orion-super-agent-dev 0.1.23 → 0.1.25

package/out/main.js

@@ -2230,7 +2230,7 @@ var require_react_jsx_runtime_development = __commonJS({
     if (process.env.NODE_ENV !== "production") {
       (function() {
         "use strict";
-        var React32 = require_react();
+        var React33 = require_react();
         var REACT_ELEMENT_TYPE = Symbol.for("react.element");
         var REACT_PORTAL_TYPE = Symbol.for("react.portal");
         var REACT_FRAGMENT_TYPE = Symbol.for("react.fragment");
@@ -2256,7 +2256,7 @@ var require_react_jsx_runtime_development = __commonJS({
           }
           return null;
         }
-        var ReactSharedInternals = React32.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
+        var ReactSharedInternals = React33.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
         function error(format2) {
           {
             {
@@ -9963,9 +9963,9 @@ var require_react_reconciler_development = __commonJS({
       module2.exports = function $$$reconciler($$$hostConfig) {
         var exports3 = {};
         "use strict";
-        var React32 = require_react();
+        var React33 = require_react();
         var Scheduler = require_scheduler();
-        var ReactSharedInternals = React32.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
+        var ReactSharedInternals = React33.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
         var suppressWarning = false;
         function setSuppressWarning(newSuppressWarning) {
           {
@@ -29178,6 +29178,8 @@ var require_duetEntry = __commonJS({
     }();
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.DUET_HANDOFF_BRIEF_MAX_CHARS = exports2.DUET_HANDOFF_CAPABILITY = exports2.DUET_HANDOFF_TOOL = exports2.DUET_ENTRY_OPTIONS = exports2.DUET_ENTRY_INFO = exports2.DUET_ENTRY_KEY = exports2.DUET_ENTRY_DEFAULT = exports2.DUET_ENTRIES = void 0;
+    exports2.isModelRoutedEntry = isModelRoutedEntry;
+    exports2.effectiveDuetEntry = effectiveDuetEntry;
     exports2.duetEntryLabel = duetEntryLabel2;
     exports2.normalizeDuetEntry = normalizeDuetEntry2;
     exports2.duetHandoffBrief = duetHandoffBrief2;
@@ -29193,7 +29195,10 @@ var require_duetEntry = __commonJS({
     var path14 = __importStar(__require("node:path"));
     var atomicWrite_js_1 = require_atomicWrite();
     var settingsPaths_js_1 = require_settingsPaths();
-    exports2.DUET_ENTRIES = ["planner", "router"];
+    exports2.DUET_ENTRIES = ["planner", "router", "executor"];
+    function isModelRoutedEntry(entry) {
+      return entry === "router" || entry === "executor";
+    }
     exports2.DUET_ENTRY_DEFAULT = "planner";
     exports2.DUET_ENTRY_KEY = "duetEntry";
     exports2.DUET_ENTRY_INFO = {
@@ -29213,8 +29218,18 @@ var require_duetEntry = __commonJS({
         value: "router",
         label: "Router decides",
         description: "Local model routes. No planner call."
+      },
+      {
+        value: "executor",
+        label: "Executor decides",
+        description: "Your executor routes. No planner call, no download."
       }
     ];
+    function effectiveDuetEntry(setting, routerState) {
+      if (setting === "router" && routerState !== "ready")
+        return { entry: "planner", downgraded: true };
+      return { entry: setting, downgraded: false };
+    }
     function duetEntryLabel2(entry) {
       return exports2.DUET_ENTRY_OPTIONS.find((option) => option.value === entry)?.label ?? entry;
     }
@@ -29222,7 +29237,7 @@ var require_duetEntry = __commonJS({
       if (typeof raw !== "string")
         return null;
       const value = raw.trim();
-      return value === "planner" || value === "router" ? value : null;
+      return value === "planner" || value === "router" || value === "executor" ? value : null;
     }
     exports2.DUET_HANDOFF_TOOL = "hand_off";
     exports2.DUET_HANDOFF_CAPABILITY = "duet_handoff";
@@ -29345,6 +29360,67 @@ var require_duetEntry = __commonJS({
   }
 });
 
+// ../packages/orion-client-core/dist/duetExecutorGateStatus.js
+var require_duetExecutorGateStatus = __commonJS({
+  "../packages/orion-client-core/dist/duetExecutorGateStatus.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.executorGateStatusLine = executorGateStatusLine2;
+    exports2.executorGateFallbackNote = executorGateFallbackNote;
+    exports2.executorGateOptionAvailability = executorGateOptionAvailability;
+    function unavailableWhy(reason, problem) {
+      switch (reason) {
+        case "not_resolved":
+          return "its endpoint is not configured";
+        case "unreachable":
+          return "it is not answering";
+        case "no_completions":
+          return "it has no /v1/completions route";
+        case "thinking":
+          return "its completions route answers thinking text, not a plain token";
+        case "unparseable":
+          return "it did not answer E or P";
+        case "error":
+          return `the gate call failed (${problem})`;
+      }
+    }
+    function executorGateStatusLine2(status) {
+      switch (status.state) {
+        case "ready":
+          return `Executor gate: ${status.target.model} on '${status.target.name}' \xB7 ${status.mode} \xB7 threshold ${status.threshold} \xB7 ${status.calibration.passed}/${status.calibration.total} scenarios \xB7 ready`;
+        case "miscalibrated":
+          return `Executor gate: ${status.target.model} on '${status.target.name}' misrouted ${status.calibration.failed.length} of ${status.calibration.total} probe scenarios (${status.mode}, threshold ${status.threshold}) \u2014 tune executorGate.threshold on that endpoint.`;
+        case "platform":
+          return "Executor gate: the Duet executor is a platform model \u2014 this entry routes on Duet's rules.";
+        case "unavailable":
+          return `Executor gate: not asking \u2014 ${unavailableWhy(status.reason, status.problem)}.`;
+      }
+    }
+    function executorGateFallbackNote(status) {
+      const why = status.state === "platform" ? "the Duet executor is a platform model" : status.state === "unavailable" ? unavailableWhy(status.reason, status.problem) : "it could not run";
+      return `Executor decides could not ask your executor (${why}) \u2014 this turn routed on Duet's rules instead.`;
+    }
+    function executorGateOptionAvailability(status) {
+      if (status === null || status.state === "ready")
+        return { disabled: false, note: null };
+      switch (status.state) {
+        case "platform":
+          return { disabled: false, note: "The executor is a platform model \u2014 routes on Duet's rules." };
+        case "miscalibrated":
+          return {
+            disabled: false,
+            note: `The gate misrouted ${status.calibration.failed.length} of ${status.calibration.total} probe scenarios \u2014 tune executorGate.threshold on that endpoint.`
+          };
+        case "unavailable":
+          return {
+            disabled: false,
+            note: `The executor cannot be asked right now (${unavailableWhy(status.reason, status.problem)}) \u2014 routes on Duet's rules.`
+          };
+      }
+    }
+  }
+});
+
 // ../packages/orion-client-core/dist/duetRouterModel.js
 var require_duetRouterModel = __commonJS({
   "../packages/orion-client-core/dist/duetRouterModel.js"(exports2) {
@@ -29400,7 +29476,6 @@ var require_duetRouterModel = __commonJS({
     exports2.classifyWithHeads = classifyWithHeads;
     exports2.createDuetRouter = createDuetRouter;
     exports2.createTransformersDuetRouterEncoder = createTransformersDuetRouterEncoder;
-    exports2.effectiveDuetEntry = effectiveDuetEntry;
     exports2.duetRouterDisplayName = duetRouterDisplayName2;
     exports2.duetRouterStatusLine = duetRouterStatusLine2;
     exports2.duetRouterDowngradeNote = duetRouterDowngradeNote;
@@ -29412,6 +29487,8 @@ var require_duetRouterModel = __commonJS({
     var fs15 = __importStar(__require("node:fs/promises"));
     var os9 = __importStar(__require("node:os"));
     var path14 = __importStar(__require("node:path"));
+    var duetEntry_js_1 = require_duetEntry();
+    var duetExecutorGateStatus_js_1 = require_duetExecutorGateStatus();
     exports2.DUET_ROUTER_WIRE_KEY = "duet_router";
     exports2.DUET_ROUTER_BUNDLE_FORMAT = "orion-router-bundle.v1";
     exports2.DUET_ROUTER_MODEL_ID = "orion/orion-pe-router-1.0";
@@ -29425,13 +29502,16 @@ var require_duetRouterModel = __commonJS({
     ];
     function duetRouterWireForSegment(verdict) {
       return {
+        source: verdict.source,
         model: verdict.model,
         version: verdict.version,
         verdict: verdict.verdict,
         p_plan: round6(verdict.pPlan),
         asks_for_plan: verdict.asksForPlan,
         high_risk: verdict.highRisk,
-        reason: verdict.reason
+        reason: verdict.reason,
+        ...verdict.margin !== void 0 ? { margin: round6(verdict.margin) } : {},
+        ...verdict.mode !== void 0 ? { mode: verdict.mode } : {}
       };
     }
     function orionModelsDir(homeDir = os9.homedir()) {
@@ -29662,6 +29742,7 @@ var require_duetRouterModel = __commonJS({
           if (!vector)
             throw new Error("router encoder returned no vector");
           return {
+            source: "orion_router",
             ...classifyWithHeads(vector, bundle),
             model: bundle.name,
             version: bundle.version,
@@ -29731,11 +29812,6 @@ var require_duetRouterModel = __commonJS({
         }
       };
     }
-    function effectiveDuetEntry(setting, routerState) {
-      if (setting === "router" && routerState !== "ready")
-        return { entry: "planner", downgraded: true };
-      return { entry: setting, downgraded: false };
-    }
     function duetRouterDisplayName2(name2, version) {
       const trimmed = name2.trim();
       const v2 = version.trim();
@@ -29757,7 +29833,9 @@ var require_duetRouterModel = __commonJS({
       const why = status.state === "missing" ? "it is not installed" : status.state === "invalid" ? `it is unusable (${status.problem})` : `it failed to load${"problem" in status && status.problem ? ` (${status.problem})` : ""}`;
       return `Router decides needs the Orion router model and ${why} \u2014 this turn ran through the planner instead.`;
     }
-    function duetEntryOptionAvailability2(entry, status) {
+    function duetEntryOptionAvailability2(entry, status, executorStatus = null) {
+      if (entry === "executor")
+        return (0, duetExecutorGateStatus_js_1.executorGateOptionAvailability)(executorStatus);
       if (entry !== "router" || status === null || status.state === "ready")
         return { disabled: false, note: null };
       return {
@@ -29797,6 +29875,7 @@ var require_duetRouterModel = __commonJS({
       let router = null;
       let building = null;
       let noted = false;
+      let executorNoted = false;
       const status = async (o = {}) => {
         const now2 = Date.now();
         if (!o.refresh && cached !== null && now2 - cached.at < exports2.DUET_ROUTER_STATUS_TTL_MS)
@@ -29808,11 +29887,18 @@ var require_duetRouterModel = __commonJS({
       const downgrade = (why) => {
         const note = noted ? null : duetRouterDowngradeNote(why);
         noted = true;
-        return { ...effectiveDuetEntry("router", why.state), verdict: null, note };
+        return { ...(0, duetEntry_js_1.effectiveDuetEntry)("router", why.state), verdict: null, note };
       };
       return {
         status,
-        async prepareTurn(setting, text) {
+        async prepareTurn(setting, text, ctx = {}) {
+          if (setting === "executor") {
+            if (opts.executorGate !== void 0)
+              return opts.executorGate.prepareTurn(text, ctx);
+            const note = executorNoted ? null : (0, duetExecutorGateStatus_js_1.executorGateFallbackNote)({ state: "unavailable", reason: "error", problem: "this host has no executor gate" });
+            executorNoted = true;
+            return { entry: "executor", verdict: null, note };
+          }
           if (setting !== "router")
             return { entry: setting, verdict: null, note: null };
           if (text.trim() === "")
@@ -29846,6 +29932,8 @@ var require_duetRouterModel = __commonJS({
         invalidate() {
           cached = null;
           noted = false;
+          executorNoted = false;
+          opts.executorGate?.invalidate();
           const live = router;
           router = null;
           building = null;
@@ -30164,6 +30252,7 @@ var require_duetPlan = __commonJS({
     exports2.duetReplanFollowupPrompt = duetReplanFollowupPrompt2;
     exports2.recordDuetTurnOutcome = recordDuetTurnOutcome;
     exports2.foldDuetTurnEnd = foldDuetTurnEnd2;
+    var duetEntry_js_1 = require_duetEntry();
     exports2.DUET_PLAN_MAX_LEN = 65536;
     exports2.DUET_PLAN_MAX_VERSION = 1e4;
     exports2.DUET_PLAN_GRANTS = ["default", "workspace_write"];
@@ -30306,7 +30395,7 @@ var require_duetPlan = __commonJS({
         return false;
       const noPlan = duetPlanWireForSegment(record) === void 0;
       if (noPlan) {
-        if (entry !== "router")
+        if (!(0, duetEntry_js_1.isModelRoutedEntry)(entry))
           return false;
         if (highRiskRequest(text))
           return false;
@@ -30320,7 +30409,7 @@ var require_duetPlan = __commonJS({
         return false;
       if (record.userNegativeFeedback)
         return false;
-      if (entry !== "router")
+      if (!(0, duetEntry_js_1.isModelRoutedEntry)(entry))
         return continuationRequest(text);
       return verdict ? verdict.verdict === "execute" : true;
     }
@@ -33386,6 +33475,8 @@ var require_segmentDriver = __commonJS({
         body2.workspace_root = routing.workspaceRoot;
       if (routing.clientType !== void 0)
         body2.client_type = routing.clientType;
+      if (routing.clientVersion !== void 0)
+        body2.client_version = routing.clientVersion;
       if (routing.mode !== void 0)
         body2.mode = routing.mode;
       if (routing.reasoning !== void 0)
@@ -34679,7 +34770,10 @@ var require_frames = __commonJS({
           if (typeof frame.id !== "string") {
             throw new FrameDecodeError("malformed renew_bearer frame");
           }
-          return { type: "renew_bearer", id: frame.id };
+          const decoded = { type: "renew_bearer", id: frame.id };
+          if (typeof frame.refused === "string")
+            decoded.refused = frame.refused;
+          return decoded;
         }
         case "rpc_result": {
           if (typeof frame.id !== "string" || !("result" in frame)) {
@@ -35269,11 +35363,12 @@ var require_customProviders = __commonJS({
       };
     }();
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.EXECUTOR_LIVENESS_TIMEOUT_MS = exports2.EXECUTOR_LIVENESS_TTL_MS = exports2.PROBE_TIMEOUT_MS = exports2.ROUTING_MODELS_KEY = exports2.MAX_CONTEXT_WINDOW = exports2.MIN_CONTEXT_WINDOW = void 0;
+    exports2.EXECUTOR_LIVENESS_TIMEOUT_MS = exports2.EXECUTOR_LIVENESS_TTL_MS = exports2.PROBE_TIMEOUT_MS = exports2.EXECUTOR_GATE_THRESHOLD_BOUND = exports2.EXECUTOR_GATE_DEFAULT_THRESHOLD = exports2.EXECUTOR_GATE_KEY = exports2.ROUTING_MODELS_KEY = exports2.MAX_CONTEXT_WINDOW = exports2.MIN_CONTEXT_WINDOW = void 0;
     exports2.customProviderSettingsPath = customProviderSettingsPath;
     exports2.clampContextWindow = clampContextWindow;
     exports2.normalizeModelConfig = normalizeModelConfig;
     exports2.normalizeRoutingModels = normalizeRoutingModels;
+    exports2.normalizeExecutorGate = normalizeExecutorGate;
     exports2.loadCustomProviders = loadCustomProviders3;
     exports2.getCustomProvider = getCustomProvider2;
     exports2.saveCustomProvider = saveCustomProvider3;
@@ -35303,6 +35398,9 @@ var require_customProviders = __commonJS({
     exports2.MIN_CONTEXT_WINDOW = 1024;
     exports2.MAX_CONTEXT_WINDOW = 2e6;
     exports2.ROUTING_MODELS_KEY = "routingModels";
+    exports2.EXECUTOR_GATE_KEY = "executorGate";
+    exports2.EXECUTOR_GATE_DEFAULT_THRESHOLD = 0;
+    exports2.EXECUTOR_GATE_THRESHOLD_BOUND = 20;
     var CUSTOM_REF_PREFIX = "custom:";
     var FILE_TIERS = ["user", "project", "local"];
     function customProviderSettingsPath(tier, opts = {}) {
@@ -35372,6 +35470,16 @@ var require_customProviders = __commonJS({
       }
       return Object.keys(out2).length > 0 ? out2 : void 0;
     }
+    function normalizeExecutorGate(raw) {
+      if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+        return void 0;
+      const threshold = raw.threshold;
+      if (typeof threshold !== "number" || !Number.isFinite(threshold))
+        return void 0;
+      return {
+        threshold: Math.max(-exports2.EXECUTOR_GATE_THRESHOLD_BOUND, Math.min(exports2.EXECUTOR_GATE_THRESHOLD_BOUND, threshold))
+      };
+    }
     function toEntry(name2, raw) {
       if (typeof raw !== "object" || raw === null || Array.isArray(raw))
         return null;
@@ -35397,6 +35505,9 @@ var require_customProviders = __commonJS({
       const routingModels = normalizeRoutingModels(value[exports2.ROUTING_MODELS_KEY]);
       if (routingModels !== void 0)
         entry.routingModels = routingModels;
+      const executorGate = normalizeExecutorGate(value[exports2.EXECUTOR_GATE_KEY]);
+      if (executorGate !== void 0)
+        entry.executorGate = executorGate;
       return entry;
     }
     async function readTier(tier, opts) {
@@ -35667,7 +35778,8 @@ var require_customProviders = __commonJS({
         // keyless is valid — local servers ignore auth
         wire: entry.wire,
         ...entry.modelConfig ? { modelConfig: entry.modelConfig } : {},
-        ...entry.routingModels ? { routingModels: entry.routingModels } : {}
+        ...entry.routingModels ? { routingModels: entry.routingModels } : {},
+        ...entry.executorGate ? { executorGate: entry.executorGate } : {}
       };
       routingByRef.set(provider, routing);
       while (routingByRef.size > ROUTING_CACHE_MAX) {
@@ -35783,6 +35895,7 @@ var require_customProviders = __commonJS({
       const wire = { ...routing };
       delete wire.modelConfig;
       delete wire.routingModels;
+      delete wire.executorGate;
       const declared = routing.modelConfig?.[modelId];
       if (declared === void 0)
         return wire;
@@ -36018,75 +36131,9 @@ var require_duetRouterInstall = __commonJS({
   }
 });
 
