token-harness 0.1.7 → 0.1.8

package/README.md

@@ -3,13 +3,13 @@
 **Make Claude Code and Codex easier to understand and use efficiently.**
 
 Token Harness checks your coding agents, shows subscription allowance when it can be
-observed reliably, reduces avoidable context overhead, and recommends one useful next
-action. It runs locally and never presents local token estimates as subscription quota.
+observed reliably, reduces avoidable context overhead, and recommends useful actions.
+It runs locally and never presents local token estimates as subscription quota.
 
 ## The easy path
 
 You need [Node.js 22.13 or newer](https://nodejs.org/) and at least one signed-in coding
-agent: Claude Code or Codex.
+agent such as Claude Code or Codex.
 
 Open a terminal and paste:
 
@@ -21,7 +21,7 @@ token-harness setup
 That is the whole first-time check. `setup` tells you:
 
 - which coding agents it found;
-- whether an optimization provider is active;
+- which optimizers are already active;
 - whether the current setup works;
 - what it changed, if anything;
 - exactly one next step.
@@ -44,16 +44,60 @@ After setup, run:
 token-harness ui
 ```
 
-The dashboard opens in your browser and shows harness status, active providers,
-allowance windows, the main recommendation, and the next action. It is a small local
-web page served only on `127.0.0.1`: no Electron app, account, or cloud service.
+The dashboard opens in your browser and answers three questions in this order:
 
-Use `Ctrl+C` in the terminal to close it. If you do not want it to open a browser:
+1. **Can I work normally right now?**
+2. **What is actually active and useful?**
+3. **Is there one action worth taking?**
+
+It shows active/relevant coding agents first, their optimization providers, observable
+allowance windows, and task guidance. Tools that are absent do not get large cards;
+secondary detected tools are kept out of the main path.
+
+The page is served only on `127.0.0.1`: no Electron app, account, or cloud service.
+
+### What happens after the dashboard?
+
+Usually: **nothing else. You are done.**
+
+Token Harness is not a launcher and it does not need to stay between you and your coding
+agent. Continue exactly as you normally would:
+
+```sh
+claude
+codex
+opencode
+```
+
+Use whichever of those you already use. RTK, HarnessTrim, or another configured provider
+runs automatically through that coding agent's integration. You do **not** need a special
+`token-harness run` command.
+
+You can close the dashboard whenever you want. Use `Ctrl+C` in the terminal to stop its
+local web server. Closing it does not disable configured optimizers.
+
+Open it again later with `token-harness ui` when you want a status check. If you do not
+want it to open a browser:
 
 ```sh
 token-harness ui --no-open
 ```
 
+## Daily use
+
+There is no mandatory command loop. These are tools you use when they answer a question:
+
+| When you want to know... | Run |
+| --- | --- |
+| Is everything still connected? | `token-harness ui` |
+| What should I do before a demanding task? | `token-harness optimize --task hard --profile quality` |
+| Is an integration actually working? | `token-harness verify` |
+| How much reducer saving has been measured? | `token-harness metrics --since 7d` |
+| Are safer provider updates available? | `token-harness update` |
+
+If a command finishes with **no action required**, stop there and use your coding agent
+normally. Token Harness should not send you around a `ui → optimize → ui` loop.
+
 ## Ask your AI to install Token Harness
 
 You can give this prompt to Claude Code or Codex:
@@ -67,8 +111,10 @@ Explain the setup result in plain language: what was detected, what already work
 what would change, and the single next step. Do not expose credentials, cookies,
 tokens, raw home paths, or private project contents. If setup proposes a supported
 configuration change, show me the short plan and ask before running
-`token-harness setup --yes`. After an approved change, verify it and start
-`token-harness ui`. If anything is unsupported, stop safely and explain why.
+`token-harness setup --yes`. After an approved change, verify it and open
+`token-harness ui` once. Then tell me clearly that setup is complete and that I should
+continue using my normal coding-agent command. Do not invent additional Token Harness
+steps when no action is required.
 ```
 
 The AI should ask before the `--yes` step because that is the point where coding-agent
@@ -76,25 +122,37 @@ configuration may change.
 
 ## What normal output looks like
 
-Human output is intentionally short:
+A healthy final check is intentionally short:
 
 ```text
 TOKEN HARNESS - READY
 
-DETECTED
-  Claude Code: detected
-  Codex: configured
-  harnesstrim: active on Codex
+WHAT WORKS
+  Codex: configured (0.146.0)
+  HarnessTrim: active on Codex
 
 CHANGES
   Nothing changed.
 
 NEXT STEP
-  token-harness ui
-  Open the dashboard to see status, allowance, and advice.
+  Use your coding agent normally; configured optimizers run automatically.
+```
+
+A newer-than-tested combination is not presented as if the whole setup were broken:
+
+```text
+TOKEN HARNESS - READY WITH LIMITATIONS
+
+WHAT WORKS
+  Claude Code: configured
+  RTK: active on Claude Code
+
+NEXT STEP
+  token-harness verify
+  You can keep working; verify the active integrations when convenient.
 ```
 
-Need the evidence behind the summary? Add `--verbose`:
+Need the evidence behind a summary? Add `--verbose`:
 
 ```sh
 token-harness doctor --verbose
@@ -120,7 +178,7 @@ token-harness optimize
 | Command | Answer |
 | --- | --- |
 | `setup` | Is Token Harness ready, and what is my one next step? |
-| `ui` | What is active, how much allowance is visible, and what should I do? |
+| `ui` | What is active, how much allowance is visible, and do I need to do anything? |
 | `optimize` | What is the best evidence-based action for the task I am starting? |
 
 For example:
@@ -141,13 +199,15 @@ Token Harness is conservative by design:
 - existing files are backed up before a managed write;
 - only exact Token Harness-owned entries are removed by `uninstall`;
 - newer or untested combinations are reported, not guessed;
+- an available provider update outside reviewed compatibility is kept out rather than
+  forced, and the installed working version stays in place;
 - the dashboard binds only to the local loopback address and provides no mutation API;
 - source code, prompts, command contents, credentials, and cookies are not sent to a
   Token Harness service.
 
 Plans, receipts, metrics, and backups stay in the local Token Harness state directory.
-See [RFC 0004](docs/rfcs/0004-execution-safety-ownership-update.md) for the execution
-model and [RFC 0006](docs/rfcs/0006-cli-contract.md) for CLI/JSON guarantees.
+See [RFC 0004](docs/rfcs/0004-safety-and-installation.md) for the execution model and
+[RFC 0006](docs/rfcs/0006-cli-contract.md) for CLI/JSON guarantees.
 
 ## Supported optimizations
 
@@ -183,7 +243,7 @@ Most people do not need this section. Run `token-harness <command> --help` for d
 | `verify` | Check the declared integration tier | No |
 | `metrics` | Report attributable reducer savings | No |
 | `status` | Report pipelines, drift, and importer modes | No |
-| `update` | Check/update installed providers | Yes, only with `--yes` |
+| `update` | Check/update installed providers; unreviewed targets stay installed | Yes, only with `--yes` |
 | `rollback` | Restore the latest transaction snapshot | Yes, only with `--yes` |
 | `uninstall` | Remove owned integration entries | Yes, only with `--yes` |
 | `schedule` | Compare Claude Code and Codex using available evidence | No |
@@ -214,6 +274,13 @@ token-harness doctor --verbose
 Do not force an unsupported plan. Open an issue with the redacted `--json` result if
 you believe the combination should be supported.
 
+### `update` finds a newer version but keeps the installed one
+
+That is normally a safety decision, not a failed installation. Token Harness found a
+newer provider release but does not yet have reviewed compatibility evidence for the
+active provider × harness × platform combination. Keep using the installed version; no
+manual upgrade is required.
