happy-stacks 0.6.8 → 0.6.10

package/docs/commit-audits/happy/leeroy-wip.commit-inventory.md

@@ -45,7 +45,7 @@ Progress tracking (update manually while auditing):
 - Next unreviewed commit: n/a (complete)
 - Pass 2 full-diff verification markers: `249/249` (each `## NNN` has a `Pass2FullDiff:` line; patch artifacts under `/tmp/leeroy-wip-pass2/NNN.patch`)
 - Pass 2 diff capture: `249/249` (`/tmp/leeroy-wip-pass2/NNN.patch` exists; hash/size recorded in each `Pass2FullDiff:` line)
-- Pass 2 notes verification (manual): `25/249` (this requires reading the patch and confirming/updating `### Manual Review Notes`)
+- Pass 2 notes verification (manual): `83/249` (this requires reading the patch and confirming/updating `### Manual Review Notes`)
 
 Current state (2026-01-24):
 

package/docs/commit-audits/happy/leeroy-wip.commit-manual-review.md

@@ -896,7 +896,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=21cc6df79f50 patchFile=/
 ---
 
 ## 026 2026-01-18 ce9cd74d408a `machine`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ce9cd74d408a patchFile=/tmp/leeroy-wip-pass2/026.patch patchSha256=9eb86cc637175c0ef4d31c6afa1cf75fd4466f1102c09b699aa4575dc94609a8 patchBytes=56472 patchLines=1341 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ce9cd74d408a patchFile=/tmp/leeroy-wip-pass2/026.patch patchSha256=9eb86cc637175c0ef4d31c6afa1cf75fd4466f1102c09b699aa4575dc94609a8 patchBytes=56472 patchLines=1341 notesReviewed=yes reviewedAt=2026-01-24T18:37:32+0100 notesUpdated=no
 
 - Subject: feat(machine): surface detected CLI status
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -935,7 +935,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ce9cd74d408a patchFile=/
 ---
 
 ## 027 2026-01-18 7899bbd8433e `profiles`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7899bbd8433e patchFile=/tmp/leeroy-wip-pass2/027.patch patchSha256=1d66ea8afae399b1edfb23f0f1eba7203a6aed9c625784e90764da0c29ddaeab patchBytes=95110 patchLines=1988 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7899bbd8433e patchFile=/tmp/leeroy-wip-pass2/027.patch patchSha256=1d66ea8afae399b1edfb23f0f1eba7203a6aed9c625784e90764da0c29ddaeab patchBytes=95110 patchLines=1988 notesReviewed=yes reviewedAt=2026-01-24T18:40:29+0100 notesUpdated=yes
 
 - Subject: feat(profiles): add API key requirements flow
 - Reasons: safety/security-sensitive area
@@ -964,6 +964,11 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7899bbd8433e patchFile=/
     - Adds `ProfileRequirementsBadge.tsx` and `useProfileEnvRequirements` integration in profile list UIs.
     - Updates `ProfilesList` / `profileListModel` to show requirement state and open the modal.
     - Updates profiles settings screen to use `ProfilesList` and pass `onApiKeyBadgePress`.
+  - Adds profile-side authoring UI for requirements:
+    - Introduces a reusable tile selector (`OptionTiles.tsx`) and uses it in `ProfileEditForm.tsx` to edit `authMode` (`none|apiKeyEnv|machineLogin`).
+    - For `authMode=apiKeyEnv`, allows editing the required secret env-var name (uppercased, validated against `^[A-Z_][A-Z0-9_]*$`).
+    - For `authMode=machineLogin`, integrates `useCLIDetection(..., { includeLoginStatus: true })` so the UI can display machine login state per backend when a preview machine is selected.
+      - Note: the current “Logged in / Not logged in” text is hardcoded (not `t(...)`) and should be localized in a clean history rewrite.
 - Security note: the design intentionally avoids fetching or displaying secret values when checking machine readiness; the only time a raw value enters UI memory is the “enter once” path, which uses `secureTextEntry` and returns the value to the caller.
 
 ### Verdict
@@ -981,7 +986,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7899bbd8433e patchFile=/
 ---
 
 ## 028 2026-01-18 0023ba1ea5aa `i18n`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=0023ba1ea5aa patchFile=/tmp/leeroy-wip-pass2/028.patch patchSha256=81df78affd393e71a4019a9053bb8432ff7bc0689c208e6e45b9d291f6fbdcc3 patchBytes=245409 patchLines=4739 notesReviewed=no reviewedAt=- notesUpdated=yes
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=0023ba1ea5aa patchFile=/tmp/leeroy-wip-pass2/028.patch patchSha256=81df78affd393e71a4019a9053bb8432ff7bc0689c208e6e45b9d291f6fbdcc3 patchBytes=245409 patchLines=4739 notesReviewed=yes reviewedAt=2026-01-24T18:44:46+0100 notesUpdated=yes
 
 - Subject: refactor(i18n): update translations and tooling
 - Reasons: large change (+2913/-143)
@@ -989,10 +994,22 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=0023ba1ea5aa patchFile=/
 ### Manual Review Notes
 
 - Expands translation coverage and improves i18n tooling:
-  - Updates `expo-app/sources/text/translations/*` across multiple locales with a large batch of new keys (net +2913/-143).
-  - Updates the translation comparison script `expo-app/sources/scripts/compareTranslations.ts` to include additional locales (adds `it` and `ja` to the comparison set and names map).
-  - Adds a new AST-based scanner script `expo-app/sources/scripts/findUntranslatedLiterals.ts` (tsx/TypeScript compiler API) to detect likely user-facing hardcoded strings in TS/TSX/JS/JSX files with reasonable ignore heuristics (URLs, env keys, ids, hex colors, etc.).
-- This commit is mostly “content + tooling”; it’s large, but it’s not a behavioral refactor in production runtime code beyond expanding translation tables and adding dev scripts.
+  - Updates `expo-app/sources/text/translations/*` across many locales with a large batch of keys (net +2913/-143).
+  - Updates `expo-app/sources/scripts/compareTranslations.ts`:
+    - includes `it` + `ja` in the translation set and language name map
+    - fixes missing newline at EOF
+  - Adds `expo-app/sources/scripts/findUntranslatedLiterals.ts` (AST-based, `tsx` shebang):
+    - Walks `expo-app/sources/**` and parses files via TypeScript compiler API.
+    - Reports likely user-facing string literals in:
+      - JSX text nodes (`<Text>Some string</Text>`)
+      - selected JSX attributes (e.g. `title`, `description`, `placeholder`, etc.)
+      - string args to likely UI calls (heuristic: `*.alert|confirm|prompt`, `Toast*`, `*Modal*`), excluding `t(...)` calls
+    - Uses ignore heuristics to suppress likely non-user-facing strings (URLs, env keys, ids/paths, hex colors, numeric strings, punctuation-only).
+    - Ignores translation files and scripts as scan targets to keep noise down; groups results by kind + literal and prints occurrences with context.
+- Translation content notes (from full diff):
+  - Adds UI copy for a lot of new surface area: machine refresh/rename/stop-daemon flows, session-type + profile selection flows, CLI-not-detected banners, action menu labels, voice assistant states, Zen screens, artifacts errors, API keys UI, and profile requirements/machine-login help text.
+  - Many locales still leave some newly introduced experimental feature subtitles in English (e.g. `expGeminiSubtitle`, `expUsageReporting*`, etc.). This commit improves coverage overall, but does not fully localize those strings.
+- This commit is large but remains “content + dev tooling”; runtime behavior changes are limited to updated strings and additional translation keys.
 
 ### Verdict
 
@@ -1008,7 +1025,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=0023ba1ea5aa patchFile=/
 ---
 
 ## 029 2026-01-18 12e75a3b36fa `autocomplete`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=12e75a3b36fa patchFile=/tmp/leeroy-wip-pass2/029.patch patchSha256=57c5e6fd7a385743a42b43fa45b1e5f0c44b6838324c98a2ce1bdba1b065b90b patchBytes=1469 patchLines=29 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=12e75a3b36fa patchFile=/tmp/leeroy-wip-pass2/029.patch patchSha256=57c5e6fd7a385743a42b43fa45b1e5f0c44b6838324c98a2ce1bdba1b065b90b patchBytes=1469 patchLines=29 notesReviewed=yes reviewedAt=2026-01-24T18:45:28+0100 notesUpdated=no
 
 - Subject: fix(autocomplete): remove debug suggestion logs
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1032,7 +1049,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=12e75a3b36fa patchFile=/
 ---
 
 ## 030 2026-01-18 679877c26ea9 `settings`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=679877c26ea9 patchFile=/tmp/leeroy-wip-pass2/030.patch patchSha256=66c3233690e649ede180f88795c4c1bf4f37c94fc7002111fe2d562f01e2cfd1 patchBytes=7337 patchLines=136 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=679877c26ea9 patchFile=/tmp/leeroy-wip-pass2/030.patch patchSha256=66c3233690e649ede180f88795c4c1bf4f37c94fc7002111fe2d562f01e2cfd1 patchBytes=7337 patchLines=136 notesReviewed=yes reviewedAt=2026-01-24T18:46:01+0100 notesUpdated=no
 
 - Subject: feat(settings): expose per-experiment toggles
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1060,7 +1077,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=679877c26ea9 patchFile=/
 ---
 
 ## 031 2026-01-18 4dc9c7f8759c `agent-input`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4dc9c7f8759c patchFile=/tmp/leeroy-wip-pass2/031.patch patchSha256=c738387880e6ad1b5393546c91d12cfe32ba1a05595053edbe8949de232e8e11 patchBytes=51158 patchLines=831 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4dc9c7f8759c patchFile=/tmp/leeroy-wip-pass2/031.patch patchSha256=c738387880e6ad1b5393546c91d12cfe32ba1a05595053edbe8949de232e8e11 patchBytes=51158 patchLines=831 notesReviewed=yes reviewedAt=2026-01-24T18:47:29+0100 notesUpdated=yes
 
 - Subject: feat(agent-input): add configurable action bar layout
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1069,12 +1086,20 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4dc9c7f8759c patchFile=/
 
 - Adds user-configurable “action bar layout” and “chip density” controls and wires them into the AgentInput layout:
   - `settings/appearance.tsx`:
+    - wraps screen in `React.memo(...)` (adds missing `React` import) and fixes missing newline at EOF.
     - adds UI rows that cycle through `agentInputActionBarLayout` (`auto|wrap|scroll|collapsed`) and `agentInputChipDensity` (`auto|labels|icons`).
   - `components/AgentInput.tsx`:
     - reads the new settings and derives effective layout based on screen width when `auto`.
     - adds support for “collapsed” layout mode (moves shortcuts into a compact row).
-    - improves scroll-layout reliability (always render ScrollView, enable/disable scrolling to avoid layout deadlocks).
+    - for “scroll” layout:
+      - always renders a horizontal `ScrollView` (even if not scrollable) so it can measure viewport/content widths (avoid “measurement deadlock”)
+      - enables/disables scrolling based on whether the chips overflow
+      - adds left/right gradient fades based on scroll position using `expo-linear-gradient` and `color` (computes a transparent version of the input background color)
     - adjusts rendering based on chip density to reduce width pressure.
+    - collapses action shortcuts into the settings overlay when `actionBarLayout=collapsed`, including:
+      - profile/env/agent/machine/path shortcuts
+      - file viewer (`agentInput.actionMenu.files`) and abort (`agentInput.actionMenu.stop`)
+    - removes the `connectionStatus.cliStatus` UI “CLI: claude✓ …” line (and removes `cliStatus` from the `connectionStatus` prop type).
 - Coherence: fits the subject (action bar layout + chip density).
 