-// ../packages/orion-client-core/dist/runs/common.js
-var require_common = __commonJS({
-  "../packages/orion-client-core/dist/runs/common.js"(exports2) {
-    "use strict";
-    Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.mintRunId = mintRunId;
-    exports2.runsRootFor = runsRootFor2;
-    exports2.readJsonFile = readJsonFile;
-    exports2.writeJsonFile = writeJsonFile;
-    exports2.ensureDirFor = ensureDirFor;
-    exports2.listDirNames = listDirNames;
-    exports2.dayKey = dayKey;
-    exports2.clipTail = clipTail;
-    var fs_1 = __require("fs");
-    var os_1 = __require("os");
-    var path_1 = __require("path");
-    var atomicWrite_js_1 = require_atomicWrite();
-    var experienceStore_js_1 = require_experienceStore();
-    var ID_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
-    var ID_SUFFIX_LEN = 6;
-    function mintRunId(prefix, nowMs = Date.now(), rand = Math.random) {
-      let suffix = "";
-      for (let i2 = 0; i2 < ID_SUFFIX_LEN; i2 += 1) {
-        suffix += ID_ALPHABET[Math.floor(rand() * ID_ALPHABET.length) % ID_ALPHABET.length];
-      }
-      return `${prefix}_${String(nowMs).padStart(13, "0")}_${suffix}`;
-    }
-    function runsRootFor2(kind, workspaceRoot, home = (0, os_1.homedir)()) {
-      return (0, path_1.join)((0, experienceStore_js_1.projectDirFor)(workspaceRoot, home), "runs", kind);
-    }
-    async function readJsonFile(path14) {
-      try {
-        const raw = await fs_1.promises.readFile(path14, "utf8");
-        return JSON.parse(raw);
-      } catch {
-        return null;
-      }
-    }
-    async function writeJsonFile(path14, value) {
-      await ensureDirFor(path14);
-      await (0, atomicWrite_js_1.atomicWriteFile)(path14, JSON.stringify(value, null, 2));
-    }
-    async function ensureDirFor(path14) {
-      await fs_1.promises.mkdir((0, path_1.dirname)(path14), { recursive: true });
-    }
-    async function listDirNames(path14) {
-      try {
-        return await fs_1.promises.readdir(path14);
-      } catch {
-        return [];
-      }
-    }
-    function dayKey(nowMs = Date.now()) {
-      const d2 = new Date(nowMs);
-      const month = `${d2.getMonth() + 1}`.padStart(2, "0");
-      const day = `${d2.getDate()}`.padStart(2, "0");
-      return `${d2.getFullYear()}-${month}-${day}`;
-    }
-    function clipTail(text, max) {
-      if (text.length <= max)
-        return text;
-      return `\u2026${text.slice(text.length - (max - 1))}`;
-    }
-  }
-});
-
-// ../packages/orion-client-core/dist/customProviderModels.js
-var require_customProviderModels = __commonJS({
-  "../packages/orion-client-core/dist/customProviderModels.js"(exports2) {
+// ../packages/orion-client-core/dist/duetRoutingLog.js
+var require_duetRoutingLog = __commonJS({
+  "../packages/orion-client-core/dist/duetRoutingLog.js"(exports2) {
     "use strict";
     var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m2, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -36126,289 +36173,238 @@ var require_customProviderModels = __commonJS({
       };
     }();
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.CATALOG_GC_MS = exports2.CATALOG_TTL_MS = exports2.CATALOG_SCHEMA_VERSION = void 0;
-    exports2.catalogPathFor = catalogPathFor;
-    exports2.endpointCatalog = endpointCatalog2;
-    exports2.findProbedModel = findProbedModel;
-    exports2.resolveModelSettings = resolveModelSettings2;
-    exports2.catalogModelIds = catalogModelIds2;
-    exports2.clearEndpointCatalog = clearEndpointCatalog3;
-    exports2.endpointModelViews = endpointModelViews2;
-    exports2.updateCustomProviderModels = updateCustomProviderModels2;
+    exports2.DUET_ROUTING_LOG_DEFAULT_MODE = exports2.DUET_ROUTING_LOG_KEY = exports2.DUET_ROUTING_LOG_HEAD_CHARS = exports2.DUET_ROUTING_LOG_MAX_BYTES = exports2.DUET_ROUTING_LOG_SCHEMA = void 0;
+    exports2.duetRoutingLogPath = duetRoutingLogPath2;
+    exports2.newDecisionId = newDecisionId;
+    exports2.sessionKey = sessionKey;
+    exports2.lexicalSimilarity = lexicalSimilarity;
+    exports2.planDiffRatio = planDiffRatio;
+    exports2.clearDuetRoutingLogCache = clearDuetRoutingLogCache;
+    exports2.duetRoutingLogMode = duetRoutingLogMode2;
+    exports2.redactRowForMode = redactRowForMode;
+    exports2.appendDuetRoutingRow = appendDuetRoutingRow;
+    exports2.readDuetRoutingLog = readDuetRoutingLog2;
+    exports2.summarizeDuetRoutingLog = summarizeDuetRoutingLog2;
+    exports2.formatDuetRoutingLogSummary = formatDuetRoutingLogSummary2;
     var node_crypto_1 = __require("node:crypto");
+    var fs15 = __importStar(__require("node:fs/promises"));
     var os9 = __importStar(__require("node:os"));
     var path14 = __importStar(__require("node:path"));
-    var customProviders_1 = require_customProviders();
-    var common_1 = require_common();
-    exports2.CATALOG_SCHEMA_VERSION = 1;
-    exports2.CATALOG_TTL_MS = 9e5;
-    exports2.CATALOG_GC_MS = 45 * 24 * 60 * 60 * 1e3;
-    function catalogPathFor(baseUrl, homeDir = os9.homedir()) {
-      const digest = (0, node_crypto_1.createHash)("sha256").update(normalizeBaseUrl(baseUrl)).digest("hex").slice(0, 16);
-      return path14.join(homeDir, ".orion", "cache", "models", `${digest}.json`);
+    var settingsPaths_js_1 = require_settingsPaths();
+    exports2.DUET_ROUTING_LOG_SCHEMA = 3;
+    exports2.DUET_ROUTING_LOG_MAX_BYTES = 5 * 1024 * 1024;
+    exports2.DUET_ROUTING_LOG_HEAD_CHARS = 200;
+    exports2.DUET_ROUTING_LOG_KEY = "duetRoutingLog";
+    exports2.DUET_ROUTING_LOG_DEFAULT_MODE = "full";
+    function duetRoutingLogPath2(opts = {}) {
+      return path14.join(opts.homeDir ?? os9.homedir(), ".orion", "duet-routing-decisions.jsonl");
     }
-    function normalizeBaseUrl(baseUrl) {
-      return baseUrl.trim().replace(/\/+$/, "");
+    function newDecisionId() {
+      return (0, node_crypto_1.randomUUID)();
     }
-    async function readRecordFromDisk(baseUrl) {
-      const record = await (0, common_1.readJsonFile)(catalogPathFor(baseUrl));
-      if (record === null)
-        return null;
-      if (record.version !== exports2.CATALOG_SCHEMA_VERSION)
-        return null;
-      if (normalizeBaseUrl(record.baseUrl ?? "") !== normalizeBaseUrl(baseUrl))
-        return null;
-      if (!Array.isArray(record.models))
-        return null;
-      return record;
+    function sessionKey(sessionId) {
+      if (sessionId === void 0 || sessionId === "")
+        return void 0;
+      return (0, node_crypto_1.createHash)("sha256").update(sessionId).digest("hex").slice(0, 12);
     }
-    var sweptThisProcess = false;
-    async function gcEndpointCatalogs(now2, homeDir = os9.homedir()) {
-      if (sweptThisProcess)
-        return;
-      sweptThisProcess = true;
-      try {
-        const dir = path14.dirname(catalogPathFor("x", homeDir));
-        const fs15 = await Promise.resolve().then(() => __importStar(__require("node:fs/promises")));
-        for (const name2 of await fs15.readdir(dir)) {
-          if (!name2.endsWith(".json"))
-            continue;
-          const file = path14.join(dir, name2);
-          try {
-            const record = await (0, common_1.readJsonFile)(file);
-            const age = typeof record?.fetchedAt === "number" ? now2 - record.fetchedAt : now2 - (await fs15.stat(file)).mtimeMs;
-            if (age > exports2.CATALOG_GC_MS)
-              await fs15.rm(file, { force: true });
-          } catch {
-          }
-        }
-      } catch {
-      }
+    function tokens(text) {
+      return new Set(text.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length > 1));
     }
-    async function writeRecordToDisk(record) {
-      try {
-        await (0, common_1.writeJsonFile)(catalogPathFor(record.baseUrl), record);
-      } catch {
-      }
-      void gcEndpointCatalogs(record.fetchedAt);
+    function jaccard(a, b2) {
+      if (a.size === 0 && b2.size === 0)
+        return 1;
+      let inter = 0;
+      for (const t of a)
+        if (b2.has(t))
+          inter += 1;
+      const union = a.size + b2.size - inter;
+      return union === 0 ? 0 : inter / union;
     }
-    var memory = /* @__PURE__ */ new Map();
-    var inFlight2 = /* @__PURE__ */ new Map();
-    function depsWith(deps2) {
-      return {
-        now: deps2.now ?? (() => Date.now()),
-        probe: deps2.probe ?? customProviders_1.probeModels,
-        readRecord: deps2.readRecord ?? readRecordFromDisk,
-        writeRecord: deps2.writeRecord ?? writeRecordToDisk
-      };
+    function lexicalSimilarity(a, b2) {
+      return Math.round(jaccard(tokens(a), tokens(b2)) * 1e3) / 1e3;
     }
-    async function probeAndStore(entry, d2) {
-      const key = normalizeBaseUrl(entry.baseUrl);
-      const existing = inFlight2.get(key);
-      if (existing !== void 0)
-        return existing;
-      const run3 = (async () => {
-        const models = await d2.probe(entry.baseUrl, await (0, customProviders_1.resolveApiKey)(entry));
-        if (models === null || models.length === 0)
-          return models;
-        const record = {
-          version: exports2.CATALOG_SCHEMA_VERSION,
-          baseUrl: entry.baseUrl,
-          fetchedAt: d2.now(),
-          models
-        };
-        memory.set(key, record);
-        await d2.writeRecord(record);
-        return models;
-      })().finally(() => inFlight2.delete(key));
-      inFlight2.set(key, run3);
-      return run3;
+    function planDiffRatio(before, after) {
+      const lines = (plan) => new Set(plan.split(/\r?\n/).map((l3) => l3.trim()).filter((l3) => l3 !== ""));
+      return Math.round((1 - jaccard(lines(before), lines(after))) * 1e3) / 1e3;
     }
-    async function endpointCatalog2(entry, options = {}) {
-      const d2 = depsWith(options);
-      const key = normalizeBaseUrl(entry.baseUrl);
-      let record = memory.get(key) ?? null;
-      if (record === null) {
-        record = await d2.readRecord(entry.baseUrl);
-        if (record !== null)
-          memory.set(key, record);
-      }
-      if (options.cachedOnly === true)
-        return record?.models ?? [];
-      const fresh = record !== null && d2.now() - record.fetchedAt < exports2.CATALOG_TTL_MS;
-      if (record !== null && fresh && options.force !== true)
-        return record.models;
-      if (record !== null) {
-        void probeAndStore(entry, d2).catch(() => void 0);
-        return record.models;
-      }
-      return await probeAndStore(entry, d2) ?? [];
+    var MODE_CACHE_TTL_MS = 5e3;
+    var modeCache = /* @__PURE__ */ new Map();
+    function clearDuetRoutingLogCache() {
+      modeCache.clear();
     }
-    function findProbedModel(models, id) {
-      return models.find((model) => model.id === id);
+    function coerceMode(raw) {
+      return raw === "full" || raw === "head" || raw === "off" ? raw : null;
     }
-    function resolveModelSettings2(entry, modelId, catalog = []) {
-      const declared = entry.modelConfig?.[modelId];
-      const probed = findProbedModel(catalog, modelId);
-      const resolved = {};
-      const contextWindow = declared?.contextWindow ?? probed?.contextWindow;
-      if (contextWindow !== void 0)
-        resolved.contextWindow = contextWindow;
-      const maxOutputTokens = declared?.maxOutputTokens ?? probed?.maxOutputTokens;
-      if (maxOutputTokens !== void 0)
-        resolved.maxOutputTokens = maxOutputTokens;
-      if (probed?.reasoning !== void 0)
-        resolved.reasoning = probed.reasoning;
-      for (const knob of ["temperature", "topP", "topK", "repetitionPenalty"]) {
-        const value = declared?.[knob];
-        if (typeof value === "number")
-          resolved[knob] = value;
+    async function readTierMode(file) {
+      if (file === null)
+        return null;
+      try {
+        const parsed = JSON.parse(await fs15.readFile(file, "utf8"));
+        return coerceMode(parsed?.[exports2.DUET_ROUTING_LOG_KEY]?.mode);
+      } catch {
+        return null;
       }
-      return resolved;
-    }
-    function catalogModelIds2(entry, catalog) {
-      return entry.models?.length ? entry.models : catalog.map((model) => model.id);
     }
-    function clearEndpointCatalog3(baseUrl) {
-      if (baseUrl === void 0) {
-        memory.clear();
-        inFlight2.clear();
-        sweptThisProcess = false;
-        return;
+    async function duetRoutingLogMode2(opts = {}) {
+      const home = opts.homeDir ?? os9.homedir();
+      const ws = opts.workspaceRoot ?? null;
+      const key = `${home}\0${ws ?? ""}`;
+      const hit = modeCache.get(key);
+      if (hit !== void 0 && Date.now() - hit.at < MODE_CACHE_TTL_MS)
+        return hit.mode;
+      let mode = exports2.DUET_ROUTING_LOG_DEFAULT_MODE;
+      const tiers = ["user", "project", "local"];
+      for (const tier of tiers) {
+        const found = await readTierMode((0, settingsPaths_js_1.settingsFilePath)(tier, { homeDir: home, workspaceRoot: ws }));
+        if (found !== null)
+          mode = found;
       }
-      const key = normalizeBaseUrl(baseUrl);
-      memory.delete(key);
-      inFlight2.delete(key);
+      modeCache.set(key, { at: Date.now(), mode });
+      return mode;
     }
-    async function endpointModelViews2(entry, options = {}) {
-      const catalog = await endpointCatalog2(entry, options);
-      const pinned = new Set(entry.models ?? []);
-      const ids = [...pinned, ...catalog.map((model) => model.id).filter((id) => !pinned.has(id))];
-      return ids.map((id) => {
-        const resolved = resolveModelSettings2(entry, id, catalog);
-        const declared = entry.modelConfig?.[id];
-        const view = { id, pinned: pinned.has(id) };
-        if (resolved.contextWindow !== void 0)
-          view.contextWindow = resolved.contextWindow;
-        if (resolved.maxOutputTokens !== void 0)
-          view.maxOutputTokens = resolved.maxOutputTokens;
-        if (resolved.reasoning !== void 0)
-          view.reasoning = resolved.reasoning;
-        if (declared?.contextWindow !== void 0 || declared?.maxOutputTokens !== void 0) {
-          view.source = "user";
-        } else if (view.contextWindow !== void 0 || view.maxOutputTokens !== void 0) {
-          view.source = "endpoint";
-        }
-        return view;
-      });
+    function head(text, max) {
+      return text.length > max ? `${text.slice(0, max - 1)}\u2026` : text;
     }
-    async function updateCustomProviderModels2(name2, update, tier = "user", opts = {}) {
-      const entry = await (0, customProviders_1.getCustomProvider)(name2, opts);
-      if (entry === null)
-        return false;
-      const next = { ...entry };
-      if (update.models !== void 0) {
-        if (update.models.length)
-          next.models = update.models;
-        else
-          delete next.models;
+    function redactRowForMode(row, mode) {
+      if (mode === "off")
+        return null;
+      if (mode === "full")
+        return row;
+      if (row.kind === "planner") {
+        return row.brief === void 0 ? row : { ...row, brief: head(row.brief, exports2.DUET_ROUTING_LOG_HEAD_CHARS) };
       }
-      if (update.modelConfig !== void 0) {
-        const kept = Object.entries(update.modelConfig).map(([id, raw]) => [id, (0, customProviders_1.normalizeModelConfig)(raw)]).filter(([, value]) => value !== void 0 && Object.keys(value).length > 0);
-        if (kept.length)
-          next.modelConfig = Object.fromEntries(kept);
-        else
-          delete next.modelConfig;
+      if (row.kind !== "decision")
+        return row;
+      return {
+        ...row,
+        prompt: head(row.prompt, exports2.DUET_ROUTING_LOG_HEAD_CHARS),
+        assumptions: row.assumptions.map((a) => ({ id: a.id, text: head(a.text, 100) }))
+      };
+    }
+    var writeQueues = /* @__PURE__ */ new Map();
+    async function writeRow(row, file, opts) {
+      const redacted = redactRowForMode(row, await duetRoutingLogMode2(opts));
+      if (redacted === null)
+        return;
+      await fs15.mkdir(path14.dirname(file), { recursive: true });
+      try {
+        const stat = await fs15.stat(file);
+        if (stat.size >= exports2.DUET_ROUTING_LOG_MAX_BYTES)
+          await fs15.rename(file, `${file}.1`);
+      } catch {
       }
-      await (0, customProviders_1.saveCustomProvider)(next, tier, opts);
-      clearEndpointCatalog3(entry.baseUrl);
-      return true;
+      await fs15.appendFile(file, `${JSON.stringify(redacted)}
+`, "utf8");
     }
-  }
-});
-
-// ../packages/orion-client-core/dist/duetExecutorCatalog.js
-var require_duetExecutorCatalog = __commonJS({
-  "../packages/orion-client-core/dist/duetExecutorCatalog.js"(exports2) {
-    "use strict";
-    Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.LOCAL_EXECUTOR_READ_BUDGET_MS = void 0;
-    exports2.localExecutorOptions = localExecutorOptions2;
-    exports2.duetExecutorChoiceFor = duetExecutorChoiceFor2;
-    exports2.isLocalExecutorChoice = isLocalExecutorChoice;
-    exports2.resolveDuetExecutorChoice = resolveDuetExecutorChoice2;
-    var customProviders_js_1 = require_customProviders();
-    var customProviderModels_js_1 = require_customProviderModels();
-    exports2.LOCAL_EXECUTOR_READ_BUDGET_MS = 3e3;
-    async function localExecutorOptions2(input = {}) {
-      const { catalog, timeoutMs, ...opts } = input;
-      let entries;
+    async function appendDuetRoutingRow(row, opts = {}) {
+      const file = duetRoutingLogPath2(opts);
+      const previous = writeQueues.get(file) ?? Promise.resolve();
+      const next = previous.then(() => writeRow(row, file, opts)).catch(() => void 0);
+      writeQueues.set(file, next);
+      await next;
+      if (writeQueues.get(file) === next)
+        writeQueues.delete(file);
+    }
+    async function readDuetRoutingLog2(opts = {}) {
+      let text;
       try {
-        entries = await (0, customProviders_js_1.loadCustomProviders)(opts);
+        text = await fs15.readFile(duetRoutingLogPath2(opts), "utf8");
       } catch {
         return [];
       }
-      if (entries.length === 0)
-        return [];
-      const read = (options) => Promise.all(entries.map(async (entry) => {
+      const rows = [];
+      for (const line of text.split("\n")) {
+        if (line.trim() === "")
+          continue;
         try {
-          const views = await (0, customProviderModels_js_1.endpointModelViews)(entry, options);
-          return views.map((view) => {
-            const option = {
-              provider: `custom:${entry.name}`,
-              endpoint: entry.name,
-              model: view.id,
-              pinned: view.pinned
-            };
-            if (view.contextWindow !== void 0)
-              option.contextWindow = view.contextWindow;
-            if (view.maxOutputTokens !== void 0)
-              option.maxOutputTokens = view.maxOutputTokens;
-            return option;
-          });
+          const parsed = JSON.parse(line);
+          if (parsed.kind === "decision" || parsed.kind === "turn_end" || parsed.kind === "followup" || parsed.kind === "planner") {
+            rows.push(parsed);
+          }
         } catch {
-          return [];
         }
-      })).then((perEndpoint) => perEndpoint.flat());
-      const full = read(catalog ?? {});
-      const budget = timeoutMs ?? exports2.LOCAL_EXECUTOR_READ_BUDGET_MS;
-      if (catalog?.cachedOnly === true || budget <= 0)
-        return full;
-      let timer;
-      const fallback = new Promise((resolve5) => {
-        timer = setTimeout(() => resolve5(read({ ...catalog, cachedOnly: true })), budget);
-      });
-      try {
-        return await Promise.race([full, fallback]);
-      } finally {
-        if (timer !== void 0)
-          clearTimeout(timer);
-        void full.catch(() => void 0);
       }
+      return rows;
     }
-    function duetExecutorChoiceFor2(option) {
-      return {
-        provider: option.provider,
-        model: option.model,
-        ...option.contextWindow !== void 0 ? { contextWindow: option.contextWindow } : {}
+    function summarizeDuetRoutingLog2(rows) {
+      const summary = {
+        decisions: 0,
+        routes: { plan: 0, execute: 0 },
+        stage1PlanReasons: {},
+        advisorEvaluated: 0,
+        advisorFlagged: {},
+        turnEnds: { completed: 0, error: 0, cancelled: 0 },
+        followups: 0,
+        missedEscalations: 0,
+        flaggedWithoutNewPlan: 0,
+        flaggedBarelyChanged: 0,
+        repeats: 0,
+        entries: { planner: 0, router: 0, executor: 0 },
+        plannerVerdicts: { hand_off: 0, plan: 0 }
       };
-    }
-    function isLocalExecutorChoice(choice) {
-      return typeof choice?.provider === "string" && choice.provider.startsWith("custom:");
-    }
-    async function resolveDuetExecutorChoice2(choice, input = {}) {
-      if (!isLocalExecutorChoice(choice) || choice.contextWindow !== void 0)
-        return choice;
-      const found = (await localExecutorOptions2(input)).find((option) => option.provider === choice.provider && option.model === choice.model);
-      return found === void 0 ? choice : { ...choice, ...duetExecutorChoiceFor2(found), ...choice.effort ? { effort: choice.effort } : {} };
-    }
-  }
-});
-
-// ../packages/orion-client-core/dist/duetRoutingSignals.js
-var require_duetRoutingSignals = __commonJS({
-  "../packages/orion-client-core/dist/duetRoutingSignals.js"(exports2) {
-    "use strict";
+      const decisions = /* @__PURE__ */ new Map();
+      for (const row of rows) {
+        if (row.kind !== "decision")
+          continue;
+        decisions.set(row.id, row);
+        summary.decisions += 1;
+        summary.routes[row.route] += 1;
+        summary.entries[row.entry ?? "router"] += 1;
+        if (row.stage1.verdict === "plan") {
+          summary.stage1PlanReasons[row.stage1.reason] = (summary.stage1PlanReasons[row.stage1.reason] ?? 0) + 1;
+        }
+        if (row.advisor !== null) {
+          summary.advisorEvaluated += 1;
+          if (row.advisor.reason !== null) {
+            summary.advisorFlagged[row.advisor.reason] = (summary.advisorFlagged[row.advisor.reason] ?? 0) + 1;
+          }
+        }
+      }
+      for (const row of rows) {
+        if (row.kind === "turn_end") {
+          summary.turnEnds[row.outcome] += 1;
+        } else if (row.kind === "planner") {
+          summary.plannerVerdicts[row.verdict] += 1;
+        } else if (row.kind === "followup") {
+          summary.followups += 1;
+          const decided = decisions.get(row.decisionId);
+          if (row.nextPromptSimilarity !== null && row.nextPromptSimilarity >= 0.8)
+            summary.repeats += 1;
+          if (decided === void 0)
+            continue;
+          if (decided.route === "execute" && (row.replanActor || row.nextExplicitPlanRequest)) {
+            summary.missedEscalations += 1;
+          }
+          if (decided.advisor?.flagged) {
+            if (!row.planVersionChanged)
+              summary.flaggedWithoutNewPlan += 1;
+            else if (row.planDiffRatio !== null && row.planDiffRatio < 0.1)
+              summary.flaggedBarelyChanged += 1;
+          }
+        }
+      }
+      return summary;
+    }
+    function formatDuetRoutingLogSummary2(summary, file, mode) {
+      const byKey = (m2) => Object.entries(m2).sort((a, b2) => b2[1] - a[1]).map(([k, n]) => `${k} ${n}`).join(", ") || "none";
+      return [
+        `Duet routing journal: ${file} (mode: ${mode})`,
+        `decisions ${summary.decisions} \u2014 plan ${summary.routes.plan}, execute ${summary.routes.execute}`,
+        `entry: planner ${summary.entries.planner}, router ${summary.entries.router}, executor ${summary.entries.executor}`,
+        `planner verdicts: handed off ${summary.plannerVerdicts.hand_off}, planned ${summary.plannerVerdicts.plan}`,
+        `stage-1 plan rules: ${byKey(summary.stage1PlanReasons)}`,
+        `advisor evaluated ${summary.advisorEvaluated}; flagged: ${byKey(summary.advisorFlagged)}`,
+        `turn ends \u2014 completed ${summary.turnEnds.completed}, error ${summary.turnEnds.error}, cancelled ${summary.turnEnds.cancelled}`,
+        `follow-ups ${summary.followups} \u2014 missed escalations ${summary.missedEscalations}, flagged without a new plan ${summary.flaggedWithoutNewPlan}, flagged but barely changed ${summary.flaggedBarelyChanged}, repeats ${summary.repeats}`
+      ];
+    }
+  }
+});
+
+// ../packages/orion-client-core/dist/duetRoutingSignals.js
+var require_duetRoutingSignals = __commonJS({
+  "../packages/orion-client-core/dist/duetRoutingSignals.js"(exports2) {
+    "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.ROUTING_JUDGE_MAX_TOKENS = exports2.ROUTING_JUDGE_TIMEOUT_MS = exports2.ROUTING_SIGNAL_TIMEOUT_MS = void 0;
     exports2.cosineSimilarity = cosineSimilarity;
@@ -36584,276 +36580,6 @@ Does this message invalidate any plan assumption or require architectural re-pla
   }
 });
 
