tesseract-agent 0.11.14 → 0.11.16

package/dist-bundle/cli.js

@@ -11692,8 +11692,8 @@ var capitalizeFirstCharacter, error28;
 var init_lt = __esm({
   "../../node_modules/zod/v4/locales/lt.js"() {
     init_util();
-    capitalizeFirstCharacter = (text12) => {
-      return text12.charAt(0).toUpperCase() + text12.slice(1);
+    capitalizeFirstCharacter = (text13) => {
+      return text13.charAt(0).toUpperCase() + text13.slice(1);
     };
     error28 = () => {
       const Sizable = {
@@ -22599,6 +22599,14 @@ var init_capabilities = __esm({
         vars: [],
         content: `Whether a personal HeyGen key is set. Never returns the key itself.`
       },
+      {
+        id: "capability.image.has_avatar_free_tier",
+        group: "tools",
+        label: "Free avatar-video tier available?",
+        help: "What the model is told the `image.has_avatar_free_tier` App-Control capability does (image domain, read).",
+        vars: [],
+        content: `Whether the free Tesseract avatar tier can actually serve a request on this deployment \u2014 a signed-in account AND a HeyGen account behind our proxy. Check it before drafting a script: when it is false and the user has no HeyGen key of their own, generate_avatar_video cannot succeed.`
+      },
       {
         id: "capability.image.remove_provider_key",
         group: "tools",
@@ -23039,6 +23047,86 @@ var init_capabilities = __esm({
         vars: [],
         content: `Open the presentation surface in the app so a deck can be picked and presented.`
       },
+      {
+        id: "capability.present.list_decks",
+        group: "tools",
+        label: "List presentations",
+        help: "What the model is told the `present.list_decks` App-Control capability does (present domain, read).",
+        vars: [],
+        content: `Every presentation in the user's library, with its slide count and its deck folder \u2014 the handle every other presentation capability takes. Use it before editing, so you work on the deck the user means rather than making a second one.`
+      },
+      {
+        id: "capability.present.create_deck",
+        group: "tools",
+        label: "Create a presentation",
+        help: "What the model is told the `present.create_deck` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Make a new, empty Tesseract Stage presentation in the user's library (~/Documents/Tesseract/Presentations) and return its deck folder. This is how you make a presentation \u2014 NOT a PowerPoint file, NOT markdown, NOT an HTML canvas. Pass the title in the user's own words and language. Optionally set a theme: CSS custom properties every slide inherits, e.g. { "--bg": "#FFFFFF", "--ink": "#16130F", "--accent": "#D97757" }. Then write slides with write_slide.`
+      },
+      {
+        id: "capability.present.write_slide",
+        group: "tools",
+        label: "Write a slide",
+        help: "What the model is told the `present.write_slide` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Write one slide file into a presentation. A slide is a React component in TSX: \`export const meta = { id, title, summary?, notes?, transition?, builds? }\` plus a default-exported component. Path is \`slides/NN-name.tsx\` and FILENAME ORDER IS SLIDE ORDER, so number the prefixes (01, 02, 03\u2026); reordering later is a rename. Shared helpers may live anywhere else in the package and be imported relatively. Always run validate_deck afterwards.`
+      },
+      {
+        id: "capability.present.read_slide",
+        group: "tools",
+        label: "Read a slide",
+        help: "What the model is told the `present.read_slide` App-Control capability does (present domain, read).",
+        vars: [],
+        content: `Read one file back out of a presentation. Use it before editing a slide you did not just write, so a revision preserves what is already there instead of replacing it from memory.`
+      },
+      {
+        id: "capability.present.delete_slide",
+        group: "tools",
+        label: "Delete a slide",
+        help: "What the model is told the `present.delete_slide` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Remove one file from a presentation. Deleting a slide renumbers nothing \u2014 the remaining filenames still sort, so a gap in the numbering is harmless.`
+      },
+      {
+        id: "capability.present.validate_deck",
+        group: "tools",
+        label: "Check a presentation",
+        help: "What the model is told the `present.validate_deck` App-Control capability does (present domain, read).",
+        vars: [],
+        content: `Compile every slide and report what is wrong \u2014 syntax errors with line numbers, imports that do not resolve, missing or duplicate \`meta\`. ALWAYS call this after writing slides, and fix what it reports before telling the user the presentation is ready: a deck that fails does so in front of an audience. It reports load-time problems only; it cannot catch a mistake that appears only while a slide renders.`
+      },
+      {
+        id: "capability.present.set_deck_theme",
+        group: "tools",
+        label: "Set a presentation's theme",
+        help: "What the model is told the `present.set_deck_theme` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Replace the CSS custom properties every slide in a presentation inherits \u2014 the deck's look in one place. Restyling a deck is this call, not an edit to every slide.`
+      },
+      {
+        id: "capability.present.add_asset",
+        group: "tools",
+        label: "Add an image to a presentation",
+        help: "What the model is told the `present.add_asset` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Copy an image, photo or audio file from anywhere on disk INTO the presentation, and get back the path to import from a slide (\`import hero from '../assets/hero.png?url'\`). Do this for anything a slide shows: a presentation must carry its own files, or it breaks the moment it is moved or sent to someone.`
+      },
+      {
+        id: "capability.present.open_deck",
+        group: "tools",
+        label: "Open a presentation",
+        help: "What the model is told the `present.open_deck` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Open a presentation in the Stage tab so the user can see it. Checks it first and reports the problems instead if it cannot be shown.`
+      },
+      {
+        id: "capability.present.delete_deck",
+        group: "tools",
+        label: "Delete a presentation",
+        help: "What the model is told the `present.delete_deck` App-Control capability does (present domain, write).",
+        vars: [],
+        content: `Delete a whole presentation from the library, permanently. Ask the user first \u2014 this is their document, and there is no undo.`
+      },
       {
         id: "capability.present.end",
         group: "tools",
@@ -23703,6 +23791,14 @@ Apply a plan the user has approved. Requires the plan_hash from tutorial_plan_in
         help: "What the model is told `tutorial_await_decision` does \u2014 blocks until the user approves the tour, asks for changes, or asks to re-pick a target.",
         vars: [],
         content: `Wait for the user to decide on the tour card. Call this straight after tutorial_review_scenario and WAIT \u2014 do not carry on, do not start planning, do not fill the silence. It returns when they approve, ask for changes, or ask for a step to point at something else. Their in-place edits are saved automatically, so whatever wording they left is the wording that ships.`
+      },
+      {
+        id: "tool.capabilities.tesseract_capabilities",
+        group: "tools",
+        label: "tesseract_capabilities",
+        help: "What the model is told the `tesseract_capabilities` tool does \u2014 the one tool that hands it Tesseract's own capability map (docs/CAPABILITIES.md). This description is the only thing deciding whether the model consults the map before answering \u201Cwhat can you do?\u201D or declaring a feature impossible, so it is the highest-leverage entry here. The builder passes the live section index as the `sections` variable.",
+        vars: ["sections"],
+        content: `Return Tesseract's own capability map \u2014 what THE PRODUCT can do, which is far more than the tools you happen to hold this turn (most of Tesseract is UI, services and other clients you never call). Read it BEFORE answering any question about what Tesseract, or you inside it, can do: "what can you do?", "can Tesseract <x>?", "how do I <x> in this app?", "is there a way to", "does it support", "what features", "help me get started" \u2014 and before telling a user something is impossible. It also lists what is deliberately NOT built, which is the most common way to be wrong about this product, so never claim a feature is missing without checking here first. Sections: {{sections}}. Omit \`section\` for the whole map (~22 KB); pass a section number, title or keyword to get just that part when the question is narrow.`
       }
     ];
   }
@@ -23997,6 +24093,17 @@ var init_permissions = __esm({
   }
 });
 
+// ../../packages/shared/dist/platform-availability.js
+var HOSTING_AVAILABLE, SSO_AVAILABLE, CLOUD_SERVER_AVAILABLE;
+var init_platform_availability = __esm({
+  "../../packages/shared/dist/platform-availability.js"() {
+    "use strict";
+    HOSTING_AVAILABLE = false;
+    SSO_AVAILABLE = false;
+    CLOUD_SERVER_AVAILABLE = false;
+  }
+});
+
 // ../../packages/shared/dist/app-elements.js
 var APP_ELEMENTS, byId, APP_ELEMENT_IDS;
 var init_app_elements = __esm({
@@ -24315,6 +24422,13 @@ function schemaFieldRejected(status2, body) {
 function anthropicBaseUrl(env) {
   return env?.ANTHROPIC_BASE_URL?.trim() || process.env.ANTHROPIC_BASE_URL?.trim() || "https://api.anthropic.com";
 }
+function isAnthropicEndpoint(env) {
+  try {
+    return /(^|\.)api\.anthropic\.com$/i.test(new URL(anthropicBaseUrl(env)).hostname);
+  } catch {
+    return false;
+  }
+}
 var OAUTH_BETA_HEADER;
 var init_model_json = __esm({
   "../../packages/shared/dist/model-json.js"() {
@@ -24347,9 +24461,9 @@ function withRunDirective(userText, directive) {
   return `${head}${RUN_DIRECTIVE_MARK}
 ${directive}`;
 }
-function stripRunDirective(text12) {
-  const at = text12.indexOf(RUN_DIRECTIVE_MARK);
-  return at < 0 ? text12 : text12.slice(0, at).trimEnd();
+function stripRunDirective(text13) {
+  const at = text13.indexOf(RUN_DIRECTIVE_MARK);
+  return at < 0 ? text13 : text13.slice(0, at).trimEnd();
 }
 var RUN_DIRECTIVE_MARK;
 var init_run_directive = __esm({
@@ -24397,6 +24511,13 @@ var init_digit_recall = __esm({
   }
 });
 
+// ../../packages/shared/dist/tab-nav.js
+var init_tab_nav = __esm({
+  "../../packages/shared/dist/tab-nav.js"() {
+    "use strict";
+  }
+});
+
 // ../../packages/shared/dist/telemetry.js
 var TELEMETRY_EVENTS, EVENT_CATEGORY;
 var init_telemetry = __esm({
@@ -24697,6 +24818,7 @@ var NO_QUOTAS, NO_FEATURES, PLAN_CATALOG;
 var init_plans = __esm({
   "../../packages/shared/dist/plans.js"() {
     "use strict";
+    init_platform_availability();
     NO_QUOTAS = { computeHours: 0, storageGb: 0, egressGb: 0, videoSeconds: 0 };
     NO_FEATURES = {
       sync: false,
@@ -24725,7 +24847,7 @@ var init_plans = __esm({
         tagline: "Your machine, your phone, your voice.",
         features: [
           "Unlimited agent usage",
-          "Full IDE: editor, files, agent, browser tool",
+          "It operates this computer \u2014 screen, files and browser",
           "Voice mode",
           "Mobile app \u2014 reach your computer from your phone",
           "Cloud workspace \u2014 your machine and recent projects in one view",
@@ -24744,9 +24866,11 @@ var init_plans = __esm({
         features: [
           "Everything in Free",
           "Unlimited machines \u2014 run agents on all of them",
-          "Tesseract cloud server \u2014 a managed always-on agent in the cloud",
-          "Deploy to the cloud \u2014 your app on a *.tesseract.dev URL",
-          "Includes ~1 always-on service + 20 GB storage + 100 GB bandwidth (overage metered)",
+          ...CLOUD_SERVER_AVAILABLE ? ["Tesseract cloud server \u2014 a managed always-on agent in the cloud"] : [],
+          ...HOSTING_AVAILABLE ? [
+            "Deploy to the cloud \u2014 your app on a *.tesseract.dev URL",
+            "Includes ~1 always-on service + 20 GB storage + 100 GB bandwidth (overage metered)"
+          ] : [],
           "Premium missions \u2014 GDPR, security, UX, performance audits that fix & verify",
           "Sync settings across your devices",
           "Email support"
@@ -24756,10 +24880,10 @@ var init_plans = __esm({
           sync: true,
           mobile: true,
           cloudWorkspace: true,
-          cloudServer: true,
+          cloudServer: CLOUD_SERVER_AVAILABLE,
           remoteAgents: true,
           voice: true,
-          hosting: true,
+          hosting: HOSTING_AVAILABLE,
           plugins: true,
           missions: true,
           scheduling: true,
@@ -24780,26 +24904,27 @@ var init_plans = __esm({
           "Parallel agents",
           "Advanced browser automation",
           "API access",
-          "SSO, audit logs, centralized billing",
-          "Pooled cloud hosting \u2014 bigger shared quota",
+          ...SSO_AVAILABLE ? ["Company sign-on and audit log"] : [],
+          "Centralized billing across seats",
+          ...HOSTING_AVAILABLE ? ["Pooled cloud hosting \u2014 bigger shared quota"] : [],
           "Priority support"
         ],
         featurePolicy: {
           sync: true,
           mobile: true,
           cloudWorkspace: true,
-          cloudServer: true,
+          cloudServer: CLOUD_SERVER_AVAILABLE,
           remoteAgents: true,
           voice: true,
           team: true,
           parallelAgents: true,
           advancedBrowser: true,
-          hosting: true,
+          hosting: HOSTING_AVAILABLE,
           plugins: true,
           missions: true,
           scheduling: true,
           api: true,
-          sso: true,
+          sso: SSO_AVAILABLE,
           seats: 2,
           maxMachines: 0
         },
@@ -25520,8 +25645,26 @@ var init_engines = __esm({
         capabilities: CLAUDE_CAPABILITIES,
         runModeTiming: CLAUDE_RUN_MODE_TIMING,
         homepageUrl: "https://docs.claude.com/en/docs/claude-code",
-        installCommand: "npm install -g @anthropic-ai/claude-code",
-        installHint: "Tesseract can run Claude Code without the standalone CLI; install it to use a copy you manage yourself."
+        // The NATIVE installer, not npm. Two reasons, in order of how often they bite:
+        //  1. npm needs a Node toolchain the machine may simply not have — and a GUI-launched app
+        //     sees PATH=/usr/bin:/bin:/usr/sbin:/sbin, so even an nvm-managed node is invisible.
+        //     The native installer needs only curl/wget and a shell.
+        //  2. npm would land under our own `--prefix` (~/.tesseract/runtimes/bin), which the thing
+        //     that SPAWNS claude (agent-core's findUserInstalledClaude) does not search — so the
+        //     install would "succeed" and the engine would still read as missing. The native
+        //     installer writes ~/.local/bin/claude, which both the probe and the spawner know.
+        // `install.sh` hard-refuses Windows, and `irm | iex` cannot take the version argument, so
+        // Windows gets the documented scriptblock form rather than a quoting variant.
+        installCommand: "curl -fsSL https://claude.ai/install.sh | bash -s {version}",
+        installCommandWin: "& ([scriptblock]::Create((irm https://claude.ai/install.ps1))) {version}",
+        // Its own updater. A copy managed by brew/winget reports "up to date" and does nothing —
+        // which autoFixUnusable surfaces honestly via its post-update re-check rather than
+        // claiming success.
+        updateCommand: "claude update",
+        // The documented uninstall. Both halves: the launcher and the versions directory.
+        removeCommand: "rm -f ~/.local/bin/claude && rm -rf ~/.local/share/claude",
+        removeCommandWin: 'Remove-Item -Path "$env:USERPROFILE\\.local\\bin\\claude.exe" -Force; Remove-Item -Path "$env:USERPROFILE\\.local\\share\\claude" -Recurse -Force',
+        installHint: "Tesseract runs the Claude Code CLI you have installed rather than bundling one; install it to use this engine."
       },
       "openai-codex": {
         id: "openai-codex",
@@ -26071,6 +26214,7 @@ var init_runner_compat = __esm({
     "use strict";
     init_engines();
     init_providers();
+    init_model_catalog();
     GATEWAY_WIRES = {
       "claude-code": { kind: "anthropic-env" },
       "openai-codex": { kind: "codex-home" },
@@ -26337,6 +26481,10 @@ var init_runtimes = __esm({
         label: ENGINE_CATALOG[id].label,
         cliBinary: ENGINE_CATALOG[id].cliBinary,
         installCommand: ENGINE_CATALOG[id].installCommand,
+        installCommandWin: ENGINE_CATALOG[id].installCommandWin,
+        updateCommand: ENGINE_CATALOG[id].updateCommand,
+        removeCommand: ENGINE_CATALOG[id].removeCommand,
+        removeCommandWin: ENGINE_CATALOG[id].removeCommandWin,
         kind: "engine"
       })),
       { id: "ollama", label: "Ollama", cliBinary: "ollama", installCommand: "curl -fsSL https://ollama.com/install.sh | sh", kind: "tool" },
@@ -26482,26 +26630,47 @@ function providerBase(key2, which2) {
     return fromServer;
   return which2 === "anthropic" ? gatewayAnthropicBaseUrl(key2.baseUrl) : which2 === "openai" ? gatewayOpenAiBaseUrl(key2.baseUrl) : gatewayGeminiBaseUrl(key2.baseUrl);
 }
+function slotProviders(key2) {
+  const out = /* @__PURE__ */ new Map();
+  for (const slot of Object.keys(TIER_PROVIDER)) {
+    const id = key2.models[slot]?.trim();
+    if (id)
+      out.set(id, TIER_PROVIDER[slot]);
+  }
+  return out;
+}
 function tiers(engineId, key2, models) {
-  const agentTier = engineId === "claude-code" ? { main: key2.models.claude, fast: key2.models.claudeFast } : gatewayProviderForEngine(engineId) === "openai" ? { main: key2.models.codex ?? key2.models.gpt, fast: void 0 } : { main: void 0, fast: void 0 };
-  const served = new Set(Object.values(key2.models).filter((v) => typeof v === "string" && !!v));
+  const provider = gatewayProviderForEngine(engineId);
+  const preference = provider ? TIER_PREFERENCE[provider] : void 0;
+  const byModel = slotProviders(key2);
   const asked = (v) => {
     const t = v?.trim();
     if (!t)
       return void 0;
     if (t.includes("/"))
       return t;
-    return served.has(t) ? t : void 0;
+    return byModel.get(t) === provider ? t : void 0;
   };
-  const main2 = asked(models.main) || agentTier.main || key2.models.high;
-  const fast = asked(models.fast) || agentTier.fast || key2.models.low;
-  return { main: main2, fast };
+  const pick3 = (slots) => {
+    for (const slot of slots) {
+      const id = key2.models[slot]?.trim();
+      if (id)
+        return id;
+    }
+    return void 0;
+  };
+  const serverDefault = asked(key2.defaults?.model);
+  const main2 = asked(models.main) || serverDefault || preference && pick3(preference.main);
+  const fast = asked(models.fast) || serverDefault || preference && pick3(preference.fast) || main2;
+  return { main: main2 || void 0, fast: fast || void 0 };
 }
 function planGatewayRun(engineId, key2, models, homeBase) {
   const wire = gatewayWireFor(engineId);
   if (!wire)
     return void 0;
   const { main: main2, fast } = tiers(engineId, key2, models);
+  if (!main2 || !fast)
+    return void 0;
   const effort = ENGINE_CATALOG[engineId]?.modelControls.reasoningEfforts?.includes(models.reasoningEffort ?? "") ? models.reasoningEffort : void 0;
   return planEndpointRun(wire.kind, {
     baseUrl: wire.kind === "anthropic-env" ? providerBase(key2, "anthropic") : wire.kind === "gemini-env" ? providerBase(key2, "gemini") : providerBase(key2, "openai"),
@@ -26515,13 +26684,30 @@ function planGatewayRun(engineId, key2, models, homeBase) {
     homeKey: HOME_DIR_NAME[engineId]
   }, homeBase);
 }
-var HOME_DIR_NAME;
+var TIER_PROVIDER, TIER_PREFERENCE, HOME_DIR_NAME;
 var init_gateway_plan = __esm({
   "../../packages/shared/dist/gateway-plan.js"() {
     "use strict";
     init_runner_compat();
     init_engine_endpoint();
     init_engines();
+    TIER_PROVIDER = {
+      low: "openai",
+      high: "openai",
+      image: "openai",
+      codex: "openai",
+      gpt: "openai",
+      vision: "google-ai",
+      claude: "anthropic",
+      claudeFast: "anthropic"
+    };
+    TIER_PREFERENCE = {
+      // No fast rung of its own on the OpenAI side: Codex is one model plus a reasoning dial,
+      // and the nano model remains the cheap fallback for anything that asks for one.
+      openai: { main: ["codex", "gpt", "high"], fast: ["low", "high"] },
+      anthropic: { main: ["claude"], fast: ["claudeFast", "claude"] },
+      "google-ai": { main: ["vision"], fast: ["vision"] }
+    };
     HOME_DIR_NAME = {
       opencode: "opencode-bundled",
       "openai-codex": "gateway-openai-codex"
@@ -27637,6 +27823,14 @@ var init_stage_types = __esm({
   }
 });
 
+// ../../packages/shared/dist/deck-package.js
+var init_deck_package = __esm({
+  "../../packages/shared/dist/deck-package.js"() {
+    "use strict";
+    init_stage_types();
+  }
+});
+
 // ../../packages/shared/dist/rdesk-client-ipc.js
 var init_rdesk_client_ipc = __esm({
   "../../packages/shared/dist/rdesk-client-ipc.js"() {
@@ -27662,10 +27856,10 @@ var init_user_dialog = __esm({
 });
 
 // ../../packages/shared/dist/session-ops.js
-function cleanTaskNotifications(text12) {
-  if (!text12.includes("<task-notification>"))
-    return text12;
-  return text12.replace(/<task-notification>([\s\S]*?)<\/task-notification>/g, (_all, inner) => {
+function cleanTaskNotifications(text13) {
+  if (!text13.includes("<task-notification>"))
+    return text13;
+  return text13.replace(/<task-notification>([\s\S]*?)<\/task-notification>/g, (_all, inner) => {
     const g = (name) => {
       const m = new RegExp(`<${name}>([\\s\\S]*?)</${name}>`).exec(inner);
       return m ? m[1].trim() : "";
@@ -27676,8 +27870,8 @@ function cleanTaskNotifications(text12) {
   }).trim();
 }
 function transcriptToText(msgs, cap = MERGE_PER_SOURCE_CAP) {
-  const text12 = msgs.map((m) => `${m.role === "user" ? "User" : "Assistant"}: ${cleanTaskNotifications(m.content)}`).join("\n").slice(0, cap);
-  return text12.trim() ? text12 : "";
+  const text13 = msgs.map((m) => `${m.role === "user" ? "User" : "Assistant"}: ${cleanTaskNotifications(m.content)}`).join("\n").slice(0, cap);
+  return text13.trim() ? text13 : "";
 }
 function buildMergeSeed(transcripts) {
   return [
@@ -27689,10 +27883,10 @@ function buildMergeSeed(transcripts) {
 ${t}`)
   ].join("\n\n");
 }
-function parseSummaryReply(text12) {
-  const m = /^\s*TITLE:\s*(.+?)\s*\n-{3,}\s*\n([\s\S]+)$/.exec(text12);
+function parseSummaryReply(text13) {
+  const m = /^\s*TITLE:\s*(.+?)\s*\n-{3,}\s*\n([\s\S]+)$/.exec(text13);
   const title = m?.[1]?.trim();
-  const summary = (m?.[2] ?? text12).trim();
+  const summary = (m?.[2] ?? text13).trim();
   return title ? { title, summary } : { summary };
 }
 var MERGE_PER_SOURCE_CAP;
@@ -27797,6 +27991,7 @@ var init_dist2 = __esm({
     "use strict";
     init_surface_merge();
     init_permissions();
+    init_platform_availability();
     init_app_elements();
     init_ws_protocol();
     init_context_overflow();
@@ -27807,6 +28002,7 @@ var init_dist2 = __esm({
     init_run_directive();
     init_proactive_compaction();
     init_digit_recall();
+    init_tab_nav();
     init_telemetry();
     init_error_report();
     init_eula();
@@ -27849,6 +28045,7 @@ var init_dist2 = __esm({
     init_chat_slash();
     init_present_protocol();
     init_stage_types();
+    init_deck_package();
     init_rdesk_client_ipc();
     init_user_dialog();
     init_session_ops();
@@ -30539,8 +30736,8 @@ function makeApi(deps, toolId, tier) {
       await h.close();
       return r.cancelled ? null : r.value ?? [];
     },
-    notify: async (text12, opts) => {
-      await api.open({ kind: "markdown", initial: { markdown: text12, level: opts?.level } });
+    notify: async (text13, opts) => {
+      await api.open({ kind: "markdown", initial: { markdown: text13, level: opts?.level } });
     }
   };
   return api;
@@ -30551,11 +30748,11 @@ function buildToolCtx(deps, sessionId, toolId, log10 = NOOP_LOG, tier = "third-p
     return getSid();
   }, toolId, log: log10 };
 }
-function wrapCtxTool(tool21, ctx2) {
-  const raw = tool21.__ctxHandler;
+function wrapCtxTool(tool22, ctx2) {
+  const raw = tool22.__ctxHandler;
   if (typeof raw !== "function")
-    return tool21;
-  return { ...tool21, handler: async (args) => raw(args, ctx2) };
+    return tool22;
+  return { ...tool22, handler: async (args) => raw(args, ctx2) };
 }
 var NOOP_LOG;
 var init_surface_ctx = __esm({
@@ -30713,11 +30910,11 @@ var init_hook_bus = __esm({
 // ../../packages/agent-core/dist/jobs/file-tailer.js
 import { statSync } from "node:fs";
 import { open } from "node:fs/promises";
-function parseBackgroundTaskResult(text12) {
-  if (!text12 || !text12.includes(".output"))
+function parseBackgroundTaskResult(text13) {
+  if (!text13 || !text13.includes(".output"))
     return null;
-  const id = /\bID:\s*([A-Za-z0-9_-]+)/.exec(text12);
-  const path6 = /Output is being written to:\s*([^\s]+\.output)/.exec(text12);
+  const id = /\bID:\s*([A-Za-z0-9_-]+)/.exec(text13);
+  const path6 = /Output is being written to:\s*([^\s]+\.output)/.exec(text13);
   if (!id?.[1] || !path6?.[1])
     return null;
   return { taskId: id[1], outputPath: path6[1] };
@@ -31737,6 +31934,8 @@ var init_parallel_tools = __esm({
       "browser_events",
       "capture_element_styles",
       // ── Listings, capability probes and status reads.
+      //    tesseract_capabilities returns an inlined constant — concurrent calls are indistinguishable.
+      "tesseract_capabilities",
       "list_effects",
       "list_upscale_models",
       "list_voices",
@@ -31789,8 +31988,8 @@ var init_tool_spec = __esm({
 import { tool as tool14 } from "@anthropic-ai/claude-agent-sdk";
 function buildScreenControlSdkTools(p) {
   return screenControlSpecs().map((spec) => tool14(spec.name, spec.description, zodShapeFromParams(spec.params), async (args) => {
-    const text12 = await p.exec(spec.name, args ?? {});
-    return { content: [{ type: "text", text: text12 || "Done." }] };
+    const text13 = await p.exec(spec.name, args ?? {});
+    return { content: [{ type: "text", text: text13 || "Done." }] };
   }));
 }
 var ANNOTATE_STYLES, SCREEN_CONTROL_SHAPES, screenControlSpecs;
@@ -32596,6 +32795,10 @@ ${JSON.stringify(r, null, 2)}`
       { id: "settings.has_search_key", domain: "settings", title: "Web search available?", input: external_exports.object({}), mutation: "read", availability: "host", binding: { kind: "ipc", channel: "serp", verb: "hasKey" } },
       { id: "image.set_avatar_key", domain: "image", title: "Set avatar-video (HeyGen) key", input: external_exports.object({ api_key: external_exports.string().describe("HeyGen API key (secret); blank clears.") }), mutation: "write", availability: "host", binding: { kind: "ipc", channel: "heygen", verb: "setKey" } },
       { id: "image.has_avatar_key", domain: "image", title: "Avatar-video key configured?", input: external_exports.object({}), mutation: "read", availability: "host", binding: { kind: "ipc", channel: "heygen", verb: "hasKey" } },
+      // Whether the FREE brokered tier can serve an avatar video HERE — the user's own key is
+      // the other half, above. Worth asking before drafting a script: the deployment may hold
+      // no HeyGen account, and generate_avatar_video then fails at submit with the work done.
+      { id: "image.has_avatar_free_tier", domain: "image", title: "Free avatar-video tier available?", input: external_exports.object({}), mutation: "read", availability: "host", binding: { kind: "ipc", channel: "heygen", verb: "brokered" } },
       { id: "image.remove_provider_key", domain: "image", title: "Remove image provider key", input: external_exports.object({ provider_id: IMAGE_PROVIDER }), mutation: "write", availability: "host", binding: { kind: "ipc", channel: "imageEdit", verb: "removeKey" } },
       { id: "image.set_default_provider", domain: "image", title: "Set default image provider", input: external_exports.object({ provider_id: IMAGE_PROVIDER }), mutation: "write", availability: "host", binding: { kind: "ipc", channel: "imageEdit", verb: "setDefault" } },
       { id: "image.set_provider_model", domain: "image", title: "Set image provider model", input: external_exports.object({ provider_id: IMAGE_PROVIDER, model: external_exports.string() }), mutation: "write", availability: "host", binding: { kind: "ipc", channel: "imageEdit", verb: "setModel" } },
@@ -32760,6 +32963,134 @@ ${JSON.stringify(r, null, 2)}`
         availability: "desktop",
         binding: { kind: "command", command: "app.openStage" }
       },
+      // ── The presentation LIBRARY: authoring, not driving ──────────────────────────────────
+      // Everything above drives a deck that is already running, and lives in the daemon because
+      // a phone remote reaches it. These WRITE FILES, so they are 'desktop': the library is a
+      // folder in the user's Documents, and only the desktop process can touch it.
+      //
+      // A deck is TSX — the same slide contract the app's own decks use — so the model authors
+      // by writing files and then calling `validate_deck` until it comes back clean. That loop
+      // is the whole design: without it the first sign of a stray bracket on slide 14 is a
+      // blank rectangle at the front of a room.
+      {
+        id: "present.list_decks",
+        domain: "present",
+        title: "List presentations",
+        input: external_exports.object({}),
+        mutation: "read",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "list" }
+      },
+      {
+        id: "present.create_deck",
+        domain: "present",
+        title: "Create a presentation",
+        input: external_exports.object({
+          title: external_exports.string().describe("What the presentation is called. Shown in the library and used for its folder name; keep the user's own wording and language."),
+          description: external_exports.string().optional().describe("One line about what it is for."),
+          theme: external_exports.record(external_exports.string(), external_exports.string()).optional().describe('CSS custom properties applied to every slide, e.g. { "--bg": "#FFFFFF", "--ink": "#16130F", "--accent": "#D97757" }.')
+        }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "create" },
+        summarize: (r) => `Created the presentation "${r?.title ?? ""}".`
+      },
+      {
+        id: "present.write_slide",
+        domain: "present",
+        title: "Write a slide",
+        input: external_exports.object({
+          deck: external_exports.string().describe("The deck folder, exactly as `list_decks` or `create_deck` returned it (ends in .tessdeck)."),
+          path: external_exports.string().describe('Path inside the presentation, e.g. "slides/03-pricing.tsx". Filename order IS slide order, so number the prefixes. Helper files may live anywhere in the package.'),
+          source: external_exports.string().describe("The whole file. A slide exports `meta` ({ id, title, summary?, notes?, transition?, builds? }) and a default React component.")
+        }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "writeFile" },
+        summarize: (_r, i) => `Wrote ${i.path ?? "a slide"}.`
+      },
+      {
+        id: "present.read_slide",
+        domain: "present",
+        title: "Read a slide",
+        input: external_exports.object({
+          deck: external_exports.string().describe("The deck folder."),
+          path: external_exports.string().describe('Path inside the presentation, e.g. "slides/03-pricing.tsx".')
+        }),
+        mutation: "read",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "readFile" }
+      },
+      {
+        id: "present.delete_slide",
+        domain: "present",
+        title: "Delete a slide",
+        input: external_exports.object({
+          deck: external_exports.string().describe("The deck folder."),
+          path: external_exports.string().describe("Path inside the presentation.")
+        }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "deleteFile" },
+        summarize: (_r, i) => `Deleted ${i.path ?? "a slide"}.`
+      },
+      {
+        id: "present.validate_deck",
+        domain: "present",
+        title: "Check a presentation",
+        input: external_exports.object({ deck: external_exports.string().describe("The deck folder.") }),
+        mutation: "read",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "validate" },
+        summarize: (r) => typeof r === "string" ? r : "Checked the presentation."
+      },
+      {
+        id: "present.set_deck_theme",
+        domain: "present",
+        title: "Set a presentation\u2019s theme",
+        input: external_exports.object({
+          deck: external_exports.string().describe("The deck folder."),
+          theme: external_exports.record(external_exports.string(), external_exports.string()).describe(`CSS custom properties, e.g. { "--bg": "#0C0A14", "--ink": "#FFFFFF" }. Replaces the deck's current theme.`)
+        }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "setTheme" },
+        summarize: () => "Updated the presentation\u2019s theme."
+      },
+      {
+        id: "present.add_asset",
+        domain: "present",
+        title: "Add an image to a presentation",
+        input: external_exports.object({
+          deck: external_exports.string().describe("The deck folder."),
+          source_path: external_exports.string().describe("Absolute path of the file to copy in \u2014 a generated image, a photo, an audio clip."),
+          name: external_exports.string().optional().describe("Filename to use inside the presentation.")
+        }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "addAsset" },
+        summarize: (r) => `Added ${typeof r === "string" ? r : "an asset"} to the presentation.`
+      },
+      {
+        id: "present.open_deck",
+        domain: "present",
+        title: "Open a presentation",
+        input: external_exports.object({ deck: external_exports.string().describe("The deck folder.") }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "open" },
+        summarize: () => "Opened the presentation in Stage."
+      },
+      {
+        id: "present.delete_deck",
+        domain: "present",
+        title: "Delete a presentation",
+        input: external_exports.object({ deck: external_exports.string().describe("The deck folder.") }),
+        mutation: "write",
+        availability: "desktop",
+        binding: { kind: "ipc", channel: "decklib", verb: "delete" },
+        summarize: (_r, i) => `Deleted the presentation ${i.deck ?? ""}.`
+      },
       {
         id: "present.end",
         domain: "present",
@@ -32954,6 +33285,75 @@ var init_app_control_tools = __esm({
   }
 });
 
