@xingular/harness 1.0.0 → 1.2.0

package/docs/terminal-tui.md

@@ -1,9 +1,14 @@
 # Harness terminal frontend
 
-Status: release candidate `@xingular/harness` 4.0.0; npm publication blocked by registry authorization. Last updated: 2026-10-22.
+Status: current terminal behavior, checked against `@xingular/harness` 1.2.0. Last updated: 2026-11-19.
 Decision: [ADR-0001](decisions/ADR-0001-owned-terminal.md),
 [ADR-0006](decisions/ADR-0006-opentui-only-terminal.md),
-[ADR-0009](decisions/ADR-0009-xharness-command.md).
+[ADR-0009](decisions/ADR-0009-xharness-command.md),
+[ADR-0021](decisions/ADR-0021-required-command-namespaces.md),
+[ADR-0024](decisions/ADR-0024-xagent-command.md),
+[ADR-0026](decisions/ADR-0026-contextual-question-wireframes.md),
+[ADR-0027](decisions/ADR-0027-connected-sketch-display.md),
+[ADR-0028](decisions/ADR-0028-xingular-agent-product-identity.md).
 
 ## OpenTUI terminal
 
@@ -24,19 +29,26 @@ overrides the Bun executable.
 `TerminalRuntime`, session replacement, commands, decisions, account pinning and run records. It
 projects the runtime's snapshot and transcript into an OpenCode-inspired view, with a native
 OpenTUI textarea for the prompt, `Ctrl+K` for the command palette, `Return` to send (or to queue behind a running reply),
-`Cmd+Return` (or `Alt+Return`) to steer a running reply, and `Shift+Return` for a newline. With an
-empty composer, unmodified Up recalls the latest non-empty user message from the active session.
-After recall, unmodified Up/Down are available for normal editor movement and do not browse history
-while the draft is non-empty. Ctrl+Up/Down remain explicit history shortcuts; Down past the newest
-entry restores a blank draft. History comes from the active Pi session's saved messages, so `/new`
-and `/resume` switch to that session's history. Steering needs a terminal that reports Cmd with the
+`Cmd+Return` (or `Alt+Return`) to steer a running reply, and `Shift+Return` for a newline. Typing `/` or `$` filters
+matching commands or skills; `Tab` inserts the selected entry and leaves the cursor at the end of the inserted text.
+With an empty composer, unmodified Up recalls the latest non-empty user message from the active session.
+With a draft, unmodified Up browses older history and Down browses newer history when the caret is at
+either absolute draft endpoint (start or end). Down past the newest entry restores the draft, cursor
+and attachments that were present when history browsing began. At non-endpoint positions, Up on the
+first visual line moves the cursor to the first character and Down on the last visual line moves it
+to the final character; elsewhere, Up/Down move the caret normally. Ctrl+Up/Down remain explicit
+history shortcuts from anywhere. History includes
+user messages and Bash commands from the active Pi session; recalled Bash commands return to `!`
+mode. Executed slash commands from this terminal instance are included too, across session switches.
+`/new` and `/session` (also `/resume`) switch the saved-message and Bash history to that session.
+Steering needs a terminal that reports Cmd with the
 kitty keyboard protocol; elsewhere `Alt+Return` steers. In the composer, `Tab` opens up to eight matching filesystem entries for the path token at the cursor, or current-folder entries when the token is empty. The list has no heading or hint row. Up/Down select; Enter or Tab inserts the selection; Escape closes the list. Directories end in `/`, and Bash mode escapes shell-special characters. Use `/effort` or Shift+Up/Down to change effort. The command palette opens above the composer under a muted (`dim`) top rule, and has no other border. Its rows align slash commands and descriptions in two columns: the command column sizes to the widest visible name, bounded to preserve description space, and both columns wrap instead of truncating. The plan-choice rule, question block's top-only divider, and `/btw` block's top rule use the same muted color as the normal composer divider. The console has no background of its own: the renderer, root surface
 and transcript are transparent, so the terminal's own background shows through, while panels,
 dialogs and the scrim stay opaque. The composer has no panel background: it is bounded by a top and
 a bottom rule, with the working status and spinner above it and a wrapping status bar below it. Its
 fixed-width left gutter shows `❯` on the first input row and leaves continuation rows blank, including
 explicit newlines and soft wraps; Bash mode shows `!` on the first row instead. In plan mode,
-`plan mode` is right-aligned within the top rule, followed by exactly one divider character. The status bar shows the working folder's name, the Git branch, the account, model and effort separated by spaces, and input (`↑`) and output (`↓`) token counts with each glyph adjacent to its count; `|` separates the groups. Token counts
+`plan mode` is right-aligned within the top rule, followed by exactly one divider character. The status bar shows the working folder's name and Git branch together as `<repo>:<branch>`, followed by the account, model and effort separated by spaces, and input (`↑`) and output (`↓`) token counts with each glyph adjacent to its count; `|` separates the groups. Token counts
 below 1,000 show as whole numbers and larger counts use K/M/B suffixes. A leading `!`
 enters Bash mode: the chevron becomes `!`, and the marker and both rules use the `bashMode` colour.
 In plan mode, the marker and rules use the plan blue and `plan mode` is right-aligned within the
@@ -50,29 +62,51 @@ never receive an OpenTUI renderable or a second account. A theme an extension se
 its own components, while the OpenTUI chrome keeps the fixed OpenCode-inspired palette. Component
 UI is supported; an extension that draws only by writing raw ANSI through the TUI terminal is not.
 
