
-            try {
-                if (remote)
-                    await hub?.shutdownPaneHosts();
-                else
-                    await relay?.shutdownHost();
-            }
-            catch (error) {
-                this.logger.warn({ err: error, remote }, "Windows pane host shutdown unconfirmed; owned state is retained");
-            }
-        }).finally(() => {
-            if (remote) {
-                hub?.close();
-                if (this.runtimeHub === hub)
-                    this.runtimeHub = null;
-            }
-            else {
-                relay?.stop();
-                if (this.localPaneRelay === relay)
-                    this.localPaneRelay = null;
-                closeWindowsBridge(this);
-            }
-        });
-        if (remote)
-            this.remotePaneDrain = run;
-        else
-            this.localPaneDrain = run;
-        void run.finally(() => {
-            if (remote) {
-                if (this.remotePaneDrain === run)
-                    this.remotePaneDrain = null;
-            }
-            else if (this.localPaneDrain === run)
-                this.localPaneDrain = null;
-            if (!this.shuttingDown && (remote ? remoteRuntimeEnabled() : localWindowsCliEnabled())) {
-                this.initializeNativeInstances();
-                this.initializeNativeInstances(true);
-            }
-            try {
-                this.emitSseEvent("status", this.getUiStatus());
-            }
-            catch { }
-        }).catch(error => this.logger.warn({ err: error }, "Windows runtime cleanup failed; retained ownership requires reconciliation"));
-        return run;
-    }
-    /**
-     * M-2255: Settings → Runtime's switches (fleet.yaml `runtimes`, or their environment override) in force — set each time
-     * the configuration in force changes (a load, a save, a reload's rollback), next to the web authority's. Every gate reads
-     * them at once; what the fleet itself holds (paired computers' connections, this PC's Windows process, agents' tool
-     * sessions) follows just after, outside the save that changed them (applyRuntimeSwitches): no restart is needed.
-     */
-    /** S-51: the Hub switches follow the configuration in force (load, save, reload rollback), like the runtime ones. */
-    observeHubSwitches() {
-        this.observeHubAgentIncarnations();
-        if (!this.hubEffectsReady || this.hubEffectsScheduled || this.shuttingDown)
-            return;
-        this.hubEffectsScheduled = true;
-        queueMicrotask(() => { this.hubEffectsScheduled = false; void this.applyHubSwitches(); });
-    }
-    /** Reads the raw configuration at run time (the newest wins); off and never started: returns before any import. */
-    async applyHubSwitches() {
-        if (this.shuttingDown || !this.hubEffectsReady)
-            return;
-        const raw = this.rawFleetConfig;
-        const on = raw?.hub?.enabled === true || raw?.hub_member?.enabled === true;
-        if (!on && !this.hubRuntime && !this.hubRuntimeInit)
-            return;
-        try {
-            const runtime = this.hubRuntime ?? (await this.hubRuntimeCreated());
-            if (this.shuttingDown || !this.hubEffectsReady)
-                return; // Stop owns it now (fenced in stopAll, closed in doStopAll)
-            await this.observeHubMemberPairing(raw?.hub_member?.enabled === true);
-            const current = this.rawFleetConfig;
-            await runtime.apply({ hub: current?.hub, hub_member: current?.hub_member });
-        }
-        catch (err) {
-            this.logger.warn({ err: err?.message ?? String(err) }, "Hub switches could not be applied");
-        }
-    }
-    /** Single flight: one import, one runtime, assigned once; every caller (and Stop) gets that same runtime. */
-    hubRuntimeCreated() {
-        this.hubRuntimeInit ??= (async () => {
-            const { HubRuntime } = await import("./hub/runtime.js");
-            const runtime = new HubRuntime({
-                home: this.dataDir,
-                log: (level, message, meta) => this.logger[level](meta ?? {}, message),
-                onHoldsChanged: holds => { this.hubHolds = holds; this.needsYou?.poke(); },
-                // S-51 PR 2b: the fleet's side of a Hub membership (pairing binding, local agents, attachment points).
-                member: {
-                    // S3c's currentBinding: a fresh, fail-closed read of the pairing state (null unless consistent and connectable).
-                    boundHub: () => this.hubMemberBinding?.(this.dataDir)?.hubId ?? null,
-                    agents: () => this.hubMemberAgents(),
-                    // P1 representative mode (docs/design/hub-representative-agent.md): ordinary delivery + the report_result hook.
-                    representative: {
-                        quota: agent => this.hubAgentQuota(agent),
-                        deliver: input => this.deliverHubQuestion(input),
-                        agentToken: agent => this.hubAgentToken(agent),
-                        // attachments-v1: a question's files go into the agent's inbox; an answer's come from its own paths.
-                        files: { stateDir: this.dataDir,
-                            inboxDir: agent => isSafeInstanceDirName(agent) ? join(this.dataDir, "workspaces", agent, "inbox") : null,
-                            scratchDir: agent => isSafeInstanceDirName(agent) ? join(this.dataDir, "workspaces", agent, "hub-files") : null },
-                        attachReports: (handler, failed) => { this.hubReports = handler; this.hubDeliveryFailed = failed; },
-                    },
-                    attachExposures: api => this.attachHubMemberExposures(api),
-                    attachAttention: read => this.attachHubExecutionAttention(read),
-                    pokeAttention: () => this.needsYou?.poke(),
-                    linkState: state => { this.hubMemberLink = state; },
-                },
-            });
-            // Stop began during the import: it holds this promise and closes the runtime; do not hand it out again.
-            if (this.shuttingDown || !this.hubEffectsReady)
-                runtime.fence();
-            else
-                this.hubRuntime = runtime;
-            return runtime;
-        })();
-        return this.hubRuntimeInit;
-    }
-    /**
-     * S-51 PR 2b: while the member switch is on, the local owner's "Connect to a Hub" backend (S3c's pairing API) is
-     * attached, paired or not; switched off, it is detached. A binding change re-composes the member side.
-     */
-    async observeHubMemberPairing(on) {
-        if (!on) {
-            this.attachHubMemberPairing(null);
-            return;
-        }
-        if (this.hubMemberPairingApi)
-            return;
-        const { createHubMemberPairingApi, currentBinding } = await import("./hub/member/pairing-api.js");
-        if (this.shuttingDown || !this.hubEffectsReady || this.hubMemberPairingApi)
-            return;
-        this.hubMemberBinding = currentBinding;
-        this.attachHubMemberPairing(createHubMemberPairingApi({
-            home: this.dataDir,
-            enabled: () => this.rawFleetConfig?.hub_member?.enabled === true,
-            link: () => (this.hubMemberLink === "online" ? "online" : "offline"),
-            hold: () => (this.hubMemberLink === "revoked" ? "revoked" : null),
-            // Disconnect: stop the member client now (the runtime re-composes from the saved binding, fencing first).
-            fence: () => { void this.hubRuntime?.refresh(); },
-            // A claim saved, a disconnect tombstone or a cancel: re-compose the member side for the new binding.
-            bindingChanged: () => { void this.hubRuntime?.refresh(); },
-            // Disconnect withdraws every published exposure locally (each saved before this returns).
-            withdrawAll: () => this.hubMemberWithdrawAll(),
-        }));
-    }
-    /**
-     * Disconnect: every published exposure is withdrawn and saved before the disconnect reports success. Through the
-     * running member's API, or — held or not composed — directly in the member's own store; a failure here makes the
-     * disconnect report "unsaved" (S3c), so consent never outlives the disconnect.
-     */
-    async hubMemberWithdrawAll() {
-        const api = this.hubMemberExposureApi;
-        if (api) {
-            for (const view of api.list()) {
-                if (view.exposureId && view.state === "published")
-                    await api.withdraw(view.exposureId, view.revision);
-            }
-            return;
-        }
-        const hubId = this.hubMemberPairingApi?.boundHub()?.hubId ?? null;
-        if (!hubId)
-            return;
-        const { withdrawMemberExposuresOffline } = await import("./hub/compose/member.js");
-        await withdrawMemberExposuresOffline(this.dataDir, hubId);
-    }
-    /**
-     * The Hub exposure picker's agents (docs/design/hub-representative-agent.md): every configured instance normal
-     * delivery addresses, General included, shown by its display name. The dedicated Hub daemon is not a fleet instance.
-     */
-    hubMemberAgents() {
-        return Object.keys(this.fleetConfig?.instances ?? {}).map(name => ({ name, display: this.shownInstanceName(name) }));
-    }
-    /** Same cached usage source as the owner's rail, scoped to the representative's CLI and credential profile. */
-    async hubAgentQuota(agent) {
-        const binding = () => {
-            const config = this.fleetConfig?.instances[agent];
-            if (!config || isWindowsInstance(config))
-                return null; // runner usage never belongs to a Linux login
-            const backend = this.backendNameForInstance(agent), provider = usageProviderIdForBackend(backend);
-            if (!provider)
-                return null;
-            const profile = this.credentialProfileOf(agent, backend);
-            return profile ? `${provider}:${profile}` : provider;
-        };
-        const id = binding();
-        const { quotaBand } = await import("./hub/member/quota.js");
-        const paused = () => this.daemons.get(agent)?.quotaPaused?.() === true
-            || this.lifecycle.isPaused(agent) && readPauseReason(this.getInstanceDir(agent)) === "quota";
-        if (!id)
-            return { band: "unknown" };
-        try {
-            const snapshot = await getUsageSnapshot(false, new Set([id]));
-            if (binding() !== id)
-                return { band: "unknown" };
-            return quotaBand(snapshot.providers.find(p => p.id === id), paused());
-        }
-        catch {
-            return quotaBand(undefined, paused());
-        }
-    }
-    /**
-     * A published representative's lifecycle token (#3145, #3147 review): a DURABLE incarnation id per agent name, rotated
-     * whenever its backend, folder or runtime changes and dropped when the instance is removed. A replacement (remove and
-     * re-add, even with the same name and config, across restarts) or any retarget — including A→B→A — gets a new id, so
-     * earlier consent never matches again without an explicit republish. Stopping or pausing changes nothing.
-     */
-    hubAgentToken(agent) {
-        const instances = this.fleetConfig?.instances ?? {};
-        if (!Object.prototype.hasOwnProperty.call(instances, agent))
-            return null;
-        if (this.hubIncarnationsBroken)
-            return null;
-        let id;
-        try {
-            this.settleHubIncarnations();
-            id = this.hubIncarnationsBroken ? null : this.hubAgentIncarnation(agent, instances[agent], true);
-        }
-        catch (err) {
-            this.logger.warn({ err: err?.message, agent }, "Hub agent incarnation could not be saved; the agent is not a deliverable representative");
-            return null;
-        }
-        return id ? createHash("sha256").update(JSON.stringify(["agend-hub-agent-v2", agent, id])).digest("hex") : null;
-    }
-    hubIncarnationsPath() { return join(this.dataDir, "hub-member", "agent-incarnations.json"); }
-    /**
-     * M-2451 (#3147 residual): written beside hub-member/, in the data directory itself, when an invalidation could not be
-     * made durable in hub-member/. A later process that finds it invalidates every incarnation before handing out any
-     * token, so a restart never revives consent the earlier process had to withdraw (A→B→A, or a removal, while hub-member/
-     * was unwritable).
-     */
-    hubIncarnationsMarkerPath() { return join(this.dataDir, "hub-member-invalidate.pending"); }
-    /** Whether this process has settled the incarnations on disk (the marker handled, the file proven writable). */
-    hubIncarnationsSettled = false;
-    /**
-     * Once per process, before the first token: an invalidation an earlier process could not persist (the marker) clears
-     * every incarnation; and an existing file must be rewritable here, else this process is broken (no token at all) —
-     * an incarnation this process could not rotate must never be handed out. Fails closed: any doubt marks it broken.
-     */
-    settleHubIncarnations() {
-        if (this.hubIncarnationsSettled || this.hubIncarnationsBroken || !this.dataDir)
-            return;
-        const path = this.hubIncarnationsPath(), marker = this.hubIncarnationsMarkerPath();
-        if (existsSync(marker)) {
-            try {
-                unlinkSync(path);
-            }
-            catch (err) {
-                if (err?.code !== "ENOENT") {
-                    this.hubIncarnationsBroken = true;
-                    this.logger.warn({ err: err?.message }, "An earlier Hub consent invalidation is still pending and cannot be applied; no Hub representative token is handed out");
-                    return;
-                }
-            }
-            // The clear is durable; a marker that cannot be removed only clears again next time (over-invalidation, never revival).
-            try {
-                unlinkSync(marker);
-            }
-            catch { /* left: harmless */ }
-            this.logger.warn("An earlier Hub consent invalidation was applied: every Hub representative needs a republish");
-        }
-        if (existsSync(path))
-            this.writeHubIncarnations(this.readHubIncarnations()); // throws (broken) when hub-member/ is not writable
-        this.hubIncarnationsSettled = true;
-    } /**
-     * #3147 r2: set when an invalidation could not be made durable in any way (neither the atomic write nor removing the
-     * file worked). From then on this process hands out no representative token at all, and the transitions the fleet
-     * controls (a config save, a removal) are refused instead of applied.
-     */
-    hubIncarnationsBroken = false;
-    readHubIncarnations() {
-        try {
-            const value = JSON.parse(readFileSync(this.hubIncarnationsPath(), "utf8"));
-            return value && typeof value === "object" && !Array.isArray(value) ? Object.assign(Object.create(null), value) : Object.create(null);
-        }
-        catch {
-            return Object.create(null);
-        }
-    }
-    /**
-     * Persist the incarnation map: "written", or — when the atomic write fails — "cleared": the whole file is removed, which
-     * durably invalidates EVERY earlier incarnation (all consent then needs a republish; never a revival). Throws (and
-     * marks the process broken) only when neither is possible.
-     */
-    writeHubIncarnations(map) {
-        const path = this.hubIncarnationsPath(), tmp = `${path}.${process.pid}.tmp`;
-        try {
-            mkdirSync(join(this.dataDir, "hub-member"), { recursive: true, mode: 0o700 });
-            writeFileSync(tmp, JSON.stringify(map), { mode: 0o600 });
-            renameSync(tmp, path);
-            return "written";
-        }
-        catch (err) {
-            try {
-                rmSync(tmp, { recursive: false, force: true });
-            }
-            catch { /* a directory planted there: left alone */ }
-            try {
-                unlinkSync(path);
-            }
-            catch (gone) {
-                if (gone?.code !== "ENOENT") {
-                    this.hubIncarnationsBroken = true;
-                    // M-2451: record the withdrawal outside hub-member/, so a restart does not revive what this process withdrew.
-                    try {
-                        writeFileSync(this.hubIncarnationsMarkerPath(), "", { mode: 0o600 });
-                    }
-                    catch { /* the data directory too: nothing durable is left */ }
-                    throw err;
-                }
-            }
-            this.logger.warn({ err: err?.message }, "Hub agent incarnations could not be saved; every earlier Hub consent is invalidated (republish needed)");
-            return "cleared";
-        }
-    }
-    /** The agent's durable incarnation id (create: make one if none; else null). A changed fingerprint rotates it. */
-    hubAgentIncarnation(agent, cfg, create) {
-        const fp = createHash("sha256").update(JSON.stringify([cfg.backend ?? "claude-code", cfg.working_directory, cfg.runtime ?? "", cfg.machine_id ?? ""])).digest("hex");
-        const map = this.readHubIncarnations(), entry = Object.prototype.hasOwnProperty.call(map, agent) ? map[agent] : undefined;
-        if (entry && entry.fp === fp && typeof entry.id === "string")
-            return entry.id;
-        if (!entry && !create)
-            return null;
-        map[agent] = { id: randomUUID(), fp };
-        // A rotation that could only clear the file still invalidated the old id durably; the new one is made next time.
-        return this.writeHubIncarnations(map) === "written" ? map[agent].id : null;
-    }
-    /**
-     * Every configuration in force: rotate a recorded agent's incarnation when its backend/folder/runtime changed; drop
-     * removed ones. strict (a config save the fleet is about to write): a failure to make that durable throws, so the save
-     * is refused instead of applied. Otherwise (a load or reload of a hand-edited file) a failure is logged — the
-     * invalidation then is the cleared file, or, if nothing could be written, this process hands out no token at all.
-     */
-    observeHubAgentIncarnations(strict = false) {
-        // Only against a loaded configuration: never forget every agent because none is loaded yet.
-        if (!this.dataDir || !this.fleetConfig?.instances)
-            return;
-        try {
-            this.settleHubIncarnations();
-            if (this.hubIncarnationsBroken)
-                throw new Error("Hub agent incarnations cannot be written here");
-            if (!existsSync(this.hubIncarnationsPath()))
-                return;
-            const instances = this.fleetConfig.instances;
-            for (const agent of Object.keys(this.readHubIncarnations())) {
-                // Gone from the configuration in force (removed by hand in fleet.yaml, too): forgotten, never revived by a re-add.
-                if (Object.prototype.hasOwnProperty.call(instances, agent))
-                    this.hubAgentIncarnation(agent, instances[agent], false);
-                else
-                    this.forgetHubAgentIncarnation(agent, true);
-            }
-        }
-        catch (err) {
-            this.logger?.warn({ err: err?.message }, "Hub agent incarnations could not be checked");
-            if (strict)
-                throw new Error(`Hub consent for a changed agent could not be invalidated durably; the change is not saved (${err?.message})`);
-        }
-    }
-    /** A removed instance's incarnation goes with it (a later instance of the same name is a new one). strict: throw if not durable. */
-    forgetHubAgentIncarnation(agent, strict = false) {
-        try {
-            if (!this.dataDir || !existsSync(this.hubIncarnationsPath()))
-                return;
-            const map = this.readHubIncarnations();
-            if (!Object.prototype.hasOwnProperty.call(map, agent))
-                return;
-            delete map[agent];
-            this.writeHubIncarnations(map);
-        }
-        catch (err) {
-            this.logger.warn({ err: err?.message, agent }, "Hub agent incarnation could not be dropped");
-            if (strict)
-                throw new Error(`Hub consent for ${agent} could not be invalidated durably; refusing the change (${err?.message})`);
-        }
-    }
-    /**
-     * A Hub question to its representative agent: ordinary cross-instance delivery (idle gate, wake, retries), from the
-     * reserved Hub sender with the Hub-issued correlation id. beforeInput runs immediately before the IPC hand-off.
-     */
-    async deliverHubQuestion(input) {
-        const { HUB_REPORT_TARGET } = await import("./hub/representative.js");
-        if (this.shuttingDown || !this.fleetConfig?.instances[input.agent])
-            return false;
-        // Windows agents run through their own runtime, which has no pre-input hook: not a P1 representative.
-        if (isNativeExecInstance(this.fleetConfig.instances[input.agent]))
-            return false;
-        const ipcMeta = {
-            chat_id: "",
-            message_id: `hubmsg-${input.correlationId.slice(4)}`,
-            user: `instance:${HUB_REPORT_TARGET}`,
-            user_id: `instance:${HUB_REPORT_TARGET}`,
-            ts: new Date().toISOString(),
-            thread_id: "",
-            from_instance: HUB_REPORT_TARGET,
-            from_display: "Hub",
-            correlation_id: input.correlationId,
-            request_kind: "query",
-            requires_reply: "true",
-            task_summary: "A question from the Hub",
-        };
-        const result = await this.deliverToInstance(input.agent, { type: "fleet_inbound", targetSession: input.agent, content: input.text, meta: ipcMeta }, { isCrossInstance: true, stillCurrent: input.stillCurrent, beforeInput: input.beforeInput });
-        return result !== false;
-    }
-    /** S-51: why the Hub (or this fleet's Hub membership) is not running, if it is held. Empty while off or running. */
-    getHubHolds() {
-        return this.hubHolds;
-    }
-    hubBrowserCertificate() { return this.hubRuntime?.browserCertificateSettings() ?? null; }
-    hubRetention() { return this.hubRuntime?.retentionSettings() ?? null; }
-    observeRuntimeSwitches() {
-        setConfiguredRuntimeSwitches(this.fleetConfig?.runtimes);
-        if (!this.runtimeEffects || this.runtimeEffectsScheduled)
-            return;
-        this.runtimeEffectsScheduled = true;
-        queueMicrotask(() => { this.runtimeEffectsScheduled = false; this.applyRuntimeSwitches(); });
-    }
-    /**
-     * Turned off: what it allowed ends now — the paired computers' connections (their agents show as offline) or this PC's
-     * Windows process (a turn in progress is cancelled, as when the fleet stops), and those agents' tool sessions.
-     * Turned on: the Windows agents are registered and their chat history read, as at start-up.
-     */
-    applyRuntimeSwitches() {
-        const was = this.runtimeEffects;
-        if (!was || this.shuttingDown)
-            return;
-        const now = { windows_cli: localWindowsCliEnabled(), remote_runtime: remoteRuntimeEnabled() };
-        if (was.windows_cli === now.windows_cli && was.remote_runtime === now.remote_runtime)
-            return;
-        this.runtimeEffects = now;
-        try {
-            if (was.remote_runtime && !now.remote_runtime) {
-                void this.drainNativeRuntime(true);
-            }
-            if (was.windows_cli && !now.windows_cli) {
-                void this.drainNativeRuntime(false);
-            }
-            if (!was.windows_cli && !was.remote_runtime && !this.localPaneDrain && !this.remotePaneDrain) {
-                this.initializeNativeInstances();
-                this.initializeNativeInstances(true);
-            }
-            this.logger.info({ windows_cli: now.windows_cli, remote_runtime: now.remote_runtime }, "Windows runtime switches applied");
-        }
-        catch (error) {
-            this.logger.warn({ err: error }, "Windows runtime switches could not be applied in full");
-        }
-        try {
-            this.emitSseEvent("status", this.getUiStatus());
-        }
-        catch { /* the next status frame carries it */ }
-    }
-    /** An unavailable opt-in runtime must not prevent the Linux fleet from starting or restoring its own history. */
-    initializeNativeInstances(history = false) {
-        if (!windowsCliEnabled())
-            return;
-        try {
-            const runtime = this.nativeInstanceRuntime();
-            if (history)
-                runtime.importHistory();
-            else
-                runtime.register();
-        }
-        catch (error) {
-            this.logger.warn({ err: error }, "Windows runtime state could not be loaded; affected native instances remain unavailable");
-        }
-    }
-    /** Native CLIs are headless: the manager owns the durable delivery generation instead of a tmux daemon. */
-    deliveryBootId(name) {
-        const config = this.fleetConfig?.instances[name];
-        if (isNativeExecInstance(config)) {
-            if (!this.nativeInstanceRuntime().available(name))
-                return null;
-            const machine = config.machine_id ? this.runtimeCoordinator().machine(config.machine_id) : null;
-            return machine ? `runtime:${machine.id}:${machine.bootId ?? machine.generation}` : this.managerBootId;
-        }
-        return this.daemons.get(name)?.bootId ?? null;
-    }
     rawFleetConfig = {};
-    /**
-     * S-51 (#3095, experimental, off by default): the Hub runtime. src/hub/runtime.js is imported only once a Hub switch
-     * (hub.enabled / hub_member.enabled) is on; while both are off nothing Hub-related loads, opens or listens.