 ### Verdict
@@ -1091,7 +1116,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4dc9c7f8759c patchFile=/
 ---
 
 ## 032 2026-01-18 e8e42a6087ad `modal`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e8e42a6087ad patchFile=/tmp/leeroy-wip-pass2/032.patch patchSha256=5e703a80cc8f7735a4b497cdcf15c3bcfb494780b2384d8980eb5c6133b8f00b patchBytes=10216 patchLines=231 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e8e42a6087ad patchFile=/tmp/leeroy-wip-pass2/032.patch patchSha256=5e703a80cc8f7735a4b497cdcf15c3bcfb494780b2384d8980eb5c6133b8f00b patchBytes=10216 patchLines=231 notesReviewed=yes reviewedAt=2026-01-24T18:48:18+0100 notesUpdated=yes
 
 - Subject: fix(modal): prevent stacked modal touch-blocking on iOS
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1109,6 +1134,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e8e42a6087ad patchFile=/
     - `ModalManager.show(...)` accepts `closeOnBackdrop`
     - `CustomModalConfig` documents it
     - `CustomModal` passes it to `BaseModal` and invokes an optional `onRequestClose` callback for cleanup before closing (safe dynamic check).
+- Minor cleanup note (for rewritten history): `BaseModal` uses `behavior={Platform.OS === 'web' ? undefined : ((Platform as any).OS === 'ios' ? 'padding' : 'height')}` which could likely be simplified to avoid the `(Platform as any)` escape hatch.
 - Coherence: strong; the subject matches and the changes are directly tied to stacked modal reliability.
 
 ### Verdict
@@ -1123,7 +1149,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e8e42a6087ad patchFile=/
 ---
 
 ## 033 2026-01-18 daa0b4527d7f `new-session`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=daa0b4527d7f patchFile=/tmp/leeroy-wip-pass2/033.patch patchSha256=df9457db150e945395c07246fa6b0e64771d9fbdd764092e42dbaaeefb97fb36 patchBytes=187624 patchLines=3256 notesReviewed=no reviewedAt=- notesUpdated=yes
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=daa0b4527d7f patchFile=/tmp/leeroy-wip-pass2/033.patch patchSha256=df9457db150e945395c07246fa6b0e64771d9fbdd764092e42dbaaeefb97fb36 patchBytes=187624 patchLines=3256 notesReviewed=yes reviewedAt=2026-01-24T18:52:09+0100 notesUpdated=yes
 
 - Subject: feat(new-session): add api key selection and wizard extraction
 - Reasons: large change (+1719/-1116)
@@ -1134,15 +1160,26 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=daa0b4527d7f patchFile=/
   - Adds `expo-app/sources/app/(app)/new/NewSessionWizard.tsx`:
     - Large extracted component with explicit prop groups (`layout`, `profiles`, `agent`, `machine`, `footer`) to separate rendering from orchestration/state in `new/index.tsx`.
     - Adds props for API key resolution state (`sessionOnlyApiKeyValue`, `selectedSavedApiKeyValue`, `apiKeyPreflightIsReady`) and a callback to open the requirement modal.
+    - Adds “missing CLI” banners (claude/codex/gemini), model selection, machine/path/permission selection, and optional session-type section; keeps `AgentInput` sticky with a top fade divider gradient.
   - Updates `expo-app/sources/app/(app)/new/index.tsx` to:
     - Own API key selection state (session-only vs saved key) and drive the wizard via props.
     - Provide `openApiKeyRequirementModal(...)` and manage “auto-prompt suppression” to avoid repeatedly nagging.
+    - Adds persisted `selectedApiKeyId` to the draft and introduces `apiKeys` + `defaultApiKeyByProfileId` settings usage; uses `selectedApiKeyId === ''` as an explicit “do not auto-apply default key” sentinel when the user chooses machine env / session-only.
+    - Adds spawn-time secret overlay injection: for `authMode=apiKeyEnv` profiles, if a saved key or session-only key is selected, injects it into `environmentVariables[requiredSecretEnvVarName]` before creating the session; errors if neither injected key nor machine env satisfies requirements.
+    - Improves iOS responsiveness:
+      - defers synchronous MMKV draft writes via `InteractionManager.runAfterInteractions` (and longer debounce delay on native)
+      - refreshes machines on focus (throttled) after interactions
+      - switches `useCLIDetection(selectedMachineId, { autoDetect: false })` and uses cache-prefetch helpers to avoid network work on tap handlers
+    - Removes `connectionStatus.cliStatus` usage (aligns with AgentInput removing that UI in commit 031).
   - Upgrades the profile picker `expo-app/sources/app/(app)/new/pick/profile.tsx` to support API-key gating:
     - Adds route-param plumbing to return `{ profileId, apiKeyId?, apiKeySessionOnlyId? }` to the previous screen.
     - For `authMode === 'apiKeyEnv'` profiles, it preflights the required secret on the selected machine using `machinePreviewEnv(...)` with `extraEnv` and `sensitiveKeys`.
     - If the machine lacks the key and no default saved key exists, it opens `ApiKeyRequirementModal`.
     - If a default saved key exists, it auto-applies it (still overrideable later).
     - For session-only keys, it stores the entered secret in temp storage and passes back a temp id.
+    - Refactors profile picker UI to reuse `ProfilesList` (instead of re-implementing favorites/custom/built-in grouping and row actions inline).
+  - Adjusts `expo-app/sources/components/newSession/ProfileCompatibilityIcon.tsx` so Gemini glyphs depend on `experiments && expGemini` (not just the master experiments toggle).
+- i18n/reliability note (for rewritten history): some user-facing strings in the extracted wizard remain hardcoded English (e.g. `MachineSelector` search placeholder `"Search machines..."`, permission-mode descriptions like `"Read-only mode"`, and the missing API key alert text). These should be moved to `t(...)` keys in the final cleaned history.
 - Coherence note: this commit logically stacks on top of the “profile requirements” work (required env var metadata, preview-env support, and ApiKeyRequirementModal).
 
 ### Verdict
@@ -1160,7 +1197,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=daa0b4527d7f patchFile=/
 ---
 
 ## 034 2026-01-18 94814465bf81 `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=94814465bf81 patchFile=/tmp/leeroy-wip-pass2/034.patch patchSha256=09e85cfc752e6ba9790b2a35f926bc0242b79eeba4b258d26079e985caece0a7 patchBytes=5326 patchLines=136 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=94814465bf81 patchFile=/tmp/leeroy-wip-pass2/034.patch patchSha256=09e85cfc752e6ba9790b2a35f926bc0242b79eeba4b258d26079e985caece0a7 patchBytes=5326 patchLines=136 notesReviewed=yes reviewedAt=2026-01-24T18:53:41+0100 notesUpdated=no
 
 - Subject: perf(sync): debounce pending settings writes
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1191,7 +1228,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=94814465bf81 patchFile=/
 ---
 
 ## 035 2026-01-18 7ffd0c3428cb `ui`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7ffd0c3428cb patchFile=/tmp/leeroy-wip-pass2/035.patch patchSha256=80e3faea4b996f40de251ffcb9a01d834711f4f7cd547a039bfff2017d11f59c patchBytes=1771 patchLines=39 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7ffd0c3428cb patchFile=/tmp/leeroy-wip-pass2/035.patch patchSha256=80e3faea4b996f40de251ffcb9a01d834711f4f7cd547a039bfff2017d11f59c patchBytes=1771 patchLines=39 notesReviewed=yes reviewedAt=2026-01-24T18:54:29+0100 notesUpdated=no
 
 - Subject: fix(ui): localize error alerts
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1216,7 +1253,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7ffd0c3428cb patchFile=/
 ---
 
 ## 036 2026-01-18 97ca69e0a735 `i18n`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=97ca69e0a735 patchFile=/tmp/leeroy-wip-pass2/036.patch patchSha256=d4e60307db035e91b99d59b7b132811586a8129b313005bf226fb69356c692b8 patchBytes=26606 patchLines=559 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=97ca69e0a735 patchFile=/tmp/leeroy-wip-pass2/036.patch patchSha256=d4e60307db035e91b99d59b7b132811586a8129b313005bf226fb69356c692b8 patchBytes=26606 patchLines=559 notesReviewed=yes reviewedAt=2026-01-24T18:55:47+0100 notesUpdated=yes
 
 - Subject: refactor(i18n): replace remaining UI literals
 - Reasons: safety/security-sensitive area
@@ -1226,6 +1263,9 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=97ca69e0a735 patchFile=/
 - Replaces remaining hard-coded UI strings with translation keys across multiple screens/components (19 files; small diff):
   - General UI empty states / connect flows / command palette / message view / voice status bar / markdown renderers / usage chart.
   - Notable safety-adjacent change: `expo-app/sources/utils/microphonePermissions.ts` now uses `t(...)` for permission-denied alerts (titles, body, and button labels) including web-specific instructions.
+- Coherence note: despite the i18n-only subject, this commit also changes behavior in `expo-app/sources/components/MessageView.tsx`:
+  - thinking messages are now hidden unless `experiments && expShowThinkingMessages` (previously gated only by `experiments`).
+  - In a rewritten history, this should likely be split so the per-experiment gating change lands with the rest of the experiments-toggle wiring (e.g. commits 024/030), not inside an i18n sweep.
 - No functional behavior change intended beyond string sources; correctness depends on translation keys existing and being accurate.
 
 ### Verdict
@@ -1240,7 +1280,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=97ca69e0a735 patchFile=/
 ---
 
 ## 037 2026-01-18 5f5b57df5181 `ui`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=5f5b57df5181 patchFile=/tmp/leeroy-wip-pass2/037.patch patchSha256=61cb1063e70f82b42af8fb8dfedb96e14fb3153f000de76a2ccbd9dabbc5c326 patchBytes=6661 patchLines=145 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=5f5b57df5181 patchFile=/tmp/leeroy-wip-pass2/037.patch patchSha256=61cb1063e70f82b42af8fb8dfedb96e14fb3153f000de76a2ccbd9dabbc5c326 patchBytes=6661 patchLines=145 notesReviewed=yes reviewedAt=2026-01-24T18:57:14+0100 notesUpdated=no
 
 - Subject: refactor(ui): improve item rendering and action menu timing
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1271,7 +1311,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=5f5b57df5181 patchFile=/
 ---
 
 ## 038 2026-01-18 7976b877259c `experiments`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7976b877259c patchFile=/tmp/leeroy-wip-pass2/038.patch patchSha256=81f96664a2da5fe1b098d2d3765dea96084948a68ec8bbd952ae7cd9b553a03a patchBytes=12038 patchLines=243 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7976b877259c patchFile=/tmp/leeroy-wip-pass2/038.patch patchSha256=81f96664a2da5fe1b098d2d3765dea96084948a68ec8bbd952ae7cd9b553a03a patchBytes=12038 patchLines=243 notesReviewed=yes reviewedAt=2026-01-24T19:02:45+0100 notesUpdated=no
 
 - Subject: feat(experiments): gate Zen, file viewer, and voice auth flow
 - Reasons: safety/security-sensitive area
@@ -1316,7 +1356,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7976b877259c patchFile=/
 ---
 
 ## 039 2026-01-21 6ed379f82c34 `ui`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=6ed379f82c34 patchFile=/tmp/leeroy-wip-pass2/039.patch patchSha256=3ae4cad6fe7c831b911c1cb57135fbc7f0688022de1a42e0249e1980bb3e81da patchBytes=260667 patchLines=6344 notesReviewed=no reviewedAt=- notesUpdated=yes
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=6ed379f82c34 patchFile=/tmp/leeroy-wip-pass2/039.patch patchSha256=3ae4cad6fe7c831b911c1cb57135fbc7f0688022de1a42e0249e1980bb3e81da patchBytes=260667 patchLines=6344 notesReviewed=yes reviewedAt=2026-01-24T19:06:52+0100 notesUpdated=no
 
 - Subject: refactor(ui): add modal + popover overlay primitives
 - Reasons: too many files (43)
@@ -1383,7 +1423,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=6ed379f82c34 patchFile=/
 ---
 
 ## 040 2026-01-21 f0787de5308e `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f0787de5308e patchFile=/tmp/leeroy-wip-pass2/040.patch patchSha256=33c95731c921933829af09309c46e15d2de6d068618cf82ec5d1088cba2d8d84 patchBytes=184734 patchLines=4333 notesReviewed=no reviewedAt=- notesUpdated=yes
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f0787de5308e patchFile=/tmp/leeroy-wip-pass2/040.patch patchSha256=33c95731c921933829af09309c46e15d2de6d068618cf82ec5d1088cba2d8d84 patchBytes=184734 patchLines=4333 notesReviewed=yes reviewedAt=2026-01-24T19:11:23+0100 notesUpdated=yes
 