+// ../../packages/agent-core/dist/capabilities-doc.generated.js
+var CAPABILITIES_DOC;
+var init_capabilities_doc_generated = __esm({
+  "../../packages/agent-core/dist/capabilities-doc.generated.js"() {
+    "use strict";
+    CAPABILITIES_DOC = '# Tesseract \u2014 what the product can do\n\nOne-page map of **every user-reachable capability**, derived from the 80 area briefs in\n[`functional-testing/`](functional-testing/). It is the source for the `tesseract_capabilities`\ntool, so the agent can answer "what can you do?" about *Tesseract*, not just about its own toolbelt.\n\n> Read this before telling a user something is or isn\'t possible. \xA718 lists what is deliberately\n> **not** built \u2014 promising any of it is the most common way to be wrong about this product.\n\n---\n\n## 1. What Tesseract is\n\nA desktop-first AI workspace: an always-on agent that can drive your machine, your browser and your\nfiles; plus a fleet layer that makes every machine you own reachable from any of them; plus a set of\ncreative, communication and security products built on the same transport. It ships as **eight\nseparate clients** and is not a single app.\n\n## 2. Clients (each a distinct product)\n\n| Client | What it is |\n|---|---|\n| **Desktop** (Electron, mac/Win/Linux) | The full product. Tab workspace \u2014 **no router**: a recursive split-pane tree of tab groups, **24 tab kinds**, **10 dockable panels** (dock left/right/bottom, float, detach), multi-window, native menu, command + search palettes (**31 stable command ids**), \u23181\u20130 tab assign/recall, per-machine keybinding overrides, memory governor + layout restore. |\n| **Web** (`dist-web`) | Same React renderer over a relay transport. **No local agent, no local engine** \u2014 it always runs on a remote host. Terminals are all remote and pinned to the opening host. Documented stubs: undo-delete, engines, runner configs, window resize; voice keys sit in `localStorage`. Always auth-gated. |\n| **Mobile** (Flutter, iOS/Android/macOS) | A **roaming client** \u2014 it never hosts an agent. Chat with streaming, team chat, present-follower, full password vault (incl. TOTP + native autofill), realtime voice, rdesk viewer, clipboard sync, push. Uniquely: **phone-as-host** (serve your photo library and files to your desktop) and a create-video screen. |\n| **CLI** `tesseract-agent` (npm) | Headless daemon, ~18 commands: `login/logout/whoami`, `run`, service `install/start/stop/restart/status/logs`, `link add`, `runner \u2026`, `net \u2026`, self-update. `--instance <id>` namespaces state dir, service name and device id. Docker-friendly (`login --token` then `run` as PID 1). |\n| **Browser extension** (Chrome MV3) | Claude sidebar (sessions, slash commands, todos, sources, DOM tree, run modes), element picker, vault/autofill popup with biometrics, QR pairing, fullpage + plan views. Talks to the daemon through a native-messaging companion host. |\n| **Remote Desktop** (`apps/rdesk`) | Slim standalone binary, ~\xBC the size \u2014 ships **no AI/browser payload**. Server/client/chooser roles, coexists with the full daemon (demotes itself to client rather than quitting). |\n| **Mesh** (`apps/mesh`) | Slim standalone binary for the private network only \u2014 "moves packets, not pixels". Create a mesh, enrol, list peers. No role chooser by design. |\n| **Thin installer** (Flutter, ~20\u201340 MB) | The default download. Resolves the release feed at run time, picks the arch-correct asset, streams + sha512-verifies, installs, launches. Version-agnostic. |\n\nPlus the **admin/operations console** (`admin.tesseract.dev`: gateway credentials, users and keys,\nerror inspector, remediation trigger, audit log) and the **landing site** with its waitlist.\n\n## 3. The agent\n\n- **Turn lifecycle**: stream, interrupt, rapid-follow-up auto-cancel (first seconds only), stall\n  watchdog, orphan-turn recovery, token compaction, usage-limit handling, cost ledger per session.\n- **Run modes**: **5 permission modes \xD7 6 effort levels**, thinking budget, per-turn engine/model pick.\n  Default permission mode is `bypassPermissions`.\n- **Interactive cards** (~9): permission request, plan review, elicitation, confirm, verification,\n  user dialog, skill UI, archive password, unattended report. "Deny & stop" also aborts the turn.\n- **Block renderers** (~9): mission, subagent, report, sources, provenance, event, notice, surface,\n  image grid \u2014 plus tool-run cards joined at render time with 6/8-line clamping.\n- **Composer** (~25 actions): attach, slash commands, @-mention, reverse search, screen-region\n  capture, element picker, voice, undo-last-turn, queued-message reorder.\n- **Sessions**: list, search (one host-side search across every engine\'s stored conversations),\n  resume, summarize, **fork**, merge, delete-message, keep-alive, focus; session mirror + transfer;\n  share a conversation by unguessable capability token.\n- **Subsystems**: reinforced verification, plan splitter, narrator (live status strip, capped at 24\n  model calls/turn), hook bus (9 events), option ratings, unattended mode.\n- **Also**: a playable **chess** surface (5 tools) and chat slash toys (`/shrug`, `/tableflip`, \u2026).\n\n## 4. Engines, runners, gateway\n\n- **4 engines \xD7 3 auth modes** (`oauth` / `apiKey` / `localCli`), a 24-capability engine matrix,\n  engine + model swap mid-session (model/permission-mode reconcile live; effort/cwd/MCP/system-prompt\n  force a respawn).\n- **Runner config pool** with rotation, cooldown and failover; auto-retry is bounded and only fires\n  when the turn did no work.\n- **Provider gateway** \u2014 a credential-injecting reverse proxy, **19 routes** across AGENT (anthropic,\n  openai, google-ai, groq, xai, deepseek, moonshot, openrouter, custom-openai, customer-litellm,\n  azure-openai), EMBEDDING, SEARCH (serpapi), VIDEO (heygen, gemini), VOICE, MEDIA (klipy, unsplash,\n  pexels). Virtual keys `tsk_live_*`, budgets, LiteLLM price map, spend ledger, credential pools with\n  health-based failover that never crosses a category. Models are named the way their makers\n  name them \u2014 `claude-sonnet-4-6`, `claude-haiku-4-5-20251001`, `gpt-6-astra`, `gpt-5.5`,\n  `gpt-5.4-mini`, `gpt-5.4-nano`, `gemini-2.5-flash`, `gpt-image-2` ($0.10/image flat) \u2014 and a\n  signed-in key may also name a model we do not host as `vendor/model`.\n- **Framework cross-product gate**: the user\'s self-updating `claude` CLI \xD7 the pinned Agent SDK,\n  verified nightly across pinned CLI versions.\n\n## 5. Files, editors, viewers\n\n- **Finder-like browser**: list/grid/columns, breadcrumbs, bookmarks + OS favourites, **host\n  switcher** (every op can be remote), new/rename (F2)/move/duplicate/cut-copy-paste/delete + undo,\n  Get Info, send-to-machine, find-in-files, native drag in **and out** (macOS `NSFilePromiseProvider`\n  \u2014 drag a not-yet-downloaded remote file to Finder).\n- **~20 typed viewers/editors**: Monaco source editor, PDF (view + edit), Word/docx, spreadsheets,\n  presentations, markdown, data grid, hex, audio, video, font, HTML canvas, diff, info.\n- **Archives as folders**: ~20 formats (zip, 7z, tar, gz/bz2/xz/zst, rar, iso, wim, cab, cpio, lzh\u2026)\n  browsed, extracted and **edited in place** from the same tree. `rar`/`iso`/`cab` are read-only.\n  Encrypted archives prompt for a password and can remember it.\n- **Image editor**: layered canvas, 10 tools (marquee, lasso, move, crop, paint, eraser, fill,\n  eyedropper, text, zoom), 25 rail controls, **200+ AI effect styles**, layers, adjust/resize, markup,\n  and 3 AI ops (`prompt`/`inpaint`/`outpaint`), transparent-background output, animate\u2192video.\n- **Video editor**: EDL timeline (cut/trim/reorder/transitions/speed/crop/reframe/flip/reverse/colour\n  effects/audio tracks), burned-in captions, **18 MCP tools** \u2014 probe, render, frame extract, silence\n  detect, transcribe with diarization, extract/isolate audio, music generation, voice list/clone/TTS,\n  avatars, caption export, effects, upscale (ffmpeg + local Real-ESRGAN free; fal-Topaz paid).\n- **Undo & time travel**: agent-driven **file rewind** (undo what a turn wrote), file-tree \u2318Z with a\n  per-window trash, workspace snapshots and git checkpoints, canvas/design version history with\n  diff-and-restore, and message deletion with uniform semantics across engines.\n- **Native inspectors**: **Flutter** widget inspector (tree, on-device tap-to-pick, properties,\n  deterministic Dart source edits, hot reload) and **React Native** (source binding + AST edits).\n\n## 6. Create, Design Studio, Stage, Publish\n\n- **Create** \u2014 5 generative document formats (incl. infographic and poster), ~90 actions: outline\n  ops, 10 insert kinds, card generation, AI layouts, export.\n- **Design Studio** \u2014 a 10-stage wizard (pick \u2192 launch/browse \u2192 preview \u2192 target \u2192 inspect \u2192 brief \u2192\n  build \u2192 QA \u2192 deploy) over **254 templates across 19 industry verticals**, Figma import, in-studio\n  theme/token editing.\n- **Stage** \u2014 presentation engine: decks, slides, transitions, **slide audio** (narration/music/sfx\n  with music ducking under narration), a live assistant, presenter mode, zoom/blank. 8 present tools\n  let the agent drive the deck; followers converge from absolute-state snapshots.\n- **Export**: PowerPoint (.pptx), deck and card export, PNG.\n- **Publish** \u2014 private/org/public visibility, server-rendered public pages on a 192-bit token, live\n  data sources (SSRF-guarded), embeds; **community gallery** with explore/following/team/mine, like,\n  follow and clone.\n- **Deploy** \u2014 one-click hosting to `*.tesseract.dev` in per-user hardened containers (cap-drop ALL,\n  no-new-privileges, read-only, egress-locked), metered on compute/storage/egress. One of the few\n  genuinely entitlement-gated features. A separate **per-user cloud agent** container is provisioned\n  on demand so you have a machine in the fleet even with every laptop closed.\n\n## 7. Generative media\n\n| What | Notes |\n|---|---|\n| **Images** | 2 providers (OpenAI gpt-image-2, Google). Generate (4-up by default), edit, inpaint/outpaint, transparent background (inpaint + chroma-key). **$0.10/image**. Ungated, BYO key. |\n| **Stock images** | AI-ranked Unsplash/Pexels search as its own tab. Free tier, rate-limited. |\n| **Video** | Google Veo 3.1 \u2014 4/6/8s clips, 720p/1080p, 16:9 or 9:16, keyframe conditioning (first/last frame), native audio. Free on the bundled tier; otherwise cost-confirmed. Multi-scene storyboards chain clip-to-clip for longer videos. |\n| **Avatar video** | HeyGen talking presenter from a script. |\n| **Music / speech** | ElevenLabs music generation, TTS, and instant **voice cloning**. |\n| **Fonts & brand** | Prompt \u2192 AI glyph sheets \u2192 **vision QC** \u2192 vectorize \u2192 kerning/spacing \u2192 a real installable font. Plus logo/wordmark candidates, SVG lockups and a brand kit. Assembly/vectorize/build are local and free. |\n| **Trending effects** | One-tap video effects (hug/kiss, squish, bring-photo-to-life, age, anime restyle, 3D figurine, outfit change, consent-gated face-swap\u2026). |\n\n## 8. Voice\n\n- **3 realtime providers**: OpenAI Realtime, Gemini Live, ElevenLabs ConvAI \u2014 plus a non-realtime\n  **STT\u2192LLM\u2192TTS pipeline cascade**. Audio goes **client\u2194provider direct**; the daemon only mints the\n  ephemeral credential and runs the control loop.\n- Group calls, live captions, and the **\u2325Space voice widget**.\n- **Voice as a control modality**: the realtime model is the *operator*, Claude Code is the *worker*.\n  It decomposes a spoken request into one small dispatched step at a time, all to the same agent\n  session, and is explicitly forbidden from claiming an outcome the agent did not report \u2014 when\n  unsure it dispatches a check. Its own screen view is a deliberately low-res ~1 fps grab.\n\n## 9. Computer control\n\n- **Two distinct MCP servers**: `tesseract-computer` (**26 tools** \u2014 raw control: move/click/drag/\n  scroll/key/type, see_screen, read_text, read_ui (accessibility), clipboard, windows, apps, open\n  url/path, notify, annotate, draw) and `tesseract-screen` (**15 tools** \u2014 a guided\n  look \u2192 figure_out_next \u2192 perform_step \u2192 **verify** loop that can fail and retry).\n- Plus `tesseract-os-control`: processes, network, structured fs, AX tree + AX actions, preferred app\n  and usage profile, screen overlays (arrow/bubble/highlight/text/popup/choice), and\n  `request_user_input` / `confirm_action`.\n- **Click grounding** is AX-tree + a local Moondream vision sidecar (free); screenshots are\n  Retina-aware and downscaled to point coordinates so clicks line up.\n- **Off by default** \u2014 `computerControlEnabled` must be turned on.\n- **\u2325Space co-pilot HUD** + **13 daemon-owned windows** (spotlight, pastebar, publisher, annotate,\n  draw, overlay, input, choice, consent, control-bar, ai-cursor, rdesk call/client), the tray, screen-\n  region capture with multi-display number flash, and `tesseract://` deep links. The HUD is\n  deliberately **invisible to the AI\'s own screenshots**.\n\n## 10. Integrated browser\n\n- In-app browser tabs with a shared persist partition, per-tab zoom, OAuth popups, URL-safety and\n  proxy routing.\n- **Agent control over CDP**: navigate, snapshot, screenshot (viewport + full page), click (synthetic\n  and real trusted input), type, key, eval, cookies, raw CDP for any domain, buffered event draining.\n  Drives the **user\'s real logged-in browser** via the companion extension, or the built-in engine.\n- **Inspectors**: DOM tree, properties, native inspector; markup pen; click-to-source (JSX elements\n  resolve to their source line).\n- **6 Toolkit mission playbooks**: accessibility, GDPR/cookies, health, performance, SEO, UX review \u2014\n  each configures, runs, and emits a structured report.\n- **`appbrowser` collaboration**: presence, cursors, comments and edits on a visible tab.\n\n## 11. Web search\n\n`serp_*` over **121 engines / 1,726 parameters**, ~19 tools grouped by family: web, news, images\n(incl. reverse-image and Google Lens), video (incl. YouTube transcripts), maps/local, shopping,\nmarketplaces (Amazon/eBay/Walmart/Home Depot/Zillow), travel (flights/hotels), places & reviews,\nacademic (Scholar/patents), jobs, finance & trends, app stores, ads transparency, social.\nBrokered free tier: **100 searches/month signed in, 10/month anonymous** \u2014 the only hard per-user\nquota in the product.\n\n## 12. Multi-machine\n\n- **Host registry & fleet**: every machine you sign into registers itself; pick one and run the turn\n  there. Dual-role nodes are both client and host at once.\n- **Remote fs + terminals** over the relay (9 relayed channels: agent, signal, browser, frame, fs,\n  term, editor, rdesk, present). A remote driver may only launch an enumerated interpreter.\n- **File Provider (macOS)**: remote machines appear as native **Finder locations** \u2014 browse, read,\n  write, rename, move, Trash + Put Back, thumbnails, progress. Identity survives rename/move.\n- **Drops** \u2014 AirDrop-like sharing to your own devices or another account. E2E-sealed, blind fan-out\n  (first device to accept wins; the sender never learns which), receive policies + receive codes,\n  blocks and abuse reports that are deliberately **indistinguishable** from "nobody was there".\n- **Universal clipboard**: text/HTML/images fan out to your other machines; >512 KB syncs a thumbnail\n  + reference and pulls the bytes on demand. A privacy gate blocks password-manager and secure-input\n  content. Plus **paste history** (\u2318\u21E7V pastebar), clipboard over the rdesk channel, and mobile\n  text-only sync.\n- **Peer-link**: agent\u2194agent direct transport with a 3-tier ladder (LAN TLS \u2192 observed public IP \u2192\n  UDP hole-punch), cert-pinned, relayed only as a fallback.\n- **Mesh VPN**: own PKI with SAS verification, join tickets, recovery mnemonic, a policy bundle with a\n  fail-closed freshness clock, an authenticated Noise data plane, disco/path selection, a 25-pair NAT\n  punch matrix, and a privileged `netd` helper that **derives** every route itself (the IPC has no\n  "add route" field, by design) with journal-based teardown after a crash or reboot.\n- **Remote desktop**: screen share and control. 3 grant paths (same-account registry, cross-account\n  code, unattended password), 3 engines (native, VNC, RDP), display picker, quality, Ctrl+Alt+Del,\n  in-session voice on the same peer connection, side chat, and a phone viewer.\n- **Present & collaboration**: a presenter drives followers across devices; join codes; live cursors,\n  comments and captions.\n- **Co-view mirroring**: a second device with the same conversation open sees **26 allowlisted\n  events**. Permission prompts are deliberately *not* mirrored \u2014 a card you can\'t answer is a dead\n  button.\n- **Settings & session sync**: keys, tokens, active engine and model are account-wide; `localCli`\n  paths are machine-local and must never cross. Plus continuous folder mirroring (active link).\n\n## 13. Team chat & conferencing\n\nSlack-class: spaces, categories, channels, DMs, threads, mentions, reactions, custom emoji, stickers,\nattachments, forum channels, pins, presence, search (Postgres **or** Elasticsearch), link unfurl,\nGIF/meme, bots + a bot API, incoming webhooks, automations, governance, retention and audit.\n**Huddles** over a self-hosted LiveKit SFU with captions and a summary posted back to the channel;\ntoken minting and webhooks work without the SFU, and captions still work when LiveKit is unconfigured.\n\n## 14. Vault (password manager)\n\nZero-knowledge, Argon2id + AES-GCM, server holds only opaque ciphertext. **5 item types** (logins,\npasskeys, payments, secure notes, personal info), ~28 daemon ops, **4 unlock paths** (master password,\ndevice, biometric, **QR from your phone**), sharing sealed to recipient device keys, transfer,\nimport/export (Chrome, Safari, zip), a generator, TOTP, the **macOS AutoFill provider**, and browser\nautofill through the extension.\n\n## 15. Extensions platform\n\nFamilies: **skills, code plugins, bundle plugins, MCP connectors** (3 transports: stdio/http/sse),\nplus **theme packs**. Marketplace discovery with a security verdict that gates install; enable/disable;\nper-extension encrypted secrets; updates; uninstall. Extensions contribute **tabs, panels, settings\npages, status items, menu items and reskins**. First-party skills are free; marketplace ones are\ngated \u2014 `plugins` is the one entitlement actually enforced.\n\n## 16. App Control \u2014 the AI operating Tesseract itself\n\n**144 capabilities across 19 domains** (`settings, navigation, engines, runners, runtimes,\nextensions, hosts, account, daemon, providers, image, voice, permissions, project, privacy, system,\nfonts, present, tour`), exposed as 2 meta-tools + one executor per domain, each input validated\nagainst its own schema. **There is no confirmation gate \u2014 actions happen immediately, by product\ndecision.**\n\n## 17. Platform\n\n- **Accounts**: invite-only (there is **no public sign-up**; Google sign-in on an unknown email is\n  rejected), password + Google, password reset, device registration/claim/keys, a CLI device-code\n  flow, and an offline-tolerance contract \u2014 only an explicit 401/403 signs you out.\n- **Plans**: `free`, `standard` (shown as **"Pro"**), `pro` (shown as **"Team"**) \u2014 17 feature flags,\n  quotas on compute/storage/egress/video, seats, invites, orgs. Your effective plan is the best across\n  every org you belong to.\n- **Missions, cron & unattended**: schedule agent turns that run with nobody present, with catch-up\n  after downtime, background tasks and structured reports.\n- **Settings**: **23 sections, ~300 controls** \u2014 appearance, editor, general, runners, agent, voice,\n  image editing, search, extensions, background tasks, account, team, sync, privacy, file drops,\n  remote desktop, permissions, hooks (9 events), env, about, shortcuts (31 rebindable commands).\n- **Theming**: DTCG design tokens, theme packs with **8 independently switchable facets** (colors,\n  shape, fonts, background, decorations, sounds, intro, extraCss) and a 3-entry-point **Safe Mode** to\n  recover from a bad pack.\n- **Accessibility & motion**: light/dark \xD7 comfortable/compact density throughout, reduced-motion\n  and sound-mute as separate switches, and labelled roles on every interactive element. Animation\n  is a product requirement, not a preference \u2014 every show/hide, open/close and surface switch is\n  animated (140\u2013220ms), and native unstyled controls are not used.\n- **OS permissions**: 7 tracked (microphone, camera, screen recording, full-disk access, accessibility,\n  notifications, local network) with per-platform availability; three require a relaunch after grant.\n- **Observability**: crash/error reporting from 6 producers with separate crash and telemetry consent\n  (**opt-out \u2014 on unless explicitly disabled**), fingerprinting and grouping, an error inspector, an\n  alerting bridge, in-app issue submission, and a GDPR export-and-erase path.\n- **The always-on background service**: the desktop app *is* the daemon (merged process); the slim\n  rdesk and mesh builds and the headless CLI keep the classic separate-service model, installed via\n  launchd / systemd / Windows services. It self-heals silently, degrades from GUI to headless rather\n  than dying, and only one daemon owns a machine at a time. This is why clipboard sync, remote\n  access, scheduled turns and the \u2325Space HUD keep working with no app window open.\n- **Connectivity**: the relay is stateless and queues nothing \u2014 a dropped socket re-bootstraps rather\n  than replaying. In-flight turns survive a disconnect and stay interruptible.\n- **Updates**: check \u2192 download \u2192 stage \u2192 apply \u2192 relaunch, with an external reaper, log rotation on\n  version change and a What\'s New screen. System events (sleep/wake, lock, AC/battery, clock jump,\n  displays, interfaces) drive recovery.\n\n## 18. Deliberately NOT built \u2014 do not promise these\n\n- **Create multiplayer co-editing / comments-in-Create** \u2014 deferred; the stores exist but are unwired.\n- **Marketplace** as a product \u2014 brainstorm only.\n- **Team chat**: voice messages, async video clips, keyword alerts, scheduled send, `/remind`, saved\n  messages, guest/single-channel access, outgoing webhooks, AI catch-up/digest, public communities,\n  nested threads, Block Kit, workflow builder, read receipts, E2E encryption for team chat.\n- **Create/Gamma parity gaps**: todo blocks, GIF/QR/illustrations, media library, form embeds, Google\n  Slides export, theme gallery picker, share analytics, public generate API, custom domains, SEO\n  toggle, password-protected publish, sites manager.\n- **Hosting**: the managed DB/auth/storage layer, secrets manager, git sync + 1-click Publish.\n- **Mobile**: file browsing, in-app browser, hosting an agent, rendering canvas/surface blocks.\n- **Web app**: undo-delete, local engines, runner configs, the errors panel, open/save-to-code for\n  remote hosts.\n- **Mesh**: there is no VPN tunnel a user can turn on yet \u2014 PKI, protocol and data plane are built,\n  route execution is not a shipped user feature. No Windows/macOS netd hosting.\n- **Other**: Homebrew formula, Chrome Web Store listing (the extension installs unpacked), Deepgram\n  voice, Office (ZetaOffice) editing, AWS Bedrock and Google Vertex gateway routes, VNC clipboard,\n  Wayland-specific clipboard handling, RN live widget tree (blocked upstream), the voice tutorial.\n\n## 19. Honest caveats\n\n- **Entitlements are almost entirely unenforced.** Only `plugins` is gated in production, and the\n  desktop client is never gated at all. Both the API and the relay **fail open** on billing errors.\n- **Realtime voice has never run live against a provider** \u2014 treat first-run voice as unproven.\n- **HeyGen avatar video has no key configured** as shipped.\n- **The self-hosted web stack has no per-user data isolation** \u2014 auth there is a login wall over one\n  shared workspace root.\n- `standard` = "Pro" and `pro` = "Team" \u2014 the plan id and the display name are inverted.\n';
+  }
+});
+
+// ../../packages/agent-core/dist/capabilities-tools.js
+import { tool as tool17 } from "@anthropic-ai/claude-agent-sdk";
+function capabilitySections(doc = CAPABILITIES_DOC) {
+  const out = [];
+  const re = /^## (\d+)\. (.+)$/gm;
+  const heads = [];
+  for (let m = re.exec(doc); m; m = re.exec(doc)) {
+    heads.push({ n: Number(m[1]), title: m[2].trim(), at: m.index, end: re.lastIndex });
+  }
+  for (let i = 0; i < heads.length; i++) {
+    const h = heads[i];
+    const stop2 = i + 1 < heads.length ? heads[i + 1].at : doc.length;
+    out.push({ n: h.n, title: h.title, body: doc.slice(h.at, stop2).trimEnd() });
+  }
+  return out;
+}
+function findSections(query2, doc = CAPABILITIES_DOC) {
+  const secs = capabilitySections(doc);
+  const q = query2.trim().toLowerCase();
+  if (!q)
+    return [];
+  const asNum = Number(q.replace(/^§/, ""));
+  if (Number.isInteger(asNum) && asNum > 0) {
+    const hit = secs.find((s) => s.n === asNum);
+    if (hit)
+      return [hit];
+  }
+  const byTitle = secs.filter((s) => s.title.toLowerCase().includes(q));
+  if (byTitle.length > 0)
+    return byTitle;
+  return secs.filter((s) => s.body.toLowerCase().includes(q));
+}
+function buildCapabilitiesTools() {
+  const index = capabilitySections().map((s) => `${s.n}. ${s.title}`).join(" \xB7 ");
+  return [
+    tool17("tesseract_capabilities", prompt("tool.capabilities.tesseract_capabilities", { sections: index }), {
+      section: external_exports.string().optional().describe('Optional filter: a section number ("12"), a title word ("voice", "vault", "media"), or any keyword to search the body ("rdesk", "clipboard", "figma"). Omit for the full map.')
+    }, async (args) => {
+      const q = args?.section?.trim();
+      if (!q)
+        return text10(CAPABILITIES_DOC);
+      const hits = findSections(q);
+      if (hits.length === 0) {
+        return text10(`No section of Tesseract's capability map matches "${q}". Sections: ${index}. Call tesseract_capabilities with no arguments for the whole map.`);
+      }
+      return text10(hits.map((s) => s.body).join("\n\n"));
+    })
+  ];
+}
+var text10;
+var init_capabilities_tools = __esm({
+  "../../packages/agent-core/dist/capabilities-tools.js"() {
+    "use strict";
+    init_zod();
+    init_prompts();
+    init_capabilities_doc_generated();
+    text10 = (t) => ({ content: [{ type: "text", text: t }] });
+  }
+});
+
 // ../../packages/serpapi-core/dist/types.js
 var init_types3 = __esm({
   "../../packages/serpapi-core/dist/types.js"() {
@@ -33480,8 +33880,8 @@ function isAbort(e) {
   const name = e?.name ?? "";
   return name === "AbortError" || name === "TimeoutError" || /aborted|abort/i.test(String(e?.message ?? ""));
 }
-function redactSecrets(text12, secret) {
-  let out = text12.replace(/((?:api_key|apikey|token|access_token|key)=)[^&\s"'<>]{6,}/gi, "$1***");
+function redactSecrets(text13, secret) {
+  let out = text13.replace(/((?:api_key|apikey|token|access_token|key)=)[^&\s"'<>]{6,}/gi, "$1***");
   if (secret && secret.length >= 8)
     out = out.split(secret).join("***");
   return out;
@@ -33588,13 +33988,13 @@ var init_client = __esm({
        */
       async searchMarkdown(engine, params, opts = {}) {
         const url2 = await this.buildUrl(engine, params, { ...opts, output: "md" });
-        const { res, text: text12, started: started2 } = await this.fetchWithRetry(url2, engine, opts, true);
+        const { res, text: text13, started: started2 } = await this.fetchWithRetry(url2, engine, opts, true);
         this.opts.onUsage?.({ engine, cached: false, billed: true, ms: Date.now() - started2, status: res.status });
-        const asError = messageFromBody(text12) && redactSecrets(messageFromBody(text12), (await this.creds().catch(() => void 0))?.apiKey);
-        if (asError && text12.trimStart().startsWith("{")) {
+        const asError = messageFromBody(text13) && redactSecrets(messageFromBody(text13), (await this.creds().catch(() => void 0))?.apiKey);
+        if (asError && text13.trimStart().startsWith("{")) {
           throw new SerpApiError(asError, classifySerpError(res.status, asError), { status: res.status, engine });
         }
-        return { markdown: text12 };
+        return { markdown: text13 };
       }
       /**
        * Follow a fully-formed SerpApi URL — specifically `serpapi_pagination.next`.
@@ -33632,8 +34032,8 @@ var init_client = __esm({
         const u = _SerpClient.join(baseUrl ?? DEFAULT_BASE_URL, "locations.json");
         u.searchParams.set("q", q);
         u.searchParams.set("limit", String(Math.min(Math.max(1, limit), 10)));
-        const { text: text12 } = await this.fetchWithRetry(u.toString(), "locations", {}, false);
-        const body = JSON.parse(text12 || "[]");
+        const { text: text13 } = await this.fetchWithRetry(u.toString(), "locations", {}, false);
+        const body = JSON.parse(text13 || "[]");
         return Array.isArray(body) ? body : [];
       }
       /** Retrieve a previously-run search by `search_metadata.id`. 31-day retention; also how you
@@ -33657,8 +34057,8 @@ var init_client = __esm({
           throw new SerpApiError(`Invalid search id "${searchId}".`, "bad_request");
         const u = _SerpClient.join(baseUrl ?? DEFAULT_BASE_URL, `searches/${safe2}.md`);
         u.searchParams.set("api_key", apiKey);
-        const { text: text12 } = await this.fetchWithRetry(u.toString(), "archive", {}, false);
-        return { markdown: text12 };
+        const { text: text13 } = await this.fetchWithRetry(u.toString(), "archive", {}, false);
+        return { markdown: text13 };
       }
       /** Upload an image (≤500 KB, JPG/PNG/WebP) for use with Lens / reverse-image engines.
        *  The returned `image_id` expires after ~10 minutes. */
@@ -33757,9 +34157,9 @@ var init_client = __esm({
             this.opts.onUsage?.({ engine, cached: false, billed, ms: Date.now() - started2, error: msg });
             throw lastErr;
           }
-          const text12 = await res.text();
+          const text13 = await res.text();
           if (!res.ok) {
-            const bodyMsg = redactSecrets(messageFromBody(text12), secret);
+            const bodyMsg = redactSecrets(messageFromBody(text13), secret);
             const err2 = new SerpApiError(bodyMsg || `SerpApi ${engine} failed (${res.status}).`, classifySerpError(res.status, bodyMsg), { status: res.status, engine });
             if (err2.retryable && attempt < maxRetries && Date.now() < deadline) {
               lastErr = err2;
@@ -33769,7 +34169,7 @@ var init_client = __esm({
             this.opts.onUsage?.({ engine, cached: false, billed, ms: Date.now() - started2, status: res.status, error: bodyMsg.slice(0, 200) });
             throw err2;
           }
-          return { res, text: text12, started: started2 };
+          return { res, text: text13, started: started2 };
         }
         throw lastErr ?? new SerpApiError(`SerpApi ${engine} failed.`, "unknown", { engine });
       }
@@ -33786,10 +34186,10 @@ var init_client = __esm({
           if (hit)
             this.cache.delete(key2);
         }
-        const { res, text: text12, started: started2 } = await this.fetchWithRetry(url2, engine, opts, billed);
+        const { res, text: text13, started: started2 } = await this.fetchWithRetry(url2, engine, opts, billed);
         let body;
         try {
-          body = JSON.parse(text12);
+          body = JSON.parse(text13);
         } catch {
           throw new SerpApiError(`SerpApi ${engine} returned a non-JSON body.`, "unknown", { status: res.status, engine });
         }
@@ -34505,7 +34905,7 @@ var serpapi_tools_exports = {};
 __export(serpapi_tools_exports, {
   buildSerpTools: () => buildSerpTools
 });
-import { tool as tool17 } from "@anthropic-ai/claude-agent-sdk";
+import { tool as tool18 } from "@anthropic-ai/claude-agent-sdk";
 import { openSync as openSync3, readSync as readSync2, closeSync as closeSync3, statSync as statSync3, readFileSync as readFileSync6 } from "node:fs";
 import { basename as basename2 } from "node:path";
 function imageKind(path6) {
@@ -34539,14 +34939,14 @@ function catalogOnce() {
 }
 function buildSerpTools(deps) {
   const tools = [];
-  tools.push(tool17("serp_find", 'Search the SerpApi catalog of 121 search engines to find which one answers a question. Describe what you want in plain language ("hotel reviews", "who is advertising against my brand", "stock price") \u2014 engine ids are not guessable, so START HERE unless you already know the engine. Returns ranked engines with the family tool that runs them and their required parameters.', {
+  tools.push(tool18("serp_find", 'Search the SerpApi catalog of 121 search engines to find which one answers a question. Describe what you want in plain language ("hotel reviews", "who is advertising against my brand", "stock price") \u2014 engine ids are not guessable, so START HERE unless you already know the engine. Returns ranked engines with the family tool that runs them and their required parameters.', {
     query: external_exports.string().describe("What you are trying to find out, in plain language."),
     family: external_exports.string().optional().describe(`Restrict to one family: ${Object.keys(SERP_FAMILIES).join(", ")}.`),
     limit: external_exports.number().int().min(1).max(30).optional().describe("How many engines to return (default 8).")
   }, async (a) => {
     const { query: query2, family, limit } = a ?? {};
     if (family && !(family in SERP_FAMILIES)) {
-      return text10(`Unknown family "${family}". Valid families: ${Object.keys(SERP_FAMILIES).join(", ")}.`, true);
+      return text11(`Unknown family "${family}". Valid families: ${Object.keys(SERP_FAMILIES).join(", ")}.`, true);
     }
     const r = await findEngines(query2 ?? "", catalogOnce().filter((e) => !UNAVAILABLE.has(e.id)), {
       limit,
@@ -34561,7 +34961,7 @@ function buildSerpTools(deps) {
       next: "Call serp_describe with an engine id for its full parameter list, then run it with the named family tool."
     });
   }));
-  tools.push(tool17("serp_describe", "Describe one or more SerpApi engines in full: every parameter with its meaning, which are required, allowed values, how the engine paginates, and which result keys it returns. Call this before running an engine whose parameters you are unsure about.", {
+  tools.push(tool18("serp_describe", "Describe one or more SerpApi engines in full: every parameter with its meaning, which are required, allowed values, how the engine paginates, and which result keys it returns. Call this before running an engine whose parameters you are unsure about.", {
     engines: external_exports.array(external_exports.string()).min(1).max(MAX_DESCRIBE_ENGINES).describe(`Engine ids, e.g. ["google_hotels", "google_maps"]. At most ${MAX_DESCRIBE_ENGINES} per call \u2014 a full schema is thousands of tokens, so ask for the ones you are actually about to use.`),
     group: external_exports.string().optional().describe('Only describe parameters in this registry group (e.g. "search_query", "localization", "advanced_filters"), to keep the answer short.')
   }, async (a) => {
@@ -34606,10 +35006,10 @@ function buildSerpTools(deps) {
     }
     return json2(out);
   }));
-  tools.push(tool17("serp_account", "Check that SerpApi is configured and how many searches remain this month. This call is free and never consumes a search credit. Call it before a long series of searches, or when a search fails with a quota error.", {}, async () => {
+  tools.push(tool18("serp_account", "Check that SerpApi is configured and how many searches remain this month. This call is free and never consumes a search credit. Call it before a long series of searches, or when a search fails with a quota error.", {}, async () => {
     const st = await deps.status();
     if (!st.configured)
-      return text10(NO_KEY, true);
+      return text11(NO_KEY, true);
     try {
       const acct = await deps.client.account();
       return json2({
@@ -34625,10 +35025,10 @@ function buildSerpTools(deps) {
         ...st.session ? { this_session: st.session } : {}
       });
     } catch (e) {
-      return text10(`Could not read the SerpApi account: ${e instanceof Error ? e.message : String(e)}`, true);
+      return text11(`Could not read the SerpApi account: ${e instanceof Error ? e.message : String(e)}`, true);
     }
   }));
-  tools.push(tool17("serp_locations", 'Resolve a place name to the canonical `location` string Google\'s engines expect (e.g. "Austin" \u2192 "Austin, Texas, United States"). Free \u2014 it does not consume a search credit. Use it before passing `location` to a Google engine; an unrecognised location is silently ignored and you get results for the wrong place.', {
+  tools.push(tool18("serp_locations", 'Resolve a place name to the canonical `location` string Google\'s engines expect (e.g. "Austin" \u2192 "Austin, Texas, United States"). Free \u2014 it does not consume a search credit. Use it before passing `location` to a Google engine; an unrecognised location is silently ignored and you get results for the wrong place.', {
     query: external_exports.string().describe('Place name to resolve, e.g. "Chisinau" or "Austin".'),
     limit: external_exports.number().int().min(1).max(10).optional().describe("Maximum matches (SerpApi caps this at 10).")
   }, async (a) => {
@@ -34637,10 +35037,10 @@ function buildSerpTools(deps) {
       const hits = await deps.client.locations(query2, limit ?? 5);
       return json2(hits.map((h) => ({ canonical_name: h.canonical_name, country: h.country_code, type: h.target_type, reach: h.reach })));
     } catch (e) {
-      return text10(`Location lookup failed: ${e instanceof Error ? e.message : String(e)}`, true);
+      return text11(`Location lookup failed: ${e instanceof Error ? e.message : String(e)}`, true);
     }
   }));
-  tools.push(tool17("serp_archive", "Re-read a search that was already run, by its `search_id` (returned as `_search_id` on every result, and by a `submit_async` submission). FREE \u2014 retrieval never re-runs the search and never spends a credit, and SerpApi keeps results for 31 days. Use it to collect an async submission, to re-read a large result you truncated, or to get the markdown rendering of something you already fetched as JSON \u2014 all without paying again.", {
+  tools.push(tool18("serp_archive", "Re-read a search that was already run, by its `search_id` (returned as `_search_id` on every result, and by a `submit_async` submission). FREE \u2014 retrieval never re-runs the search and never spends a credit, and SerpApi keeps results for 31 days. Use it to collect an async submission, to re-read a large result you truncated, or to get the markdown rendering of something you already fetched as JSON \u2014 all without paying again.", {
     search_id: external_exports.string().describe("The id from `_search_id`, or from a `submit_async` submission."),
     format: external_exports.enum(["json", "markdown"]).optional().describe("`json` (default) is structured; `markdown` is roughly half the tokens but carries no chaining tokens."),
     max_results: external_exports.number().int().min(1).max(100).optional().describe("How many items to keep per result list before truncating (default 10).")
@@ -34648,50 +35048,50 @@ function buildSerpTools(deps) {
     const { search_id, format, max_results } = a ?? {};
     const st = await deps.status();
     if (!st.configured)
-      return text10(NO_KEY, true);
+      return text11(NO_KEY, true);
     try {
       if (format === "markdown") {
         const { markdown } = await deps.client.archiveMarkdown(search_id);
-        return text10(markdown);
+        return text11(markdown);
       }
       const body = await deps.client.archive(search_id);
       const status2 = body.search_metadata?.status;
       if (status2 && status2 !== "Success") {
-        return text10(`Search ${search_id} is ${status2}. This call was free \u2014 call serp_archive again in a moment.`);
+        return text11(`Search ${search_id} is ${status2}. This call was free \u2014 call serp_archive again in a moment.`);
       }
       return json2(compactResponse(body, { maxResults: max_results ?? 10 }));
     } catch (e) {
-      return text10(`Could not read search ${search_id}: ${e instanceof Error ? e.message : String(e)}`, true);
+      return text11(`Could not read search ${search_id}: ${e instanceof Error ? e.message : String(e)}`, true);
     }
   }));
-  tools.push(tool17("serp_upload_image", "Upload a local image and get back an `image_id` for the engines that search BY an image rather than by text \u2014 `google_lens`, `google_reverse_image`, `bing_reverse_image`, `yandex_images`. Free; it spends no search credit. The id expires after about ten minutes, so upload immediately before the search that uses it. SerpApi accepts JPG, PNG and WebP up to 500 KB.", {
+  tools.push(tool18("serp_upload_image", "Upload a local image and get back an `image_id` for the engines that search BY an image rather than by text \u2014 `google_lens`, `google_reverse_image`, `bing_reverse_image`, `yandex_images`. Free; it spends no search credit. The id expires after about ten minutes, so upload immediately before the search that uses it. SerpApi accepts JPG, PNG and WebP up to 500 KB.", {
     path: external_exports.string().describe("Absolute path to the image file on this machine.")
   }, async (a) => {
     const { path: path6 } = a ?? {};
     const st = await deps.status();
     if (!st.configured)
-      return text10(NO_KEY, true);
+      return text11(NO_KEY, true);
     let bytes3;
     try {
       const size = statSync3(path6).size;
       if (size === 0)
-        return text10(`${path6} is empty.`, true);
+        return text11(`${path6} is empty.`, true);
       if (size > MAX_IMAGE_BYTES) {
-        return text10(`${path6} is ${Math.round(size / 1024)} KB; SerpApi accepts images up to 500 KB. Resize it first.`, true);
+        return text11(`${path6} is ${Math.round(size / 1024)} KB; SerpApi accepts images up to 500 KB. Resize it first.`, true);
       }
       const kind = imageKind(path6);
       if (!kind)
-        return text10(`${path6} is not a JPEG, PNG or WebP image \u2014 those are the formats SerpApi accepts, and this tool only uploads images.`, true);
+        return text11(`${path6} is not a JPEG, PNG or WebP image \u2014 those are the formats SerpApi accepts, and this tool only uploads images.`, true);
       bytes3 = readFileSync6(path6);
     } catch (e) {
-      return text10(`Could not read ${path6}: ${e instanceof Error ? e.message : String(e)}`, true);
+      return text11(`Could not read ${path6}: ${e instanceof Error ? e.message : String(e)}`, true);
     }
     try {
       const { image_id } = await deps.client.uploadImage(bytes3, basename2(path6));
-      return text10(`image_id: ${image_id}
+      return text11(`image_id: ${image_id}
 Pass it as the image parameter of a reverse-image engine (google_lens uses \`url\`; call serp_describe for the exact field). It expires in about ten minutes.`);
     } catch (e) {
-      return text10(`Image upload failed: ${e instanceof Error ? e.message : String(e)}`, true);
+      return text11(`Image upload failed: ${e instanceof Error ? e.message : String(e)}`, true);
     }
   }));
   for (const [family, info] of Object.entries(SERP_FAMILIES)) {
@@ -34701,7 +35101,7 @@ Pass it as the image parameter of a reverse-image engine (google_lens uses \`url
     const ids = [...engines2];
     const listing = engines2.map((id) => `${id} \u2014 ${ENGINE_INFO[id]?.purpose ?? ""}`).join("; ");
     const trapped = engines2.filter((id) => ENGINE_INFO[id]?.traps?.length);
-    tools.push(tool17(info.tool, `${info.blurb} Pick an \`engine\` and pass its \`params\` (use serp_describe for the exact fields, or serp_find if you are not sure which engine). Each call spends one paid search credit. Engines: ${listing}${trapped.length ? ` \u2014 QUIRKS (serp_describe first): ${trapped.join(", ")}. Some reject the call; others accept a parameter and ignore it, returning confident results for the wrong place.` : ""}`, {
+    tools.push(tool18(info.tool, `${info.blurb} Pick an \`engine\` and pass its \`params\` (use serp_describe for the exact fields, or serp_find if you are not sure which engine). Each call spends one paid search credit. Engines: ${listing}${trapped.length ? ` \u2014 QUIRKS (serp_describe first): ${trapped.join(", ")}. Some reject the call; others accept a parameter and ignore it, returning confident results for the wrong place.` : ""}`, {
       engine: external_exports.enum(ids).describe("Which engine to run."),
       params: external_exports.record(external_exports.string(), external_exports.unknown()).optional().describe("The engine's own parameters. Names differ per engine \u2014 Yahoo uses `p`, Yandex `text`, Naver `query`, Amazon `k`, eBay `_nkw`. Call serp_describe if unsure."),
       ...PAGE_ARGS,
@@ -34716,13 +35116,13 @@ Pass it as the image parameter of a reverse-image engine (google_lens uses \`url
 async function runEngine(deps, args) {
   const st = await deps.status();
   if (!st.configured)
-    return text10(NO_KEY, true);
+    return text11(NO_KEY, true);
   const spec = SERP_SPEC.engines[args.engine];
   if (!spec)
-    return text10(`Unknown engine "${args.engine}". Call serp_find to locate the right one.`, true);
+    return text11(`Unknown engine "${args.engine}". Call serp_find to locate the right one.`, true);
   const info = ENGINE_INFO[args.engine];
   if (info?.status) {
-    return text10(`\`${args.engine}\` is ${info.status.state} and cannot be used: ${info.status.detail} No credit was spent. ${info.purpose}`, true);
+    return text11(`\`${args.engine}\` is ${info.status.state} and cannot be used: ${info.status.detail} No credit was spent. ${info.purpose}`, true);
   }
   const strategy = pageStrategy(spec);
   const rawParams = { ...args.params ?? {} };
@@ -34737,7 +35137,7 @@ async function runEngine(deps, args) {
     v.warnings.push(`Both \`page_size\` (${args.page_size}) and \`${sizeParam}\` (${explicitSize}) were given; \`page_size\` wins.`);
   }
   if (!v.ok) {
-    return text10(`Cannot run \`${args.engine}\` \u2014 no credit spent.
+    return text11(`Cannot run \`${args.engine}\` \u2014 no credit spent.
 ${v.errors.map((e) => `\u2022 ${e}`).join("\n")}
 