+
 ### Verification says `not-exercised`
 
 Restart the coding agent, use it for one normal command, and run:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-harness",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
   "license": "Apache-2.0",
   "type": "module",

package/sbom.json

@@ -1,14 +1,14 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:e8f87991-af2b-4ce8-a0eb-db80b10befbe",
+  "serialNumber": "urn:uuid:dfdf5e8b-aba7-10dd-1c9d-dd9a38f31fb3",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "bom-ref": "token-harness",
       "name": "token-harness",
-      "version": "0.1.7",
+      "version": "0.1.8",
       "description": "Quota-aware efficiency layer for Claude Code and Codex subscription limits.",
       "licenses": [
         {
@@ -20,7 +20,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e8f87991af2b4ce8a0ebdb80b10befbe435aee3d71c2309e20b093ef4a8c27e5"
+          "content": "dfdf5e8baba710dd1c9ddd9a38f31fb3aded525ea28f8b15a0fc5cff743444c6"
         }
       ]
     },

package/token-harness.mjs

@@ -6867,7 +6867,7 @@ var TOOL_VERSION;
 var init_version2 = __esm({
   "apps/cli/dist/src/version.js"() {
     "use strict";
-    TOOL_VERSION = "0.1.7";
+    TOOL_VERSION = "0.1.8";
   }
 });
 
@@ -15074,7 +15074,7 @@ function contextEvidence(context, harness) {
   const hasUnknownTools = harness.mcpServers.some((server) => server.toolCount === null);
   const evidence2 = [];
   let score = 0;
-  if (harness.projectDocMaxBytes !== null && harness.projectDocMaxBytes > 0) {
+  if (harness.projectDocMaxBytes !== null && harness.projectDocMaxBytes > 0 && instructionBytes > 0) {
     const ratio = instructionBytes / harness.projectDocMaxBytes;
     if (ratio >= 0.75)
       score = Math.max(score, 2);
@@ -17636,7 +17636,9 @@ async function runSetup(context, operations = DEFAULT_OPERATIONS) {
       diagnostics: doctor.diagnostics
     });
   }
-  if (doctor.exitCode !== EXIT_CODES.ok || baseDoctor.problemCount > 0) {
+  const setupHarnessIds = new Set(detectedHarnesses.map((harness) => harness.harnessId));
+  const hasBrokenSetupIntegration = detectedHarnesses.some((harness) => harness.state === "broken") || baseDoctor.providers.some((provider) => provider.state === "broken" && provider.configuredHarnesses.some((harness) => setupHarnessIds.has(harness)));
+  if (hasBrokenSetupIntegration) {
     return commandResult({
       command: "setup",
       exitCode: EXIT_CODES["problems-found"],
@@ -17650,7 +17652,7 @@ async function runSetup(context, operations = DEFAULT_OPERATIONS) {
         budget: null,
         nextStep: {
           command: "token-harness doctor --verbose",
-          description: "Review the detected problem before changing configuration."
+          description: "Review the broken active integration before changing configuration."
         }
       },
       diagnostics: doctor.diagnostics
@@ -17679,7 +17681,7 @@ async function runSetup(context, operations = DEFAULT_OPERATIONS) {
         budget: budget2.data,
         nextStep: healthy2 ? {
           command: "token-harness ui",
-          description: "Open the dashboard to see status, allowance, and advice."
+          description: "Open the dashboard once to review status; then use your coding agent normally."
         } : {
           command: "token-harness verify --verbose",
           description: "Review the failed integration check."
@@ -17775,7 +17777,7 @@ async function runSetup(context, operations = DEFAULT_OPERATIONS) {
       budget: budget.data,
       nextStep: healthy ? {
         command: "token-harness ui",
-        description: "Open the dashboard to see status, allowance, and advice."
+        description: "Open the dashboard once to review status; then use your coding agent normally."
       } : {
         command: "token-harness verify --verbose",
         description: "Review the failed integration check."
@@ -17862,8 +17864,6 @@ function upgradeAction(input) {
   return {
     kind: "package-manager-install",
     id: digest.slice(digest.indexOf(":") + 1, digest.indexOf(":") + 9),
-    // The same class the install action uses, for the same reason: an installed package is not
-    // reversed by restoring a file.
     riskClass: "delegated",
     requiresNetwork: input.requiresNetwork,
     requiresElevation: input.requiresElevation,
@@ -17874,21 +17874,10 @@ function upgradeAction(input) {
       `${input.packageName} is installed at ${input.installed}`
     ],
     postconditions: [`${input.packageName} reports ${input.target}`],
-    /**
-     * `package-inventory` where the channel can report what is installed, `none` otherwise.
-     *
-     * An update replaces a binary. Rolling the transaction back restores files and leaves the new
-     * version in place, so the executor's receipt is not boilerplate here — it is the difference
-     * between the machine being restored and the *configuration* being restored. With an
-     * inventory-capturing channel the rollback also reinstalls the previous version, and the
-     * receipt says per package whether that reinstall took.
-     */
     rollbackData: channelCanReportInventory(input.channel) ? "package-inventory" : "none",
     explanation: `Update ${input.packageName} from ${input.installed} to ${input.target} through ${input.channel}`,
     packageManager: input.channel,
     packageName: input.packageName,
-    // Pinned to the exact version the channel reported, not left open. An unpinned upgrade would
-    // install whatever is newest at execution time, which is not the version the dry run showed.
     version: input.target
   };
 }
@@ -17898,8 +17887,6 @@ async function runUpdate(context) {
   const finish3 = (exitCode, data) => commandResult({
     command: "update",
     exitCode,
-    // RFC 0006: `data` is null when the status is `error`, and the human renderer must read the
-    // same object it serializes — the defect `apply` already had to fix.
     data: statusForExitCode(exitCode) === "error" ? null : data,
     diagnostics
   });
@@ -17916,23 +17903,27 @@ async function runUpdate(context) {
   const providerAdapters = listProviderAdapters().filter((adapter) => context.provider === null || adapter.manifest.id === context.provider);
   const managedState = await managedIntegrations(context);
   const managed = managedState.integrations;
+  const harnessAdapters = listHarnessAdapters();
   const managedHarnessIds = new Set(managed.map((entry) => entry.harnessId));
+  if (managedState.legacyOwnershipUnknown) {
+    for (const harness of harnessAdapters)
+      managedHarnessIds.add(harness.manifest.id);
+  }
+  const harnessContext = {
+    fs: adapters.fs,
+    runner: adapters.runner,
+    facts: context.platform,
+    paths: adapters.paths,
+    projectRoot: context.projectRoot
+  };
   const harnessVersions = /* @__PURE__ */ new Map();
-  if (managedHarnessIds.size > 0) {
-    const harnessContext = {
-      fs: adapters.fs,
-      runner: adapters.runner,
-      facts: context.platform,
-      paths: adapters.paths,
-      projectRoot: context.projectRoot
-    };
-    for (const harness of listHarnessAdapters()) {
-      if (!managedHarnessIds.has(harness.manifest.id))
-        continue;
-      const detection = await harness.detect(harnessContext);
-      harnessVersions.set(harness.manifest.id, detection.version);
-    }
+  for (const harness of harnessAdapters) {
+    if (!managedHarnessIds.has(harness.manifest.id))
+      continue;
+    const detection = await harness.detect(harnessContext);
+    harnessVersions.set(harness.manifest.id, detection.version);
   }
+  const recoveryHarnessConfigs = managedState.legacyOwnershipUnknown ? (await Promise.all(harnessAdapters.map(async (harness) => (await harness.inspect(harnessContext)).summaries))).flat() : [];
   const pins = context.stateRoot === null ? { pins: /* @__PURE__ */ new Map(), unhonoredProjectPinPath: null, diagnostics: [] } : await readPins({
     fs: adapters.fs,
     stateRoot: context.stateRoot,
@@ -17945,7 +17936,7 @@ async function runUpdate(context) {
     facts: context.platform,
     paths: adapters.paths,
     projectRoot: context.projectRoot,
-    harnessConfigs: [],
+    harnessConfigs: recoveryHarnessConfigs,
     now: context.now,
     localDatabase: adapters.localDatabase,
     projectIdFor: adapters.projectIdFor
@@ -18008,22 +17999,18 @@ async function runUpdate(context) {
       report.providers.push(row2);
       continue;
     }
-    const managedHarnesses = managed.filter((entry) => entry.providerId === adapter.manifest.id);
-    let updateAdmitted = !managedState.legacyOwnershipUnknown;
+    const compatibilityHarnessIds = new Set(managed.filter((entry) => entry.providerId === adapter.manifest.id).map((entry) => entry.harnessId));
     if (managedState.legacyOwnershipUnknown) {
-      blockedUpdates.push({
-        providerId: adapter.manifest.id,
-        target: query.version,
-        harnessId: "legacy-owned-state",
-        missing: "a committed pre-attribution journal owns configuration but does not identify its provider and harness"
-      });
+      for (const harnessId2 of detection.configuredHarnesses)
+        compatibilityHarnessIds.add(harnessId2);
     }
-    for (const integration of managedHarnesses) {
+    let updateAdmitted = true;
+    for (const harnessId2 of compatibilityHarnessIds) {
       const admission = admitManagedMutation(context.compatibilityRows ?? COMPATIBILITY_ROWS, {
         provider: adapter.manifest.id,
         providerVersion: query.version,
-        harness: integration.harnessId,
-        harnessVersion: harnessVersions.get(integration.harnessId) ?? null,
+        harness: harnessId2,
+        harnessVersion: harnessVersions.get(harnessId2) ?? null,
         os: context.platform.os,
         wsl: context.platform.isWsl
       });
@@ -18032,8 +18019,9 @@ async function runUpdate(context) {
       updateAdmitted = false;
       blockedUpdates.push({
         providerId: adapter.manifest.id,
+        installed: detection.version,
         target: query.version,
-        harnessId: integration.harnessId,
+        harnessId: harnessId2,
         missing: admission.missing
       });
     }
@@ -18055,20 +18043,25 @@ async function runUpdate(context) {
     }));
   }
   report.network = [...destinations].sort();
-  const blockedIsOutcome = blockedUpdates.length > 0 && actions.length === 0;
   for (const blocked of blockedUpdates) {
     diagnostics.push(diagnostic({
-      severity: blockedIsOutcome ? "error" : "warning",
+      severity: "info",
       code: "managed-update-blocked",
-      message: `update refuses ${blocked.providerId} ${blocked.target} on managed ${blocked.harnessId}: ${blocked.missing}`,
-      remediation: "Record a compatibility row and fixture for the target version before updating this managed integration"
+      message: `${blocked.providerId} ${blocked.target} is available but is not validated for ${blocked.harnessId}; keeping ${blocked.installed ?? "the installed version"}`,
+      remediation: "No action is required; Token Harness will allow the update after this combination has reviewed compatibility evidence"
+    }));
+    diagnostics.push(diagnostic({
+      severity: "info",
+      code: "managed-update-blocked-detail",
+      message: `${blocked.providerId} ${blocked.target} compatibility evidence is missing: ${blocked.missing}`,
+      remediation: null
     }));
   }
   if (pins.unhonoredProjectPinPath !== null) {
   }
   if (actions.length === 0 && blockedUpdates.length > 0) {
-    report.execution = emptyExecution("rejected");
-    return finish3(EXIT_CODES["unsupported-environment"], report);
+    report.execution = emptyExecution("nothing-to-do");
+    return finish3(EXIT_CODES.ok, report);
   }
   if (actions.length === 0) {
     report.execution = emptyExecution("nothing-to-do");
@@ -18085,7 +18078,6 @@ async function runUpdate(context) {
     diagnostics.push(diagnostic({
       severity: "error",
       code: "confirmation-required",
-      // In the message and not only in `data`: exit 8 is an `error` status, so `data` is null.