-     */
-    hubRuntime = null;
-    /** S3c's currentBinding reader, loaded with the pairing API (only while the member switch is on). */
-    hubMemberBinding = null;
-    /** The member link as the "Connect to a Hub" view shows it (S5's client lifecycle). */
-    hubMemberLink = "offline";
-    /** OutboundContext: the Hub representative's answer hook (null: no member service running, or not a Hub answer). */
-    hubReport(input) {
-        return this.hubReports?.(input) ?? null;
-    }
-    /** The member side's pane-failure hook for a Hub-issued correlation id (else null). */
-    hubDeliveryFailed = null;
-    /** The member side's report_result hook for HUB_REPORT_TARGET while a representative service runs (else null). */
-    hubReports = null;
-    /** The one in-flight creation (single flight): overlapping first observations share it, Stop waits for it. */
-    hubRuntimeInit = null;
-    hubEffectsReady = false;
-    hubEffectsScheduled = false;
-    hubHolds = [];
     rawFleetDocument = null;
     /** #2208: the paths a saveFleetConfig() wrote, for its check that nothing else changed. */
     fleetDocumentWrites = null;
@@ -2380,7 +947,6 @@ export class FleetManager {
     kiroMigrationRuns = new Map();
     /** #1386 "Needs you": the list, its live chat messages and Acknowledge. Started with the fleet (finishStartup). */
     needsYou = null;
-    hubExecutionAttention = null;
     missedOfflineStore = null;
     configHistory = null;
     configHistoryTimer = null;
@@ -2695,8 +1261,6 @@ export class FleetManager {
     /** #2855: a trusted guest's searches, per account. */
     guestSearches = new OfficeWriteLimiter(undefined, { perWindow: GUEST_SEARCHES.perWindow, windowMs: GUEST_SEARCHES.windowMs });
     officeSharesInstance;
-    /** #2861: when each instance was last talked to and answered (no words), for share links' dialogue box. */
-    officeTalk = new OfficeTalk();
     /**
      * #2636: Office share links — the live Office view for people outside the fleet, read-only, on a quick tunnel of
      * their own (a manager and lease of its own: never the fleet's one tunnel lane nor the public link's preview tunnel).
@@ -2713,7 +1277,6 @@ export class FleetManager {
                 hidden: name => crossInstanceVisibility(this.fleetConfig, name) === "hidden",
                 skins: this.officeSkins,
                 levels: () => this.officeLevelsSnapshot(),
-                talk: scope => this.officeTalk.recent(scope),
             },
             manager: new ManagedTunnel({ dataDir: join(this.dataDir, OFFICE_SHARE_TUNNEL_DIR), log: () => this.logger.warn("Office share tunnel cleanup requires attention") }),
             ensure: signal => ensureCloudflared({ dataDir: this.dataDir, pinnedOnly: true, signal }),
@@ -3009,8 +1572,6 @@ export class FleetManager {
      * authorizing revoked links and cookies until the fleet restarted.
      */
     settingsGeneration = 0;
-    /** #2942: the settings baseline the agent-requested Windows changes are checked against (set with the gate). */
-    settingsBaselineReader = null;
     settingsRuntimeRevision = 0;
     settingsConfirmation = null;
     settingsControl = null;
@@ -3067,29 +1628,8 @@ export class FleetManager {
             return this.settingsConfirmation;
         const generation = this.settingsGeneration;
         const current = () => !this.shuttingDown && this.settingsGeneration === generation;
-        const baselines = this.settingsBaselineReader = new SettingsBaselines({ dataDir: this.dataDir, configPath: () => this.configPath,
+        const baselines = new SettingsBaselines({ dataDir: this.dataDir, configPath: () => this.configPath,
             config: () => this.fleetConfig, current: () => [this.settingsGeneration, this.settingsRuntimeRevision, this.shuttingDown],
-            generalLocation: input => this.previewGeneralLocation(input),
-            hubMembership: raw => hubMembershipSettings(raw),
-            // S3c (S-55): a Hub exposure publish's confirmation summary, while a member composition is attached.
-            hubBrowserCertificate: (input, binding) => {
-                const control = this.hubBrowserCertificate();
-                if (!control)
-                    throw Error("unavailable");
-                return control.preview(input, binding);
-            },
-            hubExposure: (input) => {
-                const api = this.hubMemberExposureApi;
-                if (!api)
-                    throw Object.assign(new Error("hub_member_unavailable"), { code: "hub_member_unavailable" });
-                return api.preview(input);
-            },
-            hubPairing: (action, input) => {
-                const api = this.hubMemberPairingApi;
-                if (!api)
-                    throw Object.assign(new Error("hub_member_unavailable"), { code: "hub_member_unavailable" });
-                return pairingSummary(action, input, api.view(), api.boundHub());
-            },
             proof: (kind, target, id, binding, key) => {
                 const map = kind === "provider" ? this.providerSecretChallenges : kind === "binding" ? this.connectionBindingChallenges : this.connectionSecretChallenges;
                 const proof = map.get(id);
@@ -3110,17 +1650,6 @@ export class FleetManager {
         const store = new SettingsConfirmationStore({
             audit: (event, fields) => this.logger.info({ event: `settings_confirmation.${event}`, ...fields }, "Settings confirmation audit"),
             notify: view => view.state === "pending" ? this.promptSettingsChange(store, view) : Promise.resolve(),
-            // alpha.2 (M-2300): an agent's request came, was decided or ran out — the open pages read the list again (a ping
-            // with nothing in it: only a web-only fleet's verified owner may read it, GET /ui/agent-proposals).
-            changed: view => {
-                if (view.source !== "agent_request")
-                    return;
-                this.agentProposalsRev++;
-                broadcastSseEvent(this.sseClients, "agent_proposals", {}, err => this.logger.debug({ err }, "agent_proposals event failed"));
-                // …and a status frame with the new revision: a tab from before the upgrade (its stream knows no `agent_proposals`)
-                // applies status frames, and a polling page reads the same frame at its next /ui/poll.
-                this.emitSseEvent("status", this.getUiStatus());
-            },
         });
         const gate = new SettingsHttpConfirmation(store, {
             principal: req => {
@@ -3134,7 +1663,6 @@ export class FleetManager {
                         && sessions.isCurrent(record, tokenEpoch(this.webToken)) && (!exposure || exposure.isCurrent()) };
             }, baseline: () => baselines.read(), snapshot: () => baselines.snapshot(),
             selfConfirm: (req, id) => this.settingsSelfConfirmation(store, req, id),
-            directAgentCreation: true,
             job: async (id) => {
                 const settlement = this.settingsJobSettlements.get(id);
                 if (!settlement)
@@ -3169,10 +1697,8 @@ export class FleetManager {
         const auth = authorizeSession(req, this.webToken, this.webSessions, { touch: false });
         if (auth.kind !== "ok")
             return null;
-        // #2453 (§0.2): never over the public link — not even a named-link session that is web-verified there. #3008: except
-        // this computer's admin signed in from outside (the authenticator's code, over the link connections from outside
-        // opened): the web-only fleet's owner, judged below by the same authority as here (hostOperator).
-        if (gatewayRequestContext(req) && auth.session.remote !== "totp")
+        // #2453 (§0.2): never over the public link — not even a named-link session that is web-verified there.
+        if (gatewayRequestContext(req))
             return null;
         // …and never a change that turns the named-link option on: that one needs a General's card or the host.
         if (!store.selfConfirmable(id))
@@ -3205,223 +1731,30 @@ export class FleetManager {
         if (own.length !== 1 || own[0].type !== chat.platform || !chat.admin(actor.user_id))
             return null;
         const affected = [...store.affectedConnections(id)]; // read now: a finished change no longer has them
-        const destinations = this.settingsNoticeGenerals(affected, chat.platform);
-        if (!destinations.length)
+        if (!this.settingsNoticeGenerals(affected, chat.platform).length)
             return null;
         const name = this.webPerson({ adapterId: actor.adapter_id, userId: actor.user_id }).name;
         return {
             label: t("settings_confirm.web_verified_label", name),
             // admin() asks chat.current() too; a General a card could go to must still be there (else the host CLI's).
-            current: () => !!verified() && chat.admin(actor.user_id) && destinations.some(route => route.current()),
-            followStop: async (name, begin) => { const route = destinations.find(item => item.current()); if (!route)
-                throw Error("Settings route expired"); await route.followStop(name, begin); },
+            current: () => !!verified() && chat.admin(actor.user_id) && this.settingsNoticeGenerals(affected, chat.platform).length > 0,
             done: view => this.settingsWebConfirmedNotice(view, affected, name, chat.platform),
         };
     }
-    /**
-     * alpha.2 (M-2300; #2973's agent requests, junsion's §6): on a fleet with no chat connection there is no General to
-     * post an agent's Windows request in — it waited for `agend settings confirm` on the host. Its owner (decision
-     * 28c2d3a3: the `agend web --code` session on this computer, web-verified) now sees and decides it from the web's
-     * Needs you. The authority is asked from the request each time, and again at execution by the store (`current`):
-     * still that owner now (this computer, not revoked, signed out or run out), still a fleet with no chat connection,
-     * never over the public link. Anyone else — a guest, a LAN or public-link session, a chat-connected fleet's admin —
-     * gets nothing (a chat fleet keeps General's card as its way).
-     */
-    /**
-     * #2997 review (Prism P2): how many times an agent's request came or was decided — in a web-only fleet's status frame,
-     * so a page that never hears the stream's ping (one polling /ui/poll, one reconnecting, a tab from before the upgrade)
-     * reads the list again when it moves. A count, nothing more.
-     */
-    agentProposalsRev = 0;
-    agentProposalOwner(req) {
-        // #3008: this computer's admin here, or signed in from outside (over the link connections from outside opened) —
-        // asked of the LIVE session each time (#2997 review): a sign-out, an expiry, a revocation or the switch going off
-        // while the request is applied fences it.
-        return this.liveOwner(req, { hostOnly: false });
-    }
-    /**
-     * Refs #3061 (P2a): the new-device approval's one authority — the same one that decides an agent's request: this web-only
-     * fleet's owner, asked of the LIVE session each time (a sign-out, an expiry, a revocation, the authority switch or
-     * "Only this computer can authorize" turning a session into a non-owner is seen at once). A LAN session that signed in
-     * with a one-time code, a session a device approval made, a guest, a chat fleet's admin and the CLI's header token are
-     * none of them this: they are told so, and learn nothing about any request.
-     */
-    deviceApprovalOwner(req) {
-        return this.liveOwner(req, { hostOnly: false });
-    }
-    /**
-     * Refs #3061 (auth-api): device-code sign-in is offered — a web-only fleet with web authorization on. With
-     * `web.verified_authority.enabled: false` no one is an owner (liveOwner → null), so no one could approve: the three
-     * `/auth/device-login*` routes answer 404 and the sign-in page shows no button. "Only this computer can authorize"
-     * does not close it: this computer's own session can still approve.
-     */
-    deviceLoginAvailable() {
-        return this.isWebOnlyFleet() && this.webAuthorityState().enabled;
-    }
-    /** Refs #3061 (P2b): `web.login_qr` (default off), read per page served — the sign-in page then draws the approve link's QR code. */
-    loginQrEnabled() {
-        return this.fleetConfig?.web?.login_qr === true;
-    }
-    /**
-     * GET /ui/devices: is this a web-only fleet, may THIS session approve a new device and end another (is it the verified
-     * owner), and — to an admin session, never to a guest or the CLI's header token — the signed-in devices (Refs #3061, P2b).
-     * `authority`: web authorization is on. With it off nobody is an owner (liveOwner → null), so nobody may add a device or
-     * sign another out; the page says why and points to `agend web-token rotate` on this computer instead of "use the AgEnD
-     * computer", which would not help.
-     */
-    webDevicesStatus(req) {
-        const webOnly = this.isWebOnlyFleet();
-        const owner = webOnly && !!this.deviceApprovalOwner(req);
-        return { webOnly, owner, authority: webOnly && this.webAuthorityState().enabled, devices: webOnly ? this.webDeviceRows(req) : [] };
-    }
-    /**
-     * Refs #3061 (P2b): the device list — this fleet's admin sessions, newest activity first (a guest's sessions are the
-     * Guests page's, and a read-only tier has none): how each was approved, whether it carries owner authority, and which
-     * one is the reader's own. The same people may read this as may read `GET /auth/sessions` (any admin session).
-     *
-     * `ownerVerified` is the §3 verdict for the session as it would be used from where it signs in (a host session from
-     * this computer, a session from outside over the link): one that signed in with a one-time code or a device approval is
-     * not an owner until the authenticator vouches for it. Display only — the checks that act on it run again at each use.
-     */
-    webDeviceRows(req) {
-        const auth = authorizeSession(req, this.webToken, this.webSessions, { touch: false });
-        if (auth.kind !== "ok" || auth.session.tier !== "admin" || !this.webSessions)
-            return [];
-        const authorizations = this.sessionAuthorizationStore();
-        return this.webSessions.list(auth.session.idHash, r => r.tier === "admin").map(summary => {
-            const record = this.webSessions.findByHandle(summary.handle);
-            const gateway = summary.surface === "gateway";
-            const peer = gateway ? authorizations?.get(summary.handle)?.peer ?? "quick_link" : record?.host === true ? "loopback" : "lan";
-            return { handle: summary.handle, label: summary.label, via: summary.via, current: summary.current, surface: summary.surface,
-                created: summary.created, lastSeen: summary.lastSeen, expiresAt: Math.min(summary.absoluteExpiry, summary.idleExpiry),
-                ownerVerified: !!record && !this.webAuthority({ session: record, gateway, peer }).refusal };
-        });
-    }
-    /**
-     * Refs #3061 (P2b): may this request's session end ANOTHER session — one signed in elsewhere, or all of them (auth-api
-     * `DELETE /auth/sessions…`, which an admin session could always do). On a web-only fleet that is the verified owner's:
-     * a session a code or a device approval made is signed in but not an owner, and could otherwise sign out the owner's
-     * own. A fleet with a chat connection is as it was (its admins are the chat's). Ending one's OWN session is never this.
-     */
-    mayEndOtherSessions(req) {
-        return !this.isWebOnlyFleet() || !!this.deviceApprovalOwner(req);
-    }
-    /**
-     * Refs #3061 (P2b): POST /ui/devices/signout {handle} — the owner ends another signed-in device (the settings list's
-     * button). Only the verified owner, asked of the LIVE session each time (a non-owner learns nothing about any handle:
-     * 403 before anything is looked up); only an admin session of this fleet (a guest's is the Guests page's; an unknown
-     * handle and a guest's are the same 404); never the owner's own session here (Sign out is /auth/logout). The device's
-     * authorization goes with it, so a copy of its cookie is nobody's.
-     */
-    webDeviceSignOut(req, handle) {
-        if (!this.isWebOnlyFleet() || !this.webSessions)
-            return { status: 404, body: { error: "not_found" } };
-        const owner = this.deviceApprovalOwner(req);
-        if (!owner)
-            return { status: 403, body: { error: "owner_required" } };
-        if (handle === owner.handle)
-            return { status: 400, body: { error: "this_device" } };
-        const target = this.webSessions.findByHandle(handle);
-        if (!target || target.tier !== "admin")
-            return { status: 404, body: { error: "not_found" } };
-        const { found, durable } = this.webSessions.revokeByHandle(handle, r => r.tier === "admin");
-        if (!found)
-            return { status: 404, body: { error: "not_found" } };
-        this.sessionAuthorizationStore()?.prune(a => a.handle !== handle);
-        this.logger.info({ by: owner.handle.slice(0, 8), handle, label: target.label, via: sessionVia(target), durable }, "Device signed out by the owner");
-        if (!durable)
-            return { status: 500, body: { ok: false, durable: false, error: "not_durable" } };
-        return { status: 200, body: { ok: true } };
-    }
-    /**
-     * Refs #3061 (P2a): look a new device's code up (for the confirm screen), approve it, or deny it — the verified owner's,
-     * on a web-only fleet. The answer is the request as it now stands. Approving only marks the request approved: the new
-     * browser makes its own session when it next asks (auth-api POST /auth/device-login/poll), so no credential passes from
-     * here to there — not in the answer, not through the fleet. A wrong code counts against one fleet-wide breaker; while
-     * it is open every code (a right one too) waits.
-     */
-    webDeviceLoginAct(req, op, code) {
-        const owner = this.deviceApprovalOwner(req);
-        if (!owner)
-            return { status: 403, body: { error: "owner_required" } };
-        const logins = this.webDeviceLogins, token = this.webToken;
-        if (!logins || !token)
-            return { status: 404, body: { error: "not_found" } };
-        const epoch = tokenEpoch(token);
-        const shown = (v) => ({ code: v.code, label: v.label, peer: v.peer, address: v.address, expiresAt: v.expiresAt, state: v.state });
-        if (op === "lookup") {
-            const r = logins.lookup(code, epoch);
-            if (r.kind === "ok")
-                return { status: 200, body: { request: shown(r.view) } };
-            return r.kind === "paused" ? { status: 429, body: { error: "paused", retryAfterMs: r.retryAfterMs } } : { status: 404, body: { error: "not_found" } };
-        }
-        // (The owner above was asked of the live session just now, after the body was read; nothing is awaited since.)
-        const r = logins.decide(code, op === "approve" ? "approved" : "denied", owner.handle, epoch);
-        if (r.kind === "ok") {
-            this.logger.info({ approvedBy: owner.handle.slice(0, 8), label: r.view.label, peer: r.view.peer, decision: r.view.state }, op === "approve" ? "New device sign-in approved" : "New device sign-in denied");
-            return { status: 200, body: { request: shown(r.view) } };
-        }
-        if (r.kind === "decided")
-            return { status: 409, body: { error: "already_decided", state: r.state } };
-        return r.kind === "paused" ? { status: 429, body: { error: "paused", retryAfterMs: r.retryAfterMs } } : { status: 404, body: { error: "not_found" } };
-    }
-    /** alpha.2: the agents' requests waiting for this web-only fleet's owner, or null when the reader is not that owner. */
-    webAgentProposals(req) {
-        if (!this.agentProposalOwner(req))
-            return null;
-        return this.settingsGate().store.listBySource("agent_request");
-    }
-    /**
-     * alpha.2: the owner's Approve or Reject of an agent's request. The store claims it before its first await (a second
-     * click, from here or the host, finds it no longer pending) and asks the owner, the request (its fleet generation and
-     * Windows switch) and the target machine again before and while it runs the same creation code the web uses. The
-     * answer is always the request as it now stands: applied (with the new agent's name), rejected, expired, stale or
-     * failed (with its reason), or already decided.
-     */
-    async webDecideAgentProposal(req, id, decision) {
-        const owner = this.agentProposalOwner(req);
-        if (!owner)
-            return { status: 403, body: { error: "owner_required", message: t("settings_confirm.web_owner_required") } };
-        const store = this.settingsGate().store, before = store.inspect(id);
-        if (!before || before.source !== "agent_request")
-            return { status: 404, body: { error: "not_found", message: t("settings_confirm.no_longer_pending") } };
-        try {
-            const view = await store.decide(id, decision, { ...owner, via: "web" });
-            this.logger.info({ id, decision, state: view.state }, "Agent request decided from the web by this computer's admin");
-            return { status: 200, body: { view, agent: agentNameOf(view) } };
-        }
-        catch (err) {
-            const code = err instanceof SettingsConfirmationError ? err.code : "decide_failed";
-            const status = err instanceof SettingsConfirmationError ? err.status : 500;
-            // Already decided (a double click, the host's command), run out or withdrawn: say what it is now.
-            return { status, body: { error: code, message: t(code === "admin_required" ? "settings_confirm.web_owner_required" : "settings_confirm.no_longer_pending"), view: store.inspect(id) } };
-        }
-    }
-    /** A confirmation belongs to the server route/lifetime, not the availability of General's model. */
-    settingsGeneralRoute(name, platform, excluded) {
-        const config = this.fleetConfig?.instances[name];
-        if (!config?.general_topic || this.shuttingDown || this.ipcStoppingInstances.has(name))
-            return null;
-        const adapterId = this.getInstanceAdapterId(name), adapter = this.getAdapterForInstance(name);
-        if (!adapterId || !adapter || excluded.has(adapterId) || adapter.type !== platform)
-            return null;
-        const chatId = this.getGroupIdForInstance(name), topic = String(config.topic_id ?? "");
-        if (!chatId || !topic)
-            return null;
-        const route = () => !this.shuttingDown && this.fleetConfig?.instances[name]?.general_topic === true
-            && this.adapterState.get(adapterId)?.status === "connected"
-            && this.getInstanceAdapterId(name) === adapterId && this.getAdapterForInstance(name) === adapter
-            && this.getGroupIdForInstance(name) === chatId && String(this.fleetConfig?.instances[name]?.topic_id ?? "") === topic;
-        const lifetime = new SettingsRouteLifetime(name, route, () => this.lifecycle.epochOf(name), () => this.ipcStoppingInstances.has(name));
-        return lifetime.current() ? { adapterId, adapter, chatId, topic, current: lifetime.current, followStop: lifetime.followStop.bind(lifetime) } : null;
-    }
-    /** Connected, same-platform, unaffected server routes can post cards even while the model is offline. */
+    /** #2170: the Generals a chat card could be posted in (promptSettingsChange's rule): connected, on the platform, unaffected. */
     settingsNoticeGenerals(affected, platform) {
-        const excluded = new Set(affected);
-        return Object.keys(this.fleetConfig?.instances ?? {}).flatMap(name => {
-            const route = this.settingsGeneralRoute(name, platform, excluded);
-            return route ? [route] : [];
-        });
+        const excluded = new Set(affected), found = [];
+        for (const [name, config] of Object.entries(this.fleetConfig?.instances ?? {})) {
+            if (!config.general_topic || !this.daemons.get(name))
+                continue;
+            const adapterId = this.getInstanceAdapterId(name), adapter = this.getAdapterForInstance(name);
+            if (!adapterId || !adapter || excluded.has(adapterId) || adapter.type !== platform || this.adapterState.get(adapterId)?.status !== "connected")
+                continue;
+            const chatId = this.getGroupIdForInstance(name), topic = String(config.topic_id ?? "");
+            if (chatId && topic)
+                found.push({ adapterId, adapter, chatId, topic });
+        }
+        return found;
     }
     /**
      * #2170: General's notice of a change confirmed from the web — the first General a chat card could have been posted
@@ -3480,119 +1813,6 @@ export class FleetManager {
         return { platform, current, admin: userId => current() && !!userId
                 && identities.every(owner => this.isFleetAdmin(userId, owner.id)) };
     }
-    /**
-     * #2942: a Windows create or settings change an AGENT asked for. Nothing is created or written here: it becomes a
-     * pending settings change whose General card a fleet admin must confirm (promptSettingsChange — the same admin rule
-     * as every card). Its apply runs the same creation/patch code the web uses, inside the store's SettingsExecution, with
-     * the confirming admin, the Windows switch and the target machine asked again at that moment.