 - Subject: feat(sync): add secrets + terminal settings primitives
 - Reasons: too many files (60); safety/security-sensitive area
@@ -1418,13 +1458,26 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f0787de5308e patchFile=/
   - **Cross-platform crypto shims (node/vitest-safe)**
     - Adds `platform/*.{ts,node.ts}` shims for `cryptoRandom`, `digest`, `hmacSha512`, and `randomUUID` so code can run in vitest/node without static `expo-crypto` imports.
     - Updates `utils/oauth.ts` PKCE generation to use the shims (`digest('SHA-256', ...)` etc).
+    - Migrates several existing crypto call sites (AES/Base64 app specs, libsodium helper, artifact encryption) from `expo-crypto` static imports to the platform shims.
+  - **API/client error typing (HappyError)**
+    - Extends `utils/errors.ts` (`HappyError`) with optional `status` and `kind` to support richer UX + sync retry policy.
+    - Updates multiple API modules (`apiArtifacts`, `apiFeed`, `apiFriends`, `apiGithub`, `apiKv`, `apiPush`, `apiServices`, `apiUsage`) to throw non-retryable `HappyError(...)` for most 4xx responses (excluding `408` and `429`), and to preserve “auth/config” kinds where it’s known (notably GitHub + usage endpoints).
   - **Sync reliability / observability additions**
     - `sync/sync.ts` + `sync/storage.ts`: adds `syncError` state, socket error fields, and a `lastSyncAt` timestamp; wires `InvalidateSync` hooks to set/clear error state and retry metadata.
     - `sync/debugSettings.ts` + settingsParse logging: adds optional debug logging for settings parse/apply flows.
     - `applySettings` now avoids no-op writes by shallowly checking whether the delta changes references/scalars before persisting.
+    - `apiSocket`: adds explicit `onError` listeners and clears last error on successful connect; `syncInit` wires socket errors into `syncError`.
+    - `utils/time.ts` + `utils/sync.ts`: extends `createBackoff` with `shouldRetry` + `onRetry` hooks (and safer backoff math), and reworks `InvalidateSync` / `ValueSync` to use backoff with explicit onSuccess/onError/onRetry reporting (avoids deadlocking the invalidation queue on non-retryable errors).
+  - **Terminal metadata + helpers**
+    - `storageTypes.ts`: extends `MetadataSchema` with a `terminal` payload (`plain|tmux`, requested mode, fallback reason, tmux target/tmpDir) and adds a parsing test.
+    - Adds `utils/terminalSessionDetails.ts` (+ tests) for deriving attach commands and tmux-specific metadata in the UI.
   - **Notable schema/migration shifts**
     - `sync/settings.ts`: drops support for legacy provider config objects (e.g. `openaiConfig`, `anthropicConfig`) by removing the normalization/migration step; profiles are expected to use `environmentVariables` + `envVarRequirements`.
     - `getProfileEnvironmentVariables` no longer injects tmux env vars; terminal spawning is now driven by terminal settings (global/per-machine), not profile tmux config.
+    - `AIBackendProfileSchema`: removes the `apiKeyEnv` authMode and drops per-profile `tmuxConfig`; profiles now express runtime requirements only via `envVarRequirements` (with `required`), and terminal spawning is controlled by the terminal settings primitives.
+  - **Misc wiring changes**
+    - `profileRouteParams.ts`: renames `consumeApiKeyIdParam` → `consumeSecretIdParam` to match the secrets UI routing.
+    - `sync/reducer.ts`: compares `allowedTools` arrays with “empty-equivalence” semantics (`undefined` / `null` / `[]`) to reduce false-positive updates; tests updated to assert “no duplicates” instead of “no updates”.
 - Risk notes:
   - Secrets safety hinges on `settingsSecretsKey` being available: `sealSecretsDeep` is a no-op when the key is null. This is probably correct for “not authenticated yet” states, but it means UI flows should avoid accepting/committing secrets until the key exists (or ensure key derivation always succeeds for authenticated users).
   - The removal of legacy provider config migration should be validated against any existing persisted settings formats before upstreaming (it’s a behavior compatibility change).
@@ -1452,7 +1505,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f0787de5308e patchFile=/
 ---
 
 ## 041 2026-01-21 66ee1eaf88a6 `secrets`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66ee1eaf88a6 patchFile=/tmp/leeroy-wip-pass2/041.patch patchSha256=afe787a1ab3f76435191f29d469da5336cc1cdbd7be45b44dbf894bd27538a4e patchBytes=285675 patchLines=5209 notesReviewed=no reviewedAt=- notesUpdated=yes
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66ee1eaf88a6 patchFile=/tmp/leeroy-wip-pass2/041.patch patchSha256=afe787a1ab3f76435191f29d469da5336cc1cdbd7be45b44dbf894bd27538a4e patchBytes=285675 patchLines=5209 notesReviewed=yes reviewedAt=2026-01-24T19:17:58+0100 notesUpdated=yes
 
 - Subject: feat(secrets): add secrets management + requirement resolver
 - Reasons: too many files (29); safety/security-sensitive area
@@ -1491,6 +1544,8 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66ee1eaf88a6 patchFile=/
     - Minor theme token tweaks to support the new UI.
   - **Other notable changes mixed in**
     - `settings/features.tsx` is reorganized (standard toggles first, experiments last) and introduces web-only toggles for “enter to send” and “command palette”. This is plausibly related, but it’s still a separate “settings UX” concern that may be worth splitting during rewrite.
+    - `hooks/useEnvironmentVariables.ts` switches to `useLayoutEffect` (web) to ensure `isLoading=true` flips before consumer `useEffect` runs, preventing a “missing secret” race; adds a focused hook test.
+    - `components/profiles/*`: adds `getProfileDisplayName` (built-in profiles use localized names), changes badge behavior via `ProfileRequirementsBadge` overrides, and updates row actions/popovers (`pinnedActionIds`, `popoverBoundaryRef`) plus item-actions type imports (`components/itemActions/types`).
 - Risk notes:
   - This is security-sensitive UX: it must uphold the invariant “never re-display secret values after entry” and avoid persisting plaintext. The design pushes toward that (vault disables fallback entry; machine presence checks are value-free), but it’s worth keeping this commit tightly grouped with the underlying secret-sealing primitives and any follow-up bugfixes (there are several later fixes in the queue).
   - The new requirementVarName logic in `EnvironmentVariableCard` correctly applies requirements to the *source* env var when using template indirection (e.g. `${SOURCE_VAR}`), which is subtle and important for correctness.
@@ -1517,7 +1572,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66ee1eaf88a6 patchFile=/
 ---
 
 ## 042 2026-01-21 bdaf6913141f `terminal`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bdaf6913141f patchFile=/tmp/leeroy-wip-pass2/042.patch patchSha256=87ea409cf0f61ce99cb5597c0bf5cd02cdf225bfe9bea9f1451c10ea3bc92986 patchBytes=39225 patchLines=826 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bdaf6913141f patchFile=/tmp/leeroy-wip-pass2/042.patch patchSha256=87ea409cf0f61ce99cb5597c0bf5cd02cdf225bfe9bea9f1451c10ea3bc92986 patchBytes=39225 patchLines=826 notesReviewed=yes reviewedAt=2026-01-24T19:20:11+0100 notesUpdated=yes
 
 - Subject: feat(terminal): add Terminal settings + tmux metadata
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1532,6 +1587,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bdaf6913141f patchFile=/
   - Updates `SettingsView`:
     - replaces/renames the entry to “Terminal”
     - shows an enabled/disabled subtitle driven by `terminalUseTmux`.
+    - Also tightens GitHub connect UX: when `getGitHubOAuthParams` throws a non-retryable `HappyError`, it surfaces the message as the subtitle and disables the connect action.
 - Extends CLI detection and machine details to include tmux:
   - `hooks/useCLIDetection.ts` now includes `tmux` availability (boolean|null) and can surface tmux in the `detect-cli` response when present; older daemons treat missing tmux as unknown.
   - Adds `useCLIDetection.hook.test.ts` to validate:
@@ -1540,6 +1596,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bdaf6913141f patchFile=/
     - fallback bash probing includes a tmux `command -v tmux` check.
   - `components/machine/DetectedClisList.tsx` is updated to render tmux as an entry when provided.
   - Machine details screen adds tmux visibility/override controls (including a machine-specific override map keyed by machine id) and guards enabling tmux when it is not detected.
+  - Machine details “spawn session” now passes `terminal` spawn options via `resolveTerminalSpawnOptions({ settings, machineId })` into `machineSpawnNewSession(...)` (so machine-scoped overrides actually affect session creation from this screen).
 - Surfaces tmux spawn/attach metadata in session details:
   - Session info UI adds fields to display tmux attach target and a fallback reason (useful for debugging resume workflows).
 - Coherence: the commit body accurately describes the changes; most changes are within the terminal/tmux feature area.
@@ -1559,7 +1616,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bdaf6913141f patchFile=/
 ---
 
 ## 043 2026-01-21 bc779e4f7909 `new-session`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bc779e4f7909 patchFile=/tmp/leeroy-wip-pass2/043.patch patchSha256=056ec1d2a238bf9e0dcebd172b7a1ee7e61faa2f118f3b8c21a224abf61de5f2 patchBytes=135229 patchLines=2803 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bc779e4f7909 patchFile=/tmp/leeroy-wip-pass2/043.patch patchSha256=056ec1d2a238bf9e0dcebd172b7a1ee7e61faa2f118f3b8c21a224abf61de5f2 patchBytes=135229 patchLines=2803 notesReviewed=yes reviewedAt=2026-01-24T19:27:57+0100 notesUpdated=yes
 
 - Subject: refactor(new-session): integrate secrets + terminal spawn options
 - Reasons: safety/security-sensitive area
@@ -1599,6 +1656,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bc779e4f7909 patchFile=/
   - `useSearch` now returns `{ error }` and uses bounded retries with requestId cancellation to avoid infinite background retries; friends search surfaces the error message.
   - Auth helpers (`authChallenge`, `authQRStart`, app index) switch random byte generation to the new `platform/cryptoRandom` shim.
   - `MainView` swaps inline status logic for `ConnectionStatusControl` (new UI primitive from the overlays work).
+  - Sidebar/UI polish: `SidebarView` wraps in `PopoverBoundaryProvider`, replaces inline socket status UI with `ConnectionStatusControl`, and adds a retry/restore banner when sync/socket errors occur; `OptionTiles` gains a `disabled` option (with opacity/press guards).
 