-Pages become centered dialogs. The page commands `/accounts`, `/permissions`, `/plugins`,
-`/hub`, `/components`, `/settings`, `/trajectory` and `/log`, the `/model` and `/tree` pickers, and
+Most pages become centered dialogs. The page commands `/permissions`, `/log`, the `/model` and
+`/history` pickers, and
 the `select`, `confirm`, `input` and `editor` dialogs (such as `/effort` and the Thinking setting),
 take 80% of the terminal, capped at 100 columns by 30 rows, on a flat panel in the console's panel
 colour. A full-screen scrim dims the console behind the panel so the transcript stays faintly
 visible. Centered Harness dialogs fit their rendered content, capped by the available dialog
 height, with four columns of horizontal padding and two rows of vertical padding to account for
 the terminal's taller-than-wide cells. They use a plain title with a muted `Esc` hint and
-omit divider rules and footer hints. Shortcut behavior remains available. Searchable lists share
+omit divider rules and footer hints. Shortcut behavior remains available. Bracketed paste and the
+clipboard-paste shortcut insert text into the active dialog input or search field, using that
+component's input semantics; images and file attachments remain composer-only. Searchable lists share
 the same glyph, placeholder, spacing, and muted result note, with search context included on that
 row. A terminal too small for a 30-column by
 12-row dialog falls back to the full-screen page chrome. A plugin's full-screen surface stays full
-screen.
+screen. `/settings` fills the terminal with its category tabs, search, settings list and full-screen
+page chrome. `/accounts` also fills the terminal with Accounts/Pools tabs and search. Wide terminals
+show selected-account details beside the list; opening an account reveals grouped actions in that
+inspector. On compact terminals, opening an account replaces the list with a full-page detail view
+and its grouped actions. `Enter` opens the selected account; `Esc` returns to the list. Tab and
+Shift+Tab move focus between tabs, the list and (when open) actions; Left/Right changes a focused
+tab and Up/Down moves the focused list or action list. Search, section and account selection survive
+returning and resizing.
+Account actions are grouped by Session, Account, Sign-in and Remove; pool
+actions are grouped by Manage and Remove. Existing confirmations and account-service calls remain
+unchanged. The Harness resource browser and all its shortcuts use a full-screen page with persistent
+resource-section tabs.
 
 The frontend is verified with a real isolated PTY and a loopback provider. Run
-`python3 scripts/verify-terminal.py --composer-only` for explicit-newline and soft-wrap checks of
-both prompt gutters plus normal/plan/Bash mode exclusivity, `--file-completion-only` for filesystem
-completion and insertion,
-`--history-only` for active-session history across `/new` and `/resume`, `--help-only` for `/help` replacing the welcome screen, `--questions-only` for recommended choices,
+`python3 scripts/verify-terminal.py --welcome-only --sizes 40x20,80x24,120x40` to check the empty
+welcome, product label, accent colors and `/help` transition. Run
+`python3 scripts/verify-terminal.py --composer-only` for recognized slash-command colors in the composer
+and a user bubble, unknown-command and argument colors, explicit-newline and soft-wrap checks of both
+prompt gutters, and normal/plan/Bash mode exclusivity. Run it with `--sizes 40x20,80x24,120x40` for
+compact through wide layouts. Use `--dialog-paste-only` to verify bracketed paste into a centered
+input dialog, `--file-completion-only` for filesystem completion and insertion,
+`--history-only` for active-session history across `/new` and `/session`, `--resume-only` for the full-screen searchable, unnumbered two-line saved-session picker, `--help-only` for `/help` replacing the welcome screen with grouped two-column output that wraps without per-command gaps, `--questions-only` for multi-select marker glyphs, recommended choices,
 selected-row and Continue/Submit colors, `--jump-latest-only` for scroll-away badge visibility and click-to-latest (screen-level click assertions use optional `pyte`), and choice-backed “Something else” answers, or `--thinking-only` for `/thinking` visibility toggles. The full suite covers a complete turn, `read`, `bash` approval, `ask_user_question` approval and picker, plugin overlay/widget/status
 disposal, a completed run record with usage and decision events, `/help`, `/permissions`,
-`/settings`, `/model`, palette selection, confirm cancel, and Ctrl+D exit. Live-provider behavior,
-exact OpenCode parity and concurrent session tabs are not established.
+`/settings`, `/model`, palette selection, confirm cancel, and Ctrl+D exit. `--questions-only` checks
+recommended choices, bounded literal ASCII sketch previews, focus-driven preview changes and answer
+colors; run it with `--sizes 40x20,80x24,120x40` for compact through wide layouts. At 80 columns and
+above it also checks wrapped notes and free-text; the narrowest run keeps the sketch and answer
+interaction compact. The normal turn omits question tools; plan-mode flows exercise `ask_user` batches
+and `ask_user_question` cancellation. Live-provider behavior, exact OpenCode parity and concurrent
+session tabs are not established.
 
 ## Native subagents (2026-10-18)
 
@@ -85,8 +119,30 @@ The terminal joins outstanding children before its final reply, projects child a
 with their original run IDs, and stops descendants when interrupted or disposed. Connected apps
 need not be enabled. `TerminalPrepareInput.subagents: null` disables the capability.
 
-Real scripted Pi execution over the actual terminal socket verifies result delivery and decision
-routing. It does not establish live-provider behavior or new visual UI parity. See
+The terminal also projects the latest parent's subagent descendants into rows under the status line
+and a searchable `/subagents` page. The rows poll a private monitor route once per second
+during a turn and make a final read at settlement. They sit one blank row below the status line, with
+no heading, and each reads: the status mark, the agent profile name in its colour (`subagent` for a
+copy of the parent), the title the parent gave the child (PROP-0030), and `n of m tasks` from the
+child's own checklist. At most three show, active first, then `+N more · /subagents`. The
+`/subagents` page uses a colored profile and normal-color title on the first line, then muted account,
+effective model, effort and cumulative usage metadata on the second. One blank row separates each
+two-line entry. The page also shows status, elapsed time and the latest tool name. Runtime metadata
+stays in the private terminal projection.
+Usage contains safe token/cache/cost/context totals, not per-request payloads or reasoning summaries.
+The projection is read-only, flat across nested descendants, and scoped to the latest parent run in
+this terminal session; finished rows remain visible until the next parent run starts. It is cleared
+on session replacement or terminal disposal. It never includes tool arguments (beyond the title),
+output or checklist item text.
+
+`/agents` opens the Agents page (PROP-0029): built-in, global, project and variant profiles with
+their tools, plugins, variant, model and instructions. Enter on a row edits a person's own profile
+in `$VISUAL`/`$EDITOR`, copies one, or deletes one after confirmation; New profile writes a template
+in the project or global folder and opens it.
+
+Real scripted Pi execution over the actual terminal socket verifies result delivery, decision
+routing, and the monitor's parent scoping and summary redaction. It does not establish live-provider
+behavior. See
 [ADR-0003](decisions/ADR-0003-shared-asynchronous-subagents.md) for recovery and lifecycle details.
 
 ## Ownership and process boundary
@@ -95,7 +151,7 @@ Harness owns its interactive terminal application in
 [`src/terminal/opentui/`](../src/terminal/opentui/). [`app.ts`](../src/terminal/opentui/app.ts)
 owns terminal lifecycle, submission, commands, decisions and run records;
 [`root.tsx`](../src/terminal/opentui/root.tsx) owns composition, the transcript, the composer,
-palette and dialogs. It does not construct Pi's `InteractiveMode`. Pi 1.2.0 supplies the
+palette and dialogs. It does not construct Pi's `InteractiveMode`. Pi 1.4.0 supplies the
 persistent agent session, model and auth runtime, native JSONL history, tool execution and rich
 content components.
 