       message: `Would update ${summary}`,
       remediation: "Re-run with `--yes` to apply it"
     }));
@@ -18136,8 +18128,6 @@ async function runUpdate(context) {
     planId: null,
     transactionId,
     fromStoredPlan: false,
-    // Mapped the way `apply` maps it: `in-progress` is not a terminal outcome a report may
-    // carry, and anything that is not one of the three known ends is a rejection.
     outcome: transaction.journal.outcome === "committed" ? "committed" : transaction.journal.outcome === "rolled-back" ? "rolled-back" : transaction.journal.outcome === "dirty" ? "dirty" : "rejected",
     results: transaction.journal.entries.map((entry) => ({
       actionId: entry.actionId,
@@ -19421,32 +19411,53 @@ function harnessName(id) {
     return "Codex";
   if (id === "opencode")
     return "OpenCode";
+  if (id === "pi")
+    return "Pi";
+  if (id === "hermes")
+    return "Hermes";
+  return id;
+}
+function providerName(id) {
+  if (id === "rtk")
+    return "RTK";
+  if (id === "harnesstrim")
+    return "HarnessTrim";
   return id;
 }
+function normalWork() {
+  return "Use your coding agent normally; configured optimizers run automatically.";
+}
+function usefulEvidence(evidence2) {
+  const useful = evidence2.find((item) => !/^0B known loaded of /i.test(item.summary) && !/^0 MCP servers/i.test(item.summary) && !/^0B of instruction candidates/i.test(item.summary));
+  return useful?.summary ?? evidence2[0]?.summary ?? null;
+}
 function renderSimpleDoctor(report) {
   const present = report.harnesses.filter((item) => item.state !== "absent");
   const active = report.providers.filter((item) => item.state === "configured" && item.configuredHarnesses.length > 0);
-  const state = report.problemCount > 0 ? "attention needed" : present.length > 0 ? "ready" : "setup needed";
+  const broken = present.some((item) => item.state === "broken") || report.providers.some((item) => item.state === "broken");
+  const newerThanTested = [...present, ...report.providers].some((item) => item.versionVerdict === "unknown-newer");
+  const state = broken ? "attention needed" : newerThanTested ? "ready with limitations" : present.length > 0 ? "ready" : "setup needed";
   const lines = [...title(state), "WHAT WORKS"];
   if (present.length === 0)
     lines.push("  No supported coding harness was found.");
-  for (const item of report.harnesses) {
-    const stateText = item.state === "absent" ? "not found" : item.state;
-    lines.push(`  ${harnessName(item.harnessId)}: ${stateText}${item.version ? ` (${item.version})` : ""}`);
+  for (const item of present) {
+    lines.push(`  ${harnessName(item.harnessId)}: ${item.state}${item.version ? ` (${item.version})` : ""}`);
   }
-  if (report.providers.length === 0)
-    lines.push("  Providers: none detected");
-  for (const item of report.providers) {
+  if (active.length === 0)
+    lines.push("  Optimization provider: none active");
+  for (const item of active) {
     const connected = item.configuredHarnesses.map(harnessName).join(", ");
-    lines.push(truncate(`  ${item.providerId}: ${connected === "" ? item.state : `active on ${connected}`}`, MAX_WIDTH));
+    lines.push(truncate(`  ${providerName(item.providerId)}: active on ${connected}`, MAX_WIDTH));
   }
   lines.push(...changeLine(false));
-  if (report.problemCount > 0) {
-    lines.push(...next("token-harness doctor --verbose", "Review the technical findings."));
+  if (broken) {
+    lines.push(...next("token-harness doctor --verbose", "Review the integration that needs attention."));
   } else if (present.length === 0 || active.length === 0) {
     lines.push(...next("token-harness setup", "Finish the guided setup."));
+  } else if (newerThanTested) {
+    lines.push(...next("token-harness verify", "You can keep working; verify the active integrations when convenient."));
   } else {
-    lines.push(...next("token-harness ui", "Open the dashboard."));
+    lines.push(...next(null, normalWork()));
   }
   return document(lines);
 }
@@ -19463,7 +19474,7 @@ function renderSimpleSetup(report, context) {
   if (active.length === 0)
     lines.push("  Optimization provider: not active");
   for (const provider of active) {
-    lines.push(truncate(`  ${provider.providerId}: active on ${provider.configuredHarnesses.map(harnessName).join(", ")}`, MAX_WIDTH));
+    lines.push(truncate(`  ${providerName(provider.providerId)}: active on ${provider.configuredHarnesses.map(harnessName).join(", ")}`, MAX_WIDTH));
   }
   if (report.plan !== null && report.apply === null && report.plan.actions.length > 0) {
     lines.push("", "SAFE PLAN");
@@ -19473,7 +19484,7 @@ function renderSimpleSetup(report, context) {
     }
   }
   lines.push(...changeLine(report.changed, report.apply?.results.some((item) => item.status === "applied") ? "Safe configuration applied and checked." : void 0));
-  lines.push(...next(report.nextStep.command, report.nextStep.description));
+  lines.push(...next(report.nextStep.command, report.stage === "ready" && report.nextStep.command === "token-harness ui" ? "Open the dashboard once to review status; after that use your coding agent normally." : report.nextStep.description));
   return document(lines);
 }
 function renderVerboseSetup(report, context) {
@@ -19546,7 +19557,7 @@ function renderSimpleBudget(report) {
     }
   }
   lines.push(...changeLine(false));
-  lines.push(...next(observed.length > 0 ? "token-harness optimize" : "token-harness setup", observed.length > 0 ? "See the best action for the current allowance." : "Check the local installation and connections."));
+  lines.push(...next(observed.length > 0 ? "token-harness optimize" : "token-harness setup", observed.length > 0 ? "Get advice for the task you are about to start." : "Check the local installation and connections."));
   return document(lines);
 }
 function renderSimpleContext(report) {
@@ -19567,7 +19578,7 @@ function renderSimpleMcp(report) {
     lines.push(`  ${harnessName(harness.harnessId)}: ${harness.servers.length} servers, ${harness.knownToolCount} known tools`);
   }
   lines.push(...changeLine(false));
-  lines.push(...next(attention ? "token-harness mcp --verbose" : "token-harness optimize", attention ? "Review the server that needs attention." : "See whether context can be simplified."));
+  lines.push(...next(attention ? "token-harness mcp --verbose" : "token-harness optimize", attention ? "Review the server that needs attention." : "See whether context can be simplified for the next task."));
   return document(lines);
 }
 function renderSimpleOptimize(report) {
@@ -19579,15 +19590,15 @@ function renderSimpleOptimize(report) {
   if (advice.length === 0)
     lines.push("  No supported harness could be assessed.");
   for (const harness of advice) {
-    const recommendation = harness.recommendations.find((item) => item.priority === "first") ?? harness.recommendations[0];
+    const recommendation = harness.recommendations.find((item) => item.priority === "first") ?? harness.recommendations.find((item) => item.priority === "next");
     lines.push(truncate(`  ${harnessName(harness.harnessId)}: ${recommendation?.action ?? "No change recommended."}`, MAX_WIDTH));
-    const evidence2 = recommendation?.evidence[0]?.summary;
+    const evidence2 = recommendation === void 0 ? null : usefulEvidence(recommendation.evidence);
     if (evidence2)
       lines.push(truncate(`    Why: ${evidence2}`, MAX_WIDTH));
   }
   lines.push(...changeLine(false));
   const canPlan = advice.some((item) => item.recommendedEffort !== item.currentEffort || item.recommendedVerbosity !== item.currentVerbosity);
-  lines.push(...next(canPlan ? "token-harness plan --native-policy" : "token-harness ui", canPlan ? "Review the reversible recommended policy change." : "Keep the dashboard open for the next decision."));
+  lines.push(...next(canPlan ? "token-harness plan --native-policy" : null, canPlan ? "Review the reversible recommended policy change." : "No change is required now. " + normalWork()));
   return document(lines);
 }
 function renderSimplePlan(report, context) {
@@ -19616,9 +19627,9 @@ function renderSimplePlan(report, context) {
   else if (report.actions.length > 0 && report.persisted && report.planId !== null)
     lines.push(...next(`token-harness apply --plan ${report.planId} --yes`, "Apply exactly this stored plan."));