 Call serp_describe({engines:["${args.engine}"]}) for the full parameter list.`, true);
@@ -34755,8 +35155,8 @@ Call serp_describe({engines:["${args.engine}"]}) for the full parameter list.`,
       const submitted = await deps.client.search(args.engine, { ...v.params, ...paging }, opts);
       const id = submitted.search_metadata?.id;
       if (!id)
-        return text10(`\`${args.engine}\` was submitted but SerpApi returned no search id, so the result cannot be collected. Re-run it without submit_async.`, true);
-      return text10(`Submitted \`${args.engine}\` \u2014 search_id: ${id}
+        return text11(`\`${args.engine}\` was submitted but SerpApi returned no search id, so the result cannot be collected. Re-run it without submit_async.`, true);
+      return text11(`Submitted \`${args.engine}\` \u2014 search_id: ${id}
 The credit is already spent. Collect it with serp_archive({ search_id: "${id}" }); that call is free, so retry it until the status is Success.`);
     }
     if (args.format === "markdown") {
@@ -34764,7 +35164,7 @@ The credit is already spent. Collect it with serp_archive({ search_id: "${id}" }
       const warn = v.warnings.length ? `${v.warnings.map((w) => `\u26A0 ${w}`).join("\n")}
 
 ` : "";
-      return text10(`${warn}${markdown}`);
+      return text11(`${warn}${markdown}`);
     }
     const body = await deps.client.search(args.engine, { ...v.params, ...paging }, opts);
     const compact2 = compactResponse(body, { maxResults: args.max_results ?? 10 });
@@ -34775,27 +35175,27 @@ The credit is already spent. Collect it with serp_archive({ search_id: "${id}" }
     if (body._page?.hasNext && supportsPaging(spec)) {
       parts.push(body._page.cursor ? `More results available \u2014 call again with cursor: "${body._page.cursor}".` : `More results available \u2014 call again with page: ${(args.page ?? 1) + 1}.`);
     }
-    return text10(parts.join("\n\n"));
+    return text11(parts.join("\n\n"));
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
-    return text10(`\`${args.engine}\` failed: ${msg}`, true);
+    return text11(`\`${args.engine}\` failed: ${msg}`, true);
   }
 }
-var text10, json2, UNAVAILABLE, MAX_DESCRIBE_ENGINES, MAX_PARAM_DESC, clip, MAX_IMAGE_BYTES, NO_KEY, PAGE_ARGS, OUTPUT_ARGS, cachedCatalog, brief;
+var text11, json2, UNAVAILABLE, MAX_DESCRIBE_ENGINES, MAX_PARAM_DESC, clip, MAX_IMAGE_BYTES, NO_KEY, PAGE_ARGS, OUTPUT_ARGS, cachedCatalog, brief;
 var init_serpapi_tools = __esm({
   "../../packages/agent-core/dist/serpapi/serpapi-tools.js"() {
     "use strict";
     init_zod();
     init_dist4();
-    text10 = (t, isError = false) => ({
+    text11 = (t, isError = false) => ({
       content: [{ type: "text", text: t }],
       ...isError ? { isError: true } : {}
     });
-    json2 = (v) => text10(JSON.stringify(v, null, 2));
+    json2 = (v) => text11(JSON.stringify(v, null, 2));
     UNAVAILABLE = new Set(UNAVAILABLE_ENGINES);
     MAX_DESCRIBE_ENGINES = 3;
     MAX_PARAM_DESC = 400;
-    clip = (text12, full) => !full && text12 && text12.length > MAX_PARAM_DESC ? `${text12.slice(0, MAX_PARAM_DESC)}\u2026 (truncated \u2014 ask for this engine on its own for the full text)` : text12;
+    clip = (text13, full) => !full && text13 && text13.length > MAX_PARAM_DESC ? `${text13.slice(0, MAX_PARAM_DESC)}\u2026 (truncated \u2014 ask for this engine on its own for the full text)` : text13;
     MAX_IMAGE_BYTES = 500 * 1024;
     NO_KEY = "SerpApi is not configured. Ask the user to add a SerpApi key in Settings \u2192 Search, or to sign in to use the bundled free tier.";
     PAGE_ARGS = {
@@ -34822,13 +35222,13 @@ var init_serpapi_tools = __esm({
 });
 
 // ../../packages/agent-core/dist/report-tools.js
-import { tool as tool18 } from "@anthropic-ai/claude-agent-sdk";
+import { tool as tool19 } from "@anthropic-ai/claude-agent-sdk";
 function slug(s) {
   return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "mission";
 }
 function buildReportTools(deps) {
   return [
-    tool18("emit_report", prompt("tool.report.emit_report"), {
+    tool19("emit_report", prompt("tool.report.emit_report"), {
       id: external_exports.string().optional().describe("Stable report id to UPDATE an existing report; omit on the first call to create one."),
       playbookId: external_exports.string().describe("The playbook id this report belongs to."),
       title: external_exports.string().describe("Report title (usually the playbook name)."),
@@ -34882,10 +35282,10 @@ var init_report_tools = __esm({
 });
 
 // ../../packages/agent-core/dist/interactive-ui-tools.js
-import { tool as tool19 } from "@anthropic-ai/claude-agent-sdk";
+import { tool as tool20 } from "@anthropic-ai/claude-agent-sdk";
 function buildInteractiveUiTools(deps) {
   return [
-    tool19("ask_form", prompt("tool.interactive-ui.ask_form"), {
+    tool20("ask_form", prompt("tool.interactive-ui.ask_form"), {
       title: external_exports.string().describe("Form heading (plain language)."),
       description: external_exports.string().optional().describe("Short explanation shown above the fields."),
       submitLabel: external_exports.string().optional().describe('Submit button label (default "Submit").'),
@@ -34899,7 +35299,7 @@ function buildInteractiveUiTools(deps) {
       return { content: [{ type: "text", text: `The user submitted the form:
 ${JSON.stringify(res.values ?? {}, null, 2)}` }] };
     }),
-    tool19("present_choices", prompt("tool.interactive-ui.present_choices"), {
+    tool20("present_choices", prompt("tool.interactive-ui.present_choices"), {
       title: external_exports.string().describe("The question / heading."),
       description: external_exports.string().optional(),
       options: external_exports.array(choiceOption).min(1),
@@ -34912,7 +35312,7 @@ ${JSON.stringify(res.values ?? {}, null, 2)}` }] };
         return { content: [{ type: "text", text: "The user cancelled the choice (nothing selected)." }] };
       return { content: [{ type: "text", text: `The user selected: ${JSON.stringify(res.selected ?? [])}` }] };
     }),
-    tool19("update_progress", prompt("tool.interactive-ui.update_progress"), {
+    tool20("update_progress", prompt("tool.interactive-ui.update_progress"), {
       stages: external_exports.array(external_exports.object({
         label: external_exports.string(),
         status: external_exports.enum(["pending", "active", "done"])
@@ -35037,8 +35437,8 @@ async function exportSession(sessionId, fromCwd) {
 function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function rekey(text12, fromCwd, toCwd) {
-  return text12.replace(new RegExp(escapeRe(fromCwd) + '(?=["/\\\\]|$)', "g"), () => toCwd);
+function rekey(text13, fromCwd, toCwd) {
+  return text13.replace(new RegExp(escapeRe(fromCwd) + '(?=["/\\\\]|$)', "g"), () => toCwd);
 }
 async function importSession(exp, toCwd) {
   const destDir = sessionDir(toCwd);
@@ -35311,13 +35711,13 @@ var init_narrator = __esm({
             prompt("side-llm.narrator.activity", { activity }),
             prompt("side-llm.narrator.ask")
           ].filter(Boolean).join("\n\n");
-          const text12 = (await cfg2.complete({ system, prompt: promptText, maxTokens: 48 }))?.trim().replace(/^["']|["']$/g, "");
-          if (text12 && text12 !== s.lastText) {
-            s.lastText = text12;
-            s.log.push(text12);
+          const text13 = (await cfg2.complete({ system, prompt: promptText, maxTokens: 48 }))?.trim().replace(/^["']|["']$/g, "");
+          if (text13 && text13 !== s.lastText) {
+            s.lastText = text13;
+            s.log.push(text13);
             if (s.log.length > LOG_CAP)
               s.log.shift();
-            this.emit(id, text12, cfg2.engineLabel);
+            this.emit(id, text13, cfg2.engineLabel);
           }
         } catch {
         } finally {
@@ -35459,15 +35859,15 @@ function recordVerificationDecision(entry) {
 function readUnattendedDecisions(limit = 200, opts) {
   const out = [];
   for (const file2 of [rolledPath(), unattendedLogPath()]) {
-    let text12;
+    let text13;
     try {
       if (!existsSync2(file2))
         continue;
-      text12 = readFileSync7(file2, "utf8");
+      text13 = readFileSync7(file2, "utf8");
     } catch {
       continue;
     }
-    for (const line of text12.split("\n")) {
+    for (const line of text13.split("\n")) {
       if (!line.trim())
         continue;
       try {
@@ -36230,10 +36630,10 @@ function assistantContextOverflow(content, isContextOverflowFn) {
   const blocks = content;
   if (blocks.some((block2) => block2?.type !== "text"))
     return false;
-  const text12 = blocks.map((b) => typeof b.text === "string" ? b.text : "").join("\n").trim();
-  if (!text12 || text12.length > 400)
+  const text13 = blocks.map((b) => typeof b.text === "string" ? b.text : "").join("\n").trim();
+  if (!text13 || text13.length > 400)
     return false;
-  return isContextOverflowFn(text12);
+  return isContextOverflowFn(text13);
 }
 var OVERFLOW_MAX_TRIES, OVERFLOW_COMPACT_MESSAGE, OVERFLOW_RESUME_MESSAGE;
 var init_context_recovery = __esm({
@@ -36343,8 +36743,8 @@ function pendingQueueRows(rows) {
   }
   return keep;
 }
-function stripHostText(text12) {
-  return stripRunDirective(text12).trimEnd();
+function stripHostText(text13) {
+  return stripRunDirective(text13).trimEnd();
 }
 function rejectedByApi(b) {
   if (!b || typeof b !== "object")
@@ -36653,10 +37053,10 @@ function filterHistory(transcript, opts = {}) {
     const parent = resolveParent2(r.parentUuid);
     out.push(JSON.stringify(parent === (r.parentUuid ?? null) ? r : { ...r, parentUuid: parent }));
   }
-  const text12 = out.join("\n") + (out.length ? "\n" : "");
+  const text13 = out.join("\n") + (out.length ? "\n" : "");
   stats.rowsOut = out.length;
-  stats.bytesOut = Buffer.byteLength(text12, "utf8");
-  return { text: text12, stats, spills };
+  stats.bytesOut = Buffer.byteLength(text13, "utf8");
+  return { text: text13, stats, spills };
 }
 var DEFAULT_DROP_TYPES, DEFAULT_KEEP_LAST_TYPES, DEFAULT_KEEP_SYSTEM_SUBTYPES, DEFAULT_KEEP_LAST_ATTACHMENT, DEFAULT_OFFLOAD_RECENT_CALLS, MAX_INLINE_INPUT_BYTES, OFFLOAD_MARK, human;
 var init_history_filter = __esm({
@@ -36689,9 +37089,9 @@ function archiveMetaPath(transcript) {
 function offloadDirFor(transcript) {
   return transcript.replace(/\.jsonl$/, "") + ".offload";
 }
-function contentBytes(text12, liveOnly = true) {
+function contentBytes(text13, liveOnly = true) {
   let n = 0;
-  const all = text12.split("\n");
+  const all = text13.split("\n");
   for (const line of liveOnly ? all.slice(liveRegionStart(all)) : all) {
     if (!line.trim())
       continue;
@@ -36750,9 +37150,9 @@ async function slimTranscriptFile(transcript, opts = {}) {
   const liveText = await readFile4(transcript, "utf8");
   const liveLines = liveText.split("\n").filter((l) => l.trim().length > 0);
   const offloadDir = offloadDirFor(transcript);
-  const { text: text12, stats, spills } = filterHistory(liveText, { spillDir: offloadDir, ...opts });
+  const { text: text13, stats, spills } = filterHistory(liveText, { spillDir: offloadDir, ...opts });
   const before = contentBytes(liveText);
-  const after = contentBytes(text12);
+  const after = contentBytes(text13);
   const changed = stats.droppedRows > 0 || stats.droppedThinking > 0 || stats.droppedToolUse > 0 || stats.droppedToolResult > 0 || stats.offloaded > 0 || stats.supersededAttachments > 0 || stats.repairedBlocks > 0;
   if (!changed) {
     return { slimmed: false, reason: "nothing to strip", contentBefore: before, contentAfter: after, stats };
@@ -36777,9 +37177,9 @@ async function slimTranscriptFile(transcript, opts = {}) {
     return { slimmed: false, reason: "the transcript changed during the strip \u2014 left as is", contentBefore: before, contentAfter: after, stats };
   }
   const tmp = join11(dirname7(transcript), `.slim-${randomUUID2().slice(0, 8)}.tmp`);
-  await writeFile4(tmp, text12, { mode: 384 });
+  await writeFile4(tmp, text13, { mode: 384 });
   await rename(tmp, transcript);
-  const outLines = text12.split("\n").filter((l) => l.trim().length > 0);
+  const outLines = text13.split("\n").filter((l) => l.trim().length > 0);
   await writeFile4(archiveMetaPath(transcript), JSON.stringify({ rows: outLines.length, tail: outLines[outLines.length - 1] ?? "" }), { mode: 384 });
   return { slimmed: true, stats, contentBefore: before, contentAfter: after, archive, offloadDir };
 }
@@ -36920,8 +37320,8 @@ async function labelFromTranscript(file2) {
     if (row.type !== "user" && row.message?.role !== "user")
       continue;
     const c = row.message?.content;
-    const text12 = typeof c === "string" ? c : Array.isArray(c) ? c.find((b) => b.type === "text")?.text ?? "" : "";
-    const s = oneLine(text12);
+    const text13 = typeof c === "string" ? c : Array.isArray(c) ? c.find((b) => b.type === "text")?.text ?? "" : "";
+    const s = oneLine(text13);
     if (s)
       return s;
   }
@@ -37390,33 +37790,33 @@ function annotationIsOrphaned(e, removedUuids) {
     return false;
   return clearDanglingPointers(e, removedUuids) !== e;
 }
-function isPromptEchoOf(e, removedUuids, text12) {
+function isPromptEchoOf(e, removedUuids, text13) {
   if (e.type !== "last-prompt")
     return false;
   const leaf = typeof e.leafUuid === "string" ? e.leafUuid : void 0;
   if (leaf && removedUuids.has(leaf))
     return true;
-  if (!text12)
+  if (!text13)
     return false;
   const echo = typeof e.lastPrompt === "string" ? e.lastPrompt : void 0;
-  return echo === text12;
+  return echo === text13;
 }
 function messageText(e) {
   const content = e.message?.content;
   if (typeof content === "string")
     return content;
   if (Array.isArray(content)) {
-    const text12 = content.filter((b) => !!b && typeof b === "object" && b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n");
-    return text12 || void 0;
+    const text13 = content.filter((b) => !!b && typeof b === "object" && b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n");
+    return text13 || void 0;
   }
   return void 0;
 }
-function findUserEntryByText(entries, text12) {
+function findUserEntryByText(entries, text13) {
   for (let i = entries.length - 1; i >= 0; i--) {
     const e = entries[i];
     if (e.type !== "user" || !e.uuid)
       continue;
-    if (messageText(e) === text12)
+    if (messageText(e) === text13)
       return e;
   }
   return void 0;
@@ -37985,10 +38385,10 @@ async function toSessionInfo(s) {
   const spoken = s.cwd ? await lastConversationTime(sessionFile(s.cwd, s.sessionId)) : null;
   return { id: s.sessionId, title, lastModified: spoken ?? s.lastModified, cwd: s.cwd };
 }
-function stripPromptPrefix(text12) {
-  text12 = stripRunDirective(text12);
+function stripPromptPrefix(text13) {
+  text13 = stripRunDirective(text13);
   const isMetadata = (l) => l.startsWith("I'm working on the page:") || l.startsWith("Selected elements:") || l.startsWith("Element ") || l.startsWith("  DOM Path:") || l.startsWith("  XPath:") || l.startsWith("  CSS:") || l.startsWith("  HTML:") || l.startsWith("  Text:") || l.startsWith("  Position:") || l.startsWith("Use the xpath") || l.startsWith("[") && l.includes("image(s) attached");
-  const userLines = text12.split("\n").filter((l) => !isMetadata(l));
+  const userLines = text13.split("\n").filter((l) => !isMetadata(l));
   return userLines.join("\n").trim();
 }
 function extractBlocks(message) {
@@ -38007,13 +38407,13 @@ function extractBlocks(message) {
       continue;
     const b = block2;
     if (b.type === "thinking" && typeof b.thinking === "string") {
-      const text12 = b.thinking.trim();
-      if (text12)
-        blocks.push({ kind: "thinking", content: text12 });
+      const text13 = b.thinking.trim();
+      if (text13)
+        blocks.push({ kind: "thinking", content: text13 });
     } else if (b.type === "text" && typeof b.text === "string") {
-      const text12 = b.text.trim();
-      if (text12 && !text12.startsWith("<ide_") && !text12.startsWith("<system-reminder>")) {
-        blocks.push({ kind: "text", content: text12 });
+      const text13 = b.text.trim();
+      if (text13 && !text13.startsWith("<ide_") && !text13.startsWith("<system-reminder>")) {
+        blocks.push({ kind: "text", content: text13 });
       }
     } else if (b.type === "tool_use") {
       const name = b.name ?? "tool";
@@ -38059,9 +38459,9 @@ ${input.command}
       blocks.push({ kind: "tool_use", content: detail, name });
     } else if (b.type === "advisor_tool_result") {
       const c = b.content;
-      const text12 = c?.type === "advisor_result" ? (c.text ?? "").trim() : "";
-      if (text12)
-        blocks.push({ kind: "advisor", content: text12 });
+      const text13 = c?.type === "advisor_result" ? (c.text ?? "").trim() : "";
+      if (text13)
+        blocks.push({ kind: "advisor", content: text13 });
     }
   }
   return blocks;
@@ -38403,8 +38803,8 @@ async function anthropicCall(args) {
       });
       if (res.ok) {
         const j = await res.json();
-        const text12 = (j.content ?? []).filter((b) => b.type === "text").map((b) => b.text ?? "").join("").trim() || null;
-        return { text: text12, rateLimited: false };
+        const text13 = (j.content ?? []).filter((b) => b.type === "text").map((b) => b.text ?? "").join("").trim() || null;
+        return { text: text13, rateLimited: false };
       }
       let errBody = "";
       try {
@@ -38452,13 +38852,6 @@ async function anthropicCall(args) {
   }
   return { text: null, rateLimited: false };
 }
-function isDirectAnthropic(env) {
-  try {
-    return /(^|\.)api\.anthropic\.com$/i.test(new URL(anthropicBaseUrl(env)).hostname);
-  } catch {
-    return false;
-  }
-}
 async function buildClaudeNarrationLlm(env) {
   if (!await hasAnthropicCred(env))
     return null;
@@ -38548,7 +38941,7 @@ async function buildClaudeVisionLlm(env) {
     ]
   });
 }
-var execFileP, USAGE_URL, FETCH_TIMEOUT_MS, cache, TTL_MS, RATE_LIMIT_BACKOFF_MS, inFlight, rateLimitedUntil, schemaUnsupported, schemaKey, SMART_TIMEOUT_MS, VISION_TIMEOUT_MS;
+var execFileP, USAGE_URL, FETCH_TIMEOUT_MS, cache, TTL_MS, RATE_LIMIT_BACKOFF_MS, inFlight, rateLimitedUntil, isDirectAnthropic, schemaUnsupported, schemaKey, SMART_TIMEOUT_MS, VISION_TIMEOUT_MS;
 var init_session_usage = __esm({
   "../../packages/agent-core/dist/session-usage.js"() {
     "use strict";
@@ -38563,6 +38956,7 @@ var init_session_usage = __esm({
     RATE_LIMIT_BACKOFF_MS = 5 * 6e4;
     inFlight = null;
     rateLimitedUntil = 0;
+    isDirectAnthropic = isAnthropicEndpoint;
     schemaUnsupported = /* @__PURE__ */ new Set();
     schemaKey = (base, model) => `${base}|${model}`;
     SMART_TIMEOUT_MS = RV_GRADE_TIMEOUT_MS;
@@ -38692,7 +39086,7 @@ var init_stream_stall = __esm({
 // ../../packages/agent-core/dist/model-switch.js
 function modelFamily(model) {
   const id = (model ?? "").trim().toLowerCase();
-  if (!id || id.startsWith("tsr-"))
+  if (!id)
     return void 0;
   return FAMILIES2.find((family) => id.includes(family));
 }
@@ -38728,8 +39122,8 @@ var init_model_switch = __esm({
 