@@ -132,24 +188,42 @@ unattended execution path.
 ## Screen layout
 
 [`root.tsx`](../src/terminal/opentui/root.tsx) draws the terminal on OpenTUI's alternate screen.
-An empty conversation shows the centered product mark and a short hint; once a message exists, a
-scrollable transcript fills the space above the composer. Single-line notices can appear with the
-welcome, while multiline notices such as `/help` switch to the transcript layout so their output
-cannot overlap it. The composer is a single top and bottom rule, with the right-aligned `plan mode` label followed by one divider character in the top rule,
+An empty conversation shows a centered welcome. The default `Xingular Agent` identity appears as
+an orange block `X` and blue letter-spaced `A G E N T`, followed by `Welcome.`, the tagline
+`One run, done well.`, and a blue `/help` hint. Explicit host product names use the same generic mark and
+subline formatting. The current model and thinking level remain available in dim text. Once a message
+exists, a scrollable transcript fills the space above the composer. Single-line notices can appear
+with the welcome, while multiline notices such as `/help` switch to the transcript layout so their
+output cannot overlap it. The composer is a single top and bottom rule, with the right-aligned `plan mode` label followed by one divider character in the top rule,
 and the textarea in the middle.
 The working status row shows the active verb with a soft, warm glint that feathers across it and
 fades past its edges, followed by run duration and the latest completed assistant response's output
 rate, formatted as `(time, tok/s)`; the spinner and metrics stay steady, and duration updates during a run.
 Until response usage is available, the rate shows `— tok/s`. On settlement, the completion verb and
 final run statistics stay in that row until the next run replaces them; they do not become a transcript
-entry. Notifications, queue announcements, compaction-start and retry updates—including retries
-while summarizing context or branches—are one-line transcript entries at the point they occur, so
-subsequent chat moves them up rather than keeping them pinned at the bottom. A completed context
-compaction adds a first-class card from Pi's persisted session history, showing the token count and
-an expandable Markdown summary; click the card or use Ctrl+O to toggle its details.
-A successful transcript-selection copy instead shows a temporary, opaque toast at the top-right of the
-terminal. Interactive blocks and widgets remain docked above the composer. A wrapping status bar
-below the composer shows the working folder, branch, account, model, effort and token totals. After
+entry. Notifications, queue announcements and retry updates—including retries while summarizing
+context or branches—are one-line transcript entries at the point they occur, so subsequent chat
+moves them up rather than keeping them pinned at the bottom.
+
+While context compaction runs, the working line shows `Compacting context` (or `Retrying
+compaction`) with the same spinner, in place of the working verb. During a run it keeps the run's
+clock; a `/compact` while idle shows the spinner with its own clock. Compaction does not start a new
+session or hide earlier chat. After it, the transcript shows, in order: the whole conversation from
+before the compaction (rebuilt from Pi's session history, kept messages included); a rule labelled
+`Context compacted · <tokens> tokens`; the summary printed as a normal reply; an `End of summary`
+rule; then the work that followed. The summary is shown by default. Clicking either rule hides or
+shows it, and Ctrl+O shows every summary again. On a narrow screen the rule drops the click hint, then
+the token count. Earlier compactions in the same session keep their own rules and summary in place.
+Notices stay after the message they followed. The model sees the summary and recent messages plus a
+bounded, hidden checkpoint of the active request, checklist and plan instructions when available;
+the checkpoint is regenerated for each post-compaction request until the run settles. The visible
+transcript remains a presentation of the full history, not the model context.
+Transcript entry ids follow positions in the displayed message list, so when a rebuilt list moves a
+different kind of entry onto an id, the renderer builds a new component for it instead of reusing the
+old layout, and each entry draws inside its own error boundary. A run therefore keeps updating live
+through a compaction; it does not need `/resume` to show its later output.
+A successful copy shows a temporary, opaque toast anchored at the terminal's top-right. Interactive blocks and widgets remain docked above the composer. A wrapping status bar
+below the composer shows `<repo>:<branch>`, account, model, effort and token totals, with `|` between groups. After
 the input token count it shows cache hit rate as `R<percentage>%`, calculated from cache reads divided
 by total input tokens. The footer shows status messages without a shortcut-hint row. Press `?` with an empty
 composer to open the shortcut reference. Transcript entries include
@@ -165,15 +239,17 @@ their content; other entries have no internal vertical padding. Bubble padding i
 inter-entry gap. Internal lines within an entry stay together. The transcript stays pinned to the
 latest message until you scroll away. While scrolled away, a `↓ Jump to latest` badge overlays the
 transcript's lower-right corner; clicking it returns to the newest message and hides the badge.
-`Ctrl+End` remains an alternate way to jump to the end. A primary click in the transcript or empty welcome area focuses the composer. Dragging to select
-transcript text copies the selected plain text when the selection is released; a simple click does
-not copy. `/copy` and `Ctrl+X` continue to copy the latest assistant reply.
+`Ctrl+End` remains an alternate way to jump to the end. A primary click in the transcript or empty
+welcome area focuses the composer. Dragging to select text anywhere in the TUI—including the
+composer, transcript, widgets, dialogs and pages—copies the selected plain text when selection ends;
+a simple click does not copy. `/copy` and `Ctrl+X` continue to copy the latest assistant reply.
 
 Mouse movement highlights the row under the pointer in the command palette, plan choices, question
 dock, searchable dialogs and Harness page lists; the highlight uses the same selection style as
 keyboard navigation. A primary click activates the row, and clicks on page tabs switch that page's
-section. Question choices still stage their answer until the question's action is clicked. Dialogs
-preserve their existing confirmation safeguards. OpenTUI enables terminal mouse-motion reporting for
+section. In `/accounts`, clicking an account opens its inspector or compact detail view, and clicking
+an action runs the existing account flow. Question choices still stage their answer until the
+question's action is clicked. Dialogs preserve their existing confirmation safeguards. OpenTUI enables terminal mouse-motion reporting for
 hover; terminals or multiplexers that do not report motion retain keyboard navigation. ANSI-only
 custom UI without a mouse handler remains keyboard-driven.
 
@@ -192,6 +268,16 @@ OSC 8 support. Inline and fenced code use a subtle panel fill with syntax colors
 list markers, tables, dividers and task-list markers use the existing titanium palette. Images
 display their alt text and are not fetched or rendered as image files.
 