-     */
-    async proposeAgentWindowsChange(input) {
-        const gate = this.settingsGate(), baselines = this.settingsBaselineReader;
-        if (!baselines || !this.fleetConfig)
-            throw new Error("Fleet configuration is unavailable");
-        const generation = this.settingsGeneration, machineId = input.machineId;
-        const switchOn = () => machineId ? remoteRuntimeEnabled() : localWindowsCliEnabled();
-        const online = () => !machineId || (remoteRuntimeEnabled() && this.runtimeCoordinator().machine(machineId)?.status === "online");
-        if (!switchOn())
-            throw new Error(machineId ? "Remote runtime is not enabled" : LOCAL_WINDOWS_CLI_OFF);
-        const baseline = await baselines.read(), snapshot = settingsFingerprint(baselines.snapshot());
-        const { view } = gate.store.propose({ session: `agent:${input.requester}`, key: `agent-windows:${input.key}`,
-            requestFingerprint: input.fingerprint, fingerprint: input.fingerprint, section: "channel", requestedBy: input.requester,
-            source: "agent_request", summary: input.summary, bytes: input.bytes, authority: input.authority, affectedConnections: [],
-            current: () => !this.shuttingDown && this.settingsGeneration === generation && switchOn(),
-            snapshot: () => baselines.snapshot(),
-            unchanged: async () => (await baselines.read()).fingerprint === baseline.fingerprint && settingsFingerprint(baselines.snapshot()) === snapshot,
-            // The store's own fence (this confirming admin, the session, the state) plus the switch and machine now.
-            apply: async (actorCurrent, execution) => {
-                execution.assert();
-                // alpha.2 polish: a paired machine whose CLI inventory has not arrived yet (just paired) is asked for its own
-                // report first (it runs on that PC), so the creation validates against what is installed there — never a refusal
-                // that only a manual Refresh would undo. Its answer or failure changes nothing else; the fence is asked again.
-                if (machineId && online() && !inventoryProbed(this.runtimeCoordinator().machine(machineId)?.inventory)) {
-                    // `force`: the runner's cached answer on a fresh profile is the placeholder itself (#3005 rig recheck).
-                    try {
-                        await this.runtimeCoordinator().call(machineId, "probe", { force: true });
-                    }
-                    catch { /* validation says what is missing */ }
-                    execution.assert();
-                }
-                return input.apply(() => actorCurrent() && online(), execution);
-            } });
-        return view;
-    }
-    /** #2942: create_instance with runtime "windows" from an agent: validated like the web, then held for General. */
-    async requestWindowsCreate(requester, rawArgs) {
-        const cfg = this.fleetConfig;
-        if (!cfg)
-            throw new Error("Fleet configuration is unavailable");
-        let parsed;
-        try {
-            parsed = parseNativeInstanceCreate(rawArgs);
-        }
-        catch {
-            throw new Error("Invalid Windows agent request: check the directory, sandbox, backend and model");
-        }
-        // The web's own projection: the same validation, topic target and diff the admin's dashboard confirmation shows.
-        let diff;
-        try {
-            diff = prepareSettingsEffect("POST", "/ui/instances", rawArgs, { config: cfg, classic: {} }).diff;
-        }
-        catch {
-            throw new Error("Invalid Windows agent request: its topic connection is not one this fleet can use");
-        }
-        if (!diff)
-            throw new Error("Invalid Windows agent request");
-        return this.proposeAgentWindowsChange({ requester, key: diff.fingerprint, fingerprint: diff.fingerprint, summary: diff.summary,
-            machineId: parsed.input.machineId, bytes: JSON.stringify(rawArgs).length,
-            // The General card is the confirmation for an agent's request, whatever the requested connection (a topic or none).
-            authority: { connections: diff.authority?.connections ?? [], primaryGeneral: true, unknown: false },
-            apply: (allowed, execution) => createNativeWindowsInstance(this, parsed, allowed, execution) });
-    }
-    /** #2942: update_instance_config on a Windows agent: only the fields the web editor allows, held for General. */
-    async requestWindowsConfig(requester, name, patch) {
-        const inst = this.fleetConfig?.instances[name];
-        if (!isWindowsInstance(inst))
-            throw new Error("Windows agent not found");
-        let edit;
-        try {
-            edit = NativeInstanceConfigEdit.parse(patch);
-        }
-        catch {
-            throw new Error("Invalid Windows agent settings: display_name, description and model only");
-        }
-        const before = { display_name: inst.display_name ?? "", description: inst.description ?? "", model: inst.model ?? "" };
-        const changed = Object.keys(edit).filter(key => edit[key] !== before[key]);
-        if (!changed.length)
-            throw new Error("Nothing to change: these settings already have these values");
-        const summary = changed.map(key => `${name} ${key}: ${settingsDisplay(before[key])} → ${settingsDisplay(edit[key])}`);
-        const machineId = typeof inst.machine_id === "string" ? inst.machine_id : undefined;
-        // #2973 review (Prism P1): a persistent pane is bound to a chat connection; changing it (a model change restarts it)
-        // needs that connection's admins as well as the primary General's, exactly as its creation did. An instance whose
-        // binding names no single configured connection is refused (fail closed), never confirmed by the General alone.
-        const connections = [];
-        if (isNativePaneInstance(inst) || inst.channel_id !== undefined) {
-            const bound = inst.channel_id, channels = this.fleetConfig?.channels ?? (this.fleetConfig?.channel ? [this.fleetConfig.channel] : []);
-            if (typeof bound !== "string" || channels.filter(ch => (ch.id ?? ch.type) === bound).length !== 1)
-                throw new Error("This Windows agent's chat connection cannot be resolved; change its settings in the web dashboard");
-            connections.push(bound);
-        }
-        return this.proposeAgentWindowsChange({ requester, key: `${name}:${settingsFingerprint(edit)}`, fingerprint: settingsFingerprint([name, edit]),
-            summary, machineId, bytes: JSON.stringify(edit).length, authority: { connections, primaryGeneral: true, unknown: false },
-            // #2973 review (Prism P2): the update may wait for its lifecycle turn; if the agent is rebound meanwhile (B → C), the
-            // approval for B must not stop or change it on C. Pin the approved target and require the execution's snapshot to be
-            // unchanged before every pre-commit effect; the post-commit restart keeps its own (refreshed) checks.
-            apply: (allowed, execution) => {
-                const pinned = { channel: inst.channel_id, machine: inst.machine_id, adapter: inst.native_adapter, runtime: inst.runtime };
-                const sameTarget = () => {
-                    const now = this.fleetConfig?.instances[name];
-                    return !!now && now.channel_id === pinned.channel && now.machine_id === pinned.machine && now.native_adapter === pinned.adapter && now.runtime === pinned.runtime;
-                };
-                // Before the commit: the exact target and an unchanged snapshot. After runtime.update completes the transaction,
-                // current() is false by design; the committed operation's restart receipt then needs the same actor, target and
-                // switch checks plus `completed` — a completed execution can never authorize another write (mutate refuses).
-                return updateNativeWindowsInstance(this, name, edit, () => allowed() && sameTarget() && (execution.completed || execution.current()), execution);
-            } });
-    }
     async promptSettingsChange(store, view) {
         const generation = this.settingsGeneration;
         const authority = this.settingsChatAuthority(store, view.id);
@@ -3601,15 +1821,25 @@ export class FleetManager {
             return;
         }
         const excluded = new Set(store.affectedConnections(view.id));
-        for (const name of Object.keys(this.fleetConfig?.instances ?? {})) {
-            const route = this.settingsGeneralRoute(name, authority.platform, excluded);
-            if (!route)
+        for (const [name, config] of Object.entries(this.fleetConfig?.instances ?? {})) {
+            if (!config.general_topic)
+                continue;
+            const adapterId = this.getInstanceAdapterId(name), adapter = this.getAdapterForInstance(name);
+            const general = this.daemons.get(name);
+            if (!adapterId || !adapter || !general || excluded.has(adapterId) || adapter.type !== authority.platform)
+                continue;
+            const chatId = this.getGroupIdForInstance(name), topic = String(config.topic_id ?? "");
+            if (!chatId || !topic)
                 continue;
-            const { adapterId, adapter, chatId, topic } = route;
             let retired = false, attached = false;
             const postingDeadline = performance.now() + Math.min(5000, view.remaining_ms);
-            const current = () => !retired && (attached || performance.now() < postingDeadline) && this.settingsGeneration === generation
-                && route.current() && authority.current();
+            const current = () => !retired && (attached || performance.now() < postingDeadline) && !this.shuttingDown && this.settingsGeneration === generation
+                && this.fleetConfig?.instances[name]?.general_topic === true
+                && this.daemons.get(name) === general && !this.ipcStoppingInstances.has(name)
+                && this.adapterState.get(adapterId)?.status === "connected"
+                && this.getInstanceAdapterId(name) === adapterId && this.getAdapterForInstance(name) === adapter
+                && this.getGroupIdForInstance(name) === chatId && String(this.fleetConfig?.instances[name]?.topic_id ?? "") === topic
+                && authority.current();
             if (!current())
                 continue;
             try {
@@ -3619,7 +1849,7 @@ export class FleetManager {
                         t("settings_confirm.requester", view.requested_by), ...view.summary].join("\n"),
                     choices: [{ action: "confirm", label: t("settings_confirm.confirm_button") }, { action: "reject", label: t("settings_confirm.reject_button") }],
                     expiredText: t("settings_confirm.no_longer_pending"), timeoutMs: view.remaining_ms,
-                    extra: { pendingChangeId: view.id, confirmationCurrent: current, confirmationAdmin: userId => current() && authority.admin(userId), confirmationStop: route.followStop },
+                    extra: { pendingChangeId: view.id, confirmationCurrent: current, confirmationAdmin: userId => current() && authority.admin(userId) },
                 });
                 void posted.then(nonce => {
                     if (!retired)
@@ -3887,7 +2117,6 @@ export class FleetManager {
         try {
             const view = await this.settingsGate().store.decide(entry.pendingChangeId, action, {
                 label: t("settings_confirm.admin_label", data.userId ?? ""),
-                followStop: entry.confirmationStop,
                 current: () => entry.confirmationCurrent?.() === true && this.getAdapterForInstance(entry.instanceName) === entry.adapter
                     && !!data.userId && entry.confirmationAdmin?.(data.userId) === true,
             });
@@ -3922,8 +2151,6 @@ export class FleetManager {
     sseHeartbeatMs = SSE_HEARTBEAT_MS;
     /** The dashboard's login codes. Memory only: a code that outlives the process is a code nobody can prove was not copied. */
     webLoginCodes = null;
-    /** Refs #3061 (P2a): device-code sign-in requests (in memory; web-device-login.ts). Read by auth-api as `webDeviceLogins`. */
-    webDeviceLogins = null;
     /**
      * #1920 step 4: guests' codes, apart from the admins' — one per account, so no guest's `/web` withdraws another's or
      * an admin's code (#2093 review), at most 32 at once. Local sign-in only for now (audience "local").
@@ -4281,15 +2508,12 @@ export class FleetManager {
     }
     /** Synchronous SQLite admission; the caller may acknowledge only after this returns. */
     admitDurableDelivery(input) {
-        const bindingHold = this.generalLocationDeliveryHold(input.targetInstance);
-        if (bindingHold)
-            throw Error(bindingHold);
         const outbox = this.deliveryOutbox;
         if (!outbox)
             throw new Error("Durable delivery store is unavailable");
-        const currentSourceBootId = this.getDaemonBootId(input.sourceInstance);
-        const sourceDaemonBootId = input.sourceDaemonBootId ?? currentSourceBootId;
-        if (!currentSourceBootId || !sourceDaemonBootId || currentSourceBootId !== sourceDaemonBootId) {
+        const source = this.daemons.get(input.sourceInstance);
+        const sourceDaemonBootId = input.sourceDaemonBootId ?? source?.bootId;
+        if (!source || !sourceDaemonBootId || source.bootId !== sourceDaemonBootId) {
             throw new Error("Source daemon generation is no longer current; outcome is unknown");
         }
         const sourceKey = `mcp:${input.sourceInstance}:${input.operationId}:${input.targetInstance}:${input.targetSession ?? ""}:${input.kind}`;
@@ -4323,7 +2547,7 @@ export class FleetManager {
         const human = (item) => {
             if (!item.authority || !state)
                 return item;
-            const authority = this.receiptAuthorityNow(item.authority, state);
+            const authority = authorityNow(item.authority, state);
             return { ...item, authority, ...(authority.downgraded ? { source_instance: "human:web:unknown" } : {}) };
         };
         // #1641: a sender that sees only `queued` cannot tell "next in line" from "the target is stuck": say which.
@@ -4352,11 +2576,6 @@ export class FleetManager {
         return this.daemons.get(target)?.notAcceptingReason?.() ?? null;
     }
     getDaemonBootId(instanceName) {
-        if (this.generalLocationDeliveryHold(instanceName))
-            return undefined;
-        if (isNativeExecInstance(this.fleetConfig?.instances[instanceName])) {
-            return !this.shuttingDown && windowsCliEnabled() && this.nativeMcpStore?.hasActive(instanceName) ? this.managerBootId : undefined;
-        }
         return this.daemons.get(instanceName)?.bootId;
     }
     markDurableResponseDelivered(sourceInstance, operationId) {
@@ -4365,22 +2584,8 @@ export class FleetManager {
     /** Called after a replacement Daemon object is installed in lifecycle.daemons. */
     onDaemonReady(name, daemonBootId) {
         const daemon = this.daemons.get(name);
-        if (daemon?.bootId === daemonBootId) {
+        if (daemon?.bootId === daemonBootId)
             this.listenForWorkingState(name, daemon);
-            const cfg = this.fleetConfig?.instances[name];
-            if (cfg?.general_topic && !this.generalLocationFlights.has(name) && daemon.getProcessStatus() === "running"
-                && (!isNativePaneInstance(cfg) || daemon.nativePaneCurrent())) {
-                try {
-                    if (this.generalBindings().completeSelected(name, cfg)) {
-                        this.needsYou?.poke();
-                        this.logger.info({ name }, "General location's selected start receipt settled after recovery");
-                    }
-                }
-                catch (err) {
-                    this.logger.warn({ name, err }, "General location start receipt remains held");
-                }
-            }
-        }
         // #3066 §1d: a Codex launch records the credential profile it runs under, so its usage is told by account.
         if (daemon?.bootId === daemonBootId && this.backendNameOf(name) === "codex") {
             void recordProfileLaunch(join(this.getInstanceDir(name), PROFILE_TIMELINE_FILE), this.credentialProfileOf(name, "codex") ?? "default");
@@ -4528,15 +2733,6 @@ export class FleetManager {
         this.deliveryPumpRunning = true;
         this.deliveryPumpScheduled = false;
         try {
-            // Native workers have no resident daemon to wake. Pending durable work resumes their logical instance;
-            // the Windows bridge still owns the single physical execution slot.
-            for (const target of new Set(outbox.listPending().map(row => row.targetInstance))) {
-                if (isNativeExecInstance(this.fleetConfig?.instances[target])) {
-                    const runtime = this.nativeInstanceRuntime(), agent = runtime.get(target);
-                    if (agent?.paused && !agent.blocked)
-                        runtime.setPaused(target, false);
-                }
-            }
             outbox.expireStale(undefined, undefined, target => {
                 const failure = this.wakeCoordinator?.wakeFailure(target);
                 return failure ? `target could not be woken (${failure})` : undefined;
@@ -4549,7 +2745,7 @@ export class FleetManager {
                 // Phase 2c: a lane a queue worker owns is never claimed here.
                 target => this.queueWorkers.has(target) || this.isInstanceRestarting(target) || this.wakeCoordinator?.blocksClaim(target)
                     ? null
-                    : this.deliveryBootId(target), this.activeDurableTargets, row => this.recoveryDeliveryEligible(row));
+                    : this.daemons.get(target)?.bootId ?? null, this.activeDurableTargets, row => this.recoveryDeliveryEligible(row));
                 if (!claimed)
                     break;
                 this.activeDurableTargets.add(claimed.targetInstance);
@@ -4610,7 +2806,7 @@ export class FleetManager {
             wanted: () => this.deliveryWorkerMode(target) === "on",
             available: () => !this.shuttingDown && this.deliveryOutbox?.isOpen === true,
             blocked: () => this.isInstanceRestarting(target) || this.wakeCoordinator?.blocksClaim(target) === true,
-            daemonBootId: () => this.deliveryBootId(target),
+            daemonBootId: () => this.daemons.get(target)?.bootId ?? null,
             claim: bootId => this.deliveryOutbox?.claimNext(this.managerBootId, candidate => candidate === target ? bootId : null, new Set(), row => this.recoveryDeliveryEligible(row)),
             tryAcquireBudget: () => {
                 if (this.activeDurableTargets.size >= 8)
@@ -4641,10 +2837,6 @@ export class FleetManager {
         const outbox = this.deliveryOutbox;
         if (!outbox)
             return;
-        if (isNativeExecInstance(this.fleetConfig?.instances[claimed.targetInstance])) {
-            await this.dispatchNativeDurableDelivery(claimed);
-            return;
-        }
         const target = claimed.targetInstance;
         const attempt = claimed.attemptNo;
         const payload = { ...claimed.payload };
@@ -4726,85 +2918,6 @@ export class FleetManager {
         }
         await laneReleased;
     }
-    /** The ordinary durable lane, with provider completion proof instead of terminal/IPC submission proof. */
-    async dispatchNativeDurableDelivery(claimed) {
-        const outbox = this.deliveryOutbox;
-        if (!outbox)
-            return;
-        const { deliveryId, targetDaemonBootId, attemptNo, targetInstance: target } = claimed;
-        let begun = false;
-        try {
-            if (["raw_paste", "steer"].includes(claimed.kind)) {
-                if (outbox.begin(deliveryId, targetDaemonBootId, attemptNo) === "begun")
-                    outbox.complete(deliveryId, targetDaemonBootId, attemptNo, "failed", "Windows runtime does not support terminal input or steering");
-                return;
-            }
-            const meta = claimed.payload.meta && typeof claimed.payload.meta === "object" ? claimed.payload.meta : {};
-            const task = await this.nativeInstanceRuntime().execute(target, { ...claimed.payload, requestId: deliveryId, meta: { ...meta, from_instance: claimed.sourceInstance, correlation_id: claimed.correlationId } }, {
-                stillCurrent: () => !this.shuttingDown,
-                beforeStart: () => { if (outbox.begin(deliveryId, targetDaemonBootId, attemptNo) !== "begun")
-                    throw new Error("Windows delivery attempt is no longer current"); begun = true; },
-            });
-            const outcome = task.outcomeConfirmed === false ? "uncertain" : task.status === "completed" ? "delivered" : "failed";
-            outbox.complete(deliveryId, targetDaemonBootId, attemptNo, outcome, task.error || task.status);
-            // Return a requested peer report when the provider did not explicitly report it through scoped MCP.
