token-harness 0.1.25 → 0.1.26

package/token-harness.mjs

@@ -9862,7 +9862,7 @@ var TOOL_VERSION;
 var init_version2 = __esm({
   "apps/cli/dist/src/version.js"() {
     "use strict";
-    TOOL_VERSION = "0.1.25";
+    TOOL_VERSION = "0.1.26";
   }
 });
 
@@ -11923,6 +11923,50 @@ var init_windows_command_line = __esm({
 import { spawn } from "node:child_process";
 import { win32 as win324 } from "node:path";
 import process3 from "node:process";
+function launchGuidedApplication(input) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(input.executable, [input.entryScript, "ui", "--no-open"], {
+      cwd: input.cwd,
+      env: minimalChildEnvironment({ facts: input.facts, ambient: input.env }),
+      shell: false,
+      windowsHide: true,
+      detached: true,
+      stdio: ["ignore", "ignore", "ignore", "ipc"]
+    });
+    let settled = false;
+    const finish5 = (url) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      if (child.connected)
+        child.disconnect();
+      if (url === null) {
+        child.kill();
+        reject(new Error("The updated app could not start. The current dashboard remains open."));
+      } else {
+        child.unref();
+        resolve(url);
+      }
+    };
+    const timer = setTimeout(() => finish5(null), input.timeoutMs ?? 2e4);
+    child.once("error", () => finish5(null));
+    child.once("exit", () => finish5(null));
+    child.on("message", (message) => {
+      if (message === null || typeof message !== "object")
+        return;
+      const value3 = message;
+      if (value3["type"] !== "token-harness-guide-ready" || typeof value3["url"] !== "string")
+        return;
+      try {
+        const url = new URL(value3["url"]);
+        if (url.protocol === "http:" && url.hostname === "127.0.0.1" && url.port !== "" && url.pathname === "/" && url.search === "" && url.hash === "" && url.username === "" && url.password === "")
+          finish5(url.href);
+      } catch {
+      }
+    });
+  });
+}
 function boundedCapture(limit) {
   const chunks = [];
   let size = 0;
@@ -14819,7 +14863,7 @@ function record5(value3) {
 function tuple(event, matcher, command) {
   return JSON.stringify([event, matcher, command]);
 }
-async function readCodexHookEnablement(context, config) {
+async function readCodexHookEnablement(context, config, routingOnly = false) {
   const expected = [];
   try {
     const stat3 = await context.fs.stat(config.path);
@@ -14831,8 +14875,15 @@ async function readCodexHookEnablement(context, config) {
       return null;
     for (const [event, native] of [
       ["PreToolUse", "preToolUse"],
-      ["PostToolUse", "postToolUse"]
+      ["PostToolUse", "postToolUse"],
+      ...routingOnly ? [
+        ["UserPromptSubmit", "userPromptSubmit"],
+        ["SubagentStart", "subagentStart"],
+        ["SubagentStop", "subagentStop"]
+      ] : []
     ]) {
+      if (routingOnly && !["UserPromptSubmit", "SubagentStart", "SubagentStop"].includes(event))
+        continue;
       const entries = parsed["hooks"][event];
       if (!Array.isArray(entries))
         continue;
@@ -14841,7 +14892,7 @@ async function readCodexHookEnablement(context, config) {
           continue;
         const matcher = typeof entry["matcher"] === "string" ? entry["matcher"] : null;
         for (const handler of entry["hooks"]) {
-          if (record5(handler) && handler["type"] === "command" && typeof handler["command"] === "string") {
+          if (record5(handler) && handler["type"] === "command" && typeof handler["command"] === "string" && (!routingOnly || handler["command"].includes("__internal-prompt-router"))) {
             expected.push(tuple(native, matcher, handler["command"]));
           }
         }
@@ -16737,7 +16788,13 @@ var init_pi = __esm({
 });
 
