clauderipple 0.12.5 → 0.12.6

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Changelog
 
+## 0.12.6 — 2026-10-22
+
+### Fixed
+
+- **The phone can pick a folder on another Windows drive.** Browsing starts in `C:\Users\<name>`,
+  and a drive root had nowhere to go up to, so a project on `E:` was out of reach. A drive root now
+  lists the other drives first.
+- **The phone's model picker always offers Claude.** It listed only what the router's providers
+  declare, so a router that passes Claude straight through showed no Claude, and with no other
+  provider the picker was empty. Claude Code's own Opus, Sonnet and Haiku are now offered when no
+  Claude provider is configured.
+- **A running worker's row names its model** as soon as the worker's first answer (or, for a Claude
+  app session, its meta file) says which model ran it, instead of only when it finishes.
+- **A quiet computer reads as a wait, not a lost connection.** The phone's red "connection lost"
+  card came after 30 seconds of silence, which a phone that slept or switched networks often
+  reaches. It now comes after a minute, in the warning tone, as "waiting for your computer", and
+  time the phone app spent in the background no longer counts toward it.
+- **Jev gets 5 seconds to answer** before Haiku judges instead. It answers in about 2.1–2.4
+  seconds, so 3 seconds timed out whenever OpenCode slowed down.
+- **`clauderipple install` removes npm's `clauderipple.ps1` on Windows.** PowerShell runs it before
+  `clauderipple.cmd`, and its default execution policy refuses it, so an `npm install -g` user could
+  not run `clauderipple` in PowerShell. The README now says to start with `clauderipple.cmd` there.
+- **The phone says when the Mac is asking for folder access.** Opening a folder macOS guards
+  (Desktop, Documents, Downloads, iCloud Drive, another volume) for the first time puts up the
+  Mac's "would like to access" dialog, and the phone waited in silence, then said the computer did
+  not answer. It now says the dialog is up within two seconds, and where to allow access if it was
+  refused.
+- **The band's limits row comes back at the next check after a failed read**, not a minute later.
+
 ## 0.12.5 — 2026-10-22
 
 ### Changed

package/README.es.md

@@ -424,6 +424,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+En Windows, la política de ejecución predeterminada de PowerShell rechaza el `clauderipple.ps1` que
+crea npm, así que ahí ejecuta `clauderipple.cmd install` (o usa el Símbolo del sistema). `install`
+borra ese archivo y desde entonces basta con `clauderipple` también en PowerShell. El script de
+instalación nunca lo deja.
+
 Luego abre el panel y añade un proveedor:
 
 ```sh
@@ -711,7 +716,7 @@ El autor lo usa a diario, pero es un proyecto joven. Cuenta con algunas aspereza
 
 ## Comunidad
 
-Las preguntas, los informes de errores y la beta de Ripple Remote para Android (una prueba cerrada en Google Play) están en Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para unirte a la beta de Android, deja allí la dirección de Gmail que usas en Google Play.
+Las preguntas, los informes de errores y la beta de Ripple Remote para Android (una prueba cerrada en Google Play) están en Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para unirte a la beta de Android, envía la dirección de Gmail que usas en Google Play a @pbj_ripple por mensaje directo, no en un canal donde todos pueden leerla.
 
 ## Sin afiliación
 

package/README.ja.md

@@ -250,6 +250,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+Windows の PowerShell は既定の実行ポリシーにより、npm が作る `clauderipple.ps1` を実行しません。
+PowerShell では `clauderipple.cmd install` と入力してください(コマンドプロンプトならそのまま動きます)。
+`install` がこのファイルを削除するので、以後は PowerShell でも `clauderipple` だけで動きます。
+インストールスクリプトではこのファイルは残りません。
+
 続いてダッシュボードを開き、プロバイダーを追加します。
 
 ```sh
@@ -420,7 +425,7 @@ Codex app / CLI ──/v1/responses──▶ ClaudeRipple ingress ──▶ Clau
 
 ## コミュニティ
 
-質問、不具合の報告、Ripple Remote Android 版ベータ（Google Play のクローズドテスト）への参加受付は Discord で行っています：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。Android 版ベータに参加するには、Google Play で使っている Gmail アドレスを Discord に書き込んでください。
+質問、不具合の報告、Ripple Remote Android 版ベータ（Google Play のクローズドテスト）への参加受付は Discord で行っています：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。Android 版ベータに参加するには、Google Play で使っている Gmail アドレスを @pbj_ripple にダイレクトメッセージで送ってください。誰でも読めるチャンネルには書き込まないでください。
 
 ## 提携関係について
 

package/README.ko.md

@@ -342,6 +342,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+Windows PowerShell은 기본 실행 정책 때문에 npm이 만든 `clauderipple.ps1`을 실행하지 않습니다. 그래서
+PowerShell에서는 `clauderipple.cmd install`로 실행하십시오(명령 프롬프트에서는 그대로 됩니다). `install`이
+그 파일을 지우므로, 그다음부터는 PowerShell에서도 `clauderipple`만 입력하면 됩니다. 설치 스크립트로 설치하면
+이 파일이 남지 않습니다.
+
 그다음 대시보드를 열어 프로바이더를 추가합니다.
 
 ```sh
@@ -570,7 +575,7 @@ Codex 앱 / CLI ──/v1/responses──▶ ClaudeRipple 입구 ──▶ Claud
 
 ## 커뮤니티
 
-질문, 버그 제보, Ripple Remote 안드로이드 베타(Google Play 비공개 테스트) 신청은 디스코드에서 받습니다: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). 안드로이드 베타에 참여하려면 Google Play에서 쓰는 Gmail 주소를 남겨 주세요.
+질문, 버그 제보, Ripple Remote 안드로이드 베타(Google Play 비공개 테스트) 신청은 디스코드에서 받습니다: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). 안드로이드 베타에 참여하려면 Google Play에서 쓰는 Gmail 주소를 @pbj_ripple에게 DM으로 보내 주세요. 모두가 읽는 채널에는 올리지 마세요.
 
 ## 비제휴
 

package/README.md

@@ -405,6 +405,10 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+On Windows, PowerShell's default execution policy refuses the `clauderipple.ps1` npm adds, so
+run `clauderipple.cmd install` there (or use Command Prompt). `install` removes that file, and
+plain `clauderipple` works in PowerShell from then on. The install script never leaves one.
+
 Then open the dashboard and add a provider:
 