-// ../packages/orion-client-core/dist/duetRoutingLog.js
-var require_duetRoutingLog = __commonJS({
-  "../packages/orion-client-core/dist/duetRoutingLog.js"(exports2) {
-    "use strict";
-    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m2, k, k2) {
-      if (k2 === void 0) k2 = k;
-      var desc = Object.getOwnPropertyDescriptor(m2, k);
-      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
-        desc = { enumerable: true, get: function() {
-          return m2[k];
-        } };
-      }
-      Object.defineProperty(o, k2, desc);
-    } : function(o, m2, k, k2) {
-      if (k2 === void 0) k2 = k;
-      o[k2] = m2[k];
-    });
-    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v2) {
-      Object.defineProperty(o, "default", { enumerable: true, value: v2 });
-    } : function(o, v2) {
-      o["default"] = v2;
-    });
-    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
-      var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function(o2) {
-          var ar = [];
-          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
-          return ar;
-        };
-        return ownKeys(o);
-      };
-      return function(mod2) {
-        if (mod2 && mod2.__esModule) return mod2;
-        var result = {};
-        if (mod2 != null) {
-          for (var k = ownKeys(mod2), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding(result, mod2, k[i2]);
-        }
-        __setModuleDefault(result, mod2);
-        return result;
-      };
-    }();
-    Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.DUET_ROUTING_LOG_DEFAULT_MODE = exports2.DUET_ROUTING_LOG_KEY = exports2.DUET_ROUTING_LOG_HEAD_CHARS = exports2.DUET_ROUTING_LOG_MAX_BYTES = exports2.DUET_ROUTING_LOG_SCHEMA = void 0;
-    exports2.duetRoutingLogPath = duetRoutingLogPath2;
-    exports2.newDecisionId = newDecisionId;
-    exports2.sessionKey = sessionKey;
-    exports2.lexicalSimilarity = lexicalSimilarity;
-    exports2.planDiffRatio = planDiffRatio;
-    exports2.clearDuetRoutingLogCache = clearDuetRoutingLogCache;
-    exports2.duetRoutingLogMode = duetRoutingLogMode2;
-    exports2.redactRowForMode = redactRowForMode;
-    exports2.appendDuetRoutingRow = appendDuetRoutingRow;
-    exports2.readDuetRoutingLog = readDuetRoutingLog2;
-    exports2.summarizeDuetRoutingLog = summarizeDuetRoutingLog2;
-    exports2.formatDuetRoutingLogSummary = formatDuetRoutingLogSummary2;
-    var node_crypto_1 = __require("node:crypto");
-    var fs15 = __importStar(__require("node:fs/promises"));
-    var os9 = __importStar(__require("node:os"));
-    var path14 = __importStar(__require("node:path"));
-    var settingsPaths_js_1 = require_settingsPaths();
-    exports2.DUET_ROUTING_LOG_SCHEMA = 3;
-    exports2.DUET_ROUTING_LOG_MAX_BYTES = 5 * 1024 * 1024;
-    exports2.DUET_ROUTING_LOG_HEAD_CHARS = 200;
-    exports2.DUET_ROUTING_LOG_KEY = "duetRoutingLog";
-    exports2.DUET_ROUTING_LOG_DEFAULT_MODE = "full";
-    function duetRoutingLogPath2(opts = {}) {
-      return path14.join(opts.homeDir ?? os9.homedir(), ".orion", "duet-routing-decisions.jsonl");
-    }
-    function newDecisionId() {
-      return (0, node_crypto_1.randomUUID)();
-    }
-    function sessionKey(sessionId) {
-      if (sessionId === void 0 || sessionId === "")
-        return void 0;
-      return (0, node_crypto_1.createHash)("sha256").update(sessionId).digest("hex").slice(0, 12);
-    }
-    function tokens(text) {
-      return new Set(text.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length > 1));
-    }
-    function jaccard(a, b2) {
-      if (a.size === 0 && b2.size === 0)
-        return 1;
-      let inter = 0;
-      for (const t of a)
-        if (b2.has(t))
-          inter += 1;
-      const union = a.size + b2.size - inter;
-      return union === 0 ? 0 : inter / union;
-    }
-    function lexicalSimilarity(a, b2) {
-      return Math.round(jaccard(tokens(a), tokens(b2)) * 1e3) / 1e3;
-    }
-    function planDiffRatio(before, after) {
-      const lines = (plan) => new Set(plan.split(/\r?\n/).map((l3) => l3.trim()).filter((l3) => l3 !== ""));
-      return Math.round((1 - jaccard(lines(before), lines(after))) * 1e3) / 1e3;
-    }
-    var MODE_CACHE_TTL_MS = 5e3;
-    var modeCache = /* @__PURE__ */ new Map();
-    function clearDuetRoutingLogCache() {
-      modeCache.clear();
-    }
-    function coerceMode(raw) {
-      return raw === "full" || raw === "head" || raw === "off" ? raw : null;
-    }
-    async function readTierMode(file) {
-      if (file === null)
-        return null;
-      try {
-        const parsed = JSON.parse(await fs15.readFile(file, "utf8"));
-        return coerceMode(parsed?.[exports2.DUET_ROUTING_LOG_KEY]?.mode);
-      } catch {
-        return null;
-      }
-    }
-    async function duetRoutingLogMode2(opts = {}) {
-      const home = opts.homeDir ?? os9.homedir();
-      const ws = opts.workspaceRoot ?? null;
-      const key = `${home}\0${ws ?? ""}`;
-      const hit = modeCache.get(key);
-      if (hit !== void 0 && Date.now() - hit.at < MODE_CACHE_TTL_MS)
-        return hit.mode;
-      let mode = exports2.DUET_ROUTING_LOG_DEFAULT_MODE;
-      const tiers = ["user", "project", "local"];
-      for (const tier of tiers) {
-        const found = await readTierMode((0, settingsPaths_js_1.settingsFilePath)(tier, { homeDir: home, workspaceRoot: ws }));
-        if (found !== null)
-          mode = found;
-      }
-      modeCache.set(key, { at: Date.now(), mode });
-      return mode;
-    }
-    function head(text, max) {
-      return text.length > max ? `${text.slice(0, max - 1)}\u2026` : text;
-    }
-    function redactRowForMode(row, mode) {
-      if (mode === "off")
-        return null;
-      if (mode === "full")
-        return row;
-      if (row.kind === "planner") {
-        return row.brief === void 0 ? row : { ...row, brief: head(row.brief, exports2.DUET_ROUTING_LOG_HEAD_CHARS) };
-      }
-      if (row.kind !== "decision")
-        return row;
-      return {
-        ...row,
-        prompt: head(row.prompt, exports2.DUET_ROUTING_LOG_HEAD_CHARS),
-        assumptions: row.assumptions.map((a) => ({ id: a.id, text: head(a.text, 100) }))
-      };
-    }
-    var writeQueues = /* @__PURE__ */ new Map();
-    async function writeRow(row, file, opts) {
-      const redacted = redactRowForMode(row, await duetRoutingLogMode2(opts));
-      if (redacted === null)
-        return;
-      await fs15.mkdir(path14.dirname(file), { recursive: true });
-      try {
-        const stat = await fs15.stat(file);
-        if (stat.size >= exports2.DUET_ROUTING_LOG_MAX_BYTES)
-          await fs15.rename(file, `${file}.1`);
-      } catch {
-      }
-      await fs15.appendFile(file, `${JSON.stringify(redacted)}
-`, "utf8");
-    }
-    async function appendDuetRoutingRow(row, opts = {}) {
-      const file = duetRoutingLogPath2(opts);
-      const previous = writeQueues.get(file) ?? Promise.resolve();
-      const next = previous.then(() => writeRow(row, file, opts)).catch(() => void 0);
-      writeQueues.set(file, next);
-      await next;
-      if (writeQueues.get(file) === next)
-        writeQueues.delete(file);
-    }
-    async function readDuetRoutingLog2(opts = {}) {
-      let text;
-      try {
-        text = await fs15.readFile(duetRoutingLogPath2(opts), "utf8");
-      } catch {
-        return [];
-      }
-      const rows = [];
-      for (const line of text.split("\n")) {
-        if (line.trim() === "")
-          continue;
-        try {
-          const parsed = JSON.parse(line);
-          if (parsed.kind === "decision" || parsed.kind === "turn_end" || parsed.kind === "followup" || parsed.kind === "planner") {
-            rows.push(parsed);
-          }
-        } catch {
-        }
-      }
-      return rows;
-    }
-    function summarizeDuetRoutingLog2(rows) {
-      const summary = {
-        decisions: 0,
-        routes: { plan: 0, execute: 0 },
-        stage1PlanReasons: {},
-        advisorEvaluated: 0,
-        advisorFlagged: {},
-        turnEnds: { completed: 0, error: 0, cancelled: 0 },
-        followups: 0,
-        missedEscalations: 0,
-        flaggedWithoutNewPlan: 0,
-        flaggedBarelyChanged: 0,
-        repeats: 0,
-        entries: { planner: 0, router: 0 },
-        plannerVerdicts: { hand_off: 0, plan: 0 }
-      };
-      const decisions = /* @__PURE__ */ new Map();
-      for (const row of rows) {
-        if (row.kind !== "decision")
-          continue;
-        decisions.set(row.id, row);
-        summary.decisions += 1;
-        summary.routes[row.route] += 1;
-        summary.entries[row.entry ?? "router"] += 1;
-        if (row.stage1.verdict === "plan") {
-          summary.stage1PlanReasons[row.stage1.reason] = (summary.stage1PlanReasons[row.stage1.reason] ?? 0) + 1;
-        }
-        if (row.advisor !== null) {
-          summary.advisorEvaluated += 1;
-          if (row.advisor.reason !== null) {
-            summary.advisorFlagged[row.advisor.reason] = (summary.advisorFlagged[row.advisor.reason] ?? 0) + 1;
-          }
-        }
-      }
-      for (const row of rows) {
-        if (row.kind === "turn_end") {
-          summary.turnEnds[row.outcome] += 1;
-        } else if (row.kind === "planner") {
-          summary.plannerVerdicts[row.verdict] += 1;
-        } else if (row.kind === "followup") {
-          summary.followups += 1;
-          const decided = decisions.get(row.decisionId);
-          if (row.nextPromptSimilarity !== null && row.nextPromptSimilarity >= 0.8)
-            summary.repeats += 1;
-          if (decided === void 0)
-            continue;
-          if (decided.route === "execute" && (row.replanActor || row.nextExplicitPlanRequest)) {
-            summary.missedEscalations += 1;
-          }
-          if (decided.advisor?.flagged) {
-            if (!row.planVersionChanged)
-              summary.flaggedWithoutNewPlan += 1;
-            else if (row.planDiffRatio !== null && row.planDiffRatio < 0.1)
-              summary.flaggedBarelyChanged += 1;
-          }
-        }
-      }
-      return summary;
-    }
-    function formatDuetRoutingLogSummary2(summary, file, mode) {
-      const byKey = (m2) => Object.entries(m2).sort((a, b2) => b2[1] - a[1]).map(([k, n]) => `${k} ${n}`).join(", ") || "none";
-      return [
-        `Duet routing journal: ${file} (mode: ${mode})`,
-        `decisions ${summary.decisions} \u2014 plan ${summary.routes.plan}, execute ${summary.routes.execute}`,
-        `entry: planner ${summary.entries.planner}, router ${summary.entries.router}`,
-        `planner verdicts: handed off ${summary.plannerVerdicts.hand_off}, planned ${summary.plannerVerdicts.plan}`,
-        `stage-1 plan rules: ${byKey(summary.stage1PlanReasons)}`,
-        `advisor evaluated ${summary.advisorEvaluated}; flagged: ${byKey(summary.advisorFlagged)}`,
-        `turn ends \u2014 completed ${summary.turnEnds.completed}, error ${summary.turnEnds.error}, cancelled ${summary.turnEnds.cancelled}`,
-        `follow-ups ${summary.followups} \u2014 missed escalations ${summary.missedEscalations}, flagged without a new plan ${summary.flaggedWithoutNewPlan}, flagged but barely changed ${summary.flaggedBarelyChanged}, repeats ${summary.repeats}`
-      ];
-    }
-  }
-});
-
 // ../packages/orion-client-core/dist/duetRoutingAdvisor.js
 var require_duetRoutingAdvisor = __commonJS({
   "../packages/orion-client-core/dist/duetRoutingAdvisor.js"(exports2) {
@@ -37180,13 +36906,23 @@ var require_duetRoutingAdvisor = __commonJS({
       } catch {
       }
     }
-    function stage1Verdict(record, text, entry) {
+    function scorerReason(verdict, highRisk) {
+      const base = verdict.source === "executor_gate" ? "executor_gate" : "router_model";
+      return highRisk ? `${base}_high_risk` : base;
+    }
+    function stage1Verdict(record, text, entry, verdict = null) {
       if ((0, duetPlan_js_1.explicitPlanRequest)(text))
         return { verdict: "plan", reason: "explicit_plan_request" };
       if (record === null) {
         if ((0, duetPlan_js_1.highRiskRequest)(text))
           return { verdict: "plan", reason: "plan_invalid" };
-        return entry === "planner" ? { verdict: "plan", reason: "planner_entry" } : { verdict: "execute", reason: "no_plan" };
+        if (entry === "planner")
+          return { verdict: "plan", reason: "planner_entry" };
+        if (verdict?.verdict === "plan")
+          return { verdict: "plan", reason: scorerReason(verdict, false) };
+        if (verdict?.highRisk)
+          return { verdict: "plan", reason: scorerReason(verdict, true) };
+        return { verdict: "execute", reason: "no_plan" };
       }
       if (record.scopeChanged)
         return { verdict: "plan", reason: "scope_changed" };
@@ -37200,6 +36936,8 @@ var require_duetRoutingAdvisor = __commonJS({
       if (entry === "planner") {
         return (0, duetPlan_js_1.continuationRequest)(text) ? { verdict: "execute", reason: "continuation" } : { verdict: "plan", reason: "planner_entry" };
       }
+      if (verdict?.verdict === "plan")
+        return { verdict: "plan", reason: scorerReason(verdict, false) };
       return { verdict: "execute", reason: "plan_valid" };
     }
     function executorContext(workspaceRoot) {
@@ -37274,7 +37012,10 @@ var require_duetRoutingAdvisor = __commonJS({
         asksForPlan: input.routerVerdict.asksForPlan,
         highRisk: input.routerVerdict.highRisk,
         reason: input.routerVerdict.reason,
-        latencyMs: input.routerVerdict.latencyMs
+        latencyMs: input.routerVerdict.latencyMs,
+        source: input.routerVerdict.source,
+        ...input.routerVerdict.margin !== void 0 ? { margin: Math.round(input.routerVerdict.margin * 1e6) / 1e6 } : {},
+        ...input.routerVerdict.mode !== void 0 ? { mode: input.routerVerdict.mode } : {}
       } : null;
       const sink = sinkFor(input.log, input.homeDir, input.workspaceRoot);
       try {
@@ -37325,7 +37066,7 @@ var require_duetRoutingAdvisor = __commonJS({
         if (standing === null) {
           resetForVersion(state, null);
           if (text !== "") {
-            const stage12 = stage1Verdict(null, text, entry);
+            const stage12 = stage1Verdict(null, text, entry, input.routerVerdict ?? null);
             journal(stage12, null, stage12.verdict, []);
           }
           return untouched(record);
@@ -37337,7 +37078,7 @@ var require_duetRoutingAdvisor = __commonJS({
         if (text === "")
           return untouched(record);
         const assumptions = parsePlanAssumptions(plan.plan);
-        const stage1 = stage1Verdict(plan, text, entry);
+        const stage1 = stage1Verdict(plan, text, entry, input.routerVerdict ?? null);
         if (stage1.verdict === "plan") {
           journal(stage1, null, "plan", assumptions);
           return untouched(record);
@@ -37386,82 +37127,953 @@ var require_duetRoutingAdvisor = __commonJS({
             }, now2);
           }
         }
-        if (candidate !== null && state.turnsUnderVersion < exports2.DUET_ADVISOR_THRESHOLDS.cooldownTurns) {
-          decision.guards.cooldown = true;
-          candidate = null;
-        }
-        let advised = plan;
-        if (candidate !== null) {
-          advised = candidate.flag === "user_negative_feedback" ? { ...plan, userNegativeFeedback: true } : { ...plan, architectureDecisionRequired: true };
-          decision.flagged = candidate.flag;
-          decision.reason = candidate.reason;
-        }
-        decision.latencyMs = Math.max(0, now2() - started);
-        journal(stage1, decision, decision.flagged !== null ? "plan" : "execute", assumptions);
-        return {
-          record: advised,
-          flagged: decision.flagged,
-          reason: decision.reason,
-          assumptionIds: candidate?.ids ?? [],
-          decision,
-          note: duetRoutingAdviceNote(decision.reason, candidate?.ids ?? [])
-        };
+        if (candidate !== null && state.turnsUnderVersion < exports2.DUET_ADVISOR_THRESHOLDS.cooldownTurns) {
+          decision.guards.cooldown = true;
+          candidate = null;
+        }
+        let advised = plan;
+        if (candidate !== null) {
+          advised = candidate.flag === "user_negative_feedback" ? { ...plan, userNegativeFeedback: true } : { ...plan, architectureDecisionRequired: true };
+          decision.flagged = candidate.flag;
+          decision.reason = candidate.reason;
+        }
+        decision.latencyMs = Math.max(0, now2() - started);
+        journal(stage1, decision, decision.flagged !== null ? "plan" : "execute", assumptions);
+        return {
+          record: advised,
+          flagged: decision.flagged,
+          reason: decision.reason,
+          assumptionIds: candidate?.ids ?? [],
+          decision,
+          note: duetRoutingAdviceNote(decision.reason, candidate?.ids ?? [])
+        };
+      } catch {
+        return untouched(record);
+      }
+    }
+    function round3(value) {
+      return Math.round(value * 1e3) / 1e3;
+    }
+    async function describeDuetRouting2(workspaceRoot) {
+      try {
+        const choice = await (0, duetMode_js_1.loadDuetExecutor)({ workspaceRoot: workspaceRoot ?? null });
+        if (choice === null || !(0, customProviders_js_1.isCustomProviderRef)(choice.provider))
+          return { kind: "platform" };
+        const name2 = (0, customProviders_js_1.parseCustomProviderRef)(choice.provider) ?? "";
+        const entry = await (0, customProviders_js_1.getCustomProvider)(name2, { workspaceRoot: workspaceRoot ?? null });
+        if (entry === null)
+          return { kind: "missing", name: name2 };
+        return {
+          kind: "local",
+          name: name2,
+          loopback: (0, customProviders_js_1.isLoopbackEndpoint)(entry.baseUrl),
+          embeddings: entry.routingModels?.embeddings !== void 0,
+          rerank: entry.routingModels?.rerank !== void 0,
+          judge: entry.routingModels?.judge ?? null
+        };
+      } catch {
+        return { kind: "platform" };
+      }
+    }
+    function duetRoutingSummaryLine2(summary) {
+      switch (summary.kind) {
+        case "platform":
+          return "Duet routing: rules only \u2014 a local executor with routing models unlocks re-ask detection and plan-assumption checks.";
+        case "missing":
+          return "Duet routing: rules only.";
+        case "local": {
+          const { name: name2, loopback, embeddings, rerank } = summary;
+          if (!embeddings && !rerank) {
+            return `Duet routing: rules only \u2014 add routingModels to '${name2}' to unlock re-ask detection and plan-assumption checks (the /local-ai skill can set this up).`;
+          }
+          if (!loopback) {
+            return `Duet routing: rules only \u2014 semantic checks run only against a loopback endpoint, and '${name2}' is not one.`;
+          }
+          const parts2 = [];
+          const via = [];
+          if (embeddings) {
+            parts2.push("re-ask detection");
+            via.push("embeddings");
+          }
+          if (rerank) {
+            parts2.push("plan-assumption checks");
+            via.push("rerank");
+          }
+          return `Duet routing: rules + ${parts2.join(" + ")} (${via.join(" + ")} on '${name2}').`;
+        }
+      }
+    }
+  }
+});
+
+// ../packages/orion-client-core/dist/duetExecutorGate.js
+var require_duetExecutorGate = __commonJS({
+  "../packages/orion-client-core/dist/duetExecutorGate.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    });
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v2) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v2 });
+    } : function(o, v2) {
+      o["default"] = v2;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod2) {
+        if (mod2 && mod2.__esModule) return mod2;
+        var result = {};
+        if (mod2 != null) {
+          for (var k = ownKeys(mod2), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding(result, mod2, k[i2]);
+        }
+        __setModuleDefault(result, mod2);
+        return result;
+      };
+    }();
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.EXECUTOR_GATE_PROBE_SCENARIOS = exports2.EXECUTOR_GATE_MIN_CALIBRATION = exports2.EXECUTOR_GATE_MISSING_LOGPROB = exports2.EXECUTOR_GATE_PLAN_HEAD_CHARS = exports2.EXECUTOR_GATE_REQUEST_MAX_CHARS = exports2.EXECUTOR_GATE_STATUS_TTL_MS = exports2.EXECUTOR_GATE_TIMEOUT_MS = exports2.EXECUTOR_GATE_PROMPT_VERSION = exports2.EXECUTOR_GATE_SOURCE = void 0;
+    exports2.resolveExecutorGateTarget = resolveExecutorGateTarget;
+    exports2.resolveExecutorGateTargetFromSettings = resolveExecutorGateTargetFromSettings;
+    exports2.executorGateStateFrom = executorGateStateFrom;
+    exports2.renderExecutorGatePrompt = renderExecutorGatePrompt;
+    exports2.executorGateLetterOf = executorGateLetterOf;
+    exports2.parseExecutorGateResponse = parseExecutorGateResponse;
+    exports2.decideExecutorGate = decideExecutorGate;
+    exports2.askExecutorGate = askExecutorGate;
+    exports2.executorGateProbeState = executorGateProbeState;
+    exports2.probeExecutorGate = probeExecutorGate;
+    exports2.describeDuetExecutorGate = describeDuetExecutorGate;
+    exports2.clearDuetExecutorGateCache = clearDuetExecutorGateCache;
+    exports2.describeDuetExecutorGateCached = describeDuetExecutorGateCached2;
+    exports2.createDuetExecutorGate = createDuetExecutorGate2;
+    var os9 = __importStar(__require("node:os"));
+    var customProviders_js_1 = require_customProviders();
+    var duetMode_js_1 = require_duetMode();
+    var duetPlan_js_1 = require_duetPlan();
+    var duetRoutingAdvisor_js_1 = require_duetRoutingAdvisor();
+    var duetExecutorGateStatus_js_1 = require_duetExecutorGateStatus();
+    exports2.EXECUTOR_GATE_SOURCE = "executor_gate";
+    exports2.EXECUTOR_GATE_PROMPT_VERSION = "1";
+    exports2.EXECUTOR_GATE_TIMEOUT_MS = 8e3;
+    exports2.EXECUTOR_GATE_STATUS_TTL_MS = 5 * 6e4;
+    exports2.EXECUTOR_GATE_REQUEST_MAX_CHARS = 2e3;
+    exports2.EXECUTOR_GATE_PLAN_HEAD_CHARS = 1200;
+    exports2.EXECUTOR_GATE_MISSING_LOGPROB = -30;
+    exports2.EXECUTOR_GATE_MIN_CALIBRATION = 3;
+    var DEFAULT_RESOLVE_DEPS = {
+      choice: (workspaceRoot) => (0, duetMode_js_1.duetExecutorWireForSegment)(workspaceRoot),
+      routing: (provider) => (0, customProviders_js_1.endpointRoutingFor)(provider),
+      alive: (workspaceRoot) => (0, customProviders_js_1.duetExecutorEndpointForSegment)(workspaceRoot) !== void 0
+    };
+    function resolveExecutorGateTarget(workspaceRoot, deps2 = DEFAULT_RESOLVE_DEPS) {
+      try {
+        const choice = deps2.choice(workspaceRoot);
+        if (choice === void 0 || !(0, customProviders_js_1.isCustomProviderRef)(choice.provider))
+          return { state: "platform" };
+        const name2 = (0, customProviders_js_1.parseCustomProviderRef)(choice.provider) ?? "";
+        const routing = deps2.routing(choice.provider);
+        if (routing === void 0) {
+          return { state: "unavailable", reason: "not_resolved", problem: "the executor's endpoint is not configured", name: name2 };
+        }
+        if (!deps2.alive(workspaceRoot)) {
+          return { state: "unavailable", reason: "unreachable", problem: "the executor is not answering", name: name2 };
+        }
+        return {
+          state: "ready",
+          target: {
+            name: routing.name,
+            baseUrl: routing.baseUrl,
+            ...routing.apiKey ? { apiKey: routing.apiKey } : {},
+            model: choice.model,
+            threshold: routing.executorGate?.threshold ?? customProviders_js_1.EXECUTOR_GATE_DEFAULT_THRESHOLD
+          }
+        };
+      } catch {
+        return { state: "unavailable", reason: "error", problem: "the executor could not be resolved" };
+      }
+    }
+    async function resolveExecutorGateTargetFromSettings(opts) {
+      try {
+        const tiers = { workspaceRoot: opts.workspaceRoot ?? null, ...opts.homeDir ? { homeDir: opts.homeDir } : {} };
+        const choice = await (0, duetMode_js_1.loadDuetExecutor)(tiers);
+        if (choice === null || !(0, customProviders_js_1.isCustomProviderRef)(choice.provider))
+          return { state: "platform" };
+        const name2 = (0, customProviders_js_1.parseCustomProviderRef)(choice.provider) ?? "";
+        const entry = await (0, customProviders_js_1.getCustomProvider)(name2, tiers);
+        if (entry === null) {
+          return { state: "unavailable", reason: "not_resolved", problem: "the executor's endpoint is not configured", name: name2 };
+        }
+        const apiKey = await (0, customProviders_js_1.resolveApiKey)(entry);
+        if (!await (0, customProviders_js_1.endpointIsReachable)(entry.baseUrl, apiKey, opts.fetchImpl)) {
+          return { state: "unavailable", reason: "unreachable", problem: "the executor is not answering", name: name2 };
+        }
+        return {
+          state: "ready",
+          target: {
+            name: entry.name,
+            baseUrl: entry.baseUrl,
+            ...apiKey ? { apiKey } : {},
+            model: choice.model,
+            threshold: entry.executorGate?.threshold ?? customProviders_js_1.EXECUTOR_GATE_DEFAULT_THRESHOLD
+          }
+        };
+      } catch {
+        return { state: "unavailable", reason: "error", problem: "the executor could not be resolved" };
+      }
+    }
+    function clipCodePoints(text, max) {
+      const points = Array.from(text);
+      return points.length <= max ? text : `${points.slice(0, max - 1).join("")}\u2026`;
+    }
+    function executorGateStateFrom(record, request) {
+      const standing = record != null && (0, duetPlan_js_1.duetPlanWireForSegment)(record) !== void 0 ? record : null;
+      return {
+        planVersion: standing?.version ?? 0,
+        planValid: standing !== null,
+        planHead: standing === null ? "" : clipCodePoints(standing.plan.trim(), exports2.EXECUTOR_GATE_PLAN_HEAD_CHARS),
+        assumptions: standing === null ? [] : (0, duetRoutingAdvisor_js_1.parsePlanAssumptions)(standing.plan).map((a) => ({ id: a.id, text: a.text })),
+        planningFailures: standing?.planningFailures ?? 0,
+        executorFailures: standing?.executorFailures ?? 0,
+        scopeChanged: standing?.scopeChanged ?? false,
+        architectureDecisionRequired: standing?.architectureDecisionRequired ?? false,
+        userNegativeFeedback: standing?.userNegativeFeedback ?? false,
+        request: clipCodePoints(request.trim(), exports2.EXECUTOR_GATE_REQUEST_MAX_CHARS)
+      };
+    }
+    function stableJson(value) {
+      const sort = (v2) => {
+        if (Array.isArray(v2))
+          return v2.map(sort);
+        if (typeof v2 === "object" && v2 !== null) {
+          return Object.fromEntries(Object.keys(v2).sort().map((k) => [k, sort(v2[k])]));
+        }
+        return v2;
+      };
+      return JSON.stringify(sort(value));
+    }
+    function renderExecutorGatePrompt(state) {
+      const taskState = stableJson({
+        plan_version: state.planVersion,
+        plan_valid: state.planValid,
+        planning_failures: state.planningFailures,
+        executor_failures: state.executorFailures,
+        flags: {
+          scope_changed: state.scopeChanged,
+          architecture_decision_required: state.architectureDecisionRequired,
+          user_negative_feedback: state.userNegativeFeedback
+        }
+      });
+      const capsule = stableJson({ assumptions: state.assumptions });
+      const unresolved = state.executorFailures > 0 || state.planningFailures > 0 ? `${state.executorFailures} executor failure(s) and ${state.planningFailures} planning failure(s) under this plan` : "none";
+      const corrections = state.userNegativeFeedback ? "the user pushed back on the current approach" : "none";
+      return [
+        "Routing gate for a coding agent. Decide if the current turn can be executed",
+        "with the existing plan, or needs a new plan from the senior planner.",
+        "",
+        "E = EXECUTION_ONLY  - the current plan is valid and local execution continues",
+        "P = PLAN_REQUIRED   - a new or revised plan would materially help",
+        "",
+        "Prefer E unless planning is genuinely needed.",
+        "",
+        "--- TASK STATE ---",
+        taskState,
+        "--- CONTEXT CAPSULE ---",
+        capsule,
+        "--- CURRENT PLAN ---",
+        state.planHead === "" ? "(none)" : state.planHead,
+        "--- UNRESOLVED ERRORS ---",
+        unresolved,
+        "--- RECENT USER CORRECTIONS ---",
+        corrections,
+        "--- LATEST USER REQUEST ---",
+        state.request,
+        "",
+        "Answer with exactly one letter, E or P.",
+        "Answer:"
+      ].join("\n");
+    }
+    function executorGateLetterOf(token) {
+      const bare2 = token.replace(/^[\s▁Ġ]+/u, "").replace(/\s+$/u, "");
+      return bare2 === "E" || bare2 === "P" ? bare2 : null;
+    }
+    function topLogprobs(choice) {
+      const lp = choice.logprobs;
+      if (typeof lp !== "object" || lp === null)
+        return null;
+      const out2 = {};
+      const add = (token, logprob) => {
+        if (typeof token === "string" && typeof logprob === "number" && Number.isFinite(logprob)) {