 // packages/adapters/dist/src/harnesses/native-prompt-routing.js
-function nativePromptRoutingHookEntries(harness, executable = "token-harness") {
+function nativePromptRoutingVersionSupported(harness, version3) {
+  const parsed = version3 === null ? null : parseSemanticVersion(version3);
+  if (parsed === null || parsed.prerelease !== null)
+    return false;
+  return harness === "codex" ? parsed.major === 0 && (parsed.minor === 159 && parsed.patch <= 1 || parsed.minor === 160 && parsed.patch === 0) : harness === "claude" && parsed.major === 2 && parsed.minor === 1 && parsed.patch >= 274 && parsed.patch <= 288;
+}
+function nativePromptRoutingHookEntries(harness, executable = "token-harness", platform = "linux") {
   return NATIVE_PROMPT_ROUTING_EVENTS.map(({ eventName, commandEvent }) => {
     if (harness === "codex") {
       const command = `${executable} __internal-prompt-router codex ${commandEvent}`;
@@ -16751,7 +16808,11 @@ function nativePromptRoutingHookEntries(harness, executable = "token-harness") {
         handler2["additionalContextLimit"] = 500;
       return { eventName, value: { hooks: [handler2] } };
     }
-    const handler = {
+    const handler = platform === "windows" ? {
+      type: "command",
+      command: `${executable} __internal-prompt-router claude ${commandEvent}`,
+      timeout: 10
+    } : {
       type: "command",
       command: executable,
       args: ["__internal-prompt-router", "claude", commandEvent],
@@ -16764,6 +16825,7 @@ var NATIVE_PROMPT_ROUTING_EVENTS;
 var init_native_prompt_routing = __esm({
   "packages/adapters/dist/src/harnesses/native-prompt-routing.js"() {
     "use strict";
+    init_src();
     NATIVE_PROMPT_ROUTING_EVENTS = [
       { eventName: "UserPromptSubmit", commandEvent: "prompt-submit" },
       { eventName: "SubagentStart", commandEvent: "subagent-start" },
@@ -16797,6 +16859,7 @@ var init_harnesses = __esm({
     init_pi();
     init_claude();
     init_native_prompt_routing();
+    init_codex_hooks();
     HARNESS_ADAPTERS = [
       claudeAdapter,
       codexAdapter,
@@ -20343,7 +20406,20 @@ ${help.stderr}`) : { compact: false, json: false };
     detail: ready ? `mcptoon ${version3} exposes the compact/JSON CLI surfaces used by the managed integration` : `mcptoon ${version3} no longer advertises the compact/JSON CLI surfaces required by the managed integration`
   };
 }
-function mcptoonInstallAction() {
+async function mcptoonInstallChannel(context) {
+  for (const channel of ["pipx", "uv"]) {
+    const result6 = await context.runner.run({
+      executable: channel,
+      args: ["--version"],
+      cwd: context.projectRoot,
+      timeoutMs: 2e4
+    });
+    if (result6.failure === null && result6.exitCode === 0)
+      return channel;
+  }
+  return null;
+}
+function mcptoonInstallAction(channel) {
   return {
     kind: "package-manager-install",
     id: `mcptoon:install:${MCPTOON_REVIEWED_INSTALL_VERSION}`,
@@ -20351,12 +20427,14 @@ function mcptoonInstallAction() {
     requiresNetwork: true,
     requiresElevation: false,
     affectedPaths: [],
-    affectedProcesses: ["pipx"],
-    preconditions: ["pipx remains runnable and the reviewed mcptoon release remains installable"],
-    postconditions: [`mcptoon ${MCPTOON_REVIEWED_INSTALL_VERSION} is installed through pipx`],
+    affectedProcesses: [channel],
+    preconditions: [
+      `${channel} remains runnable and the reviewed mcptoon release remains installable`
+    ],
+    postconditions: [`mcptoon ${MCPTOON_REVIEWED_INSTALL_VERSION} is installed through ${channel}`],
     rollbackData: "package-inventory",
-    explanation: `Install reviewed mcptoon ${MCPTOON_REVIEWED_INSTALL_VERSION} in an isolated pipx environment`,
-    packageManager: "pipx",
+    explanation: `Install reviewed mcptoon ${MCPTOON_REVIEWED_INSTALL_VERSION} in an isolated ${channel} environment`,
+    packageManager: channel,
     packageName: "mcptoon",
     version: MCPTOON_REVIEWED_INSTALL_VERSION
   };
@@ -20577,13 +20655,8 @@ async function planMcptoonManagedActivation(context, harness) {
     if (activation.actions.length === 0 && !activationSatisfied) {
       return activation;
     }
-    const pipx = await context.runner.run({
-      executable: "pipx",
-      args: ["--version"],
-      cwd: context.projectRoot,
-      timeoutMs: 2e4
-    });
-    if (pipx.failure !== null || pipx.exitCode !== 0) {
+    const channel = await mcptoonInstallChannel(context);
+    if (channel === null) {
       return {
         harness,
         target: activation.target,
@@ -20594,22 +20667,22 @@ async function planMcptoonManagedActivation(context, harness) {
             severity: "warning",
             code: "mcptoon-pipx-unavailable",
             subject: harness,
-            message: "mcptoon is absent and the isolated pipx installer is not available",
-            remediation: "Install pipx, then refresh Token Harness; Token Harness will not bootstrap a Python package manager implicitly"
+            message: "mcptoon needs an isolated installer: pipx or uv",
+            remediation: "Install pipx or uv, then Refresh to enable Install mcptoon. See Installation options for the platform instructions."
           })
         ]
       };
     }
     return {
       ...activation,
-      actions: [mcptoonInstallAction(), ...activation.actions],
+      actions: [mcptoonInstallAction(channel), ...activation.actions],
       diagnostics: [
         ...activation.diagnostics,
         diagnostic({
           severity: "info",
           code: "mcptoon-managed-install-planned",
           subject: harness,
-          message: `mcptoon is absent; install reviewed ${MCPTOON_REVIEWED_INSTALL_VERSION} through pipx before enabling agent guidance`,
+          message: `mcptoon is absent; install reviewed ${MCPTOON_REVIEWED_INSTALL_VERSION} through ${channel} before enabling agent guidance`,
           remediation: null
         })
       ]
@@ -20743,20 +20816,15 @@ async function mcptoonDetection(context) {
         configuredHarnesses.push(harness);
     }
   }
-  const pipx = observation.absent ? await context.runner.run({
-    executable: "pipx",
-    args: ["--version"],
-    cwd: context.projectRoot,
-    timeoutMs: 2e4
-  }) : null;
-  const canInstall = observation.absent && pipx !== null && pipx.failure === null && pipx.exitCode === 0;
+  const channel = observation.absent ? await mcptoonInstallChannel(context) : null;
+  const canInstall = observation.absent && channel !== null;
   const warnings = observation.absent && !canInstall ? [
     diagnostic({
       severity: "warning",
       code: "mcptoon-pipx-unavailable",
       subject: "mcptoon",
-      message: "mcptoon is not installed and pipx is not available in this terminal",
-      remediation: "Install pipx or make it available on PATH, then refresh. Token Harness will use it to install the reviewed mcptoon build."
+      message: "mcptoon is not installed; pipx or uv is required",
+      remediation: "Install pipx or uv, then Refresh to enable Install mcptoon. Open Installation options for your platform."
     })
   ] : !observation.absent && !observation.ready ? [warning("mcptoon-provider-capability-unavailable", "mcptoon", observation.detail)] : [];
   return {
@@ -20764,7 +20832,7 @@ async function mcptoonDetection(context) {
     state: observation.absent ? "absent" : configuredHarnesses.length > 0 ? "configured" : "installed",
     version: observation.version,
     executable: observation.executable,
-    installationChannel: observation.absent ? "pipx" : null,
+    installationChannel: observation.absent ? channel : null,
     versionVerdict: versionVerdict(observation.version, MCPTOON_REVIEWED_BENCHMARK_VERSION),
     configuredHarnesses,
     unmanagedHarnessesConfigured: [],
@@ -20975,6 +21043,16 @@ var init_managed_optimization_tools = __esm({
           requiresNetwork: true,
           requiresElevation: false,
           digestAvailable: false
+        },
+        {
+          id: "uv",
+          packageId: "mcptoon",
+          kind: "uv",
+          priority: 1,
+          platforms: ["windows", "macos", "linux"],
+          requiresNetwork: true,
+          requiresElevation: false,
+          digestAvailable: false
         }
       ],
       metrics: { source: "none", mode: "unavailable", locations: [] },
@@ -22989,9 +23067,6 @@ var init_argv = __esm({
 function isHarness(value3) {
   return value3 === "claude" || value3 === "codex";
 }
-function expectedVersions(harness) {
-  return harness === "codex" ? ["0.159.0", "0.160.0"] : ["2.1.274", "2.1.288"];
-}
 function configTarget(input) {
   if (!isHarness(input.harness) || input.home === null)
     return null;
@@ -23013,8 +23088,8 @@ function configTarget(input) {
     fileContext
   };
 }
-function hookEntries(harness) {
-  return nativePromptRoutingHookEntries(harnessId(harness), "token-harness");
+function hookEntries(harness, platform = "linux") {
+  return nativePromptRoutingHookEntries(harnessId(harness), "token-harness", platform);
 }
 function asRecord(value3) {
   return typeof value3 === "object" && value3 !== null && !Array.isArray(value3) ? value3 : null;
@@ -23054,13 +23129,13 @@ function containsRouterCommand(value3, harness) {
     if (harness === "codex")
       return [handler["command"], handler["commandWindows"]].some((command) => typeof command === "string" && command.includes(ROUTE_MARKER));
     const args = handler["args"];
-    return handler["command"] === "token-harness" && Array.isArray(args) && args[0] === ROUTE_MARKER;
+    return typeof handler["command"] === "string" && handler["command"].includes(ROUTE_MARKER) || handler["command"] === "token-harness" && Array.isArray(args) && args[0] === ROUTE_MARKER;
   });
 }
-function configHasExactRouter(hooks, harness) {
+function configHasExactRouter(hooks, harness, platform) {
   let exactCount = 0;
   let routeCount = 0;
-  for (const expected of hookEntries(harness)) {
+  for (const expected of hookEntries(harness, platform)) {
     const live = hooks[expected.eventName];
     const entries = Array.isArray(live) ? live : [];
     const routeEntries = entries.filter((entry) => containsRouterCommand(entry, harness));
@@ -23069,13 +23144,13 @@ function configHasExactRouter(hooks, harness) {
       exactCount += 1;
   }
   return {
-    complete: exactCount === hookEntries(harness).length,
-    partial: routeCount > 0 && exactCount !== hookEntries(harness).length,
+    complete: exactCount === hookEntries(harness, platform).length,
+    partial: routeCount > 0 && exactCount !== hookEntries(harness, platform).length,
     conflict: routeCount > exactCount
   };
 }
-function routerOwnedArtifacts(journals, path, harness) {
-  const expected = hookEntries(harness);
+function routerOwnedArtifacts(journals, path, harness, platform) {
+  const expected = hookEntries(harness, platform);
   for (const journal of journals) {
     const disabledHere = journal.entries.some((entry) => entry.actionId.startsWith(`native-prompt-routing:${harness}:disable:`) && entry.snapshots.some((snapshot) => snapshot.path === path));
     if (disabledHere && journal.outcome === "committed")
@@ -23114,14 +23189,14 @@ async function planNativePromptRoutingInstall(input) {
     }));
     return { target: null, actions: [], diagnostics };
   }
-  if (!expectedVersions(target.harness).includes(target.version ?? "")) {
+  if (!nativePromptRoutingVersionSupported(harnessId(target.harness), target.version)) {
     diagnostics.push(diagnostic({
       severity: "warning",
       code: "prompt-routing-version-unverified",
       subject: target.harness,
-      message: `Native prompt routing has no hook fixture for ${target.harness} ${target.version ?? "unknown"}`,
+      message: `Routing is not supported for ${target.harness} ${target.version ?? "(version unknown)"}. Check Token Harness updates in Health and updates, then retry.`,
       path: target.path,
-      remediation: "Refresh Token Harness after the installed harness hook schema is fixture-tested"
+      remediation: "Check for Token Harness updates; this agent version needs a verified hook fixture"
     }));
     return { target: target.path, actions: [], diagnostics };
   }
@@ -23171,7 +23246,7 @@ async function planNativePromptRoutingInstall(input) {
     }
     hooks = parsed.hooks;
   }
-  const existing = configHasExactRouter(hooks, target.harness);
+  const existing = configHasExactRouter(hooks, target.harness, input.facts.os);
   if (existing.complete) {
     diagnostics.push(diagnostic({
       severity: "info",
@@ -23183,7 +23258,10 @@ async function planNativePromptRoutingInstall(input) {
     }));
     return { target: target.path, actions: [], diagnostics };
   }
-  if (existing.partial || existing.conflict) {
+  const legacy = target.harness === "claude" && input.facts.os === "windows" ? configHasExactRouter(hooks, target.harness, "linux") : null;
+  const legacyOwned = legacy?.complete && !legacy.conflict ? routerOwnedArtifacts(await journalsFor({ fs: input.fs, stateRoot: input.stateRoot ?? null }), target.path, target.harness, "linux") : [];
+  const repair = legacyOwned.length === 3;
+  if ((existing.partial || existing.conflict) && !repair) {
     diagnostics.push(diagnostic({
       severity: "error",
       code: "prompt-routing-existing-hook-conflict",
@@ -23194,7 +23272,7 @@ async function planNativePromptRoutingInstall(input) {
     }));
     return { target: target.path, actions: [], diagnostics };
   }
-  const entries = hookEntries(target.harness);
+  const entries = hookEntries(target.harness, input.facts.os);
   const action = {
     kind: "merge-json",
     id: actionId(target.harness, "enable", "all"),
@@ -23220,7 +23298,8 @@ async function planNativePromptRoutingInstall(input) {
     })),
     createIfMissing: true
   };
-  return { target: target.path, actions: [action], diagnostics };
+  const removals = repair ? await planNativePromptRoutingRemoval({ ...input, stateRoot: input.stateRoot ?? null }) : null;
+  return { target: target.path, actions: [...removals?.actions ?? [], action], diagnostics };
 }
 async function planNativePromptRoutingRemoval(input) {
   const diagnostics = [];
@@ -23235,9 +23314,13 @@ async function planNativePromptRoutingRemoval(input) {
     }));
     return { target: target?.path ?? null, actions: [], diagnostics };
   }
-  const expected = hookEntries(target.harness);
+  let expected = hookEntries(target.harness, input.facts.os);
   const journals = await journalsFor({ fs: input.fs, stateRoot: input.stateRoot });
-  const artifacts = routerOwnedArtifacts(journals, target.path, target.harness);
+  let artifacts = routerOwnedArtifacts(journals, target.path, target.harness, input.facts.os);
+  if (artifacts.length === 0 && target.harness === "claude" && input.facts.os === "windows") {
+    expected = hookEntries(target.harness, "linux");
+    artifacts = routerOwnedArtifacts(journals, target.path, target.harness, "linux");
+  }
   const actions = expected.flatMap((entry) => {
     const pointer = `hooks.${entry.eventName}`;
     const targetArtifact = artifacts.find((artifact) => artifact.kind === "owned-json-entry" && artifact.pointer === pointer && artifact.valueDigest === jsonValueDigest(entry.value));
@@ -23381,7 +23464,9 @@ async function observeNativePromptRouting(input) {
     subagentsStopped: 0,
     reportedModels: [],
     lastObservedAt: null,
-    receiptState: "unavailable"
+    receiptState: "unavailable",
+    enablement: "unknown",
+    verificationTier: "config-only"
   };
   const target = configTarget({ ...input, harness: input.harness });
   if (target === null)
@@ -23442,7 +23527,23 @@ async function observeNativePromptRouting(input) {
       receiptState: eventResult.state
     };
   }
-  const match = configHasExactRouter(hooks, harness);
+  const match = configHasExactRouter(hooks, harness, input.facts.os);
+  if (harness === "claude" && input.facts.os === "windows" && (match.partial || match.conflict)) {
+    const legacy = configHasExactRouter(hooks, harness, "linux");
+    const owned = routerOwnedArtifacts(await journalsFor(input), target.path, harness, "linux");
+    if (legacy.complete && !legacy.conflict && owned.length === 3)
+      return {
+        ...base,
+        ...summary,
+        state: "managed",
+        label: "Repair required",
+        configured: false,
+        configPath: target.path,
+        needsRepair: true,
+        receiptState: eventResult.state,
+        detail: "The installed routing hook cannot launch the Windows npm command. Choose Repair routing once; future prompts run automatically."
+      };
+  }
   if (match.conflict || match.partial) {
     return {
       ...base,
@@ -23466,16 +23567,54 @@ async function observeNativePromptRouting(input) {
       receiptState: eventResult.state
     };
   }
-  const artifacts = routerOwnedArtifacts(await journalsFor(input), target.path, harness);
-  const state = artifacts.length === hookEntries(harness).length ? "managed" : "external";
+  const artifacts = routerOwnedArtifacts(await journalsFor(input), target.path, harness, input.facts.os);
+  const state = artifacts.length === hookEntries(harness, input.facts.os).length ? "managed" : "external";
   const hasRuntimeReceipt = summary.promptSubmissions > 0;
-  const label = state === "external" ? hasRuntimeReceipt ? "Runtime observed \xB7 external" : "Enabled externally" : hasRuntimeReceipt ? "Runtime observed" : harness === "codex" ? "Configured \xB7 trust or runtime pending" : "Configured \xB7 runtime pending";
-  const detail2 = summary.promptSubmissions > 0 ? `${String(summary.promptSubmissions)} prompt hook(s), ${String(summary.subagentsStarted)} native agent start(s), ${String(summary.subagentsStopped)} stop(s) observed in this project during the last 30 days.${eventResult.state === "limited" ? " Counts are partial because the local receipt scan reached its safety limit." : eventResult.state === "unavailable" ? " Local runtime receipts could not be read." : ""}` : harness === "codex" ? "The hook is configured. Review and trust it in Codex with /hooks, then submit a prompt to produce a runtime receipt." : "The hook is configured. Start a new Claude Code session, submit a prompt, and Token Harness will show the runtime receipt.";
+  let enablement = "unknown";
+  if (harness === "codex") {
+    const declaration = findHarnessAdapter(harnessId(harness)).manifest.configFiles.find((file) => file.parser === "json" && file.scope === "user");
+    const check = await readCodexHookEnablement(target.fileContext, {
+      declaration,
+      path: target.path,
+      exists: true,
+      parsed: true,
+      configuredPoints: [],
+      matchers: [],
+      commands: []
+    }, true);
+    if (check?.status === "pass")
+      enablement = "enabled";
+    else if (check?.status === "fail")
+      enablement = /[1-9]\d* untrusted/.test(check.summary) ? "untrusted" : "disabled";
+  } else {
+    const adapter = findHarnessAdapter(harnessId(harness));
+    let disabled = false;
+    let readable = true;
+    for (const declaration of adapter.manifest.configFiles) {
+      const path = resolveConfigPath(declaration, target.fileContext);
+      if ((await input.fs.stat(path))?.kind !== "file")
+        continue;
+      try {
+        const doc = asRecord(JSON.parse(DECODER4.decode(await input.fs.readFile(path))));
+        if (typeof doc?.["disableAllHooks"] === "boolean")
+          disabled = doc["disableAllHooks"];
+      } catch {
+        readable = false;
+      }
+    }
+    enablement = readable ? disabled ? "disabled" : "enabled" : "unknown";
+  }
+  const blocked = enablement === "untrusted" || enablement === "disabled";
+  const label = blocked ? enablement === "untrusted" ? "Authorization required" : "Hooks disabled" : hasRuntimeReceipt ? "Runtime observed" : enablement === "enabled" ? "Ready \xB7 awaiting prompt" : "Configured \xB7 check authorization";
+  const scope = input.projectId === null ? "across projects" : "in this project";
+  const detail2 = blocked ? harness === "codex" ? "Open Codex /hooks. Enable and trust the three Token Harness routing hooks once, then send a prompt." : "Hooks are disabled in Claude settings. Enable hooks in /hooks, then send a prompt." : hasRuntimeReceipt ? `${String(summary.promptSubmissions)} prompt callbacks, ${String(summary.subagentsStarted)} agent starts, ${String(summary.subagentsStopped)} stops ${scope} in the last 30 days. Routing runs automatically on each prompt.${eventResult.state === "limited" ? " Counts are partial." : ""}` : enablement === "enabled" ? "Ready. Send a prompt in a new session; the first callback will appear here automatically. No skill or command is needed per prompt." : harness === "codex" ? "Open Codex /hooks and check the three Token Harness routing hooks are enabled and trusted. Do this once, then send a prompt in a new session." : "Check the Claude hook settings can be read and hooks are enabled in /hooks, then send a prompt in a new session.";
   return {
     ...base,
     state,
     label,
     detail: detail2,
+    enablement,
+    verificationTier: hasRuntimeReceipt && !blocked ? "runtime-observed" : "config-only",
     configPath: target.path,
     configured: true,
     ...summary,
@@ -27376,7 +27515,7 @@ async function runApply(context) {
     now: context.now,
     verifyPostconditions: async () => [
       ...await verifyManagedIntegrationPostconditions(context, computed.managedIntegrations),
-      ...await verifyNativePromptRoutingPostconditions(context, actions)
+      ...await verifyNativePromptRoutingPostconditions(planningContext, actions)
     ]
   });
   diagnostics.push(...transaction.diagnostics);
@@ -35504,7 +35643,7 @@ function guideSetupTargets(report, harness) {
 function explainGuideIssue(diagnostics, fallback) {
   const known = diagnostics.find((entry) => entry.severity === "error" && ISSUE_COPY[entry.code] !== void 0) ?? diagnostics.find((entry) => entry.severity === "warning" && ISSUE_COPY[entry.code] !== void 0) ?? diagnostics.find((entry) => entry.severity === "info" && ISSUE_COPY[entry.code] !== void 0);
   if (known !== void 0)
-    return ISSUE_COPY[known.code];
+    return known.code === "prompt-routing-version-unverified" ? known.message : ISSUE_COPY[known.code];
   const blocked = diagnostics.find((entry) => /compatibility|unsupported|unreviewed|no-row/.test(entry.code));
   if (blocked !== void 0)
     return "The required automatic capability or safety precondition is not available in the current runtime. Your current settings are preserved.";
@@ -35853,7 +35992,7 @@ var init_guided = __esm({
       "codex-native-policy-shadowed": "A project or profile overrides this Codex setting. That setting belongs to you and will not be replaced.",
       "no-providers-registered": "No optimization provider was selected for this operation.",
       "prompt-routing-target-unavailable": "Token Harness could not locate a supported user-level prompt-hook settings file for this agent.",
-      "prompt-routing-version-unverified": "Automatic routing is not available for this agent version until its prompt-hook format has been verified.",
+      "prompt-routing-version-unverified": "Update Token Harness in Health and updates, then retry routing. This agent version is not supported by this copy.",
       "prompt-routing-runtime-unavailable": "The Token Harness hook command could not run from this dashboard environment. Make Token Harness available on PATH, then review routing again.",
       "prompt-routing-target-not-file": "A non-file occupies the agent hook settings path, so Token Harness left it unchanged.",
       "prompt-routing-settings-unmergeable": "The current hook settings cannot be merged safely. Repair the JSON or review the hook manually.",
@@ -35947,6 +36086,8 @@ var init_guided = __esm({
       loading = null;
       readSequence = 0;
       busy = false;
+      restartVersion = null;
+      restartApplication;
       lastApplied = null;
       reading = null;
       cached = null;
@@ -35959,12 +36100,13 @@ var init_guided = __esm({
       random;
       observeGuidance;
       observeRouting;
-      constructor(call, now, random, observeGuidance = null, observeRouting = null) {
+      constructor(call, now, random, observeGuidance = null, observeRouting = null, restartApplication = null) {
         this.call = call;
         this.now = now;
         this.random = random;
         this.observeGuidance = observeGuidance;
         this.observeRouting = observeRouting;
+        this.restartApplication = restartApplication;
       }
       status() {
         return {
@@ -36604,21 +36746,40 @@ var init_guided = __esm({
             }
             this.lastApplied = null;
             this.invalidateObservedState();
+            this.record("Re-checking health after the update.", "working");
+            let health;
+            try {
+              health = await this.verifyIntegrations();
+            } catch {
+              health = {
+                ok: false,
+                title: "Health check needs attention",
+                messages: ["Update installed; automatic health check could not finish."],
+                appliedPlans: 0
+              };
+            }
+            if (applicationTarget !== void 0)
+              this.restartVersion = applicationTarget.version;
             const versions = approvedUpdates.map((target) => `${guideUpdateTargetName(target)} ${target.version}`).join(", ");
             const messages2 = [
               appliedCount > 0 ? `Installed and verified the approved update${approvedUpdates.length === 1 ? "" : "s"}: ${versions}.` : `The approved update${approvedUpdates.length === 1 ? " was" : "s were"} already at the target version: ${versions}.`,
-              ...applicationTarget === void 0 ? [] : ["Token Harness is updated on disk. Restart this app to load the new version."],
+              ...applicationTarget === void 0 ? [] : [
+                "Token Harness is updated. Choose Restart and re-check to load it and discover new capabilities."
+              ],
               ...providerTargets.length === 0 ? [] : [
                 "The active optimizer runtimes were re-read after the operation and match the approved targets.",
                 "Reopen a coding agent if an updated optimizer requires it."
               ]
             ];
+            messages2.push(health.ok ? "Health re-check completed automatically." : "Update installed; health needs attention.", ...health.messages);
             this.record(appliedCount > 0 ? "Approved updates installed and verified." : "Approved updates are already at their target versions.", "success");
             return {
               ok: true,
               title: applicationTarget !== void 0 ? "Token Harness updated" : appliedCount > 0 ? "Optimizers updated" : "Approved versions already active",
               messages: messages2,
-              appliedPlans: appliedCount
+              appliedPlans: appliedCount,
+              ...health.stack === void 0 ? {} : { stack: health.stack },
+              restartRequired: applicationTarget !== void 0
             };
           }
           if (approval.operation === "candidate-apply" || approval.operation === "candidate-uninstall") {
@@ -36774,6 +36935,34 @@ var init_guided = __esm({
           };
         });
       }
+      async routing() {
+        if (this.observeRouting === null)
+          return { agents: [] };
+        const agents = await Promise.all(["claude", "codex"].map(async (id) => ({
+          id,
+          promptRouting: await this.observeRouting(id)
+        })));
+        if (this.cached !== null) {
+          for (const agent of this.cached.value.agents) {
+            const live = agents.find((item) => item.id === agent.id);
+            if (live !== void 0)
+              agent.promptRouting = live.promptRouting;
+          }
+        }
+        return { agents };
+      }
+      async restart() {
+        return this.exclusive(async () => {
+          if (this.restartVersion === null || this.restartApplication === null)
+            throw new GuideError(409, "Restart is available after a verified Token Harness update.");
+          const installed2 = await this.call(["update"]);
+          if (!sameGuideVersion(installed2.data?.application?.installed ?? null, this.restartVersion))
+            throw new GuideError(409, "The installation changed. Check updates again before restarting.");
+          const url = await this.restartApplication();
+          this.restartVersion = null;
+          return { url };
+        });
+      }
       async checkUpdates() {
         return this.exclusive(async () => {
           this.approval = null;
@@ -36892,89 +37081,90 @@ var init_guided = __esm({
         });
       }
       async verify() {
-        return this.exclusive(async () => {
-          this.record("Checking the configured integrations without changing them.", "working");
-          const messages = [];
-          const results = [];
-          let ok = true;
-          let healthyAtDeclaredTier = true;
-          const inventory = await this.call(["doctor"]);
-          const present = (inventory.data?.harnesses ?? []).filter((item) => item.state !== "absent" && ["claude", "codex"].includes(item.harnessId));
-          if (inventory.data === null) {
+        return this.exclusive(() => this.verifyIntegrations());
+      }
+      async verifyIntegrations() {
+        this.record("Checking the configured integrations without changing them.", "working");
+        const messages = [];
+        const results = [];
+        let ok = true;
+        let healthyAtDeclaredTier = true;
+        const inventory = await this.call(["doctor"]);
+        const present = (inventory.data?.harnesses ?? []).filter((item) => item.state !== "absent" && ["claude", "codex"].includes(item.harnessId));
+        if (inventory.data === null) {
+          ok = false;
+          healthyAtDeclaredTier = false;
+          messages.push("The installed-agent inventory could not be read. Refresh and check the local installation.");
+        }
+        if (present.length === 0) {
+          ok = false;
+          healthyAtDeclaredTier = false;
+          messages.push("No supported installed agent was detected, so no integration was checked.");
+        }
+        for (const agent of present) {
+          const harness = agent.harnessId;
+          this.record(`Checking ${name(harness)} configuration and available execution evidence. No settings changed.`, "working");
+          const result6 = await this.call(["verify", "--harness", harness]);
+          const healthy = result6.data?.healthyAtDeclaredTier === true;
+          const versionWarnings = result6.diagnostics.filter((entry) => entry.severity === "warning" && (entry.code === "harness-version-unknown-newer" || entry.code === "provider-version-unknown-newer"));
+          const failed = result6.data === null || result6.exitCode !== 0 || result6.diagnostics.some((entry) => entry.severity === "error" || entry.severity === "warning" && !versionWarnings.includes(entry)) || result6.data.results.some((entry) => entry.status === "degraded" || entry.status === "failed");
+          if (failed)
             ok = false;
+          if (!healthy)
             healthyAtDeclaredTier = false;
-            messages.push("The installed-agent inventory could not be read. Refresh and check the local installation.");
+          if (result6.data !== null)
+            results.push(...result6.data.results);
+          const prefix = `${name(harness)}: `;
+          if (result6.data === null) {
+            messages.push(prefix + "the verification report could not be read. Refresh and check the local installation.");
+          } else if (healthy) {
+            messages.push(prefix + "the available integration checks passed. This is not proof that every command was reduced.");
+          } else if (failed) {
+            messages.push(prefix + "a known integration check failed. Review the specific check before changing setup.");
+          } else if (result6.data.results.length === 0) {
+            messages.push(prefix + "the agent is detected, but no managed optimizer connection is present to verify. Review setup only if you want to connect one.");
+          } else {
+            const pendingProviders = [
+              ...new Set(result6.data.results.filter((entry) => entry.status === "not-applicable").map((entry) => name(entry.providerId)))
+            ];
+            const subject = pendingProviders.length > 0 ? pendingProviders.join(" and ") : "Some integrations";
+            messages.push(`${prefix}${subject} have not produced enough attributable runtime evidence for ${name(harness)} yet. This is an evidence gap, not a finding that the setup is broken. If you do not use this agent on this machine, no action is required.`);
           }
-          if (present.length === 0) {
-            ok = false;
-            healthyAtDeclaredTier = false;
-            messages.push("No supported installed agent was detected, so no integration was checked.");
+          if (versionWarnings.length > 0) {
+            messages.push(prefix + "the installed version is newer than Token Harness\u2019s recorded compatibility sample; read-only checks can continue, but review the version before changing its integration.");
           }
-          for (const agent of present) {
-            const harness = agent.harnessId;
-            this.record(`Checking ${name(harness)} configuration and available execution evidence. No settings changed.`, "working");
-            const result6 = await this.call(["verify", "--harness", harness]);
-            const healthy = result6.data?.healthyAtDeclaredTier === true;
-            const versionWarnings = result6.diagnostics.filter((entry) => entry.severity === "warning" && (entry.code === "harness-version-unknown-newer" || entry.code === "provider-version-unknown-newer"));
-            const failed = result6.data === null || result6.exitCode !== 0 || result6.diagnostics.some((entry) => entry.severity === "error" || entry.severity === "warning" && !versionWarnings.includes(entry)) || result6.data.results.some((entry) => entry.status === "degraded" || entry.status === "failed");
-            if (failed)
-              ok = false;
-            if (!healthy)
-              healthyAtDeclaredTier = false;
-            if (result6.data !== null)
-              results.push(...result6.data.results);
-            const prefix = `${name(harness)}: `;
-            if (result6.data === null) {
-              messages.push(prefix + "the verification report could not be read. Refresh and check the local installation.");
-            } else if (healthy) {
-              messages.push(prefix + "the available integration checks passed. This is not proof that every command was reduced.");
-            } else if (failed) {
-              messages.push(prefix + "a known integration check failed. Review the specific check before changing setup.");
-            } else if (result6.data.results.length === 0) {
-              messages.push(prefix + "the agent is detected, but no managed optimizer connection is present to verify. Review setup only if you want to connect one.");
-            } else {
-              const pendingProviders = [
-                ...new Set(result6.data.results.filter((entry) => entry.status === "not-applicable").map((entry) => name(entry.providerId)))
-              ];
-              const subject = pendingProviders.length > 0 ? pendingProviders.join(" and ") : "Some integrations";
-              messages.push(`${prefix}${subject} have not produced enough attributable runtime evidence for ${name(harness)} yet. This is an evidence gap, not a finding that the setup is broken. If you do not use this agent on this machine, no action is required.`);
-            }
-            if (versionWarnings.length > 0) {
-              messages.push(prefix + "the installed version is newer than Token Harness\u2019s recorded compatibility sample; read-only checks can continue, but review the version before changing its integration.");
+        }
+        if (inventory.data !== null) {
+          const fingerprint = stackFingerprint(inventory.data);
+          this.verification = {
+            fingerprint,
+            report: {
+              receiptId: null,
+              appliedAt: null,
+              results,
+              healthyAtDeclaredTier: healthyAtDeclaredTier && present.length > 0
             }
-          }
-          if (inventory.data !== null) {
-            const fingerprint = stackFingerprint(inventory.data);
-            this.verification = {
-              fingerprint,
-              report: {
-                receiptId: null,
-                appliedAt: null,
-                results,
-                healthyAtDeclaredTier: healthyAtDeclaredTier && present.length > 0
-              }
-            };
-            this.stackBase = {
-              detections: [...inventory.data.providers],
-              metrics: this.stackBase?.metrics ?? null,
-              drift: this.stackBase?.drift ?? [],
-              fingerprint
-            };
-          } else {
-            this.verification = null;
-          }
-          const stack = this.stackSnapshot();
-          if (this.cached !== null)
-            this.cached.value = { ...this.cached.value, stack };
-          this.record("Integration checks completed. No settings changed.", ok ? "success" : "attention");
-          return {
-            ok,
-            title: ok ? healthyAtDeclaredTier ? "Integration checks passed" : "Configuration checks complete; runtime evidence pending" : "Integration checks need attention",
-            messages,
-            appliedPlans: 0,
-            stack
           };
-        });
+          this.stackBase = {
+            detections: [...inventory.data.providers],
+            metrics: this.stackBase?.metrics ?? null,
+            drift: this.stackBase?.drift ?? [],
+            fingerprint
+          };
+        } else {
+          this.verification = null;
+        }
+        const stack = this.stackSnapshot();
+        if (this.cached !== null)
+          this.cached.value = { ...this.cached.value, stack };
+        this.record("Integration checks completed. No settings changed.", ok ? "success" : "attention");
+        return {
+          ok,
+          title: ok ? healthyAtDeclaredTier ? "Integration checks passed" : "Configuration checks complete; runtime evidence pending" : "Integration checks need attention",
+          messages,
+          appliedPlans: 0,
+          stack
+        };
       }
     };
   }
@@ -38565,7 +38755,6 @@ var init_guided_capabilities_client = __esm({
     return element;
   };
   const originalFetch = window.fetch.bind(window);
-  const managedProviders = new Set(['rtk', 'harnesstrim']);
   const HELP = {
     'claude-effort': ['Change reasoning in Claude', 'Inside Claude Code, use /effort. Token Harness keeps difficult work above its quality floor.', '/effort'],
     'codex-effort': ['Change reasoning in Codex', 'Inside Codex, use /model to review model and reasoning settings.', '/model'],
@@ -38848,44 +39037,16 @@ var init_guided_capabilities_client = __esm({
     if (!root.children.length) root.append(node('p', 'Agent details appear after a supported coding agent is detected.', 'empty'));
   }
 