 ```sh
@@ -699,7 +703,7 @@ In daily use by the author, but young. Expect rough edges:
 
 ## Community
 
-Questions, bug reports and the Ripple Remote Android beta (a closed test on Google Play) are on Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). To join the Android beta, leave the Gmail address you use on Google Play there.
+Questions, bug reports and the Ripple Remote Android beta (a closed test on Google Play) are on Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). To join the Android beta, send the Gmail address you use on Google Play to @pbj_ripple as a direct message, not in a channel where everyone can read it.
 
 ## Not affiliated
 

package/README.pt-BR.md

@@ -416,6 +416,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+No Windows, a política de execução padrão do PowerShell recusa o `clauderipple.ps1` que o npm cria,
+então ali rode `clauderipple.cmd install` (ou use o Prompt de Comando). O `install` apaga esse
+arquivo e, a partir daí, basta `clauderipple` também no PowerShell. O script de instalação nunca o
+deixa.
+
 Depois, abra o painel e adicione um provedor:
 
 ```sh
@@ -694,7 +699,7 @@ Em uso diário pelo autor, mas ainda jovem. Espere algumas arestas:
 
 ## Comunidade
 
-Perguntas, relatos de bugs e o beta do Ripple Remote para Android (um teste fechado no Google Play) ficam no Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para entrar no beta do Android, deixe lá o endereço do Gmail que você usa no Google Play.
+Perguntas, relatos de bugs e o beta do Ripple Remote para Android (um teste fechado no Google Play) ficam no Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para entrar no beta do Android, envie o endereço do Gmail que você usa no Google Play para @pbj_ripple por mensagem direta, não em um canal onde todos podem lê-lo.
 
 ## Sem afiliação
 

package/README.zh-CN.md

@@ -249,6 +249,10 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+Windows PowerShell 的默认执行策略会拒绝运行 npm 生成的 `clauderipple.ps1`,所以在 PowerShell 中请输入
+`clauderipple.cmd install`(命令提示符中可直接运行)。`install` 会删除该文件,之后在 PowerShell 中
+直接输入 `clauderipple` 即可。用安装脚本安装不会留下这个文件。
+
 然后打开控制面板并添加供应商：
 
 ```sh
@@ -419,7 +423,7 @@ Codex app / CLI ──/v1/responses──▶ ClaudeRipple ingress ──▶ Clau
 
 ## 社区
 
-提问、报告问题以及报名 Ripple Remote Android 测试版（Google Play 封闭测试）都在 Discord：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。想参加 Android 测试版，请在那里留下你在 Google Play 上使用的 Gmail 地址。
+提问、报告问题以及报名 Ripple Remote Android 测试版（Google Play 封闭测试）都在 Discord：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。想参加 Android 测试版，请把你在 Google Play 上使用的 Gmail 地址私信发给 @pbj_ripple，不要发在所有人都能看到的频道里。
 
 ## 无关联声明
 

package/dist/app/package.json

@@ -1,5 +1,5 @@
 {
   "private": true,
-  "version": "0.12.5",
+  "version": "0.12.6",
   "type": "commonjs"
 }

package/dist/cli/src/index.js

@@ -26,7 +26,7 @@ import { GROK_DEFAULT_URL } from "../../router/src/providers/grok/catalog.js";
 import { claudeLogin, claudeLogout, desktopClaudeCodeDirs } from "./claude-auth.js";
 import { openBrowser } from "./browser.js";
 import { electronPath, installTrayRuntime, startTray } from "./tray.js";
-import { installKind, isNewer, latestVersion, PACKAGE, runUpdate } from "./update.js";
+import { dropPowerShellShim, installKind, isNewer, latestVersion, PACKAGE, runUpdate } from "./update.js";
 import { ClaudeOAuthSession } from "../../router/src/providers/claude-oauth.js";
 function setPickerEnabled(enabled) {
     const file = configPath();
@@ -208,6 +208,9 @@ async function install() {
     // Persist the single execution contract so the GUI, admin API, hooks, and supervisor all use
     // this installation's runtime rather than any Node installation on the user's PATH.
     writePaths(installedRuntime, home);
+    const shim = dropPowerShellShim(installKind(installedRuntime));
+    if (shim)
+        console.log(`✓ removed ${shim}: PowerShell's default policy refuses it, and clauderipple.cmd runs instead`);
     // Windows and Linux register node + the router script directly (schtasks.ts writes its own .cmd
     // launcher); a macOS source checkout gets a small .app so the agent shows a real name in Login Items.
     // registration.ts holds the mapping, so `repair` registers exactly the same thing.

