Checkpoint via cy-loop-tasks (iteration 11, phase B mode=tasks).

Full gate fingerprint 0aa5cdf; VC-R1..R5 and targeted lifecycle QA passed with clean teardown.

Co-Authored-By: Codex <[email protected]>

* feat: add gateway exposure foundation

* feat: Tier listeners and device authentication #2

Checkpoint via cy-loop-tasks (iteration 5, phase B mode=tasks).

Adds daemon-owned tier listeners, device authentication, secure pairing and credentials, stream tickets, live revocation, transaction mutation fencing, transport parity, generated contracts, and gateway documentation.

Co-Authored-By: Codex <[email protected]>

* feat: add connectivity provider seam

* feat: add public gateway ingress

* feat: Remote CLI profiles, operation matrix, and SSH connect #5

Checkpoint via cy-loop-tasks (iteration 11, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: add gateway self-audit and native control

* feat: Gateway operator surface and documentation #7

Checkpoint via cy-loop-tasks (iteration 15, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: QA planning for remote gateway #8

Checkpoint via cy-loop-tasks (iteration 17, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: QA execution for remote gateway #9

Checkpoint via cy-loop-tasks (iteration 19, phase B mode=tasks).

QA execution settled all reset scenarios, re-walked six fixes, passed strict evidence audit, and ended with a clean teardown. Full workstream gate remains deferred until the single final review remediation is complete.

Co-Authored-By: Codex <[email protected]>

* fix: harden remote gateway for release

Resolve the sole deep-review round across the Gateway runtime, CLI, SDKs, web UI, documentation, package boundaries, and QA evidence.

Fix nullable bridge provider configuration and preserve exact public SDK and native-tool metadata contracts.

* refactor: categorize tailscale extension under extensions/connectivity

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: final adjustments

* docs: add curated release notes for remote gateway

Co-Authored-By: Claude Fable 5 <[email protected]>

---------

Co-authored-by: Codex <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>

* feat: Schema and worktree domain core #1

Checkpoint via cy-loop-tasks (iteration 2, phase B mode=tasks).

Focused evidence: worktree race unit suite, real-Git lifecycle integration, migration integrity/equivalence, and 80.8% package coverage. Heavy gates remain deferred to the QA tail by workflow direction.

Co-Authored-By: Codex <[email protected]>

* feat: Worktree public surface: API, CLI, native tools, streams #2

Checkpoint via cy-loop-tasks (iteration 3, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Session binding, containment, spawn inheritance, fork #3

Checkpoint via cy-loop-tasks (iteration 4, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Environment policies: task worktree policy + loop environment #4

Checkpoint via cy-loop-tasks (iteration 5, phase B mode=tasks).

Validated task and Loop worktree placement across queue snapshots, lease-fenced session binding, public contracts, real Git journeys, and generated artifacts.

Co-Authored-By: Codex <[email protected]>

* feat: Assisted exit, forge.provider surface, bundled GitHub extension #…

Checkpoint via cy-loop-tasks (iteration 6, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: add web worktree navigation and lifecycle

* feat: Web: environment surfaces and assisted exit #7

Checkpoint via cy-loop-tasks (iteration 10, phase B mode=tasks).

Focused Go race suites, web tests, typecheck, and lint passed. Browser and visual evidence remain assigned to the QA tail.

Co-Authored-By: Codex <[email protected]>

* docs: document Worktree operations and agent surfaces #8

* feat: QA Plan and Session Charters #9

Checkpoint via cy-loop-tasks (iteration 14, phase B mode=tasks).

Adds the durable Worktree QA plan and closes lint, optional-state, native-tool metadata, and bundled-skill inventory gaps exposed by the full gate.

Co-Authored-By: Codex <[email protected]>

* fix: preserve operator global config at daemon boot

* fix: mount desktop shell context before projection reads

* docs: record autonomous observer mismatch replay

* fix: preserve pending worktree creation state

* fix: expose worktree config lifecycle

* fix: reject invalid worktree bases before acceptance

* fix: preserve task fanout intent identity

* fix: start native task claims in bound sessions

* test: complete worktree real-user QA

* fix: keep worktree exit menu mounted

* fix: complete worktree review remediation

* fix: reconcile main rebase contracts

* fix: lint

* docs: update design

* fix: a lot of adjustments

---------

Co-authored-by: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: P0 cleanup: hash_fields deletion, predicate policy, per-gate coun…

Checkpoint via cy-loop-tasks (iteration 2, phase B mode=tasks).