-  function renderRemovalControls(data) {
-    const root = $('managed-removal-actions');
-    if (!root) return;
-    root.replaceChildren();
-    const removable = (data.stack?.components || []).filter(component =>
-      managedProviders.has(component.providerId) && (component.managedByTokenHarness || component.configured),
-    );
-    if (!removable.length) {
-      root.append(node('p', 'No managed configuration is currently eligible for removal.', 'caption'));
-      return;
-    }
-    for (const component of removable) {
-      const row = node('div', undefined, 'maintenance-row');
-      const text = node('div');
-      const name = component.displayName || (component.providerId === 'rtk' ? 'RTK' : 'HarnessTrim');
-      text.append(
-        node('strong', name),
-        node('p', component.managedByTokenHarness
-          ? 'Review removal of Token Harness-owned integration changes.'
-          : 'Check whether Token Harness owns any removable changes. The provider installation remains user-owned.', 'caption'),
-      );
-      row.append(
-        text,
-        actionButton('Review removal', () => preview(
-          { action: 'remove', provider: component.providerId },
-          'Review removal for ' + name,
-          'Remove managed integration',
-          'Integration removed',
-        ), 'secondary'),
-      );
-      root.append(row);
-    }
-  }
+  window.tokenHarnessReviewRemoval = (provider, name) => preview(
+    { action: 'remove', provider },
+    'Review removal for ' + name,
+    'Remove managed setup',
+    'Managed setup removed',
+  );
 