package/dist/cli/src/update.js

@@ -54,6 +54,27 @@ export function installKind(rt, opts = {}) {
     const same = (a, b) => (opts.platform ?? process.platform) === "win32" ? p.resolve(a).toLowerCase() === p.resolve(b).toLowerCase() : p.resolve(a) === p.resolve(b);
     return same(prefix, scriptPrefix(opts.env, opts.home)) ? { kind: "script", prefix } : { kind: "npm", prefix };
 }
+/**
+ * npm puts a clauderipple.ps1 next to clauderipple.cmd, and PowerShell picks it first — but the
+ * default execution policy runs no .ps1, so `clauderipple` failed with PSSecurityException (#38 for
+ * a script install, #62 for `npm install -g`). Without it PowerShell falls through to the .cmd,
+ * which runs under any policy. Every npm install writes it again, so `install`, which every update
+ * ends with, removes it. Returns the file removed.
+ */
+export function dropPowerShellShim(kind, platform = process.platform) {
+    if (platform !== "win32" || (kind.kind !== "npm" && kind.kind !== "script"))
+        return null;
+    const ps1 = path.join(kind.prefix, `${PACKAGE}.ps1`);
+    if (!fs.existsSync(path.join(kind.prefix, `${PACKAGE}.cmd`)) || !fs.existsSync(ps1))
+        return null;
+    try {
+        fs.rmSync(ps1);
+        return ps1;
+    }
+    catch {
+        return null;
+    }
+}
 /** The version npm would install now. */
 export async function latestVersion(fetchImpl = fetch) {
     const res = await fetchImpl(`https://registry.npmjs.org/${PACKAGE}/latest`, { signal: AbortSignal.timeout(10_000), headers: { accept: "application/json" } });

package/dist/mod/hooks/register.tsx

@@ -642,7 +642,9 @@ async function judge($: EngineInterface, s: Settings, input: JudgeInput | { desc
       const response = await Promise.race([
         $.http.fetch(source === 'zen' ? 'https://opencode.ai/zen/v1/systemone' : 'https://api.typesafe.ai/v1/systemone', { method: 'POST', headers: { 'content-type': 'application/json', authorization: source === 'zen' ? key : `Bearer ${key}` }, body: JSON.stringify({ ...body, model }) })
           .catch(() => 'network' as const),
-        $.clock.sleep(3000).then(() => null),
+        // Jev answers in about 2.1–2.4 s even with a full context (measured 2026-10-22), so 3 s timed
+        // out whenever OpenCode slowed down — and the Haiku fallback then cost more than waiting.
+        $.clock.sleep(5000).then(() => null),
       ])
       // A dropped connection or a slow answer is often one bad moment, not a broken judge.
       if (!response || response === 'network') {
@@ -1092,21 +1094,24 @@ async function fallbackLimits($: EngineInterface): Promise<LimitItem[]> {
  * predates the endpoint (404) the older per-provider routes answer instead, so the row shows before
  * the router is restarted. A failure keeps the last good row rather than blanking it, and the state
  * is written only when it moved: a redraw that shows nothing new is wasted (each answer is drawn
- * afresh).
+ * afresh). Only a good read holds off the next minute, and only while there is a row: a failed read
+ * stamped the minute too, and a session whose first read failed (the router restarting) showed no
+ * limits row for that minute (2026-10-22).
  */
 let limitsAt = 0
 async function refreshLimits($: EngineInterface): Promise<void> {
   if (!(await currentSettings($)).extras.includes('limits')) return
   const now = await $.clock.now()
-  if (now - limitsAt < 60_000) return
-  limitsAt = now
+  if (now - limitsAt < 60_000 && await read($, limits) !== null) return
   try {
     const admin = await adminUrl($)
     const response = await $.http.fetch(`${admin}/api/limits`)
     let items: LimitItem[] | null = null
     if (response.ok) items = routerLimitItems(JSON.parse(response.text), now)
     else if (response.status === 404) items = await fallbackLimits($)
-    if (items && !same(items, await read($, limits))) await update($, limits, () => items)
+    if (!items) return
+    limitsAt = now
+    if (!same(items, await read($, limits))) await update($, limits, () => items)
   } catch (error) { await report($, 'limits', error) }
 }
 async function refreshUsage($: EngineInterface): Promise<void> {

package/dist/mod/tests/register.test.tsx

@@ -768,6 +768,25 @@ test('the limits row shows Claude\'s plan on a chat that runs on another provide
   await ui.unmount()
 })
 
+test('a failed first limits read is tried again at the next tick, not a minute later', async ($, on) => {
+  const b = boundaries(on, { extras: ['limits'] })
+  const limits = { providers: [{ provider: 'claude', type: 'anthropic', title: 'Claude', accounts: [{ account: 0, at: NOW, windows: [
+    { kind: 'seven_day', used_percent: 88, window_minutes: 10080, reset_at: (NOW + 7_200_000) / 1000 },
+  ] }] }] }
+  let reads = 0
+  on('http.fetch', ($, e, next) => {
+    if (e.url.endsWith('/api/mod-settings')) return next(e)
+    if (e.url.endsWith('/api/limits') && ++reads === 1) return { value: { ok: false, status: 503, headers: {}, text: '' } }
+    return { value: { ok: true, status: 200, headers: {}, text: JSON.stringify(e.url.endsWith('/api/limits') ? limits : { requests: [] }) } }
+  })
+  await start($)
+  await b.clock.advance(15000)
+  expect(reads).toBeGreaterThan(1)
+  const ui = await band($, 'desktop')
+  expect(await ui.find({ type: 'Text', text: /^88%$/ })).toBeDefined()
+  await ui.unmount()
+})
+
 test('a tier marker on a worker other than ripple:auto is dropped, not routed as a model', async ($, on) => {
   boundaries(on)
   http(on)

