clauderipple 0.12.5 → 0.12.7

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 0.12.7 — 2026-10-22
+
+### Fixed
+
+- **A GPT main session knows it can make images.** How to call `/api/image` was written only into
+  generated worker files, so a session running GPT as its own model said it had no image tool and
+  drew an SVG. The same lines now end its instructions; subagent turns are unchanged.
+- **A relay's 402 for a downed model no longer parks the whole account.** OpenCode Go answered 402
+  while one model's endpoint was down, which read as billing exhaustion and rested the account for
+  30 minutes, DeepSeek included. A refusal whose body says the upstream failed is now transient.
+- **A failed hotspot join is tried again within seconds** (10 s, 20 s, 30 s … up to a minute)
+  instead of waiting out the once-a-minute switch rule.
+- **`ripple:auto` asks for a bare task description,** so the Claude app's running-agent row no
+  longer shows another worker's model name copied into the title.
+
+## 0.12.6 — 2026-10-22
+
+### Fixed
+
+- **The phone can pick a folder on another Windows drive.** Browsing starts in `C:\Users\<name>`,
+  and a drive root had nowhere to go up to, so a project on `E:` was out of reach. A drive root now
+  lists the other drives first.
+- **The phone's model picker always offers Claude.** It listed only what the router's providers
+  declare, so a router that passes Claude straight through showed no Claude, and with no other
+  provider the picker was empty. Claude Code's own Opus, Sonnet and Haiku are now offered when no
+  Claude provider is configured.
+- **A running worker's row names its model** as soon as the worker's first answer (or, for a Claude
+  app session, its meta file) says which model ran it, instead of only when it finishes.
+- **A quiet computer reads as a wait, not a lost connection.** The phone's red "connection lost"
+  card came after 30 seconds of silence, which a phone that slept or switched networks often
+  reaches. It now comes after a minute, in the warning tone, as "waiting for your computer", and
+  time the phone app spent in the background no longer counts toward it.
+- **Jev gets 5 seconds to answer** before Haiku judges instead. It answers in about 2.1–2.4
+  seconds, so 3 seconds timed out whenever OpenCode slowed down.
+- **`clauderipple install` removes npm's `clauderipple.ps1` on Windows.** PowerShell runs it before
+  `clauderipple.cmd`, and its default execution policy refuses it, so an `npm install -g` user could
+  not run `clauderipple` in PowerShell. The README now says to start with `clauderipple.cmd` there.
+- **The phone says when the Mac is asking for folder access.** Opening a folder macOS guards
+  (Desktop, Documents, Downloads, iCloud Drive, another volume) for the first time puts up the
+  Mac's "would like to access" dialog, and the phone waited in silence, then said the computer did
+  not answer. It now says the dialog is up within two seconds, and where to allow access if it was
+  refused.
+- **The band's limits row comes back at the next check after a failed read**, not a minute later.
+
 ## 0.12.5 — 2026-10-22
 
 ### Changed

package/README.es.md

@@ -424,6 +424,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+En Windows, la política de ejecución predeterminada de PowerShell rechaza el `clauderipple.ps1` que
+crea npm, así que ahí ejecuta `clauderipple.cmd install` (o usa el Símbolo del sistema). `install`
+borra ese archivo y desde entonces basta con `clauderipple` también en PowerShell. El script de
+instalación nunca lo deja.
+
 Luego abre el panel y añade un proveedor:
 
 ```sh
@@ -711,7 +716,7 @@ El autor lo usa a diario, pero es un proyecto joven. Cuenta con algunas aspereza
 
 ## Comunidad
 
-Las preguntas, los informes de errores y la beta de Ripple Remote para Android (una prueba cerrada en Google Play) están en Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para unirte a la beta de Android, deja allí la dirección de Gmail que usas en Google Play.
+Las preguntas, los informes de errores y la beta de Ripple Remote para Android (una prueba cerrada en Google Play) están en Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para unirte a la beta de Android, envía la dirección de Gmail que usas en Google Play a @pbj_ripple por mensaje directo, no en un canal donde todos pueden leerla.
 
 ## Sin afiliación
 

package/README.ja.md

@@ -250,6 +250,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+Windows の PowerShell は既定の実行ポリシーにより、npm が作る `clauderipple.ps1` を実行しません。
+PowerShell では `clauderipple.cmd install` と入力してください(コマンドプロンプトならそのまま動きます)。
+`install` がこのファイルを削除するので、以後は PowerShell でも `clauderipple` だけで動きます。
+インストールスクリプトではこのファイルは残りません。
+
 続いてダッシュボードを開き、プロバイダーを追加します。
 
 ```sh
@@ -420,7 +425,7 @@ Codex app / CLI ──/v1/responses──▶ ClaudeRipple ingress ──▶ Clau
 
 ## コミュニティ
 
-質問、不具合の報告、Ripple Remote Android 版ベータ（Google Play のクローズドテスト）への参加受付は Discord で行っています：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。Android 版ベータに参加するには、Google Play で使っている Gmail アドレスを Discord に書き込んでください。
+質問、不具合の報告、Ripple Remote Android 版ベータ（Google Play のクローズドテスト）への参加受付は Discord で行っています：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。Android 版ベータに参加するには、Google Play で使っている Gmail アドレスを @pbj_ripple にダイレクトメッセージで送ってください。誰でも読めるチャンネルには書き込まないでください。
 
 ## 提携関係について
 

package/README.ko.md

@@ -342,6 +342,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+Windows PowerShell은 기본 실행 정책 때문에 npm이 만든 `clauderipple.ps1`을 실행하지 않습니다. 그래서
+PowerShell에서는 `clauderipple.cmd install`로 실행하십시오(명령 프롬프트에서는 그대로 됩니다). `install`이
+그 파일을 지우므로, 그다음부터는 PowerShell에서도 `clauderipple`만 입력하면 됩니다. 설치 스크립트로 설치하면
+이 파일이 남지 않습니다.
+
 그다음 대시보드를 열어 프로바이더를 추가합니다.
 
 ```sh
@@ -570,7 +575,7 @@ Codex 앱 / CLI ──/v1/responses──▶ ClaudeRipple 입구 ──▶ Claud
 
 ## 커뮤니티
 
-질문, 버그 제보, Ripple Remote 안드로이드 베타(Google Play 비공개 테스트) 신청은 디스코드에서 받습니다: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). 안드로이드 베타에 참여하려면 Google Play에서 쓰는 Gmail 주소를 남겨 주세요.
+질문, 버그 제보, Ripple Remote 안드로이드 베타(Google Play 비공개 테스트) 신청은 디스코드에서 받습니다: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). 안드로이드 베타에 참여하려면 Google Play에서 쓰는 Gmail 주소를 @pbj_ripple에게 DM으로 보내 주세요. 모두가 읽는 채널에는 올리지 마세요.
 
 ## 비제휴
 

package/README.md

@@ -405,6 +405,10 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+On Windows, PowerShell's default execution policy refuses the `clauderipple.ps1` npm adds, so
+run `clauderipple.cmd install` there (or use Command Prompt). `install` removes that file, and
+plain `clauderipple` works in PowerShell from then on. The install script never leaves one.
+
 Then open the dashboard and add a provider:
 
 ```sh
@@ -699,7 +703,7 @@ In daily use by the author, but young. Expect rough edges:
 
 ## Community
 
-Questions, bug reports and the Ripple Remote Android beta (a closed test on Google Play) are on Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). To join the Android beta, leave the Gmail address you use on Google Play there.
+Questions, bug reports and the Ripple Remote Android beta (a closed test on Google Play) are on Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). To join the Android beta, send the Gmail address you use on Google Play to @pbj_ripple as a direct message, not in a channel where everyone can read it.
 