   function consumeOverview(data) {
     if (!data || !Array.isArray(data.agents)) return;
     renderAgentCapabilities(data);
-    renderRemovalControls(data);
   }
 
   window.fetch = async (...args) => {
@@ -38965,7 +39126,7 @@ var init_guided_product_client = __esm({
   const date = value => value ? new Date(value).toLocaleString() : 'not recorded';
   const VIEWS = {
     dashboard: ['Overview', 'Your coding agents, optimization stack, health and measured results in one place.'],
-    results: ['Results', 'A dashboard of optimizer results, coding-app links, quality information, and recent activity.'],
+    results: ['Results', 'Measured evidence by optimizer, routing and coding app.'],
   };
   const TOOL_INFO = {
     rtk: {
@@ -39014,6 +39175,8 @@ var init_guided_product_client = __esm({
   let selectedView = 'dashboard';
   let modalRun = 0;
   let pendingTicket = null;
+  let updateCheckStarted = false;
+  let latestUpdateCheck = null;
   const periodCache = new Map();
 
   async function request(path, body) {
@@ -39046,7 +39209,7 @@ var init_guided_product_client = __esm({
 
   function setBusy(value, applying = false) {
     busy = value;
-    document.querySelectorAll('[data-action],#refresh,#period').forEach(element => {
+    document.querySelectorAll('[data-action],#refresh,#period,#evidence-filter,#evidence-type,#evidence-sort').forEach(element => {
       element.disabled = value;
     });
     $('live-status').textContent = value
@@ -39182,7 +39345,7 @@ var init_guided_product_client = __esm({
 
   function optimizerIds() {
     const ids = (current?.stack?.components || []).map(component => component.providerId).filter(Boolean);
-    return ids.length ? [...new Set(ids)] : Object.keys(TOOL_INFO);
+    return [...new Set([...Object.keys(TOOL_INFO), ...ids])];
   }
 