+## Checklist block
+
+`checklist_write` is registered in terminal sessions (PAR-001). Each call renders in the
+transcript as a checklist block: a status mark, `Checklist · n of m done`, then one line per item
+with `✓` (done, success colour), `●` (in progress, warning yellow, bold) or `○` (pending, dim).
+Each row reserves a one-cell status column and one-cell gap; item text and wrapped lines share the
+same starting column. A call whose arguments are not a checklist, or that failed, stays an ordinary
+tool row. The prompt's Progress group asks the model to keep the list current and write a final
+update before replying; unfinished work remains unfinished rather than being marked complete.
+
 ## Blocks and pages
 
 In Pi's own terminal UI, [`chrome.ts`](../src/terminal/tui/chrome.ts) gives terminal surfaces one
@@ -203,9 +289,10 @@ of two rule-based shapes, using the 2-cell composer gutter on each side and a di
   Approvals, questions, and the `select`, `confirm`, `input` and `editor` dialogs use this shape
   there. OpenTUI renders Harness-managed centered dialogs with the inset header treatment below.
 - A **page** is a header row (title left, position or status right), a neutral rule, the body,
-  a neutral rule, and the hint row. `/settings`, `/trajectory`, `/log`, `/permissions`, and the
-  `/accounts`, `/plugins` and `/hub` menus are pages. Section labels inside a page are plain bold
-  headings, never text set into a rule.
+  a neutral rule, and the hint row. `/settings`, `/log`, `/permissions`, and the `/accounts`,
+  `/plugins` and `/hub` menus are pages. Section labels inside a page are plain bold headings, never
+  text set into a rule. `/trajectory` is a full-screen page with searchable Runs and Events
+  tabs; its Events view keeps the event list beside the selected event's JSON on wide terminals.
 
 `DialogPanel` takes a `variant` (`block` by default). `ui.select` accepts a harness-owned `page`
 option, which Pi's own dialogs ignore, so the same extension code runs in either terminal. Selected
@@ -214,24 +301,82 @@ frontends draw that field from the same muted-blue selection palette (`selection
 explicit high-contrast text on it instead of the accent colour, so a choice reads the same in every
 list. Rules use the theme's `warning` and `dim` colors, so a custom theme restyles them.
 
-Each page command owns a separate page and its own tab strip: `/accounts` has Accounts
-and Pools; `/permissions` has Overview and Tools; `/plugins` has Plugins and Trust; `/hub` has
-Catalog and Installed; `/components` has Skills, Prompts and Rules; `/settings` has the available
-settings categories; `/trajectory` has Runs and Events; and `/log` has Diagnostics and Run Events.
-Commands never share one cross-page tab strip. Tab and Shift+Tab move between the current page's
-tabs; in centered dialogs, Left and Right move between those tabs too. Up and Down move through
-rows, while PageUp/PageDown, Home and End move through rows or details. Trajectory keeps `[` and
-`]` for run navigation; its Up and Down arrows select events. The `/model` scope tabs and `/tree`
-filter tabs also respond to Left and Right. Every list and picker places the same `⌕ Type to
-search` row immediately under its title or strip, with its result count at the right. Compact pickers
-such as `/model`, `/tree`, `/resume` and `/fork` do not show a page strip. Escape clears a non-empty
-search before closing. Left and right are passed to the current page and do not switch commands.
-
-`/components` browses skills, prompts and rules in the component library. After confirmation, a skill
-or rule is added to the attached Harness scope as a new variant version for future sessions; the current
-terminal stays pinned to the version it started with. Prompts remain browse-only, and terminals without
-a writable scope can browse but cannot add items. These changes go through the extension's private
-control key, so model-issued shell commands cannot add a component.
+The Harness resource browser (PROP-0013) unifies Overview, Foundation, Variant, Skills, Plugins,
+Connections, Tools and Library. `/harness` opens Overview; `/skills`, `/plugins`, `/connections`
+(`/mcp`) and `/tools` open sections. `/hub` selects Discover and `/components` selects Library.
+The existing Accounts, Permissions, Settings, Trajectory and Log pages retain their own tabs.
+
+`/settings` includes a Browser tab with the device-local **Private address access** setting. It is
+off by default. Enabling it asks for confirmation and allows agent browsing and annotation capture
+to reach localhost and private networks.
+
+Resource sections share Installed/Discover and source filters. Installed includes locally present
+resources; current-session availability comes only from the runtime loader and active tool registry.
+Discover uses the existing Hub with All/Community/Official filtering and an explicit remote refresh.
+No matching community entries is an empty result, never replaced with built-in resources.
+The view preserves search across source switches and restores section selection on return.
+
+The browser fills the terminal (PROP-0014), with Overview, Foundation, Variant, Skills, Plugins,
+Connections, Tools and Library as persistent top tabs. The section dropdown and sidebar are removed.
+When the strip cannot fit, it shows the active tab and its position with previous/next navigation.
+At 88 content columns, inventory sits beside an inspector containing metadata, actions and readable
+content. Enter focuses the inspector. Its action rows group related tasks under Use, Inspect, Manage,
+Access and Remove. Compact terminals show details/content within the active tab; resizing preserves
+the selected resource and content position, clamped to the available height.
+
+Tab/Shift+Tab focuses tabs, source, filter, toolbar actions, list and (when available) inspector.
+Left/Right changes the focused tab or control; Enter on the tab strip returns to the inventory.
+Ctrl+F focuses search. Escape returns from content to actions, returns to the list, clears search,
+then closes. Mouse clicks select tabs directly, activate resource actions and focus filters;
+wheel scrolling targets the list or inspector under the pointer. Other command pages keep their
+centered presentation; `/settings` and `/accounts` use full-screen page layouts. Closing the browser preserves
+the composer draft and attachments.
+
+Foundation explains fixed runtime ownership; it is read-only. Variant shows c1–c8 with the
+prepared version and current head separately. It previews pinned files from the preparation
+snapshot and compares their text with the latest saved version. No in-place editing or adoption
+is added. Library skills and rules are added through `terminal.components.add`, which commits a
+validated future version. Directory-backed variants stay read-only.
+
+Skill browsing is independent of the Skill commands setting. Use inserts a leading `$name`
+without submitting. Ctrl+K opens a separate command filter; choosing a browser section keeps
+the existing draft text and attachment labels. Canceling the filter restores that draft. OpenTUI completes
+loaded skills for a leading `$`; Enter or Tab inserts the selected skill rather than sending.
+Plugin contributions, settings, attachment and code trust share one detail flow. Package install
+and removal delegate to existing services; installing never trusts or activates code.
+
+Connections supports local stdio and remote HTTP forms, masked credentials, explicit scope,
+saved disabled defaults, explicit testing and OAuth sign-in. Browsing never starts an MCP process.
+Saved test results show timestamps rather than claiming a live connection. A Hub connector document
+is inert: a separate setup action validates supported remote-definition fields before opening the
+normal connection form. Other document kinds stay inspectable data. Tools show their owner,
+parameters, active state and saved approval; each call still passes the gate.
+
+The typed model is `terminal/browser.ts`; the protected adapter is `terminal/browserControl.ts`.
+The browser accepts resource IDs for bounded regular-file previews, not arbitrary paths. Local
+skill import rejects symbolic links and limits bytes, files and traversal. See
+[source study and wireframes](study/tui-resource-browser.md),
+[PROP-0013](architecture/proposals/PROP-0013-resource-browser.md) and
+[ADR-0015](decisions/ADR-0015-resource-browser.md).
+
+## Annotate pane (PROP-0018)
+
+`/annotate:` opens the full-screen capture pane (equivalent to `/annotate:annotate`) beside the window being inspected. Add a page address with `/annotate:annotate [url]`. The target window is one of:
+- the visible capture browser
+- an app's own windows attached over its DevTools port (`--app`)
+- app windows that loaded the page bridge script (`--bridge`)
+
+The header shows the target and window and whether the inspector is on. The list has three groups: Queue, Sent and fixed, and Saved. While the inspector is on, the page polls for the next popover comment every 400 ms, shows the result as a notice, and refreshes the list.
+
+| Key | Action |
+|---|---|
+| `i` | inspector on/off |
+| `s` | send the queue |
+| `x` | unqueue the selected note |
+| `t` | choose a window |
+| `Enter` | the note menu |
+
+The page has no search row, so these letters are free for actions. `/annotate:notes` opens the searchable Web annotations list.
 