 ## Not affiliated
 

package/README.pt-BR.md

@@ -416,6 +416,11 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+No Windows, a política de execução padrão do PowerShell recusa o `clauderipple.ps1` que o npm cria,
+então ali rode `clauderipple.cmd install` (ou use o Prompt de Comando). O `install` apaga esse
+arquivo e, a partir daí, basta `clauderipple` também no PowerShell. O script de instalação nunca o
+deixa.
+
 Depois, abra o painel e adicione um provedor:
 
 ```sh
@@ -694,7 +699,7 @@ Em uso diário pelo autor, mas ainda jovem. Espere algumas arestas:
 
 ## Comunidade
 
-Perguntas, relatos de bugs e o beta do Ripple Remote para Android (um teste fechado no Google Play) ficam no Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para entrar no beta do Android, deixe lá o endereço do Gmail que você usa no Google Play.
+Perguntas, relatos de bugs e o beta do Ripple Remote para Android (um teste fechado no Google Play) ficam no Discord: [https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw). Para entrar no beta do Android, envie o endereço do Gmail que você usa no Google Play para @pbj_ripple por mensagem direta, não em um canal onde todos podem lê-lo.
 
 ## Sem afiliação
 

package/README.zh-CN.md

@@ -249,6 +249,10 @@ npm install -g clauderipple
 clauderipple install
 ```
 