-            if (meta.requires_reply === "true" && claimed.correlationId && !task.reportedCorrelationIds?.includes(claimed.correlationId) && this.fleetConfig?.instances[claimed.sourceInstance]) {
-                const text = (task.status === "completed" ? task.output : `Windows task ${task.status}: ${task.error || task.output}`).slice(0, 8000);
-                outbox.admit({ sourceKey: `native-result:${deliveryId}`, operationId: `native-result:${deliveryId}`, sourceInstance: target, sourceDaemonBootId: this.managerBootId,
-                    targetInstance: claimed.sourceInstance, kind: "fleet_inbound", correlationId: claimed.correlationId,
-                    payload: { type: "fleet_inbound", content: text || "Windows task completed without text output", meta: { from_instance: target, correlation_id: claimed.correlationId, requires_reply: "false", source: "native_runtime" } } });
-                this.scheduleDeliveryOutboxPump();
-            }
-        }
-        catch (error) {
-            const reason = error instanceof Error ? error.message : String(error);
-            if (begun)
-                outbox.complete(deliveryId, targetDaemonBootId, attemptNo, "uncertain", reason);
-            else
-                outbox.retryBeforeBegin(deliveryId, targetDaemonBootId, attemptNo, reason, 5000);
-            this.logger.warn({ target, deliveryId, err: reason }, "Windows durable delivery did not complete");
-        }
-    }
-    /** A runtime's persisted completion can outlive this manager. Resolve its original delivery fence, never send
-     * the prompt again, and reconstruct a missing peer report using the same durable operation ID. */
-    reconcileRemoteDelivery(machineId, task) {
-        const outbox = this.deliveryOutbox;
-        if (!outbox?.isOpen || !task.finishedAt || task.outcomeConfirmed !== true || !["completed", "failed", "cancelled"].includes(task.status))
-            return;
-        const key = `${task.id}:${task.finishedAt}:${task.status}`;
-        if (this.reconciledRemoteResults.has(key))
-            return;
-        const row = outbox.get(task.id);
-        if (!row || !isNativeExecInstance(this.fleetConfig?.instances[row.targetInstance]) || this.fleetConfig?.instances[row.targetInstance]?.machine_id !== machineId
-            || !row.targetDaemonBootId || this.activeDurableTargets.has(row.targetInstance))
-            return;
-        if (row.state === "submission_started" || row.state === "reconciliation_pending") {
-            if (!outbox.complete(row.deliveryId, row.targetDaemonBootId, row.attemptNo, task.status === "completed" ? "delivered" : "failed", task.error || "Runtime completion recovered after reconnect"))
-                return;
-        }
-        else if (row.state === "uncertain" && task.status === "completed") {
-            if (outbox.markConsumed(row.deliveryId, row.targetDaemonBootId, row.attemptNo, "turn", "Paired runtime journal confirmed this exact execution completed") === "ignored")
-                return;
-        }
-        else if (row.state !== "delivered" && row.state !== "failed")
-            return;
-        const meta = row.payload.meta && typeof row.payload.meta === "object" ? row.payload.meta : {};
-        if (meta.requires_reply !== "true" || !row.correlationId || !this.fleetConfig?.instances[row.sourceInstance]) {
-            this.reconciledRemoteResults.add(key);
-            return;
-        }
-        const reports = outbox.queryStatusForInstance(row.targetInstance, { correlationId: row.correlationId, limit: 100 }).items;
-        if (reports.some(report => report.source_instance === row.targetInstance && report.target_instance === row.sourceInstance
-            && report.kind === "report" && !["failed", "cancelled"].includes(report.state))) {
-            this.reconciledRemoteResults.add(key);
-            return;
-        }
-        const text = (task.status === "completed" ? task.output : `Windows task ${task.status}: ${task.error || task.output}`).slice(0, 8000);
-        outbox.admit({ sourceKey: `native-result:${row.deliveryId}`, operationId: `native-result:${row.deliveryId}`, sourceInstance: row.targetInstance, sourceDaemonBootId: this.managerBootId,
-            targetInstance: row.sourceInstance, kind: "fleet_inbound", correlationId: row.correlationId,
-            payload: { type: "fleet_inbound", content: text || "Windows task completed without text output", meta: { from_instance: row.targetInstance, correlation_id: row.correlationId, requires_reply: "false", source: "native_runtime" } } });
-        this.reconciledRemoteResults.add(key);
-    }
     async waitForDurableLaneRelease(claimed) {
         const outbox = this.deliveryOutbox;
         if (!outbox)
@@ -5261,8 +3374,6 @@ export class FleetManager {
         this.warnAboutRemovedLoginMode(loaded);
         this.enforceGuestSwitch();
         this.observeWebAuthority(); // #2453 review: a reload's web-authority switches are seen at once
-        this.observeRuntimeSwitches(); // M-2255: so are the Windows runtimes' switches
-        this.observeHubSwitches(); // S-51: and the Hub's (no-op until the fleet has started)
         // Child tool/guidance readers must follow this fleet's actual config, including --config.
         // Scope the path to its owning data directory so another inherited home's override cannot enable CW.
         process.env.AGEND_FLEET_DATA_DIR = resolvePath(this.dataDir);
@@ -5316,7 +3427,6 @@ export class FleetManager {
      * guild channel.
      */
     reregisterClassicChannels() {
-        this.nativeMcpStore?.observePolicies();
         this.agentCredentialsCache?.observePolicies();
         if (!this.classicChannels)
             return;
@@ -5370,9 +3480,13 @@ export class FleetManager {
     }
     /** AgEnD package version (for the Settings "current version" / What's New). */
     get currentVersion() {
-        return RUNNING_BUILD.version;
+        try {
+            return JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf-8")).version ?? "unknown";
+        }
+        catch {
+            return "unknown";
+        }
     }
-    get currentBuild() { return RUNNING_BUILD; }
     /**
      * Resolve a slash-command target in a channel. Classic channels are looked up
      * per-bot (same-channel multi-bot); a fleet-topic instance is found via the
@@ -5689,8 +3803,6 @@ export class FleetManager {
     }
     /** Get the adapter bound to an instance, falling back to primary adapter */
     getAdapterForInstance(name) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name]))
-            return null;
         const worldId = this.getInstanceAdapterId(name);
         if (worldId)
             return this.worlds.get(worldId)?.adapter ?? this.adapter;
@@ -5753,8 +3865,6 @@ export class FleetManager {
     }
     /** Get the group_id for an instance's bound adapter */
     getGroupIdForInstance(name) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name]))
-            return "";
         const adapterId = this.getInstanceAdapterId(name);
         const world = adapterId ? this.worlds.get(adapterId) : undefined;
         return world?.groupId ?? String(this.getChannelConfig(adapterId)?.group_id ?? "");
@@ -5791,8 +3901,6 @@ export class FleetManager {
      */
     getInstanceAdapterId(name) {
         const cfg = this.fleetConfig?.instances[name];
-        if (isNativeExecInstance(cfg))
-            return undefined;
         if (cfg)
             return cfg.channel_id ?? this.getPrimaryAdapterId();
         if (this.classicChannels?.getChannelIdByInstance(name) !== undefined) {
@@ -5820,32 +3928,9 @@ export class FleetManager {
         this.instanceWorldBinding.set(name, adapterId);
     }
     getInstanceStatus(name) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-            try {
-                return this.nativeInstanceRuntime().status(name);
-            }
-            catch {
-                return "crashed";
-            }
-        }
         if (this.lifecycle.isPaused(name))
             return "paused";
         const daemon = this.lifecycle.daemons.get(name);
-        if (isNativePaneInstance(this.fleetConfig?.instances[name])) {
-            const config = this.fleetConfig.instances[name];
-            if (config.machine_id ? !remoteRuntimeEnabled() : !localWindowsCliEnabled())
-                return "stopped";
-            if (daemon) {
-                const native = daemon, status = native.getProcessStatus?.() ?? "crashed";
-                return status === "running" && native.nativePaneCurrent?.() !== true ? "crashed" : status;
-            }
-            try {
-                return this.nativeInstanceRuntime().get(name)?.activeId ? "crashed" : "stopped";
-            }
-            catch {
-                return "crashed";
-            }
-        }
         const processStatus = this.instanceProcessStatus.get(name);
         // IPC can be disconnected during a respawn, so the event which announces
         // the new live pane may be missed.  The in-process daemon is authoritative
@@ -5879,14 +3964,6 @@ export class FleetManager {
         }
     }
     getInstanceExecutionState(name) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-            try {
-                return this.nativeInstanceRuntime().execution(name);
-            }
-            catch {
-                return null;
-            }
-        }
         if (this.lifecycle.isPaused(name))
             return null;
         // Process status wins over a stale pane snapshot. A dead remain-on-exit pane
@@ -5897,8 +3974,6 @@ export class FleetManager {
     }
     /** Pure read of the single daemon-owned observation; no probe/capture or second tracker. */
     getInstanceInteraction(name) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name]))
-            return null;
         if (this.lifecycle.isPaused(name) || this.instanceProcessStatus.has(name))
             return null;
         const daemon = this.lifecycle.daemons.get(name);
@@ -5986,8 +4061,6 @@ export class FleetManager {
                 bindings.push([name, backend, profile]);
         };
         for (const [name, config] of Object.entries(this.fleetConfig?.instances ?? {})) {
-            if (isWindowsInstance(config))
-                continue; // Windows sign-ins and usage do not belong to the Linux account.
             // loadFleetConfig() has already merged the fleet default into each row.
             const backend = config.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
             add(name, backend, instanceCredentialProfile(config, this.fleetConfig?.defaults, backend));
@@ -6318,7 +4391,7 @@ export class FleetManager {
                 finish(false);
         });
     }
-    async deliverWithIdleGate(instanceName, payload, timeoutMs, deliveryEpoch, noInlineWake = false, stillCurrent, onStartRetryHold, beforeInput) {
+    async deliverWithIdleGate(instanceName, payload, timeoutMs, deliveryEpoch, noInlineWake = false, stillCurrent, onStartRetryHold) {
         if (this.shuttingDown || !this.deliveryCurrent(instanceName, deliveryEpoch, stillCurrent))
             return false;
         await this.holdDeliveryForStorm(instanceName, deliveryEpoch);
@@ -6357,8 +4430,7 @@ export class FleetManager {
             const log = idleGateTimeoutLog(instanceName, timeoutMs, this.instanceStateCache.get(instanceName), Date.now());
             this.logger[log.level](log.fields, log.message);
         }
-        // The Hub representative's begin lease + input intent run inside the final connected hand-off (sendWhenConnected).
-        const sent = await this.sendWhenConnected(instanceName, payload, deliveryEpoch, stillCurrent, onStartRetryHold, beforeInput);
+        const sent = await this.sendWhenConnected(instanceName, payload, deliveryEpoch, stillCurrent, onStartRetryHold);
         if (!sent)
             return false;
         if (this.deliveryCurrent(instanceName, deliveryEpoch, stillCurrent)) {
@@ -6391,25 +4463,21 @@ export class FleetManager {
      * `onStartRetryHold` (#2484, a person's message): an instance in its own start-retry backoff is waited for until that
      * retry brings it up, however long the backoff, and fails only once the retries give up.
      */
-    async sendWhenConnected(instanceName, payload, deliveryEpoch = this.getDeliveryEpoch(instanceName), stillCurrent, onStartRetryHold, beforeInput) {
+    async sendWhenConnected(instanceName, payload, deliveryEpoch = this.getDeliveryEpoch(instanceName), stillCurrent, onStartRetryHold) {
         if (!this.deliveryCurrent(instanceName, deliveryEpoch, stillCurrent))
             return false;
         const queued = this.ipcWaitTails.get(instanceName);
         if (!queued) {
             const ipc = this.instanceIpcClients.get(instanceName);
-            if (ipc?.connected) {
-                if (beforeInput)
-                    return this.handOffAfterBeforeInput(instanceName, payload, deliveryEpoch, stillCurrent, beforeInput);
-                if (ipc.send(this.bindHumanReceiptPayload(instanceName, payload)))
-                    return true;
-            }
+            if (ipc?.connected && ipc.send(this.bindHumanReceiptPayload(instanceName, payload)))
+                return true;
         }
         const attempt = (queued ?? Promise.resolve())
             .catch(() => { })
             .then(() => {
             if (!this.deliveryCurrent(instanceName, deliveryEpoch, stillCurrent))
                 return false;
-            return this.sendAfterIpcReturns(instanceName, payload, deliveryEpoch, stillCurrent, onStartRetryHold, beforeInput);
+            return this.sendAfterIpcReturns(instanceName, payload, deliveryEpoch, stillCurrent, onStartRetryHold);
         });
         // The chain stores a settled-either-way promise so one failed delivery cannot
         // wedge every later one, and so `queued` above is safe to await unguarded.
@@ -6426,21 +4494,8 @@ export class FleetManager {
             }
         }
     }
-    /**
-     * The Hub representative's hand-off (#3145): only once a connected client exists, after every reconnect/order wait,
-     * the begin lease + input intent (beforeInput), then the fence and the LIVE client are checked again and the payload
-     * goes in one attempt. After the intent is spent nothing here retries: false is the caller's uncertain outcome.
-     */
-    async handOffAfterBeforeInput(instanceName, payload, deliveryEpoch, stillCurrent, beforeInput) {
-        if (!(await beforeInput()))
-            return false;
-        if (this.shuttingDown || !this.deliveryCurrent(instanceName, deliveryEpoch, stillCurrent))
-            return false;
-        const ipc = this.instanceIpcClients.get(instanceName);
-        return !!ipc?.connected && ipc.send(this.bindHumanReceiptPayload(instanceName, payload));
-    }
     /** Poll for the instance's IPC to come back, then send. Throws if it does not. */
-    async sendAfterIpcReturns(instanceName, payload, deliveryEpoch = this.getDeliveryEpoch(instanceName), stillCurrent, onStartRetryHold, beforeInput) {
+    async sendAfterIpcReturns(instanceName, payload, deliveryEpoch = this.getDeliveryEpoch(instanceName), stillCurrent, onStartRetryHold) {
         let deadline = Date.now() + IPC_RECONNECT_GRACE_MS;
         let warned = false;
         let held = false;
@@ -6450,8 +4505,6 @@ export class FleetManager {
             // Re-read every round: a reconnect replaces the IpcClient object entirely,
             // so a cached reference would stay dead forever.
             const ipc = this.instanceIpcClients.get(instanceName);
-            if (ipc?.connected && beforeInput)
-                return this.handOffAfterBeforeInput(instanceName, payload, deliveryEpoch, stillCurrent, beforeInput);
             if (ipc?.connected && ipc.send(this.bindHumanReceiptPayload(instanceName, payload)))
                 return true;
             // #2484: while the instance waits for (or runs) its own start retry, the grace runs from now — so the message is
@@ -6621,8 +4674,6 @@ export class FleetManager {
      * id is no platform message, and the echo is the fleet's own post. The web send calls this on the echo's lane.
      */
     startWebChatProgress(instanceName) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[instanceName]))
-            return Promise.resolve();
         if (this.shuttingDown)
             return Promise.resolve();
         return this.sendCancelButton(instanceName);
@@ -6888,14 +4939,6 @@ export class FleetManager {
     }
     /** Single delivery facade: wake paused CLIs and serialize non-user work behind idle. */
     async deliverToInstance(instanceName, payload, options = {}) {
-        if (this.generalLocationDeliveryHold(instanceName))
-            return false;
-        if (isNativeExecInstance(this.fleetConfig?.instances[instanceName])) {
-            if (options.beforeInput)
-                return false; // no pre-input hook on the Windows runtime
-            return this.nativeInstanceRuntime().deliver(instanceName, payload, { stillCurrent: options.stillCurrent,
-                ...(options.authorityCurrent ? { authorityCurrent: options.authorityCurrent } : {}) });
-        }
         const deliveryEpoch = this.getDeliveryEpoch(instanceName);
         const deliveryPayload = { ...payload, delivery_epoch: deliveryEpoch };
         const meta = payload.meta && typeof payload.meta === "object"
@@ -6917,7 +4960,7 @@ export class FleetManager {
                     return false;
                 this.enforceWarmCap(instanceName); // woke one → evict a different LRU idle if over cap
             }
-            const sent = await this.sendWhenConnected(instanceName, deliveryPayload, deliveryEpoch, options.stillCurrent, options.onStartRetryHold, options.beforeInput);
+            const sent = await this.sendWhenConnected(instanceName, deliveryPayload, deliveryEpoch, options.stillCurrent, options.onStartRetryHold);
             if (!sent)
                 return false;
             // A cross-instance item arriving before the daemon observes this turn as
@@ -6928,7 +4971,7 @@ export class FleetManager {
             return true;
         }
         const previous = this.idleGatedDeliveryTails.get(instanceName) ?? Promise.resolve();
-        const delivery = previous.catch(() => { }).then(() => this.deliverWithIdleGate(instanceName, deliveryPayload, options.idleTimeoutMs ?? 60_000, deliveryEpoch, options.noInlineWake === true, options.stillCurrent, options.onStartRetryHold, options.beforeInput));
+        const delivery = previous.catch(() => { }).then(() => this.deliverWithIdleGate(instanceName, deliveryPayload, options.idleTimeoutMs ?? 60_000, deliveryEpoch, options.noInlineWake === true, options.stillCurrent, options.onStartRetryHold));
         this.idleGatedDeliveryTails.set(instanceName, delivery);
         try {
             return await delivery;
@@ -7453,10 +5496,6 @@ export class FleetManager {
      * slot admission and joins any wake already in flight for the target.
      */
     async explicitWake(name, timeoutMs = 30_000, retryStoppedSession = false) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-            this.nativeInstanceRuntime().setPaused(name, false);
-            return;
-        }
         if (this.sessionOomStopped(name)) {
             if (!retryStoppedSession)
                 throw new SessionOomStoppedError(false, readSessionOomStop(this.getInstanceDir(name)));
@@ -7481,10 +5520,6 @@ export class FleetManager {
             .sort((a, b) => (readLastInboundAt(this.getInstanceDir(a)) ?? 0) - (readLastInboundAt(this.getInstanceDir(b)) ?? 0))[0];
     }
     async changeInstancePauseState(name, action) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-            this.nativeInstanceRuntime().setPaused(name, action === "pause");
-            return action === "pause" ? "paused" : "awake";
-        }
         if (action === "wake") {
             await this.explicitWake(name, 30_000, true);
             this.enforceWarmCap(name); // manual wake still respects the fleet warm cap
@@ -7511,6 +5546,7 @@ export class FleetManager {
     }
     classicBehaviorUpdate(instanceName) {
         return {
+            quota_notice: this.classicChannels?.getQuotaNoticeByInstance?.(instanceName) ?? null,
             reply_triggers: this.classicChannels?.getReplyTriggersByInstance(instanceName, this.fleetConfig?.defaults?.reply_triggers) ?? DEFAULT_REPLY_TRIGGERS,
             tool_progress: this.classicChannels?.getToolProgressByInstance(instanceName, this.fleetConfig?.defaults?.tool_progress) ?? "off",
             reply_completion_guard: this.classicChannels?.getReplyCompletionGuardByInstance(instanceName, this.fleetConfig?.defaults?.reply_completion_guard) ?? true,
@@ -7662,14 +5698,6 @@ export class FleetManager {
     resumePaused = false, 
     /** Phase 2a: the caller's transition, for a start made from inside a restart or wake. */
     transition, execution, kiroMigration) {
-        if (isNativeExecInstance(config)) {
-            execution?.assert();
-            if (!windowsCliEnabled())
-                throw new Error("Windows runtime is disabled");
-            if (resumePaused)
-                this.nativeInstanceRuntime().setPaused(name, false);
-            return;
-        }
         const migration = this.kiroMigrationRuns?.get(name);
         if (migration && migration.token !== kiroMigration)
             throw new Error(t("kiro_migrate.in_progress"));
@@ -7720,29 +5748,27 @@ export class FleetManager {
             if (resumePaused)
                 this.lifecycle.markActivitySeedNow(name);
             const backend = config.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
-            // #1490 row 67 (main): off-loop resolve before skill/instruction publication
+            // #1490 row 67: off-loop resolve before skill/instruction publication
             // constructs a backend (resolveKnowledgeWorkDir). Capture stop/lifecycle
             // ownership first: a Stop during this wait finishes and bumps the epoch,
             // and the inner lifecycle check would otherwise capture the new epoch and
             // accept the stale start. Lifecycle start looks up again before its own
-            // createBackend; the probe cache makes that cheap. (alpha: a native Windows
-            // agent's CLI is on that PC — nothing to resolve on this one.)
+            // createBackend; the probe cache makes that cheap.
             const epoch = this.lifecycle.epochOf(name);
             const stopGen = this.explicitStopGeneration.get(name) ?? 0;
-            const windows = isWindowsInstance(config);
-            const resolved = windows ? null : await resolveBackendBinary(backend);
+            const resolved = await resolveBackendBinary(backend);
             execution?.assert();
             if (this.lifecycle.epochOf(name) !== epoch
                 || (this.explicitStopGeneration.get(name) ?? 0) !== stopGen) {
                 throw new SupersededStartError(name);
             }
             const binary = BACKEND_INSTALLATION_INFO[backend]?.binary;
-            if (binary && !windows)
+            if (binary)
                 noteResolvedBinary(binary, resolved ?? binary);
-            if (!windows && config.general_topic) {
+            if (config.general_topic) {
                 this.ensureGeneralInstructions(config.working_directory, backend, name);
             }
-            else if (!isWindowsInstance(config) && kind === "fleet-topic") {
+            else if (kind === "fleet-topic") {
                 // Workers get only role-eligible on-demand skills. Classic instances are
                 // deliberately excluded: their workspace and conversation lifecycle are
                 // managed independently from fleet-topic workers.
@@ -7757,7 +5783,7 @@ export class FleetManager {
                     this.logger.warn({ err, name, backend }, "Failed to sync worker skills — continuing startup");
                 }
             }
-            else if (!isWindowsInstance(config) && kind === "classic") {
+            else if (kind === "classic") {
                 // #2163: a Classic bot gets only the skills marked `classic` (its own look, the dashboard) — never the fleet's
                 // coordination playbooks (#557 kept those out of end-user bots) — and only into a workspace AgEnD manages: the
                 // room's own folder under <AGEND_HOME>/workspaces/. Anywhere else, nothing is written; `agend-agent skill <name>`
@@ -7774,7 +5800,7 @@ export class FleetManager {
                 }
             }
             const receipt = execution ? this.classicSettingsOwners.get(execution) : undefined;
-            const identity = { kind, backend, model: isWindowsInstance(config) ? config.model || "default" : this.resolveInstanceModel(name).display };
+            const identity = { kind, backend, model: this.resolveInstanceModel(name).display };
             if (receipt) {
                 await this.lifecycle.start(name, config, topicMode, identity, transition, execution, daemon => {
                     // Only this transition's actual publication can acquire its replacement.
@@ -7844,7 +5870,7 @@ export class FleetManager {
         // them before grouping/staggering: startInstance() retains its own guard as
         // a final backstop, but putting a no-op entry in this queue still consumes a
         // full stagger slot for every distinct working directory.
-        const runnableEntries = entries.filter(([name, config]) => !isNativeExecInstance(config) && !this.lifecycle.isPaused(name));
+        const runnableEntries = entries.filter(([name]) => !this.lifecycle.isPaused(name));
         // ClassicBot rooms queue with the fleet instances, at the same pressure pacing (#2642 follow-up): they used to start
         // only after the whole fleet, the chat connections, topics and icons. A name the fleet also configures is the fleet's.
         const fleetNames = new Set(entries.map(([name]) => name));
@@ -7910,8 +5936,6 @@ export class FleetManager {
                 return false;
             if (err instanceof SessionOomStoppedError)
                 await this.notifySessionOomStop(name);
-            if (this.holdNativePaneRecovery(name, err))
-                return false;
             if (this.stopOnUnsupportedCli(name, err, what))
                 return false;
             this.logger.error({ err, name }, `Failed to start ${what}`);
@@ -8053,8 +6077,6 @@ export class FleetManager {
             if (err instanceof SupersededStartError)
                 return;
             // An earlier attempt could not tell (unknown probe); this one could.