+          out2[token] = Math.max(out2[token] ?? Number.NEGATIVE_INFINITY, logprob);
+        }
+      };
+      const legacy = lp.top_logprobs;
+      if (Array.isArray(legacy) && typeof legacy[0] === "object" && legacy[0] !== null && !Array.isArray(legacy[0])) {
+        for (const [token, logprob] of Object.entries(legacy[0]))
+          add(token, logprob);
+      }
+      const content = lp.content;
+      if (Array.isArray(content) && typeof content[0] === "object" && content[0] !== null) {
+        const first = content[0];
+        add(first.token, first.logprob);
+        if (Array.isArray(first.top_logprobs)) {
+          for (const row of first.top_logprobs) {
+            add(row?.token, row?.logprob);
+          }
+        }
+      }
+      const tokens = lp.tokens;
+      const tokenLogprobs = lp.token_logprobs;
+      if (Array.isArray(tokens) && Array.isArray(tokenLogprobs))
+        add(tokens[0], tokenLogprobs[0]);
+      return Object.keys(out2).length > 0 ? out2 : null;
+    }
+    function parseExecutorGateResponse(body2) {
+      const choice = body2?.choices?.[0];
+      if (typeof choice !== "object" || choice === null) {
+        return { ok: false, reason: "unparseable", problem: "the completions response carried no choice" };
+      }
+      const c3 = choice;
+      const message = c3.message;
+      const raw = typeof c3.text === "string" ? c3.text : typeof message?.content === "string" ? message.content : "";
+      const trimmed = raw.trim();
+      if (trimmed.startsWith("<")) {
+        return {
+          ok: false,
+          reason: "thinking",
+          problem: `the executor answered with thinking on (it began "${trimmed.slice(0, 8)}")`
+        };
+      }
+      const letter = executorGateLetterOf(raw);
+      const top = topLogprobs(c3);
+      if (top !== null) {
+        let logE = null;
+        let logP = null;
+        for (const [token, logprob] of Object.entries(top)) {
+          const l3 = executorGateLetterOf(token);
+          if (l3 === "E")
+            logE = Math.max(logE ?? Number.NEGATIVE_INFINITY, logprob);
+          if (l3 === "P")
+            logP = Math.max(logP ?? Number.NEGATIVE_INFINITY, logprob);
+        }
+        if (logE !== null || logP !== null) {
+          return {
+            ok: true,
+            answer: {
+              mode: "logprob",
+              letter,
+              logE: logE ?? exports2.EXECUTOR_GATE_MISSING_LOGPROB,
+              logP: logP ?? exports2.EXECUTOR_GATE_MISSING_LOGPROB,
+              raw
+            }
+          };
+        }
+      }
+      if (letter !== null)
+        return { ok: true, answer: { mode: "greedy", letter, logE: null, logP: null, raw } };
+      return {
+        ok: false,
+        reason: "unparseable",
+        problem: `the executor answered "${trimmed.slice(0, 16)}", not E or P`
+      };
+    }
+    function decideExecutorGate(answer, threshold) {
+      if (answer.mode === "logprob" && answer.logE !== null && answer.logP !== null) {
+        const margin = answer.logP - answer.logE;
+        return { plan: margin >= threshold, margin, pPlan: 1 / (1 + Math.exp(-margin)) };
+      }
+      if (answer.letter === null)
+        return null;
+      return { plan: answer.letter === "P", margin: null, pPlan: answer.letter === "P" ? 1 : 0 };
+    }
+    async function askExecutorGate(target, prompt, opts = {}) {
+      const started = Date.now();
+      const doFetch = opts.fetchImpl ?? fetch;
+      const headers = { "Content-Type": "application/json" };
+      if (target.apiKey)
+        headers.Authorization = `Bearer ${target.apiKey}`;
+      try {
+        const res = await doFetch(`${target.baseUrl.replace(/\/+$/, "")}/completions`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify({
+            model: target.model,
+            prompt,
+            max_tokens: 1,
+            temperature: 0,
+            logprobs: 5,
+            stream: false
+          }),
+          signal: AbortSignal.timeout(opts.timeoutMs ?? exports2.EXECUTOR_GATE_TIMEOUT_MS)
+        });
+        const latencyMs = Date.now() - started;
+        if (res.status === 404 || res.status === 405 || res.status === 501) {
+          return {
+            ok: false,
+            reason: "no_completions",
+            problem: `the executor has no completions route (${res.status})`,
+            latencyMs
+          };
+        }
+        if (!res.ok)
+          return { ok: false, reason: "error", problem: `the executor answered ${res.status}`, latencyMs };
+        const parsed = parseExecutorGateResponse(await res.json());
+        if (!parsed.ok)
+          return { ok: false, reason: parsed.reason, problem: parsed.problem, latencyMs };
+        return { ok: true, answer: parsed.answer, latencyMs };
+      } catch (e) {
+        const timedOut = e instanceof Error && e.name === "TimeoutError";
+        return {
+          ok: false,
+          reason: "error",
+          problem: timedOut ? "the gate call timed out" : `the gate call failed (${e instanceof Error ? e.message : String(e)})`,
+          latencyMs: Date.now() - started
+        };
+      }
+    }
+    exports2.EXECUTOR_GATE_PROBE_SCENARIOS = [
+      { request: "Create this application with auth, billing and audit logging", expect: "P" },
+      { request: "Implement the next endpoint", expect: "E" },
+      { request: "We can no longer use the current authentication architecture", expect: "P" },
+      { request: "continue", expect: "E" }
+    ];
+    function executorGateProbeState(request) {
+      return {
+        planVersion: 3,
+        planValid: true,
+        planHead: "# Plan: orders-service (FastAPI)\n1. Add POST /orders and GET /orders/{id}\n2. Wire the billing call behind a feature flag\n3. Tests for both endpoints",
+        assumptions: [
+          { id: "A1", text: "the service keeps its central authentication middleware" },
+          { id: "A2", text: "billing stays behind the existing Stripe client" }
+        ],
+        planningFailures: 0,
+        executorFailures: 0,
+        scopeChanged: false,
+        architectureDecisionRequired: false,
+        userNegativeFeedback: false,
+        request
+      };
+    }
+    async function probeExecutorGate(target, opts = {}) {
+      const started = Date.now();
+      let mode = null;
+      const failed = [];
+      for (const scenario of exports2.EXECUTOR_GATE_PROBE_SCENARIOS) {
+        const asked = await askExecutorGate(target, renderExecutorGatePrompt(executorGateProbeState(scenario.request)), opts);
+        if (!asked.ok)
+          return { state: "unavailable", reason: asked.reason, problem: asked.problem, name: target.name };
+        mode ??= asked.answer.mode;
+        const decision = decideExecutorGate(asked.answer, target.threshold);
+        if (decision === null || (decision.plan ? "P" : "E") !== scenario.expect)
+          failed.push(scenario.request);
+      }
+      const calibration = {
+        passed: exports2.EXECUTOR_GATE_PROBE_SCENARIOS.length - failed.length,
+        total: exports2.EXECUTOR_GATE_PROBE_SCENARIOS.length,
+        failed
+      };
+      const common = {
+        target: { name: target.name, model: target.model },
+        mode: mode ?? "greedy",
+        threshold: target.threshold,
+        calibration,
+        latencyMs: Date.now() - started
+      };
+      return calibration.passed >= exports2.EXECUTOR_GATE_MIN_CALIBRATION ? { state: "ready", ...common } : { state: "miscalibrated", ...common };
+    }
+    async function describeDuetExecutorGate(opts = {}) {
+      const resolved = await resolveExecutorGateTargetFromSettings(opts);
+      if (resolved.state !== "ready")
+        return resolved;
+      return probeExecutorGate(resolved.target, { fetchImpl: opts.fetchImpl, timeoutMs: opts.timeoutMs });
+    }
+    var describeCache = /* @__PURE__ */ new Map();
+    function clearDuetExecutorGateCache() {
+      describeCache.clear();
+    }
+    async function describeDuetExecutorGateCached2(opts = {}) {
+      const now2 = opts.now ?? Date.now;
+      const key = `${opts.homeDir ?? os9.homedir()}\0${opts.workspaceRoot ?? ""}`;
+      const hit = describeCache.get(key);
+      if (!opts.refresh && hit !== void 0 && now2() - hit.at < (opts.ttlMs ?? exports2.EXECUTOR_GATE_STATUS_TTL_MS)) {
+        return hit.status;
+      }
+      const status = await describeDuetExecutorGate(opts);
+      describeCache.set(key, { at: now2(), status });
+      return status;
+    }
+    function createDuetExecutorGate2(opts = {}) {
+      const now2 = opts.now ?? Date.now;
+      const ttl = opts.statusTtlMs ?? exports2.EXECUTOR_GATE_STATUS_TTL_MS;
+      let cached = null;
+      let noted = false;
+      const fallback = (why) => {
+        const note = noted ? null : (0, duetExecutorGateStatus_js_1.executorGateFallbackNote)(why);
+        noted = true;
+        return { entry: "executor", verdict: null, note };
+      };
+      return {
+        async status(o = {}) {
+          const resolved = await resolveExecutorGateTargetFromSettings({
+            workspaceRoot: o.workspaceRoot,
+            ...opts.homeDir ? { homeDir: opts.homeDir } : {},
+            fetchImpl: opts.fetchImpl
+          });
+          if (resolved.state !== "ready")
+            return resolved;
+          const key = `${resolved.target.baseUrl} ${resolved.target.model} ${resolved.target.threshold}`;
+          if (!o.refresh && cached !== null && cached.key === key && now2() - cached.at < ttl)
+            return cached.status;
+          const status = await probeExecutorGate(resolved.target, { fetchImpl: opts.fetchImpl, timeoutMs: opts.timeoutMs });
+          cached = { at: now2(), key, status };
+          return status;
+        },
+        async prepareTurn(text, ctx) {
+          if (text.trim() === "")
+            return { entry: "executor", verdict: null, note: null };
+          const resolved = resolveExecutorGateTarget(ctx.workspaceRoot, opts.resolveDeps);
+          if (resolved.state !== "ready") {
+            opts.onError?.("resolve", resolved.state === "platform" ? "platform executor" : resolved.problem);
+            return fallback(resolved);
+          }
+          const { target } = resolved;
+          const prompt = renderExecutorGatePrompt(executorGateStateFrom(ctx.record, text));
+          const asked = await askExecutorGate(target, prompt, { fetchImpl: opts.fetchImpl, timeoutMs: opts.timeoutMs });
+          if (!asked.ok) {
+            opts.onError?.("ask", asked.problem);
+            return fallback({ state: "unavailable", reason: asked.reason, problem: asked.problem });
+          }
+          const decision = decideExecutorGate(asked.answer, target.threshold);
+          if (decision === null) {
+            const said = asked.answer.raw.trim();
+            opts.onError?.("ask", `undecidable answer "${said}"`);
+            return fallback({ state: "unavailable", reason: "unparseable", problem: `the executor answered "${said}"` });
+          }
+          noted = false;
+          const verdict = {
+            source: exports2.EXECUTOR_GATE_SOURCE,
+            verdict: decision.plan ? "plan" : "execute",
+            pPlan: decision.pPlan,
+            asksForPlan: false,
+            highRisk: false,
+            reason: exports2.EXECUTOR_GATE_SOURCE,
+            model: target.model,
+            version: exports2.EXECUTOR_GATE_PROMPT_VERSION,
+            latencyMs: asked.latencyMs,
+            mode: asked.answer.mode,
+            ...decision.margin !== null ? { margin: decision.margin } : {}
+          };
+          return { entry: "executor", verdict, note: null };
+        },
+        invalidate() {
+          cached = null;
+          noted = false;
+        }
+      };
+    }
+  }
+});
+
+// ../packages/orion-client-core/dist/runs/common.js
+var require_common = __commonJS({
+  "../packages/orion-client-core/dist/runs/common.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.mintRunId = mintRunId;
+    exports2.runsRootFor = runsRootFor2;
+    exports2.readJsonFile = readJsonFile;
+    exports2.writeJsonFile = writeJsonFile;
+    exports2.ensureDirFor = ensureDirFor;
+    exports2.listDirNames = listDirNames;
+    exports2.dayKey = dayKey;
+    exports2.clipTail = clipTail;
+    var fs_1 = __require("fs");
+    var os_1 = __require("os");
+    var path_1 = __require("path");
+    var atomicWrite_js_1 = require_atomicWrite();
+    var experienceStore_js_1 = require_experienceStore();
+    var ID_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
+    var ID_SUFFIX_LEN = 6;
+    function mintRunId(prefix, nowMs = Date.now(), rand = Math.random) {
+      let suffix = "";
+      for (let i2 = 0; i2 < ID_SUFFIX_LEN; i2 += 1) {
+        suffix += ID_ALPHABET[Math.floor(rand() * ID_ALPHABET.length) % ID_ALPHABET.length];
+      }
+      return `${prefix}_${String(nowMs).padStart(13, "0")}_${suffix}`;
+    }
+    function runsRootFor2(kind, workspaceRoot, home = (0, os_1.homedir)()) {
+      return (0, path_1.join)((0, experienceStore_js_1.projectDirFor)(workspaceRoot, home), "runs", kind);
+    }
+    async function readJsonFile(path14) {
+      try {
+        const raw = await fs_1.promises.readFile(path14, "utf8");
+        return JSON.parse(raw);
+      } catch {
+        return null;
+      }
+    }
+    async function writeJsonFile(path14, value) {
+      await ensureDirFor(path14);
+      await (0, atomicWrite_js_1.atomicWriteFile)(path14, JSON.stringify(value, null, 2));
+    }
+    async function ensureDirFor(path14) {
+      await fs_1.promises.mkdir((0, path_1.dirname)(path14), { recursive: true });
+    }
+    async function listDirNames(path14) {
+      try {
+        return await fs_1.promises.readdir(path14);
+      } catch {
+        return [];
+      }
+    }
+    function dayKey(nowMs = Date.now()) {
+      const d2 = new Date(nowMs);
+      const month = `${d2.getMonth() + 1}`.padStart(2, "0");
+      const day = `${d2.getDate()}`.padStart(2, "0");
+      return `${d2.getFullYear()}-${month}-${day}`;
+    }
+    function clipTail(text, max) {
+      if (text.length <= max)
+        return text;
+      return `\u2026${text.slice(text.length - (max - 1))}`;
+    }
+  }
+});
+
+// ../packages/orion-client-core/dist/customProviderModels.js
+var require_customProviderModels = __commonJS({
+  "../packages/orion-client-core/dist/customProviderModels.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m2, k);
+      if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m2[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m2, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m2[k];
+    });
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v2) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v2 });
+    } : function(o, v2) {
+      o["default"] = v2;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod2) {
+        if (mod2 && mod2.__esModule) return mod2;
+        var result = {};
+        if (mod2 != null) {
+          for (var k = ownKeys(mod2), i2 = 0; i2 < k.length; i2++) if (k[i2] !== "default") __createBinding(result, mod2, k[i2]);
+        }
+        __setModuleDefault(result, mod2);
+        return result;
+      };
+    }();
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.CATALOG_GC_MS = exports2.CATALOG_TTL_MS = exports2.CATALOG_SCHEMA_VERSION = void 0;
+    exports2.catalogPathFor = catalogPathFor;
+    exports2.endpointCatalog = endpointCatalog2;
+    exports2.findProbedModel = findProbedModel;
+    exports2.resolveModelSettings = resolveModelSettings2;
+    exports2.catalogModelIds = catalogModelIds2;
+    exports2.clearEndpointCatalog = clearEndpointCatalog3;
+    exports2.endpointModelViews = endpointModelViews2;
+    exports2.updateCustomProviderModels = updateCustomProviderModels2;
+    var node_crypto_1 = __require("node:crypto");
+    var os9 = __importStar(__require("node:os"));
+    var path14 = __importStar(__require("node:path"));
+    var customProviders_1 = require_customProviders();
+    var common_1 = require_common();
+    exports2.CATALOG_SCHEMA_VERSION = 1;
+    exports2.CATALOG_TTL_MS = 9e5;
+    exports2.CATALOG_GC_MS = 45 * 24 * 60 * 60 * 1e3;
+    function catalogPathFor(baseUrl, homeDir = os9.homedir()) {
+      const digest = (0, node_crypto_1.createHash)("sha256").update(normalizeBaseUrl(baseUrl)).digest("hex").slice(0, 16);
+      return path14.join(homeDir, ".orion", "cache", "models", `${digest}.json`);
+    }
+    function normalizeBaseUrl(baseUrl) {
+      return baseUrl.trim().replace(/\/+$/, "");
+    }
+    async function readRecordFromDisk(baseUrl) {
+      const record = await (0, common_1.readJsonFile)(catalogPathFor(baseUrl));
+      if (record === null)
+        return null;
+      if (record.version !== exports2.CATALOG_SCHEMA_VERSION)
+        return null;
+      if (normalizeBaseUrl(record.baseUrl ?? "") !== normalizeBaseUrl(baseUrl))
+        return null;
+      if (!Array.isArray(record.models))
+        return null;
+      return record;
+    }
+    var sweptThisProcess = false;
+    async function gcEndpointCatalogs(now2, homeDir = os9.homedir()) {
+      if (sweptThisProcess)
+        return;
+      sweptThisProcess = true;
+      try {
+        const dir = path14.dirname(catalogPathFor("x", homeDir));
+        const fs15 = await Promise.resolve().then(() => __importStar(__require("node:fs/promises")));
+        for (const name2 of await fs15.readdir(dir)) {
+          if (!name2.endsWith(".json"))
+            continue;
+          const file = path14.join(dir, name2);
+          try {
+            const record = await (0, common_1.readJsonFile)(file);
+            const age = typeof record?.fetchedAt === "number" ? now2 - record.fetchedAt : now2 - (await fs15.stat(file)).mtimeMs;
+            if (age > exports2.CATALOG_GC_MS)
+              await fs15.rm(file, { force: true });
+          } catch {
+          }
+        }
       } catch {
-        return untouched(record);
       }
     }
-    function round3(value) {
-      return Math.round(value * 1e3) / 1e3;
-    }
-    async function describeDuetRouting2(workspaceRoot) {
+    async function writeRecordToDisk(record) {
       try {
-        const choice = await (0, duetMode_js_1.loadDuetExecutor)({ workspaceRoot: workspaceRoot ?? null });
-        if (choice === null || !(0, customProviders_js_1.isCustomProviderRef)(choice.provider))
-          return { kind: "platform" };
-        const name2 = (0, customProviders_js_1.parseCustomProviderRef)(choice.provider) ?? "";
-        const entry = await (0, customProviders_js_1.getCustomProvider)(name2, { workspaceRoot: workspaceRoot ?? null });
-        if (entry === null)
-          return { kind: "missing", name: name2 };
-        return {
-          kind: "local",
-          name: name2,
-          loopback: (0, customProviders_js_1.isLoopbackEndpoint)(entry.baseUrl),
-          embeddings: entry.routingModels?.embeddings !== void 0,
-          rerank: entry.routingModels?.rerank !== void 0,
-          judge: entry.routingModels?.judge ?? null
-        };
+        await (0, common_1.writeJsonFile)(catalogPathFor(record.baseUrl), record);
       } catch {
-        return { kind: "platform" };
       }
+      void gcEndpointCatalogs(record.fetchedAt);
     }
-    function duetRoutingSummaryLine2(summary) {
-      switch (summary.kind) {
-        case "platform":
-          return "Duet routing: rules only \u2014 a local executor with routing models unlocks re-ask detection and plan-assumption checks.";
-        case "missing":
-          return "Duet routing: rules only.";
-        case "local": {
-          const { name: name2, loopback, embeddings, rerank } = summary;
-          if (!embeddings && !rerank) {
-            return `Duet routing: rules only \u2014 add routingModels to '${name2}' to unlock re-ask detection and plan-assumption checks (the /local-ai skill can set this up).`;
-          }
-          if (!loopback) {
-            return `Duet routing: rules only \u2014 semantic checks run only against a loopback endpoint, and '${name2}' is not one.`;
-          }
-          const parts2 = [];
-          const via = [];
-          if (embeddings) {
-            parts2.push("re-ask detection");
-            via.push("embeddings");
-          }
-          if (rerank) {
-            parts2.push("plan-assumption checks");
-            via.push("rerank");
-          }
-          return `Duet routing: rules + ${parts2.join(" + ")} (${via.join(" + ")} on '${name2}').`;
+    var memory = /* @__PURE__ */ new Map();
+    var inFlight2 = /* @__PURE__ */ new Map();
+    function depsWith(deps2) {
+      return {
+        now: deps2.now ?? (() => Date.now()),
+        probe: deps2.probe ?? customProviders_1.probeModels,
+        readRecord: deps2.readRecord ?? readRecordFromDisk,
+        writeRecord: deps2.writeRecord ?? writeRecordToDisk
+      };
+    }
+    async function probeAndStore(entry, d2) {
+      const key = normalizeBaseUrl(entry.baseUrl);
+      const existing = inFlight2.get(key);
+      if (existing !== void 0)
+        return existing;
+      const run3 = (async () => {
+        const models = await d2.probe(entry.baseUrl, await (0, customProviders_1.resolveApiKey)(entry));
+        if (models === null || models.length === 0)
+          return models;
+        const record = {
+          version: exports2.CATALOG_SCHEMA_VERSION,
+          baseUrl: entry.baseUrl,
+          fetchedAt: d2.now(),
+          models
+        };
+        memory.set(key, record);
+        await d2.writeRecord(record);
+        return models;
+      })().finally(() => inFlight2.delete(key));
+      inFlight2.set(key, run3);
+      return run3;
+    }
+    async function endpointCatalog2(entry, options = {}) {
+      const d2 = depsWith(options);
+      const key = normalizeBaseUrl(entry.baseUrl);
+      let record = memory.get(key) ?? null;
+      if (record === null) {
+        record = await d2.readRecord(entry.baseUrl);
+        if (record !== null)
+          memory.set(key, record);
+      }
+      if (options.cachedOnly === true)
+        return record?.models ?? [];
+      const fresh = record !== null && d2.now() - record.fetchedAt < exports2.CATALOG_TTL_MS;
+      if (record !== null && fresh && options.force !== true)
+        return record.models;
+      if (record !== null) {
+        void probeAndStore(entry, d2).catch(() => void 0);
+        return record.models;
+      }
+      return await probeAndStore(entry, d2) ?? [];
+    }
+    function findProbedModel(models, id) {
+      return models.find((model) => model.id === id);
+    }
+    function resolveModelSettings2(entry, modelId, catalog = []) {
+      const declared = entry.modelConfig?.[modelId];
+      const probed = findProbedModel(catalog, modelId);
+      const resolved = {};
+      const contextWindow = declared?.contextWindow ?? probed?.contextWindow;
+      if (contextWindow !== void 0)
+        resolved.contextWindow = contextWindow;
+      const maxOutputTokens = declared?.maxOutputTokens ?? probed?.maxOutputTokens;
+      if (maxOutputTokens !== void 0)
+        resolved.maxOutputTokens = maxOutputTokens;
+      if (probed?.reasoning !== void 0)
+        resolved.reasoning = probed.reasoning;
+      for (const knob of ["temperature", "topP", "topK", "repetitionPenalty"]) {
+        const value = declared?.[knob];
+        if (typeof value === "number")
+          resolved[knob] = value;
+      }
+      return resolved;
+    }
+    function catalogModelIds2(entry, catalog) {
+      return entry.models?.length ? entry.models : catalog.map((model) => model.id);
+    }
+    function clearEndpointCatalog3(baseUrl) {
+      if (baseUrl === void 0) {
+        memory.clear();
+        inFlight2.clear();
+        sweptThisProcess = false;
+        return;
+      }
+      const key = normalizeBaseUrl(baseUrl);
+      memory.delete(key);
+      inFlight2.delete(key);
+    }
+    async function endpointModelViews2(entry, options = {}) {
+      const catalog = await endpointCatalog2(entry, options);
+      const pinned = new Set(entry.models ?? []);
+      const ids = [...pinned, ...catalog.map((model) => model.id).filter((id) => !pinned.has(id))];
+      return ids.map((id) => {
+        const resolved = resolveModelSettings2(entry, id, catalog);
+        const declared = entry.modelConfig?.[id];
+        const view = { id, pinned: pinned.has(id) };
+        if (resolved.contextWindow !== void 0)
+          view.contextWindow = resolved.contextWindow;
+        if (resolved.maxOutputTokens !== void 0)
+          view.maxOutputTokens = resolved.maxOutputTokens;
+        if (resolved.reasoning !== void 0)
+          view.reasoning = resolved.reasoning;
+        if (declared?.contextWindow !== void 0 || declared?.maxOutputTokens !== void 0) {
+          view.source = "user";
+        } else if (view.contextWindow !== void 0 || view.maxOutputTokens !== void 0) {
+          view.source = "endpoint";
+        }
+        return view;
+      });
+    }
+    async function updateCustomProviderModels2(name2, update, tier = "user", opts = {}) {
+      const entry = await (0, customProviders_1.getCustomProvider)(name2, opts);
+      if (entry === null)
+        return false;
+      const next = { ...entry };
+      if (update.models !== void 0) {
+        if (update.models.length)
+          next.models = update.models;
+        else
+          delete next.models;
+      }
+      if (update.modelConfig !== void 0) {
+        const kept = Object.entries(update.modelConfig).map(([id, raw]) => [id, (0, customProviders_1.normalizeModelConfig)(raw)]).filter(([, value]) => value !== void 0 && Object.keys(value).length > 0);
+        if (kept.length)
+          next.modelConfig = Object.fromEntries(kept);
+        else
+          delete next.modelConfig;
+      }
+      await (0, customProviders_1.saveCustomProvider)(next, tier, opts);
+      clearEndpointCatalog3(entry.baseUrl);
+      return true;
+    }
+  }
+});
+
+// ../packages/orion-client-core/dist/duetExecutorCatalog.js
+var require_duetExecutorCatalog = __commonJS({
+  "../packages/orion-client-core/dist/duetExecutorCatalog.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.LOCAL_EXECUTOR_READ_BUDGET_MS = void 0;
+    exports2.localExecutorOptions = localExecutorOptions2;
+    exports2.duetExecutorChoiceFor = duetExecutorChoiceFor2;
+    exports2.isLocalExecutorChoice = isLocalExecutorChoice;
+    exports2.resolveDuetExecutorChoice = resolveDuetExecutorChoice2;
+    var customProviders_js_1 = require_customProviders();
+    var customProviderModels_js_1 = require_customProviderModels();
+    exports2.LOCAL_EXECUTOR_READ_BUDGET_MS = 3e3;
+    async function localExecutorOptions2(input = {}) {
+      const { catalog, timeoutMs, ...opts } = input;
+      let entries;
+      try {
+        entries = await (0, customProviders_js_1.loadCustomProviders)(opts);
+      } catch {
+        return [];
+      }
+      if (entries.length === 0)
+        return [];
+      const read = (options) => Promise.all(entries.map(async (entry) => {
+        try {
+          const views = await (0, customProviderModels_js_1.endpointModelViews)(entry, options);
+          return views.map((view) => {
+            const option = {
+              provider: `custom:${entry.name}`,
+              endpoint: entry.name,
+              model: view.id,
+              pinned: view.pinned
+            };
+            if (view.contextWindow !== void 0)
+              option.contextWindow = view.contextWindow;
+            if (view.maxOutputTokens !== void 0)
+              option.maxOutputTokens = view.maxOutputTokens;
+            return option;
+          });
+        } catch {
+          return [];
         }
+      })).then((perEndpoint) => perEndpoint.flat());
+      const full = read(catalog ?? {});
+      const budget = timeoutMs ?? exports2.LOCAL_EXECUTOR_READ_BUDGET_MS;
+      if (catalog?.cachedOnly === true || budget <= 0)
+        return full;
+      let timer;
+      const fallback = new Promise((resolve5) => {
+        timer = setTimeout(() => resolve5(read({ ...catalog, cachedOnly: true })), budget);
+      });
+      try {
+        return await Promise.race([full, fallback]);
+      } finally {
+        if (timer !== void 0)
+          clearTimeout(timer);
+        void full.catch(() => void 0);
       }
     }
+    function duetExecutorChoiceFor2(option) {
+      return {
+        provider: option.provider,
+        model: option.model,
+        ...option.contextWindow !== void 0 ? { contextWindow: option.contextWindow } : {}
+      };
+    }
+    function isLocalExecutorChoice(choice) {
+      return typeof choice?.provider === "string" && choice.provider.startsWith("custom:");
+    }
+    async function resolveDuetExecutorChoice2(choice, input = {}) {
+      if (!isLocalExecutorChoice(choice) || choice.contextWindow !== void 0)
+        return choice;
+      const found = (await localExecutorOptions2(input)).find((option) => option.provider === choice.provider && option.model === choice.model);
+      return found === void 0 ? choice : { ...choice, ...duetExecutorChoiceFor2(found), ...choice.effort ? { effort: choice.effort } : {} };
+    }
   }
 });
 
