orion-super-agent-dev 0.1.24 → 0.1.26

package/out/main.js

@@ -2230,7 +2230,7 @@ var require_react_jsx_runtime_development = __commonJS({
     if (process.env.NODE_ENV !== "production") {
       (function() {
         "use strict";
-        var React32 = require_react();
+        var React33 = require_react();
         var REACT_ELEMENT_TYPE = Symbol.for("react.element");
         var REACT_PORTAL_TYPE = Symbol.for("react.portal");
         var REACT_FRAGMENT_TYPE = Symbol.for("react.fragment");
@@ -2256,7 +2256,7 @@ var require_react_jsx_runtime_development = __commonJS({
           }
           return null;
         }
-        var ReactSharedInternals = React32.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
+        var ReactSharedInternals = React33.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
         function error(format2) {
           {
             {
@@ -9963,9 +9963,9 @@ var require_react_reconciler_development = __commonJS({
       module2.exports = function $$$reconciler($$$hostConfig) {
         var exports3 = {};
         "use strict";
-        var React32 = require_react();
+        var React33 = require_react();
         var Scheduler = require_scheduler();
-        var ReactSharedInternals = React32.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
+        var ReactSharedInternals = React33.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
         var suppressWarning = false;
         function setSuppressWarning(newSuppressWarning) {
           {
@@ -25969,9 +25969,9 @@ var require_semver = __commonJS({
       } else {
         this.prerelease = m2[4].split(".").map(function(id) {
           if (/^[0-9]+$/.test(id)) {
-            var num = +id;
-            if (num >= 0 && num < MAX_SAFE_INTEGER) {
-              return num;
+            var num2 = +id;
+            if (num2 >= 0 && num2 < MAX_SAFE_INTEGER) {
+              return num2;
             }
           }
           return id;
@@ -29222,14 +29222,12 @@ var require_duetEntry = __commonJS({
       {
         value: "executor",
         label: "Executor decides",
-        description: "Your local executor routes. No planner call, no download."
+        description: "Your executor routes. No planner call, no download."
       }
     ];
-    function effectiveDuetEntry(setting, routerState, executorState) {
+    function effectiveDuetEntry(setting, routerState) {
       if (setting === "router" && routerState !== "ready")
         return { entry: "planner", downgraded: true };
-      if (setting === "executor" && executorState !== "ready")
-        return { entry: "planner", downgraded: true };
       return { entry: setting, downgraded: false };
     }
     function duetEntryLabel2(entry) {
@@ -29368,20 +29366,18 @@ var require_duetExecutorGateStatus = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.executorGateStatusLine = executorGateStatusLine2;
-    exports2.executorGateDowngradeNote = executorGateDowngradeNote;
+    exports2.executorGateFallbackNote = executorGateFallbackNote;
     exports2.executorGateOptionAvailability = executorGateOptionAvailability;
     function unavailableWhy(reason, problem) {
       switch (reason) {
         case "not_resolved":
           return "its endpoint is not configured";
-        case "not_loopback":
-          return "it is not on this machine";
         case "unreachable":
           return "it is not answering";
         case "no_completions":
           return "it has no /v1/completions route";
         case "thinking":
-          return "it answers with thinking on (load it with thinking off)";
+          return "its completions route answers thinking text, not a plain token";
         case "unparseable":
           return "it did not answer E or P";
         case "error":
@@ -29395,30 +29391,30 @@ var require_duetExecutorGateStatus = __commonJS({
         case "miscalibrated":
           return `Executor gate: ${status.target.model} on '${status.target.name}' misrouted ${status.calibration.failed.length} of ${status.calibration.total} probe scenarios (${status.mode}, threshold ${status.threshold}) \u2014 tune executorGate.threshold on that endpoint.`;
         case "platform":
-          return "Executor gate: needs a local executor \u2014 the Duet executor is a platform model.";
+          return "Executor gate: the Duet executor is a platform model \u2014 this entry routes on Duet's rules.";
         case "unavailable":
-          return `Executor gate: not available \u2014 ${unavailableWhy(status.reason, status.problem)}.`;
+          return `Executor gate: not asking \u2014 ${unavailableWhy(status.reason, status.problem)}.`;
       }
     }
-    function executorGateDowngradeNote(status) {
+    function executorGateFallbackNote(status) {
       const why = status.state === "platform" ? "the Duet executor is a platform model" : status.state === "unavailable" ? unavailableWhy(status.reason, status.problem) : "it could not run";
-      return `Executor decides needs a local executor that answers a one-token routing question and ${why} \u2014 this turn ran through the planner instead.`;
+      return `Executor decides could not ask your executor (${why}) \u2014 this turn routed on Duet's rules instead.`;
     }
     function executorGateOptionAvailability(status) {
       if (status === null || status.state === "ready")
         return { disabled: false, note: null };
       switch (status.state) {
         case "platform":
-          return { disabled: true, note: "Needs a local executor (the Duet executor is a platform model)." };
+          return { disabled: false, note: "The executor is a platform model \u2014 routes on Duet's rules." };
         case "miscalibrated":
           return {
-            disabled: true,
-            note: `The executor's routing gate failed calibration (${status.calibration.passed}/${status.calibration.total}) \u2014 see the Duet card.`
+            disabled: false,
+            note: `The gate misrouted ${status.calibration.failed.length} of ${status.calibration.total} probe scenarios \u2014 tune executorGate.threshold on that endpoint.`
           };
         case "unavailable":
           return {
-            disabled: true,
-            note: `Needs a local executor that answers /v1/completions (${unavailableWhy(status.reason, status.problem)}).`
+            disabled: false,
+            note: `The executor cannot be asked right now (${unavailableWhy(status.reason, status.problem)}) \u2014 routes on Duet's rules.`
           };
       }
     }
@@ -29604,11 +29600,11 @@ var require_duetRouterModel = __commonJS({
       const dim = r2.dim;
       if (typeof dim !== "number" || !Number.isInteger(dim) || dim <= 0)
         return null;
-      const num = (v2) => typeof v2 === "number" && Number.isFinite(v2) ? v2 : null;
-      const temperature = num(r2.temperature);
-      const threshold = num(r2.threshold);
-      const headChars = num(r2.head_chars);
-      const maxTokens = num(r2.max_tokens);
+      const num2 = (v2) => typeof v2 === "number" && Number.isFinite(v2) ? v2 : null;
+      const temperature = num2(r2.temperature);
+      const threshold = num2(r2.threshold);
+      const headChars = num2(r2.head_chars);
+      const maxTokens = num2(r2.max_tokens);
       if (temperature === null || temperature <= 0)
         return null;
       if (threshold === null || threshold < 0 || threshold > 1)
@@ -29635,10 +29631,10 @@ var require_duetRouterModel = __commonJS({
         if (weight.length === 0 || bias.length !== weight.length)
           return null;
         for (const row of weight) {
-          if (!Array.isArray(row) || row.length !== dim || row.some((x2) => num(x2) === null))
+          if (!Array.isArray(row) || row.length !== dim || row.some((x2) => num2(x2) === null))
             return null;
         }
-        if (bias.some((x2) => num(x2) === null))
+        if (bias.some((x2) => num2(x2) === null))
           return null;
         return { weight, bias };
       };
@@ -29899,9 +29895,9 @@ var require_duetRouterModel = __commonJS({
           if (setting === "executor") {
             if (opts.executorGate !== void 0)
               return opts.executorGate.prepareTurn(text, ctx);
-            const note = executorNoted ? null : (0, duetExecutorGateStatus_js_1.executorGateDowngradeNote)({ state: "unavailable", reason: "error", problem: "this host has no executor gate" });
+            const note = executorNoted ? null : (0, duetExecutorGateStatus_js_1.executorGateFallbackNote)({ state: "unavailable", reason: "error", problem: "this host has no executor gate" });
             executorNoted = true;
-            return { ...(0, duetEntry_js_1.effectiveDuetEntry)("executor", void 0, "unavailable"), verdict: null, note };
+            return { entry: "executor", verdict: null, note };
           }
           if (setting !== "router")
             return { entry: setting, verdict: null, note: null };
@@ -33479,6 +33475,8 @@ var require_segmentDriver = __commonJS({
         body2.workspace_root = routing.workspaceRoot;
       if (routing.clientType !== void 0)
         body2.client_type = routing.clientType;
+      if (routing.clientVersion !== void 0)
+        body2.client_version = routing.clientVersion;
       if (routing.mode !== void 0)
         body2.mode = routing.mode;
       if (routing.reasoning !== void 0)
@@ -34772,7 +34770,10 @@ var require_frames = __commonJS({
           if (typeof frame.id !== "string") {
             throw new FrameDecodeError("malformed renew_bearer frame");
           }
-          return { type: "renew_bearer", id: frame.id };
+          const decoded = { type: "renew_bearer", id: frame.id };
+          if (typeof frame.refused === "string")
+            decoded.refused = frame.refused;
+          return decoded;
         }
         case "rpc_result": {
           if (typeof frame.id !== "string" || !("result" in frame)) {
@@ -37267,7 +37268,6 @@ var require_duetExecutorGate = __commonJS({
     var duetMode_js_1 = require_duetMode();
     var duetPlan_js_1 = require_duetPlan();
     var duetRoutingAdvisor_js_1 = require_duetRoutingAdvisor();
-    var duetEntry_js_1 = require_duetEntry();
     var duetExecutorGateStatus_js_1 = require_duetExecutorGateStatus();
     exports2.EXECUTOR_GATE_SOURCE = "executor_gate";
     exports2.EXECUTOR_GATE_PROMPT_VERSION = "1";
@@ -37292,9 +37292,6 @@ var require_duetExecutorGate = __commonJS({
         if (routing === void 0) {
           return { state: "unavailable", reason: "not_resolved", problem: "the executor's endpoint is not configured", name: name2 };
         }
-        if (!(0, customProviders_js_1.isLoopbackEndpoint)(routing.baseUrl)) {
-          return { state: "unavailable", reason: "not_loopback", problem: "the executor is not on this machine", name: name2 };
-        }
         if (!deps2.alive(workspaceRoot)) {
           return { state: "unavailable", reason: "unreachable", problem: "the executor is not answering", name: name2 };
         }
@@ -37323,9 +37320,6 @@ var require_duetExecutorGate = __commonJS({
         if (entry === null) {
           return { state: "unavailable", reason: "not_resolved", problem: "the executor's endpoint is not configured", name: name2 };
         }
-        if (!(0, customProviders_js_1.isLoopbackEndpoint)(entry.baseUrl)) {
-          return { state: "unavailable", reason: "not_loopback", problem: "the executor is not on this machine", name: name2 };
-        }
         const apiKey = await (0, customProviders_js_1.resolveApiKey)(entry);
         if (!await (0, customProviders_js_1.endpointIsReachable)(entry.baseUrl, apiKey, opts.fetchImpl)) {
           return { state: "unavailable", reason: "unreachable", problem: "the executor is not answering", name: name2 };
@@ -37629,10 +37623,10 @@ var require_duetExecutorGate = __commonJS({
       const ttl = opts.statusTtlMs ?? exports2.EXECUTOR_GATE_STATUS_TTL_MS;
       let cached = null;
       let noted = false;
-      const downgrade = (why) => {
-        const note = noted ? null : (0, duetExecutorGateStatus_js_1.executorGateDowngradeNote)(why);
+      const fallback = (why) => {
+        const note = noted ? null : (0, duetExecutorGateStatus_js_1.executorGateFallbackNote)(why);
         noted = true;
-        return { ...(0, duetEntry_js_1.effectiveDuetEntry)("executor", void 0, "unavailable"), verdict: null, note };
+        return { entry: "executor", verdict: null, note };
       };
       return {
         async status(o = {}) {
@@ -37656,20 +37650,20 @@ var require_duetExecutorGate = __commonJS({
           const resolved = resolveExecutorGateTarget(ctx.workspaceRoot, opts.resolveDeps);
           if (resolved.state !== "ready") {
             opts.onError?.("resolve", resolved.state === "platform" ? "platform executor" : resolved.problem);
-            return downgrade(resolved);
+            return fallback(resolved);
           }
           const { target } = resolved;
           const prompt = renderExecutorGatePrompt(executorGateStateFrom(ctx.record, text));
           const asked = await askExecutorGate(target, prompt, { fetchImpl: opts.fetchImpl, timeoutMs: opts.timeoutMs });
           if (!asked.ok) {
             opts.onError?.("ask", asked.problem);
-            return downgrade({ state: "unavailable", reason: asked.reason, problem: asked.problem });
+            return fallback({ state: "unavailable", reason: asked.reason, problem: asked.problem });
           }
           const decision = decideExecutorGate(asked.answer, target.threshold);
           if (decision === null) {
             const said = asked.answer.raw.trim();
             opts.onError?.("ask", `undecidable answer "${said}"`);
-            return downgrade({ state: "unavailable", reason: "unparseable", problem: `the executor answered "${said}"` });
+            return fallback({ state: "unavailable", reason: "unparseable", problem: `the executor answered "${said}"` });
           }
           noted = false;
           const verdict = {
@@ -39005,6 +38999,58 @@ var require_agentStore = __commonJS({
   }
 });
 
+// ../packages/orion-client-core/dist/goalClaim.js
+var require_goalClaim = __commonJS({
+  "../packages/orion-client-core/dist/goalClaim.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.GOAL_REPORT_TOOL = exports2.GOAL_CAPABILITY = void 0;
+    exports2.readGoalReportInput = readGoalReportInput;
+    exports2.goalClaimFromWire = goalClaimFromWire3;
+    exports2.goalReportToolResult = goalReportToolResult3;
+    exports2.GOAL_CAPABILITY = "goal";
+    exports2.GOAL_REPORT_TOOL = "goal_report";
+    function readGoalReportInput(input) {
+      if (!input || typeof input !== "object")
+        return null;
+      const r2 = input;
+      if (typeof r2.done !== "boolean")
+        return null;
+      const note = r2.done ? r2.verified : r2.outstanding;
+      return { done: r2.done, note: typeof note === "string" ? note.trim() : "" };
+    }
+    function goalClaimFromWire3(messages) {
+      if (!Array.isArray(messages))
+        return null;
+      let claim = null;
+      for (const message of messages) {
+        const m2 = message;
+        if (!m2 || m2.role !== "assistant" || !Array.isArray(m2.content))
+          continue;
+        for (const block of m2.content) {
+          const b2 = block;
+          if (!b2 || b2.type !== "tool_use" || b2.name !== exports2.GOAL_REPORT_TOOL)
+            continue;
+          const parsed = readGoalReportInput(b2.input);
+          if (parsed !== null)
+            claim = parsed;
+        }
+      }
+      return claim;
+    }
+    function goalReportToolResult3(params) {
+      const claim = readGoalReportInput(params);
+      if (claim === null) {
+        return "goal_report needs `done` as a boolean: false while ANY part of the goal remains (say what in `outstanding`), true only when every part is verified complete (name what you ran in `verified`).";
+      }
+      if (claim.done) {
+        return "Completion claim recorded. An independent check now reviews the evidence of what you actually did \u2014 the goal ends only if it confirms; otherwise you will be told what is still outstanding. End your turn now.";
+      }
+      return "Status recorded \u2014 the goal continues. If you can take the next step now, keep working; otherwise end your turn and you will be continued.";
+    }
+  }
+});
+
 // ../packages/orion-client-core/dist/goalMarker.js
 var require_goalMarker = __commonJS({
   "../packages/orion-client-core/dist/goalMarker.js"(exports2) {
@@ -39426,7 +39472,8 @@ var require_goalEvaluate = __commonJS({
       const params = { goal: args2.goal, evidence };
       if (args2.sessionId)
         params.session_id = args2.sessionId;
-      const chosen = await configuredEvaluatorModel(args2);
+      const sessionFallback = args2.sessionModel && !args2.sessionProvider?.startsWith("custom") ? { model: args2.sessionModel, provider: args2.sessionProvider ?? "" } : void 0;
+      const chosen = await configuredEvaluatorModel(args2) ?? sessionFallback;
       if (chosen) {
         params.model = chosen.model;
         if (chosen.provider)
@@ -39443,15 +39490,18 @@ var require_goalRunner = __commonJS({
   "../packages/orion-client-core/dist/goalRunner.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.GoalRunner = exports2.GOAL_CONTINUE_DISPLAY = exports2.GOAL_REASON_PROMPT_MAX_CHARS = exports2.GOAL_REASON_MAX_CHARS = exports2.GOAL_MAX_EVALUATOR_FAILURES = exports2.DEFAULT_GOAL_MAX_WALL_MS = exports2.DEFAULT_GOAL_MAX_TURNS = exports2.GOAL_INSTRUCTION = void 0;
+    exports2.GoalRunner = exports2.GOAL_CONTINUE_DISPLAY = exports2.GOAL_REASON_PROMPT_MAX_CHARS = exports2.GOAL_REASON_MAX_CHARS = exports2.GOAL_UNCLAIMED_CHECK_INTERVAL = exports2.GOAL_MAX_EVALUATOR_FAILURES = exports2.DEFAULT_GOAL_MAX_WALL_MS = exports2.DEFAULT_GOAL_MAX_TURNS = exports2.GOAL_INSTRUCTION = void 0;
     exports2.buildGoalPrompt = buildGoalPrompt;
     exports2.buildContinuationPrompt = buildContinuationPrompt;
     exports2.finalAssistantTextFromWire = finalAssistantTextFromWire2;
     exports2.describeGoalEnd = describeGoalEnd;
-    exports2.goalReasonLine = goalReasonLine2;
+    exports2.goalReasonLine = goalReasonLine3;
     exports2.goalEndRow = goalEndRow2;
     exports2.goalNotMetRow = goalNotMetRow2;
     exports2.goalStartDisplay = goalStartDisplay2;
+    exports2.goalFromStartDisplay = goalFromStartDisplay;
+    exports2.goalSetRow = goalSetRow2;
+    exports2.goalRoundReason = goalRoundReason2;
     exports2.GOAL_INSTRUCTION = [
       "",
       "---",
@@ -39460,11 +39510,14 @@ var require_goalRunner = __commonJS({
       "Do not end your turn with a plan, an intention, or a promise about work you have not done \u2014",
       "if the next step is clear, take it now instead of describing it.",
       "",
-      "You do NOT decide when the goal is finished: an independent check reviews each turn against",
-      "the goal and continues you if anything is outstanding. Reading code is not verifying it \u2014",
-      "run the tests, execute the command, show the output. State plainly what you did and what the",
-      "result actually was; an unverified claim counts for nothing, and reporting a failure honestly",
-      "is always better than glossing it."
+      "End every turn by calling the goal_report tool \u2014 a status line in prose is not a report.",
+      "While ANY part of the goal remains, report done: false and say in `outstanding` exactly what",
+      'is missing. Be ruthlessly honest \u2014 an honest "not done" costs nothing and keeps you going.',
+      "Report done: true only when you have VERIFIED every part \u2014 ran the tests, executed the",
+      "command, saw the output \u2014 and name in `verified` what you ran and what it showed.",
+      "Your report is a claim, not a verdict: an independent check reviews the evidence of what you",
+      "actually did before the goal can end, and an unverified claim is simply sent back. Reading",
+      "code is not verifying it; reporting a failure honestly is always better than glossing it."
     ].join("\n");
     function buildGoalPrompt(goal) {
       return `# Goal
@@ -39472,7 +39525,7 @@ ${goal}
 ${exports2.GOAL_INSTRUCTION}`;
     }
     function buildContinuationPrompt(goal, reason) {
-      const line = reason ? goalReasonLine2(reason, exports2.GOAL_REASON_PROMPT_MAX_CHARS) : "";
+      const line = reason ? goalReasonLine3(reason, exports2.GOAL_REASON_PROMPT_MAX_CHARS) : "";
       const outstanding = line === "" ? "" : `
 