 // ../../packages/agent-core/dist/usage-limit.js
 import { USAGE_LIMIT_ERROR_PREFIXES, USAGE_WARNING_PREFIXES, USAGE_TRANSITION_PREFIXES, ORG_POLICY_LIMIT_PREFIXES } from "@anthropic-ai/claude-agent-sdk";
-function classifyUsageMessage(text12) {
-  const t = (text12 ?? "").trim();
+function classifyUsageMessage(text13) {
+  const t = (text13 ?? "").trim();
   if (!t)
     return void 0;
   const hits = (list) => list.some((p) => t.startsWith(p));
@@ -38765,16 +39159,16 @@ function assistantUsageLimitFallback(content) {
   const blocks = content;
   if (blocks.some((block2) => block2?.type !== "text"))
     return void 0;
-  const text12 = blocks.map((block2) => typeof block2.text === "string" ? block2.text : "").join("\n").trim();
-  if (!text12 || text12.length > 600)
+  const text13 = blocks.map((block2) => typeof block2.text === "string" ? block2.text : "").join("\n").trim();
+  if (!text13 || text13.length > 600)
     return void 0;
-  const signal2 = classifyUsageMessage(text12);
+  const signal2 = classifyUsageMessage(text13);
   if (signal2 !== "limit" && signal2 !== "org-policy")
     return void 0;
-  const isoReset = text12.match(/\b\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z\b/i)?.[0];
-  const resetMatch = text12.match(/(?:reset|resets|available again)(?:s| at| on| in)?\s+([^\n]+)/i);
+  const isoReset = text13.match(/\b\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z\b/i)?.[0];
+  const resetMatch = text13.match(/(?:reset|resets|available again)(?:s| at| on| in)?\s+([^\n]+)/i);
   const parsed = Date.parse(isoReset ?? resetMatch?.[1].trim() ?? "");
-  return { retryAt: Number.isFinite(parsed) ? parsed : void 0, signal: signal2, scopeText: text12 };
+  return { retryAt: Number.isFinite(parsed) ? parsed : void 0, signal: signal2, scopeText: text13 };
 }
 function usageLimitErrorMessage(rejection) {
   if (rejection.signal === "org-policy") {
@@ -38789,16 +39183,30 @@ function usageLimitIsRotatable(rejection) {
 function usageLimitScopedModel(rejection, current) {
   if (rejection.signal === "org-policy")
     return void 0;
-  const text12 = (rejection.scopeText ?? "").trim();
-  if (!text12)
+  const text13 = (rejection.scopeText ?? "").trim();
+  if (!text13)
     return void 0;
-  const named = /reached your ([A-Za-z0-9.\- ]{1,30}?) limit/i.exec(text12)?.[1]?.trim().toLowerCase();
+  const named = /reached your ([A-Za-z0-9.\- ]{1,30}?) limit/i.exec(text13)?.[1]?.trim().toLowerCase();
   if (!named)
     return void 0;
   if (current && !current.toLowerCase().includes(named))
     return void 0;
   return named;
 }
+function providerIsServing(content) {
+  if (typeof content === "string")
+    return content.trim().length > 0;
+  if (!Array.isArray(content))
+    return false;
+  return content.some((blk) => {
+    const b = blk;
+    if (!b || typeof b !== "object")
+      return false;
+    if (b.type === "text")
+      return typeof b.text === "string" && b.text.trim().length > 0;
+    return b.type === "tool_use" || b.type === "server_tool_use" || b.type === "thinking";
+  });
+}
 var init_usage_limit = __esm({
   "../../packages/agent-core/dist/usage-limit.js"() {
     "use strict";
@@ -38829,8 +39237,14 @@ function findUserInstalledClaude(binName) {
   const home = homedir3();
   const abs = [
     join17(home, ".claude", "local", binName),
-    // official installer (claude.ai/code)
+    // legacy local npm install (older Claude Code)
     join17(home, ".local", "bin", binName),
+    // the native installer's launcher — where we install
+    // A copy Tesseract itself installed back when it used `npm install -g --prefix`. The probe has
+    // always searched here, this list never did, so such an install read as "installed" in Settings
+    // while the spawn said "not installed". AFTER ~/.local/bin deliberately: a current native
+    // install must win over a stale npm one.
+    join17(home, ".tesseract", "runtimes", "bin", binName),
     join17(home, ".bun", "bin", binName),
     join17(home, ".volta", "bin", binName),
     join17(home, "Library", "pnpm", binName),
@@ -38885,7 +39299,7 @@ function resolveClaudeCodeExecutable() {
         return cachedClaudeExe = bundled;
     }
   }
-  throw new Error("Claude Code isn\u2019t installed. Tesseract runs your own agent framework rather than bundling one \u2014 install Claude Code (https://claude.ai/code, or `npm i -g @anthropic-ai/claude-code`), or pick a different engine in Settings.");
+  throw new Error("Claude Code isn\u2019t installed. Tesseract runs the agent framework you have installed rather than bundling one \u2014 install it with `curl -fsSL https://claude.ai/install.sh | bash` (Windows: `irm https://claude.ai/install.ps1 | iex`), or pick a different engine in Settings.");
 }
 function identityEnv() {
   const out = {};
@@ -39077,12 +39491,14 @@ function sessionStoreFor(mode) {
 function unattendedReportDirective(send5) {
   return unattendedModeFor({ optedIn: send5.unattended, origin: send5.origin }) !== "off" ? prompt("agent.system.unattended-report") : "";
 }
-function sdkModelId(model) {
+function sdkModelId(model, env) {
   const id = model?.trim();
   if (!id)
     return void 0;
   if (process.env.TESSERACT_DISABLE_1M_CONTEXT === "1")
     return id;
+  if (!isAnthropicEndpoint(env))
+    return id;
   if (/[/]/.test(id) || /^[a-z]{2,}\./i.test(id))
     return id;
   return withOneMillionContext(id) ?? id;
@@ -39262,8 +39678,8 @@ function traceFrame(message) {
         const k = b?.type ?? "?";
         kinds.set(k, (kinds.get(k) ?? 0) + 1);
       }
-      const text12 = c.find((b) => b?.type === "text")?.text;
-      what = [...kinds].map(([k, n]) => n > 1 ? `${k}\xD7${n}` : k).join(",") + (text12 ? ` text:${JSON.stringify(text12.slice(0, 60))}` : "");
+      const text13 = c.find((b) => b?.type === "text")?.text;
+      what = [...kinds].map(([k, n]) => n > 1 ? `${k}\xD7${n}` : k).join(",") + (text13 ? ` text:${JSON.stringify(text13.slice(0, 60))}` : "");
     }
     log(`frame user${parent}${flags.length ? " [" + flags.join(",") + "]" : ""}${what ? " \u2014 " + what : ""}`);
     return;
@@ -39354,8 +39770,8 @@ function describeSystemSubtype(subtype, m) {
     const updateKey = category === "hook" ? `hook:${String(m.hook_name ?? m.hook_event_name ?? subtype)}` : category === "task" ? `task:${String(m.task_id ?? subtype)}` : category === "telemetry" ? `sys:${subtype}` : void 0;
     return { category, name: subtype, title: humanizeName(subtype), fields: salientFields(m), ...updateKey ? { updateKey } : {} };
   }
-  const text12 = extractHumanReadable(m);
-  return { category: "unknown", name: subtype, title: `system/${subtype}`, ...text12 ? { detail: text12 } : {}, raw: rawFramePreview(m) };
+  const text13 = extractHumanReadable(m);
+  return { category: "unknown", name: subtype, title: `system/${subtype}`, ...text13 ? { detail: text13 } : {}, raw: rawFramePreview(m) };
 }
 function sstr(v) {
   return typeof v === "string" ? v : "";
@@ -39375,24 +39791,24 @@ function prettifyModel(id) {
   return known[id] ?? id.replace(/^claude-/, "").replace(/[-_]/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 }
 function taskNotificationNotices(content) {
-  let text12 = "";
+  let text13 = "";
   if (typeof content === "string")
-    text12 = content;
+    text13 = content;
   else if (Array.isArray(content)) {
     for (const b of content) {
       if (b && typeof b === "object" && b.type === "text")
-        text12 += `${sstr(b.text)}
+        text13 += `${sstr(b.text)}
 `;
     }
   }
-  if (!text12.includes("<task-notification>"))
+  if (!text13.includes("<task-notification>"))
     return [];
   const tag = (xml3, name) => {
     const m = new RegExp(`<${name}>([\\s\\S]*?)</${name}>`).exec(xml3);
     return m ? m[1].trim() : "";
   };
   const specs = [];
-  for (const m of text12.matchAll(/<task-notification>([\s\S]*?)<\/task-notification>/g)) {
+  for (const m of text13.matchAll(/<task-notification>([\s\S]*?)<\/task-notification>/g)) {
     const status2 = (tag(m[1], "status") || "completed").toLowerCase();
     const summary = tag(m[1], "summary") || "Background task finished.";
     const failed = /fail|error/.test(status2);
@@ -39406,10 +39822,10 @@ function taskNotificationNotices(content) {
 function buildNotice(subtype, m) {
   switch (subtype) {
     case "notification": {
-      const text12 = sstr(m.text) || "Notification";
+      const text13 = sstr(m.text) || "Notification";
       const priority = ["low", "medium", "high", "immediate"].includes(sstr(m.priority)) ? m.priority : "medium";
       const level = priority === "immediate" ? "error" : priority === "high" ? "warning" : priority === "low" ? "info" : "notice";
-      return { category: "notification", level, priority, title: text12, toast: true, inline: true, ...typeof m.timeout_ms === "number" ? { timeoutMs: m.timeout_ms } : {} };
+      return { category: "notification", level, priority, title: text13, toast: true, inline: true, ...typeof m.timeout_ms === "number" ? { timeoutMs: m.timeout_ms } : {} };
     }
     case "informational": {
       const content = sstr(m.content).trim();
@@ -39440,9 +39856,9 @@ function buildNotice(subtype, m) {
       return { category: "memory", level: "info", title: `Recalled ${memories.length} ${memories.length === 1 ? "memory" : "memories"}`, ...names.length ? { body: names.join(" \xB7 ") } : {}, toast: false, inline: true };
     }
     case "permission_denied": {
-      const tool21 = sstr(m.tool_name) || "a tool";
+      const tool22 = sstr(m.tool_name) || "a tool";
       const reason = sstr(m.decision_reason) || sstr(m.message);
-      return { category: "permission", level: "warning", title: `Blocked: ${tool21}`, ...reason ? { body: reason } : {}, ...sstr(m.tool_use_id) ? { toolUseId: sstr(m.tool_use_id) } : {}, toast: true, inline: true };
+      return { category: "permission", level: "warning", title: `Blocked: ${tool22}`, ...reason ? { body: reason } : {}, ...sstr(m.tool_use_id) ? { toolUseId: sstr(m.tool_use_id) } : {}, toast: true, inline: true };
     }
     case "model_refusal_fallback": {
       const orig = sstr(m.original_model);
@@ -39556,9 +39972,9 @@ ${plan}`;
     return name;
   }
 }
-function computerToolPhrase(tool21, input) {
+function computerToolPhrase(tool22, input) {
   const s = (v) => typeof v === "string" ? v : "";
-  switch (tool21) {
+  switch (tool22) {
     case "see_screen":
       return input.x1 !== void 0 ? "Looking closely at part of the screen" : "Looking at the screen";
     case "click":
@@ -39601,15 +40017,15 @@ function assistantText(content) {
   return content.filter((b) => !!b && typeof b === "object").filter((b) => b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n").trim();
 }
 function flattenToolResultContent(content) {
-  let text12 = "";
+  let text13 = "";
   if (typeof content === "string")
-    text12 = content;
+    text13 = content;
   else if (Array.isArray(content)) {
-    text12 = content.filter((b) => b && typeof b === "object" && b.type === "text").map((b) => String(b.text ?? "")).join("\n");
+    text13 = content.filter((b) => b && typeof b === "object" && b.type === "text").map((b) => String(b.text ?? "")).join("\n");
   }
-  if (text12.length > TOOL_RESULT_CAP)
-    return { text: text12.slice(0, TOOL_RESULT_CAP), truncated: true };
-  return { text: text12, truncated: false };
+  if (text13.length > TOOL_RESULT_CAP)
+    return { text: text13.slice(0, TOOL_RESULT_CAP), truncated: true };
+  return { text: text13, truncated: false };
 }
 function extractImages(content) {
   if (!Array.isArray(content))
@@ -39791,6 +40207,7 @@ var init_agent_manager = __esm({
     init_screen_control_tools();
     init_computer_control_tools();
     init_app_control_tools();
+    init_capabilities_tools();
     init_serpapi_tools();
     init_report_tools();
     init_interactive_ui_tools();
@@ -39920,7 +40337,9 @@ var init_agent_manager = __esm({
       "await_jobs",
       "job_output",
       "job_list",
-      "stop_job"
+      "stop_job",
+      // Returns an inlined constant. There is nothing to wait for.
+      "tesseract_capabilities"
     ]);
     STOP_HARD_KILL_AFTER_MS = 1200;
     STREAM_STALL_MS = 20 * 6e4;
@@ -40186,8 +40605,37 @@ var init_agent_manager = __esm({
        *  (then recorded into cronTaskSessions). */
       cronRequestTask = /* @__PURE__ */ new Map();
       /** What each conversation last ran with for Unattended — its own choice, which a scheduled fire into it must
-       *  honour rather than the machine-wide switch (applyTurnPolicy records it; the cron fire above reads it). */
+       *  honour rather than the machine-wide switch (applyTurnPolicy records it; the cron fire above reads it).
+       *  Bounded: a daemon that runs for months must not grow a row per conversation forever, and forgetting the
+       *  oldest is safe — an unknown conversation falls back to 'safe' rather than to the machine switch. */
       unattendedByConversation = /* @__PURE__ */ new Map();
+      /** How many conversations' Unattended choices are remembered. Generous — one small row each — and bounded
+       *  so a long-lived daemon cannot grow this without limit. */
+      static MAX_REMEMBERED_UNATTENDED = 2e3;
+      /**
+       * Everything keyed by a conversation's id that must follow it when the CLI re-ids it mid-flight
+       * (`conversation_reset`). It is the same conversation: the scheduler must keep firing into it rather than
+       * opening a fresh overlapping one, and the Unattended choice made in it still stands — without this, a
+       * reset quietly downgrades the next 3am fire to 'safe' in a conversation the person set up to run alone.
+       */
+      carryConversationTo(prev, next) {
+        for (const [taskId, mapped] of this.cronTaskSessions) {
+          if (mapped === prev)
+            this.cronTaskSessions.set(taskId, next);
+        }
+        const chosen = this.unattendedByConversation.get(prev);
+        if (chosen !== void 0) {
+          this.unattendedByConversation.delete(prev);
+          this.rememberUnattended(next, chosen);
+        }
+      }
+      rememberUnattended(sessionId, unattended) {
+        this.unattendedByConversation.delete(sessionId);
+        this.unattendedByConversation.set(sessionId, unattended);
+        while (this.unattendedByConversation.size > _AgentManager.MAX_REMEMBERED_UNATTENDED) {
+          this.unattendedByConversation.delete(this.unattendedByConversation.keys().next().value);
+        }
+      }
       /** Set (or clear) the skills local-plugin exposed to NEW conversations (Epic H). */
       setSkillsPlugin(config2) {
         this.skillsPlugin = config2;
@@ -40383,6 +40831,12 @@ var init_agent_manager = __esm({
                 // never sent to in this daemon's life — is left ABSENT, which for a cron turn means 'safe':
                 // unanswerable prompts are declined rather than parked, and nothing is approved on anyone's behalf.
                 unattended: targetSessionId ? this.unattendedByConversation.get(targetSessionId) : cfg2.isUnattended?.(),
+                // THE PERSON'S SETTINGS — their block rules, their always-ask rules, their hooks. A scheduled turn
+                // carried NONE of them: a session this fire creates was built without the one layer that refuses
+                // things, on the run nobody is watching. Read at fire time like the switches above, so a rule
+                // written at 23:00 is in force at 03:00. (A conversation already live keeps the settings its
+                // query was built with; this is what a cold or new one starts from.)
+                settings: cfg2.settings?.(),
                 // Only for a conversation this fire is CREATING. Verification is per conversation and
                 // the machine-wide switch is merely the default a new one starts with, so stamping it
                 // onto an existing one overrode the choice the person made there — disarming a loop the
@@ -40449,7 +40903,7 @@ var init_agent_manager = __esm({
         this.onBrowserRequest = onBrowserRequest;
         const __dirname2 = dirname9(fileURLToPath(import.meta.url));
         this.browserCliPath = join17(__dirname2, "browser-cli.js");
-        this.narrator = new Narrator((sessionId, text12, engineLabel) => this.send({ type: "agent:narration", sessionId, text: text12, ...engineLabel ? { engineLabel } : {} }, this.liveSessions.get(sessionId)?.origin));
+        this.narrator = new Narrator((sessionId, text13, engineLabel) => this.send({ type: "agent:narration", sessionId, text: text13, ...engineLabel ? { engineLabel } : {} }, this.liveSessions.get(sessionId)?.origin));
       }
       /** Inject (or clear) the cheap model used for the live status narration. The
        *  host resolves creds and builds the completion fn (keeping secrets host-side). */
@@ -40619,9 +41073,9 @@ var init_agent_manager = __esm({
         const file2 = await resolveSessionFile(sid, live.cwd).catch(() => null);
         if (!file2)
           return false;
-        let text12;
+        let text13;
         try {
-          text12 = await readFile8(file2, "utf8");
+          text13 = await readFile8(file2, "utf8");
         } catch {
           return false;
         }
@@ -40629,7 +41083,7 @@ var init_agent_manager = __esm({
         const v = leanReloadVerdict({
           fillPct: usage2.percentage,
           thresholdPct,
-          leanBytes: contentBytes(text12),
+          leanBytes: contentBytes(text13),
           strippedBytes: live.strippedContentBytes ?? 0
         });
         if (v.action === "skip") {
@@ -40864,7 +41318,7 @@ var init_agent_manager = __esm({
           return false;
         }
         try {
-          await live.query.setModel(sdkModelId(next));
+          await live.query.setModel(sdkModelId(next, live.endpointEnv));
         } catch (err2) {
           log(`[model] ${turnSid}: could not switch to ${next}:`, err2 instanceof Error ? err2.message : String(err2));
           return false;
@@ -41584,7 +42038,7 @@ ${full.slice(-8e3)}`;
       applyTurnPolicy(live, p) {
         live.unattended = unattendedModeFor({ optedIn: p.unattended, origin: p.origin });
         if (p.unattended !== void 0 && live.sessionId)
-          this.unattendedByConversation.set(live.sessionId, p.unattended);
+          this.rememberUnattended(live.sessionId, p.unattended);
         if (p.autoCompactPct !== void 0)
           live.autoCompactPct = p.autoCompactPct;
         live.autoDecisions = 0;
@@ -41763,10 +42217,10 @@ ${full.slice(-8e3)}`;
           parts.push(`The user's current request:
 ${live.lastPrompt.slice(0, 1400)}`);
         if (Array.isArray(live.lastAssistantContent)) {
-          const text12 = live.lastAssistantContent.filter((b) => b?.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n").trim();
-          if (text12)
+          const text13 = live.lastAssistantContent.filter((b) => b?.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n").trim();
+          if (text13)
             parts.push(`What the assistant just said (leading to this question):
-${text12.slice(0, 1600)}`);
+${text13.slice(0, 1600)}`);
         }
         return parts.join("\n\n") || "No additional context available beyond the question itself.";
       }
@@ -42310,9 +42764,9 @@ ${lines}`;
         const transcripts = [];
         for (const sid of sessionIds) {
           const msgs = await this.sessionStore.getSessionMessages(sid).catch(() => []);
-          const text12 = transcriptToText(msgs);
-          if (text12)
-            transcripts.push(text12);
+          const text13 = transcriptToText(msgs);
+          if (text13)
+            transcripts.push(text13);
         }
         if (transcripts.length === 0)
           return;
@@ -42399,7 +42853,7 @@ ${lines}`;
           if (opts.permissionMode)
             await live.query.setPermissionMode(sdkPermissionMode(opts.permissionMode));
           if (opts.model !== void 0) {
-            await live.query.setModel(sdkModelId(opts.model));
+            await live.query.setModel(sdkModelId(opts.model, live.endpointEnv));
             live.model = opts.model || void 0;
             this.rememberSessionModel(live.sessionId, live.model);
           }
@@ -42628,7 +43082,7 @@ ${lines}`;
           live.windowId = params.windowId;
         live.pendingTitle = params.message.trim().slice(0, 80);
         if (params.model)
-          void live.query.setModel(sdkModelId(params.model)).catch(() => {
+          void live.query.setModel(sdkModelId(params.model, live.endpointEnv)).catch(() => {
           });
         if (params.permissionMode)
           void live.query.setPermissionMode(sdkPermissionMode(params.permissionMode)).catch(() => {
@@ -42945,6 +43399,7 @@ ${prompt("agent.system.long-running")}`;
       }
       async createLiveSession(params) {
         const spawnModel = this.modelForSpawn(params);
+        const spawnEndpoint = { ...params.env ?? {}, ...params.engineEnv ?? {} };
         this.rememberSessionModel(params.sessionId, spawnModel);
         this.rememberSessionModel(params.clientRequestId, spawnModel);
         const openProject = params.projectDir ?? this.projectDir ?? params.sources?.[0];
@@ -43106,7 +43561,7 @@ ${prompt("agent.system.long-running")}`;
             // `modelForSpawn`, not `params.model`: a resume that nobody sent a model with (a
             // wake-up after a background task, a daemon-side continuation) would otherwise open a
             // 1M conversation against 200k. See sessionModels.
-            ...spawnModel ? { model: sdkModelId(spawnModel) } : {},
+            ...spawnModel ? { model: sdkModelId(spawnModel, spawnEndpoint) } : {},
             // Clamp to what THIS CLI accepts — an unsupported level is a hard exit-1, not
             // a warning. See clampEffort.
             ...ultracodeEffort ? { effort: ultracodeEffort } : {},
@@ -43115,7 +43570,7 @@ ${prompt("agent.system.long-running")}`;
             // of surfacing an error the user has to act on.
             // Same for the fallback: it REPLACES the main model on an overload, so a bare id here
             // would quietly move a long conversation onto a 200k window mid-run.
-            ...params.fallbackModel ? { fallbackModel: sdkModelId(params.fallbackModel) } : {},
+            ...params.fallbackModel ? { fallbackModel: sdkModelId(params.fallbackModel, spawnEndpoint) } : {},
             ...params.enableFileCheckpointing ? { enableFileCheckpointing: true } : {},
             // ON BY DEFAULT. This is what turns a silent helper into one that says what it is
             // doing — a short present-tense line on each progress frame, written by forking the
@@ -43399,6 +43854,7 @@ ${prompt("agent.system.long-running")}`;
               if (this.computerControlProvider) {
                 mcp["tesseract-computer"] = createSdkMcpServer2({ name: "tesseract-computer", version: "0.1.0", tools: buildComputerControlSdkTools(this.computerControlProvider) });
               }
+              mcp["tesseract-capabilities"] = createSdkMcpServer2({ name: "tesseract-capabilities", version: "0.1.0", tools: buildCapabilitiesTools() });
               if (this.appControlProvider) {
                 const appProvider = this.appControlProvider;
                 mcp["tesseract-app"] = createSdkMcpServer2({
@@ -43845,7 +44301,7 @@ ${prompt("agent.system.long-running")}`;
                 // rather than the number in the run-mode menu.
                 ...this.daemonCompactEnv(params.env),
                 // A GATEWAY MODEL ALIAS MUST NOT BE WINDOW-ENFORCED BY THE CLI. Routed through
-                // our gateway the id is an alias (`tsr-claude`) the CLI does not know. Harmless
+                // our gateway it may be a retired tier alias the CLI does not know. Harmless
                 // for an ordinary query; fatal for its INTERNAL compaction query, which never
                 // returns — no frame, 120s stall, killed as "connection went quiet", replayed
                 // by the client, and stalled again every two minutes for ever. MEASURED on a
@@ -43870,11 +44326,11 @@ ${prompt("agent.system.long-running")}`;
               });
               let errSeen = 0;
               child.stderr?.on("data", (chunk) => {
-                const text12 = String(chunk);
+                const text13 = String(chunk);
                 if (errSeen >= 8e3)
                   return;
-                errSeen += text12.length;
-                for (const line of text12.split("\n")) {
+                errSeen += text13.length;
+                for (const line of text13.split("\n")) {
                   const t = line.trim();
                   if (!t)
                     continue;
@@ -44153,9 +44609,9 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
                     emit2({ type: "chat:stream", sessionId: sid, delta: "[thinking redacted]", messageId: message.uuid, kind: "thinking", ...parentField });
                   } else if (cbt === "advisor_tool_result") {
                     const res = event.content_block.content;
-                    const text12 = res?.type === "advisor_result" ? (res.text ?? "").trim() : "";
-                    if (text12 && parentToolUseId === void 0)
-                      emit2({ type: "agent:advisor", sessionId: sid, text: text12 });
+                    const text13 = res?.type === "advisor_result" ? (res.text ?? "").trim() : "";
+                    if (text13 && parentToolUseId === void 0)
+                      emit2({ type: "agent:advisor", sessionId: sid, text: text13 });
                   }
                 }
                 if (event.type === "content_block_delta") {
@@ -44170,26 +44626,26 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
                     }
                   }
                   if (event.delta?.type === "text_delta" && event.delta.text) {
-                    const text12 = event.delta.text;
-                    if (/<(?:tool_call|tool_result|function_calls|antml:function_calls)[\s>]/i.test(text12)) {
+                    const text13 = event.delta.text;
+                    if (/<(?:tool_call|tool_result|function_calls|antml:function_calls)[\s>]/i.test(text13)) {
                       insideXmlByKey.set(key2, true);
                       break;
                     }
                     if (insideXmlByKey.get(key2)) {
-                      if (/<\/(?:tool_call|tool_result|function_calls|antml:function_calls)\s*>/i.test(text12)) {
+                      if (/<\/(?:tool_call|tool_result|function_calls|antml:function_calls)\s*>/i.test(text13)) {
                         insideXmlByKey.set(key2, false);
                       }
                       break;
                     }
-                    if (/<\/?(?:invoke|antml:invoke|antml:parameter)[\s>]/.test(text12))
+                    if (/<\/?(?:invoke|antml:invoke|antml:parameter)[\s>]/.test(text13))
                       break;
-                    if (/<parameter\s+name=/.test(text12))
+                    if (/<parameter\s+name=/.test(text13))
                       break;
-                    if (/^\s*<\/(?:parameter|invoke|function_calls)>\s*$/.test(text12))
+                    if (/^\s*<\/(?:parameter|invoke|function_calls)>\s*$/.test(text13))
                       break;
                     if (parentToolUseId === void 0)
                       turnStreamed = true;
-                    const d = this.applyDeltaHook(text12, "text", sid);
+                    const d = this.applyDeltaHook(text13, "text", sid);
                     if (d !== null)
                       emit2({ type: "chat:stream", sessionId: sid, delta: d, messageId: message.uuid, kind: "text", ...parentField });
                   }
@@ -44257,10 +44713,8 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
                 live.sessionId = next;
                 this.rememberSessionModel(next, live.model);
                 this.liveSessions.set(next, live);
-                for (const [taskId, mapped] of this.cronTaskSessions) {
-                  if (mapped === prev)
-                    this.cronTaskSessions.set(taskId, next);
-                }
+                if (prev)
+                  this.carryConversationTo(prev, next);
                 this.send({ type: "session:created", sessionId: next, clientRequestId: live.clientRequestId }, live.origin);
                 emitNotice({ category: "info", level: "notice", title: "This conversation was reset", body: "The agent started a fresh conversation; earlier messages are no longer in its context.", inline: true, toast: false });
                 break;
@@ -44310,7 +44764,9 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
                     ...typeof uc?.output_tokens === "number" ? { outputTokens: uc.output_tokens } : {}
                   });
                 }
-                const limitRejection = live.usageLimitRejection ?? (r.subtype === "success" ? assistantUsageLimitFallback(live.lastAssistantContent) : void 0);
+                const limitFromReply = r.subtype === "success" ? assistantUsageLimitFallback(live.lastAssistantContent) : void 0;
+                const turnAnswered = r.subtype === "success" && r.is_error !== true && !limitFromReply;
+                const limitRejection = turnAnswered ? void 0 : live.usageLimitRejection ?? limitFromReply;
                 const resultText = typeof r.result === "string" ? r.result : "";
                 const textOverflow = r.is_error === true && isContextOverflow(resultText) || live.lastAssistantSynthetic === true && assistantContextOverflow(live.lastAssistantContent, isContextOverflow);
                 const apiFailure = textOverflow ? null : classifyEngineApiError(resultText);
@@ -44780,6 +45236,10 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
                     });
                   }
                 }
+                if (live.usageLimitRejection && am.message?.model !== "<synthetic>" && providerIsServing(am.message?.content)) {
+                  log("Usage limit cleared by a reply that followed it:", sid);
+                  live.usageLimitRejection = void 0;
+                }
                 if (am.uuid && parentToolUseId === void 0) {
                   live.lastAssistantUuid = am.uuid;
                   live.lastAssistantContent = am.message?.content;
@@ -44824,20 +45284,20 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
                       const tn = toolNameByUseId.get(toolUseId);
                       if (tn === "Edit" || tn === "Write" || tn === "MultiEdit" || tn === "NotebookEdit")
                         continue;
-                      const { text: text12, truncated } = flattenToolResultContent(blk.content);
+                      const { text: text13, truncated } = flattenToolResultContent(blk.content);
                       const images = extractImages(blk.content);
                       const isError = blk.is_error === true;
-                      if (!text12 && images.length === 0 && !isError)
+                      if (!text13 && images.length === 0 && !isError)
                         continue;
-                      emit2({ type: "agent:tool_result", sessionId: sid, toolUseId, isError, output: text12, images, truncated, ...agentId ? { agentId } : {} });
-                      const bg = parseBackgroundTaskResult(text12);
+                      emit2({ type: "agent:tool_result", sessionId: sid, toolUseId, isError, output: text13, images, truncated, ...agentId ? { agentId } : {} });
+                      const bg = parseBackgroundTaskResult(text13);
                       if (bg && !agentId) {
                         live.taskToolUse.set(bg.taskId, toolUseId);
                         emit2({ type: "agent:task", sessionId: sid, taskId: bg.taskId, phase: "progress", status: "running", ...this.taskIdentity(live, bg.taskId), toolUseId, outputPath: bg.outputPath, isBackgrounded: true });
                         this.startTaskTail(live, bg.taskId, bg.outputPath, toolUseId);
                       }
                       if (isError && !agentId) {
-                        const why = (text12 || "").replace(/```[\s\S]*?```/g, " ").replace(/[`*]/g, "").replace(/\s+/g, " ").trim().slice(0, 160);
+                        const why = (text13 || "").replace(/```[\s\S]*?```/g, " ").replace(/[`*]/g, "").replace(/\s+/g, " ").trim().slice(0, 160);
                         this.narrator.observe(sid, `\u2192 that didn't work${why ? `: ${why}` : ""}`);
                       }
                     } else if (blk?.type === "web_search_tool_result") {
@@ -44869,12 +45329,12 @@ ${unattendedReportDirective(params)}` : ""), live.sessionId) },
               }
               default: {
                 const m = message;
-                const text12 = extractHumanReadable(m);
+                const text13 = extractHumanReadable(m);
                 emitEvent({
                   category: "unknown",
                   name: m.type || "unknown",
                   title: m.type || "unknown frame",
-                  ...text12 ? { detail: text12 } : {},
+                  ...text13 ? { detail: text13 } : {},
                   raw: rawFramePreview(m)
                 }, parentToolUseId);
                 log("unknown SDK message type surfaced with raw data:", m.type || "?");
@@ -46208,11 +46668,11 @@ Element ${i + 1}:`);
 });
 