@@ -38387,6 +38999,58 @@ var require_agentStore = __commonJS({
   }
 });
 
+// ../packages/orion-client-core/dist/goalClaim.js
+var require_goalClaim = __commonJS({
+  "../packages/orion-client-core/dist/goalClaim.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.GOAL_REPORT_TOOL = exports2.GOAL_CAPABILITY = void 0;
+    exports2.readGoalReportInput = readGoalReportInput;
+    exports2.goalClaimFromWire = goalClaimFromWire3;
+    exports2.goalReportToolResult = goalReportToolResult3;
+    exports2.GOAL_CAPABILITY = "goal";
+    exports2.GOAL_REPORT_TOOL = "goal_report";
+    function readGoalReportInput(input) {
+      if (!input || typeof input !== "object")
+        return null;
+      const r2 = input;
+      if (typeof r2.done !== "boolean")
+        return null;
+      const note = r2.done ? r2.verified : r2.outstanding;
+      return { done: r2.done, note: typeof note === "string" ? note.trim() : "" };
+    }
+    function goalClaimFromWire3(messages) {
+      if (!Array.isArray(messages))
+        return null;
+      let claim = null;
+      for (const message of messages) {
+        const m2 = message;
+        if (!m2 || m2.role !== "assistant" || !Array.isArray(m2.content))
+          continue;
+        for (const block of m2.content) {
+          const b2 = block;
+          if (!b2 || b2.type !== "tool_use" || b2.name !== exports2.GOAL_REPORT_TOOL)
+            continue;
+          const parsed = readGoalReportInput(b2.input);
+          if (parsed !== null)
+            claim = parsed;
+        }
+      }
+      return claim;
+    }
+    function goalReportToolResult3(params) {
+      const claim = readGoalReportInput(params);
+      if (claim === null) {
+        return "goal_report needs `done` as a boolean: false while ANY part of the goal remains (say what in `outstanding`), true only when every part is verified complete (name what you ran in `verified`).";
+      }
+      if (claim.done) {
+        return "Completion claim recorded. An independent check now reviews the evidence of what you actually did \u2014 the goal ends only if it confirms; otherwise you will be told what is still outstanding. End your turn now.";
+      }
+      return "Status recorded \u2014 the goal continues. If you can take the next step now, keep working; otherwise end your turn and you will be continued.";
+    }
+  }
+});
+
 // ../packages/orion-client-core/dist/goalMarker.js
 var require_goalMarker = __commonJS({
   "../packages/orion-client-core/dist/goalMarker.js"(exports2) {
@@ -38808,7 +39472,8 @@ var require_goalEvaluate = __commonJS({
       const params = { goal: args2.goal, evidence };
       if (args2.sessionId)
         params.session_id = args2.sessionId;
-      const chosen = await configuredEvaluatorModel(args2);
+      const sessionFallback = args2.sessionModel && !args2.sessionProvider?.startsWith("custom") ? { model: args2.sessionModel, provider: args2.sessionProvider ?? "" } : void 0;
+      const chosen = await configuredEvaluatorModel(args2) ?? sessionFallback;
       if (chosen) {
         params.model = chosen.model;
         if (chosen.provider)
@@ -38825,15 +39490,18 @@ var require_goalRunner = __commonJS({
   "../packages/orion-client-core/dist/goalRunner.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.GoalRunner = exports2.GOAL_CONTINUE_DISPLAY = exports2.GOAL_REASON_PROMPT_MAX_CHARS = exports2.GOAL_REASON_MAX_CHARS = exports2.GOAL_MAX_EVALUATOR_FAILURES = exports2.DEFAULT_GOAL_MAX_WALL_MS = exports2.DEFAULT_GOAL_MAX_TURNS = exports2.GOAL_INSTRUCTION = void 0;
+    exports2.GoalRunner = exports2.GOAL_CONTINUE_DISPLAY = exports2.GOAL_REASON_PROMPT_MAX_CHARS = exports2.GOAL_REASON_MAX_CHARS = exports2.GOAL_UNCLAIMED_CHECK_INTERVAL = exports2.GOAL_MAX_EVALUATOR_FAILURES = exports2.DEFAULT_GOAL_MAX_WALL_MS = exports2.DEFAULT_GOAL_MAX_TURNS = exports2.GOAL_INSTRUCTION = void 0;
     exports2.buildGoalPrompt = buildGoalPrompt;
     exports2.buildContinuationPrompt = buildContinuationPrompt;
     exports2.finalAssistantTextFromWire = finalAssistantTextFromWire2;
     exports2.describeGoalEnd = describeGoalEnd;
-    exports2.goalReasonLine = goalReasonLine2;
+    exports2.goalReasonLine = goalReasonLine3;
     exports2.goalEndRow = goalEndRow2;
     exports2.goalNotMetRow = goalNotMetRow2;
     exports2.goalStartDisplay = goalStartDisplay2;
+    exports2.goalFromStartDisplay = goalFromStartDisplay;
+    exports2.goalSetRow = goalSetRow2;
+    exports2.goalRoundReason = goalRoundReason2;
     exports2.GOAL_INSTRUCTION = [
       "",
       "---",
@@ -38842,11 +39510,14 @@ var require_goalRunner = __commonJS({
       "Do not end your turn with a plan, an intention, or a promise about work you have not done \u2014",
       "if the next step is clear, take it now instead of describing it.",
       "",
-      "You do NOT decide when the goal is finished: an independent check reviews each turn against",
-      "the goal and continues you if anything is outstanding. Reading code is not verifying it \u2014",
-      "run the tests, execute the command, show the output. State plainly what you did and what the",
-      "result actually was; an unverified claim counts for nothing, and reporting a failure honestly",
-      "is always better than glossing it."
+      "End every turn by calling the goal_report tool \u2014 a status line in prose is not a report.",
+      "While ANY part of the goal remains, report done: false and say in `outstanding` exactly what",
+      'is missing. Be ruthlessly honest \u2014 an honest "not done" costs nothing and keeps you going.',
+      "Report done: true only when you have VERIFIED every part \u2014 ran the tests, executed the",
+      "command, saw the output \u2014 and name in `verified` what you ran and what it showed.",
+      "Your report is a claim, not a verdict: an independent check reviews the evidence of what you",
+      "actually did before the goal can end, and an unverified claim is simply sent back. Reading",
+      "code is not verifying it; reporting a failure honestly is always better than glossing it."
     ].join("\n");
     function buildGoalPrompt(goal) {
       return `# Goal
@@ -38854,7 +39525,7 @@ ${goal}
 ${exports2.GOAL_INSTRUCTION}`;
     }
     function buildContinuationPrompt(goal, reason) {
-      const line = reason ? goalReasonLine2(reason, exports2.GOAL_REASON_PROMPT_MAX_CHARS) : "";
+      const line = reason ? goalReasonLine3(reason, exports2.GOAL_REASON_PROMPT_MAX_CHARS) : "";
       const outstanding = line === "" ? "" : `
 
 ## What the completion check reported
@@ -38887,6 +39558,7 @@ ${exports2.GOAL_INSTRUCTION}`;
     exports2.DEFAULT_GOAL_MAX_TURNS = 0;
     exports2.DEFAULT_GOAL_MAX_WALL_MS = 0;
     exports2.GOAL_MAX_EVALUATOR_FAILURES = 3;
+    exports2.GOAL_UNCLAIMED_CHECK_INTERVAL = 5;
     function describeGoalEnd(reason) {
       switch (reason) {
         case "done":
@@ -38907,7 +39579,7 @@ ${exports2.GOAL_INSTRUCTION}`;
     }
     exports2.GOAL_REASON_MAX_CHARS = 140;
     exports2.GOAL_REASON_PROMPT_MAX_CHARS = 500;
-    function goalReasonLine2(reason, max = exports2.GOAL_REASON_MAX_CHARS) {
+    function goalReasonLine3(reason, max = exports2.GOAL_REASON_MAX_CHARS) {
       const flat = reason.replace(/\s+/g, " ").trim();
       if (flat.length <= max)
         return flat;
@@ -38934,7 +39606,7 @@ ${exports2.GOAL_INSTRUCTION}`;
       }
     }
     function goalNotMetRow2(reason) {
-      const line = goalReasonLine2(reason);
+      const line = goalReasonLine3(reason);
       return {
         glyph: "\u25CE",
         text: line === "" ? "Not met yet" : `Not met yet \u2014 ${line}`,
@@ -38946,10 +39618,29 @@ ${exports2.GOAL_INSTRUCTION}`;
     function goalStartDisplay2(goal) {
       return `/goal ${goal}`;
     }
+    function goalFromStartDisplay(display) {
+      return (display.startsWith("/goal ") ? display.slice("/goal ".length) : display).trim();
+    }
+    function goalSetRow2(goal) {
+      const line = goal.replace(/\s+/g, " ").trim();
+      return {
+        glyph: "\u25CE",
+        text: line === "" ? "Goal set" : `Goal set: ${line}`,
+        done: false,
+        progress: true
+      };
+    }
+    function goalRoundReason2(round) {
+      if (round.ruling)
+        return round.ruling.evaluated ? round.ruling.reason : "";
+      if (round.claim && !round.claim.done)
+        return round.claim.note;
+      return "";
+    }
     function readOutcome(outcome) {
       if (typeof outcome === "string")
-        return { text: outcome, evidence: outcome };
-      return { text: outcome.text ?? "", evidence: outcome.evidence ?? "" };
+        return { text: outcome, evidence: outcome, claim: null };
+      return { text: outcome.text ?? "", evidence: outcome.evidence ?? "", claim: outcome.claim ?? null };
     }
     var GoalRunner3 = class {
       deps;
@@ -38962,10 +39653,17 @@ ${exports2.GOAL_INSTRUCTION}`;
       /** Wall-clock anchor for the envelope, from the injected clock. */
       startedAt = 0;
       /** Consecutive evaluator calls that produced no verdict. Any real ruling —
-       *  including "not yet" — resets it. */
+       *  including "not yet" — resets it. Untouched on rounds that run no check:
+       *  they say nothing about the evaluator either way. */
       evaluatorFailures = 0;
       /** The evaluator's last account of what is outstanding. */
       lastReason = "";
+      /** Consecutive rounds settled without a check. At
+       *  [`GOAL_UNCLAIMED_CHECK_INTERVAL`] the backstop runs one; reset on every
+       *  check run, claimed or backstop. */
+      uncheckedRounds = 0;
+      /** The agent's own last `goal_report`. */
+      lastClaim = null;
       constructor(deps2) {
         this.deps = deps2;
       }
@@ -38975,7 +39673,8 @@ ${exports2.GOAL_INSTRUCTION}`;
           goal: this.goal,
           endReason: this.endReason,
           turns: this.turns,
-          lastReason: this.lastReason === "" ? null : this.lastReason
+          lastReason: this.lastReason === "" ? null : this.lastReason,
+          lastClaim: this.lastClaim
         };
       }
       /** The user's stop (Esc, `/goal stop`, banner button). The in-flight turn is
@@ -38995,6 +39694,8 @@ ${exports2.GOAL_INSTRUCTION}`;
         this.turns = 0;
         this.evaluatorFailures = 0;
         this.lastReason = "";
+        this.uncheckedRounds = 0;
+        this.lastClaim = null;
         this.emit();
         this.startedAt = (this.deps.now ?? Date.now)();
         let prompt = buildGoalPrompt(goal);
@@ -39008,30 +39709,40 @@ ${exports2.GOAL_INSTRUCTION}`;
           this.turns += 1;
           if (this.stopRequested)
             return this.finish("stopped");
-          const { text, evidence } = readOutcome(outcome);
-          const ruling = await this.rule(goal, evidence, text);
+          const { text, evidence, claim } = readOutcome(outcome);
+          this.lastClaim = claim;
+          this.uncheckedRounds += 1;
+          const check2 = claim?.done === true ? "claimed" : this.uncheckedRounds >= exports2.GOAL_UNCLAIMED_CHECK_INTERVAL || this.envelopeVerdict(this.turns) !== null ? "backstop" : "none";
+          let ruling = null;
+          if (check2 !== "none") {
+            this.uncheckedRounds = 0;
+            ruling = await this.rule(goal, evidence, text);
+          }
           if (this.stopRequested)
             return this.finish("stopped");
-          if (ruling.evaluated && ruling.ok) {
-            this.lastReason = ruling.reason;
-            return this.finish("done");
-          }
-          if (ruling.evaluated && !ruling.achievable) {
-            this.lastReason = ruling.reason;
-            return this.finish("not_achievable");
-          }
-          if (ruling.evaluated) {
-            this.evaluatorFailures = 0;
-          } else if ((this.evaluatorFailures += 1) >= exports2.GOAL_MAX_EVALUATOR_FAILURES) {
-            this.lastReason = ruling.reason;
-            return this.finish("evaluator_failed");
+          if (ruling) {
+            if (ruling.evaluated && ruling.ok) {
+              this.lastReason = ruling.reason;
+              return this.finish("done");
+            }
+            if (ruling.evaluated && !ruling.achievable) {
+              this.lastReason = ruling.reason;
+              return this.finish("not_achievable");
+            }
+            if (ruling.evaluated) {
+              this.evaluatorFailures = 0;
+              this.lastReason = ruling.reason;
+            } else if ((this.evaluatorFailures += 1) >= exports2.GOAL_MAX_EVALUATOR_FAILURES) {
+              this.lastReason = ruling.reason;
+              return this.finish("evaluator_failed");
+            }
           }
           const ceiling = this.envelopeVerdict(this.turns);
           if (ceiling !== null)
             return this.finish(ceiling);
-          this.lastReason = ruling.reason;
+          this.deps.onRound?.({ turns: this.turns, check: check2, ruling, claim });
           this.emit();
-          prompt = buildContinuationPrompt(goal, ruling.evaluated ? ruling.reason : void 0);
+          prompt = buildContinuationPrompt(goal, ruling?.evaluated ? ruling.reason : void 0);
         }
       }
       /** One completion ruling, with the evaluator's own failures absorbed. A judge
@@ -40898,7 +41609,7 @@ var require_agentAuth = __commonJS({
   "../packages/orion-client-core/dist/auth/agentAuth.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.USAGE_TOPUP_COVERING_LABEL = exports2.NO_USAGE_LIMIT_LABEL = exports2.AgentSession = exports2.TOKEN_REQUEST_TIMEOUT_MS = exports2.AgentAuthError = void 0;
+    exports2.USAGE_TOPUP_COVERING_LABEL = exports2.NO_USAGE_LIMIT_LABEL = exports2.AgentSession = exports2.BRAIN_RENEW_DEADLINE_MS = exports2.RENEW_BUDGET_MS = exports2.SECRET_READ_TIMEOUT_MS = exports2.TOKEN_REQUEST_TIMEOUT_MS = exports2.AgentAuthError = void 0;
     exports2.isAgentSessionKey = isAgentSessionKey;
     exports2.pkcePair = pkcePair;
     exports2.buildConnectUrl = buildConnectUrl;
@@ -40979,6 +41690,16 @@ var require_agentAuth = __commonJS({
       const value = jwtClaim(token, claim);
       return typeof value === "string" && value ? value : null;
     }
+    function remainingValidityMs(token) {
+      const exp = jwtClaim(token, "exp");
+      return typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 - Date.now() : 0;
+    }
+    function sleep(ms) {
+      return new Promise((resolve5) => {
+        const timer = setTimeout(resolve5, ms);
+        timer.unref?.();
+      });
+    }
     async function pkcePair() {
       const raw = new Uint8Array(48);
       globalThis.crypto.getRandomValues(raw);
@@ -41066,16 +41787,54 @@ var require_agentAuth = __commonJS({
     }
     var FRESH_TOKEN_BUFFER_MS = 6e4;
     var EARLY_REFRESH_MS = 10 * 6e4;
+    exports2.SECRET_READ_TIMEOUT_MS = 5e3;
+    exports2.RENEW_BUDGET_MS = 55e3;
+    exports2.BRAIN_RENEW_DEADLINE_MS = 9e4;
+    var RENEWED_TOKEN_MIN_REMAINING_MS = 5 * 6e4;
+    var READ_TIMED_OUT = Symbol("orion.secret-read-timed-out");
     var AgentSession = class {
       store;
       apiBaseUrl;
       options;
       inflightRefresh = null;
+      /** The last token set THIS process saved — a write-through mirror of {@link save}, never
+       * of sibling processes' writes (those live only in the shared store). Lets a renewal
+       * answer with our own recent mint when the store read itself is wedged. NEVER used to
+       * START a refresh: a cached refresh token may be rotated-away by a sibling, and replaying
+       * one late revokes the whole token family server-side. */
+      lastSaved = null;
       constructor(store, apiBaseUrl, options = {}) {
         this.store = store;
         this.apiBaseUrl = apiBaseUrl;
         this.options = options;
       }
+      /** Breadcrumb line (see {@link AgentSessionOptions.trace}); a throwing sink is the host's
+       * bug and must never break the auth path. */
+      trace(line) {
+        try {
+          this.options.trace?.(line);
+        } catch {
+        }
+      }
+      /** One bounded store read. {@link READ_TIMED_OUT} = the store did not answer (timed out
+       * or threw) — an UNREACHABLE store, distinct from `null` = the key is definitively
+       * absent. The renewal path branches on that difference: absent means signed out (fail
+       * closed now); unreachable means retry and degrade, never a declared sign-out. */
+      async boundedRead(key) {
+        const timeoutMs = this.options.secretReadTimeoutMs ?? exports2.SECRET_READ_TIMEOUT_MS;
+        let timer;
+        const timeout = new Promise((resolve5) => {
+          timer = setTimeout(() => resolve5(READ_TIMED_OUT), timeoutMs);
+          timer.unref?.();
+        });
+        try {
+          const read = Promise.resolve(this.store.get(key)).then((value) => value || null, () => READ_TIMED_OUT);
+          return await Promise.race([read, timeout]);
+        } finally {
+          if (timer !== void 0)
+            clearTimeout(timer);
+        }
+      }
       async currentAccessToken() {
         return await this.store.get(ACCESS_KEY) || null;
       }
@@ -41095,9 +41854,7 @@ var require_agentAuth = __commonJS({
         const token = await this.currentAccessToken();
         if (!token)
           return null;
-        const exp = jwtClaim(token, "exp");
-        const expiresAtMs = typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 : 0;
-        const remainingMs = expiresAtMs - Date.now();
+        const remainingMs = remainingValidityMs(token);
         if (remainingMs > EARLY_REFRESH_MS)
           return token;
         if (remainingMs > FRESH_TOKEN_BUFFER_MS) {
@@ -41107,6 +41864,64 @@ var require_agentAuth = __commonJS({
         await this.refresh();
         return this.currentAccessToken();
       }
+      /** The FAIL-CLOSED renewal answer for the local brain's `renew_bearer` request — invoked
+       * only after the gateway REFUSED a bearer (401), which makes the server's verdict the
+       * ground truth this method never argues with. Its contract:
+       *  - it never answers with `refused` (the token just declared dead) nor with a near-dead
+       *    token — a mint is forced instead;
+       *  - a DIFFERENT stored token with comfortable validity (a sibling process already
+       *    renewed through the shared store) is the answer immediately, no mint;
+       *  - otherwise it mints, retrying transient failures with backoff under `renewBudgetMs`,
+       *    re-reading the store between tries — a sibling's mint landing while ours failed
+       *    (the rotation race's other half, reply-lost rotations included) is a heal;
+       *  - a wedged store degrades to this process's own last save for the ACCESS token
+       *    (never for starting a refresh — rotation safety, see {@link refresh});
+       *  - `null` means the account genuinely cannot produce a fresh token (signed out,
+       *    family revoked, or the budget lapsed with everything unreachable) — the brain then
+       *    surfaces the honest auth error.
+       *
+       * {@link currentFreshAccessToken} stays the PROACTIVE read with its deliberate fail-OPEN
+       * degradation ("the stored token stands"); this is the REACTIVE one, and the two must
+       * not be merged: the fail-open answer is exactly what let the 2026-08-24/25 stage turns
+       * die — it handed the refused token straight back, and the one heal was spent. */
+      async renewedAccessToken(refused) {
+        const budget = this.options.renewBudgetMs ?? exports2.RENEW_BUDGET_MS;
+        const backoffBase = this.options.renewBackoffBaseMs ?? 500;
+        const deadline = Date.now() + budget;
+        const answerable = (token2, minted) => typeof token2 === "string" && token2 !== "" && token2 !== refused && // A mint vouches for freshness by EVENT (it just happened server-side), sidestepping
+        // the local clock entirely — a fast client clock must not veto a genuinely new token.
+        (minted || remainingValidityMs(token2) > RENEWED_TOKEN_MIN_REMAINING_MS);
+        const storedAccess = async () => {
+          const read = await this.boundedRead(ACCESS_KEY);
+          if (read !== READ_TIMED_OUT)
+            return { token: read, wedged: false };
+          return { token: this.lastSaved?.accessToken ?? null, wedged: true };
+        };
+        let { token, wedged } = await storedAccess();
+        if (answerable(token, false)) {
+          this.trace(wedged ? "renew: answered from the process cache (store unreachable), no mint" : "renew: answered from the store (sibling renewal), no mint");
+          return token;
+        }
+        for (let attempt = 0; ; attempt += 1) {
+          const minted = await this.refresh();
+          ({ token, wedged } = await storedAccess());
+          if (answerable(token, minted)) {
+            this.trace(minted ? `renew: minted and answered (attempt ${attempt + 1})` : "renew: a sibling's mint landed \u2014 answered");
+            return token;
+          }
+          const refreshToken = await this.boundedRead(REFRESH_KEY);
+          if (refreshToken === null) {
+            this.trace("renew: no session (signed out / revoked) \u2014 fail-closed");
+            return null;
+          }
+          const wait = Math.min(Math.min(8e3, backoffBase * 2 ** attempt), deadline - Date.now());
+          if (wait <= 0)
+            break;
+          await sleep(wait);
+        }
+        this.trace(`renew: budget (${budget}ms) exhausted \u2014 fail-closed`);
+        return null;
+      }
       /** The plan the user is on (free/pro/…), for display + upgrade CTAs. */
       async tier() {
         return await this.store.get(TIER_KEY) || null;
@@ -41243,6 +42058,7 @@ var require_agentAuth = __commonJS({
         return Boolean(await this.store.get(REFRESH_KEY));
       }
       async save(tokens) {
+        this.lastSaved = tokens;
         await this.store.store(ACCESS_KEY, tokens.accessToken);
         await this.store.store(REFRESH_KEY, tokens.refreshToken);
         await this.store.store(TIER_KEY, tokens.tier);
@@ -41263,20 +42079,47 @@ var require_agentAuth = __commonJS({
         return inflight;
       }
       async doRefresh() {
-        const refreshToken = await this.store.get(REFRESH_KEY);
+        const started = Date.now();
+        const refreshToken = await this.boundedRead(REFRESH_KEY);
+        if (refreshToken === READ_TIMED_OUT) {
+          this.trace(`refresh: store read unanswered after ${Date.now() - started}ms \u2014 transient`);
+          return false;
+        }
         if (!refreshToken)
           return false;
         try {
-          await this.save(await refreshTokens({
+          const minted = await refreshTokens({
             apiBaseUrl: this.apiBaseUrl(),
             refreshToken,
             requestTimeoutMs: this.options.requestTimeoutMs
-          }));
+          });
+          if (!minted.accessToken) {
+            this.trace("refresh: malformed 200 (empty access token) \u2014 transient");
+            return false;
+          }
+          const tokens = minted.refreshToken ? minted : { ...minted, refreshToken };
+          const written = await Promise.race([
+            this.save(tokens).then(() => true, () => false),
+            sleep(3 * (this.options.secretReadTimeoutMs ?? exports2.SECRET_READ_TIMEOUT_MS)).then(() => false)
+          ]);
+          this.trace(written ? `refresh: minted in ${Date.now() - started}ms` : `refresh: minted in ${Date.now() - started}ms, store write still pending \u2014 tokens live in the process cache`);
           return true;
         } catch (err2) {
           if (err2 instanceof AgentAuthError && isDefinitiveAuthRejection(err2)) {
+            const current2 = await this.boundedRead(REFRESH_KEY);
+            if (current2 === READ_TIMED_OUT) {
+              this.trace("refresh: rejected, but the store is unreachable \u2014 clear deferred");
+              return false;
+            }
+            if (current2 && current2 !== refreshToken) {
+              this.trace("refresh: rejection was a rotation-race replay \u2014 sibling's session adopted");
+              return true;
+            }
+            this.trace("refresh: definitively rejected \u2014 session cleared");
             await this.clear();
+            return false;
           }
+          this.trace(`refresh: transient failure (${err2 instanceof AgentAuthError ? err2.status : "malformed reply"})`);
           return false;
         }
       }
@@ -41288,6 +42131,7 @@ var require_agentAuth = __commonJS({
         await this.clear();
       }
       async clear() {
+        this.lastSaved = null;
         await this.store.delete(ACCESS_KEY);
         await this.store.delete(REFRESH_KEY);
         await this.store.delete(TIER_KEY);
@@ -41571,8 +42415,8 @@ var require_browserLogin = __commonJS({
       } catch {
       }
     }
-    function createAgentSession3(secrets, config) {
-      return new agentAuth_1.AgentSession(secrets, () => config.accountsApiUrl);
+    function createAgentSession3(secrets, config, options = {}) {
+      return new agentAuth_1.AgentSession(secrets, () => config.accountsApiUrl, options);
     }
     async function signInViaBrowser3(session, config, deps2 = {}) {
       if (await session.isSignedIn())
@@ -69930,7 +70774,7 @@ var require_connection = __commonJS({
             return;
           }
           case "renew_bearer": {
-            void this.answerRenew(frame.id);
+            void this.answerRenew(frame.id, frame.refused);
             return;
           }
           case "rpc_result": {
@@ -69948,15 +70792,19 @@ var require_connection = __commonJS({
             return;
         }
       }
-      /** Run (or join) the ONE in-flight refresh and answer the renew request with its result.
-       * A throwing or absent auth layer answers "no bearer" — a failed renewal at the brain,
-       * never a connection fault. */
-      async answerRenew(id) {
+      /** Run (or join) the ONE in-flight renewal and answer the renew request with its result.
+       * Joiners share the in-flight answer even when their `refused` differs (a turn's main
+       * call and its interim passes usually 401 on the SAME bearer; when they don't, a shared
+       * answer the gateway still refuses just triggers that call's second renew round, which
+       * runs fresh with ITS refused token — self-correcting, never a loop). A throwing or
+       * absent auth layer answers "no bearer" — a failed renewal at the brain, never a
+       * connection fault. */
+      async answerRenew(id, refused) {
         let bearer = null;
         if (this.renewBearer) {
           this.renewInFlight ??= (async () => {
             try {
-              return await this.renewBearer();
+              return await this.renewBearer(refused);
             } catch {
               return null;
             } finally {
@@ -70770,6 +71618,8 @@ var require_dist = __commonJS({
     __exportStar(require_duetEntry(), exports2);
     __exportStar(require_duetRouterModel(), exports2);
     __exportStar(require_duetRouterInstall(), exports2);
+    __exportStar(require_duetExecutorGate(), exports2);
+    __exportStar(require_duetExecutorGateStatus(), exports2);
     __exportStar(require_duetPlan(), exports2);
     __exportStar(require_duetPlanners(), exports2);
     __exportStar(require_repoIdentity(), exports2);
@@ -70780,6 +71630,7 @@ var require_dist = __commonJS({
     __exportStar(require_duetRoutingAdvisor(), exports2);
     __exportStar(require_cron(), exports2);
     __exportStar(require_agentStore(), exports2);
+    __exportStar(require_goalClaim(), exports2);
     __exportStar(require_goalMarker(), exports2);
     __exportStar(require_goalEvidence(), exports2);
     __exportStar(require_goalEvaluate(), exports2);
@@ -71764,7 +72615,8 @@ var require_toolVisibility = __commonJS({
     exports2.SILENT_TOOLS = /* @__PURE__ */ new Set([
       "ask_user",
       "exit_plan_mode",
-      "await_agents"
+      "await_agents",
+      "goal_report"
     ]);
     function isSilentTool3(name2) {
       return typeof name2 === "string" && exports2.SILENT_TOOLS.has(name2);
@@ -87802,8 +88654,19 @@ var darkTheme = {
   contextCometFragment: "#7c5cbf",
   contextCometDust: "#4a3d66",
   border: "#808080",
-  diffAdd: "#38a660",
-  diffRemove: "#b3596b",
+  // Diff layers (see the Theme interface): near-black bands a step apart, loud
+  // color reserved for the +/- decorations, bright off-white plain text. The
+  // hues are Orion's own family — EMERALD for additions (cooler than a leaf
+  // green; the decoration green IS the app's semantic green, autoAccept, so
+  // the diff and the posture/success chrome speak one color) and ROSE for
+  // removals (sits naturally beside the violet brand).
+  diffAdd: "#3fb950",
+  diffRemove: "#e5484d",
+  diffAddBg: "#022711",
+  diffRemoveBg: "#330210",
+  diffAddWordBg: "#044921",
+  diffRemoveWordBg: "#4d0416",
+  diffText: "#f8f8f2",
   diffContext: "#808080",
   gutter: "#808080",
   synKeyword: "#569cd6",
@@ -87813,11 +88676,6 @@ var darkTheme = {
   synType: "#4ec9b0",
   synComment: "#6a9955",
   synControl: "#c586c0",
-  // Per-line diff BASE bands (muted). The brighter diffAdd/diffRemove ride on top
-  // as word-level change highlights, so a small edit shows a two-tone line instead
-  // of one flat wash.
-  diffAddBg: "#225c2b",
-  diffRemoveBg: "#7a2936",
   autoAccept: "#3fb950",
   planMode: "#38bdf8",
   duetMode: "#a78bfa",
@@ -87858,8 +88716,17 @@ var lightTheme = {
   contextCometFragment: "#8b6fd4",
   contextCometDust: "#b9a9dd",
   border: "#808080",
-  diffAdd: "#2f9d44",
-  diffRemove: "#d1454b",
+  // Diff layers (see the Theme interface), mirrored for a light terminal: the
+  // bands are the palest wash, the word step is deeper, decorations deeper
+  // still. Same Orion family as dark — emerald additions (decoration green =
+  // autoAccept, the app's semantic green) and rose removals.
+  diffAdd: "#15803d",
+  diffRemove: "#cf2240",
+  diffAddBg: "#d9fbe8",
+  diffRemoveBg: "#ffdce4",
+  diffAddWordBg: "#aff5cd",
+  diffRemoveWordBg: "#ffc2cf",
+  diffText: "#333333",
   diffContext: "#808080",
   gutter: "#808080",
   synKeyword: "#0000ff",
@@ -87869,8 +88736,6 @@ var lightTheme = {
   synType: "#267f99",
   synComment: "#008000",
   synControl: "#af00db",
-  diffAddBg: "#a6f3b0",
-  diffRemoveBg: "#ffc9d0",
   autoAccept: "#15803d",
   planMode: "#267f99",
   duetMode: "#7c3aed",
@@ -88114,6 +88979,11 @@ async function transportBearer(session, store, fallback) {
   if (!token) await syncAccountGate(session, store);
   return token ?? fallback ?? null;
 }
+async function renewedTransportBearer(session, store, refused, fallback) {
+  const token = await session.renewedAccessToken(refused);
+  if (!token) await syncAccountGate(session, store);
+  return token ?? fallback ?? null;
+}
 var SIGN_IN_FIRST_MESSAGE = "Sign in first with /signin to start chatting.";
 function isAuthDeadError(e) {
   return /\bhttp 401\b/.test(e instanceof Error ? e.message : String(e));
@@ -89101,11 +89971,6 @@ function appendLiveCode(s, id, delta) {
   if (!live.liveCode || live.liveCode.id !== id) return s;
   return { ...s, live: { ...live, liveCode: { ...live.liveCode, code: live.liveCode.code + delta } } };
 }
-function endLiveCode(s, id) {
-  const live = s.live;
-  if (!live?.liveCode || live.liveCode.id !== id) return s;
-  return { ...s, live: { ...live, liveCode: null } };
-}
 function startTool(s, name2, input) {
   const flushed = flushLive(s);
   const live = flushed.live ?? emptyLive();
@@ -89134,7 +89999,11 @@ function settleToolEnd(s, id, success, detail) {
   }
   const rest = { ...s.live.pendingWrites };
   delete rest[id];
-  const nextLive = { ...s.live, pendingWrites: rest, liveCode: null };
+  const nextLive = {
+    ...s.live,
+    pendingWrites: rest,
+    liveCode: s.live.liveCode && s.live.liveCode.id === id ? null : s.live.liveCode
+  };
   if (success) {
     return { ...s, live: nextLive };
   }
@@ -89189,7 +90058,10 @@ function fileModified(s, d2) {
     affectedFiles: d2.affectedFiles,
     trust: d2.trust
   };
-  return { ...f, settled: [...f.settled, item] };
+  const block = f.live?.liveCode;
+  const settlesBlock = !!block && (d2.toolId ? block.id === d2.toolId : block.path === d2.path);
+  const live = settlesBlock && f.live ? { ...f.live, liveCode: null } : f.live;
+  return { ...f, live, settled: [...f.settled, item] };
 }
 function applyTurnComplete(s, data) {
   const flushed = flushLive(s);
@@ -90235,7 +91107,7 @@ function remoteView(r2) {
     footer: "Switch with /remote on|off \xB7 hide or show this session with /remote hide|show."
   };
 }
-function goalView(running, goal, turns = 0, lastReason = null) {
+function goalView(running, goal, turns = 0, lastReason = null, lastClaim = null) {
   if (!running) {
     return {
       title: "Goal",
@@ -90244,7 +91116,12 @@ function goalView(running, goal, turns = 0, lastReason = null) {
     };
   }
   const rows = [statusRow("info", "Running", goal), statusRow("info", "Turns", String(turns))];
-  if (lastReason) rows.push(statusRow("pending", "Last check", lastReason));
+  if (lastClaim) {
+    const claim = lastClaim.done ? "done" : "not done";
+    const note = (0, import_client_core15.goalReasonLine)(lastClaim.note);
+    rows.push(statusRow("info", "Agent reports", note ? `${claim} \u2014 ${note}` : claim));
+  }
+  if (lastReason) rows.push(statusRow("pending", "Last check", (0, import_client_core15.goalReasonLine)(lastReason)));
   return {
     title: "Goal",
     tone: "info",
@@ -91458,30 +92335,32 @@ ${(0, import_client_core20.duetRoutingSummaryLine)(await (0, import_client_core2
       kind: "local",
       name: "duet-entry",
       aliases: ["entry"],
-      description: "Choose who decides plan vs execute in Duet mode \u2014 the planner, or the router",
-      keywords: ["duet", "planner", "router", "plan", "execute", "hand off"],
-      argumentHint: "[planner|router]",
+      description: "Choose who decides plan vs execute in Duet mode \u2014 the planner, the router, or your executor",
+      keywords: ["duet", "planner", "router", "executor", "plan", "execute", "hand off"],
+      argumentHint: "[planner|router|executor]",
       run: async (args2, ctx) => {
         const workspaceRoot = ctx.config?.workspaceRoot;
         const typed = (0, import_client_core20.normalizeDuetEntry)(args2);
         const routerStatus = await (0, import_client_core20.describeDuetRouterModel)().catch(() => null);
+        const executorStatus = await (0, import_client_core20.describeDuetExecutorGateCached)({ workspaceRoot }).catch(() => null);
         const save = async (entry) => {
-          const availability = (0, import_client_core20.duetEntryOptionAvailability)(entry, routerStatus);
+          const availability = (0, import_client_core20.duetEntryOptionAvailability)(entry, routerStatus, executorStatus);
           if (availability.disabled) {
             ctx.print(`${(0, import_client_core20.duetEntryLabel)(entry)}: ${availability.note ?? "unavailable"}`, "warning");
-            if (routerStatus !== null) ctx.print((0, import_client_core20.duetRouterStatusLine)(routerStatus), "info");
+            if (entry === "router" && routerStatus !== null) ctx.print((0, import_client_core20.duetRouterStatusLine)(routerStatus), "info");
             return;
           }
           await (0, import_client_core20.setDuetEntry)(entry);
           const option = import_client_core20.DUET_ENTRY_OPTIONS.find((o) => o.value === entry);
           ctx.print(`${import_client_core20.DUET_ENTRY_INFO.label}: ${(0, import_client_core20.duetEntryLabel)(entry)} \u2014 ${option?.description ?? ""}`, "success");
+          if (entry === "executor" && executorStatus !== null) ctx.print((0, import_client_core20.executorGateStatusLine)(executorStatus), "info");
         };
         if (typed !== null) {
           await save(typed);
           return;
         }
         if (args2.trim() !== "") {
-          ctx.print("Usage: /duet-entry [planner|router]", "warning");
+          ctx.print("Usage: /duet-entry [planner|router|executor]", "warning");
           return;
         }
         const active = await (0, import_client_core20.loadDuetEntry)({ workspaceRoot });
@@ -91491,11 +92370,13 @@ ${(0, import_client_core20.duetRoutingSummaryLine)(await (0, import_client_core2
             kind: "select",
             title: `${import_client_core20.DUET_ENTRY_INFO.label} \xB7 current: ${(0, import_client_core20.duetEntryLabel)(active)}`,
             options: import_client_core20.DUET_ENTRY_OPTIONS.map((option) => {
-              const availability = (0, import_client_core20.duetEntryOptionAvailability)(option.value, routerStatus);
+              const availability = (0, import_client_core20.duetEntryOptionAvailability)(option.value, routerStatus, executorStatus);
               return {
                 label: option.label,
                 value: option.value,
-                // What it needs beats what it does when it cannot be picked.
+                // The row's note — what this pick means on THIS machine (a refusal reason for
+                // the router, the rules-floor explainer for the executor) — beats the generic
+                // description.
                 hint: availability.note ?? (option.value === active ? "(active)" : option.description),
                 accent: option.value === active
               };
@@ -93180,7 +94061,7 @@ Answer with /loops answer <text>, or /loops deny.`,
       kind: "local",
       name: "goal",
       aliases: ["goals"],
-      description: "Work continuously until the goal is complete \u2014 the agent decides when it's done",
+      description: "Work continuously until the goal is complete \u2014 an independent check confirms it's done",
       argumentHint: "<what to accomplish | status | stop>",
       // Starting a goal starts a TURN — typed mid-turn it defers to the queue
       // (runs when the turn ends) rather than racing the live stream. The verb
@@ -93200,7 +94081,7 @@ Answer with /loops answer <text>, or /loops deny.`,
         }
         if (arg === "" || lower === "status") {
           const st2 = ctx.goals.status();
-          return ctx.printInfo(goalView(st2.running, st2.goal, st2.turns ?? 0, st2.lastReason ?? null));
+          return ctx.printInfo(goalView(st2.running, st2.goal, st2.turns ?? 0, st2.lastReason ?? null, st2.lastClaim ?? null));
         }
         if (ctx.goals.status().running) {
           return ctx.print("A goal is already running \u2014 /goal stop first, or steer it by typing normally.", "warning");
@@ -93786,6 +94667,9 @@ function renderLane(transcript, app, ev) {
       transcript.setState(
         (s) => fileModified(s, {
           path: String(d2.path ?? ""),
+          // The causing call — pairs the diff card with the frozen live code
+          // block it settles (rewind-emitted events legitimately omit it).
+          toolId: typeof d2.tool_id === "string" ? d2.tool_id : void 0,
           diff: typeof d2.diff === "string" ? d2.diff : null,
           insertions: typeof d2.insertions === "number" ? d2.insertions : 0,
           deletions: typeof d2.deletions === "number" ? d2.deletions : 0,
@@ -93996,11 +94880,8 @@ function renderLane(transcript, app, ev) {
       }
       break;
     }
-    case "tool_input_end": {
-      const id = typeof d2.tool_id === "string" ? d2.tool_id : "";
-      if (id) transcript.setState((s) => endLiveCode(s, id));
+    case "tool_input_end":
       break;
-    }
     case "tool_progress": {
       const kind = typeof d2.kind === "string" ? d2.kind : "working";
       app.setState((s) => ({ ...s, statusText: `${kind}\u2026` }));
@@ -94130,7 +95011,7 @@ function makeGoalRunTurn(deps2) {
       }
       switch (outcome.kind) {
         case "complete":
-          return { text: outcome.finalText, evidence: outcome.evidence };
+          return { text: outcome.finalText, evidence: outcome.evidence, claim: outcome.claim };
         case "cancelled":
           return "";
         case "error":
@@ -94575,7 +95456,7 @@ var WorkPlanApprovalBridge = class {
 var import_client_ui_core20 = __toESM(require_dist2(), 1);
 