   function configuredProviders() {
@@ -39310,6 +39473,16 @@ var init_guided_product_client = __esm({
         detail: 'A paired benchmark favored the baseline. Token Harness is not crediting the affected savings.',
         action: 'results',
       };
+    const routingAttention = agents.filter(agent => agent.promptRouting?.needsRepair ||
+      (agent.promptRouting?.configured === true && ['untrusted', 'disabled', 'unknown'].includes(agent.promptRouting.enablement)));
+    if (routingAttention.length)
+      return {
+        label: 'Routing action required',
+        cls: 'warn',
+        title: 'Automatic routing needs attention',
+        detail: routingAttention.map(agent => agent.name + ': ' + agent.promptRouting.detail).join(' '),
+        action: 'routing',
+      };
     if (stack?.state === 'attention')
       return {
         label: 'Needs attention',
@@ -39369,6 +39542,8 @@ var init_guided_product_client = __esm({
     const actions = node('div', undefined, 'inline-actions');
     if (assessment.action === 'verify') {
       actions.append(actionButton('Re-check health', () => readOnlyOperation('verify')));
+    } else if (assessment.action === 'routing') {
+      actions.append(actionButton('Review routing', () => $('coding-agents').scrollIntoView({ block: 'start', behavior: 'smooth' })));
     } else if (assessment.action === 'results') {
       actions.append(navigateButton('View detailed results', 'results'));
     }
@@ -39476,27 +39651,40 @@ var init_guided_product_client = __esm({
         ),
       );
       const routing = agent.promptRouting;
+      const routingConfigured = routing?.configured === true || routing?.enablement === 'enabled' || routing?.enablement === 'untrusted' || (!routing?.enablement && routing?.state === 'managed');
+      const routingObserved = routing?.verificationTier === 'runtime-observed';
+      const routingLabel = routingObserved ? 'Active · callback seen' : routing?.needsRepair ? 'Repair required' : routing?.enablement === 'untrusted' ? 'Trust required' : routing?.enablement === 'disabled' ? 'Hooks disabled' : routing?.configured !== false && routing?.enablement === 'unknown' ? 'Authorization unknown' : routingConfigured ? 'Enabled · awaiting callback' : routing?.state === 'external' ? 'Managed elsewhere' : 'Not enabled';
       const routingCard = node('div', undefined, 'routing-feature');
       const routingHead = node('div', undefined, 'tool-head');
       routingHead.append(
         node('strong', 'Automatic prompt routing'),
-        pill(routing?.label || 'Not verified', routing?.state === 'managed' ? 'good' : routing?.state === 'absent' ? '' : 'warn'),
+        pill(routingLabel, routingObserved ? 'good' : routingConfigured || routing?.needsRepair ? 'warn' : ''),
       );
       routingCard.append(
         routingHead,
         node(
           'p',
-          routing?.detail || 'A native hook can inject the routing policy on every submitted prompt. Setup and runtime activity are tracked separately.',
+          routing?.detail || (routing?.enablement === 'untrusted'
+              ? 'Open /hooks in Codex and trust this hook. Then submit a prompt to verify the callback.'
+            : routing?.needsRepair
+              ? routing.detail || 'Review and repair the Token Harness routing hook.'
+              : routing?.enablement === 'unknown'
+                ? routing.detail || 'Token Harness could not determine whether this hook is authorized.'
+                : routingConfigured
+                  ? routingObserved ? 'Automatic routing is running on submitted prompts.' : 'Configured; submit a prompt and Token Harness will show the callback when it arrives.'
+                  : 'Enable once. The native hook then checks every submitted prompt automatically.'),
           'caption',
         ),
       );
       const routingActions = node('div', undefined, 'inline-actions');
-      if (routing?.state === 'absent') {
-        routingActions.append(actionButton('Enable routing', () => reviewPromptRouting(agent.id, true), 'secondary'));
-      } else if (routing?.state === 'managed') {
-        routingActions.append(actionButton('Disable routing', () => reviewPromptRouting(agent.id, false), 'secondary'));
+      if (routing?.needsRepair) {
+        routingActions.append(actionButton('Repair routing', () => reviewPromptRouting(agent.id, true), 'secondary'));
       } else if (routing?.state === 'external') {
         routingActions.append(node('span', 'Managed elsewhere · left untouched', 'caption'));
+      } else if (!routingConfigured) {
+        routingActions.append(actionButton('Enable routing', () => reviewPromptRouting(agent.id, true), 'secondary'));
+      } else if (routingConfigured) {
+        routingActions.append(actionButton('Disable routing', () => reviewPromptRouting(agent.id, false), 'secondary'));
       }
       if (routingActions.children.length) routingCard.append(routingActions);
       card.append(routingCard);
@@ -39622,13 +39810,17 @@ var init_guided_product_client = __esm({
         if (!(data.changes || []).length)
           $('modal-content').append(messageBox('No change proposed', (data.notices || []).join(' ') || 'The current routing state or ownership evidence does not support a safe change.'));
         for (const notice of data.notices || []) $('modal-content').append(node('p', notice, 'notice-row'));
-        if (data.ticket) $('modal-content').append(messageBox(
-          agentId === 'codex' ? 'Codex trust step' : 'When it takes effect',
-          agentId === 'codex'
-            ? 'After Apply, review and trust the UserPromptSubmit hook in Codex using /hooks. Until a callback is observed, the dashboard will show it as configured but not runtime verified.'
-            : 'After Apply, start a new Claude Code session. The dashboard will show configured state first and runtime activity after the next prompt callback.',
-          'safe',
-        ));
+        if (data.ticket) {
+          const observed = activeAgents().find(agent => agent.id === agentId)?.promptRouting;
+          const needsTrust = agentId === 'codex' && observed?.enablement === 'untrusted';
+          $('modal-content').append(messageBox(
+            needsTrust ? 'Trust required' : 'When it takes effect',
+            needsTrust
+              ? 'Open /hooks in Codex and trust this hook. Then send a prompt.'
+              : 'Send a prompt in a new session. Token Harness will show the callback when it arrives.',
+            'safe',
+          ));
+        }
         $('modal-actions').replaceChildren(modalClose(data.ticket ? 'Cancel' : 'Done'));
         if (data.ticket) $('modal-actions').append(actionButton(enabled ? 'Apply routing hook' : 'Remove owned routing hook', () => applyTicket(data.ticket)));
       })
@@ -39724,6 +39916,12 @@ var init_guided_product_client = __esm({
       await ensureSession();
       const result = await request('/api/apply', { ticket });
       if (run !== modalRun) return;
+      if (result.restartRequired) {
+        $('modal-title').textContent = result.title || 'Token Harness update installed';
+        $('modal-content').replaceChildren(messageBox('Restart to finish', (result.messages || []).join(' ') || 'Token Harness must restart before it can check the updated installation.', 'safe'));
+        $('modal-actions').replaceChildren(modalClose('Later'), actionButton('Restart and re-check', restartAndRecheck));
+        return;
+      }
       $('modal-title').textContent = result.title || (result.ok ? 'Setup completed' : 'Setup needs attention');
       $('modal-content').replaceChildren(
         messageBox(result.ok ? 'Applied' : 'Needs attention', (result.messages || []).join(' '), result.ok ? 'safe' : 'warn'),
@@ -39768,6 +39966,24 @@ var init_guided_product_client = __esm({
     }
   }
 
+  async function restartAndRecheck() {
+    if (busy) return;
+    setBusy(true, true);
+    $('modal-content').replaceChildren(progress('Restarting Token Harness', 'The updated app will run its health check when it opens again.'));
+    $('modal-actions').replaceChildren(modalClose('Restarting…', true));
+    try {
+      await ensureSession();
+      const result = await request('/api/restart', {});
+      if (!result.ok) throw new Error((result.messages || []).join(' ') || 'Restart did not complete.');
+      setTimeout(() => window.location.reload(), 700);
+    } catch (error) {
+      $('modal-error').textContent = error.message;
+      $('modal-error').hidden = false;
+      $('modal-actions').replaceChildren(modalClose('Close'));
+      setBusy(false, false);
+    }
+  }
+
   function connectionPresentation(target) {
     if (!target) return { label: 'Not targeted', cls: '' };
     if (target.state === 'connected') return { label: 'Setup detected', cls: 'good' };
@@ -39776,6 +39992,26 @@ var init_guided_product_client = __esm({
     return { label: 'Not applicable', cls: '' };
   }
 
+  function mcptoonInstallOptions() {
+    modal('Install mcptoon prerequisites');
+    $('modal-content').append(
+      node('p', 'Token Harness can install mcptoon after pipx or uv is available. Install one, then Refresh and choose Install & connect.'),
+    );
+    const links = node('div', undefined, 'inline-actions');
+    for (const [label, href] of [
+      ['pipx installation', 'https://pipx.pypa.io/stable/installation/'],
+      ['uv installation', 'https://docs.astral.sh/uv/getting-started/installation/'],
+    ]) {
+      const link = node('a', label, 'button secondary');
+      link.href = href;
+      link.target = '_blank';
+      link.rel = 'noreferrer noopener';
+      links.append(link);
+    }
+    $('modal-content').append(links);
+    $('modal-actions').append(modalClose('Done'));
+  }
+
   function renderConnectionOverview() {
     const root = $('connection-overview');
     if (!root) return;
@@ -39839,8 +40075,18 @@ var init_guided_product_client = __esm({
             () => reviewSetup(id),
             'secondary',
           ),
-        );
-      else action.append(node('span', 'No action', 'caption'));
+          );
+      const mcptoonUnavailable = id === 'mcptoon' && agents.some(agent => setupTarget(agent.id, id)?.state === 'unavailable');
+      if (mcptoonUnavailable)
+        action.append(actionButton('Installation options', mcptoonInstallOptions, 'secondary'));
+      if (component?.managedByTokenHarness || component?.configured) {
+        const remove = actionButton('Remove managed setup', () => {
+          window.tokenHarnessReviewRemoval?.(id, info.name);
+        }, 'secondary');
+        remove.disabled = busy || typeof window.tokenHarnessReviewRemoval !== 'function';
+        action.append(remove);
+      }
+      if (!action.children.length) action.append(node('span', 'No action', 'caption'));
       row.append(action);
       table.append(row);
     }
@@ -39963,7 +40209,7 @@ var init_guided_product_client = __esm({
       messageBox('Optional candidate lifecycle', 'This is an explicit evaluation setup, not production-stack setup. Token Harness does not silently install or activate candidates.'),
     );
     if (candidate.id === 'mcptoon')
-      $('modal-content').append(messageBox('Prerequisites stay yours', 'An approved setup may install the exact reviewed mcptoon build only through an already-installed pipx. Token Harness does not install Python, pipx or administrator prerequisites.'));
+      $('modal-content').append(messageBox('Prerequisites stay yours', 'An approved setup may install the exact reviewed mcptoon build through an already-installed pipx or uv. Token Harness does not install Python, pipx, uv or administrator prerequisites.'));
     if (candidate.id === 'gitnexus')
       $('modal-content').append(messageBox('Index stays yours', 'GitNexus must already be installed on the exact reviewed row. Token Harness can register only the reviewed Claude MCP entry; it never creates or refreshes the repository index.'));
     const agents = activeAgents().filter(agent => supported.includes(agent.id));
@@ -40243,44 +40489,139 @@ var init_guided_product_client = __esm({
     renderMaintenance();
   }
 