package/dist/remote/src/desktop.js

@@ -488,10 +488,22 @@ export class DesktopSessions {
                 this.tailSubs.set(id, state);
             }
             const resolve = (toolUseId, input) => this.subInfo(id, toolUseId, input);
-            return scanLines(fd, size, line => {
+            const next = scanLines(fd, size, line => {
                 for (const body of transcriptEvents(line, source.summary.cwd, this.opts.summarize, sink, { state, resolve }).bodies)
                     visit(body);
             }, offset);
+            // A worker's meta file, which names its model, is often written just after the line that
+            // started it: say the model once it is known instead of only when the worker ends.
+            for (const [toolUseId, running] of state) {
+                if (running.model)
+                    continue;
+                const info = resolve(toolUseId, running.input);
+                if (!info.model || info.ended)
+                    continue;
+                running.model = info.model;
+                visit({ kind: "subagent", toolUseId, sub: `sub-${toolUseId}`, description: running.description, model: running.model, status: "running", steps: info.steps });
+            }
+            return next;
         }
         finally {
             fs.closeSync(fd);

package/dist/remote/src/eventlog.js

@@ -1,5 +1,5 @@
 import { createHash, randomUUID } from "node:crypto";
-import { closeSync, ftruncateSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, writeFileSync } from "node:fs";
+import { closeSync, ftruncateSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, truncateSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { readJson, writeFileAtomic } from "./fsutil.js";
 import { FRAME_CAP, INLINE_CAP } from "./protocol.js";
@@ -113,8 +113,7 @@ export class EventLog {
     scan(name, last) {
         const file = join(this.dir, name);
         const data = readFileSync(file);
-        const segment = { fd: openSync(file, "a+", 0o600), bytes: data.length, number: Number(name.slice(7, -6)) };
-        this.segments.push(segment);
+        const entries = [];
         let offset = 0;
         while (offset < data.length) {
             const end = data.indexOf(10, offset);
@@ -132,16 +131,19 @@ export class EventLog {
                     throw error;
                 break;
             }
-            if (event === null || event.seq !== this.lastSeq + 1 || typeof event.at !== "number" || typeof event.kind !== "string") {
+            if (event === null || event.seq !== this.lastSeq + entries.length + 1 || typeof event.at !== "number" || typeof event.kind !== "string") {
                 throw new Error(`Invalid event at ${name}:${offset}`);
             }
-            this.index(event, segment, offset, end + 1 - offset);
+            entries.push({ event, offset, length: end + 1 - offset });
             offset = end + 1;
         }
-        if (offset !== data.length) {
-            ftruncateSync(segment.fd, offset);
-            segment.bytes = offset;
-        }
+        // Windows cannot truncate through an append-only handle, so repair before opening that handle.
+        if (offset !== data.length)
+            truncateSync(file, offset);
+        const segment = { fd: openSync(file, "a+", 0o600), bytes: offset, number: Number(name.slice(7, -6)) };
+        this.segments.push(segment);
+        for (const entry of entries)
+            this.index(entry.event, segment, entry.offset, entry.length);
     }
     index(event, segment, offset, length) {
         const entry = { seq: event.seq, segment, offset, length, kind: event.kind };