 ### Verdict
 
@@ -1623,7 +1681,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bc779e4f7909 patchFile=/
 ---
 
 ## 044 2026-01-21 cb11d4bdb25a `docs`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cb11d4bdb25a patchFile=/tmp/leeroy-wip-pass2/044.patch patchSha256=d02b7bee3e56cf79b47b394f3645988462e7bc567333891fb5a54f9b1f614bdf patchBytes=7661 patchLines=118 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cb11d4bdb25a patchFile=/tmp/leeroy-wip-pass2/044.patch patchSha256=d02b7bee3e56cf79b47b394f3645988462e7bc567333891fb5a54f9b1f614bdf patchBytes=7661 patchLines=118 notesReviewed=yes reviewedAt=2026-01-24T19:28:37+0100 notesUpdated=no
 
 - Subject: docs: add AGENTS.md symlink + update CLAUDE.md
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1649,7 +1707,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cb11d4bdb25a patchFile=/
 ---
 
 ## 045 2026-01-21 1bc3b9715776 `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=1bc3b9715776 patchFile=/tmp/leeroy-wip-pass2/045.patch patchSha256=677cf555e52a3c402aada9d454ccf354ebe2586511aea82db752f7ae257c2358 patchBytes=3116 patchLines=84 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=1bc3b9715776 patchFile=/tmp/leeroy-wip-pass2/045.patch patchSha256=677cf555e52a3c402aada9d454ccf354ebe2586511aea82db752f7ae257c2358 patchBytes=3116 patchLines=84 notesReviewed=yes reviewedAt=2026-01-24T19:29:06+0100 notesUpdated=no
 
 - Subject: fix(sync): handle non-JSON 400 responses
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1676,7 +1734,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=1bc3b9715776 patchFile=/
 ---
 
 ## 046 2026-01-21 ea2e4d19d633 `deps`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ea2e4d19d633 patchFile=/tmp/leeroy-wip-pass2/046.patch patchSha256=56d31e16958294810504afab058b72991c083212c0a3f8aeae3db8490c255d00 patchBytes=2141 patchLines=54 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ea2e4d19d633 patchFile=/tmp/leeroy-wip-pass2/046.patch patchSha256=56d31e16958294810504afab058b72991c083212c0a3f8aeae3db8490c255d00 patchBytes=2141 patchLines=54 notesReviewed=yes reviewedAt=2026-01-24T19:29:31+0100 notesUpdated=no
 
 - Subject: chore(deps): align react-test-renderer with react
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1699,7 +1757,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ea2e4d19d633 patchFile=/
 ---
 
 ## 047 2026-01-21 dd041d21ecfc `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=dd041d21ecfc patchFile=/tmp/leeroy-wip-pass2/047.patch patchSha256=792389c9c15b60f99358c4b7d9feed9f15a4debd0b5fbaf9acdbd970342fed78 patchBytes=5691 patchLines=147 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=dd041d21ecfc patchFile=/tmp/leeroy-wip-pass2/047.patch patchSha256=792389c9c15b60f99358c4b7d9feed9f15a4debd0b5fbaf9acdbd970342fed78 patchBytes=5691 patchLines=147 notesReviewed=yes reviewedAt=2026-01-24T19:30:12+0100 notesUpdated=no
 
 - Subject: fix(sync): guard JSON parsing on disconnect errors
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1727,7 +1785,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=dd041d21ecfc patchFile=/
 ---
 
 ## 048 2026-01-21 395da4ff3167 `zen`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=395da4ff3167 patchFile=/tmp/leeroy-wip-pass2/048.patch patchSha256=428a760c29ed02bd7fd265fa22ad4393f4aa9cfaf3ff3d883d17911ef5e37e34 patchBytes=1153 patchLines=27 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=395da4ff3167 patchFile=/tmp/leeroy-wip-pass2/048.patch patchSha256=428a760c29ed02bd7fd265fa22ad4393f4aa9cfaf3ff3d883d17911ef5e37e34 patchBytes=1153 patchLines=27 notesReviewed=yes reviewedAt=2026-01-24T19:30:36+0100 notesUpdated=no
 
 - Subject: refactor(zen): avoid todo variable shadowing
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1749,7 +1807,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=395da4ff3167 patchFile=/
 ---
 
 ## 049 2026-01-21 2e956f32f220 `new`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2e956f32f220 patchFile=/tmp/leeroy-wip-pass2/049.patch patchSha256=f7fcfdf43ac24be5936137b84318c1fd819003a1f314b111adcfeba3f46e0475 patchBytes=39497 patchLines=974 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2e956f32f220 patchFile=/tmp/leeroy-wip-pass2/049.patch patchSha256=f7fcfdf43ac24be5936137b84318c1fd819003a1f314b111adcfeba3f46e0475 patchBytes=39497 patchLines=974 notesReviewed=yes reviewedAt=2026-01-24T19:31:37+0100 notesUpdated=no
 
 - Subject: fix(new): keep pick screens above iOS modal
 - Reasons: safety/security-sensitive area
@@ -1782,7 +1840,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2e956f32f220 patchFile=/
 ---
 
 ## 050 2026-01-21 2da2f9349ec5 `popover`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2da2f9349ec5 patchFile=/tmp/leeroy-wip-pass2/050.patch patchSha256=528033ab018e1175a1abed29c9b3239d2c2eea51d18cee907707829ad0593521 patchBytes=3016 patchLines=48 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2da2f9349ec5 patchFile=/tmp/leeroy-wip-pass2/050.patch patchSha256=528033ab018e1175a1abed29c9b3239d2c2eea51d18cee907707829ad0593521 patchBytes=3016 patchLines=48 notesReviewed=yes reviewedAt=2026-01-24T19:32:04+0100 notesUpdated=no
 
 - Subject: fix(popover): allow web fixed positioning types
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1811,7 +1869,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2da2f9349ec5 patchFile=/
 ---
 
 ## 051 2026-01-21 43f23f2f082e `format`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=43f23f2f082e patchFile=/tmp/leeroy-wip-pass2/051.patch patchSha256=7c584fabdf4202d4ea83a309226e0fd7160771f8ccd65089c171e10c5c4f8674 patchBytes=3206 patchLines=82 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=43f23f2f082e patchFile=/tmp/leeroy-wip-pass2/051.patch patchSha256=7c584fabdf4202d4ea83a309226e0fd7160771f8ccd65089c171e10c5c4f8674 patchBytes=3206 patchLines=82 notesReviewed=yes reviewedAt=2026-01-24T19:32:27+0100 notesUpdated=no
 
 - Subject: chore(format): replace stray tabs with spaces
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1838,7 +1896,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=43f23f2f082e patchFile=/
 ---
 
 ## 052 2026-01-21 e1d55fdbd9ee `i18n`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e1d55fdbd9ee patchFile=/tmp/leeroy-wip-pass2/052.patch patchSha256=37114d44d75a7a9196bb9a2dc65e0a06dd3772e32188cfaa80d83a38b08936d0 patchBytes=2064 patchLines=40 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e1d55fdbd9ee patchFile=/tmp/leeroy-wip-pass2/052.patch patchSha256=37114d44d75a7a9196bb9a2dc65e0a06dd3772e32188cfaa80d83a38b08936d0 patchBytes=2064 patchLines=40 notesReviewed=yes reviewedAt=2026-01-24T19:32:51+0100 notesUpdated=no
 
 - Subject: fix(i18n): improve untranslated literal scan parsing
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1865,7 +1923,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e1d55fdbd9ee patchFile=/
 ---
 
 ## 053 2026-01-21 c210c1115598 `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c210c1115598 patchFile=/tmp/leeroy-wip-pass2/053.patch patchSha256=fcc3390b3405216d1626e828703be21bfaf1dd90d3c6382756e29b77390f4828 patchBytes=1106 patchLines=29 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c210c1115598 patchFile=/tmp/leeroy-wip-pass2/053.patch patchSha256=fcc3390b3405216d1626e828703be21bfaf1dd90d3c6382756e29b77390f4828 patchBytes=1106 patchLines=29 notesReviewed=yes reviewedAt=2026-01-24T19:33:20+0100 notesUpdated=no
 
 - Subject: test(sync): restore stubbed fetch between tests
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1892,7 +1950,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c210c1115598 patchFile=/
 ---
 
 ## 054 2026-01-21 66c678451335 `ui`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66c678451335 patchFile=/tmp/leeroy-wip-pass2/054.patch patchSha256=8ef52fb7589c3b292d7a1eba66f35710fc0471b938034409381ee0401ae2da85 patchBytes=8880 patchLines=191 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66c678451335 patchFile=/tmp/leeroy-wip-pass2/054.patch patchSha256=8ef52fb7589c3b292d7a1eba66f35710fc0471b938034409381ee0401ae2da85 patchBytes=8880 patchLines=191 notesReviewed=yes reviewedAt=2026-01-24T19:33:50+0100 notesUpdated=no
 
 - Subject: fix(ui): apply small review fixes
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1927,7 +1985,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=66c678451335 patchFile=/
 ---
 
 ## 055 2026-01-21 2472b376775c `modal`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2472b376775c patchFile=/tmp/leeroy-wip-pass2/055.patch patchSha256=e3dd966bbbd9e34eeb832e502d4f13767f031955315a7ff627dd657fe58fe726 patchBytes=1127 patchLines=24 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2472b376775c patchFile=/tmp/leeroy-wip-pass2/055.patch patchSha256=e3dd966bbbd9e34eeb832e502d4f13767f031955315a7ff627dd657fe58fe726 patchBytes=1127 patchLines=24 notesReviewed=yes reviewedAt=2026-01-24T20:01:38+0100 notesUpdated=no
 
 - Subject: test(modal): make backdrop z-index assertion safer
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1954,7 +2012,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2472b376775c patchFile=/
 ---
 
 ## 056 2026-01-21 02450d179aaf `profiles`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=02450d179aaf patchFile=/tmp/leeroy-wip-pass2/056.patch patchSha256=ebf5a695b86c41c4206d012607f796f807d86cf30fffdbcdf2a9bd00cc44ba6e patchBytes=1242 patchLines=26 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=02450d179aaf patchFile=/tmp/leeroy-wip-pass2/056.patch patchSha256=ebf5a695b86c41c4206d012607f796f807d86cf30fffdbcdf2a9bd00cc44ba6e patchBytes=1242 patchLines=26 notesReviewed=yes reviewedAt=2026-01-24T20:02:13+0100 notesUpdated=no
 
 - Subject: fix(profiles): align experimentsEnabled for built-in profiles
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -1982,7 +2040,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=02450d179aaf patchFile=/
 ---
 
 ## 057 2026-01-21 ff7bec72358f `secrets`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ff7bec72358f patchFile=/tmp/leeroy-wip-pass2/057.patch patchSha256=f833cd26ae6c7c72e2ccdf89cd904485fb84d23f610c9930e30b4e385b138dc8 patchBytes=5039 patchLines=117 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ff7bec72358f patchFile=/tmp/leeroy-wip-pass2/057.patch patchSha256=f833cd26ae6c7c72e2ccdf89cd904485fb84d23f610c9930e30b4e385b138dc8 patchBytes=5039 patchLines=117 notesReviewed=yes reviewedAt=2026-01-24T20:02:41+0100 notesUpdated=no
 
 - Subject: fix(secrets): tighten callback deps and fix indentation
 - Reasons: safety/security-sensitive area
@@ -2009,7 +2067,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=ff7bec72358f patchFile=/
 ---
 
 ## 058 2026-01-21 1bb65f5dd494 `new-session`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=1bb65f5dd494 patchFile=/tmp/leeroy-wip-pass2/058.patch patchSha256=12b9a312227605d1ea0d8240e4e17af44c7a086708cc93c3324d749e80105e20 patchBytes=1587 patchLines=34 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=1bb65f5dd494 patchFile=/tmp/leeroy-wip-pass2/058.patch patchSha256=12b9a312227605d1ea0d8240e4e17af44c7a086708cc93c3324d749e80105e20 patchBytes=1587 patchLines=34 notesReviewed=yes reviewedAt=2026-01-24T20:03:11+0100 notesUpdated=no
 
 - Subject: fix(new-session): avoid stuck secret requirement modal guard
 - Reasons: safety/security-sensitive area
@@ -2036,7 +2094,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=1bb65f5dd494 patchFile=/
 ---
 
 ## 059 2026-01-21 f7f81497444d `modal`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f7f81497444d patchFile=/tmp/leeroy-wip-pass2/059.patch patchSha256=de24ba6a9db7bcf2b17709c54824a22ef25633a072ed5f88997a830411be70e8 patchBytes=25402 patchLines=574 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f7f81497444d patchFile=/tmp/leeroy-wip-pass2/059.patch patchSha256=de24ba6a9db7bcf2b17709c54824a22ef25633a072ed5f88997a830411be70e8 patchBytes=25402 patchLines=574 notesReviewed=yes reviewedAt=2026-01-24T20:04:08+0100 notesUpdated=no
 
 - Subject: fix(modal): prevent non-dismissible WebAlertModal
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2085,7 +2143,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=f7f81497444d patchFile=/
 ---
 
 ## 060 2026-01-22 bb09f91de715 `settings`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bb09f91de715 patchFile=/tmp/leeroy-wip-pass2/060.patch patchSha256=50913ce23f328820d8efa6165396c538c34abe2bab12661a2f7ba2c706c1bbd9 patchBytes=2955 patchLines=74 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bb09f91de715 patchFile=/tmp/leeroy-wip-pass2/060.patch patchSha256=50913ce23f328820d8efa6165396c538c34abe2bab12661a2f7ba2c706c1bbd9 patchBytes=2955 patchLines=74 notesReviewed=yes reviewedAt=2026-01-24T20:04:42+0100 notesUpdated=no
 
 - Subject: fix(settings): keep valid secrets when one entry is invalid
 - Reasons: safety/security-sensitive area
@@ -2114,7 +2172,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=bb09f91de715 patchFile=/
 ---
 