+Windows PowerShell 的默认执行策略会拒绝运行 npm 生成的 `clauderipple.ps1`,所以在 PowerShell 中请输入
+`clauderipple.cmd install`(命令提示符中可直接运行)。`install` 会删除该文件,之后在 PowerShell 中
+直接输入 `clauderipple` 即可。用安装脚本安装不会留下这个文件。
+
 然后打开控制面板并添加供应商：
 
 ```sh
@@ -419,7 +423,7 @@ Codex app / CLI ──/v1/responses──▶ ClaudeRipple ingress ──▶ Clau
 
 ## 社区
 
-提问、报告问题以及报名 Ripple Remote Android 测试版（Google Play 封闭测试）都在 Discord：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。想参加 Android 测试版，请在那里留下你在 Google Play 上使用的 Gmail 地址。
+提问、报告问题以及报名 Ripple Remote Android 测试版（Google Play 封闭测试）都在 Discord：[https://discord.gg/R8ZgGSNHjw](https://discord.gg/R8ZgGSNHjw)。想参加 Android 测试版，请把你在 Google Play 上使用的 Gmail 地址私信发给 @pbj_ripple，不要发在所有人都能看到的频道里。
 
 ## 无关联声明
 

package/dist/app/package.json

@@ -1,5 +1,5 @@
 {
   "private": true,
-  "version": "0.12.5",
+  "version": "0.12.7",
   "type": "commonjs"
 }

package/dist/cli/src/index.js

@@ -26,7 +26,7 @@ import { GROK_DEFAULT_URL } from "../../router/src/providers/grok/catalog.js";
 import { claudeLogin, claudeLogout, desktopClaudeCodeDirs } from "./claude-auth.js";
 import { openBrowser } from "./browser.js";
 import { electronPath, installTrayRuntime, startTray } from "./tray.js";
-import { installKind, isNewer, latestVersion, PACKAGE, runUpdate } from "./update.js";
+import { dropPowerShellShim, installKind, isNewer, latestVersion, PACKAGE, runUpdate } from "./update.js";
 import { ClaudeOAuthSession } from "../../router/src/providers/claude-oauth.js";
 function setPickerEnabled(enabled) {
     const file = configPath();
@@ -208,6 +208,9 @@ async function install() {
     // Persist the single execution contract so the GUI, admin API, hooks, and supervisor all use
     // this installation's runtime rather than any Node installation on the user's PATH.
     writePaths(installedRuntime, home);
+    const shim = dropPowerShellShim(installKind(installedRuntime));
+    if (shim)
+        console.log(`✓ removed ${shim}: PowerShell's default policy refuses it, and clauderipple.cmd runs instead`);
     // Windows and Linux register node + the router script directly (schtasks.ts writes its own .cmd
     // launcher); a macOS source checkout gets a small .app so the agent shows a real name in Login Items.
     // registration.ts holds the mapping, so `repair` registers exactly the same thing.

package/dist/cli/src/update.js

@@ -54,6 +54,27 @@ export function installKind(rt, opts = {}) {
     const same = (a, b) => (opts.platform ?? process.platform) === "win32" ? p.resolve(a).toLowerCase() === p.resolve(b).toLowerCase() : p.resolve(a) === p.resolve(b);
     return same(prefix, scriptPrefix(opts.env, opts.home)) ? { kind: "script", prefix } : { kind: "npm", prefix };
 }
+/**
+ * npm puts a clauderipple.ps1 next to clauderipple.cmd, and PowerShell picks it first — but the
+ * default execution policy runs no .ps1, so `clauderipple` failed with PSSecurityException (#38 for
+ * a script install, #62 for `npm install -g`). Without it PowerShell falls through to the .cmd,
+ * which runs under any policy. Every npm install writes it again, so `install`, which every update
+ * ends with, removes it. Returns the file removed.
+ */
+export function dropPowerShellShim(kind, platform = process.platform) {
+    if (platform !== "win32" || (kind.kind !== "npm" && kind.kind !== "script"))
+        return null;
+    const ps1 = path.join(kind.prefix, `${PACKAGE}.ps1`);
+    if (!fs.existsSync(path.join(kind.prefix, `${PACKAGE}.cmd`)) || !fs.existsSync(ps1))
+        return null;
+    try {
+        fs.rmSync(ps1);
+        return ps1;
+    }
+    catch {
+        return null;
+    }
+}
 /** The version npm would install now. */
 export async function latestVersion(fetchImpl = fetch) {
     const res = await fetchImpl(`https://registry.npmjs.org/${PACKAGE}/latest`, { signal: AbortSignal.timeout(10_000), headers: { accept: "application/json" } });

package/dist/mod/hooks/register.tsx

@@ -642,7 +642,9 @@ async function judge($: EngineInterface, s: Settings, input: JudgeInput | { desc
       const response = await Promise.race([
         $.http.fetch(source === 'zen' ? 'https://opencode.ai/zen/v1/systemone' : 'https://api.typesafe.ai/v1/systemone', { method: 'POST', headers: { 'content-type': 'application/json', authorization: source === 'zen' ? key : `Bearer ${key}` }, body: JSON.stringify({ ...body, model }) })
           .catch(() => 'network' as const),
-        $.clock.sleep(3000).then(() => null),
+        // Jev answers in about 2.1–2.4 s even with a full context (measured 2026-10-22), so 3 s timed
+        // out whenever OpenCode slowed down — and the Haiku fallback then cost more than waiting.
+        $.clock.sleep(5000).then(() => null),
       ])
       // A dropped connection or a slow answer is often one bad moment, not a broken judge.
       if (!response || response === 'network') {
@@ -1092,21 +1094,24 @@ async function fallbackLimits($: EngineInterface): Promise<LimitItem[]> {
  * predates the endpoint (404) the older per-provider routes answer instead, so the row shows before
  * the router is restarted. A failure keeps the last good row rather than blanking it, and the state
  * is written only when it moved: a redraw that shows nothing new is wasted (each answer is drawn
- * afresh).
+ * afresh). Only a good read holds off the next minute, and only while there is a row: a failed read
+ * stamped the minute too, and a session whose first read failed (the router restarting) showed no
+ * limits row for that minute (2026-10-22).
  */
 let limitsAt = 0
 async function refreshLimits($: EngineInterface): Promise<void> {
   if (!(await currentSettings($)).extras.includes('limits')) return
   const now = await $.clock.now()
-  if (now - limitsAt < 60_000) return
-  limitsAt = now
+  if (now - limitsAt < 60_000 && await read($, limits) !== null) return
   try {
     const admin = await adminUrl($)
     const response = await $.http.fetch(`${admin}/api/limits`)
     let items: LimitItem[] | null = null
     if (response.ok) items = routerLimitItems(JSON.parse(response.text), now)
     else if (response.status === 404) items = await fallbackLimits($)
-    if (items && !same(items, await read($, limits))) await update($, limits, () => items)
+    if (!items) return
+    limitsAt = now
+    if (!same(items, await read($, limits))) await update($, limits, () => items)
   } catch (error) { await report($, 'limits', error) }
 }
 async function refreshUsage($: EngineInterface): Promise<void> {

package/dist/mod/hooks/workers.ts

@@ -7,7 +7,11 @@ import { kindOf, parseEffortVerdict, verdictObject } from './judge'
 import { claudeChoices, rungAbove, rungOf, tickedChoices } from './ladder'
 
 /** The one agent the main chat delegates to; the judge picks the worker (docs/specs/2026-10-12-worker-tiers.md). */
+// The description line: a chat that had seen other workers' "Sol·high · " titles wrote one here
+// too, and the app's running-agent row showed "Sol·high" while Sonnet ran (2026-10-22). The row
+// shows the call as written; only the task list gets the mod's corrected title.
 export const AUTO_DESCRIPTION = 'Delegate any task here; ClaudeRipple picks the model. If a worker fails or returns nothing usable, delegate again here once and say the earlier attempt failed. ' +
+  'Write the Agent description as the task alone, with no model or effort in front: ClaudeRipple puts the model it picks there. ' +
   'If you know how hard the task is, put [[ripple: light]], [[ripple: standard]], [[ripple: hard]] or [[ripple: max]] on the prompt\'s first line: ' +
   'light = lookups, mechanical edits, one small fix; standard = carry out a designed change (even across several files), research, summarize, read-only review; ' +
   'hard = subtle debugging, security review, or work where a wrong call is costly; max = planning, design or architecture where the deliverable is the decision itself. ' +

package/dist/mod/tests/register.test.tsx

@@ -768,6 +768,25 @@ test('the limits row shows Claude\'s plan on a chat that runs on another provide
   await ui.unmount()
 })
 
+test('a failed first limits read is tried again at the next tick, not a minute later', async ($, on) => {
+  const b = boundaries(on, { extras: ['limits'] })
+  const limits = { providers: [{ provider: 'claude', type: 'anthropic', title: 'Claude', accounts: [{ account: 0, at: NOW, windows: [
+    { kind: 'seven_day', used_percent: 88, window_minutes: 10080, reset_at: (NOW + 7_200_000) / 1000 },
+  ] }] }] }
+  let reads = 0
+  on('http.fetch', ($, e, next) => {
+    if (e.url.endsWith('/api/mod-settings')) return next(e)
+    if (e.url.endsWith('/api/limits') && ++reads === 1) return { value: { ok: false, status: 503, headers: {}, text: '' } }
+    return { value: { ok: true, status: 200, headers: {}, text: JSON.stringify(e.url.endsWith('/api/limits') ? limits : { requests: [] }) } }
+  })
+  await start($)
+  await b.clock.advance(15000)
+  expect(reads).toBeGreaterThan(1)
+  const ui = await band($, 'desktop')
+  expect(await ui.find({ type: 'Text', text: /^88%$/ })).toBeDefined()
+  await ui.unmount()
+})
+
 test('a tier marker on a worker other than ripple:auto is dropped, not routed as a model', async ($, on) => {
   boundaries(on)
   http(on)

package/dist/remote/src/desktop.js

@@ -488,10 +488,22 @@ export class DesktopSessions {
                 this.tailSubs.set(id, state);
             }
             const resolve = (toolUseId, input) => this.subInfo(id, toolUseId, input);
-            return scanLines(fd, size, line => {
+            const next = scanLines(fd, size, line => {