-            if (this.holdNativePaneRecovery(name, err))
-                return;
             if (this.stopOnUnsupportedCli(name, err, "instance"))
                 return;
             this.logger.error({ err, name, attempt: attempt + 1 }, "Automatic startup retry failed");
@@ -8316,7 +6338,7 @@ export class FleetManager {
         return count;
     }
     configuredStartupInstanceNames(fleet, includeClassic) {
-        const names = new Set(Object.entries(fleet.instances).filter(([, config]) => !isNativeExecInstance(config)).map(([name]) => name));
+        const names = new Set(Object.keys(fleet.instances));
         if (includeClassic) {
             for (const channel of this.classicChannels?.getAll() ?? [])
                 names.add(channel.instanceName);
@@ -8367,10 +6389,6 @@ export class FleetManager {
         return poster.postCompletion({ resolveAdapter: () => this.readyProgressAdapter(adapterId), chatId, threadId }, text);
     }
     async stopInstance(name, transition) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-            this.nativeInstanceRuntime().setPaused(name, true);
-            return { backgroundWorkEnded: false };
-        }
         this.explicitStopGeneration.set(name, (this.explicitStopGeneration.get(name) ?? 0) + 1);
         this.cancelStartupRetry(name);
         this.failoverActive.delete(name);
@@ -8410,16 +6428,6 @@ export class FleetManager {
     async restartSingleInstance(name, opts) {
         if (opts?.ownerCurrent && !opts.ownerCurrent())
             throw new RestartSupersededError(this.shownInstanceName(name));
-        if (isNativeExecInstance(this.fleetConfig?.instances[name])) {
-            const runtime = this.nativeInstanceRuntime();
-            if (runtime.get(name)?.blocked)
-                throw new Error("Verify the disconnected Windows process stopped and recover this agent before restarting");
-            runtime.cancel(name);
-            runtime.setPaused(name, false);
-            return;
-        }
-        if (opts?.explicit && isNativePaneInstance(this.fleetConfig?.instances[name]))
-            this.lifecycle.resetNativeCrashBudget(name);
         const migration = this.kiroMigrationRuns?.get(name);
         if (migration && migration.token !== opts?.kiroMigration)
             throw new Error(t("kiro_migrate.in_progress"));
@@ -8483,7 +6491,7 @@ export class FleetManager {
         return run;
     }
     isInstanceRestarting(name) {
-        return this.restartsInFlight.has(name) || this.kiroMigrationRuns?.has(name) === true || this.lifecycle?.nativeRecoveryPending?.(name) === true;
+        return this.restartsInFlight.has(name) || this.kiroMigrationRuns?.has(name) === true;
     }
     /** InstanceLifecycleContext: an explicit wake joins the restart in flight. */
     restartInFlight(name) {
@@ -8716,12 +6724,6 @@ export class FleetManager {
                 },
             });
         }
-        if (!this.webDeviceLogins) {
-            this.webDeviceLogins = new DeviceLoginRequests({
-                onEvent: event => { if (event === "breaker-open")
-                    this.logger.warn("Device sign-in approval paused: too many wrong codes"); },
-            });
-        }
         if (!this.webGuestLoginCodes) {
             this.webGuestLoginCodes = new GuestLoginCodes({
                 onEvent: event => {
@@ -8784,9 +6786,6 @@ export class FleetManager {
             log: () => this.logger.warn("Managed tunnel cleanup requires attention") }));
     }
     publicOwnerCurrent(owner) {
-        // #3008: the outside link is this computer's admin's — while "Allow connections from outside" is on, web-only.
-        if (isOutsideLinkOwner(owner))
-            return !this.shuttingDown && this.outsideOn();
         if (this.shuttingDown || !this.hasFleetAdmins(owner.adapterId) || !this.isFleetAdmin(owner.userId, owner.adapterId))
             return false;
         const configured = (this.fleetConfig?.channels ?? (this.fleetConfig?.channel ? [this.fleetConfig.channel] : [])).find(ch => (ch.id ?? ch.type) === owner.adapterId);
@@ -8876,11 +6875,7 @@ export class FleetManager {
     }
     getPublicWebLink() {
         this.initializeWebSessions();
-        return this.publicWebLink ??= new PublicWebLink(this.publicWebLinkDeps());
-    }
-    /** The public link's wiring to this fleet (a test builds one with the tunnel itself stubbed: `ensure`, `provider`). */
-    publicWebLinkDeps() {
-        return {
+        return this.publicWebLink ??= new PublicWebLink({
             dataDir: this.dataDir, web: () => this.fleetConfig?.web,
             permitted: owner => this.publicOwnerCurrent(owner),
             reserve: id => this.getTunnelLane().reserve("dashboard", id),
@@ -8913,9 +6908,7 @@ export class FleetManager {
                 if (world && world.adapter === owner.binding)
                     void world.adapter.sendText(owner.chatId, t("dashboard.public_cleanup"), { threadId: owner.threadId }).catch(() => { });
             },
-            onClose: (owner, reason) => { if (isOutsideLinkOwner(owner))
-                this.outsideLinkClosed(reason); },
-        };
+        });
     }
     publicLinkAutoOpen = null;
     /**
@@ -9336,7 +7329,6 @@ export class FleetManager {
         void this.publicWebLink?.close("dashboard revoke");
         this.forgetPublicLinkOwner();
         this.webLoginCodes.revoke();
-        this.webDeviceLogins?.revokeAll(); // …and every new device still waiting to be approved (#3061)
         this.webGuestLoginCodes.revokeAll();
         this.guestRevokes++; // and every guest /web still on its way
         // #1570: no browser may ask the sign-in page for a code any more.
@@ -10275,9 +8267,6 @@ export class FleetManager {
         const fleet = this.loadConfig(configPath, { startup: true });
         this.slimFleetConfigAtStartup();
         this.logConfigWarningsAtStartup();
-        this.initializeNativeInstances();
-        // M-2255: from here on a change to the Windows runtimes' switches applies live (observeRuntimeSwitches).
-        this.runtimeEffects = { windows_cli: localWindowsCliEnabled(), remote_runtime: remoteRuntimeEnabled() };
         setLocale(detectLocale(fleet)); // user-facing text language (fleet.yaml defaults.locale / timezone)
         // #1737 review: the marker this boot adopts — the startup clear may only ever clear this one.
         const bootUpdateMarker = updateMarkerIdentity(this.dataDir);
@@ -10300,9 +8289,20 @@ export class FleetManager {
         // #2910: a web-only fleet's agents run in topic mode too (their cross-instance tools work; the dashboard is their place).
         const topicMode = daemonTopicMode(fleet);
         // Set tmux socket isolation for custom AGEND_HOME
-        // M-2457: the bundled tmux's socket while it is on; getTmuxSocketName() as before while off.
-        const { tmuxSocket } = await import("./tmux-binary.js");
-        TmuxManager.setSocketName(tmuxSocket());
+        const { getTmuxSocketName: getSocket, isDefaultAgendHome } = await import("./paths.js");
+        TmuxManager.setSocketName(getSocket());
+        // M-2457 §7: after a raw downgrade from 2.4, its own tmux server may still run the agents — start none beside it.
+        // main / the 2.3 line ONLY: on the 2.4 line (release/2.3.5-alpha) AgEnD's own server IS the one on `agend` — a
+        // main → alpha sync must keep alpha's side of this block, never both.
+        {
+            const { newerTmuxServer, realGuardDeps, guardMessage } = await import("./bundled-tmux-guard.js");
+            const hit = await newerTmuxServer(realGuardDeps(getAgendHome(), isDefaultAgendHome(), getSocket()));
+            if (hit) {
+                const message = guardMessage(hit);
+                this.logger.error({ socket: hit.socket, confirmed: hit.confirmed }, message);
+                throw new Error(message);
+            }
+        }
         await TmuxManager.ensureSession(getTmuxSession());
         this.tmuxSessionEnsured = true;
         // #2072: what this host can run — probed in the background, published for every picker.
@@ -10310,7 +8310,7 @@ export class FleetManager {
         // Pre-flight (advisory, fire-and-forget): warm the per-backend auth cache
         // before instances spawn, so a CLI that comes up on its sign-in screen gets
         // an instant 🔑 verdict instead of decaying into crash/MCP-died noise.
-        this.lifecycle.primeAuthVerification(Object.values(fleet.instances).filter(config => !isWindowsInstance(config)).map(config => {
+        this.lifecycle.primeAuthVerification(Object.values(fleet.instances).map(config => {
             const backend = config.backend ?? fleet.defaults?.backend ?? "claude-code";
             // #1699 follow-up: each instance's own login — a profile is probed with its own environment.
             return { backend, profile: credentialHomeSpec(backend) ? instanceCredentialProfile(config, fleet.defaults, backend) : null };
@@ -10372,7 +8372,6 @@ export class FleetManager {
         // #1565: the web chat as it was before this process — the configured instances' only (fleet.yaml and ClassicBot
         // rooms), before the dashboard serves anything; from now on every change is written back (off the loop).
         this.restoreWebChat(fleet);
-        this.initializeNativeInstances(true);
         this.startSearchIndex(fleet);
         // Parse-only source monitoring; it does not apply hand-edited Fleet settings.
         this.configHistoryTimer = setInterval(() => this.configHistory?.check(), 1_000);
@@ -10555,7 +8554,7 @@ export class FleetManager {
             }
         }
         // Phase 1: Start general instances first and wait for them
-        const allEntries = Object.entries(fleet.instances).filter(([, config]) => !isNativeExecInstance(config));
+        const allEntries = Object.entries(fleet.instances);
         const generals = allEntries.filter(([_, cfg]) => cfg.general_topic);
         const others = allEntries.filter(([_, cfg]) => !cfg.general_topic);
         const startupProgress = new RestartProgress(this.runnableStartupCount(fleet, topicMode), pendingUpdateProgress?.startedAt ?? startupStartedAt, this.logger, { mode: pendingProgressOperation === "full-restart" ? "reload" : pendingUpdateProgress ? "update" : "restart" });
@@ -10567,9 +8566,6 @@ export class FleetManager {
         await this.startHealthServer(fleet.health_port ?? 19280);
         if (this.shuttingDown)
             return;
-        // S-51: from here on the Hub switches apply (an enabled Hub mounts now, beside the fleet; it never blocks startup).
-        this.hubEffectsReady = true;
-        this.observeHubSwitches();
         if (generals.length > 0) {
             for (const [name, cfg] of generals) {
                 try {
@@ -10800,10 +8796,6 @@ export class FleetManager {
             // #named-link-ttl: a named link with auto_open comes back now — after the web listener and the chat connections.
             this.startPublicLinkAutoOpen();
         }
-        // #3008: connections from outside were on when the fleet stopped: the link opens again (its address is new for a
-        // quick link — Settings shows it on this computer).
-        if (this.outsideOn())
-            this.openOutsideLink([0, ...OUTSIDE_LINK_RETRY_MS]);
         // #1266: buttons that ended while AgEnD was down (expired, or chosen before a restart) are shown as ended now.
         // #1823: and polls: a deadline that passed meanwhile closes now (results once); an open one's countdown is redrawn.
         void this.replyButtons()?.sweep().catch(err => this.logger.warn({ err }, "Reply-button sweep failed"));
@@ -10856,7 +8848,43 @@ export class FleetManager {
      * Discord bot and while some account has a running agent, read every 30 min — the same cached read (its 5-minute TTL
      * still bounds the vendor calls), recorded like any other.
      */
+    quotaNotices = null;
+    stopQuotaObserver = null;
+    quotaNoticePolicy() {
+        const defaults = this.fleetConfig?.defaults.quota_notice;
+        const wanted = defaults?.target ?? "general";
+        const instances = this.fleetConfig?.instances ?? {};
+        const target = wanted === "general"
+            ? Object.entries(instances).find(([name, c]) => c.general_topic === true || name === "general")?.[0]
+            : Object.hasOwn(instances, wanted) ? wanted : undefined;
+        const webOnly = !!this.webOnlyPromptPlace();
+        const config = target ? instances[target] : undefined;
+        const adapterId = target ? this.getInstanceAdapterId(target) : undefined;
+        const groupId = target ? this.getChannelConfig(adapterId)?.group_id : undefined;
+        const ready = !!target && (webOnly || (config?.topic_id != null && !!groupId && !!(this.getAdapterForInstance(target) ?? this.adapter)));
+        return {
+            target: this.shuttingDown ? "" : ready ? target : !target && wanted === "general" && webOnly ? "/notices" : "",
+            destinationBinding: JSON.stringify([webOnly, adapterId, groupId, config?.topic_id]),
+            locale: this.fleetConfig?.defaults.locale ?? getLocale(),
+            subscriptions: this.shuttingDown ? [] : this.activeBackendBindings().flatMap(([name, backend, profile]) => {
+                const provider = usageProviderIdForBackend(backend);
+                if (!provider)
+                    return [];
+                const providerId = profile ? `${provider}:${profile}` : provider;
+                return [{ account: `${backend}:host:${profile ?? ""}`, providerId,
+                        rule: quotaNoticeRule(defaults, backend, instances[name]?.quota_notice ?? this.classicChannels?.getQuotaNoticeByInstance?.(name)) }];
+            }),
+        };
+    }
     startQuotaBackgroundReads() {
+        if (!this.quotaNotices) {
+            this.quotaNotices = new QuotaNotices({
+                file: join(this.dataDir, "quota-notices.json"), policy: () => this.quotaNoticePolicy(),
+                send: (target, text) => target === "/notices" ? this.recordWebNotice("fleet", text) : this.notifyInstanceTopic(target, text),
+                warn: err => this.logger.warn({ err }, "Optional quota reminders held: could not retain dispatch state"),
+            });
+            this.stopQuotaObserver = onUsageSnapshot(payload => { void this.quotaNotices?.observe(payload); });
+        }
         if (this.quotaReadTimer)
             clearInterval(this.quotaReadTimer);
         this.quotaReadTimer = setInterval(() => { void this.backgroundQuotaRead(); }, FleetManager.QUOTA_BACKGROUND_READ_MS);
@@ -11359,8 +9387,8 @@ export class FleetManager {
      *                 that should be running is running
      *  - `degraded` — reachable, but something the operator should look at (an
      *                 adapter retrying, an instance crashed or stopped)
-     *  - `down`     — no configured adapter is connected, or a dedicated Hub's
-     *                 server mount is unavailable
+     *  - `down`     — the fleet cannot do its job: no adapter is connected, so no
+     *                 message can arrive or be answered
      *
      * Deliberately does NOT gate the systemd watchdog — see the comment at the
      * WATCHDOG timer for why.
@@ -11393,20 +9421,10 @@ export class FleetManager {
             if (effectiveStatus === "connected")
                 connected++;
         }
-        const problems = [], warnings = [];
-        const rawHub = this.rawFleetConfig?.hub;
-        const hub = rawHub?.enabled === true ? { server: this.shuttingDown ? "stopped"
-                : this.hubRuntime?.serverHealth?.(rawHub) ?? "unavailable" } : undefined;
-        const hubOnly = !!hub && names.length === 0 && this.adapterState.size === 0;
-        if (hub && hub.server !== "ready")
-            problems.push(`Hub server is ${hub.server}`);
+        const problems = [];
         const hostMemory = this.memoryPressure.snapshot();
-        if (hostMemory.level === "critical" || hostMemory.level === "elevated") {
-            const pressure = `host memory pressure is ${hostMemory.level}`;
-            if (hubOnly)
-                warnings.push(pressure);
-            else if (!this.memoryPressure.advisoryOnly())
-                problems.push(pressure);
+        if (!this.memoryPressure.advisoryOnly() && (hostMemory.level === "critical" || hostMemory.level === "elevated")) {
+            problems.push(`host memory pressure is ${hostMemory.level}`);
         }
         if (this.adapterState.size > 0 && connected === 0)
             problems.push("no channel adapter is connected");
@@ -11418,8 +9436,9 @@ export class FleetManager {
         }
         if (!this.startupComplete)
             problems.push("startup has not completed");
-        // Preserve adapter scoring. A dedicated Hub also cannot serve its workload before its server mount is ready.
-        const status = (this.adapterState.size > 0 && connected === 0) || (hubOnly && hub?.server !== "ready")
+        // "down" is reserved for "cannot receive or answer a message at all". A fleet
+        // with adapters configured but none connected is exactly that.
+        const status = this.adapterState.size > 0 && connected === 0
             ? "down"
             : problems.length > 0 ? "degraded" : "ok";
         return {
@@ -11431,7 +9450,7 @@ export class FleetManager {
             memory: readFleetMemory(),
             hostMemory: this.memoryTop && (hostMemory.level === "elevated" || hostMemory.level === "critical")
                 ? { ...hostMemory, topProcesses: this.memoryTop.processes, topProcessesAt: this.memoryTop.at } : hostMemory,
-            problems, warnings, ...(hub ? { hub } : {}),
+            problems,
         };
     }
     /** Start the primary adapter (backward-compatible, sets this.adapter) */
@@ -11758,14 +9777,10 @@ export class FleetManager {
                 }
             }
         }
-        const daemon = this.daemons.get(name);
-        const native = daemon?.usesNativePane?.();
         const sockPath = join(this.getInstanceDir(name), "channel.sock");
-        if (!native && !existsSync(sockPath))
+        if (!existsSync(sockPath))
             return;
-        const ipc = native
-            ? new NativeDaemonClient(daemon, () => this.daemons.get(name) === daemon && (!this.instanceIpcClients.has(name) || this.instanceIpcClients.get(name) === ipc))
-            : new IpcClient(sockPath);
+        const ipc = new IpcClient(sockPath);
         try {
             await ipc.connect();
             this.instanceIpcClients.set(name, ipc);
@@ -11828,9 +9843,6 @@ export class FleetManager {
                     this.eventLog?.insert(targetInstance, "cross_instance_delivery_failed", {
                         from: senderSession, correlation_id: correlationId, error,
                     });
-                    // A Hub question the pane never took: the representative holds it uncertain (never resent).
-                    if (senderSession === HUB_REPORT_TARGET && !senderInstance)
-                        this.hubDeliveryFailed?.(correlationId, targetInstance);
                     if (senderInstance) {
                         this.notifyInstanceTopic(senderInstance, t("cross_instance.delivery_failed_notice", targetInstance, displayError, correlationId));
                         void this.deliverToInstance(senderInstance, {
@@ -11884,7 +9896,7 @@ export class FleetManager {
             // connected, so seed the cache instead of waiting for another transition.
             ipc.send({ type: "query_instance_state", requestId: `fleet-state-${Date.now()}` });
             this.logger.debug({ name }, "Connected to instance IPC");
-            if (!native && !this.statuslineWatcher.has(name)) {
+            if (!this.statuslineWatcher.has(name)) {
                 this.statuslineWatcher.watch(name);
             }
             // Auto-reconnect on disconnect (unless intentionally stopping)
@@ -11949,12 +9961,13 @@ export class FleetManager {
                         try {
                             const { execFile } = await import("./child-process.js");
                             const { promisify } = await import("node:util");
-                            const { tmuxArgs, tmuxBinary, tmuxEnvOption } = await import("./tmux-binary.js");
+                            const { getTmuxSocketName } = await import("./paths.js");
                             // Honour socket isolation: without -L this queried the user's default
                             // tmux server instead of the fleet's, so under a custom AGEND_HOME the
                             // check was meaningless (it reported every pane dead).
-                            const args = tmuxArgs(["list-panes", "-t", windowId]);
-                            await promisify(execFile)(tmuxBinary(), args, { timeout: 5_000, ...tmuxEnvOption() });
+                            const socket = getTmuxSocketName();
+                            const args = socket ? ["-L", socket, "list-panes", "-t", windowId] : ["list-panes", "-t", windowId];
+                            await promisify(execFile)("tmux", args, { timeout: 5_000 });
                         }
                         catch {
                             // Pane dead — respawn
@@ -12958,12 +10971,6 @@ export class FleetManager {
                 if (msg.adapterId)
                     this.bindInstanceAdapter(generalInstance, msg.adapterId, true);
                 const inboundAdapter = this.worlds.get(msg.adapterId ?? "")?.adapter ?? this.adapter;
-                const locationHold = this.generalLocationDeliveryHold(generalInstance);
-                if (locationHold) {
-                    await inboundAdapter.sendText(msg.chatId, locationHold, { threadId: msg.threadId || undefined });
-                    this.needsYou?.poke();
-                    return;
-                }
                 // React immediately — before any other API calls — through the status
                 // path, which tracks Telegram slot ownership and Discord status adds.
                 if (msg.chatId && msg.messageId) {
@@ -13051,13 +11058,6 @@ export class FleetManager {
         if (instanceConfig?.general_topic && await this.topicCommands.handleGeneralCommand(msg, instanceName)) {
             return;
         }
-        const locationHold = this.generalLocationDeliveryHold(instanceName);
-        if (locationHold) {
-            const adapter = this.worlds.get(msg.adapterId ?? "")?.adapter ?? this.adapter;
-            await adapter.sendText(msg.chatId, locationHold, { threadId: msg.threadId || undefined });
-            this.needsYou?.poke();
-            return;
-        }
         // Bind instance to the adapter that delivered this message
         if (msg.adapterId)
             this.bindInstanceAdapter(instanceName, msg.adapterId, true);
@@ -14666,7 +12666,7 @@ export class FleetManager {
             const cfg = this.fleetConfig?.instances?.[n];
             if (!cfg || cfg.topic_id == null || cfg.topic_id === "")
                 return null;
-            return this.destinationFor(this.topicAdapterIdOf(n), cfg.topic_id);
+            return this.destinationFor(this.getInstanceAdapterId(n), cfg.topic_id);
         };
         const generalDestinations = () => {
             const out = new Set();
@@ -14685,21 +12685,9 @@ export class FleetManager {
         };
         return { instances: this.fleetConfig?.instances, destinationOf, generalDestinations };
     }
-    /**
-     * The bot an agent's configured topic is on (#3105 review, Prism P1): a fleet.yaml agent's `channel_id` (else the
-     * primary connection) whatever its runtime — a per-turn Windows agent has no execution adapter
-     * (getInstanceAdapterId), yet its topic is still on that bot, and must be counted as an owner and deleted through it.
-     * Topic planning and ownership only; execution routing is getInstanceAdapterId's and unchanged.
-     */
-    topicAdapterIdOf(name) {
-        const cfg = this.fleetConfig?.instances?.[name];
-        if (cfg)
-            return cfg.channel_id ?? this.getPrimaryAdapterId();
-        return this.getInstanceAdapterId(name);
-    }
     /** What deleting `name`'s topic would act on: its own bot only — a bot that is not there is never substituted. */
     planInstanceTopicDelete(name) {
-        const adapterId = this.topicAdapterIdOf(name);
+        const adapterId = this.getInstanceAdapterId(name);
         return planInstanceTopicDelete({ name, adapterId, adapter: this.instanceTopicAdapter(adapterId), ...this.topicOwnership() });
     }
     getForumTopicDeleter(adapterId) {
@@ -14979,8 +12967,6 @@ export class FleetManager {
         this.observeWebAuthority(); // #2453 review: so is a web-authority switch (off is always seen)
         if (!this.fleetConfig || !this.configPath)
             return;
-        // #3147 r2: a changed or removed Hub representative's consent is invalidated durably BEFORE the change is written.