   else if (report.actions.length === 0)
-    lines.push(...next("token-harness setup", "Check detection and finish guided setup."));
+    lines.push(...report.pipelineId === null ? next("token-harness setup", "Check detection and finish guided setup.") : next(null, normalWork()));
   else
-    lines.push(...next("token-harness ui", "Open the dashboard."));
+    lines.push(...next("token-harness ui", "Open the dashboard to review the current state."));
   return document(lines);
 }
 function renderSimpleApply(report, command) {
@@ -19633,7 +19644,7 @@ function renderSimpleApply(report, command) {
   lines.push(`  Transaction: ${report.transactionId ?? "none"}`);
   lines.push(...changeLine(changed, command === "uninstall" ? "Owned configuration removed." : command === "rollback" ? "Previous configuration restored." : "Configuration applied and committed."));
   const confirmationCommand = command === "apply" && report.planId !== null ? `token-harness apply --plan ${report.planId} --yes` : `token-harness ${command} --yes`;
-  lines.push(...next(okay ? "token-harness verify" : report.outcome === "confirmation-required" ? confirmationCommand : `token-harness ${command} --verbose`, okay ? "Check that the integration works." : report.outcome === "confirmation-required" ? "Apply the reviewed change." : "Review the technical result."));
+  lines.push(...next(okay ? "token-harness verify" : report.outcome === "confirmation-required" ? confirmationCommand : `token-harness ${command} --verbose`, okay ? "Check that the integration works; a successful verify is the end of setup." : report.outcome === "confirmation-required" ? "Apply the reviewed change." : "Review the technical result."));
   return document(lines);
 }
 function renderSimpleVerify(report) {
@@ -19644,9 +19655,9 @@ function renderSimpleVerify(report) {
   if (report.results.length === 0)
     lines.push("  Nothing is configured to verify yet.");
   for (const item of report.results)
-    lines.push(truncate(`  ${item.providerId} on ${harnessName(item.harnessId)}: ${item.status}`, MAX_WIDTH));
+    lines.push(truncate(`  ${providerName(item.providerId)} on ${harnessName(item.harnessId)}: ${item.status}`, MAX_WIDTH));
   lines.push(...changeLine(false));
-  lines.push(...next(report.healthyAtDeclaredTier ? "token-harness ui" : "token-harness verify --verbose", report.healthyAtDeclaredTier ? "Open the dashboard." : "Review the failed check and suggested fix."));
+  lines.push(...next(report.healthyAtDeclaredTier ? null : "token-harness verify --verbose", report.healthyAtDeclaredTier ? normalWork() : "Review the failed check and suggested fix."));
   return document(lines);
 }
 function renderSimpleStatus(report) {
@@ -19655,11 +19666,11 @@ function renderSimpleStatus(report) {
     lines.push("  No Token Harness pipeline is active.");
   for (const pipeline of report.pipelines) {
     const providers = [...new Set(pipeline.owners.map((owner) => owner.owner))];
-    lines.push(truncate(`  ${harnessName(pipeline.harness)}: ${providers.join(" -> ") || "no provider"}`, MAX_WIDTH));
+    lines.push(truncate(`  ${harnessName(pipeline.harness)}: ${providers.map(providerName).join(" -> ") || "no provider"}`, MAX_WIDTH));
   }
   lines.push(`  Drift: ${report.drift.length === 0 ? "none" : report.drift.length}`);
   lines.push(...changeLine(false));
-  lines.push(...next(report.problemCount === 0 ? report.pipelines.length === 0 ? "token-harness setup" : "token-harness ui" : "token-harness status --verbose", report.problemCount === 0 ? report.pipelines.length === 0 ? "Finish the guided setup." : "Open the dashboard." : "Review the drift before making changes."));
+  lines.push(...next(report.problemCount === 0 ? report.pipelines.length === 0 ? "token-harness setup" : null : "token-harness status --verbose", report.problemCount === 0 ? report.pipelines.length === 0 ? "Finish the guided setup." : normalWork() : "Review the drift before making changes."));
   return document(lines);
 }
 function renderSimpleMetrics(report) {
@@ -19671,7 +19682,7 @@ function renderSimpleMetrics(report) {
     lines.push(`  ${item.class}: ${formatCount(item.saved ?? 0)} ${item.unit ?? ""} saved`);
   lines.push(`  Errors: ${report.errors}`);
   lines.push(...changeLine(false));
-  lines.push(...next("token-harness optimize", "Get the next evidence-based recommendation."));
+  lines.push(...next(null, "Measurement is complete. Use optimize before a task only when you want fresh advice."));
   return document(lines);
 }
 function renderSimpleHistory(report) {
@@ -19681,9 +19692,26 @@ function renderSimpleHistory(report) {
   for (const item of report.harnesses)
     lines.push(`  ${harnessName(item.harnessId)}: ${formatCount(item.totalTokens)} tokens, trend ${item.burnTrend.state}`);
   lines.push(...changeLine(false));
-  lines.push(...next("token-harness optimize", "Use the history in the next recommendation."));
+  lines.push(...next(null, "History is informational. Run token-harness optimize when you want task-specific advice."));
   return document(lines);
 }
+function updateStatus(item) {
+  if (item.verdict === "current")
+    return `${item.installed ?? "installed"} is current`;
+  if (item.verdict === "pinned")
+    return `kept at ${item.pin ?? item.installed ?? "installed"} (pinned)`;
+  if (item.verdict === "blocked-unreviewed")
+    return `${item.available ?? "newer version"} available; keeping ${item.installed ?? "installed"} until validated`;
+  if (item.verdict === "upgradable")
+    return `${item.installed ?? "installed"} -> ${item.available ?? "newer version"} ready`;
+  if (item.verdict === "not-installed")
+    return "not installed";
+  if (item.verdict === "no-channel")
+    return "installed; no supported update channel";
+  if (item.verdict === "unavailable")
+    return "installed; update check unavailable";
+  return "installed; update status unknown";
+}
 function renderSimpleUpdate(report) {
   const execution = report.execution;
   const changed = execution?.outcome === "committed" && execution.results.some((item) => item.status === "applied");
@@ -19691,10 +19719,11 @@ function renderSimpleUpdate(report) {
   if (report.providers.length === 0)
     lines.push("  No provider was detected.");
   for (const item of report.providers)
-    lines.push(truncate(`  ${item.providerId}: ${item.verdict}`, MAX_WIDTH));
+    lines.push(truncate(`  ${providerName(item.providerId)}: ${updateStatus(item)}`, MAX_WIDTH));
   lines.push(...changeLine(changed, "Provider update applied."));
   const pending = report.providers.some((item) => item.verdict === "upgradable");
-  lines.push(...next(pending && execution?.outcome === "confirmation-required" ? "token-harness update --yes" : "token-harness verify", pending && execution?.outcome === "confirmation-required" ? "Apply the reviewed provider update." : "Check that integrations still work."));
+  const deferred = report.providers.some((item) => item.verdict === "blocked-unreviewed");
+  lines.push(...next(pending && execution?.outcome === "confirmation-required" ? "token-harness update --yes" : changed ? "token-harness verify" : null, pending && execution?.outcome === "confirmation-required" ? "Apply the reviewed provider update." : changed ? "Check that the updated integrations still work." : deferred ? "No action required. The installed versions stay active until newer ones are validated." : normalWork()));
   return document(lines);
 }
 var init_simple = __esm({
@@ -20463,59 +20492,129 @@ function nameOf(id) {
     return "Codex";
   if (id === "opencode")
     return "OpenCode";
+  if (id === "pi")
+    return "Pi";
+  if (id === "hermes")
+    return "Hermes";
+  return id;
+}
+function providerName2(id) {
+  if (id === "harnesstrim")
+    return "HarnessTrim";
+  if (id === "rtk")
+    return "RTK";
   return id;
 }
+function usefulReason(evidence2) {
+  const useful = evidence2.find((item) => !/^0B known loaded of /i.test(item.summary) && !/^0 MCP servers/i.test(item.summary) && !/^0B of instruction candidates/i.test(item.summary));
+  return useful?.summary ?? evidence2[0]?.summary ?? null;
+}
 function buildDashboardModel(input) {
   const present = input.doctor.harnesses.filter((item) => item.state !== "absent");