                 for (const body of transcriptEvents(line, source.summary.cwd, this.opts.summarize, sink, { state, resolve }).bodies)
                     visit(body);
             }, offset);
+            // A worker's meta file, which names its model, is often written just after the line that
+            // started it: say the model once it is known instead of only when the worker ends.
+            for (const [toolUseId, running] of state) {
+                if (running.model)
+                    continue;
+                const info = resolve(toolUseId, running.input);
+                if (!info.model || info.ended)
+                    continue;
+                running.model = info.model;
+                visit({ kind: "subagent", toolUseId, sub: `sub-${toolUseId}`, description: running.description, model: running.model, status: "running", steps: info.steps });
+            }
+            return next;
         }
         finally {
             fs.closeSync(fd);

package/dist/remote/src/eventlog.js

@@ -1,5 +1,5 @@
 import { createHash, randomUUID } from "node:crypto";
-import { closeSync, ftruncateSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, writeFileSync } from "node:fs";
+import { closeSync, ftruncateSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, truncateSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { readJson, writeFileAtomic } from "./fsutil.js";
 import { FRAME_CAP, INLINE_CAP } from "./protocol.js";
@@ -113,8 +113,7 @@ export class EventLog {
     scan(name, last) {
         const file = join(this.dir, name);
         const data = readFileSync(file);
-        const segment = { fd: openSync(file, "a+", 0o600), bytes: data.length, number: Number(name.slice(7, -6)) };
-        this.segments.push(segment);
+        const entries = [];
         let offset = 0;
         while (offset < data.length) {
             const end = data.indexOf(10, offset);
@@ -132,16 +131,19 @@ export class EventLog {
                     throw error;
                 break;
             }
-            if (event === null || event.seq !== this.lastSeq + 1 || typeof event.at !== "number" || typeof event.kind !== "string") {
+            if (event === null || event.seq !== this.lastSeq + entries.length + 1 || typeof event.at !== "number" || typeof event.kind !== "string") {
                 throw new Error(`Invalid event at ${name}:${offset}`);
             }
-            this.index(event, segment, offset, end + 1 - offset);
+            entries.push({ event, offset, length: end + 1 - offset });
             offset = end + 1;
         }
-        if (offset !== data.length) {
-            ftruncateSync(segment.fd, offset);
-            segment.bytes = offset;
-        }
+        // Windows cannot truncate through an append-only handle, so repair before opening that handle.
+        if (offset !== data.length)
+            truncateSync(file, offset);
+        const segment = { fd: openSync(file, "a+", 0o600), bytes: offset, number: Number(name.slice(7, -6)) };
+        this.segments.push(segment);
+        for (const entry of entries)
+            this.index(entry.event, segment, entry.offset, entry.length);
     }
     index(event, segment, offset, length) {
         const entry = { seq: event.seq, segment, offset, length, kind: event.kind };

package/dist/remote/src/folders.js

@@ -20,6 +20,52 @@ export async function isDirectory(p) {
         return false;
     }
 }
+export const MAC_CONSENT_PENDING = "Mac에 폴더 접근 허용 창이 떠 있습니다. 컴퓨터에서 '허용'을 누른 뒤 다시 시도해 주세요.";
+export const MAC_CONSENT_DENIED = "macOS가 이 폴더 접근을 막았습니다. Mac의 시스템 설정 → 개인정보 보호 및 보안 → 파일 및 폴더에서 허용해 주세요.";
+/** Where macOS asks the person before a process first reads: Desktop, Documents, Downloads, iCloud Drive, other volumes. */
+export function macProtected(p, home = os.homedir()) {
+    const abs = path.resolve(p);
+    const under = (root) => abs === root || abs.startsWith(root + path.sep);
+    return ["Desktop", "Documents", "Downloads", path.join("Library", "Mobile Documents")].some(d => under(path.join(home, d))) || under("/Volumes");
+}
+/**
+ * A read of a macOS-protected folder waits on the Mac's "would like to access" dialog, so from the
+ * phone a folder never opened before looked like nothing happening, then "did not answer in time"
+ * (2026-10-22). One that has not answered in `wait` ms is reported as that dialog; one refused
+ * (EPERM) says where to allow it. The read itself goes on, so the dialog stays up to be answered.
+ */
+export async function macConsent(p, work, o = {}) {
+    if ((o.platform ?? process.platform) !== "darwin" || !macProtected(p, o.home))
+        return work();
+    const running = work();
+    running.catch(() => { });
+    let timer;
+    const asking = new Promise((_, reject) => { timer = setTimeout(() => reject(new Error(MAC_CONSENT_PENDING)), o.wait ?? 2000); });
+    try {
+        return await Promise.race([running, asking]);
+    }
+    catch (error) {
+        if (error.code === "EPERM")
+            throw new Error(MAC_CONSENT_DENIED);
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** A folder this process can list: false when it is missing or not a folder; a refusal is thrown. */
+export async function readableFolder(p) {
+    try {
+        await fs.readdir(p);
+        return true;
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT" || code === "ENOTDIR")
+            return false;
+        throw error;
+    }
+}
 /** One path segment: no separators, control characters or the reserved names "." and "..". */
 const FOLDER_NAME = /^[^/\\\u0000-\u001f]{1,100}$/;
 /** Make a folder directly inside `parent`, returning its path. The name is one segment and must
@@ -51,18 +97,43 @@ export async function recentFolders(sources, limit = 12) {
     }
     const sorted = Array.from(best.values()).sort((a, b) => b.lastUsed - a.lastUsed);
     const out = [];
+    // A recent folder whose check waits on the Mac's access dialog stays listed, and the protected ones
+    // after it go unchecked rather than each holding the list; picking one reports the dialog (Sessions.createNew).
+    let asking = false;
     for (const s of sorted) {
         if (out.length >= limit)
             break;
-        if (!(await isDirectory(s.path)))
-            continue;
+        const protectedHere = process.platform === "darwin" && macProtected(s.path);
+        if (!(asking && protectedHere)) {
+            try {
+                if (!(await macConsent(s.path, () => isDirectory(s.path), { wait: 500 })))
+                    continue;
+            }
+            catch {
+                asking = true;
+            }
+        }
         out.push({ path: s.path, name: path.basename(s.path) || s.path, lastUsed: s.lastUsed, ...(s.model ? { model: s.model } : {}) });
     }
     return out;
 }
-export async function browse(target, hidden = false, home = os.homedir()) {
+/**
+ * The drive roots this Windows machine answers for (`C:\`, `E:\`, …). A: and B: are floppy letters
+ * that can stall; a mapped drive that does not answer within a second is left out.
+ */
+export async function windowsDrives(platform = process.platform) {
+    if (platform !== "win32")
+        return [];
+    const roots = "CDEFGHIJKLMNOPQRSTUVWXYZ".split("").map(letter => `${letter}:\\`);
+    const found = await Promise.all(roots.map(root => Promise.race([
+        isDirectory(root).then(ok => (ok ? root : null)),
+        new Promise(resolve => setTimeout(resolve, 1000, null).unref()),
+    ])));
+    return found.filter((root) => root !== null);
+}
+export async function browse(target, hidden = false, home = os.homedir(), drives = windowsDrives) {
     const dir = path.resolve(target && target.trim() ? target : home);
-    const dirents = await fs.readdir(dir, { withFileTypes: true });
+    const dirents = await macConsent(dir, () => fs.readdir(dir, { withFileTypes: true }), { home });
     const names = [];
     for (const d of dirents) {
         if (!hidden && d.name.startsWith("."))
@@ -73,7 +144,10 @@ export async function browse(target, hidden = false, home = os.homedir()) {
             names.push(d.name);
     }
     names.sort((a, b) => a.localeCompare(b, undefined, { sensitivity: "base", numeric: true }));
-    const entries = names.slice(0, BROWSE_CAP).map((name) => ({ path: path.join(dir, name), name }));
     const parent = path.dirname(dir);
+    // A drive root has no parent to go up to, so on Windows the other drives are listed first: a
+    // project on E: was out of reach from a browse that starts in C:\Users (Discord, 2026-10-22).
+    const others = parent === dir ? (await drives()).filter(root => root.toLowerCase() !== dir.toLowerCase()) : [];
+    const entries = [...others.map(root => ({ path: root, name: root })), ...names.slice(0, BROWSE_CAP).map((name) => ({ path: path.join(dir, name), name }))];
     return { path: dir, parent: parent === dir ? null : parent, home, entries, truncated: names.length > BROWSE_CAP };
 }

package/dist/remote/src/images.js

@@ -115,14 +115,16 @@ function fileImage(file, sink) {
         throw error;
     }
     try {
-        const stat = fs.fstatSync(fd);
+        const stat = fs.fstatSync(fd, { bigint: true });
         const checked = imageCachePath(file);
         if (checked !== real)
             return unavailable;
-        const current = fs.statSync(checked);
-        if (current.dev !== stat.dev || current.ino !== stat.ino)
+        const current = fs.statSync(checked, { bigint: true });
+        // Windows path stats report dev as zero while handle stats do not; its ino, size and birth time agree.
+        const sameDevice = current.dev === 0n || stat.dev === 0n || current.dev === stat.dev;