 // src/components/layout/Transcript.tsx
-var import_react27 = __toESM(require_react(), 1);
+var import_react28 = __toESM(require_react(), 1);
 
 // src/components/messages/MessageView.tsx
 var import_react23 = __toESM(require_react(), 1);
@@ -110590,7 +111471,27 @@ function expandTabs2(s) {
   }
   return out2;
 }
-function wordRuns(shown, lang, changed, baseBg, brightBg, syntax, theme) {
+function diffLineStyle(theme, kind) {
+  switch (kind) {
+    case "add":
+      return {
+        bg: theme.diffAddBg,
+        wordBg: theme.diffAddWordBg,
+        accent: theme.diffAdd,
+        text: theme.diffText
+      };
+    case "del":
+      return {
+        bg: theme.diffRemoveBg,
+        wordBg: theme.diffRemoveWordBg,
+        accent: theme.diffRemove,
+        text: theme.diffText
+      };
+    case "context":
+      return { accent: theme.gutter, text: theme.diffText };
+  }
+}
+function wordRuns(shown, lang, changed, baseBg, brightBg, syntax, plainFg, theme) {
   let text;
   let fgs;
   if (syntax) {
@@ -110598,12 +111499,12 @@ function wordRuns(shown, lang, changed, baseBg, brightBg, syntax, theme) {
     text = spans.map((s) => s.text).join("");
     fgs = [];
     for (const sp of spans) {
-      const fg = synColor(theme, sp.kind);
+      const fg = synColor(theme, sp.kind) ?? plainFg;
       for (let c3 = 0; c3 < sp.text.length; c3++) fgs.push(fg);
     }
   } else {
     text = shown;
-    fgs = new Array(shown.length).fill(void 0);
+    fgs = new Array(shown.length).fill(plainFg);
   }
   const bgAt = (k) => changed[k] ? brightBg : baseBg;
   const runs = [];
@@ -110639,8 +111540,10 @@ function StructuredDiff({
       }
       const isAdd = l3.type === "add";
       const isDel = l3.type === "del";
-      const bg = isAdd ? theme.diffAddBg : isDel ? theme.diffRemoveBg : void 0;
-      const accent = isAdd ? theme.diffAdd : isDel ? theme.diffRemove : theme.gutter;
+      const { bg, wordBg, accent, text } = diffLineStyle(
+        theme,
+        isAdd ? "add" : isDel ? "del" : "context"
+      );
       const marker = isAdd ? "+" : isDel ? "-" : " ";
       const num = isDel ? l3.oldNo : l3.newNo;
       const raw = expandTabs2(l3.text ?? "");
@@ -110657,7 +111560,7 @@ function StructuredDiff({
           while (changed.length < shown.length) changed.push(false);
         }
       }
-      const body2 = changed ? wordRuns(shown, lang, changed, bg, accent, isAdd, theme) : isDel ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { children: shown }) : (highlightCode(shown, lang)[0] ?? []).map((sp, k) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { color: synColor(theme, sp.kind), children: sp.text }, k));
+      const body2 = changed ? wordRuns(shown, lang, changed, bg, wordBg, isAdd, text, theme) : isDel ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { color: text, children: shown }) : (highlightCode(shown, lang)[0] ?? []).map((sp, k) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { color: synColor(theme, sp.kind) ?? text, children: sp.text }, k));
       return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(Text2, { backgroundColor: bg, children: [
         /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(Text2, { color: accent, children: [
           gutter(num),
@@ -111165,7 +112068,7 @@ function OrionRing() {
 
 // src/services/version.ts
 function tuiVersion() {
-  return "0.1.23".length > 0 ? "0.1.23" : null;
+  return "0.1.25".length > 0 ? "0.1.25" : null;
 }
 
 // src/components/layout/WelcomeCard.tsx
@@ -111204,18 +112107,48 @@ var import_client_ui_core9 = __toESM(require_dist2(), 1);
 var import_client_core29 = __toESM(require_dist(), 1);
 
 // src/components/messages/Thinking.tsx
+var import_react24 = __toESM(require_react(), 1);
 var import_jsx_runtime40 = __toESM(require_jsx_runtime(), 1);
-var LIVE_LINES = 12;
-var LIVE_CHARS = 1200;
-function thinkingTail(text) {
-  const tail = text.split("\n").slice(-LIVE_LINES).join("\n").trimEnd();
-  return tail.length > LIVE_CHARS ? `\u2026${tail.slice(-LIVE_CHARS)}` : tail;
+var LIVE_ROWS = 12;
+function wrapPlain(line, width) {
+  const rows = [];
+  let row = null;
+  for (const word of line.split(" ")) {
+    let w2 = word;
+    while (w2.length > width) {
+      if (row !== null) {
+        rows.push(row);
+        row = null;
+      }
+      rows.push(w2.slice(0, width));
+      w2 = w2.slice(width);
+    }
+    if (w2 === "" && word !== "") continue;
+    if (row === null) row = w2;
+    else if (row.length + 1 + w2.length <= width) row += ` ${w2}`;
+    else {
+      rows.push(row);
+      row = w2;
+    }
+  }
+  if (row !== null) rows.push(row);
+  return rows.length ? rows : [""];
+}
+function thinkingTailRows(text, width) {
+  const w2 = Math.max(1, Math.floor(width));
+  const tail = text.split("\n").slice(-LIVE_ROWS).join("\n").trimEnd();
+  if (!tail) return [];
+  const rows = [];
+  for (const line of tail.split("\n")) rows.push(...wrapPlain(line, w2));
+  return rows.slice(-LIVE_ROWS);
 }
 function Thinking({
   text,
   spinner = ""
 }) {
   const { columns } = useTerminalSize();
+  const width = Math.max(20, columns - 4);
+  const rows = import_react24.default.useMemo(() => thinkingTailRows(text, width), [text, width]);
   if (!text.trim()) return null;
   return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(Box2, { flexDirection: "column", marginTop: 1, children: [
     /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(Box2, { flexDirection: "row", children: [
@@ -111223,7 +112156,7 @@ function Thinking({
       /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { dim: true, italic: true, children: "Thinking" }),
       spinner ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { colorKey: "spinner", children: ` ${spinner}` }) : null
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { paddingLeft: 2, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { width: Math.max(20, columns - 4), children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { dim: true, italic: true, wrap: "wrap", children: thinkingTail(text) }) }) })
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { paddingLeft: 2, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { width, flexDirection: "column", children: rows.map((row, i2) => /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { dim: true, italic: true, wrap: "truncate-end", children: row.length ? row : " " }, i2)) }) })
   ] });
 }
 
@@ -111301,21 +112234,21 @@ function LiveCode({
 }
 
 // src/hooks/useStore.ts
-var import_react24 = __toESM(require_react(), 1);
+var import_react25 = __toESM(require_react(), 1);
 function useStoreSelector(store, selector) {
-  return (0, import_react24.useSyncExternalStore)(
+  return (0, import_react25.useSyncExternalStore)(
     store.subscribe,
     () => selector(store.getState())
   );
 }
 
 // src/hooks/useTranscriptEviction.ts
-var import_react26 = __toESM(require_react(), 1);
+var import_react27 = __toESM(require_react(), 1);
 
 // src/vendor/ink/hooks/use-committed-rows.ts
-var import_react25 = __toESM(require_react(), 1);
+var import_react26 = __toESM(require_react(), 1);
 function useCommittedRows() {
-  return (0, import_react25.useContext)(CommittedRowsContext);
+  return (0, import_react26.useContext)(CommittedRowsContext);
 }
 
 // src/hooks/useTranscriptEviction.ts
@@ -111341,14 +112274,14 @@ function useTranscriptEviction({
   getItemsContainer
 }) {
   const api = useCommittedRows();
-  const forkSize = (0, import_react26.useContext)(TerminalSizeContext);
+  const forkSize = (0, import_react27.useContext)(TerminalSizeContext);
   const fallbackSize = useTerminalSize();
   const rows = forkSize?.rows ?? fallbackSize.rows;
   const evictedCount = useStoreSelector(transcriptStore, (s) => s.evictedCount);
   const committedCount = useStoreSelector(transcriptStore, (s) => s.committedCount);
-  const apiRef = (0, import_react26.useRef)(api);
+  const apiRef = (0, import_react27.useRef)(api);
   apiRef.current = api;
-  (0, import_react26.useLayoutEffect)(() => {
+  (0, import_react27.useLayoutEffect)(() => {
     const snap = (s) => ({
       sessionId: s.sessionId,
       settledLength: s.settled.length,
@@ -111363,7 +112296,7 @@ function useTranscriptEviction({
       prev = s;
     });
   }, [transcriptStore]);
-  (0, import_react26.useEffect)(() => {
+  (0, import_react27.useEffect)(() => {
     if (!enabled || !api || items.length <= 1) return;
     const container = getItemsContainer();
     if (!container) return;
@@ -111411,15 +112344,15 @@ function Transcript({
   const subAgents = useStoreSelector(appStore, (s) => s.subAgents);
   const subagentsAwaiting = useStoreSelector(appStore, (s) => s.subagentsAwaiting);
   const { columns } = useTerminalSize();
-  const items = import_react27.default.useMemo(
+  const items = import_react28.default.useMemo(
     () => groupToolRuns(evictedCount > 0 ? settled.slice(evictedCount) : settled),
     [settled, evictedCount]
   );
-  const itemsContainerRef = import_react27.default.useRef(null);
-  const setItemsContainer = import_react27.default.useCallback((el) => {
+  const itemsContainerRef = import_react28.default.useRef(null);
+  const setItemsContainer = import_react28.default.useCallback((el) => {
     itemsContainerRef.current = el;
   }, []);
-  const getItemsContainer = import_react27.default.useCallback(() => itemsContainerRef.current, []);
+  const getItemsContainer = import_react28.default.useCallback(() => itemsContainerRef.current, []);
   useTranscriptEviction({ enabled: evictionEnabled, transcriptStore, items, getItemsContainer });
   const running = live?.runningTool ?? null;
   const foldTail = running && !verbose ? trailingToolRun(items) : null;
@@ -111453,10 +112386,10 @@ function Transcript({
 }
 
 // src/components/layout/ReplFooter.tsx
-var import_react46 = __toESM(require_react(), 1);
+var import_react47 = __toESM(require_react(), 1);
 