 ## 061 2026-01-22 765423af52b4 `agent-input`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=765423af52b4 patchFile=/tmp/leeroy-wip-pass2/061.patch patchSha256=4a1ce74a09d5c2f1cdbeddeac4e823dcd4bd37faa8f6a2ee17bb6f0f544ac920 patchBytes=6745 patchLines=114 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=765423af52b4 patchFile=/tmp/leeroy-wip-pass2/061.patch patchSha256=4a1ce74a09d5c2f1cdbeddeac4e823dcd4bd37faa8f6a2ee17bb6f0f544ac920 patchBytes=6745 patchLines=114 notesReviewed=yes reviewedAt=2026-01-24T20:05:10+0100 notesUpdated=no
 
 - Subject: fix(agent-input): cycle permission mode from normalized state
 - Reasons: safety/security-sensitive area
@@ -2143,7 +2201,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=765423af52b4 patchFile=/
 ---
 
 ## 062 2026-01-22 e533db1813a5 `popover`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e533db1813a5 patchFile=/tmp/leeroy-wip-pass2/062.patch patchSha256=06650937b0fb3c66a48f1cb6a678ceadfc1a0bcbe43b3eebb02183d52f85641a patchBytes=4238 patchLines=69 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e533db1813a5 patchFile=/tmp/leeroy-wip-pass2/062.patch patchSha256=06650937b0fb3c66a48f1cb6a678ceadfc1a0bcbe43b3eebb02183d52f85641a patchBytes=4238 patchLines=69 notesReviewed=yes reviewedAt=2026-01-24T20:05:39+0100 notesUpdated=no
 
 - Subject: fix(popover): add screens cjs helper and fix fixed positioning types
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2173,7 +2231,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e533db1813a5 patchFile=/
 ---
 
 ## 063 2026-01-22 2ed3100311c7 `secrets`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2ed3100311c7 patchFile=/tmp/leeroy-wip-pass2/063.patch patchSha256=7b77ffb2a149148d1285b141b086978059d6a5debd57819b4f67b2e0e364615a patchBytes=14045 patchLines=227 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2ed3100311c7 patchFile=/tmp/leeroy-wip-pass2/063.patch patchSha256=7b77ffb2a149148d1285b141b086978059d6a5debd57819b4f67b2e0e364615a patchBytes=14045 patchLines=227 notesReviewed=yes reviewedAt=2026-01-24T20:06:18+0100 notesUpdated=no
 
 - Subject: fix(secrets): hide values when using secret vault
 - Reasons: safety/security-sensitive area
@@ -2205,7 +2263,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=2ed3100311c7 patchFile=/
 ---
 
 ## 064 2026-01-22 e5848c480522 `ui`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e5848c480522 patchFile=/tmp/leeroy-wip-pass2/064.patch patchSha256=922df47b48ab85bc86e1c6a755752947ed57ec0590af7b2aec084420ff2c16f0 patchBytes=16134 patchLines=400 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e5848c480522 patchFile=/tmp/leeroy-wip-pass2/064.patch patchSha256=922df47b48ab85bc86e1c6a755752947ed57ec0590af7b2aec084420ff2c16f0 patchBytes=16134 patchLines=400 notesReviewed=yes reviewedAt=2026-01-24T20:07:04+0100 notesUpdated=no
 
 - Subject: fix(ui): harden overlays and permission cycling
 - Reasons: safety/security-sensitive area
@@ -2246,7 +2304,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=e5848c480522 patchFile=/
 ---
 
 ## 065 2026-01-13 69fdcff96a4c `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=69fdcff96a4c patchFile=/tmp/leeroy-wip-pass2/065.patch patchSha256=20a7e9d9f2e6a834cd2c443d87fe87477985fb632f02551837797f48a915583c patchBytes=7673 patchLines=130 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=69fdcff96a4c patchFile=/tmp/leeroy-wip-pass2/065.patch patchSha256=20a7e9d9f2e6a834cd2c443d87fe87477985fb632f02551837797f48a915583c patchBytes=7673 patchLines=130 notesReviewed=yes reviewedAt=2026-01-24T20:07:37+0100 notesUpdated=no
 
 - Subject: fix(sync): restore session permission mode from last message
 - Reasons: safety/security-sensitive area
@@ -2278,7 +2336,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=69fdcff96a4c patchFile=/
 ---
 
 ## 066 2026-01-13 9b499c5dccce `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b499c5dccce patchFile=/tmp/leeroy-wip-pass2/066.patch patchSha256=f2d632496716cf934e43cf3a03bef46afcb73ba62a6d3898a6c1f54135484763 patchBytes=7448 patchLines=128 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b499c5dccce patchFile=/tmp/leeroy-wip-pass2/066.patch patchSha256=f2d632496716cf934e43cf3a03bef46afcb73ba62a6d3898a6c1f54135484763 patchBytes=7448 patchLines=128 notesReviewed=yes reviewedAt=2026-01-24T20:08:03+0100 notesUpdated=no
 
 - Subject: fix(sync): persist permission mode timestamp for restart-safe arbitration
 - Reasons: safety/security-sensitive area
@@ -2311,7 +2369,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b499c5dccce patchFile=/
 ---
 
 ## 067 2026-01-13 def8852509d0 `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=def8852509d0 patchFile=/tmp/leeroy-wip-pass2/067.patch patchSha256=243a4d97d0be485870473f3400dcddaf3f3c612ab127a56750817644b72cc042 patchBytes=20586 patchLines=422 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=def8852509d0 patchFile=/tmp/leeroy-wip-pass2/067.patch patchSha256=243a4d97d0be485870473f3400dcddaf3f3c612ab127a56750817644b72cc042 patchBytes=20586 patchLines=422 notesReviewed=yes reviewedAt=2026-01-24T20:09:07+0100 notesUpdated=no
 
 - Subject: fix(sync): persist permission mode reliably across devices
 - Reasons: safety/security-sensitive area
@@ -2356,7 +2414,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=def8852509d0 patchFile=/
 ---
 
 ## 068 2026-01-12 b1c8a6fecd01 `session`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=b1c8a6fecd01 patchFile=/tmp/leeroy-wip-pass2/068.patch patchSha256=24a5192bad1dcf9d42a4810b4e66e4842627b56da16beb6f3bc4a7819f3c8983 patchBytes=5900 patchLines=126 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=b1c8a6fecd01 patchFile=/tmp/leeroy-wip-pass2/068.patch patchSha256=24a5192bad1dcf9d42a4810b4e66e4842627b56da16beb6f3bc4a7819f3c8983 patchBytes=5900 patchLines=126 notesReviewed=yes reviewedAt=2026-01-24T20:09:38+0100 notesUpdated=no
 
 - Subject: fix(session): archive when kill RPC unavailable
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2390,7 +2448,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=b1c8a6fecd01 patchFile=/
 ---
 
 ## 069 2026-01-06 c06b6202b5d4 `expo-app`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c06b6202b5d4 patchFile=/tmp/leeroy-wip-pass2/069.patch patchSha256=2da06e303c3470a4ba84a9c6108e68d93474b45de8034cb6dd9aa0ad48b6a5ed patchBytes=4354 patchLines=130 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c06b6202b5d4 patchFile=/tmp/leeroy-wip-pass2/069.patch patchSha256=2da06e303c3470a4ba84a9c6108e68d93474b45de8034cb6dd9aa0ad48b6a5ed patchBytes=4354 patchLines=130 notesReviewed=yes reviewedAt=2026-01-24T20:15:28+0100 notesUpdated=no
 
 - Subject: Add copy-to-clipboard button to message blocks
 - Reasons: non-Conventional-Commits subject
@@ -2420,7 +2478,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c06b6202b5d4 patchFile=/
 ---
 
 ## 070 2026-01-21 9fc7d3d412b9 `sessions`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9fc7d3d412b9 patchFile=/tmp/leeroy-wip-pass2/070.patch patchSha256=c3bb8024d077a6d2124a731b8fdca25b6b61d9f5fbf0a8f6f973bab2399a5473 patchBytes=38406 patchLines=811 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9fc7d3d412b9 patchFile=/tmp/leeroy-wip-pass2/070.patch patchSha256=c3bb8024d077a6d2124a731b8fdca25b6b61d9f5fbf0a8f6f973bab2399a5473 patchBytes=38406 patchLines=811 notesReviewed=yes reviewedAt=2026-01-24T20:17:34+0100 notesUpdated=no
 
 - Subject: feat(sessions): group inactive sessions by project
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2452,7 +2510,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9fc7d3d412b9 patchFile=/
 ---
 
 ## 071 2026-01-21 62a8b1b07c3e `sessions`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=62a8b1b07c3e patchFile=/tmp/leeroy-wip-pass2/071.patch patchSha256=8f985046e31b2f570813303dd7abe624e45ec225c5b3eee071652d1f7bf494ba patchBytes=22794 patchLines=482 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=62a8b1b07c3e patchFile=/tmp/leeroy-wip-pass2/071.patch patchSha256=8f985046e31b2f570813303dd7abe624e45ec225c5b3eee071652d1f7bf494ba patchBytes=22794 patchLines=482 notesReviewed=yes reviewedAt=2026-01-24T20:18:40+0100 notesUpdated=no
 
 - Subject: feat(sessions): add unread badge
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2490,7 +2548,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=62a8b1b07c3e patchFile=/
 ---
 
 ## 072 2026-01-21 82d74454c3c4 `typecheck`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=82d74454c3c4 patchFile=/tmp/leeroy-wip-pass2/072.patch patchSha256=1a8dd521ceab0660a8ba515ae4e40adbd7afdd1fd29a4404b225ef6028f63431 patchBytes=2497 patchLines=43 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=82d74454c3c4 patchFile=/tmp/leeroy-wip-pass2/072.patch patchSha256=1a8dd521ceab0660a8ba515ae4e40adbd7afdd1fd29a4404b225ef6028f63431 patchBytes=2497 patchLines=43 notesReviewed=yes reviewedAt=2026-01-24T20:19:14+0100 notesUpdated=no
 
 - Subject: fix(typecheck): restore permission imports and Popover web styles
 - Reasons: safety/security-sensitive area
@@ -2517,7 +2575,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=82d74454c3c4 patchFile=/
 ---
 
 ## 073 2026-01-11 4f2b533f99c2 `tools`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4f2b533f99c2 patchFile=/tmp/leeroy-wip-pass2/073.patch patchSha256=0fe31f7bea6a875d5eba5bd634ad16094893c27f942ce0ec933802836f0bfaf7 patchBytes=17604 patchLines=401 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4f2b533f99c2 patchFile=/tmp/leeroy-wip-pass2/073.patch patchSha256=0fe31f7bea6a875d5eba5bd634ad16094893c27f942ce0ec933802836f0bfaf7 patchBytes=17604 patchLines=401 notesReviewed=yes reviewedAt=2026-01-24T20:20:20+0100 notesUpdated=no
 
 - Subject: feat(tools): add approve/reject buttons to ExitPlanMode
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2550,7 +2608,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4f2b533f99c2 patchFile=/
 ---
 
 ## 074 2026-01-07 c86cbd26b040 `queue`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c86cbd26b040 patchFile=/tmp/leeroy-wip-pass2/074.patch patchSha256=a371a5fb976f8323071238d5478e67452f8101074b1e350c72156dec64a3e895 patchBytes=45107 patchLines=1043 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c86cbd26b040 patchFile=/tmp/leeroy-wip-pass2/074.patch patchSha256=a371a5fb976f8323071238d5478e67452f8101074b1e350c72156dec64a3e895 patchBytes=45107 patchLines=1043 notesReviewed=yes reviewedAt=2026-01-24T20:22:09+0100 notesUpdated=no
 
 - Subject: feat(queue): add pending message queue UI and send modes
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2594,7 +2652,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=c86cbd26b040 patchFile=/
 ---
 