 // ../../packages/agent-core/dist/present-tools.js
-import { tool as tool20 } from "@anthropic-ai/claude-agent-sdk";
+import { tool as tool21 } from "@anthropic-ai/claude-agent-sdk";
 function buildPresentSdkTools(p) {
-  return PRESENT_TOOL_SPECS.map((spec) => tool20(spec.name, spec.description, zodShapeFromParams(spec.params), async (args) => {
-    const text12 = await p.exec(spec.name, args ?? {});
-    return { content: [{ type: "text", text: text12 || "Done." }] };
+  return PRESENT_TOOL_SPECS.map((spec) => tool21(spec.name, spec.description, zodShapeFromParams(spec.params), async (args) => {
+    const text13 = await p.exec(spec.name, args ?? {});
+    return { content: [{ type: "text", text: text13 || "Done." }] };
   }));
 }
 function buildPresentPrompt(opts) {
@@ -46325,6 +46785,7 @@ __export(dist_exports2, {
   APP_CONTROL_DOMAINS: () => APP_CONTROL_DOMAINS,
   APP_CONTROL_GENERATED_MARKER: () => APP_CONTROL_GENERATED_MARKER,
   AgentManager: () => AgentManager,
+  CAPABILITIES_DOC: () => CAPABILITIES_DOC,
   DEFAULT_OFFLOAD_RECENT_CALLS: () => DEFAULT_OFFLOAD_RECENT_CALLS,
   DESIGN_CLAUDE_MD: () => DESIGN_CLAUDE_MD,
   DESIGN_DIR: () => DESIGN_DIR,
@@ -46357,6 +46818,7 @@ __export(dist_exports2, {
   archivePathFor: () => archivePathFor,
   autoCompactEnvFor: () => autoCompactEnvFor,
   buildAppControlTools: () => buildAppControlTools,
+  buildCapabilitiesTools: () => buildCapabilitiesTools,
   buildClaudeNarrationLlm: () => buildClaudeNarrationLlm,
   buildClaudeSmartLlm: () => buildClaudeSmartLlm,
   buildClaudeVisionLlm: () => buildClaudeVisionLlm,
@@ -46374,6 +46836,7 @@ __export(dist_exports2, {
   bumpVersion: () => bumpVersion,
   capabilitiesByDomain: () => capabilitiesByDomain,
   capabilityById: () => capabilityById,
+  capabilitySections: () => capabilitySections,
   computerControlSpecs: () => computerControlSpecs,
   computerOperatorPrompt: () => computerOperatorPrompt,
   computerSpecParametersJsonSchema: () => computerSpecParametersJsonSchema,
@@ -46385,6 +46848,7 @@ __export(dist_exports2, {
   engineMessageTokens: () => engineMessageTokens,
   exportSession: () => exportSession,
   filterHistory: () => filterHistory,
+  findSections: () => findSections,
   flattenForDisplay: () => flattenForDisplay,
   getModelCatalog: () => getModelCatalog,
   getTokenPath: () => getTokenPath,
@@ -46478,6 +46942,8 @@ var init_dist5 = __esm({
     init_present_tools();
     init_computer_control_tools();
     init_support_tools();
+    init_capabilities_tools();
+    init_capabilities_doc_generated();
     init_app_control_tools();
     init_registry();
     init_docs2();
@@ -47050,9 +47516,9 @@ function materializeClaudeAuthHome(contents) {
   });
   return home;
 }
-function withClaudeModels(env, main2, fast) {
+function withClaudeModels(env, main2, fast, longWindow = true) {
   if (main2) {
-    env.ANTHROPIC_MODEL = withOneMillionContext(main2) ?? main2;
+    env.ANTHROPIC_MODEL = (longWindow ? withOneMillionContext(main2) : main2) ?? main2;
   }
   if (fast)
     env.ANTHROPIC_SMALL_FAST_MODEL = fast;
@@ -47099,7 +47565,7 @@ function resolveRunnerEnv(spec) {
     if (!baseUrl.trim()) {
       return { CCB_RUNNER_CONFIG_ERROR: `Set an address for ${provider.label} in Settings \u2192 Models & accounts.` };
     }
-    return withClaudeModels({ ANTHROPIC_BASE_URL: baseUrl, ANTHROPIC_AUTH_TOKEN: key2, ANTHROPIC_API_KEY: "" }, main2, fast);
+    return withClaudeModels({ ANTHROPIC_BASE_URL: baseUrl, ANTHROPIC_AUTH_TOKEN: key2, ANTHROPIC_API_KEY: "" }, main2, fast, false);
   }
   const endpoint2 = routerEndpointSync({
     providerId,
@@ -47173,7 +47639,10 @@ function readGatewayKey() {
         baseUrl: raw.baseUrl,
         apiKey: raw.apiKey,
         models: raw.models,
-        ...raw.endpoints ? { endpoints: raw.endpoints } : {}
+        ...raw.endpoints ? { endpoints: raw.endpoints } : {},
+        // Per-audience defaults (engine + model) travel through too — `tiers()` in shared
+        // honours `defaults.model` on this headless spawn path exactly as the desktop does.
+        ...raw.defaults ? { defaults: raw.defaults } : {}
       };
     }
   } catch {
@@ -47590,9 +48059,9 @@ function rememberedPath(engineId) {
   }
 }
 function which(bin, path6) {
-  const tool21 = process.platform === "win32" ? "where" : "which";
+  const tool22 = process.platform === "win32" ? "where" : "which";
   try {
-    const out = execFileSync2(tool21, [bin], { env: { ...process.env, PATH: path6 }, timeout: 4e3, encoding: "utf-8" });
+    const out = execFileSync2(tool22, [bin], { env: { ...process.env, PATH: path6 }, timeout: 4e3, encoding: "utf-8" });
     return out.split(/\r?\n/).map((l) => l.trim()).find(Boolean) || void 0;
   } catch {
     return void 0;
@@ -47864,9 +48333,9 @@ function readBody2(req, limitBytes = 4 * 1024 * 1024) {
   });
 }
 function send2(res, code, body, headers = {}) {
-  const text12 = JSON.stringify(body);
-  res.writeHead(code, { "content-type": "application/json", "content-length": Buffer.byteLength(text12), ...headers });
-  res.end(text12);
+  const text13 = JSON.stringify(body);
+  res.writeHead(code, { "content-type": "application/json", "content-length": Buffer.byteLength(text13), ...headers });
+  res.end(text13);
 }
 function portFile() {
   return join28(daemonDir2(), "mcp-endpoint.json");
@@ -47939,13 +48408,13 @@ async function startTesseractMcpEndpoint() {
           return;
         case "tools/call": {
           const name = String(msg.params?.name ?? "");
-          const tool21 = byName.get(name);
-          if (!tool21) {
+          const tool22 = byName.get(name);
+          if (!tool22) {
             fail4(-32602, `Unknown tool "${name}"`);
             return;
           }
           try {
-            const out = await tool21.handler(msg.params?.arguments ?? {}, { sessionId: grant?.sessionId, nested: grant?.extensionId === NESTED_HOLDER });
+            const out = await tool22.handler(msg.params?.arguments ?? {}, { sessionId: grant?.sessionId, nested: grant?.extensionId === NESTED_HOLDER });
             reply3({ content: out.content, ...out.isError ? { isError: true } : {} });
           } catch (e) {
             reply3({ content: [{ type: "text", text: `${name} failed: ${e instanceof Error ? e.message : String(e)}` }], isError: true });
@@ -48099,11 +48568,11 @@ function wrapHostedAsyncTool(t, opts) {
       }
       if (raced.kind === "done") {
         callEnded();
-        return text11(raced.out);
+        return text12(raced.out);
       }
       if (raced.kind === "error") {
         callEnded();
-        return text11(raced.err instanceof Error ? raced.err.message : String(raced.err), true);
+        return text12(raced.err instanceof Error ? raced.err.message : String(raced.err), true);
       }
       opts.learnedSlow?.add(t.name);
       const sessionId = ctx2?.sessionId;
@@ -48116,7 +48585,7 @@ function wrapHostedAsyncTool(t, opts) {
       });
       opts.noteSession?.(job.id, sessionId, claim);
       callEnded();
-      return text11([
+      return text12([
         `Started in the background: job \`${job.id}\`.`,
         `Live output: ${job.logPath}`,
         willNotify ? `You will be notified when it finishes \u2014 do not poll. Continue with other work, or call await_jobs(["${job.id}"]) if you cannot proceed without the result.` : `Call await_jobs(["${job.id}"]) when you need the result, or job_output("${job.id}") to read what it has produced so far.`
@@ -48153,12 +48622,12 @@ function buildHostedJobTools(registry3, opts = {}) {
       handler: async (args, ctx2) => {
         const ids = Array.isArray(args["job_ids"]) ? args["job_ids"].map(String) : [];
         if (ids.length === 0)
-          return text11("await_jobs needs at least one job id.", true);
+          return text12("await_jobs needs at least one job id.", true);
         const unknown2 = ids.filter((id) => !registry3.list().some((j) => j.id === id) || !mine(id, ctx2?.sessionId));
         if (unknown2.length)
-          return text11(`no such job: ${unknown2.join(", ")}`, true);
+          return text12(`no such job: ${unknown2.join(", ")}`, true);
         const jobs = await registry3.await(ids, typeof args["timeout_ms"] === "number" ? args["timeout_ms"] : 12e4);
-        return text11(jobs.map((j) => `${fmt(j)}
+        return text12(jobs.map((j) => `${fmt(j)}
 ${registry3.output(j.id) || "(no output)"}`).join("\n\n"));
       }
     },
@@ -48179,10 +48648,10 @@ ${registry3.output(j.id) || "(no output)"}`).join("\n\n"));
         const id = String(args["job_id"] ?? "");
         const job = registry3.list().find((j) => j.id === id);
         if (!job || !mine(id, ctx2?.sessionId))
-          return text11(`no such job: ${id}`, true);
+          return text12(`no such job: ${id}`, true);
         const from = typeof args["from_offset"] === "number" ? args["from_offset"] : 0;
         const out = registry3.output(id, from);
-        return text11(`${fmt(job)}
+        return text12(`${fmt(job)}
 ${out || "(nothing yet)"}`);
       }
     },
@@ -48193,7 +48662,7 @@ ${out || "(nothing yet)"}`);
       annotations: { readOnlyHint: true },
       handler: async (_args, ctx2) => {
         const jobs = registry3.list().filter((j) => mine(j.id, ctx2?.sessionId)).sort((a, b) => Number(b.status === "running") - Number(a.status === "running"));
-        return text11(jobs.length ? jobs.map(fmt).join("\n\n") : "no jobs.");
+        return text12(jobs.length ? jobs.map(fmt).join("\n\n") : "no jobs.");
       }
     },
     {
@@ -48203,8 +48672,8 @@ ${out || "(nothing yet)"}`);
       handler: async (args, ctx2) => {
         const id = String(args["job_id"] ?? "");
         if (!mine(id, ctx2?.sessionId))
-          return text11(`job ${id} was not running.`);
-        return text11(registry3.stop(id) ? `stopped job ${id}.` : `job ${id} was not running.`);
+          return text12(`job ${id} was not running.`);
+        return text12(registry3.stop(id) ? `stopped job ${id}.` : `job ${id} was not running.`);
       }
     }
   ];
@@ -48435,12 +48904,12 @@ function createNoticeDispatcher(opts) {
     }
   };
 }
-var text11, NEVER_ASYNC;
+var text12, NEVER_ASYNC;
 var init_hosted_jobs = __esm({
   "../../packages/host-core/dist/engines/hosted-jobs.js"() {
     "use strict";
     init_jobs();
-    text11 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
+    text12 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
     NEVER_ASYNC = /* @__PURE__ */ new Set(["await_jobs", "job_output", "job_list", "stop_job"]);
   }
 });
@@ -48719,7 +49188,7 @@ async function startHostedToolset(deps) {
   return { endpoint: endpoint2, sendBrowserResponse, tasks, ...stopOwnedJob ? { stopJob: stopOwnedJob } : {}, ...rekeyOwnedJobs ? { rekeyJobs: rekeyOwnedJobs } : {}, ...jobProbe ? { jobProbe } : {}, refresh: build };
 }
 function buildHostTaskTools(registry3, run9) {
-  const text12 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
+  const text13 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
   return [
     {
       name: "tesseract_spawn_subagent",
@@ -48736,25 +49205,25 @@ function buildHostTaskTools(registry3, run9) {
         const description = String(args.description ?? "sub-task");
         const prompt2 = String(args.prompt ?? "");
         if (!prompt2.trim())
-          return text12("prompt is required", true);
+          return text13("prompt is required", true);
         if (ctx2?.nested) {
-          return text12("You are already a subagent: delegating again is not allowed. Do this work yourself, or report back to the agent that spawned you.", true);
+          return text13("You are already a subagent: delegating again is not allowed. Do this work yourself, or report back to the agent that spawned you.", true);
         }
         const task = registry3.start("subagent", description);
         task.messages.push({ role: "user", content: prompt2 });
         try {
           const out = await run9(prompt2, { signal: task.abort.signal, sessionId: ctx2?.sessionId });
           if (task.status === "stopped")
-            return text12(`Subagent "${description}" was stopped.`, true);
+            return text13(`Subagent "${description}" was stopped.`, true);
           task.status = "done";
           task.result = out;
           task.messages.push({ role: "assistant", content: out });
-          return text12(out || "(the subagent returned nothing)");
+          return text13(out || "(the subagent returned nothing)");
         } catch (e) {
           task.status = task.status === "stopped" ? "stopped" : "failed";
           const why = e instanceof Error ? e.message : String(e);
           task.result = why;
-          return text12(`Subagent "${description}" failed: ${why}`, true);
+          return text13(`Subagent "${description}" failed: ${why}`, true);
         }
       }
     },
@@ -48765,8 +49234,8 @@ function buildHostTaskTools(registry3, run9) {
       handler: async () => {
         const rows = registry3.list();
         if (!rows.length)
-          return text12("No sub-tasks have been started.");
-        return text12(rows.map((t) => `${t.id}  ${t.status.padEnd(7)}  ${t.description}`).join("\n"));
+          return text13("No sub-tasks have been started.");
+        return text13(rows.map((t) => `${t.id}  ${t.status.padEnd(7)}  ${t.description}`).join("\n"));
       }
     },
     {
@@ -48779,7 +49248,7 @@ function buildHostTaskTools(registry3, run9) {
       },
       handler: async (args) => {
         const id = String(args.taskId ?? "");
-        return registry3.stop(id) ? text12(`Stopped ${id}.`) : text12(`${id} is not a running task (unknown, or already finished).`, true);
+        return registry3.stop(id) ? text13(`Stopped ${id}.`) : text13(`${id} is not a running task (unknown, or already finished).`, true);
       }
     }
   ];
@@ -54120,24 +54589,24 @@ var require_text2 = __commonJS({
       }
     }
     var latin1Regex = /^[\u0000-\u00FF]*$/;
-    function validateLatin1(text12) {
-      if (!latin1Regex.test(text12)) {
+    function validateLatin1(text13) {
+      if (!latin1Regex.test(text13)) {
         throw new Error("invalid latin1 text");
       }
     }
-    function decodetEXt(text12, buffer, length) {
+    function decodetEXt(text13, buffer, length) {
       const keyword = readKeyword(buffer);
-      text12[keyword] = readLatin1(buffer, length - keyword.length - 1);
+      text13[keyword] = readLatin1(buffer, length - keyword.length - 1);
     }
-    function encodetEXt(buffer, keyword, text12) {
+    function encodetEXt(buffer, keyword, text13) {
       validateKeyword(keyword);
-      validateLatin1(text12);
-      const length = keyword.length + 1 + text12.length;
+      validateLatin1(text13);
+      const length = keyword.length + 1 + text13.length;
       buffer.writeUint32(length);
       buffer.writeChars(exports.textChunkName);
       buffer.writeChars(keyword);
       buffer.writeByte(NULL);
-      buffer.writeChars(text12);
+      buffer.writeChars(text13);
       (0, crc_1.writeCrc)(buffer, length + 4);
     }
     function readKeyword(buffer) {
@@ -54721,8 +55190,8 @@ var require_PngEncoder = __commonJS({
         }
         this.encodeData();
         if (this._png.text) {
-          for (const [keyword, text12] of Object.entries(this._png.text)) {
-            (0, text_1.encodetEXt)(this, keyword, text12);
+          for (const [keyword, text13] of Object.entries(this._png.text)) {
+            (0, text_1.encodetEXt)(this, keyword, text13);
           }
         }
         this.encodeIEND();
@@ -58908,8 +59377,8 @@ var require_build = __commonJS({
     var BASE64_REGEX = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
     var BASE64URL_REGEX = /^[a-zA-Z0-9-_]+$/;
     var Utf8Converter = class {
-      static fromString(text12) {
-        const s = unescape(encodeURIComponent(text12));
+      static fromString(text13) {
+        const s = unescape(encodeURIComponent(text13));
         const uintArray = new Uint8Array(s.length);
         for (let i = 0; i < s.length; i++) {
           uintArray[i] = s.charCodeAt(i);
@@ -58937,11 +59406,11 @@ var require_build = __commonJS({
         }
         return res;
       }
-      static fromString(text12, littleEndian = false) {
-        const res = new ArrayBuffer(text12.length * 2);
+      static fromString(text13, littleEndian = false) {
+        const res = new ArrayBuffer(text13.length * 2);
         const dataView = new DataView(res);
-        for (let i = 0; i < text12.length; i++) {
-          dataView.setUint16(i * 2, text12.charCodeAt(i), littleEndian);
+        for (let i = 0; i < text13.length; i++) {
+          dataView.setUint16(i * 2, text13.charCodeAt(i), littleEndian);
         }
         return res;
       }
@@ -59038,18 +59507,18 @@ var require_build = __commonJS({
       static ToBase64Url(data) {
         return this.ToBase64(data).replace(/\+/g, "-").replace(/\//g, "_").replace(/\=/g, "");
       }
-      static FromUtf8String(text12, encoding = _Convert.DEFAULT_UTF8_ENCODING) {
+      static FromUtf8String(text13, encoding = _Convert.DEFAULT_UTF8_ENCODING) {
         switch (encoding) {
           case "ascii":
-            return this.FromBinary(text12);
+            return this.FromBinary(text13);
           case "utf8":
-            return Utf8Converter.fromString(text12);
+            return Utf8Converter.fromString(text13);
           case "utf16":
           case "utf16be":
-            return Utf16Converter.fromString(text12);
+            return Utf16Converter.fromString(text13);
           case "utf16le":
           case "usc2":
-            return Utf16Converter.fromString(text12, true);
+            return Utf16Converter.fromString(text13, true);
           default:
             throw new Error(`Unknown type of encoding '${encoding}'`);
         }
@@ -59070,11 +59539,11 @@ var require_build = __commonJS({
             throw new Error(`Unknown type of encoding '${encoding}'`);
         }
       }
-      static FromBinary(text12) {
-        const stringLength = text12.length;
+      static FromBinary(text13) {
+        const stringLength = text13.length;
         const resultView = new Uint8Array(stringLength);
         for (let i = 0; i < stringLength; i++) {
-          resultView[i] = text12.charCodeAt(i);
+          resultView[i] = text13.charCodeAt(i);
         }
         return resultView.buffer;
       }
@@ -59120,8 +59589,8 @@ var require_build = __commonJS({
       static ToUtf16String(buffer, littleEndian = false) {
         return Utf16Converter.toString(buffer, littleEndian);
       }
-      static FromUtf16String(text12, littleEndian = false) {
-        return Utf16Converter.fromString(text12, littleEndian);
+      static FromUtf16String(text13, littleEndian = false) {
+        return Utf16Converter.fromString(text13, littleEndian);
       }
       static Base64Padding(base643) {
         const padCount = 4 - base643.length % 4;
@@ -62882,15 +63351,15 @@ var require_sequence = __commonJS({
       }
       return normalized;
     }
-    function encodeAscii(text12) {
-      const bytes3 = new Uint8Array(text12.length);
-      for (let i = 0; i < text12.length; i++) {
-        bytes3[i] = text12.charCodeAt(i) & 255;
+    function encodeAscii(text13) {
+      const bytes3 = new Uint8Array(text13.length);
+      for (let i = 0; i < text13.length; i++) {
+        bytes3[i] = text13.charCodeAt(i) & 255;
       }
       return bytes3;
     }
-    function encodeUtf8(text12) {
-      return new TextEncoder().encode(text12);
+    function encodeUtf8(text13) {
+      return new TextEncoder().encode(text13);
     }
     function toPatternBytes(pattern, options) {
       if (typeof pattern === "string") {
@@ -64265,15 +64734,15 @@ var require_binary = __commonJS({
       }
       return result;
     }
-    function decode3(text12) {
-      const result = new Uint8Array(text12.length);
-      for (let i = 0; i < text12.length; i++) {
-        result[i] = text12.charCodeAt(i) & 255;
+    function decode3(text13) {
+      const result = new Uint8Array(text13.length);
+      for (let i = 0; i < text13.length; i++) {
+        result[i] = text13.charCodeAt(i) & 255;
       }
       return result;
     }
-    function is(text12) {
-      return typeof text12 === "string";
+    function is(text13) {
+      return typeof text13 === "string";
     }
     exports.binary = { encode: encode3, decode: decode3, is };
   }
@@ -64308,31 +64777,31 @@ var require_hex = __commonJS({
         throw new TypeError("Hex separators must be non-empty strings");
       }
     }
-    function matchSeparator(text12, index, separators) {
+    function matchSeparator(text13, index, separators) {
       for (const separator of separators) {
-        if (text12.startsWith(separator, index)) {
+        if (text13.startsWith(separator, index)) {
           return separator;
         }
       }
       return void 0;
     }
-    function detectCase(text12) {
-      const hasUpper = /[A-F]/.test(text12);
-      const hasLower = /[a-f]/.test(text12);
+    function detectCase(text13) {
+      const hasUpper = /[A-F]/.test(text13);
+      const hasLower = /[a-f]/.test(text13);
       return hasUpper && !hasLower ? "upper" : "lower";
     }
-    function detectLineSeparator(text12) {
-      const match = /\r\n|\n/.exec(text12);
+    function detectLineSeparator(text13) {
+      const match = /\r\n|\n/.exec(text13);
       if (!match) {
         return void 0;
       }
       return match[0] === "\r\n" ? "\r\n" : "\n";
     }
-    function compactForDetection(text12) {
-      return text12.replace(/[^0-9a-f]/gi, "");
+    function compactForDetection(text13) {
+      return text13.replace(/[^0-9a-f]/gi, "");
     }
-    function detectGroup(text12) {
-      const segments = text12.match(/[0-9A-Fa-f]+|[^0-9A-Fa-f]+/g) ?? [];
+    function detectGroup(text13) {
+      const segments = text13.match(/[0-9A-Fa-f]+|[^0-9A-Fa-f]+/g) ?? [];
       if (segments.length < 3) {
         return void 0;
       }
@@ -64360,8 +64829,8 @@ var require_hex = __commonJS({
         separator
       };
     }
-    function detectFormat(text12) {
-      const trimmed = text12.trim();
+    function detectFormat(text13) {
+      const trimmed = text13.trim();
       const prefix = /^0x/i.test(trimmed) ? "0x" : "";
       const body = prefix ? trimmed.slice(2) : trimmed;
       const lineSeparator = detectLineSeparator(body);
@@ -64386,13 +64855,13 @@ var require_hex = __commonJS({
       }
       return format2;
     }
-    function normalizeText(text12, options) {
+    function normalizeText(text13, options) {
       const allowPrefix = options.allowPrefix ?? true;
       const separators = [...resolveSeparators(options)].sort((left, right) => right.length - left.length);
       for (const separator of separators) {
         validateSeparator(separator);
       }
-      let working = text12.trim();
+      let working = text13.trim();
       if (/^0x/i.test(working)) {
         if (!allowPrefix) {
           throw new TypeError("Hexadecimal text must not include a 0x prefix");
@@ -64443,15 +64912,15 @@ var require_hex = __commonJS({
       }
       return chunks.join(group.separator);
     }
-    function normalize3(text12, options = {}) {
-      return normalizeText(text12, options);
+    function normalize3(text13, options = {}) {
+      return normalizeText(text13, options);
     }
-    function is(text12, options = {}) {
-      if (typeof text12 !== "string") {
+    function is(text13, options = {}) {
+      if (typeof text13 !== "string") {
         return false;
       }
       try {
-        normalize3(text12, options);
+        normalize3(text13, options);
         return true;
       } catch {
         return false;
@@ -64461,8 +64930,8 @@ var require_hex = __commonJS({
       const bytes3 = (0, index_js_1.toUint8Array)(data);
       const casing = options.case ?? "lower";
       const pairs = Array.from(bytes3, (byte) => {
-        const text12 = byte.toString(16).padStart(2, "0");
-        return casing === "upper" ? text12.toUpperCase() : text12;
+        const text13 = byte.toString(16).padStart(2, "0");
+        return casing === "upper" ? text13.toUpperCase() : text13;
       });
       let body = "";
       if (options.line) {
@@ -64481,19 +64950,19 @@ var require_hex = __commonJS({
       }
       return `${options.prefix ?? ""}${body}`;
     }
-    function decode3(text12, options = {}) {
-      const normalized = normalize3(text12, options);
+    function decode3(text13, options = {}) {
+      const normalized = normalize3(text13, options);
       const result = new Uint8Array(normalized.length / 2);
       for (let i = 0; i < normalized.length; i += 2) {
         result[i / 2] = Number.parseInt(normalized.slice(i, i + 2), 16);
       }
       return result;
     }
-    function parse4(text12, options = {}) {
-      const normalized = normalize3(text12, options);
+    function parse4(text13, options = {}) {
+      const normalized = normalize3(text13, options);
       return {
         bytes: decode3(normalized),
-        format: detectFormat(text12),
+        format: detectFormat(text13),
         normalized
       };
     }
@@ -64521,8 +64990,8 @@ var require_utf8 = __commonJS({
     exports.encode = encode3;
     exports.decode = decode3;
     var index_js_1 = require_bytes();
-    function encode3(text12) {
-      return new TextEncoder().encode(text12);
+    function encode3(text13) {
+      return new TextEncoder().encode(text13);
     }
     function decode3(data) {
       return new TextDecoder("utf-8", { fatal: false }).decode((0, index_js_1.toUint8Array)(data));
@@ -64540,11 +65009,11 @@ var require_utf16 = __commonJS({
     exports.encode = encode3;
     exports.decode = decode3;
     var index_js_1 = require_bytes();
-    function encode3(text12, options = {}) {
-      const result = new ArrayBuffer(text12.length * 2);
+    function encode3(text13, options = {}) {
+      const result = new ArrayBuffer(text13.length * 2);
       const view = new DataView(result);
-      for (let i = 0; i < text12.length; i++) {
-        view.setUint16(i * 2, text12.charCodeAt(i), options.littleEndian ?? false);
+      for (let i = 0; i < text13.length; i++) {
+        view.setUint16(i * 2, text13.charCodeAt(i), options.littleEndian ?? false);
       }
       return new Uint8Array(result);
     }
@@ -64578,18 +65047,18 @@ var require_base64 = __commonJS({
     function nodeBuffer() {
       return globalThis.Buffer;
     }
-    function normalize3(text12) {
-      return text12.replace(/[\n\r\t ]/g, "");
+    function normalize3(text13) {
+      return text13.replace(/[\n\r\t ]/g, "");
     }
-    function pad2(text12) {
-      const remainder = text12.length % 4;
-      return remainder ? text12 + "=".repeat(4 - remainder) : text12;
+    function pad2(text13) {
+      const remainder = text13.length % 4;
+      return remainder ? text13 + "=".repeat(4 - remainder) : text13;
     }
-    function is(text12) {
-      if (typeof text12 !== "string") {
+    function is(text13) {
+      if (typeof text13 !== "string") {
         return false;
       }
-      const normalized = normalize3(text12);
+      const normalized = normalize3(text13);
       return normalized === "" || BASE64_REGEX.test(normalized);
     }
     function encode3(data, _options) {
@@ -64600,8 +65069,8 @@ var require_base64 = __commonJS({
       }
       return btoa((0, binary_js_1.encode)(bytes3));
     }
-    function decode3(text12, _options) {
-      const normalized = normalize3(text12);
+    function decode3(text13, _options) {
+      const normalized = normalize3(text13);
       if (!is(normalized)) {
         throw new TypeError("Input is not valid Base64 text");
       }
@@ -64627,17 +65096,17 @@ var require_base64url = __commonJS({
     exports.decode = decode3;
     var base64_js_1 = require_base64();
     var BASE64URL_REGEX = /^[A-Za-z0-9_-]*$/;
-    function normalize3(text12) {
-      return text12.replace(/[\n\r\t ]/g, "");
+    function normalize3(text13) {
+      return text13.replace(/[\n\r\t ]/g, "");
     }
-    function is(text12) {
-      return typeof text12 === "string" && BASE64URL_REGEX.test(normalize3(text12));
+    function is(text13) {
+      return typeof text13 === "string" && BASE64URL_REGEX.test(normalize3(text13));
     }
     function encode3(data, _options) {
       return base64_js_1.base64.encode(data).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
     }
-    function decode3(text12, _options) {
-      const normalized = normalize3(text12);
+    function decode3(text13, _options) {
+      const normalized = normalize3(text13);
       if (!is(normalized)) {
         throw new TypeError("Input is not valid Base64Url text");
       }
@@ -64758,8 +65227,8 @@ var require_ip_converter = __commonJS({
         }
         return ip;
       }
-      static parseCIDR(text12) {
-        const [addr, prefixStr] = text12.split("/");
+      static parseCIDR(text13) {
+        const [addr, prefixStr] = text13.split("/");
         const prefix = parseInt(prefixStr, 10);
         if (this.isIPv4(addr)) {
           if (prefix < 0 || prefix > 32) {
@@ -64812,9 +65281,9 @@ var require_ip_converter = __commonJS({
         }
         return this.decodeIP(encoding_1.hex.encode(buf));
       }
-      static fromString(text12) {
-        if (text12.includes("/")) {
-          const [addr, prefix] = this.parseCIDR(text12);
+      static fromString(text13) {
+        if (text13.includes("/")) {
+          const [addr, prefix] = this.parseCIDR(text13);
           const maskBytes = new Uint8Array(addr.length);
           let bitsLeft = prefix;
           for (let i = 0; i < maskBytes.length; i++) {
@@ -64831,7 +65300,7 @@ var require_ip_converter = __commonJS({
           out.set(maskBytes, addr.length);
           return out.buffer;
         }
-        const bytes3 = this.isIPv4(text12) ? this.parseIPv4(text12) : this.parseIPv6(text12);
+        const bytes3 = this.isIPv4(text13) ? this.parseIPv4(text13) : this.parseIPv6(text13);
         return new Uint8Array(bytes3).buffer;
       }
     };
@@ -72511,24 +72980,24 @@ var require_x509_cjs = __commonJS({
     names.register("I", "2.5.4.43");
     names.register("SN", "2.5.4.4");
     names.register("T", "2.5.4.12");
-    function replaceUnknownCharacter(text12, char) {
+    function replaceUnknownCharacter(text13, char) {
       return `\\${pvtsutils.Convert.ToHex(pvtsutils.Convert.FromUtf8String(char)).toUpperCase()}`;
     }
     function escape2(data) {
       return data.replace(/([,+"\\<>;])/g, "\\$1").replace(/^([ #])/, "\\$1").replace(/([ ]$)/, "\\$1").replace(/([\r\n\t])/, replaceUnknownCharacter);
     }
     var Name = class _Name {
-      static isASCII(text12) {
-        for (let i = 0; i < text12.length; i++) {
-          const code = text12.charCodeAt(i);
+      static isASCII(text13) {
+        for (let i = 0; i < text13.length; i++) {
+          const code = text13.charCodeAt(i);
           if (code > 255) {
             return false;
           }
         }
         return true;
       }
-      static isPrintableString(text12) {
-        return /^[A-Za-z0-9 '()+,-./:=?]*$/g.test(text12);
+      static isPrintableString(text13) {
+        return /^[A-Za-z0-9 '()+,-./:=?]*$/g.test(text13);
       }
       constructor(data, extraNames = {}) {
         this.extraNames = new NameIdentifier();
@@ -77825,12 +78294,12 @@ function formatAddr(afi, addr) {
     s = s + ":";
   return s;
 }
-function parsePrefix(text12) {
-  const slash = text12.lastIndexOf("/");
+function parsePrefix(text13) {
+  const slash = text13.lastIndexOf("/");
   if (slash < 0)
-    throw new MeshCodecError("bad-value", `missing / in ${text12}`);
-  const host = text12.slice(0, slash);
-  const lenStr = text12.slice(slash + 1);
+    throw new MeshCodecError("bad-value", `missing / in ${text13}`);
+  const host = text13.slice(0, slash);
+  const lenStr = text13.slice(slash + 1);
   if (!/^\d{1,3}$/.test(lenStr))
     throw new MeshCodecError("bad-value", `prefix len ${lenStr}`);
   const len = Number(lenStr);
@@ -77839,15 +78308,15 @@ function parsePrefix(text12) {
     throw new MeshCodecError("bad-value", `len ${len} for v${afi}`);
   return makePrefix(afi, mask(addr, len), len);
 }
-function parseAddr(text12) {
-  if (text12.includes(":"))
-    return { afi: AFI_V6, addr: parseV6(text12) };
-  return { afi: AFI_V4, addr: parseV4(text12) };
+function parseAddr(text13) {
+  if (text13.includes(":"))
+    return { afi: AFI_V6, addr: parseV6(text13) };
+  return { afi: AFI_V4, addr: parseV4(text13) };
 }
-function parseV4(text12) {
-  const parts = text12.split(".");
+function parseV4(text13) {
+  const parts = text13.split(".");
   if (parts.length !== 4)
-    throw new MeshCodecError("bad-value", `bad IPv4 ${text12}`);
+    throw new MeshCodecError("bad-value", `bad IPv4 ${text13}`);
   const out = new Uint8Array(4);
   for (let i = 0; i < 4; i++) {
     if (!/^(0|[1-9]\d{0,2})$/.test(parts[i]))
@@ -77859,22 +78328,22 @@ function parseV4(text12) {
   }
   return out;
 }
-function parseV6(text12) {
-  if (text12.includes("::")) {
-    const halves = text12.split("::");
+function parseV6(text13) {
+  if (text13.includes("::")) {
+    const halves = text13.split("::");
     if (halves.length !== 2)
-      throw new MeshCodecError("bad-value", `bad IPv6 ${text12}`);
+      throw new MeshCodecError("bad-value", `bad IPv6 ${text13}`);
     const head = halves[0] ? halves[0].split(":") : [];
     const tail3 = halves[1] ? halves[1].split(":") : [];
     if (head.length + tail3.length > 7)
-      throw new MeshCodecError("bad-value", `bad IPv6 ${text12}`);
+      throw new MeshCodecError("bad-value", `bad IPv6 ${text13}`);
     const zeros = new Array(8 - head.length - tail3.length).fill("0");
-    return groupsToBytes([...head, ...zeros, ...tail3], text12);
+    return groupsToBytes([...head, ...zeros, ...tail3], text13);
   }
-  const g = text12.split(":");
+  const g = text13.split(":");
   if (g.length !== 8)
-    throw new MeshCodecError("bad-value", `bad IPv6 ${text12}`);
-  return groupsToBytes(g, text12);
+    throw new MeshCodecError("bad-value", `bad IPv6 ${text13}`);
+  return groupsToBytes(g, text13);
 }
 function groupsToBytes(groups, orig) {
   if (groups.length !== 8)
@@ -85802,13 +86271,18 @@ function scheduledTurn(a) {
     // Absent ⇒ for a cron turn that is 'safe' (unattendedModeFor): declined rather than parked, and nothing
     // approved on anyone's behalf.
     unattended: a.target ? a.prev?.unattended : a.policy.unattended ? true : void 0,
-    ...a.target ? {} : { reinforcedVerification: a.policy.reinforcedVerification ? true : void 0 }
+    ...a.target ? {} : { reinforcedVerification: a.policy.reinforcedVerification ? true : void 0 },
+    // THE PERSON'S SETTINGS — their block rules above all — on a fire that OPENS a conversation and so has
+    // no last send to replay them from. Without this the 3am run, the one nobody is watching, is the one
+    // turn their rules do not reach (permission-rules.ts enforces them from exactly this field).
+    ...a.target ? {} : { settings: a.policy.settings }
   };
 }
 function createHostedScheduling(fire) {
   let store = null;
   let isUnattended;
   let isVerified;
+  let settings;
   let stopScheduler = null;
   let cronDeps = { pushEnabled: false };
   let cron = null;
@@ -85832,6 +86306,7 @@ function createHostedScheduling(fire) {
       stopScheduler = null;
       isUnattended = cfg2.isUnattended ?? isUnattended;
       isVerified = cfg2.isVerified ?? isVerified;
+      settings = cfg2.settings ?? settings;
       if (!cfg2.enabled) {
         store = null;
         cronTools = [];
@@ -85871,7 +86346,11 @@ function createHostedScheduling(fire) {
       })();
     },
     policy() {
-      return { unattended: isUnattended?.() === true, reinforcedVerification: isVerified?.() === true };
+      return {
+        unattended: isUnattended?.() === true,
+        reinforcedVerification: isVerified?.() === true,
+        settings: settings?.()
+      };
     },
     beginFire(taskId) {
       const id = `cron:${taskId}:${randomUUID12().slice(0, 8)}`;
@@ -85974,8 +86453,8 @@ function listOf(items) {
   const words = items.map((i) => i.text);
   return words.length === 1 ? words[0] : `${words.slice(0, -1).join(", ")} and ${words[words.length - 1]}`;
 }
-function sentence(text12) {
-  return `${text12[0].toUpperCase()}${text12.slice(1)}`;
+function sentence(text13) {
+  return `${text13[0].toUpperCase()}${text13.slice(1)}`;
 }
 function unappliedSettingsNotice(engineLabel, settings, at, inForce = {}) {
   const { items, protective } = unappliedSettings(settings, inForce);
@@ -86011,24 +86490,24 @@ var SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "PowerShell", "Shell"]);
 var WRITE_TOOLS = /* @__PURE__ */ new Set(["Edit", "MultiEdit", "Write", "NotebookEdit"]);
 var READ_TOOLS = /* @__PURE__ */ new Set(["Read", "NotebookRead"]);
 var PATH_TOOLS = /* @__PURE__ */ new Set([...WRITE_TOOLS, ...READ_TOOLS]);
-function indexOfUnescaped(text12, char) {
-  for (let i = 0; i < text12.length; i++) {
-    if (text12[i] !== char)
+function indexOfUnescaped(text13, char) {
+  for (let i = 0; i < text13.length; i++) {
+    if (text13[i] !== char)
       continue;
     let back = 0;
-    for (let j = i - 1; j >= 0 && text12[j] === "\\"; j--)
+    for (let j = i - 1; j >= 0 && text13[j] === "\\"; j--)
       back++;
     if (back % 2 === 0)
       return i;
   }
   return -1;
 }
-function lastIndexOfUnescaped(text12, char) {
-  for (let i = text12.length - 1; i >= 0; i--) {
-    if (text12[i] !== char)
+function lastIndexOfUnescaped(text13, char) {
+  for (let i = text13.length - 1; i >= 0; i--) {
+    if (text13[i] !== char)
       continue;
     let back = 0;
-    for (let j = i - 1; j >= 0 && text12[j] === "\\"; j--)
+    for (let j = i - 1; j >= 0 && text13[j] === "\\"; j--)
       back++;
     if (back % 2 === 0)
       return i;
@@ -86092,12 +86571,12 @@ function rulesOutOfReach(rules, reach) {
     return true;
   });
 }
-function ruleRequestFor(tool21, detail) {
+function ruleRequestFor(tool22, detail) {
   const input = detail.input ?? {};
   const command = commandText(input.command);
   const changed = Array.isArray(input.changes) ? input.changes.map((c) => typeof c?.path === "string" ? c.path : void 0) : [];
   const paths = [...detail.paths ?? [], detail.path, typeof input.path === "string" ? input.path : void 0, ...changed].filter((p) => typeof p === "string" && p.length > 0);
-  return { tool: tool21, ...command ? { command } : {}, ...paths.length ? { paths } : {} };
+  return { tool: tool22, ...command ? { command } : {}, ...paths.length ? { paths } : {} };
 }
 function commandText(command) {
   if (typeof command === "string")
@@ -86111,9 +86590,9 @@ function describeRuleRequest(request2) {
     return `\`${request2.command}\``;
   const paths = request2.paths ?? [];
   if (paths.length === 1)
-    return paths[0];
+    return `\`${paths[0]}\``;
   if (paths.length > 1)
-    return `${paths[0]} and ${paths.length - 1} more`;
+    return `\`${paths[0]}\` and ${paths.length - 1} more`;
   return `a ${request2.tool} call`;
 }
 function toolNameForRules(kind, name) {
@@ -86127,6 +86606,8 @@ function toolNameForRules(kind, name) {
     case "write":
     case "file":
     case "filechange":
+    case "delete":
+    case "move":
       return "Edit";
     case "read":
       return "Read";
@@ -86157,12 +86638,13 @@ function commandCandidates(command, depth = 0) {
   add2(command);
   for (const part of splitOnOperators(command)) {
     add2(part);
-    const bare = stripPrefixes(part);
-    add2(bare);
-    if (depth < 3)
-      for (const inner of unwrapped(bare))
-        for (const c of commandCandidates(inner, depth + 1))
-          add2(c);
+    for (const bare of [part, ...wrapperPeels(part)]) {
+      add2(bare);
+      if (depth < 3)
+        for (const inner of unwrapped(bare))
+          for (const c of commandCandidates(inner, depth + 1))
+            add2(c);
+    }
   }
   return [...out];
 }
@@ -86208,18 +86690,60 @@ function splitOnOperators(command) {
   parts.push(current);
   return parts.map((p) => p.trim()).filter(Boolean);
 }
-function stripPrefixes(command) {
-  let out = command.trim();
-  for (let i = 0; i < 8; i++) {
-    const before = out;
-    out = out.replace(/^[A-Za-z_][A-Za-z0-9_]*=(?:"[^"]*"|'[^']*'|\S*)\s+/, "");
-    out = out.replace(/^(?:sudo|doas|command|builtin|exec|nohup|stdbuf|nice|ionice|env|xargs|time|timeout)\b\s*/, "");
-    out = out.replace(/^-[A-Za-z-]+[= ]?\S*\s*/, "");
-    out = out.replace(/^\d+(?:\.\d+)?[smhd]?\s+/, "");
-    if (out === before)
-      break;
+var WRAPPERS = /* @__PURE__ */ new Set([
+  "sudo",
+  "doas",
+  "command",
+  "builtin",
+  "exec",
+  "nohup",
+  "stdbuf",
+  "nice",
+  "ionice",
+  "env",
+  "xargs",
+  "time",
+  "timeout"
+]);
+function wrapperPeels(command) {
+  const ENV = /^[A-Za-z_][A-Za-z0-9_]*=(?:"[^"]*"|'[^']*'|\S*)\s+/;
+  const WORD = /^(\S+)\s+/;
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const queue3 = [command.trim()];
+  while (queue3.length && out.length < 24) {
+    const rest = queue3.shift();
+    if (!rest || seen.has(rest))
+      continue;
+    seen.add(rest);
+    const keep = (next2) => {
+      if (next2) {
+        out.push(next2);
+        queue3.push(next2);
+      }
+    };
+    const env = ENV.exec(rest);
+    if (env) {
+      keep(rest.slice(env[0].length));
+      continue;
+    }
+    const word = WORD.exec(rest);
+    if (!word)
+      continue;
+    const token4 = word[1];
+    const isFlag = token4.startsWith("-");
+    const isDuration = /^\d+(?:\.\d+)?[smhd]?$/.test(token4);
+    if (!WRAPPERS.has(token4) && !isFlag && !isDuration)
+      continue;
+    const next = rest.slice(word[0].length);
+    keep(next);
+    if (isFlag) {
+      const value = WORD.exec(next);
+      if (value && !value[1].startsWith("-"))
+        keep(next.slice(value[0].length));
+    }
   }
-  return out.trim() || command.trim();
+  return out;
 }
 function unwrapped(command) {
   const out = [];
@@ -86231,8 +86755,8 @@ function unwrapped(command) {
     out.push(stripQuotes(evaled[1]));
   return out;
 }
-function stripQuotes(text12) {
-  const t = text12.trim();
+function stripQuotes(text13) {
+  const t = text13.trim();
   if (t.startsWith('"') && t.endsWith('"') || t.startsWith("'") && t.endsWith("'"))
     return t.slice(1, -1);
   return t;
@@ -86259,14 +86783,14 @@ function hasWildcard(pattern) {
   }
   return false;
 }
-function matchesWildcard(pattern, text12) {
+function matchesWildcard(pattern, text13) {
   const STAR = `${MARK}S${MARK}`;
   const BACK = `${MARK}B${MARK}`;
   const processed = pattern.trim().replace(/\\\*/g, STAR).replace(/\\\\/g, BACK);
   let regex = processed.replace(/[.+?^${}()|[\]\\'"]/g, "\\$&").replace(/\*/g, ".*").split(STAR).join("\\*").split(BACK).join("\\\\");
   if (regex.endsWith(" .*") && (processed.match(/\*/g) ?? []).length === 1)
     regex = `${regex.slice(0, -3)}( .*)?`;
-  return new RegExp(`^${regex}$`, "s").test(text12.trim());
+  return new RegExp(`^${regex}$`, "s").test(text13.trim());
 }
 var BLOCKED_BY_RULE_NOTICE_ID = "blocked-by-rule";
 function blockedByRuleNotice(engineLabel, at, blocked) {
@@ -86303,10 +86827,6 @@ function opencodeBashDeny(rules) {
     }
     const prefix = /^(.+):\*$/.exec(content)?.[1];
     const pattern = prefix !== void 0 ? `${prefix} *` : content;
-    if (prefix === void 0 && !hasWildcard(content) && content.includes("*")) {
-      untranslated.push(rule);
-      continue;
-    }
     patterns.push(pattern, `sudo ${pattern}`, `xargs ${pattern}`);
     expressed.push(rule);
   }
@@ -86321,16 +86841,16 @@ function matchesPath(pattern, path6) {
 }
 