 ## What the completion check reported
@@ -39505,6 +39558,7 @@ ${exports2.GOAL_INSTRUCTION}`;
     exports2.DEFAULT_GOAL_MAX_TURNS = 0;
     exports2.DEFAULT_GOAL_MAX_WALL_MS = 0;
     exports2.GOAL_MAX_EVALUATOR_FAILURES = 3;
+    exports2.GOAL_UNCLAIMED_CHECK_INTERVAL = 5;
     function describeGoalEnd(reason) {
       switch (reason) {
         case "done":
@@ -39525,7 +39579,7 @@ ${exports2.GOAL_INSTRUCTION}`;
     }
     exports2.GOAL_REASON_MAX_CHARS = 140;
     exports2.GOAL_REASON_PROMPT_MAX_CHARS = 500;
-    function goalReasonLine2(reason, max = exports2.GOAL_REASON_MAX_CHARS) {
+    function goalReasonLine3(reason, max = exports2.GOAL_REASON_MAX_CHARS) {
       const flat = reason.replace(/\s+/g, " ").trim();
       if (flat.length <= max)
         return flat;
@@ -39552,7 +39606,7 @@ ${exports2.GOAL_INSTRUCTION}`;
       }
     }
     function goalNotMetRow2(reason) {
-      const line = goalReasonLine2(reason);
+      const line = goalReasonLine3(reason);
       return {
         glyph: "\u25CE",
         text: line === "" ? "Not met yet" : `Not met yet \u2014 ${line}`,
@@ -39564,10 +39618,29 @@ ${exports2.GOAL_INSTRUCTION}`;
     function goalStartDisplay2(goal) {
       return `/goal ${goal}`;
     }
+    function goalFromStartDisplay(display) {
+      return (display.startsWith("/goal ") ? display.slice("/goal ".length) : display).trim();
+    }
+    function goalSetRow2(goal) {
+      const line = goal.replace(/\s+/g, " ").trim();
+      return {
+        glyph: "\u25CE",
+        text: line === "" ? "Goal set" : `Goal set: ${line}`,
+        done: false,
+        progress: true
+      };
+    }
+    function goalRoundReason2(round) {
+      if (round.ruling)
+        return round.ruling.evaluated ? round.ruling.reason : "";
+      if (round.claim && !round.claim.done)
+        return round.claim.note;
+      return "";
+    }
     function readOutcome(outcome) {
       if (typeof outcome === "string")
-        return { text: outcome, evidence: outcome };
-      return { text: outcome.text ?? "", evidence: outcome.evidence ?? "" };
+        return { text: outcome, evidence: outcome, claim: null };
+      return { text: outcome.text ?? "", evidence: outcome.evidence ?? "", claim: outcome.claim ?? null };
     }
     var GoalRunner3 = class {
       deps;
@@ -39580,10 +39653,17 @@ ${exports2.GOAL_INSTRUCTION}`;
       /** Wall-clock anchor for the envelope, from the injected clock. */
       startedAt = 0;
       /** Consecutive evaluator calls that produced no verdict. Any real ruling —
-       *  including "not yet" — resets it. */
+       *  including "not yet" — resets it. Untouched on rounds that run no check:
+       *  they say nothing about the evaluator either way. */
       evaluatorFailures = 0;
       /** The evaluator's last account of what is outstanding. */
       lastReason = "";
+      /** Consecutive rounds settled without a check. At
+       *  [`GOAL_UNCLAIMED_CHECK_INTERVAL`] the backstop runs one; reset on every
+       *  check run, claimed or backstop. */
+      uncheckedRounds = 0;
+      /** The agent's own last `goal_report`. */
+      lastClaim = null;
       constructor(deps2) {
         this.deps = deps2;
       }
@@ -39593,7 +39673,8 @@ ${exports2.GOAL_INSTRUCTION}`;
           goal: this.goal,
           endReason: this.endReason,
           turns: this.turns,
-          lastReason: this.lastReason === "" ? null : this.lastReason
+          lastReason: this.lastReason === "" ? null : this.lastReason,
+          lastClaim: this.lastClaim
         };
       }
       /** The user's stop (Esc, `/goal stop`, banner button). The in-flight turn is
@@ -39613,6 +39694,8 @@ ${exports2.GOAL_INSTRUCTION}`;
         this.turns = 0;
         this.evaluatorFailures = 0;
         this.lastReason = "";
+        this.uncheckedRounds = 0;
+        this.lastClaim = null;
         this.emit();
         this.startedAt = (this.deps.now ?? Date.now)();
         let prompt = buildGoalPrompt(goal);
@@ -39626,30 +39709,40 @@ ${exports2.GOAL_INSTRUCTION}`;
           this.turns += 1;
           if (this.stopRequested)
             return this.finish("stopped");
-          const { text, evidence } = readOutcome(outcome);
-          const ruling = await this.rule(goal, evidence, text);
+          const { text, evidence, claim } = readOutcome(outcome);
+          this.lastClaim = claim;
+          this.uncheckedRounds += 1;
+          const check2 = claim?.done === true ? "claimed" : this.uncheckedRounds >= exports2.GOAL_UNCLAIMED_CHECK_INTERVAL || this.envelopeVerdict(this.turns) !== null ? "backstop" : "none";
+          let ruling = null;
+          if (check2 !== "none") {
+            this.uncheckedRounds = 0;
+            ruling = await this.rule(goal, evidence, text);
+          }
           if (this.stopRequested)
             return this.finish("stopped");
-          if (ruling.evaluated && ruling.ok) {
-            this.lastReason = ruling.reason;
-            return this.finish("done");
-          }
-          if (ruling.evaluated && !ruling.achievable) {
-            this.lastReason = ruling.reason;
-            return this.finish("not_achievable");
-          }
-          if (ruling.evaluated) {
-            this.evaluatorFailures = 0;
-          } else if ((this.evaluatorFailures += 1) >= exports2.GOAL_MAX_EVALUATOR_FAILURES) {
-            this.lastReason = ruling.reason;
-            return this.finish("evaluator_failed");
+          if (ruling) {
+            if (ruling.evaluated && ruling.ok) {
+              this.lastReason = ruling.reason;
+              return this.finish("done");
+            }
+            if (ruling.evaluated && !ruling.achievable) {
+              this.lastReason = ruling.reason;
+              return this.finish("not_achievable");
+            }
+            if (ruling.evaluated) {
+              this.evaluatorFailures = 0;
+              this.lastReason = ruling.reason;
+            } else if ((this.evaluatorFailures += 1) >= exports2.GOAL_MAX_EVALUATOR_FAILURES) {
+              this.lastReason = ruling.reason;
+              return this.finish("evaluator_failed");
+            }
           }
           const ceiling = this.envelopeVerdict(this.turns);
           if (ceiling !== null)
             return this.finish(ceiling);
-          this.lastReason = ruling.reason;
+          this.deps.onRound?.({ turns: this.turns, check: check2, ruling, claim });
           this.emit();
-          prompt = buildContinuationPrompt(goal, ruling.evaluated ? ruling.reason : void 0);
+          prompt = buildContinuationPrompt(goal, ruling?.evaluated ? ruling.reason : void 0);
         }
       }
       /** One completion ruling, with the evaluator's own failures absorbed. A judge
@@ -39937,29 +40030,29 @@ var require_agentDefs = __commonJS({
       return false;
     }
     function defFromMeta(meta, fallbackName, system) {
-      const name2 = str(meta.name) || fallbackName;
+      const name2 = str2(meta.name) || fallbackName;
       if (!name2.trim())
         return null;
       return {
         name: name2.trim(),
-        description: collapse(str(meta.description) || str(meta.when_to_use) || ""),
+        description: collapse(str2(meta.description) || str2(meta.when_to_use) || ""),
         system,
         toolsAllow: list(meta.tools_allow ?? meta.tools),
         toolsDeny: list(meta.tools_deny ?? meta.deny),
-        model: str(meta.model_preference) || str(meta.model) || void 0,
-        permissionMode: str(meta.permission_mode) || void 0,
-        maxIterations: num(meta.max_iterations),
-        effort: str(meta.thinking) || str(meta.effort) || void 0,
+        model: str2(meta.model_preference) || str2(meta.model) || void 0,
+        permissionMode: str2(meta.permission_mode) || void 0,
+        maxIterations: num2(meta.max_iterations),
+        effort: str2(meta.thinking) || str2(meta.effort) || void 0,
         background: bool(meta.background),
         oneShot: bool(meta.one_shot),
-        color: str(meta.color) || void 0,
-        isolation: str(meta.isolation) || void 0
+        color: str2(meta.color) || void 0,
+        isolation: str2(meta.isolation) || void 0
       };
     }
-    function str(v2) {
+    function str2(v2) {
       return typeof v2 === "string" ? v2 : typeof v2 === "number" || typeof v2 === "boolean" ? String(v2) : "";
     }
-    function num(v2) {
+    function num2(v2) {
       if (typeof v2 === "number" && Number.isFinite(v2))
         return Math.trunc(v2);
       if (typeof v2 === "string" && /^\d+$/.test(v2.trim()))
@@ -39975,7 +40068,7 @@ var require_agentDefs = __commonJS({
     }
     function list(v2) {
       if (Array.isArray(v2)) {
-        const items = v2.map(str).map((s) => s.trim()).filter(Boolean);
+        const items = v2.map(str2).map((s) => s.trim()).filter(Boolean);
         return items.length > 0 ? items : void 0;
       }
       if (typeof v2 === "string") {
@@ -40372,7 +40465,7 @@ var require_agentManager = __commonJS({
           if (isolation === "worktree") {
             worktree = await this.createWorktree(parentSessionId, agentId);
           }
-          const model = str(params.model) || resolveModelPreference(def.model, routing.model) || routing.model;
+          const model = str2(params.model) || resolveModelPreference(def.model, routing.model) || routing.model;
           const readOnly = routing.mode === "plan" || routing.mode === "ask" || routing.mode === "duet";
           const sessionId = await this.transport.startSession({
             provider: routing.provider,
@@ -40387,8 +40480,8 @@ var require_agentManager = __commonJS({
             sessionId,
             type,
             brief,
-            name: str(params.name) || void 0,
-            team: str(params.team) || void 0,
+            name: str2(params.name) || void 0,
+            team: str2(params.team) || void 0,
             status: "running",
             outputTokens: 0,
             inputTokens: 0,
@@ -40451,9 +40544,9 @@ var require_agentManager = __commonJS({
        * report to disk); a running child answers with a status line, plus its
        * output-so-far under `detail: true`. */
       async check(parentSessionId, params) {
-        const entry = this.resolve(parentSessionId, str(params.agent_id));
+        const entry = this.resolve(parentSessionId, str2(params.agent_id));
         if (!entry)
-          return this.unknownAgent(parentSessionId, str(params.agent_id));
+          return this.unknownAgent(parentSessionId, str2(params.agent_id));
         if (entry.status !== "running" && entry.reportText)
           return entry.reportText;
         const progress = entry.progress ? `
@@ -40482,7 +40575,7 @@ ${(0, agentNarration_2.lastChars)(entry.partialText.trim(), 4e3)}`;
         if (targets.length === 0) {
           return "(no matching sub-agents to await \u2014 check agent ids, or spawn first)";
         }
-        const timeoutS = clamp3(num(params.timeout_s) ?? exports2.AWAIT_DEFAULT_TIMEOUT_S, 1, exports2.AWAIT_MAX_TIMEOUT_S);
+        const timeoutS = clamp3(num2(params.timeout_s) ?? exports2.AWAIT_DEFAULT_TIMEOUT_S, 1, exports2.AWAIT_MAX_TIMEOUT_S);
         const hooks = this.parents.get(parentSessionId);
         const running = targets.filter((t) => t.status === "running");
         if (running.length > 0) {
@@ -40522,8 +40615,8 @@ ${(0, agentNarration_2.lastChars)(entry.partialText.trim(), 4e3)}`;
        *  Identified by `_agent_id`, which the manager stamps on every child tool call. A call
        *  without one is a call from something that is not a child, and there is nothing to record. */
       async progress(params) {
-        const note = str(params.note).trim();
-        const agentId = str(params._agent_id).trim();
+        const note = str2(params.note).trim();
+        const agentId = str2(params._agent_id).trim();
         if (!note)
           return "(no note \u2014 pass a short line describing what you are doing)";
         const entry = agentId ? this.entries.get(agentId) : void 0;
@@ -40535,9 +40628,9 @@ ${(0, agentNarration_2.lastChars)(entry.partialText.trim(), 4e3)}`;
       }
       /** `agent_stop` — cancel a running child; it still reports partial results. */
       async stop(parentSessionId, params) {
-        const entry = this.resolve(parentSessionId, str(params.agent_id));
+        const entry = this.resolve(parentSessionId, str2(params.agent_id));
         if (!entry)
-          return this.unknownAgent(parentSessionId, str(params.agent_id));
+          return this.unknownAgent(parentSessionId, str2(params.agent_id));
         if (entry.status !== "running") {
           return `Sub-agent ${entry.agentId} is already ${entry.status}.`;
         }
@@ -40568,9 +40661,9 @@ ${(0, agentNarration_2.lastChars)(entry.partialText.trim(), 4e3)}`;
         return this.entries.get(entry.agentId) ?? entry;
       }
       async message(parentSessionId, params) {
-        const entry = this.resolve(parentSessionId, str(params.agent_id));
+        const entry = this.resolve(parentSessionId, str2(params.agent_id));
         if (!entry)
-          return this.unknownAgent(parentSessionId, str(params.agent_id));
+          return this.unknownAgent(parentSessionId, str2(params.agent_id));
         const text = String(params.message ?? "").trim();
         if (!text)
           throw new Error("agent_message requires a non-empty 'message'");
@@ -41007,10 +41100,10 @@ Worktree kept (it has changes): ${wt.path} on branch ${wt.branch}. Apply or disc
     function fallbackDef(type) {
       return { name: type, description: "", system: "", background: false, oneShot: false };
     }
-    function str(v2) {
+    function str2(v2) {
       return typeof v2 === "string" ? v2.trim() : "";
     }
-    function num(v2) {
+    function num2(v2) {
       return typeof v2 === "number" && Number.isFinite(v2) ? v2 : void 0;
     }
     function clamp3(v2, lo, hi) {
@@ -41516,7 +41609,7 @@ var require_agentAuth = __commonJS({
   "../packages/orion-client-core/dist/auth/agentAuth.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.USAGE_TOPUP_COVERING_LABEL = exports2.NO_USAGE_LIMIT_LABEL = exports2.AgentSession = exports2.TOKEN_REQUEST_TIMEOUT_MS = exports2.AgentAuthError = void 0;
+    exports2.USAGE_TOPUP_COVERING_LABEL = exports2.NO_USAGE_LIMIT_LABEL = exports2.AgentSession = exports2.BRAIN_RENEW_DEADLINE_MS = exports2.RENEW_BUDGET_MS = exports2.SECRET_READ_TIMEOUT_MS = exports2.TOKEN_REQUEST_TIMEOUT_MS = exports2.AgentAuthError = void 0;
     exports2.isAgentSessionKey = isAgentSessionKey;
     exports2.pkcePair = pkcePair;
     exports2.buildConnectUrl = buildConnectUrl;
@@ -41597,6 +41690,16 @@ var require_agentAuth = __commonJS({
       const value = jwtClaim(token, claim);
       return typeof value === "string" && value ? value : null;
     }
+    function remainingValidityMs(token) {
+      const exp = jwtClaim(token, "exp");
+      return typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 - Date.now() : 0;
+    }
+    function sleep(ms) {
+      return new Promise((resolve5) => {
+        const timer = setTimeout(resolve5, ms);
+        timer.unref?.();
+      });
+    }
     async function pkcePair() {
       const raw = new Uint8Array(48);
       globalThis.crypto.getRandomValues(raw);
@@ -41684,16 +41787,54 @@ var require_agentAuth = __commonJS({
     }
     var FRESH_TOKEN_BUFFER_MS = 6e4;
     var EARLY_REFRESH_MS = 10 * 6e4;
+    exports2.SECRET_READ_TIMEOUT_MS = 5e3;
+    exports2.RENEW_BUDGET_MS = 55e3;
+    exports2.BRAIN_RENEW_DEADLINE_MS = 9e4;
+    var RENEWED_TOKEN_MIN_REMAINING_MS = 5 * 6e4;
+    var READ_TIMED_OUT = Symbol("orion.secret-read-timed-out");
     var AgentSession = class {
       store;
       apiBaseUrl;
       options;
       inflightRefresh = null;
+      /** The last token set THIS process saved — a write-through mirror of {@link save}, never
+       * of sibling processes' writes (those live only in the shared store). Lets a renewal
+       * answer with our own recent mint when the store read itself is wedged. NEVER used to
+       * START a refresh: a cached refresh token may be rotated-away by a sibling, and replaying
+       * one late revokes the whole token family server-side. */
+      lastSaved = null;
       constructor(store, apiBaseUrl, options = {}) {
         this.store = store;
         this.apiBaseUrl = apiBaseUrl;
         this.options = options;
       }
+      /** Breadcrumb line (see {@link AgentSessionOptions.trace}); a throwing sink is the host's
+       * bug and must never break the auth path. */
+      trace(line) {
+        try {
+          this.options.trace?.(line);
+        } catch {
+        }
+      }
+      /** One bounded store read. {@link READ_TIMED_OUT} = the store did not answer (timed out
+       * or threw) — an UNREACHABLE store, distinct from `null` = the key is definitively
+       * absent. The renewal path branches on that difference: absent means signed out (fail
+       * closed now); unreachable means retry and degrade, never a declared sign-out. */
+      async boundedRead(key) {
+        const timeoutMs = this.options.secretReadTimeoutMs ?? exports2.SECRET_READ_TIMEOUT_MS;
+        let timer;
+        const timeout = new Promise((resolve5) => {
+          timer = setTimeout(() => resolve5(READ_TIMED_OUT), timeoutMs);
+          timer.unref?.();
+        });
+        try {
+          const read = Promise.resolve(this.store.get(key)).then((value) => value || null, () => READ_TIMED_OUT);
+          return await Promise.race([read, timeout]);
+        } finally {
+          if (timer !== void 0)
+            clearTimeout(timer);
+        }
+      }
       async currentAccessToken() {
         return await this.store.get(ACCESS_KEY) || null;
       }
@@ -41713,9 +41854,7 @@ var require_agentAuth = __commonJS({
         const token = await this.currentAccessToken();
         if (!token)
           return null;
-        const exp = jwtClaim(token, "exp");
-        const expiresAtMs = typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 : 0;
-        const remainingMs = expiresAtMs - Date.now();
+        const remainingMs = remainingValidityMs(token);
         if (remainingMs > EARLY_REFRESH_MS)
           return token;
         if (remainingMs > FRESH_TOKEN_BUFFER_MS) {
@@ -41725,6 +41864,64 @@ var require_agentAuth = __commonJS({
         await this.refresh();
         return this.currentAccessToken();
       }
+      /** The FAIL-CLOSED renewal answer for the local brain's `renew_bearer` request — invoked
+       * only after the gateway REFUSED a bearer (401), which makes the server's verdict the
+       * ground truth this method never argues with. Its contract:
+       *  - it never answers with `refused` (the token just declared dead) nor with a near-dead
+       *    token — a mint is forced instead;
+       *  - a DIFFERENT stored token with comfortable validity (a sibling process already
+       *    renewed through the shared store) is the answer immediately, no mint;
+       *  - otherwise it mints, retrying transient failures with backoff under `renewBudgetMs`,
+       *    re-reading the store between tries — a sibling's mint landing while ours failed
+       *    (the rotation race's other half, reply-lost rotations included) is a heal;
+       *  - a wedged store degrades to this process's own last save for the ACCESS token
+       *    (never for starting a refresh — rotation safety, see {@link refresh});
+       *  - `null` means the account genuinely cannot produce a fresh token (signed out,
+       *    family revoked, or the budget lapsed with everything unreachable) — the brain then
+       *    surfaces the honest auth error.
+       *
+       * {@link currentFreshAccessToken} stays the PROACTIVE read with its deliberate fail-OPEN
+       * degradation ("the stored token stands"); this is the REACTIVE one, and the two must
+       * not be merged: the fail-open answer is exactly what let the 2026-08-24/25 stage turns
+       * die — it handed the refused token straight back, and the one heal was spent. */
+      async renewedAccessToken(refused) {
+        const budget = this.options.renewBudgetMs ?? exports2.RENEW_BUDGET_MS;
+        const backoffBase = this.options.renewBackoffBaseMs ?? 500;
+        const deadline = Date.now() + budget;
+        const answerable = (token2, minted) => typeof token2 === "string" && token2 !== "" && token2 !== refused && // A mint vouches for freshness by EVENT (it just happened server-side), sidestepping
+        // the local clock entirely — a fast client clock must not veto a genuinely new token.
+        (minted || remainingValidityMs(token2) > RENEWED_TOKEN_MIN_REMAINING_MS);
+        const storedAccess = async () => {
+          const read = await this.boundedRead(ACCESS_KEY);
+          if (read !== READ_TIMED_OUT)
+            return { token: read, wedged: false };
+          return { token: this.lastSaved?.accessToken ?? null, wedged: true };
+        };
+        let { token, wedged } = await storedAccess();
+        if (answerable(token, false)) {
+          this.trace(wedged ? "renew: answered from the process cache (store unreachable), no mint" : "renew: answered from the store (sibling renewal), no mint");
+          return token;
+        }
+        for (let attempt = 0; ; attempt += 1) {
+          const minted = await this.refresh();
+          ({ token, wedged } = await storedAccess());
+          if (answerable(token, minted)) {
+            this.trace(minted ? `renew: minted and answered (attempt ${attempt + 1})` : "renew: a sibling's mint landed \u2014 answered");
+            return token;
+          }
+          const refreshToken = await this.boundedRead(REFRESH_KEY);
+          if (refreshToken === null) {
+            this.trace("renew: no session (signed out / revoked) \u2014 fail-closed");
+            return null;
+          }
+          const wait = Math.min(Math.min(8e3, backoffBase * 2 ** attempt), deadline - Date.now());
+          if (wait <= 0)
+            break;
+          await sleep(wait);
+        }
+        this.trace(`renew: budget (${budget}ms) exhausted \u2014 fail-closed`);
+        return null;
+      }
       /** The plan the user is on (free/pro/…), for display + upgrade CTAs. */
       async tier() {
         return await this.store.get(TIER_KEY) || null;
@@ -41861,6 +42058,7 @@ var require_agentAuth = __commonJS({
         return Boolean(await this.store.get(REFRESH_KEY));
       }
       async save(tokens) {
+        this.lastSaved = tokens;
         await this.store.store(ACCESS_KEY, tokens.accessToken);
         await this.store.store(REFRESH_KEY, tokens.refreshToken);
         await this.store.store(TIER_KEY, tokens.tier);
@@ -41881,20 +42079,47 @@ var require_agentAuth = __commonJS({
         return inflight;
       }
       async doRefresh() {
-        const refreshToken = await this.store.get(REFRESH_KEY);
+        const started = Date.now();
+        const refreshToken = await this.boundedRead(REFRESH_KEY);
+        if (refreshToken === READ_TIMED_OUT) {
+          this.trace(`refresh: store read unanswered after ${Date.now() - started}ms \u2014 transient`);
+          return false;
+        }
         if (!refreshToken)
           return false;
         try {
-          await this.save(await refreshTokens({
+          const minted = await refreshTokens({
             apiBaseUrl: this.apiBaseUrl(),
             refreshToken,
             requestTimeoutMs: this.options.requestTimeoutMs
-          }));
+          });
+          if (!minted.accessToken) {
+            this.trace("refresh: malformed 200 (empty access token) \u2014 transient");
+            return false;
+          }
+          const tokens = minted.refreshToken ? minted : { ...minted, refreshToken };
+          const written = await Promise.race([
+            this.save(tokens).then(() => true, () => false),
+            sleep(3 * (this.options.secretReadTimeoutMs ?? exports2.SECRET_READ_TIMEOUT_MS)).then(() => false)
+          ]);
+          this.trace(written ? `refresh: minted in ${Date.now() - started}ms` : `refresh: minted in ${Date.now() - started}ms, store write still pending \u2014 tokens live in the process cache`);
           return true;
         } catch (err2) {
           if (err2 instanceof AgentAuthError && isDefinitiveAuthRejection(err2)) {
+            const current2 = await this.boundedRead(REFRESH_KEY);
+            if (current2 === READ_TIMED_OUT) {
+              this.trace("refresh: rejected, but the store is unreachable \u2014 clear deferred");
+              return false;
+            }
+            if (current2 && current2 !== refreshToken) {
+              this.trace("refresh: rejection was a rotation-race replay \u2014 sibling's session adopted");
+              return true;
+            }
+            this.trace("refresh: definitively rejected \u2014 session cleared");
             await this.clear();
+            return false;
           }
+          this.trace(`refresh: transient failure (${err2 instanceof AgentAuthError ? err2.status : "malformed reply"})`);
           return false;
         }
       }
@@ -41906,6 +42131,7 @@ var require_agentAuth = __commonJS({
         await this.clear();
       }
       async clear() {
+        this.lastSaved = null;
         await this.store.delete(ACCESS_KEY);
         await this.store.delete(REFRESH_KEY);
         await this.store.delete(TIER_KEY);
@@ -42189,8 +42415,8 @@ var require_browserLogin = __commonJS({
       } catch {
       }
     }
-    function createAgentSession3(secrets, config) {
-      return new agentAuth_1.AgentSession(secrets, () => config.accountsApiUrl);
+    function createAgentSession3(secrets, config, options = {}) {
+      return new agentAuth_1.AgentSession(secrets, () => config.accountsApiUrl, options);
     }
     async function signInViaBrowser3(session, config, deps2 = {}) {
       if (await session.isSignedIn())
@@ -42626,7 +42852,7 @@ var require_normalize = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.normalizePlan = normalizePlan;
-    function str(v2) {
+    function str2(v2) {
       return typeof v2 === "string" ? v2 : void 0;
     }
     function pick(obj, ...keys) {
@@ -42639,12 +42865,12 @@ var require_normalize = __commonJS({
     function normalizeFile(raw) {
       const f = raw ?? {};
       const out2 = {
-        relPath: str(pick(f, "relPath", "rel_path")) ?? ""
+        relPath: str2(pick(f, "relPath", "rel_path")) ?? ""
       };
-      const content = str(f.content);
+      const content = str2(f.content);
       if (content !== void 0)
         out2.content = content;
-      const fromPath = str(pick(f, "fromPath", "from_path"));
+      const fromPath = str2(pick(f, "fromPath", "from_path"));
       if (fromPath !== void 0)
         out2.fromPath = fromPath;
       if (typeof f.mode === "number")
@@ -42654,21 +42880,21 @@ var require_normalize = __commonJS({
     function normalizeItem(raw) {
       const i2 = raw ?? {};
       const item = {
-        category: str(i2.category) ?? "",
-        name: str(i2.name) ?? "",
-        scope: str(i2.scope) ?? "global",
-        onCollision: str(pick(i2, "onCollision", "on_collision", "collision")) ?? "skip",
-        source: str(i2.source) ?? "unknown"
+        category: str2(i2.category) ?? "",
+        name: str2(i2.name) ?? "",
+        scope: str2(i2.scope) ?? "global",
+        onCollision: str2(pick(i2, "onCollision", "on_collision", "collision")) ?? "skip",
+        source: str2(i2.source) ?? "unknown"
       };
       if (Array.isArray(i2.files))
         item.files = i2.files.map(normalizeFile);
       if (i2.server !== void 0 && typeof i2.server === "object" && i2.server !== null) {
         item.server = i2.server;
       }
-      const rulesTarget = str(pick(i2, "rulesTarget", "rules_target"));
+      const rulesTarget = str2(pick(i2, "rulesTarget", "rules_target"));
       if (rulesTarget !== void 0)
         item.rulesTarget = rulesTarget;
-      const content = str(i2.content);
+      const content = str2(i2.content);
       if (content !== void 0)
         item.content = content;
       if (i2.memory !== void 0 && typeof i2.memory === "object" && i2.memory !== null) {
@@ -42680,7 +42906,7 @@ var require_normalize = __commonJS({
       const p = raw ?? {};
       const rootsRaw = pick(p, "sourceRoots", "source_roots");
       return {
-        summary: str(p.summary) ?? "",
+        summary: str2(p.summary) ?? "",
         sourceRoots: Array.isArray(rootsRaw) ? rootsRaw.map(String) : [],
         items: Array.isArray(p.items) ? p.items.map(normalizeItem) : []
       };
@@ -43168,8 +43394,8 @@ var require_manifest = __commonJS({
       let id = manifestId;
       if (id === void 0) {
         for (const candidate of ids) {
-          const rec = await readManifest(path14.join(importHistoryDir(home), candidate));
-          if (rec && !rec.undoneAt) {
+          const rec2 = await readManifest(path14.join(importHistoryDir(home), candidate));
+          if (rec2 && !rec2.undoneAt) {
             id = candidate;
             break;
           }
@@ -64497,26 +64723,26 @@ exit $__orion_rc`;
         const proc = (0, child_process_1.spawn)(bgInv.file, bgInv.args, { ...processHardening_1.HIDDEN_WINDOW_SPAWN_OPTIONS, cwd: root2 });
         (0, processHardening_1.trackChild)(proc);
         const handle2 = `bg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-        const rec = { proc, command, output: "" };
-        this.background.set(handle2, rec);
+        const rec2 = { proc, command, output: "" };
+        this.background.set(handle2, rec2);
         proc.stdout?.on("data", (c3) => {
-          rec.output += c3.toString();
+          rec2.output += c3.toString();
         });
         proc.stderr?.on("data", (c3) => {
-          rec.output += c3.toString();
+          rec2.output += c3.toString();
         });
         return handle2;
       }
       /** `bash_check` */
       async toolBashCheck(req, params, sessionId, context) {
-        const rec = this.background.get(String(params.handle));
-        if (!rec)
+        const rec2 = this.background.get(String(params.handle));
+        if (!rec2)
           throw new Error("unknown background handle");
-        const exitCode = rec.proc.exitCode;
+        const exitCode = rec2.proc.exitCode;
         const outputTail = (0, terminalOutputCompression_1.compressTerminalOutputWithMetrics)({
           toolName: req.name,
-          command: rec.command,
-          output: rec.output.slice(-4e3),
+          command: rec2.command,
+          output: rec2.output.slice(-4e3),
           tokenSaving: context.tokenSaving,
           exitCode,
           complete: exitCode !== null
@@ -64532,10 +64758,10 @@ exit $__orion_rc`;
       }
       /** `bash_stop` */
       async toolBashStop(req, params, sessionId, context) {
-        const rec = this.background.get(String(params.handle));
-        if (!rec)
+        const rec2 = this.background.get(String(params.handle));
+        if (!rec2)
           throw new Error("unknown background handle");
-        await (0, processHardening_1.terminateChildTree)(rec.proc);
+        await (0, processHardening_1.terminateChildTree)(rec2.proc);
         this.background.delete(String(params.handle));
         return "stopped";
       }
@@ -69291,7 +69517,7 @@ var require_loopDecl = __commonJS({
             return { decl: null, problems: ["the file must contain a JSON object"] };
           }
           meta = parsed;
-          body2 = str(meta.prompt);
+          body2 = str2(meta.prompt);
         } catch (error) {
           return { decl: null, problems: [`invalid JSON (${errorText(error)})`] };
         }
@@ -69303,19 +69529,19 @@ var require_loopDecl = __commonJS({
           return { decl: null, problems: ["no frontmatter block (--- \u2026 ---) was found"] };
         }
       }
-      const name2 = (str(meta.name) || stem).trim();
+      const name2 = (str2(meta.name) || stem).trim();
       if (!name2)
         problems.push("a loop needs a name");
-      const persona = str(meta.persona).trim();
+      const persona = str2(meta.persona).trim();
       if (!persona)
         problems.push("`persona` is required (which sub-agent type runs this loop)");
-      const trigger = str(meta.trigger).trim();
+      const trigger = str2(meta.trigger).trim();
       if (!trigger)
         problems.push("`trigger` is required (a 5-field cron expression)");
       else if (!(0, cronExpression_js_1.parseCronExpression)(trigger)) {
         problems.push(`\`trigger\` is not a valid 5-field cron expression: '${trigger}'`);
       }
-      const skill = str(meta.skill).trim();
+      const skill = str2(meta.skill).trim();
       if (skill && body2) {
         problems.push("declare either `skill` or a prompt body, not both");
       }
@@ -69346,7 +69572,7 @@ var require_loopDecl = __commonJS({
       };
     }
     function parseEnvelope(meta, problems) {
-      const rawMode = str(meta.envelope_mode).trim().toLowerCase();
+      const rawMode = str2(meta.envelope_mode).trim().toLowerCase();
       let mode = DEFAULT_ENVELOPE.mode;
       if (rawMode) {
         if (rawMode === "full_access") {
@@ -69452,7 +69678,7 @@ var require_loopDecl = __commonJS({
           issues.push({ path: filePath, problem });
       }
     }
-    function str(v2) {
+    function str2(v2) {
       return typeof v2 === "string" ? v2 : typeof v2 === "number" || typeof v2 === "boolean" ? String(v2) : "";
     }
     function bool(v2) {
@@ -69464,7 +69690,7 @@ var require_loopDecl = __commonJS({
     }
     function list(v2) {
       if (Array.isArray(v2)) {
-        const items = v2.map(str).map((s) => s.trim()).filter(Boolean);
+        const items = v2.map(str2).map((s) => s.trim()).filter(Boolean);
         return items.length > 0 ? items : void 0;
       }
       if (typeof v2 === "string" && v2.trim()) {
@@ -69476,7 +69702,7 @@ var require_loopDecl = __commonJS({
     function clampNumber(raw, fallback, max, field2, problems) {
       if (raw === void 0 || raw === "")
         return fallback;
-      const value = typeof raw === "number" ? raw : Number(str(raw));
+      const value = typeof raw === "number" ? raw : Number(str2(raw));
       if (!Number.isFinite(value) || value <= 0) {
         problems.push(`\`${field2}\` must be a positive number`);
         return fallback;
@@ -70548,7 +70774,7 @@ var require_connection = __commonJS({
             return;
           }
           case "renew_bearer": {
-            void this.answerRenew(frame.id);
+            void this.answerRenew(frame.id, frame.refused);
             return;
           }
           case "rpc_result": {
@@ -70566,15 +70792,19 @@ var require_connection = __commonJS({
             return;
         }
       }
-      /** Run (or join) the ONE in-flight refresh and answer the renew request with its result.
-       * A throwing or absent auth layer answers "no bearer" — a failed renewal at the brain,
-       * never a connection fault. */
-      async answerRenew(id) {
+      /** Run (or join) the ONE in-flight renewal and answer the renew request with its result.
+       * Joiners share the in-flight answer even when their `refused` differs (a turn's main
+       * call and its interim passes usually 401 on the SAME bearer; when they don't, a shared
+       * answer the gateway still refuses just triggers that call's second renew round, which
+       * runs fresh with ITS refused token — self-correcting, never a loop). A throwing or
+       * absent auth layer answers "no bearer" — a failed renewal at the brain, never a
+       * connection fault. */
+      async answerRenew(id, refused) {
         let bearer = null;
         if (this.renewBearer) {
           this.renewInFlight ??= (async () => {
             try {
-              return await this.renewBearer();
+              return await this.renewBearer(refused);
             } catch {
               return null;
             } finally {
@@ -71400,6 +71630,7 @@ var require_dist = __commonJS({
     __exportStar(require_duetRoutingAdvisor(), exports2);
     __exportStar(require_cron(), exports2);
     __exportStar(require_agentStore(), exports2);
+    __exportStar(require_goalClaim(), exports2);
     __exportStar(require_goalMarker(), exports2);
     __exportStar(require_goalEvidence(), exports2);
     __exportStar(require_goalEvaluate(), exports2);
@@ -72248,13 +72479,13 @@ var require_feedbackPolicy = __commonJS({
         return emptyFeedbackPolicyState(now2, seedFallback);
       }
       const r2 = raw;
-      const num = (value, fallback) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : fallback;
+      const num2 = (value, fallback) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : fallback;
       const outcome = r2.lastOutcome === "submitted" || r2.lastOutcome === "dismissed" ? r2.lastOutcome : "";
       return {
-        firstSeenAt: num(r2.firstSeenAt, now2) || now2,
-        lastShownAt: num(r2.lastShownAt, 0),
+        firstSeenAt: num2(r2.firstSeenAt, now2) || now2,
+        lastShownAt: num2(r2.lastShownAt, 0),
         lastOutcome: outcome,
-        dismissStreak: Math.min(exports2.FEEDBACK_STOP_AFTER_DISMISSALS, Math.trunc(num(r2.dismissStreak, 0))),
+        dismissStreak: Math.min(exports2.FEEDBACK_STOP_AFTER_DISMISSALS, Math.trunc(num2(r2.dismissStreak, 0))),
         stopped: r2.stopped === true,
         seed: typeof r2.seed === "number" && Number.isFinite(r2.seed) ? r2.seed : Number.isFinite(seedFallback) ? seedFallback : 0
       };
@@ -72384,7 +72615,8 @@ var require_toolVisibility = __commonJS({
     exports2.SILENT_TOOLS = /* @__PURE__ */ new Set([
       "ask_user",
       "exit_plan_mode",
-      "await_agents"
+      "await_agents",
+      "goal_report"
     ]);
     function isSilentTool3(name2) {
       return typeof name2 === "string" && exports2.SILENT_TOOLS.has(name2);
@@ -76536,13 +76768,13 @@ function getGraphemeSegmenter() {
 