-  const configured = input.doctor.providers.filter((item) => item.state === "configured" && item.configuredHarnesses.length > 0);
-  const hasProblems = input.doctor.problemCount > 0 || input.status.problemCount > 0;
-  const state = hasProblems ? "attention" : present.length === 0 || configured.length === 0 ? "setup-needed" : "ready";
-  const recommendation = input.optimize.harnesses.flatMap((harness) => harness.recommendations.map((item) => ({
+  const connectedProviders = input.doctor.providers.filter((item) => item.configuredHarnesses.length > 0);
+  const configuredProviders = connectedProviders.filter((item) => item.state === "configured");
+  const relevantHarnessIds = /* @__PURE__ */ new Set();
+  for (const provider of connectedProviders) {
+    for (const harness of provider.configuredHarnesses)
+      relevantHarnessIds.add(harness);
+  }
+  for (const item of input.budget.harnesses) {
+    if (item.windows.length > 0)
+      relevantHarnessIds.add(item.harnessId);
+  }
+  for (const pipeline of input.status.pipelines)
+    relevantHarnessIds.add(pipeline.harness);
+  const relevantHarnesses = present.filter((harness) => relevantHarnessIds.has(harness.harnessId));
+  const broken = relevantHarnesses.some((item) => item.state === "broken") || connectedProviders.some((item) => item.state === "broken");
+  const newerThanTested = relevantHarnesses.some((item) => item.versionVerdict === "unknown-newer") || connectedProviders.some((item) => item.versionVerdict === "unknown-newer");
+  const state = present.length === 0 ? "setup-needed" : broken || input.status.problemCount > 0 ? "action-needed" : configuredProviders.length === 0 ? "setup-needed" : newerThanTested ? "limited" : "ready";
+  const rankedRecommendations = input.optimize.harnesses.filter((harness) => harness.state !== "absent" && relevantHarnessIds.has(harness.harnessId)).flatMap((harness) => harness.recommendations.map((item) => ({
     harness: harness.harnessId,
     priority: item.priority,
     action: item.action,
-    reason: item.evidence[0]?.summary ?? null
+    reason: usefulReason(item.evidence)
   }))).sort((left, right) => {
     const rank = { first: 0, next: 1, optional: 2 };
     return rank[left.priority] - rank[right.priority];
-  })[0];
-  const nextStep = state === "setup-needed" ? { command: "token-harness setup", description: "Finish the guided setup." } : state === "attention" ? {
-    command: "token-harness doctor --verbose",
-    description: "Review the detected problem before changing anything."
+  });
+  const recommendation = rankedRecommendations.find((item) => item.priority !== "optional");
+  const harnesses = relevantHarnesses.map((harness) => {
+    const providerIds = configuredProviders.filter((provider) => provider.configuredHarnesses.includes(harness.harnessId)).map((provider) => provider.providerId);
+    const budget = input.budget.harnesses.find((item) => item.harnessId === harness.harnessId);
+    const health = harness.state === "broken" ? "attention" : harness.versionVerdict === "unknown-newer" ? "limited" : "active";
+    const statusLabel = health === "attention" ? "Needs attention" : health === "limited" ? "Works \xB7 newer than tested" : providerIds.length > 0 ? "Optimized" : "Available";
+    return {
+      id: harness.harnessId,
+      name: nameOf(harness.harnessId),
+      health,
+      statusLabel,
+      version: harness.version,
+      providers: providerIds.map(providerName2),
+      allowance: (budget?.windows ?? []).map((window) => ({
+        label: window.bucketName ?? window.scope,
+        remainingPercent: window.remainingPercent,
+        resetsAt: window.resetsAt,
+        confidence: window.confidence
+      }))
+    };
+  });
+  const otherHarnesses = present.filter((harness) => !relevantHarnessIds.has(harness.harnessId)).map((harness) => ({ name: nameOf(harness.harnessId), version: harness.version }));
+  const providers = configuredProviders.map((provider) => ({
+    id: provider.providerId,
+    name: providerName2(provider.providerId),
+    harnesses: provider.configuredHarnesses.map(nameOf)
+  }));
+  const copy = state === "ready" ? {
+    statusLabel: "READY",
+    headline: "Everything important is connected.",
+    summary: "Token Harness is already active through your configured integrations. This dashboard is for status and guidance; it is not a launcher.",
+    nextStep: {
+      command: null,
+      title: "Use your coding agent normally",
+      description: "Open Claude Code, Codex, or OpenCode exactly as you normally do. RTK and HarnessTrim run automatically where they are configured."
+    }
+  } : state === "limited" ? {
+    statusLabel: "READY WITH LIMITATIONS",
+    headline: "You can keep working.",
+    summary: "An active integration uses a version newer than the tested range. Token Harness will keep working read-only and stay conservative about changes.",
+    nextStep: {
+      command: "token-harness verify",
+      title: "Verify the active integrations",
+      description: "Keep using your coding agents normally. Run this check when you want evidence that the configured interception still works."
+    }
+  } : state === "action-needed" ? {
+    statusLabel: "ACTION NEEDED",
+    headline: "One active integration needs attention.",
+    summary: "Do not change providers yet. Review the live pipeline or configuration issue first; your other working integrations can remain untouched.",
+    nextStep: {
+      command: input.status.problemCount > 0 ? "token-harness status --verbose" : "token-harness doctor --verbose",
+      title: "Review the specific problem",
+      description: "The detailed command is only for the integration that needs attention. It is not part of the normal daily workflow."
+    }
   } : {
-    command: "token-harness optimize",
-    description: "Refresh advice for the task you are about to start."
+    statusLabel: "SETUP NEEDED",
+    headline: "Finish the one-time setup.",
+    summary: "A supported coding agent was not found with an active optimization provider yet.",
+    nextStep: {
+      command: "token-harness setup",
+      title: "Continue guided setup",
+      description: "Token Harness will detect what is available and propose only supported changes."
+    }
   };
   return {
     generatedAt: input.generatedAt,
     state,
-    headline: state === "ready" ? "Your coding harnesses are connected." : state === "attention" ? "One or more checks need attention." : "Finish setup to activate Token Harness.",
-    harnesses: input.doctor.harnesses.map((harness) => {
-      const budget = input.budget.harnesses.find((item) => item.harnessId === harness.harnessId);
-      return {
-        id: harness.harnessId,
-        name: nameOf(harness.harnessId),
-        state: harness.state,
-        version: harness.version,
-        providers: input.doctor.providers.filter((provider) => provider.configuredHarnesses.includes(harness.harnessId)).map((provider) => provider.providerId),
-        allowance: (budget?.windows ?? []).map((window) => ({
-          label: window.bucketName ?? window.scope,
-          remainingPercent: window.remainingPercent,
-          resetsAt: window.resetsAt,
-          confidence: window.confidence
-        }))
-      };
-    }),
-    providers: input.doctor.providers.map((provider) => ({
-      id: provider.providerId,
-      state: provider.state,
-      harnesses: provider.configuredHarnesses.map(nameOf)
-    })),
+    statusLabel: copy.statusLabel,
+    headline: copy.headline,
+    summary: copy.summary,
+    harnesses,
+    otherHarnesses,
+    providers,
     recommendation: recommendation === void 0 ? null : {
       action: `${nameOf(recommendation.harness)}: ${recommendation.action}`,
       reason: recommendation.reason
     },
-    nextStep
+    nextStep: copy.nextStep
   };
 }
 function uiAsset(path, model) {
@@ -20537,40 +20636,86 @@ var UI_USAGE, DASHBOARD_HTML, DASHBOARD_CSS, DASHBOARD_JS;
 var init_ui = __esm({
   "apps/cli/dist/src/ui.js"() {
     "use strict";
-    UI_USAGE = `token-harness ui \u2014 open a simple local dashboard
+    UI_USAGE = `token-harness ui \u2014 open the local status and guidance dashboard
 
 Usage
   token-harness ui [--no-open] [--port <number>] [--json]
 
-The dashboard listens only on 127.0.0.1 and reads the same reports as the CLI.