-  function renderSavings() {
-    const root = $('result-savings');
-    root.replaceChildren();
-    const rows = current?.savings?.rows || [];
-    if (!rows.length) {
-      root.append(sectionEmpty('No measured optimizer output has been recorded for this period. Missing data is not zero savings.'));
-      return;
+  function addEvidenceRow(body, type, name, scope, summary, amount, details) {
+    const row = node('tr');
+    row.dataset.type = type;
+    row.dataset.name = name.toLocaleLowerCase();
+    row.dataset.search = [type, name, scope, summary].join(' ').toLocaleLowerCase();
+    row.dataset.amount = String(amount || 0);
+    const systemCell = node('th');
+    systemCell.scope = 'row';
+    systemCell.append(node('strong', name), node('span', type[0].toUpperCase() + type.slice(1), 'caption'));
+    row.append(systemCell, node('td', scope), node('td', summary));
+    const detailCell = node('td');
+    const disclosure = node('details');
+    disclosure.append(node('summary', 'Details'));
+    for (const detail of details) disclosure.append(node('p', detail, 'caption'));
+    detailCell.append(disclosure);
+    row.append(detailCell);
+    body.append(row);
+    return row;
+  }
+
+  function optimizerEvidenceDetail(row) {
+    const unit = row.unit ? ' ' + row.unit : '';
+    const change = row.before !== null && row.before !== undefined && row.after !== null && row.after !== undefined
+      ? count(row.before) + ' → ' + count(row.after) + unit
+      : count(row.saved) + unit;
+    return [
+      row.impact?.detail || 'Recorded optimizer evidence.',
+      'Recorded change: ' + change,
+      count(row.operations) + ' operation(s)' + (row.agents?.length ? ' · ' + row.agents.join(', ') : ' · no harness attribution'),
+    ];
+  }
+
+  function routingDetails(agent) {
+    const routing = agent.promptRouting || {};
+    const lines = [];
+    const tier = routing.verificationTier;
+    if (routing.enablement === 'untrusted') lines.push('Action required: open /hooks in Codex and trust this hook, then submit a prompt.');
+    else if (tier === 'runtime-observed') lines.push('Runtime callback observed. Automatic routing runs on submitted prompts.');
+    else if (routing.configured !== false && routing.enablement === 'unknown') lines.push('Authorization is unknown; check the hook status in the coding app.');
+    else if (routing.enablement === 'disabled') lines.push('Hooks are disabled for this coding app.');
+    else if (routing.enablement === 'enabled' || (!routing.enablement && routing.state === 'managed')) lines.push('Configured; waiting for the first runtime callback after a prompt.');
+    else if (routing.state === 'external') lines.push('Routing is managed elsewhere; Token Harness leaves it unchanged.');
+    else lines.push('Automatic routing is not enabled for this coding app.');
+    if (Number.isFinite(routing.promptSubmissions)) lines.push('Prompt callbacks: ' + count(routing.promptSubmissions));
+    if (Number.isFinite(routing.subagentsStarted)) lines.push('Subagents started: ' + count(routing.subagentsStarted));
+    if (Number.isFinite(routing.subagentsStopped)) lines.push('Subagents stopped: ' + count(routing.subagentsStopped));
+    if (routing.reportedModels?.length) lines.push('Reported models: ' + routing.reportedModels.join(', '));
+    if (routing.lastObservedAt) lines.push('Last callback: ' + date(routing.lastObservedAt));
+    return lines;
+  }
+
+  function renderEvidence() {
+    const body = $('result-evidence');
+    body.replaceChildren();
+    const savings = current?.savings?.rows || [];
+    for (const id of optimizerIds()) {
+      const info = optimizerInfo(id);
+      const component = managedComponent(id);
+      const measured = savings.filter(row => row.providerId === id);
+      const scope = component?.configuredHarnesses?.length
+        ? component.configuredHarnesses.map(agentName).join(', ')
+        : 'No setup detected';
+      const summary = measured.length
+        ? measured.map(row => row.measurement + ' · ' + count(row.saved) + (row.unit ? ' ' + row.unit : '')).join(' · ')
+        : 'No measured evidence';
+      const details = measured.length
+        ? measured.flatMap(optimizerEvidenceDetail)
+        : [component?.configured ? 'Setup is detected, but no result was recorded for this period.' : 'No result was recorded for this optimizer in this period.'];
+      addEvidenceRow(body, 'optimizer', info.name, scope, summary, measured.length, details);
+    }
+
+    const routing = current?.value?.routing;
+    const routingAgents = activeAgents();
+    const routingDetailsList = routingAgents.flatMap(agent => [agent.name + ':', ...routingDetails(agent)]);
+    if (routing?.state === 'measured' || routing?.pairs > 0) {
+      routingDetailsList.push((routing.pairs ? count(routing.pairs) + ' quality-passed routed pair(s).' : ''));
+      if (routing.savedLocalTokens !== null && routing.savedLocalTokens !== undefined)
+        routingDetailsList.push(routing.savedLocalTokens >= 0
+          ? count(routing.savedLocalTokens) + ' local tokens saved · end-to-end local usage'
+          : count(Math.abs(routing.savedLocalTokens)) + ' local tokens added · end-to-end local usage');
+      if (routing.allowance5h?.savedPercent !== null && routing.allowance5h?.savedPercent !== undefined)
+        routingDetailsList.push('5h allowance change: ' + count(routing.allowance5h.savedPercent) + '%');
+      if (routing.allowance7d?.savedPercent !== null && routing.allowance7d?.savedPercent !== undefined)
+        routingDetailsList.push('7d allowance change: ' + count(routing.allowance7d.savedPercent) + '%');
+    }
+    const routingSummary = routing?.state === 'blocked-by-quality'
+      ? 'Not credited · quality gate'
+      : routing?.savedLocalTokens !== null && routing?.savedLocalTokens !== undefined
+        ? count(routing.savedLocalTokens) + ' local tokens · end-to-end paired evidence'
+        : routing?.state === 'measured' ? 'Allowance evidence measured' : 'Not measured yet';
+    addEvidenceRow(body, 'routing', 'Automatic prompt routing', routingAgents.map(agent => agent.name).join(', ') || 'No coding app detected', routingSummary, routing?.pairs || 0, routingDetailsList.length ? routingDetailsList : ['No routing measurement has been recorded.']);
+
+    for (const agent of routingAgents) {
+      const linked = savings.filter(row => row.harnesses?.includes(agent.id));
+      const configured = configuredProviders().filter(component => component.configuredHarnesses?.includes(agent.id)).map(component => optimizerInfo(component.providerId).name);
+      const details = [
+        'Detected optimizer setup: ' + (configured.join(', ') || 'none'),
+        ...routingDetails(agent),
+        ...(linked.length ? linked.flatMap(optimizerEvidenceDetail) : ['No optimizer measurement is directly linked to this coding app.']),
+      ];
+      addEvidenceRow(body, 'harness', agent.name, agent.version ? 'v' + agent.version : 'Version unavailable', linked.length ? linked.map(row => row.provider + ': ' + row.measurement + ' · ' + count(row.saved) + (row.unit ? ' ' + row.unit : '')).join(' · ') : 'No linked measured evidence', linked.length, details);
     }
+
+    for (const item of current?.value?.candidates || []) {
+      if (!(item.pairs > 0)) continue;
+      const candidate = (current?.optimizationCandidates || []).find(entry => entry.id === item.candidateId);
+      const name = candidate?.name || item.candidateId;
+      addEvidenceRow(body, 'candidate', name, 'Experimental', count(item.pairs) + ' paired result(s)', item.pairs, [
+        count(item.optimizedBetter || 0) + ' optimized better · ' + count(item.baselineBetter || 0) + ' baseline better.',
+        'Evaluation evidence only; this does not automatically promote or activate the candidate.',
+      ]);
+    }
+    applyEvidenceFilters();
+  }
+
+  function applyEvidenceFilters() {
+    const body = $('result-evidence');
+    if (!body) return;
+    const filter = $('evidence-filter').value.trim().toLocaleLowerCase();
+    const type = $('evidence-type').value;
+    const sort = $('evidence-sort').value;
+    const rows = [...body.querySelectorAll('tr')];
+    rows.sort((a, b) => sort === 'evidence'
+      ? Number(b.dataset.amount) - Number(a.dataset.amount) || a.dataset.name.localeCompare(b.dataset.name)
+      : sort === 'type'
+        ? a.dataset.type.localeCompare(b.dataset.type) || a.dataset.name.localeCompare(b.dataset.name)
+        : a.dataset.name.localeCompare(b.dataset.name));
     for (const row of rows) {
-      const card = node('article', undefined, 'evidence-row');
-      const head = node('div', undefined, 'evidence-head');
-      head.append(node('h3', row.provider), pill(row.measurement));
-      card.append(head, node('strong', row.impact?.headline || count(row.saved) + ' ' + row.unit, 'evidence-value'), node('p', row.impact?.detail || 'Recorded optimization output.'));
-      const facts = node('dl', undefined, 'evidence-facts');
-      const values = [
-        ['Recorded change', row.before !== null && row.after !== null ? count(row.before) + ' → ' + count(row.after) + ' ' + row.unit : count(Math.abs(row.saved)) + ' ' + row.unit],
-        ['Operations', count(row.operations)],
-        ['Coding agent', row.agents?.length ? row.agents.join(', ') : 'Not linked to an agent'],
-      ];
-      for (const [label, value] of values) {
-        const wrap = node('div');
-        wrap.append(node('dt', label), node('dd', value));
-        facts.append(wrap);
-      }
-      card.append(facts);
-      if (!row.agents?.length) {
-        card.append(
-          node(
-            'p',
-            row.providerId === 'rtk'
-              ? 'RTK records these reductions but does not record whether Codex or Claude ran each command. The result is real, but Token Harness cannot assign it to either agent.'
-              : 'The source did not include a coding-agent identity, so Token Harness keeps this result unassigned.',
-            'caption',
-          ),
-        );
-      }
-      root.append(card);
+      const shown = (type === 'all' || row.dataset.type === type) && (!filter || row.dataset.search.includes(filter));
+      row.hidden = !shown;
+      body.append(row);
     }
+    $('evidence-empty').hidden = rows.some(row => !row.hidden);
   }
 
   function measurementHelp() {
@@ -40295,173 +40636,23 @@ var init_guided_product_client = __esm({
     $('modal-actions').append(modalClose('Done'));
   }
 
-  function renderCandidateResults() {
-    const root = $('candidate-results');
-    root.replaceChildren();
-    const evidence = current?.value?.candidates || [];
-    if (!evidence.some(item => item.pairs > 0)) {
-      root.append(sectionEmpty('No experimental candidate has completed paired evidence yet. Experimental tools are optional and do not affect managed setup.'));
-      return;
-    }
-    for (const item of evidence.filter(entry => entry.pairs > 0)) {
-      const candidate = EXPERIMENTAL.find(entry => entry.id === item.candidateId);
-      if (!candidate) continue;
-      const card = node('article', undefined, 'evidence-row');
-      card.append(node('h3', candidate.name), node('strong', count(item.pairs) + ' paired result(s)', 'evidence-value'));
-      card.append(node('p', count(item.optimizedBetter || 0) + ' optimized better · ' + count(item.baselineBetter || 0) + ' baseline better. This is evaluation evidence, not automatic promotion.'));
-      root.append(card);
-    }
-  }
-
-  function renderResultOptimizers() {
-    const root = $('result-optimizers');
-    if (!root) return;
-    root.replaceChildren();
-    const rows = current?.savings?.rows || [];
-    for (const id of optimizerIds()) {
-      const component = managedComponent(id);
-      const info = optimizerInfo(id);
-      const state = componentState(id, component);
-      const card = node('article', undefined, 'tool-card result-overview-card');
-      const head = node('div', undefined, 'tool-head');
-      head.append(node('h3', info.name), pill(state.label, state.cls));
-      card.append(head, node('p', info.role));
-      const facts = node('div', undefined, 'tool-facts');
-      facts.append(
-        node('span', 'Setup detected for'),
-        node('strong', component?.configuredHarnesses?.length ? component.configuredHarnesses.map(agentName).join(', ') : 'No detected agent'),
-      );
-      const measured = rows.filter(row => row.providerId === id);
-      card.append(facts);
-      if (!measured.length) {
-        card.append(
-          node(
-            'p',
-            component?.configured
-              ? 'Setup is detected, but no result was recorded in the selected period.'
-              : 'No result was recorded for this optimizer in the selected period.',
-            'caption',
-          ),
-        );
-      } else {
-        for (const row of measured) {
-          const evidence = node('div', undefined, 'result-signal');
-          evidence.append(
-            node('span', row.measurement, 'caption'),
-            node('strong', row.impact?.headline || count(row.saved) + ' ' + row.unit),
-            node('span', count(row.operations) + ' operation' + (row.operations === 1 ? '' : 's'), 'caption'),
-          );
-          card.append(evidence);
-        }
-      }
-      root.append(card);
-    }
-  }
-
-  function renderResultAgents() {
-    const root = $('result-agents');
-    if (!root) return;
-    root.replaceChildren();
-    const rows = current?.savings?.rows || [];
-    if (!activeAgents().length) {
-      root.append(sectionEmpty('No supported coding agent is currently detected.'));
-      return;
-    }
-    for (const agent of activeAgents()) {
-      const setupDetected = configuredProviders().filter(component =>
-        component.configuredHarnesses?.includes(agent.id),
-      );
-      const measured = rows.filter(row => row.harnesses?.includes(agent.id));
-      const rtkUnattributed = rows.some(row =>
-        row.providerId === 'rtk' && !row.agents?.length,
-      );
-      const notes = [];
-      if (
-        setupDetected.some(component => component.providerId === 'rtk') &&
-        !measured.some(row => row.providerId === 'rtk')
-      ) {
-        notes.push(
-          rtkUnattributed
-            ? 'RTK has saved command-output data, but its history does not say whether Codex or Claude ran each command. Token Harness keeps those results under RTK instead of guessing.'
-            : 'RTK setup is detected, but no RTK result can be linked to this agent in the selected period.',
-        );
-      }
-      if (
-        setupDetected.some(component => component.providerId === 'harnesstrim') &&
-        !measured.some(row => row.providerId === 'harnesstrim')
-      ) {
-        notes.push(
-          'HarnessTrim setup is detected, but no HarnessTrim result is linked to this app in the selected period. Setup alone does not mean it was used.',
-        );
-      }
-      if (!setupDetected.length && !measured.length) {
-        notes.push('No optimizer setup or agent-linked result was found for this coding app.');
-      }
-      const card = node('article', undefined, 'tool-card result-overview-card');
-      const head = node('div', undefined, 'tool-head');
-      head.append(node('h3', agent.name), pill(setupDetected.length ? 'Setup detected' : 'No setup', setupDetected.length ? 'good' : ''));
-      card.append(
-        head,
-        node('p', agent.version ? 'v' + agent.version : 'Version unavailable', 'caption'),
-      );
-      const facts = node('div', undefined, 'tool-facts');
-      facts.append(
-        node('span', 'Setup found'),
-        node('strong', setupDetected.length ? setupDetected.map(component => optimizerInfo(component.providerId).name).join(', ') : 'None'),
-        node('span', 'Results linked to this agent'),
-        node('strong', measured.length ? measured.map(row => row.provider).join(', ') : 'None in this period'),
-      );
-      card.append(facts);
-      for (const note of notes) card.append(node('p', note, 'caption'));
-      root.append(card);
-    }
-  }
-
   function renderResults() {
     const allowance = allowanceSummary();
     const quality = qualitySummary();
-    const configured = configuredProviders();
-    const connectionCount = configured.reduce(
-      (total, component) => total + (component.configuredHarnesses?.length || 0),
-      0,
-    );
-    const measuredProviders = new Set(
-      (current?.savings?.rows || []).map(row => row.providerId).filter(Boolean),
-    );
+    const savings = current?.savings?.rows || [];
     $('result-summary').replaceChildren(
-      metricCard('Configured optimizers', count(configured.length), optimizerIds().length + ' optimizer(s) tracked in the stack.', configured.length ? 'positive' : ''),
-      metricCard('Setups detected', count(connectionCount), 'Detected optimizer setup links; this is not proof of measured activity.', connectionCount ? 'positive' : ''),
-      metricCard('Optimizers with results', count(measuredProviders.size), 'Providers with recorded measurements in the selected period.'),
+      metricCard('Measured output', savings.length ? count(savings.length) + ' evidence record(s)' : 'No records yet', 'Exact, estimated and other measurement classes remain separate.'),
       metricCard('5h / 7d allowance', allowance.value, allowance.detail, allowance.cls),
       metricCard('Quality', quality.value, quality.detail, quality.cls),
     );
     const routed = current?.value?.routing;
-    const quotaParts = [];
-    if (routed?.allowance5h?.state === 'measured' && routed.allowance5h.savedPercent !== null)
-      quotaParts.push(routed.allowance5h.savedPercent >= 0
-        ? '5h saved ' + count(routed.allowance5h.savedPercent) + '%'
-        : '5h use +' + count(Math.abs(routed.allowance5h.savedPercent)) + '%');
-    if (routed?.allowance7d?.state === 'measured' && routed.allowance7d.savedPercent !== null)
-      quotaParts.push(routed.allowance7d.savedPercent >= 0
-        ? '7d saved ' + count(routed.allowance7d.savedPercent) + '%'
-        : '7d use +' + count(Math.abs(routed.allowance7d.savedPercent)) + '%');
-    const routingValue = routed?.state === 'blocked-by-quality'
+    const routeStatus = routed?.state === 'blocked-by-quality'
       ? 'Not credited'
       : routed?.savedLocalTokens !== null && routed?.savedLocalTokens !== undefined
-        ? (routed.savedLocalTokens >= 0
-          ? count(routed.savedLocalTokens) + ' tokens saved' + (routed.localTokenSavingPercent === null ? '' : ' · ' + count(routed.localTokenSavingPercent) + '%')
-          : count(Math.abs(routed.savedLocalTokens)) + ' tokens added' + (routed.localTokenSavingPercent === null ? '' : ' · ' + count(Math.abs(routed.localTokenSavingPercent)) + '%'))
-        : quotaParts.length ? 'Allowance measured' : routed?.state === 'measured' ? 'Usage unavailable' : 'Not measured yet';
-    const routingDetail = routed?.state === 'blocked-by-quality'
-      ? routed.basis
-      : (quotaParts.length ? quotaParts.join(' · ') + '. ' : '') +
-        (routed?.pairs ? count(routed.pairs) + ' quality-passed routed pair(s). ' : '') +
-        'Local tokens and allowance percentages are separate measurements. Actual child model is not exposed by every harness hook.';
-    $('result-summary').append(metricCard('Automatic routing', routingValue, routingDetail, routed?.state === 'measured' ? 'positive' : ''));
-    renderResultOptimizers();
-    renderResultAgents();
-    renderSavings();
-    renderCandidateResults();
+        ? count(routed.savedLocalTokens) + ' local tokens'
+        : routed?.state === 'measured' ? 'Allowance measured' : 'Not measured yet';
+    $('result-summary').append(metricCard('Automatic routing', routeStatus, routed?.pairs ? count(routed.pairs) + ' quality-passed pair(s). Allowance and local tokens are separate.' : 'Routing savings need paired, quality-gated evidence.', routed?.state === 'measured' ? 'positive' : ''));
+    renderEvidence();
     $('results-period-note').textContent = current?.savings?.firstRecordedAt
       ? 'Recorded from ' + date(current.savings.firstRecordedAt) + ' through ' + date(current.savings.lastRecordedAt)
       : 'No recorded result dates for this period.';
@@ -40470,16 +40661,18 @@ var init_guided_product_client = __esm({
   function renderActivity() {
     const root = $('activity');
     root.replaceChildren();
-    const rows = activityState?.activity || [];
+    const rows = [...(activityState?.activity || [])].sort((a, b) => new Date(b.at).getTime() - new Date(a.at).getTime());
     if (!rows.length) {
       root.append(sectionEmpty('No checks or changes have been recorded in this app session.'));
       return;
     }
-    for (const item of rows) {
+    const visible = rows.slice(0, 8);
+    for (const item of visible) {
       const row = node('div', undefined, 'activity-row');
       row.append(pill(item.state === 'success' ? 'Done' : item.state === 'attention' ? 'Attention' : 'Working', item.state === 'success' ? 'good' : item.state === 'attention' ? 'warn' : ''), node('span', item.message), node('time', date(item.at), 'caption'));
       root.append(row);
     }
+    if (rows.length > visible.length) root.prepend(node('p', 'Showing the latest ' + visible.length + ' of ' + rows.length + ' entries.', 'caption'));
   }
 