 // ../../packages/host-core/dist/engines/message-locator.js
-function newestSentMessageWithText(messages, text12) {
-  if (!text12)
+function newestSentMessageWithText(messages, text13) {
+  if (!text13)
     return void 0;
   for (let i = messages.length - 1; i >= 0; i--) {
     const m = messages[i];
     if (m.role !== "user" || !m.id)
       continue;
-    if (m.text === text12 || m.text.endsWith(`
+    if (m.text === text13 || m.text.endsWith(`
 
-${text12}`))
+${text13}`))
       return m.id;
   }
   return void 0;
@@ -86394,9 +86914,9 @@ async function mergeSessionsVia(deps, sessionIds, opts) {
   const transcripts = [];
   for (const sid of sessionIds) {
     const msgs = await deps.getMessages(sid, opts.projectDir).catch(() => []);
-    const text12 = transcriptToText(msgs);
-    if (text12)
-      transcripts.push(text12);
+    const text13 = transcriptToText(msgs);
+    if (text13)
+      transcripts.push(text13);
   }
   if (transcripts.length === 0)
     return false;
@@ -86419,11 +86939,11 @@ import { homedir as homedir5 } from "node:os";
 function geminiChatsRoot(home = process.env.GEMINI_CLI_HOME || homedir5()) {
   return join29(home, ".gemini", "tmp");
 }
-function parseGeminiSessionFile(file2, text12) {
+function parseGeminiSessionFile(file2, text13) {
   let header2 = null;
   let seeded = false;
   const messages = [];
-  for (const line of text12.split("\n")) {
+  for (const line of text13.split("\n")) {
     if (!line.trim())
       continue;
     let o;
@@ -86468,8 +86988,8 @@ var fileForSession = /* @__PURE__ */ new Map();
 async function findGeminiSessionFile(sessionId, root = geminiChatsRoot()) {
   const known = fileForSession.get(sessionId);
   if (known) {
-    const text12 = await readFile10(known, "utf8").catch(() => null);
-    const t = text12 === null ? null : parseGeminiSessionFile(known, text12);
+    const text13 = await readFile10(known, "utf8").catch(() => null);
+    const t = text13 === null ? null : parseGeminiSessionFile(known, text13);
     if (t?.header.sessionId === sessionId)
       return t;
     fileForSession.delete(sessionId);
@@ -86484,10 +87004,10 @@ async function findGeminiSessionFile(sessionId, root = geminiChatsRoot()) {
       if (!f.endsWith(".jsonl"))
         continue;
       const full = join29(chats, f);
-      const text12 = await readFile10(full, "utf8").catch(() => null);
-      if (text12 === null)
+      const text13 = await readFile10(full, "utf8").catch(() => null);
+      if (text13 === null)
         continue;
-      const t = parseGeminiSessionFile(full, text12);
+      const t = parseGeminiSessionFile(full, text13);
       if (t?.header.sessionId === sessionId) {
         fileForSession.set(sessionId, full);
         return t;
@@ -86558,14 +87078,14 @@ function createHostedVerification(engineId) {
       const anchor = plan?.trim() ? plan : finalText;
       if (anchor.trim())
         state3 = { ...state3, plan: anchor.slice(0, 4e3) };
-      let text12 = finalText;
+      let text13 = finalText;
       let reviewText = "";
       let phaseText = "";
       for (let i = 0; i < rv.RV_MAX_CYCLES * 5 + 4; i++) {
         const gate = state3.phase === "review" ? "review" : state3.phase === "phase-review" ? "phase" : "completeness";
         const still = outstanding?.() ?? [];
         const pending2 = still.length ? still : void 0;
-        const call3 = gate === "review" ? rv.reviewGrade(state3, reviewText || text12, todos, pending2) : gate === "phase" ? rv.phaseGrade(state3, state3.lastVerdict?.phaseName ?? "", phaseText || text12, todos, pending2) : rv.completenessGrade(state3, text12, todos, pending2);
+        const call3 = gate === "review" ? rv.reviewGrade(state3, reviewText || text13, todos, pending2) : gate === "phase" ? rv.phaseGrade(state3, state3.lastVerdict?.phaseName ?? "", phaseText || text13, todos, pending2) : rv.completenessGrade(state3, text13, todos, pending2);
         let verdict = null;
         try {
           verdict = rv.parseVerdict(await grade({ model, system: call3.system, prompt: call3.prompt, maxTokens: 16e3, schema: call3.schema }));
@@ -86573,16 +87093,16 @@ function createHostedVerification(engineId) {
           verdict = null;
         }
         if (gone())
-          return text12;
+          return text13;
         if (!verdict) {
           standDown(state3.cycles, "The verifier did not return a usable verdict, so this run was not verified.");
-          return text12;
+          return text13;
         }
         {
           const why = halt();
           if (why) {
             standDown(state3.cycles, why);
-            return text12;
+            return text13;
           }
         }
         const action = rv.rvDecision(verdict, state3);
@@ -86603,45 +87123,45 @@ function createHostedVerification(engineId) {
           summary: verdict.summary
         });
         if (action.kind === "done" || action.kind === "capped")
-          return text12;
+          return text13;
         try {
           if (gone())
-            return text12;
+            return text13;
           {
             const why = halt();
             if (why) {
               standDown(state3.cycles, why);
-              return text12;
+              return text13;
             }
           }
-          const before = action.kind === "review" ? reviewText : action.kind === "phase-review" ? phaseText : text12;
+          const before = action.kind === "review" ? reviewText : action.kind === "phase-review" ? phaseText : text13;
           const reply3 = await reprompt(action.prompt);
           if (gone())
-            return text12;
+            return text13;
           {
             const why = halt();
             if (why) {
               standDown(state3.cycles, why);
-              return text12;
+              return text13;
             }
           }
           if (!reply3 || reply3 === before) {
             standDown(state3.cycles, "The agent did not produce anything new when sent back, so this run was not verified.");
-            return text12;
+            return text13;
           }
           if (action.kind === "review")
             reviewText = reply3;
           else if (action.kind === "phase-review")
             phaseText = reply3;
           else
-            text12 = reply3;
+            text13 = reply3;
         } catch {
           standDown(state3.cycles, "Verification could not be completed, so this run was not verified.");
-          return text12;
+          return text13;
         }
       }
       emit2({ ...base, action: "capped", gate: "completeness", cycle: rv.RV_MAX_CYCLES });
-      return text12;
+      return text13;
     }
   };
 }
@@ -86952,7 +87472,7 @@ function createRunTracker(opts) {
       }
       return token4;
     },
-    turnEnded(handle3, text12) {
+    turnEnded(handle3, text13) {
       const token4 = handle3;
       const c = convs.get(resolve16(token4.key));
       if (!c)
@@ -86960,14 +87480,14 @@ function createRunTracker(opts) {
       c.live.delete(token4.id);
       const run9 = c.run;
       if (run9 && !run9.closed && token4.request === run9.request) {
-        if (text12 === null && token4.carried && run9.waiters.length > 0) {
+        if (text13 === null && token4.carried && run9.waiters.length > 0) {
           opts.log?.(`[run] ${c.key}: the turn delivering a result failed \u2014 the run is not verified`);
           closeRun(c, run9, { reason: NOT_DELIVERED });
           gc(c);
           return;
         }
-        if (token4.id !== run9.gradedTurn && text12 !== null)
-          run9.lastText = text12;
+        if (token4.id !== run9.gradedTurn && text13 !== null)
+          run9.lastText = text13;
         if (!holdsRun(run9) && !ownTurnRunning(run9)) {
           run9.finishedIdle = true;
           finish2(c, { outcome: "finished", text: run9.lastText });
@@ -87012,7 +87532,7 @@ function createRunTracker(opts) {
         return items.map((i) => describe3(c, i, t, ""));
       return run9.waiters.length > 0 && ownTurnRunning(run9) ? ["the turn reporting the background work is still running"] : void 0;
     },
-    openRun(sessionId, task, turn, text12) {
+    openRun(sessionId, task, turn, text13) {
       const c = conv(resolve16(sessionId));
       const token4 = turn;
       const run9 = {
@@ -87023,7 +87543,7 @@ function createRunTracker(opts) {
         conv: c,
         closed: null,
         waiters: [],
-        lastText: text12,
+        lastText: text13,
         finishedIdle: false
       };
       if (c.lastPersonTurn > token4.id) {
@@ -88159,25 +88679,25 @@ function validate(schema, value, path6 = "$", out = []) {
   }
   return out;
 }
-function extractJson(text12) {
-  const fenced = /```(?:json)?\s*([\s\S]*?)```/i.exec(text12);
-  const candidates = [fenced?.[1], text12].filter((v) => typeof v === "string");
+function extractJson(text13) {
+  const fenced = /```(?:json)?\s*([\s\S]*?)```/i.exec(text13);
+  const candidates = [fenced?.[1], text13].filter((v) => typeof v === "string");
   for (const c of candidates) {
     try {
       return JSON.parse(c.trim());
     } catch {
     }
   }
-  for (let start3 = 0; start3 < text12.length; start3++) {
-    const open10 = text12[start3];
+  for (let start3 = 0; start3 < text13.length; start3++) {
+    const open10 = text13[start3];
     if (open10 !== "{" && open10 !== "[")
       continue;
     const close = open10 === "{" ? "}" : "]";
     let depth = 0;
     let inStr = false;
     let esc3 = false;
-    for (let i = start3; i < text12.length; i++) {
-      const ch = text12[i];
+    for (let i = start3; i < text13.length; i++) {
+      const ch = text13[i];
       if (inStr) {
         if (esc3)
           esc3 = false;
@@ -88197,7 +88717,7 @@ function extractJson(text12) {
         depth--;
         if (depth === 0) {
           try {
-            return JSON.parse(text12.slice(start3, i + 1));
+            return JSON.parse(text13.slice(start3, i + 1));
           } catch {
             break;
           }
@@ -88296,11 +88816,11 @@ function createEngineHttpApi(port, host = "127.0.0.1") {
       });
       if (!res.ok)
         return null;
-      const text12 = await res.text();
-      if (!text12.trim())
+      const text13 = await res.text();
+      if (!text13.trim())
         return true;
       try {
-        const parsed = JSON.parse(text12);
+        const parsed = JSON.parse(text13);
         return parsed === null ? true : parsed;
       } catch {
         return true;
@@ -88549,7 +89069,7 @@ function createEngineTranscript(engineId) {
     return blocks.length ? [row(sid, "assistant", blocks)] : [];
   }
   return {
-    userTurn(sid, cwd, text12) {
+    userTurn(sid, cwd, text13) {
       if (!cwd)
         return;
       cwdOf.set(sid, cwd);
@@ -88557,23 +89077,23 @@ function createEngineTranscript(engineId) {
       if (prev)
         void write2(sid, flushAssistant(sid, prev, true));
       open10.set(sid, { cwd, blocks: [], prose: "", reasoning: "", pending: /* @__PURE__ */ new Map() });
-      void write2(sid, [row(sid, "user", text12)]);
+      void write2(sid, [row(sid, "user", text13)]);
     },
-    assistantText(sid, text12) {
+    assistantText(sid, text13) {
       const t = open10.get(sid);
-      if (!t || !text12)
+      if (!t || !text13)
         return;
       if (t.reasoning)
         fold(t);
-      t.prose += text12;
+      t.prose += text13;
     },
-    thinking(sid, text12) {
+    thinking(sid, text13) {
       const t = open10.get(sid);
-      if (!t || !text12)
+      if (!t || !text13)
         return;
       if (t.prose)
         fold(t);
-      t.reasoning += text12;
+      t.reasoning += text13;
     },
     toolUse(sid, id, name, input) {
       const t = open10.get(sid);
@@ -88680,13 +89200,13 @@ function createEngineTranscript(engineId) {
       if (!file2)
         return false;
       const run9 = (chain2.get(sid) ?? Promise.resolve()).then(async () => {
-        let text12;
+        let text13;
         try {
-          text12 = await readFile12(file2, "utf8");
+          text13 = await readFile12(file2, "utf8");
         } catch {
           return false;
         }
-        const lines = text12.split("\n");
+        const lines = text13.split("\n");
         const cut = cutLine(lines, at);
         if (cut < 0)
           return false;
@@ -88735,8 +89255,8 @@ ${blk.text.trim()}`);
       else if (blk.type === "tool_use")
         parts.push(`[tool call: ${blk.name ?? "tool"}] ${JSON.stringify(blk.input ?? {})}`);
       else if (blk.type === "tool_result") {
-        const text12 = typeof blk.content === "string" ? blk.content : Array.isArray(blk.content) ? blk.content.map((x) => x?.text ?? "").join("\n") : "";
-        parts.push(`[tool result${blk.is_error ? " (error)" : ""}] ${text12.trim()}`);
+        const text13 = typeof blk.content === "string" ? blk.content : Array.isArray(blk.content) ? blk.content.map((x) => x?.text ?? "").join("\n") : "";
+        parts.push(`[tool result${blk.is_error ? " (error)" : ""}] ${text13.trim()}`);
       }
     }
   }
@@ -88877,8 +89397,8 @@ function readOutputFromLocation(u) {
   if (!path6)
     return "";
   try {
-    const text12 = readFileSync24(path6, "utf8");
-    return text12.length > MAX_LOCATION_READ_BYTES ? text12.slice(0, MAX_LOCATION_READ_BYTES) : text12;
+    const text13 = readFileSync24(path6, "utf8");
+    return text13.length > MAX_LOCATION_READ_BYTES ? text13.slice(0, MAX_LOCATION_READ_BYTES) : text13;
   } catch {
     return "";
   }
@@ -88995,7 +89515,8 @@ var OPENCODE_ACP = {
     const SAFE = `${READ},"glob":"allow","grep":"allow","lsp":"allow","todowrite":"allow"`;
     const KEEP_DENY = '"question":"deny","plan_enter":"deny","plan_exit":"deny"';
     const { patterns } = opencodeBashDeny(deny);
-    const BLOCK = patterns.length ? `,"bash":{${patterns.map((p) => `${JSON.stringify(p)}:"deny"`).join(",")}}` : "";
+    const BLOCKED = patterns.map((p) => `${JSON.stringify(p)}:"deny"`).join(",");
+    const BLOCK = BLOCKED ? `,"bash":{${BLOCKED}}` : "";
     switch (mode) {
       // Everything asks except the harmless reads — this is the mode that means "supervise me".
       case "default":
@@ -89008,10 +89529,12 @@ var OPENCODE_ACP = {
         return { OPENCODE_PERMISSION: `{"*":"ask","edit":"allow",${SAFE},${KEEP_DENY}${BLOCK}}` };
       // Nothing may change on disk. `deny` rather than `ask` so there is no card offering to
       // break the mode's promise, and no prompt for something plan mode should never do.
-      // No `${BLOCK}` here on purpose: a nested `bash` object would REPLACE this blanket deny (last key wins
-      // in one object) and the patterns it lists are narrower than "no commands at all".
+      // Plan denies every command already, so the block patterns add nothing — but they are listed ANYWAY,
+      // inside the same `bash` object (`{"*":"deny"}` is what a bare `"deny"` means to its matcher), because
+      // "the rules went to the engine" must be true in every mode. A special case here would make the notice
+      // that reads it (`blockRulesInForce`) quietly wrong the day plan mode's ruleset changes.
       case "plan":
-        return { OPENCODE_PERMISSION: `{"*":"ask","edit":"deny","bash":"deny",${SAFE},${KEEP_DENY}}` };
+        return { OPENCODE_PERMISSION: `{"*":"ask","edit":"deny","bash":{"*":"deny"${BLOCKED ? `,${BLOCKED}` : ""}},${SAFE},${KEEP_DENY}}` };
       // bypassPermissions / dontAsk / unset ⇒ leave its own ruleset alone: both of those modes mean
       // "never prompt, let it run", which is what OpenCode's shipped `"*": "allow"` already is. Except for
       // what the person BLOCKED: Claude checks its block rules ahead of bypass (its own
@@ -89200,25 +89723,25 @@ function relFromFileUri(uri, dir2) {
 }
 function collectReplay(out, u) {
   const kind = u.sessionUpdate;
-  const text12 = u.content?.text ?? "";
-  if (kind === "user_message_chunk" && REPLAY_SCAFFOLD.test(text12))
+  const text13 = u.content?.text ?? "";
+  if (kind === "user_message_chunk" && REPLAY_SCAFFOLD.test(text13))
     return;
   const role = kind === "user_message_chunk" ? "user" : kind === "agent_message_chunk" || kind === "agent_thought_chunk" ? "assistant" : null;
-  if (!role || !text12)
+  if (!role || !text13)
     return;
   const blockKind = kind === "agent_thought_chunk" ? "thinking" : "text";
   const last = out[out.length - 1];
   if (last && last.role === role) {
     const lastBlock = last.blocks?.[last.blocks.length - 1];
     if (lastBlock && lastBlock.kind === blockKind)
-      lastBlock.content += text12;
+      lastBlock.content += text13;
     else
-      (last.blocks ??= []).push({ kind: blockKind, content: text12 });
+      (last.blocks ??= []).push({ kind: blockKind, content: text13 });
     if (blockKind === "text")
-      last.content += text12;
+      last.content += text13;
     return;
   }
-  out.push({ role, content: blockKind === "text" ? text12 : "", blocks: [{ kind: blockKind, content: text12 }] });
+  out.push({ role, content: blockKind === "text" ? text13 : "", blocks: [{ kind: blockKind, content: text13 }] });
 }
 function readUsage(res) {
   const r = res ?? {};
@@ -89481,19 +90004,19 @@ function createAcpBackend(engine, send5, resolve16, services) {
     const origin = turn.origin;
     switch (u.sessionUpdate) {
       case "agent_message_chunk": {
-        const text12 = u.content?.text ?? "";
-        if (text12) {
-          turn.acc += text12;
-          transcript.assistantText(sid, text12);
-          send5({ type: "chat:stream", sessionId: sid, clientRequestId: turn.clientRequestId, messageId: turn.messageId, delta: text12, kind: "text" }, origin);
+        const text13 = u.content?.text ?? "";
+        if (text13) {
+          turn.acc += text13;
+          transcript.assistantText(sid, text13);
+          send5({ type: "chat:stream", sessionId: sid, clientRequestId: turn.clientRequestId, messageId: turn.messageId, delta: text13, kind: "text" }, origin);
         }
         break;
       }
       case "agent_thought_chunk": {
-        const text12 = u.content?.text ?? "";
-        if (text12) {
-          transcript.thinking(sid, text12);
-          send5({ type: "chat:stream", sessionId: sid, clientRequestId: turn.clientRequestId, messageId: turn.messageId, delta: text12, kind: "thinking" }, origin);
+        const text13 = u.content?.text ?? "";
+        if (text13) {
+          transcript.thinking(sid, text13);
+          send5({ type: "chat:stream", sessionId: sid, clientRequestId: turn.clientRequestId, messageId: turn.messageId, delta: text13, kind: "thinking" }, origin);
         }
         break;
       }
@@ -90000,11 +90523,11 @@ function createAcpBackend(engine, send5, resolve16, services) {
     return out;
   }
   function promptBlocks(params) {
-    const text12 = params.message.trim() === "/compact" && engine.compactCommand ? engine.compactCommand : params.message;
+    const text13 = params.message.trim() === "/compact" && engine.compactCommand ? engine.compactCommand : params.message;
     const seed = params.sessionId ? pendingSeed.get(params.sessionId) : void 0;
     const blocks = [{ type: "text", text: seed ? `${seed}
 