 ## Plan mode and thinking keys
 
@@ -239,10 +384,16 @@ Use `/plan <brief>` for one read-only planning request. A plan waits outside Pi'
 queue until the active response settles, then runs by itself. Later messages remain behind it, even
 when Pi's follow-up mode is `all`. During that run the session narrows to read-only inspection
 (`read`, `grep`, `find`, `ls`), web search/page reading, questions (`ask_user`, `ask_user_question`)
-and recall (history and Wiki reads, `memory_facts`). Providers may mark individual calls as safe for
-research; every other call is blocked before approval. Edits, writes, shell commands, memory writes,
-subagents and connected-app tools remain unavailable. The plan instructions arrive as a
-request-scoped prompt section, which the next ordinary request withdraws.
+and recall (history and Wiki reads, `memory_facts`). It may also delegate bounded research to a
+named profile whose effective tool and plugin allowlists qualify for research; the child inherits
+plan mode and receives only the intersection of the parent's frozen capabilities, profile and
+plan-research set. Children cannot write, run commands, ask the user, use connectors or spawn more
+children. Normal mode omits both question tools from the active set; the plan request enables
+registered questions and research delegation temporarily and restores the normal set when it settles,
+including on failure or interruption. Providers may mark individual calls as safe for research; every
+other call is blocked before approval. Edits, writes, shell commands, memory writes and connected-app
+tools remain unavailable to the parent and child. The plan instructions arrive as a request-scoped
+prompt section, which the next ordinary request withdraws.
 
 Each mode keeps its own model and effort for the account. Every selection the person makes (the model
 picker, `/effort`, Shift+Up/Down, Ctrl+P) is saved against the mode it was made in, so Shift+Tab switches to that
@@ -254,7 +405,7 @@ and the App reads and writes them through `accounts.choices` and `accounts.choos
 A bare `/plan` toggles plan mode, and Shift+Tab cycles between normal and plan mode. Normal, plan
 and Bash are mutually exclusive composer modes. While plan mode is on, each submitted message is sent
 as a plan request through that same queue, and the composer's top and bottom rules take the plan colour.
-Commands still run as commands. Entering Bash with a leading `!` exits plan mode; Shift+Tab from Bash
+Commands still run as commands. The model may run Bash during a plan request, only in the read-only sandbox scope (PROP-0043); your own `!` commands are not part of the plan. Entering Bash with a leading `!` exits plan mode; Shift+Tab from Bash
 switches to plan mode and keeps the draft text. Turning plan mode off returns to normal mode. The old
 on/off/toggle forms are rejected; a bare `/plan` is the switch.
 
@@ -268,9 +419,11 @@ Implement leaves plan mode, so the normal tools and the mode's own model and eff
 mode and focuses the composer, so the next message revises the plan and offers a new choice. A plan run
 that was interrupted, failed, or had work queued behind it is not offered.
 
-While typing, a recognized leading slash command uses the selected theme's link color. This
-includes built-in commands, loaded extension and prompt commands, and enabled skill invocations
-written as `/skill:name`. Unknown slash tokens keep the normal text color.
+A recognized leading slash command uses the selected theme's link color while typing and in its
+user-message bubble. Only the command token is accented; arguments and unknown slash tokens keep the
+normal text color. Recognition follows the active command registry, including built-in commands and
+aliases, loaded extension and prompt commands, and enabled skill invocations written as
+`/skill:name`.
 
 SDK session runs receive plan instructions as a dynamic context update, leaving the stable system
 prompt unchanged; their session gate refuses calls outside the read-only set. The standalone
@@ -287,13 +440,17 @@ the marker and rules blue; in the normal prompt, the marker matches the divider
 an empty Bash body returns to the normal prompt. Submitting while a reply is active queues
 the command as a standalone turn; it does not steer the current model request.
 
-The terminal extension checks Bash policy and requests approval before using Pi's native
-`executeBash`. Output streams into the transcript while the command runs, so browser-login URLs are
-visible before the command finishes; the running item shows that Escape stops the command. The
-native result is recorded in run activity and session history before the model is prompted to read
-and explain it. This does not attach interactive stdin to the shell. SDK callers may opt into this
-behavior with `SessionRunInput.initialBashCommand`; it is restricted to a new interactive user turn
-and the session runner applies the same Bash gate.
+The terminal checks Bash policy before using Pi's native `executeBash`. Ordinary `!command` runs
+workspace-scoped; `!outside <command>` explicitly requests human-only approval before the command
+runs once with broader filesystem access. The complete command is shown as escaped, scrollable
+approval details; if the terminal is too small to show both details and choices, the request is
+denied. Shell output never triggers approval or replay. Output streams into the transcript while the
+command runs, so browser-login URLs are visible before the
+command finishes; the running item shows that Escape stops the command. The native result is
+recorded in run activity and session history before the model is prompted to read and explain it.
+This does not attach interactive stdin to the shell. SDK callers may opt into this behavior with
+`SessionRunInput.initialBashCommand`; it is restricted to a new interactive user turn and the
+session runner applies the same Bash gate and explicit outside-scope request.
 