 ## 075 2026-01-07 42da6dae8fe4 `session`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=42da6dae8fe4 patchFile=/tmp/leeroy-wip-pass2/075.patch patchSha256=0d8e35af710d88633ab53ea25e01f8d2491e5fb7dc977ac4c2204b83eb1d80e2 patchBytes=16372 patchLines=353 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=42da6dae8fe4 patchFile=/tmp/leeroy-wip-pass2/075.patch patchSha256=0d8e35af710d88633ab53ea25e01f8d2491e5fb7dc977ac4c2204b83eb1d80e2 patchBytes=16372 patchLines=353 notesReviewed=yes reviewedAt=2026-01-24T20:23:19+0100 notesUpdated=no
 
 - Subject: feat(session): add session rename support
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2629,7 +2687,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=42da6dae8fe4 patchFile=/
 ---
 
 ## 076 2026-01-12 057102f67904 `resume`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=057102f67904 patchFile=/tmp/leeroy-wip-pass2/076.patch patchSha256=a9dd95c610ad982c66168fab4e09c50f2c2ceb6de30962f5cc166a3e6c677d1b patchBytes=38206 patchLines=864 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=057102f67904 patchFile=/tmp/leeroy-wip-pass2/076.patch patchSha256=a9dd95c610ad982c66168fab4e09c50f2c2ceb6de30962f5cc166a3e6c677d1b patchBytes=38206 patchLines=864 notesReviewed=yes reviewedAt=2026-01-24T20:27:11+0100 notesUpdated=yes
 
 - Subject: feat(resume): add resume session option for new sessions
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2653,6 +2711,9 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=057102f67904 patchFile=/
 - Coherence:
   - This is a cohesive feature commit (new session resume UI + payload + gating + persistence).
   - Minor mismatch with the body bullet “Expose Codex session id in Session Info”: this commit adds translations for Codex session ID copy UX, but the actual Session Info UI wiring appears in later commits (see 080).
+- Implementation details / risks:
+  - In this commit, `resumeSessionId` is persisted to `NewSessionDraft` but does not appear to be written back into the temp session data store; `NewSessionData` is extended but the screen only *reads* `tempSessionData?.resumeSessionId`.
+  - The resume picker returns the value by dispatching `CommonActions.setParams({ resumeSessionId })` to the previous route’s key via `navigation.getState()`. This should work for normal navigation, but is potentially brittle for deep-links/unusual navigation state (it falls back to `router.back()`).
 
 ### Verdict
 
@@ -2667,7 +2728,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=057102f67904 patchFile=/
 ---
 
 ## 077 2026-01-14 05532bd65c6b `resume`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=05532bd65c6b patchFile=/tmp/leeroy-wip-pass2/077.patch patchSha256=829d9f8e6db35a17bed895b7a14404c67c9f51fca3c8630aff3452d0eb152f44 patchBytes=10791 patchLines=200 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=05532bd65c6b patchFile=/tmp/leeroy-wip-pass2/077.patch patchSha256=829d9f8e6db35a17bed895b7a14404c67c9f51fca3c8630aff3452d0eb152f44 patchBytes=10791 patchLines=200 notesReviewed=yes reviewedAt=2026-01-24T20:27:54+0100 notesUpdated=no
 
 - Subject: feat(resume): show resume chip under path in new session
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2696,7 +2757,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=05532bd65c6b patchFile=/
 ---
 
 ## 078 2026-01-11 cd5771e50881 `resume`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cd5771e50881 patchFile=/tmp/leeroy-wip-pass2/078.patch patchSha256=307c27d9124dffbb4b057f095eac60ef354f8c8686e2078d9b88b189611d2a90 patchBytes=14375 patchLines=360 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cd5771e50881 patchFile=/tmp/leeroy-wip-pass2/078.patch patchSha256=307c27d9124dffbb4b057f095eac60ef354f8c8686e2078d9b88b189611d2a90 patchBytes=14375 patchLines=360 notesReviewed=yes reviewedAt=2026-01-24T20:29:19+0100 notesUpdated=yes
 
 - Subject: feat: resume inactive Claude sessions from UI
 - Reasons: non-Conventional-Commits subject
@@ -2710,10 +2771,14 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cd5771e50881 patchFile=/
   - Updates `-session/SessionView.tsx`:
     - Detects inactive sessions and introduces resumable state (`isResumable`, `isResuming`).
     - When sending a message for an inactive, resumable session, calls `resumeSession(...)` instead of the normal send flow.
-  - Adds `resumeSession` RPC operation in `sync/ops.ts` (machine RPC) and capability helpers in `utils/agentCapabilities.ts` (`RESUMABLE_AGENTS`, `canResumeSession(...)`, `getAgentSessionId(...)`).
+    - Adds a profile “fixed per session” modal via `profileId`/`onProfileClick` and a hardcoded English message (not translated).
+    - Shows resume status in `connectionStatus` text/pulsing when resuming (`t('session.resuming')`) and uses `t('session.inactiveResumable')`/`t('session.inactiveNotResumable')`.
+  - Adds `resumeSession` RPC operation in `sync/ops.ts` (machine RPC). `SessionView.tsx` also starts importing `canResumeSession(...)`/`getAgentSessionId(...)` from `utils/agentCapabilities.ts` (implemented in later commits).
 - Coherence:
   - This is the initial end-user “resume inactive sessions” feature landing. It is cohesive for the resume topic.
   - As written here, the UI passes `agentSessionId` across the wire; later commits refactor this away (see 079). During rewrite, squash/reconcile to the final design.
+  - The commit message body mentions “translations for session resume states”, but this commit does not add translation entries; it only introduces new `t('session.*')` usages + a hardcoded English modal string.
+  - `SessionView.tsx` imports `canResumeSession`/`getAgentSessionId` from `utils/agentCapabilities.ts`, but this commit does not modify that module; it likely relies on later commits to add these exports. During rewrite, this should be squashed/reordered to keep intermediate commits typecheck-safe.
 
 ### Verdict
 
@@ -2727,7 +2792,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=cd5771e50881 patchFile=/
 ---
 
 ## 079 2026-01-12 456e2ad8e2b8 `resume`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=456e2ad8e2b8 patchFile=/tmp/leeroy-wip-pass2/079.patch patchSha256=1038412aa6be537c540443b64b6437f4eb00d0315c79e4e819e2c68d0eb0a234 patchBytes=10666 patchLines=265 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=456e2ad8e2b8 patchFile=/tmp/leeroy-wip-pass2/079.patch patchSha256=1038412aa6be537c540443b64b6437f4eb00d0315c79e4e819e2c68d0eb0a234 patchBytes=10666 patchLines=265 notesReviewed=yes reviewedAt=2026-01-24T20:30:50+0100 notesUpdated=yes
 
 - Subject: refactor(resume): don't require agentSessionId from UI
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2739,11 +2804,13 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=456e2ad8e2b8 patchFile=/
   - `sync/ops.ts` / `SessionView.tsx`:
     - Removes `agentSessionId` from the resume request shape; UI resumes by Happy session id and agent type only.
     - This pushes “derive vendor resume id” responsibility to the machine/daemon (more secure + less UI coupling to vendor internals).
+    - Likely leaves an unused `getAgentSessionId` import in `SessionView.tsx` (the callsite is removed but the patch does not remove the import); clean up during history rewrite.
   - `utils/agentCapabilities.ts`:
     - Broadens `canAgentResume(...)` to accept unknown strings safely.
     - Adds `SessionMetadata` shape + helpers:
       - `getAgentSessionIdField(...)`, `canResumeSession(...)`, and `getAgentSessionId(...)`.
   - Adds session-state translation keys (`session.resuming`, `session.resumeFailed`, etc.).
+    - Noted: Spanish `inactiveResumable` uses `reanundable` (likely a typo for `reanudable`).
 - Coherence:
   - Matches subject and is a solid architectural improvement for the resume feature.
 
@@ -2759,7 +2826,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=456e2ad8e2b8 patchFile=/
 ---
 
 ## 080 2026-01-11 9b0069e3d30c `fork`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b0069e3d30c patchFile=/tmp/leeroy-wip-pass2/080.patch patchSha256=d0775d17447e5f09b0c0043294929d4b05c4f7a900063c95323c37df142a214b patchBytes=13508 patchLines=247 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b0069e3d30c patchFile=/tmp/leeroy-wip-pass2/080.patch patchSha256=d0775d17447e5f09b0c0043294929d4b05c4f7a900063c95323c37df142a214b patchBytes=13508 patchLines=247 notesReviewed=yes reviewedAt=2026-01-24T20:32:11+0100 notesUpdated=yes
 
 - Subject: feat(fork): enable Codex resume support
 - Reasons: fork-only behavior (should not go upstream as-is)
@@ -2771,9 +2838,9 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b0069e3d30c patchFile=/
   - `utils/agentCapabilities.ts` adds `'codex'` to `RESUMABLE_AGENTS` with an explicit “Fork” note.
   - Session Info UX in `app/(app)/session/[id]/info.tsx`:
     - Adds a “Codex Session ID” item with copy-to-clipboard behavior (uses translation keys added earlier).
-    - Refactors copy-command handlers (`handleCopyCommand` helper) and unifies “copy resume command” logic (now `copyResumeCommand`).
+    - Refactors copy-command handlers (`handleCopyCommand` helper) and unifies “copy resume command” into `happy resume <happySessionId>` (shown only for inactive sessions that have an agent session ID in metadata).
   - `sync/storageTypes.ts` appears to add/validate `codexSessionId` metadata shape (schema alignment).
-  - Adds/updates i18n keys (`sessionInfo.copyResumeCommand`, `sessionInfo.codexSessionId`, etc.).
+  - Adds i18n key `sessionInfo.copyResumeCommand` across locales (Codex Session ID translation keys were added earlier in 076).
 - Coherence:
   - This is still within the “resume support” topic, but it’s fork-specific (Codex resume enablement) and should be isolated from any upstream PR stack.
 
@@ -2789,7 +2856,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=9b0069e3d30c patchFile=/
 ---
 
 ## 081 2026-01-22 4ddaef02210e `sync`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4ddaef02210e patchFile=/tmp/leeroy-wip-pass2/081.patch patchSha256=4898c477cf549a2bf357661b4ade980ba45511fb0c0b93ad24c80baa3e93323d patchBytes=1566 patchLines=43 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4ddaef02210e patchFile=/tmp/leeroy-wip-pass2/081.patch patchSha256=4898c477cf549a2bf357661b4ade980ba45511fb0c0b93ad24c80baa3e93323d patchBytes=1566 patchLines=43 notesReviewed=yes reviewedAt=2026-01-24T20:33:19+0100 notesUpdated=yes
 
 - Subject: fix(sync): omit model meta for queued messages
 - Reasons: full manual review coverage (was not in the manual-review queue)
@@ -2799,7 +2866,9 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4ddaef02210e patchFile=/
 - Diffstat: `1 file changed, 7 insertions(+), 6 deletions(-)`
 - What changed:
   - `sync/sync.ts`:
-    - Computes `model` from `(session.metadata.flavor, session.modelMode)` and includes it in outgoing message meta only for Gemini when a non-default model is selected.
+    - Computes `model` from `(session.metadata.flavor, session.modelMode)`:
+      - For Gemini: defaults `modelMode` to `'gemini-2.5-pro'` when unset, and includes `model` in outgoing message meta when `modelMode !== 'default'`.
+      - For non-Gemini: omits `model` (`undefined`) from outgoing meta.
     - Switches meta construction to `buildOutgoingMessageMeta({ ... })` and drops `fallbackModel`.
 - Coherence:
   - Matches subject; this is a small correctness tweak to avoid sending irrelevant/incorrect model metadata in queued/outgoing messages.
@@ -2816,7 +2885,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=4ddaef02210e patchFile=/
 ---
 
 ## 082 2026-01-12 3fbdc10018fe `tmux`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=3fbdc10018fe patchFile=/tmp/leeroy-wip-pass2/082.patch patchSha256=f2cc8568717d548920cea037c3b6e362272f870517c93ed7e2a86d9115651d03 patchBytes=30647 patchLines=723 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=3fbdc10018fe patchFile=/tmp/leeroy-wip-pass2/082.patch patchSha256=f2cc8568717d548920cea037c3b6e362272f870517c93ed7e2a86d9115651d03 patchBytes=30647 patchLines=723 notesReviewed=yes reviewedAt=2026-01-24T20:34:54+0100 notesUpdated=yes
 