 // src/vendor/ink/stringWidth.ts
 var EMOJI_REGEX = (0, import_emoji_regex.default)();
-function stringWidthJavaScript(str) {
-  if (typeof str !== "string" || str.length === 0) {
+function stringWidthJavaScript(str2) {
+  if (typeof str2 !== "string" || str2.length === 0) {
     return 0;
   }
   let isPureAscii = true;
-  for (let i2 = 0; i2 < str.length; i2++) {
-    const code = str.charCodeAt(i2);
+  for (let i2 = 0; i2 < str2.length; i2++) {
+    const code = str2.charCodeAt(i2);
     if (code >= 127 || code === 27) {
       isPureAscii = false;
       break;
@@ -76550,23 +76782,23 @@ function stringWidthJavaScript(str) {
   }
   if (isPureAscii) {
     let width2 = 0;
-    for (let i2 = 0; i2 < str.length; i2++) {
-      const code = str.charCodeAt(i2);
+    for (let i2 = 0; i2 < str2.length; i2++) {
+      const code = str2.charCodeAt(i2);
       if (code > 31) {
         width2++;
       }
     }
     return width2;
   }
-  if (str.includes("\x1B")) {
-    str = (0, import_strip_ansi.default)(str);
-    if (str.length === 0) {
+  if (str2.includes("\x1B")) {
+    str2 = (0, import_strip_ansi.default)(str2);
+    if (str2.length === 0) {
       return 0;
     }
   }
-  if (!needsSegmentation(str)) {
+  if (!needsSegmentation(str2)) {
     let width2 = 0;
-    for (const char of str) {
+    for (const char of str2) {
       const codePoint = char.codePointAt(0);
       if (!isZeroWidth(codePoint)) {
         width2 += eastAsianWidth(codePoint, { ambiguousAsWide: false });
@@ -76575,7 +76807,7 @@ function stringWidthJavaScript(str) {
     return width2;
   }
   let width = 0;
-  for (const { segment: grapheme } of getGraphemeSegmenter().segment(str)) {
+  for (const { segment: grapheme } of getGraphemeSegmenter().segment(str2)) {
     EMOJI_REGEX.lastIndex = 0;
     if (EMOJI_REGEX.test(grapheme)) {
       width += getEmojiWidth(grapheme);
@@ -76591,8 +76823,8 @@ function stringWidthJavaScript(str) {
   }
   return width;
 }
-function needsSegmentation(str) {
-  for (const char of str) {
+function needsSegmentation(str2) {
+  for (const char of str2) {
     const cp = char.codePointAt(0);
     if (cp >= 127744 && cp <= 129791) return true;
     if (cp >= 9728 && cp <= 10175) return true;
@@ -76656,7 +76888,7 @@ function isZeroWidth(codePoint) {
 }
 var bunStringWidth = typeof Bun !== "undefined" && typeof Bun.stringWidth === "function" ? Bun.stringWidth : null;
 var BUN_STRING_WIDTH_OPTS = { ambiguousIsNarrow: true };
-var stringWidth = bunStringWidth ? (str) => bunStringWidth(str, BUN_STRING_WIDTH_OPTS) : stringWidthJavaScript;
+var stringWidth = bunStringWidth ? (str2) => bunStringWidth(str2, BUN_STRING_WIDTH_OPTS) : stringWidthJavaScript;
 