-${text12}` : text12 }];
+${text13}` : text13 }];
     const skipped = [];
     if (!supportsCapability(declaredCaps, "attachments"))
       return { blocks, skipped };
@@ -90109,8 +90632,8 @@ ${text12}` : text12 }];
   }
   async function summarizeOnScratch(conn, sessionId, projectDir) {
     const rows = await backend2.getMessages(sessionId, projectDir).catch(() => []);
-    const text12 = transcriptToText(rows, 6e4);
-    if (!text12)
+    const text13 = transcriptToText(rows, 6e4);
+    if (!text13)
       return null;
     const fresh = await conn.t.request("session/new", { cwd: conn.cwd, mcpServers: [] }).catch(() => null);
     const scratch = fresh?.sessionId;
@@ -90128,7 +90651,7 @@ ${text12}` : text12 }];
       return await promptForText(conn.t, scratch, `${prompt("agent.session-summary")}
 
 --- Conversation ---
-${text12}`);
+${text13}`);
     } finally {
       knownSessions.delete(scratch);
       sessionConfig.delete(scratch);
@@ -90612,8 +91135,11 @@ ${text12}`);
     let finishing = null;
     if (params.permissionMode)
       sessionMode.set(sid, params.permissionMode);
-    if (params.settings?.permissions?.deny)
-      sessionDeny.set(sid, params.settings.permissions.deny);
+    const denyNow = params.settings?.permissions?.deny;
+    if (denyNow?.length)
+      sessionDeny.set(sid, denyNow);
+    else
+      sessionDeny.delete(sid);
     send5({ type: "agent:status", sessionId: sid, clientRequestId: params.clientRequestId, status: "running" }, origin);
     const schema = supportsCapability(declared, "structuredOutput") ? params.jsonSchema : void 0;
     const enforceable = schema ? canEnforce(schema) : { ok: false };
@@ -91200,13 +91726,13 @@ ${detail}` : detail, !overflow);
         sessionCwd.set(sessionId, projectDir);
       if (!conn)
         return { ok: false, error: `${engineLabel} is not running.` };
-      const text12 = await summarizeOnScratch(conn, sessionId, projectDir) ?? await (async () => {
+      const text13 = await summarizeOnScratch(conn, sessionId, projectDir) ?? await (async () => {
         await ensureLoaded(conn, sessionId);
         return promptForText(conn.t, sessionId, prompt("agent.session-summary"));
       })();
-      if (!text12)
+      if (!text13)
         return { ok: false, error: `${engineLabel} could not summarise this conversation.` };
-      const { title, summary } = parseSummaryReply(text12);
+      const { title, summary } = parseSummaryReply(text13);
       if (title)
         sessionTitles.set(sessionId, title);
       if (title)
@@ -91474,8 +92000,8 @@ ${detail}` : detail, !overflow);
           const seenIds = /* @__PURE__ */ new Set();
           let idx = 0;
           for (const m of log10.messages) {
-            const text12 = geminiMessageText(m);
-            if (!text12 || REPLAY_SCAFFOLD.test(text12))
+            const text13 = geminiMessageText(m);
+            if (!text13 || REPLAY_SCAFFOLD.test(text13))
               continue;
             if (m.id && seenIds.has(m.id))
               continue;
@@ -91485,7 +92011,7 @@ ${detail}` : detail, !overflow);
             const uuid3 = m.id ?? `acp-user-${idx}`;
             if (role === "user")
               idx++;
-            rows.push({ role, content: text12, uuid: uuid3, blocks: [{ kind: "text", content: text12 }] });
+            rows.push({ role, content: text13, uuid: uuid3, blocks: [{ kind: "text", content: text13 }] });
           }
           if (rows.length > 0) {
             const firstUser2 = rows.find((r) => r.role === "user")?.content?.trim();
@@ -91602,20 +92128,20 @@ function codexTranscriptRows(turns, textOf) {
       const kind = String(it.type ?? "");
       if (kind && kind !== "userMessage" && kind !== "agentMessage")
         continue;
-      const text12 = textOf(it);
-      if (!text12)
+      const text13 = textOf(it);
+      if (!text13)
         continue;
       const role = String(it.role ?? (kind === "userMessage" ? "user" : "assistant")) === "user" ? "user" : "assistant";
       const last = rows[rows.length - 1];
       if (last && last.role === role) {
         last.content += `
-${text12}`;
+${text13}`;
         if (last.turns[last.turns.length - 1] !== ti)
           last.turns.push(ti);
         continue;
       }
       const uuid3 = typeof it.id === "string" && it.id ? it.id : void 0;
-      rows.push({ role, content: text12, ...uuid3 ? { uuid: uuid3 } : {}, turns: [ti] });
+      rows.push({ role, content: text13, ...uuid3 ? { uuid: uuid3 } : {}, turns: [ti] });
     }
   });
   return rows;
@@ -91833,9 +92359,9 @@ function itemToolName(item) {
     case "webSearch":
       return "WebSearch";
     case "mcpToolCall": {
-      const tool21 = String(i.tool ?? "tool");
+      const tool22 = String(i.tool ?? "tool");
       const server2 = String(i.server ?? "");
-      return server2 ? `${server2}_${tool21}` : tool21;
+      return server2 ? `${server2}_${tool22}` : tool22;
     }
     case "dynamicToolCall":
       return String(i.tool ?? "tool");
@@ -92192,8 +92718,8 @@ function createCodexAppServerBackend(send5, resolve16, services) {
       subagentSinks.delete(scratch);
       subagentDone.delete(scratch);
     }
-    const text12 = out.join("").trim();
-    return text12 || null;
+    const text13 = out.join("").trim();
+    return text13 || null;
   }
   const pendingApprovals = /* @__PURE__ */ new Map();
   const pendingDialogs = /* @__PURE__ */ new Map();
@@ -92218,8 +92744,6 @@ function createCodexAppServerBackend(send5, resolve16, services) {
     const settled = turn ? runningTurnApprovalAnswer(modeNow, turn.sandbox) : "ask";
     if (settled === "allow")
       return Promise.resolve(allow);
-    if (settled === "deny")
-      return Promise.resolve(deny);
     const requestId = randomUUID17();
     return new Promise((resolveOutcome) => {
       pendingApprovals.set(requestId, { resolve: resolveOutcome, threadId, allow, allowPersist, deny });
@@ -92547,7 +93071,11 @@ function createCodexAppServerBackend(send5, resolve16, services) {
       });
       t.onRequest("item/fileChange/requestApproval", (raw) => {
         const p = raw ?? {};
-        return parkApproval(raw, "Edit", { decision: "accept" }, { decision: "acceptForSession" }, { decision: "decline" }, { title: p.reason, path: p.grantRoot });
+        return parkApproval(raw, "Edit", { decision: "accept" }, { decision: "acceptForSession" }, { decision: "decline" }, {
+          title: p.reason,
+          path: p.grantRoot,
+          input: { changes: p.changes, path: p.path }
+        });
       });
       t.onRequest("item/permissions/requestApproval", (raw) => parkApproval(raw, "Permissions", { decision: "accept" }, { decision: "acceptForSession" }, { decision: "decline" }, { title: "Codex is requesting additional permissions" }));
       t.onRequest("execCommandApproval", (raw) => {
@@ -92556,7 +93084,11 @@ function createCodexAppServerBackend(send5, resolve16, services) {
       });
       t.onRequest("applyPatchApproval", (raw) => {
         const p = raw ?? {};
-        return parkApproval(raw, "Edit", { decision: "accept" }, { decision: "acceptForSession" }, { decision: "decline" }, { title: p.reason });
+        return parkApproval(raw, "Edit", { decision: "accept" }, { decision: "acceptForSession" }, { decision: "decline" }, {
+          title: p.reason,
+          path: p.grantRoot,
+          input: { changes: p.changes ?? p.fileChanges }
+        });
       });
       t.onRequest("item/tool/requestUserInput", (raw) => {
         const p = raw ?? {};
@@ -93610,13 +94142,13 @@ function createCodexAppServerBackend(send5, resolve16, services) {
      */
     summarizeSession: async (sessionId, projectDir) => {
       const msgs = await backend2.getMessages(sessionId, threadCwd.get(sessionId) ?? spawnedCwd ?? projectDir).catch(() => []);
-      const text12 = transcriptToText(msgs, 6e4);
-      if (!text12)
+      const text13 = transcriptToText(msgs, 6e4);
+      if (!text13)
         return { ok: false, error: "That conversation has nothing to summarise yet." };
       const reply3 = await promptScratchThread(`${prompt("agent.session-summary")}
 
 --- Conversation ---
-${text12}`, threadCwd.get(sessionId) ?? spawnedCwd ?? projectDir);
+${text13}`, threadCwd.get(sessionId) ?? spawnedCwd ?? projectDir);
       if (!reply3)
         return { ok: false, error: `${label} could not summarise this conversation.` };
       const { title, summary } = parseSummaryReply(reply3);
@@ -93729,8 +94261,8 @@ var seq = 0;
 var now = () => (/* @__PURE__ */ new Date()).toISOString();
 var ctx = [];
 var CTX_MAX = 60;
-function pushCtx(role, text12) {
-  const t = (text12 ?? "").trim();
+function pushCtx(role, text13) {
+  const t = (text13 ?? "").trim();
   if (!t)
     return;
   ctx.push({ role, text: t.length > 300 ? `${t.slice(0, 300)}\u2026` : t });
@@ -93996,23 +94528,23 @@ var HostPluginApi = class {
   secret(envKey2) {
     return this.secretResolver(this.pluginId, envKey2);
   }
-  registerTool(tool21) {
+  registerTool(tool22) {
     const prefix = this.pluginId.replace(/[^a-zA-Z0-9_]/g, "_");
-    const name = tool21.name.startsWith(`${prefix}_`) ? tool21.name : `${prefix}_${tool21.name}`;
-    this.registry.tools.push({ ...tool21, name });
+    const name = tool22.name.startsWith(`${prefix}_`) ? tool22.name : `${prefix}_${tool22.name}`;
+    this.registry.tools.push({ ...tool22, name });
   }
-  registerUiTool(tool21) {
-    if (!this.requireGrant("surfaces", `UI tool "${tool21.name}"`))
+  registerUiTool(tool22) {
+    if (!this.requireGrant("surfaces", `UI tool "${tool22.name}"`))
       return;
     const prefix = this.pluginId.replace(/[^a-zA-Z0-9_]/g, "_");
-    const name = tool21.name.startsWith(`${prefix}_`) ? tool21.name : `${prefix}_${tool21.name}`;
+    const name = tool22.name.startsWith(`${prefix}_`) ? tool22.name : `${prefix}_${tool22.name}`;
     const tier = this.hasGrant("customUI") ? "verified" : "third-party";
     this.registry.tools.push({
       name,
-      description: tool21.description,
-      inputSchema: tool21.inputSchema,
-      handler: async (args) => toResult(await tool21.handler(args, NOOP_UI_CTX)),
-      __ctxHandler: async (args, ctx2) => toResult(await tool21.handler(args, ctx2)),
+      description: tool22.description,
+      inputSchema: tool22.inputSchema,
+      handler: async (args) => toResult(await tool22.handler(args, NOOP_UI_CTX)),
+      __ctxHandler: async (args, ctx2) => toResult(await tool22.handler(args, ctx2)),
       __tier: tier
     });
   }
@@ -94122,8 +94654,8 @@ function createOpenClawAdapter(pluginId, config2, secretResolver, registry3) {
     pluginId,
     config: config2,
     secret: (envKey2) => secretResolver(pluginId, envKey2),
-    registerTool: (tool21) => {
-      const got = typeof tool21 === "function" ? tool21({}) : tool21;
+    registerTool: (tool22) => {
+      const got = typeof tool22 === "function" ? tool22({}) : tool22;
       const arr = Array.isArray(got) ? got : got ? [got] : [];
       for (const t of arr) {
         const c = convertTool(t);
@@ -95589,8 +96121,8 @@ init_prompts();
 // ../../packages/voice-core/dist/pipeline/history.js
 function formatHistoryLines(turns, maxLineChars = 300) {
   return turns.map((t) => {
-    const text12 = t.text.replace(/\s+/g, " ").trim();
-    const capped = text12.length > maxLineChars ? text12.slice(0, maxLineChars - 1).trimEnd() + "\u2026" : text12;
+    const text13 = t.text.replace(/\s+/g, " ").trim();
+    const capped = text13.length > maxLineChars ? text13.slice(0, maxLineChars - 1).trimEnd() + "\u2026" : text13;
     return `${t.role.toUpperCase()}: ${capped}`;
   }).join("\n");
 }
@@ -95885,15 +96417,15 @@ ${truncate(input.result, 4e3)}`
   }
 };
 function ruleBasedTurn(input) {
-  const text12 = input.result.trim();
-  const lower = text12.toLowerCase();
+  const text13 = input.result.trim();
+  const lower = text13.toLowerCase();
   let status2 = "done";
   if (/\b(error|failed|could not|cannot|unable to)\b/.test(lower))
     status2 = "error";
-  else if (text12.endsWith("?") || /\b(which|should i|do you want|would you like|please confirm|clarif)\b/.test(lower)) {
+  else if (text13.endsWith("?") || /\b(which|should i|do you want|would you like|please confirm|clarif)\b/.test(lower)) {
     status2 = "needs_input";
   }
-  const line = firstSentences(stripForSpeech(text12)) || input.recentActivity.slice(-1)[0] || "Done.";
+  const line = firstSentences(stripForSpeech(text13)) || input.recentActivity.slice(-1)[0] || "Done.";
   return { line, status: status2 };
 }
 function stripForSpeech(s) {
@@ -95971,8 +96503,8 @@ var VoiceGuideOrchestrator = class {
   /** The bridge feeds every finalized transcript line here (capped buffer). An
    *  assistant line means the guide finished speaking — drain the next queued
    *  update immediately instead of waiting out the gap timer. */
-  noteTranscript(role, text12) {
-    const t = text12.trim();
+  noteTranscript(role, text13) {
+    const t = text13.trim();
     if (!t)
       return;
     this.conversation.push({ role, text: t });
@@ -96506,26 +97038,26 @@ Additional context: ${context}` : task;
     this.deps.emit({ type: "voice:milestone", text: spoken });
     this.say(spoken, { urgent: focused });
   }
-  speakMilestone(text12) {
-    this.deps.emit({ type: "voice:milestone", text: text12 });
-    this.say(text12);
+  speakMilestone(text13) {
+    this.deps.emit({ type: "voice:milestone", text: text13 });
+    this.say(text13);
   }
   // ── One mouth, N sessions: serialized speech ───────────────────────────────
   /** Speak `text`, serializing non-urgent lines so concurrent sessions don't
    *  talk over each other. Urgent lines (blocking questions, the focused
    *  session's result, critical notices) always go out immediately. */
-  say(text12, opts = {}) {
-    if (!text12)
+  say(text13, opts = {}) {
+    if (!text13)
       return;
     const now2 = this.now();
     if (opts.urgent || this.sayQueue.length === 0 && now2 - this.lastSayAt >= SPEAK_GAP_MS) {
       this.lastSayAt = now2;
-      this.voice?.speakNow(text12);
+      this.voice?.speakNow(text13);
       return;
     }
     if (this.sayQueue.length >= SPEAK_QUEUE_CAP)
       this.sayQueue.shift();
-    this.sayQueue.push(text12);
+    this.sayQueue.push(text13);
     this.armSayTimer();
   }
   armSayTimer() {
@@ -96656,11 +97188,11 @@ var ClientProxyProvider = class {
   /** Audio is client↔provider direct — the daemon never sees mic/model PCM. */
   sendAudio(_pcm24k) {
   }
-  respondToTool(callId, text12, isError) {
-    this.deps.send({ type: "voice:cd:respondToTool", callId, text: text12, isError });
+  respondToTool(callId, text13, isError) {
+    this.deps.send({ type: "voice:cd:respondToTool", callId, text: text13, isError });
   }
-  speakNow(text12) {
-    this.deps.send({ type: "voice:cd:speak", text: text12 });
+  speakNow(text13) {
+    this.deps.send({ type: "voice:cd:speak", text: text13 });
   }
   close() {
     this.settleConnect(new Error("closed before connect"));
@@ -96680,11 +97212,11 @@ var ClientProxyProvider = class {
   handleToolCall(inv) {
     this.cb.onToolCall(inv);
   }
-  handleTranscript(speaker, text12) {
+  handleTranscript(speaker, text13) {
     if (speaker === "user")
-      this.cb.onUserTranscript(text12);
+      this.cb.onUserTranscript(text13);
     else
-      this.cb.onAgentTranscript(text12);
+      this.cb.onAgentTranscript(text13);
   }
   handleProviderEvent(event, message) {
     switch (event) {
@@ -96916,10 +97448,10 @@ var VoiceControl = class {
    * injection as a user turn and comments on every slide change, which is exactly the
    * running commentary the silence contract forbids.
    */
-  injectPresentContext(text12) {
+  injectPresentContext(text13) {
     if (this.ended)
       return;
-    this.deps.send({ type: "voice:cd:inject", text: text12, turnComplete: false });
+    this.deps.send({ type: "voice:cd:inject", text: text13, turnComplete: false });
   }
   /**
    * A typed question from the phone, routed as if it had been spoken.
@@ -96927,33 +97459,33 @@ var VoiceControl = class {
    * This one DOES form a turn (turnComplete left at its default): unlike slide context,
    * the presenter is deliberately addressing the assistant and is waiting for an answer.
    */
-  askPresent(text12) {
+  askPresent(text13) {
     if (this.ended)
       return;
-    this.deps.send({ type: "voice:cd:inject", text: `(The presenter asks you directly: ${text12})` });
+    this.deps.send({ type: "voice:cd:inject", text: `(The presenter asks you directly: ${text13})` });
   }
   async runPresentControl(callId, name, args) {
-    let text12 = "";
+    let text13 = "";
     let silent = false;
     let clearPlayback = false;
     let isError = false;
     try {
       const r = await this.deps.execPresentControl(name, args);
-      text12 = r.text;
+      text13 = r.text;
       silent = r.silent;
       clearPlayback = r.clearPlayback === true;
     } catch (e) {
-      text12 = e instanceof Error ? e.message : "presentation action failed";
+      text13 = e instanceof Error ? e.message : "presentation action failed";
       isError = true;
     }
-    log(`voice: present-control ${name} \u2192 ${isError ? "ERROR " : ""}${text12}`);
-    recordEvent("tool_result", { name, text: text12, isError });
+    log(`voice: present-control ${name} \u2192 ${isError ? "ERROR " : ""}${text13}`);
+    recordEvent("tool_result", { name, text: text13, isError });
     if (clearPlayback && !isError)
       this.deps.send({ type: "voice:clearPlayback" });
-    this.deps.send({ type: "voice:cd:respondToTool", callId, text: text12, isError, silent: silent && !isError });
+    this.deps.send({ type: "voice:cd:respondToTool", callId, text: text13, isError, silent: silent && !isError });
   }
   async runScreenControl(callId, name, args) {
-    let text12;
+    let text13;
     let isError = false;
     let finished = false, nudges = 0;
     let slowTimer = null;
@@ -96969,18 +97501,18 @@ var VoiceControl = class {
     };
     scheduleNudge(2e4);
     try {
-      text12 = await this.deps.execScreenControl(name, args);
+      text13 = await this.deps.execScreenControl(name, args);
     } catch (e) {
-      text12 = e instanceof Error ? e.message : "screen action failed";
+      text13 = e instanceof Error ? e.message : "screen action failed";
       isError = true;
     } finally {
       finished = true;
       if (slowTimer)
         clearTimeout(slowTimer);
     }
-    log(`voice: screen-control ${name} \u2192 ${isError ? "ERROR " : ""}${text12}`);
-    recordEvent("tool_result", { name, text: text12, isError });
-    this.deps.send({ type: "voice:cd:respondToTool", callId, text: text12, isError });
+    log(`voice: screen-control ${name} \u2192 ${isError ? "ERROR " : ""}${text13}`);
+    recordEvent("tool_result", { name, text: text13, isError });
+    this.deps.send({ type: "voice:cd:respondToTool", callId, text: text13, isError });
   }
   async start(msg) {
     if (this.starting)
@@ -97118,13 +97650,13 @@ ${priorText}` : "";
     const callbacks = {
       onOutputAudio: () => {
       },
-      onUserTranscript: (text12) => {
-        orchestrator.noteTranscript("user", text12);
-        this.deps.send({ type: "voice:transcript", speaker: "user", text: text12 });
+      onUserTranscript: (text13) => {
+        orchestrator.noteTranscript("user", text13);
+        this.deps.send({ type: "voice:transcript", speaker: "user", text: text13 });
       },
-      onAgentTranscript: (text12) => {
-        orchestrator.noteTranscript("assistant", text12);
-        this.deps.send({ type: "voice:transcript", speaker: "agent", text: text12 });
+      onAgentTranscript: (text13) => {
+        orchestrator.noteTranscript("assistant", text13);
+        this.deps.send({ type: "voice:transcript", speaker: "agent", text: text13 });
       },
       onToolCall: (inv) => orchestrator.handleToolCall(inv),
       onInterruption: () => this.deps.send({ type: "voice:clearPlayback" }),
@@ -97996,7 +98528,7 @@ var GeminiVeoProvider = class {
 };
 
 // ../../packages/video-core/dist/tesseract.js
-var DEFAULT_MODEL4 = "tsr-video";
+var DEFAULT_MODEL4 = "veo-3.1-fast-generate-preview";
 var REQUEST_TIMEOUT_MS2 = 9e4;
 var DOWNLOAD_TIMEOUT_MS2 = 18e4;
 var withTimeout4 = (signal2, ms) => signal2 ?? AbortSignal.timeout(ms);
@@ -98490,7 +99022,7 @@ var fmtTime = (sec) => {
   cs -= s * 100;
   return `${h}:${String(m).padStart(2, "0")}:${String(s).padStart(2, "0")}.${String(cs).padStart(2, "0")}`;
 };
-var escapeAss = (text12) => text12.replace(/\\/g, "\\\\").replace(/\{/g, "(").replace(/\}/g, ")").replace(/\r?\n/g, "\\N");
+var escapeAss = (text13) => text13.replace(/\\/g, "\\\\").replace(/\{/g, "(").replace(/\}/g, ")").replace(/\r?\n/g, "\\N");
 function buildAssSubtitles(cues, style, width, height) {
   const base = Math.round(height / 14);
   const styles = style === "tiktok-bold" ? `Style: Cap,Arial Black,${base},&H00FFFFFF,&H000000FF,&H00000000,&H96000000,-1,0,0,0,100,100,0,0,1,${Math.max(2, Math.round(base / 9))},0,2,60,60,${Math.round(height / 5)},1` : `Style: Cap,Arial,${Math.round(base * 0.72)},&H00FFFFFF,&H000000FF,&H00000000,&H64000000,-1,0,0,0,100,100,0,0,1,2,1,2,40,40,${Math.round(height / 12)},1`;
@@ -99101,7 +99633,7 @@ async function cloneVoiceElevenLabs(name, samples, cfg2, opts) {
     throw new Error("ElevenLabs clone returned no voice_id.");
   return { voiceId: j.voice_id, name: j.name ?? name };
 }
-async function synthesizeSpeechElevenLabs(text12, voiceId, cfg2, opts) {
+async function synthesizeSpeechElevenLabs(text13, voiceId, cfg2, opts) {
   const base = (cfg2.baseUrl?.trim() || BASE_URL).replace(/\/+$/, "");
   const settings = {};
   if (cfg2.stability != null)
@@ -99115,7 +99647,7 @@ async function synthesizeSpeechElevenLabs(text12, voiceId, cfg2, opts) {
     res = await fetch(`${base}/v1/text-to-speech/${encodeURIComponent(voiceId)}?output_format=mp3_44100_128`, {
       method: "POST",
       headers: { "xi-api-key": cfg2.apiKey, "Content-Type": "application/json" },
-      body: JSON.stringify({ text: text12, model_id: cfg2.model?.trim() || DEFAULT_TTS_MODEL, ...Object.keys(settings).length ? { voice_settings: settings } : {} }),
+      body: JSON.stringify({ text: text13, model_id: cfg2.model?.trim() || DEFAULT_TTS_MODEL, ...Object.keys(settings).length ? { voice_settings: settings } : {} }),
       signal: opts?.signal ?? AbortSignal.timeout(12e4)
     });
   } catch (e) {
@@ -99207,8 +99739,8 @@ var VIDEO_PROVIDERS = [
   {
     id: "tesseract",
     label: "Tesseract \xB7 free (no key)",
-    defaultModel: "tsr-video",
-    models: ["tsr-video"],
+    defaultModel: "veo-3.1-fast-generate-preview",
+    models: ["veo-3.1-fast-generate-preview"],
     keysUrl: "",
     free: true
   },
@@ -99474,7 +100006,7 @@ var IN_TURN_WAIT_MS = 8 * 6e4;
 var HEARTBEAT_MS2 = 15e3;
 var FAST_MODEL = VIDEO_PROVIDERS.find((p) => p.id === "google").defaultModel;
 var STANDARD_MODEL = "veo-3.1-generate-preview";
-var FREE_MODEL = "tsr-video";
+var FREE_MODEL = "veo-3.1-fast-generate-preview";
 var clampDuration2 = (n) => [4, 6, 8].reduce((best, d) => Math.abs(d - n) < Math.abs(best - n) ? d : best);
 function creds2() {
   return readDaemonAgentSettings().videoGen;
@@ -100518,11 +101050,11 @@ async function geminiJson(opts) {
   const json3 = await res.json().catch(() => ({}));
   if (!res.ok)
     throw new Error(json3.error?.message ?? `Gemini request failed (${res.status})`);
-  const text12 = json3.candidates?.[0]?.content?.parts?.map((p) => p.text ?? "").join("") ?? "";
+  const text13 = json3.candidates?.[0]?.content?.parts?.map((p) => p.text ?? "").join("") ?? "";
   try {
-    return JSON.parse(text12);
+    return JSON.parse(text13);
   } catch {
-    throw new Error(`Gemini returned non-JSON transcription output: ${text12.slice(0, 200)}`);
+    throw new Error(`Gemini returned non-JSON transcription output: ${text13.slice(0, 200)}`);
   }
 }
 async function transcribeMedia(opts) {
@@ -100656,7 +101188,7 @@ function resolveAvatarCreds(snap, keyFile, envKey2) {
 function heygenCreds() {
   return resolveAvatarCreds(readDaemonAgentSettings(), readDaemonKeyFile("heygen.key"), process.env.HEYGEN_API_KEY ?? null);
 }
-var NO_AVATAR_CREDS = "Avatar videos need either a HeyGen API key (add it in Settings, or set HEYGEN_API_KEY) or a signed-in Tesseract account for the free tier.";
+var NO_AVATAR_CREDS = "Avatar videos need a HeyGen API key \u2014 add one in Settings, or set HEYGEN_API_KEY. The free tier covers this only when you are signed in AND this server has HeyGen access; one of those is missing here.";
 function readDaemonKeyFile(name) {
   try {
     const home = tesseractHome();
@@ -100875,12 +101407,12 @@ function createDaemonVideoEditRunner() {
         return { ok: false, error: err(e) };
       }
     },
-    async synthesizeSpeech(text12, voiceId, outDir, opts) {
+    async synthesizeSpeech(text13, voiceId, outDir, opts) {
       const apiKey = elevenLabsKey();
       if (!apiKey)
         return { ok: false, error: "Text-to-speech needs an ElevenLabs key (Settings \u2192 Voice)." };
       try {
-        const audio = await synthesizeSpeechElevenLabs(text12, voiceId, { apiKey, stability: opts?.stability, similarityBoost: opts?.similarityBoost, speed: opts?.speed });
+        const audio = await synthesizeSpeechElevenLabs(text13, voiceId, { apiKey, stability: opts?.stability, similarityBoost: opts?.similarityBoost, speed: opts?.speed });
         const dir2 = outDir ?? join48(musicDir2(), randomUUID24());
         await mkdir9(dir2, { recursive: true });
         const path6 = join48(dir2, "speech.mp3");
@@ -101009,8 +101541,8 @@ function createDaemonSupportSubmit() {
       signal: AbortSignal.timeout(3e4)
     });
     if (!res.ok) {
-      const text12 = await res.text().catch(() => "");
-      throw new Error(`Report submission failed (${res.status}). ${text12.slice(0, 200)}`);
+      const text13 = await res.text().catch(() => "");
+      throw new Error(`Report submission failed (${res.status}). ${text13.slice(0, 200)}`);
     }
     const body = await res.json();
     if (!body.issueUrl || typeof body.issueNumber !== "number")
@@ -101724,28 +102256,28 @@ async function execPresentControl(name, args) {
 // ../../packages/host-core/dist/app-control-daemon.js
 var DAEMON_TABLE = {
   "present.state": async () => {
-    const { text: text12 } = await execPresentControl("deck_overview", {});
-    return text12;
+    const { text: text13 } = await execPresentControl("deck_overview", {});
+    return text13;
   },
   "present.deck": async () => {
-    const { text: text12 } = await execPresentControl("deck_overview", {});
-    return text12;
+    const { text: text13 } = await execPresentControl("deck_overview", {});
+    return text13;
   },
   "present.find_slide": async (input) => {
-    const { text: text12 } = await execPresentControl("find_slide", { query: String(input.query ?? "") });
-    return text12;
+    const { text: text13 } = await execPresentControl("find_slide", { query: String(input.query ?? "") });
+    return text13;
   },
   "present.goto": async (input) => {
-    const { text: text12 } = await execPresentControl("goto_slide", { slide: Number(input.slide) });
-    return text12;
+    const { text: text13 } = await execPresentControl("goto_slide", { slide: Number(input.slide) });
+    return text13;
   },
   "present.set_zoom": async (input) => {
-    const { text: text12 } = await execPresentControl("set_zoom", { level: Number(input.level) });
-    return text12;
+    const { text: text13 } = await execPresentControl("set_zoom", { level: Number(input.level) });
+    return text13;
   },
   "present.set_blank": async (input) => {
-    const { text: text12 } = await execPresentControl("set_blank", { blanked: input.blanked === true });
-    return text12;
+    const { text: text13 } = await execPresentControl("set_blank", { blanked: input.blanked === true });
+    return text13;
   },
   "present.set_ai": async (input) => {
     if (!isLive())
@@ -102306,7 +102838,10 @@ function refreshDaemonScheduling(b) {
     // and a 3am fire would act on a switch the user changed days ago. The snapshot is
     // already read fresh per turn everywhere else; this reads it fresh per fire.
     isUnattended: () => readDaemonAgentSettings().unattended === true,
-    isVerified: () => readDaemonAgentSettings().reinforcedVerification === true
+    isVerified: () => readDaemonAgentSettings().reinforcedVerification === true,
+    // The person's permission rules and hooks, for a fire that OPENS a conversation: it has no earlier turn
+    // to replay them from, and it is the run nobody is watching. Read per fire, like the switches above.
+    settings: () => readDaemonAgentSettings().settings
   });
 }
 function daemonWorkspaceDir() {
@@ -102596,8 +103131,8 @@ async function linuxFavorites() {
   ];
   for (const file2 of candidates) {
     try {
-      const text12 = await readFile13(file2, "utf8");
-      const favs = finalize2(parseGtkBookmarks(text12));
+      const text13 = await readFile13(file2, "utf8");
+      const favs = finalize2(parseGtkBookmarks(text13));
       if (favs.length)
         return favs;
     } catch {
@@ -102605,9 +103140,9 @@ async function linuxFavorites() {
   }
   return [];
 }
-function parseGtkBookmarks(text12) {
+function parseGtkBookmarks(text13) {
   const out = [];
-  for (const raw of text12.split(/\r?\n/)) {
+  for (const raw of text13.split(/\r?\n/)) {
     const line = raw.trim();
     if (!line.startsWith("file://"))
       continue;
@@ -108807,8 +109342,8 @@ function safeJson(value) {
     return "";
   }
 }
-function firstLine2(text12) {
-  return text12.split("\n").map((l) => l.trim()).find(Boolean)?.slice(0, 80) ?? "";
+function firstLine2(text13) {
+  return text13.split("\n").map((l) => l.trim()).find(Boolean)?.slice(0, 80) ?? "";
 }
 function queryMatcher(query2) {
   const q = query2.trim();
@@ -108816,11 +109351,11 @@ function queryMatcher(query2) {
     return null;
   return new RegExp(q.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "iu");
 }
-function snippetAt(text12, at, length, radius = 60) {
+function snippetAt(text13, at, length, radius = 60) {
   const from = Math.max(0, at - radius);
-  const to = Math.min(text12.length, at + length + radius);
-  const body = text12.slice(from, to).replace(/\s+/g, " ").trim();
-  return `${from > 0 ? "\u2026" : ""}${body}${to < text12.length ? "\u2026" : ""}`;
+  const to = Math.min(text13.length, at + length + radius);
+  const body = text13.slice(from, to).replace(/\s+/g, " ").trim();
+  return `${from > 0 ? "\u2026" : ""}${body}${to < text13.length ? "\u2026" : ""}`;
 }
 