package/dist/remote/src/folders.js

@@ -20,6 +20,52 @@ export async function isDirectory(p) {
         return false;
     }
 }
+export const MAC_CONSENT_PENDING = "Mac에 폴더 접근 허용 창이 떠 있습니다. 컴퓨터에서 '허용'을 누른 뒤 다시 시도해 주세요.";
+export const MAC_CONSENT_DENIED = "macOS가 이 폴더 접근을 막았습니다. Mac의 시스템 설정 → 개인정보 보호 및 보안 → 파일 및 폴더에서 허용해 주세요.";
+/** Where macOS asks the person before a process first reads: Desktop, Documents, Downloads, iCloud Drive, other volumes. */
+export function macProtected(p, home = os.homedir()) {
+    const abs = path.resolve(p);
+    const under = (root) => abs === root || abs.startsWith(root + path.sep);
+    return ["Desktop", "Documents", "Downloads", path.join("Library", "Mobile Documents")].some(d => under(path.join(home, d))) || under("/Volumes");
+}
+/**
+ * A read of a macOS-protected folder waits on the Mac's "would like to access" dialog, so from the
+ * phone a folder never opened before looked like nothing happening, then "did not answer in time"
+ * (2026-10-22). One that has not answered in `wait` ms is reported as that dialog; one refused
+ * (EPERM) says where to allow it. The read itself goes on, so the dialog stays up to be answered.
+ */
+export async function macConsent(p, work, o = {}) {
+    if ((o.platform ?? process.platform) !== "darwin" || !macProtected(p, o.home))
+        return work();
+    const running = work();
+    running.catch(() => { });
+    let timer;
+    const asking = new Promise((_, reject) => { timer = setTimeout(() => reject(new Error(MAC_CONSENT_PENDING)), o.wait ?? 2000); });
+    try {
+        return await Promise.race([running, asking]);
+    }
+    catch (error) {
+        if (error.code === "EPERM")
+            throw new Error(MAC_CONSENT_DENIED);
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** A folder this process can list: false when it is missing or not a folder; a refusal is thrown. */
+export async function readableFolder(p) {
+    try {
+        await fs.readdir(p);
+        return true;
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT" || code === "ENOTDIR")
+            return false;
+        throw error;
+    }
+}
 /** One path segment: no separators, control characters or the reserved names "." and "..". */
 const FOLDER_NAME = /^[^/\\\u0000-\u001f]{1,100}$/;
 /** Make a folder directly inside `parent`, returning its path. The name is one segment and must
@@ -51,18 +97,43 @@ export async function recentFolders(sources, limit = 12) {
     }
     const sorted = Array.from(best.values()).sort((a, b) => b.lastUsed - a.lastUsed);
     const out = [];
+    // A recent folder whose check waits on the Mac's access dialog stays listed, and the protected ones
+    // after it go unchecked rather than each holding the list; picking one reports the dialog (Sessions.createNew).
+    let asking = false;
     for (const s of sorted) {
         if (out.length >= limit)
             break;
-        if (!(await isDirectory(s.path)))
-            continue;
+        const protectedHere = process.platform === "darwin" && macProtected(s.path);
+        if (!(asking && protectedHere)) {
+            try {
+                if (!(await macConsent(s.path, () => isDirectory(s.path), { wait: 500 })))
+                    continue;
+            }
+            catch {
+                asking = true;
+            }
+        }
         out.push({ path: s.path, name: path.basename(s.path) || s.path, lastUsed: s.lastUsed, ...(s.model ? { model: s.model } : {}) });
     }
     return out;
 }
-export async function browse(target, hidden = false, home = os.homedir()) {
+/**
+ * The drive roots this Windows machine answers for (`C:\`, `E:\`, …). A: and B: are floppy letters
+ * that can stall; a mapped drive that does not answer within a second is left out.
+ */
+export async function windowsDrives(platform = process.platform) {
+    if (platform !== "win32")
+        return [];
+    const roots = "CDEFGHIJKLMNOPQRSTUVWXYZ".split("").map(letter => `${letter}:\\`);
+    const found = await Promise.all(roots.map(root => Promise.race([
+        isDirectory(root).then(ok => (ok ? root : null)),
+        new Promise(resolve => setTimeout(resolve, 1000, null).unref()),
+    ])));
+    return found.filter((root) => root !== null);
+}
+export async function browse(target, hidden = false, home = os.homedir(), drives = windowsDrives) {
     const dir = path.resolve(target && target.trim() ? target : home);
-    const dirents = await fs.readdir(dir, { withFileTypes: true });
+    const dirents = await macConsent(dir, () => fs.readdir(dir, { withFileTypes: true }), { home });
     const names = [];
     for (const d of dirents) {
         if (!hidden && d.name.startsWith("."))
@@ -73,7 +144,10 @@ export async function browse(target, hidden = false, home = os.homedir()) {
             names.push(d.name);
     }
     names.sort((a, b) => a.localeCompare(b, undefined, { sensitivity: "base", numeric: true }));
-    const entries = names.slice(0, BROWSE_CAP).map((name) => ({ path: path.join(dir, name), name }));
     const parent = path.dirname(dir);
+    // A drive root has no parent to go up to, so on Windows the other drives are listed first: a
+    // project on E: was out of reach from a browse that starts in C:\Users (Discord, 2026-10-22).
+    const others = parent === dir ? (await drives()).filter(root => root.toLowerCase() !== dir.toLowerCase()) : [];
+    const entries = [...others.map(root => ({ path: root, name: root })), ...names.slice(0, BROWSE_CAP).map((name) => ({ path: path.join(dir, name), name }))];
     return { path: dir, parent: parent === dir ? null : parent, home, entries, truncated: names.length > BROWSE_CAP };
 }

package/dist/remote/src/images.js

@@ -115,14 +115,16 @@ function fileImage(file, sink) {
         throw error;
     }
     try {
-        const stat = fs.fstatSync(fd);
+        const stat = fs.fstatSync(fd, { bigint: true });
         const checked = imageCachePath(file);
         if (checked !== real)
             return unavailable;
-        const current = fs.statSync(checked);
-        if (current.dev !== stat.dev || current.ino !== stat.ino)
+        const current = fs.statSync(checked, { bigint: true });
+        // Windows path stats report dev as zero while handle stats do not; its ino, size and birth time agree.
+        const sameDevice = current.dev === 0n || stat.dev === 0n || current.dev === stat.dev;
+        if (!sameDevice || current.ino !== stat.ino || current.size !== stat.size || current.birthtimeNs !== stat.birthtimeNs)
             return unavailable;
-        if (!stat.isFile() || stat.size > MAX_BYTES || !MIME.has(mediaType))
+        if (!stat.isFile() || stat.size > BigInt(MAX_BYTES) || !MIME.has(mediaType))
             return unavailable;
         return { ...unavailable, blob: sink(fs.readFileSync(fd).toString("base64")) };
     }

package/dist/remote/src/router.js

@@ -3,6 +3,11 @@ const LABELS = {
     chatgpt: "ChatGPT", anthropic: "Claude", openrouter: "OpenRouter", deepseek: "DeepSeek",
     "opencode-go": "OpenCode Go", "opencode-zen": "OpenCode Zen", "google-gemini": "Google Gemini",
 };
+/**
+ * Claude Code's own aliases for the current Opus, Sonnet and Haiku: the CLI resolves them, so this
+ * list never names a model version that goes stale.
+ */
+const CLAUDE_ALIASES = [{ model: "opus", name: "Opus" }, { model: "sonnet", name: "Sonnet" }, { model: "haiku", name: "Haiku" }];
 const toEffort = (s) => (s && EFFORTS.includes(s) ? s : null);
 const base = (id) => id.split("@")[0].replace(/-\d{8}$/, "");
 export class RouterClient {
@@ -97,6 +102,14 @@ export function groupModels(opts, levels) {
         }
         g.models.push({ model: m.model, name: m.name, provider: m.provider, efforts, usable: ok });
     }
+    // A router that passes Claude straight through declares no anthropic provider, so Claude was
+    // missing from the phone's picker, and with no other provider the picker came up empty
+    // (Discord, 2026-10-22). Claude Code runs its own models with its own login either way.
+    if (!opts.providers.some((p) => p.type === "anthropic")) {
+        const efforts = (levels.providers.anthropic?.default ?? opts.claudeEfforts ?? []).map(toEffort).filter((e) => e !== null && e !== "none" && e !== "minimal");
+        const models = CLAUDE_ALIASES.map(({ model, name }) => ({ model, name, provider: "claude-code", efforts, usable: true }));
+        return [{ provider: "claude-code", label: "Claude", usable: true, models }, ...groups.values()];
+    }
     return Array.from(groups.values());
 }
 /**