 // src/vendor/ink/line-width-cache.ts
 var cache = /* @__PURE__ */ new Map();
@@ -77531,9 +77763,9 @@ function isFullwidthCodePoint(codePoint) {
 }
 
 // ../node_modules/@alcalzone/ansi-tokenize/build/tokenize.js
-function findNumberIndex(str) {
-  for (let index = 0; index < str.length; index++) {
-    const charCode = str.charCodeAt(index);
+function findNumberIndex(str2) {
+  for (let index = 0; index < str2.length; index++) {
+    const charCode = str2.charCodeAt(index);
     if (charCode >= 48 && charCode <= 57) {
       return index;
     }
@@ -77563,14 +77795,14 @@ function parseAnsiCode(string, offset) {
     return string.slice(0, endIndex + 1);
   }
 }
-function tokenize2(str, endChar = Number.POSITIVE_INFINITY) {
+function tokenize2(str2, endChar = Number.POSITIVE_INFINITY) {
   const ret = [];
   let index = 0;
   let visible = 0;
-  while (index < str.length) {
-    const codePoint = str.codePointAt(index);
+  while (index < str2.length) {
+    const codePoint = str2.codePointAt(index);
     if (ESCAPES.has(codePoint)) {
-      const code = parseLinkCode(str, index) || parseAnsiCode(str, index);
+      const code = parseLinkCode(str2, index) || parseAnsiCode(str2, index);
       if (code) {
         ret.push({
           type: "ansi",
@@ -77604,8 +77836,8 @@ function isEndCode(code) {
 function filterStartCodes(codes) {
   return codes.filter((c3) => !isEndCode(c3));
 }
-function sliceAnsi(str, start2, end) {
-  const tokens = tokenize2(str);
+function sliceAnsi(str2, start2, end) {
+  const tokens = tokenize2(str2);
   let activeCodes = [];
   let position = 0;
   let result = "";
@@ -80061,16 +80293,16 @@ var UNDERLINE_STYLES = [
   "dotted",
   "dashed"
 ];
-function parseParams(str) {
-  if (str === "") return [{ value: 0, subparams: [], colon: false }];
+function parseParams(str2) {
+  if (str2 === "") return [{ value: 0, subparams: [], colon: false }];
   const result = [];
   let current2 = { value: null, subparams: [], colon: false };
-  let num = "";
+  let num2 = "";
   let inSub = false;
-  for (let i2 = 0; i2 <= str.length; i2++) {
-    const c3 = str[i2];
+  for (let i2 = 0; i2 <= str2.length; i2++) {
+    const c3 = str2[i2];
     if (c3 === ";" || c3 === void 0) {
-      const n = num === "" ? null : parseInt(num, 10);
+      const n = num2 === "" ? null : parseInt(num2, 10);
       if (inSub) {
         if (n !== null) current2.subparams.push(n);
       } else {
@@ -80078,10 +80310,10 @@ function parseParams(str) {
       }
       result.push(current2);
       current2 = { value: null, subparams: [], colon: false };
-      num = "";
+      num2 = "";
       inSub = false;
     } else if (c3 === ":") {
-      const n = num === "" ? null : parseInt(num, 10);
+      const n = num2 === "" ? null : parseInt(num2, 10);
       if (!inSub) {
         current2.value = n;
         current2.colon = true;
@@ -80089,9 +80321,9 @@ function parseParams(str) {
       } else {
         if (n !== null) current2.subparams.push(n);
       }
-      num = "";
+      num2 = "";
     } else if (c3 >= "0" && c3 <= "9") {
-      num += c3;
+      num2 += c3;
     }
   }
   return result;
@@ -80301,9 +80533,9 @@ function isEmoji(codePoint) {
 function isEastAsianWide(codePoint) {
   return codePoint >= 4352 && codePoint <= 4447 || codePoint >= 11904 && codePoint <= 40959 || codePoint >= 44032 && codePoint <= 55203 || codePoint >= 63744 && codePoint <= 64255 || codePoint >= 65040 && codePoint <= 65055 || codePoint >= 65072 && codePoint <= 65135 || codePoint >= 65280 && codePoint <= 65376 || codePoint >= 65504 && codePoint <= 65510 || codePoint >= 131072 && codePoint <= 196605 || codePoint >= 196608 && codePoint <= 262141;
 }
-function hasMultipleCodepoints(str) {
+function hasMultipleCodepoints(str2) {
   let count = 0;
-  for (const _2 of str) {
+  for (const _2 of str2) {
     count++;
     if (count > 1) return true;
   }
@@ -80316,8 +80548,8 @@ function graphemeWidth(grapheme) {
   if (isEmoji(codePoint) || isEastAsianWide(codePoint)) return 2;
   return 1;
 }
-function* segmentGraphemes(str) {
-  for (const { segment } of getGraphemeSegmenter().segment(str)) {
+function* segmentGraphemes(str2) {
+  for (const { segment } of getGraphemeSegmenter().segment(str2)) {
     yield { value: segment, width: graphemeWidth(segment) };
   }
 }
@@ -81474,69 +81706,69 @@ var CHALK_BOOSTED_FOR_XTERMJS = boostChalkLevelForXtermJs();
 var CHALK_CLAMPED_FOR_TMUX = clampChalkLevelForTmux();
 var RGB_REGEX = /^rgb\(\s?(\d+),\s?(\d+),\s?(\d+)\s?\)$/;
 var ANSI_REGEX = /^ansi256\(\s?(\d+)\s?\)$/;
-var colorize = (str, color, type) => {
+var colorize = (str2, color, type) => {
   if (!color) {
-    return str;
+    return str2;
   }
   if (color.startsWith("ansi:")) {
     const value = color.substring("ansi:".length);
     switch (value) {
       case "black":
-        return type === "foreground" ? import_chalk.default.black(str) : import_chalk.default.bgBlack(str);
+        return type === "foreground" ? import_chalk.default.black(str2) : import_chalk.default.bgBlack(str2);
       case "red":
-        return type === "foreground" ? import_chalk.default.red(str) : import_chalk.default.bgRed(str);
+        return type === "foreground" ? import_chalk.default.red(str2) : import_chalk.default.bgRed(str2);
       case "green":
-        return type === "foreground" ? import_chalk.default.green(str) : import_chalk.default.bgGreen(str);
+        return type === "foreground" ? import_chalk.default.green(str2) : import_chalk.default.bgGreen(str2);
       case "yellow":
-        return type === "foreground" ? import_chalk.default.yellow(str) : import_chalk.default.bgYellow(str);
+        return type === "foreground" ? import_chalk.default.yellow(str2) : import_chalk.default.bgYellow(str2);
       case "blue":
-        return type === "foreground" ? import_chalk.default.blue(str) : import_chalk.default.bgBlue(str);
+        return type === "foreground" ? import_chalk.default.blue(str2) : import_chalk.default.bgBlue(str2);
       case "magenta":
-        return type === "foreground" ? import_chalk.default.magenta(str) : import_chalk.default.bgMagenta(str);
+        return type === "foreground" ? import_chalk.default.magenta(str2) : import_chalk.default.bgMagenta(str2);
       case "cyan":
-        return type === "foreground" ? import_chalk.default.cyan(str) : import_chalk.default.bgCyan(str);
+        return type === "foreground" ? import_chalk.default.cyan(str2) : import_chalk.default.bgCyan(str2);
       case "white":
-        return type === "foreground" ? import_chalk.default.white(str) : import_chalk.default.bgWhite(str);
+        return type === "foreground" ? import_chalk.default.white(str2) : import_chalk.default.bgWhite(str2);
       case "blackBright":
-        return type === "foreground" ? import_chalk.default.blackBright(str) : import_chalk.default.bgBlackBright(str);
+        return type === "foreground" ? import_chalk.default.blackBright(str2) : import_chalk.default.bgBlackBright(str2);
       case "redBright":
-        return type === "foreground" ? import_chalk.default.redBright(str) : import_chalk.default.bgRedBright(str);
+        return type === "foreground" ? import_chalk.default.redBright(str2) : import_chalk.default.bgRedBright(str2);
       case "greenBright":
-        return type === "foreground" ? import_chalk.default.greenBright(str) : import_chalk.default.bgGreenBright(str);
+        return type === "foreground" ? import_chalk.default.greenBright(str2) : import_chalk.default.bgGreenBright(str2);
       case "yellowBright":
-        return type === "foreground" ? import_chalk.default.yellowBright(str) : import_chalk.default.bgYellowBright(str);
+        return type === "foreground" ? import_chalk.default.yellowBright(str2) : import_chalk.default.bgYellowBright(str2);
       case "blueBright":
-        return type === "foreground" ? import_chalk.default.blueBright(str) : import_chalk.default.bgBlueBright(str);
+        return type === "foreground" ? import_chalk.default.blueBright(str2) : import_chalk.default.bgBlueBright(str2);
       case "magentaBright":
-        return type === "foreground" ? import_chalk.default.magentaBright(str) : import_chalk.default.bgMagentaBright(str);
+        return type === "foreground" ? import_chalk.default.magentaBright(str2) : import_chalk.default.bgMagentaBright(str2);
       case "cyanBright":
-        return type === "foreground" ? import_chalk.default.cyanBright(str) : import_chalk.default.bgCyanBright(str);
+        return type === "foreground" ? import_chalk.default.cyanBright(str2) : import_chalk.default.bgCyanBright(str2);
       case "whiteBright":
-        return type === "foreground" ? import_chalk.default.whiteBright(str) : import_chalk.default.bgWhiteBright(str);
+        return type === "foreground" ? import_chalk.default.whiteBright(str2) : import_chalk.default.bgWhiteBright(str2);
     }
   }
   if (color.startsWith("#")) {
-    return type === "foreground" ? import_chalk.default.hex(color)(str) : import_chalk.default.bgHex(color)(str);
+    return type === "foreground" ? import_chalk.default.hex(color)(str2) : import_chalk.default.bgHex(color)(str2);
   }
   if (color.startsWith("ansi256")) {
     const matches = ANSI_REGEX.exec(color);
     if (!matches) {
-      return str;
+      return str2;
     }
     const value = Number(matches[1]);
-    return type === "foreground" ? import_chalk.default.ansi256(value)(str) : import_chalk.default.bgAnsi256(value)(str);
+    return type === "foreground" ? import_chalk.default.ansi256(value)(str2) : import_chalk.default.bgAnsi256(value)(str2);
   }
   if (color.startsWith("rgb")) {
     const matches = RGB_REGEX.exec(color);
     if (!matches) {
-      return str;
+      return str2;
     }
     const firstValue = Number(matches[1]);
     const secondValue = Number(matches[2]);
     const thirdValue = Number(matches[3]);
-    return type === "foreground" ? import_chalk.default.rgb(firstValue, secondValue, thirdValue)(str) : import_chalk.default.bgRgb(firstValue, secondValue, thirdValue)(str);
+    return type === "foreground" ? import_chalk.default.rgb(firstValue, secondValue, thirdValue)(str2) : import_chalk.default.bgRgb(firstValue, secondValue, thirdValue)(str2);
   }
-  return str;
+  return str2;
 };
 function applyTextStyles(text, styles3) {
   let result = text;
@@ -82340,12 +82572,12 @@ var StylePool = class {
   transition(fromId, toId) {
     if (fromId === toId) return "";
     const key = fromId * 1048576 + toId;
-    let str = this.transitionCache.get(key);
-    if (str === void 0) {
-      str = ansiCodesToString(diffAnsiCodes(this.get(fromId), this.get(toId)));
-      this.transitionCache.set(key, str);
+    let str2 = this.transitionCache.get(key);
+    if (str2 === void 0) {
+      str2 = ansiCodesToString(diffAnsiCodes(this.get(fromId), this.get(toId)));
+      this.transitionCache.set(key, str2);
     }
-    return str;
+    return str2;
   }
   /**
    * Intern a style that is `base + inverse`. Cached by base ID so
@@ -84830,9 +85062,9 @@ function transitionHyperlink(diff3, current2, target) {
   return current2;
 }
 function transitionStyle(diff3, stylePool, currentId, targetId) {
-  const str = stylePool.transition(currentId, targetId);
-  if (str.length > 0) {
-    diff3.push({ type: "styleStr", str });
+  const str2 = stylePool.transition(currentId, targetId);
+  if (str2.length > 0) {
+    diff3.push({ type: "styleStr", str: str2 });
   }
   return targetId;
 }
@@ -88422,8 +88654,19 @@ var darkTheme = {
   contextCometFragment: "#7c5cbf",
   contextCometDust: "#4a3d66",
   border: "#808080",
-  diffAdd: "#38a660",
-  diffRemove: "#b3596b",
+  // Diff layers (see the Theme interface): near-black bands a step apart, loud
+  // color reserved for the +/- decorations, bright off-white plain text. The
+  // hues are Orion's own family — EMERALD for additions (cooler than a leaf
+  // green; the decoration green IS the app's semantic green, autoAccept, so
+  // the diff and the posture/success chrome speak one color) and ROSE for
+  // removals (sits naturally beside the violet brand).
+  diffAdd: "#3fb950",
+  diffRemove: "#e5484d",
+  diffAddBg: "#022711",
+  diffRemoveBg: "#330210",
+  diffAddWordBg: "#044921",
+  diffRemoveWordBg: "#4d0416",
+  diffText: "#f8f8f2",
   diffContext: "#808080",
   gutter: "#808080",
   synKeyword: "#569cd6",
@@ -88433,11 +88676,6 @@ var darkTheme = {
   synType: "#4ec9b0",
   synComment: "#6a9955",
   synControl: "#c586c0",
-  // Per-line diff BASE bands (muted). The brighter diffAdd/diffRemove ride on top
-  // as word-level change highlights, so a small edit shows a two-tone line instead
-  // of one flat wash.
-  diffAddBg: "#225c2b",
-  diffRemoveBg: "#7a2936",
   autoAccept: "#3fb950",
   planMode: "#38bdf8",
   duetMode: "#a78bfa",
@@ -88478,8 +88716,17 @@ var lightTheme = {
   contextCometFragment: "#8b6fd4",
   contextCometDust: "#b9a9dd",
   border: "#808080",
-  diffAdd: "#2f9d44",
-  diffRemove: "#d1454b",
+  // Diff layers (see the Theme interface), mirrored for a light terminal: the
+  // bands are the palest wash, the word step is deeper, decorations deeper
+  // still. Same Orion family as dark — emerald additions (decoration green =
+  // autoAccept, the app's semantic green) and rose removals.
+  diffAdd: "#15803d",
+  diffRemove: "#cf2240",
+  diffAddBg: "#d9fbe8",
+  diffRemoveBg: "#ffdce4",
+  diffAddWordBg: "#aff5cd",
+  diffRemoveWordBg: "#ffc2cf",
+  diffText: "#333333",
   diffContext: "#808080",
   gutter: "#808080",
   synKeyword: "#0000ff",
@@ -88489,8 +88736,6 @@ var lightTheme = {
   synType: "#267f99",
   synComment: "#008000",
   synControl: "#af00db",
-  diffAddBg: "#a6f3b0",
-  diffRemoveBg: "#ffc9d0",
   autoAccept: "#15803d",
   planMode: "#267f99",
   duetMode: "#7c3aed",
@@ -88734,6 +88979,11 @@ async function transportBearer(session, store, fallback) {
   if (!token) await syncAccountGate(session, store);
   return token ?? fallback ?? null;
 }
+async function renewedTransportBearer(session, store, refused, fallback) {
+  const token = await session.renewedAccessToken(refused);
+  if (!token) await syncAccountGate(session, store);
+  return token ?? fallback ?? null;
+}
 var SIGN_IN_FIRST_MESSAGE = "Sign in first with /signin to start chatting.";
 function isAuthDeadError(e) {
   return /\bhttp 401\b/.test(e instanceof Error ? e.message : String(e));
@@ -89586,6 +89836,40 @@ function projectMessages(messages) {
   }
   return groupToolRuns(out2);
 }
+var str = (v2) => typeof v2 === "string";
+var num = (v2) => typeof v2 === "number" && Number.isFinite(v2);
+var rec = (v2) => !!v2 && typeof v2 === "object" && !Array.isArray(v2);
+var REVIVE_CHECKS = {
+  user: (x2) => str(x2.text),
+  command: (x2) => str(x2.name) && str(x2.args),
+  assistant: (x2) => str(x2.text),
+  thinking: (x2) => str(x2.text) && (x2.durationMs === void 0 || num(x2.durationMs)),
+  tool: (x2) => str(x2.name) && str(x2.args) && (x2.status === "ok" || x2.status === "error"),
+  toolgroup: (x2) => Array.isArray(x2.tools) && x2.tools.length > 0 && x2.tools.every((t) => isRevivableItem(t) && t.kind === "tool"),
+  diff: (x2) => str(x2.path) && (x2.diff === null || str(x2.diff)) && num(x2.insertions) && num(x2.deletions) && typeof x2.deleted === "boolean" && // Optional decorations, validated when present: DiffCard maps/joins these
+  // unconditionally once they exist, so a malformed shape would throw.
+  (x2.affectedFiles === void 0 || Array.isArray(x2.affectedFiles) && x2.affectedFiles.every(str)) && (x2.trust === void 0 || rec(x2.trust) && Array.isArray(x2.trust.findings)),
+  terminal: (x2) => str(x2.command) && str(x2.output) && (x2.exitCode === null || num(x2.exitCode)),
+  note: (x2) => str(x2.text) && (x2.stats === void 0 || rec(x2.stats) && num(x2.stats.insertions) && num(x2.stats.deletions)),
+  goalEnd: (x2) => rec(x2.row),
+  subagents: (x2) => Array.isArray(x2.agents) && x2.agents.every(rec),
+  websearch: (x2) => str(x2.query) && Array.isArray(x2.results) && x2.results.every(str),
+  inputguard: (x2) => rec(x2.card),
+  compaction: (x2) => rec(x2.card),
+  quota: (x2) => rec(x2.refusal),
+  context: (x2) => str(x2.modelLabel) && str(x2.modelId) && num(x2.tokens) && num(x2.window) && rec(x2.breakdown),
+  info: (x2) => str(x2.title) && Array.isArray(x2.rows) && x2.rows.every((r2) => Array.isArray(r2) || rec(r2))
+};
+function isRevivableItem(v2) {
+  if (!rec(v2) || !str(v2.id)) return false;
+  const check2 = REVIVE_CHECKS[v2.kind];
+  return check2 !== void 0 && check2(v2);
+}
+function reviveTranscript(raw) {
+  if (!Array.isArray(raw)) return null;
+  const items = raw.filter(isRevivableItem);
+  return items.length > 0 ? items : null;
+}
 