-It does not send data anywhere and cannot change configuration. Close it with
-Ctrl+C. Use --json for one complete dashboard snapshot without starting a server.`;
+The dashboard listens only on 127.0.0.1 and is read-only.
+It does not send data anywhere and cannot change configuration.
+It shows what is active, what needs attention, and what to do next. When the setup is ready,
+keep using Claude Code, Codex, or OpenCode normally \u2014 Token Harness does not replace their
+launch commands. Close the local dashboard server with Ctrl+C.`;
     DASHBOARD_HTML = `<!doctype html>
 <html lang="en">
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <meta name="color-scheme" content="dark">
+  <meta name="color-scheme" content="light dark">
   <title>Token Harness</title>
   <link rel="stylesheet" href="/app.css">
 </head>
 <body>
   <a class="skip" href="#main">Skip to dashboard</a>
-  <header><div class="brand"><span class="mark">TH</span><span>Token Harness</span></div><button id="refresh" type="button">Refresh</button></header>
+  <header class="topbar">
+    <div class="brand"><span class="mark" aria-hidden="true">TH</span><span>Token Harness</span></div>
+    <button id="refresh" class="secondary-button" type="button">Refresh</button>
+  </header>
   <main id="main">
-    <section class="hero" aria-labelledby="headline"><p class="eyebrow">LOCAL STATUS</p><h1 id="headline">Checking your harnesses...</h1><p id="updated" class="muted" aria-live="polite"></p></section>
-    <section id="harnesses" class="grid" aria-label="Harness status"></section>
-    <section class="panel recommendation"><p class="eyebrow">RECOMMENDATION</p><h2 id="recommendation">Waiting for observations...</h2><p id="reason" class="muted"></p></section>
-    <section class="panel next"><div><p class="eyebrow">NEXT STEP</p><code id="command">token-harness setup</code><p id="description" class="muted"></p></div><button id="copy" type="button">Copy command</button></section>
-    <section class="panel"><p class="eyebrow">PROVIDERS</p><div id="providers" class="provider-list"></div></section>
+    <section class="hero" aria-labelledby="headline">
+      <div id="status" class="status-chip">CHECKING</div>
+      <h1 id="headline">Checking your setup...</h1>
+      <p id="summary" class="hero-copy">Reading local status and guidance.</p>
+      <p id="updated" class="timestamp" aria-live="polite"></p>
+    </section>
+
+    <section class="action-card" aria-labelledby="next-title">
+      <div class="action-copy">
+        <p class="eyebrow">WHAT TO DO NOW</p>
+        <h2 id="next-title">Checking the next step...</h2>
+        <p id="description" class="supporting"></p>
+      </div>
+      <div id="command-row" class="command-row" hidden>
+        <code id="command"></code>
+        <button id="copy" class="primary-button" type="button">Copy command</button>
+      </div>
+    </section>
+
+    <section class="section" aria-labelledby="active-title">
+      <div class="section-heading">
+        <div><p class="eyebrow">ACTIVE SETUP</p><h2 id="active-title">What is working</h2></div>
+        <p class="section-note">Only active or relevant tools are shown here.</p>
+      </div>
+      <div id="harnesses" class="harness-grid" aria-live="polite"></div>
+    </section>
+
+    <section id="recommendation-panel" class="recommendation-card" aria-labelledby="recommendation-title" hidden>
+      <p class="eyebrow">USEFUL NOW</p>
+      <h2 id="recommendation-title">Recommendation</h2>
+      <p id="recommendation" class="recommendation-action"></p>
+      <p id="reason" class="supporting"></p>
+    </section>
+
+    <section id="providers-panel" class="compact-panel" aria-labelledby="providers-title" hidden>
+      <div><p class="eyebrow">ACTIVE OPTIMIZERS</p><h2 id="providers-title">Providers</h2></div>
+      <ul id="providers" class="provider-list"></ul>
+    </section>
+
+    <details id="other-panel" class="details-panel" hidden>
+      <summary id="other-summary">Other detected tools</summary>
+      <ul id="other-harnesses" class="secondary-list"></ul>
+    </details>
+
     <p id="error" class="error" role="alert"></p>
   </main>
-  <footer>Private by design. Served only from this computer.</footer>
+  <footer>
+    <strong>Local and read-only.</strong> You can close this page whenever you want. Configured optimizers keep working through their normal harness integrations.
+  </footer>
   <script src="/app.js" defer></script>
 </body>
 </html>`;
-    DASHBOARD_CSS = `:root{font-family:Inter,ui-sans-serif,system-ui,-apple-system,sans-serif;color:#f8fafc;background:#0f172a;font-synthesis:none}*{box-sizing:border-box}body{margin:0;min-height:100vh;background:radial-gradient(circle at 90% 0,#172554 0,transparent 32rem),#0f172a}button{min-height:44px;border:1px solid #475569;border-radius:10px;background:#1e293b;color:#f8fafc;padding:0 1rem;font:inherit;font-weight:700;cursor:pointer}button:hover{background:#334155}button:focus-visible,a:focus-visible{outline:3px solid #38bdf8;outline-offset:3px}.skip{position:absolute;left:-999px;top:1rem;color:#fff}.skip:focus{left:1rem}header,main,footer{width:min(1120px,calc(100% - 2rem));margin-inline:auto}header{height:76px;display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid #334155}.brand{display:flex;align-items:center;gap:.75rem;font-weight:800}.mark{display:grid;place-items:center;width:38px;height:38px;border-radius:10px;background:#22c55e;color:#052e16;font:800 14px ui-monospace,monospace}.hero{padding:4.5rem 0 2rem}.eyebrow{margin:0 0 .65rem;color:#22c55e;font:700 .75rem ui-monospace,monospace;letter-spacing:.12em}.hero h1{max-width:760px;margin:0 0 .8rem;font-size:clamp(2rem,5vw,4.4rem);line-height:1.02;letter-spacing:-.045em}.muted{color:#94a3b8;line-height:1.6}.grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1rem}.panel,.card{border:1px solid #334155;border-radius:16px;background:#172033;padding:1.4rem;box-shadow:0 16px 40px #02061733}.card-top,.next{display:flex;align-items:flex-start;justify-content:space-between;gap:1rem}.badge{border-radius:999px;padding:.35rem .65rem;background:#334155;color:#cbd5e1;font:700 .72rem ui-monospace,monospace}.badge.ready{background:#14532d;color:#bbf7d0}.badge.attention{background:#713f12;color:#fef3c7}.card h2,.panel h2{margin:.15rem 0;font-size:1.25rem}.meta{margin:.35rem 0 1.2rem;color:#94a3b8}.quota{margin-top:1rem}.quota-row{display:flex;justify-content:space-between;gap:1rem;margin-bottom:.45rem;font-size:.9rem}.quota-meta{margin:.45rem 0 0;color:#64748b;font-size:.78rem}.track{height:8px;border-radius:999px;background:#334155;overflow:hidden}.fill{height:100%;background:#22c55e;border-radius:inherit}.recommendation{margin-top:1rem}.next{margin-top:1rem;align-items:center}.next code{display:block;color:#e2e8f0;font-size:1rem;overflow-wrap:anywhere}.provider-list{display:flex;flex-wrap:wrap;gap:.65rem}.provider{border:1px solid #475569;border-radius:10px;padding:.65rem .8rem;color:#cbd5e1}.panel{margin-top:1rem}.error{color:#fecaca}.empty{color:#94a3b8}footer{padding:2.5rem 0;color:#64748b;font-size:.85rem}@media(max-width:720px){.grid{grid-template-columns:1fr}.hero{padding-top:3rem}.next{align-items:stretch;flex-direction:column}.next button{width:100%}}@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important}}`;