 // src/components/tools/PlanCard.tsx
-var import_react28 = __toESM(require_react(), 1);
+var import_react29 = __toESM(require_react(), 1);
 var import_jsx_runtime43 = __toESM(require_jsx_runtime(), 1);
 function planStepView(index, currentStep) {
   const done2 = index + 1 < currentStep;
@@ -111481,8 +112414,8 @@ function PlanCard({ plan }) {
   const total = plan.steps.length;
   const allDone = total > 0 && plan.current_step > total;
   const planKey = `${plan.current_step}|${plan.steps.join("\0")}`;
-  const [hiddenKey, setHiddenKey] = import_react28.default.useState(null);
-  import_react28.default.useEffect(() => {
+  const [hiddenKey, setHiddenKey] = import_react29.default.useState(null);
+  import_react29.default.useEffect(() => {
     if (!allDone) return;
     const t = setTimeout(() => setHiddenKey(planKey), DONE_HOLD_MS);
     return () => clearTimeout(t);
@@ -111516,7 +112449,7 @@ function PlanCard({ plan }) {
 }
 
 // src/components/tools/SubAgentCard.tsx
-var import_react29 = __toESM(require_react(), 1);
+var import_react30 = __toESM(require_react(), 1);
 var import_client_core30 = __toESM(require_dist(), 1);
 var import_client_ui_core10 = __toESM(require_dist2(), 1);
 var import_jsx_runtime44 = __toESM(require_jsx_runtime(), 1);
@@ -111536,8 +112469,8 @@ function SubAgentList({
 }) {
   const running = agents.filter((a) => a.phase !== "finished");
   const visible = !awaiting && running.length > 0;
-  const [now2, setNow] = import_react29.default.useState(() => Date.now());
-  import_react29.default.useEffect(() => {
+  const [now2, setNow] = import_react30.default.useState(() => Date.now());
+  import_react30.default.useEffect(() => {
     if (!visible) return void 0;
     const timer = setInterval(() => setNow(Date.now()), 1e3);
     return () => clearInterval(timer);
@@ -111553,7 +112486,7 @@ function SubAgentList({
 }
 
 // src/components/input/PromptInput.tsx
-var import_react31 = __toESM(require_react(), 1);
+var import_react32 = __toESM(require_react(), 1);
 
 // src/components/input/slashSegments.ts
 function segmentSlice(text, offset, ranges) {
@@ -112330,7 +113263,7 @@ function vimKeypress(st2, buffer, input, key) {
 }
 
 // src/voice/useHoldToTalk.ts
-var import_react30 = __toESM(require_react(), 1);
+var import_react31 = __toESM(require_react(), 1);
 var REPEAT_GAP_MS = 120;
 var WARMUP_THRESHOLD = 2;
 var HOLD_THRESHOLD = 5;
@@ -112488,9 +113421,9 @@ function spliceTranscript(value, cursor, text) {
   return { value: before + inserted + after, cursor: cursor + lead.length + text.length };
 }
 function useHoldToTalk(opts) {
-  const optsRef = (0, import_react30.useRef)(opts);
+  const optsRef = (0, import_react31.useRef)(opts);
   optsRef.current = opts;
-  const machineRef = (0, import_react30.useRef)(null);
+  const machineRef = (0, import_react31.useRef)(null);
   if (!machineRef.current) {
     machineRef.current = createHoldToTalk(
       {
@@ -112570,37 +113503,37 @@ function PromptInput({
   mode,
   permissionMode
 }) {
-  const [value, setValue2] = (0, import_react31.useState)("");
-  const [cursor, setCursor] = (0, import_react31.useState)(0);
-  const [history, setHistory] = (0, import_react31.useState)(
+  const [value, setValue2] = (0, import_react32.useState)("");
+  const [cursor, setCursor] = (0, import_react32.useState)(0);
+  const [history, setHistory] = (0, import_react32.useState)(
     () => (initialHistory ?? []).slice(0, HISTORY_LIMIT)
   );
-  const [vimState, setVimState] = (0, import_react31.useState)(() => initialVimState("insert"));
-  const [menuIdx, setMenuIdx] = (0, import_react31.useState)(0);
-  const [menuDismissed, setMenuDismissed] = (0, import_react31.useState)(false);
-  const [search, setSearch] = (0, import_react31.useState)(null);
-  const [escArmed, setEscArmed] = (0, import_react31.useState)(false);
-  const [exitArmed, setExitArmed] = (0, import_react31.useState)(null);
-  const [postureFlash, setPostureFlash] = (0, import_react31.useState)(false);
-  const chordRef = (0, import_react31.useRef)(emptyChord());
-  const escAtRef = (0, import_react31.useRef)(0);
-  const exitAtRef = (0, import_react31.useRef)(0);
-  const valueRef = (0, import_react31.useRef)(value);
+  const [vimState, setVimState] = (0, import_react32.useState)(() => initialVimState("insert"));
+  const [menuIdx, setMenuIdx] = (0, import_react32.useState)(0);
+  const [menuDismissed, setMenuDismissed] = (0, import_react32.useState)(false);
+  const [search, setSearch] = (0, import_react32.useState)(null);
+  const [escArmed, setEscArmed] = (0, import_react32.useState)(false);
+  const [exitArmed, setExitArmed] = (0, import_react32.useState)(null);
+  const [postureFlash, setPostureFlash] = (0, import_react32.useState)(false);
+  const chordRef = (0, import_react32.useRef)(emptyChord());
+  const escAtRef = (0, import_react32.useRef)(0);
+  const exitAtRef = (0, import_react32.useRef)(0);
+  const valueRef = (0, import_react32.useRef)(value);
   valueRef.current = value;
-  const cursorRef = (0, import_react31.useRef)(cursor);
+  const cursorRef = (0, import_react32.useRef)(cursor);
   cursorRef.current = cursor;
-  const pasteLedger = (0, import_react31.useRef)({ nextId: 1, texts: /* @__PURE__ */ new Map() });
-  const recall = (0, import_react31.useRef)(NOT_RECALLING);
-  const wheelRef = (0, import_react31.useRef)(createWheelAccel());
-  const flashTimer = (0, import_react31.useRef)(null);
-  const firstPosture = (0, import_react31.useRef)(true);
+  const pasteLedger = (0, import_react32.useRef)({ nextId: 1, texts: /* @__PURE__ */ new Map() });
+  const recall = (0, import_react32.useRef)(NOT_RECALLING);
+  const wheelRef = (0, import_react32.useRef)(createWheelAccel());
+  const flashTimer = (0, import_react32.useRef)(null);
+  const firstPosture = (0, import_react32.useRef)(true);
   const theme = useTheme();
   const { rows } = useTerminalSize();
-  const [voiceState, setVoiceState] = (0, import_react31.useState)("idle");
-  const [voiceProgress, setVoiceProgress] = (0, import_react31.useState)(null);
-  const [voiceError, setVoiceError] = (0, import_react31.useState)(null);
-  const [voiceBlink, setVoiceBlink] = (0, import_react31.useState)(false);
-  (0, import_react31.useEffect)(() => {
+  const [voiceState, setVoiceState] = (0, import_react32.useState)("idle");
+  const [voiceProgress, setVoiceProgress] = (0, import_react32.useState)(null);
+  const [voiceError, setVoiceError] = (0, import_react32.useState)(null);
+  const [voiceBlink, setVoiceBlink] = (0, import_react32.useState)(false);
+  (0, import_react32.useEffect)(() => {
     if (voiceState !== "recording") return;
     const t = setInterval(() => setVoiceBlink((b2) => !b2), 600);
     return () => {
@@ -112608,7 +113541,7 @@ function PromptInput({
       setVoiceBlink(false);
     };
   }, [voiceState]);
-  const micRef = (0, import_react31.useRef)(null);
+  const micRef = (0, import_react32.useRef)(null);
   const holdToTalk = useHoldToTalk({
     getBuffer: () => ({ value: valueRef.current, cursor: cursorRef.current }),
     applyBuffer: (v2, c3) => {
@@ -112644,11 +113577,11 @@ function PromptInput({
       }
     }
   });
-  (0, import_react31.useEffect)(() => () => holdToTalk.dispose(), []);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => () => holdToTalk.dispose(), []);
+  (0, import_react32.useEffect)(() => {
     if (vim) setVimState(initialVimState("insert"));
   }, [vim]);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => {
     if (firstPosture.current) {
       firstPosture.current = false;
       return;
@@ -112660,7 +113593,7 @@ function PromptInput({
       if (flashTimer.current) clearTimeout(flashTimer.current);
     };
   }, [mode, permissionMode]);
-  const pickedMentions = (0, import_react31.useRef)(/* @__PURE__ */ new Set());
+  const pickedMentions = (0, import_react32.useRef)(/* @__PURE__ */ new Set());
   const suggestionsFor = (v2) => v2.startsWith("/") && !v2.includes(" ") ? getCompletions?.(v2) ?? [] : [];
   const suggestions = suggestionsFor(value);
   const mPfx = mentionPrefix(value, cursor);
@@ -112668,18 +113601,18 @@ function PromptInput({
   const menuFiles = fileSuggestions.length > 0;
   const menuLen = menuFiles ? fileSuggestions.length : suggestions.length;
   const menuOpen = !menuDismissed && menuLen > 0 && (!vim || vimState.mode === "insert");
-  const notifyMenuRef = (0, import_react31.useRef)(onMenuOpenChange);
+  const notifyMenuRef = (0, import_react32.useRef)(onMenuOpenChange);
   notifyMenuRef.current = onMenuOpenChange;
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => {
     notifyMenuRef.current?.(menuOpen);
   }, [menuOpen]);
-  (0, import_react31.useEffect)(() => () => notifyMenuRef.current?.(false), []);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => () => notifyMenuRef.current?.(false), []);
+  (0, import_react32.useEffect)(() => {
     for (const path14 of pickedMentions.current) {
       if (!value.includes(`${import_client_core32.FILE_MENTION_LEADER}${path14}`)) pickedMentions.current.delete(path14);
     }
   }, [value]);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => {
     setMenuIdx(0);
     setMenuDismissed(false);
     setEscArmed(false);
@@ -113131,7 +114064,7 @@ function PromptInput({
 }
 
 // src/hooks/useIndexBadge.ts
-var import_react32 = __toESM(require_react(), 1);
+var import_react33 = __toESM(require_react(), 1);
 var READY_BADGE_LINGER_MS = 3e3;
 function shouldShowIndexBadge(mode, phase, lingerElapsed) {
   if (mode !== "on") return true;
@@ -113139,8 +114072,8 @@ function shouldShowIndexBadge(mode, phase, lingerElapsed) {
   return !lingerElapsed;
 }
 function useIndexBadgeVisible(mode, phase, lingerMs = READY_BADGE_LINGER_MS) {
-  const [lingerElapsed, setLingerElapsed] = (0, import_react32.useState)(false);
-  (0, import_react32.useEffect)(() => {
+  const [lingerElapsed, setLingerElapsed] = (0, import_react33.useState)(false);
+  (0, import_react33.useEffect)(() => {
     setLingerElapsed(false);
     if (phase !== "ready") return;
     const timer = setTimeout(() => setLingerElapsed(true), lingerMs);
@@ -113303,7 +114236,7 @@ function StatusBar({
 }
 
 // src/components/dialogs/AskUserPrompt.tsx
-var import_react33 = __toESM(require_react(), 1);
+var import_react34 = __toESM(require_react(), 1);
 var import_client_ui_core11 = __toESM(require_dist2(), 1);
 
 // src/components/dialogs/LineEditor.tsx
@@ -113355,15 +114288,15 @@ function AskUserPrompt({
   guardMs = 250
 }) {
   const { requestId, sessionId } = pending;
-  const card = (0, import_react33.useMemo)(() => (0, import_client_ui_core11.buildAskCard)(pending.request), [pending.request]);
+  const card = (0, import_react34.useMemo)(() => (0, import_client_ui_core11.buildAskCard)(pending.request), [pending.request]);
   const questions = card.questions;
-  const [selections, setSelections] = (0, import_react33.useState)(
+  const [selections, setSelections] = (0, import_react34.useState)(
     () => questions.map(() => import_client_ui_core11.EMPTY_SELECTION)
   );
-  const [index, setIndex] = (0, import_react33.useState)(0);
-  const [cursor, setCursor] = (0, import_react33.useState)(0);
-  const [draft, setDraft] = (0, import_react33.useState)(null);
-  const guard = (0, import_react33.useRef)({ id: requestId, at: Date.now() });
+  const [index, setIndex] = (0, import_react34.useState)(0);
+  const [cursor, setCursor] = (0, import_react34.useState)(0);
+  const [draft, setDraft] = (0, import_react34.useState)(null);
+  const guard = (0, import_react34.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) {
     guard.current = { id: requestId, at: Date.now() };
   }
@@ -113509,7 +114442,7 @@ function writtenInPreview(selection) {
 }
 
 // src/components/dialogs/FeedbackPrompt.tsx
-var import_react34 = __toESM(require_react(), 1);
+var import_react35 = __toESM(require_react(), 1);
 var import_client_ui_core12 = __toESM(require_dist2(), 1);
 var import_jsx_runtime53 = __toESM(require_jsx_runtime(), 1);
 function FeedbackPrompt({
@@ -113519,10 +114452,10 @@ function FeedbackPrompt({
   guardMs = 250
 }) {
   const { requestId } = pending;
-  const [score, setScore] = (0, import_react34.useState)(0);
-  const [why, setWhy] = (0, import_react34.useState)(null);
+  const [score, setScore] = (0, import_react35.useState)(0);
+  const [why, setWhy] = (0, import_react35.useState)(null);
   const theme = useTheme();
-  const guard = (0, import_react34.useRef)({ id: requestId, at: Date.now() });
+  const guard = (0, import_react35.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) {
     guard.current = { id: requestId, at: Date.now() };
   }
@@ -113571,13 +114504,13 @@ function FeedbackPrompt({
 }
 
 // src/components/dialogs/PermissionPrompt.tsx
-var import_react36 = __toESM(require_react(), 1);
+var import_react37 = __toESM(require_react(), 1);
 var import_client_ui_core13 = __toESM(require_dist2(), 1);
 var import_client_ui_core14 = __toESM(require_dist2(), 1);
 var import_client_core34 = __toESM(require_dist(), 1);
 
 // src/components/dialogs/SelectList.tsx
-var import_react35 = __toESM(require_react(), 1);
+var import_react36 = __toESM(require_react(), 1);
 var import_jsx_runtime54 = __toESM(require_jsx_runtime(), 1);
 function SelectList({
   title,
@@ -113589,17 +114522,17 @@ function SelectList({
   maxVisible
 }) {
   const { rows } = useTerminalSize();
-  const [query, setQuery] = (0, import_react35.useState)("");
-  const view = (0, import_react35.useMemo)(() => {
+  const [query, setQuery] = (0, import_react36.useState)("");
+  const view = (0, import_react36.useMemo)(() => {
     if (!filterable) return options;
     const q2 = query.trim().toLowerCase();
     if (!q2) return options;
     return options.filter((o) => !o.separator && o.label.toLowerCase().includes(q2));
   }, [options, query, filterable]);
   const selectable = view.flatMap((o, i2) => o.separator ? [] : [i2]);
-  const [idx, setIdx] = (0, import_react35.useState)(selectable[0] ?? 0);
+  const [idx, setIdx] = (0, import_react36.useState)(selectable[0] ?? 0);
   const safeIdx = selectable.includes(idx) ? idx : selectable[0] ?? 0;
-  (0, import_react35.useEffect)(() => {
+  (0, import_react36.useEffect)(() => {
     if (filterable) setIdx(selectable[0] ?? 0);
   }, [query, filterable]);
   const move = (dir) => {
@@ -113700,12 +114633,12 @@ function PermissionPrompt({
   guardMs = 250
 }) {
   const { data, sessionId } = pending;
-  const model = (0, import_react36.useMemo)(
+  const model = (0, import_react37.useMemo)(
     () => (0, import_client_ui_core13.buildPermissionCard)(data, { agentLabel: pending.agentLabel ?? null }),
     [data, pending.agentLabel]
   );
-  const [stage, setStage] = (0, import_react36.useState)({ kind: "choose" });
-  const guard = (0, import_react36.useRef)({ id: data.request_id, at: Date.now() });
+  const [stage, setStage] = (0, import_react37.useState)({ kind: "choose" });
+  const guard = (0, import_react37.useRef)({ id: data.request_id, at: Date.now() });
   if (guard.current.id !== data.request_id) {
     guard.current = { id: data.request_id, at: Date.now() };
     if (stage.kind !== "choose") setStage({ kind: "choose" });
@@ -113880,7 +114813,7 @@ function PermissionPrompt({
 }
 
 // src/components/dialogs/EndpointsPanel.tsx
-var import_react37 = __toESM(require_react(), 1);
+var import_react38 = __toESM(require_react(), 1);
 var import_jsx_runtime56 = __toESM(require_jsx_runtime(), 1);
 function maskedKeyState(e) {
   if (e.apiKey) return `key \u2022\u2022\u2022\u2022${e.apiKey.slice(-4)}`;
@@ -113910,20 +114843,20 @@ function EndpointsPanel({
   deps: deps2,
   onClose
 }) {
-  const [overlay, setOverlay] = (0, import_react37.useState)(null);
-  const [name2, setName] = (0, import_react37.useState)("");
-  const [url, setUrl] = (0, import_react37.useState)("");
-  const [wire, setWire] = (0, import_react37.useState)("openai");
-  const [key, setKey] = (0, import_react37.useState)("");
-  const [selected, setSelected] = (0, import_react37.useState)(/* @__PURE__ */ new Set());
-  const [discovered, setDiscovered] = (0, import_react37.useState)(null);
-  const [modelConfig, setModelConfig] = (0, import_react37.useState)({});
-  const [editing, setEditing] = (0, import_react37.useState)(null);
-  const [configDraft, setConfigDraft] = (0, import_react37.useState)("");
-  const [savedPins, setSavedPins] = (0, import_react37.useState)(/* @__PURE__ */ new Set());
-  const [savedConfig, setSavedConfig] = (0, import_react37.useState)({});
-  const [fetching, setFetching] = (0, import_react37.useState)(false);
-  const [note, setNote] = (0, import_react37.useState)(null);
+  const [overlay, setOverlay] = (0, import_react38.useState)(null);
+  const [name2, setName] = (0, import_react38.useState)("");
+  const [url, setUrl] = (0, import_react38.useState)("");
+  const [wire, setWire] = (0, import_react38.useState)("openai");
+  const [key, setKey] = (0, import_react38.useState)("");
+  const [selected, setSelected] = (0, import_react38.useState)(/* @__PURE__ */ new Set());
+  const [discovered, setDiscovered] = (0, import_react38.useState)(null);
+  const [modelConfig, setModelConfig] = (0, import_react38.useState)({});
+  const [editing, setEditing] = (0, import_react38.useState)(null);
+  const [configDraft, setConfigDraft] = (0, import_react38.useState)("");
+  const [savedPins, setSavedPins] = (0, import_react38.useState)(/* @__PURE__ */ new Set());
+  const [savedConfig, setSavedConfig] = (0, import_react38.useState)({});
+  const [fetching, setFetching] = (0, import_react38.useState)(false);
+  const [note, setNote] = (0, import_react38.useState)(null);
   const slots = [
     ...deps2.entries.map((_2, index) => ({ kind: "entry", index })),
     { kind: "field", field: "name" },
@@ -113933,9 +114866,9 @@ function EndpointsPanel({
     { kind: "action", action: "fetch" },
     { kind: "action", action: "save" }
   ];
-  const [at, setAt] = (0, import_react37.useState)(deps2.entries.length);
+  const [at, setAt] = (0, import_react38.useState)(deps2.entries.length);
   const slot = slots[Math.min(at, slots.length - 1)];
-  const [verifiedFor, setVerifiedFor] = (0, import_react37.useState)(null);
+  const [verifiedFor, setVerifiedFor] = (0, import_react38.useState)(null);
   const fingerprint = `${url.trim()}\0${key}`;
   const verified = verifiedFor === fingerprint;
   const resetForm = () => {
@@ -114422,7 +115355,7 @@ function EndpointsPanel({
 }
 
 // src/components/dialogs/PermissionRulesPanel.tsx
-var import_react38 = __toESM(require_react(), 1);
+var import_react39 = __toESM(require_react(), 1);
 var import_client_core35 = __toESM(require_dist(), 1);
 var import_client_ui_core15 = __toESM(require_dist2(), 1);
 var import_jsx_runtime57 = __toESM(require_jsx_runtime(), 1);
@@ -114432,7 +115365,7 @@ function PermissionRulesPanel({
   add,
   onClose
 }) {
-  const [stage, setStage] = (0, import_react38.useState)({ kind: "list" });
+  const [stage, setStage] = (0, import_react39.useState)({ kind: "list" });
   use_input_default((input, key) => {
     if (stage.kind !== "list") {
       if (stage.kind === "add-rule") {
@@ -114532,7 +115465,7 @@ function PermissionRulesPanel({
 }
 
 // src/components/dialogs/PlanApprovalPrompt.tsx
-var import_react39 = __toESM(require_react(), 1);
+var import_react40 = __toESM(require_react(), 1);
 var import_jsx_runtime58 = __toESM(require_jsx_runtime(), 1);
 function PlanApprovalPrompt({
   pending,
@@ -114541,7 +115474,7 @@ function PlanApprovalPrompt({
   guardMs = 250
 }) {
   const { requestId, sessionId } = pending;
-  const guard = (0, import_react39.useRef)({ id: requestId, at: Date.now() });
+  const guard = (0, import_react40.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) guard.current = { id: requestId, at: Date.now() };
   use_input_default((input, key) => {
     if (key.ctrl && input === "c") {
@@ -114575,7 +115508,7 @@ function PlanApprovalPrompt({
 }
 
 // src/components/dialogs/WorkPlanApprovalPrompt.tsx
-var import_react40 = __toESM(require_react(), 1);
+var import_react41 = __toESM(require_react(), 1);
 var import_client_core36 = __toESM(require_dist(), 1);
 var import_jsx_runtime59 = __toESM(require_jsx_runtime(), 1);
 function WorkPlanApprovalPrompt({
@@ -114585,7 +115518,7 @@ function WorkPlanApprovalPrompt({
   guardMs = 250
 }) {
   const { requestId, plan } = pending;
-  const guard = (0, import_react40.useRef)({ id: requestId, at: Date.now() });
+  const guard = (0, import_react41.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) guard.current = { id: requestId, at: Date.now() };
   use_input_default((input, key) => {
     if (key.ctrl && input === "c") {
@@ -114654,7 +115587,7 @@ function ConfirmDialog({ dialog }) {
 }
 
 // src/components/dialogs/HooksBrowser.tsx
-var import_react41 = __toESM(require_react(), 1);
+var import_react42 = __toESM(require_react(), 1);
 var import_jsx_runtime63 = __toESM(require_jsx_runtime(), 1);
 function matcherLabel(m2) {
   if (!m2 || typeof m2 !== "object") return "(any)";
@@ -114722,9 +115655,9 @@ function HooksBrowser({
   hooks,
   onClose
 }) {
-  const [event, setEvent] = (0, import_react41.useState)(null);
-  const [matcher, setMatcher] = (0, import_react41.useState)(null);
-  const [hookIdx, setHookIdx] = (0, import_react41.useState)(null);
+  const [event, setEvent] = (0, import_react42.useState)(null);
+  const [matcher, setMatcher] = (0, import_react42.useState)(null);
+  const [hookIdx, setHookIdx] = (0, import_react42.useState)(null);
   if (event === null) {
     const events = [...new Set(hooks.map((h) => h.event ?? "(unknown)"))].sort();
     const options = events.map((e) => {
@@ -114777,7 +115710,7 @@ function HooksBrowser({
 }
 
 // src/components/dialogs/PluginManager.tsx
-var import_react42 = __toESM(require_react(), 1);
+var import_react43 = __toESM(require_react(), 1);
 var import_client_core37 = __toESM(require_dist(), 1);
 var import_jsx_runtime64 = __toESM(require_jsx_runtime(), 1);
 function pluginId(p) {
@@ -114796,8 +115729,8 @@ function PluginManager({
   install,
   onClose
 }) {
-  const [view, setView] = (0, import_react42.useState)({ at: "list" });
-  const [busy, setBusy] = (0, import_react42.useState)(false);
+  const [view, setView] = (0, import_react43.useState)({ at: "list" });
+  const [busy, setBusy] = (0, import_react43.useState)(false);
   const finish = (work) => {
     setBusy(true);
     void work.finally(() => {
@@ -114950,7 +115883,7 @@ Install "${view.id}" from "${view.catalog}" (${scope} scope)?`,
 }
 
 // src/components/dialogs/RewindPicker.tsx
-var import_react43 = __toESM(require_react(), 1);
+var import_react44 = __toESM(require_react(), 1);
 var import_jsx_runtime65 = __toESM(require_jsx_runtime(), 1);
 function statLabel(t) {
   if (!t.files) return "no code changes";
@@ -114965,8 +115898,8 @@ function RewindPicker({
   apply: apply2,
   onClose
 }) {
-  const [picked, setPicked] = (0, import_react43.useState)(null);
-  const [busy, setBusy] = (0, import_react43.useState)(false);
+  const [picked, setPicked] = (0, import_react44.useState)(null);
+  const [busy, setBusy] = (0, import_react44.useState)(false);
   if (busy) {
     return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(Box2, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(ThemedText, { dim: true, children: "Working\u2026" }) });
   }
@@ -115004,7 +115937,7 @@ function RewindPicker({
 }
 
 // src/components/dialogs/McpManager.tsx
-var import_react44 = __toESM(require_react(), 1);
+var import_react45 = __toESM(require_react(), 1);
 var import_jsx_runtime66 = __toESM(require_jsx_runtime(), 1);
 function statusLabel(s) {
   return s.status === "needs_auth" ? "needs auth" : s.status ?? "?";
@@ -115022,8 +115955,8 @@ function McpManager({
   act,
   onClose
 }) {
-  const [view, setView] = (0, import_react44.useState)({ at: "list" });
-  const [busy, setBusy] = (0, import_react44.useState)(false);
+  const [view, setView] = (0, import_react45.useState)({ at: "list" });
+  const [busy, setBusy] = (0, import_react45.useState)(false);
   const finish = (work, backTo = { at: "list" }) => {
     setBusy(true);
     void work.finally(() => {
@@ -115471,7 +116404,7 @@ function UsageMetricsPanel({
 }
 