 // src/state/transcriptStore.ts
 var import_client_core12 = __toESM(require_dist(), 1);
@@ -89721,11 +90005,6 @@ function appendLiveCode(s, id, delta) {
   if (!live.liveCode || live.liveCode.id !== id) return s;
   return { ...s, live: { ...live, liveCode: { ...live.liveCode, code: live.liveCode.code + delta } } };
 }
-function endLiveCode(s, id) {
-  const live = s.live;
-  if (!live?.liveCode || live.liveCode.id !== id) return s;
-  return { ...s, live: { ...live, liveCode: null } };
-}
 function startTool(s, name2, input) {
   const flushed = flushLive(s);
   const live = flushed.live ?? emptyLive();
@@ -89754,7 +90033,11 @@ function settleToolEnd(s, id, success, detail) {
   }
   const rest = { ...s.live.pendingWrites };
   delete rest[id];
-  const nextLive = { ...s.live, pendingWrites: rest, liveCode: null };
+  const nextLive = {
+    ...s.live,
+    pendingWrites: rest,
+    liveCode: s.live.liveCode && s.live.liveCode.id === id ? null : s.live.liveCode
+  };
   if (success) {
     return { ...s, live: nextLive };
   }
@@ -89809,7 +90092,10 @@ function fileModified(s, d2) {
     affectedFiles: d2.affectedFiles,
     trust: d2.trust
   };
-  return { ...f, settled: [...f.settled, item] };
+  const block = f.live?.liveCode;
+  const settlesBlock = !!block && (d2.toolId ? block.id === d2.toolId : block.path === d2.path);
+  const live = settlesBlock && f.live ? { ...f.live, liveCode: null } : f.live;
+  return { ...f, live, settled: [...f.settled, item] };
 }
 function applyTurnComplete(s, data) {
   const flushed = flushLive(s);
@@ -89840,9 +90126,9 @@ function applyTurnInterrupted(s, prompt, partialReply = "") {
     live: null
   };
 }
-function hydrate(sessionId, messages, clientState) {
+function hydrate(sessionId, messages, clientState, transcript) {
   const msgs = Array.isArray(messages) ? messages : [];
-  const settled = projectMessages(msgs);
+  const settled = reviveTranscript(transcript) ?? projectMessages(msgs);
   return {
     sessionId,
     messages: msgs,
@@ -90855,7 +91141,7 @@ function remoteView(r2) {
     footer: "Switch with /remote on|off \xB7 hide or show this session with /remote hide|show."
   };
 }
-function goalView(running, goal, turns = 0, lastReason = null) {
+function goalView(running, goal, turns = 0, lastReason = null, lastClaim = null) {
   if (!running) {
     return {
       title: "Goal",
@@ -90864,7 +91150,12 @@ function goalView(running, goal, turns = 0, lastReason = null) {
     };
   }
   const rows = [statusRow("info", "Running", goal), statusRow("info", "Turns", String(turns))];
-  if (lastReason) rows.push(statusRow("pending", "Last check", lastReason));
+  if (lastClaim) {
+    const claim = lastClaim.done ? "done" : "not done";
+    const note = (0, import_client_core15.goalReasonLine)(lastClaim.note);
+    rows.push(statusRow("info", "Agent reports", note ? `${claim} \u2014 ${note}` : claim));
+  }
+  if (lastReason) rows.push(statusRow("pending", "Last check", (0, import_client_core15.goalReasonLine)(lastReason)));
   return {
     title: "Goal",
     tone: "info",
@@ -92091,12 +92382,12 @@ ${(0, import_client_core20.duetRoutingSummaryLine)(await (0, import_client_core2
           if (availability.disabled) {
             ctx.print(`${(0, import_client_core20.duetEntryLabel)(entry)}: ${availability.note ?? "unavailable"}`, "warning");
             if (entry === "router" && routerStatus !== null) ctx.print((0, import_client_core20.duetRouterStatusLine)(routerStatus), "info");
-            if (entry === "executor" && executorStatus !== null) ctx.print((0, import_client_core20.executorGateStatusLine)(executorStatus), "info");
             return;
           }
           await (0, import_client_core20.setDuetEntry)(entry);
           const option = import_client_core20.DUET_ENTRY_OPTIONS.find((o) => o.value === entry);
           ctx.print(`${import_client_core20.DUET_ENTRY_INFO.label}: ${(0, import_client_core20.duetEntryLabel)(entry)} \u2014 ${option?.description ?? ""}`, "success");
+          if (entry === "executor" && executorStatus !== null) ctx.print((0, import_client_core20.executorGateStatusLine)(executorStatus), "info");
         };
         if (typed !== null) {
           await save(typed);
@@ -92117,7 +92408,9 @@ ${(0, import_client_core20.duetRoutingSummaryLine)(await (0, import_client_core2
               return {
                 label: option.label,
                 value: option.value,
-                // What it needs beats what it does when it cannot be picked.
+                // The row's note — what this pick means on THIS machine (a refusal reason for
+                // the router, the rules-floor explainer for the executor) — beats the generic
+                // description.
                 hint: availability.note ?? (option.value === active ? "(active)" : option.description),
                 accent: option.value === active
               };
@@ -93802,7 +94095,7 @@ Answer with /loops answer <text>, or /loops deny.`,
       kind: "local",
       name: "goal",
       aliases: ["goals"],
-      description: "Work continuously until the goal is complete \u2014 the agent decides when it's done",
+      description: "Work continuously until the goal is complete \u2014 an independent check confirms it's done",
       argumentHint: "<what to accomplish | status | stop>",
       // Starting a goal starts a TURN — typed mid-turn it defers to the queue
       // (runs when the turn ends) rather than racing the live stream. The verb
@@ -93822,7 +94115,7 @@ Answer with /loops answer <text>, or /loops deny.`,
         }
         if (arg === "" || lower === "status") {
           const st2 = ctx.goals.status();
-          return ctx.printInfo(goalView(st2.running, st2.goal, st2.turns ?? 0, st2.lastReason ?? null));
+          return ctx.printInfo(goalView(st2.running, st2.goal, st2.turns ?? 0, st2.lastReason ?? null, st2.lastClaim ?? null));
         }
         if (ctx.goals.status().running) {
           return ctx.print("A goal is already running \u2014 /goal stop first, or steer it by typing normally.", "warning");
@@ -94120,13 +94413,13 @@ function writeAtomic(file, data) {
   fs11.renameSync(tmp, file);
 }
 var saveFailureWarned = false;
-function saveSession(rec) {
+function saveSession(rec2) {
   try {
     ensureDirs();
-    writeAtomic(sessionFile(rec.sessionId), `${JSON.stringify(rec, null, 2)}
+    writeAtomic(sessionFile(rec2.sessionId), `${JSON.stringify(rec2, null, 2)}
 `);
-    const idx = loadIndex().filter((e) => e.sessionId !== rec.sessionId);
-    idx.unshift({ sessionId: rec.sessionId, title: rec.title, updatedAt: rec.updatedAt });
+    const idx = loadIndex().filter((e) => e.sessionId !== rec2.sessionId);
+    idx.unshift({ sessionId: rec2.sessionId, title: rec2.title, updatedAt: rec2.updatedAt });
     writeAtomic(indexFile(), `${JSON.stringify(idx.slice(0, 100), null, 2)}
 `);
     return true;
@@ -94148,9 +94441,9 @@ function loadSession(sessionId) {
   }
 }
 function renameSession(sessionId, title) {
-  const rec = loadSession(sessionId);
-  if (!rec) return false;
-  return saveSession({ ...rec, title, updatedAt: Date.now() });
+  const rec2 = loadSession(sessionId);
+  if (!rec2) return false;
+  return saveSession({ ...rec2, title, updatedAt: Date.now() });
 }
 var pendingModelTitles = /* @__PURE__ */ new Map();
 function applyModelSessionTitle(sessionId, title) {
@@ -94408,6 +94701,9 @@ function renderLane(transcript, app, ev) {
       transcript.setState(
         (s) => fileModified(s, {
           path: String(d2.path ?? ""),
+          // The causing call — pairs the diff card with the frozen live code
+          // block it settles (rewind-emitted events legitimately omit it).
+          toolId: typeof d2.tool_id === "string" ? d2.tool_id : void 0,
           diff: typeof d2.diff === "string" ? d2.diff : null,
           insertions: typeof d2.insertions === "number" ? d2.insertions : 0,
           deletions: typeof d2.deletions === "number" ? d2.deletions : 0,
@@ -94618,11 +94914,8 @@ function renderLane(transcript, app, ev) {
       }
       break;
     }
-    case "tool_input_end": {
-      const id = typeof d2.tool_id === "string" ? d2.tool_id : "";
-      if (id) transcript.setState((s) => endLiveCode(s, id));
+    case "tool_input_end":
       break;
-    }
     case "tool_progress": {
       const kind = typeof d2.kind === "string" ? d2.kind : "working";
       app.setState((s) => ({ ...s, statusText: `${kind}\u2026` }));
@@ -94752,7 +95045,7 @@ function makeGoalRunTurn(deps2) {
       }
       switch (outcome.kind) {
         case "complete":
-          return { text: outcome.finalText, evidence: outcome.evidence };
+          return { text: outcome.finalText, evidence: outcome.evidence, claim: outcome.claim };
         case "cancelled":
           return "";
         case "error":
@@ -95197,7 +95490,7 @@ var WorkPlanApprovalBridge = class {
 var import_client_ui_core20 = __toESM(require_dist2(), 1);
 
 // src/components/layout/Transcript.tsx
-var import_react27 = __toESM(require_react(), 1);
+var import_react28 = __toESM(require_react(), 1);
 
 // src/components/messages/MessageView.tsx
 var import_react23 = __toESM(require_react(), 1);
@@ -111212,7 +111505,27 @@ function expandTabs2(s) {
   }
   return out2;
 }
-function wordRuns(shown, lang, changed, baseBg, brightBg, syntax, theme) {
+function diffLineStyle(theme, kind) {
+  switch (kind) {
+    case "add":
+      return {
+        bg: theme.diffAddBg,
+        wordBg: theme.diffAddWordBg,
+        accent: theme.diffAdd,
+        text: theme.diffText
+      };
+    case "del":
+      return {
+        bg: theme.diffRemoveBg,
+        wordBg: theme.diffRemoveWordBg,
+        accent: theme.diffRemove,
+        text: theme.diffText
+      };
+    case "context":
+      return { accent: theme.gutter, text: theme.diffText };
+  }
+}
+function wordRuns(shown, lang, changed, baseBg, brightBg, syntax, plainFg, theme) {
   let text;
   let fgs;
   if (syntax) {
@@ -111220,12 +111533,12 @@ function wordRuns(shown, lang, changed, baseBg, brightBg, syntax, theme) {
     text = spans.map((s) => s.text).join("");
     fgs = [];
     for (const sp of spans) {
-      const fg = synColor(theme, sp.kind);
+      const fg = synColor(theme, sp.kind) ?? plainFg;
       for (let c3 = 0; c3 < sp.text.length; c3++) fgs.push(fg);
     }
   } else {
     text = shown;
-    fgs = new Array(shown.length).fill(void 0);
+    fgs = new Array(shown.length).fill(plainFg);
   }
   const bgAt = (k) => changed[k] ? brightBg : baseBg;
   const runs = [];
@@ -111261,10 +111574,12 @@ function StructuredDiff({
       }
       const isAdd = l3.type === "add";
       const isDel = l3.type === "del";
-      const bg = isAdd ? theme.diffAddBg : isDel ? theme.diffRemoveBg : void 0;
-      const accent = isAdd ? theme.diffAdd : isDel ? theme.diffRemove : theme.gutter;
+      const { bg, wordBg, accent, text } = diffLineStyle(
+        theme,
+        isAdd ? "add" : isDel ? "del" : "context"
+      );
       const marker = isAdd ? "+" : isDel ? "-" : " ";
-      const num = isDel ? l3.oldNo : l3.newNo;
+      const num2 = isDel ? l3.oldNo : l3.newNo;
       const raw = expandTabs2(l3.text ?? "");
       const shown = (raw.length > textWidth ? raw.slice(0, textWidth) : raw) || " ";
       const pad = bg ? " ".repeat(Math.max(0, textWidth - shown.length)) : "";
@@ -111279,10 +111594,10 @@ function StructuredDiff({
           while (changed.length < shown.length) changed.push(false);
         }
       }
-      const body2 = changed ? wordRuns(shown, lang, changed, bg, accent, isAdd, theme) : isDel ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { children: shown }) : (highlightCode(shown, lang)[0] ?? []).map((sp, k) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { color: synColor(theme, sp.kind), children: sp.text }, k));
+      const body2 = changed ? wordRuns(shown, lang, changed, bg, wordBg, isAdd, text, theme) : isDel ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { color: text, children: shown }) : (highlightCode(shown, lang)[0] ?? []).map((sp, k) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Text2, { color: synColor(theme, sp.kind) ?? text, children: sp.text }, k));
       return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(Text2, { backgroundColor: bg, children: [
         /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(Text2, { color: accent, children: [
-          gutter(num),
+          gutter(num2),
           " "
         ] }),
         /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(Text2, { color: accent, children: [
@@ -111787,7 +112102,7 @@ function OrionRing() {
 
 // src/services/version.ts
 function tuiVersion() {
-  return "0.1.24".length > 0 ? "0.1.24" : null;
+  return "0.1.26".length > 0 ? "0.1.26" : null;
 }
 
 // src/components/layout/WelcomeCard.tsx
@@ -111826,18 +112141,48 @@ var import_client_ui_core9 = __toESM(require_dist2(), 1);
 var import_client_core29 = __toESM(require_dist(), 1);
 
 // src/components/messages/Thinking.tsx
+var import_react24 = __toESM(require_react(), 1);
 var import_jsx_runtime40 = __toESM(require_jsx_runtime(), 1);
-var LIVE_LINES = 12;
-var LIVE_CHARS = 1200;
-function thinkingTail(text) {
-  const tail = text.split("\n").slice(-LIVE_LINES).join("\n").trimEnd();
-  return tail.length > LIVE_CHARS ? `\u2026${tail.slice(-LIVE_CHARS)}` : tail;
+var LIVE_ROWS = 12;
+function wrapPlain(line, width) {
+  const rows = [];
+  let row = null;
+  for (const word of line.split(" ")) {
+    let w2 = word;
+    while (w2.length > width) {
+      if (row !== null) {
+        rows.push(row);
+        row = null;
+      }
+      rows.push(w2.slice(0, width));
+      w2 = w2.slice(width);
+    }
+    if (w2 === "" && word !== "") continue;
+    if (row === null) row = w2;
+    else if (row.length + 1 + w2.length <= width) row += ` ${w2}`;
+    else {
+      rows.push(row);
+      row = w2;
+    }
+  }
+  if (row !== null) rows.push(row);
+  return rows.length ? rows : [""];
+}
+function thinkingTailRows(text, width) {
+  const w2 = Math.max(1, Math.floor(width));
+  const tail = text.split("\n").slice(-LIVE_ROWS).join("\n").trimEnd();
+  if (!tail) return [];
+  const rows = [];
+  for (const line of tail.split("\n")) rows.push(...wrapPlain(line, w2));
+  return rows.slice(-LIVE_ROWS);
 }
 function Thinking({
   text,
   spinner = ""
 }) {
   const { columns } = useTerminalSize();
+  const width = Math.max(20, columns - 4);
+  const rows = import_react24.default.useMemo(() => thinkingTailRows(text, width), [text, width]);
   if (!text.trim()) return null;
   return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(Box2, { flexDirection: "column", marginTop: 1, children: [
     /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)(Box2, { flexDirection: "row", children: [
@@ -111845,7 +112190,7 @@ function Thinking({
       /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { dim: true, italic: true, children: "Thinking" }),
       spinner ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { colorKey: "spinner", children: ` ${spinner}` }) : null
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { paddingLeft: 2, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { width: Math.max(20, columns - 4), children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { dim: true, italic: true, wrap: "wrap", children: thinkingTail(text) }) }) })
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { paddingLeft: 2, children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Box2, { width, flexDirection: "column", children: rows.map((row, i2) => /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(ThemedText, { dim: true, italic: true, wrap: "truncate-end", children: row.length ? row : " " }, i2)) }) })
   ] });
 }
 
@@ -111923,21 +112268,21 @@ function LiveCode({
 }
 
 // src/hooks/useStore.ts
-var import_react24 = __toESM(require_react(), 1);
+var import_react25 = __toESM(require_react(), 1);
 function useStoreSelector(store, selector) {
-  return (0, import_react24.useSyncExternalStore)(
+  return (0, import_react25.useSyncExternalStore)(
     store.subscribe,
     () => selector(store.getState())
   );
 }
 
 // src/hooks/useTranscriptEviction.ts
-var import_react26 = __toESM(require_react(), 1);
+var import_react27 = __toESM(require_react(), 1);
 
 // src/vendor/ink/hooks/use-committed-rows.ts
-var import_react25 = __toESM(require_react(), 1);
+var import_react26 = __toESM(require_react(), 1);
 function useCommittedRows() {
-  return (0, import_react25.useContext)(CommittedRowsContext);
+  return (0, import_react26.useContext)(CommittedRowsContext);
 }
 