-    DASHBOARD_JS = `const byId=(id)=>document.getElementById(id);const text=(id,value)=>{byId(id).textContent=value};function badgeState(state){return state==='configured'||state==='detected'?'ready':state==='broken'?'attention':''}function render(model){text('headline',model.headline);text('updated','Updated '+new Date(model.generatedAt).toLocaleString());const harnesses=byId('harnesses');harnesses.replaceChildren();for(const item of model.harnesses){const card=document.createElement('article');card.className='card';const top=document.createElement('div');top.className='card-top';const heading=document.createElement('h2');heading.textContent=item.name;const badge=document.createElement('span');badge.className='badge '+badgeState(item.state);badge.textContent=item.state;top.append(heading,badge);card.append(top);const meta=document.createElement('p');meta.className='meta';meta.textContent=(item.version?'Version '+item.version+' \xB7 ':'')+(item.providers.length?item.providers.join(', ')+' active':'no provider active');card.append(meta);if(item.allowance.length===0){const empty=document.createElement('p');empty.className='empty';empty.textContent='Allowance unavailable';card.append(empty)}for(const quota of item.allowance){const box=document.createElement('div');box.className='quota';const row=document.createElement('div');row.className='quota-row';const label=document.createElement('span');label.textContent=quota.label;const value=document.createElement('strong');value.textContent=quota.remainingPercent===null?'Unknown':quota.remainingPercent+'% left';row.append(label,value);const track=document.createElement('div');track.className='track';track.setAttribute('role','progressbar');track.setAttribute('aria-label',item.name+' '+quota.label);track.setAttribute('aria-valuemin','0');track.setAttribute('aria-valuemax','100');if(quota.remainingPercent!==null){track.setAttribute('aria-valuenow',String(quota.remainingPercent));track.setAttribute('aria-valuetext',quota.remainingPercent+'% remaining')}const fill=document.createElement('div');fill.className='fill';fill.style.width=(quota.remainingPercent===null?0:Math.max(0,Math.min(100,quota.remainingPercent)))+'%';track.append(fill);const reset=document.createElement('p');reset.className='quota-meta';reset.textContent=(quota.resetsAt?'Resets '+new Date(quota.resetsAt).toLocaleString():'Reset unknown')+' \xB7 '+quota.confidence;box.append(row,track,reset);card.append(box)}harnesses.append(card)}text('recommendation',model.recommendation?model.recommendation.action:'No recommendation yet.');text('reason',model.recommendation?.reason||'More observations are needed before Token Harness recommends a change.');text('command',model.nextStep.command);text('description',model.nextStep.description);const providers=byId('providers');providers.replaceChildren();if(model.providers.length===0){const empty=document.createElement('span');empty.className='empty';empty.textContent='No provider detected';providers.append(empty)}for(const item of model.providers){const node=document.createElement('span');node.className='provider';node.textContent=item.id+' \xB7 '+(item.harnesses.length?'active on '+item.harnesses.join(', '):item.state);providers.append(node)}text('error','')}async function load(){byId('refresh').disabled=true;try{const response=await fetch('/api/status',{cache:'no-store'});if(!response.ok)throw new Error('Dashboard data is unavailable');render(await response.json())}catch(error){text('error',error instanceof Error?error.message:String(error))}finally{byId('refresh').disabled=false}}byId('refresh').addEventListener('click',load);byId('copy').addEventListener('click',async()=>{await navigator.clipboard.writeText(byId('command').textContent||'');text('updated','Command copied')});load();setInterval(()=>{if(!document.hidden)load()},30000);`;
+    DASHBOARD_CSS = `:root{font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;font-synthesis:none;--bg:#f6f8fb;--surface:#ffffff;--surface-2:#f1f5f9;--text:#111827;--muted:#5b6472;--subtle:#7b8492;--border:#dce2ea;--accent:#0f766e;--accent-strong:#115e59;--accent-soft:#ccfbf1;--warning:#92400e;--warning-soft:#fef3c7;--danger:#b42318;--danger-soft:#fee4e2;--shadow:0 14px 34px rgba(15,23,42,.08);--focus:#2563eb}*{box-sizing:border-box}html{background:var(--bg)}body{margin:0;min-height:100vh;background:linear-gradient(180deg,rgba(15,118,110,.045),transparent 240px),var(--bg);color:var(--text);font-size:16px;line-height:1.5}button{font:inherit}button:focus-visible,a:focus-visible,summary:focus-visible{outline:3px solid var(--focus);outline-offset:3px}.skip{position:absolute;left:-999px;top:1rem;z-index:10;background:var(--text);color:var(--surface);padding:.6rem .8rem;border-radius:8px}.skip:focus{left:1rem}.topbar,main,footer{width:min(1040px,calc(100% - 32px));margin-inline:auto}.topbar{height:68px;display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid var(--border)}.brand{display:flex;align-items:center;gap:.7rem;font-weight:800;letter-spacing:-.01em}.mark{display:grid;place-items:center;width:36px;height:36px;border-radius:10px;background:var(--accent);color:#fff;font:800 13px ui-monospace,SFMono-Regular,Consolas,monospace}.secondary-button,.primary-button{min-height:44px;border-radius:10px;padding:0 1rem;font-weight:750;cursor:pointer}.secondary-button{border:1px solid var(--border);background:var(--surface);color:var(--text)}.secondary-button:hover{background:var(--surface-2)}.primary-button{border:1px solid var(--accent-strong);background:var(--accent);color:#fff}.primary-button:hover{background:var(--accent-strong)}button:disabled{cursor:wait;opacity:.62}.hero{padding:54px 0 28px;max-width:780px}.status-chip{display:inline-flex;align-items:center;min-height:28px;padding:0 .65rem;border-radius:999px;background:var(--accent-soft);color:var(--accent-strong);font-size:.76rem;font-weight:850;letter-spacing:.08em}.status-chip.limited{background:var(--warning-soft);color:var(--warning)}.status-chip.action-needed{background:var(--danger-soft);color:var(--danger)}.status-chip.setup-needed{background:var(--surface-2);color:var(--muted)}.hero h1{margin:14px 0 10px;font-size:clamp(2.05rem,5vw,3.65rem);line-height:1.04;letter-spacing:-.045em}.hero-copy{margin:0;max-width:720px;color:var(--muted);font-size:1.08rem}.timestamp{margin:12px 0 0;color:var(--subtle);font-size:.82rem}.action-card{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:24px;align-items:center;padding:24px;border:1px solid color-mix(in srgb,var(--accent) 28%,var(--border));border-radius:18px;background:var(--surface);box-shadow:var(--shadow)}.eyebrow{margin:0 0 6px;color:var(--accent-strong);font-size:.72rem;font-weight:850;letter-spacing:.11em}.action-card h2,.section h2,.recommendation-card h2,.compact-panel h2{margin:0;font-size:1.18rem;letter-spacing:-.015em}.supporting{margin:7px 0 0;color:var(--muted)}.command-row{display:flex;align-items:center;gap:10px;max-width:100%}.command-row code{display:block;max-width:440px;padding:12px 14px;border:1px solid var(--border);border-radius:10px;background:var(--surface-2);color:var(--text);font:650 .88rem ui-monospace,SFMono-Regular,Consolas,monospace;overflow-wrap:anywhere}.section{padding-top:34px}.section-heading{display:flex;align-items:end;justify-content:space-between;gap:24px;margin-bottom:14px}.section-note{margin:0;color:var(--subtle);font-size:.86rem}.harness-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,300px),1fr));gap:12px}.harness-card{min-width:0;padding:18px;border:1px solid var(--border);border-radius:16px;background:var(--surface)}.harness-top{display:flex;align-items:flex-start;justify-content:space-between;gap:12px}.harness-card h3{margin:0;font-size:1.06rem}.health{display:inline-flex;align-items:center;gap:7px;flex:0 0 auto;color:var(--accent-strong);font-size:.76rem;font-weight:800}.health::before{content:"";width:8px;height:8px;border-radius:50%;background:var(--accent)}.health.limited{color:var(--warning)}.health.limited::before{background:var(--warning)}.health.attention{color:var(--danger)}.health.attention::before{background:var(--danger)}.harness-meta{margin:5px 0 0;color:var(--muted);font-size:.86rem}.provider-line{margin:13px 0 0;font-size:.9rem}.provider-line strong{font-weight:800}.allowance{margin-top:16px;padding-top:14px;border-top:1px solid var(--border)}.quota{margin-top:12px}.quota:first-child{margin-top:0}.quota-row{display:flex;justify-content:space-between;gap:16px;margin-bottom:6px;font-size:.88rem}.quota-row strong{font-variant-numeric:tabular-nums}.track{height:7px;border-radius:999px;background:var(--surface-2);overflow:hidden}.fill{height:100%;border-radius:inherit;background:var(--accent)}.quota-meta{margin:5px 0 0;color:var(--subtle);font-size:.76rem}.no-allowance{margin:14px 0 0;color:var(--subtle);font-size:.82rem}.recommendation-card,.compact-panel,.details-panel{margin-top:14px;border:1px solid var(--border);border-radius:16px;background:var(--surface)}.recommendation-card{padding:20px}.recommendation-action{margin:9px 