 // ../../packages/host-core/dist/session-search/text-cache.js
@@ -108876,10 +109411,10 @@ function createTextCache(baseDir) {
         const nl = buf.lastIndexOf(10, end2 - 1);
         end2 = nl >= at ? nl + 1 : Math.max(end2, buf.indexOf(10, end2) + 1 || buf.length);
       }
-      const { text: text12, bytes: bytes3 } = completeLines(buf.subarray(at, end2));
+      const { text: text13, bytes: bytes3 } = completeLines(buf.subarray(at, end2));
       if (bytes3 === 0)
         break;
-      const out = extractSession(text12, { ...hints, text: "" });
+      const out = extractSession(text13, { ...hints, text: "" });
       if (out.text)
         texts.push(out.text);
       hints = out;
@@ -108887,9 +109422,9 @@ function createTextCache(baseDir) {
     }
     return { extraction: { ...hints, text: "", consumed: at }, texts, bytes: at };
   }
-  async function writeText(file2, text12) {
+  async function writeText(file2, text13) {
     const tmp = `${file2}.${process.pid}.${Date.now()}.tmp`;
-    await writeFile14(tmp, text12, { mode: 384 });
+    await writeFile14(tmp, text13, { mode: 384 });
     await rename5(tmp, file2);
   }
   async function extractWhole(file2, entry) {
@@ -108916,9 +109451,9 @@ function createTextCache(baseDir) {
       return null;
     }
     const main2 = extractChunked(raw, fromArchive.extraction);
-    const text12 = [...fromArchive.texts, ...main2.texts].join("\n");
+    const text13 = [...fromArchive.texts, ...main2.texts].join("\n");
     const textFile = entry?.textFile ?? textFileFor(file2.path);
-    await writeText(join65(dir2, textFile), text12);
+    await writeText(join65(dir2, textFile), text13);
     const { text: _t, consumed: _c, ...hints } = main2.extraction;
     return {
       path: file2.path,
@@ -109100,8 +109635,8 @@ function createSessionSearch(deps) {
           continue;
         const index = indexed.get(id);
         const title = entry.hints.customTitle ?? index?.title ?? entry.hints.firstPrompt ?? entry.hints.aiTitle;
-        const text12 = await cache6.text(entry);
-        const inBody = matcher.exec(text12);
+        const text13 = await cache6.text(entry);
+        const inBody = matcher.exec(text13);
         const inTitle = title ? matcher.test(title) : false;
         if (!inBody && !inTitle)
           continue;
@@ -109113,7 +109648,7 @@ function createSessionSearch(deps) {
           lastModified: entry.hints.lastTimestamp ?? entry.mtimeMs,
           ...cwd ? { cwd } : {},
           engineId,
-          ...inBody ? { snippet: snippetAt(text12, inBody.index, inBody[0].length) } : {}
+          ...inBody ? { snippet: snippetAt(text13, inBody.index, inBody[0].length) } : {}
         };
         run9.hits.push(hit);
         found.push(hit);
@@ -111281,12 +111816,12 @@ var RdeskSessionManager = class {
     this.deps.sendControl(sessionId, s.viewer.clientId, { type: "rdesk:muted", mic: !!mute.mic, systemAudio: !!mute.systemAudio });
   }
   /** Host operator → viewer: send an in-session chat line. No-op if the session is gone. */
-  sendChat(sessionId, text12) {
+  sendChat(sessionId, text13) {
     const s = this.sessions.get(sessionId);
     if (!s)
       return;
-    this.deps.sendControl(sessionId, s.viewer.clientId, { type: "rdesk:chat", text: text12, from: "host", at: Date.now() });
-    this.audit({ event: "chat", sessionId, detail: `host: ${text12.slice(0, 80)}` });
+    this.deps.sendControl(sessionId, s.viewer.clientId, { type: "rdesk:chat", text: text13, from: "host", at: Date.now() });
+    this.audit({ event: "chat", sessionId, detail: `host: ${text13.slice(0, 80)}` });
   }
   /** Switch the captured display. */
   async setMonitor(sessionId, monitorId) {
@@ -111318,9 +111853,9 @@ var RdeskSessionManager = class {
       return this.sendKeys(sessionId, msg.combo);
     if (msg.type === "rdesk:chat") {
       const s = this.sessions.get(sessionId);
-      const text12 = msg.text.slice(0, 4e3);
-      this.deps.onChat?.({ sessionId, viewerName: s?.viewer.name, text: text12 });
-      this.audit({ event: "chat", sessionId, detail: text12.slice(0, 80) });
+      const text13 = msg.text.slice(0, 4e3);
+      this.deps.onChat?.({ sessionId, viewerName: s?.viewer.name, text: text13 });
+      this.audit({ event: "chat", sessionId, detail: text13.slice(0, 80) });
       return;
     }
     if (msg.type === "rdesk:av") {
@@ -111963,8 +112498,8 @@ function waylandInputRunner(p, screen) {
     async scroll(o) {
       p.pointerAxis(o.dx ?? 0, o.dy ?? 0);
     },
-    async typeText(text12) {
-      for (const ch of text12) {
+    async typeText(text13) {
+      for (const ch of text13) {
         const ks = charKeysym(ch);
         if (!ks)
           continue;
@@ -112138,11 +112673,11 @@ var TesseractEngine = class {
       onInput: (ev) => void this.injector?.apply(ev),
       // Clipboard sync (Phase 6): write the viewer's clipboard onto the host so ⌘V pastes
       // into the remote machine. Gated by control access (view-only never writes).
-      onClipboard: (text12) => {
+      onClipboard: (text13) => {
         if (this.access === "control") {
           const el2 = electronModule();
           try {
-            el2?.clipboard?.writeText(text12);
+            el2?.clipboard?.writeText(text13);
           } catch {
           }
         }
@@ -114560,8 +115095,8 @@ async function startLocalServer(opts) {
       if (!vc || !vc.isPresentMode)
         return null;
       return {
-        injectContext: (text12) => vc.injectPresentContext(text12),
-        ask: (text12) => vc.askPresent(text12)
+        injectContext: (text13) => vc.injectPresentContext(text13),
+        ask: (text13) => vc.askPresent(text13)
       };
     });
     const unregisterSink = registerAgentSink((msg, origin2) => {
@@ -115685,7 +116220,7 @@ async function getPeerIdentityPub(opts) {
 }
 
 // ../../packages/host-core/dist/mesh/node.js
-import { createSocket as createSocket2 } from "node:dgram";
+import { createSocket } from "node:dgram";
 import { createRequire as createRequire4 } from "node:module";
 init_credentials();
 
@@ -116212,6 +116747,8 @@ async function netdNodeStatus(meshId) {
       relayed: strs("relayed"),
       policyEpoch: num2("policyEpoch"),
       revoked: b.revoked === true,
+      lan: b.lan === true,
+      lanError: typeof b.lanError === "string" ? b.lanError : null,
       bundleStaleInMs: typeof b.bundleStaleInMs === "number" ? b.bundleStaleInMs : null,
       lastError: typeof b.lastError === "string" ? b.lastError : null,
       localStaticPub: Uint8Array.from(Buffer.from(pubHex, "hex")),
@@ -116394,6 +116931,15 @@ var NetdEngine = class {
   get srflx() {
     return this.#snapshot?.srflx ?? null;
   }
+  /** Whether the HELPER's LAN discovery joined the multicast group — it owns that socket
+   *  now, so this is the only honest source for it. */
+  get lan() {
+    return this.#snapshot?.lan === true;
+  }
+  /** Why LAN discovery is off, when it is — the helper records the step that failed. */
+  get lanError() {
+    return this.#snapshot?.lanError ?? null;
+  }
   /** The same over IPv6, advertised alongside rather than instead. */
   get srflx6() {
     return this.#snapshot?.srflx6 ?? null;
@@ -116489,127 +117035,6 @@ ${ts}`);
   }
 }
 
-// ../../packages/host-core/dist/mesh/lan.js
-import { createSocket } from "node:dgram";
-var MAGIC = Buffer.from("TSRL");
-var VERSION2 = 1;
-var LAN_GROUP_V4 = "224.0.0.251";
-var LAN_PORT = 5353;
-var BEACON_LEN = 4 + 1 + 3 + 32 + 32 + 2 + 8;
-var ANNOUNCE_MS = 5e3;
-function encodeBeacon(b) {
-  const out = Buffer.alloc(BEACON_LEN);
-  MAGIC.copy(out, 0);
-  out[4] = VERSION2;
-  b.genesisFp.copy(out, 8, 0, 32);
-  b.staticPub.copy(out, 40, 0, 32);
-  out.writeUInt16BE(b.port, 72);
-  out.writeUInt32BE(Math.floor(b.epoch / 4294967296), 74);
-  out.writeUInt32BE(b.epoch >>> 0, 78);
-  return out;
-}
-function parseBeacon(buf) {
-  if (buf.length !== BEACON_LEN)
-    return null;
-  if (!buf.subarray(0, 4).equals(MAGIC))
-    return null;
-  if (buf[4] !== VERSION2)
-    return null;
-  if (buf[5] !== 0 || buf[6] !== 0 || buf[7] !== 0)
-    return null;
-  const port = buf.readUInt16BE(72);
-  if (port < 1)
-    return null;
-  const epoch2 = buf.readUInt32BE(74) * 4294967296 + buf.readUInt32BE(78);
-  return {
-    genesisFp: buf.subarray(8, 40),
-    staticPub: buf.subarray(40, 72),
-    port,
-    epoch: epoch2
-  };
-}
-var LanDiscovery = class {
-  #sock = null;
-  #timer = null;
-  #joined = false;
-  #opts;
-  constructor(opts) {
-    this.#opts = opts;
-  }
-  get active() {
-    return this.#joined;
-  }
-  start() {
-    if (this.#sock)
-      return;
-    const sock = createSocket({ type: "udp4", reuseAddr: true });
-    sock.on("error", () => {
-      this.stop();
-    });
-    sock.on("message", (msg, rinfo) => this.#onBeacon(msg, rinfo.address));
-    sock.bind(LAN_PORT, () => {
-      try {
-        sock.addMembership(LAN_GROUP_V4);
-        sock.setMulticastLoopback(true);
-        sock.setMulticastTTL(1);
-        this.#joined = true;
-        this.#announce();
-      } catch {
-        this.stop();
-      }
-    });
-    sock.unref?.();
-    this.#sock = sock;
-    this.#timer = setInterval(() => this.#announce(), ANNOUNCE_MS);
-    this.#timer.unref?.();
-  }
-  stop() {
-    if (this.#timer) {
-      clearInterval(this.#timer);
-      this.#timer = null;
-    }
-    if (this.#sock) {
-      try {
-        if (this.#joined)
-          this.#sock.dropMembership(LAN_GROUP_V4);
-      } catch {
-      }
-      try {
-        this.#sock.close();
-      } catch {
-      }
-    }
-    this.#sock = null;
-    this.#joined = false;
-  }
-  #announce() {
-    const port = this.#opts.port();
-    if (!this.#sock || !this.#joined || port === null)
-      return;
-    const frame = encodeBeacon({
-      genesisFp: this.#opts.genesisFp,
-      staticPub: this.#opts.staticPub,
-      port,
-      epoch: this.#opts.epoch()
-    });
-    try {
-      this.#sock.send(frame, LAN_PORT, LAN_GROUP_V4, () => {
-      });
-    } catch {
-    }
-  }
-  #onBeacon(msg, address) {
-    const b = parseBeacon(msg);
-    if (!b)
-      return;
-    if (!b.genesisFp.equals(this.#opts.genesisFp))
-      return;
-    if (b.staticPub.equals(this.#opts.staticPub))
-      return;
-    this.#opts.onPeer(Buffer.from(b.staticPub), address, b.port, b.epoch);
-  }
-};
-
 // ../../packages/host-core/dist/mesh/endpoints.js
 function inRange(range, addr) {
   if (addr.length !== range.addr.length)
@@ -116886,7 +117311,6 @@ var MeshNode = class {
    * can be offered a choice that has somewhere to go.
    */
   #exitNodes = /* @__PURE__ */ new Map();
-  #lan = null;
   #offRejoin = null;
   #statusTimer = null;
   /**
@@ -116936,7 +117360,8 @@ var MeshNode = class {
       enrolled: this.#identity !== null || this.#loadIdentity() !== null,
       running: this.#engine !== null,
       port: this.#port,
-      lan: this.#lan?.active ?? false,
+      lan: this.#engine instanceof NetdEngine ? this.#engine.lan : false,
+      lanError: this.#engine instanceof NetdEngine ? this.#engine.lanError : null,
       reachableAt: this.#engine instanceof NetdEngine ? [this.#engine.mapped, this.#engine.srflx, this.#engine.srflx6].filter((x) => x !== null).join(", ") || null : null,
       // Only the helper publishes names: writing the machine's name table needs root, and
       // the roster comes from the engine the helper runs. An in-process engine has a roster
@@ -117024,7 +117449,6 @@ var MeshNode = class {
           onUp: (port) => {
             this.#port = port;
             this.#join();
-            this.#startLan();
             this.#publishStatus();
           }
         });
@@ -117051,7 +117475,6 @@ var MeshNode = class {
     this.#identity = id;
     if (!inNetd) {
       this.#openSocket();
-      this.#startLan();
     }
     this.#offRejoin = onMeshRejoin(() => this.#join());
     this.#publishStatus();
@@ -117096,11 +117519,6 @@ var MeshNode = class {
       this.#published = false;
     }
     this.#runningMeshDir = null;
-    try {
-      this.#lan?.stop();
-    } catch {
-    }
-    this.#lan = null;
     try {
       this.#sock?.close();
     } catch {
@@ -117141,7 +117559,7 @@ var MeshNode = class {
     return Number.isInteger(port) && port > 0 ? { host: ep.slice(0, i), port } : null;
   }
   #openSocket() {
-    const sock = createSocket2({ type: "udp6", ipv6Only: false, reuseAddr: true });
+    const sock = createSocket({ type: "udp6", ipv6Only: false, reuseAddr: true });
     sock.on("message", (msg, rinfo) => {
       if (!this.#engine)
         return;
@@ -117166,54 +117584,20 @@ var MeshNode = class {
     sock.unref?.();
     this.#sock = sock;
   }
-  /** LAN discovery: the path that needs neither the relay nor a hole punch.
+  /* LAN discovery used to live here, as a multicast beacon in this process
+   * (`./lan.ts`). It has MOVED INTO THE HELPER (`crates/tsmesh-netd/src/lan.rs`,
+   * frame in `tsmesh_proto::lan`).
    *
-   *  Started alongside the socket, and deliberately independent of the control link —
-   *  two laptops on the same Wi-Fi with the internet down must still find each other,
-   *  which is the whole demonstration that the overlay is not relay-dependent. */
-  #startLan() {
-    const engine = this.#engine;
-    if (!engine)
-      return;
-    try {
-      this.#lan = new LanDiscovery({
-        genesisFp: Buffer.from(engine.meshId(), "hex"),
-        staticPub: engine.localStaticPub(),
-        port: () => this.#port,
-        epoch: () => engine.policyEpoch(),
-        onPeer: (staticPub, address, port, epoch2) => this.#learnLanPeer(staticPub, address, port, epoch2)
-      });
-      this.#lan.start();
-    } catch {
-      this.#lan = null;
-    }
-  }
-  /** A beacon arrived. Treated exactly like a relay hint — a candidate, not a fact.
+   * It had to. The beacon only ran while this app was running, so a headless machine --
+   * a server, the thing the network exists to reach -- could not find a peer sharing its
+   * switch. And on the netd path the app was announcing a port held by a different
+   * process entirely. The helper starts at boot with no app and owns the socket, so the
+   * beacon belongs beside it.
    *
-   *  Including its EPOCH. The beacon has always carried one (`lan.ts`: "port(2) | epoch(8)")
-   *  for the same reason the relay hint does — so a peer that is behind can be brought up
-   *  to date — and, like the relay hint's, it was thrown away here. Two laptops on one
-   *  Wi-Fi with the internet down are the demonstration that the overlay is not
-   *  relay-dependent; without this they would find each other and then never agree on who
-   *  else exists. */
-  #learnLanPeer(staticPub, address, port, epoch2 = 0) {
-    const engine = this.#engine;
-    if (!engine)
-      return;
-    const hex6 = staticPub.toString("hex");
-    this.#offerBundleTo(hex6, epoch2);
-    try {
-      if (!this.#peers.has(hex6)) {
-        engine.addPeer(staticPub, 0, Buffer.alloc(16));
-        this.#peers.set(hex6, staticPub);
-      }
-      engine.addPath(staticPub, `${address}:${port}`, false);
-      engine.ensureHandshake(staticPub, Date.now());
-      this.#drain();
-    } catch (e) {
-      this.#lastError = e instanceof Error ? e.message : String(e);
-    }
-  }
+   * Moved rather than duplicated: two implementations of a parser that reads
+   * unauthenticated multicast from every device on the segment is the one risk
+   * docs/MESH.md names as unacceptable.
+   */
   #subscribe() {
     this.#unsubscribe = onMesh((m) => this.#onHint(m));
   }
@@ -117796,11 +118180,11 @@ async function call2(path6, init, auth = true) {
   } catch (e) {
     return fail3("network", e instanceof Error ? e.message : String(e));
   }
-  const text12 = await res.text();
+  const text13 = await res.text();
   if (!res.ok) {
-    let detail = text12.slice(0, 500);
+    let detail = text13.slice(0, 500);
     try {
-      const parsed = JSON.parse(text12);
+      const parsed = JSON.parse(text13);
       if (parsed.message)
         detail = Array.isArray(parsed.message) ? parsed.message.join("; ") : parsed.message;
     } catch {
@@ -117808,7 +118192,7 @@ async function call2(path6, init, auth = true) {
     return fail3(res.status >= 500 ? "server" : "refused", detail);
   }
   try {
-    return { ok: true, data: text12 ? JSON.parse(text12) : {} };
+    return { ok: true, data: text13 ? JSON.parse(text13) : {} };
   } catch {
     return fail3("server", "the server sent something that is not JSON");
   }
@@ -118010,18 +118394,18 @@ async function postJoin(origin, body) {
   } catch (e) {
     return fail3("network", e instanceof Error ? e.message : String(e));
   }
-  const text12 = await res.text();
+  const text13 = await res.text();
   if (!res.ok) {
-    let detail = text12.slice(0, 500);
+    let detail = text13.slice(0, 500);
     try {
-      const parsed = JSON.parse(text12);
+      const parsed = JSON.parse(text13);
       if (parsed.message)
         detail = String(parsed.message);
     } catch {
     }
     return fail3(res.status >= 500 ? "server" : "refused", detail);
   }
-  return { ok: true, data: JSON.parse(text12) };
+  return { ok: true, data: JSON.parse(text13) };
 }
 async function enrolWithCode(args) {
   return enrolWith(args.name, async (staticPub, sigPub, name) => postJoin(args.origin, { code: args.code, name, staticPub, sigPub }), resolveOrigin(args.origin), args.fromHostname);
@@ -118881,9 +119265,9 @@ import { pipeline } from "node:stream/promises";
 
 // ../../packages/host-core/dist/drops/crypto.js
 import { Transform } from "node:stream";
-var MAGIC2 = Buffer.from("TSD1", "ascii");
+var MAGIC = Buffer.from("TSD1", "ascii");
 var NONCE_BYTES = 12;
-var HEADER_BYTES = MAGIC2.length + NONCE_BYTES;
+var HEADER_BYTES = MAGIC.length + NONCE_BYTES;
 var FRAME_BYTES = 1024 * 1024;
 var TAG_BYTES = 16;
 var MAX_FRAME_CIPHERTEXT = FRAME_BYTES + TAG_BYTES + 1024;
@@ -118964,9 +119348,9 @@ function decryptStream(source, keyRaw) {
             cb();
             return;
           }
-          if (!head.subarray(0, MAGIC2.length).equals(MAGIC2))
+          if (!head.subarray(0, MAGIC.length).equals(MAGIC))
             throw new Error("not an encrypted drop");
-          base = Buffer.from(head.subarray(MAGIC2.length, HEADER_BYTES));
+          base = Buffer.from(head.subarray(MAGIC.length, HEADER_BYTES));
           q.consume(HEADER_BYTES);
           key2 = await importKey(keyRaw);
         }
@@ -119136,7 +119520,7 @@ function createChatAgentRunner(deps) {
     const backend2 = await getSharedBackend();
     const clientRequestId = `chat-agent-${randomUUID32()}`;
     return new Promise((resolve16, reject) => {
-      let text12 = "";
+      let text13 = "";
       let settled = false;
       const finish2 = (fn) => {
         if (settled)
@@ -119150,13 +119534,13 @@ function createChatAgentRunner(deps) {
         }
         fn();
       };
-      const timer2 = setTimeout(() => finish2(() => text12.trim() ? resolve16(text12) : reject(new Error("the agent took too long"))), TURN_TIMEOUT_MS);
+      const timer2 = setTimeout(() => finish2(() => text13.trim() ? resolve16(text13) : reject(new Error("the agent took too long"))), TURN_TIMEOUT_MS);
       let posting = false;
       let lastSent = "";
       const tick = setInterval(() => {
         if (posting || !onPartial)
           return;
-        const snapshot4 = text12.trim();
+        const snapshot4 = text13.trim();
         if (!snapshot4 || snapshot4 === lastSent)
           return;
         lastSent = snapshot4;
@@ -119172,9 +119556,9 @@ function createChatAgentRunner(deps) {
           return;
         if (m.type === "chat:stream") {
           if ((m.kind === "text" || m.kind === void 0) && m.delta)
-            text12 += m.delta;
+            text13 += m.delta;
         } else if (m.type === "chat:complete") {
-          finish2(() => resolve16(text12));
+          finish2(() => resolve16(text13));
         } else if (m.type === "chat:error") {
           finish2(() => reject(new Error(m.message ?? m.error ?? "the agent errored")));
         }
@@ -121334,7 +121718,7 @@ function backoff2() {
 var daemonClipboardSync = null;
 var REFRESH_INTERVAL_MS2 = 12 * 60 * 60 * 1e3;
 async function runDaemon(opts = {}) {
-  const VERSION3 = opts.version ?? process.env.CCB_DAEMON_VERSION ?? "dev";
+  const VERSION2 = opts.version ?? process.env.CCB_DAEMON_VERSION ?? "dev";
   const TAG = opts.tag ?? "host-daemon";
   const KIND = opts.kind ?? "app";
   const log10 = (...args) => console.log(`[${TAG} ${(/* @__PURE__ */ new Date()).toISOString()}]`, ...args);
@@ -121410,14 +121794,14 @@ async function runDaemon(opts = {}) {
     if (!ownsMachine)
       return;
     try {
-      writeFileSync44(statusFile2(), JSON.stringify({ pid: process.pid, startedAt: OUR_STARTED_AT, role: process.env.CCB_RDESK_ROLE ?? "host", kind: KIND, version: VERSION3, execPath: process.env.CCB_DAEMON_EXECPATH ?? process.execPath, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), gui: daemonGuiTrayActive(), ...localInfo ?? {}, ...s }));
+      writeFileSync44(statusFile2(), JSON.stringify({ pid: process.pid, startedAt: OUR_STARTED_AT, role: process.env.CCB_RDESK_ROLE ?? "host", kind: KIND, version: VERSION2, execPath: process.env.CCB_DAEMON_EXECPATH ?? process.execPath, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), gui: daemonGuiTrayActive(), ...localInfo ?? {}, ...s }));
       chmodSync8(statusFile2(), 384);
     } catch {
     }
   }
   const standaloneViewer = process.env.CCB_RDESK_ROLE === "client";
   if (!standaloneViewer) {
-    registerSelfAsDaemon(VERSION3);
+    registerSelfAsDaemon(VERSION2);
     if (KIND === "app") {
       try {
         await evictCliAgent(log10);
@@ -121625,7 +122009,7 @@ async function runDaemon(opts = {}) {
     unregisterSelfAsDaemon();
     process.exit(code);
   }
-  startSystemEvents({ version: VERSION3, log: (m) => log10(m) });
+  startSystemEvents({ version: VERSION2, log: (m) => log10(m) });
   const mergedProcess = opts.merged === true;
   const deliberateMergedQuit = () => !!globalThis.__ccbDeliberateQuit;
   const onTermSignal = (sig) => {
@@ -121892,7 +122276,7 @@ async function runDaemon(opts = {}) {
   if (!creds3) {
     timer2 = setInterval(() => writeStatus2({ deviceId: deviceId3, connected: false, localOnly: true }), 6e4);
     writeStatus2({ deviceId: deviceId3, connected: false, localOnly: true });
-    log10(`started LOCAL-ONLY (no identity yet) \u2014 local :${localInfo?.localPort ?? "off"}, version ${VERSION3}; will keep trying`);
+    log10(`started LOCAL-ONLY (no identity yet) \u2014 local :${localInfo?.localPort ?? "off"}, version ${VERSION2}; will keep trying`);
     const watch4 = watchForIdentity({ attempt: acquireIdentity, log: (m) => log10(m) });
     identityWatch = watch4;
     setDaemonIdentityReload(async () => {
@@ -122153,14 +122537,14 @@ async function runDaemon(opts = {}) {
     // On macOS the notification carries an inline REPLY box (hasReply) whose text is sent
     // straight back via sendChat — a full operator chat loop with no extra window. Off-mac (no
     // hasReply) it's receive-only for now; the daemon log always records it as a fallback.
-    onChat: ({ sessionId, viewerName, text: text12 }) => {
+    onChat: ({ sessionId, viewerName, text: text13 }) => {
       const NotifCtor = electronModule()?.Notification;
       if (!NotifCtor) {
-        log10(`[rdesk chat] ${viewerName ?? "viewer"}: ${text12}`);
+        log10(`[rdesk chat] ${viewerName ?? "viewer"}: ${text13}`);
         return;
       }
       try {
-        const n = new NotifCtor({ title: `${viewerName ?? "Remote viewer"} \u2014 remote desktop`, body: text12, hasReply: true, replyPlaceholder: "Reply\u2026" });
+        const n = new NotifCtor({ title: `${viewerName ?? "Remote viewer"} \u2014 remote desktop`, body: text13, hasReply: true, replyPlaceholder: "Reply\u2026" });
         n.on("reply", (_e, reply3) => {
           const r = typeof reply3 === "string" ? reply3.trim() : "";
           if (r)
@@ -122500,7 +122884,7 @@ async function runDaemon(opts = {}) {
       log10("e2e responder init failed (staying plaintext)", err2.message);
     }
   }
-  startControlLink({ deviceId: c.deviceId, power: createNodePowerController(), tokenSource, version: VERSION3, e2e }, hooks2);
+  startControlLink({ deviceId: c.deviceId, power: createNodePowerController(), tokenSource, version: VERSION2, e2e }, hooks2);
   offRecovery = onSystemEvent(({ event }) => {
     const suspended = isSuspensionSignal(event);
     if (suspended)
@@ -122601,7 +122985,7 @@ async function runDaemon(opts = {}) {
     }
   }
   const who = c.userId ? `user ${c.userId}` : "no account (unclaimed machine)";
-  log10(`started \u2014 device ${c.deviceId}, ${who}, relay ${c.backendOrigin}, local :${localInfo?.localPort ?? "off"}, version ${VERSION3}`);
+  log10(`started \u2014 device ${c.deviceId}, ${who}, relay ${c.backendOrigin}, local :${localInfo?.localPort ?? "off"}, version ${VERSION2}`);
   await refresh();
   timer2 = setInterval(() => {
     void refresh();
@@ -122709,8 +123093,8 @@ function installOwnerUid(env = process.env, self2 = typeof process.getuid === "f
   }
   return self2;
 }
-function parseOwnerUid(text12) {
-  const m = /--owner-uid(?:<\/string>)?[\s=]*(?:<string>)?(\d+)/.exec(text12);
+function parseOwnerUid(text13) {
+  const m = /--owner-uid(?:<\/string>)?[\s=]*(?:<string>)?(\d+)/.exec(text13);
   if (!m)
     return void 0;
   const uid = Number(m[1]);
@@ -122767,8 +123151,8 @@ function bundleIdForExec(exec2) {
     return void 0;
   }
 }
-function parseAssociatedBundleId(text12) {
-  const m = /<key>AssociatedBundleIdentifiers<\/key>\s*(?:<array>\s*)?<string>([^<]*)<\/string>/.exec(text12);
+function parseAssociatedBundleId(text13) {
+  const m = /<key>AssociatedBundleIdentifiers<\/key>\s*(?:<array>\s*)?<string>([^<]*)<\/string>/.exec(text13);
   const id = m?.[1]?.trim();
   return id && looksLikeBundleId(id) ? id : void 0;
 }
@@ -122829,10 +123213,25 @@ ${args}
     <integer>30</integer>
     <key>ProcessType</key>
     <string>Interactive</string>
+    <!-- /dev/null, NOT netd.log, and this is load-bearing.
+
+         These two keys used to point at netd.log, and launchd does not rotate what it
+         redirects \u2014 so the file grew for the life of the install. The same omission on
+         Windows reached 136 GB on a CI runner and hung two hours of release builds while
+         looking like an npm problem; macOS had it too and nobody had looked.
+
+         netd now owns netd.log itself and rotates it (tsmesh_netd::logfile, 8 MiB, one
+         previous generation). Leaving launchd pointed at the same path would be WORSE than
+         the bug: after netd renames the file, launchd's descriptor still refers to the
+         renamed inode, so it would append to the "previous generation" forever and no
+         rotation could ever reclaim it. One writer, or none.
+
+         Nothing is lost by discarding this stream: everything netd logs goes through its own
+         sink, and a panic is routed there too by a hook installed with the log file. -->
     <key>StandardErrorPath</key>
-    <string>${xml(join91(spec.stateDir, "netd.log"))}</string>
+    <string>/dev/null</string>
     <key>StandardOutPath</key>
-    <string>${xml(join91(spec.stateDir, "netd.log"))}</string>
+    <string>/dev/null</string>
   </dict>
 </plist>
 `;
@@ -122920,9 +123319,9 @@ ${plist}TESSERACT_PLIST_EOF`,
     async state() {
       if (!existsSync50(PLIST))
         return { installed: false, running: false };
-      const text12 = readFileSync59(PLIST, "utf8");
-      const owner = parseOwnerUid(text12);
-      const assoc = parseAssociatedBundleId(text12);
+      const text13 = readFileSync59(PLIST, "utf8");
+      const owner = parseOwnerUid(text13);
+      const assoc = parseAssociatedBundleId(text13);
       const running2 = await netdAvailable();
       return {
         installed: true,
@@ -123559,10 +123958,10 @@ import { dirname as dirname42, join as join94 } from "node:path";
 import { homedir as homedir16, userInfo as userInfo2 } from "node:os";
 
 // ../../packages/host-core/dist/service/legacy-label.js
-function definitionIsCli(text12) {
-  if (!text12)
+function definitionIsCli(text13) {
+  if (!text13)
     return false;
-  return /node_modules[/\\]tesseract-agent[/\\]/.test(text12) || /[/\\]bin[/\\]tesseract-agent(\.cmd|\.exe)?["'\s]*$/m.test(text12) || /[/\\]bin[/\\]tesseract-agent(\.cmd|\.exe)?[<"'\s]/.test(text12);
+  return /node_modules[/\\]tesseract-agent[/\\]/.test(text13) || /[/\\]bin[/\\]tesseract-agent(\.cmd|\.exe)?["'\s]*$/m.test(text13) || /[/\\]bin[/\\]tesseract-agent(\.cmd|\.exe)?[<"'\s]/.test(text13);
 }
 
 // ../../packages/host-core/dist/service/launchd.js
@@ -124689,7 +125088,9 @@ async function meshCommand(rest, flags) {
       return;
     }
     console.log(`node:         running on UDP port ${s.port ?? "?"}`);
-    console.log(`node:         LAN discovery ${s.lan ? "on" : "off (no multicast on this network)"}`);
+    console.log(
+      `node:         LAN discovery ${s.lan ? "on" : `off \u2014 ${s.lanError ?? "no reason was recorded"}`}`
+    );
     if (!("reachableAt" in s)) {
       console.log("reachable at: unknown \u2014 the background service predates this CLI; restart it and ask again");
     } else {