Focused race, integration, codegen, web test, and web/site typecheck evidence passed. Full gate and QA remain deferred to the loop tail by user instruction.

Co-Authored-By: Codex <[email protected]>

* feat: P1 router: route node + gate verdict routing #2

Checkpoint via cy-loop-tasks (iteration 3, phase B mode=tasks).

Focused verification includes route planner/linter race suites, migration integrity, web codec/typecheck, and E2E-008 loop status route causes; heavy project gates and QA remain deferred by the accepted loop instructions.

Co-Authored-By: Codex <[email protected]>

* feat: P2 requests core: ask node, respond plane, ResponderPolicy #3

Checkpoint via cy-loop-tasks (iteration 4, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: P3 per-lane addressing, review gate, amend overlay #4

Checkpoint via cy-loop-tasks (iteration 5, phase B mode=tasks).

Focused race verification and codegen checks passed; batch gate and live QA remain deferred by the controlling loop plan.

Co-Authored-By: Codex <[email protected]>

* feat: add fan-out strategy settlement

* feat: window wide fan-out execution

* feat: P7+P8 time travel: diff, rerun, fork + cross-cutting suites #7

Checkpoint via cy-loop-tasks (iteration 11, phase B mode=tasks).

Focused verification passed; full gate, live QA, review, and frontend work remain deferred to the post-task tail.

Co-Authored-By: Codex <[email protected]>

* fix: adjustments

* fix: errors

* docs: graph eng design

* feat: P9 web run-page surfaces (S1–S8, S10–S12) + visual contract #8

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: compose loop requests into attention

* test: plan graph completion QA

* fix: close graph QA regressions

* fix: preserve update contract after rebase

* fix: deep review

* fix: ci fixes

* fix: graph engineering request

* feat: add entity-backed typed Loop inputs

* docs: record typed Loop input QA fixes

* fix: resolve typed Loop input review findings

* fix: preserve composed request schemas in snapshots

* refactor: satisfy strict branch lint

* test: record typed Loop remediation QA

* fix: preserve workspace in native Loop config writes

* fix: satisfy React compiler checks after rebase

---------

Co-authored-by: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

#490)

* feat: Terminal core and PTY substrate #1

Checkpoint via cy-loop-tasks (iteration 2, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Wire protocol and transport #2

Checkpoint via cy-loop-tasks (iteration 3, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Persistence, journal and observability #3

Checkpoint via cy-loop-tasks (iteration 4, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Agent surfaces exec tools and write path #4

* feat: Web terminal system #5

Checkpoint via cy-loop-tasks (iteration 6, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Public activation tranche #6

Checkpoint via cy-loop-tasks (iteration 7, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: render agent-reported terminal output

* feat: Windows ConPTY adapter #8

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* fix: satisfy integrated terminal gate policies

* fix: normalize local gate classification

* fix: resolve integrated terminal review findings

* feat: QA Plan and Session Charters #9

Checkpoint via cy-loop-tasks (iteration 10, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* fix: preserve terminal workspace registration identity