package/dist/remote/src/server.js

@@ -7,7 +7,7 @@ import module from "node:module";
 import path from "node:path";
 import { WebSocketServer } from "ws";
 import { tokenMatches } from "./config.js";
-import { browse, makeFolder, recentFolders } from "./folders.js";
+import { browse, macConsent, makeFolder, recentFolders } from "./folders.js";
 import { gitInfo } from "./worktree.js";
 import { ATTACHMENT_CAP, FRAME_CAP, PING_MS, STALE_MS } from "./protocol.js";
 import { SEEN_MS, VISIBLE_MS } from "./push.js";
@@ -511,7 +511,7 @@ export class HostServer {
             }
             case "browse": return browse(op.path, op.hidden ?? false);
             case "mkdir": return { path: await makeFolder(op.parent, op.name) };
-            case "git": return gitInfo(op.path);
+            case "git": return macConsent(op.path, () => gitInfo(op.path));
             case "commands": return s.commands(op.session);
             case "blob": {
                 if (!s.has(op.session))

package/dist/remote/src/sessions.js

@@ -12,7 +12,7 @@ import { ATTACHMENT_CAP, ATTACHMENT_COUNT } from "./protocol.js";
 import { DesktopSessions } from "./desktop.js";
 import { DesktopSidebar, PHONE_GROUP } from "./sidebar.js";
 import { BridgeAuthError, BridgeClient, CLI_NOT_LOGGED_IN, DESKTOP_BLOCKED, isCliNotLoggedIn, object, slashCommands } from "./bridge-client.js";
-import { isDirectory } from "./folders.js";
+import { isDirectory, macConsent, readableFolder } from "./folders.js";
 import { readJson, writeFileAtomic } from "./fsutil.js";
 import { createWorktree } from "./worktree.js";
 import { MessageReceipts, OutcomeUnknownError } from "./receipts.js";
@@ -57,15 +57,25 @@ class Inbox {
 }
 /** Routed models take their effort as `model@level`, which the router reads (ARCHITECTURE §3a); Claude models take the SDK's own option. */
 export function modelArg(model, effort) {
-    if (model.startsWith("claude-"))
+    // Claude Code's own aliases (router.ts offers them when no anthropic provider is declared) are
+    // Claude models too: `opus@high` would reach Anthropic as a model nobody has.
+    if (model.startsWith("claude-") || /^(opus|sonnet|haiku)(\[1m\])?$/.test(model))
         return effort && ["low", "medium", "high", "xhigh", "max"].includes(effort) ? { model, effort } : { model };
     return { model: effort ? `${model}@${effort}` : model };
 }
 const str = (v) => (typeof v === "string" ? v : "");
 const oneLine = (s, n = 200) => { const l = s.split("\n").find((x) => x.trim()) ?? ""; return l.length > n ? l.slice(0, n - 1) + "…" : l; };
+function relativeToCwd(file, cwd) {
+    if (!file || !path.isAbsolute(file))
+        return file;
+    const relative = path.relative(cwd, file);
+    if (!relative)
+        return ".";
+    return relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative) ? relative : file;
+}
 /** One line a person reads to know what a tool call does. */
 export function summarize(tool, input, cwd) {
-    const rel = (p) => (p && path.isAbsolute(p) && (p === cwd || p.startsWith(cwd + "/")) ? path.relative(cwd, p) || "." : p);
+    const rel = (file) => relativeToCwd(file, cwd);
     switch (tool) {
         case "Bash": return oneLine(str(input.command));
         case "Read":
@@ -759,6 +769,8 @@ export class Sessions {
         const isolation = req.isolation ?? "local";
         if (isolation !== "local" && isolation !== "worktree")
             throw new Error("invalid isolation");
+        // Read first, so a folder macOS guards says so now rather than holding the session at "starting".
+        await macConsent(path.resolve(req.cwd), () => readableFolder(path.resolve(req.cwd)));
         // A worktree session runs in a fresh branch under the repo's parent; the picked folder itself is
         // never modified. The host validates everything (worktree.ts), refusing a folder that is not a repo.
         const cwd = isolation === "worktree"
@@ -1708,10 +1720,16 @@ export class Sessions {
         const tools = (message.content ?? []).filter((b) => b.type === "tool_use" && b.id && b.name).map((b) => ({ id: b.id, name: b.name, summary: summarize(b.name, b.input ?? {}, r.cwd), input: JSON.stringify(b.input ?? {}, null, 2) }));
         log.append({ kind: "assistant", msg: message.id ?? randomUUID(), model: message.model ?? "", ...converted, tools });
         const sub = live.subs.get(parent);
-        if (sub) {
-            sub.steps++;
-            if (message.model)
-                sub.model = message.model;
+        if (!sub)
+            return;
+        sub.steps++;
+        // A named worker is spawned without a `model` argument, so its row had no model until it
+        // finished; its first answer says which model ran it.
+        if (message.model && sub.model !== message.model) {
+            const first = sub.model === null;
+            sub.model = message.model;
+            if (first)
+                this.append(r.id, { kind: "subagent", toolUseId: parent, sub: `sub-${parent}`, description: sub.description, model: sub.model, status: "running", steps: sub.steps });
         }
     }
     flush(id, live) {

package/dist/remote/web/app.ts

@@ -140,7 +140,7 @@ export class App {
     link.onReady = () => this.onReady();
     window.addEventListener("online", () => link.nudge());
     window.addEventListener("offline", () => link.nudge());
-    document.addEventListener("visibilitychange", () => { this.sendPresence(); if (document.visibilityState === "visible") { link.nudge(); void this.refreshPush(); } });
+    document.addEventListener("visibilitychange", () => { this.sendPresence(); if (document.visibilityState === "visible") { link.foreground(); void this.refreshPush(); } });
     setInterval(() => { this.ui.now = Date.now(); this.renderChrome(); }, 1000);
     // While in front, say so every PING_MS: the host pushes nothing to a phone that is looking, and
     // stops counting one whose app froze in the background without saying "hidden".