+        if (!sameDevice || current.ino !== stat.ino || current.size !== stat.size || current.birthtimeNs !== stat.birthtimeNs)
             return unavailable;
-        if (!stat.isFile() || stat.size > MAX_BYTES || !MIME.has(mediaType))
+        if (!stat.isFile() || stat.size > BigInt(MAX_BYTES) || !MIME.has(mediaType))
             return unavailable;
         return { ...unavailable, blob: sink(fs.readFileSync(fd).toString("base64")) };
     }

package/dist/remote/src/router.js

@@ -3,6 +3,11 @@ const LABELS = {
     chatgpt: "ChatGPT", anthropic: "Claude", openrouter: "OpenRouter", deepseek: "DeepSeek",
     "opencode-go": "OpenCode Go", "opencode-zen": "OpenCode Zen", "google-gemini": "Google Gemini",
 };
+/**
+ * Claude Code's own aliases for the current Opus, Sonnet and Haiku: the CLI resolves them, so this
+ * list never names a model version that goes stale.
+ */
+const CLAUDE_ALIASES = [{ model: "opus", name: "Opus" }, { model: "sonnet", name: "Sonnet" }, { model: "haiku", name: "Haiku" }];
 const toEffort = (s) => (s && EFFORTS.includes(s) ? s : null);
 const base = (id) => id.split("@")[0].replace(/-\d{8}$/, "");
 export class RouterClient {
@@ -97,6 +102,14 @@ export function groupModels(opts, levels) {
         }
         g.models.push({ model: m.model, name: m.name, provider: m.provider, efforts, usable: ok });
     }
+    // A router that passes Claude straight through declares no anthropic provider, so Claude was
+    // missing from the phone's picker, and with no other provider the picker came up empty
+    // (Discord, 2026-10-22). Claude Code runs its own models with its own login either way.
+    if (!opts.providers.some((p) => p.type === "anthropic")) {
+        const efforts = (levels.providers.anthropic?.default ?? opts.claudeEfforts ?? []).map(toEffort).filter((e) => e !== null && e !== "none" && e !== "minimal");
+        const models = CLAUDE_ALIASES.map(({ model, name }) => ({ model, name, provider: "claude-code", efforts, usable: true }));
+        return [{ provider: "claude-code", label: "Claude", usable: true, models }, ...groups.values()];
+    }
     return Array.from(groups.values());
 }
 /**

package/dist/remote/src/server.js

@@ -7,7 +7,7 @@ import module from "node:module";
 import path from "node:path";
 import { WebSocketServer } from "ws";
 import { tokenMatches } from "./config.js";
-import { browse, makeFolder, recentFolders } from "./folders.js";
+import { browse, macConsent, makeFolder, recentFolders } from "./folders.js";
 import { gitInfo } from "./worktree.js";
 import { ATTACHMENT_CAP, FRAME_CAP, PING_MS, STALE_MS } from "./protocol.js";
 import { SEEN_MS, VISIBLE_MS } from "./push.js";
@@ -511,7 +511,7 @@ export class HostServer {
             }
             case "browse": return browse(op.path, op.hidden ?? false);
             case "mkdir": return { path: await makeFolder(op.parent, op.name) };
-            case "git": return gitInfo(op.path);
+            case "git": return macConsent(op.path, () => gitInfo(op.path));
             case "commands": return s.commands(op.session);
             case "blob": {
                 if (!s.has(op.session))

package/dist/remote/src/sessions.js

@@ -12,7 +12,7 @@ import { ATTACHMENT_CAP, ATTACHMENT_COUNT } from "./protocol.js";
 import { DesktopSessions } from "./desktop.js";
 import { DesktopSidebar, PHONE_GROUP } from "./sidebar.js";
 import { BridgeAuthError, BridgeClient, CLI_NOT_LOGGED_IN, DESKTOP_BLOCKED, isCliNotLoggedIn, object, slashCommands } from "./bridge-client.js";
-import { isDirectory } from "./folders.js";
+import { isDirectory, macConsent, readableFolder } from "./folders.js";
 import { readJson, writeFileAtomic } from "./fsutil.js";
 import { createWorktree } from "./worktree.js";
 import { MessageReceipts, OutcomeUnknownError } from "./receipts.js";
@@ -57,15 +57,25 @@ class Inbox {
 }
 /** Routed models take their effort as `model@level`, which the router reads (ARCHITECTURE §3a); Claude models take the SDK's own option. */
 export function modelArg(model, effort) {
-    if (model.startsWith("claude-"))
+    // Claude Code's own aliases (router.ts offers them when no anthropic provider is declared) are
+    // Claude models too: `opus@high` would reach Anthropic as a model nobody has.
+    if (model.startsWith("claude-") || /^(opus|sonnet|haiku)(\[1m\])?$/.test(model))
         return effort && ["low", "medium", "high", "xhigh", "max"].includes(effort) ? { model, effort } : { model };
     return { model: effort ? `${model}@${effort}` : model };
 }
 const str = (v) => (typeof v === "string" ? v : "");
 const oneLine = (s, n = 200) => { const l = s.split("\n").find((x) => x.trim()) ?? ""; return l.length > n ? l.slice(0, n - 1) + "…" : l; };
+function relativeToCwd(file, cwd) {
+    if (!file || !path.isAbsolute(file))
+        return file;
+    const relative = path.relative(cwd, file);
+    if (!relative)
+        return ".";
+    return relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative) ? relative : file;
+}
 /** One line a person reads to know what a tool call does. */
 export function summarize(tool, input, cwd) {
-    const rel = (p) => (p && path.isAbsolute(p) && (p === cwd || p.startsWith(cwd + "/")) ? path.relative(cwd, p) || "." : p);
+    const rel = (file) => relativeToCwd(file, cwd);
     switch (tool) {
         case "Bash": return oneLine(str(input.command));
         case "Read":
@@ -759,6 +769,8 @@ export class Sessions {
         const isolation = req.isolation ?? "local";
         if (isolation !== "local" && isolation !== "worktree")
             throw new Error("invalid isolation");
+        // Read first, so a folder macOS guards says so now rather than holding the session at "starting".
+        await macConsent(path.resolve(req.cwd), () => readableFolder(path.resolve(req.cwd)));
         // A worktree session runs in a fresh branch under the repo's parent; the picked folder itself is
         // never modified. The host validates everything (worktree.ts), refusing a folder that is not a repo.
         const cwd = isolation === "worktree"
@@ -1708,10 +1720,16 @@ export class Sessions {
         const tools = (message.content ?? []).filter((b) => b.type === "tool_use" && b.id && b.name).map((b) => ({ id: b.id, name: b.name, summary: summarize(b.name, b.input ?? {}, r.cwd), input: JSON.stringify(b.input ?? {}, null, 2) }));
         log.append({ kind: "assistant", msg: message.id ?? randomUUID(), model: message.model ?? "", ...converted, tools });
         const sub = live.subs.get(parent);
-        if (sub) {
-            sub.steps++;
-            if (message.model)
-                sub.model = message.model;
+        if (!sub)
+            return;
+        sub.steps++;
+        // A named worker is spawned without a `model` argument, so its row had no model until it
+        // finished; its first answer says which model ran it.
+        if (message.model && sub.model !== message.model) {
+            const first = sub.model === null;
+            sub.model = message.model;
+            if (first)
+                this.append(r.id, { kind: "subagent", toolUseId: parent, sub: `sub-${parent}`, description: sub.description, model: sub.model, status: "running", steps: sub.steps });
         }
     }
     flush(id, live) {

package/dist/remote/web/app.ts

@@ -140,7 +140,7 @@ export class App {
     link.onReady = () => this.onReady();
     window.addEventListener("online", () => link.nudge());
     window.addEventListener("offline", () => link.nudge());
-    document.addEventListener("visibilitychange", () => { this.sendPresence(); if (document.visibilityState === "visible") { link.nudge(); void this.refreshPush(); } });
+    document.addEventListener("visibilitychange", () => { this.sendPresence(); if (document.visibilityState === "visible") { link.foreground(); void this.refreshPush(); } });
     setInterval(() => { this.ui.now = Date.now(); this.renderChrome(); }, 1000);
     // While in front, say so every PING_MS: the host pushes nothing to a phone that is looking, and
     // stops counting one whose app froze in the background without saying "hidden".

package/dist/remote/web/conn.ts

@@ -84,6 +84,16 @@ export class Link {
     this.connect();
   }
 
+  /**
+   * The app came back to the front. The time it spent in the background was the phone's, not the
+   * computer's silence: counting it put "no answer for 4 minutes" on screen the moment someone
+   * returned from another app (Discord, 2026-10-22). The count starts again from now.
+   */
+  foreground(): void {
+    if (this.status.downSince !== null) this.status = { ...this.status, downSince: this.deps.now() };
+    this.nudge();
+  }
+
   send(msg: ClientMsg): boolean {
     if (this.status.state !== "open" || !this.sock) return false;
     try { this.sock.send(JSON.stringify(msg)); return true; } catch { return false; }

package/dist/remote/web/i18n.ts

@@ -14,8 +14,8 @@ const ko = {
   "conn.retryIn": "{s}초 후 재연결",
   "conn.retrying": "재연결 중…",
   "conn.offline": "오프라인 상태",
-  "conn.lost.title": "{host} 연결 끊김",
-  "conn.lost.body": "{ago} 동안 응답이 없습니다. {host}에서 세션이 계속 실행 중일 수 있으며, 다시 연결되면 놓친 내용을 모두 동기화합니다.",
+  "conn.lost.title": "{host} 응답을 기다리는 중",
+  "conn.lost.body": "{ago} 동안 응답이 없습니다. 세션은 {host}에서 계속 실행 중일 수 있고, 다시 연결되면 놓친 내용을 모두 받아옵니다.",
   "conn.offline.title": "기기 오프라인",
   "conn.offline.body": "네트워크가 복구되면 자동으로 다시 연결합니다. 대기 중인 메시지는 보관 후 전송합니다.",
   "conn.retryNow": "지금 다시 시도",
@@ -62,7 +62,7 @@ const ko = {
   "isolation.local": "로컬",
   "isolation.worktree": "새 worktree",
   "isolation.base": "분기 기준",
-  "composer.new": "이 폴더에서 무엇을 할까요?",
+  "composer.new": "예: 실패하는 테스트를 찾아 고쳐 주세요",