 - Subject: fix: tmux parsing/targeting + review feedback
 - Reasons: safety/reliability-sensitive area (process control) + non-Conventional-Commits subject
@@ -2834,8 +2903,10 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=3fbdc10018fe patchFile=/
     - Removes env-derived session/window fields from `TmuxSessionInfo` (only keeps `env_pane` + socket path, and relies on tmux query for session/window).
   - Additional review feedback items are included (mixed into the same commit):
     - Aligns `Machine.metadata` typing to runtime (nullable).
-    - Tightens some script/test behavior (`ripgrep_launcher`, env wrapper, etc.).
-    - Deletes a CLI doc file (`cli/docs/bug-fix-plan-2025-01-15-athundt.md`).
+    - Tightens script/test behavior (`ripgrep_launcher`, `env-wrapper`, continue-test script) and clarifies failure modes (missing args, signal termination).
+    - Adjusts CLI API sending behavior: introduces `ApiSessionClient.canSend(...)` and now returns early (drops the emit) when the socket is disconnected for multiple message/event types (may change socket.io buffering semantics vs prior behavior).
+    - Improves resume/continue ergonomics and cancellation: supports `-r` as `--resume` alias and wires SIGINT/SIGTERM to abort offline `claudeLocal` runs.
+    - Edits a CLI doc file (`cli/docs/bug-fix-plan-2025-01-15-athundt.md`) rather than deleting it.
 - Coherence:
   - The tmux portion is cohesive and important for correctness.
   - The extra “misc scripts/tests/typing” changes make the commit mixed; during rewrite we should consider splitting to keep tmux fixes isolated and bisectable.
@@ -2857,7 +2928,7 @@ Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=3fbdc10018fe patchFile=/
 ---
 
 ## 083 2026-01-13 7292a29822bb `daemon`
-Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7292a29822bb patchFile=/tmp/leeroy-wip-pass2/083.patch patchSha256=40cb173cb1aa03a44ac0c18b4e07de6b8872336399fb768bf21f7a60daef97ab patchBytes=5066 patchLines=99 notesReviewed=no reviewedAt=- notesUpdated=no
+Pass2FullDiff: CAPTURED at 2026-01-24T17:39:06+0100 sha=7292a29822bb patchFile=/tmp/leeroy-wip-pass2/083.patch patchSha256=40cb173cb1aa03a44ac0c18b4e07de6b8872336399fb768bf21f7a60daef97ab patchBytes=5066 patchLines=99 notesReviewed=yes reviewedAt=2026-01-24T20:36:02+0100 notesUpdated=no
 
 - Subject: fix(daemon): do not apply CLI active profile to GUI-spawned sessions
 - Reasons: full manual review coverage (was not in the manual-review queue)

package/docs/isolated-linux-vm.md

@@ -12,28 +12,74 @@ This avoids Docker/container UX issues (browser opening, Expo networking, file w
 brew install lima
 ```
 
-### 2) Create a VM
+### 2) Create + configure a VM (recommended script)
+
+On your macOS host (this repo):
+
+```bash
+./scripts/provision/macos-lima-happy-vm.sh happy-test
+```
+
+This creates the VM if needed and configures **localhost port forwarding** for the port ranges used by our VM defaults.
+(This is important because the Expo web app uses WebCrypto and needs a secure context like `http://localhost`.)
+
+### 2b) Manual setup (if you prefer)
 
 ```bash
 limactl create --name happy-pr --tty=false template://ubuntu-24.04
-limactl start happy-pr --network vzNAT
+limactl start happy-pr
 ```
 
-### 2b) Host access (ports + browser URLs)
+### 2c) Host access (ports + browser URLs)
+
+When you want to open Happy/Expo URLs in your macOS browser, **use localhost port forwarding**.
 
-When you want to open Happy/Expo URLs in your macOS browser, the simplest approach is:
+Why this matters: the Expo web app uses WebCrypto (`crypto.subtle`) via `expo-crypto` for things like key derivation.
+Browsers only expose WebCrypto in **secure contexts**:
+- `https://...`
+- `http://localhost`, `http://127.0.0.1`, and `http://*.localhost`
 
-- Start the VM with a host-reachable network: `--network vzNAT`
-- Run Happy Stacks with `--bind=lan` so it prints LAN-reachable URLs (VM IP)
+If you open the UI via a VM LAN IP like `http://192.168.x.y:PORT`, the browser treats it as **insecure** and you can hit errors like:
+`TypeError: Cannot read properties of undefined (reading 'digest')`.
 
-Inside the VM, you can see your IP with:
+#### Configure port forwarding (recommended)
+
+Edit the instance config on the **macOS host**:
 
 ```bash
-ip -4 addr show lima0 || true
-hostname -I || true
+limactl stop happy-pr || true
+open -a TextEdit ~/.lima/happy-pr/lima.yaml
+```
+
+Add a `portForwards` section to forward the Happy Stacks VM port ranges to your host `localhost`:
+
+```yaml
+portForwards:
+  # Stack/server ports (default VM range from our provision script)
+  - guestPortRange: [13000, 13999]
+    hostPortRange:  [13000, 13999]
+
+  # Expo dev-server (web) ports (default VM range from our provision script)
+  - guestPortRange: [18000, 19099]
+    hostPortRange:  [18000, 19099]
+```
+
+Then restart the VM:
+
+```bash
+limactl start happy-pr
+```
+
+#### Optional: IP-based access (only when you need LAN)
+
+If you explicitly need to access guest services by VM IP (e.g. for testing from another device), you can enable `vzNAT`:
+
+```bash
+limactl stop happy-pr || true
+limactl start happy-pr --network vzNAT
 ```
 
-Note: Some environments disable localhost port forwarding; using `vzNAT` avoids relying on forwarding.
+Note: IP-based URLs (like `http://192.168...`) may break web-only crypto flows unless you use HTTPS or a browser dev override.
 
 ### 3) Provision the VM (Node + build deps)
 
@@ -56,7 +102,7 @@ export NVM_DIR="$HOME/.nvm"
 If your goal is to **work on changes** (not just review a PR), you can run the dev profile:
 
 ```bash
-npx --yes happy-stacks@latest setup --profile=dev
+npx --yes happy-stacks@latest setup --profile=dev --bind=loopback
 ```
 
 Notes:
@@ -73,7 +119,7 @@ npx --yes happy-stacks@latest review-pr \
   --no-mobile \
   --keep-sandbox \
   --verbose \
-  -- --bind=lan
+  -- --bind=loopback
 ```
 
 Notes:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "happy-stacks",
   "type": "module",
-  "version": "0.6.8",
+  "version": "0.6.10",
   "packageManager": "pnpm@10.18.3",
   "bin": {
     "happys": "./bin/happys.mjs",

package/scripts/provision/linux-ubuntu-review-pr.sh

@@ -118,6 +118,10 @@ fi
 
 cat <<'EOF'
 [provision] tip: If you want to open Happy/Expo URLs in your macOS browser:
-- Start the VM with a host-reachable network (recommended): `limactl start <name> --network vzNAT`
-- Run happy-stacks commands with: `--bind=lan` (prints LAN-reachable URLs)
+- Prefer localhost port forwarding (secure context) instead of opening `http://<vm-ip>:<port>`
+  (Expo web uses WebCrypto and may fail on insecure origins).
+- On the macOS host, add `portForwards` for the VM port ranges in `~/.lima/<name>/lima.yaml`,
+  then restart the VM.
+- Then run happy-stacks with: `--bind=loopback` (or omit `--bind`) and open the `http://localhost/...`
+  or `http://*.localhost/...` URLs.
 EOF

package/scripts/provision/macos-lima-happy-vm.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Create/configure a Lima VM for testing happy-stacks in an isolated Linux environment,
+# while still opening the Expo web UI on the macOS host via localhost port forwarding
+# (required for WebCrypto/secure-context APIs).
+#
+# Usage:
+#   ./scripts/provision/macos-lima-happy-vm.sh [vm-name]
+#
+# Defaults:
+#   vm-name: happy-test
+#   template: ubuntu-24.04
+#
+# What it does:
+# - creates the VM (if missing)
+# - injects port forwarding rules for the Happy Stacks VM port ranges
+# - restarts the VM so the rules take effect
+# - prints next steps (provision script + happy-stacks commands)
+
+if [[ "${1:-}" == "-h" || "${1:-}" == "--help" ]]; then
+  cat <<'EOF'
+Usage:
+  ./scripts/provision/macos-lima-happy-vm.sh [vm-name]
+
+Examples:
+  ./scripts/provision/macos-lima-happy-vm.sh            # uses "happy-test"
+  ./scripts/provision/macos-lima-happy-vm.sh happy      # uses "happy"
+  ./scripts/provision/macos-lima-happy-vm.sh happy-vm   # uses "happy-vm"
+
+Notes:
+- This is intended to be run on the macOS host (not inside the VM).
+- It configures localhost port forwarding so you can open http://localhost / http://*.localhost
+  in your macOS browser (required for WebCrypto APIs used by Expo web).
+EOF
+  exit 0
+fi
+
+if [[ "$(uname -s)" != "Darwin" ]]; then
+  echo "[lima] expected macOS (Darwin); got: $(uname -s)" >&2
+  exit 1
+fi
+
+if ! command -v limactl >/dev/null 2>&1; then
+  echo "[lima] limactl not found. Install Lima first (example: brew install lima)." >&2
+  exit 1
+fi
+
+VM_NAME="${1:-happy-test}"
+TEMPLATE="${LIMA_TEMPLATE:-ubuntu-24.04}"
+LIMA_DIR="${HOME}/.lima/${VM_NAME}"
+LIMA_YAML="${LIMA_DIR}/lima.yaml"
+
+echo "[lima] vm: ${VM_NAME}"
+echo "[lima] template: ${TEMPLATE}"
+
+if [[ ! -f "${LIMA_YAML}" ]]; then
+  echo "[lima] creating VM..."
+  limactl create --name "${VM_NAME}" --tty=false "template://${TEMPLATE}"
+fi
+
+if [[ ! -f "${LIMA_YAML}" ]]; then
+  echo "[lima] expected instance config at: ${LIMA_YAML}" >&2
+  exit 1
+fi
+
+echo "[lima] stopping VM (if running)..."
+limactl stop "${VM_NAME}" >/dev/null 2>&1 || true
+
+echo "[lima] configuring port forwarding (localhost)..."
+cp -a "${LIMA_YAML}" "${LIMA_YAML}.bak.$(date +%Y%m%d-%H%M%S)"
+
+python3 - <<'PY'
+import os, re
+from pathlib import Path
+
+vm_name = os.environ["VM_NAME"]
+path = Path(os.environ["LIMA_YAML"])
+text = path.read_text(encoding="utf-8")
+
+MARK_BEGIN = "# --- happy-stacks port forwards (added by happy-local) ---"
+MARK_END = "# --- /happy-stacks port forwards ---"
+
+entries = [
+    "  - guestPortRange: [13000, 13999]\n    hostPortRange:  [13000, 13999]\n",
+    "  - guestPortRange: [18000, 19099]\n    hostPortRange:  [18000, 19099]\n",
+]
+
+block_as_section = (
+    f"\n{MARK_BEGIN}\n"
+    "portForwards:\n"
+    + "".join(entries) +
+    f"{MARK_END}\n"
+)
+
+block_as_list_items = (
+    f"  # --- happy-stacks port forwards (added by happy-local) ---\n"
+    + "".join(entries) +
+    f"  # --- /happy-stacks port forwards ---\n"
+)
+
+if MARK_BEGIN in text and MARK_END in text:
+  text = re.sub(
+      re.escape(MARK_BEGIN) + r"[\\s\\S]*?" + re.escape(MARK_END) + r"\\n?",
+      block_as_section.strip("\n") + "\n",
+      text,
+      flags=re.MULTILINE,
+  )
+else:
+  m = re.search(r"^portForwards:\\s*$", text, flags=re.MULTILINE)
+  if m:
+    insert_at = m.end()
+    text = text[:insert_at] + "\n" + block_as_list_items + text[insert_at:]
+  else:
+    text = text.rstrip() + block_as_section
+
+path.write_text(text, encoding="utf-8")
+print(f"[lima] updated {path} ({vm_name})")
+PY
+
+echo "[lima] starting VM..."
+limactl start "${VM_NAME}"
+
+cat <<EOF
+
+[lima] done.
+
+Next steps:
+  limactl shell ${VM_NAME}
+
+Inside the VM:
+  curl -fsSL https://raw.githubusercontent.com/leeroybrun/happy-local/main/scripts/provision/linux-ubuntu-review-pr.sh -o /tmp/linux-ubuntu-review-pr.sh \\
+    && chmod +x /tmp/linux-ubuntu-review-pr.sh \\
+    && /tmp/linux-ubuntu-review-pr.sh
+
+Then:
+  npx --yes happy-stacks@latest setup --profile=dev --bind=loopback
+
+Tip:
+  Open the printed URLs on your macOS host via http://localhost:<port> or http://*.localhost:<port>.
+EOF
+

package/scripts/setup.mjs

@@ -288,7 +288,11 @@ async function maybeConfigureAuthDefaults({ rootDir, profile, interactive }) {
     }
 