   async function loadActivity() {
@@ -40498,6 +40691,82 @@ var init_guided_product_client = __esm({
     }
   }
 
+  function reviewUpdate(result) {
+    if (!result?.ticket || busy) return;
+    modal('Review Token Harness update');
+    $('modal-content').append(
+      messageBox('Update available', (result.messages || []).join(' ') || result.title || 'A reviewed Token Harness update is ready.'),
+      messageBox('Health re-check', 'After installation, Token Harness will re-check optimizer health automatically.'),
+    );
+    $('modal-actions').append(modalClose('Cancel'), actionButton('Install updates', () => applyTicket(result.ticket)));
+  }
+
+  async function checkUpdatesOnStartup() {
+    if (updateCheckStarted) return;
+    if ($('modal').open) {
+      $('modal').addEventListener('close', checkUpdatesOnStartup, { once: true });
+      return;
+    }
+    if (busy || reading) {
+      setTimeout(checkUpdatesOnStartup, 1000);
+      return;
+    }
+    updateCheckStarted = true;
+    try {
+      await ensureSession();
+      const result = await request('/api/update-check', { period: $('period').value });
+      if (busy || reading || $('modal').open) {
+        updateCheckStarted = false;
+        if ($('modal').open) $('modal').addEventListener('close', checkUpdatesOnStartup, { once: true });
+        else setTimeout(checkUpdatesOnStartup, 1000);
+        return;
+      }
+      latestUpdateCheck = result;
+      if (result.stack && current) {
+        current = { ...current, stack: result.stack };
+        renderDashboard();
+        renderSetup();
+        renderResults();
+      }
+      const root = $('update-notice');
+      root.replaceChildren();
+      if (!result.ticket) {
+        root.hidden = true;
+        return;
+      }
+      const copy = node('div');
+      copy.append(node('strong', result.title || 'Token Harness update available'), node('p', (result.messages || []).join(' ') || 'Review and install the available update.', 'caption'));
+      root.append(copy, actionButton('Review update', () => reviewUpdate(latestUpdateCheck), 'secondary'));
+      root.hidden = false;
+    } catch {
+      // The startup version check is supplementary; Refresh and Health and updates remain available.
+    }
+  }
+
+  async function pollRouting() {
+    if (document.hidden || busy || reading || $('modal').open || !current) return;
+    try {
+      const result = await request('/api/routing');
+      if (busy || reading || $('modal').open || document.activeElement?.closest('#setup-agents, #result-evidence')) return;
+      if (!Array.isArray(result.agents)) return;
+      const byId = new Map(result.agents.map(agent => [agent.id, agent.promptRouting]));
+      const previous = new Map((current.agents || []).map(agent => [agent.id, agent.promptRouting]));
+      const changed = [...byId].some(([id, routing]) => JSON.stringify(previous.get(id)) !== JSON.stringify(routing));
+      if (!changed) return;
+      current = {
+        ...current,
+        agents: (current.agents || []).map(agent => byId.has(agent.id)
+          ? { ...agent, promptRouting: byId.get(agent.id) }
+          : agent),
+      };
+      renderDashboard();
+      renderAgentSetup();
+      renderResults();
+    } catch {
+      // Runtime receipts are supplementary; the overview remains usable if this read fails.
+    }
+  }
+
   function render() {
     renderNotices();
     renderDashboard();
@@ -40530,6 +40799,7 @@ var init_guided_product_client = __esm({
       clearInterval(progressTimer);
       reading = false;
       $('refresh').disabled = false;
+      if (current && !updateCheckStarted) checkUpdatesOnStartup();
     }
   }
 