 ## Reference and reproduced presentation
 
@@ -311,8 +468,8 @@ not an arbitrary checkout of upstream main. The source repository is
 In the extracted `pi-tui` package, `src/theme/defaults/titanium.json` establishes the titanium
 palette and its indexed-color fallbacks. Harness adapts these into
 [`theme.ts`](../src/terminal/tui/theme.ts) and
-[`opentui/theme.ts`](../src/terminal/opentui/theme.ts). The OpenTUI status bar shows the project name,
-branch, account, model, context use and current-session input/output totals. Input totals add cache
+[`opentui/theme.ts`](../src/terminal/opentui/theme.ts). The OpenTUI status bar shows the project name and
+branch together as `<repo>:<branch>`, followed by account, model, context use and current-session input/output totals. Input totals add cache
 reads and exclude cache writes; its `R<percentage>%` hit rate is cache reads divided by total input.
 Token counts below 1,000 show as whole numbers; larger counts use floor-rounded K/M/B suffixes
 without decimals.
@@ -337,7 +494,7 @@ Full upstream copyright and MIT permission notices are in [NOTICE.md](../NOTICE.
 ## Runtime compatibility adapter
 
 Most integration uses public Pi exports. [`piAdapter.ts`](../src/terminal/tui/piAdapter.ts)
-contains the remaining presentation dependencies and requires exactly Pi **1.2.0** before
+contains the remaining presentation dependencies and requires exactly Pi **1.4.0** before
 loading them. The shared [`runtime.ts`](../src/pi/runtime.ts) loader imports Pi first, then invokes
 the same HTTP dispatcher hook as Pi's CLI before any Harness Pi runtime is used. This reapplies
 the process `HTTP_PROXY`, `HTTPS_PROXY` and `NO_PROXY` settings after Pi's bundled Undici has
@@ -347,7 +504,7 @@ concurrent initialization.
 
 | Internal dependency | Reason |
 |---|---|
-| `dist/bundle/chunks/chunk-TJXZSVTD.js:configureHttpDispatcher` | Restore Pi's environment-aware HTTP proxy dispatcher after the SDK import |
+| `dist/bundle/chunks/chunk-MM3LKT73.js:configureHttpDispatcher` | Restore Pi's environment-aware HTTP proxy dispatcher after the SDK import |
 | `dist/extensions/index.js` builtin inventory | Preserve selected `llama.cpp`, `codemode`, `tool-search` and MCP builtins with the CLI's replacement semantics |
 | `dist/modes/interactive/theme/theme.js:setThemeInstance` | Keep public native rich components on the same active theme as the Harness screen |
 | `dist/core/tools/renderers/index.js:withBuiltInRenderers` | Preserve existing read/edit/bash/write formatting without replacing tool execution |
@@ -403,7 +560,7 @@ personal Pi profile. Provider authentication and model catalogs use that account
 The selected account stays pinned. The existing `/accounts` command requests a parent-managed
 restart to use a different account while resuming the conversation.
 
-An initial `--session` or `/resume` target must resolve inside the prepared history directory,
+An initial `--session` option or `/session` target (also accepted as `/resume`) must resolve inside the prepared history directory,
 including symlink targets, and its stored absolute working folder must match the terminal's
 canonical working folder. `/import` may copy an explicitly selected external native JSONL file
 only when its recorded working folder matches. A caller cannot override a foreign recorded
@@ -450,22 +607,74 @@ a tool waiting forever on a question after the screen has closed. Native `sessio
 clears controller readiness and stops that session's poller; the replacement's `session_start`
 restores readiness while retaining the same process control claim.
 