   "composer.reply": "이어서 입력",
   "composer.send": "보내기",
   "composer.stop": "중지",
@@ -187,7 +187,7 @@ const en: Record<Key, string> = {
   "conn.retryIn": "Reconnecting in {s}s",
   "conn.retrying": "Reconnecting…",
   "conn.offline": "Phone offline",
-  "conn.lost.title": "Can't reach your {host}",
+  "conn.lost.title": "Waiting for your {host}",
   "conn.lost.body": "No answer for {ago}. Sessions may still be running on your {host}; everything you missed arrives once it's back.",
   "conn.offline.title": "This phone is offline",
   "conn.offline.body": "It reconnects as soon as the network is back. Messages you write meanwhile are kept and sent then.",
@@ -235,7 +235,7 @@ const en: Record<Key, string> = {
   "isolation.local": "Local",
   "isolation.worktree": "New worktree",
   "isolation.base": "Branch from",
-  "composer.new": "What should it do in this folder?",
+  "composer.new": "e.g. Find the failing test and fix it",
   "composer.reply": "Reply",
   "composer.send": "Send",
   "composer.stop": "Stop",

package/dist/remote/web/views.ts

@@ -58,7 +58,9 @@ function textOf(v: Text): string {
 /** A link is "lost" (not merely reconnecting) once it has been down for 30 s: say so plainly. */
 export function linkKind(link: LinkStatus, now: number): "open" | "connecting" | "waiting" | "offline" | "denied" | "lost" {
   if (link.state === "open" || link.state === "denied" || link.state === "offline") return link.state;
-  if (link.downSince !== null && now - link.downSince > 30_000) return "lost";
+  // A phone that slept or switched networks is often silent for half a minute; saying "lost" then
+  // alarmed people over nothing (Discord, 2026-10-22). It is a calm wait, not an error, either way.
+  if (link.downSince !== null && now - link.downSince > 60_000) return "lost";
   return link.state;
 }
 
@@ -96,7 +98,7 @@ export function banner(ui: UI): string {
   }
   if (kind === "lost") {
     const ago = duration(ui.now - (ui.link.downSince ?? ui.now));
-    return `<div class="banner bad">${ripple("sleepy", 40)}<div class="txt"><b>${esc(t("conn.lost.title", { host: hostName(ui) }))}</b>${esc(t("conn.lost.body", { ago, host: hostName(ui) }))}${seen ? `<small>${esc(seen)}</small>` : ""}<div class="act"><button class="btn primary" data-act="retry">${esc(t("conn.retryNow"))}</button></div></div></div>`;
+    return `<div class="banner warn">${ripple("sleepy", 40)}<div class="txt"><b>${esc(t("conn.lost.title", { host: hostName(ui) }))}</b>${esc(t("conn.lost.body", { ago, host: hostName(ui) }))}${seen ? `<small>${esc(seen)}</small>` : ""}<div class="act"><button class="btn primary" data-act="retry">${esc(t("conn.retryNow"))}</button></div></div></div>`;
   }
   if (ui.link.attempt === 0) return "";
   return `<div class="banner slim">${icon.clock(16)}<span>${esc(ui.link.lastRx ? t("conn.stale", { time: clock(ui.link.lastRx) }) : t("conn.connecting"))}</span></div>`;

package/dist/router/src/admin.js

@@ -840,7 +840,11 @@ function codexState() {
     }
 }
 function claudeAuthStore(deps) {
-    return new ClaudeCodeAuthStore(undefined, { home: homeDir(), ...(deps.observedClaudeCodeAuth ? { observed: deps.observedClaudeCodeAuth } : {}) });
+    return new ClaudeCodeAuthStore(undefined, {
+        home: homeDir(),
+        ...(deps.observedClaudeCodeAuth ? { observed: deps.observedClaudeCodeAuth } : {}),
+        ...(deps.claudeCodeCredentialReaders ? { credentialReaders: deps.claudeCodeCredentialReaders } : {}),
+    });
 }
 async function probeAnthropicApiKey(apiKey, probeFetch = fetchWithTimeout) {
     // The key's own model list where it answers; a key that cannot list is still tested below.

package/dist/router/src/agents.js

@@ -45,9 +45,10 @@ const BODY = [
 /**
  * Added to the body when a ChatGPT provider is configured: how a worker makes an image. A worker has
  * no image tool, and `clauderipple` is not on PATH for everyone (a checkout runs from source), so
- * the instruction is the admin endpoint itself, which curl reaches on every platform.
+ * the instruction is the admin endpoint itself, which curl reaches on every platform. A GPT main
+ * session gets the same lines in its instructions (proxy.ts).
  */
-function imageLine(port) {
+export function imageLine(port) {
     return [
         "이미지가 필요하면 ChatGPT 구독으로 만든다(한 장 30초~수 분):",
         `\`curl -sS --fail-with-body -o <절대경로>.png -H 'content-type: application/json' -d '{"prompt":"…"}' http://127.0.0.1:${port}/api/image\``,

package/dist/router/src/health.js

@@ -12,6 +12,7 @@
 // A check that cannot run (no curl) exits as before: the documented fix stays the default.
 import path from "node:path";
 import { PROBE_URLS } from "./tether.js";
+import { RELAY_UPSTREAM_FAILED } from "./pool.js";
 /** Only definite billing/quota exhaustion, never a bare rate limit or RESOURCE_EXHAUSTED.
  * 402 is already `exhausted` in pool.ts; Codex's usage_limit_reached is named in
  * providers/chatgpt/translate.ts. Other vendors share the explicit billing vocabulary.
@@ -20,6 +21,9 @@ import { PROBE_URLS } from "./tether.js";
 export function providerExhaustion(status, body = "", retryMs, now = Date.now()) {
     if (status !== 402 && status !== 429)
         return undefined;
+    // A relay's 402 for its upstream being down is not about money (pool.ts, RELAY_UPSTREAM_FAILED).
+    if (RELAY_UPSTREAM_FAILED.test(body))
+        return undefined;
     const balance = /\b(?:insufficient[_ -]+(?:balance|credits?|funds)|(?:balance|credits?)[_ -]+(?:insufficient|exhausted|depleted))\b/i.test(body);
     const billing = /\bbilling[_ -]+(?:hard[_ -]+)?(?:limit|exhausted|quota)|\b(?:exhausted|exceeded|insufficient)[_ -]+billing\b/i.test(body);
     const quota = /\b(?:insufficient_quota|usage_limit_reached|quota[_ -]+exhausted|exhausted[_ -]+quota)\b/i.test(body);

package/dist/router/src/pool.js

@@ -26,6 +26,8 @@
 const DEFAULT_RATE_LIMIT_MS = 60_000;
 const TRANSIENT_MS = 10_000;
 const EXHAUSTED_MS = 30 * 60_000;
+/** A relay passing on its upstream's failure; whatever status it chose, the credential did nothing. */
+export const RELAY_UPSTREAM_FAILED = /upstream (request )?failed/i;
 /** A `Retry-After` beyond this is treated as "not within this session"; the credential is parked. */
 const MAX_COOLDOWN_MS = 6 * 60 * 60_000;
 /**
@@ -48,13 +50,19 @@ export function classify(status, retryAfterMs, body = "") {
         // held for no time at all rather than for a shorter time — any cooldown at all would move the
         // conversation to another credential and take the prompt cache with it (§4). `bounded` is
         // bypassed deliberately: its one-second floor is exactly the cache cost this avoids.
-        if (/upstream (request )?failed/i.test(body)) {
+        if (RELAY_UPSTREAM_FAILED.test(body)) {
             return { retryable: true, kind: "transient", cooldownMs: 0, quarantine: false };
         }
         return { retryable: true, kind: "auth", cooldownMs: bounded(retryAfterMs ?? DEFAULT_RATE_LIMIT_MS), quarantine: false };
     }
     if (status === 429)
         return { retryable: true, kind: "rate-limit", cooldownMs: bounded(retryAfterMs ?? DEFAULT_RATE_LIMIT_MS), quarantine: false };
+    // The same relay answers 402 for a model whose own endpoint is down ("server_error … Upstream
+    // request failed: Endpoint is unavailable", OpenCode Go for minimax-m3.1-flash-free, 2026-10-22).
+    // That is no statement about money: read as exhaustion it parked the whole account for half an
+    // hour and its other models with it.
+    if (status === 402 && RELAY_UPSTREAM_FAILED.test(body))
+        return { retryable: true, kind: "transient", cooldownMs: 0, quarantine: false };
     if (status === 402)
         return { retryable: true, kind: "exhausted", cooldownMs: bounded(retryAfterMs ?? EXHAUSTED_MS), quarantine: false };
     // 408 and 425 are the server saying "ask again"; 5xx is the server being broken. Both may work

package/dist/router/src/providers/anthropic-account-pool.js

@@ -36,6 +36,7 @@ export class ClaudeAccountAuthPool {
             ...(options.observed ? { observed: options.observed } : {}),
             ...(options.env ? { env: options.env } : {}),
             ...(options.now ? { now: options.now } : {}),
+            ...(options.credentialReaders ? { credentialReaders: options.credentialReaders } : {}),
         });
     }
     /** Refresh all due stored accounts, with one network request per account in this process. */

package/dist/router/src/providers/anthropic.js

@@ -35,9 +35,12 @@ export function readClaudeCodeCredentialsFile() {
     }
 }
 /** Keychain first on macOS, then Claude Code's credential-file fallback. */
-export function readClaudeCodeCredentials() {
-    const keychain = readClaudeCodeKeychain();
-    return parseClaudeCodeCredentials(keychain) ? keychain : readClaudeCodeCredentialsFile();
+export function readClaudeCodeCredentials(readers = {
+    keychain: readClaudeCodeKeychain,
+    credentialsFile: readClaudeCodeCredentialsFile,
+}) {
+    const keychain = readers.keychain();
+    return parseClaudeCodeCredentials(keychain) ? keychain : readers.credentialsFile();
 }
 export function parseClaudeCodeCredentials(raw) {
     if (!raw)
@@ -82,6 +85,7 @@ export class ClaudeCodeCredentialStore {
  */
 export class ClaudeCodeAuthStore {
     credentials;
+    credentialReaders;
     observed;
     home;
     env;
@@ -89,8 +93,12 @@ export class ClaudeCodeAuthStore {
     fetchImpl;
     log;
     refreshing = null;
-    constructor(credentials = new ClaudeCodeCredentialStore(), options = {}) {
-        this.credentials = credentials;
+    constructor(credentials = undefined, options = {}) {