 // src/hooks/useTranscriptEviction.ts
@@ -111963,14 +112308,14 @@ function useTranscriptEviction({
   getItemsContainer
 }) {
   const api = useCommittedRows();
-  const forkSize = (0, import_react26.useContext)(TerminalSizeContext);
+  const forkSize = (0, import_react27.useContext)(TerminalSizeContext);
   const fallbackSize = useTerminalSize();
   const rows = forkSize?.rows ?? fallbackSize.rows;
   const evictedCount = useStoreSelector(transcriptStore, (s) => s.evictedCount);
   const committedCount = useStoreSelector(transcriptStore, (s) => s.committedCount);
-  const apiRef = (0, import_react26.useRef)(api);
+  const apiRef = (0, import_react27.useRef)(api);
   apiRef.current = api;
-  (0, import_react26.useLayoutEffect)(() => {
+  (0, import_react27.useLayoutEffect)(() => {
     const snap = (s) => ({
       sessionId: s.sessionId,
       settledLength: s.settled.length,
@@ -111985,7 +112330,7 @@ function useTranscriptEviction({
       prev = s;
     });
   }, [transcriptStore]);
-  (0, import_react26.useEffect)(() => {
+  (0, import_react27.useEffect)(() => {
     if (!enabled || !api || items.length <= 1) return;
     const container = getItemsContainer();
     if (!container) return;
@@ -112033,15 +112378,15 @@ function Transcript({
   const subAgents = useStoreSelector(appStore, (s) => s.subAgents);
   const subagentsAwaiting = useStoreSelector(appStore, (s) => s.subagentsAwaiting);
   const { columns } = useTerminalSize();
-  const items = import_react27.default.useMemo(
+  const items = import_react28.default.useMemo(
     () => groupToolRuns(evictedCount > 0 ? settled.slice(evictedCount) : settled),
     [settled, evictedCount]
   );
-  const itemsContainerRef = import_react27.default.useRef(null);
-  const setItemsContainer = import_react27.default.useCallback((el) => {
+  const itemsContainerRef = import_react28.default.useRef(null);
+  const setItemsContainer = import_react28.default.useCallback((el) => {
     itemsContainerRef.current = el;
   }, []);
-  const getItemsContainer = import_react27.default.useCallback(() => itemsContainerRef.current, []);
+  const getItemsContainer = import_react28.default.useCallback(() => itemsContainerRef.current, []);
   useTranscriptEviction({ enabled: evictionEnabled, transcriptStore, items, getItemsContainer });
   const running = live?.runningTool ?? null;
   const foldTail = running && !verbose ? trailingToolRun(items) : null;
@@ -112075,10 +112420,10 @@ function Transcript({
 }
 
 // src/components/layout/ReplFooter.tsx
-var import_react46 = __toESM(require_react(), 1);
+var import_react47 = __toESM(require_react(), 1);
 
 // src/components/tools/PlanCard.tsx
-var import_react28 = __toESM(require_react(), 1);
+var import_react29 = __toESM(require_react(), 1);
 var import_jsx_runtime43 = __toESM(require_jsx_runtime(), 1);
 function planStepView(index, currentStep) {
   const done2 = index + 1 < currentStep;
@@ -112103,8 +112448,8 @@ function PlanCard({ plan }) {
   const total = plan.steps.length;
   const allDone = total > 0 && plan.current_step > total;
   const planKey = `${plan.current_step}|${plan.steps.join("\0")}`;
-  const [hiddenKey, setHiddenKey] = import_react28.default.useState(null);
-  import_react28.default.useEffect(() => {
+  const [hiddenKey, setHiddenKey] = import_react29.default.useState(null);
+  import_react29.default.useEffect(() => {
     if (!allDone) return;
     const t = setTimeout(() => setHiddenKey(planKey), DONE_HOLD_MS);
     return () => clearTimeout(t);
@@ -112138,7 +112483,7 @@ function PlanCard({ plan }) {
 }
 
 // src/components/tools/SubAgentCard.tsx
-var import_react29 = __toESM(require_react(), 1);
+var import_react30 = __toESM(require_react(), 1);
 var import_client_core30 = __toESM(require_dist(), 1);
 var import_client_ui_core10 = __toESM(require_dist2(), 1);
 var import_jsx_runtime44 = __toESM(require_jsx_runtime(), 1);
@@ -112158,8 +112503,8 @@ function SubAgentList({
 }) {
   const running = agents.filter((a) => a.phase !== "finished");
   const visible = !awaiting && running.length > 0;
-  const [now2, setNow] = import_react29.default.useState(() => Date.now());
-  import_react29.default.useEffect(() => {
+  const [now2, setNow] = import_react30.default.useState(() => Date.now());
+  import_react30.default.useEffect(() => {
     if (!visible) return void 0;
     const timer = setInterval(() => setNow(Date.now()), 1e3);
     return () => clearInterval(timer);
@@ -112175,7 +112520,7 @@ function SubAgentList({
 }
 
 // src/components/input/PromptInput.tsx
-var import_react31 = __toESM(require_react(), 1);
+var import_react32 = __toESM(require_react(), 1);
 
 // src/components/input/slashSegments.ts
 function segmentSlice(text, offset, ranges) {
@@ -112952,7 +113297,7 @@ function vimKeypress(st2, buffer, input, key) {
 }
 
 // src/voice/useHoldToTalk.ts
-var import_react30 = __toESM(require_react(), 1);
+var import_react31 = __toESM(require_react(), 1);
 var REPEAT_GAP_MS = 120;
 var WARMUP_THRESHOLD = 2;
 var HOLD_THRESHOLD = 5;
@@ -113110,9 +113455,9 @@ function spliceTranscript(value, cursor, text) {
   return { value: before + inserted + after, cursor: cursor + lead.length + text.length };
 }
 function useHoldToTalk(opts) {
-  const optsRef = (0, import_react30.useRef)(opts);
+  const optsRef = (0, import_react31.useRef)(opts);
   optsRef.current = opts;
-  const machineRef = (0, import_react30.useRef)(null);
+  const machineRef = (0, import_react31.useRef)(null);
   if (!machineRef.current) {
     machineRef.current = createHoldToTalk(
       {
@@ -113192,37 +113537,37 @@ function PromptInput({
   mode,
   permissionMode
 }) {
-  const [value, setValue2] = (0, import_react31.useState)("");
-  const [cursor, setCursor] = (0, import_react31.useState)(0);
-  const [history, setHistory] = (0, import_react31.useState)(
+  const [value, setValue2] = (0, import_react32.useState)("");
+  const [cursor, setCursor] = (0, import_react32.useState)(0);
+  const [history, setHistory] = (0, import_react32.useState)(
     () => (initialHistory ?? []).slice(0, HISTORY_LIMIT)
   );
-  const [vimState, setVimState] = (0, import_react31.useState)(() => initialVimState("insert"));
-  const [menuIdx, setMenuIdx] = (0, import_react31.useState)(0);
-  const [menuDismissed, setMenuDismissed] = (0, import_react31.useState)(false);
-  const [search, setSearch] = (0, import_react31.useState)(null);
-  const [escArmed, setEscArmed] = (0, import_react31.useState)(false);
-  const [exitArmed, setExitArmed] = (0, import_react31.useState)(null);
-  const [postureFlash, setPostureFlash] = (0, import_react31.useState)(false);
-  const chordRef = (0, import_react31.useRef)(emptyChord());
-  const escAtRef = (0, import_react31.useRef)(0);
-  const exitAtRef = (0, import_react31.useRef)(0);
-  const valueRef = (0, import_react31.useRef)(value);
+  const [vimState, setVimState] = (0, import_react32.useState)(() => initialVimState("insert"));
+  const [menuIdx, setMenuIdx] = (0, import_react32.useState)(0);
+  const [menuDismissed, setMenuDismissed] = (0, import_react32.useState)(false);
+  const [search, setSearch] = (0, import_react32.useState)(null);
+  const [escArmed, setEscArmed] = (0, import_react32.useState)(false);
+  const [exitArmed, setExitArmed] = (0, import_react32.useState)(null);
+  const [postureFlash, setPostureFlash] = (0, import_react32.useState)(false);
+  const chordRef = (0, import_react32.useRef)(emptyChord());
+  const escAtRef = (0, import_react32.useRef)(0);
+  const exitAtRef = (0, import_react32.useRef)(0);
+  const valueRef = (0, import_react32.useRef)(value);
   valueRef.current = value;
-  const cursorRef = (0, import_react31.useRef)(cursor);
+  const cursorRef = (0, import_react32.useRef)(cursor);
   cursorRef.current = cursor;
-  const pasteLedger = (0, import_react31.useRef)({ nextId: 1, texts: /* @__PURE__ */ new Map() });
-  const recall = (0, import_react31.useRef)(NOT_RECALLING);
-  const wheelRef = (0, import_react31.useRef)(createWheelAccel());
-  const flashTimer = (0, import_react31.useRef)(null);
-  const firstPosture = (0, import_react31.useRef)(true);
+  const pasteLedger = (0, import_react32.useRef)({ nextId: 1, texts: /* @__PURE__ */ new Map() });
+  const recall = (0, import_react32.useRef)(NOT_RECALLING);
+  const wheelRef = (0, import_react32.useRef)(createWheelAccel());
+  const flashTimer = (0, import_react32.useRef)(null);
+  const firstPosture = (0, import_react32.useRef)(true);
   const theme = useTheme();
   const { rows } = useTerminalSize();
-  const [voiceState, setVoiceState] = (0, import_react31.useState)("idle");
-  const [voiceProgress, setVoiceProgress] = (0, import_react31.useState)(null);
-  const [voiceError, setVoiceError] = (0, import_react31.useState)(null);
-  const [voiceBlink, setVoiceBlink] = (0, import_react31.useState)(false);
-  (0, import_react31.useEffect)(() => {
+  const [voiceState, setVoiceState] = (0, import_react32.useState)("idle");
+  const [voiceProgress, setVoiceProgress] = (0, import_react32.useState)(null);
+  const [voiceError, setVoiceError] = (0, import_react32.useState)(null);
+  const [voiceBlink, setVoiceBlink] = (0, import_react32.useState)(false);
+  (0, import_react32.useEffect)(() => {
     if (voiceState !== "recording") return;
     const t = setInterval(() => setVoiceBlink((b2) => !b2), 600);
     return () => {
@@ -113230,7 +113575,7 @@ function PromptInput({
       setVoiceBlink(false);
     };
   }, [voiceState]);
-  const micRef = (0, import_react31.useRef)(null);
+  const micRef = (0, import_react32.useRef)(null);
   const holdToTalk = useHoldToTalk({
     getBuffer: () => ({ value: valueRef.current, cursor: cursorRef.current }),
     applyBuffer: (v2, c3) => {
@@ -113266,11 +113611,11 @@ function PromptInput({
       }
     }
   });
-  (0, import_react31.useEffect)(() => () => holdToTalk.dispose(), []);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => () => holdToTalk.dispose(), []);
+  (0, import_react32.useEffect)(() => {
     if (vim) setVimState(initialVimState("insert"));
   }, [vim]);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => {
     if (firstPosture.current) {
       firstPosture.current = false;
       return;
@@ -113282,7 +113627,7 @@ function PromptInput({
       if (flashTimer.current) clearTimeout(flashTimer.current);
     };
   }, [mode, permissionMode]);
-  const pickedMentions = (0, import_react31.useRef)(/* @__PURE__ */ new Set());
+  const pickedMentions = (0, import_react32.useRef)(/* @__PURE__ */ new Set());
   const suggestionsFor = (v2) => v2.startsWith("/") && !v2.includes(" ") ? getCompletions?.(v2) ?? [] : [];
   const suggestions = suggestionsFor(value);
   const mPfx = mentionPrefix(value, cursor);
@@ -113290,18 +113635,18 @@ function PromptInput({
   const menuFiles = fileSuggestions.length > 0;
   const menuLen = menuFiles ? fileSuggestions.length : suggestions.length;
   const menuOpen = !menuDismissed && menuLen > 0 && (!vim || vimState.mode === "insert");
-  const notifyMenuRef = (0, import_react31.useRef)(onMenuOpenChange);
+  const notifyMenuRef = (0, import_react32.useRef)(onMenuOpenChange);
   notifyMenuRef.current = onMenuOpenChange;
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => {
     notifyMenuRef.current?.(menuOpen);
   }, [menuOpen]);
-  (0, import_react31.useEffect)(() => () => notifyMenuRef.current?.(false), []);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => () => notifyMenuRef.current?.(false), []);
+  (0, import_react32.useEffect)(() => {
     for (const path14 of pickedMentions.current) {
       if (!value.includes(`${import_client_core32.FILE_MENTION_LEADER}${path14}`)) pickedMentions.current.delete(path14);
     }
   }, [value]);
-  (0, import_react31.useEffect)(() => {
+  (0, import_react32.useEffect)(() => {
     setMenuIdx(0);
     setMenuDismissed(false);
     setEscArmed(false);
@@ -113753,7 +114098,7 @@ function PromptInput({
 }
 
 // src/hooks/useIndexBadge.ts
-var import_react32 = __toESM(require_react(), 1);
+var import_react33 = __toESM(require_react(), 1);
 var READY_BADGE_LINGER_MS = 3e3;
 function shouldShowIndexBadge(mode, phase, lingerElapsed) {
   if (mode !== "on") return true;
@@ -113761,8 +114106,8 @@ function shouldShowIndexBadge(mode, phase, lingerElapsed) {
   return !lingerElapsed;
 }
 function useIndexBadgeVisible(mode, phase, lingerMs = READY_BADGE_LINGER_MS) {
-  const [lingerElapsed, setLingerElapsed] = (0, import_react32.useState)(false);
-  (0, import_react32.useEffect)(() => {
+  const [lingerElapsed, setLingerElapsed] = (0, import_react33.useState)(false);
+  (0, import_react33.useEffect)(() => {
     setLingerElapsed(false);
     if (phase !== "ready") return;
     const timer = setTimeout(() => setLingerElapsed(true), lingerMs);
@@ -113925,7 +114270,7 @@ function StatusBar({
 }
 
 // src/components/dialogs/AskUserPrompt.tsx
-var import_react33 = __toESM(require_react(), 1);
+var import_react34 = __toESM(require_react(), 1);
 var import_client_ui_core11 = __toESM(require_dist2(), 1);
 
 // src/components/dialogs/LineEditor.tsx
@@ -113977,15 +114322,15 @@ function AskUserPrompt({
   guardMs = 250
 }) {
   const { requestId, sessionId } = pending;
-  const card = (0, import_react33.useMemo)(() => (0, import_client_ui_core11.buildAskCard)(pending.request), [pending.request]);
+  const card = (0, import_react34.useMemo)(() => (0, import_client_ui_core11.buildAskCard)(pending.request), [pending.request]);
   const questions = card.questions;
-  const [selections, setSelections] = (0, import_react33.useState)(
+  const [selections, setSelections] = (0, import_react34.useState)(
     () => questions.map(() => import_client_ui_core11.EMPTY_SELECTION)
   );
-  const [index, setIndex] = (0, import_react33.useState)(0);
-  const [cursor, setCursor] = (0, import_react33.useState)(0);
-  const [draft, setDraft] = (0, import_react33.useState)(null);
-  const guard = (0, import_react33.useRef)({ id: requestId, at: Date.now() });
+  const [index, setIndex] = (0, import_react34.useState)(0);
+  const [cursor, setCursor] = (0, import_react34.useState)(0);
+  const [draft, setDraft] = (0, import_react34.useState)(null);
+  const guard = (0, import_react34.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) {
     guard.current = { id: requestId, at: Date.now() };
   }
@@ -114131,7 +114476,7 @@ function writtenInPreview(selection) {
 }
 
 // src/components/dialogs/FeedbackPrompt.tsx
-var import_react34 = __toESM(require_react(), 1);
+var import_react35 = __toESM(require_react(), 1);
 var import_client_ui_core12 = __toESM(require_dist2(), 1);
 var import_jsx_runtime53 = __toESM(require_jsx_runtime(), 1);
 function FeedbackPrompt({
@@ -114141,10 +114486,10 @@ function FeedbackPrompt({
   guardMs = 250
 }) {
   const { requestId } = pending;
-  const [score, setScore] = (0, import_react34.useState)(0);
-  const [why, setWhy] = (0, import_react34.useState)(null);
+  const [score, setScore] = (0, import_react35.useState)(0);
+  const [why, setWhy] = (0, import_react35.useState)(null);
   const theme = useTheme();
-  const guard = (0, import_react34.useRef)({ id: requestId, at: Date.now() });
+  const guard = (0, import_react35.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) {
     guard.current = { id: requestId, at: Date.now() };
   }
@@ -114193,13 +114538,13 @@ function FeedbackPrompt({
 }
 
 // src/components/dialogs/PermissionPrompt.tsx
-var import_react36 = __toESM(require_react(), 1);
+var import_react37 = __toESM(require_react(), 1);
 var import_client_ui_core13 = __toESM(require_dist2(), 1);
 var import_client_ui_core14 = __toESM(require_dist2(), 1);
 var import_client_core34 = __toESM(require_dist(), 1);
 
 // src/components/dialogs/SelectList.tsx
-var import_react35 = __toESM(require_react(), 1);
+var import_react36 = __toESM(require_react(), 1);
 var import_jsx_runtime54 = __toESM(require_jsx_runtime(), 1);
 function SelectList({
   title,
@@ -114211,17 +114556,17 @@ function SelectList({
   maxVisible
 }) {
   const { rows } = useTerminalSize();
-  const [query, setQuery] = (0, import_react35.useState)("");
-  const view = (0, import_react35.useMemo)(() => {
+  const [query, setQuery] = (0, import_react36.useState)("");
+  const view = (0, import_react36.useMemo)(() => {
     if (!filterable) return options;
     const q2 = query.trim().toLowerCase();
     if (!q2) return options;
     return options.filter((o) => !o.separator && o.label.toLowerCase().includes(q2));
   }, [options, query, filterable]);
   const selectable = view.flatMap((o, i2) => o.separator ? [] : [i2]);
-  const [idx, setIdx] = (0, import_react35.useState)(selectable[0] ?? 0);
+  const [idx, setIdx] = (0, import_react36.useState)(selectable[0] ?? 0);
   const safeIdx = selectable.includes(idx) ? idx : selectable[0] ?? 0;
-  (0, import_react35.useEffect)(() => {
+  (0, import_react36.useEffect)(() => {
     if (filterable) setIdx(selectable[0] ?? 0);
   }, [query, filterable]);
   const move = (dir) => {
@@ -114322,12 +114667,12 @@ function PermissionPrompt({
   guardMs = 250
 }) {
   const { data, sessionId } = pending;
-  const model = (0, import_react36.useMemo)(
+  const model = (0, import_react37.useMemo)(
     () => (0, import_client_ui_core13.buildPermissionCard)(data, { agentLabel: pending.agentLabel ?? null }),
     [data, pending.agentLabel]
   );
-  const [stage, setStage] = (0, import_react36.useState)({ kind: "choose" });
-  const guard = (0, import_react36.useRef)({ id: data.request_id, at: Date.now() });
+  const [stage, setStage] = (0, import_react37.useState)({ kind: "choose" });
+  const guard = (0, import_react37.useRef)({ id: data.request_id, at: Date.now() });
   if (guard.current.id !== data.request_id) {
     guard.current = { id: data.request_id, at: Date.now() };
     if (stage.kind !== "choose") setStage({ kind: "choose" });
@@ -114502,7 +114847,7 @@ function PermissionPrompt({
 }
 