     // Guided wizard: creates stack, starts temporary UI/server, stores dev key (optional), logs in CLI.
-    await runNodeScript({ rootDir, rel: 'scripts/stack.mjs', args: ['create-dev-auth-seed', 'dev-auth', '--login'] });
+    await runNodeScript({
+      rootDir,
+      rel: 'scripts/stack.mjs',
+      args: ['create-dev-auth-seed', 'dev-auth', '--login', '--skip-default-seed'],
+    });
   } else {
     // eslint-disable-next-line no-console
     console.log(dim(`Found an existing ${cyan('dev-auth')} seed stack; configuring auth reuse for new stacks.`));
@@ -306,6 +310,22 @@ async function maybeConfigureAuthDefaults({ rootDir, profile, interactive }) {
     ],
   });
 
+  {
+    const envLocalPath = join(getCanonicalHomeDir(), 'env.local');
+    // eslint-disable-next-line no-console
+    console.log('');
+    // eslint-disable-next-line no-console
+    console.log(bold('Automatic sign-in for new stacks'));
+    // eslint-disable-next-line no-console
+    console.log(dim(`Enabled: when you create a new stack, Happy Stacks will reuse auth from ${cyan(seedChoice)} automatically.`));
+    // eslint-disable-next-line no-console
+    console.log(`${dim('Seed from:')} ${cyan(seedChoice)}`);
+    // eslint-disable-next-line no-console
+    console.log(`${dim('Mode:')} ${linkChoice === 'link' ? 'symlink' : 'copy'} ${dim(linkChoice === 'link' ? '(recommended)' : '')}`.trim());
+    // eslint-disable-next-line no-console
+    console.log(dim(`Config: ${envLocalPath}`));
+  }
+
   // Optional: seed existing stacks now (useful if the user already has stacks).
   const allStacks = await listAllStackNames().catch(() => ['main']);
   const candidateTargets = allStacks.filter((s) => s !== 'main' && s !== seedChoice);
@@ -517,7 +537,7 @@ async function cmdSetup({ rootDir, argv }) {
             `- ${cyan('init')}: set up Happy Stacks home + shims`,
             `- ${cyan('bootstrap')}: clone/install components + dev tooling`,
             `- ${cyan('auth')}: (recommended) set up a ${cyan('dev-auth')} seed stack (login once, reuse everywhere)`,
-            `- ${cyan('stacks')}: (recommended) create an isolated dev stack (keep main stable)`,
+            `- ${cyan('stacks')}: (recommended) next you’ll create an isolated dev stack for day-to-day work (keeps main stable)`,
             `- ${cyan('mobile')}: (optional) install the iOS dev-client (for phone testing)`,
             '',
             dim(`Tip: for PR work, use ${cyan('worktrees')} (isolated branches) + ${cyan('stacks')} (isolated runtime state).`),
@@ -917,27 +937,6 @@ async function cmdSetup({ rootDir, argv }) {
       // Recommended: dev-auth seed stack setup (login once, reuse across stacks).
       await maybeConfigureAuthDefaults({ rootDir, profile, interactive });
 
-      // Recommended: create an isolated dev stack (keeps main stable).
-      const createStack = await withRl(async (rl) => {
-        return await promptSelect(rl, {
-          title: `${bold('Stacks')}\n${dim('Recommended: keep main stable by doing dev work in a dedicated stack.')}`,
-          options: [
-            { label: `yes (${green('recommended')}) — create a new development stack`, value: true },
-            { label: `no — I will use ${cyan('main')} for now`, value: false },
-          ],
-          defaultIndex: 0,
-        });
-      });
-      if (createStack) {
-        await runNodeScriptMaybeQuiet({
-          label: 'create dev stack',
-          rootDir,
-          rel: 'scripts/stack.mjs',
-          args: ['new', '--interactive'],
-          interactiveChild: true,
-        });
-      }
-
       // Optional: mobile dev-client install (macOS only).
       if (process.platform === 'darwin') {
         const installMobile = await withRl(async (rl) => {
@@ -1129,21 +1128,15 @@ async function cmdSetup({ rootDir, argv }) {
     // eslint-disable-next-line no-console
     console.log(dim('Next steps (development):'));
     // eslint-disable-next-line no-console
-    console.log(`  ${yellow('happys dev')}          ${dim('# run the dev stack (server + daemon + Expo web)')}`);
+    console.log(`  ${yellow('happys stack new dev --interactive')} ${dim('# create a dedicated dev stack (recommended)')}`);
+    // eslint-disable-next-line no-console
+    console.log(`  ${yellow('happys stack dev dev')}              ${dim('# run that stack (server + daemon + Expo web)')}`);
     // eslint-disable-next-line no-console
     console.log(`  ${yellow('happys wt new ...')}   ${dim('# create a worktree for a branch/PR')}`);
     // eslint-disable-next-line no-console
     console.log(`  ${yellow('happys stack new ...')} ${dim('# create an isolated runtime stack')}`);
     // eslint-disable-next-line no-console
     console.log(`  ${yellow('happys stack dev <name>')} ${dim('# run a specific stack')}`);
-    // eslint-disable-next-line no-console
-    console.log('');
-    // eslint-disable-next-line no-console
-    console.log(dim('Legacy note: if you still have split repos/branches (pre-monorepo), run:'));
-    // eslint-disable-next-line no-console
-    console.log(`  ${yellow('happys import')}        ${dim('# guided import + optional monorepo migration')}`);
-    // eslint-disable-next-line no-console
-    console.log(`  ${yellow('happys import llm --copy')} ${dim('# copy/paste an LLM prompt to drive the flow')}`);
   }
 }
 

package/scripts/stack.mjs

@@ -2158,6 +2158,8 @@ async function cmdCreateDevAuthSeed({ rootDir, argv }) {
   const serverComponent = (kv.get('--server') ?? '').trim() || 'happy-server-light';
   const interactive = !flags.has('--non-interactive') && (flags.has('--interactive') || isTty());
   const bindMode = resolveBindModeFromArgs({ flags, kv });
+  const skipDefaultSeed =
+    flags.has('--skip-default-seed') || flags.has('--no-default-seed') || flags.has('--no-configure-default-seed');
   const forceLogin =
     flags.has('--login') ? true : flags.has('--no-login') || flags.has('--skip-login') ? false : null;
 
@@ -2285,6 +2287,7 @@ async function cmdCreateDevAuthSeed({ rootDir, argv }) {
 
             let serverProc = null;
             let uiProc = null;
+            let uiStopRequested = false;
             try {
               steps.start('start temporary server');
               const started = await startDevServer({
@@ -2333,6 +2336,8 @@ async function cmdCreateDevAuthSeed({ rootDir, argv }) {
 
               if (quietAuthFlow && uiProc) {
                 uiProc.once('exit', (code, sig) => {
+                  // We intentionally SIGINT Expo when we're done with login.
+                  if (uiStopRequested && (sig === 'SIGINT' || sig === 'SIGTERM')) return;
                   if (code === 0) return;
                   void (async () => {
                     const c = typeof code === 'number' ? code : null;
@@ -2405,6 +2410,7 @@ async function cmdCreateDevAuthSeed({ rootDir, argv }) {
               if (uiProc) {
                 console.log('');
                 console.log(`[stack] stopping temporary UI (pid=${uiProc.pid})...`);
+                uiStopRequested = true;
                 killProcessTree(uiProc, 'SIGINT');
                 await Promise.race([
                   new Promise((resolve) => uiProc.on('exit', resolve)),
@@ -2430,26 +2436,33 @@ async function cmdCreateDevAuthSeed({ rootDir, argv }) {
         console.log(`[stack] skipping guided login. You can do it later with: ${yellow(`happys stack auth ${name} login`)}`);
       }
 
-      const wantEnv = await promptSelect(rl, {
-        title: `${bold('Default auth seed')}\n${dim(`Recommended: set ${cyan(name)} as the default seed for new stacks (writes ${getHomeEnvLocalPath()}).`)}`,
-        options: [
-          { label: `yes (${green('recommended')}) — enable auto-seeding for new stacks`, value: true },
-          { label: `no — I will configure this later`, value: false },
-        ],
-        defaultIndex: 0,
-      });
-      if (wantEnv) {
+      if (!skipDefaultSeed) {
         const envLocalPath = getHomeEnvLocalPath();
-        await ensureEnvFileUpdated({
-          envPath: envLocalPath,
-          updates: [
-            { key: 'HAPPY_STACKS_AUTH_SEED_FROM', value: name },
-            { key: 'HAPPY_STACKS_AUTO_AUTH_SEED', value: '1' },
+        const wantEnv = await promptSelect(rl, {
+          title:
+            `${bold('Automatic sign-in for new stacks')}\n` +
+            `${dim(`Recommended: when you create a new stack, copy/symlink auth from ${cyan(name)} automatically.`)}\n` +
+            `${dim(`This writes ${cyan('HAPPY_STACKS_AUTO_AUTH_SEED=1')} + ${cyan(`HAPPY_STACKS_AUTH_SEED_FROM=${name}`)} in ${envLocalPath}.`)}`,
+          options: [
+            { label: `yes (${green('recommended')}) — enable automatic auth seeding`, value: true },
+            { label: `no — I will configure this later`, value: false },
           ],
+          defaultIndex: 0,
         });
-        console.log(`[stack] updated: ${envLocalPath}`);
-      } else {
-        console.log(`[stack] tip: set in ${getHomeEnvLocalPath()}: HAPPY_STACKS_AUTH_SEED_FROM=${name} and HAPPY_STACKS_AUTO_AUTH_SEED=1`);
+        if (wantEnv) {
+          await ensureEnvFileUpdated({
+            envPath: envLocalPath,
+            updates: [
+              { key: 'HAPPY_STACKS_AUTH_SEED_FROM', value: name },
+              { key: 'HAPPY_STACKS_AUTO_AUTH_SEED', value: '1' },
+            ],
+          });
+          console.log(`[stack] updated: ${envLocalPath}`);
+        } else {
+          console.log(
+            `[stack] tip: set in ${envLocalPath}: HAPPY_STACKS_AUTH_SEED_FROM=${name} and HAPPY_STACKS_AUTO_AUTH_SEED=1`
+          );
+        }
       }
 
       if (!savedDevKey) {
@@ -3536,7 +3549,7 @@ async function main() {
         '  happys stack duplicate <from> <to> [--duplicate-worktrees] [--deps=none|link|install|link-or-install] [--json]',
         '  happys stack info <name> [--json]',
         '  happys stack pr <name> --happy=<pr-url|number> [--happy-server-light=<pr-url|number>] [--dev|--start] [--json] [-- ...]',
-        '  happys stack create-dev-auth-seed [name] [--server=happy-server|happy-server-light] [--login|--no-login] [--non-interactive] [--json]',
+        '  happys stack create-dev-auth-seed [name] [--server=happy-server|happy-server-light] [--login|--no-login] [--skip-default-seed] [--non-interactive] [--json]',
         '  happys stack daemon <name> start|stop|restart|status [--json]',
         '  happys stack happy <name> [-- ...]',
         '  happys stack env <name> set KEY=VALUE [KEY2=VALUE2...] | unset KEY [KEY2...] | get KEY | list | path [--json]',