-        this.observeHubAgentIncarnations(true);
         if (!this.savedFleetConfigSnapshot)
             this.savedFleetConfigSnapshot = structuredClone(this.fleetConfig);
         normalizeNoticeDelivery(this.fleetConfig);
@@ -15103,12 +13089,9 @@ export class FleetManager {
             Object.assign(current, resolved);
         }
         this.savedFleetConfigSnapshot = structuredClone(this.fleetConfig);
-        this.nativeMcpStore?.observePolicies();
         this.agentCredentialsCache?.observePolicies();
         this.refreshSavedDashboardPermissions();
         this.logger.info({ path: this.configPath, strippedDefaults: redundantPaths.length }, "Saved fleet config (lossless patch)");
-        this.observeRuntimeSwitches(); // M-2255: a saved Windows runtime switch applies now
-        this.observeHubSwitches(); // S-51: so does a saved Hub switch
     }
     /** A permission tightening is effective when its save returns, independently of the later apply job or IPC. */
     refreshSavedDashboardPermissions() {
@@ -15342,43 +13325,10 @@ export class FleetManager {
     }
     getSettingsConfigPath() { return this.configPath; }
     async removeInstance(name, authorization, execution) {
-        if (isWindowsInstance(this.fleetConfig?.instances[name])) {
-            execution?.assert();
-            assertExplicitInstanceRemoval(authorization);
-            if (isNativePaneInstance(this.fleetConfig?.instances[name])) {
-                await this.stopInstance(name);
-                execution?.assert();
-            }
-            this.nativeInstanceRuntime().remove(name, () => !this.shuttingDown && (!execution || execution.current()), execution);
-            return;
-        }
         if (execution)
             return this.lifecycle.runTransition(name, transition => this.removeInstanceOwned(name, authorization, execution, transition));
         return this.removeInstanceOwned(name, authorization);
     }
-    /** Shared instance metadata goes with a native identity; its Windows workspace and provider sessions stay intact. */
-    nativeInstanceRemoved(name) {
-        const clean = (what, run) => { try {
-            run();
-        }
-        catch (error) {
-            this.logger.warn({ name, err: error }, `Native instance ${what} cleanup failed`);
-        } };
-        clean("delivery", () => { this.cancelPendingDeliveries(name); });
-        forgetInstanceContext(name);
-        clean("schedules", () => { for (const schedule of this.scheduler?.list(name) ?? [])
-            this.scheduler.delete(schedule.id); });
-        this.lastActivity.delete(name);
-        this.lastInboundUser.delete(name);
-        this.rateLimitWarnedAt.delete(name);
-        this.lastInboundMsg.delete(name);
-        clean("history", () => this.webChatHistory.forget(name));
-        clean("search", () => this.searchIndex?.removeInstance(name));
-        clean("files", () => this.webFiles.forget(name));
-        clean("compact", () => this.compactWatchService?.forget(name));
-        clean("preferences", () => this.webPrefs.forgetInstance(name));
-        clean("appearance", () => { this.themeStore.forget(name); this.webAppearance.forget(name); this.appearanceTools.forget(name); this.mods.forgetInstance(name); this.officeActsInstance?.forget(name); this.officePackToolsInstance?.forget(name); });
-    }
     async removeInstanceOwned(name, authorization, execution, transition) {
         execution?.assert();
         assertExplicitInstanceRemoval(authorization);
@@ -15418,7 +13368,6 @@ export class FleetManager {
         const instanceDirToClean = this.getInstanceDir(name);
         // #1774: replies sent from here on are a later instance's (a replacement registered while this one goes); the ones
         // sent before wait for the outcome before they are shown.
-        this.forgetHubAgentIncarnation(name, true); // #3147: a re-added instance never inherits Hub consent; not durable → refused
         const removedBelow = this.webChatGeneration(name) + 1, removedDaemon = this.daemons.get(name);
         this.webChatGenerations.set(name, removedBelow);
         let settleRemoval;
@@ -15505,8 +13454,6 @@ export class FleetManager {
         execution?.complete();
     }
     startStatuslineWatcher(name) {
-        if (isWindowsInstance(this.fleetConfig?.instances[name]))
-            return;
         if (this.lifecycle.isPaused(name))
             return;
         this.statuslineWatcher.watch(name);
@@ -16955,10 +14902,6 @@ export class FleetManager {
      * would have to make this async and change every caller.
      */
     notifyInstanceTopic(instanceName, text, extraOpts) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[instanceName])) {
-            this.emitSseEvent("message", { instance: instanceName, role: "status", sender: "AgEnD", text, ts: new Date().toISOString() });
-            return true;
-        }
         // #2910 D2: a web-only fleet has no topics: what the agent's topic would have been told is a Notice about it.
         if (this.webOnlyPromptPlace())
             return this.recordWebNotice("instance", text, instanceName);
@@ -17403,11 +15346,6 @@ export class FleetManager {
     needsYouItems() {
         return this.needsYou?.webItems() ?? [];
     }
-    /** Enabled member composition supplies only a local attention reader, never an approval/execution callback. */
-    attachHubExecutionAttention(read) {
-        this.hubExecutionAttention = read;
-        this.needsYou?.poke();
-    }
     /**
      * #1389: the org chart's structure for the web — the instances the dashboard lists (getUiStatus's names), General,
      * fleet.yaml's teams, each instance's description and thread link. Read on demand; the live state rides the stream.
@@ -17444,8 +15382,6 @@ export class FleetManager {
      * (also for a backend that has no profiles, where the option is ignored).
      */
     credentialProfileOf(name, backend) {
-        if (isWindowsInstance(this.fleetConfig?.instances[name]))
-            return null;
         if (!credentialHomeSpec(backend))
             return null;
         const cfg = this.fleetConfig?.instances?.[name];
@@ -17468,7 +15404,7 @@ export class FleetManager {
     }
     /** The instances the cache analysis reads: fleet.yaml's, then the ClassicBot rooms (their workspace under the AgEnD home, their own backend). */
     cacheInstances() {
-        const fleet = Object.entries(this.fleetConfig?.instances ?? {}).filter(([, cfg]) => !isWindowsInstance(cfg)).map(([name, cfg]) => ({
+        const fleet = Object.entries(this.fleetConfig?.instances ?? {}).map(([name, cfg]) => ({
             name, backend: this.backendNameOf(name), workingDirectory: cfg.working_directory, ledgerPath: join(this.getInstanceDir(name), "cache-ledger.json"),
             claudeConfigDir: this.claudeConfigDirOf(name), profile: this.usageProfileOf(name, this.backendNameOf(name)),
             ...(this.backendNameOf(name) === "codex" ? { profileTimelinePath: join(this.getInstanceDir(name), PROFILE_TIMELINE_FILE) } : {}),
@@ -17652,20 +15588,6 @@ export class FleetManager {
                 crashedAt: crashed ? (this.needsCrashedAt.get(name) ?? null) : null,
                 signIn: pauseReason === "auth" ? this.signInFor(name) : null,
                 usageHold: this.daemons.get(name)?.usageHold?.() ?? null,
-                nativeDeliveryHold: this.daemons.get(name)?.nativeDeliveryHold?.() ?? null,
-                generalLocation: this.generalLocationAttention(name),
-                paneRecovery: (() => {
-                    const config = this.fleetConfig?.instances[name];
-                    if (!isNativePaneInstance(config) || !config.native_agent_id)
-                        return null;
-                    try {
-                        const profile = windowsAgentsFor(this, this.runtimeWindowsExecutor()).get(config.native_agent_id);
-                        return profile.paneRecovery ? { key: `${profile.paneRecovery.kind}:${profile.paneRecovery.launchId ?? "-"}`, detail: new NativePaneRecoveryError(profile.paneRecovery).message, since: profile.paneRecoveryAt ?? profile.createdAt } : null;
-                    }
-                    catch {
-                        return null;
-                    }
-                })(),
             });
         }
         return out;
@@ -17721,8 +15643,6 @@ export class FleetManager {
                 const target = this.fleetNoticeTarget(world);
                 return target ? { chatId: target.chatId, ...(target.opts.threadId !== undefined ? { threadId: String(target.opts.threadId) } : {}) } : null;
             },
-            // The name the web page shows for the instance (its View alias, else its own name), never the raw id alone.
-            instanceName: instance => resolveInstanceIdentity({ cfg: this.fleetConfig?.instances[instance], profile: profileIdentities(this.dataDir).get(instance) }).display_name || instance,
             instanceTopic: instance => {
                 const topic = this.fleetConfig?.instances[instance]?.topic_id;
                 if (topic != null)
@@ -17745,12 +15665,6 @@ export class FleetManager {
             acknowledgeMissed: (id, by) => this.missedOfflineStore?.acknowledge(id, by) ?? false,
             tasks: () => this.needsYouTaskItems(),
             backendSignIns: () => this.needsYouBackendSignIns(),
-            hubExecution: () => this.hubExecutionAttention?.() ?? [],
-            hubHolds: () => this.hubHolds.map(h => {
-                // A provider hold carries a bounded setup reason; its guidance (S4b's copy) when present, else the code's text.
-                const guidance = h.reason ? t(`hub.provider.${h.reason}`) : "";
-                return { side: h.side, code: h.code, since: h.since, detail: guidance && guidance !== `hub.provider.${h.reason}` ? guidance : t(`hub.hold.${h.code}`) };
-            }),
             configIssues: () => (this.configHistory?.currentIssues() ?? []).map(issue => ({
                 ...issue, detail: configIssueText(issue, t), owner: this.worlds.keys().next().value,
             })),
@@ -18277,7 +16191,7 @@ export class FleetManager {
             isAdmin: (userId, adapterId) => this.adminGate(userId, adapterId) === "ok",
             authorization: input.session ? this.sessionAuthorizationStore()?.get(input.session.handle) ?? null : null,
             policy: { ...webAuthorityPolicy(this.fleetConfig?.web), enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now: Date.now(),
-            hostOperator: this.isWebOnlyFleet(), outside: this.outsideLink(),
+            hostOperator: this.isWebOnlyFleet(),
         });
     }
     sessionAuthorizations = null;
@@ -18337,269 +16251,6 @@ export class FleetManager {
         const { durable } = store.authorize(session.handle, HOST_OPERATOR, now, state.epoch, now + policy.maxSessionMs, peer);
         this.logger.info({ handle: session.handle, durable }, "Host web session authorized (this computer's admin)");
     }
-    // ── #3008: connections from outside (a web-only fleet; decision 28c2d3a3 rule 3, the user's simplified form) ──
-    webRemoteAccessState = null;
-    /** The authenticator, the outside switch and the wrong-code limiter (web-remote-access.json), read on first use. */
-    webRemoteAccess() {
-        if (!this.dataDir)
-            return null;
-        this.webRemoteAccessState ??= new WebRemoteAccess(join(this.dataDir, WEB_REMOTE_ACCESS_FILE), this.logger);
-        return this.webRemoteAccessState;
-    }
-    /** "Allow connections from outside" is on (an app set up) and this is a web-only fleet. */
-    outsideOn() {
-        return this.isWebOnlyFleet() && (this.webRemoteAccess()?.outside ?? false);
-    }
-    /** The link connections from outside opened, while it is open and still theirs: its exposure. Else null. */
-    outsideLink() {
-        if (!this.outsideOn())
-            return null;
-        const open = this.publicWebLink?.openSignin();
-        return open && isOutsideLinkOwner(open.owner) ? { exposureId: open.exposureId } : null;
-    }
-    /**
-     * The request's live session, asked again each time `current()` is called (its own cookie authenticated anew, the same
-     * handle): this web-only fleet's owner — this computer's admin, on this computer (`hostOnly`), or also signed in from
-     * outside — and web-verified now. Null when it is not (a guest, a LAN session, a chat fleet's admin, nobody).
-     */
-    liveOwner(req, opts) {
-        if (!this.isWebOnlyFleet())
-            return null;
-        if (opts.hostOnly && gatewayRequestContext(req))
-            return null;
-        const auth = authorizeSession(req, this.webToken, this.webSessions, { touch: false });
-        if (auth.kind !== "ok")
-            return null;
-        const handle = auth.session.handle, peer = webPeerOf(req), gateway = !!gatewayRequestContext(req);
-        const owner = () => {
-            if (!this.isWebOnlyFleet())
-                return false;
-            const live = authorizeSession(req, this.webToken, this.webSessions, { touch: false });
-            if (live.kind !== "ok" || live.session.handle !== handle)
-                return false;
-            if (opts.hostOnly && (live.session.host !== true || peer !== "loopback"))
-                return false;
-            const now = this.webAuthority({ session: live.session, gateway, peer });
-            const a = now.authority.kind === "web-verified" && now.authority.session?.handle === handle ? now.authority.actor : null;
-            return !!a && a.adapter_id === HOST_OPERATOR.adapterId && a.user_id === HOST_OPERATOR.userId;
-        };
-        return owner() ? { label: t("settings_confirm.host_operator_label"), handle, current: owner } : null;
-    }
-    /** Every session signed in from outside ends (and the authorizations kept for them). */
-    endOutsideSessions() {
-        const ended = new Set(this.webSessions?.list(undefined, r => r.remote === "totp").map(r => r.handle) ?? []);
-        if (!ended.size)
-            return;
-        this.sessionAuthorizationStore()?.prune(a => !ended.has(a.handle));
-        const result = this.webSessions?.revokeAll(r => r.remote === "totp");
-        if (result && !result.durable)
-            this.logger.warn("Outside sessions ended, but that could not be saved");
-        this.logger.info({ count: ended.size }, "Sessions signed in from outside ended");
-    }
-    /**
-     * #1939 §10 / #3008: a stored receipt's authority as it reads now — the web authority state, and for this computer's
-     * admin from outside the switch and the last revocation of remote authority (Prism P2 2).
-     */
-    receiptAuthorityNow(stored, state = this.webAuthorityState()) {
-        return authorityNow(stored, { ...state, outside: this.outsideOn(), outsideHandles: this.webRemoteAccess()?.admitted ?? new Set() });
-    }
-    /** #3008 (the sign-in page): this exposure is the outside link, open now. */
-    isOutsideLink(exposureId) {
-        return this.outsideLink()?.exposureId === exposureId;
-    }
-    /** What Settings shows: set up or not, the switch, a wait in force, the link — its address only to this computer. */
-    webOutsideStatus(req) {
-        const store = this.webRemoteAccess(), status = store?.status();
-        const here = !!this.liveOwner(req, { hostOnly: true });
-        const open = this.outsideOn() ? this.publicWebLink?.openSignin() : null;
-        const mine = !!open && isOutsideLinkOwner(open.owner);
-        const linkStatus = this.outsideOn() ? this.getPublicWebStatus() : null;
-        return { webOnly: this.isWebOnlyFleet(), here, enrolled: !!status?.enrolled, enrolledAt: status?.enrolledAt ?? null,
-            outside: this.outsideOn(), pausedForMs: status?.pausedForMs ?? 0,
-            link: linkStatus && linkStatus.state !== "closed" ? { ...linkStatus, ...(here && mine ? { url: open.url } : {}), quick: !publicLinkNamedHostname(this.fleetConfig?.web) } : null };
-    }
-    /** Set up (or set up again): a new secret, shown once to this computer's admin. Null: not them. */
-    webOutsideBeginEnrollment(req) {
-        const owner = this.liveOwner(req, { hostOnly: true }), store = this.webRemoteAccess();
-        if (!owner || !store)
-            return null;
-        return store.beginEnrollment(owner.handle, hostname() || "fleet");
-    }
-    /** The new app's first code: on "ok" it replaces the old one, whose sessions from outside end. */
-    webOutsideConfirmEnrollment(req, code) {
-        const owner = this.liveOwner(req, { hostOnly: true }), store = this.webRemoteAccess();
-        if (!owner || !store || !owner.current())
-            return "not_here";
-        const had = store.enrolled;
-        const r = store.confirmEnrollment(owner.handle, code);
-        if (r === "ok") {
-            this.logger.info({ again: had }, "Authenticator app set up for connections from outside");
-            if (had)
-                this.endOutsideSessions();
-        }
-        return r;
-    }
-    /** Forget the app: the switch goes off, the link closes, every session from outside ends. */
-    webOutsideRemove(req) {
-        const owner = this.liveOwner(req, { hostOnly: true }), store = this.webRemoteAccess();
-        if (!owner || !store || !owner.current())
-            return "not_here";
-        // #3008 review (Prism P2 1): shut at once whatever the disk says; say so when it could not be saved (retried).
-        const saved = store.remove();
-        this.closeOutsideLink("outside removed");
-        this.logger.info({ saved }, "Authenticator app removed; connections from outside off");
-        return saved ? "ok" : "unsaved";
-    }
-    /** The switch. On: needs an app set up; the link opens. Off: it closes and every session from outside ends. */
-    webOutsideSwitch(req, on) {
-        const owner = this.liveOwner(req, { hostOnly: true }), store = this.webRemoteAccess();
-        if (!owner || !store || !owner.current())
-            return "not_here";
-        if (on && !publicLinkSettings(this.fleetConfig?.web).allowed)
-            return "not_allowed";
-        const r = store.setOutside(on);
-        if (r === "not_enrolled")
-            return r;
-        this.logger.info({ on, saved: r === "ok" }, "Connections from outside switched");
-        // #3008 review (Prism P2 1): Off shuts at once even when it could not be saved (the store retries); On opens only
-        // once saved — a switch the disk does not hold would not survive a restart.
-        if (!on)
-            this.closeOutsideLink("outside off");
-        else if (r === "ok")
-            this.openOutsideLink([0, ...OUTSIDE_LINK_RETRY_MS]);
-        return r;
-    }
-    outsideAttempt = null;
-    outsideOpening = false;
-    /**
-     * Open the outside link: an attempt after each delay in turn until one opens (#3008 B: twice more at most — the quick
-     * link's address service limits how often it may be asked). Every attempt asks again: the switch still on, the fleet
-     * running. A final failure: one Notice; the switch stays on, so the next start tries again.
-     */
-    openOutsideLink(delays) {
-        this.outsideAttempt?.cancel();
-        this.outsideAttempt = null;
-        const attempt = (n) => {
-            this.outsideAttempt = null;
-            if (this.shuttingDown || !this.outsideOn() || this.outsideOpening)
-                return;
-            this.outsideOpening = true;
-            // alpha CI 4abe58cd: an On right after an Off finds the old link still closing (its tunnel stopping): wait for that
-            // close, then open — never "busy" and a 30 s retry. The switch is asked again after the wait by openUnattended
-            // itself (permitted → publicOwnerCurrent: the fleet running, the switch on): an Off meanwhile opens nothing.
-            const link = this.getPublicWebLink();
-            void link.whenClosed().then(() => link.openUnattended(OUTSIDE_LINK_OWNER))
-                .catch(() => "failed").then(outcome => {
-                this.outsideOpening = false;
-                if (outcome === "opened") {
-                    this.logger.info({ attempt: n + 1 }, "Outside link opened");
-                    return;
-                }
-                if (outcome === "busy" && this.outsideLink())
-                    return; // already open (ours)
-                if (this.shuttingDown || !this.outsideOn())
-                    return;
-                if (n + 1 < delays.length) {
-                    this.outsideAttempt = outsideTimer(() => attempt(n + 1), delays[n + 1]);
-                    return;
-                }
-                this.logger.warn({ attempts: n + 1 }, "Outside link could not be opened; giving up until the next start or switch");
-                this.recordWebNotice("fleet", t("outside.notice_ended", t("outside.reason_failed")));
-            });
-        };
-        this.outsideAttempt = outsideTimer(() => attempt(0), delays[0] ?? 0);
-    }
-    closeOutsideLink(reason) {
-        this.outsideAttempt?.cancel();
-        this.outsideAttempt = null;
-        const open = this.publicWebLink?.openSignin();
-        if (this.publicWebLink && (!open || isOutsideLinkOwner(open.owner)))
-            void this.publicWebLink.close(reason);
-        this.endOutsideSessions();
-    }
-    /** PublicWebLink.onClose for the outside link: what closed it decides what happens next (#3008 B). */
-    outsideLinkClosed(reason) {
-        if (this.shuttingDown || OUTSIDE_OWN_CLOSES.has(reason) || !this.outsideOn())
-            return;
-        // #3008 review (Prism P2 3): expiry first — its lifetime counts from the opening request, so it can run out while the
-        // opening is still under way: the switch goes off then too, and that attempt's end (outsideOn false) retries nothing.
-        if (reason === "expired") {
-            // Its lifetime ran out: the switch goes off (only this computer turns it on again — a session from outside can't).
-            this.outsideAttempt?.cancel();
-            this.outsideAttempt = null;
-            if (this.webRemoteAccess()?.setOutside(false) === "unsaved")
-                this.logger.warn("Outside link expired; the switch's Off could not be saved yet (retried)");
-            this.endOutsideSessions();
-            this.logger.info("Outside link expired; connections from outside off");
-            this.recordWebNotice("fleet", t("outside.notice_ended", t("outside.reason_expired")));
-            return;
-        }
-        if (this.outsideOpening)
-            return; // that attempt's own failure: its retry
-        // Dropped (the tunnel exited, the gateway failed, the configuration changed): reopened up to twice.
-        this.logger.info({ reason }, "Outside link closed; reopening");
-        this.openOutsideLink(OUTSIDE_LINK_RETRY_MS);
-    }
-    /**
-     * #3008 (auth-api POST /auth/totp): a sign-in through the outside link with the authenticator's code. "ok": the caller
-     * makes the session (SessionRecord.remote) and then calls authorizeOutsideSession. Each wrong code counts; a wait that
-     * starts is a Notice; a code that matches a step just outside the window logs how far this clock seems to be off.