-The bridge exposes the shared `ask_user` batch tool alongside the existing single-question
-`ask_user_question` contract. Every question must include at least one choice and at least one
-recommended choice; recommendations remain visual and never preselect. Choice-based questions also
-retain a free-text “Something else” answer. A pending question appears in a flat block immediately above the
-composer, not in a modal. It has only a muted top divider and separates its hint from the content by
-one blank line. The block shows one batch question at a time with previous/next navigation and batch
-progress, choices and descriptions, a numbered free-text answer row after the choices, and a Continue
-or Skip action. Selected choices fill the whole row with subtle dark green; Continue and Submit uses
-a green-filled button, while Skip remains neutral. The regular composer remains below it for a direct message to the waiting session.
-Tab and Shift+Tab move focus through the available controls; Tab from a focused selected choice opens
-its inline note field. In multi-select questions, Tab can open a note for each selected choice; notes
-are submitted by choice label and cleared when that choice is deselected. While the block is active,
-Tab takes precedence over the normal thinking and plan-mode shortcuts. Up and Down navigate choices;
-Left and Right navigate the batch while choices or the action are focused. Enter selects a choice,
-activates the focused action, or submits the answer or note field. Escape interrupts the pending
-question. Press `x` from the choices or action to collapse the block; Tab reopens it.
+The bridge registers the shared `ask_user` batch tool alongside the single-question
+`ask_user_question` contract; only plan requests activate them. Each question has a concise 1–2 word
+label, at least one choice, and at least one recommended choice; recommendations remain visual and
+never preselect. Choice-based questions also retain a free-text “Something else” answer. A pending
+question occupies the composer position in a flat block, not a modal, with the chat transcript
+above it. The dock fits its content and grows to at most two-thirds of the terminal height; each
+question tab is sized from its own content. When content overflows, its body scrolls while tabs and
+answer/action controls stay outside that region.
+The final choice sits one blank row above “Something else”. The block has only a muted top divider
+and separates its hint from the content by one blank line; below 60 terminal columns, it uses a
+compact hint. While the dock is active, PageUp/PageDown scroll its body and Ctrl+Home/End jump to
+its beginning/end instead of the transcript. Focused choices and note fields are brought into view.
+A tab strip shows each question label above the active question title, with one blank row below the tabs
+and below the title;
+clicking a tab or using Left/Right changes questions without discarding staged answers. The header has
+no pager controls, and the block cannot be collapsed. Choices and descriptions appear above the numbered free-text answer and Continue or Skip
+action. Selected choices fill the whole row with subtle dark green; Continue and Submit uses a
+green-filled button, while Skip remains neutral. While the block is active, the chat composer and
+its lower status bar are hidden. Tab and Shift+Tab move through the available controls; `n` opens a
+note for the focused selected choice. Its editor appears below that choice, aligned with the description
+column, and begins with an accent-colored `Note:` label. Tab only visits note fields that are already
+open. Notes are submitted by choice label and cleared when that choice is deselected. Notes and
+free-text answers wrap across lines. Tab takes precedence over normal thinking and plan-mode shortcuts. Up
+and Down navigate choices. Enter selects a choice, activates the focused action, or submits the
+answer or note field. Escape cancels the pending question and interrupts the run.
+
+Questions may set `uiSketch: true` to enable a choice sketch preview. Every choice must then include
+an ASCII sketch of 1–24 LF-separated lines, no more than 80 printable ASCII characters per line
+(1,943 bytes maximum), and at least one visible character. Tabs, CR, controls, escape sequences and
+non-ASCII text are rejected. Without the flag, choice sketches are rejected. Tool guidance asks for
+contextual UI wireframes with actual panel/table structure and neighboring elements, consistent
+across alternatives, rather than isolated decorative diagrams; quality is not a schema guarantee.
+
+The dock uses one shared measured layout for all choices: marker gutter, one-third label cell,
+two-cell gap, and remaining description cell. Boundaries align across rows at every width, including
+compact terminals; both cells wrap independently, missing descriptions keep their cell, and columns
+never stack. Recommendation text becomes `(Rec.)` when the label column is fewer than 14 cells.
+Multi-select choices use `✓` when selected and `○` when unselected, matching checklist glyphs;
+single-choice options remain numbered.
+
+One shared border-only monospace preview below the choices follows the hovered choice, falling
+back to keyboard focus. It has no visible caption or extra left rule. Under the approved
+[PROP-0026](architecture/proposals/PROP-0026-connected-sketch-display.md) /
+[ADR-0027](decisions/ADR-0027-connected-sketch-display.md) and
+[PROP-0028](architecture/proposals/PROP-0028-normalize-question-wireframes.md) /
+[ADR-0029](decisions/ADR-0029-normalized-question-wireframe-borders.md) amendments,
+the terminal display uses a bounded structural projection in
+`src/terminal/opentui/sketchPanel.ts`: recognized ASCII table-border rows—including title-bearing
+top rules—and enclosed vertical table edges become connected box-drawing glyphs. Internal framed
+tables keep their original widths and positions. Within a high-confidence frame, a missing side
+edge may be filled or a displaced edge moved only through whitespace to matched corner columns;
+interior text and ambiguous rows remain literal. Bare standalone hyphen divider rows expand to
+`max(panel viewport width, original sketch widest line)` and attach to the outer single-line frame
+with `├` and `┤`. Prose, content operators, ordinary pipes and unrecognized rows remain literal;
+there is no global `+|-` substitution. The original validated ASCII source, including whitespace,
+is persisted untouched; normalization and projected glyphs are display-only.
+
+A bounded two-axis viewport exposes all overflow without wrapping, reflow, truncation or
+Markdown/ANSI interpretation. Shift+arrows pan the sketch; ordinary arrows retain question/choice
+navigation. Hosts may keep literal previews of that same source. The preview does not change the
+selected answer, and sketch metadata is not included in the answer event. The 80×24 source bounds
+and dock layout remain as specified by
+[PROP-0025](architecture/proposals/PROP-0025-contextual-question-wireframes.md) and
+[ADR-0026](decisions/ADR-0026-contextual-question-wireframes.md). Isolated production PTY evidence
+for [PROP-0026](architecture/proposals/PROP-0026-connected-sketch-display.md) and
+[PROP-0028](architecture/proposals/PROP-0028-normalize-question-wireframes.md) is retained under
+`docs/evidence/terminal-wireframe-normalization/`; it does not claim every-emulator rendering or
+live-model sketch quality.
 
 Recommended choices appear first with a warning-colored marker, without changing their labels or
 preselecting them; every question requires at least one recommendation. A single-choice question
@@ -480,22 +689,40 @@ event subscriptions and custom transcript components detach before native invali
 Cleanup failures cannot prevent terminal restoration. Fatal asynchronous errors restore the
 terminal and exit with failure; startup failures and suspend/resume use the same lifecycle.
 
-The command registry supplies help and completion for Harness commands, loaded extensions,
-prompts and enabled skills. `/plugins` includes the protected code trust workflow. A plugin with
-settings has a **Settings** row under it on the Plugins tab; Enter opens its settings as a subpage
-(`Plugins › <title>`), where Enter flips an on/off setting or asks for a whole number inside the
-setting's range, and Esc returns to the list. Settings are saved with `plugins.configure` and read
-when the plugin next uses them, so they need no restart. The standalone
+The command registry supplies help and slash completion for Harness commands, loaded extensions
+and prompts. `/session` selects a saved session (`/resume` remains an alias), and `/history` navigates
+branches in the current session (`/tree` remains an alias). `/btw <question>` asks a side question;
+`/side` is its alias. Help and the slash-command palette show each pair once, as `/session (resume)`,
+`/history (tree)` and `/btw (side)`; aliases still match palette searches.
+With no path argument, `/session` opens a full-screen searchable page. Each unnumbered row shows a
+normal-color title and a muted second line with relative activity time, `<project>:<branch>` and JSONL
+file size separated by ` · `. One blank line separates each session. Enter resumes the selected
+session; account and folder scope checks
+remain enforced. Supplying an explicit path continues directly without opening the picker.
+The separate `$` palette completes enabled skill invocations; `/skills` always browses skills. `/help`
+renders the command list as one transcript entry, grouped under Core, Run, Model, Session, Inspect,
+Harness, Plugins and Prompts; command names and descriptions wrap in aligned columns, with no
+blank rows between choices. `/plugins` opens the browser with protected code trust and plugin settings actions. Settings use
+`plugins.configure`; on/off settings and bounded whole-number settings keep their existing ranges.
+Saved settings are read when the plugin next uses them and do not require a restart. The standalone
 terminal no longer has separate `/login`, `/trust`, `/bug`, `/changelog`, `/share`, `/scoped-mode` or
-`/import` commands. `/btw <question>` asks a short side question in a separate tool-free session. Its block puts the question after `/btw`, shows the normal animated spinner while answering, and separates the answer and hint by one blank row; it has no status labels. Escape closes the block without interrupting the main reply, and `/btw` also dismisses it. `/stop` interrupts the current reply. The `/accounts` page handles sign-in
+`/import` commands. `/btw <question>` (or `/side <question>`) starts a separate Harness run with the
+main run's effective instructions, visible conversation and redacted public tool inputs/results.
+Hidden reasoning and image bytes are excluded; the side run has no tools. Its block puts the
+question after `/btw`, shows the normal animated spinner while answering, and separates the answer
+and hint by one blank row; it has no status labels. PageUp/PageDown browse a long answer and Ctrl+X
+copies the full answer. Escape or either command with no question dismisses the dock and interrupts
+only that side run; the main reply continues. `/stop` interrupts the current main reply. The `/accounts` page handles sign-in
 and sign-out. `/components` browses reusable skills, prompts and rules; a confirmed skill or rule addition
 creates a variant version for future sessions while the current terminal keeps its pinned version. `/reload` applies trusted resource and keybinding changes.
 