package/dist/remote/web/conn.ts

@@ -84,6 +84,16 @@ export class Link {
     this.connect();
   }
 
+  /**
+   * The app came back to the front. The time it spent in the background was the phone's, not the
+   * computer's silence: counting it put "no answer for 4 minutes" on screen the moment someone
+   * returned from another app (Discord, 2026-10-22). The count starts again from now.
+   */
+  foreground(): void {
+    if (this.status.downSince !== null) this.status = { ...this.status, downSince: this.deps.now() };
+    this.nudge();
+  }
+
   send(msg: ClientMsg): boolean {
     if (this.status.state !== "open" || !this.sock) return false;
     try { this.sock.send(JSON.stringify(msg)); return true; } catch { return false; }

package/dist/remote/web/i18n.ts

@@ -14,8 +14,8 @@ const ko = {
   "conn.retryIn": "{s}초 후 재연결",
   "conn.retrying": "재연결 중…",
   "conn.offline": "오프라인 상태",
-  "conn.lost.title": "{host} 연결 끊김",
-  "conn.lost.body": "{ago} 동안 응답이 없습니다. {host}에서 세션이 계속 실행 중일 수 있으며, 다시 연결되면 놓친 내용을 모두 동기화합니다.",
+  "conn.lost.title": "{host} 응답을 기다리는 중",
+  "conn.lost.body": "{ago} 동안 응답이 없습니다. 세션은 {host}에서 계속 실행 중일 수 있고, 다시 연결되면 놓친 내용을 모두 받아옵니다.",
   "conn.offline.title": "기기 오프라인",
   "conn.offline.body": "네트워크가 복구되면 자동으로 다시 연결합니다. 대기 중인 메시지는 보관 후 전송합니다.",
   "conn.retryNow": "지금 다시 시도",
@@ -62,7 +62,7 @@ const ko = {
   "isolation.local": "로컬",
   "isolation.worktree": "새 worktree",
   "isolation.base": "분기 기준",
-  "composer.new": "이 폴더에서 무엇을 할까요?",
+  "composer.new": "예: 실패하는 테스트를 찾아 고쳐 주세요",
   "composer.reply": "이어서 입력",
   "composer.send": "보내기",
   "composer.stop": "중지",
@@ -187,7 +187,7 @@ const en: Record<Key, string> = {
   "conn.retryIn": "Reconnecting in {s}s",
   "conn.retrying": "Reconnecting…",
   "conn.offline": "Phone offline",
-  "conn.lost.title": "Can't reach your {host}",
+  "conn.lost.title": "Waiting for your {host}",
   "conn.lost.body": "No answer for {ago}. Sessions may still be running on your {host}; everything you missed arrives once it's back.",
   "conn.offline.title": "This phone is offline",
   "conn.offline.body": "It reconnects as soon as the network is back. Messages you write meanwhile are kept and sent then.",
@@ -235,7 +235,7 @@ const en: Record<Key, string> = {
   "isolation.local": "Local",
   "isolation.worktree": "New worktree",
   "isolation.base": "Branch from",
-  "composer.new": "What should it do in this folder?",
+  "composer.new": "e.g. Find the failing test and fix it",
   "composer.reply": "Reply",
   "composer.send": "Send",
   "composer.stop": "Stop",

package/dist/remote/web/views.ts

@@ -58,7 +58,9 @@ function textOf(v: Text): string {
 /** A link is "lost" (not merely reconnecting) once it has been down for 30 s: say so plainly. */
 export function linkKind(link: LinkStatus, now: number): "open" | "connecting" | "waiting" | "offline" | "denied" | "lost" {
   if (link.state === "open" || link.state === "denied" || link.state === "offline") return link.state;
-  if (link.downSince !== null && now - link.downSince > 30_000) return "lost";
+  // A phone that slept or switched networks is often silent for half a minute; saying "lost" then
+  // alarmed people over nothing (Discord, 2026-10-22). It is a calm wait, not an error, either way.
+  if (link.downSince !== null && now - link.downSince > 60_000) return "lost";
   return link.state;
 }
 
@@ -96,7 +98,7 @@ export function banner(ui: UI): string {
   }
   if (kind === "lost") {
     const ago = duration(ui.now - (ui.link.downSince ?? ui.now));
-    return `<div class="banner bad">${ripple("sleepy", 40)}<div class="txt"><b>${esc(t("conn.lost.title", { host: hostName(ui) }))}</b>${esc(t("conn.lost.body", { ago, host: hostName(ui) }))}${seen ? `<small>${esc(seen)}</small>` : ""}<div class="act"><button class="btn primary" data-act="retry">${esc(t("conn.retryNow"))}</button></div></div></div>`;
+    return `<div class="banner warn">${ripple("sleepy", 40)}<div class="txt"><b>${esc(t("conn.lost.title", { host: hostName(ui) }))}</b>${esc(t("conn.lost.body", { ago, host: hostName(ui) }))}${seen ? `<small>${esc(seen)}</small>` : ""}<div class="act"><button class="btn primary" data-act="retry">${esc(t("conn.retryNow"))}</button></div></div></div>`;
   }
   if (ui.link.attempt === 0) return "";
   return `<div class="banner slim">${icon.clock(16)}<span>${esc(ui.link.lastRx ? t("conn.stale", { time: clock(ui.link.lastRx) }) : t("conn.connecting"))}</span></div>`;