+        this.credentialReaders = options.credentialReaders ?? {
+            keychain: readClaudeCodeKeychain,
+            credentialsFile: readClaudeCodeCredentialsFile,
+        };
+        this.credentials = credentials ?? new ClaudeCodeCredentialStore(() => readClaudeCodeCredentials(this.credentialReaders));
         this.observed = options.observed;
         this.home = options.home ?? (process.env.CLAUDERIPPLE_HOME?.trim() || path.join(os.homedir(), ".clauderipple"));
         this.env = options.env ?? process.env;
@@ -154,10 +162,10 @@ export class ClaudeCodeAuthStore {
             return "observed";
         if (this.env.CLAUDE_CODE_OAUTH_TOKEN?.trim())
             return "env";
-        const keychain = parseClaudeCodeCredentials(readClaudeCodeKeychain());
+        const keychain = parseClaudeCodeCredentials(this.credentialReaders.keychain());
         if (keychain && this.now() < keychain.expiresAt)
             return "keychain";
-        const credentialsFile = parseClaudeCodeCredentials(readClaudeCodeCredentialsFile());
+        const credentialsFile = parseClaudeCodeCredentials(this.credentialReaders.credentialsFile());
         if (credentialsFile && this.now() < credentialsFile.expiresAt)
             return "credentials-file";
         return readClaudeAuthFile(this.home) ? "token-file" : null;

package/dist/router/src/providers/chatgpt/index.js

@@ -984,12 +984,13 @@ export class ChatGptAdapter {
      * `subagent` is the one bit about the caller the tier needs: Claude Code names the agent in the
      * `x-claude-code-agent-id` header, and only a subagent's request carries it.
      */
-    responsesOptions(carried, model, effort, replay = true, subagent = false) {
+    responsesOptions(carried, model, effort, replay = true, subagent = false, imageHint) {
         return {
             model,
             effort: effort ?? this.cfg.defaultEffort ?? "high",
             identity: this.cfg.identity ?? true,
             ...(this.cfg.instructionsAppend ? { instructionsAppend: this.cfg.instructionsAppend } : {}),
+            ...(imageHint ? { imageHint } : {}),
             replay,
             // The envelope names this provider and this model, and the request builder refuses anything
             // else: reasoning outlives the turn that made it, and a conversation moved to another model
@@ -1006,7 +1007,7 @@ export class ChatGptAdapter {
      * Handle a fully-read Messages request. `model`/`effort` already resolved by routing.
      *
      * `options.subagent` says the turn was made inside a subagent, which is what the provider's
-     * `fast.subagent` switch is about.
+     * `fast.subagent` switch is about. `options.imageHint` is how the session makes an image (translate.ts).
      */
     async handle(req, res, path, json, model, effort, options) {
         if (path.startsWith("/v1/messages/count_tokens")) {
@@ -1021,7 +1022,7 @@ export class ChatGptAdapter {
             this.log.warn(`chatgpt ${this.name}: dropped server tools for ${model}: ${[...serverTools].join(", ")} (Anthropic runs these; this provider cannot)`);
         const carried = { replayed: 0, undecodable: 0 };
         const subagent = options?.subagent === true;
-        let upstreamReq = toResponsesRequest(json, this.responsesOptions(carried, model, effort, true, subagent));
+        let upstreamReq = toResponsesRequest(json, this.responsesOptions(carried, model, effort, true, subagent, options?.imageHint));
         let body = JSON.stringify(upstreamReq);
         const cacheKey = upstreamReq.prompt_cache_key;
         // Input estimate for message_start: a conversation only grows, so the last measured total is a floor.
@@ -1062,7 +1063,7 @@ export class ChatGptAdapter {
         // must never be the reason a user's turn fails (reasoning.ts).
         if (carried.replayed > 0 && sent.kind === "refused" && refusesReplayedReasoning(sent.status, sent.text)) {
             this.log.warn(`chatgpt ${this.name}: upstream ${sent.status} refused ${carried.replayed} replayed reasoning item(s) for ${model}; asking again without them: ${sent.text.slice(0, 200)}`);
-            upstreamReq = toResponsesRequest(json, this.responsesOptions({ replayed: 0, undecodable: 0 }, model, effort, false, subagent));
+            upstreamReq = toResponsesRequest(json, this.responsesOptions({ replayed: 0, undecodable: 0 }, model, effort, false, subagent, options?.imageHint));
             body = JSON.stringify(upstreamReq);
             carried.replayed = 0;
             sent = await ask();

package/dist/router/src/providers/chatgpt/translate.js

@@ -233,6 +233,8 @@ export function toResponsesRequest(req, opts) {
         parts.push(sys);
     if (opts.instructionsAppend)
         parts.push(opts.instructionsAppend);
+    if (opts.imageHint && opts.subagent !== true)
+        parts.push(opts.imageHint);
     const input = [];
     // Claude Code sends side queries whose history starts with a bare tool_result (e.g. summarising a
     // large tool output). Anthropic tolerates the orphan; the Responses API rejects a function_call_output

package/dist/router/src/proxy.js

@@ -21,7 +21,7 @@ import zlib from "node:zlib";
 import { ProviderHealth, providerExhaustion, UpstreamHealth } from "./health.js";
 import { BOOTSTRAP_PATH, injectBootstrap } from "./bootstrap.js";
 import { THREAD_UNSUPPORTED, effortOf, isAutoModeClassifier, resolve, rewriteBody, stripThreadFields, threadDecision, unroutableReason } from "./routing.js";
-import { defaultAgentDir, withAgentAliases } from "./agents.js";
+import { defaultAgentDir, imageLine, withAgentAliases } from "./agents.js";
 import { forwardCompatibleHeader, resolveCompatibleCaps, sanitizeForCompatible } from "./compat.js";
 import { applyIdentityToAnthropicBody } from "./identity.js";
 import { anthropicServerToolBackend, webPluginBackend, webSearchBlocks, webSearchErrorBlocks, webSearchMessage, webSearchQuery, webSearchSse } from "./websearch.js";
@@ -33,7 +33,7 @@ import { GoogleAdapter } from "./providers/google/index.js";
 import { OpenCodeUsage, isOpenCodeGo } from "./providers/opencode-usage.js";
 import { GrokAdapter } from "./providers/grok/index.js";
 import { conversationKey } from "./providers/chatgpt/translate.js";
-import { providerFor, searchProviderFor, terminateHosts } from "./config.js";
+import { adminPort, providerFor, searchProviderFor, terminateHosts } from "./config.js";
 import { chatPickerModels, injectPickerModels, isBootstrapPath } from "./picker.js";
 import { effortLevels, effortLevelsForModel } from "./admin.js";
 import { isWebFetchRequest } from "./webfetch.js";
@@ -434,6 +434,7 @@ export class Proxy {
             home: deps.home,
             log: deps.log,
             ...(deps.observedClaudeCodeAuth ? { observed: deps.observedClaudeCodeAuth } : {}),
+            ...(deps.claudeCodeCredentialReaders ? { credentialReaders: deps.claudeCodeCredentialReaders } : {}),
         });
         this.claudeUsage = new ClaudeUsage(this.claudeAccounts, {
             upstream: () => this.deps.config().upstream,
@@ -988,7 +989,7 @@ export class Proxy {
                         try {
                             // The adapter reports each account's outcome to the shared pool itself, so a slot pointing
                             // here fails over once every account is out (chooseTarget asks the adapter).
-                            const o = await this.chatgpt(route.provider, provider).handle(req, res, path, json, route.model, effortOf(json), { subagent });
+                            const o = await this.chatgpt(route.provider, provider).handle(req, res, path, json, route.model, effortOf(json), { subagent, imageHint: imageLine(adminPort(cfg)) });
                             if (!path.startsWith("/v1/messages/count_tokens"))
                                 this.providerHealth.observe(route.provider, o.status, o.exhaustion);
                             finish(String(o.status), o.bytes, o.note, o.status >= 400, { ...o, ...(searchAttempted ? { upstreamCalled: undefined } : {}) });

package/dist/router/src/tether.js

@@ -66,6 +66,13 @@ export const PROBE_URLS = {
 };
 export const PROBE_TIMEOUT_MS = 4_000;
 export const MIN_SWITCH_INTERVAL_MS = 60_000;
+/**
+ * After a join that failed, the next try comes this much later per failure in a row (10, 20, 30 s…)
+ * up to MIN_SWITCH_INTERVAL_MS. A failed join switched nothing, so the once-a-minute rule against
+ * flapping does not apply: walking out of the office, the first join failed as the hotspot was only
+ * just coming into range, and the Mac sat offline for the rest of the minute (2026-10-22).
+ */
+export const JOIN_RETRY_MS = 10_000;
 /** How long a scan that saw a known Wi-Fi stands for a return still waiting on busy calls. */
 export const KNOWN_VISIBLE_TRUST_MS = 60_000;
 export const RETURN_PROBE_MS = 20_000;
@@ -96,6 +103,8 @@ export const RETURN_HOLD_FAILSAFE_MS = RETURN_DRAIN_WAIT_MS + 3 * 60_000;
 const JOIN_SETTLE_MS = 15_000;
 /** States that say why the last join failed; they stay (with their hint) until the next attempt. */
 const JOIN_FAILURES = new Set(["hotspot-not-visible", "join-failed", "needs-setup", "no-hotspot-profile", "needs-location"]);
+/** Failures a moment later can cure (the phone coming into range); setup problems wait the full minute. */
+const RETRIABLE_JOIN = new Set(["hotspot-not-visible", "join-failed"]);
 // ---- Pure helpers -------------------------------------------------------------------------------
 /** The Wi-Fi device from `networksetup -listallhardwareports` ("Hardware Port: Wi-Fi\nDevice: en0"). */
 export function parseWifiDevice(text) {