 `/trajectory` opens the newest recorded run for the current native conversation; `/trajectory <run-id>`
-opens a selected run from that conversation. Tab switches between Runs and Events; `[` and `]` change
-runs, up/down selects recorded events, PageUp/PageDown scrolls event details, and `c` copies the
-selected event. Active runs refresh while the overlay is open. The protected terminal socket scopes both the run list and event
-reads to the current terminal and native session file.
+opens a selected run from that conversation. The full-screen page keeps searchable Runs and Events
+tabs. In Events, the list sits beside the selected event's JSON on wide terminals and stacks above it
+on compact terminals. Type to search run IDs, goals, event types, timestamps, summaries and payload
+text; `[` and `]` change runs, up/down selects events, PageUp/PageDown scrolls event details, and
+`Shift+C` copies the selected event JSON. Active runs refresh while the page is open. The protected
+terminal socket scopes both the run list and event reads to the current terminal and native session file.
 
 `/log` opens a centered page dialog with separate Harness diagnostics and current-conversation
 run-event views. The diagnostic file is read at its captured size in bounded socket chunks. Tab/Shift+Tab
@@ -504,6 +731,21 @@ diagnostics retain available error stacks and safe request metadata, while the v
 and URL queries and omits response bodies, prompts and message contents. Embedded hosts without a
 `harness.log` still show the conversation's recorded run events.
 
+## Slash command ownership
+
+Harness core commands are unprefixed and live in the core terminal command registry, independently
+of feature-plugin command metadata: `/doctor`, `/worktree`, `/trajectory`, `/subagents`, and `/agents`.
+`/history` (also `/tree`) continues to navigate session branches. `/mcp` and `/connections` open the
+Connections browser. Feature descriptors and their services remain registered; only these terminal
+routes move out of the plugin command registry. Other plugin-owned commands continue to use
+`/<owner-prefix>:<command>`. The annotations plugin uses `/annotate:annotate` and `/annotate:notes`;
+`/annotate:` opens its default capture pane. Pi package extensions use their normalized package name
+as owner prefix unless `harness.commandPrefix` overrides it; loose extensions use their normalized
+extension name. A plugin prefix collision or a duplicate command within one owner is rejected with
+owner paths in the diagnostic. The former owner-qualified and `/plugin:<command>` routes of promoted
+Harness commands remain hidden compatibility aliases for one release, omitted from help and
+completion. Prompt templates and `/skill:<name>` keep their existing forms.
+
 ## Input performance profile
 
 `npm run profile:terminal-latency` (`scripts/profile-terminal-latency.py`) types into the real
@@ -529,8 +771,8 @@ How the frontend keeps typing fast:
   results change; session statistics refresh at most every 250 ms during a run.
 - **Kept connections.** Session-socket requests ask to `keep` their connection, so the two 100 ms
   polls and per-key draft updates reuse a connection instead of opening one each.
-- **No swallowed keys.** A character the question dock does not use moves focus to the composer and
-  is typed there.
+- **No swallowed keys.** While a question is active, an unused printable character moves focus to
+  “Something else” and is typed there when free text is allowed; it never creates a hidden chat draft.
 
 ## Verification and remaining limits
 
@@ -665,7 +907,38 @@ truncate trailing text. Renaming refreshes the line through Pi's existing metada
 ## `/doctor`
 
 Checks accounts/models, tools, MCP, plugins/skills, variant/prompt validity, runtime assets, storage
-and startup recovery. Every finding says whether it is local readiness or live verification.
-`r` refreshes, `t` retries one local finding, `l` selects live checks, `c` cancels, arrows scroll,
-and Escape closes/cancels. Live checks show their costs and isolated resources before confirmation.
-Providers without diagnostic callbacks are reported unverified. See [Doctor](doctor.md).
+and startup recovery. The summary keeps mode, progress, account/model and status counts visible above
+the findings. Wide layouts use aligned Status, Check, Category and Verification columns, with evidence
+and any next step beneath each finding; narrow layouts stack those fields. Status colors follow the
+active theme: pass is success, warning/blocked warning, fail error, disabled dim and unverified muted.
+
+`r` refreshes, `t` retries one local finding, `l` selects live checks, `c` cancels, Up/Down scroll by
+line, PgUp/PgDn or the mouse wheel by page, and Home/End jump to the first/last finding. Escape
+closes/cancels. Live
+checks show their costs and isolated resources before confirmation. Providers without diagnostic
+callbacks are reported unverified. See [Doctor](doctor.md).
+
+## Resource browser verification (2026-10-22)
+
+The [retained evidence](evidence/terminal-resource-browser/README.md) records three-size PTY
+acceptance, pointer/filter and resize behavior, skill completion/insertion and preserved drafts,
+with zero model requests. Isolated idle/history/stream input profiling reported no missed keys
+and p95 14.81/14.27/17.32 ms. The manifest binds both the CLI and OpenTUI bundle to their digests.
+Live external connector authentication and community package installation were not exercised.
+
+
+## Full-screen browser verification (2026-10-23)
+
+[PROP-0014](architecture/proposals/PROP-0014-fullscreen-browser-tabs.md) and
+[ADR-0016](decisions/ADR-0016-fullscreen-browser-tabs.md) replace the browser's centered layout
+with full-screen section tabs and a responsive inventory/inspector. The
+[retained PTY evidence](evidence/terminal-fullscreen-browser/README.md) covers 40×20, 80×24 and
+120×40, keyboard and pointer tab selection, filter interaction, resizing and draft preservation,
+with zero model requests. The manifest binds the CLI, OpenTUI bundle and verification script.
+
+Harness typecheck, full tests (893 passing, three platform skips), build and standalone proof
+passed. The final focused browser/page/command run passed 75 tests. Agent app typecheck, layer
+checks, frontend tests, all 40 sidecar tests and 240 Rust tests passed (one Rust test ignored).
+Sidecar tests were rerun with two workers and a 30-second timeout after four five-second timeouts
+under concurrent load. Socket-backed Harness and PTY checks required sandbox escalation;
+verification used local fixtures and disposable session data.