package/dist/router/src/admin.js

@@ -840,7 +840,11 @@ function codexState() {
     }
 }
 function claudeAuthStore(deps) {
-    return new ClaudeCodeAuthStore(undefined, { home: homeDir(), ...(deps.observedClaudeCodeAuth ? { observed: deps.observedClaudeCodeAuth } : {}) });
+    return new ClaudeCodeAuthStore(undefined, {
+        home: homeDir(),
+        ...(deps.observedClaudeCodeAuth ? { observed: deps.observedClaudeCodeAuth } : {}),
+        ...(deps.claudeCodeCredentialReaders ? { credentialReaders: deps.claudeCodeCredentialReaders } : {}),
+    });
 }
 async function probeAnthropicApiKey(apiKey, probeFetch = fetchWithTimeout) {
     // The key's own model list where it answers; a key that cannot list is still tested below.

package/dist/router/src/providers/anthropic-account-pool.js

@@ -36,6 +36,7 @@ export class ClaudeAccountAuthPool {
             ...(options.observed ? { observed: options.observed } : {}),
             ...(options.env ? { env: options.env } : {}),
             ...(options.now ? { now: options.now } : {}),
+            ...(options.credentialReaders ? { credentialReaders: options.credentialReaders } : {}),
         });
     }
     /** Refresh all due stored accounts, with one network request per account in this process. */

package/dist/router/src/providers/anthropic.js

@@ -35,9 +35,12 @@ export function readClaudeCodeCredentialsFile() {
     }
 }
 /** Keychain first on macOS, then Claude Code's credential-file fallback. */
-export function readClaudeCodeCredentials() {
-    const keychain = readClaudeCodeKeychain();
-    return parseClaudeCodeCredentials(keychain) ? keychain : readClaudeCodeCredentialsFile();
+export function readClaudeCodeCredentials(readers = {
+    keychain: readClaudeCodeKeychain,
+    credentialsFile: readClaudeCodeCredentialsFile,
+}) {
+    const keychain = readers.keychain();
+    return parseClaudeCodeCredentials(keychain) ? keychain : readers.credentialsFile();
 }
 export function parseClaudeCodeCredentials(raw) {
     if (!raw)
@@ -82,6 +85,7 @@ export class ClaudeCodeCredentialStore {
  */
 export class ClaudeCodeAuthStore {
     credentials;
+    credentialReaders;
     observed;
     home;
     env;
@@ -89,8 +93,12 @@ export class ClaudeCodeAuthStore {
     fetchImpl;
     log;
     refreshing = null;
-    constructor(credentials = new ClaudeCodeCredentialStore(), options = {}) {
-        this.credentials = credentials;
+    constructor(credentials = undefined, options = {}) {
+        this.credentialReaders = options.credentialReaders ?? {
+            keychain: readClaudeCodeKeychain,
+            credentialsFile: readClaudeCodeCredentialsFile,
+        };
+        this.credentials = credentials ?? new ClaudeCodeCredentialStore(() => readClaudeCodeCredentials(this.credentialReaders));
         this.observed = options.observed;
         this.home = options.home ?? (process.env.CLAUDERIPPLE_HOME?.trim() || path.join(os.homedir(), ".clauderipple"));
         this.env = options.env ?? process.env;
@@ -154,10 +162,10 @@ export class ClaudeCodeAuthStore {
             return "observed";
         if (this.env.CLAUDE_CODE_OAUTH_TOKEN?.trim())
             return "env";
-        const keychain = parseClaudeCodeCredentials(readClaudeCodeKeychain());
+        const keychain = parseClaudeCodeCredentials(this.credentialReaders.keychain());
         if (keychain && this.now() < keychain.expiresAt)
             return "keychain";
-        const credentialsFile = parseClaudeCodeCredentials(readClaudeCodeCredentialsFile());
+        const credentialsFile = parseClaudeCodeCredentials(this.credentialReaders.credentialsFile());
         if (credentialsFile && this.now() < credentialsFile.expiresAt)
             return "credentials-file";
         return readClaudeAuthFile(this.home) ? "token-file" : null;

package/dist/router/src/proxy.js

@@ -434,6 +434,7 @@ export class Proxy {
             home: deps.home,
             log: deps.log,
             ...(deps.observedClaudeCodeAuth ? { observed: deps.observedClaudeCodeAuth } : {}),
+            ...(deps.claudeCodeCredentialReaders ? { credentialReaders: deps.claudeCodeCredentialReaders } : {}),
         });
         this.claudeUsage = new ClaudeUsage(this.claudeAccounts, {
             upstream: () => this.deps.config().upstream,

package/dist/router/src/version.js

@@ -5,4 +5,4 @@
 // from the manifests. Until 0.1.1 the router and the CLI each carried their own literal, and both
 // still said "0.1.0" in the 0.1.1 release: after an update nobody could tell which router was
 // running, and the tray app had nothing to compare (2026-09-15, reported from a Windows install).
-export const VERSION = "0.12.5";
+export const VERSION = "0.12.6";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clauderipple",
-  "version": "0.12.5",
+  "version": "0.12.6",
   "description": "Use GPT (any ChatGPT plan with Codex), DeepSeek and 400+ other models in the Claude Desktop Code tab and Claude Code while staying signed in to your Claude subscription — no third-party gateway mode. Several ChatGPT accounts that take over when one runs out, in Codex too.",
   "license": "GPL-3.0-only",
   "workspaces": [