@@ -336,6 +345,8 @@ export class TetherController {
     state = "off";
     pinned = false;
     lastSwitchAt = 0;
+    /** Hotspot joins that failed in a row; the retry gap grows with it (JOIN_RETRY_MS). */
+    joinFailures = 0;
     /** When a scan last saw a known Wi-Fi other than the hotspot. */
     knownVisibleAt = -Infinity;
     lastSwitch = null;
@@ -486,6 +497,7 @@ export class TetherController {
         }
         if (this.network === "hotspot") {
             // Landed here by our own failover or by hand: either way, plan the way back from here.
+            this.joinFailures = 0;
             if (this.landedOnHotspotAt === null) {
                 this.landedOnHotspotAt = this.now();
                 this.nextReturnAt = nextReturnPoint(this.landedOnHotspotAt, this.now());
@@ -500,6 +512,8 @@ export class TetherController {
         // On Wi-Fi (or none): the way back is no longer pending, and landing again starts the schedule over.
         this.landedOnHotspotAt = null;
         if (!this.window.outage()) {
+            if (this.network === "wifi")
+                this.joinFailures = 0;
             this.state = this.network === "wifi" ? "watching" : "no-wifi";
             if (this.network === "wifi")
                 this.decide(`watching Wi-Fi (${5 - this.window.failures()}/5 recent probes ok)`);
@@ -517,11 +531,13 @@ export class TetherController {
             return;
         }
         const since = this.now() - this.lastSwitchAt;
-        if (since < MIN_SWITCH_INTERVAL_MS) {
+        const retrying = this.joinFailures > 0 && RETRIABLE_JOIN.has(this.state);
+        const gap = retrying ? Math.min(MIN_SWITCH_INTERVAL_MS, JOIN_RETRY_MS * this.joinFailures) : MIN_SWITCH_INTERVAL_MS;
+        if (since < gap) {
             // A failed join keeps saying why (and its hint) until the next attempt.
             if (!JOIN_FAILURES.has(this.state))
                 this.state = "outage";
-            this.decide(`${why}; waiting ${Math.ceil((MIN_SWITCH_INTERVAL_MS - since) / 1000)}s (at most one switch per minute)`);
+            this.decide(`${why}; waiting ${Math.ceil((gap - since) / 1000)}s (${retrying ? "trying the hotspot again" : "at most one switch per minute"})`);
             return;
         }
         // A call in flight on a dead network cannot finish anyway; give it a short chance, no more.
@@ -533,6 +549,7 @@ export class TetherController {
         this.decide(`${why}: joining hotspot "${settings.hotspotSsid}"`);
         const outcome = await this.join(settings.hotspotSsid);
         this.recordSwitch("hotspot", outcome === "joined", outcome === "joined" ? why : outcome);
+        this.joinFailures = outcome === "joined" ? 0 : this.joinFailures + 1;
         if (outcome === "joined" && !this.onHotspot(this.currentIp())) {
             // Joined, but on a network that could not be remembered (see learn()): it reads as Wi-Fi.
             this.window.reset();

package/dist/router/src/version.js

@@ -5,4 +5,4 @@
 // from the manifests. Until 0.1.1 the router and the CLI each carried their own literal, and both
 // still said "0.1.0" in the 0.1.1 release: after an update nobody could tell which router was
 // running, and the tray app had nothing to compare (2026-09-15, reported from a Windows install).
-export const VERSION = "0.12.5";
+export const VERSION = "0.12.7";

package/docs/ARCHITECTURE.md

@@ -427,7 +427,10 @@ must preserve **Data: Artificial Analysis (artificialanalysis.ai)** attribution.
   reason. With a chatgpt provider configured the body also tells a worker how to
   make an image: `POST /api/image` on the admin port, which runs one Codex
   Responses turn with the hosted `image_generation` tool required and answers
-  with the image bytes (`clauderipple image` is the same call). Measured
+  with the image bytes (`clauderipple image` is the same call). A GPT main session
+  gets the same lines at the end of its instructions (not a subagent's turns, whose
+  agent file has them): without them a GPT session told the operator it could not
+  make images and drew an SVG (2026-10-22). Measured
   2026-09-29 on a subscription: the image is the `image_generation_call` output
   item's base64 `result`, about 30 s; `output_format` and `background` are
   honoured, `size` and `quality` are accepted and ignored (even "999x1" and
@@ -1647,6 +1650,7 @@ plan unless marked otherwise.
 | Blind returns repeatedly cut the only connection while travelling with the lid closed (2026-10-21 18:40–19:08 KST, owner-reported router.log): at each point, "trying to go back to Wi-Fi: leaving the hotspot so macOS joins the best known network", then "no network was joined", "networksetup said: Failed to join network PBJ" → `join-failed`. No known Wi-Fi was in range, and an idle iPhone stops advertising; with the lid closed macOS did not reliably rejoin it. The owner pinned the network as a stopgap. | Never leave the hotspot speculatively. Before either quiet return or the hold gate, a read-only backend check must prove another saved Wi-Fi is visible (on Windows, also an automatic profile). No match → "staying on the hotspot: no known Wi-Fi in range", once per point, then the next point on the unchanged schedule. Scan/list failure, unsupported response or Location refusal → stay and log why; never hold calls or disconnect on unknown visibility. macOS: preferred SSIDs + directed CoreWLAN JXA scans, Windows: saved profile SSIDs intersected with `netsh wlan show networks` (§8, measurements 2026-10-21). |
 | Android hotspot never recognised (2026-10-20, found by reading the code for an owner with Windows laptops and Android phones in mind): "on the hotspot" was the iPhone range 172.20.10.0/28 alone, on macOS and Windows. An Android hotspot hands out 192.168.43.x (≤ Android 10) or a random /24 (Android 11+; 192.168/16, 172.16/12, 10/8 by Android 14), so after our own failover `join()` saw no hotspot address and reported `join-failed`/`hotspot-not-visible`, while on the phone the controller read Wi-Fi and never planned the way back, and a by-hand join was never recognised | The product does not assume an iPhone. After our own join of the configured SSID is accepted by the OS, a new, non-link-local address within the settle time is the join, and its subnet (address + netmask from `os.networkInterfaces()`: no Location, no elevation) is kept in `<home>/tether.json` for that hotspot name; "on the hotspot" = iPhone range OR that network (§8). Only our own join replaces it, and a subnet equal to the Wi-Fi watched before is not remembered (logged as ambiguous) so home Wi-Fi is never read as the hotspot. Hints name both phones where the step differs. Not yet run with a real Android phone. |
 | An expired Claude login on the Mac wrote `[desktop state] …로그인이 만료되었습니다…` every few seconds per Claude app session and read the keychain (a synchronous child process) for every request, while phones learned of it only by a failed send (2026-10-15) | A login problem is one host state: logged when it starts and ends, sent to phones as `HostInfo.desktopProblem` (a banner), and the keychain is reread at most every 30 s while expired or after a 401. Per-session Remote Control errors log once per change. The host never refreshes the login itself. |
+| OpenCode Go answered **402** for `minimax-m3.1-flash-free` while that model's endpoint was down (`server_error … Upstream request failed: Endpoint is unavailable`); read as billing exhaustion, it parked the whole `opencode-go` account for 30 minutes, DeepSeek with it, and delegated work fell back to Opus while the account had credit (2026-10-22) | A relay's refusal whose body says its upstream failed (`RELAY_UPSTREAM_FAILED`, `pool.ts`) is transient whatever status it carries — 402 as well as 403 — and never a provider exhaustion (`health.ts`). A plain 402 or a body naming balance, billing or quota still is. |
 
 ### Router-owned automatic updates (2026-10-21)
 
@@ -1802,7 +1806,11 @@ before; a Wi-Fi elsewhere that happens to use the learned /24 reads as the hotsp
 can drop it only when another saved SSID is visible (visibility guard, 2026-10-21, below);
 `tether.pin` stops switching entirely. Failover (on Wi-Fi or no
 address, outage): wait at most 30s for an in-flight call, then `sudo -n networksetup
--setairportnetwork <dev> <NAME>` (macOS takes the password from the System keychain). The probe window
+-setairportnetwork <dev> <NAME>` (macOS takes the password from the System keychain). Switches are at
+least a minute apart, but a join that failed ("Failed to join network", or not visible) switched
+nothing, so it is tried again 10 s, 20 s, 30 s … later up to that minute: walking out of the office
+the first join came as the hotspot was only just in range, failed, and the Mac stayed offline for the
+rest of the minute (2026-10-22). Setup failures (sudo, profile, Location) still wait the minute. The probe window
 lives in the process, so it only works if the router is not restarted every few seconds while the
 machine is offline (§5, health self-exit refined 2026-10-20). networksetup
 reports failure on stdout and may exit 0, so its text decides: "Could not find network" →

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clauderipple",
-  "version": "0.12.5",
+  "version": "0.12.7",
   "description": "Use GPT (any ChatGPT plan with Codex), DeepSeek and 400+ other models in the Claude Desktop Code tab and Claude Code while staying signed in to your Claude subscription — no third-party gateway mode. Several ChatGPT accounts that take over when one runs out, in Codex too.",
   "license": "GPL-3.0-only",
   "workspaces": [