 // src/components/status/WorkingStatus.tsx
-var import_react45 = __toESM(require_react(), 1);
+var import_react46 = __toESM(require_react(), 1);
 var import_jsx_runtime69 = __toESM(require_jsx_runtime(), 1);
 var FRAME_MS = 50;
 function WorkingStatus({
@@ -115479,14 +116412,14 @@ function WorkingStatus({
   label,
   now: now2 = Date.now
 }) {
-  const startRef = (0, import_react45.useRef)(now2());
-  const wordsRef = (0, import_react45.useRef)(shuffleWords(LOADING_WORDS));
-  const wordIdxRef = (0, import_react45.useRef)(0);
-  const wordStartRef = (0, import_react45.useRef)(startRef.current);
-  const dwellRef = (0, import_react45.useRef)(nextCycleMs());
-  const [, forceFrame] = (0, import_react45.useState)(0);
+  const startRef = (0, import_react46.useRef)(now2());
+  const wordsRef = (0, import_react46.useRef)(shuffleWords(LOADING_WORDS));
+  const wordIdxRef = (0, import_react46.useRef)(0);
+  const wordStartRef = (0, import_react46.useRef)(startRef.current);
+  const dwellRef = (0, import_react46.useRef)(nextCycleMs());
+  const [, forceFrame] = (0, import_react46.useState)(0);
   const tokens = useStoreSelector(store, (s) => s.turnOutputTokens);
-  (0, import_react45.useEffect)(() => {
+  (0, import_react46.useEffect)(() => {
     const timer = setInterval(() => {
       const n2 = now2();
       if (!label && n2 - startRef.current < META_REVEAL_AFTER_MS && n2 - wordStartRef.current >= dwellRef.current) {
@@ -115638,11 +116571,11 @@ function ReplFooter({
     (s) => s.pendingPermissions.length > 0 || !!s.pendingPlanApproval || !!s.pendingAskUser || !!s.pendingWorkPlan
   );
   const closePanel = () => appStore.setState((s) => ({ ...s, activePanel: null }));
-  const onQueuePop = import_react46.default.useCallback(
+  const onQueuePop = import_react47.default.useCallback(
     (draft) => popEditableQueue(appStore, draft),
     [appStore]
   );
-  const [menuOpen, setMenuOpen] = import_react46.default.useState(false);
+  const [menuOpen, setMenuOpen] = import_react47.default.useState(false);
   return /* @__PURE__ */ (0, import_jsx_runtime72.jsxs)(import_jsx_runtime72.Fragment, { children: [
     streaming && !parked && /* @__PURE__ */ (0, import_jsx_runtime72.jsx)(WorkingStatus, { store: appStore }),
     plan && /* @__PURE__ */ (0, import_jsx_runtime72.jsx)(PlanCard, { plan }),
@@ -115758,7 +116691,7 @@ function ReplFooter({
 }
 
 // src/components/layout/FullscreenLayout.tsx
-var import_react47 = __toESM(require_react(), 1);
+var import_react48 = __toESM(require_react(), 1);
 var import_jsx_runtime73 = __toESM(require_jsx_runtime(), 1);
 function FullscreenLayout({
   appStore,
@@ -115780,7 +116713,7 @@ function FullscreenLayout({
   onCycleMode
 }) {
   const { columns, rows } = useTerminalSize();
-  const scrollRef = (0, import_react47.useRef)(null);
+  const scrollRef = (0, import_react48.useRef)(null);
   const onScroll = (delta) => {
     const sb = scrollRef.current;
     if (!sb) return;
@@ -115815,7 +116748,7 @@ function FullscreenLayout({
 }
 
 // src/components/dialogs/AgentsDashboard.tsx
-var import_react48 = __toESM(require_react(), 1);
+var import_react49 = __toESM(require_react(), 1);
 var import_client_core40 = __toESM(require_dist(), 1);
 var import_client_ui_core17 = __toESM(require_dist2(), 1);
 var import_strip_ansi4 = __toESM(require_strip_ansi(), 1);
@@ -115862,51 +116795,51 @@ function AgentsDashboard({
   onClose
 }) {
   const { rows } = useTerminalSize();
-  const [screen, setScreen] = (0, import_react48.useState)({ kind: "list" });
-  const [cursor, setCursor] = (0, import_react48.useState)(0);
-  const [busy, setBusy] = (0, import_react48.useState)(false);
-  const [error, setError] = (0, import_react48.useState)(null);
-  const [liveJob, setLiveJob] = (0, import_react48.useState)(null);
-  const [events, setEvents] = (0, import_react48.useState)([]);
-  const [pollError, setPollError] = (0, import_react48.useState)(null);
-  const [diff3, setDiff] = (0, import_react48.useState)(null);
-  const diffFetchedFor = (0, import_react48.useRef)(null);
-  const [liveItems, setLiveItems] = (0, import_react48.useState)([]);
-  const [liveTerm, setLiveTerm] = (0, import_react48.useState)("");
-  const [liveFrames, setLiveFrames] = (0, import_react48.useState)(0);
-  const liveIdRef = (0, import_react48.useRef)(0);
-  const [messaging, setMessaging] = (0, import_react48.useState)(false);
-  const [messageText, setMessageText] = (0, import_react48.useState)("");
-  const [messageNote, setMessageNote] = (0, import_react48.useState)(null);
-  const [tokenStatus, setTokenStatus] = (0, import_react48.useState)(null);
-  const [tokenBusy, setTokenBusy] = (0, import_react48.useState)(false);
-  const [tokenNote, setTokenNote] = (0, import_react48.useState)(null);
-  const [tokenInput, setTokenInput] = (0, import_react48.useState)(false);
-  const [tokenDraft, setTokenDraft] = (0, import_react48.useState)("");
-  const [jiraStatus, setJiraStatus] = (0, import_react48.useState)(null);
-  const [jiraBusy, setJiraBusy] = (0, import_react48.useState)(false);
-  const [jiraNote, setJiraNote] = (0, import_react48.useState)(null);
-  const [jiraInput, setJiraInput] = (0, import_react48.useState)(null);
-  const [form, setForm] = (0, import_react48.useState)(EMPTY_FORM);
-  const [field2, setField] = (0, import_react48.useState)(0);
+  const [screen, setScreen] = (0, import_react49.useState)({ kind: "list" });
+  const [cursor, setCursor] = (0, import_react49.useState)(0);
+  const [busy, setBusy] = (0, import_react49.useState)(false);
+  const [error, setError] = (0, import_react49.useState)(null);
+  const [liveJob, setLiveJob] = (0, import_react49.useState)(null);
+  const [events, setEvents] = (0, import_react49.useState)([]);
+  const [pollError, setPollError] = (0, import_react49.useState)(null);
+  const [diff3, setDiff] = (0, import_react49.useState)(null);
+  const diffFetchedFor = (0, import_react49.useRef)(null);
+  const [liveItems, setLiveItems] = (0, import_react49.useState)([]);
+  const [liveTerm, setLiveTerm] = (0, import_react49.useState)("");
+  const [liveFrames, setLiveFrames] = (0, import_react49.useState)(0);
+  const liveIdRef = (0, import_react49.useRef)(0);
+  const [messaging, setMessaging] = (0, import_react49.useState)(false);
+  const [messageText, setMessageText] = (0, import_react49.useState)("");
+  const [messageNote, setMessageNote] = (0, import_react49.useState)(null);
+  const [tokenStatus, setTokenStatus] = (0, import_react49.useState)(null);
+  const [tokenBusy, setTokenBusy] = (0, import_react49.useState)(false);
+  const [tokenNote, setTokenNote] = (0, import_react49.useState)(null);
+  const [tokenInput, setTokenInput] = (0, import_react49.useState)(false);
+  const [tokenDraft, setTokenDraft] = (0, import_react49.useState)("");
+  const [jiraStatus, setJiraStatus] = (0, import_react49.useState)(null);
+  const [jiraBusy, setJiraBusy] = (0, import_react49.useState)(false);
+  const [jiraNote, setJiraNote] = (0, import_react49.useState)(null);
+  const [jiraInput, setJiraInput] = (0, import_react49.useState)(null);
+  const [form, setForm] = (0, import_react49.useState)(EMPTY_FORM);
+  const [field2, setField] = (0, import_react49.useState)(0);
   const jobs = panel.jobs;
   const safeCursor = Math.min(cursor, Math.max(0, jobs.length - 1));
   const detailId = screen.kind === "detail" ? screen.id : null;
   const detailJob = detailId ? liveJob ?? jobs.find((j2) => j2.id === detailId) ?? null : null;
-  const panelRef = (0, import_react48.useRef)(panel);
+  const panelRef = (0, import_react49.useRef)(panel);
   panelRef.current = panel;
-  const screenRef = (0, import_react48.useRef)(screen);
+  const screenRef = (0, import_react49.useRef)(screen);
   screenRef.current = screen;
-  const oauthAlive = (0, import_react48.useRef)(true);
-  const oauthTimer = (0, import_react48.useRef)(null);
-  (0, import_react48.useEffect)(
+  const oauthAlive = (0, import_react49.useRef)(true);
+  const oauthTimer = (0, import_react49.useRef)(null);
+  (0, import_react49.useEffect)(
     () => () => {
       oauthAlive.current = false;
       if (oauthTimer.current) clearTimeout(oauthTimer.current);
     },
     []
   );
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     if (!detailId) return;
     let cancelled = false;
     let timer = null;
@@ -115948,7 +116881,7 @@ function AgentsDashboard({
     };
   }, [detailId]);
   const branchName = detailJob?.branch_name ?? null;
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     if (!detailId || !branchName) return;
     const key = `${detailId}:${branchName}`;
     if (diffFetchedFor.current === key) return;
@@ -115966,7 +116899,7 @@ function AgentsDashboard({
     };
   }, [detailId, branchName]);
   const liveSessionId = detailJob && !(0, import_client_core40.isTerminal)(detailJob.status) && detailJob.session_id ? detailJob.session_id : null;
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     if (!liveSessionId) return;
     liveIdRef.current = 0;
     setLiveItems([]);
@@ -115987,7 +116920,7 @@ function AgentsDashboard({
     });
     return () => sub.dispose();
   }, [liveSessionId]);
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     let cancelled = false;
     void (async () => {
       try {
@@ -116643,14 +117576,14 @@ function LaunchFormView({ form, field: field2 }) {
 }
 
 // src/components/layout/TerminalTitle.tsx
-var import_react50 = __toESM(require_react(), 1);
+var import_react51 = __toESM(require_react(), 1);
 
 // src/vendor/ink/hooks/use-terminal-title.ts
-var import_react49 = __toESM(require_react(), 1);
+var import_react50 = __toESM(require_react(), 1);
 var import_strip_ansi5 = __toESM(require_strip_ansi(), 1);
 function useTerminalTitle(title) {
-  const writeRaw = (0, import_react49.useContext)(TerminalWriteContext);
-  (0, import_react49.useEffect)(() => {
+  const writeRaw = (0, import_react50.useContext)(TerminalWriteContext);
+  (0, import_react50.useEffect)(() => {
     if (title === null || !writeRaw) return;
     const clean = (0, import_strip_ansi5.default)(title);
     if (process.platform === "win32") {
@@ -116676,8 +117609,8 @@ function composeTerminalTitle(sessionTitle, streaming, frame) {
 function TerminalTitle({ appStore }) {
   const sessionTitle = useStoreSelector(appStore, (s) => s.sessionTitle);
   const streaming = useStoreSelector(appStore, (s) => s.status === "streaming");
-  const [frame, setFrame] = (0, import_react50.useState)(0);
-  (0, import_react50.useEffect)(() => {
+  const [frame, setFrame] = (0, import_react51.useState)(0);
+  (0, import_react51.useEffect)(() => {
     if (!streaming) return;
     const id = setInterval(
       () => setFrame((f) => (f + 1) % TITLE_ANIMATION_FRAMES.length),
@@ -116776,11 +117709,11 @@ function Root({
 }
 
 // src/components/layout/SignInScreen.tsx
-var import_react52 = __toESM(require_react(), 1);
+var import_react53 = __toESM(require_react(), 1);
 var import_client_core41 = __toESM(require_dist(), 1);
 
 // src/components/layout/splash/Splash.tsx
-var import_react51 = __toESM(require_react(), 1);
+var import_react52 = __toESM(require_react(), 1);
 
 // src/components/layout/splash/halfblock.ts
 var BLOCK = [" ", "\u2580", "\u2584", "\u2588"];
@@ -117099,7 +118032,7 @@ var TONE = {
 function Splash({ columns, rows, frame, copy }) {
   const theme = useTheme();
   const height = splashHeight(rows);
-  const shell2 = import_react51.default.useMemo(() => orbShell(), []);
+  const shell2 = import_react52.default.useMemo(() => orbShell(), []);
   const grid = splashFrame({ width: columns, rows: height, frame, shell: shell2, copy });
   return /* @__PURE__ */ (0, import_jsx_runtime77.jsx)(Box2, { flexDirection: "column", children: grid.map((spans, y2) => /* @__PURE__ */ (0, import_jsx_runtime77.jsx)(Text2, { wrap: "truncate", children: spans.length === 0 ? " " : spans.map((span, i2) => renderSpan(span, i2, theme)) }, y2)) });
 }
@@ -117145,15 +118078,15 @@ function SignInScreen({
   onSignedIn
 }) {
   const { exit } = use_app_default();
-  const [phase, setPhase] = import_react52.default.useState("idle");
-  const [url, setUrl] = import_react52.default.useState(null);
-  const [error, setError] = import_react52.default.useState(null);
-  const [frame, setFrame] = import_react52.default.useState(0);
+  const [phase, setPhase] = import_react53.default.useState("idle");
+  const [url, setUrl] = import_react53.default.useState(null);
+  const [error, setError] = import_react53.default.useState(null);
+  const [frame, setFrame] = import_react53.default.useState(0);
   const { columns, rows } = useTerminalSize();
-  const caps = import_react52.default.useMemo(() => detectTerminal2(), []);
+  const caps = import_react53.default.useMemo(() => detectTerminal2(), []);
   const copy = splashCopy(phase, error, url, columns);
   const useSplash = !splashDisabled() && caps.unicode && splashFits(columns, rows, copy.length);
-  import_react52.default.useEffect(() => {
+  import_react53.default.useEffect(() => {
     if (!useSplash || phase !== "idle") return;
     const t = setInterval(() => setFrame((f) => f + 1), TICK_MS);
     return () => clearInterval(t);
@@ -117917,7 +118850,9 @@ async function runHeadless(flags2) {
   const config = loadConfig();
   if (flags2.workspace) config.workspaceRoot = flags2.workspace;
   const secrets = createSecretStore();
-  const session = (0, import_client_core46.createAgentSession)(secrets, config);
+  const session = (0, import_client_core46.createAgentSession)(secrets, config, {
+    trace: (line) => console.error(`[orion-auth] ${line}`)
+  });
   const signedIn = await session.isSignedIn();
   if (!signedIn && !process.env.ORION_AUTH_TOKEN) {
     throw new Error(
@@ -117958,8 +118893,10 @@ async function runHeadless(flags2) {
     }),
     gatewayUrl: () => config.apiUrl,
     clientVersion: tuiVersion() ?? "0.0.0-dev",
-    // Mid-segment token-expiry heal — same closure as the transport authToken below.
-    renewBearer: async () => await session.currentFreshAccessToken() ?? process.env.ORION_AUTH_TOKEN ?? null,
+    // Mid-segment token-expiry heal — the FAIL-CLOSED renewal, not the fail-open
+    // freshness read the transport authToken below uses (that degradation hands the
+    // refused token back and burns the heal).
+    renewBearer: async (refused) => await session.renewedAccessToken(refused) ?? process.env.ORION_AUTH_TOKEN ?? null,
     log: brainLog
   });
   const turnTransport = (0, import_client_core46.createTurnTransport)({
@@ -118002,6 +118939,7 @@ async function runHeadless(flags2) {
     () => permissionStore.rules()
   );
   executor.enableFileHistorySpill();
+  executor.registerHostTool(import_client_core46.GOAL_REPORT_TOOL, async (params) => (0, import_client_core46.goalReportToolResult)(params));
   const boundary = createBoundaryHandlers({
     bridge,
     executor,
@@ -118033,6 +118971,9 @@ async function runHeadless(flags2) {
       permissionMode: a.permissionMode,
       workspaceRoot: config.workspaceRoot,
       clientType: "tui",
+      // Omitted (not placeholdered) in an unstamped dev/test run — see the interactive
+      // path in main.tsx for why the two absences must stay distinguishable.
+      clientVersion: tuiVersion() ?? void 0,
       mode: a.mode,
       reasoning: a.reasoning,
       tokenSaving: a.tokenSaving,
@@ -118060,7 +119001,8 @@ async function runHeadless(flags2) {
         getMessages: () => snapshot,
         getClientState: () => clientState,
         routing: routing(),
-        clientCapabilities: [],
+        // Every headless turn is a goal round — the claim tool is always on.
+        clientCapabilities: [import_client_core46.GOAL_CAPABILITY],
         drainQueuedInput: () => [],
         getOrionResources: () => (0, import_client_core46.buildOrionSnapshot)(config.workspaceRoot, void 0, sessionId),
         getFileHistoryManifest: () => executor.fileHistoryManifest(sessionId)
@@ -118076,7 +119018,11 @@ async function runHeadless(flags2) {
       throw new Error(typeof data.error === "string" ? data.error : "turn failed");
     }
     if (Array.isArray(data.messages)) messages = data.messages;
-    return { text: extractFinalAssistantText(data), evidence: (0, import_client_core46.goalEvidenceFromWire)(data.messages) };
+    return {
+      text: extractFinalAssistantText(data),
+      evidence: (0, import_client_core46.goalEvidenceFromWire)(data.messages),
+      claim: (0, import_client_core46.goalClaimFromWire)(data.messages)
+    };
   };
   const { endReason, turns } = await runGoalLoop({
     goal: flags2.goal,
@@ -118089,7 +119035,12 @@ async function runHeadless(flags2) {
         evidence,
         sessionId,
         // Lets the check read the user's `goalEvaluate` model choice.
-        workspaceRoot: config.workspaceRoot ?? null
+        workspaceRoot: config.workspaceRoot ?? null,
+        // The run's own model — the fallback when no evaluator model is
+        // configured, so the check never lands on the gateway's deployment
+        // default (see the interactive TUI's identical wiring).
+        sessionModel: routing().model,
+        sessionProvider: routing().provider
       });
       if (ruling.evaluated && !ruling.ok && ruling.achievable) {
         process.stderr.write(`[headless] not met yet \u2014 ${(0, import_client_core46.goalReasonLine)(ruling.reason)}
@@ -118253,6 +119204,11 @@ async function main() {
   const duetAdvisorState = (0, import_client_core49.createDuetAdvisorState)();
   const duetRouterGate = (0, import_client_core49.createDuetRouterGate)({
     loadEncoder: (0, import_client_core49.createDefaultDuetRouterEncoder)(),
+    // "Executor decides": the same gate object owns the executor's one-token scorer, so the
+    // turn path below has ONE call whichever entry is set (`duetExecutorGate.ts`).
+    executorGate: (0, import_client_core49.createDuetExecutorGate)({
+      onError: (stage, problem) => console.error(`[duet-executor-gate] ${stage} failed: ${problem}`)
+    }),
     onError: (stage, error) => (
       // Same breadcrumb the IDE and the Power App leave (the log redirect captures it, so it
       // never corrupts the alt screen): without it a load or classify failure is invisible
@@ -118327,7 +119283,11 @@ async function main() {
     }
   });
   const secrets = createSecretStore();
-  const session = (0, import_client_core49.createAgentSession)(secrets, config);
+  const session = (0, import_client_core49.createAgentSession)(secrets, config, {
+    // Renewal/refresh breadcrumbs (step outcomes + timings, never tokens) — the evidence
+    // the 2026-08-22 refresh-wedge investigation lacked.
+    trace: (line) => console.error(`[orion-auth] ${line}`)
+  });
   const outcomes = new import_client_core49.OutcomeReporter({
     apiBaseUrl: () => config.accountsApiUrl,
     accessToken: () => session.currentAccessToken()
@@ -118400,10 +119360,10 @@ async function main() {
       }),
       gatewayUrl: () => config.apiUrl,
       clientVersion: tuiVersion() ?? "0.0.0-dev",
-      // Mid-segment token-expiry heal: the SAME bearer seam the per-segment authToken uses —
-      // an expired stored token forces its refresh, so calling it again IS the renewal (the
-      // brain retries once with the result); an emptied store re-gates the chat.
-      renewBearer: () => transportBearer(session, appStore, process.env.ORION_AUTH_TOKEN),
+      // Mid-segment token-expiry heal: the FAIL-CLOSED renewal seam, NOT the fail-open
+      // per-segment authToken read — the refused token rides in so the answer is decided
+      // on token identity, never local clocks; an emptied store re-gates the chat.
+      renewBearer: (refused) => renewedTransportBearer(session, appStore, refused, process.env.ORION_AUTH_TOKEN),
       log: brainLog
     });
     return brainInstance;
@@ -119142,6 +120102,11 @@ async function main() {
       workspaceRoot: config.workspaceRoot,
       clientType: "tui",
       // usage-telemetry surface tag
+      // …and the build behind that tag. `tuiVersion()` is null in an unstamped dev/test run,
+      // which becomes `undefined` here so the key is OMITTED rather than sent as a placeholder:
+      // "not reported" and "reported but unreadable" are different states downstream, and a dev
+      // build is the former.
+      clientVersion: tuiVersion() ?? void 0,
       // mode/reasoning/context_window ride the body too (rule 1) so a cold pod keeps
       // plan/ask read-only + the right model settings — not a per-pod set_* RPC.
       mode: a.mode,
@@ -119226,7 +120191,11 @@ async function main() {
     if (appStore.getState().mode === "duet") {
       const routed = await duetRouterGate.prepareTurn(
         (0, import_client_core49.duetEntryWireForSegment)(config.workspaceRoot),
-        routerText
+        routerText,
+        // What the executor gate's prompt is built from: the standing record as it stands
+        // BEFORE the advisor runs (the advisor may flag it for this turn; the gate asks the
+        // executor about the request under the plan the user actually approved).
+        { workspaceRoot: config.workspaceRoot, record: appStore.getState().duetPlan }
       );
       duetEntry = routed.entry;
       duetRouterVerdict = routed.verdict;
@@ -119305,7 +120274,10 @@ async function main() {
             import_client_core49.DUET_REPLAN_CAPABILITY,
             // …and runs the planner's `hand_off` (leg marker, phase line, journal), so
             // planner entry may offer it (further leg-gated backend-side).
-            import_client_core49.DUET_HANDOFF_CAPABILITY
+            import_client_core49.DUET_HANDOFF_CAPABILITY,
+            // `goal` lights up the goal_report claim tool, and only while a goal is
+            // actually driving this conversation — an ordinary chat never sees it.
+            ...goalRunner !== null ? [import_client_core49.GOAL_CAPABILITY] : []
           ],
           extraBody: {
             ...appStore.getState().subagentsEnabled ? agentManager.parentExtraBody() : {},
@@ -119381,7 +120353,8 @@ async function main() {
         endSettle = {
           kind: "complete",
           finalText: (0, import_client_core49.finalAssistantTextFromWire)(data.messages),
-          evidence: (0, import_client_core49.goalEvidenceFromWire)(data.messages)
+          evidence: (0, import_client_core49.goalEvidenceFromWire)(data.messages),
+          claim: (0, import_client_core49.goalClaimFromWire)(data.messages)
         };
         (0, import_client_core48.recordTurnMetrics)({
           app: "tui",
@@ -119562,6 +120535,7 @@ async function main() {
     );
     return (0, import_client_core49.duetHandoffResult)();
   });
+  executor.registerHostTool(import_client_core49.GOAL_REPORT_TOOL, async (params) => (0, import_client_core49.goalReportToolResult)(params));
   const loopService = new LoopService({
     workspaceRoot: config.workspaceRoot,
     schedulePath: loopSchedulePathFor((0, import_client_core49.runsRootFor)("loops", config.workspaceRoot)),
@@ -119635,12 +120609,27 @@ async function main() {
           // stranger's routing.
           sessionId: goalSessionId ?? void 0,
           // Lets the check read the user's `goalEvaluate` model choice.
-          workspaceRoot: currentRouting().workspaceRoot ?? null
+          workspaceRoot: currentRouting().workspaceRoot ?? null,
+          // The session's model as THIS CLIENT knows it — the fallback when no
+          // evaluator model is configured. The gateway's own session record can
+          // still hold the deployment default for a local-brain session (routing
+          // rides segment bodies), and a check on that default is a check on a
+          // model this session never used.
+          sessionModel: currentRouting().model,
+          sessionProvider: currentRouting().provider
         });
-        if (ruling.evaluated && !ruling.ok && ruling.achievable) {
-          transcriptStore.setState((s) => appendGoalNoteFor(s, goalSessionId, (0, import_client_core49.goalNotMetRow)(ruling.reason)));
-        }
         return ruling;
+      },
+      // A round that did NOT meet the goal says so — in the judge's words when a
+      // check ran, in the agent's own honest not-done report when none did
+      // (goalRoundReason is the one mapping, shared by every client). Without it
+      // a long goal is a wall of identical continuation lines and a stuck one is
+      // indistinguishable from a working one.
+      onRound: (round) => {
+        const reason = (0, import_client_core49.goalRoundReason)(round);
+        if (reason !== "") {
+          transcriptStore.setState((s) => appendGoalNoteFor(s, goalSessionId, (0, import_client_core49.goalNotMetRow)(reason)));
+        }
       }
     });
     goalRunner = runner;
@@ -119656,6 +120645,7 @@ async function main() {
         runCommand: routeInput
       });
     });
+    transcriptStore.setState((s) => appendGoalNoteFor(s, goalSessionId, (0, import_client_core49.goalSetRow)(goal)));
   };
   const enqueueSteer = (text) => {
     appStore.setState((s) => ({ ...s, queuedMessages: [...s.queuedMessages, queuedSteer(text)] }));