0 0;font-weight:760}.compact-panel{display:flex;align-items:center;justify-content:space-between;gap:20px;padding:16px 18px}.provider-list,.secondary-list{margin:0;padding:0;list-style:none}.provider-list{display:flex;flex-wrap:wrap;justify-content:flex-end;gap:8px}.provider-list li{padding:7px 9px;border:1px solid var(--border);border-radius:9px;background:var(--surface-2);font-size:.82rem}.details-panel{padding:0 16px}.details-panel summary{min-height:48px;display:flex;align-items:center;cursor:pointer;color:var(--muted);font-weight:750}.secondary-list{padding:0 0 14px}.secondary-list li{padding:7px 0;border-top:1px solid var(--border);color:var(--muted);font-size:.86rem}.error{color:var(--danger);font-weight:700}footer{padding:28px 0 42px;color:var(--subtle);font-size:.82rem}footer strong{color:var(--muted)}[hidden]{display:none!important}@media(prefers-color-scheme:dark){:root{--bg:#0b1118;--surface:#111923;--surface-2:#17212d;--text:#f3f6fa;--muted:#b2bdc9;--subtle:#8996a4;--border:#273443;--accent:#2dd4bf;--accent-strong:#99f6e4;--accent-soft:#123d39;--warning:#fbbf24;--warning-soft:#422f12;--danger:#ff8a80;--danger-soft:#44201f;--shadow:0 16px 38px rgba(0,0,0,.22);--focus:#60a5fa}.primary-button{color:#062a27}.mark{color:#062a27}.action-card{border-color:#28514d}}@media(max-width:760px){.topbar,main,footer{width:min(100% - 24px,1040px)}.hero{padding:38px 0 22px}.action-card{grid-template-columns:1fr;gap:16px;padding:19px}.command-row{align-items:stretch;flex-direction:column}.command-row code{max-width:none}.command-row .primary-button{width:100%}.section{padding-top:28px}.section-heading{align-items:flex-start;flex-direction:column;gap:3px}.compact-panel{align-items:flex-start;flex-direction:column}.provider-list{justify-content:flex-start}.topbar{height:62px}}@media(max-width:390px){.hero h1{font-size:2rem}.harness-card{padding:15px}.harness-top{align-items:flex-start;flex-direction:column;gap:6px}}@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important;transition:none!important;animation:none!important}}`;
+    DASHBOARD_JS = `const byId=(id)=>document.getElementById(id);const setText=(id,value)=>{const node=byId(id);if(node)node.textContent=value};function formatReset(value){return value?'Resets '+new Date(value).toLocaleString():'Reset time unavailable'}function renderHarness(item){const card=document.createElement('article');card.className='harness-card';const top=document.createElement('div');top.className='harness-top';const title=document.createElement('h3');title.textContent=item.name;const health=document.createElement('span');health.className='health '+item.health;health.textContent=item.statusLabel;top.append(title,health);card.append(top);const meta=document.createElement('p');meta.className='harness-meta';meta.textContent=item.version?'Version '+item.version:'Version unavailable';card.append(meta);if(item.providers.length){const provider=document.createElement('p');provider.className='provider-line';const strong=document.createElement('strong');strong.textContent=item.providers.join(', ');provider.append(strong,document.createTextNode(' active automatically'));card.append(provider)}if(item.allowance.length){const allowance=document.createElement('div');allowance.className='allowance';for(const quota of item.allowance){const box=document.createElement('div');box.className='quota';const row=document.createElement('div');row.className='quota-row';const label=document.createElement('span');label.textContent=quota.label;const value=document.createElement('strong');value.textContent=quota.remainingPercent===null?'Unknown':quota.remainingPercent+'% left';row.append(label,value);const track=document.createElement('div');track.className='track';track.setAttribute('role','progressbar');track.setAttribute('aria-label',item.name+' '+quota.label);track.setAttribute('aria-valuemin','0');track.setAttribute('aria-valuemax','100');if(quota.remainingPercent!==null){track.setAttribute('aria-valuenow',String(quota.remainingPercent));track.setAttribute('aria-valuetext',quota.remainingPercent+'% remaining')}const fill=document.createElement('div');fill.className='fill';fill.style.width=(quota.remainingPercent===null?0:Math.max(0,Math.min(100,quota.remainingPercent)))+'%';track.append(fill);const detail=document.createElement('p');detail.className='quota-meta';detail.textContent=formatReset(quota.resetsAt)+(quota.confidence==='authoritative'?' \xB7 verified allowance':' \xB7 '+quota.confidence);box.append(row,track,detail);allowance.append(box)}card.append(allowance)}else{const empty=document.createElement('p');empty.className='no-allowance';empty.textContent='Allowance data is not available for this harness.';card.append(empty)}return card}function render(model){document.body.dataset.state=model.state;const status=byId('status');status.textContent=model.statusLabel;status.className='status-chip '+model.state;setText('headline',model.headline);setText('summary',model.summary);setText('updated','Updated '+new Date(model.generatedAt).toLocaleString());setText('next-title',model.nextStep.title);setText('description',model.nextStep.description);const commandRow=byId('command-row');if(model.nextStep.command){setText('command',model.nextStep.command);commandRow.hidden=false}else{setText('command','');commandRow.hidden=true}const harnesses=byId('harnesses');harnesses.replaceChildren();if(model.harnesses.length===0){const empty=document.createElement('p');empty.className='supporting';empty.textContent='No active optimized harness is available yet.';harnesses.append(empty)}for(const item of model.harnesses)harnesses.append(renderHarness(item));const recommendationPanel=byId('recommendation-panel');if(model.recommendation){setText('recommendation',model.recommendation.action);setText('reason',model.recommendation.reason||'This recommendation is based on the currently observable local signals.');recommendationPanel.hidden=false}else{recommendationPanel.hidden=true}const providersPanel=byId('providers-panel');const providers=byId('providers');providers.replaceChildren();if(model.providers.length){for(const item of model.providers){const node=document.createElement('li');node.textContent=item.name+' \xB7 '+item.harnesses.join(', ');providers.append(node)}providersPanel.hidden=false}else{providersPanel.hidden=true}const otherPanel=byId('other-panel');const other=byId('other-harnesses');other.replaceChildren();if(model.otherHarnesses.length){setText('other-summary','Other detected tools ('+model.otherHarnesses.length+')');for(const item of model.otherHarnesses){const node=document.createElement('li');node.textContent=item.name+(item.version?' \xB7 '+item.version:'')+' \xB7 detected, not active in the optimized setup';other.append(node)}otherPanel.hidden=false}else{otherPanel.hidden=true}setText('error','')}async function load(){const refresh=byId('refresh');refresh.disabled=true;refresh.textContent='Refreshing\u2026';try{const response=await fetch('/api/status',{cache:'no-store'});if(!response.ok)throw new Error('Dashboard data is unavailable');render(await response.json())}catch(error){setText('error',error instanceof Error?error.message:String(error))}finally{refresh.disabled=false;refresh.textContent='Refresh'}}byId('refresh').addEventListener('click',load);byId('copy').addEventListener('click',async()=>{const command=byId('command').textContent||'';try{await navigator.clipboard.writeText(command);setText('updated','Command copied')}catch{setText('updated','Copy unavailable \u2014 select the command manually')}});load();setInterval(()=>{if(!document.hidden)load()},30000);`;
   }
 });
 
@@ -20761,7 +20906,7 @@ async function runUi(options, baseOptions) {
     return EXIT_CODES["unsupported-environment"];
   }
   if (options.json) {
-    const exitCode = initial.state === "attention" ? EXIT_CODES["problems-found"] : EXIT_CODES.ok;
+    const exitCode = initial.state === "action-needed" ? EXIT_CODES["problems-found"] : EXIT_CODES.ok;
     process5.stdout.write(serializeEnvelope(toEnvelope(commandResult({ command: "ui", exitCode, data: initial }), TOOL_VERSION)));
     return exitCode;
   }