* fix: complete integrated terminal QA remediation

* refactor: remove unused terminal exports

* fix: ui improvements

* fix: improvs

* fix: complete rebase integration

* fix: align product language

* fix: resolve Windows terminal executables

* test: stabilize Windows terminal reads

* test: drain Windows terminal startup output

* test: align reported terminal E2E contract

* fix: bind terminal browser ownership

* fix: stabilize terminal browser attachments

* fix: retry empty Windows terminal reads

* fix: preserve terminal sessions after creation

* fix: preserve terminal clipboard shortcuts

* test: align daemon harness profile resolution

* fix: harden terminal process shutdown

* fix: harden terminal approvals and agent guidance

* fix: harden terminal runtime lifecycle

* fix: unify terminal transport contracts

* fix: complete integrated terminal lifecycle

* build: regenerate integrated terminal contracts

* feat: rebuild integrated terminal window

Co-authored-by: Cursor <[email protected]>

* feat: rebuild integrated terminal journal

Co-authored-by: Cursor <[email protected]>

* feat: rebuild terminal input attention

Co-authored-by: Cursor <[email protected]>

* feat: rebuild terminal approval surfaces

Co-authored-by: Cursor <[email protected]>

* feat: rebuild session terminal blocks

Co-authored-by: Cursor <[email protected]>

* feat: rebuild terminal quote and settings

Co-authored-by: Cursor <[email protected]>

* docs: clarify estimated terminal journal boundaries

Co-authored-by: Cursor <[email protected]>

* fix: close integrated terminal host gaps

Co-authored-by: Cursor <[email protected]>

* fix: complete integrated terminal remediation

* fix: final review

* fix: close integrated terminal QA gaps

* fix: repair integrated terminal CI

* fix: stabilize integrated terminal CI

* fix: close integrated terminal web CI gaps

* fix: stabilize terminal detach chord

* test: stabilize loop event resume E2E

* ci: parallelize e2e lanes

* fix: close final web e2e races

* fix: close exact-head web e2e races

* fix: close exact-head e2e races

* test: stabilize terminal e2e fixtures

* fix: preserve semantic identity during retarget

* test: stabilize loop read E2E

* fix: stabilize integrated terminal and remove in-app tabs

Close is idempotent (exited terminals answer their recorded exit), the
stream client settles as closed instead of reconnecting a dead terminal,
size votes made before the socket opened are delivered on open, and the
fish shim rides vendor_conf.d without hiding the user's config. The web
terminal is window-native: one terminal per OS window, an id-less route
that adopts or creates, head-level Journal/New/Close verbs, and window
close never signals the PTY.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: repair zsh markers and resolve terminals from fresh catalog truth

The zsh marker hooks shadowed zsh's read-only status parameter, killing the
precmd hook on every prompt and dropping every finish marker; a live zsh test
now pins the clean hook. The id-less terminal route waits for a catalog fetch
from this mount before adopting or creating, so a terminal opened moments
before the window cannot be missed and duplicated. Browser journeys walk the
window-native flow end to end, and the QA tracker records the walked verdicts.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: dedupe worktrees spec imports after rebase

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: split protocol client wiring and align desktop terminal flow

Co-Authored-By: Claude Fable 5 <[email protected]>

* test: assert reattach liveness on the focused restored terminal

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: terminal fonts

* fix: render agent-internal commands as plain session output

Pull ADR-012 door 3 (`_meta.terminal_output`): the daemon no longer opts
into agent-reported terminal output, and the whole reported pipeline goes
with it — ACP ingestion and suppression, the `agent_reported` origin,
contract/stream payload fields, transcript codec/replay, acpmock steps,
and the web "reported by agent" xterm blocks. Agent-internal commands
render as plain command output again; the deliberate S3 supervised block
and the ACP pipe door stay untouched.

Co-Authored-By: Claude Fable 5 <[email protected]>

* feat: materialize agent-opened terminals as desktop windows

A daemon bridge observes terminal opened events and, for agent-actor
interactive PTY terminals (terminal_open, terminal_exec visible:true),
opens a managed Terminal window in the workspace window model — on the
desktop showing the bound session, never moving focus, one-shot per
terminal, deduped by instance key, and never failing the tool call.
Pipe terminals and human actors materialize nothing.

The transcript now recognizes real agent traffic: hosted-MCP tool names
(mcp__<server>__compozy__*) normalize to their native ids for the S3
supervised block and row labels, MCP string envelopes decode so
terminal_id reaches the block, and the remaining terminal tools carry
registered labels. E2E-003 asserts the window materializes without
stealing focus.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: steer agents to the integrated terminal and refresh its truth surfaces

Terminal tool descriptors now lead with the desktop-window capability,
the official skill documents the windows contract and the
write-wait-read loop, and the site docs replace the agent-reported
block section with the plain-output and window-materialization truth.
QA tracker updated for ADR-019: the reported-terminal scenario is
deleted, affected scenarios were reset and re-walked with a real Haiku
agent in an isolated lab, and a new materialization scenario records
the walk (docs/qa/reports/2026-09-01-terminal-rework.md).

Co-Authored-By: Claude Fable 5 <[email protected]>

* ci: retrigger PR checks for the terminal rework head

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: renumber terminal migration and settle generated artifacts after rebase

Main's loop work took 00098/00099, so the workspace-deletion-intents
migration moves to the next gap-free version (00100), atlas.sum is
rehashed for the unpublished tail, and the SDK contract chunks
regenerate to the merged truth.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: reconcile pointer actor and ahead sentinel after second rebase

Main's new loop tests construct ActionExecutionInput with a value actor
while this branch moved the field to *task.ActorContext; the merged call
sites now take the pointer. The global ahead-schema fixtures pinned
version 100, which the renumbered terminal migration just occupied —
they use the 999 sentinel the other streams already use.

Co-Authored-By: Claude Fable 5 <[email protected]>

* docs: increase deep review limits

* fix: remediate integrated terminal review

* test: align rebased suites with main contracts

* fix: repair rebased CI regressions

* fix: skill triggering

---------

Co-authored-by: Codex <[email protected]>
Co-authored-by: Cursor <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>