-     */
-    outsideSignIn(exposureId, code) {
-        const link = this.outsideLink(), store = this.webRemoteAccess();
-        if (!link || !store || !exposureId || link.exposureId !== exposureId)
-            return { kind: "closed" };
-        const v = store.verify(code);
-        if (v.kind === "ok")
-            return { kind: "ok" };
-        if (v.kind === "paused")
-            return v;
-        if (v.kind === "not_enrolled")
-            return { kind: "closed" };
-        if (v.kind === "unavailable")
-            return v;
-        if (v.skewSteps !== null)
-            this.logger.warn({ offsetSeconds: v.skewSteps * TOTP_STEP_SECONDS }, "A wrong authenticator code matched a nearby time step: this computer's clock may be off");
-        if (v.paused) {
-            this.logger.warn({ waitMs: v.retryAfterMs }, "Sign-in from outside paused after wrong codes");
-            this.recordWebNotice("fleet", t("outside.notice_paused", outsideDuration(v.retryAfterMs), v.wrong));
-            return { kind: "paused", retryAfterMs: v.retryAfterMs };
-        }
-        return { kind: "wrong" };
-    }
-    /**
-     * #3008: a session just made by outsideSignIn's "ok" is this computer's admin for its authorization's life. False: it
-     * could not be admitted (its handle not saved, #3015 review r3) — the caller ends it.
-     */
-    authorizeOutsideSession(session, peer, label) {
-        const store = this.sessionAuthorizationStore(), link = this.outsideLink();
-        if (!store || session.remote !== "totp" || session.owner || !link || session.exposureId !== link.exposureId)
-            return false;
-        if (!this.webRemoteAccess()?.admit(session.handle)) {
-            this.logger.warn({ handle: session.handle }, "Session from outside not admitted: it could not be saved");
-            return false;
-        }
-        const state = this.webAuthorityState(), now = Date.now(), policy = webAuthorityPolicy(this.fleetConfig?.web);
-        const check = evaluateWebAuthority({
-            session, gateway: true, peer, tokenEpoch: this.webToken ? tokenEpoch(this.webToken) : null,
-            isAdmin: () => false,
-            authorization: { handle: session.handle, owner: HOST_OPERATOR, authorizedAt: now, until: now + policy.maxSessionMs, epoch: state.epoch },
-            policy: { ...policy, enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now,
-            hostOperator: true, outside: link,
-        });
-        if (check.refusal) {
-            this.logger.info({ handle: session.handle, refusal: check.refusal }, "Session from outside not authorized");
-            return false;
-        }
-        {
-            const live = new Set(this.webSessions?.list(undefined, () => true).map(r => r.handle) ?? []);
-            store.prune(a => a.epoch === state.epoch && now <= Math.min(a.until, a.authorizedAt + policy.maxSessionMs) && live.has(a.handle));
-            const { durable } = store.authorize(session.handle, HOST_OPERATOR, now, state.epoch, now + policy.maxSessionMs, peer);
-            this.logger.info({ handle: session.handle, durable }, "Session from outside authorized (this computer's admin)");
-        }
-        this.recordWebNotice("fleet", t("outside.notice_signed_in", label));
-        return true;
-    }
     authorityStateStore = null;
     /**
      * #1939 §10: the switch, "Only this computer can authorize" and the revocation epoch in force for the configuration as
@@ -18620,10 +16271,6 @@ export class FleetManager {
                     return true;
                 if (session.surface === "local")
                     return false;
-                // #3008 review (Prism P2 4): signed in from outside with the authenticator's code — its opt-in is the outside
-                // switch, not these options (the authority judges it so): it keeps its authorization.
-                if (session.remote === "totp")
-                    return false;
                 const peer = a.peer ?? "named_link";
                 return (!!state.namedLinkClosed && peer === "named_link") || (!!state.quickLinkClosed && peer === "quick_link");
             };
@@ -18667,7 +16314,7 @@ export class FleetManager {
             // Over a link: the temporary one (§0.3), else the named one (a record from before §0.3 has no peer).
             ...(sessions.get(a.handle).surface === "gateway" ? (a.peer === "quick_link" ? { quick: true } : { named: true }) : {}) })) : [];
         const host = this.fleetConfig?.web?.public_link?.hostname;
-        return { state, configured, hours: VERIFIED_SESSION_HOURS, lanHosts, authorized, namedHost: typeof host === "string" && host ? host : null, webOnly: this.isWebOnlyFleet() };
+        return { state, configured, hours: VERIFIED_SESSION_HOURS, lanHosts, authorized, namedHost: typeof host === "string" && host ? host : null };
     }
     authorizationRequests = null;
     /**
@@ -18775,7 +16422,7 @@ export class FleetManager {
             authorization: s?.owner ? { handle: s.handle, owner: s.owner, authorizedAt: now, until: now + policy.maxSessionMs, epoch: state.epoch } : null,
             policy: { ...policy, enabled: state.enabled, loopbackOnly: state.loopbackOnly, namedLink: state.namedLink, quickLink: state.quickLink }, epoch: state.epoch, now,
             // #2910 D1: a host operator's session is never asked about (no account to ask): only a sign-in authorizes it.
-            hostOperator: this.isWebOnlyFleet(), outside: this.outsideLink(),
+            hostOperator: this.isWebOnlyFleet(),
         });
         return r.refusal;
     }
@@ -19641,8 +17288,6 @@ export class FleetManager {
         publication.retirePending = true;
     }
     async sendCancelButton(instanceName, correlationId, preserveProgress = false) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[instanceName]))
-            return;
         // Post first, retire after (see the tail of this method). Retiring up front
         // meant that from the delete until the new message came back — a chat API
         // round trip, and every reply goes through here — the instance had NO live
@@ -20192,14 +17837,6 @@ export class FleetManager {
     }
     /** Interrupt an instance's current generation (cancel button / /cancel). */
     cancelInstance(instanceName) {
-        if (isNativeExecInstance(this.fleetConfig?.instances[instanceName])) {
-            this.cancelPendingDeliveries(instanceName);
-            const cancelled = this.nativeInstanceRuntime().cancel(instanceName);
-            this.lastInboundMsg.delete(instanceName);
-            for (const message of this.webChatHistory.cancelPending(instanceName))
-                this.emitSseEvent("delivery", { instance: instanceName, messageId: message.messageId, delivery: message.delivery });
-            return cancelled !== null;
-        }
         const daemon = this.daemons.get(instanceName);
         if (!daemon)
             return false;
@@ -20305,8 +17942,6 @@ export class FleetManager {
                 }
                 catch { /* safe metadata only */ }
                 broadcastSseEvent(this.sseClients, "backend_login", {}, err => this.logger.debug({ err }, "backend_login event failed"));
-                if (event.phase === "done")
-                    this.forgetSignInIdentities(); // a sign-in may be a different account now
                 this.needsYou?.poke();
                 if (!this.browserSignInOwnerCurrent(owner))
                     return;
@@ -20345,10 +17980,7 @@ export class FleetManager {
             cancel: () => this.cancelLoginSession(),
             notice: ({ shown, label, handle }) => this.notifyFleetError(t("login.web_dashboard_notice", shown, label, handle.slice(0, 8))),
             // No details in the event: each page reads its own view (GET /ui/backend-login), as its session may see it.
-            // The accounts are forgotten when ANY sign-in ends, even one a later one replaced (it may be a different account now), and not at every step of a
-            // running one: `changed` only tells the pages to read again.
-            changed: () => { broadcastSseEvent(this.sseClients, "backend_login", {}, err => this.logger.debug({ err }, "backend_login event failed")); },
-            loginEnded: () => this.forgetSignInIdentities(),
+            changed: () => broadcastSseEvent(this.sseClients, "backend_login", {}, err => this.logger.debug({ err }, "backend_login event failed")),
         });
         return this.webBackendLoginsInstance;
     }
@@ -20362,135 +17994,6 @@ export class FleetManager {
      * #2233: Settings → Agents' sign-in list — every backend's default login as the availability snapshot has it, then
      * each credential profile an agent uses (its own login state, read offline).
      */
-    /** Which account each sign-in is, as the host's own `claude auth status` said (masked; see checkAuthIdentity). Keys are `backend\0profile` in a Map: a name is data, never a property. */
-    signInIdentities = new Map();
-    /** Reads in flight, by the same key: a second request for a sign-in that is already being read joins it instead of starting another process. */
-    signInIdentityReads = new Map();
-    /** Raised each time the accounts are forgotten: a read that began before is never allowed to write what it found. */
-    signInIdentityGeneration = 0;
-    signInIdentitySlots = 0;
-    signInIdentityWaiters = [];
-    signInIdentity(backend, profile) { return this.signInIdentities.get(`${backend}\0${profile ?? ""}`)?.identity ?? undefined; }
-    /** A sign-in finished (or changed): forget what was read and let no read that was already running put its answer back. */
-    forgetSignInIdentities() { this.signInIdentityGeneration++; this.signInIdentities.clear(); this.signInIdentityReads.clear(); }
-    /** At most three `claude auth status` at once across the whole host, however many requests ask. */
-    async withSignInIdentitySlot(task) {
-        while (this.signInIdentitySlots >= 3)
-            await new Promise(resolve => this.signInIdentityWaiters.push(resolve));
-        this.signInIdentitySlots++;
-        try {
-            return await task();
-        }
-        finally {
-            this.signInIdentitySlots--;
-            this.signInIdentityWaiters.shift()?.();
-        }
-    }
-    /** One `claude auth status` for a sign-in (the default one, or a credential profile's folder). */
-    async readSignInIdentity(target) {
-        let env;
-        if (target.profile)
-            env = credentialProfileEnv(this.dataDir, target.backend, target.profile) ?? undefined;
-        return checkAuthIdentity(target.backend, env);
-    }
-    /**
-     * Start reading, in the background, the account of each Claude Code sign-in that is signed in (the default and every profile an agent uses) and
-     * not read in the last five minutes. It never waits and never blocks a request: the list shows what is already known, and the pages are told to
-     * read it again when something new was learned. A sign-in already being read is not read twice, and a read that began before the accounts were
-     * forgotten (a sign-in finished meanwhile) is dropped. No login, no network request of ours, nothing logged.
-     */
-    refreshSignInIdentities() {
-        const now = Date.now(), fresh = (target) => { const entry = this.signInIdentities.get(`${target.backend}\0${target.profile ?? ""}`); return !!entry && now - entry.at < 5 * 60_000; };
-        const started = [];
-        for (const target of this.backendSignInTargets()) {
-            const key = `${target.backend}\0${target.profile ?? ""}`;
-            if (target.state !== "usable" || !authIdentitySupported(target.backend) || fresh(target) || this.signInIdentityReads.has(key))
-                continue;
-            const generation = this.signInIdentityGeneration;
-            const read = this.withSignInIdentitySlot(() => this.readSignInIdentity(target)).then(identity => {
-                if (generation !== this.signInIdentityGeneration)
-                    return false; // forgotten while it ran: its answer may be the old account
-                this.signInIdentities.set(key, { identity: identity ?? null, at: Date.now() });
-                return true;
-            }).catch(() => {
-                // A read that threw is an answer too: remembered as "no account" for the same five minutes, so every GET does not try again.
-                if (generation === this.signInIdentityGeneration)
-                    this.signInIdentities.set(key, { identity: null, at: Date.now() });
-                return false;
-            }).finally(() => { if (this.signInIdentityReads.get(key) === read)
-                this.signInIdentityReads.delete(key); });
-            this.signInIdentityReads.set(key, read);
-            started.push(read);
-        }
-        if (started.length)
-            void Promise.all(started).then(results => {
-                if (results.some(Boolean))
-                    broadcastSseEvent(this.sseClients, "backend_login", {}, err => this.logger.debug({ err }, "backend_login event failed")); // read the list again: it knows more now
-            });
-    }
-    /**
-     * #3212 PR 1: the Accounts view (accounts-view.ts) — every CLI's default sign-in and named profiles (used or only on
-     * disk), who uses each and its weekly usage. Host rows only; a paired computer's rows come with #3190 Part 3c. Its
-     * usage is the usage panel's cached read (never forced), given at most `usageWaitMs` before the view is sent without it.
-     */
-    async accountsView(usageWaitMs = 1500) {
-        const fleet = this.fleetConfig;
-        const defaultBackend = fleet?.defaults?.backend ?? "claude-code";
-        this.refreshSignInIdentities();
-        const targets = this.backendSignInTargets();
-        const diskProfiles = new Map();
-        for (const backend of PROFILE_CLIS) {
-            const rows = [];
-            for (const profile of profilesOnDisk(this.dataDir, backend)) {
-                let login = "unknown";
-                try {
-                    login = credentialProfileLogin(this.dataDir, backend, profile).state;
-                }
-                catch { /* unknown */ }
-                const signIn = dashboardSignInSupported(backend, profile);
-                const hostCommand = signIn ? null : credentialProfileLoginCommand(this.dataDir, backend, profile);
-                const identity = this.signInIdentity(backend, profile);
-                rows.push({ profile, state: (login === "logged-in" ? "usable" : login === "signed-out" ? "not_signed_in" : "unknown"), signIn,
-                    ...(hostCommand ? { hostCommand } : {}), ...(identity ? { identity } : {}) });
-            }
-            diskProfiles.set(backend, rows);
-        }
-        // Host agents only: an agent on a paired Windows computer runs on that computer's accounts (its own scope, later).
-        const agents = Object.keys(fleet?.instances ?? {}).filter(name => !isWindowsInstance(fleet.instances[name])).sort()
-            .map(name => { const backend = this.backendNameForInstance(name); return { name, backend, profile: this.credentialProfileOf(name, backend) }; });
-        const classic = readClassicBindings(this.dataDir).map(b => {
-            const backend = b.backend ?? defaultBackend;
-            return { key: b.key, backend, profile: profileName(classicProfile(b.backend_options, fleet?.defaults?.backend_options, backend)) };
-        });
-        const fleetDefaults = new Map();
-        for (const backend of PROFILE_CLIS) {
-            const p = profileName(profileOf(fleet?.defaults?.backend_options, backend));
-            if (p)
-                fleetDefaults.set(backend, p);
-        }
-        // Weekly usage, from the usage panel's own (cached, never forced) read.
-        const usage = new Map();
-        const ids = new Map(); // provider id → backend\0profile
-        for (const backend of ACCOUNT_CLIS) {
-            const pid = usageProviderIdForBackend(backend);
-            if (!pid)
-                continue;
-            ids.set(pid, `${backend}\0`);
-            for (const p of new Set([...(diskProfiles.get(backend) ?? []).map(d => d.profile), ...targets.filter(t => t.backend === backend && t.profile).map(t => t.profile)]))
-                ids.set(`${pid}:${p}`, `${backend}\0${p}`);
-        }
-        try {
-            const payload = await Promise.race([getUsageSnapshot(false, undefined, { allowStale: true }), new Promise(r => { const tm = setTimeout(() => r(null), usageWaitMs); tm.unref?.(); })]);
-            for (const provider of payload?.providers ?? []) {
-                const at = ids.get(provider.id);
-                const w = at ? weeklyUsage(provider) : undefined;
-                if (at && w)
-                    usage.set(at, w);
-            }
-        }
-        catch { /* the view without usage */ }
-        return buildAccountsView({ targets, diskProfiles, agents, classic, fleetDefaults, usage });
-    }
     backendSignInTargets() {
         const out = [];
         for (const row of this.backendAvailabilityRows()) {
@@ -20502,7 +18005,6 @@ export class FleetManager {
                 ...(flow?.remoteLogin === "unsupported" ? { hostCommand: flow.command } : {}),
                 ...(row.state === "not_installed" && install ? { install } : {}),
                 ...(row.state === "too_old" && install ? { update: install } : {}),
-                ...(this.signInIdentity(row.backend) ? { identity: this.signInIdentity(row.backend) } : {}),
             });
         }
         const seen = new Set();
@@ -20520,7 +18022,7 @@ export class FleetManager {
             const signIn = dashboardSignInSupported(backend, profile);
             const hostCommand = signIn ? null : credentialProfileLoginCommand(this.dataDir, backend, profile);
             out.push({ backend, profile, state: login === "logged-in" ? "usable" : login === "signed-out" ? "not_signed_in" : "unknown", signIn,
-                ...(hostCommand ? { hostCommand } : {}), ...(this.signInIdentity(backend, profile) ? { identity: this.signInIdentity(backend, profile) } : {}) });
+                ...(hostCommand ? { hostCommand } : {}) });
         }
         return out;
     }
@@ -21345,8 +18847,6 @@ export class FleetManager {
             this.needsYou?.poke();
         const onError = (err) => this.logger.debug({ err }, "SSE client write failed; evicting");
         if (event === "message" && data && typeof data === "object") {
-            // #2861: an Office share's dialogue box hears that someone talked to an instance (never what was said).
-            this.officeTalk.noteMessage(data);
             // A chat message: record it, and send it WITH its id so a reconnecting stream can ask for what it missed.
             const m = data;
             const recorded = this.webChatHistory.record({
@@ -21560,7 +19060,36 @@ export class FleetManager {
         "antigravity": ".agents/AGENTS.md",
         "mock": "CLAUDE.md",
     };
-    static GENERAL_INSTRUCTIONS = GENERAL_ROLE_INSTRUCTIONS;
+    static GENERAL_INSTRUCTIONS = `# Fleet Coordinator
+
+You are the fleet coordinator — the central entry point for this AgEnD fleet.
+You route tasks, manage instances, enforce policies, and synthesize results.
+Do NOT modify project files directly — delegate file changes to the project's instance.
+You CAN write code snippets, explain code, and answer technical questions directly.
+
+## Task Routing
+
+- **Handle directly**: no file/exec access needed, answerable from knowledge, ≤2 reasoning steps (Q&A, translation, status queries, code snippets).
+- **Delegate to 1 instance**: scoped to one project/repo, needs file access or execution.
+- **Coordinate multiple**: spans repos, outputs feed each other, or parallel helps (max 3 per task).
+
+Instance discovery: start with list_instances(); follow the guidance in its response. Prefer reuse; never duplicate a running instance.
+
+## Reply Contract
+
+Every final response to the user contains: the result (the actual answer or deliverable) and gaps (anything incomplete — omit if none). Summarize instance reports; omit internal coordination noise.
+
+## After Restart
+
+BEFORE processing any new messages: 1. list_instances() 2. list_teams() 3. list_decisions(). Only then handle requests.
+
+## Playbooks (on-demand skills)
+
+Detailed procedures live in your skills — consult them when the situation comes up rather than from memory:
+- **delegation-playbook** — delegation protocol, loop prevention, parallel vs sequential, result/failure handling, team management, instance configuration tips.
+- **development-workflow** — the fleet-wide code-change policy you enforce when delegating code tasks.
+Plus the operational skills (fleet-health, instance-lifecycle, scheduling, session-management, …).
+`;
     /** Ensure the general instance has its project instructions file + knowledge */
     ensureGeneralInstructions(workDir, backendName, instanceName) {
         measureSyncWork("fleet.generalInstructions", () => this.ensureGeneralInstructionsSync(workDir, backendName, instanceName));
@@ -22582,8 +20111,6 @@ export class FleetManager {
                     : model,
         });
         const fleetInstance = this.fleetConfig?.instances[instanceName];
-        if (isWindowsInstance(fleetInstance))
-            return fleetInstance.model?.trim() ? done(fleetInstance.model.trim(), "instance") : done("default", "unresolved", "this CLI does not report a default");
         if (fleetInstance) {
             if (fleetInstance.model?.trim())
                 return done(fleetInstance.model.trim(), "instance");
@@ -22665,7 +20192,7 @@ export class FleetManager {
         if (this.fleetConfig?.defaults?.backend)
             backends.add(this.fleetConfig.defaults.backend);
         for (const inst of Object.values(this.fleetConfig?.instances ?? {}))
-            if (!isWindowsInstance(inst) && inst.backend)
+            if (inst.backend)
                 backends.add(inst.backend);
         for (const ch of this.classicChannels?.getAll() ?? [])
             if (ch.backend)
@@ -22680,8 +20207,6 @@ export class FleetManager {
         // here; a ClassicBot room on a profile is probed on its first /model (catalogProfile knows rooms too).
         const profiles = new Set();
         for (const name of Object.keys(this.fleetConfig?.instances ?? {})) {
-            if (isWindowsInstance(this.fleetConfig?.instances[name]))
-                continue;
             if (this.backendNameForInstance(name) !== "claude-code")
                 continue;
             const profile = this.catalogProfile("claude-code", name);
@@ -22702,8 +20227,6 @@ export class FleetManager {
      * instead of presenting an old list as a fresh one.
      */
     async getModelOptionsWithSource(instanceName, opts = {}) {
-        if (isWindowsInstance(this.fleetConfig?.instances[instanceName]))
-            return { models: (await this.listModelCatalog({ instanceName })).models, source: "cache" };
         const backendName = this.backendNameForInstance(instanceName);
         const profile = this.catalogProfile(backendName, instanceName);
         const cached = this.readCliEnv(backendName, profile);
@@ -22759,21 +20282,6 @@ export class FleetManager {
      */
     async listModelCatalog(opts = {}) {
         const { instanceName } = opts;
-        if (instanceName && isWindowsInstance(this.fleetConfig?.instances[instanceName])) {
-            const config = this.fleetConfig.instances[instanceName], backend = config.backend ?? "codex";
-            // Detection is admin-owned. A read never launches a provider or falls back to this host's account.
-            let inventory = null;
-            try {
-                inventory = await this.runtimeWindowsExecutor().probe({ force: false, machineId: config.machine_id });
-            }
-            catch { /* offline remains unavailable */ }
-            const row = inventory?.clis.find(value => value.id === backend);
-            return { backend, scope: "instance", instance: instanceName, current_model: config.model || null,
-                models: (row?.models ?? []).map(value => ({ id: value.id, label: value.name ?? value.id, ...(value.description ? { description: value.description } : {}) })),
-                source: row?.models?.length ? "cache" : "fallback",
-                ...(inventory?.probedAt ? { probed_at: new Date(inventory.probedAt).toISOString() } : {}),
-                note: "Windows runtime's last detected inventory; no coordinator account or live probe is used." };
-        }
         if (instanceName) {
             const backend = this.backendNameForInstance(instanceName);
             const resolved = this.resolveInstanceModel(instanceName);
@@ -22809,8 +20317,6 @@ export class FleetManager {
     }
     /** Ask a backend for its catalog using ONE instance's real config. Never throws. */
     async instanceScopedModels(instanceName, backend) {
-        if (isWindowsInstance(this.fleetConfig?.instances[instanceName]))
-            return [];
         try {
             const inst = this.fleetConfig?.instances?.[instanceName];
             const instanceDir = this.getInstanceDir(instanceName);
@@ -23448,8 +20954,6 @@ export class FleetManager {
     }
     /** The instance's backend's effort metadata; agy's levels are its model's (#1825), the one the instance runs. */
     instanceEffortMetadata(instanceName) {
-        if (isWindowsInstance(this.fleetConfig?.instances[instanceName]))
-            return { strategy: "unsupported", levels: [] };
         const backend = this.backendNameForInstance(instanceName);
         let model = null;
         if (backend === "antigravity") {
@@ -23460,8 +20964,6 @@ export class FleetManager {
     }
     /** Configured effort for an instance: per-instance, else fleet default, else none. */
     resolveInstanceEffort(instanceName) {
-        if (isWindowsInstance(this.fleetConfig?.instances[instanceName]))
-            return { effort: null, source: "unset" };
         const own = this.fleetConfig?.instances[instanceName]?.effort;
         if (own)
             return { effort: own, source: "instance" };
@@ -23499,11 +21001,9 @@ export class FleetManager {
      * instance respawns.