 // src/components/dialogs/EndpointsPanel.tsx
-var import_react37 = __toESM(require_react(), 1);
+var import_react38 = __toESM(require_react(), 1);
 var import_jsx_runtime56 = __toESM(require_jsx_runtime(), 1);
 function maskedKeyState(e) {
   if (e.apiKey) return `key \u2022\u2022\u2022\u2022${e.apiKey.slice(-4)}`;
@@ -114532,20 +114877,20 @@ function EndpointsPanel({
   deps: deps2,
   onClose
 }) {
-  const [overlay, setOverlay] = (0, import_react37.useState)(null);
-  const [name2, setName] = (0, import_react37.useState)("");
-  const [url, setUrl] = (0, import_react37.useState)("");
-  const [wire, setWire] = (0, import_react37.useState)("openai");
-  const [key, setKey] = (0, import_react37.useState)("");
-  const [selected, setSelected] = (0, import_react37.useState)(/* @__PURE__ */ new Set());
-  const [discovered, setDiscovered] = (0, import_react37.useState)(null);
-  const [modelConfig, setModelConfig] = (0, import_react37.useState)({});
-  const [editing, setEditing] = (0, import_react37.useState)(null);
-  const [configDraft, setConfigDraft] = (0, import_react37.useState)("");
-  const [savedPins, setSavedPins] = (0, import_react37.useState)(/* @__PURE__ */ new Set());
-  const [savedConfig, setSavedConfig] = (0, import_react37.useState)({});
-  const [fetching, setFetching] = (0, import_react37.useState)(false);
-  const [note, setNote] = (0, import_react37.useState)(null);
+  const [overlay, setOverlay] = (0, import_react38.useState)(null);
+  const [name2, setName] = (0, import_react38.useState)("");
+  const [url, setUrl] = (0, import_react38.useState)("");
+  const [wire, setWire] = (0, import_react38.useState)("openai");
+  const [key, setKey] = (0, import_react38.useState)("");
+  const [selected, setSelected] = (0, import_react38.useState)(/* @__PURE__ */ new Set());
+  const [discovered, setDiscovered] = (0, import_react38.useState)(null);
+  const [modelConfig, setModelConfig] = (0, import_react38.useState)({});
+  const [editing, setEditing] = (0, import_react38.useState)(null);
+  const [configDraft, setConfigDraft] = (0, import_react38.useState)("");
+  const [savedPins, setSavedPins] = (0, import_react38.useState)(/* @__PURE__ */ new Set());
+  const [savedConfig, setSavedConfig] = (0, import_react38.useState)({});
+  const [fetching, setFetching] = (0, import_react38.useState)(false);
+  const [note, setNote] = (0, import_react38.useState)(null);
   const slots = [
     ...deps2.entries.map((_2, index) => ({ kind: "entry", index })),
     { kind: "field", field: "name" },
@@ -114555,9 +114900,9 @@ function EndpointsPanel({
     { kind: "action", action: "fetch" },
     { kind: "action", action: "save" }
   ];
-  const [at, setAt] = (0, import_react37.useState)(deps2.entries.length);
+  const [at, setAt] = (0, import_react38.useState)(deps2.entries.length);
   const slot = slots[Math.min(at, slots.length - 1)];
-  const [verifiedFor, setVerifiedFor] = (0, import_react37.useState)(null);
+  const [verifiedFor, setVerifiedFor] = (0, import_react38.useState)(null);
   const fingerprint = `${url.trim()}\0${key}`;
   const verified = verifiedFor === fingerprint;
   const resetForm = () => {
@@ -115044,7 +115389,7 @@ function EndpointsPanel({
 }
 
 // src/components/dialogs/PermissionRulesPanel.tsx
-var import_react38 = __toESM(require_react(), 1);
+var import_react39 = __toESM(require_react(), 1);
 var import_client_core35 = __toESM(require_dist(), 1);
 var import_client_ui_core15 = __toESM(require_dist2(), 1);
 var import_jsx_runtime57 = __toESM(require_jsx_runtime(), 1);
@@ -115054,7 +115399,7 @@ function PermissionRulesPanel({
   add,
   onClose
 }) {
-  const [stage, setStage] = (0, import_react38.useState)({ kind: "list" });
+  const [stage, setStage] = (0, import_react39.useState)({ kind: "list" });
   use_input_default((input, key) => {
     if (stage.kind !== "list") {
       if (stage.kind === "add-rule") {
@@ -115154,7 +115499,7 @@ function PermissionRulesPanel({
 }
 
 // src/components/dialogs/PlanApprovalPrompt.tsx
-var import_react39 = __toESM(require_react(), 1);
+var import_react40 = __toESM(require_react(), 1);
 var import_jsx_runtime58 = __toESM(require_jsx_runtime(), 1);
 function PlanApprovalPrompt({
   pending,
@@ -115163,7 +115508,7 @@ function PlanApprovalPrompt({
   guardMs = 250
 }) {
   const { requestId, sessionId } = pending;
-  const guard = (0, import_react39.useRef)({ id: requestId, at: Date.now() });
+  const guard = (0, import_react40.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) guard.current = { id: requestId, at: Date.now() };
   use_input_default((input, key) => {
     if (key.ctrl && input === "c") {
@@ -115197,7 +115542,7 @@ function PlanApprovalPrompt({
 }
 
 // src/components/dialogs/WorkPlanApprovalPrompt.tsx
-var import_react40 = __toESM(require_react(), 1);
+var import_react41 = __toESM(require_react(), 1);
 var import_client_core36 = __toESM(require_dist(), 1);
 var import_jsx_runtime59 = __toESM(require_jsx_runtime(), 1);
 function WorkPlanApprovalPrompt({
@@ -115207,7 +115552,7 @@ function WorkPlanApprovalPrompt({
   guardMs = 250
 }) {
   const { requestId, plan } = pending;
-  const guard = (0, import_react40.useRef)({ id: requestId, at: Date.now() });
+  const guard = (0, import_react41.useRef)({ id: requestId, at: Date.now() });
   if (guard.current.id !== requestId) guard.current = { id: requestId, at: Date.now() };
   use_input_default((input, key) => {
     if (key.ctrl && input === "c") {
@@ -115276,7 +115621,7 @@ function ConfirmDialog({ dialog }) {
 }
 
 // src/components/dialogs/HooksBrowser.tsx
-var import_react41 = __toESM(require_react(), 1);
+var import_react42 = __toESM(require_react(), 1);
 var import_jsx_runtime63 = __toESM(require_jsx_runtime(), 1);
 function matcherLabel(m2) {
   if (!m2 || typeof m2 !== "object") return "(any)";
@@ -115344,9 +115689,9 @@ function HooksBrowser({
   hooks,
   onClose
 }) {
-  const [event, setEvent] = (0, import_react41.useState)(null);
-  const [matcher, setMatcher] = (0, import_react41.useState)(null);
-  const [hookIdx, setHookIdx] = (0, import_react41.useState)(null);
+  const [event, setEvent] = (0, import_react42.useState)(null);
+  const [matcher, setMatcher] = (0, import_react42.useState)(null);
+  const [hookIdx, setHookIdx] = (0, import_react42.useState)(null);
   if (event === null) {
     const events = [...new Set(hooks.map((h) => h.event ?? "(unknown)"))].sort();
     const options = events.map((e) => {
@@ -115399,7 +115744,7 @@ function HooksBrowser({
 }
 
 // src/components/dialogs/PluginManager.tsx
-var import_react42 = __toESM(require_react(), 1);
+var import_react43 = __toESM(require_react(), 1);
 var import_client_core37 = __toESM(require_dist(), 1);
 var import_jsx_runtime64 = __toESM(require_jsx_runtime(), 1);
 function pluginId(p) {
@@ -115418,8 +115763,8 @@ function PluginManager({
   install,
   onClose
 }) {
-  const [view, setView] = (0, import_react42.useState)({ at: "list" });
-  const [busy, setBusy] = (0, import_react42.useState)(false);
+  const [view, setView] = (0, import_react43.useState)({ at: "list" });
+  const [busy, setBusy] = (0, import_react43.useState)(false);
   const finish = (work) => {
     setBusy(true);
     void work.finally(() => {
@@ -115572,7 +115917,7 @@ Install "${view.id}" from "${view.catalog}" (${scope} scope)?`,
 }
 
 // src/components/dialogs/RewindPicker.tsx
-var import_react43 = __toESM(require_react(), 1);
+var import_react44 = __toESM(require_react(), 1);
 var import_jsx_runtime65 = __toESM(require_jsx_runtime(), 1);
 function statLabel(t) {
   if (!t.files) return "no code changes";
@@ -115587,8 +115932,8 @@ function RewindPicker({
   apply: apply2,
   onClose
 }) {
-  const [picked, setPicked] = (0, import_react43.useState)(null);
-  const [busy, setBusy] = (0, import_react43.useState)(false);
+  const [picked, setPicked] = (0, import_react44.useState)(null);
+  const [busy, setBusy] = (0, import_react44.useState)(false);
   if (busy) {
     return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(Box2, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(ThemedText, { dim: true, children: "Working\u2026" }) });
   }
@@ -115626,7 +115971,7 @@ function RewindPicker({
 }
 
 // src/components/dialogs/McpManager.tsx
-var import_react44 = __toESM(require_react(), 1);
+var import_react45 = __toESM(require_react(), 1);
 var import_jsx_runtime66 = __toESM(require_jsx_runtime(), 1);
 function statusLabel(s) {
   return s.status === "needs_auth" ? "needs auth" : s.status ?? "?";
@@ -115644,8 +115989,8 @@ function McpManager({
   act,
   onClose
 }) {
-  const [view, setView] = (0, import_react44.useState)({ at: "list" });
-  const [busy, setBusy] = (0, import_react44.useState)(false);
+  const [view, setView] = (0, import_react45.useState)({ at: "list" });
+  const [busy, setBusy] = (0, import_react45.useState)(false);
   const finish = (work, backTo = { at: "list" }) => {
     setBusy(true);
     void work.finally(() => {
@@ -116093,7 +116438,7 @@ function UsageMetricsPanel({
 }
 
 // src/components/status/WorkingStatus.tsx
-var import_react45 = __toESM(require_react(), 1);
+var import_react46 = __toESM(require_react(), 1);
 var import_jsx_runtime69 = __toESM(require_jsx_runtime(), 1);
 var FRAME_MS = 50;
 function WorkingStatus({
@@ -116101,14 +116446,14 @@ function WorkingStatus({
   label,
   now: now2 = Date.now
 }) {
-  const startRef = (0, import_react45.useRef)(now2());
-  const wordsRef = (0, import_react45.useRef)(shuffleWords(LOADING_WORDS));
-  const wordIdxRef = (0, import_react45.useRef)(0);
-  const wordStartRef = (0, import_react45.useRef)(startRef.current);
-  const dwellRef = (0, import_react45.useRef)(nextCycleMs());
-  const [, forceFrame] = (0, import_react45.useState)(0);
+  const startRef = (0, import_react46.useRef)(now2());
+  const wordsRef = (0, import_react46.useRef)(shuffleWords(LOADING_WORDS));
+  const wordIdxRef = (0, import_react46.useRef)(0);
+  const wordStartRef = (0, import_react46.useRef)(startRef.current);
+  const dwellRef = (0, import_react46.useRef)(nextCycleMs());
+  const [, forceFrame] = (0, import_react46.useState)(0);
   const tokens = useStoreSelector(store, (s) => s.turnOutputTokens);
-  (0, import_react45.useEffect)(() => {
+  (0, import_react46.useEffect)(() => {
     const timer = setInterval(() => {
       const n2 = now2();
       if (!label && n2 - startRef.current < META_REVEAL_AFTER_MS && n2 - wordStartRef.current >= dwellRef.current) {
@@ -116260,11 +116605,11 @@ function ReplFooter({
     (s) => s.pendingPermissions.length > 0 || !!s.pendingPlanApproval || !!s.pendingAskUser || !!s.pendingWorkPlan
   );
   const closePanel = () => appStore.setState((s) => ({ ...s, activePanel: null }));
-  const onQueuePop = import_react46.default.useCallback(
+  const onQueuePop = import_react47.default.useCallback(
     (draft) => popEditableQueue(appStore, draft),
     [appStore]
   );
-  const [menuOpen, setMenuOpen] = import_react46.default.useState(false);
+  const [menuOpen, setMenuOpen] = import_react47.default.useState(false);
   return /* @__PURE__ */ (0, import_jsx_runtime72.jsxs)(import_jsx_runtime72.Fragment, { children: [
     streaming && !parked && /* @__PURE__ */ (0, import_jsx_runtime72.jsx)(WorkingStatus, { store: appStore }),
     plan && /* @__PURE__ */ (0, import_jsx_runtime72.jsx)(PlanCard, { plan }),
@@ -116380,7 +116725,7 @@ function ReplFooter({
 }
 
 // src/components/layout/FullscreenLayout.tsx
-var import_react47 = __toESM(require_react(), 1);
+var import_react48 = __toESM(require_react(), 1);
 var import_jsx_runtime73 = __toESM(require_jsx_runtime(), 1);
 function FullscreenLayout({
   appStore,
@@ -116402,7 +116747,7 @@ function FullscreenLayout({
   onCycleMode
 }) {
   const { columns, rows } = useTerminalSize();
-  const scrollRef = (0, import_react47.useRef)(null);
+  const scrollRef = (0, import_react48.useRef)(null);
   const onScroll = (delta) => {
     const sb = scrollRef.current;
     if (!sb) return;
@@ -116437,7 +116782,7 @@ function FullscreenLayout({
 }
 
 // src/components/dialogs/AgentsDashboard.tsx
-var import_react48 = __toESM(require_react(), 1);
+var import_react49 = __toESM(require_react(), 1);
 var import_client_core40 = __toESM(require_dist(), 1);
 var import_client_ui_core17 = __toESM(require_dist2(), 1);
 var import_strip_ansi4 = __toESM(require_strip_ansi(), 1);
@@ -116484,51 +116829,51 @@ function AgentsDashboard({
   onClose
 }) {
   const { rows } = useTerminalSize();
-  const [screen, setScreen] = (0, import_react48.useState)({ kind: "list" });
-  const [cursor, setCursor] = (0, import_react48.useState)(0);
-  const [busy, setBusy] = (0, import_react48.useState)(false);
-  const [error, setError] = (0, import_react48.useState)(null);
-  const [liveJob, setLiveJob] = (0, import_react48.useState)(null);
-  const [events, setEvents] = (0, import_react48.useState)([]);
-  const [pollError, setPollError] = (0, import_react48.useState)(null);
-  const [diff3, setDiff] = (0, import_react48.useState)(null);
-  const diffFetchedFor = (0, import_react48.useRef)(null);
-  const [liveItems, setLiveItems] = (0, import_react48.useState)([]);
-  const [liveTerm, setLiveTerm] = (0, import_react48.useState)("");
-  const [liveFrames, setLiveFrames] = (0, import_react48.useState)(0);
-  const liveIdRef = (0, import_react48.useRef)(0);
-  const [messaging, setMessaging] = (0, import_react48.useState)(false);
-  const [messageText, setMessageText] = (0, import_react48.useState)("");
-  const [messageNote, setMessageNote] = (0, import_react48.useState)(null);
-  const [tokenStatus, setTokenStatus] = (0, import_react48.useState)(null);
-  const [tokenBusy, setTokenBusy] = (0, import_react48.useState)(false);
-  const [tokenNote, setTokenNote] = (0, import_react48.useState)(null);
-  const [tokenInput, setTokenInput] = (0, import_react48.useState)(false);
-  const [tokenDraft, setTokenDraft] = (0, import_react48.useState)("");
-  const [jiraStatus, setJiraStatus] = (0, import_react48.useState)(null);
-  const [jiraBusy, setJiraBusy] = (0, import_react48.useState)(false);
-  const [jiraNote, setJiraNote] = (0, import_react48.useState)(null);
-  const [jiraInput, setJiraInput] = (0, import_react48.useState)(null);
-  const [form, setForm] = (0, import_react48.useState)(EMPTY_FORM);
-  const [field2, setField] = (0, import_react48.useState)(0);
+  const [screen, setScreen] = (0, import_react49.useState)({ kind: "list" });
+  const [cursor, setCursor] = (0, import_react49.useState)(0);
+  const [busy, setBusy] = (0, import_react49.useState)(false);
+  const [error, setError] = (0, import_react49.useState)(null);
+  const [liveJob, setLiveJob] = (0, import_react49.useState)(null);
+  const [events, setEvents] = (0, import_react49.useState)([]);
+  const [pollError, setPollError] = (0, import_react49.useState)(null);
+  const [diff3, setDiff] = (0, import_react49.useState)(null);
+  const diffFetchedFor = (0, import_react49.useRef)(null);
+  const [liveItems, setLiveItems] = (0, import_react49.useState)([]);
+  const [liveTerm, setLiveTerm] = (0, import_react49.useState)("");
+  const [liveFrames, setLiveFrames] = (0, import_react49.useState)(0);
+  const liveIdRef = (0, import_react49.useRef)(0);
+  const [messaging, setMessaging] = (0, import_react49.useState)(false);
+  const [messageText, setMessageText] = (0, import_react49.useState)("");
+  const [messageNote, setMessageNote] = (0, import_react49.useState)(null);
+  const [tokenStatus, setTokenStatus] = (0, import_react49.useState)(null);
+  const [tokenBusy, setTokenBusy] = (0, import_react49.useState)(false);
+  const [tokenNote, setTokenNote] = (0, import_react49.useState)(null);
+  const [tokenInput, setTokenInput] = (0, import_react49.useState)(false);
+  const [tokenDraft, setTokenDraft] = (0, import_react49.useState)("");
+  const [jiraStatus, setJiraStatus] = (0, import_react49.useState)(null);
+  const [jiraBusy, setJiraBusy] = (0, import_react49.useState)(false);
+  const [jiraNote, setJiraNote] = (0, import_react49.useState)(null);
+  const [jiraInput, setJiraInput] = (0, import_react49.useState)(null);
+  const [form, setForm] = (0, import_react49.useState)(EMPTY_FORM);
+  const [field2, setField] = (0, import_react49.useState)(0);
   const jobs = panel.jobs;
   const safeCursor = Math.min(cursor, Math.max(0, jobs.length - 1));
   const detailId = screen.kind === "detail" ? screen.id : null;
   const detailJob = detailId ? liveJob ?? jobs.find((j2) => j2.id === detailId) ?? null : null;
-  const panelRef = (0, import_react48.useRef)(panel);
+  const panelRef = (0, import_react49.useRef)(panel);
   panelRef.current = panel;
-  const screenRef = (0, import_react48.useRef)(screen);
+  const screenRef = (0, import_react49.useRef)(screen);
   screenRef.current = screen;
-  const oauthAlive = (0, import_react48.useRef)(true);
-  const oauthTimer = (0, import_react48.useRef)(null);
-  (0, import_react48.useEffect)(
+  const oauthAlive = (0, import_react49.useRef)(true);
+  const oauthTimer = (0, import_react49.useRef)(null);
+  (0, import_react49.useEffect)(
     () => () => {
       oauthAlive.current = false;
       if (oauthTimer.current) clearTimeout(oauthTimer.current);
     },
     []
   );
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     if (!detailId) return;
     let cancelled = false;
     let timer = null;
@@ -116570,7 +116915,7 @@ function AgentsDashboard({
     };
   }, [detailId]);
   const branchName = detailJob?.branch_name ?? null;
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     if (!detailId || !branchName) return;
     const key = `${detailId}:${branchName}`;
     if (diffFetchedFor.current === key) return;
@@ -116588,7 +116933,7 @@ function AgentsDashboard({
     };
   }, [detailId, branchName]);
   const liveSessionId = detailJob && !(0, import_client_core40.isTerminal)(detailJob.status) && detailJob.session_id ? detailJob.session_id : null;
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     if (!liveSessionId) return;
     liveIdRef.current = 0;
     setLiveItems([]);
@@ -116609,7 +116954,7 @@ function AgentsDashboard({
     });
     return () => sub.dispose();
   }, [liveSessionId]);
-  (0, import_react48.useEffect)(() => {
+  (0, import_react49.useEffect)(() => {
     let cancelled = false;
     void (async () => {
       try {
@@ -117265,14 +117610,14 @@ function LaunchFormView({ form, field: field2 }) {
 }
 