@@ -40570,6 +40840,9 @@ var init_guided_product_client = __esm({
   });
   $('refresh').addEventListener('click', () => refresh(true));
   $('period').addEventListener('change', changePeriod);
+  $('evidence-filter').addEventListener('input', applyEvidenceFilters);
+  $('evidence-type').addEventListener('change', applyEvidenceFilters);
+  $('evidence-sort').addEventListener('change', applyEvidenceFilters);
   $('measurement-help').addEventListener('click', measurementHelp);
   $('theme').addEventListener('change', () => {
     const value = $('theme').value;
@@ -40585,6 +40858,8 @@ var init_guided_product_client = __esm({
   selectView('dashboard');
   refresh(false);
   setInterval(() => { if (!document.hidden) loadActivity(); }, 4000);
+  setInterval(pollRouting, 15000);
+  document.addEventListener('visibilitychange', () => { if (!document.hidden) pollRouting(); });
 })();
 `;
   }
@@ -40611,9 +40886,13 @@ var init_guided_product_styles = __esm({
 .explain-box{background:var(--panel-soft);border:1px solid var(--line);border-radius:12px;padding:.8rem;margin:.6rem 0}.explain-box p{margin:.25rem 0;color:var(--muted)}.explain-box.warn{background:var(--warn-soft);border-color:color-mix(in srgb,var(--warn) 35%,var(--line))}.explain-box.safe{background:var(--good-soft);border-color:color-mix(in srgb,var(--good) 30%,var(--line))}.operation-progress{margin:.75rem 0;padding:.8rem;border:1px solid var(--line);border-radius:12px}.operation-progress p{margin:.35rem 0 0}
 .choice-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:.6rem;margin:.8rem 0}.choice-button{display:flex;flex-direction:column;align-items:flex-start;text-align:left;gap:.25rem;background:var(--panel);color:var(--text);border:1px solid var(--line);padding:.8rem}.choice-button:hover:not(:disabled){border-color:var(--accent);background:var(--accent-soft)}.choice-button .caption{font-weight:500}
 .result-signal{display:grid;gap:.2rem;border-top:1px solid var(--line);padding:.65rem 0}.result-signal strong{font-size:1rem}.results-header{display:flex;justify-content:space-between;gap:1rem;align-items:end;margin:1rem 0}.results-header h2{margin:0}.results-header p{margin:.2rem 0;color:var(--muted)}
+.update-notice{display:flex;align-items:center;justify-content:space-between;gap:1rem;padding:.8rem 1rem;margin:.8rem 0;border:1px solid color-mix(in srgb,var(--accent) 40%,var(--line));border-radius:var(--radius);background:var(--accent-soft)}.update-notice p{margin:.2rem 0 0;color:var(--muted)}
+.inline-actions a.secondary{display:inline-flex;align-items:center;padding:.68rem 1rem;border-radius:10px;text-decoration:none;font-weight:700}
+.evidence-panel{padding:0}.evidence-controls{display:flex;align-items:end;gap:.7rem;flex-wrap:wrap;padding:.8rem;border-bottom:1px solid var(--line)}.evidence-controls label{display:grid;gap:.25rem;color:var(--muted);font-size:.82rem}.evidence-controls input,.evidence-controls select{min-width:150px}.evidence-controls input{min-width:min(260px,70vw)}.evidence-table-scroll{overflow-x:auto}.evidence-table{width:100%;border-collapse:collapse;min-width:760px}.evidence-table th,.evidence-table td{padding:.75rem .85rem;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}.evidence-table thead{background:var(--panel-soft);color:var(--muted);font-size:.8rem}.evidence-table tbody th{min-width:175px;font-weight:600}.evidence-table tbody th span{display:block;margin-top:.2rem}.evidence-table td:nth-child(2){min-width:150px}.evidence-table td:nth-child(3){min-width:240px}.evidence-table td:last-child{min-width:110px}.evidence-table details summary{cursor:pointer;color:var(--accent);font-weight:700}.evidence-table details p{margin:.45rem 0}.evidence-table tr[hidden]{display:none}.activity-scroll{max-height:24rem;overflow-y:auto;overscroll-behavior:contain}.activity-scroll .activity-row{display:grid;grid-template-columns:auto minmax(0,1fr) auto;align-items:center;gap:.75rem;padding:.65rem 0;border-bottom:1px solid var(--line)}
 #modal{width:min(720px,calc(100vw - 2rem));max-height:calc(100vh - 2rem);overflow:auto}#modal-content h3{margin:1rem 0 .4rem}#modal-actions{display:flex;justify-content:flex-end;gap:.5rem;flex-wrap:wrap;margin-top:1rem}
 @media(max-width:900px){.dashboard-columns{grid-template-columns:1fr}.tool-grid{grid-template-columns:1fr}.setup-intro{grid-template-columns:1fr}}
-@media(max-width:640px){.dashboard-status{flex-direction:column}.choice-grid{grid-template-columns:1fr}.connection-summary{align-items:flex-start;flex-direction:column}.connection-action{justify-content:flex-start}.maintenance-row{align-items:flex-start;flex-direction:column}.results-header{align-items:flex-start;flex-direction:column}}
+@media(max-width:640px){.dashboard-status{flex-direction:column}.choice-grid{grid-template-columns:1fr}.connection-summary{align-items:flex-start;flex-direction:column}.connection-action{justify-content:flex-start}.maintenance-row{align-items:flex-start;flex-direction:column}.results-header{align-items:flex-start;flex-direction:column}.update-notice{align-items:flex-start;flex-direction:column}.activity-scroll .activity-row{grid-template-columns:auto minmax(0,1fr)}.activity-scroll .activity-row time{grid-column:2}}
+@media(max-width:800px){.evidence-table{min-width:0}.evidence-table thead{display:none}.evidence-table tbody{display:block}.evidence-table tr{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);padding:.65rem;border-bottom:1px solid var(--line)}.evidence-table tbody th,.evidence-table td:nth-child(n){min-width:0;padding:.3rem;border:0;overflow-wrap:anywhere}.evidence-table td:nth-child(3),.evidence-table td:last-child{grid-column:1/-1}}
 `;
   }
 });
@@ -41273,6 +41552,7 @@ ${GUIDE_CANDIDATE_READINESS_JS}`;
 <div class="page-heading"><div><h1 id="view-title">Overview</h1><p id="view-description">Your coding agents, optimization stack, health and measured results in one place.</p></div></div>
 <div class="status-line"><span class="read-status" role="status"><span id="reading-spinner" class="spinner" aria-hidden="true"></span><span id="updated">Checking your setup\u2026</span></span><span id="live-status" class="caption">Nothing changes without your approval</span></div>
 <div id="stale-state" class="stale-state" hidden></div><div id="error" class="error" role="alert" hidden></div><div id="notices"></div>
+<div id="update-notice" class="update-notice" role="status" hidden></div>
 
 <section id="view-dashboard" role="tabpanel" aria-labelledby="tab-dashboard" tabindex="0">
 <section id="dashboard-status" class="dashboard-status"><div><span class="eyebrow">CURRENT STATUS</span><h2>Checking your machine\u2026</h2><p>Finding Claude Code, Codex, recommended optimizers and measured results.</p></div><span class="pill">Checking</span></section>
@@ -41300,7 +41580,6 @@ ${GUIDE_CANDIDATE_READINESS_JS}`;
 <section class="setup-step" id="optimizers">
 <div class="section-title"><div><h2>Optimizer setup</h2><p>This matrix shows which optimizer setup Token Harness detected for each coding app. It does not confirm runtime activity; measured results appear separately when evidence is recorded.</p></div></div>
 <div id="connection-overview" class="connection-overview"><p class="empty">Checking optimizer connections\u2026</p></div>
-<details class="disclosure"><summary>Remove Token Harness-managed configuration</summary><p class="caption">Removal is reviewed first. Token Harness removes only configuration it owns; installed provider software and user-owned configuration may remain.</p><div id="managed-removal-actions" class="maintenance-list"><p class="caption">Checking managed ownership\u2026</p></div></details>
 </section>
 
 <section class="setup-step" id="maintenance">
@@ -41310,15 +41589,15 @@ ${GUIDE_CANDIDATE_READINESS_JS}`;
 </section>
 
 <section id="view-results" role="tabpanel" aria-labelledby="tab-results" tabindex="0" hidden>
-<div class="results-header"><div><h2>Results dashboard</h2><p>See which optimizer setups Token Harness found and which results it actually recorded for each coding app.</p></div><div class="filter-row"><label for="period">Period</label><select id="period"><option value="all">All</option><option value="7d">7 days</option><option value="30d">30 days</option></select><button id="measurement-help" class="secondary" type="button">How results are recorded</button></div></div>
-<div id="result-summary" class="impact-grid" aria-label="Results overview"><article class="metric-card"><span class="metric-label">Optimization stack</span><strong class="metric-value">Checking\u2026</strong></article></div>
-<div class="section-title"><div><h2>By optimizer</h2><p>Detected setup and recorded results for every optimizer in the stack.</p></div></div>
-<div id="result-optimizers" class="tool-grid"><article class="tool-card"><h3>Checking optimizer results\u2026</h3></article></div>
-<div class="section-title"><div><h2>By coding agent</h2><p>Which optimizer setups were detected for each app and which measured results can be linked to it.</p></div></div>
-<div id="result-agents" class="tool-grid"><article class="tool-card"><h3>Checking results by coding app\u2026</h3></article></div>
-<div class="section-title"><div><h2>Measurement evidence</h2><p id="results-period-note">Checking recorded dates\u2026</p></div></div><section class="panel"><div id="result-savings" class="evidence-list"><p class="empty">Checking recorded results\u2026</p></div></section>
-<div class="section-title"><div><h2>Experimental benchmark results</h2><p>Candidate evidence is evaluation only; it never promotes a tool automatically.</p></div></div><section class="panel"><div id="candidate-results" class="evidence-list"><p class="empty">Checking candidate evidence\u2026</p></div></section>
-<div class="section-title"><div><h2>Recent activity</h2><p>Checks and changes from this local app session.</p></div></div><section class="panel"><div id="activity"><p class="empty">No activity yet.</p></div></section>
+<div class="results-header"><div><h2>Results dashboard</h2><p>Measured evidence by optimizer, routing and coding app. Different classes and units stay separate.</p></div><div class="filter-row"><label for="period">Period</label><select id="period"><option value="all">All</option><option value="7d">7 days</option><option value="30d">30 days</option></select><button id="measurement-help" class="secondary" type="button">How results are recorded</button></div></div>
+<div id="result-summary" class="impact-grid" aria-label="Results overview"><article class="metric-card"><span class="metric-label">Measured evidence</span><strong class="metric-value">Checking\u2026</strong></article></div>
+<div class="section-title"><div><h2>Evidence</h2><p id="results-period-note">Checking recorded dates\u2026</p></div></div>
+<section class="panel evidence-panel">
+<div class="evidence-controls"><label>Filter <input id="evidence-filter" type="search" placeholder="Optimizer, harness, class\u2026" autocomplete="off"></label><label>Type <select id="evidence-type"><option value="all">All</option><option value="optimizer">Optimizers</option><option value="routing">Routing</option><option value="harness">Coding apps</option><option value="candidate">Experiments</option></select></label><label>Sort <select id="evidence-sort"><option value="name">Name</option><option value="evidence">Evidence count</option><option value="type">Type</option></select></label></div>
+<div class="evidence-table-scroll"><table class="evidence-table"><thead><tr><th scope="col">System</th><th scope="col">Scope</th><th scope="col">Measured evidence</th><th scope="col">Details</th></tr></thead><tbody id="result-evidence"><tr><td colspan="4">Checking recorded results\u2026</td></tr></tbody></table></div>
+<p id="evidence-empty" class="empty" hidden>No evidence matches these filters.</p>
+</section>
+<div class="section-title"><div><h2>Recent activity</h2><p>Latest checks and changes from this app session.</p></div></div><section class="panel"><div id="activity" class="activity-scroll"><p class="empty">No activity yet.</p></div></section>
 </section>
 
 <footer><span>Local data. No account required.</span><span>Full overview refresh runs only when you choose Refresh.</span></footer>
@@ -41506,6 +41785,10 @@ function createGuideHandler(input) {
           send(200, JSON.stringify(input.service.status()));
           return;
         }
+        if (url.pathname === "/api/routing") {
+          send(200, JSON.stringify(await input.service.routing()));
+          return;
+        }
         if (url.pathname === "/api/candidate-campaign") {
           if (input.candidateCampaign === void 0)
             throw new GuideError(404, "Candidate campaign status is unavailable.");
@@ -41563,6 +41846,12 @@ function createGuideHandler(input) {
         send(200, JSON.stringify(result6));
         return;
       }
+      if (url.pathname === "/api/restart") {
+        if (body === null || typeof body !== "object" || Array.isArray(body) || Object.keys(body).length !== 0)
+          throw new GuideError(400, "Restart accepts no commands or paths.");
+        send(200, JSON.stringify(await input.service.restart()));
+        return;
+      }
       if (url.pathname === "/api/update-check") {
         if (body === null || typeof body !== "object" || Array.isArray(body))
           throw new GuideError(400, "Only an optional reporting period is accepted.");
@@ -42106,6 +42395,7 @@ async function runGuidedUi(options, base) {
     }
     return result6;
   };
+  const entryScript = base.adapters === null || base.adapters === void 0 || base.applicationEntryScript === void 0 || base.applicationEntryScript === null ? null : await base.adapters.fs.canonicalPath?.(base.applicationEntryScript) ?? null;
   const service = new GuideService(guideCall, () => Date.now(), () => randomBytes2(32).toString("hex"), async (harness) => {
     if (base.adapters === null || base.adapters === void 0) {
       return {
@@ -42147,8 +42437,23 @@ async function runGuidedUi(options, base) {
       facts: base.platform,
       paths: base.adapters.paths,
       projectRoot: base.cwd,
-      projectId: base.adapters.projectIdFor(base.cwd)
+      projectId: null
+    });
+  }, async () => {
+    if (entryScript === null || base.adapters === null || base.adapters === void 0 || base.platform === null)
+      throw new Error("The installed app entry could not be verified.");
+    const current = await base.adapters.fs.canonicalPath?.(base.applicationEntryScript);
+    if (current !== entryScript || (await base.adapters.fs.stat(entryScript))?.kind !== "file")
+      throw new Error("The app entry changed. Check the installation before restarting.");
+    const url2 = await launchGuidedApplication({
+      executable: process5.execPath,
+      entryScript,
+      cwd: base.cwd,
+      facts: base.platform,
+      env: process5.env
     });
+    setTimeout(() => server.close(), 1e3);
+    return url2;
   });
   const token = randomBytes2(32).toString("hex");
   let authority = "";
@@ -42177,6 +42482,8 @@ async function runGuidedUi(options, base) {
   }
   authority = `127.0.0.1:${address.port}`;
   const url = `http://${authority}/`;
+  if (process5.send !== void 0)
+    process5.send({ type: "token-harness-guide-ready", url });
   process5.stdout.write(`Token Harness is ready: ${url}
 
 Use the browser to review setup, see recorded savings and read the active rules.