      */
     async applyEffort(instanceName, requested, opts) {
-        // #1490 row 27 (main): a menu's choice is for the lifecycle it was offered to — asked first and fenced into the restart.
+        // #1490 row 27: a menu's choice is for the lifecycle it was offered to — asked first and fenced into the restart.
         if (opts?.current && !opts.current())
             return t("menu.instance_replaced", this.shownInstanceName(instanceName));
-        if (isWindowsInstance(this.fleetConfig?.instances[instanceName]))
-            return t("effort.unsupported", this.backendNameForInstance(instanceName));
         const level = requested.trim().toLowerCase();
         const backendName = this.backendNameForInstance(instanceName);
         let strategy = "unsupported";
@@ -23551,20 +21051,6 @@ export class FleetManager {
         if (/[\x00-\x1f\x7f]/.test(model)) {
             return t("model.invalid_chars");
         }
-        const native = this.fleetConfig?.instances[instanceName];
-        if (isWindowsInstance(native)) {
-            if (!isNativePaneInstance(native))
-                return WINDOWS_CONFIG_REFUSED;
-            const catalog = await this.listModelCatalog({ instanceName });
-            if (!catalog.models.some(row => row.id === model))
-                return t("model.unknown_name", model, catalog.models.map(row => row.id).join(", "));
-            const id = native.native_agent_id, machine = native.machine_id;
-            await this.updateNativePaneConfig(instanceName, { model }, () => {
-                const now = this.fleetConfig?.instances[instanceName];
-                return isNativePaneInstance(now) && now.native_agent_id === id && now.machine_id === machine;
-            });
-            return t("model.restart_success", instanceName, model);
-        }
         const backendName = this.backendNameForInstance(instanceName);
         let strategy = "restart";
         try {
@@ -23753,8 +21239,6 @@ export class FleetManager {
      * profile's, when it is named and has one), claude's account catalog included. Read only: never a probe.
      */
     modelCatalogFor(backend, instance) {
-        if (instance && isWindowsInstance(this.fleetConfig?.instances[instance]))
-            return [];
         if (!KNOWN_BACKENDS.includes(backend) || backend === "mock")
             return [];
         const own = instance && Object.prototype.hasOwnProperty.call(this.fleetConfig?.instances ?? {}, instance) ? instance
@@ -23768,40 +21252,6 @@ export class FleetManager {
             }
         return out;
     }
-    /** Host-default fallback only: Grok has no modeled profile home. Never construct a backend or start a probe. */
-    async cliModelCatalogFor(backend, instance) {
-        if (backend !== "grok")
-            return [];
-        const fleet = this.fleetConfig;
-        const configured = instance && Object.prototype.hasOwnProperty.call(fleet?.instances ?? {}, instance) ? fleet.instances[instance] : undefined;
-        const classic = this.classicChannels;
-        const room = instance && !configured ? classic?.getAll().find(channel => channel.instanceName === instance) : undefined;
-        if (instance && !configured && !room)
-            return [];
-        const daemon = room ? this.daemons.get(instance) : undefined;
-        const grokHome = process.env.GROK_HOME?.trim() || join(homedir(), ".grok");
-        const stillHostDefault = () => {
-            if (this.fleetConfig !== fleet || (process.env.GROK_HOME?.trim() || join(homedir(), ".grok")) !== grokHome)
-                return false;
-            if (configured && (isWindowsInstance(configured) || !Object.prototype.hasOwnProperty.call(fleet?.instances ?? {}, instance) || fleet.instances[instance] !== configured))
-                return false;
-            if (room && (this.classicChannels !== classic || classic?.getAll().find(channel => channel.instanceName === instance) !== room || this.daemons.get(instance) !== daemon))
-                return false;
-            // The ordinary profile helpers deliberately ignore Grok: it has no credential-home mapping yet.
-            // Check raw declarations, including invalid ones, rather than mistaking them for the host login.
-            const defaults = fleet?.defaults?.backend_options;
-            const profiles = configured
-                ? [configured.backend_options?.grok?.credential_profile, defaults?.grok?.credential_profile]
-                : room
-                    ? [mergeBackendOptions(defaults, room.backendOptions)?.grok?.credential_profile, daemon?.getConfigSnapshot?.().backend_options?.grok?.credential_profile]
-                    : [defaults?.grok?.credential_profile];
-            return profiles.every(profile => profile === undefined || profile === null || profile === "");
-        };
-        if (!stillHostDefault())
-            return [];
-        const models = await readGrokModelCache(grokHome);
-        return stillHostDefault() ? models : [];
-    }
     /**
      * #2072 (#2078 review): the snapshot as THIS instance would see it. Its sign-in on a backend is its own credential
      * profile's when it has one there — the host's default login says nothing about it. A profile's login is a file check
@@ -24356,6 +21806,7 @@ export class FleetManager {
             ...this.fleetConfig?.defaults,
             working_directory: workDir,
             lightweight: true,
+            quota_notice: classicIdentity?.quotaNotice,
             tool_progress: toolProgress ?? "off",
             reply_completion_guard: replyCompletionGuard ?? true,
             ...(backend ? { backend } : {}),
@@ -24460,19 +21911,6 @@ export class FleetManager {
      * settles, so a later genuine stop (after a restart) still does the work.
      */
     stopAll() {
-        // S-51: no new Hub admission, dispatch or listener work from this tick on; doStopAll awaits the close.
-        this.hubEffectsReady = false;
-        this.hubRuntime?.fence();
-        this.lifecycle.cancelNativeRecovery?.();
-        this.nativeMcpStore?.closeAll();
-        this.runtimeExecutor?.close();
-        this.runtimeExecutor = null;
-        this.fleetWindowsRuntime = null;
-        this.runtimeHub?.close();
-        this.runtimeHub = null;
-        this.localPaneRelay?.stop();
-        this.localPaneRelay = null;
-        closeWindowsBridge(this);
         this.stopAllInFlight ??= this.doStopAll().finally(() => {
             // #1956: after the stop's own tmux work; anything later goes direct. A later startAll starts it again.
             if (this.tmuxExecHelperTimer) {
@@ -24535,6 +21973,9 @@ export class FleetManager {
         // because we asked it to. Set synchronously — doStopAll runs to its first
         // await in the same tick as the signal handler, so no event can slip in.
         this.shuttingDown = true;
+        this.stopQuotaObserver?.();
+        this.stopQuotaObserver = null;
+        const quotaNoticesStopped = this.quotaNotices?.stop();
         // Stop receive admission before the first await or any instance shutdown; outbound
         // adapters remain available below to retire notices and pending prompts.
         for (const state of this.adapterState.values()) {
@@ -24567,7 +22008,6 @@ export class FleetManager {
         const settingsControlStopped = settingsControl?.close();
         this.publicLinkAutoOpen?.stop();
         const publicStopped = this.publicWebLink?.close("fleet shutdown");
-        this.webRemoteAccessState?.close(); // #3008: an unsaved switch gets its last write
         const sharesStopped = this.officeSharesInstance?.close(); // #2636: every Office share ends, and its tunnel
         // #1386: every live "Needs you" message says the fleet stopped (capabilities revoked first) — while the
         // adapters can still edit. Bounded: a platform that does not answer must not hold the shutdown.
@@ -24581,17 +22021,6 @@ export class FleetManager {
         // #1565: the web chat's last changes reach the disk (bounded: a slow disk does not hold the shutdown).
         const webChatStopped = this.webChatStore ? Promise.race([this.webChatStore.flush().catch(() => { }), new Promise(r => setTimeout(r, 3_000).unref?.())]) : Promise.resolve();
         const profileStopped = this.runtimeCpuProfiler?.shutdown("fleet shutdown");
-        // S-51: the Hub closes in the same drain, bounded so an unanswering listener does not hold the shutdown.
-        const hubInit = this.hubRuntimeInit, hubNow = this.hubRuntime;
-        this.hubRuntime = null;
-        this.hubRuntimeInit = null;
-        const hubClose = async () => {
-            const runtime = hubNow ?? (hubInit ? await hubInit.catch(() => null) : null);
-            await runtime?.close();
-        };
-        const hubStopped = hubNow || hubInit
-            ? Promise.race([hubClose().catch(err => this.logger.warn({ err: err?.message }, "Hub did not close cleanly")), new Promise(r => setTimeout(r, 10_000).unref?.())])
-            : Promise.resolve();
         this.ipcStoppingInstances.add("__fleet_stopping__");
         // Release held delivery promises before awaiting daemon shutdown, then
         // reject spawn work which has not started. Otherwise a storm backoff could
@@ -24626,10 +22055,11 @@ export class FleetManager {
         await publicStopped;
         await sharesStopped?.catch(() => { });
         await profileStopped;
-        await hubStopped;
         await needsStopped;
         await settingsControlStopped;
         await cacheStopped;
+        await quotaNoticesStopped;
+        this.quotaNotices = null;
         await webChatStopped;
         await this.cpuProfileControl?.close();
         this.cpuProfileControl = null;
@@ -24965,8 +22395,6 @@ export class FleetManager {
             this.savedFleetConfigSnapshot = previousSavedSnapshot;
             this.loadedFleetSource = previousSource;
             this.observeWebAuthority(); // #2453 review: the configuration back in force is the one seen
-            this.observeRuntimeSwitches(); // M-2255: and the Windows runtimes' switches
-            this.observeHubSwitches(); // S-51: and the Hub's
             this.logger.error({
                 oldCount,
                 newCount,
@@ -24986,7 +22414,6 @@ export class FleetManager {
             // mark every row done and tell the user "changes applied".
             return { rejected: why };
         }
-        this.nativeMcpStore?.observePolicies();
         this.agentCredentialsCache?.observePolicies();
         if (this.loadedFleetSource)
             this.getConfigHistory().accepted("fleet.yaml", this.configPath, this.loadedFleetSource);
@@ -26607,7 +24034,7 @@ export class FleetManager {
         const topicMode = daemonTopicMode(fleet);
         const restartProgress = new RestartProgress(this.runnableStartupCount(fleet, topicMode), restartStartedAt, this.logger);
         // Phase 1: generals first
-        const restartEntries = Object.entries(fleet.instances).filter(([, config]) => !isNativeExecInstance(config));
+        const restartEntries = Object.entries(fleet.instances);
         const restartGenerals = restartEntries.filter(([_, cfg]) => cfg.general_topic);
         const restartOthers = restartEntries.filter(([_, cfg]) => !cfg.general_topic);
         for (const [name, cfg] of restartGenerals) {
@@ -27061,14 +24488,6 @@ export class FleetManager {
                 return;
             }
             const requestPath = new URL(req.url ?? "/", `http://localhost:${port}`).pathname;
-            const publicUrl = new URL(req.url ?? "/", `http://localhost:${port}`);
-            if (remoteRuntimeEnabled() && !gatewayRequestContext(req)
-                && this.runtimeCoordinator().handlePublicRequest(req, res, publicUrl))
-                return;
-            // The read-only installer files (/runtime/install.ps1 and the bundle ZIP) grant nothing. They answer 404 while remote runtimes
-            // are off or on a public gateway link, and touch no other path.
-            if (this.runtimeInstaller().handle(req, res, publicUrl))
-                return;
             // Branding is public, after Host admission: automatic favicon requests
             // must not become noisy web-token 401s in the browser console.
             // #2308: the icon routes and the pages' icon links follow the app icon set in Settings.
@@ -27095,8 +24514,7 @@ export class FleetManager {
                     if (decision.reason === "no-credential" && req.method === "GET"
                         && String(req.headers.accept ?? "").includes("text/html")
                         && isWebPageNavigation(requestPath)) {
-                        const link = gatewayRequestContext(req);
-                        serveSigninPage(res, 401, { webOnly: this.isWebOnlyFleet(), outside: !!link && this.isOutsideLink(link.exposureId), deviceLogin: !link && this.deviceLoginAvailable(), loginQr: this.loginQrEnabled() });
+                        serveSigninPage(res, 401, { webOnly: this.isWebOnlyFleet() });
                         return;
                     }
                     res.writeHead(decision.status);
@@ -27268,7 +24686,6 @@ export class FleetManager {
                     res.end(JSON.stringify({
                         ...sysInfo,
                         version: this.currentVersion,
-                        build: gatewayRequestContext(req) ? undefined : this.currentBuild,
                         instances: enriched,
                         publicLink: this.getPublicWebStatus(),
                     }));
@@ -27454,12 +24871,6 @@ export class FleetManager {
         if (!this.webToken || !this.webSessions)
             this.initializeWebAuthTokens();
         const server = createServer((req, res) => this.dispatchWebHttp(req, res, port, drain.closing));
-        server.on("upgrade", (req, socket, head) => {
-            if (!this.shuttingDown && remoteRuntimeEnabled() && isHostAllowed(req.headers.host, allowedHostNames(this.fleetConfig))
-                && this.runtimeCoordinator().handleUpgrade(req, socket, head))
-                return;
-            socket.destroy();
-        });
         // #1937: Node's default (300 s to receive a request) would cut a large upload on a slow link. The listener allows
         // more; the upload route keeps its own clocks (no byte for a minute, or 30 minutes in all), and every other request
         // keeps the old 300 s (limitRequestReceive in dispatchWebHttp).
@@ -27684,36 +25095,9 @@ export class FleetManager {
             this.logger.debug({ err }, "bots unreadable (getUiStatus)");
         }
         const instances = names.map(name => {
-            const nativeConfig = this.fleetConfig?.instances[name];
-            if (isNativeExecInstance(nativeConfig)) {
-                let runtime = null;
-                let agent = null;
-                try {
-                    runtime = this.nativeInstanceRuntime();
-                    agent = runtime.get(name);
-                }
-                catch { /* A damaged native profile is a crashed native row, never a Linux spawn. */ }
-                const display_name = nativeConfig.display_name || agent?.name || name;
-                const backend = nativeConfig.backend || agent?.cli || "codex";
-                return { name, display_name, description: nativeConfig.description || undefined, tags: nativeConfig.tags || [],
-                    teams: instanceTeams(this.fleetConfig?.teams, name), runtime: "windows", native_agent_id: nativeConfig.native_agent_id,
-                    ...(nativeConfig.machine_id ? { machine_id: nativeConfig.machine_id, machine_name: this.runtimeHub?.machine(nativeConfig.machine_id)?.name,
-                        machine_status: this.runtimeHub?.machine(nativeConfig.machine_id)?.status ?? "offline" } : {}),
-                    native_blocked: !agent || agent.blocked === true,
-                    native_busy: runtime?.busy(name) ?? false,
-                    backend,
-                    model: nativeConfig.model || "default", model_source: nativeConfig.model ? "instance" : "cli-default",
-                    status: agent && runtime ? runtime.status(name) : "crashed", state: agent && runtime ? runtime.execution(name) : null, execution_state: agent && runtime ? runtime.execution(name) : null,
-                    interaction: null, interaction_summary: null, context_pct: null, cost: null,
-                    last_reply: this.webChatHistory.lastAgentReply(name) ?? undefined,
-                    avatar: avatarFor({ name, displayName: display_name }),
-                    capabilities: { chat: true, settings: true, pause: true, cancel: true, teams: true, schedules: true, delegation: true, mcp: nativeProviderMcpSupported(backend), channels: false, terminal: false, attachments: false, usage: false, send_while_busy: false },
-                    ...(!agent ? { runtime_error: "Windows profile is missing or invalid; restore its saved conversation before using this instance" }
-                        : agent.blocked ? { runtime_error: "Windows process outcome is unknown; verify it stopped before recovery" } : {}) };
-            }
             // #1956: read once for this instance; its cost, context and model come from it.
-            const statusline = isNativePaneInstance(nativeConfig) ? undefined : readStatuslineJson(this.dataDir, name);
-            const cost = isNativePaneInstance(nativeConfig) ? null : statusline?.cost?.total_cost_usd ?? 0;
+            const statusline = readStatuslineJson(this.dataDir, name);
+            const cost = statusline?.cost?.total_cost_usd ?? 0;
             // Align with /ctx: statusline for claude-code, pane scrape for kiro/grok/codex.
             const classic = classicOnly.includes(name);
             const backend = classic
@@ -27721,7 +25105,7 @@ export class FleetManager {
                 : (this.fleetConfig?.instances[name]?.backend
                     ?? this.fleetConfig?.defaults?.backend
                     ?? "claude-code");
-            const { context } = isNativePaneInstance(nativeConfig) ? { context: null } : resolveInstanceContext(this.dataDir, name, backend, { source: this.getPaneContextSource(name), statusline });
+            const { context } = resolveInstanceContext(this.dataDir, name, backend, { source: this.getPaneContextSource(name), statusline });
             // context_pct: null when unavailable, not 0
             const context_pct = context ?? null;
             // Model: Only Claude Code has live statusline; others use the effective resolver.
@@ -27752,24 +25136,6 @@ export class FleetManager {
             }
             return {
                 name,
-                general_topic: nativeConfig?.general_topic === true,
-                ...(isNativePaneInstance(nativeConfig) ? { runtime: "windows", native_adapter: "pane", native_agent_id: nativeConfig.native_agent_id,
-                    ...(() => {
-                        try {
-                            const profile = this.nativeInstanceRuntime().get(name), bound = this.daemons.get(name);
-                            return { native_recovery: profile?.paneRecovery ?? (profile?.paneLaunchId && bound?.usesNativePane?.() && !bound.nativePaneCurrent()
-                                    ? { kind: "exit-unconfirmed", launchId: profile.paneLaunchId } : null) };
-                        }
-                        catch {
-                            return { native_recovery: null };
-                        }
-                    })(),
-                    capabilities: { chat: true, settings: true, pause: true, cancel: true, teams: true, schedules: true, delegation: true, mcp: true,
-                        commands: true, effort: false, log: true, details: true, channels: false, terminal: false, attachments: false, usage: false, send_while_busy: true },
-                    // cc3ce4fe: the version this machine's inventory reports for the agent's CLI, and whether AgEnD has audited it.
-                    ...this.nativeCliStatus(nativeConfig.backend, nativeConfig.machine_id, this.daemons.get(name)),
-                    ...(nativeConfig.machine_id ? { machine_id: nativeConfig.machine_id, machine_name: this.runtimeHub?.machine(nativeConfig.machine_id)?.name,
-                        machine_status: this.runtimeHub?.machine(nativeConfig.machine_id)?.status ?? "offline" } : {}) } : {}),
                 display_name: identity.display_name || undefined,
                 avatar: image.avatar,
                 ...(image.accent ? { accent: image.accent } : {}),
@@ -27792,8 +25158,6 @@ export class FleetManager {
                 role: identity.role || undefined,
                 tags: identity.tags,
                 teams: instanceTeams(this.fleetConfig?.teams, name), // #2172: the sidebar groups a team's members under it
-                // #3008 G2: a web-only fleet's General (the agent its owner ticked) — the sidebar pins it first.
-                ...(this.isWebOnlyFleet() && this.fleetConfig?.instances[name]?.general_topic === true ? { general: true } : {}),
                 last_reply: this.webChatHistory.lastAgentReply(name) ?? undefined, // #2179: its last reply to a person (ISO)
                 // #2855: its last reply that reached the channel — the only reply time a guest's sidebar gets (guestStatus).
                 last_reply_channel: this.webChatHistory.lastAgentReply(name, { channel: true }) ?? undefined,
@@ -27823,7 +25187,6 @@ export class FleetManager {
             uptime: Math.floor((Date.now() - this.startedAt) / 1000),
             // #1519 P7: how many chat connections are configured — 0 is a web-only fleet, which gets the first-run card.
             connections: (this.fleetConfig?.channels ?? (this.fleetConfig?.channel ? [this.fleetConfig.channel] : [])).length,
-            windows_cli: localWindowsCliEnabled(),
             // #1665: the host preferences' revision — a page that has another re-reads /ui/prefs (no values in this frame).
             prefs_rev: this.webPrefs.rev(),
             // #1629: the themes' revision — the page re-reads GET /ui/themes when it moves.
@@ -27833,8 +25196,6 @@ export class FleetManager {
             host_memory: this.hostMemoryIndicator(),
             // #2910 D2: a web-only fleet's newest Notice — a polling page (no SSE `notice`) reads the list again when it moves.
             ...(this.webOnlyPromptPlace() ? { notices_newest: this.webNoticeStore()?.newest() ?? 0 } : {}),
-            // alpha.2 (M-2300, #2997 review): agents' requests changed — the owner's page reads GET /ui/agent-proposals again.
-            ...(this.isWebOnlyFleet() ? { agent_proposals_rev: this.agentProposalsRev } : {}),
             // #2015: the largest processes while it lasts (name, pid, RSS, and whose: an instance, the fleet or tmux).
             ...(this.hostMemoryIndicator() && this.memoryTop ? { host_memory_top: this.memoryTop.processes } : {}),
         };
@@ -28277,12 +25638,4 @@ load();
 </script>
 </body>
 </html>`;
-/** alpha.2 (M-2300): the agent an applied Windows request created (its name, for the page's "Open chat"), or null. */
-export function agentNameOf(view) {
-    const r = view.state === "applied" ? view.outcome?.result : null;
-    if (!r || typeof r !== "object")
-        return null;
-    const o = r, name = o.name ?? o.instance_name ?? (o.agent && typeof o.agent === "object" ? o.agent.name : undefined);
-    return typeof name === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(name) ? name : null;
-}
 //# sourceMappingURL=fleet-manager.js.map