 // src/components/layout/TerminalTitle.tsx
-var import_react50 = __toESM(require_react(), 1);
+var import_react51 = __toESM(require_react(), 1);
 
 // src/vendor/ink/hooks/use-terminal-title.ts
-var import_react49 = __toESM(require_react(), 1);
+var import_react50 = __toESM(require_react(), 1);
 var import_strip_ansi5 = __toESM(require_strip_ansi(), 1);
 function useTerminalTitle(title) {
-  const writeRaw = (0, import_react49.useContext)(TerminalWriteContext);
-  (0, import_react49.useEffect)(() => {
+  const writeRaw = (0, import_react50.useContext)(TerminalWriteContext);
+  (0, import_react50.useEffect)(() => {
     if (title === null || !writeRaw) return;
     const clean = (0, import_strip_ansi5.default)(title);
     if (process.platform === "win32") {
@@ -117298,8 +117643,8 @@ function composeTerminalTitle(sessionTitle, streaming, frame) {
 function TerminalTitle({ appStore }) {
   const sessionTitle = useStoreSelector(appStore, (s) => s.sessionTitle);
   const streaming = useStoreSelector(appStore, (s) => s.status === "streaming");
-  const [frame, setFrame] = (0, import_react50.useState)(0);
-  (0, import_react50.useEffect)(() => {
+  const [frame, setFrame] = (0, import_react51.useState)(0);
+  (0, import_react51.useEffect)(() => {
     if (!streaming) return;
     const id = setInterval(
       () => setFrame((f) => (f + 1) % TITLE_ANIMATION_FRAMES.length),
@@ -117398,11 +117743,11 @@ function Root({
 }
 
 // src/components/layout/SignInScreen.tsx
-var import_react52 = __toESM(require_react(), 1);
+var import_react53 = __toESM(require_react(), 1);
 var import_client_core41 = __toESM(require_dist(), 1);
 
 // src/components/layout/splash/Splash.tsx
-var import_react51 = __toESM(require_react(), 1);
+var import_react52 = __toESM(require_react(), 1);
 
 // src/components/layout/splash/halfblock.ts
 var BLOCK = [" ", "\u2580", "\u2584", "\u2588"];
@@ -117721,7 +118066,7 @@ var TONE = {
 function Splash({ columns, rows, frame, copy }) {
   const theme = useTheme();
   const height = splashHeight(rows);
-  const shell2 = import_react51.default.useMemo(() => orbShell(), []);
+  const shell2 = import_react52.default.useMemo(() => orbShell(), []);
   const grid = splashFrame({ width: columns, rows: height, frame, shell: shell2, copy });
   return /* @__PURE__ */ (0, import_jsx_runtime77.jsx)(Box2, { flexDirection: "column", children: grid.map((spans, y2) => /* @__PURE__ */ (0, import_jsx_runtime77.jsx)(Text2, { wrap: "truncate", children: spans.length === 0 ? " " : spans.map((span, i2) => renderSpan(span, i2, theme)) }, y2)) });
 }
@@ -117767,15 +118112,15 @@ function SignInScreen({
   onSignedIn
 }) {
   const { exit } = use_app_default();
-  const [phase, setPhase] = import_react52.default.useState("idle");
-  const [url, setUrl] = import_react52.default.useState(null);
-  const [error, setError] = import_react52.default.useState(null);
-  const [frame, setFrame] = import_react52.default.useState(0);
+  const [phase, setPhase] = import_react53.default.useState("idle");
+  const [url, setUrl] = import_react53.default.useState(null);
+  const [error, setError] = import_react53.default.useState(null);
+  const [frame, setFrame] = import_react53.default.useState(0);
   const { columns, rows } = useTerminalSize();
-  const caps = import_react52.default.useMemo(() => detectTerminal2(), []);
+  const caps = import_react53.default.useMemo(() => detectTerminal2(), []);
   const copy = splashCopy(phase, error, url, columns);
   const useSplash = !splashDisabled() && caps.unicode && splashFits(columns, rows, copy.length);
-  import_react52.default.useEffect(() => {
+  import_react53.default.useEffect(() => {
     if (!useSplash || phase !== "idle") return;
     const t = setInterval(() => setFrame((f) => f + 1), TICK_MS);
     return () => clearInterval(t);
@@ -117893,6 +118238,68 @@ function SignInCard({
   ] });
 }
 
+// src/services/sessionAutosave.ts
+var DISPLAY_SAVE_INTERVAL_MS = 1e3;
+function createSessionAutosave(deps2) {
+  const save = deps2.save ?? saveSession;
+  const intervalMs = deps2.intervalMs ?? DISPLAY_SAVE_INTERVAL_MS;
+  let pending = null;
+  let timer = null;
+  const persistable = (s) => !!s.sessionId && s.messages.length > 0;
+  const write = (s, opts) => {
+    if (!s.sessionId) return;
+    try {
+      const title = resolveTitle(s.sessionId, s.messages);
+      if (opts.title) deps2.onTitle?.(title);
+      save({
+        sessionId: s.sessionId,
+        title,
+        updatedAt: Date.now(),
+        messages: s.messages,
+        clientState: s.clientState,
+        transcript: s.settled,
+        config: deps2.buildConfig()
+      });
+    } catch {
+    }
+  };
+  const cancel = () => {
+    if (timer !== null) {
+      clearTimeout(timer);
+      timer = null;
+    }
+    pending = null;
+  };
+  const fire = () => {
+    timer = null;
+    const s = pending;
+    pending = null;
+    if (s) write(s, { title: false });
+  };
+  return {
+    onChange: (next, prev) => {
+      if (next.messages !== prev.messages) {
+        if (!persistable(next)) return;
+        cancel();
+        write(next, { title: true });
+      } else if (next.settled !== prev.settled) {
+        if (!persistable(next)) return;
+        pending = next;
+        if (timer === null) {
+          timer = setTimeout(fire, intervalMs);
+          timer.unref?.();
+        }
+      }
+    },
+    flush: () => {
+      const s = pending;
+      cancel();
+      if (s) write(s, { title: false });
+    },
+    dispose: cancel
+  };
+}
+
 // src/services/presenceHost.ts
 var import_client_core42 = __toESM(require_dist(), 1);
 function startTuiPresence(opts) {
@@ -118539,7 +118946,9 @@ async function runHeadless(flags2) {
   const config = loadConfig();
   if (flags2.workspace) config.workspaceRoot = flags2.workspace;
   const secrets = createSecretStore();
-  const session = (0, import_client_core46.createAgentSession)(secrets, config);
+  const session = (0, import_client_core46.createAgentSession)(secrets, config, {
+    trace: (line) => console.error(`[orion-auth] ${line}`)
+  });
   const signedIn = await session.isSignedIn();
   if (!signedIn && !process.env.ORION_AUTH_TOKEN) {
     throw new Error(
@@ -118580,8 +118989,10 @@ async function runHeadless(flags2) {
     }),
     gatewayUrl: () => config.apiUrl,
     clientVersion: tuiVersion() ?? "0.0.0-dev",
-    // Mid-segment token-expiry heal — same closure as the transport authToken below.
-    renewBearer: async () => await session.currentFreshAccessToken() ?? process.env.ORION_AUTH_TOKEN ?? null,
+    // Mid-segment token-expiry heal — the FAIL-CLOSED renewal, not the fail-open
+    // freshness read the transport authToken below uses (that degradation hands the
+    // refused token back and burns the heal).
+    renewBearer: async (refused) => await session.renewedAccessToken(refused) ?? process.env.ORION_AUTH_TOKEN ?? null,
     log: brainLog
   });
   const turnTransport = (0, import_client_core46.createTurnTransport)({
@@ -118624,6 +119035,7 @@ async function runHeadless(flags2) {
     () => permissionStore.rules()
   );
   executor.enableFileHistorySpill();
+  executor.registerHostTool(import_client_core46.GOAL_REPORT_TOOL, async (params) => (0, import_client_core46.goalReportToolResult)(params));
   const boundary = createBoundaryHandlers({
     bridge,
     executor,
@@ -118655,6 +119067,9 @@ async function runHeadless(flags2) {
       permissionMode: a.permissionMode,
       workspaceRoot: config.workspaceRoot,
       clientType: "tui",
+      // Omitted (not placeholdered) in an unstamped dev/test run — see the interactive
+      // path in main.tsx for why the two absences must stay distinguishable.
+      clientVersion: tuiVersion() ?? void 0,
       mode: a.mode,
       reasoning: a.reasoning,
       tokenSaving: a.tokenSaving,
@@ -118682,7 +119097,8 @@ async function runHeadless(flags2) {
         getMessages: () => snapshot,
         getClientState: () => clientState,
         routing: routing(),
-        clientCapabilities: [],
+        // Every headless turn is a goal round — the claim tool is always on.
+        clientCapabilities: [import_client_core46.GOAL_CAPABILITY],
         drainQueuedInput: () => [],
         getOrionResources: () => (0, import_client_core46.buildOrionSnapshot)(config.workspaceRoot, void 0, sessionId),
         getFileHistoryManifest: () => executor.fileHistoryManifest(sessionId)
@@ -118698,7 +119114,11 @@ async function runHeadless(flags2) {
       throw new Error(typeof data.error === "string" ? data.error : "turn failed");
     }
     if (Array.isArray(data.messages)) messages = data.messages;
-    return { text: extractFinalAssistantText(data), evidence: (0, import_client_core46.goalEvidenceFromWire)(data.messages) };
+    return {
+      text: extractFinalAssistantText(data),
+      evidence: (0, import_client_core46.goalEvidenceFromWire)(data.messages),
+      claim: (0, import_client_core46.goalClaimFromWire)(data.messages)
+    };
   };
   const { endReason, turns } = await runGoalLoop({
     goal: flags2.goal,
@@ -118711,7 +119131,12 @@ async function runHeadless(flags2) {
         evidence,
         sessionId,
         // Lets the check read the user's `goalEvaluate` model choice.
-        workspaceRoot: config.workspaceRoot ?? null
+        workspaceRoot: config.workspaceRoot ?? null,
+        // The run's own model — the fallback when no evaluator model is
+        // configured, so the check never lands on the gateway's deployment
+        // default (see the interactive TUI's identical wiring).
+        sessionModel: routing().model,
+        sessionProvider: routing().provider
       });
       if (ruling.evaluated && !ruling.ok && ruling.achievable) {
         process.stderr.write(`[headless] not met yet \u2014 ${(0, import_client_core46.goalReasonLine)(ruling.reason)}
@@ -118934,27 +119359,20 @@ async function main() {
   const setSessionTitle = (title) => {
     appStore.setState((s) => s.sessionTitle === title ? s : { ...s, sessionTitle: title });
   };
-  const transcriptStore = createTranscriptStore((next, prev) => {
-    if (next.sessionId && next.messages !== prev.messages && next.messages.length > 0) {
-      try {
-        const title = resolveTitle(next.sessionId, next.messages);
-        setSessionTitle(title);
-        saveSession({
-          sessionId: next.sessionId,
-          title,
-          updatedAt: Date.now(),
-          messages: next.messages,
-          clientState: next.clientState,
-          // The LIVE routing config (not a frozen startup snapshot), so a
-          // mid-session /model or /persona change is what a later resume reuses.
-          config: sessionRoutingFromApp(appStore.getState())
-        });
-      } catch {
-      }
-    }
+  const autosave = createSessionAutosave({
+    // The LIVE routing config (not a frozen startup snapshot), so a
+    // mid-session /model or /persona change is what a later resume reuses.
+    buildConfig: () => sessionRoutingFromApp(appStore.getState()),
+    onTitle: setSessionTitle
+    // keep the terminal-tab title in step with the save
   });
+  const transcriptStore = createTranscriptStore(autosave.onChange);
   const secrets = createSecretStore();
-  const session = (0, import_client_core49.createAgentSession)(secrets, config);
+  const session = (0, import_client_core49.createAgentSession)(secrets, config, {
+    // Renewal/refresh breadcrumbs (step outcomes + timings, never tokens) — the evidence
+    // the 2026-08-22 refresh-wedge investigation lacked.
+    trace: (line) => console.error(`[orion-auth] ${line}`)
+  });
   const outcomes = new import_client_core49.OutcomeReporter({
     apiBaseUrl: () => config.accountsApiUrl,
     accessToken: () => session.currentAccessToken()
@@ -119027,10 +119445,10 @@ async function main() {
       }),
       gatewayUrl: () => config.apiUrl,
       clientVersion: tuiVersion() ?? "0.0.0-dev",
-      // Mid-segment token-expiry heal: the SAME bearer seam the per-segment authToken uses —
-      // an expired stored token forces its refresh, so calling it again IS the renewal (the
-      // brain retries once with the result); an emptied store re-gates the chat.
-      renewBearer: () => transportBearer(session, appStore, process.env.ORION_AUTH_TOKEN),
+      // Mid-segment token-expiry heal: the FAIL-CLOSED renewal seam, NOT the fail-open
+      // per-segment authToken read — the refused token rides in so the answer is decided
+      // on token identity, never local clocks; an emptied store re-gates the chat.
+      renewBearer: (refused) => renewedTransportBearer(session, appStore, refused, process.env.ORION_AUTH_TOKEN),
       log: brainLog
     });
     return brainInstance;
@@ -119141,7 +119559,9 @@ async function main() {
     if (resumeId) {
       const saved = loadSession(resumeId);
       if (saved) {
-        transcriptStore.setState(() => hydrate(saved.sessionId, saved.messages, saved.clientState));
+        transcriptStore.setState(
+          () => hydrate(saved.sessionId, saved.messages, saved.clientState, saved.transcript)
+        );
         appStore.setState((s) => ({ ...s, ...resumedRouting(s, saved.config) }));
         setSessionTitle(saved.title ?? "");
       }
@@ -119312,7 +119732,9 @@ async function main() {
     await bridge.closeSession(sessionId).catch(() => void 0);
     let restoredRouting = sessionRoutingFromApp(appStore.getState());
     if (saved) {
-      transcriptStore.setState(() => hydrate(saved.sessionId, saved.messages, saved.clientState));
+      transcriptStore.setState(
+        () => hydrate(saved.sessionId, saved.messages, saved.clientState, saved.transcript)
+      );
       const restored = resumedRouting(appStore.getState(), saved.config);
       appStore.setState((s) => ({ ...s, ...restored }));
       restoredRouting = { ...saved.config, ...restored };
@@ -119476,6 +119898,7 @@ async function main() {
   let app = null;
   let stopSignInWatch = null;
   const exit = () => {
+    autosave.flush();
     stopSignInWatch?.();
     presence.dispose();
     void rc?.dispose();
@@ -119769,6 +120192,11 @@ async function main() {
       workspaceRoot: config.workspaceRoot,
       clientType: "tui",
       // usage-telemetry surface tag
+      // …and the build behind that tag. `tuiVersion()` is null in an unstamped dev/test run,
+      // which becomes `undefined` here so the key is OMITTED rather than sent as a placeholder:
+      // "not reported" and "reported but unreadable" are different states downstream, and a dev
+      // build is the former.
+      clientVersion: tuiVersion() ?? void 0,
       // mode/reasoning/context_window ride the body too (rule 1) so a cold pod keeps
       // plan/ask read-only + the right model settings — not a per-pod set_* RPC.
       mode: a.mode,
@@ -119936,7 +120364,10 @@ async function main() {
             import_client_core49.DUET_REPLAN_CAPABILITY,
             // …and runs the planner's `hand_off` (leg marker, phase line, journal), so
             // planner entry may offer it (further leg-gated backend-side).
-            import_client_core49.DUET_HANDOFF_CAPABILITY
+            import_client_core49.DUET_HANDOFF_CAPABILITY,
+            // `goal` lights up the goal_report claim tool, and only while a goal is
+            // actually driving this conversation — an ordinary chat never sees it.
+            ...goalRunner !== null ? [import_client_core49.GOAL_CAPABILITY] : []
           ],
           extraBody: {
             ...appStore.getState().subagentsEnabled ? agentManager.parentExtraBody() : {},
@@ -120012,7 +120443,8 @@ async function main() {
         endSettle = {
           kind: "complete",
           finalText: (0, import_client_core49.finalAssistantTextFromWire)(data.messages),
-          evidence: (0, import_client_core49.goalEvidenceFromWire)(data.messages)
+          evidence: (0, import_client_core49.goalEvidenceFromWire)(data.messages),
+          claim: (0, import_client_core49.goalClaimFromWire)(data.messages)
         };
         (0, import_client_core48.recordTurnMetrics)({
           app: "tui",
@@ -120193,6 +120625,7 @@ async function main() {
     );
     return (0, import_client_core49.duetHandoffResult)();
   });
+  executor.registerHostTool(import_client_core49.GOAL_REPORT_TOOL, async (params) => (0, import_client_core49.goalReportToolResult)(params));
   const loopService = new LoopService({
     workspaceRoot: config.workspaceRoot,
     schedulePath: loopSchedulePathFor((0, import_client_core49.runsRootFor)("loops", config.workspaceRoot)),
@@ -120266,12 +120699,27 @@ async function main() {
           // stranger's routing.
           sessionId: goalSessionId ?? void 0,
           // Lets the check read the user's `goalEvaluate` model choice.
-          workspaceRoot: currentRouting().workspaceRoot ?? null
+          workspaceRoot: currentRouting().workspaceRoot ?? null,
+          // The session's model as THIS CLIENT knows it — the fallback when no
+          // evaluator model is configured. The gateway's own session record can
+          // still hold the deployment default for a local-brain session (routing
+          // rides segment bodies), and a check on that default is a check on a
+          // model this session never used.
+          sessionModel: currentRouting().model,
+          sessionProvider: currentRouting().provider
         });
-        if (ruling.evaluated && !ruling.ok && ruling.achievable) {
-          transcriptStore.setState((s) => appendGoalNoteFor(s, goalSessionId, (0, import_client_core49.goalNotMetRow)(ruling.reason)));
-        }
         return ruling;
+      },
+      // A round that did NOT meet the goal says so — in the judge's words when a
+      // check ran, in the agent's own honest not-done report when none did
+      // (goalRoundReason is the one mapping, shared by every client). Without it
+      // a long goal is a wall of identical continuation lines and a stuck one is
+      // indistinguishable from a working one.
+      onRound: (round) => {
+        const reason = (0, import_client_core49.goalRoundReason)(round);
+        if (reason !== "") {
+          transcriptStore.setState((s) => appendGoalNoteFor(s, goalSessionId, (0, import_client_core49.goalNotMetRow)(reason)));
+        }
       }
     });
     goalRunner = runner;
@@ -120287,6 +120735,7 @@ async function main() {
         runCommand: routeInput
       });
     });
+    transcriptStore.setState((s) => appendGoalNoteFor(s, goalSessionId, (0, import_client_core49.goalSetRow)(goal)));
   };
   const enqueueSteer = (text) => {
     appStore.setState((s) => ({ ...s, queuedMessages: [...s.queuedMessages, queuedSteer(text)] }));